Extracting prog: 1m48.064665108s
Minimizing prog: 3m0.876078631s
Simplifying prog options: 0s
Extracting C: 1m6.544894075s
Simplifying C: 13m2.364467543s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28c, &(0x7f0000001980)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)

program crashed: kernel BUG in hfs_write_inode
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=43.811781157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28c, &(0x7f0000001980)="$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")

program did not crash
testing program (duration=43.811781157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro
detailed listing:
executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)

program did not crash
testing program (duration=43.811781157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28c, &(0x7f0000001980)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=43.811781157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
simplifying C reproducer
testing compiled C program (duration=43.811781157s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.811781157s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.811781157s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program did not crash
testing compiled C program (duration=43.811781157s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.811781157s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.811781157s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.811781157s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.811781157s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.811781157s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.811781157s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.811781157s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.811781157s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.811781157s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.811781157s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.811781157s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing program (duration=43.811781157s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28c, &(0x7f0000001980)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)

program crashed: kernel BUG in hfs_write_inode
validation run: crashed=true
testing program (duration=43.811781157s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28c, &(0x7f0000001980)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)

program crashed: kernel BUG in hfs_write_inode
validation run: crashed=true
testing program (duration=43.811781157s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28c, &(0x7f0000001980)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)

program crashed: kernel BUG in hfs_write_inode
validation run: crashed=true
reproducing took 22m21.156906473s
repro crashed as (corrupted=false):
------------[ cut here ]------------
kernel BUG at fs/hfs/inode.c:449!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 39 Comm: kworker/u4:2 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
Workqueue: writeback wb_workfn (flush-7:0)
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : hfs_write_inode+0x8d8/0x8dc fs/hfs/inode.c:449
lr : hfs_write_inode+0x8d8/0x8dc fs/hfs/inode.c:449
sp : ffff80001cee7280
x29: ffff80001cee73c0 x28: 1fffe0001a8311e6 x27: dfff800000000000
x26: dfff800000000000 x25: ffff80001cee7280 x24: ffff7000039dce50
x23: ffff800011cece40 x22: 0000000000000000 x21: 0000000000000000
x20: ffff0000d4188e58 x19: ffff80001cee7300 x18: ffff800011b9bf60
x17: ffff80001835b000 x16: ffff8000082eef80 x15: 0000000000000000
x14: 0000000000000004 x13: 0000000000ff0100 x12: 0000000000ff0100
x11: ff00800008fb3c84 x10: 0000000000000000 x9 : ffff800008fb3c84
x8 : ffff0000c4320000 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000006 x1 : ffff8000155de3a0 x0 : 0000000000000000
Call trace:
 hfs_write_inode+0x8d8/0x8dc fs/hfs/inode.c:449
 write_inode fs/fs-writeback.c:1470 [inline]
 __writeback_single_inode+0x5e0/0x1554 fs/fs-writeback.c:1687
 writeback_sb_inodes+0x858/0x143c fs/fs-writeback.c:1913
 wb_writeback+0x414/0xfcc fs/fs-writeback.c:2087
 wb_do_writeback fs/fs-writeback.c:2230 [inline]
 wb_workfn+0x360/0xe18 fs/fs-writeback.c:2270
 process_one_work+0x7f8/0x13a4 kernel/workqueue.c:2292
 worker_thread+0x8c4/0xfec kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
Code: aa1403e0 97e4ce70 17ffff9c 97d3de66 (d4210000) 
---[ end trace 0000000000000000 ]---

final repro crashed as (corrupted=false):
------------[ cut here ]------------
kernel BUG at fs/hfs/inode.c:449!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 39 Comm: kworker/u4:2 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
Workqueue: writeback wb_workfn (flush-7:0)
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : hfs_write_inode+0x8d8/0x8dc fs/hfs/inode.c:449
lr : hfs_write_inode+0x8d8/0x8dc fs/hfs/inode.c:449
sp : ffff80001cee7280
x29: ffff80001cee73c0 x28: 1fffe0001a8311e6 x27: dfff800000000000
x26: dfff800000000000 x25: ffff80001cee7280 x24: ffff7000039dce50
x23: ffff800011cece40 x22: 0000000000000000 x21: 0000000000000000
x20: ffff0000d4188e58 x19: ffff80001cee7300 x18: ffff800011b9bf60
x17: ffff80001835b000 x16: ffff8000082eef80 x15: 0000000000000000
x14: 0000000000000004 x13: 0000000000ff0100 x12: 0000000000ff0100
x11: ff00800008fb3c84 x10: 0000000000000000 x9 : ffff800008fb3c84
x8 : ffff0000c4320000 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000006 x1 : ffff8000155de3a0 x0 : 0000000000000000
Call trace:
 hfs_write_inode+0x8d8/0x8dc fs/hfs/inode.c:449
 write_inode fs/fs-writeback.c:1470 [inline]
 __writeback_single_inode+0x5e0/0x1554 fs/fs-writeback.c:1687
 writeback_sb_inodes+0x858/0x143c fs/fs-writeback.c:1913
 wb_writeback+0x414/0xfcc fs/fs-writeback.c:2087
 wb_do_writeback fs/fs-writeback.c:2230 [inline]
 wb_workfn+0x360/0xe18 fs/fs-writeback.c:2270
 process_one_work+0x7f8/0x13a4 kernel/workqueue.c:2292
 worker_thread+0x8c4/0xfec kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
Code: aa1403e0 97e4ce70 17ffff9c 97d3de66 (d4210000) 
---[ end trace 0000000000000000 ]---