CFI failure at __traceiter_bpf_trace_printk+0x75/0xc0 kernel/trace/bpf_trace.h:11 (target: tp_stub_func+0x0/0x10; expected type: 0xf18bd0c0)
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 4681 Comm: syz.0.1629 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
RIP: 0010:__traceiter_bpf_trace_printk+0x75/0xc0 kernel/trace/bpf_trace.h:11
Code: 49 8d 7e 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 3e 09 3a 00 49 8b 7f 08 48 89 de 41 ba 40 2f 74 0e 45 03 55 fc 74 02 <0f> 0b 41 ff d5 49 83 c6 18 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74
RSP: 0018:ffffc90000007808 EFLAGS: 00010082
RAX: 1ffff110224c08c6 RBX: ffff8881f6e334c0 RCX: ffff88811d1c6540
RDX: 0000000000010000 RSI: ffff8881f6e334c0 RDI: ffffffff871ffb20
RBP: ffffc90000007830 R08: ffff8881000554b7 R09: 1ffff1102000aa96
R10: 00000000b3b4964c R11: ffffed102000aa97 R12: dffffc0000000000
R13: ffffffff81729ac0 R14: ffff888112604628 R15: ffff888112604628
FS:  00007f213fea46c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000100000000 CR3: 00000001096eb000 CR4: 00000000003506b0
DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 trace_bpf_trace_printk kernel/trace/bpf_trace.h:11 [inline]
 ____bpf_trace_printk kernel/trace/bpf_trace.c:391 [inline]
 bpf_trace_printk+0x231/0x280 kernel/trace/bpf_trace.c:374
 bpf_prog_ab10edc23ce44ec6+0x35/0x37
 bpf_dispatcher_nop_func include/linux/bpf.h:987 [inline]
 __bpf_prog_run include/linux/filter.h:607 [inline]
 bpf_prog_run include/linux/filter.h:614 [inline]
 bpf_overflow_handler+0x3d0/0x5e0 kernel/events/core.c:10273
 __perf_event_overflow+0x437/0x620 kernel/events/core.c:9448
 perf_event_overflow kernel/events/core.c:9469 [inline]
 perf_swevent_hrtimer+0x400/0x5b0 kernel/events/core.c:10919
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x3bb/0x8e0 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x3c7/0x8c0 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1107 [inline]
 __sysvec_apic_timer_interrupt+0x11e/0x440 arch/x86/kernel/apic/apic.c:1124
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1118 [inline]
 sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1118
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:kasan_check_range+0x0/0x2a0 mm/kasan/generic.c:188
Code: c0 5d c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc 90 90 90 90 90 90 90 90 90 90 90 b8 bf f3 05 3b <b0> 01 48 85 f6 0f 84 c0 01 00 00 55 48 89 e5 41 57 41 56 41 55 41
RSP: 0018:ffffc9000eff7b28 EFLAGS: 00000a02
RAX: f3f3f3f8f1f1f1f1 RBX: ffff88811d1c6540 RCX: ffffffff8500eb82
RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff888132a3b810
RBP: ffffc9000eff7b30 R08: ffff888114221e3f R09: 1ffff110228443c7
R10: dffffc0000000000 R11: ffffed10228443c8 R12: dffffc0000000000
R13: 1ffff92001dfef68 R14: ffff888132a3b810 R15: ffffc9000eff7b60
 instrument_atomic_read_write include/linux/instrumented.h:102 [inline]
 atomic_long_try_cmpxchg_release include/linux/atomic/atomic-instrumented.h:1788 [inline]
 __mutex_unlock_fast kernel/locking/mutex.c:188 [inline]
 mutex_unlock+0x82/0x230 kernel/locking/mutex.c:560
 perf_event_ctx_unlock kernel/events/core.c:1321 [inline]
 perf_ioctl+0x1406/0x1e70 kernel/events/core.c:5838
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:870 [inline]
 __se_sys_ioctl+0x12f/0x1b0 fs/ioctl.c:856
 __x64_sys_ioctl+0x7b/0x90 fs/ioctl.c:856
 x64_sys_call+0x58b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:17
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f213ef9ce59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f213fea4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f213f215fa0 RCX: 00007f213ef9ce59
RDX: 0000000000000003 RSI: 0000000040042408 RDI: 0000000000000004
RBP: 00007f213f032d6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f213f216038 R14: 00007f213f215fa0 R15: 00007ffcef223568
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__traceiter_bpf_trace_printk+0x75/0xc0 kernel/trace/bpf_trace.h:11
Code: 49 8d 7e 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 3e 09 3a 00 49 8b 7f 08 48 89 de 41 ba 40 2f 74 0e 45 03 55 fc 74 02 <0f> 0b 41 ff d5 49 83 c6 18 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74
RSP: 0018:ffffc90000007808 EFLAGS: 00010082
RAX: 1ffff110224c08c6 RBX: ffff8881f6e334c0 RCX: ffff88811d1c6540
RDX: 0000000000010000 RSI: ffff8881f6e334c0 RDI: ffffffff871ffb20
RBP: ffffc90000007830 R08: ffff8881000554b7 R09: 1ffff1102000aa96
R10: 00000000b3b4964c R11: ffffed102000aa97 R12: dffffc0000000000
R13: ffffffff81729ac0 R14: ffff888112604628 R15: ffff888112604628
FS:  00007f213fea46c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000100000000 CR3: 00000001096eb000 CR4: 00000000003506b0
DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
----------------
Code disassembly (best guess):
   0:	c0 5d c3 0f          	rcrb   $0xf,-0x3d(%rbp)
   4:	0b b8 ea ff ff ff    	or     -0x16(%rax),%edi
   a:	c3                   	ret
   b:	0f 0b                	ud2
   d:	b8 ea ff ff ff       	mov    $0xffffffea,%eax
  12:	c3                   	ret
  13:	00 00                	add    %al,(%rax)
  15:	cc                   	int3
  16:	cc                   	int3
  17:	00 00                	add    %al,(%rax)
  19:	cc                   	int3
  1a:	90                   	nop
  1b:	90                   	nop
  1c:	90                   	nop
  1d:	90                   	nop
  1e:	90                   	nop
  1f:	90                   	nop
  20:	90                   	nop
  21:	90                   	nop
  22:	90                   	nop
  23:	90                   	nop
  24:	90                   	nop
  25:	b8 bf f3 05 3b       	mov    $0x3b05f3bf,%eax
* 2a:	b0 01                	mov    $0x1,%al <-- trapping instruction
  2c:	48 85 f6             	test   %rsi,%rsi
  2f:	0f 84 c0 01 00 00    	je     0x1f5
  35:	55                   	push   %rbp
  36:	48 89 e5             	mov    %rsp,%rbp
  39:	41 57                	push   %r15
  3b:	41 56                	push   %r14
  3d:	41 55                	push   %r13
  3f:	41                   	rex.B