Backtrace

list_del corruption, ffff93da926ccca8->next is LIST_POISON1 (dead000000000100)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:56!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI
CPU: 10 UID: 0 PID: 1104745 Comm: kworker/10:1 Tainted: G           OE      6.14.5-100.fc40.x86_64 #1
Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
Hardware name: Intel(R) Client Systems NUC10i7FNH/NUC10i7FNB, BIOS FNCML357.0032.2019.1021.1624 10/21/2019
Workqueue: events tb_cfg_request_work [thunderbolt]
RIP: 0010:__list_del_entry_valid_or_report+0x76/0xf0
Code: 75 66 5b b8 01 00 00 00 5d 41 5c c3 cc cc cc cc 48 89 ef e8 ac 33 ac ff 48 89 ea 48 89 de 48 c7 c7 68 ac e8 a3 e8 ba 89 63 ff <0f> 0b 4c 89 e7 e8 90 33 ac ff 4c 89 e2 48 89 de 48 c7 c7 a0 ac e8
RSP: 0018:ffffac6ba9c93e18 EFLAGS: 00010246
RAX: 000000000000004e RBX: ffff93da926ccca8 RCX: 0000000000000027
RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff93e1e0f21940
RBP: dead000000000100 R08: 0000000000000000 R09: 2930303130303030
R10: 53494f505f545349 R11: 6165642820314e4f R12: dead000000000122
R13: ffff93daf54d8000 R14: ffff93da926ccc70 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff93e1e0f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4820007018 CR3: 000000012675a006 CR4: 00000000003726f0
Call Trace:
 <TASK>
 tb_cfg_request_dequeue+0x26/0xa0 [thunderbolt]
 tb_cfg_request_work+0x2e/0x40 [thunderbolt]
 process_one_work+0x176/0x330
 worker_thread+0x252/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xec/0x230
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: uinput joydev uhid rfcomm snd_seq_dummy snd_hrtimer xt_conntrack xt_MASQUERADE bridge stp llc xt_set xt_addrtype nft_compat overlay uvcvideo uvc videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common pl2303 videodev nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables vboxnetadp(OE) vboxnetflt(OE) qrtr vboxdrv(OE) bnep sunrpc binfmt_misc r8153_ecm cdc_ether usbnet snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_hda_codec_hdmi snd_sof_pci snd_sof_xtensa_dsp snd_sof btusb snd_sof_utils snd_soc_acpi_intel_match btrtl snd_soc_acpi_intel_sdca_quirks soundwire_generic_allocation btintel snd_soc_acpi intel_rapl_msr soundwire_bus btbcm intel_rapl_common btmtk intel_uncore_frequency
 snd_soc_sdca intel_uncore_frequency_common bluetooth snd_soc_avs r8152 iwlmvm mii snd_soc_hda_codec cdc_acm snd_hda_ext_core snd_soc_core snd_ctl_led x86_pkg_temp_thermal intel_powerclamp snd_hda_codec_realtek coretemp snd_compress snd_hda_codec_generic ac97_bus iTCO_wdt snd_hda_scodec_component spi_nor snd_pcm_dmaengine tps6598x intel_pmc_bxt mac80211 mtd ee1004 iTCO_vendor_support mei_hdcp mei_pxp typec snd_hda_intel snd_usb_audio libarc4 snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec snd_usbmidi_lib mc snd_ump snd_hda_core snd_rawmidi snd_hwdep irqbypass snd_seq rapl intel_cstate snd_seq_device iwlwifi snd_pcm vfat intel_uncore fat igb wmi_bmof pcspkr snd_timer i2c_i801 spi_intel_pci e1000e intel_wmi_thunderbolt cfg80211 dca thunderbolt spi_intel i2c_smbus snd mei_me soundcore ir_rc6_decoder mei idma64 rfkill intel_pch_thermal serial_multi_instantiate rc_rc6_mce intel_pmc_core pmt_telemetry ite_cir pmt_class acpi_tad acpi_pad intel_vsec loop nfnetlink zram lz4hc_compress lz4_compress i915 sdhci_pci
 sdhci_uhs2 sdhci i2c_algo_bit drm_buddy ttm cqhci polyval_clmulni nvme polyval_generic mmc_core ghash_clmulni_intel drm_display_helper nvme_core sha512_ssse3 sha256_ssse3 sha1_ssse3 nvme_auth cec video wmi pinctrl_cannonlake uas usb_storage ip6_tables ip_tables fuse [last unloaded: kvm]