Backtrace

WARNING: CPU: 3 PID: 5295 at net/mac80211/main.c:1713 ieee80211_free_ack_frame+0x44/0x50 [mac80211]
Modules linked in: uinput hid_apple rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr sunrpc uhid bnep snd_hda_codec_hdmi snd_soc_avs snd_soc_hda_codec snd_hda_codec_realtek intel_rapl_msr snd_hda_ext_core intel_rapl_common snd_hda_codec_generic snd_soc_core rt2800usb snd_hda_scodec_component rt2x00usb rt2800lib intel_tcc_cooling snd_compress ac97_bus x86_pkg_temp_thermal snd_pcm_dmaengine intel_powerclamp rt2x00lib coretemp snd_hda_intel vfat snd_intel_dspcfg fat kvm_intel iTCO_wdt snd_intel_sdw_acpi mac80211 mei_pxp mei_wdt snd_hda_codec mei_hdcp intel_pmc_bxt iTCO_vendor_support ee1004 kvm snd_hda_core snd_hwdep btusb btrtl snd_seq btintel irqbypass btbcm libarc4 btmtk rapl snd_seq_device intel_cstate cfg80211 bluetooth snd_pcm intel_uncore snd_timer i2c_i801 ses snd pcspkr e1000e
 enclosure i2c_smbus scsi_transport_sas soundcore mei_me pktcdvd rfkill mei intel_pch_thermal intel_pmc_core pmt_telemetry fujitsu_laptop pmt_class sparse_keymap intel_vsec acpi_pad joydev loop nfnetlink zram lz4hc_compress lz4_compress hid_logitech_hidpp uas usb_storage i915 hid_logitech_dj i2c_algo_bit drm_buddy ttm polyval_clmulni polyval_generic ghash_clmulni_intel drm_display_helper sha512_ssse3 sha256_ssse3 sha1_ssse3 cec video wmi fuse
CPU: 3 UID: 0 PID: 5295 Comm: kworker/3:0 Tainted: G          I        6.14.6-300.fc42.x86_64 #1
Tainted: [I]=FIRMWARE_WORKAROUND
Hardware name: FUJITSU ESPRIMO_D956/D3432-A1, BIOS V5.0.0.11 R1.8.0 for D3432-A1x                     11/17/2015
Workqueue: usb_hub_wq hub_event
RIP: 0010:ieee80211_free_ack_frame+0x44/0x50 [mac80211]
Code: 00 31 ff e8 6e f6 fa e7 31 c0 48 83 c4 08 c3 cc cc cc cc 48 c7 c7 4b 49 3b c1 48 89 34 24 c6 05 69 4a 0f 00 01 e8 7c 73 19 e7 <0f> 0b 48 8b 34 24 eb ca 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffa9c0cc993ad8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000027
RDX: ffff91975d3a1948 RSI: 0000000000000001 RDI: ffff91975d3a1940
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffa9c0cc993980
R10: ffffffffaa936868 R11: 00000000ffffdfff R12: ffffffffc1231400
R13: ffff919347201f80 R14: ffff919369b06dd0 R15: ffff91934429d050
FS:  0000000000000000(0000) GS:ffff91975d380000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555902895f08 CR3: 000000009582c001 CR4: 00000000003726f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 idr_for_each+0x6b/0xf0
 ieee80211_free_hw+0x32/0xd0 [mac80211]
 ? rt2x00queue_free+0x19/0x40 [rt2x00lib]
 rt2x00usb_disconnect+0x71/0xa0 [rt2x00usb]
 usb_unbind_interface+0x95/0x2c0
 device_release_driver_internal+0x19e/0x200
 bus_remove_device+0xc2/0x130
 device_del+0x161/0x3d0
 usb_disable_device+0xeb/0x270
 usb_disconnect+0xe6/0x2e0
 hub_port_connect+0x7f/0x990
 ? port_event+0x316/0x7f0
 hub_port_connect_change+0x92/0x280
 hub_event+0x16d/0x4d0
 ? __schedule+0x2be/0x620
 process_one_work+0x17b/0x340
 worker_thread+0x255/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xec/0x230
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>