and is ignored by this kernel. Remove the mand option from the mount to silence this warning. ======================================================= ------------[ cut here ]------------ WARNING: fs/namespace.c:1434 at mntput_no_expire+0x78e/0xbe0, CPU#1: syz-executor.6/4054 Modules linked in: CPU: 1 UID: 0 PID: 4054 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:mntput_no_expire+0x78e/0xbe0 Code: 05 16 42 81 04 01 e8 31 f8 91 ff e9 41 fc ff ff e8 b7 50 b4 ff 31 ff 44 89 ee e8 dd 4b b4 ff 45 85 ed 79 09 e8 a3 50 b4 ff 90 <0f> 0b 90 e8 9a 50 b4 ff e8 75 f6 fb 02 31 ff 89 c5 89 c6 e8 ba 4b RSP: 0018:ffff88804705f828 EFLAGS: 00010212 RAX: 000000000002e1e7 RBX: 1ffff11008e0bf0a RCX: ffffc9000ec73000 RDX: 0000000000040000 RSI: ffffffff81bf96dd RDI: 0000000000000005 RBP: ffff88800fa04540 R08: 0000000000000001 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000001 R12: ffff88804705f890 R13: 00000000ffffffff R14: dead000000000100 R15: ffff88800fa04540 FS: 00007f69579db700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055557279bc18 CR3: 00000000174b5000 CR4: 0000000000350ef0 Call Trace: namespace_unlock+0x7f1/0x810 put_mnt_ns+0xf5/0x120 create_new_namespaces+0x6a4/0xab0 copy_namespaces+0x45c/0x580 copy_process+0x2649/0x73c0 kernel_clone+0xea/0x7f0 __do_sys_clone3+0x1f5/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f695a486b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f69579db188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 RAX: ffffffffffffffda RBX: 00007f695a59a020 RCX: 00007f695a486b19 RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200002c0 RBP: 00007f695a4e0f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffcbad0081f R14: 00007f69579db300 R15: 0000000000022000 irq event stamp: 7511 hardirqs last enabled at (7519): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (7528): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (7132): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (7115): [] __irq_exit_rcu+0xc4/0x100 ---[ end trace 0000000000000000 ]--- capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO ------------[ cut here ]------------ percpu ref (blk_queue_usage_counter_release) <= 0 (-131391481920223) after switching to atomic WARNING: lib/percpu-refcount.c:197 at percpu_ref_switch_to_atomic_rcu+0x3cc/0x480, CPU#0: syz-executor.2/4104 Modules linked in: CPU: 0 UID: 0 PID: 4104 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:percpu_ref_switch_to_atomic_rcu+0x3cc/0x480 Code: 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 9e 00 00 00 49 8b 75 e8 48 c7 c7 80 97 e2 84 e8 75 c5 e9 fe 90 <0f> 0b 90 90 e9 2b ff ff ff e8 f6 de 5f ff e9 9e fe ff ff e8 7c df kmemleak: Found object by alias at 0x607f1a6395c4 CPU: 1 UID: 0 PID: 4070 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xca/0x120 __lookup_object+0x94/0xb0 delete_object_full+0x27/0x70 free_percpu+0x30/0x1160 futex_hash_free+0x38/0xc0 mmput+0x2d3/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 __x64_sys_exit_group+0x3e/0x50 x64_sys_call+0x18c5/0x18d0 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe2962e7b19 Code: Unable to access opcode bytes at 0x7fe2962e7aef. RSP: 002b:00007ffc17aeba98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fe2962e7b19 RDX: 00007fe29629a72b RSI: ffffffffffffffbc RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000001b2d42b0dc R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc17aebb80 kmemleak: Object (percpu) 0x607f1a6395c0 (size 8): kmemleak: comm "syz-executor.2", pid 4104, jiffies 4294832150 kmemleak: min_count = 1 kmemleak: count = 0 kmemleak: flags = 0x21 kmemleak: checksum = 0 kmemleak: backtrace: pcpu_alloc_noprof+0x87a/0x1170 perf_trace_event_init+0x366/0xa10 perf_trace_init+0x1a4/0x2f0 perf_tp_event_init+0xa6/0x120 perf_try_init_event+0x140/0x9f0 perf_event_alloc.part.0+0x118e/0x45f0 __do_sys_perf_event_open+0x719/0x2c20 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f kmemleak: Found object by alias at 0x607f1a6393bc CPU: 1 UID: 0 PID: 4085 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xca/0x120 __lookup_object+0x94/0xb0 delete_object_full+0x27/0x70 free_percpu+0x30/0x1160 futex_hash_free+0x38/0xc0 mmput+0x2d3/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 get_signal+0x2315/0x2340 arch_do_signal_or_restart+0x80/0x790 exit_to_user_mode_loop+0x8b/0x110 do_syscall_64+0x2f7/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb176d39b19 Code: Unable to access opcode bytes at 0x7fb176d39aef. RSP: 002b:00007fb1742af218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007fb176e4cf68 RCX: 00007fb176d39b19 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb176e4cf68 RBP: 00007fb176e4cf60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb176e4cf6c R13: 00007fff7b47591f R14: 00007fb1742af300 R15: 0000000000022000 kmemleak: Object (percpu) 0x607f1a6393b8 (size 8): kmemleak: comm "syz-executor.2", pid 4104, jiffies 4294832148 kmemleak: min_count = 1 kmemleak: count = 0 kmemleak: flags = 0x21 kmemleak: checksum = 0 kmemleak: backtrace: pcpu_alloc_noprof+0x87a/0x1170 perf_trace_event_init+0x366/0xa10 perf_trace_init+0x1a4/0x2f0 perf_tp_event_init+0xa6/0x120 perf_try_init_event+0x140/0x9f0 perf_event_alloc.part.0+0x118e/0x45f0 __do_sys_perf_event_open+0x719/0x2c20 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RSP: 0018:ffff88806ce08e20 EFLAGS: 00010286 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8139de70 RDX: ffff888015c35280 RSI: ffffffff8139de7e RDI: 0000000000000001 RBP: 7fff88800964c520 R08: 0000000000000001 R09: ffffed100d9c4801 R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800df2f980 R13: ffff88800df2f9a0 R14: 0000000000000002 R15: 0000000000000003 FS: 00007f6025fb7700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020002200 CR3: 000000000cfde000 CR4: 0000000000350ef0 Call Trace: rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:lock_acquire+0x5b/0x2f0 Code: 30 31 c0 66 90 65 8b 05 e7 53 32 06 89 c0 48 0f a3 05 f9 cf f1 04 0f 82 3a 01 00 00 8b 35 d1 db f1 04 85 f6 0f 85 84 00 00 00 <48> 8b 44 24 30 65 48 2b 05 90 53 32 06 0f 85 6e 02 00 00 48 83 c4 RSP: 0018:ffff888048ddfb40 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 0000000000000000 RCX: fb8c58839c9a7c20 RDX: 0000000000aac977 RSI: 00000000f120cff3 RDI: 00000000452db573 RBP: ffffffff85c1c760 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200 kernfs_root+0x34/0x2a0 __kernfs_remove+0x36a/0x790 kernfs_remove_by_name_ns+0x69/0x100 remove_files+0x96/0x1c0 sysfs_remove_group+0x83/0x100 sysfs_remove_groups+0x60/0xa0 __kobject_del+0x8b/0x320 kobject_del+0x40/0x60 blk_unregister_queue+0x13b/0x2f0 __del_gendisk+0x297/0xb70 del_gendisk+0x142/0x1f0 loop_control_ioctl+0x459/0x640 __x64_sys_ioctl+0x18f/0x210 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f6028a41b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f6025fb7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f6028b54f60 RCX: 00007f6028a41b19 RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 RBP: 00007f6028a9bf6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc0df3c2ff R14: 00007f6025fb7300 R15: 0000000000022000 irq event stamp: 3206 hardirqs last enabled at (3218): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (3229): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (1034): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (1805): [] __irq_exit_rcu+0xc4/0x100 ---[ end trace 0000000000000000 ]--- percpu_ref_switch_to_atomic_rcu: percpu_ref_switch_to_atomic_rcu(): percpu_ref underflow slab kmalloc-64 start ffff88800df2f980 pointer offset 0 size 64 Bluetooth: hci0: Opcode 0x0c03 failed: -4 Bluetooth: hci0: Opcode 0x0c03 failed: -4 ---------------- Code disassembly (best guess): 0: 30 31 xor %dh,(%rcx) 2: c0 66 90 65 shlb $0x65,-0x70(%rsi) 6: 8b 05 e7 53 32 06 mov 0x63253e7(%rip),%eax # 0x63253f3 c: 89 c0 mov %eax,%eax e: 48 0f a3 05 f9 cf f1 bt %rax,0x4f1cff9(%rip) # 0x4f1d00f 15: 04 16: 0f 82 3a 01 00 00 jb 0x156 1c: 8b 35 d1 db f1 04 mov 0x4f1dbd1(%rip),%esi # 0x4f1dbf3 22: 85 f6 test %esi,%esi 24: 0f 85 84 00 00 00 jne 0xae * 2a: 48 8b 44 24 30 mov 0x30(%rsp),%rax <-- trapping instruction 2f: 65 48 2b 05 90 53 32 sub %gs:0x6325390(%rip),%rax # 0x63253c7 36: 06 37: 0f 85 6e 02 00 00 jne 0x2ab 3d: 48 rex.W 3e: 83 .byte 0x83 3f: c4 .byte 0xc4