program: r0 = syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x1, 0x4453, &(0x7f0000008900)="$eJzs3c9vG1kdAPDvONndpGx3k2UPi4SEJVYCAYqSPQFZiTRNm022oahAhbi4TuK2ASeuEgdxqES4VeKExAFxqEDillOVf6D8CVw4lnMlOCAhJKSKINvjxDPxEKfE7bb6fA6Z+P12vvNm3hwmr5Rq3t3YKW/slKtb5UZye+ej8s8a9d3NWpRekN7+17r9v/Hi+mcwfeNUfJ7E3vm3yTm6fvnq929+FPGn9b88PTw8PIyW0ehrpuf3f/3j/lrvsauUq9Nqt39r5+XHEfH+iXG1jETEj9IBXUrT5tPjeERcjIgkIm7e/9Wt8tk6HSnKePSk9nHl2cqDg9kPl/cfHhR/9yTid/UvfOPO5t++PDL716+drXsAAAAAAAAAAAAAAAAAAF5Xizeu//B70zPxOInR/eTk+7qL6bHo/djDc/Ol4X9ZAAAAAAAAAAAAAAAAAAAA+Iw6fv+/nLzX5/3/hfQ4V1D/8DsFGW+d7zgZjqXvXl+4Mj2T7v+enMj/Zpr090sjMdln3/f8/u+XcvX77/+eNlq4i/rguuPr9jsRSWnq8BdH+RNRKk1NRfwh3fj9g+RCqd7YaX79dmN3a/3/7/9Vl41/Z7P8zFmQ7p8/aPznc+0Pf///z0f+rG19vnXyVKaPbPyLJ+Qff5kMFP/LuXrNfw4//jy/bPxH22njvQXmOheAVvx/PXp6/Bdy7Q9r/r8TEeWkNdZy5grQWsO00ovWK2Rl4/9GOy1z6Uz/kEXz/9+5+F/JtV8U/3fP7Rv0v/7v5W9E9JWN/5vttLFMieP5P1k6ff5fzbX/Mu7/rfHvuf8PJBv/9KFtNFOk/Zcc9Pq/mGt/6PF/J8mcAftJZ/xF/6+OrGz8x07kHz//lQZa/32Sq/8/n//OQXd83X7bz389zyFfTTrPf/SXjf94YblB5/9Srt6w5/9ce/3H88rG/0I7Lbt2nmj/HDT+y7n2B4z/m2cdd3tVMtaN//H15D9vddJ/b/03kGz8P9cnFHvtn+31X3L6+v/TXO2Xsf5rnRx7peH2+rrIxv/twnKt+P95gPv/tVy94cc/Ytpa/7ll43+xsFx7/o+dHv+VXL1hx/8rw2wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4BUwnx4nIilNRcT40edSaWoq4nL6+YO4kKxW1yur9cbaT3ciFtL0cryX3Kk3Vqv1ysZWY71WqdbrjbWIK2n++zGW7NQbzcpm9d7Vo7bGk7u16nZztVZtRsRimv7FuNhta3WjuVm9FxGfHOW9W2ps37tb3aqsb2x/e3p6ejqWjsYwmdR+3qxtNTu9d3Ijlo/qTiQ9g2tnf3o0lreTnzR2t7eq9Xb6tZ469cZatd5TZyXN+01MJs3t3a21arNWqTfudPt7mebS48LSjR/cuDZzIv9W0jnOv9hhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBGj2e/9duIGO18KkXEXPeXpF/5R09qH1eerTw4mP1wef/hwdOicgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwX3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8coFQNRFEDfjIUKFi7DKiSdbYIiWhgRXIEuw8XEpbgJ92BhYWshgpkBjX5I8X93TvMgl5l3IQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKxzcTve3bRdRIqDz/2I54eX15/5VZnTMM+8OL+3vPBod13Zvsvr8ey87cp/T3/y0/Lprc/f6cf74338M6un4ff55Xua1T2HG3tNw7r+tV/dexwpNxHRl/wk5dw06+4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgix04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yj6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXwEAAP//aZ8flA==") syz_clone(0x0, &(0x7f0000000340)="97ca91113400f0beb3af2caa3eb61514a5af835ca844371d26da5a0263520ef04b55c7291a0fff55ad368996cccf880d445c9efa7f6d8aa0d9781a6b79b8cab0ee1142dcb6ed54bd409516d5763a1545c154ff01ed0dedfde442", 0x5a, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="19a5cf4a97299d401f2034495e0e1da6fa5d0a89cf52dd6cb23ca1b279c5a8b8ab95b992a1346cd61f3c9aac21b54a64280a9f64782fbb27789b7ad510e541461049ed15b61b4247ccf197074ff97d92a1470c38cee6c27f8931a000eacb7f9e658830616beef6e24f5288da2ee831b990136da990a5765d088c039ac3dd2878b99134714ba618cdd486b04c0ad97171b4cdd81f897f57a57030d164b1") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400007000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@updsa={0x158, 0x1a, 0x1, 0x70bd2c, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0x4e22, 0x3, 0xa, 0x30, 0x0, 0x2}, {@in=@rand_addr=0x64010100, 0x4d2, 0x32}, @in=@rand_addr=0x64010100, {0x7, 0xfe43, 0x1, 0x6, 0xfffffffffffffff9, 0x3, 0xf, 0x4}, {0x4ef3c5a8, 0x7, 0x1, 0x8}, {0x101, 0xab1, 0x8}, 0x70bd27, 0x20000, 0x2, 0x0, 0x3, 0x28}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd28, 0x70bd27, 0x70bd2c, 0x70bd2b, 0x1000}}, @algo_aead={0x4c, 0x12, {{'aegis256-aesni\x00'}, 0x0, 0x200}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4008010}, 0x40080) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r5, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r9, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(r8) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x7f, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0x726b}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xffff, 0x5, 0x8}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x208, 0x0, 0x1, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x4, 0x6}}}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1009}}]}) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_OKEY={0x8}]]}}}]}, 0x40}}, 0x0) ioctl(r0, 0x80000000, &(0x7f0000000000)="2ff8809e6f7bda2796bead46b54623b712545f3558234732acdfc7eda62897aec8371cb3212cfd468692f22aa6721a6577a5a77c1f59eab4843ce953f0642065bdd72440db5dec9f2b62a4a19ada9e9c36617eb11faad1") bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)=@o_path={&(0x7f0000000500)='./file1\x00', 0x0, 0x10}, 0x18) [ 85.040401][ T4702] Bluetooth: hci0: command tx timeout [ 85.410614][ T5362] loop0: detected capacity change from 0 to 32768 [ 85.422296][ T5362] ======================================================= [ 85.422296][ T5362] WARNING: The mand mount option has been deprecated and [ 85.422296][ T5362] and is ignored by this kernel. Remove the mand [ 85.422296][ T5362] option from the mount to silence this warning. [ 85.422296][ T5362] ======================================================= [ 85.479323][ T5362] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 85.515910][ T5362] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 85.575397][ T5367] [ 85.576554][ T5367] ====================================================== [ 85.579641][ T5367] WARNING: possible circular locking dependency detected [ 85.582939][ T5367] syzkaller #0 Not tainted [ 85.584975][ T5367] ------------------------------------------------------ [ 85.587990][ T5367] syz.0.0/5367 is trying to acquire lock: [ 85.590435][ T5367] ffff888044283f60 (&oi->ip_alloc_sem){+.+.}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xb6/0x320 [ 85.595088][ T5367] [ 85.595088][ T5367] but task is already holding lock: [ 85.598383][ T5367] ffff888044283ff8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320 [ 85.603027][ T5367] [ 85.603027][ T5367] which lock already depends on the new lock. [ 85.603027][ T5367] [ 85.607577][ T5367] [ 85.607577][ T5367] the existing dependency chain (in reverse order) is: [ 85.611348][ T5367] [ 85.611348][ T5367] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}: [ 85.614560][ T5367] lock_acquire+0x120/0x360 [ 85.617147][ T5367] down_read+0x46/0x2e0 [ 85.619862][ T5367] ocfs2_init_acl+0x2f9/0x720 [ 85.622432][ T5367] ocfs2_mknod+0x1321/0x2050 [ 85.626460][ T5367] ocfs2_create+0x1a5/0x440 [ 85.628782][ T5367] path_openat+0x14f1/0x3830 [ 85.630981][ T5367] do_filp_open+0x1fa/0x410 [ 85.633187][ T5367] filp_open+0x176/0x1d0 [ 85.635323][ T5367] coredump_file+0x33e/0xaf0 [ 85.637414][ T5367] vfs_coredump+0x1688/0x2a50 [ 85.639555][ T5367] get_signal+0x1109/0x1340 [ 85.641637][ T5367] arch_do_signal_or_restart+0x9a/0x750 [ 85.644132][ T5367] irqentry_exit_to_user_mode+0x81/0x120 [ 85.646836][ T5367] exc_general_protection+0x171/0x200 [ 85.649382][ T5367] asm_exc_general_protection+0x26/0x30 [ 85.651839][ T5367] [ 85.651839][ T5367] -> #3 (jbd2_handle){++++}-{0:0}: [ 85.655051][ T5367] lock_acquire+0x120/0x360 [ 85.657276][ T5367] start_this_handle+0x1fa7/0x21c0 [ 85.659633][ T5367] jbd2__journal_start+0x2c1/0x5b0 [ 85.662343][ T5367] jbd2_journal_start+0x2a/0x40 [ 85.665019][ T5367] ocfs2_start_trans+0x376/0x6d0 [ 85.667347][ T5367] ocfs2_mknod+0xe93/0x2050 [ 85.669518][ T5367] ocfs2_create+0x1a5/0x440 [ 85.671659][ T5367] path_openat+0x14f1/0x3830 [ 85.673866][ T5367] do_filp_open+0x1fa/0x410 [ 85.676128][ T5367] filp_open+0x176/0x1d0 [ 85.678254][ T5367] coredump_file+0x33e/0xaf0 [ 85.680641][ T5367] vfs_coredump+0x1688/0x2a50 [ 85.683046][ T5367] get_signal+0x1109/0x1340 [ 85.685343][ T5367] arch_do_signal_or_restart+0x9a/0x750 [ 85.688120][ T5367] irqentry_exit_to_user_mode+0x81/0x120 [ 85.690837][ T5367] exc_general_protection+0x171/0x200 [ 85.693341][ T5367] asm_exc_general_protection+0x26/0x30 [ 85.695986][ T5367] [ 85.695986][ T5367] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 85.699268][ T5367] lock_acquire+0x120/0x360 [ 85.701445][ T5367] down_read+0x46/0x2e0 [ 85.703698][ T5367] ocfs2_start_trans+0x36a/0x6d0 [ 85.706340][ T5367] ocfs2_mknod+0xe93/0x2050 [ 85.708983][ T5367] ocfs2_create+0x1a5/0x440 [ 85.711298][ T5367] path_openat+0x14f1/0x3830 [ 85.713340][ T5367] do_filp_open+0x1fa/0x410 [ 85.715575][ T5367] filp_open+0x176/0x1d0 [ 85.717379][ T5367] coredump_file+0x33e/0xaf0 [ 85.719574][ T5367] vfs_coredump+0x1688/0x2a50 [ 85.721834][ T5367] get_signal+0x1109/0x1340 [ 85.724021][ T5367] arch_do_signal_or_restart+0x9a/0x750 [ 85.726598][ T5367] irqentry_exit_to_user_mode+0x81/0x120 [ 85.729187][ T5367] exc_general_protection+0x171/0x200 [ 85.731748][ T5367] asm_exc_general_protection+0x26/0x30 [ 85.734281][ T5367] [ 85.734281][ T5367] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 85.737522][ T5367] lock_acquire+0x120/0x360 [ 85.739646][ T5367] ocfs2_start_trans+0x26b/0x6d0 [ 85.741855][ T5367] ocfs2_truncate_file+0x643/0x1420 [ 85.744225][ T5367] ocfs2_setattr+0x1520/0x1b40 [ 85.746443][ T5367] notify_change+0xb36/0xe40 [ 85.748747][ T5367] do_truncate+0x1a4/0x220 [ 85.750938][ T5367] coredump_file+0x7cb/0xaf0 [ 85.753160][ T5367] vfs_coredump+0x1688/0x2a50 [ 85.755379][ T5367] get_signal+0x1109/0x1340 [ 85.757525][ T5367] arch_do_signal_or_restart+0x9a/0x750 [ 85.760216][ T5367] irqentry_exit_to_user_mode+0x81/0x120 [ 85.763046][ T5367] exc_general_protection+0x171/0x200 [ 85.765863][ T5367] asm_exc_general_protection+0x26/0x30 [ 85.768572][ T5367] [ 85.768572][ T5367] -> #0 (&oi->ip_alloc_sem){+.+.}-{4:4}: [ 85.771874][ T5367] validate_chain+0xb9b/0x2140 [ 85.774065][ T5367] __lock_acquire+0xab9/0xd20 [ 85.776303][ T5367] lock_acquire+0x120/0x360 [ 85.778397][ T5367] down_write+0x96/0x1f0 [ 85.780696][ T5367] ocfs2_try_remove_refcount_tree+0xb6/0x320 [ 85.783922][ T5367] ocfs2_truncate_file+0xda0/0x1420 [ 85.786786][ T5367] ocfs2_setattr+0x1520/0x1b40 [ 85.788981][ T5367] notify_change+0xb36/0xe40 [ 85.791157][ T5367] do_truncate+0x1a4/0x220 [ 85.793227][ T5367] coredump_file+0x7cb/0xaf0 [ 85.795560][ T5367] vfs_coredump+0x1688/0x2a50 [ 85.797893][ T5367] get_signal+0x1109/0x1340 [ 85.800057][ T5367] arch_do_signal_or_restart+0x9a/0x750 [ 85.802922][ T5367] irqentry_exit_to_user_mode+0x81/0x120 [ 85.806234][ T5367] exc_general_protection+0x171/0x200 [ 85.808784][ T5367] asm_exc_general_protection+0x26/0x30 [ 85.811397][ T5367] [ 85.811397][ T5367] other info that might help us debug this: [ 85.811397][ T5367] [ 85.815823][ T5367] Chain exists of: [ 85.815823][ T5367] &oi->ip_alloc_sem --> jbd2_handle --> &oi->ip_xattr_sem [ 85.815823][ T5367] [ 85.821326][ T5367] Possible unsafe locking scenario: [ 85.821326][ T5367] [ 85.824646][ T5367] CPU0 CPU1 [ 85.826904][ T5367] ---- ---- [ 85.829106][ T5367] lock(&oi->ip_xattr_sem); [ 85.831100][ T5367] lock(jbd2_handle); [ 85.833911][ T5367] lock(&oi->ip_xattr_sem); [ 85.837016][ T5367] lock(&oi->ip_alloc_sem); [ 85.839014][ T5367] [ 85.839014][ T5367] *** DEADLOCK *** [ 85.839014][ T5367] [ 85.842488][ T5367] 2 locks held by syz.0.0/5367: [ 85.844579][ T5367] #0: ffff8880442842c0 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: do_truncate+0x171/0x220 [ 85.848962][ T5367] #1: ffff888044283ff8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320 [ 85.853631][ T5367] [ 85.853631][ T5367] stack backtrace: [ 85.856177][ T5367] CPU: 0 UID: 0 PID: 5367 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.856193][ T5367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.856200][ T5367] Call Trace: [ 85.856206][ T5367] [ 85.856212][ T5367] dump_stack_lvl+0x189/0x250 [ 85.856230][ T5367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.856241][ T5367] ? __pfx__printk+0x10/0x10 [ 85.856255][ T5367] ? print_lock_name+0xde/0x100 [ 85.856269][ T5367] print_circular_bug+0x2ee/0x310 [ 85.856282][ T5367] check_noncircular+0x134/0x160 [ 85.856292][ T5367] validate_chain+0xb9b/0x2140 [ 85.856305][ T5367] __lock_acquire+0xab9/0xd20 [ 85.856324][ T5367] ? ocfs2_try_remove_refcount_tree+0xb6/0x320 [ 85.856333][ T5367] lock_acquire+0x120/0x360 [ 85.856344][ T5367] ? ocfs2_try_remove_refcount_tree+0xb6/0x320 [ 85.856358][ T5367] down_write+0x96/0x1f0 [ 85.856369][ T5367] ? ocfs2_try_remove_refcount_tree+0xb6/0x320 [ 85.856380][ T5367] ? __pfx_down_write+0x10/0x10 [ 85.856393][ T5367] ocfs2_try_remove_refcount_tree+0xb6/0x320 [ 85.856404][ T5367] ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10 [ 85.856415][ T5367] ? up_write+0x1c4/0x420 [ 85.856427][ T5367] ocfs2_truncate_file+0xda0/0x1420 [ 85.856445][ T5367] ? __pfx_ocfs2_truncate_file+0x10/0x10 [ 85.856456][ T5367] ? do_raw_spin_unlock+0x4d/0x240 [ 85.856466][ T5367] ? _raw_spin_unlock+0x28/0x50 [ 85.856476][ T5367] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 85.856495][ T5367] ? __pfx_ocfs2_inode_lock_tracker+0x10/0x10 [ 85.856511][ T5367] ? ocfs2_rw_lock+0x13a/0x240 [ 85.856526][ T5367] ? __pfx___dquot_initialize+0x10/0x10 [ 85.856542][ T5367] ? __pfx_ocfs2_rw_lock+0x10/0x10 [ 85.856557][ T5367] ? setattr_prepare+0x1e7/0xac0 [ 85.856570][ T5367] ? jbd2_journal_begin_ordered_truncate+0xbb/0x150 [ 85.856588][ T5367] ocfs2_setattr+0x1520/0x1b40 [ 85.856605][ T5367] ? __pfx_ocfs2_setattr+0x10/0x10 [ 85.856619][ T5367] ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0 [ 85.856635][ T5367] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 85.856659][ T5367] ? ktime_get_coarse_real_ts64_mg+0x1be/0x1e0 [ 85.856676][ T5367] ? current_time+0x222/0x370 [ 85.856691][ T5367] ? evm_inode_setattr+0x1b6/0x7d0 [ 85.856704][ T5367] ? __pfx_current_time+0x10/0x10 [ 85.856721][ T5367] ? try_break_deleg+0x79/0x130 [ 85.856732][ T5367] ? __pfx_ocfs2_setattr+0x10/0x10 [ 85.856747][ T5367] notify_change+0xb36/0xe40 [ 85.856761][ T5367] do_truncate+0x1a4/0x220 [ 85.856775][ T5367] ? __pfx_do_truncate+0x10/0x10 [ 85.856786][ T5367] ? filp_open+0x181/0x1d0 [ 85.856805][ T5367] ? getname_kernel+0x20e/0x2f0 [ 85.856821][ T5367] coredump_file+0x7cb/0xaf0 [ 85.856837][ T5367] ? __pfx_coredump_file+0x10/0x10 [ 85.856849][ T5367] ? __pfx_cn_printf+0x10/0x10 [ 85.856862][ T5367] ? krealloc_noprof+0x1cd/0x340 [ 85.856874][ T5367] ? vfs_coredump+0xa75/0x2a50 [ 85.856887][ T5367] ? krealloc_noprof+0x1cd/0x340 [ 85.856900][ T5367] vfs_coredump+0x1688/0x2a50 [ 85.856919][ T5367] ? __pfx_vfs_coredump+0x10/0x10 [ 85.856933][ T5367] ? is_bpf_text_address+0x26/0x2b0 [ 85.856950][ T5367] ? __lock_acquire+0xab9/0xd20 [ 85.856969][ T5367] ? __lock_acquire+0xab9/0xd20 [ 85.856986][ T5367] ? is_bpf_text_address+0x26/0x2b0 [ 85.857005][ T5367] ? is_bpf_text_address+0x26/0x2b0 [ 85.857022][ T5367] ? is_bpf_text_address+0x292/0x2b0 [ 85.857038][ T5367] ? is_bpf_text_address+0x26/0x2b0 [ 85.857055][ T5367] ? kernel_text_address+0xa5/0xe0 [ 85.857071][ T5367] ? __kernel_text_address+0xd/0x40 [ 85.857085][ T5367] ? unwind_get_return_address+0x4d/0x90 [ 85.857096][ T5367] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 85.857106][ T5367] ? arch_stack_walk+0xfc/0x150 [ 85.857121][ T5367] ? stack_trace_save+0x9c/0xe0 [ 85.857132][ T5367] ? stack_depot_save_flags+0x40/0x860 [ 85.857145][ T5367] ? kasan_save_track+0x4f/0x80 [ 85.857155][ T5367] ? kasan_save_track+0x3e/0x80 [ 85.857165][ T5367] ? kasan_save_free_info+0x46/0x50 [ 85.857181][ T5367] ? __kasan_slab_free+0x5b/0x80 [ 85.857189][ T5367] ? kmem_cache_free+0x18f/0x400 [ 85.857198][ T5367] ? get_signal+0xa4c/0x1340 [ 85.857207][ T5367] ? arch_do_signal_or_restart+0x9a/0x750 [ 85.857224][ T5367] ? irqentry_exit_to_user_mode+0x81/0x120 [ 85.857239][ T5367] ? exc_general_protection+0x171/0x200 [ 85.857250][ T5367] ? asm_exc_general_protection+0x26/0x30 [ 85.857272][ T5367] ? _raw_spin_unlock_irq+0x23/0x50 [ 85.857285][ T5367] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.857300][ T5367] get_signal+0x1109/0x1340 [ 85.857316][ T5367] arch_do_signal_or_restart+0x9a/0x750 [ 85.857335][ T5367] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 85.857355][ T5367] ? local_irq_enable_exit_to_user+0x5/0x10 [ 85.857372][ T5367] irqentry_exit_to_user_mode+0x81/0x120 [ 85.857388][ T5367] exc_general_protection+0x171/0x200 [ 85.857401][ T5367] ? exc_page_fault+0x9f/0xf0 [ 85.857415][ T5367] asm_exc_general_protection+0x26/0x30 [ 85.857427][ T5367] RIP: 0033:0x7fc9ebd8ebf1 [ 85.857439][ T5367] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 85.857448][ T5367] RSP: 002b:0000200000000390 EFLAGS: 00010217 [ 85.857459][ T5367] RAX: 0000000000000000 RBX: 00007fc9ebfb5fa0 RCX: 00007fc9ebd8ebe9 [ 85.857468][ T5367] RDX: 00002000000003c0 RSI: 0000200000000390 RDI: 0000000000000000 [ 85.857475][ T5367] RBP: 00007fc9ebe11e19 R08: 0000200000000440 R09: 0000200000000440 [ 85.857483][ T5367] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 85.857490][ T5367] R13: 00007fc9ebfb6038 R14: 00007fc9ebfb5fa0 R15: 00007fff8cc385a8 [ 85.857503][ T5367] [ 86.144248][ T5367] syz.0.0 (5367) used greatest stack depth: 16584 bytes left [ 86.353480][ T5353] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.503803][ T5353] usb 5-1: Using ep0 maxpacket: 32 [ 86.508647][ T5353] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 86.515714][ T5353] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 86.520000][ T5353] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 86.524964][ T5353] usb 5-1: Product: syz [ 86.526835][ T5353] usb 5-1: Manufacturer: syz [ 86.528999][ T5353] usb 5-1: SerialNumber: syz [ 86.532671][ T5353] usb 5-1: config 0 descriptor?? [ 86.537419][ T5362] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 86.540983][ T5353] hub 5-1:0.0: bad descriptor, ignoring hub [ 86.544106][ T5353] hub 5-1:0.0: probe with driver hub failed with error -5 [ 86.764842][ T9] cfg80211: failed to load regulatory.db [ 87.083600][ T5336] Bluetooth: hci0: command tx timeout [ 87.433438][ T5362] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 87.587227][ T5362] usb 5-1: device firmware changed [ 87.590089][ T9] usb 5-1: USB disconnect, device number 2 [ 87.723517][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.873341][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 87.878721][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 87.885692][ T9] usb 5-1: string descriptor 0 read error: -22 [ 87.888286][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 87.892132][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 87.897101][ T9] usb 5-1: config 0 descriptor?? [ 87.899836][ T5363] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.907175][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 87.910004][ T9] hub 5-1:0.0: probe with driver hub failed with error -5