Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. [*] Starting reproducer for circular locking dependency in md_alloc... [+] Successfully wrote '1 ' to /sys/module/md_mod/parameters/create_on_open [-] Failed to open /sys/module/md/parameters/create_on_open: No such file or directory [+] Successfully opened new_array sysfs parameter. [+] Successfully created md0 via new_array write. [+] Successfully closed sysfs_fd. [+] Successfully created block device node /tmp/repro_md0. [+] Successfully opened /tmp/repro_md0. [+] Successfully executed SET_ARRAY_INFO ioctl. [ 127.223840][ T6002] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [+] ioctl ADD_NEW_DISK (major 8, minor 200) returned -1 (errno: No such device or address) as expected for unallocated device. [+] ioctl ADD_NEW_DISK (major 8, minor 250) returned -1 (errno: No such device or address). [+] Successfully closed /tmp/repro_md0. [+] Successfully created probe device node /tmp/repro_probe_md9 (major 9, minor 9). [ 127.315636][ T6002] md: could not open device unknown-block(8,200). [ 127.315745][ T6002] md: error, md_import_device() returned -6 [ 127.345416][ T6002] md: could not open device unknown-block(8,250). [ 127.345468][ T6002] md: error, md_import_device() returned -6 [ 127.348846][ T6002] [ 127.364119][ T6002] ====================================================== [ 127.371259][ T6002] WARNING: possible circular locking dependency detected [ 127.378482][ T6002] syzkaller #0 Not tainted [ 127.383559][ T6002] ------------------------------------------------------ [ 127.390939][ T6002] syz-executor140/6002 is trying to acquire lock: [ 127.397542][ T6002] ffffffff91329200 (disks_mutex){+.+.}-{4:4}, at: md_alloc+0x40/0xf40 [ 127.406036][ T6002] [ 127.406036][ T6002] but task is already holding lock: [ 127.413626][ T6002] ffffffff9096c060 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 127.423347][ T6002] [ 127.423347][ T6002] which lock already depends on the new lock. [ 127.423347][ T6002] [ 127.434418][ T6002] [ 127.434418][ T6002] the existing dependency chain (in reverse order) is: [ 127.443981][ T6002] [ 127.443981][ T6002] -> #2 (major_names_lock){+.+.}-{4:4}: [ 127.452636][ T6002] __mutex_lock+0x197/0x15a0 [ 127.458158][ T6002] blk_request_module+0x35/0x2a0 [ 127.463888][ T6002] blkdev_get_no_open+0x3f/0xe0 [ 127.469294][ T6002] bdev_file_open_by_dev+0xa0/0x240 [ 127.475135][ T6002] md_import_device+0x2e9/0x650 [ 127.480602][ T6002] md_add_new_disk+0x522/0x1850 [ 127.486085][ T6002] md_ioctl+0x2027/0x2630 [ 127.491060][ T6002] blkdev_ioctl+0x5e3/0x740 [ 127.496185][ T6002] __se_sys_ioctl+0xfc/0x170 [ 127.501608][ T6002] do_syscall_64+0x166/0x520 [ 127.506760][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.513636][ T6002] [ 127.513636][ T6002] -> #1 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 127.522091][ T6002] __mutex_lock+0x197/0x15a0 [ 127.527251][ T6002] md_alloc+0x81e/0xf40 [ 127.531959][ T6002] md_alloc_and_put+0x1a/0x1f0 [ 127.537268][ T6002] add_named_array+0x240/0x350 [ 127.542745][ T6002] param_attr_store+0x214/0x310 [ 127.548235][ T6002] module_attr_store+0x65/0x90 [ 127.553579][ T6002] kernfs_fop_write_iter+0x3a4/0x540 [ 127.559763][ T6002] vfs_write+0x612/0xba0 [ 127.564569][ T6002] ksys_write+0x150/0x270 [ 127.569637][ T6002] do_syscall_64+0x166/0x520 [ 127.574949][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.581593][ T6002] [ 127.581593][ T6002] -> #0 (disks_mutex){+.+.}-{4:4}: [ 127.589015][ T6002] __lock_acquire+0x164c/0x2de0 [ 127.594604][ T6002] lock_acquire+0x115/0x350 [ 127.599823][ T6002] __mutex_lock+0x197/0x15a0 [ 127.605222][ T6002] md_alloc+0x40/0xf40 [ 127.609977][ T6002] md_alloc_and_put+0x1a/0x1f0 [ 127.615293][ T6002] blk_request_module+0x27d/0x2a0 [ 127.620871][ T6002] blkdev_get_no_open+0x3f/0xe0 [ 127.626292][ T6002] blkdev_open+0x1d7/0x600 [ 127.631282][ T6002] do_dentry_open+0x80e/0x1360 [ 127.636845][ T6002] vfs_open_consume+0x4a/0x350 [ 127.642242][ T6002] path_openat+0x16fc/0x20f0 [ 127.647422][ T6002] do_file_open+0x23e/0x4a0 [ 127.652758][ T6002] do_sys_openat2+0x115/0x200 [ 127.658159][ T6002] __x64_sys_openat+0x138/0x170 [ 127.663833][ T6002] do_syscall_64+0x166/0x520 [ 127.669154][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.675717][ T6002] [ 127.675717][ T6002] other info that might help us debug this: [ 127.675717][ T6002] [ 127.686660][ T6002] Chain exists of: [ 127.686660][ T6002] disks_mutex --> &mddev->reconfig_mutex --> major_names_lock [ 127.686660][ T6002] [ 127.700516][ T6002] Possible unsafe locking scenario: [ 127.700516][ T6002] [ 127.708343][ T6002] CPU0 CPU1 [ 127.713911][ T6002] ---- ---- [ 127.719474][ T6002] lock(major_names_lock); [ 127.724120][ T6002] lock(&mddev->reconfig_mutex); [ 127.731957][ T6002] lock(major_names_lock); [ 127.739532][ T6002] lock(disks_mutex); [ 127.743708][ T6002] [ 127.743708][ T6002] *** DEADLOCK *** [ 127.743708][ T6002] [ 127.751980][ T6002] locks held by syz-executor140/6002: 1, last CPU#1: [ 127.758859][ T6002] #0: ffffffff9096c060 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 127.769297][ T6002] [ 127.769297][ T6002] stack backtrace: [ 127.775327][ T6002] CPU: 1 UID: 0 PID: 6002 Comm: syz-executor140 Not tainted syzkaller #0 PREEMPT(full) [ 127.785181][ T6002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 127.796069][ T6002] Call Trace: [ 127.799379][ T6002] [ 127.802339][ T6002] dump_stack_lvl+0xe8/0x150 [ 127.807253][ T6002] print_circular_bug+0x2e2/0x300 [ 127.812333][ T6002] check_noncircular+0x12f/0x150 [ 127.817661][ T6002] __lock_acquire+0x164c/0x2de0 [ 127.822807][ T6002] ? __flush_workqueue+0xe9e/0x10b0 [ 127.828477][ T6002] lock_acquire+0x115/0x350 [ 127.833470][ T6002] ? md_alloc+0x40/0xf40 [ 127.837955][ T6002] __mutex_lock+0x197/0x15a0 [ 127.842871][ T6002] ? md_alloc+0x40/0xf40 [ 127.847168][ T6002] ? __mutex_lock+0x305/0x15a0 [ 127.852012][ T6002] ? md_alloc+0x40/0xf40 [ 127.856314][ T6002] ? __pfx___mutex_lock+0x10/0x10 [ 127.861404][ T6002] ? __pfx___mutex_lock+0x10/0x10 [ 127.866656][ T6002] ? find_inode_fast+0xd2/0x740 [ 127.871541][ T6002] ? __pfx_md_probe+0x10/0x10 [ 127.876436][ T6002] md_alloc+0x40/0xf40 [ 127.880729][ T6002] ? find_inode_fast+0xd2/0x740 [ 127.885615][ T6002] ? __pfx_md_probe+0x10/0x10 [ 127.890582][ T6002] md_alloc_and_put+0x1a/0x1f0 [ 127.895836][ T6002] blk_request_module+0x27d/0x2a0 [ 127.901721][ T6002] blkdev_get_no_open+0x3f/0xe0 [ 127.906719][ T6002] blkdev_open+0x1d7/0x600 [ 127.911272][ T6002] ? __pfx_blkdev_open+0x10/0x10 [ 127.916336][ T6002] do_dentry_open+0x80e/0x1360 [ 127.921184][ T6002] vfs_open_consume+0x4a/0x350 [ 127.925996][ T6002] ? path_openat+0x16e1/0x20f0 [ 127.930792][ T6002] path_openat+0x16fc/0x20f0 [ 127.935431][ T6002] do_file_open+0x23e/0x4a0 [ 127.940351][ T6002] ? __pfx_do_file_open+0x10/0x10 [ 127.946143][ T6002] ? _raw_spin_unlock+0x28/0x50 [ 127.951225][ T6002] ? alloc_fd+0x6af/0x760 [ 127.955845][ T6002] do_sys_openat2+0x115/0x200 [ 127.960659][ T6002] ? __pfx_do_sys_openat2+0x10/0x10 [ 127.965904][ T6002] ? ksys_write+0x1fc/0x270 [ 127.970530][ T6002] ? __pfx_ksys_write+0x10/0x10 [ 127.975426][ T6002] __x64_sys_openat+0x138/0x170 [ 127.980398][ T6002] do_syscall_64+0x166/0x520 [ 127.985217][ T6002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.991965][ T6002] ? clear_bhb_loop+0x70/0xc0 [ 127.996956][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.003249][ T6002] RIP: 0033:0x7f9cb93efb37 [ 128.008241][ T6002] Code: 48 89 fa 4c 89 df e8 98 1d 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 128.028073][ T6002] RSP: 002b:00007ffd0a7a14d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 128.036702][ T6002] RAX: ffffffffffffffda RBX: 000055558698d400 RCX: 00007f9cb93efb37 [ 128.044878][ T6002] RDX: 0000000000000002 RSI: 00007ffd0a7a15f0 RDI: ffffffffffffff9c [ 128.052951][ T6002] RBP: 00007ffd0a7a15b0 R08: 0000000000000000 R09: 0000000000000000 [ 128.060942][ T6002] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd0a7a15f0 [+] open /tmp/repro_probe_md9 succeeded (fd=3), md_probe completed. [+] open /tmp/repro_probe_md11 succeeded (fd=3). [+] Successfully unlinked /tmp/repro_md0. [+] Successfully unlinked /tmp/repro_probe_md9. [ 128.069034][ T6002] R13: 00000000ffffffff R14: 00007f9cb942909a R15: 0000000000000002 [ 128.077230][ T6002] [ 128.086174][ T6002] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 128.086195][ T6002] block device autoloading is deprecated and will be removed. [ 128.091942][ T6002] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 128.091962][ T6002] block device autoloading is deprecated and will be removed. [+] Reproducer completed successfully.