list_add corruption. next->prev should be prev (ffffffffc075f540), but was ffffe07dc478f008. (next=ffffe07dc4dd5808).
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:27!
invalid opcode: 0000 [#1] PREEMPT SMP PTI
CPU: 2 PID: 16382 Comm: kworker/2:13H Not tainted 6.4.15-200.fc38.x86_64 #1
Hardware name: Apple Inc. iMac19,2/Mac-63001698E7A34814, BIOS 1731.120.8.0.0 03/31/2022
Workqueue: ttm ttm_bo_delayed_delete [ttm]
RIP: 0010:__list_add_valid+0x61/0xa0
Code: c7 c7 50 43 93 b7 e8 2e 3e 9a ff 0f 0b 48 c7 c7 78 43 93 b7 e8 20 3e 9a ff 0f 0b 48 89 c1 48 c7 c7 a0 43 93 b7 e8 0f 3e 9a ff <0f> 0b 48 89 d1 48 89 c6 4c 89 c2 48 c7 c7 f8 43 93 b7 e8 f8 3d 9a
RSP: 0018:ffffa7250fcb7dd8 EFLAGS: 00010246
RAX: 0000000000000075 RBX: 0000000000000020 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff990335d21540 RDI: ffff990335d21540
RBP: ffffffffc075f518 R08: 0000000000000000 R09: ffffa7250fcb7c80
R10: 0000000000000003 R11: ffffffffb8146508 R12: ffffe07dc5566000
R13: 0000000000000000 R14: ffff990215960000 R15: ffff9901d1c05e60
FS:  0000000000000000(0000) GS:ffff990335d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f50822ce020 CR3: 0000000183564003 CR4: 00000000003706e0
Call Trace:
 <TASK>
 ? die+0x36/0x90
 ? do_trap+0xda/0x100
 ? __list_add_valid+0x61/0xa0
 ? do_error_trap+0x6a/0x90
 ? __list_add_valid+0x61/0xa0
 ? exc_invalid_op+0x50/0x70
 ? __list_add_valid+0x61/0xa0
 ? asm_exc_invalid_op+0x1a/0x20
 ? __list_add_valid+0x61/0xa0
 ? __list_add_valid+0x61/0xa0
 ttm_pool_free_range+0x127/0x270 [ttm]
 ttm_pool_free+0x17/0x50 [ttm]
 ttm_tt_unpopulate+0x26/0x80 [ttm]
 ttm_bo_cleanup_memtype_use+0x3a/0x70 [ttm]
 ttm_bo_delayed_delete+0x44/0x80 [ttm]
 process_one_work+0x1c4/0x3d0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x29/0x50
 </TASK>
Modules linked in: cdc_acm joydev hidp vfat fat uinput snd_seq_dummy snd_hrtimer rfcomm nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep sunrpc snd_sof_pci_intel_cnl snd_sof_intel_hda_common soundwire_intel soundwire_cadence snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils soundwire_generic_allocation soundwire_bus snd_soc_skl snd_soc_hdac_hda snd_hda_ext_core snd_soc_sst_ipc snd_soc_sst_dsp snd_soc_acpi_intel_match snd_soc_acpi snd_soc_core snd_hda_codec_cs8409 snd_hda_codec_generic ledtrig_audio brcmfmac snd_compress snd_hda_codec_hdmi ac97_bus snd_pcm_dmaengine snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi binfmt_misc uvcvideo intel_rapl_msr snd_hda_codec intel_rapl_common intel_tcc_cooling x86_pkg_temp_thermal uvc videobuf2_vmalloc brcmutil
 intel_powerclamp videobuf2_memops nls_utf8 snd_hda_core iTCO_wdt videobuf2_v4l2 intel_pmc_bxt coretemp hfsplus kvm_intel cfg80211 mei_pxp kvm mei_hdcp videobuf2_common iTCO_vendor_support snd_hwdep ee1004 hci_uart videodev thunderbolt snd_seq applesmc snd_seq_device irqbypass rapl pcspkr snd_pcm mei_me intel_cstate btqca btrtl mc snd_timer btbcm mei intel_uncore snd i2c_i801 btintel i2c_smbus idma64 soundcore bluetooth intel_pch_thermal acpi_als rfkill industrialio_triggered_buffer kfifo_buf industrialio acpi_tad apple_mfi_fastcharge loop zram amdgpu crct10dif_pclmul crc32_pclmul crc32c_intel i2c_algo_bit polyval_clmulni sdhci_pci polyval_generic drm_ttm_helper ttm cqhci sdhci drm_suballoc_helper iommu_v2 drm_buddy ghash_clmulni_intel sha512_ssse3 gpu_sched uas nvme mmc_core drm_display_helper usb_storage nvme_core hid_apple tg3 nvme_common cec video wmi ip6_tables ip_tables fuse