[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.233' (ECDSA) to the list of known hosts. syzkaller login: [ 67.633745][ T8475] IPVS: ftp: loaded support on port[0] = 21 [ 67.738156][ T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.768462][ T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.777238][ T648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program [ 67.792069][ T648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.794454][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.815675][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.949706][ T648] ------------[ cut here ]------------ [ 67.955387][ T648] kernel BUG at fs/notify/dnotify/dnotify.c:118! [ 67.962682][ T648] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 67.969039][ T648] CPU: 1 PID: 648 Comm: kworker/u4:4 Not tainted 5.10.0-rc4-syzkaller #0 [ 67.977802][ T648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.996636][ T648] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 68.003672][ T648] RIP: 0010:dnotify_free_mark+0x4b/0x60 [ 68.009252][ T648] Code: 80 3c 02 00 75 26 48 83 bd 80 00 00 00 00 75 15 e8 0a d3 a0 ff 48 89 ee 48 8b 3d 68 8c 1d 0b 5d e9 aa 06 e2 ff e8 f5 d2 a0 ff <0f> 0b e8 ae 4d e2 ff eb d3 66 90 66 2e 0f 1f 84 00 00 00 00 00 41 [ 68.028860][ T648] RSP: 0018:ffffc90002f1fc38 EFLAGS: 00010293 [ 68.035876][ T648] RAX: 0000000000000000 RBX: ffffffff8958ae60 RCX: 1ffff920005e3f95 [ 68.043835][ T648] RDX: ffff888012601a40 RSI: ffffffff81cf5ceb RDI: ffff88801aea2080 [ 68.056223][ T648] RBP: ffff88801aea2000 R08: 0000000000000001 R09: ffffffff8ebb170f [ 68.064193][ T648] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880171a2000 [ 68.072164][ T648] R13: ffffc90002f1fc98 R14: ffff88801aea2010 R15: ffff88801aea2018 [ 68.080136][ T648] FS: 0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 68.089074][ T648] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.095660][ T648] CR2: 000056045fa95978 CR3: 0000000012121000 CR4: 00000000001506e0 [ 68.103622][ T648] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.111681][ T648] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.119752][ T648] Call Trace: [ 68.123484][ T648] fsnotify_final_mark_destroy+0x71/0xb0 [ 68.129108][ T648] fsnotify_mark_destroy_workfn+0x1eb/0x340 [ 68.135008][ T648] ? fsnotify_put_mark_wake.part.0+0xe0/0xe0 [ 68.140979][ T648] process_one_work+0x933/0x15a0 [ 68.145908][ T648] ? lock_release+0x710/0x710 [ 68.150585][ T648] ? pwq_dec_nr_in_flight+0x320/0x320 [ 68.156205][ T648] ? rwlock_bug.part.0+0x90/0x90 [ 68.161144][ T648] ? _raw_spin_lock_irq+0x41/0x50 [ 68.166160][ T648] worker_thread+0x64c/0x1120 [ 68.170828][ T648] ? __kthread_parkme+0x13f/0x1e0 [ 68.175859][ T648] ? process_one_work+0x15a0/0x15a0 [ 68.181047][ T648] kthread+0x3af/0x4a0 [ 68.185110][ T648] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 68.190992][ T648] ret_from_fork+0x1f/0x30 [ 68.195397][ T648] Modules linked in: [ 68.200