------------[ cut here ]------------
WARNING: fs/namespace.c:1375 at cleanup_mnt+0x33f/0x430, CPU#0: syz-executor.7/3962
Modules linked in:
CPU: 0 UID: 0 PID: 3962 Comm: syz-executor.7 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:cleanup_mnt+0x33f/0x430
Code: c7 a0 45 d1 85 e8 01 7c fa 02 49 8d 7d 40 5b 48 c7 c6 10 e2 be 81 5d 41 5c 41 5d 41 5e 41 5f e9 57 b3 9c ff e8 82 46 b4 ff 90 <0f> 0b 90 e9 e6 fc ff ff e8 74 46 b4 ff 4c 89 ef e8 6c d7 06 00 e9
RSP: 0018:ffff88801800faf8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81bf9de5
RDX: ffff888016f4b700 RSI: ffffffff81bfa0fe RDI: 0000000000000005
RBP: ffff8880136f5700 R08: 0000000000000000 R09: 0000000000000001
R10: 0000000000000001 R11: 0000000000000000 R12: ffff888016f4bfd8
R13: ffff8880136f5340 R14: 0000000000000001 R15: ffff8880136f5380
FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffb8 CR3: 000000000ae2b000 CR4: 0000000000350ef0
Call Trace:
task_work_run+0x172/0x280
do_exit+0x846/0x2970
do_group_exit+0xd3/0x2a0
get_signal+0x2315/0x2340
arch_do_signal_or_restart+0x80/0x790
irqentry_exit_to_user_mode+0x106/0x1c0
exc_page_fault+0xd9/0x180
asm_exc_page_fault+0x26/0x30
RIP: 0033:0x7f0989095436
Code: Unable to access opcode bytes at 0x7f098909540c.
RSP: 002b:00007f09866641a0 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007f0989201f60 RCX: 00007f0989201f60
RDX: 0000000000000000 RSI: 00007f098909542e RDI: 00000000200002c0
RBP: 00007f0989148f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd810d76cf R14: 00007f0986664300 R15: 0000000000022000
irq event stamp: 587
hardirqs last enabled at (595): [] __up_console_sem+0x78/0x80
hardirqs last disabled at (604): [] __up_console_sem+0x5d/0x80
softirqs last enabled at (212): [] handle_softirqs+0x50c/0x770
softirqs last disabled at (205): [] __irq_exit_rcu+0xc4/0x100
---[ end trace 0000000000000000 ]---