Backtrace

WARNING: CPU: 2 PID: 4682 at net/mac80211/main.c:1715 ieee80211_free_ack_frame+0x44/0x50 [mac80211]
Modules linked in: rt2800usb rt2x00usb rt2800lib rt2x00lib uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables qrtr bnep snd_sof_pci_intel_icl snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel snd_sof_intel_hda_sdw_bpt snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda soundwire_cadence snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match snd_soc_acpi_intel_sdca_quirks soundwire_generic_allocation snd_soc_acpi sunrpc crc8 soundwire_bus snd_soc_sdca snd_soc_avs snd_soc_hda_codec snd_hda_ext_core snd_hda_codec_hdmi snd_hda_codec_conexant snd_soc_core snd_hda_codec_generic snd_compress ac97_bus snd_pcm_dmaengine x86_pkg_temp_thermal snd_hda_intel intel_powerclamp coretemp snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec
 rtw88_8821ce kvm_intel rtw88_8821c snd_hda_core spi_nor rtw88_pci snd_hwdep mtd snd_seq iTCO_wdt intel_pmc_bxt rtw88_core iTCO_vendor_support rtl8xxxu snd_seq_device mei_pxp intel_rapl_msr mei_hdcp kvm snd_pcm mac80211 irqbypass snd_timer btusb uvcvideo btrtl snd btintel vfat uvc spi_intel_pci fat btbcm libarc4 joydev intel_cstate soundcore btmtk spi_intel wmi_bmof pcspkr r8169 cfg80211 videobuf2_vmalloc processor_thermal_device_pci_legacy i2c_i801 bluetooth videobuf2_memops videobuf2_v4l2 i2c_smbus processor_thermal_device realtek processor_thermal_wt_hint processor_thermal_rfim videobuf2_common mei_me processor_thermal_rapl mei intel_rapl_common rfkill idma64 processor_thermal_wt_req processor_thermal_power_floor ov13858 processor_thermal_mbox int340x_thermal_zone v4l2_fwnode intel_soc_dts_iosf v4l2_async videodev soc_button_array mc hid_logitech_hidpp int3400_thermal intel_pmc_core acpi_thermal_rel pmt_telemetry pmt_class acpi_pad intel_vsec acpi_tad loop nfnetlink zram lz4hc_compress lz4_compress
 hid_logitech_dj i915 polyval_generic ghash_clmulni_intel i2c_algo_bit drm_buddy sha512_ssse3 sha256_ssse3 ttm spi_pxa2xx_platform sha1_ssse3 video dw_dmac drm_display_helper spi_pxa2xx_core cec wmi pinctrl_jasperlake i2c_dev fuse
CPU: 2 UID: 0 PID: 4682 Comm: kworker/2:0 Not tainted 6.15.6-200.fc42.x86_64 #1 PREEMPT(lazy) 
Hardware name: AMI Intel/Intel, BIOS V1.1_228 07/03/2023
Workqueue: usb_hub_wq hub_event
RIP: 0010:ieee80211_free_ack_frame+0x44/0x50 [mac80211]
Code: 00 31 ff e8 1e 92 53 c7 31 c0 48 83 c4 08 c3 cc cc cc cc 48 c7 c7 83 7d 4c c1 48 89 34 24 c6 05 09 fb 75 00 01 e8 cc 32 6f c6 <0f> 0b 48 8b 34 24 eb ca 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90
RSP: 0000:ffffd07dc80bfae8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000027
RDX: ffff8a68eff1cb88 RSI: 0000000000000001 RDI: ffff8a68eff1cb80
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffd07dc80bf8c8
R10: ffffffff8993bc48 R11: 00000000ffffdfff R12: ffffffffc0cd8680
R13: ffff8a667caddf80 R14: ffff8a6725beb938 R15: ffff8a6581740850
FS:  0000000000000000(0000) GS:ffff8a6965770000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005630f9edc0d0 CR3: 000000012d906000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 idr_for_each+0x6a/0xf0
 ieee80211_free_hw+0x32/0xd0 [mac80211]
 ? rt2x00queue_free+0x19/0x40 [rt2x00lib]
 rt2x00usb_disconnect+0x71/0xa0 [rt2x00usb]
 usb_unbind_interface+0x95/0x2b0
 device_release_driver_internal+0x19e/0x200
 bus_remove_device+0xc2/0x130
 device_del+0x160/0x3d0
 usb_disable_device+0xf4/0x280
 usb_disconnect+0xdf/0x2d0
 ? usb_control_msg+0x121/0x170
 hub_port_connect+0x7e/0x950
 ? port_event+0x313/0x7e0
 ? port_event+0x1d6/0x7e0
 hub_port_connect_change+0x97/0x2a0
 hub_event+0x16c/0x4d0
 ? __schedule+0x2fc/0x7a0
 process_one_work+0x18f/0x350
 worker_thread+0x25a/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xf9/0x240
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>