------------[ cut here ]------------ WARNING: CPU: 1 PID: 3372 at mm/page_alloc.c:4659 __alloc_pages_noprof+0x66c/0xd58 mm/page_alloc.c:4659 Modules linked in: CPU: 1 PID: 3372 Comm: syz.0.19 Not tainted 6.10.0-rc6-syzkaller-00041-g9903efbddba0 #0 Hardware name: linux,dummy-virt (DT) pstate: 21400009 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : __alloc_pages_noprof+0x66c/0xd58 mm/page_alloc.c:4659 lr : __alloc_pages_node_noprof include/linux/gfp.h:269 [inline] lr : alloc_pages_node_noprof include/linux/gfp.h:296 [inline] lr : __kmalloc_large_node+0x94/0x194 mm/slub.c:4068 sp : ffff800088d239a0 x29: ffff800088d239a0 x28: 00000000000f4240 x27: f9f0000006326900 x26: 0000000000000000 x25: fbf0000009000000 x24: f0f0000006608c00 x23: ffff80008089f2c4 x22: 0000000000040dc0 x21: 00000000007a1200 x20: 000000000000000b x19: 0000000000000000 x18: 0000000000000001 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000020000280 x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000 x8 : 0000000000000000 x7 : 0000000000000000 x6 : fbf00000093d0900 x5 : 0000000000000000 x4 : f3f0000007b62480 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000000000001 x0 : ffff800082845000 Call trace: __alloc_pages_noprof+0x66c/0xd58 mm/page_alloc.c:4659 __alloc_pages_node_noprof include/linux/gfp.h:269 [inline] alloc_pages_node_noprof include/linux/gfp.h:296 [inline] __kmalloc_large_node+0x94/0x194 mm/slub.c:4068 __do_kmalloc_node mm/slub.c:4111 [inline] __kmalloc_noprof+0x2d0/0x360 mm/slub.c:4136 kmalloc_noprof include/linux/slab.h:664 [inline] kmalloc_array_noprof include/linux/slab.h:699 [inline] fill_object_idr drivers/gpu/drm/drm_lease.c:389 [inline] drm_mode_create_lease_ioctl+0x178/0x8b4 drivers/gpu/drm/drm_lease.c:522 drm_ioctl_kernel+0xbc/0x130 drivers/gpu/drm/drm_ioctl.c:744 drm_ioctl+0x208/0x4e8 drivers/gpu/drm/drm_ioctl.c:841 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl fs/ioctl.c:893 [inline] __arm64_sys_ioctl+0xac/0xf0 fs/ioctl.c:893 __invoke_syscall arch/arm64/kernel/syscall.c:34 [inline] invoke_syscall+0x48/0x118 arch/arm64/kernel/syscall.c:48 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:131 do_el0_svc+0x1c/0x28 arch/arm64/kernel/syscall.c:150 el0_svc+0x34/0xf8 arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:598 ---[ end trace 0000000000000000 ]---