Backtrace

WARNING: CPU: 3 PID: 4278 at net/mac80211/main.c:1703 ieee80211_free_ack_frame+0x44/0x50 [mac80211]
Modules linked in: uinput rfcomm snd_seq_dummy snd_hrtimer xt_conntrack xt_MASQUERADE bridge stp llc xt_set xt_addrtype nft_compat overlay nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr bnep sunrpc snd_soc_avs rtw88_8822bu rtw88_usb snd_soc_hda_codec rtw88_8822b snd_hda_ext_core snd_soc_core rtw88_core snd_hda_codec_realtek snd_compress ac97_bus snd_pcm_dmaengine binfmt_misc snd_hda_codec_generic snd_hda_codec_hdmi snd_hda_scodec_component mac80211 snd_hda_intel snd_intel_dspcfg intel_rapl_msr snd_intel_sdw_acpi snd_hda_codec intel_rapl_common iTCO_wdt vfat intel_pmc_bxt intel_tcc_cooling fat iTCO_vendor_support ee1004 mei_wdt mei_pxp mei_hdcp snd_hda_core libarc4 wmi_bmof x86_pkg_temp_thermal cfg80211 intel_powerclamp btusb btrtl snd_hwdep hp_wmi btintel snd_seq sparse_keymap coretemp platform_profile rapl
 pcspkr intel_cstate intel_uncore snd_seq_device btbcm i2c_i801 btmtk e1000e i2c_smbus snd_pcm bluetooth snd_timer snd rfkill soundcore mei_me squashfs intel_pch_thermal mei joydev intel_pmc_core intel_vsec pmt_telemetry pmt_class tpm_infineon acpi_pad loop nfnetlink zram lz4hc_compress lz4_compress nouveau crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic drm_ttm_helper gpu_sched drm_gpuvm drm_exec ghash_clmulni_intel mxm_wmi sha512_ssse3 sha256_ssse3 drm_buddy i2c_algo_bit sha1_ssse3 ttm serio_raw video drm_display_helper cec wmi fuse
CPU: 3 UID: 0 PID: 4278 Comm: kworker/3:2 Not tainted 6.13.12-200.fc41.x86_64 #1
Hardware name: HP HP EliteDesk 800 G2 SFF/8054, BIOS N01 Ver. 02.60 12/15/2022
Workqueue: usb_hub_wq hub_event
RIP: 0010:ieee80211_free_ack_frame+0x44/0x50 [mac80211]
Code: 00 31 ff e8 2e 58 07 fa 31 c0 48 83 c4 08 c3 cc cc cc cc 48 c7 c7 33 db 06 c1 48 89 34 24 c6 05 19 5d 0e 00 01 e8 5c db 2b f9 <0f> 0b 48 8b 34 24 eb ca 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffa9f18208ba80 EFLAGS: 00010286
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000027
RDX: ffff8fadef5a1988 RSI: 0000000000000001 RDI: ffff8fadef5a1980
RBP: ffffffffc0efd3f0 R08: 0000000000000000 R09: 6b636120676e6964
R10: 6b636120676e6964 R11: 2173656d61726620 R12: 0000000080000000
R13: 0000000000000000 R14: ffff8fa6e21e9f80 R15: ffff8fa9f24354b8
FS:  0000000000000000(0000) GS:ffff8fadef580000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f475dac2270 CR3: 0000000120690004 CR4: 00000000003706f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 idr_for_each+0x6f/0xf0
 ieee80211_free_hw+0x33/0xc0 [mac80211]
 usb_unbind_interface+0x95/0x2d0
 device_release_driver_internal+0x19c/0x200
 bus_remove_device+0xc6/0x130
 device_del+0x161/0x3e0
 usb_disable_device+0xf6/0x270
 usb_disconnect+0xe6/0x2e0
 ? __try_to_del_timer_sync+0x60/0x90
 hub_port_connect+0x8a/0x9d0
 ? __pfx_process_timeout+0x10/0x10
 hub_port_connect_change+0x94/0x280
 port_event+0x4ad/0x7c0
 hub_event+0x16f/0x470
 process_one_work+0x176/0x330
 worker_thread+0x252/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xcf/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>