------------[ cut here ]------------ WARNING: CPU: 0 PID: 7276 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 mm/maccess.c:226 Modules linked in: CPU: 0 PID: 7276 Comm: syz.2.1227 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 RIP: 0010:copy_from_user_nofault+0x160/0x1c0 mm/maccess.c:226 Code: 24 45 31 f6 31 ff 89 de e8 5d 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 90 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe RSP: 0000:ffffc900031cf848 EFLAGS: 00010006 RAX: ffffffff81a09160 RBX: 0000000000000008 RCX: ffff88801e4f1dc0 RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: ffff88801e4f1dc7 R09: 1ffff11003c9e3b8 R10: dffffc0000000000 R11: ffffed1003c9e3b9 R12: ffff88801e4f3548 R13: 00007ffffffff000 R14: ffffc900031cf8b8 R15: 0000000020000000 FS: 00007fb9f46646c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000100000001 CR3: 000000004865f000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: bpf_probe_read_user_common kernel/trace/bpf_trace.c:157 [inline] ____bpf_probe_read_compat kernel/trace/bpf_trace.c:281 [inline] bpf_probe_read_compat+0xdd/0x170 kernel/trace/bpf_trace.c:277 bpf_prog_ca2ebcd76953ac02_F+0x2c/0x83c bpf_prog_b89d7ca37128ef40+0x1a/0x82c bpf_dispatcher_nop_func include/linux/bpf.h:888 [inline] __bpf_prog_run include/linux/filter.h:628 [inline] bpf_prog_run include/linux/filter.h:635 [inline] bpf_overflow_handler+0x1c2/0x4a0 kernel/events/core.c:10297 __perf_event_overflow+0x364/0x530 kernel/events/core.c:9515 perf_swevent_hrtimer+0x41b/0x5b0 kernel/events/core.c:10934 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x4ad/0xb70 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x3bb/0x8d0 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1097 [inline] __sysvec_apic_timer_interrupt+0x137/0x4a0 arch/x86/kernel/apic/apic.c:1114 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline] sysvec_apic_timer_interrupt+0x4d/0xc0 arch/x86/kernel/apic/apic.c:1108 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676 RIP: 0033:0x7fb9f62f1cdf Code: 45 0c 85 c0 75 26 48 8d 75 0c b9 40 42 0f 00 ba 81 00 00 00 c7 45 0c 01 00 00 00 bf ca 00 00 00 31 c0 45 31 e4 e8 a1 9a 13 00 88 48 8d 3d ff 08 1d 00 31 c0 e8 a1 ed fe ff 90 41 57 31 d2 be RSP: 002b:00007fb9f46640f0 EFLAGS: 00000207 RAX: 0000000000000001 RBX: 00007fb9f66a5098 RCX: 00007fb9f642b799 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb9f66a509c RBP: 00007fb9f66a5090 R08: 00275c917ad35010 R09: 0000000000000000 R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fb9f66a5128 R14: 00007ffd501ce510 R15: 00007ffd501ce5f8