list_del corruption, ffff8de907660800->prev is LIST_POISON2 (dead000000000122)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:56!
invalid opcode: 0000 [#1] PREEMPT SMP PTI
CPU: 3 PID: 781 Comm: kworker/u17:2 Tainted: G           OE      6.0.10-100.fc35.x86_64 #1
Hardware name: Acer Nitro AN515-54/Octavia_CFS, BIOS V1.32 09/16/2020
Workqueue: hci0 hci_cmd_sync_work [bluetooth]
RIP: 0010:__list_del_entry_valid.cold+0x4b/0x6f
Code: fd ff 0f 0b 48 89 f2 48 89 fe 48 c7 c7 68 9d 7a b1 e8 9a e1 fd ff 0f 0b 48 89 fe 48 89 ca 48 c7 c7 30 9d 7a b1 e8 86 e1 fd ff <0f> 0b 48 89 fe 48 c7 c7 f8 9c 7a b1 e8 75 e1 fd ff 0f 0b 48 89 fe
RSP: 0018:ffffb67b00fffdd8 EFLAGS: 00010286
RAX: 000000000000004e RBX: ffff8de907660800 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffb178eff2 RDI: 00000000ffffffff
RBP: ffff8de84dee4000 R08: 0000000000000000 R09: 00000000ffffdfff
R10: ffffb67b00fffc98 R11: ffffffffb21462e8 R12: ffff8de84dee4010
R13: ffff8de84dee4a80 R14: ffff8de91b59efc0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8de9a42c0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00001f46131cf000 CR3: 0000000106010002 CR4: 00000000003706e0
Call Trace:
 <TASK>
 hci_conn_cleanup+0x43/0x1d0 [bluetooth]
 hci_conn_del+0xe5/0x200 [bluetooth]
 hci_abort_conn_sync+0x95/0x230 [bluetooth]
 hci_cmd_sync_work+0xb8/0x160 [bluetooth]
 process_one_work+0x1e2/0x3b0
 ? rescuer_thread+0x370/0x370
 worker_thread+0x50/0x3a0
 ? rescuer_thread+0x370/0x370
 kthread+0xe5/0x110
 ? kthread_complete_and_exit+0x20/0x20
 ret_from_fork+0x1f/0x30
 </TASK>
Modules linked in: uinput rfcomm snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink vboxnetadp(OE) vboxnetflt(OE) qrtr vboxdrv(OE) bnep sunrpc vfat fat squashfs loop snd_sof_pci_intel_cnl snd_sof_intel_hda_common soundwire_intel soundwire_generic_allocation soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils soundwire_bus snd_soc_skl snd_soc_hdac_hda snd_hda_ext_core snd_soc_sst_ipc snd_soc_sst_dsp intel_rapl_msr snd_soc_acpi_intel_match intel_rapl_common snd_soc_acpi iwlmvm snd_soc_core intel_tcc_cooling x86_pkg_temp_thermal snd_ctl_led intel_powerclamp snd_compress mac80211 ucsi_ccg ac97_bus coretemp snd_hda_codec_realtek mei_hdcp snd_pcm_dmaengine snd_hda_codec_generic typec_ucsi ledtrig_audio
 snd_hda_codec_hdmi kvm_intel iTCO_wdt snd_hda_intel intel_pmc_bxt mei_pxp ee1004 typec iTCO_vendor_support libarc4 snd_intel_dspcfg snd_intel_sdw_acpi kvm btusb snd_hda_codec uvcvideo irqbypass snd_hda_core btrtl iwlwifi rapl videobuf2_vmalloc snd_hwdep intel_cstate btbcm videobuf2_memops snd_seq btintel videobuf2_v4l2 intel_uncore btmtk pcspkr videobuf2_common snd_seq_device intel_wmi_thunderbolt bluetooth snd_pcm cfg80211 videodev i2c_i801 acer_wmi mei_me sparse_keymap wmi_bmof i2c_smbus snd_timer mc rfkill joydev mei idma64 snd soundcore i2c_nvidia_gpu intel_pch_thermal acpi_pad acer_wireless zram ip_tables i915 nouveau mxm_wmi drm_ttm_helper i2c_algo_bit drm_buddy drm_display_helper drm_kms_helper cec nvme nvme_core ttm alx crct10dif_pclmul hid_multitouch crc32_pclmul crc32c_intel polyval_clmulni polyval_generic drm ghash_clmulni_intel serio_raw nvme_common mdio i2c_hid_acpi i2c_hid wmi video pinctrl_cannonlake ipmi_devintf ipmi_msghandler fuse

list_del corruption, ffff9938450fb000->prev is LIST_POISON2 (dead000000000122)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:48!
fbcon: Taking over console
invalid opcode: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 745 Comm: kworker/u17:2 Not tainted 5.18.7-100.fc35.x86_64 #1
Hardware name: ASUSTeK COMPUTER INC. VivoBook_ASUSLaptop X512JA_X512JA/X512JA, BIOS X512JA.307 05/26/2021
Workqueue: hci0 hci_cmd_sync_work [bluetooth]
RIP: 0010:__list_del_entry_valid.cold+0x4b/0x4d
Code: fd ff 0f 0b 48 89 f2 48 89 fe 48 c7 c7 10 44 66 b4 e8 73 d1 fd ff 0f 0b 48 89 fe 48 89 ca 48 c7 c7 d8 43 66 b4 e8 5f d1 fd ff <0f> 0b 41 0f b6 44 24 03 41 0f b6 0c 24 89 ea 44 89 f6 48 c7 c7 68
RSP: 0018:ffffbe2440567da8 EFLAGS: 00010286
RAX: 000000000000004e RBX: ffff9938450fb000 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffb464e434 RDI: 00000000ffffffff
RBP: ffff9939be754000 R08: 0000000000000000 R09: 00000000ffffdfff
R10: ffffbe2440567be8 R11: ffffffffb4f453a8 R12: ffff9939be754000
R13: ffff9939be754bd0 R14: ffff9939be754000 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9939b5e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8c2028d2c0 CR3: 0000000158e10001 CR4: 0000000000770ef0
PKRU: 55555554
Call Trace:
 <TASK>
 hci_conn_cleanup+0x33/0x180 [bluetooth]
 hci_conn_del+0xd4/0x1c0 [bluetooth]
 hci_disconnect_all_sync.constprop.0+0x9a/0x230 [bluetooth]
 ? hci_stop_discovery_sync+0x91/0x1a0 [bluetooth]
 hci_set_powered_sync+0x5c/0x200 [bluetooth]
 ? __schedule+0x2e7/0x11e0
 ? x86_pmu_event_init+0x11a/0x380
 hci_cmd_sync_work+0xb8/0x160 [bluetooth]
 process_one_work+0x1e2/0x3b0
 worker_thread+0x50/0x3a0
 ? rescuer_thread+0x370/0x370
 kthread+0xe5/0x110
 ? kthread_complete_and_exit+0x20/0x20
 ret_from_fork+0x1f/0x30
 </TASK>
Modules linked in: rfcomm snd_seq_dummy snd_hrtimer xt_conntrack xt_MASQUERADE nf_conntrack_netlink xt_addrtype nft_compat br_netfilter bridge stp llc nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set overlay nf_tables nfnetlink qrtr bnep sunrpc vfat fat squashfs loop snd_sof_pci_intel_icl snd_sof_intel_hda_common soundwire_intel soundwire_generic_allocation soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_hda_codec_hdmi iwlmvm snd_sof_utils snd_soc_hdac_hda snd_hda_ext_core snd_soc_acpi_intel_match snd_soc_acpi soundwire_bus snd_hda_codec_realtek snd_soc_core mac80211 snd_hda_codec_generic ledtrig_audio snd_compress ac97_bus snd_pcm_dmaengine snd_hda_intel intel_tcc_cooling x86_pkg_temp_thermal snd_intel_dspcfg intel_powerclamp iTCO_wdt snd_intel_sdw_acpi
 intel_pmc_bxt coretemp snd_hda_codec iTCO_vendor_support libarc4 kvm_intel mei_hdcp intel_rapl_msr mei_pxp snd_hda_core kvm snd_hwdep snd_seq irqbypass btusb snd_seq_device iwlwifi snd_pcm btrtl uvcvideo rapl btbcm intel_cstate asus_nb_wmi btintel videobuf2_vmalloc iwlmei intel_uncore asus_wmi btmtk videobuf2_memops snd_timer videobuf2_v4l2 sparse_keymap spi_pxa2xx_platform wmi_bmof platform_profile bluetooth pcspkr snd i2c_i801 cfg80211 soundcore i2c_smbus dw_dmac videobuf2_common processor_thermal_device_pci_legacy processor_thermal_device mei_me videodev processor_thermal_rfim processor_thermal_mbox joydev processor_thermal_rapl intel_rapl_common ecdh_generic mc mei rfkill idma64 intel_soc_dts_iosf int3403_thermal int340x_thermal_zone int3400_thermal acpi_thermal_rel acpi_tad acpi_pad zram ip_tables i915 i2c_algo_bit drm_buddy drm_dp_helper drm_kms_helper sdhci_pci cec cqhci ttm sdhci nvme hid_multitouch crct10dif_pclmul crc32_pclmul crc32c_intel drm nvme_core
 ghash_clmulni_intel mmc_core serio_raw i2c_hid_acpi wmi i2c_hid video pinctrl_icelake ipmi_devintf ipmi_msghandler fuse

list_del corruption, ffff9e3ca0c3f000->prev is LIST_POISON2 (dead000000000122)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:56!
invalid opcode: 0000 [#1] PREEMPT SMP PTI
CPU: 0 PID: 851694 Comm: kworker/u17:0 Tainted: G        W I        6.0.12-300.fc37.x86_64 #1
Hardware name: LENOVO 20BUS06B05/20BUS06B05, BIOS JBET73WW (1.37 ) 08/14/2019
Workqueue: hci0 hci_cmd_sync_work [bluetooth]
RIP: 0010:__list_del_entry_valid.cold+0x4b/0x6f
Code: fd ff 0f 0b 48 89 f2 48 89 fe 48 c7 c7 88 59 7c 98 e8 1c ee fd ff 0f 0b 48 89 fe 48 89 ca 48 c7 c7 50 59 7c 98 e8 08 ee fd ff <0f> 0b 48 89 fe 48 c7 c7 18 59 7c 98 e8 f7 ed fd ff 0f 0b 48 89 fe
RSP: 0018:ffffc0fc0f557dd8 EFLAGS: 00010286
RAX: 000000000000004e RBX: ffff9e3ca0c3f000 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff987aac1a RDI: 00000000ffffffff
RBP: ffff9e3cd620a000 R08: 0000000000000000 R09: ffffc0fc0f557c88
R10: 0000000000000003 R11: ffffffff99146328 R12: ffff9e3cd620aa80
R13: ffff9e3cd620a000 R14: ffff9e3cd620a760 R15: ffff9e3d6ce8b0c0
FS:  0000000000000000(0000) GS:ffff9e3da5c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055fae003c1d8 CR3: 0000000153010004 CR4: 00000000003706f0
Call Trace:
 <TASK>
 hci_conn_cleanup+0x43/0x1d0 [bluetooth]
 hci_conn_del+0xe5/0x200 [bluetooth]
 hci_abort_conn_sync+0x9a/0x240 [bluetooth]
 hci_cmd_sync_work+0xa2/0x150 [bluetooth]
 process_one_work+0x1c7/0x380
 worker_thread+0x4d/0x380
 ? rescuer_thread+0x380/0x380
 kthread+0xe9/0x110
 ? kthread_complete_and_exit+0x20/0x20
 ret_from_fork+0x22/0x30
 </TASK>
Modules linked in: tls uinput usb_serial_simple rfcomm snd_seq_dummy snd_hrtimer xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT bridge stp llc nf_nat_tftp nf_conntrack_tftp nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security ip_set nf_tables nfnetlink ip6table_filter iptable_filter qrtr bnep intel_rapl_msr intel_rapl_common x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel iwlmvm kvm sunrpc mac80211 iTCO_wdt at24 intel_pmc_bxt iTCO_vendor_support mei_hdcp mei_pxp mei_wdt btusb snd_ctl_led libarc4 snd_hda_codec_realtek snd_hda_codec_hdmi irqbypass btrtl rapl intel_cstate snd_hda_codec_generic intel_uncore snd_hda_intel snd_intel_dspcfg btbcm iwlwifi btintel uvcvideo
 snd_intel_sdw_acpi videobuf2_vmalloc pcspkr binfmt_misc btmtk think_lmi joydev snd_hda_codec wmi_bmof firmware_attributes_class i2c_i801 cfg80211 bluetooth videobuf2_memops videobuf2_v4l2 i2c_smbus snd_hda_core videobuf2_common intel_pch_thermal snd_hwdep videodev vfat fat thinkpad_acpi snd_seq mei_me snd_seq_device lpc_ich mc snd_pcm ledtrig_audio mei platform_profile cdc_acm snd_timer rfkill snd soundcore zram i915 rtsx_pci_sdmmc mmc_core crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic e1000e drm_buddy drm_display_helper ghash_clmulni_intel cdc_mbim cdc_wdm serio_raw cdc_ncm cdc_ether cec rtsx_pci usbnet ttm mii wmi video scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse

list_del corruption, ffff9e318ea18000->prev is LIST_POISON2 (dead000000000122)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:56!
invalid opcode: 0000 [#1] PREEMPT SMP PTI
CPU: 5 PID: 8113 Comm: kworker/u17:5 Tainted: G S                 6.0.12-300.fc37.x86_64 #1
Hardware name: HP HP Spectre x360 Convertible 13-ae0xx/83B9, BIOS F.36 03/19/2022
Workqueue: hci0 hci_cmd_sync_work [bluetooth]
RIP: 0010:__list_del_entry_valid.cold+0x4b/0x6f
Code: fd ff 0f 0b 48 89 f2 48 89 fe 48 c7 c7 88 59 7c 95 e8 1c ee fd ff 0f 0b 48 89 fe 48 89 ca 48 c7 c7 50 59 7c 95 e8 08 ee fd ff <0f> 0b 48 89 fe 48 c7 c7 18 59 7c 95 e8 f7 ed fd ff 0f 0b 48 89 fe
RSP: 0018:ffffb53f83c53da8 EFLAGS: 00010286
RAX: 000000000000004e RBX: ffff9e318ea18000 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff957aac1a RDI: 00000000ffffffff
RBP: ffff9e32e3460000 R08: 0000000000000000 R09: ffffb53f83c53c58
R10: 0000000000000003 R11: ffffffff96146328 R12: ffff9e32e3460ba8
R13: ffff9e32e3460000 R14: ffff9e32e3460760 R15: ffff9e31c4e0ef80
FS:  0000000000000000(0000) GS:ffff9e3531f40000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f036bfcc000 CR3: 00000001be010005 CR4: 00000000003706e0
Call Trace:
 <TASK>
 hci_conn_cleanup+0x43/0x1d0 [bluetooth]
 hci_conn_del+0xe5/0x200 [bluetooth]
 hci_abort_conn_sync+0x9a/0x240 [bluetooth]
 hci_set_powered_sync+0x13b/0x260 [bluetooth]
 ? __schedule+0x33a/0x12c0
 hci_cmd_sync_work+0x9f/0x150 [bluetooth]
 process_one_work+0x1c4/0x380
 worker_thread+0x4d/0x380
 ? rescuer_thread+0x380/0x380
 kthread+0xe6/0x110
 ? kthread_complete_and_exit+0x20/0x20
 ret_from_fork+0x1f/0x30
 </TASK>
Modules linked in: tls uinput rfcomm snd_seq_dummy snd_hrtimer xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nf_nat_tftp nf_conntrack_tftp bridge stp llc nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security ip_set nf_tables nfnetlink ip6table_filter iptable_filter bnep btusb btrtl qrtr btbcm uvcvideo videobuf2_vmalloc btintel videobuf2_memops videobuf2_v4l2 snd_hda_codec_hdmi btmtk videobuf2_common bluetooth videodev mc snd_soc_avs snd_soc_hda_codec snd_soc_skl snd_soc_hdac_hda snd_hda_ext_core snd_soc_sst_ipc snd_soc_sst_dsp iwlmvm snd_soc_acpi_intel_match snd_soc_acpi snd_ctl_led snd_hda_codec_realtek snd_soc_core sunrpc snd_hda_codec_generic snd_compress ledtrig_audio
 intel_tcc_cooling mac80211 ac97_bus snd_pcm_dmaengine x86_pkg_temp_thermal snd_hda_intel intel_powerclamp snd_intel_dspcfg coretemp snd_intel_sdw_acpi snd_hda_codec libarc4 iTCO_wdt kvm_intel snd_hda_core intel_pmc_bxt mei_pxp iTCO_vendor_support mei_hdcp snd_hwdep kvm snd_seq snd_seq_device binfmt_misc iwlwifi intel_rapl_msr snd_pcm irqbypass rapl vfat snd_timer hp_wmi fat intel_cstate platform_profile intel_uncore wmi_bmof cfg80211 intel_wmi_thunderbolt snd pcspkr soundcore spi_pxa2xx_platform i2c_i801 i2c_smbus dw_dmac hid_sensor_accel_3d hid_sensor_gyro_3d hid_sensor_magn_3d hid_sensor_rotation hid_sensor_incl_3d mei_me hid_sensor_trigger hid_sensor_iio_common industrialio_triggered_buffer mei joydev rfkill idma64 kfifo_buf intel_xhci_usb_role_switch intel_pch_thermal industrialio int3403_thermal processor_thermal_device_pci_legacy processor_thermal_device processor_thermal_rfim wireless_hotkey intel_vbtn int3400_thermal processor_thermal_mbox acpi_thermal_rel
 processor_thermal_rapl soc_button_array intel_rapl_common sparse_keymap acpi_pad int340x_thermal_zone intel_soc_dts_iosf zram hid_sensor_hub intel_ishtp_hid i915 drm_buddy nvme rtsx_pci_sdmmc drm_display_helper nvme_core mmc_core crct10dif_pclmul hid_multitouch cec intel_ish_ipc crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel rtsx_pci nvme_common serio_raw intel_ishtp ttm i2c_hid_acpi i2c_hid wmi video pinctrl_sunrisepoint scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse

list_del corruption, ffff9e33c9bdb000->prev is LIST_POISON2 (dead000000000122)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:56!
invalid opcode: 0000 [#1] PREEMPT SMP NOPTI
CPU: 12 PID: 2410 Comm: kworker/u33:3 Not tainted 6.0.12-300.fc37.x86_64 #1
Hardware name: LENOVO 21CQCTO1WW/21CQCTO1WW, BIOS R22ET55W (1.25 ) 09/14/2022
Workqueue: hci0 hci_cmd_sync_work [bluetooth]
RIP: 0010:__list_del_entry_valid.cold+0x4b/0x6f
Code: fd ff 0f 0b 48 89 f2 48 89 fe 48 c7 c7 88 59 7c 96 e8 1c ee fd ff 0f 0b 48 89 fe 48 89 ca 48 c7 c7 50 59 7c 96 e8 08 ee fd ff <0f> 0b 48 89 fe 48 c7 c7 18 59 7c 96 e8 f7 ed fd ff 0f 0b 48 89 fe
RSP: 0018:ffffb3838b133da8 EFLAGS: 00010286
RAX: 000000000000004e RBX: ffff9e33c9bdb000 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff967aac1a RDI: 00000000ffffffff
RBP: ffff9e33c693a000 R08: 0000000000000000 R09: ffffb3838b133c58
R10: 0000000000000003 R11: ffffffff97146328 R12: ffff9e33c693aba8
R13: ffff9e33c693a000 R14: ffff9e33c693a760 R15: ffff9e33f0f33940
FS:  0000000000000000(0000) GS:ffff9e3adf100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3dd44ce770 CR3: 00000001087e6000 CR4: 0000000000750ee0
PKRU: 55555554
Call Trace:
 <TASK>
 hci_conn_cleanup+0x43/0x1d0 [bluetooth]
 hci_conn_del+0xe5/0x200 [bluetooth]
 hci_abort_conn_sync+0x9a/0x240 [bluetooth]
 hci_set_powered_sync+0x13b/0x260 [bluetooth]
 hci_cmd_sync_work+0xa2/0x150 [bluetooth]
 process_one_work+0x1c7/0x380
 worker_thread+0x4d/0x380
 ? rescuer_thread+0x380/0x380
 kthread+0xe9/0x110
 ? kthread_complete_and_exit+0x20/0x20
 ret_from_fork+0x22/0x30
 </TASK>
Modules linked in: michael_mic rfcomm snd_seq_dummy snd_hrtimer xt_conntrack xt_MASQUERADE nf_conntrack_netlink xt_addrtype nft_compat nft_objref br_netfilter bridge stp llc bnep nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack qrtr_mhi nf_defrag_ipv6 nf_defrag_ipv4 ip_set overlay nf_tables btusb btrtl nfnetlink btbcm btintel btmtk bluetooth uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common videodev mc sunrpc snd_soc_dmic snd_soc_acp6x_mach intel_rapl_msr snd_acp6x_pdm_dma intel_rapl_common snd_sof_amd_renoir qrtr snd_sof_amd_acp snd_ctl_led snd_hda_codec_realtek snd_sof_pci ath11k_pci vfat ath11k fat snd_hda_codec_generic snd_sof snd_hda_codec_hdmi snd_sof_utils snd_hda_intel qmi_helpers snd_intel_dspcfg edac_mce_amd snd_soc_core mac80211 snd_intel_sdw_acpi snd_hda_codec snd_compress ac97_bus
 snd_pcm_dmaengine snd_rpl_pci_acp6x snd_hda_core snd_hwdep snd_pci_acp6x libarc4 snd_seq snd_seq_device cfg80211 kvm snd_pcm thinkpad_acpi irqbypass ledtrig_audio think_lmi platform_profile rapl pcspkr snd_timer snd_pci_acp5x wmi_bmof firmware_attributes_class joydev rfkill snd_rn_pci_acp3x snd snd_acp_config k10temp snd_soc_acpi thunderbolt mhi snd_pci_acp3x i2c_piix4 soundcore amd_pmc acpi_tad zram amdgpu drm_ttm_helper ttm iommu_v2 nvme gpu_sched drm_buddy nvme_core drm_display_helper crct10dif_pclmul crc32_pclmul ucsi_acpi hid_multitouch crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel typec_ucsi serio_raw ccp sp5100_tco cec typec nvme_common wmi video i2c_hid_acpi i2c_hid ip6_tables ip_tables fuse

list_del corruption, ffff9904864ad800->prev is LIST_POISON2 (dead000000000122)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:48!
invalid opcode: 0000 [#1] PREEMPT SMP PTI
CPU: 7 PID: 2209 Comm: kworker/u17:3 Tainted: P           OE     5.18.7-100.fc35.x86_64 #1
Hardware name: LENOVO 80Q0/Allsparks 7A, BIOS CDCN54WW 06/13/2017
Workqueue: hci0 hci_cmd_sync_work [bluetooth]
RIP: 0010:__list_del_entry_valid.cold+0x4b/0x4d
Code: fd ff 0f 0b 48 89 f2 48 89 fe 48 c7 c7 10 44 66 91 e8 73 d1 fd ff 0f 0b 48 89 fe 48 89 ca 48 c7 c7 d8 43 66 91 e8 5f d1 fd ff <0f> 0b 41 0f b6 44 24 03 41 0f b6 0c 24 89 ea 44 89 f6 48 c7 c7 68
RSP: 0018:ffffaffc443efda8 EFLAGS: 00010286
RAX: 000000000000004e RBX: ffff9904864ad800 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff9164e434 RDI: 00000000ffffffff
RBP: ffff9904bfbd4000 R08: 0000000000000000 R09: 00000000ffffdfff
R10: ffffaffc443efbe8 R11: ffffffff91f453a8 R12: ffff9904bfbd4000
R13: ffff9904bfbd4bd0 R14: ffff9904bfbd4000 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9907ee3c0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb386d5de90 CR3: 000000010ee10005 CR4: 00000000003706e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 hci_conn_cleanup+0x33/0x180 [bluetooth]
 hci_conn_del+0xd4/0x1c0 [bluetooth]
 hci_disconnect_all_sync.constprop.0+0x9a/0x230 [bluetooth]
 ? hci_stop_discovery_sync+0x91/0x1a0 [bluetooth]
 hci_set_powered_sync+0x5c/0x200 [bluetooth]
 ? __schedule+0x2e7/0x11e0
 ? intel_cpuc_prepare+0xe5/0x1c0
 hci_cmd_sync_work+0xbb/0x160 [bluetooth]
 process_one_work+0x1e5/0x3b0
 ? rescuer_thread+0x370/0x370
 worker_thread+0x50/0x3a0
 ? rescuer_thread+0x370/0x370
 kthread+0xe8/0x110
 ? kthread_complete_and_exit+0x20/0x20
 ret_from_fork+0x22/0x30
 </TASK>
Modules linked in: rfcomm snd_seq_dummy snd_hrtimer xt_conntrack xt_MASQUERADE nf_conntrack_netlink xt_addrtype nft_compat br_netfilter bridge stp llc nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set overlay nf_tables nfnetlink qrtr vmnet(OE) ppdev parport_pc parport vmw_vsock_vmci_transport vsock vmw_vmci vmmon(OE) bnep sunrpc binfmt_misc vfat fat nvidia_drm(POE) nvidia_modeset(POE) nvidia_uvm(POE) iwlmvm snd_hda_codec_hdmi mac80211 snd_ctl_led snd_hda_codec_realtek intel_rapl_msr intel_rapl_common snd_hda_codec_generic ledtrig_audio intel_tcc_cooling x86_pkg_temp_thermal libarc4 intel_powerclamp snd_hda_intel coretemp kvm_intel snd_intel_dspcfg snd_intel_sdw_acpi iwlwifi snd_hda_codec btusb kvm snd_hda_core btrtl uvcvideo btbcm snd_hwdep videobuf2_vmalloc nvidia(POE) videobuf2_memops
 videobuf2_v4l2 iTCO_wdt snd_seq videobuf2_common btintel intel_pmc_bxt iwlmei irqbypass mei_hdcp ee1004 mei_pxp iTCO_vendor_support btmtk rapl snd_seq_device videodev snd_pcm intel_cstate cfg80211 intel_uncore bluetooth snd_timer mc i2c_i801 snd ideapad_laptop pcspkr i2c_smbus sparse_keymap mei_me ecdh_generic soundcore joydev wmi_bmof platform_profile mei rfkill acpi_pad zram ip_tables i915 i2c_algo_bit drm_buddy drm_dp_helper drm_kms_helper cec ttm crct10dif_pclmul sdhci_pci crc32_pclmul drm cqhci crc32c_intel sdhci ghash_clmulni_intel r8169 mmc_core serio_raw wmi video ipmi_devintf ipmi_msghandler fuse

list_del corruption, ffff97adcbbcf800->prev is LIST_POISON2 (dead000000000122)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:48!
fbcon: Taking over console
invalid opcode: 0000 [#1] PREEMPT SMP PTI
CPU: 0 PID: 26805 Comm: kworker/u17:4 Tainted: P           OE     5.18.7-100.fc35.x86_64 #1
Hardware name: Gigabyte Technology Co., Ltd. H110M-S2H/H110M-S2H-CF, BIOS F23 11/07/2017
Workqueue: hci0 hci_cmd_sync_work [bluetooth]
RIP: 0010:__list_del_entry_valid.cold+0x4b/0x4d
Code: fd ff 0f 0b 48 89 f2 48 89 fe 48 c7 c7 10 44 66 b6 e8 73 d1 fd ff 0f 0b 48 89 fe 48 89 ca 48 c7 c7 d8 43 66 b6 e8 5f d1 fd ff <0f> 0b 41 0f b6 44 24 03 41 0f b6 0c 24 89 ea 44 89 f6 48 c7 c7 68
RSP: 0018:ffffa5d0d7be7da8 EFLAGS: 00010286
RAX: 000000000000004e RBX: ffff97adcbbcf800 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffb664e434 RDI: 00000000ffffffff
RBP: ffff97ad48cfc000 R08: 0000000000000000 R09: 00000000ffffdfff
R10: ffffa5d0d7be7be8 R11: ffffffffb6f453a8 R12: ffff97ad48cfc000
R13: ffff97ad48cfcbd0 R14: ffff97ad48cfc000 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff97b06ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f275804f2a8 CR3: 0000000227870001 CR4: 00000000003706f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 hci_conn_cleanup+0x33/0x180 [bluetooth]
 hci_conn_del+0xd4/0x1c0 [bluetooth]
 hci_disconnect_all_sync.constprop.0+0x9a/0x230 [bluetooth]
 ? hci_stop_discovery_sync+0x91/0x1a0 [bluetooth]
 hci_set_powered_sync+0x5c/0x200 [bluetooth]
 ? __schedule+0x2e7/0x11e0
 ? x86_pmu_event_init+0x11d/0x380
 hci_cmd_sync_work+0xbb/0x160 [bluetooth]
 process_one_work+0x1e5/0x3b0
 worker_thread+0x50/0x3a0
 ? rescuer_thread+0x370/0x370
 kthread+0xe8/0x110
 ? kthread_complete_and_exit+0x20/0x20
 ret_from_fork+0x22/0x30
 </TASK>
Modules linked in: binfmt_misc uinput ntfs3 exfat rfcomm snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 wireguard curve25519_x86_64 libcurve25519_generic ip6_udp_tunnel udp_tunnel ip_set nf_tables nfnetlink qrtr bnep sunrpc vfat fat nvidia_drm(POE) nvidia_modeset(POE) nvidia_uvm(POE) rtl8192ee btcoexist rtl_pci rtlwifi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_codec_hdmi ledtrig_audio snd_hda_intel mac80211 snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec snd_hda_core intel_rapl_msr intel_rapl_common btusb snd_hwdep nvidia(POE) libarc4 intel_tcc_cooling cfg80211 btrtl iTCO_wdt snd_seq snd_seq_device x86_pkg_temp_thermal snd_pcm intel_powerclamp intel_pmc_bxt btbcm iTCO_vendor_support btintel ee1004 snd_timer mei_hdcp mei_pxp i2c_i801 mei_me btmtk coretemp
 kvm_intel kvm irqbypass rapl intel_cstate bluetooth intel_uncore joydev snd ecdh_generic pcspkr intel_wmi_thunderbolt i2c_smbus rfkill drm_kms_helper mei soundcore acpi_pad drm zram ip_tables uas usb_storage crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel r8169 wmi video ipmi_devintf ipmi_msghandler fuse [last unloaded: vboxdrv]

list_del corruption, ffffa0dddae8d800->prev is LIST_POISON2 (dead000000000122)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:48!
invalid opcode: 0000 [#1] PREEMPT SMP PTI
CPU: 3 PID: 11198 Comm: kworker/u9:2 Not tainted 5.17.3-302.fc36.x86_64 #1
Hardware name: NEC PC-VG22TGGFBEGL/Suigetsu, BIOS /754A0603 06/02/2015
Workqueue: hci0 hci_cmd_sync_work [bluetooth]
RIP: 0010:__list_del_entry_valid.cold+0x4b/0x4d
Code: fd ff 0f 0b 48 89 f2 48 89 fe 48 c7 c7 f8 b6 67 9c e8 87 da fd ff 0f 0b 48 89 fe 48 89 ca 48 c7 c7 c0 b6 67 9c e8 73 da fd ff <0f> 0b 41 0f b6 54 24 03 41 0f b6 04 24 44 89 f6 48 c7 c7 38 b9 67
RSP: 0018:ffffbfbe08767d98 EFLAGS: 00010282
RAX: 000000000000004e RBX: ffffa0dddae8d800 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff9c66584d RDI: 00000000ffffffff
RBP: ffffa0de49cf6000 R08: 0000000000000000 R09: ffffbfbe08767be0
R10: ffffbfbe08767bd8 R11: 0000000000000003 R12: 0000000000000092
R13: ffffa0de49cf6000 R14: ffffa0dddae8d814 R15: ffffa0dd5435b0c0
FS:  0000000000000000(0000) GS:ffffa0de5ad80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe520b6e000 CR3: 000000000be10003 CR4: 00000000003706e0
Call Trace:
 <TASK>
 hci_conn_cleanup+0x33/0x180 [bluetooth]
 hci_conn_del+0xd4/0x1b0 [bluetooth]
 hci_le_conn_failed+0x168/0x210 [bluetooth]
 ? conn_set_key+0x60/0x60 [bluetooth]
 create_le_conn_complete+0x53/0x80 [bluetooth]
 hci_cmd_sync_work+0xb9/0x150 [bluetooth]
 process_one_work+0x1c7/0x380
 worker_thread+0x4d/0x380
 ? process_one_work+0x380/0x380
 kthread+0xe9/0x110
 ? kthread_complete_and_exit+0x20/0x20
 ret_from_fork+0x22/0x30
 </TASK>
Modules linked in: uhid ntfs3 tls cdc_acm uinput rfcomm snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep sunrpc vfat fat squashfs loop intel_rapl_msr iwlmvm intel_rapl_common x86_pkg_temp_thermal mei_hdcp intel_powerclamp mei_pxp mac80211 iTCO_wdt coretemp intel_pmc_bxt iTCO_vendor_support libarc4 kvm_intel kvm irqbypass btusb iwlwifi rapl uvcvideo snd_hda_codec_realtek btrtl snd_hda_codec_generic btbcm videobuf2_vmalloc intel_cstate snd_hda_codec_hdmi videobuf2_memops btintel ledtrig_audio videobuf2_v4l2 intel_uncore btmtk videobuf2_common iwlmei bluetooth cfg80211 snd_hda_intel videodev ecdh_generic msi_wmi sparse_keymap snd_intel_dspcfg snd_intel_sdw_acpi rfkill i2c_i801 joydev mc mei_me snd_hda_codec pcspkr i2c_smbus
 snd_hda_core mei lpc_ich snd_hwdep snd_seq snd_seq_device snd_pcm snd_timer snd tpm_infineon acpi_pad soundcore zram dm_crypt i915 rtsx_pci_sdmmc mmc_core crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel serio_raw rtsx_pci ttm wmi video ip6_tables ip_tables ipmi_devintf ipmi_msghandler fuse

list_del corruption, ffff91a1bf400800->prev is LIST_POISON2 (dead000000000122)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:48!
invalid opcode: 0000 [#1] PREEMPT SMP NOPTI
CPU: 16 PID: 813 Comm: kworker/u65:2 Tainted: P           OE     5.17.3-302.fc36.x86_64 #1
Hardware name: Micro-Star International Co., Ltd. MS-7C37/MPG X570 GAMING PLUS (MS-7C37), BIOS A.70 01/09/2020
Workqueue: hci0 hci_cmd_sync_work [bluetooth]
RIP: 0010:__list_del_entry_valid.cold+0x4b/0x4d
Code: fd ff 0f 0b 48 89 f2 48 89 fe 48 c7 c7 f8 b6 67 b7 e8 87 da fd ff 0f 0b 48 89 fe 48 89 ca 48 c7 c7 c0 b6 67 b7 e8 73 da fd ff <0f> 0b 41 0f b6 54 24 03 41 0f b6 04 24 44 89 f6 48 c7 c7 38 b9 67
RSP: 0018:ffffb77f01613d98 EFLAGS: 00010282
RAX: 000000000000004e RBX: ffff91a1bf400800 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffb766584d RDI: 00000000ffffffff
RBP: ffff91a14dbf4000 R08: 0000000000000000 R09: ffffb77f01613be0
R10: ffffb77f01613bd8 R11: 0000000000000003 R12: 0000000000000092
R13: ffff91a14dbf4000 R14: ffff91a1bf400814 R15: ffff91a14ee95840
FS:  0000000000000000(0000) GS:ffff91a83ee00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000031033922b008 CR3: 0000000162d10000 CR4: 0000000000350ee0
Call Trace:
 <TASK>
 hci_conn_cleanup+0x33/0x180 [bluetooth]
 hci_conn_del+0xd4/0x1b0 [bluetooth]
 hci_le_conn_failed+0x168/0x210 [bluetooth]
 ? conn_set_key+0x60/0x60 [bluetooth]
 create_le_conn_complete+0x53/0x80 [bluetooth]
 hci_cmd_sync_work+0xb9/0x150 [bluetooth]
 process_one_work+0x1c7/0x380
 worker_thread+0x4d/0x380
 ? _raw_spin_lock_irqsave+0x25/0x50
 ? process_one_work+0x380/0x380
 kthread+0xe9/0x110
 ? kthread_complete_and_exit+0x20/0x20
 ret_from_fork+0x22/0x30
 </TASK>
Modules linked in: rfcomm snd_seq_dummy snd_hrtimer nvidia_drm(POE) nvidia_modeset(POE) nvidia_uvm(POE) nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep nvidia(POE) sunrpc vfat fat intel_rapl_msr ucsi_ccg typec_ucsi typec snd_hda_codec_realtek intel_rapl_common snd_hda_codec_generic snd_hda_codec_hdmi ledtrig_audio snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi btusb edac_mce_amd snd_usb_audio uvcvideo btrtl snd_hda_codec btbcm videobuf2_vmalloc kvm_amd snd_hda_core btintel snd_usbmidi_lib videobuf2_memops ccp snd_hwdep btmtk snd_rawmidi videobuf2_v4l2 snd_seq bluetooth videobuf2_common snd_seq_device kvm videodev snd_pcm irqbypass ecdh_generic snd_timer mc wmi_bmof joydev pcspkr rapl k10temp i2c_piix4 rfkill snd soundcore r8169 i2c_nvidia_gpu
 acpi_cpufreq zram crct10dif_pclmul crc32_pclmul crc32c_intel nvme ghash_clmulni_intel nvme_core sp5100_tco wmi ip6_tables ip_tables ipmi_devintf ipmi_msghandler fuse