syzbot

watchdog: BUG: soft lockup - CPU#0 stuck for 123s! [syz-executor.2:16486]
Modules linked in:
irq event stamp: 34466
hardirqs last  enabled at (34465): [<ffffffff81006673>] trace_hardirqs_on_thunk+0x1a/0x1c
hardirqs last disabled at (34466): [<ffffffff8100668f>] trace_hardirqs_off_thunk+0x1a/0x1c
softirqs last  enabled at (5630): [<ffffffff87400662>] __do_softirq+0x662/0x95a kernel/softirq.c:320
softirqs last disabled at (5539): [<ffffffff8144e4e0>] invoke_softirq kernel/softirq.c:374 [inline]
softirqs last disabled at (5539): [<ffffffff8144e4e0>] irq_exit+0x180/0x1d0 kernel/softirq.c:414
CPU: 0 PID: 16486 Comm: syz-executor.2 Not tainted 5.1.0-rc6+ #89
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x20 kernel/kcov.c:188
Code: f6 fe ff ff 5d c3 0f 1f 40 00 55 0f b7 d6 0f b7 f7 bf 03 00 00 00 48 89 e5 48 8b 4d 08 e8 d8 fe ff ff 5d c3 66 0f 1f 44 00 00 <55> 89 f2 89 fe bf 05 00 00 00 48 89 e5 48 8b 4d 08 e8 ba fe ff ff
RSP: 0018:ffff88805715f858 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13
RAX: ffff888096aaa4c0 RBX: 1ffff1100ae2bf10 RCX: ffffffff8166051c
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffff88805715f938 R08: ffff888096aaa4c0 R09: ffffed1015d25be9
R10: ffffed1015d25be8 R11: ffff8880ae92df47 R12: 0000000000000001
R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
FS:  00000000029ce940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020bf7000 CR3: 000000009f2ba000 CR4: 00000000001426f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 smp_call_function_many+0x750/0x8c0 kernel/smp.c:434
 smp_call_function+0x42/0x90 kernel/smp.c:492
 on_each_cpu+0x31/0x200 kernel/smp.c:602
 text_poke_bp+0xde/0x19b arch/x86/kernel/alternative.c:809
 __jump_label_transform+0x263/0x330 arch/x86/kernel/jump_label.c:91
 arch_jump_label_transform+0x2b/0x40 arch/x86/kernel/jump_label.c:99
 __jump_label_update+0x16a/0x210 kernel/jump_label.c:389
 jump_label_update kernel/jump_label.c:752 [inline]
 jump_label_update+0x1ce/0x3d0 kernel/jump_label.c:731
 __static_key_slow_dec_cpuslocked+0x61/0x150 kernel/jump_label.c:228
 __static_key_slow_dec kernel/jump_label.c:238 [inline]
 static_key_slow_dec+0x60/0xa0 kernel/jump_label.c:252
 kvm_arch_vcpu_uninit+0x1b0/0x1f0 arch/x86/kvm/x86.c:9127
 kvm_vcpu_uninit+0x44/0x90 arch/x86/kvm/../../../virt/kvm/kvm_main.c:340
 vmx_free_vcpu+0x16d/0x280 arch/x86/kvm/vmx/vmx.c:6551
 kvm_arch_vcpu_free arch/x86/kvm/x86.c:8741 [inline]
 kvm_free_vcpus arch/x86/kvm/x86.c:9194 [inline]
 kvm_arch_destroy_vm+0x2ce/0x580 arch/x86/kvm/x86.c:9291
 kvm_destroy_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:749 [inline]
 kvm_put_kvm+0x55b/0xc70 arch/x86/kvm/../../../virt/kvm/kvm_main.c:770
 kvm_vcpu_release+0x7b/0xa0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:2500
 __fput+0x2e5/0x8d0 fs/file_table.c:278
 ____fput+0x16/0x20 fs/file_table.c:309
 task_work_run+0x14a/0x1c0 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 exit_to_usermode_loop+0x273/0x2c0 arch/x86/entry/common.c:166
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x52d/0x610 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x412b61
Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
RSP: 002b:0000000000a4fbc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000412b61
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
RBP: 0000000000000001 R08: 00000000a83c324e R09: 00000000a83c3252
R10: 0000000000a4fca0 R11: 0000000000000293 R12: 00000000007415a0
R13: 00000000000c6969 R14: 00000000000c6996 R15: 000000000073bf0c
Sending NMI from CPU 0 to CPUs 1: