program:
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x8, 0xc, 0x3, 0x3})
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x200)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x8, 0x2, 0x10000, 0x40010001, 0x8000000000000000}) (fail_nth: 25)
[ 77.820148][ T4535] Bluetooth: hci0: command tx timeout
[ 77.904314][ T5108] FAULT_INJECTION: forcing a failure.
[ 77.904314][ T5108] name failslab, interval 1, probability 0, space 0, times 1
[ 77.909156][ T5108] CPU: 0 UID: 0 PID: 5108 Comm: syz.0.0 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0
[ 77.912984][ T5108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 77.916971][ T5108] Call Trace:
[ 77.918235][ T5108]
[ 77.919374][ T5108] dump_stack_lvl+0x241/0x360
[ 77.921226][ T5108] ? __pfx_dump_stack_lvl+0x10/0x10
[ 77.923125][ T5108] ? __pfx__printk+0x10/0x10
[ 77.924989][ T5108] ? __kmalloc_noprof+0xb0/0x400
[ 77.926879][ T5108] ? __pfx___might_resched+0x10/0x10
[ 77.928945][ T5108] ? rcu_is_watching+0x15/0xb0
[ 77.930779][ T5108] should_fail_ex+0x3b0/0x4e0
[ 77.932641][ T5108] ? tracepoint_add_func+0x2e4/0x9e0
[ 77.934621][ T5108] should_failslab+0xac/0x100
[ 77.936384][ T5108] ? tracepoint_add_func+0x2e4/0x9e0
[ 77.938301][ T5108] __kmalloc_noprof+0xd8/0x400
[ 77.940067][ T5108] ? __pfx_blk_add_trace_rq_issue+0x10/0x10
[ 77.942267][ T5108] tracepoint_add_func+0x2e4/0x9e0
[ 77.944173][ T5108] ? __pfx_blk_add_trace_rq_issue+0x10/0x10
[ 77.946369][ T5108] tracepoint_probe_register+0x105/0x160
[ 77.948495][ T5108] ? __pfx___mutex_lock+0x10/0x10
[ 77.950376][ T5108] ? __pfx_tracepoint_probe_register+0x10/0x10
[ 77.952730][ T5108] ? __pfx_blk_add_trace_rq_issue+0x10/0x10
[ 77.954907][ T5108] get_probe_ref+0x7c/0x400
[ 77.956617][ T5108] do_blk_trace_setup+0x7eb/0x9b0
[ 77.958502][ T5108] blk_trace_ioctl+0x359/0x9a0
[ 77.960297][ T5108] ? tomoyo_path_number_perm+0x71a/0x880
[ 77.962343][ T5108] ? __pfx_blk_trace_ioctl+0x10/0x10
[ 77.964296][ T5108] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 77.966592][ T5108] ? file_to_blk_mode+0xd5/0x140
[ 77.968529][ T5108] blkdev_ioctl+0x40f/0x6b0
[ 77.970252][ T5108] ? __pfx_blkdev_ioctl+0x10/0x10
[ 77.972183][ T5108] ? bpf_lsm_file_ioctl+0x9/0x10
[ 77.973991][ T5108] ? security_file_ioctl+0x87/0xb0
[ 77.975809][ T5108] ? __pfx_blkdev_ioctl+0x10/0x10
[ 77.977699][ T5108] __se_sys_ioctl+0xfc/0x170
[ 77.979443][ T5108] do_syscall_64+0xf3/0x230
[ 77.981079][ T5108] ? clear_bhb_loop+0x35/0x90
[ 77.982685][ T5108] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.984868][ T5108] RIP: 0033:0x7ffb08d7cef9
[ 77.986531][ T5108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 77.993410][ T5108] RSP: 002b:00007ffb09b8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 77.996495][ T5108] RAX: ffffffffffffffda RBX: 00007ffb08f35f80 RCX: 00007ffb08d7cef9
[ 77.999459][ T5108] RDX: 00000000200000c0 RSI: 00000000c0481273 RDI: 0000000000000003
[ 78.002495][ T5108] RBP: 00007ffb09b8a090 R08: 0000000000000000 R09: 0000000000000000
[ 78.005613][ T5108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 78.008393][ T5108] R13: 0000000000000000 R14: 00007ffb08f35f80 R15: 00007ffeca565fe8
[ 78.011376][ T5108]
[ 78.023839][ T5108] ------------[ cut here ]------------
[ 78.026160][ T5108] WARNING: CPU: 0 PID: 5108 at kernel/trace/blktrace.c:1097 get_probe_ref+0x32b/0x400
[ 78.030385][ T5108] Modules linked in:
[ 78.031922][ T5108] CPU: 0 UID: 0 PID: 5108 Comm: syz.0.0 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0
[ 78.036029][ T5108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 78.039764][ T5108] RIP: 0010:get_probe_ref+0x32b/0x400
[ 78.041904][ T5108] Code: e4 00 00 00 e8 06 26 f8 ff 48 c7 c7 e0 11 99 8e 5b e9 59 1e 27 0a e8 f4 25 f8 ff 90 0f 0b 90 e9 42 fd ff ff e8 e6 25 f8 ff 90 <0f> 0b 90 e9 61 fd ff ff e8 d8 25 f8 ff 90 0f 0b 90 e9 80 fd ff ff
[ 78.048653][ T5108] RSP: 0018:ffffc9000179fb38 EFLAGS: 00010293
[ 78.050884][ T5108] RAX: ffffffff819b66ca RBX: 00000000fffffff4 RCX: ffff88801e364880
[ 78.053921][ T5108] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000
[ 78.056901][ T5108] RBP: ffff88801275e580 R08: ffffffff819b6427 R09: 1ffff920002f3f3c
[ 78.059859][ T5108] R10: dffffc0000000000 R11: fffff520002f3f3d R12: 1ffff110024ebcb6
[ 78.062824][ T5108] R13: ffffc9000179fd50 R14: ffff88801275e5b0 R15: dffffc0000000000
[ 78.065787][ T5108] FS: 00007ffb09b8a6c0(0000) GS:ffff88801fe00000(0000) knlGS:0000000000000000
[ 78.069097][ T5108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 78.071725][ T5108] CR2: 00007ffb09a6d9b8 CR3: 000000000e522000 CR4: 0000000000350ef0
[ 78.074772][ T5108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 78.077890][ T5108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 78.080985][ T5108] Call Trace:
[ 78.082245][ T5108]
[ 78.083354][ T5108] ? __warn+0x163/0x4e0
[ 78.085191][ T5108] ? get_probe_ref+0x32b/0x400
[ 78.087040][ T5108] ? report_bug+0x2b3/0x500
[ 78.088882][ T5108] ? get_probe_ref+0x32b/0x400
[ 78.090962][ T5108] ? handle_bug+0x3e/0x70
[ 78.092620][ T5108] ? exc_invalid_op+0x1a/0x50
[ 78.094473][ T5108] ? asm_exc_invalid_op+0x1a/0x20
[ 78.096312][ T5108] ? get_probe_ref+0x87/0x400
[ 78.098022][ T5108] ? get_probe_ref+0x32a/0x400
[ 78.099803][ T5108] ? get_probe_ref+0x32b/0x400
[ 78.101733][ T5108] ? get_probe_ref+0x32a/0x400
[ 78.103584][ T5108] do_blk_trace_setup+0x7eb/0x9b0
[ 78.105460][ T5108] blk_trace_ioctl+0x359/0x9a0
[ 78.107226][ T5108] ? tomoyo_path_number_perm+0x71a/0x880
[ 78.109366][ T5108] ? __pfx_blk_trace_ioctl+0x10/0x10
[ 78.111313][ T5108] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 78.113555][ T5108] ? file_to_blk_mode+0xd5/0x140
[ 78.115324][ T5108] blkdev_ioctl+0x40f/0x6b0
[ 78.117026][ T5108] ? __pfx_blkdev_ioctl+0x10/0x10
[ 78.118763][ T5108] ? bpf_lsm_file_ioctl+0x9/0x10
[ 78.120553][ T5108] ? security_file_ioctl+0x87/0xb0
[ 78.122441][ T5108] ? __pfx_blkdev_ioctl+0x10/0x10
[ 78.124309][ T5108] __se_sys_ioctl+0xfc/0x170
[ 78.125867][ T5108] do_syscall_64+0xf3/0x230
[ 78.127340][ T5108] ? clear_bhb_loop+0x35/0x90
[ 78.128933][ T5108] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 78.131083][ T5108] RIP: 0033:0x7ffb08d7cef9
[ 78.132614][ T5108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 78.138892][ T5108] RSP: 002b:00007ffb09b8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 78.141882][ T5108] RAX: ffffffffffffffda RBX: 00007ffb08f35f80 RCX: 00007ffb08d7cef9
[ 78.144787][ T5108] RDX: 00000000200000c0 RSI: 00000000c0481273 RDI: 0000000000000003
[ 78.147747][ T5108] RBP: 00007ffb09b8a090 R08: 0000000000000000 R09: 0000000000000000
[ 78.150722][ T5108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 78.153710][ T5108] R13: 0000000000000000 R14: 00007ffb08f35f80 R15: 00007ffeca565fe8
[ 78.156559][ T5108]
[ 78.157796][ T5108] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 78.160769][ T5108] CPU: 0 UID: 0 PID: 5108 Comm: syz.0.0 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0
[ 78.164639][ T5108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 78.168498][ T5108] Call Trace:
[ 78.169756][ T5108]
[ 78.170882][ T5108] dump_stack_lvl+0x241/0x360
[ 78.172591][ T5108] ? __pfx_dump_stack_lvl+0x10/0x10
[ 78.174535][ T5108] ? __pfx__printk+0x10/0x10
[ 78.176258][ T5108] ? _printk+0xd5/0x120
[ 78.177797][ T5108] ? vscnprintf+0x5d/0x90
[ 78.179392][ T5108] panic+0x349/0x860
[ 78.180854][ T5108] ? __warn+0x172/0x4e0
[ 78.182352][ T5108] ? __pfx_panic+0x10/0x10
[ 78.184023][ T5108] ? show_trace_log_lvl+0x4e6/0x520
[ 78.186004][ T5108] __warn+0x346/0x4e0
[ 78.187509][ T5108] ? get_probe_ref+0x32b/0x400
[ 78.189269][ T5108] report_bug+0x2b3/0x500
[ 78.190904][ T5108] ? get_probe_ref+0x32b/0x400
[ 78.192711][ T5108] handle_bug+0x3e/0x70
[ 78.194184][ T5108] exc_invalid_op+0x1a/0x50
[ 78.195776][ T5108] asm_exc_invalid_op+0x1a/0x20
[ 78.197429][ T5108] RIP: 0010:get_probe_ref+0x32b/0x400
[ 78.199268][ T5108] Code: e4 00 00 00 e8 06 26 f8 ff 48 c7 c7 e0 11 99 8e 5b e9 59 1e 27 0a e8 f4 25 f8 ff 90 0f 0b 90 e9 42 fd ff ff e8 e6 25 f8 ff 90 <0f> 0b 90 e9 61 fd ff ff e8 d8 25 f8 ff 90 0f 0b 90 e9 80 fd ff ff
[ 78.205659][ T5108] RSP: 0018:ffffc9000179fb38 EFLAGS: 00010293
[ 78.207694][ T5108] RAX: ffffffff819b66ca RBX: 00000000fffffff4 RCX: ffff88801e364880
[ 78.210529][ T5108] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000
[ 78.213587][ T5108] RBP: ffff88801275e580 R08: ffffffff819b6427 R09: 1ffff920002f3f3c
[ 78.216754][ T5108] R10: dffffc0000000000 R11: fffff520002f3f3d R12: 1ffff110024ebcb6
[ 78.219790][ T5108] R13: ffffc9000179fd50 R14: ffff88801275e5b0 R15: dffffc0000000000
[ 78.222634][ T5108] ? get_probe_ref+0x87/0x400
[ 78.224410][ T5108] ? get_probe_ref+0x32a/0x400
[ 78.226114][ T5108] ? get_probe_ref+0x32a/0x400
[ 78.227896][ T5108] do_blk_trace_setup+0x7eb/0x9b0
[ 78.229781][ T5108] blk_trace_ioctl+0x359/0x9a0
[ 78.231553][ T5108] ? tomoyo_path_number_perm+0x71a/0x880
[ 78.233516][ T5108] ? __pfx_blk_trace_ioctl+0x10/0x10
[ 78.235399][ T5108] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 78.237506][ T5108] ? file_to_blk_mode+0xd5/0x140
[ 78.239229][ T5108] blkdev_ioctl+0x40f/0x6b0
[ 78.240867][ T5108] ? __pfx_blkdev_ioctl+0x10/0x10
[ 78.242526][ T5108] ? bpf_lsm_file_ioctl+0x9/0x10
[ 78.244290][ T5108] ? security_file_ioctl+0x87/0xb0
[ 78.246122][ T5108] ? __pfx_blkdev_ioctl+0x10/0x10
[ 78.247934][ T5108] __se_sys_ioctl+0xfc/0x170
[ 78.249606][ T5108] do_syscall_64+0xf3/0x230
[ 78.251233][ T5108] ? clear_bhb_loop+0x35/0x90
[ 78.252932][ T5108] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 78.255084][ T5108] RIP: 0033:0x7ffb08d7cef9
[ 78.256729][ T5108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 78.263216][ T5108] RSP: 002b:00007ffb09b8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 78.265945][ T5108] RAX: ffffffffffffffda RBX: 00007ffb08f35f80 RCX: 00007ffb08d7cef9
[ 78.268860][ T5108] RDX: 00000000200000c0 RSI: 00000000c0481273 RDI: 0000000000000003
[ 78.271661][ T5108] RBP: 00007ffb09b8a090 R08: 0000000000000000 R09: 0000000000000000
[ 78.274332][ T5108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 78.277150][ T5108] R13: 0000000000000000 R14: 00007ffb08f35f80 R15: 00007ffeca565fe8
[ 78.280154][ T5108]
[ 78.281488][ T5108] Kernel Offset: disabled
[ 78.283151][ T5108] Rebooting in 86400 seconds..