Backtrace

WARNING: CPU: 6 PID: 12088 at net/mac80211/main.c:1726 ieee80211_free_ack_frame+0x44/0x50 [mac80211]
Modules linked in: rt2800usb rt2x00usb rt2800lib rt2x00lib uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables qrtr uhid bnep vfat fat snd_hda_codec_hdmi uvcvideo snd_ctl_led snd_hda_codec_idt snd_hda_codec_generic iwldvm snd_hda_intel uvc videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 snd_intel_dspcfg snd_intel_sdw_acpi mac80211 snd_hda_codec videobuf2_common libarc4 intel_rapl_msr videodev btusb intel_rapl_common btrtl snd_hda_core btintel mc snd_hwdep btbcm snd_seq snd_seq_device iTCO_wdt iwlwifi btmtk snd_pcm bluetooth x86_pkg_temp_thermal intel_powerclamp cfg80211 mei_pxp snd_timer intel_pmc_bxt coretemp snd hp_wmi mei_hdcp at24 iTCO_vendor_support rapl sparse_keymap intel_cstate platform_profile rfkill hp_accel soundcore intel_uncore pktcdvd joydev wmi_bmof mei_me i2c_i801
 wireless_hotkey lpc_ich lis3lv02d mei i2c_smbus pcspkr loop zram lz4hc_compress lz4_compress i915 nouveau drm_ttm_helper gpu_sched rtsx_pci_sdmmc drm_gpuvm mmc_core drm_exec drm_buddy i2c_algo_bit ttm polyval_clmulni drm_display_helper r8169 ghash_clmulni_intel sha512_ssse3 sha1_ssse3 rtsx_pci realtek cec intel_oc_wdt mxm_wmi video wmi serio_raw sunrpc iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi fuse i2c_dev nfnetlink
CPU: 6 UID: 0 PID: 12088 Comm: kworker/6:0 Tainted: G      D W           6.16.3-200.fc42.x86_64 #1 PREEMPT(lazy) 
Tainted: [D]=DIE, [W]=WARN
Hardware name: Hewlett-Packard HP ENVY dv6 Notebook PC/181E, BIOS F.2E 09/07/2016
Workqueue: usb_hub_wq hub_event
RIP: 0010:ieee80211_free_ack_frame+0x44/0x50 [mac80211]
Code: 00 31 ff e8 9e a3 91 d1 31 c0 48 83 c4 08 c3 cc cc cc cc 48 c7 c7 03 ef 7f c1 48 89 34 24 c6 05 29 cc 65 00 01 e8 8c 79 aa d0 <0f> 0b 48 8b 34 24 eb ca 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffd21f8f267ae8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000027
RDX: ffff8c63cf31cf88 RSI: 0000000000000001 RDI: ffff8c63cf31cf80
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffd21f8f267990
R10: ffffffff94139768 R11: 00000000ffffdfff R12: ffffffffc1113680
R13: ffff8c6140a1df80 R14: ffff8c613fe7b4a8 R15: ffff8c612f55a050
FS:  0000000000000000(0000) GS:ffff8c643a35f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd5ba52fee8 CR3: 00000001f122c001 CR4: 00000000001706f0
Call Trace:
 <TASK>
 idr_for_each+0x6d/0xf0
 ieee80211_free_hw+0x32/0xd0 [mac80211]
 ? rt2x00queue_free+0x19/0x40 [rt2x00lib]
 rt2x00usb_disconnect+0x71/0xa0 [rt2x00usb]
 usb_unbind_interface+0x98/0x2b0
 device_release_driver_internal+0x19e/0x200
 bus_remove_device+0xc2/0x130
 device_del+0x160/0x3d0
 usb_disable_device+0xf4/0x280
 usb_disconnect+0xdf/0x2d0
 ? usb_control_msg+0x121/0x170
 hub_port_connect+0x7e/0x950
 ? port_event+0x319/0x810
 ? port_event+0x1d9/0x810
 hub_port_connect_change+0x97/0x2a0
 hub_event+0x16c/0x4d0
 ? __schedule+0x301/0x7b0
 process_one_work+0x192/0x350
 worker_thread+0x25a/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xfc/0x240
 ? __pfx_kthread+0x10/0x10
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x152/0x180
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>