Backtrace

WARNING: CPU: 4 PID: 1327149 at net/mac80211/main.c:1726 ieee80211_free_ack_frame+0x44/0x50 [mac80211]
Modules linked in: mt76x2u mt76x2_common mt76x02_usb mt76_usb mt76x02_lib mt76 dm_crypt ses enclosure scsi_transport_sas uas usb_storage uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netlink xt_nat veth xt_conntrack xt_MASQUERADE bridge stp llc xt_set xt_addrtype nft_compat nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 overlay nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr bnep sunrpc binfmt_misc vfat fat squashfs snd_sof_pci_intel_tgl snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel intel_rapl_msr intel_rapl_common snd_sof_intel_hda_sdw_bpt intel_uncore_frequency snd_sof_intel_hda_common intel_uncore_frequency_common intel_pmc_core pmt_telemetry snd_soc_hdac_hda pmt_class snd_sof_intel_hda_mlink intel_pmc_ssram_telemetry snd_sof_intel_hda soundwire_cadence snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match
 snd_soc_acpi_intel_sdca_quirks soundwire_generic_allocation snd_soc_acpi crc8 soundwire_bus snd_soc_sdca snd_soc_avs x86_pkg_temp_thermal rtw88_8822bu snd_soc_hda_codec intel_powerclamp rtw88_usb coretemp snd_hda_ext_core rtw88_8822b snd_soc_core kvm_intel rtw88_core snd_hda_codec_realtek snd_compress ac97_bus nvidia_drm(OE) nvidia_modeset(OE) snd_hda_codec_generic snd_pcm_dmaengine snd_hda_scodec_component snd_hda_codec_hdmi mac80211 kvm snd_hda_intel nvidia_uvm(OE) snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec btusb btrtl snd_hda_core btintel snd_hwdep btbcm snd_seq btmtk hp_wmi libarc4 iTCO_wdt irqbypass spi_nor snd_seq_device rapl sparse_keymap intel_pmc_bxt bluetooth cfg80211 snd_pcm mei_hdcp mei_wdt mei_pxp intel_cstate platform_profile mtd spd5118 iTCO_vendor_support snd_timer nvidia(OE) intel_uncore joydev rfkill wmi_bmof mei_me e1000e i2c_i801 snd pcspkr spi_intel_pci mei soundcore spi_intel i2c_smbus acpi_pad acpi_tad loop nfnetlink zram lz4hc_compress lz4_compress xe intel_vsec
 drm_ttm_helper drm_suballoc_helper gpu_sched drm_gpuvm drm_exec drm_gpusvm i915 i2c_algo_bit drm_buddy ucsi_acpi ttm typec_ucsi typec nvme drm_display_helper thunderbolt nvme_core polyval_clmulni ghash_clmulni_intel sha512_ssse3 sha1_ssse3 cec serio_raw nvme_keyring nvme_auth video wmi intel_oc_wdt fuse
CPU: 4 UID: 0 PID: 1327149 Comm: kworker/4:2 Tainted: G           OE       6.16.7-100.fc41.x86_64 #1 PREEMPT(lazy) 
Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
Hardware name: HP HP Z1 G9 Tower Desktop PC/894D, BIOS U01 Ver. 02.17.00 12/31/2024
Workqueue: usb_hub_wq hub_event
RIP: 0010:ieee80211_free_ack_frame+0x44/0x50 [mac80211]
Code: 00 31 ff e8 fe e0 35 f3 31 c0 48 83 c4 08 c3 cc cc cc cc 48 c7 c7 1b df f6 c2 48 89 34 24 c6 05 09 b2 25 00 01 e8 7c 2c 52 f2 <0f> 0b 48 8b 34 24 eb ca 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffcd962ad77a78 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000027
RDX: ffff8c13bf01cf88 RSI: 0000000000000001 RDI: ffff8c13bf01cf80
RBP: ffffffffc2c85660 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000080000000
R13: 0000000000000000 R14: ffff8c0901271f80 R15: ffff8c0c1c8034a8
FS:  0000000000000000(0000) GS:ffff8c14069f0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7fbc02c1f8 CR3: 000000090d42c002 CR4: 0000000000f72ef0
PKRU: 55555554
Call Trace:
 <TASK>
 idr_for_each+0x6e/0xf0
 ieee80211_free_hw+0x33/0xc0 [mac80211]
 usb_unbind_interface+0x9f/0x2d0
 ? kernfs_remove_by_name_ns+0xb8/0xe0
 device_release_driver_internal+0x19c/0x200
 bus_remove_device+0xc6/0x130
 device_del+0x160/0x3e0
 usb_disable_device+0xfb/0x270
 usb_disconnect+0xe1/0x2c0
 hub_port_connect+0x8e/0x9a0
 hub_port_connect_change+0x95/0x2a0
 port_event+0x4bb/0x7d0
 hub_event+0x16e/0x470
 process_one_work+0x18a/0x340
 worker_thread+0x256/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xf9/0x240
 ? __pfx_kthread+0x10/0x10
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0xf2/0x110
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>