From 90f60a482c87f6baf11d087b0fbf141df123bc0c Mon Sep 17 00:00:00 2001 From: Alexander Potapenko Date: Tue, 13 Jan 2026 15:21:18 +0100 Subject: executor: sys/linux: SYZOS: add support for AMD INVLPGA instruction Implement the SYZOS_API_NESTED_AMD_INVLPGA primitive to execute the INVLPGA instruction in the L1 guest. This allows the fuzzer to target KVM's Shadow MMU and Nested Paging (NPT) logic by invalidating TLB entries for specific ASIDs. Also add a simple syzlang seed/regression test. --- sys/linux/dev_kvm_amd64.txt | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'sys/linux/dev_kvm_amd64.txt') diff --git a/sys/linux/dev_kvm_amd64.txt b/sys/linux/dev_kvm_amd64.txt index c68528e34..abdde5644 100644 --- a/sys/linux/dev_kvm_amd64.txt +++ b/sys/linux/dev_kvm_amd64.txt @@ -147,6 +147,11 @@ syzos_api_nested_amd_vmcb_write_mask { flip_mask int64 } +syzos_api_nested_amd_invlpga { + addr flags[kvm_guest_addrs, int64] + asid int64[0:65535] +} + # IDs here must match those in executor/common_kvm_amd64_syzos.h. syzos_api_call$x86 [ uexit syzos_api$x86[0, intptr] @@ -166,6 +171,7 @@ syzos_api_call$x86 [ nested_vmresume syzos_api$x86[304, syzos_api_vm_id] nested_intel_vmwrite_mask syzos_api$x86[340, syzos_api_nested_intel_vmwrite_mask] nested_amd_vmcb_write_mask syzos_api$x86[380, syzos_api_nested_amd_vmcb_write_mask] + nested_amd_invlpga syzos_api$x86[381, syzos_api_nested_amd_invlpga] ] [varlen] kvm_text_x86 [ -- cgit mrf-deployment