------------[ cut here ]------------ WARNING: CPU: 0 PID: 4789 at arch/arm64/kvm/arch_timer.c:459 userspace_irqchip arch/arm64/kvm/arch_timer.c:209 [inline] WARNING: CPU: 0 PID: 4789 at arch/arm64/kvm/arch_timer.c:459 kvm_timer_update_irq+0x74/0x7c arch/arm64/kvm/arch_timer.c:454 Modules linked in: CPU: 0 UID: 0 PID: 4789 Comm: syz.1.415 Tainted: G B 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 Tainted: [B]=BAD_PAGE Hardware name: linux,dummy-virt (DT) pstate: 81400009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : kvm_timer_update_irq arch/arm64/kvm/arch_timer.c:459 [inline] pc : kvm_timer_update_irq+0x74/0x7c arch/arm64/kvm/arch_timer.c:445 lr : kvm_timer_update_irq+0x58/0x7c arch/arm64/kvm/arch_timer.c:455 sp : ffff80008317b9d0 x29: ffff80008317b9d0 x28: f4f00000402f4900 x27: 0000000000000000 x26: 0000000000000000 x25: 00000000000003c5 x24: 00000000ffffffff x23: 0000000000000000 x22: fdf0000028d79380 x21: fdf0000028d793e8 x20: 0000000000000001 x19: fdf0000028d78000 x18: ffffffffffffffff x17: 0000000000000000 x16: 0000000000000000 x15: 0000ffff876c19e0 x14: ffff80008317bd88 x13: ffff80008317bd4a x12: 6d766b3a65646f6e x11: 0000000000000000 x10: 0000000000000078 x9 : 0000000000000000 x8 : fdf0000028d78430 x7 : 0000000000000000 x6 : 4ec4ec4ec4ec4ec5 x5 : f5ff8000832ad000 x4 : fdf0000028d79318 x3 : 0000000000000000 x2 : 000000000000001e x1 : fdf0000028d78000 x0 : 00000000fffffff0 Call trace: userspace_irqchip arch/arm64/kvm/arch_timer.c:209 [inline] kvm_timer_update_irq+0x74/0x7c arch/arm64/kvm/arch_timer.c:454 kvm_timer_vcpu_reset+0xdc/0x234 arch/arm64/kvm/arch_timer.c:968 kvm_reset_vcpu+0x124/0x300 arch/arm64/kvm/reset.c:264 kvm_vcpu_set_target arch/arm64/kvm/arm.c:1553 [inline] kvm_arch_vcpu_ioctl_vcpu_init arch/arm64/kvm/arm.c:1573 [inline] kvm_arch_vcpu_ioctl+0x64c/0xbdc arch/arm64/kvm/arm.c:1695 kvm_vcpu_ioctl+0x3fc/0xa44 virt/kvm/kvm_main.c:4646 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl fs/ioctl.c:893 [inline] __arm64_sys_ioctl+0xac/0xf0 fs/ioctl.c:893 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x48/0x110 arch/arm64/kernel/syscall.c:49 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:132 do_el0_svc+0x1c/0x28 arch/arm64/kernel/syscall.c:151 el0_svc+0x34/0xec arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:598 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 4789 at arch/arm64/kvm/arch_timer.c:459 userspace_irqchip arch/arm64/kvm/arch_timer.c:209 [inline] WARNING: CPU: 0 PID: 4789 at arch/arm64/kvm/arch_timer.c:459 kvm_timer_update_irq+0x74/0x7c arch/arm64/kvm/arch_timer.c:454 Modules linked in: CPU: 0 UID: 0 PID: 4789 Comm: syz.1.415 Tainted: G B W 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 Tainted: [B]=BAD_PAGE, [W]=WARN Hardware name: linux,dummy-virt (DT) pstate: 81400009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : kvm_timer_update_irq arch/arm64/kvm/arch_timer.c:459 [inline] pc : kvm_timer_update_irq+0x74/0x7c arch/arm64/kvm/arch_timer.c:445 lr : kvm_timer_update_irq+0x58/0x7c arch/arm64/kvm/arch_timer.c:455 sp : ffff80008317b9d0 x29: ffff80008317b9d0 x28: f4f00000402f4900 x27: 0000000000000000 x26: 0000000000000000 x25: 00000000000003c5 x24: 00000000ffffffff x23: 0000000000000000 x22: fdf0000028d793e8 x21: fdf0000028d793e8 x20: 0000000000000002 x19: fdf0000028d78000 x18: ffffffffffffffff x17: 0000000000000000 x16: 0000000000000000 x15: 0000ffff876c19e0 x14: ffff80008317bd88 x13: ffff80008317bd4a x12: 6d766b3a65646f6e x11: 0000000000000000 x10: 0000000000000078 x9 : 0000000000000000 x8 : fdf0000028d78430 x7 : 0000000000000000 x6 : 4ec4ec4ec4ec4ec5 x5 : f5ff8000832ad001 x4 : fdf0000028d79380 x3 : 0000000000000000 x2 : 000000000000001b x1 : fdf0000028d78000 x0 : 00000000fffffff0 Call trace: userspace_irqchip arch/arm64/kvm/arch_timer.c:209 [inline] kvm_timer_update_irq+0x74/0x7c arch/arm64/kvm/arch_timer.c:454 kvm_timer_vcpu_reset+0xdc/0x234 arch/arm64/kvm/arch_timer.c:968 kvm_reset_vcpu+0x124/0x300 arch/arm64/kvm/reset.c:264 kvm_vcpu_set_target arch/arm64/kvm/arm.c:1553 [inline] kvm_arch_vcpu_ioctl_vcpu_init arch/arm64/kvm/arm.c:1573 [inline] kvm_arch_vcpu_ioctl+0x64c/0xbdc arch/arm64/kvm/arm.c:1695 kvm_vcpu_ioctl+0x3fc/0xa44 virt/kvm/kvm_main.c:4646 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl fs/ioctl.c:893 [inline] __arm64_sys_ioctl+0xac/0xf0 fs/ioctl.c:893 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x48/0x110 arch/arm64/kernel/syscall.c:49 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:132 do_el0_svc+0x1c/0x28 arch/arm64/kernel/syscall.c:151 el0_svc+0x34/0xec arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:598 ---[ end trace 0000000000000000 ]---