BUG: unable to handle kernel paging request at ffffed12349096b3 kobject: 'kvm' (ffff8880a6e2e410): kobject_uevent_env IP: coalesced_mmio_write+0x240/0x440 arch/x86/kvm/../../../virt/kvm/coalesced_mmio.c:83 PGD 21ffef067 P4D 21ffef067 PUD 0 Oops: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 0 PID: 7700 Comm: syz-executor568 Not tainted 4.14.131 #25 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff88808ee84380 task.stack: ffff8880953e0000 RIP: 0010:coalesced_mmio_write+0x240/0x440 arch/x86/kvm/../../../virt/kvm/coalesced_mmio.c:83 RSP: 0018:ffff8880953e7428 EFLAGS: 00010a02 RAX: 00000000b52b40e6 RBX: 0000000000000000 RCX: ffff8880a876a000 RDX: dffffc0000000000 RSI: 1ffff112349096b3 RDI: ffff8891a484b598 RBP: ffff8880953e7478 R08: 0000000000000007 R09: 0000000000000000 R10: ffff88808ee84c50 R11: ffff88808ee84380 R12: ffff88809f2e1a90 R13: 0000000000000001 R14: ffff88809255bca0 R15: 0000000000000001 FS: 00007f8410fb6700(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffed12349096b3 CR3: 0000000088d63000 CR4: 00000000001426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 kobject: 'kvm' (ffff8880a6e2e410): kobject_uevent_env DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: kvm_iodevice_write include/kvm/iodev.h:66 [inline] __kvm_io_bus_write+0x241/0x340 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3485 kobject: 'kvm' (ffff8880a6e2e410): fill_kobj_path: path = '/devices/virtual/misc/kvm' kvm_io_bus_write+0x115/0x200 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3510 vcpu_mmio_write arch/x86/kvm/x86.c:4486 [inline] write_mmio+0x148/0x480 arch/x86/kvm/x86.c:4824 kobject: 'kvm' (ffff8880a6e2e410): fill_kobj_path: path = '/devices/virtual/misc/kvm' emulator_read_write_onepage+0x36a/0xbb0 arch/x86/kvm/x86.c:4893 emulator_read_write+0x174/0x540 arch/x86/kvm/x86.c:4942 emulator_write_emulated+0x3c/0x50 arch/x86/kvm/x86.c:4979 segmented_write+0xd3/0x120 arch/x86/kvm/emulate.c:1459 kobject: 'kvm' (ffff8880a6e2e410): kobject_uevent_env writeback+0x425/0x760 arch/x86/kvm/emulate.c:1821 kobject: 'kvm' (ffff8880a6e2e410): kobject_uevent_env x86_emulate_insn+0x15f2/0x4120 arch/x86/kvm/emulate.c:5616 x86_emulate_instruction+0x423/0x1700 arch/x86/kvm/x86.c:5917 kobject: 'kvm' (ffff8880a6e2e410): fill_kobj_path: path = '/devices/virtual/misc/kvm' kvm_mmu_page_fault+0x1c5/0x300 arch/x86/kvm/mmu.c:4998 handle_ept_violation+0x149/0x420 arch/x86/kvm/vmx.c:6930 kobject: 'kvm' (ffff8880a6e2e410): fill_kobj_path: path = '/devices/virtual/misc/kvm' vmx_handle_exit+0x20d/0x12a0 arch/x86/kvm/vmx.c:9194 vcpu_enter_guest+0xec8/0x5220 arch/x86/kvm/x86.c:7239 kobject: 'kvm' (ffff8880a6e2e410): kobject_uevent_env vcpu_run arch/x86/kvm/x86.c:7302 [inline] kvm_arch_vcpu_ioctl_run+0x318/0x1000 arch/x86/kvm/x86.c:7469 kobject: 'kvm' (ffff8880a6e2e410): kobject_uevent_env kvm_vcpu_ioctl+0x401/0xd10 arch/x86/kvm/../../../virt/kvm/kvm_main.c:2588 kobject: 'kvm' (ffff8880a6e2e410): fill_kobj_path: path = '/devices/virtual/misc/kvm' kobject: 'kvm' (ffff8880a6e2e410): fill_kobj_path: path = '/devices/virtual/misc/kvm' vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x7ae/0x1060 fs/ioctl.c:684 kobject: 'kvm' (ffff8880a6e2e410): kobject_uevent_env SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x8f/0xc0 fs/ioctl.c:692 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292 kobject: 'kvm' (ffff8880a6e2e410): kobject_uevent_env entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x449e09 kobject: 'kvm' (ffff8880a6e2e410): fill_kobj_path: path = '/devices/virtual/misc/kvm' RSP: 002b:00007f8410fb5ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00000000006dfc48 RCX: 0000000000449e09 RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 RBP: 00000000006dfc40 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dfc4c R13: 00007ffc5676cc3f R14: 00007f8410fb69c0 R15: 0000000000000000 Code: c0 03 38 d0 7c 08 84 d2 0f kobject: 'kvm' (ffff8880a6e2e410): fill_kobj_path: path = '/devices/virtual/misc/kvm' 85 00 02 00 00 8b 41 04 48 8d 14 40 48 8d 7c d1 08 48 ba 00 00 00 00 00 fc ff kobject: 'kvm' (ffff8880a6e2e410): kobject_uevent_env df 48 89 fe 48 c1 ee 03 <80> 3c 16 00 0f 85 kobject: 'kvm' (ffff8880a6e2e410): kobject_uevent_env bf 01 00 00 48 8d 14 40 48 be 00 00 00 00 kobject: 'kvm' (ffff8880a6e2e410): fill_kobj_path: path = '/devices/virtual/misc/kvm' 00 RIP: coalesced_mmio_write+0x240/0x440 arch/x86/kvm/../../../virt/kvm/coalesced_mmio.c:83 RSP: ffff8880953e7428 CR2: ffffed12349096b3 ---[ end trace e80d0a03e4f478ca ]---