Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
------------[ cut here ]------------
ida_free called for id=8192 which is not allocated.
WARNING: CPU: 0 PID: 51 at lib/idr.c:525 ida_free+0x2b8/0x378 lib/idr.c:525
Modules linked in:
CPU: 0 PID: 51 Comm: kworker/u9:0 Not tainted 6.9.0-rc3-syzkaller-gfec50db7033e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
Workqueue: hci0 hci_rx_work
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : ida_free+0x2b8/0x378 lib/idr.c:525
lr : ida_free+0x2b8/0x378 lib/idr.c:525
sp : ffff800095307600
x29: ffff8000953076a0 x28: ffff800091d2bd40 x27: 1ffff00012a60ec4
x26: dfff800000000000 x25: ffff700012a60ec0 x24: 0000000000000000
x23: 0000000000000000 x22: 0000000000000000 x21: 0000000000000000
x20: 0000000000002000 x19: ffff800095307620 x18: 0000000000000008
x17: 0000000000000000 x16: ffff80008ae6d1bc x15: 0000000000000001
x14: 1fffe000367b9a02 x13: 0000000000000000 x12: 0000000000000000
x11: 0000000000000002 x10: 0000000000ff0100 x9 : b7e7a686f0195000
x8 : b7e7a686f0195000 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff800095306d78 x4 : ffff80008ef65000 x3 : ffff8000805e9200
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 ida_free+0x2b8/0x378 lib/idr.c:525
 hci_conn_set_handle+0x148/0x230 net/bluetooth/hci_conn.c:1257
 hci_le_create_big_complete_evt+0x2c8/0x99c net/bluetooth/hci_event.c:6949
 hci_le_meta_evt+0x2b8/0x47c net/bluetooth/hci_event.c:7228
 hci_event_func net/bluetooth/hci_event.c:7539 [inline]
 hci_event_packet+0x6f4/0x1098 net/bluetooth/hci_event.c:7594
 hci_rx_work+0x318/0xa78 net/bluetooth/hci_core.c:4171
 process_one_work+0x7b8/0x15d4 kernel/workqueue.c:3254
 process_scheduled_works kernel/workqueue.c:3335 [inline]
 worker_thread+0x938/0xef4 kernel/workqueue.c:3416
 kthread+0x288/0x310 kernel/kthread.c:388
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 1116
hardirqs last  enabled at (1115): [<ffff8000803749b0>] __up_console_sem kernel/printk/printk.c:341 [inline]
hardirqs last  enabled at (1115): [<ffff8000803749b0>] __console_unlock kernel/printk/printk.c:2731 [inline]
hardirqs last  enabled at (1115): [<ffff8000803749b0>] console_unlock+0x17c/0x3d4 kernel/printk/printk.c:3050
hardirqs last disabled at (1116): [<ffff80008ae68608>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:470
softirqs last  enabled at (780): [<ffff8000800218e4>] softirq_handle_end kernel/softirq.c:400 [inline]
softirqs last  enabled at (780): [<ffff8000800218e4>] __do_softirq+0xb10/0xd2c kernel/softirq.c:583
softirqs last disabled at (761): [<ffff80008002ad34>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81
---[ end trace 0000000000000000 ]---