------------[ cut here ]------------
WARNING: CPU: 3 PID: 15485 at mm/shmem.c:1283 shmem_evict_inode+0x8b3/0xba0 mm/shmem.c:1283
Modules linked in:
CPU: 3 UID: 0 PID: 15485 Comm: syz.0.327 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:shmem_evict_inode+0x8b3/0xba0 mm/shmem.c:1283
Code: e6 e8 31 53 c1 ff 45 85 e4 75 aa e8 27 58 c1 ff 48 8b 74 24 28 48 8b 7c 24 30 e8 28 e0 9b ff e9 1a fe ff ff e8 0e 58 c1 ff 90 <0f> 0b 90 e9 8d f9 ff ff e8 00 58 c1 ff 4c 89 e2 48 b8 00 00 00 00
RSP: 0018:ffffc900077efa48 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff88806b2f4fe0 RCX: ffffffff81c9c55f
RDX: ffff88807894c880 RSI: ffffffff81c9cbd2 RDI: 0000000000000007
RBP: ffffc900077efb78 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000008
R13: 0000000000000000 R14: ffffed100d65e9f8 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff88802c300000(0000) knlGS:0000000000000000
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 00000000f745dc20 CR3: 000000000db7c000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 evict+0x2ed/0x6c0 fs/inode.c:669
 iput_final fs/inode.c:1803 [inline]
 iput.part.0+0x5a8/0x7f0 fs/inode.c:1829
 iput+0x5c/0x80 fs/inode.c:1819
 dentry_unlink_inode+0x29c/0x480 fs/dcache.c:407
 __dentry_kill+0x1d0/0x600 fs/dcache.c:610
 dput.part.0+0x4b1/0x9b0 fs/dcache.c:852
 dput+0x1f/0x30 fs/dcache.c:842
 __fput+0x54e/0xbb0 fs/file_table.c:430
 task_work_run+0x14e/0x250 kernel/task_work.c:228
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0xaa3/0x2bb0 kernel/exit.c:882
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1031
 __do_sys_exit_group kernel/exit.c:1042 [inline]
 __se_sys_exit_group kernel/exit.c:1040 [inline]
 __ia32_sys_exit_group+0x3e/0x50 kernel/exit.c:1040
 ia32_sys_call+0x13f8/0x1bb0 arch/x86/include/generated/asm/syscalls_32.h:253
 do_syscall_32_irqs_on arch/x86/entry/common.c:165 [inline]
 __do_fast_syscall_32+0x73/0x120 arch/x86/entry/common.c:386
 do_fast_syscall_32+0x32/0x80 arch/x86/entry/common.c:411
 entry_SYSENTER_compat_after_hwframe+0x84/0x8e
RIP: 0023:0xf7fe8579
Code: Unable to access opcode bytes at 0xf7fe854f.
RSP: 002b:00000000ff8ade8c EFLAGS: 00000286 ORIG_RAX: 00000000000000fc
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 00000000ffffff9c RDI: 00000000f746cff4
RBP: 00000000f71c899b R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>