Backtrace

WARNING: CPU: 2 PID: 61 at net/mac80211/main.c:1419 ieee80211_free_ack_frame+0x31/0x40 [mac80211]
Modules linked in: uinput rfcomm snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep sunrpc vfat fat snd_sof_pci_intel_cnl snd_sof_intel_hda_common soundwire_intel soundwire_generic_allocation soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof soundwire_bus intel_rapl_msr intel_rapl_common snd_soc_skl intel_tcc_cooling x86_pkg_temp_thermal snd_soc_hdac_hda intel_powerclamp snd_hda_ext_core coretemp snd_soc_sst_ipc rt2800usb snd_soc_sst_dsp kvm_intel rt2x00usb snd_soc_acpi_intel_match snd_soc_acpi rt2800lib rt2x00lib snd_soc_core snd_hda_codec_realtek kvm snd_hda_codec_generic iTCO_wdt intel_pmc_bxt ledtrig_audio snd_hda_codec_hdmi snd_compress ac97_bus pktcdvd snd_pcm_dmaengine irqbypass mei_pxp mei_hdcp
 mac80211 btusb snd_hda_intel iTCO_vendor_support ee1004 rapl snd_intel_dspcfg snd_intel_sdw_acpi eeepc_wmi btrtl intel_cstate asus_wmi btbcm snd_hda_codec sparse_keymap libarc4 intel_uncore platform_profile i2c_i801 pcspkr wmi_bmof btintel snd_hda_core i2c_smbus cfg80211 bluetooth snd_hwdep snd_seq mei_me snd_seq_device mei snd_pcm ecdh_generic snd_timer snd joydev rfkill soundcore acpi_pad zram ip_tables nouveau drm_ttm_helper ttm i2c_algo_bit mxm_wmi drm_kms_helper cec crct10dif_pclmul crc32_pclmul drm crc32c_intel nvme ghash_clmulni_intel r8169 nvme_core wmi video ipmi_devintf ipmi_msghandler fuse
CPU: 2 PID: 61 Comm: kworker/2:1 Not tainted 5.16.5-200.fc35.x86_64 #1
Hardware name: System manufacturer System Product Name/PRIME B360-PLUS, BIOS 0602 03/23/2018
Workqueue: usb_hub_wq hub_event
RIP: 0010:ieee80211_free_ack_frame+0x31/0x40 [mac80211]
Code: 29 03 0e 00 00 55 48 89 f5 74 0c 48 89 ef e8 d6 62 e3 ee 31 c0 5d c3 48 c7 c7 5a 04 c9 c0 c6 05 09 03 0e 00 01 e8 ab cf 03 ef <0f> 0b 48 89 ef e8 b5 62 e3 ee 31 c0 5d c3 90 0f 1f 44 00 00 41 57
RSP: 0018:ffffb9bf40297b68 EFLAGS: 00010296
RAX: 0000000000000018 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffb0634c5d RDI: 00000000ffffffff
RBP: ffff8fce0b4e0100 R08: 0000000000000000 R09: ffffb9bf402979a8
R10: ffffb9bf402979a0 R11: ffffffffb0f462a8 R12: 0000000080000000
R13: 0000000000000000 R14: ffff8fce0360dfd8 R15: ffff8fce1a8b4708
FS:  0000000000000000(0000) GS:ffff8fd15dc80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f04c800d2e8 CR3: 000000011a3ea003 CR4: 00000000003706e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ? ieee80211_free_hw+0x90/0x90 [mac80211]
 idr_for_each+0x4e/0xc0
 ieee80211_free_hw+0x2f/0x90 [mac80211]
 rt2x00usb_disconnect+0x6d/0x90 [rt2x00usb]
 usb_unbind_interface+0x8a/0x270
 ? kernfs_find_ns+0x35/0xd0
 __device_release_driver+0x22d/0x240
 device_release_driver+0x24/0x30
 bus_remove_device+0xd8/0x140
 device_del+0x18b/0x400
 ? kobject_put+0x91/0x1d0
 usb_disable_device+0xc6/0x1e0
 usb_disconnect.cold+0x7b/0x24d
 hub_event+0xc04/0x17b0
 ? __schedule+0x2de/0x10b0
 ? _raw_spin_unlock_irqrestore+0x25/0x40
 process_one_work+0x1e8/0x3c0
 worker_thread+0x50/0x3b0
 ? rescuer_thread+0x350/0x350
 kthread+0x16b/0x190
 ? set_kthread_struct+0x40/0x40
 ret_from_fork+0x22/0x30
 </TASK>