Warning: Permanently added '10.128.1.58' (ECDSA) to the list of known hosts.
[   44.740983] random: sshd: uninitialized urandom read (32 bytes read)
2019/04/25 14:59:32 fuzzer started
[   44.939936] audit: type=1400 audit(1556204372.012:36): avc:  denied  { map } for  pid=7130 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[   46.740593] random: cc1: uninitialized urandom read (8 bytes read)
2019/04/25 14:59:34 dialing manager at 10.128.0.105:45567
2019/04/25 14:59:39 syscalls: 2434
2019/04/25 14:59:39 code coverage: enabled
2019/04/25 14:59:39 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument
2019/04/25 14:59:39 extra coverage: extra coverage is not supported by the kernel
2019/04/25 14:59:39 setuid sandbox: enabled
2019/04/25 14:59:39 namespace sandbox: enabled
2019/04/25 14:59:39 Android sandbox: /sys/fs/selinux/policy does not exist
2019/04/25 14:59:39 fault injection: enabled
2019/04/25 14:59:39 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/04/25 14:59:39 net packet injection: enabled
2019/04/25 14:59:39 net device setup: enabled
[   53.915626] random: crng init done
15:01:08 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

15:01:08 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_read_part_table(0xe01f0303, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="009000030000000000004c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}])

15:01:08 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
bind$bt_rfcomm(r1, &(0x7f0000000280)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0)

15:01:08 executing program 3:
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
gettid()
prlimit64(0x0, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
creat(0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x10})

15:01:08 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="26a4b8318b98ff4dc870bd6688a8", 0x0, 0x1200}, 0x28)

15:01:08 executing program 0:
mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8001, 0x0, 0x0, 0x0)

[  141.156448] audit: type=1400 audit(1556204468.232:37): avc:  denied  { map } for  pid=7146 comm="syz-executor.1" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13802 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1
[  142.150160] IPVS: ftp: loaded support on port[0] = 21
[  142.464511] chnl_net:caif_netlink_parms(): no params data found
[  142.473963] IPVS: ftp: loaded support on port[0] = 21
[  142.503692] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.510329] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.517251] device bridge_slave_0 entered promiscuous mode
[  142.524913] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.531354] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.538142] device bridge_slave_1 entered promiscuous mode
[  142.562582] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  142.576962] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  142.603187] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  142.610600] team0: Port device team_slave_0 added
[  142.618513] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  142.625624] team0: Port device team_slave_1 added
[  142.630977] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  142.641294] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  142.701053] IPVS: ftp: loaded support on port[0] = 21
[  142.708210] device hsr_slave_0 entered promiscuous mode
[  142.750298] device hsr_slave_1 entered promiscuous mode
[  142.792082] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  142.818958] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  142.891472] chnl_net:caif_netlink_parms(): no params data found
[  142.902063] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.908517] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.915333] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.921686] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.987259] IPVS: ftp: loaded support on port[0] = 21
[  143.035387] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.041920] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.048735] device bridge_slave_0 entered promiscuous mode
[  143.056691] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.063234] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.070255] device bridge_slave_1 entered promiscuous mode
[  143.096094] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  143.107917] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  143.135708] chnl_net:caif_netlink_parms(): no params data found
[  143.150120] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  143.157186] team0: Port device team_slave_0 added
[  143.176345] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  143.183795] team0: Port device team_slave_1 added
[  143.195194] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  143.204954] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  143.243550] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.249969] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.257230] device bridge_slave_0 entered promiscuous mode
[  143.285882] IPVS: ftp: loaded support on port[0] = 21
[  143.298340] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.305087] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.312542] device bridge_slave_1 entered promiscuous mode
[  143.353143] device hsr_slave_0 entered promiscuous mode
[  143.390289] device hsr_slave_1 entered promiscuous mode
[  143.440812] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  143.448163] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  143.467945] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  143.474154] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.519289] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  143.528679] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  143.536269] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.543194] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.550372] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  143.590745] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  143.598387] chnl_net:caif_netlink_parms(): no params data found
[  143.612456] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  143.642918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  143.649774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  143.668196] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  143.674369] 8021q: adding VLAN 0 to HW filter on device team0
[  143.680872] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  143.688037] team0: Port device team_slave_0 added
[  143.699017] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  143.709535] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  143.717637] team0: Port device team_slave_1 added
[  143.723981] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  143.752953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  143.761161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  143.768659] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.775082] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.782171] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  143.802569] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  143.814737] IPVS: ftp: loaded support on port[0] = 21
[  143.826625] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  143.893514] device hsr_slave_0 entered promiscuous mode
[  143.931038] device hsr_slave_1 entered promiscuous mode
[  143.970281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  143.978084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  143.985783] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.992132] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.006795] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.013212] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.020238] device bridge_slave_0 entered promiscuous mode
[  144.026906] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.033472] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.040568] device bridge_slave_1 entered promiscuous mode
[  144.053867] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  144.067476] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  144.084967] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  144.092872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  144.101931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  144.109631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  144.134326] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  144.165202] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.176449] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  144.199214] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  144.208069] team0: Port device team_slave_0 added
[  144.213978] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  144.228508] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  144.236781] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  144.244105] team0: Port device team_slave_1 added
[  144.249748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  144.257345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  144.299255] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  144.307881] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  144.333716] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  144.341811] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  144.349871] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  144.366222] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  144.422161] device hsr_slave_0 entered promiscuous mode
[  144.460285] device hsr_slave_1 entered promiscuous mode
[  144.530473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  144.538300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  144.545962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  144.553544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  144.562145] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  144.568325] chnl_net:caif_netlink_parms(): no params data found
[  144.590738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  144.598843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  144.610324] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  144.616325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  144.623845] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  144.630902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  144.637812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  144.644953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  144.656791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  144.666394] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  144.673013] 8021q: adding VLAN 0 to HW filter on device team0
[  144.682589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  144.690348] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  144.713571] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  144.720680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  144.728407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  144.736330] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.742702] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.757715] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  144.768795] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  144.784147] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.798704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  144.806034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  144.813781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  144.821869] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.828201] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.835368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  144.846707] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  144.877394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  144.890886] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  144.897969] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  144.925271] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.932074] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.938904] device bridge_slave_0 entered promiscuous mode
[  144.946158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  144.954051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  144.961776] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  144.972161] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  144.983872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  144.991840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  145.002947] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.009297] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.016736] device bridge_slave_1 entered promiscuous mode
[  145.038246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  145.072565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  145.082697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  145.090882] chnl_net:caif_netlink_parms(): no params data found
[  145.106798] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  145.116122] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  145.126057] bond0: Enslaving bond_slave_1 as an active interface with an up link
15:01:12 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[  145.139301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  145.147368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  145.176636] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
15:01:12 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[  145.183889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
15:01:12 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

15:01:12 executing program 1:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070")
r2 = dup(r0)
r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r2)

[  145.247686] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.272089] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  145.291503] team0: Port device team_slave_0 added
[  145.302878] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  145.315670] team0: Port device team_slave_1 added
[  145.323590] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  145.332594] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  145.341571] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.368223] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  145.380434] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.388500] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  145.407398] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
15:01:12 executing program 1:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070")
r2 = dup(r0)
r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r2)

[  145.415850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  145.423033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  145.431561] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  145.439880] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  145.446853] 8021q: adding VLAN 0 to HW filter on device team0
[  145.461699] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.468059] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.484574] device bridge_slave_0 entered promiscuous mode
[  145.505503] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  145.513660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  145.521793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  145.537016] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  145.545760] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  145.552237] 8021q: adding VLAN 0 to HW filter on device team0
[  145.558384] bridge0: port 2(bridge_slave_1) entered blocking state
15:01:12 executing program 1:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070")
r2 = dup(r0)
r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r2)

[  145.565497] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.573636] device bridge_slave_1 entered promiscuous mode
[  145.643893] device hsr_slave_0 entered promiscuous mode
[  145.680356] device hsr_slave_1 entered promiscuous mode
[  145.730625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  145.740962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  145.748484] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.754852] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.764421] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  145.776530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  145.797842] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  145.805222] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  145.811988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  145.818953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
15:01:12 executing program 1:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070")
r2 = dup(r0)
r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r2)

[  145.836199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  145.852572] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.858946] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.866081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  145.873954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  145.881721] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.888081] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.898455] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  145.907391] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  145.932929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  145.941418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  145.951951] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  145.963346] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  145.976925] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  145.996314] hrtimer: interrupt took 47095 ns
[  146.004078] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  146.211736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  146.219561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  146.231140] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.237791] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.245039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  146.261710] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  146.281052] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  146.287888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  146.296862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  146.304509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  146.313075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  146.343956] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  146.351095] team0: Port device team_slave_0 added
[  146.356967] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  146.370530] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  146.379407] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  146.388842] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  146.396171] team0: Port device team_slave_1 added
[  146.401845] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  146.410471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  146.417991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  146.425703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  146.433272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  146.440993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  146.448484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  146.463591] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  146.471263] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  146.487540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  146.495551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  146.503987] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  146.513534] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  146.528367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  146.536145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  146.543822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  146.551410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  146.560840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  146.568413] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  146.578026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  146.585465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  146.592995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  146.600911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  146.642848] device hsr_slave_0 entered promiscuous mode
[  146.680425] device hsr_slave_1 entered promiscuous mode
[  146.722333] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  146.728379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  146.741598] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  146.750856] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  146.763926] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  146.786779] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.796961] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  146.811264] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.818959] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  146.826565] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  146.849819] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  146.859961] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  146.867222] 8021q: adding VLAN 0 to HW filter on device team0
[  146.877374] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.884120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  146.891778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  146.917487] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  146.925296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  146.934312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  146.943471] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.949814] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.963454] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.977390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  146.987948] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  146.996417] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  147.004108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  147.013444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  147.022331] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.028678] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.039454] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  147.046846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  147.054778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  147.064797] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  147.076918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  147.087295] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  147.093507] 8021q: adding VLAN 0 to HW filter on device team0
[  147.102870] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  147.112003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  147.112059] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  147.124033] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  147.129495] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  147.144749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  147.146326]  loop5: p1 p2 p3 p4
[  147.157355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  147.166474] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.172873] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.178746] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  147.191572] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  147.208175] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  147.215746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  147.227717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  147.236680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  147.248666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  147.264732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  147.272596] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.278991] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.288185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  147.295979] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  147.308185] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  147.316316] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  147.326310] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  147.333929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  147.344195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  147.351950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  147.359516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  147.367314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  147.375264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  147.387179] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  147.395644] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  147.402478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  147.410295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  147.417761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  147.425276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  147.440731] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  147.448635] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  147.455677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  147.465782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  147.473367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  147.481362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  147.491598] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  147.499884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  147.509782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  147.519420] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  147.526799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  147.535781] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  147.542359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  147.562454] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  147.570732] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  147.583750] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.596441] 8021q: adding VLAN 0 to HW filter on device batadv0
[  427.991346] INFO: task syz-executor.0:7153 blocked for more than 140 seconds.
[  427.998777]       Not tainted 4.14.113 #3
[  428.003430] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  428.011478] syz-executor.0  D24992  7153      1 0x00000004
[  428.017128] Call Trace:
[  428.019728]  __schedule+0x7be/0x1cf0
[  428.023526]  ? __mutex_lock+0x737/0x1470
[  428.027604]  ? pci_mmcfg_check_reserved+0x150/0x150
[  428.032708]  schedule+0x92/0x1c0
[  428.036067]  schedule_preempt_disabled+0x13/0x20
[  428.041056]  __mutex_lock+0x73c/0x1470
[  428.044960]  ? trace_hardirqs_on+0x10/0x10
[  428.049194]  ? lo_release+0x84/0x1b0
[  428.052966]  ? save_trace+0x280/0x290
[  428.056798]  ? mutex_trylock+0x1c0/0x1c0
[  428.060919]  ? __blkdev_put+0x397/0x7f0
[  428.064901]  ? find_held_lock+0x35/0x130
[  428.068946]  ? __blkdev_put+0x397/0x7f0
[  428.073100]  ? loop_clr_fd+0xae0/0xae0
[  428.077017]  mutex_lock_nested+0x16/0x20
[  428.081149]  ? mutex_lock_nested+0x16/0x20
[  428.085395]  lo_release+0x84/0x1b0
[  428.088918]  ? loop_clr_fd+0xae0/0xae0
[  428.092881]  __blkdev_put+0x436/0x7f0
[  428.096706]  ? bd_set_size+0xb0/0xb0
[  428.100490]  ? wait_for_completion+0x420/0x420
[  428.105072]  blkdev_put+0x88/0x510
[  428.108604]  ? fcntl_setlk+0xb90/0xb90
[  428.112754]  ? blkdev_put+0x510/0x510
[  428.116795]  blkdev_close+0x8b/0xb0
[  428.121590]  __fput+0x277/0x7a0
[  428.125153]  ____fput+0x16/0x20
[  428.128849]  task_work_run+0x119/0x190
[  428.133031]  exit_to_usermode_loop+0x1da/0x220
[  428.137819]  do_syscall_64+0x4a9/0x630
[  428.141831]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  428.146750]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  428.152033] RIP: 0033:0x412b40
[  428.155228] RSP: 002b:00007ffc86490438 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  428.163826] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000412b40
[  428.171265] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003
[  428.178551] RBP: 000000000070e4e0 R08: 0000000000000000 R09: 000000000000000a
[  428.186290] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000
[  428.193676] R13: 00007ffc86490470 R14: 0000000000000003 R15: 00007ffc86490480
[  428.201053] INFO: task syz-executor.2:7156 blocked for more than 140 seconds.
[  428.208337]       Not tainted 4.14.113 #3
[  428.212547] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  428.220689] syz-executor.2  D25168  7156      1 0x00000004
[  428.226399] Call Trace:
[  428.229148]  __schedule+0x7be/0x1cf0
[  428.233021]  ? __mutex_lock+0x737/0x1470
[  428.237728]  ? pci_mmcfg_check_reserved+0x150/0x150
[  428.242821]  schedule+0x92/0x1c0
[  428.246202]  schedule_preempt_disabled+0x13/0x20
[  428.251332]  __mutex_lock+0x73c/0x1470
[  428.256384]  ? trace_hardirqs_on+0x10/0x10
[  428.261602]  ? lo_open+0x1d/0xb0
[  428.264992]  ? refcount_inc_not_zero+0x50/0xe0
[  428.269784]  ? mutex_trylock+0x1c0/0x1c0
[  428.274044]  ? find_held_lock+0x35/0x130
[  428.278306]  ? disk_get_part+0x9c/0x140
[  428.282545]  ? lock_downgrade+0x6e0/0x6e0
[  428.286874]  ? loop_unregister_transfer+0x90/0x90
[  428.291770]  mutex_lock_nested+0x16/0x20
[  428.295835]  ? mutex_lock_nested+0x16/0x20
[  428.300162]  lo_open+0x1d/0xb0
[  428.303376]  __blkdev_get+0x2c9/0x1120
[  428.307398]  ? __blkdev_put+0x7f0/0x7f0
[  428.311545]  ? bd_acquire+0x178/0x2c0
[  428.315341]  ? find_held_lock+0x35/0x130
[  428.319392]  blkdev_get+0xa8/0x8e0
[  428.323024]  ? bd_may_claim+0xd0/0xd0
[  428.327076]  ? _raw_spin_unlock+0x2d/0x50
[  428.331322]  blkdev_open+0x1d1/0x260
[  428.335050]  ? security_file_open+0x8f/0x1a0
[  428.339602]  do_dentry_open+0x73e/0xeb0
[  428.343661]  ? bd_acquire+0x2c0/0x2c0
[  428.347484]  vfs_open+0x105/0x230
[  428.351019]  path_openat+0x8bd/0x3f70
[  428.354852]  ? trace_hardirqs_on+0x10/0x10
[  428.359092]  ? path_lookupat.isra.0+0x7b0/0x7b0
[  428.363827]  ? find_held_lock+0x35/0x130
[  428.367982]  ? __alloc_fd+0x1d4/0x4a0
[  428.371828]  do_filp_open+0x18e/0x250
[  428.375634]  ? may_open_dev+0xe0/0xe0
[  428.379432]  ? _raw_spin_unlock+0x2d/0x50
[  428.383679]  ? __alloc_fd+0x1d4/0x4a0
[  428.387493]  do_sys_open+0x2c5/0x430
[  428.391287]  ? filp_open+0x70/0x70
[  428.394835]  SyS_open+0x2d/0x40
[  428.398100]  ? do_sys_open+0x430/0x430
[  428.402059]  do_syscall_64+0x1eb/0x630
[  428.405960]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  428.410883]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  428.416087] RIP: 0033:0x412d20
[  428.419261] RSP: 002b:00007ffd10bce1c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  428.427048] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000412d20
[  428.434436] RDX: 00007ffd10bce25a RSI: 0000000000000002 RDI: 00007ffd10bce250
[  428.441792] RBP: 000000000070e4e0 R08: 0000000000000000 R09: 000000000000000a
[  428.449107] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000
[  428.456517] R13: 00007ffd10bce200 R14: 0000000000000003 R15: 00007ffd10bce210
[  428.463889] INFO: task syz-executor.3:7157 blocked for more than 140 seconds.
[  428.471412]       Not tainted 4.14.113 #3
[  428.475579] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  428.483665] syz-executor.3  D24992  7157      1 0x00000004
[  428.489323] Call Trace:
[  428.491984]  __schedule+0x7be/0x1cf0
[  428.495843]  ? __mutex_lock+0x737/0x1470
[  428.499897]  ? pci_mmcfg_check_reserved+0x150/0x150
[  428.504987]  schedule+0x92/0x1c0
[  428.508368]  schedule_preempt_disabled+0x13/0x20
[  428.513209]  __mutex_lock+0x73c/0x1470
[  428.517123]  ? trace_hardirqs_on+0x10/0x10
[  428.521693]  ? lo_open+0x1d/0xb0
[  428.525070]  ? refcount_inc_not_zero+0x50/0xe0
[  428.529652]  ? mutex_trylock+0x1c0/0x1c0
[  428.533882]  ? find_held_lock+0x35/0x130
[  428.537944]  ? disk_get_part+0x9c/0x140
[  428.541992]  ? lock_downgrade+0x6e0/0x6e0
[  428.546146]  ? loop_unregister_transfer+0x90/0x90
[  428.551163]  mutex_lock_nested+0x16/0x20
[  428.555227]  ? mutex_lock_nested+0x16/0x20
[  428.559449]  lo_open+0x1d/0xb0
[  428.562767]  __blkdev_get+0x2c9/0x1120
[  428.566679]  ? __blkdev_put+0x7f0/0x7f0
[  428.570715]  ? bd_acquire+0x178/0x2c0
[  428.574610]  ? find_held_lock+0x35/0x130
[  428.578672]  blkdev_get+0xa8/0x8e0
[  428.582284]  ? bd_may_claim+0xd0/0xd0
[  428.586097]  ? _raw_spin_unlock+0x2d/0x50
[  428.590293]  blkdev_open+0x1d1/0x260
[  428.594016]  ? security_file_open+0x8f/0x1a0
[  428.598417]  do_dentry_open+0x73e/0xeb0
[  428.602448]  ? bd_acquire+0x2c0/0x2c0
[  428.606335]  vfs_open+0x105/0x230
[  428.609799]  path_openat+0x8bd/0x3f70
[  428.613660]  ? trace_hardirqs_on+0x10/0x10
[  428.617914]  ? path_lookupat.isra.0+0x7b0/0x7b0
[  428.622652]  ? find_held_lock+0x35/0x130
[  428.626734]  ? __alloc_fd+0x1d4/0x4a0
[  428.630668]  do_filp_open+0x18e/0x250
[  428.634477]  ? may_open_dev+0xe0/0xe0
[  428.638277]  ? _raw_spin_unlock+0x2d/0x50
[  428.642491]  ? __alloc_fd+0x1d4/0x4a0
[  428.646316]  do_sys_open+0x2c5/0x430
[  428.650129]  ? filp_open+0x70/0x70
[  428.653699]  SyS_open+0x2d/0x40
[  428.656975]  ? do_sys_open+0x430/0x430
[  428.660945]  do_syscall_64+0x1eb/0x630
[  428.664895]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  428.669748]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  428.675015] RIP: 0033:0x412d20
[  428.678221] RSP: 002b:00007ffd0c31b218 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  428.686001] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000412d20
[  428.693335] RDX: 00007ffd0c31b2aa RSI: 0000000000000002 RDI: 00007ffd0c31b2a0
[  428.700796] RBP: 000000000070e4e0 R08: 0000000000000000 R09: 000000000000000a
[  428.708090] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000
[  428.717103] R13: 00007ffd0c31b250 R14: 0000000000000003 R15: 00007ffd0c31b260
[  428.728687] INFO: task syz-executor.5:7235 blocked for more than 140 seconds.
[  428.736025]       Not tainted 4.14.113 #3
[  428.740247] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  428.748231] syz-executor.5  D26848  7235   7155 0x00000004
[  428.753941] Call Trace:
[  428.756537]  __schedule+0x7be/0x1cf0
[  428.760313]  ? __mutex_lock+0x737/0x1470
[  428.764401]  ? pci_mmcfg_check_reserved+0x150/0x150
[  428.769418]  schedule+0x92/0x1c0
[  428.772879]  schedule_preempt_disabled+0x13/0x20
[  428.777661]  __mutex_lock+0x73c/0x1470
[  428.781714]  ? blkdev_reread_part+0x1f/0x40
[  428.786059]  ? mutex_trylock+0x1c0/0x1c0
[  428.790253]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  428.795368]  ? __wake_up_common_lock+0xe3/0x160
[  428.800129]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[  428.805252]  mutex_lock_nested+0x16/0x20
[  428.809314]  ? mutex_lock_nested+0x16/0x20
[  428.813823]  blkdev_reread_part+0x1f/0x40
[  428.818036]  loop_reread_partitions+0x7c/0x90
[  428.822660]  loop_clr_fd+0x844/0xae0
[  428.826471]  lo_ioctl+0x8d0/0x1c70
[  428.830162]  ? __check_object_size+0x12a/0x2ab
[  428.834908]  ? loop_probe+0x160/0x160
[  428.838789]  blkdev_ioctl+0x983/0x1880
[  428.842848]  ? blkpg_ioctl+0x980/0x980
[  428.847687]  ? lock_downgrade+0x6e0/0x6e0
[  428.855440]  ? __might_sleep+0x93/0xb0
[  428.867661]  ? __fget+0x210/0x370
[  428.873542]  block_ioctl+0xde/0x120
[  428.877565]  ? blkdev_fallocate+0x3b0/0x3b0
[  428.884792]  do_vfs_ioctl+0x7b9/0x1070
[  428.891475]  ? selinux_file_mprotect+0x5d0/0x5d0
[  428.898951]  ? lock_downgrade+0x6e0/0x6e0
[  428.909577]  ? ioctl_preallocate+0x1c0/0x1c0
[  428.916759]  ? __fget+0x237/0x370
[  428.920269]  ? security_file_ioctl+0x8f/0xc0
[  428.924713]  SyS_ioctl+0x8f/0xc0
[  428.928063]  ? do_vfs_ioctl+0x1070/0x1070
[  428.932248]  do_syscall_64+0x1eb/0x630
[  428.936139]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  428.941033]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  428.946232] RIP: 0033:0x458c17
[  428.949409] RSP: 002b:00007f858d1bc9f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  428.957166] RAX: ffffffffffffffda RBX: 00007f858d1bd6d4 RCX: 0000000000458c17
[  428.964652] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000005
[  428.971981] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000c
[  428.979249] R10: 0000000000000064 R11: 0000000000000246 R12: 0000000000000004
[  428.986562] R13: 0000000000000000 R14: 0000000000000005 R15: 0000000000000004
[  428.994053] INFO: task syz-executor.5:7250 blocked for more than 140 seconds.
[  429.001493]       Not tainted 4.14.113 #3
[  429.005637] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  429.013641] syz-executor.5  D29184  7250   7155 0x00000004
[  429.020797] Call Trace:
[  429.023381]  __schedule+0x7be/0x1cf0
[  429.027194]  ? __mutex_lock+0x737/0x1470
[  429.031329]  ? pci_mmcfg_check_reserved+0x150/0x150
[  429.036388]  schedule+0x92/0x1c0
[  429.039743]  schedule_preempt_disabled+0x13/0x20
[  429.044536]  __mutex_lock+0x73c/0x1470
[  429.048427]  ? __mutex_unlock_slowpath+0x71/0x800
[  429.053302]  ? __blkdev_get+0x145/0x1120
[  429.057367]  ? mutex_trylock+0x1c0/0x1c0
[  429.061479]  ? exact_match+0xd/0x20
[  429.065111]  ? kobj_lookup+0x319/0x410
[  429.068991]  ? blkdev_ioctl+0x1880/0x1880
[  429.073200]  mutex_lock_nested+0x16/0x20
[  429.077263]  ? mutex_lock_nested+0x16/0x20
[  429.081534]  __blkdev_get+0x145/0x1120
[  429.085435]  ? __blkdev_put+0x7f0/0x7f0
[  429.089390]  ? bd_acquire+0x178/0x2c0
[  429.093249]  ? find_held_lock+0x35/0x130
[  429.097315]  blkdev_get+0xa8/0x8e0
[  429.100905]  ? bd_may_claim+0xd0/0xd0
[  429.104757]  ? _raw_spin_unlock+0x2d/0x50
[  429.108895]  blkdev_open+0x1d1/0x260
[  429.113144]  ? security_file_open+0x8f/0x1a0
[  429.117548]  do_dentry_open+0x73e/0xeb0
[  429.121570]  ? bd_acquire+0x2c0/0x2c0
[  429.125376]  vfs_open+0x105/0x230
[  429.128808]  path_openat+0x8bd/0x3f70
[  429.132644]  ? trace_hardirqs_on+0x10/0x10
[  429.136928]  ? path_lookupat.isra.0+0x7b0/0x7b0
[  429.142516]  ? find_held_lock+0x35/0x130
[  429.150524]  ? __alloc_fd+0x1d4/0x4a0
[  429.154558]  do_filp_open+0x18e/0x250
[  429.158401]  ? may_open_dev+0xe0/0xe0
[  429.162290]  ? _raw_spin_unlock+0x2d/0x50
[  429.166445]  ? __alloc_fd+0x1d4/0x4a0
[  429.170300]  do_sys_open+0x2c5/0x430
[  429.174016]  ? filp_open+0x70/0x70
[  429.177536]  ? fput+0xd4/0x150
[  429.180777]  ? SyS_pwrite64+0xca/0x140
[  429.184674]  SyS_open+0x2d/0x40
[  429.187976]  ? do_sys_open+0x430/0x430
[  429.191951]  do_syscall_64+0x1eb/0x630
[  429.195839]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  429.200752]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  429.205945] RIP: 0033:0x412d41
[  429.209113] RSP: 002b:00007f858d17a9f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  429.216857] RAX: ffffffffffffffda RBX: 00007f858d17b6d4 RCX: 0000000000412d41
[  429.224192] RDX: 00007f858d17abaa RSI: 0000000000000002 RDI: 00007f858d17aba0
[  429.231526] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a
[  429.238797] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004
[  429.246109] R13: 0000000000000004 R14: 00007f858d17b6d4 R15: 00000000ffffffff
[  429.253419] INFO: task blkid:7239 blocked for more than 140 seconds.
[  429.259899]       Not tainted 4.14.113 #3
[  429.264072] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  429.272090] blkid           D28728  7239   7117 0x00000004
[  429.277729] Call Trace:
[  429.280469]  __schedule+0x7be/0x1cf0
[  429.284187]  ? __mutex_lock+0x737/0x1470
[  429.288239]  ? pci_mmcfg_check_reserved+0x150/0x150
[  429.293306]  schedule+0x92/0x1c0
[  429.296726]  schedule_preempt_disabled+0x13/0x20
[  429.301534]  __mutex_lock+0x73c/0x1470
[  429.305433]  ? lo_open+0x1d/0xb0
[  429.308787]  ? refcount_inc_not_zero+0x50/0xe0
[  429.313422]  ? mutex_trylock+0x1c0/0x1c0
[  429.317486]  ? exact_match+0xd/0x20
[  429.321143]  ? kobj_lookup+0x319/0x410
[  429.325038]  ? loop_unregister_transfer+0x90/0x90
[  429.329868]  mutex_lock_nested+0x16/0x20
[  429.333972]  ? mutex_lock_nested+0x16/0x20
[  429.338215]  lo_open+0x1d/0xb0
[  429.341498]  __blkdev_get+0xab1/0x1120
[  429.345393]  ? __blkdev_put+0x7f0/0x7f0
[  429.349344]  ? bd_acquire+0x178/0x2c0
[  429.353177]  ? find_held_lock+0x35/0x130
[  429.357244]  blkdev_get+0xa8/0x8e0
[  429.360845]  ? bd_may_claim+0xd0/0xd0
[  429.364741]  ? _raw_spin_unlock+0x2d/0x50
[  429.368870]  blkdev_open+0x1d1/0x260
[  429.372646]  ? security_file_open+0x8f/0x1a0
[  429.377061]  do_dentry_open+0x73e/0xeb0
[  429.381078]  ? bd_acquire+0x2c0/0x2c0
[  429.384884]  vfs_open+0x105/0x230
[  429.388319]  path_openat+0x8bd/0x3f70
[  429.392215]  ? trace_hardirqs_on+0x10/0x10
[  429.396453]  ? path_lookupat.isra.0+0x7b0/0x7b0
[  429.401159]  ? find_held_lock+0x35/0x130
[  429.405230]  ? __alloc_fd+0x1d4/0x4a0
[  429.409020]  do_filp_open+0x18e/0x250
[  429.412911]  ? may_open_dev+0xe0/0xe0
[  429.416726]  ? _raw_spin_unlock+0x2d/0x50
[  429.420931]  ? __alloc_fd+0x1d4/0x4a0
[  429.424736]  do_sys_open+0x2c5/0x430
[  429.428434]  ? filp_open+0x70/0x70
[  429.432012]  SyS_open+0x2d/0x40
[  429.435347]  ? do_sys_open+0x430/0x430
[  429.439231]  do_syscall_64+0x1eb/0x630
[  429.443166]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  429.448013]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  429.453249] RIP: 0033:0x7f1effaca120
[  429.457061] RSP: 002b:00007ffeaf365958 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  429.464816] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1effaca120
[  429.472221] RDX: 00007ffeaf367f41 RSI: 0000000000000000 RDI: 00007ffeaf367f41
[  429.479485] RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000
[  429.486793] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000092b030
[  429.494086] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005
[  429.501428] INFO: task blkid:7240 blocked for more than 140 seconds.
[  429.507920]       Not tainted 4.14.113 #3
[  429.512104] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  429.520122] blkid           D28224  7240   7118 0x00000004
[  429.525764] Call Trace:
[  429.528350]  __schedule+0x7be/0x1cf0
[  429.532195]  ? __mutex_lock+0x737/0x1470
[  429.536257]  ? pci_mmcfg_check_reserved+0x150/0x150
[  429.541322]  schedule+0x92/0x1c0
[  429.544677]  schedule_preempt_disabled+0x13/0x20
[  429.549478]  __mutex_lock+0x73c/0x1470
[  429.553670]  ? __mutex_unlock_slowpath+0x71/0x800
[  429.558565]  ? __blkdev_get+0x145/0x1120
[  429.562679]  ? mutex_trylock+0x1c0/0x1c0
[  429.566780]  ? exact_match+0xd/0x20
[  429.570468]  ? kobj_lookup+0x319/0x410
[  429.574398]  ? blkdev_ioctl+0x1880/0x1880
[  429.578541]  mutex_lock_nested+0x16/0x20
[  429.582653]  ? mutex_lock_nested+0x16/0x20
[  429.586898]  __blkdev_get+0x145/0x1120
[  429.590831]  ? __blkdev_put+0x7f0/0x7f0
[  429.594823]  ? bd_acquire+0x178/0x2c0
[  429.598616]  ? find_held_lock+0x35/0x130
[  429.602746]  blkdev_get+0xa8/0x8e0
[  429.606297]  ? bd_may_claim+0xd0/0xd0
[  429.610155]  ? _raw_spin_unlock+0x2d/0x50
[  429.614314]  blkdev_open+0x1d1/0x260
[  429.618123]  ? security_file_open+0x8f/0x1a0
[  429.622575]  do_dentry_open+0x73e/0xeb0
[  429.626573]  ? bd_acquire+0x2c0/0x2c0
[  429.630441]  vfs_open+0x105/0x230
[  429.633899]  path_openat+0x8bd/0x3f70
[  429.637727]  ? trace_hardirqs_on+0x10/0x10
[  429.642011]  ? path_lookupat.isra.0+0x7b0/0x7b0
[  429.646686]  ? find_held_lock+0x35/0x130
[  429.650792]  ? __alloc_fd+0x1d4/0x4a0
[  429.654606]  do_filp_open+0x18e/0x250
[  429.658399]  ? may_open_dev+0xe0/0xe0
[  429.662248]  ? _raw_spin_unlock+0x2d/0x50
[  429.666389]  ? __alloc_fd+0x1d4/0x4a0
[  429.670310]  do_sys_open+0x2c5/0x430
[  429.674029]  ? filp_open+0x70/0x70
[  429.677565]  SyS_open+0x2d/0x40
[  429.680904]  ? do_sys_open+0x430/0x430
[  429.684808]  do_syscall_64+0x1eb/0x630
[  429.688688]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  429.693585]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  429.698796] RIP: 0033:0x7f20e99b4120
[  429.702558] RSP: 002b:00007ffe93956888 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  429.710319] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f20e99b4120
[  429.717705] RDX: 00007ffe93957f41 RSI: 0000000000000000 RDI: 00007ffe93957f41
[  429.725059] RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000
[  429.732362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000001215030
[  429.739680] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005
[  429.747012] 
[  429.747012] Showing all locks held in the system:
[  429.753497] 1 lock held by khungtaskd/1007:
[  429.757873]  #0:  (tasklist_lock){.+.+}, at: [<ffffffff81486f98>] debug_show_all_locks+0x7f/0x21f
[  429.767457] 2 locks held by getty/7109:
[  429.771462]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff861b0323>] ldsem_down_read+0x33/0x40
[  429.780198]  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff8310c666>] n_tty_read+0x1e6/0x17b0
[  429.789508] 2 locks held by getty/7110:
[  429.793515]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff861b0323>] ldsem_down_read+0x33/0x40
[  429.802254]  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff8310c666>] n_tty_read+0x1e6/0x17b0
[  429.811601] 2 locks held by getty/7111:
[  429.815572]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff861b0323>] ldsem_down_read+0x33/0x40
[  429.824295]  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff8310c666>] n_tty_read+0x1e6/0x17b0
[  429.833639] 2 locks held by getty/7112:
[  429.837658]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff861b0323>] ldsem_down_read+0x33/0x40
[  429.846367]  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff8310c666>] n_tty_read+0x1e6/0x17b0
[  429.855727] 2 locks held by getty/7113:
[  429.859714]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff861b0323>] ldsem_down_read+0x33/0x40
[  429.868448]  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff8310c666>] n_tty_read+0x1e6/0x17b0
[  429.877819] 2 locks held by getty/7114:
[  429.881845]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff861b0323>] ldsem_down_read+0x33/0x40
[  429.890574]  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff8310c666>] n_tty_read+0x1e6/0x17b0
[  429.899870] 2 locks held by getty/7115:
[  429.903871]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff861b0323>] ldsem_down_read+0x33/0x40
[  429.912593]  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff8310c666>] n_tty_read+0x1e6/0x17b0
[  429.921947] 3 locks held by syz-executor.0/7153:
[  429.926698]  #0:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff819a7936>] __blkdev_put+0xa6/0x7f0
[  429.935233]  #1:  (loop_index_mutex){+.+.}, at: [<ffffffff8373b1ee>] lo_release+0x1e/0x1b0
[  429.943700]  #2:  (loop_ctl_mutex#2){+.+.}, at: [<ffffffff8373b254>] lo_release+0x84/0x1b0
[  429.952189] 2 locks held by syz-executor.2/7156:
[  429.956943]  #0:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff819a81c5>] __blkdev_get+0x145/0x1120
[  429.965788]  #1:  (loop_index_mutex){+.+.}, at: [<ffffffff8373663d>] lo_open+0x1d/0xb0
[  429.973936] 2 locks held by syz-executor.3/7157:
[  429.978691]  #0:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff819a81c5>] __blkdev_get+0x145/0x1120
[  429.987403]  #1:  (loop_index_mutex){+.+.}, at: [<ffffffff8373663d>] lo_open+0x1d/0xb0
[  429.995536] 2 locks held by syz-executor.5/7235:
[  430.000346]  #0:  (loop_ctl_mutex/1){+.+.}, at: [<ffffffff8373cec7>] lo_ioctl+0x87/0x1c70
[  430.008769]  #1:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff82caa54f>] blkdev_reread_part+0x1f/0x40
[  430.017753] 1 lock held by syz-executor.5/7250:
[  430.022447]  #0:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff819a81c5>] __blkdev_get+0x145/0x1120
[  430.031190] 2 locks held by blkid/7239:
[  430.035153]  #0:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff819a81c5>] __blkdev_get+0x145/0x1120
[  430.043855]  #1:  (loop_index_mutex){+.+.}, at: [<ffffffff8373663d>] lo_open+0x1d/0xb0
[  430.051995] 1 lock held by blkid/7240:
[  430.055883]  #0:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff819a81c5>] __blkdev_get+0x145/0x1120
[  430.064588] 
[  430.066207] =============================================
[  430.066207] 
[  430.073397] NMI backtrace for cpu 0
[  430.077030] CPU: 0 PID: 1007 Comm: khungtaskd Not tainted 4.14.113 #3
[  430.083599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  430.092971] Call Trace:
[  430.095578]  dump_stack+0x138/0x19c
[  430.099205]  nmi_cpu_backtrace.cold+0x57/0x94
[  430.103705]  ? irq_force_complete_move.cold+0x7d/0x7d
[  430.108905]  nmi_trigger_cpumask_backtrace+0x141/0x189
[  430.114183]  arch_trigger_cpumask_backtrace+0x14/0x20
[  430.119355]  watchdog+0x5e7/0xb90
[  430.122796]  kthread+0x31c/0x430
[  430.126143]  ? hungtask_pm_notify+0x60/0x60
[  430.130445]  ? kthread_create_on_node+0xd0/0xd0
[  430.135097]  ret_from_fork+0x3a/0x50
[  430.139214] Sending NMI from CPU 0 to CPUs 1:
[  430.144050] NMI backtrace for cpu 1
[  430.144054] CPU: 1 PID: 52 Comm: kworker/u4:2 Not tainted 4.14.113 #3
[  430.144059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  430.144062] Workqueue: bat_events batadv_nc_worker
[  430.144067] task: ffff8880a9f905c0 task.stack: ffff8880a9f98000
[  430.144070] RIP: 0010:debug_lockdep_rcu_enabled+0x2e/0xa0
[  430.144073] RSP: 0018:ffff8880a9f9fc60 EFLAGS: 00000246
[  430.144078] RAX: 0000000000000007 RBX: ffff888074f38538 RCX: 1ffffffff1049cc9
[  430.144082] RDX: 0000000000000000 RSI: ffff8880a9f90e90 RDI: 0000000000000286
[  430.144086] RBP: ffff8880a9f9fc60 R08: 0000000000000000 R09: ffff8880a9f90eb0
[  430.144089] R10: ffff8880a9f90e90 R11: ffff8880a9f905c0 R12: 0000000000000000
[  430.144093] R13: ffff888068051f30 R14: ffff888068051500 R15: dffffc0000000000
[  430.144096] FS:  0000000000000000(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000
[  430.144100] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  430.144103] CR2: 0000000001f38000 CR3: 00000000a1137000 CR4: 00000000001406e0
[  430.144105] Call Trace:
[  430.144108]  batadv_nc_process_nc_paths.part.0+0xe0/0x350
[  430.144111]  ? batadv_nc_process_nc_paths.part.0+0xa2/0x350
[  430.144114]  ? batadv_nc_sniffed_purge+0x310/0x310
[  430.144117]  batadv_nc_worker+0x4bb/0x6d0
[  430.144119]  process_one_work+0x868/0x1610
[  430.144122]  ? pwq_dec_nr_in_flight+0x2e0/0x2e0
[  430.144125]  worker_thread+0x5d9/0x1050
[  430.144127]  kthread+0x31c/0x430
[  430.144130]  ? process_one_work+0x1610/0x1610
[  430.144132]  ? kthread_create_on_node+0xd0/0xd0
[  430.144135]  ret_from_fork+0x3a/0x50
[  430.144137] Code: 4c e6 24 88 55 48 ba 00 00 00 00 00 fc ff df 48 89 c1 83 e0 07 48 89 e5 48 c1 e9 03 83 c0 03 0f b6 14 11 38 d0 7c 04 84 d2 75 49 <8b> 15 c8 bb d7 06 85 d2 74 3b 48 c7 c0 00 1d ab 87 48 ba 00 00 
[  430.144784] Kernel panic - not syncing: hung_task: blocked tasks
[  430.320101] CPU: 0 PID: 1007 Comm: khungtaskd Not tainted 4.14.113 #3
[  430.326656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  430.335987] Call Trace:
[  430.338574]  dump_stack+0x138/0x19c
[  430.342187]  panic+0x1f2/0x438
[  430.345357]  ? add_taint.cold+0x16/0x16
[  430.349318]  ? irq_force_complete_move.cold+0x7d/0x7d
[  430.354500]  watchdog+0x5f8/0xb90
[  430.357940]  kthread+0x31c/0x430
[  430.361304]  ? hungtask_pm_notify+0x60/0x60
[  430.365605]  ? kthread_create_on_node+0xd0/0xd0
[  430.370258]  ret_from_fork+0x3a/0x50
[  430.374756] Kernel Offset: disabled
[  430.378378] Rebooting in 86400 seconds..