[Bug 40222] IMalloc(Spy)::Free nullptr