BUG: stack guard page was hit at ffffc9000124ff58 (stack is ffffc90001250000..ffffc90001257fff)
kernel stack overflow (double-fault): 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 787 Comm: syz-executor.1 Tainted: G        W         5.10.183-syzkaller-01067-g3a582928e6d1 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
RIP: 0010:get_page_from_freelist+0xae/0x2f30 mm/page_alloc.c:4139
Code: 08 04 f3 f3 f3 89 fe c1 ee 09 83 e6 01 89 c8 83 e8 01 89 84 24 e8 00 00 00 0f 92 c0 41 0f 95 c0 40 20 c6 89 b4 24 d4 00 00 00 <89> 7c 24 64 0f b7 c7 c1 e8 0f 44 20 c0 89 84 24 d8 00 00 00 bb 01
RSP: 0018:ffffc9000124ff60 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000941 RCX: 0000000000000002
RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000102800
RBP: ffffc900012501d0 R08: ffffc90001250201 R09: ffffc900012502a0
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000102800
R13: 0000000000000941 R14: 1ffff9200024a04c R15: 0000000000000002
FS:  00007f11993af700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc9000124ff58 CR3: 000000010cadf000 CR4: 00000000003526b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <#DF>
 </#DF>
Modules linked in:
---[ end trace d7d97d8020ac6c3c ]---
RIP: 0010:get_page_from_freelist+0xae/0x2f30 mm/page_alloc.c:4139
Code: 08 04 f3 f3 f3 89 fe c1 ee 09 83 e6 01 89 c8 83 e8 01 89 84 24 e8 00 00 00 0f 92 c0 41 0f 95 c0 40 20 c6 89 b4 24 d4 00 00 00 <89> 7c 24 64 0f b7 c7 c1 e8 0f 44 20 c0 89 84 24 d8 00 00 00 bb 01
RSP: 0018:ffffc9000124ff60 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000941 RCX: 0000000000000002
RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000102800
RBP: ffffc900012501d0 R08: ffffc90001250201 R09: ffffc900012502a0
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000102800
R13: 0000000000000941 R14: 1ffff9200024a04c R15: 0000000000000002
FS:  00007f11993af700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc9000124ff58 CR3: 000000010cadf000 CR4: 00000000003526b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	08 04 f3             	or     %al,(%rbx,%rsi,8)
   3:	f3 f3 89 fe          	repz repz mov %edi,%esi
   7:	c1 ee 09             	shr    $0x9,%esi
   a:	83 e6 01             	and    $0x1,%esi
   d:	89 c8                	mov    %ecx,%eax
   f:	83 e8 01             	sub    $0x1,%eax
  12:	89 84 24 e8 00 00 00 	mov    %eax,0xe8(%rsp)
  19:	0f 92 c0             	setb   %al
  1c:	41 0f 95 c0          	setne  %r8b
  20:	40 20 c6             	and    %al,%sil
  23:	89 b4 24 d4 00 00 00 	mov    %esi,0xd4(%rsp)
* 2a:	89 7c 24 64          	mov    %edi,0x64(%rsp) <-- trapping instruction
  2e:	0f b7 c7             	movzwl %di,%eax
  31:	c1 e8 0f             	shr    $0xf,%eax
  34:	44 20 c0             	and    %r8b,%al
  37:	89 84 24 d8 00 00 00 	mov    %eax,0xd8(%rsp)
  3e:	bb                   	.byte 0xbb
  3f:	01                   	.byte 0x1