program: io_uring_setup(0x70fa, &(0x7f0000000440)={0x0, 0x4ef1, 0x4000, 0x400001, 0x2e0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r1, 0x400c0930, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000440)="020000000100") [ 114.676062][ T4648] Bluetooth: hci0: command tx timeout [ 114.798401][ T5331] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 114.801894][ T5332] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 114.801963][ T5332] block device autoloading is deprecated and will be removed. [ 114.889541][ T5331] md/raid10:md0: not clean -- starting background reconstruction [ 114.889556][ T5331] md/raid10:md0: active with 1 out of 2 devices [ 114.890681][ T5331] md0: detected capacity change from 0 to 2048 [ 114.911070][ T5332] [ 114.912131][ T5332] ====================================================== [ 114.914996][ T5332] WARNING: possible circular locking dependency detected [ 114.917966][ T5332] syzkaller #0 Not tainted [ 114.919836][ T5332] ------------------------------------------------------ [ 114.922621][ T5332] syz.0.0/5332 is trying to acquire lock: [ 114.925060][ T5332] ffffffff8f556b80 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 114.929648][ T5332] [ 114.929648][ T5332] but task is already holding lock: [ 114.933113][ T5332] ffff888034b4c358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x48/0xf0 [ 114.937757][ T5332] [ 114.937757][ T5332] which lock already depends on the new lock. [ 114.937757][ T5332] [ 114.942102][ T5332] [ 114.942102][ T5332] the existing dependency chain (in reverse order) is: [ 114.945801][ T5332] [ 114.945801][ T5332] -> #3 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 114.949265][ T5332] __mutex_lock+0x19d/0x1550 [ 114.951437][ T5332] md_start_sync+0x179/0x1010 [ 114.953652][ T5332] process_scheduled_works+0xc3d/0x1630 [ 114.956533][ T5332] worker_thread+0xa47/0xfb0 [ 114.958687][ T5332] kthread+0x38b/0x480 [ 114.960678][ T5332] ret_from_fork+0x514/0xb70 [ 114.962860][ T5332] ret_from_fork_asm+0x1a/0x30 [ 114.965168][ T5332] [ 114.965168][ T5332] -> #2 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 114.969047][ T5332] process_scheduled_works+0xc03/0x1630 [ 114.971521][ T5332] worker_thread+0xa47/0xfb0 [ 114.973785][ T5332] kthread+0x38b/0x480 [ 114.975874][ T5332] ret_from_fork+0x514/0xb70 [ 114.978420][ T5332] ret_from_fork_asm+0x1a/0x30 [ 114.981074][ T5332] [ 114.981074][ T5332] -> #1 ((wq_completion)md_misc){+.+.}-{0:0}: [ 114.984708][ T5332] touch_wq_lockdep_map+0xcb/0x180 [ 114.987055][ T5332] __flush_workqueue+0x148/0x1470 [ 114.989388][ T5332] md_alloc+0x32/0xf20 [ 114.991318][ T5332] md_alloc_and_put+0x1a/0x1f0 [ 114.993566][ T5332] blk_request_module+0x27d/0x2a0 [ 114.995863][ T5332] blkdev_get_no_open+0x3f/0xe0 [ 114.998192][ T5332] blkdev_open+0x1d7/0x600 [ 115.000270][ T5332] do_dentry_open+0x816/0x1380 [ 115.002553][ T5332] vfs_open+0x3b/0x340 [ 115.004656][ T5332] path_openat+0x1443/0x1d60 [ 115.006747][ T5332] do_file_open+0x23e/0x4a0 [ 115.008820][ T5332] do_sys_openat2+0x115/0x200 [ 115.011052][ T5332] __x64_sys_openat+0x138/0x170 [ 115.013260][ T5332] do_syscall_64+0x166/0x520 [ 115.015338][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.017878][ T5332] [ 115.017878][ T5332] -> #0 (major_names_lock){+.+.}-{4:4}: [ 115.021098][ T5332] __lock_acquire+0x164c/0x2de0 [ 115.023439][ T5332] lock_acquire+0x115/0x350 [ 115.025609][ T5332] __mutex_lock+0x19d/0x1550 [ 115.027940][ T5332] blk_request_module+0x35/0x2a0 [ 115.030310][ T5332] blkdev_get_no_open+0x3f/0xe0 [ 115.032681][ T5332] bdev_file_open_by_dev+0xa0/0x240 [ 115.035101][ T5332] md_import_device+0x2e9/0x650 [ 115.037512][ T5332] md_add_new_disk+0x669/0x1850 [ 115.040377][ T5332] md_ioctl+0x200a/0x2610 [ 115.042613][ T5332] blkdev_ioctl+0x5e3/0x740 [ 115.044684][ T5332] __se_sys_ioctl+0xfc/0x170 [ 115.046838][ T5332] do_syscall_64+0x166/0x520 [ 115.049137][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.051966][ T5332] [ 115.051966][ T5332] other info that might help us debug this: [ 115.051966][ T5332] [ 115.056221][ T5332] Chain exists of: [ 115.056221][ T5332] major_names_lock --> (work_completion)(&mddev->sync_work) --> &mddev->reconfig_mutex [ 115.056221][ T5332] [ 115.062445][ T5332] Possible unsafe locking scenario: [ 115.062445][ T5332] [ 115.065495][ T5332] CPU0 CPU1 [ 115.067798][ T5332] ---- ---- [ 115.070124][ T5332] lock(&mddev->reconfig_mutex); [ 115.072140][ T5332] lock((work_completion)(&mddev->sync_work)); [ 115.076155][ T5332] lock(&mddev->reconfig_mutex); [ 115.079732][ T5332] lock(major_names_lock); [ 115.081685][ T5332] [ 115.081685][ T5332] *** DEADLOCK *** [ 115.081685][ T5332] [ 115.085240][ T5332] locks held by syz.0.0/5332: 1, last CPU#0: [ 115.087746][ T5332] #0: ffff888034b4c358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x48/0xf0 [ 115.092202][ T5332] [ 115.092202][ T5332] stack backtrace: [ 115.094719][ T5332] CPU: 0 UID: 0 PID: 5332 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 115.098431][ T5332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.102591][ T5332] Call Trace: [ 115.104001][ T5332] [ 115.105275][ T5332] dump_stack_lvl+0xe8/0x150 [ 115.107297][ T5332] print_circular_bug+0x2e2/0x300 [ 115.109598][ T5332] check_noncircular+0x12f/0x150 [ 115.111756][ T5332] __lock_acquire+0x164c/0x2de0 [ 115.113814][ T5332] ? post_alloc_hook+0x208/0x250 [ 115.115982][ T5332] ? get_page_from_freelist+0x2209/0x2280 [ 115.118337][ T5332] lock_acquire+0x115/0x350 [ 115.120269][ T5332] ? blk_request_module+0x35/0x2a0 [ 115.122419][ T5332] __mutex_lock+0x19d/0x1550 [ 115.124315][ T5332] ? blk_request_module+0x35/0x2a0 [ 115.126506][ T5332] ? lock_acquire+0x115/0x350 [ 115.128682][ T5332] ? blk_request_module+0x35/0x2a0 [ 115.130977][ T5332] ? __pfx___mutex_lock+0x10/0x10 [ 115.133415][ T5332] ? find_inode_fast+0x5dc/0x740 [ 115.135676][ T5332] ? find_inode_fast+0xd2/0x740 [ 115.137692][ T5332] blk_request_module+0x35/0x2a0 [ 115.139857][ T5332] blkdev_get_no_open+0x3f/0xe0 [ 115.142024][ T5332] bdev_file_open_by_dev+0xa0/0x240 [ 115.144283][ T5332] md_import_device+0x2e9/0x650 [ 115.146417][ T5332] md_add_new_disk+0x669/0x1850 [ 115.148517][ T5332] md_ioctl+0x200a/0x2610 [ 115.150402][ T5332] ? tomoyo_path_number_perm+0x219/0x5f0 [ 115.152801][ T5332] ? __pfx_md_ioctl+0x10/0x10 [ 115.154834][ T5332] ? do_vfs_ioctl+0x116f/0x1530 [ 115.156852][ T5332] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 115.158922][ T5332] ? hook_file_ioctl+0x1f2/0x600 [ 115.161141][ T5332] ? __pfx_md_ioctl+0x10/0x10 [ 115.163192][ T5332] blkdev_ioctl+0x5e3/0x740 [ 115.165446][ T5332] ? __pfx_blkdev_ioctl+0x10/0x10 [ 115.167989][ T5332] ? __fget_files+0x2a/0x420 [ 115.170403][ T5332] ? bpf_lsm_file_ioctl+0x9/0x20 [ 115.172908][ T5332] ? __pfx_blkdev_ioctl+0x10/0x10 [ 115.175068][ T5332] __se_sys_ioctl+0xfc/0x170 [ 115.177045][ T5332] do_syscall_64+0x166/0x520 [ 115.179055][ T5332] ? trace_irq_disable+0x3b/0x140 [ 115.181097][ T5332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.183552][ T5332] ? clear_bhb_loop+0x70/0xc0 [ 115.185561][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.187922][ T5332] RIP: 0033:0x7f471239e159 [ 115.189816][ T5332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.197702][ T5332] RSP: 002b:00007f47131fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.200970][ T5332] RAX: ffffffffffffffda RBX: 00007f4712626090 RCX: 00007f471239e159 [ 115.204123][ T5332] RDX: 0000200000000440 RSI: 0000000040140921 RDI: 0000000000000004 [ 115.207532][ T5332] RBP: 00007f471243506b R08: 0000000000000000 R09: 0000000000000000 [ 115.210901][ T5332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.214233][ T5332] R13: 00007f4712626128 R14: 00007f4712626090 R15: 00007ffe2629e0b8 [ 115.217513][ T5332] [ 115.245628][ T5332] block device autoloading is deprecated and will be removed. [ 115.246261][ T5336] md: resync of RAID array md0 [ 115.276802][ T5336] md: md0: resync done.