general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 1284 Comm: syz-executor4 Not tainted 4.20.0-rc1+ #328 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:kvm_pv_send_ipi+0x364/0xdd0 arch/x86/kvm/lapic.c:579 Code: 45 84 ed 0f 84 da 07 00 00 e8 18 55 66 00 48 8d 4b 14 48 b8 00 00 00 00 00 fc ff df 48 89 ca 48 89 8d 70 fe ff ff 48 c1 ea 03 <0f> b6 14 02 48 89 c8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 f5 kobject: 'ip_vti0' (0000000059ead0cc): kobject_uevent_env RSP: 0018:ffff88018768eed8 EFLAGS: 00010203 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000014 RDX: 0000000000000002 RSI: ffffffff811935a8 RDI: 0000000000000005 RBP: ffff88018768f078 R08: ffff88018710e3c0 R09: ffffed003b5c5b67 R10: ffffed003b5c5b67 R11: ffff8801dae2db3b R12: ffff88018768f050 R13: 0000000000000001 R14: 0000000000000000 R15: ffff88018768efd0 FS: 00007f655d8ea700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 kobject: 'ip_vti0' (0000000059ead0cc): fill_kobj_path: path = '/devices/virtual/net/ip_vti0' CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f655d886db8 CR3: 00000001c5d80000 CR4: 00000000001426f0 Call Trace: kvm_emulate_hypercall+0xa1a/0xf20 arch/x86/kvm/x86.c:6999 kobject: 'queues' (0000000003f2f938): kobject_add_internal: parent: 'ip_vti0', set: '' kobject: 'queues' (0000000003f2f938): kobject_uevent_env handle_vmcall+0x15/0x20 arch/x86/kvm/vmx.c:7510 vmx_handle_exit+0x33d/0x4630 arch/x86/kvm/vmx.c:10600 kobject: 'queues' (0000000003f2f938): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (00000000059a1803): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-0' (00000000059a1803): kobject_uevent_env kobject: 'rx-0' (00000000059a1803): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' kobject: 'tx-0' (00000000c2290f22): kobject_add_internal: parent: 'queues', set: 'queues' vcpu_enter_guest arch/x86/kvm/x86.c:7809 [inline] vcpu_run arch/x86/kvm/x86.c:7872 [inline] kvm_arch_vcpu_ioctl_run+0x3ded/0x72a0 arch/x86/kvm/x86.c:8072 kobject: 'tx-0' (00000000c2290f22): kobject_uevent_env kvm_vcpu_ioctl+0x5c8/0x1150 arch/x86/kvm/../../../virt/kvm/kvm_main.c:2596 kobject: 'tx-0' (00000000c2290f22): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/tx-0' kobject: 'lo' (00000000590f5c9c): kobject_add_internal: parent: 'net', set: 'devices' kobject: 'lo' (00000000590f5c9c): kobject_uevent_env kobject: 'lo' (00000000590f5c9c): fill_kobj_path: path = '/devices/virtual/net/lo' vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:509 [inline] do_vfs_ioctl+0x1de/0x1790 fs/ioctl.c:696 kobject: 'loop1' (000000009d7ae213): kobject_uevent_env kobject: 'loop1' (000000009d7ae213): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'queues' (0000000013be36f8): kobject_add_internal: parent: 'lo', set: '' kobject: 'queues' (0000000013be36f8): kobject_uevent_env ksys_ioctl+0xa9/0xd0 fs/ioctl.c:713 kobject: 'queues' (0000000013be36f8): kobject_uevent_env: filter function caused the event to drop! __do_sys_ioctl fs/ioctl.c:720 [inline] __se_sys_ioctl fs/ioctl.c:718 [inline] __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:718 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 kobject: 'rx-0' (000000002611e8d4): kobject_add_internal: parent: 'queues', set: 'queues' entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457569 Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f655d8e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f655d8ea6d4 R13: 00000000004c028e R14: 00000000004d05f8 R15: 00000000ffffffff Modules linked in: binder: 1333 RLIMIT_NICE not set kobject: 'rx-0' (000000002611e8d4): kobject_uevent_env kobject: 'loop2' (000000002fd8c2cb): kobject_uevent_env kobject: 'rx-0' (000000002611e8d4): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0' kobject: 'loop2' (000000002fd8c2cb): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'tx-0' (000000001bb884ed): kobject_add_internal: parent: 'queues', set: 'queues' ---[ end trace e91f97513710db5a ]--- kobject: 'tx-0' (000000001bb884ed): kobject_uevent_env RIP: 0010:kvm_pv_send_ipi+0x364/0xdd0 arch/x86/kvm/lapic.c:579 kobject: 'tx-0' (000000001bb884ed): fill_kobj_path: path = '/devices/virtual/net/lo/queues/tx-0' kobject: 'ip6_vti0' (000000009e407688): kobject_add_internal: parent: 'net', set: 'devices' Code: 45 84 ed 0f 84 da 07 00 00 e8 18 55 66 00 48 8d 4b 14 48 b8 00 00 00 00 00 fc ff df 48 89 ca 48 89 8d 70 fe ff ff 48 c1 ea 03 <0f> b6 14 02 48 89 c8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 f5 kobject: 'ip6_vti0' (000000009e407688): kobject_uevent_env RSP: 0018:ffff88018768eed8 EFLAGS: 00010203 kobject: 'ip6_vti0' (000000009e407688): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0' RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000014 kobject: 'queues' (00000000d84a4c0a): kobject_add_internal: parent: 'ip6_vti0', set: '' RDX: 0000000000000002 RSI: ffffffff811935a8 RDI: 0000000000000005 kobject: 'queues' (00000000d84a4c0a): kobject_uevent_env RBP: ffff88018768f078 R08: ffff88018710e3c0 R09: ffffed003b5c5b67 kobject: 'queues' (00000000d84a4c0a): kobject_uevent_env: filter function caused the event to drop! R10: ffffed003b5c5b67 R11: ffff8801dae2db3b R12: ffff88018768f050 kobject: 'rx-0' (000000007d354303): kobject_add_internal: parent: 'queues', set: 'queues' R13: 0000000000000001 R14: 0000000000000000 R15: ffff88018768efd0 kobject: 'rx-0' (000000007d354303): kobject_uevent_env FS: 00007f655d8ea700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 kobject: 'rx-0' (000000007d354303): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/rx-0' CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 kobject: 'tx-0' (000000001d4873aa): kobject_add_internal: parent: 'queues', set: 'queues' CR2: 00007f8ead89b000 CR3: 00000001c5d80000 CR4: 00000000001426f0 kobject: 'tx-0' (000000001d4873aa): kobject_uevent_env