VFS: Busy inodes after unmount of tmpfs. Self-destruct in 5 seconds.  Have a nice day...
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 14631 Comm: syz-executor.5 Not tainted 4.9.194+ #0
task: 00000000a4b1b024 task.stack: 000000004037d7cd
RIP: 0010:[<ffffffff81468094>]  [<00000000dea7fe99>] shmem_free_inode.isra.0+0x24/0x90 mm/shmem.c:246
RSP: 0018:ffff8801a11d7c08  EFLAGS: 00010206
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 000000000000000c RSI: ffffffff8146807f RDI: 0000000000000060
RBP: ffff8801a11d7c18 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: ffff8801cc518f18 R14: ffff8801cc518ed0 R15: ffff8801cc518ed0
FS:  0000000001502940(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0512481db8 CR3: 00000001cb041000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8801c78c6600 dffffc0000000000 ffff8801a11d7c68 ffffffff8146e432
 ffff8801cc5190b8 ffff8801a11d7c48 ffff8801cc518f40 ffffffff8146e290
 ffff8801cc518f18 ffff8801cc518ff0 ffff8801cc518f40 ffffffff82aa03e0
Call Trace:
 [<0000000044a4a4f1>] shmem_evict_inode+0x1a2/0x770 mm/shmem.c:1084
 [<0000000035341b70>] evict+0x2e9/0x630 fs/inode.c:553
 [<0000000033b8ab0e>] iput_final fs/inode.c:1516 [inline]
 [<0000000033b8ab0e>] iput fs/inode.c:1543 [inline]
 [<0000000033b8ab0e>] iput+0x370/0x900 fs/inode.c:1528
 [<00000000f208a4fe>] fsnotify_detach_mark+0x2c7/0x410 fs/notify/mark.c:170
 [<0000000066da111c>] fsnotify_detach_group_marks+0x5c/0xd0 fs/notify/mark.c:506
 [<0000000003a7a5be>] fsnotify_destroy_group+0x66/0x120 fs/notify/group.c:70
 [<00000000d75920c2>] inotify_release+0x37/0x50 fs/notify/inotify/inotify_user.c:282
 [<000000004b3528b6>] __fput+0x274/0x720 fs/file_table.c:208
 [<00000000733bcb34>] ____fput+0x16/0x20 fs/file_table.c:244
 [<00000000f79660c3>] task_work_run+0x108/0x180 kernel/task_work.c:116
 [<000000000b95c767>] tracehook_notify_resume include/linux/tracehook.h:191 [inline]
 [<000000000b95c767>] exit_to_usermode_loop+0x13b/0x160 arch/x86/entry/common.c:163
 [<00000000cbef7d65>] prepare_exit_to_usermode arch/x86/entry/common.c:195 [inline]
 [<00000000cbef7d65>] syscall_return_slowpath arch/x86/entry/common.c:266 [inline]
 [<00000000cbef7d65>] do_syscall_64+0x3ab/0x5c0 arch/x86/entry/common.c:293
 [<000000003e546318>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: 00 e9 8a fe ff ff 90 55 48 89 e5 41 54 53 48 89 fb e8 81 a6 eb ff 48 8d 7b 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 54 48 83 7b 60 00 75 0a e8 5a a6 eb ff 5b 41 5c 
RIP  [<00000000dea7fe99>] shmem_free_inode.isra.0+0x24/0x90 mm/shmem.c:246
 RSP <ffff8801a11d7c08>
---[ end trace 6b40abbc03f7835d ]---