should_failslab+0xa8/0x100 mm/failslab.c:46
 slab_pre_alloc_hook mm/slub.c:4539 [inline]
 slab_alloc_node mm/slub.c:4897 [inline]
 __do_kmalloc_node mm/slub.c:5333 [inline]
 __kmalloc_noprof+0xfe/0x720 mm/slub.c:5359
 _kmalloc_noprof include/linux/slab.h:992 [inline]
 _kzalloc_noprof include/linux/slab.h:1309 [inline]
 ieee802_11_parse_elems_full+0x14b/0x2db0 net/mac80211/parse.c:1073
 ieee802_11_parse_elems net/mac80211/ieee80211_i.h:2551 [inline]
 ieee80211_inform_bss+0x163/0x10d0 net/mac80211/scan.c:79
 rdev_inform_bss net/wireless/rdev-ops.h:418 [inline]
 cfg80211_inform_single_bss_data+0xd9c/0x1be0 net/wireless/scan.c:2382
 cfg80211_inform_bss_data+0x25b/0x3d50 net/wireless/scan.c:3241
 cfg80211_inform_bss_frame_data+0x3c7/0x840 net/wireless/scan.c:3333
 ieee80211_bss_info_update+0x791/0xa50 net/mac80211/scan.c:230
 ieee80211_rx_bss_info net/mac80211/ibss.c:1063 [inline]
 ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1544 [inline]
 ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 net/mac80211/ibss.c:1571
 ieee80211_iface_process_skb net/mac80211/iface.c:1769 [inline]
 ieee80211_iface_work+0x78a/0x1010 net/mac80211/iface.c:1823
 cfg80211_wiphy_work+0x29e/0x420 net/wireless/core.c:538
 process_one_work kernel/workqueue.c:3322 [inline]
 process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 1, space 0, times 92
CPU: 0 UID: 0 PID: 182 Comm: kworker/u4:6 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Workqueue: events_unbound btrfs_async_reclaim_data_space
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 fail_dump lib/fault-inject.c:73 [inline]
 should_fail_ex+0x40c/0x560 lib/fault-inject.c:174
 should_failslab+0xa8/0x100 mm/failslab.c:46
 slab_pre_alloc_hook mm/slub.c:4539 [inline]
 slab_alloc_node mm/slub.c:4897 [inline]
 kmem_cache_alloc_noprof+0xa6/0x5f0 mm/slub.c:4931
 add_delayed_ref+0x123/0x1ed0 fs/btrfs/delayed-ref.c:1048
 btrfs_alloc_tree_block+0xd42/0x12a0 fs/btrfs/extent-tree.c:5425
 btrfs_force_cow_block+0x562/0x1bf0 fs/btrfs/ctree.c:501
 btrfs_cow_block+0x3f1/0xaf0 fs/btrfs/ctree.c:696
 btrfs_search_slot+0xd06/0x2d00 fs/btrfs/ctree.c:2103
 btrfs_update_device+0x14d/0x4d0 fs/btrfs/volumes.c:3122
 btrfs_chunk_alloc_add_chunk_item+0x2bc/0xfb0 fs/btrfs/volumes.c:6234
 do_chunk_alloc fs/btrfs/block-group.c:4149 [inline]
 btrfs_chunk_alloc+0xabb/0x1330 fs/btrfs/block-group.c:4444
 flush_space+0x3df/0xde0 fs/btrfs/space-info.c:908
 do_async_reclaim_data_space+0x137/0x550 fs/btrfs/space-info.c:1455
 btrfs_async_reclaim_data_space+0x41/0x90 fs/btrfs/space-info.c:1519
 process_one_work kernel/workqueue.c:3322 [inline]
 process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
BTRFS error (device loop0 state A): Transaction 8 aborted (error -12)
BTRFS: error (device loop0 state A) in do_chunk_alloc:4219: errno=-12 Out of memory
BTRFS info (device loop0 state EA): forced readonly
------------[ cut here ]------------
1
WARNING: fs/btrfs/space-info.h:286 at btrfs_space_info_update_bytes_may_use+0x318/0x650 fs/btrfs/space-info.h:286, CPU#0: kworker/u4:6/182
Modules linked in:
CPU: 0 UID: 0 PID: 182 Comm: kworker/u4:6 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Workqueue: events_unbound btrfs_async_reclaim_data_space
RIP: 0010:btrfs_space_info_update_bytes_may_use+0x318/0x650 fs/btrfs/space-info.h:286
Code: 00 00 74 08 4c 89 ff e8 86 e6 fd fd 4d 8b 27 4c 89 e7 48 8b 6c 24 18 48 89 ee e8 03 b8 8e fd 49 39 ec 73 1c e8 99 b5 8e fd 90 <0f> 0b 90 31 db 43 80 7c 35 00 00 0f 85 48 ff ff ff e9 4b ff ff ff
RSP: 0018:ffffc9000196f6f0 EFLAGS: 00010293
RAX: ffffffff84386eb7 RBX: fffffffffffe8000 RCX: ffff8880333c8000
RDX: 0000000000000000 RSI: 0000000000018000 RDI: 0000000000017000
RBP: 0000000000018000 R08: ffffffff9057b737 R09: 1ffffffff20af6e6
R10: dffffc0000000000 R11: fffffbfff20af6e7 R12: 0000000000017000
R13: 1ffff1100a25f410 R14: dffffc0000000000 R15: ffff8880512fa080
FS:  0000000000000000(0000) GS:ffff88808c543000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fce3d953560 CR3: 0000000012dce000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 btrfs_space_info_free_bytes_may_use fs/btrfs/space-info.h:323 [inline]
 block_rsv_release_bytes fs/btrfs/block-rsv.c:153 [inline]
 btrfs_block_rsv_release+0x47b/0x590 fs/btrfs/block-rsv.c:291
 btrfs_trans_release_chunk_metadata+0x7f/0xb0 fs/btrfs/transaction.c:262
 do_chunk_alloc fs/btrfs/block-group.c:4223 [inline]
 btrfs_chunk_alloc+0x106e/0x1330 fs/btrfs/block-group.c:4444
 flush_space+0x3df/0xde0 fs/btrfs/space-info.c:908
 do_async_reclaim_data_space+0x137/0x550 fs/btrfs/space-info.c:1455
 btrfs_async_reclaim_data_space+0x41/0x90 fs/btrfs/space-info.c:1519
 process_one_work kernel/workqueue.c:3322 [inline]
 process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>