Bluetooth: hci6: command 0x0409 tx timeout
Bluetooth: hci6: command 0x041b tx timeout
Bluetooth: hci6: command 0x040f tx timeout
Bluetooth: hci6: command 0x0419 tx timeout
Bluetooth: hci6: command 0x0406 tx timeout
INFO: task kworker/u5:5:319 blocked for more than 143 seconds.
      Not tainted 5.18.0-rc2-next-20220414 #1
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u5:5    state:D stack:28120 pid:  319 ppid:     2 flags:0x00004000
Workqueue: hci6 scan_update_work
Call Trace:
 <TASK>
 __schedule+0x88d/0x2450
 schedule+0xd2/0x1f0
 schedule_preempt_disabled+0xf/0x20
 __mutex_lock+0xbaf/0x14c0
 scan_update_work+0x2d/0xb0
 process_one_work+0xa1c/0x16a0
 worker_thread+0x637/0x1250
 kthread+0x2f2/0x3b0
 ret_from_fork+0x22/0x30
 </TASK>
INFO: task systemd-rfkill:15071 blocked for more than 143 seconds.
      Not tainted 5.18.0-rc2-next-20220414 #1
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:systemd-rfkill  state:D stack:26248 pid:15071 ppid:     1 flags:0x00004000
Call Trace:
 <TASK>
 __schedule+0x88d/0x2450
 schedule+0xd2/0x1f0
 schedule_timeout+0x1c5/0x280
 __wait_for_common+0x36f/0x4b0
 __flush_work+0x53f/0xae0
 __cancel_work_timer+0x398/0x4d0
 hci_request_cancel_all+0x38/0x150
 hci_dev_close_sync+0x96/0xf20
 hci_rfkill_set_block+0x16f/0x1b0
 rfkill_set_block+0x1fd/0x540
 rfkill_fop_write+0x46f/0x530
 vfs_write+0x264/0xac0
 ksys_write+0x1e8/0x250
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f5fb3078f33
RSP: 002b:00007ffcfdc96968 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007ffcfdc96990 RCX: 00007f5fb3078f33
RDX: 0000000000000008 RSI: 00007ffcfdc96998 RDI: 0000000000000003
RBP: 00005591c8340c20 R08: 0000000000000000 R09: 00000000ffffffff
R10: 0000000000000008 R11: 0000000000000246 R12: 00007ffcfdc96998
R13: 0000000000000001 R14: 0000000000000001 R15: 00005591c833f072
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/24:
 #0: ffffffff85203400 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260
1 lock held by in:imklog/195:
3 locks held by kworker/u5:5/319:
 #0: ffff888010068938 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0
 #1: ffff888041befdb0 ((work_completion)(&hdev->scan_update)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0
 #2: ffff888042cbd048 (&hdev->req_lock){+.+.}-{3:3}, at: scan_update_work+0x2d/0xb0
2 locks held by systemd-rfkill/15071:
 #0: ffffffff85882388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x15d/0x530
 #1: ffff888042cbd048 (&hdev->req_lock){+.+.}-{3:3}, at: hci_rfkill_set_block+0x167/0x1b0
2 locks held by syz-executor.5/15100:
 #0: ffffffff854a8b68 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x55/0x4a0
 #1: ffffffff85882388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x139/0x700

=============================================