------------[ cut here ]------------ WARNING: CPU: 0 PID: 28011 at lib/percpu-refcount.c:113 __percpu_ref_exit+0x30/0x54 lib/percpu-refcount.c:113 Modules linked in: CPU: 0 PID: 28011 Comm: kworker/u4:2 Not tainted 5.12.0-rc5-syzkaller #0 Hardware name: linux,dummy-virt (DT) Workqueue: events_unbound io_ring_exit_work pstate: 00400009 (nzcv daif +PAN -UAO -TCO BTYPE=--) pc : __percpu_ref_exit+0x30/0x54 lib/percpu-refcount.c:113 lr : percpu_ref_exit+0x20/0x6c lib/percpu-refcount.c:134 sp : ffff800015eebc90 x29: ffff800015eebc90 x28: f6ff0000132355d0 x27: ffff800011d01c80 x26: f6ff000013235410 x25: f6ff0000132350c0 x24: f6ff0000132355b0 x23: f6ff000013235000 x22: ffff8000126b7980 x21: fdff000015c78c00 x20: f0ff000015c2d000 x19: f6ff000013235000 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 000002e5c1f3917c x14: 0000000000000000 x13: 0000000000000030 x12: 0101010101010101 x11: 7f7f7f7f7f7f7f7f x10: f1ff0000123ab000 x9 : 000000000091eea3 x8 : 0000000080000000 x7 : ffff00007fbf9690 x6 : ffff800012932400 x5 : ffff800012932400 x4 : fffffc00001f0008 x3 : dead000000000122 x2 : ffff00007fbf9750 x1 : ffff80001054eb60 x0 : 00007bff82ab2eb8 Call trace: __percpu_ref_exit+0x30/0x54 lib/percpu-refcount.c:113 percpu_ref_exit+0x20/0x6c lib/percpu-refcount.c:134 io_ring_ctx_free fs/io_uring.c:8452 [inline] io_ring_exit_work+0x370/0x540 fs/io_uring.c:8589 process_one_work+0x1d8/0x364 kernel/workqueue.c:2275 worker_thread+0x70/0x434 kernel/workqueue.c:2421 kthread+0x174/0x180 kernel/kthread.c:292 ret_from_fork+0x10/0x34 arch/arm64/kernel/entry.S:958 ---[ end trace 82bc12ddacee4463 ]---