program: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000005d40)={&(0x7f0000005e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xb, 0x0, 0x0}) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x4446, &(0x7f00000088c0)="$eJzs3b9vHFkdAPDvjH3ENslhH1ccEhIrcRIIkGVfBfgkHMeJz76YoMCdEM1mbW8Sw9ob2WtEkcJ0kaiQKBBFBBKdq8gFbfgTaChDHQkKGiSkCKPdnXV2xrt4E3kdkvt8Co/n/ba/M2/fFLMvzTTubu6WNndLle1Sff327geln9dre1vVSM9Jz/7fOr/+GcwwrpNXfe19lt24cu2Hn34Q8eeNvz49Ojo6iqbR6Gm26/d//fP+evexIy3Uabbbu7Wz8pOIePfEuJpGIuLHf4pIIuJylraQHccj4lK08z69/6tbpTMazaMn1Q/Lz1YfHM69v3Lw8LD/355E/K72pW/d2fr7V0fm/vaNM+oeAAAAAAAAAAAAAAAAAIDX3NLNG5/8YGY2HicxepCcfF93KTv2fT/26Kx8JWJy6H8uAAAAAAAAAAAAAAAAAAAA/F96/v5/KXmnx/v/i9lxvk/9o+8Nf4wMz/L3byxenZnN9n9PTuR/O0v6x+WRmOqx73tx//fLhfq9938/2c/L6oyv0+9kJOl07jxNp6cj/pBt/P5eMpHW6ruNb96u721vnNkwXlv5+Ld3789FJ9vQf9D4LxTaH/7+/188cTU1z2+d3SX2RsvHf6RvuT/+Mhko/lcK9c4j/ry8fPxHW2nj3QXm2xNAM/6/Hj09/ouF9ocV/7cjopQ0x1rKzQDNNUwzvd96hbx8/N9qpeWmzuwf2e/+/3ch/lcL7b+q+X+/+EFET/n4f66VNpYr8fz+n0pPv/+vFdp/FfFvjn/f5/9A8vG/0E4czRVp/ScHnf+XCu0PK/6fpNk4305yV8BB0k7v+3115OTjP3Yi//nzXzrQ+u+jQv3zev7r9Nt5/utM/19P2s9/9JaP/3jfcoPe/8uFesOe/+ejFElc7Jya9V9QPv4TrbT82rn9pZzd8b/wP+K/Umh/WPFvrUrG2vHvnv//c6Gd/nvrv4Hk4//5dmLaXWK/9bO1/ktOX/9/XGi/Hf9h3pYn13/N8e+nQ+zyDZKP/8W+5Zrx/8sAn//XC/WGv/6PmDHrv7R8/C/1Lde6/8dOj/9qod6w4/+1YTYOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BpYyI6TkaTTufM0nZ6OuJKdvxcTyVplo7xWq6//bDdiMUsvxTvJnVp9rVIrb27XN6rlSq1WX4+4muW/G2PJbq3eKG9V7l07bms8uVut7DTWqpVGRCxl6V+OS5221jYbW5V7EfHRcd4X0vrOvbuV7fLG5s53Z2ZmZmL5eAxTSfUXjep2o917Ozdi5bjuZNI1uFb2x8djuZj8tL63s12ptdKvd9Wp1dcrta46q1neb2Iqaezsba9XGtVyrX6n099pkv0XDM4LmG/+SCMWl2/+6Ob12Yli/q2kfVwY3hAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAOP577z24gYbZ+lETHf+SXpVf7Rk+qH5WerDw7n3l85eHj4tF85AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sgMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYVdOkZpIIjCAPxmLNTOY1gtu53tiiJauCJ4Aj2Gh9GjeAnvkCJF2hQhkMxC2OzCNkn1fc2D+Zl5D+YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDP03v38VY3ESmuNpcRf1//i8P8pdSf+/H7F2eYkdN5fu0eHuum/Hs6yu/K0bLNu3S9+v6Mkdr7HezJcJ/2+j7Xk3NN7dvUfH3fm0i5ioi25Lcp56qa9xYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+BQAA///8NR6x") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0xffff) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f00000000c0)) r4 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x22) ftruncate(r4, 0x6) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000005dc0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x9, r1, 0xcccccccc}) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[@ANYBLOB='data_checksum=none,no_splitbrain_check,norecovery,inline_data,journal_flush_disabled,norecovgry,erasure_code,reconstruct_alloc,errors=continue,errors=continue,fsuuid=aaVec30f-abc2-9cce-e6a0\x00b910b0b8,dont_appraise,measure,uid=', @ANYRESDEC=0x0, @ANYBLOB=',fsmagic=0x0000000000000004,obj_type=none,\x00', @ANYRESHEX], 0x1, 0x59e2, &(0x7f0000000340)="$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") r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000005e80)='/proc/mdstat\x00', 0x0, 0x0) pread64(r5, &(0x7f00000000c0)=""/83, 0x4da, 0x4dd) llistxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000100)=""/45, 0x2d) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x80000, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000000), 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000005ec0), 0x1a000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r7, 0x26, &(0x7f00000031c0)) unshare(0x2c020400) fcntl$lock(r7, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x300}) open(&(0x7f0000005e40)='./bus\x00', 0x1612c2, 0x0) [ 75.736771][ T5318] Bluetooth: hci0: command tx timeout [ 76.032991][ T5338] loop0: detected capacity change from 0 to 32768 [ 76.047388][ T5338] ======================================================= [ 76.047388][ T5338] WARNING: The mand mount option has been deprecated and [ 76.047388][ T5338] and is ignored by this kernel. Remove the mand [ 76.047388][ T5338] option from the mount to silence this warning. [ 76.047388][ T5338] ======================================================= [ 76.124936][ T5338] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 76.171492][ T5338] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.192530][ T5338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.199245][ T5338] OCFS2: File system is now read-only. [ 76.201722][ T5338] (syz.0.0,5338,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.205055][ T5338] (syz.0.0,5338,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.210151][ T5338] (syz.0.0,5338,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.215344][ T5338] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.227661][ T5338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.232056][ T5338] (syz.0.0,5338,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.235371][ T5338] (syz.0.0,5338,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.248243][ T5338] (syz.0.0,5338,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.255151][ T5337] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.265243][ T5337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.270409][ T5337] (syz.0.0,5337,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.273813][ T5337] (syz.0.0,5337,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.278807][ T5337] (syz.0.0,5337,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.283566][ T5338] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.295560][ T5338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.300737][ T5338] (syz.0.0,5338,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.303963][ T5338] (syz.0.0,5338,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.309278][ T5338] (syz.0.0,5338,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.314327][ T5337] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.324616][ T5337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.330663][ T5337] (syz.0.0,5337,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.333864][ T5337] (syz.0.0,5337,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.338033][ T5337] (syz.0.0,5337,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.344053][ T5338] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.354739][ T5338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.360069][ T5338] (syz.0.0,5338,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.363744][ T5338] (syz.0.0,5338,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.368240][ T5338] (syz.0.0,5338,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.372887][ T5337] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.382597][ T5337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.388124][ T5337] (syz.0.0,5337,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.391378][ T5337] (syz.0.0,5337,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.395884][ T5337] (syz.0.0,5337,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.402529][ T5338] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.412427][ T5338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.417630][ T5338] (syz.0.0,5338,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.421026][ T5338] (syz.0.0,5338,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.424865][ T5338] (syz.0.0,5338,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.431225][ T5337] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.440873][ T5337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.445165][ T5337] (syz.0.0,5337,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.449249][ T5337] (syz.0.0,5337,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.452695][ T5337] (syz.0.0,5337,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.457627][ T5338] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.467527][ T5338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.471855][ T5338] (syz.0.0,5338,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.475188][ T5338] (syz.0.0,5338,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.479671][ T5338] (syz.0.0,5338,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.484750][ T5337] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.494993][ T5337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.505234][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.509754][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.513643][ T5337] (syz.0.0,5337,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.517753][ T5337] (syz.0.0,5337,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.521637][ T5337] (syz.0.0,5337,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.528338][ T5338] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.537319][ T5338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.541683][ T5338] (syz.0.0,5338,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.545230][ T5338] (syz.0.0,5338,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.550067][ T5338] (syz.0.0,5338,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.554941][ T5337] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.563904][ T5337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.569785][ T5337] (syz.0.0,5337,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.572984][ T5337] (syz.0.0,5337,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.578067][ T5337] (syz.0.0,5337,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.582952][ T5338] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.592372][ T5338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.596440][ T5338] (syz.0.0,5338,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.600932][ T5338] (syz.0.0,5338,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.604554][ T5338] (syz.0.0,5338,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.611828][ T5337] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.622344][ T5337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.627581][ T5337] (syz.0.0,5337,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.631131][ T5337] (syz.0.0,5337,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.635503][ T5337] (syz.0.0,5337,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.641339][ T5338] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.651195][ T5338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.655694][ T5338] (syz.0.0,5338,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.660030][ T5338] (syz.0.0,5338,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.663685][ T5338] (syz.0.0,5338,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.669607][ T5337] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.679872][ T5337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.683984][ T5337] (syz.0.0,5337,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.688313][ T5337] (syz.0.0,5337,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.691774][ T5337] (syz.0.0,5337,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.696246][ T5338] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.705993][ T5338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.711354][ T5338] (syz.0.0,5338,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.714705][ T5338] (syz.0.0,5338,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.719433][ T5338] (syz.0.0,5338,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.724820][ T5337] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.735584][ T5337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.741738][ T5337] (syz.0.0,5337,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.745113][ T5337] (syz.0.0,5337,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.750212][ T5337] (syz.0.0,5337,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.756021][ T5338] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.765339][ T5338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.771699][ T5338] (syz.0.0,5338,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.774804][ T5338] (syz.0.0,5338,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.779351][ T5338] (syz.0.0,5338,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.784564][ T5337] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.794490][ T5337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.799134][ T5337] (syz.0.0,5337,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.802572][ T5337] (syz.0.0,5337,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.807939][ T5337] (syz.0.0,5337,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.813008][ T5338] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.824698][ T5338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.847047][ T5338] (syz.0.0,5338,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.850352][ T5338] (syz.0.0,5338,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.853803][ T5338] (syz.0.0,5338,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.877369][ T5337] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.886147][ T5337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.892298][ T5337] (syz.0.0,5337,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.895516][ T5337] (syz.0.0,5337,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.901498][ T5337] (syz.0.0,5337,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.908215][ T5338] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.917891][ T5338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.922524][ T5338] (syz.0.0,5338,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.925705][ T5338] (syz.0.0,5338,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.930433][ T5338] (syz.0.0,5338,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.935669][ T5337] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.945818][ T5337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.951763][ T5337] (syz.0.0,5337,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 76.955243][ T5337] (syz.0.0,5337,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 76.960500][ T5337] (syz.0.0,5337,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 76.975226][ T5338] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 76.994717][ T5338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 77.000732][ T5338] (syz.0.0,5338,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 77.004662][ T5338] (syz.0.0,5338,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 77.013746][ T5338] (syz.0.0,5338,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 77.019386][ T5337] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 77.031062][ T5337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 77.035471][ T5337] (syz.0.0,5337,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 77.039415][ T5337] (syz.0.0,5337,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 77.043267][ T5337] (syz.0.0,5337,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 77.050415][ T5338] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 77.060793][ T5338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 77.065709][ T5338] (syz.0.0,5338,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 77.070249][ T5338] (syz.0.0,5338,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 77.074060][ T5338] (syz.0.0,5338,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 77.080392][ T5337] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 77.090369][ T5337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 77.094965][ T5337] (syz.0.0,5337,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 77.099007][ T5337] (syz.0.0,5337,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 77.102864][ T5337] (syz.0.0,5337,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 77.109091][ T5338] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 77.119192][ T5338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 77.123908][ T5338] (syz.0.0,5338,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 77.128390][ T5338] (syz.0.0,5338,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 77.132410][ T5338] (syz.0.0,5338,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 77.138687][ T5339] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 77.149144][ T5339] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 77.153496][ T5339] (syz.0.0,5339,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 77.157386][ T5339] (syz.0.0,5339,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 77.161544][ T5339] (syz.0.0,5339,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 77.166456][ T5338] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 77.177030][ T5338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 77.181700][ T5338] (syz.0.0,5338,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 77.185756][ T5338] (syz.0.0,5338,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 77.190989][ T5338] (syz.0.0,5338,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 77.195917][ T5339] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 77.205450][ T5339] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 77.211163][ T5339] (syz.0.0,5339,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 77.215360][ T5339] (syz.0.0,5339,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 77.220842][ T5339] (syz.0.0,5339,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 77.227865][ T5338] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 77.237534][ T5338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 77.243543][ T5338] (syz.0.0,5338,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 77.248800][ T5338] (syz.0.0,5338,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 77.252453][ T5338] (syz.0.0,5338,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 77.259192][ T5337] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 77.270384][ T5337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 77.274810][ T5337] (syz.0.0,5337,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 77.280014][ T5337] (syz.0.0,5337,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 77.284418][ T5337] (syz.0.0,5337,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 77.290916][ T5338] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 77.301175][ T5338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 77.305864][ T5338] (syz.0.0,5338,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 77.312420][ T5338] (syz.0.0,5338,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 77.317404][ T5338] (syz.0.0,5338,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 77.322697][ T5337] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 77.333400][ T5337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 77.338016][ T5337] (syz.0.0,5337,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 77.341813][ T5337] (syz.0.0,5337,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 77.346256][ T5337] (syz.0.0,5337,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 77.353038][ T5338] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 77.362335][ T5338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 77.368778][ T5338] (syz.0.0,5338,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 77.373140][ T5338] (syz.0.0,5338,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 77.378746][ T5338] (syz.0.0,5338,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 77.384054][ T5339] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 77.395376][ T5339] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 77.400847][ T5339] (syz.0.0,5339,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 77.404291][ T5339] (syz.0.0,5339,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 77.410054][ T5339] (syz.0.0,5339,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 77.417533][ T5338] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 77.428601][ T5338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 77.433150][ T5338] (syz.0.0,5338,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 77.442586][ T5338] (syz.0.0,5338,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 77.446318][ T5338] (syz.0.0,5338,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 77.452696][ T5339] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 77.464159][ T5339] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 77.469868][ T5339] (syz.0.0,5339,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 77.473175][ T5339] (syz.0.0,5339,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 77.477249][ T5339] (syz.0.0,5339,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 77.482037][ T5337] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 77.492718][ T5337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 77.498371][ T5337] (syz.0.0,5337,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 77.501653][ T5337] (syz.0.0,5337,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 77.505968][ T5337] (syz.0.0,5337,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 77.512267][ T5338] ================================================================== [ 77.515843][ T5338] BUG: KASAN: slab-use-after-free in ocfs2_fault+0xd3/0x3f0 [ 77.519376][ T5338] Read of size 8 at addr ffff888011c8d418 by task syz.0.0/5338 [ 77.522836][ T5338] [ 77.524112][ T5338] CPU: 0 UID: 0 PID: 5338 Comm: syz.0.0 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 77.524132][ T5338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.524142][ T5338] Call Trace: [ 77.524152][ T5338] [ 77.524159][ T5338] dump_stack_lvl+0x189/0x250 [ 77.524182][ T5338] ? __kasan_check_byte+0x12/0x40 [ 77.524202][ T5338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.524220][ T5338] ? lock_release+0x4b/0x3e0 [ 77.524236][ T5338] ? __virt_addr_valid+0x4a5/0x5c0 [ 77.524255][ T5338] print_report+0xca/0x230 [ 77.524269][ T5338] ? ocfs2_fault+0xd3/0x3f0 [ 77.524285][ T5338] kasan_report+0x118/0x150 [ 77.524303][ T5338] ? ocfs2_fault+0xd3/0x3f0 [ 77.524321][ T5338] ocfs2_fault+0xd3/0x3f0 [ 77.524339][ T5338] ? __pfx_ocfs2_fault+0x10/0x10 [ 77.524356][ T5338] ? __raw_spin_lock_init+0x45/0x100 [ 77.524377][ T5338] __do_fault+0x138/0x390 [ 77.524396][ T5338] __handle_mm_fault+0x37ed/0x5620 [ 77.524416][ T5338] ? __pfx___handle_mm_fault+0x10/0x10 [ 77.524437][ T5338] ? __pfx___might_resched+0x10/0x10 [ 77.524455][ T5338] handle_mm_fault+0x40a/0x8e0 [ 77.524473][ T5338] __get_user_pages+0x1af4/0x30b0 [ 77.524491][ T5338] ? mt_find+0x15c/0x5f0 [ 77.524577][ T5338] ? __pfx___get_user_pages+0x10/0x10 [ 77.524598][ T5338] populate_vma_page_range+0x26b/0x340 [ 77.524617][ T5338] ? __pfx_populate_vma_page_range+0x10/0x10 [ 77.524634][ T5338] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 77.524654][ T5338] ? down_read+0x1ad/0x2e0 [ 77.524675][ T5338] __mm_populate+0x24c/0x380 [ 77.524693][ T5338] ? __pfx___mm_populate+0x10/0x10 [ 77.524710][ T5338] ? up_write+0x1c4/0x420 [ 77.524729][ T5338] vm_mmap_pgoff+0x3f0/0x4c0 [ 77.524748][ T5338] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 77.524771][ T5338] ? __fget_files+0x2a/0x420 [ 77.524789][ T5338] ? __fget_files+0x3a0/0x420 [ 77.524806][ T5338] ? __fget_files+0x2a/0x420 [ 77.524827][ T5338] ksys_mmap_pgoff+0x51f/0x760 [ 77.524848][ T5338] do_syscall_64+0xfa/0x3b0 [ 77.524865][ T5338] ? lockdep_hardirqs_on+0x9c/0x150 [ 77.524880][ T5338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.524896][ T5338] ? clear_bhb_loop+0x60/0xb0 [ 77.524914][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.524930][ T5338] RIP: 0033:0x7f598258e9a9 [ 77.524946][ T5338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.524960][ T5338] RSP: 002b:00007f598341f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 77.524980][ T5338] RAX: ffffffffffffffda RBX: 00007f59827b5fa0 RCX: 00007f598258e9a9 [ 77.524992][ T5338] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 77.525004][ T5338] RBP: 00007f5982610d69 R08: 0000000000000005 R09: 0000000000000000 [ 77.525016][ T5338] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000000 [ 77.525035][ T5338] R13: 0000000000000000 R14: 00007f59827b5fa0 R15: 00007ffd638cde68 [ 77.525053][ T5338] [ 77.525059][ T5338] [ 77.655303][ T5338] Allocated by task 5338: [ 77.657183][ T5338] kasan_save_track+0x3e/0x80 [ 77.659322][ T5338] __kasan_slab_alloc+0x6c/0x80 [ 77.661567][ T5338] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 77.664225][ T5338] vm_area_alloc+0x24/0x140 [ 77.666315][ T5338] mmap_region+0xcc7/0x1f30 [ 77.668441][ T5338] do_mmap+0xc45/0x10d0 [ 77.670304][ T5338] vm_mmap_pgoff+0x31b/0x4c0 [ 77.672384][ T5338] ksys_mmap_pgoff+0x51f/0x760 [ 77.674508][ T5338] do_syscall_64+0xfa/0x3b0 [ 77.676772][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.679709][ T5338] [ 77.681003][ T5338] Freed by task 5339: [ 77.682954][ T5338] kasan_save_track+0x3e/0x80 [ 77.685044][ T5338] kasan_save_free_info+0x46/0x50 [ 77.687252][ T5338] __kasan_slab_free+0x62/0x70 [ 77.689456][ T5338] slab_free_after_rcu_debug+0x129/0x2a0 [ 77.691963][ T5338] rcu_core+0xca5/0x1710 [ 77.693825][ T5338] handle_softirqs+0x286/0x870 [ 77.695997][ T5338] __irq_exit_rcu+0xca/0x1f0 [ 77.698076][ T5338] irq_exit_rcu+0x9/0x30 [ 77.700042][ T5338] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 77.702600][ T5338] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 77.705244][ T5338] [ 77.706311][ T5338] Last potentially related work creation: [ 77.708795][ T5338] kasan_save_stack+0x3e/0x60 [ 77.710912][ T5338] kasan_record_aux_stack+0xbd/0xd0 [ 77.713262][ T5338] kmem_cache_free+0x2f6/0x400 [ 77.715382][ T5338] vms_complete_munmap_vmas+0x626/0x8a0 [ 77.718009][ T5338] do_vmi_align_munmap+0x358/0x420 [ 77.720433][ T5338] do_vmi_munmap+0x253/0x2e0 [ 77.722532][ T5338] do_munmap+0xe1/0x140 [ 77.724425][ T5338] mremap_to+0x56a/0x8b0 [ 77.726298][ T5338] __se_sys_mremap+0x8ac/0xc00 [ 77.728498][ T5338] do_syscall_64+0xfa/0x3b0 [ 77.730619][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.733217][ T5338] [ 77.734443][ T5338] The buggy address belongs to the object at ffff888011c8d3c0 [ 77.734443][ T5338] which belongs to the cache vm_area_struct of size 256 [ 77.741086][ T5338] The buggy address is located 88 bytes inside of [ 77.741086][ T5338] freed 256-byte region [ffff888011c8d3c0, ffff888011c8d4c0) [ 77.746925][ T5338] [ 77.748047][ T5338] The buggy address belongs to the physical page: [ 77.750870][ T5338] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11c8d [ 77.754739][ T5338] memcg:ffff88801a382101 [ 77.756787][ T5338] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 77.759892][ T5338] page_type: f5(slab) [ 77.761718][ T5338] raw: 00fff00000000000 ffff888030412b40 ffffea000048c1c0 dead000000000002 [ 77.765673][ T5338] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff88801a382101 [ 77.769437][ T5338] page dumped because: kasan: bad access detected [ 77.772209][ T5338] page_owner tracks the page as allocated [ 77.774615][ T5338] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5032, tgid 5032 (dhcpcd), ts 53256206156, free_ts 53037441950 [ 77.783376][ T5338] post_alloc_hook+0x240/0x2a0 [ 77.785542][ T5338] get_page_from_freelist+0x21e4/0x22c0 [ 77.787985][ T5338] __alloc_frozen_pages_noprof+0x181/0x370 [ 77.790629][ T5338] alloc_pages_mpol+0x232/0x4a0 [ 77.792829][ T5338] allocate_slab+0x8a/0x3b0 [ 77.794892][ T5338] ___slab_alloc+0xbfc/0x1480 [ 77.797079][ T5338] kmem_cache_alloc_noprof+0x283/0x3c0 [ 77.799700][ T5338] vm_area_dup+0x2b/0x680 [ 77.801826][ T5338] dup_mmap+0x90c/0x1ac0 [ 77.803795][ T5338] copy_mm+0x13c/0x4b0 [ 77.805627][ T5338] copy_process+0x16d3/0x3b80 [ 77.807688][ T5338] kernel_clone+0x21e/0x870 [ 77.809691][ T5338] __x64_sys_clone+0x18b/0x1e0 [ 77.811701][ T5338] do_syscall_64+0xfa/0x3b0 [ 77.813620][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.816185][ T5338] page last free pid 0 tgid 0 stack trace: [ 77.818711][ T5338] __free_frozen_pages+0xc71/0xe70 [ 77.820870][ T5338] __tlb_remove_table+0x2d2/0x3b0 [ 77.823051][ T5338] tlb_remove_table_rcu+0x85/0x100 [ 77.825225][ T5338] rcu_core+0xca5/0x1710 [ 77.827209][ T5338] handle_softirqs+0x286/0x870 [ 77.829532][ T5338] __irq_exit_rcu+0xca/0x1f0 [ 77.831878][ T5338] irq_exit_rcu+0x9/0x30 [ 77.833742][ T5338] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 77.836195][ T5338] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 77.838841][ T5338] [ 77.839919][ T5338] Memory state around the buggy address: [ 77.842337][ T5338] ffff888011c8d300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.845852][ T5338] ffff888011c8d380: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 77.849467][ T5338] >ffff888011c8d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.853205][ T5338] ^ [ 77.855636][ T5338] ffff888011c8d480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 77.859360][ T5338] ffff888011c8d500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.862884][ T5338] ================================================================== [ 77.868684][ T5318] Bluetooth: hci0: command tx timeout [ 77.905054][ T5339] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 77.943305][ T5339] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 77.948241][ T5339] (syz.0.0,5339,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 77.951398][ T5339] (syz.0.0,5339,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 77.955812][ T5339] (syz.0.0,5339,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 77.963947][ T5339] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 77.973712][ T5339] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 77.979049][ T5339] (syz.0.0,5339,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 77.982449][ T5339] (syz.0.0,5339,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 77.986205][ T5339] (syz.0.0,5339,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 77.992749][ T5337] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 78.002365][ T5337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 78.007056][ T5337] (syz.0.0,5337,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 78.010453][ T5337] (syz.0.0,5337,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 78.014630][ T5337] (syz.0.0,5337,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 78.021928][ T5339] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 78.031030][ T5339] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 78.036050][ T5339] (syz.0.0,5339,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 78.040469][ T5339] (syz.0.0,5339,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 78.043922][ T5339] (syz.0.0,5339,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 78.049290][ T5339] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 78.058984][ T5339] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 78.063227][ T5339] (syz.0.0,5339,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 78.066974][ T5339] (syz.0.0,5339,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 78.070666][ T5339] (syz.0.0,5339,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 78.075682][ T5339] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 78.086187][ T5339] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 78.091093][ T5339] (syz.0.0,5339,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 78.094345][ T5339] (syz.0.0,5339,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 78.100438][ T5339] (syz.0.0,5339,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 78.105518][ T5337] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 78.114286][ T5337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 78.119633][ T5337] (syz.0.0,5337,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 78.122960][ T5337] (syz.0.0,5337,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 78.126411][ T5337] (syz.0.0,5337,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880442d4178, block: 0 [ 78.131524][ T5337] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 78.142535][ T5337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 78.147034][ T5338] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 78.150187][ T5338] CPU: 0 UID: 0 PID: 5338 Comm: syz.0.0 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 78.154693][ T5338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.159825][ T5338] Call Trace: [ 78.161301][ T5338] [ 78.162622][ T5338] dump_stack_lvl+0x99/0x250 [ 78.164633][ T5338] ? __asan_memcpy+0x40/0x70 [ 78.166669][ T5338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.169002][ T5338] ? __pfx__printk+0x10/0x10 [ 78.171090][ T5338] panic+0x2db/0x790 [ 78.172894][ T5338] ? __pfx_panic+0x10/0x10 [ 78.174950][ T5338] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 78.177728][ T5338] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 78.181427][ T5338] ? print_memory_metadata+0x314/0x400 [ 78.183841][ T5338] ? ocfs2_fault+0xd3/0x3f0 [ 78.185986][ T5338] check_panic_on_warn+0x89/0xb0 [ 78.188251][ T5338] ? ocfs2_fault+0xd3/0x3f0 [ 78.190288][ T5338] end_report+0x78/0x160 [ 78.192129][ T5338] kasan_report+0x129/0x150 [ 78.194079][ T5338] ? ocfs2_fault+0xd3/0x3f0 [ 78.196093][ T5338] ocfs2_fault+0xd3/0x3f0 [ 78.198022][ T5338] ? __pfx_ocfs2_fault+0x10/0x10 [ 78.200299][ T5338] ? __raw_spin_lock_init+0x45/0x100 [ 78.202779][ T5338] __do_fault+0x138/0x390 [ 78.204741][ T5338] __handle_mm_fault+0x37ed/0x5620 [ 78.207113][ T5338] ? __pfx___handle_mm_fault+0x10/0x10 [ 78.209565][ T5338] ? __pfx___might_resched+0x10/0x10 [ 78.211938][ T5338] handle_mm_fault+0x40a/0x8e0 [ 78.214057][ T5338] __get_user_pages+0x1af4/0x30b0 [ 78.216331][ T5338] ? mt_find+0x15c/0x5f0 [ 78.218260][ T5338] ? __pfx___get_user_pages+0x10/0x10 [ 78.220687][ T5338] populate_vma_page_range+0x26b/0x340 [ 78.223157][ T5338] ? __pfx_populate_vma_page_range+0x10/0x10 [ 78.225923][ T5338] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 78.228719][ T5338] ? down_read+0x1ad/0x2e0 [ 78.230678][ T5338] __mm_populate+0x24c/0x380 [ 78.232605][ T5338] ? __pfx___mm_populate+0x10/0x10 [ 78.234771][ T5338] ? up_write+0x1c4/0x420 [ 78.236608][ T5338] vm_mmap_pgoff+0x3f0/0x4c0 [ 78.238591][ T5338] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 78.240809][ T5338] ? __fget_files+0x2a/0x420 [ 78.242871][ T5338] ? __fget_files+0x3a0/0x420 [ 78.244910][ T5338] ? __fget_files+0x2a/0x420 [ 78.246919][ T5338] ksys_mmap_pgoff+0x51f/0x760 [ 78.249016][ T5338] do_syscall_64+0xfa/0x3b0 [ 78.251023][ T5338] ? lockdep_hardirqs_on+0x9c/0x150 [ 78.253237][ T5338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.255814][ T5338] ? clear_bhb_loop+0x60/0xb0 [ 78.257836][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.260439][ T5338] RIP: 0033:0x7f598258e9a9 [ 78.262456][ T5338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.270780][ T5338] RSP: 002b:00007f598341f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 78.274337][ T5338] RAX: ffffffffffffffda RBX: 00007f59827b5fa0 RCX: 00007f598258e9a9 [ 78.277784][ T5338] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 78.281380][ T5338] RBP: 00007f5982610d69 R08: 0000000000000005 R09: 0000000000000000 [ 78.284921][ T5338] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000000 [ 78.288361][ T5338] R13: 0000000000000000 R14: 00007f59827b5fa0 R15: 00007ffd638cde68 [ 78.291899][ T5338] [ 78.293608][ T5338] Kernel Offset: disabled [ 78.295594][ T5338] Rebooting in 86400 seconds..