VFS: Busy inodes after unmount of tmpfs. Self-destruct in 5 seconds.  Have a nice day...
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 14876 Comm: syz-executor.5 Not tainted 4.9.141+ #1
task: ffff8801cfd797c0 task.stack: ffff8801cd228000
RIP: 0010:[<ffffffff8145de44>]  [<ffffffff8145de44>] shmem_free_inode.isra.1+0x24/0x90 mm/shmem.c:214
RSP: 0018:ffff8801cd22fc10  EFLAGS: 00010206
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff1003968d609
RDX: 000000000000000c RSI: ffffffff8145de2f RDI: 0000000000000060
RBP: ffff8801cd22fc20 R08: ffff8801cfd7a0b8 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: ffff8801c8931100
R13: ffff8801cb46b048 R14: ffff8801cb46b048 R15: ffffffff82a9dce0
FS:  0000000000cab940(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2828189000 CR3: 00000001d68ca000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8801cb46b090 ffff8801c8931100 ffff8801cd22fc78 ffffffff81464022
 ffff8801cb46b090 ffff8801cb46b118 ffff8801cd22fc58 ffff8801cb46b0b8
 ffff8801cb46b090 ffffffff81463e70 ffff8801cb46b168 ffff8801cb46b0b8
Call Trace:
 [<ffffffff81464022>] shmem_evict_inode+0x1b2/0x7a0 mm/shmem.c:1067
 [<ffffffff81562719>] evict+0x2d9/0x620 fs/inode.c:553
 [<ffffffff81563a01>] iput_final fs/inode.c:1516 [inline]
 [<ffffffff81563a01>] iput+0x371/0x900 fs/inode.c:1543
 [<ffffffff815e4868>] fsnotify_detach_mark+0x2c8/0x410 fs/notify/mark.c:170
 [<ffffffff815e608c>] fsnotify_detach_group_marks+0x5c/0xd0 fs/notify/mark.c:506
 [<ffffffff815e34f2>] fsnotify_destroy_group+0x62/0x120 fs/notify/group.c:70
 [<ffffffff815e7967>] inotify_release+0x37/0x50 fs/notify/inotify/inotify_user.c:282
 [<ffffffff81510293>] __fput+0x263/0x700 fs/file_table.c:208
 [<ffffffff815107b5>] ____fput+0x15/0x20 fs/file_table.c:244
 [<ffffffff8113dc4c>] task_work_run+0x10c/0x180 kernel/task_work.c:116
 [<ffffffff81003e49>] tracehook_notify_resume include/linux/tracehook.h:191 [inline]
 [<ffffffff81003e49>] exit_to_usermode_loop+0x129/0x150 arch/x86/entry/common.c:162
 [<ffffffff81005932>] prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline]
 [<ffffffff81005932>] syscall_return_slowpath arch/x86/entry/common.c:263 [inline]
 [<ffffffff81005932>] do_syscall_64+0x3e2/0x550 arch/x86/entry/common.c:290
 [<ffffffff82817893>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: 1f 84 00 00 00 00 00 55 48 89 e5 41 54 53 48 89 fb e8 31 dc eb ff 48 8d 7b 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 54 48 83 7b 60 00 75 0a e8 0a dc eb ff 5b 41 5c 
RIP  [<ffffffff8145de44>] shmem_free_inode.isra.1+0x24/0x90 mm/shmem.c:214
 RSP <ffff8801cd22fc10>
---[ end trace a5066a3b7f99d28c ]---