syzbot


WARNING in delayed_work_timer_fn (3)

Status: upstream: reported on 2025/08/15 19:10
Reported-by: syzbot+8aa7ee597d79feab5ef8@syzkaller.appspotmail.com
First crash: 260d, last: 35d
Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in delayed_work_timer_fn arm -1 syz 312 87d 1045d 0/29 auto-obsoleted due to no activity on 2026/04/16 12:39
linux-6.1 WARNING in delayed_work_timer_fn (2) -1 35 394d 874d 0/3 auto-obsoleted due to no activity on 2025/07/13 12:01
linux-6.1 WARNING in delayed_work_timer_fn -1 2 1012d 1115d 0/3 auto-obsoleted due to no activity on 2023/11/02 17:34

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 6179 at kernel/workqueue.c:1441 __queue_work+0xf9c/0x1234 kernel/workqueue.c:1441
Modules linked in:
CPU: 1 PID: 6179 Comm: syz.5.385 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
pstate: 424000c5 (nZcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : __queue_work+0xf9c/0x1234 kernel/workqueue.c:1441
lr : __queue_work+0xf9c/0x1234 kernel/workqueue.c:1441
sp : ffff800008017b30
x29: ffff800008017b70 x28: 1fffe0001b7c2379 x27: 0000000000000008
x26: ffff700001002f84 x25: dfff800000000000 x24: ffff0000dbe18800
x23: ffff0000dbe189c0 x22: ffff0000dbe11bc8 x21: 1fffe0001b7c2379
x20: 00000000000b0012 x19: ffff0000d6020330 x18: 00000000a262dc39
x17: ffff80001835a000 x16: ffff8000082d935c x15: ffff800017e3b000
x14: 0000000000000002 x13: 1ffff00002a44071 x12: 0000000000ff0100
x11: ff008000081f70bc x10: 0000000000000000 x9 : ffff8000081f70bc
x8 : ffff0000dbe11bc0 x7 : ffff8000083b7dd0 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff800013bc6860
x2 : ffff0000d6020330 x1 : 0000000000000100 x0 : 0000000000000000
Call trace:
 __queue_work+0xf9c/0x1234 kernel/workqueue.c:1441
 delayed_work_timer_fn+0x74/0x90 kernel/workqueue.c:1646
 call_timer_fn+0x1b8/0x95c kernel/time/timer.c:1701
 expire_timers kernel/time/timer.c:1747 [inline]
 __run_timers+0x4d0/0x6f0 kernel/time/timer.c:2023
 run_timer_softirq+0x7c/0x114 kernel/time/timer.c:2036
 handle_softirqs+0x318/0xc60 kernel/softirq.c:596
 __do_softirq+0x14/0x20 kernel/softirq.c:630
 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80
 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:897
 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:85
 invoke_softirq kernel/softirq.c:477 [inline]
 __irq_exit_rcu+0x23c/0x438 kernel/softirq.c:679
 irq_exit_rcu+0x14/0x84 kernel/softirq.c:691
 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline]
 el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486
 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491
 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581
 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline]
 _raw_spin_unlock+0x6c/0x84 kernel/locking/spinlock.c:186
 spin_unlock include/linux/spinlock.h:391 [inline]
 unix_wait_for_peer+0x170/0x258 net/unix/af_unix.c:1446
 unix_dgram_sendmsg+0xbd0/0x1268 net/unix/af_unix.c:2049
 sock_sendmsg_nosec net/socket.c:718 [inline]
 __sock_sendmsg net/socket.c:730 [inline]
 ____sys_sendmsg+0x5c8/0x938 net/socket.c:2518
 ___sys_sendmsg net/socket.c:2572 [inline]
 __sys_sendmmsg+0x344/0x834 net/socket.c:2658
 __do_sys_sendmmsg net/socket.c:2687 [inline]
 __se_sys_sendmmsg net/socket.c:2684 [inline]
 __arm64_sys_sendmmsg+0xa0/0xbc net/socket.c:2684
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 57589
hardirqs last  enabled at (57588): [<ffff800011b1ef94>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline]
hardirqs last  enabled at (57588): [<ffff800011b1ef94>] _raw_spin_unlock_irqrestore+0x48/0xac kernel/locking/spinlock.c:194
hardirqs last disabled at (57589): [<ffff800011b1edf8>] __raw_spin_lock_irq include/linux/spinlock_api_smp.h:117 [inline]
hardirqs last disabled at (57589): [<ffff800011b1edf8>] _raw_spin_lock_irq+0x34/0x98 kernel/locking/spinlock.c:170
softirqs last  enabled at (53252): [<ffff8000081ac394>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (53252): [<ffff8000081ac394>] handle_softirqs+0xaec/0xc60 kernel/softirq.c:624
softirqs last disabled at (55891): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/03/28 16:38 linux-6.1.y 1989cd3d56e2 b5ceaad2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in delayed_work_timer_fn
2026/01/05 20:16 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in delayed_work_timer_fn
2025/11/09 17:29 linux-6.1.y f6e38ae624cf 4e1406b4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in delayed_work_timer_fn
2025/08/25 18:24 linux-6.1.y 0bc96de781b4 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in delayed_work_timer_fn
2025/08/21 05:35 linux-6.1.y 0bc96de781b4 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in delayed_work_timer_fn
2025/08/15 19:09 linux-6.1.y 0bc96de781b4 1804e95e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in delayed_work_timer_fn
* Struck through repros no longer work on HEAD.