================================================================== BUG: KASAN: double-free in kfree_skb_reason include/linux/skbuff.h:1260 [inline] BUG: KASAN: double-free in kfree_skb include/linux/skbuff.h:1269 [inline] BUG: KASAN: double-free in hci_req_sync_complete+0xe8/0x290 net/bluetooth/hci_request.c:109 Free of addr ffff88807cebcdc0 by task kworker/u9:3/23974 CPU: 0 PID: 23974 Comm: kworker/u9:3 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 Workqueue: hci1 hci_rx_work Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114 print_address_description mm/kasan/report.c:377 [inline] print_report+0x169/0x550 mm/kasan/report.c:488 kasan_report_invalid_free+0x11a/0x140 mm/kasan/report.c:563 poison_slab_object+0xf4/0x150 __kasan_slab_free+0x37/0x60 mm/kasan/common.c:256 kasan_slab_free include/linux/kasan.h:184 [inline] slab_free_hook mm/slub.c:2196 [inline] slab_free mm/slub.c:4437 [inline] kmem_cache_free+0x145/0x350 mm/slub.c:4512 kfree_skb_reason include/linux/skbuff.h:1260 [inline] kfree_skb include/linux/skbuff.h:1269 [inline] hci_req_sync_complete+0xe8/0x290 net/bluetooth/hci_request.c:109 hci_event_packet+0xc75/0x1540 net/bluetooth/hci_event.c:7479 hci_rx_work+0x3e8/0xca0 net/bluetooth/hci_core.c:4074 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312