Backtrace

WARNING: CPU: 3 PID: 29978 at lib/refcount.c:28 refcount_warn_saturate+0xbe/0x110
Modules linked in: uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr uhid bnep sunrpc uvcvideo binfmt_misc intel_rapl_msr intel_rapl_common uvc videobuf2_vmalloc x86_pkg_temp_thermal nls_utf8 intel_powerclamp hfsplus rtw88_8821cu videobuf2_memops rtw88_8821c snd_hda_codec_cs420x rtw88_usb snd_hda_codec_generic snd_hda_codec_nvhdmi snd_hda_codec_hdmi videobuf2_v4l2 snd_hda_intel coretemp btusb videobuf2_common snd_hda_codec rtw88_core kvm_intel btrtl videodev snd_hda_core mac80211 btintel kvm snd_intel_dspcfg mc wl(POE) snd_intel_sdw_acpi btbcm btmtk snd_hwdep mei_pxp mei_hdcp irqbypass bluetooth libarc4 snd_seq hid_logitech_hidpp iTCO_wdt apple_mfi_fastcharge tg3 snd_seq_device snd_pcm cfg80211 intel_pmc_bxt at24 joydev iTCO_vendor_support applesmc snd_timer rfkill rapl usblp
 acpi_als intel_cstate industrialio_triggered_buffer mei_me snd kfifo_buf soundcore i2c_i801 industrialio mei intel_uncore pcspkr i2c_smbus lpc_ich loop nfnetlink zram lz4hc_compress lz4_compress hid_logitech_dj nouveau drm_ttm_helper ttm gpu_sched sdhci_pci i2c_algo_bit sdhci_uhs2 drm_gpuvm sdhci thunderbolt drm_exec mxm_wmi polyval_clmulni ghash_clmulni_intel cqhci drm_display_helper mmc_core cec video wmi i2c_dev fuse
CPU: 3 UID: 0 PID: 29978 Comm: kworker/u16:25 Tainted: P    B   W  OE       6.17.10-100.fc41.x86_64 #1 PREEMPT(lazy) 
Tainted: [P]=PROPRIETARY_MODULE, [B]=BAD_PAGE, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
Hardware name: Apple Inc. iMac14,2/Mac-27ADBB7B4CEE8E61, BIOS IM142.88Z.0118.B12.1509081435 09/08/2015
Workqueue: thunderbolt0 tb_handle_hotplug [thunderbolt]
RIP: 0010:refcount_warn_saturate+0xbe/0x110
Code: 01 01 e8 a5 26 7a ff 0f 0b c3 cc cc cc cc 80 3d 7c f0 ff 01 00 75 85 48 c7 c7 28 71 e5 8a c6 05 6c f0 ff 01 01 e8 82 26 7a ff <0f> 0b c3 cc cc cc cc 80 3d 5a f0 ff 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0000:ffffd21b8a47fbd8 EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffff8ac9a6440000 RCX: 0000000000000027
RDX: ffff8ac9a739cf88 RSI: 0000000000000001 RDI: ffff8ac9a739cf80
RBP: 00000000ffffff92 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffd21b8a47fc1c
R13: ffff8ac9a6440000 R14: 0000000000000000 R15: ffffd21b8a47fd80
FS:  0000000000000000(0000) GS:ffff8aca1ab56000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff8ac9a6440068 CR3: 000000006362c001 CR4: 00000000001726f0
Call Trace:
 <TASK>
 tb_cfg_request_put+0x5a/0x70 [thunderbolt]
 tb_cfg_read_raw+0x1f7/0x2e0 [thunderbolt]
 tb_cfg_read+0x58/0xf0 [thunderbolt]
 tb_port_is_enabled+0xa1/0x100 [thunderbolt]
 tb_dp_resource_available+0x1b/0x1f0 [thunderbolt]
 tb_handle_hotplug+0x3b4/0x690 [thunderbolt]
 process_one_work+0x18d/0x340
 worker_thread+0x256/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xfc/0x240
 ? __pfx_kthread+0x10/0x10
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0xf5/0x110
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>