Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts.
2025/06/01 10:28:39 ignoring optional flag "sandboxArg"="0"
2025/06/01 10:28:41 parsed 1 programs
[ 342.324627][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 342.331702][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 382.446759][ T6500] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 388.022354][ T4558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 388.030692][ T4558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 388.073083][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 388.081900][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 390.702910][ T6554] chnl_net:caif_netlink_parms(): no params data found
[ 390.994241][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state
[ 391.002050][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state
[ 391.011634][ T6554] bridge_slave_0: entered allmulticast mode
[ 391.020414][ T6554] bridge_slave_0: entered promiscuous mode
[ 391.033712][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state
[ 391.041334][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state
[ 391.049087][ T6554] bridge_slave_1: entered allmulticast mode
[ 391.057237][ T6554] bridge_slave_1: entered promiscuous mode
[ 391.122015][ T6554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 391.139304][ T6554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 391.201576][ T6554] team0: Port device team_slave_0 added
[ 391.216121][ T6554] team0: Port device team_slave_1 added
[ 391.275967][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 391.283956][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 391.310859][ T6554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 391.325295][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 391.332938][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 391.359610][ T6554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 391.447167][ T6554] hsr_slave_0: entered promiscuous mode
[ 391.455436][ T6554] hsr_slave_1: entered promiscuous mode
[ 392.293087][ T6554] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 392.315712][ T6554] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 392.338237][ T6554] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 392.360482][ T6554] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 392.703870][ T6554] 8021q: adding VLAN 0 to HW filter on device bond0
[ 392.764344][ T6554] 8021q: adding VLAN 0 to HW filter on device team0
[ 392.791964][ T35] bridge0: port 1(bridge_slave_0) entered blocking state
[ 392.799872][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 392.832031][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state
[ 392.839672][ T4315] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 392.983069][ T6554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 393.426820][ T6554] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 393.604095][ T6554] veth0_vlan: entered promiscuous mode
[ 393.641812][ T6554] veth1_vlan: entered promiscuous mode
[ 393.760367][ T6554] veth0_macvtap: entered promiscuous mode
[ 393.787442][ T6554] veth1_macvtap: entered promiscuous mode
[ 393.857375][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 393.895062][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 393.919029][ T6554] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 393.928429][ T6554] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 393.937725][ T6554] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 393.946993][ T6554] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 396.004102][ T4968] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 396.086591][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 396.096107][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 396.105475][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 396.111991][ T4968] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 396.120270][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 396.134545][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 396.343468][ T4968] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 396.462111][ T4968] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 396.711740][ T4968] bridge_slave_1: left allmulticast mode
[ 396.717757][ T4968] bridge_slave_1: left promiscuous mode
[ 396.724754][ T4968] bridge0: port 2(bridge_slave_1) entered disabled state
[ 396.779809][ T4968] bridge_slave_0: left allmulticast mode
[ 396.785799][ T4968] bridge_slave_0: left promiscuous mode
[ 396.794897][ T4968] bridge0: port 1(bridge_slave_0) entered disabled state
[ 397.169313][ T4968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 397.188139][ T4968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 397.214128][ T4968] bond0 (unregistering): Released all slaves
[ 397.504550][ T4968] hsr_slave_0: left promiscuous mode
[ 397.526614][ T4968] hsr_slave_1: left promiscuous mode
[ 397.536438][ T4968] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 397.544543][ T4968] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 397.599264][ T4968] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 397.607090][ T4968] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 397.676346][ T4968] veth1_macvtap: left promiscuous mode
[ 397.682644][ T4968] veth0_macvtap: left promiscuous mode
[ 397.688732][ T4968] veth1_vlan: left promiscuous mode
[ 397.694309][ T4968] veth0_vlan: left promiscuous mode
[ 398.290557][ T4968] team0 (unregistering): Port device team_slave_1 removed
[ 398.354452][ T4968] team0 (unregistering): Port device team_slave_0 removed
2025/06/01 10:29:59 executed programs: 0
[ 402.697490][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 402.706749][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 402.716924][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 402.730842][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 402.742785][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 403.241106][ T6737] chnl_net:caif_netlink_parms(): no params data found
[ 403.660648][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state
[ 403.668187][ T6737] bridge0: port 1(bridge_slave_0) entered disabled state
[ 403.677617][ T6737] bridge_slave_0: entered allmulticast mode
[ 403.686843][ T6737] bridge_slave_0: entered promiscuous mode
[ 403.701699][ T6737] bridge0: port 2(bridge_slave_1) entered blocking state
[ 403.709858][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state
[ 403.717454][ T6737] bridge_slave_1: entered allmulticast mode
[ 403.726923][ T6737] bridge_slave_1: entered promiscuous mode
[ 403.781765][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 403.788889][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 403.858140][ T6737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 403.880108][ T6737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 403.976114][ T6737] team0: Port device team_slave_0 added
[ 403.994606][ T6737] team0: Port device team_slave_1 added
[ 404.082489][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 404.090076][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 404.118004][ T6737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 404.135508][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 404.143042][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 404.170825][ T6737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 404.302630][ T6737] hsr_slave_0: entered promiscuous mode
[ 404.312313][ T6737] hsr_slave_1: entered promiscuous mode
[ 404.788856][ T5870] Bluetooth: hci0: command tx timeout
[ 405.025921][ T6737] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 405.049020][ T6737] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 405.072708][ T6737] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 405.091619][ T6737] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 405.453579][ T6737] 8021q: adding VLAN 0 to HW filter on device bond0
[ 405.503644][ T6737] 8021q: adding VLAN 0 to HW filter on device team0
[ 405.535165][ T57] bridge0: port 1(bridge_slave_0) entered blocking state
[ 405.542923][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 405.577130][ T57] bridge0: port 2(bridge_slave_1) entered blocking state
[ 405.584811][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 406.169399][ T6737] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 406.321354][ T6737] veth0_vlan: entered promiscuous mode
[ 406.357545][ T6737] veth1_vlan: entered promiscuous mode
[ 406.458202][ T6737] veth0_macvtap: entered promiscuous mode
[ 406.494096][ T6737] veth1_macvtap: entered promiscuous mode
[ 406.556278][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 406.595976][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 406.619295][ T6737] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 406.628791][ T6737] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 406.637877][ T6737] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 406.647677][ T6737] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 406.869002][ T5870] Bluetooth: hci0: command tx timeout
[ 408.608444][ T4968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 408.616919][ T4968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 408.706237][ T4968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 408.714765][ T4968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/06/01 10:30:05 executed programs: 2
[ 408.855660][ T6844] loop0: detected capacity change from 0 to 64
[ 409.034667][ T5870] Bluetooth: hci0: command tx timeout
[ 409.923022][ T6855] mm/pgtable-generic.c:42: bad pud ffff8880501e8100(2e000900caffdeff)
[ 409.937090][ T6855] BUG: Bad rss-counter state mm:ffff888044c52840 type:MM_FILEPAGES val:370
[ 409.946461][ T6855] BUG: Bad rss-counter state mm:ffff888044c52840 type:MM_ANONPAGES val:61
[ 409.955948][ T6855] BUG: non-zero pgtables_bytes on freeing mm: 32768
[ 409.979529][ T57] =====================================================
[ 409.986777][ T57] BUG: KMSAN: use-after-free in batadv_mcast_mla_update+0x19bf/0x4f80
[ 409.995502][ T57] batadv_mcast_mla_update+0x19bf/0x4f80
[ 410.002259][ T57] process_scheduled_works+0xb91/0x1d80
[ 410.008053][ T57] worker_thread+0xedf/0x1590
[ 410.014456][ T57] kthread+0xd5c/0xf00
[ 410.019505][ T57] ret_from_fork+0x1e3/0x310
[ 410.024476][ T57] ret_from_fork_asm+0x1a/0x30
[ 410.029988][ T57]
[ 410.032465][ T57] ------------[ cut here ]------------
[ 410.038064][ T57] pool index 117502 out of bounds (214) for stack id caffcaff
[ 410.047399][ T57] WARNING: CPU: 0 PID: 57 at lib/stackdepot.c:452 depot_fetch_stack+0x50/0x80
[ 410.056843][ T57] Modules linked in:
[ 410.061110][ T57] CPU: 0 UID: 0 PID: 57 Comm: kworker/u8:3 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(undef)
[ 410.075144][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 410.085672][ T57] Workqueue: bat_events batadv_mcast_mla_update
[ 410.092341][ T57] RIP: 0010:depot_fetch_stack+0x50/0x80
[ 410.098168][ T57] Code: e9 0d 81 e1 f0 3f 00 00 83 7c 08 1c 00 74 34 48 01 c8 c3 cc cc cc cc cc 55 48 89 e5 90 48 c7 c7 cc e0 e8 91 e8 f1 37 26 fa 90 <0f> 0b 90 90 31 c0 5d e9 44 c0 ca 09 cc 90 0f 0b 90 31 c0 c3 cc cc
[ 410.120383][ T57] RSP: 0018:ffff888104357750 EFLAGS: 00010293
[ 410.126689][ T57] RAX: ffffffff81207e15 RBX: ffff888104357780 RCX: ffff8881041320c0
[ 410.135634][ T57] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 410.143965][ T57] RBP: ffff888104357750 R08: ffffea000000000f R09: 0000000000000000
[ 410.152369][ T57] R10: ffff888237b87028 R11: 0000000000000001 R12: 0000000000000006
[ 410.160994][ T57] R13: ffff8881041320c0 R14: 00000000caffcaff R15: ffff888104357868
[ 410.169281][ T57] FS: 0000000000000000(0000) GS:ffff8881aa884000(0000) knlGS:0000000000000000
[ 410.178390][ T57] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 410.185654][ T57] CR2: 00007ffcc7ba2ff8 CR3: 0000000012466000 CR4: 00000000003526f0
[ 410.193963][ T57] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 410.202274][ T57] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 410.210665][ T57] Call Trace:
[ 410.214283][ T57]
[ 410.219031][ T57] stack_depot_fetch+0x3d/0x70
[ 410.224035][ T57] kmsan_print_origin+0x4c/0x340
[ 410.229995][ T57] ? stack_trace_print+0xbd/0xf0
[ 410.235195][ T57] kmsan_report+0x1d3/0x320
[ 410.240221][ T57] ? __msan_warning+0x1b/0x30
[ 410.245206][ T57] ? batadv_mcast_mla_update+0x19bf/0x4f80
[ 410.251596][ T57] ? process_scheduled_works+0xb91/0x1d80
[ 410.257749][ T57] ? worker_thread+0xedf/0x1590
[ 410.262987][ T57] ? kthread+0xd5c/0xf00
[ 410.267623][ T57] ? ret_from_fork+0x1e3/0x310
[ 410.272988][ T57] ? ret_from_fork_asm+0x1a/0x30
[ 410.278345][ T57] ? __kmalloc_node_track_caller_noprof+0x12b1/0x12f0
[ 410.285549][ T57] ? kmsan_get_metadata+0xfb/0x160
[ 410.291211][ T57] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 410.297610][ T57] ? kmsan_get_metadata+0xfb/0x160
[ 410.303104][ T57] ? process_scheduled_works+0xb91/0x1d80
[ 410.309717][ T57] ? __msan_warning+0x1b/0x30
[ 410.314620][ T57] ? filter_irq_stacks+0x13f/0x190
[ 410.321643][ T57] ? stack_depot_save_flags+0x35/0x7b0
[ 410.327524][ T57] ? kmsan_get_metadata+0xfb/0x160
[ 410.333693][ T57] ? kmsan_get_metadata+0xfb/0x160
[ 410.339295][ T57] ? kmsan_get_metadata+0xfb/0x160
[ 410.344814][ T57] __msan_warning+0x1b/0x30
[ 410.349691][ T57] batadv_mcast_mla_update+0x19bf/0x4f80
[ 410.355603][ T57] ? kmsan_get_metadata+0xfb/0x160
[ 410.361259][ T57] ? __pfx_batadv_mcast_mla_update+0x10/0x10
[ 410.367515][ T57] process_scheduled_works+0xb91/0x1d80
[ 410.373529][ T57] worker_thread+0xedf/0x1590
[ 410.378670][ T57] kthread+0xd5c/0xf00
[ 410.382969][ T57] ? __pfx_worker_thread+0x10/0x10
[ 410.388327][ T57] ? __pfx_kthread+0x10/0x10
[ 410.389535][ C1] Oops: general protection fault, probably for non-canonical address 0xccffcaffcdffca80: 0000 [#1] SMP PTI
[ 410.389674][ C1] CPU: 1 UID: 0 PID: 6844 Comm: syz.0.16 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(undef)
[ 410.389800][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 410.394452][ T57] ret_from_fork+0x1e3/0x310
[ 410.405875][ C1] RIP: 0010:get_freepointer+0x32/0x70
[ 410.406040][ C1] Code: 41 54 53 49 89 f6 49 89 ff e8 9a 78 12 00 48 89 c3 45 8b 67 28 49 83 c7 28 4c 89 ff e8 87 6c 12 00 83 38 00 75 30 4b 8d 3c 34 <4f> 8b 34 34 e8 15 6d 12 00 48 8b 00 8b 0a 48 89 83 20 03 00 00 89
[ 410.417943][ T57] ? __pfx_kthread+0x10/0x10
[ 410.427976][ C1] RSP: 0018:ffff88813fd048e0 EFLAGS: 00010246
[ 410.428100][ C1] RAX: ffff8880bb844028 RBX: ffff88813fd9d240 RCX: 0000000000500154
[ 410.428189][ C1] RDX: ffff888100044028 RSI: 0000000000000001 RDI: ccffcaffcdffca80
[ 410.428280][ C1] RBP: ffff88813fd04900 R08: ffffea000000000f R09: 0000000000000000
[ 410.428371][ C1] R10: ffff88823fb25968 R11: ffff888233b73400 R12: 0000000000000080
[ 410.428458][ C1] R13: ffff88813fd9d240 R14: ccffcaffcdffca00 R15: ffff888100444028
[ 410.428555][ C1] FS: 00007f45a84676c0(0000) GS:ffff8881aa984000(0000) knlGS:0000000000000000
[ 410.428663][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 410.428752][ C1] CR2: 0000001b30a5ffff CR3: 0000000034488000 CR4: 00000000003526f0
[ 410.428848][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 410.428925][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 410.429009][ C1] Call Trace:
[ 410.429056][ C1]
[ 410.429114][ C1] get_freepointer_safe+0x2d/0x50
[ 410.429281][ C1] kmem_cache_alloc_noprof+0x30a/0xec0
[ 410.429469][ C1] ? dst_alloc+0x1aa/0x250
[ 410.429647][ C1] dst_alloc+0x1aa/0x250
[ 410.429803][ C1] ? __pfx_ip6_dst_gc+0x10/0x10
[ 410.434592][ T57] ret_from_fork_asm+0x1a/0x30
[ 410.440025][ C1] icmp6_dst_alloc+0x14f/0xa00
[ 410.440190][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 410.440364][ C1] ? kmsan_get_metadata+0xfb/0x160
[ 410.440538][ C1] ndisc_send_skb+0x2c0/0x15c0
[ 410.440701][ C1] ? __msan_memcpy+0x108/0x1c0
[ 410.460621][ T57]
[ 410.465080][ C1] ndisc_send_rs+0x89e/0xa10
[ 410.471560][ T57] ---[ end trace 0000000000000000 ]---
[ 410.479598][ C1] addrconf_rs_timer+0x4a1/0x730
[ 410.479815][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10
[ 410.487922][ T57] ------------[ cut here ]------------
[ 410.487954][ T57] corrupt handle or use after stack_depot_put()
[ 410.489676][ T57] WARNING: CPU: 0 PID: 57 at lib/stackdepot.c:723 stack_depot_fetch+0x67/0x70
[ 410.495958][ C1] call_timer_fn+0x49/0x520
[ 410.504116][ T57] Modules linked in:
[ 410.512070][ C1] __run_timer_base+0x80f/0xd90
[ 410.521341][ T57]
[ 410.527849][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10
[ 410.528051][ C1] ? kmsan_get_metadata+0xfb/0x160
[ 410.528226][ C1] ? kmsan_get_metadata+0xfb/0x160
[ 410.528395][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 410.528564][ C1] ? __pfx_run_timer_softirq+0x10/0x10
[ 410.528751][ C1] run_timer_softirq+0x3a/0x80
[ 410.528933][ C1] handle_softirqs+0x166/0x6e0
[ 410.529135][ C1] __irq_exit_rcu+0x66/0x180
[ 410.529309][ C1] irq_exit_rcu+0x12/0x20
[ 410.529476][ C1] sysvec_apic_timer_interrupt+0x84/0x90
[ 410.537699][ T57] CPU: 0 UID: 0 PID: 57 Comm: kworker/u8:3 Tainted: G W 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(undef)
[ 410.545792][ C1]
[ 410.545840][ C1]
[ 410.545889][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30
[ 410.546043][ C1] RIP: 0010:memcpy_orig+0x16/0x130
[ 410.546223][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 f8 48 83 fa 20 72 7e 40 38 fe 7c 35 48 83 ea 20 48 83 ea 20 <4c> 8b 06 4c 8b 4e 08 4c 8b 56 10 4c 8b 5e 18 48 8d 76 20 4c 89 07
[ 410.546332][ C1] RSP: 0018:ffff888034487650 EFLAGS: 00000282
[ 410.546449][ C1] RAX: ffff88804eb38a0e RBX: ffffffffffffffbc RCX: 0000000000000000
[ 410.546539][ C1] RDX: ffffffffaf8792bc RSI: ffff88809f2bf104 RDI: ffff88809f2bf6ce
[ 410.554807][ T57] Tainted: [W]=WARN
[ 410.558000][ C1] RBP: ffff888034487688 R08: caffcaffcaffcaff R09: caffcaffcaffcaff
[ 410.561073][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 410.566177][ C1] R10: caffcaffcaffcaff R11: caffcaffcaffcaff R12: 0000000000000000
[ 410.571941][ T57] Workqueue: bat_events batadv_mcast_mla_update
[ 410.576357][ C1] R13: 0000000000000000 R14: ffff88804eb38444 R15: ffff88804eb38a0e
[ 410.580873][ T57]
[ 410.585655][ C1] ? __msan_memcpy+0x62/0x1c0
[ 410.590747][ T57] RIP: 0010:stack_depot_fetch+0x67/0x70
[ 410.595453][ C1] hfs_bnode_copy+0x1d6/0x260
[ 410.601477][ T57] Code: 48 85 c0 74 17 48 89 c1 48 83 c1 20 48 89 0b 8b 40 14 5b 41 5e 5d c3 cc cc cc cc cc 90 48 c7 c7 71 ad 00 92 e8 4a 37 26 fa 90 <0f> 0b 90 90 31 c0 eb e0 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 410.606431][ C1] hfs_bnode_split+0xc61/0x1830
[ 410.611281][ T57] RSP: 0018:ffff888104357760 EFLAGS: 00010293
[ 410.616099][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 410.619317][ T57]
[ 410.623921][ C1] hfs_brec_insert+0x533/0x1480
[ 410.631794][ T57] RAX: ffffffff81207e15 RBX: ffff888104357780 RCX: ffff8881041320c0
[ 410.634493][ C1] hfs_cat_move+0x12a1/0x1390
[ 410.928222][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 410.934523][ C1] hfs_rename+0x313/0x550
[ 410.939251][ C1] ? __pfx_hfs_rename+0x10/0x10
[ 410.944484][ C1] ? __pfx_hfs_rename+0x10/0x10
[ 410.949602][ C1] vfs_rename+0x1e87/0x2460
[ 410.954518][ C1] do_renameat2+0x175e/0x1d70
[ 410.959845][ C1] __x64_sys_rename+0xd7/0x140
[ 410.964983][ C1] x64_sys_call+0x3553/0x3db0
[ 410.969951][ C1] do_syscall_64+0xd9/0x210
[ 410.974723][ C1] ? irqentry_exit+0x16/0x60
[ 410.979645][ C1] ? clear_bhb_loop+0x40/0x90
[ 410.984634][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 410.990901][ C1] RIP: 0033:0x7f45a758d169
[ 410.995636][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 411.015791][ C1] RSP: 002b:00007f45a8467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[ 411.024776][ C1] RAX: ffffffffffffffda RBX: 00007f45a77a5fa0 RCX: 00007f45a758d169
[ 411.032962][ C1] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 00002000000003c0
[ 411.041151][ C1] RBP: 00007f45a760e990 R08: 0000000000000000 R09: 0000000000000000
[ 411.049618][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 411.057819][ C1] R13: 0000000000000000 R14: 00007f45a77a5fa0 R15: 00007ffcc7ba59e8
[ 411.066297][ C1]
[ 411.069500][ C1] Modules linked in:
[ 411.073766][ C1] ---[ end trace 0000000000000000 ]---
[ 411.079811][ C1] RIP: 0010:get_freepointer+0x32/0x70
[ 411.085789][ C1] Code: 41 54 53 49 89 f6 49 89 ff e8 9a 78 12 00 48 89 c3 45 8b 67 28 49 83 c7 28 4c 89 ff e8 87 6c 12 00 83 38 00 75 30 4b 8d 3c 34 <4f> 8b 34 34 e8 15 6d 12 00 48 8b 00 8b 0a 48 89 83 20 03 00 00 89
[ 411.105981][ C1] RSP: 0018:ffff88813fd048e0 EFLAGS: 00010246
[ 411.112647][ C1] RAX: ffff8880bb844028 RBX: ffff88813fd9d240 RCX: 0000000000500154
[ 411.120988][ C1] RDX: ffff888100044028 RSI: 0000000000000001 RDI: ccffcaffcdffca80
[ 411.129305][ C1] RBP: ffff88813fd04900 R08: ffffea000000000f R09: 0000000000000000
[ 411.137874][ C1] R10: ffff88823fb25968 R11: ffff888233b73400 R12: 0000000000000080
[ 411.146264][ C1] R13: ffff88813fd9d240 R14: ccffcaffcdffca00 R15: ffff888100444028
[ 411.154865][ C1] FS: 00007f45a84676c0(0000) GS:ffff8881aa984000(0000) knlGS:0000000000000000
[ 411.164182][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 411.171135][ C1] CR2: 0000001b30a5ffff CR3: 0000000034488000 CR4: 00000000003526f0
[ 411.179537][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 411.187785][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 411.196050][ C1] Kernel panic - not syncing: Fatal exception in interrupt
[ 411.203926][ C1] Kernel Offset: disabled
[ 411.208411][ C1] Rebooting in 86400 seconds..