------------[ cut here ]------------ WARNING: CPU: 0 PID: 1 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x26c/0x2f4 drivers/gpu/drm/vkms/vkms_crtc.c:41 Modules linked in: CPU: 0 PID: 1 Comm: swapper/0 Not tainted 5.12.0-rc2-syzkaller-00395-g344178334b09 #0 Hardware name: linux,dummy-virt (DT) pstate: 20000085 (nzCv daIf -PAN -UAO -TCO BTYPE=--) pc : vkms_vblank_simulate+0x26c/0x2f4 drivers/gpu/drm/vkms/vkms_crtc.c:21 lr : hrtimer_forward_now include/linux/hrtimer.h:510 [inline] lr : vkms_vblank_simulate+0x90/0x2f4 drivers/gpu/drm/vkms/vkms_crtc.c:19 sp : ffff00006a693d20 x29: ffff00006a693d20 x28: ffff000011001e58 x27: dfff800000000000 x26: ffff00006a67f540 x25: 1fffe0000d4cfeb1 x24: 1fffe0000d4cfeaa x23: ffff000011000d30 x22: 0000000000fe4c00 x21: ffff00006a67f540 x20: ffff000011000e58 x19: ffff000011001e58 x18: ffff00006a6a1b48 x17: 00000000000013e8 x16: 00000000000013ec x15: ffff8000197bf810 x14: 1fffe0000d4d275a x13: 0000000000000001 x12: 0000000000000033 x11: 1fffe000015b711e x10: 0000000000000007 x9 : 1fffe000015b7130 x8 : ffff800017d14c00 x7 : 00000000f1f1f1f1 x6 : dfff800000000000 x5 : 7fffffffffffffff x4 : 0000000add50ab20 x3 : 0000000ade4ef720 x2 : 0000000add50ab20 x1 : 0000000ade4ef720 x0 : 0000000000000002 Call trace: vkms_vblank_simulate+0x26c/0x2f4 drivers/gpu/drm/vkms/vkms_crtc.c:41 __run_hrtimer kernel/time/hrtimer.c:1519 [inline] __hrtimer_run_queues+0x590/0xe40 kernel/time/hrtimer.c:1583 hrtimer_interrupt+0x2d4/0x810 kernel/time/hrtimer.c:1645 timer_handler drivers/clocksource/arm_arch_timer.c:647 [inline] arch_timer_handler_phys+0x4c/0x70 drivers/clocksource/arm_arch_timer.c:665 handle_percpu_devid_irq+0x19c/0x330 kernel/irq/chip.c:930 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline] generic_handle_irq kernel/irq/irqdesc.c:652 [inline] __handle_domain_irq+0x11c/0x1f0 kernel/irq/irqdesc.c:689 handle_domain_irq include/linux/irqdesc.h:176 [inline] gic_handle_irq+0x5c/0x1b0 drivers/irqchip/irq-gic.c:370 el1_irq+0xb4/0x180 arch/arm64/kernel/entry.S:669 arch_local_irq_restore arch/arm64/include/asm/irqflags.h:124 [inline] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] _raw_spin_unlock_irqrestore+0x94/0x180 kernel/locking/spinlock.c:191 swake_up_one+0x130/0x1a0 kernel/sched/swait.c:54 rcu_gp_kthread_wake kernel/rcu/tree.c:1527 [inline] rcu_gp_kthread_wake+0x80/0x114 kernel/rcu/tree.c:1518 rcu_report_qs_rsp+0xac/0x30c kernel/rcu/tree.c:2204 rcu_report_qs_rnp+0x4cc/0xa80 kernel/rcu/tree.c:2275 rcu_report_qs_rdp kernel/rcu/tree.c:2362 [inline] rcu_check_quiescent_state kernel/rcu/tree.c:2399 [inline] rcu_core+0x12e4/0x1794 kernel/rcu/tree.c:2778 rcu_core_si+0x10/0x20 kernel/rcu/tree.c:2807 _stext+0x2b4/0x1084 do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline] invoke_softirq kernel/softirq.c:228 [inline] __irq_exit_rcu+0x46c/0x510 kernel/softirq.c:422 irq_exit+0x14/0x84 kernel/softirq.c:446 __handle_domain_irq+0x120/0x1f0 kernel/irq/irqdesc.c:692 handle_domain_irq include/linux/irqdesc.h:176 [inline] gic_handle_irq+0x5c/0x1b0 drivers/irqchip/irq-gic.c:370 el1_irq+0xb4/0x180 arch/arm64/kernel/entry.S:669 trace_lock_release include/trace/events/lock.h:58 [inline] lock_release+0xc8/0xa80 kernel/locking/lockdep.c:5521 __fs_reclaim_release mm/page_alloc.c:4332 [inline] fs_reclaim_release mm/page_alloc.c:4358 [inline] fs_reclaim_release+0xc0/0x100 mm/page_alloc.c:4352 might_alloc include/linux/sched/mm.h:194 [inline] slab_pre_alloc_hook mm/slab.h:497 [inline] slab_alloc_node mm/slub.c:2826 [inline] slab_alloc mm/slub.c:2915 [inline] kmem_cache_alloc+0x80/0x594 mm/slub.c:2920 kmem_cache_zalloc include/linux/slab.h:674 [inline] __kernfs_new_node+0xd0/0x6d0 fs/kernfs/dir.c:626 kernfs_new_node+0x78/0x10c fs/kernfs/dir.c:688 __kernfs_create_file+0x38/0x330 fs/kernfs/file.c:985 sysfs_add_file_mode_ns+0x1c4/0x424 fs/sysfs/file.c:317 sysfs_merge_group+0x168/0x29c fs/sysfs/group.c:343 dpm_sysfs_add+0x190/0x1c4 drivers/base/power/sysfs.c:707 device_add+0x72c/0x15f0 drivers/base/core.c:3199 device_create_groups_vargs drivers/base/core.c:3892 [inline] device_create+0x24c/0x2e0 drivers/base/core.c:3934 bdi_register_va+0x124/0x810 mm/backing-dev.c:809 bdi_register+0xa4/0xe0 mm/backing-dev.c:841 __device_add_disk+0x970/0xed4 block/genhd.c:618 device_add_disk+0x14/0x20 block/genhd.c:641 add_disk include/linux/genhd.h:231 [inline] loop_add+0x52c/0x720 drivers/block/loop.c:2172 loop_init+0x1ac/0x208 drivers/block/loop.c:2377 do_one_initcall+0x138/0x9a0 init/main.c:1226 do_initcall_level init/main.c:1299 [inline] do_initcalls init/main.c:1315 [inline] do_basic_setup init/main.c:1335 [inline] kernel_init_freeable+0x6c4/0x72c init/main.c:1537 kernel_init+0x14/0x124 init/main.c:1424 ret_from_fork+0x10/0x3c arch/arm64/kernel/entry.S:958