================================================================== BUG: KASAN: user-memory-access in instrument_atomic_read_write include/linux/instrumented.h:101 [inline] BUG: KASAN: user-memory-access in atomic_dec_return include/linux/atomic/atomic-instrumented.h:251 [inline] BUG: KASAN: user-memory-access in dst_release+0x1f/0xe0 net/core/dst.c:172 Write of size 4 at addr 000000010000003f by task kworker/u4:3/158 CPU: 0 PID: 158 Comm: kworker/u4:3 Not tainted 5.15.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: netns cleanup_net Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1dc/0x2d8 lib/dump_stack.c:106 __kasan_report mm/kasan/report.c:446 [inline] kasan_report+0x190/0x1f0 mm/kasan/report.c:459 kasan_check_range+0x2b5/0x2f0 mm/kasan/generic.c:189 instrument_atomic_read_write include/linux/instrumented.h:101 [inline] atomic_dec_return include/linux/atomic/atomic-instrumented.h:251 [inline] dst_release+0x1f/0xe0 net/core/dst.c:172 dst_cache_destroy+0x107/0x1e0 net/core/dst_cache.c:160 ip_tunnel_dev_free+0x21/0x50 net/ipv4/ip_tunnel.c:1011 netdev_run_todo+0xaa0/0xcf0 net/core/dev.c:10593 ip_tunnel_delete_nets+0x32a/0x370 net/ipv4/ip_tunnel.c:1124 ops_exit_list net/core/net_namespace.c:171 [inline] cleanup_net+0x7ec/0xc50 net/core/net_namespace.c:591 process_one_work+0x853/0x1140 kernel/workqueue.c:2297 worker_thread+0xac1/0x1320 kernel/workqueue.c:2444 kthread+0x453/0x480 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 ==================================================================