Bug path

callback_1
‘callback_1’: events 1-2
8 free (p);
^~~~~~~~
|
(1) first ‘free’ here
9 free (p); /* { dg-warning "double-'free' of 'p'" } */
~~~~~~~~
|
(2) second ‘free’ here; first ‘free’ was at (1)