Backtrace

WARNING: CPU: 1 PID: 6928 at net/mac80211/main.c:1726 ieee80211_free_ack_frame+0x44/0x50 [mac80211]
Modules linked in: uas usb_storage overlay nvidia_uvm(OE) uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables qrtr binfmt_misc intel_rapl_msr intel_rapl_common intel_tcc_cooling rtw88_8822bu x86_pkg_temp_thermal rtw88_usb intel_powerclamp rtw88_8822b snd_soc_avs rtw88_core snd_soc_hda_codec snd_hda_ext_core coretemp snd_soc_core ucsi_ccg mac80211 kvm_intel snd_hda_codec_realtek snd_compress typec_ucsi nvidia_drm(OE) snd_hda_codec_generic ac97_bus snd_hda_codec_hdmi snd_hda_scodec_component snd_pcm_dmaengine typec kvm jc42 libarc4 snd_hda_intel thunderbolt nvidia_modeset(OE) ee1004 snd_intel_dspcfg iTCO_wdt mei_pxp snd_intel_sdw_acpi irqbypass cfg80211 intel_pmc_bxt eeepc_wmi iTCO_vendor_support mei_hdcp snd_hda_codec rapl asus_wmi snd_seq intel_cstate sparse_keymap snd_hda_core platform_profile
 vfat intel_wmi_thunderbolt pcspkr intel_uncore rfkill wmi_bmof snd_seq_device fat snd_hwdep i2c_i801 i2c_smbus nvidia(OE) mei_me snd_pcm mei snd_timer snd soundcore i2c_nvidia_gpu drm_ttm_helper intel_pmc_core ttm pmt_telemetry pmt_class intel_pmc_ssram_telemetry intel_vsec acpi_pad joydev ntsync loop zram lz4hc_compress lz4_compress polyval_clmulni ghash_clmulni_intel mxm_wmi sha512_ssse3 nvme e1000e sha1_ssse3 serio_raw video intel_oc_wdt wmi nvme_core nvme_keyring nvme_auth sunrpc iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi i2c_dev fuse nfnetlink
CPU: 1 UID: 0 PID: 6928 Comm: kworker/1:2 Tainted: G           OE       6.16.7-200.fc42.x86_64 #1 PREEMPT(lazy) 
Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
Hardware name: System manufacturer System Product Name/MAXIMUS VIII HERO, BIOS 3201 12/27/2016
Workqueue: usb_hub_wq hub_event
RIP: 0010:ieee80211_free_ack_frame+0x44/0x50 [mac80211]
Code: 00 31 ff e8 be 51 da f7 31 c0 48 83 c4 08 c3 cc cc cc cc 48 c7 c7 03 80 51 c2 48 89 34 24 c6 05 29 ec 1f 00 01 e8 cc 09 f3 f6 <0f> 0b 48 8b 34 24 eb ca 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffcdb0a2513ac0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000027
RDX: ffff8b04a6c9cf88 RSI: 0000000000000001 RDI: ffff8b04a6c9cf80
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffcdb0a2513968
R10: ffffffffbb739808 R11: 00000000ffffdfff R12: ffffffffc228a680
R13: ffff8b03501f1f80 R14: ffff8b02ace83260 R15: ffff8b0341b3c450
FS:  0000000000000000(0000) GS:ffff8b04ea6df000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffe4b75bf98 CR3: 00000001c842c005 CR4: 00000000003726f0
Call Trace:
 <TASK>
 idr_for_each+0x6a/0xf0
 ieee80211_free_hw+0x32/0xd0 [mac80211]
 usb_unbind_interface+0x95/0x2b0
 device_release_driver_internal+0x19e/0x200
 bus_remove_device+0xc2/0x130
 device_del+0x160/0x3d0
 usb_disable_device+0xf4/0x280
 usb_disconnect+0xdf/0x2d0
 usb_disconnect+0xc3/0x2d0
 ? hub_ext_port_status+0x89/0x170
 hub_port_connect+0x7e/0x950
 ? port_event+0x1d9/0x810
 hub_port_connect_change+0x97/0x2a0
 hub_event+0x16c/0x4d0
 ? __schedule+0x301/0x7b0
 process_one_work+0x18f/0x350
 worker_thread+0x25a/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xf9/0x240
 ? __pfx_kthread+0x10/0x10
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0xf1/0x110
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>