syzbot


WARNING in __cancel_work (2)

Status: closed as invalid on 2026/04/24 02:01
Subsystems: net
[Documentation on labels]
First crash: 40d, last: 6d15h
Cause bisection: failed (error log, bisect log)
  
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in __cancel_work bluetooth -1 C inconclusive done 3 1310d 1350d 0/29 closed as dup on 2022/11/05 05:43

Sample crash report:
------------[ cut here ]------------
!work_pending(work)
WARNING: kernel/workqueue.c:791 at set_work_data kernel/workqueue.c:791 [inline], CPU#1: syz-executor325/6152
WARNING: kernel/workqueue.c:791 at set_work_pool_and_clear_pending kernel/workqueue.c:819 [inline], CPU#1: syz-executor325/6152
WARNING: kernel/workqueue.c:791 at __cancel_work+0x1c1/0x230 kernel/workqueue.c:4438, CPU#1: syz-executor325/6152
Modules linked in:
CPU: 1 UID: 0 PID: 6152 Comm: syz-executor325 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
RIP: 0010:set_work_data kernel/workqueue.c:791 [inline]
RIP: 0010:set_work_pool_and_clear_pending kernel/workqueue.c:819 [inline]
RIP: 0010:__cancel_work+0x1c1/0x230 kernel/workqueue.c:4438
Code: 02 00 00 75 2d e8 3f d9 37 00 48 85 db 75 32 e8 35 d9 37 00 eb 31 e8 2e d9 37 00 90 0f 0b 90 e9 c1 fe ff ff e8 20 d9 37 00 90 <0f> 0b 90 e9 44 ff ff ff e8 12 d9 37 00 e8 4d 80 25 0a 48 85 db 74
RSP: 0018:ffffc900041d7bf0 EFLAGS: 00010093
RAX: ffffffff818d84d0 RBX: 001fffffffc00000 RCX: ffff888025888000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffff888060550ef7 R09: 1ffff1100c0aa1de
R10: dffffc0000000000 R11: ffffed100c0aa1df R12: dffffc0000000000
R13: 1ffff1100c0aa1de R14: ffff888060550ef0 R15: 0000000000000040
FS:  000055556973c4c0(0000) GS:ffff888125345000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4246496fe8 CR3: 0000000078480000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 __cancel_work_sync+0x1f/0x110 kernel/workqueue.c:4448
 lec_arp_destroy net/atm/lec.c:1501 [inline]
 lec_atm_close+0x171/0x9e0 net/atm/lec.c:497
 vcc_destroy_socket net/atm/common.c:181 [inline]
 vcc_release+0x10f/0x580 net/atm/common.c:205
 svc_release+0x6c/0xd0 net/atm/svc.c:95
 __sock_release net/socket.c:722 [inline]
 sock_close+0xc3/0x240 net/socket.c:1514
 __fput+0x44f/0xa60 fs/file_table.c:510
 fput_close_sync+0x11f/0x240 fs/file_table.c:615
 __do_sys_close fs/open.c:1507 [inline]
 __se_sys_close fs/open.c:1492 [inline]
 __x64_sys_close+0x7e/0x110 fs/open.c:1492
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f522259443e
Code: 08 0f 85 45 ed ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08
RSP: 002b:00007ffebd31c7a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 000055556973c4c0 RCX: 00007f522259443e
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
RBP: 000000000001ecef R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5222618b6c
R13: 00007ffebd31c850 R14: 00007ffebd31c8c0 R15: 00007f52225504c0
 </TASK>

Crashes (11):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/04/20 16:35 net 0cf004ffb61c e65da4ee .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __cancel_work
2026/04/20 22:09 net-next 1f5ffc672165 e65da4ee .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in __cancel_work
2026/04/20 21:09 net-next 1f5ffc672165 e65da4ee .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in __cancel_work
2026/03/25 08:21 net-next b1c803d5c816 35e4ff71 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in __cancel_work
2026/04/23 06:02 net 645d044d7e5c b10da5ec .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __cancel_work
2026/03/20 18:01 net 7c770dadfda5 2f245add .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __cancel_work
2026/03/26 15:51 linux-next 66ba480978ce fca8d360 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in __cancel_work
2026/03/23 13:34 net bc0151c59e63 5e3db351 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __cancel_work
2026/03/20 11:18 net 7c770dadfda5 2f245add .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __cancel_work
2026/04/11 16:39 net-next 3f3a2aefbc66 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in __cancel_work
2026/04/07 13:35 net-next dfecb0c5af3b 628666c6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in __cancel_work
* Struck through repros no longer work on HEAD.