general protection fault, probably for non-canonical address 0xdffffc0000000013: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000098-0x000000000000009f] CPU: 0 PID: 22541 Comm: syz-executor.1 Not tainted 5.7.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__apic_accept_irq+0x46/0xb80 arch/x86/kvm/lapic.c:1039 Code: 4c 24 18 4c 89 4c 24 08 e8 67 0d 61 00 49 8d 87 98 00 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 1b 0a 00 00 49 8b af 98 00 00 00 0f 1f 44 00 00 RSP: 0018:ffffc900028478f8 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: ffff88804ef28000 RCX: ffffc900072d3000 RDX: 0000000000000013 RSI: ffffffff8112c159 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000003 R11: fffff52000508f36 R12: 0000000000000000 R13: ffff88805920fd78 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880ae600000(0063) knlGS:00000000f5dd0b40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 000000002d524000 CR3: 0000000051628000 CR4: 00000000001426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: kvm_arch_async_page_present+0x7de/0x9e0 arch/x86/kvm/x86.c:10580 kvm_check_async_pf_completion+0x18d/0x400 arch/x86/kvm/../../../virt/kvm/async_pf.c:151 vcpu_enter_guest arch/x86/kvm/x86.c:8437 [inline] vcpu_run arch/x86/kvm/x86.c:8669 [inline] kvm_arch_vcpu_ioctl_run+0x18bf/0x69f0 arch/x86/kvm/x86.c:8890 kvm_vcpu_ioctl+0x46a/0xe20 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3163 kvm_vcpu_compat_ioctl+0x1ab/0x350 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3358 __do_compat_sys_ioctl fs/ioctl.c:865 [inline] __se_compat_sys_ioctl fs/ioctl.c:816 [inline] __ia32_compat_sys_ioctl+0x23d/0x2b0 fs/ioctl.c:816 do_syscall_32_irqs_on arch/x86/entry/common.c:337 [inline] do_fast_syscall_32+0x270/0xe90 arch/x86/entry/common.c:396 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 Modules linked in: ---[ end trace 77412034d16534e3 ]--- RIP: 0010:__apic_accept_irq+0x46/0xb80 arch/x86/kvm/lapic.c:1039 Code: 4c 24 18 4c 89 4c 24 08 e8 67 0d 61 00 49 8d 87 98 00 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 1b 0a 00 00 49 8b af 98 00 00 00 0f 1f 44 00 00 RSP: 0018:ffffc900028478f8 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: ffff88804ef28000 RCX: ffffc900072d3000 RDX: 0000000000000013 RSI: ffffffff8112c159 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000003 R11: fffff52000508f36 R12: 0000000000000000 R13: ffff88805920fd78 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880ae700000(0063) knlGS:00000000f5dd0b40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 00000000086b60b8 CR3: 0000000051628000 CR4: 00000000001426e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400