------------[ cut here ]------------
WARNING: CPU: 0 PID: 3859 at mm/kfence/core.c:1147 __kfence_free+0x7c/0xb4 mm/kfence/core.c:1147
Modules linked in:
CPU: 0 PID: 3859 Comm: syz-executor.0 Not tainted 6.6.0-rc5-syzkaller-00234-g8cb1f10d8c4b #0
Hardware name: linux,dummy-virt (DT)
pstate: 81400009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)
pc : __kfence_free+0x7c/0xb4 mm/kfence/core.c:1147
lr : kfence_free include/linux/kfence.h:187 [inline]
lr : __slab_free+0x48c/0x508 mm/slub.c:3614
sp : ffff8000896dbc30
x29: ffff8000896dbc30 x28: fbff000002c03b00 x27: 0000000000000000
x26: 0000000000000000 x25: 0000000000000000 x24: ffff00007fe4b000
x23: 0000000000000001 x22: ffff00007fe4b000 x21: ffff00007fe4b000
x20: ffff800080330f6c x19: fffffc0001ff92c0 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000
x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000
x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000
x8 : ffff8000896dbd10 x7 : 0000000000000000 x6 : 0000000000000000
x5 : ffff800080330f6c x4 : ffff00007f869000 x3 : ffff800082420338
x2 : f0ff0000089a7b80 x1 : ffff00007f874540 x0 : ffff00007fe4b000
Call trace:
 __kfence_free+0x7c/0xb4 mm/kfence/core.c:1147
 kfence_free include/linux/kfence.h:187 [inline]
 __slab_free+0x48c/0x508 mm/slub.c:3614
 do_slab_free mm/slub.c:3757 [inline]
 slab_free mm/slub.c:3810 [inline]
 __kmem_cache_free+0x220/0x230 mm/slub.c:3822
 kfree+0x5c/0x74 mm/slab_common.c:1072
 single_release+0x38/0x4c fs/seq_file.c:615
 __fput+0xbc/0x27c fs/file_table.c:384
 __fput_sync+0x50/0x5c fs/file_table.c:465
 __do_sys_close fs/open.c:1572 [inline]
 __se_sys_close fs/open.c:1557 [inline]
 __arm64_sys_close+0x38/0x7c fs/open.c:1557
 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline]
 invoke_syscall+0x48/0x114 arch/arm64/kernel/syscall.c:51
 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:136
 do_el0_svc+0x1c/0x28 arch/arm64/kernel/syscall.c:155
 el0_svc+0x40/0x114 arch/arm64/kernel/entry-common.c:678
 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:696
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:595
---[ end trace 0000000000000000 ]---