TITLE: WARNING: kmalloc bug in corrupted
TYPE: WARNING
CORRUPTED: Y
PANICKED: Y

[  212.560360] FAULT_INJECTION: forcing a failure.
[  212.560360] name failslab, interval 1, probability 0, space 0, times 0
[  212.561336] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  212.571639] CPU: 1 PID: 17814 Comm: syz-executor3 Not tainted 4.16.0+ #11
[  212.571646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  212.571650] Call Trace:
[  212.571667]  dump_stack+0x1a7/0x27d
[  212.571681]  ? arch_local_irq_restore+0x53/0x53
[  212.571695]  ? lockdep_init_map+0x9/0x10
[  212.578121] WARNING: CPU: 0 PID: 17813 at mm/slab_common.c:1012 kmalloc_slab+0x5d/0x70
[  212.584909]  should_fail+0x914/0xae0
[  212.594229] Kernel panic - not syncing: panic_on_warn set ...
[  212.594229] 
[  212.596797]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  212.633158]  ? __raw_spin_lock_init+0x1c/0x100
[  212.637722]  ? trace_hardirqs_on_caller+0x421/0x5c0
[  212.642722]  ? find_held_lock+0x35/0x1d0
[  212.646766]  ? find_held_lock+0x35/0x1d0
[  212.650822]  ? check_same_owner+0x320/0x320
[  212.655124]  ? rcu_note_context_switch+0x710/0x710
[  212.660032]  ? kasan_check_read+0x11/0x20
[  212.664161]  should_failslab+0xec/0x120
[  212.668116]  kmem_cache_alloc+0x47/0x760
[  212.672156]  ? find_held_lock+0x35/0x1d0
[  212.676203]  get_empty_filp+0xfb/0x510
[  212.680066]  ? d_instantiate+0x79/0xa0
[  212.683931]  ? proc_nr_files+0x60/0x60
[  212.687795]  ? lock_downgrade+0x980/0x980
[  212.691922]  ? lock_release+0xa40/0xa40
[  212.695876]  ? kasan_check_read+0x11/0x20
[  212.700004]  ? do_raw_spin_unlock+0x9e/0x310
[  212.704390]  ? do_raw_spin_trylock+0x1a0/0x1a0
[  212.708950]  ? kasan_check_write+0x14/0x20
[  212.713165]  ? do_raw_spin_lock+0xc1/0x230
[  212.717381]  alloc_file+0x26/0x390
[  212.720899]  ? kasan_check_write+0x14/0x20
[  212.725114]  __shmem_file_setup+0x54f/0x6a0
[  212.729416]  ? __check_object_size+0x8b/0x530
[  212.733890]  ? shmem_fill_super+0xa10/0xa10
[  212.738192]  ? get_unused_fd_flags+0x121/0x190
[  212.742753]  ? __alloc_fd+0x750/0x750
[  212.746533]  ? kasan_check_write+0x14/0x20
[  212.750748]  ? _copy_from_user+0x99/0x110
[  212.754877]  SyS_memfd_create+0x3ba/0x4c0
[  212.759004]  ? memfd_fcntl+0x12e0/0x12e0
[  212.763048]  ? do_syscall_64+0xb7/0x940
[  212.767004]  ? memfd_fcntl+0x12e0/0x12e0
[  212.771043]  do_syscall_64+0x281/0x940
[  212.774909]  ? vmalloc_sync_all+0x30/0x30
[  212.779037]  ? _raw_spin_unlock_irq+0x27/0x70
[  212.783510]  ? finish_task_switch+0x1c1/0x810
[  212.787983]  ? syscall_return_slowpath+0x550/0x550
[  212.792890]  ? syscall_return_slowpath+0x2ac/0x550
[  212.797797]  ? prepare_exit_to_usermode+0x350/0x350
[  212.802789]  ? entry_SYSCALL_64_after_hwframe+0x52/0xb7
[  212.808133]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  212.812955]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  212.818125] RIP: 0033:0x4552d9
[  212.821293] RSP: 002b:00007f346514cbb8 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  212.828982] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004552d9
[  212.836227] RDX: 0000000020000218 RSI: 0000000000000000 RDI: 00000000004ba0e5
[  212.843475] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000001
[  212.850725] R10: 0000000002000000 R11: 0000000000000246 R12: 0000000000000014
[  212.857972] R13: 0000000000000662 R14: 00000000006fc9d0 R15: 0000000000000003
[  212.865231] CPU: 0 PID: 17813 Comm: syz-executor0 Not tainted 4.16.0+ #11
[  212.872149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  212.881505] Call Trace:
[  212.884088]  dump_stack+0x1a7/0x27d
[  212.887715]  ? arch_local_irq_restore+0x53/0x53
[  212.892384]  ? vsnprintf+0x1ed/0x1900
[  212.896180]  panic+0x1f8/0x42c
[  212.899363]  ? refcount_error_report+0x214/0x214
[  212.904109]  ? show_regs_print_info+0x18/0x18
[  212.908598]  ? __warn+0x1c1/0x200
[  212.912044]  ? kmalloc_slab+0x5d/0x70
[  212.915838]  __warn+0x1dc/0x200
[  212.917356] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  212.919106]  ? kmalloc_slab+0x5d/0x70
[  212.919121]  report_bug+0x1f4/0x2b0
[  212.919134]  fixup_bug.part.10+0x37/0x80
[  212.919141]  do_error_trap+0x2d7/0x3e0
[  212.919151]  ? math_error+0x400/0x400
[  212.925475] BFS-fs: bfs_fill_super(): Superblock is corrupted
[  212.929234]  ? remove_wait_queue+0x350/0x350
[  212.929247]  ? __sched_text_start+0x8/0x8
[  212.929260]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  212.929271]  do_invalid_op+0x1b/0x20
[  212.967437]  invalid_op+0x1b/0x40
[  212.970890] RIP: 0010:kmalloc_slab+0x5d/0x70
[  212.975282] RSP: 0018:ffff88018d637908 EFLAGS: 00010246
[  212.980637] RAX: 0000000000000000 RBX: ffff8801be761004 RCX: ffffffff820964ba
[  212.987895] RDX: 1ffff1003a59d624 RSI: 0000000000000000 RDI: 0000000000800000
[  212.995154] RBP: ffff88018d637908 R08: ffffed003b604f99 R09: ffffed003b604f99
[  213.002419] R10: 0000000000000001 R11: ffffed003b604f98 R12: 00000000007fffff
[  213.009683] R13: ffff8801be761000 R14: 00000000014080c0 R15: ffff88018cf8c400
[  213.016956]  ? bfs_fill_super+0x38a/0xea0
[  213.021104]  __kmalloc+0x25/0x760
[  213.021257] FAULT_INJECTION: forcing a failure.
[  213.021257] name failslab, interval 1, probability 0, space 0, times 0
[  213.024544]  ? __might_sleep+0x95/0x190
[  213.024558]  ? bfs_fill_super+0x3d3/0xea0
[  213.024566]  ? bfs_fill_super+0xde4/0xea0
[  213.024578]  bfs_fill_super+0x3d3/0xea0
[  213.024590]  ? snprintf+0xc0/0xf0
[  213.024606]  ? set_blocksize+0x1f1/0x260
[  213.024621]  mount_bdev+0x2b7/0x370
[  213.062960]  ? bfs_iget+0xb70/0xb70
[  213.066568]  bfs_mount+0x34/0x40
[  213.069918]  mount_fs+0x66/0x2d0
[  213.073266]  vfs_kern_mount.part.26+0xc6/0x4a0
[  213.077828]  ? may_umount+0xa0/0xa0
[  213.081437]  ? _raw_read_unlock+0x22/0x30
[  213.085564]  ? __get_fs_type+0x8a/0xc0
[  213.089442]  do_mount+0xea4/0x2bb0
[  213.092960]  ? __might_fault+0x110/0x1d0
[  213.097002]  ? copy_mount_string+0x40/0x40
[  213.101220]  ? check_same_owner+0x320/0x320
[  213.105524]  ? __check_object_size+0x8b/0x530
[  213.110005]  ? __might_sleep+0x95/0x190
[  213.113967]  ? kasan_check_write+0x14/0x20
[  213.118185]  ? _copy_from_user+0x99/0x110
[  213.122311]  ? memdup_user+0x5e/0x90
[  213.126006]  ? copy_mount_options+0x1f7/0x2e0
[  213.130483]  SyS_mount+0xab/0x120
[  213.133917]  ? copy_mnt_ns+0xb40/0xb40
[  213.137786]  do_syscall_64+0x281/0x940
[  213.141653]  ? vmalloc_sync_all+0x30/0x30
[  213.145782]  ? _raw_spin_unlock_irq+0x27/0x70
[  213.150255]  ? finish_task_switch+0x1c1/0x810
[  213.154734]  ? syscall_return_slowpath+0x550/0x550
[  213.159640]  ? syscall_return_slowpath+0x2ac/0x550
[  213.164549]  ? prepare_exit_to_usermode+0x350/0x350
[  213.169542]  ? entry_SYSCALL_64_after_hwframe+0x52/0xb7
[  213.174888]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  213.179716]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  213.184884] RIP: 0033:0x457d0a
[  213.188055] RSP: 002b:00007fa164808bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  213.195746] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000457d0a
[  213.202993] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa164808c00
[  213.210244] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000020000000
[  213.217578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013
[  213.224824] R13: 0000000000000662 R14: 00000000006fc9d0 R15: 0000000000000000
[  213.232084] CPU: 1 PID: 17834 Comm: syz-executor3 Not tainted 4.16.0+ #11
[  213.238994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  213.248320] Call Trace:
[  213.250884]  dump_stack+0x1a7/0x27d
[  213.254490]  ? arch_local_irq_restore+0x53/0x53
[  213.259134]  ? lock_downgrade+0x980/0x980
[  213.263264]  should_fail+0x914/0xae0
[  213.266954]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  213.272034]  ? up_write+0x72/0x210
[  213.275548]  ? up_read+0x110/0x110
[  213.279062]  ? find_held_lock+0x35/0x1d0
[  213.283108]  ? check_same_owner+0x320/0x320
[  213.287408]  ? rcu_note_context_switch+0x710/0x710
[  213.293199]  should_failslab+0xec/0x120
[  213.297150]  kmem_cache_alloc+0x47/0x760
[  213.301188]  ? __lock_is_held+0xb6/0x140
[  213.305229]  getname_flags+0xcb/0x580
[  213.309003]  getname+0x19/0x20
[  213.312173]  do_sys_open+0x2e7/0x6d0
[  213.315865]  ? filp_open+0x70/0x70
[  213.319379]  ? SyS_pread64+0x190/0x190
[  213.323244]  ? do_sys_ftruncate.constprop.14+0x112/0x5d0
[  213.328673]  SyS_open+0x2d/0x40
[  213.331931]  ? do_sys_open+0x6d0/0x6d0
[  213.335792]  do_syscall_64+0x281/0x940
[  213.339653]  ? vmalloc_sync_all+0x30/0x30
[  213.343777]  ? _raw_spin_unlock_irq+0x27/0x70
[  213.348248]  ? finish_task_switch+0x1c1/0x810
[  213.352719]  ? syscall_return_slowpath+0x550/0x550
[  213.357622]  ? syscall_return_slowpath+0x2ac/0x550
[  213.362533]  ? prepare_exit_to_usermode+0x350/0x350
[  213.367525]  ? entry_SYSCALL_64_after_hwframe+0x52/0xb7
[  213.372865]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  213.377685]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  213.382848] RIP: 0033:0x40f531
[  213.386012] RSP: 002b:00007f346514cbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  213.393695] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 000000000040f531
[  213.401634] RDX: 00007f346514cc0a RSI: 0000000000000002 RDI: 00007f346514cc00
[  213.408875] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a
[  213.416119] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000015
[  213.423363] R13: 0000000000000662 R14: 00000000006fc9d0 R15: 0000000000000004
[  213.431058] Dumping ftrace buffer:
[  213.434726]    (ftrace buffer empty)
[  213.438410] Kernel Offset: disabled
[  213.442016] Rebooting in 86400 seconds..
