RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 00000000004d3cc8 R14: 00000000004c8772 R15: 0000000000000001
list_add double add: new=ffff880190dc6498, prev=ffff880190dc6498, next=ffff8801bb4eb040.
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:31!
invalid opcode: 0000 [#1] SMP KASAN
CPU: 1 PID: 4392 Comm: syz-executor3 Not tainted 4.18.0+ #201
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__list_add_valid+0xaa/0xb0 lib/list_debug.c:29
Code: e8 eb a9 48 89 f7 48 89 75 e8 e8 91 f6 5b fe 48 8b 75 e8 eb bb 48 89 f2 48 89 d9 4c 89 e6 48 c7 c7 20 9d 3a 87 e8 3a d9 03 fe <0f> 0b 0f 1f 40 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 41 55
RSP: 0018:ffff8801b658f378 EFLAGS: 00010282
RAX: 0000000000000058 RBX: ffff8801bb4eb040 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff8163a441 RDI: 0000000000000001
RBP: ffff8801b658f390 R08: ffff8801b6586540 R09: ffffed003b625008
R10: ffffed003b625008 R11: ffff8801db128047 R12: ffff880190dc6498
R13: ffff8801bb2f68c0 R14: ffff880190dc6430 R15: ffff880190dc6498
FS:  0000000000b42940(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2da25000 CR3: 00000001b3b76000 CR4: 00000000001426e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __list_add include/linux/list.h:60 [inline]
 list_add_tail include/linux/list.h:93 [inline]
 p9_fd_request+0x145/0x440 net/9p/trans_fd.c:672
 p9_client_rpc+0x299/0x1400 net/9p/client.c:767
 p9_client_clunk+0x93/0x180 net/9p/client.c:1471
 v9fs_dentry_release+0x68/0xd0 fs/9p/vfs_dentry.c:73
 __dentry_kill+0x4c0/0x7a0 fs/dcache.c:571
 dentry_kill+0xc9/0x5a0 fs/dcache.c:685
 dput.part.26+0x66b/0x7a0 fs/dcache.c:846
 dput fs/dcache.c:829 [inline]
 do_one_tree+0x37/0x40 fs/dcache.c:1529
 shrink_dcache_for_umount+0xc7/0x2b0 fs/dcache.c:1543
 generic_shutdown_super+0xd5/0x530 fs/super.c:441
 kill_anon_super+0x3c/0x50 fs/super.c:1049
 v9fs_kill_super+0x3e/0xa0 fs/9p/vfs_super.c:230
 deactivate_locked_super+0x97/0x100 fs/super.c:329
 deactivate_super+0x2bb/0x320 fs/super.c:360
 cleanup_mnt+0xbf/0x160 fs/namespace.c:1183
 __cleanup_mnt+0x16/0x20 fs/namespace.c:1190
 task_work_run+0x1e8/0x2a0 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:193 [inline]
 exit_to_usermode_loop+0x318/0x380 arch/x86/entry/common.c:166
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x6be/0x820 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x459a97
Code: 44 00 00 b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8a fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd 8a fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007ffd58b14038 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000044854 RCX: 0000000000459a97
RDX: 0000000000408440 RSI: 0000000000000002 RDI: 00007ffd58b140e0
RBP: 00000000000002fd R08: 0000000000000000 R09: 000000000000000b
R10: 0000000000000005 R11: 0000000000000202 R12: 00007ffd58b15140
R13: 0000000000b43940 R14: 0000000000000000 R15: badc0ffeebadface
Modules linked in:
Dumping ftrace buffer:
   (ftrace buffer empty)
---[ end trace 90ba3db8b434e1cb ]---
RIP: 0010:__list_add_valid+0xaa/0xb0 lib/list_debug.c:29
Code: e8 eb a9 48 89 f7 48 89 75 e8 e8 91 f6 5b fe 48 8b 75 e8 eb bb 48 89 f2 48 89 d9 4c 89 e6 48 c7 c7 20 9d 3a 87 e8 3a d9 03 fe <0f> 0b 0f 1f 40 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 41 55
RSP: 0018:ffff8801b658f378 EFLAGS: 00010282
RAX: 0000000000000058 RBX: ffff8801bb4eb040 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff8163a441 RDI: 0000000000000001
RBP: ffff8801b658f390 R08: ffff8801b6586540 R09: ffffed003b625008
R10: ffffed003b625008 R11: ffff8801db128047 R12: ffff880190dc6498
R13: ffff8801bb2f68c0 R14: ffff880190dc6430 R15: ffff880190dc6498
FS:  0000000000b42940(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2da25000 CR3: 00000001b3b76000 CR4: 00000000001426e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400