Backtrace

WARNING: CPU: 2 PID: 70 at net/mac80211/main.c:1715 ieee80211_free_ack_frame+0x44/0x50 [mac80211]
Modules linked in: nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables qrtr sunrpc binfmt_misc intel_rapl_msr intel_rapl_common rtw88_8822bu x86_pkg_temp_thermal rtw88_usb intel_powerclamp rtw88_8822b coretemp rtw88_core kvm_intel squashfs mac80211 iTCO_wdt at24 snd_hda_codec_realtek kvm snd_hda_codec_hdmi mei_pxp intel_pmc_bxt snd_hda_codec_generic iTCO_vendor_support mei_hdcp snd_hda_scodec_component libarc4 snd_usb_audio snd_hda_intel irqbypass snd_intel_dspcfg rapl snd_usbmidi_lib snd_intel_sdw_acpi mc snd_hda_codec cfg80211 snd_ump snd_hda_core snd_rawmidi snd_hwdep snd_seq snd_seq_device intel_cstate snd_pcm intel_uncore uas rfkill mei_me r8169 snd_timer i2c_i801 pcspkr mei usb_storage lpc_ich snd i2c_smbus realtek soundcore joydev pktcdvd loop nfnetlink zram lz4hc_compress lz4_compress polyval_clmulni polyval_generic
 ghash_clmulni_intel sha512_ssse3 mxm_wmi sha256_ssse3 sha1_ssse3 video wmi i2c_dev fuse
CPU: 2 UID: 0 PID: 70 Comm: kworker/2:1 Not tainted 6.15.3-200.fc42.x86_64 #1 PREEMPT(lazy) 
Hardware name: MSI MS-7817/H81M-P33 (MS-7817), BIOS V1.9 03/30/2015
Workqueue: usb_hub_wq hub_event
RIP: 0010:ieee80211_free_ack_frame+0x44/0x50 [mac80211]
Code: 00 31 ff e8 de ba b6 c6 31 c0 48 83 c4 08 c3 cc cc cc cc 48 c7 c7 ab ad 00 c1 48 89 34 24 c6 05 29 5a 2d 00 01 e8 cc 62 d2 c5 <0f> 0b 48 8b 34 24 eb ca 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffcb4d0072fb00 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000027
RDX: ffff88b44ed1cb88 RSI: 0000000000000001 RDI: ffff88b44ed1cb80
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffcb4d0072f9a8
R10: ffffffff88f3bba8 R11: 00000000ffffdfff R12: ffffffffc0ca5680
R13: ffff88b1674c1f80 R14: ffff88b14555ab88 R15: ffff88b140e69450
FS:  0000000000000000(0000) GS:ffff88b4c4f71000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000561d78b6bad8 CR3: 000000010c40c005 CR4: 00000000001726f0
Call Trace:
 <TASK>
 idr_for_each+0x6d/0xf0
 ieee80211_free_hw+0x32/0xd0 [mac80211]
 usb_unbind_interface+0x98/0x2b0
 device_release_driver_internal+0x19e/0x200
 bus_remove_device+0xc2/0x130
 device_del+0x160/0x3d0
 usb_disable_device+0xf4/0x280
 usb_disconnect+0xe3/0x310
 ? usb_control_msg+0x121/0x170
 hub_port_connect+0x7e/0x950
 ? port_event+0x313/0x7e0
 ? port_event+0x1d6/0x7e0
 hub_port_connect_change+0x97/0x2a0
 hub_event+0x16c/0x4d0
 ? __schedule+0x2fc/0x7a0
 process_one_work+0x192/0x350
 worker_thread+0x25a/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xfc/0x240
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>