------------[ cut here ]------------
WARNING: CPU: 0 PID: 3286 at mm/kfence/core.c:1147 __kfence_free+0x7c/0xb4 mm/kfence/core.c:1147
Modules linked in:
CPU: 0 PID: 3286 Comm: syz-executor.1 Not tainted 6.7.0-rc7-syzkaller-00003-gfbafc3e621c3 #0
Hardware name: linux,dummy-virt (DT)
pstate: 81400009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)
pc : __kfence_free+0x7c/0xb4 mm/kfence/core.c:1147
lr : kfence_free include/linux/kfence.h:187 [inline]
lr : __slab_free+0x48c/0x508 mm/slub.c:3614
sp : ffff800082d23ae0
x29: ffff800082d23ae0 x28: f2ff000002c03d00 x27: ffff00007fe77ec0
x26: 00000000ffffffff x25: 0000000000000002 x24: ffff00007fe77e00
x23: 0000000000000001 x22: ffff00007fe77e00 x21: ffff00007fe77e00
x20: ffff80008142a874 x19: fffffc0001ff9dc0 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000802ffce4
x14: 0000000000000100 x13: 0000000000000100 x12: 0000000000000000
x11: 0000000000000032 x10: 000000000000000c x9 : 0000000000000000
x8 : ffff800082d23bc0 x7 : 0000000000000000 x6 : 0000000000000000
x5 : ffff80008142a874 x4 : ffff00007f868000 x3 : ffff8000824b02b8
x2 : f6ff00000b7fce00 x1 : ffff00007f8798f0 x0 : ffff00007fe77e00
Call trace:
 __kfence_free+0x7c/0xb4 mm/kfence/core.c:1147
 kfence_free include/linux/kfence.h:187 [inline]
 __slab_free+0x48c/0x508 mm/slub.c:3614
 do_slab_free mm/slub.c:3757 [inline]
 slab_free mm/slub.c:3810 [inline]
 __kmem_cache_free+0x220/0x230 mm/slub.c:3822
 kfree+0x5c/0x74 mm/slab_common.c:1056
 skb_kfree_head net/core/skbuff.c:950 [inline]
 skb_free_head+0x4c/0xb4 net/core/skbuff.c:962
 skb_release_data+0x154/0x1f8 net/core/skbuff.c:992
 skb_release_all net/core/skbuff.c:1058 [inline]
 __kfree_skb net/core/skbuff.c:1072 [inline]
 kfree_skb_reason+0x5c/0xc4 net/core/skbuff.c:1108
 kfree_skb include/linux/skbuff.h:1234 [inline]
 unix_release_sock+0x1fc/0x40c net/unix/af_unix.c:661
 unix_release+0x3c/0x54 net/unix/af_unix.c:1064
 __sock_release+0x40/0xb4 net/socket.c:659
 sock_close+0x18/0x28 net/socket.c:1419
 __fput+0x78/0x2c4 fs/file_table.c:394
 __fput_sync+0x50/0x5c fs/file_table.c:475
 __do_sys_close fs/open.c:1587 [inline]
 __se_sys_close fs/open.c:1572 [inline]
 __arm64_sys_close+0x38/0x7c fs/open.c:1572
 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline]
 invoke_syscall+0x48/0x114 arch/arm64/kernel/syscall.c:51
 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:136
 do_el0_svc+0x1c/0x28 arch/arm64/kernel/syscall.c:155
 el0_svc+0x34/0xd8 arch/arm64/kernel/entry-common.c:678
 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:696
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:595
---[ end trace 0000000000000000 ]---