Bluetooth: hci1: command 0x0406 tx timeout
Bluetooth: hci2: command 0x0406 tx timeout
Bluetooth: hci3: command 0x0406 tx timeout
Bluetooth: hci6: command 0x0406 tx timeout
Bluetooth: hci5: command 0x0406 tx timeout
INFO: task syz-executor.5:4085 blocked for more than 143 seconds.
      Tainted: G        W           6.17.0-rc3-next-20250829 #1
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.5  state:D stack:29344 pid:4085  tgid:4073  ppid:283    task_flags:0x480040 flags:0x00004004
Call Trace:
 <TASK>
 __schedule+0xe7e/0x3590
 schedule+0xdb/0x390
 blk_mq_freeze_queue_wait+0x11d/0x180
 elevator_change+0x16f/0x580
 elevator_set_none+0xab/0x120
 blk_unregister_queue+0x16b/0x2f0
 __del_gendisk+0x297/0xb70
 del_gendisk+0x142/0x1f0
 loop_control_ioctl+0x459/0x640
 __x64_sys_ioctl+0x18f/0x210
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc5d9fffb19
RSP: 002b:00007fc5d7533188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fc5da1130e0 RCX: 00007fc5d9fffb19
RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004
RBP: 00007fc5da059f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffedad988f R14: 00007fc5d7533300 R15: 0000000000022000
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/32:
 #0: ffffffff85c1c760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
2 locks held by in:imklog/174:
3 locks held by rs:main Q:Reg/175:
1 lock held by syz-executor.5/4085:
 #0: ffff88800a3b8368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0x13a/0x1f0

=============================================