------------[ cut here ]------------ READ_ONCE(rsp->gp_state) == GP_PASSED WARNING: kernel/rcu/sync.c:177 at rcu_sync_dtor+0xcd/0x180 kernel/rcu/sync.c:177, CPU#1: kworker/1:2/4972 Modules linked in: CPU: 1 UID: 0 PID: 4972 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Workqueue: events destroy_super_work RIP: 0010:rcu_sync_dtor+0xcd/0x180 kernel/rcu/sync.c:177 Code: 18 e8 47 d4 00 00 43 0f b6 44 25 00 84 c0 0f 85 82 00 00 00 83 3b 00 75 1f 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 e9 66 ff ff ff 90 0f 0b 90 eb 8a 90 0f 0b 90 eb db 89 d9 RSP: 0018:ffffc900041efa48 EFLAGS: 00010246 RAX: 0000000000000002 RBX: ffff8880247a03c0 RCX: 8000000000000001 RDX: 0000000000000000 RSI: ffffffff8bcc2260 RDI: ffff8880247a03c0 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: fffffbfff1c0bab6 R12: dffffc0000000000 R13: 1ffff110048f4078 R14: ffff8880247a03c0 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff888125cd4000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa492b856c8 CR3: 000000005d0c2000 CR4: 00000000003526f0 Call Trace: percpu_free_rwsem+0x43/0x80 kernel/locking/percpu-rwsem.c:42 destroy_super_work+0x23d/0x330 fs/super.c:304 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245