program:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x17, 0x40, 0x6, 0x0, 0x0, 0x10609, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x108bcf, 0x7ff, 0xffff, 0x8, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000001, 0x12011, r1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x8, 0x59f}) (fail_nth: 36)
[ 104.310171][ T4665] Bluetooth: hci0: command tx timeout
[ 104.451937][ T5326] FAULT_INJECTION: forcing a failure.
[ 104.451937][ T5326] name failslab, interval 1, probability 0, space 0, times 1
[ 104.466873][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 104.466904][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 104.466912][ T5326] Call Trace:
[ 104.466917][ T5326]
[ 104.466924][ T5326] dump_stack_lvl+0xe8/0x150
[ 104.467047][ T5326] should_fail_ex+0x412/0x560
[ 104.467096][ T5326] should_failslab+0xa8/0x100
[ 104.467108][ T5326] __kmalloc_noprof+0xe8/0x760
[ 104.467121][ T5326] ? __pfx___mutex_lock+0x10/0x10
[ 104.467182][ T5326] ? tracepoint_add_func+0x366/0xa50
[ 104.467196][ T5326] ? __pfx_blk_add_trace_rq_issue+0x10/0x10
[ 104.467207][ T5326] tracepoint_add_func+0x366/0xa50
[ 104.467218][ T5326] ? relay_open+0x56d/0x920
[ 104.467228][ T5326] ? __pfx_blk_add_trace_rq_issue+0x10/0x10
[ 104.467236][ T5326] tracepoint_probe_register+0x5d/0x90
[ 104.467247][ T5326] ? __pfx_blk_add_trace_rq_issue+0x10/0x10
[ 104.467255][ T5326] get_probe_ref+0x7c/0x470
[ 104.467264][ T5326] blk_trace_setup+0x377/0x520
[ 104.467276][ T5326] ? __pfx_blk_trace_setup+0x10/0x10
[ 104.467297][ T5326] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 104.467317][ T5326] ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 104.467332][ T5326] sg_ioctl+0xa93/0x2220
[ 104.467350][ T5326] ? __pfx_sg_ioctl+0x10/0x10
[ 104.467359][ T5326] ? __fget_files+0x2a/0x420
[ 104.467373][ T5326] ? __fget_files+0x2a/0x420
[ 104.467381][ T5326] ? __fget_files+0x3a0/0x420
[ 104.467389][ T5326] ? __fget_files+0x2a/0x420
[ 104.467401][ T5326] ? bpf_lsm_file_ioctl+0x9/0x20
[ 104.467413][ T5326] ? __pfx_sg_ioctl+0x10/0x10
[ 104.467422][ T5326] __se_sys_ioctl+0xfc/0x170
[ 104.467436][ T5326] do_syscall_64+0x14d/0xf80
[ 104.467455][ T5326] ? trace_irq_disable+0x3b/0x150
[ 104.467467][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.467475][ T5326] ? clear_bhb_loop+0x40/0x90
[ 104.467488][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.467498][ T5326] RIP: 0033:0x7f2b9319c799
[ 104.467513][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 104.467522][ T5326] RSP: 002b:00007f2b940dffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 104.467536][ T5326] RAX: ffffffffffffffda RBX: 00007f2b93415fa0 RCX: 00007f2b9319c799
[ 104.467544][ T5326] RDX: 0000200000000540 RSI: 00000000c0481273 RDI: 0000000000000003
[ 104.467551][ T5326] RBP: 00007f2b940e0050 R08: 0000000000000000 R09: 0000000000000000
[ 104.467557][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 104.467561][ T5326] R13: 00007f2b93416038 R14: 00007f2b93415fa0 R15: 00007ffe3e711618
[ 104.467572][ T5326]
[ 104.467735][ T5326] ------------[ cut here ]------------
[ 104.614337][ T5326] ret
[ 104.614350][ T5326] WARNING: kernel/trace/blktrace.c:1334 at get_probe_ref+0x385/0x470, CPU#0: syz.0.0/5326
[ 104.621992][ T5326] Modules linked in:
[ 104.624378][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 104.629972][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 104.635140][ T5326] RIP: 0010:get_probe_ref+0x385/0x470
[ 104.638210][ T5326] Code: 00 01 00 00 e8 6c 8f f7 ff 48 c7 c7 00 e7 7c 8e 5b e9 0f 2f e3 09 e8 5a 8f f7 ff 90 0f 0b 90 e9 e8 fc ff ff e8 4c 8f f7 ff 90 <0f> 0b 90 e9 07 fd ff ff e8 3e 8f f7 ff 90 0f 0b 90 e9 26 fd ff ff
[ 104.648765][ T5326] RSP: 0018:ffffc9000dd27af0 EFLAGS: 00010293
[ 104.652056][ T5326] RAX: ffffffff81ce19c4 RBX: 00000000fffffff4 RCX: ffff8880002ec980
[ 104.656978][ T5326] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000
[ 104.662508][ T5326] RBP: ffffc9000dd27d30 R08: ffffc9000dd27a27 R09: 1ffff92001ba4f44
[ 104.666412][ T5326] R10: dffffc0000000000 R11: fffff52001ba4f45 R12: 1ffff92001ba4f68
[ 104.670933][ T5326] R13: 0000000000400140 R14: dffffc0000000000 R15: ffff88801fab7260
[ 104.675682][ T5326] FS: 00007f2b940e06c0(0000) GS:ffff88808ca56000(0000) knlGS:0000000000000000
[ 104.680286][ T5326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 104.683383][ T5326] CR2: 00007f2b93f4d9d0 CR3: 00000000370e9000 CR4: 0000000000352ef0
[ 104.687181][ T5326] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 104.692132][ T5326] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 00000000000d0602
[ 104.696940][ T5326] Call Trace:
[ 104.698606][ T5326]
[ 104.700205][ T5326] blk_trace_setup+0x377/0x520
[ 104.702726][ T5326] ? __pfx_blk_trace_setup+0x10/0x10
[ 104.705438][ T5326] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 104.707840][ T5326] ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 104.711562][ T5326] sg_ioctl+0xa93/0x2220
[ 104.714656][ T5326] ? __pfx_sg_ioctl+0x10/0x10
[ 104.717442][ T5326] ? __fget_files+0x2a/0x420
[ 104.720121][ T5326] ? __fget_files+0x2a/0x420
[ 104.722372][ T5326] ? __fget_files+0x3a0/0x420
[ 104.724642][ T5326] ? __fget_files+0x2a/0x420
[ 104.727140][ T5326] ? bpf_lsm_file_ioctl+0x9/0x20
[ 104.729944][ T5326] ? __pfx_sg_ioctl+0x10/0x10
[ 104.732423][ T5326] __se_sys_ioctl+0xfc/0x170
[ 104.735039][ T5326] do_syscall_64+0x14d/0xf80
[ 104.737576][ T5326] ? trace_irq_disable+0x3b/0x150
[ 104.741631][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.745349][ T5326] ? clear_bhb_loop+0x40/0x90
[ 104.747636][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.750942][ T5326] RIP: 0033:0x7f2b9319c799
[ 104.753380][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 104.763064][ T5326] RSP: 002b:00007f2b940dffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 104.767337][ T5326] RAX: ffffffffffffffda RBX: 00007f2b93415fa0 RCX: 00007f2b9319c799
[ 104.771278][ T5326] RDX: 0000200000000540 RSI: 00000000c0481273 RDI: 0000000000000003
[ 104.775245][ T5326] RBP: 00007f2b940e0050 R08: 0000000000000000 R09: 0000000000000000
[ 104.779616][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 104.783876][ T5326] R13: 00007f2b93416038 R14: 00007f2b93415fa0 R15: 00007ffe3e711618
[ 104.788768][ T5326]
[ 104.790669][ T5326] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 104.794370][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 104.798895][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 104.804005][ T5326] Call Trace:
[ 104.805768][ T5326]
[ 104.807426][ T5326] vpanic+0x56c/0xa60
[ 104.809767][ T5326] ? __pfx__printk+0x10/0x10
[ 104.812498][ T5326] ? __pfx_vpanic+0x10/0x10
[ 104.814965][ T5326] ? is_bpf_text_address+0x292/0x2b0
[ 104.817641][ T5326] ? is_bpf_text_address+0x26/0x2b0
[ 104.820117][ T5326] panic+0xc5/0xd0
[ 104.822037][ T5326] ? __pfx_panic+0x10/0x10
[ 104.824189][ T5326] __warn+0x315/0x4f0
[ 104.826360][ T5326] ? get_probe_ref+0x385/0x470
[ 104.828793][ T5326] ? get_probe_ref+0x385/0x470
[ 104.831872][ T5326] __report_bug+0x29a/0x540
[ 104.835504][ T5326] ? get_probe_ref+0x385/0x470
[ 104.838280][ T5326] ? __pfx___report_bug+0x10/0x10
[ 104.841178][ T5326] ? tracepoint_probe_register+0x6b/0x90
[ 104.843980][ T5326] ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 104.846890][ T5326] ? get_probe_ref+0x385/0x470
[ 104.849184][ T5326] report_bug+0x16a/0x220
[ 104.851228][ T5326] ? get_probe_ref+0x385/0x470
[ 104.854145][ T5326] ? get_probe_ref+0x387/0x470
[ 104.857177][ T5326] handle_bug+0x9c/0x200
[ 104.859260][ T5326] exc_invalid_op+0x1a/0x50
[ 104.861555][ T5326] asm_exc_invalid_op+0x1a/0x20
[ 104.863999][ T5326] RIP: 0010:get_probe_ref+0x385/0x470
[ 104.866717][ T5326] Code: 00 01 00 00 e8 6c 8f f7 ff 48 c7 c7 00 e7 7c 8e 5b e9 0f 2f e3 09 e8 5a 8f f7 ff 90 0f 0b 90 e9 e8 fc ff ff e8 4c 8f f7 ff 90 <0f> 0b 90 e9 07 fd ff ff e8 3e 8f f7 ff 90 0f 0b 90 e9 26 fd ff ff
[ 104.878396][ T5326] RSP: 0018:ffffc9000dd27af0 EFLAGS: 00010293
[ 104.881444][ T5326] RAX: ffffffff81ce19c4 RBX: 00000000fffffff4 RCX: ffff8880002ec980
[ 104.885622][ T5326] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000
[ 104.889472][ T5326] RBP: ffffc9000dd27d30 R08: ffffc9000dd27a27 R09: 1ffff92001ba4f44
[ 104.894063][ T5326] R10: dffffc0000000000 R11: fffff52001ba4f45 R12: 1ffff92001ba4f68
[ 104.898728][ T5326] R13: 0000000000400140 R14: dffffc0000000000 R15: ffff88801fab7260
[ 104.902596][ T5326] ? get_probe_ref+0x384/0x470
[ 104.904784][ T5326] blk_trace_setup+0x377/0x520
[ 104.906963][ T5326] ? __pfx_blk_trace_setup+0x10/0x10
[ 104.909442][ T5326] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 104.911957][ T5326] ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 104.915282][ T5326] sg_ioctl+0xa93/0x2220
[ 104.917547][ T5326] ? __pfx_sg_ioctl+0x10/0x10
[ 104.919720][ T5326] ? __fget_files+0x2a/0x420
[ 104.922057][ T5326] ? __fget_files+0x2a/0x420
[ 104.924252][ T5326] ? __fget_files+0x3a0/0x420
[ 104.926256][ T5326] ? __fget_files+0x2a/0x420
[ 104.928380][ T5326] ? bpf_lsm_file_ioctl+0x9/0x20
[ 104.930890][ T5326] ? __pfx_sg_ioctl+0x10/0x10
[ 104.933250][ T5326] __se_sys_ioctl+0xfc/0x170
[ 104.935802][ T5326] do_syscall_64+0x14d/0xf80
[ 104.938735][ T5326] ? trace_irq_disable+0x3b/0x150
[ 104.941496][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.944330][ T5326] ? clear_bhb_loop+0x40/0x90
[ 104.946804][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.950169][ T5326] RIP: 0033:0x7f2b9319c799
[ 104.953715][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 104.964194][ T5326] RSP: 002b:00007f2b940dffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 104.968551][ T5326] RAX: ffffffffffffffda RBX: 00007f2b93415fa0 RCX: 00007f2b9319c799
[ 104.974414][ T5326] RDX: 0000200000000540 RSI: 00000000c0481273 RDI: 0000000000000003
[ 104.980380][ T5326] RBP: 00007f2b940e0050 R08: 0000000000000000 R09: 0000000000000000
[ 104.984403][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 104.988323][ T5326] R13: 00007f2b93416038 R14: 00007f2b93415fa0 R15: 00007ffe3e711618
[ 104.992651][ T5326]
[ 104.994670][ T5326] Kernel Offset: disabled
[ 104.996819][ T5326] Rebooting in 86400 seconds..