Bluetooth: hci3: Opcode 0x0c1a failed: -110
Bluetooth: hci3: Error when powering off device on rfkill (-110)
------------[ cut here ]------------
!chanctx_conf
WARNING: net/mac80211/tx.c:6509 at ieee80211_tx_skb_tid+0x3b8/0x480 net/mac80211/tx.c:6509, CPU#1: kworker/1:1/31816
Modules linked in:
CPU: 1 UID: 0 PID: 31816 Comm: kworker/1:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
Workqueue: events rfkill_op_handler
RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480 net/mac80211/tx.c:6509
Code: 55 43 f6 e9 b1 fe ff ff e8 35 aa 67 f6 90 0f 0b 90 e9 e2 fe ff ff e8 27 aa 67 f6 90 0f 0b 90 e9 2a fe ff ff e8 19 aa 67 f6 90 <0f> 0b 90 e8 10 b2 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4
RSP: 0000:ffffc90003a0f1f8 EFLAGS: 00010293
RAX: ffffffff8b602077 RBX: ffffffff8b601cef RCX: ffff88807fc63e80
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 00000000ffffffff R08: ffffffff8b601cef R09: 0000000000000000
R10: dffffc0000000000 R11: ffffed100992bae6 R12: ffff888078d84ec0
R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff888124dd2000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000080231000 CR3: 0000000079eca000 CR4: 00000000003526f0
DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ieee80211_tx_skb net/mac80211/ieee80211_i.h:2497 [inline]
 mesh_plink_frame_tx+0x73d/0xc30 net/mac80211/mesh_plink.c:352
 mesh_plink_deactivate+0x18b/0x2f0 net/mac80211/mesh_plink.c:408
 mesh_sta_cleanup+0x42/0x150 net/mac80211/mesh.c:173
 __cleanup_single_sta net/mac80211/sta_info.c:167 [inline]
 cleanup_single_sta+0x3ff/0x660 net/mac80211/sta_info.c:192
 __sta_info_flush+0x5bb/0x700 net/mac80211/sta_info.c:1744
 sta_info_flush net/mac80211/sta_info.h:984 [inline]
 ieee80211_do_stop+0x3cd/0x2410 net/mac80211/iface.c:535
 ieee80211_stop+0x1ab/0x200 net/mac80211/iface.c:868
 __dev_close_many+0x366/0x6e0 net/core/dev.c:1798
 netif_close_many+0x249/0x660 net/core/dev.c:1824
 netif_close+0x160/0x220 net/core/dev.c:1842
 dev_close+0xf7/0x210 net/core/dev_api.c:221
 cfg80211_shutdown_all_interfaces+0xb0/0x220 net/wireless/core.c:363
 cfg80211_rfkill_set_block+0x2d/0x50 net/wireless/core.c:396
 rfkill_set_block+0x19f/0x4d0 net/rfkill/core.c:360
 rfkill_epo+0x7e/0x180 net/rfkill/core.c:480
 __rfkill_handle_global_op net/rfkill/input.c:60 [inline]
 rfkill_op_handler+0x84/0x240 net/rfkill/input.c:108
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>