------------[ cut here ]------------ WARNING: CPU: 1 PID: 7451 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0xd0/0x318 mm/page_alloc.c:4935 Modules linked in: CPU: 1 UID: 0 PID: 7451 Comm: syz.0.16 Not tainted 6.16.0-rc4-syzkaller-g7482bb149b9f #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __alloc_frozen_pages_noprof+0xd0/0x318 mm/page_alloc.c:4935 lr : __alloc_frozen_pages_noprof+0xac/0x318 mm/page_alloc.c:4929 sp : ffff8000a0757600 x29: ffff8000a07576c0 x28: dfff800000000000 x27: ffff8000a07578c0 x26: 00000000000f4240 x25: dfff800000000000 x24: ffff8000a0757620 x23: ffff7000140eaec4 x22: 0000000000000000 x21: 0000000000040dc0 x20: 0000000000000000 x19: 000000000000000b x18: 00000000ffffffff x17: ffff800093340000 x16: ffff80008ae45888 x15: 0000000000000005 x14: 1ffff000140eaec8 x13: 0000000000000000 x12: 0000000000000000 x11: ffff7000140eaecd x10: dfff800000000000 x9 : 0000000000000001 x8 : ffff800092c2f000 x7 : 0000000000000000 x6 : ffff0000ed7d0900 x5 : ffff0000ed7d0900 x4 : 0000000000000000 x3 : 0000000000000020 x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: __alloc_frozen_pages_noprof+0xd0/0x318 mm/page_alloc.c:4935 (P) __alloc_pages_noprof+0x18/0x100 mm/page_alloc.c:4993 __alloc_pages_node_noprof include/linux/gfp.h:284 [inline] alloc_pages_node_noprof include/linux/gfp.h:311 [inline] ___kmalloc_large_node+0xa8/0x1d8 mm/slub.c:4272 __kmalloc_large_node_noprof+0x2c/0x8c mm/slub.c:4300 __do_kmalloc_node mm/slub.c:4316 [inline] __kmalloc_noprof+0x3bc/0x4c8 mm/slub.c:4340 kmalloc_noprof include/linux/slab.h:909 [inline] kmalloc_array_noprof include/linux/slab.h:948 [inline] fill_object_idr drivers/gpu/drm/drm_lease.c:389 [inline] drm_mode_create_lease_ioctl+0x43c/0x1658 drivers/gpu/drm/drm_lease.c:522 drm_ioctl_kernel+0x238/0x310 drivers/gpu/drm/drm_ioctl.c:796 drm_ioctl+0x65c/0xa5c drivers/gpu/drm/drm_ioctl.c:893 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl fs/ioctl.c:893 [inline] __arm64_sys_ioctl+0x14c/0x1c4 fs/ioctl.c:893 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x58/0x180 arch/arm64/kernel/entry-common.c:879 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 5008 hardirqs last enabled at (5007): [] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:86 [inline] hardirqs last enabled at (5007): [] exit_to_kernel_mode+0xc0/0xf0 arch/arm64/kernel/entry-common.c:96 hardirqs last disabled at (5008): [] el1_brk64+0x1c/0x48 arch/arm64/kernel/entry-common.c:574 softirqs last enabled at (5002): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (5002): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (4871): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]---