------------[ cut here ]------------ ====================================================== WARNING: possible circular locking dependency detected 5.15.0-syzkaller #0 Not tainted ------------------------------------------------------ syz-executor.1/25029 is trying to acquire lock: ffffffff8c9f9e78 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x1c/0x90 kernel/locking/semaphore.c:138 but task is already holding lock: ffff8880b9a2a258 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_interrupt+0x107/0x1040 kernel/time/hrtimer.c:1792 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #4 (hrtimer_bases.lock){-.-.}-{2:2}: lock_acquire+0x19f/0x4d0 kernel/locking/lockdep.c:5625 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd1/0x120 kernel/locking/spinlock.c:162 lock_hrtimer_base kernel/time/hrtimer.c:173 [inline] hrtimer_start_range_ns+0xe1/0x1ae0 kernel/time/hrtimer.c:1296 hrtimer_start_expires include/linux/hrtimer.h:432 [inline] start_rt_bandwidth kernel/sched/rt.c:72 [inline] inc_rt_group kernel/sched/rt.c:1193 [inline] inc_rt_tasks kernel/sched/rt.c:1237 [inline] __enqueue_rt_entity kernel/sched/rt.c:1413 [inline] enqueue_rt_entity+0x883/0xe60 kernel/sched/rt.c:1459 enqueue_task_rt+0xd4/0x390 kernel/sched/rt.c:1494 enqueue_task+0x17f/0x3d0 kernel/sched/core.c:1999 __sched_setscheduler+0x1545/0x1f50 kernel/sched/core.c:7429 _sched_setscheduler kernel/sched/core.c:7475 [inline] sched_setscheduler_nocheck kernel/sched/core.c:7522 [inline] sched_set_fifo+0x10a/0x1d0 kernel/sched/core.c:7546 drm_vblank_worker_init+0x149/0x190 drivers/gpu/drm/drm_vblank_work.c:263 drm_vblank_init+0x279/0x340 drivers/gpu/drm/drm_vblank.c:551 vkms_create drivers/gpu/drm/vkms/vkms_drv.c:194 [inline] vkms_init+0x37d/0x71a drivers/gpu/drm/vkms/vkms_drv.c:233 do_one_initcall+0xbd/0x2b0 init/main.c:1295 do_initcall_level+0x14a/0x1f5 init/main.c:1368 do_initcalls+0x4b/0x8c init/main.c:1384 kernel_init_freeable+0x43a/0x5c6 init/main.c:1606 kernel_init+0x19/0x2a0 init/main.c:1497 ret_from_fork+0x1f/0x30 -> #3 (&rt_b->rt_runtime_lock){-.-.}-{2:2}: lock_acquire+0x19f/0x4d0 kernel/locking/lockdep.c:5625 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:154 __enable_runtime kernel/sched/rt.c:829 [inline] rq_online_rt+0x120/0x300 kernel/sched/rt.c:2416 set_rq_online kernel/sched/core.c:8931 [inline] sched_cpu_activate+0x500/0x6a0 kernel/sched/core.c:9036 cpuhp_invoke_callback+0x4cc/0x850 kernel/cpu.c:190 cpuhp_thread_fun+0x3f1/0x790 kernel/cpu.c:784 smpboot_thread_fn+0x533/0x9d0 kernel/smpboot.c:164 kthread+0x468/0x490 kernel/kthread.c:327 ret_from_fork+0x1f/0x30 -> #2 (&rq->__lock){-.-.}-{2:2}: lock_acquire+0x19f/0x4d0 kernel/locking/lockdep.c:5625 _raw_spin_lock_nested+0x2d/0x40 kernel/locking/spinlock.c:368 raw_spin_rq_lock_nested+0x25/0x110 kernel/sched/core.c:478 raw_spin_rq_lock kernel/sched/sched.h:1315 [inline] rq_lock kernel/sched/sched.h:1613 [inline] task_fork_fair+0x5d/0x3c0 kernel/sched/fair.c:11193 sched_post_fork+0x2d1/0x330 kernel/sched/core.c:4445 copy_process+0x519a/0x5ca0 kernel/fork.c:2405 kernel_clone+0x22a/0x7e0 kernel/fork.c:2581 kernel_thread+0x155/0x1d0 kernel/fork.c:2633 rest_init+0x21/0x2e0 init/main.c:690 start_kernel+0x4bf/0x56e init/main.c:1133 secondary_startup_64_no_verify+0xb1/0xbb -> #1 (&p->pi_lock){-.-.}-{2:2}: lock_acquire+0x19f/0x4d0 kernel/locking/lockdep.c:5625 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd1/0x120 kernel/locking/spinlock.c:162 try_to_wake_up+0x9f/0xd20 kernel/sched/core.c:4000 up+0x6d/0x90 kernel/locking/semaphore.c:190 __up_console_sem+0x11a/0x1e0 kernel/printk/printk.c:254 console_unlock+0x6e8/0xe90 kernel/printk/printk.c:2727 vt_disallocate drivers/tty/vt/vt_ioctl.c:640 [inline] vt_ioctl+0x2c2f/0x3860 drivers/tty/vt/vt_ioctl.c:903 tty_ioctl+0xfb2/0x17d0 drivers/tty/tty_io.c:2805 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl+0xfb/0x170 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae -> #0 ((console_sem).lock){-.-.}-{2:2}: check_prev_add kernel/locking/lockdep.c:3051 [inline] check_prevs_add kernel/locking/lockdep.c:3174 [inline] validate_chain+0x1dfb/0x8240 kernel/locking/lockdep.c:3789 __lock_acquire+0x1382/0x2b00 kernel/locking/lockdep.c:5015 lock_acquire+0x19f/0x4d0 kernel/locking/lockdep.c:5625 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd1/0x120 kernel/locking/spinlock.c:162 down_trylock+0x1c/0x90 kernel/locking/semaphore.c:138 __down_trylock_console_sem+0x105/0x250 kernel/printk/printk.c:237 console_trylock kernel/printk/printk.c:2542 [inline] console_trylock_spinning+0x8a/0x3f0 kernel/printk/printk.c:1843 vprintk_emit+0xa1/0x140 kernel/printk/printk.c:2244 _printk+0xcf/0x118 kernel/printk/printk.c:2266 __warn_printk+0xaf/0x120 kernel/panic.c:642 debug_print_object lib/debugobjects.c:505 [inline] debug_object_deactivate+0x1cf/0x400 lib/debugobjects.c:763 debug_hrtimer_deactivate kernel/time/hrtimer.c:425 [inline] debug_deactivate kernel/time/hrtimer.c:481 [inline] __run_hrtimer kernel/time/hrtimer.c:1653 [inline] __hrtimer_run_queues+0x2f9/0xa60 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x3b3/0x1040 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline] __sysvec_apic_timer_interrupt+0xf9/0x270 arch/x86/kernel/apic/apic.c:1103 sysvec_apic_timer_interrupt+0x8c/0xb0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 __sanitizer_cov_trace_pc+0x42/0x60 kernel/kcov.c:202 vga16fb_fillrect+0x17bf/0x1c10 drivers/video/fbdev/vga16fb.c:922 bit_clear+0x3f9/0x640 drivers/video/fbdev/core/bitblit.c:74 fbcon_scroll+0x4cd/0x4130 drivers/video/fbdev/core/fbcon.c:1784 con_scroll+0x517/0x7b0 drivers/tty/vt/vt.c:630 lf drivers/tty/vt/vt.c:1507 [inline] vc_con_write_normal drivers/tty/vt/vt.c:2851 [inline] do_con_write+0x171a/0xe3b0 drivers/tty/vt/vt.c:2955 con_put_char+0x90/0xe0 drivers/tty/vt/vt.c:3303 tty_put_char+0xda/0x180 drivers/tty/tty_io.c:3173 do_output_char+0x583/0x940 drivers/tty/n_tty.c:485 process_output drivers/tty/n_tty.c:511 [inline] n_tty_write+0xe95/0x1320 drivers/tty/n_tty.c:2300 do_tty_write drivers/tty/tty_io.c:1038 [inline] file_tty_write+0x5c5/0x9a0 drivers/tty/tty_io.c:1110 call_write_iter include/linux/fs.h:2161 [inline] new_sync_write fs/read_write.c:503 [inline] vfs_write+0xb11/0xe90 fs/read_write.c:590 ksys_write+0x18f/0x2c0 fs/read_write.c:643 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae other info that might help us debug this: Chain exists of: (console_sem).lock --> &rt_b->rt_runtime_lock --> hrtimer_bases.lock Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(hrtimer_bases.lock); lock(&rt_b->rt_runtime_lock); lock(hrtimer_bases.lock); lock((console_sem).lock); *** DEADLOCK *** 6 locks held by syz-executor.1/25029: #0: ffff88807bc61098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88807bc61130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: tty_write_lock drivers/tty/tty_io.c:961 [inline] #1: ffff88807bc61130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: do_tty_write drivers/tty/tty_io.c:984 [inline] #1: ffff88807bc61130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write+0x271/0x9a0 drivers/tty/tty_io.c:1110 #2: ffff88807bc612e8 (&tty->termios_rwsem){++++}-{3:3}, at: n_tty_write+0x23e/0x1320 drivers/tty/n_tty.c:2271 #3: ffffc90001a98378 (&ldata->output_lock){+.+.}-{3:3}, at: process_output drivers/tty/n_tty.c:508 [inline] #3: ffffc90001a98378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0xe7f/0x1320 drivers/tty/n_tty.c:2300 #4: ffffffff8c9f9ee0 (console_lock){+.+.}-{0:0}, at: do_con_write+0x11c/0xe3b0 drivers/tty/vt/vt.c:2908 #5: ffff8880b9a2a258 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_interrupt+0x107/0x1040 kernel/time/hrtimer.c:1792 stack backtrace: CPU: 0 PID: 25029 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1dc/0x2d8 lib/dump_stack.c:106 check_noncircular+0x2f9/0x3b0 kernel/locking/lockdep.c:2131 check_prev_add kernel/locking/lockdep.c:3051 [inline] check_prevs_add kernel/locking/lockdep.c:3174 [inline] validate_chain+0x1dfb/0x8240 kernel/locking/lockdep.c:3789 __lock_acquire+0x1382/0x2b00 kernel/locking/lockdep.c:5015 lock_acquire+0x19f/0x4d0 kernel/locking/lockdep.c:5625 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd1/0x120 kernel/locking/spinlock.c:162 down_trylock+0x1c/0x90 kernel/locking/semaphore.c:138 __down_trylock_console_sem+0x105/0x250 kernel/printk/printk.c:237 console_trylock kernel/printk/printk.c:2542 [inline] console_trylock_spinning+0x8a/0x3f0 kernel/printk/printk.c:1843 vprintk_emit+0xa1/0x140 kernel/printk/printk.c:2244 _printk+0xcf/0x118 kernel/printk/printk.c:2266 __warn_printk+0xaf/0x120 kernel/panic.c:642 debug_print_object lib/debugobjects.c:505 [inline] debug_object_deactivate+0x1cf/0x400 lib/debugobjects.c:763 debug_hrtimer_deactivate kernel/time/hrtimer.c:425 [inline] debug_deactivate kernel/time/hrtimer.c:481 [inline] __run_hrtimer kernel/time/hrtimer.c:1653 [inline] __hrtimer_run_queues+0x2f9/0xa60 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x3b3/0x1040 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline] __sysvec_apic_timer_interrupt+0xf9/0x270 arch/x86/kernel/apic/apic.c:1103 sysvec_apic_timer_interrupt+0x8c/0xb0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 RIP: 0010:__sanitizer_cov_trace_pc+0x42/0x60 kernel/kcov.c:202 Code: ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 a4 15 00 00 00 74 2c 8b 91 80 15 00 00 83 fa 02 75 21 48 8b 91 88 15 00 00 48 8b 32 <48> 8d 7e 01 8b 89 84 15 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 RSP: 0018:ffffc90004c2f120 EFLAGS: 00000246 RAX: ffffffff845cd25f RBX: 0000000000000001 RCX: ffff88807e1e9d00 RDX: ffffc9000b322000 RSI: 000000000003ffff RDI: 0000000000040000 RBP: 0000000000000000 R08: ffffffff845cd233 R09: ffffffff845cc338 R10: 0000000000000002 R11: ffff88807e1e9d00 R12: 0000000000000000 R13: 0000000000000008 R14: ffff888000253c8f R15: 0000000000000007 vga16fb_fillrect+0x17bf/0x1c10 drivers/video/fbdev/vga16fb.c:922 bit_clear+0x3f9/0x640 drivers/video/fbdev/core/bitblit.c:74 fbcon_scroll+0x4cd/0x4130 drivers/video/fbdev/core/fbcon.c:1784 con_scroll+0x517/0x7b0 drivers/tty/vt/vt.c:630 lf drivers/tty/vt/vt.c:1507 [inline] vc_con_write_normal drivers/tty/vt/vt.c:2851 [inline] do_con_write+0x171a/0xe3b0 drivers/tty/vt/vt.c:2955 con_put_char+0x90/0xe0 drivers/tty/vt/vt.c:3303 tty_put_char+0xda/0x180 drivers/tty/tty_io.c:3173 do_output_char+0x583/0x940 drivers/tty/n_tty.c:485 process_output drivers/tty/n_tty.c:511 [inline] n_tty_write+0xe95/0x1320 drivers/tty/n_tty.c:2300 do_tty_write drivers/tty/tty_io.c:1038 [inline] file_tty_write+0x5c5/0x9a0 drivers/tty/tty_io.c:1110 call_write_iter include/linux/fs.h:2161 [inline] new_sync_write fs/read_write.c:503 [inline] vfs_write+0xb11/0xe90 fs/read_write.c:590 ksys_write+0x18f/0x2c0 fs/read_write.c:643 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f58c7462ae9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f58c49d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f58c7575f60 RCX: 00007f58c7462ae9 RDX: 00000000000001b7 RSI: 0000000020001040 RDI: 0000000000000004 RBP: 00007f58c74bcf25 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe1c382caf R14: 00007f58c49d8300 R15: 0000000000022000 ODEBUG: deactivate not available (active state 0) object type: hrtimer hint: hrtimer_wakeup+0x0/0x70 include/trace/events/timer.h:279 WARNING: CPU: 0 PID: 25029 at lib/debugobjects.c:508 debug_print_object lib/debugobjects.c:505 [inline] WARNING: CPU: 0 PID: 25029 at lib/debugobjects.c:508 debug_object_deactivate+0x1cf/0x400 lib/debugobjects.c:763 Modules linked in: CPU: 0 PID: 25029 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:debug_print_object lib/debugobjects.c:505 [inline] RIP: 0010:debug_object_deactivate+0x1cf/0x400 lib/debugobjects.c:763 Code: df e8 75 06 b7 fd 4c 8b 03 48 c7 c7 20 a0 d4 8a 48 c7 c6 c0 9b d4 8a 48 c7 c2 60 a2 d4 8a 31 c9 49 89 e9 31 c0 e8 81 63 35 fd <0f> 0b e9 4e 01 00 00 83 f8 04 0f 85 89 00 00 00 48 89 14 24 48 8b RSP: 0018:ffffc90000007cd0 EFLAGS: 00010046 RAX: 63f785a20b376a00 RBX: ffffffff8a715be0 RCX: ffff88807e1e9d00 RDX: 0000000000010001 RSI: 0000000000010001 RDI: 0000000000000000 RBP: ffffffff81738190 R08: ffffffff8169d302 R09: ffffed1017344f2c R10: ffffed1017344f2c R11: 0000000000000000 R12: dffffc0000000000 R13: 1ffff1100003b47a R14: ffffffff8a715be8 R15: ffff8880001da3d0 FS: 00007f58c49d8700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055555564a808 CR3: 0000000047a62000 CR4: 00000000003506f0 Call Trace: debug_hrtimer_deactivate kernel/time/hrtimer.c:425 [inline] debug_deactivate kernel/time/hrtimer.c:481 [inline] __run_hrtimer kernel/time/hrtimer.c:1653 [inline] __hrtimer_run_queues+0x2f9/0xa60 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x3b3/0x1040 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline] __sysvec_apic_timer_interrupt+0xf9/0x270 arch/x86/kernel/apic/apic.c:1103 sysvec_apic_timer_interrupt+0x8c/0xb0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 RIP: 0010:__sanitizer_cov_trace_pc+0x42/0x60 kernel/kcov.c:202 Code: ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 a4 15 00 00 00 74 2c 8b 91 80 15 00 00 83 fa 02 75 21 48 8b 91 88 15 00 00 48 8b 32 <48> 8d 7e 01 8b 89 84 15 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 RSP: 0018:ffffc90004c2f120 EFLAGS: 00000246 RAX: ffffffff845cd25f RBX: 0000000000000001 RCX: ffff88807e1e9d00 RDX: ffffc9000b322000 RSI: 000000000003ffff RDI: 0000000000040000 RBP: 0000000000000000 R08: ffffffff845cd233 R09: ffffffff845cc338 R10: 0000000000000002 R11: ffff88807e1e9d00 R12: 0000000000000000 R13: 0000000000000008 R14: ffff888000253c8f R15: 0000000000000007 vga16fb_fillrect+0x17bf/0x1c10 drivers/video/fbdev/vga16fb.c:922 bit_clear+0x3f9/0x640 drivers/video/fbdev/core/bitblit.c:74 fbcon_scroll+0x4cd/0x4130 drivers/video/fbdev/core/fbcon.c:1784 con_scroll+0x517/0x7b0 drivers/tty/vt/vt.c:630 lf drivers/tty/vt/vt.c:1507 [inline] vc_con_write_normal drivers/tty/vt/vt.c:2851 [inline] do_con_write+0x171a/0xe3b0 drivers/tty/vt/vt.c:2955 con_put_char+0x90/0xe0 drivers/tty/vt/vt.c:3303 tty_put_char+0xda/0x180 drivers/tty/tty_io.c:3173 do_output_char+0x583/0x940 drivers/tty/n_tty.c:485 process_output drivers/tty/n_tty.c:511 [inline] n_tty_write+0xe95/0x1320 drivers/tty/n_tty.c:2300 do_tty_write drivers/tty/tty_io.c:1038 [inline] file_tty_write+0x5c5/0x9a0 drivers/tty/tty_io.c:1110 call_write_iter include/linux/fs.h:2161 [inline] new_sync_write fs/read_write.c:503 [inline] vfs_write+0xb11/0xe90 fs/read_write.c:590 ksys_write+0x18f/0x2c0 fs/read_write.c:643 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f58c7462ae9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f58c49d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f58c7575f60 RCX: 00007f58c7462ae9 RDX: 00000000000001b7 RSI: 0000000020001040 RDI: 0000000000000004 RBP: 00007f58c74bcf25 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe1c382caf R14: 00007f58c49d8300 R15: 0000000000022000 ---------------- Code disassembly (best guess): 0: ff 00 incl (%rax) 2: 74 11 je 0x15 4: f7 c2 00 01 00 00 test $0x100,%edx a: 74 35 je 0x41 c: 83 b9 a4 15 00 00 00 cmpl $0x0,0x15a4(%rcx) 13: 74 2c je 0x41 15: 8b 91 80 15 00 00 mov 0x1580(%rcx),%edx 1b: 83 fa 02 cmp $0x2,%edx 1e: 75 21 jne 0x41 20: 48 8b 91 88 15 00 00 mov 0x1588(%rcx),%rdx 27: 48 8b 32 mov (%rdx),%rsi * 2a: 48 8d 7e 01 lea 0x1(%rsi),%rdi <-- trapping instruction 2e: 8b 89 84 15 00 00 mov 0x1584(%rcx),%ecx 34: 48 39 cf cmp %rcx,%rdi 37: 73 08 jae 0x41 39: 48 89 44 f2 08 mov %rax,0x8(%rdx,%rsi,8) 3e: 48 rex.W 3f: 89 .byte 0x89