program:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8a400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4c58, 0x0, 0x80, 0x1, 0x8, 0x2, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x8, 0x59f}) (fail_nth: 38)
[ 74.118262][ T4672] Bluetooth: hci0: command tx timeout
[ 74.189127][ T5318] FAULT_INJECTION: forcing a failure.
[ 74.189127][ T5318] name failslab, interval 1, probability 0, space 0, times 1
[ 74.194384][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full)
[ 74.194399][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 74.194405][ T5318] Call Trace:
[ 74.194411][ T5318]
[ 74.194417][ T5318] dump_stack_lvl+0x189/0x250
[ 74.194521][ T5318] ? __pfx____ratelimit+0x10/0x10
[ 74.194562][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10
[ 74.194577][ T5318] ? __pfx__printk+0x10/0x10
[ 74.194591][ T5318] ? __pfx___might_resched+0x10/0x10
[ 74.194604][ T5318] should_fail_ex+0x414/0x560
[ 74.194648][ T5318] should_failslab+0xa8/0x100
[ 74.194662][ T5318] __kmalloc_noprof+0xcb/0x4f0
[ 74.194673][ T5318] ? tracepoint_add_func+0x35e/0xa10
[ 74.194689][ T5318] ? __pfx_blk_add_trace_rq_merge+0x10/0x10
[ 74.194703][ T5318] tracepoint_add_func+0x35e/0xa10
[ 74.194721][ T5318] ? __pfx_blk_add_trace_rq_merge+0x10/0x10
[ 74.194736][ T5318] tracepoint_probe_register+0x5d/0x90
[ 74.194749][ T5318] ? __pfx_blk_add_trace_rq_merge+0x10/0x10
[ 74.194763][ T5318] get_probe_ref+0xa9/0x3c0
[ 74.194777][ T5318] do_blk_trace_setup+0x802/0x9d0
[ 74.194795][ T5318] blk_trace_setup+0x116/0x1f0
[ 74.194808][ T5318] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 74.194824][ T5318] ? __pfx_blk_trace_setup+0x10/0x10
[ 74.194845][ T5318] ? __lock_acquire+0xab9/0xd20
[ 74.194862][ T5318] sg_ioctl+0xaf3/0x2230
[ 74.194895][ T5318] ? __pfx_sg_ioctl+0x10/0x10
[ 74.194906][ T5318] ? __fget_files+0x2a/0x420
[ 74.194920][ T5318] ? __fget_files+0x2a/0x420
[ 74.194932][ T5318] ? __fget_files+0x3a0/0x420
[ 74.194943][ T5318] ? __fget_files+0x2a/0x420
[ 74.194956][ T5318] ? bpf_lsm_file_ioctl+0x9/0x20
[ 74.194973][ T5318] ? __pfx_sg_ioctl+0x10/0x10
[ 74.194983][ T5318] __se_sys_ioctl+0xfc/0x170
[ 74.195002][ T5318] do_syscall_64+0xfa/0x3b0
[ 74.195021][ T5318] ? lockdep_hardirqs_on+0x9c/0x150
[ 74.195035][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.195045][ T5318] ? clear_bhb_loop+0x60/0xb0
[ 74.195058][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.195070][ T5318] RIP: 0033:0x7f1789d8e929
[ 74.195080][ T5318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 74.195089][ T5318] RSP: 002b:00007f178ab66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 74.195101][ T5318] RAX: ffffffffffffffda RBX: 00007f1789fb5fa0 RCX: 00007f1789d8e929
[ 74.195109][ T5318] RDX: 0000200000000540 RSI: 00000000c0481273 RDI: 0000000000000004
[ 74.195116][ T5318] RBP: 00007f178ab66090 R08: 0000000000000000 R09: 0000000000000000
[ 74.195122][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 74.195128][ T5318] R13: 0000000000000000 R14: 00007f1789fb5fa0 R15: 00007ffc2e7d8178
[ 74.195146][ T5318]
[ 74.195228][ T5318] ------------[ cut here ]------------
[ 74.321439][ T5318] WARNING: CPU: 0 PID: 5318 at kernel/trace/blktrace.c:1082 get_probe_ref+0x30c/0x3c0
[ 74.325550][ T5318] Modules linked in:
[ 74.327543][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full)
[ 74.332303][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 74.337324][ T5318] RIP: 0010:get_probe_ref+0x30c/0x3c0
[ 74.339895][ T5318] Code: 1a 8e 5b e9 76 aa 9e 09 e8 01 07 f8 ff 90 0f 0b 90 e9 6f fd ff ff e8 f3 06 f8 ff 90 0f 0b 90 e9 8e fd ff ff e8 e5 06 f8 ff 90 <0f> 0b 90 e9 ad fd ff ff e8 d7 06 f8 ff 90 0f 0b 90 e9 cc fd ff ff
[ 74.352597][ T5318] RSP: 0018:ffffc9000d3f7b78 EFLAGS: 00010293
[ 74.355338][ T5318] RAX: ffffffff81c854eb RBX: 00000000fffffff4 RCX: ffff8880001ea440
[ 74.359015][ T5318] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000
[ 74.362572][ T5318] RBP: 1ffff110069a731d R08: ffffc9000d3f7ac7 R09: 1ffff92001a7ef58
[ 74.366306][ T5318] R10: dffffc0000000000 R11: fffff52001a7ef59 R12: 000000000000059f
[ 74.370052][ T5318] R13: dffffc0000000000 R14: ffff888011cc0230 R15: ffff888011cc0200
[ 74.373566][ T5318] FS: 00007f178ab666c0(0000) GS:ffff88808d255000(0000) knlGS:0000000000000000
[ 74.378367][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 74.381282][ T5318] CR2: 00007ff73a8f0700 CR3: 000000003f82f000 CR4: 0000000000352ef0
[ 74.384801][ T5318] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 74.389235][ T5318] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 74.392781][ T5318] Call Trace:
[ 74.394338][ T5318]
[ 74.395730][ T5318] do_blk_trace_setup+0x802/0x9d0
[ 74.398405][ T5318] blk_trace_setup+0x116/0x1f0
[ 74.400635][ T5318] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 74.403141][ T5318] ? __pfx_blk_trace_setup+0x10/0x10
[ 74.405494][ T5318] ? __lock_acquire+0xab9/0xd20
[ 74.407713][ T5318] sg_ioctl+0xaf3/0x2230
[ 74.409764][ T5318] ? __pfx_sg_ioctl+0x10/0x10
[ 74.411957][ T5318] ? __fget_files+0x2a/0x420
[ 74.414114][ T5318] ? __fget_files+0x2a/0x420
[ 74.416196][ T5318] ? __fget_files+0x3a0/0x420
[ 74.418430][ T5318] ? __fget_files+0x2a/0x420
[ 74.420542][ T5318] ? bpf_lsm_file_ioctl+0x9/0x20
[ 74.422830][ T5318] ? __pfx_sg_ioctl+0x10/0x10
[ 74.424986][ T5318] __se_sys_ioctl+0xfc/0x170
[ 74.427092][ T5318] do_syscall_64+0xfa/0x3b0
[ 74.429342][ T5318] ? lockdep_hardirqs_on+0x9c/0x150
[ 74.431670][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.434420][ T5318] ? clear_bhb_loop+0x60/0xb0
[ 74.436633][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.439402][ T5318] RIP: 0033:0x7f1789d8e929
[ 74.441416][ T5318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 74.450220][ T5318] RSP: 002b:00007f178ab66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 74.453899][ T5318] RAX: ffffffffffffffda RBX: 00007f1789fb5fa0 RCX: 00007f1789d8e929
[ 74.457372][ T5318] RDX: 0000200000000540 RSI: 00000000c0481273 RDI: 0000000000000004
[ 74.461130][ T5318] RBP: 00007f178ab66090 R08: 0000000000000000 R09: 0000000000000000
[ 74.464725][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 74.468483][ T5318] R13: 0000000000000000 R14: 00007f1789fb5fa0 R15: 00007ffc2e7d8178
[ 74.472040][ T5318]
[ 74.473544][ T5318] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 74.476912][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full)
[ 74.481905][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 74.486653][ T5318] Call Trace:
[ 74.488186][ T5318]
[ 74.489512][ T5318] dump_stack_lvl+0x99/0x250
[ 74.491642][ T5318] ? __asan_memcpy+0x40/0x70
[ 74.493709][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10
[ 74.495980][ T5318] ? __pfx__printk+0x10/0x10
[ 74.498089][ T5318] panic+0x2db/0x790
[ 74.499816][ T5318] ? __pfx_panic+0x10/0x10
[ 74.501756][ T5318] __warn+0x31b/0x4b0
[ 74.503548][ T5318] ? get_probe_ref+0x30c/0x3c0
[ 74.505741][ T5318] ? get_probe_ref+0x30c/0x3c0
[ 74.507960][ T5318] report_bug+0x2be/0x4f0
[ 74.509930][ T5318] ? get_probe_ref+0x30c/0x3c0
[ 74.512095][ T5318] ? get_probe_ref+0x30c/0x3c0
[ 74.514198][ T5318] ? get_probe_ref+0x30e/0x3c0
[ 74.516326][ T5318] handle_bug+0x84/0x160
[ 74.518203][ T5318] exc_invalid_op+0x1a/0x50
[ 74.520226][ T5318] asm_exc_invalid_op+0x1a/0x20
[ 74.522354][ T5318] RIP: 0010:get_probe_ref+0x30c/0x3c0
[ 74.524676][ T5318] Code: 1a 8e 5b e9 76 aa 9e 09 e8 01 07 f8 ff 90 0f 0b 90 e9 6f fd ff ff e8 f3 06 f8 ff 90 0f 0b 90 e9 8e fd ff ff e8 e5 06 f8 ff 90 <0f> 0b 90 e9 ad fd ff ff e8 d7 06 f8 ff 90 0f 0b 90 e9 cc fd ff ff
[ 74.532992][ T5318] RSP: 0018:ffffc9000d3f7b78 EFLAGS: 00010293
[ 74.535874][ T5318] RAX: ffffffff81c854eb RBX: 00000000fffffff4 RCX: ffff8880001ea440
[ 74.539614][ T5318] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000
[ 74.543251][ T5318] RBP: 1ffff110069a731d R08: ffffc9000d3f7ac7 R09: 1ffff92001a7ef58
[ 74.546767][ T5318] R10: dffffc0000000000 R11: fffff52001a7ef59 R12: 000000000000059f
[ 74.550208][ T5318] R13: dffffc0000000000 R14: ffff888011cc0230 R15: ffff888011cc0200
[ 74.553647][ T5318] ? get_probe_ref+0x30b/0x3c0
[ 74.555867][ T5318] ? get_probe_ref+0x30b/0x3c0
[ 74.558038][ T5318] do_blk_trace_setup+0x802/0x9d0
[ 74.560322][ T5318] blk_trace_setup+0x116/0x1f0
[ 74.562377][ T5318] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 74.564837][ T5318] ? __pfx_blk_trace_setup+0x10/0x10
[ 74.567272][ T5318] ? __lock_acquire+0xab9/0xd20
[ 74.569470][ T5318] sg_ioctl+0xaf3/0x2230
[ 74.571315][ T5318] ? __pfx_sg_ioctl+0x10/0x10
[ 74.573412][ T5318] ? __fget_files+0x2a/0x420
[ 74.575409][ T5318] ? __fget_files+0x2a/0x420
[ 74.577469][ T5318] ? __fget_files+0x3a0/0x420
[ 74.579567][ T5318] ? __fget_files+0x2a/0x420
[ 74.581579][ T5318] ? bpf_lsm_file_ioctl+0x9/0x20
[ 74.583646][ T5318] ? __pfx_sg_ioctl+0x10/0x10
[ 74.586036][ T5318] __se_sys_ioctl+0xfc/0x170
[ 74.588677][ T5318] do_syscall_64+0xfa/0x3b0
[ 74.590482][ T5318] ? lockdep_hardirqs_on+0x9c/0x150
[ 74.592742][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.595369][ T5318] ? clear_bhb_loop+0x60/0xb0
[ 74.597487][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.599964][ T5318] RIP: 0033:0x7f1789d8e929
[ 74.601960][ T5318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 74.610177][ T5318] RSP: 002b:00007f178ab66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 74.613625][ T5318] RAX: ffffffffffffffda RBX: 00007f1789fb5fa0 RCX: 00007f1789d8e929
[ 74.616990][ T5318] RDX: 0000200000000540 RSI: 00000000c0481273 RDI: 0000000000000004
[ 74.620111][ T5318] RBP: 00007f178ab66090 R08: 0000000000000000 R09: 0000000000000000
[ 74.623429][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 74.626897][ T5318] R13: 0000000000000000 R14: 00007f1789fb5fa0 R15: 00007ffc2e7d8178
[ 74.630470][ T5318]
[ 74.632094][ T5318] Kernel Offset: disabled
[ 74.633999][ T5318] Rebooting in 86400 seconds..