------------[ cut here ]------------
kernel BUG at arch/x86/kvm/x86.c:7182!
invalid opcode: 0000 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 2 PID: 1292 Comm: syz-executor6 Not tainted 4.14.0-rc1-next-20170919+ #7
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
task: ffff88006d206180 task.stack: ffff880068fa8000
RIP: 0010:complete_emulated_mmio+0x5c2/0x6f0 arch/x86/kvm/x86.c:7182
RSP: 0018:ffff880068faf620 EFLAGS: 00010212
RAX: 0000000000010000 RBX: ffff880057031a80 RCX: ffffc900042a9000
RDX: 0000000000000099 RSI: ffffffff810d5cf2 RDI: ffff880057031cb8
RBP: ffff880068faf660 R08: 0000000000000000 R09: 0000000000000001
R10: ffff880068fafa58 R11: 0000000000000001 R12: ffffffff810d5730
R13: ffff880068c82000 R14: ffff8800583126c0 R15: ffff880057031a80
FS:  00007f47ec72a700(0000) GS:ffff88006de00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
*** Guest State ***
CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
CR3 = 0x00000000fffbc000
RSP = 0x0000000000000000  RIP = 0x000000000000fff0
RFLAGS=0x00000000         DR7 = 0x0000000000000400
Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
GDTR:                           limit=0x0000ffff, base=0x0000000000000000
LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
IDTR:                           limit=0x0000ffff, base=0x0000000000000000
TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
EFER =     0x0000000000000000  PAT = 0x0007040600070406
DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
BndCfgS = 0x0000000000000000
Interruptibility = 00000000  ActivityState = 00000000
*** Host State ***
RIP = 0xffffffff811b92ba  RSP = 0xffff88003da074c8
CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
FSBase=00007f99e76a4700 GSBase=ffff88003ed00000 TRBase=ffff88003ed23100
GDTBase=ffffffffff576000 IDTBase=ffffffffff57b000
CR0=0000000080050033 CR3=00000000576cb000 CR4=00000000000026e0
Sysenter RSP=0000000000000000 CS:RIP=0010:ffffffff84d4f180
EFER = 0x0000000000000d01  PAT = 0x0007040600070406
*** Control State ***
PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2
EntryControls=0001d1ff ExitControls=00afefff
ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
VMEntry: intr_info=80000301 errcode=00000000 ilen=00000000
VMExit: intr_info=00000000 errcode=00000000 ilen=00000000
        reason=80000021 qualification=0000000000000000
IDTVectoring: info=00000000 errcode=00000000
TSC Offset = 0xffffff4755cf305e
EPT pointer = 0x000000003d5e001e
Virtual processor ID = 0x1020
CR2: 0000000001671cb8 CR3: 000000002e067000 CR4: 00000000000026e0
Call Trace:
 kvm_arch_vcpu_ioctl_run+0x2df5/0x5b90 arch/x86/kvm/x86.c:7261
 kvm_vcpu_ioctl+0x64c/0x1010 arch/x86/kvm/../../../virt/kvm/kvm_main.c:2551
 vfs_ioctl fs/ioctl.c:45 [inline]
 do_vfs_ioctl+0x1b1/0x1530 fs/ioctl.c:685
 SYSC_ioctl fs/ioctl.c:700 [inline]
 SyS_ioctl+0x8f/0xc0 fs/ioctl.c:691
 entry_SYSCALL_64_fastpath+0x1f/0xbe
RIP: 0033:0x4474f9
RSP: 002b:00007f47ec729c08 EFLAGS: 00000296 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 00000000004474f9
RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000017
RBP: 0000000000000082 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f47ec72a9c0 R15: 00007f47ec72a700
Code: 01 00 00 00 48 89 df e8 9d ba 47 00 44 89 e6 4c 89 f7 45 31 e4 e8 bf 5d 4d 00 45 85 ed 41 0f 94 c4 e9 5f fc ff ff e8 9e 8f 60 00 <0f> 0b e8 87 57 95 00 e9 9c fa ff ff 89 45 c8 e8 7a 57 95 00 8b 
RIP: complete_emulated_mmio+0x5c2/0x6f0 arch/x86/kvm/x86.c:7182 RSP: ffff880068faf620
---[ end trace 31bb7dfed88076cb ]---