Backtrace

WARNING: CPU: 2 PID: 1797 at drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c:6421 iwl_mvm_sync_rx_queues_internal+0x2b4/0x2c0 [iwlmvm]
Modules linked in: uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr bnep intel_powerclamp coretemp at24 iTCO_wdt mei_wdt kvm_intel iwlmvm mei_pxp intel_pmc_bxt sunrpc snd_hda_codec_conexant iTCO_vendor_support kvm mac80211 snd_hda_codec_generic snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec intel_cstate intel_uncore snd_hda_core libarc4 btusb btrtl think_lmi snd_hwdep btintel btbcm pcspkr iwlwifi firmware_attributes_class snd_ctl_led btmtk snd_seq wmi_bmof bluetooth snd_seq_device acpi_cpufreq thinkpad_acpi i2c_i801 snd_pcm intel_ips cfg80211 i2c_smbus sparse_keymap binfmt_misc platform_profile snd_timer mei_me snd rfkill lpc_ich e1000e mei soundcore pktcdvd joydev loop nfnetlink zram nouveau drm_ttm_helper ttm crct10dif_pclmul crc32_pclmul
 crc32c_intel gpu_sched polyval_generic i2c_algo_bit drm_gpuvm drm_exec sdhci_pci cqhci ghash_clmulni_intel sdhci sha512_ssse3 sha256_ssse3 mxm_wmi sha1_ssse3 mmc_core firewire_ohci drm_display_helper firewire_core crc_itu_t cec video wmi serio_raw ip6_tables ip_tables fuse
CPU: 2 PID: 1797 Comm: kworker/2:4 Not tainted 6.10.11-200.fc40.x86_64 #1
Hardware name: LENOVO 4349A49/4349A49, BIOS 6MET92WW (1.52 ) 09/26/2012
Workqueue: events_freezable ieee80211_restart_work [mac80211]
RIP: 0010:iwl_mvm_sync_rx_queues_internal+0x2b4/0x2c0 [iwlmvm]
Code: a9 cc ff 00 0f 85 d1 fe ff ff 8b 93 e8 00 00 00 48 8b b3 f0 00 00 00 48 c7 c7 d0 28 40 c1 c6 05 28 a9 cc ff 01 e8 dc f7 b8 e2 <0f> 0b e9 aa fe ff ff e8 00 1b c1 e3 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffa9fc82137a80 EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffff96811ed0a008 RCX: 0000000000000027
RDX: ffff968233d218c8 RSI: 0000000000000001 RDI: ffff968233d218c0
RBP: ffffa9fc82137b30 R08: 0000000000000000 R09: 65696b6f6f63202c
R10: 202c327830207369 R11: 302065696b6f6f63 R12: 0000000000000000
R13: ffffa9fc82137a90 R14: ffff96811ed0c158 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff968233d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000562549017980 CR3: 00000000b7428006 CR4: 00000000000206f0
Call Trace:
 <TASK>
 ? iwl_mvm_sync_rx_queues_internal+0x2b4/0x2c0 [iwlmvm]
 ? __warn.cold+0x8e/0xe8
 ? iwl_mvm_sync_rx_queues_internal+0x2b4/0x2c0 [iwlmvm]
 ? report_bug+0xff/0x140
 ? handle_bug+0x3c/0x80
 ? exc_invalid_op+0x17/0x70
 ? asm_exc_invalid_op+0x1a/0x20
 ? iwl_mvm_sync_rx_queues_internal+0x2b4/0x2c0 [iwlmvm]
 ? __pfx_autoremove_wake_function+0x10/0x10
 iwl_mvm_sta_rx_agg+0x2f2/0xbd0 [iwlmvm]
 ? finish_task_switch.isra.0+0x99/0x2e0
 ? iwl_mvm_mac_ampdu_action+0x214/0x590 [iwlmvm]
 iwl_mvm_mac_ampdu_action+0x214/0x590 [iwlmvm]
 drv_ampdu_action+0xdb/0x190 [mac80211]
 __ieee80211_stop_rx_ba_session+0xd6/0x1d0 [mac80211]
 ieee80211_sta_tear_down_BA_sessions+0x3b/0xd0 [mac80211]
 ieee80211_reconfig+0x13f/0x1660 [mac80211]
 ? finish_wait+0x44/0x90
 ? synchronize_rcu_expedited+0x1f3/0x220
 ? __pfx_autoremove_wake_function+0x10/0x10
 ieee80211_restart_work+0xf1/0x140 [mac80211]
 process_one_work+0x179/0x330
 worker_thread+0x266/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>