rpc_mount+0x9e/0xd0 net/sunrpc/rpc_pipe.c:1451 mount_fs+0x66/0x2d0 fs/super.c:1222 vfs_kern_mount.part.26+0xc6/0x4a0 fs/namespace.c:1037 ------------[ cut here ]------------ vfs_kern_mount fs/namespace.c:2509 [inline] do_new_mount fs/namespace.c:2512 [inline] do_mount+0xea4/0x2bb0 fs/namespace.c:2842 kernel BUG at lib/list_debug.c:53! invalid opcode: 0000 [#1] SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 1 PID: 4530 Comm: syz-executor1 Not tainted 4.16.0-rc6+ #43 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__list_del_entry_valid+0xef/0x150 lib/list_debug.c:51 RSP: 0018:ffff8801d895f7a0 EFLAGS: 00010282 SYSC_mount fs/namespace.c:3058 [inline] SyS_mount+0xab/0x120 fs/namespace.c:3035 RAX: 0000000000000054 RBX: ffff8801bf2ff270 RCX: 0000000000000000 RDX: 0000000000000054 RSI: 1ffff1003b12bea9 RDI: ffffed003b12bee8 RBP: ffff8801d895f7b8 R08: 1ffff1003b12be40 R09: 0000000000000000 do_syscall_64+0x281/0x940 arch/x86/entry/common.c:287 R10: ffff8801d895f778 R11: 0000000000000000 R12: ffff8801bf2ff0f0 R13: 1ffff1003b12befd R14: ffff8801bf304f50 R15: dffffc0000000000 FS: 00007f4440558700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4440536db8 CR3: 00000001acc97006 CR4: 00000000001606e0 DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: __list_del_entry include/linux/list.h:117 [inline] dentry_unlist fs/dcache.c:518 [inline] __dentry_kill+0x260/0x700 fs/dcache.c:571 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x454e79 RSP: 002b:00007f718395cc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 dentry_kill fs/dcache.c:616 [inline] dput.part.20+0x5a0/0x830 fs/dcache.c:831 RAX: ffffffffffffffda RBX: 00007f718395d6d4 RCX: 0000000000454e79 RDX: 0000000020000340 RSI: 0000000020000040 RDI: 0000000020000000 RBP: 000000000072bea0 R08: 0000000020000080 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 R13: 00000000000003fa R14: 00000000006f8010 R15: 0000000000000038 dput+0x1f/0x30 fs/dcache.c:795 net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry nfsd4_cb rpc_gssd_dummy_depopulate net/sunrpc/rpc_pipe.c:1381 [inline] rpc_fill_super+0x628/0xae0 net/sunrpc/rpc_pipe.c:1426 net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / mount_ns+0xc4/0x190 fs/super.c:1036 rpc_mount+0x9e/0xd0 net/sunrpc/rpc_pipe.c:1451 rpcbind: RPC call returned error 22 mount_fs+0x66/0x2d0 fs/super.c:1222 vfs_kern_mount.part.26+0xc6/0x4a0 fs/namespace.c:1037 vfs_kern_mount fs/namespace.c:2509 [inline] do_new_mount fs/namespace.c:2512 [inline] do_mount+0xea4/0x2bb0 fs/namespace.c:2842 rpcbind: RPC call returned error 22 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 SYSC_mount fs/namespace.c:3058 [inline] SyS_mount+0xab/0x120 fs/namespace.c:3035 do_syscall_64+0x281/0x940 arch/x86/entry/common.c:287 CPU: 0 PID: 4541 Comm: syz-executor4 Not tainted 4.16.0-rc6+ #43 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x24d lib/dump_stack.c:53 fail_dump lib/fault-inject.c:51 [inline] should_fail+0x8c0/0xa40 lib/fault-inject.c:149 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x454e79 RSP: 002b:00007f4440557c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f44405586d4 RCX: 0000000000454e79 RDX: 0000000020000340 RSI: 0000000020000040 RDI: 0000000020000000 RBP: 000000000072bea0 R08: 0000000020000080 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 R13: 00000000000003fa R14: 00000000006f8010 R15: 0000000000000038 Code: 4c 89 e2 should_failslab+0xec/0x120 mm/failslab.c:32 48 slab_pre_alloc_hook mm/slab.h:422 [inline] slab_alloc mm/slab.c:3365 [inline] kmem_cache_alloc+0x47/0x760 mm/slab.c:3539 c7 c7 c0 bf 75 rpc_alloc_inode+0x1a/0x20 net/sunrpc/rpc_pipe.c:198 87 alloc_inode+0x65/0x180 fs/inode.c:209 e8 new_inode_pseudo+0x69/0x190 fs/inode.c:890 35 c1 46 fe new_inode+0x1c/0x40 fs/inode.c:919 0f rpc_get_inode+0x20/0x1e0 net/sunrpc/rpc_pipe.c:475 0b __rpc_create_common+0x5d/0x1d0 net/sunrpc/rpc_pipe.c:500 48 c7 __rpc_mkdir net/sunrpc/rpc_pipe.c:538 [inline] rpc_populate.constprop.15+0x1ad/0x340 net/sunrpc/rpc_pipe.c:734 c7 rpc_gssd_dummy_populate net/sunrpc/rpc_pipe.c:1340 [inline] rpc_fill_super+0x464/0xae0 net/sunrpc/rpc_pipe.c:1407 20 c0 75 87 e8 27 mount_ns+0xc4/0x190 fs/super.c:1036 c1 rpc_mount+0x9e/0xd0 net/sunrpc/rpc_pipe.c:1451 46 mount_fs+0x66/0x2d0 fs/super.c:1222 fe 0f vfs_kern_mount.part.26+0xc6/0x4a0 fs/namespace.c:1037 0b 48 c7 c7 vfs_kern_mount fs/namespace.c:2509 [inline] do_new_mount fs/namespace.c:2512 [inline] do_mount+0xea4/0x2bb0 fs/namespace.c:2842 80 c0 75 87 e8 19 c1 SYSC_mount fs/namespace.c:3058 [inline] SyS_mount+0xab/0x120 fs/namespace.c:3035 46 fe do_syscall_64+0x281/0x940 arch/x86/entry/common.c:287 <0f> 0b 48 c7 c7 e0 c0 75 87 e8 0b c1 entry_SYSCALL_64_after_hwframe+0x42/0xb7 46 RIP: 0033:0x454e79 fe RSP: 002b:00007f0fe58cdc68 EFLAGS: 00000246 0f ORIG_RAX: 00000000000000a5 0b RAX: ffffffffffffffda RBX: 00007f0fe58ce6d4 RCX: 0000000000454e79 48 RDX: 0000000020000340 RSI: 0000000020000040 RDI: 0000000020000000 89 RBP: 000000000072bea0 R08: 0000000020000080 R09: 0000000000000000 df R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 48 R13: 00000000000003fa R14: 00000000006f8010 R15: 0000000000000038 89 net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry clntXX RIP: __list_del_entry_valid+0xef/0x150 lib/list_debug.c:51 RSP: ffff8801d895f7a0 ---[ end trace 8779132e966309ed ]--- net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory gssd