Backtrace

WARNING: CPU: 15 PID: 3355138 at drivers/net/wireless/intel/iwlwifi/mld/mlo.c:942 _iwl_mld_select_links+0x2b5/0x630 [iwlmld]
Modules linked in: xt_MASQUERADE xt_mark nft_compat tun binfmt_misc overlay uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables qrtr uhid bnep snd_ctl_led snd_hda_codec_nvhdmi snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_soc_dmic sunrpc mmc_block rpmb_core snd_hda_codec_intelhdmi snd_hda_codec_alc269 snd_hda_scodec_component snd_hda_codec_realtek_lib snd_hda_codec_generic snd_sof_pci_intel_tgl snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel snd_sof_intel_hda_sdw_bpt snd_sof_intel_hda_common iwlmld snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_hda_codec_hdmi intel_uncore_frequency soundwire_cadence intel_uncore_frequency_common snd_sof_pci snd_sof_xtensa_dsp mac80211 snd_sof vfat x86_pkg_temp_thermal fat
 intel_powerclamp coretemp snd_sof_utils snd_soc_acpi_intel_match snd_soc_acpi_intel_sdca_quirks soundwire_generic_allocation snd_soc_acpi kvm_intel crc8 soundwire_bus snd_soc_sdca jc42 libarc4 snd_soc_avs kvm iTCO_wdt ee1004 intel_pmc_bxt snd_soc_hda_codec iTCO_vendor_support spi_nor snd_hda_intel rtsx_pci_sdmmc snd_hda_ext_core btusb mtd mmc_core mei_pxp uvcvideo mei_hdcp mei_wdt snd_hda_codec snd_usb_audio iwlwifi btmtk r8153_ecm irqbypass btrtl uvc cdc_ether rapl intel_rapl_msr videobuf2_vmalloc btbcm snd_hda_core snd_soc_core usbnet hp_bioscfg intel_cstate processor_thermal_device_pci_legacy videobuf2_memops btintel processor_thermal_device snd_usbmidi_lib videobuf2_v4l2 snd_intel_dspcfg firmware_attributes_class hid_sensor_als intel_uncore snd_ump cfg80211 hp_wmi snd_compress snd_intel_sdw_acpi processor_thermal_wt_hint iosm videobuf2_common wmi_bmof i2c_i801 snd_rawmidi hid_sensor_trigger pcspkr e1000e snd_hwdep ac97_bus platform_temperature_control spi_intel_pci bluetooth snd_pcm_dmaengine videodev
 spi_intel wwan i2c_smbus rtsx_pci hid_sensor_iio_common snd_seq processor_thermal_soc_slider mei_me platform_profile industrialio_triggered_buffer processor_thermal_rfim kfifo_buf snd_seq_device mc mei industrialio processor_thermal_rapl r8152 snd_pcm idma64 rfkill mii intel_rapl_common snd_timer processor_thermal_wt_req snd processor_thermal_power_floor soundcore processor_thermal_mbox intel_soc_dts_iosf int3403_thermal int340x_thermal_zone intel_pmc_core pmt_telemetry hp_accel pmt_discovery intel_hid pmt_class lis3lv02d int3400_thermal sparse_keymap joydev acpi_thermal_rel acpi_pad intel_pmc_ssram_telemetry wireless_hotkey loop nfnetlink zram lz4hc_compress lz4_compress dm_crypt hid_plantronics hid_logitech_hidpp xe drm_suballoc_helper drm_gpusvm_helper hid_logitech_dj hid_sensor_hub intel_ishtp_hid ucsi_acpi typec_ucsi typec nouveau i915 mxm_wmi drm_ttm_helper gpu_sched drm_gpuvm nvme drm_exec i2c_algo_bit drm_buddy ttm nvme_core drm_display_helper nvme_keyring intel_ish_ipc hid_multitouch nvme_auth
 polyval_clmulni thunderbolt ghash_clmulni_intel hkdf cec intel_ishtp i2c_hid_acpi intel_vsec i2c_hid video intel_oc_wdt wmi pinctrl_tigerlake serio_raw i2c_dev fuse
CPU: 15 UID: 0 PID: 3355138 Comm: kworker/u64:3 Not tainted 6.18.10-100.fc42.x86_64 #1 PREEMPT(lazy) 
Hardware name: HP HP ZBook Fury 15.6 inch G8 Mobile Workstation PC/8870, BIOS T95 Ver. 01.22.00 08/20/2025
Workqueue: events_unbound cfg80211_wiphy_work [cfg80211]
RIP: 0010:_iwl_mld_select_links+0x2b5/0x630 [iwlmld]
Code: 00 48 81 c4 c0 01 00 00 41 0f b7 f7 4c 89 f7 5b 5d 41 5c 41 5d 41 5e 41 5f e9 97 56 f2 ff 48 c7 c7 88 b7 96 c2 e8 db 82 0b c3 <0f> 0b 48 8b 84 24 b8 01 00 00 65 48 2b 05 91 d7 4e c6 0f 85 01 03
RSP: 0018:ffffd232fc2fbb28 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000027
RDX: ffff8a80a6b9cfc8 RSI: 0000000000000001 RDI: ffff8a80a6b9cfc0
RBP: 0000000000000002 R08: 0000000000000000 R09: ffffd232fc2fb9d0
R10: ffffffff8813c2c8 R11: 00000000ffffdfff R12: ffffd232fc2fbb78
R13: 00000000ffff0003 R14: ffff8a8126bb9d68 R15: ffff8a8126bb8a80
FS:  0000000000000000(0000) GS:ffff8a811dba6000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000028840307e400 CR3: 000000049742e002 CR4: 0000000000f72ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? ieee80211_parse_extension_element+0x134/0x630 [mac80211]
 __iterate_interfaces+0x90/0x130 [mac80211]
 ? __pfx_iwl_mld_vif_iter_select_links+0x10/0x10 [iwlmld]
 iwl_mld_handle_scan_complete_notif+0x33b/0x430 [iwlmld]
 ? iwl_mld_log_async_handler_op.isra.0+0x79/0x90 [iwlmld]
 iwl_mld_async_handlers_wk+0xe5/0x160 [iwlmld]
 cfg80211_wiphy_work+0xc2/0x1a0 [cfg80211]
 process_one_work+0x192/0x350
 worker_thread+0x25a/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xfc/0x240
 ? __pfx_kthread+0x10/0x10
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0xf4/0x110
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>