syzbot

INFO: task syz.0.17:4447 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.17        state:D stack:23552 pid:4447  ppid:4390   flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0x10ec/0x40b0 kernel/sched/core.c:6561
 schedule+0xb9/0x180 kernel/sched/core.c:6637
 perf_pending_task_sync kernel/events/core.c:5031 [inline]
 _free_event+0x171/0x10a0 kernel/events/core.c:5037
 put_event kernel/events/core.c:5162 [inline]
 perf_event_release_kernel+0x832/0x8c0 kernel/events/core.c:5287
 perf_release+0x37/0x40 kernel/events/core.c:5297
 __fput+0x22c/0x920 fs/file_table.c:320
 task_work_run+0x1ca/0x250 kernel/task_work.c:203
 get_signal+0x11a6/0x1350 kernel/signal.c:2648
 arch_do_signal_or_restart+0xb7/0x1240 arch/x86/kernel/signal.c:871
 exit_to_user_mode_loop+0x70/0x110 kernel/entry/common.c:174
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:210
 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:303
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:87
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7ff57958f6c9
RSP: 002b:00007ff57a4aafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
RAX: fffffffffffffffc RBX: 00007ff5797e5fa0 RCX: 00007ff57958f6c9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000
RBP: 00007ff579611f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ff5797e6038 R14: 00007ff5797e5fa0 R15: 00007ffc818cd188
 </TASK>
INFO: task syz.3.22:4558 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.22        state:D stack:23456 pid:4558  ppid:4401   flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0x10ec/0x40b0 kernel/sched/core.c:6561
 schedule+0xb9/0x180 kernel/sched/core.c:6637
 perf_pending_task_sync kernel/events/core.c:5031 [inline]
 _free_event+0x171/0x10a0 kernel/events/core.c:5037
 put_event kernel/events/core.c:5162 [inline]
 perf_event_release_kernel+0x832/0x8c0 kernel/events/core.c:5287
 perf_release+0x37/0x40 kernel/events/core.c:5297
 __fput+0x22c/0x920 fs/file_table.c:320
 task_work_run+0x1ca/0x250 kernel/task_work.c:203
 get_signal+0x11a6/0x1350 kernel/signal.c:2648
 arch_do_signal_or_restart+0xb7/0x1240 arch/x86/kernel/signal.c:871
 exit_to_user_mode_loop+0x70/0x110 kernel/entry/common.c:174
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:210
 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:303
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:87
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f444c98f6c9
RSP: 002b:00007f444d83efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
RAX: fffffffffffffffc RBX: 00007f444cbe6090 RCX: 00007f444c98f6c9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000
RBP: 00007f444ca11f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007f444cbe6128 R14: 00007f444cbe6090 R15: 00007ffec60731f8
 </TASK>
INFO: task syz.1.23:4560 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.23        state:D stack:24192 pid:4560  ppid:4394   flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0x10ec/0x40b0 kernel/sched/core.c:6561
 schedule+0xb9/0x180 kernel/sched/core.c:6637
 perf_pending_task_sync kernel/events/core.c:5031 [inline]
 _free_event+0x171/0x10a0 kernel/events/core.c:5037
 put_event kernel/events/core.c:5162 [inline]
 perf_event_release_kernel+0x832/0x8c0 kernel/events/core.c:5287
 perf_release+0x37/0x40 kernel/events/core.c:5297
 __fput+0x22c/0x920 fs/file_table.c:320
 task_work_run+0x1ca/0x250 kernel/task_work.c:203
 get_signal+0x11a6/0x1350 kernel/signal.c:2648
 arch_do_signal_or_restart+0xb7/0x1240 arch/x86/kernel/signal.c:871
 exit_to_user_mode_loop+0x70/0x110 kernel/entry/common.c:174
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:210
 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:303
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:87
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f7dfd58f6c9
RSP: 002b:00007f7dfe48cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
RAX: fffffffffffffff4 RBX: 00007f7dfd7e5fa0 RCX: 00007f7dfd58f6c9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000
RBP: 00007f7dfd611f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007f7dfd7e6038 R14: 00007f7dfd7e5fa0 R15: 00007ffc39629b78
 </TASK>

Showing all locks held in the system:
3 locks held by kworker/0:0/7:
 #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 kernel/workqueue.c:2267
 #1: ffffc900000c7d00 (fqdir_free_work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 kernel/workqueue.c:2267
 #2: ffffffff8cb30840 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x600 kernel/rcu/tree.c:4023
1 lock held by rcu_tasks_kthre/12:
 #0: ffffffff8cb2b630 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 kernel/rcu/tasks.h:517
1 lock held by rcu_tasks_trace/13:
 #0: ffffffff8cb2be50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 kernel/rcu/tasks.h:517
1 lock held by khungtaskd/28:
 #0: ffffffff8cb2aca0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:350 [inline]
 #0: ffffffff8cb2aca0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:791 [inline]
 #0: ffffffff8cb2aca0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 kernel/locking/lockdep.c:6513
4 locks held by kworker/u4:3/46:
 #0: ffff888017616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 kernel/workqueue.c:2267
 #1: ffffc90000b77d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 kernel/workqueue.c:2267
 #2: ffffffff8dd34a10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x132/0xb80 net/core/net_namespace.c:594
 #3: ffffffff8dd416e8 (rtnl_mutex){+.+.}-{3:3}, at: fib_net_exit_batch+0x1c/0x90 net/ipv4/fib_frontend.c:1652
3 locks held by kworker/u4:4/56:
 #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 kernel/workqueue.c:2267
 #1: ffffc90001577d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 kernel/workqueue.c:2267
 #2: ffffffff8dd416e8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 net/core/link_watch.c:263
2 locks held by getty/4025:
 #0: ffff88814d45d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:244
 #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 drivers/tty/n_tty.c:2198
2 locks held by kworker/1:9/4366:
 #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 kernel/workqueue.c:2267
 #1: ffffc90003257d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 kernel/workqueue.c:2267
3 locks held by kworker/1:13/4371:
 #0: ffff88814d337938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 kernel/workqueue.c:2267
 #1: ffffc900032c7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 kernel/workqueue.c:2267
 #2: ffffffff8dd416e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x14d0 net/ipv6/addrconf.c:4131
3 locks held by kworker/0:7/4495:
 #0: ffff88814d337938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 kernel/workqueue.c:2267
 #1: ffffc900036e7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 kernel/workqueue.c:2267
 #2: ffffffff8dd416e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x14d0 net/ipv6/addrconf.c:4131
1 lock held by syz-executor/4959:
 #0: ffffffff8cb30978 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:291 [inline]
 #0: ffffffff8cb30978 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x455/0x830 kernel/rcu/tree_exp.h:962
1 lock held by syz-executor/4974:
 #0: ffffffff8dd416e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffffffff8dd416e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 net/core/rtnetlink.c:6147
1 lock held by syz-executor/4978:
 #0: ffffffff8dd416e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffffffff8dd416e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 net/core/rtnetlink.c:6147
3 locks held by syz.9.50/5061:
 #0: ffffffff8dd34a10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x32e/0x5b0 net/core/net_namespace.c:504
 #1: ffffffff8dd416e8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_delete_nets+0xc8/0x360 net/ipv4/ip_tunnel.c:1152
 #2: ffffffff8cb30978 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:323 [inline]
 #2: ffffffff8cb30978 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x346/0x830 kernel/rcu/tree_exp.h:962
2 locks held by syz.7.56/5092:
 #0: ffffffff8dd34a10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x32e/0x5b0 net/core/net_namespace.c:504
 #1: ffffffff8dd416e8 (rtnl_mutex){+.+.}-{3:3}, at: tc_action_net_exit include/net/act_api.h:171 [inline]
 #1: ffffffff8dd416e8 (rtnl_mutex){+.+.}-{3:3}, at: bpf_exit_net+0x2c/0x100 net/sched/act_bpf.c:412
1 lock held by syz-executor/5102:
 #0: ffffffff8dd416e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffffffff8dd416e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 net/core/rtnetlink.c:6147
1 lock held by syz-executor/5106:
 #0: ffffffff8dd416e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffffffff8dd416e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 net/core/rtnetlink.c:6147

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
Call Trace:
 <TASK>
 dump_stack_lvl+0x168/0x22e lib/dump_stack.c:106
 nmi_cpu_backtrace+0x3f4/0x470 lib/nmi_backtrace.c:111
 nmi_trigger_cpumask_backtrace+0x1d4/0x450 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline]
 watchdog+0xeee/0xf30 kernel/hung_task.c:377
 kthread+0x29d/0x330 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 5061 Comm: syz.9.50 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
RIP: 0010:bytes_is_nonzero mm/kasan/generic.c:84 [inline]
RIP: 0010:memory_is_nonzero mm/kasan/generic.c:102 [inline]
RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:128 [inline]
RIP: 0010:memory_is_poisoned mm/kasan/generic.c:159 [inline]
RIP: 0010:check_region_inline mm/kasan/generic.c:180 [inline]
RIP: 0010:kasan_check_range+0x68/0x290 mm/kasan/generic.c:189
Code: c1 eb 03 49 b8 00 00 00 00 00 fc ff df 4f 8d 0c 03 48 8d 5c 37 ff 48 c1 eb 03 4e 8d 14 3b 4d 89 d6 4d 29 ce 49 83 fe 10 7f 26 <4d> 85 f6 0f 84 39 01 00 00 48 f7 d3 4c 01 db 41 80 39 00 0f 85 c1
RSP: 0018:ffffc900001e0120 EFLAGS: 00000083
RAX: 0000000000000001 RBX: 1ffffffff215c449 RCX: ffffffff816302a2
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90ae2248
RBP: ffffc900001e0390 R08: dffffc0000000000 R09: fffffbfff215c449
R10: fffffbfff215c44a R11: 1ffffffff215c449 R12: ffff88805ab75940
R13: 0000000000000008 R14: 0000000000000001 R15: dffffc0000000001
FS:  00007fd7fd7a46c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f83d8865cf0 CR3: 000000007e80d000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 instrument_atomic_read include/linux/instrumented.h:72 [inline]
 _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
 hlock_class kernel/locking/lockdep.c:228 [inline]
 check_wait_context kernel/locking/lockdep.c:4723 [inline]
 __lock_acquire+0x532/0x7c50 kernel/locking/lockdep.c:4999
 lock_acquire+0x1b4/0x490 kernel/locking/lockdep.c:5662
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
 _raw_spin_lock_irqsave+0xa4/0xf0 kernel/locking/spinlock.c:162
 hrtimer_interrupt+0xf8/0x9c0 kernel/time/hrtimer.c:1854
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1107 [inline]
 __sysvec_apic_timer_interrupt+0x153/0x5a0 arch/x86/kernel/apic/apic.c:1124
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1118 [inline]
 sysvec_apic_timer_interrupt+0x4d/0xc0 arch/x86/kernel/apic/apic.c:1118
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:__rhashtable_lookup include/linux/rhashtable.h:594 [inline]
RIP: 0010:rhltable_lookup+0x116/0x790 include/linux/rhashtable.h:688
Code: df e8 be ea 42 f8 4c 8b a4 24 c0 00 00 00 4c 89 b4 24 f0 00 00 00 4c 89 bc 24 f8 00 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 f7 e8 90 ea 42 f8 49 8b 06 48 89 44 24 10 e8 03 bd 89
RSP: 0018:ffffc900001e07a0 EFLAGS: 00000246
RAX: 1ffff1100fd6132c RBX: ffffc900001e0860 RCX: ffff88805ab75940
RDX: 0000000000000100 RSI: ffff888050b9045a RDI: ffff88807eb09960
RBP: ffffc900001e0908 R08: 0001000000000000 R09: 0010000000060003
R10: fffffbfff215c449 R11: 1ffffffff215c448 R12: 0000000000000000
R13: dffffc0000000000 R14: ffff88807eb09960 R15: ffff888050b9045a
 link_sta_info_hash_lookup net/mac80211/sta_info.c:249 [inline]
 link_sta_info_get_bss+0x126/0x340 net/mac80211/sta_info.c:261
 ieee80211_rx_for_interface+0x74/0x3c0 net/mac80211/rx.c:4992
 __ieee80211_rx_handle_packet net/mac80211/rx.c:5180 [inline]
 ieee80211_rx_list+0x24d8/0x2d00 net/mac80211/rx.c:5306
 ieee80211_rx_napi+0x1a6/0x3c0 net/mac80211/rx.c:5329
 ieee80211_rx include/net/mac80211.h:4846 [inline]
 ieee80211_handle_queued_frames+0x105/0x1b0 net/mac80211/main.c:317
 tasklet_action_common+0x298/0x400 kernel/softirq.c:826
 handle_softirqs+0x2a1/0x920 kernel/softirq.c:596
 __do_softirq kernel/softirq.c:630 [inline]
 invoke_softirq kernel/softirq.c:470 [inline]
 __irq_exit_rcu+0x12f/0x220 kernel/softirq.c:679
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:691
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1118 [inline]
 sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1118
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:lock_acquire+0x20f/0x490 kernel/locking/lockdep.c:5666
Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b
RSP: 0018:ffffc9000517f1e0 EFLAGS: 00000206
RAX: 0000000000000001 RBX: 0000000000000000 RCX: c6fe64e78543f700
RDX: 0000000000000000 RSI: ffffffff8a8c1700 RDI: ffffffff8adef760
RBP: ffffc9000517f2f8 R08: dffffc0000000000 R09: fffffbfff215c44a
R10: fffffbfff215c44a R11: 1ffffffff215c449 R12: 0000000000000001
R13: 1ffff92000a2fe48 R14: 0000000000000246 R15: dffffc0000000000
 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline]
 _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:154
 spin_lock include/linux/spinlock.h:351 [inline]
 start_unregistering fs/proc/proc_sysctl.c:317 [inline]
 drop_sysctl_table+0x17b/0x430 fs/proc/proc_sysctl.c:1727
 unregister_sysctl_table+0x85/0x130 fs/proc/proc_sysctl.c:1769
 neigh_sysctl_unregister+0x74/0x90 net/core/neighbour.c:3877
 devinet_sysctl_unregister net/ipv4/devinet.c:2664 [inline]
 inetdev_destroy net/ipv4/devinet.c:329 [inline]
 inetdev_event+0x733/0x1410 net/ipv4/devinet.c:1615
 notifier_call_chain kernel/notifier.c:87 [inline]
 raw_notifier_call_chain+0xcb/0x160 kernel/notifier.c:455
 call_netdevice_notifiers_extack net/core/dev.c:2039 [inline]
 call_netdevice_notifiers net/core/dev.c:2053 [inline]
 unregister_netdevice_many+0xfdc/0x1840 net/core/dev.c:10990
 ip_tunnel_delete_nets+0x318/0x360 net/ipv4/ip_tunnel.c:1157
 ops_exit_list net/core/net_namespace.c:177 [inline]
 setup_net+0x972/0xbb0 net/core/net_namespace.c:368
 copy_net_ns+0x348/0x5b0 net/core/net_namespace.c:508
 create_new_namespaces+0x3d3/0x6f0 kernel/nsproxy.c:110
 copy_namespaces+0x3b0/0x410 kernel/nsproxy.c:178
 copy_process+0x199c/0x4020 kernel/fork.c:2354
 kernel_clone+0x225/0x8b0 kernel/fork.c:2757
 __do_sys_clone kernel/fork.c:2898 [inline]
 __se_sys_clone kernel/fork.c:2882 [inline]
 __x64_sys_clone+0x17c/0x1d0 kernel/fork.c:2882
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fd7fc98f6c9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fd7fd7a3fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007fd7fcbe5fa0 RCX: 00007fd7fc98f6c9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000
RBP: 00007fd7fca11f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007fd7fcbe6038 R14: 00007fd7fcbe5fa0 R15: 00007ffce52d9a78
 </TASK>