__ip_tunnel_create+0x52b/0x670 net/ipv4/ip_tunnel.c:268
 ip_tunnel_init_net+0x230/0x780 net/ipv4/ip_tunnel.c:1147
 ops_init+0x1e2/0x5f0 net/core/net_namespace.c:137
 setup_net+0x118/0x3a0 net/core/net_namespace.c:446
 copy_net_ns+0x46f/0x7c0 net/core/net_namespace.c:579
 create_new_namespaces+0x3ea/0xac0 kernel/nsproxy.c:130
 unshare_nsproxy_namespaces+0xc3/0x1f0 kernel/nsproxy.c:226
------------[ cut here ]------------
kernel BUG at ./include/linux/page-flags.h:351!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 0 UID: 0 PID: 8221 Comm: syz.1.620 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
RIP: 0010:const_folio_flags include/linux/page-flags.h:351 [inline]
RIP: 0010:folio_test_idle include/linux/page-flags.h:673 [inline]
RIP: 0010:set_ps_flags+0x321/0x390 mm/util.c:1219
Code: f6 0f 84 9e fe ff ff e8 ad 66 b9 ff 49 83 ed 01 e9 98 fe ff ff e8 9f 66 b9 ff 48 c7 c6 40 64 be 8b 48 89 df e8 90 82 05 00 90 <0f> 0b e8 98 02 25 00 e9 0e fd ff ff e8 be 02 25 00 e9 78 fd ff ff
RSP: 0018:ffffc90004817900 EFLAGS: 00010246
RAX: 0000000000080000 RBX: ffffea0001db2940 RCX: ffffc90005cc3000
RDX: 0000000000080000 RSI: ffffffff82546008 RDI: ffff888031e284c4
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900048179d0
R13: 0000000000000000 R14: ffffea0001db2974 R15: ffffc900048179d0
FS:  00007f9e985986c0(0000) GS:ffff888124340000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055555f0eea28 CR3: 000000007b6f0000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 snapshot_page+0x49a/0x660 mm/util.c:1255
 get_kpage_count+0x94/0x240 fs/proc/page.c:50
 kpage_read.isra.0+0x1b8/0x2b0 fs/proc/page.c:93
 pde_read fs/proc/inode.c:308 [inline]
 proc_reg_read+0x120/0x330 fs/proc/inode.c:318
 do_loop_readv_writev fs/read_write.c:849 [inline]
 do_loop_readv_writev fs/read_write.c:837 [inline]
 vfs_readv+0x5d8/0x8d0 fs/read_write.c:1022
 do_readv+0x13e/0x340 fs/read_write.c:1082
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9e9779c819
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f9e98598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
RAX: ffffffffffffffda RBX: 00007f9e97a15fa0 RCX: 00007f9e9779c819
RDX: 0000000100000007 RSI: 00002000000001c0 RDI: 0000000000000003
RBP: 00007f9e97832c91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f9e97a16038 R14: 00007f9e97a15fa0 R15: 00007ffcbb3718e8
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:const_folio_flags include/linux/page-flags.h:351 [inline]
RIP: 0010:folio_test_idle include/linux/page-flags.h:673 [inline]
RIP: 0010:set_ps_flags+0x321/0x390 mm/util.c:1219
Code: f6 0f 84 9e fe ff ff e8 ad 66 b9 ff 49 83 ed 01 e9 98 fe ff ff e8 9f 66 b9 ff 48 c7 c6 40 64 be 8b 48 89 df e8 90 82 05 00 90 <0f> 0b e8 98 02 25 00 e9 0e fd ff ff e8 be 02 25 00 e9 78 fd ff ff
RSP: 0018:ffffc90004817900 EFLAGS: 00010246
RAX: 0000000000080000 RBX: ffffea0001db2940 RCX: ffffc90005cc3000
RDX: 0000000000080000 RSI: ffffffff82546008 RDI: ffff888031e284c4
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900048179d0
R13: 0000000000000000 R14: ffffea0001db2974 R15: ffffc900048179d0
FS:  00007f9e985986c0(0000) GS:ffff888124340000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f52b69e92f8 CR3: 000000007b6f0000 CR4: 00000000003526f0