------------[ cut here ]------------ WARNING: mm/page_alloc.c:5202 at __alloc_frozen_pages_noprof+0xd0/0x31c mm/page_alloc.c:5202, CPU#1: syz.0.16/5395 Modules linked in: CPU: 1 UID: 0 PID: 5395 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : __alloc_frozen_pages_noprof+0xd0/0x31c mm/page_alloc.c:5202 lr : __alloc_frozen_pages_noprof+0xac/0x31c mm/page_alloc.c:5196 sp : ffff800094f975a0 x29: ffff800094f97670 x28: ffff800094f978c0 x27: dfff800000000000 x26: 1ffff00011cbebe4 x25: dfff800000000000 x24: ffff800094f975c0 x23: ffff7000129f2eb8 x22: 0000000000000000 x21: 0000000000040dc0 x20: 0000000000000000 x19: 000000000000000b x18: 00000000ffffffff x17: ffff80008a0e0c80 x16: ffff80008a4097d8 x15: 0000000020000200 x14: 0000000000000000 x13: 0000000000000005 x12: 0000000000000000 x11: 0000000000000000 x10: ffff7000129f2ec1 x9 : 0000000000000001 x8 : ffff800089f18000 x7 : 0000000000000000 x6 : ffff0000ec3d0900 x5 : ffff0000ec3d0900 x4 : 0000000000000000 x3 : 0000000000000020 x2 : 0000000000000008 x1 : 0000000000000000 x0 : ffff800094f975e0 Call trace: __alloc_frozen_pages_noprof+0xd0/0x31c mm/page_alloc.c:5202 (P) alloc_pages_mpol+0x1ec/0x464 mm/mempolicy.c:2490 alloc_frozen_pages_noprof+0xc4/0x114 mm/mempolicy.c:2561 ___kmalloc_large_node+0x74/0x158 mm/slub.c:5236 __kmalloc_large_node_noprof+0x2c/0x8c mm/slub.c:5267 __do_kmalloc_node mm/slub.c:5283 [inline] __kmalloc_noprof+0x3cc/0x6f0 mm/slub.c:5307 kmalloc_noprof include/linux/slab.h:954 [inline] kzalloc_noprof include/linux/slab.h:1188 [inline] fill_object_idr drivers/gpu/drm/drm_lease.c:389 [inline] drm_mode_create_lease_ioctl+0x464/0x1510 drivers/gpu/drm/drm_lease.c:521 drm_ioctl_kernel+0x250/0x31c drivers/gpu/drm/drm_ioctl.c:804 drm_ioctl+0x694/0xb28 drivers/gpu/drm/drm_ioctl.c:901 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __arm64_sys_ioctl+0x14c/0x1c4 fs/ioctl.c:583 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:740 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:759 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 irq event stamp: 4186 hardirqs last enabled at (4185): [] irqentry_exit_to_kernel_mode_after_preempt include/linux/irq-entry-common.h:507 [inline] hardirqs last enabled at (4185): [] arm64_exit_to_kernel_mode+0x80/0x94 arch/arm64/kernel/entry-common.c:62 hardirqs last disabled at (4186): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:429 softirqs last enabled at (890): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (890): [] handle_softirqs+0xbc4/0xd34 kernel/softirq.c:650 softirqs last disabled at (783): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]---