Backtrace

list_del corruption. next->prev should be ffff8f5241dd3000, but was 0000000000000000. (next=ffff8f5278e7d040)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:65!
Oops: invalid opcode: 0000 [#2] PREEMPT SMP NOPTI
CPU: 3 UID: 0 PID: 280 Comm: kworker/3:1 Tainted: G      D    OE      6.14.11-300.fc42.x86_64 #1
Tainted: [D]=DIE, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
Hardware name: Micro-Star International Co., Ltd. Creator M16 HX C14VGG/MS-15P2, BIOS E15P2IMS.305 02/02/2024
Workqueue: events nouveau_cli_work [nouveau]
RIP: 0010:__list_del_entry_valid_or_report+0x10a/0x110
Code: 89 d7 48 89 14 24 e8 65 60 ab ff 48 8b 14 24 48 8b 74 24 08 48 c7 c7 f8 d8 e8 a2 48 8b 42 08 48 89 d1 48 89 c2 e8 d6 9e 60 ff <0f> 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffd2e900b57b30 EFLAGS: 00010246
RAX: 000000000000006d RBX: ffff8f5241dd3000 RCX: 0000000000000027
RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8f599eda1940
RBP: ffffd2e900b57b80 R08: 0000000000000000 R09: ffffd2e900b579e0
R10: ffffffffa39368e8 R11: 00000000ffffdfff R12: ffff8f524e4e7000
R13: ffffffffc0b5fbc0 R14: ffff8f524e4e70d0 R15: ffff8f5241ddd7e0
FS:  0000000000000000(0000) GS:ffff8f599ed80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc2e99ebfb8 CR3: 0000000140202001 CR4: 0000000000f72ef0
PKRU: 55555554
Call Trace:
 <TASK>
 nvkm_mm_free+0x1cb/0x230 [nouveau]
 nvkm_vram_dtor+0x5c/0xa0 [nouveau]
 nvkm_memory_unref+0x56/0xa0 [nouveau]
 nvkm_vmm_unmap_region+0x2f/0xb0 [nouveau]
 nvkm_vmm_put_locked+0x190/0x2c0 [nouveau]
 ? sched_use_asym_prio+0x7f/0xc0
 ? cpu_stop_queue_work+0x9a/0x150
 nvkm_uvmm_mthd+0x55e/0x570 [nouveau]
 ? sched_balance_rq+0x705/0xa20
 nvkm_ioctl+0xcf/0x1e0 [nouveau]
 nvif_object_mthd+0xce/0x1b0 [nouveau]
 nvif_vmm_put+0x66/0x90 [nouveau]
 nouveau_vma_del+0x86/0xe0 [nouveau]
 nouveau_gem_object_delete_work+0x38/0x60 [nouveau]
 nouveau_cli_work+0xe9/0x160 [nouveau]
 process_one_work+0x17b/0x340
 worker_thread+0x255/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xec/0x230
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject vboxnetadp(OE) vboxnetflt(OE) nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables vboxdrv(OE) qrtr bnep sunrpc binfmt_misc snd_ctl_led vfat snd_soc_skl_hda_dsp fat snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common squashfs snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_tgl snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda iwlmvm snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match snd_soc_acpi_intel_sdca_quirks soundwire_generic_allocation intel_uncore_frequency snd_soc_acpi intel_uncore_frequency_common mac80211 soundwire_bus snd_soc_sdca snd_soc_avs snd_soc_hda_codec x86_pkg_temp_thermal
 snd_hda_ext_core intel_powerclamp snd_soc_core coretemp snd_hda_codec_hdmi kvm_intel snd_compress ac97_bus libarc4 snd_pcm_dmaengine snd_hda_intel btusb snd_intel_dspcfg btrtl snd_intel_sdw_acpi uvcvideo btintel snd_hda_codec btbcm kvm btmtk uvc iwlwifi snd_hda_core videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 snd_hwdep processor_thermal_device_pci snd_seq videobuf2_common processor_thermal_device processor_thermal_wt_hint bluetooth iTCO_wdt irqbypass videodev spi_nor snd_seq_device rapl processor_thermal_rfim intel_pmc_bxt hid_logitech_hidpp cfg80211 mc snd_pcm mtd spd5118 intel_rapl_msr mei_pxp intel_cstate mei_hdcp iTCO_vendor_support processor_thermal_rapl gpio_keys r8169 snd_timer intel_rapl_common msi_wmi intel_uncore snd processor_thermal_wt_req i2c_i801 processor_thermal_power_floor int3403_thermal spi_intel_pci wmi_bmof intel_pmc_core pcspkr spi_intel soundcore realtek rfkill i2c_smbus idma64 processor_thermal_mbox int340x_thermal_zone pmt_telemetry int3400_thermal mei_me joydev intel_hid
 acpi_pad acpi_tad pmt_class soc_button_array acpi_thermal_rel sparse_keymap mei loop nfnetlink zram lz4hc_compress lz4_compress xe intel_vsec drm_suballoc_helper hid_logitech_dj i915 nouveau nvme mxm_wmi drm_ttm_helper nvme_core gpu_sched drm_gpuvm drm_exec drm_buddy i2c_algo_bit ttm nvme_auth drm_display_helper polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 hid_multitouch sha256_ssse3 cec sha1_ssse3 vmd i2c_hid_acpi i2c_hid video wmi pinctrl_alderlake serio_raw iptable_filter ip_tables ip6table_filter ip6_tables br_netfilter bridge stp llc arp_tables fuse