kthread+0x34b/0x3d0 kernel/kthread.c:313
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
watchdog: BUG: soft lockup - CPU#1 stuck for 122s! [syz.1.1346:6133]
Modules linked in:
CPU: 1 PID: 6133 Comm: syz.1.1346 Not tainted 5.10.232-syzkaller-00746-g49e8ba0a684f #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:__sanitizer_cov_trace_pc+0x1/0x60 kernel/kcov.c:190
Code: 00 00 0f 0b 0f 1f 44 00 00 55 48 89 e5 53 48 89 fb e8 13 00 00 00 48 8b 3d d4 0f 79 05 48 89 de e8 e4 f2 3c 00 5b 5d c3 cc 55 <48> 89 e5 48 8b 45 08 65 48 8b 0d f0 ae 97 7e 65 8b 15 f5 ae 97 7e
RSP: 0018:ffffc90000db76b0 EFLAGS: 00000202
RAX: 0000000000000000 RBX: 1ffff920001b6ee1 RCX: ffff888114652780
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc90000db77b0 R08: ffffffff815fd546 R09: ffffed103ee0aec9
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: 0000000000000001 R14: ffffc90000db7708 R15: 0000000000000000
FS:  0000555559657500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020bbdffc CR3: 000000010dd21000 CR4: 00000000003526a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 </IRQ>
 smp_call_function_many_cond+0x94e/0xa30 kernel/smp.c:653
 smp_call_function_many kernel/smp.c:716 [inline]
 smp_call_function kernel/smp.c:738 [inline]
 on_each_cpu+0xa8/0x1a0 kernel/smp.c:837
 text_poke_sync arch/x86/kernel/alternative.c:1318 [inline]
 text_poke_bp_batch+0x1d4/0x600 arch/x86/kernel/alternative.c:1509
 text_poke_bp+0xc8/0x140 arch/x86/kernel/alternative.c:1723
 __static_call_transform+0x1be/0x290 arch/x86/kernel/static_call.c:57
 arch_static_call_transform+0x7f/0x1d0 arch/x86/kernel/static_call.c:101
 __static_call_update+0xd2/0x5d0 kernel/static_call.c:136
 tracepoint_update_call kernel/tracepoint.c:338 [inline]
 tracepoint_remove_func kernel/tracepoint.c:462 [inline]
 tracepoint_probe_unregister+0x8d1/0x9e0 kernel/tracepoint.c:572
 bpf_probe_unregister+0x61/0x70 kernel/trace/bpf_trace.c:2135
 bpf_raw_tp_link_release+0x63/0x90 kernel/bpf/syscall.c:2762
 bpf_link_free kernel/bpf/syscall.c:2356 [inline]
 bpf_link_put+0x1fd/0x280 kernel/bpf/syscall.c:2382
 bpf_link_release+0x3b/0x40 kernel/bpf/syscall.c:2390
 __fput+0x33d/0x7b0 fs/file_table.c:281
 ____fput+0x15/0x20 fs/file_table.c:314
 task_work_run+0x129/0x190 kernel/task_work.c:189
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 exit_to_user_mode_loop+0xbf/0xd0 kernel/entry/common.c:172
 exit_to_user_mode_prepare kernel/entry/common.c:199 [inline]
 syscall_exit_to_user_mode+0xa2/0x1a0 kernel/entry/common.c:274
 do_syscall_64+0x40/0x70 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7fef0c312d29
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd62589ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007fef0c504ba0 RCX: 00007fef0c312d29
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 00007fef0c504ba0 R08: 0000000000000080 R09: 00007ffd6258a1ef
R10: 00000000003ffd5c R11: 0000000000000246 R12: 00000000000bed5b
R13: 00007ffd6258a000 R14: 0000000000000032 R15: ffffffffffffffff
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 6137 Comm: syz.0.1348 Not tainted 5.10.232-syzkaller-00746-g49e8ba0a684f #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:__vga_put drivers/gpu/vga/vgaarb.c:421 [inline]
RIP: 0010:vga_put drivers/gpu/vga/vgaarb.c:582 [inline]
RIP: 0010:vga_arb_release+0x340/0x950 drivers/gpu/vga/vgaarb.c:1370
Code: 83 e3 fe 48 8b 45 c8 42 0f b6 04 38 84 c0 0f 85 91 01 00 00 48 8b 45 d0 89 18 49 83 c6 28 4c 89 f0 48 c1 e8 03 42 0f b6 04 38 <84> c0 0f 85 13 01 00 00 41 8b 1e 31 ff 89 de e8 ac 7a a0 fe 85 db
RSP: 0018:ffffc90000e17d78 EFLAGS: 00000806
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88810d0c62c0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90000e17e08 R08: ffffffff82ca46e9 R09: 0000000000000003
R10: fffff520001c2f9c R11: dffffc0000000001 R12: 0000000000000000
R13: ffffffff86a20680 R14: ffff888105b99ca8 R15: dffffc0000000000
FS:  0000555572adb500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020533fa0 CR3: 0000000114d92000 CR4: 00000000003526b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 __fput+0x33d/0x7b0 fs/file_table.c:281
 ____fput+0x15/0x20 fs/file_table.c:314
 task_work_run+0x129/0x190 kernel/task_work.c:189
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 exit_to_user_mode_loop+0xbf/0xd0 kernel/entry/common.c:172
 exit_to_user_mode_prepare kernel/entry/common.c:199 [inline]
 syscall_exit_to_user_mode+0xa2/0x1a0 kernel/entry/common.c:274
 do_syscall_64+0x40/0x70 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7eff51724d29
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff44902718 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00000000000bea2f RCX: 00007eff51724d29
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 00007eff51916ba0 R08: 0000000000000001 R09: 00007fff44902a0f
R10: 00007eff5159f000 R11: 0000000000000246 R12: 00000000000bea8b
R13: 00007eff51914fa0 R14: 0000000000000032 R15: ffffffffffffffff