Backtrace

WARNING: CPU: 1 PID: 138 at drivers/net/wireless/realtek/rtw88/ps.c:105 rtw_power_mode_change+0xf4/0x130 [rtw88_core]
Modules linked in: uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr bnep sunrpc snd_sof_pci_intel_icl snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match snd_soc_acpi_intel_sdca_quirks soundwire_generic_allocation snd_soc_acpi soundwire_bus snd_soc_sdca snd_soc_avs snd_soc_hda_codec snd_hda_ext_core snd_soc_core snd_compress binfmt_misc ac97_bus intel_uncore_frequency vfat fat intel_uncore_frequency_common intel_tcc_cooling snd_pcm_dmaengine x86_pkg_temp_thermal intel_powerclamp coretemp rtw88_8821ce rtw88_8821c kvm_intel rtw88_pci kvm rtw88_core snd_hda_codec_hdmi
 processor_thermal_device_pci_legacy snd_hda_codec_realtek snd_hda_codec_generic irqbypass processor_thermal_device snd_hda_scodec_component snd_hda_intel rapl intel_cstate mac80211 intel_uncore snd_intel_dspcfg snd_intel_sdw_acpi processor_thermal_wt_hint snd_hda_codec pcspkr processor_thermal_rfim uvcvideo uvc videobuf2_vmalloc videobuf2_memops mei_hdcp videobuf2_v4l2 iTCO_wdt videobuf2_common processor_thermal_rapl btusb videodev mc intel_rapl_msr snd_hda_core intel_pmc_bxt btrtl intel_rapl_common spi_nor iTCO_vendor_support mei_pxp ee1004 mtd libarc4 snd_hwdep snd_seq btintel processor_thermal_wt_req snd_seq_device mei_me cfg80211 snd_pcm hp_wmi btbcm i2c_i801 snd_timer sparse_keymap intel_wmi_thunderbolt snd spi_intel_pci intel_pmc_core processor_thermal_power_floor platform_profile soundcore wmi_bmof mei processor_thermal_mbox spi_intel btmtk r8169 bluetooth realtek i2c_smbus int340x_thermal_zone idma64 joydev intel_soc_dts_iosf pmt_telemetry pmt_class rfkill intel_vsec int3400_thermal
 wireless_hotkey acpi_thermal_rel acpi_tad acpi_pad loop nfnetlink zram lz4hc_compress lz4_compress i915 i2c_algo_bit drm_buddy sdhci_pci polyval_clmulni ttm sdhci_uhs2 polyval_generic ghash_clmulni_intel sdhci drm_display_helper sha512_ssse3 hid_multitouch video cqhci sha256_ssse3 mmc_core sha1_ssse3 cec i2c_hid_acpi i2c_hid wmi pinctrl_icelake serio_raw ip6_tables ip_tables fuse
CPU: 1 UID: 0 PID: 138 Comm: kworker/u16:4 Not tainted 6.14.5-100.fc40.x86_64 #1
Hardware name: HP HP 250 G8 Notebook PC/85F3, BIOS F.53 10/15/2021
Workqueue: events_unbound cfg80211_wiphy_work [cfg80211]
RIP: 0010:rtw_power_mode_change+0xf4/0x130 [rtw88_core]
Code: d0 0f 1f 00 44 30 e0 78 dd 45 84 ed 48 c7 c0 a8 4d 56 c1 48 c7 c6 b1 4d 56 c1 48 c7 c7 d8 43 56 c1 48 0f 45 f0 e8 4c 75 e7 f1 <0f> 0b 48 89 df 5b 5d 41 5c 41 5d e9 4c ce ff ff 48 8b 8b 78 54 00
RSP: 0018:ffffb25f00cb7b60 EFLAGS: 00010282
RAX: 0000000000000000 RBX: ffff99c504992000 RCX: 0000000000000027
RDX: ffff99c5abaa1948 RSI: 0000000000000001 RDI: ffff99c5abaa1940
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000004 R12: 00000000c14d9080
R13: 0000000000000000 R14: 0000000000000000 R15: ffffb25f00cb7cd8
FS:  0000000000000000(0000) GS:ffff99c5aba80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f952f19467c CR3: 0000000103183003 CR4: 0000000000772ef0
PKRU: 55555554
Call Trace:
 <TASK>
 rtw_pci_tx_kick_off_queue+0x8a/0xc0 [rtw88_pci]
 rtw_pci_tx_kick_off+0x3b/0x50 [rtw88_pci]
 rtw_tx+0x8e/0xc0 [rtw88_core]
 ieee80211_tx_frags+0x163/0x240 [mac80211]
 __ieee80211_tx+0x60/0x170 [mac80211]
 ? invoke_tx_handlers_late+0x1e4/0x330 [mac80211]
 ieee80211_tx+0x10b/0x150 [mac80211]
 __ieee80211_tx_skb_tid_band+0x9a/0x170 [mac80211]
 ieee80211_tx_skb_tid+0x4f/0xa0 [mac80211]
 ieee80211_ba_session_work+0x30f/0x3e0 [mac80211]
 cfg80211_wiphy_work+0xf8/0x170 [cfg80211]
 process_one_work+0x176/0x330
 worker_thread+0x252/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xec/0x230
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>