Backtrace

list_del corruption. next->prev should be ffff8d76c4d3d950, but was 0000000000000000. (next=ffff8d7782828400)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:54!
invalid opcode: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 21849 Comm: kworker/0:4 Not tainted 5.17.4-200.fc35.x86_64 #1
Hardware name: HP HP Spectre x360 Convertible 13-ap0xxx/8514, BIOS F.41 08/13/2020
Workqueue: cgwb_release cgwb_release_workfn
RIP: 0010:__list_del_entry_valid.cold+0x23/0x4d
Code: e8 f9 d1 fd ff 0f 0b 48 89 fe 48 c7 c7 68 61 65 bd e8 e8 d1 fd ff 0f 0b 48 89 d1 48 c7 c7 28 62 65 bd 4c 89 c2 e8 d4 d1 fd ff <0f> 0b 48 89 f2 48 89 fe 48 c7 c7 d8 61 65 bd e8 c0 d1 fd ff 0f 0b
RSP: 0000:ffffb4c005343e48 EFLAGS: 00010086
RAX: 000000000000006d RBX: ffff8d76c4d3d940 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffffbd640335 RDI: 00000000ffffffff
RBP: 0000000000000202 R08: 0000000000000000 R09: ffffb4c005343c90
R10: ffffb4c005343c88 R11: ffffffffbdf45548 R12: 00000000ffffffff
R13: ffff8d76c9776800 R14: ffff8d76c4d3d800 R15: ffff8d7a4f039b05
FS:  0000000000000000(0000) GS:ffff8d7a4f000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000013cc0026a000 CR3: 0000000117d7e005 CR4: 00000000003706f0
Call Trace:
 <TASK>
 percpu_counter_destroy+0x24/0x80
 cgwb_release_workfn+0x13c/0x260
 process_one_work+0x1e5/0x3b0
 ? rescuer_thread+0x370/0x370
 worker_thread+0x50/0x3a0
 ? rescuer_thread+0x370/0x370
 kthread+0xe7/0x110
 ? kthread_complete_and_exit+0x20/0x20
 ret_from_fork+0x22/0x30
 </TASK>
Modules linked in: uhid uinput rfcomm snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security ip_set nf_tables nfnetlink ip6table_filter ip6_tables iptable_filter qrtr bnep sunrpc snd_soc_skl_hda_dsp snd_soc_intel_hda_dsp_common snd_soc_hdac_hdmi vfat fat snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_common soundwire_intel soundwire_generic_allocation soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof soundwire_bus ledtrig_audio snd_soc_skl iwlmvm snd_soc_hdac_hda snd_hda_ext_core snd_soc_sst_ipc snd_soc_sst_dsp snd_soc_acpi_intel_match intel_tcc_cooling
 x86_pkg_temp_thermal snd_soc_acpi intel_powerclamp snd_soc_core coretemp mac80211 snd_compress ac97_bus snd_pcm_dmaengine snd_hda_intel kvm_intel snd_intel_dspcfg iTCO_wdt intel_pmc_bxt snd_intel_sdw_acpi libarc4 mei_hdcp iTCO_vendor_support mei_pxp snd_hda_codec kvm intel_rapl_msr snd_hda_core uvcvideo btusb snd_hwdep btrtl snd_seq iwlwifi videobuf2_vmalloc btbcm irqbypass videobuf2_memops snd_seq_device btintel rapl videobuf2_v4l2 snd_pcm iwlmei btmtk intel_cstate videobuf2_common snd_timer bluetooth intel_uncore hp_wmi pcspkr platform_profile wmi_bmof videodev cfg80211 intel_wmi_thunderbolt snd i2c_i801 thunderbolt soundcore i2c_smbus mc ecdh_generic mei_me rfkill processor_thermal_device_pci_legacy processor_thermal_device hid_sensor_magn_3d processor_thermal_rfim hid_sensor_accel_3d hid_sensor_gyro_3d hid_sensor_incl_3d hid_sensor_rotation processor_thermal_mbox joydev mei hid_sensor_trigger idma64 processor_thermal_rapl hid_sensor_iio_common
 industrialio_triggered_buffer intel_rapl_common kfifo_buf industrialio intel_soc_dts_iosf intel_pch_thermal int3400_thermal int3403_thermal acpi_thermal_rel intel_hid int340x_thermal_zone wireless_hotkey soc_button_array acpi_pad sparse_keymap zram ip_tables dm_crypt hid_sensor_hub intel_ishtp_hid i915 i2c_algo_bit drm_kms_helper cec rtsx_pci_sdmmc mmc_core hid_multitouch ttm nvme ucsi_acpi intel_ish_ipc crct10dif_pclmul crc32_pclmul crc32c_intel typec_ucsi ghash_clmulni_intel serio_raw drm nvme_core intel_ishtp rtsx_pci typec wmi i2c_hid_acpi i2c_hid video pinctrl_cannonlake i2c_dev ipmi_devintf ipmi_msghandler fuse