2017/08/13 22:07:55 parsed 1 programs 2017/08/13 22:07:55 executed programs: 0 syzkaller login: [ 34.910574] ------------[ cut here ]------------ [ 34.911842] WARNING: CPU: 2 PID: 3101 at arch/x86/kvm/mmu.c:719 mmu_spte_clear_track_bits+0x35a/0x3f0 [ 34.913379] Kernel panic - not syncing: panic_on_warn set ... [ 34.913379] [ 34.914661] CPU: 2 PID: 3101 Comm: syz-executor0 Not tainted 4.13.0-rc4-next-20170811 #2 [ 34.915906] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 34.916904] Call Trace: [ 34.917197] dump_stack+0x194/0x257 [ 34.917770] ? arch_local_irq_restore+0x53/0x53 [ 34.918341] panic+0x1e4/0x417 [ 34.918806] ? __warn+0x1d9/0x1d9 [ 34.919265] ? show_regs_print_info+0x65/0x65 [ 34.919855] ? mmu_spte_clear_track_bits+0x35a/0x3f0 [ 34.920316] __warn+0x1c4/0x1d9 [ 34.920636] ? mmu_spte_clear_track_bits+0x35a/0x3f0 [ 34.921339] report_bug+0x211/0x2d0 [ 34.921854] fixup_bug+0x40/0x90 [ 34.922349] do_trap+0x260/0x390 [ 34.922800] do_error_trap+0x120/0x390 [ 34.923293] ? do_trap+0x390/0x390 [ 34.923779] ? mmu_spte_clear_track_bits+0x35a/0x3f0 [ 34.924380] ? get_futex_key_refs.isra.11+0x61/0xa0 [ 34.924983] ? get_futex_key+0x34f/0x1d50 [ 34.925363] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 34.925775] do_invalid_op+0x1b/0x20 [ 34.926140] invalid_op+0x1e/0x30 [ 34.926534] RIP: 0010:mmu_spte_clear_track_bits+0x35a/0x3f0 [ 34.927096] RSP: 0018:ffff88006a87e7f0 EFLAGS: 00010297 [ 34.927913] RAX: ffff88006a3de1c0 RBX: 1ffff1000d50fd00 RCX: 1ffff1000d50fd04 [ 34.929136] RDX: 0000000000000000 RSI: 1ffff1000d50fd14 RDI: ffffea0001966d5c [ 34.930326] RBP: ffff88006a87e908 R08: ffffffff8111d5b1 R09: 0000000000000000 [ 34.931883] R10: ffff88006a87ecb0 R11: ffff8800360029d8 R12: 40000000659b5c77 [ 34.933155] R13: 0000000000000000 R14: ffff88006a87e8e0 R15: 00000000000659b5 [ 34.934351] ? kvm_mmu_invalidate_zap_all_pages+0x91/0x680 [ 34.935259] ? mmu_spte_update+0x220/0x220 [ 34.935966] ? mmu_shrink_scan+0xb50/0xb50 [ 34.936824] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 34.937704] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 34.938611] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 34.939517] drop_spte+0x24/0x250 [ 34.940104] mmu_page_zap_pte+0x224/0x340 [ 34.940832] ? kvm_mmu_zap_collapsible_spte+0x3f0/0x3f0 [ 34.941842] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 34.942749] ? do_raw_spin_trylock+0x190/0x190 [ 34.943643] ? percpu_counter_add_batch+0xce/0x130 [ 34.944479] kvm_mmu_prepare_zap_page+0x1c5/0x1310 [ 34.945217] ? trace_hardirqs_off+0xd/0x10 [ 34.945856] ? _raw_spin_unlock_irqrestore+0xa6/0xba [ 34.946641] ? mmio_info_in_cache+0x670/0x670 [ 34.947335] ? update_load_avg+0x1231/0x2a90 [ 34.947960] ? pick_next_task_fair+0x3f8/0x1610 [ 34.948634] ? lock_acquire+0x1d5/0x580 [ 34.949209] ? kprobe_flush_task+0x1a3/0x5d0 [ 34.949833] ? lock_downgrade+0x990/0x990 [ 34.950410] ? lock_acquire+0x1d5/0x580 [ 34.951044] ? lock_acquire+0x1d5/0x580 [ 34.951723] ? __is_insn_slot_addr+0x1fc/0x330 [ 34.952648] ? lock_downgrade+0x990/0x990 [ 34.953298] ? lock_release+0xa40/0xa40 [ 34.953855] ? __read_once_size_nocheck.constprop.8+0x10/0x10 [ 34.954419] ? trace_hardirqs_on+0xd/0x10 [ 34.954801] ? entry_SYSCALL_64_fastpath+0xbc/0xbe [ 34.955257] ? bpf_prog_kallsyms_find+0xbd/0x440 [ 34.955660] ? kvm_make_all_cpus_request+0x444/0x580 [ 34.956103] ? gfn_to_pfn_atomic+0x650/0x650 [ 34.956482] ? lock_downgrade+0x990/0x990 [ 34.956835] ? lock_release+0xa40/0xa40 [ 34.957172] ? do_raw_spin_trylock+0x190/0x190 [ 34.957561] ? __free_insn_slot+0x5c0/0x5c0 [ 34.957927] ? unwind_dump+0x4c0/0x4c0 [ 34.958263] kvm_mmu_invalidate_zap_all_pages+0x4a0/0x680 [ 34.958735] ? kvm_mmu_zap_collapsible_sptes+0xb0/0xb0 [ 34.959205] ? lock_downgrade+0x990/0x990 [ 34.959594] ? lock_release+0xa40/0xa40 [ 34.959951] ? lock_release+0xa40/0xa40 [ 34.960324] ? __khugepaged_exit+0x410/0x650 [ 34.960715] ? kvm_vcpu_on_spin+0x710/0x710 [ 34.961098] kvm_arch_flush_shadow_all+0x15/0x20 [ 34.961513] kvm_mmu_notifier_release+0x59/0x90 [ 34.961912] ? kvm_vcpu_on_spin+0x710/0x710 [ 34.962289] __mmu_notifier_release+0x1d5/0x690 [ 34.962704] ? __mmu_notifier_invalidate_range_end+0x350/0x350 [ 34.963230] ? __khugepaged_exit+0x3f7/0x650 [ 34.963612] ? lock_downgrade+0x990/0x990 [ 34.963971] ? do_raw_spin_trylock+0x190/0x190 [ 34.964367] ? trace_hardirqs_off+0xd/0x10 [ 34.964732] ? quarantine_put+0xeb/0x190 [ 34.965084] exit_mmap+0x479/0x560 [ 34.965391] ? __khugepaged_exit+0x43d/0x650 [ 34.965772] ? SyS_munmap+0x30/0x30 [ 34.966114] ? hugepage_madvise+0xf0/0xf0 [ 34.966474] ? check_same_owner+0x320/0x320 [ 34.966853] ? rcu_note_context_switch+0x710/0x710 [ 34.967291] ? __might_fault+0x110/0x1d0 [ 34.967643] ? __might_sleep+0x95/0x190 [ 34.968009] mmput+0x223/0x6e0 [ 34.968287] ? get_task_exe_file+0xc0/0xc0 [ 34.968667] ? is_current_pgrp_orphaned+0xa0/0xa0 [ 34.969079] ? do_exit+0x991/0x1b30 [ 34.969391] ? lock_downgrade+0x990/0x990 [ 34.969749] ? do_raw_spin_trylock+0x190/0x190 [ 34.970079] ? do_exit+0x480/0x1b30 [ 34.970317] ? down_read+0xa4/0x150 [ 34.970634] ? do_exit+0x4ad/0x1b30 [ 34.971129] ? __down_interruptible+0x6a0/0x6a0 [ 34.971690] ? trace_hardirqs_on+0xd/0x10 [ 34.972042] ? _raw_spin_unlock_irq+0x27/0x70 [ 34.972423] do_exit+0x9a1/0x1b30 [ 34.972714] ? retint_kernel+0x10/0x10 [ 34.973046] ? lock_acquire+0x1d5/0x580 [ 34.973382] ? mm_update_next_owner+0x930/0x930 [ 34.974008] ? lock_acquire+0x1d5/0x580 [ 34.974341] ? lock_acquire+0x1d5/0x580 [ 34.974675] ? __is_insn_slot_addr+0x1fc/0x330 [ 34.975056] ? lock_downgrade+0x990/0x990 [ 34.975488] ? lock_release+0xa40/0xa40 [ 34.975994] ? __read_once_size_nocheck.constprop.8+0x10/0x10 [ 34.976910] ? entry_SYSCALL_64_fastpath+0x1f/0xbe [ 34.977386] ? bpf_prog_kallsyms_find+0xbd/0x440 [ 34.977832] ? lock_acquire+0x1d5/0x580 [ 34.978218] ? lock_acquire+0x1d5/0x580 [ 34.978897] ? is_bpf_text_address+0x7b/0x120 [ 34.979682] ? lock_downgrade+0x990/0x990 [ 34.980391] ? lock_release+0xa40/0xa40 [ 34.981094] ? __free_insn_slot+0x5c0/0x5c0 [ 34.981786] ? unwind_dump+0x4c0/0x4c0 [ 34.982395] ? __kernel_text_address+0xae/0xe0 [ 34.983075] ? is_bpf_text_address+0xa4/0x120 [ 34.983685] ? __kernel_text_address+0xae/0xe0 [ 34.984266] ? unwind_get_return_address+0x61/0xa0 [ 34.984823] ? __save_stack_trace+0x7e/0xd0 [ 34.985206] ? __dequeue_signal+0x103/0x7b0 [ 34.985544] ? recalc_sigpending_tsk+0x117/0x150 [ 34.985919] ? get_signal+0x855/0x17e0 [ 34.986236] ? lock_downgrade+0x990/0x990 [ 34.986571] ? kvm_vcpu_ioctl+0x2be/0x1010 [ 34.987139] do_group_exit+0x149/0x400 [ 34.987662] ? SyS_exit+0x30/0x30 [ 34.988112] ? __mutex_unlock_slowpath+0x10/0xac0 [ 34.988706] get_signal+0x7e8/0x17e0 [ 34.989017] ? ptrace_notify+0x130/0x130 [ 34.989549] ? kvm_vcpu_ioctl+0x2c3/0x1010 [ 34.989961] ? __kvm_gfn_to_hva_cache_init+0xb80/0xb80 [ 34.990745] ? __handle_mm_fault+0x57f/0x3980 [ 34.991528] ? __pmd_alloc+0x4e0/0x4e0 [ 34.991986] ? lock_acquire+0x1d5/0x580 [ 34.992370] ? __fget+0x333/0x570 [ 34.992972] do_signal+0x94/0x1ee0 [ 34.993328] ? lock_release+0xa40/0xa40 [ 34.993737] ? lock_downgrade+0x990/0x990 [ 34.994126] ? setup_sigcontext+0x7d0/0x7d0 [ 34.994523] ? __fget+0x35c/0x570 [ 34.994749] ? __handle_mm_fault+0x3980/0x3980 [ 34.995353] ? vmacache_find+0x61/0x270 [ 34.995642] ? vmacache_update+0xfe/0x130 [ 34.995991] ? __kvm_gfn_to_hva_cache_init+0xb80/0xb80 [ 34.996491] exit_to_usermode_loop+0x224/0x300 [ 34.996941] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 34.997558] ? selinux_capable+0x40/0x40 [ 34.997960] syscall_return_slowpath+0x42f/0x500 [ 34.998431] ? prepare_exit_to_usermode+0x2c0/0x2c0 [ 34.998929] ? security_file_ioctl+0x7d/0xb0 [ 34.999470] ? security_file_ioctl+0x89/0xb0 [ 34.999909] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 35.000361] entry_SYSCALL_64_fastpath+0xbc/0xbe [ 35.000809] RIP: 0033:0x446627 [ 35.001018] RSP: 002b:00007fd4d1d9f088 EFLAGS: 00000217 ORIG_RAX: 0000000000000010 [ 35.001654] RAX: 0000000000000000 RBX: 0000000000000017 RCX: 0000000000446627 [ 35.002328] RDX: 00007fd4d1d9f6a0 RSI: 000000008138ae83 RDI: 0000000000000005 [ 35.002954] RBP: 00000000201ca000 R08: 0000000000000001 R09: 0000000000000000 [ 35.003625] R10: 0000000000000001 R11: 0000000000000217 R12: 0000000000000018 [ 35.004464] R13: 00000000000055e0 R14: 00000000006e76a0 R15: 0000000000000005 [ 35.005161] Dumping ftrace buffer: [ 35.005471] (ftrace buffer empty) [ 35.005793] Kernel Offset: disabled [ 35.006129] Rebooting in 86400 seconds..