------------[ cut here ]------------ WARNING: fs/namespace.c:1434 at mntput_no_expire+0x78e/0xbe0, CPU#0: syz-executor.5/16649 Modules linked in: CPU: 0 UID: 0 PID: 16649 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:mntput_no_expire+0x78e/0xbe0 Code: 05 d6 30 81 04 01 e8 71 df 91 ff e9 41 fc ff ff e8 27 47 b4 ff 31 ff 44 89 ee e8 4d 42 b4 ff 45 85 ed 79 09 e8 13 47 b4 ff 90 <0f> 0b 90 e8 0a 47 b4 ff e8 b5 2d fc 02 31 ff 89 c5 89 c6 e8 2a 42 RSP: 0018:ffff88801c18f878 EFLAGS: 00010246 RAX: 0000000000040000 RBX: 1ffff11003831f14 RCX: ffffc900044ac000 RDX: 0000000000040000 RSI: ffffffff81bfaf9d RDI: 0000000000000005 RBP: ffff888016b096c0 R08: 0000000000000001 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000001 R12: ffff88801c18f8e0 R13: 00000000ffffffff R14: dead000000000100 R15: ffff888016b096c0 FS: 00007f8a0dc8f700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f1344219620 CR3: 000000001c3b7000 CR4: 0000000000350ef0 Call Trace: namespace_unlock+0x57d/0x810 put_mnt_ns+0xf5/0x120 free_nsproxy+0x3a/0x400 switch_task_namespaces+0xe2/0x100 copy_process+0x26c8/0x73c0 kernel_clone+0xea/0x7f0 __do_sys_clone3+0x1f5/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8a10719b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f8a0dc8f188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 RAX: ffffffffffffffda RBX: 00007f8a1082cf60 RCX: 00007f8a10719b19 RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000ec0 RBP: 00007f8a10773f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc64997b2f R14: 00007f8a0dc8f300 R15: 0000000000022000 irq event stamp: 3699 hardirqs last enabled at (3707): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (3716): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (3462): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (3035): [] __irq_exit_rcu+0xc4/0x100 ---[ end trace 0000000000000000 ]--- kmemleak: Found object by alias at 0x607f1a63e40c CPU: 1 UID: 0 PID: 16666 Comm: syz-executor.6 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xca/0x120 __lookup_object+0x94/0xb0 delete_object_full+0x27/0x70 free_percpu+0x30/0x1160 futex_hash_free+0x38/0xc0 mmput+0x2d3/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 get_signal+0x2315/0x2340 arch_do_signal_or_restart+0x80/0x790 exit_to_user_mode_loop+0x8b/0x110 do_syscall_64+0x2f7/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f185c673b19 Code: Unable to access opcode bytes at 0x7f185c673aef. RSP: 002b:00007f1859bc8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f185c787028 RCX: 00007f185c673b19 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f185c787028 RBP: 00007f185c787020 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f185c78702c R13: 00007fff4dde0bef R14: 00007f1859bc8300 R15: 0000000000022000 kmemleak: Object (percpu) 0x607f1a63e408 (size 8): kmemleak: comm "syz-executor.5", pid 16649, jiffies 4296992116 kmemleak: min_count = 1 kmemleak: count = 0 kmemleak: flags = 0x21 kmemleak: checksum = 0 kmemleak: backtrace: pcpu_alloc_noprof+0x87a/0x1170 alloc_vfsmnt+0x135/0x6e0 clone_mnt+0x6c/0xb70 copy_tree+0x34b/0xaf0 copy_mnt_ns+0x1ab/0xab0 create_new_namespaces+0xd6/0xab0 copy_namespaces+0x45c/0x580 copy_process+0x2649/0x73c0 kernel_clone+0xea/0x7f0 __do_sys_clone3+0x1f5/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f ------------[ cut here ]------------ WARNING: fs/namespace.c:1434 at mntput_no_expire+0x78e/0xbe0, CPU#1: syz-executor.5/16702 Modules linked in: CPU: 1 UID: 0 PID: 16702 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:mntput_no_expire+0x78e/0xbe0 Code: 05 d6 30 81 04 01 e8 71 df 91 ff e9 41 fc ff ff e8 27 47 b4 ff 31 ff 44 89 ee e8 4d 42 b4 ff 45 85 ed 79 09 e8 13 47 b4 ff 90 <0f> 0b 90 e8 0a 47 b4 ff e8 b5 2d fc 02 31 ff 89 c5 89 c6 e8 2a 42 RSP: 0018:ffff88803ecd7878 EFLAGS: 00010246 RAX: 0000000000040000 RBX: 1ffff11007d9af14 RCX: ffffc900044ac000 RDX: 0000000000040000 RSI: ffffffff81bfaf9d RDI: 0000000000000005 RBP: ffff888016293500 R08: 0000000000000001 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000001 R12: ffff88803ecd78e0 R13: 00000000ffffffff R14: dead000000000100 R15: ffff888016293500 FS: 00007f8a0dc8f700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555557d7e708 CR3: 000000001d035000 CR4: 0000000000350ef0 Call Trace: namespace_unlock+0x57d/0x810 put_mnt_ns+0xf5/0x120 free_nsproxy+0x3a/0x400 switch_task_namespaces+0xe2/0x100 copy_process+0x26c8/0x73c0 kernel_clone+0xea/0x7f0 __do_sys_clone3+0x1f5/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8a10719b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f8a0dc8f188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 RAX: ffffffffffffffda RBX: 00007f8a1082cf60 RCX: 00007f8a10719b19 RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000ec0 RBP: 00007f8a10773f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc64997b2f R14: 00007f8a0dc8f300 R15: 0000000000022000 irq event stamp: 2933 hardirqs last enabled at (2941): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (2950): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (2418): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (2413): [] __irq_exit_rcu+0xc4/0x100 ---[ end trace 0000000000000000 ]--- kmemleak: Found object by alias at 0x607f1a63e40c CPU: 1 UID: 0 PID: 16696 Comm: iou-sqp-16695 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xca/0x120 __lookup_object+0x94/0xb0 delete_object_full+0x27/0x70 free_percpu+0x30/0x1160 futex_hash_free+0x38/0xc0 mmput+0x2d3/0x390 do_exit+0x79d/0x2970 io_sq_thread+0xfc9/0x1b00 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 kmemleak: Object (percpu) 0x607f1a63e408 (size 8): kmemleak: comm "syz-executor.5", pid 16702, jiffies 4296992613 kmemleak: min_count = 1 kmemleak: count = 0 kmemleak: flags = 0x21 kmemleak: checksum = 0 kmemleak: backtrace: pcpu_alloc_noprof+0x87a/0x1170 alloc_vfsmnt+0x135/0x6e0 clone_mnt+0x6c/0xb70 copy_tree+0x34b/0xaf0 copy_mnt_ns+0x1ab/0xab0 create_new_namespaces+0xd6/0xab0 copy_namespaces+0x45c/0x580 copy_process+0x2649/0x73c0 kernel_clone+0xea/0x7f0 __do_sys_clone3+0x1f5/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f