executing program syzkaller login: [ 20.062513] ------------[ cut here ]------------ [ 20.062873] WARNING: CPU: 1 PID: 3016 at arch/x86/kvm/mmu.c:719 mmu_spte_clear_track_bits+0x35a/0x3f0 [ 20.063687] Kernel panic - not syncing: panic_on_warn set ... [ 20.063687] [ 20.064196] CPU: 1 PID: 3016 Comm: syzkaller100381 Not tainted 4.13.0-rc5-next-20170815+ #3 [ 20.064899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 20.065554] Call Trace: [ 20.065730] dump_stack+0x194/0x257 [ 20.065973] ? arch_local_irq_restore+0x53/0x53 [ 20.066301] panic+0x1e4/0x417 [ 20.066513] ? __warn+0x1d9/0x1d9 [ 20.066741] ? show_regs_print_info+0x65/0x65 [ 20.067048] ? mmu_spte_clear_track_bits+0x35a/0x3f0 [ 20.067384] __warn+0x1c4/0x1d9 [ 20.067601] ? mmu_spte_clear_track_bits+0x35a/0x3f0 [ 20.067938] report_bug+0x211/0x2d0 [ 20.068181] fixup_bug+0x40/0x90 [ 20.068416] do_trap+0x260/0x390 [ 20.068656] do_error_trap+0x120/0x390 [ 20.068915] ? do_trap+0x390/0x390 [ 20.069152] ? mmu_spte_clear_track_bits+0x35a/0x3f0 [ 20.069490] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 20.069812] do_invalid_op+0x1b/0x20 [ 20.070070] invalid_op+0x1e/0x30 [ 20.070299] RIP: 0010:mmu_spte_clear_track_bits+0x35a/0x3f0 [ 20.070678] RSP: 0018:ffff880069796e10 EFLAGS: 00010297 [ 20.071032] RAX: ffff880069d28740 RBX: 1ffff1000d2f2dc4 RCX: 1ffff1000d2f2dc8 [ 20.071538] RDX: 0000000000000000 RSI: 1ffff1000d2f2dd8 RDI: ffffea0000dd6cdc [ 20.072016] RBP: ffff880069796f28 R08: ffffffff8111d651 R09: 0000000000000000 [ 20.072492] R10: ffff8800697972d0 R11: ffff88003ac00118 R12: 40000000375b3c77 [ 20.072970] R13: 0000000000000000 R14: ffff880069796f00 R15: 00000000000375b3 [ 20.073554] ? kvm_mmu_invalidate_zap_all_pages+0x91/0x680 [ 20.073930] ? mmu_spte_update+0x220/0x220 [ 20.074218] ? mmu_shrink_scan+0xb50/0xb50 [ 20.074500] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 20.074841] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 20.075272] ? kswapd_stop+0x100/0x100 [ 20.075534] ? linear_hugepage_index+0x1c0/0x1c0 [ 20.075850] drop_spte+0x24/0x250 [ 20.076090] mmu_page_zap_pte+0x224/0x340 [ 20.076375] ? kvm_mmu_zap_collapsible_spte+0x3f0/0x3f0 [ 20.076733] ? rmap_walk+0x1cd/0x2e0 [ 20.076985] ? percpu_counter_add_batch+0xce/0x130 [ 20.077328] kvm_mmu_prepare_zap_page+0x1c5/0x1310 [ 20.077738] ? mmio_info_in_cache+0x670/0x670 [ 20.078083] ? putback_movable_pages+0x960/0x960 [ 20.078399] ? lock_acquire+0x1d5/0x580 [ 20.078665] ? trace_event_raw_event_mm_migrate_pages+0x2c0/0x2c0 [ 20.079094] ? __page_cache_release+0x761/0xd30 [ 20.079801] ? pagevec_move_tail_fn+0x1210/0x1210 [ 20.080178] ? lock_acquire+0x1d5/0x580 [ 20.080483] ? lock_acquire+0x1d5/0x580 [ 20.080747] ? __is_insn_slot_addr+0x1fc/0x330 [ 20.081078] ? lock_downgrade+0x990/0x990 [ 20.081421] ? lock_release+0xa40/0xa40 [ 20.081724] ? __read_once_size_nocheck.constprop.8+0x10/0x10 [ 20.082150] ? entry_SYSCALL_64_fastpath+0x1f/0xbe [ 20.082499] ? bpf_prog_kallsyms_find+0xbd/0x440 [ 20.082868] ? kvm_make_all_cpus_request+0x444/0x580 [ 20.083223] ? gfn_to_pfn_atomic+0x650/0x650 [ 20.083535] ? lock_release+0xa40/0xa40 [ 20.083851] ? lock_acquire+0x1d5/0x580 [ 20.084115] ? lock_acquire+0x1d5/0x580 [ 20.084378] ? depot_save_stack+0x3b5/0x490 [ 20.084667] ? lock_downgrade+0x990/0x990 [ 20.084940] ? unwind_dump+0x4c0/0x4c0 [ 20.085259] ? do_raw_spin_trylock+0x190/0x190 [ 20.085566] kvm_mmu_invalidate_zap_all_pages+0x4a0/0x680 [ 20.085943] ? kvm_mmu_zap_collapsible_sptes+0xb0/0xb0 [ 20.086324] ? lock_acquire+0x1d5/0x580 [ 20.086616] ? lock_release+0xa40/0xa40 [ 20.086921] ? lock_release+0xa40/0xa40 [ 20.087200] ? kasan_slab_free+0x71/0xc0 [ 20.087510] ? __khugepaged_exit+0x410/0x650 [ 20.087842] ? kvm_vcpu_on_spin+0x710/0x710 [ 20.088269] kvm_arch_flush_shadow_all+0x15/0x20 [ 20.088691] kvm_mmu_notifier_release+0x59/0x90 [ 20.089119] ? kvm_vcpu_on_spin+0x710/0x710 [ 20.089520] __mmu_notifier_release+0x1d5/0x690 [ 20.089832] ? migrate_huge_page_move_mapping+0xb00/0xb00 [ 20.090202] ? lock_downgrade+0x990/0x990 [ 20.090484] ? __mmu_notifier_invalidate_range_end+0x350/0x350 [ 20.090881] ? __khugepaged_exit+0x3f7/0x650 [ 20.091178] ? lock_downgrade+0x990/0x990 [ 20.091458] ? do_raw_spin_trylock+0x190/0x190 [ 20.091766] ? trace_hardirqs_off+0xd/0x10 [ 20.092051] ? quarantine_put+0xeb/0x190 [ 20.092328] exit_mmap+0x479/0x560 [ 20.092567] ? __khugepaged_exit+0x43d/0x650 [ 20.092861] ? SyS_munmap+0x30/0x30 [ 20.093104] ? hugepage_madvise+0xf0/0xf0 [ 20.093383] ? check_same_owner+0x320/0x320 [ 20.093676] ? hrtimer_forward+0x2d0/0x2d0 [ 20.093959] ? rcu_note_context_switch+0x710/0x710 [ 20.094306] ? __might_sleep+0x95/0x190 [ 20.094576] mmput+0x223/0x6e0 [ 20.094792] ? get_task_exe_file+0xc0/0xc0 [ 20.095077] ? is_current_pgrp_orphaned+0xa0/0xa0 [ 20.095399] ? do_exit+0x991/0x1b30 [ 20.095643] ? lock_downgrade+0x990/0x990 [ 20.095920] ? do_raw_spin_trylock+0x190/0x190 [ 20.096226] ? down_read+0x96/0x150 [ 20.096494] ? do_exit+0x4ad/0x1b30 [ 20.096737] ? __down_interruptible+0x6a0/0x6a0 [ 20.097065] ? trace_hardirqs_on+0xd/0x10 [ 20.097341] ? _raw_spin_unlock_irq+0x27/0x70 [ 20.097641] do_exit+0x9a1/0x1b30 [ 20.097875] ? walk_page_test+0x130/0x130 [ 20.098161] ? mm_update_next_owner+0x930/0x930 [ 20.098502] ? walk_page_range+0x340/0x470 [ 20.098813] ? do_mbind+0x47b/0xce0 [ 20.099057] ? lock_downgrade+0x990/0x990 [ 20.099337] ? queue_pages_range+0x270/0x430 [ 20.099634] ? __might_sleep+0x95/0x190 [ 20.099903] ? up_write+0x6b/0x120 [ 20.100141] ? up_read+0x40/0x40 [ 20.100368] ? find_vma+0x30/0x150 [ 20.100903] ? do_mbind+0x2cf/0xce0 [ 20.101157] ? lock_release+0xa40/0xa40 [ 20.101459] ? __mpol_equal+0x2b0/0x2b0 [ 20.101752] ? kasan_check_write+0x14/0x20 [ 20.102069] ? _copy_from_user+0x99/0x110 [ 20.102373] ? get_nodes+0x14f/0x1c0 [ 20.102620] do_group_exit+0x149/0x400 [ 20.102904] ? SyS_mbind+0xe6/0x150 [ 20.103173] ? SyS_exit+0x30/0x30 [ 20.103428] ? compat_SyS_mbind+0x240/0x240 [ 20.103743] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 20.104072] SyS_exit_group+0x1d/0x20 [ 20.104337] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 20.104647] RIP: 0033:0x436c79 [ 20.104871] RSP: 002b:00007ffc886ae728 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 20.105443] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000436c79 [ 20.105978] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 20.106487] RBP: 00000000006c3018 R08: 000000000000003c R09: 00000000000000e7 [ 20.107167] R10: ffffffffffffffc0 R11: 0000000000000246 R12: 0000000000000000 [ 20.107778] R13: 0000000000404180 R14: 0000000000404210 R15: 0000000000000000 [ 20.108323] Dumping ftrace buffer: [ 20.108581] (ftrace buffer empty) [ 20.108823] Kernel Offset: disabled [ 20.109063] Rebooting in 86400 seconds..