kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 5393 Comm: syz-executor.1 Not tainted 4.9.194+ #0
task: 000000003d33e6e3 task.stack: 00000000f382bde4
RIP: 0010:[<ffffffff81468094>]  [<0000000021b5f294>] shmem_free_inode.isra.0+0x24/0x90 mm/shmem.c:246
RSP: 0018:ffff8801cf117c08  EFLAGS: 00010206
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 000000000000000c RSI: ffffffff8146807f RDI: 0000000000000060
RBP: ffff8801cf117c18 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: ffff8801d21818a8 R14: ffff8801d2181860 R15: ffff8801d2181860
FS:  0000000002210940(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f324c8f2db8 CR3: 00000001d6f41000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8801c25fb300 dffffc0000000000 ffff8801cf117c68 ffffffff8146e432
 ffff8801d2181a48 ffff8801cf117c48 ffff8801d21818d0 ffffffff8146e290
 ffff8801d21818a8 ffff8801d2181980 ffff8801d21818d0 ffffffff82aa03e0
Call Trace:
 [<00000000eccebe77>] shmem_evict_inode+0x1a2/0x770 mm/shmem.c:1084
 [<000000002f3c112f>] evict+0x2e9/0x630 fs/inode.c:553
 [<00000000f8d405b5>] iput_final fs/inode.c:1516 [inline]
 [<00000000f8d405b5>] iput fs/inode.c:1543 [inline]
 [<00000000f8d405b5>] iput+0x370/0x900 fs/inode.c:1528
 [<0000000029a98848>] fsnotify_detach_mark+0x2c7/0x410 fs/notify/mark.c:170
 [<00000000af4d6e14>] fsnotify_detach_group_marks+0x5c/0xd0 fs/notify/mark.c:506
 [<00000000a12467cf>] fsnotify_destroy_group+0x66/0x120 fs/notify/group.c:70
 [<000000000aee2181>] inotify_release+0x37/0x50 fs/notify/inotify/inotify_user.c:282
 [<0000000078429528>] __fput+0x274/0x720 fs/file_table.c:208
 [<000000000e706c6e>] ____fput+0x16/0x20 fs/file_table.c:244
 [<00000000765f9a63>] task_work_run+0x108/0x180 kernel/task_work.c:116
 [<000000005e784640>] tracehook_notify_resume include/linux/tracehook.h:191 [inline]
 [<000000005e784640>] exit_to_usermode_loop+0x13b/0x160 arch/x86/entry/common.c:163
 [<00000000af50bb87>] prepare_exit_to_usermode arch/x86/entry/common.c:195 [inline]
 [<00000000af50bb87>] syscall_return_slowpath arch/x86/entry/common.c:266 [inline]
 [<00000000af50bb87>] do_syscall_64+0x3ab/0x5c0 arch/x86/entry/common.c:293
 [<0000000035b33f27>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: 00 e9 8a fe ff ff 90 55 48 89 e5 41 54 53 48 89 fb e8 81 a6 eb ff 48 8d 7b 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 54 48 83 7b 60 00 75 0a e8 5a a6 eb ff 5b 41 5c 
RIP  [<0000000021b5f294>] shmem_free_inode.isra.0+0x24/0x90 mm/shmem.c:246
 RSP <ffff8801cf117c08>
---[ end trace 248ae345d92189d8 ]---