kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 3856 Comm: syz-executor4 Not tainted 4.15.0-rc4-mm1+ #47
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__fire_sched_in_preempt_notifiers kernel/sched/core.c:2534 [inline]
RIP: 0010:fire_sched_in_preempt_notifiers kernel/sched/core.c:2540 [inline]
RIP: 0010:finish_task_switch+0x42d/0x740 kernel/sched/core.c:2670
RSP: 0018:ffff8801be6ae940 EFLAGS: 00010a06
RAX: dffffc0000000000 RBX: ffff8801db22c900 RCX: 1bd5a00000000022
RDX: 0000000000000eda RSI: ffffc9000227a000 RDI: dead000000000110
RBP: ffff8801be6ae9f0 R08: 1ffff10037d67b1b R09: 0000000000000000
R10: ffff8801be6ae918 R11: 0000000000000000 R12: ffff8801c637a140
R13: 1ffff10037cd5d2d R14: dffffc0000000000 R15: dead000000000100
FS:  00007fee60af9700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000718050 CR3: 00000001c0dff001 CR4: 00000000001626f0
DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 context_switch kernel/sched/core.c:2803 [inline]
 __schedule+0x8f3/0x2060 kernel/sched/core.c:3376
 schedule+0xf5/0x430 kernel/sched/core.c:3435
 schedule_timeout+0x59b/0x6f0 kernel/time/timer.c:1794
 do_wait_for_common kernel/sched/completion.c:91 [inline]
 __wait_for_common kernel/sched/completion.c:112 [inline]
 wait_for_common kernel/sched/completion.c:123 [inline]
 wait_for_completion+0x415/0x770 kernel/sched/completion.c:144
 __synchronize_srcu+0x1ad/0x260 kernel/rcu/srcutree.c:925
 synchronize_srcu_expedited+0x18/0x20 kernel/rcu/srcutree.c:950
 install_new_memslots+0x1bf/0x420 arch/x86/kvm/../../../virt/kvm/kvm_main.c:862
 __kvm_set_memory_region+0x1720/0x24d0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:1038
 __x86_set_memory_region+0x37b/0x7a0 arch/x86/kvm/x86.c:8374
 init_rmode_identity_map arch/x86/kvm/vmx.c:5006 [inline]
 vmx_create_vcpu+0x2581/0x2f20 arch/x86/kvm/vmx.c:9872
 kvm_arch_vcpu_create+0x12c/0x1a0 arch/x86/kvm/x86.c:7884
 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2446 [inline]
 kvm_vm_ioctl+0x48b/0x1c60 arch/x86/kvm/../../../virt/kvm/kvm_main.c:2944
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0x1b1/0x1520 fs/ioctl.c:686
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x8f/0xc0 fs/ioctl.c:692
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452a09
RSP: 002b:00007fee60af8c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000452a09
RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000017
RBP: 000000000000039b R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f2728
R13: 00000000ffffffff R14: 00007fee60af96d4 R15: 0000000000000000
Code: ff 11 4c 89 f9 48 c1 e9 03 42 80 3c 31 00 0f 85 1b 02 00 00 4d 8b 3f 4d 85 ff 0f 84 c0 fd ff ff 49 8d 7f 10 48 89 f9 48 c1 e9 03 <42> 80 3c 31 00 74 ae e8 17 d1 5b 00 eb a7 4c 89 fe 4c 89 e7 e8 
RIP: __fire_sched_in_preempt_notifiers kernel/sched/core.c:2534 [inline] RSP: ffff8801be6ae940
RIP: fire_sched_in_preempt_notifiers kernel/sched/core.c:2540 [inline] RSP: ffff8801be6ae940
RIP: finish_task_switch+0x42d/0x740 kernel/sched/core.c:2670 RSP: ffff8801be6ae940
---[ end trace c22912216ed90ddd ]---