------------[ cut here ]------------
WARNING: [timer_delete_sync(&sdp->delay_work) && rcu_segcblist_n_cbs(&sdp->srcu_cblist)] kernel/rcu/srcutree.c:706 at cleanup_srcu_struct+0x54c/0x836 kernel/rcu/srcutree.c:706, CPU#0: syz.1.1557/7381
Modules linked in:
CPU: 0 UID: 0 PID: 7381 Comm: syz.1.1557 Not tainted syzkaller #0 PREEMPT 
Hardware name: riscv-virtio,qemu (DT)
epc : cleanup_srcu_struct+0x54c/0x836 kernel/rcu/srcutree.c:706
 ra : cleanup_srcu_struct+0x286/0x836 kernel/rcu/srcutree.c:706
epc : ffffffff80383db4 ra : ffffffff80383aee sp : ffff8f8001767a60
 gp : ffffffff8a6d9c00 tp : ffffaf8012780000 t0 : ffff8f8001767958
 t1 : ffffffff8007e9b2 t2 : ffffffff9191b3a0 s0 : ffff8f8001767ae0
 s1 : ffffaf801332e000 a0 : 0000000000000001 a1 : 00000000ffffffff
 a2 : ffffaf7ffff7e580 a3 : ffffffff804120a4 a4 : 1ffff5effffefc9d
 a5 : 0000000000000003 a6 : 0000000000000003 a7 : 0000000041b58ab3
 s2 : 0000000000000000 s3 : ffffaf801b8682f0 s4 : 1ffff5f00370d066
 s5 : ffffaf801b868330 s6 : fffffffef10932c9 s7 : ffffffffffffffff
 s8 : ffffaf7ffff7e400 s9 : ffffffff88499648 s10: ffffaf7ffff7e4e8
 s11: ffffffff9191b3a0 t3 : ffffffff8828dcd0 t4 : fffff5ef0b977660
 t5 : fffff5ef0b977661 t6 : 0000000000000002 ssp : 0000000000000000
status: 0000000200000120 badaddr: ffffffff80383db4 cause: 0000000000000003
[<ffffffff80383db4>] cleanup_srcu_struct+0x54c/0x836 kernel/rcu/srcutree.c:706
[<ffffffff81786806>] blk_mq_free_tag_set+0x2ae/0x464 block/blk-mq.c:4976
[<ffffffff82dd29d2>] loop_add+0x884/0xa90 drivers/block/loop.c:2130
[<ffffffff82dd847a>] loop_control_ioctl+0xc6/0x60c drivers/block/loop.c:2243
[<ffffffff80d8a9fc>] vfs_ioctl fs/ioctl.c:51 [inline]
[<ffffffff80d8a9fc>] __do_sys_ioctl fs/ioctl.c:597 [inline]
[<ffffffff80d8a9fc>] __se_sys_ioctl fs/ioctl.c:583 [inline]
[<ffffffff80d8a9fc>] __riscv_sys_ioctl+0x17c/0x1e2 fs/ioctl.c:583
[<ffffffff8007bd88>] syscall_handler+0x92/0x114 arch/riscv/include/asm/syscall.h:112
[<ffffffff8660e902>] do_trap_ecall_u+0x4ca/0x658 arch/riscv/kernel/traps.c:341
[<ffffffff8663b218>] handle_exception+0x168/0x174 arch/riscv/kernel/entry.S:237