BUG: TASK stack guard page was hit at ffffc90001297fd8 (stack is ffffc90001298000..ffffc900012a0000) stack guard page: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 2069 Comm: syz.0.545 Not tainted 6.1.128-syzkaller-1167827-g5145d157731f #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 RIP: 0010:bpf_overflow_handler+0x78/0x590 kernel/events/core.c:10192 Code: 48 c7 44 24 50 70 94 9e 81 4c 8d 6c 24 40 49 c1 ed 03 48 b8 f1 f1 f1 f1 00 00 00 f3 4b 89 44 3d 00 43 c7 44 3d 08 f3 f3 f3 f3 a3 01 d7 ff 48 8d 7c 24 68 48 89 f8 48 c1 e8 03 42 80 3c 38 00 RSP: 0000:ffffc90001297fe0 EFLAGS: 00010802 RAX: f3000000f1f1f1f1 RBX: ffff888122663840 RCX: ffff8881190b3cc0 RDX: ffffc9000129ff58 RSI: ffffc9000129fac0 RDI: ffff888122663840 RBP: ffffc900012980d0 R08: ffffffff819e9864 R09: ffffed10244cc777 R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc9000129ff58 R13: 1ffff92000253004 R14: ffffc9000129fac0 R15: dffffc0000000000 FS: 00007f39c98ab6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001297fd8 CR3: 000000012250c000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <#DF> Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:bpf_overflow_handler+0x78/0x590 kernel/events/core.c:10192 Code: 48 c7 44 24 50 70 94 9e 81 4c 8d 6c 24 40 49 c1 ed 03 48 b8 f1 f1 f1 f1 00 00 00 f3 4b 89 44 3d 00 43 c7 44 3d 08 f3 f3 f3 f3 a3 01 d7 ff 48 8d 7c 24 68 48 89 f8 48 c1 e8 03 42 80 3c 38 00 RSP: 0000:ffffc90001297fe0 EFLAGS: 00010802 RAX: f3000000f1f1f1f1 RBX: ffff888122663840 RCX: ffff8881190b3cc0 RDX: ffffc9000129ff58 RSI: ffffc9000129fac0 RDI: ffff888122663840 RBP: ffffc900012980d0 R08: ffffffff819e9864 R09: ffffed10244cc777 R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc9000129ff58 R13: 1ffff92000253004 R14: ffffc9000129fac0 R15: dffffc0000000000 FS: 00007f39c98ab6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001297fd8 CR3: 000000012250c000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 48 c7 44 24 50 70 94 movq $0xffffffff819e9470,0x50(%rsp) 7: 9e 81 9: 4c 8d 6c 24 40 lea 0x40(%rsp),%r13 e: 49 c1 ed 03 shr $0x3,%r13 12: 48 b8 f1 f1 f1 f1 00 movabs $0xf3000000f1f1f1f1,%rax 19: 00 00 f3 1c: 4b 89 44 3d 00 mov %rax,0x0(%r13,%r15,1) 21: 43 c7 44 3d 08 f3 f3 movl $0xf3f3f3f3,0x8(%r13,%r15,1) 28: f3 f3 * 2a: e8 a3 01 d7 ff call 0xffd701d2 <-- trapping instruction 2f: 48 8d 7c 24 68 lea 0x68(%rsp),%rdi 34: 48 89 f8 mov %rdi,%rax 37: 48 c1 e8 03 shr $0x3,%rax 3b: 42 80 3c 38 00 cmpb $0x0,(%rax,%r15,1)