program: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) [ 68.450922][ T5303] Bluetooth: hci0: command tx timeout [ 68.490094][ T5319] [ 68.491144][ T5319] ============================= [ 68.492926][ T5319] WARNING: suspicious RCU usage [ 68.494755][ T5319] 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 Not tainted [ 68.501766][ T5319] ----------------------------- [ 68.505668][ T5319] kernel/events/callchain.c:162 suspicious rcu_dereference_check() usage! [ 68.511959][ T5319] [ 68.511959][ T5319] other info that might help us debug this: [ 68.511959][ T5319] [ 68.515693][ T5319] [ 68.515693][ T5319] rcu_scheduler_active = 2, debug_locks = 1 [ 68.518443][ T5319] 1 lock held by syz.0.0/5319: [ 68.520049][ T5319] #0: ffffffff8e937fa0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 68.523831][ T5319] [ 68.523831][ T5319] stack backtrace: [ 68.525822][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 68.529726][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.533587][ T5319] Call Trace: [ 68.534884][ T5319] [ 68.535963][ T5319] dump_stack_lvl+0x241/0x360 [ 68.537734][ T5319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.539837][ T5319] ? __pfx__printk+0x10/0x10 [ 68.541640][ T5319] lockdep_rcu_suspicious+0x226/0x340 [ 68.543621][ T5319] get_callchain_entry+0x2b2/0x3c0 [ 68.545647][ T5319] get_perf_callchain+0xec/0x970 [ 68.547973][ T5319] ? preempt_schedule+0xe1/0xf0 [ 68.550233][ T5319] ? __pfx_preempt_schedule+0x10/0x10 [ 68.552816][ T5319] ? __pfx_get_perf_callchain+0x10/0x10 [ 68.555565][ T5319] ? __lock_acquire+0x1397/0x2100 [ 68.557901][ T5319] __bpf_get_stack+0x41f/0xad0 [ 68.560330][ T5319] ? __pfx___bpf_get_stack+0x10/0x10 [ 68.562765][ T5319] ? __pfx_lock_acquire+0x10/0x10 [ 68.565085][ T5319] bpf_get_stack+0x33/0x50 [ 68.567265][ T5319] bpf_get_stack_raw_tp+0x1a3/0x240 [ 68.569241][ T5319] bpf_prog_2ae546726a474a42+0x46/0x4a [ 68.571244][ T5319] bpf_prog_run_pin_on_cpu+0x67/0x150 [ 68.573216][ T5319] bpf_prog_test_run_syscall+0x316/0x4e0 [ 68.575297][ T5319] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 68.577608][ T5319] ? __fget_files+0x2a/0x410 [ 68.579366][ T5319] ? fput+0x21b/0x290 [ 68.580949][ T5319] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 68.583432][ T5319] bpf_prog_test_run+0x2e4/0x360 [ 68.585267][ T5319] __sys_bpf+0x48d/0x810 [ 68.586807][ T5319] ? __pfx___sys_bpf+0x10/0x10 [ 68.588545][ T5319] ? __rseq_handle_notify_resume+0x34d/0x14e0 [ 68.590865][ T5319] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 68.593013][ T5319] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 68.595338][ T5319] ? do_syscall_64+0x100/0x230 [ 68.597071][ T5319] __x64_sys_bpf+0x7c/0x90 [ 68.598746][ T5319] do_syscall_64+0xf3/0x230 [ 68.600356][ T5319] ? clear_bhb_loop+0x35/0x90 [ 68.602087][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.604311][ T5319] RIP: 0033:0x7f9513985d29 [ 68.606007][ T5319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.612952][ T5319] RSP: 002b:00007f951486f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 68.616039][ T5319] RAX: ffffffffffffffda RBX: 00007f9513b75fa0 RCX: 00007f9513985d29 [ 68.618978][ T5319] RDX: 000000000000000c RSI: 00000000200004c0 RDI: 000000000000000a [ 68.621908][ T5319] RBP: 00007f9513a01a20 R08: 0000000000000000 R09: 0000000000000000 [ 68.624879][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.627768][ T5319] R13: 0000000000000000 R14: 00007f9513b75fa0 R15: 00007fff0b21bdc8 [ 68.630569][ T5319]