program:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f00000001c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@noinit_itable}, {@delalloc}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
mkdir(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12)

[   70.397597][ T5304] Bluetooth: hci0: command tx timeout
[   70.462446][ T5320] loop0: detected capacity change from 0 to 512
[   70.528109][ T5320] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.0: corrupted in-inode xattr: invalid ea_ino
[   70.536046][ T5320] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.0: couldn't read orphan inode 15 (err -117)
[   70.543058][ T5320] EXT4-fs (loop0): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.560683][ T5320] ==================================================================
[   70.564026][ T5320] BUG: KASAN: use-after-free in ext4_insert_dentry+0x3cd/0x780
[   70.567315][ T5320] Write of size 251 at addr ffff8880527c1f14 by task syz.0.0/5320
[   70.570433][ T5320] 
[   70.571530][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0
[   70.571550][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   70.571559][ T5320] Call Trace:
[   70.571568][ T5320]  <TASK>
[   70.571574][ T5320]  dump_stack_lvl+0x241/0x360
[   70.571596][ T5320]  ? __pfx_dump_stack_lvl+0x10/0x10
[   70.571611][ T5320]  ? __pfx__printk+0x10/0x10
[   70.571625][ T5320]  ? _printk+0xd5/0x120
[   70.571637][ T5320]  ? __virt_addr_valid+0x183/0x530
[   70.571652][ T5320]  ? __virt_addr_valid+0x183/0x530
[   70.571662][ T5320]  print_report+0x169/0x550
[   70.571678][ T5320]  ? __virt_addr_valid+0x183/0x530
[   70.571687][ T5320]  ? __virt_addr_valid+0x183/0x530
[   70.571697][ T5320]  ? __virt_addr_valid+0x45f/0x530
[   70.571706][ T5320]  ? __phys_addr+0xba/0x170
[   70.571723][ T5320]  ? ext4_insert_dentry+0x3cd/0x780
[   70.571736][ T5320]  kasan_report+0x143/0x180
[   70.571750][ T5320]  ? ext4_insert_dentry+0x3cd/0x780
[   70.571763][ T5320]  kasan_check_range+0x282/0x290
[   70.571775][ T5320]  ? ext4_insert_dentry+0x3cd/0x780
[   70.571786][ T5320]  __asan_memcpy+0x40/0x70
[   70.571797][ T5320]  ext4_insert_dentry+0x3cd/0x780
[   70.571812][ T5320]  add_dirent_to_buf+0x315/0x660
[   70.571828][ T5320]  ? __pfx_add_dirent_to_buf+0x10/0x10
[   70.571842][ T5320]  ? __ext4_handle_dirty_metadata+0x30d/0x820
[   70.571856][ T5320]  ? ext4_handle_dirty_dirblock+0xc0/0x350
[   70.571869][ T5320]  make_indexed_dir+0xcaf/0x1280
[   70.571887][ T5320]  ? __pfx_make_indexed_dir+0x10/0x10
[   70.571900][ T5320]  ? add_dirent_to_buf+0x2a7/0x660
[   70.571912][ T5320]  ? add_dirent_to_buf+0x2c5/0x660
[   70.571925][ T5320]  ? __pfx_add_dirent_to_buf+0x10/0x10
[   70.571939][ T5320]  ? __ext4_read_dirblock+0x486/0x790
[   70.571954][ T5320]  ext4_add_entry+0xb36/0xd30
[   70.571969][ T5320]  ? __pfx_ext4_add_entry+0x10/0x10
[   70.571986][ T5320]  ext4_add_nondir+0x8d/0x290
[   70.572000][ T5320]  ? ext4_symlink+0x70c/0xda0
[   70.572014][ T5320]  ext4_symlink+0xa10/0xda0
[   70.572030][ T5320]  ? __pfx_ext4_symlink+0x10/0x10
[   70.572045][ T5320]  ? inode_permission+0xff/0x460
[   70.572062][ T5320]  ? bpf_lsm_inode_symlink+0x9/0x10
[   70.572074][ T5320]  ? security_inode_symlink+0xbe/0x330
[   70.572088][ T5320]  vfs_symlink+0x137/0x2e0
[   70.572104][ T5320]  do_symlinkat+0x222/0x3a0
[   70.572120][ T5320]  ? __pfx_do_symlinkat+0x10/0x10
[   70.572131][ T5320]  ? strncpy_from_user+0x146/0x270
[   70.572146][ T5320]  ? getname_flags+0x1e3/0x540
[   70.572161][ T5320]  __x64_sys_symlink+0x7a/0x90
[   70.572172][ T5320]  do_syscall_64+0xf3/0x230
[   70.572253][ T5320]  ? clear_bhb_loop+0x35/0x90
[   70.572275][ T5320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.572294][ T5320] RIP: 0033:0x7f118a38cde9
[   70.572307][ T5320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.572316][ T5320] RSP: 002b:00007f118b255038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[   70.572333][ T5320] RAX: ffffffffffffffda RBX: 00007f118a5a5fa0 RCX: 00007f118a38cde9
[   70.572343][ T5320] RDX: 0000000000000000 RSI: 0000400000000cc0 RDI: 0000400000000dc0
[   70.572352][ T5320] RBP: 00007f118a40e2a0 R08: 0000000000000000 R09: 0000000000000000
[   70.572359][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   70.572366][ T5320] R13: 0000000000000000 R14: 00007f118a5a5fa0 R15: 00007ffd70c35f98
[   70.572378][ T5320]  </TASK>
[   70.572383][ T5320] 
[   70.714049][ T5320] The buggy address belongs to the physical page:
[   70.716674][ T5320] page: refcount:3 mapcount:0 mapping:ffff888000884d78 index:0x3f pfn:0x527c1
[   70.720652][ T5320] memcg:ffff888032b0c000
[   70.722790][ T5320] aops:def_blk_aops ino:700000 dentry name(?):""
[   70.725723][ T5320] flags: 0x4fff10000004014(referenced|dirty|private|node=1|zone=1|lastcpupid=0x7ff)
[   70.729600][ T5320] raw: 04fff10000004014 0000000000000000 dead000000000122 ffff888000884d78
[   70.733509][ T5320] raw: 000000000000003f ffff888012ec50e8 00000003ffffffff ffff888032b0c000
[   70.737287][ T5320] page dumped because: kasan: bad access detected
[   70.739861][ T5320] page_owner tracks the page as allocated
[   70.742051][ T5320] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x148c40(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL), pid 5320, tgid 5319 (syz.0.0), ts 70560452076, free_ts 70519691161
[   70.750642][ T5320]  post_alloc_hook+0x1f4/0x240
[   70.752479][ T5320]  get_page_from_freelist+0x365c/0x37a0
[   70.754694][ T5320]  __alloc_frozen_pages_noprof+0x292/0x710
[   70.757021][ T5320]  alloc_pages_mpol+0x311/0x660
[   70.759113][ T5320]  alloc_pages_noprof+0x121/0x190
[   70.761366][ T5320]  folio_alloc_noprof+0x1e/0x30
[   70.763644][ T5320]  filemap_alloc_folio_noprof+0xe1/0x540
[   70.766399][ T5320]  __filemap_get_folio+0x438/0xae0
[   70.768612][ T5320]  bdev_getblk+0x1d4/0x670
[   70.770499][ T5320]  ext4_getblk+0x31b/0x880
[   70.772198][ T5320]  ext4_bread+0x2e/0x180
[   70.774114][ T5320]  ext4_append+0x327/0x5c0
[   70.776252][ T5320]  make_indexed_dir+0x3ff/0x1280
[   70.778733][ T5320]  ext4_add_entry+0xb36/0xd30
[   70.780785][ T5320]  ext4_add_nondir+0x8d/0x290
[   70.782731][ T5320]  ext4_symlink+0xa10/0xda0
[   70.784610][ T5320] page last free pid 5301 tgid 5301 stack trace:
[   70.787399][ T5320]  free_frozen_pages+0xe0d/0x10e0
[   70.789833][ T5320]  __put_partials+0x160/0x1c0
[   70.791831][ T5320]  put_cpu_partial+0x17c/0x250
[   70.793727][ T5320]  __slab_free+0x290/0x380
[   70.795517][ T5320]  qlist_free_all+0x9a/0x140
[   70.797323][ T5320]  kasan_quarantine_reduce+0x14f/0x170
[   70.799962][ T5320]  __kasan_slab_alloc+0x23/0x80
[   70.802618][ T5320]  kmem_cache_alloc_noprof+0x1d9/0x380
[   70.805278][ T5320]  getname_flags+0xb7/0x540
[   70.807331][ T5320]  user_path_at+0x24/0x60
[   70.809089][ T5320]  __se_sys_inotify_add_watch+0x19c/0xf20
[   70.811484][ T5320]  do_syscall_64+0xf3/0x230
[   70.813350][ T5320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.815638][ T5320] 
[   70.816657][ T5320] Memory state around the buggy address:
[   70.822830][ T5320]  ffff8880527c1f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   70.826378][ T5320]  ffff8880527c1f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   70.829486][ T5320] >ffff8880527c2000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   70.832716][ T5320]                    ^
[   70.834694][ T5320]  ffff8880527c2080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   70.838722][ T5320]  ffff8880527c2100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   70.841966][ T5320] ==================================================================
[   70.871174][ T5320] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   70.874816][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0
[   70.879022][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   70.882836][ T5320] Call Trace:
[   70.884147][ T5320]  <TASK>
[   70.885254][ T5320]  dump_stack_lvl+0x241/0x360
[   70.887122][ T5320]  ? __pfx_dump_stack_lvl+0x10/0x10
[   70.889721][ T5320]  ? __pfx__printk+0x10/0x10
[   70.892138][ T5320]  ? preempt_schedule+0xe1/0xf0
[   70.894380][ T5320]  ? vscnprintf+0x5d/0x90
[   70.896117][ T5320]  panic+0x349/0x880
[   70.897712][ T5320]  ? check_panic_on_warn+0x21/0xb0
[   70.900065][ T5320]  ? __pfx_panic+0x10/0x10
[   70.901877][ T5320]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[   70.904236][ T5320]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   70.906889][ T5320]  ? print_report+0x502/0x550
[   70.909218][ T5320]  check_panic_on_warn+0x86/0xb0
[   70.912044][ T5320]  ? ext4_insert_dentry+0x3cd/0x780
[   70.914722][ T5320]  end_report+0x77/0x160
[   70.916508][ T5320]  kasan_report+0x154/0x180
[   70.918751][ T5320]  ? ext4_insert_dentry+0x3cd/0x780
[   70.921438][ T5320]  kasan_check_range+0x282/0x290
[   70.924162][ T5320]  ? ext4_insert_dentry+0x3cd/0x780
[   70.927263][ T5320]  __asan_memcpy+0x40/0x70
[   70.929368][ T5320]  ext4_insert_dentry+0x3cd/0x780
[   70.931487][ T5320]  add_dirent_to_buf+0x315/0x660
[   70.933447][ T5320]  ? __pfx_add_dirent_to_buf+0x10/0x10
[   70.935675][ T5320]  ? __ext4_handle_dirty_metadata+0x30d/0x820
[   70.938278][ T5320]  ? ext4_handle_dirty_dirblock+0xc0/0x350
[   70.941009][ T5320]  make_indexed_dir+0xcaf/0x1280
[   70.943624][ T5320]  ? __pfx_make_indexed_dir+0x10/0x10
[   70.945923][ T5320]  ? add_dirent_to_buf+0x2a7/0x660
[   70.948050][ T5320]  ? add_dirent_to_buf+0x2c5/0x660
[   70.949978][ T5320]  ? __pfx_add_dirent_to_buf+0x10/0x10
[   70.952337][ T5320]  ? __ext4_read_dirblock+0x486/0x790
[   70.954966][ T5320]  ext4_add_entry+0xb36/0xd30
[   70.957128][ T5320]  ? __pfx_ext4_add_entry+0x10/0x10
[   70.959484][ T5320]  ext4_add_nondir+0x8d/0x290
[   70.961690][ T5320]  ? ext4_symlink+0x70c/0xda0
[   70.963570][ T5320]  ext4_symlink+0xa10/0xda0
[   70.965303][ T5320]  ? __pfx_ext4_symlink+0x10/0x10
[   70.967310][ T5320]  ? inode_permission+0xff/0x460
[   70.969221][ T5320]  ? bpf_lsm_inode_symlink+0x9/0x10
[   70.971364][ T5320]  ? security_inode_symlink+0xbe/0x330
[   70.974069][ T5320]  vfs_symlink+0x137/0x2e0
[   70.976691][ T5320]  do_symlinkat+0x222/0x3a0
[   70.979214][ T5320]  ? __pfx_do_symlinkat+0x10/0x10
[   70.981634][ T5320]  ? strncpy_from_user+0x146/0x270
[   70.984063][ T5320]  ? getname_flags+0x1e3/0x540
[   70.986361][ T5320]  __x64_sys_symlink+0x7a/0x90
[   70.988665][ T5320]  do_syscall_64+0xf3/0x230
[   70.990849][ T5320]  ? clear_bhb_loop+0x35/0x90
[   70.993008][ T5320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.995599][ T5320] RIP: 0033:0x7f118a38cde9
[   70.997589][ T5320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.005589][ T5320] RSP: 002b:00007f118b255038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[   71.008833][ T5320] RAX: ffffffffffffffda RBX: 00007f118a5a5fa0 RCX: 00007f118a38cde9
[   71.011907][ T5320] RDX: 0000000000000000 RSI: 0000400000000cc0 RDI: 0000400000000dc0
[   71.015577][ T5320] RBP: 00007f118a40e2a0 R08: 0000000000000000 R09: 0000000000000000
[   71.019631][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   71.022597][ T5320] R13: 0000000000000000 R14: 00007f118a5a5fa0 R15: 00007ffd70c35f98
[   71.025594][ T5320]  </TASK>
[   71.027165][ T5320] Kernel Offset: disabled
[   71.028867][ T5320] Rebooting in 86400 seconds..