CFI failure at __traceiter_mm_lru_insertion+0x75/0xc0 include/trace/events/pagemap.h:28 (target: tp_stub_func+0x0/0x10; expected type: 0x1afd09c9)
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 2449 Comm: syz.4.558 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
RIP: 0010:__traceiter_mm_lru_insertion+0x75/0xc0 include/trace/events/pagemap.h:28
Code: 49 8d 7e 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 9e d0 16 00 49 8b 7f 08 48 89 de 41 ba 37 f6 02 e5 45 03 55 fc 74 02 <0f> 0b 41 ff d5 49 83 c6 18 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74
RSP: 0000:ffffc90000cb7458 EFLAGS: 00010093
RAX: 1ffff1102600d193 RBX: ffffea00053d6300 RCX: ffff88811aba2880
RDX: 0000000000000000 RSI: ffffea00053d6300 RDI: ffffc90000b79000
RBP: ffffc90000cb7480 R08: dffffc0000000000 R09: fffffbfff0ee4bb6
R10: 000000008a435d43 R11: 1ffffffff0ee4bb5 R12: dffffc0000000000
R13: ffffffff817125b0 R14: ffff888130068c90 R15: ffff888130068c90
FS:  00005555726a9500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2f3ef220 CR3: 000000011ff5a000 CR4: 00000000003506a0
DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 trace_mm_lru_insertion include/trace/events/pagemap.h:28 [inline]
 lru_add_fn+0x616/0x660 mm/swap.c:221
 folio_batch_move_lru+0x282/0x470 mm/swap.c:238
 folio_batch_add_and_move mm/swap.c:255 [inline]
 folio_add_lru+0x21c/0x390 mm/swap.c:526
 filemap_add_folio+0x105/0x150 mm/filemap.c:998
 page_cache_ra_unbounded+0x252/0x720 mm/readahead.c:263
 do_page_cache_ra mm/readahead.c:312 [inline]
 page_cache_ra_order+0x36a/0xb70 mm/readahead.c:576
 do_sync_mmap_readahead+0x472/0x980 mm/filemap.c:-1
 filemap_fault+0x697/0x1060 mm/filemap.c:3257
 __do_fault mm/memory.c:4373 [inline]
 do_shared_fault mm/memory.c:4801 [inline]
 do_fault+0xabd/0x1df0 mm/memory.c:4879
 handle_pte_fault mm/memory.c:5171 [inline]
 __handle_mm_fault mm/memory.c:5313 [inline]
 handle_mm_fault+0x12fa/0x2640 mm/memory.c:5453
 do_user_addr_fault+0x905/0x1050 arch/x86/mm/fault.c:1323
 handle_page_fault arch/x86/mm/fault.c:1466 [inline]
 exc_page_fault+0x51/0xb0 arch/x86/mm/fault.c:1522
 asm_exc_page_fault+0x27/0x30 arch/x86/include/asm/idtentry.h:608
RIP: 0033:0x7febc0756b25
Code: e0 e9 a6 fd ff ff c5 fe 6f 4e 20 f7 c1 00 0e 00 00 75 67 49 89 c9 48 8d 4c 16 ff 48 83 ce 3f 4a 8d 7c 0e 01 48 29 f1 48 ff c6 <f3> a4 c4 c1 7e 7f 00 c4 c1 7e 7f 48 20 e9 70 fd ff ff 66 0f 1f 84
RSP: 002b:00007fff1b460c18 EFLAGS: 00010212
RAX: 0000001b2f3ef1e8 RBX: 0000000000016b80 RCX: 0000000000016b48
RDX: 0000000000016b80 RSI: 00007febc01ff040 RDI: 0000001b2f3ef220
RBP: 00007febc1505720 R08: 0000001b2f3ef1e8 R09: ffff802f6f1f01e0
R10: 0000000000000001 R11: 00007febc01ff208 R12: 00007febc01ff008
R13: fffffffffffcb1e8 R14: 0000000000000000 R15: 0000000000000b5c
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__traceiter_mm_lru_insertion+0x75/0xc0 include/trace/events/pagemap.h:28
Code: 49 8d 7e 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 9e d0 16 00 49 8b 7f 08 48 89 de 41 ba 37 f6 02 e5 45 03 55 fc 74 02 <0f> 0b 41 ff d5 49 83 c6 18 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74
RSP: 0000:ffffc90000cb7458 EFLAGS: 00010093
RAX: 1ffff1102600d193 RBX: ffffea00053d6300 RCX: ffff88811aba2880
RDX: 0000000000000000 RSI: ffffea00053d6300 RDI: ffffc90000b79000
RBP: ffffc90000cb7480 R08: dffffc0000000000 R09: fffffbfff0ee4bb6
R10: 000000008a435d43 R11: 1ffffffff0ee4bb5 R12: dffffc0000000000
R13: ffffffff817125b0 R14: ffff888130068c90 R15: ffff888130068c90
FS:  00005555726a9500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2f3ef220 CR3: 000000011ff5a000 CR4: 00000000003506a0
DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600