invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 4142 Comm: syz-executor4 Not tainted 4.20.0+ #11 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 binder: BINDER_SET_CONTEXT_MGR already set RIP: 0010:btrfs_close_one_device fs/btrfs/volumes.c:1287 [inline] RIP: 0010:close_fs_devices.part.0+0x7a1/0xa30 fs/btrfs/volumes.c:1306 binder: 4139:4141 ioctl 40046207 0 returned -16 Code: 04 25 28 00 00 00 0f 85 ee 01 00 00 48 81 c4 20 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c6 c1 8c fe 0f 0b e8 bf c1 8c fe <0f> 0b e8 b8 c1 8c fe 0f 0b e9 ca fe ff ff e8 ac c1 8c fe 0f 0b e9 RSP: 0018:ffff888078ddf368 EFLAGS: 00010216 RAX: 0000000000040000 RBX: ffff8880963f36c0 RCX: ffffc90005a65000 RDX: 000000000001cc7e RSI: ffffffff82f536d1 RDI: 0000000000000286 RBP: ffff888078ddf4b0 R08: ffff88808ebde280 R09: ffffed1015ce5b90 R10: ffffed1015ce5b8f R11: ffff8880ae72dc7b R12: ffff88809f6f6490 R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880a6ab0000 FS: 00007fcc5df9c700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000940004 CR3: 00000000990ae000 CR4: 00000000001426e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: close_fs_devices fs/btrfs/volumes.c:1338 [inline] btrfs_close_devices+0xa0/0x200 fs/btrfs/volumes.c:1324 btrfs_mount_root+0x13c6/0x1db0 fs/btrfs/super.c:1619 mount_fs+0xae/0x331 fs/super.c:1261 vfs_kern_mount.part.0+0xdb/0x570 fs/namespace.c:961 vfs_kern_mount+0x40/0x60 fs/namespace.c:951 btrfs_mount+0x47d/0x21be fs/btrfs/super.c:1670 mount_fs+0xae/0x331 fs/super.c:1261 vfs_kern_mount.part.0+0xdb/0x570 fs/namespace.c:961 vfs_kern_mount fs/namespace.c:951 [inline] do_new_mount fs/namespace.c:2469 [inline] do_mount+0x576/0x3110 fs/namespace.c:2801 ksys_mount+0xdb/0x150 fs/namespace.c:3017 __do_sys_mount fs/namespace.c:3031 [inline] __se_sys_mount fs/namespace.c:3028 [inline] __x64_sys_mount+0xbe/0x150 fs/namespace.c:3028 do_syscall_64+0x1a3/0x800 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45a93a Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ed 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ca 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 RSP: 002b:00007fcc5df9ba88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fcc5df9bb30 RCX: 000000000045a93a RDX: 00007fcc5df9bad0 RSI: 0000000020000100 RDI: 00007fcc5df9baf0 RBP: 0000000020000100 R08: 00007fcc5df9bb30 R09: 00007fcc5df9bad0 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 R13: 0000000000000000 R14: 00000000004db638 R15: 0000000000000005 Modules linked in: kobject: 'loop0' (000000005a09fe1a): kobject_uevent_env kobject: 'loop0' (000000005a09fe1a): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop3' (0000000065dfaf0b): kobject_uevent_env kobject: 'loop3' (0000000065dfaf0b): fill_kobj_path: path = '/devices/virtual/block/loop3' binder: BINDER_SET_CONTEXT_MGR already set binder: 4158:4159 ioctl 40046207 0 returned -16 kobject: 'loop0' (000000005a09fe1a): kobject_uevent_env kobject: 'loop0' (000000005a09fe1a): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop2' (00000000f94b48bb): kobject_uevent_env kobject: 'loop2' (00000000f94b48bb): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop1' (00000000c6b2f585): kobject_uevent_env ---[ end trace 69c9aa26014209b0 ]--- kobject: 'loop1' (00000000c6b2f585): fill_kobj_path: path = '/devices/virtual/block/loop1' RIP: 0010:btrfs_close_one_device fs/btrfs/volumes.c:1287 [inline] RIP: 0010:close_fs_devices.part.0+0x7a1/0xa30 fs/btrfs/volumes.c:1306 kobject: 'loop3' (0000000065dfaf0b): kobject_uevent_env kobject: 'loop3' (0000000065dfaf0b): fill_kobj_path: path = '/devices/virtual/block/loop3' binder: BINDER_SET_CONTEXT_MGR already set Code: 04 25 28 00 00 00 0f 85 ee 01 00 00 48 81 c4 20 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c6 c1 8c fe 0f 0b e8 bf c1 8c fe <0f> 0b e8 b8 c1 8c fe 0f 0b e9 ca fe ff ff e8 ac c1 8c fe 0f 0b e9 kobject: 'loop2' (00000000f94b48bb): kobject_uevent_env kobject: 'loop2' (00000000f94b48bb): fill_kobj_path: path = '/devices/virtual/block/loop2' binder: 4161:4169 ioctl 40046207 0 returned -16 kobject: 'loop0' (000000005a09fe1a): kobject_uevent_env kobject: 'loop0' (000000005a09fe1a): fill_kobj_path: path = '/devices/virtual/block/loop0' RSP: 0018:ffff888078ddf368 EFLAGS: 00010216 kobject: 'loop1' (00000000c6b2f585): kobject_uevent_env kobject: 'loop1' (00000000c6b2f585): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop3' (0000000065dfaf0b): kobject_uevent_env RAX: 0000000000040000 RBX: ffff8880963f36c0 RCX: ffffc90005a65000 kobject: 'loop3' (0000000065dfaf0b): fill_kobj_path: path = '/devices/virtual/block/loop3' RDX: 000000000001cc7e RSI: ffffffff82f536d1 RDI: 0000000000000286 RBP: ffff888078ddf4b0 R08: ffff88808ebde280 R09: ffffed1015ce5b90 R10: ffffed1015ce5b8f R11: ffff8880ae72dc7b R12: ffff88809f6f6490 R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880a6ab0000 FS: 00007fcc5df9c700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 kobject: 'loop4' (00000000b1afe58b): kobject_uevent_env CR2: 000000000070a158 CR3: 00000000990ae000 CR4: 00000000001426f0 kobject: 'loop4' (00000000b1afe58b): fill_kobj_path: path = '/devices/virtual/block/loop4' DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400