Backtrace

list_del corruption, ffff8a9f853be800->prev is LIST_POISON2 (dead000000000122)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:56!
invalid opcode: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 41770 Comm: kworker/u17:3 Not tainted 6.4.7-100.fc37.x86_64 #1
Hardware name: LENOVO 20N8000RPG/20N8000RPG, BIOS R0YET27W (1.10 ) 01/22/2019
Workqueue: hci0 hci_cmd_sync_work [bluetooth]
RIP: 0010:__list_del_entry_valid+0x93/0xc0
Code: e8 52 3f 9a ff 0f 0b 48 89 fe 48 c7 c7 20 32 93 87 e8 41 3f 9a ff 0f 0b 48 89 fe 48 89 ca 48 c7 c7 58 32 93 87 e8 2d 3f 9a ff <0f> 0b 48 89 fe 48 89 c2 48 c7 c7 90 32 93 87 e8 19 3f 9a ff 0f 0b
RSP: 0018:ffff95b946edbde8 EFLAGS: 00010246
RAX: 000000000000004e RBX: ffff8a9f853be800 RCX: 0000000000000027
RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8aa2e1421540
RBP: ffff8aa05c27a000 R08: 0000000000000000 R09: ffff95b946edbc90
R10: 0000000000000003 R11: ffffffff88146708 R12: ffff8aa05c27a010
R13: ffff8aa05c27a000 R14: ffff8aa05c27a770 R15: ffff8aa2494a8cc0
FS:  0000000000000000(0000) GS:ffff8aa2e1400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055811b901060 CR3: 00000001d8022001 CR4: 00000000003706f0
Call Trace:
 <TASK>
 ? die+0x36/0x90
 ? do_trap+0xda/0x100
 ? __list_del_entry_valid+0x93/0xc0
 ? do_error_trap+0x6a/0x90
 ? __list_del_entry_valid+0x93/0xc0
 ? exc_invalid_op+0x50/0x70
 ? __list_del_entry_valid+0x93/0xc0
 ? asm_exc_invalid_op+0x1a/0x20
 ? __list_del_entry_valid+0x93/0xc0
 ? __list_del_entry_valid+0x93/0xc0
 hci_conn_cleanup+0x43/0x1d0 [bluetooth]
 hci_abort_conn_sync+0xb1/0x260 [bluetooth]
 ? __queue_work+0x1e0/0x450
 hci_cmd_sync_work+0xa3/0x150 [bluetooth]
 process_one_work+0x1c5/0x3c0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x29/0x50
 </TASK>
Modules linked in: tun tls rfcomm snd_seq_dummy snd_hrtimer xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nf_nat_tftp nf_conntrack_tftp bridge stp llc nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_tables ebtable_nat ebtable_broute ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security ip_set nfnetlink ebtable_filter ebtables ip6table_filter iptable_filter qrtr bnep sunrpc binfmt_misc dm_crypt vfat fat snd_sof_pci_intel_cnl snd_sof_intel_hda_common soundwire_intel soundwire_cadence snd_sof_intel_hda_mlink iwlmvm snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof intel_tcc_cooling x86_pkg_temp_thermal snd_sof_utils soundwire_generic_allocation intel_powerclamp soundwire_bus coretemp mac80211 snd_soc_skl snd_soc_hdac_hda snd_hda_ext_core ee1004 snd_soc_sst_ipc kvm_intel snd_soc_sst_dsp snd_hda_codec_hdmi
 iTCO_wdt snd_soc_acpi_intel_match intel_pmc_bxt snd_soc_acpi mei_pxp iTCO_vendor_support snd_ctl_led snd_soc_core snd_hda_codec_conexant mei_hdcp uvcvideo intel_rapl_msr libarc4 snd_hda_codec_generic kvm uvc snd_compress videobuf2_vmalloc videobuf2_memops ac97_bus btusb snd_pcm_dmaengine videobuf2_v4l2 snd_hda_intel snd_intel_dspcfg videobuf2_common btrtl snd_intel_sdw_acpi btbcm irqbypass btintel snd_hda_codec rapl intel_cstate btmtk videodev iwlwifi snd_hda_core bluetooth intel_uncore mc joydev pcspkr snd_hwdep processor_thermal_device_pci_legacy processor_thermal_device think_lmi cfg80211 snd_seq processor_thermal_rfim thinkpad_acpi firmware_attributes_class processor_thermal_mbox snd_seq_device i2c_i801 processor_thermal_rapl ledtrig_audio snd_pcm intel_wmi_thunderbolt wmi_bmof mei_me i2c_smbus snd_timer platform_profile intel_rapl_common mei rfkill intel_soc_dts_iosf intel_pch_thermal snd soundcore int3403_thermal int340x_thermal_zone acpi_pad int3400_thermal acpi_thermal_rel loop zram xfs i915
 rtsx_pci_sdmmc mmc_core nvme i2c_algo_bit drm_buddy crct10dif_pclmul crc32_pclmul crc32c_intel drm_display_helper polyval_clmulni polyval_generic nvme_core ghash_clmulni_intel cec rtsx_pci r8169 sha512_ssse3 ucsi_acpi nvme_common video typec_ucsi serio_raw ttm typec wmi pinctrl_cannonlake scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse