Backtrace

kernel BUG at mm/slub.c:546!
Oops: invalid opcode: 0000 [#1] SMP PTI
CPU: 5 UID: 0 PID: 394026 Comm: rmmod Not tainted 6.16.9-200.fc42.x86_64 #1 PREEMPT(lazy) 
Hardware name: Notebook                         Titanium B155 MAX/Titanium B155 MAX, BIOS 1.03.06AVL v1 25/09/2014
RIP: 0010:__slab_free+0x111/0x2a0
Code: 85 9e 00 00 00 4d 85 ff 0f 84 62 ff ff ff 48 8b 74 24 08 4c 89 ff e8 0e 4c e0 00 4c 8b 73 20 4c 3b 74 24 20 0f 85 55 ff ff ff <0f> 0b 66 90 45 31 ff 4d 85 f6 74 ad 48 8b 03 48 89 0c 24 48 c1 e8
RSP: 0018:ffffcf53ea437bf0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: fffff2ea50149000 RCX: 0000000000000000
RDX: ffff8eb485240780 RSI: ffff8eb485240780 RDI: ffffcf53ea437c60
RBP: ffffcf53ea437c90 R08: 0000000000000001 R09: ffffffffc1308a04
R10: ffff8eb485240780 R11: fffff2ea50149000 R12: ffff8eb181034300
R13: ffff8eb485240780 R14: ffff8eb485240780 R15: ffffffffc18968b8
FS:  00007f70ed85cb80(0000) GS:ffff8eb4fa0dd000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055ff6ede2120 CR3: 000000000efba006 CR4: 00000000001726f0
Call Trace:
 <TASK>
 kfree+0x334/0x3b0
 ? __synchronize_hardirq+0x7f/0xc0
 iwl_pcie_txq_free+0x124/0x170 [iwlwifi]
 iwl_pcie_tx_free+0x65/0xf0 [iwlwifi]
 iwl_trans_pcie_free+0x1d5/0x260 [iwlwifi]
 pci_device_remove+0x4a/0xc0
 device_release_driver_internal+0x19e/0x200
 driver_detach+0x48/0x90
 bus_remove_driver+0x6d/0xf0
 pci_unregister_driver+0x2e/0xb0
 iwl_drv_exit+0x9/0x330 [iwlwifi]
 __do_sys_delete_module.isra.0+0x1b5/0x2e0
 do_syscall_64+0x7e/0x250
 ? do_syscall_64+0xb6/0x250
 ? do_syscall_64+0xb6/0x250
 ? __x64_sys_close+0x3d/0x80
 ? do_syscall_64+0xb6/0x250
 ? irqentry_exit_to_user_mode+0x2c/0x1c0
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f70ed10406b
Code: 73 01 c3 48 8b 0d 95 1d 0f 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 65 1d 0f 00 f7 d8 64 89 01 48
RSP: 002b:00007fff206fb4c8 EFLAGS: 00000202 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 000055bfda82e750 RCX: 00007f70ed10406b
RDX: 0000000000000003 RSI: 0000000000000800 RDI: 000055bfda82e7b8
RBP: 00007fff206fb4f0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
R13: 00007fff206fd58b R14: 00007fff206fb748 R15: 0000000000000000
 </TASK>
Modules linked in: exfat uas usb_storage overlay uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_ct qrtr uhid bnep binfmt_misc vfat fat intel_rapl_msr intel_rapl_common x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel mac80211 snd_hda_codec_via libarc4 snd_hda_codec_generic kvm snd_hda_codec_hdmi uvcvideo btusb uvc btrtl videobuf2_vmalloc snd_hda_intel videobuf2_memops btintel videobuf2_v4l2 iwlwifi(-) btbcm irqbypass videobuf2_common btmtk rapl intel_cstate mei_pxp iTCO_wdt intel_pmc_bxt mei_hdcp iTCO_vendor_support snd_intel_dspcfg at24 videodev snd_intel_sdw_acpi cfg80211 bluetooth snd_soc_rt5640 r8169 snd_hda_codec intel_uncore snd_hda_core mc snd_soc_rl6231 realtek rfkill snd_soc_core snd_compress snd_hwdep ac97_bus snd_seq snd_pcm_dmaengine snd_seq_device snd_pcm joydev mei_me snd_timer snd mei i2c_i801 lpc_ich soundcore pcspkr i2c_smbus nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject
 nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables loop nfnetlink zram lz4hc_compress lz4_compress dm_crypt i915 hid_logitech_hidpp nouveau rtsx_pci_sdmmc drm_ttm_helper gpu_sched mmc_core drm_gpuvm drm_exec drm_buddy i2c_algo_bit ttm polyval_clmulni mxm_wmi ghash_clmulni_intel sha512_ssse3 drm_display_helper sha1_ssse3 rtsx_pci cec intel_oc_wdt video wmi hid_logitech_dj serio_raw i2c_dev fuse [last unloaded: iwldvm]