BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 0 PID: 2004 Comm: Xwayland Tainted: G             L    5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 bb c2 e1 cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffa95e42eebd10 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffa95e42eebd30 RCX: 0000000000000001
RDX: ffff9c7900188c78 RSI: ffff9c79039e26da RDI: ffff9c7905cadc00
RBP: ffff9c7907eadf00 R08: ffff9c7900188c00 R09: ffff9c7907eadf90
R10: 0000000000000000 R11: ffff9c79039e26d8 R12: ffff9c7903338ea0
R13: ffffa95e42eebe18 R14: ffff9c7906ad1600 R15: ffff9c7906ad1600
FS:  00007f5565d22a00(0000) GS:ffff9c793ec00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000006624002 CR4: 00000000000706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6a/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 ? ptep_set_access_flags+0x30/0x40
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 vmw_generic_ioctl+0x8e/0x100 [vmwgfx]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f55668a6cdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffc929d0a08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ffc929d0a50 RCX: 00007f55668a6cdb
RDX: 00007ffc929d0a50 RSI: 000000004008644a RDI: 000000000000000c
RBP: 000000004008644a R08: 000055f80c1482d0 R09: 0000000000000000
R10: 00000000ffffff38 R11: 0000000000000246 R12: 000055f80c126430
R13: 000000000000000c R14: 000055f80c1482c0 R15: 000055f80c148384
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc intel_rapl_msr intel_rapl_common snd_intel8x0 intel_powerclamp rapl snd_ac97_codec ac97_bus snd_seq snd_seq_device snd_pcm joydev pcspkr snd_timer snd soundcore i2c_piix4 vboxguest zram ip_tables vmwgfx drm_ttm_helper ttm drm_kms_helper cec drm crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel e1000 serio_raw ata_generic pata_acpi video ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000

WARNING: CPU: 5 PID: 1564 at drivers/gpu/drm/vmwgfx/vmwgfx_cmdbuf.c:400 vmw_cmdbuf_ctx_process+0x263/0x270 [vmwgfx]
Modules linked in: snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink qrtr vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock sunrpc squashfs loop snd_seq_midi snd_seq_midi_event intel_rapl_msr intel_rapl_common kvm_amd ccp vmw_balloon kvm snd_ens1371 snd_ac97_codec irqbypass snd_rawmidi gameport ac97_bus snd_seq snd_seq_device snd_pcm pcspkr joydev snd_timer snd soundcore vmw_vmci i2c_piix4 zram ip_tables vmwgfx drm_ttm_helper ttm drm_kms_helper crct10dif_pclmul crc32_pclmul cec crc32c_intel ghash_clmulni_intel drm nvme serio_raw nvme_core vmxnet3 ata_generic pata_acpi ipmi_devintf ipmi_msghandler fuse
CPU: 5 PID: 1564 Comm: Xorg Not tainted 5.17.5-200.fc35.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:vmw_cmdbuf_ctx_process+0x263/0x270 [vmwgfx]
Code: 8b 44 24 28 83 00 01 48 83 c4 30 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc 48 c7 c7 f3 4f 60 c0 c6 05 34 6b 03 00 01 e8 6d fb 66 c7 <0f> 0b e9 0d fe ff ff 66 0f 1f 44 00 00 0f 1f 44 00 00 41 55 4c 8d
RSP: 0018:ffffa133d5ea3a78 EFLAGS: 00010296
RAX: 0000000000000015 RBX: ffff8db12506ea00 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffff886403b5 RDI: 00000000ffffffff
RBP: ffff8daf00d9b488 R08: 0000000000000000 R09: ffffa133d5ea38b8
R10: ffffa133d5ea38b0 R11: ffff8db61ddfffe8 R12: 0000000000000003
R13: ffff8daf00d9b670 R14: ffff8db12506ed00 R15: ffff8db12506ed18
FS:  00007f6930c15f00(0000) GS:ffff8db61df40000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f298c05f000 CR3: 000000013dc7a000 CR4: 0000000000350ee0
Call Trace:
 <TASK>
 vmw_cmdbuf_man_process+0x45/0xe0 [vmwgfx]
 __vmw_cmdbuf_cur_flush+0xad/0xf0 [vmwgfx]
 vmw_cmdbuf_reserve+0xaf/0x170 [vmwgfx]
 vmw_cmd_ctx_reserve+0x2e/0x230 [vmwgfx]
 vmw_cmd_send_fence+0x1c/0x110 [vmwgfx]
 vmw_execbuf_fence_commands+0x40/0xe0 [vmwgfx]
 vmw_execbuf_process+0x7f4/0x11b0 [vmwgfx]
 vmw_execbuf_ioctl+0x14b/0x280 [vmwgfx]
 ? drm_ioctl_kernel+0x8e/0x120 [drm]
 ? vmw_execbuf_release_pinned_bo+0x50/0x50 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_execbuf_release_pinned_bo+0x50/0x50 [vmwgfx]
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f693139dcdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffed7ad65a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ffed7ad6610 RCX: 00007f693139dcdb
RDX: 00007ffed7ad6610 RSI: 000000004028644c RDI: 0000000000000010
RBP: 000000004028644c R08: 000000000000003c R09: 00007ffed7ad6698
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed7ad6698
R13: 0000000000000010 R14: 0000559c7af1c1c0 R15: 00007ffed7ad6698
 </TASK>

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 2 PID: 10052 Comm: Xwayland Tainted: P           OE     5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 6b ea c7 cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffa610835cbd10 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffa610835cbd30 RCX: 0000000000000001
RDX: ffff8dc278c52078 RSI: ffff8dc2789a76c2 RDI: ffff8dc25785d800
RBP: ffff8dc3491cfa80 R08: ffff8dc278c52000 R09: ffff8dc3491cfb10
R10: 0000000000000008 R11: ffff8dc2789a76c0 R12: ffff8dc2a42b83c0
R13: ffffa610835cbe18 R14: ffff8dc257b66400 R15: ffff8dc257b66400
FS:  00007f88a4bdca00(0000) GS:ffff8dc35bd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000036b6a000 CR4: 00000000000506e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6a/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 vmw_generic_ioctl+0x8e/0x100 [vmwgfx]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f88a5760cdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffe1f19d2e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ffe1f19d330 RCX: 00007f88a5760cdb
RDX: 00007ffe1f19d330 RSI: 000000004008644a RDI: 000000000000000c
RBP: 000000004008644a R08: 000055655d547870 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000246 R12: 000055655d3f6340
R13: 000000000000000c R14: 000055655d598820 R15: 000055655d3d3984
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc binfmt_misc intel_rapl_msr snd_intel8x0 snd_ac97_codec intel_rapl_common ac97_bus snd_seq joydev snd_seq_device snd_pcm snd_timer snd soundcore vboxguest i2c_piix4 pcspkr zram ip_tables vmwgfx drm_ttm_helper ttm drm_kms_helper crct10dif_pclmul crc32_pclmul crc32c_intel cec ghash_clmulni_intel drm serio_raw e1000 ata_generic pata_acpi video ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#2] PREEMPT SMP PTI
CPU: 2 PID: 10376 Comm: gnome-shell Tainted: G      D           5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 fb ea f9 cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffac0883b1fd10 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffac0883b1fd30 RCX: 0000000000000001
RDX: ffff9369fde26c78 RSI: ffff9369aa93623a RDI: ffff9369d18f7800
RBP: ffff936a8889ba80 R08: ffff9369fde26c00 R09: ffff936a8889bb10
R10: 0000000000000000 R11: ffff9369aa936238 R12: ffff936982105a20
R13: ffffac0883b1fe18 R14: ffff9369a25e3000 R15: ffff9369a25e3000
FS:  00007fb599454d80(0000) GS:ffff936a9bd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000022672000 CR4: 00000000000406e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6a/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 vmw_generic_ioctl+0x8e/0x100 [vmwgfx]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fb59f819cdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007fffdad116e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fffdad11730 RCX: 00007fb59f819cdb
RDX: 00007fffdad11730 RSI: 000000004008644a RDI: 000000000000000d
RBP: 000000004008644a R08: 00005640cfdb9ab0 R09: 0000000000000000
R10: 00005640cf4c2640 R11: 0000000000000246 R12: 00005640d006d250
R13: 000000000000000d R14: 00005640d0afb050 R15: 00007fffdad118c8
 </TASK>
Modules linked in: snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc snd_intel8x0 snd_ac97_codec ac97_bus snd_seq snd_seq_device snd_pcm snd_timer snd i2c_piix4 intel_rapl_msr intel_rapl_common soundcore rapl pcspkr joydev vboxguest zram ip_tables vmwgfx drm_ttm_helper ttm drm_kms_helper cec drm crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel e1000 serio_raw ata_generic pata_acpi video ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 2 PID: 2633 Comm: Xwayland Tainted: G             L    5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 1b bf f2 cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffff9b5345547d10 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff9b5345547d30 RCX: 0000000000000001
RDX: ffff8aed92207878 RSI: ffff8aedab92a482 RDI: ffff8aece11d9000
RBP: ffff8aed4879ccc0 R08: ffff8aed92207800 R09: ffff8aed4879cd50
R10: 0000000000000000 R11: ffff8aedab92a480 R12: ffff8aed68793060
R13: ffff9b5345547e18 R14: ffff8aed92216a00 R15: ffff8aed92216a00
FS:  00007f2d5a8a5a00(0000) GS:ffff8aee57c80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000016885c000 CR4: 00000000000506e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6a/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? sched_clock_cpu+0xb/0xc0
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 vmw_generic_ioctl+0x8e/0x100 [vmwgfx]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f2d5b429cdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffec2376178 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ffec23761c0 RCX: 00007f2d5b429cdb
RDX: 00007ffec23761c0 RSI: 000000004008644a RDI: 000000000000000c
RBP: 000000004008644a R08: 000055a6bf289ef0 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000246 R12: 000055a6bf294010
R13: 000000000000000c R14: 0000000000000000 R15: 00007ffec23762c0
 </TASK>
Modules linked in: uinput isofs snd_seq_dummy snd_hrtimer vboxvideo drm_vram_helper nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr vboxsf sunrpc intel_rapl_msr intel_rapl_common snd_intel8x0 snd_ac97_codec ac97_bus joydev snd_seq snd_seq_device pcspkr snd_pcm snd_timer snd vboxguest soundcore i2c_piix4 zram ip_tables vmwgfx drm_ttm_helper ttm crct10dif_pclmul crc32_pclmul crc32c_intel drm_kms_helper cec drm ghash_clmulni_intel e1000 serio_raw ata_generic pata_acpi video ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 0 PID: 2125 Comm: Xwayland Not tainted 5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 0b db d3 cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffa821039dbd10 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffa821039dbd30 RCX: 0000000000000001
RDX: ffff8d8412219878 RSI: ffff8d83e4494922 RDI: ffff8d83d596f000
RBP: ffff8d83c7e8f540 R08: ffff8d8412219800 R09: ffff8d83c7e8f5d0
R10: 0000000000000000 R11: ffff8d83e4494920 R12: ffff8d83c61574e0
R13: ffffa821039dbe18 R14: ffff8d83fee9da00 R15: ffff8d83fee9da00
FS:  00007f490eb3aa00(0000) GS:ffff8d843dc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000003a96e002 CR4: 00000000000706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6a/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? __schedule+0x23b/0x11c0
 ? ktime_get+0x38/0x90
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 vmw_generic_ioctl+0x8e/0x100 [vmwgfx]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f490f6becdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffe6e739ed8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ffe6e739f20 RCX: 00007f490f6becdb
RDX: 00007ffe6e739f20 RSI: 000000004008644a RDI: 000000000000000c
RBP: 000000004008644a R08: 000055c4f4eba2c0 R09: 0000000000000000
R10: 00000000ffffff38 R11: 0000000000000246 R12: 000055c4f4eb9ca0
R13: 000000000000000c R14: 000055c4f4eba2b0 R15: 000055c4f4e7e274
 </TASK>
Modules linked in: squashfs loop uinput snd_seq_dummy snd_hrtimer vboxvideo drm_vram_helper nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr vboxsf sunrpc snd_intel8x0 snd_ac97_codec ac97_bus snd_seq snd_seq_device snd_pcm snd_timer snd soundcore intel_rapl_msr intel_rapl_common rapl iTCO_wdt intel_pmc_bxt iTCO_vendor_support joydev lpc_ich pcspkr i2c_piix4 vboxguest zram ip_tables vmwgfx drm_ttm_helper ttm drm_kms_helper cec crct10dif_pclmul e1000 drm crc32_pclmul crc32c_intel ghash_clmulni_intel serio_raw video ata_generic pata_acpi ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 1 PID: 6926 Comm: code Tainted: G           OE     5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 bb c2 c5 cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffb8af05e1bd10 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffb8af05e1bd30 RCX: 0000000000000001
RDX: ffff9c10f2c67678 RSI: ffff9c10f3cc9daa RDI: ffff9c113fd0f000
RBP: ffff9c11c88da300 R08: ffff9c10f2c67600 R09: ffff9c11c88da390
R10: 0000000000000000 R11: ffff9c10f3cc9da8 R12: ffff9c10f274fcc0
R13: ffffb8af05e1be18 R14: ffff9c10df79a200 R15: ffff9c10df79a200
FS:  00007fd47b666000(0000) GS:ffff9c12d7d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 00000000464aa005 CR4: 00000000000706e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6a/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? __seccomp_filter+0x37b/0x5a0
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 vmw_generic_ioctl+0x8e/0x100 [vmwgfx]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fd47e98fcdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffed44ffb48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ffed44ffb90 RCX: 00007fd47e98fcdb
RDX: 00007ffed44ffb90 RSI: 000000004008644a RDI: 0000000000000016
RBP: 000000004008644a R08: 0000000000000001 R09: 0000000000000003
R10: 0000000000000000 R11: 0000000000000246 R12: 000039c6013c5b00
R13: 0000000000000016 R14: 000039c6002c8f00 R15: 000039c6009ee200
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer vboxvideo drm_vram_helper nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc snd_intel8x0 snd_ac97_codec ac97_bus snd_seq intel_rapl_msr snd_seq_device snd_pcm intel_rapl_common rapl snd_timer snd pcspkr i2c_piix4 soundcore joydev zram ip_tables vmwgfx drm_ttm_helper ttm drm_kms_helper cec drm crct10dif_pclmul crc32_pclmul crc32c_intel e1000 ghash_clmulni_intel serio_raw vboxguest(OE) ata_generic pata_acpi video ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 1 PID: 2097 Comm: Xwayland Not tainted 5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 9b de cd cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffb041c532bd10 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffb041c532bd30 RCX: 0000000000000001
RDX: ffff97ce21702078 RSI: ffff97cddea6e6ca RDI: ffff97cdd4580000
RBP: ffff97cdc7583600 R08: ffff97ce21702000 R09: ffff97cdc7583690
R10: 0000000000000000 R11: ffff97cddea6e6c8 R12: ffff97cde0427960
R13: ffffb041c532be18 R14: ffff97cdc1f35400 R15: ffff97cdc1f35400
FS:  00007f58fe734a00(0000) GS:ffff97ced7c40000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000014a9aa000 CR4: 00000000000506e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6a/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? __hrtimer_run_queues+0x149/0x2a0
 ? ktime_get+0x38/0x90
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 vmw_generic_ioctl+0x8e/0x100 [vmwgfx]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f58ff2b8cdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007fffbba42638 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fffbba42680 RCX: 00007f58ff2b8cdb
RDX: 00007fffbba42680 RSI: 000000004008644a RDI: 000000000000000c
RBP: 000000004008644a R08: 00005572ff206b70 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000246 R12: 00005572ff2164b0
R13: 000000000000000c R14: 00005572ff474d20 R15: 00005572ff1f9454
 </TASK>
Modules linked in: binfmt_misc vboxsf isofs uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc snd_intel8x0 snd_ac97_codec ac97_bus snd_seq snd_seq_device snd_pcm snd_timer snd joydev i2c_piix4 pcspkr soundcore intel_rapl_msr intel_rapl_common vboxguest zram ip_tables vmwgfx drm_ttm_helper ttm crct10dif_pclmul drm_kms_helper crc32_pclmul crc32c_intel cec ghash_clmulni_intel drm serio_raw e1000 ata_generic pata_acpi video ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 0 PID: 1920 Comm: Xwayland Not tainted 5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 1b e4 f1 cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffabe5843efd10 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffabe5843efd30 RCX: 0000000000000001
RDX: ffff8eee73fe3a78 RSI: ffff8eee5f27a24a RDI: ffff8eee60368000
RBP: ffff8eef4b116480 R08: ffff8eee73fe3a00 R09: ffff8eef4b116510
R10: 0000000000000000 R11: ffff8eee5f27a248 R12: ffff8eee922cbd80
R13: ffffabe5843efe18 R14: ffff8eee900b8200 R15: ffff8eee900b8200
FS:  00007f599add4a00(0000) GS:ffff8eef5bc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000004e70a003 CR4: 00000000000706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6a/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? __schedule+0x23b/0x11c0
 ? sched_clock_cpu+0xb/0xc0
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 vmw_generic_ioctl+0x8e/0x100 [vmwgfx]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f599b958cdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffefede0f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ffefede0fc0 RCX: 00007f599b958cdb
RDX: 00007ffefede0fc0 RSI: 000000004008644a RDI: 000000000000000c
RBP: 000000004008644a R08: 000055c53d11fb90 R09: 0000000000000000
R10: 00000000ffffff9d R11: 0000000000000246 R12: 000055c53d11c9d0
R13: 000000000000000c R14: 000055c53d13c570 R15: 000055c53d11cca4
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink qrtr sunrpc snd_intel8x0 snd_ac97_codec ac97_bus snd_seq intel_rapl_msr intel_rapl_common snd_seq_device intel_powerclamp snd_pcm rapl joydev snd_timer snd pcspkr i2c_piix4 vboxguest soundcore zram ip_tables vmwgfx drm_ttm_helper ttm drm_kms_helper cec drm crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel e1000 serio_raw ata_generic pata_acpi video ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 5 PID: 25390 Comm: Xorg Tainted: G        W         5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 6b bb da cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffb70303b1bd10 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffb70303b1bd30 RCX: 0000000000000001
RDX: ffff98bde6ea0878 RSI: ffff98bdc3dd8b6a RDI: ffff98bec4442800
RBP: ffff98bec9055000 R08: ffff98bde6ea0800 R09: ffff98bec9055090
R10: 0000000000000000 R11: ffff98bdc3dd8b68 R12: ffff98be0b099e40
R13: ffffb70303b1be18 R14: ffff98bdc2cbba00 R15: ffff98bdc2cbba00
FS:  00007f7ff6c61f00(0000) GS:ffff98bedbd40000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000105c28000 CR4: 00000000000506e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6a/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 vmw_generic_ioctl+0x8e/0x100 [vmwgfx]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f7ff73e9cdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffe25c98ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ffe25c98ef0 RCX: 00007f7ff73e9cdb
RDX: 00007ffe25c98ef0 RSI: 000000004008644a RDI: 0000000000000010
RBP: 000000004008644a R08: 0000000000000000 R09: 0000000000000001
R10: 0000000000000008 R11: 0000000000000246 R12: 000055799f404cd0
R13: 0000000000000010 R14: 000055799ee1b590 R15: 000055799cfa9040
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc intel_rapl_msr snd_intel8x0 snd_ac97_codec ac97_bus snd_seq snd_seq_device joydev snd_pcm snd_timer intel_rapl_common snd soundcore vboxguest pcspkr i2c_piix4 zram ip_tables vmwgfx drm_ttm_helper ttm drm_kms_helper cec crct10dif_pclmul crc32_pclmul crc32c_intel drm ghash_clmulni_intel serio_raw e1000 ata_generic pata_acpi video ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#3] PREEMPT SMP NOPTI
CPU: 5 PID: 2765 Comm: Xwayland Tainted: G      D W  OE     5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 9b c2 f2 cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffbfcbc5bffd90 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffbfcbc5bffdb0 RCX: 0000000000000001
RDX: ffff9a160944a478 RSI: ffff9a1632dc26ca RDI: ffff9a15eb4d8400
RBP: ffff9a15cac2ccc0 R08: ffff9a160944a400 R09: ffff9a15cac2cd50
R10: 0000000000000003 R11: ffff9a1632dc26c8 R12: ffff9a15d6b1e4e0
R13: ffff9a15c1c90000 R14: ffff9a16325702d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9a16d7d40000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000008de10005 CR4: 00000000000706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x206/0x250 [drm]
 drm_release+0x65/0x110 [drm]
 __fput+0x94/0x250
 task_work_run+0x5c/0x90
 do_exit+0x320/0xaf0
 make_task_dead+0x51/0x60
 rewind_stack_and_make_dead+0x17/0x17
RIP: 0033:0x7facfaf59cdb
Code: Unable to access opcode bytes at RIP 0x7facfaf59cb1.
RSP: 002b:00007fff5a756528 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fff5a756570 RCX: 00007facfaf59cdb
RDX: 00007fff5a756570 RSI: 000000004008644a RDI: 000000000000000c
RBP: 000000004008644a R08: 000055c1dd7622b0 R09: 0000000000000000
R10: 00000000ffffff9d R11: 0000000000000246 R12: 000055c1dd765270
R13: 000000000000000c R14: 000055c1dd786030 R15: 000055c1dd765384
 </TASK>
Modules linked in: uinput isofs snd_seq_dummy snd_hrtimer vboxvideo(OE) xt_nat veth xt_conntrack xt_MASQUERADE nf_conntrack_netlink xt_addrtype br_netfilter bridge stp llc nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security ip_set rfkill nf_tables overlay nfnetlink ip6table_filter ip6_tables iptable_filter qrtr sunrpc intel_rapl_msr intel_rapl_common snd_intel8x0 snd_ac97_codec ac97_bus kvm_intel snd_seq snd_seq_device kvm snd_pcm irqbypass rapl snd_timer snd soundcore i2c_piix4 pcspkr joydev zram ip_tables vmwgfx drm_ttm_helper ttm drm_kms_helper crct10dif_pclmul crc32_pclmul crc32c_intel cec ghash_clmulni_intel e1000 drm ata_generic serio_raw pata_acpi vboxguest(OE) video
 ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#3] PREEMPT SMP NOPTI
CPU: 1 PID: 1719 Comm: gnome-shell Tainted: G      D W         5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 6b db db cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffb80d4489fd10 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffb80d4489fd30 RCX: 0000000000000001
RDX: ffff90748650ac78 RSI: ffff9074d72c46da RDI: ffff9074d5de6800
RBP: ffff90748725d480 R08: ffff90748650ac00 R09: ffff90748725d510
R10: 0000000000000000 R11: ffff9074d72c46d8 R12: ffff9074f6c7dd20
R13: ffffb80d4489fe18 R14: ffff9074f3290600 R15: ffff9074f3290600
FS:  00007f5e85adcd80(0000) GS:ffff907597d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000173292003 CR4: 00000000000706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6a/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? proc_nr_files+0x30/0x30
 ? call_rcu+0x17b/0x690
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 vmw_generic_ioctl+0x8e/0x100 [vmwgfx]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f5e8bea1cdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffd09c97358 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ffd09c973a0 RCX: 00007f5e8bea1cdb
RDX: 00007ffd09c973a0 RSI: 000000004008644a RDI: 000000000000000d
RBP: 000000004008644a R08: 00005624a57374a0 R09: 0000000000000000
R10: 0000000000000008 R11: 0000000000000246 R12: 00005624a72c2010
R13: 000000000000000d R14: 00005624a6162df0 R15: 00007ffd09c97538
 </TASK>
Modules linked in: tun uinput isofs snd_seq_dummy snd_hrtimer xt_CHECKSUM xt_MASQUERADE vboxvideo drm_vram_helper xt_conntrack ipt_REJECT nf_nat_tftp nf_conntrack_tftp bridge stp llc nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security ip_set nf_tables rfkill nfnetlink ip6table_filter ip6_tables iptable_filter qrtr sunrpc snd_hda_codec_idt snd_hda_codec_generic ledtrig_audio snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec snd_hda_core intel_rapl_msr intel_rapl_common snd_hwdep snd_seq snd_seq_device rapl snd_pcm pcspkr joydev snd_timer vboxguest snd soundcore i2c_piix4 zram ip_tables vmwgfx drm_ttm_helper ttm crct10dif_pclmul drm_kms_helper crc32_pclmul crc32c_intel
 cec ghash_clmulni_intel drm serio_raw e1000 video ata_generic pata_acpi ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#3] PREEMPT SMP NOPTI
CPU: 1 PID: 1405 Comm: gnome-shell Tainted: G      D W         5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 9b c7 f1 cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffa4ee425d3d10 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffa4ee425d3d30 RCX: 0000000000000001
RDX: ffff89162dcc3478 RSI: ffff891666b7824a RDI: ffff8917a5bd1400
RBP: ffff8916027e5600 R08: ffff89162dcc3400 R09: ffff8916027e5690
R10: 0000000000000000 R11: ffff891666b78248 R12: ffff8916b976dd20
R13: ffffa4ee425d3e18 R14: ffff89163213b000 R15: ffff89163213b000
FS:  00007f4abe046d80(0000) GS:ffff891a0bc40000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000010a85a006 CR4: 00000000000706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6a/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 vmw_generic_ioctl+0x8e/0x100 [vmwgfx]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f4ac440bcdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffcd910bb38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ffcd910bb80 RCX: 00007f4ac440bcdb
RDX: 00007ffcd910bb80 RSI: 000000004008644a RDI: 000000000000000d
RBP: 000000004008644a R08: 0000555d60813a90 R09: 0000000000000000
R10: 0000000000000050 R11: 0000000000000246 R12: 0000555d5fd59820
R13: 000000000000000d R14: 0000555d5f2b4b10 R15: 00007f4abc78c6b0
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer xt_nat veth xt_conntrack xt_MASQUERADE nf_conntrack_netlink xt_addrtype nft_compat br_netfilter bridge stp llc nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set overlay nf_tables nfnetlink qrtr vboxsf sunrpc vfat fat intel_rapl_msr intel_rapl_common joydev snd_intel8x0 snd_ac97_codec ac97_bus snd_seq snd_seq_device snd_pcm pcspkr snd_timer snd soundcore vboxguest i2c_piix4 zram ip_tables vmwgfx drm_ttm_helper ttm drm_kms_helper cec drm crct10dif_pclmul crc32_pclmul crc32c_intel e1000 ghash_clmulni_intel serio_raw ata_generic pata_acpi video ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 2e1be067 P4D 2e1be067 PUD 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 1 PID: 1886 Comm: gnome-shell Tainted: G             L    5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 fb c6 fb cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffa8b7833cfd10 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffa8b7833cfd30 RCX: 0000000000000001
RDX: ffff8d663e3e2478 RSI: ffff8d6667d8348a RDI: ffff8d664dd4dc00
RBP: ffff8d6608aa76c0 R08: ffff8d663e3e2400 R09: ffff8d6608aa7750
R10: 0000000000000006 R11: ffff8d6667d83488 R12: ffff8d6667885ae0
R13: ffffa8b7833cfe18 R14: ffff8d6655a62400 R15: ffff8d6655a62400
FS:  00007f90225f0d80(0000) GS:ffff8d66bcb00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000055a56003 CR4: 00000000000706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6a/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 ? mod_objcg_state+0x27f/0x2e0
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? sched_clock_cpu+0xb/0xc0
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 vmw_generic_ioctl+0x8e/0x100 [vmwgfx]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f90289b5cdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffd2214e138 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ffd2214e180 RCX: 00007f90289b5cdb
RDX: 00007ffd2214e180 RSI: 000000004008644a RDI: 000000000000000d
RBP: 000000004008644a R08: 000055c84dd6b5d0 R09: 0000000000000000
R10: 000055c84de117e8 R11: 0000000000000246 R12: 000055c84f298b30
R13: 000000000000000d R14: 000055c84e747bb0 R15: 00007ffd2214e318
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nf_nat_tftp nf_conntrack_tftp bridge stp llc nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_tables ebtable_nat ebtable_broute ip6table_nat ip6table_mangle ip6table_raw ip6table_security rfkill iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security ip_set nfnetlink ebtable_filter ebtables ip6table_filter ip6_tables iptable_filter qrtr vboxsf sunrpc binfmt_misc snd_intel8x0 snd_ac97_codec ac97_bus snd_seq snd_seq_device intel_rapl_msr intel_rapl_common snd_pcm joydev snd_timer snd soundcore vboxguest i2c_piix4 pcspkr zram ip_tables vmwgfx drm_ttm_helper ttm drm_kms_helper cec drm crct10dif_pclmul crc32_pclmul crc32c_intel e1000 ghash_clmulni_intel serio_raw ata_generic video pata_acpi
 ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#3] PREEMPT SMP PTI
CPU: 0 PID: 1512 Comm: gnome-shell Tainted: G      D W         5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 3b dd cc cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffafc183ab7d10 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffafc183ab7d30 RCX: 0000000000000001
RDX: ffff969da230f278 RSI: ffff969da129f6d2 RDI: ffff969ccf45b000
RBP: ffff969d8b2619c0 R08: ffff969da230f200 R09: ffff969d8b261a50
R10: 0000000000000000 R11: ffff969da129f6d0 R12: ffff969db01a2a20
R13: ffffafc183ab7e18 R14: ffff969da230f800 R15: ffff969da230f800
FS:  00007fb073a98d80(0000) GS:ffff969dd9400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000141162003 CR4: 00000000000706f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6a/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? wake_up_q+0x90/0x90
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 vmw_generic_ioctl+0x8e/0x100 [vmwgfx]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fb079e5dcdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007fffdb0b8d38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fffdb0b8d80 RCX: 00007fb079e5dcdb
RDX: 00007fffdb0b8d80 RSI: 000000004008644a RDI: 000000000000000d
RBP: 000000004008644a R08: 000055f05faf9e40 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000055f05eb1f6c0
R13: 000000000000000d R14: 000055f05eb022e0 R15: 000055f05ec660b0
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink qrtr sunrpc intel_rapl_msr intel_rapl_common snd_intel8x0 rapl snd_ac97_codec ac97_bus snd_seq snd_seq_device joydev snd_pcm snd_timer pcspkr snd soundcore i2c_piix4 vboxguest zram ip_tables vmwgfx drm_ttm_helper ttm drm_kms_helper crct10dif_pclmul crc32_pclmul crc32c_intel cec drm ghash_clmulni_intel e1000 serio_raw ata_generic pata_acpi video ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 1 PID: 1927 Comm: code Not tainted 5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 0b e1 e1 cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffb98284ee7d10 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffb98284ee7d30 RCX: 0000000000000001
RDX: ffff9abd5fd12678 RSI: ffff9abcc8fe86da RDI: ffff9abe36280400
RBP: ffff9abc88e82180 R08: ffff9abd5fd12600 R09: ffff9abc88e82210
R10: 0000000000000000 R11: ffff9abcc8fe86d8 R12: ffff9abd505311e0
R13: ffffb98284ee7e18 R14: ffff9abc80a67000 R15: ffff9abc80a67000
FS:  00007fe0a1111000(0000) GS:ffff9abf78280000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000102bbe000 CR4: 00000000000506e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6a/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? __seccomp_filter+0x37b/0x5a0
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 vmw_generic_ioctl+0x8e/0x100 [vmwgfx]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fe0a443acdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007fff230a45b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fff230a4600 RCX: 00007fe0a443acdb
RDX: 00007fff230a4600 RSI: 000000004008644a RDI: 0000000000000016
RBP: 000000004008644a R08: 0000000000000001 R09: 0000000000000003
R10: 0000000000000000 R11: 0000000000000246 R12: 0000261800feb000
R13: 0000000000000016 R14: 00002618002c8f00 R15: 000026180112c400
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc squashfs loop intel_rapl_msr snd_intel8x0 snd_ac97_codec ac97_bus snd_seq intel_rapl_common joydev snd_seq_device snd_pcm snd_timer snd soundcore vboxguest pcspkr i2c_piix4 zram ip_tables vmwgfx drm_ttm_helper ttm drm_kms_helper cec crct10dif_pclmul crc32_pclmul crc32c_intel drm ghash_clmulni_intel e1000 ata_generic serio_raw pata_acpi video ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 0 PID: 965 Comm: Xwayland Not tainted 5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 3b c8 f4 cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffa029806c7d10 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffa029806c7d30 RCX: 0000000000000001
RDX: ffff92459ed51278 RSI: ffff924588116002 RDI: ffff9245b2a1bc00
RBP: ffff92468a7f1a80 R08: ffff92459ed51200 R09: ffff92468a7f1b10
R10: 0000000000000000 R11: ffff924588116000 R12: ffff92459ed15ea0
R13: ffffa029806c7e18 R14: ffff92459186c400 R15: ffff92459186c400
FS:  00007f72ef65da00(0000) GS:ffff92469bc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000005cec006 CR4: 00000000000706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6a/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 ? ptep_set_access_flags+0x30/0x40
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 vmw_generic_ioctl+0x8e/0x100 [vmwgfx]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f72f01e1cdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007fff43c704a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fff43c704f0 RCX: 00007f72f01e1cdb
RDX: 00007fff43c704f0 RSI: 000000004008644a RDI: 000000000000000c
RBP: 000000004008644a R08: 0000559a2fd51470 R09: 0000000000000000
R10: 00000000ffffff9d R11: 0000000000000246 R12: 0000559a2fd45e50
R13: 000000000000000c R14: 0000559a2fd62110 R15: 0000559a2fd46124
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc snd_intel8x0 snd_ac97_codec intel_rapl_msr ac97_bus intel_rapl_common snd_seq intel_powerclamp snd_seq_device rapl snd_pcm joydev snd_timer snd soundcore i2c_piix4 pcspkr vboxguest zram ip_tables vmwgfx drm_ttm_helper ttm drm_kms_helper cec drm crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel e1000 serio_raw ata_generic pata_acpi video ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#2] PREEMPT SMP NOPTI
CPU: 0 PID: 1935 Comm: Xwayland Tainted: G      D           5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 8b eb ef cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffb0a1c078bd90 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffb0a1c078bdb0 RCX: 0000000000000001
RDX: ffff9e0407b0fc78 RSI: ffff9e03faa58002 RDI: ffff9e03d1ca6c00
RBP: ffff9e03c8212b40 R08: ffff9e0407b0fc00 R09: ffff9e03c8212bd0
R10: 0000000000000000 R11: ffff9e03faa58000 R12: ffff9e040a353c00
R13: ffff9e03c0800000 R14: ffff9e0407ae6ed0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9e04d7c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000010368a005 CR4: 00000000000706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x206/0x250 [drm]
 drm_release+0x65/0x110 [drm]
 __fput+0x94/0x250
 task_work_run+0x5c/0x90
 do_exit+0x320/0xaf0
 make_task_dead+0x51/0x60
 rewind_stack_and_make_dead+0x17/0x17
RIP: 0033:0x7f14e0ce3cdb
Code: Unable to access opcode bytes at RIP 0x7f14e0ce3cb1.
RSP: 002b:00007ffe7496b518 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ffe7496b560 RCX: 00007f14e0ce3cdb
RDX: 00007ffe7496b560 RSI: 000000004008644a RDI: 000000000000000c
RBP: 000000004008644a R08: 000055950ad33ae0 R09: 0000000000000000
R10: 0000000000000396 R11: 0000000000000246 R12: 000055950ad69a10
R13: 000000000000000c R14: 000055950ab5fe70 R15: 000055950ad58b14
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink qrtr vboxsf sunrpc intel_rapl_msr intel_rapl_common kvm_intel kvm snd_intel8x0 snd_ac97_codec irqbypass ac97_bus snd_seq snd_seq_device joydev snd_pcm pcspkr snd_timer i2c_piix4 snd vboxguest soundcore zram ip_tables vmwgfx drm_ttm_helper ttm drm_kms_helper cec drm crct10dif_pclmul crc32_pclmul crc32c_intel e1000 ghash_clmulni_intel serio_raw ata_generic pata_acpi video ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 0 PID: 3870 Comm: QSGRenderThread Tainted: G S         OE     5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 3b e0 f7 cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffb5ea44da7d10 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffb5ea44da7d30 RCX: 0000000000000001
RDX: ffff9e96d2cd5678 RSI: ffff9e9712ee1ff2 RDI: ffff9e97c1f25400
RBP: ffff9e97c780c0c0 R08: ffff9e96d2cd5600 R09: ffff9e97c780c150
R10: 0000000000000000 R11: ffff9e9712ee1ff0 R12: ffff9e97db98f6c0
R13: ffffb5ea44da7e18 R14: ffff9e981303d200 R15: ffff9e981303d200
FS:  00007f5df2752640(0000) GS:ffff9e9859a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000014d8b4000 CR4: 00000000000406f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6a/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 vmw_generic_ioctl+0x8e/0x100 [vmwgfx]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f5e71dbacdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007f5df2751608 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f5df2751650 RCX: 00007f5e71dbacdb
RDX: 00007f5df2751650 RSI: 000000004008644a RDI: 0000000000000011
RBP: 000000004008644a R08: 00007f5de8163dd0 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5de80d1b30
R13: 0000000000000011 R14: 00005584e5668f10 R15: 00007f5de81939d0
 </TASK>
Modules linked in: isofs uinput snd_seq_dummy snd_hrtimer vboxvideo(OE) nft_objref vboxnetadp(OE) vboxnetflt(OE) vboxdrv(OE) nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib rfkill nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr vboxsf(OE) sunrpc intel_rapl_msr intel_rapl_common snd_intel8x0 pktcdvd snd_ac97_codec rapl ac97_bus snd_seq snd_seq_device joydev snd_pcm snd_timer pcspkr snd i2c_piix4 soundcore zram ip_tables vmwgfx drm_ttm_helper ttm drm_kms_helper crct10dif_pclmul crc32_pclmul crc32c_intel cec drm ghash_clmulni_intel serio_raw e1000 vboxguest(OE) video ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 3 PID: 1656 Comm: gnome-shell Not tainted 5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 3b e0 cc cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffbb5e84ac3d10 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffbb5e84ac3d30 RCX: 0000000000000001
RDX: ffff9940da47ba78 RSI: ffff994037805242 RDI: ffff994008ef3000
RBP: ffff994009e6ca80 R08: ffff9940da47ba00 R09: ffff994009e6cb10
R10: 0000000000000000 R11: ffff994037805240 R12: ffff994000246600
R13: ffffbb5e84ac3e18 R14: ffff99403a4cc600 R15: ffff99403a4cc600
FS:  00007f40c8fc1d80(0000) GS:ffff9942f8380000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000106c14003 CR4: 00000000000706e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6a/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? wake_up_q+0x90/0x90
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 vmw_generic_ioctl+0x8e/0x100 [vmwgfx]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f40cf386cdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffc3f0d3cc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ffc3f0d3d10 RCX: 00007f40cf386cdb
RDX: 00007ffc3f0d3d10 RSI: 000000004008644a RDI: 000000000000000d
RBP: 000000004008644a R08: 00005639421a0e30 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000563946641140
R13: 000000000000000d R14: 0000563940f001f0 R15: 000056394217bc00
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer vboxvideo drm_vram_helper nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr vboxsf sunrpc intel_rapl_msr intel_rapl_common snd_intel8x0 rapl snd_ac97_codec ac97_bus snd_seq snd_seq_device joydev snd_pcm snd_timer snd vboxguest soundcore i2c_piix4 pcspkr zram ip_tables vmwgfx drm_ttm_helper ttm drm_kms_helper cec drm crct10dif_pclmul crc32_pclmul e1000 crc32c_intel serio_raw ghash_clmulni_intel ata_generic pata_acpi video ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 1 PID: 2036 Comm: Xwayland Tainted: G           OE     5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 9b b5 f7 cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffb9ed44117d10 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffb9ed44117d30 RCX: 0000000000000001
RDX: ffff953e14d62a78 RSI: ffff953e135e4492 RDI: ffff953f0457e400
RBP: ffff953f08ca7c00 R08: ffff953e14d62a00 R09: ffff953f08ca7c90
R10: 0000000000000000 R11: ffff953e135e4490 R12: ffff953e1f6da6c0
R13: ffffb9ed44117e18 R14: ffff953e2f26b600 R15: ffff953e2f26b600
FS:  00007f5591f27a00(0000) GS:ffff953f1bd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000002f26c004 CR4: 00000000000306e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6a/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 vmw_generic_ioctl+0x8e/0x100 [vmwgfx]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f5592aabcdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffdefd12ed8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ffdefd12f20 RCX: 00007f5592aabcdb
RDX: 00007ffdefd12f20 RSI: 000000004008644a RDI: 000000000000000c
RBP: 000000004008644a R08: 0000560a58fd4b00 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000246 R12: 0000560a591c3c20
R13: 000000000000000c R14: 0000560a591500a0 R15: 0000560a591bd294
 </TASK>
Modules linked in: uinput isofs snd_seq_dummy snd_hrtimer vboxvideo drm_vram_helper nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink qrtr vboxsf(OE) sunrpc intel_rapl_msr snd_intel8x0 snd_ac97_codec ac97_bus snd_seq snd_seq_device snd_pcm intel_rapl_common rapl snd_timer pcspkr snd joydev soundcore i2c_piix4 zram ip_tables vmwgfx drm_ttm_helper ttm drm_kms_helper cec drm e1000 vboxguest(OE) ata_generic crc32c_intel serio_raw pata_acpi video ipmi_devintf ipmi_msghandler fuse [last unloaded: xpo_module]
CR2: 0000000000000000

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 1 PID: 2163 Comm: Xwayland Not tainted 5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 bb c0 c9 cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffb8bdc43a7d10 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffb8bdc43a7d30 RCX: 0000000000000001
RDX: ffff9d0bc32f4c78 RSI: ffff9d0b666f191a RDI: ffff9d0aed1ca800
RBP: ffff9d0bc674c840 R08: ffff9d0bc32f4c00 R09: ffff9d0bc674c8d0
R10: 0000000000000000 R11: ffff9d0b666f1918 R12: ffff9d0b44018000
R13: ffffb8bdc43a7e18 R14: ffff9d0ae0b21a00 R15: ffff9d0ae0b21a00
FS:  00007f9630366a00(0000) GS:ffff9d0bdbc80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000020b1c001 CR4: 00000000000706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6a/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? proc_nr_files+0x30/0x30
 ? call_rcu+0x17b/0x690
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 vmw_generic_ioctl+0x8e/0x100 [vmwgfx]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f9630eeacdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffe00e21798 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ffe00e217e0 RCX: 00007f9630eeacdb
RDX: 00007ffe00e217e0 RSI: 000000004008644a RDI: 000000000000000c
RBP: 000000004008644a R08: 0000000000000000 R09: 0000000000000073
R10: 0000000000000000 R11: 0000000000000246 R12: 000055f12db90470
R13: 000000000000000c R14: 000055f12db19c20 R15: 00007ffe00e218f0
 </TASK>
Modules linked in: binfmt_misc uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc snd_intel8x0 snd_ac97_codec ac97_bus snd_seq snd_seq_device snd_pcm intel_rapl_msr snd_timer intel_rapl_common joydev snd soundcore vboxguest rapl pcspkr i2c_piix4 zram ip_tables vmwgfx drm_ttm_helper crct10dif_pclmul ttm crc32_pclmul crc32c_intel drm_kms_helper cec ghash_clmulni_intel drm serio_raw e1000 ata_generic pata_acpi video ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 1 PID: 2019 Comm: Xwayland Tainted: G           OE     5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 3b d5 e4 cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffb9a8453e7d10 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffb9a8453e7d30 RCX: 0000000000000001
RDX: ffff8dbf72190278 RSI: ffff8dbf35d7a23a RDI: ffff8dbfd4c73400
RBP: ffff8dc008a71900 R08: ffff8dbf72190200 R09: ffff8dc008a71990
R10: 0000000000000000 R11: ffff8dbf35d7a238 R12: ffff8dc002025ba0
R13: ffffb9a8453e7e18 R14: ffff8dc041623c00 R15: ffff8dc041623c00
FS:  00007f7404dc8a00(0000) GS:ffff8dc099c80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000014161e001 CR4: 00000000000706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6a/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? sched_clock_cpu+0xb/0xc0
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 vmw_generic_ioctl+0x8e/0x100 [vmwgfx]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f740594ccdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffd51c76818 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ffd51c76860 RCX: 00007f740594ccdb
RDX: 00007ffd51c76860 RSI: 000000004008644a RDI: 000000000000000c
RBP: 000000004008644a R08: 0000000000000000 R09: 000055576b053000
R10: 000055576b02d210 R11: 0000000000000246 R12: 000055576b99a360
R13: 000000000000000c R14: 000055576ba59270 R15: 000055576b048b60
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer vboxvideo(OE) qrtr rfkill vboxsf(OE) binfmt_misc sunrpc squashfs loop snd_intel8x0 snd_ac97_codec intel_rapl_msr intel_rapl_common ac97_bus snd_seq snd_seq_device rapl snd_pcm snd_timer snd soundcore i2c_piix4 joydev pcspkr zram ip_tables vmwgfx drm_ttm_helper ttm drm_kms_helper cec drm crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel e1000 serio_raw ata_generic vboxguest(OE) pata_acpi video ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 0 PID: 1961 Comm: Xwayland Not tainted 5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 8b e3 d7 cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffc0df0430bd10 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffc0df0430bd30 RCX: 0000000000000001
RDX: ffff9b3b494ce078 RSI: ffff9b3b06c3e24a RDI: ffff9b3b0f9d4c00
RBP: ffff9b3c07d3bd80 R08: ffff9b3b494ce000 R09: ffff9b3c07d3be10
R10: 0000000000000000 R11: ffff9b3b06c3e248 R12: ffff9b3b0f4c5c60
R13: ffffc0df0430be18 R14: ffff9b3b40ab1a00 R15: ffff9b3b40ab1a00
FS:  00007fc323114a00(0000) GS:ffff9b3c1bc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 00000000335c6003 CR4: 00000000000706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6a/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 vmw_generic_ioctl+0x8e/0x100 [vmwgfx]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fc323c98cdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffcbf706a98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ffcbf706ae0 RCX: 00007fc323c98cdb
RDX: 00007ffcbf706ae0 RSI: 000000004008644a RDI: 000000000000000c
RBP: 000000004008644a R08: 0000556eb665f8d0 R09: 0000000000000000
R10: 00000000ffffff9d R11: 0000000000000246 R12: 0000556eb6665a00
R13: 000000000000000c R14: 0000556eb66858e0 R15: 0000556eb6668cf4
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink qrtr sunrpc snd_intel8x0 snd_ac97_codec ac97_bus intel_rapl_msr snd_seq intel_rapl_common snd_seq_device intel_powerclamp snd_pcm rapl joydev snd_timer snd pcspkr vboxguest soundcore i2c_piix4 zram ip_tables vmwgfx drm_ttm_helper ttm drm_kms_helper cec drm crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel e1000 serio_raw ata_generic pata_acpi video ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 0 PID: 2796 Comm: Xwayland Not tainted 5.17.5-200.fc35.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20 [drm]
Code: 44 00 00 48 8b bf e0 05 00 00 e9 ff fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 c7 5b c5 df cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffab7f84ccfd10 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffab7f84ccfd30 RCX: 0000000000000001
RDX: ffff93804dcaa278 RSI: ffff938060d4c24a RDI: ffff93804d3f0c00
RBP: ffff937f0964e300 R08: ffff93804dcaa200 R09: ffff937f0964e390
R10: 000000000000001e R11: ffff938060d4c248 R12: ffff93804d6d5960
R13: ffffab7f84ccfe18 R14: ffff937f2c01f200 R15: ffff937f2c01f200
FS:  00007f7738743a00(0000) GS:ffff9380ca400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 00000001338ea006 CR4: 00000000000706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6a/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 drm_ioctl_kernel+0x8e/0x120 [drm]
 drm_ioctl+0x221/0x3e0 [drm]
 ? vmw_surface_dirty_range_add+0x480/0x480 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? check_preempt_wakeup+0xfb/0x2a0
 ? drm_ioctl_kernel+0x120/0x120 [drm]
 vmw_generic_ioctl+0x8e/0x100 [vmwgfx]
 __x64_sys_ioctl+0x83/0xc0
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f77392c7cdb
Code: 73 01 c3 48 8b 0d 45 81 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 15 81 1b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffc18a288f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ffc18a28940 RCX: 00007f77392c7cdb
RDX: 00007ffc18a28940 RSI: 000000004008644a RDI: 000000000000000c
RBP: 000000004008644a R08: 00005602d7c98f10 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000246 R12: 00005602d8263d70
R13: 000000000000000c R14: 00005602d827d630 R15: 00005602d8263ff4
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc binfmt_misc squashfs loop intel_rapl_msr intel_rapl_common snd_intel8x0 kvm_intel snd_ac97_codec kvm ac97_bus snd_seq snd_seq_device snd_pcm irqbypass snd_timer snd soundcore i2c_piix4 joydev rapl pcspkr vboxguest zram ip_tables vmwgfx drm_ttm_helper ttm drm_kms_helper cec crct10dif_pclmul drm crc32_pclmul crc32c_intel ghash_clmulni_intel e1000 ata_generic serio_raw pata_acpi video ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000