CFI failure at __traceiter_sched_wakeup+0x7d/0xb0 include/trace/events/sched.h:178 (target: tp_stub_func+0x0/0x10; expected type: 0x389e96a6) invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 443 Comm: syz.0.38 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 RIP: 0010:__traceiter_sched_wakeup+0x7d/0xb0 include/trace/events/sched.h:178 Code: 49 8d 7e 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 66 fa 6a 00 49 8b 7f 08 48 89 de 41 ba 5a 69 61 c7 45 03 55 fc 74 02 <0f> 0b 41 ff d5 49 83 c6 18 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 RSP: 0018:ffffc9000dd8ebd0 EFLAGS: 00010817 RAX: 1ffff1102681bec6 RBX: ffff888100322880 RCX: 0000000000080000 RDX: ffffc90001279000 RSI: ffff888100322880 RDI: ffffffff87103e80 RBP: ffffc9000dd8ebf8 R08: ffffffff8792d6ef R09: 1ffffffff0f25add R10: 000000006ca1d066 R11: fffffbfff0f25ade R12: dffffc0000000000 R13: ffffffff81727590 R14: ffff8881340df628 R15: ffff8881340df628 FS: 00007f29fadf76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 000000013285e000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: trace_sched_wakeup include/trace/events/sched.h:178 [inline] ttwu_do_wakeup+0x468/0x490 kernel/sched/core.c:3782 ttwu_do_activate+0x179/0x2a0 kernel/sched/core.c:3837 ttwu_queue kernel/sched/core.c:4063 [inline] try_to_wake_up+0x5d0/0x1250 kernel/sched/core.c:4392 wake_up_process+0x10/0x20 kernel/sched/core.c:4528 swake_up_locked kernel/sched/swait.c:29 [inline] swake_up_one+0x6a/0x140 kernel/sched/swait.c:52 swake_up_one_online+0x66/0x110 kernel/rcu/tree.c:1082 __rcu_report_exp_rnp+0x1aa/0x1b0 kernel/rcu/tree_exp.h:204 rcu_report_exp_rnp kernel/rcu/tree_exp.h:226 [inline] rcu_preempt_deferred_qs_irqrestore+0x69a/0x960 kernel/rcu/tree_plugin.h:568 rcu_read_unlock_special+0xb2/0x450 kernel/rcu/tree_plugin.h:685 __rcu_read_unlock+0x5e/0xa0 kernel/rcu/tree_plugin.h:427 rcu_read_unlock include/linux/rcupdate.h:832 [inline] page_ext_put+0x1c/0x30 mm/page_ext.c:187 __set_page_owner+0x50/0x60 mm/page_owner.c:216 set_page_owner include/linux/page_owner.h:33 [inline] post_alloc_hook+0x1f5/0x210 mm/page_alloc.c:2672 prep_new_page+0x1c/0x110 mm/page_alloc.c:2679 get_page_from_freelist+0x2ca9/0x2d20 mm/page_alloc.c:4586 __alloc_pages+0x1fa/0x610 mm/page_alloc.c:5930 alloc_slab_page+0x6e/0xf0 include/linux/gfp.h:-1 allocate_slab mm/slub.c:1967 [inline] new_slab+0x98/0x3e0 mm/slub.c:2020 ___slab_alloc+0x70f/0xb70 mm/slub.c:3177 __slab_alloc+0x5e/0xa0 mm/slub.c:3263 slab_alloc_node mm/slub.c:3348 [inline] __kmem_cache_alloc_node+0x204/0x2d0 mm/slub.c:3423 __do_kmalloc_node mm/slab_common.c:937 [inline] __kmalloc_node+0xa2/0x1e0 mm/slab_common.c:945 kmalloc_node include/linux/slab.h:589 [inline] kvmalloc_node+0x28a/0x460 mm/util.c:592 kvmalloc include/linux/slab.h:716 [inline] kvmalloc_array include/linux/slab.h:734 [inline] __ptr_ring_init_queue_alloc include/linux/ptr_ring.h:471 [inline] ptr_ring_init include/linux/ptr_ring.h:489 [inline] skb_array_init include/linux/skb_array.h:182 [inline] pfifo_fast_init+0x10f/0x7a0 net/sched/sch_generic.c:870 qdisc_create_dflt+0x150/0x3a0 net/sched/sch_generic.c:1016 mq_init+0x2c3/0x660 net/sched/sch_mq.c:90 qdisc_create_dflt+0x150/0x3a0 net/sched/sch_generic.c:1016 attach_default_qdiscs net/sched/sch_generic.c:1195 [inline] dev_activate+0x152/0x1110 net/sched/sch_generic.c:1249 __dev_open+0x40d/0x520 net/core/dev.c:1518 __dev_change_flags+0x1f2/0x6b0 net/core/dev.c:8692 dev_change_flags+0x80/0x1a0 net/core/dev.c:8763 dev_ifsioc+0x130/0xd90 net/core/dev_ioctl.c:326 dev_ioctl+0x53c/0xcf0 net/core/dev_ioctl.c:572 sock_do_ioctl+0x252/0x330 net/socket.c:1205 sock_ioctl+0x475/0x700 net/socket.c:1310 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl+0x12f/0x1b0 fs/ioctl.c:856 __x64_sys_ioctl+0x7b/0x90 fs/ioctl.c:856 x64_sys_call+0x58b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f29fc39ce59 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f29fadf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f29fc615fa0 RCX: 00007f29fc39ce59 RDX: 0000200000000500 RSI: 0000000000008914 RDI: 0000000000000004 RBP: 00007f29fc432d6f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f29fc616038 R14: 00007f29fc615fa0 R15: 00007fff26e624f8 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__traceiter_sched_wakeup+0x7d/0xb0 include/trace/events/sched.h:178 Code: 49 8d 7e 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 66 fa 6a 00 49 8b 7f 08 48 89 de 41 ba 5a 69 61 c7 45 03 55 fc 74 02 <0f> 0b 41 ff d5 49 83 c6 18 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 RSP: 0018:ffffc9000dd8ebd0 EFLAGS: 00010817 RAX: 1ffff1102681bec6 RBX: ffff888100322880 RCX: 0000000000080000 RDX: ffffc90001279000 RSI: ffff888100322880 RDI: ffffffff87103e80 RBP: ffffc9000dd8ebf8 R08: ffffffff8792d6ef R09: 1ffffffff0f25add R10: 000000006ca1d066 R11: fffffbfff0f25ade R12: dffffc0000000000 R13: ffffffff81727590 R14: ffff8881340df628 R15: ffff8881340df628 FS: 00007f29fadf76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 000000013285e000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600