====================================== | [ 2314.387847][ T5138] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, indices[i])) | [ 2314.389971][ T5138] ------------[ cut here ]------------ | [ 2314.390272][ T5138] kernel BUG at mm/truncate.c:691! | [ 2314.390582][ T5138] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 2314.391189][ T5138] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 2314.391416][ T5138] RIP: 0010:invalidate_inode_pages2_range (mm/truncate.c:691 (discriminator 1)) [ 2314.391654][ T5138] Code: 85 c0 b8 f0 ff ff ff 0f 45 44 24 18 44 88 74 24 27 89 44 24 18 e9 eb fd ff ff 48 c7 c6 20 be 36 b3 4c 89 ef e8 af da 07 00 90 <0f> 0b 80 7c 24 27 00 75 31 48 8b 7c 24 48 e8 0b bf ff ff 80 bc 24 All code ======== 0: 85 c0 test %eax,%eax 2: b8 f0 ff ff ff mov $0xfffffff0,%eax 7: 0f 45 44 24 18 cmovne 0x18(%rsp),%eax c: 44 88 74 24 27 mov %r14b,0x27(%rsp) 11: 89 44 24 18 mov %eax,0x18(%rsp) 15: e9 eb fd ff ff jmp 0xfffffffffffffe05 1a: 48 c7 c6 20 be 36 b3 mov $0xffffffffb336be20,%rsi 21: 4c 89 ef mov %r13,%rdi 24: e8 af da 07 00 call 0x7dad8 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 80 7c 24 27 00 cmpb $0x0,0x27(%rsp) 31: 75 31 jne 0x64 33: 48 8b 7c 24 48 mov 0x48(%rsp),%rdi 38: e8 0b bf ff ff call 0xffffffffffffbf48 3d: 80 .byte 0x80 3e: bc .byte 0xbc 3f: 24 .byte 0x24 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 80 7c 24 27 00 cmpb $0x0,0x27(%rsp) 7: 75 31 jne 0x3a 9: 48 8b 7c 24 48 mov 0x48(%rsp),%rdi e: e8 0b bf ff ff call 0xffffffffffffbf1e 13: 80 .byte 0x80 14: bc .byte 0xbc 15: 24 .byte 0x24 [ 2314.392322][ T5138] RSP: 0000:ffffc90002827480 EFLAGS: 00010246 [ 2314.392566][ T5138] RAX: 0000000000000048 RBX: 0000000000000004 RCX: 0000000000000000 [ 2314.392841][ T5138] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 [ 2314.393142][ T5138] RBP: ffffc90002827690 R08: 0000000000000000 R09: fffffbfff68c07fc [ 2314.393432][ T5138] R10: 0000000000000003 R11: 0000000000000000 R12: ffffc90002827548 [ 2314.393720][ T5138] R13: ffffea00002bab80 R14: ffffea00002bab80 R15: dffffc0000000000 [ 2314.393991][ T5138] FS: 00007f8850be5740(0000) GS:ffff8880b6c42000(0000) knlGS:0000000000000000 [ 2314.394304][ T5138] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2314.394535][ T5138] CR2: 00007fc2b55e73d0 CR3: 000000001cc31001 CR4: 0000000000772ef0 [ 2314.394808][ T5138] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2314.395087][ T5138] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2314.395367][ T5138] PKRU: 55555554 [ 2314.395507][ T5138] Call Trace: [ 2314.395645][ T5138] [ 2314.395741][ T5138] ? __pfx_invalidate_inode_pages2_range (mm/truncate.c:645) [ 2314.395981][ T5138] ? rcu_read_lock_any_held (kernel/rcu/update.c:386 kernel/rcu/update.c:380) [ 2314.396172][ T5138] ? validate_chain (kernel/locking/lockdep.c:3802 kernel/locking/lockdep.c:3822 kernel/locking/lockdep.c:3877) [ 2314.396364][ T5138] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4473) [ 2314.396555][ T5138] ? do_raw_spin_unlock (./arch/x86/include/asm/atomic.h:23 ./include/linux/atomic/atomic-arch-fallback.h:457 ./include/linux/atomic/atomic-instrumented.h:33 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141) [ 2314.396740][ T5138] ? fuse_file_io_open (fs/fuse/iomode.c:240) [ 2314.396930][ T5138] fuse_open (fs/fuse/file.c:280) [ 2314.397087][ T5138] do_dentry_open (fs/open.c:956) [ 2314.397280][ T5138] ? __pfx_fuse_open (fs/fuse/file.c:234) [ 2314.397462][ T5138] vfs_open (fs/open.c:1086) [ 2314.397614][ T5138] backing_file_open (fs/backing-file.c:45) [ 2314.397796][ T5138] ovl_open_realfile (fs/overlayfs/file.c:51) [ 2314.397985][ T5138] ovl_open (fs/overlayfs/file.c:222) [ 2314.398135][ T5138] ? __pfx_ovl_open (fs/overlayfs/file.c:199) [ 2314.398315][ T5138] ? __lock_release (kernel/locking/lockdep.c:5534) [ 2314.398498][ T5138] do_dentry_open (fs/open.c:956) [ 2314.398679][ T5138] ? __pfx_ovl_open (fs/overlayfs/file.c:199) [ 2314.398864][ T5138] vfs_open (fs/open.c:1086) [ 2314.399002][ T5138] do_open (fs/namei.c:3881) [ 2314.399138][ T5138] path_openat (fs/namei.c:4039) [ 2314.399326][ T5138] ? __pfx_path_openat (fs/namei.c:4021) [ 2314.399503][ T5138] ? is_bpf_text_address (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 kernel/bpf/core.c:774) [ 2314.399684][ T5138] ? __lock_release (kernel/locking/lockdep.c:5534) [ 2314.399867][ T5138] do_filp_open (fs/namei.c:4066) [ 2314.400046][ T5138] ? kernel_text_address (kernel/extable.c:97 kernel/extable.c:94) [ 2314.400227][ T5138] ? __pfx_do_filp_open (fs/namei.c:4060) [ 2314.400407][ T5138] ? unwind_get_return_address (arch/x86/kernel/unwind_orc.c:369 arch/x86/kernel/unwind_orc.c:364) [ 2314.400598][ T5138] ? __pfx_stack_trace_consume_entry (kernel/stacktrace.c:83) [ 2314.400830][ T5138] ? rcu_read_lock_any_held (kernel/rcu/update.c:386 kernel/rcu/update.c:380) [ 2314.401018][ T5138] ? validate_chain (kernel/locking/lockdep.c:3802 kernel/locking/lockdep.c:3822 kernel/locking/lockdep.c:3877) [ 2314.401197][ T5138] ? rcu_read_lock_any_held (kernel/rcu/update.c:386 kernel/rcu/update.c:380) [ 2314.401376][ T5138] ? __lock_acquire (kernel/locking/lockdep.c:5235) [ 2314.401571][ T5138] do_open_execat (fs/exec.c:893) [ 2314.401751][ T5138] ? __pfx_do_open_execat (fs/exec.c:875) [ 2314.401942][ T5138] ? __might_fault (mm/memory.c:7151 mm/memory.c:7145) [ 2314.402127][ T5138] ? __lock_release (kernel/locking/lockdep.c:5534) [ 2314.402310][ T5138] alloc_bprm (fs/exec.c:1518) [ 2314.402464][ T5138] do_execveat_common.isra.0 (fs/exec.c:1919) [ 2314.402641][ T5138] ? getname_flags (./arch/x86/include/asm/atomic.h:28 ./include/linux/atomic/atomic-arch-fallback.h:503 ./include/linux/atomic/atomic-instrumented.h:68 fs/namei.c:132 fs/namei.c:213) [ 2314.402817][ T5138] __x64_sys_execve (fs/exec.c:2113) [ 2314.403000][ T5138] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 2314.403195][ T5138] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 2314.403421][ T5138] RIP: 0033:0x7f8850c2640b [ 2314.403607][ T5138] Code: c0 75 03 5f ff e7 c3 48 8b 0d f1 a9 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 80 00 00 00 00 f3 0f 1e fa b8 3b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c5 a9 1b 00 f7 d8 64 89 01 48 All code ======== 0: c0 75 03 5f shlb $0x5f,0x3(%rbp) 4: ff e7 jmp *%rdi 6: c3 ret 7: 48 8b 0d f1 a9 1b 00 mov 0x1ba9f1(%rip),%rcx # 0x1ba9ff e: f7 d8 neg %eax 10: 64 89 01 mov %eax,%fs:(%rcx) 13: 48 83 c8 ff or $0xffffffffffffffff,%rax 17: c3 ret 18: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 1f: f3 0f 1e fa endbr64 23: b8 3b 00 00 00 mov $0x3b,%eax 28: 0f 05 syscall 2a:* 48 3d 01 f0 ff ff cmp $0xfffffffffffff001,%rax <-- trapping instruction 30: 73 01 jae 0x33 32: c3 ret 33: 48 8b 0d c5 a9 1b 00 mov 0x1ba9c5(%rip),%rcx # 0x1ba9ff 3a: f7 d8 neg %eax 3c: 64 89 01 mov %eax,%fs:(%rcx) 3f: 48 rex.W Code starting with the faulting instruction =========================================== 0: 48 3d 01 f0 ff ff cmp $0xfffffffffffff001,%rax 6: 73 01 jae 0x9 8: c3 ret 9: 48 8b 0d c5 a9 1b 00 mov 0x1ba9c5(%rip),%rcx # 0x1ba9d5 10: f7 d8 neg %eax 12: 64 89 01 mov %eax,%fs:(%rcx) 15: 48 rex.W [ 2314.404243][ T5138] RSP: 002b:00007ffd1eb4cc48 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 2314.404519][ T5138] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8850c2640b [ 2314.404789][ T5138] RDX: 0000563c94e31450 RSI: 0000563c955ca7d0 RDI: 0000563c94f95d20 [ 2314.405057][ T5138] RBP: 0000563c94f95d20 R08: 0000563c94f93f90 R09: 0000000000000000 [ 2314.405334][ T5138] R10: 0000000000000008 R11: 0000000000000246 R12: 00000000ffffffff Finger prints: invalidate_inode_pages2_range:fuse_open:do_dentry_open:vfs_open:backing_file_open