An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in _delrelocroot() in fs/btrfs/relocation.c when mounting a crafted btrfs image, related to removing reloc rbtrees when reloc control has not been initialized.