Backtrace

list_del corruption, ffff984e957f3800->prev is LIST_POISON2 (dead000000000122)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:56!
invalid opcode: 0000 [#1] PREEMPT SMP PTI
CPU: 6 PID: 159 Comm: kworker/u25:0 Tainted: G           OE      6.3.5-200.fc38.x86_64 #1
Hardware name: MONSTER ABRA A5 V15.4/ABRA A5 V15.4, BIOS N.1.03 07/16/2019
Workqueue: hci0 hci_cmd_sync_work [bluetooth]
RIP: 0010:__list_del_entry_valid+0x93/0xc0
Code: e8 c2 a5 99 ff 0f 0b 48 89 fe 48 c7 c7 b0 cd 92 85 e8 b1 a5 99 ff 0f 0b 48 89 fe 48 89 ca 48 c7 c7 e8 cd 92 85 e8 9d a5 99 ff <0f> 0b 48 89 fe 48 89 c2 48 c7 c7 20 ce 92 85 e8 89 a5 99 ff 0f 0b
RSP: 0018:ffffbe91c07ebdb8 EFLAGS: 00010246
RAX: 000000000000004e RBX: ffff984e957f3800 RCX: 0000000000000027
RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff98512dba1540
RBP: ffff984dc61a2000 R08: 0000000000000000 R09: ffffbe91c07ebc60
R10: 0000000000000003 R11: ffffffff86146108 R12: ffff984dc61a2770
R13: ffff984e5fe2e3c0 R14: dead000000000122 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff98512db80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff0380a6f00 CR3: 0000000192022004 CR4: 00000000003706e0
Call Trace:
 <TASK>
 ? die+0x36/0x90
 ? do_trap+0xda/0x100
 ? __list_del_entry_valid+0x93/0xc0
 ? do_error_trap+0x6a/0x90
 ? __list_del_entry_valid+0x93/0xc0
 ? exc_invalid_op+0x50/0x70
 ? __list_del_entry_valid+0x93/0xc0
 ? asm_exc_invalid_op+0x1a/0x20
 ? __list_del_entry_valid+0x93/0xc0
 ? __list_del_entry_valid+0x93/0xc0
 hci_conn_cleanup+0x43/0x1d0 [bluetooth]
 hci_conn_del+0xf8/0x230 [bluetooth]
 hci_abort_conn_sync+0xae/0x230 [bluetooth]
 ? unpair_device_sync+0x6d/0xe0 [bluetooth]
 hci_cmd_sync_work+0xc8/0x190 [bluetooth]
 process_one_work+0x1c4/0x3d0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xdb/0x110
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x29/0x50
 </TASK>
Modules linked in: vboxnetadp(OE) vboxnetflt(OE) vboxdrv(OE) uinput uhid rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ppdev parport_pc parport vmw_vsock_vmci_transport vsock vmw_vmci sunrpc ip_set nf_tables nfnetlink qrtr bnep binfmt_misc iwlmvm vfat fat snd_sof_pci_intel_cnl mac80211 snd_sof_intel_hda_common soundwire_intel soundwire_generic_allocation soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils soundwire_bus libarc4 intel_rapl_msr intel_rapl_common snd_soc_skl intel_tcc_cooling x86_pkg_temp_thermal intel_powerclamp snd_soc_hdac_hda snd_hda_ext_core snd_soc_sst_ipc snd_soc_sst_dsp snd_soc_acpi_intel_match coretemp snd_soc_acpi snd_soc_core kvm_intel snd_hda_codec_realtek snd_compress ac97_bus snd_hda_codec_generic snd_hda_codec_hdmi snd_pcm_dmaengine
 uvcvideo iwlwifi snd_hda_intel kvm uvc snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec rtsx_usb_ms btusb iTCO_wdt intel_pmc_bxt btrtl btbcm snd_hda_core videobuf2_vmalloc memstick btintel videobuf2_memops mei_hdcp mei_pxp ee1004 iTCO_vendor_support irqbypass btmtk snd_hwdep videobuf2_v4l2 cfg80211 snd_seq videobuf2_common rapl asus_wmi bluetooth snd_seq_device videodev snd_pcm intel_cstate ledtrig_audio sparse_keymap snd_timer mei_me platform_profile i2c_i801 wmi_bmof pcspkr mc snd mei i2c_smbus idma64 rfkill intel_uncore soundcore intel_pch_thermal joydev acpi_tad acpi_pad squashfs loop zram rtsx_usb_sdmmc mmc_core hid_logitech_hidpp rtsx_usb i915 nouveau drm_ttm_helper i2c_algo_bit crct10dif_pclmul drm_buddy drm_display_helper crc32_pclmul hid_multitouch nvme crc32c_intel mxm_wmi video polyval_clmulni polyval_generic hid_logitech_dj nvme_core ghash_clmulni_intel cec sha512_ssse3 r8169 i2c_hid_acpi ttm nvme_common i2c_hid wmi pinctrl_cannonlake serio_raw ip6_tables ip_tables fuse