Backtrace

WARNING: CPU: 5 PID: 423111 at drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c:4167 iwl_mvm_mac_sta_state_common+0x2c1/0x8b0 [iwlmvm]
Modules linked in: nvidia_uvm(OE) uinput rfcomm snd_seq_dummy snd_hrtimer binfmt_misc xt_conntrack xt_MASQUERADE bridge stp llc xt_set ip_set xt_addrtype nft_compat overlay nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables sunrpc qrtr bnep vfat fat snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_tgl snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel snd_sof_intel_hda_sdw_bpt snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_hda_codec_hdmi intel_rapl_msr soundwire_cadence intel_rapl_common snd_sof_pci snd_sof_xtensa_dsp intel_uncore_frequency iwlmvm intel_uncore_frequency_common snd_sof snd_sof_utils
 snd_soc_acpi_intel_match snd_soc_acpi_intel_sdca_quirks soundwire_generic_allocation snd_soc_acpi crc8 x86_pkg_temp_thermal soundwire_bus intel_powerclamp coretemp snd_soc_sdca snd_soc_avs mac80211 kvm_intel nvidia_drm(OE) snd_soc_hda_codec snd_hda_ext_core nvidia_modeset(OE) snd_soc_core kvm libarc4 snd_compress ac97_bus snd_pcm_dmaengine snd_hda_intel snd_intel_dspcfg btusb snd_intel_sdw_acpi btrtl snd_hda_codec btintel spi_nor irqbypass btbcm iTCO_wdt snd_hda_core rapl btmtk intel_pmc_bxt intel_cstate iwlwifi mei_hdcp mei_pxp mtd ee1004 snd_hwdep iTCO_vendor_support gpio_keys msi_ec bluetooth nvidia(OE) snd_seq cfg80211 snd_seq_device msi_wmi snd_pcm intel_uncore sparse_keymap r8169 wmi_bmof mei_me snd_timer realtek snd pcspkr i2c_i801 spi_intel_pci mei i2c_smbus spi_intel rfkill idma64 soundcore intel_pmc_core pmt_telemetry pmt_class soc_button_array intel_pmc_ssram_telemetry acpi_tad acpi_pad joydev loop nfnetlink zram lz4hc_compress lz4_compress xe drm_ttm_helper drm_suballoc_helper gpu_sched
 drm_gpuvm drm_exec drm_gpusvm i915 i2c_algo_bit drm_buddy ttm nvme drm_display_helper nvme_core polyval_clmulni ghash_clmulni_intel hid_multitouch sha512_ssse3 nvme_keyring sha1_ssse3 cec nvme_auth intel_vsec i2c_hid_acpi i2c_hid video intel_oc_wdt wmi pinctrl_tigerlake serio_raw i2c_dev fuse
CPU: 5 UID: 0 PID: 423111 Comm: kworker/u48:44 Tainted: G           OE       6.16.10-200.fc42.x86_64 #1 PREEMPT(lazy) 
Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
Hardware name: Micro-Star International Co., Ltd. GF63 Thin 11UC/MS-16R6, BIOS E16R6IMS.10B 12/30/2021
Workqueue: events_unbound cfg80211_wiphy_work [cfg80211]
RIP: 0010:iwl_mvm_mac_sta_state_common+0x2c1/0x8b0 [iwlmvm]
Code: 00 0f 84 a3 fe ff ff 85 ed 0f 85 9b fe ff ff 80 7c 24 2b 00 74 0d be 04 00 00 00 4c 89 ff e8 26 e9 d1 ff 31 ed e9 80 fe ff ff <0f> 0b 4c 89 f7 bd ea ff ff ff e8 00 64 6e e2 48 8b 83 e8 00 00 00
RSP: 0018:ffffccdec0f73bf0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff8ae2c7dda000 RCX: 0000000000000000
RDX: ffff8ae2f104a5c0 RSI: 0000000000000000 RDI: ffff8ae2c7dda038
RBP: 0000000000000003 R08: 0000000000000000 R09: ffff8ae5da260a90
R10: ffffccdec0f73be0 R11: ffffccdec0f73ba0 R12: 0000000000000004
R13: ffff8ae2f1049c98 R14: ffff8ae2c7dda038 R15: ffff8ae5da260a90
FS:  0000000000000000(0000) GS:ffff8ae687edd000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000029c0014d161 CR3: 00000002420a7006 CR4: 0000000000f72ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? krc_this_cpu_lock+0x2e/0x40
 drv_sta_state+0xf9/0x230 [mac80211]
 _sta_info_move_state+0x141/0x330 [mac80211]
 __sta_info_destroy_part2+0x188/0x1a0 [mac80211]
 __sta_info_flush+0x1b8/0x270 [mac80211]
 ieee80211_set_disassoc+0x6d8/0x8f0 [mac80211]
 __ieee80211_disconnect+0xd5/0x190 [mac80211]
 cfg80211_wiphy_work+0x11e/0x190 [cfg80211]
 process_one_work+0x18f/0x350
 worker_thread+0x25a/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xfc/0x240
 ? __pfx_kthread+0x10/0x10
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0xf1/0x110
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>