LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
IDTR:                           limit=0x00000000, base=0x0000000000000000
==================================================================
BUG: KASAN: null-ptr-deref in memset include/linux/string.h:332 [inline]
BUG: KASAN: null-ptr-deref in kvm_write_guest_virt_system+0x64/0x90 arch/x86/kvm/x86.c:4730
Write of size 24 at addr           (null) by task syz-executor.5/17788

CPU: 1 PID: 17788 Comm: syz-executor.5 Not tainted 4.14.146 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x138/0x197 lib/dump_stack.c:53
TR:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
 kasan_report_error mm/kasan/report.c:349 [inline]
 kasan_report mm/kasan/report.c:409 [inline]
 kasan_report.cold+0x127/0x2af mm/kasan/report.c:393
 check_memory_region_inline mm/kasan/kasan.c:260 [inline]
 check_memory_region+0x123/0x190 mm/kasan/kasan.c:267
 memset+0x24/0x40 mm/kasan/kasan.c:285
 memset include/linux/string.h:332 [inline]
 kvm_write_guest_virt_system+0x64/0x90 arch/x86/kvm/x86.c:4730
 handle_vmread+0x548/0x730 arch/x86/kvm/vmx.c:8027
EFER =     0x0000000000000000  PAT = 0x0007040600070406
DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
 vmx_handle_exit+0x20d/0x1330 arch/x86/kvm/vmx.c:9203
 vcpu_enter_guest+0xf28/0x5210 arch/x86/kvm/x86.c:7247
 vcpu_run arch/x86/kvm/x86.c:7310 [inline]
 kvm_arch_vcpu_ioctl_run+0x318/0x1000 arch/x86/kvm/x86.c:7477
 kvm_vcpu_ioctl+0x401/0xd10 arch/x86/kvm/../../../virt/kvm/kvm_main.c:2611
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x7ae/0x1060 fs/ioctl.c:684
Interruptibility = 00000000  ActivityState = 00000000
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x8f/0xc0 fs/ioctl.c:692
 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x459a29
RSP: 002b:00007fc0988a6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29
RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
*** Host State ***
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc0988a76d4
R13: 00000000004c2ddb R14: 00000000004d68f8 R15: 00000000ffffffff
==================================================================
RIP = 0xffffffff81174b00  RSP = 0xffff888050e2f998
CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
FSBase=00007f1088d94700 GSBase=ffff8880aee00000 TRBase=fffffe0000034000
GDTBase=fffffe0000032000 IDTBase=fffffe0000000000
CR0=0000000080050033 CR3=000000005ca87000 CR4=00000000001426f0
Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff862018e0
EFER = 0x0000000000000d01  PAT = 0x0407050600070106
*** Control State ***
PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2
EntryControls=0000d1ff ExitControls=002fefff
ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000
VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
        reason=80000021 qualification=0000000000000000
IDTVectoring: info=00000000 errcode=00000000
TSC Offset = 0xfffffec99adde0d0
EPT pointer = 0x00000000942ba01e
Virtual processor ID = 0x0001
*** Guest State ***
CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7
CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
CR3 = 0x00000000fffbc000
RSP = 0x00000000000000fb  RIP = 0x0000000000000000
RFLAGS=0x00010002         DR7 = 0x0000000000000400