program: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xe70, r1}, 0x38) [ 74.870750][ T4649] Bluetooth: hci0: command tx timeout [ 74.937038][ T5316] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.0/5316 [ 74.954352][ T5316] caller is bpf_mem_cache_free_rcu+0x48/0xc0 [ 74.958593][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 74.958617][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.958627][ T5316] Call Trace: [ 74.958676][ T5316] [ 74.958681][ T5316] dump_stack_lvl+0xe8/0x150 [ 74.958738][ T5316] check_preemption_disabled+0xd3/0xe0 [ 74.958789][ T5316] bpf_mem_cache_free_rcu+0x48/0xc0 [ 74.958810][ T5316] rhtab_delete_elem+0x185a/0x1b30 [ 74.958831][ T5316] ? rhtab_delete_elem+0x15c/0x1b30 [ 74.958852][ T5316] ? check_and_init_map_value+0x57/0x410 [ 74.958874][ T5316] __rhtab_map_lookup_and_delete_batch+0x935/0xcb0 [ 74.958918][ T5316] ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10 [ 74.958935][ T5316] bpf_map_do_batch+0x445/0x630 [ 74.958952][ T5316] __sys_bpf+0x906/0xda0 [ 74.958975][ T5316] ? do_raw_spin_lock+0x50/0x2f0 [ 74.958996][ T5316] ? __pfx___sys_bpf+0x10/0x10 [ 74.959017][ T5316] ? do_futex+0x3e7/0x4e0 [ 74.959040][ T5316] ? rcu_is_watching+0x15/0xb0 [ 74.959062][ T5316] __x64_sys_bpf+0xba/0xd0 [ 74.959084][ T5316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.959101][ T5316] do_syscall_64+0x174/0x580 [ 74.959122][ T5316] ? trace_irq_disable+0x3b/0x140 [ 74.959145][ T5316] ? clear_bhb_loop+0x40/0x90 [ 74.959160][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.959176][ T5316] RIP: 0033:0x7fc7e559ce59 [ 74.959193][ T5316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.959205][ T5316] RSP: 002b:00007fc7e651cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.959224][ T5316] RAX: ffffffffffffffda RBX: 00007fc7e5815fa0 RCX: 00007fc7e559ce59 [ 74.959235][ T5316] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 0000000000000019 [ 74.959244][ T5316] RBP: 00007fc7e5632e6f R08: 0000000000000000 R09: 0000000000000000 [ 74.959255][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.959263][ T5316] R13: 00007fc7e5816038 R14: 00007fc7e5815fa0 R15: 00007ffcf6b24188 [ 74.959278][ T5316]