program:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@user_xattr}, {@quota}, {@delalloc}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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")
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x44000, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000200))
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x418, 0xffffffff, 0xffffffff, 0x418, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'erspan0\x00'}, 0x0, 0x148, 0x190, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x66, 0x3, 0x9, 'snmp_trap\x00', {0x8}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0xffffffff], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x7, 0x5}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0xaf53, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@multicast1, [0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0xffffffff, 0x0, 0xff000000, 0xffffffff], 0x4d5, 0x3500, 0x3a, 0x0, 0x13, 0xd}, {@ipv4=@local, [0xff000000, 0xff000000, 0xff], @ipv6=@private1, [0x100000100, 0xffffff00, 0xffffff00], 0x4d6, 0x3507, 0xf6, 0x0, 0x6, 0x1b}, {@ipv6=@rand_addr=' \x01\x00', [0xffffff, 0xff, 0xffffffff, 0xff000000], @ipv4=@local, [0x0, 0xffffffff, 0xff, 0xffffffff], 0x4d3, 0x3502, 0x6c, 0x1, 0xd, 0x15}, {@ipv4=@multicast2, [0xff000000, 0xff000000, 0xffffffff, 0xffffffff], @ipv4=@dev={0xac, 0x14, 0x14, 0xf}, [0x0, 0x0, 0xff000000], 0x4d6, 0x0, 0x6, 0x0, 0x6, 0x1a}], 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x548)
open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000fe00010008"], 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f0000000080)=0x3, 0x12)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
r7 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x44}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000001040)=ANY=[], 0x841, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000002c0)=0x1, 0x4)
truncate(&(0x7f0000000180)='./file1\x00', 0x6)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
write$FUSE_WRITE(r9, &(0x7f00000000c0)={0x18}, 0xfffffdef)

[   83.557987][ T4665] Bluetooth: hci0: command tx timeout
[   83.689588][ T5320] loop0: detected capacity change from 0 to 1024
[   83.725551][ T5320] =======================================================
[   83.725551][ T5320] WARNING: The mand mount option has been deprecated and
[   83.725551][ T5320]          and is ignored by this kernel. Remove the mand
[   83.725551][ T5320]          option from the mount to silence this warning.
[   83.725551][ T5320] =======================================================
[   83.786980][ T5320] EXT4-fs: Ignoring removed oldalloc option
[   83.792768][ T5320] EXT4-fs: Ignoring removed orlov option
[   83.799891][ T5320] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   83.815994][ T5320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.870392][ T5320] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[   83.912016][ T5320] ==================================================================
[   83.916522][ T5320] BUG: KASAN: use-after-free in ext4_ext_remove_space+0x3170/0x4280
[   83.920313][ T5320] Read of size 4 at addr ffff888055e1de54 by task syz.0.0/5320
[   83.923959][ T5320] 
[   83.925164][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) 
[   83.925180][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   83.925188][ T5320] Call Trace:
[   83.925196][ T5320]  <TASK>
[   83.925202][ T5320]  dump_stack_lvl+0xe8/0x150
[   83.925226][ T5320]  print_report+0xba/0x230
[   83.925242][ T5320]  ? ext4_ext_remove_space+0x3170/0x4280
[   83.925258][ T5320]  kasan_report+0x117/0x150
[   83.925275][ T5320]  ? ext4_ext_remove_space+0x3170/0x4280
[   83.925290][ T5320]  ext4_ext_remove_space+0x3170/0x4280
[   83.925307][ T5320]  ? __es_remove_extent+0x13d3/0x1da0
[   83.925331][ T5320]  ? __pfx_ext4_ext_remove_space+0x10/0x10
[   83.925345][ T5320]  ? ext4_es_remove_extent+0x2a7/0x4c0
[   83.925363][ T5320]  ext4_ext_truncate+0x17e/0x2f0
[   83.925379][ T5320]  ext4_truncate+0xb63/0x13b0
[   83.925393][ T5320]  ? unmap_mapping_range+0xe6/0x180
[   83.925405][ T5320]  ? __pfx_ext4_truncate+0x10/0x10
[   83.925417][ T5320]  ext4_setattr+0x106e/0x1c60
[   83.925429][ T5320]  ? __pfx_ext4_setattr+0x10/0x10
[   83.925440][ T5320]  notify_change+0xc1a/0xf40
[   83.925455][ T5320]  do_truncate+0x1c2/0x250
[   83.925465][ T5320]  ? __pfx_do_truncate+0x10/0x10
[   83.925473][ T5320]  ? apparmor_path_truncate+0x245/0x2e0
[   83.925543][ T5320]  vfs_truncate+0x4b4/0x540
[   83.925558][ T5320]  ? __pfx_vfs_truncate+0x10/0x10
[   83.925571][ T5320]  ? do_getname+0x151/0x250
[   83.925588][ T5320]  do_sys_truncate+0xf3/0x1c0
[   83.925599][ T5320]  ? __pfx_do_sys_truncate+0x10/0x10
[   83.925614][ T5320]  __x64_sys_truncate+0x5b/0x70
[   83.925626][ T5320]  do_syscall_64+0x14d/0xf80
[   83.925685][ T5320]  ? trace_irq_disable+0x3b/0x150
[   83.925707][ T5320]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.925722][ T5320]  ? clear_bhb_loop+0x40/0x90
[   83.925736][ T5320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.925751][ T5320] RIP: 0033:0x7f6cef99c799
[   83.925766][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   83.925779][ T5320] RSP: 002b:00007f6cf079cfe8 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[   83.925795][ T5320] RAX: ffffffffffffffda RBX: 00007f6cefc15fa0 RCX: 00007f6cef99c799
[   83.925803][ T5320] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000180
[   83.925810][ T5320] RBP: 00007f6cefa32bd9 R08: 0000000000000000 R09: 0000000000000000
[   83.925817][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   83.925824][ T5320] R13: 00007f6cefc16038 R14: 00007f6cefc15fa0 R15: 00007ffe5ff70988
[   83.925837][ T5320]  </TASK>
[   83.925841][ T5320] 
[   84.054891][ T5320] The buggy address belongs to the physical page:
[   84.057943][ T5320] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55e1d
[   84.061966][ T5320] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[   84.066169][ T5320] raw: 04fff00000000000 ffffea0001578748 ffffea0001578748 0000000000000000
[   84.071348][ T5320] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[   84.075298][ T5320] page dumped because: kasan: bad access detected
[   84.078314][ T5320] page_owner info is not present (never set?)
[   84.081122][ T5320] 
[   84.082205][ T5320] Memory state around the buggy address:
[   84.084777][ T5320]  ffff888055e1dd00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   84.089174][ T5320]  ffff888055e1dd80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   84.093833][ T5320] >ffff888055e1de00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   84.097483][ T5320]                                                  ^
[   84.100464][ T5320]  ffff888055e1de80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   84.104131][ T5320]  ffff888055e1df00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   84.108107][ T5320] ==================================================================
[   84.123761][ T5320] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   84.127344][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) 
[   84.131849][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   84.137728][ T5320] Call Trace:
[   84.139705][ T5320]  <TASK>
[   84.141053][ T5320]  vpanic+0x56c/0xa60
[   84.143264][ T5320]  ? __pfx_vpanic+0x10/0x10
[   84.145412][ T5320]  panic+0xc5/0xd0
[   84.147160][ T5320]  ? __pfx_panic+0x10/0x10
[   84.149031][ T5320]  ? preempt_schedule_thunk+0x16/0x30
[   84.151340][ T5320]  ? ext4_ext_remove_space+0x3170/0x4280
[   84.154209][ T5320]  ? preempt_schedule_thunk+0x16/0x30
[   84.157131][ T5320]  ? ext4_ext_remove_space+0x3170/0x4280
[   84.159923][ T5320]  check_panic_on_warn+0x89/0xb0
[   84.162200][ T5320]  ? ext4_ext_remove_space+0x3170/0x4280
[   84.164806][ T5320]  end_report+0x73/0x180
[   84.167136][ T5320]  ? ext4_ext_remove_space+0x3170/0x4280
[   84.170251][ T5320]  kasan_report+0x128/0x150
[   84.172611][ T5320]  ? ext4_ext_remove_space+0x3170/0x4280
[   84.175149][ T5320]  ext4_ext_remove_space+0x3170/0x4280
[   84.177629][ T5320]  ? __es_remove_extent+0x13d3/0x1da0
[   84.180121][ T5320]  ? __pfx_ext4_ext_remove_space+0x10/0x10
[   84.182795][ T5320]  ? ext4_es_remove_extent+0x2a7/0x4c0
[   84.185859][ T5320]  ext4_ext_truncate+0x17e/0x2f0
[   84.188940][ T5320]  ext4_truncate+0xb63/0x13b0
[   84.191332][ T5320]  ? unmap_mapping_range+0xe6/0x180
[   84.193647][ T5320]  ? __pfx_ext4_truncate+0x10/0x10
[   84.196224][ T5320]  ext4_setattr+0x106e/0x1c60
[   84.198321][ T5320]  ? __pfx_ext4_setattr+0x10/0x10
[   84.200567][ T5320]  notify_change+0xc1a/0xf40
[   84.202744][ T5320]  do_truncate+0x1c2/0x250
[   84.204982][ T5320]  ? __pfx_do_truncate+0x10/0x10
[   84.207921][ T5320]  ? apparmor_path_truncate+0x245/0x2e0
[   84.212083][ T5320]  vfs_truncate+0x4b4/0x540
[   84.214381][ T5320]  ? __pfx_vfs_truncate+0x10/0x10
[   84.217191][ T5320]  ? do_getname+0x151/0x250
[   84.219784][ T5320]  do_sys_truncate+0xf3/0x1c0
[   84.222583][ T5320]  ? __pfx_do_sys_truncate+0x10/0x10
[   84.226207][ T5320]  __x64_sys_truncate+0x5b/0x70
[   84.229028][ T5320]  do_syscall_64+0x14d/0xf80
[   84.231334][ T5320]  ? trace_irq_disable+0x3b/0x150
[   84.233322][ T5320]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.236173][ T5320]  ? clear_bhb_loop+0x40/0x90
[   84.238304][ T5320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.241131][ T5320] RIP: 0033:0x7f6cef99c799
[   84.243152][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   84.253444][ T5320] RSP: 002b:00007f6cf079cfe8 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[   84.257128][ T5320] RAX: ffffffffffffffda RBX: 00007f6cefc15fa0 RCX: 00007f6cef99c799
[   84.260620][ T5320] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000180
[   84.264382][ T5320] RBP: 00007f6cefa32bd9 R08: 0000000000000000 R09: 0000000000000000
[   84.267744][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   84.272539][ T5320] R13: 00007f6cefc16038 R14: 00007f6cefc15fa0 R15: 00007ffe5ff70988
[   84.277028][ T5320]  </TASK>
[   84.278979][ T5320] Kernel Offset: disabled
[   84.280955][ T5320] Rebooting in 86400 seconds..