syzbot

 sign-in | mailing list | source | docs
🐞 Open [1463]
≡ Subsystems
🐞 Fixed [6847]
🐞 Invalid [17766]
⬇ Missing Backports [226]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

Applied filters: Label=subsystems:kvm (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
KASAN: slab-use-after-free Write in kvm_gmem_release kvm 24 C done 12 30d 80d 29/29 4d21h ae431059e75d KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying
WARNING in virtio_transport_send_pkt_info kvm net virt -1 C 145 135d 153d 29/29 95d 7fb1291257ea vsock/virtio: Fix message iterator handling on transmit path
WARNING: suspicious RCU usage in kvm_vcpu_gfn_to_memslot kvm 4 C 67 295d 353d 28/29 215d 3617c0ee7dec KVM: x86/xen: Only write Xen hypercall page for guest writes to MSR
general protection fault in add_wait_queue net virt kvm 10 C done 676 329d 343d 28/29 215d 78dafe1cf3af vsock: Orphan socket after transport release
KASAN: slab-use-after-free Read in kvm_put_kvm kvm 19 1 447d 447d 28/29 424d ae8f8b376102 KVM: arm64: Unregister redistributor for failed vCPU creation
WARNING in __kvm_gpc_refresh (2) kvm -1 C error 2 579d 593d 27/29 516d ebbdf37ce9ab KVM: Validate hva in kvm_gpc_activate_hva() to fix __kvm_gpc_refresh() WARN
UBSAN: array-index-out-of-bounds in lock_timer_base bcachefs kvm 15 4 573d 587d 26/29 551d b79922009214 bcachefs: Add missing synchronize_srcu_expedited() call when shutting down
WARNING: locking bug in srcu_gp_start_if_needed kvm bcachefs 4 2 578d 580d 26/29 551d f770a6e9a3d7 bcachefs: Fix initialization order for srcu barrier
WARNING: locking bug in __timer_delete_sync bcachefs kvm 4 6 565d 589d 26/29 551d b79922009214 bcachefs: Add missing synchronize_srcu_expedited() call when shutting down
KASAN: slab-use-after-free Read in vhost_task_fn kvm net virt 19 C done 2661 620d 622d 25/29 585d db5247d9bf5c vhost_task: Handle SIGKILL by flushing work and exiting
WARNING in __kvm_gpc_refresh kvm -1 C 178 600d 664d 25/29 599d 5c9ca4ed8908 KVM: Check validity of offset+length of gfn_to_pfn_cache prior to activation
WARNING in kvm_mmu_notifier_invalidate_range_start (3) kvm -1 C inconclusive done 44 726d 787d 25/29 675d 4cccb6221cae fs/proc/task_mmu: move mmu notification mechanism inside mm lock
WARNING in kvm_mmu_notifier_change_pte kvm -1 C inconclusive 2 750d 760d 25/29 712d 4cccb6221cae fs/proc/task_mmu: move mmu notification mechanism inside mm lock
KMSAN: uninit-value in virtio_transport_recv_pkt virt kvm net 7 C 20713 794d 808d 25/29 753d 34c4effacfc3 virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()
general protection fault in vhost_work_queue kvm net virt 2 1 962d 958d 23/29 923d a284f09effea vhost: Fix crash during early vhost_transport_send_pkt calls
kernel BUG in vhost_get_vq_desc kvm net virt -1 C inconclusive 19 1416d 1429d 22/29 1052d a58da53ffd70 vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
WARNING: ODEBUG bug in kvm_xen_vcpu_set_attr kvm kvm-x86 io-uring -1 C done 4 1260d 1313d 22/29 1052d af735db31285 KVM: x86/xen: Initialize Xen timer only once c03689913635 KVM: x86/xen: Stop Xen timer before changing IRQ
INFO: task hung in vhost_work_dev_flush kvm net virt 1 C error 2 1432d 1423d 22/29 1052d e2ae38cf3d91 vhost: fix hung thread due to erroneous iotlb entries
WARNING in kvm_mmu_notifier_invalidate_range_start (2) kvm -1 C done 14 1379d 1392d 22/29 1052d 01e67e04c281 mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
WARNING in vhost_dev_cleanup (2) kvm net virt -1 79 1417d 1425d 22/29 1052d a58da53ffd70 vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
memory leak in kvm_set_memslot kvm 3 C 1 1336d 1336d 22/29 1052d c87661f855c3 KVM: Free new dirty bitmap if creating a new memslot fails
kernel BUG in kvm_read_guest_offset_cached kvm -1 11 1505d 1511d 20/29 1405d 8503fea6761d KVM: VMX: do not use uninitialized gfn_to_hva_cache
WARNING in kvm_mmu_notifier_invalidate_range_start kvm -1 C done 19 1414d 1475d 20/29 1405d d6aba4c8e20d hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
upstream boot error: WARNING in kvm_wait kvm -1 233 1759d 1773d 20/29 1524d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
memory leak in kvm_dev_ioctl kvm 3 C 37 1642d 1654d 20/29 1524d 004d62eb4e57 kvm: debugfs: fix memory leak in kvm_create_vm_debugfs
usb-testing boot error: WARNING in kvm_wait kvm -1 3 1767d 1770d 20/29 1524d f4e61f0c9add  x86/kvm: Fix broken irq restoration in kvm_wait
WARNING in kvm_wait kvm -1 C error 119882 1753d 1770d 20/29 1524d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
bpf-next test error: WARNING in kvm_wait kvm -1 1 1763d 1763d 20/29 1524d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
memory leak in virtio_transport_send_pkt_info virt kvm net 3 C 2 1735d 1798d 20/29 1524d 8432b8114957 vsock/virtio: free queued packets when closing socket
net test error: WARNING in kvm_wait kvm -1 1 1766d 1766d 20/29 1524d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
linux-next boot error: WARNING in kvm_wait kvm -1 9 1758d 1769d 20/29 1524d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
upstream test error: WARNING in kvm_wait kvm -1 2 1765d 1766d 20/29 1524d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
general protection fault in kvm_hv_irq_routing_update kvm kvm-x86 2 C done 33 1774d 1781d 20/29 1738d 919f4ebc5987 KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref
BUG: unable to handle kernel NULL pointer dereference in kvm_vm_ioctl kvm 10 1 2034d 2034d 15/29 2004d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
BUG: unable to handle kernel NULL pointer dereference in kvm_vcpu_gfn_to_memslot kvm 10 1 2034d 2034d 15/29 2004d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
BUG: soft lockup in wg_packet_tx_worker kvm 1 1 2076d 2076d 15/29 2004d df4953e4e997 sch_sfq: validate silly quantum values
KASAN: slab-out-of-bounds Read in __kvm_gfn_to_hva_cache_init kvm 17 C done 1537 2060d 2105d 15/29 2033d b6467ab142b7 KVM: Check validity of resolved slot when searching memslots
kernel panic: stack is corrupted in vhost_net_ioctl kvm net virt 2 C done 2 2157d 2244d 15/29 2097d 42d84c8490f9 vhost: Check docket sk_family instead of call getname
INFO: task hung in lock_sock_nested (2) virt kvm net 1 C done 418 2137d 2150d 15/29 2097d 3f74957fcbea vsock: fix potential deadlock in transport->release()
general protection fault in virtio_transport_release net virt kvm 2 C done 7 2244d 2245d 15/29 2222d 039fcccaed33 vsock: avoid to assign transport if its initialization fails
general protection fault in kvm_coalesced_mmio_init kvm 2 syz done 48 2252d 2261d 14/29 2235d 8a44119a98be KVM: Fix NULL-ptr deref after kvm_create_vm fails
BUG: unable to handle kernel paging request in coalesced_mmio_write kvm 8 C done 10 2387d 2392d 13/29 2280d b60fe990c6b0 KVM: coalesced_mmio: add bounds checking
INFO: task hung in vhost_net_stop_vq virt kvm net 1 C done 136 2461d 2599d 12/29 2421d 813dbeb656d6 vhost: reject zero size iova range
KMSAN: kernel-infoleak in kvm_vcpu_write_guest_page kvm 9 C 25 2595d 2623d 11/29 2504d 3a33d030daaa kvm: x86/vmx: Use kzalloc for cached_vmcs12
KMSAN: uninit-value in kvm_clear_dirty_log_protect kvm 7 6 2504d 2548d 11/29 2504d 98938aa8edd6 KVM: validate userspace input in kvm_clear_dirty_log_protect()
KASAN: slab-out-of-bounds Read in kvm_clear_dirty_log_protect kvm 17 C 54 2555d 2566d 11/29 2504d 98938aa8edd6 KVM: validate userspace input in kvm_clear_dirty_log_protect()
WARNING: refcount bug in kvm_vm_ioctl kvm 13 syz 13 2538d 2651d 11/29 2504d cfa39381173d kvm: fix kvm_ioctl_create_device() reference counting (CVE-2019-6974)
KASAN: use-after-free Read in kvm_put_kvm kvm 19 C 143 2580d 2640d 11/29 2558d 987d1149be7d KVM: fix unregistering coalesced mmio zone from wrong bus
KASAN: use-after-free Read in vhost_transport_send_pkt kvm net virt 19 syz 36 2596d 2722d 11/29 2581d 834e772c8db0 vhost/vsock: fix use-after-free in network stack callers
KASAN: use-after-free Read in vhost_work_queue kvm net virt 19 syz 30 2594d 2693d 11/29 2581d 834e772c8db0 vhost/vsock: fix use-after-free in network stack callers
KASAN: use-after-free Read in vhost_transport_cancel_pkt net virt kvm 19 syz 17 2620d 2665d 11/29 2581d 834e772c8db0 vhost/vsock: fix use-after-free in network stack callers
KMSAN: kernel-infoleak in kvm_write_guest_page kvm 9 C 36 2595d 2622d 11/29 2593d bcbfbd8ec210 KVM: x86: Fix kernel info-leak in KVM_HC_CLOCK_PAIRING hypercall
KASAN: use-after-free Read in iotlb_access_ok virt kvm net 19 1 2719d 2714d 8/29 2693d b13f9c636437 vhost: reset metadata cache when initializing new IOTLB
KASAN: use-after-free Write in irq_bypass_register_consumer kvm 24 C 1632 2734d 2995d 8/29 2697d b5020a8e6b54 KVM/Eventfd: Avoid crash when assign and deassign specific eventfd in parallel.
KMSAN: uninit-value in _copy_to_iter (2) net virt kvm 7 C 226 2775d 2820d 8/29 2743d 670ae9caaca4 vhost: fix info leak due to uninitialized memory
general protection fault in __radix_tree_delete kvm kvm-x86 2 C 38 2788d 2814d 5/29 2775d 7a4deea1aa8b idr: fix invalid ptr dereference on item delete
WARNING in __mutex_unlock_slowpath kvm kvm-x86 -1 C 2 2812d 2814d 5/29 2775d 7a4deea1aa8b idr: fix invalid ptr dereference on item delete
kernel BUG at drivers/vhost/vhost.c:LINE! (2) virt kvm net -1 C 139 2806d 2837d 5/29 2805d d14d2b78090c vhost: fix vhost_vq_access_ok() log check
KASAN: use-after-free Read in perf_trace_lock_acquire (2) kvm net virt 19 C 188 2901d 2972d 5/29 2819d 4cd879515d68 vhost_net: stop device during reset owner
possible deadlock in handle_rx virt kvm net 4 C 4 2849d 2849d 5/29 2837d aaa3149bbee9 vhost_net: add missing lock nesting notation
kernel BUG at drivers/vhost/vhost.c:LINE! virt kvm net -1 C 152 2837d 2856d 5/29 2837d d65026c6c62e vhost: validate log when IOTLB is enabled
BUG: corrupted list in remove_wait_queue kvm net virt 8 C 5 2850d 2853d 5/29 2837d dc6455a71c7f vhost: correctly remove wait queue during poll failure
KASAN: use-after-free Read in __list_add_valid (3) virt kvm net 19 16 2902d 2909d 4/29 2898d 4cd879515d68 vhost_net: stop device during reset owner
WARNING in vhost_dev_cleanup net virt kvm -1 C 4 2903d 2909d 4/29 2901d 4cd879515d68 vhost_net: stop device during reset owner
possible deadlock in vhost_chr_write_iter kvm net virt 4 C 25952 2909d 2911d 4/29 2905d e9cb4239134c vhost: use mutex_lock_nested() in vhost_dev_lock_vqs()