------------[ cut here ]------------ WARNING: ./include/linux/ns_common.h:255 at __ns_ref_put include/linux/ns_common.h:255 [inline], CPU#0: syz.1.942/8145 WARNING: ./include/linux/ns_common.h:255 at put_uts_ns include/linux/uts_namespace.h:37 [inline], CPU#0: syz.1.942/8145 WARNING: ./include/linux/ns_common.h:255 at free_nsproxy+0x415/0x560 kernel/nsproxy.c:193, CPU#0: syz.1.942/8145 Modules linked in: CPU: 0 UID: 0 PID: 8145 Comm: syz.1.942 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 RIP: 0010:__ns_ref_put include/linux/ns_common.h:255 [inline] RIP: 0010:put_uts_ns include/linux/uts_namespace.h:37 [inline] RIP: 0010:free_nsproxy+0x415/0x560 kernel/nsproxy.c:193 Code: 85 ed 0f 8e be 00 00 00 e8 a8 1c 33 00 48 8b 3d 71 34 31 11 48 89 de 5b 41 5c 41 5e 41 5f 5d e9 41 e7 8d 00 e8 8c 1c 33 00 90 <0f> 0b 90 e9 ba fc ff ff e8 7e 1c 33 00 4c 89 ff be 03 00 00 00 e8 RSP: 0018:ffffc9000b2f7ab0 EFLAGS: 00010293 RAX: ffffffff818e4004 RBX: ffff88805c807270 RCX: ffff888027650000 RDX: 0000000000000000 RSI: 00000000fffffffe RDI: 0000000000000000 RBP: 00000000fffffffe R08: ffff8880252bc52b R09: 1ffff11004a578a5 R10: dffffc0000000000 R11: ffffed1004a578a6 R12: dffffc0000000000 R13: 0000000000000009 R14: ffff8880252bc2d8 R15: ffff8880252bc528 FS: 0000000000000000(0000) GS:ffff888125a92000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffd07c01ca0 CR3: 000000002f84a000 CR4: 00000000003526f0 DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: do_exit+0x6b8/0x2300 kernel/exit.c:969 do_group_exit+0x21c/0x2d0 kernel/exit.c:1111 get_signal+0x1285/0x1340 kernel/signal.c:3034 arch_do_signal_or_restart+0xa0/0x790 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop+0x72/0x130 kernel/entry/common.c:40 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline] do_syscall_64+0x2cd/0xfa0 arch/x86/entry/syscall_64.c:100