jump_label: Fatal kernel bug, unexpected op at preempt_notifier_register+0x10/0xe0 kernel/sched/core.c:4778 [ffffffff8163e9f0] (eb 12 90 48 c7 != 66 90 0f 1f 00)) size:2 type:1 ------------[ cut here ]------------ kernel BUG at arch/x86/kernel/jump_label.c:73! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 1 UID: 0 PID: 5362 Comm: syz.3.26 Not tainted 6.10.0-next-20240719-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 RIP: 0010:__jump_label_patch+0x463/0x490 arch/x86/kernel/jump_label.c:73 Code: e8 d2 f3 5f 00 48 c7 c7 60 4f c5 8b 48 8b 0c 24 48 89 ce 48 89 ca 4d 89 e8 4c 8b 4c 24 08 41 54 e8 12 c0 5d 0a 48 83 c4 08 90 <0f> 0b e8 a6 bf 60 0a e8 a1 f3 5f 00 90 0f 0b e8 99 f3 5f 00 90 0f RSP: 0018:ffffc90003d3f620 EFLAGS: 00010292 RAX: 0000000000000097 RBX: 0000000000000085 RCX: d77385cf415d6100 RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 RBP: ffffc90003d3f748 R08: ffffffff8173f2f9 R09: 1ffff920007a7e60 R10: dffffc0000000000 R11: fffff520007a7e61 R12: 0000000000000001 R13: ffffffff8bc56d81 R14: ffffffff929ef8c0 R15: ffffffff8bc56d81 FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3d51158d60 CR3: 000000007b3f0000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: arch_jump_label_transform_queue+0x68/0x100 arch/x86/kernel/jump_label.c:137 __jump_label_update+0x177/0x3a0 kernel/jump_label.c:493 __static_key_slow_dec_cpuslocked+0x250/0x410 kernel/jump_label.c:293 __static_key_slow_dec kernel/jump_label.c:301 [inline] static_key_slow_dec+0x51/0xa0 kernel/jump_label.c:316 kvm_destroy_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:1362 [inline] kvm_put_kvm+0xf3e/0x1300 arch/x86/kvm/../../../virt/kvm/kvm_main.c:1386 kvm_vm_release+0x46/0x50 arch/x86/kvm/../../../virt/kvm/kvm_main.c:1409 __fput+0x24a/0x8a0 fs/file_table.c:422 task_work_run+0x24f/0x310 kernel/task_work.c:222 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0xa2f/0x27f0 kernel/exit.c:882 do_group_exit+0x207/0x2c0 kernel/exit.c:1031 get_signal+0x16a1/0x1740 kernel/signal.c:2917 arch_do_signal_or_restart+0x96/0x830 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fbcd1175b59 Code: Unable to access opcode bytes at 0x7fbcd1175b2f. RSP: 002b:00007fbcd1f1d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: 0000000000000006 RBX: 00007fbcd1305f60 RCX: 00007fbcd1175b59 RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 RBP: 00007fbcd11e4e5d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007fbcd1305f60 R15: 00007ffe197442f8 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__jump_label_patch+0x463/0x490 arch/x86/kernel/jump_label.c:73 Code: e8 d2 f3 5f 00 48 c7 c7 60 4f c5 8b 48 8b 0c 24 48 89 ce 48 89 ca 4d 89 e8 4c 8b 4c 24 08 41 54 e8 12 c0 5d 0a 48 83 c4 08 90 <0f> 0b e8 a6 bf 60 0a e8 a1 f3 5f 00 90 0f 0b e8 99 f3 5f 00 90 0f RSP: 0018:ffffc90003d3f620 EFLAGS: 00010292 RAX: 0000000000000097 RBX: 0000000000000085 RCX: d77385cf415d6100 RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 RBP: ffffc90003d3f748 R08: ffffffff8173f2f9 R09: 1ffff920007a7e60 R10: dffffc0000000000 R11: fffff520007a7e61 R12: 0000000000000001 R13: ffffffff8bc56d81 R14: ffffffff929ef8c0 R15: ffffffff8bc56d81 FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000002057eff8 CR3: 000000002d07c000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400