------------[ cut here ]------------ timer_delete_sync(&sdp->delay_work) && rcu_segcblist_n_cbs(&sdp->srcu_cblist) WARNING: kernel/rcu/srcutree.c:706 at cleanup_srcu_struct+0x6e4/0xb30 kernel/rcu/srcutree.c:706, CPU#0: syz.3.567/8166 Modules linked in: CPU: 0 UID: 0 PID: 8166 Comm: syz.3.567 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 RIP: 0010:cleanup_srcu_struct+0x6e4/0xb30 kernel/rcu/srcutree.c:706 Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f4 03 00 00 48 8b 83 e8 00 00 00 48 8d 93 80 01 00 00 48 85 c0 0f 84 a7 fc ff ff 90 <0f> 0b 90 48 8d 8b 00 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 RSP: 0018:ffffc900061bfd80 EFLAGS: 00010206 RAX: 0000000000000003 RBX: ffffe8ffffc75480 RCX: ffffc900152ee000 RDX: ffffe8ffffc75600 RSI: ffffffff81f6debf RDI: ffff888021724b00 RBP: ffff88806a52d000 R08: 0000000000000005 R09: 00000000ffffffff R10: 0000000000000001 R11: 0000000000000000 R12: ffff88805690c2f0 R13: 0000000000000000 R14: ffffffff8e6590b0 R15: ffff88805690c330 FS: 00007f8c6bf8f6c0(0000) GS:ffff888123b56000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555589586a48 CR3: 0000000053ae4000 CR4: 00000000003526f0 Call Trace: blk_mq_free_tag_set+0x354/0x550 block/blk-mq.c:4976 loop_remove drivers/block/loop.c:2145 [inline] loop_control_remove drivers/block/loop.c:2203 [inline] loop_control_ioctl+0x504/0x620 drivers/block/loop.c:2245 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8c6e59e159 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f8c6bf8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f8c6e826360 RCX: 00007f8c6e59e159 RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 RBP: 00007f8c6e63506b R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f8c6e8263f8 R14: 00007f8c6e826360 R15: 00007fffa1537a28