ci starts bisection 2023-04-30 19:27:23.576116409 +0000 UTC m=+166312.138190941 bisecting fixing commit since eb7081409f94a9a8608593d0fb63a1aa3d6f95d8 building syzkaller on 9da37ae85383e0dda5fc114ec808909f72fe038d ensuring issue is reproducible on original commit eb7081409f94a9a8608593d0fb63a1aa3d6f95d8 testing commit eb7081409f94a9a8608593d0fb63a1aa3d6f95d8 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: d29ded249b2c0dd0de8ee011e70014540f259c7fc23a4d8495acc641a0c3b577 run #0: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx run #1: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx run #2: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx run #3: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx run #4: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx run #5: crashed: BUG: stored value of X_recv is zero at net/dccp/ccids/ccid3.c:LINE/ccid3_first_li() run #6: crashed: BUG: stored value of X_recv is zero at net/dccp/ccids/ccid3.c:LINE/ccid3_first_li() run #7: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx run #8: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx run #9: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx run #10: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx run #11: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx run #12: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx run #13: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx run #14: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx run #15: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx run #16: crashed: BUG: stored value of X_recv is zero at net/dccp/ccids/ccid3.c:LINE/ccid3_first_li() run #17: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx run #18: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx run #19: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx testing current HEAD 825a0714d2b3883d4f8ff64f6933fb73ee3f1834 testing commit 825a0714d2b3883d4f8ff64f6933fb73ee3f1834 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: d001346c8c62347564b606f1bce6ed25bf75e9af7fcaf9f204a953282227c7fa run #0: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx run #1: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx run #2: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx run #3: crashed: BUG: stored value of X_recv is zero at net/dccp/ccids/ccid3.c:LINE/ccid3_first_li() run #4: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx run #5: crashed: BUG: stored value of X_recv is zero at net/dccp/ccids/ccid3.c:LINE/ccid3_first_li() run #6: crashed: BUG: stored value of X_recv is zero at net/dccp/ccids/ccid3.c:LINE/ccid3_first_li() run #7: crashed: BUG: stored value of X_recv is zero at net/dccp/ccids/ccid3.c:LINE/ccid3_first_li() run #8: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx run #9: crashed: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx revisions tested: 2, total time: 24m6.677310521s (build: 16m40.881622944s, test: 6m25.999892018s) the crash still happens on HEAD commit msg: Merge tag 'efi-next-for-v6.4' of git://git.kernel.org/pub/scm/linux/kernel/git/efi/efi crash: BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx Negotiation of local Allow Short Seqnos failed in state CHANGING at net/dccp/feat.c:1537/dccp_feat_activate_values() BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:417/tfrc_rx_hist_sample_rtt() CPU: 0 PID: 6083 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 Call Trace: dump_stack_lvl+0x167/0x220 tfrc_rx_hist_sample_rtt+0x2d6/0x3e0 ccid3_hc_rx_packet_recv+0x56f/0xe60 dccp_rcv_established+0x153/0x250 dccp_v4_do_rcv+0xc6/0x190 __sk_receive_skb+0x36e/0x880 ip_protocol_deliver_rcu+0x62/0xa20 ip_local_deliver_finish+0x21d/0x460 NF_HOOK+0x255/0x300 NF_HOOK+0x255/0x300 __netif_receive_skb+0x1b7/0x4f0 process_backlog+0x2dd/0x640 __napi_poll+0x94/0x380 net_rx_action+0x6c0/0xe10 __do_softirq+0x2ab/0x908 do_softirq+0x166/0x250 __local_bh_enable_ip+0x1b5/0x1f0 dccp_sendmsg+0x17c/0x870 ____sys_sendmsg+0x4aa/0x780 __sys_sendmmsg+0x336/0x650 __x64_sys_sendmmsg+0x9b/0xb0 do_syscall_64+0x41/0xc0 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f506608c189 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5066e00168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 00007f50661abf80 RCX: 00007f506608c189 RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 RBP: 00007f50660e7b01 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd1a0e9d9f R14: 00007f5066e00300 R15: 0000000000022000 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:417/tfrc_rx_hist_sample_rtt() CPU: 0 PID: 6099 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 Call Trace: dump_stack_lvl+0x167/0x220 tfrc_rx_hist_sample_rtt+0x2d6/0x3e0 ccid3_hc_rx_packet_recv+0x56f/0xe60 dccp_rcv_established+0x153/0x250 dccp_v4_do_rcv+0xc6/0x190 __sk_receive_skb+0x36e/0x880 ip_protocol_deliver_rcu+0x62/0xa20 ip_local_deliver_finish+0x21d/0x460 NF_HOOK+0x255/0x300 NF_HOOK+0x255/0x300 __netif_receive_skb+0x1b7/0x4f0 process_backlog+0x2dd/0x640 __napi_poll+0x94/0x380 net_rx_action+0x6c0/0xe10 __do_softirq+0x2ab/0x908 __irq_exit_rcu+0x159/0x240 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x95/0xb0 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:__local_bh_enable_ip+0x170/0x1f0 Code: 89 e8 94 84 5b 08 65 66 8b 05 6c cd b7 7e 66 85 c0 75 57 bf 01 00 00 00 e8 1d e9 08 00 e8 d8 7b 36 00 fb 65 8b 05 38 cd b7 7e <85> c0 75 05 e8 37 95 b4 ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c RSP: 0018:ffffc90009887720 EFLAGS: 00000282 RAX: 0000000080000000 RBX: 1ffff92001310ee8 RCX: ffffffff8161506a RDX: dffffc0000000000 RSI: ffffffff89ea70e0 RDI: ffffffff8a39e380 RBP: ffffc900098877d0 R08: dffffc0000000000 R09: fffffbfff1e0d250 R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 R13: 1ffff92001310eec R14: ffffc90009887760 R15: 0000000000000201 dccp_sendmsg+0x2c3/0x870 ____sys_sendmsg+0x4aa/0x780 __sys_sendmmsg+0x336/0x650 __x64_sys_sendmmsg+0x9b/0xb0 do_syscall_64+0x41/0xc0 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f506608c189 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5066e00168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 00007f50661abf80 RCX: 00007f506608c189 RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 RBP: 00007f50660e7b01 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd1a0e9d9f R14: 00007f5066e00300 R15: 0000000000022000 Negotiation of local Allow Short Seqnos failed in state CHANGING at net/dccp/feat.c:1537/dccp_feat_activate_values() Negotiation of local Allow Short Seqnos failed in state CHANGING at net/dccp/feat.c:1537/dccp_feat_activate_values() BUG: stored value of X_recv is zero at net/dccp/ccids/ccid3.c:691/ccid3_first_li() CPU: 0 PID: 6339 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 Call Trace: dump_stack_lvl+0x167/0x220 ccid3_first_li+0x27c/0x340 tfrc_lh_interval_add+0x4e7/0x6f0 tfrc_rx_handle_loss+0x673/0x1720 ccid3_hc_rx_packet_recv+0x28a/0xe60 dccp_rcv_established+0x153/0x250 dccp_v4_do_rcv+0xc6/0x190 __sk_receive_skb+0x36e/0x880 ip_protocol_deliver_rcu+0x62/0xa20 ip_local_deliver_finish+0x21d/0x460 NF_HOOK+0x255/0x300 NF_HOOK+0x255/0x300 __netif_receive_skb+0x1b7/0x4f0 process_backlog+0x2dd/0x640 __napi_poll+0x94/0x380 net_rx_action+0x6c0/0xe10 __do_softirq+0x2ab/0x908 do_softirq+0x166/0x250 __local_bh_enable_ip+0x1b5/0x1f0 dccp_sendmsg+0x36a/0x870 ____sys_sendmsg+0x4aa/0x780 __sys_sendmmsg+0x336/0x650 __x64_sys_sendmmsg+0x9b/0xb0 do_syscall_64+0x41/0xc0 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f506608c189 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5066e00168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 00007f50661abf80 RCX: 00007f506608c189 RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 RBP: 00007f50660e7b01 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd1a0e9d9f R14: 00007f5066e00300 R15: 0000000000022000 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:417/tfrc_rx_hist_sample_rtt() CPU: 0 PID: 6372 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 Call Trace: dump_stack_lvl+0x167/0x220 tfrc_rx_hist_sample_rtt+0x2d6/0x3e0 ccid3_hc_rx_packet_recv+0x56f/0xe60 dccp_rcv_established+0x153/0x250 dccp_v4_do_rcv+0xc6/0x190 __sk_receive_skb+0x36e/0x880 ip_protocol_deliver_rcu+0x62/0xa20 ip_local_deliver_finish+0x21d/0x460 NF_HOOK+0x255/0x300 NF_HOOK+0x255/0x300 __netif_receive_skb+0x1b7/0x4f0 process_backlog+0x2dd/0x640 __napi_poll+0x94/0x380 net_rx_action+0x6c0/0xe10 __do_softirq+0x2ab/0x908 __irq_exit_rcu+0x159/0x240 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x95/0xb0 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:unwind_next_frame+0x9ad/0x2200 Code: 23 48 8d 5f 01 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 48 8b 54 24 28 0f 85 07 14 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 30 <84> c0 0f 85 1f 14 00 00 48 0f bf 07 49 01 c4 48 8d 5a 01 48 8b 44 RSP: 0018:ffffc90002d1f1b0 EFLAGS: 00000a06 RAX: 0000000000000000 RBX: ffffffff8e37ce01 RCX: ffffffff8e37ce00 RDX: ffffffff8e37ce04 RSI: 000000000008e001 RDI: ffffffff8e37ce00 RBP: 0000000000000004 R08: 0000000000000001 R09: ffffc90002d1f370 R10: ffffc90002d1f2d0 R11: dffffc0000000001 R12: ffffc90002d1f8d0 R13: 1ffff920005a3e50 R14: dffffc0000000000 R15: ffffc90002d1f280 arch_stack_walk+0x111/0x140 stack_trace_save+0x117/0x1c0 kasan_set_track+0x4f/0x70 kasan_save_free_info+0x2b/0x40 ____kasan_slab_free+0xd6/0x120 __kmem_cache_free+0x264/0x3c0 skb_release_data+0x4c7/0x6d0 kfree_skb_reason+0x103/0x240 dccp_write_xmit+0x53/0x180 dccp_sendmsg+0x546/0x870 ____sys_sendmsg+0x4aa/0x780 __sys_sendmmsg+0x336/0x650 __x64_sys_sendmmsg+0x9b/0xb0 do_syscall_64+0x41/0xc0 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f506608c189 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5066e00168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 00007f50661abf80 RCX: 00007f506608c189 RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 RBP: 00007f50660e7b01 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd1a0e9d9f R14: 00007f5066e00300 R15: 0000000000022000 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:417/tfrc_rx_hist_sample_rtt() CPU: 0 PID: 6390 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 Call Trace: dump_stack_lvl+0x167/0x220 tfrc_rx_hist_sample_rtt+0x2d6/0x3e0 ccid3_hc_rx_packet_recv+0x56f/0xe60 dccp_rcv_established+0x153/0x250 dccp_v4_do_rcv+0xc6/0x190 __sk_receive_skb+0x36e/0x880 ip_protocol_deliver_rcu+0x62/0xa20 ip_local_deliver_finish+0x21d/0x460 NF_HOOK+0x255/0x300 NF_HOOK+0x255/0x300 __netif_receive_skb+0x1b7/0x4f0 process_backlog+0x2dd/0x640 __napi_poll+0x94/0x380 net_rx_action+0x6c0/0xe10 __do_softirq+0x2ab/0x908 __irq_exit_rcu+0x159/0x240 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x95/0xb0 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:unwind_next_frame+0x193b/0x2200 Code: 24 70 0f 85 0c 01 00 00 48 bb 00 00 00 00 00 fc ff df 48 8b 44 24 50 80 3c 18 00 74 05 e8 7d 10 90 00 4c 8b 7d 38 48 8d 7d 08 <48> 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 63 10 90 00 4c 8b 75 08 RSP: 0018:ffffc90002d1ef70 EFLAGS: 00000246 RAX: 1ffff920005a3e0f RBX: dffffc0000000000 RCX: 1ffff920005a3e08 RDX: dffffc0000000000 RSI: ffffc90002d18000 RDI: ffffc90002d1f048 RBP: ffffc90002d1f040 R08: ffffc90002d1fef0 R09: 0000000000000000 R10: ffffc90002d1f090 R11: dffffc0000000001 R12: 1ffffffff1c498a4 R13: 1ffff920005a3e09 R14: ffffffff8e24c51e R15: ffffc90002d1ff00 arch_stack_walk+0x111/0x140 stack_trace_save+0x117/0x1c0 kasan_set_track+0x4f/0x70 __kasan_kmalloc+0x98/0xb0 __kmalloc_node_track_caller+0xb6/0x230 kmalloc_reserve+0xd1/0x1f0 __alloc_skb+0x143/0x3b0 alloc_skb_with_frags+0x82/0x640 sock_alloc_send_pskb+0x7f3/0x8f0 dccp_sendmsg+0x2b4/0x870 ____sys_sendmsg+0x4aa/0x780 __sys_sendmmsg+0x336/0x650 __x64_sys_sendmmsg+0x9b/0xb0 do_syscall_64+0x41/0xc0 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f506608c189 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5066e00168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 00007f50661abf80 RCX: 00007f506608c189 RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 RBP: 00007f50660e7b01 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd1a0e9d9f R14: 00007f5066e00300 R15: 0000000000022000 ---------------- Code disassembly (best guess): 0: 89 e8 mov %ebp,%eax 2: 94 xchg %eax,%esp 3: 84 5b 08 test %bl,0x8(%rbx) 6: 65 66 8b 05 6c cd b7 mov %gs:0x7eb7cd6c(%rip),%ax # 0x7eb7cd7a d: 7e e: 66 85 c0 test %ax,%ax 11: 75 57 jne 0x6a 13: bf 01 00 00 00 mov $0x1,%edi 18: e8 1d e9 08 00 callq 0x8e93a 1d: e8 d8 7b 36 00 callq 0x367bfa 22: fb sti 23: 65 8b 05 38 cd b7 7e mov %gs:0x7eb7cd38(%rip),%eax # 0x7eb7cd62 * 2a: 85 c0 test %eax,%eax <-- trapping instruction 2c: 75 05 jne 0x33 2e: e8 37 95 b4 ff callq 0xffb4956a 33: 48 c7 44 24 20 0e 36 movq $0x45e0360e,0x20(%rsp) 3a: e0 45 3c: 49 rex.WB 3d: c7 .byte 0xc7 3e: 04 1c add $0x1c,%al