program: io_uring_setup(0x70fa, &(0x7f0000000440)={0x0, 0x4ef1, 0x4000, 0x400001, 0x2e0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x3d, 0x0, 0x1}, {0x2}, {0x6}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r1, 0x400c0930, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000440)="020000000100") syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000240)={[{@nomblk_io_submit}, {@errors_remount}, {@nodelalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}]}, 0x1, 0x3d0, &(0x7f00000023c0)="$eJzs3M1uG0UcAPD/br5I+mEjcUCFgyUQBAFxHQhQhEThyscFeAArSUuF21SNkWjJoSBOnDggbhz6Ahx4gKpCSEi8Ai+AKlUozQFuQWvvOm4cp7Fix2r6+0mjndkdZ/bv3axm1rsTwGOrEhHnI2IiIhYjopSvT/MUN9spq3d/c2N5a3NjOYnt7U/+SSLJ1xV/K8mXJ/LCfBqRfhfxzM3edtev3/ii3misXsvL1eblq9X16zdevXS5fnH14uqV2pvnarWlxbdqrw8t1p+ef+ncxPvnz/z8V+nO0vT0bLa/J/Nt3XEMSyUqne9kt6VhNzZm0+PeAQAADiTN+/6Trf5/KSZaubZSVDfGunMAAADAUGy/my8BAACAYywx9gcAAIBjrngO4P7mxnKRxvg4wpG7915ElHfebd7qxD8ZT+R1pkb4fmslIq6+kJSyFCN6DxkAoNudrP9zdq/+XxpPd9WbiWj1h2aH3H5lV7m3/5PeHXKTD8j6f+9ExFZP/y8tqpQn8tKpVldxKrlwqbF6NiJOR8R8TM1k5do+bXzw7y8f99uWxf97cup0kbL2s+VOjfTu5MyDn1mpN+uHibnbvW8izkzuFX/S6f8mETF3iDYmvr71dr9tD49/tLZvRby45/Hfmbkn2X9+omrrfKgWZ0Wv/7799aN+7Y87/uz4z+0ffznpnq9pffA2bn/+57P9tnWPfwY5/6eTT1v5Ylz2Vb3ZvFaLmE4+7F2/uPPZolzUz+Kff27v///i+pfkc1qdzK8Bg/r+h99eOUj8WcraL8aCRyGLf2Wg4z945o3bf3zWr/2Hx58d//YcYPP5moNc/w66g4f57gAAAOBRkbbuayTpQiefpgsL7fsdT8Vc2lhbb758Ye3LKyvt+x/lmEqLO12lrvuhtfbP6J3y4q7yaxHxZET8WJptlReW1xor4w4eAAAAHhMn+oz/M38f2VMIAAAAwMiVx70DAAAAwMgZ/wMAAMCxdph5/WRkZI5rZtxXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfb/wEAAP//Wt22ag==") ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)='./file1\x00') [ 93.561205][ T4645] Bluetooth: hci0: command tx timeout [ 93.575315][ T1379] cfg80211: failed to load regulatory.db [ 93.820914][ T5317] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 93.821028][ T5317] block device autoloading is deprecated and will be removed. [ 93.844218][ T5316] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 93.894951][ T5316] md/raid10:md0: not clean -- starting background reconstruction [ 93.894967][ T5316] md/raid10:md0: active with 1 out of 2 devices [ 93.896306][ T5316] md0: detected capacity change from 0 to 2048 [ 93.920709][ T5316] [ 93.922090][ T5316] ====================================================== [ 93.925445][ T5316] WARNING: possible circular locking dependency detected [ 93.928718][ T5316] syzkaller #0 Not tainted [ 93.931217][ T5316] ------------------------------------------------------ [ 93.935016][ T5316] syz.0.0/5316 is trying to acquire lock: [ 93.937480][ T5316] ffffffff8f556d00 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 93.941837][ T5316] [ 93.941837][ T5316] but task is already holding lock: [ 93.946003][ T5316] ffff888012ca2358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x48/0xf0 [ 93.951358][ T5316] [ 93.951358][ T5316] which lock already depends on the new lock. [ 93.951358][ T5316] [ 93.955928][ T5316] [ 93.955928][ T5316] the existing dependency chain (in reverse order) is: [ 93.960346][ T5316] [ 93.960346][ T5316] -> #3 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 93.964505][ T5316] __mutex_lock+0x19d/0x1550 [ 93.966734][ T5316] md_start_sync+0x179/0x1010 [ 93.969044][ T5316] process_scheduled_works+0xc3d/0x1630 [ 93.972238][ T5316] worker_thread+0xa47/0xfb0 [ 93.975074][ T5316] kthread+0x38b/0x480 [ 93.977503][ T5316] ret_from_fork+0x514/0xb70 [ 93.979874][ T5316] ret_from_fork_asm+0x1a/0x30 [ 93.982140][ T5316] [ 93.982140][ T5316] -> #2 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 93.986336][ T5316] process_scheduled_works+0xc03/0x1630 [ 93.989283][ T5316] worker_thread+0xa47/0xfb0 [ 93.991665][ T5316] kthread+0x38b/0x480 [ 93.993700][ T5316] ret_from_fork+0x514/0xb70 [ 93.995894][ T5316] ret_from_fork_asm+0x1a/0x30 [ 93.998246][ T5316] [ 93.998246][ T5316] -> #1 ((wq_completion)md_misc){+.+.}-{0:0}: [ 94.002386][ T5316] touch_wq_lockdep_map+0xcb/0x180 [ 94.005081][ T5316] __flush_workqueue+0x148/0x1470 [ 94.007471][ T5316] md_alloc+0x32/0xf20 [ 94.009451][ T5316] md_alloc_and_put+0x1a/0x1f0 [ 94.011763][ T5316] blk_request_module+0x27d/0x2a0 [ 94.014089][ T5316] blkdev_get_no_open+0x3f/0xe0 [ 94.016442][ T5316] blkdev_open+0x1d7/0x600 [ 94.018561][ T5316] do_dentry_open+0x816/0x1380 [ 94.020742][ T5316] vfs_open+0x3b/0x340 [ 94.022747][ T5316] path_openat+0x1443/0x1d60 [ 94.024980][ T5316] do_file_open+0x23e/0x4a0 [ 94.027168][ T5316] do_sys_openat2+0x115/0x200 [ 94.029439][ T5316] __x64_sys_openat+0x138/0x170 [ 94.032064][ T5316] do_syscall_64+0x166/0x520 [ 94.034226][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.036931][ T5316] [ 94.036931][ T5316] -> #0 (major_names_lock){+.+.}-{4:4}: [ 94.040234][ T5316] __lock_acquire+0x164c/0x2de0 [ 94.042560][ T5316] lock_acquire+0x115/0x350 [ 94.044651][ T5316] __mutex_lock+0x19d/0x1550 [ 94.046841][ T5316] blk_request_module+0x35/0x2a0 [ 94.049215][ T5316] blkdev_get_no_open+0x3f/0xe0 [ 94.051521][ T5316] bdev_file_open_by_dev+0xa0/0x240 [ 94.054086][ T5316] md_import_device+0x2e9/0x650 [ 94.056418][ T5316] md_add_new_disk+0x669/0x1850 [ 94.058662][ T5316] md_ioctl+0x200a/0x2610 [ 94.060532][ T5316] blkdev_ioctl+0x5e3/0x740 [ 94.062538][ T5316] __se_sys_ioctl+0xfc/0x170 [ 94.064620][ T5316] do_syscall_64+0x166/0x520 [ 94.066837][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.070000][ T5316] [ 94.070000][ T5316] other info that might help us debug this: [ 94.070000][ T5316] [ 94.074527][ T5316] Chain exists of: [ 94.074527][ T5316] major_names_lock --> (work_completion)(&mddev->sync_work) --> &mddev->reconfig_mutex [ 94.074527][ T5316] [ 94.081152][ T5316] Possible unsafe locking scenario: [ 94.081152][ T5316] [ 94.084436][ T5316] CPU0 CPU1 [ 94.086929][ T5316] ---- ---- [ 94.089428][ T5316] lock(&mddev->reconfig_mutex); [ 94.091764][ T5316] lock((work_completion)(&mddev->sync_work)); [ 94.095679][ T5316] lock(&mddev->reconfig_mutex); [ 94.098957][ T5316] lock(major_names_lock); [ 94.100970][ T5316] [ 94.100970][ T5316] *** DEADLOCK *** [ 94.100970][ T5316] [ 94.104603][ T5316] locks held by syz.0.0/5316: 1, last CPU#0: [ 94.107122][ T5316] #0: ffff888012ca2358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x48/0xf0 [ 94.111626][ T5316] [ 94.111626][ T5316] stack backtrace: [ 94.114244][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.118373][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.122806][ T5316] Call Trace: [ 94.124286][ T5316] [ 94.125572][ T5316] dump_stack_lvl+0xe8/0x150 [ 94.127613][ T5316] print_circular_bug+0x2e2/0x300 [ 94.129825][ T5316] check_noncircular+0x12f/0x150 [ 94.131996][ T5316] __lock_acquire+0x164c/0x2de0 [ 94.134135][ T5316] ? post_alloc_hook+0x208/0x250 [ 94.136406][ T5316] ? get_page_from_freelist+0x2209/0x2280 [ 94.139195][ T5316] lock_acquire+0x115/0x350 [ 94.141387][ T5316] ? blk_request_module+0x35/0x2a0 [ 94.143581][ T5316] __mutex_lock+0x19d/0x1550 [ 94.145580][ T5316] ? blk_request_module+0x35/0x2a0 [ 94.148052][ T5316] ? lock_acquire+0x115/0x350 [ 94.150154][ T5316] ? blk_request_module+0x35/0x2a0 [ 94.152425][ T5316] ? __pfx___mutex_lock+0x10/0x10 [ 94.154657][ T5316] ? find_inode_fast+0x5dc/0x740 [ 94.156978][ T5316] ? find_inode_fast+0xd2/0x740 [ 94.159323][ T5316] blk_request_module+0x35/0x2a0 [ 94.161605][ T5316] blkdev_get_no_open+0x3f/0xe0 [ 94.163794][ T5316] bdev_file_open_by_dev+0xa0/0x240 [ 94.166079][ T5316] md_import_device+0x2e9/0x650 [ 94.168228][ T5316] md_add_new_disk+0x669/0x1850 [ 94.170403][ T5316] md_ioctl+0x200a/0x2610 [ 94.172341][ T5316] ? tomoyo_path_number_perm+0x219/0x5f0 [ 94.174821][ T5316] ? __pfx_md_ioctl+0x10/0x10 [ 94.177035][ T5316] ? do_vfs_ioctl+0x116f/0x1530 [ 94.179377][ T5316] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 94.181666][ T5316] ? hook_file_ioctl+0x1f2/0x600 [ 94.183887][ T5316] ? __pfx_md_ioctl+0x10/0x10 [ 94.186054][ T5316] blkdev_ioctl+0x5e3/0x740 [ 94.188059][ T5316] ? __pfx_blkdev_ioctl+0x10/0x10 [ 94.190312][ T5316] ? __fget_files+0x2a/0x420 [ 94.192342][ T5316] ? bpf_lsm_file_ioctl+0x9/0x20 [ 94.194669][ T5316] ? __pfx_blkdev_ioctl+0x10/0x10 [ 94.197005][ T5316] __se_sys_ioctl+0xfc/0x170 [ 94.199330][ T5316] do_syscall_64+0x166/0x520 [ 94.201514][ T5316] ? trace_irq_disable+0x3b/0x140 [ 94.203754][ T5316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.206392][ T5316] ? clear_bhb_loop+0x70/0xc0 [ 94.208488][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.211109][ T5316] RIP: 0033:0x7f603fb9e159 [ 94.213073][ T5316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.221580][ T5316] RSP: 002b:00007f603bff4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.225353][ T5316] RAX: ffffffffffffffda RBX: 00007f603fe25fa0 RCX: 00007f603fb9e159 [ 94.228907][ T5316] RDX: 0000200000000440 RSI: 0000000040140921 RDI: 0000000000000004 [ 94.232426][ T5316] RBP: 00007f603fc3506b R08: 0000000000000000 R09: 0000000000000000 [ 94.235908][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.239501][ T5316] R13: 00007f603fe26038 R14: 00007f603fe25fa0 R15: 00007ffec0a80b18 [ 94.243009][ T5316] [ 94.245890][ T5321] md: resync of RAID array md0 [ 94.262871][ T5321] md: md0: resync done. [ 94.272231][ T5317] loop0: detected capacity change from 0 to 512 [ 94.301317][ T5317] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.342065][ T5317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.375954][ T5316] block device autoloading is deprecated and will be removed. [ 94.376853][ T5324] md: recover of RAID array md0 [ 94.394342][ T5324] md: md0: recover done.