INFO: task syz.4.1432:11977 blocked for more than 150 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.1432      state:D stack:28832 pid:11977 tgid:11975 ppid:10647  task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 __schedule+0x15dd/0x52d0
 schedule+0x164/0x360
 schedule_preempt_disabled+0x13/0x30
 __mutex_lock+0x7fe/0x1300
 perf_trace_init+0x50/0x2d0
 perf_tp_event_init+0x8d/0x120
 perf_try_init_event+0x17f/0x870
 perf_event_alloc+0x1444/0x2e30
 __se_sys_perf_event_open+0x7a9/0x1d60
 do_syscall_64+0x14d/0xf80
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa92879c799
RSP: 002b:00007fa9269d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
RAX: ffffffffffffffda RBX: 00007fa928a16090 RCX: 00007fa92879c799
RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000180
RBP: 00007fa928832c99 R08: 000000000000000a R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
R13: 00007fa928a16128 R14: 00007fa928a16090 R15: 00007ffe778457f8
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/34:
 #0: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
5 locks held by kworker/u11:0/55:
 #0: ffff8881719b9148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
 #1: ffffc90000bf7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
 #2: ffff8881a9888ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
 #3: ffff8881a98880c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190
 #4: ffffffff8fd59668 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340
3 locks held by kworker/1:2/931:
 #0: ffff88810006b148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
 #1: ffffc90005957c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
 #2: ffffffff8fbccdc8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
5 locks held by kworker/u11:1/5197:
 #0: ffff8881aec11948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
 #1: ffffc90005dcfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
 #2: ffff8881b47e0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
 #3: ffff8881b47e00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190
 #4: ffffffff8fd59668 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340
2 locks held by getty/5629:
 #0: ffff8881732af0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
 #1: ffffc9000356b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
7 locks held by kworker/u11:2/5818:
 #0: ffff88811482c148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
 #1: ffffc900066bfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
 #2: ffff888111bf0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
 #3: ffff888111bf00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190
 #4: ffffffff8fd59668 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340
 #5: ffff88811482a2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5c0
 #6: ffffffff8e764678 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
4 locks held by kworker/u11:4/5825:
 #0: ffff8881b0fd2948 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
 #1: ffffc9000670fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
 #2: ffff8881722540c0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950
 #3: ffffffff8fd59668 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950
3 locks held by kworker/u8:3/5846:
 #0: ffff8881123f6948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
 #1: ffffc9000682fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
 #2: ffffffff8fbccdc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0
3 locks held by kworker/0:5/6226:
 #0: ffff888100069d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
 #1: ffffc900036e7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
 #2: ffffffff8fbccdc8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa5/0xfe0
3 locks held by kworker/u10:10/8374:
 #0: ffff8881000ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
 #1: ffffc90003ee7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
 #2: ffffffff8fbccdc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
3 locks held by kworker/0:10/9032:
 #0: ffff888100069d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
 #1: ffffc90003217c40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
 #2: ffffffff8fbccdc8 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x80
4 locks held by kworker/1:11/9213:
 #0: ffff888100692d48 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
 #1: ffffc9000725fc40 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
 #2: ffffffff8e7bd3f8 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x6e/0x1220
 #3: ffffffff8e764678 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
1 lock held by syz.2.1420/11939:
 #0: ffffffff8e7ce888 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
5 locks held by syz.8.1430/11969:
3 locks held by syz.4.1432/11977:
 #0: ffffffff9a2c9ad8 (&pmus_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x2c/0x60
 #1: ffffffff9a2c9ad8 (&pmus_srcu){.+.+}-{0:0}, at: perf_event_alloc+0x1057/0x2e30
 #2: ffffffff8e7ce888 (event_mutex){+.+.}-{4:4}, at: perf_trace_init+0x50/0x2d0
1 lock held by syz-executor/11980:
 #0: ffffffff8fbccdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
1 lock held by syz-executor/11997:
 #0: ffffffff8fbccdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
1 lock held by syz-executor/12000:
 #0: ffffffff8fbccdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
1 lock held by syz-executor/12004:
 #0: ffffffff8fbccdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
1 lock held by syz-executor/12010:
 #0: ffffffff8fbccdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
1 lock held by syz-executor/12012:
 #0: ffffffff8fbccdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
5 locks held by kworker/u11:3/12013:
 #0: ffff8881622e6948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
 #1: ffffc900077cfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
 #2: ffff88816a3a0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
 #3: ffff88816a3a00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190
 #4: ffffffff8fd59668 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340
1 lock held by dhcpcd/12018:
 #0: ffff88817253c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10
1 lock held by dhcpcd/12019:
 #0: ffff88816a7e0260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10
1 lock held by dhcpcd/12020:
 #0: ffff8881abdc6260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10
1 lock held by dhcpcd/12021:
 #0: ffff88816c152260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10
1 lock held by dhcpcd/12022:
 #0: ffff8881724e2260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10
1 lock held by dhcpcd/12023:
 #0: ffff8881a6a3a260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10
1 lock held by syz-executor/12025:
 #0: ffffffff8fbccdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
4 locks held by kworker/u11:6/12029:
 #0: ffff8881b520f148 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
 #1: ffffc900079d7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
 #2: ffff88816d5d80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950
 #3: ffffffff8fd59668 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950
1 lock held by syz-executor/12031:
 #0: ffffffff8fbccdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
1 lock held by syz-executor/12034:
 #0: ffffffff8fbccdc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
4 locks held by kworker/u11:8/12036:
 #0: ffff8881b08ef148 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
 #1: ffffc900073a7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
 #2: ffff88816d5dc0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950
 #3: ffffffff8fd59668 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150
 nmi_cpu_backtrace+0x274/0x2d0
 nmi_trigger_cpumask_backtrace+0x17a/0x300
 sys_info+0x135/0x170
 watchdog+0xfd9/0x1030
 kthread+0x388/0x470
 ret_from_fork+0x51e/0xb90
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 12036 Comm: kworker/u11:8 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: hci11 hci_cmd_timeout
RIP: 0010:__lock_acquire+0xcec/0x2cf0
Code: 45 8b b6 50 0b 00 00 45 29 ee b8 03 ff ff ff 23 02 41 ff c6 41 83 e6 3f 42 8d 04 b0 89 02 e8 9b 2d 00 00 44 39 35 ec 10 82 14 <73> 6a e8 0d 9c 09 03 41 89 c7 e8 d5 d5 ff ff 45 85 ff 4c 8b 74 24
RSP: 0018:ffffc900073a7450 EFLAGS: 00000012
RAX: 0000000000000014 RBX: ffffffffffffffff RCX: 0000000000080be2
RDX: ffffffff94417c70 RSI: 0000000000100000 RDI: ffffffff93dda410
RBP: 7db53263160ce850 R08: ffffffff81a4ac3f R09: ffffffff8e750778
R10: dffffc0000000000 R11: fffffbfff1cbd60c R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000005 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8882a9463000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4e7cea3ae0 CR3: 000000016cce0000 CR4: 00000000000006f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 lock_acquire+0xf0/0x2e0
 _raw_spin_lock+0x2e/0x40
 console_flush_all+0x67f/0xb20
 console_unlock+0xd1/0x1c0
 vprintk_emit+0x485/0x560
 _printk+0xdd/0x130
 bt_err+0x121/0x180
 hci_cmd_timeout+0xff/0x1e0
 process_scheduled_works+0xb02/0x1830
 worker_thread+0xa50/0xfc0
 kthread+0x388/0x470
 ret_from_fork+0x51e/0xb90
 ret_from_fork_asm+0x1a/0x30
 </TASK>
