program:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x1, 0x81, 0xd, 0x0, 0x2}) (fail_nth: 27)
[ 73.457994][ T5309] Bluetooth: hci0: command tx timeout
[ 73.576466][ T5324] FAULT_INJECTION: forcing a failure.
[ 73.576466][ T5324] name failslab, interval 1, probability 0, space 0, times 1
[ 73.582227][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0
[ 73.586030][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 73.590003][ T5324] Call Trace:
[ 73.591310][ T5324]
[ 73.592423][ T5324] dump_stack_lvl+0x241/0x360
[ 73.594379][ T5324] ? __pfx_dump_stack_lvl+0x10/0x10
[ 73.596294][ T5324] ? __pfx__printk+0x10/0x10
[ 73.598127][ T5324] ? __kmalloc_noprof+0xb0/0x400
[ 73.600045][ T5324] ? __pfx___might_resched+0x10/0x10
[ 73.602020][ T5324] ? rcu_is_watching+0x15/0xb0
[ 73.603693][ T5324] should_fail_ex+0x3b0/0x4e0
[ 73.605361][ T5324] ? tracepoint_add_func+0x2e4/0x9e0
[ 73.607382][ T5324] should_failslab+0xac/0x100
[ 73.609107][ T5324] ? tracepoint_add_func+0x2e4/0x9e0
[ 73.611053][ T5324] __kmalloc_noprof+0xd8/0x400
[ 73.612908][ T5324] ? __pfx_blk_add_trace_rq_insert+0x10/0x10
[ 73.615250][ T5324] tracepoint_add_func+0x2e4/0x9e0
[ 73.617232][ T5324] ? __pfx_blk_add_trace_rq_insert+0x10/0x10
[ 73.619535][ T5324] tracepoint_probe_register+0x105/0x160
[ 73.621714][ T5324] ? __pfx___mutex_lock+0x10/0x10
[ 73.623671][ T5324] ? __pfx_tracepoint_probe_register+0x10/0x10
[ 73.626022][ T5324] ? __pfx_blk_add_trace_rq_insert+0x10/0x10
[ 73.628341][ T5324] get_probe_ref+0x4f/0x400
[ 73.630021][ T5324] do_blk_trace_setup+0x7eb/0x9b0
[ 73.631929][ T5324] blk_trace_setup+0x119/0x1e0
[ 73.633609][ T5324] ? __pfx_blk_trace_setup+0x10/0x10
[ 73.635536][ T5324] sg_ioctl+0xa46/0x2e80
[ 73.637166][ T5324] ? __pfx_sg_ioctl+0x10/0x10
[ 73.638980][ T5324] ? __fget_files+0x29/0x470
[ 73.640765][ T5324] ? __fget_files+0x3f3/0x470
[ 73.642564][ T5324] ? __pfx_sg_ioctl+0x10/0x10
[ 73.644363][ T5324] __se_sys_ioctl+0xf9/0x170
[ 73.646130][ T5324] do_syscall_64+0xf3/0x230
[ 73.647856][ T5324] ? clear_bhb_loop+0x35/0x90
[ 73.649716][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 73.651979][ T5324] RIP: 0033:0x7f6fa617e719
[ 73.653644][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 73.660695][ T5324] RSP: 002b:00007f6fa6ee8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 73.663939][ T5324] RAX: ffffffffffffffda RBX: 00007f6fa6335f80 RCX: 00007f6fa617e719
[ 73.666967][ T5324] RDX: 00000000200000c0 RSI: 00000000c0481273 RDI: 0000000000000003
[ 73.669908][ T5324] RBP: 00007f6fa6ee8090 R08: 0000000000000000 R09: 0000000000000000
[ 73.672918][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 73.675876][ T5324] R13: 0000000000000000 R14: 00007f6fa6335f80 R15: 00007ffc8520a338
[ 73.678879][ T5324]
[ 73.688250][ T5324] ------------[ cut here ]------------
[ 73.690696][ T5324] WARNING: CPU: 0 PID: 5324 at kernel/trace/blktrace.c:1095 get_probe_ref+0x31d/0x400
[ 73.694263][ T5324] Modules linked in:
[ 73.695778][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0
[ 73.699757][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 73.703353][ T5324] RIP: 0010:get_probe_ref+0x31d/0x400
[ 73.705124][ T5324] Code: c3 31 ff 89 c6 e8 f3 c7 f7 ff 85 db 0f 85 e4 00 00 00 e8 a6 c3 f7 ff 48 c7 c7 40 70 99 8e 5b e9 e9 8a 32 0a e8 94 c3 f7 ff 90 <0f> 0b 90 e9 42 fd ff ff e8 86 c3 f7 ff 90 0f 0b 90 e9 61 fd ff ff
[ 73.712009][ T5324] RSP: 0018:ffffc9000d2dfb58 EFLAGS: 00010293
[ 73.714181][ T5324] RAX: ffffffff819d168c RBX: 00000000fffffff4 RCX: ffff88801f0a4880
[ 73.717127][ T5324] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000
[ 73.720432][ T5324] RBP: ffff8880430ddd00 R08: ffffffff819d13ca R09: 1ffff92001a5bf40
[ 73.723348][ T5324] R10: dffffc0000000000 R11: fffff52001a5bf41 R12: 1ffff1100861bba6
[ 73.726246][ T5324] R13: ffffc9000d2dfc80 R14: ffff8880430ddd30 R15: dffffc0000000000
[ 73.729361][ T5324] FS: 00007f6fa6ee86c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
[ 73.732284][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 73.734738][ T5324] CR2: 00007f6fa6e6d9b8 CR3: 0000000044304000 CR4: 0000000000352ef0
[ 73.737709][ T5324] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 73.740775][ T5324] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 73.743617][ T5324] Call Trace:
[ 73.744790][ T5324]
[ 73.745832][ T5324] ? __warn+0x168/0x4e0
[ 73.747443][ T5324] ? get_probe_ref+0x31d/0x400
[ 73.749395][ T5324] ? report_bug+0x2b3/0x500
[ 73.751200][ T5324] ? get_probe_ref+0x31d/0x400
[ 73.753087][ T5324] ? handle_bug+0x60/0x90
[ 73.754779][ T5324] ? exc_invalid_op+0x1a/0x50
[ 73.756541][ T5324] ? asm_exc_invalid_op+0x1a/0x20
[ 73.758336][ T5324] ? get_probe_ref+0x5a/0x400
[ 73.760130][ T5324] ? get_probe_ref+0x31c/0x400
[ 73.761996][ T5324] ? get_probe_ref+0x31d/0x400
[ 73.763801][ T5324] ? get_probe_ref+0x31c/0x400
[ 73.765631][ T5324] do_blk_trace_setup+0x7eb/0x9b0
[ 73.767586][ T5324] blk_trace_setup+0x119/0x1e0
[ 73.769542][ T5324] ? __pfx_blk_trace_setup+0x10/0x10
[ 73.771556][ T5324] sg_ioctl+0xa46/0x2e80
[ 73.773062][ T5324] ? __pfx_sg_ioctl+0x10/0x10
[ 73.774858][ T5324] ? __fget_files+0x29/0x470
[ 73.776672][ T5324] ? __fget_files+0x3f3/0x470
[ 73.778505][ T5324] ? __pfx_sg_ioctl+0x10/0x10
[ 73.780349][ T5324] __se_sys_ioctl+0xf9/0x170
[ 73.782153][ T5324] do_syscall_64+0xf3/0x230
[ 73.783870][ T5324] ? clear_bhb_loop+0x35/0x90
[ 73.785703][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 73.787949][ T5324] RIP: 0033:0x7f6fa617e719
[ 73.789839][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 73.796955][ T5324] RSP: 002b:00007f6fa6ee8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 73.800147][ T5324] RAX: ffffffffffffffda RBX: 00007f6fa6335f80 RCX: 00007f6fa617e719
[ 73.803064][ T5324] RDX: 00000000200000c0 RSI: 00000000c0481273 RDI: 0000000000000003
[ 73.805954][ T5324] RBP: 00007f6fa6ee8090 R08: 0000000000000000 R09: 0000000000000000
[ 73.808892][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 73.812203][ T5324] R13: 0000000000000000 R14: 00007f6fa6335f80 R15: 00007ffc8520a338
[ 73.815181][ T5324]
[ 73.816388][ T5324] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 73.819069][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0
[ 73.822944][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 73.827050][ T5324] Call Trace:
[ 73.828272][ T5324]
[ 73.829378][ T5324] dump_stack_lvl+0x241/0x360
[ 73.831175][ T5324] ? __pfx_dump_stack_lvl+0x10/0x10
[ 73.833132][ T5324] ? __pfx__printk+0x10/0x10
[ 73.835015][ T5324] ? _printk+0xd5/0x120
[ 73.836634][ T5324] ? __init_begin+0x41000/0x41000
[ 73.838591][ T5324] ? vscnprintf+0x5d/0x90
[ 73.840272][ T5324] panic+0x349/0x880
[ 73.841831][ T5324] ? __warn+0x177/0x4e0
[ 73.843502][ T5324] ? __pfx_panic+0x10/0x10
[ 73.845234][ T5324] ? show_trace_log_lvl+0x3b2/0x410
[ 73.847243][ T5324] __warn+0x34b/0x4e0
[ 73.848803][ T5324] ? get_probe_ref+0x31d/0x400
[ 73.850640][ T5324] report_bug+0x2b3/0x500
[ 73.852286][ T5324] ? get_probe_ref+0x31d/0x400
[ 73.854172][ T5324] handle_bug+0x60/0x90
[ 73.855778][ T5324] exc_invalid_op+0x1a/0x50
[ 73.857532][ T5324] asm_exc_invalid_op+0x1a/0x20
[ 73.859495][ T5324] RIP: 0010:get_probe_ref+0x31d/0x400
[ 73.861519][ T5324] Code: c3 31 ff 89 c6 e8 f3 c7 f7 ff 85 db 0f 85 e4 00 00 00 e8 a6 c3 f7 ff 48 c7 c7 40 70 99 8e 5b e9 e9 8a 32 0a e8 94 c3 f7 ff 90 <0f> 0b 90 e9 42 fd ff ff e8 86 c3 f7 ff 90 0f 0b 90 e9 61 fd ff ff
[ 73.868857][ T5324] RSP: 0018:ffffc9000d2dfb58 EFLAGS: 00010293
[ 73.871246][ T5324] RAX: ffffffff819d168c RBX: 00000000fffffff4 RCX: ffff88801f0a4880
[ 73.874245][ T5324] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000
[ 73.877244][ T5324] RBP: ffff8880430ddd00 R08: ffffffff819d13ca R09: 1ffff92001a5bf40
[ 73.880304][ T5324] R10: dffffc0000000000 R11: fffff52001a5bf41 R12: 1ffff1100861bba6
[ 73.883303][ T5324] R13: ffffc9000d2dfc80 R14: ffff8880430ddd30 R15: dffffc0000000000
[ 73.886213][ T5324] ? get_probe_ref+0x5a/0x400
[ 73.888001][ T5324] ? get_probe_ref+0x31c/0x400
[ 73.889696][ T5324] ? get_probe_ref+0x31c/0x400
[ 73.891453][ T5324] do_blk_trace_setup+0x7eb/0x9b0
[ 73.893209][ T5324] blk_trace_setup+0x119/0x1e0
[ 73.894956][ T5324] ? __pfx_blk_trace_setup+0x10/0x10
[ 73.896932][ T5324] sg_ioctl+0xa46/0x2e80
[ 73.898539][ T5324] ? __pfx_sg_ioctl+0x10/0x10
[ 73.900326][ T5324] ? __fget_files+0x29/0x470
[ 73.902143][ T5324] ? __fget_files+0x3f3/0x470
[ 73.903967][ T5324] ? __pfx_sg_ioctl+0x10/0x10
[ 73.905829][ T5324] __se_sys_ioctl+0xf9/0x170
[ 73.907648][ T5324] do_syscall_64+0xf3/0x230
[ 73.909424][ T5324] ? clear_bhb_loop+0x35/0x90
[ 73.911248][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 73.913507][ T5324] RIP: 0033:0x7f6fa617e719
[ 73.915214][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 73.922354][ T5324] RSP: 002b:00007f6fa6ee8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 73.925519][ T5324] RAX: ffffffffffffffda RBX: 00007f6fa6335f80 RCX: 00007f6fa617e719
[ 73.928402][ T5324] RDX: 00000000200000c0 RSI: 00000000c0481273 RDI: 0000000000000003
[ 73.931339][ T5324] RBP: 00007f6fa6ee8090 R08: 0000000000000000 R09: 0000000000000000
[ 73.934269][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 73.937049][ T5324] R13: 0000000000000000 R14: 00007f6fa6335f80 R15: 00007ffc8520a338
[ 73.939768][ T5324]
[ 73.941064][ T5324] Kernel Offset: disabled
[ 73.942559][ T5324] Rebooting in 86400 seconds..