------------[ cut here ]------------ remove_proc_entry: removing non-empty directory 'irq/20', leaking at least 'comedi_parport' WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610 fs/proc/generic.c:747, CPU#0: syz.4.1499/11162 Modules linked in: CPU: 0 UID: 0 PID: 11162 Comm: syz.4.1499 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:remove_proc_entry+0x4f5/0x610 fs/proc/generic.c:747 Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 89 bc 8b 0e 49 8b 95 d0 00 00 00 48 c7 c6 40 2d 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 bc 5d 4b ff 48 8d 7d 18 48 b8 00 RSP: 0018:ffffc900075ff6a0 EFLAGS: 00010246 RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88806b62271c RDX: ffff88801d3de5dc RSI: ffffffff8c0b2d40 RDI: ffffffff914adf00 RBP: ffff88806b6226f8 R08: ffff8880764f821c R09: ffffed100d6c44cb R10: ffff88806b62265b R11: 0000000000000000 R12: ffff88806b622640 R13: ffff88801d3de500 R14: ffff8880764f81f8 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff888096982000(0063) knlGS:00000000f53e6b40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 00000000312fcff8 CR3: 000000006b825000 CR4: 0000000000352ef0 DR0: ffffffffffffffff DR1: 08000000000001f8 DR2: 0000000000000000 DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: unregister_irq_proc+0x206/0x2a0 kernel/irq/proc.c:406 free_desc+0x89/0x330 kernel/irq/irqdesc.c:482 irq_free_descs kernel/irq/irqdesc.c:874 [inline] irq_free_descs+0x84/0xc0 kernel/irq/irqdesc.c:865 irq_domain_free_irqs+0x46a/0x5c0 kernel/irq/irqdomain.c:1919 mp_unmap_irq+0xf8/0x130 arch/x86/kernel/apic/io_apic.c:1061 acpi_unregister_gsi_ioapic+0x40/0x60 arch/x86/kernel/acpi/boot.c:722 acpi_unregister_gsi+0x25/0x40 arch/x86/kernel/acpi/boot.c:751 acpi_pci_irq_disable+0x275/0x360 drivers/acpi/pci_irq.c:517 pcibios_disable_device arch/x86/pci/common.c:706 [inline] pcibios_disable_device+0x89/0xb0 arch/x86/pci/common.c:703 do_pci_disable_device+0x9f/0x100 drivers/pci/pci.c:2203 pci_disable_device+0x130/0x270 drivers/pci/pci.c:2239 pci_device_remove+0xb2/0x1d0 drivers/pci/pci-driver.c:535 device_remove+0xcb/0x180 drivers/base/dd.c:616 __device_release_driver drivers/base/dd.c:1349 [inline] device_release_driver_internal+0x44e/0x620 drivers/base/dd.c:1372 pci_stop_dev drivers/pci/remove.c:27 [inline] pci_stop_bus_device+0x120/0x160 drivers/pci/remove.c:94 pci_stop_and_remove_bus_device+0x58/0xa0 drivers/pci/remove.c:129 pci_stop_and_remove_bus_device_locked+0x1a/0x20 drivers/pci/remove.c:137 remove_store+0x123/0x140 drivers/pci/pci-sysfs.c:524 dev_attr_store+0x58/0x80 drivers/base/core.c:2509 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:145 kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x6af/0x1050 fs/read_write.c:687 ksys_write+0x12a/0x250 fs/read_write.c:739 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:79 [inline] __do_fast_syscall_32+0x13a/0x8b0 arch/x86/entry/syscall_32.c:291 do_fast_syscall_32+0x32/0x70 arch/x86/entry/syscall_32.c:316 entry_SYSENTER_compat_after_hwframe+0x84/0x8e RIP: 0023:0xf7f28fec Code: Unable to access opcode bytes at 0xf7f28fc2. RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000400 RDX: 00000000fffffe81 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 ---------------- Code disassembly (best guess): 0: 00 fc add %bh,%ah 2: ff lcall (bad) 3: df 48 89 fisttps -0x77(%rax) 6: fa cli 7: 48 c1 ea 03 shr $0x3,%rdx b: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) f: 0f 85 c7 00 00 00 jne 0xdc 15: 48 8d 3d 89 bc 8b 0e lea 0xe8bbc89(%rip),%rdi # 0xe8bbca5 1c: 49 8b 95 d0 00 00 00 mov 0xd0(%r13),%rdx 23: 48 c7 c6 40 2d 0b 8c mov $0xffffffff8c0b2d40,%rsi * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: e9 2a fe ff ff jmp 0xfffffe5e 34: e8 bc 5d 4b ff call 0xff4b5df5 39: 48 8d 7d 18 lea 0x18(%rbp),%rdi 3d: 48 rex.W 3e: b8 .byte 0xb8