BTRFS error (device loop5): open_ctree failed list_del corruption. prev->next should be ffff888092dee2d0, but was ffff8880a1a143f0 ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:51! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 10651 Comm: syz-executor.5 Not tainted 5.5.0-rc1-next-20191210-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f lib/list_debug.c:51 Code: e8 a9 3f cb fd 0f 0b 48 89 f1 48 c7 c7 c0 0d 70 88 4c 89 e6 e8 95 3f cb fd 0f 0b 4c 89 f6 48 c7 c7 60 0f 70 88 e8 84 3f cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 0e 70 88 e8 70 3f cb fd 0f 0b RSP: 0018:ffffc90001abf558 EFLAGS: 00010282 RAX: 0000000000000054 RBX: ffff8880aa002300 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff52000357e9d RBP: ffffc90001abf570 R08: 0000000000000054 R09: ffffed1015d26621 R10: ffffed1015d26620 R11: ffff8880ae933107 R12: ffff8880aa002400 R13: ffff8880a1a143f0 R14: ffff888092dee2d0 R15: ffff888092dee2d0 FS: 00007f5add931700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5615d44000 CR3: 000000009681f000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __list_del_entry include/linux/list.h:131 [inline] dentry_unlist fs/dcache.c:522 [inline] __dentry_kill+0x1fd/0x600 fs/dcache.c:575 dentry_kill fs/dcache.c:698 [inline] dput+0x62f/0xe10 fs/dcache.c:859 simple_recursive_removal+0x5bc/0x6d0 fs/libfs.c:302 debugfs_remove fs/debugfs/inode.c:713 [inline] debugfs_remove+0x5e/0x80 fs/debugfs/inode.c:707 bdi_debug_unregister mm/backing-dev.c:119 [inline] bdi_unregister+0x401/0x610 mm/backing-dev.c:1015 release_bdi mm/backing-dev.c:1032 [inline] kref_put include/linux/kref.h:65 [inline] bdi_put+0x1ca/0x200 mm/backing-dev.c:1041 generic_shutdown_super+0x2b0/0x370 fs/super.c:476 kill_anon_super+0x3e/0x60 fs/super.c:1106 btrfs_kill_super+0x41/0x2e0 fs/btrfs/super.c:2131 deactivate_locked_super+0x95/0x100 fs/super.c:335 btrfs_mount_root+0xbae/0x1100 fs/btrfs/super.c:1567 legacy_get_tree+0x108/0x220 fs/fs_context.c:647 vfs_get_tree+0x8e/0x300 fs/super.c:1545 fc_mount+0x17/0xc0 fs/namespace.c:962 vfs_kern_mount.part.0+0xd8/0xf0 fs/namespace.c:992 vfs_kern_mount+0x40/0x60 fs/namespace.c:979 btrfs_mount+0x2b4/0x15d8 fs/btrfs/super.c:1621 legacy_get_tree+0x108/0x220 fs/fs_context.c:647 vfs_get_tree+0x8e/0x300 fs/super.c:1545 do_new_mount fs/namespace.c:2822 [inline] do_mount+0x135a/0x1b50 fs/namespace.c:3142 ksys_mount+0xdb/0x150 fs/namespace.c:3351 __do_sys_mount fs/namespace.c:3365 [inline] __se_sys_mount fs/namespace.c:3362 [inline] __x64_sys_mount+0xbe/0x150 fs/namespace.c:3362 do_syscall_64+0xfa/0x790 arch/x86/entry/common.c:294 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45d14a Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 RSP: 002b:00007f5add930a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f5add930b40 RCX: 000000000045d14a RDX: 00007f5add930ae0 RSI: 00000000200001c0 RDI: 00007f5add930b00 RBP: 0000000000000001 R08: 00007f5add930b40 R09: 00007f5add930ae0 R10: 0000000000000003 R11: 0000000000000206 R12: 0000000000000006 R13: 00000000004caac3 R14: 00000000004e3fb0 R15: 00000000ffffffff Modules linked in: ---[ end trace 419ac50606c379d6 ]--- RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f lib/list_debug.c:51 Code: e8 a9 3f cb fd 0f 0b 48 89 f1 48 c7 c7 c0 0d 70 88 4c 89 e6 e8 95 3f cb fd 0f 0b 4c 89 f6 48 c7 c7 60 0f 70 88 e8 84 3f cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 0e 70 88 e8 70 3f cb fd 0f 0b RSP: 0018:ffffc90001abf558 EFLAGS: 00010282 RAX: 0000000000000054 RBX: ffff8880aa002300 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff52000357e9d RBP: ffffc90001abf570 R08: 0000000000000054 R09: ffffed1015d26621 R10: ffffed1015d26620 R11: ffff8880ae933107 R12: ffff8880aa002400 R13: ffff8880a1a143f0 R14: ffff888092dee2d0 R15: ffff888092dee2d0 FS: 00007f5add931700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5615d44000 CR3: 000000009681f000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400