usb 6-1: config 0 descriptor?? INFO: task kworker/0:1:12 blocked for more than 143 seconds. Not tainted 5.1.0-rc4-319354-g9a33b36 #3 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/0:1 D25280 12 2 0x80000000 Workqueue: usb_hub_wq hub_event Call Trace: schedule+0x8f/0x180 kernel/sched/core.c:3562 schedule_preempt_disabled+0x11/0x20 kernel/sched/core.c:3620 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x800/0x12b0 kernel/locking/mutex.c:1072 i2c_add_adapter+0x1e/0x110 drivers/i2c/i2c-core-base.c:1356 dvb_usb_i2c_init+0x1e5/0x2b0 drivers/media/usb/dvb-usb/dvb-usb-i2c.c:30 dvb_usb_init drivers/media/usb/dvb-usb/dvb-usb-init.c:162 [inline] dvb_usb_device_init.cold+0x3e2/0x10b3 drivers/media/usb/dvb-usb/dvb-usb-init.c:277 dtv5100_probe drivers/media/usb/dvb-usb/dtv5100.c:163 [inline] dtv5100_probe+0x1db/0x232 drivers/media/usb/dvb-usb/dtv5100.c:145 usb_probe_interface+0x31d/0x820 drivers/usb/core/driver.c:361 really_probe+0x2da/0xb10 drivers/base/dd.c:509 driver_probe_device+0x21d/0x350 drivers/base/dd.c:671 __device_attach_driver+0x1d8/0x290 drivers/base/dd.c:778 bus_for_each_drv+0x163/0x1e0 drivers/base/bus.c:454 __device_attach+0x223/0x3a0 drivers/base/dd.c:844 bus_probe_device+0x1f1/0x2a0 drivers/base/bus.c:514 device_add+0xad2/0x16e0 drivers/base/core.c:2106 usb_set_configuration+0xdf7/0x1740 drivers/usb/core/message.c:2021 generic_probe+0xa2/0xda drivers/usb/core/generic.c:210 usb_probe_device+0xc0/0x150 drivers/usb/core/driver.c:266 really_probe+0x2da/0xb10 drivers/base/dd.c:509 driver_probe_device+0x21d/0x350 drivers/base/dd.c:671 __device_attach_driver+0x1d8/0x290 drivers/base/dd.c:778 bus_for_each_drv+0x163/0x1e0 drivers/base/bus.c:454 __device_attach+0x223/0x3a0 drivers/base/dd.c:844 bus_probe_device+0x1f1/0x2a0 drivers/base/bus.c:514 device_add+0xad2/0x16e0 drivers/base/core.c:2106 usb_new_device.cold+0x537/0xccf drivers/usb/core/hub.c:2534 hub_port_connect drivers/usb/core/hub.c:5089 [inline] hub_port_connect_change drivers/usb/core/hub.c:5204 [inline] port_event drivers/usb/core/hub.c:5350 [inline] hub_event+0x138e/0x3b00 drivers/usb/core/hub.c:5432 process_one_work+0x90f/0x1580 kernel/workqueue.c:2269 worker_thread+0x9b/0xe20 kernel/workqueue.c:2415 kthread+0x313/0x420 kernel/kthread.c:253 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352 Showing all locks held in the system: 6 locks held by kworker/0:1/12: #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x81f/0x1580 kernel/workqueue.c:2240 #1: 00000000a7274994 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x853/0x1580 kernel/workqueue.c:2244 #2: 00000000f172601e (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #2: 00000000f172601e (&dev->mutex){....}, at: hub_event+0x18a/0x3b00 drivers/usb/core/hub.c:5378 #3: 000000009c4fbf13 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #3: 000000009c4fbf13 (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 #4: 000000001c036f18 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #4: 000000001c036f18 (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 #5: 00000000cdacd874 (core_lock){+.+.}, at: i2c_add_adapter+0x1e/0x110 drivers/i2c/i2c-core-base.c:1356 5 locks held by kworker/1:0/17: #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x81f/0x1580 kernel/workqueue.c:2240 #1: 00000000d4dcb897 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x853/0x1580 kernel/workqueue.c:2244 #2: 000000002c19fb56 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #2: 000000002c19fb56 (&dev->mutex){....}, at: hub_event+0x18a/0x3b00 drivers/usb/core/hub.c:5378 #3: 0000000048ec2583 (&port_dev->status_lock){+.+.}, at: usb_lock_port drivers/usb/core/hub.c:2994 [inline] #3: 0000000048ec2583 (&port_dev->status_lock){+.+.}, at: hub_port_connect drivers/usb/core/hub.c:5020 [inline] #3: 0000000048ec2583 (&port_dev->status_lock){+.+.}, at: hub_port_connect_change drivers/usb/core/hub.c:5204 [inline] #3: 0000000048ec2583 (&port_dev->status_lock){+.+.}, at: port_event drivers/usb/core/hub.c:5350 [inline] #3: 0000000048ec2583 (&port_dev->status_lock){+.+.}, at: hub_event+0x11a3/0x3b00 drivers/usb/core/hub.c:5432 #4: 00000000051aec27 (hcd->address0_mutex){+.+.}, at: hub_port_init+0x1bb/0x2d30 drivers/usb/core/hub.c:4529 1 lock held by khungtaskd/23: #0: 0000000051543412 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x269 kernel/locking/lockdep.c:5059 6 locks held by kworker/1:4/585: #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x81f/0x1580 kernel/workqueue.c:2240 #1: 000000004904a32e ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x853/0x1580 kernel/workqueue.c:2244 #2: 0000000087feb30c (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #2: 0000000087feb30c (&dev->mutex){....}, at: hub_event+0x18a/0x3b00 drivers/usb/core/hub.c:5378 #3: 00000000c94a9496 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #3: 00000000c94a9496 (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 #4: 0000000034d02c43 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #4: 0000000034d02c43 (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 #5: 00000000cdacd874 (core_lock){+.+.}, at: i2c_add_adapter+0x1e/0x110 drivers/i2c/i2c-core-base.c:1356 1 lock held by rsyslogd/5022: #0: 00000000abfe2825 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xe8/0x100 fs/file.c:801 2 locks held by getty/5112: #0: 000000000ef1ac06 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272 #1: 000000004958cfa8 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156 2 locks held by getty/5113: #0: 00000000269cc6fb (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272 #1: 0000000009ca5f3f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156 2 locks held by getty/5114: #0: 0000000037b6b0f3 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272 #1: 00000000ddf464dc (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156 2 locks held by getty/5115: #0: 00000000a4a486b4 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272 #1: 000000007204244f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156 usb 6-1: USB disconnect, device number 12 2 locks held by getty/5116: #0: 000000001a764007 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272 #1: 000000000b532cdc (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156 2 locks held by getty/5117: #0: 00000000ce4461cf (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272 #1: 0000000094019c18 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156 2 locks held by getty/5118: #0: 0000000064fd4038 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x27/0x80 drivers/tty/tty_ldisc.c:272 #1: 00000000deb6914a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21c/0x1a60 drivers/tty/n_tty.c:2156 2 locks held by syz-executor.4/5195: #0: 000000001c58adf3 (&rq->lock){-.-.}, at: rq_lock kernel/sched/sched.h:1168 [inline] #0: 000000001c58adf3 (&rq->lock){-.-.}, at: __schedule+0x1ed/0x1d00 kernel/sched/core.c:3456 #1: 0000000051543412 (rcu_read_lock){....}, at: trace_sched_stat_runtime include/trace/events/sched.h:428 [inline] #1: 0000000051543412 (rcu_read_lock){....}, at: update_curr+0x302/0x8c0 kernel/sched/fair.c:842 5 locks held by kworker/0:3/5199: #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x81f/0x1580 kernel/workqueue.c:2240 #1: 000000001a5c48b5 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x853/0x1580 kernel/workqueue.c:2244 #2: 00000000f4109d66 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #2: 00000000f4109d66 (&dev->mutex){....}, at: hub_event+0x18a/0x3b00 drivers/usb/core/hub.c:5378 #3: 00000000e6888f73 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #3: 00000000e6888f73 (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 #4: 000000001682c0c9 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #4: 000000001682c0c9 (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 7 locks held by kworker/1:5/5228: #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x81f/0x1580 kernel/workqueue.c:2240 #1: 000000004a5f44c6 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x853/0x1580 kernel/workqueue.c:2244 #2: 00000000fae3792e (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #2: 00000000fae3792e (&dev->mutex){....}, at: hub_event+0x18a/0x3b00 drivers/usb/core/hub.c:5378 #3: 00000000cb757388 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #3: 00000000cb757388 (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 #4: 00000000569f3808 (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #4: 00000000569f3808 (&dev->mutex){....}, at: __device_attach+0x80/0x3a0 drivers/base/dd.c:821 #5: 00000000cdacd874 (core_lock){+.+.}, at: i2c_register_adapter+0x507/0xb30 drivers/i2c/i2c-core-base.c:1292 #6: 00000000e02e911a (i2c_register_adapter){+.+.}, at: i2c_lock_bus include/linux/i2c.h:739 [inline] #6: 00000000e02e911a (i2c_register_adapter){+.+.}, at: i2c_smbus_xfer+0x79/0x130 drivers/i2c/i2c-core-smbus.c:533 3 locks held by kworker/0:4/5249: #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_data kernel/workqueue.c:619 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: 00000000d9adc1f9 ((wq_completion)usb_hub_wq){+.+.}, at: process_one_work+0x81f/0x1580 kernel/workqueue.c:2240 #1: 00000000a4a8b5b5 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x853/0x1580 kernel/workqueue.c:2244 #2: 000000008dbbd9fb (&dev->mutex){....}, at: device_lock include/linux/device.h:1207 [inline] #2: 000000008dbbd9fb (&dev->mutex){....}, at: hub_event+0x18a/0x3b00 drivers/usb/core/hub.c:5378 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 23 Comm: khungtaskd Not tainted 5.1.0-rc4-319354-g9a33b36 #3 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xe8/0x16e lib/dump_stack.c:113 nmi_cpu_backtrace.cold+0x48/0x87 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1a6/0x1bd lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:204 [inline] watchdog+0x98e/0xe20 kernel/hung_task.c:288 kthread+0x313/0x420 kernel/kthread.c:253 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 7636 Comm: blkid Not tainted 5.1.0-rc4-319354-g9a33b36 #3 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:hlock_class kernel/locking/lockdep.c:163 [inline] RIP: 0010:mark_lock+0x62/0x10d0 kernel/locking/lockdep.c:3395 Code: b6 04 02 84 c0 74 08 3c 01 0f 8e 69 06 00 00 0f b7 45 20 66 a9 ff 1f 74 7e 48 ba 00 00 00 00 00 fc ff df 4c 89 f1 48 c1 e9 03 <0f> b6 14 11 84 d2 74 09 80 fa 03 0f 8e 4a 06 00 00 25 ff 1f 00 00 RSP: 0000:ffff88806e9b7ca8 EFLAGS: 00000806 RAX: 0000000000008498 RBX: 0000000000000000 RCX: 1ffff11011d60a3c RDX: dffffc0000000000 RSI: ffff88808eb051c0 RDI: ffff88808eb04980 RBP: ffff88808eb051c0 R08: 0000000000000498 R09: 0000000000000498 R10: ffff88808eb051c0 R11: ffff88808eb04980 R12: 0000000000000008 R13: 0000000000000100 R14: ffff88808eb051e0 R15: ffff88808eb04980 FS: 0000000000000000(0000) GS:ffff8880ad000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f24cc6f1db8 CR3: 0000000093c2c000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __lock_acquire+0x522/0x37c0 kernel/locking/lockdep.c:3657 lock_acquire+0x10d/0x2f0 kernel/locking/lockdep.c:4211 down_read_trylock kernel/locking/rwsem.c:56 [inline] down_read_trylock+0x57/0xa0 kernel/locking/rwsem.c:51 do_user_addr_fault arch/x86/mm/fault.c:1416 [inline] __do_page_fault+0x33d/0xd20 arch/x86/mm/fault.c:1541 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1143 RIP: 0033:0x7f24cc935556 Code: 8d 1d 98 00 00 00 48 8d 0d 87 23 00 00 4a 0f bf 0c 51 4e 8d 1c 19 41 ff e3 66 66 2e 0f 1f 84 00 00 00 00 00 88 57 f3 89 57 f4 <48> 89 57 f8 eb 6e 0f 1f 40 00 88 57 f7 48 89 57 f8 eb 61 0f 1f 80 RSP: 002b:00007fff1778a398 EFLAGS: 00010202 RAX: 00007f24cc6f1db8 RBX: 00007f24ccb3c9a8 RCX: ffffffffffffff8c RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f24cc6f1dc0 RBP: 00007fff1778a6f0 R08: 0000000000000240 R09: 0000000000000008 R10: 0000000000000008 R11: 00007f24cc935556 R12: 00007fff1778a7d8 R13: 0000000000000002 R14: 00007fff1778a410 R15: 00007fff1778a3e0