vkms_vblank_simulate: vblank timer overrun
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P12715/1:b..l
rcu: 	(detected by 0, t=10502 jiffies, g=85553, q=769 ncpus=2)
task:syz.4.2103      state:R  running task     stack:28752 pid:12715 tgid:12715 ppid:12367  flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xe37/0x5490 kernel/sched/core.c:6529
 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:6851
 irqentry_exit+0x36/0x90 kernel/entry/common.c:354
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 kernel/kcov.c:200
Code: be b0 01 00 00 e8 a0 ff ff ff 31 c0 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 65 48 8b 15 94 5d 79 7e 65 8b 05 95 5d 79 7e a9 00 01
RSP: 0018:ffffc9000382f960 EFLAGS: 00000286
RAX: 1ffff11002fe4858 RBX: 0000000000000000 RCX: dffffc0000000000
RDX: ffff888022451e00 RSI: ffffffff8b0015ca RDI: 0000000000000005
RBP: ffff888017f24418 R08: 0000000000000005 R09: 0000000000000300
R10: 0000000000000300 R11: 0000000000000000 R12: ffff888017f242c0
R13: 00000092d5026000 R14: 000000000000000f R15: ffffffffffffffff
 lock_is_held include/linux/lockdep.h:249 [inline]
 mt_locked lib/maple_tree.c:781 [inline]
 mt_slot lib/maple_tree.c:788 [inline]
 mas_slot lib/maple_tree.c:821 [inline]
 mas_get_slot lib/maple_tree.c:7054 [inline]
 mas_validate_gaps lib/maple_tree.c:7318 [inline]
 mt_validate+0x2993/0x4390 lib/maple_tree.c:7593
 validate_mm+0x9c/0x4b0 mm/mmap.c:329
 mmap_region+0x13c0/0x2760 mm/mmap.c:3071
 do_mmap+0xbfb/0xfb0 mm/mmap.c:1468
 vm_mmap_pgoff+0x1ba/0x360 mm/util.c:588
 ksys_mmap_pgoff+0x7d/0x5d0 mm/mmap.c:1514
 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:86 [inline]
 __se_sys_mmap arch/x86/kernel/sys_x86_64.c:79 [inline]
 __x64_sys_mmap+0x125/0x190 arch/x86/kernel/sys_x86_64.c:79
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f6a5c177a33
RSP: 002b:00007ffd31e8d808 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 00007f6a5a4006c0 RCX: 00007f6a5c177a33
RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffd31e8d960
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>
rcu: rcu_preempt kthread starved for 10223 jiffies! g85553 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:27584 pid:17    tgid:17    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xe37/0x5490 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 schedule_timeout+0x136/0x2a0 kernel/time/timer.c:2581
 rcu_gp_fqs_loop+0x1eb/0xb00 kernel/rcu/tree.c:2034
 rcu_gp_kthread+0x271/0x380 kernel/rcu/tree.c:2236
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1 skipped: idling at native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline]
NMI backtrace for cpu 1 skipped: idling at arch_safe_halt arch/x86/include/asm/irqflags.h:106 [inline]
NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20 drivers/acpi/processor_idle.c:111
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 12718 Comm: vhost-12717 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:26 [inline]
RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:87 [inline]
RIP: 0010:check_preemption_disabled+0x2d/0xe0 lib/smp_processor_id.c:19
Code: 53 48 83 ec 08 65 8b 1d 6d ec f1 74 65 8b 05 62 ec f1 74 a9 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d 41 5c c3 cc cc cc cc 9c <58> f6 c4 02 74 ea 65 48 8b 05 35 ec f1 74 f6 40 2f 04 48 89 fd 74
RSP: 0000:ffffc9000354fa58 EFLAGS: 00000046
RAX: 0000000080000000 RBX: 0000000000000000 RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffffffff8b4cc7c0 RDI: ffffffff8bb08880
RBP: ffffffff8ddb5be0 R08: ffffffff88763d42 R09: 0000000000000001
R10: ffffc9000354fc88 R11: 0000000000000000 R12: ffff88801f54da00
R13: 00000000ffffffff R14: 00000000ffffffff R15: 0000000000000000
FS:  00007f04250d46c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000007726e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <TASK>
 lockdep_recursion_inc kernel/locking/lockdep.c:461 [inline]
 lock_is_held_type+0x67/0x150 kernel/locking/lockdep.c:5830
 lock_is_held include/linux/lockdep.h:249 [inline]
 __might_resched+0x4ca/0x5e0 kernel/sched/core.c:8425
 __mutex_lock_common kernel/locking/mutex.c:585 [inline]
 __mutex_lock+0xe2/0x9c0 kernel/locking/mutex.c:752
 vhost_vsock_handle_tx_kick+0xd2/0xbe0 drivers/vhost/vsock.c:487
 vhost_run_work_list+0x182/0x210 drivers/vhost/vhost.c:407
 vhost_task_fn+0x158/0x420 kernel/vhost_task.c:49
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>