Bluetooth: hci2: command 0x0406 tx timeout
Bluetooth: hci4: command 0x0406 tx timeout
Bluetooth: hci0: command 0x0406 tx timeout
Bluetooth: hci7: command 0x0406 tx timeout
Bluetooth: hci3: command 0x0406 tx timeout
INFO: task syz-executor.1:3929 blocked for more than 143 seconds.
      Tainted: G        W           6.17.0-rc3-next-20250829 #1
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.1  state:D stack:29392 pid:3929  tgid:3926  ppid:284    task_flags:0x400140 flags:0x00004004
Call Trace:
 <TASK>
 __schedule+0xe7e/0x3590
 schedule+0xdb/0x390
 futex_hash_allocate+0xe11/0x1150
 futex_hash_prctl+0x1d5/0x3a0
 __do_sys_prctl+0x114c/0x1d50
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f907ab0fb19
RSP: 002b:00007f9078085188 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
RAX: ffffffffffffffda RBX: 00007f907ac22f60 RCX: 00007f907ab0fb19
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e
RBP: 00007f907ab69f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff2e04c60f R14: 00007f9078085300 R15: 0000000000022000
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/32:
 #0: ffffffff85c1c760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
1 lock held by systemd-journal/97:
1 lock held by in:imklog/173:
 #0: ffff8880168ce638 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a8/0x380

=============================================