Backtrace

WARNING: CPU: 2 PID: 4816 at net/mac80211/main.c:1726 ieee80211_free_ack_frame+0x44/0x50 [mac80211]
Modules linked in: vfat fat uas usb_storage uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables sunrpc qrtr intel_rapl_msr intel_rapl_common binfmt_misc x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel rtw88_8822bu rtw88_usb snd_hda_codec_realtek rtw88_8822b rtw88_core snd_hda_codec_generic kvm snd_hda_codec_hdmi snd_hda_scodec_component iTCO_wdt mac80211 snd_hda_intel mei_hdcp intel_pmc_bxt at24 iTCO_vendor_support mei_pxp snd_intel_dspcfg snd_intel_sdw_acpi irqbypass snd_hda_codec rapl snd_hda_core snd_hwdep snd_seq libarc4 snd_seq_device intel_cstate snd_pcm pcspkr intel_uncore cfg80211 i2c_i801 alx snd_timer mdio snd i2c_smbus mei_me rfkill lpc_ich soundcore mei acpi_pad loop nfnetlink zram lz4hc_compress lz4_compress nouveau drm_ttm_helper ttm gpu_sched i2c_algo_bit drm_gpuvm
 drm_exec mxm_wmi drm_display_helper polyval_clmulni ghash_clmulni_intel sha512_ssse3 sha1_ssse3 cec intel_oc_wdt video wmi fuse
CPU: 2 UID: 0 PID: 4816 Comm: kworker/2:0 Not tainted 6.16.3-100.fc41.x86_64 #1 PREEMPT(lazy) 
Hardware name: MSI MS-7917/Z97 GAMING 5 (MS-7917), BIOS V1.8 11/06/2014
Workqueue: usb_hub_wq hub_event
RIP: 0010:ieee80211_free_ack_frame+0x44/0x50 [mac80211]
Code: 00 31 ff e8 fe 34 0d e8 31 c0 48 83 c4 08 c3 cc cc cc cc 48 c7 c7 1b 3e 01 c1 48 89 34 24 c6 05 09 92 27 00 01 e8 3c 9c 29 e7 <0f> 0b 48 8b 34 24 eb ca 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffd3b54ab27a78 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000027
RDX: ffff8b8c12d1cf88 RSI: 0000000000000001 RDI: ffff8b8c12d1cf80
RBP: ffffffffc0d0d660 R08: 0000000000000000 R09: 6b636120676e6964
R10: 6b636120676e6964 R11: 2173656d61726620 R12: 0000000080000000
R13: 0000000000000000 R14: ffff8b8a06501f80 R15: ffff8b8a0607eb88
FS:  0000000000000000(0000) GS:ffff8b8c678f2000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f97a470ec90 CR3: 000000016fca2003 CR4: 00000000001726f0
Call Trace:
 <TASK>
 idr_for_each+0x71/0xf0
 ieee80211_free_hw+0x33/0xc0 [mac80211]
 usb_unbind_interface+0xa2/0x2d0
 ? kernfs_remove_by_name_ns+0xb8/0xe0
 device_release_driver_internal+0x19c/0x200
 bus_remove_device+0xc6/0x130
 device_del+0x160/0x3e0
 usb_disable_device+0xfb/0x270
 usb_disconnect+0xe1/0x2c0
 hub_port_connect+0x8e/0x9a0
 hub_port_connect_change+0x95/0x2a0
 port_event+0x4bb/0x7d0
 hub_event+0x16e/0x470
 process_one_work+0x18d/0x340
 worker_thread+0x256/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xfc/0x240
 ? __pfx_kthread+0x10/0x10
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x155/0x180
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>