general protection fault, probably for non-canonical address 0xdffffc0000000013: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000098-0x000000000000009f]
CPU: 1 PID: 21296 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__apic_accept_irq+0x46/0xb80 arch/x86/kvm/lapic.c:1039
Code: 4c 24 18 4c 89 4c 24 08 e8 67 0d 61 00 49 8d 87 98 00 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 1b 0a 00 00 49 8b af 98 00 00 00 0f 1f 44 00 00
RSP: 0018:ffffc90017f6f4c8 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: ffff888043174400 RCX: ffffc90002191000
RDX: 0000000000000013 RSI: ffffffff8112c159 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000003 R11: fffff52002fedeb0 R12: 0000000000000000
R13: ffff88809414dc88 R14: 0000000000000000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880ae700000(0063) knlGS:00000000f5da1b40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 000000002e024000 CR3: 000000004f555000 CR4: 00000000001426e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 kvm_arch_async_page_present+0x7de/0x9e0 arch/x86/kvm/x86.c:10580
 kvm_check_async_pf_completion+0x18d/0x400 arch/x86/kvm/../../../virt/kvm/async_pf.c:151
 kvm_set_msr_common+0x1184/0x2960 arch/x86/kvm/x86.c:2958
 vmx_set_msr+0x9ee/0x26f0 arch/x86/kvm/vmx/vmx.c:2216
 __kvm_set_msr+0x15f/0x3a0 arch/x86/kvm/x86.c:1515
 __msr_io arch/x86/kvm/x86.c:3359 [inline]
 msr_io+0x173/0x290 arch/x86/kvm/x86.c:3395
 kvm_arch_vcpu_ioctl+0x10dc/0x2a60 arch/x86/kvm/x86.c:4456
 kvm_vcpu_ioctl+0x83d/0xe20 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3315
 kvm_vcpu_compat_ioctl+0x1ab/0x350 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3358
 __do_compat_sys_ioctl fs/ioctl.c:865 [inline]
 __se_compat_sys_ioctl fs/ioctl.c:816 [inline]
 __ia32_compat_sys_ioctl+0x23d/0x2b0 fs/ioctl.c:816
 do_syscall_32_irqs_on arch/x86/entry/common.c:337 [inline]
 do_fast_syscall_32+0x270/0xe90 arch/x86/entry/common.c:396
 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139
Modules linked in:
---[ end trace 6796bc2c96d5ec72 ]---
RIP: 0010:__apic_accept_irq+0x46/0xb80 arch/x86/kvm/lapic.c:1039
Code: 4c 24 18 4c 89 4c 24 08 e8 67 0d 61 00 49 8d 87 98 00 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 1b 0a 00 00 49 8b af 98 00 00 00 0f 1f 44 00 00
RSP: 0018:ffffc90017f6f4c8 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: ffff888043174400 RCX: ffffc90002191000
RDX: 0000000000000013 RSI: ffffffff8112c159 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000003 R11: fffff52002fedeb0 R12: 0000000000000000
R13: ffff88809414dc88 R14: 0000000000000000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880ae600000(0063) knlGS:00000000f5da1b40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 00000000f5d3edb0 CR3: 000000004f555000 CR4: 00000000001426f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400