[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.183' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 55.763409][ T6784] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 55.786785][ T6784] ------------[ cut here ]------------ [ 55.792353][ T6784] kernel BUG at arch/x86/kvm/mmu/mmu.c:3722! [ 55.799484][ T6784] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 55.805566][ T6784] CPU: 0 PID: 6784 Comm: syz-executor805 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 55.815433][ T6784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.825480][ T6784] RIP: 0010:kvm_mmu_load+0xbfa/0xe00 [ 55.830736][ T6784] Code: 9c 5f 99 00 48 8b 44 24 08 e9 cf f5 ff ff e8 5d 5f 99 00 e9 b7 f4 ff ff 4c 89 f7 e8 80 5f 99 00 e9 78 f4 ff ff e8 16 4c 5a 00 <0f> 0b 48 89 df e8 6c 5f 99 00 e9 7e f8 ff ff e8 62 5f 99 00 e9 c4 [ 55.850325][ T6784] RSP: 0018:ffffc90000f77b10 EFLAGS: 00010293 [ 55.856380][ T6784] RAX: ffff8880a1348340 RBX: 0000000000000000 RCX: ffffffff81195061 [ 55.864321][ T6784] RDX: 0000000000000000 RSI: ffffffff81195b4a RDI: 0000000000000001 [ 55.872265][ T6784] RBP: ffff888095110040 R08: ffff8880a1348340 R09: ffffed1015cc717c [ 55.880220][ T6784] R10: ffff8880ae638bdb R11: ffffed1015cc717b R12: 0000000000000000 [ 55.888511][ T6784] R13: 0000000000000001 R14: ffff888095110458 R15: 0000000000000000 [ 55.896458][ T6784] FS: 0000000002160880(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 55.905359][ T6784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.911912][ T6784] CR2: 00007fa3dffa2010 CR3: 000000008fb39000 CR4: 00000000001426f0 [ 55.919869][ T6784] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.927813][ T6784] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.935771][ T6784] Call Trace: [ 55.939050][ T6784] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 55.945004][ T6784] kvm_arch_vcpu_ioctl_run+0x4022/0x6920 [ 55.950622][ T6784] ? kvm_arch_vcpu_runnable+0x6f0/0x6f0 [ 55.956142][ T6784] ? debug_smp_processor_id+0x2f/0x185 [ 55.961572][ T6784] ? lock_downgrade+0x840/0x840 [ 55.966418][ T6784] ? rcu_read_lock_held_common+0xa0/0xa0 [ 55.972022][ T6784] ? debug_smp_processor_id+0x2f/0x185 [ 55.977456][ T6784] ? kvm_vcpu_ioctl+0x46a/0xe20 [ 55.982277][ T6784] kvm_vcpu_ioctl+0x46a/0xe20 [ 55.986927][ T6784] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 55.993312][ T6784] ? ioctl_file_clone+0x180/0x180 [ 55.998309][ T6784] ? debug_smp_processor_id+0x2f/0x185 [ 56.003778][ T6784] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 56.009296][ T6784] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 56.015251][ T6784] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 56.021654][ T6784] ksys_ioctl+0x11a/0x180 [ 56.025960][ T6784] __x64_sys_ioctl+0x6f/0xb0 [ 56.030522][ T6784] do_syscall_64+0xf6/0x7d0 [ 56.035065][ T6784] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 56.040929][ T6784] RIP: 0033:0x4401f9 [ 56.044797][ T6784] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 56.064381][ T6784] RSP: 002b:00007ffedfd41fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.072764][ T6784] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004401f9 [ 56.080711][ T6784] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 56.088657][ T6784] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 56.096600][ T6784] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000401a80 [ 56.104548][ T6784] R13: 0000000000401b10 R14: 0000000000000000 R15: 0000000000000000 [ 56.112506][ T6784] Modules linked in: [ 56.124864][ T6784] ---[ end trace 2d2ab0eef7b13e8d ]--- [ 56.130355][ T6784] RIP: 0010:kvm_mmu_load+0xbfa/0xe00 [ 56.135660][ T6784] Code: 9c 5f 99 00 48 8b 44 24 08 e9 cf f5 ff ff e8 5d 5f 99 00 e9 b7 f4 ff ff 4c 89 f7 e8 80 5f 99 00 e9 78 f4 ff ff e8 16 4c 5a 00 <0f> 0b 48 89 df e8 6c 5f 99 00 e9 7e f8 ff ff e8 62 5f 99 00 e9 c4 [ 56.155306][ T6784] RSP: 0018:ffffc90000f77b10 EFLAGS: 00010293 [ 56.161358][ T6784] RAX: ffff8880a1348340 RBX: 0000000000000000 RCX: ffffffff81195061 [ 56.169367][ T6784] RDX: 0000000000000000 RSI: ffffffff81195b4a RDI: 0000000000000001 [ 56.177389][ T6784] RBP: ffff888095110040 R08: ffff8880a1348340 R09: ffffed1015cc717c [ 56.185398][ T6784] R10: ffff8880ae638bdb R11: ffffed1015cc717b R12: 0000000000000000 [ 56.193394][ T6784] R13: 0000000000000001 R14: ffff888095110458 R15: 0000000000000000 [ 56.201454][ T6784] FS: 0000000002160880(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 56.210455][ T6784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.217072][ T6784] CR2: 00007fa3dffa6000 CR3: 000000008fb39000 CR4: 00000000001426f0 [ 56.225115][ T6784] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.233101][ T6784] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.241137][ T6784] Kernel panic - not syncing: Fatal exception [ 56.248157][ T6784] Kernel Offset: disabled [ 56.252471][ T6784] Rebooting in 86400 seconds..