WARNING: CPU: 1 PID: 3580 at arch/x86/kvm/x86.c:7295 kvm_arch_vcpu_ioctl_run+0x1d4/0x5be0 arch/x86/kvm/x86.c:7295
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 3580 Comm: syz-executor1 Not tainted 4.15.0-rc2-mm1+ #39
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
QAT: Invalid ioctl
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 panic+0x1e4/0x41c kernel/panic.c:183
 __warn+0x1dc/0x200 kernel/panic.c:547
 report_bug+0x211/0x2d0 lib/bug.c:184
 fixup_bug.part.11+0x37/0x80 arch/x86/kernel/traps.c:177
 fixup_bug arch/x86/kernel/traps.c:246 [inline]
 do_error_trap+0x2d7/0x3e0 arch/x86/kernel/traps.c:295
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314
 invalid_op+0x22/0x40 arch/x86/entry/entry_64.S:1079
RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1d4/0x5be0 arch/x86/kvm/x86.c:7295
RSP: 0000:ffff8801d87cf6b0 EFLAGS: 00010212
RAX: 0000000000010000 RBX: ffff8801c1ecf000 RCX: ffffffff810dee44
RDX: 00000000000000ba RSI: ffffc900039a0000 RDI: ffff8801d8530378
RBP: ffff8801d87cfa40 R08: 0000000000000001 R09: 0000000000000001
R10: ffff8801d87cfa58 R11: 0000000000000001 R12: 0000000000000000
R13: 1ffff1003b0f9f72 R14: ffff8801c0d5f280 R15: ffff8801d8530140
 kvm_vcpu_ioctl+0x64c/0x1010 arch/x86/kvm/../../../virt/kvm/kvm_main.c:2555
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0x1b1/0x1530 fs/ioctl.c:686
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x8f/0xc0 fs/ioctl.c:692
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452a39
RSP: 002b:00007ff703b26c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ff703b25810 RCX: 0000000000452a39
RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 000000000000001a
R13: 0000000020354000 R14: 00007ff703b276d4 R15: 0000000000000000
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 3634 Comm: syz-executor2 Not tainted 4.15.0-rc2-mm1+ #39
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:native_write_cr4+0x4/0x10 arch/x86/include/asm/special_insns.h:76
RSP: 0018:ffff8801db207e88 EFLAGS: 00010082
RAX: dffffc0000000000 RBX: 00000000001606f0 RCX: 0000000000000001
RDX: 1ffffffff0c59710 RSI: 0000000000000000 RDI: 00000000001606f0
RBP: ffff8801db207e88 R08: ffff8801db207f40 R09: ffff8801db207f80
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000082
R13: 1ffff1003b640fd4 R14: ffff8801d54d2080 R15: ffff8801db207fc0
FS:  00007fd7e802e700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe7c9d53638 CR3: 00000001bfdfe002 CR4: 00000000001626f0
Call Trace:
 <IRQ>
 __write_cr4 arch/x86/include/asm/paravirt.h:76 [inline]
 __cr4_set arch/x86/include/asm/tlbflush.h:252 [inline]
 cr4_clear_bits arch/x86/include/asm/tlbflush.h:275 [inline]
 cpu_vmxoff arch/x86/include/asm/virtext.h:44 [inline]
 __cpu_emergency_vmxoff arch/x86/include/asm/virtext.h:59 [inline]
 cpu_emergency_vmxoff arch/x86/include/asm/virtext.h:67 [inline]
 smp_reboot_interrupt+0x3ea/0x510 arch/x86/kernel/smp.c:179
 reboot_interrupt+0xa9/0xb0 arch/x86/entry/entry_64.S:913
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:777 [inline]
RIP: 0010:console_unlock+0x954/0xd70 kernel/printk/printk.c:2235
RSP: 0018:ffff8801d545f7b8 EFLAGS: 00000216 ORIG_RAX: ffffffffffffff07
RAX: 0000000000010000 RBX: 0000000000000000 RCX: ffffffff8159c70b
RDX: 0000000000001448 RSI: ffffc90003ba4000 RDI: 0000000000000216
RBP: ffff8801d545f8a0 R08: 1ffff1003aa8bec5 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff83a38da0
 vcs_open+0x52/0x80 drivers/tty/vt/vc_screen.c:602
 chrdev_open+0x257/0x730 fs/char_dev.c:417
 do_dentry_open+0x682/0xd70 fs/open.c:752
 vfs_open+0x107/0x230 fs/open.c:866
 do_last fs/namei.c:3397 [inline]
 path_openat+0x1157/0x3530 fs/namei.c:3537
 do_filp_open+0x25b/0x3b0 fs/namei.c:3572
 do_sys_open+0x502/0x6d0 fs/open.c:1059
 SYSC_open fs/open.c:1077 [inline]
 SyS_open+0x2d/0x40 fs/open.c:1072
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x40cd71
RSP: 002b:00007fd7e802d780 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 00000000007580d8 RCX: 000000000040cd71
RDX: 0000000000000000 RSI: 0000000000080000 RDI: 00007fd7e802d830
RBP: 0000000000000037 R08: 0000000000000000 R09: 0000000000000000
R10: 000000000000000b R11: 0000000000000293 R12: 00000000006ee5c8
R13: 00000000ffffffff R14: 00007fd7e802e6d4 R15: 0000000000000002
Code: 0f 1f 80 00 00 00 00 55 48 89 e5 0f 20 d8 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 0f 22 df 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 <0f> 22 e7 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 44 0f 20 c0 5d 
RIP: native_write_cr4+0x4/0x10 arch/x86/include/asm/special_insns.h:76 RSP: ffff8801db207e88
---[ end trace e95357eec9a202a0 ]---
Shutting down cpus with NMI
invalid opcode: 0000 [#2] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 3634 Comm: syz-executor2 Tainted: G      D          4.15.0-rc2-mm1+ #39
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:smp_stop_nmi_callback+0x279/0x560 arch/x86/kernel/smp.c:170
RSP: 0018:fffffffffe3c7b40 EFLAGS: 00010002
RAX: 00000000001626f0 RBX: 1fffffffffc78f69 RCX: 0000000000000020
RDX: dffffc0000000000 RSI: fffffffffe3c7be8 RDI: fffffffffe3c7ba8
RBP: fffffffffe3c7cd0 R08: fffffffffe3c7c28 R09: fffffffffe3c7c68
R10: ffff88021fff8010 R11: ffff88021fff801d R12: 1fffffffffc78f85
R13: fffffffffe3c7ca8 R14: 1fffffffffc78f75 R15: 1fffffffffc78f7d
FS:  00007fd7e802e700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe7c9d53638 CR3: 00000001bfdfe002 CR4: 00000000001626f0
Call Trace:
 <NMI>
 nmi_handle+0x23b/0x5f0 arch/x86/kernel/nmi.c:137
 default_do_nmi+0x6d/0x150 arch/x86/kernel/nmi.c:335
 do_nmi+0x213/0x2d0 arch/x86/kernel/nmi.c:521
 end_repeat_nmi+0x1a/0x1e
RIP: 0010:panic_smp_self_stop+0xb/0x80
RSP: 0018:ffff8801db207c68 EFLAGS: 00000006
RAX: ffff8801d54d2080 RBX: ffffffff85f262c1 RCX: ffffffff8140e2b9
RDX: 0000000000010000 RSI: dffffc0000000000 RDI: 0000000000000000
RBP: ffff8801db207c68 R08: ffffffff86344a80 R09: 1ffff1003b640f60
R10: ffff8801db207d40 R11: 0000000000000000 R12: ffff8801db207d40
R13: ffff8801db207d00 R14: dffffc0000000000 R15: ffff8801db207fc0
 </NMI>
 <IRQ>
 panic+0xec/0x41c kernel/panic.c:170
 oops_end+0xd2/0xe0 arch/x86/kernel/dumpstack.c:279
 die+0x3d/0x50 arch/x86/kernel/dumpstack.c:340
 do_general_protection+0x34e/0x3e0 arch/x86/kernel/traps.c:559
 general_protection+0x2c/0x60 arch/x86/entry/entry_64.S:1242
RIP: 0010:native_write_cr4+0x4/0x10 arch/x86/include/asm/special_insns.h:76
RSP: 0018:ffff8801db207e88 EFLAGS: 00010082
RAX: dffffc0000000000 RBX: 00000000001606f0 RCX: 0000000000000001
RDX: 1ffffffff0c59710 RSI: 0000000000000000 RDI: 00000000001606f0
RBP: ffff8801db207e88 R08: ffff8801db207f40 R09: ffff8801db207f80
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000082
R13: 1ffff1003b640fd4 R14: ffff8801d54d2080 R15: ffff8801db207fc0
 __write_cr4 arch/x86/include/asm/paravirt.h:76 [inline]
 __cr4_set arch/x86/include/asm/tlbflush.h:252 [inline]
 cr4_clear_bits arch/x86/include/asm/tlbflush.h:275 [inline]
 cpu_vmxoff arch/x86/include/asm/virtext.h:44 [inline]
 __cpu_emergency_vmxoff arch/x86/include/asm/virtext.h:59 [inline]
 cpu_emergency_vmxoff arch/x86/include/asm/virtext.h:67 [inline]
 smp_reboot_interrupt+0x3ea/0x510 arch/x86/kernel/smp.c:179
 reboot_interrupt+0xa9/0xb0 arch/x86/entry/entry_64.S:913
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:777 [inline]
RIP: 0010:console_unlock+0x954/0xd70 kernel/printk/printk.c:2235
RSP: 0018:ffff8801d545f7b8 EFLAGS: 00000216 ORIG_RAX: ffffffffffffff07
RAX: 0000000000010000 RBX: 0000000000000000 RCX: ffffffff8159c70b
RDX: 0000000000001448 RSI: ffffc90003ba4000 RDI: 0000000000000216
RBP: ffff8801d545f8a0 R08: 1ffff1003aa8bec5 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff83a38da0
 vcs_open+0x52/0x80 drivers/tty/vt/vc_screen.c:602
 chrdev_open+0x257/0x730 fs/char_dev.c:417
 do_dentry_open+0x682/0xd70 fs/open.c:752
 vfs_open+0x107/0x230 fs/open.c:866
 do_last fs/namei.c:3397 [inline]
 path_openat+0x1157/0x3530 fs/namei.c:3537
 do_filp_open+0x25b/0x3b0 fs/namei.c:3572
 do_sys_open+0x502/0x6d0 fs/open.c:1059
 SYSC_open fs/open.c:1077 [inline]
 SyS_open+0x2d/0x40 fs/open.c:1072
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x40cd71
RSP: 002b:00007fd7e802d780 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 00000000007580d8 RCX: 000000000040cd71
RDX: 0000000000000000 RSI: 0000000000080000 RDI: 00007fd7e802d830
RBP: 0000000000000037 R08: 0000000000000000 R09: 0000000000000000
R10: 000000000000000b R11: 0000000000000293 R12: 00000000006ee5c8
R13: 00000000ffffffff R14: 00007fd7e802e6d4 R15: 0000000000000002
Code: 00 00 00 00 48 83 e7 f8 48 29 fb 8d 4b 2c c1 e9 03 f3 48 ab 48 81 c4 68 01 00 00 b8 01 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 01 c4 48 c7 c7 80 b9 2c 86 48 89 f8 48 c1 e8 03 80 3c 10 00 
RIP: smp_stop_nmi_callback+0x279/0x560 arch/x86/kernel/smp.c:170 RSP: fffffffffe3c7b40
---[ end trace e95357eec9a202a1 ]---
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..