Backtrace

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 1 UID: 1000 PID: 4653 Comm: chrome:disk$1 Tainted: G          I        6.14.5-100.fc40.x86_64 #1
Tainted: [I]=FIRMWARE_WORKAROUND
Hardware name: LENOVO 80E4/Lenovo G40-80, BIOS B0CN93WW 07/23/2015
RIP: 0010:radeon_vm_fini+0x14d/0x250 [radeon]
Code: bf 60 01 00 00 e8 43 e8 f4 d4 83 f8 fc 74 13 85 c0 0f 84 45 ff ff ff 3d 00 fe ff ff 0f 85 04 01 00 00 48 8b 45 48 4c 8d 75 48 <48> 8b 10 48 8d 58 a8 4c 8d 6a a8 49 39 c6 74 2e 48 8d 7b 70 e8 1a
RSP: 0018:ffffacb0cb713be8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff8f34714a5200 RDI: ffff8f34714a5220
RBP: ffff8f34714a5200 R08: 0000000000000000 R09: 0000000000000002
R10: 0000000000000000 R11: ffff8f3496d21800 R12: ffff8f334cf54000
R13: ffff8f34714a5220 R14: ffff8f34714a5248 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8f3496c80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000003a82c006 CR4: 00000000003706f0
Call Trace:
 <TASK>
 radeon_driver_postclose_kms+0x164/0x180 [radeon]
 drm_file_free+0x21b/0x280
 drm_release+0x5e/0xd0
 __fput+0xe6/0x2a0
 task_work_run+0x5c/0x90
 do_exit+0x256/0x4b0
 do_group_exit+0x30/0x80
 get_signal+0x7e6/0x7f0
 arch_do_signal_or_restart+0x35/0x100
 syscall_exit_to_user_mode+0x126/0x210
 do_syscall_64+0x8e/0x160
 ? handle_mm_fault+0x20d/0x330
 ? do_user_addr_fault+0x2ca/0x7b0
 ? exc_page_fault+0x7e/0x1a0
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f8069530729
Code: Unable to access opcode bytes at 0x7f80695306ff.
RSP: 002b:00007f803f313e80 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 0000000000000000 RCX: 00007f8069530729
RDX: 0000000000000000 RSI: 0000000000000189 RDI: 00002ef4000428ac
RBP: 00007f803f313eb0 R08: 0000000000000000 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000001 R15: 00002ef4000428ac
 </TASK>
Modules linked in: uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr bnep sunrpc binfmt_misc vfat fat uvcvideo uvc btusb btrtl intel_rapl_msr mei_pxp videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 iTCO_wdt intel_pmc_bxt iTCO_vendor_support at24 mei_hdcp snd_hda_codec_conexant videobuf2_common intel_rapl_common snd_hda_codec_generic snd_hda_codec_hdmi snd_hda_intel x86_pkg_temp_thermal videodev snd_intel_dspcfg btintel snd_intel_sdw_acpi rtsx_usb_ms btbcm mc btmtk iwlmvm snd_hda_codec mac80211 memstick libarc4 snd_hda_core intel_powerclamp iwlwifi snd_hwdep coretemp bluetooth ideapad_laptop snd_seq sparse_keymap cfg80211 snd_seq_device rapl platform_profile snd_pcm intel_cstate rfkill snd_timer intel_uncore r8169 snd lpc_ich pcspkr i2c_i801 soundcore pktcdvd intel_pmc_core
 pmt_telemetry mei_me realtek pmt_class i2c_smbus intel_vsec mei joydev acpi_pad squashfs loop dm_multipath nfnetlink zram lz4hc_compress lz4_compress amdgpu amdxcp gpu_sched drm_panel_backlight_quirks i915 radeon drm_ttm_helper drm_buddy rtsx_usb_sdmmc ttm drm_exec mmc_core i2c_algo_bit drm_suballoc_helper polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 drm_display_helper sha1_ssse3 rtsx_usb cec video wmi serio_raw scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables fuse
CR2: 0000000000000000