syzbot


WARNING: still has locks held in ieee80211_change_mac

Status: upstream: reported C repro on 2025/12/28 08:27
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+3d5a349f902dcc3df89e@syzkaller.appspotmail.com
First crash: 32d, last: 27d
Bug presence (2)
Date Name Commit Repro Result
2026/01/01 linux-6.1.y (ToT) 50cbba13faa2 C [report] WARNING: still has locks held in ieee80211_change_mac
2026/01/01 upstream (ToT) b69053dd3ffb C Didn't crash
Fix bisection attempts (1)
Created Duration User Patch Repo Result
2026/01/06 07:00 2h12m fix candidate upstream OK (0) job log

Sample crash report:
mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
====================================
WARNING: syz.0.504/5003 still has locks held!
syzkaller #0 Not tainted
------------------------------------
1 lock held by syz.0.504/5003:
 #0: ffff0000db332b18 (&local->mtx){+.+.}-{3:3}, at: ieee80211_can_powered_addr_change net/mac80211/iface.c:217 [inline]
 #0: ffff0000db332b18 (&local->mtx){+.+.}-{3:3}, at: _ieee80211_change_mac net/mac80211/iface.c:272 [inline]
 #0: ffff0000db332b18 (&local->mtx){+.+.}-{3:3}, at: ieee80211_change_mac+0x630/0xe54 net/mac80211/iface.c:320

stack backtrace:
CPU: 1 PID: 5003 Comm: syz.0.504 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
Call trace:
 dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
 __dump_stack+0x30/0x40 lib/dump_stack.c:88
 dump_stack_lvl+0xf8/0x160 lib/dump_stack.c:106
 dump_stack+0x1c/0x5c lib/dump_stack.c:113
 print_held_locks_bug+0xb8/0xfc kernel/locking/lockdep.c:6492
 debug_check_no_locks_held+0x5c/0x74 kernel/locking/lockdep.c:6498
 do_exit+0x1110/0x19a8 kernel/exit.c:902
 do_group_exit+0x194/0x22c kernel/exit.c:1022
 __do_sys_exit_group kernel/exit.c:1033 [inline]
 __se_sys_exit_group kernel/exit.c:1031 [inline]
 __wake_up_parent+0x0/0x60 kernel/exit.c:1031
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/12/28 17:53 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING: still has locks held in ieee80211_change_mac
2025/12/28 08:27 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING: still has locks held in ieee80211_change_mac
* Struck through repros no longer work on HEAD.