------------[ cut here ]------------ remove_proc_entry: removing non-empty directory 'irq/31', leaking at least 'pcmmio' WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610 fs/proc/generic.c:747, CPU#2: syz.8.4285/21004 Modules linked in: CPU: 2 UID: 0 PID: 21004 Comm: syz.8.4285 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:remove_proc_entry+0x4f5/0x610 fs/proc/generic.c:747 Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d b9 85 6e 0e 49 8b 95 d0 00 00 00 48 c7 c6 c0 f3 e9 8b <67> 48 0f b9 3a e9 2a fe ff ff e8 3c 0b 4f ff 48 8d 7d 18 48 b8 00 RSP: 0018:ffffc90005de7690 EFLAGS: 00010246 RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88801430dd9c RDX: ffff88801d340adc RSI: ffffffff8be9f3c0 RDI: ffffffff912926c0 RBP: ffff88801430dd78 R08: ffff888025afe85c R09: ffffed1002861b9b R10: ffff88801430dcdb R11: 0000000000000000 R12: ffff88801430dcc0 R13: ffff88801d340a00 R14: ffff888025afe838 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff888096de3000(0063) knlGS:00000000f54adb40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 00000000f74734fc CR3: 000000005bf42000 CR4: 0000000000352ef0 Call Trace: unregister_irq_proc+0x206/0x2a0 kernel/irq/proc.c:406 free_desc+0x89/0x330 kernel/irq/irqdesc.c:482 irq_free_descs kernel/irq/irqdesc.c:874 [inline] irq_free_descs+0x84/0xc0 kernel/irq/irqdesc.c:865 irq_domain_free_irqs+0x46a/0x5c0 kernel/irq/irqdomain.c:1917 __msi_domain_free_irqs kernel/irq/msi.c:1619 [inline] msi_domain_free_locked.part.0+0x524/0x6b0 kernel/irq/msi.c:1645 msi_domain_free_locked kernel/irq/msi.c:1632 [inline] msi_domain_free_irqs_range_locked kernel/irq/msi.c:1668 [inline] msi_domain_free_irqs_all_locked+0x11d/0x170 kernel/irq/msi.c:1701 pci_msi_teardown_msi_irqs+0xb3/0xd0 drivers/pci/msi/irqdomain.c:28 pci_free_msi_irqs+0x1f/0xa0 drivers/pci/msi/msi.c:921 pci_disable_msi drivers/pci/msi/api.c:58 [inline] pci_disable_msi+0xcf/0x100 drivers/pci/msi/api.c:51 pcie_port_device_remove drivers/pci/pcie/portdrv.c:508 [inline] pcie_portdrv_remove+0x4d/0x90 drivers/pci/pcie/portdrv.c:734 pci_device_remove+0xb2/0x1d0 drivers/pci/pci-driver.c:512 device_remove+0xcb/0x180 drivers/base/dd.c:616 __device_release_driver drivers/base/dd.c:1349 [inline] device_release_driver_internal+0x44e/0x620 drivers/base/dd.c:1372 unbind_store+0xf8/0x110 drivers/base/bus.c:244 drv_attr_store+0x74/0xb0 drivers/base/bus.c:125 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:145 kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x6ac/0x1050 fs/read_write.c:687 ksys_write+0x12a/0x250 fs/read_write.c:739 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline] __do_fast_syscall_32+0xe7/0x970 arch/x86/entry/syscall_32.c:307 do_fast_syscall_32+0x32/0x70 arch/x86/entry/syscall_32.c:332 entry_SYSENTER_compat_after_hwframe+0x84/0x8e RIP: 0023:0xf70befec Code: Unable to access opcode bytes at 0xf70befc2. RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800003c0 RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 ---------------- Code disassembly (best guess): 0: 00 fc add %bh,%ah 2: ff lcall (bad) 3: df 48 89 fisttps -0x77(%rax) 6: fa cli 7: 48 c1 ea 03 shr $0x3,%rdx b: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) f: 0f 85 c7 00 00 00 jne 0xdc 15: 48 8d 3d b9 85 6e 0e lea 0xe6e85b9(%rip),%rdi # 0xe6e85d5 1c: 49 8b 95 d0 00 00 00 mov 0xd0(%r13),%rdx 23: 48 c7 c6 c0 f3 e9 8b mov $0xffffffff8be9f3c0,%rsi * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: e9 2a fe ff ff jmp 0xfffffe5e 34: e8 3c 0b 4f ff call 0xff4f0b75 39: 48 8d 7d 18 lea 0x18(%rbp),%rdi 3d: 48 rex.W 3e: b8 .byte 0xb8