ci2 starts bisection 2025-08-07 20:59:24.500233679 +0000 UTC m=+38480.799278485 bisecting cause commit starting from 6e64f4580381e32c06ee146ca807c555b8f73e24 building syzkaller on 04cffc22d57a9014cb89df6c9f44de50d2eb2b9b ensuring issue is reproducible on original commit 6e64f4580381e32c06ee146ca807c555b8f73e24 testing commit 6e64f4580381e32c06ee146ca807c555b8f73e24 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 4f875421404c79a036934be06332d1c88b64ee213bb361c463341e4c4d1819eb all runs: crashed: WARNING in __vmap_pages_range_noflush representative crash: WARNING in __vmap_pages_range_noflush, types: [WARNING] check whether we can drop unnecessary instrumentation disabling configs for [atomic_sleep hang memleak ubsan kasan locking], they are not needed testing commit 6e64f4580381e32c06ee146ca807c555b8f73e24 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 0a776524a34e38fd3bc820bd200e64542e6e05ad94c8cdff2923e8acc787646e all runs: OK false negative chance: 0.000 kconfig minimization: base=4088 full=8348 leaves diff=2177 split chunks (needed=false): <2177> split chunk #0 of len 2177 into 5 parts testing without sub-chunk 1/5 testing commit 6e64f4580381e32c06ee146ca807c555b8f73e24 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: df91c005cfcb96fd99cf423cf8aebe220535424f35f8b838b7f71cd5af86ee86 all runs: crashed: WARNING in __vmap_pages_range_noflush representative crash: WARNING in __vmap_pages_range_noflush, types: [WARNING] the chunk can be dropped testing without sub-chunk 2/5 testing commit 6e64f4580381e32c06ee146ca807c555b8f73e24 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: e7d3f8923475609d90dec69f46bb65ed9025681a165da2c80b214eeeb5bf5a53 all runs: crashed: WARNING in __vmap_pages_range_noflush representative crash: WARNING in __vmap_pages_range_noflush, types: [WARNING] the chunk can be dropped testing without sub-chunk 3/5 testing commit 6e64f4580381e32c06ee146ca807c555b8f73e24 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 4ca975197e01b7820f5773220c97476269e1f65808e5a1da4b0a2e39618c4838 all runs: crashed: WARNING in __vmap_pages_range_noflush representative crash: WARNING in __vmap_pages_range_noflush, types: [WARNING] the chunk can be dropped testing without sub-chunk 4/5 testing commit 6e64f4580381e32c06ee146ca807c555b8f73e24 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: aa8f9b08ac69e414ae2e1e32e01c35fb8fe1ca2f612630df65bec50b5b4630a3 all runs: crashed: WARNING in __vmap_pages_range_noflush representative crash: WARNING in __vmap_pages_range_noflush, types: [WARNING] the chunk can be dropped testing without sub-chunk 5/5 testing commit 6e64f4580381e32c06ee146ca807c555b8f73e24 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: a4b50251856b0a1a7d438b29aa3cfffc4b13171919babff53cd75fb48863cc1f all runs: crashed: WARNING in __vmap_pages_range_noflush representative crash: WARNING in __vmap_pages_range_noflush, types: [WARNING] the chunk can be dropped picked [v6.16 v6.15 v6.14 v6.12 v6.10 v6.8 v6.6 v6.4 v6.1 v5.18 v5.15 v5.12 v5.9 v5.6 v5.3 v5.0 v4.19] out of 39 release tags testing release v6.16 testing commit 038d61fd642278bab63ee8ef722c50d10ab01e8f gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 6aa220e5054ef77589b2ae5cae63fb657f7cf3e269afcc4a01c92dcde38b092b all runs: crashed: WARNING in __vmap_pages_range_noflush representative crash: WARNING in __vmap_pages_range_noflush, types: [WARNING] testing release v6.15 testing commit 0ff41df1cb268fc69e703a08a57ee14ae967d0ca gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: e23d7a2b953fa525443d6bdae0d0da804c36b738a7be5304f23d02b0e3aad413 all runs: crashed: WARNING in __vmap_pages_range_noflush representative crash: WARNING in __vmap_pages_range_noflush, types: [WARNING] testing release v6.14 testing commit 38fec10eb60d687e30c8c6b5420d86e8149f7557 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: bb09bd544356050609770d5dbe5c80c2b4b5f5943d0541e40cdf47346799ec03 all runs: crashed: WARNING in __vmap_pages_range_noflush representative crash: WARNING in __vmap_pages_range_noflush, types: [WARNING] testing release v6.12 testing commit adc218676eef25575469234709c2d87185ca223a gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 0d3e8e7ed793625068310e3439f7c435051c9fe3a5bc8eaf5f2a919626df39e2 all runs: OK false negative chance: 0.000 # git bisect start 38fec10eb60d687e30c8c6b5420d86e8149f7557 adc218676eef25575469234709c2d87185ca223a Bisecting: 13139 revisions left to test after this (roughly 14 steps) [af215c980c1fbf1ca01675b128b0dd194745b880] Merge tag 'drm-fixes-2024-12-20' of https://gitlab.freedesktop.org/drm/kernel testing commit af215c980c1fbf1ca01675b128b0dd194745b880 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: a018a3f1b0a5bfcb2d38c62c4c2bfa1f8c3c4b810d9758994fe3b8a3cbde6976 all runs: OK false negative chance: 0.000 # git bisect good af215c980c1fbf1ca01675b128b0dd194745b880 Bisecting: 6500 revisions left to test after this (roughly 13 steps) [c9c0543b52d8cfe3a3b15d1e39ab9dbc91be6df4] Merge tag 'platform-drivers-x86-v6.14-1' of git://git.kernel.org/pub/scm/linux/kernel/git/pdx86/platform-drivers-x86 testing commit c9c0543b52d8cfe3a3b15d1e39ab9dbc91be6df4 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 4d568274b340ea75ffeba94a4eceb8cba557c63c1e12222798640b38214873f8 all runs: crashed: WARNING in __vmap_pages_range_noflush representative crash: WARNING in __vmap_pages_range_noflush, types: [WARNING] # git bisect bad c9c0543b52d8cfe3a3b15d1e39ab9dbc91be6df4 Bisecting: 3245 revisions left to test after this (roughly 12 steps) [96c84703f1cf6ea43617f9565166681cd71df104] Merge tag 'drm-next-2025-01-17' of https://gitlab.freedesktop.org/drm/kernel testing commit 96c84703f1cf6ea43617f9565166681cd71df104 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: cd00f2001c2e5683ca8e1b26f5d0d29282b7e1a636043c5cd8426b407388478b all runs: crashed: WARNING in __vmap_pages_range_noflush representative crash: WARNING in __vmap_pages_range_noflush, types: [WARNING] # git bisect bad 96c84703f1cf6ea43617f9565166681cd71df104 Bisecting: 1652 revisions left to test after this (roughly 11 steps) [1cbfb828e05171ca2dd77b5988d068e6872480fe] Merge tag 'for-6.14/block-20250118' of git://git.kernel.dk/linux testing commit 1cbfb828e05171ca2dd77b5988d068e6872480fe gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 5ec7183f5785c6abf43c1de0daa49b274a7290810aaad1611c443b43df2f77a2 all runs: OK false negative chance: 0.000 # git bisect good 1cbfb828e05171ca2dd77b5988d068e6872480fe Bisecting: 831 revisions left to test after this (roughly 10 steps) [9cc3e4e9f4ba6a090e3b4869fea8f292b98309ac] Merge tag 'drm-xe-next-2025-01-07' of https://gitlab.freedesktop.org/drm/xe/kernel into drm-next testing commit 9cc3e4e9f4ba6a090e3b4869fea8f292b98309ac gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: e3e90d4a5fa56c60d570f923c035140dba9c33b818936585bc9728307355fcb4 all runs: OK false negative chance: 0.000 # git bisect good 9cc3e4e9f4ba6a090e3b4869fea8f292b98309ac Bisecting: 404 revisions left to test after this (roughly 9 steps) [62de6e1685269e1637a6c6684c8be58cc8d4ff38] Merge tag 'sched-core-2025-01-21' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip testing commit 62de6e1685269e1637a6c6684c8be58cc8d4ff38 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 6ec14b7b72344587f57c46a00c7df82ecdbd1983d5ca4ade232becf5b3960242 all runs: crashed: WARNING in __vmap_pages_range_noflush representative crash: WARNING in __vmap_pages_range_noflush, types: [WARNING] # git bisect bad 62de6e1685269e1637a6c6684c8be58cc8d4ff38 Bisecting: 214 revisions left to test after this (roughly 8 steps) [d3504411a45e01a7bd7187bab7bcae0a9041514a] Merge tag 'ras_core_for_v6.14_rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip testing commit d3504411a45e01a7bd7187bab7bcae0a9041514a gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 5f4a08e033157df62368e9b6d207968c2310c0fa936a094f4a109cce57f04696 all runs: crashed: WARNING in __vmap_pages_range_noflush representative crash: WARNING in __vmap_pages_range_noflush, types: [WARNING] # git bisect bad d3504411a45e01a7bd7187bab7bcae0a9041514a Bisecting: 104 revisions left to test after this (roughly 7 steps) [4f42d0bf72253dd01e9a8d168e28706803c98a9d] Merge tag 's390-6.14-1' of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux testing commit 4f42d0bf72253dd01e9a8d168e28706803c98a9d gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: b1bf78cfcf17cf8a5459bc701b0d014823dc6b2fe9051d34ad411bd4ba5357fb all runs: crashed: WARNING in __vmap_pages_range_noflush representative crash: WARNING in __vmap_pages_range_noflush, types: [WARNING] # git bisect bad 4f42d0bf72253dd01e9a8d168e28706803c98a9d Bisecting: 53 revisions left to test after this (roughly 6 steps) [19d340a2988d4f3e673cded9dde405d727d7e248] io_uring/rsrc: require cloned buffers to share accounting contexts testing commit 19d340a2988d4f3e673cded9dde405d727d7e248 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 13b7dfb32616bb1ddb5ef5c42b273cc9bc684fd6e51d1551d7d1ccf32a696bcd all runs: crashed: WARNING in __vmap_pages_range_noflush representative crash: WARNING in __vmap_pages_range_noflush, types: [WARNING] # git bisect bad 19d340a2988d4f3e673cded9dde405d727d7e248 Bisecting: 26 revisions left to test after this (roughly 5 steps) [472292cd8cfcfb9f2e7731c3c54196c35b8d283d] nvme: add support for passing on the application tag testing commit 472292cd8cfcfb9f2e7731c3c54196c35b8d283d gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 10a5ffd4ec9c61805eca614601e720af24ff3cfbbf64ebbfd1a52eeecc5024bf all runs: crashed: WARNING in __vmap_pages_range_noflush representative crash: WARNING in __vmap_pages_range_noflush, types: [WARNING] # git bisect bad 472292cd8cfcfb9f2e7731c3c54196c35b8d283d Bisecting: 12 revisions left to test after this (roughly 4 steps) [8078486e1d53591ed946c943177339e59e3089e0] io_uring: use region api for SQ testing commit 8078486e1d53591ed946c943177339e59e3089e0 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 0cd43cc1e5c5c092b393b6e54ac00c88b607d44a256e036dc27650c1978ed5be all runs: crashed: WARNING in __vmap_pages_range_noflush representative crash: WARNING in __vmap_pages_range_noflush, types: [WARNING] # git bisect bad 8078486e1d53591ed946c943177339e59e3089e0 Bisecting: 6 revisions left to test after this (roughly 3 steps) [226ae1b4d1111b0b0041677b58371af9b8cd31a9] io_uring/memmap: reuse io_free_region for failure path testing commit 226ae1b4d1111b0b0041677b58371af9b8cd31a9 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: b8c0efbf5dd94603853caed940a6b342182be18dfb78048e77d922b718942d96 all runs: OK false negative chance: 0.000 # git bisect good 226ae1b4d1111b0b0041677b58371af9b8cd31a9 Bisecting: 3 revisions left to test after this (roughly 2 steps) [4b851d20d325dc59f9abdce55d42dc4b68179db0] io_uring/memmap: add IO_REGION_F_SINGLE_REF testing commit 4b851d20d325dc59f9abdce55d42dc4b68179db0 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 5afce4c40d0fc64e426a105eb345c134031044853f6868882feac3a1a0c20c7f all runs: OK false negative chance: 0.000 # git bisect good 4b851d20d325dc59f9abdce55d42dc4b68179db0 Bisecting: 1 revision left to test after this (roughly 1 step) [087f997870a948820ec366701d178f402c6a23a3] io_uring/memmap: implement mmap for regions testing commit 087f997870a948820ec366701d178f402c6a23a3 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: f8b59d2bed780e24e490098318f2af5553e278411bd5b9648a6066a1d2ffd91a all runs: crashed: WARNING in __vmap_pages_range_noflush representative crash: WARNING in __vmap_pages_range_noflush, types: [WARNING] # git bisect bad 087f997870a948820ec366701d178f402c6a23a3 Bisecting: 0 revisions left to test after this (roughly 0 steps) [1e21df691ffa2c277e0b1a4928c9da0e86e9a2be] io_uring/memmap: implement kernel allocated regions testing commit 1e21df691ffa2c277e0b1a4928c9da0e86e9a2be gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 136be4561a558fcc05633d36dd2afab685f56bbaea208b38bd19e999ac4a7bcf all runs: OK false negative chance: 0.000 # git bisect good 1e21df691ffa2c277e0b1a4928c9da0e86e9a2be 087f997870a948820ec366701d178f402c6a23a3 is the first bad commit commit 087f997870a948820ec366701d178f402c6a23a3 Author: Pavel Begunkov Date: Fri Nov 29 13:34:32 2024 +0000 io_uring/memmap: implement mmap for regions The patch implements mmap for the param region and enables the kernel allocation mode. Internally it uses a fixed mmap offset, however the user has to use the offset returned in struct io_uring_region_desc::mmap_offset. Note, mmap doesn't and can't take ->uring_lock and the region / ring lookup is protected by ->mmap_lock, and it's directly peeking at ctx->param_region. We can't protect io_create_region() with the mmap_lock as it'd deadlock, which is why io_create_region_mmap_safe() initialises it for us in a temporary variable and then publishes it with the lock taken. It's intentionally decoupled from main region helpers, and in the future we might want to have a list of active regions, which then could be protected by the ->mmap_lock. Signed-off-by: Pavel Begunkov Link: https://lore.kernel.org/r/0f1212bd6af7fb39b63514b34fae8948014221d1.1732886067.git.asml.silence@gmail.com Signed-off-by: Jens Axboe io_uring/memmap.c | 61 ++++++++++++++++++++++++++++++++++++++++++++++++----- io_uring/memmap.h | 10 ++++++++- io_uring/register.c | 6 ++---- 3 files changed, 67 insertions(+), 10 deletions(-) accumulated error probability: 0.00 culprit signature: f8b59d2bed780e24e490098318f2af5553e278411bd5b9648a6066a1d2ffd91a parent signature: 136be4561a558fcc05633d36dd2afab685f56bbaea208b38bd19e999ac4a7bcf revisions tested: 26, total time: 4h48m32.039226219s (build: 1h33m2.362090474s, test: 2h55m43.144741649s) first bad commit: 087f997870a948820ec366701d178f402c6a23a3 io_uring/memmap: implement mmap for regions recipients (to): ["asml.silence@gmail.com" "axboe@kernel.dk"] recipients (cc): [] crash: WARNING in __vmap_pages_range_noflush ------------[ cut here ]------------ WARNING: CPU: 0 PID: 2936 at mm/vmalloc.c:507 vmap_pages_pte_range mm/vmalloc.c:507 [inline] WARNING: CPU: 0 PID: 2936 at mm/vmalloc.c:507 vmap_pages_pmd_range mm/vmalloc.c:529 [inline] WARNING: CPU: 0 PID: 2936 at mm/vmalloc.c:507 vmap_pages_pud_range mm/vmalloc.c:547 [inline] WARNING: CPU: 0 PID: 2936 at mm/vmalloc.c:507 vmap_pages_p4d_range mm/vmalloc.c:565 [inline] WARNING: CPU: 0 PID: 2936 at mm/vmalloc.c:507 vmap_small_pages_range_noflush mm/vmalloc.c:587 [inline] WARNING: CPU: 0 PID: 2936 at mm/vmalloc.c:507 __vmap_pages_range_noflush+0x967/0xb30 mm/vmalloc.c:616 Modules linked in: CPU: 0 UID: 0 PID: 2936 Comm: syz.3.18 Not tainted 6.13.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:vmap_pages_pte_range mm/vmalloc.c:507 [inline] RIP: 0010:vmap_pages_pmd_range mm/vmalloc.c:529 [inline] RIP: 0010:vmap_pages_pud_range mm/vmalloc.c:547 [inline] RIP: 0010:vmap_pages_p4d_range mm/vmalloc.c:565 [inline] RIP: 0010:vmap_small_pages_range_noflush mm/vmalloc.c:587 [inline] RIP: 0010:__vmap_pages_range_noflush+0x967/0xb30 mm/vmalloc.c:616 Code: c1 98 e1 11 84 80 e1 07 80 c1 03 38 c1 7c 9f 48 c7 c7 98 e1 11 84 e8 28 b8 0a 00 eb 91 90 0f 0b 90 eb 0a 90 0f 0b 90 eb 04 90 <0f> 0b 90 b8 f4 ff ff ff e9 59 01 00 00 90 0f 0b 90 48 8b 04 24 4c RSP: 0018:ffffc90001d2f958 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffffea0009000000 RCX: ffffc90001d2f928 RDX: dffffc0000000000 RSI: ffffffff8386b320 RDI: 0000000000000001 RBP: ffff8881136fd408 R08: ffffffff84ab3177 R09: 1ffffffff095662e R10: dffffc0000000000 R11: fffffbfff095662f R12: ffffc901f6281000 R13: ffff8881136fd408 R14: 00000000000f2680 R15: 1ffff110226dfa81 FS: 00007f139562f6c0(0000) GS:ffff8881f6600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f13957485b0 CR3: 000000014d70e000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: vmap_pages_range_noflush mm/vmalloc.c:641 [inline] vmap_pages_range mm/vmalloc.c:661 [inline] vmap+0x197/0x270 mm/vmalloc.c:3464 io_region_init_ptr+0x21b/0x310 io_uring/memmap.c:248 io_create_region+0x27e/0x360 io_uring/memmap.c:351 io_create_region_mmap_safe+0xbf/0x150 io_uring/memmap.c:368 io_register_mem_region+0x18c/0x2f0 io_uring/register.c:605 __io_uring_register io_uring/register.c:819 [inline] __do_sys_io_uring_register io_uring/register.c:910 [inline] __se_sys_io_uring_register+0x6a7/0xb10 io_uring/register.c:887 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf6/0x210 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f13957bebe9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f139562f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab RAX: ffffffffffffffda RBX: 00007f13959e5fa0 RCX: 00007f13957bebe9 RDX: 0000200000000200 RSI: 0000000000000022 RDI: 0000000000000003 RBP: 00007f1395841e19 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f13959e6038 R14: 00007f13959e5fa0 R15: 00007ffdb64397b8