CFI failure at __traceiter_sched_switch+0xa2/0xe0 include/trace/events/sched.h:222 (target: tp_stub_func+0x0/0x20; expected type: 0x57a9bbe6) Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 1 UID: 0 PID: 1160 Comm: syz.1.291 Not tainted syzkaller #0 55bf8b22bdada172f4c106b01602b1dfb2209583 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:__traceiter_sched_switch+0xa2/0xe0 include/trace/events/sched.h:222 Code: 00 74 05 e8 a0 02 86 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 49 89 db 41 ba 1a 44 56 a8 45 03 53 f1 74 02 <0f> 0b 41 ff d3 0f 1f 00 49 83 c6 18 4c 89 f0 48 c1 e8 03 42 80 3c RSP: 0018:ffffc9000100f550 EFLAGS: 00010017 RAX: 1ffff11022d71d13 RBX: ffffffff8188bff0 RCX: ffff888121a1b900 RDX: ffff888121a1a600 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc9000100f590 R08: 0000000000000000 R09: 1ffffffff0fd980d R10: 0000000009079e87 R11: ffffffff8188bff0 R12: 0000000000000001 R13: ffff888116b8e890 R14: ffff888116b8e890 R15: dffffc0000000000 FS: 00007f0e645276c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f0e635eb7c0 CR3: 000000011741e000 CR4: 00000000003526b0 Call Trace: trace_sched_switch include/trace/events/sched.h:222 [inline] __schedule+0x1cb1/0x20b0 kernel/sched/core.c:7867 preempt_schedule_common+0x2d/0x60 kernel/sched/core.c:8059 preempt_schedule+0xc5/0xe0 kernel/sched/core.c:8083 preempt_schedule_thunk+0x1a/0x40 arch/x86/entry/thunk.S:12 on_each_cpu_cond_mask+0x81/0x90 kernel/smp.c:1051 on_each_cpu include/linux/smp.h:71 [inline] text_poke_sync arch/x86/kernel/alternative.c:2284 [inline] text_poke_bp_batch+0x1e0/0x6e0 arch/x86/kernel/alternative.c:2494 text_poke_flush arch/x86/kernel/alternative.c:2685 [inline] text_poke_finish+0x34/0x60 arch/x86/kernel/alternative.c:2692 arch_jump_label_transform_apply+0x1e/0x40 arch/x86/kernel/jump_label.c:146 __jump_label_update+0x38f/0x3b0 kernel/jump_label.c:521 jump_label_update+0x395/0x440 kernel/jump_label.c:920 static_key_disable_cpuslocked+0xcd/0x1b0 kernel/jump_label.c:240 static_key_disable+0x1e/0x30 kernel/jump_label.c:248 tracepoint_remove_func kernel/tracepoint.c:420 [inline] tracepoint_probe_unregister+0x656/0x990 kernel/tracepoint.c:554 unregister_trace_sched_wakeup_new include/trace/events/sched.h:185 [inline] tracing_sched_unregister kernel/trace/trace_sched_switch.c:88 [inline] tracing_stop_sched_switch kernel/trace/trace_sched_switch.c:129 [inline] tracing_stop_cmdline_record+0x84/0xb0 kernel/trace/trace_sched_switch.c:140 __ftrace_event_enable_disable+0x4c3/0x7a0 kernel/trace/trace_events.c:793 ftrace_event_enable_disable kernel/trace/trace_events.c:880 [inline] event_enable_write+0x1ca/0x290 kernel/trace/trace_events.c:1587 vfs_write+0x3c1/0xfd0 fs/read_write.c:682 ksys_write+0x145/0x260 fs/read_write.c:737 __do_sys_write fs/read_write.c:749 [inline] __se_sys_write fs/read_write.c:746 [inline] __x64_sys_write+0x7f/0x90 fs/read_write.c:746 x64_sys_call+0x271c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:2 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f0e6359e0d9 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f0e64527028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f0e63825fa0 RCX: 00007f0e6359e0d9 RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000003 RBP: 00007f0e64527090 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007f0e63826038 R14: 00007f0e63825fa0 R15: 00007fff68e7cf68 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__traceiter_sched_switch+0xa2/0xe0 include/trace/events/sched.h:222 Code: 00 74 05 e8 a0 02 86 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 49 89 db 41 ba 1a 44 56 a8 45 03 53 f1 74 02 <0f> 0b 41 ff d3 0f 1f 00 49 83 c6 18 4c 89 f0 48 c1 e8 03 42 80 3c RSP: 0018:ffffc9000100f550 EFLAGS: 00010017 RAX: 1ffff11022d71d13 RBX: ffffffff8188bff0 RCX: ffff888121a1b900 RDX: ffff888121a1a600 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc9000100f590 R08: 0000000000000000 R09: 1ffffffff0fd980d R10: 0000000009079e87 R11: ffffffff8188bff0 R12: 0000000000000001 R13: ffff888116b8e890 R14: ffff888116b8e890 R15: dffffc0000000000 FS: 00007f0e645276c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f0e635eb7c0 CR3: 000000011741e000 CR4: 00000000003526b0