Backtrace

WARNING: CPU: 5 PID: 31009 at drivers/net/wireless/intel/iwlwifi/mvm/sta.c:2837 iwl_mvm_sta_rx_agg+0x927/0x970 [iwlmvm]
Modules linked in: ntfs3 uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep sunrpc snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_hda_dsp_common snd_soc_hdac_hdmi snd_sof_probes binfmt_misc vfat fat snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic ledtrig_audio snd_soc_dmic snd_sof_pci_intel_tgl snd_sof_intel_hda_common soundwire_intel soundwire_generic_allocation soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp iwlmvm snd_sof snd_sof_utils snd_soc_hdac_hda snd_hda_ext_core snd_soc_acpi_intel_match snd_soc_acpi soundwire_bus mac80211 snd_soc_core snd_compress ac97_bus snd_pcm_dmaengine x86_pkg_temp_thermal intel_powerclamp coretemp snd_hda_intel uvcvideo snd_intel_dspcfg snd_intel_sdw_acpi libarc4 iTCO_wdt kvm_intel snd_hda_codec
 mei_pxp uvc ee1004 mei_hdcp videobuf2_vmalloc intel_pmc_bxt snd_hda_core videobuf2_memops iTCO_vendor_support intel_rapl_msr hid_sensor_accel_3d snd_hwdep hid_sensor_trigger kvm videobuf2_v4l2 snd_seq btusb videobuf2_common btrtl iwlwifi btbcm hid_sensor_iio_common snd_seq_device videodev btintel snd_pcm irqbypass rapl processor_thermal_device_pci_legacy intel_cstate industrialio_triggered_buffer btmtk kfifo_buf think_lmi processor_thermal_device intel_uncore pcspkr bluetooth industrialio firmware_attributes_class cfg80211 mc mei_me snd_timer processor_thermal_rfim wmi_bmof ideapad_laptop processor_thermal_mbox snd processor_thermal_rapl i2c_i801 thunderbolt mei i2c_smbus sparse_keymap intel_rapl_common idma64 soundcore igen6_edac platform_profile intel_soc_dts_iosf int3403_thermal rfkill int340x_thermal_zone int3400_thermal soc_button_array acpi_thermal_rel acpi_pad joydev loop zram i915 i2c_algo_bit drm_buddy drm_display_helper nvme sdhci_pci nvme_core cqhci sdhci cec crct10dif_pclmul nvme_common
 ucsi_acpi hid_sensor_hub crc32_pclmul wacom hid_multitouch crc32c_intel typec_ucsi polyval_clmulni polyval_generic ghash_clmulni_intel mmc_core sha512_ssse3 typec ttm vmd i2c_hid_acpi i2c_hid video wmi pinctrl_tigerlake serio_raw ip6_tables ip_tables fuse
CPU: 5 PID: 31009 Comm: kworker/u16:5 Tainted: G        W          6.3.5-200.fc38.x86_64 #1
Hardware name: LENOVO 20WE/LNVNB161216, BIOS FNCN31WW(V2.01) 03/11/2021
Workqueue: phy0 ieee80211_iface_work [mac80211]
RIP: 0010:iwl_mvm_sta_rx_agg+0x927/0x970 [iwlmvm]
Code: fc ff ff 0f 0b 41 bc ea ff ff ff e9 67 fa ff ff 0f 0b 41 bc ea ff ff ff e9 5a fa ff ff 8b 44 24 34 89 44 24 3c e9 95 fb ff ff <0f> 0b e9 07 fe ff ff 48 8b 3f 48 c7 c6 f6 02 7c c1 41 bc e4 ff ff
RSP: 0018:ffffb2850bb2fbb0 EFLAGS: 00010286
RAX: ffff9387f2908000 RBX: 0000000000000000 RCX: 0000000000000004
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffb2850bb2fb58
RBP: ffff9385a6562088 R08: ffffffffc17b9568 R09: 0000000000000000
R10: ffff93859ee86ab0 R11: 0000000000000100 R12: 0000000000000000
R13: ffff938640ed0000 R14: 0000000000000004 R15: ffff938640ed5080
FS:  0000000000000000(0000) GS:ffff938920940000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000b6100798000 CR3: 0000000017022003 CR4: 0000000000f70ee0
PKRU: 55555554
Call Trace:
 <TASK>
 ? iwl_mvm_sta_rx_agg+0x927/0x970 [iwlmvm]
 ? __warn+0x81/0x130
 ? iwl_mvm_sta_rx_agg+0x927/0x970 [iwlmvm]
 ? report_bug+0x171/0x1a0
 ? handle_bug+0x3c/0x80
 ? exc_invalid_op+0x17/0x70
 ? asm_exc_invalid_op+0x1a/0x20
 ? iwl_mvm_sta_rx_agg+0x927/0x970 [iwlmvm]
 ? try_to_grab_pending+0xdf/0x170
 iwl_mvm_mac_ampdu_action+0xfa/0x400 [iwlmvm]
 ? dump_header+0x1b0/0x260
 drv_ampdu_action+0x79/0x170 [mac80211]
 ___ieee80211_start_rx_ba_session+0x1b2/0x690 [mac80211]
 ? update_load_avg+0x7e/0x780
 ieee80211_process_addba_request+0xba/0x170 [mac80211]
 ieee80211_iface_work+0x3b3/0x450 [mac80211]
 process_one_work+0x1c4/0x3d0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xdb/0x110
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x29/0x50
 </TASK>