cannot create new pod in an ambient labeled namespace in ebpf mode

[KfreeZ]

I have an ambient mesh setup in ebpf redirection mode,
It works when I following this sequence,

1. install workload (sleep, bookinfo)
2. label the namespace(default) as ambient
3. send the traffic

But when I restart the application pod in the namespace (default), I encountered below error:

│   Warning  FailedCreatePodSandBox  6m23s                   kubelet            Failed to create pod sandbox: rpc error: code = Unknown desc = failed to set up sandbox container "8d6164082738891 │
│ ca7e060e676ecf7c67ca524b037d5655dde0c8a9b89fd943e" network for pod "sleep-7656cf8794-ltqmc": networkPlugin cni failed to set up pod "sleep-7656cf8794-ltqmc_default" network: plugin type="istio │
│ -cni" name="istio-cni" failed (add): failed to get info for if(eth0) in ns(net): failed to Statfs "/var/run/netns/net": no such file or directory

[root@k8s-node02 ~]# docker version
Client: Docker Engine - Community
Version: 24.0.7
API version: 1.43
Go version: go1.20.10
Git commit: afdd53b
Built: Thu Oct 26 09:09:18 2023
OS/Arch: linux/amd64
Context: default

Server: Docker Engine - Community
Engine:
Version: 24.0.7
API version: 1.43 (minimum version 1.12)
Go version: go1.20.10
Git commit: 311b9ff
Built: Thu Oct 26 09:08:20 2023
OS/Arch: linux/amd64
Experimental: false
containerd:
Version: 1.6.24
GitCommit: 61f9fd88f79f081d64d6fa3bb1a0dc71ec870523
runc:
Version: 1.1.9
GitCommit: v1.1.9-0-gccaecfc
docker-init:
Version: 0.19.0
GitCommit: de40ad0

[root@k8s-master bin]# ./istioctl version
client version: 1.20.0
control plane version: 1.20.0
data plane version: 1.20.0 (4 proxies)

[KfreeZ]

Close this one, re-create issue in istio repo, refer to istio/istio#47876