WARNING in kvm_arch_vcpu_ioctl_run

Status: fixed on 2017/09/26 01:38
Fix commit: bbeac2830f4d KVM: X86: Fix residual mmio emulation request to userspace
First crash: 3301d, last: 3235d
▶ ▼ Similar bugs (11)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in kvm_arch_vcpu_ioctl_run (5) kvm-x86 -1 syz, C error 343 1062d 1150d 23/29 fixed on 2023/10/12 12:47
upstream WARNING in kvm_arch_vcpu_ioctl_run (4) kvm-x86 -1 syz, C error 288 1154d 1238d 22/29 fixed on 2023/06/08 14:41
upstream WARNING in kvm_arch_vcpu_ioctl_run (2) kvm-x86 -1 syz, C 61018 3110d 3199d 4/29 fixed on 2018/03/13 09:44
linux-6.6 WARNING in kvm_arch_vcpu_ioctl_run origin:upstream -1 syz, C done 2 326d 326d 2/2 fixed on 2025/10/19 16:15
upstream WARNING in kvm_arch_vcpu_ioctl_run (6) kvm-x86 -1 syz, C 117 303d 384d 29/29 fixed on 2025/10/29 21:02
linux-4.14 WARNING in kvm_arch_vcpu_ioctl_run -1 syz, C inconclusive 71 1421d 2598d 0/1 upstream: reported C repro on 2019/06/25 23:07
upstream WARNING in kvm_arch_vcpu_ioctl_run (3) kvm-x86 -1 syz, C done error 16157 1259d 3052d 22/29 fixed on 2023/02/24 13:50
linux-4.19 WARNING in kvm_arch_vcpu_ioctl_run -1 syz, C error 116 1331d 2606d 0/1 upstream: reported C repro on 2019/06/17 10:07
linux-5.15 WARNING in kvm_arch_vcpu_ioctl_run origin:lts-only -1 syz, C inconclusive 2039 15h59m 1214d 0/3 upstream: reported C repro on 2023/04/09 03:02
android-6-12 WARNING in kvm_arch_vcpu_ioctl_run origin:upstream -1 syz, C 51 283d 384d 0/1 premoderation: reported C repro on 2025/07/17 01:43
linux-6.1 WARNING in kvm_arch_vcpu_ioctl_run origin:lts-only -1 syz, C done 1573 15h39m 1231d 0/3 upstream: reported C repro on 2023/03/23 13:22

Sample crash report:
TSC Offset = 0xffffffe754fc48c5
EPT pointer = 0x00000001cc9ff01e
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3586 at arch/x86/kvm/x86.c:7265 kvm_arch_vcpu_ioctl_run+0x213/0x5b90 arch/x86/kvm/x86.c:7265
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 3586 Comm: syzkaller514534 Not tainted 4.13.0+ #87
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:16 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:52
 panic+0x1e4/0x417 kernel/panic.c:181
 __warn+0x1c4/0x1d9 kernel/panic.c:542
 report_bug+0x211/0x2d0 lib/bug.c:183
 fixup_bug+0x40/0x90 arch/x86/kernel/traps.c:178
 do_trap_no_signal arch/x86/kernel/traps.c:212 [inline]
 do_trap+0x260/0x390 arch/x86/kernel/traps.c:261
 do_error_trap+0x120/0x390 arch/x86/kernel/traps.c:298
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:311
 invalid_op+0x18/0x20 arch/x86/entry/entry_64.S:905
RIP: 0010:kvm_arch_vcpu_ioctl_run+0x213/0x5b90 arch/x86/kvm/x86.c:7265
RSP: 0018:ffff8801c2f7f670 EFLAGS: 00010297
RAX: ffff8801c2a54340 RBX: ffff8801c358a000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8801c35f8fb8
RBP: ffff8801c2f7fa40 R08: 0000000000000000 R09: 0000000000000000
R10: ffff8801c2f7fa58 R11: 0000000000000000 R12: 0000000000000001
R13: 0000000000000000 R14: ffff8801c3b9f500 R15: ffff8801c35f8d80
 kvm_vcpu_ioctl+0x64c/0x1010 arch/x86/kvm/../../../virt/kvm/kvm_main.c:2551
 vfs_ioctl fs/ioctl.c:45 [inline]
 do_vfs_ioctl+0x1b1/0x1530 fs/ioctl.c:685
 SYSC_ioctl fs/ioctl.c:700 [inline]
 SyS_ioctl+0x8f/0xc0 fs/ioctl.c:691
 entry_SYSCALL_64_fastpath+0x1f/0xbe
RIP: 0033:0x448f69
RSP: 002b:00007f79893d3dc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000448f69
RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000001d
RBP: 0000000000000082 R08: 00007f79893d4700 R09: 00007f79893d4700
R10: 00007f79893d4700 R11: 0000000000000202 R12: 0000000000000000
R13: 00007ffe1f90043f R14: 00007f79893d49c0 R15: 0000000000000000
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (20284):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2017/09/16 14:07 upstream 7318413077a5 96b8e399 .config console log report syz C ci-upstream-kasan-gce
2017/08/30 01:47 upstream 785373b4c387 be291771 .config console log report syz C ci-upstream-kasan-gce
2017/08/23 17:26 upstream 98b9f8a45499 f238fbd4 .config console log report syz C ci-upstream-kasan-gce
2017/08/21 15:59 upstream 14ccee78fc82 f238fbd4 .config console log report syz C ci-upstream-kasan-gce
2017/08/20 14:55 upstream 58d4e450a490 f238fbd4 .config console log report syz C ci-upstream-kasan-gce
2017/08/12 18:36 upstream 043cd07c555f 360f0528 .config console log report syz C ci-upstream-kasan-gce
2017/08/12 04:21 upstream 8001a975f955 a0330c0f .config console log report syz C ci-upstream-kasan-gce
2017/09/21 04:07 upstream c52f56a69d10 653022e6 .config console log report syz C ci-upstream-kasan-gce-386
2017/09/17 11:28 net-next-old 2bd6bf03f4c1 96b8e399 .config console log report syz C ci-upstream-net-kasan-gce
2017/09/21 04:07 linux-next 0b093a564fe0 4e341009 .config console log report syz C ci-upstream-next-kasan-gce
2017/09/17 11:27 linux-next 1f183459b514 da1873aa .config console log report syz C skylake-linux-next-kasan-qemu
2017/09/16 14:07 linux-next 1f183459b514 da1873aa .config console log report syz C skylake-linux-next-kasan-qemu
2017/08/16 07:46 linux-next 5d51332f20b2 f93be584 .config console log report syz C ci-upstream-next-kasan-gce
2017/09/23 18:11 upstream c65da8e22b1d c26ea367 .config console log report syz ci-upstream-kasan-gce
2017/07/28 22:02 upstream 0b5477d9dabd 078d5f87 .config console log report syz ci-upstream-kasan-gce
2017/07/24 23:20 upstream 520eccdfe187 e78d03e2 .config console log report syz ci-upstream-kasan-gce
2017/07/24 13:29 upstream 520eccdfe187 e78d03e2 .config console log report syz ci-upstream-kasan-gce
2017/07/23 20:04 upstream a56e88ec05df eab4e2eb .config console log report syz ci-upstream-kasan-gce
2017/07/23 14:22 upstream 4b162c530d9c eab4e2eb .config console log report syz ci-upstream-kasan-gce
2017/07/23 04:18 upstream 4b162c530d9c eab4e2eb .config console log report syz ci-upstream-kasan-gce
2017/07/22 19:50 upstream 82abbea734d6 d67f590c .config console log report syz ci-upstream-kasan-gce
2017/07/22 14:56 upstream 82abbea734d6 d67f590c .config console log report syz ci-upstream-kasan-gce
2017/07/22 14:29 upstream 82abbea734d6 d67f590c .config console log report syz ci-upstream-kasan-gce
2017/07/22 13:43 upstream 82abbea734d6 d67f590c .config console log report syz ci-upstream-kasan-gce
2017/07/22 13:04 upstream 82abbea734d6 d67f590c .config console log report syz ci-upstream-kasan-gce
2017/09/17 06:01 net-next-old 2bd6bf03f4c1 96b8e399 .config console log report syz ci-upstream-net-kasan-gce
2017/09/17 06:26 linux-next 1f183459b514 da1873aa .config console log report syz skylake-linux-next-kasan-qemu
2017/09/02 00:12 linux-next 1d53d908b79d a54dce00 .config console log report syz ci-upstream-next-kasan-gce
2017/08/30 01:29 linux-next 9458bf6edfa8 ed7f9598 .config console log report syz ci-upstream-next-kasan-gce
2017/08/13 18:48 linux-next 91dfed74eabc 360f0528 .config console log report syz ci-upstream-next-kasan-gce
2017/08/11 22:47 linux-next 91dfed74eabc 360f0528 .config console log report syz ci-upstream-next-kasan-gce
2017/09/25 22:21 upstream e19b205be43d c26ea367 .config console log report ci-upstream-kasan-gce
2017/09/07 23:30 upstream 3b9f8ed25dbe 0ed1da4a .config console log report ci-upstream-kasan-gce
2017/09/03 10:46 upstream d0d6ab53c9ab a54dce00 .config console log report ci-upstream-kasan-gce
2017/09/02 12:07 upstream 54f70f52e3b3 aa51461a .config console log report ci-upstream-kasan-gce
2017/08/29 11:35 upstream 9c3a815f471a be291771 .config console log report ci-upstream-kasan-gce
2017/08/26 09:10 upstream b3242dba9ff2 9ec49e08 .config console log report ci-upstream-kasan-gce
2017/08/20 07:54 upstream 58d4e450a490 f238fbd4 .config console log report ci-upstream-kasan-gce
2017/08/18 06:42 upstream 99f781b1bfc1 172189e9 .config console log report ci-upstream-kasan-gce
2017/08/11 20:01 upstream 8001a975f955 a0330c0f .config console log report ci-upstream-kasan-gce
2017/07/31 13:49 upstream 16f73eb02d7e cbf25dd1 .config console log report ci-upstream-kasan-gce
2017/07/30 15:21 upstream 0a07b238e5f4 fe8ced11 .config console log report ci-upstream-kasan-gce
2017/07/27 13:44 upstream da08f35b0f82 b0d23a5c .config console log report ci-upstream-kasan-gce
2017/07/24 06:15 upstream a56e88ec05df eab4e2eb .config console log report ci-upstream-kasan-gce
2017/09/22 06:11 upstream 4a704d6db0ee c26ea367 .config console log report ci-upstream-kasan-gce-386
2017/09/25 18:30 mmots 720bbe532b7c c26ea367 .config console log report ci-upstream-mmots-kasan-gce
2017/09/25 16:49 linux-next 73527316e3fd c26ea367 .config console log report ci-upstream-next-kasan-gce
2017/09/19 16:48 linux-next 840cc455c5f5 92f543f0 .config console log report ci-upstream-next-kasan-gce
2017/09/19 07:29 linux-next 840cc455c5f5 92f543f0 .config console log report ci-upstream-next-kasan-gce
2017/09/12 09:14 mmots 114c278181ca 96b8e399 .config console log report ci-upstream-mmots-kasan-gce
2017/08/29 16:41 linux-next 9458bf6edfa8 ed7f9598 .config console log report skylake-linux-next-kasan-qemu
* Struck through repros no longer work on HEAD.