tpg Y'CbCr encoding: 0/0 tpg quantization: 0/0 tpg RGB range: 0/2 vivid-000: ================== END STATUS ================== vivid-000: ================= START STATUS ================= BUG: unable to handle kernel paging request at ffff888095422000 #PF error: [PROT] [WRITE] [RSVD] vivid-000: Test Pattern: 75% Colorbar PGD c201067 P4D c201067 PUD 21ffff067 PMD a7ee2063 PTE 8000000095422163 vivid-000: Fill Percentage of Frame: 100 Oops: 000b [#1] PREEMPT SMP KASAN CPU: 0 PID: 23587 Comm: syz-executor1 Not tainted 5.0.0-rc3+ #44 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__write_once_size include/linux/compiler.h:220 [inline] RIP: 0010:__update_clear_spte_fast arch/x86/kvm/mmu.c:547 [inline] RIP: 0010:mmu_spte_clear_no_track arch/x86/kvm/mmu.c:848 [inline] RIP: 0010:drop_parent_pte arch/x86/kvm/mmu.c:2040 [inline] RIP: 0010:mmu_page_zap_pte+0x2b8/0x3b0 arch/x86/kvm/mmu.c:2618 Code: 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 d1 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 c1 eb 03 <49> c7 04 24 00 00 00 00 c6 04 03 f8 b8 01 00 00 00 e9 2d fe ff ff vivid-000: Horizontal Movement: No Movement RSP: 0018:ffff88804f36f518 EFLAGS: 00010a06 RAX: dffffc0000000000 RBX: 1ffff11009e6dea9 RCX: ffffffff8111404b RDX: 1ffff11012a84400 RSI: ffffffff81114074 RDI: 0000000000000007 RBP: ffff88804f36f5d0 R08: ffff88804c44a440 R09: ffffed1015cc5b90 R10: ffffed1015cc5b8f R11: ffff8880ae62dc7b R12: ffff888095422000 R13: 1ffff11009e6dea5 R14: 0000000000000000 R15: ffff88804f36f5a8 FS: 0000000001c89940(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff888095422000 CR3: 0000000084ee8000 CR4: 00000000001426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: vivid-000: Vertical Movement: No Movement kvm_mmu_page_unlink_children arch/x86/kvm/mmu.c:2635 [inline] kvm_mmu_prepare_zap_page+0x19d/0x1440 arch/x86/kvm/mmu.c:2679 vivid-000: OSD Text Mode: All vivid-000: Show Border: false kvm_zap_obsolete_pages arch/x86/kvm/mmu.c:5843 [inline] kvm_mmu_invalidate_zap_all_pages+0x53e/0x710 arch/x86/kvm/mmu.c:5884 kvm_arch_flush_shadow_all+0x16/0x20 arch/x86/kvm/x86.c:9456 kvm_mmu_notifier_release+0x5c/0x90 arch/x86/kvm/../../../virt/kvm/kvm_main.c:494 vivid-000: Show Square: false mmu_notifier_unregister+0x1dd/0x5e0 mm/mmu_notifier.c:356 kvm_destroy_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:744 [inline] kvm_put_kvm+0x6aa/0xff0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:769 vivid-000: Sensor Flipped Horizontally: false kvm_vcpu_release+0x7b/0xa0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:2495 vivid-000: Sensor Flipped Vertically: false __fput+0x3c5/0xb10 fs/file_table.c:278 vivid-000: Insert SAV Code in Image: false ____fput+0x16/0x20 fs/file_table.c:309 task_work_run+0x1f4/0x2b0 kernel/task_work.c:113 vivid-000: Insert EAV Code in Image: false tracehook_notify_resume include/linux/tracehook.h:188 [inline] exit_to_usermode_loop+0x32a/0x3b0 arch/x86/entry/common.c:166 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x696/0x800 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x411e61 vivid-000: Reduced Framerate: false Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 94 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 RSP: 002b:00007ffeae29e1c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000411e61 RDX: 0000000000000000 RSI: 0000000000740a10 RDI: 0000000000000005 RBP: 0000000000000000 R08: 0000000000740a08 R09: 0000000000000000 R10: 00007ffeae29e0e0 R11: 0000000000000293 R12: 0000000000000000 R13: 0000000000000001 R14: 000000000000023b R15: 0000000000000001 Modules linked in: CR2: ffff888095422000 ---[ end trace 0b348557d185d546 ]--- RIP: 0010:__write_once_size include/linux/compiler.h:220 [inline] RIP: 0010:__update_clear_spte_fast arch/x86/kvm/mmu.c:547 [inline] RIP: 0010:mmu_spte_clear_no_track arch/x86/kvm/mmu.c:848 [inline] RIP: 0010:drop_parent_pte arch/x86/kvm/mmu.c:2040 [inline] RIP: 0010:mmu_page_zap_pte+0x2b8/0x3b0 arch/x86/kvm/mmu.c:2618 Code: 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 d1 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 c1 eb 03 <49> c7 04 24 00 00 00 00 c6 04 03 f8 b8 01 00 00 00 e9 2d fe ff ff RSP: 0018:ffff88804f36f518 EFLAGS: 00010a06 vivid-000: Enable Capture Cropping: true RAX: dffffc0000000000 RBX: 1ffff11009e6dea9 RCX: ffffffff8111404b RDX: 1ffff11012a84400 RSI: ffffffff81114074 RDI: 0000000000000007 RBP: ffff88804f36f5d0 R08: ffff88804c44a440 R09: ffffed1015cc5b90 R10: ffffed1015cc5b8f R11: ffff8880ae62dc7b R12: ffff888095422000 R13: 1ffff11009e6dea5 R14: 0000000000000000 R15: ffff88804f36f5a8 FS: 0000000001c89940(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff888095422000 CR3: 0000000084ee8000 CR4: 00000000001426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400