ci2 starts bisection 2024-06-06 03:51:55.594936277 +0000 UTC m=+8867.190652416 bisecting fixing commit since 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde building syzkaller on 610f2a54d02f8cf4f2454c03bf679b602e6e59b6 ensuring issue is reproducible on original commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 130cd13e4cf44e88aea7f5c0ecf11233cfdf78fd45206a64d8e603f984bfcbd0 run #0: crashed: UBSAN: array-index-out-of-bounds in uinput_destroy_device run #1: crashed: UBSAN: array-index-out-of-bounds in uinput_destroy_device run #2: crashed: UBSAN: array-index-out-of-bounds in uinput_destroy_device run #3: crashed: UBSAN: array-index-out-of-bounds in uinput_destroy_device run #4: crashed: UBSAN: array-index-out-of-bounds in uinput_destroy_device run #5: crashed: UBSAN: array-index-out-of-bounds in uinput_destroy_device run #6: crashed: UBSAN: array-index-out-of-bounds in uinput_destroy_device run #7: crashed: UBSAN: array-index-out-of-bounds in uinput_destroy_device run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: UBSAN: array-index-out-of-bounds in uinput_destroy_device, types: [UBSAN] check whether we can drop unnecessary instrumentation disabling configs for [ATOMIC_SLEEP HANG LEAK BUG KASAN LOCKDEP], they are not needed testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: fca970f92d192fd190569ae6c2f215c0d49524ce58e4686ae4ddfb9c016590f6 all runs: OK false negative chance: 0.000 kconfig minimization: base=4789 full=6018 leaves diff=241 split chunks (needed=false): <241> split chunk #0 of len 241 into 5 parts testing without sub-chunk 1/5 testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b1a18ce3c4fec4ad85da9d31b31b924c33f387937434c96b9d5a26b6039151b4 all runs: OK false negative chance: 0.000 testing without sub-chunk 2/5 testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8f4ae9588474bee10ecf775699be48bd6865c7b4b7dcd4126e07f9bde56acdc3 run #0: crashed: UBSAN: array-index-out-of-bounds in uinput_destroy_device run #1: crashed: UBSAN: array-index-out-of-bounds in uinput_destroy_device run #2: crashed: UBSAN: array-index-out-of-bounds in uinput_destroy_device run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: UBSAN: array-index-out-of-bounds in uinput_destroy_device, types: [UBSAN] testing without sub-chunk 3/5 testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9719639863c0086848609aac30cc7d3447b3c5ea12618219bdf5ef2d7ef4f2f7 all runs: OK false negative chance: 0.000 testing without sub-chunk 4/5 testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 failed building 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde: drivers/usb/gadget/configfs.c:1636:2: error: implicit declaration of function 'acc_disconnect' [-Werror=implicit-function-declaration] testing without sub-chunk 5/5 testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 068f47e5879d01f6a1041aa3afa0f182658c5016a71d552628e4fa4ba4393355 run #0: crashed: UBSAN: array-index-out-of-bounds in uinput_destroy_device run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: UBSAN: array-index-out-of-bounds in uinput_destroy_device, types: [UBSAN] minimized to 241 configs; suspects: [ARCH_HAS_CPU_FINALIZE_INIT BLK_DEV_INITRD CFG80211 CFG80211_REQUIRE_SIGNED_REGDB CFG80211_USE_KERNEL_REGDB_KEYS DEBUG_INFO_BTF DRAGONRISE_FF DRM DRM_BRIDGE DRM_GEM_SHMEM_HELPER DRM_KMS_HELPER DRM_PANEL DRM_PANEL_BRIDGE DRM_PANEL_ORIENTATION_QUIRKS DRM_TTM DRM_TTM_DMA_PAGE_POOL DRM_VIRTIO_GPU DUMMY_CONSOLE DVB_CORE FB FB_CMDLINE FB_DEFERRED_IO FB_NOTIFY FB_SYS_COPYAREA FB_SYS_FILLRECT FB_SYS_FOPS FB_SYS_IMAGEBLIT GPIOLIB_IRQCHIP GREENASIA_FF HDMI HID_A4TECH HID_ACRUX HID_ACRUX_FF HID_APPLEIR HID_AUREAL HID_BELKIN HID_CHERRY HID_CHICONY HID_CP2112 HID_CYPRESS HID_DRAGONRISE HID_ELO HID_EMS_FF HID_EZKEY HID_GREENASIA HID_GT683R HID_GYRATION HID_HOLTEK HID_ICADE HID_ITE HID_KENSINGTON HID_KEYTOUCH HID_KYE HID_LCPOWER HID_LED HID_LENOVO HID_MONTEREY HID_NTI HID_NTRIG HID_ORTEK HID_PANTHERLORD HID_PENMOUNT HID_PETALYNX HID_PICOLCD_FB HID_PICOLCD_LEDS HID_PID HID_PRIMAX HID_PRODIKEYS HID_RMI HID_SAITEK HID_SAMSUNG HID_SENSOR_CUSTOM_SENSOR HID_SENSOR_HUB HID_SMARTJOYPLUS HID_SPEEDLINK HID_STEELSERIES HID_SUNPLUS HID_THINGM HID_THRUSTMASTER HID_TIVO HID_TOPSEED HID_TWINHAN HID_WALTOP HID_XINMO HID_ZEROPLUS HID_ZYDACRON HOLTEK_FF HOTPLUG_PCI HWMON HW_CONSOLE I2C_MUX INPUT_JOYSTICK INPUT_LEDS INPUT_MOUSE INPUT_TABLET INPUT_TOUCHSCREEN INTEGRITY INTEGRITY_AUDIT JOYSTICK_XPAD JOYSTICK_XPAD_FF JOYSTICK_XPAD_LEDS KCOV KCOV_ENABLE_COMPARISONS KCOV_INSTRUMENT_ALL LCD_CLASS_DEVICE LOCALVERSION_AUTO LOGIG940_FF LOGIRUMBLEPAD2_FF LOGITECH_FF LOGIWHEELS_FF MAC80211 MAC80211_HAS_RC MAC80211_RC_DEFAULT_MINSTREL MAC80211_RC_MINSTREL MEDIA_ANALOG_TV_SUPPORT MEDIA_ATTACH MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_TUNER MFD_CORE NL80211_TESTMODE NOP_USB_XCEIV PANTHERLORD_FF RADIO_ADAPTERS REGMAP_SPI RESET_CONTROLLER RFKILL RFKILL_LEDS RMI4_2D_SENSOR RMI4_CORE RMI4_F03 RMI4_F03_SERIO RMI4_F11 RMI4_F12 RMI4_F30 SMARTJOYPLUS_FF SMSC_PHY SND SND_COMPRESS_OFFLOAD SND_DMAENGINE_PCM SND_DMA_SGBUF SND_DYNAMIC_MINORS SND_HRTIMER SND_HWDEP SND_PCI SND_PCM SND_PCM_TIMER SND_PROC_FS SND_RAWMIDI SND_SOC SND_SOC_ACPI SND_SOC_ACPI_INTEL_MATCH SND_SOC_COMPRESS SND_SOC_GENERIC_DMAENGINE_PCM SND_SOC_I2C_AND_SPI SND_SOC_INTEL_MACH SND_SOC_INTEL_SST_TOPLEVEL SND_SOC_TOPOLOGY SND_SPI SND_SST_ATOM_HIFI2_PLATFORM SND_SST_ATOM_HIFI2_PLATFORM_ACPI SND_TIMER SND_USB SND_USB_AUDIO SND_USB_AUDIO_USE_MEDIA_CONTROLLER SND_VERBOSE_PROCFS SND_X86 SOUND TABLET_USB_ACECAD TABLET_USB_AIPTEK TABLET_USB_GTCO TABLET_USB_HANWANG TABLET_USB_KBTAB THRUSTMASTER_FF TOUCHSCREEN_PROPERTIES TYPEC_FUSB302 USB_ARMLINUX USB_BELKIN USB_CONFIGFS USB_CONFIGFS_ACM USB_CONFIGFS_ECM USB_CONFIGFS_ECM_SUBSET USB_CONFIGFS_EEM USB_CONFIGFS_F_ACC USB_CONFIGFS_F_AUDIO_SRC USB_CONFIGFS_F_FS USB_CONFIGFS_F_HID USB_CONFIGFS_F_LB_SS USB_CONFIGFS_F_MIDI USB_CONFIGFS_F_PRINTER USB_CONFIGFS_F_UAC1 USB_CONFIGFS_F_UAC1_LEGACY USB_CONFIGFS_F_UAC2 USB_CONFIGFS_F_UVC USB_CONFIGFS_MASS_STORAGE USB_CONFIGFS_NCM USB_CONFIGFS_OBEX USB_CONFIGFS_RNDIS USB_CONFIGFS_SERIAL USB_CONFIGFS_UEVENT USB_EHCI_ROOT_HUB_TT USB_EHSET_TEST_FIXTURE USB_F_ACC USB_F_ACM USB_F_AUDIO_SRC USB_F_ECM USB_F_EEM USB_F_FS USB_F_HID USB_F_MASS_STORAGE USB_F_MIDI USB_F_NCM USB_F_OBEX USB_F_PRINTER USB_F_RNDIS USB_F_SERIAL USB_F_SS_LB USB_F_SUBSET USB_F_UAC1 USB_F_UAC1_LEGACY USB_F_UAC2 USB_F_UVC USB_GADGET_DEBUG_FILES USB_GADGET_DEBUG_FS USB_IPHETH USB_ISP1760 USB_ISP1760_HCD USB_ISP1760_HOST_ROLE USB_LIBCOMPOSITE USB_LINK_LAYER_TEST USB_MON USB_NET_CDC_MBIM USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_DM9601 USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL USB_SERIAL_FTDI_SIO USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM VT WIRELESS WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_ZYDAS X86_X32 ZEROPLUS_FF] testing current HEAD d3c4d815bf09ba8042343b32cc182be2aac1b9c2 testing commit d3c4d815bf09ba8042343b32cc182be2aac1b9c2 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 97f75915327cd85cac916cc2d4d47498d858c8f246ede5cedf732beee0c3d0fc run #0: crashed: UBSAN: array-index-out-of-bounds in uinput_destroy_device run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: UBSAN: array-index-out-of-bounds in uinput_destroy_device, types: [UBSAN] crash still not fixed/happens on the oldest tested release reproducer is flaky (0.40 repro chance estimate) revisions tested: 7, total time: 2h24m27.198906022s (build: 28m7.049241022s, test: 1h48m23.572313687s) crash still not fixed or there were kernel test errors commit msg: Merge d2a970972800 ("btrfs: fix off-by-one chunk length calculation at contains_pending_extent()") into android-mainline crash: UBSAN: array-index-out-of-bounds in uinput_destroy_device ================================================================================ UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:130:9 index 8294 is out of range for type 'long unsigned int [8]' CPU: 0 PID: 12756 Comm: syz-executor224 Not tainted 5.10.214-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack_lvl+0xc2/0x102 lib/dump_stack.c:118 dump_stack+0x15/0x17 lib/dump_stack.c:135 ubsan_epilogue+0xe/0x37 lib/ubsan.c:148 __ubsan_handle_out_of_bounds.cold+0x64/0x6f lib/ubsan.c:347 decode_tail kernel/locking/qspinlock.c:130 [inline] __pv_queued_spin_lock_slowpath+0xaf0/0xc10 kernel/locking/qspinlock.c:468 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:554 [inline] queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:51 [inline] queued_spin_lock include/asm-generic/qspinlock.h:85 [inline] do_raw_spin_lock_flags include/linux/spinlock.h:195 [inline] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:119 [inline] _raw_spin_lock_irqsave+0xf6/0x120 kernel/locking/spinlock.c:159 complete+0x18/0x70 kernel/sched/completion.c:32 uinput_flush_requests drivers/input/misc/uinput.c:213 [inline] uinput_destroy_device+0x1ba/0x260 drivers/input/misc/uinput.c:298 uinput_release+0x3c/0x60 drivers/input/misc/uinput.c:744 __fput+0x2ed/0x870 fs/file_table.c:281 ____fput+0x16/0x20 fs/file_table.c:314 task_work_run+0xe7/0x190 kernel/task_work.c:165 tracehook_notify_resume include/linux/tracehook.h:188 [inline] exit_to_user_mode_loop kernel/entry/common.c:172 [inline] exit_to_user_mode_prepare+0x112/0x120 kernel/entry/common.c:199 syscall_exit_to_user_mode+0x27/0x160 kernel/entry/common.c:274 do_syscall_64+0x3f/0x80 arch/x86/entry/common.c:56 entry_SYSCALL_64_after_hwframe+0x61/0xc6 RIP: 0033:0x7f8efb9c7a4a Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 53 81 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 b3 81 02 00 8b 44 24 RSP: 002b:00007fffcadae5e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f8efb9c7a4a RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 000000000007d30f R08: 0000000000000000 R09: 00007fffcadae6c0 R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000003e8 R13: 00007f8efba4f1bc R14: 000000000007d341 R15: 00007f8efba4f1a0 ================================================================================ general protection fault, probably for non-canonical address 0xdffffc00001b671b: 0000 [#1] PREEMPT SMP KASAN KASAN: probably user-memory-access in range [0x0000000000db38d8-0x0000000000db38df] CPU: 0 PID: 12756 Comm: syz-executor224 Not tainted 5.10.214-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:__pv_queued_spin_lock_slowpath+0x59d/0xc10 kernel/locking/qspinlock.c:471 Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 53 05 00 00 4a 03 1c ed 20 a7 c4 85 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 23 05 00 00 4c 8d 73 14 4c 89 a5 68 ff ff ff 4c RSP: 0018:ffffc90004e9fc10 EFLAGS: 00010006 RAX: dffffc0000000000 RBX: 0000000000db38d8 RCX: ffffffff8138c263 RDX: 00000000001b671b RSI: ffffffff8259c1d6 RDI: ffffffff85c5aa50 RBP: ffffc90004e9fce0 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: 3d3d3d3d3d3d3d3d R12: ffffc90004defc40 R13: 0000000000002066 R14: 000000000000b900 R15: ffff8881f7057640 FS: 00005555561433c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8efba4cfb4 CR3: 0000000110189000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:554 [inline] queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:51 [inline] queued_spin_lock include/asm-generic/qspinlock.h:85 [inline] do_raw_spin_lock_flags include/linux/spinlock.h:195 [inline] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:119 [inline] _raw_spin_lock_irqsave+0xf6/0x120 kernel/locking/spinlock.c:159 complete+0x18/0x70 kernel/sched/completion.c:32 uinput_flush_requests drivers/input/misc/uinput.c:213 [inline] uinput_destroy_device+0x1ba/0x260 drivers/input/misc/uinput.c:298 uinput_release+0x3c/0x60 drivers/input/misc/uinput.c:744 __fput+0x2ed/0x870 fs/file_table.c:281 ____fput+0x16/0x20 fs/file_table.c:314 task_work_run+0xe7/0x190 kernel/task_work.c:165 tracehook_notify_resume include/linux/tracehook.h:188 [inline] exit_to_user_mode_loop kernel/entry/common.c:172 [inline] exit_to_user_mode_prepare+0x112/0x120 kernel/entry/common.c:199 syscall_exit_to_user_mode+0x27/0x160 kernel/entry/common.c:274 do_syscall_64+0x3f/0x80 arch/x86/entry/common.c:56 entry_SYSCALL_64_after_hwframe+0x61/0xc6 RIP: 0033:0x7f8efb9c7a4a Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 53 81 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 b3 81 02 00 8b 44 24 RSP: 002b:00007fffcadae5e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f8efb9c7a4a RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 000000000007d30f R08: 0000000000000000 R09: 00007fffcadae6c0 R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000003e8 R13: 00007f8efba4f1bc R14: 000000000007d341 R15: 00007f8efba4f1a0 Modules linked in: ---[ end trace 37ac2426106d4d74 ]--- RIP: 0010:__pv_queued_spin_lock_slowpath+0x59d/0xc10 kernel/locking/qspinlock.c:471 Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 53 05 00 00 4a 03 1c ed 20 a7 c4 85 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 23 05 00 00 4c 8d 73 14 4c 89 a5 68 ff ff ff 4c RSP: 0018:ffffc90004e9fc10 EFLAGS: 00010006 RAX: dffffc0000000000 RBX: 0000000000db38d8 RCX: ffffffff8138c263 RDX: 00000000001b671b RSI: ffffffff8259c1d6 RDI: ffffffff85c5aa50 RBP: ffffc90004e9fce0 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: 3d3d3d3d3d3d3d3d R12: ffffc90004defc40 R13: 0000000000002066 R14: 000000000000b900 R15: ffff8881f7057640 FS: 00005555561433c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8efba4cfb4 CR3: 0000000110189000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 48 89 fa mov %rdi,%rdx 3: 48 c1 ea 03 shr $0x3,%rdx 7: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) b: 0f 85 53 05 00 00 jne 0x564 11: 4a 03 1c ed 20 a7 c4 add -0x7a3b58e0(,%r13,8),%rbx 18: 85 19: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 20: fc ff df 23: 48 89 da mov %rbx,%rdx 26: 48 c1 ea 03 shr $0x3,%rdx * 2a: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction 2e: 0f 85 23 05 00 00 jne 0x557 34: 4c 8d 73 14 lea 0x14(%rbx),%r14 38: 4c 89 a5 68 ff ff ff mov %r12,-0x98(%rbp) 3f: 4c rex.WR