======================================================== WARNING: possible irq lock inversion dependency detected 5.19.0-rc5-syzkaller #0 Not tainted -------------------------------------------------------- syz-executor.3/3645 just changed the state of lock: ffff888025a5a948 (&timer->lock){-...}-{2:2}, at: spin_lock include/linux/spinlock.h:349 [inline] ffff888025a5a948 (&timer->lock){-...}-{2:2}, at: snd_hrtimer_callback+0x51/0x360 sound/core/hrtimer.c:38 but this lock took another, HARDIRQ-READ-unsafe lock in the past: (tasklist_lock){.+.+}-{2:2} and interrupts could create inverse lock ordering between them. other info that might help us debug this: Chain exists of: &timer->lock --> &new->fa_lock --> tasklist_lock Possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- lock(tasklist_lock); local_irq_disable(); lock(&timer->lock); lock(&new->fa_lock); lock(&timer->lock); *** DEADLOCK *** 1 lock held by syz-executor.3/3645: #0: ffff88814b014460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 fs/namespace.c:393 the shortest dependencies between 2nd lock and 1st lock: -> (tasklist_lock){.+.+}-{2:2} { HARDIRQ-ON-R at: lock_acquire+0x1a7/0x400 kernel/locking/lockdep.c:5665 __raw_read_lock include/linux/rwlock_api_smp.h:150 [inline] _raw_read_lock+0x32/0x40 kernel/locking/spinlock.c:228 do_wait+0x224/0x9d0 kernel/exit.c:1508 kernel_wait+0xe4/0x230 kernel/exit.c:1698 call_usermodehelper_exec_sync kernel/umh.c:139 [inline] call_usermodehelper_exec_work+0xb4/0x220 kernel/umh.c:166 process_one_work+0x81c/0xd10 kernel/workqueue.c:2289 worker_thread+0xb14/0x1330 kernel/workqueue.c:2436 kthread+0x266/0x300 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 SOFTIRQ-ON-R at: lock_acquire+0x1a7/0x400 kernel/locking/lockdep.c:5665 __raw_read_lock include/linux/rwlock_api_smp.h:150 [inline] _raw_read_lock+0x32/0x40 kernel/locking/spinlock.c:228 do_wait+0x224/0x9d0 kernel/exit.c:1508 kernel_wait+0xe4/0x230 kernel/exit.c:1698 call_usermodehelper_exec_sync kernel/umh.c:139 [inline] call_usermodehelper_exec_work+0xb4/0x220 kernel/umh.c:166 process_one_work+0x81c/0xd10 kernel/workqueue.c:2289 worker_thread+0xb14/0x1330 kernel/workqueue.c:2436 kthread+0x266/0x300 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 INITIAL USE at: lock_acquire+0x1a7/0x400 kernel/locking/lockdep.c:5665 __raw_write_lock_irq include/linux/rwlock_api_smp.h:195 [inline] _raw_write_lock_irq+0xcf/0x110 kernel/locking/spinlock.c:326 copy_process+0x2414/0x3fa0 kernel/fork.c:2374 kernel_clone+0x22f/0x7a0 kernel/fork.c:2655 user_mode_thread+0x12d/0x190 kernel/fork.c:2724 rest_init+0x21/0x270 init/main.c:691 start_kernel+0x0/0x55b init/main.c:882 start_kernel+0x4ac/0x55b init/main.c:1137 secondary_startup_64_no_verify+0xcf/0xdb INITIAL READ USE at: lock_acquire+0x1a7/0x400 kernel/locking/lockdep.c:5665 __raw_read_lock include/linux/rwlock_api_smp.h:150 [inline] _raw_read_lock+0x32/0x40 kernel/locking/spinlock.c:228 do_wait+0x224/0x9d0 kernel/exit.c:1508 kernel_wait+0xe4/0x230 kernel/exit.c:1698 call_usermodehelper_exec_sync kernel/umh.c:139 [inline] call_usermodehelper_exec_work+0xb4/0x220 kernel/umh.c:166 process_one_work+0x81c/0xd10 kernel/workqueue.c:2289 worker_thread+0xb14/0x1330 kernel/workqueue.c:2436 kthread+0x266/0x300 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 } ... key at: [] tasklist_lock+0x18/0x40 ... acquired at: lock_acquire+0x1a7/0x400 kernel/locking/lockdep.c:5665 __raw_read_lock include/linux/rwlock_api_smp.h:150 [inline] _raw_read_lock+0x32/0x40 kernel/locking/spinlock.c:228 send_sigio+0xbe/0x300 fs/fcntl.c:791 dnotify_handle_event+0x136/0x450 fs/notify/dnotify/dnotify.c:115 fsnotify+0xc7e/0x12c0 fs/notify/fsnotify.c:567 fsnotify_name include/linux/fsnotify.h:36 [inline] fsnotify_dirent include/linux/fsnotify.h:42 [inline] fsnotify_create include/linux/fsnotify.h:207 [inline] open_last_lookups fs/namei.c:3446 [inline] path_openat+0x14b3/0x2ec0 fs/namei.c:3650 do_filp_open+0x277/0x4f0 fs/namei.c:3680 do_sys_openat2+0x13b/0x500 fs/open.c:1278 do_sys_open fs/open.c:1294 [inline] __do_sys_creat fs/open.c:1370 [inline] __se_sys_creat fs/open.c:1364 [inline] __x64_sys_creat+0x11f/0x160 fs/open.c:1364 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 -> (&f->f_owner.lock){...-}-{2:2} { IN-SOFTIRQ-R at: lock_acquire+0x1a7/0x400 kernel/locking/lockdep.c:5665 __raw_read_lock_irqsave include/linux/rwlock_api_smp.h:160 [inline] _raw_read_lock_irqsave+0xd9/0x120 kernel/locking/spinlock.c:236 send_sigurg+0x25/0x370 fs/fcntl.c:816 sk_send_sigurg+0x6a/0xb0 net/core/sock.c:3275 tcp_check_urg+0x1f6/0x720 net/ipv4/tcp_input.c:5596 tcp_urg+0x152/0x440 net/ipv4/tcp_input.c:5637 tcp_rcv_established+0x9f0/0x1a10 net/ipv4/tcp_input.c:5984 tcp_v4_do_rcv+0x479/0xac0 net/ipv4/tcp_ipv4.c:1659 tcp_v4_rcv+0x2ac3/0x3370 net/ipv4/tcp_ipv4.c:2076 ip_protocol_deliver_rcu+0x391/0x750 net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x269/0x480 net/ipv4/ip_input.c:233 __netif_receive_skb_one_core net/core/dev.c:5480 [inline] __netif_receive_skb+0x1c5/0x500 net/core/dev.c:5594 process_backlog+0x4f8/0x8b0 net/core/dev.c:5922 __napi_poll+0xbe/0x4b0 net/core/dev.c:6488 napi_poll net/core/dev.c:6555 [inline] net_rx_action+0x76c/0x10b0 net/core/dev.c:6666 __do_softirq+0x382/0x793 kernel/softirq.c:571 run_ksoftirqd+0xc1/0x120 kernel/softirq.c:934 smpboot_thread_fn+0x533/0x9d0 kernel/smpboot.c:164 kthread+0x266/0x300 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 INITIAL USE at: lock_acquire+0x1a7/0x400 kernel/locking/lockdep.c:5665 __raw_write_lock_irq include/linux/rwlock_api_smp.h:195 [inline] _raw_write_lock_irq+0xcf/0x110 kernel/locking/spinlock.c:326 f_modown+0x38/0x340 fs/fcntl.c:90 fcntl_dirnotify+0x68b/0x890 fs/notify/dnotify/dnotify.c:369 do_fcntl+0x5c7/0x1370 fs/fcntl.c:405 __do_sys_fcntl fs/fcntl.c:453 [inline] __se_sys_fcntl+0xd5/0x1b0 fs/fcntl.c:438 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 INITIAL READ USE at: lock_acquire+0x1a7/0x400 kernel/locking/lockdep.c:5665 __raw_read_lock_irqsave include/linux/rwlock_api_smp.h:160 [inline] _raw_read_lock_irqsave+0xd9/0x120 kernel/locking/spinlock.c:236 send_sigio+0x2f/0x300 fs/fcntl.c:777 dnotify_handle_event+0x136/0x450 fs/notify/dnotify/dnotify.c:115 fsnotify+0xc7e/0x12c0 fs/notify/fsnotify.c:567 fsnotify_name include/linux/fsnotify.h:36 [inline] fsnotify_dirent include/linux/fsnotify.h:42 [inline] fsnotify_create include/linux/fsnotify.h:207 [inline] open_last_lookups fs/namei.c:3446 [inline] path_openat+0x14b3/0x2ec0 fs/namei.c:3650 do_filp_open+0x277/0x4f0 fs/namei.c:3680 do_sys_openat2+0x13b/0x500 fs/open.c:1278 do_sys_open fs/open.c:1294 [inline] __do_sys_creat fs/open.c:1370 [inline] __se_sys_creat fs/open.c:1364 [inline] __x64_sys_creat+0x11f/0x160 fs/open.c:1364 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 } ... key at: [] __alloc_file.__key+0x0/0x10 ... acquired at: lock_acquire+0x1a7/0x400 kernel/locking/lockdep.c:5665 __raw_read_lock_irqsave include/linux/rwlock_api_smp.h:160 [inline] _raw_read_lock_irqsave+0xd9/0x120 kernel/locking/spinlock.c:236 send_sigio+0x2f/0x300 fs/fcntl.c:777 kill_fasync_rcu fs/fcntl.c:1002 [inline] kill_fasync+0x1e4/0x430 fs/fcntl.c:1016 snd_timer_user_ccallback+0x370/0x540 sound/core/timer.c:1386 snd_timer_notify1+0x1ad/0x350 sound/core/timer.c:516 snd_timer_start1+0x53d/0x640 sound/core/timer.c:578 snd_timer_start sound/core/timer.c:696 [inline] snd_timer_user_start sound/core/timer.c:1984 [inline] __snd_timer_user_ioctl+0xae7/0x54c0 sound/core/timer.c:2107 snd_timer_user_ioctl+0x5d/0x80 sound/core/timer.c:2128 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl+0xfb/0x170 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 -> (&new->fa_lock){....}-{2:2} { INITIAL USE at: lock_acquire+0x1a7/0x400 kernel/locking/lockdep.c:5665 __raw_write_lock_irq include/linux/rwlock_api_smp.h:195 [inline] _raw_write_lock_irq+0xcf/0x110 kernel/locking/spinlock.c:326 fasync_remove_entry+0xff/0x1d0 fs/fcntl.c:872 __fput+0x6cd/0x820 fs/file_table.c:314 task_work_run+0x146/0x1c0 kernel/task_work.c:177 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] exit_to_user_mode_loop+0x134/0x160 kernel/entry/common.c:169 exit_to_user_mode_prepare+0xad/0x110 kernel/entry/common.c:201 __syscall_exit_to_user_mode_work kernel/entry/common.c:283 [inline] syscall_exit_to_user_mode+0x2e/0x60 kernel/entry/common.c:294 entry_SYSCALL_64_after_hwframe+0x46/0xb0 INITIAL READ USE at: lock_acquire+0x1a7/0x400 kernel/locking/lockdep.c:5665 __raw_read_lock_irqsave include/linux/rwlock_api_smp.h:160 [inline] _raw_read_lock_irqsave+0xd9/0x120 kernel/locking/spinlock.c:236 kill_fasync_rcu fs/fcntl.c:995 [inline] kill_fasync+0x13b/0x430 fs/fcntl.c:1016 snd_timer_user_ccallback+0x370/0x540 sound/core/timer.c:1386 snd_timer_notify1+0x1ad/0x350 sound/core/timer.c:516 snd_timer_start1+0x53d/0x640 sound/core/timer.c:578 snd_timer_start sound/core/timer.c:696 [inline] snd_timer_user_start sound/core/timer.c:1984 [inline] __snd_timer_user_ioctl+0xae7/0x54c0 sound/core/timer.c:2107 snd_timer_user_ioctl+0x5d/0x80 sound/core/timer.c:2128 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl+0xfb/0x170 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 } ... key at: [] fasync_insert_entry.__key+0x0/0x20 ... acquired at: lock_acquire+0x1a7/0x400 kernel/locking/lockdep.c:5665 __raw_read_lock_irqsave include/linux/rwlock_api_smp.h:160 [inline] _raw_read_lock_irqsave+0xd9/0x120 kernel/locking/spinlock.c:236 kill_fasync_rcu fs/fcntl.c:995 [inline] kill_fasync+0x13b/0x430 fs/fcntl.c:1016 snd_timer_user_ccallback+0x370/0x540 sound/core/timer.c:1386 snd_timer_notify1+0x1ad/0x350 sound/core/timer.c:516 snd_timer_start1+0x53d/0x640 sound/core/timer.c:578 snd_timer_start sound/core/timer.c:696 [inline] snd_timer_user_start sound/core/timer.c:1984 [inline] __snd_timer_user_ioctl+0xae7/0x54c0 sound/core/timer.c:2107 snd_timer_user_ioctl+0x5d/0x80 sound/core/timer.c:2128 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl+0xfb/0x170 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 -> (&timer->lock){-...}-{2:2} { IN-HARDIRQ-W at: lock_acquire+0x1a7/0x400 kernel/locking/lockdep.c:5665 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:349 [inline] snd_hrtimer_callback+0x51/0x360 sound/core/hrtimer.c:38 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x50b/0xa60 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x3a6/0xfd0 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline] __sysvec_apic_timer_interrupt+0xf9/0x280 arch/x86/kernel/apic/apic.c:1112 sysvec_apic_timer_interrupt+0x8c/0xb0 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x1b/0x20 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] _raw_spin_unlock_irqrestore+0xd4/0x130 kernel/locking/spinlock.c:194 spin_unlock_irqrestore include/linux/spinlock.h:404 [inline] unlock_page_lruvec_irqrestore include/linux/memcontrol.h:1575 [inline] release_pages+0x29d2/0x2cb0 mm/swap.c:977 __pagevec_release+0x7d/0xf0 mm/swap.c:1000 pagevec_release include/linux/pagevec.h:82 [inline] folio_batch_release include/linux/pagevec.h:146 [inline] truncate_inode_pages_range+0x4a2/0x17b0 mm/truncate.c:373 ext4_evict_inode+0x366/0xf90 fs/ext4/inode.c:219 evict+0x2a4/0x620 fs/inode.c:664 do_unlinkat+0x532/0x9a0 fs/namei.c:4267 __do_sys_unlink fs/namei.c:4308 [inline] __se_sys_unlink fs/namei.c:4306 [inline] __x64_sys_unlink+0x45/0x50 fs/namei.c:4306 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 INITIAL USE at: lock_acquire+0x1a7/0x400 kernel/locking/lockdep.c:5665 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:119 [inline] _raw_spin_lock_irq+0xcf/0x110 kernel/locking/spinlock.c:170 spin_lock_irq include/linux/spinlock.h:374 [inline] snd_pcm_detach_substream+0x153/0x290 sound/core/pcm.c:1001 snd_pcm_oss_release_file sound/core/oss/pcm_oss.c:2413 [inline] snd_pcm_oss_release+0x15d/0x270 sound/core/oss/pcm_oss.c:2592 __fput+0x3b9/0x820 fs/file_table.c:317 delayed_fput+0x61/0x90 fs/file_table.c:345 process_one_work+0x81c/0xd10 kernel/workqueue.c:2289 worker_thread+0xb14/0x1330 kernel/workqueue.c:2436 kthread+0x266/0x300 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 } ... key at: [] snd_timer_new.__key+0x0/0x20 ... acquired at: mark_lock+0x21c/0x350 kernel/locking/lockdep.c:4632 mark_usage kernel/locking/lockdep.c:4524 [inline] __lock_acquire+0xb43/0x1f80 kernel/locking/lockdep.c:5007 lock_acquire+0x1a7/0x400 kernel/locking/lockdep.c:5665 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:349 [inline] snd_hrtimer_callback+0x51/0x360 sound/core/hrtimer.c:38 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x50b/0xa60 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x3a6/0xfd0 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline] __sysvec_apic_timer_interrupt+0xf9/0x280 arch/x86/kernel/apic/apic.c:1112 sysvec_apic_timer_interrupt+0x8c/0xb0 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x1b/0x20 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] _raw_spin_unlock_irqrestore+0xd4/0x130 kernel/locking/spinlock.c:194 spin_unlock_irqrestore include/linux/spinlock.h:404 [inline] unlock_page_lruvec_irqrestore include/linux/memcontrol.h:1575 [inline] release_pages+0x29d2/0x2cb0 mm/swap.c:977 __pagevec_release+0x7d/0xf0 mm/swap.c:1000 pagevec_release include/linux/pagevec.h:82 [inline] folio_batch_release include/linux/pagevec.h:146 [inline] truncate_inode_pages_range+0x4a2/0x17b0 mm/truncate.c:373 ext4_evict_inode+0x366/0xf90 fs/ext4/inode.c:219 evict+0x2a4/0x620 fs/inode.c:664 do_unlinkat+0x532/0x9a0 fs/namei.c:4267 __do_sys_unlink fs/namei.c:4308 [inline] __se_sys_unlink fs/namei.c:4306 [inline] __x64_sys_unlink+0x45/0x50 fs/namei.c:4306 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 stack backtrace: CPU: 1 PID: 3645 Comm: syz-executor.3 Not tainted 5.19.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e3/0x2cb lib/dump_stack.c:106 print_irq_inversion_bug+0x58c/0x6f0 kernel/locking/lockdep.c:4040 mark_lock_irq+0x9d2/0xf00 kernel/locking/lockdep.c:4203 mark_lock+0x21c/0x350 kernel/locking/lockdep.c:4632 mark_usage kernel/locking/lockdep.c:4524 [inline] __lock_acquire+0xb43/0x1f80 kernel/locking/lockdep.c:5007 lock_acquire+0x1a7/0x400 kernel/locking/lockdep.c:5665 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:349 [inline] snd_hrtimer_callback+0x51/0x360 sound/core/hrtimer.c:38 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x50b/0xa60 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x3a6/0xfd0 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline] __sysvec_apic_timer_interrupt+0xf9/0x280 arch/x86/kernel/apic/apic.c:1112 sysvec_apic_timer_interrupt+0x8c/0xb0 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x1b/0x20 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 kernel/locking/spinlock.c:194 Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 72 31 a6 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 c7 cd 27 f7 65 8b 05 c8 37 ce 75 85 c0 74 3f 48 c7 04 24 0e 36 RSP: 0018:ffffc9000311f7c0 EFLAGS: 00000206 RAX: cfe58a57ef841400 RBX: 1ffff92000623efc RCX: ffffffff816825e8 RDX: dffffc0000000000 RSI: ffffffff8a8d2220 RDI: 0000000000000001 RBP: ffffc9000311f850 R08: dffffc0000000000 R09: fffffbfff1fa9215 R10: fffffbfff1fa9215 R11: 1ffffffff1fa9214 R12: dffffc0000000000 R13: 1ffff92000623ef8 R14: ffffc9000311f7e0 R15: 0000000000000246 spin_unlock_irqrestore include/linux/spinlock.h:404 [inline] unlock_page_lruvec_irqrestore include/linux/memcontrol.h:1575 [inline] release_pages+0x29d2/0x2cb0 mm/swap.c:977 __pagevec_release+0x7d/0xf0 mm/swap.c:1000 pagevec_release include/linux/pagevec.h:82 [inline] folio_batch_release include/linux/pagevec.h:146 [inline] truncate_inode_pages_range+0x4a2/0x17b0 mm/truncate.c:373 ext4_evict_inode+0x366/0xf90 fs/ext4/inode.c:219 evict+0x2a4/0x620 fs/inode.c:664 do_unlinkat+0x532/0x9a0 fs/namei.c:4267 __do_sys_unlink fs/namei.c:4308 [inline] __se_sys_unlink fs/namei.c:4306 [inline] __x64_sys_unlink+0x45/0x50 fs/namei.c:4306 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 RIP: 0033:0x7f2783488a47 Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffdd7053078 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2783488a47 RDX: 00007ffdd70530b0 RSI: 00007ffdd70530b0 RDI: 00007ffdd7053140 RBP: 00007ffdd7053140 R08: 0000000000000001 R09: 00007ffdd7052f10 R10: 0000555555c5b8b3 R11: 0000000000000206 R12: 00007f27834e21c8 R13: 00007ffdd7054200 R14: 0000555555c5b810 R15: 00007ffdd7054240 ---------------- Code disassembly (best guess): 0: 9c pushfq 1: 8f 44 24 20 popq 0x20(%rsp) 5: 42 80 3c 23 00 cmpb $0x0,(%rbx,%r12,1) a: 74 08 je 0x14 c: 4c 89 f7 mov %r14,%rdi f: e8 72 31 a6 f7 callq 0xf7a63186 14: f6 44 24 21 02 testb $0x2,0x21(%rsp) 19: 75 4e jne 0x69 1b: 41 f7 c7 00 02 00 00 test $0x200,%r15d 22: 74 01 je 0x25 24: fb sti 25: bf 01 00 00 00 mov $0x1,%edi * 2a: e8 c7 cd 27 f7 callq 0xf727cdf6 <-- trapping instruction 2f: 65 8b 05 c8 37 ce 75 mov %gs:0x75ce37c8(%rip),%eax # 0x75ce37fe 36: 85 c0 test %eax,%eax 38: 74 3f je 0x79 3a: 48 rex.W 3b: c7 .byte 0xc7 3c: 04 24 add $0x24,%al 3e: 0e (bad) 3f: 36 ss