------------[ cut here ]------------ WARNING: CPU: 0 PID: 13 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x23e/0x242 drivers/gpu/drm/vkms/vkms_crtc.c:21 Modules linked in: CPU: 0 PID: 13 Comm: rcu_preempt Not tainted 5.12.0-rc8-syzkaller-00194-g18a3c5f7abfd #0 Hardware name: riscv-virtio,qemu (DT) epc : vkms_vblank_simulate+0x23e/0x242 drivers/gpu/drm/vkms/vkms_crtc.c:21 ra : vkms_vblank_simulate+0x23e/0x242 drivers/gpu/drm/vkms/vkms_crtc.c:21 epc : ffffffe000f5c40a ra : ffffffe000f5c40a sp : ffffffe0057cb970 gp : ffffffe004588b78 tp : ffffffe0057baf80 t0 : 0000000000046000 t1 : 0000000000000001 t2 : 0000000000000000 s0 : ffffffe0057cb9b0 s1 : ffffffe00a835e58 a0 : 0000000000000000 a1 : 00000000000f0000 a2 : 0000000000010001 a3 : ffffffe000f5c40a a4 : ffffffe0057baf80 a5 : 0000000000000000 a6 : 0000000000f00000 a7 : ffffffe000f5c224 s2 : ffffffe00a834d30 s3 : 0000000000000002 s4 : 0000000000fe4c00 s5 : 0000000000001000 s6 : ffffffe067d481c8 s7 : 0000000000000000 s8 : ffffffe067d48190 s9 : ffffffe00a835e90 s10: ffffffe067d48100 s11: ffffffe000f5c1cc t3 : d7978423d04e9300 t4 : ffffffc400a08107 t5 : ffffffc400a0810e t6 : 0000000000000007 status: 0000000000000100 badaddr: 0000000000000000 cause: 0000000000000003 Call Trace: [] vkms_vblank_simulate+0x23e/0x242 drivers/gpu/drm/vkms/vkms_crtc.c:21 [] __run_hrtimer kernel/time/hrtimer.c:1537 [inline] [] __hrtimer_run_queues+0x4aa/0x9ba kernel/time/hrtimer.c:1601 [] hrtimer_interrupt+0x1e6/0x50a kernel/time/hrtimer.c:1663 [] riscv_timer_interrupt+0x5c/0x6a drivers/clocksource/timer-riscv.c:88 [] handle_percpu_devid_irq+0x17e/0x2be kernel/irq/chip.c:930 [] generic_handle_irq_desc include/linux/irqdesc.h:158 [inline] [] generic_handle_irq kernel/irq/irqdesc.c:652 [inline] [] __handle_domain_irq+0x13e/0x1ea kernel/irq/irqdesc.c:689 [] handle_domain_irq include/linux/irqdesc.h:176 [inline] [] riscv_intc_irq+0x82/0xcc drivers/irqchip/irq-riscv-intc.c:40 [] ret_from_exception+0x0/0x14 [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] [] _raw_spin_unlock_irqrestore+0x68/0x98 kernel/locking/spinlock.c:191