------------[ cut here ]------------ WARNING: CPU: 1 PID: 1 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x23e/0x242 drivers/gpu/drm/vkms/vkms_crtc.c:21 Modules linked in: CPU: 1 PID: 1 Comm: swapper/0 Not tainted 5.12.0-rc6-syzkaller-00180-g0688c240404a #0 Hardware name: riscv-virtio,qemu (DT) epc : vkms_vblank_simulate+0x23e/0x242 drivers/gpu/drm/vkms/vkms_crtc.c:21 ra : vkms_vblank_simulate+0x23e/0x242 drivers/gpu/drm/vkms/vkms_crtc.c:21 epc : ffffffe000f5b7fc ra : ffffffe000f5b7fc sp : ffffffe005772fa0 gp : ffffffe004588ad0 tp : ffffffe005768000 t0 : 0000000000046000 t1 : 0000000000000001 t2 : ffffffe000a7350e s0 : ffffffe005772fe0 s1 : ffffffe00a8e1e58 a0 : 0000000000000000 a1 : 00000000000f0000 a2 : 0000000000010101 a3 : ffffffe000f5b7fc a4 : ffffffe005768000 a5 : 0000000000000000 a6 : 0000000000f00000 a7 : ffffffe000f5b616 s2 : ffffffe00a8e0d30 s3 : 0000000000000002 s4 : 0000000000fe4c00 s5 : 0000000000001000 s6 : ffffffe067d651c8 s7 : 0000000000000000 s8 : ffffffe067d65190 s9 : ffffffe00a8e1e90 s10: ffffffe067d65100 s11: ffffffe000f5b5be t3 : 2ddeafd65a9c9500 t4 : ffffffc400aee642 t5 : ffffffc400aee643 t6 : 0000000000000003 status: 0000000000000100 badaddr: 0000000000000000 cause: 0000000000000003 Call Trace: [] vkms_vblank_simulate+0x23e/0x242 drivers/gpu/drm/vkms/vkms_crtc.c:21 [] __run_hrtimer kernel/time/hrtimer.c:1537 [inline] [] __hrtimer_run_queues+0x4aa/0x9ba kernel/time/hrtimer.c:1601 [] hrtimer_interrupt+0x1e6/0x50a kernel/time/hrtimer.c:1663 [] riscv_timer_interrupt+0x5c/0x6a drivers/clocksource/timer-riscv.c:88 [] handle_percpu_devid_irq+0x17e/0x2be kernel/irq/chip.c:930 [] generic_handle_irq_desc include/linux/irqdesc.h:158 [inline] [] generic_handle_irq kernel/irq/irqdesc.c:652 [inline] [] __handle_domain_irq+0x13e/0x1ea kernel/irq/irqdesc.c:689 [] handle_domain_irq include/linux/irqdesc.h:176 [inline] [] riscv_intc_irq+0x82/0xcc drivers/irqchip/irq-riscv-intc.c:40 [] ret_from_exception+0x0/0x14 [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] [] _raw_spin_unlock_irqrestore+0x68/0x98 kernel/locking/spinlock.c:191