Backtrace

WARNING: CPU: 5 PID: 28699 at drivers/net/wireless/intel/iwlwifi/mvm/sta.c:2738 iwl_mvm_sta_rx_agg+0x534/0xb40 [iwlmvm]
Modules linked in: nft_reject_ipv4 nf_reject_ipv4 nft_reject nft_ct nft_masq nf_nat_h323 nf_conntrack_h323 nf_nat_pptp nf_conntrack_pptp nf_nat_tftp nf_conntrack_tftp nf_nat_sip nf_conntrack_sip nf_nat_irc nf_conntrack_irc nf_nat_ftp nf_conntrack_ftp tls uinput rfcomm snd_seq_dummy snd_hrtimer xt_nat veth xt_conntrack nft_chain_nat xt_MASQUERADE nf_nat bridge stp llc nf_conntrack_netlink nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xt_addrtype nft_compat nf_tables overlay sunrpc qrtr bnep binfmt_misc vfat fat snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common squashfs snd_hda_codec_conexant snd_hda_codec_generic snd_soc_dmic snd_sof_pci_intel_tgl snd_sof_pci_intel_cnl snd_sof_intel_hda_generic iwlmvm soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_hda_codec_hdmi snd_sof_pci snd_sof_xtensa_dsp snd_sof mac80211 intel_uncore_frequency intel_uncore_frequency_common intel_tcc_cooling
 snd_sof_utils snd_soc_acpi_intel_match x86_pkg_temp_thermal snd_soc_acpi_intel_sdca_quirks intel_powerclamp soundwire_generic_allocation snd_soc_acpi soundwire_bus coretemp snd_soc_sdca snd_soc_avs kvm_intel snd_soc_hda_codec snd_hda_ext_core libarc4 snd_soc_core kvm snd_compress uvcvideo ac97_bus snd_pcm_dmaengine uvc snd_hda_intel mei_pxp mei_wdt mei_hdcp snd_intel_dspcfg videobuf2_vmalloc snd_intel_sdw_acpi irqbypass videobuf2_memops snd_hda_codec btusb spi_nor videobuf2_v4l2 intel_rapl_msr iwlwifi processor_thermal_device_pci iTCO_wdt videobuf2_common btrtl mtd intel_pmc_bxt rapl processor_thermal_device snd_hda_core btintel iTCO_vendor_support intel_cstate processor_thermal_wt_hint videodev snd_ctl_led snd_hwdep processor_thermal_rfim btbcm snd_seq think_lmi btmtk processor_thermal_rapl intel_uncore mc pcspkr snd_seq_device intel_rapl_common cfg80211 bluetooth firmware_attributes_class thinkpad_acpi snd_pcm mei_me processor_thermal_wt_req i2c_i801 sparse_keymap spi_intel_pci
 processor_thermal_power_floor mei thunderbolt e1000e snd_timer idma64 i2c_smbus spi_intel wmi_bmof platform_profile igen6_edac processor_thermal_mbox rfkill snd soundcore int3403_thermal int340x_thermal_zone intel_pmc_core int3400_thermal pmt_telemetry acpi_thermal_rel pmt_class acpi_pad acpi_tad joydev loop nfnetlink zram lz4hc_compress lz4_compress xe drm_ttm_helper intel_vsec gpu_sched drm_suballoc_helper drm_gpuvm drm_exec i915 i2c_algo_bit drm_buddy ttm nvme polyval_clmulni polyval_generic drm_display_helper nvme_core ghash_clmulni_intel ucsi_acpi sha512_ssse3 typec_ucsi video hid_multitouch sha256_ssse3 sha1_ssse3 cec nvme_auth typec i2c_hid_acpi i2c_hid wmi pinctrl_tigerlake serio_raw fuse
CPU: 5 UID: 0 PID: 28699 Comm: kworker/u48:7 Not tainted 6.14.5-200.fc41.x86_64 #1
Hardware name: LENOVO 21JKS0F700/21JKS0F700, BIOS R2AET51W(1.26) 09/27/2023
Workqueue: events_unbound cfg80211_wiphy_work [cfg80211]
RIP: 0010:iwl_mvm_sta_rx_agg+0x534/0xb40 [iwlmvm]
Code: 00 f3 48 ab c6 45 90 01 44 88 75 ad 41 8b 85 34 02 00 00 89 45 94 41 8b 85 08 04 00 00 88 45 a0 b8 10 00 00 00 e9 da fb ff ff <0f> 0b 66 41 83 7e 18 00 0f 84 08 fe ff ff 0f b7 c3 31 db 41 0f af
RSP: 0018:ffffac2a8ad3fb00 EFLAGS: 00010202
RAX: 0000000000000040 RBX: 0000000000000008 RCX: 0000000000000000
RDX: 0000000000000001 RSI: 00000000fffffe00 RDI: ffff9a1e1da400cc
RBP: ffffac2a8ad3fbc0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000004 R12: 0000000000000001
R13: ffff9a1e1da400cc R14: ffff9a1e1da40000 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff9a1f57480000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6ac0026b70 CR3: 00000001d582c003 CR4: 0000000000f72ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? iwl_mvm_mac_ampdu_action+0x1e4/0x270 [iwlmvm]
 ? iwl_mvm_mac_ampdu_action+0x74/0x270 [iwlmvm]
 iwl_mvm_mac_ampdu_action+0x1e4/0x270 [iwlmvm]
 ? check_preempt_wakeup_fair+0x1d0/0x290
 drv_ampdu_action+0xd8/0x190 [mac80211]
 __ieee80211_stop_rx_ba_session+0xd6/0x1d0 [mac80211]
 __ieee80211_start_rx_ba_session+0x194/0x6a0 [mac80211]
 ? sched_clock+0x10/0x30
 ieee80211_process_addba_request+0x9c/0xd0 [mac80211]
 ieee80211_iface_work+0x72/0x190 [mac80211]
 cfg80211_wiphy_work+0xf8/0x170 [cfg80211]
 process_one_work+0x176/0x330
 worker_thread+0x252/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xec/0x230
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>