------------[ cut here ]------------
lockdep bfs error:-1
WARNING: CPU: 1 PID: 26 at kernel/locking/lockdep.c:1960 print_bfs_bug+0x130/0x1e0 kernel/locking/lockdep.c:1960
Modules linked in:
CPU: 1 PID: 26 Comm: kworker/u4:2 Not tainted 5.9.0-rc7-next-20200930-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: phy12 ieee80211_iface_work
RIP: 0010:print_bfs_bug+0x130/0x1e0 kernel/locking/lockdep.c:1960
Code: e2 08 00 74 2c 48 c7 c7 c0 7f a6 8d e8 49 51 01 00 66 90 85 db 75 05 5b 5d 41 5c c3 89 ee 48 c7 c7 20 e8 ab 88 e8 7b e5 c0 06 <0f> 0b 5b 5d 41 5c c3 0f 0b e8 62 82 e9 06 85 c0 74 d7 48 c7 c0 38
RSP: 0018:ffffc90000da7e50 EFLAGS: 00010086
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
RDX: ffff8880a90e2100 RSI: ffffffff815df1a5 RDI: fffff520001b4fbc
RBP: 00000000ffffffff R08: 0000000000000001 R09: ffff8880ae520f8b
R10: 0000000000000000 R11: 207065646b636f6c R12: ffff8880a90e2100
R13: dffffc0000000000 R14: 0000000000000006 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000017e1a58 CR3: 000000009e9a2000 CR4: 00000000001526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 check_irq_usage+0x6b4/0xc60 kernel/locking/lockdep.c:2585
 check_prev_add kernel/locking/lockdep.c:2823 [inline]
 check_prevs_add kernel/locking/lockdep.c:2944 [inline]
 validate_chain kernel/locking/lockdep.c:3562 [inline]
 __lock_acquire+0x2873/0x56d0 kernel/locking/lockdep.c:4796
 lock_acquire+0x1f2/0xaa0 kernel/locking/lockdep.c:5398
 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
 _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:151
 alloc_object lib/debugobjects.c:239 [inline]
 __debug_object_init+0x5c6/0xd10 lib/debugobjects.c:548
 debug_object_init lib/debugobjects.c:595 [inline]
 debug_object_activate+0x32c/0x3e0 lib/debugobjects.c:681
 debug_rcu_head_queue kernel/rcu/rcu.h:176 [inline]
 kvfree_call_rcu+0x32/0xb10 kernel/rcu/tree.c:3432
 cfg80211_update_known_bss+0x833/0xa60 net/wireless/scan.c:1653
 cfg80211_bss_update+0xef/0x1c60 net/wireless/scan.c:1700
 cfg80211_inform_single_bss_frame_data+0x6e2/0xe90 net/wireless/scan.c:2399
 cfg80211_inform_bss_frame_data+0xa7/0xb10 net/wireless/scan.c:2432
 ieee80211_bss_info_update+0x3ce/0xb70 net/mac80211/scan.c:190
 ieee80211_scan_rx+0x45f/0x7c0 net/mac80211/scan.c:299
 __ieee80211_rx_handle_packet net/mac80211/rx.c:4571 [inline]
 ieee80211_rx_list+0x1bd5/0x23d0 net/mac80211/rx.c:4759
 ieee80211_rx_napi+0xf7/0x3d0 net/mac80211/rx.c:4780
 ieee80211_rx include/net/mac80211.h:4499 [inline]
 ieee80211_tasklet_handler+0xd3/0x130 net/mac80211/main.c:235
 tasklet_action_common.constprop.0+0x237/0x470 kernel/softirq.c:560
 __do_softirq+0x203/0xab6 kernel/softirq.c:298
 asm_call_irq_on_stack+0xf/0x20
 </IRQ>
 __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
 run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
 do_softirq_own_stack+0x9b/0xd0 arch/x86/kernel/irq_64.c:77
 do_softirq kernel/softirq.c:343 [inline]
 do_softirq+0x154/0x1b0 kernel/softirq.c:330
 __local_bh_enable_ip+0x196/0x1f0 kernel/softirq.c:195
 spin_unlock_bh include/linux/spinlock.h:399 [inline]
 cfg80211_bss_update+0x26b/0x1c60 net/wireless/scan.c:1779
 cfg80211_inform_single_bss_frame_data+0x6e2/0xe90 net/wireless/scan.c:2399
 cfg80211_inform_bss_frame_data+0xa7/0xb10 net/wireless/scan.c:2432
 ieee80211_bss_info_update+0x3ce/0xb70 net/mac80211/scan.c:190
 ieee80211_rx_bss_info net/mac80211/ibss.c:1126 [inline]
 ieee80211_rx_mgmt_probe_beacon+0xc77/0x1690 net/mac80211/ibss.c:1615
 ieee80211_ibss_rx_queued_mgmt+0xe3e/0x1870 net/mac80211/ibss.c:1642
 ieee80211_iface_work+0x706/0x970 net/mac80211/iface.c:1476
 process_one_work+0x933/0x15a0 kernel/workqueue.c:2269
 worker_thread+0x64c/0x1120 kernel/workqueue.c:2415
 kthread+0x3af/0x4a0 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296