Backtrace

WARNING: CPU: 3 PID: 12929 at drivers/net/wireless/intel/iwlwifi/mvm/sta.c:2837 iwl_mvm_sta_rx_agg+0x927/0x970 [iwlmvm]
Modules linked in: rfcomm snd_seq_dummy snd_hrtimer ip6table_nat tun r8153_ecm cdc_ether usbnet r8152 mii nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct bnep nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables btusb uvcvideo btrtl btbcm btintel uvc videobuf2_vmalloc btmtk videobuf2_memops nfnetlink videobuf2_v4l2 videobuf2_common bluetooth videodev mc qrtr sunrpc binfmt_misc vfat fat snd_sof_pci_intel_tgl snd_sof_intel_hda_common iwlmvm soundwire_intel soundwire_generic_allocation soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof mac80211 snd_sof_utils snd_soc_hdac_hda snd_hda_ext_core snd_hda_codec_hdmi snd_soc_acpi_intel_match x86_pkg_temp_thermal intel_powerclamp snd_soc_acpi coretemp soundwire_bus kvm_intel snd_soc_core snd_hda_codec_idt snd_hda_codec_generic libarc4 snd_compress ledtrig_audio ac97_bus kvm snd_pcm_dmaengine snd_hda_intel
 snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec iwlwifi snd_hda_core snd_hwdep cros_usbpd_charger irqbypass cros_usbpd_notify cros_usbpd_logger cros_ec_sysfs cros_ec_chardev snd_seq rapl intel_cstate cros_ec_dev iTCO_wdt snd_seq_device mei_hdcp mei_wdt mei_pxp hid_sensor_als intel_pmc_bxt pmt_telemetry cros_ec_lpcs hid_sensor_trigger ee1004 iTCO_vendor_support pmt_class intel_rapl_msr cros_ec snd_pcm cfg80211 hid_sensor_iio_common intel_uncore processor_thermal_device_pci industrialio_triggered_buffer mei_me wmi_bmof snd_timer processor_thermal_device kfifo_buf pcspkr processor_thermal_rfim snd i2c_i801 processor_thermal_mbox industrialio thunderbolt rfkill mei processor_thermal_rapl i2c_smbus soundcore intel_vsec idma64 intel_rapl_common igen6_edac int3403_thermal int340x_thermal_zone int3400_thermal acpi_pad acpi_thermal_rel joydev loop zram i915 i2c_algo_bit drm_buddy nvme drm_display_helper nvme_core crct10dif_pclmul cec crc32_pclmul crc32c_intel polyval_clmulni ucsi_acpi polyval_generic
 hid_multitouch hid_sensor_hub ghash_clmulni_intel typec_ucsi sha512_ssse3 ttm nvme_common typec i2c_hid_acpi video i2c_hid wmi pinctrl_tigerlake serio_raw ip6_tables ip_tables fuse
CPU: 3 PID: 12929 Comm: kworker/u32:36 Tainted: G        W          6.3.5-200.fc38.x86_64 #1
Hardware name: Framework Laptop (12th Gen Intel Core)/FRANMACP04, BIOS 03.04 07/15/2022
Workqueue: phy0 ieee80211_iface_work [mac80211]
RIP: 0010:iwl_mvm_sta_rx_agg+0x927/0x970 [iwlmvm]
Code: fc ff ff 0f 0b 41 bc ea ff ff ff e9 67 fa ff ff 0f 0b 41 bc ea ff ff ff e9 5a fa ff ff 8b 44 24 34 89 44 24 3c e9 95 fb ff ff <0f> 0b e9 07 fe ff ff 48 8b 3f 48 c7 c6 f6 02 5b c1 41 bc e4 ff ff
RSP: 0018:ffffb5e38914fbb0 EFLAGS: 00010286
RAX: ffff9d125fbe0000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffb5e38914fb58
RBP: ffff9d10f6322088 R08: ffffffffc15a9568 R09: 0000000000000000
R10: ffff9d10d5ddcab0 R11: 0000000000000100 R12: 0000000000000000
R13: ffff9d113b6d0000 R14: 0000000000000000 R15: ffff9d113b6d8080
FS:  0000000000000000(0000) GS:ffff9d184f8c0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055d724b09d38 CR3: 00000005f3022000 CR4: 0000000000f50ee0
PKRU: 55555554
Call Trace:
 <TASK>
 ? iwl_mvm_sta_rx_agg+0x927/0x970 [iwlmvm]
 ? __warn+0x81/0x130
 ? iwl_mvm_sta_rx_agg+0x927/0x970 [iwlmvm]
 ? report_bug+0x171/0x1a0
 ? handle_bug+0x3c/0x80
 ? exc_invalid_op+0x17/0x70
 ? asm_exc_invalid_op+0x1a/0x20
 ? iwl_mvm_sta_rx_agg+0x927/0x970 [iwlmvm]
 ? try_to_grab_pending+0xdf/0x170
 iwl_mvm_mac_ampdu_action+0xfa/0x400 [iwlmvm]
 drv_ampdu_action+0x79/0x170 [mac80211]
 ___ieee80211_start_rx_ba_session+0x1b2/0x690 [mac80211]
 ? update_load_avg+0x7e/0x780
 ? _atomic_dec_and_lock_irqsave+0x3f/0x60
 ieee80211_process_addba_request+0xba/0x170 [mac80211]
 ieee80211_iface_work+0x3b3/0x450 [mac80211]
 process_one_work+0x1c4/0x3d0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xdb/0x110
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x29/0x50
 </TASK>