kthread+0x26d/0x300 kernel/kthread.c:386
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
watchdog: BUG: soft lockup - CPU#0 stuck for 225s! [kworker/u4:2:1187]
Modules linked in:
CPU: 0 PID: 1187 Comm: kworker/u4:2 Not tainted 6.1.75-syzkaller-00007-g338203a81721 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:csd_lock_wait kernel/smp.c:453 [inline]
RIP: 0010:smp_call_function_many_cond+0x851/0x930 kernel/smp.c:998
Code: 3e 44 89 fe 83 e6 01 31 ff e8 0b 9e 09 00 41 83 e7 01 49 bf 00 00 00 00 00 fc ff df 75 0a e8 46 9a 09 00 e9 2f ff ff ff f3 90 <42> 0f b6 04 3b 84 c0 75 14 41 f7 06 01 00 00 00 0f 84 12 ff ff ff
RSP: 0018:ffffc900027c7840 EFLAGS: 00000293
RAX: ffffffff816bc3fc RBX: 1ffff1103ee27705 RCX: ffff888111dc6540
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc900027c7958 R08: ffffffff816bc3c5 R09: ffffed103ee0707b
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
R13: 0000000800000000 R14: ffff8881f713b828 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005628c855d140 CR3: 0000000006c0f000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 </IRQ>
 <TASK>
 on_each_cpu_cond_mask+0x40/0x80 kernel/smp.c:1166
 on_each_cpu include/linux/smp.h:71 [inline]
 text_poke_sync arch/x86/kernel/alternative.c:1329 [inline]
 text_poke_bp_batch+0x1e9/0x730 arch/x86/kernel/alternative.c:1529
 text_poke_flush arch/x86/kernel/alternative.c:1720 [inline]
 text_poke_finish+0x1a/0x30 arch/x86/kernel/alternative.c:1727
 arch_jump_label_transform_apply+0x15/0x30 arch/x86/kernel/jump_label.c:146
 __jump_label_update+0x36a/0x380 kernel/jump_label.c:455
 jump_label_update+0x3af/0x450 kernel/jump_label.c:801
 static_key_enable_cpuslocked+0x12f/0x250 kernel/jump_label.c:177
 static_key_enable+0x1a/0x30 kernel/jump_label.c:190
 toggle_allocation_gate+0xbf/0x450 mm/kfence/core.c:804
 process_one_work+0x73d/0xcb0 kernel/workqueue.c:2299
 worker_thread+0xa60/0x1260 kernel/workqueue.c:2446
 kthread+0x26d/0x300 kernel/kthread.c:386
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 21184 Comm: syz-executor.3 Not tainted 6.1.75-syzkaller-00007-g338203a81721 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
RIP: 0010:__preempt_count_add arch/x86/include/asm/preempt.h:80 [inline]
RIP: 0010:preempt_count_add+0x3d/0x1a0 kernel/sched/core.c:5874
Code: c1 e8 03 49 bf 00 00 00 00 00 fc ff df 42 0f b6 04 38 84 c0 0f 85 fb 00 00 00 83 3d 0c f9 23 06 00 75 07 65 8b 05 4b 17 b3 7e <65> 01 1d 44 17 b3 7e 48 c7 c0 80 4f 73 87 48 c1 e8 03 42 0f b6 04
RSP: 0018:ffffc900001b0c18 EFLAGS: 00000046
RAX: 0000000000010000 RBX: 0000000000000001 RCX: ffffffff87734f03
RDX: 0000000000010000 RSI: 0000000000000046 RDI: 0000000000000001
RBP: ffffc900001b0c30 R08: ffffffff84f406a8 R09: ffff888115f16f10
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: ffff88810d7d6938 R14: dffffc0000000000 R15: dffffc0000000000
FS:  0000555556dd2480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000010e839000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 __raw_spin_lock include/linux/spinlock_api_smp.h:132 [inline]
 _raw_spin_lock+0x6e/0x1b0 kernel/locking/spinlock.c:154
 spin_lock include/linux/spinlock.h:350 [inline]
 snd_hrtimer_callback+0x58/0x330 sound/core/hrtimer.c:38
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x41a/0xad0 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x40c/0xaa0 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x3c0 arch/x86/kernel/apic/apic.c:1112
 sysvec_apic_timer_interrupt+0x95/0xc0 arch/x86/kernel/apic/apic.c:1106
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0010:__sanitizer_cov_trace_pc+0x1/0x60 kernel/kcov.c:200
Code: 00 00 00 00 00 0f 1f 40 00 55 48 89 e5 53 48 89 fb e8 13 00 00 00 48 8b 3d 14 aa d9 05 48 89 de e8 14 24 46 00 5b 5d c3 cc 55 <48> 89 e5 48 8b 45 08 65 48 8b 0d 90 0f 8d 7e 65 8b 15 91 0f 8d 7e
RSP: 0018:ffffc90004aafbf0 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000020012 RCX: ffff88811c8a6540
RDX: ffff88811c8a6540 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90004aafc70 R08: ffffffff83e3cc69 R09: 0000000000000003
R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88810ebc4678
R13: 1ffff11021d7ee4f R14: dffffc0000000000 R15: ffff88810d7d6800
 snd_timer_close sound/core/timer.c:463 [inline]
 snd_timer_user_release+0x121/0x2c0 sound/core/timer.c:1520
 __fput+0x3ab/0x870 fs/file_table.c:320
 ____fput+0x15/0x20 fs/file_table.c:348
 task_work_run+0x24d/0x2e0 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 exit_to_user_mode_loop+0x94/0xa0 kernel/entry/common.c:171
 exit_to_user_mode_prepare+0x5a/0xa0 kernel/entry/common.c:204
 __syscall_exit_to_user_mode_work kernel/entry/common.c:286 [inline]
 syscall_exit_to_user_mode+0x26/0x140 kernel/entry/common.c:297
 do_syscall_64+0x49/0xb0 arch/x86/entry/common.c:87
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f3ab8e7cd5a
Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24
RSP: 002b:00007ffda49f23f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f3ab8e7cd5a
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 0000000000000032 R08: 0000001b2e760000 R09: 00007f3ab8fabf8c
R10: 00007ffda49f2540 R11: 0000000000000293 R12: 00007f3ab8a00450
R13: ffffffffffffffff R14: 00007f3ab8a00000 R15: 0000000000117ac3
 </TASK>