We need to ask Chris Johns about this. I believe this is a case where the error checking has been done by the system call layer. I analyzed the "file handlers" callbacks for guarantees on parameters. This indicates the same analysis needs to happen for "file system handlers." Bharath: Yes, it is checked in mount.c