program:
r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1)
ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x1, &(0x7f0000000000)='v'}) (fail_nth: 8)
[ 84.984379][ T4654] Bluetooth: hci0: command tx timeout
[ 85.074773][ T5324] 0x000000000076-0x000000020000 : ""
[ 85.096381][ T5324] FAULT_INJECTION: forcing a failure.
[ 85.096381][ T5324] name failslab, interval 1, probability 0, space 0, times 1
[ 85.146531][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 85.146549][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 85.146556][ T5324] Call Trace:
[ 85.146561][ T5324]
[ 85.146567][ T5324] dump_stack_lvl+0xe8/0x150
[ 85.146624][ T5324] should_fail_ex+0x40c/0x560
[ 85.146677][ T5324] should_failslab+0xa8/0x100
[ 85.146692][ T5324] __kmalloc_cache_noprof+0xa8/0x660
[ 85.146706][ T5324] ? __raw_spin_lock_init+0x45/0x100
[ 85.146717][ T5324] ? device_add+0xb6/0xb80
[ 85.146731][ T5324] ? device_add+0xb6/0xb80
[ 85.146746][ T5324] device_add+0xb6/0xb80
[ 85.146762][ T5324] add_mtd_device+0xe0d/0x1760
[ 85.146785][ T5324] ? __pfx_add_mtd_device+0x10/0x10
[ 85.146799][ T5324] ? mtd_add_partition+0x301/0x510
[ 85.146814][ T5324] ? __mutex_unlock_slowpath+0x731/0x900
[ 85.146865][ T5324] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 85.146888][ T5324] mtd_add_partition+0x309/0x510
[ 85.146903][ T5324] ? __pfx_mtd_add_partition+0x10/0x10
[ 85.146916][ T5324] mtdchar_blkpg_ioctl+0x28a/0x2c0
[ 85.146928][ T5324] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10
[ 85.146956][ T5324] mtdchar_ioctl+0x14f7/0x1bc0
[ 85.146974][ T5324] ? __pfx_mtdchar_ioctl+0x10/0x10
[ 85.147014][ T5324] ? __lock_acquire+0x683/0x2cf0
[ 85.147026][ T5324] ? kasan_quarantine_put+0xbb/0x1f0
[ 85.147037][ T5324] ? tomoyo_path_number_perm+0x219/0x5f0
[ 85.147053][ T5324] ? __mutex_trylock_common+0x15f/0x270
[ 85.147064][ T5324] ? __pfx___mutex_trylock_common+0x10/0x10
[ 85.147076][ T5324] ? rcu_is_watching+0x15/0xb0
[ 85.147092][ T5324] ? trace_contention_end+0x3d/0x140
[ 85.147103][ T5324] ? __mutex_lock+0x30d/0x1550
[ 85.147117][ T5324] ? hook_file_ioctl+0x1f0/0x5f0
[ 85.147134][ T5324] ? mtdchar_unlocked_ioctl+0xa1/0xd0
[ 85.147148][ T5324] ? __pfx___mutex_lock+0x10/0x10
[ 85.147168][ T5324] ? __fget_files+0x2a/0x420
[ 85.147179][ T5324] ? __fget_files+0x3a2/0x420
[ 85.147189][ T5324] ? __fget_files+0x2a/0x420
[ 85.147203][ T5324] mtdchar_unlocked_ioctl+0xae/0xd0
[ 85.147216][ T5324] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10
[ 85.147229][ T5324] __se_sys_ioctl+0xfc/0x170
[ 85.147244][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.147256][ T5324] do_syscall_64+0x174/0x580
[ 85.147270][ T5324] ? trace_irq_disable+0x3b/0x140
[ 85.147283][ T5324] ? clear_bhb_loop+0x40/0x90
[ 85.147294][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.147301][ T5324] RIP: 0033:0x7f3e3799de59
[ 85.147309][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 85.147315][ T5324] RSP: 002b:00007f3e38897fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 85.147324][ T5324] RAX: ffffffffffffffda RBX: 00007f3e37c25fa0 RCX: 00007f3e3799de59
[ 85.147329][ T5324] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000003
[ 85.147334][ T5324] RBP: 00007f3e38898050 R08: 0000000000000000 R09: 0000000000000000
[ 85.147338][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 85.147342][ T5324] R13: 00007f3e37c26038 R14: 00007f3e37c25fa0 R15: 00007fff695695b8
[ 85.147353][ T5324]
[ 85.150923][ T5324] ------------[ cut here ]------------
[ 85.298091][ T5324] !list_empty(&mtd->part.node)
[ 85.298105][ T5324] WARNING: drivers/mtd/mtdpart.c:38 at release_mtd_partition+0x78/0x80, CPU#0: syz.0.0/5324
[ 85.304883][ T5324] Modules linked in:
[ 85.306626][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 85.310345][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 85.315323][ T5324] RIP: 0010:release_mtd_partition+0x78/0x80
[ 85.317818][ T5324] Code: e8 03 42 80 3c 38 00 74 05 e8 24 b2 aa fb 48 8b 7b 38 e8 cb b3 9e fb 48 89 df 5b 41 5e 41 5f e9 be b3 9e fb e8 d9 8b 3b fb 90 <0f> 0b 90 eb c8 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 85.326030][ T5324] RSP: 0018:ffffc9000ec3f4b8 EFLAGS: 00010293
[ 85.328985][ T5324] RAX: ffffffff868af6b7 RBX: ffff8880345fd000 RCX: ffff888036880000
[ 85.332514][ T5324] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880345fd000
[ 85.335931][ T5324] RBP: 0000000000000001 R08: ffff88803255fdaf R09: 1ffff110064abfb5
[ 85.339890][ T5324] R10: dffffc0000000000 R11: ffffed10064abfb6 R12: 1ffffffff18eabc8
[ 85.343661][ T5324] R13: dffffc0000000000 R14: ffff8880345fd6a8 R15: dffffc0000000000
[ 85.347007][ T5324] FS: 00007f3e388986c0(0000) GS:ffff88808c54d000(0000) knlGS:0000000000000000
[ 85.351250][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 85.354233][ T5324] CR2: 00007fd8e5ae53d0 CR3: 000000001fcf1000 CR4: 0000000000352ef0
[ 85.357633][ T5324] Call Trace:
[ 85.359496][ T5324]
[ 85.360987][ T5324] mtd_release+0x8f/0xd0
[ 85.363737][ T5324] ? __pfx_mtd_release+0x10/0x10
[ 85.366026][ T5324] device_release+0xc4/0x1f0
[ 85.367949][ T5324] kobject_put+0x222/0x550
[ 85.369972][ T5324] add_mtd_device+0xe74/0x1760
[ 85.372198][ T5324] ? __pfx_add_mtd_device+0x10/0x10
[ 85.374741][ T5324] ? mtd_add_partition+0x301/0x510
[ 85.377618][ T5324] ? __mutex_unlock_slowpath+0x731/0x900
[ 85.380124][ T5324] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 85.382725][ T5324] mtd_add_partition+0x309/0x510
[ 85.384800][ T5324] ? __pfx_mtd_add_partition+0x10/0x10
[ 85.387278][ T5324] mtdchar_blkpg_ioctl+0x28a/0x2c0
[ 85.389993][ T5324] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10
[ 85.392970][ T5324] mtdchar_ioctl+0x14f7/0x1bc0
[ 85.395112][ T5324] ? __pfx_mtdchar_ioctl+0x10/0x10
[ 85.397152][ T5324] ? __lock_acquire+0x683/0x2cf0
[ 85.399217][ T5324] ? kasan_quarantine_put+0xbb/0x1f0
[ 85.401734][ T5324] ? tomoyo_path_number_perm+0x219/0x5f0
[ 85.404370][ T5324] ? __mutex_trylock_common+0x15f/0x270
[ 85.407132][ T5324] ? __pfx___mutex_trylock_common+0x10/0x10
[ 85.409727][ T5324] ? rcu_is_watching+0x15/0xb0
[ 85.411793][ T5324] ? trace_contention_end+0x3d/0x140
[ 85.414267][ T5324] ? __mutex_lock+0x30d/0x1550
[ 85.416739][ T5324] ? hook_file_ioctl+0x1f0/0x5f0
[ 85.419292][ T5324] ? mtdchar_unlocked_ioctl+0xa1/0xd0
[ 85.421887][ T5324] ? __pfx___mutex_lock+0x10/0x10
[ 85.424016][ T5324] ? __fget_files+0x2a/0x420
[ 85.426128][ T5324] ? __fget_files+0x3a2/0x420
[ 85.428113][ T5324] ? __fget_files+0x2a/0x420
[ 85.430272][ T5324] mtdchar_unlocked_ioctl+0xae/0xd0
[ 85.432964][ T5324] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10
[ 85.435626][ T5324] __se_sys_ioctl+0xfc/0x170
[ 85.437606][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.440227][ T5324] do_syscall_64+0x174/0x580
[ 85.442554][ T5324] ? trace_irq_disable+0x3b/0x140
[ 85.445709][ T5324] ? clear_bhb_loop+0x40/0x90
[ 85.448650][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.451993][ T5324] RIP: 0033:0x7f3e3799de59
[ 85.453912][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 85.463859][ T5324] RSP: 002b:00007f3e38897fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 85.468032][ T5324] RAX: ffffffffffffffda RBX: 00007f3e37c25fa0 RCX: 00007f3e3799de59
[ 85.472076][ T5324] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000003
[ 85.476461][ T5324] RBP: 00007f3e38898050 R08: 0000000000000000 R09: 0000000000000000
[ 85.480326][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 85.484224][ T5324] R13: 00007f3e37c26038 R14: 00007f3e37c25fa0 R15: 00007fff695695b8
[ 85.487765][ T5324]
[ 85.489365][ T5324] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 85.492851][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 85.496559][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 85.501240][ T5324] Call Trace:
[ 85.502883][ T5324]
[ 85.504315][ T5324] vpanic+0x56c/0xa60
[ 85.506167][ T5324] ? __pfx__printk+0x10/0x10
[ 85.508170][ T5324] ? __pfx_vpanic+0x10/0x10
[ 85.510099][ T5324] ? is_bpf_text_address+0x292/0x2b0
[ 85.512226][ T5324] ? is_bpf_text_address+0x26/0x2b0
[ 85.514653][ T5324] panic+0xc5/0xd0
[ 85.516803][ T5324] ? __pfx_panic+0x10/0x10
[ 85.518802][ T5324] __warn+0x315/0x4c0
[ 85.520806][ T5324] ? release_mtd_partition+0x78/0x80
[ 85.523117][ T5324] ? release_mtd_partition+0x78/0x80
[ 85.525249][ T5324] __report_bug+0x331/0x530
[ 85.527374][ T5324] ? release_mtd_partition+0x78/0x80
[ 85.529999][ T5324] ? __pfx___report_bug+0x10/0x10
[ 85.532414][ T5324] ? irqentry_exit+0x218/0x8f0
[ 85.534398][ T5324] ? lockdep_hardirqs_on+0x7a/0x110
[ 85.536446][ T5324] ? irqentry_exit+0x218/0x8f0
[ 85.538405][ T5324] ? trace_irq_disable+0x3b/0x140
[ 85.540539][ T5324] ? release_mtd_partition+0x78/0x80
[ 85.542997][ T5324] report_bug+0x16a/0x220
[ 85.545187][ T5324] ? release_mtd_partition+0x78/0x80
[ 85.547716][ T5324] ? release_mtd_partition+0x7a/0x80
[ 85.549921][ T5324] handle_bug+0x9c/0x200
[ 85.551722][ T5324] exc_invalid_op+0x1a/0x50
[ 85.553572][ T5324] asm_exc_invalid_op+0x1a/0x20
[ 85.555583][ T5324] RIP: 0010:release_mtd_partition+0x78/0x80
[ 85.557987][ T5324] Code: e8 03 42 80 3c 38 00 74 05 e8 24 b2 aa fb 48 8b 7b 38 e8 cb b3 9e fb 48 89 df 5b 41 5e 41 5f e9 be b3 9e fb e8 d9 8b 3b fb 90 <0f> 0b 90 eb c8 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 85.566526][ T5324] RSP: 0018:ffffc9000ec3f4b8 EFLAGS: 00010293
[ 85.569089][ T5324] RAX: ffffffff868af6b7 RBX: ffff8880345fd000 RCX: ffff888036880000
[ 85.572437][ T5324] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880345fd000
[ 85.575754][ T5324] RBP: 0000000000000001 R08: ffff88803255fdaf R09: 1ffff110064abfb5
[ 85.579619][ T5324] R10: dffffc0000000000 R11: ffffed10064abfb6 R12: 1ffffffff18eabc8
[ 85.582983][ T5324] R13: dffffc0000000000 R14: ffff8880345fd6a8 R15: dffffc0000000000
[ 85.585817][ T5324] ? release_mtd_partition+0x77/0x80
[ 85.587664][ T5324] ? release_mtd_partition+0x77/0x80
[ 85.589696][ T5324] mtd_release+0x8f/0xd0
[ 85.591590][ T5324] ? __pfx_mtd_release+0x10/0x10
[ 85.594150][ T5324] device_release+0xc4/0x1f0
[ 85.596504][ T5324] kobject_put+0x222/0x550
[ 85.598525][ T5324] add_mtd_device+0xe74/0x1760
[ 85.600492][ T5324] ? __pfx_add_mtd_device+0x10/0x10
[ 85.602653][ T5324] ? mtd_add_partition+0x301/0x510
[ 85.604664][ T5324] ? __mutex_unlock_slowpath+0x731/0x900
[ 85.607115][ T5324] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 85.609936][ T5324] mtd_add_partition+0x309/0x510
[ 85.612180][ T5324] ? __pfx_mtd_add_partition+0x10/0x10
[ 85.614408][ T5324] mtdchar_blkpg_ioctl+0x28a/0x2c0
[ 85.616559][ T5324] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10
[ 85.618995][ T5324] mtdchar_ioctl+0x14f7/0x1bc0
[ 85.621522][ T5324] ? __pfx_mtdchar_ioctl+0x10/0x10
[ 85.624114][ T5324] ? __lock_acquire+0x683/0x2cf0
[ 85.626410][ T5324] ? kasan_quarantine_put+0xbb/0x1f0
[ 85.628558][ T5324] ? tomoyo_path_number_perm+0x219/0x5f0
[ 85.630750][ T5324] ? __mutex_trylock_common+0x15f/0x270
[ 85.633137][ T5324] ? __pfx___mutex_trylock_common+0x10/0x10
[ 85.635422][ T5324] ? rcu_is_watching+0x15/0xb0
[ 85.637050][ T5324] ? trace_contention_end+0x3d/0x140
[ 85.639193][ T5324] ? __mutex_lock+0x30d/0x1550
[ 85.641394][ T5324] ? hook_file_ioctl+0x1f0/0x5f0
[ 85.643793][ T5324] ? mtdchar_unlocked_ioctl+0xa1/0xd0
[ 85.645976][ T5324] ? __pfx___mutex_lock+0x10/0x10
[ 85.648108][ T5324] ? __fget_files+0x2a/0x420
[ 85.650054][ T5324] ? __fget_files+0x3a2/0x420
[ 85.652112][ T5324] ? __fget_files+0x2a/0x420
[ 85.654621][ T5324] mtdchar_unlocked_ioctl+0xae/0xd0
[ 85.657512][ T5324] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10
[ 85.660211][ T5324] __se_sys_ioctl+0xfc/0x170
[ 85.662402][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.665117][ T5324] do_syscall_64+0x174/0x580
[ 85.667683][ T5324] ? trace_irq_disable+0x3b/0x140
[ 85.670445][ T5324] ? clear_bhb_loop+0x40/0x90
[ 85.672670][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.675541][ T5324] RIP: 0033:0x7f3e3799de59
[ 85.677502][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 85.685781][ T5324] RSP: 002b:00007f3e38897fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 85.689473][ T5324] RAX: ffffffffffffffda RBX: 00007f3e37c25fa0 RCX: 00007f3e3799de59
[ 85.692766][ T5324] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000003
[ 85.696031][ T5324] RBP: 00007f3e38898050 R08: 0000000000000000 R09: 0000000000000000
[ 85.699666][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 85.703838][ T5324] R13: 00007f3e37c26038 R14: 00007f3e37c25fa0 R15: 00007fff695695b8
[ 85.707533][ T5324]
[ 85.709195][ T5324] Kernel Offset: disabled
[ 85.710971][ T5324] Rebooting in 86400 seconds..