INFO: task syz-executor.5:14864 blocked for more than 140 seconds.
      Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.5  D27184 14864   8144 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 schedule_timeout+0x92d/0xfe0 kernel/time/timer.c:1794
 do_wait_for_common kernel/sched/completion.c:83 [inline]
 __wait_for_common kernel/sched/completion.c:104 [inline]
 wait_for_common+0x29c/0x470 kernel/sched/completion.c:115
 usb_start_wait_urb+0x14b/0x4c0 drivers/usb/core/message.c:62
 usb_bulk_msg+0x226/0x550 drivers/usb/core/message.c:253
 proc_bulk+0x3de/0x860 drivers/usb/core/devio.c:1211
 usbdev_do_ioctl+0x696/0x3030 drivers/usb/core/devio.c:2435
 usbdev_ioctl+0x21/0x30 drivers/usb/core/devio.c:2585
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:501 [inline]
 do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
 __do_sys_ioctl fs/ioctl.c:712 [inline]
 __se_sys_ioctl fs/ioctl.c:710 [inline]
 __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7ff0fee320c9
Code: Bad RIP value.
RSP: 002b:00007ff0fd3a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ff0fef51f80 RCX: 00007ff0fee320c9
RDX: 0000000020000180 RSI: 00000000c0185502 RDI: 0000000000000003
RBP: 00007ff0fee8dae9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffca92b222f R14: 00007ff0fd3a4300 R15: 0000000000022000

Showing all locks held in the system:
1 lock held by khungtaskd/1571:
 #0: 00000000a3227664 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 kernel/locking/lockdep.c:4441
1 lock held by khugepaged/1578:
1 lock held by in:imklog/7764:
 #0: 000000002547ad9f (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 fs/file.c:767

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 1571 Comm: khungtaskd Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x1a6/0x1f0 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline]
 watchdog+0x991/0xe60 kernel/hung_task.c:287
 kthread+0x33f/0x460 kernel/kthread.c:259
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 9387 Comm: kworker/u4:7 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
Workqueue: bat_events batadv_nc_worker
RIP: 0010:preempt_count_sub+0x63/0x150 kernel/sched/core.c:3274
Code: 75 18 65 8b 05 3e 72 c0 7e 25 ff ff ff 7f 39 c3 7f 1a 81 fb fe 00 00 00 76 6a 65 8b 05 26 72 c0 7e f7 db 65 01 1d 1d 72 c0 7e <5b> c3 e8 b6 e4 31 02 85 c0 74 f5 48 c7 c0 40 f7 36 8d 48 ba 00 00
RSP: 0018:ffff88804b397c10 EFLAGS: 00000083
RAX: 0000000080000201 RBX: 00000000fffffe00 RCX: 0000000000000000
RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000200
RBP: ffffffff87d8bc2d R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000005 R11: 0000000000000000 R12: ffff88804b38e040
R13: ffffffff87d8d930 R14: 000000000000000c R15: ffff88809804e880
FS:  0000000000000000(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f77d50a0018 CR3: 00000000a1274000 CR4: 00000000003406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __local_bh_enable_ip+0x138/0x270 kernel/softirq.c:182
 spin_unlock_bh include/linux/spinlock.h:374 [inline]
 batadv_nc_purge_paths+0x22d/0x310 net/batman-adv/network-coding.c:482
 batadv_nc_worker+0x731/0xd50 net/batman-adv/network-coding.c:733
 process_one_work+0x864/0x1570 kernel/workqueue.c:2153
 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296
 kthread+0x33f/0x460 kernel/kthread.c:259
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415