Bluetooth: hci6: command 0x0409 tx timeout
Bluetooth: hci6: command 0x041b tx timeout
Bluetooth: hci6: command 0x040f tx timeout
Bluetooth: hci6: command 0x0419 tx timeout
Bluetooth: hci6: command 0x0406 tx timeout
INFO: task kworker/u5:6:320 blocked for more than 143 seconds.
      Not tainted 5.18.0-rc1-next-20220408 #1
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u5:6    state:D stack:27480 pid:  320 ppid:     2 flags:0x00004000
Workqueue: hci6 scan_update_work
Call Trace:
 <TASK>
 __schedule+0x88d/0x2450
 schedule+0xd2/0x1f0
 schedule_preempt_disabled+0xf/0x20
 __mutex_lock+0xbaf/0x14c0
 scan_update_work+0x2d/0xb0
 process_one_work+0xa1c/0x16a0
 worker_thread+0x637/0x1250
 kthread+0x2f2/0x3b0
 ret_from_fork+0x22/0x30
 </TASK>
INFO: task systemd-rfkill:38136 blocked for more than 143 seconds.
      Not tainted 5.18.0-rc1-next-20220408 #1
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:systemd-rfkill  state:D stack:26248 pid:38136 ppid:     1 flags:0x00004000
Call Trace:
 <TASK>
 __schedule+0x88d/0x2450
 schedule+0xd2/0x1f0
 schedule_timeout+0x1c5/0x280
 __wait_for_common+0x36f/0x4b0
 __flush_work+0x53f/0xae0
 __cancel_work_timer+0x398/0x4d0
 hci_request_cancel_all+0x38/0x150
 hci_dev_close_sync+0x96/0xf20
 hci_rfkill_set_block+0x16f/0x1b0
 rfkill_set_block+0x1fd/0x540
 rfkill_fop_write+0x46f/0x530
 vfs_write+0x264/0xac0
 ksys_write+0x1e8/0x250
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f5b9d4ddf33
RSP: 002b:00007fff969f2408 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007fff969f2430 RCX: 00007f5b9d4ddf33
RDX: 0000000000000008 RSI: 00007fff969f2438 RDI: 0000000000000003
RBP: 000055f4e367cc20 R08: 0000000000000000 R09: 00000000ffffffff
R10: 0000000000000004 R11: 0000000000000246 R12: 00007fff969f2438
R13: 0000000000000001 R14: 0000000000000001 R15: 000055f4e367b072
 </TASK>
INFO: task syz-executor.4:38138 blocked for more than 143 seconds.
      Not tainted 5.18.0-rc1-next-20220408 #1
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.4  state:D stack:24160 pid:38138 ppid:     1 flags:0x00000004
Call Trace:
 <TASK>
 __schedule+0x88d/0x2450
 schedule+0xd2/0x1f0
 schedule_preempt_disabled+0xf/0x20
 __mutex_lock+0xbaf/0x14c0
 rfkill_fop_open+0x139/0x700
 misc_open+0x375/0x4a0
 chrdev_open+0x268/0x6d0
 do_dentry_open+0x49f/0x10b0
 path_openat+0x1a11/0x2870
 do_filp_open+0x1aa/0x400
 do_sys_openat2+0x16d/0x4c0
 __x64_sys_openat+0x13f/0x1f0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f4291deea04
RSP: 002b:00007ffeb6fb7440 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ffeb6fb7b88 RCX: 00007f4291deea04
RDX: 0000000000000002 RSI: 00007f4291e9526f RDI: 00000000ffffff9c
RBP: 00007f4291e9526f R08: 0000000000000000 R09: 00007ffeb6fb6be0
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
R13: 00007ffeb6fb7620 R14: 0000000000000000 R15: 00000000000000f8
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/24:
 #0: ffffffff85203380 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260
2 locks held by in:imklog/188:
3 locks held by kworker/u5:6/320:
 #0: ffff888021976938 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0
 #1: ffff8880219f7db0 ((work_completion)(&hdev->scan_update)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0
 #2: ffff888043a8d048 (&hdev->req_lock){+.+.}-{3:3}, at: scan_update_work+0x2d/0xb0
2 locks held by systemd-rfkill/38136:
 #0: ffffffff858816c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x15d/0x530
 #1: ffff888043a8d048 (&hdev->req_lock){+.+.}-{3:3}, at: hci_rfkill_set_block+0x167/0x1b0
2 locks held by syz-executor.4/38138:
 #0: ffffffff854a8c48 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x55/0x4a0
 #1: ffffffff858816c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x139/0x700

=============================================