Backtrace

WARNING: CPU: 11 PID: 85 at drivers/net/wireless/broadcom/brcm80211/brcmfmac/fwsignal.c:1731 brcmf_fws_rxreorder+0x42e/0x600 [brcmfmac]
Modules linked in: brcmfmac_wcc brcmfmac brcmutil cfg80211 uinput veth nf_conntrack_netlink xt_nat xt_conntrack xt_MASQUERADE xt_set ip_set xt_addrtype nvidia_uvm(OE) snd_seq_dummy snd_hrtimer nft_reject_ipv4 act_csum cls_u32 sch_htb nf_nat_tftp nf_conntrack_tftp xt_comment bridge stp llc overlay nft_masq nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security nf_tables ip6table_filter ip6_tables iptable_filter ip_tables qrtr bnep sunrpc binfmt_misc r8153_ecm cdc_ether usbnet r8152 mii snd_hda_codec_intelhdmi uvcvideo uvc videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common videodev mc snd_ctl_led snd_hda_codec_alc269 snd_hda_scodec_component snd_hda_codec_realtek_lib snd_hda_codec_generic intel_uncore_frequency
 intel_uncore_frequency_common snd_hda_intel snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel intel_tcc_cooling snd_sof_intel_hda_sdw_bpt vfat x86_pkg_temp_thermal fat intel_powerclamp snd_sof_intel_hda_common coretemp snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_hda_codec_hdmi soundwire_cadence snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match snd_soc_acpi_intel_sdca_quirks soundwire_generic_allocation kvm_intel snd_soc_acpi crc8 soundwire_bus snd_soc_sdca nvidia_drm(OE) nvidia_modeset(OE) squashfs snd_soc_avs kvm snd_soc_hda_codec snd_hda_ext_core snd_hda_codec snd_hda_core snd_intel_dspcfg snd_intel_sdw_acpi snd_hwdep dell_pc platform_profile snd_soc_core irqbypass hci_uart dell_wmi_sysman rapl nvidia(OE) intel_cstate snd_compress ac97_bus btqca snd_pcm_dmaengine snd_seq pwrseq_core spi_nor dell_laptop mei_hdcp ee1004 mei_pxp processor_thermal_device_pci_legacy btrtl iTCO_wdt processor_thermal_device snd_seq_device hid_sensor_als dell_wmi
 intel_pmc_bxt processor_thermal_wt_hint iTCO_vendor_support mtd intel_rapl_msr dell_smbios intel_uncore snd_pcm btintel hid_sensor_trigger dell_smm_hwmon platform_temperature_control dell_wmi_ddv hid_sensor_iio_common pcspkr processor_thermal_rfim dcdbas btbcm snd_timer industrialio_triggered_buffer processor_thermal_rapl kfifo_buf dell_wmi_descriptor firmware_attributes_class intel_wmi_thunderbolt wmi_bmof bluetooth industrialio snd i2c_i801 mei_me spi_intel_pci soundcore spi_intel i2c_smbus intel_rapl_common mei processor_thermal_wt_req processor_thermal_power_floor processor_thermal_mbox idma64 drm_ttm_helper intel_soc_dts_iosf intel_pch_thermal rfkill int3403_thermal intel_pmc_core joydev pmt_telemetry int340x_thermal_zone pmt_discovery pmt_class intel_hid int3400_thermal intel_pmc_ssram_telemetry sparse_keymap intel_vsec acpi_pad acpi_thermal_rel acpi_tad loop dm_multipath nfnetlink zram lz4hc_compress lz4_compress hid_sensor_hub intel_ishtp_hid i915 hid_logitech_hidpp i2c_algo_bit rtsx_pci_sdmmc
 drm_buddy ucsi_acpi mmc_core ttm typec_ucsi nvme hid_multitouch drm_display_helper nvme_core typec video polyval_clmulni ghash_clmulni_intel nvme_keyring rtsx_pci thunderbolt nvme_auth intel_ish_ipc cec i2c_hid_acpi intel_ishtp i2c_hid intel_oc_wdt wmi hid_logitech_dj pinctrl_cannonlake serio_raw scsi_dh_rdac scsi_dh_emc scsi_dh_alua ntsync i2c_dev fuse
CPU: 11 UID: 0 PID: 85 Comm: ksoftirqd/11 Tainted: G        W  OE       6.17.7-200.fc42.x86_64 #1 PREEMPT(lazy) 
Tainted: [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
Hardware name: Dell Inc. XPS 15 9500/0HH6JF, BIOS 1.39.0 08/05/2025
RIP: 0010:brcmf_fws_rxreorder+0x42e/0x600 [brcmfmac]
Code: 40 48 c7 44 fb 08 00 00 00 00 83 c0 01 38 43 03 41 0f 42 c2 41 38 c1 75 bc 0f b6 43 04 2a 44 24 40 88 43 04 0f 84 a8 fd ff ff <0f> 0b e9 a1 fd ff ff 0f b6 42 02 be 20 09 00 00 4c 89 44 24 08 48
RSP: 0018:ffffd1df403e7c70 EFLAGS: 00010202
RAX: 0000000000000001 RBX: ffff8dc60ce12c00 RCX: ffff8dc7c1ec1e00
RDX: ffff8dc79bf6978e RSI: 0000000000000000 RDI: 000000000000001e
RBP: ffffd1df403e7ce8 R08: 0000000000000034 R09: 000000000000001f
R10: 0000000000000000 R11: fefefefefefefeff R12: ffffd1df403e7ca0
R13: ffff8dc73d29da80 R14: 0000000000000001 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff8dccd37c4000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000027db35d64000 CR3: 000000058662c003 CR4: 00000000007726f0
PKRU: 55555554
Call Trace:
 <TASK>
 ? brcmf_proto_bcdc_hdrpull+0xdb/0x130 [brcmfmac]
 brcmf_rx_frame+0x62/0x100 [brcmfmac]
 brcmf_usb_rx_complete+0xfd/0x140 [brcmfmac]
 __usb_hcd_giveback_urb+0x9d/0x120
 usb_giveback_urb_bh+0xb1/0x140
 process_one_work+0x192/0x350
 bh_worker+0x1ac/0x210
 tasklet_action+0x10/0x30
 handle_softirqs+0xf0/0x340
 ? __pfx_smpboot_thread_fn+0x10/0x10
 run_ksoftirqd+0x2f/0x40
 smpboot_thread_fn+0xf3/0x220
 kthread+0xf9/0x240
 ? __pfx_kthread+0x10/0x10
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0xf4/0x110
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>