CFI failure at __traceiter_sched_switch+0x9b/0xd0 include/trace/events/sched.h:222 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69)
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 4428 Comm: syz.1.10003 Tainted: G        W          syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 include/trace/events/sched.h:222
Code: 80 3c 30 00 74 05 e8 84 75 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74
RSP: 0018:ffffc90001127470 EFLAGS: 00010096
RAX: 1ffff11021e6f5af RBX: ffff88810f37ad70 RCX: ffff88812d4a6540
RDX: ffff888127261440 RSI: 0000000000000001 RDI: ffffc9000113b000
RBP: ffffc900011274b0 R08: 0000000000000000 R09: ffffc90001127368
R10: 00000000b720eca3 R11: 1ffff92000224e6d R12: 0000000000000001
R13: ffff88810f37ad70 R14: dffffc0000000000 R15: ffffffff81713a70
FS:  00007f969a2e56c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: fffffffffffffffd CR3: 0000000129078000 CR4: 00000000003506a0
Call Trace:
 <TASK>
 trace_sched_switch include/trace/events/sched.h:222 [inline]
 __schedule+0x1263/0x14e0 kernel/sched/core.c:6747
 preempt_schedule_common+0x9b/0xf0 kernel/sched/core.c:6919
 preempt_schedule+0xa7/0xb0 kernel/sched/core.c:6943
 preempt_schedule_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:34
 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline]
 _raw_spin_unlock+0x5f/0x70 kernel/locking/spinlock.c:186
 spin_unlock include/linux/spinlock.h:391 [inline]
 filemap_map_pages+0xfff/0x12e0 mm/filemap.c:3532
 do_fault_around mm/memory.c:4693 [inline]
 do_read_fault mm/memory.c:4728 [inline]
 do_fault+0xf57/0x1df0 mm/memory.c:4875
 handle_pte_fault mm/memory.c:5171 [inline]
 __handle_mm_fault mm/memory.c:5313 [inline]
 handle_mm_fault+0x12fa/0x2640 mm/memory.c:5453
 faultin_page mm/gup.c:1026 [inline]
 __get_user_pages+0x33d/0xd80 mm/gup.c:1250
 populate_vma_page_range mm/gup.c:1607 [inline]
 __mm_populate+0x2e4/0x420 mm/gup.c:1721
 mm_populate include/linux/mm.h:3094 [inline]
 vm_mmap_pgoff+0x268/0x3f0 mm/util.c:530
 ksys_mmap_pgoff+0xf6/0x1d0 mm/mmap.c:1536
 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:93 [inline]
 __se_sys_mmap arch/x86/kernel/sys_x86_64.c:86 [inline]
 __x64_sys_mmap+0xfa/0x110 arch/x86/kernel/sys_x86_64.c:86
 x64_sys_call+0x8fd/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:10
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f969938efc9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f969a2e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 00007f96995e5fa0 RCX: 00007f969938efc9
RDX: b635773f06ebbeea RSI: 0000000000b36000 RDI: 0000200000000000
RBP: 00007f9699411f91 R08: ffffffffffffffff R09: 0000000028f43000
R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f96995e6038 R14: 00007f96995e5fa0 R15: 00007ffebeaa3b48
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 include/trace/events/sched.h:222
Code: 80 3c 30 00 74 05 e8 84 75 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74
RSP: 0018:ffffc90001127470 EFLAGS: 00010096
RAX: 1ffff11021e6f5af RBX: ffff88810f37ad70 RCX: ffff88812d4a6540
RDX: ffff888127261440 RSI: 0000000000000001 RDI: ffffc9000113b000
RBP: ffffc900011274b0 R08: 0000000000000000 R09: ffffc90001127368
R10: 00000000b720eca3 R11: 1ffff92000224e6d R12: 0000000000000001
R13: ffff88810f37ad70 R14: dffffc0000000000 R15: ffffffff81713a70
FS:  00007f969a2e56c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: fffffffffffffffd CR3: 0000000129078000 CR4: 00000000003506a0