=====================================================
BUG: KMSAN: use-after-free in __hrtimer_run_queues+0x3dd/0xd80 kernel/time/hrtimer.c:1822
 __hrtimer_run_queues+0x3dd/0xd80 kernel/time/hrtimer.c:1822
 hrtimer_interrupt+0x456/0xb80 kernel/time/hrtimer.c:1887
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1039 [inline]
 __sysvec_apic_timer_interrupt+0xaa/0x420 arch/x86/kernel/apic/apic.c:1056
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
 sysvec_apic_timer_interrupt+0x40/0x90 arch/x86/kernel/apic/apic.c:1050
 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:702

------------[ cut here ]------------
pool index 117502 out of bounds (220) for stack id caffcaff
WARNING: CPU: 0 PID: 6703 at lib/stackdepot.c:452 depot_fetch_stack+0x50/0x80 lib/stackdepot.c:451
Modules linked in:
CPU: 0 UID: 0 PID: 6703 Comm: sed Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(undef) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:depot_fetch_stack+0x50/0x80 lib/stackdepot.c:451
Code: e9 0d 81 e1 f0 3f 00 00 83 7c 08 1c 00 74 34 48 01 c8 c3 cc cc cc cc cc 55 48 89 e5 90 48 c7 c7 cc e0 e8 91 e8 f1 37 26 fa 90 <0f> 0b 90 90 31 c0 5d e9 44 c0 ca 09 cc 90 0f 0b 90 31 c0 c3 cc cc
RSP: 0000:ffff8880471839a0 EFLAGS: 00010006
RAX: ffffffff81207e15 RBX: ffff8880471839d0 RCX: ffff88810ba48000
RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000002
RBP: ffff8880471839a0 R08: ffffea000000000f R09: 0000000000000000
R10: ffff888237b87028 R11: 0000000000000001 R12: 0000000000000005
R13: ffff88810ba48000 R14: 00000000caffcaff R15: ffff888047183ab8
FS:  00007f3f774ebc80(0000) GS:ffff8881aa884000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3f77853000 CR3: 0000000044f7a000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 stack_depot_fetch+0x3d/0x70 lib/stackdepot.c:718
 kmsan_print_origin+0x4c/0x340 mm/kmsan/report.c:100
 kmsan_report+0x1d3/0x320 mm/kmsan/report.c:196
 __msan_warning+0x1b/0x30 mm/kmsan/instrumentation.c:315
 __hrtimer_run_queues+0x3dd/0xd80 kernel/time/hrtimer.c:1822
 hrtimer_interrupt+0x456/0xb80 kernel/time/hrtimer.c:1887
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1039 [inline]
 __sysvec_apic_timer_interrupt+0xaa/0x420 arch/x86/kernel/apic/apic.c:1056
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
 sysvec_apic_timer_interrupt+0x40/0x90 arch/x86/kernel/apic/apic.c:1050
 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:702
RIP: 0033:0x7f3f77869330
Code: 4c 89 9c 24 e8 00 00 00 4c 89 54 24 48 44 89 4c 24 50 eb 13 66 0f 1f 44 00 00 49 83 c6 04 83 e5 01 0f 85 51 07 00 00 41 8b 2e <89> e8 44 31 e8 d1 e8 75 e7 48 83 ec 08 4c 89 f0 ff 74 24 38 4c 29
RSP: 002b:00007ffd88bd1f80 EFLAGS: 00000202
RAX: 00007ffd88bd1ff4 RBX: 00007f3f778560c0 RCX: 000000002898662f
RDX: 00007f3f77795264 RSI: 00007f3f77795cd0 RDI: 00000000000000c5
RBP: 0000000004e2cdc4 R08: 000000002898662f R09: 0000000000000000
R10: 000000000000000a R11: 00007f3f778560c0 R12: 00007f3f77795264
R13: 000000002898662f R14: 00007f3f77795ca8 R15: 00007f3f77799b40
 </TASK>
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
corrupt handle or use after stack_depot_put()
WARNING: CPU: 0 PID: 6703 at lib/stackdepot.c:723 stack_depot_fetch+0x67/0x70 lib/stackdepot.c:723
Modules linked in:
CPU: 0 UID: 0 PID: 6703 Comm: sed Tainted: G        W           6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(undef) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:stack_depot_fetch+0x67/0x70 lib/stackdepot.c:723
Code: 48 85 c0 74 17 48 89 c1 48 83 c1 20 48 89 0b 8b 40 14 5b 41 5e 5d c3 cc cc cc cc cc 90 48 c7 c7 71 ad 00 92 e8 4a 37 26 fa 90 <0f> 0b 90 90 31 c0 eb e0 90 90 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 0000:ffff8880471839b0 EFLAGS: 00010006
RAX: ffffffff81207e15 RBX: ffff8880471839d0 RCX: ffff88810ba48000
RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000002
RBP: ffff8880471839c0 R08: ffffea000000000f R09: 0000000000000000
R10: ffff888237b87028 R11: 0000000000000001 R12: 0000000000000005
R13: ffff88810ba48000 R14: 00000000caffcaff R15: ffff888047183ab8
FS:  00007f3f774ebc80(0000) GS:ffff8881aa884000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3f77853000 CR3: 0000000044f7a000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 kmsan_print_origin+0x4c/0x340 mm/kmsan/report.c:100
 kmsan_report+0x1d3/0x320 mm/kmsan/report.c:196
 __msan_warning+0x1b/0x30 mm/kmsan/instrumentation.c:315
 __hrtimer_run_queues+0x3dd/0xd80 kernel/time/hrtimer.c:1822
 hrtimer_interrupt+0x456/0xb80 kernel/time/hrtimer.c:1887
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1039 [inline]
 __sysvec_apic_timer_interrupt+0xaa/0x420 arch/x86/kernel/apic/apic.c:1056
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
 sysvec_apic_timer_interrupt+0x40/0x90 arch/x86/kernel/apic/apic.c:1050
 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:702
RIP: 0033:0x7f3f77869330
Code: 4c 89 9c 24 e8 00 00 00 4c 89 54 24 48 44 89 4c 24 50 eb 13 66 0f 1f 44 00 00 49 83 c6 04 83 e5 01 0f 85 51 07 00 00 41 8b 2e <89> e8 44 31 e8 d1 e8 75 e7 48 83 ec 08 4c 89 f0 ff 74 24 38 4c 29
RSP: 002b:00007ffd88bd1f80 EFLAGS: 00000202
RAX: 00007ffd88bd1ff4 RBX: 00007f3f778560c0 RCX: 000000002898662f
RDX: 00007f3f77795264 RSI: 00007f3f77795cd0 RDI: 00000000000000c5
RBP: 0000000004e2cdc4 R08: 000000002898662f R09: 0000000000000000
R10: 000000000000000a R11: 00007f3f778560c0 R12: 00007f3f77795264
R13: 000000002898662f R14: 00007f3f77795ca8 R15: 00007f3f77799b40
 </TASK>
---[ end trace 0000000000000000 ]---
Uninit was created at:
(stack is not available)

CPU: 0 UID: 0 PID: 6703 Comm: sed Tainted: G        W           6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(undef) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
=====================================================