Extracting prog: 3m37.331661661s
Minimizing prog: 20m23.148141903s
Simplifying prog options: 2m27.501373806s
Extracting C: 1m8.75470028s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff00000007050302000200070584020002"], 0x0)
syz_usb_ep_read(r0, 0x3, 0x0, 0x0)
syz_usb_ep_write(r0, 0x84, 0xc, &(0x7f0000000080)="005c386c2b0c257033070001")

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff00000007050302000200070584020002"], 0x0)
syz_usb_ep_read(r0, 0x3, 0x0, 0x0)
syz_usb_ep_write(r0, 0x84, 0xc, &(0x7f0000000080)="005c386c2b0c257033070001")

program crashed: WARNING in corrupted
single: successfully extracted reproducer
found reproducer with 3 syscalls
minimizing guilty program
testing program (duration=2m45.386049306s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff00000007050302000200070584020002"], 0x0)
syz_usb_ep_read(r0, 0x3, 0x0, 0x0)

program did not crash
testing program (duration=2m45.386049306s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff00000007050302000200070584020002"], 0x0)
syz_usb_ep_write(r0, 0x84, 0xc, &(0x7f0000000080)="005c386c2b0c257033070001")

program did not crash
testing program (duration=2m45.386049306s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
syz_usb_ep_read(0xffffffffffffffff, 0x3, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)="005c386c2b0c257033070001")

program did not crash
testing program (duration=2m45.386049306s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x57, 0x0, 0x0)
syz_usb_ep_read(r0, 0x3, 0x0, 0x0)
syz_usb_ep_write(r0, 0x84, 0xc, &(0x7f0000000080)="005c386c2b0c257033070001")

program did not crash
testing program (duration=2m45.386049306s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_ep_read(r0, 0x3, 0x0, 0x0)
syz_usb_ep_write(r0, 0x84, 0xc, &(0x7f0000000080)="005c386c2b0c257033070001")

program did not crash
testing program (duration=2m45.386049306s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff00000007050302000200070584020002"], 0x0)
syz_usb_ep_read(r0, 0x3, 0x0, 0x0)
syz_usb_ep_write(r0, 0x84, 0x0, 0x0)

program did not crash
testing program (duration=2m45.386049306s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff00000007050302000200070584020002"], 0x0)
syz_usb_ep_read(r0, 0x3, 0x0, 0x0)
syz_usb_ep_write(r0, 0x84, 0x0, &(0x7f0000000080))

program did not crash
extracting C reproducer
testing compiled C program (duration=2m45.386049306s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write
program crashed: WARNING in ttusb_dec_send_command
a never seen crash title: WARNING in ttusb_dec_send_command, ignore
simplifying guilty program options
testing program (duration=2m45.386049306s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff00000007050302000200070584020002"], 0x0)
syz_usb_ep_read(r0, 0x3, 0x0, 0x0)
syz_usb_ep_write(r0, 0x84, 0xc, &(0x7f0000000080)="005c386c2b0c257033070001")

program crashed: WARNING in ttusb_dec_send_command
a never seen crash title: WARNING in ttusb_dec_send_command, ignore
testing program (duration=2m45.386049306s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff00000007050302000200070584020002"], 0x0)
syz_usb_ep_read(r0, 0x3, 0x0, 0x0)
syz_usb_ep_write(r0, 0x84, 0xc, &(0x7f0000000080)="005c386c2b0c257033070001")

program crashed: WARNING in ttusb_dec_send_command
a never seen crash title: WARNING in ttusb_dec_send_command, ignore
testing program (duration=2m45.386049306s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff00000007050302000200070584020002"], 0x0)
syz_usb_ep_read(r0, 0x3, 0x0, 0x0)
syz_usb_ep_write(r0, 0x84, 0xc, &(0x7f0000000080)="005c386c2b0c257033070001")

program crashed: WARNING in ttusb_dec_send_command
validation run: crashed=true
testing program (duration=2m45.386049306s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff00000007050302000200070584020002"], 0x0)
syz_usb_ep_read(r0, 0x3, 0x0, 0x0)
syz_usb_ep_write(r0, 0x84, 0xc, &(0x7f0000000080)="005c386c2b0c257033070001")

program crashed: WARNING in ttusb_dec_send_command
validation run: crashed=true
testing program (duration=2m45.386049306s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff00000007050302000200070584020002"], 0x0)
syz_usb_ep_read(r0, 0x3, 0x0, 0x0)
syz_usb_ep_write(r0, 0x84, 0xc, &(0x7f0000000080)="005c386c2b0c257033070001")

program crashed: WARNING in corrupted
validation run: crashed=true
reproducing took 32m45.888005106s
repro crashed as (corrupted=true):
------------[ cut here ]------------
memcpy: detected buffer overflow: 108 byte read of buffer size 60
WARNING: lib/string_helpers.c:1036 at __fortify_report+0x8d/0xd0 lib/string_helpers.c:1036, CPU#1: kworker/1:0/23
Modules linked in:
CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
Workqueue: usb_hub_wq hub_event
RIP: 0010:__fortify_report+0x99/0xd0 lib/string_helpers.c:1036
Code: fd 28 cf fe 45 84 f6 48 c7 c0 80 fe d2 87 48 0f 44 e8 e8 da 2e cf fe 48 8d 3d 33 7f 35 08 4d 89 e8 48 89 e9 4c 89 e2 48 89 de <67> 48 0f b9 3a 5b 5d 41 5c 41 5d 41 5e e9 55 4c b6 04 48 89 de 48
RSP: 0018:ffffc9000018ecc8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffffffff87d30a20 RCX: ffffffff87d2fe80
RDX: 000000000000006c RSI: ffffffff87d30a20 RDI: ffffffff8b1d46a0
RBP: ffffffff87d2fe80 R08: 000000000000003c R09: 0000000000000000
R10: 0000000000000001 R11: ffffffff8159fb
R10: 0000000000000001 R11: ffffffff8159fb7a R12: 000000000000006c
----------------
Code disassembly (best guess):
   0:	fd                   	std
   1:	28 cf                	sub    %cl,%bh
   3:	fe 45 84             	incb   -0x7c(%rbp)
   6:	f6 48 c7 c0          	testb  $0xc0,-0x39(%rax)
   a:	80 fe d2             	cmp    $0xd2,%dh
   d:	87 48 0f             	xchg   %ecx,0xf(%rax)
  10:	44 e8 e8 da 2e cf    	rex.R call 0xcf2edafe
  16:	fe 48 8d             	decb   -0x73(%rax)
  19:	3d 33 7f 35 08       	cmp    $0x8357f33,%eax
  1e:	4d 89 e8             	mov    %r13,%r8
  21:	48 89 e9             	mov    %rbp,%rcx
  24:	4c 89 e2             	mov    %r12,%rdx
  27:	48 89 de             	mov    %rbx,%rsi
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	5b                   	pop    %rbx
  30:	5d                   	pop    %rbp
  31:	41 5c                	pop    %r12
  33:	41 5d                	pop    %r13
  35:	41 5e                	pop    %r14
  37:	e9 55 4c b6 04       	jmp    0x4b64c91
  3c:	48 89 de             	mov    %rbx,%rsi
  3f:	48                   	rex.W

report is corrupted, running repro again
testing program (duration=2m45.386049306s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff00000007050302000200070584020002"], 0x0)
syz_usb_ep_read(r0, 0x3, 0x0, 0x0)
syz_usb_ep_write(r0, 0x84, 0xc, &(0x7f0000000080)="005c386c2b0c257033070001")

program crashed: WARNING in ttusb_dec_send_command
final repro crashed as (corrupted=false):
usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 4-1: Product: syz
usb 4-1: Manufacturer: syz
usb 4-1: SerialNumber: syz
------------[ cut here ]------------
memcpy: detected buffer overflow: 108 byte read of buffer size 60
WARNING: lib/string_helpers.c:1036 at __fortify_report+0x8d/0xd0 lib/string_helpers.c:1036, CPU#0: kworker/0:2/1133
Modules linked in:
CPU: 0 UID: 0 PID: 1133 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
Workqueue: usb_hub_wq hub_event
RIP: 0010:__fortify_report+0x99/0xd0 lib/string_helpers.c:1036
Code: fd 28 cf fe 45 84 f6 48 c7 c0 80 fe d2 87 48 0f 44 e8 e8 da 2e cf fe 48 8d 3d 33 7f 35 08 4d 89 e8 48 89 e9 4c 89 e2 48 89 de <67> 48 0f b9 3a 5b 5d 41 5c 41 5d 41 5e e9 55 4c b6 04 48 89 de 48
RSP: 0018:ffffc900029aecc8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffffffff87d30a20 RCX: ffffffff87d2fe80
RDX: 000000000000006c RSI: ffffffff87d30a20 RDI: ffffffff8b1d46a0
RBP: ffffffff87d2fe80 R08: 000000000000003c R09: 0000000000000000
R10: 0000000000000001 R11: ffffffff82275550 R12: 000000000000006c
R13: 000000000000003c R14: 0000000000000000 R15: 1ffff92000535da8
FS:  0000000000000000(0000) GS:ffff888268360000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005651d1926a38 CR3: 0000000105ffe000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 __fortify_panic+0x23/0x26 lib/string_helpers.c:1043
 fortify_memcpy_chk include/linux/fortify-string.h:547 [inline]
 ttusb_dec_send_command.cold+0x75/0xf8 drivers/media/usb/ttusb-dec/ttusb_dec.c:372
 ttusb_dec_get_stb_state drivers/media/usb/ttusb-dec/ttusb_dec.c:392 [inline]
 ttusb_dec_init_stb drivers/media/usb/ttusb-dec/ttusb_dec.c:1413 [inline]
 ttusb_dec_probe+0x8b4/0x2110 drivers/media/usb/ttusb-dec/ttusb_dec.c:1671
 usb_probe_interface+0x386/0x980 drivers/usb/core/driver.c:399
 call_driver_probe drivers/base/dd.c:629 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:707
 __driver_probe_device+0x210/0x460 drivers/base/dd.c:869
 driver_probe_device+0x4a/0x140 drivers/base/dd.c:899
 __device_attach_driver+0x1df/0x320 drivers/base/dd.c:1027
 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500
----------------
Code disassembly (best guess):
   0:	fd                   	std
   1:	28 cf                	sub    %cl,%bh
   3:	fe 45 84             	incb   -0x7c(%rbp)
   6:	f6 48 c7 c0          	testb  $0xc0,-0x39(%rax)
   a:	80 fe d2             	cmp    $0xd2,%dh
   d:	87 48 0f             	xchg   %ecx,0xf(%rax)
  10:	44 e8 e8 da 2e cf    	rex.R call 0xcf2edafe
  16:	fe 48 8d             	decb   -0x73(%rax)
  19:	3d 33 7f 35 08       	cmp    $0x8357f33,%eax
  1e:	4d 89 e8             	mov    %r13,%r8
  21:	48 89 e9             	mov    %rbp,%rcx
  24:	4c 89 e2             	mov    %r12,%rdx
  27:	48 89 de             	mov    %rbx,%rsi
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	5b                   	pop    %rbx
  30:	5d                   	pop    %rbp
  31:	41 5c                	pop    %r12
  33:	41 5d                	pop    %r13
  35:	41 5e                	pop    %r14
  37:	e9 55 4c b6 04       	jmp    0x4b64c91
  3c:	48 89 de             	mov    %rbx,%rsi
  3f:	48                   	rex.W