syzbot
WARNING in __cancel_work (2)
Status: closed as invalid on 2026/04/24 02:01
Subsystems:
net
[Documentation on labels]
First crash: 153d, last: 119d
Sample crash report:
------------[ cut here ]------------
!work_pending(work)
WARNING: kernel/workqueue.c:791 at set_work_data kernel/workqueue.c:791 [inline], CPU#1: syz-executor325/6152
WARNING: kernel/workqueue.c:791 at set_work_pool_and_clear_pending kernel/workqueue.c:819 [inline], CPU#1: syz-executor325/6152
WARNING: kernel/workqueue.c:791 at __cancel_work+0x1c1/0x230 kernel/workqueue.c:4438, CPU#1: syz-executor325/6152
Modules linked in:
CPU: 1 UID: 0 PID: 6152 Comm: syz-executor325 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
RIP: 0010:set_work_data kernel/workqueue.c:791 [inline]
RIP: 0010:set_work_pool_and_clear_pending kernel/workqueue.c:819 [inline]
RIP: 0010:__cancel_work+0x1c1/0x230 kernel/workqueue.c:4438
Code: 02 00 00 75 2d e8 3f d9 37 00 48 85 db 75 32 e8 35 d9 37 00 eb 31 e8 2e d9 37 00 90 0f 0b 90 e9 c1 fe ff ff e8 20 d9 37 00 90 <0f> 0b 90 e9 44 ff ff ff e8 12 d9 37 00 e8 4d 80 25 0a 48 85 db 74
RSP: 0018:ffffc900041d7bf0 EFLAGS: 00010093
RAX: ffffffff818d84d0 RBX: 001fffffffc00000 RCX: ffff888025888000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffff888060550ef7 R09: 1ffff1100c0aa1de
R10: dffffc0000000000 R11: ffffed100c0aa1df R12: dffffc0000000000
R13: 1ffff1100c0aa1de R14: ffff888060550ef0 R15: 0000000000000040
FS: 000055556973c4c0(0000) GS:ffff888125345000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4246496fe8 CR3: 0000000078480000 CR4: 00000000003526f0
Call Trace:
<TASK>
__cancel_work_sync+0x1f/0x110 kernel/workqueue.c:4448
lec_arp_destroy net/atm/lec.c:1501 [inline]
lec_atm_close+0x171/0x9e0 net/atm/lec.c:497
vcc_destroy_socket net/atm/common.c:181 [inline]
vcc_release+0x10f/0x580 net/atm/common.c:205
svc_release+0x6c/0xd0 net/atm/svc.c:95
__sock_release net/socket.c:722 [inline]
sock_close+0xc3/0x240 net/socket.c:1514
__fput+0x44f/0xa60 fs/file_table.c:510
fput_close_sync+0x11f/0x240 fs/file_table.c:615
__do_sys_close fs/open.c:1507 [inline]
__se_sys_close fs/open.c:1492 [inline]
__x64_sys_close+0x7e/0x110 fs/open.c:1492
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f522259443e
Code: 08 0f 85 45 ed ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08
RSP: 002b:00007ffebd31c7a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 000055556973c4c0 RCX: 00007f522259443e
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
RBP: 000000000001ecef R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5222618b6c
R13: 00007ffebd31c850 R14: 00007ffebd31c8c0 R15: 00007f52225504c0
</TASK>
* Struck through repros no longer work on HEAD.