Backtrace

WARNING: CPU: 6 PID: 165 at drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c:6457 iwl_mvm_sync_rx_queues_internal+0x2b4/0x2c0 [iwlmvm]
Modules linked in: uinput snd_seq_dummy rfcomm snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr bnep snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_soc_intel_hda_dsp_common snd_sof_probes snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_tgl snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_hda_codec_hdmi snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match snd_soc_acpi_intel_sdca_quirks iwlmvm sunrpc soundwire_generic_allocation snd_soc_acpi soundwire_bus snd_soc_sdca snd_soc_avs intel_uncore_frequency snd_soc_hda_codec intel_uncore_frequency_common snd_hda_ext_core mac80211 snd_soc_core
 x86_pkg_temp_thermal intel_powerclamp binfmt_misc coretemp snd_compress ac97_bus snd_pcm_dmaengine kvm_intel snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi vfat libarc4 snd_hda_codec fat btusb snd_hda_core kvm btrtl snd_hwdep iwlwifi btintel snd_seq iTCO_wdt btbcm spi_nor snd_seq_device intel_pmc_bxt mei_hdcp mei_pxp btmtk processor_thermal_device_pci_legacy mtd intel_rapl_msr iTCO_vendor_support irqbypass snd_pcm cfg80211 bluetooth processor_thermal_device processor_thermal_wt_hint rapl processor_thermal_rfim snd_timer hp_wmi intel_cstate processor_thermal_rapl intel_rapl_common intel_uncore platform_profile snd mei_me processor_thermal_wt_req pcspkr wmi_bmof spi_intel_pci processor_thermal_power_floor i2c_i801 soundcore thunderbolt spi_intel idma64 processor_thermal_mbox i2c_smbus mei rfkill intel_soc_dts_iosf igen6_edac int3403_thermal int340x_thermal_zone intel_pmc_core int3400_thermal pmt_telemetry intel_hid acpi_thermal_rel pmt_class acpi_pad sparse_keymap soc_button_array joydev squashfs loop
 nfnetlink zram lz4hc_compress lz4_compress xe drm_ttm_helper intel_vsec gpu_sched drm_suballoc_helper drm_gpuvm drm_exec i915 polyval_clmulni nvme polyval_generic rtsx_pci_sdmmc i2c_algo_bit nvme_core ghash_clmulni_intel drm_buddy mmc_core sha512_ssse3 nvme_auth hid_multitouch ttm video sha256_ssse3 ucsi_acpi spi_pxa2xx_platform drm_display_helper dw_dmac sha1_ssse3 typec_ucsi i2c_hid_acpi rtsx_pci spi_pxa2xx_core cec vmd typec i2c_hid wmi pinctrl_tigerlake serio_raw ip6_tables ip_tables fuse
CPU: 6 UID: 0 PID: 165 Comm: kworker/u32:4 Tainted: G        W          6.14.5-100.fc40.x86_64 #1
Tainted: [W]=WARN
Hardware name: HP HP ENVY Laptop 13-ba1xxx/8820, BIOS F.44 07/18/2025
Workqueue: events_unbound cfg80211_wiphy_work [cfg80211]
RIP: 0010:iwl_mvm_sync_rx_queues_internal+0x2b4/0x2c0 [iwlmvm]
Code: 07 07 00 00 0f 85 d1 fe ff ff 8b 93 e8 00 00 00 48 8b b3 f0 00 00 00 48 c7 c7 c0 d2 e5 c1 c6 05 f8 06 07 00 01 e8 4c 79 5f c1 <0f> 0b e9 aa fe ff ff e8 e0 00 6c c2 90 90 90 90 90 90 90 90 90 90
RSP: 0000:ffffa6b3405f7b10 EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffff98b12b99a008 RCX: 0000000000000027
RDX: ffff98b4a0521948 RSI: 0000000000000001 RDI: ffff98b4a0521940
RBP: ffffa6b3405f7bc0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000004 R12: 0000000000000000
R13: ffffa6b3405f7b20 R14: ffff98b12b99c178 R15: 0000000000000005
FS:  0000000000000000(0000) GS:ffff98b4a0500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00003a04008a9000 CR3: 000000012dacf001 CR4: 0000000000f72ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __pfx_autoremove_wake_function+0x10/0x10
 iwl_mvm_sta_rx_agg+0x2ed/0xb40 [iwlmvm]
 ? psi_group_change+0x1c6/0x4b0
 ? iwl_mvm_mac_ampdu_action+0x1e4/0x270 [iwlmvm]
 ? iwl_mvm_mac_ampdu_action+0x74/0x270 [iwlmvm]
 iwl_mvm_mac_ampdu_action+0x1e4/0x270 [iwlmvm]
 ? task_numa_placement+0x4a0/0x4c0
 drv_ampdu_action+0xd8/0x190 [mac80211]
 __ieee80211_stop_rx_ba_session+0xd6/0x1d0 [mac80211]
 ieee80211_ba_session_work+0x236/0x3e0 [mac80211]
 ? finish_task_switch.isra.0+0x99/0x2c0
 cfg80211_wiphy_work+0xf8/0x170 [cfg80211]
 process_one_work+0x176/0x330
 worker_thread+0x252/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xec/0x230
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>