loop3: detected capacity change from 0 to 512 loop1: detected capacity change from 0 to 512 EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. ------------[ cut here ]------------ WARNING: fs/namespace.c:1434 at mntput_no_expire+0x78e/0xbe0, CPU#1: syz-executor.5/284 Modules linked in: CPU: 1 UID: 0 PID: 284 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:mntput_no_expire+0x78e/0xbe0 Code: 05 16 42 81 04 01 e8 31 f8 91 ff e9 41 fc ff ff e8 b7 50 b4 ff 31 ff 44 89 ee e8 dd 4b b4 ff 45 85 ed 79 09 e8 a3 50 b4 ff 90 <0f> 0b 90 e8 9a 50 b4 ff e8 75 f6 fb 02 31 ff 89 c5 89 c6 e8 ba 4b RSP: 0018:ffff888017ba7ce0 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 1ffff11002f74fa1 RCX: ffffffff81bf96d3 RDX: ffff88800a72d280 RSI: ffffffff81bf96dd RDI: 0000000000000005 RBP: ffff88801f04a380 R08: 0000000000000001 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000001 R12: ffff888017ba7d48 R13: 00000000ffffffff R14: ffff88801f04a380 R15: ffff88801f04a468 FS: 0000555557707400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffef75bee78 CR3: 000000003eddd000 CR4: 0000000000350ef0 Call Trace: path_umount+0x6e0/0x1100 __x64_sys_umount+0x15c/0x190 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7809980f87 Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fffefb5e158 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: ffffffffffffffda RBX: 000000000000003b RCX: 00007f7809980f87 RDX: 00007fffefb5e22a RSI: 000000000000000a RDI: 00007fffefb5e220 RBP: 00007fffefb5e220 R08: 00000000ffffffff R09: 00007fffefb5dff0 R10: 0000555557708c7b R11: 0000000000000246 R12: 00007f78099d9105 R13: 00007fffefb5f2e0 R14: 0000555557708c20 R15: 00007fffefb5f320 irq event stamp: 256093 hardirqs last enabled at (256101): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (256110): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (255816): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (255803): [] __irq_exit_rcu+0xc4/0x100 ---[ end trace 0000000000000000 ]--- EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. audit: type=1400 audit(1756473480.718:11): avc: denied { watch } for pid=4257 comm="syz-executor.0" path="/proc/4257/task" dev="proc" ino=6196 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. loop1: detected capacity change from 0 to 512 EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. No source specified No source specified No source specified No source specified No source specified loop7: detected capacity change from 0 to 6 FAT-fs (loop7): Directory bread(block 6) failed FAT-fs (loop7): Directory bread(block 7) failed FAT-fs (loop7): Directory bread(block 8) failed FAT-fs (loop7): Directory bread(block 9) failed FAT-fs (loop7): Directory bread(block 6) failed FAT-fs (loop7): Directory bread(block 7) failed FAT-fs (loop7): Directory bread(block 8) failed FAT-fs (loop7): Directory bread(block 9) failed FAT-fs (loop7): Directory bread(block 6) failed FAT-fs (loop7): Directory bread(block 7) failed kmemleak: Found object by alias at 0x607f1a638208 CPU: 1 UID: 0 PID: 4557 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xca/0x120 __lookup_object+0x94/0xb0 delete_object_full+0x27/0x70 free_percpu+0x30/0x1160 futex_hash_free+0x38/0xc0 mmput+0x2d3/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 get_signal+0x2315/0x2340 arch_do_signal_or_restart+0x80/0x790 exit_to_user_mode_loop+0x8b/0x110 do_syscall_64+0x2f7/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd4a2c12b19 Code: Unable to access opcode bytes at 0x7fd4a2c12aef. RSP: 002b:00007fd4a0188218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007fd4a2d25f68 RCX: 00007fd4a2c12b19 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd4a2d25f68 RBP: 00007fd4a2d25f60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4a2d25f6c R13: 00007ffeff8b95ef R14: 00007fd4a0188300 R15: 0000000000022000 kmemleak: Object (percpu) 0x607f1a638204 (size 8): kmemleak: comm "syz-executor.7", pid 4556, jiffies 4294794515 kmemleak: min_count = 1 kmemleak: count = 0 kmemleak: flags = 0x21 kmemleak: checksum = 0 kmemleak: backtrace: pcpu_alloc_noprof+0x87a/0x1170 alloc_vfsmnt+0x135/0x6e0 vfs_create_mount.part.0+0x40/0x440 path_mount+0x1637/0x1dd0 __x64_sys_mount+0x27b/0x300 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f loop7: detected capacity change from 0 to 6 loop2: detected capacity change from 0 to 6 FAT-fs (loop7): Directory bread(block 6) failed FAT-fs (loop7): Directory bread(block 7) failed FAT-fs (loop7): Directory bread(block 8) failed FAT-fs (loop7): Directory bread(block 9) failed FAT-fs (loop7): Directory bread(block 6) failed FAT-fs (loop7): Directory bread(block 7) failed FAT-fs (loop7): Directory bread(block 8) failed FAT-fs (loop7): Directory bread(block 9) failed FAT-fs (loop7): Directory bread(block 6) failed FAT-fs (loop7): Directory bread(block 7) failed kmemleak: Found object by alias at 0x607f1a638208 CPU: 1 UID: 0 PID: 4572 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xca/0x120 __lookup_object+0x94/0xb0 delete_object_full+0x27/0x70 free_percpu+0x30/0x1160 futex_hash_free+0x38/0xc0 mmput+0x2d3/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 __x64_sys_exit_group+0x3e/0x50 x64_sys_call+0x18c5/0x18d0 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd4a2c12b19 Code: Unable to access opcode bytes at 0x7fd4a2c12aef. RSP: 002b:00007ffeff8b9818 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fd4a2c12b19 RDX: 00007fd4a2bc572b RSI: ffffffffffffffbc RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000001b2d427738 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffeff8b9900 kmemleak: Object (percpu) 0x607f1a638204 (size 8): kmemleak: comm "syz-executor.7", pid 4578, jiffies 4294795031 kmemleak: min_count = 1 kmemleak: count = 0 kmemleak: flags = 0x21 kmemleak: checksum = 0 kmemleak: backtrace: pcpu_alloc_noprof+0x87a/0x1170 alloc_vfsmnt+0x135/0x6e0 vfs_create_mount.part.0+0x40/0x440 path_mount+0x1637/0x1dd0 __x64_sys_mount+0x27b/0x300 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f FAT-fs (loop2): Directory bread(block 6) failed FAT-fs (loop2): Directory bread(block 7) failed FAT-fs (loop2): Directory bread(block 8) failed FAT-fs (loop2): Directory bread(block 9) failed FAT-fs (loop2): Directory bread(block 6) failed FAT-fs (loop2): Directory bread(block 7) failed FAT-fs (loop2): Directory bread(block 8) failed FAT-fs (loop2): Directory bread(block 9) failed FAT-fs (loop2): Directory bread(block 6) failed FAT-fs (loop2): Directory bread(block 7) failed Bluetooth: hci0: Opcode 0x0c1a failed: -4 Bluetooth: hci0: Opcode 0x0406 failed: -4 Bluetooth: hci0: Opcode 0x0406 failed: -4 Bluetooth: hci1: Opcode 0x0c1a failed: -4 Bluetooth: hci1: Opcode 0x0406 failed: -4 Bluetooth: hci1: Opcode 0x0406 failed: -4 Bluetooth: hci2: Opcode 0x0c1a failed: -4 Bluetooth: hci2: Opcode 0x0406 failed: -4 Bluetooth: hci2: Opcode 0x0406 failed: -4 Bluetooth: hci3: Opcode 0x0c1a failed: -4 Bluetooth: hci3: Opcode 0x0406 failed: -4 Bluetooth: hci3: Opcode 0x0406 failed: -4 Bluetooth: hci4: Opcode 0x0c1a failed: -4 Bluetooth: hci4: Opcode 0x0406 failed: -4 Bluetooth: hci4: Opcode 0x0406 failed: -4 Bluetooth: hci6: Opcode 0x0c1a failed: -4 Bluetooth: hci6: Opcode 0x0406 failed: -4 Bluetooth: hci6: Opcode 0x0406 failed: -4 Bluetooth: hci5: Opcode 0x0c1a failed: -4 Bluetooth: hci5: Opcode 0x0406 failed: -4 Bluetooth: hci5: Opcode 0x0406 failed: -4 Bluetooth: hci7: Opcode 0x0c1a failed: -4 Bluetooth: hci7: Opcode 0x0406 failed: -4 Bluetooth: hci7: Opcode 0x0406 failed: -4 loop7: detected capacity change from 0 to 6 FAT-fs (loop7): Directory bread(block 6) failed FAT-fs (loop7): Directory bread(block 7) failed FAT-fs (loop7): Directory bread(block 8) failed FAT-fs (loop7): Directory bread(block 9) failed FAT-fs (loop7): Directory bread(block 6) failed FAT-fs (loop7): Directory bread(block 7) failed loop2: detected capacity change from 0 to 6 FAT-fs (loop7): Directory bread(block 8) failed FAT-fs (loop7): Directory bread(block 9) failed FAT-fs (loop7): Directory bread(block 6) failed FAT-fs (loop7): Directory bread(block 7) failed kmemleak: Found object by alias at 0x607f1a638208 CPU: 1 UID: 0 PID: 4597 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xca/0x120 __lookup_object+0x94/0xb0 delete_object_full+0x27/0x70 free_percpu+0x30/0x1160 futex_hash_free+0x38/0xc0 mmput+0x2d3/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 get_signal+0x2315/0x2340 arch_do_signal_or_restart+0x80/0x790 exit_to_user_mode_loop+0x8b/0x110 do_syscall_64+0x2f7/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd4a2c12b19 Code: Unable to access opcode bytes at 0x7fd4a2c12aef. RSP: 002b:00007fd4a0188218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007fd4a2d25f68 RCX: 00007fd4a2c12b19 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd4a2d25f68 RBP: 00007fd4a2d25f60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4a2d25f6c R13: 00007ffeff8b95ef R14: 00007fd4a0188300 R15: 0000000000022000 kmemleak: Object (percpu) 0x607f1a638204 (size 8): kmemleak: comm "syz-executor.7", pid 4594, jiffies 4294795429 kmemleak: min_count = 1 kmemleak: count = 0 kmemleak: flags = 0x21 kmemleak: checksum = 0 kmemleak: backtrace: pcpu_alloc_noprof+0x87a/0x1170 alloc_vfsmnt+0x135/0x6e0 vfs_create_mount.part.0+0x40/0x440 path_mount+0x1637/0x1dd0 __x64_sys_mount+0x27b/0x300 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f FAT-fs (loop2): Directory bread(block 6) failed FAT-fs (loop2): Directory bread(block 7) failed FAT-fs (loop2): Directory bread(block 8) failed FAT-fs (loop2): Directory bread(block 9) failed FAT-fs (loop2): Directory bread(block 6) failed FAT-fs (loop2): Directory bread(block 7) failed FAT-fs (loop2): Directory bread(block 8) failed FAT-fs (loop2): Directory bread(block 9) failed FAT-fs (loop2): Directory bread(block 6) failed FAT-fs (loop2): Directory bread(block 7) failed loop2: detected capacity change from 0 to 6 loop7: detected capacity change from 0 to 6 FAT-fs (loop7): Directory bread(block 6) failed FAT-fs (loop7): Directory bread(block 7) failed FAT-fs (loop7): Directory bread(block 8) failed FAT-fs (loop7): Directory bread(block 9) failed FAT-fs (loop2): Directory bread(block 6) failed FAT-fs (loop2): Directory bread(block 7) failed FAT-fs (loop2): Directory bread(block 8) failed FAT-fs (loop7): Directory bread(block 6) failed FAT-fs (loop7): Directory bread(block 7) failed FAT-fs (loop7): Directory bread(block 8) failed FAT-fs (loop7): Directory bread(block 9) failed FAT-fs (loop2): Directory bread(block 9) failed FAT-fs (loop7): Directory bread(block 6) failed FAT-fs (loop7): Directory bread(block 7) failed FAT-fs (loop2): Directory bread(block 6) failed FAT-fs (loop2): Directory bread(block 7) failed FAT-fs (loop2): Directory bread(block 8) failed FAT-fs (loop2): Directory bread(block 9) failed FAT-fs (loop2): Directory bread(block 6) failed FAT-fs (loop2): Directory bread(block 7) failed kmemleak: Found object by alias at 0x607f1a638208 CPU: 0 UID: 0 PID: 4619 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xca/0x120 __lookup_object+0x94/0xb0 delete_object_full+0x27/0x70 free_percpu+0x30/0x1160 futex_hash_free+0x38/0xc0 mmput+0x2d3/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 get_signal+0x2315/0x2340 arch_do_signal_or_restart+0x80/0x790 exit_to_user_mode_loop+0x8b/0x110 do_syscall_64+0x2f7/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd4a2c12b19 Code: Unable to access opcode bytes at 0x7fd4a2c12aef. RSP: 002b:00007fd4a0188218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007fd4a2d25f68 RCX: 00007fd4a2c12b19 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd4a2d25f68 RBP: 00007fd4a2d25f60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4a2d25f6c R13: 00007ffeff8b95ef R14: 00007fd4a0188300 R15: 0000000000022000 kmemleak: Object (percpu) 0x607f1a638204 (size 8): kmemleak: comm "syz-executor.7", pid 4621, jiffies 4294796229 kmemleak: min_count = 1 kmemleak: count = 0 kmemleak: flags = 0x21 kmemleak: checksum = 0 kmemleak: backtrace: pcpu_alloc_noprof+0x87a/0x1170 alloc_vfsmnt+0x135/0x6e0 vfs_create_mount.part.0+0x40/0x440 path_mount+0x1637/0x1dd0 __x64_sys_mount+0x27b/0x300 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f Bluetooth: hci0: command 0x0c1a tx timeout Bluetooth: hci7: command 0x0c1a tx timeout Bluetooth: hci5: command 0x0c1a tx timeout Bluetooth: hci6: command 0x0c1a tx timeout Bluetooth: hci4: command 0x0c1a tx timeout Bluetooth: hci3: command 0x0c1a tx timeout Bluetooth: hci2: command 0x0c1a tx timeout Bluetooth: hci1: command 0x0c1a tx timeout Bluetooth: hci7: ACL packet for unknown connection handle 200 Bluetooth: hci7: ACL packet for unknown connection handle 200 Bluetooth: hci7: unexpected event for opcode 0x0411 Bluetooth: hci7: SCO packet for unknown connection handle 200 program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO Bluetooth: hci7: ACL packet for unknown connection handle 201 Bluetooth: hci7: ACL packet for unknown connection handle 201 kmemleak: Found object by alias at 0x607f1a638208 CPU: 0 UID: 0 PID: 4753 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xca/0x120 __lookup_object+0x94/0xb0 delete_object_full+0x27/0x70 free_percpu+0x30/0x1160 futex_hash_free+0x38/0xc0 mmput+0x2d3/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 __x64_sys_exit_group+0x3e/0x50 x64_sys_call+0x18c5/0x18d0 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd4a2c12b19 Code: Unable to access opcode bytes at 0x7fd4a2c12aef. RSP: 002b:00007ffeff8b9818 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fd4a2c12b19 RDX: 00007fd4a2bc572b RSI: ffffffffffffffbc RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000001b2d422030 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffeff8b9900 kmemleak: Object (percpu) 0x607f1a638204 (size 8): kmemleak: comm "syz-executor.0", pid 4762, jiffies 4294797751 kmemleak: min_count = 1 kmemleak: count = 0 kmemleak: flags = 0x21 kmemleak: checksum = 0 kmemleak: backtrace: pcpu_alloc_noprof+0x87a/0x1170 alloc_vfsmnt+0x135/0x6e0 vfs_create_mount.part.0+0x40/0x440 fc_mount_longterm+0x126/0x160 mq_init_ns+0x42e/0x630 copy_ipcs+0x38d/0x630 create_new_namespaces+0x210/0xab0 copy_namespaces+0x45c/0x580 copy_process+0x2649/0x73c0 kernel_clone+0xea/0x7f0 __do_sys_clone+0xce/0x120 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f kmemleak: Cannot insert 0x607f1a638208 into the object search tree (overlaps existing) CPU: 0 UID: 0 PID: 4762 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xca/0x120 __link_object+0x190/0x210 __create_object+0x48/0x80 pcpu_alloc_noprof+0x87a/0x1170 alloc_netdev_mqs+0x131/0x1360 sit_init_net+0x19e/0x630 ops_init+0x1e1/0x650 setup_net+0x10d/0x320 copy_net_ns+0x2e3/0x650 create_new_namespaces+0x3f6/0xab0 copy_namespaces+0x45c/0x580 copy_process+0x2649/0x73c0 kernel_clone+0xea/0x7f0 __do_sys_clone+0xce/0x120 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f01fbea8b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f01f941e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007f01fbfbbf60 RCX: 00007f01fbea8b19 RDX: 0000000020000080 RSI: 0000000000000000 RDI: 000000004c01f900 RBP: 00007f01fbf02f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffef75c046f R14: 00007f01f941e300 R15: 0000000000022000 kmemleak: Kernel memory leak detector disabled kmemleak: Object (percpu) 0x607f1a638204 (size 8): kmemleak: comm "syz-executor.0", pid 4762, jiffies 4294797751 kmemleak: min_count = 1 kmemleak: count = 0 kmemleak: flags = 0x21 kmemleak: checksum = 0 kmemleak: backtrace: pcpu_alloc_noprof+0x87a/0x1170 alloc_vfsmnt+0x135/0x6e0 vfs_create_mount.part.0+0x40/0x440 fc_mount_longterm+0x126/0x160 mq_init_ns+0x42e/0x630 copy_ipcs+0x38d/0x630 create_new_namespaces+0x210/0xab0 copy_namespaces+0x45c/0x580 copy_process+0x2649/0x73c0 kernel_clone+0xea/0x7f0 __do_sys_clone+0xce/0x120 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f kmemleak: Found object by alias at 0x607f1a638208 CPU: 0 UID: 0 PID: 4768 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xca/0x120 __lookup_object+0x94/0xb0 delete_object_full+0x27/0x70 free_percpu+0x30/0x1160 futex_hash_free+0x38/0xc0 mmput+0x2d3/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 __x64_sys_exit_group+0x3e/0x50 x64_sys_call+0x18c5/0x18d0 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd4a2c12b19 Code: Unable to access opcode bytes at 0x7fd4a2c12aef. RSP: 002b:00007ffeff8b9818 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fd4a2c12b19 RDX: 00007fd4a2bc572b RSI: ffffffffffffffbc RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000001b2d42200c R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffeff8b9900 kmemleak: Object (percpu) 0x607f1a638204 (size 8): kmemleak: comm "syz-executor.0", pid 4762, jiffies 4294797751 kmemleak: min_count = 1 kmemleak: count = 0 kmemleak: flags = 0x21 kmemleak: checksum = 0 kmemleak: backtrace: pcpu_alloc_noprof+0x87a/0x1170 alloc_vfsmnt+0x135/0x6e0 vfs_create_mount.part.0+0x40/0x440 fc_mount_longterm+0x126/0x160 mq_init_ns+0x42e/0x630 copy_ipcs+0x38d/0x630 create_new_namespaces+0x210/0xab0 copy_namespaces+0x45c/0x580 copy_process+0x2649/0x73c0 kernel_clone+0xea/0x7f0 __do_sys_clone+0xce/0x120 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f Bluetooth: hci7: ACL packet for unknown connection handle 200 program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO Bluetooth: hci7: ACL packet for unknown connection handle 200 Bluetooth: hci7: unexpected event for opcode 0x0411 Bluetooth: hci7: SCO packet for unknown connection handle 200 Bluetooth: hci7: ACL packet for unknown connection handle 201 Bluetooth: hci7: ACL packet for unknown connection handle 201 kmemleak: Found object by alias at 0x607f1a638208 CPU: 0 UID: 0 PID: 58 Comm: kworker/0:2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events free_ipc Call Trace: dump_stack_lvl+0xca/0x120 __lookup_object+0x94/0xb0 delete_object_full+0x27/0x70 free_percpu+0x30/0x1160 percpu_counter_destroy_many+0x188/0x2b0 msg_exit_ns+0x4c/0x60 free_ipc+0x189/0x2b0 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 kmemleak: Object (percpu) 0x607f1a638204 (size 8): kmemleak: comm "syz-executor.0", pid 4762, jiffies 4294797751 kmemleak: min_count = 1 kmemleak: count = 0 kmemleak: flags = 0x21 kmemleak: checksum = 0 kmemleak: backtrace: pcpu_alloc_noprof+0x87a/0x1170 alloc_vfsmnt+0x135/0x6e0 vfs_create_mount.part.0+0x40/0x440 fc_mount_longterm+0x126/0x160 mq_init_ns+0x42e/0x630 copy_ipcs+0x38d/0x630 create_new_namespaces+0x210/0xab0 copy_namespaces+0x45c/0x580 copy_process+0x2649/0x73c0 kernel_clone+0xea/0x7f0 __do_sys_clone+0xce/0x120 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f kmemleak: Automatic memory scanning thread ended Bluetooth: hci0: command 0x0c1a tx timeout mac80211_hwsim hwsim5 wlan1: entered promiscuous mode mac80211_hwsim hwsim5 wlan1: left promiscuous mode mac80211_hwsim hwsim5 wlan1: entered promiscuous mode mac80211_hwsim hwsim5 wlan1: left promiscuous mode mac80211_hwsim hwsim5 wlan1: entered promiscuous mode mac80211_hwsim hwsim8 wlan1: entered promiscuous mode Bluetooth: hci1: command 0x0c1a tx timeout Bluetooth: hci3: command 0x0c1a tx timeout Bluetooth: hci2: command 0x0c1a tx timeout Bluetooth: hci4: command 0x0c1a tx timeout Bluetooth: hci6: command 0x0c1a tx timeout Bluetooth: hci5: command 0x0c1a tx timeout mac80211_hwsim hwsim5 wlan1: left promiscuous mode mac80211_hwsim hwsim8 wlan1: left promiscuous mode mac80211_hwsim hwsim8 wlan1: entered promiscuous mode mac80211_hwsim hwsim5 wlan1: entered promiscuous mode mac80211_hwsim hwsim5 wlan1: left promiscuous mode mac80211_hwsim hwsim8 wlan1: left promiscuous mode mac80211_hwsim hwsim8 wlan1: entered promiscuous mode mac80211_hwsim hwsim5 wlan1: entered promiscuous mode mac80211_hwsim hwsim8 wlan1: left promiscuous mode mac80211_hwsim hwsim5 wlan1: left promiscuous mode sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 10 00 00 04 00 blk_print_req_error: 7 callbacks suppressed I/O error, dev sr0, sector 64 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 10 00 00 04 00 I/O error, dev sr0, sector 64 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 audit: type=1326 audit(1756473489.828:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4974 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43f2dacb19 code=0x0 Bluetooth: hci0: command 0x0c1a tx timeout sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 10 00 00 04 00 I/O error, dev sr0, sector 64 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2