program syz.0.0 is using a deprecated SCSI ioctl, please convert it to SG_IO Zero length message leads to an empty skb loop0: detected capacity change from 0 to 32768 gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" gfs2: fsid=syz:syz: Now mounting FS (format 1801)... gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms gfs2: fsid=syz:syz.0: first mount done, others may mount ------------[ cut here ]------------ WARNING: CPU: 0 PID: 5118 at mm/page_alloc.c:4678 __alloc_pages_noprof+0x36a/0x6c0 mm/page_alloc.c:4678 Modules linked in: CPU: 0 UID: 0 PID: 5118 Comm: syz.0.0 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:__alloc_pages_noprof+0x36a/0x6c0 mm/page_alloc.c:4678 Code: a9 00 00 08 00 0f 85 12 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 44 0f 45 e9 e9 02 01 00 00 c6 05 4d 21 15 0e 01 90 <0f> 0b 90 83 fb 0a 0f 86 6c fd ff ff 45 31 ed 48 c7 44 24 20 0e 36 RSP: 0018:ffffc90002e4f420 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 000000000000001a RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90002e4f4a8 RBP: ffffc90002e4f528 R08: ffffc90002e4f4a7 R09: 0000000000000000 R10: ffffc90002e4f480 R11: fffff520005c9e95 R12: 1ffff920005c9e8c R13: 0000000000040d40 R14: dffffc0000000000 R15: 1ffff920005c9e88 FS: 00007fab0bda56c0(0000) GS:ffff88801fe00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005626787550d8 CR3: 000000003dd9e000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __alloc_pages_node_noprof include/linux/gfp.h:269 [inline] alloc_pages_node_noprof include/linux/gfp.h:296 [inline] ___kmalloc_large_node+0x8b/0x1d0 mm/slub.c:4107 __kmalloc_large_node_noprof+0x1a/0x80 mm/slub.c:4134 __do_kmalloc_node mm/slub.c:4150 [inline] __kmalloc_noprof+0x2ae/0x400 mm/slub.c:4174 kmalloc_noprof include/linux/slab.h:685 [inline] kmalloc_array_noprof include/linux/slab.h:726 [inline] compute_bitstructs fs/gfs2/rgrp.c:766 [inline] read_rindex_entry fs/gfs2/rgrp.c:931 [inline] gfs2_ri_update+0x549/0x1830 fs/gfs2/rgrp.c:1001 gfs2_rindex_update+0x304/0x3d0 fs/gfs2/rgrp.c:1051 init_inodes+0x24d/0x320 fs/gfs2/ops_fstype.c:892 gfs2_fill_super+0x1c18/0x2500 fs/gfs2/ops_fstype.c:1249 get_tree_bdev+0x3f7/0x570 fs/super.c:1635 gfs2_get_tree+0x54/0x220 fs/gfs2/ops_fstype.c:1329 vfs_get_tree+0x90/0x2b0 fs/super.c:1800 do_new_mount+0x2be/0xb40 fs/namespace.c:3472 do_mount fs/namespace.c:3812 [inline] __do_sys_mount fs/namespace.c:4020 [inline] __se_sys_mount+0x2d6/0x3c0 fs/namespace.c:3997 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fab0af7f69a Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fab0bda4e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fab0bda4ef0 RCX: 00007fab0af7f69a RDX: 0000000020037f40 RSI: 0000000020037f80 RDI: 00007fab0bda4eb0 RBP: 0000000020037f40 R08: 00007fab0bda4ef0 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020037f80 R13: 00007fab0bda4eb0 R14: 0000000000037fae R15: 0000000020000080