syzbot |
sign-in | mailing list | source | docs | 🏰 |
| ID | Workflow | Result | Correct | Bug | Created | Started | Finished | Revision | Error |
|---|---|---|---|---|---|---|---|---|---|
| c1f62667-85cf-459c-88e0-768f22d90c7d | assessment-security | DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ✅ RemoteTrigger: ✅ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ | ❓ | possible deadlock in kernfs_remove_by_name_ns (2) | 2026/07/17 00:00 | 2026/07/17 00:00 | 2026/07/17 00:08 | 49f47391518e9cfe0cedbef0d8259b0041150b4f |
| Title | Replies (including bot) | Last reply |
|---|---|---|
| [syzbot] [kernfs?] possible deadlock in kernfs_remove_by_name_ns (2) | 0 (1) | 2026/07/19 10:02 |
netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
======================================================
WARNING: possible circular locking dependency detected
syzkaller #0 Tainted: G L
------------------------------------------------------
kworker/u8:8/14974 is trying to acquire lock:
ffff88801c28d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 fs/kernfs/dir.c:1792
but task is already holding lock:
ffff88801c28d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 fs/kernfs/dir.c:1791
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}:
down_read+0x4a/0x330 kernel/locking/rwsem.c:1574
kernfs_remove_by_name_ns+0x3f/0x140 fs/kernfs/dir.c:1791
kernfs_remove_by_name include/linux/kernfs.h:644 [inline]
remove_files fs/sysfs/group.c:28 [inline]
sysfs_remove_group+0x101/0x2e0 fs/sysfs/group.c:328
sysfs_remove_groups+0x54/0xb0 fs/sysfs/group.c:352
__kobject_del+0x83/0x310 lib/kobject.c:595
kobject_del+0x45/0x60 lib/kobject.c:627
irq_sysfs_del kernel/irq/irqdesc.c:380 [inline]
free_desc+0x10d/0x3c0 kernel/irq/irqdesc.c:493
irq_free_descs+0x7e/0xb0 kernel/irq/irqdesc.c:874
lan78xx_remove_irq_domain drivers/net/usb/lan78xx.c:2262 [inline]
lan78xx_bind+0xa47/0xd20 drivers/net/usb/lan78xx.c:3834
lan78xx_probe+0x1041/0x1c00 drivers/net/usb/lan78xx.c:4751
usb_probe_interface+0x653/0xc60 drivers/usb/core/driver.c:396
call_driver_probe drivers/base/dd.c:-1 [inline]
really_probe+0x254/0xae0 drivers/base/dd.c:706
__driver_probe_device+0x1e8/0x360 drivers/base/dd.c:868
driver_probe_device+0x4f/0x240 drivers/base/dd.c:898
__device_attach_driver+0x270/0x410 drivers/base/dd.c:1026
bus_for_each_drv+0x258/0x2f0 drivers/base/bus.c:500
__device_attach+0x2c4/0x450 drivers/base/dd.c:1098
device_initial_probe+0xa1/0xd0 drivers/base/dd.c:1153
bus_probe_device+0x12a/0x220 drivers/base/bus.c:620
device_add+0x7d7/0xb80 drivers/base/core.c:3772
usb_set_configuration+0x1ad8/0x2180 drivers/usb/core/message.c:2268
usb_generic_driver_probe+0x8d/0x150 drivers/usb/core/generic.c:250
usb_probe_device+0x1c3/0x3b0 drivers/usb/core/driver.c:291
call_driver_probe drivers/base/dd.c:-1 [inline]
really_probe+0x254/0xae0 drivers/base/dd.c:706
__driver_probe_device+0x1e8/0x360 drivers/base/dd.c:868
driver_probe_device+0x4f/0x240 drivers/base/dd.c:898
__device_attach_driver+0x270/0x410 drivers/base/dd.c:1026
bus_for_each_drv+0x258/0x2f0 drivers/base/bus.c:500
__device_attach+0x2c4/0x450 drivers/base/dd.c:1098
device_initial_probe+0xa1/0xd0 drivers/base/dd.c:1153
bus_probe_device+0x12a/0x220 drivers/base/bus.c:620
device_add+0x7d7/0xb80 drivers/base/core.c:3772
usb_new_device+0x99d/0x1620 drivers/usb/core/hub.c:2695
hub_port_connect drivers/usb/core/hub.c:5567 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5707 [inline]
port_event drivers/usb/core/hub.c:5871 [inline]
hub_event+0x28e8/0x4d30 drivers/usb/core/hub.c:5953
process_one_work kernel/workqueue.c:3322 [inline]
process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405
worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
-> #9 (sparse_irq_lock){+.+.}-{4:4}:
__mutex_lock_common kernel/locking/mutex.c:646 [inline]
__mutex_lock+0x19d/0x1550 kernel/locking/mutex.c:821
cpuhp_bringup_ap+0x70/0x360 kernel/cpu.c:841
cpuhp_invoke_callback+0x434/0x810 kernel/cpu.c:194
__cpuhp_invoke_callback_range kernel/cpu.c:972 [inline]
cpuhp_invoke_callback_range kernel/cpu.c:996 [inline]
cpuhp_up_callbacks kernel/cpu.c:1027 [inline]
_cpu_up+0x2ce/0x5b0 kernel/cpu.c:1674
cpu_up+0x1d2/0x220 kernel/cpu.c:1706
cpuhp_bringup_mask+0xb2/0x1a0 kernel/cpu.c:1772
cpuhp_bringup_cpus_parallel+0x118/0x120 kernel/cpu.c:1863
bringup_nonboot_cpus+0x17/0x30 kernel/cpu.c:1876
smp_init+0x32/0x110 kernel/smp.c:1014
kernel_init_freeable+0x27f/0x3e0 init/main.c:1650
kernel_init+0x1d/0x1d0 init/main.c:1548
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
-> #8 (cpu_hotplug_lock){++++}-{0:0}:
percpu_down_read_internal include/linux/percpu-rwsem.h:53 [inline]
percpu_down_read include/linux/percpu-rwsem.h:77 [inline]
cpus_read_lock+0x42/0x160 kernel/cpu.c:490
static_key_disable+0x12/0x20 kernel/jump_label.c:247
__inet_hash_connect+0x258f/0x25a0 net/ipv4/inet_hashtables.c:1081
tcp_v4_connect+0xcee/0x1950 net/ipv4/tcp_ipv4.c:306
__inet_stream_connect+0x258/0xe00 net/ipv4/af_inet.c:684
inet_stream_connect+0x66/0xa0 net/ipv4/af_inet.c:755
__sys_connect_file net/socket.c:2135 [inline]
__sys_connect+0x323/0x460 net/socket.c:2154
__do_sys_connect net/socket.c:2160 [inline]
__se_sys_connect net/socket.c:2157 [inline]
__x64_sys_connect+0x7a/0x90 net/socket.c:2157
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
-> #7 (sk_lock-AF_INET){+.+.}-{0:0}:
lock_sock_nested+0x41/0x100 net/core/sock.c:3828
lock_sock include/net/sock.h:1713 [inline]
inet_shutdown+0x6a/0x390 net/ipv4/af_inet.c:913
nbd_mark_nsock_dead+0x2cb/0x550 drivers/block/nbd.c:318
recv_work+0x1cee/0x1e10 drivers/block/nbd.c:1021
process_one_work kernel/workqueue.c:3322 [inline]
process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405
worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
-> #6 (&nsock->tx_lock){+.+.}-{4:4}:
__mutex_lock_common kernel/locking/mutex.c:646 [inline]
__mutex_lock+0x19d/0x1550 kernel/locking/mutex.c:821
nbd_handle_cmd drivers/block/nbd.c:1143 [inline]
nbd_queue_rq+0x373/0x1150 drivers/block/nbd.c:1207
blk_mq_dispatch_rq_list+0x499/0x1990 block/blk-mq.c:2117
__blk_mq_do_dispatch_sched block/blk-mq-sched.c:168 [inline]
blk_mq_do_dispatch_sched block/blk-mq-sched.c:182 [inline]
__blk_mq_sched_dispatch_requests+0xd36/0x1580 block/blk-mq-sched.c:307
blk_mq_sched_dispatch_requests+0xd7/0x190 block/blk-mq-sched.c:329
blk_mq_run_work_fn+0x16c/0x300 block/blk-mq.c:2532
process_one_work kernel/workqueue.c:3322 [inline]
process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405
worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
-> #5 (&cmd->lock){+.+.}-{4:4}:
__mutex_lock_common kernel/locking/mutex.c:646 [inline]
__mutex_lock+0x19d/0x1550 kernel/locking/mutex.c:821
nbd_queue_rq+0xc1/0x1150 drivers/block/nbd.c:1199
blk_mq_dispatch_rq_list+0x499/0x1990 block/blk-mq.c:2117
__blk_mq_do_dispatch_sched block/blk-mq-sched.c:168 [inline]
blk_mq_do_dispatch_sched block/blk-mq-sched.c:182 [inline]
__blk_mq_sched_dispatch_requests+0xd36/0x1580 block/blk-mq-sched.c:307
blk_mq_sched_dispatch_requests+0xd7/0x190 block/blk-mq-sched.c:329
blk_mq_run_work_fn+0x16c/0x300 block/blk-mq.c:2532
process_one_work kernel/workqueue.c:3322 [inline]
process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405
worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
-> #4 (set->srcu){.+.+}-{0:0}:
srcu_lock_sync include/linux/srcu.h:199 [inline]
__synchronize_srcu+0xc9/0x2f0 kernel/rcu/srcutree.c:1481
elevator_switch+0x1e8/0x7b0 block/elevator.c:576
elevator_change+0x2fa/0x480 block/elevator.c:681
elevator_set_default+0x375/0x440 block/elevator.c:754
blk_register_queue+0x3f3/0x4e0 block/blk-sysfs.c:992
__add_disk+0x6cb/0xe30 block/genhd.c:524
add_disk_fwnode+0x100/0x3a0 block/genhd.c:593
add_disk include/linux/blkdev.h:800 [inline]
nbd_dev_add+0x733/0xb60 drivers/block/nbd.c:2021
nbd_init+0x15f/0x1e0 drivers/block/nbd.c:2729
do_one_initcall+0x250/0x870 init/main.c:1347
do_initcall_level+0x10a/0x1a0 init/main.c:1409
do_initcalls+0x59/0xa0 init/main.c:1425
kernel_init_freeable+0x29d/0x3e0 init/main.c:1658
kernel_init+0x1d/0x1d0 init/main.c:1548
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
-> #3 (&q->elevator_lock){+.+.}-{4:4}:
__mutex_lock_common kernel/locking/mutex.c:646 [inline]
__mutex_lock+0x19d/0x1550 kernel/locking/mutex.c:821
elevator_change+0x1af/0x480 block/elevator.c:679
elevator_set_none+0xb5/0x140 block/elevator.c:769
blk_mq_elv_switch_none block/blk-mq.c:5101 [inline]
__blk_mq_update_nr_hw_queues block/blk-mq.c:5146 [inline]
blk_mq_update_nr_hw_queues+0x5ef/0x19f0 block/blk-mq.c:5211
nbd_start_device+0x189/0xb30 drivers/block/nbd.c:1526
nbd_genl_connect+0x1597/0x1c10 drivers/block/nbd.c:2276
genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114
genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline]
genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209
netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556
genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218
netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
netlink_unicast+0x7bb/0x940 net/netlink/af_netlink.c:1345
netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900
sock_sendmsg_nosec+0x13a/0x180 net/socket.c:775
__sock_sendmsg net/socket.c:790 [inline]
____sys_sendmsg+0x54e/0x850 net/socket.c:2684
___sys_sendmsg+0x2a5/0x360 net/socket.c:2738
__sys_sendmsg net/socket.c:2770 [inline]
__do_sys_sendmsg net/socket.c:2775 [inline]
__se_sys_sendmsg net/socket.c:2773 [inline]
__x64_sys_sendmsg+0x1b1/0x290 net/socket.c:2773
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
-> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
blk_alloc_queue+0x544/0x690 block/blk-core.c:504
blk_mq_alloc_queue block/blk-mq.c:4420 [inline]
__blk_mq_alloc_disk+0x194/0x390 block/blk-mq.c:4467
nbd_dev_add+0x494/0xb60 drivers/block/nbd.c:1991
nbd_init+0x15f/0x1e0 drivers/block/nbd.c:2729
do_one_initcall+0x250/0x870 init/main.c:1347
do_initcall_level+0x10a/0x1a0 init/main.c:1409
do_initcalls+0x59/0xa0 init/main.c:1425
kernel_init_freeable+0x29d/0x3e0 init/main.c:1658
kernel_init+0x1d/0x1d0 init/main.c:1548
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
-> #1 (fs_reclaim){+.+.}-{0:0}:
__fs_reclaim_acquire mm/page_alloc.c:4329 [inline]
fs_reclaim_acquire+0x71/0x100 mm/page_alloc.c:4343
might_alloc include/linux/sched/mm.h:317 [inline]
slab_pre_alloc_hook mm/slub.c:4565 [inline]
slab_alloc_node mm/slub.c:4925 [inline]
kmem_cache_alloc_lru_noprof+0x65/0x5f0 mm/slub.c:4978
alloc_inode+0xb8/0x1b0 fs/inode.c:340
iget_locked+0x131/0x6a0 fs/inode.c:1477
kernfs_get_inode+0x4f/0x770 fs/kernfs/inode.c:252
kernfs_fill_super fs/kernfs/mount.c:308 [inline]
kernfs_get_tree+0x5cd/0x980 fs/kernfs/mount.c:392
vfs_get_tree+0x92/0x2a0 fs/super.c:1694
fc_mount fs/namespace.c:1198 [inline]
do_new_mount_fc fs/namespace.c:3765 [inline]
do_new_mount+0x319/0xdc0 fs/namespace.c:3841
do_mount fs/namespace.c:4174 [inline]
__do_sys_mount fs/namespace.c:4390 [inline]
__se_sys_mount+0x31d/0x420 fs/namespace.c:4367
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
-> #0 (&root->kernfs_rwsem){++++}-{4:4}:
check_prev_add kernel/locking/lockdep.c:3165 [inline]
check_prevs_add kernel/locking/lockdep.c:3284 [inline]
validate_chain kernel/locking/lockdep.c:3908 [inline]
__lock_acquire+0x1520/0x2cf0 kernel/locking/lockdep.c:5237
lock_acquire+0x106/0x350 kernel/locking/lockdep.c:5868
down_write+0x96/0x200 kernel/locking/rwsem.c:1631
kernfs_remove_by_name_ns+0x4e/0x140 fs/kernfs/dir.c:1792
kernfs_remove_by_name include/linux/kernfs.h:644 [inline]
remove_files fs/sysfs/group.c:28 [inline]
sysfs_remove_group+0x101/0x2e0 fs/sysfs/group.c:328
sysfs_remove_groups+0x54/0xb0 fs/sysfs/group.c:352
net_rx_queue_update_kobjects+0x6b7/0x780 net/core/net-sysfs.c:1316
remove_queue_kobjects net/core/net-sysfs.c:2148 [inline]
netdev_unregister_kobject+0xff/0x450 net/core/net-sysfs.c:2304
unregister_netdevice_many_notify+0x1be4/0x2150 net/core/dev.c:12479
unregister_netdevice_many net/core/dev.c:12507 [inline]
unregister_netdevice_queue+0x2f5/0x340 net/core/dev.c:12319
unregister_netdevice include/linux/netdevice.h:3472 [inline]
nsim_destroy+0x275/0x800 drivers/net/netdevsim/netdev.c:1196
__nsim_dev_port_del+0x14e/0x200 drivers/net/netdevsim/dev.c:1547
nsim_dev_port_del_all drivers/net/netdevsim/dev.c:1561 [inline]
nsim_dev_reload_destroy+0x288/0x490 drivers/net/netdevsim/dev.c:1785
nsim_dev_reload_down+0x8a/0xc0 drivers/net/netdevsim/dev.c:1038
devlink_reload+0x1c5/0x890 net/devlink/dev.c:462
devlink_pernet_pre_exit+0x1ff/0x420 net/devlink/core.c:560
ops_pre_exit_list net/core/net_namespace.c:161 [inline]
ops_undo_list+0x17d/0x8d0 net/core/net_namespace.c:234
cleanup_net+0x572/0x810 net/core/net_namespace.c:702
process_one_work kernel/workqueue.c:3322 [inline]
process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405
worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
other info that might help us debug this:
Chain exists of:
&root->kernfs_rwsem --> sparse_irq_lock --> &root->kernfs_supers_rwsem
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
rlock(&root->kernfs_supers_rwsem);
lock(sparse_irq_lock);
lock(&root->kernfs_supers_rwsem);
lock(&root->kernfs_rwsem);
*** DEADLOCK ***
7 locks held by kworker/u8:8/14974:
#0: ffff88801c28e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
#0: ffff88801c28e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#1: ffffc9000375fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
#1: ffffc9000375fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#2: ffffffff9001e4c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 net/core/net_namespace.c:673
#3: ffff888078ffd128 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1102 [inline]
#3: ffff888078ffd128 (&dev->mutex){....}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:124 [inline]
#3: ffff888078ffd128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 net/devlink/core.c:557
#4: ffff888078fff258 (&devlink->lock_key#24){+.+.}-{4:4}, at: devl_lock net/devlink/core.c:292 [inline]
#4: ffff888078fff258 (&devlink->lock_key#24){+.+.}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:125 [inline]
#4: ffff888078fff258 (&devlink->lock_key#24){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 net/devlink/core.c:557
#5: ffffffff9002d080 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 drivers/net/netdevsim/netdev.c:1191
#6: ffff88801c28d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 fs/kernfs/dir.c:1791
stack backtrace:
CPU: 0 UID: 0 PID: 14974 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
Workqueue: netns cleanup_net
Call Trace:
<TASK>
dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
print_circular_bug+0x2e1/0x300 kernel/locking/lockdep.c:2043
check_noncircular+0x12e/0x150 kernel/locking/lockdep.c:2175
check_prev_add kernel/locking/lockdep.c:3165 [inline]
check_prevs_add kernel/locking/lockdep.c:3284 [inline]
validate_chain kernel/locking/lockdep.c:3908 [inline]
__lock_acquire+0x1520/0x2cf0 kernel/locking/lockdep.c:5237
lock_acquire+0x106/0x350 kernel/locking/lockdep.c:5868
down_write+0x96/0x200 kernel/locking/rwsem.c:1631
kernfs_remove_by_name_ns+0x4e/0x140 fs/kernfs/dir.c:1792
kernfs_remove_by_name include/linux/kernfs.h:644 [inline]
remove_files fs/sysfs/group.c:28 [inline]
sysfs_remove_group+0x101/0x2e0 fs/sysfs/group.c:328
sysfs_remove_groups+0x54/0xb0 fs/sysfs/group.c:352
net_rx_queue_update_kobjects+0x6b7/0x780 net/core/net-sysfs.c:1316
remove_queue_kobjects net/core/net-sysfs.c:2148 [inline]
netdev_unregister_kobject+0xff/0x450 net/core/net-sysfs.c:2304
unregister_netdevice_many_notify+0x1be4/0x2150 net/core/dev.c:12479
unregister_netdevice_many net/core/dev.c:12507 [inline]
unregister_netdevice_queue+0x2f5/0x340 net/core/dev.c:12319
unregister_netdevice include/linux/netdevice.h:3472 [inline]
nsim_destroy+0x275/0x800 drivers/net/netdevsim/netdev.c:1196
__nsim_dev_port_del+0x14e/0x200 drivers/net/netdevsim/dev.c:1547
nsim_dev_port_del_all drivers/net/netdevsim/dev.c:1561 [inline]
nsim_dev_reload_destroy+0x288/0x490 drivers/net/netdevsim/dev.c:1785
nsim_dev_reload_down+0x8a/0xc0 drivers/net/netdevsim/dev.c:1038
devlink_reload+0x1c5/0x890 net/devlink/dev.c:462
devlink_pernet_pre_exit+0x1ff/0x420 net/devlink/core.c:560
ops_pre_exit_list net/core/net_namespace.c:161 [inline]
ops_undo_list+0x17d/0x8d0 net/core/net_namespace.c:234
cleanup_net+0x572/0x810 net/core/net_namespace.c:702
process_one_work kernel/workqueue.c:3322 [inline]
process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405
worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
</TASK>
netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
bridge_slave_1: left allmulticast mode
bridge_slave_1: left promiscuous mode
bridge0: port 2(bridge_slave_1) entered disabled state
bridge_slave_0: left allmulticast mode
bridge_slave_0: left promiscuous mode
bridge0: port 1(bridge_slave_0) entered disabled state
bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
bond0 (unregistering): Released all slaves
hsr_slave_0: left promiscuous mode
hsr_slave_1: left promiscuous mode
batman_adv: batadv0: Interface deactivated: batadv_slave_0
batman_adv: batadv0: Removing interface: batadv_slave_0
batman_adv: batadv0: Interface deactivated: batadv_slave_1
batman_adv: batadv0: Removing interface: batadv_slave_1
veth1_macvtap: left promiscuous mode
veth0_macvtap: left promiscuous mode
veth1_vlan: left promiscuous mode
veth0_vlan: left promiscuous mode
team0 (unregistering): Port device team_slave_1 removed
team0 (unregistering): Port device team_slave_0 removed
bridge0: port 1(bridge_slave_0) entered blocking state
bridge0: port 1(bridge_slave_0) entered forwarding state
| Time | Kernel | Commit | Syzkaller | Config | Log | Report | Syz repro | C repro | VM info | Assets (help?) | Manager | Title |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2026/07/22 21:00 | upstream | 248951ddc14d | 881ce5c2 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-gce-root | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/22 19:53 | upstream | 248951ddc14d | 881ce5c2 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-badwrites-root | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/22 22:09 | upstream | 4539944e5151 | 4a865b71 | .config | console log | report | info | [disk image (non-bootable)] [vmlinux] [kernel image] | ci-qemu-upstream-386 | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/23 09:20 | net | f43ee0c0730d | 881ce5c2 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/22 18:27 | net | fec15bb3dab0 | b561ce9c | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/22 12:29 | net | ba712ecfd942 | b561ce9c | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/22 11:28 | net | ba712ecfd942 | b561ce9c | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/22 10:20 | net | ba712ecfd942 | b561ce9c | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/22 09:03 | net | ba712ecfd942 | b561ce9c | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/22 07:52 | net | ba712ecfd942 | b561ce9c | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/22 06:45 | net | ba712ecfd942 | b561ce9c | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/22 04:38 | net | ba712ecfd942 | b561ce9c | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/22 03:20 | net | ba712ecfd942 | 7c5de9c3 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/22 00:18 | net | 96e37e2f618e | 7c5de9c3 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/21 22:37 | net | 96e37e2f618e | 7c5de9c3 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/21 21:36 | net | 96e37e2f618e | 7c5de9c3 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/21 20:27 | net | 96e37e2f618e | 7c5de9c3 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/21 16:26 | net | 96e37e2f618e | 7c5de9c3 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/21 14:24 | net | 96e37e2f618e | 7c5de9c3 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/21 07:11 | net | 1c975de3343c | de6a700d | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/21 05:26 | net | 1c975de3343c | de6a700d | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/21 00:14 | net | e13caf1c2658 | de6a700d | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/20 23:38 | net | e13caf1c2658 | de6a700d | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/20 21:45 | net | e13caf1c2658 | de6a700d | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/20 17:53 | net | e13caf1c2658 | de6a700d | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/20 13:00 | net | e13caf1c2658 | de6a700d | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/20 03:07 | net | 56d96fededd6 | 72524a66 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/19 03:56 | net | 56d96fededd6 | 72524a66 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/15 21:21 | net | 3f1f75536668 | 209f0369 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/23 10:53 | net-next | 1df10cef2d1e | 71a13572 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/23 07:57 | net-next | 24d0af194bcc | 881ce5c2 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/23 05:50 | net-next | 24d0af194bcc | 881ce5c2 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/23 03:40 | net-next | 24d0af194bcc | 881ce5c2 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/23 02:16 | net-next | 24d0af194bcc | 881ce5c2 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/23 00:55 | net-next | 24d0af194bcc | 881ce5c2 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/22 16:29 | net-next | df13c1df8147 | b561ce9c | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/22 15:15 | net-next | df13c1df8147 | b561ce9c | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/22 13:31 | net-next | df13c1df8147 | b561ce9c | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/22 05:40 | net-next | df13c1df8147 | b561ce9c | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/22 01:52 | net-next | abc435224e87 | 7c5de9c3 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/21 19:10 | net-next | abc435224e87 | 7c5de9c3 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/21 08:41 | net-next | e354f7d60f14 | de6a700d | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/21 04:26 | net-next | e354f7d60f14 | de6a700d | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/21 02:59 | net-next | e354f7d60f14 | de6a700d | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/21 01:17 | net-next | 298bb2b89033 | de6a700d | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/20 20:24 | net-next | 298bb2b89033 | de6a700d | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/20 19:23 | net-next | 298bb2b89033 | de6a700d | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/20 16:25 | net-next | 298bb2b89033 | de6a700d | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/20 15:25 | net-next | 298bb2b89033 | de6a700d | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/20 14:07 | net-next | 298bb2b89033 | de6a700d | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/20 11:37 | net-next | 298bb2b89033 | de6a700d | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/20 09:00 | net-next | 298bb2b89033 | 72524a66 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/20 06:56 | net-next | ce6b4d3216b6 | 72524a66 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/20 02:55 | net-next | ce6b4d3216b6 | 72524a66 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/20 01:14 | net-next | ce6b4d3216b6 | 72524a66 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns | ||
| 2026/07/15 09:50 | net-next | f6f3b36c15ed | 209f0369 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | possible deadlock in kernfs_remove_by_name_ns |