BUG: TASK stack guard page was hit at ffffc9000fd2ff58 (stack is ffffc9000fd30000..ffffc9000fd38000) Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 1 UID: 0 PID: 2252 Comm: syz.5.648 Not tainted syzkaller #0 50c55e29475f753e2c0e421a4e3d27eb6c382eee Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 RIP: 0010:get_page_from_freelist+0x8e/0x4a20 mm/page_alloc.c:3800 Code: 81 48 8d 8c 24 e0 01 00 00 48 c1 e9 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 21 48 b8 f8 f2 f8 f2 f8 f2 f8 f2 4a 89 44 21 08 <48> 89 4c 24 38 42 c7 44 21 10 f8 f3 f3 f3 49 8d 7f 10 4d 8d 77 1c RSP: 0018:ffffc9000fd2ff60 EFLAGS: 00010a06 RAX: f2f8f2f8f2f8f2f8 RBX: 0000000000000002 RCX: 1ffff92001fa6028 RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 RBP: ffffc9000fd30230 R08: ffffffff876aade3 R09: 1ffffffff0ed55bc R10: dffffc0000000000 R11: fffffbfff0ed55bd R12: dffffc0000000000 R13: dffffc0000000000 R14: 1ffff92001fa604c R15: ffffc9000fd302d0 FS: 00007f57f4bdc6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000fd2ff58 CR3: 00000001213ca000 CR4: 00000000003526b0 DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:get_page_from_freelist+0x8e/0x4a20 mm/page_alloc.c:3800 Code: 81 48 8d 8c 24 e0 01 00 00 48 c1 e9 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 21 48 b8 f8 f2 f8 f2 f8 f2 f8 f2 4a 89 44 21 08 <48> 89 4c 24 38 42 c7 44 21 10 f8 f3 f3 f3 49 8d 7f 10 4d 8d 77 1c RSP: 0018:ffffc9000fd2ff60 EFLAGS: 00010a06 RAX: f2f8f2f8f2f8f2f8 RBX: 0000000000000002 RCX: 1ffff92001fa6028 RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 RBP: ffffc9000fd30230 R08: ffffffff876aade3 R09: 1ffffffff0ed55bc R10: dffffc0000000000 R11: fffffbfff0ed55bd R12: dffffc0000000000 R13: dffffc0000000000 R14: 1ffff92001fa604c R15: ffffc9000fd302d0 FS: 00007f57f4bdc6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000fd2ff58 CR3: 00000001213ca000 CR4: 00000000003526b0 DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 81 48 8d 8c 24 e0 01 orl $0x1e0248c,-0x73(%rax) 7: 00 00 add %al,(%rax) 9: 48 c1 e9 03 shr $0x3,%rcx d: 48 b8 f1 f1 f1 f1 f8 movabs $0xf2f2f2f8f1f1f1f1,%rax 14: f2 f2 f2 17: 4a 89 04 21 mov %rax,(%rcx,%r12,1) 1b: 48 b8 f8 f2 f8 f2 f8 movabs $0xf2f8f2f8f2f8f2f8,%rax 22: f2 f8 f2 25: 4a 89 44 21 08 mov %rax,0x8(%rcx,%r12,1) * 2a: 48 89 4c 24 38 mov %rcx,0x38(%rsp) <-- trapping instruction 2f: 42 c7 44 21 10 f8 f3 movl $0xf3f3f3f8,0x10(%rcx,%r12,1) 36: f3 f3 38: 49 8d 7f 10 lea 0x10(%r15),%rdi 3c: 4d 8d 77 1c lea 0x1c(%r15),%r14