team0 (unregistering): Port device team_slave_1 removed
team0 (unregistering): Port device team_slave_0 removed
bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
==================================================================
BUG: KCSAN: data-race in del_timer / enqueue_timer

write to 0xffff8880a3950920 of 8 bytes by task 21 on cpu 0:
 hlist_add_head include/linux/list.h:789 [inline]
 enqueue_timer+0x9c/0x210 kernel/time/timer.c:540
 __internal_add_timer+0x4f/0x60 kernel/time/timer.c:553
 internal_add_timer kernel/time/timer.c:595 [inline]
 __mod_timer kernel/time/timer.c:1053 [inline]
 mod_timer kernel/time/timer.c:1100 [inline]
 add_timer+0x250/0x550 kernel/time/timer.c:1136
 __queue_delayed_work+0x13b/0x1d0 kernel/workqueue.c:1644
 queue_delayed_work_on+0xf3/0x110 kernel/workqueue.c:1669
 queue_delayed_work include/linux/workqueue.h:509 [inline]
 bond_netdev_notify_work drivers/net/bonding/bond_main.c:1402 [inline]
 bond_netdev_notify_work+0x150/0x160 drivers/net/bonding/bond_main.c:1389
 process_one_work+0x3d4/0x890 kernel/workqueue.c:2264
 worker_thread+0xa0/0x800 kernel/workqueue.c:2410
 kthread+0x1d4/0x200 drivers/block/aoe/aoecmd.c:1253
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:352

read to 0xffff8880a3950920 of 8 bytes by task 241 on cpu 1:
 del_timer+0x3b/0xb0 kernel/time/timer.c:1198
 try_to_grab_pending+0x22d/0x3e0 kernel/workqueue.c:1246
 __cancel_work_timer+0x50/0x3a0 kernel/workqueue.c:3087
 cancel_delayed_work_sync+0x24/0x40 kernel/workqueue.c:3260
 bond_free_slave+0x34/0x90 drivers/net/bonding/bond_main.c:1367
 __bond_release_one.cold+0x6e2/0x894 drivers/net/bonding/bond_main.c:2066
 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3169 [inline]
 bond_netdev_event+0x4da/0x510 drivers/net/bonding/bond_main.c:3280
 notifier_call_chain+0xd7/0x160 kernel/notifier.c:83
 __raw_notifier_call_chain kernel/notifier.c:361 [inline]
 raw_notifier_call_chain+0x37/0x50 kernel/notifier.c:368
 call_netdevice_notifiers_info net/core/dev.c:1893 [inline]
 call_netdevice_notifiers_info+0x9a/0x120 net/core/dev.c:1878
 call_netdevice_notifiers_extack net/core/dev.c:1905 [inline]
 call_netdevice_notifiers net/core/dev.c:1919 [inline]
 rollback_registered_many+0x61f/0xa40 net/core/dev.c:8744
 unregister_netdevice_many net/core/dev.c:9907 [inline]
 unregister_netdevice_many+0x62/0x240 net/core/dev.c:9902
 default_device_exit_batch+0x234/0x270 net/core/dev.c:10380
 ops_exit_list.isra.0+0xa2/0xc0 net/core/net_namespace.c:175
 cleanup_net+0x405/0x6b0 net/core/net_namespace.c:597
 process_one_work+0x3d4/0x890 kernel/workqueue.c:2264
 worker_thread+0xa0/0x800 kernel/workqueue.c:2410
 kthread+0x1d4/0x200 drivers/block/aoe/aoecmd.c:1253
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:352

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 241 Comm: kworker/u4:3 Not tainted 5.5.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
==================================================================