program:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000800000d020000000d000000050000"], 0x0, 0x66, 0x0, 0x1}, 0x28)
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x6, 0xa, 0x3, 0xffffffff}) (fail_nth: 39)
[ 91.070780][ T4665] Bluetooth: hci0: command tx timeout
[ 91.139285][ T5319] FAULT_INJECTION: forcing a failure.
[ 91.139285][ T5319] name failslab, interval 1, probability 0, space 0, times 1
[ 91.152793][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 91.152813][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 91.152820][ T5319] Call Trace:
[ 91.152825][ T5319]
[ 91.152831][ T5319] dump_stack_lvl+0xe8/0x150
[ 91.152941][ T5319] should_fail_ex+0x412/0x560
[ 91.152986][ T5319] should_failslab+0xa8/0x100
[ 91.153010][ T5319] __kmalloc_noprof+0xe8/0x760
[ 91.153025][ T5319] ? __pfx___mutex_lock+0x10/0x10
[ 91.153069][ T5319] ? tracepoint_add_func+0x366/0xa50
[ 91.153086][ T5319] ? __pfx_blk_add_trace_rq_merge+0x10/0x10
[ 91.153098][ T5319] tracepoint_add_func+0x366/0xa50
[ 91.153117][ T5319] ? relay_open+0x56d/0x920
[ 91.153132][ T5319] ? __pfx_blk_add_trace_rq_merge+0x10/0x10
[ 91.153142][ T5319] tracepoint_probe_register+0x5d/0x90
[ 91.153155][ T5319] ? __pfx_blk_add_trace_rq_merge+0x10/0x10
[ 91.153168][ T5319] get_probe_ref+0xa9/0x470
[ 91.153180][ T5319] blk_trace_setup+0x377/0x520
[ 91.153203][ T5319] ? __pfx_blk_trace_setup+0x10/0x10
[ 91.153228][ T5319] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 91.153248][ T5319] ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 91.153262][ T5319] sg_ioctl+0xa93/0x2220
[ 91.153281][ T5319] ? __pfx_sg_ioctl+0x10/0x10
[ 91.153294][ T5319] ? __fget_files+0x2a/0x420
[ 91.153310][ T5319] ? __fget_files+0x2a/0x420
[ 91.153323][ T5319] ? __fget_files+0x3a0/0x420
[ 91.153336][ T5319] ? __fget_files+0x2a/0x420
[ 91.153353][ T5319] ? bpf_lsm_file_ioctl+0x9/0x20
[ 91.153366][ T5319] ? __pfx_sg_ioctl+0x10/0x10
[ 91.153377][ T5319] __se_sys_ioctl+0xfc/0x170
[ 91.153391][ T5319] do_syscall_64+0x14d/0xf80
[ 91.153404][ T5319] ? trace_irq_disable+0x3b/0x150
[ 91.153419][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 91.153430][ T5319] ? clear_bhb_loop+0x40/0x90
[ 91.153443][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 91.153455][ T5319] RIP: 0033:0x7f330c19c799
[ 91.153499][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 91.153508][ T5319] RSP: 002b:00007f330d07bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 91.153521][ T5319] RAX: ffffffffffffffda RBX: 00007f330c415fa0 RCX: 00007f330c19c799
[ 91.153529][ T5319] RDX: 0000200000000100 RSI: 00000000c0481273 RDI: 0000000000000003
[ 91.153537][ T5319] RBP: 00007f330d07c050 R08: 0000000000000000 R09: 0000000000000000
[ 91.153543][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 91.153550][ T5319] R13: 00007f330c416038 R14: 00007f330c415fa0 R15: 00007ffe8dbd3348
[ 91.153571][ T5319]
[ 91.153796][ T5319] ------------[ cut here ]------------
[ 91.280063][ T5319] ret
[ 91.280079][ T5319] WARNING: kernel/trace/blktrace.c:1336 at get_probe_ref+0x393/0x470, CPU#0: syz.0.0/5319
[ 91.285962][ T5319] Modules linked in:
[ 91.288544][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 91.292892][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 91.298247][ T5319] RIP: 0010:get_probe_ref+0x393/0x470
[ 91.301303][ T5319] Code: 7c 8e 5b e9 8f b7 e3 09 e8 6a 8f f7 ff 90 0f 0b 90 e9 e8 fc ff ff e8 5c 8f f7 ff 90 0f 0b 90 e9 07 fd ff ff e8 4e 8f f7 ff 90 <0f> 0b 90 e9 26 fd ff ff e8 40 8f f7 ff 90 0f 0b 90 e9 45 fd ff ff
[ 91.310355][ T5319] RSP: 0018:ffffc9000ef57af0 EFLAGS: 00010293
[ 91.313290][ T5319] RAX: ffffffff81ce2152 RBX: 00000000fffffff4 RCX: ffff88801ab924c0
[ 91.316832][ T5319] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000
[ 91.320734][ T5319] RBP: ffffc9000ef57d30 R08: ffffc9000ef57a27 R09: 1ffff92001deaf44
[ 91.324547][ T5319] R10: dffffc0000000000 R11: fffff52001deaf45 R12: 1ffff92001deaf68
[ 91.328275][ T5319] R13: 0000000000400140 R14: dffffc0000000000 R15: ffff888032f85f50
[ 91.332096][ T5319] FS: 00007f330d07c6c0(0000) GS:ffff88808ca52000(0000) knlGS:0000000000000000
[ 91.336486][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 91.339473][ T5319] CR2: 00007f330cf4d9d0 CR3: 0000000042056000 CR4: 0000000000352ef0
[ 91.342675][ T5319] Call Trace:
[ 91.344486][ T5319]
[ 91.346363][ T5319] blk_trace_setup+0x377/0x520
[ 91.349275][ T5319] ? __pfx_blk_trace_setup+0x10/0x10
[ 91.351440][ T5319] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 91.353480][ T5319] ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 91.355731][ T5319] sg_ioctl+0xa93/0x2220
[ 91.358051][ T5319] ? __pfx_sg_ioctl+0x10/0x10
[ 91.360430][ T5319] ? __fget_files+0x2a/0x420
[ 91.362459][ T5319] ? __fget_files+0x2a/0x420
[ 91.364339][ T5319] ? __fget_files+0x3a0/0x420
[ 91.366387][ T5319] ? __fget_files+0x2a/0x420
[ 91.368683][ T5319] ? bpf_lsm_file_ioctl+0x9/0x20
[ 91.371312][ T5319] ? __pfx_sg_ioctl+0x10/0x10
[ 91.373970][ T5319] __se_sys_ioctl+0xfc/0x170
[ 91.376259][ T5319] do_syscall_64+0x14d/0xf80
[ 91.378270][ T5319] ? trace_irq_disable+0x3b/0x150
[ 91.380349][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 91.382759][ T5319] ? clear_bhb_loop+0x40/0x90
[ 91.384846][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 91.387561][ T5319] RIP: 0033:0x7f330c19c799
[ 91.390079][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 91.399600][ T5319] RSP: 002b:00007f330d07bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 91.403938][ T5319] RAX: ffffffffffffffda RBX: 00007f330c415fa0 RCX: 00007f330c19c799
[ 91.408327][ T5319] RDX: 0000200000000100 RSI: 00000000c0481273 RDI: 0000000000000003
[ 91.411896][ T5319] RBP: 00007f330d07c050 R08: 0000000000000000 R09: 0000000000000000
[ 91.415626][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 91.420342][ T5319] R13: 00007f330c416038 R14: 00007f330c415fa0 R15: 00007ffe8dbd3348
[ 91.424274][ T5319]
[ 91.425687][ T5319] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 91.429016][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 91.433301][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 91.438453][ T5319] Call Trace:
[ 91.439949][ T5319]
[ 91.441279][ T5319] vpanic+0x56c/0xa60
[ 91.443047][ T5319] ? __pfx__printk+0x10/0x10
[ 91.445045][ T5319] ? __pfx_vpanic+0x10/0x10
[ 91.446975][ T5319] ? is_bpf_text_address+0x292/0x2b0
[ 91.449241][ T5319] ? is_bpf_text_address+0x26/0x2b0
[ 91.451720][ T5319] panic+0xc5/0xd0
[ 91.453498][ T5319] ? __pfx_panic+0x10/0x10
[ 91.455518][ T5319] __warn+0x315/0x4f0
[ 91.457435][ T5319] ? get_probe_ref+0x393/0x470
[ 91.459604][ T5319] ? get_probe_ref+0x393/0x470
[ 91.461968][ T5319] __report_bug+0x29a/0x540
[ 91.464276][ T5319] ? get_probe_ref+0x393/0x470
[ 91.466824][ T5319] ? __pfx___report_bug+0x10/0x10
[ 91.469170][ T5319] ? tracepoint_probe_register+0x6b/0x90
[ 91.471571][ T5319] ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 91.474072][ T5319] ? get_probe_ref+0x393/0x470
[ 91.476235][ T5319] report_bug+0x16a/0x220
[ 91.478920][ T5319] ? get_probe_ref+0x393/0x470
[ 91.481428][ T5319] ? get_probe_ref+0x395/0x470
[ 91.483500][ T5319] handle_bug+0x9c/0x200
[ 91.485349][ T5319] exc_invalid_op+0x1a/0x50
[ 91.487370][ T5319] asm_exc_invalid_op+0x1a/0x20
[ 91.489740][ T5319] RIP: 0010:get_probe_ref+0x393/0x470
[ 91.492451][ T5319] Code: 7c 8e 5b e9 8f b7 e3 09 e8 6a 8f f7 ff 90 0f 0b 90 e9 e8 fc ff ff e8 5c 8f f7 ff 90 0f 0b 90 e9 07 fd ff ff e8 4e 8f f7 ff 90 <0f> 0b 90 e9 26 fd ff ff e8 40 8f f7 ff 90 0f 0b 90 e9 45 fd ff ff
[ 91.501097][ T5319] RSP: 0018:ffffc9000ef57af0 EFLAGS: 00010293
[ 91.503817][ T5319] RAX: ffffffff81ce2152 RBX: 00000000fffffff4 RCX: ffff88801ab924c0
[ 91.507909][ T5319] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000
[ 91.512070][ T5319] RBP: ffffc9000ef57d30 R08: ffffc9000ef57a27 R09: 1ffff92001deaf44
[ 91.515237][ T5319] R10: dffffc0000000000 R11: fffff52001deaf45 R12: 1ffff92001deaf68
[ 91.518487][ T5319] R13: 0000000000400140 R14: dffffc0000000000 R15: ffff888032f85f50
[ 91.521629][ T5319] ? get_probe_ref+0x392/0x470
[ 91.523844][ T5319] blk_trace_setup+0x377/0x520
[ 91.526150][ T5319] ? __pfx_blk_trace_setup+0x10/0x10
[ 91.528868][ T5319] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 91.531294][ T5319] ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 91.533761][ T5319] sg_ioctl+0xa93/0x2220
[ 91.535713][ T5319] ? __pfx_sg_ioctl+0x10/0x10
[ 91.537927][ T5319] ? __fget_files+0x2a/0x420
[ 91.540574][ T5319] ? __fget_files+0x2a/0x420
[ 91.543256][ T5319] ? __fget_files+0x3a0/0x420
[ 91.545732][ T5319] ? __fget_files+0x2a/0x420
[ 91.547929][ T5319] ? bpf_lsm_file_ioctl+0x9/0x20
[ 91.550121][ T5319] ? __pfx_sg_ioctl+0x10/0x10
[ 91.552115][ T5319] __se_sys_ioctl+0xfc/0x170
[ 91.554138][ T5319] do_syscall_64+0x14d/0xf80
[ 91.556201][ T5319] ? trace_irq_disable+0x3b/0x150
[ 91.558668][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 91.562132][ T5319] ? clear_bhb_loop+0x40/0x90
[ 91.564491][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 91.567192][ T5319] RIP: 0033:0x7f330c19c799
[ 91.569347][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 91.579053][ T5319] RSP: 002b:00007f330d07bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 91.582682][ T5319] RAX: ffffffffffffffda RBX: 00007f330c415fa0 RCX: 00007f330c19c799
[ 91.585832][ T5319] RDX: 0000200000000100 RSI: 00000000c0481273 RDI: 0000000000000003
[ 91.589243][ T5319] RBP: 00007f330d07c050 R08: 0000000000000000 R09: 0000000000000000
[ 91.593762][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 91.597549][ T5319] R13: 00007f330c416038 R14: 00007f330c415fa0 R15: 00007ffe8dbd3348
[ 91.601190][ T5319]
[ 91.603108][ T5319] Kernel Offset: disabled
[ 91.604707][ T5319] Rebooting in 86400 seconds..