============================= WARNING: suspicious RCU usage 6.1.106-syzkaller #0 Not tainted ----------------------------- net/mac80211/sta_info.c:361 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 4 locks held by syz.4.120/4723: #0: ffff80001803f6b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 net/netlink/genetlink.c:860 #1: ffff800017fe4888 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 #2: ffff0000f23087c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: wiphy_lock include/net/cfg80211.h:5639 [inline] #2: ffff0000f23087c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_netdev_notifier_call+0x414/0x13b8 net/wireless/core.c:1503 #3: ffff0000f22e0d40 (&wdev->mtx){+.+.}-{3:3}, at: wdev_lock net/wireless/core.h:231 [inline] #3: ffff0000f22e0d40 (&wdev->mtx){+.+.}-{3:3}, at: cfg80211_leave net/wireless/core.c:1341 [inline] #3: ffff0000f22e0d40 (&wdev->mtx){+.+.}-{3:3}, at: cfg80211_netdev_notifier_call+0x424/0x13b8 net/wireless/core.c:1504 stack backtrace: CPU: 1 PID: 4723 Comm: syz.4.120 Not tainted 6.1.106-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 Call trace: dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165 __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106 dump_stack+0x1c/0x58 lib/dump_stack.c:113 lockdep_rcu_suspicious+0x260/0x464 kernel/locking/lockdep.c:6592 sta_remove_link+0x38c/0x474 net/mac80211/sta_info.c:360 sta_info_free+0x68/0x2ec net/mac80211/sta_info.c:405 ieee80211_ibss_disconnect+0x2b0/0x5fc net/mac80211/ibss.c:704 ieee80211_ibss_leave+0x30/0x108 net/mac80211/ibss.c:1868 ieee80211_leave_ibss+0x20/0x30 net/mac80211/cfg.c:2820 rdev_leave_ibss net/wireless/rdev-ops.h:561 [inline] __cfg80211_leave_ibss+0x1e0/0x518 net/wireless/ibss.c:211 __cfg80211_leave+0x164/0x3a0 net/wireless/core.c:1293 cfg80211_leave net/wireless/core.c:1342 [inline] cfg80211_netdev_notifier_call+0x430/0x13b8 net/wireless/core.c:1504 notifier_call_chain kernel/notifier.c:87 [inline] raw_notifier_call_chain+0xd4/0x164 kernel/notifier.c:455 call_netdevice_notifiers_info net/core/dev.c:1970 [inline] call_netdevice_notifiers_extack net/core/dev.c:2008 [inline] call_netdevice_notifiers net/core/dev.c:2022 [inline] __dev_close_many+0x1b8/0x3c4 net/core/dev.c:1515 dev_close_many+0x1e0/0x468 net/core/dev.c:1566 dev_close+0x174/0x250 net/core/dev.c:1592 nl80211_del_interface+0xd0/0x12c net/wireless/nl80211.c:4361 genl_family_rcv_msg_doit net/netlink/genetlink.c:756 [inline] genl_family_rcv_msg net/netlink/genetlink.c:833 [inline] genl_rcv_msg+0x948/0xc2c net/netlink/genetlink.c:850 netlink_rcv_skb+0x20c/0x3b8 net/netlink/af_netlink.c:2508 genl_rcv+0x38/0x50 net/netlink/genetlink.c:861 netlink_unicast_kernel net/netlink/af_netlink.c:1326 [inline] netlink_unicast+0x65c/0x898 net/netlink/af_netlink.c:1352 netlink_sendmsg+0x834/0xb18 net/netlink/af_netlink.c:1874 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:730 [inline] ____sys_sendmsg+0x55c/0x848 net/socket.c:2514 ___sys_sendmsg net/socket.c:2568 [inline] __sys_sendmsg+0x26c/0x33c net/socket.c:2597 __do_sys_sendmsg net/socket.c:2606 [inline] __se_sys_sendmsg net/socket.c:2604 [inline] __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2604 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x64/0x218 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585