kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 10015 Comm: syz-executor5 Not tainted 4.15.0-rc4-mm1+ #47
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__fire_sched_in_preempt_notifiers kernel/sched/core.c:2534 [inline]
RIP: 0010:fire_sched_in_preempt_notifiers kernel/sched/core.c:2540 [inline]
RIP: 0010:finish_task_switch+0x42d/0x740 kernel/sched/core.c:2670
RSP: 0018:ffff8801a92a7580 EFLAGS: 00010a06
RAX: dffffc0000000000 RBX: ffff8801db22c900 RCX: 1bd5a00000000022
RDX: 0000000000005759 RSI: ffffc900013d9000 RDI: dead000000000110
RBP: ffff8801a92a7630 R08: 1ffff10038520c83 R09: 0000000000000000
R10: ffff8801a92a7558 R11: 0000000000000000 R12: ffff8801bc7e2180
R13: 1ffff10035254eb5 R14: dffffc0000000000 R15: dead000000000100
FS:  00007f42fdf85700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000002000a000 CR3: 00000001c23ea005 CR4: 00000000001626f0
DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 context_switch kernel/sched/core.c:2803 [inline]
 __schedule+0x8f3/0x2060 kernel/sched/core.c:3376
 preempt_schedule_common+0x22/0x60 kernel/sched/core.c:3515
 _cond_resched+0x1d/0x30 kernel/sched/core.c:4852
 down_write+0x6c/0x120 kernel/locking/rwsem.c:69
 inode_lock include/linux/fs.h:713 [inline]
 start_creating+0x91/0x1b0 fs/debugfs/inode.c:310
 __debugfs_create_file+0x54/0x3d0 fs/debugfs/inode.c:350
 debugfs_create_file+0x57/0x70 fs/debugfs/inode.c:402
 kvm_create_vm_debugfs arch/x86/kvm/../../../virt/kvm/kvm_main.c:594 [inline]
 kvm_dev_ioctl_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:3182 [inline]
 kvm_dev_ioctl+0x108a/0x1890 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3209
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0x1b1/0x1520 fs/ioctl.c:686
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x8f/0xc0 fs/ioctl.c:692
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452a09
RSP: 002b:00007f42fdf84c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000452a09
RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000018
RBP: 000000000000039b R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f2728
R13: 00000000ffffffff R14: 00007f42fdf856d4 R15: 0000000000000000
Code: ff 11 4c 89 f9 48 c1 e9 03 42 80 3c 31 00 0f 85 1b 02 00 00 4d 8b 3f 4d 85 ff 0f 84 c0 fd ff ff 49 8d 7f 10 48 89 f9 48 c1 e9 03 <42> 80 3c 31 00 74 ae e8 17 d1 5b 00 eb a7 4c 89 fe 4c 89 e7 e8 
RIP: __fire_sched_in_preempt_notifiers kernel/sched/core.c:2534 [inline] RSP: ffff8801a92a7580
RIP: fire_sched_in_preempt_notifiers kernel/sched/core.c:2540 [inline] RSP: ffff8801a92a7580
RIP: finish_task_switch+0x42d/0x740 kernel/sched/core.c:2670 RSP: ffff8801a92a7580
---[ end trace a8067d4e4fd89dc2 ]---
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 1 PID: 10016 Comm: syz-executor1 Tainted: G      D          4.15.0-rc4-mm1+ #47
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0xbd9/0x2500 fs/userfaultfd.c:430
 do_anonymous_page mm/memory.c:3131 [inline]
 handle_pte_fault mm/memory.c:3945 [inline]
 __handle_mm_fault+0x32a3/0x3ce0 mm/memory.c:4071
 handle_mm_fault+0x38f/0x930 mm/memory.c:4108
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x2c/0x60 arch/x86/entry/entry_64.S:1243
RIP: 0010:fault_in_pages_readable include/linux/pagemap.h:609 [inline]
RIP: 0010:iov_iter_fault_in_readable+0x373/0x410 lib/iov_iter.c:421
RSP: 0018:ffff8801c2877928 EFLAGS: 00010216
RAX: 0000000000000000 RBX: 0000000000000fd3 RCX: ffffffff8251d516
RDX: 00000000000001c1 RSI: 0000000020012001 RDI: ffff8801c2877d28
RBP: ffff8801c2877a08 R08: 0000000000000000 R09: 1ffff1003850eee7
R10: ffff8801c2877858 R11: 0000000000000003 R12: 1ffff1003850ef28
R13: ffff8801c28779e0 R14: 0000000000000000 R15: ffff8801c2877d20
 generic_perform_write+0x200/0x600 mm/filemap.c:3128
 __generic_file_write_iter+0x366/0x5b0 mm/filemap.c:3263
 generic_file_write_iter+0x399/0x790 mm/filemap.c:3291
 call_write_iter include/linux/fs.h:1776 [inline]
 new_sync_write fs/read_write.c:469 [inline]
 __vfs_write+0x684/0x970 fs/read_write.c:482
 vfs_write+0x189/0x510 fs/read_write.c:544
 SYSC_write fs/read_write.c:589 [inline]
 SyS_write+0xef/0x220 fs/read_write.c:581
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452a09
RSP: 002b:00007fb873c30c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007fb873c31700 RCX: 0000000000452a09
RDX: 0000000000000030 RSI: 0000000020011fd2 RDI: 0000000000000014
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000
R13: 0000000000a2f7ff R14: 00007fb873c319c0 R15: 0000000000000000