netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 ================================================================== BUG: KCSAN: data-race in rwsem_down_write_slowpath / rwsem_down_write_slowpath write to 0xffffc9000010b808 of 1 bytes by task 8228 on cpu 1: rwsem_try_write_lock kernel/locking/rwsem.c:676 [inline] rwsem_down_write_slowpath+0x3dd/0xac0 kernel/locking/rwsem.c:1189 __down_write_common kernel/locking/rwsem.c:1347 [inline] __down_write kernel/locking/rwsem.c:1356 [inline] down_write+0xab/0xc0 kernel/locking/rwsem.c:1626 kernfs_remove_by_name_ns+0x6b/0x110 fs/kernfs/dir.c:1793 kernfs_remove_by_name include/linux/kernfs.h:639 [inline] remove_files fs/sysfs/group.c:28 [inline] sysfs_remove_group+0xa5/0x170 fs/sysfs/group.c:328 sysfs_remove_groups+0x3a/0x80 fs/sysfs/group.c:352 device_remove_groups drivers/base/core.c:2844 [inline] device_remove_attrs+0x139/0x1a0 drivers/base/core.c:2977 device_del+0x361/0x790 drivers/base/core.c:3894 drop_partition block/partitions/core.c:280 [inline] bdev_disk_changed+0x1a1/0xe00 block/partitions/core.c:676 __loop_clr_fd drivers/block/loop.c:1164 [inline] lo_release+0x32e/0x420 drivers/block/loop.c:1751 bdev_release+0x373/0x3d0 block/bdev.c:-1 blkdev_release+0x15/0x20 block/fops.c:705 __fput+0x29b/0x630 fs/file_table.c:510 ____fput+0x1c/0x30 fs/file_table.c:538 task_work_run+0x130/0x1a0 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x4ae/0x1530 kernel/exit.c:976 do_group_exit+0xfe/0x140 kernel/exit.c:1119 get_signal+0xe30/0xf20 kernel/signal.c:3037 arch_do_signal_or_restart+0x96/0x480 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop+0x6f/0x820 kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:238 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline] do_syscall_64+0x232/0x3b0 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f read to 0xffffc9000010b808 of 1 bytes by task 30 on cpu 0: rwsem_down_write_slowpath+0x44f/0xac0 kernel/locking/rwsem.c:1207 __down_write_common kernel/locking/rwsem.c:1347 [inline] __down_write kernel/locking/rwsem.c:1356 [inline] down_write+0xab/0xc0 kernel/locking/rwsem.c:1626 kernfs_remove_by_name_ns+0x6b/0x110 fs/kernfs/dir.c:1793 kernfs_remove_by_name include/linux/kernfs.h:639 [inline] remove_files fs/sysfs/group.c:28 [inline] sysfs_remove_group+0xa5/0x170 fs/sysfs/group.c:328 netdev_queue_update_kobjects+0x432/0x4c0 net/core/net-sysfs.c:2055 remove_queue_kobjects net/core/net-sysfs.c:2155 [inline] netdev_unregister_kobject+0xcc/0x270 net/core/net-sysfs.c:2310 unregister_netdevice_many_notify+0x128b/0x1650 net/core/dev.c:12456 unregister_netdevice_many net/core/dev.c:12484 [inline] unregister_netdevice_queue+0x1cd/0x200 net/core/dev.c:12294 unregister_netdevice include/linux/netdevice.h:3444 [inline] nsim_destroy+0x15b/0x5a0 drivers/net/netdevsim/netdev.c:1193 __nsim_dev_port_del+0xd2/0x140 drivers/net/netdevsim/dev.c:1547 nsim_dev_port_del_all drivers/net/netdevsim/dev.c:1561 [inline] nsim_dev_reload_destroy+0x1a3/0x2c0 drivers/net/netdevsim/dev.c:1785 nsim_dev_reload_down+0x67/0x80 drivers/net/netdevsim/dev.c:1038 devlink_reload+0xad/0x590 net/devlink/dev.c:462 devlink_pernet_pre_exit+0xf9/0x260 net/devlink/core.c:558 ops_pre_exit_list net/core/net_namespace.c:161 [inline] ops_undo_list+0xb5/0x420 net/core/net_namespace.c:234 cleanup_net+0x37c/0x5b0 net/core/net_namespace.c:702 process_one_work kernel/workqueue.c:3314 [inline] process_scheduled_works+0x4f0/0x9c0 kernel/workqueue.c:3397 worker_thread+0x58a/0x780 kernel/workqueue.c:3478 kthread+0x22a/0x280 kernel/kthread.c:436 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 value changed: 0x00 -> 0x01 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 30 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT(full) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 Workqueue: netns cleanup_net ================================================================== netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 team0: left allmulticast mode team_slave_0: left allmulticast mode team_slave_1: left allmulticast mode bond0: left allmulticast mode bond_slave_0: left allmulticast mode bond_slave_1: left allmulticast mode dummy0: left allmulticast mode team0: left promiscuous mode team_slave_0: left promiscuous mode team_slave_1: left promiscuous mode bond0: left promiscuous mode bond_slave_0: left promiscuous mode bond_slave_1: left promiscuous mode dummy0: left promiscuous mode bridge0: port 3(team0) entered disabled state bridge_slave_1: left allmulticast mode bridge_slave_1: left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state bridge_slave_0: left allmulticast mode bridge_slave_0: left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state bond1 (unregistering): (slave gretap1): Releasing backup interface team0: Port device bond0 removed bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): (slave dummy0): Releasing backup interface bond0 (unregistering): Released all slaves bond1 (unregistering): Released all slaves bond2 (unregistering): Released all slaves bond3 (unregistering): Released all slaves bond4 (unregistering): Released all slaves bond5 (unregistering): Released all slaves bond6 (unregistering): Released all slaves IPVS: stopping master sync thread 7753 ... hsr_slave_0: left promiscuous mode hsr_slave_1: left promiscuous mode batman_adv: batadv0: Interface deactivated: batadv_slave_0 batman_adv: batadv0: Removing interface: batadv_slave_0 batman_adv: batadv0: Interface deactivated: batadv_slave_1 batman_adv: batadv0: Removing interface: batadv_slave_1 veth1_macvtap: left promiscuous mode veth0_macvtap: left promiscuous mode team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed IPVS: stop unused estimator thread 0... netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 bridge_slave_1: left allmulticast mode bridge_slave_1: left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state bridge_slave_0: left allmulticast mode bridge_slave_0: left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state bridge_slave_1: left allmulticast mode bridge_slave_1: left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state bridge_slave_0: left allmulticast mode bridge_slave_0: left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state bridge_slave_1: left allmulticast mode bridge_slave_1: left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state bridge_slave_0: left allmulticast mode bridge_slave_0: left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): Released all slaves bond1 (unregistering): Released all slaves bond2 (unregistering): Released all slaves bond1 (unregistering): (slave bridge2): Releasing backup interface bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): Released all slaves bond1 (unregistering): Released all slaves bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): Released all slaves bond1 (unregistering): Released all slaves bond2 (unregistering): (slave vcan1): Releasing backup interface vcan1: left promiscuous mode bond2 (unregistering): Released all slaves bond3 (unregistering): Released all slaves bond4 (unregistering): Released all slaves bond5 (unregistering): Released all slaves bond6 (unregistering): Released all slaves bond1 (unregistering): (slave gretap2): Releasing active interface team0: Port device gtp0 removed bond0 (unregistering): Released all slaves bond1 (unregistering): Released all slaves bond2 (unregistering): Released all slaves bond3 (unregistering): Released all slaves tipc: Left network mode tipc: Left network mode tipc: Left network mode IPVS: stopping backup sync thread 6591 ... hsr_slave_0: left promiscuous mode hsr_slave_1: left promiscuous mode hsr_slave_0: left promiscuous mode hsr_slave_1: left promiscuous mode batman_adv: batadv0: Removing interface: batadv_slave_0 batman_adv: batadv0: Removing interface: batadv_slave_1 hsr_slave_0: left promiscuous mode hsr_slave_1: left promiscuous mode hsr_slave_0: left promiscuous mode hsr_slave_1: left promiscuous mode batman_adv: batadv0: Interface deactivated: dummy0 batman_adv: batadv0: Removing interface: dummy0 veth1_macvtap: left promiscuous mode veth0_macvtap: left promiscuous mode veth1_vlan: left promiscuous mode veth0_vlan: left promiscuous mode veth1_macvtap: left promiscuous mode veth1_vlan: left promiscuous mode veth0_vlan: left promiscuous mode veth1_macvtap: left promiscuous mode veth0_macvtap: left promiscuous mode veth1_vlan: left promiscuous mode veth0_vlan: left promiscuous mode team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed pim6reg (unregistering): left allmulticast mode team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed IPVS: stop unused estimator thread 0... IPVS: stop unused estimator thread 0...