genirq: Flags mismatch irq 31. 00200000 (eth1-tx-0) vs. 00200000 (pcmmio)
------------[ cut here ]------------
remove_proc_entry: removing non-empty directory 'irq/30', leaking at least 'eth1-rx-0'
WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610 fs/proc/generic.c:747, CPU#0: syz.1.24314/15563
Modules linked in:
CPU: 0 UID: 0 PID: 15563 Comm: syz.1.24314 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:remove_proc_entry+0x4f5/0x610 fs/proc/generic.c:747
Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d e9 90 6d 0e 49 8b 95 d0 00 00 00 48 c7 c6 80 fa e9 8b <67> 48 0f b9 3a e9 2a fe ff ff e8 0c c3 4e ff 48 8d 7d 18 48 b8 00
RSP: 0000:ffffc9000656e8a0 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88804a09e85c
RDX: ffff88801cfee5dc RSI: ffffffff8be9fa80 RDI: ffffffff91289d60
RBP: ffff88804a09e838 R08: ffff88804a66911c R09: ffffed1009413cf3
R10: ffff88804a09e79b R11: 0000000000000000 R12: ffff88804a09e780
R13: ffff88801cfee500 R14: ffff88804a6690f8 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff888096be8000(0063) knlGS:00000000f53fdb40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 0000000031f1fff8 CR3: 0000000078441000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 unregister_irq_proc+0x206/0x2a0 kernel/irq/proc.c:406
 free_desc+0x89/0x330 kernel/irq/irqdesc.c:482
 irq_free_descs kernel/irq/irqdesc.c:874 [inline]
 irq_free_descs+0x84/0xc0 kernel/irq/irqdesc.c:865
 irq_domain_free_irqs+0x46a/0x5c0 kernel/irq/irqdomain.c:1917
 __msi_domain_free_irqs kernel/irq/msi.c:1619 [inline]
 msi_domain_free_locked.part.0+0x524/0x6b0 kernel/irq/msi.c:1645
 msi_domain_free_locked kernel/irq/msi.c:1632 [inline]
 msi_domain_free_irqs_range_locked kernel/irq/msi.c:1668 [inline]
 msi_domain_free_irqs_all_locked+0x11d/0x170 kernel/irq/msi.c:1701
 pci_msi_teardown_msi_irqs+0xb3/0xd0 drivers/pci/msi/irqdomain.c:28
 pci_free_msi_irqs+0x1f/0xa0 drivers/pci/msi/msi.c:921
 pci_disable_msix drivers/pci/msi/api.c:200 [inline]
 pci_disable_msix+0xcf/0x100 drivers/pci/msi/api.c:193
 e1000e_reset_interrupt_capability drivers/net/ethernet/intel/e1000e/netdev.c:2041 [inline]
 e1000_request_irq+0x473/0xdc0 drivers/net/ethernet/intel/e1000e/netdev.c:2175
 e1000e_open+0x471/0x1800 drivers/net/ethernet/intel/e1000e/netdev.c:4687
 __dev_open+0x3ad/0x8f0 net/core/dev.c:1702
 __dev_change_flags+0x596/0x850 net/core/dev.c:9764
 netif_change_flags+0x8d/0x160 net/core/dev.c:9827
 do_setlink.isra.0+0x1ac4/0x3e60 net/core/rtnetlink.c:3215
 rtnl_group_changelink net/core/rtnetlink.c:3863 [inline]
 __rtnl_newlink net/core/rtnetlink.c:4031 [inline]
 rtnl_newlink+0x1b7e/0x2380 net/core/rtnetlink.c:4159
 rtnetlink_rcv_msg+0x95e/0xe90 net/core/rtnetlink.c:7076
 netlink_rcv_skb+0x159/0x420 net/netlink/af_netlink.c:2556
 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
 netlink_unicast+0x585/0x850 net/netlink/af_netlink.c:1345
 netlink_sendmsg+0x8b0/0xda0 net/netlink/af_netlink.c:1900
 sock_sendmsg_nosec net/socket.c:775 [inline]
 __sock_sendmsg net/socket.c:790 [inline]
 ____sys_sendmsg+0xa4d/0xbe0 net/socket.c:2684
 ___sys_sendmsg+0x190/0x1e0 net/socket.c:2738
 __sys_sendmsg+0x160/0x210 net/socket.c:2770
 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline]
 __do_fast_syscall_32+0xe7/0x970 arch/x86/entry/syscall_32.c:307
 do_fast_syscall_32+0x32/0x70 arch/x86/entry/syscall_32.c:332
 entry_SYSENTER_compat_after_hwframe+0x84/0x8e
RIP: 0023:0xf700efec
Code: Unable to access opcode bytes at 0xf700efc2.
RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
----------------
Code disassembly (best guess):
   0:	00 fc                	add    %bh,%ah
   2:	ff                   	lcall  (bad)
   3:	df 48 89             	fisttps -0x77(%rax)
   6:	fa                   	cli
   7:	48 c1 ea 03          	shr    $0x3,%rdx
   b:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1)
   f:	0f 85 c7 00 00 00    	jne    0xdc
  15:	48 8d 3d e9 90 6d 0e 	lea    0xe6d90e9(%rip),%rdi        # 0xe6d9105
  1c:	49 8b 95 d0 00 00 00 	mov    0xd0(%r13),%rdx
  23:	48 c7 c6 80 fa e9 8b 	mov    $0xffffffff8be9fa80,%rsi
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	e9 2a fe ff ff       	jmp    0xfffffe5e
  34:	e8 0c c3 4e ff       	call   0xff4ec345
  39:	48 8d 7d 18          	lea    0x18(%rbp),%rdi
  3d:	48                   	rex.W
  3e:	b8                   	.byte 0xb8