Backtrace

WARNING: CPU: 2 PID: 13203 at drivers/net/wireless/intel/iwlwifi/mvm/sta.c:2990 iwl_mvm_sta_rx_agg+0x9b3/0xb40 [iwlmvm]
Modules linked in: uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common bnep snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic sunrpc snd_sof_pci_intel_tgl snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_hda_codec_hdmi snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match snd_soc_acpi_intel_sdca_quirks soundwire_generic_allocation snd_soc_acpi soundwire_bus intel_uncore_frequency intel_uncore_frequency_common snd_soc_sdca snd_soc_avs snd_soc_hda_codec x86_pkg_temp_thermal snd_hda_ext_core iwlmvm
 intel_powerclamp coretemp snd_soc_core snd_compress kvm_intel ac97_bus snd_pcm_dmaengine iTCO_wdt intel_pmc_bxt snd_hda_intel iTCO_vendor_support mac80211 mei_pxp mei_hdcp intel_rapl_msr kvm uvcvideo uvc btusb videobuf2_vmalloc snd_intel_dspcfg btrtl videobuf2_memops snd_intel_sdw_acpi snd_hda_codec libarc4 btintel videobuf2_v4l2 irqbypass videobuf2_common btbcm snd_hda_core videodev btmtk rapl snd_hwdep intel_cstate snd_seq r8169 lenovo_ymc intel_uncore mc pcspkr snd_seq_device bluetooth snd_pcm iwlwifi think_lmi firmware_attributes_class snd_timer wmi_bmof binfmt_misc realtek processor_thermal_device_pci_legacy snd processor_thermal_device cfg80211 spi_intel_pci i2c_i801 processor_thermal_wt_hint i2c_smbus soundcore processor_thermal_rfim spi_intel thunderbolt processor_thermal_rapl intel_rapl_common idma64 processor_thermal_wt_req mei_me processor_thermal_power_floor ideapad_laptop processor_thermal_mbox mei igen6_edac intel_soc_dts_iosf sparse_keymap platform_profile int3403_thermal vfat fat rfkill
 int340x_thermal_zone intel_pmc_core pmt_telemetry pmt_class int3400_thermal joydev acpi_thermal_rel acpi_pad loop nfnetlink zram lz4hc_compress lz4_compress xe drm_ttm_helper intel_vsec gpu_sched drm_suballoc_helper drm_gpuvm drm_exec i915 rtsx_pci_sdmmc i2c_algo_bit mmc_core drm_buddy nvme ttm hid_multitouch polyval_clmulni polyval_generic drm_display_helper ghash_clmulni_intel nvme_core sha512_ssse3 video ucsi_acpi sha256_ssse3 rtsx_pci typec_ucsi sha1_ssse3 nvme_auth cec typec i2c_hid_acpi i2c_hid wmi pinctrl_tigerlake serio_raw ip6_tables ip_tables fuse
CPU: 2 UID: 0 PID: 13203 Comm: kworker/u32:54 Tainted: G        W          6.14.5-100.fc40.x86_64 #1
Tainted: [W]=WARN
Hardware name: LENOVO 20VE/LNVNB161216, BIOS F8CN35WW(V2.01) 03/03/2021
Workqueue: events_unbound cfg80211_wiphy_work [cfg80211]
RIP: 0010:iwl_mvm_sta_rx_agg+0x9b3/0xb40 [iwlmvm]
Code: e9 21 fd ff ff 79 cb 31 db e9 87 fa ff ff 0f 89 0d fd ff ff e9 7c fa ff ff 0f 0b 41 b9 ea ff ff ff e9 28 fa ff ff 0f 0b eb f1 <0f> 0b e9 f5 fe ff ff 48 8b 3f 48 c7 c6 ef 6a cd c1 e8 f7 4b 5f ff
RSP: 0000:ffffa08ec6807b80 EFLAGS: 00010286
RAX: ffff94c0c72e8000 RBX: ffff94bfcd118000 RCX: ffffa08ec6807b70
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffa08ec6807b20
RBP: ffffa08ec6807c40 R08: ffffffffc1ccded0 R09: 0000000000000000
R10: 0000000000000011 R11: ffff94c167946240 R12: ffff94bfea7f2008
R13: ffff94bfd4b2aaa0 R14: 0000000000000000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff94c167900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff1a646bd10 CR3: 000000011411c004 CR4: 0000000000f72ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? iwl_mvm_mac_ampdu_action+0xfe/0x270 [iwlmvm]
 iwl_mvm_mac_ampdu_action+0xfe/0x270 [iwlmvm]
 drv_ampdu_action+0xd8/0x190 [mac80211]
 __ieee80211_start_rx_ba_session+0x1c4/0x6a0 [mac80211]
 ieee80211_process_addba_request+0x9c/0xd0 [mac80211]
 ieee80211_iface_work+0x72/0x190 [mac80211]
 ? kmem_cache_free+0x3a5/0x450
 cfg80211_wiphy_work+0xf8/0x170 [cfg80211]
 process_one_work+0x176/0x330
 worker_thread+0x252/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xec/0x230
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>