Backtrace

list_del corruption, ffff99fc556cf008->next is LIST_POISON1 (dead000000000100)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:56!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI
CPU: 5 UID: 1000 PID: 2668 Comm: KMS thread Tainted: G     U  W          6.14.5-100.fc40.x86_64 #1
Tainted: [U]=USER, [W]=WARN
Hardware name: Intel(R) Client Systems NUC12SNKi72/NUC12SNKi72, BIOS SNADL357.0054.2022.0914.1543 09/14/2022
RIP: 0010:__list_del_entry_valid_or_report+0x76/0xf0
Code: 75 66 5b b8 01 00 00 00 5d 41 5c c3 cc cc cc cc 48 89 ef e8 ac 33 ac ff 48 89 ea 48 89 de 48 c7 c7 68 ac e8 b1 e8 ba 89 63 ff <0f> 0b 4c 89 e7 e8 90 33 ac ff 4c 89 e2 48 89 de 48 c7 c7 a0 ac e8
RSP: 0018:ffffac2cc6a87c40 EFLAGS: 00010246
RAX: 000000000000004e RBX: ffff99fc556cf008 RCX: 0000000000000027
RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff9a0bb00a1940
RBP: dead000000000100 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000004 R12: dead000000000122
R13: ffff99fc52875ea0 R14: ffffac2cc6a87cb8 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9a0bb0080000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007faa94e24c58 CR3: 00000001c446f006 CR4: 0000000000f72ef0
PKRU: 55555554
Call Trace:
 <TASK>
 drm_framebuffer_cleanup+0x2b/0x70
 intel_user_framebuffer_destroy+0x13/0x80 [i915]
 drm_fb_release+0x117/0x190
 drm_file_free+0x1b1/0x280
 drm_release_noglobal+0x1c/0x80
 __fput+0xe3/0x2a0
 task_work_run+0x59/0x90
 do_exit+0x256/0x4b0
 do_group_exit+0x30/0x80
 get_signal+0x7e6/0x7f0
 arch_do_signal_or_restart+0x35/0x100
 syscall_exit_to_user_mode+0x126/0x210
 do_syscall_64+0x8e/0x160
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f6b7c11c1fd
Code: Unable to access opcode bytes at 0x7f6b7c11c1d3.
RSP: 002b:00007f6b61604e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000007
RAX: fffffffffffffdfc RBX: 0000558195148240 RCX: 00007f6b7c11c1fd
RDX: 00000000ffffffff RSI: 0000000000000003 RDI: 0000558196da3930
RBP: 00007f6b61604e90 R08: 0000000000000000 R09: 000000007fffffff
R10: 0000558195148240 R11: 0000000000000293 R12: 000000007fffffff
R13: 00000000ffffffff R14: 0000000000000003 R15: 0000558196da3930
 </TASK>
Modules linked in: tun vfio_pci vfio_pci_core vfio_iommu_type1 vfio iommufd xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nft_compat nf_nat_tftp nf_conntrack_tftp bridge stp llc exfat uinput rfcomm snd_seq_dummy snd_hrtimer sunrpc nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr bnep binfmt_misc vfat fat snd_sof_pci_intel_tgl snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof iwlmvm intel_rapl_msr intel_rapl_common intel_uncore_frequency intel_uncore_frequency_common snd_sof_utils snd_soc_acpi_intel_match snd_soc_acpi_intel_sdca_quirks soundwire_generic_allocation snd_soc_acpi soundwire_bus mac80211 snd_soc_sdca snd_soc_avs snd_hda_codec_realtek
 x86_pkg_temp_thermal snd_hda_codec_generic snd_soc_hda_codec intel_powerclamp snd_hda_ext_core coretemp snd_hda_scodec_component snd_hda_codec_hdmi snd_soc_core kvm_intel snd_compress ac97_bus snd_pcm_dmaengine snd_hda_intel libarc4 snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec kvm snd_hda_core snd_hwdep snd_seq iwlwifi btusb snd_seq_device spi_nor btrtl btintel snd_pcm joydev btbcm irqbypass mtd mei_hdcp mei_pxp ee1004 rapl btmtk intel_cstate mei_gsc cfg80211 bluetooth uas intel_uncore snd_timer spi_intel_pci mei_me usb_storage i2c_i801 snd thunderbolt wmi_bmof igc pcspkr spi_intel idma64 mei i2c_smbus soundcore rfkill wacom intel_pmc_core igen6_edac pmt_telemetry pmt_class acpi_pad acpi_tad squashfs loop nfnetlink zram lz4hc_compress lz4_compress xe drm_ttm_helper gpu_sched drm_suballoc_helper drm_gpuvm drm_exec i915 i2c_algo_bit rtsx_pci_sdmmc drm_buddy mmc_core ttm nvme polyval_clmulni drm_display_helper polyval_generic nvme_core ucsi_acpi ghash_clmulni_intel sha512_ssse3 typec_ucsi sha256_ssse3
 rtsx_pci sha1_ssse3 typec cec wdat_wdt nvme_auth video intel_vsec wmi pinctrl_tigerlake ip6_tables ip_tables fuse