program: r0 = syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x100c000, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x443c, &(0x7f0000008940)="$eJzs3b9PHFceAPA3A3cGn+0D24VPOulWOkt3ujshcHUJloIxNgabOHJiK0qzXmBtkywsgiVK4YJ0llJFShGlsBIpHZVFkdb5E9KkdGpLSZEmUiQrRLs7i3eGXbGxWIjJ5yOZYd5v9jvz9k0xfnGicm9hNbewmiss5cpzd1bP5d4vl9YWiyHeJy/Y//I+DY9EN66TTtrsC2HfrsU/kusXL79561wIX89/+3Rra2srVPWGlkaafv/px/tzzceGOFOn2m7r1vbKOyGE0zvGVdUTQnj7qxCiEMKFJG08OfaHEE6Eet6t+x/dzu3RaB49KZ7PP5t5sDl6dnrj4Wb7vz0K4bPS3/53d/H7f/aMfvefPeoeAAAAAAAAAAAAAAAAAICX3OSN6zffGB4Jj6PQuxHtfF93Mjm2ez92a8/8o/t/LAAAAAAAAAAAAAAAAAAAAPxOPX//PxedbPH+/0RyHGtTf+u17o+R7pl6/frEpeGRZP/3aEf+/5OkHy70hMEW+75n93+/kKnfev/3nf28qMb4Gv0OhCgeSp3H8dBQCF8kG7+fiY7GpfJq5b93ymtL83s2jJdWOv713ftT0Uk29O80/uOZ9ru///+pHVdT9fz23l1ih1o6/j1ty335YdRR/C+mq7VvcM+c6n4Xh1g6/r21tP7mAmP1CaAa/497d4//RKb9bt3/J0IIuag61lxqBqiuYarp7dYrpKXj/6daWmrqTD7Idvf/z5n4X8q0f1Dz/3r2i4iW0vH/cy2tL1Xi+f0/GO9+/1/OtH8Q8a+Of933f0fS8T9ST+xNFal9kp3O/5OZ9rsV/5txMs4TUeoK2Ijq6e3+vzrS0vHv25H//Pkv7mj9dyVTf7+e/xr9Np7/GtP/v6P68x+tpePf37Zcp/f/VKZet+f/ser6bx+eMg6rdPyP1tLSa+eB2s9O4z+dab9b8a+tSvqS+DfNJ78cqad/bv3XkXT8/1JPjJtLrNd+1tZ/0e7r/6uZ9g9i/Vcd/3rc3V4Pi3T8j7UtV43/Nx18/1/L1Ot+/EMYttZ/Yen4H29brnb/9+0e/5lMvW7H/1/dbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgJTCeHAdCFA+lzuN4aCiEi8n5mXA0mi3M52dL5bn3VkOYSNJz4WR0t1SeLZTyC0vl+WK+UCqV50K4lOSfDn3RaqlcyS8Wli9vt9Uf3SsWViqzxUIlhDCZpP89HG+0NbtQWSwshxCubOf9NS6vLN8rLOXnF1ZeHR4eHg5T22MYjIofVIpLlXrv9dwQprfrDkRNg6tlX90ey7Ho3fLaylKhVEu/1lSnVJ4rlJrqzCR5n4TBqLKytjRXqBTzpfLdRn8HaSw5TkzdeOvGtZEd+bej+nF8f4cFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwG/0ePSVT0MIvfWzOISQi5JfouRfyqMnxfP5ZzMPNkfPTm883HzaqgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYZeOUSKGgjAAz3sWWnoMq5B0thFFtDAieAI9hofRo3gJ72BhYbvFsoR9gd1kA2l2q+9rhslPMgMZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWu3/pXp/rJiLFxfo84vv953c3fyz18+bw+2cn2JHjeXjqbu/qpvz3NMmvy6O/Nvdp3731/er/Y68OvkZ3Mr6nremcsbl7m9tvmHsZKVcR0Zb8KuVcVcu+BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF8BAAD//xiLGnw=") symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffc9) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file3\x00', 0x5, &(0x7f0000000ac0), 0x1, 0xa0d, &(0x7f0000002080)="$eJzs3U2MG1cdAPA33vWm+ShxSkJDGtqEQls+uttsQviIoKmaC1FTcatUcYnStESkAZFK0KqHJCdutKrClQ9x6qUChEQvKOqJSyUaiUtPhQMHoiBV4gCFZNHuvue1/7EZe5Os4/XvJ80+z/yf/d54x+PxzLz3EjCxGot/NqSUqpQuvv3Gkb8/9LeNi4seb+doLf2d7phrLmfvWl58MLWcXvvw1RO90irNL/0t8+npq+3nbk4pnUt70qXUSrsuXn793fmnjp0/emHve28eunKbVh8AACbKty4dOrDjL3+6b9tHb91/eOmHwLJyfN7K81vycf/hfOBfjv8bqXu+6pg6zYR803lqhHxTPfJ1ltMM+ab7lD8TXrfZJ9+GmvKnOpb1Wm8YZ2U7bqWqMds132jMzi7/Jk9Lv+tnqtkzp04/f3ZEFQVuuX8+kFLaYzKZJnFa2DrqPRDAsni98Abn4pmFm9N+tenByr/6RKP38+EWWOvtf1l1brTlr1D+/y//V+ftcbh11uvWVNarfI625Pl4HSHevzTs57+8Xrwe0Rywnv2uI4zL9YV+9Zxa43qsVr/6x+1ivfp6Tsv78I0Q7/z8xP/puPyPgd7+5fy/yTSx08Kod0DAHSveN7eQlXi8ry/GN9TE76qJb6yJb6qJb66JwyT77Us/Sa9VK7/z42/6Yc+HlfNsd+f0Y0PWJ56PHLb8eN/vsG62/Hg/MdzJfn/8mZNfee7Zy8v3/1ft7f963t735PlW/mxdyhnK+cJ4Xr1973+ru5xGn3z3hPrc3SP/0uPt3fmq7Suvkzr2MzfUY2f387b2y7e7O18r5NuYp7tCfePxyabwvHL8Ufar5f2aDuvbDOsxE+pR9ivbchrrAatRtsd+9/+X7XNnalbPnzp98rE8X7bTP041Nywu37fG9QZu3qDtf3am7vY/W9rLm43O/cLWleVV536hFZbP91m+P8+X77nvTG1cWj574nunn7vVKw8T7uzLr3z3+OnTJ3/ggQceeNB+MOo9E3C7zb304vfnzr78yqOnXjz+wskXTp7Zf/Dg/vn5g1/df2Bu6bh+rvPoHlhPVr70R10TAAAAAAAAAAAAYFA/PHrk8p/f+fL7y+3/V9r/lfb/5c7f0v7/x6H9f2wnX9rBl3aA23rEl/KEDlZnQr5mnj4e6rs9lLMjPO8TOW2P45fb/5fiYr+upT73huWx/96SL3QncEN/KTOhD5I4XuCnc3ohp79MMELVxt6Lc1rXv3XZ1kv/FPqlGE/l/1a2htKPSWn/3a9fp7L/37YGdeTWW4vmhKNeR6C3f+j/22Sa2GlhYSqdG/VOCOAOGP+znPcs6Zk/fPOuxalku/pE9xm/2H8p3Iw7ffxJ5a+v8T/b498NvP8LI+a1Vlfuv3925f2OYtOuQcuP61/6gd4+XPkf5fLL2jycBit/4Reh/HhBaED/CeVvGrD8G9Z/9+rK/28uv7xtjzw4aPnLNa4a3fWI543L9b943ri4Fta/9O059PqvcqDG67l8mGTjMs7ssMZl/N9+4n0YX8rzZUdY7nOI450MW/9yf0X5HtgRXr+q+X4z/u94+1pO6z4PZfzfsj22esw3OuabPd7b9bqvgXH1get/JtPETgsLC7f3hFaNkRbOyN//Uf9OGHX5o37/68Txf+MxfBz/N8bj+L8xHsf/jfE4vl6Mx/F/4/sZx/+N8XvD68bxgXfWxD9ZE99VE7+vJr67Jv6pmvjemvj9NfEHauL31MQfrIl/pib+2Zr4QzXxR2rin6uJr3elPcqkrj9Mstg+z+cfJke5/tPv87+9Jg6Mr5++te/JZ3/z7dZy+/+Z9vmQch3vcJ5v5t/OP8rz8bp36phfjL2T5/8a4nf6+Q6YJLH/jPj9/nBNHBhf5T4vn2+YQFXvHnsG7beq33E+4+XzOf1CTr+Y00dzOpvTuZzuy+n8GtWP2+PJX//u0GvVyu/9rSE+6P3ksT1Q7Cdq/4D1iecHhr2fPfbjN6ybLX+VzcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGprH098CBnVVKF99+48gzx07NLS55vJ2jtfR3umOu2X5eSo/ldCqnP88Prn346onO9HpOqzSfqlS1l6enr7ZL2pxSOpf2pEuplXZdvPz6u/NPHTt/9MLe9948dOX2vQMAAACw/v0vAAD//7QcDiU=") mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="c2c12671d2070019db4fdf6e2c00"]) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@nfs_export_off, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000100)='./file3\x00', &(0x7f0000000140), 0x208400, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file0/file1'}}]}) r2 = syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000280)) syz_usb_connect(0x4, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="335df311cf9679f47048ef98f0c717b00c47f973e95d48b2a95b7a675ebca1a38225d9e49c6a8bc640a0f42437f1ad5e7472fe67a833d7e413bd54e2f80c745e6c4c", @ANYRESDEC=r2, @ANYBLOB="da9814beea745e7ca93f24cc6cc925205561da54a738ff5f0b831b6260ecddad57e58ac83dc4ba68be9a8d8b314a17c32654452af4f1c925a4b8efd7cbecfb447501be698d2a63bcd8e6bc8a3074b199f54fcafe7a59add51b7650b8b79acb898d39fde87bd39d8a497a0f5ed639074ed454026be44d", @ANYRESDEC=r0, @ANYBLOB="891740b63aa7bd3eb59256bf607bcebb6cdff6c95f820b180a687618557347f24fc634b0d1383db7af41a09a1f7ba1ecc6a8ba46f6e0bdf311be26ba8eb95e3e2e1cdf794b313db4ba8f657e17da7c22320ff70fd1fd77eeb58e8c5176fadbcf5cb5357ad817124e7c2a74fa01874eebb3c8dee8c27fe4b85a9440a6fed490b2b1361745549ee300c15dda431e41367945c8944d6ef3667bb22ce2d7410cd3429fa081ec6685b30f7317b7ef61415b8584c00ed0132aaade1b6e8d351e4495e4ebf4b98bbc046a6ae25c5526d9f852d9b5e12bbf7e55bd1d908f84f7d03298abb5fa2b33530d5dfe0e58a5ca57a820"], 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae122d34aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a87ee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x5, 0x9, 0x9, 0x19, "9e959f16deab7b08aa26e66c4056a516950600000000000000eef4fb0efcc1d8a6078ed98e5e6bd5f8643902dd8f6fac274de9d940ffa5e592bbd48685450d00", "f625c10e6e4c36c800dee96015e0fb7e904dc8df62a3a893ec00347f41be5a08", [0x6, 0x9]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x200103, 0x0) [ 75.280557][ T4703] Bluetooth: hci0: command tx timeout [ 75.662882][ T5354] loop0: detected capacity change from 0 to 32768 [ 75.701448][ T5354] JBD2: Ignoring recovery information on journal [ 75.764205][ T5354] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 75.793115][ T5354] ================================================================== [ 75.796687][ T5354] BUG: KASAN: use-after-free in ocfs2_reserve_suballoc_bits+0xdd0/0x4640 [ 75.800391][ T5354] Read of size 4 at addr ffff888053c1d004 by task syz.0.0/5354 [ 75.804669][ T5354] [ 75.805834][ T5354] CPU: 0 UID: 0 PID: 5354 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.805850][ T5354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.805857][ T5354] Call Trace: [ 75.805864][ T5354] [ 75.805871][ T5354] dump_stack_lvl+0x189/0x250 [ 75.805888][ T5354] ? __kasan_check_byte+0x12/0x40 [ 75.805904][ T5354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.805916][ T5354] ? lock_release+0x4b/0x3e0 [ 75.805933][ T5354] ? __virt_addr_valid+0x4a5/0x5c0 [ 75.805947][ T5354] print_report+0xca/0x240 [ 75.805959][ T5354] ? ocfs2_reserve_suballoc_bits+0xdd0/0x4640 [ 75.805975][ T5354] kasan_report+0x118/0x150 [ 75.805988][ T5354] ? ocfs2_reserve_suballoc_bits+0xdd0/0x4640 [ 75.806007][ T5354] ocfs2_reserve_suballoc_bits+0xdd0/0x4640 [ 75.806028][ T5354] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 75.806083][ T5354] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 75.806099][ T5354] ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10 [ 75.806118][ T5354] ? stack_depot_save_flags+0x41b/0x860 [ 75.806134][ T5354] ? kasan_save_track+0x4f/0x80 [ 75.806145][ T5354] ? kasan_save_track+0x3e/0x80 [ 75.806154][ T5354] ? __kasan_kmalloc+0x93/0xb0 [ 75.806165][ T5354] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 75.806176][ T5354] ? ocfs2_reserve_new_metadata_blocks+0x113/0x940 [ 75.806192][ T5354] ? ocfs2_extend_dir+0xc76/0x4870 [ 75.806204][ T5354] ? ocfs2_prepare_dir_for_insert+0x2fe8/0x5450 [ 75.806217][ T5354] ? ocfs2_symlink+0xaa4/0x23e0 [ 75.806231][ T5354] ? vfs_symlink+0x143/0x2f0 [ 75.806243][ T5354] ? do_symlinkat+0x1b1/0x3f0 [ 75.806254][ T5354] ? __x64_sys_symlink+0x7a/0x90 [ 75.806265][ T5354] ? do_syscall_64+0xfa/0x3b0 [ 75.806281][ T5354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.806306][ T5354] ? __kasan_kmalloc+0x93/0xb0 [ 75.806320][ T5354] ? ocfs2_reserve_new_metadata_blocks+0x113/0x940 [ 75.806338][ T5354] ocfs2_reserve_new_metadata_blocks+0x403/0x940 [ 75.806360][ T5354] ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10 [ 75.806378][ T5354] ? down_write+0x162/0x1f0 [ 75.806388][ T5354] ? __pfx_down_write+0x10/0x10 [ 75.806398][ T5354] ? __bfs+0x151/0x2a0 [ 75.806407][ T5354] ? __pfx_hlock_conflict+0x10/0x10 [ 75.806419][ T5354] ocfs2_extend_dir+0xc76/0x4870 [ 75.806439][ T5354] ? __pfx_ocfs2_extend_dir+0x10/0x10 [ 75.806454][ T5354] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 75.806468][ T5354] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.806483][ T5354] ? __pfx_ocfs2_journal_access_di+0x10/0x10 [ 75.806516][ T5354] ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0 [ 75.806532][ T5354] ? preempt_schedule_thunk+0x16/0x30 [ 75.806545][ T5354] ? __lock_acquire+0xab9/0xd20 [ 75.806565][ T5354] ? rcu_is_watching+0x15/0xb0 [ 75.806575][ T5354] ? ocfs2_buffer_cached+0x42a/0x8d0 [ 75.806591][ T5354] ? ocfs2_dx_dir_name_hash+0x229/0xaf0 [ 75.806604][ T5354] ? __asan_memcpy+0x40/0x70 [ 75.806615][ T5354] ? ocfs2_dx_dir_name_hash+0x9ba/0xaf0 [ 75.806629][ T5354] ? __pfx_ocfs2_dx_dir_name_hash+0x10/0x10 [ 75.806642][ T5354] ? ocfs2_buffer_cached+0x42a/0x8d0 [ 75.806659][ T5354] ocfs2_prepare_dir_for_insert+0x2fe8/0x5450 [ 75.806677][ T5354] ? rcu_is_watching+0x15/0xb0 [ 75.806687][ T5354] ? __pfx_ocfs2_prepare_dir_for_insert+0x10/0x10 [ 75.806698][ T5354] ? ocfs2_search_dirblock+0x381/0x850 [ 75.806713][ T5354] ? __pfx_ocfs2_search_dirblock+0x10/0x10 [ 75.806725][ T5354] ? rcu_is_watching+0x15/0xb0 [ 75.806735][ T5354] ? ocfs2_buffer_cached+0x42a/0x8d0 [ 75.806751][ T5354] ? __brelse+0x59/0xa0 [ 75.806764][ T5354] ? ocfs2_find_entry+0xddb/0x2000 [ 75.806775][ T5354] ? __lock_acquire+0xab9/0xd20 [ 75.806795][ T5354] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 75.806807][ T5354] ? __pfx_ocfs2_read_blocks+0x10/0x10 [ 75.806817][ T5354] ? __lock_acquire+0xab9/0xd20 [ 75.806832][ T5354] ? __lock_acquire+0xab9/0xd20 [ 75.806843][ T5354] ? ocfs2_read_inode_block+0x11d/0x190 [ 75.806850][ T5354] ? __pfx_ocfs2_read_inode_block+0x10/0x10 [ 75.806857][ T5354] ? do_raw_spin_unlock+0x4d/0x240 [ 75.806866][ T5354] ? ocfs2_inode_lock_full_nested+0xabe/0x1b40 [ 75.806882][ T5354] ? __pfx_ocfs2_inode_lock_full_nested+0x10/0x10 [ 75.806898][ T5354] ? __kernel_text_address+0xd/0x40 [ 75.806912][ T5354] ? unwind_get_return_address+0x4d/0x90 [ 75.806927][ T5354] ? ocfs2_check_dir_for_entry+0x239/0x3f0 [ 75.806942][ T5354] ? __pfx_ocfs2_check_dir_for_entry+0x10/0x10 [ 75.806958][ T5354] ocfs2_symlink+0xaa4/0x23e0 [ 75.806975][ T5354] ? __pfx_ocfs2_symlink+0x10/0x10 [ 75.806989][ T5354] ? __pfx_ocfs2_inode_lock_full_nested+0x10/0x10 [ 75.807006][ T5354] ? __lock_acquire+0xab9/0xd20 [ 75.807027][ T5354] ? __lock_acquire+0xab9/0xd20 [ 75.807042][ T5354] ? do_raw_spin_lock+0x121/0x290 [ 75.807057][ T5354] ? do_raw_spin_unlock+0x4d/0x240 [ 75.807071][ T5354] ? put_pid+0xe9/0x130 [ 75.807082][ T5354] ? ocfs2_permission+0x107/0x1b0 [ 75.807095][ T5354] ? __pfx_ocfs2_permission+0x10/0x10 [ 75.807108][ T5354] ? from_kgid+0x1b0/0x650 [ 75.807122][ T5354] ? __pfx_from_kgid+0x10/0x10 [ 75.807136][ T5354] ? __pfx_apparmor_path_symlink+0x10/0x10 [ 75.807148][ T5354] ? make_vfsgid+0x49/0xa0 [ 75.807157][ T5354] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 75.807172][ T5354] ? inode_permission+0x149/0x470 [ 75.807187][ T5354] ? __pfx_ocfs2_permission+0x10/0x10 [ 75.807199][ T5354] ? bpf_lsm_inode_symlink+0x9/0x20 [ 75.807217][ T5354] vfs_symlink+0x143/0x2f0 [ 75.807231][ T5354] do_symlinkat+0x1b1/0x3f0 [ 75.807244][ T5354] ? __pfx_do_symlinkat+0x10/0x10 [ 75.807256][ T5354] ? strncpy_from_user+0x150/0x290 [ 75.807270][ T5354] ? getname_flags+0x1e5/0x540 [ 75.807285][ T5354] __x64_sys_symlink+0x7a/0x90 [ 75.807298][ T5354] do_syscall_64+0xfa/0x3b0 [ 75.807315][ T5354] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.807330][ T5354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.807342][ T5354] ? clear_bhb_loop+0x60/0xb0 [ 75.807354][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.807365][ T5354] RIP: 0033:0x7f6c3998ebe9 [ 75.807377][ T5354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.807388][ T5354] RSP: 002b:00007f6c3a7e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 75.807402][ T5354] RAX: ffffffffffffffda RBX: 00007f6c39bc5fa0 RCX: 00007f6c3998ebe9 [ 75.807413][ T5354] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000440 [ 75.807421][ T5354] RBP: 00007f6c39a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 75.807428][ T5354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.807435][ T5354] R13: 00007f6c39bc6038 R14: 00007f6c39bc5fa0 R15: 00007ffe8bf32ee8 [ 75.807448][ T5354] [ 75.807452][ T5354] [ 76.084141][ T5354] The buggy address belongs to the physical page: [ 76.086962][ T5354] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f7000162 pfn:0x53c1d [ 76.091065][ T5354] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 76.094158][ T5354] raw: 04fff00000000000 ffffea00014f06c8 ffffea00014f0788 0000000000000000 [ 76.097819][ T5354] raw: 00000007f7000162 0000000000000000 00000000ffffffff 0000000000000000 [ 76.101416][ T5354] page dumped because: kasan: bad access detected [ 76.104172][ T5354] page_owner tracks the page as freed [ 76.106403][ T5354] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 5329, tgid 5329 (udevd), ts 75697230836, free_ts 75777131956 [ 76.113909][ T5354] post_alloc_hook+0x240/0x2a0 [ 76.115992][ T5354] get_page_from_freelist+0x21e4/0x22c0 [ 76.118434][ T5354] __alloc_frozen_pages_noprof+0x181/0x370 [ 76.120972][ T5354] alloc_pages_mpol+0x232/0x4a0 [ 76.123041][ T5354] vma_alloc_folio_noprof+0xe4/0x200 [ 76.125311][ T5354] folio_prealloc+0x30/0x180 [ 76.127362][ T5354] __handle_mm_fault+0x2ab9/0x5440 [ 76.129591][ T5354] handle_mm_fault+0x40a/0x8e0 [ 76.131639][ T5354] do_user_addr_fault+0x764/0x1390 [ 76.136561][ T5354] exc_page_fault+0x76/0xf0 [ 76.138437][ T5354] asm_exc_page_fault+0x26/0x30 [ 76.140595][ T5354] page last free pid 5329 tgid 5329 stack trace: [ 76.143259][ T5354] free_unref_folios+0xdbd/0x1520 [ 76.145493][ T5354] folios_put_refs+0x559/0x640 [ 76.147610][ T5354] free_pages_and_swap_cache+0x4be/0x520 [ 76.150137][ T5354] tlb_flush_mmu+0x3a0/0x680 [ 76.152184][ T5354] tlb_finish_mmu+0xc3/0x1d0 [ 76.154222][ T5354] vms_clear_ptes+0x42c/0x540 [ 76.156214][ T5354] vms_complete_munmap_vmas+0x206/0x8a0 [ 76.158564][ T5354] do_vmi_align_munmap+0x358/0x420 [ 76.160791][ T5354] do_vmi_munmap+0x253/0x2e0 [ 76.162707][ T5354] __vm_munmap+0x23b/0x3d0 [ 76.164635][ T5354] __x64_sys_munmap+0x60/0x70 [ 76.166576][ T5354] do_syscall_64+0xfa/0x3b0 [ 76.168579][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.171063][ T5354] [ 76.172122][ T5354] Memory state around the buggy address: [ 76.174545][ T5354] ffff888053c1cf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 76.177916][ T5354] ffff888053c1cf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 76.181390][ T5354] >ffff888053c1d000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 76.184827][ T5354] ^ [ 76.186623][ T5354] ffff888053c1d080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 76.189924][ T5354] ffff888053c1d100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 76.193277][ T5354] ================================================================== [ 76.258639][ T5354] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 76.261693][ T5354] CPU: 0 UID: 0 PID: 5354 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.265740][ T5354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.270316][ T5354] Call Trace: [ 76.271842][ T5354] [ 76.273149][ T5354] dump_stack_lvl+0x99/0x250 [ 76.275178][ T5354] ? __asan_memcpy+0x40/0x70 [ 76.277197][ T5354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.279479][ T5354] ? __pfx__printk+0x10/0x10 [ 76.281512][ T5354] vpanic+0x281/0x750 [ 76.283256][ T5354] ? preempt_schedule+0xae/0xc0 [ 76.285365][ T5354] ? __pfx_vpanic+0x10/0x10 [ 76.287300][ T5354] ? preempt_schedule_common+0x83/0xd0 [ 76.289623][ T5354] ? preempt_schedule+0xae/0xc0 [ 76.291738][ T5354] ? __pfx_preempt_schedule+0x10/0x10 [ 76.293904][ T5354] panic+0xb9/0xc0 [ 76.295263][ T5354] ? __pfx_panic+0x10/0x10 [ 76.297006][ T5354] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 76.299295][ T5354] ? ocfs2_reserve_suballoc_bits+0xdd0/0x4640 [ 76.301724][ T5354] check_panic_on_warn+0x89/0xb0 [ 76.303838][ T5354] ? ocfs2_reserve_suballoc_bits+0xdd0/0x4640 [ 76.306461][ T5354] end_report+0x78/0x160 [ 76.308522][ T5354] kasan_report+0x129/0x150 [ 76.310497][ T5354] ? ocfs2_reserve_suballoc_bits+0xdd0/0x4640 [ 76.313142][ T5354] ocfs2_reserve_suballoc_bits+0xdd0/0x4640 [ 76.315715][ T5354] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 76.318090][ T5354] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 76.320546][ T5354] ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10 [ 76.323195][ T5354] ? stack_depot_save_flags+0x41b/0x860 [ 76.325586][ T5354] ? kasan_save_track+0x4f/0x80 [ 76.327617][ T5354] ? kasan_save_track+0x3e/0x80 [ 76.329719][ T5354] ? __kasan_kmalloc+0x93/0xb0 [ 76.331790][ T5354] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 76.334166][ T5354] ? ocfs2_reserve_new_metadata_blocks+0x113/0x940 [ 76.337043][ T5354] ? ocfs2_extend_dir+0xc76/0x4870 [ 76.339275][ T5354] ? ocfs2_prepare_dir_for_insert+0x2fe8/0x5450 [ 76.342014][ T5354] ? ocfs2_symlink+0xaa4/0x23e0 [ 76.344206][ T5354] ? vfs_symlink+0x143/0x2f0 [ 76.346129][ T5354] ? do_symlinkat+0x1b1/0x3f0 [ 76.348031][ T5354] ? __x64_sys_symlink+0x7a/0x90 [ 76.350083][ T5354] ? do_syscall_64+0xfa/0x3b0 [ 76.352155][ T5354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.354892][ T5354] ? __kasan_kmalloc+0x93/0xb0 [ 76.356863][ T5354] ? ocfs2_reserve_new_metadata_blocks+0x113/0x940 [ 76.359530][ T5354] ocfs2_reserve_new_metadata_blocks+0x403/0x940 [ 76.362060][ T5354] ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10 [ 76.364931][ T5354] ? down_write+0x162/0x1f0 [ 76.366704][ T5354] ? __pfx_down_write+0x10/0x10 [ 76.368748][ T5354] ? __bfs+0x151/0x2a0 [ 76.370550][ T5354] ? __pfx_hlock_conflict+0x10/0x10 [ 76.372864][ T5354] ocfs2_extend_dir+0xc76/0x4870 [ 76.374988][ T5354] ? __pfx_ocfs2_extend_dir+0x10/0x10 [ 76.377319][ T5354] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 76.379856][ T5354] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.382211][ T5354] ? __pfx_ocfs2_journal_access_di+0x10/0x10 [ 76.385016][ T5354] ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0 [ 76.387732][ T5354] ? preempt_schedule_thunk+0x16/0x30 [ 76.389966][ T5354] ? __lock_acquire+0xab9/0xd20 [ 76.391935][ T5354] ? rcu_is_watching+0x15/0xb0 [ 76.394020][ T5354] ? ocfs2_buffer_cached+0x42a/0x8d0 [ 76.396163][ T5354] ? ocfs2_dx_dir_name_hash+0x229/0xaf0 [ 76.398606][ T5354] ? __asan_memcpy+0x40/0x70 [ 76.400691][ T5354] ? ocfs2_dx_dir_name_hash+0x9ba/0xaf0 [ 76.403141][ T5354] ? __pfx_ocfs2_dx_dir_name_hash+0x10/0x10 [ 76.405712][ T5354] ? ocfs2_buffer_cached+0x42a/0x8d0 [ 76.407908][ T5354] ocfs2_prepare_dir_for_insert+0x2fe8/0x5450 [ 76.410547][ T5354] ? rcu_is_watching+0x15/0xb0 [ 76.412597][ T5354] ? __pfx_ocfs2_prepare_dir_for_insert+0x10/0x10 [ 76.415346][ T5354] ? ocfs2_search_dirblock+0x381/0x850 [ 76.417713][ T5354] ? __pfx_ocfs2_search_dirblock+0x10/0x10 [ 76.420175][ T5354] ? rcu_is_watching+0x15/0xb0 [ 76.422134][ T5354] ? ocfs2_buffer_cached+0x42a/0x8d0 [ 76.424339][ T5354] ? __brelse+0x59/0xa0 [ 76.426248][ T5354] ? ocfs2_find_entry+0xddb/0x2000 [ 76.428426][ T5354] ? __lock_acquire+0xab9/0xd20 [ 76.430515][ T5354] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 76.432758][ T5354] ? __pfx_ocfs2_read_blocks+0x10/0x10 [ 76.435084][ T5354] ? __lock_acquire+0xab9/0xd20 [ 76.437160][ T5354] ? __lock_acquire+0xab9/0xd20 [ 76.439282][ T5354] ? ocfs2_read_inode_block+0x11d/0x190 [ 76.441700][ T5354] ? __pfx_ocfs2_read_inode_block+0x10/0x10 [ 76.444222][ T5354] ? do_raw_spin_unlock+0x4d/0x240 [ 76.446391][ T5354] ? ocfs2_inode_lock_full_nested+0xabe/0x1b40 [ 76.448941][ T5354] ? __pfx_ocfs2_inode_lock_full_nested+0x10/0x10 [ 76.451696][ T5354] ? __kernel_text_address+0xd/0x40 [ 76.454045][ T5354] ? unwind_get_return_address+0x4d/0x90 [ 76.456433][ T5354] ? ocfs2_check_dir_for_entry+0x239/0x3f0 [ 76.458932][ T5354] ? __pfx_ocfs2_check_dir_for_entry+0x10/0x10 [ 76.461509][ T5354] ocfs2_symlink+0xaa4/0x23e0 [ 76.463573][ T5354] ? __pfx_ocfs2_symlink+0x10/0x10 [ 76.465707][ T5354] ? __pfx_ocfs2_inode_lock_full_nested+0x10/0x10 [ 76.468375][ T5354] ? __lock_acquire+0xab9/0xd20 [ 76.470401][ T5354] ? __lock_acquire+0xab9/0xd20 [ 76.472577][ T5354] ? do_raw_spin_lock+0x121/0x290 [ 76.474840][ T5354] ? do_raw_spin_unlock+0x4d/0x240 [ 76.477016][ T5354] ? put_pid+0xe9/0x130 [ 76.478781][ T5354] ? ocfs2_permission+0x107/0x1b0 [ 76.481304][ T5354] ? __pfx_ocfs2_permission+0x10/0x10 [ 76.483566][ T5354] ? from_kgid+0x1b0/0x650 [ 76.485477][ T5354] ? __pfx_from_kgid+0x10/0x10 [ 76.487454][ T5354] ? __pfx_apparmor_path_symlink+0x10/0x10 [ 76.489946][ T5354] ? make_vfsgid+0x49/0xa0 [ 76.491881][ T5354] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 76.494087][ T5354] ? inode_permission+0x149/0x470 [ 76.496234][ T5354] ? __pfx_ocfs2_permission+0x10/0x10 [ 76.502074][ T5354] ? bpf_lsm_inode_symlink+0x9/0x20 [ 76.504268][ T5354] vfs_symlink+0x143/0x2f0 [ 76.506163][ T5354] do_symlinkat+0x1b1/0x3f0 [ 76.508080][ T5354] ? __pfx_do_symlinkat+0x10/0x10 [ 76.510252][ T5354] ? strncpy_from_user+0x150/0x290 [ 76.512406][ T5354] ? getname_flags+0x1e5/0x540 [ 76.514441][ T5354] __x64_sys_symlink+0x7a/0x90 [ 76.516561][ T5354] do_syscall_64+0xfa/0x3b0 [ 76.518500][ T5354] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.520776][ T5354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.523432][ T5354] ? clear_bhb_loop+0x60/0xb0 [ 76.525486][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.528047][ T5354] RIP: 0033:0x7f6c3998ebe9 [ 76.530013][ T5354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.538027][ T5354] RSP: 002b:00007f6c3a7e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 76.541485][ T5354] RAX: ffffffffffffffda RBX: 00007f6c39bc5fa0 RCX: 00007f6c3998ebe9 [ 76.544788][ T5354] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000440 [ 76.548185][ T5354] RBP: 00007f6c39a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 76.551615][ T5354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.555228][ T5354] R13: 00007f6c39bc6038 R14: 00007f6c39bc5fa0 R15: 00007ffe8bf32ee8 [ 76.558604][ T5354] [ 76.560372][ T5354] Kernel Offset: disabled [ 76.562629][ T5354] Rebooting in 86400 seconds..