syzbot

------------[ cut here ]------------
conntrack cleanup blocked for 60s
WARNING: net/netfilter/nf_conntrack_core.c:2512 at nf_conntrack_cleanup_net_list+0x234/0x340 net/netfilter/nf_conntrack_core.c:2511, CPU#0: kworker/u8:3/37
Modules linked in:
CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Workqueue: netns cleanup_net
RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 net/netfilter/nf_conntrack_core.c:2511
Code: 08 48 89 df e8 8d 49 a4 f8 4c 8b 3b 49 39 df 74 69 e8 90 26 3e f8 45 31 e4 e9 8e fe ff ff e8 83 26 3e f8 48 8d 3d 4c f9 0d 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff
RSP: 0018:ffffc90000ad7870 EFLAGS: 00010293
RAX: ffffffff8982d22d RBX: ffffc90000ad7a00 RCX: ffff888141683d00
RDX: 0000000000000000 RSI: fffffffffffffffe RDI: ffffffff8f90cb80
RBP: 0000000000000001 R08: ffff888056985c03 R09: 1ffff1100ad30b80
R10: dffffc0000000000 R11: ffffed100ad30b81 R12: 0000000000000001
R13: dffffc0000000000 R14: 0000000100016fa9 R15: 0000000100016fab
FS:  0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f08e00caf98 CR3: 0000000052356000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 ops_exit_list net/core/net_namespace.c:205 [inline]
 ops_undo_list+0x525/0x990 net/core/net_namespace.c:252
 cleanup_net+0x4d8/0x7a0 net/core/net_namespace.c:696
 process_one_work kernel/workqueue.c:3257 [inline]
 process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
----------------
Code disassembly (best guess):
   0:	08 48 89             	or     %cl,-0x77(%rax)
   3:	df e8                	fucomip %st(0),%st
   5:	8d 49 a4             	lea    -0x5c(%rcx),%ecx
   8:	f8                   	clc
   9:	4c 8b 3b             	mov    (%rbx),%r15
   c:	49 39 df             	cmp    %rbx,%r15
   f:	74 69                	je     0x7a
  11:	e8 90 26 3e f8       	call   0xf83e26a6
  16:	45 31 e4             	xor    %r12d,%r12d
  19:	e9 8e fe ff ff       	jmp    0xfffffeac
  1e:	e8 83 26 3e f8       	call   0xf83e26a6
  23:	48 8d 3d 4c f9 0d 06 	lea    0x60df94c(%rip),%rdi        # 0x60df976
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	eb c0                	jmp    0xfffffff1
  31:	89 e9                	mov    %ebp,%ecx
  33:	80 e1 07             	and    $0x7,%cl
  36:	80 c1 03             	add    $0x3,%cl
  39:	38 c1                	cmp    %al,%cl
  3b:	0f                   	.byte 0xf
  3c:	8c cd                	mov    %cs,%ebp
  3e:	fe                   	(bad)
  3f:	ff                   	.byte 0xff