Bluetooth: hci1 command 0x0406 tx timeout
Bluetooth: hci4 command 0x0406 tx timeout
Bluetooth: hci0 command 0x0406 tx timeout
Bluetooth: hci3 command 0x0406 tx timeout
Bluetooth: hci5 command 0x0406 tx timeout
INFO: task systemd-udevd:4628 blocked for more than 140 seconds.
      Not tainted 4.14.280-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
systemd-udevd   D25976  4628      1 0x00000304
Call Trace:
 context_switch kernel/sched/core.c:2811 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3387
 schedule+0x8d/0x1b0 kernel/sched/core.c:3431
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3489
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 lo_open+0x19/0xb0 drivers/block/loop.c:1634
 __blkdev_get+0xa8c/0x1090 fs/block_dev.c:1537
 blkdev_get+0x88/0x890 fs/block_dev.c:1611
 blkdev_open+0x1cc/0x250 fs/block_dev.c:1772
 do_dentry_open+0x44b/0xec0 fs/open.c:777
 vfs_open+0x105/0x220 fs/open.c:888
 do_last fs/namei.c:3428 [inline]
 path_openat+0x628/0x2970 fs/namei.c:3569
 do_filp_open+0x179/0x3c0 fs/namei.c:3603
 do_sys_open+0x296/0x410 fs/open.c:1081
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fd39a62d840
RSP: 002b:00007ffe50cb5208 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 00007ffe50cb52a0 RCX: 00007fd39a62d840
RDX: 0000564c25c9ffe3 RSI: 00000000000a0800 RDI: 0000564c279972b0
RBP: 00007ffe50cb5800 R08: 0000564c25c9f670 R09: 0000000000000010
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe50cb53b0
R13: 0000564c2798a010 R14: 0000564c279a4570 R15: 00007ffe50cb5280
INFO: task syz-executor.3:8000 blocked for more than 140 seconds.
      Not tainted 4.14.280-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.3  D25840  8000      1 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2811 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3387
 schedule+0x8d/0x1b0 kernel/sched/core.c:3431
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3489
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 lo_open+0x19/0xb0 drivers/block/loop.c:1634
 __blkdev_get+0x306/0x1090 fs/block_dev.c:1470
 blkdev_get+0x88/0x890 fs/block_dev.c:1611
 blkdev_open+0x1cc/0x250 fs/block_dev.c:1772
 do_dentry_open+0x44b/0xec0 fs/open.c:777
 vfs_open+0x105/0x220 fs/open.c:888
 do_last fs/namei.c:3428 [inline]
 path_openat+0x628/0x2970 fs/namei.c:3569
 do_filp_open+0x179/0x3c0 fs/namei.c:3603
 do_sys_open+0x296/0x410 fs/open.c:1081
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f6882109004
RSP: 002b:00007ffd36b2e0b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ffd36b2e1b0 RCX: 00007f6882109004
RDX: 0000000000000002 RSI: 00007ffd36b2e1f0 RDI: 00000000ffffff9c
RBP: 00007ffd36b2e1f0 R08: 0000000000000000 R09: 00007ffd36b2dfc0
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
R13: 000000000002600f R14: 0000000000000003 R15: 00007ffd36b2e1f0
INFO: task syz-executor.4:8001 blocked for more than 140 seconds.
      Not tainted 4.14.280-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.4  D25840  8001      1 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2811 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3387
 schedule+0x8d/0x1b0 kernel/sched/core.c:3431
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3489
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 __blkdev_get+0x191/0x1090 fs/block_dev.c:1455
 blkdev_get+0x88/0x890 fs/block_dev.c:1611
 blkdev_open+0x1cc/0x250 fs/block_dev.c:1772
 do_dentry_open+0x44b/0xec0 fs/open.c:777
 vfs_open+0x105/0x220 fs/open.c:888
 do_last fs/namei.c:3428 [inline]
 path_openat+0x628/0x2970 fs/namei.c:3569
 do_filp_open+0x179/0x3c0 fs/namei.c:3603
 do_sys_open+0x296/0x410 fs/open.c:1081
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fdcac1d7004
RSP: 002b:00007fff36379560 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fff36379660 RCX: 00007fdcac1d7004
RDX: 0000000000000002 RSI: 00007fff363796a0 RDI: 00000000ffffff9c
RBP: 00007fff363796a0 R08: 0000000000000000 R09: 00007fff36379470
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
R13: 0000000000025fa6 R14: 0000000000000012 R15: 00007fff363796a0
INFO: task systemd-udevd:9557 blocked for more than 140 seconds.
      Not tainted 4.14.280-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
systemd-udevd   D28712  9557   4628 0x00000300
Call Trace:
 context_switch kernel/sched/core.c:2811 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3387
 schedule+0x8d/0x1b0 kernel/sched/core.c:3431
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3489
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 __blkdev_get+0x191/0x1090 fs/block_dev.c:1455
 blkdev_get+0x88/0x890 fs/block_dev.c:1611
 blkdev_open+0x1cc/0x250 fs/block_dev.c:1772
 do_dentry_open+0x44b/0xec0 fs/open.c:777
 vfs_open+0x105/0x220 fs/open.c:888
 do_last fs/namei.c:3428 [inline]
 path_openat+0x628/0x2970 fs/namei.c:3569
 do_filp_open+0x179/0x3c0 fs/namei.c:3603
 do_sys_open+0x296/0x410 fs/open.c:1081
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fd39a62d840
RSP: 002b:00007ffe50cb4b48 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 0000564c2799df50 RCX: 00007fd39a62d840
RDX: 0000564c25c9ffe3 RSI: 00000000000a0800 RDI: 0000564c2798b990
RBP: 00007ffe50cb4cc0 R08: 0000564c25c9f670 R09: 0000000000000010
R10: 0000564c25c9fd0c R11: 0000000000000246 R12: 00007ffe50cb4c10
R13: 0000564c2799c880 R14: 0000000000000003 R15: 000000000000000e
INFO: task systemd-udevd:9570 blocked for more than 140 seconds.
      Not tainted 4.14.280-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
systemd-udevd   D28712  9570   4628 0x00000300
Call Trace:
 context_switch kernel/sched/core.c:2811 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3387
 schedule+0x8d/0x1b0 kernel/sched/core.c:3431
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3489
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 lo_open+0x19/0xb0 drivers/block/loop.c:1634
 __blkdev_get+0x306/0x1090 fs/block_dev.c:1470
 blkdev_get+0x88/0x890 fs/block_dev.c:1611
 blkdev_open+0x1cc/0x250 fs/block_dev.c:1772
 do_dentry_open+0x44b/0xec0 fs/open.c:777
 vfs_open+0x105/0x220 fs/open.c:888
 do_last fs/namei.c:3428 [inline]
 path_openat+0x628/0x2970 fs/namei.c:3569
 do_filp_open+0x179/0x3c0 fs/namei.c:3603
 do_sys_open+0x296/0x410 fs/open.c:1081
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fd39a62d840
RSP: 002b:00007ffe50cb4b48 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 0000564c2799ddf0 RCX: 00007fd39a62d840
RDX: 0000564c25c9ffe3 RSI: 00000000000a0800 RDI: 0000564c279a1830
RBP: 00007ffe50cb4cc0 R08: 0000564c25c9f670 R09: 0000000000000010
R10: 0000564c25c9fd0c R11: 0000000000000246 R12: 00007ffe50cb4c10
R13: 0000564c2799c880 R14: 0000000000000003 R15: 000000000000000e
INFO: task syz-executor.2:9580 blocked for more than 140 seconds.
      Not tainted 4.14.280-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.2  D30016  9580   8003 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2811 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3387
 schedule+0x8d/0x1b0 kernel/sched/core.c:3431
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3489
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 loop_control_ioctl+0x181/0x3f0 drivers/block/loop.c:2007
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fd9ff0140e9
RSP: 002b:00007fd9fd989168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fd9ff126f60 RCX: 00007fd9ff0140e9
RDX: 0000000000000001 RSI: 0000000000004c81 RDI: 0000000000000003
RBP: 00007fd9ff06e08d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd1ef2d7af R14: 00007fd9fd989300 R15: 0000000000022000
INFO: task syz-executor.1:9581 blocked for more than 140 seconds.
      Not tainted 4.14.280-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.1  D29184  9581   8002 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2811 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3387
 schedule+0x8d/0x1b0 kernel/sched/core.c:3431
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3489
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 blkdev_reread_part+0x1b/0x40 block/ioctl.c:192
 loop_reread_partitions drivers/block/loop.c:624 [inline]
 loop_set_status+0xeeb/0x12b0 drivers/block/loop.c:1193
 loop_set_status64+0x92/0xe0 drivers/block/loop.c:1311
 lo_ioctl+0x587/0x1cd0 drivers/block/loop.c:1441
 __blkdev_driver_ioctl block/ioctl.c:297 [inline]
 blkdev_ioctl+0x540/0x1830 block/ioctl.c:594
 block_ioctl+0xd9/0x120 fs/block_dev.c:1893
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5a6741cea7
RSP: 002b:00007f5a65d91ed8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f5a65d91f20 RCX: 00007f5a6741cea7
RDX: 00007f5a65d92030 RSI: 0000000000004c04 RDI: 0000000000000004
RBP: 00007f5a6747708d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 00007f5a65d92030
R13: 00007ffe562683df R14: 00007f5a65d92300 R15: 0000000000022000
INFO: task syz-executor.5:9582 blocked for more than 140 seconds.
      Not tainted 4.14.280-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.5  D29456  9582   7999 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2811 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3387
 schedule+0x8d/0x1b0 kernel/sched/core.c:3431
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3489
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 lo_open+0x19/0xb0 drivers/block/loop.c:1634
 __blkdev_get+0x306/0x1090 fs/block_dev.c:1470
 blkdev_get+0x88/0x890 fs/block_dev.c:1611
 blkdev_open+0x1cc/0x250 fs/block_dev.c:1772
 do_dentry_open+0x44b/0xec0 fs/open.c:777
 vfs_open+0x105/0x220 fs/open.c:888
 do_last fs/namei.c:3428 [inline]
 path_openat+0x628/0x2970 fs/namei.c:3569
 do_filp_open+0x179/0x3c0 fs/namei.c:3603
 do_sys_open+0x296/0x410 fs/open.c:1081
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5f82422004
RSP: 002b:00007f5f80de3eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f5f824b8a20 RCX: 00007f5f82422004
RDX: 0000000000000002 RSI: 00007f5f80de3fe0 RDI: 00000000ffffff9c
RBP: 00007f5f80de3fe0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
R13: 0000000000000003 R14: 0000000020000380 R15: 0000000000000000
INFO: task systemd-udevd:9586 blocked for more than 140 seconds.
      Not tainted 4.14.280-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
systemd-udevd   D28568  9586   4628 0x00000300
Call Trace:
 context_switch kernel/sched/core.c:2811 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3387
 schedule+0x8d/0x1b0 kernel/sched/core.c:3431
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3489
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 __blkdev_get+0x191/0x1090 fs/block_dev.c:1455
 blkdev_get+0x88/0x890 fs/block_dev.c:1611
 blkdev_open+0x1cc/0x250 fs/block_dev.c:1772
 do_dentry_open+0x44b/0xec0 fs/open.c:777
 vfs_open+0x105/0x220 fs/open.c:888
 do_last fs/namei.c:3428 [inline]
 path_openat+0x628/0x2970 fs/namei.c:3569
 do_filp_open+0x179/0x3c0 fs/namei.c:3603
 do_sys_open+0x296/0x410 fs/open.c:1081
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fd39a62d840
RSP: 002b:00007ffe50cb4b48 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 0000564c2799ddf0 RCX: 00007fd39a62d840
RDX: 0000564c25c9ffe3 RSI: 00000000000a0800 RDI: 0000564c2798f160
RBP: 00007ffe50cb4cc0 R08: 0000564c25c9f670 R09: 0000000000000010
R10: 0000564c25c9fd0c R11: 0000000000000246 R12: 00007ffe50cb4c10
R13: 0000564c2798f040 R14: 0000000000000003 R15: 000000000000000e
INFO: task syz-executor.0:9590 blocked for more than 140 seconds.
      Not tainted 4.14.280-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.0  D29248  9590   7998 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2811 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3387
 schedule+0x8d/0x1b0 kernel/sched/core.c:3431
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3489
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 lo_open+0x19/0xb0 drivers/block/loop.c:1634
 __blkdev_get+0x306/0x1090 fs/block_dev.c:1470
 blkdev_get+0x88/0x890 fs/block_dev.c:1611
 blkdev_open+0x1cc/0x250 fs/block_dev.c:1772
 do_dentry_open+0x44b/0xec0 fs/open.c:777
 vfs_open+0x105/0x220 fs/open.c:888
 do_last fs/namei.c:3428 [inline]
 path_openat+0x628/0x2970 fs/namei.c:3569
 do_filp_open+0x179/0x3c0 fs/namei.c:3603
 do_sys_open+0x296/0x410 fs/open.c:1081
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7efd96474004
RSP: 002b:00007efd94e35e00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007efd9650aa20 RCX: 00007efd96474004
RDX: 0000000000000002 RSI: 00007efd94e35f20 RDI: 00000000ffffff9c
RBP: 00007efd94e35f20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
R13: 0000000000000003 R14: 0000000020000718 R15: 0000000000000001

Showing all locks held in the system:
1 lock held by khungtaskd/1528:
 #0:  (tasklist_lock){.+.+}, at: [<ffffffff87026b2c>] debug_show_all_locks+0x7c/0x21a kernel/locking/lockdep.c:4548
2 locks held by systemd-udevd/4628:
 #0:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff819416c1>] __blkdev_get+0x191/0x1090 fs/block_dev.c:1455
 #1:  (loop_index_mutex){+.+.}, at: [<ffffffff838d5079>] lo_open+0x19/0xb0 drivers/block/loop.c:1634
1 lock held by in:imklog/7626:
 #0:  (&f->f_pos_lock){+.+.}, at: [<ffffffff818d6c6b>] __fdget_pos+0x1fb/0x2b0 fs/file.c:819
2 locks held by syz-executor.3/8000:
 #0:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff819416c1>] __blkdev_get+0x191/0x1090 fs/block_dev.c:1455
 #1:  (loop_index_mutex){+.+.}, at: [<ffffffff838d5079>] lo_open+0x19/0xb0 drivers/block/loop.c:1634
1 lock held by syz-executor.4/8001:
 #0:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff819416c1>] __blkdev_get+0x191/0x1090 fs/block_dev.c:1455
1 lock held by systemd-udevd/9557:
 #0:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff819416c1>] __blkdev_get+0x191/0x1090 fs/block_dev.c:1455
2 locks held by systemd-udevd/9570:
 #0:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff819416c1>] __blkdev_get+0x191/0x1090 fs/block_dev.c:1455
 #1:  (loop_index_mutex){+.+.}, at: [<ffffffff838d5079>] lo_open+0x19/0xb0 drivers/block/loop.c:1634
2 locks held by syz-executor.2/9580:
 #0:  (loop_index_mutex){+.+.}, at: [<ffffffff838db7d7>] loop_control_ioctl+0x67/0x3f0 drivers/block/loop.c:1993
 #1:  (&lo->lo_ctl_mutex){+.+.}, at: [<ffffffff838db8f1>] loop_control_ioctl+0x181/0x3f0 drivers/block/loop.c:2007
2 locks held by syz-executor.1/9581:
 #0:  (&lo->lo_ctl_mutex/1){+.+.}, at: [<ffffffff838de727>] lo_ioctl+0x87/0x1cd0 drivers/block/loop.c:1414
 #1:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff830bc56b>] blkdev_reread_part+0x1b/0x40 block/ioctl.c:192
2 locks held by syz-executor.5/9582:
 #0:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff819416c1>] __blkdev_get+0x191/0x1090 fs/block_dev.c:1455
 #1:  (loop_index_mutex){+.+.}, at: [<ffffffff838d5079>] lo_open+0x19/0xb0 drivers/block/loop.c:1634
1 lock held by systemd-udevd/9586:
 #0:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff819416c1>] __blkdev_get+0x191/0x1090 fs/block_dev.c:1455
2 locks held by syz-executor.0/9590:
 #0:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff819416c1>] __blkdev_get+0x191/0x1090 fs/block_dev.c:1455
 #1:  (loop_index_mutex){+.+.}, at: [<ffffffff838d5079>] lo_open+0x19/0xb0 drivers/block/loop.c:1634

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 1528 Comm: khungtaskd Not tainted 4.14.280-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 nmi_cpu_backtrace.cold+0x57/0x93 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x13a/0x180 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:140 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:195 [inline]
 watchdog+0x5b9/0xb40 kernel/hung_task.c:274
 kthread+0x30d/0x420 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 47 Comm: kworker/u4:3 Not tainted 4.14.280-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: bat_events batadv_nc_worker
task: ffff8880b575e540 task.stack: ffff8880b5770000
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:779 [inline]
RIP: 0010:lock_release+0x412/0x870 kernel/locking/lockdep.c:4020
RSP: 0018:ffff8880b5777c48 EFLAGS: 00000086
RAX: 1ffffffff11e1311 RBX: 1ffff11016aeef8c RCX: 1ffff11016aebdc3
RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8880b575edc4
RBP: ffff8880b575e540 R08: 0000000000000000 R09: 0000000000000002
R10: 0000000000000000 R11: ffff8880b575e540 R12: 9e6c8576b0ae2bba
R13: 0000000000000003 R14: ffff8880b575e540 R15: 0000000000000003
FS:  0000000000000000(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f14b3408000 CR3: 00000000a153f000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 rcu_lock_release include/linux/rcupdate.h:247 [inline]
 rcu_read_unlock include/linux/rcupdate.h:685 [inline]
 batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:422 [inline]
 batadv_nc_worker+0x5a7/0xc50 net/batman-adv/network-coding.c:728
 process_one_work+0x793/0x14a0 kernel/workqueue.c:2117
 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2251
 kthread+0x30d/0x420 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Code: 88 48 ba 00 00 00 00 00 fc ff df c7 85 84 08 00 00 00 00 00 00 48 c1 e8 03 80 3c 10 00 0f 85 88 03 00 00 48 83 3d 96 c6 ae 07 00 <0f> 84 ba 01 00 00 48 8b 3c 24 57 9d 0f 1f 44 00 00 48 b8 00 00 
----------------
Code disassembly (best guess), 1 bytes skipped:
   0:	48 ba 00 00 00 00 00 	movabs $0xdffffc0000000000,%rdx
   7:	fc ff df
   a:	c7 85 84 08 00 00 00 	movl   $0x0,0x884(%rbp)
  11:	00 00 00
  14:	48 c1 e8 03          	shr    $0x3,%rax
  18:	80 3c 10 00          	cmpb   $0x0,(%rax,%rdx,1)
  1c:	0f 85 88 03 00 00    	jne    0x3aa
  22:	48 83 3d 96 c6 ae 07 	cmpq   $0x0,0x7aec696(%rip)        # 0x7aec6c0
  29:	00
* 2a:	0f 84 ba 01 00 00    	je     0x1ea <-- trapping instruction
  30:	48 8b 3c 24          	mov    (%rsp),%rdi
  34:	57                   	push   %rdi
  35:	9d                   	popfq
  36:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  3b:	48                   	rex.W
  3c:	b8                   	.byte 0xb8