Backtrace

WARNING: CPU: 5 PID: 27708 at net/mac80211/main.c:1726 ieee80211_free_ack_frame+0x44/0x50 [mac80211]
Modules linked in: hid_playstation ff_memless led_class_multicolor uinput rfcomm snd_seq_dummy snd_hrtimer nvidia_drm(POE) nvidia_modeset(POE) nvidia_uvm(POE) nvidia(POE) drm_ttm_helper ttm nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables qrtr uhid bnep binfmt_misc rtw88_8822bu rtw88_usb rtw88_8822b rtw88_core snd_soc_avs intel_rapl_msr intel_rapl_common snd_soc_hda_codec intel_uncore_frequency snd_hda_ext_core intel_uncore_frequency_common mac80211 snd_soc_core snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component btusb snd_compress intel_tcc_cooling snd_hda_codec_hdmi ac97_bus btrtl x86_pkg_temp_thermal snd_pcm_dmaengine intel_powerclamp btintel snd_hda_intel btbcm coretemp snd_intel_dspcfg btmtk snd_intel_sdw_acpi libarc4 iTCO_wdt kvm_intel snd_hda_codec vfat intel_pmc_bxt ee1004 mei_hdcp mei_pxp
 snd_usb_audio iTCO_vendor_support cfg80211 bluetooth snd_hda_core kvm fat snd_usbmidi_lib snd_hwdep mc snd_seq snd_ump rfkill snd_rawmidi irqbypass snd_seq_device rapl snd_pcm intel_cstate intel_uncore snd_timer pcspkr snd mei_me soundcore i2c_i801 joydev i2c_smbus mei intel_pmc_core pmt_telemetry pmt_class intel_pmc_ssram_telemetry intel_vsec acpi_pad loop zram lz4hc_compress lz4_compress hid_logitech_hidpp uas usb_storage hid_logitech_dj polyval_clmulni ghash_clmulni_intel r8169 sha512_ssse3 intel_oc_wdt realtek sha1_ssse3 video wmi sunrpc iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi i2c_dev fuse nfnetlink
CPU: 5 UID: 0 PID: 27708 Comm: kworker/5:0 Tainted: P           OE       6.16.7-200.fc42.x86_64 #1 PREEMPT(lazy) 
Tainted: [P]=PROPRIETARY_MODULE, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./H310CM-HDV, BIOS P4.20 05/14/2019
Workqueue: usb_hub_wq hub_event
RIP: 0010:ieee80211_free_ack_frame+0x44/0x50 [mac80211]
Code: 00 31 ff e8 be 41 80 cb 31 c0 48 83 c4 08 c3 cc cc cc cc 48 c7 c7 03 50 41 c1 48 89 34 24 c6 05 29 2c f5 ff 01 e8 cc f9 98 ca <0f> 0b 48 8b 34 24 eb ca 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90
RSP: 0000:ffffcfd88ffa3b08 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000027
RDX: ffff8a249ec9cf88 RSI: 0000000000000001 RDI: ffff8a249ec9cf80
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffcfd88ffa39b0
R10: ffffffff8e139808 R11: 00000000ffffdfff R12: ffffffffc122b680
R13: ffff8a2148cc1f80 R14: ffff8a216365b018 R15: ffff8a2155308450
FS:  0000000000000000(0000) GS:ffff8a250fcdf000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000564897820db0 CR3: 000000014a69c002 CR4: 00000000003726f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 idr_for_each+0x6a/0xf0
 ieee80211_free_hw+0x32/0xd0 [mac80211]
 usb_unbind_interface+0x95/0x2b0
 device_release_driver_internal+0x19e/0x200
 bus_remove_device+0xc2/0x130
 device_del+0x160/0x3d0
 usb_disable_device+0xf4/0x280
 usb_disconnect+0xdf/0x2d0
 ? hub_ext_port_status+0x89/0x170
 hub_port_connect+0x7e/0x950
 ? port_event+0x1d9/0x810
 hub_port_connect_change+0x97/0x2a0
 hub_event+0x16c/0x4d0
 ? __schedule+0x301/0x7b0
 process_one_work+0x18f/0x350
 worker_thread+0x25a/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xf9/0x240
 ? __pfx_kthread+0x10/0x10
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0xf1/0x110
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>