Info

Permalink
Function
vmw_bo_unref_ioctl
First occurrence
2023-02-24
Last occurrence
2024-12-07
State
NEW
Components
kernel
Quality
-21

Graphs

Statistics

Operating system Count
Fedora 37 4,069
Fedora 38 1,245
Fedora 36 147
Fedora 39 2
Architecture Count
x86_64 5,463
Related packages Count
kernel-core 410
 0:6.2.9-300.fc38 310
 0:6.2.15-100.fc36 79
 0:6.1.13-100.fc36 4
 0:6.2.10-200.fc37 3
 0:6.1.14-200.fc37 2
 0:6.2.15-300.fc38 2
 0:6.2.14-100.fc36 2
 0:6.2.9-100.fc36 2
 0:6.2.2-300.fc37 1
 0:6.2.12-200.fc37 1
 0:6.2.10-100.fc36 1
 0:6.2.14-200.fc37 1
 0:6.1.18-100.fc36 1
 0:6.2.9-200.fc37 1

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

Report backtrace


Complete report #630863
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
? inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
? inet_csk_destroy_sock
vmlinux 0x55
18
? inet_csk_destroy_sock
vmlinux 0x55
19
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 2 PID: 2027 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: xt_socket nf_socket_ipv4 nf_socket_ipv6 xt_TPROXY nf_tproxy_ipv6 nf_tproxy_ipv4 xt_mark nft_compat tls uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr binfmt_misc vfat fat snd_intel8x0 snd_ac97_codec ac97_bus snd_seq snd_seq_device intel_rapl_msr intel_rapl_common joydev rapl snd_pcm snd_timer pcspkr snd soundcore i2c_piix4 vboxguest zram crct10dif_pclmul crc32_pclmul vmwgfx crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel drm_ttm_helper sha512_ssse3 ttm e1000 serio_raw video wmi ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 2 PID: 2027 Comm: Xwayland Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 94 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffad3603723c88 EFLAGS: 00010282
RAX: 0000000000000026 RBX: ffffad3603723ca8 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff94749b33 RDI: 00000000ffffffff
RBP: ffff8df50a0a4008 R08: 0000000000000000 R09: ffffad3603723b28
R10: 0000000000000003 R11: ffffffff95147448 R12: ffff8df52b99c840
R13: ffff8df609190000 R14: ffff8df523ff68d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8df63b500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb9bb76a328 CR3: 000000010732e004 CR4: 00000000000706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x338/0xb00
 ? __handle_mm_fault+0x92c/0xe40
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? handle_mm_fault+0xdb/0x2d0
 ? do_user_addr_fault+0x1ef/0x690
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f7b170f9d81
Code: Unable to access opcode bytes at 0x7f7b170f9d57.
RSP: 002b:00007ffd6cf4dc28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f7b171f2a00 RCX: 00007f7b170f9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffd6cf4d6b0 R11: 0000000000000246 R12: 00007f7b171f2a00
R13: 0000000000000000 R14: 00007f7b171f82e8 R15: 00007f7b171f8300
 </TASK>
Complete report #630141
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
? inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
? inet_csk_destroy_sock
vmlinux 0x55
18
? inet_csk_destroy_sock
vmlinux 0x55
19
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 1 PID: 5647 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink qrtr sunrpc binfmt_misc snd_intel8x0 snd_ac97_codec ac97_bus snd_seq snd_seq_device joydev snd_pcm snd_timer pcspkr snd soundcore i2c_piix4 vboxguest zram vmwgfx e1000 video drm_ttm_helper serio_raw ttm wmi ip6_tables ip_tables fuse
CPU: 1 PID: 5647 Comm: Discord Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 a8 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb052c92fbcb8 EFLAGS: 00010282
RAX: 0000000000000026 RBX: ffffb052c92fbcd8 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffa8749b33 RDI: 00000000ffffffff
RBP: ffff9a7aa62a0008 R08: 0000000000000000 R09: ffffb052c92fbb58
R10: 0000000000000003 R11: ffffffffa9147448 R12: ffff9a79e16172a0
R13: ffff9a7a49580000 R14: ffff9a7955269ad0 R15: dead000000000100
FS:  00007f5384e34dc0(0000) GS:ffff9a7ad9c80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f555cff8990 CR3: 000000018e010000 CR4: 00000000000006e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? exit_to_user_mode_prepare+0x18f/0x1f0
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f5386747d81
Code: Unable to access opcode bytes at 0x7f5386747d57.
RSP: 002b:00007fff080068e8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007fff080068f0 RCX: 00007f5386747d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 00007fff08006970 R08: fffffffffffffe40 R09: 0000000400000020
R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff08006900
R13: 00000000ffffffff R14: 000034343ea114c0 R15: 00007fff08006900
 </TASK>
Complete report #631301
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
? inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 2 PID: 2198 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink qrtr snd_seq_midi snd_seq_midi_event vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock intel_rapl_msr vmw_balloon intel_rapl_common rapl snd_ens1371 snd_ac97_codec snd_rawmidi gameport ac97_bus snd_seq snd_seq_device snd_pcm joydev pcspkr snd_timer binfmt_misc snd vmw_vmci vfat fat soundcore i2c_piix4 zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme ghash_clmulni_intel sha512_ssse3 nvme_core serio_raw nvme_common vmwgfx vmxnet3 drm_ttm_helper ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 2 PID: 2198 Comm: Xwayland Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware20,1/440BX Desktop Reference Platform, BIOS VMW201.00V.20648489.B64.2210180829 10/18/2022
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 90 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffae57c2a53d38 EFLAGS: 00010286
RAX: 0000000000000026 RBX: ffffae57c2a53d58 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff90749b33 RDI: 00000000ffffffff
RBP: ffff9bb07e8fc008 R08: 0000000000000000 R09: ffffae57c2a53bd8
R10: 0000000000000003 R11: ffff9bb17fec3328 R12: ffff9bb0816fc3c0
R13: ffff9bb14d740000 R14: ffff9bb0714a6ad0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9bb179e80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f97aebf1da0 CR3: 0000000103000004 CR4: 0000000000370ee0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 ? handle_mm_fault+0xdb/0x2d0
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x58/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f66e20f9d81
Code: Unable to access opcode bytes at 0x7f66e20f9d57.
RSP: 002b:00007ffc0ae21358 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f66e21f2a00 RCX: 00007f66e20f9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 0000000000000001 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffc0ae20de0 R11: 0000000000000246 R12: 00007f66e21f2a00
R13: 0000000000000000 R14: 00007f66e21f82e8 R15: 00007f66e21f8300
 </TASK>
Complete report #685293
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
? inet_csk_destroy_sock
vmlinux 0x55
15
inet_csk_destroy_sock
vmlinux 0x55
16
inet_csk_destroy_sock
vmlinux 0x55
17
inet_csk_destroy_sock
vmlinux 0x55
18
inet_csk_destroy_sock
vmlinux 0x55
19
? inet_csk_destroy_sock
vmlinux 0x55
20
? inet_csk_destroy_sock
vmlinux 0x55
21
? inet_csk_destroy_sock
vmlinux 0x55
22
? inet_csk_destroy_sock
vmlinux 0x55
23
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 2 PID: 2579 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink snd_seq_midi snd_seq_midi_event qrtr bnep vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock sunrpc snd_ens1371 intel_rapl_msr snd_ac97_codec intel_rapl_common snd_rawmidi rapl gameport binfmt_misc ac97_bus vmw_balloon snd_seq btusb btrtl btbcm snd_seq_device btintel snd_pcm btmtk joydev snd_timer pcspkr bluetooth snd rfkill vmw_vmci soundcore i2c_piix4 zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 nvme serio_raw mptspi nvme_core vmwgfx scsi_transport_spi vmxnet3 nvme_common drm_ttm_helper mptscsih ttm mptbase ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 2 PID: 2579 Comm: IPC I/O Parent Tainted: G        W          6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/22/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 ae c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffba0c11c8bb80 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffffba0c11c8bba0 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffae749b33 RDI: 00000000ffffffff
RBP: ffff9d5691f44008 R08: 0000000000000000 R09: ffffba0c11c8ba20
R10: 0000000000000003 R11: ffff9d577fec34a8 R12: ffff9d564508c780
R13: ffff9d564e970000 R14: ffff9d568fb0e2d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9d5775e80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055d92cefea70 CR3: 00000001830be001 CR4: 00000000003706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 ? preempt_count_add+0x6a/0xa0
 arch_do_signal_or_restart+0x44/0x770
 exit_to_user_mode_prepare+0x117/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 ? do_syscall_64+0x67/0x80
 ? do_syscall_64+0x67/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f625072f196
Code: Unable to access opcode bytes at 0x7f625072f16c.
RSP: 002b:00007f62330d3aa0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e8
RAX: fffffffffffffffc RBX: 0000000000000000 RCX: 00007f625072f196
RDX: 0000000000000020 RSI: 00007f6250474e00 RDI: 0000000000000010
RBP: 00007f6232f59d00 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000293 R12: 00007f6250474e00
R13: 00007f6234942de0 R14: 00007f6234942de0 R15: 00000000ffffffff
 </TASK>
Complete report #652024
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
? inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 0 PID: 2371 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput isofs snd_seq_dummy snd_hrtimer xt_conntrack xt_MASQUERADE nf_conntrack_netlink xt_addrtype nft_compat br_netfilter vboxvideo drm_vram_helper bridge stp llc nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill overlay nf_tables nfnetlink qrtr vboxsf sunrpc binfmt_misc snd_intel8x0 snd_ac97_codec ac97_bus snd_seq snd_seq_device snd_pcm intel_rapl_msr intel_rapl_common snd_timer joydev rapl snd soundcore i2c_piix4 vboxguest pcspkr zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni vmwgfx polyval_generic video ghash_clmulni_intel wmi sha512_ssse3 e1000 drm_ttm_helper ttm serio_raw ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 2371 Comm: Xwayland Tainted: G        W    L     6.1.13-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 88 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffc1e1453c3d50 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffffc1e1453c3d70 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff88749b33 RDI: 00000000ffffffff
RBP: ffff9f2a1c054008 R08: 0000000000000000 R09: ffffc1e1453c3bf0
R10: 0000000000000003 R11: ffffffff89118cc0 R12: ffff9f2a4eb37f60
R13: ffff9f29ca9f0000 R14: ffff9f2a224888d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9f2ccfc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd91c01b300 CR3: 0000000169738003 CR4: 00000000000706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x338/0xb00
 ? handle_mm_fault+0xdb/0x2d0
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fe9ab8f9d81
Code: Unable to access opcode bytes at 0x7fe9ab8f9d57.
RSP: 002b:00007ffe13829ff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007fe9ab9f2a00 RCX: 00007fe9ab8f9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 0000000000000001 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffe13829a80 R11: 0000000000000246 R12: 00007fe9ab9f2a00
R13: 0000000000000000 R14: 00007fe9ab9f82e8 R15: 00007fe9ab9f8300
 </TASK>
Complete report #644665
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
? inet_csk_destroy_sock
vmlinux 0x55
16
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 3 PID: 4048 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer rfkill qrtr snd_seq_midi snd_seq_midi_event vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock sunrpc intel_rapl_msr snd_ens1371 intel_rapl_common snd_ac97_codec rapl vmw_balloon snd_rawmidi binfmt_misc joydev gameport vfat ac97_bus fat snd_seq snd_seq_device snd_pcm pcspkr snd_timer snd soundcore vmw_vmci i2c_piix4 zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel vmwgfx nvme mptspi scsi_transport_spi sha512_ssse3 serio_raw drm_ttm_helper nvme_core e1000 ttm mptscsih nvme_common mptbase ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 3 PID: 4048 Comm: Xwayland Tainted: G S      W          6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware20,1/440BX Desktop Reference Platform, BIOS VMW201.00V.20904234.B64.2212051119 12/05/2022
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 bc c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffff9932932b3d28 EFLAGS: 00010282
RAX: 0000000000000026 RBX: ffff9932932b3d48 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffbc749b33 RDI: 00000000ffffffff
RBP: ffff8d2eb23fc008 R08: 0000000000000000 R09: ffff9932932b3bc8
R10: 0000000000000003 R11: ffffffffbd147448 R12: ffff8d2e4247be40
R13: ffff8d2e4bc10000 R14: ffff8d2e735cecd0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8d316fd80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3d30012088 CR3: 000000014fe74003 CR4: 00000000001706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x58/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7eff57cf9d81
Code: Unable to access opcode bytes at 0x7eff57cf9d57.
RSP: 002b:00007ffe6dd0c178 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007eff57df2a00 RCX: 00007eff57cf9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 0000000000000001 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffe6dd0bc00 R11: 0000000000000246 R12: 00007eff57df2a00
R13: 0000000000000000 R14: 00007eff57df82e8 R15: 00007eff57df8300
 </TASK>
Complete report #640960
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
? inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
? inet_csk_destroy_sock
vmlinux 0x55
18
? inet_csk_destroy_sock
vmlinux 0x55
19
inet_csk_destroy_sock
vmlinux 0x55
20
inet_csk_destroy_sock
vmlinux 0x55
21
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 0 PID: 2511 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink qrtr snd_seq_midi snd_seq_midi_event vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock sunrpc binfmt_misc intel_rapl_msr intel_rapl_common kvm_amd ccp snd_ens1371 kvm snd_ac97_codec snd_rawmidi gameport ac97_bus snd_seq vmw_balloon snd_seq_device snd_pcm irqbypass snd_timer pcspkr joydev snd squashfs loop soundcore i2c_piix4 vmw_vmci zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel vmwgfx sha512_ssse3 mptspi serio_raw drm_ttm_helper scsi_transport_spi pcnet32 mptscsih mii ttm mptbase ata_generic pata_acpi scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath
 fuse
CPU: 0 PID: 2511 Comm: firefox Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 88 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffa6c1512f3c38 EFLAGS: 00010286
RAX: 0000000000000026 RBX: ffffa6c1512f3c58 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff88749b33 RDI: 00000000ffffffff
RBP: ffff9aeddf808008 R08: 0000000000000000 R09: ffffa6c1512f3ad8
R10: 0000000000000003 R11: ffff9aeebfec38a8 R12: ffff9aede0bee720
R13: ffff9aee8db00000 R14: ffff9aeda73b8ad0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9aeeb9e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f5f3ccff990 CR3: 000000001f62a000 CR4: 0000000000750ef0
PKRU: 55555554
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x338/0xb00
 ? asm_sysvec_apic_timer_interrupt+0x16/0x20
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 arch_do_signal_or_restart+0x44/0x770
 ? __schedule+0x367/0x1360
 ? recalibrate_cpu_khz+0x10/0x10
 ? ktime_get+0x3b/0xa0
 exit_to_user_mode_prepare+0x117/0x1f0
 irqentry_exit_to_user_mode+0x5/0x30
 asm_sysvec_reschedule_ipi+0x16/0x20
RIP: 0033:0x7fe5ee45e19e
Code: Unable to access opcode bytes at 0x7fe5ee45e174.
RSP: 002b:00007ffc1d3cd230 EFLAGS: 00000287
RAX: 00007fe5edd3a280 RBX: 0000000000000001 RCX: 00007fe5ee1f8aa0
RDX: 00007fe5d081d080 RSI: 0000000000000001 RDI: 0000000000000010
RBP: 00007fe5e91cf820 R08: 00000000000009c0 R09: 00007fe5ede00d00
R10: 00003a163ee5c160 R11: 00007fe5cba008a8 R12: 0000000000000007
R13: 00007fe5ad0a5a00 R14: 00007ffc1d3cd558 R15: 00007ffc1d3cdac8
 </TASK>
Complete report #637213
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
? inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
inet_csk_destroy_sock
vmlinux 0x55
18
inet_csk_destroy_sock
vmlinux 0x55
19
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 2 PID: 18309 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls isofs snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr snd_seq_midi vsock_loopback snd_seq_midi_event vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock bnep sunrpc snd_ens1371 snd_ac97_codec intel_rapl_msr btusb snd_rawmidi intel_rapl_common btrtl btbcm vmw_balloon btintel gameport rapl btmtk ac97_bus binfmt_misc bluetooth snd_seq snd_seq_device snd_pcm joydev snd_timer snd rfkill pcspkr pktcdvd soundcore vmw_vmci i2c_piix4 squashfs loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel vmwgfx sha512_ssse3 nvme serio_raw nvme_core vmxnet3 nvme_common drm_ttm_helper ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 2 PID: 18309 Comm: firefox Tainted: G        W    L     6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 87 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffaf7258877c38 EFLAGS: 00010286
RAX: 0000000000000026 RBX: ffffaf7258877c58 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff87749b33 RDI: 00000000ffffffff
RBP: ffffa022a6564008 R08: 0000000000000000 R09: ffffaf7258877ad8
R10: 0000000000000003 R11: ffffa023bfec1b28 R12: ffffa02087f160c0
R13: ffffa0208f0c0000 R14: ffffa02250eab8d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffffa023ade80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005616a2915018 CR3: 00000001398a8002 CR4: 0000000000370ee0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 arch_do_signal_or_restart+0x44/0x770
 ? __schedule+0x367/0x1360
 ? sched_clock_cpu+0xb/0xc0
 exit_to_user_mode_prepare+0x117/0x1f0
 irqentry_exit_to_user_mode+0x5/0x30
 asm_sysvec_apic_timer_interrupt+0x16/0x20
RIP: 0033:0x7f5b3e57903d
Code: Unable to access opcode bytes at 0x7f5b3e579013.
RSP: 002b:00007ffe2b14b458 EFLAGS: 00010283
RAX: 0000000000000f0a RBX: 00007f5b36940f0a RCX: 0000000000000076
RDX: 00007f5b36940f0a RSI: 00007f5b36940f0a RDI: 00007f5b36940f0a
RBP: 00007f5b1d51f200 R08: 0000000000002d9c R09: 00007f5b369357e0
R10: 0000000000000020 R11: 00007f5b1d542400 R12: 0000000000000076
R13: 00007f5b369720e8 R14: 00000000000000a3 R15: 00007ffe2b14b530
 </TASK>
Complete report #636884
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
? inet_csk_destroy_sock
vmlinux 0x55
15
? inet_csk_destroy_sock
vmlinux 0x55
16
inet_csk_destroy_sock
vmlinux 0x55
17
? inet_csk_destroy_sock
vmlinux 0x55
18
? inet_csk_destroy_sock
vmlinux 0x55
19
inet_csk_destroy_sock
vmlinux 0x55
20
inet_csk_destroy_sock
vmlinux 0x55
21
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 3 PID: 2133 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput isofs snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock snd_seq_midi snd_seq_midi_event sunrpc snd_ens1371 snd_ac97_codec snd_rawmidi gameport ac97_bus snd_seq snd_seq_device snd_pcm binfmt_misc snd_timer snd vmw_balloon intel_rapl_msr soundcore intel_rapl_common pcspkr i2c_piix4 joydev vmw_vmci zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic vmwgfx nvme ghash_clmulni_intel sha512_ssse3 nvme_core drm_ttm_helper serio_raw ttm nvme_common vmxnet3 ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 3 PID: 2133 Comm: Xwayland Tainted: G             L     6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b e9 82 aa 90 00 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 b0 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b e9 5f aa 90 00 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffaa59c2973c38 EFLAGS: 00010286
RAX: 0000000000000026 RBX: ffffaa59c2973c58 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffb0749b33 RDI: 00000000ffffffff
RBP: ffff97f126dec008 R08: 0000000000000000 R09: ffffaa59c2973ad8
R10: 0000000000000003 R11: ffff97f21fec18a8 R12: ffff97f1427d7300
R13: ffff97f20e090000 R14: ffff97f1477264d0 R15: dead000000000100
FS:  00007f1d8c2f8a00(0000) GS:ffff97f21a6c0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005629aba49a60 CR3: 0000000106344000 CR4: 00000000003506e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 ? find_alive_thread.isra.0+0x40/0x40
 ? call_rcu+0x106/0x630
 arch_do_signal_or_restart+0x44/0x770
 ? __schedule+0x367/0x1360
 ? sched_clock_cpu+0xb/0xc0
 exit_to_user_mode_prepare+0x117/0x1f0
 irqentry_exit_to_user_mode+0x5/0x30
 asm_sysvec_apic_timer_interrupt+0x16/0x20
RIP: 0033:0x7f1d8cc3730e
Code: Unable to access opcode bytes at 0x7f1d8cc372e4.
RSP: 002b:00007ffdd1a0f560 EFLAGS: 00000206
RAX: 0000000000000000 RBX: fffffffffffffd18 RCX: 0000000000000191
RDX: 000055dad0ff9310 RSI: 000055dad08347a0 RDI: 000055dad08347b0
RBP: 000055dad1119e30 R08: 000055dad0ff9190 R09: 0000000000000000
R10: 00007ffdd1b4e080 R11: c25d0d8fd6e2a7a9 R12: 000055dad111ba50
R13: 000055dad0718ea0 R14: 0000000000000000 R15: 000055dad10f3c00
 </TASK>
Complete report #636578
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
? inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
? inet_csk_destroy_sock
vmlinux 0x55
18
? inet_csk_destroy_sock
vmlinux 0x55
19
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 0 PID: 3399 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput isofs snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep snd_seq_midi snd_seq_midi_event vsock_loopback vmw_vsock_virtio_transport_common snd_ens1371 btusb uvcvideo snd_ac97_codec btrtl vmw_vsock_vmci_transport snd_rawmidi btbcm intel_rapl_msr videobuf2_vmalloc videobuf2_memops intel_rapl_common vsock gameport videobuf2_v4l2 btintel ac97_bus snd_seq btmtk videobuf2_common snd_seq_device bluetooth rapl vmw_balloon videodev snd_pcm mc snd_timer rfkill pcspkr joydev snd soundcore vmw_vmci sunrpc i2c_piix4 binfmt_misc zram crct10dif_pclmul crc32_pclmul vmwgfx crc32c_intel polyval_clmulni polyval_generic nvme ghash_clmulni_intel nvme_core sha512_ssse3 drm_ttm_helper serio_raw vmxnet3 ttm nvme_common
 ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 3399 Comm: totem Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 95 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffa58316c63c70 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffffa58316c63c90 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff95749b33 RDI: 00000000ffffffff
RBP: ffff90139f57c008 R08: 0000000000000000 R09: ffffa58316c63b10
R10: 0000000000000003 R11: ffff9013fffc3da8 R12: ffff9013943b7060
R13: ffff90138c7b0000 R14: ffff90139a4668d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9013fbe00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000556b0daf1000 CR3: 000000006779e004 CR4: 00000000003706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x58/0x80
 ? __rseq_handle_notify_resume+0x96/0x460
 ? handle_mm_fault+0xdb/0x2d0
 ? fpregs_restore_userregs+0x53/0xe0
 ? exit_to_user_mode_prepare+0x18f/0x1f0
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fe51b91bd81
Code: Unable to access opcode bytes at 0x7fe51b91bd57.
RSP: 002b:00007fffa9fb2a28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007fe51ba14a00 RCX: 00007fe51b91bd81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffffffffff80 R09: 0000000000000000
R10: 0000000000000004 R11: 0000000000000246 R12: 00007fe51ba14a00
R13: 0000000000000000 R14: 00007fe51ba1a2e8 R15: 00007fe51ba1a300
 </TASK>
Complete report #635288
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
? inet_csk_destroy_sock
vmlinux 0x55
15
inet_csk_destroy_sock
vmlinux 0x55
16
inet_csk_destroy_sock
vmlinux 0x55
17
inet_csk_destroy_sock
vmlinux 0x55
18
inet_csk_destroy_sock
vmlinux 0x55
19
? inet_csk_destroy_sock
vmlinux 0x55
20
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 0 PID: 2433 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: uinput snd_seq_dummy snd_hrtimer snd_seq_midi snd_seq_midi_event nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables bnep nfnetlink btusb btrtl btbcm btintel btmtk bluetooth snd_ens1371 snd_ac97_codec snd_rawmidi gameport ac97_bus snd_seq qrtr intel_rapl_msr intel_rapl_common snd_seq_device rapl snd_pcm vmw_balloon vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock snd_timer sunrpc pcspkr snd joydev rfkill binfmt_misc vmw_vmci soundcore i2c_piix4 zram crct10dif_pclmul vmwgfx crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme ghash_clmulni_intel nvme_core sha512_ssse3 drm_ttm_helper vmxnet3 serio_raw ttm nvme_common ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 2433 Comm: WRScene~ilder#1 Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 9c c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb7cec6e47c08 EFLAGS: 00010286
RAX: 0000000000000026 RBX: ffffb7cec6e47c28 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff9c749b33 RDI: 00000000ffffffff
RBP: ffff9db6fa3a8008 R08: 0000000000000000 R09: ffffb7cec6e47aa8
R10: 0000000000000003 R11: ffff9db7ffec18a8 R12: ffff9db6fa2ce060
R13: ffff9db7cd3d0000 R14: ffff9db70f1f22d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9db7f9e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f668487d990 CR3: 0000000103800001 CR4: 0000000000770ef0
PKRU: 55555554
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 ? sched_clock_cpu+0xb/0xc0
 arch_do_signal_or_restart+0x44/0x770
 exit_to_user_mode_prepare+0x117/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 ? do_syscall_64+0x67/0x80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f66c0ef412b
Code: Unable to access opcode bytes at 0x7f66c0ef4101.
RSP: 002b:00007f669e5fc338 EFLAGS: 00000246 ORIG_RAX: 0000000000000018
RAX: 0000000000000000 RBX: 00007f66c0ef4120 RCX: 00007f66c0ef412b
RDX: 0000000000000a6c RSI: 0000000000000536 RDI: 00007f669e5fd1b0
RBP: 0000000000000007 R08: 000000000000000d R09: 0000000000000001
R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000a6e
R13: 0000000000000016 R14: 00007f667bc20000 R15: 00007f668db11a00
 </TASK>
Complete report #634811
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
? inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 0 PID: 2194 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls tun uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set snd_seq_midi snd_seq_midi_event nf_tables nfnetlink intel_rapl_msr intel_rapl_common intel_uncore_frequency_common isst_if_mbox_msr isst_if_common nfit libnvdimm rapl snd_ens1371 vmw_balloon qrtr snd_ac97_codec snd_rawmidi gameport ac97_bus snd_seq snd_seq_device snd_pcm joydev pcspkr snd_timer snd soundcore i2c_piix4 vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock vmw_vmci binfmt_misc vfat fat zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme ghash_clmulni_intel sha512_ssse3 nvme_core vmwgfx serio_raw nvme_common vmxnet3 drm_ttm_helper ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 2194 Comm: Xwayland Tainted: G             L     6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware20,1/440BX Desktop Reference Platform, BIOS VMW201.00V.20904234.B64.2212051119 12/05/2022
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 a9 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb01ec249bcf0 EFLAGS: 00010292
RAX: 0000000000000026 RBX: ffffb01ec249bd10 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffa9749b33 RDI: 00000000ffffffff
RBP: ffff9945c1800008 R08: 0000000000000000 R09: ffffb01ec249bb90
R10: 0000000000000003 R11: ffff99467fec30a8 R12: ffff9945439c6a20
R13: ffff99454e490000 R14: ffff9945be97a0d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff994675e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005592f107cea0 CR3: 000000011e102006 CR4: 00000000003706f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x58/0x80
 ? do_user_addr_fault+0x1ef/0x690
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fde7e472d81
Code: Unable to access opcode bytes at 0x7fde7e472d57.
RSP: 002b:00007ffe109fa268 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007fde7e56ba00 RCX: 00007fde7e472d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffe109f9cf0 R11: 0000000000000246 R12: 00007fde7e56ba00
R13: 0000000000000000 R14: 00007fde7e5712e8 R15: 00007fde7e571300
 </TASK>
Complete report #634454
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
? inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
? inet_csk_destroy_sock
vmlinux 0x55
18
? inet_csk_destroy_sock
vmlinux 0x55
19
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 1 PID: 2445 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: uinput isofs snd_seq_dummy snd_hrtimer vboxvideo(OE) xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT bridge stp llc nf_nat_tftp nf_conntrack_netbios_ns nf_conntrack_broadcast nft_objref nf_conntrack_tftp nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security ip_set rfkill nf_tables nfnetlink ip6table_filter iptable_filter qrtr sunrpc binfmt_misc vfat fat intel_rapl_msr intel_rapl_common snd_intel8x0 snd_ac97_codec ac97_bus kvm_amd snd_seq ccp snd_seq_device joydev kvm snd_pcm snd_timer irqbypass snd vboxguest(OE) pcspkr i2c_piix4 soundcore e1000 zram crct10dif_pclmul crc32_pclmul crc32c_intel vmwgfx polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 drm_ttm_helper serio_raw ttm video wmi ata_generic pata_acpi
 scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse
CPU: 1 PID: 2445 Comm: Xwayland Tainted: G           OE      6.1.13-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b e9 82 aa 90 00 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 85 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b e9 5f aa 90 00 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffae33059a7c88 EFLAGS: 00010282
RAX: 0000000000000026 RBX: ffffae33059a7ca8 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff85749b33 RDI: 00000000ffffffff
RBP: ffff955f7610c008 R08: 0000000000000000 R09: ffffae33059a7b28
R10: 0000000000000003 R11: ffffffff86147448 R12: ffff955c8b14bba0
R13: ffff955c8b1d0000 R14: ffff955f43bcacd0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff955f8fc40000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3648000020 CR3: 00000001343a4000 CR4: 00000000000506e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x338/0xb00
 ? __handle_mm_fault+0x81c/0xe40
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? handle_mm_fault+0xdb/0x2d0
 ? do_user_addr_fault+0x1ef/0x690
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fd8b7472d81
Code: Unable to access opcode bytes at 0x7fd8b7472d57.
RSP: 002b:00007ffe4aecdfc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007fd8b756ba00 RCX: 00007fd8b7472d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffe4aecda50 R11: 0000000000000246 R12: 00007fd8b756ba00
R13: 0000000000000000 R14: 00007fd8b75712e8 R15: 00007fd8b7571300
 </TASK>
Complete report #634170
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
? inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
? inet_csk_destroy_sock
vmlinux 0x55
18
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 7 PID: 2486 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer tun vboxvideo drm_vram_helper nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set qrtr nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_tables nfnetlink sunrpc binfmt_misc snd_intel8x0 intel_rapl_msr snd_ac97_codec ac97_bus snd_seq snd_seq_device intel_rapl_common joydev snd_pcm snd_timer pcspkr snd vboxguest soundcore i2c_piix4 zram vmwgfx crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic drm_ttm_helper ghash_clmulni_intel e1000 ttm sha512_ssse3 video serio_raw wmi ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 7 PID: 2486 Comm: Xwayland Tainted: G             L     6.1.13-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 ac c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffadfc8524fcc0 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffffadfc8524fce0 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffac749b33 RDI: 00000000ffffffff
RBP: ffff88ed2fcd0008 R08: 0000000000000000 R09: ffffadfc8524fb60
R10: 0000000000000003 R11: ffffffffad147448 R12: ffff88ed197639c0
R13: ffff88ed0acb0000 R14: ffff88ed2fccf8d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff88edf05c0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f92a08ee738 CR3: 00000001672be000 CR4: 00000000000506e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? handle_mm_fault+0xdb/0x2d0
 ? do_user_addr_fault+0x1ef/0x690
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f6f14ef9d81
Code: Unable to access opcode bytes at 0x7f6f14ef9d57.
RSP: 002b:00007ffc0d63d358 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f6f14ff2a00 RCX: 00007f6f14ef9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 0000000000000001 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffc0d63cde0 R11: 0000000000000246 R12: 00007f6f14ff2a00
R13: 0000000000000000 R14: 00007f6f14ff82e8 R15: 00007f6f14ff8300
 </TASK>
Complete report #633894
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
? inet_csk_destroy_sock
vmlinux 0x55
15
inet_csk_destroy_sock
vmlinux 0x55
16
inet_csk_destroy_sock
vmlinux 0x55
17
inet_csk_destroy_sock
vmlinux 0x55
18
inet_csk_destroy_sock
vmlinux 0x55
19
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 2 PID: 3525 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls snd_seq_dummy snd_hrtimer nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink bnep intel_rapl_msr snd_seq_midi snd_seq_midi_event vmw_balloon intel_rapl_common qrtr rapl vsock_loopback vmw_vsock_virtio_transport_common btusb vmw_vsock_vmci_transport btrtl vsock btbcm btintel btmtk bluetooth joydev rfkill vmw_vmci snd_ens1371 snd_ac97_codec pcspkr snd_rawmidi gameport ac97_bus snd_seq snd_seq_device i2c_piix4 snd_pcm snd_timer snd soundcore sunrpc zram xfs crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 vmwgfx nvme serio_raw nvme_core drm_ttm_helper nvme_common vmxnet3 ttm ata_generic pata_acpi scsi_dh_rdac scsi_dh_emc scsi_dh_alua fuse dm_multipath
CPU: 2 PID: 3525 Comm: StreamTrans #49 Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 a7 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffaae14167bc00 EFLAGS: 00010292
RAX: 0000000000000026 RBX: ffffaae14167bc20 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffa7749b33 RDI: 00000000ffffffff
RBP: ffff8fd7e0080008 R08: 0000000000000000 R09: ffffaae14167baa0
R10: 0000000000000003 R11: ffff8fd883ec37a8 R12: ffff8fd828a02780
R13: ffff8fd7cd760000 R14: ffff8fd85579ead0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8fd87bc80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005600b04d1fd8 CR3: 0000000103598003 CR4: 00000000003706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 ? __hrtimer_init+0xe0/0xe0
 arch_do_signal_or_restart+0x44/0x770
 exit_to_user_mode_prepare+0x117/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f1aa5aaad16
Code: Unable to access opcode bytes at 0x7f1aa5aaacec.
RSP: 002b:00007f1a788fe820 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffdfc RBX: 0000000000000000 RCX: 00007f1aa5aaad16
RDX: 0000000000000000 RSI: 0000000000000089 RDI: 00007f1aa585ca24
RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000ffffffff
R10: 00007f1a788fe940 R11: 0000000000000246 R12: 0000000000000001
R13: 00007f1aa585c9c0 R14: 00007f1aa585ca24 R15: 0000000000000000
 </TASK>
Complete report #633542
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
? inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
? inet_csk_destroy_sock
vmlinux 0x55
18
? inet_csk_destroy_sock
vmlinux 0x55
19
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 0 PID: 1497 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc snd_intel8x0 snd_ac97_codec ac97_bus snd_seq snd_seq_device intel_rapl_msr binfmt_misc intel_rapl_common snd_pcm rapl snd_timer joydev pcspkr snd i2c_piix4 soundcore vboxguest zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_generic vmwgfx ghash_clmulni_intel e1000 drm_ttm_helper sha512_ssse3 serio_raw ttm video wmi ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 1497 Comm: Xwayland Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 83 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffaadc0382fca8 EFLAGS: 00010286
RAX: 0000000000000026 RBX: ffffaadc0382fcc8 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff83749b33 RDI: 00000000ffffffff
RBP: ffff8aa8864c8008 R08: 0000000000000000 R09: ffffaadc0382fb48
R10: 0000000000000003 R11: ffffffff84147448 R12: ffff8aa866cd0660
R13: ffff8aa875560000 R14: ffff8aa88ac720d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8aa8bdc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7220adf890 CR3: 000000003587a002 CR4: 00000000000306f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x338/0xb00
 ? __pv_queued_spin_lock_slowpath+0x16c/0x380
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? handle_mm_fault+0xdb/0x2d0
 ? do_user_addr_fault+0x1ef/0x690
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f92288f9d81
Code: Unable to access opcode bytes at 0x7f92288f9d57.
RSP: 002b:00007fff67984f28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f92289f2a00 RCX: 00007f92288f9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007fff679849b0 R11: 0000000000000246 R12: 00007f92289f2a00
R13: 0000000000000000 R14: 00007f92289f82e8 R15: 00007f92289f8300
 </TASK>
Complete report #633499
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
? inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 0 PID: 2134 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr snd_seq_midi snd_seq_midi_event bnep snd_ens1371 vsock_loopback vmw_vsock_virtio_transport_common snd_ac97_codec vmw_vsock_vmci_transport vsock vmw_balloon snd_rawmidi intel_rapl_msr gameport ac97_bus intel_rapl_common snd_seq snd_seq_device rapl btusb btrtl btbcm snd_pcm btintel btmtk bluetooth snd_timer snd rfkill joydev pcspkr sunrpc soundcore vmw_vmci i2c_piix4 binfmt_misc vfat fat zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 nvme vmwgfx nvme_core serio_raw nvme_common drm_ttm_helper vmxnet3 ttm ata_generic pata_acpi scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath
 fuse
CPU: 0 PID: 2134 Comm: Xwayland Tainted: G S      W          6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware7,1/440BX Desktop Reference Platform, BIOS VMW71.00V.18452719.B64.2108091906 08/09/2021
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 91 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffaddb42a4fd50 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffffaddb42a4fd70 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff91749b33 RDI: 00000000ffffffff
RBP: ffff8dcd622dc008 R08: 0000000000000000 R09: ffffaddb42a4fbf0
R10: 0000000000000003 R11: ffff8dcfeddfffe8 R12: ffff8dcd6a443900
R13: ffff8dcccfa70000 R14: ffff8dcd64ecd4d0 R15: dead000000000100
FS:  00007f6b28f73a00(0000) GS:ffff8dcfede00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555ee249bde0 CR3: 000000012061a003 CR4: 00000000000606f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 ? handle_mm_fault+0xdb/0x2d0
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x58/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f6b298f9d81
Code: Unable to access opcode bytes at 0x7f6b298f9d57.
RSP: 002b:00007ffdd83d46d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f6b299f2a00 RCX: 00007f6b298f9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffdd83d4160 R11: 0000000000000246 R12: 00007f6b299f2a00
R13: 0000000000000000 R14: 00007f6b299f82e8 R15: 00007f6b299f8300
 </TASK>
Complete report #633478
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
? inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
? inet_csk_destroy_sock
vmlinux 0x55
18
? inet_csk_destroy_sock
vmlinux 0x55
19
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 10 PID: 2285 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: veth xt_conntrack xt_MASQUERADE nf_conntrack_netlink xt_addrtype nft_compat br_netfilter bridge stp llc overlay tls uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink qrtr sunrpc binfmt_misc squashfs loop snd_intel8x0 snd_ac97_codec ac97_bus snd_seq snd_seq_device intel_rapl_msr intel_rapl_common snd_pcm snd_timer rapl joydev snd soundcore pcspkr vboxguest i2c_piix4 zram crct10dif_pclmul video crc32_pclmul crc32c_intel polyval_clmulni polyval_generic vmwgfx wmi ghash_clmulni_intel sha512_ssse3 drm_ttm_helper e1000 ttm serio_raw ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 10 PID: 2285 Comm: Xwayland Tainted: G             L     6.1.13-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 b6 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffa876468a3c88 EFLAGS: 00010282
RAX: 0000000000000026 RBX: ffffa876468a3ca8 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffb6749b33 RDI: 00000000ffffffff
RBP: ffff88a0e69f8008 R08: 0000000000000000 R09: ffffa876468a3b28
R10: 0000000000000003 R11: ffffffffb7147448 R12: ffff88a0f0073a20
R13: ffff88a08daa0000 R14: ffff88a0d07ceed0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff88a119c80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6aae14a4c0 CR3: 000000007a15c004 CR4: 00000000000706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x338/0xb00
 ? __handle_mm_fault+0x81c/0xe40
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? handle_mm_fault+0xdb/0x2d0
 ? do_user_addr_fault+0x1ef/0x690
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fd128672d81
Code: Unable to access opcode bytes at 0x7fd128672d57.
RSP: 002b:00007ffee2c0a6d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007fd12876ba00 RCX: 00007fd128672d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffee2c0a160 R11: 0000000000000246 R12: 00007fd12876ba00
R13: 0000000000000000 R14: 00007fd1287712e8 R15: 00007fd128771300
 </TASK>
Complete report #633426
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
? inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
inet_csk_destroy_sock
vmlinux 0x55
16
inet_csk_destroy_sock
vmlinux 0x55
17
inet_csk_destroy_sock
vmlinux 0x55
18
inet_csk_destroy_sock
vmlinux 0x55
19
? inet_csk_destroy_sock
vmlinux 0x55
20
? inet_csk_destroy_sock
vmlinux 0x55
21
? inet_csk_destroy_sock
vmlinux 0x55
22
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 4 PID: 2788 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput isofs snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink qrtr sunrpc binfmt_misc snd_intel8x0 intel_rapl_msr snd_ac97_codec intel_rapl_common ac97_bus snd_seq snd_seq_device rapl snd_pcm joydev pcspkr snd_timer snd soundcore vboxguest i2c_piix4 zram vmwgfx crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic video wmi ghash_clmulni_intel serio_raw e1000 drm_ttm_helper sha512_ssse3 ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 4 PID: 2788 Comm: VizCompositorTh Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 99 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffab81866a7bc8 EFLAGS: 00010282
RAX: 0000000000000026 RBX: ffffab81866a7be8 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff99749b33 RDI: 00000000ffffffff
RBP: ffff9dcf42bb0008 R08: 0000000000000000 R09: ffffab81866a7a68
R10: 0000000000000003 R11: ffffffff9a147448 R12: ffff9dcf50bc8d80
R13: ffff9dcf0b2f0000 R14: ffff9dcf5cc54cd0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9dd00bf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbcd8c5b5c0 CR3: 000000003d010001 CR4: 00000000000706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x338/0xb00
 ? schedule+0x67/0xe0
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 arch_do_signal_or_restart+0x44/0x770
 exit_to_user_mode_prepare+0x117/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? __irq_exit_rcu+0x3d/0x140
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fb1fb0aad16
Code: Unable to access opcode bytes at 0x7fb1fb0aacec.
RSP: 002b:00007fb1de5fa3c0 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb1fb0aad16
RDX: 0000000000000000 RSI: 0000000000000189 RDI: 00007fb1de5fa608
RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1de5fa5b8
R13: 0000000000000000 R14: 0000000000000000 R15: 00007fb1de5fa608
 </TASK>
Complete report #633331
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
? inet_csk_destroy_sock
vmlinux 0x55
15
inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
? inet_csk_destroy_sock
vmlinux 0x55
18
inet_csk_destroy_sock
vmlinux 0x55
19
inet_csk_destroy_sock
vmlinux 0x55
20
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 0 PID: 3111 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tun snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock sunrpc snd_seq_midi snd_seq_midi_event binfmt_misc snd_ens1371 btusb snd_ac97_codec btrtl btbcm snd_rawmidi btintel gameport ac97_bus snd_seq btmtk intel_rapl_msr intel_rapl_common rapl snd_seq_device bluetooth vmw_balloon snd_pcm joydev snd_timer pcspkr rfkill snd vmw_vmci i2c_piix4 soundcore pktcdvd zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic vmwgfx ghash_clmulni_intel sha512_ssse3 mptspi e1000 scsi_transport_spi mptscsih serio_raw drm_ttm_helper mptbase ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 3111 Comm: firefox Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/29/2019
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 83 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb44906b9fc38 EFLAGS: 00010286
RAX: 0000000000000026 RBX: ffffb44906b9fc58 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff83749b33 RDI: 00000000ffffffff
RBP: ffff8a4a01134008 R08: 0000000000000000 R09: ffffb44906b9fad8
R10: 0000000000000003 R11: ffff8a4b3fec18a8 R12: ffff8a4a0b8ed000
R13: ffff8a4b099b0000 R14: ffff8a4b2577c0d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8a4b39e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb266bcb000 CR3: 0000000001bce003 CR4: 00000000003706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 ? invalidate_user_asid+0x1a/0x50
 arch_do_signal_or_restart+0x44/0x770
 ? __schedule+0x367/0x1360
 ? sched_clock_cpu+0xb/0xc0
 exit_to_user_mode_prepare+0x117/0x1f0
 irqentry_exit_to_user_mode+0x5/0x30
 asm_sysvec_apic_timer_interrupt+0x16/0x20
RIP: 0033:0x7fb412975120
Code: Unable to access opcode bytes at 0x7fb4129750f6.
RSP: 002b:00007ffe6e8f5708 EFLAGS: 00000206
RAX: 0f1eff3cb32ff571 RBX: 00007fb3d41ea300 RCX: 000000000000006f
RDX: 0000000000000010 RSI: 00007fb40ad34660 RDI: 00007fb40ada7520
RBP: 00007fb40ada7520 R08: 0000000000002a00 R09: 00007fb412700d00
R10: 00007fb3d41ea340 R11: 0000000000000011 R12: 00007ffe6e8f5740
R13: 00007fb41262ce50 R14: 00007ffe6e8f5ce0 R15: 00007ffe6e8f5d78
 </TASK>
Complete report #633195
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
? inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
inet_csk_destroy_sock
vmlinux 0x55
18
inet_csk_destroy_sock
vmlinux 0x55
19
inet_csk_destroy_sock
vmlinux 0x55
20
? inet_csk_destroy_sock
vmlinux 0x55
21
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 4 PID: 5308 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput isofs snd_seq_dummy snd_hrtimer qrtr rfkill snd_seq_midi snd_seq_midi_event vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock sunrpc binfmt_misc snd_ens1371 snd_ac97_codec intel_rapl_msr intel_rapl_common snd_rawmidi gameport vmw_balloon ac97_bus rapl snd_seq snd_seq_device snd_pcm snd_timer joydev pcspkr snd vmw_vmci soundcore i2c_piix4 zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic vmwgfx ghash_clmulni_intel sha512_ssse3 mptspi scsi_transport_spi e1000 mptscsih serio_raw mptbase drm_ttm_helper ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 4 PID: 5308 Comm: Cache2 I/O Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/22/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 9c c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb9e4167f7c00 EFLAGS: 00010292
RAX: 0000000000000026 RBX: ffffb9e4167f7c20 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff9c749b33 RDI: 00000000ffffffff
RBP: ffff901f682f0008 R08: 0000000000000000 R09: ffffb9e4167f7aa0
R10: 0000000000000003 R11: ffff90213fec34a8 R12: ffff9020b926ccc0
R13: ffff90200ed80000 R14: ffff90209eca5ad0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff902135f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055dc4b2cc83c CR3: 000000007fedc005 CR4: 00000000007706e0
PKRU: 55555554
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 ? filemap_read+0x30b/0x310
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 arch_do_signal_or_restart+0x44/0x770
 ? vfs_read+0x217/0x2f0
 exit_to_user_mode_prepare+0x117/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 ? do_syscall_64+0x67/0x80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f00d591e21c
Code: Unable to access opcode bytes at 0x7f00d591e1f2.
RSP: 002b:00007f00b8235be0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: fffffffffffffffc RBX: 0000000000000036 RCX: 00007f00d591e21c
RDX: 0000000000000036 RSI: 00007f007655fa00 RDI: 0000000000000076
RBP: 0000000000000036 R08: 0000000000000000 R09: 00007f00d5700d00
R10: 00006df34da21d82 R11: 0000000000000246 R12: 00007f0076d88bb0
R13: 00007f007655fa00 R14: 00007f00b9bf0b80 R15: 0000000000000001
 </TASK>
Complete report #632537
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
? inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
? inet_csk_destroy_sock
vmlinux 0x55
18
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 0 PID: 2339 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput isofs snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink bnep snd_seq_midi snd_seq_midi_event qrtr btusb snd_ens1371 btrtl snd_ac97_codec btbcm uvcvideo snd_rawmidi btintel gameport btmtk ac97_bus vsock_loopback vmw_vsock_virtio_transport_common snd_seq vmw_vsock_vmci_transport vsock videobuf2_vmalloc intel_rapl_msr videobuf2_memops videobuf2_v4l2 videobuf2_common bluetooth vmw_balloon snd_seq_device intel_rapl_common videodev snd_pcm rapl sunrpc mc binfmt_misc joydev snd_timer pcspkr snd rfkill soundcore vmw_vmci i2c_piix4 squashfs loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic vmwgfx mptspi ghash_clmulni_intel sha512_ssse3 scsi_transport_spi mptscsih serio_raw mptbase e1000
 drm_ttm_helper ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 2339 Comm: Xwayland Tainted: G        W          6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/22/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 a4 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffff99fe1a7cfcb0 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffff99fe1a7cfcd0 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffa4749b33 RDI: 00000000ffffffff
RBP: ffff8d91e27e0008 R08: 0000000000000000 R09: ffff99fe1a7cfb50
R10: 0000000000000003 R11: ffff8d92bfec08a8 R12: ffff8d91a185e540
R13: ffff8d928d450000 R14: ffff8d91e0fe3cd0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8d92b9e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1ed20f7c08 CR3: 0000000060fe0003 CR4: 00000000001706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x58/0x80
 ? handle_mm_fault+0xdb/0x2d0
 ? do_user_addr_fault+0x1ef/0x690
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f1306ef9d81
Code: Unable to access opcode bytes at 0x7f1306ef9d57.
RSP: 002b:00007ffe5e62cbe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f1306ff2a00 RCX: 00007f1306ef9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffe5e62c670 R11: 0000000000000246 R12: 00007f1306ff2a00
R13: 0000000000000000 R14: 00007f1306ff82e8 R15: 00007f1306ff8300
 </TASK>
Complete report #631891
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
? inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
inet_csk_destroy_sock
vmlinux 0x55
16
inet_csk_destroy_sock
vmlinux 0x55
17
inet_csk_destroy_sock
vmlinux 0x55
18
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 0 PID: 3234 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput isofs snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock sunrpc snd_seq_midi snd_seq_midi_event binfmt_misc intel_rapl_msr snd_ens1371 snd_ac97_codec snd_rawmidi gameport intel_rapl_common ac97_bus snd_seq snd_seq_device snd_pcm snd_timer btusb snd btrtl vmw_balloon btbcm btintel btmtk rapl soundcore bluetooth rfkill pcspkr joydev vmw_vmci i2c_piix4 zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel mptspi scsi_transport_spi vmwgfx mptscsih sha512_ssse3 drm_ttm_helper serio_raw e1000 mptbase ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 3234 Comm: WRRende~ckend#1 Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 02/27/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 93 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffaafd1398fc38 EFLAGS: 00010286
RAX: 0000000000000026 RBX: ffffaafd1398fc58 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff93749b33 RDI: 00000000ffffffff
RBP: ffff9f3ee1f7c008 R08: 0000000000000000 R09: ffffaafd1398fad8
R10: 0000000000000003 R11: ffff9f3fffec18a8 R12: ffff9f3eda9af9c0
R13: ffff9f3fce0c0000 R14: ffff9f3ec4336cd0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9f3ff9e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd1f4308080 CR3: 0000000121848001 CR4: 00000000003706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 ? __do_fault+0x30/0x130
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 arch_do_signal_or_restart+0x44/0x770
 exit_to_user_mode_prepare+0x117/0x1f0
 irqentry_exit_to_user_mode+0x5/0x30
 asm_exc_page_fault+0x22/0x30
RIP: 0033:0x7fa159c3e060
Code: Unable to access opcode bytes at 0x7fa159c3e036.
RSP: 002b:00007fa12b3fb288 EFLAGS: 00010206
RAX: 0000000000000000 RBX: 00007fa12b3fd580 RCX: 00007fa159c22d87
RDX: 0000000000000098 RSI: 0000000000000005 RDI: 00007fa12b3fd808
RBP: 0000000000000005 R08: 0000000000000000 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000d48 R12: 0000000000000005
R13: 00007fa12b3fd138 R14: 0000000000000000 R15: 0000000000007fa1
 </TASK>
Complete report #631708
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
? inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
? inet_csk_destroy_sock
vmlinux 0x55
18
? inet_csk_destroy_sock
vmlinux 0x55
19
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 6 PID: 1658 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls vmnet(OE) vmmon(OE) uinput isofs snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink qrtr ppdev parport_pc parport vsock_loopback vmw_vsock_virtio_transport_common snd_seq_midi snd_seq_midi_event vmw_vsock_vmci_transport vsock sunrpc binfmt_misc snd_ens1371 snd_ac97_codec snd_rawmidi gameport ac97_bus snd_seq intel_rapl_msr vmw_balloon snd_seq_device intel_rapl_common snd_pcm snd_timer joydev pcspkr snd soundcore vmw_vmci i2c_piix4 zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic vmwgfx ghash_clmulni_intel sha512_ssse3 nvme drm_ttm_helper ttm serio_raw nvme_core vmxnet3 nvme_common ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 6 PID: 1658 Comm: Xwayland Tainted: G        W  OE      6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 8d c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb4dc82aa7c60 EFLAGS: 00010292
RAX: 0000000000000026 RBX: ffffb4dc82aa7c80 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff8d749b33 RDI: 00000000ffffffff
RBP: ffff9342cfee8008 R08: 0000000000000000 R09: ffffb4dc82aa7b00
R10: 0000000000000003 R11: ffff9343bfec34a8 R12: ffff9342aceb3960
R13: ffff93428ecc0000 R14: ffff9342cfedc6d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9343b5f80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4d6dcca000 CR3: 000000012f4c0000 CR4: 0000000000750ee0
PKRU: 55555554
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? handle_mm_fault+0xdb/0x2d0
 ? do_user_addr_fault+0x1ef/0x690
 ? syscall_exit_to_user_mode+0x17/0x40
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7facb64f9d81
Code: Unable to access opcode bytes at 0x7facb64f9d57.
RSP: 002b:00007ffe788b0258 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007facb65f2a00 RCX: 00007facb64f9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 0000000000000001 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffe788afce0 R11: 0000000000000246 R12: 00007facb65f2a00
R13: 0000000000000000 R14: 00007facb65f82e8 R15: 00007facb65f8300
 </TASK>
Complete report #630970
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
? inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
? inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
inet_csk_destroy_sock
vmlinux 0x55
18
? inet_csk_destroy_sock
vmlinux 0x55
19
? inet_csk_destroy_sock
vmlinux 0x55
20
inet_csk_destroy_sock
vmlinux 0x55
21
inet_csk_destroy_sock
vmlinux 0x55
22
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 0 PID: 2433 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: exfat uas usb_storage uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock snd_seq_midi snd_seq_midi_event sunrpc snd_ens1371 snd_ac97_codec snd_rawmidi gameport ac97_bus snd_seq intel_rapl_msr snd_seq_device intel_rapl_common rapl snd_pcm vmw_balloon snd_timer pcspkr snd joydev soundcore vmw_vmci i2c_piix4 binfmt_misc zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel vmwgfx nvme sha512_ssse3 nvme_core serio_raw drm_ttm_helper nvme_common vmxnet3 ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 2433 Comm: IPC I/O Parent Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 9e c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffa9b5079c7c38 EFLAGS: 00010286
RAX: 0000000000000026 RBX: ffffa9b5079c7c58 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff9e749b33 RDI: 00000000ffffffff
RBP: ffff934368078008 R08: 0000000000000000 R09: ffffa9b5079c7ad8
R10: 0000000000000003 R11: ffff93448bec1368 R12: ffff93431a220b40
R13: ffff93430ed90000 R14: ffff934352b816d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff934480a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffe0924dd78 CR3: 00000001e7c4e006 CR4: 00000000001706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 ? schedule_hrtimeout_range_clock+0xfa/0x100
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 ? find_alive_thread.isra.0+0x40/0x40
 ? call_rcu+0x106/0x630
 arch_do_signal_or_restart+0x44/0x770
 ? __schedule+0x367/0x1360
 ? asm_sysvec_call_function_single+0x16/0x20
 exit_to_user_mode_prepare+0x117/0x1f0
 irqentry_exit_to_user_mode+0x5/0x30
 asm_sysvec_call_function_single+0x16/0x20
RIP: 0033:0x7f52f7f2481b
Code: Unable to access opcode bytes at 0x7f52f7f247f1.
RSP: 002b:00007f52e78aca80 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 00007f52b5b0c5e0 RCX: 0000000000000000
RDX: 00007f52b5b0c5e0 RSI: 0000000000000002 RDI: 00000000000000cf
RBP: 0000000000000002 R08: 00007f52f7f247f0 R09: 00000000000000cf
R10: 00007ffff9bdd080 R11: 0000000000000001 R12: 00000000000000cf
R13: 0000000000000000 R14: 000000007fffffff R15: 00007f52b5b0c5e0
 </TASK>
Complete report #630673
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
? inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
? inet_csk_destroy_sock
vmlinux 0x55
18
? inet_csk_destroy_sock
vmlinux 0x55
19
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 0 PID: 2871 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput isofs snd_seq_dummy snd_hrtimer vboxvideo drm_vram_helper xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nf_nat_tftp nf_conntrack_tftp bridge stp llc nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security ip_set nf_tables nfnetlink ip6table_filter rfkill iptable_filter qrtr sunrpc intel_rapl_msr intel_rapl_common intel_uncore_frequency_common isst_if_common binfmt_misc snd_intel8x0 nfit snd_ac97_codec libnvdimm ac97_bus snd_seq snd_seq_device snd_pcm snd_timer snd rapl soundcore joydev i2c_piix4 pcspkr vboxguest squashfs loop zram crct10dif_pclmul crc32_pclmul crc32c_intel vmwgfx polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3
 drm_ttm_helper e1000 serio_raw ttm video wmi ata_generic pata_acpi scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse
CPU: 0 PID: 2871 Comm: firefox Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 b8 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffa05445e53d20 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffffa05445e53d40 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffb8749b33 RDI: 00000000ffffffff
RBP: ffff8c8673f48008 R08: 0000000000000000 R09: ffffa05445e53bc0
R10: 0000000000000003 R11: ffffffffb9147448 R12: ffff8c8677b41540
R13: ffff8c858a960000 R14: ffff8c8672e246d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8c888fc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005633ac53f498 CR3: 0000000203adc004 CR4: 00000000000706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x338/0xb00
 ? kick_process+0x46/0x80
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fa593ef9d81
Code: Unable to access opcode bytes at 0x7fa593ef9d57.
RSP: 002b:00007ffce3985368 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000020 RCX: 00007fa593ef9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 00007fa593b35500 R08: ffffffffffffff40 R09: 00007fa59277a530
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007fa593116150 R14: 0000000000000000 R15: 00007fa593bcc240
 </TASK>
Complete report #630731
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
inet_csk_destroy_sock
vmlinux 0x55
16
inet_csk_destroy_sock
vmlinux 0x55
17
inet_csk_destroy_sock
vmlinux 0x55
18
? inet_csk_destroy_sock
vmlinux 0x55
19
? inet_csk_destroy_sock
vmlinux 0x55
20
? inet_csk_destroy_sock
vmlinux 0x55
21
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 3 PID: 2359 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr binfmt_misc vfat fat snd_intel8x0 snd_ac97_codec ac97_bus snd_seq intel_rapl_msr joydev intel_rapl_common snd_seq_device rapl snd_pcm i2c_piix4 snd_timer pcspkr snd soundcore vboxguest zram crct10dif_pclmul vmwgfx crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 serio_raw e1000 drm_ttm_helper video ttm wmi ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 3 PID: 2359 Comm: tokio-runtime-w Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 9d c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffc1d144f97b98 EFLAGS: 00010286
RAX: 0000000000000026 RBX: ffffc1d144f97bb8 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff9d749b33 RDI: 00000000ffffffff
RBP: ffff9cfd8fc1c008 R08: 0000000000000000 R09: ffffc1d144f97a38
R10: 0000000000000003 R11: ffffffff9e147448 R12: ffff9cfd8edc7720
R13: ffff9cfe88600000 R14: ffff9cfda4fe54d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9cfebb580000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fde535eafb0 CR3: 000000001d0a8002 CR4: 00000000000706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 arch_do_signal_or_restart+0x44/0x770
 exit_to_user_mode_prepare+0x117/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fd0e752792d
Code: Unable to access opcode bytes at 0x7fd0e7527903.
RSP: 002b:00007fd0e037d418 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007fd0e7527910 RCX: 00007fd0e752792d
RDX: 0000000000000001 RSI: 0000000000000080 RDI: 00007fd0e037e4f8
RBP: 0000000000000580 R08: 0000000000000002 R09: 00007fd0bc000030
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fd034001340 R14: 000000003b9aca00 R15: 00007fd0e037e4f8
 </TASK>
Complete report #631210
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
? inet_csk_destroy_sock
vmlinux 0x55
16
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 0 PID: 1606 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput isofs snd_seq_dummy snd_hrtimer snd_seq_midi snd_seq_midi_event nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat bnep nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 btusb btrtl btbcm btintel btmtk bluetooth snd_ens1371 snd_ac97_codec ip_set snd_rawmidi intel_rapl_msr vmw_balloon gameport ac97_bus snd_seq snd_seq_device intel_rapl_common uvcvideo snd_pcm videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common videodev nf_tables rapl nfnetlink mc rfkill qrtr joydev snd_timer snd pcspkr soundcore i2c_piix4 vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock vmw_vmci sunrpc binfmt_misc zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel nvme sha512_ssse3 vmwgfx nvme_core serio_raw nvme_common drm_ttm_helper vmxnet3 ttm
 ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 1606 Comm: Xwayland Tainted: G        W          6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 9e c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffff98d144b7fd08 EFLAGS: 00010286
RAX: 0000000000000026 RBX: ffff98d144b7fd28 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff9e749b33 RDI: 00000000ffffffff
RBP: ffff8c13a0664008 R08: 0000000000000000 R09: ffff98d144b7fba8
R10: 0000000000000003 R11: ffff8c147fec14a8 R12: ffff8c139a9d7660
R13: ffff8c13498b0000 R14: ffff8c13963c28d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8c1475e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc1fc018028 CR3: 0000000019010001 CR4: 00000000003706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x58/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f85a6af9d81
Code: Unable to access opcode bytes at 0x7f85a6af9d57.
RSP: 002b:00007fffa9e60f88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f85a6bf2a00 RCX: 00007f85a6af9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007fffa9e60a10 R11: 0000000000000246 R12: 00007f85a6bf2a00
R13: 0000000000000000 R14: 00007f85a6bf82e8 R15: 00007f85a6bf8300
 </TASK>
Complete report #635041
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
? inet_csk_destroy_sock
vmlinux 0x55
15
? inet_csk_destroy_sock
vmlinux 0x55
16
inet_csk_destroy_sock
vmlinux 0x55
17
? inet_csk_destroy_sock
vmlinux 0x55
18
? inet_csk_destroy_sock
vmlinux 0x55
19
inet_csk_destroy_sock
vmlinux 0x55
20
inet_csk_destroy_sock
vmlinux 0x55
21
inet_csk_destroy_sock
vmlinux 0x55
22
? inet_csk_destroy_sock
vmlinux 0x55
23
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 0 PID: 3127 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink snd_seq_midi snd_seq_midi_event qrtr bnep intel_rapl_msr intel_rapl_common vmw_balloon rapl snd_ens1371 vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock snd_ac97_codec snd_rawmidi gameport ac97_bus snd_seq snd_seq_device joydev sunrpc snd_pcm btusb pcspkr btrtl btbcm btintel btmtk bluetooth binfmt_misc rfkill snd_timer snd i2c_piix4 soundcore vmw_vmci zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel nvme vmwgfx sha512_ssse3 nvme_core serio_raw vmxnet3 nvme_common drm_ttm_helper ttm ata_generic pata_acpi scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse
CPU: 0 PID: 3127 Comm: firefox Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 9f c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb6f8d1b7fbd0 EFLAGS: 00010292
RAX: 0000000000000026 RBX: ffffb6f8d1b7fbf0 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff9f749b33 RDI: 00000000ffffffff
RBP: ffff9008b4f0c008 R08: 0000000000000000 R09: ffffb6f8d1b7fa70
R10: 0000000000000003 R11: ffff900abfec34a8 R12: ffff900a397efa80
R13: ffff900989cb0000 R14: ffff900a3d2648d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff900ab5e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f94d84f7b00 CR3: 000000011ca12003 CR4: 00000000003706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 ? find_alive_thread.isra.0+0x40/0x40
 ? call_rcu+0x106/0x630
 arch_do_signal_or_restart+0x44/0x770
 ? __schedule+0x367/0x1360
 ? _raw_spin_unlock_irqrestore+0x23/0x40
 exit_to_user_mode_prepare+0x117/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fe6a76afe5c
Code: Unable to access opcode bytes at 0x7fe6a76afe32.
RSP: 002b:00007ffdeee8c380 EFLAGS: 00000246 ORIG_RAX: 00000000000000ea
RAX: 0000000000000000 RBX: 0000000000000c37 RCX: 00007fe6a76afe5c
RDX: 000000000000000f RSI: 0000000000000c37 RDI: 0000000000000c37
RBP: 00007ffdeee8c3d0 R08: 0000000000000000 R09: 00007ffdeee8ca70
R10: 0000000000000008 R11: 0000000000000246 R12: 000000000000000f
R13: 00007fe6842bb340 R14: 0000000000000001 R15: 00007fe668b10760
 </TASK>
Complete report #631429
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
? inet_csk_destroy_sock
vmlinux 0x55
15
inet_csk_destroy_sock
vmlinux 0x55
16
inet_csk_destroy_sock
vmlinux 0x55
17
inet_csk_destroy_sock
vmlinux 0x55
18
inet_csk_destroy_sock
vmlinux 0x55
19
? inet_csk_destroy_sock
vmlinux 0x55
20
? inet_csk_destroy_sock
vmlinux 0x55
21
? inet_csk_destroy_sock
vmlinux 0x55
22
? inet_csk_destroy_sock
vmlinux 0x55
23
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 0 PID: 3922 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls isofs snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 snd_seq_midi snd_seq_midi_event ip_set rfkill nf_tables nfnetlink snd_ens1371 intel_rapl_msr qrtr intel_rapl_common vmw_balloon snd_ac97_codec rapl snd_rawmidi gameport ac97_bus snd_seq snd_seq_device snd_pcm joydev pcspkr snd_timer snd vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock soundcore vmw_vmci i2c_piix4 sunrpc binfmt_misc zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 nvme nvme_core serio_raw vmxnet3 nvme_common vmwgfx drm_ttm_helper ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 3922 Comm: AudioIP~ack RPC Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 86 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffa9ae074fbb90 EFLAGS: 00010292
RAX: 0000000000000026 RBX: ffffa9ae074fbbb0 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff86749b33 RDI: 00000000ffffffff
RBP: ffff888221708008 R08: 0000000000000000 R09: ffffa9ae074fba30
R10: 0000000000000003 R11: ffff888233ec34a8 R12: ffff8881359bb4e0
R13: ffff88810d880000 R14: ffff88820e3cf8d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff88822a000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007faa68eff990 CR3: 0000000165e52003 CR4: 00000000003706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 ? preempt_count_add+0x6a/0xa0
 arch_do_signal_or_restart+0x44/0x770
 exit_to_user_mode_prepare+0x117/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 ? syscall_trace_enter.constprop.0+0x98/0x1a0
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? __irq_exit_rcu+0x3d/0x140
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7faa6932f196
Code: Unable to access opcode bytes at 0x7faa6932f16c.
RSP: 002b:00007faa328fe6f0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e8
RAX: fffffffffffffffc RBX: 000000003b9aca00 RCX: 00007faa6932f196
RDX: 0000000000000400 RSI: 00007faa32919000 RDI: 000000000000003d
RBP: 00007faa32919000 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000293 R12: 000000002743786c
R13: 00007faa328fe950 R14: 000000003b9aca00 R15: 00000000000007ff
 </TASK>
Complete report #636063
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
? inet_csk_destroy_sock
vmlinux 0x55
13
? inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
inet_csk_destroy_sock
vmlinux 0x55
18
inet_csk_destroy_sock
vmlinux 0x55
19
inet_csk_destroy_sock
vmlinux 0x55
20
inet_csk_destroy_sock
vmlinux 0x55
21
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 0 PID: 28434 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common snd_usb_audio videodev snd_usbmidi_lib snd_hwdep mc tun tls cfg80211 uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables rfkill nfnetlink qrtr vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock snd_seq_midi snd_seq_midi_event sunrpc snd_ens1371 snd_ac97_codec snd_rawmidi gameport ac97_bus binfmt_misc snd_seq snd_seq_device snd_pcm snd_timer snd intel_rapl_msr soundcore intel_rapl_common vmw_balloon pcspkr joydev vmw_vmci i2c_piix4 zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme ghash_clmulni_intel sha512_ssse3 vmwgfx nvme_core drm_ttm_helper serio_raw ttm nvme_common vmxnet3 ata_generic
 pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 28434 Comm: RunProcess Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 8d c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffac65d799bc08 EFLAGS: 00010286
RAX: 0000000000000026 RBX: ffffac65d799bc28 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff8d749b33 RDI: 00000000ffffffff
RBP: ffff9672d9f44008 R08: 0000000000000000 R09: ffffac65d799baa8
R10: 0000000000000003 R11: ffff9674ffec34a8 R12: ffff9674b49e2d80
R13: ffff9673ce960000 R14: ffff96745492a0d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9674f5e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f9b93aff990 CR3: 000000017b114000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x338/0xb00
 ? preempt_count_add+0x6a/0xa0
 ? _raw_spin_lock_irqsave+0x23/0x50
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 ? kernel_wait4+0xb1/0x130
 arch_do_signal_or_restart+0x44/0x770
 exit_to_user_mode_prepare+0x117/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f9b93ef9577
Code: Unable to access opcode bytes at 0x7f9b93ef954d.
RSP: 002b:00007f9b629fedf0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
RAX: fffffffffffffe00 RBX: 00007f9b189df280 RCX: 00007f9b93ef9577
RDX: 0000000000000000 RSI: 00007f9b629fee2c RDI: 0000000000006f11
RBP: 00007f9b18bf3160 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 00007f9b629fee2c
R13: 0000000000006f12 R14: 00007ffd4d6bd290 R15: 00007f9b621ff000
 </TASK>
Complete report #635057
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
? inet_csk_destroy_sock
vmlinux 0x55
16
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 2 PID: 1751 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: ib_core xt_conntrack xt_MASQUERADE nf_conntrack_netlink xt_addrtype br_netfilter bridge stp llc overlay tls uinput isofs snd_seq_dummy snd_hrtimer snd_seq snd_seq_device snd_timer snd soundcore rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver nfs lockd grace fscache netfs nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_tables ebtable_nat ebtable_broute ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security ip_set rfkill nfnetlink ebtable_filter ebtables ip6table_filter iptable_filter qrtr vboxsf(OE) vboxvideo(OE) sunrpc binfmt_misc iTCO_wdt intel_pmc_bxt iTCO_vendor_support intel_rapl_msr intel_rapl_common lpc_ich i2c_piix4 rapl joydev pcspkr zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni
 polyval_generic vmwgfx ghash_clmulni_intel sha512_ssse3 serio_raw drm_ttm_helper ttm vboxguest(OE) e1000 video wmi ata_generic pata_acpi scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse
CPU: 2 PID: 1751 Comm: Xwayland Tainted: G        W  OE      6.1.13-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 b0 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffaf7a02d27d30 EFLAGS: 00010292
RAX: 0000000000000026 RBX: ffffaf7a02d27d50 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffb0749b33 RDI: 00000000ffffffff
RBP: ffff90110a778008 R08: 0000000000000000 R09: ffffaf7a02d27bd0
R10: 0000000000000003 R11: ffffffffb1147448 R12: ffff901113dae6c0
R13: ffff9010ca2f0000 R14: ffff901103bc22d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9011dbb00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f9498f20dc4 CR3: 0000000161010005 CR4: 00000000000706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f600c2f9d81
Code: Unable to access opcode bytes at 0x7f600c2f9d57.
RSP: 002b:00007ffe8503f2a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f600c3f2a00 RCX: 00007f600c2f9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffe8503ed30 R11: 0000000000000246 R12: 00007f600c3f2a00
R13: 0000000000000000 R14: 00007f600c3f82e8 R15: 00007f600c3f8300
 </TASK>
Complete report #633831
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
? inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 4 PID: 3527 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput xt_nat veth snd_seq_dummy snd_hrtimer snd_seq snd_seq_device snd_timer snd soundcore nf_conntrack_netlink xt_addrtype br_netfilter xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nf_nat_tftp nf_conntrack_tftp bridge stp llc nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security ip_set nf_tables overlay nfnetlink ip6table_filter iptable_filter qrtr vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock bnep sunrpc intel_rapl_msr btusb intel_rapl_common btrtl btbcm rapl vmw_balloon btintel btmtk bluetooth binfmt_misc rfkill joydev pcspkr vmw_vmci i2c_piix4 squashfs loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni
 polyval_generic ghash_clmulni_intel sha512_ssse3 mptspi vmwgfx scsi_transport_spi serio_raw mptscsih e1000 mptbase drm_ttm_helper ttm ata_generic pata_acpi scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse
CPU: 4 PID: 3527 Comm: Xwayland Tainted: G        W          6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 02/27/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 9d c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0000:ffffa4b291e83cd0 EFLAGS: 00010292
RAX: 0000000000000026 RBX: ffffa4b291e83cf0 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff9d749b33 RDI: 00000000ffffffff
RBP: ffff91baadda0008 R08: 0000000000000000 R09: ffffa4b291e83b70
R10: 0000000000000003 R11: ffff91bdbfec15a8 R12: ffff91bace3b3240
R13: ffff91b98fa30000 R14: ffff91bab355e8d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff91bda9f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa324c0c000 CR3: 000000023365c005 CR4: 00000000003706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x58/0x80
 ? do_user_addr_fault+0x1ef/0x690
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fa3256f9d81
Code: Unable to access opcode bytes at 0x7fa3256f9d57.
RSP: 002b:00007ffd9cd6e3d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007fa3257f2a00 RCX: 00007fa3256f9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffd9cd6de60 R11: 0000000000000246 R12: 00007fa3257f2a00
R13: 0000000000000000 R14: 00007fa3257f82e8 R15: 00007fa3257f8300
 </TASK>
Complete report #630749
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
? inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 0 PID: 2926 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common snd_usb_audio videodev snd_usbmidi_lib snd_hwdep mc tun tls cfg80211 uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr snd_seq_midi snd_seq_midi_event bnep vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock sunrpc binfmt_misc snd_ens1371 intel_rapl_msr btusb snd_ac97_codec btrtl vmw_balloon btbcm snd_rawmidi btintel gameport btmtk intel_rapl_common ac97_bus snd_seq snd_seq_device joydev pcspkr bluetooth snd_pcm rfkill snd_timer snd soundcore vmw_vmci i2c_piix4 zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 nvme serio_raw nvme_core nvme_common
 vmxnet3 vmwgfx drm_ttm_helper ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 2926 Comm: firefox Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 aa c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb1634274bd40 EFLAGS: 00010292
RAX: 0000000000000026 RBX: ffffb1634274bd60 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffaa749b33 RDI: 00000000ffffffff
RBP: ffff956422fcc008 R08: 0000000000000000 R09: ffffb1634274bbe0
R10: 0000000000000003 R11: ffff9564ffec14a8 R12: ffff9563ce25f300
R13: ffff9563ce1a0000 R14: ffff95647192fad0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9564f5e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f5013aff990 CR3: 000000013914e000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? do_syscall_64+0x67/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f5048cf9d81
Code: Unable to access opcode bytes at 0x7f5048cf9d57.
RSP: 002b:00007fff537bfb38 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f5048cf9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffffffffff40 R09: 0000000000000001
R10: 00007f4fe7c00560 R11: 0000000000000202 R12: 0000000000000001
R13: 0000000000000000 R14: 00007fff537bfbc0 R15: 00007f503b46a790
 </TASK>
Complete report #634222
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
inet_csk_destroy_sock
vmlinux 0x55
16
inet_csk_destroy_sock
vmlinux 0x55
17
inet_csk_destroy_sock
vmlinux 0x55
18
? inet_csk_destroy_sock
vmlinux 0x55
19
? inet_csk_destroy_sock
vmlinux 0x55
20
? inet_csk_destroy_sock
vmlinux 0x55
21
? inet_csk_destroy_sock
vmlinux 0x55
22
? inet_csk_destroy_sock
vmlinux 0x55
23
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 3 PID: 5543 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput isofs snd_seq_dummy snd_hrtimer vboxvideo(OE) nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc binfmt_misc snd_intel8x0 snd_ac97_codec intel_rapl_msr ac97_bus intel_rapl_common snd_seq snd_seq_device rapl snd_pcm snd_timer pcspkr snd joydev soundcore i2c_piix4 zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_generic ghash_clmulni_intel sha512_ssse3 vmwgfx serio_raw drm_ttm_helper e1000 vboxguest(OE) video ttm wmi ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 3 PID: 5543 Comm: FS Broker 5533 Tainted: G           OE      6.1.13-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 aa c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffaf908425fba0 EFLAGS: 00010292
RAX: 0000000000000026 RBX: ffffaf908425fbc0 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffaa749b33 RDI: 00000000ffffffff
RBP: ffff9e7085184008 R08: 0000000000000000 R09: ffffaf908425fa40
R10: 0000000000000003 R11: ffffffffab147448 R12: ffff9e708677dba0
R13: ffff9e70882a0000 R14: ffff9e70a6bfa8d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9e70fdd80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8d82c70990 CR3: 0000000026818006 CR4: 00000000000306e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 arch_do_signal_or_restart+0x44/0x770
 exit_to_user_mode_prepare+0x117/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? do_syscall_64+0x67/0x80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7ff4bd930dd7
Code: Unable to access opcode bytes at 0x7ff4bd930dad.
RSP: 002b:00007ff49b5f8a70 EFLAGS: 00000293 ORIG_RAX: 000000000000002f
RAX: fffffffffffffe00 RBX: 000000000000005f RCX: 00007ff4bd930dd7
RDX: 0000000040000000 RSI: 00007ff49b5f8a90 RDI: 0000000000000062
RBP: 0000000000000062 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 00007ff49b5f8a90
R13: 00007ff49b5f8b74 R14: 00007ff497d7b6a0 R15: 0000000000000000
 </TASK>
Complete report #632774
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
? inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
? inet_csk_destroy_sock
vmlinux 0x55
16
inet_csk_destroy_sock
vmlinux 0x55
17
inet_csk_destroy_sock
vmlinux 0x55
18
inet_csk_destroy_sock
vmlinux 0x55
19
inet_csk_destroy_sock
vmlinux 0x55
20
? inet_csk_destroy_sock
vmlinux 0x55
21
? inet_csk_destroy_sock
vmlinux 0x55
22
? inet_csk_destroy_sock
vmlinux 0x55
23
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 0 PID: 2912 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput isofs snd_seq_dummy snd_hrtimer snd_seq_midi snd_seq_midi_event bnep btusb nft_objref btrtl btbcm btintel btmtk snd_ens1371 nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib bluetooth intel_rapl_msr nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject snd_ac97_codec intel_rapl_common nft_ct snd_rawmidi gameport ac97_bus rapl snd_seq nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 vmw_balloon snd_seq_device snd_pcm ip_set joydev snd_timer nf_tables pcspkr nfnetlink rfkill snd soundcore i2c_piix4 qrtr vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock vmw_vmci sunrpc binfmt_misc zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic vmwgfx ghash_clmulni_intel nvme sha512_ssse3 drm_ttm_helper serio_raw nvme_core nvme_common vmxnet3 ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 2912 Comm: Socket Thread Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 91 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffaf0850353b20 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffffaf0850353b40 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff91749b33 RDI: 00000000ffffffff
RBP: ffff9dfa459c4008 R08: 0000000000000000 R09: ffffaf08503539c0
R10: 0000000000000003 R11: ffff9dfabffc3da8 R12: ffff9dfa6669a840
R13: ffff9dfa4c980000 R14: ffff9dfaa3b72ad0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9dfabbe00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbee9cff990 CR3: 00000000619f4006 CR4: 00000000003706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 ? __pollwait+0xe0/0xe0
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 ? __pollwait+0xe0/0xe0
 arch_do_signal_or_restart+0x44/0x770
 exit_to_user_mode_prepare+0x117/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 ? handle_mm_fault+0xdb/0x2d0
 ? do_user_addr_fault+0x1ef/0x690
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fbf0592221f
Code: Unable to access opcode bytes at 0x7fbf059221f5.
RSP: 002b:00007fbee5ffe5c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000007
RAX: fffffffffffffdfc RBX: 00000000ffffffff RCX: 00007fbf0592221f
RDX: 00000000ffffffff RSI: 0000000000000024 RDI: 00007fbee5ffe620
RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000024
R13: 00000000ffffffff R14: 0000000000000000 R15: 0000000000000000
 </TASK>
Complete report #630811
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
? inet_csk_destroy_sock
vmlinux 0x55
15
inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
? inet_csk_destroy_sock
vmlinux 0x55
18
inet_csk_destroy_sock
vmlinux 0x55
19
inet_csk_destroy_sock
vmlinux 0x55
20
inet_csk_destroy_sock
vmlinux 0x55
21
? inet_csk_destroy_sock
vmlinux 0x55
22
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 2 PID: 3267 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: vfat fat uas usb_storage uinput isofs snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr snd_seq_midi snd_seq_midi_event bnep vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock sunrpc snd_ens1371 binfmt_misc snd_ac97_codec btusb snd_rawmidi intel_rapl_msr btrtl intel_rapl_common btbcm btintel vmw_balloon rapl btmtk gameport ac97_bus bluetooth snd_seq snd_seq_device snd_pcm joydev rfkill pcspkr snd_timer snd soundcore vmw_vmci i2c_piix4 zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 nvme vmwgfx nvme_core serio_raw vmxnet3 nvme_common drm_ttm_helper ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 2 PID: 3267 Comm: CanvasRenderer Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 83 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffae7787f2bbf0 EFLAGS: 00010292
RAX: 0000000000000026 RBX: ffffae7787f2bc10 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff83749b33 RDI: 00000000ffffffff
RBP: ffff8ef49fd44008 R08: 0000000000000000 R09: ffffae7787f2ba90
R10: 0000000000000003 R11: ffff8ef53fec18a8 R12: ffff8ef428bbc600
R13: ffff8ef50d320000 R14: ffff8ef4a831c8d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8ef539e80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000562273236113 CR3: 00000000014a8005 CR4: 00000000003706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 ? kick_process+0x46/0x80
 arch_do_signal_or_restart+0x44/0x770
 ? _raw_spin_unlock_irqrestore+0x23/0x40
 ? do_send_sig_info+0x6a/0xb0
 exit_to_user_mode_prepare+0x117/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fde524afe5c
Code: Unable to access opcode bytes at 0x7fde524afe32.
RSP: 002b:00007fde2b7bc4c0 EFLAGS: 00000246 ORIG_RAX: 00000000000000ea
RAX: 0000000000000000 RBX: 0000000000000cc3 RCX: 00007fde524afe5c
RDX: 000000000000000b RSI: 0000000000000cc3 RDI: 0000000000000c84
RBP: 00007fde2b7bc510 R08: 0000000000000000 R09: 00007fde30103da0
R10: 0000000000000008 R11: 0000000000000246 R12: 000000000000000b
R13: 00007fde2b7bcc38 R14: 0000000000000000 R15: 00007fde4d615160
 </TASK>
Complete report #630822
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
? inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
? inet_csk_destroy_sock
vmlinux 0x55
18
? inet_csk_destroy_sock
vmlinux 0x55
19
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 2 PID: 2194 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput isofs snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock intel_rapl_msr intel_rapl_common snd_seq_midi rapl vmw_balloon snd_seq_midi_event joydev pcspkr snd_ens1371 snd_ac97_codec sunrpc snd_rawmidi gameport ac97_bus snd_seq snd_seq_device binfmt_misc snd_pcm snd_timer snd soundcore squashfs i2c_piix4 loop vmw_vmci zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme ghash_clmulni_intel nvme_core sha512_ssse3 nvme_common serio_raw vmwgfx vmxnet3 drm_ttm_helper ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 2 PID: 2194 Comm: firefox Tainted: G             L     6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 84 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffa8fa547f3d00 EFLAGS: 00010292
RAX: 0000000000000026 RBX: ffffa8fa547f3d20 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff84749b33 RDI: 00000000ffffffff
RBP: ffff992ea85dc008 R08: 0000000000000000 R09: ffffa8fa547f3ba0
R10: 0000000000000003 R11: ffff992ff0ec12a8 R12: ffff992ef5ae8f00
R13: ffff992e4d2e0000 R14: ffff992eca863ad0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff992fe5080000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005606c3151308 CR3: 0000000103c2c004 CR4: 00000000003706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x58/0x80
 ? do_syscall_64+0x67/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7febcfaf9d81
Code: Unable to access opcode bytes at 0x7febcfaf9d57.
RSP: 002b:00007ffe5ec986a8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007febb3d0db80 RCX: 00007febcfaf9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 00007ffe5ec98720 R08: ffffffffffffff40 R09: 00007febce472530
R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe5ec98708
R13: 0000000000000000 R14: 000000007fffffff R15: 00007febb3d0db80
 </TASK>
Complete report #631958
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
? inet_csk_destroy_sock
vmlinux 0x55
13
? inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
inet_csk_destroy_sock
vmlinux 0x55
18
inet_csk_destroy_sock
vmlinux 0x55
19
inet_csk_destroy_sock
vmlinux 0x55
20
inet_csk_destroy_sock
vmlinux 0x55
21
? inet_csk_destroy_sock
vmlinux 0x55
22
? inet_csk_destroy_sock
vmlinux 0x55
23
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 3 PID: 16695 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr snd_seq_midi snd_seq_midi_event bnep vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock intel_rapl_msr snd_ens1371 btusb snd_ac97_codec btrtl btbcm btintel intel_rapl_common btmtk snd_rawmidi gameport vmw_balloon ac97_bus bluetooth sunrpc snd_seq rapl snd_seq_device snd_pcm joydev pcspkr binfmt_misc rfkill vmw_vmci snd_timer snd soundcore i2c_piix4 zram crct10dif_pclmul crc32_pclmul crc32c_intel nvme polyval_clmulni polyval_generic vmwgfx nvme_core ghash_clmulni_intel sha512_ssse3 serio_raw nvme_common vmxnet3 drm_ttm_helper ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 3 PID: 16695 Comm: StreamTrans #16 Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 88 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffbedad246fbf0 EFLAGS: 00010292
RAX: 0000000000000026 RBX: ffffbedad246fc10 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff88749b33 RDI: 00000000ffffffff
RBP: ffff9d3d4d6c8008 R08: 0000000000000000 R09: ffffbedad246fa90
R10: 0000000000000003 R11: ffff9d3dfffc3c68 R12: ffff9d3d45ee8a80
R13: ffff9d3d4bb30000 R14: ffff9d3d4e1be0d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9d3dfaec0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff71b979000 CR3: 0000000004a2c001 CR4: 00000000003706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 ? _raw_spin_unlock_irqrestore+0x23/0x40
 ? hrtimer_try_to_cancel+0x78/0x110
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 ? __hrtimer_init+0xe0/0xe0
 arch_do_signal_or_restart+0x44/0x770
 exit_to_user_mode_prepare+0x117/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fcfff8aad16
Code: Unable to access opcode bytes at 0x7fcfff8aacec.
RSP: 002b:00007fcfc9afe820 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffdfc RBX: 0000000000000000 RCX: 00007fcfff8aad16
RDX: 0000000000000000 RSI: 0000000000000089 RDI: 00007fcfe3bb5c54
RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000ffffffff
R10: 00007fcfc9afe940 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fcfe3bb5bf0 R14: 00007fcfe3bb5c54 R15: 0000000000000000
 </TASK>
Complete report #632188
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
? inet_csk_destroy_sock
vmlinux 0x55
16
? inet_csk_destroy_sock
vmlinux 0x55
17
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 14 PID: 2774 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer xt_nat veth xt_conntrack xt_MASQUERADE nf_conntrack_netlink xt_addrtype nft_compat br_netfilter bridge stp llc nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill overlay nf_tables nfnetlink qrtr snd_seq_midi snd_seq_midi_event vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock sunrpc snd_ens1371 snd_ac97_codec snd_rawmidi gameport ac97_bus intel_rapl_msr intel_rapl_common snd_seq snd_seq_device vmw_balloon rapl snd_pcm snd_timer joydev pcspkr snd i2c_piix4 soundcore vmw_vmci zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel nvme sha512_ssse3 nvme_core vmwgfx serio_raw vmxnet3 drm_ttm_helper nvme_common ttm ata_generic pata_acpi scsi_dh_rdac
 scsi_dh_emc scsi_dh_alua dm_multipath fuse
CPU: 14 PID: 2774 Comm: Xwayland Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 82 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffaaee45243d00 EFLAGS: 00010292
RAX: 0000000000000026 RBX: ffffaaee45243d20 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff82749b33 RDI: 00000000ffffffff
RBP: ffff9d380bc10008 R08: 0000000000000000 R09: ffffaaee45243ba0
R10: 0000000000000003 R11: ffff9d3a7fec1b28 R12: ffff9d374eda19c0
R13: ffff9d3750bb0000 R14: ffff9d381c3198d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9d3a6e180000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2fe43c5000 CR3: 0000000144010001 CR4: 0000000000370ee0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x58/0x80
 ? do_user_addr_fault+0x1ef/0x690
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f2fe4ef9d81
Code: Unable to access opcode bytes at 0x7f2fe4ef9d57.
RSP: 002b:00007ffc0adaedb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f2fe4ff2a00 RCX: 00007f2fe4ef9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffc0adae840 R11: 0000000000000246 R12: 00007f2fe4ff2a00
R13: 0000000000000000 R14: 00007f2fe4ff82e8 R15: 00007f2fe4ff8300
 </TASK>
Complete report #631805
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
? inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
? inet_csk_destroy_sock
vmlinux 0x55
16
inet_csk_destroy_sock
vmlinux 0x55
17
inet_csk_destroy_sock
vmlinux 0x55
18
inet_csk_destroy_sock
vmlinux 0x55
19
inet_csk_destroy_sock
vmlinux 0x55
20
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 1 PID: 10373 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr snd_seq_midi snd_seq_midi_event bnep vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock snd_ens1371 snd_ac97_codec snd_rawmidi intel_rapl_msr gameport btusb intel_rapl_common ac97_bus btrtl vmw_balloon btbcm rapl snd_seq btintel snd_seq_device btmtk bluetooth snd_pcm snd_timer joydev pcspkr rfkill snd vmw_vmci soundcore i2c_piix4 sunrpc binfmt_misc zram crct10dif_pclmul nvme crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 nvme_core serio_raw nvme_common vmxnet3 vmwgfx drm_ttm_helper ttm ata_generic pata_acpi scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse
CPU: 1 PID: 10373 Comm: BgIOThr~ool #19 Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b c3 cc cc cc cc 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 85 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b c3 cc cc cc cc 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffff9a21167c3c10 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffff9a21167c3c30 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff85749b33 RDI: 00000000ffffffff
RBP: ffff88b00acbc008 R08: 0000000000000000 R09: ffff9a21167c3ab0
R10: 0000000000000003 R11: ffff88b03fec18a8 R12: ffff88b005f0a1e0
R13: ffff88b00d3e0000 R14: ffff88afb4c9a2d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff88b039e40000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc125b23fd0 CR3: 000000011e152002 CR4: 00000000003706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 ? _raw_spin_unlock_irqrestore+0x23/0x40
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 ? __hrtimer_init+0xe0/0xe0
 arch_do_signal_or_restart+0x44/0x770
 exit_to_user_mode_prepare+0x117/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f185eeaad16
Code: Unable to access opcode bytes at 0x7f185eeaacec.
RSP: 002b:00007f1826dfc820 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffdfc RBX: 0000000000000000 RCX: 00007f185eeaad16
RDX: 0000000000000000 RSI: 0000000000000089 RDI: 00007f18431b5924
RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000ffffffff
R10: 00007f1826dfc940 R11: 0000000000000246 R12: 0000000000000001
R13: 00007f18431b58c0 R14: 00007f18431b5924 R15: 0000000000000000
 </TASK>
Complete report #631797
Frame # Function Binary Source or offset Line
1
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
2
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
3
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
4
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
5
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
6
vmw_bo_unref_ioctl
vmwgfx /usr/src/debug/kernel-6.1.13/linux-6.1.13-200.fc37.x86_64/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c 682
7
inet_csk_destroy_sock
vmlinux 0x55
8
inet_csk_destroy_sock
vmlinux 0x55
9
inet_csk_destroy_sock
vmlinux 0x55
10
inet_csk_destroy_sock
vmlinux 0x55
11
inet_csk_destroy_sock
vmlinux 0x55
12
inet_csk_destroy_sock
vmlinux 0x55
13
inet_csk_destroy_sock
vmlinux 0x55
14
inet_csk_destroy_sock
vmlinux 0x55
15
? inet_csk_destroy_sock
vmlinux 0x55
16
inet_csk_destroy_sock
vmlinux 0x55
WARNING: CPU: 1 PID: 2186 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: uinput isofs snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr snd_seq_midi snd_seq_midi_event vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock sunrpc binfmt_misc snd_ens1371 snd_ac97_codec snd_rawmidi gameport ac97_bus snd_seq intel_rapl_msr vmw_balloon snd_seq_device snd_pcm intel_rapl_common snd_timer snd joydev pcspkr soundcore vmw_vmci i2c_piix4 zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme nvme_core ghash_clmulni_intel vmwgfx sha512_ssse3 serio_raw vmxnet3 drm_ttm_helper nvme_common ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 1 PID: 2186 Comm: Xwayland Not tainted 6.1.13-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 af 33 67 00 0f 0b e9 82 aa 90 00 80 3d ef d4 bd 01 00 75 85 48 c7 c7 30 31 76 90 c6 05 df d4 bd 01 01 e8 8c 33 67 00 <0f> 0b e9 5f aa 90 00 80 3d ca d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffaa6f061a7d20 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffffaa6f061a7d40 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff90749b33 RDI: 00000000ffffffff
RBP: ffff9c1032c8c008 R08: 0000000000000000 R09: ffffaa6f061a7bc0
R10: 0000000000000003 R11: ffff9c113fec38a8 R12: ffff9c1103471de0
R13: ffff9c110cec0000 R14: ffff9c102f81b8d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9c1139e40000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055c265ac7330 CR3: 000000011f010000 CR4: 0000000000350ee0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f84336f9d81
Code: Unable to access opcode bytes at 0x7f84336f9d57.
RSP: 002b:00007ffe264b8f08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f84337f2a00 RCX: 00007f84336f9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffe264b8990 R11: 0000000000000246 R12: 00007f84337f2a00
R13: 0000000000000000 R14: 00007f84337f82e8 R15: 00007f84337f8300
 </TASK>