Backtrace

WARNING: CPU: 0 PID: 5765 at drivers/net/wireless/intel/iwlwifi/mvm/sta.c:3012 iwl_mvm_sta_rx_agg+0xa42/0xbd0 [iwlmvm]
Modules linked in: uinput snd_seq_dummy snd_hrtimer rfcomm nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables snd_soc_sof_rt5682 snd_soc_rt5682s snd_soc_intel_sof_realtek_common snd_soc_intel_sof_board_helpers snd_soc_intel_hda_dsp_common snd_soc_intel_sof_maxim_common snd_soc_rt5645 snd_sof_probes snd_soc_dmic snd_hda_codec_hdmi snd_sof_pci_intel_apl uhid snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_sof_intel_hda_mlink intel_telemetry_debugfs snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils intel_telemetry_pltdrv soundwire_generic_allocation bnep soundwire_bus snd_soc_avs intel_punit_ipc iwlmvm snd_soc_hda_codec snd_soc_skl intel_telemetry_core cros_ec_sysfs cros_usbpd_logger snd_soc_hdac_hda cros_ec_chardev qrtr cros_usbpd_charger gpio_cros_ec
 x86_pkg_temp_thermal snd_hda_ext_core intel_powerclamp snd_soc_sst_ipc mac80211 snd_soc_sst_dsp coretemp intel_rapl_msr mei_hdcp kvm_intel mei_pxp libarc4 joydev iwlwifi kvm snd_soc_acpi_intel_match cros_ec_dev snd_soc_rt5682_i2c snd_soc_acpi snd_soc_rt5682 snd_hda_intel snd_soc_max98357a snd_soc_rl6231 snd_intel_dspcfg uvcvideo snd_intel_sdw_acpi uvc snd_hda_codec btusb videobuf2_vmalloc snd_soc_core btrtl btintel cfg80211 videobuf2_memops videobuf2_v4l2 snd_hda_core processor_thermal_device_pci_legacy btbcm videobuf2_common processor_thermal_device btmtk processor_thermal_wt_hint rapl intel_cstate videodev pcspkr processor_thermal_rfim i2c_i801 snd_hwdep snd_compress bluetooth processor_thermal_rapl intel_rapl_common i2c_smbus lpc_ich ac97_bus snd_seq sunrpc snd_pcm_dmaengine snd_seq_device mc processor_thermal_wt_req processor_thermal_power_floor mei_me snd_pcm mei idma64 processor_thermal_mbox intel_soc_dts_iosf snd_timer rfkill snd int3403_thermal int340x_thermal_zone intel_vbtn cros_usbpd_notify
 sparse_keymap elan_i2c soundcore cros_kbd_led_backlight soc_button_array int3400_thermal acpi_thermal_rel binfmt_misc vfat fat cros_ec_lpcs cros_ec loop nfnetlink zram i915 mmc_block crct10dif_pclmul sdhci_pci crc32_pclmul cqhci crc32c_intel sdhci polyval_generic i2c_algo_bit iTCO_wdt drm_buddy ttm uas ghash_clmulni_intel sha512_ssse3 iTCO_vendor_support sha256_ssse3 sha1_ssse3 mmc_core drm_display_helper usb_storage spi_pxa2xx_platform dw_dmac cec video cros_ec_keyb matrix_keymap tpm_tis_spi wmi intel_pmc_bxt pinctrl_geminilake serio_raw ip6_tables ip_tables fuse
CPU: 0 PID: 5765 Comm: kworker/u8:35 Tainted: G        W          6.10.11-200.fc40.x86_64 #1
Hardware name: Google Vorticon/Vorticon, BIOS MrChromebox-2405.0 06/15/2024
Workqueue: events_unbound cfg80211_wiphy_work [cfg80211]
RIP: 0010:iwl_mvm_sta_rx_agg+0xa42/0xbd0 [iwlmvm]
Code: e7 fc ff ff 79 c2 45 31 e4 e9 2b fa ff ff 0f 89 d3 fc ff ff e9 20 fa ff ff 0f 0b 41 b9 ea ff ff ff e9 cb f9 ff ff 0f 0b eb f1 <0f> 0b e9 ec fe ff ff 48 8b 3f 48 c7 c6 ab d8 9a c1 e8 e8 75 cd ff
RSP: 0018:ffffaf3f06503b20 EFLAGS: 00010286
RAX: ffff954304881000 RBX: ffff954320e9a008 RCX: ffffaf3f06503b10
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffaf3f06503ac0
RBP: ffffaf3f06503be0 R08: ffffffffc19a53c0 R09: 0000000000000000
R10: 0000000000000010 R11: 0000000000000100 R12: ffff95430578a000
R13: ffff95430d424a98 R14: 0000000000000040 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff95437bc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000056331147de38 CR3: 0000000023428000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 00000000000f040a
Call Trace:
 <TASK>
 ? iwl_mvm_sta_rx_agg+0xa42/0xbd0 [iwlmvm]
 ? __warn.cold+0x8e/0xe8
 ? iwl_mvm_sta_rx_agg+0xa42/0xbd0 [iwlmvm]
 ? report_bug+0xff/0x140
 ? handle_bug+0x3c/0x80
 ? exc_invalid_op+0x17/0x70
 ? asm_exc_invalid_op+0x1a/0x20
 ? iwl_mvm_sta_rx_agg+0xa42/0xbd0 [iwlmvm]
 ? iwl_mvm_mac_ampdu_action+0x100/0x590 [iwlmvm]
 iwl_mvm_mac_ampdu_action+0x100/0x590 [iwlmvm]
 ? __kmalloc_noprof+0x1c0/0x4a0
 drv_ampdu_action+0xd8/0x190 [mac80211]
 __ieee80211_start_rx_ba_session+0x349/0x780 [mac80211]
 ieee80211_process_addba_request+0x88/0x180 [mac80211]
 ? finish_task_switch.isra.0+0x99/0x2e0
 ? sta_info_get_bss+0xdc/0x140 [mac80211]
 ieee80211_iface_work+0x3d8/0x480 [mac80211]
 cfg80211_wiphy_work+0xab/0xe0 [cfg80211]
 process_one_work+0x176/0x330
 worker_thread+0x266/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xcf/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>