FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 1 CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x412/0x560 lib/fault-inject.c:174 should_failslab+0xa8/0x100 mm/failslab.c:46 slab_pre_alloc_hook mm/slub.c:4906 [inline] slab_alloc_node mm/slub.c:5239 [inline] kmem_cache_alloc_noprof+0x87/0x6e0 mm/slub.c:5270 alloc_ordered_extent+0x12c/0x6a0 fs/btrfs/ordered-data.c:175 btrfs_alloc_ordered_extent+0x200/0xa90 fs/btrfs/ordered-data.c:-1 cow_one_range fs/btrfs/inode.c:1351 [inline] cow_file_range+0x7b5/0x1310 fs/btrfs/inode.c:1523 fallback_to_cow+0x5ea/0x9c0 fs/btrfs/inode.c:1872 run_delalloc_nocow+0x10c9/0x17a0 fs/btrfs/inode.c:2296 writepage_delalloc+0x1270/0x1ee0 fs/btrfs/extent_io.c:1516 extent_writepage fs/btrfs/extent_io.c:1883 [inline] extent_write_cache_pages fs/btrfs/extent_io.c:2570 [inline] btrfs_writepages+0x14d3/0x23f0 fs/btrfs/extent_io.c:2703 do_writepages+0x32e/0x550 mm/page-writeback.c:2598 filemap_writeback mm/filemap.c:387 [inline] filemap_fdatawrite_range+0x1ef/0x2f0 mm/filemap.c:412 btrfs_fdatawrite_range+0x54/0xf0 fs/btrfs/file.c:3891 btrfs_wait_ordered_range+0x59/0x260 fs/btrfs/ordered-data.c:917 btrfs_punch_hole fs/btrfs/file.c:2673 [inline] btrfs_fallocate+0x525/0x1bb0 fs/btrfs/file.c:3135 vfs_fallocate+0x669/0x7e0 fs/open.c:340 ioctl_preallocate fs/ioctl.c:289 [inline] file_ioctl+0x63f/0x860 fs/ioctl.c:332 do_vfs_ioctl+0xc26/0x1530 fs/ioctl.c:576 __do_sys_ioctl fs/ioctl.c:595 [inline] __se_sys_ioctl+0x82/0x170 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc9b0f9bf79 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fc9ad3f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fc9b1216090 RCX: 00007fc9b0f9bf79 RDX: 0000200000000380 RSI: 0000000040305829 RDI: 0000000000000005 RBP: 00007fc9ad3f5090 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fc9b1216128 R14: 00007fc9b1216090 R15: 00007ffcfca3b148 ------------[ cut here ]------------ 1 WARNING: fs/btrfs/space-info.h:257 at btrfs_space_info_update_bytes_may_use fs/btrfs/space-info.h:257 [inline], CPU#0: syz.0.0/5316 WARNING: fs/btrfs/space-info.h:257 at btrfs_space_info_free_bytes_may_use fs/btrfs/space-info.h:294 [inline], CPU#0: syz.0.0/5316 WARNING: fs/btrfs/space-info.h:257 at btrfs_free_reserved_data_space_noquota+0x3f4/0x680 fs/btrfs/delalloc-space.c:189, CPU#0: syz.0.0/5316 Modules linked in: CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:btrfs_space_info_update_bytes_may_use fs/btrfs/space-info.h:257 [inline] RIP: 0010:btrfs_space_info_free_bytes_may_use fs/btrfs/space-info.h:294 [inline] RIP: 0010:btrfs_free_reserved_data_space_noquota+0x3f4/0x680 fs/btrfs/delalloc-space.c:189 Code: 00 00 74 08 48 89 df e8 ca ee 24 fe 4c 8b 3b 4c 89 ff 4c 8b 64 24 08 4c 89 e6 e8 17 37 ba fd 4d 39 e7 73 16 e8 ad 34 ba fd 90 <0f> 0b 90 45 31 ff 41 80 7c 2d 00 00 75 95 eb 9b e8 97 34 ba fd 41 RSP: 0018:ffffc9000ea4e6e8 EFLAGS: 00010293 RAX: ffffffff840a52e3 RBX: ffff888036996080 RCX: ffff88803f422480 RDX: 0000000000000000 RSI: 000000000018c000 RDI: 0000000000167000 RBP: dffffc0000000000 R08: ffffffff90103a77 R09: 1ffffffff202074e R10: dffffc0000000000 R11: fffffbfff202074f R12: 000000000018c000 R13: 1ffff11006d32c10 R14: ffff888036996000 R15: 0000000000167000 FS: 00007fc9ad3f56c0(0000) GS:ffff88808cabd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000806000 CR3: 0000000041c2b000 CR4: 0000000000352ef0 Call Trace: btrfs_clear_delalloc_extent+0x633/0x790 fs/btrfs/inode.c:2693 clear_state_bit+0x93/0x3c0 fs/btrfs/extent-io-tree.c:567 btrfs_clear_extent_bit_changeset+0x750/0xb50 fs/btrfs/extent-io-tree.c:746 btrfs_clear_extent_bit fs/btrfs/extent-io-tree.h:185 [inline] extent_clear_unlock_delalloc+0x46/0x90 fs/btrfs/extent_io.c:472 cow_one_range fs/btrfs/inode.c:1396 [inline] cow_file_range+0x806/0x1310 fs/btrfs/inode.c:1523 fallback_to_cow+0x5ea/0x9c0 fs/btrfs/inode.c:1872 run_delalloc_nocow+0x10c9/0x17a0 fs/btrfs/inode.c:2296 writepage_delalloc+0x1270/0x1ee0 fs/btrfs/extent_io.c:1516 extent_writepage fs/btrfs/extent_io.c:1883 [inline] extent_write_cache_pages fs/btrfs/extent_io.c:2570 [inline] btrfs_writepages+0x14d3/0x23f0 fs/btrfs/extent_io.c:2703 do_writepages+0x32e/0x550 mm/page-writeback.c:2598 filemap_writeback mm/filemap.c:387 [inline] filemap_fdatawrite_range+0x1ef/0x2f0 mm/filemap.c:412 btrfs_fdatawrite_range+0x54/0xf0 fs/btrfs/file.c:3891 btrfs_wait_ordered_range+0x59/0x260 fs/btrfs/ordered-data.c:917 btrfs_punch_hole fs/btrfs/file.c:2673 [inline] btrfs_fallocate+0x525/0x1bb0 fs/btrfs/file.c:3135 vfs_fallocate+0x669/0x7e0 fs/open.c:340 ioctl_preallocate fs/ioctl.c:289 [inline] file_ioctl+0x63f/0x860 fs/ioctl.c:332 do_vfs_ioctl+0xc26/0x1530 fs/ioctl.c:576 __do_sys_ioctl fs/ioctl.c:595 [inline] __se_sys_ioctl+0x82/0x170 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc9b0f9bf79 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fc9ad3f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fc9b1216090 RCX: 00007fc9b0f9bf79 RDX: 0000200000000380 RSI: 0000000040305829 RDI: 0000000000000005 RBP: 00007fc9ad3f5090 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fc9b1216128 R14: 00007fc9b1216090 R15: 00007ffcfca3b148