syzbot

------------[ cut here ]------------
conntrack cleanup blocked for 60s
WARNING: net/netfilter/nf_conntrack_core.c:2512 at nf_conntrack_cleanup_net_list+0x234/0x340 net/netfilter/nf_conntrack_core.c:2511, CPU#1: kworker/u8:11/11831
Modules linked in:
CPU: 1 UID: 0 PID: 11831 Comm: kworker/u8:11 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
Workqueue: netns cleanup_net
RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 net/netfilter/nf_conntrack_core.c:2511
Code: 08 48 89 df e8 ed 45 66 f8 4c 8b 3b 49 39 df 74 69 e8 90 15 fc f7 45 31 e4 e9 8e fe ff ff e8 83 15 fc f7 48 8d 3d fc dd 57 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff
RSP: 0018:ffffc900038678b0 EFLAGS: 00010293
RAX: ffffffff89c946ed RBX: ffffc90003867a50 RCX: ffff888076873d80
RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff902124f0
RBP: 0000000000000001 R08: ffff888031ecf403 R09: 1ffff110063d9e80
R10: dffffc0000000000 R11: ffffed10063d9e81 R12: 0000000000000001
R13: dffffc0000000000 R14: 000000010001048c R15: 000000010001048d
FS:  0000000000000000(0000) GS:ffff88812555a000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c2a97a5 CR3: 00000000735c8000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000009120
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ops_exit_list net/core/net_namespace.c:205 [inline]
 ops_undo_list+0x52b/0x940 net/core/net_namespace.c:252
 cleanup_net+0x56b/0x800 net/core/net_namespace.c:702
 process_one_work kernel/workqueue.c:3288 [inline]
 process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3371
 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3452
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
----------------
Code disassembly (best guess):
   0:	08 48 89             	or     %cl,-0x77(%rax)
   3:	df e8                	fucomip %st(0),%st
   5:	ed                   	in     (%dx),%eax
   6:	45                   	rex.RB
   7:	66 f8                	data16 clc
   9:	4c 8b 3b             	mov    (%rbx),%r15
   c:	49 39 df             	cmp    %rbx,%r15
   f:	74 69                	je     0x7a
  11:	e8 90 15 fc f7       	call   0xf7fc15a6
  16:	45 31 e4             	xor    %r12d,%r12d
  19:	e9 8e fe ff ff       	jmp    0xfffffeac
  1e:	e8 83 15 fc f7       	call   0xf7fc15a6
  23:	48 8d 3d fc dd 57 06 	lea    0x657ddfc(%rip),%rdi        # 0x657de26
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	eb c0                	jmp    0xfffffff1
  31:	89 e9                	mov    %ebp,%ecx
  33:	80 e1 07             	and    $0x7,%cl
  36:	80 c1 03             	add    $0x3,%cl
  39:	38 c1                	cmp    %al,%cl
  3b:	0f                   	.byte 0xf
  3c:	8c cd                	mov    %cs,%ebp
  3e:	fe                   	(bad)
  3f:	ff                   	.byte 0xff