WARNING: CPU: 3 PID: 2032 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink qrtr sunrpc binfmt_misc snd_intel8x0 snd_ac97_codec ac97_bus snd_seq intel_rapl_msr snd_seq_device snd_pcm joydev intel_rapl_common snd_timer pcspkr snd soundcore i2c_piix4 vboxguest loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic vmwgfx ghash_clmulni_intel sha512_ssse3 e1000 serio_raw drm_ttm_helper video ttm wmi ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 3 PID: 2032 Comm: Xwayland Not tainted 6.1.18-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b c3 cc cc cc cc 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 a9 c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b c3 cc cc cc cc 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb23743677cb8 EFLAGS: 00010292
RAX: 0000000000000026 RBX: ffffb23743677cd8 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffffa974aa5b RDI: 00000000ffffffff
RBP: ffff91490e3d8008 R08: 0000000000000000 R09: ffffb23743677b40
R10: 0000000000000003 R11: ffffffffaa147448 R12: ffff91493d6e6000
R13: ffff914a09500000 R14: ffff91493d422ed0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff914a1bd80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000056471e211088 CR3: 0000000101d68000 CR4: 00000000000506e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x347/0xb20
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? handle_mm_fault+0xdb/0x2d0
 ? preempt_count_add+0x47/0xa0
 ? up_read+0x37/0x70
 ? do_user_addr_fault+0x1ef/0x690
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f13f06f9d81
Code: Unable to access opcode bytes at 0x7f13f06f9d57.
RSP: 002b:00007ffe4efda748 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f13f07f2a00 RCX: 00007f13f06f9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffe4efda1d0 R11: 0000000000000246 R12: 00007f13f07f2a00
R13: 0000000000000000 R14: 00007f13f07f82e8 R15: 00007f13f07f8300
 </TASK>

WARNING: CPU: 1 PID: 2615 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 snd_seq_midi snd_seq_midi_event intel_rapl_msr intel_rapl_common kvm_intel ip_set kvm nf_tables snd_ens1371 nfnetlink bnep snd_ac97_codec snd_rawmidi gameport ac97_bus snd_seq snd_seq_device snd_pcm qrtr vmw_balloon btusb irqbypass rapl btrtl btbcm btintel btmtk bluetooth joydev snd_timer pcspkr snd rfkill soundcore i2c_piix4 vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock vmw_vmci sunrpc binfmt_misc loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme ghash_clmulni_intel sha512_ssse3 nvme_core serio_raw vmwgfx nvme_common vmxnet3 drm_ttm_helper ttm ata_generic pata_acpi scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables
 dm_multipath fuse
CPU: 1 PID: 2615 Comm: firefox Not tainted 6.2.11-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 99 4a 93 ff 0f 0b c3 cc cc cc cc 80 3d 55 21 af 01 00 75 85 48 c7 c7 70 ad 8d a8 c6 05 45 21 af 01 01 e8 76 4a 93 ff <0f> 0b c3 cc cc cc cc 80 3d 30 21 af 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffa2b5d08dfca0 EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffffa2b5d08dfcc8 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffffa88c1386 RDI: 00000000ffffffff
RBP: ffff8ea449bec008 R08: 0000000000000000 R09: ffffa2b5d08dfb30
R10: 0000000000000003 R11: ffff8ea4bffc3da8 R12: ffff8ea49aed84e0
R13: ffff8ea44b960000 R14: ffff8ea45b64bad0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8ea4bbe40000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa0908a4990 CR3: 00000000171c2001 CR4: 00000000003706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x7e/0x90 [vmwgfx]
 ttm_prime_refcount_release+0x3a/0x60 [vmwgfx]
 ttm_release_base+0x82/0xd0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x33e/0xb20
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x58/0x80
 ? do_syscall_64+0x67/0x80
 ? ksys_read+0xd4/0xf0
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? __irq_exit_rcu+0x3d/0x140
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7fa0ad0f9d81
Code: Unable to access opcode bytes at 0x7fa0ad0f9d57.
RSP: 002b:00007fffc96ffe38 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fa0ad0f9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffffffffff40 R09: 0000000000000001
R10: 00007fa06d4005a8 R11: 0000000000000202 R12: 0000000000000001
R13: 0000000000000000 R14: 00007fffc96ffec0 R15: 00007fa09f6d8190
 </TASK>

WARNING: CPU: 3 PID: 4104 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: veth tls uinput isofs snd_seq_dummy snd_hrtimer xt_conntrack nft_chain_nat xt_MASQUERADE nf_nat nf_conntrack_netlink nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xt_addrtype nft_compat nf_tables nfnetlink br_netfilter bridge stp llc nfsv3 nfs_acl rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver nfs qrtr lockd grace fscache netfs snd_seq_midi snd_seq_midi_event vsock_loopback vmw_vsock_virtio_transport_common overlay vmw_vsock_vmci_transport vsock bnep sunrpc btusb btrtl btbcm uvcvideo btintel videobuf2_vmalloc videobuf2_memops snd_ens1371 snd_ac97_codec binfmt_misc intel_rapl_msr videobuf2_v4l2 btmtk videobuf2_common snd_rawmidi gameport intel_rapl_common ac97_bus snd_seq snd_seq_device vmw_balloon rapl snd_pcm bluetooth videodev snd_timer mc snd rfkill pcspkr joydev soundcore vmw_vmci i2c_piix4 loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic vmwgfx mptspi ghash_clmulni_intel scsi_transport_spi sha512_ssse3 e1000 mptscsih
 serio_raw mptbase drm_ttm_helper ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 3 PID: 4104 Comm: postman Not tainted 6.1.18-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/29/2019
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b c3 cc cc cc cc 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 87 c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b c3 cc cc cc cc 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffa7e005e5fc38 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffffa7e005e5fc58 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffff8774aa5b RDI: 00000000ffffffff
RBP: ffff8f8d17cfc008 R08: 0000000000000000 R09: ffffa7e005e5fac0
R10: 0000000000000003 R11: ffffffff88147448 R12: ffff8f8e0826e120
R13: ffff8f8e0a210000 R14: ffff8f8d046f94d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8f8f37d80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f29c5ffb990 CR3: 0000000119f7c005 CR4: 00000000003706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x347/0xb20
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 arch_do_signal_or_restart+0x44/0x770
 ? __schedule+0x367/0x1360
 ? check_preempt_wakeup+0x17b/0x2c0
 exit_to_user_mode_prepare+0x117/0x1f0
 irqentry_exit_to_user_mode+0x5/0x30
 asm_sysvec_call_function_single+0x16/0x20
RIP: 0033:0x7ff95b75eec4
Code: Unable to access opcode bytes at 0x7ff95b75ee9a.
RSP: 002b:00007fffe2b4cf98 EFLAGS: 00000202
RAX: 00007ff957f53c00 RBX: 000024a0002715c0 RCX: 0000000000000003
RDX: 000024a000b63ae0 RSI: 000000007fffffff RDI: 000024a0002715c0
RBP: 000024a000b63ae0 R08: 0000000000000000 R09: 00007fffe2b4cdf0
R10: 00007fffe2bb2080 R11: 0000000000000293 R12: 0000000000000001
R13: 0000000000000001 R14: 0000000000000003 R15: 00007ff95b7b90be
 </TASK>

WARNING: CPU: 1 PID: 2548 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: ufs hfsplus hfs minix vfat msdos fat jfs xfs tls uinput snd_seq_dummy snd_hrtimer vboxvideo(OE) nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc binfmt_misc squashfs snd_intel8x0 snd_ac97_codec ac97_bus snd_seq isofs snd_seq_device snd_pcm snd_timer snd intel_rapl_msr intel_rapl_common joydev pcspkr soundcore i2c_piix4 loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_generic vmwgfx video ghash_clmulni_intel BusLogic wmi sha512_ssse3 serio_raw e1000 drm_ttm_helper ttm vboxguest(OE) ip6_tables ip_tables fuse
CPU: 1 PID: 2548 Comm: Xwayland Tainted: G           OE      6.1.18-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b e9 62 a8 90 00 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 b4 c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b e9 3f a8 90 00 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb7cd464f3cf0 EFLAGS: 00010286
RAX: 0000000000000026 RBX: ffffb7cd464f3d10 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffffb474aa5b RDI: 00000000ffffffff
RBP: ffff9648f4ee4008 R08: 0000000000000000 R09: ffffb7cd464f3b78
R10: 0000000000000003 R11: ffffffffb5147448 R12: ffff9648f6447000
R13: ffff96488a170000 R14: ffff9648f4cac8d0 R15: dead000000000100
FS:  00007f1c22dc4a00(0000) GS:ffff964b8fd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000558dff2fdf68 CR3: 000000016a87a000 CR4: 00000000000106e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x347/0xb20
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? up_read+0x37/0x70
 ? do_user_addr_fault+0x1ef/0x690
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f1c236f9d81
Code: Unable to access opcode bytes at 0x7f1c236f9d57.
RSP: 002b:00007ffe7198b728 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f1c237f2a00 RCX: 00007f1c236f9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffe7198b1b0 R11: 0000000000000246 R12: 00007f1c237f2a00
R13: 0000000000000000 R14: 00007f1c237f82e8 R15: 00007f1c237f8300
 </TASK>

WARNING: CPU: 0 PID: 3066 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls isofs snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink snd_seq_midi snd_seq_midi_event qrtr vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock sunrpc snd_ens1371 snd_ac97_codec snd_rawmidi gameport ac97_bus intel_rapl_msr binfmt_misc snd_seq intel_rapl_common vmw_balloon vfat fat snd_seq_device rapl snd_pcm joydev snd_timer pcspkr snd soundcore vmw_vmci i2c_piix4 loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 serio_raw nvme vmwgfx vmxnet3 nvme_core drm_ttm_helper nvme_common ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 3066 Comm: Renderer Not tainted 6.1.18-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware20,1/440BX Desktop Reference Platform, BIOS VMW201.00V.20648489.B64.2210180829 10/18/2022
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b c3 cc cc cc cc 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 a8 c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b c3 cc cc cc cc 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb71952297ca8 EFLAGS: 00010292
RAX: 0000000000000026 RBX: ffff9d7658c7f800 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffffa874aa5b RDI: 00000000ffffffff
RBP: ffff9d75cd211000 R08: 0000000000000000 R09: ffffb71952297b30
R10: 0000000000000003 R11: ffffffffa9147448 R12: 00000000000000e4
R13: ffff9d75cd211058 R14: ffff9d75cd211040 R15: 00000000000000e4
FS:  00007fe44104a6c0(0000) GS:ffff9d76b7c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe434623014 CR3: 0000000121e7e004 CR4: 00000000003706f0
Call Trace:
 <TASK>
 drm_gem_handle_delete+0x8c/0xd0
 ? vmw_bo_create+0xa0/0xa0 [vmwgfx]
 vmw_bo_unref_ioctl+0xf/0x20 [vmwgfx]
 drm_ioctl_kernel+0xa6/0x150
 drm_ioctl+0x22f/0x410
 ? vmw_bo_create+0xa0/0xa0 [vmwgfx]
 ? drm_ioctl_kernel+0x150/0x150
 vmw_generic_ioctl+0x94/0xf0 [vmwgfx]
 __x64_sys_ioctl+0x8d/0xd0
 do_syscall_64+0x58/0x80
 ? do_syscall_64+0x67/0x80
 ? do_syscall_64+0x67/0x80
 ? do_syscall_64+0x67/0x80
 ? __x64_sys_ioctl+0xa8/0xd0
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fe470523d6f
Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00
RSP: 002b:00007fe441049780 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fe43a32d250 RCX: 00007fe470523d6f
RDX: 00007fe441049820 RSI: 0000000040086442 RDI: 000000000000002b
RBP: 00007fe441049820 R08: 0000000000000100 R09: 0000000000000000
R10: 00007ffcbfb0a080 R11: 0000000000000246 R12: 0000000040086442
R13: 000000000000002b R14: 00007fe44bfe6930 R15: 00007fe44aa16800
 </TASK>

WARNING: CPU: 0 PID: 2380 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer snd_seq_midi snd_seq_midi_event nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink bnep btusb btrtl btbcm btintel btmtk bluetooth snd_ens1371 snd_ac97_codec snd_rawmidi gameport ac97_bus snd_seq snd_seq_device snd_pcm vmw_balloon intel_rapl_msr snd_timer qrtr intel_rapl_common rapl vsock_loopback vmw_vsock_virtio_transport_common rfkill vmw_vsock_vmci_transport vsock snd pcspkr joydev soundcore vmw_vmci sunrpc i2c_piix4 binfmt_misc loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme vmwgfx nvme_core ghash_clmulni_intel sha512_ssse3 serio_raw nvme_common vmxnet3 drm_ttm_helper ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 2380 Comm: BgIOThr~Pool #1 Not tainted 6.1.18-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b c3 cc cc cc cc 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 a2 c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b c3 cc cc cc cc 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffa3c70585fc38 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffffa3c70585fc58 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffffa274aa5b RDI: 00000000ffffffff
RBP: ffff8f2403c2c008 R08: 0000000000000000 R09: ffffa3c70585fac0
R10: 0000000000000003 R11: ffffffffa3147448 R12: ffff8f2402b56ba0
R13: ffff8f2509640000 R14: ffff8f2506c502d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8f2537e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd03d50b000 CR3: 0000000102802006 CR4: 0000000000370ef0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x347/0xb20
 ? _raw_spin_lock+0x13/0x40
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 ? find_alive_thread.isra.0+0x40/0x40
 ? call_rcu+0x106/0x630
 arch_do_signal_or_restart+0x44/0x770
 ? __schedule+0x367/0x1360
 ? check_preempt_wakeup+0x17b/0x2c0
 exit_to_user_mode_prepare+0x117/0x1f0
 irqentry_exit_to_user_mode+0x5/0x30
 asm_sysvec_call_function_single+0x16/0x20
RIP: 0033:0x5644b0128e98
Code: Unable to access opcode bytes at 0x5644b0128e6e.
RSP: 002b:00007f3d84dbd540 EFLAGS: 00000202
RAX: 00007f3d5f5043f1 RBX: 0000000000000010 RCX: 0000000000000000
RDX: 0000000000000004 RSI: 00007f3d5f383000 RDI: 0000000000000000
RBP: 000000000009e572 R08: 00007f3d5f503000 R09: 00007f3d5f3a3000
R10: 000000000009f963 R11: 00007f3d5f504409 R12: 000000000009e572
R13: 0000000000000000 R14: 00007f3d5f505d14 R15: 00007f3d5f3a3000
 </TASK>

WARNING: CPU: 3 PID: 2683 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nf_nat_tftp nf_conntrack_tftp bridge stp llc nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security rfkill ip_set nf_tables nfnetlink ip6table_filter iptable_filter qrtr vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock sunrpc binfmt_misc snd_hda_codec_generic intel_rapl_msr ledtrig_audio intel_rapl_common snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi rapl snd_hda_codec snd_hda_core vmw_balloon snd_hwdep snd_seq pcspkr joydev snd_seq_device snd_pcm pktcdvd snd_timer i2c_piix4 snd soundcore vmw_vmci loop zram crct10dif_pclmul crc32_pclmul
 crc32c_intel polyval_clmulni polyval_generic vmwgfx ghash_clmulni_intel sha512_ssse3 serio_raw vmxnet3 vmw_pvscsi drm_ttm_helper ata_generic ttm pata_acpi scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse
CPU: 3 PID: 2683 Comm: Xwayland Tainted: G S                 6.1.18-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 12/12/2018
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b c3 cc cc cc cc 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 9d c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b c3 cc cc cc cc 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffa27d84c8fcf8 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffffa27d84c8fd18 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffff9d74aa5b RDI: 00000000ffffffff
RBP: ffff8f16c9b34008 R08: 0000000000000000 R09: ffffa27d84c8fb80
R10: 0000000000000003 R11: ffffffff9e147448 R12: ffff8f171e226ae0
R13: ffff8f16ccd20000 R14: ffff8f1706cd16d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8f1ddfd80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000560787ee7000 CR3: 000000012914c002 CR4: 00000000001706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x347/0xb20
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x58/0x80
 ? do_user_addr_fault+0x1ef/0x690
 ? syscall_exit_to_user_mode+0x17/0x40
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fdd09642d81
Code: Unable to access opcode bytes at 0x7fdd09642d57.
RSP: 002b:00007ffdf6b56058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007fdd0973ba00 RCX: 00007fdd09642d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffdf6b55ae0 R11: 0000000000000246 R12: 00007fdd0973ba00
R13: 0000000000000000 R14: 00007fdd097412e8 R15: 00007fdd09741300
 </TASK>

WARNING: CPU: 0 PID: 2656 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput isofs snd_seq_dummy snd_hrtimer vboxvideo(OE) nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr vboxsf(OE) sunrpc binfmt_misc snd_intel8x0 snd_ac97_codec ac97_bus snd_seq snd_seq_device snd_pcm intel_rapl_msr snd_timer intel_rapl_common rapl snd pcspkr soundcore joydev i2c_piix4 loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic vmwgfx ghash_clmulni_intel sha512_ssse3 drm_ttm_helper serio_raw ttm e1000 vboxguest(OE) video wmi ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 2656 Comm: Timer Tainted: G           OE      6.1.18-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b c3 cc cc cc cc 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 96 c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b c3 cc cc cc cc 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffab0b45ccbbd0 EFLAGS: 00010282
RAX: 0000000000000026 RBX: ffffab0b45ccbbf0 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffff9674aa5b RDI: 00000000ffffffff
RBP: ffff930fee02c008 R08: 0000000000000000 R09: ffffab0b45ccba58
R10: 0000000000000003 R11: ffffffff97147448 R12: ffff9310c5c0c120
R13: ffff9310c9430000 R14: ffff930fe6a3d4d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff931159c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055accdf13178 CR3: 0000000141f4e006 CR4: 00000000000706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x347/0xb20
 ? _raw_spin_unlock_irqrestore+0x23/0x40
 ? hrtimer_try_to_cancel+0x78/0x110
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 ? __hrtimer_init+0xe0/0xe0
 arch_do_signal_or_restart+0x44/0x770
 exit_to_user_mode_prepare+0x117/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f2df32aad16
Code: Unable to access opcode bytes at 0x7f2df32aacec.
RSP: 002b:00007f2dd57fd7b0 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2df32aad16
RDX: 0000000000000000 RSI: 0000000000000089 RDI: 00007f2dd5b2fe74
RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000ffffffff
R10: 00007f2dd57fd8d0 R11: 0000000000000246 R12: 0000000000000001
R13: 00007f2dd5b2fe18 R14: 00007f2dd5b2fe74 R15: 0000000000000000
 </TASK>

WARNING: CPU: 1 PID: 4239 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: ntfs3 ses enclosure scsi_transport_sas uas usb_storage tls uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock snd_seq_midi snd_seq_midi_event snd_ens1371 sunrpc snd_ac97_codec snd_rawmidi binfmt_misc gameport intel_rapl_msr intel_rapl_common ac97_bus snd_seq snd_seq_device snd_pcm snd_timer snd rapl vmw_balloon vmw_vmci joydev soundcore pcspkr i2c_piix4 loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic vmwgfx e1000 ghash_clmulni_intel mptspi sha512_ssse3 drm_ttm_helper scsi_transport_spi serio_raw mptscsih mptbase ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 1 PID: 4239 Comm: vlc Tainted: G        W          6.1.18-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/22/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b c3 cc cc cc cc 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 9c c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b c3 cc cc cc cc 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffa012464b3c90 EFLAGS: 00010282
RAX: 0000000000000026 RBX: ffffa012464b3cb0 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffff9c74aa5b RDI: 00000000ffffffff
RBP: ffff939c94644008 R08: 0000000000000000 R09: ffffa012464b3b18
R10: 0000000000000003 R11: ffffffff9d147448 R12: ffff939c33a71c60
R13: ffffa012464b3d88 R14: ffff939be0feca00 R15: 0000000000000008
FS:  00007fc68d4fe6c0(0000) GS:ffff939db7d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000026c01bc04000 CR3: 000000011576c003 CR4: 00000000003706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_ref_object_base_unref+0x8c/0xa0 [vmwgfx]
 ? vmw_surface_dirty_range_add+0x490/0x490 [vmwgfx]
 drm_ioctl_kernel+0xa6/0x150
 drm_ioctl+0x22f/0x410
 ? vmw_surface_dirty_range_add+0x490/0x490 [vmwgfx]
 ? drm_ioctl_kernel+0x150/0x150
 vmw_generic_ioctl+0x94/0xf0 [vmwgfx]
 __x64_sys_ioctl+0x8d/0xd0
 do_syscall_64+0x58/0x80
 ? do_syscall_64+0x67/0x80
 ? __x64_sys_ioctl+0xa8/0xd0
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? do_syscall_64+0x67/0x80
 ? do_syscall_64+0x67/0x80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fc6e4d53d6f
Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00
RSP: 002b:00007fc68d4fd7b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc6e4d53d6f
RDX: 00007fc68d4fd850 RSI: 000000004008644a RDI: 0000000000000020
RBP: 00007fc68d4fd850 R08: 00007fc6787c2a40 R09: 0000000000000001
R10: 0000000000000001 R11: 0000000000000246 R12: 000000004008644a
R13: 0000000000000020 R14: 0000000000000000 R15: 00007fc6e4c21660
 </TASK>

WARNING: CPU: 3 PID: 2229 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: veth xt_nat xt_conntrack xt_MASQUERADE nf_conntrack_netlink xt_addrtype nft_compat br_netfilter bridge stp llc tls uinput isofs snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock bnep snd_seq_midi snd_seq_midi_event snd_ens1371 btusb btrtl btbcm btintel snd_ac97_codec snd_rawmidi gameport btmtk sunrpc ac97_bus snd_seq snd_seq_device snd_pcm bluetooth intel_rapl_msr snd_timer intel_rapl_common rfkill binfmt_misc snd soundcore rapl vmw_balloon vmw_vmci i2c_piix4 pcspkr joydev loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 mptspi vmwgfx serio_raw scsi_transport_spi e1000
 mptscsih drm_ttm_helper mptbase ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 3 PID: 2229 Comm: Xwayland Not tainted 6.1.18-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 02/27/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b c3 cc cc cc cc 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 b6 c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b c3 cc cc cc cc 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffff9e3643c3fcc8 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffff9e3643c3fce8 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffffb674aa5b RDI: 00000000ffffffff
RBP: ffff8ccb741e0008 R08: 0000000000000000 R09: ffff9e3643c3fb50
R10: 0000000000000003 R11: ffffffffb7147448 R12: ffff8ccb47d2a780
R13: ffff8ccc4a790000 R14: ffff8ccb77c78ad0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8ccc7bd80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000056118ccb1198 CR3: 00000001037c2004 CR4: 00000000003706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x347/0xb20
 ? update_process_times+0x9f/0xb0
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x58/0x80
 ? lapic_next_deadline+0x28/0x30
 ? clockevents_program_event+0x93/0x100
 ? hrtimer_interrupt+0x127/0x220
 ? sched_clock_cpu+0xb/0xc0
 ? __irq_exit_rcu+0x3d/0x140
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f711c8f9d81
Code: Unable to access opcode bytes at 0x7f711c8f9d57.
RSP: 002b:00007fffe12d1e38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f711c9f2a00 RCX: 00007f711c8f9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007fffe12d18c0 R11: 0000000000000246 R12: 00007f711c9f2a00
R13: 0000000000000000 R14: 00007f711c9f82e8 R15: 00007f711c9f8300
 </TASK>

WARNING: CPU: 5 PID: 5381 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink qrtr sunrpc binfmt_misc squashfs snd_intel8x0 snd_ac97_codec ac97_bus intel_rapl_msr snd_seq intel_rapl_common snd_seq_device joydev snd_pcm rapl snd_timer snd pcspkr soundcore vboxguest i2c_piix4 loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic vmwgfx ghash_clmulni_intel e1000 drm_ttm_helper ttm sha512_ssse3 serio_raw video ata_generic pata_acpi wmi ip6_tables ip_tables fuse
CPU: 5 PID: 5381 Comm: IPC I/O Parent Not tainted 6.1.18-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b c3 cc cc cc cc 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 86 c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b c3 cc cc cc cc 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb6d2c9747c38 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffffb6d2c9747c58 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffff8674aa5b RDI: 00000000ffffffff
RBP: ffff979146d94008 R08: 0000000000000000 R09: ffffb6d2c9747ac0
R10: 0000000000000003 R11: ffffffff87147448 R12: ffff9791460244e0
R13: ffff97914c4c0000 R14: ffff9791a48550d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9791d9b40000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe317fff990 CR3: 00000000d1bc0006 CR4: 00000000000706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x347/0xb20
 ? preempt_count_add+0x6a/0xa0
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 ? find_alive_thread.isra.0+0x40/0x40
 ? call_rcu+0x106/0x630
 arch_do_signal_or_restart+0x44/0x770
 ? __schedule+0x367/0x1360
 exit_to_user_mode_prepare+0x117/0x1f0
 irqentry_exit_to_user_mode+0x5/0x30
 asm_sysvec_call_function_single+0x16/0x20
RIP: 0033:0x7faf3225ba45
Code: Unable to access opcode bytes at 0x7faf3225ba1b.
RSP: 002b:00007faf22cfdab0 EFLAGS: 00000206
RAX: 00007faecf47a320 RBX: 00007faecec65200 RCX: 0000000000000000
RDX: 0000000000000022 RSI: 0000000000000012 RDI: 00007faf2305ea00
RBP: 0000000000000022 R08: 00007faf322781a6 R09: 00007faf3227a780
R10: 00000000ffffffff R11: 0000000000000293 R12: 00007faf40575424
R13: 00007faf24b677e0 R14: 0000000000000003 R15: 00000000ffffffff
 </TASK>

WARNING: CPU: 7 PID: 2534 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput isofs snd_seq_dummy snd_hrtimer vboxvideo(OE) nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct rfkill nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr vboxsf(OE) sunrpc binfmt_misc vfat fat intel_rapl_msr intel_rapl_common snd_intel8x0 kvm_intel snd_ac97_codec iTCO_wdt ac97_bus intel_pmc_bxt snd_seq iTCO_vendor_support snd_seq_device kvm snd_pcm snd_timer irqbypass rapl snd lpc_ich soundcore i2c_piix4 pcspkr joydev loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic vmwgfx ghash_clmulni_intel video sha512_ssse3 serio_raw drm_ttm_helper wmi e1000 ttm vboxguest(OE) ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 7 PID: 2534 Comm: Xwayland Tainted: G        W  OE      6.1.18-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b c3 cc cc cc cc 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 b4 c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b c3 cc cc cc cc 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb787c3ea3cd8 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffffb787c3ea3cf8 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffffb474aa5b RDI: 00000000ffffffff
RBP: ffff9c64dded8008 R08: 0000000000000000 R09: ffffb787c3ea3b60
R10: 0000000000000003 R11: ffffffffb5147448 R12: ffff9c64e278f3c0
R13: ffff9c648cdf0000 R14: ffff9c64e53de8d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9c66adfc0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6d555f4000 CR3: 000000002e010004 CR4: 00000000000706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x347/0xb20
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? preempt_count_add+0x47/0xa0
 ? up_read+0x37/0x70
 ? do_user_addr_fault+0x1ef/0x690
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f6d560f9d81
Code: Unable to access opcode bytes at 0x7f6d560f9d57.
RSP: 002b:00007ffc412d68d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f6d561f2a00 RCX: 00007f6d560f9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffc412d6360 R11: 0000000000000246 R12: 00007f6d561f2a00
R13: 0000000000000000 R14: 00007f6d561f82e8 R15: 00007f6d561f8300
 </TASK>

WARNING: CPU: 3 PID: 2224 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer rfkill nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink vboxvideo(OE) qrtr sunrpc binfmt_misc intel_rapl_msr snd_intel8x0 snd_ac97_codec ac97_bus snd_seq intel_rapl_common snd_seq_device pcspkr snd_pcm joydev snd_timer snd i2c_piix4 soundcore loop zram crct10dif_pclmul vmwgfx crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel e1000 vboxguest(OE) sha512_ssse3 drm_ttm_helper serio_raw ttm video wmi ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 3 PID: 2224 Comm: Xwayland Tainted: G           OE      6.1.18-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b c3 cc cc cc cc 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 a2 c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b c3 cc cc cc cc 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffff9d3c44e9bd28 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffff9d3c44e9bd48 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffffa274aa5b RDI: 00000000ffffffff
RBP: ffff890695588008 R08: 0000000000000000 R09: ffff9d3c44e9bbb0
R10: 0000000000000003 R11: ffffffffa3147448 R12: ffff89069df9a900
R13: ffff89060a8b0000 R14: ffff8906a64a60d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff89090fd80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f01e3edf890 CR3: 0000000115dae000 CR4: 00000000000506e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x347/0xb20
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f9c0ccf9d81
Code: Unable to access opcode bytes at 0x7f9c0ccf9d57.
RSP: 002b:00007ffef193c178 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f9c0cdf2a00 RCX: 00007f9c0ccf9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffef193bc00 R11: 0000000000000246 R12: 00007f9c0cdf2a00
R13: 0000000000000000 R14: 00007f9c0cdf82e8 R15: 00007f9c0cdf8300
 </TASK>

WARNING: CPU: 0 PID: 2836 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls isofs snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink rfkill qrtr vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock snd_seq_midi snd_seq_midi_event sunrpc snd_ens1371 snd_ac97_codec snd_rawmidi gameport binfmt_misc ac97_bus snd_seq snd_seq_device snd_pcm vfat fat snd_timer intel_rapl_msr intel_rapl_common snd rapl vmw_balloon soundcore joydev pcspkr vmw_vmci i2c_piix4 loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel vmwgfx nvme sha512_ssse3 serio_raw nvme_core drm_ttm_helper vmxnet3 ttm nvme_common ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 2836 Comm: Renderer Not tainted 6.1.18-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware20,1/440BX Desktop Reference Platform, BIOS VMW201.00V.20648489.B64.2210180829 10/18/2022
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b c3 cc cc cc cc 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 89 c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b c3 cc cc cc cc 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffff9cb991c97c78 EFLAGS: 00010292
RAX: 0000000000000026 RBX: ffff8acffafbf800 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffff8974aa5b RDI: 00000000ffffffff
RBP: ffff8acf22089a00 R08: 0000000000000000 R09: ffff9cb991c97b00
R10: 0000000000000003 R11: ffffffff8a147448 R12: 0000000000000064
R13: ffff8acf22089a58 R14: ffff8acf22089a40 R15: 0000000000000064
FS:  00007fc5255ae6c0(0000) GS:ffff8ad037c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc50e92a014 CR3: 0000000141408005 CR4: 00000000003706f0
Call Trace:
 <TASK>
 drm_gem_handle_delete+0x8c/0xd0
 ? vmw_bo_create+0xa0/0xa0 [vmwgfx]
 vmw_bo_unref_ioctl+0xf/0x20 [vmwgfx]
 drm_ioctl_kernel+0xa6/0x150
 drm_ioctl+0x22f/0x410
 ? vmw_bo_create+0xa0/0xa0 [vmwgfx]
 ? drm_ioctl_kernel+0x150/0x150
 vmw_generic_ioctl+0x94/0xf0 [vmwgfx]
 __x64_sys_ioctl+0x8d/0xd0
 do_syscall_64+0x58/0x80
 ? fpregs_restore_userregs+0x12/0xe0
 ? exit_to_user_mode_prepare+0x18f/0x1f0
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? do_syscall_64+0x67/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? do_syscall_64+0x67/0x80
 ? do_syscall_64+0x67/0x80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fc549703d6f
Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00
RSP: 002b:00007fc5255ad780 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fc5095cd550 RCX: 00007fc549703d6f
RDX: 00007fc5255ad820 RSI: 0000000040086442 RDI: 000000000000003c
RBP: 00007fc5255ad820 R08: 0000000000000200 R09: 0000000000000000
R10: 00007ffee8bdd080 R11: 0000000000000246 R12: 0000000040086442
R13: 000000000000003c R14: 00007fc524545db0 R15: 00007fc523217100
 </TASK>

WARNING: CPU: 3 PID: 2854 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: uinput tls snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc binfmt_misc snd_intel8x0 snd_ac97_codec ac97_bus intel_rapl_msr vboxguest snd_seq snd_seq_device snd_pcm joydev snd_timer snd i2c_piix4 soundcore pcspkr intel_rapl_common loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic vmwgfx ghash_clmulni_intel sha512_ssse3 e1000 serio_raw drm_ttm_helper ttm video wmi ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 3 PID: 2854 Comm: Cache2 I/O Not tainted 6.1.18-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b c3 cc cc cc cc 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 89 c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b c3 cc cc cc cc 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffbbe288d3bc08 EFLAGS: 00010292
RAX: 0000000000000026 RBX: ffffbbe288d3bc28 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffff8974aa5b RDI: 00000000ffffffff
RBP: ffff91dc3ffbc008 R08: 0000000000000000 R09: ffffbbe288d3ba90
R10: 0000000000000003 R11: ffffffff8a147448 R12: ffff91dc3debd540
R13: ffff91dbc96a0000 R14: ffff91dc0d547cd0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff91dcd7d80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f89618fb3c0 CR3: 000000017fa52000 CR4: 00000000000506e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x347/0xb20
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 ? notify_change+0x4fc/0x5b0
 arch_do_signal_or_restart+0x44/0x770
 ? preempt_count_add+0x47/0xa0
 ? up_write+0x32/0x60
 exit_to_user_mode_prepare+0x117/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f74d252615b
Code: Unable to access opcode bytes at 0x7f74d2526131.
RSP: 002b:00007f74c3defc78 EFLAGS: 00000206 ORIG_RAX: 000000000000004d
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 00007f74d252615b
RDX: 000000000000000a RSI: 0000000000004bc8 RDI: 000000000000005b
RBP: 00007f74b67ec940 R08: 0000000000000000 R09: 0000000000000000
R10: 00003c4976dc04b2 R11: 0000000000000206 R12: 0000000000004bc8
R13: 000000000000241e R14: 000000000000241e R15: 00007f7493728700
 </TASK>

WARNING: CPU: 0 PID: 2273 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer snd_seq_midi snd_seq_midi_event nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 bnep nf_reject_ipv6 nft_reject nft_ct btusb btrtl btbcm nft_chain_nat btintel nf_nat nf_conntrack btmtk nf_defrag_ipv6 nf_defrag_ipv4 snd_ens1371 bluetooth snd_ac97_codec uvcvideo snd_rawmidi gameport ac97_bus ip_set videobuf2_vmalloc snd_seq videobuf2_memops videobuf2_v4l2 nf_tables snd_seq_device intel_rapl_msr videobuf2_common nfnetlink intel_rapl_common snd_pcm rapl videodev vmw_balloon qrtr joydev snd_timer pcspkr vsock_loopback vmw_vsock_virtio_transport_common mc snd vmw_vsock_vmci_transport vsock rfkill vmw_vmci sunrpc i2c_piix4 soundcore binfmt_misc loop zram vmwgfx crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme ghash_clmulni_intel nvme_core sha512_ssse3 serio_raw drm_ttm_helper vmxnet3 nvme_common ttm ata_generic
 pata_acpi scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse
CPU: 0 PID: 2273 Comm: Socket Thread Not tainted 6.1.18-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b c3 cc cc cc cc 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 83 c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b c3 cc cc cc cc 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0000:ffff9e1483eb7c38 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffff9e1483eb7c58 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffff8374aa5b RDI: 00000000ffffffff
RBP: ffff91cb56a98008 R08: 0000000000000000 R09: ffff9e1483eb7ac0
R10: 0000000000000003 R11: ffffffff84147448 R12: ffff91cb5eb39840
R13: ffff91cb09d80000 R14: ffff91cb432efcd0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff91cb7dc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f9b05426270 CR3: 000000002efd0001 CR4: 00000000003706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x347/0xb20
 ? fcntl_setlk+0x144/0x2c0
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 arch_do_signal_or_restart+0x44/0x770
 exit_to_user_mode_prepare+0x117/0x1f0
 irqentry_exit_to_user_mode+0x5/0x30
 asm_exc_page_fault+0x22/0x30
RIP: 0033:0x7fcd85225267
Code: Unable to access opcode bytes at 0x7fcd8522523d.
RSP: 002b:00007fcd9b57b060 EFLAGS: 00010206
RAX: 00007fcd80bc0000 RBX: 0000000000000004 RCX: 000000000024f3f0
RDX: 00000000000002d8 RSI: 0000000000000000 RDI: 0000000000000030
RBP: 00007fcd831a1ec0 R08: 0000000000000008 R09: 00000000000000ce
R10: 00007fcd9b57af74 R11: 0000000000000004 R12: 00007fcd9b57b088
R13: 0000000000000001 R14: 0000000000000000 R15: 00007fcd825c3850
 </TASK>

WARNING: CPU: 1 PID: 2849 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: uinput isofs snd_seq_dummy snd_hrtimer vboxvideo(OE) nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink qrtr sunrpc snd_intel8x0 snd_ac97_codec ac97_bus snd_seq snd_seq_device snd_pcm intel_rapl_msr intel_rapl_common snd_timer pcspkr joydev snd i2c_piix4 soundcore zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 e1000 serio_raw vmwgfx vboxguest(OE) drm_ttm_helper ttm video wmi ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 1 PID: 2849 Comm: firefox Tainted: G           OE      6.1.18-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b c3 cc cc cc cc 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 b9 c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b c3 cc cc cc cc 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb51184c97cb8 EFLAGS: 00010292
RAX: 0000000000000026 RBX: ffffb51184c97cd8 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffffb974aa5b RDI: 00000000ffffffff
RBP: ffff8ed52899c008 R08: 0000000000000000 R09: ffffb51184c97b40
R10: 0000000000000003 R11: ffffffffba147448 R12: ffff8ed5b9739660
R13: ffff8ed608c10000 R14: ffff8ed575636cd0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8ed61bd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe43cb66b80 CR3: 000000010a5ce000 CR4: 00000000000506e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x347/0xb20
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? preempt_count_add+0x47/0xa0
 ? fd_install+0x5c/0xe0
 ? __sys_socket+0xa9/0xe0
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? do_syscall_64+0x67/0x80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fb6300fad61
Code: Unable to access opcode bytes at 0x7fb6300fad37.
RSP: 002b:00007fffb9a696f8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007fb614511e80 RCX: 00007fb6300fad61
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 00007fb62fd34900 R08: ffffffffffffff40 R09: 00007fb62e97a530
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
R13: 00007fb62f35a030 R14: 0000000000000000 R15: 00007fb62fdcc660
 </TASK>

WARNING: CPU: 1 PID: 2880 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: snd_seq_dummy snd_hrtimer snd_seq snd_seq_device snd_timer snd soundcore nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock intel_rapl_msr vmw_balloon sunrpc intel_rapl_common rapl joydev pcspkr vmw_vmci i2c_piix4 binfmt_misc loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme ghash_clmulni_intel nvme_core sha512_ssse3 vmwgfx serio_raw vmxnet3 nvme_common drm_ttm_helper ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 1 PID: 2880 Comm: AudioIP~ver RPC Tainted: G S                 6.1.18-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b c3 cc cc cc cc 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 99 c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b c3 cc cc cc cc 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffafed53897be8 EFLAGS: 00010292
RAX: 0000000000000026 RBX: ffffafed53897c08 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffff9974aa5b RDI: 00000000ffffffff
RBP: ffff9a4dec4e8008 R08: 0000000000000000 R09: ffffafed53897a70
R10: 0000000000000003 R11: ffffffff9a147448 R12: ffff9a4dc408f720
R13: ffff9a4dcc720000 R14: ffff9a4df3be5ed0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9a54dfc40000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4723153990 CR3: 000000010c6ca005 CR4: 00000000001706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x347/0xb20
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 ? preempt_count_add+0x6a/0xa0
 arch_do_signal_or_restart+0x44/0x770
 exit_to_user_mode_prepare+0x117/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f475472f196
Code: Unable to access opcode bytes at 0x7f475472f16c.
RSP: 002b:00007f471dffd6f0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e8
RAX: fffffffffffffffc RBX: 000000003b9aca00 RCX: 00007f475472f196
RDX: 0000000000000400 RSI: 00007f471e269000 RDI: 0000000000000044
RBP: 00007f471e269000 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000293 R12: 000000000bac60a5
R13: 00007f471dffd950 R14: 000000003b9aca00 R15: 000000000000007c
 </TASK>

WARNING: CPU: 1 PID: 6771 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput isofs snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink snd_seq_midi snd_seq_midi_event qrtr snd_ens1371 snd_ac97_codec snd_rawmidi vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport gameport ac97_bus vsock intel_rapl_msr vmw_balloon snd_seq snd_seq_device snd_pcm intel_rapl_common snd_timer joydev snd pcspkr soundcore vmw_vmci i2c_piix4 sunrpc binfmt_misc loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme ghash_clmulni_intel nvme_core vmwgfx sha512_ssse3 serio_raw nvme_common drm_ttm_helper vmxnet3 ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 1 PID: 6771 Comm: VizCompositorTh Not tainted 6.1.18-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b e9 62 a8 90 00 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 87 c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b e9 3f a8 90 00 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffa8e9c5f9bc38 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffffa8e9c5f9bc58 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffff8774aa5b RDI: 00000000ffffffff
RBP: ffff8f2283fec008 R08: 0000000000000000 R09: ffffa8e9c5f9bac0
R10: 0000000000000003 R11: ffffffff88147448 R12: ffff8f2348b2f3c0
R13: ffff8f2349fd0000 R14: ffff8f224e6080d0 R15: dead000000000100
FS:  00007fa2381fb6c0(0000) GS:ffff8f2456080000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055f4a6467b38 CR3: 00000001035ae000 CR4: 00000000003506e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x347/0xb20
 ? asm_common_interrupt+0x22/0x40
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 ? put_task_stack+0x8e/0xd0
 arch_do_signal_or_restart+0x44/0x770
 ? __schedule+0x367/0x1360
 ? check_preempt_wakeup+0x17b/0x2c0
 exit_to_user_mode_prepare+0x117/0x1f0
 irqentry_exit_to_user_mode+0x5/0x30
 asm_sysvec_call_function_single+0x16/0x20
RIP: 0033:0x7fa2592b190d
Code: Unable to access opcode bytes at 0x7fa2592b18e3.
RSP: 002b:00007fa2381fa3b0 EFLAGS: 00000246
RAX: 00007fa2381fa3f0 RBX: 0000341b094f9f20 RCX: 00007fa2592bc6da
RDX: 00007fa2592b40be RSI: 0000000000000046 RDI: 0000049ef1910a07
RBP: 00007fa2381fa510 R08: 00007fa25931eeff R09: 00007fa2381fa3d0
R10: 00007ffca55d8080 R11: 0000000000416142 R12: 00007fa2381fa4f8
R13: 0000000000000000 R14: 000000007fffffff R15: 00007fa25931eeff
 </TASK>

WARNING: CPU: 0 PID: 3991 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_tables ebtable_nat ebtable_broute ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security rfkill ip_set nfnetlink ebtable_filter ebtables ip6table_filter iptable_filter qrtr snd_intel8x0 snd_ac97_codec ac97_bus snd_seq snd_seq_device snd_pcm intel_rapl_msr intel_rapl_common rapl joydev snd_timer sunrpc snd pcspkr soundcore i2c_piix4 vboxguest binfmt_misc loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic vmwgfx ghash_clmulni_intel e1000 drm_ttm_helper sha512_ssse3 ttm serio_raw video wmi ata_generic pata_acpi scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse
CPU: 0 PID: 3991 Comm: firefox Not tainted 6.2.11-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 99 4a 93 ff 0f 0b c3 cc cc cc cc 80 3d 55 21 af 01 00 75 85 48 c7 c7 70 ad 8d 8f c6 05 45 21 af 01 01 e8 76 4a 93 ff <0f> 0b c3 cc cc cc cc 80 3d 30 21 af 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0000:ffffb432c1e17c58 EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffffb432c1e17c80 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffff8f8c1386 RDI: 00000000ffffffff
RBP: ffff9d5e441dc008 R08: 0000000000000000 R09: ffffb432c1e17ae8
R10: 0000000000000003 R11: ffffffff901447c8 R12: ffff9d5e84810c00
R13: ffff9d5e753e0000 R14: ffff9d5e6108f4d0 R15: dead000000000100
FS:  00007ff957ee9780(0000) GS:ffff9d5ebdc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb87c98b000 CR3: 0000000023140000 CR4: 00000000000406f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x7e/0x90 [vmwgfx]
 ttm_prime_refcount_release+0x3d/0x60 [vmwgfx]
 ttm_release_base+0x85/0xd0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x33e/0xb20
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? syscall_exit_to_user_mode_prepare+0x18e/0x1c0
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? exit_to_user_mode_prepare+0x180/0x1f0
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? do_syscall_64+0x67/0x80
 ? __irq_exit_rcu+0x3d/0x140
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7ff957af9d81
Code: Unable to access opcode bytes at 0x7ff957af9d57.
RSP: 002b:00007fffd0ff3128 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007ff957af9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffffffffff40 R09: 0000000000000001
R10: 00007ff90c8017f0 R11: 0000000000000202 R12: 0000000000000001
R13: 0000000000000000 R14: 00007fffd0ff31b0 R15: 00007ff94a2d8190
 </TASK>

WARNING: CPU: 0 PID: 1555 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput isofs snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 snd_seq_midi snd_seq_midi_event rfkill ip_set nf_tables nfnetlink qrtr vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock snd_ens1371 intel_rapl_msr snd_ac97_codec intel_rapl_common snd_rawmidi rapl gameport ac97_bus vmw_balloon snd_seq snd_seq_device snd_pcm pcspkr joydev sunrpc snd_timer snd soundcore i2c_piix4 vmw_vmci binfmt_misc loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 serio_raw vmwgfx e1000 mptspi scsi_transport_spi drm_ttm_helper mptscsih ttm mptbase ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 1555 Comm: Xwayland Tainted: G S                 6.1.18-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/29/2019
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b c3 cc cc cc cc 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 a4 c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b c3 cc cc cc cc 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb9b884427c88 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffffb9b884427ca8 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffffa474aa5b RDI: 00000000ffffffff
RBP: ffff9e554fc40008 R08: 0000000000000000 R09: ffffb9b884427b10
R10: 0000000000000003 R11: ffffffffa5147448 R12: ffff9e554971e300
R13: ffff9e564aad0000 R14: ffff9e554fce6ad0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9e567bc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000557f86118c28 CR3: 00000000352a8003 CR4: 00000000001706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x347/0xb20
 ? __handle_mm_fault+0x92c/0xe40
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x58/0x80
 ? handle_mm_fault+0xdb/0x2d0
 ? preempt_count_add+0x47/0xa0
 ? up_read+0x37/0x70
 ? do_user_addr_fault+0x1ef/0x690
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f6b5bc42d81
Code: Unable to access opcode bytes at 0x7f6b5bc42d57.
RSP: 002b:00007ffd23df5168 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f6b5bd3ba00 RCX: 00007f6b5bc42d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 0000000000000001 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffd23df4bf0 R11: 0000000000000246 R12: 00007f6b5bd3ba00
R13: 0000000000000000 R14: 00007f6b5bd412e8 R15: 00007f6b5bd41300
 </TASK>

WARNING: CPU: 0 PID: 8447 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput isofs snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock snd_seq_midi snd_seq_midi_event btusb sunrpc btrtl btbcm btintel snd_ens1371 btmtk snd_ac97_codec intel_rapl_msr snd_rawmidi intel_rapl_common bluetooth gameport ac97_bus snd_seq snd_seq_device rapl snd_pcm vmw_balloon snd_timer rfkill pcspkr snd joydev soundcore binfmt_misc vmw_vmci i2c_piix4 loop zram dm_crypt vmwgfx nvme crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme_core ghash_clmulni_intel vmxnet3 drm_ttm_helper sha512_ssse3 serio_raw ttm nvme_common ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 8447 Comm: threaded-ml Not tainted 6.1.18-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b c3 cc cc cc cc 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 83 c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b c3 cc cc cc cc 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb84e0774fbe0 EFLAGS: 00010282
RAX: 0000000000000026 RBX: ffffb84e0774fc00 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffff8374aa5b RDI: 00000000ffffffff
RBP: ffff8c1accb98008 R08: 0000000000000000 R09: ffffb84e0774fa68
R10: 0000000000000003 R11: ffffffff84147448 R12: ffff8c1ab7fdee40
R13: ffff8c1b4a930000 R14: ffff8c1ab87f9ed0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8c1b8de00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1ba2a18020 CR3: 0000000107368005 CR4: 00000000003706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x347/0xb20
 do_group_exit+0x2d/0x80
 get_signal+0x90f/0x950
 ? sched_clock_cpu+0xb/0xc0
 arch_do_signal_or_restart+0x44/0x770
 ? __schedule+0x367/0x1360
 exit_to_user_mode_prepare+0x117/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fe7d691e2bf
Code: Unable to access opcode bytes at 0x7fe7d691e295.
RSP: 002b:00007fe779880320 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: 0000000000000001 RBX: 00007fe7a3dbac40 RCX: 00007fe7d691e2bf
RDX: 0000000000000001 RSI: 00007fe7d05c7f38 RDI: 000000000000004c
RBP: 00007fe7cdd7b020 R08: 0000000000000000 R09: 00007fe7d6700d00
R10: 00001942d6507bea R11: 0000000000000293 R12: 0000000000000400
R13: 0000000000002000 R14: 0000000000000001 R15: 00007fe76bf42600
 </TASK>

WARNING: CPU: 3 PID: 2199 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 snd_usb_audio videobuf2_common videodev snd_usbmidi_lib snd_hwdep mc tls tun cfg80211 uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr snd_seq_midi snd_seq_midi_event bnep vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock sunrpc binfmt_misc snd_ens1371 snd_ac97_codec snd_rawmidi gameport ac97_bus snd_seq btusb snd_seq_device btrtl snd_pcm btbcm vmw_balloon btintel btmtk intel_rapl_msr bluetooth intel_rapl_common snd_timer joydev pcspkr snd rfkill soundcore vmw_vmci i2c_piix4 loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic vmwgfx ghash_clmulni_intel nvme sha512_ssse3 serio_raw
 drm_ttm_helper nvme_core ttm ata_generic vmxnet3 nvme_common pata_acpi ip6_tables ip_tables fuse
CPU: 3 PID: 2199 Comm: Xwayland Not tainted 6.1.18-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b c3 cc cc cc cc 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 94 c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b c3 cc cc cc cc 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffa718845ebcd8 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffffa718845ebcf8 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffff9474aa5b RDI: 00000000ffffffff
RBP: ffff8c8b3ced8008 R08: 0000000000000000 R09: ffffa718845ebb60
R10: 0000000000000003 R11: ffffffff95147448 R12: ffff8c8b6af27d80
R13: ffff8c8acacb0000 R14: ffff8c8b0dfb58d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8c8bf7d80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffeb1b81bc8 CR3: 000000014deb4000 CR4: 0000000000350ee0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x347/0xb20
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? preempt_count_add+0x47/0xa0
 ? up_read+0x37/0x70
 ? do_user_addr_fault+0x1ef/0x690
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fab67c72d81
Code: Unable to access opcode bytes at 0x7fab67c72d57.
RSP: 002b:00007ffd4450d508 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007fab67d6ba00 RCX: 00007fab67c72d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 0000000000000001 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffd4450cf90 R11: 0000000000000246 R12: 00007fab67d6ba00
R13: 0000000000000000 R14: 00007fab67d712e8 R15: 00007fab67d71300
 </TASK>

WARNING: CPU: 2 PID: 1978 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink qrtr sunrpc binfmt_misc snd_intel8x0 intel_rapl_msr snd_ac97_codec ac97_bus snd_seq snd_seq_device joydev snd_pcm intel_rapl_common pcspkr snd_timer vboxguest snd i2c_piix4 soundcore loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic vmwgfx ghash_clmulni_intel sha512_ssse3 drm_ttm_helper e1000 serio_raw ttm video wmi ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 2 PID: 1978 Comm: Xwayland Not tainted 6.1.18-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b c3 cc cc cc cc 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 a2 c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b c3 cc cc cc cc 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffafa383dc7d50 EFLAGS: 00010286
RAX: 0000000000000026 RBX: ffffafa383dc7d70 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffffa274aa5b RDI: 00000000ffffffff
RBP: ffff94d288258008 R08: 0000000000000000 R09: ffffafa383dc7bd8
R10: 0000000000000003 R11: ffffffffa3147448 R12: ffff94d2882ae3c0
R13: ffff94d38a080000 R14: ffff94d28e4548d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff94d39bd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f232ff26000 CR3: 000000007c010000 CR4: 00000000000506e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x75/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x347/0xb20
 ? handle_mm_fault+0xdb/0x2d0
 ? preempt_count_add+0x47/0xa0
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f2330af9d81
Code: Unable to access opcode bytes at 0x7f2330af9d57.
RSP: 002b:00007ffd0414a0d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f2330bf2a00 RCX: 00007f2330af9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffd04149b60 R11: 0000000000000246 R12: 00007f2330bf2a00
R13: 0000000000000000 R14: 00007f2330bf82e8 R15: 00007f2330bf8300
 </TASK>