================================================================== BUG: KASAN: slab-use-after-free in skb_dst_drop include/net/dst.h:274 [inline] BUG: KASAN: slab-use-after-free in skb_release_head_state+0x39/0x250 net/core/skbuff.c:1157 Read of size 8 at addr ffff888078a6b198 by task syz-executor.0/23992 CPU: 0 PID: 23992 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114 print_address_description mm/kasan/report.c:377 [inline] print_report+0x169/0x550 mm/kasan/report.c:488 kasan_report+0x143/0x180 mm/kasan/report.c:601 skb_dst_drop include/net/dst.h:274 [inline] skb_release_head_state+0x39/0x250 net/core/skbuff.c:1157 skb_release_all net/core/skbuff.c:1171 [inline] __kfree_skb net/core/skbuff.c:1187 [inline] kfree_skb_reason+0x16d/0x3b0 net/core/skbuff.c:1223 kfree_skb include/linux/skbuff.h:1263 [inline] __hci_req_sync+0x62f/0x950 net/bluetooth/hci_request.c:184 hci_req_sync+0xa9/0xd0 net/bluetooth/hci_request.c:206 hci_dev_cmd+0x4c5/0xa50 net/bluetooth/hci_core.c:787