------------[ cut here ]------------ WARNING: ./include/linux/ns_common.h:255 at __ns_ref_put include/linux/ns_common.h:255 [inline], CPU#1: kworker/1:0/24 WARNING: ./include/linux/ns_common.h:255 at put_user_ns include/linux/user_namespace.h:189 [inline], CPU#1: kworker/1:0/24 WARNING: ./include/linux/ns_common.h:255 at destroy_super_work+0x15c/0x1a0 fs/super.c:280, CPU#1: kworker/1:0/24 Modules linked in: CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 Workqueue: events destroy_super_work RIP: 0010:__ns_ref_put include/linux/ns_common.h:255 [inline] RIP: 0010:put_user_ns include/linux/user_namespace.h:189 [inline] RIP: 0010:destroy_super_work+0x15c/0x1a0 fs/super.c:280 Code: d7 62 ff 48 81 c3 a8 fc ff ff 48 89 df e8 2c d7 62 ff 4c 89 f7 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3a 6b e1 ff e8 f5 56 86 ff 90 <0f> 0b 90 e9 6d ff ff ff e8 e7 56 86 ff 4c 89 e7 be 03 00 00 00 e8 RSP: 0018:ffffc900001e7a48 EFLAGS: 00010293 RAX: ffffffff823b293b RBX: ffff8880799bc898 RCX: ffff88801d288000 RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 RBP: 0000000000000004 R08: ffff88807e0b0193 R09: 1ffff1100fc16032 R10: dffffc0000000000 R11: ffffed100fc16033 R12: ffff88807e0b0190 R13: dffffc0000000000 R14: ffff8880799bc000 R15: ffff88807e0b0000 FS: 0000000000000000(0000) GS:ffff888125fc2000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f2c4fded000 CR3: 0000000029404000 CR4: 00000000003526f0 Call Trace: process_one_work+0x94a/0x15d0 kernel/workqueue.c:3267 process_scheduled_works kernel/workqueue.c:3350 [inline] worker_thread+0x9b0/0xee0 kernel/workqueue.c:3431 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245