------------[ cut here ]------------
WARNING: CPU: 0 PID: 3637 at mm/kfence/core.c:1143 __kfence_free+0x7c/0xb4 mm/kfence/core.c:1143
Modules linked in:
CPU: 0 PID: 3637 Comm: syz-executor.0 Not tainted 6.8.0-syzkaller-11752-gdba89d1b81df #0
Hardware name: linux,dummy-virt (DT)
pstate: 81400009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)
pc : __kfence_free+0x7c/0xb4 mm/kfence/core.c:1143
lr : kfence_free include/linux/kfence.h:187 [inline]
lr : slab_free_hook mm/slub.c:2085 [inline]
lr : slab_free mm/slub.c:4280 [inline]
lr : kfree+0x188/0x278 mm/slub.c:4390
sp : ffff80008977b9b0
x29: ffff80008977b9b0 x28: f1ff000003f61200 x27: 0000000000000000
x26: faff000002d76040 x25: 0000000000000000 x24: fdff000002c03800
x23: 86ae800080255530 x22: 0000000000000000 x21: ffff800080255530
x20: ffff00007ff90000 x19: fffffdffc1ffe400 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000038
x14: 57100c0606161707 x13: 0065757161706f2e x12: 79616c7265766f2e
x11: 0101010101010101 x10: 060080008316a238 x9 : 0000000000000002
x8 : 00000000000000a8 x7 : f1ff000005dba21c x6 : 0000000000000001
x5 : f1ff000003f61200 x4 : ffff00007f86f000 x3 : ffff800082570480
x2 : f2ff000026d37680 x1 : ffff00007f8a75b8 x0 : ffff00007ff90000
Call trace:
 __kfence_free+0x7c/0xb4 mm/kfence/core.c:1143
 kfence_free include/linux/kfence.h:187 [inline]
 slab_free_hook mm/slub.c:2085 [inline]
 slab_free mm/slub.c:4280 [inline]
 kfree+0x188/0x278 mm/slub.c:4390
 kvfree+0x3c/0x4c mm/util.c:680
 simple_xattr_free+0x28/0x38 fs/xattr.c:1071
 shmem_xattr_handler_set+0xe0/0x1a8 mm/shmem.c:3741
 __vfs_setxattr+0xac/0xe8 fs/xattr.c:200
 __vfs_setxattr_noperm+0x88/0x204 fs/xattr.c:234
 __vfs_setxattr_locked+0xe0/0x120 fs/xattr.c:295
 vfs_setxattr+0x94/0x174 fs/xattr.c:321
 do_setxattr+0xa0/0xb8 fs/xattr.c:629
 setxattr+0xb8/0xd0 fs/xattr.c:652
 __do_sys_fsetxattr fs/xattr.c:708 [inline]
 __se_sys_fsetxattr fs/xattr.c:697 [inline]
 __arm64_sys_fsetxattr+0xc4/0xe8 fs/xattr.c:697
 __invoke_syscall arch/arm64/kernel/syscall.c:34 [inline]
 invoke_syscall+0x48/0x114 arch/arm64/kernel/syscall.c:48
 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:133
 do_el0_svc+0x1c/0x28 arch/arm64/kernel/syscall.c:152
 el0_svc+0x34/0xf8 arch/arm64/kernel/entry-common.c:712
 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:730
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:598
---[ end trace 0000000000000000 ]---