------------[ cut here ]------------ kernel BUG at fs/notify/dnotify/dnotify.c:136! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted 6.6.100-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Workqueue: events_unbound fsnotify_mark_destroy_workfn RIP: 0010:dnotify_free_mark+0x57/0x60 fs/notify/dnotify/dnotify.c:136 Code: 4c 89 f7 e8 eb 9d de ff 49 83 3e 00 75 17 e8 e0 57 87 ff 48 8b 3d 69 71 4c 0c 48 89 de 5b 41 5e e9 2e cd dd ff e8 c9 57 87 ff <0f> 0b cc cc cc cc cc cc cc f3 0f 1e fa 55 41 57 41 56 41 55 41 54 RSP: 0018:ffffc90000117ae8 EFLAGS: 00010293 RAX: ffffffff81fe3db7 RBX: ffff88807348f000 RCX: ffff88801be45a00 RDX: 0000000000000000 RSI: ffffffff8aaaba40 RDI: ffff88807348f000 RBP: ffffc90000117bb0 R08: ffffffff90da35df R09: 1ffffffff21b46bb R10: dffffc0000000000 R11: fffffbfff21b46bc R12: 1ffff1100e691e02 R13: dffffc0000000000 R14: ffff88807348f080 R15: ffffffff8ab88188 FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000556ab4448950 CR3: 00000000259c1000 CR4: 00000000003506e0 Call Trace: fsnotify_final_mark_destroy fs/notify/mark.c:304 [inline] fsnotify_mark_destroy_workfn+0x253/0x2e0 fs/notify/mark.c:928 process_one_work kernel/workqueue.c:2634 [inline] process_scheduled_works+0xa45/0x15b0 kernel/workqueue.c:2711 worker_thread+0xa55/0xfc0 kernel/workqueue.c:2792 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:dnotify_free_mark+0x57/0x60 fs/notify/dnotify/dnotify.c:136 Code: 4c 89 f7 e8 eb 9d de ff 49 83 3e 00 75 17 e8 e0 57 87 ff 48 8b 3d 69 71 4c 0c 48 89 de 5b 41 5e e9 2e cd dd ff e8 c9 57 87 ff <0f> 0b cc cc cc cc cc cc cc f3 0f 1e fa 55 41 57 41 56 41 55 41 54 RSP: 0018:ffffc90000117ae8 EFLAGS: 00010293 RAX: ffffffff81fe3db7 RBX: ffff88807348f000 RCX: ffff88801be45a00 RDX: 0000000000000000 RSI: ffffffff8aaaba40 RDI: ffff88807348f000 RBP: ffffc90000117bb0 R08: ffffffff90da35df R09: 1ffffffff21b46bb R10: dffffc0000000000 R11: fffffbfff21b46bc R12: 1ffff1100e691e02 R13: dffffc0000000000 R14: ffff88807348f080 R15: ffffffff8ab88188 FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb07998b000 CR3: 00000000797c7000 CR4: 00000000003506f0