program syz.3.1260 is using a deprecated SCSI ioctl, please convert it to SG_IO e1000e 0000:00:02.0 eth1: removed PHC ------------[ cut here ]------------ remove_proc_entry: removing non-empty directory 'irq/31', leaking at least 'pcmmio' WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610 fs/proc/generic.c:747, CPU#2: syz.3.1260/12215 Modules linked in: CPU: 2 UID: 0 PID: 12215 Comm: syz.3.1260 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:remove_proc_entry+0x4f5/0x610 fs/proc/generic.c:747 Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 59 86 6e 0e 49 8b 95 d0 00 00 00 48 c7 c6 80 f3 e9 8b <67> 48 0f b9 3a e9 2a fe ff ff e8 4c 14 4f ff 48 8d 7d 18 48 b8 00 RSP: 0000:ffffc900001b75b0 EFLAGS: 00010246 RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88804934c49c RDX: ffff88801cf645dc RSI: ffffffff8be9f380 RDI: ffffffff91291ab0 RBP: ffff88804934c478 R08: ffff88805cbb7b1c R09: ffffed100926987b R10: ffff88804934c3db R11: 0000000000000000 R12: ffff88804934c3c0 R13: ffff88801cf64500 R14: ffff88805cbb7af8 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff888096de5000(0063) knlGS:00000000f546bb40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 000000008001b018 CR3: 00000000797d4000 CR4: 0000000000352ef0 Call Trace: unregister_irq_proc+0x206/0x2a0 kernel/irq/proc.c:406 free_desc+0x89/0x330 kernel/irq/irqdesc.c:482 irq_free_descs kernel/irq/irqdesc.c:874 [inline] irq_free_descs+0x84/0xc0 kernel/irq/irqdesc.c:865 irq_domain_free_irqs+0x46a/0x5c0 kernel/irq/irqdomain.c:1917 __msi_domain_free_irqs kernel/irq/msi.c:1619 [inline] msi_domain_free_locked.part.0+0x524/0x6b0 kernel/irq/msi.c:1645 msi_domain_free_locked kernel/irq/msi.c:1632 [inline] msi_domain_free_irqs_range_locked kernel/irq/msi.c:1668 [inline] msi_domain_free_irqs_all_locked+0x11d/0x170 kernel/irq/msi.c:1701 pci_msi_teardown_msi_irqs+0xb3/0xd0 drivers/pci/msi/irqdomain.c:28 pci_free_msi_irqs+0x1f/0xa0 drivers/pci/msi/msi.c:921 pci_disable_msix drivers/pci/msi/api.c:200 [inline] pci_disable_msix+0xcf/0x100 drivers/pci/msi/api.c:193 e1000e_reset_interrupt_capability drivers/net/ethernet/intel/e1000e/netdev.c:2041 [inline] e1000_remove+0x1a3/0x560 drivers/net/ethernet/intel/e1000e/netdev.c:7792 pci_device_remove+0xb2/0x1d0 drivers/pci/pci-driver.c:512 device_remove+0xcb/0x180 drivers/base/dd.c:616 __device_release_driver drivers/base/dd.c:1349 [inline] device_release_driver_internal+0x44e/0x620 drivers/base/dd.c:1372 pci_stop_dev drivers/pci/remove.c:27 [inline] pci_stop_bus_device+0x120/0x160 drivers/pci/remove.c:93 pci_stop_and_remove_bus_device+0x58/0xa0 drivers/pci/remove.c:128 pci_stop_and_remove_bus_device_locked+0x1a/0x20 drivers/pci/remove.c:136 remove_store+0x123/0x140 drivers/pci/pci-sysfs.c:523 dev_attr_store+0x58/0x80 drivers/base/core.c:2505 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:145 kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x6ac/0x1050 fs/read_write.c:687 ksys_write+0x12a/0x250 fs/read_write.c:739 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline] __do_fast_syscall_32+0xe7/0x970 arch/x86/entry/syscall_32.c:307 do_fast_syscall_32+0x32/0x70 arch/x86/entry/syscall_32.c:332 entry_SYSENTER_compat_after_hwframe+0x84/0x8e RIP: 0023:0xf70befec Code: Unable to access opcode bytes at 0xf70befc2. RSP: 002b:00000000f546b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000140 RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 ---------------- Code disassembly (best guess): 0: 00 fc add %bh,%ah 2: ff lcall (bad) 3: df 48 89 fisttps -0x77(%rax) 6: fa cli 7: 48 c1 ea 03 shr $0x3,%rdx b: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) f: 0f 85 c7 00 00 00 jne 0xdc 15: 48 8d 3d 59 86 6e 0e lea 0xe6e8659(%rip),%rdi # 0xe6e8675 1c: 49 8b 95 d0 00 00 00 mov 0xd0(%r13),%rdx 23: 48 c7 c6 80 f3 e9 8b mov $0xffffffff8be9f380,%rsi * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: e9 2a fe ff ff jmp 0xfffffe5e 34: e8 4c 14 4f ff call 0xff4f1485 39: 48 8d 7d 18 lea 0x18(%rbp),%rdi 3d: 48 rex.W 3e: b8 .byte 0xb8