loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427
syz-executor: attempt to access beyond end of device
loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427
------------[ cut here ]------------
kernel BUG at fs/jffs2/nodelist.c:462!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 4900 Comm: syz-executor Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : jffs2_del_ino_cache+0x2b4/0x2b8 fs/jffs2/nodelist.c:462
lr : jffs2_del_ino_cache+0x2b4/0x2b8 fs/jffs2/nodelist.c:462
sp : ffff8000210476c0
x29: ffff8000210476c0 x28: ffff0000f63080f0 x27: 1fffe0001ec61014
x26: 1fffe0001ec61017 x25: ffff0000f63080b8 x24: dfff800000000000
x23: 0000000000000000 x22: 0000000000000006 x21: ffff0000fdb79020
x20: ffff0000fdb79000 x19: ffff0000fb65c000 x18: 1fffe00033e7277e
x17: ffff80001537d000 x16: ffff8000082f2d40 x15: 000000000004ffff
x14: 0000000000000001 x13: 1fffe0001f6cb86d x12: 0000000000000000
x11: ff00800009687878 x10: 0000000000000000 x9 : ffff800009687878
x8 : ffff0000fb878000 x7 : ffff8000082b57b0 x6 : 0000000000000000
x5 : ffff800021047620 x4 : 0000000000000000 x3 : ffff8000082f2e54
x2 : 0000000000000001 x1 : ffff0000fdb79000 x0 : ffff0000fb65c000
Call trace:
 jffs2_del_ino_cache+0x2b4/0x2b8 fs/jffs2/nodelist.c:462
 jffs2_do_clear_inode+0x2cc/0x348 fs/jffs2/readinode.c:1443
 jffs2_evict_inode+0x7c/0x90 fs/jffs2/fs.c:250
 evict+0x3d8/0x824 fs/inode.c:705
 dispose_list fs/inode.c:738 [inline]
 evict_inodes+0x604/0x6a4 fs/inode.c:792
 generic_shutdown_super+0xa4/0x32c fs/super.c:480
 kill_mtd_super+0x2c/0x74 drivers/mtd/mtdsuper.c:197
 jffs2_kill_sb+0x94/0xb0 fs/jffs2/super.c:349
 deactivate_locked_super+0xb4/0x128 fs/super.c:332
 deactivate_super+0xe4/0x104 fs/super.c:363
 cleanup_mnt+0x3a8/0x430 fs/namespace.c:1191
 __cleanup_mnt+0x20/0x30 fs/namespace.c:1198
 task_work_run+0x1f4/0x280 kernel/task_work.c:203
 exit_task_work include/linux/task_work.h:39 [inline]
 do_exit+0x54c/0x19ac kernel/exit.c:887
 do_group_exit+0x198/0x238 kernel/exit.c:1030
 __do_sys_exit_group kernel/exit.c:1041 [inline]
 __se_sys_exit_group kernel/exit.c:1039 [inline]
 __wake_up_parent+0x0/0x60 kernel/exit.c:1039
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: 91005320 97c9b423 17ffff8e 97b8acd4 (d4210000) 
---[ end trace 0000000000000000 ]---