Syzbot CI

Subject	Nested SVM fixes, cleanups, and hardening
Author	yosry@kernel.org
Date	2026-02-24 22:33:35 +0000 UTC
Version
Cc	jmattson@google.com kvm@vger.kernel.org linux-kernel@vger.kernel.org pbonzini@redhat.com seanjc@google.com stable@vger.kernel.org yosry@kernel.org

Subject

Nested SVM fixes, cleanups, and hardening

Author

yosry@kernel.org

Date

2026-02-24 22:33:35 +0000 UTC

Version

jmattson@google.com kvm@vger.kernel.org linux-kernel@vger.kernel.org pbonzini@redhat.com seanjc@google.com stable@vger.kernel.org yosry@kernel.org

Name	Content [All]
[PATCH v6 01/31] KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12	[Body]
[PATCH v6 02/31] KVM: SVM: Switch svm_copy_lbrs() to a macro	[Body]
[PATCH v6 03/31] KVM: SVM: Add missing save/restore handling of LBR MSRs	[Body]
[PATCH v6 04/31] KVM: selftests: Add a test for LBR save/restore (ft. nested)	[Body]
[PATCH v6 05/31] KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN	[Body]
[PATCH v6 06/31] KVM: nSVM: Refactor checking LBRV enablement in vmcb12 into a helper	[Body]
[PATCH v6 07/31] KVM: nSVM: Refactor writing vmcb12 on nested #VMEXIT as a helper	[Body]
[PATCH v6 08/31] KVM: nSVM: Triple fault if mapping VMCB12 fails on nested #VMEXIT	[Body]
[PATCH v6 09/31] KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT	[Body]
[PATCH v6 10/31] KVM: nSVM: Drop nested_vmcb_check_{save/control}() wrappers	[Body]
[PATCH v6 11/31] KVM: nSVM: Call enter_guest_mode() before switching to VMCB02	[Body]
[PATCH v6 12/31] KVM: nSVM: Make nested_svm_merge_msrpm() return an errno	[Body]
[PATCH v6 13/31] KVM: nSVM: Call nested_svm_merge_msrpm() from enter_svm_guest_mode()	[Body]
[PATCH v6 14/31] KVM: nSVM: Call nested_svm_init_mmu_context() before switching to VMCB02	[Body]
[PATCH v6 15/31] KVM: nSVM: Refactor minimal #VMEXIT handling out of nested_svm_vmexit()	[Body]
[PATCH v6 16/31] KVM: nSVM: Unify handling of VMRUN failures with proper cleanup	[Body]
[PATCH v6 17/31] KVM: nSVM: Clear EVENTINJ field in VMCB12 on nested #VMEXIT	[Body]
[PATCH v6 18/31] KVM: nSVM: Drop the non-architectural consistency check for NP_ENABLE	[Body]
[PATCH v6 19/31] KVM: nSVM: Add missing consistency check for nCR3 validity	[Body]
[PATCH v6 20/31] KVM: nSVM: Add missing consistency check for hCR0.PG and NP_ENABLE	[Body]
[PATCH v6 21/31] KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS	[Body]
[PATCH v6 22/31] KVM: nSVM: Add missing consistency check for EVENTINJ	[Body]
[PATCH v6 23/31] KVM: SVM: Rename vmcb->nested_ctl to vmcb->misc_ctl	[Body]
[PATCH v6 24/31] KVM: SVM: Rename vmcb->virt_ext to vmcb->misc_ctl2	[Body]
[PATCH v6 25/31] KVM: nSVM: Cache all used fields from VMCB12	[Body]
[PATCH v6 26/31] KVM: nSVM: Restrict mapping VMCB12 on nested VMRUN	[Body]
[PATCH v6 27/31] KVM: nSVM: Use PAGE_MASK to drop lower bits of bitmap GPAs from vmcb12	[Body]
[PATCH v6 28/31] KVM: nSVM: Sanitize TLB_CONTROL field when copying from vmcb12	[Body]
[PATCH v6 29/31] KVM: nSVM: Sanitize INT/EVENTINJ fields when copying from vmcb12	[Body]
[PATCH v6 30/31] KVM: nSVM: Only copy SVM_MISC_ENABLE_NP from VMCB01's misc_ctl	[Body]
[PATCH v6 31/31] KVM: selftest: Add a selftest for VMRUN/#VMEXIT with unmappable vmcb12	[Body]

Name

Content [All]

[PATCH v6 01/31] KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12

[PATCH v6 02/31] KVM: SVM: Switch svm_copy_lbrs() to a macro

[PATCH v6 03/31] KVM: SVM: Add missing save/restore handling of LBR MSRs

[PATCH v6 04/31] KVM: selftests: Add a test for LBR save/restore (ft. nested)

[PATCH v6 05/31] KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN

[PATCH v6 06/31] KVM: nSVM: Refactor checking LBRV enablement in vmcb12 into a helper

[PATCH v6 07/31] KVM: nSVM: Refactor writing vmcb12 on nested #VMEXIT as a helper

[PATCH v6 08/31] KVM: nSVM: Triple fault if mapping VMCB12 fails on nested #VMEXIT

[PATCH v6 09/31] KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT

[PATCH v6 10/31] KVM: nSVM: Drop nested_vmcb_check_{save/control}() wrappers

[PATCH v6 11/31] KVM: nSVM: Call enter_guest_mode() before switching to VMCB02

[PATCH v6 12/31] KVM: nSVM: Make nested_svm_merge_msrpm() return an errno

[PATCH v6 13/31] KVM: nSVM: Call nested_svm_merge_msrpm() from enter_svm_guest_mode()

[PATCH v6 14/31] KVM: nSVM: Call nested_svm_init_mmu_context() before switching to VMCB02

[PATCH v6 15/31] KVM: nSVM: Refactor minimal #VMEXIT handling out of nested_svm_vmexit()

[PATCH v6 16/31] KVM: nSVM: Unify handling of VMRUN failures with proper cleanup

[PATCH v6 17/31] KVM: nSVM: Clear EVENTINJ field in VMCB12 on nested #VMEXIT

[PATCH v6 18/31] KVM: nSVM: Drop the non-architectural consistency check for NP_ENABLE

[PATCH v6 19/31] KVM: nSVM: Add missing consistency check for nCR3 validity

[PATCH v6 20/31] KVM: nSVM: Add missing consistency check for hCR0.PG and NP_ENABLE

[PATCH v6 21/31] KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS

[PATCH v6 22/31] KVM: nSVM: Add missing consistency check for EVENTINJ

[PATCH v6 23/31] KVM: SVM: Rename vmcb->nested_ctl to vmcb->misc_ctl

[PATCH v6 24/31] KVM: SVM: Rename vmcb->virt_ext to vmcb->misc_ctl2

[PATCH v6 25/31] KVM: nSVM: Cache all used fields from VMCB12

[PATCH v6 26/31] KVM: nSVM: Restrict mapping VMCB12 on nested VMRUN

[PATCH v6 27/31] KVM: nSVM: Use PAGE_MASK to drop lower bits of bitmap GPAs from vmcb12

[PATCH v6 28/31] KVM: nSVM: Sanitize TLB_CONTROL field when copying from vmcb12

[PATCH v6 29/31] KVM: nSVM: Sanitize INT/EVENTINJ fields when copying from vmcb12

[PATCH v6 30/31] KVM: nSVM: Only copy SVM_MISC_ENABLE_NP from VMCB01's misc_ctl

[PATCH v6 31/31] KVM: selftest: Add a selftest for VMRUN/#VMEXIT with unmappable vmcb12

Session 2026-02-24

Passed

ID (for dev)	09e8ea74-a7d6-4710-9109-f1c948f4cacc
Status	finished
Triaged	OK [Log]
Execution Log	[Link]

Test	Base	Patched	Verdict
[KASAN] Build Base	183bb0ce8c77b0fd1fb25874112bc8751a461e49 [Config]		passed [Log]
[KASAN] Boot test: Base	183bb0ce8c77b0fd1fb25874112bc8751a461e49 [Config]		passed [Log]
[KASAN] Build Patched		183bb0ce8c77b0fd1fb25874112bc8751a461e49 [Config] [patched]	passed [Log]
[KASAN] Boot test: Patched		183bb0ce8c77b0fd1fb25874112bc8751a461e49 [Config] [patched]	passed [Log]
[KASAN] Fuzz	183bb0ce8c77b0fd1fb25874112bc8751a461e49 [Config]	183bb0ce8c77b0fd1fb25874112bc8751a461e49 [Config] [patched]	passed [Log] [Artifacts]

Patches (31)

Series Summary

Sessions

Session 2026-02-24