------------[ cut here ]------------ WARNING: CPU: 0 PID: 6599 at arch/arm64/kvm/arch_timer.c:459 kvm_timer_update_irq+0x21c/0x394 arch/arm64/kvm/arch_timer.c:459 Modules linked in: CPU: 0 UID: 0 PID: 6599 Comm: syz.0.836 Not tainted 6.12.0-rc3-syzkaller-g2e5ea59d8ff4 #0 Hardware name: linux,dummy-virt (DT) pstate: 81400009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : kvm_timer_update_irq+0x21c/0x394 arch/arm64/kvm/arch_timer.c:459 lr : kvm_timer_update_irq+0x21c/0x394 arch/arm64/kvm/arch_timer.c:459 sp : ffff80008c2678f0 x29: ffff80008c267900 x28: 00000000000003c5 x27: f6f0000018400268 x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000000 x23: 0000000000000000 x22: 9eff80008c259000 x21: 000000000000001e x20: f6f0000018400000 x19: 00000000fffffff0 x18: 0000000000000000 x17: 0000000000000000 x16: 000000000000009e x15: 71f000000a8d8a80 x14: 0000000000000000 x13: 0000000000000003 x12: 71f000000a8d8000 x11: 9eff80008c259000 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : 71f000000a8d8000 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : f6f0000018401400 x3 : 0000000000000000 x2 : 000000000000001e x1 : 00000000fffffff0 x0 : 0000000000000000 Call trace: kvm_timer_update_irq+0x21c/0x394 arch/arm64/kvm/arch_timer.c:459 kvm_timer_vcpu_reset+0x158/0x684 arch/arm64/kvm/arch_timer.c:968 kvm_reset_vcpu+0x3b4/0x560 arch/arm64/kvm/reset.c:264 kvm_vcpu_set_target arch/arm64/kvm/arm.c:1553 [inline] kvm_arch_vcpu_ioctl_vcpu_init arch/arm64/kvm/arm.c:1573 [inline] kvm_arch_vcpu_ioctl+0x112c/0x1b3c arch/arm64/kvm/arm.c:1695 kvm_vcpu_ioctl+0x4ec/0xf74 virt/kvm/kvm_main.c:4658 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl fs/ioctl.c:893 [inline] __arm64_sys_ioctl+0x108/0x184 fs/ioctl.c:893 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x78/0x1b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x1b0 arch/arm64/kernel/syscall.c:132 do_el0_svc+0x40/0x50 arch/arm64/kernel/syscall.c:151 el0_svc+0x54/0x14c arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598 irq event stamp: 1900 hardirqs last enabled at (1899): [] __raw_read_unlock_irqrestore include/linux/rwlock_api_smp.h:241 [inline] hardirqs last enabled at (1899): [] _raw_read_unlock_irqrestore+0x44/0x94 kernel/locking/spinlock.c:268 hardirqs last disabled at (1900): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:470 softirqs last enabled at (1882): [] softirq_handle_end kernel/softirq.c:400 [inline] softirqs last enabled at (1882): [] handle_softirqs+0x698/0x6fc kernel/softirq.c:582 softirqs last disabled at (1873): [] __do_softirq+0x14/0x20 kernel/softirq.c:588 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6599 at arch/arm64/kvm/arch_timer.c:459 kvm_timer_update_irq+0x21c/0x394 arch/arm64/kvm/arch_timer.c:459 Modules linked in: CPU: 0 UID: 0 PID: 6599 Comm: syz.0.836 Tainted: G W 6.12.0-rc3-syzkaller-g2e5ea59d8ff4 #0 Tainted: [W]=WARN Hardware name: linux,dummy-virt (DT) pstate: 81400009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : kvm_timer_update_irq+0x21c/0x394 arch/arm64/kvm/arch_timer.c:459 lr : kvm_timer_update_irq+0x21c/0x394 arch/arm64/kvm/arch_timer.c:459 sp : ffff80008c2678f0 x29: ffff80008c267900 x28: 00000000000003c5 x27: f6f0000018400268 x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000000 x23: 0000000000000000 x22: 9eff80008c259000 x21: 000000000000001b x20: f6f0000018400000 x19: 00000000fffffff0 x18: 0000000000000000 x17: 0000000000000000 x16: 000000000000009e x15: 71f000000a8d8a80 x14: 0000000000000000 x13: 0000000000000003 x12: 71f000000a8d8000 x11: 9eff80008c259000 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : 71f000000a8d8000 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : f6f0000018401468 x3 : 0000000000000000 x2 : 000000000000001b x1 : 00000000fffffff0 x0 : 0000000000000000 Call trace: kvm_timer_update_irq+0x21c/0x394 arch/arm64/kvm/arch_timer.c:459 kvm_timer_vcpu_reset+0x178/0x684 arch/arm64/kvm/arch_timer.c:968 kvm_reset_vcpu+0x3b4/0x560 arch/arm64/kvm/reset.c:264 kvm_vcpu_set_target arch/arm64/kvm/arm.c:1553 [inline] kvm_arch_vcpu_ioctl_vcpu_init arch/arm64/kvm/arm.c:1573 [inline] kvm_arch_vcpu_ioctl+0x112c/0x1b3c arch/arm64/kvm/arm.c:1695 kvm_vcpu_ioctl+0x4ec/0xf74 virt/kvm/kvm_main.c:4658 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl fs/ioctl.c:893 [inline] __arm64_sys_ioctl+0x108/0x184 fs/ioctl.c:893 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x78/0x1b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x1b0 arch/arm64/kernel/syscall.c:132 do_el0_svc+0x40/0x50 arch/arm64/kernel/syscall.c:151 el0_svc+0x54/0x14c arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598 irq event stamp: 1954 hardirqs last enabled at (1953): [] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:85 [inline] hardirqs last enabled at (1953): [] exit_to_kernel_mode+0xdc/0x10c arch/arm64/kernel/entry-common.c:95 hardirqs last disabled at (1954): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:470 softirqs last enabled at (1952): [] softirq_handle_end kernel/softirq.c:400 [inline] softirqs last enabled at (1952): [] handle_softirqs+0x698/0x6fc kernel/softirq.c:582 softirqs last disabled at (1903): [] __do_softirq+0x14/0x20 kernel/softirq.c:588 ---[ end trace 0000000000000000 ]---