On Fri, Jun 03, 2016 at 11:23:55PM +0100, Al Viro wrote: > It's not that. It's explicit put_link() in do_last(), followed by > ESTALEOPEN and subsequent misbegotten "retry the last step on ESTALEOPEN" > looking at now-freed nd->last.name. IOW, the bug predates delayed_call > stuff.
FWIW, I'd stepped into that in d63ff28f "namei: make should_follow_link() store the link in nd->link", so it's 4.1+ mess. delayed_call stuff is 4.4+...
