------------[ cut here ]------------ WARNING: CPU: 1 PID: 5869 at arch/arm64/kvm/arch_timer.c:459 userspace_irqchip arch/arm64/kvm/arch_timer.c:209 [inline] WARNING: CPU: 1 PID: 5869 at arch/arm64/kvm/arch_timer.c:459 kvm_timer_update_irq+0x74/0x7c arch/arm64/kvm/arch_timer.c:454 Modules linked in: CPU: 1 UID: 0 PID: 5869 Comm: syz.1.842 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 Hardware name: linux,dummy-virt (DT) pstate: 81400009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : kvm_timer_update_irq arch/arm64/kvm/arch_timer.c:459 [inline] pc : kvm_timer_update_irq+0x74/0x7c arch/arm64/kvm/arch_timer.c:445 lr : kvm_timer_update_irq+0x58/0x7c arch/arm64/kvm/arch_timer.c:455 sp : ffff800088d8b9d0 x29: ffff800088d8b9d0 x28: f9f000000958a480 x27: 0000000000000000 x26: 0000000000000000 x25: 00000000000003c5 x24: 00000000ffffffff x23: 0000000000000000 x22: f7f0000004704aa0 x21: f7f0000004704b08 x20: 0000000000000001 x19: f7f0000004703720 x18: ffffffffffffffff x17: 0000000000000000 x16: 0000000000000000 x15: 0000000020000000 x14: ffff800088d8bd88 x13: ffff800088d8bd4a x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000000000 x9 : 000000000000003e x8 : f7f0000004703b50 x7 : 0000000000000000 x6 : 4ec4ec4ec4ec4ec5 x5 : f1ff80008bb40000 x4 : f7f0000004704a38 x3 : 0000000000000000 x2 : 000000000000001e x1 : f7f0000004703720 x0 : 00000000fffffff0 Call trace: userspace_irqchip arch/arm64/kvm/arch_timer.c:209 [inline] (P) kvm_timer_update_irq+0x74/0x7c arch/arm64/kvm/arch_timer.c:454 (P) kvm_timer_update_irq+0x58/0x7c arch/arm64/kvm/arch_timer.c:455 (L) kvm_timer_vcpu_reset+0xdc/0x234 arch/arm64/kvm/arch_timer.c:968 kvm_reset_vcpu+0x124/0x300 arch/arm64/kvm/reset.c:264 kvm_vcpu_set_target arch/arm64/kvm/arm.c:1553 [inline] kvm_arch_vcpu_ioctl_vcpu_init arch/arm64/kvm/arm.c:1573 [inline] kvm_arch_vcpu_ioctl+0x648/0xbb0 arch/arm64/kvm/arm.c:1695 kvm_vcpu_ioctl+0x524/0xa04 virt/kvm/kvm_main.c:4646 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:906 [inline] __se_sys_ioctl fs/ioctl.c:892 [inline] __arm64_sys_ioctl+0xb4/0xec fs/ioctl.c:892 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x48/0x110 arch/arm64/kernel/syscall.c:49 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:132 do_el0_svc+0x1c/0x28 arch/arm64/kernel/syscall.c:151 el0_svc+0x30/0xe0 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x10c/0x138 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x1a4/0x1a8 arch/arm64/kernel/entry.S:600 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 5869 at arch/arm64/kvm/arch_timer.c:459 userspace_irqchip arch/arm64/kvm/arch_timer.c:209 [inline] WARNING: CPU: 1 PID: 5869 at arch/arm64/kvm/arch_timer.c:459 kvm_timer_update_irq+0x74/0x7c arch/arm64/kvm/arch_timer.c:454 Modules linked in: CPU: 1 UID: 0 PID: 5869 Comm: syz.1.842 Tainted: G W 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 Tainted: [W]=WARN Hardware name: linux,dummy-virt (DT) pstate: 81400009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : kvm_timer_update_irq arch/arm64/kvm/arch_timer.c:459 [inline] pc : kvm_timer_update_irq+0x74/0x7c arch/arm64/kvm/arch_timer.c:445 lr : kvm_timer_update_irq+0x58/0x7c arch/arm64/kvm/arch_timer.c:455 sp : ffff800088d8b9d0 x29: ffff800088d8b9d0 x28: f9f000000958a480 x27: 0000000000000000 x26: 0000000000000000 x25: 00000000000003c5 x24: 00000000ffffffff x23: 0000000000000000 x22: f7f0000004704b08 x21: f7f0000004704b08 x20: 0000000000000002 x19: f7f0000004703720 x18: ffffffffffffffff x17: 0000000000000000 x16: 0000000000000000 x15: 0000000020000000 x14: ffff800088d8bd88 x13: ffff800088d8bd4a x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000000000 x9 : 000000000000003e x8 : f7f0000004703b50 x7 : 0000000000000000 x6 : 4ec4ec4ec4ec4ec5 x5 : f1ff80008bb40001 x4 : f7f0000004704aa0 x3 : 0000000000000000 x2 : 000000000000001b x1 : f7f0000004703720 x0 : 00000000fffffff0 Call trace: userspace_irqchip arch/arm64/kvm/arch_timer.c:209 [inline] (P) kvm_timer_update_irq+0x74/0x7c arch/arm64/kvm/arch_timer.c:454 (P) kvm_timer_update_irq+0x58/0x7c arch/arm64/kvm/arch_timer.c:455 (L) kvm_timer_vcpu_reset+0xdc/0x234 arch/arm64/kvm/arch_timer.c:968 kvm_reset_vcpu+0x124/0x300 arch/arm64/kvm/reset.c:264 kvm_vcpu_set_target arch/arm64/kvm/arm.c:1553 [inline] kvm_arch_vcpu_ioctl_vcpu_init arch/arm64/kvm/arm.c:1573 [inline] kvm_arch_vcpu_ioctl+0x648/0xbb0 arch/arm64/kvm/arm.c:1695 kvm_vcpu_ioctl+0x524/0xa04 virt/kvm/kvm_main.c:4646 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:906 [inline] __se_sys_ioctl fs/ioctl.c:892 [inline] __arm64_sys_ioctl+0xb4/0xec fs/ioctl.c:892 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x48/0x110 arch/arm64/kernel/syscall.c:49 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:132 do_el0_svc+0x1c/0x28 arch/arm64/kernel/syscall.c:151 el0_svc+0x30/0xe0 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x10c/0x138 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x1a4/0x1a8 arch/arm64/kernel/entry.S:600 ---[ end trace 0000000000000000 ]---