Backtrace

list_del corruption. next->prev should be ffffcb2640103408, but was ffffcb2640103400
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:54!
invalid opcode: 0000 [#1] PREEMPT SMP PTI
CPU: 4 PID: 46754 Comm: node Not tainted 5.16.8-200.fc35.x86_64 #1
Hardware name: To be filled by O.E.M. To be filled by O.E.M./H81, BIOS 4.6.5 01/25/2019
RIP: 0010:__list_del_entry_valid.cold+0x1d/0x47
Code: c7 c7 b8 a9 64 b9 e8 3d d8 fd ff 0f 0b 48 89 fe 48 c7 c7 48 aa 64 b9 e8 2c d8 fd ff 0f 0b 48 c7 c7 f8 aa 64 b9 e8 1e d8 fd ff <0f> 0b 48 89 f2 48 89 fe 48 c7 c7 b8 aa 64 b9 e8 0a d8 fd ff 0f 0b
RSP: 0018:ffffa3924a4afb50 EFLAGS: 00010086
RAX: 0000000000000054 RBX: ffff96f94ed376d0 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffb9634ddd RDI: 00000000ffffffff
RBP: 0000000000000901 R08: 0000000000000000 R09: ffffa3924a4af998
R10: ffffa3924a4af990 R11: ffffffffb9f462a8 R12: ffff96f95efd56c0
R13: ffff96f94ed376e0 R14: ffffcb2640103408 R15: ffff96f94ed37640
FS:  00007fab6f7bb780(0000) GS:ffff96f94ed00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000208c05b57000 CR3: 00000002c8c54004 CR4: 00000000001706e0
Call Trace:
 <TASK>
 get_page_from_freelist+0x278/0x1590
 ? prepare_alloc_pages.constprop.0+0x175/0x190
 __alloc_pages+0xd6/0x210
 skb_page_frag_refill+0x78/0x100
 sk_page_frag_refill+0x1d/0xa0
 tcp_sendmsg_locked+0x1fa/0xcb0
 tcp_sendmsg+0x28/0x40
 sock_sendmsg+0x57/0x60
 sock_write_iter+0x89/0xd0
 ? init_debug_store_on_cpu+0x30/0x40
 new_sync_write+0x175/0x180
 ? init_debug_store_on_cpu+0x30/0x40
 vfs_write+0x209/0x2a0
 ksys_write+0x87/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fab6f9924a7
Code: 44 00 00 41 54 49 89 d4 55 48 89 f5 53 89 fb 48 83 ec 10 e8 fb fc ff ff 4c 89 e2 48 89 ee 89 df 41 89 c0 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 48 89 44 24 08 e8 34 fd ff ff 48
RSP: 002b:00007ffcaa32f600 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000026 RCX: 00007fab6f9924a7
RDX: 00000000000baef6 RSI: 00000000078c1c40 RDI: 0000000000000026
RBP: 00000000078c1c40 R08: 0000000000000000 R09: 0000000006e66e10
R10: 00000000056e7010 R11: 0000000000000293 R12: 00000000000baef6
R13: 00007ffcaa32f750 R14: 0000000000000000 R15: 0000000000b156d0
 </TASK>
Modules linked in: uinput isofs snd_seq_dummy snd_hrtimer xt_nat veth xt_conntrack xt_MASQUERADE nf_conntrack_netlink nft_counter xt_addrtype nft_compat br_netfilter bridge stp llc nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink rfkill overlay qrtr sunrpc snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic ledtrig_audio intel_rapl_msr snd_hda_intel snd_intel_dspcfg snd_usb_audio intel_rapl_common snd_intel_sdw_acpi snd_hda_codec snd_usbmidi_lib snd_hda_core snd_rawmidi mc x86_pkg_temp_thermal snd_hwdep intel_powerclamp snd_seq coretemp snd_seq_device snd_pcm snd_timer kvm_intel snd soundcore kvm irqbypass iTCO_wdt intel_pmc_bxt iTCO_vendor_support mei_pxp mei_hdcp joydev rapl intel_cstate mei_me at24 i2c_i801 intel_uncore mei i2c_smbus lpc_ich pcspkr zram
 ip_tables uas usb_storage nouveau drm_ttm_helper ttm i2c_algo_bit mxm_wmi wmi drm_kms_helper cec crct10dif_pclmul crc32_pclmul crc32c_intel drm ghash_clmulni_intel r8169 serio_raw video ipmi_devintf ipmi_msghandler fuse