Backtrace

WARNING: CPU: 4 PID: 15168 at drivers/net/wireless/intel/iwlwifi/mld/rx.c:1896 iwl_mld_sync_rx_queues+0x268/0x280 [iwlmld]
Modules linked in: uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables qrtr bnep snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic vfat snd_sof_pci_intel_lnl fat snd_sof_pci_intel_mtl snd_sof_intel_hda_generic soundwire_intel iwlmld snd_sof_intel_hda_sdw_bpt snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_hda_codec_hdmi mac80211 soundwire_cadence snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_hda_ext_core snd_soc_acpi_intel_match snd_soc_acpi_intel_sdca_quirks soundwire_generic_allocation intel_uncore_frequency snd_soc_acpi intel_uncore_frequency_common x86_pkg_temp_thermal crc8 soundwire_bus
 intel_powerclamp coretemp libarc4 snd_soc_sdca snd_soc_core kvm_intel spi_nor snd_compress ac97_bus mei_gsc_proxy snd_pcm_dmaengine mtd intel_rapl_msr snd_hda_intel kvm uvcvideo snd_intel_dspcfg snd_intel_sdw_acpi uvc videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 snd_hda_codec videobuf2_common iwlwifi irqbypass snd_hda_core videodev rapl snd_hwdep snd_hda_scodec_cs35l56_spi intel_cstate btintel_pcie regmap_spi snd_seq snd_hda_scodec_cs35l56_i2c snd_hda_scodec_cs35l56 btintel snd_hda_cirrus_scodec snd_soc_cs35l56_shared snd_seq_device hp_wmi processor_thermal_device_pci snd_soc_cs_amp_lib mc intel_uncore platform_profile cfg80211 snd_pcm wmi_bmof bluetooth pcspkr processor_thermal_device cs_dsp snd_timer mei_me processor_thermal_wt_hint processor_thermal_rfim snd spi_intel_pci processor_thermal_rapl soundcore spi_intel mei intel_rapl_common idma64 processor_thermal_wt_req rfkill thunderbolt processor_thermal_power_floor processor_thermal_mbox serial_multi_instantiate int3403_thermal soc_button_array
 int340x_thermal_zone intel_pmc_core pmt_telemetry int3400_thermal intel_hid pmt_class acpi_pad acpi_thermal_rel acpi_tad sparse_keymap joydev loop zram lz4hc_compress lz4_compress xe drm_ttm_helper ttm i2c_algo_bit drm_suballoc_helper drm_buddy gpu_sched drm_gpuvm drm_exec nvme drm_gpusvm polyval_clmulni drm_display_helper nvme_core polyval_generic ghash_clmulni_intel sha512_ssse3 video spi_pxa2xx_platform sha256_ssse3 intel_ish_ipc hid_multitouch dw_dmac ucsi_acpi wacom sha1_ssse3 typec_ucsi intel_vpu spi_pxa2xx_core nvme_keyring intel_ishtp cec intel_vsec typec nvme_auth i2c_hid_acpi i2c_hid wmi pinctrl_intel_platform serio_raw sunrpc iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi fuse i2c_dev nfnetlink
CPU: 4 UID: 0 PID: 15168 Comm: kworker/u33:23 Not tainted 6.15.9-201.fc42.x86_64 #1 PREEMPT(lazy) 
Hardware name: HP HP EliteBook X Flip G1i 14 inch Notebook Next Gen AI PC/8D84, BIOS X90 Ver. 01.02.06 06/12/2025
Workqueue: events_unbound cfg80211_wiphy_work [cfg80211]
RIP: 0010:iwl_mld_sync_rx_queues+0x268/0x280 [iwlmld]
Code: 39 e1 ff 00 0f 85 ec fe ff ff 8b 93 20 21 00 00 48 8b b3 28 21 00 00 48 c7 c7 10 fa c3 c1 c6 05 92 39 e1 ff 01 e8 18 cc 5b f5 <0f> 0b e9 c5 fe ff ff 0f 0b e9 d0 fe ff ff e8 25 b2 6f f6 0f 1f 44
RSP: 0018:ffffcf16668afad0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff8bfe4a122008 RCX: 0000000000000027
RDX: ffff8c059f81cb88 RSI: 0000000000000001 RDI: ffff8c059f81cb80
RBP: ffffcf16668afb80 R08: 0000000000000000 R09: ffffcf16668af978
R10: ffffffffb993bc88 R11: 00000000ffffdfff R12: 0000000000000000
R13: ffff8bfe4a124110 R14: ffff8bfe4a122008 R15: 0000000000000020
FS:  0000000000000000(0000) GS:ffff8c05e5070000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0bd7ea8040 CR3: 000000019eba4004 CR4: 0000000000f72ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __pfx_process_timeout+0x10/0x10
 ? __pfx_autoremove_wake_function+0x10/0x10
 iwl_mld_ampdu_rx_stop+0xd5/0x340 [iwlmld]
 drv_ampdu_action+0xd9/0x1a0 [mac80211]
 __ieee80211_stop_rx_ba_session+0xcf/0x1e0 [mac80211]
 __ieee80211_start_rx_ba_session+0x486/0x760 [mac80211]
 ieee80211_process_addba_request+0x9b/0xd0 [mac80211]
 ieee80211_iface_work+0x6f/0x1b0 [mac80211]
 cfg80211_wiphy_work+0x11b/0x190 [cfg80211]
 process_one_work+0x18f/0x350
 worker_thread+0x25a/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xf9/0x240
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>