e1000e 0000:00:02.0 eth1: removed PHC
------------[ cut here ]------------
remove_proc_entry: removing non-empty directory 'irq/32', leaking at least 'pcmmio'
WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610 fs/proc/generic.c:747, CPU#1: syz.2.417/7561
Modules linked in:
CPU: 1 UID: 0 PID: 7561 Comm: syz.2.417 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:remove_proc_entry+0x4f5/0x610 fs/proc/generic.c:747
Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 29 1f 8b 0e 49 8b 95 d0 00 00 00 48 c7 c6 40 66 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 cc ed 4a ff 48 8d 7d 18 48 b8 00
RSP: 0018:ffffc90022a8f678 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88804a2f975c
RDX: ffff88801d3a05dc RSI: ffffffff8c0b6640 RDI: ffffffff914b9310
RBP: ffff88804a2f9738 R08: ffff88805c7fa99c R09: ffffed100945f2d3
R10: ffff88804a2f969b R11: 0000000000000000 R12: ffff88804a2f9680
R13: ffff88801d3a0500 R14: ffff88805c7fa978 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff888096a60000(0063) knlGS:00000000f53f6b40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 00005612f0327950 CR3: 000000004bb14000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 unregister_irq_proc+0x206/0x2a0 kernel/irq/proc.c:406
 free_desc+0x89/0x330 kernel/irq/irqdesc.c:482
 irq_free_descs kernel/irq/irqdesc.c:874 [inline]
 irq_free_descs+0x84/0xc0 kernel/irq/irqdesc.c:865
 irq_domain_free_irqs+0x46a/0x5c0 kernel/irq/irqdomain.c:1919
 __msi_domain_free_irqs kernel/irq/msi.c:1619 [inline]
 msi_domain_free_locked.part.0+0x524/0x6b0 kernel/irq/msi.c:1645
 msi_domain_free_locked kernel/irq/msi.c:1632 [inline]
 msi_domain_free_irqs_range_locked kernel/irq/msi.c:1668 [inline]
 msi_domain_free_irqs_all_locked+0x11d/0x170 kernel/irq/msi.c:1700
 pci_msi_teardown_msi_irqs+0xb3/0xd0 drivers/pci/msi/irqdomain.c:28
 pci_free_msi_irqs+0x1f/0xa0 drivers/pci/msi/msi.c:931
 pci_disable_msix drivers/pci/msi/api.c:200 [inline]
 pci_disable_msix+0xcf/0x100 drivers/pci/msi/api.c:193
 e1000e_reset_interrupt_capability drivers/net/ethernet/intel/e1000e/netdev.c:2041 [inline]
 e1000_remove+0x1a3/0x560 drivers/net/ethernet/intel/e1000e/netdev.c:7792
 pci_device_remove+0xb2/0x1d0 drivers/pci/pci-driver.c:535
 device_remove+0xcb/0x180 drivers/base/dd.c:616
 __device_release_driver drivers/base/dd.c:1349 [inline]
 device_release_driver_internal+0x44e/0x620 drivers/base/dd.c:1372
 unbind_store+0xf8/0x110 drivers/base/bus.c:244
 drv_attr_store+0x74/0xb0 drivers/base/bus.c:125
 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:145
 kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:345
 new_sync_write fs/read_write.c:595 [inline]
 vfs_write+0x6af/0x1050 fs/read_write.c:687
 ksys_write+0x12a/0x250 fs/read_write.c:739
 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:79 [inline]
 __do_fast_syscall_32+0x13a/0x8b0 arch/x86/entry/syscall_32.c:291
 do_fast_syscall_32+0x32/0x70 arch/x86/entry/syscall_32.c:316
 entry_SYSENTER_compat_after_hwframe+0x84/0x8e
RIP: 0023:0xf7f34fec
Code: Unable to access opcode bytes at 0xf7f34fc2.
RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200
RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
----------------
Code disassembly (best guess):
   0:	00 fc                	add    %bh,%ah
   2:	ff                   	lcall  (bad)
   3:	df 48 89             	fisttps -0x77(%rax)
   6:	fa                   	cli
   7:	48 c1 ea 03          	shr    $0x3,%rdx
   b:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1)
   f:	0f 85 c7 00 00 00    	jne    0xdc
  15:	48 8d 3d 29 1f 8b 0e 	lea    0xe8b1f29(%rip),%rdi        # 0xe8b1f45
  1c:	49 8b 95 d0 00 00 00 	mov    0xd0(%r13),%rdx
  23:	48 c7 c6 40 66 0b 8c 	mov    $0xffffffff8c0b6640,%rsi
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	e9 2a fe ff ff       	jmp    0xfffffe5e
  34:	e8 cc ed 4a ff       	call   0xff4aee05
  39:	48 8d 7d 18          	lea    0x18(%rbp),%rdi
  3d:	48                   	rex.W
  3e:	b8                   	.byte 0xb8