Backtrace

WARNING: CPU: 6 PID: 46730 at drivers/net/wireless/intel/iwlwifi/mvm/sta.c:2990 iwl_mvm_sta_rx_agg+0x9a3/0xb30 [iwlmvm]
Modules linked in: uinput squashfs snd_seq_dummy rfcomm snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr bnep binfmt_misc snd_hda_codec_intelhdmi snd_hda_codec_alc269 snd_hda_scodec_component snd_hda_codec_realtek_lib snd_hda_codec_generic snd_hda_intel snd_sof_pci_intel_tgl snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel snd_sof_intel_hda_sdw_bpt snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_hda_codec_hdmi soundwire_cadence snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match snd_soc_acpi_intel_sdca_quirks soundwire_generic_allocation vfat snd_soc_acpi crc8 fat soundwire_bus snd_soc_sdca snd_soc_avs snd_soc_hda_codec intel_uncore_frequency snd_hda_ext_core intel_uncore_frequency_common snd_hda_codec snd_hda_core
 snd_intel_dspcfg iwlmvm x86_pkg_temp_thermal snd_usb_audio snd_intel_sdw_acpi intel_powerclamp snd_soc_core coretemp snd_usbmidi_lib processor_thermal_device_pci snd_hwdep kvm_intel snd_compress uvcvideo mac80211 processor_thermal_device snd_ump ac97_bus processor_thermal_wt_hint btusb uvc snd_rawmidi snd_pcm_dmaengine kvm platform_temperature_control btrtl videobuf2_vmalloc snd_seq libarc4 processor_thermal_rfim btintel videobuf2_memops iTCO_wdt snd_seq_device irqbypass intel_rapl_msr processor_thermal_rapl btbcm spi_nor videobuf2_v4l2 iwlwifi intel_pmc_bxt rapl snd_pcm intel_rapl_common intel_pmc_core btmtk mei_hdcp mei_pxp mtd videobuf2_common ee1004 iTCO_vendor_support intel_cstate snd_timer processor_thermal_wt_req r8169 pmt_telemetry cfg80211 bluetooth spi_intel_pci mei_me videodev i2c_i801 snd intel_uncore processor_thermal_power_floor pmt_discovery pcspkr wmi_bmof realtek spi_intel mei i2c_smbus idma64 mc rfkill intel_hid int3403_thermal soundcore processor_thermal_mbox pmt_class int3400_thermal
 joydev sparse_keymap int340x_thermal_zone intel_pmc_ssram_telemetry acpi_thermal_rel acpi_pad acpi_tad auth_rpcgss sunrpc loop nfnetlink zram lz4hc_compress lz4_compress xe drm_ttm_helper drm_suballoc_helper gpu_sched drm_gpuvm drm_exec hid_plantronics nvme nvme_core nvme_keyring nvme_auth i915 i2c_algo_bit drm_buddy ttm spi_pxa2xx_platform polyval_clmulni drm_display_helper dw_dmac ghash_clmulni_intel spi_pxa2xx_core video vmd intel_vsec cec intel_oc_wdt wmi pinctrl_tigerlake serio_raw i2c_dev fuse
CPU: 6 UID: 0 PID: 46730 Comm: kworker/u48:27 Not tainted 6.17.10-100.fc41.x86_64 #1 PREEMPT(lazy) 
Hardware name: LENOVO F0GG002WID/3758, BIOS O5NKT36A 07/03/2024
Workqueue: events_unbound cfg80211_wiphy_work [cfg80211]
RIP: 0010:iwl_mvm_sta_rx_agg+0x9a3/0xb30 [iwlmvm]
Code: e9 21 fd ff ff 79 cb 31 db e9 93 fa ff ff 0f 89 0d fd ff ff e9 88 fa ff ff 0f 0b 41 b9 ea ff ff ff e9 35 fa ff ff 0f 0b eb f1 <0f> 0b e9 f5 fe ff ff 48 8b 3f 48 c7 c6 5e a6 08 c2 e8 07 16 97 ff
RSP: 0018:ffffd06d056a7b80 EFLAGS: 00010286
RAX: ffff88ef0a570000 RBX: ffff88ef0a378000 RCX: ffffd06d056a7b70
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffd06d056a7b20
RBP: ffffd06d056a7c40 R08: ffffffffc2081be8 R09: 0000000000000000
R10: 0000000000000012 R11: ffff88f2a031ce40 R12: ffff88ef0f402028
R13: ffff88efdd108ae0 R14: 0000000000000000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff88f2e96d6000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000f85f8aa000 CR3: 0000000177a2c003 CR4: 0000000000f72ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __dynamic_pr_debug+0x15c/0x190
 ? iwl_mvm_mac_ampdu_action+0xfe/0x270 [iwlmvm]
 iwl_mvm_mac_ampdu_action+0xfe/0x270 [iwlmvm]
 ? __slab_free+0xb0/0x2b0
 drv_ampdu_action+0xd8/0x190 [mac80211]
 __ieee80211_start_rx_ba_session+0x1d8/0x740 [mac80211]
 ieee80211_process_addba_request+0x9b/0xe0 [mac80211]
 ieee80211_iface_work+0x72/0x190 [mac80211]
 cfg80211_wiphy_work+0xb7/0x190 [cfg80211]
 process_one_work+0x18a/0x340
 worker_thread+0x256/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xf9/0x240
 ? __pfx_kthread+0x10/0x10
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0xf2/0x110
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>