ci starts bisection 2023-11-17 01:33:07.618043689 +0000 UTC m=+287750.593209513 bisecting cause commit starting from f31817cbcf48d191faee7cebfb59197d2048cd64 building syzkaller on cb976f63e0177b96eb9ce1c631cc5e2c4b4b0759 fetch other tags and check if the commit is present ensuring issue is reproducible on original commit f31817cbcf48d191faee7cebfb59197d2048cd64 testing commit f31817cbcf48d191faee7cebfb59197d2048cd64 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: da38dabb3fb4dd7a88503f57d15ec75f5a28d1c568d1cb0a7fd0fe1037ddd235 all runs: crashed: inconsistent lock state in ptrace_attach representative crash: inconsistent lock state in ptrace_attach, types: [LOCKDEP] check whether we can drop unnecessary instrumentation disabling configs for [HANG LEAK UBSAN BUG KASAN ATOMIC_SLEEP], they are not needed testing commit f31817cbcf48d191faee7cebfb59197d2048cd64 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7bbeacf6804ac17bf3ad930db6d2e34ebb201f6d5f161a75d61486c5fd8ff2e8 all runs: crashed: inconsistent lock state in ptrace_attach representative crash: inconsistent lock state in ptrace_attach, types: [LOCKDEP] the bug reproduces without the instrumentation disabling configs for [UBSAN BUG KASAN ATOMIC_SLEEP HANG LEAK], they are not needed kconfig minimization: base=3923 full=7662 leaves diff=2007 split chunks (needed=false): <2007> split chunk #0 of len 2007 into 5 parts testing without sub-chunk 1/5 disabling configs for [LEAK UBSAN BUG KASAN ATOMIC_SLEEP HANG], they are not needed testing commit f31817cbcf48d191faee7cebfb59197d2048cd64 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ef66ef28ea49710266311e11733b6cfaccdadb5c5d0eafe187ad082c7644bffb all runs: crashed: inconsistent lock state in ptrace_attach representative crash: inconsistent lock state in ptrace_attach, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [HANG LEAK UBSAN BUG KASAN ATOMIC_SLEEP], they are not needed testing commit f31817cbcf48d191faee7cebfb59197d2048cd64 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c8190067ef3fc33d7c6de1342e00321d5263012d1eb899c5ae927db9b0bc7944 all runs: crashed: inconsistent lock state in ptrace_attach representative crash: inconsistent lock state in ptrace_attach, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [LEAK UBSAN BUG KASAN ATOMIC_SLEEP HANG], they are not needed testing commit f31817cbcf48d191faee7cebfb59197d2048cd64 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: eae18dc04a52082e5112fb6bc10f3ab92771b31e20554063088168fc4ed477d7 all runs: crashed: inconsistent lock state in ptrace_attach representative crash: inconsistent lock state in ptrace_attach, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [UBSAN BUG KASAN ATOMIC_SLEEP HANG LEAK], they are not needed testing commit f31817cbcf48d191faee7cebfb59197d2048cd64 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 52c696250c1359881cbcb80969417f923d30a1fdf44a3a8dc3b3e959c63d73c2 all runs: crashed: inconsistent lock state in ptrace_attach representative crash: inconsistent lock state in ptrace_attach, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [HANG LEAK UBSAN BUG KASAN ATOMIC_SLEEP], they are not needed testing commit f31817cbcf48d191faee7cebfb59197d2048cd64 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 386777fa2deb7e9aa71d67adce8de1269e4858e588c02fff1a6a3748f9b46e04 all runs: crashed: inconsistent lock state in ptrace_attach representative crash: inconsistent lock state in ptrace_attach, types: [LOCKDEP] the chunk can be dropped disabling configs for [BUG KASAN ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed picked [v6.6 v6.5 v6.4 v6.2 v6.0 v5.18 v5.16 v5.14 v5.11 v5.8 v5.5 v5.2 v4.20 v4.19] out of 29 release tags testing release v6.6 testing commit ffc253263a1375a65fa6c9f62a893e9767fbebfa gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 45561ed97256bb9fcb26520196a3c3b6108b8c5580352bbecd0a61fb32671e55 all runs: OK false negative chance: 0.000 # git bisect start f31817cbcf48d191faee7cebfb59197d2048cd64 ffc253263a1375a65fa6c9f62a893e9767fbebfa Bisecting: 8958 revisions left to test after this (roughly 13 steps) [90d624af2e5a9945eedd5cafd6ae6d88f32cc977] Merge tag 'for-6.7/block-2023-10-30' of git://git.kernel.dk/linux testing commit 90d624af2e5a9945eedd5cafd6ae6d88f32cc977 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 767862e3d641b378ac3202a609526338376da2b1d03792af0d470f64f913fa3c all runs: OK false negative chance: 0.000 # git bisect good 90d624af2e5a9945eedd5cafd6ae6d88f32cc977 Bisecting: 4435 revisions left to test after this (roughly 12 steps) [4c7a0c95adc3ed8cc5e4c2187521aea3e40ba1aa] Merge tag 'staging-6.7-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging testing commit 4c7a0c95adc3ed8cc5e4c2187521aea3e40ba1aa gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0b37043c03da100d18606a2545a062f2995d0b1eb69e7412937e3cdc7820c25a all runs: OK false negative chance: 0.000 # git bisect good 4c7a0c95adc3ed8cc5e4c2187521aea3e40ba1aa Bisecting: 2189 revisions left to test after this (roughly 11 steps) [a12deb44f9734dc25970c266249b272e44d3d1b5] Merge tag 'input-for-v6.7-rc0' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input testing commit a12deb44f9734dc25970c266249b272e44d3d1b5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: bf2882ce0768e036fb1eccd183ec6b7f842a49b2339e29d7db4ac4d9c25f9ed6 all runs: OK false negative chance: 0.000 # git bisect good a12deb44f9734dc25970c266249b272e44d3d1b5 Bisecting: 1097 revisions left to test after this (roughly 10 steps) [aa46c822c860e637ae5274456602957ba9a2bdd6] Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/gfs2/linux-gfs2.git testing commit aa46c822c860e637ae5274456602957ba9a2bdd6 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 29a9a190c472dc690722990bdd0382fca54d2f83695af0b20c327bd74e5a7e25 all runs: OK false negative chance: 0.000 # git bisect good aa46c822c860e637ae5274456602957ba9a2bdd6 Bisecting: 539 revisions left to test after this (roughly 9 steps) [08cd0abf75416688371a1f34c613601a0b78512e] Merge branch 'for-linux-next' of git://anongit.freedesktop.org/drm-intel testing commit 08cd0abf75416688371a1f34c613601a0b78512e gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 25bcf3f885d0a2a197e6661512d23e450f54a5dc2cd3befa4199f0090c26ceae all runs: OK false negative chance: 0.000 # git bisect good 08cd0abf75416688371a1f34c613601a0b78512e Bisecting: 269 revisions left to test after this (roughly 8 steps) [d86a60ea19ad06df6621afcded1c420aebfe6555] Merge branch 'next' of git://git.kernel.org/pub/scm/virt/kvm/kvm.git testing commit d86a60ea19ad06df6621afcded1c420aebfe6555 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a8eab3f17133195196b282025ecbc419cd1bdc7327326eb3b2416e52691c6920 all runs: crashed: inconsistent lock state in ptrace_attach representative crash: inconsistent lock state in ptrace_attach, types: [LOCKDEP] # git bisect bad d86a60ea19ad06df6621afcded1c420aebfe6555 Bisecting: 142 revisions left to test after this (roughly 7 steps) [dad9767b4ff19b0456aae0b9cdf7dee443f8bd7f] Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator.git testing commit dad9767b4ff19b0456aae0b9cdf7dee443f8bd7f gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c2a9123cfa1d0ebbbd653e55ef3bed5d1993f2095e70378617d877d0cd1764d7 all runs: OK false negative chance: 0.000 # git bisect good dad9767b4ff19b0456aae0b9cdf7dee443f8bd7f Bisecting: 77 revisions left to test after this (roughly 6 steps) [9ddb15d2ba347e402f9be941ffaf41277f1f33b7] Merge branch into tip/master: 'x86/percpu' testing commit 9ddb15d2ba347e402f9be941ffaf41277f1f33b7 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 29fc7ed9745a2487341f1a6728d1bb330849e04a3cf08c695af0d589aee699ec all runs: crashed: inconsistent lock state in ptrace_attach representative crash: inconsistent lock state in ptrace_attach, types: [LOCKDEP] # git bisect bad 9ddb15d2ba347e402f9be941ffaf41277f1f33b7 Bisecting: 33 revisions left to test after this (roughly 5 steps) [bf6309805f29d306f3b3fce8c8661ce91b702134] Merge branch into tip/master: 'ras/core' testing commit bf6309805f29d306f3b3fce8c8661ce91b702134 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0c01d6d34bc9e4612779cacd057d3670539f5eaa62742e0ec7171b58ec3beb4b all runs: crashed: inconsistent lock state in ptrace_attach representative crash: inconsistent lock state in ptrace_attach, types: [LOCKDEP] # git bisect bad bf6309805f29d306f3b3fce8c8661ce91b702134 Bisecting: 13 revisions left to test after this (roughly 4 steps) [eee3215dcd95254994574454135d854e6b1c82d9] Merge branch into tip/master: 'x86/urgent' testing commit eee3215dcd95254994574454135d854e6b1c82d9 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e5b9b66a427a7233d3bf1a9a0edfe5a704558b114bd9add5508aae2c82c45cb5 all runs: OK false negative chance: 0.000 # git bisect good eee3215dcd95254994574454135d854e6b1c82d9 Bisecting: 6 revisions left to test after this (roughly 3 steps) [652ffc2104ec1f69dd4a46313888c33527145ccf] perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file testing commit 652ffc2104ec1f69dd4a46313888c33527145ccf gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 622cc0b273461b8c82a3b18a068ffd7285d121d240a15ffac31501053f7ce1e1 all runs: OK false negative chance: 0.000 # git bisect good 652ffc2104ec1f69dd4a46313888c33527145ccf Bisecting: 3 revisions left to test after this (roughly 2 steps) [8c52bec9b5c1a37dcf909700a7f22b930cc5c8ae] Merge branch into tip/master: 'locking/core' testing commit 8c52bec9b5c1a37dcf909700a7f22b930cc5c8ae gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3c8abb5f569231139e4acccba2f79d1bedd94444a67daadfe78336c6cefb0ebb all runs: crashed: inconsistent lock state in ptrace_attach representative crash: inconsistent lock state in ptrace_attach, types: [LOCKDEP] # git bisect bad 8c52bec9b5c1a37dcf909700a7f22b930cc5c8ae Bisecting: 0 revisions left to test after this (roughly 1 step) [2d25a889601d2fbc87ec79b30ea315820f874b78] ptrace: Convert ptrace_attach() to use lock guards testing commit 2d25a889601d2fbc87ec79b30ea315820f874b78 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d66cd64d811418dbfd7a419af331918bcb0a6288447d68cd45cd9f1ba60739ab all runs: crashed: inconsistent lock state in ptrace_attach representative crash: inconsistent lock state in ptrace_attach, types: [LOCKDEP] # git bisect bad 2d25a889601d2fbc87ec79b30ea315820f874b78 Bisecting: 0 revisions left to test after this (roughly 0 steps) [e4ab322fbaaaf84b23d6cb0e3317a7f68baf36dc] cleanup: Add conditional guard support testing commit e4ab322fbaaaf84b23d6cb0e3317a7f68baf36dc gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8d708841cd36f94b673f8468336773984d592539ab56a89126f60324e7330910 all runs: OK false negative chance: 0.000 # git bisect good e4ab322fbaaaf84b23d6cb0e3317a7f68baf36dc 2d25a889601d2fbc87ec79b30ea315820f874b78 is the first bad commit commit 2d25a889601d2fbc87ec79b30ea315820f874b78 Author: Peter Zijlstra Date: Sun Sep 17 13:24:21 2023 +0200 ptrace: Convert ptrace_attach() to use lock guards Created as testing for the conditional guard infrastructure. Specifically this makes use of the following form: scoped_cond_guard (mutex_intr, return -ERESTARTNOINTR, &task->signal->cred_guard_mutex) { ... } ... return 0; Signed-off-by: Peter Zijlstra (Intel) Reviewed-by: Oleg Nesterov Link: https://lkml.kernel.org/r/20231102110706.568467727%40infradead.org include/linux/sched/task.h | 2 + include/linux/spinlock.h | 26 +++++++++ kernel/ptrace.c | 128 +++++++++++++++++++++------------------------ 3 files changed, 89 insertions(+), 67 deletions(-) accumulated error probability: 0.00 culprit signature: d66cd64d811418dbfd7a419af331918bcb0a6288447d68cd45cd9f1ba60739ab parent signature: 8d708841cd36f94b673f8468336773984d592539ab56a89126f60324e7330910 revisions tested: 22, total time: 7h15m15.376446473s (build: 2h27m23.936699369s, test: 4h26m8.763511187s) first bad commit: 2d25a889601d2fbc87ec79b30ea315820f874b78 ptrace: Convert ptrace_attach() to use lock guards recipients (to): ["linux-kernel@vger.kernel.org" "mingo@redhat.com" "oleg@redhat.com" "oleg@redhat.com" "peterz@infradead.org" "peterz@infradead.org" "will@kernel.org"] recipients (cc): ["boqun.feng@gmail.com" "brauner@kernel.org" "longman@redhat.com" "michael.christie@oracle.com" "mst@redhat.com" "wander@redhat.com"] crash: inconsistent lock state in ptrace_attach ================================ WARNING: inconsistent lock state 6.7.0-rc1-syzkaller #0 Not tainted -------------------------------- inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage. syz-executor193/29835 [HC0[0]:SC0[0]:HE1:SE1] takes: ffff888106a81a58 (&sighand->siglock){?.-.}-{2:2}, at: spin_lock include/linux/spinlock.h:351 [inline] ffff888106a81a58 (&sighand->siglock){?.-.}-{2:2}, at: class_spinlock_constructor include/linux/spinlock.h:530 [inline] ffff888106a81a58 (&sighand->siglock){?.-.}-{2:2}, at: ptrace_set_stopped kernel/ptrace.c:391 [inline] ffff888106a81a58 (&sighand->siglock){?.-.}-{2:2}, at: ptrace_attach+0x18b/0x2a0 kernel/ptrace.c:478 {IN-HARDIRQ-W} state was registered at: lock_acquire kernel/locking/lockdep.c:5753 [inline] lock_acquire+0xcd/0x2d0 kernel/locking/lockdep.c:5718 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x3a/0x50 kernel/locking/spinlock.c:162 __lock_task_sighand+0x67/0x1a0 kernel/signal.c:1422 lock_task_sighand include/linux/sched/signal.h:745 [inline] send_sigqueue+0xac/0x350 kernel/signal.c:1996 posix_timer_event kernel/time/posix-timers.c:298 [inline] posix_timer_fn+0x58/0xc0 kernel/time/posix-timers.c:324 __run_hrtimer kernel/time/hrtimer.c:1688 [inline] __hrtimer_run_queues+0x199/0x330 kernel/time/hrtimer.c:1752 hrtimer_interrupt+0xfd/0x230 kernel/time/hrtimer.c:1814 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1065 [inline] __sysvec_apic_timer_interrupt+0x7e/0x1b0 arch/x86/kernel/apic/apic.c:1082 sysvec_apic_timer_interrupt+0x8b/0xb0 arch/x86/kernel/apic/apic.c:1076 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] _raw_spin_unlock_irqrestore+0x31/0x70 kernel/locking/spinlock.c:194 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] unlock_timer kernel/time/posix-timers.c:128 [inline] do_timer_settime+0xe7/0x110 kernel/time/posix-timers.c:934 __do_sys_timer_settime kernel/time/posix-timers.c:954 [inline] __se_sys_timer_settime kernel/time/posix-timers.c:940 [inline] __x64_sys_timer_settime+0xee/0x110 kernel/time/posix-timers.c:940 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x40/0xe0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x63/0x6b irq event stamp: 299 hardirqs last enabled at (299): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (299): [] _raw_spin_unlock_irqrestore+0x4e/0x70 kernel/locking/spinlock.c:194 hardirqs last disabled at (298): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline] hardirqs last disabled at (298): [] _raw_spin_lock_irqsave+0x4e/0x50 kernel/locking/spinlock.c:162 softirqs last enabled at (234): [] local_bh_enable include/linux/bottom_half.h:33 [inline] softirqs last enabled at (234): [] fpregs_unlock arch/x86/include/asm/fpu/api.h:80 [inline] softirqs last enabled at (234): [] fpu_clone+0xf9/0x2e0 arch/x86/kernel/fpu/core.c:634 softirqs last disabled at (232): [] local_bh_disable include/linux/bottom_half.h:20 [inline] softirqs last disabled at (232): [] fpregs_lock arch/x86/include/asm/fpu/api.h:72 [inline] softirqs last disabled at (232): [] fpu_clone+0xcc/0x2e0 arch/x86/kernel/fpu/core.c:630 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&sighand->siglock); lock(&sighand->siglock); *** DEADLOCK *** 2 locks held by syz-executor193/29835: #0: ffff888104e8d688 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: class_mutex_intr_constructor include/linux/mutex.h:225 [inline] #0: ffff888104e8d688 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: ptrace_attach+0xad/0x2a0 kernel/ptrace.c:455 #1: ffffffff82406098 (tasklist_lock){++++}-{2:2}, at: class_write_lock_constructor include/linux/spinlock.h:564 [inline] #1: ffffffff82406098 (tasklist_lock){++++}-{2:2}, at: ptrace_attach+0x12e/0x2a0 kernel/ptrace.c:464 stack backtrace: CPU: 0 PID: 29835 Comm: syz-executor193 Not tainted 6.7.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x5c/0xb0 lib/dump_stack.c:106 print_usage_bug kernel/locking/lockdep.c:3970 [inline] valid_state kernel/locking/lockdep.c:4012 [inline] mark_lock_irq kernel/locking/lockdep.c:4215 [inline] mark_lock+0x698/0x7d0 kernel/locking/lockdep.c:4677 mark_usage kernel/locking/lockdep.c:4586 [inline] __lock_acquire+0x399/0x1ab0 kernel/locking/lockdep.c:5090 lock_acquire kernel/locking/lockdep.c:5753 [inline] lock_acquire+0xcd/0x2d0 kernel/locking/lockdep.c:5718 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:351 [inline] class_spinlock_constructor include/linux/spinlock.h:530 [inline] ptrace_set_stopped kernel/ptrace.c:391 [inline] ptrace_attach+0x18b/0x2a0 kernel/ptrace.c:478 __do_sys_ptrace+0xa1/0x150 kernel/ptrace.c:1290 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x40/0xe0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x63/0x6b RIP: 0033:0x7faaba080f89 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007faaba042238 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 RAX: ffffffffffffffda RBX: 00007faa