------------[ cut here ]------------ READ_ONCE(rsp->gp_state) == GP_PASSED WARNING: kernel/rcu/sync.c:177 at rcu_sync_dtor+0xcd/0x180 kernel/rcu/sync.c:177, CPU#0: kworker/0:0/9 Modules linked in: CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 Workqueue: events destroy_super_work RIP: 0010:rcu_sync_dtor+0xcd/0x180 kernel/rcu/sync.c:177 Code: 18 e8 37 c8 00 00 43 0f b6 44 25 00 84 c0 0f 85 82 00 00 00 83 3b 00 75 1f 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 e9 66 ff ff ff 90 0f 0b 90 eb 8a 90 0f 0b 90 eb db 89 d9 RSP: 0018:ffffc900000e7a68 EFLAGS: 00010246 RAX: 0000000000000002 RBX: ffff888037cf0330 RCX: 0000000080000001 RDX: 0000000000000000 RSI: ffffffff8ba64ce0 RDI: ffff888037cf0330 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: fffffbfff1b8d1f6 R12: dffffc0000000000 R13: 1ffff11006f9e066 R14: ffff888037cf0330 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff88812633f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f7ed536a000 CR3: 0000000057b6c000 CR4: 00000000003526f0 Call Trace: percpu_free_rwsem+0x43/0x80 kernel/locking/percpu-rwsem.c:42 destroy_super_work+0x217/0x310 fs/super.c:284 process_one_work kernel/workqueue.c:3275 [inline] process_scheduled_works+0xb02/0x1830 kernel/workqueue.c:3358 worker_thread+0xa50/0xfc0 kernel/workqueue.c:3439 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245