Crash on iOS 13 (any button pressed)

[p0358]

Date: 1/7/22, 4:41 PM
Process: backboardd
Bundle id: (null)
Device: iPhone 6s Plus, iOS 13.5

Exception type: EXC_BAD_ACCESS (SIGSEGV)
Exception subtype: KERN_INVALID_ADDRESS: 0x41a1f0399489
Exception codes: 0x0000000000000001, 0x000041a1f0399489
Culprit: HardRespring.dylib
VM Protection: 0x41a1f0399489 is not in any region.

Triggered by thread: 10
Thread name: Dispatch queue: IOHIDService(0x10426aef0) id:0x1000001d5 name:AppleM68Buttons
Call stack:
0   IOKit                         	0x00000001a504c648 0x1a5026000 + 157256     	// IOHIDEventGetType
1   HardRespring.dylib            	0x000000010458bd3c 0x104584000 + 32060      	// func_7d08
2   backboardd                    	0x00000001040d8048 0x10404c000 + 573512     	// func_10008bde4
3   backboardd                    	0x00000001040d929c 0x10404c000 + 578204     	// func_10008c85c
4   backboardd                    	0x00000001040d8850 0x10404c000 + 575568     	// func_10008c83c
5   IOKit                         	0x00000001a5054c78 0x1a5026000 + 191608     	// __IOHIDEventSystemEventCallback
6   IOKit                         	0x00000001a506af94 0x1a5026000 + 282516     	// __IOHIDSessionDispatchEvent
7   IOKit                         	0x00000001a50634ac 0x1a5026000 + 251052     	// __IOHIDServiceEventCallback
8   IOHIDEventServicePlugin       	0x00000001046c6240 0x1046c4000 + 8768       	// func_219c
9   IOHIDEventServicePlugin       	0x00000001046c6344 0x1046c4000 + 9028       	// func_230c
10  libdispatch.dylib             	0x00000001a3dae5e4 0x1a3d53000 + 374244     	// _dispatch_client_callout4
11  libdispatch.dylib             	0x00000001a3d6afb8 0x1a3d53000 + 98232      	// _dispatch_mach_msg_invoke$VARIANT$mp
12  libdispatch.dylib             	0x00000001a3d5a770 0x1a3d53000 + 30576      	// _dispatch_lane_serial_drain$VARIANT$mp
13  libdispatch.dylib             	0x00000001a3d6bbb4 0x1a3d53000 + 101300     	// _dispatch_mach_invoke$VARIANT$mp
14  libdispatch.dylib             	0x00000001a3d5a770 0x1a3d53000 + 30576      	// _dispatch_lane_serial_drain$VARIANT$mp
15  libdispatch.dylib             	0x00000001a3d5b2c4 0x1a3d53000 + 33476      	// _dispatch_lane_invoke$VARIANT$mp
16  libdispatch.dylib             	0x00000001a3d5c370 0x1a3d53000 + 37744      	// _dispatch_workloop_invoke$VARIANT$mp
17  libdispatch.dylib             	0x00000001a3d6478c 0x1a3d53000 + 71564      	// _dispatch_workloop_worker_thread
18  libsystem_pthread.dylib       	0x00000001a3dffb74 0x1a3df4000 + 47988      	// _pthread_wqthread
19  libsystem_pthread.dylib       	0x00000001a3e02740 0x1a3df4000 + 59200      	// start_wqthread

Register values:
PC: 0x0                 LR: 0x0                 CPSR: 0x0
x0: 0x0                 x1: 0x0                 x2: 0x0
x3: 0x0                 x4: 0x0                 x5: 0x0
x6: 0x0                 x7: 0x0                 x8: 0x0
x9: 0x0                 x10: 0x0                x11: 0x0
x12: 0x0                x13: 0x0                x14: 0x0
x15: 0x0                x16: 0x0                x17: 0x0
x18: 0x0                x19: 0x0                x20: 0x0
x21: 0x0                x22: 0x0                x23: 0x0
x24: 0x0                x25: 0x0                x26: 0x0
x27: 0x0                x28: 0x0

[p0358]

According to a glance on headers, the first argument seems to be a single pointer on iOS 13 rather than double pointer on iOS 14

iOS 13:

- (long long)processEvent:(struct __IOHIDEvent *)arg1 sender:(id)arg2 dispatcher:(id)arg3;	// IMP=0x0000000100016748

iOS 14;

- (long long)processEvent:(inout struct __IOHIDEvent **)arg1 sender:(id)arg2 dispatcher:(id)arg3;	// IMP=0x0000000100011320