RBP: 000000000072bea0 R08: 0000000020000200 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000003d list_del corruption. prev->next should be 00000000aea2a71a, but was 000000005b36e499 ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:53! invalid opcode: 0000 [#1] SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 1 PID: 17231 Comm: syz-executor0 Not tainted 4.16.0+ #15 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__list_del_entry_valid+0xef/0x150 lib/list_debug.c:51 RSP: 0018:ffff88018828f730 EFLAGS: 00010286 RAX: 0000000000000054 RBX: ffff8801895fcb10 RCX: 0000000000000000 RDX: 0000000000000054 RSI: ffffc90001eb8000 RDI: ffffed0031051eda RBP: ffff88018828f748 R08: ffffed003b624fb1 R09: ffffed003b624fb1 R10: 0000000000000001 R11: ffffed003b624fb0 R12: ffff8801895fc6b0 R13: 1ffff10031051eef R14: ffff8801895fc990 R15: dffffc0000000000 FS: 00007f8fe0fcf700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000930008 CR3: 000000018e3b5000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __list_del_entry include/linux/list.h:117 [inline] dentry_unlist fs/dcache.c:497 [inline] __dentry_kill+0x269/0x700 fs/dcache.c:550 dentry_kill+0xb5/0x500 fs/dcache.c:672 dput.part.21+0x508/0x6a0 fs/dcache.c:836 dput+0x1f/0x30 fs/dcache.c:816 rpc_gssd_dummy_depopulate net/sunrpc/rpc_pipe.c:1381 [inline] rpc_fill_super+0x628/0xae0 net/sunrpc/rpc_pipe.c:1426 mount_ns+0xc4/0x190 fs/super.c:1036 rpc_mount+0x9e/0xd0 net/sunrpc/rpc_pipe.c:1451 mount_fs+0x66/0x2d0 fs/super.c:1222 vfs_kern_mount.part.26+0xc6/0x4a0 fs/namespace.c:1037 vfs_kern_mount fs/namespace.c:2514 [inline] do_new_mount fs/namespace.c:2517 [inline] do_mount+0xea4/0x2b90 fs/namespace.c:2847 ksys_mount+0xab/0x120 fs/namespace.c:3063 SYSC_mount fs/namespace.c:3077 [inline] SyS_mount+0x39/0x50 fs/namespace.c:3074 do_syscall_64+0x281/0x940 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x4552d9 RSP: 002b:00007f8fe0fcec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f8fe0fcf6d4 RCX: 00000000004552d9 RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000300 RBP: 000000000072bea0 R08: 0000000020000200 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000003d Code: 4c 89 e2 48 c7 c7 40 d0 75 87 e8 75 9f 45 fe 0f 0b 48 c7 c7 a0 d0 75 87 e8 67 9f 45 fe 0f 0b 48 c7 c7 00 d1 75 87 e8 59 9f 45 fe <0f> 0b 48 c7 c7 60 d1 75 87 e8 4b 9f 45 fe 0f 0b 48 89 df 48 89 RIP: __list_del_entry_valid+0xef/0x150 lib/list_debug.c:51 RSP: ffff88018828f730 ---[ end trace d453ad0db491de36 ]---