syzbot


WARNING in kvm_check_and_inject_events

Status: upstream: reported C repro on 2026/07/09 16:33
Subsystems: kvm-x86
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+9dcd0a11dc9703a49511@syzkaller.appspotmail.com
First crash: 3d01h, last: 2d21h
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision Error
f7319a6c-5ff6-42f1-a099-b0ad529547c5 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ✅ VMHostTrigger: ❌ WARNING in kvm_check_and_inject_events 2026/07/09 15:53 2026/07/09 15:53 2026/07/09 16:46 6e8eff307289ebfde71b7d9b21acd25fb1de7f6c

			
		
Discussions (2)
Title Replies (including bot) Last reply
[PATCH] KVM: x86: Handle -1 return from kvm_cpu_get_interrupt 2 (2) 2026/07/12 09:11
[syzbot] [kvm-x86?] WARNING in kvm_check_and_inject_events 0 (3) 2026/07/12 04:36
Last patch testing requests (2)
Created Duration User Patch Repo Result
2026/07/12 04:36 20m kartikey406@gmail.com patch upstream report log
2026/07/12 02:09 22m kartikey406@gmail.com patch upstream report log

Sample crash report:
------------[ cut here ]------------
irq == -1
WARNING: arch/x86/kvm/x86.c:10800 at kvm_check_and_inject_events+0xf1e/0x1070 arch/x86/kvm/x86.c:10800, CPU#3: syz.1.3207/15855
Modules linked in:
CPU: 3 UID: 0 PID: 15855 Comm: syz.1.3207 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:kvm_check_and_inject_events+0xf1e/0x1070 arch/x86/kvm/x86.c:10800
Code: 00 48 8b 44 24 20 48 0d 00 01 01 00 48 89 44 24 10 e9 35 fd ff ff e8 51 44 7e 00 90 0f 0b 90 e9 b7 fe ff ff e8 43 44 7e 00 90 <0f> 0b 90 e9 2e f8 ff ff e8 d5 bd ee 00 e9 ae f6 ff ff 48 8b 7c 24
RSP: 0018:ffffc9000344fa20 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff888054f029c0 RCX: ffffffff818b8adc
RDX: ffff88802bc7a540 RSI: ffffffff818b8bfd RDI: ffff88802bc7a540
RBP: 00000000ffffffff R08: 0000000000000005 R09: 00000000ffffffff
R10: 00000000ffffffff R11: 0000000000000000 R12: ffff888054f035ec
R13: 0000000000000001 R14: ffff888054f02ca8 R15: ffff888054f032f8
FS:  000055556f4e8500(0000) GS:ffff8880d60eb000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f19fea73780 CR3: 0000000059ba5000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 vcpu_enter_guest arch/x86/kvm/x86.c:11296 [inline]
 vcpu_run+0xf1d/0x5d50 arch/x86/kvm/x86.c:11707
 kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 arch/x86/kvm/x86.c:12062
 kvm_vcpu_ioctl+0x730/0x1700 virt/kvm/kvm_main.c:4470
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19feb9de59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff37dfb198 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f19fee25fa0 RCX: 00007f19feb9de59
RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
RBP: 00007f19fec33e6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f19fee25fac R14: 00007f19fee25fa0 R15: 00007f19fee25fa0
 </TASK>

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/09 19:43 upstream 2c7c88a412aa a0c310a3 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in kvm_check_and_inject_events
2026/07/09 15:53 upstream 0e35b9b6ec0f a0c310a3 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in kvm_check_and_inject_events
* Struck through repros no longer work on HEAD.