audit: type=1804 audit(2000000035.030:124): pid=9860 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir941091163/syzkaller.gvnPxO/76/bus" dev="sda1" ino=16730 res=1
audit: type=1804 audit(2000000035.150:125): pid=9873 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir941091163/syzkaller.gvnPxO/76/bus" dev="sda1" ino=16730 res=1
WARNING: CPU: 0 PID: 9873 at arch/x86/kvm/mmu.c:830 mmu_spte_clear_track_bits+0x45f/0x520 arch/x86/kvm/mmu.c:830
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 9873 Comm: syz-executor3 Not tainted 4.20.0+ #396
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1d3/0x2c6 lib/dump_stack.c:113
 panic+0x2ad/0x55f kernel/panic.c:189
 __warn.cold.8+0x20/0x52 kernel/panic.c:544
 report_bug+0x254/0x2d0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:271
 do_invalid_op+0x36/0x40 arch/x86/kernel/traps.c:290
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:973
RIP: 0010:mmu_spte_clear_track_bits+0x45f/0x520 arch/x86/kvm/mmu.c:830
Code: 40 ff ff ff 31 ff 44 89 fe 48 ba 00 00 00 00 00 fc ff df c6 04 10 f8 e8 ff a9 70 00 45 85 ff 0f 85 65 fd ff ff e8 e1 a8 70 00 <0f> 0b e9 59 fd ff ff e8 d5 a8 70 00 4c 89 ef e8 3d 32 f7 ff 31 f6
RSP: 0018:ffff8880591f6ba8 EFLAGS: 00010212
RAX: 0000000000040000 RBX: 405000007938f070 RCX: ffffc9000c026000
RDX: 0000000000001aea RSI: ffffffff8111435f RDI: 0000000000000005
RBP: ffff8880591f6cc0 R08: ffff8880a4c84140 R09: fffff940003c9c7e
R10: fffff940003c9c7e R11: ffffea0001e4e3f7 R12: 1ffff1100b23ed77
R13: 000000000007938f R14: ffff8880591f6c98 R15: 0000000000000000
 pte_list_remove arch/x86/kvm/mmu.c:1335 [inline]
 kvm_zap_rmapp.constprop.125+0x88/0xf0 arch/x86/kvm/mmu.c:1727
 kvm_unmap_rmapp+0x15/0x20 arch/x86/kvm/mmu.c:1738
 kvm_handle_hva_range+0x470/0x780 arch/x86/kvm/mmu.c:1894
 kvm_unmap_hva_range+0x2e/0x40 arch/x86/kvm/mmu.c:1915
 kvm_mmu_notifier_invalidate_range_start+0xe5/0x260 arch/x86/kvm/../../../virt/kvm/kvm_main.c:380
 __mmu_notifier_invalidate_range_start+0x1ef/0x330 mm/mmu_notifier.c:179
 mmu_notifier_invalidate_range_start include/linux/mmu_notifier.h:273 [inline]
 zap_page_range_single+0x449/0x740 mm/memory.c:1387
 unmap_mapping_range_vma mm/memory.c:2557 [inline]
 unmap_mapping_range_tree mm/memory.c:2578 [inline]
 unmap_mapping_pages+0x3a7/0x5b0 mm/memory.c:2610
 unmap_mapping_range+0x48/0x60 mm/memory.c:2645
 truncate_pagecache+0x54/0x90 mm/truncate.c:801
 ext4_setattr+0x1804/0x2810 fs/ext4/inode.c:5662
 notify_change+0xbde/0x1110 fs/attr.c:334
 do_truncate+0x1bd/0x2d0 fs/open.c:63
 handle_truncate fs/namei.c:3008 [inline]
 do_last fs/namei.c:3424 [inline]
 path_openat+0x375c/0x5160 fs/namei.c:3534
 do_filp_open+0x255/0x380 fs/namei.c:3564
 do_sys_open+0x568/0x780 fs/open.c:1063
 ksys_open include/linux/syscalls.h:1298 [inline]
 __do_sys_creat fs/open.c:1121 [inline]
 __se_sys_creat fs/open.c:1119 [inline]
 __x64_sys_creat+0x61/0x80 fs/open.c:1119
 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x457ec9
Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f4320c57c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000457ec9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0
RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4320c586d4
R13: 00000000004be411 R14: 00000000004ce608 R15: 00000000ffffffff
Kernel Offset: disabled
Rebooting in 86400 seconds..