------------[ cut here ]------------ WARNING: CPU: 0 PID: 3177 at mm/kfence/core.c:1143 __kfence_free+0x7c/0xb4 mm/kfence/core.c:1143 Modules linked in: CPU: 0 PID: 3177 Comm: syz-executor.1 Not tainted 6.8.0-syzkaller-13161-gbfa8f18691ed #0 Hardware name: linux,dummy-virt (DT) pstate: 81400009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : __kfence_free+0x7c/0xb4 mm/kfence/core.c:1143 lr : kfence_free include/linux/kfence.h:187 [inline] lr : slab_free_hook mm/slub.c:2085 [inline] lr : slab_free mm/slub.c:4280 [inline] lr : kfree+0x188/0x278 mm/slub.c:4390 sp : ffff8000889cbae0 x29: ffff8000889cbae0 x28: f9ff000003f75a00 x27: 0000000000000000 x26: 0000000000000000 x25: ffff00007fe1af98 x24: f8ff000002c03e00 x23: 89ab800080254658 x22: 0000000000000000 x21: ffff800080254658 x20: ffff00007fe1ac00 x19: fffffdffc1ff8680 x18: 0000000000000001 x17: 0000000000000000 x16: 0000000000000000 x15: ffff800080000000 x14: 0000000000000002 x13: 0000000000000000 x12: 0000000000006000 x11: f6ff000036136824 x10: f6ff000036136800 x9 : 0000000000000042 x8 : ffff8000889cbaf0 x7 : 0000000000000000 x6 : 0000000000000041 x5 : 00000000010000ff x4 : ffff00007f870000 x3 : ffff800082580480 x2 : f6ff000007309000 x1 : ffff00007f873660 x0 : ffff00007fe1ac00 Call trace: __kfence_free+0x7c/0xb4 mm/kfence/core.c:1143 kfence_free include/linux/kfence.h:187 [inline] slab_free_hook mm/slub.c:2085 [inline] slab_free mm/slub.c:4280 [inline] kfree+0x188/0x278 mm/slub.c:4390 kvfree+0x3c/0x4c mm/util.c:680 xt_free_table_info+0x78/0x90 net/netfilter/x_tables.c:1213 __do_replace+0x23c/0x308 net/ipv4/netfilter/ip_tables.c:1084 do_replace net/ipv6/netfilter/ip6_tables.c:1154 [inline] do_ip6t_set_ctl+0x2fc/0x374 net/ipv6/netfilter/ip6_tables.c:1636 nf_setsockopt+0x68/0x94 net/netfilter/nf_sockopt.c:101 ipv6_setsockopt+0x98/0xe4 net/ipv6/ipv6_sockglue.c:999 tcp_setsockopt+0x20/0x3c net/ipv4/tcp.c:3735 sock_common_setsockopt+0x1c/0x28 net/core/sock.c:3727 do_sock_setsockopt+0xa0/0x188 net/socket.c:2311 __sys_setsockopt+0x74/0xcc net/socket.c:2334 __do_sys_setsockopt net/socket.c:2343 [inline] __se_sys_setsockopt net/socket.c:2340 [inline] __arm64_sys_setsockopt+0x28/0x38 net/socket.c:2340 __invoke_syscall arch/arm64/kernel/syscall.c:34 [inline] invoke_syscall+0x48/0x114 arch/arm64/kernel/syscall.c:48 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:133 do_el0_svc+0x1c/0x28 arch/arm64/kernel/syscall.c:152 el0_svc+0x34/0xf8 arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:598 ---[ end trace 0000000000000000 ]---