BUG: TASK stack guard page was hit at ffffc9000096ffd8 (stack is ffffc90000970000..ffffc90000978000) stack guard page: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 2612 Comm: syz.0.722 Not tainted 6.1.90-syzkaller-1151334-gfaf32723dc54 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 RIP: 0010:bpf_overflow_handler+0x78/0x590 kernel/events/core.c:10178 Code: 48 c7 44 24 50 e0 5f 9e 81 4c 8d 6c 24 40 49 c1 ed 03 48 b8 f1 f1 f1 f1 00 00 00 f3 4b 89 44 3d 00 43 c7 44 3d 08 f3 f3 f3 f3 e3 42 d7 ff 48 8d 7c 24 68 48 89 f8 48 c1 e8 03 42 80 3c 38 00 RSP: 0000:ffffc9000096ffe0 EFLAGS: 00010802 RAX: f3000000f1f1f1f1 RBX: ffff88812b636580 RCX: ffff8881125a0000 RDX: ffffc90000977f58 RSI: ffffc90000977ac0 RDI: ffff88812b636580 RBP: ffffc900009700d0 R08: ffffffff819e63d4 R09: ffffed10256c6d1f R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90000977f58 R13: 1ffff9200012e004 R14: ffffc90000977ac0 R15: dffffc0000000000 FS: 00007ffbee5836c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000096ffd8 CR3: 000000010ecac000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <#DF> Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:bpf_overflow_handler+0x78/0x590 kernel/events/core.c:10178 Code: 48 c7 44 24 50 e0 5f 9e 81 4c 8d 6c 24 40 49 c1 ed 03 48 b8 f1 f1 f1 f1 00 00 00 f3 4b 89 44 3d 00 43 c7 44 3d 08 f3 f3 f3 f3 e3 42 d7 ff 48 8d 7c 24 68 48 89 f8 48 c1 e8 03 42 80 3c 38 00 RSP: 0000:ffffc9000096ffe0 EFLAGS: 00010802 RAX: f3000000f1f1f1f1 RBX: ffff88812b636580 RCX: ffff8881125a0000 RDX: ffffc90000977f58 RSI: ffffc90000977ac0 RDI: ffff88812b636580 RBP: ffffc900009700d0 R08: ffffffff819e63d4 R09: ffffed10256c6d1f R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90000977f58 R13: 1ffff9200012e004 R14: ffffc90000977ac0 R15: dffffc0000000000 FS: 00007ffbee5836c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000096ffd8 CR3: 000000010ecac000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 48 c7 44 24 50 e0 5f movq $0xffffffff819e5fe0,0x50(%rsp) 7: 9e 81 9: 4c 8d 6c 24 40 lea 0x40(%rsp),%r13 e: 49 c1 ed 03 shr $0x3,%r13 12: 48 b8 f1 f1 f1 f1 00 movabs $0xf3000000f1f1f1f1,%rax 19: 00 00 f3 1c: 4b 89 44 3d 00 mov %rax,0x0(%r13,%r15,1) 21: 43 c7 44 3d 08 f3 f3 movl $0xf3f3f3f3,0x8(%r13,%r15,1) 28: f3 f3 * 2a: e8 e3 42 d7 ff call 0xffd74312 <-- trapping instruction 2f: 48 8d 7c 24 68 lea 0x68(%rsp),%rdi 34: 48 89 f8 mov %rdi,%rax 37: 48 c1 e8 03 shr $0x3,%rax 3b: 42 80 3c 38 00 cmpb $0x0,(%rax,%r15,1)