syzbot

jffs2: notice: (4226) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
------------[ cut here ]------------
kernel BUG at fs/jffs2/nodelist.c:462!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 4226 Comm: syz-executor192 Not tainted 6.1.83-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : jffs2_del_ino_cache+0x2ac/0x2b0 fs/jffs2/nodelist.c:462
lr : jffs2_del_ino_cache+0x2ac/0x2b0 fs/jffs2/nodelist.c:462
sp : ffff80001dd77720
x29: ffff80001dd77720 x28: 1fffe0001c419052 x27: 1fffe0001c419014
x26: 1fffe0001c419017 x25: dfff800000000000 x24: dfff800000000000
x23: 0000000000000006 x22: ffff0000cdcec000 x21: ffff0000d85a2000
x20: ffff0000cdcec020 x19: ffff0000cdcec000 x18: ffff80001dd77300
x17: ffff8000188cc000 x16: ffff80000825f5e8 x15: ffff8000183b1f80
x14: 1ffff00002b080b0 x13: dfff800000000000 x12: 0000000000000001
x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800009723280
x8 : ffff0000d8679bc0 x7 : ffff8000082dbe4c x6 : 0000000000000000
x5 : ffff80001dd77640 x4 : 0000000000000000 x3 : ffff80000831d994
x2 : 0000000000000001 x1 : ffff0000cdcec000 x0 : ffff0000d85a2000
Call trace:
 jffs2_del_ino_cache+0x2ac/0x2b0 fs/jffs2/nodelist.c:462
 jffs2_do_clear_inode+0x2d8/0x350 fs/jffs2/readinode.c:1443
 jffs2_evict_inode+0x7c/0x90 fs/jffs2/fs.c:250
 evict+0x260/0x68c fs/inode.c:666
 dispose_list fs/inode.c:699 [inline]
 evict_inodes+0x6b4/0x74c fs/inode.c:749
 generic_shutdown_super+0x9c/0x328 fs/super.c:480
 kill_mtd_super+0x2c/0x74 drivers/mtd/mtdsuper.c:197
 jffs2_kill_sb+0x94/0xb0 fs/jffs2/super.c:348
 deactivate_locked_super+0xac/0x124 fs/super.c:332
 deactivate_super+0xf0/0x110 fs/super.c:363
 cleanup_mnt+0x394/0x41c fs/namespace.c:1186
 __cleanup_mnt+0x20/0x30 fs/namespace.c:1193
 task_work_run+0x240/0x2f0 kernel/task_work.c:179
 exit_task_work include/linux/task_work.h:38 [inline]
 do_exit+0x554/0x1a88 kernel/exit.c:869
 do_group_exit+0x194/0x22c kernel/exit.c:1019
 __do_sys_exit_group kernel/exit.c:1030 [inline]
 __se_sys_exit_group kernel/exit.c:1028 [inline]
 __wake_up_parent+0x0/0x60 kernel/exit.c:1028
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x64/0x218 arch/arm64/kernel/syscall.c:206
 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: aa1703e0 97c9448b 17ffff91 97b757f7 (d4210000) 
---[ end trace 0000000000000000 ]---