------------[ cut here ]------------ kernel BUG at fs/notify/dnotify/dnotify.c:136! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 48 Comm: kworker/u4:3 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Workqueue: events_unbound fsnotify_mark_destroy_workfn RIP: 0010:dnotify_free_mark+0x57/0x60 fs/notify/dnotify/dnotify.c:136 Code: 4c 89 f7 e8 ab 44 de ff 49 83 3e 00 75 17 e8 70 27 86 ff 48 8b 3d 61 b3 89 0c 48 89 de 5b 41 5e e9 ce 74 dd ff e8 59 27 86 ff <0f> 0b cc cc cc cc cc cc cc f3 0f 1e fa 55 41 57 41 56 41 55 41 54 RSP: 0018:ffffc90000b97ae8 EFLAGS: 00010293 RAX: ffffffff8200dbc7 RBX: ffff888023e14000 RCX: ffff88801ca79e00 RDX: 0000000000000000 RSI: ffffffff8acabd00 RDI: ffff888023e14000 RBP: ffffc90000b97bb0 R08: ffffffff911a35bf R09: 1ffffffff22346b7 R10: dffffc0000000000 R11: fffffbfff22346b8 R12: 1ffff110047c2802 R13: dffffc0000000000 R14: ffff888023e14080 R15: ffffffff8ad87548 FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff0a4c6fd58 CR3: 000000006456b000 CR4: 00000000003506f0 Call Trace: fsnotify_final_mark_destroy fs/notify/mark.c:304 [inline] fsnotify_mark_destroy_workfn+0x25b/0x2f0 fs/notify/mark.c:928 process_one_work kernel/workqueue.c:2634 [inline] process_scheduled_works+0xa5d/0x15d0 kernel/workqueue.c:2711 worker_thread+0xa55/0xfc0 kernel/workqueue.c:2792 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:dnotify_free_mark+0x57/0x60 fs/notify/dnotify/dnotify.c:136 Code: 4c 89 f7 e8 ab 44 de ff 49 83 3e 00 75 17 e8 70 27 86 ff 48 8b 3d 61 b3 89 0c 48 89 de 5b 41 5e e9 ce 74 dd ff e8 59 27 86 ff <0f> 0b cc cc cc cc cc cc cc f3 0f 1e fa 55 41 57 41 56 41 55 41 54 RSP: 0018:ffffc90000b97ae8 EFLAGS: 00010293 RAX: ffffffff8200dbc7 RBX: ffff888023e14000 RCX: ffff88801ca79e00 RDX: 0000000000000000 RSI: ffffffff8acabd00 RDI: ffff888023e14000 RBP: ffffc90000b97bb0 R08: ffffffff911a35bf R09: 1ffffffff22346b7 R10: dffffc0000000000 R11: fffffbfff22346b8 R12: 1ffff110047c2802 R13: dffffc0000000000 R14: ffff888023e14080 R15: ffffffff8ad87548 FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4c643e8400 CR3: 000000002ff91000 CR4: 00000000003506e0