WARNING in call_timer_fn (2)

Status: upstream: reported on 2026/03/06 23:46
Reported-by: syzbot+660cf2a04050f8320a51@syzkaller.appspotmail.com
First crash: 155d, last: 15d
Similar bugs (6)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.6 WARNING in call_timer_fn -1 syz error 21 260d 417d 0/2 auto-obsoleted due to no activity on 2026/03/02 01:43
upstream WARNING in call_timer_fn bluetooth prio:high -1 syz, C unreliable 9615 1h39m 1361d 0/29 upstream: reported C repro on 2022/11/16 15:25
linux-5.15 WARNING in call_timer_fn (2) -1 5 344d 445d 0/3 auto-obsoleted due to no activity on 2025/12/07 22:59
linux-5.15 WARNING in call_timer_fn (3) -1 2 99d 120d 0/3 upstream: reported on 2026/04/10 14:54
linux-6.1 WARNING in call_timer_fn origin:lts-only -1 syz, C unreliable 201 171d 1249d 0/3 upstream: reported C repro on 2023/03/08 12:11
linux-5.15 WARNING in call_timer_fn origin:lts-only -1 syz unreliable 7 644d 900d 0/3 auto-obsoleted due to no activity on 2025/02/11 06:36

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 22 at kernel/workqueue.c:1745 is_chained_work kernel/workqueue.c:1691 [inline]
WARNING: CPU: 1 PID: 22 at kernel/workqueue.c:1745 __queue_work+0xd0c/0xfd0 kernel/workqueue.c:1745
Modules linked in:
CPU: 1 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
RIP: 0010:__queue_work+0xd0c/0xfd0 kernel/workqueue.c:1745
Code: 49 8d 54 24 68 4c 89 e7 4c 89 f6 89 e9 e8 9c e6 00 00 e9 0c ff ff ff e8 12 8f 2f 00 eb 0c e8 0b 8f 2f 00 eb 05 e8 04 8f 2f 00 <0f> 0b 48 83 c4 78 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ee 8e 2f 00
RSP: 0018:ffffc900001c7950 EFLAGS: 00010046
RAX: ffffffff8157d65e RBX: 0000000000000100 RCX: ffff88801ce4bc00
RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65
R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: 0000000000000008
R13: ffff888069e40978 R14: ffff888069e409c0 R15: ffff88802d51b000
FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd7daf556b8 CR3: 0000000061dc2000 CR4: 00000000003506e0
Call Trace:
 <TASK>
 call_timer_fn+0x189/0x540 kernel/time/timer.c:1701
 expire_timers kernel/time/timer.c:1747 [inline]
 __run_timers+0x59c/0x810 kernel/time/timer.c:2023
 run_timer_softirq+0x67/0xf0 kernel/time/timer.c:2036
 handle_softirqs+0x27d/0x820 kernel/softirq.c:578
 run_ksoftirqd+0xa8/0x100 kernel/softirq.c:950
 smpboot_thread_fn+0x651/0x9f0 kernel/smpboot.c:164
 kthread+0x2fa/0x390 kernel/kthread.c:388
 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
 </TASK>

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/24 17:28 linux-6.6.y da47cbc25466 dd737a83 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan WARNING in call_timer_fn
2026/07/23 16:02 linux-6.6.y da47cbc25466 71a13572 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan WARNING in call_timer_fn
2026/07/14 20:20 linux-6.6.y da47cbc25466 2130f682 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan WARNING in call_timer_fn
2026/05/06 14:55 linux-6.6.y 258cf62a6dfd 1dddfd3d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan WARNING in call_timer_fn
2026/03/06 23:45 linux-6.6.y 4fc00fe35d46 41d8037d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan WARNING in call_timer_fn
* Struck through repros no longer work on HEAD.