Backtrace

WARNING: CPU: 3 PID: 24786 at net/mac80211/chan.c:1094 ieee80211_link_unreserve_chanctx+0x15a/0x180 [mac80211]
Modules linked in: uinput xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nf_nat_tftp snd_seq_dummy nf_conntrack_tftp rfcomm snd_hrtimer snd_sof_pci_intel_skl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence nf_conntrack_netbios_ns nf_conntrack_broadcast snd_sof_intel_hda_common nft_fib_inet nft_fib_ipv4 snd_soc_hdac_hda nft_fib_ipv6 snd_sof_intel_hda_mlink nft_fib snd_sof_intel_hda nft_reject_inet snd_sof_pci snd_sof_xtensa_dsp nf_reject_ipv4 nf_reject_ipv6 snd_sof nft_reject snd_sof_utils nft_ct snd_soc_acpi_intel_match nft_chain_nat snd_soc_acpi_intel_sdca_quirks ip6table_nat soundwire_generic_allocation ip6table_mangle snd_soc_acpi ip6table_raw soundwire_bus ip6table_security snd_soc_sdca iptable_nat snd_soc_avs nf_nat snd_soc_hda_codec nf_conntrack snd_hda_ext_core nf_defrag_ipv6 snd_soc_core nf_defrag_ipv4 snd_hda_codec_hdmi snd_compress iptable_mangle snd_hda_codec_conexant ac97_bus iptable_raw snd_hda_codec_generic snd_pcm_dmaengine iptable_security snd_hda_intel intel_rapl_msr uhid
 snd_intel_dspcfg intel_rapl_common snd_intel_sdw_acpi ip_set bridge bnep snd_hda_codec stp intel_tcc_cooling snd_hda_core uvcvideo nf_tables llc btusb x86_pkg_temp_thermal iwlmvm snd_hwdep uvc ip6table_filter hid_sensor_rotation hid_sensor_incl_3d hid_sensor_accel_3d hid_sensor_gyro_3d hid_sensor_magn_3d btrtl intel_powerclamp snd_seq iTCO_wdt snd_seq_device videobuf2_vmalloc mac80211 iptable_filter hid_sensor_trigger btintel coretemp intel_pmc_bxt snd_pcm videobuf2_memops hid_sensor_iio_common qrtr btbcm libarc4 rapl iTCO_vendor_support snd_timer videobuf2_v4l2 industrialio_triggered_buffer btmtk hp_wmi mei_hdcp mei_pxp intel_pmc_core intel_cstate i2c_i801 iwlwifi snd videobuf2_common kfifo_buf cfg80211 sunrpc videodev bluetooth platform_profile mei_me pmt_telemetry binfmt_misc intel_uncore pcspkr wmi_bmof i2c_smbus soundcore industrialio mc rfkill mei intel_pch_thermal intel_vbtn intel_xhci_usb_role_switch pmt_class vfat wireless_hotkey soc_button_array sparse_keymap intel_vsec acpi_pad fat joydev loop
 dm_multipath nfnetlink zram lz4hc_compress lz4_compress dm_crypt i915 polyval_clmulni polyval_generic i2c_algo_bit ghash_clmulni_intel drm_buddy sha512_ssse3 rtsx_pci_sdmmc nvme ttm sha256_ssse3 mmc_core nvme_core drm_display_helper video sha1_ssse3 hid_sensor_hub rtsx_pci nvme_auth cec wmi serio_raw hid_multitouch scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables fuse
CPU: 3 UID: 0 PID: 24786 Comm: kworker/u16:4 Tainted: G          I        6.14.5-100.fc40.x86_64 #1
Tainted: [I]=FIRMWARE_WORKAROUND
Hardware name: HP HP Spectre x360 Convertible/804E, BIOS F.52 11/16/2018
Workqueue: events_unbound cfg80211_wiphy_work [cfg80211]
RIP: 0010:ieee80211_link_unreserve_chanctx+0x15a/0x180 [mac80211]
Code: 24 10 4c 89 e6 49 89 44 24 08 e8 21 74 16 d6 e9 72 ff ff ff 48 8b bb 40 06 00 00 31 d2 4c 89 e6 e8 8b e7 ff ff e9 5c ff ff ff <0f> 0b 5b b8 ea ff ff ff 5d 41 5c c3 cc cc cc cc 0f 0b eb 85 0f 0b
RSP: 0018:ffffb74847e8bba0 EFLAGS: 00010246
RAX: ffffffffc17ed6a0 RBX: ffff944adcbf4a80 RCX: 0000000000000000
RDX: 00000000fffffffe RSI: 0000000000000000 RDI: ffff944adcbf5840
RBP: ffff944adcbf4a80 R08: ffff944adcbf5a48 R09: ffff944adcbf5a38
R10: 0000000000000000 R11: 0000000000000134 R12: 0000000000000000
R13: ffff944adcbf4a80 R14: ffffb74847e8bc48 R15: ffff944a94460900
FS:  0000000000000000(0000) GS:ffff944be6d80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000011a29b36b000 CR3: 000000012f82c003 CR4: 00000000003706f0
Call Trace:
 <TASK>
 ieee80211_sta_abort_chanswitch+0x2e/0x170 [mac80211]
 ieee80211_sta_process_chanswitch+0x712/0x8f0 [mac80211]
 ieee80211_rx_mgmt_beacon+0x6b1/0xba0 [mac80211]
 ? kick_pool+0x60/0x160
 ieee80211_iface_work+0x72/0x190 [mac80211]
 cfg80211_wiphy_work+0xf8/0x170 [cfg80211]
 process_one_work+0x176/0x330
 worker_thread+0x252/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xec/0x230
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>