Backtrace

WARNING: CPU: 6 PID: 148 at net/mac80211/main.c:1713 ieee80211_free_ack_frame+0x44/0x50 [mac80211]
Modules linked in: binfmt_misc snd_seq_dummy snd_hrtimer xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nf_nat_tftp nf_conntrack_tftp bridge stp llc nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_tables ebtable_nat ebtable_broute ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security ip_set ebtable_filter ebtables ip6table_filter ip6_tables iptable_filter ip_tables qrtr sunrpc rt2800usb rt2x00usb rt2800lib rt2x00lib mac80211 intel_powerclamp snd_hda_codec_realtek coretemp snd_hda_codec_generic kvm_intel snd_hda_scodec_component uvcvideo snd_hda_intel snd_intel_dspcfg uvc libarc4 videobuf2_vmalloc snd_intel_sdw_acpi videobuf2_memops snd_usb_audio snd_hda_codec kvm videobuf2_v4l2 snd_hda_core cfg80211 videobuf2_common snd_usbmidi_lib pktcdvd snd_ump snd_hwdep videodev
 iTCO_wdt snd_seq snd_rawmidi intel_pmc_bxt gpio_ich iTCO_vendor_support mc snd_seq_device irqbypass snd_pcm snd_timer hp_wmi intel_cstate sparse_keymap snd tg3 intel_uncore platform_profile usblp rfkill pcspkr wmi_bmof acpi_cpufreq soundcore i7core_edac lpc_ich squashfs loop dm_multipath nfnetlink nouveau drm_ttm_helper ttm video gpu_sched i2c_algo_bit polyval_generic drm_gpuvm ghash_clmulni_intel firewire_ohci sha512_ssse3 drm_exec mxm_wmi sha256_ssse3 drm_display_helper firewire_core sha1_ssse3 serio_raw crc_itu_t cec wmi scsi_dh_rdac scsi_dh_emc scsi_dh_alua fuse
CPU: 6 UID: 0 PID: 148 Comm: kworker/6:2 Tainted: G          I        6.14.5-100.fc40.x86_64 #1
Tainted: [I]=FIRMWARE_WORKAROUND
Hardware name: Hewlett-Packard HP Z400 Workstation/0B4Ch, BIOS 786G3 v03.61 03/05/2018
Workqueue: usb_hub_wq hub_event
RIP: 0010:ieee80211_free_ack_frame+0x44/0x50 [mac80211]
Code: 00 31 ff e8 7e 8f 0e f2 31 c0 48 83 c4 08 c3 cc cc cc cc 48 c7 c7 c3 d8 22 c1 48 89 34 24 c6 05 f9 af 0e 00 01 e8 cc 26 30 f1 <0f> 0b 48 8b 34 24 eb ca 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffb9d9c049ba48 EFLAGS: 00010286
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000027
RDX: ffff94d713b21948 RSI: 0000000000000001 RDI: ffff94d713b21940
RBP: ffffffffc10b43f0 R08: 0000000000000000 R09: 6b636120676e6964
R10: 6b636120676e6964 R11: 2173656d61726620 R12: 0000000080000000
R13: 0000000000000000 R14: ffff94d503c29f80 R15: ffff94d525151270
FS:  0000000000000000(0000) GS:ffff94d713b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f277ad66758 CR3: 00000001d382c003 CR4: 00000000000226f0
Call Trace:
 <TASK>
 idr_for_each+0x72/0xf0
 ieee80211_free_hw+0x33/0xc0 [mac80211]
 rt2x00usb_disconnect+0x71/0xa0 [rt2x00usb]
 usb_unbind_interface+0x98/0x2d0
 device_release_driver_internal+0x19c/0x200
 bus_remove_device+0xc6/0x130
 device_del+0x161/0x3e0
 usb_disable_device+0xf6/0x270
 usb_disconnect+0xe6/0x2e0
 hub_port_connect+0x8a/0x9d0
 hub_port_connect_change+0x94/0x280
 port_event+0x4ad/0x7c0
 hub_event+0x16f/0x470
 process_one_work+0x179/0x330
 worker_thread+0x252/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xef/0x230
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>