general protection fault, probably for non-canonical address 0xdffffc0004000000: 0000 [#1] PREEMPT SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000020000000-0x0000000020000007] CPU: 0 PID: 5143 Comm: syz-executor.5 Not tainted 6.3.0-rc3-next-20230327 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:do_iter_write+0x477/0x700 Code: 00 0f 85 fd 01 00 00 4d 8b 7c 24 28 e8 d2 05 c6 ff 48 8b 44 24 18 80 38 00 0f 85 68 01 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 3b 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 RSP: 0018:ffff888044787c70 EFLAGS: 00010216 RAX: 0000000020000000 RBX: ffff888044787d60 RCX: ffffc90001be9000 RDX: 0000000004000000 RSI: ffffffff8185830e RDI: 0000000000000007 RBP: 000000000000009d R08: 0000000000000007 R09: 0000000000000000 R10: 000000000000009d R11: 0000000000000001 R12: ffff88801a6f6f00 R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff84a66820 FS: 00007f4f8ce91700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000010 CR3: 0000000038904000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: <TASK> vfs_writev+0x1ae/0x660 __x64_sys_pwritev+0x233/0x310 do_syscall_64+0x3f/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc RIP: 0033:0x7f4f8f91bb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f4f8ce91188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 RAX: ffffffffffffffda RBX: 00007f4f8fa2ef60 RCX: 00007f4f8f91bb19 RDX: 0000000000000001 RSI: 0000000020001000 RDI: 0000000000000003 RBP: 00007f4f8f975f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fffe0f3aa1f R14: 00007f4f8ce91300 R15: 0000000000022000 </TASK> Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:do_iter_write+0x477/0x700 Code: 00 0f 85 fd 01 00 00 4d 8b 7c 24 28 e8 d2 05 c6 ff 48 8b 44 24 18 80 38 00 0f 85 68 01 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 3b 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 RSP: 0018:ffff888044787c70 EFLAGS: 00010216 RAX: 0000000020000000 RBX: ffff888044787d60 RCX: ffffc90001be9000 RDX: 0000000004000000 RSI: ffffffff8185830e RDI: 0000000000000007 RBP: 000000000000009d R08: 0000000000000007 R09: 0000000000000000 R10: 000000000000009d R11: 0000000000000001 R12: ffff88801a6f6f00 R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff84a66820 FS: 00007f4f8ce91700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000010 CR3: 0000000038904000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 ieee802154 phy0 wpan0: encryption failed: -22 Bluetooth: hci3: command 0x2021 tx timeout loop6: detected capacity change from 0 to 40 syz-executor.6: attempt to access beyond end of device loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop6, logical block 10, lost async page write syz-executor.6: attempt to access beyond end of device loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop6, logical block 10, lost async page write loop6: detected capacity change from 0 to 40 netlink: 'syz-executor.0': attribute type 8 has an invalid length. netlink: 'syz-executor.0': attribute type 8 has an invalid length. syz-executor.6: attempt to access beyond end of device loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop6, logical block 10, lost async page write netlink: 'syz-executor.0': attribute type 8 has an invalid length. loop6: detected capacity change from 0 to 40 syz-executor.6: attempt to access beyond end of device loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop6, logical block 10, lost async page write netlink: 'syz-executor.0': attribute type 8 has an invalid length. loop6: detected capacity change from 0 to 40 netlink: 'syz-executor.0': attribute type 8 has an invalid length. syz-executor.6: attempt to access beyond end of device loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop6, logical block 10, lost async page write Restarting kernel threads ... done. Restarting kernel threads ... done. Restarting kernel threads ... done. Restarting kernel threads ... done. Restarting kernel threads ... done. Restarting kernel threads ... done. process 'syz-executor.0' launched './file1' with NULL argv: empty string added general protection fault, probably for non-canonical address 0xdffffc00040004d8: 0000 [#2] PREEMPT SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x00000000200026c0-0x00000000200026c7] CPU: 1 PID: 5474 Comm: syz-executor.3 Tainted: G D 6.3.0-rc3-next-20230327 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:do_iter_read+0x481/0x750 Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 RSP: 0018:ffff888044d07c78 EFLAGS: 00010216 RAX: 00000000200026c0 RBX: ffff888044d07d60 RCX: ffffc900037f7000 RDX: 00000000040004d8 RSI: ffffffff81855c98 RDI: 0000000000000007 RBP: 000000000000100a R08: 0000000000000007 R09: 0000000000000000 R10: 000000000000100a R11: 0000000000000001 R12: ffff88800efb4c80 R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491de20 FS: 00007f09c4733700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020001140 CR3: 000000000c96a000 CR4: 0000000000350ee0 Call Trace: <TASK> vfs_readv+0xe5/0x160 __x64_sys_preadv+0x233/0x310 do_syscall_64+0x3f/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc RIP: 0033:0x7f09c71bdb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f09c4733188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 RAX: ffffffffffffffda RBX: 00007f09c72d0f60 RCX: 00007f09c71bdb19 RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006 RBP: 00007f09c7217f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe34273bff R14: 00007f09c4733300 R15: 0000000000022000 </TASK> Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:do_iter_write+0x477/0x700 Code: 00 0f 85 fd 01 00 00 4d 8b 7c 24 28 e8 d2 05 c6 ff 48 8b 44 24 18 80 38 00 0f 85 68 01 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 3b 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 RSP: 0018:ffff888044787c70 EFLAGS: 00010216 RAX: 0000000020000000 RBX: ffff888044787d60 RCX: ffffc90001be9000 RDX: 0000000004000000 RSI: ffffffff8185830e RDI: 0000000000000007 RBP: 000000000000009d R08: 0000000000000007 R09: 0000000000000000 R10: 000000000000009d R11: 0000000000000001 R12: ffff88801a6f6f00 R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff84a66820 FS: 00007f09c4733700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020001140 CR3: 000000000c96a000 CR4: 0000000000350ee0 general protection fault, probably for non-canonical address 0xdffffc00040004d8: 0000 [#3] PREEMPT SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x00000000200026c0-0x00000000200026c7] CPU: 0 PID: 5522 Comm: syz-executor.3 Tainted: G D 6.3.0-rc3-next-20230327 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:do_iter_read+0x481/0x750 Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 RSP: 0018:ffff888041f0fc78 EFLAGS: 00010216 RAX: 00000000200026c0 RBX: ffff888041f0fd60 RCX: ffffc900037f7000 RDX: 00000000040004d8 RSI: ffffffff81855c98 RDI: 0000000000000007 RBP: 000000000000100a R08: 0000000000000007 R09: 0000000000000000 R10: 000000000000100a R11: 0000000000000001 R12: ffff8880160e1180 R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491de20 FS: 00007f09c4733700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f6641c6e710 CR3: 000000000c96a000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: <TASK> vfs_readv+0xe5/0x160 __x64_sys_preadv+0x233/0x310 do_syscall_64+0x3f/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc RIP: 0033:0x7f09c71bdb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f09c4733188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 RAX: ffffffffffffffda RBX: 00007f09c72d0f60 RCX: 00007f09c71bdb19 RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006 RBP: 00007f09c7217f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe34273bff R14: 00007f09c4733300 R15: 0000000000022000 </TASK> Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:do_iter_write+0x477/0x700 Code: 00 0f 85 fd 01 00 00 4d 8b 7c 24 28 e8 d2 05 c6 ff 48 8b 44 24 18 80 38 00 0f 85 68 01 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 3b 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 RSP: 0018:ffff888044787c70 EFLAGS: 00010216 RAX: 0000000020000000 RBX: ffff888044787d60 RCX: ffffc90001be9000 RDX: 0000000004000000 RSI: ffffffff8185830e RDI: 0000000000000007 RBP: 000000000000009d R08: 0000000000000007 R09: 0000000000000000 R10: 000000000000009d R11: 0000000000000001 R12: ffff88801a6f6f00 R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff84a66820 FS: 00007f09c4733700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f6641c6e710 CR3: 000000000c96a000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 EXT4-fs: quotafile must be on filesystem root general protection fault, probably for non-canonical address 0xdffffc0004000028: 0000 [#4] PREEMPT SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000020000140-0x0000000020000147] CPU: 1 PID: 5567 Comm: syz-executor.5 Tainted: G D 6.3.0-rc3-next-20230327 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:do_iter_read+0x481/0x750 Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 RSP: 0018:ffff8880443ffc78 EFLAGS: 00010216 RAX: 0000000020000140 RBX: ffff8880443ffd60 RCX: ffffc90001be9000 RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007 RBP: 0000000000000ff6 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000ff6 R11: 0000000000000001 R12: ffff888041001180 R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff84923b60 FS: 00007f4f8ce91700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b33321000 CR3: 000000000c3fc000 CR4: 0000000000350ee0 Call Trace: <TASK> vfs_readv+0xe5/0x160 __x64_sys_preadv+0x233/0x310 do_syscall_64+0x3f/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc RIP: 0033:0x7f4f8f91bb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f4f8ce91188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 RAX: ffffffffffffffda RBX: 00007f4f8fa2ef60 RCX: 00007f4f8f91bb19 RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000003 RBP: 00007f4f8f975f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fffe0f3aa1f R14: 00007f4f8ce91300 R15: 0000000000022000 </TASK> Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:do_iter_write+0x477/0x700 Code: 00 0f 85 fd 01 00 00 4d 8b 7c 24 28 e8 d2 05 c6 ff 48 8b 44 24 18 80 38 00 0f 85 68 01 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 3b 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 RSP: 0018:ffff888044787c70 EFLAGS: 00010216 RAX: 0000000020000000 RBX: ffff888044787d60 RCX: ffffc90001be9000 RDX: 0000000004000000 RSI: ffffffff8185830e RDI: 0000000000000007 RBP: 000000000000009d R08: 0000000000000007 R09: 0000000000000000 R10: 000000000000009d R11: 0000000000000001 R12: ffff88801a6f6f00 R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff84a66820 FS: 00007f4f8ce91700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b33321000 CR3: 000000000c3fc000 CR4: 0000000000350ee0 EXT4-fs: quotafile must be on filesystem root general protection fault, probably for non-canonical address 0xdffffc00040004d8: 0000 [#5] PREEMPT SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x00000000200026c0-0x00000000200026c7] CPU: 1 PID: 5564 Comm: syz-executor.6 Tainted: G D 6.3.0-rc3-next-20230327 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:do_iter_read+0x481/0x750 Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 RSP: 0018:ffff888016a27c78 EFLAGS: 00010216 RAX: 00000000200026c0 RBX: ffff888016a27d60 RCX: ffffc900043fd000 RDX: 00000000040004d8 RSI: ffffffff81855c98 RDI: 0000000000000007 RBP: 000000000000100a R08: 0000000000000007 R09: 0000000000000000 R10: 000000000000100a R11: 0000000000000001 R12: ffff888009460a00 R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491de20 FS: 00007feb4169a700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020001140 CR3: 000000000ee14000 CR4: 0000000000350ee0 Call Trace: <TASK> vfs_readv+0xe5/0x160 __x64_sys_preadv+0x233/0x310 do_syscall_64+0x3f/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc RIP: 0033:0x7feb44124b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007feb4169a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 RAX: ffffffffffffffda RBX: 00007feb44237f60 RCX: 00007feb44124b19 RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006 RBP: 00007feb4417ef6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd0b8c1def R14: 00007feb4169a300 R15: 0000000000022000 </TASK> Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:do_iter_write+0x477/0x700 Code: 00 0f 85 fd 01 00 00 4d 8b 7c 24 28 e8 d2 05 c6 ff 48 8b 44 24 18 80 38 00 0f 85 68 01 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 3b 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 RSP: 0018:ffff888044787c70 EFLAGS: 00010216 RAX: 0000000020000000 RBX: ffff888044787d60 RCX: ffffc90001be9000 RDX: 0000000004000000 RSI: ffffffff8185830e RDI: 0000000000000007 RBP: 000000000000009d R08: 0000000000000007 R09: 0000000000000000 R10: 000000000000009d R11: 0000000000000001 R12: ffff88801a6f6f00 R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff84a66820 FS: 00007feb4169a700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020001140 CR3: 000000000ee14000 CR4: 0000000000350ee0 lo: entered promiscuous mode lo: entered allmulticast mode lo: left promiscuous mode lo: left allmulticast mode lo: entered promiscuous mode lo: entered allmulticast mode ---------------- Code disassembly (best guess): 0: 00 0f add %cl,(%rdi) 2: 85 fd test %edi,%ebp 4: 01 00 add %eax,(%rax) 6: 00 4d 8b add %cl,-0x75(%rbp) 9: 7c 24 jl 0x2f b: 28 e8 sub %ch,%al d: d2 05 c6 ff 48 8b rolb %cl,-0x74b7003a(%rip) # 0x8b48ffd9 13: 44 24 18 rex.R and $0x18,%al 16: 80 38 00 cmpb $0x0,(%rax) 19: 0f 85 68 01 00 00 jne 0x187 1f: 48 8b 43 18 mov 0x18(%rbx),%rax 23: 48 89 c2 mov %rax,%rdx 26: 48 c1 ea 03 shr $0x3,%rdx * 2a: 42 80 3c 32 00 cmpb $0x0,(%rdx,%r14,1) <-- trapping instruction 2f: 0f 85 3b 01 00 00 jne 0x170 35: 48 8b 4c 24 20 mov 0x20(%rsp),%rcx 3a: 48 8b 30 mov (%rax),%rsi 3d: 80 39 00 cmpb $0x0,(%rcx)