program:
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00\x00\x00'], &(0x7f0000000080)='GPL\x00', 0x3, 0xec, &(0x7f00000000c0)=""/236, 0x41000, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x20, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x1, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000280)=[{0x1, 0x1, 0xf, 0x7}, {0x5, 0x3, 0x3, 0x3}, {0x2, 0x1, 0xf, 0xc}], 0x10, 0x1, @void, @value}, 0x94)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x400000, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x23, 0xa, 0x0, 0x0, 0x0, 0x8000, 0x60000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x4087, 0x8}, 0x10013, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x8, 0xffffffffffffffff, 0xb)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000ff0f0000b87e"], 0x50)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001000160429bd70007cdbdf2500000000", @ANYRES32=0x0], 0x34}}, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000380)=0x7fff)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x8, 0x59f}) (fail_nth: 33)
[ 68.757873][ T5308] Bluetooth: hci0: command tx timeout
[ 68.855562][ T5325] FAULT_INJECTION: forcing a failure.
[ 68.855562][ T5325] name failslab, interval 1, probability 0, space 0, times 1
[ 68.878275][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0
[ 68.878297][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 68.878303][ T5325] Call Trace:
[ 68.878309][ T5325]
[ 68.878315][ T5325] dump_stack_lvl+0x241/0x360
[ 68.878438][ T5325] ? __pfx_dump_stack_lvl+0x10/0x10
[ 68.878451][ T5325] ? __pfx__printk+0x10/0x10
[ 68.878463][ T5325] ? fs_reclaim_acquire+0x93/0x130
[ 68.878476][ T5325] ? __pfx___might_resched+0x10/0x10
[ 68.878490][ T5325] ? __mutex_lock+0x397/0x1010
[ 68.878538][ T5325] should_fail_ex+0x40a/0x550
[ 68.878586][ T5325] ? __pfx_blk_add_trace_rq_merge+0x10/0x10
[ 68.878603][ T5325] should_failslab+0xac/0x100
[ 68.878619][ T5325] ? __pfx_blk_add_trace_rq_merge+0x10/0x10
[ 68.878636][ T5325] __kmalloc_noprof+0xdd/0x4c0
[ 68.878651][ T5325] ? tracepoint_add_func+0x34c/0xaa0
[ 68.878667][ T5325] ? __pfx_blk_add_trace_rq_merge+0x10/0x10
[ 68.878684][ T5325] tracepoint_add_func+0x34c/0xaa0
[ 68.878703][ T5325] ? __pfx_blk_add_trace_rq_merge+0x10/0x10
[ 68.878722][ T5325] tracepoint_probe_register+0x105/0x160
[ 68.878740][ T5325] ? __pfx_tracepoint_probe_register+0x10/0x10
[ 68.878755][ T5325] ? __pfx_blk_add_trace_rq_merge+0x10/0x10
[ 68.878776][ T5325] get_probe_ref+0xa9/0x400
[ 68.878786][ T5325] do_blk_trace_setup+0x7f1/0x9c0
[ 68.878807][ T5325] blk_trace_setup+0x116/0x1f0
[ 68.878821][ T5325] ? __lock_acquire+0x1397/0x2100
[ 68.878847][ T5325] ? __pfx_blk_trace_setup+0x10/0x10
[ 68.878870][ T5325] sg_ioctl+0xa46/0x2e20
[ 68.878901][ T5325] ? __pfx_sg_ioctl+0x10/0x10
[ 68.878919][ T5325] ? __fget_files+0x2a/0x410
[ 68.878937][ T5325] ? __fget_files+0x2a/0x410
[ 68.878954][ T5325] ? __pfx_sg_ioctl+0x10/0x10
[ 68.878968][ T5325] __se_sys_ioctl+0xf5/0x170
[ 68.878981][ T5325] do_syscall_64+0xf3/0x230
[ 68.878998][ T5325] ? clear_bhb_loop+0x35/0x90
[ 68.879014][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.879028][ T5325] RIP: 0033:0x7fd1e6b8d169
[ 68.879040][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 68.879049][ T5325] RSP: 002b:00007fd1e7a20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 68.879062][ T5325] RAX: ffffffffffffffda RBX: 00007fd1e6da6080 RCX: 00007fd1e6b8d169
[ 68.879069][ T5325] RDX: 0000400000000540 RSI: 00000000c0481273 RDI: 0000000000000004
[ 68.879075][ T5325] RBP: 00007fd1e7a20090 R08: 0000000000000000 R09: 0000000000000000
[ 68.879081][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 68.879087][ T5325] R13: 0000000000000000 R14: 00007fd1e6da6080 R15: 00007ffe92b17968
[ 68.879103][ T5325]
[ 68.879228][ T5325] ------------[ cut here ]------------
[ 68.993918][ T5325] WARNING: CPU: 0 PID: 5325 at kernel/trace/blktrace.c:1087 get_probe_ref+0x339/0x400
[ 68.998251][ T5325] Modules linked in:
[ 68.999937][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0
[ 69.004540][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 69.009499][ T5325] RIP: 0010:get_probe_ref+0x339/0x400
[ 69.011835][ T5325] Code: b9 8e 5b e9 d9 26 40 0a e8 a4 be f7 ff 90 0f 0b 90 e9 42 fd ff ff e8 96 be f7 ff 90 0f 0b 90 e9 61 fd ff ff e8 88 be f7 ff 90 <0f> 0b 90 e9 80 fd ff ff e8 7a be f7 ff 90 0f 0b 90 e9 9f fd ff ff
[ 69.020141][ T5325] RSP: 0018:ffffc9000d3afb58 EFLAGS: 00010293
[ 69.022749][ T5325] RAX: ffffffff81ca2088 RBX: 00000000fffffff4 RCX: ffff888000a54880
[ 69.026177][ T5325] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000
[ 69.029573][ T5325] RBP: ffff88805395e080 R08: ffffffff81ca1e04 R09: 1ffff92001a75f40
[ 69.033041][ T5325] R10: dffffc0000000000 R11: fffff52001a75f41 R12: 1ffff1100a72bc16
[ 69.036484][ T5325] R13: ffffc9000d3afc80 R14: ffff88805395e0b0 R15: dffffc0000000000
[ 69.040224][ T5325] FS: 00007fd1e7a206c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
[ 69.044077][ T5325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 69.047003][ T5325] CR2: 00007fd1e78dd9b8 CR3: 000000004132c000 CR4: 0000000000352ef0
[ 69.051711][ T5325] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 69.056332][ T5325] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 69.061506][ T5325] Call Trace:
[ 69.063005][ T5325]
[ 69.064391][ T5325] ? __warn+0x165/0x4d0
[ 69.067110][ T5325] ? get_probe_ref+0x339/0x400
[ 69.069809][ T5325] ? report_bug+0x2b3/0x500
[ 69.071924][ T5325] ? get_probe_ref+0x339/0x400
[ 69.074092][ T5325] ? handle_bug+0x60/0x90
[ 69.075974][ T5325] ? exc_invalid_op+0x1a/0x50
[ 69.078152][ T5325] ? asm_exc_invalid_op+0x1a/0x20
[ 69.080554][ T5325] ? get_probe_ref+0xb4/0x400
[ 69.082646][ T5325] ? get_probe_ref+0x338/0x400
[ 69.084792][ T5325] ? get_probe_ref+0x339/0x400
[ 69.086863][ T5325] ? get_probe_ref+0x338/0x400
[ 69.089233][ T5325] do_blk_trace_setup+0x7f1/0x9c0
[ 69.092148][ T5325] blk_trace_setup+0x116/0x1f0
[ 69.095708][ T5325] ? __lock_acquire+0x1397/0x2100
[ 69.099187][ T5325] ? __pfx_blk_trace_setup+0x10/0x10
[ 69.103609][ T5325] sg_ioctl+0xa46/0x2e20
[ 69.106075][ T5325] ? __pfx_sg_ioctl+0x10/0x10
[ 69.108742][ T5325] ? __fget_files+0x2a/0x410
[ 69.110807][ T5325] ? __fget_files+0x2a/0x410
[ 69.112900][ T5325] ? __pfx_sg_ioctl+0x10/0x10
[ 69.114949][ T5325] __se_sys_ioctl+0xf5/0x170
[ 69.116981][ T5325] do_syscall_64+0xf3/0x230
[ 69.119067][ T5325] ? clear_bhb_loop+0x35/0x90
[ 69.121163][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.123645][ T5325] RIP: 0033:0x7fd1e6b8d169
[ 69.125707][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 69.134067][ T5325] RSP: 002b:00007fd1e7a20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 69.137841][ T5325] RAX: ffffffffffffffda RBX: 00007fd1e6da6080 RCX: 00007fd1e6b8d169
[ 69.141631][ T5325] RDX: 0000400000000540 RSI: 00000000c0481273 RDI: 0000000000000004
[ 69.145158][ T5325] RBP: 00007fd1e7a20090 R08: 0000000000000000 R09: 0000000000000000
[ 69.149187][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 69.152602][ T5325] R13: 0000000000000000 R14: 00007fd1e6da6080 R15: 00007ffe92b17968
[ 69.155994][ T5325]
[ 69.157590][ T5325] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 69.160541][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0
[ 69.164581][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 69.169097][ T5325] Call Trace:
[ 69.170437][ T5325]
[ 69.171632][ T5325] dump_stack_lvl+0x241/0x360
[ 69.173652][ T5325] ? __pfx_dump_stack_lvl+0x10/0x10
[ 69.175862][ T5325] ? __pfx__printk+0x10/0x10
[ 69.177843][ T5325] ? vscnprintf+0x5d/0x90
[ 69.179715][ T5325] panic+0x349/0x880
[ 69.181578][ T5325] ? __warn+0x174/0x4d0
[ 69.183490][ T5325] ? __pfx_panic+0x10/0x10
[ 69.185546][ T5325] __warn+0x344/0x4d0
[ 69.187368][ T5325] ? get_probe_ref+0x339/0x400
[ 69.189509][ T5325] report_bug+0x2b3/0x500
[ 69.191468][ T5325] ? get_probe_ref+0x339/0x400
[ 69.193563][ T5325] handle_bug+0x60/0x90
[ 69.195411][ T5325] exc_invalid_op+0x1a/0x50
[ 69.197409][ T5325] asm_exc_invalid_op+0x1a/0x20
[ 69.199700][ T5325] RIP: 0010:get_probe_ref+0x339/0x400
[ 69.202043][ T5325] Code: b9 8e 5b e9 d9 26 40 0a e8 a4 be f7 ff 90 0f 0b 90 e9 42 fd ff ff e8 96 be f7 ff 90 0f 0b 90 e9 61 fd ff ff e8 88 be f7 ff 90 <0f> 0b 90 e9 80 fd ff ff e8 7a be f7 ff 90 0f 0b 90 e9 9f fd ff ff
[ 69.210350][ T5325] RSP: 0018:ffffc9000d3afb58 EFLAGS: 00010293
[ 69.213068][ T5325] RAX: ffffffff81ca2088 RBX: 00000000fffffff4 RCX: ffff888000a54880
[ 69.216351][ T5325] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000
[ 69.219825][ T5325] RBP: ffff88805395e080 R08: ffffffff81ca1e04 R09: 1ffff92001a75f40
[ 69.223174][ T5325] R10: dffffc0000000000 R11: fffff52001a75f41 R12: 1ffff1100a72bc16
[ 69.226763][ T5325] R13: ffffc9000d3afc80 R14: ffff88805395e0b0 R15: dffffc0000000000
[ 69.230217][ T5325] ? get_probe_ref+0xb4/0x400
[ 69.232338][ T5325] ? get_probe_ref+0x338/0x400
[ 69.234525][ T5325] ? get_probe_ref+0x338/0x400
[ 69.236671][ T5325] do_blk_trace_setup+0x7f1/0x9c0
[ 69.238908][ T5325] blk_trace_setup+0x116/0x1f0
[ 69.241013][ T5325] ? __lock_acquire+0x1397/0x2100
[ 69.243392][ T5325] ? __pfx_blk_trace_setup+0x10/0x10
[ 69.245660][ T5325] sg_ioctl+0xa46/0x2e20
[ 69.247457][ T5325] ? __pfx_sg_ioctl+0x10/0x10
[ 69.249623][ T5325] ? __fget_files+0x2a/0x410
[ 69.251610][ T5325] ? __fget_files+0x2a/0x410
[ 69.253768][ T5325] ? __pfx_sg_ioctl+0x10/0x10
[ 69.255798][ T5325] __se_sys_ioctl+0xf5/0x170
[ 69.257870][ T5325] do_syscall_64+0xf3/0x230
[ 69.259755][ T5325] ? clear_bhb_loop+0x35/0x90
[ 69.261819][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.264406][ T5325] RIP: 0033:0x7fd1e6b8d169
[ 69.266375][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 69.275124][ T5325] RSP: 002b:00007fd1e7a20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 69.278762][ T5325] RAX: ffffffffffffffda RBX: 00007fd1e6da6080 RCX: 00007fd1e6b8d169
[ 69.282066][ T5325] RDX: 0000400000000540 RSI: 00000000c0481273 RDI: 0000000000000004
[ 69.285363][ T5325] RBP: 00007fd1e7a20090 R08: 0000000000000000 R09: 0000000000000000
[ 69.288479][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 69.291816][ T5325] R13: 0000000000000000 R14: 00007fd1e6da6080 R15: 00007ffe92b17968
[ 69.294980][ T5325]
[ 69.296588][ T5325] Kernel Offset: disabled
[ 69.298407][ T5325] Rebooting in 86400 seconds..