------------[ cut here ]------------
WARNING: CPU: 0 PID: 0 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 mm/maccess.c:-1
Modules linked in:
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.15.180-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 mm/maccess.c:226
Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 2b b0 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 14 b0 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff
RSP: 0018:ffffc90000007190 EFLAGS: 00010246
RAX: ffffffff81aaedcc RBX: 0000000000000000 RCX: ffffffff8c8bd680
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
RBP: dffffc0000000000 R08: ffffffff81aaecdd R09: fffffbfff1917ad1
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000020000000
R13: 0000000000000008 R14: 0000000020000000 R15: ffffc90000007208
FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f57c486f110 CR3: 000000002525a000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 bpf_probe_read_user_common kernel/trace/bpf_trace.c:157 [inline]
 ____bpf_probe_read_compat kernel/trace/bpf_trace.c:281 [inline]
 bpf_probe_read_compat+0xe4/0x180 kernel/trace/bpf_trace.c:277
 bpf_prog_63d51858d7cca270+0x3d/0x974
 bpf_dispatcher_nop_func include/linux/bpf.h:790 [inline]
 __bpf_prog_run include/linux/filter.h:628 [inline]
 bpf_prog_run include/linux/filter.h:635 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:1878 [inline]
 bpf_trace_run5+0x222/0x3e0 kernel/trace/bpf_trace.c:1918
 __traceiter_neigh_update+0x90/0xe0 include/trace/events/neigh.h:72
 trace_neigh_update include/trace/events/neigh.h:72 [inline]
 __neigh_update+0x1d1f/0x1ec0 net/core/neighbour.c:1246
 neigh_update net/core/neighbour.c:1429 [inline]
 neigh_event_ns+0xcf/0x110 net/core/neighbour.c:1458
 arp_process+0x14e7/0x1ed0 net/ipv4/arp.c:830
 NF_HOOK+0x36a/0x410 include/linux/netfilter.h:301
 __netif_receive_skb_list_ptype net/core/dev.c:5572 [inline]
 __netif_receive_skb_list_core+0x818/0x890 net/core/dev.c:5615
 __netif_receive_skb_list net/core/dev.c:5667 [inline]
 netif_receive_skb_list_internal+0x9ed/0xdf0 net/core/dev.c:5758
 gro_normal_list net/core/dev.c:5912 [inline]
 napi_complete_done+0x352/0x820 net/core/dev.c:6650
 virtqueue_napi_complete drivers/net/virtio_net.c:357 [inline]
 virtnet_poll+0xbd1/0x1260 drivers/net/virtio_net.c:1592
 __napi_poll+0xc7/0x440 net/core/dev.c:7074
 napi_poll net/core/dev.c:7141 [inline]
 net_rx_action+0x617/0xda0 net/core/dev.c:7231
 handle_softirqs+0x3a7/0x930 kernel/softirq.c:558
 __do_softirq kernel/softirq.c:592 [inline]
 invoke_softirq kernel/softirq.c:432 [inline]
 __irq_exit_rcu+0x157/0x240 kernel/softirq.c:641
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:653
 common_interrupt+0xb3/0xd0 arch/x86/kernel/irq.c:242
 </IRQ>
 <TASK>
 asm_common_interrupt+0x22/0x40 arch/x86/include/asm/idtentry.h:667
RIP: 0010:default_idle+0xb/0x10 arch/x86/kernel/process.c:723
Code: 07 80 c1 03 38 c1 7c b5 4c 89 e7 e8 1f f3 80 f7 eb ab e8 88 80 f6 ff cc cc cc cc cc cc cc cc 66 90 0f 00 2d 17 3d 5c 00 fb f4 <c3> 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48
RSP: 0018:ffffffff8c807da8 EFLAGS: 000002c2
RAX: 4f83537c3ec36700 RBX: ffffffff8c8bd680 RCX: 000000000000a19a
RDX: 0000000000000001 RSI: ffffffff8aab2b60 RDI: ffffffff8af9fc80
RBP: ffffffff8c807ef8 R08: dffffc0000000000 R09: ffffed10171c765a
R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff1900fce
R13: 1ffffffff1917ad0 R14: 0000000000000000 R15: dffffc0000000000
 default_idle_call+0x81/0xc0 kernel/sched/idle.c:112
 cpuidle_idle_call kernel/sched/idle.c:194 [inline]
 do_idle+0x271/0x670 kernel/sched/idle.c:306
 cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:403
 start_kernel+0x48c/0x540 init/main.c:1140
 secondary_startup_64_no_verify+0xb1/0xbb
 </TASK>
----------------
Code disassembly (best guess), 1 bytes skipped:
   0:	80 c1 03             	add    $0x3,%cl
   3:	38 c1                	cmp    %al,%cl
   5:	7c b5                	jl     0xffffffbc
   7:	4c 89 e7             	mov    %r12,%rdi
   a:	e8 1f f3 80 f7       	call   0xf780f32e
   f:	eb ab                	jmp    0xffffffbc
  11:	e8 88 80 f6 ff       	call   0xfff6809e
  16:	cc                   	int3
  17:	cc                   	int3
  18:	cc                   	int3
  19:	cc                   	int3
  1a:	cc                   	int3
  1b:	cc                   	int3
  1c:	cc                   	int3
  1d:	cc                   	int3
  1e:	66 90                	xchg   %ax,%ax
  20:	0f 00 2d 17 3d 5c 00 	verw   0x5c3d17(%rip)        # 0x5c3d3e
  27:	fb                   	sti
  28:	f4                   	hlt
* 29:	c3                   	ret <-- trapping instruction
  2a:	0f 1f 40 00          	nopl   0x0(%rax)
  2e:	41 57                	push   %r15
  30:	41 56                	push   %r14
  32:	53                   	push   %rbx
  33:	49 be 00 00 00 00 00 	movabs $0xdffffc0000000000,%r14
  3a:	fc ff df
  3d:	65                   	gs
  3e:	48                   	rex.W