------------[ cut here ]------------ READ_ONCE(rsp->gp_state) == GP_PASSED WARNING: kernel/rcu/sync.c:177 at rcu_sync_dtor+0xcd/0x180 kernel/rcu/sync.c:177, CPU#0: kworker/0:5/5757 Modules linked in: CPU: 0 UID: 0 PID: 5757 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 Workqueue: events destroy_super_work RIP: 0010:rcu_sync_dtor+0xcd/0x180 kernel/rcu/sync.c:177 Code: 18 e8 b7 ec 00 00 43 0f b6 44 25 00 84 c0 0f 85 82 00 00 00 83 3b 00 75 1f 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 e9 66 ff ff ff 90 0f 0b 90 eb 8a 90 0f 0b 90 eb db 89 d9 RSP: 0018:ffffc90005eafa48 EFLAGS: 00010246 RAX: 0000000000000002 RBX: ffff88803b0303d8 RCX: 8000000000000001 RDX: 0000000000000000 RSI: ffffffff8bed2860 RDI: ffff88803b0303d8 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: fffffbfff1e4b37f R12: dffffc0000000000 R13: 1ffff1100760607b R14: ffff88803b0303d8 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff88812470e000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f60259656c8 CR3: 000000005d868000 CR4: 00000000003526f0 Call Trace: percpu_free_rwsem+0x43/0x80 kernel/locking/percpu-rwsem.c:42 destroy_super_work+0x217/0x310 fs/super.c:286 process_one_work kernel/workqueue.c:3495 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3578 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3659 kthread+0x38b/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245