Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. [ 31.730345][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.732848][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.736915][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.739537][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.742221][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 31.744459][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 executing program [ 31.779662][ T51] ------------[ cut here ]------------ [ 31.781218][ T51] ida_free called for id=8192 which is not allocated. [ 31.783763][ T51] WARNING: CPU: 0 PID: 51 at lib/idr.c:525 ida_free+0x2b8/0x378 [ 31.785873][ T51] Modules linked in: [ 31.786865][ T51] CPU: 0 PID: 51 Comm: kworker/u9:0 Not tainted 6.9.0-rc3-syzkaller-gfec50db7033e #0 [ 31.789455][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 31.792178][ T51] Workqueue: hci0 hci_rx_work [ 31.793425][ T51] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 31.795455][ T51] pc : ida_free+0x2b8/0x378 [ 31.796649][ T51] lr : ida_free+0x2b8/0x378 [ 31.797905][ T51] sp : ffff800095307600 [ 31.798998][ T51] x29: ffff8000953076a0 x28: ffff800091d2bd40 x27: 1ffff00012a60ec4 [ 31.801117][ T51] x26: dfff800000000000 x25: ffff700012a60ec0 x24: 0000000000000000 [ 31.803319][ T51] x23: 0000000000000000 x22: 0000000000000000 x21: 0000000000000000 [ 31.805520][ T51] x20: 0000000000002000 x19: ffff800095307620 x18: 0000000000000008 [ 31.807719][ T51] x17: 0000000000000000 x16: ffff80008ae6d1bc x15: 0000000000000001 [ 31.809838][ T51] x14: 1fffe000367b9a02 x13: 0000000000000000 x12: 0000000000000000 [ 31.811896][ T51] x11: 0000000000000002 x10: 0000000000ff0100 x9 : b7e7a686f0195000 [ 31.814039][ T51] x8 : b7e7a686f0195000 x7 : 0000000000000001 x6 : 0000000000000001 [ 31.816159][ T51] x5 : ffff800095306d78 x4 : ffff80008ef65000 x3 : ffff8000805e9200 [ 31.818337][ T51] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 31.820492][ T51] Call trace: [ 31.821417][ T51] ida_free+0x2b8/0x378 [ 31.822595][ T51] hci_conn_set_handle+0x148/0x230 [ 31.823952][ T51] hci_le_create_big_complete_evt+0x2c8/0x99c [ 31.825599][ T51] hci_le_meta_evt+0x2b8/0x47c [ 31.826926][ T51] hci_event_packet+0x6f4/0x1098 [ 31.828268][ T51] hci_rx_work+0x318/0xa78 [ 31.829635][ T51] process_one_work+0x7b8/0x15d4 [ 31.830944][ T51] worker_thread+0x938/0xef4 [ 31.832282][ T51] kthread+0x288/0x310 [ 31.833360][ T51] ret_from_fork+0x10/0x20 [ 31.834603][ T51] irq event stamp: 1116 [ 31.835710][ T51] hardirqs last enabled at (1115): [] console_unlock+0x17c/0x3d4 [ 31.838350][ T51] hardirqs last disabled at (1116): [] el1_dbg+0x24/0x80 [ 31.840783][ T51] softirqs last enabled at (780): [] __do_softirq+0xb10/0xd2c [ 31.843389][ T51] softirqs last disabled at (761): [] ____do_softirq+0x14/0x20 [ 31.846024][ T51] ---[ end trace 0000000000000000 ]---