Oops: general protection fault, probably for non-canonical address 0xfbd59c0000000024: 0000 [#1] SMP KASAN PTI
KASAN: maybe wild-memory-access in range [0xdead000000000120-0xdead000000000127]
CPU: 1 UID: 0 PID: 8471 Comm: syz.0.405 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:__umount_mnt+0x24e/0x490
Code: 85 e4 74 61 4d 8d be f8 00 00 00 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 1c 8a e2 ff 4d 8b 2f 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 f4 8a e2 ff 4d 89 2c 24 4d 85 ed 74
RSP: 0018:ffffc9000ae1f680 EFLAGS: 00010a06
RAX: 1bd5a00000000024 RBX: ffff8881b9760a08 RCX: ffff88810b619d40
RDX: 0000000000000000 RSI: ffffffff8e8d7260 RDI: ffff8881b9760a78
RBP: dffffc0000000000 R08: ffffffff90118bb7 R09: 1ffffffff2023176
R10: dffffc0000000000 R11: fffffbfff2023177 R12: dead000000000122
R13: dead000000000100 R14: ffff8881b9760a00 R15: ffff8881b9760af8
FS:  00007fef629f36c0(0000) GS:ffff8882a945f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f234df4da08 CR3: 0000000111df4000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 umount_tree+0x925/0xd90
 put_mnt_ns+0x1d6/0x2f0
 evict+0x61e/0xb10
 __dentry_kill+0x1a2/0x5e0
 finish_dput+0xc9/0x480
 __fput+0x691/0xa70
 task_work_run+0x1d9/0x270
 do_exit+0x70f/0x23c0
 do_group_exit+0x21b/0x2d0
 get_signal+0x1284/0x1330
 arch_do_signal_or_restart+0xbc/0x830
 exit_to_user_mode_loop+0x86/0x480
 do_syscall_64+0x32d/0xf80
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fef61b9c799
Code: Unable to access opcode bytes at 0x7fef61b9c76f.
RSP: 002b:00007fef629f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 00007fef61e16090 RCX: 00007fef61b9c799
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: 00007fef61c32c99 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fef61e16128 R14: 00007fef61e16090 R15: 00007ffc1ba3e438
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__umount_mnt+0x24e/0x490
Code: 85 e4 74 61 4d 8d be f8 00 00 00 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 1c 8a e2 ff 4d 8b 2f 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 f4 8a e2 ff 4d 89 2c 24 4d 85 ed 74
RSP: 0018:ffffc9000ae1f680 EFLAGS: 00010a06
RAX: 1bd5a00000000024 RBX: ffff8881b9760a08 RCX: ffff88810b619d40
RDX: 0000000000000000 RSI: ffffffff8e8d7260 RDI: ffff8881b9760a78
RBP: dffffc0000000000 R08: ffffffff90118bb7 R09: 1ffffffff2023176
R10: dffffc0000000000 R11: fffffbfff2023177 R12: dead000000000122
R13: dead000000000100 R14: ffff8881b9760a00 R15: ffff8881b9760af8
FS:  00007fef629f36c0(0000) GS:ffff8882a945f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f234df4da08 CR3: 0000000111df4000 CR4: 00000000000006f0
