Backtrace

list_add corruption. next is NULL.
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:27!
Oops: invalid opcode: 0000 [#1] SMP PTI
CPU: 2 UID: 1000 PID: 30994 Comm: steamwebhelper Tainted: G        W I         6.16.7-200.fc42.x86_64 #1 PREEMPT(lazy) 
Tainted: [W]=WARN, [I]=FIRMWARE_WORKAROUND
Hardware name: LENOVO 80R1/ideapad 305-14IB, BIOS A8CN51WW(V3.04) 02/26/2016
RIP: 0010:__list_add_valid_or_report.cold+0x23/0x33
Code: 00 00 e8 77 f5 ff ff 48 89 f1 48 89 c2 48 89 fe 48 c7 c7 a0 82 6a b4 e8 a2 17 fb ff 0f 0b 48 c7 c7 c8 81 6a b4 e8 94 17 fb ff <0f> 0b 48 c7 c7 a0 81 6a b4 e8 86 17 fb ff 0f 0b 48 c7 c7 d8 82 6a
RSP: 0018:ffffcfedcdd5fbd0 EFLAGS: 00010246
RAX: 0000000000000022 RBX: 0000000000100000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8e6a8ed1cf80
RBP: 000000000010000f R08: 0000000000000000 R09: ffffcfedcdd5fa80
R10: ffffffffb5139808 R11: 00000000ffffdfff R12: ffff8e6755010000
R13: 0000000000000000 R14: ffff8e69a5ec9600 R15: ffff8e674a3e3100
FS:  00007f7afff37980(0000) GS:ffff8e6ad8d5f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005645c18591e0 CR3: 0000000146dce006 CR4: 00000000003726f0
Call Trace:
 <TASK>
 radeon_vm_bo_set_addr+0x111/0x540 [radeon]
 ? avc_has_extended_perms+0x197/0x600
 radeon_gem_va_ioctl+0xf7/0x2a0 [radeon]
 ? __pfx_radeon_gem_va_ioctl+0x10/0x10 [radeon]
 drm_ioctl_kernel+0xae/0x100
 drm_ioctl+0x2a8/0x550
 ? __pfx_radeon_gem_va_ioctl+0x10/0x10 [radeon]
 radeon_drm_ioctl+0x4e/0x90 [radeon]
 __x64_sys_ioctl+0x97/0xe0
 do_syscall_64+0x7e/0x250
 ? count_memcg_events+0x15d/0x230
 ? handle_mm_fault+0x248/0x360
 ? do_user_addr_fault+0x21a/0x690
 ? irqentry_exit_to_user_mode+0x2c/0x1c0
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f7b01cff0ed
Code: 04 25 28 00 00 00 48 89 45 c8 31 c0 48 8d 45 10 c7 45 b0 10 00 00 00 48 89 45 b8 48 8d 45 d0 48 89 45 c0 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1a 48 8b 45 c8 64 48 2b 04 25 28 00 00 00
RSP: 002b:00007ffefa07e980 EFLAGS: 00200246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f7b01cff0ed
RDX: 00007ffefa07ea40 RSI: 00000000c018646b RDI: 000000000000006f
RBP: 00007ffefa07e9d0 R08: 00005645c1cf4ed0 R09: 0000000000000000
R10: 00005645c1af6770 R11: 0000000000200246 R12: 00007ffefa07ea40
R13: 00000000c018646b R14: 000000000000006f R15: 00005645c1cf4ea0
 </TASK>
Modules linked in: binfmt_misc udf crc_itu_t overlay uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables qrtr bnep vfat fat uvcvideo snd_hda_codec_realtek snd_hda_codec_generic snd_hda_codec_hdmi snd_hda_scodec_component snd_hda_intel snd_intel_dspcfg uvc videobuf2_vmalloc iwlmvm videobuf2_memops snd_usb_audio snd_intel_sdw_acpi videobuf2_v4l2 snd_hda_codec snd_hda_core videobuf2_common snd_usbmidi_lib videodev iTCO_wdt intel_pmc_bxt snd_ump mc snd_rawmidi snd_hwdep mac80211 snd_seq intel_rapl_msr iTCO_vendor_support mei_pxp ak8975 intel_rapl_common at24 mei_hdcp x86_pkg_temp_thermal intel_powerclamp coretemp joydev kvm_intel inv_mpu6050_i2c kvm snd_seq_device irqbypass snd_pcm rapl intel_cstate libarc4 inv_mpu6050 snd_timer snd btusb btrtl btintel btbcm btmtk ideapad_laptop sparse_keymap
 iwlwifi bluetooth intel_uncore pcspkr wmi_bmof cfg80211 inv_sensors_timestamp platform_profile soundcore cm32181 industrialio_triggered_buffer i2c_i801 kfifo_buf mei_me rfkill i2c_mux industrialio mei i2c_smbus lpc_ich acpi_pad ntsync loop zram lz4hc_compress lz4_compress amdgpu amdxcp gpu_sched drm_panel_backlight_quirks i915 radeon rtsx_pci_sdmmc mmc_core drm_ttm_helper drm_buddy ttm drm_exec i2c_algo_bit drm_suballoc_helper polyval_clmulni ghash_clmulni_intel r8169 sha512_ssse3 sha1_ssse3 drm_display_helper realtek rtsx_pci cec intel_oc_wdt video wmi serio_raw sunrpc iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi i2c_dev fuse nfnetlink