syzbot

------------[ cut here ]------------
kernel BUG at fs/notify/dnotify/dnotify.c:136!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 60 Comm: kworker/u4:4 Not tainted 6.6.100-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: events_unbound fsnotify_mark_destroy_workfn
RIP: 0010:dnotify_free_mark+0x57/0x60 fs/notify/dnotify/dnotify.c:136
Code: 4c 89 f7 e8 eb 9d de ff 49 83 3e 00 75 17 e8 e0 57 87 ff 48 8b 3d 69 71 4c 0c 48 89 de 5b 41 5e e9 2e cd dd ff e8 c9 57 87 ff <0f> 0b cc cc cc cc cc cc cc f3 0f 1e fa 55 41 57 41 56 41 55 41 54
RSP: 0000:ffffc900015b7ae8 EFLAGS: 00010293
RAX: ffffffff81fe3db7 RBX: ffff88802d239000 RCX: ffff88801e2e1e00
RDX: 0000000000000000 RSI: ffffffff8aaaba40 RDI: ffff88802d239000
RBP: ffffc900015b7bb0 R08: ffffffff90da35df R09: 1ffffffff21b46bb
R10: dffffc0000000000 R11: fffffbfff21b46bc R12: 1ffff11005a47202
R13: dffffc0000000000 R14: ffff88802d239080 R15: ffffffff8ab88188
FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f74ccd96000 CR3: 0000000061b7f000 CR4: 00000000003506e0
Call Trace:
 <TASK>
 fsnotify_final_mark_destroy fs/notify/mark.c:304 [inline]
 fsnotify_mark_destroy_workfn+0x253/0x2e0 fs/notify/mark.c:928
 process_one_work kernel/workqueue.c:2634 [inline]
 process_scheduled_works+0xa45/0x15b0 kernel/workqueue.c:2711
 worker_thread+0xa55/0xfc0 kernel/workqueue.c:2792
 kthread+0x2fa/0x390 kernel/kthread.c:388
 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:dnotify_free_mark+0x57/0x60 fs/notify/dnotify/dnotify.c:136
Code: 4c 89 f7 e8 eb 9d de ff 49 83 3e 00 75 17 e8 e0 57 87 ff 48 8b 3d 69 71 4c 0c 48 89 de 5b 41 5e e9 2e cd dd ff e8 c9 57 87 ff <0f> 0b cc cc cc cc cc cc cc f3 0f 1e fa 55 41 57 41 56 41 55 41 54
RSP: 0000:ffffc900015b7ae8 EFLAGS: 00010293
RAX: ffffffff81fe3db7 RBX: ffff88802d239000 RCX: ffff88801e2e1e00
RDX: 0000000000000000 RSI: ffffffff8aaaba40 RDI: ffff88802d239000
RBP: ffffc900015b7bb0 R08: ffffffff90da35df R09: 1ffffffff21b46bb
R10: dffffc0000000000 R11: fffffbfff21b46bc R12: 1ffff11005a47202
R13: dffffc0000000000 R14: ffff88802d239080 R15: ffffffff8ab88188
FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f74ccd96000 CR3: 000000001df94000 CR4: 00000000003506e0