general protection fault, probably for non-canonical address 0x1096a0c9aa93a0: 0000 [#2] PREEMPT SMP NOPTI
CPU: 3 PID: 1860 Comm: gnome-software Tainted: G      D W          6.2.7-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:mutex_lock+0x19/0x30
Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 53 48 89 fb e8 d2 d0 ff ff 31 c0 65 48 8b 14 25 c0 15 03 00 <f0> 48 0f b1 13 75 06 5b c3 cc cc cc cc 48 89 df 5b eb b4 0f 1f 40
RSP: 0018:ffffba00838d3ad0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 001096a0c9aa93a0 RCX: ffff96a0c9aa9338
RDX: ffff969ff23fce80 RSI: 0000000000000002 RDI: 001096a0c9aa93a0
RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000400024
R10: ffff969ffb47f258 R11: 0000000000000100 R12: ffff969fe74b9cc0
R13: ffff969fe74b9cd0 R14: 001096a0c9aa93a0 R15: dead000000000100
FS:  00007fdee462ba40(0000) GS:ffff96a0dbd80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe09a548808 CR3: 000000003725c005 CR4: 00000000000306e0
Call Trace:
 <TASK>
 vmw_view_commit_notify+0x39/0x130 [vmwgfx]
 vmw_cmdbuf_res_commit+0xe8/0x130 [vmwgfx]
 vmw_execbuf_process+0x954/0x1180 [vmwgfx]
 ? __pfx_vmw_execbuf_ioctl+0x10/0x10 [vmwgfx]
 vmw_execbuf_ioctl+0x151/0x280 [vmwgfx]
 ? __pfx_vmw_execbuf_ioctl+0x10/0x10 [vmwgfx]
 drm_ioctl_kernel+0xc6/0x170
 drm_ioctl+0x22f/0x410
 ? __pfx_vmw_execbuf_ioctl+0x10/0x10 [vmwgfx]
 ? __pfx_drm_ioctl+0x10/0x10
 vmw_generic_ioctl+0xa4/0x110 [vmwgfx]
 __x64_sys_ioctl+0x8d/0xd0
 do_syscall_64+0x58/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? __irq_exit_rcu+0x3d/0x140
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7fdee5a82d6f
Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00
RSP: 002b:00007ffd60021db0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000555af5464320 RCX: 00007fdee5a82d6f
RDX: 00007ffd60021e70 RSI: 000000004028644c RDI: 0000000000000022
RBP: 00007ffd60021e70 R08: 0000000000004628 R09: 00007ffd60021ef8
R10: 00000004b311dde0 R11: 0000000000000246 R12: 000000004028644c
R13: 0000000000000022 R14: 0000000000000000 R15: 00007ffd60021ef8
 </TASK>
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables rfkill nfnetlink qrtr sunrpc binfmt_misc snd_intel8x0 intel_rapl_msr snd_ac97_codec intel_rapl_common ac97_bus snd_seq snd_seq_device rapl snd_pcm joydev pcspkr snd_timer snd vboxguest soundcore i2c_piix4 loop zram crct10dif_pclmul crc32_pclmul crc32c_intel vmwgfx polyval_generic video ghash_clmulni_intel sha512_ssse3 drm_ttm_helper e1000 ttm wmi ata_generic serio_raw pata_acpi ip6_tables ip_tables fuse

WARNING: CPU: 0 PID: 2841 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr vsock_loopback vmw_vsock_virtio_transport_common snd_seq_midi snd_seq_midi_event vmw_vsock_vmci_transport vsock snd_ens1371 sunrpc snd_ac97_codec snd_rawmidi gameport ac97_bus snd_seq snd_seq_device snd_pcm intel_rapl_msr snd_timer snd vmw_balloon intel_rapl_common joydev soundcore pcspkr vmw_vmci i2c_piix4 binfmt_misc loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme ghash_clmulni_intel nvme_core vmwgfx sha512_ssse3 serio_raw nvme_common vmxnet3 drm_ttm_helper ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 2841 Comm: firefox Not tainted 6.2.7-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 49 51 93 ff 0f 0b e9 82 c7 79 00 80 3d 75 28 af 01 00 75 85 48 c7 c7 00 ad 8d b5 c6 05 65 28 af 01 01 e8 26 51 93 ff <0f> 0b e9 5f c7 79 00 80 3d 50 28 af 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffa8c7c5ee7c98 EFLAGS: 00010282
RAX: 0000000000000000 RBX: ffffa8c7c5ee7cc0 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffffb58c1316 RDI: 00000000ffffffff
RBP: ffff89f71ead0008 R08: 0000000000000000 R09: ffffa8c7c5ee7b28
R10: 0000000000000003 R11: ffffffffb61447c8 R12: ffff89f67adda660
R13: ffff89f60a690000 R14: ffff89f67b9626d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff89f737c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff92befb000 CR3: 000000017c02a000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x7e/0x90 [vmwgfx]
 ttm_prime_refcount_release+0x3d/0x60 [vmwgfx]
 ttm_release_base+0x85/0xd0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x33e/0xb20
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? do_sys_openat2+0x9b/0x170
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? do_syscall_64+0x67/0x80
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f9e5aaf9d81
Code: Unable to access opcode bytes at 0x7f9e5aaf9d57.
RSP: 002b:00007fff4d74c6e8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f9e5aaf9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffffffffff40 R09: 0000000000000001
R10: 00007f9e1cf01370 R11: 0000000000000206 R12: 0000000000000001
R13: 0000000000000000 R14: 00007fff4d74c770 R15: 00007f9e4d2ce810
 </TASK>

WARNING: CPU: 0 PID: 2755 at drivers/gpu/drm/vmwgfx/vmwgfx_cmdbuf.c:410 vmw_cmdbuf_ctx_process+0x20f/0x270 [vmwgfx]
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr snd_intel8x0 snd_ac97_codec ac97_bus sunrpc snd_seq snd_seq_device intel_rapl_msr intel_rapl_common snd_pcm intel_powerclamp rapl binfmt_misc joydev snd_timer pcspkr snd i2c_piix4 vboxguest soundcore loop zram vmwgfx crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic e1000 ghash_clmulni_intel drm_ttm_helper sha512_ssse3 serio_raw ttm video ata_generic pata_acpi wmi ip6_tables ip_tables fuse
CPU: 0 PID: 2755 Comm: kworker/u2:8 Tainted: G        W          6.2.7-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
Workqueue: events_unbound commit_work
RIP: 0010:vmw_cmdbuf_ctx_process+0x20f/0x270 [vmwgfx]
Code: e8 b6 fb ff ff e9 f0 fe ff ff 80 3d 36 94 03 00 00 0f 85 6e ff ff ff 48 c7 c7 8a 6d 56 c0 c6 05 22 94 03 00 01 e8 51 23 bc f5 <0f> 0b 4c 89 f7 e8 87 fb ff ff e9 c1 fe ff ff 4c 8b 74 24 28 4c 89
RSP: 0018:ffffa774050efac8 EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffff91d300261400 RCX: 0000000000000000
RDX: 0000000000000003 RSI: ffffffffb78c1316 RDI: 00000000ffffffff
RBP: ffff91d36e733218 R08: 0000000000000000 R09: ffffa774050ef958
R10: 0000000000000003 R11: ffffffffb81447c8 R12: 0000000000000004
R13: ffff91d3ca6e1300 R14: ffff91d36e733200 R15: ffff91d300261488
FS:  0000000000000000(0000) GS:ffff91d830600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000002a00c049400 CR3: 0000000154768004 CR4: 00000000000706f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 vmw_cmdbuf_man_process+0x59/0x100 [vmwgfx]
 __vmw_cmdbuf_cur_flush+0xad/0xf0 [vmwgfx]
 vmw_cmdbuf_commit+0x68/0xd0 [vmwgfx]
 vmw_cmd_send_fence+0xd3/0x160 [vmwgfx]
 vmw_execbuf_fence_commands+0x58/0x110 [vmwgfx]
 vmw_kms_helper_validation_finish+0x70/0x170 [vmwgfx]
 vmw_du_helper_plane_update+0x319/0x3a0 [vmwgfx]
 vmw_sou_plane_update_surface.constprop.0+0x9e/0xc0 [vmwgfx]
 ? __pfx_vmw_sou_surface_fifo_size+0x10/0x10 [vmwgfx]
 ? __pfx_vmw_sou_surface_post_prepare+0x10/0x10 [vmwgfx]
 ? __pfx_vmw_sou_surface_pre_clip+0x10/0x10 [vmwgfx]
 ? __pfx_vmw_sou_surface_clip_rect+0x10/0x10 [vmwgfx]
 ? __pfx_vmw_sou_surface_post_clip+0x10/0x10 [vmwgfx]
 vmw_sou_primary_plane_atomic_update+0x6a/0xe0 [vmwgfx]
 drm_atomic_helper_commit_planes+0xf6/0x200
 drm_atomic_helper_commit_tail+0x44/0x80
 commit_tail+0xd1/0x130
 process_one_work+0x1c8/0x3c0
 worker_thread+0x4d/0x380
 ? _raw_spin_lock_irqsave+0x23/0x50
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe9/0x110
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x2c/0x50
 </TASK>

WARNING: CPU: 5 PID: 2251 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep snd_seq_midi snd_seq_midi_event vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock intel_rapl_msr intel_rapl_common snd_ens1371 btusb snd_ac97_codec sunrpc btrtl kvm_amd btbcm snd_rawmidi gameport ccp btintel ac97_bus snd_seq btmtk vmw_balloon kvm snd_seq_device bluetooth snd_pcm irqbypass binfmt_misc pcspkr joydev rfkill snd_timer vfat snd vmw_vmci soundcore i2c_piix4 fat loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic vmwgfx ghash_clmulni_intel sha512_ssse3 e1000 serio_raw mptspi scsi_transport_spi mptscsih drm_ttm_helper mptbase ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 5 PID: 2251 Comm: Xwayland Tainted: G        W          6.2.7-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware7,1/440BX Desktop Reference Platform, BIOS VMW71.00V.18452719.B64.2108091906 08/09/2021
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 49 51 93 ff 0f 0b e9 82 c7 79 00 80 3d 75 28 af 01 00 75 85 48 c7 c7 00 ad 8d b1 c6 05 65 28 af 01 01 e8 26 51 93 ff <0f> 0b e9 5f c7 79 00 80 3d 50 28 af 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb34d850afc48 EFLAGS: 00010282
RAX: 0000000000000000 RBX: ffffb34d850afc70 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffffb18c1316 RDI: 00000000ffffffff
RBP: ffff8e9f9fb18008 R08: 0000000000000000 R09: ffffb34d850afad8
R10: 0000000000000003 R11: ffffffffb21447c8 R12: ffff8e9f4ec2d240
R13: ffff8e9f4c940000 R14: ffff8e9f7563ccd0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8ea26fd40000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1d190a4afc CR3: 000000037c010000 CR4: 0000000000350ee0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x7e/0x90 [vmwgfx]
 ttm_prime_refcount_release+0x3d/0x60 [vmwgfx]
 ttm_release_base+0x85/0xd0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x33e/0xb20
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0x80
 ? handle_mm_fault+0xff/0x2f0
 ? preempt_count_add+0x47/0xa0
 ? up_read+0x37/0x70
 ? do_user_addr_fault+0x1ef/0x710
 ? do_syscall_64+0x67/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f7048042d81
Code: Unable to access opcode bytes at 0x7f7048042d57.
RSP: 002b:00007ffd6a6cf3f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f704813ba00 RCX: 00007f7048042d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffd6a6cee80 R11: 0000000000000246 R12: 00007f704813ba00
R13: 0000000000000000 R14: 00007f70481412e8 R15: 00007f7048141300
 </TASK>

WARNING: CPU: 2 PID: 2336 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr snd_seq_midi snd_seq_midi_event bnep vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock sunrpc binfmt_misc snd_ens1371 btusb snd_ac97_codec btrtl snd_rawmidi btbcm intel_rapl_msr gameport btintel ac97_bus snd_seq btmtk intel_rapl_common snd_seq_device bluetooth snd_pcm rapl vmw_balloon rfkill joydev pcspkr snd_timer snd soundcore vmw_vmci i2c_piix4 loop zram crct10dif_pclmul vmwgfx crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme ghash_clmulni_intel drm_ttm_helper nvme_core sha512_ssse3 serio_raw vmxnet3 ata_generic nvme_common ttm pata_acpi ip6_tables ip_tables fuse
CPU: 2 PID: 2336 Comm: firefox Not tainted 6.2.7-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 49 51 93 ff 0f 0b c3 cc cc cc cc 80 3d 75 28 af 01 00 75 85 48 c7 c7 00 ad 8d 97 c6 05 65 28 af 01 01 e8 26 51 93 ff <0f> 0b c3 cc cc cc cc 80 3d 50 28 af 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb60a045a3cb8 EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffffb60a045a3ce0 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffff978c1316 RDI: 00000000ffffffff
RBP: ffff93e6b23b4008 R08: 0000000000000000 R09: ffffb60a045a3b48
R10: 0000000000000003 R11: ffffffff981447c8 R12: ffff93e687c734e0
R13: ffff93e68c870000 R14: ffff93e6a271b6d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff93e8b3d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc497c21728 CR3: 00000001034f0004 CR4: 00000000003706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x7e/0x90 [vmwgfx]
 ttm_prime_refcount_release+0x3a/0x60 [vmwgfx]
 ttm_release_base+0x82/0xd0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x33e/0xb20
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x58/0x80
 ? exit_to_user_mode_prepare+0x165/0x1f0
 ? syscall_exit_to_user_mode_prepare+0x18e/0x1c0
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7fc5182f9d81
Code: Unable to access opcode bytes at 0x7fc5182f9d57.
RSP: 002b:00007fffcd7af9e8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fc5182f9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffffffffff40 R09: 0000000000000001
R10: 00007fc4937005d8 R11: 0000000000000206 R12: 0000000000000001
R13: 0000000000000000 R14: 00007fffcd7afa70 R15: 00007fc50a8ce810
 </TASK>

WARNING: CPU: 1 PID: 4096 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: squashfs tls uinput snd_seq_dummy snd_hrtimer snd_seq_midi snd_seq_midi_event nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack snd_ens1371 nf_defrag_ipv6 nf_defrag_ipv4 snd_ac97_codec snd_rawmidi gameport ac97_bus snd_seq intel_rapl_msr snd_seq_device intel_rapl_common rapl snd_pcm vmw_balloon ip_set rfkill nf_tables nfnetlink joydev snd_timer pcspkr qrtr snd soundcore i2c_piix4 vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock vmw_vmci sunrpc binfmt_misc loop zram crct10dif_pclmul crc32_pclmul vmwgfx crc32c_intel nvme polyval_clmulni polyval_generic nvme_core ghash_clmulni_intel sha512_ssse3 serio_raw nvme_common vmxnet3 drm_ttm_helper ttm ata_generic pata_acpi scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse
CPU: 1 PID: 4096 Comm: firefox Not tainted 6.2.7-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 49 51 93 ff 0f 0b c3 cc cc cc cc 80 3d 75 28 af 01 00 75 85 48 c7 c7 00 ad 8d b3 c6 05 65 28 af 01 01 e8 26 51 93 ff <0f> 0b c3 cc cc cc cc 80 3d 50 28 af 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb10f07b37ce8 EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffffb10f07b37d10 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffffb38c1316 RDI: 00000000ffffffff
RBP: ffff948d8a718008 R08: 0000000000000000 R09: ffffb10f07b37b78
R10: 0000000000000003 R11: ffffffffb41447c8 R12: ffff948e455768a0
R13: ffff948e4a360000 R14: ffff948d447e08d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff948e7bd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f634f0fe990 CR3: 0000000059010001 CR4: 00000000003706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x7e/0x90 [vmwgfx]
 ttm_prime_refcount_release+0x3a/0x60 [vmwgfx]
 ttm_release_base+0x82/0xd0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x33e/0xb20
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x58/0x80
 ? do_syscall_64+0x67/0x80
 ? do_syscall_64+0x67/0x80
 ? do_syscall_64+0x67/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f638c8f9d81
Code: Unable to access opcode bytes at 0x7f638c8f9d57.
RSP: 002b:00007ffd02814fe8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f638c8f9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffffffffff40 R09: 0000000000000001
R10: 00007f633ec008f0 R11: 0000000000000206 R12: 0000000000000001
R13: 0000000000000000 R14: 00007ffd02815070 R15: 00007f637eece820
 </TASK>

WARNING: CPU: 2 PID: 22605 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: ppp_deflate bsd_comp ppp_async ppp_generic slhc tls wacom isofs snd_seq_dummy snd_hrtimer snd_seq snd_seq_device snd_timer snd soundcore vboxvideo drm_vram_helper nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink qrtr vboxsf sunrpc intel_rapl_msr intel_rapl_common binfmt_misc kvm_intel vfat fat kvm irqbypass joydev rapl pcspkr i2c_piix4 vboxguest loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni vmwgfx polyval_generic ghash_clmulni_intel e1000 sha512_ssse3 drm_ttm_helper video serio_raw ttm wmi ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 2 PID: 22605 Comm: RunProcess Not tainted 6.2.7-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 49 51 93 ff 0f 0b c3 cc cc cc cc 80 3d 75 28 af 01 00 75 85 48 c7 c7 00 ad 8d 85 c6 05 65 28 af 01 01 e8 26 51 93 ff <0f> 0b c3 cc cc cc cc 80 3d 50 28 af 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffbd3383effbc0 EFLAGS: 00010282
RAX: 0000000000000000 RBX: ffffbd3383effbe8 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffff858c1316 RDI: 00000000ffffffff
RBP: ffff9f2c40738008 R08: 0000000000000000 R09: ffffbd3383effa50
R10: 0000000000000003 R11: ffffffff861447c8 R12: ffff9f2b8a28dc00
R13: ffff9f2b8aac0000 R14: ffff9f2bbe8142d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9f2c8bf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005577a2f4e1f0 CR3: 0000000170500002 CR4: 00000000000706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x7e/0x90 [vmwgfx]
 ttm_prime_refcount_release+0x3d/0x60 [vmwgfx]
 ttm_release_base+0x85/0xd0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x33e/0xb20
 ? _raw_spin_unlock_irqrestore+0x23/0x40
 ? do_wait+0x19d/0x2f0
 do_group_exit+0x2d/0x80
 get_signal+0x9b4/0x9f0
 ? __pfx_child_wait_callback+0x10/0x10
 arch_do_signal_or_restart+0x3a/0x280
 exit_to_user_mode_prepare+0x117/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 ? sched_clock_cpu+0xb/0xc0
 ? __irq_exit_rcu+0x3d/0x140
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f17fdaf9577
Code: Unable to access opcode bytes at 0x7f17fdaf954d.
RSP: 002b:00007f17b4dfedf0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
RAX: fffffffffffffe00 RBX: 00007f17793b8160 RCX: 00007f17fdaf9577
RDX: 0000000000000000 RSI: 00007f17b4dfee2c RDI: 000000000000584c
RBP: 00007f178f08da60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 00007f17b4dfee2c
R13: 000000000000584d R14: 00007ffcdde0f480 R15: 00007f17b45ff000
 </TASK>

WARNING: CPU: 1 PID: 5680 at drivers/gpu/drm/vmwgfx/vmwgfx_cmdbuf.c:414 vmw_cmdbuf_ctx_process+0x1e0/0x270 [vmwgfx]
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr vboxvideo(OE) vboxnetadp(OE) vboxnetflt(OE) vboxdrv(OE) sunrpc binfmt_misc intel_rapl_msr intel_rapl_common kvm_intel kvm snd_intel8x0 snd_ac97_codec ac97_bus snd_seq irqbypass rapl snd_seq_device snd_pcm pcspkr snd_timer snd soundcore joydev i2c_piix4 loop zram vmwgfx crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic e1000 ghash_clmulni_intel drm_ttm_helper video ttm sha512_ssse3 serio_raw wmi vboxguest(OE) ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 1 PID: 5680 Comm: kworker/u8:6 Tainted: G           OE      6.2.7-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
Workqueue: events_unbound commit_work
RIP: 0010:vmw_cmdbuf_ctx_process+0x1e0/0x270 [vmwgfx]
Code: 66 18 49 89 4e 20 48 89 29 e9 1b ff ff ff 80 3d 60 94 03 00 00 75 9d 48 c7 c7 88 a0 5a c0 c6 05 50 94 03 00 01 e8 80 23 b8 e1 <0f> 0b 4c 89 f7 e8 b6 fb ff ff e9 f0 fe ff ff 80 3d 36 94 03 00 00
RSP: 0018:ffff9b2588647a98 EFLAGS: 00010282
RAX: 0000000000000000 RBX: ffff8c6380322c00 RCX: 0000000000000000
RDX: 0000000000000003 RSI: ffffffffa38c1316 RDI: 00000000ffffffff
RBP: ffff8c63969e7318 R08: 0000000000000000 R09: ffff9b2588647928
R10: 0000000000000003 R11: ffffffffa41447c8 R12: 0000000000000002
R13: ffff8c63ec588000 R14: ffff8c63969e7300 R15: ffff8c6380322c88
FS:  0000000000000000(0000) GS:ffff8c6497c80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000237c00a30000 CR3: 0000000006152004 CR4: 00000000000706e0
Call Trace:
 <TASK>
 vmw_cmdbuf_man_process+0x59/0x100 [vmwgfx]
 __vmw_cmdbuf_cur_flush+0xad/0xf0 [vmwgfx]
 vmw_cmdbuf_commit+0x68/0xd0 [vmwgfx]
 vmw_cmd_send_fence+0xd3/0x160 [vmwgfx]
 vmw_execbuf_fence_commands+0x58/0x110 [vmwgfx]
 vmw_kms_helper_validation_finish+0x70/0x170 [vmwgfx]
 vmw_du_helper_plane_update+0x319/0x3a0 [vmwgfx]
 vmw_stdu_plane_update_surface+0xdb/0x100 [vmwgfx]
 ? __pfx_vmw_stdu_surface_fifo_size_same_display+0x10/0x10 [vmwgfx]
 ? __pfx_vmw_stdu_surface_populate_update+0x10/0x10 [vmwgfx]
 vmw_stdu_primary_plane_atomic_update+0xb8/0x1c0 [vmwgfx]
 drm_atomic_helper_commit_planes+0xf6/0x200
 drm_atomic_helper_commit_tail+0x44/0x80
 commit_tail+0xd1/0x130
 process_one_work+0x1c8/0x3c0
 worker_thread+0x4d/0x380
 ? _raw_spin_lock_irqsave+0x23/0x50
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe9/0x110
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x2c/0x50
 </TASK>

WARNING: CPU: 0 PID: 2560 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink snd_seq_midi snd_seq_midi_event bnep qrtr intel_rapl_msr vmw_balloon btusb btrtl snd_ens1371 btbcm btintel btmtk bluetooth snd_ac97_codec snd_rawmidi gameport ac97_bus intel_rapl_common rfkill snd_seq snd_seq_device joydev pcspkr snd_pcm snd_timer vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport snd vsock soundcore vmw_vmci i2c_piix4 sunrpc binfmt_misc loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 nvme vmwgfx serio_raw nvme_core drm_ttm_helper ttm vmxnet3 nvme_common ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 2560 Comm: TeamViewer Not tainted 6.2.7-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 49 51 93 ff 0f 0b c3 cc cc cc cc 80 3d 75 28 af 01 00 75 85 48 c7 c7 00 ad 8d b4 c6 05 65 28 af 01 01 e8 26 51 93 ff <0f> 0b c3 cc cc cc cc 80 3d 50 28 af 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffff9f52c48cbc40 EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffff9f52c48cbc68 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffffb48c1316 RDI: 00000000ffffffff
RBP: ffff8a5488080008 R08: 0000000000000000 R09: ffff9f52c48cbad0
R10: 0000000000000003 R11: ffffffffb51447c8 R12: ffff8a54acb1b540
R13: ffff8a548b410000 R14: ffff8a54899f1ad0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8a57afc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7f30010c58 CR3: 00000001058c6000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x7e/0x90 [vmwgfx]
 ttm_prime_refcount_release+0x3d/0x60 [vmwgfx]
 ttm_release_base+0x85/0xd0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x33e/0xb20
 do_group_exit+0x2d/0x80
 get_signal+0x9b4/0x9f0
 arch_do_signal_or_restart+0x3a/0x280
 exit_to_user_mode_prepare+0x117/0x1f0
 irqentry_exit_to_user_mode+0x5/0x30
 asm_exc_page_fault+0x22/0x30
RIP: 0033:0x4f2aa6
Code: Unable to access opcode bytes at 0x4f2a7c.
RSP: 002b:00007ffecfad6ea0 EFLAGS: 00010202
RAX: 0000000005760dd0 RBX: 0000000000000001 RCX: 0000000000000006
RDX: 0000000003ab4010 RSI: 0000000000000001 RDI: 0000000005760dd0
RBP: 00007ffecfad6ed0 R08: 0000000000000001 R09: 00000000ffffffff
R10: 0000000000000001 R11: 9a52cb0c6cffe2c6 R12: 0000000005760dd0
R13: 00000000057b91ac R14: 00007ffecfad7098 R15: 0000000000000002
 </TASK>

WARNING: CPU: 0 PID: 2510 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput isofs snd_seq_dummy snd_hrtimer snd_seq_midi snd_seq_midi_event bnep btusb btrtl btbcm btintel btmtk bluetooth snd_ens1371 nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 snd_ac97_codec nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject snd_rawmidi nft_ct gameport ac97_bus snd_seq nft_chain_nat nf_nat nf_conntrack snd_seq_device nf_defrag_ipv6 nf_defrag_ipv4 intel_rapl_msr intel_rapl_common snd_pcm rapl vmw_balloon ip_set snd_timer nf_tables snd nfnetlink rfkill joydev pcspkr soundcore i2c_piix4 qrtr vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock vmw_vmci sunrpc binfmt_misc loop zram nvme vmwgfx nvme_core crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 serio_raw drm_ttm_helper vmxnet3 ttm nvme_common ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 2510 Comm: firefox Not tainted 6.2.7-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 49 51 93 ff 0f 0b c3 cc cc cc cc 80 3d 75 28 af 01 00 75 85 48 c7 c7 00 ad 8d a8 c6 05 65 28 af 01 01 e8 26 51 93 ff <0f> 0b c3 cc cc cc cc 80 3d 50 28 af 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffa41dc3ed3ce0 EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffffa41dc3ed3d08 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffffa88c1316 RDI: 00000000ffffffff
RBP: ffff8d1ba3538008 R08: 0000000000000000 R09: ffffa41dc3ed3b70
R10: 0000000000000003 R11: ffffffffa91447c8 R12: ffff8d1b45a101e0
R13: ffff8d1c4e450000 R14: ffff8d1ba348bed0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8d1c7bc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0be9509db8 CR3: 0000000001156006 CR4: 00000000003706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x7e/0x90 [vmwgfx]
 ttm_prime_refcount_release+0x3a/0x60 [vmwgfx]
 ttm_release_base+0x82/0xd0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x33e/0xb20
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x58/0x80
 ? sched_clock_cpu+0xb/0xc0
 ? __irq_exit_rcu+0x3d/0x140
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f73564f9d81
Code: Unable to access opcode bytes at 0x7f73564f9d57.
RSP: 002b:00007fffaa1050b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f733a309980 RCX: 00007f73564f9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 00007fffaa105130 R08: ffffffffffffff40 R09: 00007f7312e017d8
R10: 00007f7356200130 R11: 0000000000000206 R12: 00007fffaa105118
R13: 0000000000000000 R14: 0000000000000000 R15: 00007f733a309980
 </TASK>

WARNING: CPU: 0 PID: 517 at drivers/gpu/drm/vmwgfx/vmwgfx_cmdbuf.c:414 vmw_cmdbuf_ctx_process+0x1e0/0x270 [vmwgfx]
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer vboxvideo drm_vram_helper xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nf_nat_tftp nf_conntrack_tftp bridge stp llc nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security ip_set nf_tables rfkill nfnetlink ip6table_filter iptable_filter qrtr sunrpc binfmt_misc intel_rapl_msr intel_rapl_common snd_intel8x0 snd_ac97_codec joydev ac97_bus rapl snd_seq snd_seq_device snd_pcm pcspkr snd_timer snd soundcore vboxguest i2c_piix4 loop zram vmwgfx crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic drm_ttm_helper ghash_clmulni_intel video ttm sha512_ssse3 e1000 serio_raw wmi ata_generic pata_acpi scsi_dh_rdac scsi_dh_emc
 scsi_dh_alua ip6_tables ip_tables dm_multipath fuse
CPU: 0 PID: 517 Comm: kworker/u8:6 Not tainted 6.2.7-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
Workqueue: events_unbound commit_work
RIP: 0010:vmw_cmdbuf_ctx_process+0x1e0/0x270 [vmwgfx]
Code: 66 18 49 89 4e 20 48 89 29 e9 1b ff ff ff 80 3d 60 94 03 00 00 75 9d 48 c7 c7 88 60 50 c0 c6 05 50 94 03 00 01 e8 80 63 c2 c2 <0f> 0b 4c 89 f7 e8 b6 fb ff ff e9 f0 fe ff ff 80 3d 36 94 03 00 00
RSP: 0018:ffffbbbfc082fa98 EFLAGS: 00010282
RAX: 0000000000000000 RBX: ffff9c9a890f7400 RCX: 0000000000000000
RDX: 0000000000000003 RSI: ffffffff848c1316 RDI: 00000000ffffffff
RBP: ffff9c9b12116618 R08: 0000000000000000 R09: ffffbbbfc082f928
R10: 0000000000000003 R11: ffffffff851447c8 R12: 0000000000000002
R13: ffff9c9b12116500 R14: ffff9c9b12116600 R15: ffff9c9a890f7488
FS:  0000000000000000(0000) GS:ffff9c9b97c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3fcc029238 CR3: 00000001c40dc006 CR4: 00000000000706f0
Call Trace:
 <TASK>
 vmw_cmdbuf_man_process+0x59/0x100 [vmwgfx]
 __vmw_cmdbuf_cur_flush+0xad/0xf0 [vmwgfx]
 vmw_cmdbuf_commit+0x68/0xd0 [vmwgfx]
 vmw_cmd_send_fence+0xd3/0x160 [vmwgfx]
 vmw_execbuf_fence_commands+0x58/0x110 [vmwgfx]
 vmw_kms_helper_validation_finish+0x70/0x170 [vmwgfx]
 vmw_du_helper_plane_update+0x319/0x3a0 [vmwgfx]
 vmw_stdu_plane_update_surface+0xdb/0x100 [vmwgfx]
 ? __pfx_vmw_stdu_surface_fifo_size_same_display+0x10/0x10 [vmwgfx]
 ? __pfx_vmw_stdu_surface_populate_update+0x10/0x10 [vmwgfx]
 vmw_stdu_primary_plane_atomic_update+0xb8/0x1c0 [vmwgfx]
 drm_atomic_helper_commit_planes+0xf6/0x200
 drm_atomic_helper_commit_tail+0x44/0x80
 commit_tail+0xd1/0x130
 process_one_work+0x1c8/0x3c0
 worker_thread+0x4d/0x380
 ? _raw_spin_lock_irqsave+0x23/0x50
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe9/0x110
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x2c/0x50
 </TASK>

WARNING: CPU: 0 PID: 2350 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common snd_usb_audio videodev snd_usbmidi_lib snd_hwdep mc tun uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr snd_seq_midi snd_seq_midi_event bnep vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock sunrpc binfmt_misc vmw_balloon snd_ens1371 btusb snd_ac97_codec btrtl intel_rapl_msr btbcm btintel snd_rawmidi btmtk gameport ac97_bus bluetooth intel_rapl_common snd_seq snd_seq_device snd_pcm joydev rfkill pcspkr snd_timer vmw_vmci snd soundcore i2c_piix4 loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme ghash_clmulni_intel sha512_ssse3 nvme_core vmwgfx serio_raw nvme_common vmxnet3
 drm_ttm_helper ttm ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 2350 Comm: zoom Not tainted 6.2.7-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 49 51 93 ff 0f 0b c3 cc cc cc cc 80 3d 75 28 af 01 00 75 85 48 c7 c7 00 ad 8d 82 c6 05 65 28 af 01 01 e8 26 51 93 ff <0f> 0b c3 cc cc cc cc 80 3d 50 28 af 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffa22944bb7bd0 EFLAGS: 00010282
RAX: 0000000000000000 RBX: ffffa22944bb7bf8 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffff828c1316 RDI: 00000000ffffffff
RBP: ffff9707294b4008 R08: 0000000000000000 R09: ffffa22944bb7a60
R10: 0000000000000003 R11: ffffffff831447c8 R12: ffff970686e06660
R13: ffff97068b460000 R14: ffff97071b2a9cd0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff9707b7c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8c61fe1f30 CR3: 000000005973c000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x7e/0x90 [vmwgfx]
 ttm_prime_refcount_release+0x3d/0x60 [vmwgfx]
 ttm_release_base+0x85/0xd0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x33e/0xb20
 do_group_exit+0x2d/0x80
 get_signal+0x9b4/0x9f0
 ? __pfx_child_wait_callback+0x10/0x10
 arch_do_signal_or_restart+0x3a/0x280
 exit_to_user_mode_prepare+0x117/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f0640af9577
Code: Unable to access opcode bytes at 0x7f0640af954d.
RSP: 002b:00007f062b5fd640 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
RAX: fffffffffffffe00 RBX: 00007f062b5fd6c0 RCX: 00007f0640af9577
RDX: 0000000000000000 RSI: 00007f062b5fd6c0 RDI: 0000000000000905
RBP: 00007f062b5fd700 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: aaaaaaaaaaaaaaaa
R13: 7fffffffffffffff R14: 0000000000000905 R15: 8000000000000001
 </TASK>

WARNING: CPU: 3 PID: 5989 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer vboxvideo(OE) rfkill nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr sunrpc binfmt_misc snd_intel8x0 snd_ac97_codec ac97_bus intel_rapl_msr snd_seq snd_seq_device snd_pcm snd_timer intel_rapl_common snd pcspkr joydev i2c_piix4 soundcore loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 serio_raw vmwgfx e1000 drm_ttm_helper vboxguest(OE) ttm video wmi ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 3 PID: 5989 Comm: WRScene~ilder#1 Tainted: G           OE      6.2.7-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 49 51 93 ff 0f 0b c3 cc cc cc cc 80 3d 75 28 af 01 00 75 85 48 c7 c7 00 ad 8d 8d c6 05 65 28 af 01 01 e8 26 51 93 ff <0f> 0b c3 cc cc cc cc 80 3d 50 28 af 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb9bd4aba7bd8 EFLAGS: 00010282
RAX: 0000000000000000 RBX: ffffb9bd4aba7c00 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffff8d8c1316 RDI: 00000000ffffffff
RBP: ffff984d1ca1c008 R08: 0000000000000000 R09: ffffb9bd4aba7a68
R10: 0000000000000003 R11: ffffffff8e1447c8 R12: ffff984e6f121000
R13: ffff984c0b090000 R14: ffff984e546d28d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff984f0fd80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb859075000 CR3: 00000000aa7aa000 CR4: 00000000000506e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x7e/0x90 [vmwgfx]
 ttm_prime_refcount_release+0x3d/0x60 [vmwgfx]
 ttm_release_base+0x85/0xd0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x207/0x250
 drm_release+0x64/0xd0
 __fput+0x91/0x250
 task_work_run+0x59/0x90
 do_exit+0x33e/0xb20
 ? _raw_spin_unlock+0x15/0x30
 ? futex_unqueue+0x38/0x60
 do_group_exit+0x2d/0x80
 get_signal+0x9b4/0x9f0
 arch_do_signal_or_restart+0x3a/0x280
 exit_to_user_mode_prepare+0x117/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 ? __irq_exit_rcu+0x3d/0x140
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7fb6d752792d
Code: Unable to access opcode bytes at 0x7fb6d7527903.
RSP: 002b:00007fb692876208 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007fb6a1f6c098 RCX: 00007fb6d752792d
RDX: 00000000ffffffff RSI: 0000000000000089 RDI: 00007fb6a1f6c098
RBP: 00007fb6d744a920 R08: 0000000000000000 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fb6d7527910 R14: 00007fb6a1f6c070 R15: 00007fb692876228
 </TASK>

WARNING: CPU: 0 PID: 2619 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput isofs snd_seq_dummy snd_hrtimer snd_seq_midi snd_seq_midi_event bnep btusb btrtl nf_conntrack_netbios_ns nf_conntrack_broadcast btbcm nft_fib_inet btintel nft_fib_ipv4 nft_fib_ipv6 nft_fib btmtk nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject bluetooth nft_ct nft_chain_nat snd_ens1371 nf_nat nf_conntrack snd_ac97_codec nf_defrag_ipv6 nf_defrag_ipv4 snd_rawmidi gameport ac97_bus snd_seq snd_seq_device snd_pcm intel_rapl_msr intel_rapl_common ip_set rapl vmw_balloon nf_tables nfnetlink snd_timer joydev snd pcspkr rfkill qrtr soundcore i2c_piix4 vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock vmw_vmci sunrpc binfmt_misc loop zram vmwgfx nvme crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme_core ghash_clmulni_intel drm_ttm_helper sha512_ssse3 vmxnet3 serio_raw ttm nvme_common ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 2619 Comm: firefox Not tainted 6.2.7-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 49 51 93 ff 0f 0b c3 cc cc cc cc 80 3d 75 28 af 01 00 75 85 48 c7 c7 00 ad 8d 86 c6 05 65 28 af 01 01 e8 26 51 93 ff <0f> 0b c3 cc cc cc cc 80 3d 50 28 af 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb303c2457c10 EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffffb303c2457c38 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffff868c1316 RDI: 00000000ffffffff
RBP: ffff96c904c18008 R08: 0000000000000000 R09: ffffb303c2457aa0
R10: 0000000000000003 R11: ffffffff871447c8 R12: ffff96c905279c60
R13: ffff96c909ba0000 R14: ffff96c9050a84d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff96c97dc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8ea9b18350 CR3: 000000000883e006 CR4: 00000000003706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x7e/0x90 [vmwgfx]
 ttm_prime_refcount_release+0x3a/0x60 [vmwgfx]
 ttm_release_base+0x82/0xd0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x33e/0xb20
 ? __pfx_thread_stack_free_rcu+0x10/0x10
 ? __call_rcu_common.constprop.0+0x11d/0x670
 do_group_exit+0x2d/0x80
 get_signal+0x9b4/0x9f0
 arch_do_signal_or_restart+0x3a/0x280
 exit_to_user_mode_prepare+0x117/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7fb404cafe5c
Code: Unable to access opcode bytes at 0x7fb404cafe32.
RSP: 002b:00007fff6e189a40 EFLAGS: 00000246 ORIG_RAX: 00000000000000ea
RAX: 0000000000000000 RBX: 0000000000000a3b RCX: 00007fb404cafe5c
RDX: 000000000000000f RSI: 0000000000000a3b RDI: 0000000000000a3b
RBP: 00007fff6e189a90 R08: 0000000000000000 R09: 00007fb3dc5768f0
R10: 0000000000000008 R11: 0000000000000246 R12: 000000000000000f
R13: 0000000000000001 R14: 0000000000000001 R15: 00007fff6e18a1a0
 </TASK>