------------[ cut here ]------------
WARNING: CPU: 0 PID: 10955 at arch/arm64/include/asm/kvm_emulate.h:536 kvm_handle_mmio_return+0x1b4/0x1f4 arch/arm64/kvm/mmio.c:99
Modules linked in:
CPU: 0 UID: 0 PID: 10955 Comm: syz.1.2903 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0
Hardware name: linux,dummy-virt (DT)
pstate: 61400009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)
pc : kvm_incr_pc arch/arm64/include/asm/kvm_emulate.h:536 [inline]
pc : kvm_handle_mmio_return+0x1b4/0x1f4 arch/arm64/kvm/mmio.c:118
lr : kvm_arch_vcpu_ioctl_run+0x1ac/0x854 arch/arm64/kvm/arm.c:1135
sp : ffff80008950bab0
x29: ffff80008950bab0 x28: f7f00000093fc900 x27: 0000000000000000
x26: 0000000000000000 x25: f4f0000007621bd8 x24: f4f0000007621b90
x23: 0000000000000000 x22: 0000000000000000 x21: 0000000000000000
x20: fdf000000c9c4000 x19: f4f0000007621b90 x18: ffffffffffffffff
x17: 0000000000000000 x16: 0000000000000000 x15: ffff80008950baa0
x14: ffff80008950bd88 x13: ffff80008950bd4a x12: 0000000000000000
x11: 0000000000000000 x10: 0000000000000000 x9 : 000000000000010c
x8 : ffff80008950bd98 x7 : f1f000000544cabc x6 : 0000000000005452
x5 : 0000000000000005 x4 : f9f000000947b700 x3 : f7f00000093fc900
x2 : 0000000000000000 x1 : 0000000093c18046 x0 : 0000000000000001
Call trace:
 kvm_handle_mmio_return+0x1b4/0x1f4 arch/arm64/kvm/mmio.c:99 (P)
 kvm_arch_vcpu_ioctl_run+0x1ac/0x854 arch/arm64/kvm/arm.c:1135 (L)
 kvm_arch_vcpu_ioctl_run+0x1ac/0x854 arch/arm64/kvm/arm.c:1135
 kvm_vcpu_ioctl+0x294/0xa04 virt/kvm/kvm_main.c:4475
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:906 [inline]
 __se_sys_ioctl fs/ioctl.c:892 [inline]
 __arm64_sys_ioctl+0xb4/0xec fs/ioctl.c:892
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x48/0x110 arch/arm64/kernel/syscall.c:49
 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:132
 do_el0_svc+0x1c/0x28 arch/arm64/kernel/syscall.c:151
 el0_svc+0x30/0xe0 arch/arm64/kernel/entry-common.c:744
 el0t_64_sync_handler+0x10c/0x138 arch/arm64/kernel/entry-common.c:762
 el0t_64_sync+0x1a4/0x1a8 arch/arm64/kernel/entry.S:600
---[ end trace 0000000000000000 ]---