TITLE: BUG: soft lockup in perf_release
TYPE: HANG

[ 1098.601132][    C2] watchdog: BUG: soft lockup - CPU#2 stuck for 136s! [syz-executor4:4888]
[ 1098.605452][    C2] Modules linked in:
[ 1098.606265][    C2] irq event stamp: 79894
[ 1098.606820][    C2] hardirqs last  enabled at (79893): [<ffffffff81007bd9>] trace_hardirqs_on_thunk+0x1a/0x1c
[ 1098.608649][    C2] hardirqs last disabled at (79894): [<ffffffff81007bf5>] trace_hardirqs_off_thunk+0x1a/0x1c
[ 1098.609960][    C2] softirqs last  enabled at (0): [<ffffffff814aaac4>] copy_process+0x1d14/0x8720
[ 1098.611510][    C2] softirqs last disabled at (0): [<0000000000000000>]           (null)
[ 1098.613062][    C2] CPU: 2 PID: 4888 Comm: syz-executor4 Not tainted 4.20.0-next-20190102+ #5
[ 1098.614698][    C2] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 1098.616349][    C2] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0xd/0x20
[ 1098.617620][    C2] Code: d6 0f b7 f7 bf 03 00 00 00 48 89 e5 48 8b 4d 08 e8 d8 fe ff ff 5d c3 66 0f 1f 44 00 00 55 89 f2 89 fe bf 05 00 00 00 48 89 e5 <48> 8b 4d 08 e8 ba fe ff ff 5d c3 0f 1f 84 00 00 00 00 00 55 48 89
[ 1098.620395][    C2] RSP: 0018:ffff88803b35f218 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[ 1098.621529][    C2] RAX: 0000000000000004 RBX: ffffed100766be5a RCX: ffffffff81759ae5
[ 1098.622602][    C2] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005
[ 1098.623674][    C2] RBP: ffff88803b35f218 R08: ffff88805a72a540 R09: ffff88805a72ae80
[ 1098.624721][    C2] R10: ffff88805a72a540 R11: 0000000000000000 R12: ffff88806c437fe0
[ 1098.625772][    C2] R13: 0000000000000001 R14: ffff88803b35f310 R15: 0000000000000003
[ 1098.626836][    C2] FS:  0000000001b86940(0000) GS:ffff88806c480000(0000) knlGS:0000000000000000
[ 1098.628024][    C2] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1098.628909][    C2] CR2: 0000001b2d423000 CR3: 000000003ce21003 CR4: 00000000001606e0
[ 1098.629973][    C2] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1098.631040][    C2] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1098.632107][    C2] Call Trace:
[ 1098.632573][    C2]  smp_call_function_many+0x8d5/0xb10
[ 1098.637451][    C2]  smp_call_function+0x42/0x90
[ 1098.638671][    C2]  on_each_cpu+0x31/0x200
[ 1098.640009][    C2]  text_poke_bp+0x101/0x1e5
[ 1098.644345][    C2]  __jump_label_transform+0x33f/0x4d0
[ 1098.647841][    C2]  arch_jump_label_transform+0x2b/0x40
[ 1098.648594][    C2]  __jump_label_update+0x16a/0x210
[ 1098.649296][    C2]  jump_label_update+0x1ce/0x3d0
[ 1098.649976][    C2]  __static_key_slow_dec_cpuslocked+0xc5/0x220
[ 1098.652283][    C2]  static_key_slow_dec+0x60/0xa0
[ 1098.652960][    C2]  tracepoint_probe_unregister+0x73e/0x940
[ 1098.660208][    C2]  trace_event_reg+0x189/0x350
[ 1098.661664][    C2]  perf_trace_event_unreg.isra.0+0xbb/0x220
[ 1098.662468][    C2]  perf_trace_destroy+0xc1/0x100
[ 1098.663853][    C2]  tp_perf_event_destroy+0x16/0x20
[ 1098.664551][    C2]  _free_event+0x3ee/0x1640
[ 1098.667119][    C2]  put_event+0x47/0x60
[ 1098.667706][    C2]  perf_event_release_kernel+0x890/0xf70
[ 1098.676219][    C2]  perf_release+0x37/0x50
[ 1098.676768][    C2]  __fput+0x3c5/0xb10
[ 1098.681592][    C2]  ____fput+0x16/0x20
[ 1098.682129][    C2]  task_work_run+0x1f4/0x2b0
[ 1098.684692][    C2]  exit_to_usermode_loop+0x32a/0x3b0
[ 1098.687763][    C2]  do_syscall_64+0x696/0x800
[ 1098.690774][    C2]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1098.691576][    C2] RIP: 0033:0x411071
[ 1098.692132][    C2] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 74 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 1098.694803][    C2] RSP: 002b:00007ffffa2d80d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 1098.695946][    C2] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000411071
[ 1098.697031][    C2] RDX: 0000001b2d420000 RSI: 00007fd53b7c3510 RDI: 0000000000000003
[ 1098.698108][    C2] RBP: 0000000000000000 R08: 00007fd53b7c3048 R09: 000000003df39a59
[ 1098.699185][    C2] R10: 00007ffffa2d8000 R11: 0000000000000293 R12: 0000000000000001
[ 1098.700267][    C2] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffffa2d8190
[ 1098.701358][    C2] Sending NMI from CPU 2 to CPUs 0-1,3:
[ 1098.702519][    C1] NMI backtrace for cpu 1
[ 1098.702523][    C1] CPU: 1 PID: 22149 Comm: kworker/1:1 Not tainted 4.20.0-next-20190102+ #5
[ 1098.702527][    C1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 1098.702529][    C1] Workqueue: rcu_gp process_srcu
[ 1098.702533][    C1] RIP: 0010:delay_tsc+0x33/0xc0
[ 1098.702540][    C1] Code: bf 01 00 00 00 41 55 41 54 53 e8 58 18 66 f9 e8 f3 ad 9f fb 41 89 c5 0f ae e8 0f 31 48 c1 e2 20 48 09 c2 49 89 d4 eb 16 f3 90 <bf> 01 00 00 00 e8 33 18 66 f9 e8 ce ad 9f fb 44 39 e8 75 36 0f ae
[ 1098.702542][    C1] RSP: 0018:ffff88803ce475a0 EFLAGS: 00000286
[ 1098.702547][    C1] RAX: 0000000080000000 RBX: 0000029824c8de8b RCX: 0000000000000000
[ 1098.702550][    C1] RDX: 0000000000000004 RSI: ffffffff8391c828 RDI: 0000000000000001
[ 1098.702553][    C1] RBP: ffff88803ce475c0 R08: ffff88806b55c240 R09: fffffbfff16b1885
[ 1098.702556][    C1] R10: ffff88803ce47710 R11: ffffffff8b58c427 R12: 0000029824c8d990
[ 1098.702560][    C1] R13: 0000000000000001 R14: 00000000000032ab R15: ffffffff8b58c080
[ 1098.702563][    C1] FS:  0000000000000000(0000) GS:ffff88806c440000(0000) knlGS:0000000000000000
[ 1098.702566][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1098.702569][    C1] CR2: ffffffffff600400 CR3: 000000005ad83004 CR4: 00000000001606e0
[ 1098.702570][    C1] Call Trace:
[ 1098.702573][    C1]  __const_udelay+0x5f/0x80
[ 1098.702575][    C1]  try_check_zero+0x352/0x5c0
[ 1098.702583][    C1]  process_srcu+0x642/0x1400
[ 1098.702620][    C1]  process_one_work+0xd0c/0x1ce0
[ 1098.702653][    C1]  worker_thread+0x143/0x14a0
[ 1098.702685][    C1]  kthread+0x357/0x430
[ 1098.702691][    C1]  ret_from_fork+0x3a/0x50
[ 1098.703114][    C2] NMI backtrace for cpu 0
[ 1098.703118][    C2] CPU: 0 PID: 3681 Comm: udevd Not tainted 4.20.0-next-20190102+ #5
[ 1098.703121][    C2] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 1098.703124][    C2] RIP: 0010:native_queued_spin_lock_slowpath+0x323/0x1290
[ 1098.703131][    C2] Code: 00 00 00 fc ff df 49 c1 ec 03 4d 01 fc 45 84 f6 41 c6 04 24 f8 74 4f 4c 89 ee 83 e6 07 83 c6 03 f3 90 4c 89 e8 41 c6 04 24 04 <48> c1 e8 03 42 0f b6 04 38 40 38 c6 7c 08 84 c0 0f 85 f5 09 00 00
[ 1098.703134][    C2] RSP: 0000:ffff88806c4077f8 EFLAGS: 00000002
[ 1098.703139][    C2] RAX: ffff88806b9f4798 RBX: ffff88806c4079a0 RCX: ffff88806c4078b0
[ 1098.703142][    C2] RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffff88806b9f4798
[ 1098.703145][    C2] RBP: ffff88806c4079c8 R08: 1ffff1100d73e8f3 R09: ffffed100d73e8f4
[ 1098.703148][    C2] R10: ffffed100d73e8f3 R11: ffff88806b9f479b R12: ffffed100d880f16
[ 1098.703151][    C2] R13: ffff88806b9f4798 R14: 0000000000000101 R15: dffffc0000000000
[ 1098.703154][    C2] FS:  00007fdf8d22a7a0(0000) GS:ffff88806c400000(0000) knlGS:0000000000000000
[ 1098.703157][    C2] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1098.703160][    C2] CR2: 00000000023997d0 CR3: 000000006b1bd002 CR4: 00000000001606f0
[ 1098.703162][    C2] Call Trace:
[ 1098.703163][    C2]  <IRQ>
[ 1098.703180][    C2]  do_raw_spin_lock+0x2af/0x360
[ 1098.703189][    C2]  _raw_spin_lock+0x37/0x40
[ 1098.703193][    C2]  drm_handle_vblank+0x154/0xc70
[ 1098.703213][    C2]  drm_crtc_handle_vblank+0x63/0x90
[ 1098.703218][    C2]  vkms_vblank_simulate+0x61/0x290
[ 1098.703220][    C2]  __hrtimer_run_queues+0x3a7/0x1050
[ 1098.703241][    C2]  hrtimer_interrupt+0x314/0x770
[ 1098.703243][    C2]  smp_apic_timer_interrupt+0x18d/0x760
[ 1098.703259][    C2]  apic_timer_interrupt+0xf/0x20
[ 1098.703261][    C2]  </IRQ>
[ 1098.703263][    C2] RIP: 0033:0x4179c0
[ 1098.703270][    C2] Code: 40 00 48 8d 3d 3a 88 00 00 b9 09 00 00 00 48 89 de f3 a6 0f 84 91 01 00 00 48 8d 3d 2d 88 00 00 b9 05 00 00 00 48 89 de f3 a6 <0f> 84 22 02 00 00 48 8d 3d 1c 88 00 00 b9 12 00 00 00 48 89 de f3
[ 1098.703273][    C2] RSP: 002b:00007fff245ca880 EFLAGS: 00000297 ORIG_RAX: ffffffffffffff13
[ 1098.703278][    C2] RAX: 0000000000000000 RBX: 00007fff245cae1f RCX: 0000000000000004
[ 1098.703281][    C2] RDX: 0000000000000000 RSI: 00007fff245cae20 RDI: 00000000004201e4
[ 1098.703284][    C2] RBP: 00000000023a3f90 R08: 00007fff245cae1f R09: 00007fdf8c98a3f0
[ 1098.703287][    C2] R10: 00000000023a0920 R11: 00000000023a4ce0 R12: 00007fff245cad80
[ 1098.703291][    C2] R13: 00000000000000ac R14: 00000000023872d0 R15: 00007fff245cae1f
[ 1098.703295][    C2] NMI backtrace for cpu 3
[ 1098.703298][    C2] CPU: 3 PID: 4874 Comm: udevd Not tainted 4.20.0-next-20190102+ #5
[ 1098.703302][    C2] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 1098.703304][    C2] RIP: 0010:lock_acquire+0x27d/0x570
[ 1098.703314][    C2] Code: 48 ff ff ff 57 9d 0f 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 48 03 85 40 ff ff ff 48 c7 00 00 00 00 00 c7 40 08 00 00 00 00 <48> 8b 45 d0 65 48 33 04 25 28 00 00 00 0f 85 77 02 00 00 48 8d 65
[ 1098.703317][    C2] RSP: 0018:ffff88806c4c75d8 EFLAGS: 00000086
[ 1098.703321][    C2] RAX: ffffed100d898ec0 RBX: ffff88805034c100 RCX: 0000000000000000
[ 1098.703324][    C2] RDX: dffffc0000000000 RSI: 00000000000046f9 RDI: 0000000000000086
[ 1098.703327][    C2] RBP: ffff88806c4c76a8 R08: 0000000000000005 R09: ffff88805034ca68
[ 1098.703331][    C2] R10: ffff88805034ca48 R11: 0000000000000001 R12: ffff88806c425d58
[ 1098.703334][    C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1098.703337][    C2] FS:  00007fdf8d22a7a0(0000) GS:ffff88806c4c0000(0000) knlGS:0000000000000000
[ 1098.703340][    C2] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1098.703343][    C2] CR2: 0000000000625208 CR3: 0000000020393002 CR4: 00000000001606e0
[ 1098.703344][    C2] Call Trace:
[ 1098.703346][    C2]  <IRQ>
[ 1098.703357][    C2]  _raw_spin_lock_irqsave+0x95/0xcd
[ 1098.703362][    C2]  lock_hrtimer_base.isra.0+0x75/0x130
[ 1098.703364][    C2]  hrtimer_try_to_cancel+0xfe/0x6b0
[ 1098.703378][    C2]  hrtimer_cancel+0x20/0x40
[ 1098.703380][    C2]  vkms_disable_vblank+0x19/0x20
[ 1098.703382][    C2]  drm_vblank_disable_and_save+0x391/0x4a0
[ 1098.703394][    C2]  vblank_disable_fn+0x22c/0x280
[ 1098.703399][    C2]  call_timer_fn+0x254/0x900
[ 1098.703424][    C2]  __run_timers+0x6fc/0xd50
[ 1098.703452][    C2]  run_timer_softirq+0x52/0xb0
[ 1098.703457][    C2]  __do_softirq+0x30b/0xb11
[ 1098.703475][    C2]  irq_exit+0x180/0x1d0
[ 1098.703477][    C2]  smp_apic_timer_interrupt+0x1b7/0x760
[ 1098.703493][    C2]  apic_timer_interrupt+0xf/0x20
[ 1098.703495][    C2]  </IRQ>
[ 1098.703497][    C2] RIP: 0010:handle_mm_fault+0x7f4/0xc80
[ 1098.703504][    C2] Code: 48 c1 e8 03 80 3c 10 00 0f 85 c9 03 00 00 48 83 3d 70 ce db 07 00 0f 84 ff 02 00 00 e8 75 4f cb ff 48 8b bd 70 ff ff ff 57 9d <0f> 1f 44 00 00 e9 98 fb ff ff e8 5d 4f cb ff 48 ba 00 00 00 00 00
[ 1098.703507][    C2] RSP: 0018:ffff88800a7ff7b0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
[ 1098.703512][    C2] RAX: ffff88805034c100 RBX: 0000000000000200 RCX: 1ffff1100a069934
[ 1098.703515][    C2] RDX: 0000000000000000 RSI: ffffffff81b6b18b RDI: 0000000000000293
[ 1098.703518][    C2] RBP: ffff88800a7ff858 R08: 0000000000000006 R09: ffff88805034c9a0
[ 1098.703521][    C2] R10: ffff88805034c100 R11: 0000000000000000 R12: ffff8880607ea738
[ 1098.703524][    C2] R13: 0000000000000081 R14: 1ffff110014ffefa R15: 0000000000000000
[ 1098.703533][    C2]  __get_user_pages+0x8f7/0x1e10
[ 1098.703545][    C2]  get_user_pages_remote+0x21d/0x440
[ 1098.703547][    C2]  copy_strings.isra.0+0x3fd/0xa70
[ 1098.703562][    C2]  copy_strings_kernel+0xa5/0x110
[ 1098.703565][    C2]  __do_execve_file.isra.0+0x124e/0x2700
[ 1098.703587][    C2]  __x64_sys_execve+0x8f/0xc0
[ 1098.703590][    C2]  do_syscall_64+0x1a3/0x800
[ 1098.703600][    C2]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1098.703602][    C2] RIP: 0033:0x7fdf8c90e207
[ 1098.703608][    C2] Code: 77 19 f4 48 89 d7 44 89 c0 0f 05 48 3d 00 f0 ff ff 76 e0 f7 d8 64 41 89 01 eb d8 f7 d8 64 41 89 01 eb df b8 3b 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 02 f3 c3 48 8b 15 00 8c 2d 00 f7 d8 64 89 02
[ 1098.703611][    C2] RSP: 002b:00007fff245c5488 EFLAGS: 00000206 ORIG_RAX: 000000000000003b
[ 1098.703616][    C2] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007fdf8c90e207
[ 1098.703619][    C2] RDX: 0000000002398aa0 RSI: 00007fff245c5580 RDI: 00007fff245c6590
[ 1098.703622][    C2] RBP: 0000000000625500 R08: 0000000000001ca3 R09: 0000000000001ca3
[ 1098.703625][    C2] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000002398aa0
[ 1098.703628][    C2] R13: 0000000000000007 R14: 0000000002387250 R15: 0000000000000005
[ 1098.703635][    C2] Kernel panic - not syncing: softlockup: hung tasks
[ 1098.926323][    C2] CPU: 2 PID: 4888 Comm: syz-executor4 Tainted: G             L    4.20.0-next-20190102+ #5
[ 1098.927624][    C2] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 1098.928856][    C2] Call Trace:
[ 1098.929301][    C2]  <IRQ>
[ 1098.929700][    C2]  dump_stack+0x1db/0x2d0
[ 1098.931078][    C2]  panic+0x2cb/0x65c
[ 1098.936771][    C2]  watchdog_timer_fn.cold+0x16/0x33
[ 1098.937481][    C2]  __hrtimer_run_queues+0x3a7/0x1050
[ 1098.944713][    C2]  hrtimer_interrupt+0x314/0x770
[ 1098.945397][    C2]  smp_apic_timer_interrupt+0x18d/0x760
[ 1098.949266][    C2]  apic_timer_interrupt+0xf/0x20
[ 1098.949993][    C2]  </IRQ>
[ 1098.950487][    C2] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0xd/0x20
[ 1098.951483][    C2] Code: d6 0f b7 f7 bf 03 00 00 00 48 89 e5 48 8b 4d 08 e8 d8 fe ff ff 5d c3 66 0f 1f 44 00 00 55 89 f2 89 fe bf 05 00 00 00 48 89 e5 <48> 8b 4d 08 e8 ba fe ff ff 5d c3 0f 1f 84 00 00 00 00 00 55 48 89
[ 1098.955004][    C2] RSP: 0018:ffff88803b35f218 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[ 1098.956602][    C2] RAX: 0000000000000004 RBX: ffffed100766be5a RCX: ffffffff81759ae5
[ 1098.957765][    C2] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005
[ 1098.958789][    C2] RBP: ffff88803b35f218 R08: ffff88805a72a540 R09: ffff88805a72ae80
[ 1098.959808][    C2] R10: ffff88805a72a540 R11: 0000000000000000 R12: ffff88806c437fe0
[ 1098.960835][    C2] R13: 0000000000000001 R14: ffff88803b35f310 R15: 0000000000000003
[ 1098.964552][    C2]  smp_call_function_many+0x8d5/0xb10
[ 1098.971259][    C2]  smp_call_function+0x42/0x90
[ 1098.972893][    C2]  on_each_cpu+0x31/0x200
[ 1098.974688][    C2]  text_poke_bp+0x101/0x1e5
[ 1098.979195][    C2]  __jump_label_transform+0x33f/0x4d0
[ 1098.982659][    C2]  arch_jump_label_transform+0x2b/0x40
[ 1098.983402][    C2]  __jump_label_update+0x16a/0x210
[ 1098.984102][    C2]  jump_label_update+0x1ce/0x3d0
[ 1098.984789][    C2]  __static_key_slow_dec_cpuslocked+0xc5/0x220
[ 1098.987090][    C2]  static_key_slow_dec+0x60/0xa0
[ 1098.987765][    C2]  tracepoint_probe_unregister+0x73e/0x940
[ 1098.994913][    C2]  trace_event_reg+0x189/0x350
[ 1098.996370][    C2]  perf_trace_event_unreg.isra.0+0xbb/0x220
[ 1098.997165][    C2]  perf_trace_destroy+0xc1/0x100
[ 1098.998528][    C2]  tp_perf_event_destroy+0x16/0x20
[ 1098.999215][    C2]  _free_event+0x3ee/0x1640
[ 1099.001769][    C2]  put_event+0x47/0x60
[ 1099.002309][    C2]  perf_event_release_kernel+0x890/0xf70
[ 1099.010804][    C2]  perf_release+0x37/0x50
[ 1099.011391][    C2]  __fput+0x3c5/0xb10
[ 1099.016398][    C2]  ____fput+0x16/0x20
[ 1099.016945][    C2]  task_work_run+0x1f4/0x2b0
[ 1099.019398][    C2]  exit_to_usermode_loop+0x32a/0x3b0
[ 1099.022408][    C2]  do_syscall_64+0x696/0x800
[ 1099.025320][    C2]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1099.026128][    C2] RIP: 0033:0x411071
[ 1099.026675][    C2] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 74 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 1099.029314][    C2] RSP: 002b:00007ffffa2d80d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 1099.030450][    C2] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000411071
[ 1099.031526][    C2] RDX: 0000001b2d420000 RSI: 00007fd53b7c3510 RDI: 0000000000000003
[ 1099.032606][    C2] RBP: 0000000000000000 R08: 00007fd53b7c3048 R09: 000000003df39a59
[ 1099.033686][    C2] R10: 00007ffffa2d8000 R11: 0000000000000293 R12: 0000000000000001
[ 1099.034762][    C2] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffffa2d8190
[ 1100.119903][    C2] Shutting down cpus with NMI
[ 1100.124765][    C2] Dumping ftrace buffer:
[ 1100.125471][    C2] ---------------------------------
[ 1100.126341][    C2] syz-exec-31490   2...1 413720925us : 0: }D
[ 1100.126360][    C2] syz-exec-31490   2...1 413720950us : 0: }D
[ 1100.127252][    C2] syz-exec-31490   2...1 413720952us : 0: }D
[ 1100.128205][    C2] syz-exec-31490   2...1 413720954us : 0: }D
[ 1100.129066][    C2] syz-exec-31490   2...1 413720955us : 0: }D
[ 1100.130010][    C2] syz-exec-31490   2...1 413720957us : 0: }D
[ 1100.130943][    C2] syz-exec-31490   2...1 413720959us : 0: }D
[ 1100.131870][    C2] syz-exec-31490   2...1 413720960us : 0: }D
[ 1100.132686][    C2] syz-exec-31490   2...1 413720962us : 0: }D
[ 1100.133639][    C2] syz-exec-31490   2...1 413720963us : 0: }D
[ 1100.134491][    C2] syz-exec-31490   2...1 413720965us : 0: }D
[ 1100.135435][    C2] syz-exec-31490   2...1 413720967us : 0: }D
[ 1100.136312][    C2] syz-exec-31490   2...1 413720968us : 0: }D
[ 1100.137093][    C2] syz-exec-31490   2...1 413720970us : 0: }D
[ 1100.137881][    C2] syz-exec-31490   2...1 413720971us : 0: }D
[ 1100.138686][    C2] syz-exec-31490   2...1 413720973us : 0: }D
[ 1100.139503][    C2] syz-exec-31490   2...1 413720975us : 0: }D
[ 1100.140328][    C2] syz-exec-31490   2...1 413720976us : 0: }D
[ 1100.141148][    C2] syz-exec-31490   2...1 413720978us : 0: }D
[ 1100.141967][    C2] syz-exec-31490   2...1 413720979us : 0: }D
[ 1100.142785][    C2] syz-exec-31490   2...1 413720981us : 0: }D
[ 1100.143604][    C2] syz-exec-31490   2...1 413720983us : 0: }D
[ 1100.144454][    C2] syz-exec-31490   2...1 413720984us : 0: }D
[ 1100.145270][    C2] syz-exec-31490   2...1 413720986us : 0: }D
[ 1100.146077][    C2] syz-exec-31490   2...1 413720987us : 0: }D
[ 1100.146900][    C2] syz-exec-31490   2...1 413720989us : 0: }D
[ 1100.147709][    C2] syz-exec-31490   2...1 413720991us : 0: }D
[ 1100.148535][    C2] syz-exec-31490   2...1 413720992us : 0: }D
[ 1100.149358][    C2] syz-exec-31490   2...1 413720994us : 0: }D
[ 1100.150183][    C2] syz-exec-31490   2...1 413720995us : 0: }D
[ 1100.151005][    C2] syz-exec-31490   2...1 413720997us : 0: }D
[ 1100.151823][    C2] syz-exec-31490   2...1 413720998us : 0: }D
[ 1100.152649][    C2] syz-exec-31490   2...1 413721000us : 0: }D
[ 1100.153466][    C2] syz-exec-31490   2...1 413721002us : 0: }D
[ 1100.154284][    C2] syz-exec-31490   2...1 413721003us : 0: }D

REPORT:
watchdog: BUG: soft lockup - CPU#2 stuck for 136s! [syz-executor4:4888]
Modules linked in:
irq event stamp: 79894
hardirqs last  enabled at (79893): [<ffffffff81007bd9>] trace_hardirqs_on_thunk+0x1a/0x1c
hardirqs last disabled at (79894): [<ffffffff81007bf5>] trace_hardirqs_off_thunk+0x1a/0x1c
softirqs last  enabled at (0): [<ffffffff814aaac4>] copy_process+0x1d14/0x8720
softirqs last disabled at (0): [<0000000000000000>]           (null)
CPU: 2 PID: 4888 Comm: syz-executor4 Not tainted 4.20.0-next-20190102+ #5
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
RIP: 0010:__sanitizer_cov_trace_const_cmp4+0xd/0x20
Code: d6 0f b7 f7 bf 03 00 00 00 48 89 e5 48 8b 4d 08 e8 d8 fe ff ff 5d c3 66 0f 1f 44 00 00 55 89 f2 89 fe bf 05 00 00 00 48 89 e5 <48> 8b 4d 08 e8 ba fe ff ff 5d c3 0f 1f 84 00 00 00 00 00 55 48 89
RSP: 0018:ffff88803b35f218 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000004 RBX: ffffed100766be5a RCX: ffffffff81759ae5
RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005
RBP: ffff88803b35f218 R08: ffff88805a72a540 R09: ffff88805a72ae80
R10: ffff88805a72a540 R11: 0000000000000000 R12: ffff88806c437fe0
R13: 0000000000000001 R14: ffff88803b35f310 R15: 0000000000000003
FS:  0000000001b86940(0000) GS:ffff88806c480000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2d423000 CR3: 000000003ce21003 CR4: 00000000001606e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 smp_call_function_many+0x8d5/0xb10
 smp_call_function+0x42/0x90
 on_each_cpu+0x31/0x200
 text_poke_bp+0x101/0x1e5
 __jump_label_transform+0x33f/0x4d0
 arch_jump_label_transform+0x2b/0x40
 __jump_label_update+0x16a/0x210
 jump_label_update+0x1ce/0x3d0
 __static_key_slow_dec_cpuslocked+0xc5/0x220
 static_key_slow_dec+0x60/0xa0
 tracepoint_probe_unregister+0x73e/0x940
 trace_event_reg+0x189/0x350
 perf_trace_event_unreg.isra.0+0xbb/0x220
 perf_trace_destroy+0xc1/0x100
 tp_perf_event_destroy+0x16/0x20
 _free_event+0x3ee/0x1640
 put_event+0x47/0x60
 perf_event_release_kernel+0x890/0xf70
 perf_release+0x37/0x50
 __fput+0x3c5/0xb10
 ____fput+0x16/0x20
 task_work_run+0x1f4/0x2b0
 exit_to_usermode_loop+0x32a/0x3b0
 do_syscall_64+0x696/0x800
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x411071
Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 74 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
RSP: 002b:00007ffffa2d80d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000411071
RDX: 0000001b2d420000 RSI: 00007fd53b7c3510 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00007fd53b7c3048 R09: 000000003df39a59
R10: 00007ffffa2d8000 R11: 0000000000000293 R12: 0000000000000001
R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffffa2d8190
Sending NMI from CPU 2 to CPUs 0-1,3:
NMI backtrace for cpu 1
CPU: 1 PID: 22149 Comm: kworker/1:1 Not tainted 4.20.0-next-20190102+ #5
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
Workqueue: rcu_gp process_srcu
RIP: 0010:delay_tsc+0x33/0xc0
Code: bf 01 00 00 00 41 55 41 54 53 e8 58 18 66 f9 e8 f3 ad 9f fb 41 89 c5 0f ae e8 0f 31 48 c1 e2 20 48 09 c2 49 89 d4 eb 16 f3 90 <bf> 01 00 00 00 e8 33 18 66 f9 e8 ce ad 9f fb 44 39 e8 75 36 0f ae
RSP: 0018:ffff88803ce475a0 EFLAGS: 00000286
RAX: 0000000080000000 RBX: 0000029824c8de8b RCX: 0000000000000000
RDX: 0000000000000004 RSI: ffffffff8391c828 RDI: 0000000000000001
RBP: ffff88803ce475c0 R08: ffff88806b55c240 R09: fffffbfff16b1885
R10: ffff88803ce47710 R11: ffffffff8b58c427 R12: 0000029824c8d990
R13: 0000000000000001 R14: 00000000000032ab R15: ffffffff8b58c080
FS:  0000000000000000(0000) GS:ffff88806c440000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffff600400 CR3: 000000005ad83004 CR4: 00000000001606e0
Call Trace:
 __const_udelay+0x5f/0x80
 try_check_zero+0x352/0x5c0
 process_srcu+0x642/0x1400
 process_one_work+0xd0c/0x1ce0
 worker_thread+0x143/0x14a0
 kthread+0x357/0x430
 ret_from_fork+0x3a/0x50
NMI backtrace for cpu 0
CPU: 0 PID: 3681 Comm: udevd Not tainted 4.20.0-next-20190102+ #5
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
RIP: 0010:native_queued_spin_lock_slowpath+0x323/0x1290
Code: 00 00 00 fc ff df 49 c1 ec 03 4d 01 fc 45 84 f6 41 c6 04 24 f8 74 4f 4c 89 ee 83 e6 07 83 c6 03 f3 90 4c 89 e8 41 c6 04 24 04 <48> c1 e8 03 42 0f b6 04 38 40 38 c6 7c 08 84 c0 0f 85 f5 09 00 00
RSP: 0000:ffff88806c4077f8 EFLAGS: 00000002
RAX: ffff88806b9f4798 RBX: ffff88806c4079a0 RCX: ffff88806c4078b0
RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffff88806b9f4798
RBP: ffff88806c4079c8 R08: 1ffff1100d73e8f3 R09: ffffed100d73e8f4
R10: ffffed100d73e8f3 R11: ffff88806b9f479b R12: ffffed100d880f16
R13: ffff88806b9f4798 R14: 0000000000000101 R15: dffffc0000000000
FS:  00007fdf8d22a7a0(0000) GS:ffff88806c400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000023997d0 CR3: 000000006b1bd002 CR4: 00000000001606f0
Call Trace:
 <IRQ>
 do_raw_spin_lock+0x2af/0x360
 _raw_spin_lock+0x37/0x40
 drm_handle_vblank+0x154/0xc70
 drm_crtc_handle_vblank+0x63/0x90
 vkms_vblank_simulate+0x61/0x290
 __hrtimer_run_queues+0x3a7/0x1050
 hrtimer_interrupt+0x314/0x770
 smp_apic_timer_interrupt+0x18d/0x760
 apic_timer_interrupt+0xf/0x20
 </IRQ>
RIP: 0033:0x4179c0
Code: 40 00 48 8d 3d 3a 88 00 00 b9 09 00 00 00 48 89 de f3 a6 0f 84 91 01 00 00 48 8d 3d 2d 88 00 00 b9 05 00 00 00 48 89 de f3 a6 <0f> 84 22 02 00 00 48 8d 3d 1c 88 00 00 b9 12 00 00 00 48 89 de f3
RSP: 002b:00007fff245ca880 EFLAGS: 00000297 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 00007fff245cae1f RCX: 0000000000000004
RDX: 0000000000000000 RSI: 00007fff245cae20 RDI: 00000000004201e4
RBP: 00000000023a3f90 R08: 00007fff245cae1f R09: 00007fdf8c98a3f0
R10: 00000000023a0920 R11: 00000000023a4ce0 R12: 00007fff245cad80
R13: 00000000000000ac R14: 00000000023872d0 R15: 00007fff245cae1f
NMI backtrace for cpu 3
CPU: 3 PID: 4874 Comm: udevd Not tainted 4.20.0-next-20190102+ #5
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
RIP: 0010:lock_acquire+0x27d/0x570
Code: 48 ff ff ff 57 9d 0f 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 48 03 85 40 ff ff ff 48 c7 00 00 00 00 00 c7 40 08 00 00 00 00 <48> 8b 45 d0 65 48 33 04 25 28 00 00 00 0f 85 77 02 00 00 48 8d 65
RSP: 0018:ffff88806c4c75d8 EFLAGS: 00000086
RAX: ffffed100d898ec0 RBX: ffff88805034c100 RCX: 0000000000000000
RDX: dffffc0000000000 RSI: 00000000000046f9 RDI: 0000000000000086
RBP: ffff88806c4c76a8 R08: 0000000000000005 R09: ffff88805034ca68
R10: ffff88805034ca48 R11: 0000000000000001 R12: ffff88806c425d58
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  00007fdf8d22a7a0(0000) GS:ffff88806c4c0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000625208 CR3: 0000000020393002 CR4: 00000000001606e0
Call Trace:
 <IRQ>
 _raw_spin_lock_irqsave+0x95/0xcd
 lock_hrtimer_base.isra.0+0x75/0x130
 hrtimer_try_to_cancel+0xfe/0x6b0
 hrtimer_cancel+0x20/0x40
 vkms_disable_vblank+0x19/0x20
 drm_vblank_disable_and_save+0x391/0x4a0
 vblank_disable_fn+0x22c/0x280
 call_timer_fn+0x254/0x900
 __run_timers+0x6fc/0xd50
 run_timer_softirq+0x52/0xb0
 __do_softirq+0x30b/0xb11
 irq_exit+0x180/0x1d0
 smp_apic_timer_interrupt+0x1b7/0x760
 apic_timer_interrupt+0xf/0x20
 </IRQ>
RIP: 0010:handle_mm_fault+0x7f4/0xc80
Code: 48 c1 e8 03 80 3c 10 00 0f 85 c9 03 00 00 48 83 3d 70 ce db 07 00 0f 84 ff 02 00 00 e8 75 4f cb ff 48 8b bd 70 ff ff ff 57 9d <0f> 1f 44 00 00 e9 98 fb ff ff e8 5d 4f cb ff 48 ba 00 00 00 00 00
RSP: 0018:ffff88800a7ff7b0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: ffff88805034c100 RBX: 0000000000000200 RCX: 1ffff1100a069934
RDX: 0000000000000000 RSI: ffffffff81b6b18b RDI: 0000000000000293
RBP: ffff88800a7ff858 R08: 0000000000000006 R09: ffff88805034c9a0
R10: ffff88805034c100 R11: 0000000000000000 R12: ffff8880607ea738
R13: 0000000000000081 R14: 1ffff110014ffefa R15: 0000000000000000
 __get_user_pages+0x8f7/0x1e10
 get_user_pages_remote+0x21d/0x440
 copy_strings.isra.0+0x3fd/0xa70
 copy_strings_kernel+0xa5/0x110
 __do_execve_file.isra.0+0x124e/0x2700
 __x64_sys_execve+0x8f/0xc0
 do_syscall_64+0x1a3/0x800
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fdf8c90e207
Code: 77 19 f4 48 89 d7 44 89 c0 0f 05 48 3d 00 f0 ff ff 76 e0 f7 d8 64 41 89 01 eb d8 f7 d8 64 41 89 01 eb df b8 3b 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 02 f3 c3 48 8b 15 00 8c 2d 00 f7 d8 64 89 02
RSP: 002b:00007fff245c5488 EFLAGS: 00000206 ORIG_RAX: 000000000000003b
RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007fdf8c90e207
RDX: 0000000002398aa0 RSI: 00007fff245c5580 RDI: 00007fff245c6590
RBP: 0000000000625500 R08: 0000000000001ca3 R09: 0000000000001ca3
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000002398aa0
R13: 0000000000000007 R14: 0000000002387250 R15: 0000000000000005