syzbot
WARNING in call_timer_fn (2)
Status:
upstream: reported on 2026/03/06 23:46
Reported-by: syzbot+660cf2a04050f8320a51@syzkaller.appspotmail.com
First crash: 155d, last: 15d
Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 22 at kernel/workqueue.c:1745 is_chained_work kernel/workqueue.c:1691 [inline]
WARNING: CPU: 1 PID: 22 at kernel/workqueue.c:1745 __queue_work+0xd0c/0xfd0 kernel/workqueue.c:1745
Modules linked in:
CPU: 1 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
RIP: 0010:__queue_work+0xd0c/0xfd0 kernel/workqueue.c:1745
Code: 49 8d 54 24 68 4c 89 e7 4c 89 f6 89 e9 e8 9c e6 00 00 e9 0c ff ff ff e8 12 8f 2f 00 eb 0c e8 0b 8f 2f 00 eb 05 e8 04 8f 2f 00 <0f> 0b 48 83 c4 78 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ee 8e 2f 00
RSP: 0018:ffffc900001c7950 EFLAGS: 00010046
RAX: ffffffff8157d65e RBX: 0000000000000100 RCX: ffff88801ce4bc00
RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65
R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: 0000000000000008
R13: ffff888069e40978 R14: ffff888069e409c0 R15: ffff88802d51b000
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd7daf556b8 CR3: 0000000061dc2000 CR4: 00000000003506e0
Call Trace:
<TASK>
call_timer_fn+0x189/0x540 kernel/time/timer.c:1701
expire_timers kernel/time/timer.c:1747 [inline]
__run_timers+0x59c/0x810 kernel/time/timer.c:2023
run_timer_softirq+0x67/0xf0 kernel/time/timer.c:2036
handle_softirqs+0x27d/0x820 kernel/softirq.c:578
run_ksoftirqd+0xa8/0x100 kernel/softirq.c:950
smpboot_thread_fn+0x651/0x9f0 kernel/smpboot.c:164
kthread+0x2fa/0x390 kernel/kthread.c:388
ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
</TASK>
* Struck through repros no longer work on HEAD.