Info

Permalink
Function
vmw_user_surface_base_release
First occurrence
2022-08-07
Last occurrence
2026-09-05
State
NEW
Components
kernel
Quality
-27

Graphs

Statistics

Operating system Count
Fedora 38 107
Fedora 37 64
Fedora 36 17
Architecture Count
x86_64 188
Related packages Count
kernel-core 7
 0:6.2.9-300.fc38 5
 0:6.2.11-100.fc36 1
 0:6.2.15-100.fc36 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

Report backtrace


Complete report #494403
Frame # Function Binary Source or offset Line
1
vmw_user_surface_base_release
vmwgfx 0x60
2
vmw_user_surface_base_release
vmwgfx 0x60
3
vmw_user_surface_base_release
vmwgfx 0x60
4
vmw_user_surface_base_release
vmwgfx 0x60
5
vmw_user_surface_base_release
vmwgfx 0x60
6
vmw_user_surface_base_release
vmwgfx 0x60
7
drm_vma_node_revoke
vmlinux 0x63
8
drm_vma_node_revoke
vmlinux 0x63
9
drm_vma_node_revoke
vmlinux 0x63
10
drm_vma_node_revoke
vmlinux 0x63
11
drm_vma_node_revoke
vmlinux 0x63
12
drm_vma_node_revoke
vmlinux 0x63
13
drm_vma_node_revoke
vmlinux 0x63
14
drm_vma_node_revoke
vmlinux 0x63
15
? drm_vma_node_revoke
vmlinux 0x63
16
? drm_vma_node_revoke
vmlinux 0x63
17
? drm_vma_node_revoke
vmlinux 0x63
18
drm_vma_node_revoke
vmlinux 0x63
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 0 PID: 3040 Comm: code Not tainted 5.18.16-200.fc36.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x30
Code: 44 00 00 48 8b bf e0 05 00 00 e9 7f 06 01 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 f7 10 75 00 cc 0f 0b c3 cc cc cc cc 66
RSP: 0018:ffffab6e84bd3d38 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffab6e84bd3d58 RCX: 0000000000000001
RDX: ffff95cc5f94f078 RSI: ffff95cc9d07bd9a RDI: ffff95cd68258000
RBP: ffff95cc5f94d5c8 R08: ffff95cc9d07bf10 R09: ffff95cd491f5750
R10: 0000000000000005 R11: ffff95cc9d07bd98 R12: ffff95cd677da5a0
R13: ffff95cd41d38000 R14: ffff95cd47e9f6d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff95cd9ea00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000041e10001 CR4: 00000000000706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x60/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x65/0x110
 __fput+0x91/0x250
 task_work_run+0x5c/0x90
 do_exit+0x312/0xae0
 do_group_exit+0x2d/0x90
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7f1b58ca23f1
Code: Unable to access opcode bytes at RIP 0x7f1b58ca23c7.
RSP: 002b:00007ffc61267c68 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007ffc61267c70 RCX: 00007f1b58ca23f1
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 00007ffc61267ce0 R08: fffffffffffffe40 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: aaaaaaaaaaaaaaaa
R13: 000032dc0068e740 R14: 000032dc0068e748 R15: 00007ffc61267c80
 </TASK>
Modules linked in: tls veth xt_nat xt_conntrack xt_MASQUERADE nf_conntrack_netlink xt_addrtype nft_compat br_netfilter bridge stp llc overlay uinput isofs snd_seq_dummy snd_hrtimer vboxvideo drm_vram_helper nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink qrtr sunrpc intel_rapl_msr intel_rapl_common rapl snd_intel8x0 snd_ac97_codec ac97_bus snd_seq joydev snd_seq_device pcspkr snd_pcm snd_timer snd vboxguest soundcore i2c_piix4 zram vmwgfx crct10dif_pclmul crc32_pclmul crc32c_intel e1000 ghash_clmulni_intel drm_ttm_helper ttm serio_raw ata_generic pata_acpi video ip6_tables ip_tables fuse
CR2: 0000000000000000
Complete report #508731
Frame # Function Binary Source or offset Line
1
? drm_vma_node_revoke
vmlinux 0x63
2
vmw_user_surface_base_release
vmwgfx 0x60
3
vmw_user_surface_base_release
vmwgfx 0x60
4
vmw_user_surface_base_release
vmwgfx 0x60
5
vmw_user_surface_base_release
vmwgfx 0x60
6
vmw_user_surface_base_release
vmwgfx 0x60
7
drm_vma_node_revoke
vmlinux 0x63
8
drm_vma_node_revoke
vmlinux 0x63
9
? drm_vma_node_revoke
vmlinux 0x63
10
? drm_vma_node_revoke
vmlinux 0x63
11
drm_vma_node_revoke
vmlinux 0x63
12
? drm_vma_node_revoke
vmlinux 0x63
13
drm_vma_node_revoke
vmlinux 0x63
WARNING: CPU: 1 PID: 19424 at drivers/gpu/drm/vmwgfx/vmwgfx_cmdbuf.c:410 vmw_cmdbuf_ctx_process+0x20b/0x270 [vmwgfx]
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nf_reject_ipv4 ip6table_mangle ip6table_nat ip6table_filter iptable_mangle iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_filter bridge stp llc qrtr vsock_loopback vmw_vsock_virtio_transport_common bnep vmw_vsock_vmci_transport vsock sunrpc snd_seq_midi snd_seq_midi_event intel_rapl_msr intel_rapl_common snd_ens1371 snd_ac97_codec rapl snd_rawmidi gameport ac97_bus snd_seq vmw_balloon snd_seq_device btusb btrtl btbcm btintel btmtk bluetooth joydev snd_pcm pcspkr snd_timer snd ecdh_generic rfkill soundcore vmw_vmci i2c_piix4 zram crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel serio_raw e1000 vmwgfx mptspi scsi_transport_spi mptscsih drm_ttm_helper ttm mptbase ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 1 PID: 19424 Comm: kworker/1:3 Tainted: G        W         5.18.16-200.fc36.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
Workqueue: events vmw_cmdbuf_work_func [vmwgfx]
RIP: 0010:vmw_cmdbuf_ctx_process+0x20b/0x270 [vmwgfx]
Code: e8 ea fb ff ff e9 f3 fe ff ff 80 3d ef 56 03 00 00 0f 85 6f ff ff ff 48 c7 c7 99 1f 3f c0 c6 05 db 56 03 00 01 e8 aa 47 92 e1 <0f> 0b 4c 89 f7 e8 bb fb ff ff e9 c4 fe ff ff 4c 8b 74 24 28 4c 89
RSP: 0018:ffffa1b71217fcd0 EFLAGS: 00010286
RAX: 000000000000001c RBX: ffff8e91ccd64800 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffffa266f70c RDI: 00000000ffffffff
RBP: 0000000000000004 R08: 0000000000000000 R09: ffffa1b71217fb08
R10: 0000000000000003 R11: ffff8e927ffc3c68 R12: ffff8e91c458ab00
R13: ffff8e9203021c18 R14: ffff8e9203021c00 R15: ffff8e91ccd64888
FS:  0000000000000000(0000) GS:ffff8e927ae40000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f9a721225a0 CR3: 000000000632a003 CR4: 00000000003706e0
Call Trace:
 <TASK>
 ? preempt_count_add+0x6a/0xa0
 vmw_cmdbuf_man_process+0x45/0xe0 [vmwgfx]
 __vmw_cmdbuf_cur_flush+0xad/0xf0 [vmwgfx]
 vmw_cmdbuf_commit+0x68/0xd0 [vmwgfx]
 vmw_cmd_send_fence+0xd3/0x160 [vmwgfx]
 vmw_cmdbuf_work_func+0x39c/0x4a0 [vmwgfx]
 process_one_work+0x1c4/0x380
 worker_thread+0x4d/0x380
 ? _raw_spin_lock_irqsave+0x23/0x50
 ? process_one_work+0x380/0x380
 kthread+0xe6/0x110
 ? kthread_complete_and_exit+0x20/0x20
 ret_from_fork+0x1f/0x30
 </TASK>
Complete report #507398
Frame # Function Binary Source or offset Line
1
vmw_user_surface_base_release
vmwgfx 0x60
2
vmw_user_surface_base_release
vmwgfx 0x60
3
vmw_user_surface_base_release
vmwgfx 0x60
4
vmw_user_surface_base_release
vmwgfx 0x60
5
vmw_user_surface_base_release
vmwgfx 0x60
6
vmw_user_surface_base_release
vmwgfx 0x60
7
? vmw_user_surface_base_release
vmwgfx 0x60
8
vmw_user_surface_base_release
vmwgfx 0x60
9
? vmw_user_surface_base_release
vmwgfx 0x60
10
drm_vma_node_revoke
vmlinux 0x63
11
drm_vma_node_revoke
vmlinux 0x63
12
? vmw_user_surface_base_release
vmwgfx 0x60
13
drm_vma_node_revoke
vmlinux 0x63
14
drm_vma_node_revoke
vmlinux 0x63
15
? drm_vma_node_revoke
vmlinux 0x63
16
? drm_vma_node_revoke
vmlinux 0x63
17
drm_vma_node_revoke
vmlinux 0x63
WARNING: CPU: 3 PID: 1818 at drivers/gpu/drm/vmwgfx/vmwgfx_cmdbuf.c:410 vmw_cmdbuf_ctx_process+0x20b/0x270 [vmwgfx]
Modules linked in: cfg80211 tls uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink qrtr vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock snd_seq_midi snd_seq_midi_event sunrpc intel_rapl_msr intel_rapl_common kvm_amd ccp kvm snd_ens1371 snd_ac97_codec vmw_balloon irqbypass snd_rawmidi gameport joydev ac97_bus snd_seq pcspkr snd_seq_device snd_pcm snd_timer snd soundcore vmw_vmci i2c_piix4 zram crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel vmwgfx nvme serio_raw nvme_core drm_ttm_helper vmxnet3 ata_generic ttm pata_acpi ip6_tables ip_tables fuse
CPU: 3 PID: 1818 Comm: gnome-shell Not tainted 5.18.16-200.fc36.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:vmw_cmdbuf_ctx_process+0x20b/0x270 [vmwgfx]
Code: e8 ea fb ff ff e9 f3 fe ff ff 80 3d ef 56 03 00 00 0f 85 6f ff ff ff 48 c7 c7 99 cf 3c c0 c6 05 db 56 03 00 01 e8 aa 97 94 ee <0f> 0b 4c 89 f7 e8 bb fb ff ff e9 c4 fe ff ff 4c 8b 74 24 28 4c 89
RSP: 0018:ffffa60944c77a50 EFLAGS: 00010282
RAX: 000000000000001c RBX: ffff979b8c62d800 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffffaf66f70c RDI: 00000000ffffffff
RBP: 0000000000000004 R08: 0000000000000000 R09: ffffa60944c77888
R10: 0000000000000003 R11: ffff979bbfec18a8 R12: ffff979b8c62d880
R13: ffff979b36f04418 R14: ffff979b36f04400 R15: ffff979b8c62d888
FS:  00007f62ad6185c0(0000) GS:ffff979bb9ec0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055de7fba8898 CR3: 00000001053ec000 CR4: 0000000000750ee0
PKRU: 55555554
Call Trace:
 <TASK>
 vmw_cmdbuf_man_process+0x45/0xe0 [vmwgfx]
 __vmw_cmdbuf_cur_flush+0xad/0xf0 [vmwgfx]
 vmw_cmdbuf_reserve+0xb2/0x170 [vmwgfx]
 vmw_cmd_send_fence+0x31/0x160 [vmwgfx]
 vmw_execbuf_fence_commands+0x40/0xe0 [vmwgfx]
 vmw_execbuf_process+0x7d3/0x1130 [vmwgfx]
 ? vmw_execbuf_release_pinned_bo+0x50/0x50 [vmwgfx]
 vmw_execbuf_ioctl+0x151/0x280 [vmwgfx]
 ? vmw_execbuf_release_pinned_bo+0x50/0x50 [vmwgfx]
 drm_ioctl_kernel+0xa1/0x150
 drm_ioctl+0x21f/0x420
 ? vmw_execbuf_release_pinned_bo+0x50/0x50 [vmwgfx]
 __x64_sys_ioctl+0x90/0xd0
 do_syscall_64+0x5b/0x80
 ? fpregs_restore_userregs+0x12/0xe0
 ? exit_to_user_mode_prepare+0x18f/0x1f0
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7f62b2c2d40f
Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00
RSP: 002b:00007ffd35688b70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 000055de7e077400 RCX: 00007f62b2c2d40f
RDX: 00007ffd35688c30 RSI: 000000004028644c RDI: 000000000000000d
RBP: 00007ffd35688c30 R08: 0000000000000f88 R09: 00007ffd35688cb8
R10: 0000000000000000 R11: 0000000000000246 R12: 000000004028644c
R13: 000000000000000d R14: 0000000000000001 R15: 00007ffd35688cb8
 </TASK>
Complete report #497773
Frame # Function Binary Source or offset Line
1
vmw_user_surface_base_release
vmwgfx 0x60
2
vmw_user_surface_base_release
vmwgfx 0x60
3
vmw_user_surface_base_release
vmwgfx 0x60
4
vmw_user_surface_base_release
vmwgfx 0x60
5
vmw_user_surface_base_release
vmwgfx 0x60
6
vmw_user_surface_base_release
vmwgfx 0x60
7
drm_vma_node_revoke
vmlinux 0x63
8
drm_vma_node_revoke
vmlinux 0x63
9
drm_vma_node_revoke
vmlinux 0x63
10
drm_vma_node_revoke
vmlinux 0x63
11
drm_vma_node_revoke
vmlinux 0x63
12
? drm_vma_node_revoke
vmlinux 0x63
13
? drm_vma_node_revoke
vmlinux 0x63
14
drm_vma_node_revoke
vmlinux 0x63
15
drm_vma_node_revoke
vmlinux 0x63
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#2] PREEMPT SMP NOPTI
CPU: 1 PID: 1955 Comm: Xwayland Tainted: G      D      L    5.18.16-200.fc36.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x30
Code: 44 00 00 48 8b bf e0 05 00 00 e9 7f 06 01 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 ff e0 0f 1f 00 cc 0f 0b c3 cc cc cc cc 66
RSP: 0018:ffffb210c438bd98 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffb210c438bdb8 RCX: 0000000000000001
RDX: ffff8ffc7ff4aa78 RSI: ffff8ffc5fb6390a RDI: ffff8ffd42ee4000
RBP: ffff8ffc7fc5d948 R08: ffff8ffc5fb63940 R09: ffff8ffd477ca2d0
R10: 0000000000000003 R11: ffff8ffc5fb63908 R12: ffff8ffc89cb5780
R13: ffff8ffd48d70000 R14: ffff8ffc6f26b8d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8ffd5bc80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000102c2c002 CR4: 00000000000306e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x60/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x71/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x201/0x250
 drm_release+0x65/0x110
 __fput+0x8e/0x250
 task_work_run+0x59/0x90
 do_exit+0x312/0xae0
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 make_task_dead+0x51/0x60
 rewind_stack_and_make_dead+0x17/0x17
RIP: 0033:0x7f0d0d13140f
Code: Unable to access opcode bytes at RIP 0x7f0d0d1313e5.
RSP: 002b:00007ffe47623280 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0d0d13140f
RDX: 00007ffe47623320 RSI: 000000004008644a RDI: 000000000000000c
RBP: 00007ffe47623320 R08: 0000000000000000 R09: 0000000000000031
R10: 0000000000000000 R11: 0000000000000246 R12: 000000004008644a
R13: 000000000000000c R14: 00005649d9a022a0 R15: 0000000000000000
 </TASK>
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc intel_rapl_msr intel_rapl_common snd_intel8x0 snd_ac97_codec ac97_bus snd_seq joydev snd_seq_device snd_pcm snd_timer snd vboxguest soundcore i2c_piix4 pcspkr zram vmwgfx crc32c_intel drm_ttm_helper ata_generic e1000 ttm serio_raw pata_acpi video ip6_tables ip_tables fuse
CR2: 0000000000000000
Complete report #496792
Frame # Function Binary Source or offset Line
1
vmw_user_surface_base_release
vmwgfx 0x60
2
vmw_user_surface_base_release
vmwgfx 0x60
3
vmw_user_surface_base_release
vmwgfx 0x60
4
vmw_user_surface_base_release
vmwgfx 0x60
5
vmw_user_surface_base_release
vmwgfx 0x60
6
? vmw_user_surface_base_release
vmwgfx 0x60
7
drm_vma_node_revoke
vmlinux 0x63
8
drm_vma_node_revoke
vmlinux 0x63
9
? vmw_user_surface_base_release
vmwgfx 0x60
10
? drm_vma_node_revoke
vmlinux 0x63
11
? drm_vma_node_revoke
vmlinux 0x63
12
vmw_user_surface_base_release
vmwgfx 0x60
13
drm_vma_node_revoke
vmlinux 0x63
14
drm_vma_node_revoke
vmlinux 0x63
15
? drm_vma_node_revoke
vmlinux 0x63
16
? drm_vma_node_revoke
vmlinux 0x63
17
drm_vma_node_revoke
vmlinux 0x63
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 3 PID: 2421 Comm: code Not tainted 5.18.16-200.fc36.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x30
Code: 44 00 00 48 8b bf e0 05 00 00 e9 7f 06 01 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 f7 10 75 00 cc 0f 0b c3 cc cc cc cc 66
RSP: 0018:ffffacd585373cd8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffacd585373cf8 RCX: 0000000000000001
RDX: ffff989c45454a78 RSI: ffff989b75f41242 RDI: ffff989c6a99d800
RBP: ffff989c920c6908 R08: ffff989b75f41310 R09: ffff989c47dcd750
R10: 000000000000000a R11: ffff989b75f41240 R12: ffff989c7e963c60
R13: ffffacd585373de0 R14: ffff989b41377800 R15: ffff989b41377800
FS:  00007f8bf2555b80(0000) GS:ffff989c98f80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000002bcc000 CR4: 00000000000006e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x60/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6b/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x460/0x460 [vmwgfx]
 drm_ioctl_kernel+0xa1/0x150
 drm_ioctl+0x21f/0x420
 ? vmw_surface_dirty_range_add+0x460/0x460 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? drm_ioctl_kernel+0x150/0x150
 vmw_generic_ioctl+0x8f/0x100 [vmwgfx]
 __x64_sys_ioctl+0x90/0xd0
 do_syscall_64+0x5b/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7f8bf59d740f
Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00
RSP: 002b:00007ffcd5f795d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8bf59d740f
RDX: 00007ffcd5f79670 RSI: 000000004008644a RDI: 0000000000000016
RBP: 00007ffcd5f79670 R08: 0000000000a4b400 R09: 0000000000000003
R10: 0000198e0098a800 R11: 0000000000000246 R12: 000000004008644a
R13: 0000000000000016 R14: 0000198e0022eab0 R15: 0000000000000000
 </TASK>
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc snd_intel8x0 snd_ac97_codec joydev ac97_bus snd_seq snd_seq_device snd_pcm snd_timer snd pcspkr i2c_piix4 soundcore vboxguest zram vmwgfx serio_raw e1000 drm_ttm_helper ttm ata_generic pata_acpi video ip6_tables ip_tables fuse
CR2: 0000000000000000
Complete report #494600
Frame # Function Binary Source or offset Line
1
vmw_user_surface_base_release
vmwgfx 0x60
2
? drm_vma_node_revoke
vmlinux 0x63
3
? drm_vma_node_revoke
vmlinux 0x63
4
? vmw_user_surface_base_release
vmwgfx 0x60
5
vmw_user_surface_base_release
vmwgfx 0x60
6
? vmw_user_surface_base_release
vmwgfx 0x60
7
drm_vma_node_revoke
vmlinux 0x63
8
drm_vma_node_revoke
vmlinux 0x63
9
? vmw_user_surface_base_release
vmwgfx 0x60
10
drm_vma_node_revoke
vmlinux 0x63
11
drm_vma_node_revoke
vmlinux 0x63
12
? drm_vma_node_revoke
vmlinux 0x63
13
? drm_vma_node_revoke
vmlinux 0x63
14
? drm_vma_node_revoke
vmlinux 0x63
15
? drm_vma_node_revoke
vmlinux 0x63
16
? drm_vma_node_revoke
vmlinux 0x63
17
drm_vma_node_revoke
vmlinux 0x63
kernel BUG at drivers/gpu/drm/vmwgfx/vmwgfx_cmdbuf_res.c:171!
invalid opcode: 0000 [#1] PREEMPT SMP PTI
CPU: 0 PID: 6089 Comm: eadedCompositor Not tainted 5.18.16-200.fc36.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:vmw_cmdbuf_res_revert+0xd5/0xf0 [vmwgfx]
Code: 0c 24 e8 4e e2 28 f3 84 c0 74 13 48 8b 0c 24 4d 89 66 18 4c 89 7b 20 48 89 4b 28 4c 89 21 c7 43 30 00 00 00 00 e9 67 ff ff ff <0f> 0b 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 0f
RSP: 0018:ffffb7d81065bb60 EFLAGS: 00010282
RAX: 00000000ffffffea RBX: ffff997a63e7f4c0 RCX: 0000000000000000
RDX: 0000000001000000 RSI: 0000000001000000 RDI: ffff997a39d90c08
RBP: ffff997a731cfe40 R08: ffff997a63e7f4c8 R09: ffffb7d81065f340
R10: 0000000000000000 R11: 0000000000000100 R12: ffff997a63e7f4e0
R13: ffff997b035fb338 R14: ffff997b035fa000 R15: 00000000fffffff0
FS:  00007f2059b1e640(0000) GS:ffff997b3de00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f205b3bd000 CR3: 000000000aca2001 CR4: 0000000000370ef0
Call Trace:
 <TASK>
 vmw_execbuf_process+0x35c/0x1130 [vmwgfx]
 ? find_next_iomem_res+0xb5/0x120
 ? pat_enabled+0x20/0x20
 ? vmw_execbuf_release_pinned_bo+0x50/0x50 [vmwgfx]
 vmw_execbuf_ioctl+0x151/0x280 [vmwgfx]
 ? vmw_execbuf_release_pinned_bo+0x50/0x50 [vmwgfx]
 drm_ioctl_kernel+0x9e/0x150
 drm_ioctl+0x21f/0x420
 ? vmw_execbuf_release_pinned_bo+0x50/0x50 [vmwgfx]
 __x64_sys_ioctl+0x8d/0xd0
 do_syscall_64+0x58/0x80
 ? syscall_trace_enter.constprop.0+0x98/0x1a0
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7f20dcf8340f
Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00
RSP: 002b:00007f2059b1d390 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 000055b68c8a1600 RCX: 00007f20dcf8340f
RDX: 00007f2059b1d450 RSI: 000000004028644c RDI: 0000000000000019
RBP: 00007f2059b1d450 R08: 0000000000000640 R09: 00007f2059b1d4d8
R10: 0000000003edc0a8 R11: 0000000000000246 R12: 000000004028644c
R13: 0000000000000019 R14: 0000000000000000 R15: 00007f2059b1d4d8
 </TASK>
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink snd_seq_midi snd_seq_midi_event qrtr vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock sunrpc snd_ens1371 snd_ac97_codec snd_rawmidi gameport ac97_bus intel_rapl_msr snd_seq snd_seq_device intel_rapl_common snd_pcm rapl vmw_balloon joydev pcspkr snd_timer snd soundcore i2c_piix4 vmw_vmci zram crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel nvme vmwgfx nvme_core serio_raw vmxnet3 drm_ttm_helper ttm ata_generic pata_acpi ip6_tables ip_tables fuse
Complete report #494074
Frame # Function Binary Source or offset Line
1
vmw_user_surface_base_release
vmwgfx 0x60
2
vmw_user_surface_base_release
vmwgfx 0x60
3
vmw_user_surface_base_release
vmwgfx 0x60
4
drm_vma_node_revoke
vmlinux 0x63
5
drm_vma_node_revoke
vmlinux 0x63
6
drm_vma_node_revoke
vmlinux 0x63
7
drm_vma_node_revoke
vmlinux 0x63
8
drm_vma_node_revoke
vmlinux 0x63
9
drm_vma_node_revoke
vmlinux 0x63
10
drm_vma_node_revoke
vmlinux 0x63
11
? drm_vma_node_revoke
vmlinux 0x63
12
drm_vma_node_revoke
vmlinux 0x63
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#3] PREEMPT SMP NOPTI
CPU: 1 PID: 1569 Comm: gnome-shell Tainted: G      D W         5.18.16-200.fc36.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x30
Code: 44 00 00 48 8b bf e0 05 00 00 e9 7f 06 01 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 f7 10 75 00 cc 0f 0b e9 2f 13 75 00 66
RSP: 0018:ffffb02c03c17df0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffb02c03c17e10 RCX: 0000000000000001
RDX: ffff9d4fe5e5ae78 RSI: ffff9d4f8eeb9daa RDI: ffff9d4f815ca800
RBP: 0000000000000000 R08: ffff9d4f8eeb9f38 R09: ffff9d5087415b10
R10: 0000000000000000 R11: ffff9d4f8eeb9da8 R12: ffff9d4fe11cf958
R13: ffff9d5080aeb6a0 R14: ffff9d4fe11cf900 R15: 0000000000000000
FS:  00007ff6fa68c5c0(0000) GS:ffff9d509bc80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000005db2000 CR4: 00000000000106e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x60/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 dma_buf_release+0x42/0xa0
 __dentry_kill+0xfe/0x170
 __fput+0xe0/0x250
 task_work_run+0x5c/0x90
 exit_to_user_mode_prepare+0x1c8/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7ff6ffc9bfda
Code: b8 03 00 00 00 0f 05 48 3d 00 f0 ff ff 77 41 c3 48 83 ec 18 89 7c 24 0c e8 f3 72 f8 ff 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 53 73 f8 ff 8b 44 24
RSP: 002b:00007ffdb731da20 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 000055e965d2e67c RCX: 00007ff6ffc9bfda
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000033
RBP: 000055e965d2e68c R08: 0000000000000000 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000293 R12: 000055e965d2e640
R13: 000055e965d2e650 R14: 00007ff6a4065750 R15: 0000000000000000
 </TASK>
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc snd_intel8x0 snd_ac97_codec intel_rapl_msr ac97_bus snd_seq snd_seq_device snd_pcm snd_timer joydev intel_rapl_common pcspkr snd soundcore i2c_piix4 vboxguest zram crc32c_intel vmwgfx e1000 serio_raw drm_ttm_helper ttm ata_generic pata_acpi video ip6_tables ip_tables fuse
CR2: 0000000000000000
Complete report #493405
Frame # Function Binary Source or offset Line
1
vmw_user_surface_base_release
vmwgfx 0x60
2
vmw_user_surface_base_release
vmwgfx 0x60
3
vmw_user_surface_base_release
vmwgfx 0x60
4
vmw_user_surface_base_release
vmwgfx 0x60
5
vmw_user_surface_base_release
vmwgfx 0x60
6
? vmw_user_surface_base_release
vmwgfx 0x60
7
drm_vma_node_revoke
vmlinux 0x63
8
drm_vma_node_revoke
vmlinux 0x63
9
? vmw_user_surface_base_release
vmwgfx 0x60
10
? drm_vma_node_revoke
vmlinux 0x63
11
? drm_vma_node_revoke
vmlinux 0x63
12
vmw_user_surface_base_release
vmwgfx 0x60
13
drm_vma_node_revoke
vmlinux 0x63
14
drm_vma_node_revoke
vmlinux 0x63
15
? drm_vma_node_revoke
vmlinux 0x63
16
? drm_vma_node_revoke
vmlinux 0x63
17
? drm_vma_node_revoke
vmlinux 0x63
18
drm_vma_node_revoke
vmlinux 0x63
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 1433 Comm: gnome-shell Not tainted 5.18.16-200.fc36.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x30
Code: 44 00 00 48 8b bf e0 05 00 00 e9 7f 06 01 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 ff e0 0f 1f 00 cc 0f 0b c3 cc cc cc cc 66
RSP: 0018:ffffbb9602bc7c90 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffbb9602bc7cb0 RCX: 0000000000000001
RDX: ffff96bb05b30078 RSI: ffff96bb019cbb62 RDI: ffff96bac3537000
RBP: ffff96bb044c7ec8 R08: ffff96bb019cbd18 R09: ffff96bac6733690
R10: 0000000000000000 R11: ffff96bb019cbb60 R12: ffff96bac4e14600
R13: ffffbb9602bc7d98 R14: ffff96bb0a0ae000 R15: ffff96bb0a0ae000
FS:  00007fce70a9d5c0(0000) GS:ffff96bbdba00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000103b72006 CR4: 00000000000306f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x60/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x71/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6b/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x460/0x460 [vmwgfx]
 drm_ioctl_kernel+0x9e/0x150
 drm_ioctl+0x21f/0x420
 ? vmw_surface_dirty_range_add+0x460/0x460 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? drm_ioctl_kernel+0x150/0x150
 vmw_generic_ioctl+0x8c/0x100 [vmwgfx]
 __x64_sys_ioctl+0x8d/0xd0
 do_syscall_64+0x58/0x80
 ? do_user_addr_fault+0x1e2/0x670
 ? syscall_exit_to_user_mode+0x17/0x40
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7fce760b240f
Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00
RSP: 002b:00007fff9ba9abd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fce760b240f
RDX: 00007fff9ba9ac70 RSI: 000000004008644a RDI: 000000000000000d
RBP: 00007fff9ba9ac70 R08: 000055b8c0db01b0 R09: 00007fff9ba9ae98
R10: 0000000000000000 R11: 0000000000000246 R12: 000000004008644a
R13: 000000000000000d R14: 000055b8bf7a2540 R15: 0000000000000000
 </TASK>
Modules linked in: uinput isofs snd_seq_dummy snd_hrtimer qrtr rfkill snd_intel8x0 snd_ac97_codec sunrpc ac97_bus snd_seq snd_seq_device iTCO_wdt snd_pcm intel_rapl_msr intel_pmc_bxt intel_rapl_common iTCO_vendor_support snd_timer joydev snd pcspkr lpc_ich soundcore i2c_piix4 vboxguest zram virtio_net vmwgfx crc32c_intel serio_raw net_failover ata_generic drm_ttm_helper pata_acpi failover ttm video ip6_tables ip_tables fuse
CR2: 0000000000000000
Complete report #492834
Frame # Function Binary Source or offset Line
1
vmw_user_surface_base_release
vmwgfx 0x60
2
vmw_user_surface_base_release
vmwgfx 0x60
3
vmw_user_surface_base_release
vmwgfx 0x60
4
vmw_user_surface_base_release
vmwgfx 0x60
5
vmw_user_surface_base_release
vmwgfx 0x60
6
? vmw_user_surface_base_release
vmwgfx 0x60
7
drm_vma_node_revoke
vmlinux 0x63
8
? drm_vma_node_revoke
vmlinux 0x63
9
drm_vma_node_revoke
vmlinux 0x63
10
? vmw_user_surface_base_release
vmwgfx 0x60
11
? drm_vma_node_revoke
vmlinux 0x63
12
? drm_vma_node_revoke
vmlinux 0x63
13
vmw_user_surface_base_release
vmwgfx 0x60
14
drm_vma_node_revoke
vmlinux 0x63
15
drm_vma_node_revoke
vmlinux 0x63
16
? drm_vma_node_revoke
vmlinux 0x63
17
? drm_vma_node_revoke
vmlinux 0x63
18
drm_vma_node_revoke
vmlinux 0x63
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 1 PID: 1995 Comm: Xwayland Not tainted 5.18.16-200.fc36.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x30
Code: 44 00 00 48 8b bf e0 05 00 00 e9 7f 06 01 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 f7 10 75 00 cc 0f 0b c3 cc cc cc cc 66
RSP: 0018:ffffaefc4368bcc0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffaefc4368bce0 RCX: 0000000000000001
RDX: ffff9394f8ad0078 RSI: ffff939511ba0002 RDI: ffff93952a108400
RBP: ffff9395253d3f08 R08: ffff939511ba0028 R09: ffff9394c7a35f90
R10: 0000000000000004 R11: ffff939511ba0000 R12: ffff9394c3d87c00
R13: ffffaefc4368bdc8 R14: ffff9395296bb200 R15: ffff9395296bb200
FS:  00007f41f9ecba00(0000) GS:ffff93953dc80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 00000000696da006 CR4: 00000000000706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x60/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6b/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x460/0x460 [vmwgfx]
 drm_ioctl_kernel+0xa1/0x150
 ? drm_ioctl_kernel+0xa1/0x150
 drm_ioctl+0x21f/0x420
 ? vmw_surface_dirty_range_add+0x460/0x460 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? drm_ioctl_kernel+0x150/0x150
 vmw_generic_ioctl+0x8f/0x100 [vmwgfx]
 __x64_sys_ioctl+0x90/0xd0
 do_syscall_64+0x5b/0x80
 ? do_syscall_64+0x67/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7f41fa8fc40f
Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00
RSP: 002b:00007ffcfc79e1d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f41fa8fc40f
RDX: 00007ffcfc79e270 RSI: 000000004008644a RDI: 000000000000000c
RBP: 00007ffcfc79e270 R08: 0000000000000000 R09: 0000000000000031
R10: 0000000000000000 R11: 0000000000000246 R12: 000000004008644a
R13: 000000000000000c R14: 00005616448ff1f0 R15: 0000000000000000
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer vboxvideo drm_vram_helper xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nf_nat_tftp nf_conntrack_tftp bridge stp llc nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security ip_set rfkill nf_tables nfnetlink ip6table_filter iptable_filter qrtr sunrpc intel_rapl_msr intel_rapl_common snd_intel8x0 rapl snd_ac97_codec ac97_bus joydev snd_seq snd_seq_device snd_pcm pcspkr snd_timer snd soundcore vboxguest i2c_piix4 zram vmwgfx crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel e1000 serio_raw drm_ttm_helper ttm ata_generic pata_acpi video ip6_tables ip_tables fuse
CR2: 0000000000000000
Complete report #492114
Frame # Function Binary Source or offset Line
1
vmw_user_surface_base_release
vmwgfx 0x60
2
? vmw_user_surface_base_release
vmwgfx 0x60
3
vmw_user_surface_base_release
vmwgfx 0x60
4
? vmw_user_surface_base_release
vmwgfx 0x60
5
drm_vma_node_revoke
vmlinux 0x63
6
drm_vma_node_revoke
vmlinux 0x63
7
? vmw_user_surface_base_release
vmwgfx 0x60
8
? drm_vma_node_revoke
vmlinux 0x63
9
drm_vma_node_revoke
vmlinux 0x63
10
drm_vma_node_revoke
vmlinux 0x63
11
? drm_vma_node_revoke
vmlinux 0x63
12
? drm_vma_node_revoke
vmlinux 0x63
13
? drm_vma_node_revoke
vmlinux 0x63
14
drm_vma_node_revoke
vmlinux 0x63
kernel BUG at drivers/gpu/drm/vmwgfx/vmwgfx_cmdbuf_res.c:171!
invalid opcode: 0000 [#1] PREEMPT SMP PTI
CPU: 3 PID: 1601 Comm: gnome-shell Not tainted 5.18.16-200.fc36.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/22/2020
RIP: 0010:vmw_cmdbuf_res_revert+0xd5/0xf0 [vmwgfx]
Code: 0c 24 e8 4e b2 2b fb 84 c0 74 13 48 8b 0c 24 4d 89 66 18 4c 89 7b 20 48 89 4b 28 4c 89 21 c7 43 30 00 00 00 00 e9 67 ff ff ff <0f> 0b 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 0f
RSP: 0000:ffffab9f825d3b40 EFLAGS: 00010282
RAX: 00000000ffffffea RBX: ffff8f9beb40ec80 RCX: 0000000000000000
RDX: 000000000110001a RSI: 000000000110001a RDI: ffff8f9acd892248
RBP: ffff8f9acd892240 R08: ffff8f9beb40ec88 R09: ffffab9f8265dca0
R10: 0000000000000002 R11: ffff8f9bffec18a8 R12: ffff8f9beb40eca0
R13: ffff8f9bca1e1338 R14: ffff8f9bca1e0000 R15: 00000000fffffff4
FS:  00007f632f5045c0(0000) GS:ffff8f9bf9ec0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6334b193e5 CR3: 000000012b750001 CR4: 00000000003706e0
Call Trace:
 <TASK>
 vmw_execbuf_process+0x35c/0x1130 [vmwgfx]
 ? vmw_execbuf_release_pinned_bo+0x50/0x50 [vmwgfx]
 vmw_execbuf_ioctl+0x151/0x280 [vmwgfx]
 ? vmw_execbuf_release_pinned_bo+0x50/0x50 [vmwgfx]
 drm_ioctl_kernel+0x9e/0x150
 drm_ioctl+0x21f/0x420
 ? vmw_execbuf_release_pinned_bo+0x50/0x50 [vmwgfx]
 ? trigger_load_balance+0x2c6/0x320
 __x64_sys_ioctl+0x8d/0xd0
 do_syscall_64+0x58/0x80
 ? irqtime_account_irq+0x81/0xd0
 ? __do_softirq+0x1cc/0x30f
 ? __irq_exit_rcu+0x3d/0x140
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7f6334b1940f
Code: Unable to access opcode bytes at RIP 0x7f6334b193e5.
RSP: 002b:00007ffef1f83400 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000564422e6bee0 RCX: 00007f6334b1940f
RDX: 00007ffef1f834c0 RSI: 000000004028644c RDI: 000000000000000d
RBP: 00007ffef1f834c0 R08: 0000000000009bc8 R09: 00007ffef1f83548
R10: 00000085e094c354 R11: 0000000000000246 R12: 000000004028644c
R13: 000000000000000d R14: 0000000000000001 R15: 00007ffef1f83548
 </TASK>
Modules linked in: tls uinput isofs snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink qrtr vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock snd_seq_midi snd_seq_midi_event sunrpc intel_rapl_msr intel_rapl_common vmw_balloon rapl snd_ens1371 snd_ac97_codec snd_rawmidi gameport ac97_bus snd_seq snd_seq_device joydev snd_pcm pcspkr snd_timer snd soundcore vmw_vmci i2c_piix4 zram crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel serio_raw vmwgfx mptspi scsi_transport_spi e1000 mptscsih drm_ttm_helper mptbase ttm ata_generic pata_acpi ip6_tables ip_tables fuse
Complete report #490109
Frame # Function Binary Source or offset Line
1
vmw_user_surface_base_release
vmwgfx 0x60
2
vmw_user_surface_base_release
vmwgfx 0x60
3
vmw_user_surface_base_release
vmwgfx 0x60
4
drm_vma_node_revoke
vmlinux 0x63
5
drm_vma_node_revoke
vmlinux 0x63
6
drm_vma_node_revoke
vmlinux 0x63
7
drm_vma_node_revoke
vmlinux 0x63
8
drm_vma_node_revoke
vmlinux 0x63
9
drm_vma_node_revoke
vmlinux 0x63
10
drm_vma_node_revoke
vmlinux 0x63
11
? drm_vma_node_revoke
vmlinux 0x63
12
? drm_vma_node_revoke
vmlinux 0x63
13
drm_vma_node_revoke
vmlinux 0x63
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 1578 Comm: gnome-shell Not tainted 5.18.16-200.fc36.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x30
Code: 44 00 00 48 8b bf e0 05 00 00 e9 7f 06 01 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 f7 10 75 00 cc 0f 0b c3 cc cc cc cc 66
RSP: 0018:ffffb2db43943dd8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffb2db43943df8 RCX: 0000000000000001
RDX: ffff8d42257ece78 RSI: ffff8d42017feffa RDI: ffff8d42878a6000
RBP: 0000000000000000 R08: ffff8d42017ff0d0 R09: ffff8d4308529e10
R10: 0000000000000000 R11: ffff8d42017feff8 R12: ffff8d4242ecf418
R13: ffff8d43001f13e0 R14: ffff8d4242ecf3c0 R15: 0000000000000000
FS:  00007fba6506e5c0(0000) GS:ffff8d431bc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000023030006 CR4: 00000000000706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x60/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 dma_buf_release+0x42/0xa0
 __dentry_kill+0xfe/0x170
 __fput+0xe0/0x250
 task_work_run+0x5c/0x90
 exit_to_user_mode_prepare+0x1c8/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 ? do_user_addr_fault+0x1e2/0x670
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7fba6a67dfda
Code: b8 03 00 00 00 0f 05 48 3d 00 f0 ff ff 77 41 c3 48 83 ec 18 89 7c 24 0c e8 f3 72 f8 ff 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 53 73 f8 ff 8b 44 24
RSP: 002b:00007ffd48e48e20 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 00007fba4428ea8c RCX: 00007fba6a67dfda
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000053
RBP: 00007fba4428ea9c R08: 0000000000000000 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000293 R12: 00007fba4428ea50
R13: 00007fba4428ea60 R14: 00005571aae2e870 R15: 00005571aa3cac80
 </TASK>
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc intel_rapl_msr intel_rapl_common kvm_intel kvm irqbypass rapl joydev snd_intel8x0 snd_ac97_codec ac97_bus snd_seq snd_seq_device snd_pcm vboxguest snd_timer snd soundcore i2c_piix4 pcspkr zram crct10dif_pclmul crc32_pclmul crc32c_intel vmwgfx ghash_clmulni_intel drm_ttm_helper serio_raw e1000 ttm ata_generic pata_acpi video ip6_tables ip_tables fuse
CR2: 0000000000000000
Complete report #491812
Frame # Function Binary Source or offset Line
1
vmw_user_surface_base_release
vmwgfx 0x60
2
vmw_user_surface_base_release
vmwgfx 0x60
3
vmw_user_surface_base_release
vmwgfx 0x60
4
vmw_user_surface_base_release
vmwgfx 0x60
5
vmw_user_surface_base_release
vmwgfx 0x60
6
? vmw_user_surface_base_release
vmwgfx 0x60
7
drm_vma_node_revoke
vmlinux 0x63
8
drm_vma_node_revoke
vmlinux 0x63
9
? vmw_user_surface_base_release
vmwgfx 0x60
10
? drm_vma_node_revoke
vmlinux 0x63
11
? drm_vma_node_revoke
vmlinux 0x63
12
? drm_vma_node_revoke
vmlinux 0x63
13
vmw_user_surface_base_release
vmwgfx 0x60
14
drm_vma_node_revoke
vmlinux 0x63
15
drm_vma_node_revoke
vmlinux 0x63
16
? drm_vma_node_revoke
vmlinux 0x63
17
drm_vma_node_revoke
vmlinux 0x63
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 1 PID: 2015 Comm: Xwayland Not tainted 5.18.16-200.fc36.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x30
Code: 44 00 00 48 8b bf e0 05 00 00 e9 7f 06 01 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 ff e0 0f 1f 00 cc 0f 0b c3 cc cc cc cc 66
RSP: 0018:ffffa75404597ce8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffa75404597d08 RCX: 0000000000000001
RDX: ffff8f5e01ba6678 RSI: ffff8f5e016e46da RDI: ffff8f5ddb288800
RBP: ffff8f5e0e712348 R08: ffff8f5e016e4780 R09: ffff8f5ec7163450
R10: 0000000000000000 R11: ffff8f5e016e46d8 R12: ffff8f5e16efa420
R13: ffffa75404597df0 R14: ffff8f5e0c91f600 R15: ffff8f5e0c91f600
FS:  00007efe5ebffa00(0000) GS:ffff8f5edbc80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000041bc8004 CR4: 00000000000306e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x60/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x71/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_ref_object_base_unref+0x6b/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x460/0x460 [vmwgfx]
 drm_ioctl_kernel+0x9e/0x150
 drm_ioctl+0x21f/0x420
 ? vmw_surface_dirty_range_add+0x460/0x460 [vmwgfx]
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 ? current_is_single_threaded+0x2a/0xf0
 ? drm_ioctl_kernel+0x150/0x150
 vmw_generic_ioctl+0x8c/0x100 [vmwgfx]
 __x64_sys_ioctl+0x8d/0xd0
 do_syscall_64+0x58/0x80
 ? __irq_exit_rcu+0x3d/0x140
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7efe5f63040f
Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00
RSP: 002b:00007ffe7f484720 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efe5f63040f
RDX: 00007ffe7f4847c0 RSI: 000000004008644a RDI: 000000000000000c
RBP: 00007ffe7f4847c0 R08: 000055c0a49ff1f0 R09: 0000000000000001
R10: 000000003f800000 R11: 0000000000000246 R12: 000000004008644a
R13: 000000000000000c R14: 0000000000000000 R15: 000055c0a4ab9290
 </TASK>
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc intel_rapl_msr intel_rapl_common snd_intel8x0 snd_ac97_codec ac97_bus snd_seq joydev snd_seq_device snd_pcm pcspkr snd_timer snd soundcore i2c_piix4 vboxguest zram vmwgfx crc32c_intel drm_ttm_helper e1000 serio_raw ttm ata_generic pata_acpi video ip6_tables ip_tables fuse
CR2: 0000000000000000