------------[ cut here ]------------ WARNING: CPU: 1 PID: 3276 at mm/kfence/core.c:1147 __kfence_free+0x7c/0xb4 mm/kfence/core.c:1147 Modules linked in: CPU: 1 PID: 3276 Comm: udevd Not tainted 6.7.0-rc7-syzkaller-00003-gfbafc3e621c3 #0 Hardware name: linux,dummy-virt (DT) pstate: 81400009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : __kfence_free+0x7c/0xb4 mm/kfence/core.c:1147 lr : kfence_free include/linux/kfence.h:187 [inline] lr : __slab_free+0x48c/0x508 mm/slub.c:3614 sp : ffff80008000bd20 x29: ffff80008000bd20 x28: fcff000002c03900 x27: 000000000000000a x26: ffff00007f9d4fb8 x25: ffff8000825bbf00 x24: ffff00007ff8d000 x23: 0000000000000001 x22: ffff00007ff8d000 x21: ffff00007ff8d000 x20: ffff8000804bffcc x19: fffffc0001ffe340 x18: 0000000000000000 x17: ffff7ffffd544000 x16: ffff800080008000 x15: 0000000000000000 x14: 00000000000000b2 x13: 00000000000000b2 x12: 0000000000000002 x11: fffffffdd786d500 x10: 0000000000000380 x9 : 00000044c0d7da81 x8 : ffff80008000be00 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff8000804bffcc x4 : ffff00007f868000 x3 : ffff8000824b02b8 x2 : f3ff00002afd5500 x1 : ffff00007f8a0ec8 x0 : ffff00007ff8d000 Call trace: __kfence_free+0x7c/0xb4 mm/kfence/core.c:1147 kfence_free include/linux/kfence.h:187 [inline] __slab_free+0x48c/0x508 mm/slub.c:3614 do_slab_free mm/slub.c:3757 [inline] slab_free mm/slub.c:3810 [inline] __kmem_cache_free+0x220/0x230 mm/slub.c:3822 kfree+0x5c/0x74 mm/slab_common.c:1056 security_cred_free+0x44/0x58 security/security.c:2934 put_cred_rcu+0x24/0x170 kernel/cred.c:78 rcu_do_batch kernel/rcu/tree.c:2158 [inline] rcu_core+0x258/0x654 kernel/rcu/tree.c:2431 rcu_core_si+0x10/0x1c kernel/rcu/tree.c:2448 __do_softirq+0x10c/0x26c kernel/softirq.c:553 ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:886 do_softirq_own_stack+0x1c/0x28 arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:434 [inline] __irq_exit_rcu kernel/softirq.c:632 [inline] irq_exit_rcu+0xc0/0xdc kernel/softirq.c:644 el0_interrupt+0x48/0xd4 arch/arm64/kernel/entry-common.c:761 __el0_irq_handler_common+0x18/0x24 arch/arm64/kernel/entry-common.c:768 el0t_64_irq_handler+0x10/0x1c arch/arm64/kernel/entry-common.c:773 el0t_64_irq+0x19c/0x1a0 arch/arm64/kernel/entry.S:596 ---[ end trace 0000000000000000 ]---