Pasta consumes high load CPU

### Issue Description Podman rootless container with Qbitorrent image, and Pasta network, the Pasta process consumes high load of CPU (higher than 90%). It only occurs when downloading in high speed. ### Steps to reproduce the issue Steps to reproduce the issue: 1. Create a rootless qbitorrent container ``` podman run --rm --name qbit-test -p 8080:8080 -v ./Descargas:/downloads lscr.io/linuxserver/qbittorrent:latest ``` 2. Start downloading 1-2 torrents with lots of seeders 3. Open htop/top and see how passt.avx2 process consumes CPU. ### Describe the results you received ``` ps aux | grep -i pasta /usr/bin/pasta --config-net -t 8080-8080:8080-8080 --dns-forward 169.254.1.1 -u none -T none -U none --no-map-gw --quiet --netns /run/user/1000/netns/netns-474aff30-f3e2-6ae9-08b7-b7e1ab6fc549 --map-guest-addr 169.254.1.2 ``` In top: ``` PID USUARIO PR NI VIRT RES SHR S %CPU %MEM HORA+ ORDEN 171957 yuki 20 0 194008 36036 1384 R 96,8 0,2 2:43.08 passt.avx2 ``` ### Describe the results you expected I assume that the pasta process should be not so high. ### podman info output ```yaml Podman info: host: arch: amd64 buildahVersion: 1.43.2 cgroupControllers: - memory - pids cgroupManager: systemd cgroupVersion: v2 conmon: package: conmon-1:2.2.1-1 path: /usr/bin/conmon version: 'conmon version 2.2.1, commit: c8cc2c4db27531bd4e084ce7857f73cd21ee639d' cpuUtilization: idlePercent: 90.37 systemPercent: 3.37 userPercent: 6.26 cpus: 6 databaseBackend: sqlite distribution: distribution: arch version: unknown eventLogger: journald freeLocks: 2028 hostname: archy idMappings: gidmap: - container_id: 0 host_id: 1000 size: 1 - container_id: 1 host_id: 100000 size: 65536 uidmap: - container_id: 0 host_id: 1000 size: 1 - container_id: 1 host_id: 100000 size: 65536 kernel: 7.0.12-zen1-1-zen linkmode: dynamic logDriver: journald memFree: 1953529856 memTotal: 16667205632 networkBackend: netavark networkBackendInfo: backend: netavark defaultNetwork: podman dns: package: aardvark-dns-1.17.1-1 path: /usr/lib/podman/aardvark-dns version: aardvark-dns 1.17.1 package: netavark-1.17.2-2 path: /usr/lib/podman/netavark version: netavark 1.17.2 ociRuntime: name: crun package: crun-1.28-1 path: /usr/bin/crun version: |- crun version 1.28-dirty commit: 54f16ffbefcd022bf032af768b5c5ce075c18bfc rundir: /run/user/1000/crun spec: 1.0.0 +SYSTEMD +SELINUX +APPARMOR +CAP +SECCOMP +EBPF +CRIU +LIBKRUN +JSON_C os: linux pasta: executable: /usr/bin/pasta package: passt-2026_06_11.a9c61ff-1 version: | pasta 2026_06_11.a9c61ff Copyright Red Hat GNU General Public License, version 2 or later <https://www.gnu.org/licenses/old-licenses/gpl-2.0.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. remoteSocket: exists: true path: /run/user/1000/podman/podman.sock rootlessNetworkCmd: pasta security: apparmorEnabled: false capabilities: CAP_CHOWN,CAP_DAC_OVERRIDE,CAP_FOWNER,CAP_FSETID,CAP_KILL,CAP_NET_BIND_SERVICE,CAP_SETFCAP,CAP_SETGID,CAP_SETPCAP,CAP_SETUID,CAP_SYS_CHROOT rootless: true seccompEnabled: true seccompProfilePath: /etc/containers/seccomp.json selinuxEnabled: false serviceIsRemote: false slirp4netns: executable: "" package: "" version: "" swapFree: 1850621952 swapTotal: 4294963200 uptime: 62h 8m 7.00s (Approximately 2.58 days) variant: "" plugins: authorization: null log: - k8s-file - none - passthrough - journald network: - bridge - macvlan - ipvlan volume: - local registries: search: - docker.io store: configFile: /home/yuki/.config/containers/storage.conf containerStore: number: 9 paused: 0 running: 8 stopped: 1 graphDriverName: overlay graphOptions: {} graphRoot: /home/yuki/.local/share/containers/storage graphRootAllocated: 822705717248 graphRootUsed: 71725723648 graphStatus: Backing Filesystem: extfs Native Overlay Diff: "true" Supports d_type: "true" Supports shifting: "false" Supports volatile: "true" Using metacopy: "false" imageCopyTmpDir: /var/tmp imageStore: number: 9 runRoot: /run/user/1000/containers transientStore: false volumePath: /home/yuki/.local/share/containers/storage/volumes version: APIVersion: 5.8.3 Built: 1781291692 BuiltTime: Fri Jun 12 21:14:52 2026 GitCommit: 93dbfd0d86ee57f8f91801f61ce57dd880a4725f GoVersion: go1.26.4-X:nodwarf5 Os: linux OsArch: linux/amd64 Version: 5.8.3 ``` ### Podman in a container No ### Privileged Or Rootless Rootless ### Upstream Latest Release Yes ### Additional environment details Additional environment details ### Additional information Additional information like issue happens only occasionally or issue happens with a particular architecture or on a particular setting