It is not allowed to call kfree_skb() from hardware interrupt
context or with interrupts being disabled. So replace kfree_skb()
with dev_kfree_skb_irq() under spin_lock_irqsave().
Fixes: 43eb12d78960 ("Bluetooth: Fix/implement Three-wire reliable packet sending")
Signed-off-by: Yang Yingliang <yangyingliang@huawei.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
                        break;
 
                __skb_unlink(skb, &h5->unack);
-               kfree_skb(skb);
+               dev_kfree_skb_irq(skb);
        }
 
        if (skb_queue_empty(&h5->unack))