program:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@min_batch_time}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
mkdir(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12)

[   62.594929][ T4661] Bluetooth: hci0: command tx timeout
[   62.684535][ T5312] loop0: detected capacity change from 0 to 512
[   62.730387][ T5312] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.0: corrupted in-inode xattr: invalid ea_ino
[   62.744428][ T5312] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.0: couldn't read orphan inode 15 (err -117)
[   62.751305][ T5312] EXT4-fs (loop0): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.763149][ T5312] ==================================================================
[   62.766284][ T5312] BUG: KASAN: use-after-free in ext4_insert_dentry+0x36a/0x6d0
[   62.769110][ T5312] Write of size 251 at addr ffff8880409fcf14 by task syz.0.0/5312
[   62.772041][ T5312] 
[   62.772940][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[   62.776943][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   62.781079][ T5312] Call Trace:
[   62.782375][ T5312]  <TASK>
[   62.783509][ T5312]  dump_stack_lvl+0x241/0x360
[   62.785341][ T5312]  ? __pfx_dump_stack_lvl+0x10/0x10
[   62.787384][ T5312]  ? __pfx__printk+0x10/0x10
[   62.789134][ T5312]  ? _printk+0xd5/0x120
[   62.790786][ T5312]  ? __virt_addr_valid+0x183/0x530
[   62.792737][ T5312]  ? __virt_addr_valid+0x183/0x530
[   62.794704][ T5312]  print_report+0x169/0x550
[   62.796554][ T5312]  ? __virt_addr_valid+0x183/0x530
[   62.798526][ T5312]  ? __virt_addr_valid+0x183/0x530
[   62.800477][ T5312]  ? __virt_addr_valid+0x45f/0x530
[   62.802375][ T5312]  ? __phys_addr+0xba/0x170
[   62.804096][ T5312]  ? ext4_insert_dentry+0x36a/0x6d0
[   62.806053][ T5312]  kasan_report+0x143/0x180
[   62.807806][ T5312]  ? ext4_insert_dentry+0x36a/0x6d0
[   62.809747][ T5312]  kasan_check_range+0x282/0x290
[   62.811703][ T5312]  ? ext4_insert_dentry+0x36a/0x6d0
[   62.813768][ T5312]  __asan_memcpy+0x40/0x70
[   62.815502][ T5312]  ext4_insert_dentry+0x36a/0x6d0
[   62.817398][ T5312]  add_dirent_to_buf+0x3d9/0x750
[   62.819286][ T5312]  ? __pfx_add_dirent_to_buf+0x10/0x10
[   62.821428][ T5312]  ? __ext4_handle_dirty_metadata+0x30d/0x820
[   62.823757][ T5312]  make_indexed_dir+0xf98/0x1600
[   62.825676][ T5312]  ? __pfx_make_indexed_dir+0x10/0x10
[   62.827810][ T5312]  ? add_dirent_to_buf+0x398/0x750
[   62.829693][ T5312]  ? __pfx_add_dirent_to_buf+0x10/0x10
[   62.831803][ T5312]  ? __ext4_read_dirblock+0x527/0x890
[   62.833823][ T5312]  ext4_add_entry+0xcf7/0xfa0
[   62.835594][ T5312]  ? __pfx_ext4_add_entry+0x10/0x10
[   62.837606][ T5312]  ext4_add_nondir+0x8d/0x290
[   62.839355][ T5312]  ? ext4_symlink+0x6ce/0xb50
[   62.841174][ T5312]  ext4_symlink+0x920/0xb50
[   62.842910][ T5312]  ? __pfx_ext4_symlink+0x10/0x10
[   62.844861][ T5312]  ? inode_permission+0xff/0x460
[   62.846746][ T5312]  ? bpf_lsm_inode_symlink+0x9/0x10
[   62.848703][ T5312]  ? security_inode_symlink+0xbe/0x330
[   62.850841][ T5312]  vfs_symlink+0x137/0x2e0
[   62.852486][ T5312]  do_symlinkat+0x222/0x3a0
[   62.854475][ T5312]  ? __pfx_do_symlinkat+0x10/0x10
[   62.856579][ T5312]  ? strncpy_from_user+0x152/0x270
[   62.858547][ T5312]  ? getname_flags+0x1e3/0x540
[   62.860322][ T5312]  __x64_sys_symlink+0x7a/0x90
[   62.862162][ T5312]  do_syscall_64+0xf3/0x230
[   62.863933][ T5312]  ? clear_bhb_loop+0x35/0x90
[   62.865764][ T5312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.868035][ T5312] RIP: 0033:0x7f599a385d29
[   62.869755][ T5312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.877172][ T5312] RSP: 002b:00007f599b150038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[   62.880435][ T5312] RAX: ffffffffffffffda RBX: 00007f599a575fa0 RCX: 00007f599a385d29
[   62.883412][ T5312] RDX: 0000000000000000 RSI: 0000000020000cc0 RDI: 0000000020000dc0
[   62.886348][ T5312] RBP: 00007f599a401b08 R08: 0000000000000000 R09: 0000000000000000
[   62.889272][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   62.892321][ T5312] R13: 0000000000000000 R14: 00007f599a575fa0 R15: 00007ffd14de11b8
[   62.895204][ T5312]  </TASK>
[   62.896423][ T5312] 
[   62.897365][ T5312] The buggy address belongs to the physical page:
[   62.899765][ T5312] page: refcount:3 mapcount:0 mapping:ffff888031cbcd78 index:0x3f pfn:0x409fc
[   62.903042][ T5312] memcg:ffff888000f38000
[   62.904583][ T5312] aops:def_blk_aops ino:700000 dentry name(?):""
[   62.906923][ T5312] flags: 0x4fff08000004214(referenced|dirty|workingset|private|node=1|zone=1|lastcpupid=0x7ff)
[   62.911287][ T5312] raw: 04fff08000004214 0000000000000000 dead000000000122 ffff888031cbcd78
[   62.915147][ T5312] raw: 000000000000003f ffff8880441c4ae0 00000003ffffffff ffff888000f38000
[   62.918761][ T5312] page dumped because: kasan: bad access detected
[   62.921258][ T5312] page_owner tracks the page as allocated
[   62.924335][ T5312] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x148c40(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL), pid 5312, tgid 5311 (syz.0.0), ts 62762964301, free_ts 62697125184
[   62.931128][ T5312]  post_alloc_hook+0x1f3/0x230
[   62.932907][ T5312]  get_page_from_freelist+0x365c/0x37a0
[   62.934824][ T5312]  __alloc_pages_noprof+0x292/0x710
[   62.936639][ T5312]  alloc_pages_mpol_noprof+0x3e8/0x680
[   62.938894][ T5312]  folio_alloc_noprof+0x128/0x180
[   62.940794][ T5312]  filemap_alloc_folio_noprof+0xdf/0x500
[   62.943019][ T5312]  __filemap_get_folio+0x41f/0x940
[   62.944922][ T5312]  bdev_getblk+0x1d4/0x670
[   62.946645][ T5312]  ext4_getblk+0x31b/0x880
[   62.948304][ T5312]  ext4_bread+0x2e/0x180
[   62.950046][ T5312]  ext4_append+0x327/0x5c0
[   62.951726][ T5312]  make_indexed_dir+0x523/0x1600
[   62.953553][ T5312]  ext4_add_entry+0xcf7/0xfa0
[   62.955275][ T5312]  ext4_add_nondir+0x8d/0x290
[   62.956966][ T5312]  ext4_symlink+0x920/0xb50
[   62.958662][ T5312]  vfs_symlink+0x137/0x2e0
[   62.960314][ T5312] page last free pid 4722 tgid 4722 stack trace:
[   62.962683][ T5312]  free_unref_page+0xd3f/0x1010
[   62.964603][ T5312]  __put_partials+0x160/0x1c0
[   62.966450][ T5312]  put_cpu_partial+0x17c/0x250
[   62.968341][ T5312]  __slab_free+0x290/0x380
[   62.970091][ T5312]  qlist_free_all+0x9a/0x140
[   62.971952][ T5312]  kasan_quarantine_reduce+0x14f/0x170
[   62.973984][ T5312]  __kasan_slab_alloc+0x23/0x80
[   62.975786][ T5312]  kmem_cache_alloc_noprof+0x1d9/0x380
[   62.977894][ T5312]  getname_flags+0xb7/0x540
[   62.979645][ T5312]  do_sys_openat2+0xd2/0x1d0
[   62.981423][ T5312]  __x64_sys_openat+0x247/0x2a0
[   62.983234][ T5312]  do_syscall_64+0xf3/0x230
[   62.984889][ T5312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.986946][ T5312] 
[   62.987786][ T5312] Memory state around the buggy address:
[   62.989859][ T5312]  ffff8880409fcf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   62.992801][ T5312]  ffff8880409fcf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   62.995650][ T5312] >ffff8880409fd000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   62.998615][ T5312]                    ^
[   63.000216][ T5312]  ffff8880409fd080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   63.003197][ T5312]  ffff8880409fd100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   63.006195][ T5312] ==================================================================
[   63.024934][ T5312] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   63.027814][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[   63.031665][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   63.035660][ T5312] Call Trace:
[   63.036849][ T5312]  <TASK>
[   63.037936][ T5312]  dump_stack_lvl+0x241/0x360
[   63.039746][ T5312]  ? __pfx_dump_stack_lvl+0x10/0x10
[   63.041694][ T5312]  ? __pfx__printk+0x10/0x10
[   63.043542][ T5312]  ? preempt_schedule+0xe1/0xf0
[   63.045454][ T5312]  ? vscnprintf+0x5d/0x90
[   63.047151][ T5312]  panic+0x349/0x880
[   63.048663][ T5312]  ? check_panic_on_warn+0x21/0xb0
[   63.050637][ T5312]  ? __pfx_panic+0x10/0x10
[   63.052371][ T5312]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[   63.054701][ T5312]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   63.057118][ T5312]  ? print_report+0x502/0x550
[   63.058961][ T5312]  check_panic_on_warn+0x86/0xb0
[   63.060892][ T5312]  ? ext4_insert_dentry+0x36a/0x6d0
[   63.062918][ T5312]  end_report+0x77/0x160
[   63.064575][ T5312]  kasan_report+0x154/0x180
[   63.066352][ T5312]  ? ext4_insert_dentry+0x36a/0x6d0
[   63.068303][ T5312]  kasan_check_range+0x282/0x290
[   63.070164][ T5312]  ? ext4_insert_dentry+0x36a/0x6d0
[   63.072097][ T5312]  __asan_memcpy+0x40/0x70
[   63.073766][ T5312]  ext4_insert_dentry+0x36a/0x6d0
[   63.075681][ T5312]  add_dirent_to_buf+0x3d9/0x750
[   63.077560][ T5312]  ? __pfx_add_dirent_to_buf+0x10/0x10
[   63.079647][ T5312]  ? __ext4_handle_dirty_metadata+0x30d/0x820
[   63.081817][ T5312]  make_indexed_dir+0xf98/0x1600
[   63.083615][ T5312]  ? __pfx_make_indexed_dir+0x10/0x10
[   63.085463][ T5312]  ? add_dirent_to_buf+0x398/0x750
[   63.087288][ T5312]  ? __pfx_add_dirent_to_buf+0x10/0x10
[   63.089343][ T5312]  ? __ext4_read_dirblock+0x527/0x890
[   63.091372][ T5312]  ext4_add_entry+0xcf7/0xfa0
[   63.093104][ T5312]  ? __pfx_ext4_add_entry+0x10/0x10
[   63.095042][ T5312]  ext4_add_nondir+0x8d/0x290
[   63.096676][ T5312]  ? ext4_symlink+0x6ce/0xb50
[   63.098242][ T5312]  ext4_symlink+0x920/0xb50
[   63.099783][ T5312]  ? __pfx_ext4_symlink+0x10/0x10
[   63.101428][ T5312]  ? inode_permission+0xff/0x460
[   63.103076][ T5312]  ? bpf_lsm_inode_symlink+0x9/0x10
[   63.104953][ T5312]  ? security_inode_symlink+0xbe/0x330
[   63.107022][ T5312]  vfs_symlink+0x137/0x2e0
[   63.108744][ T5312]  do_symlinkat+0x222/0x3a0
[   63.110438][ T5312]  ? __pfx_do_symlinkat+0x10/0x10
[   63.112306][ T5312]  ? strncpy_from_user+0x152/0x270
[   63.114217][ T5312]  ? getname_flags+0x1e3/0x540
[   63.115997][ T5312]  __x64_sys_symlink+0x7a/0x90
[   63.117847][ T5312]  do_syscall_64+0xf3/0x230
[   63.119501][ T5312]  ? clear_bhb_loop+0x35/0x90
[   63.121170][ T5312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.123354][ T5312] RIP: 0033:0x7f599a385d29
[   63.125027][ T5312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   63.132413][ T5312] RSP: 002b:00007f599b150038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[   63.135656][ T5312] RAX: ffffffffffffffda RBX: 00007f599a575fa0 RCX: 00007f599a385d29
[   63.138745][ T5312] RDX: 0000000000000000 RSI: 0000000020000cc0 RDI: 0000000020000dc0
[   63.141859][ T5312] RBP: 00007f599a401b08 R08: 0000000000000000 R09: 0000000000000000
[   63.145017][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   63.148169][ T5312] R13: 0000000000000000 R14: 00007f599a575fa0 R15: 00007ffd14de11b8
[   63.151243][ T5312]  </TASK>
[   63.152751][ T5312] Kernel Offset: disabled
[   63.154458][ T5312] Rebooting in 86400 seconds..