kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 0 PID: 6077 Comm: syz-executor1 Not tainted 4.16.0-rc3+ #331 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 kasan: CONFIG_KASAN_INLINE enabled RIP: 0010:__read_once_size include/linux/compiler.h:188 [inline] RIP: 0010:hrtimer_active+0x1da/0x3c0 kernel/time/hrtimer.c:1277 RSP: 0018:ffff8801b5bdf3c0 EFLAGS: 00010202 RAX: 0000000000000008 RBX: 1ffff10036b7bea5 RCX: ffffffff81610225 RDX: 0000000000010000 RSI: ffffc900043ff000 RDI: 0000000000000010 kasan: GPF could be caused by NULL-ptr deref or user memory access RBP: ffff8801b5bdf500 R08: 0000000000002c02 R09: 0000000000000000 R10: 0000000000000011 R11: ffffed0036b49078 R12: 0000000000000010 R13: 0000000000000000 R14: ffffed0036b7be83 R15: dffffc0000000000 FS: 00007fd148ac3700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd148a81000 CR3: 00000001cb57d004 CR4: 00000000001626f0 DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: hrtimer_try_to_cancel+0x91/0x5b0 kernel/time/hrtimer.c:1128 hrtimer_cancel+0x22/0x40 kernel/time/hrtimer.c:1154 kvm_lapic_reset+0x93/0xf40 arch/x86/kvm/lapic.c:2015 kvm_arch_vcpu_setup+0x31/0x50 arch/x86/kvm/x86.c:7978 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:2459 [inline] kvm_vm_ioctl+0x52d/0x1cf0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:2949 vfs_ioctl fs/ioctl.c:46 [inline] do_vfs_ioctl+0x1b1/0x1520 fs/ioctl.c:686 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x8f/0xc0 fs/ioctl.c:692 do_syscall_64+0x281/0x940 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x453d69 RSP: 002b:00007fd148ac2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fd148ac36d4 RCX: 0000000000453d69 RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000014 RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 000000000000020e R14: 00000000006f31f0 R15: 0000000000000000 Code: ff ff 48 8d 85 18 ff ff ff 48 c1 e8 03 4e 8d 34 38 e8 1b f2 0f 00 48 8b 85 f0 fe ff ff c6 00 00 48 8b 85 d8 fe ff ff 48 c1 e8 03 <42> 80 3c 38 00 0f 85 c2 01 00 00 48 8b 85 e8 fe ff ff 48 8b 58 RIP: __read_once_size include/linux/compiler.h:188 [inline] RSP: ffff8801b5bdf3c0 RIP: hrtimer_active+0x1da/0x3c0 kernel/time/hrtimer.c:1277 RSP: ffff8801b5bdf3c0 general protection fault: 0000 [#2] SMP KASAN ---[ end trace 3af8e178948ab659 ]--- Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 1 PID: 6083 Comm: syz-executor1 Tainted: G D 4.16.0-rc3+ #331