------------[ cut here ]------------ WARNING: fs/namespace.c:1434 at mntput_no_expire+0x78e/0xbe0, CPU#1: syz-executor.2/282 Modules linked in: CPU: 1 UID: 0 PID: 282 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:mntput_no_expire+0x78e/0xbe0 Code: 05 16 42 81 04 01 e8 31 f8 91 ff e9 41 fc ff ff e8 b7 50 b4 ff 31 ff 44 89 ee e8 dd 4b b4 ff 45 85 ed 79 09 e8 a3 50 b4 ff 90 <0f> 0b 90 e8 9a 50 b4 ff e8 75 f6 fb 02 31 ff 89 c5 89 c6 e8 ba 4b RSP: 0018:ffff88800eeb7ce0 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 1ffff11001dd6fa1 RCX: ffffffff81bf96d3 RDX: ffff88801863d280 RSI: ffffffff81bf96dd RDI: 0000000000000005 RBP: ffff88804268a380 R08: 0000000000000001 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000001 R12: ffff88800eeb7d48 R13: 00000000ffffffff R14: ffff88804268a380 R15: ffff88804268a468 FS: 000055556edb3400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005555618eec18 CR3: 000000003e435000 CR4: 0000000000350ef0 Call Trace: path_umount+0x6e0/0x1100 __x64_sys_umount+0x15c/0x190 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f576bad3f87 Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffd316ba0d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: ffffffffffffffda RBX: 0000000000000066 RCX: 00007f576bad3f87 RDX: 00007ffd316ba1aa RSI: 000000000000000a RDI: 00007ffd316ba1a0 RBP: 00007ffd316ba1a0 R08: 00000000ffffffff R09: 00007ffd316b9f70 R10: 000055556edb4c7b R11: 0000000000000246 R12: 00007f576bb2c105 R13: 00007ffd316bb260 R14: 000055556edb4c20 R15: 00007ffd316bb2a0 irq event stamp: 357595 hardirqs last enabled at (357603): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (357612): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (357456): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (357451): [] __irq_exit_rcu+0xc4/0x100 ---[ end trace 0000000000000000 ]--- Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 Bluetooth: hci6: Injecting HCI hardware error event Bluetooth: hci6: hardware error 0x00 ------------[ cut here ]------------ WARNING: fs/namespace.c:1434 at mntput_no_expire+0x78e/0xbe0, CPU#1: syz-executor.2/282 Modules linked in: CPU: 1 UID: 0 PID: 282 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:mntput_no_expire+0x78e/0xbe0 Code: 05 16 42 81 04 01 e8 31 f8 91 ff e9 41 fc ff ff e8 b7 50 b4 ff 31 ff 44 89 ee e8 dd 4b b4 ff 45 85 ed 79 09 e8 a3 50 b4 ff 90 <0f> 0b 90 e8 9a 50 b4 ff e8 75 f6 fb 02 31 ff 89 c5 89 c6 e8 ba 4b RSP: 0018:ffff88800eeb7ce0 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 1ffff11001dd6fa1 RCX: ffffffff81bf96d3 RDX: ffff88801863d280 RSI: ffffffff81bf96dd RDI: 0000000000000005 RBP: ffff88804268b180 R08: 0000000000000001 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000001 R12: ffff88800eeb7d48 R13: 00000000ffffffff R14: ffff88804268b180 R15: ffff88804268b268 FS: 000055556edb3400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f938cf41050 CR3: 000000003e435000 CR4: 0000000000350ef0 Call Trace: path_umount+0x6e0/0x1100 __x64_sys_umount+0x15c/0x190 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f576bad3f87 Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffd316ba0d8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 RAX: ffffffffffffffda RBX: 0000000000000066 RCX: 00007f576bad3f87 RDX: 00007ffd316ba1aa RSI: 000000000000000a RDI: 00007ffd316ba1a0 RBP: 00007ffd316ba1a0 R08: 00000000ffffffff R09: 00007ffd316b9f70 R10: 000055556edb4c7b R11: 0000000000000206 R12: 00007f576bb2c105 R13: 00007ffd316bb260 R14: 000055556edb4c20 R15: 00007ffd316bb2a0 irq event stamp: 359183 hardirqs last enabled at (359193): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (359200): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (358954): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (358595): [] __irq_exit_rcu+0xc4/0x100 ---[ end trace 0000000000000000 ]--- Bluetooth: unknown link type 225 Bluetooth: hci3: connection err: -111 kmemleak: Found object by alias at 0x607f1a638d30 CPU: 0 UID: 0 PID: 4729 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xca/0x120 __lookup_object+0x94/0xb0 delete_object_full+0x27/0x70 free_percpu+0x30/0x1160 futex_hash_free+0x38/0xc0 mmput+0x2d3/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 get_signal+0x2315/0x2340 arch_do_signal_or_restart+0x80/0x790 exit_to_user_mode_loop+0x8b/0x110 do_syscall_64+0x2f7/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa7cbdecb19 Code: Unable to access opcode bytes at 0x7fa7cbdecaef. RSP: 002b:00007fa7c9362218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000001 RBX: 00007fa7cbefff68 RCX: 00007fa7cbdecb19 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa7cbefff6c RBP: 00007fa7cbefff60 R08: 000000000000000e R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa7cbefff6c R13: 00007fff2286014f R14: 00007fa7c9362300 R15: 0000000000022000 kmemleak: Object (percpu) 0x607f1a638d2c (size 8): kmemleak: comm "syz-executor.2", pid 4737, jiffies 4294790277 kmemleak: min_count = 1 kmemleak: count = 0 kmemleak: flags = 0x21 kmemleak: checksum = 0 kmemleak: backtrace: pcpu_alloc_noprof+0x87a/0x1170 alloc_vfsmnt+0x135/0x6e0 vfs_create_mount.part.0+0x40/0x440 path_mount+0x1637/0x1dd0 __x64_sys_mount+0x27b/0x300 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f Bluetooth: unknown link type 225 Bluetooth: hci3: connection err: -111 Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 Bluetooth: hci3: Injecting HCI hardware error event Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 Bluetooth: hci2: Injecting HCI hardware error event Bluetooth: hci2: hardware error 0x00 Bluetooth: hci3: hardware error 0x00 ------------[ cut here ]------------ WARNING: fs/namespace.c:1375 at cleanup_mnt+0x33f/0x430, CPU#1: syz-executor.2/282 Modules linked in: CPU: 1 UID: 0 PID: 282 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:cleanup_mnt+0x33f/0x430 Code: c7 a0 45 d1 85 e8 01 7c fa 02 49 8d 7d 40 5b 48 c7 c6 10 e2 be 81 5d 41 5c 41 5d 41 5e 41 5f e9 57 b3 9c ff e8 82 46 b4 ff 90 <0f> 0b 90 e9 e6 fc ff ff e8 74 46 b4 ff 4c 89 ef e8 6c d7 06 00 e9 RSP: 0018:ffff88800eeb7e20 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff81bf9de5 RDX: ffff88801863d280 RSI: ffffffff81bfa0fe RDI: 0000000000000005 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000002 R11: 0000000000000001 R12: ffff88801863db58 R13: ffff88804268b500 R14: 0000000000000001 R15: ffff88804268b540 FS: 000055556edb3400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fff2285eff8 CR3: 000000003e435000 CR4: 0000000000350ef0 Call Trace: task_work_run+0x172/0x280 exit_to_user_mode_loop+0xef/0x110 do_syscall_64+0x2f7/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f576bad3f87 Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffd316ba0d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 000000000000006b RCX: 00007f576bad3f87 RDX: 00007ffd316ba1aa RSI: 000000000000000a RDI: 00007ffd316ba1a0 RBP: 00007ffd316ba1a0 R08: 00000000ffffffff R09: 00007ffd316b9f70 R10: 000055556edb4c7b R11: 0000000000000246 R12: 00007f576bb2c105 R13: 00007ffd316bb260 R14: 000055556edb4c20 R15: 00007ffd316bb2a0 irq event stamp: 368975 hardirqs last enabled at (368985): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (368994): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (368888): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (368881): [] __irq_exit_rcu+0xc4/0x100 ---[ end trace 0000000000000000 ]--- Bluetooth: unknown link type 225 Bluetooth: hci3: connection err: -111 Bluetooth: unknown link type 225 Bluetooth: hci3: connection err: -111 Bluetooth: hci0: command tx timeout Bluetooth: unknown link type 225 Bluetooth: hci3: connection err: -111 audit: type=1107 audit(1756457462.809:12): pid=4834 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='©' audit: type=1107 audit(1756457462.822:13): pid=4834 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='©' audit: type=1107 audit(1756457463.000:14): pid=4854 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='©' audit: type=1107 audit(1756457463.141:15): pid=4862 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='©' audit: type=1107 audit(1756457463.145:16): pid=4868 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='©' kmemleak: Found object by alias at 0x607f1a638d30 CPU: 1 UID: 0 PID: 4870 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xca/0x120 __lookup_object+0x94/0xb0 delete_object_full+0x27/0x70 free_percpu+0x30/0x1160 futex_hash_free+0x38/0xc0 mmput+0x2d3/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 get_signal+0x2315/0x2340 arch_do_signal_or_restart+0x80/0x790 exit_to_user_mode_loop+0x8b/0x110 do_syscall_64+0x2f7/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa7cbdecb19 Code: Unable to access opcode bytes at 0x7fa7cbdecaef. RSP: 002b:00007fa7c9362218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000001 RBX: 00007fa7cbefff68 RCX: 00007fa7cbdecb19 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa7cbefff6c RBP: 00007fa7cbefff60 R08: 000000000000000e R09: 0000000000000000 R10: 0000000000000014 R11: 0000000000000246 R12: 00007fa7cbefff6c R13: 00007fff2286014f R14: 00007fa7c9362300 R15: 0000000000022000 kmemleak: Object (percpu) 0x607f1a638d2c (size 8): kmemleak: comm "syz-executor.7", pid 4874, jiffies 4294791902 kmemleak: min_count = 1 kmemleak: count = 0 kmemleak: flags = 0x21 kmemleak: checksum = 0 kmemleak: backtrace: pcpu_alloc_noprof+0x87a/0x1170 alloc_vfsmnt+0x135/0x6e0 vfs_create_mount.part.0+0x40/0x440 path_mount+0x1637/0x1dd0 __x64_sys_mount+0x27b/0x300 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f audit: type=1107 audit(1756457463.332:17): pid=4885 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='©' audit: type=1107 audit(1756457463.354:18): pid=4889 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='©' Bluetooth: hci6: Opcode 0x0c03 failed: -110 audit: type=1107 audit(1756457463.446:19): pid=4893 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='©' UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list Bluetooth: hci2: Opcode 0x0c03 failed: -110 Bluetooth: hci3: Opcode 0x0c03 failed: -110 netlink: 'syz-executor.2': attribute type 11 has an invalid length. kmemleak: Found object by alias at 0x607f1a638d30 CPU: 1 UID: 0 PID: 4945 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xca/0x120 __lookup_object+0x94/0xb0 delete_object_full+0x27/0x70 free_percpu+0x30/0x1160 futex_hash_free+0x38/0xc0 mmput+0x2d3/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 __x64_sys_exit_group+0x3e/0x50 x64_sys_call+0x18c5/0x18d0 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa7cbdecb19 Code: Unable to access opcode bytes at 0x7fa7cbdecaef. RSP: 002b:00007fff22860378 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fa7cbdecb19 RDX: 00007fa7cbd9f72b RSI: ffffffffffffffbc RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000001b2d0215f4 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff22860460 kmemleak: Object (percpu) 0x607f1a638d2c (size 8): kmemleak: comm "syz-executor.2", pid 4950, jiffies 4294792699 kmemleak: min_count = 1 kmemleak: count = 0 kmemleak: flags = 0x21 kmemleak: checksum = 0 kmemleak: backtrace: pcpu_alloc_noprof+0x87a/0x1170 alloc_vfsmnt+0x135/0x6e0 vfs_create_mount.part.0+0x40/0x440 path_mount+0x1637/0x1dd0 __x64_sys_mount+0x27b/0x300 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f Bluetooth: hci0: command tx timeout Bluetooth: hci0: command tx timeout audit: type=1400 audit(1756457466.851:20): avc: denied { module_load } for pid=5050 comm="syz-executor.7" path="/syz-executor.7" dev="sda" ino=15936 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=system permissive=1 Invalid ELF header type: 3 != 1 ALSA: seq fatal error: cannot create timer (-22) ALSA: seq fatal error: cannot create timer (-22) Invalid ELF header type: 3 != 1 ALSA: seq fatal error: cannot create timer (-22) Invalid ELF header type: 3 != 1 ALSA: seq fatal error: cannot create timer (-22) ALSA: seq fatal error: cannot create timer (-22) Invalid ELF header type: 3 != 1 ALSA: seq fatal error: cannot create timer (-22) ALSA: seq fatal error: cannot create timer (-22) ALSA: seq fatal error: cannot create timer (-22) program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO FAT-fs (loop4): bogus number of reserved sectors FAT-fs (loop4): Can't find a valid FAT filesystem FAT-fs (loop4): bogus number of reserved sectors FAT-fs (loop4): Can't find a valid FAT filesystem program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO FAT-fs (loop4): bogus number of reserved sectors FAT-fs (loop4): Can't find a valid FAT filesystem program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO FAT-fs (loop4): bogus number of reserved sectors FAT-fs (loop4): Can't find a valid FAT filesystem FAT-fs (loop4): bogus number of reserved sectors FAT-fs (loop4): Can't find a valid FAT filesystem