Backtrace

BUG: unable to handle page fault for address: ffffef04f6800008
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: Oops: 0000 [#1] SMP PTI
CPU: 3 UID: 1000 PID: 21226 Comm: baobab Not tainted 6.18.3-100.fc42.x86_64 #1 PREEMPT(lazy) 
Hardware name: Microsoft Corporation Surface Pro 3/Surface Pro 3, BIOS 3.11.2150 04/26/2017
RIP: 0010:kfree+0x69/0x4a0
Code: 80 4c 01 d0 0f 82 49 04 00 00 48 c7 c2 00 00 00 80 48 2b 15 21 4a 82 01 48 01 d0 48 c1 e8 0c 48 c1 e0 06 48 03 05 ff 49 82 01 <48> 8b 50 08 49 89 c4 f6 c2 01 0f 85 0f 03 00 00 0f 1f 44 00 00 41
RSP: 0018:ffffcae6c9213780 EFLAGS: 00010286
RAX: ffffef04f6800000 RBX: 00000000000002a0 RCX: 000000000000e003
RDX: 0000763d00000000 RSI: ffffffffc086e006 RDI: 00000000200000c0
RBP: ffffcae6c92137c0 R08: 0000000000000000 R09: ffffffffc086e006
R10: 00000000200000c0 R11: ffff89c380044800 R12: 0000000000000000
R13: 00000000000002d8 R14: 00000000000000fe R15: ffff89c31d6f1fc0
FS:  00007fc810362680(0000) GS:ffff89c4329a9000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffef04f6800008 CR3: 000000008b9a0002 CR4: 00000000001726f0
Call Trace:
 <TASK>
 eb_relocate_parse_slow+0x216/0x360 [i915]
 i915_gem_do_execbuffer+0x5bf/0x1140 [i915]
 ? rmqueue_bulk+0x977/0x11d0
 i915_gem_execbuffer2_ioctl+0x12b/0x250 [i915]
 ? __pfx_i915_gem_execbuffer2_ioctl+0x10/0x10 [i915]
 drm_ioctl_kernel+0xae/0x100
 drm_ioctl+0x2a8/0x550
 ? __pfx_i915_gem_execbuffer2_ioctl+0x10/0x10 [i915]
 __x64_sys_ioctl+0x97/0xe0
 do_syscall_64+0x7e/0x7f0
 ? __x64_sys_ioctl+0xb1/0xe0
 ? do_syscall_64+0xb6/0x7f0
 ? count_memcg_events+0xd6/0x220
 ? handle_mm_fault+0x248/0x360
 ? do_user_addr_fault+0x21a/0x690
 ? irqentry_exit_to_user_mode+0x2c/0x1c0
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fc8125000ad
Code: 04 25 28 00 00 00 48 89 45 c8 31 c0 48 8d 45 10 c7 45 b0 10 00 00 00 48 89 45 b8 48 8d 45 d0 48 89 45 c0 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1a 48 8b 45 c8 64 48 2b 04 25 28 00 00 00
RSP: 002b:00007fff73c89fc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fff73c8a150 RCX: 00007fc8125000ad
RDX: 00007fff73c8a150 RSI: 0000000040406469 RDI: 0000000000000013
RBP: 00007fff73c8a010 R08: 000055df7f1e48c0 R09: 000055df7f2543a0
R10: 000055df7f395190 R11: 0000000000000246 R12: 0000000000000013
R13: 000055df7f2543a0 R14: 0000000000000000 R15: 00000000000001c0
 </TASK>
Modules linked in: ses enclosure scsi_transport_sas uas usb_storage uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct bnep nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 btusb nf_defrag_ipv4 btmtk btrtl btbcm btintel bluetooth nf_tables qrtr intel_rapl_msr intel_rapl_common x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm mwifiex_pcie mei_pxp iTCO_wdt snd_hda_codec_alc269 mwifiex intel_pmc_bxt uvcvideo mei_hdcp snd_hda_scodec_component snd_hda_codec_realtek_lib iTCO_vendor_support hid_sensor_als sunrpc snd_hda_codec_generic snd_hda_codec_intelhdmi hid_sensor_accel_3d snd_hda_codec_hdmi hid_sensor_incl_3d uvc hid_sensor_gyro_3d hid_sensor_magn_3d snd_hda_intel hid_sensor_rotation snd_hda_codec videobuf2_vmalloc hid_sensor_trigger irqbypass rapl cfg80211 intel_cstate hid_sensor_iio_common videobuf2_memops snd_hda_core snd_intel_dspcfg
 industrialio_triggered_buffer snd_intel_sdw_acpi videobuf2_v4l2 snd_hwdep pcspkr mei_me i2c_i801 kfifo_buf intel_uncore snd_seq industrialio snd_seq_device snd_pcm videobuf2_common mei i2c_smbus videodev rfkill snd_timer lpc_ich snd mc soundcore binfmt_misc surfacepro3_button intel_pmc_core pmt_telemetry pmt_discovery vfat soc_button_array pmt_class fat dw_dmac intel_pmc_ssram_telemetry intel_vsec joydev loop nfnetlink zram lz4hc_compress lz4_compress i915 i2c_algo_bit drm_buddy ttm drm_display_helper video hid_sensor_hub polyval_clmulni ghash_clmulni_intel cec i2c_hid_acpi i2c_hid wmi intel_oc_wdt pinctrl_lynxpoint hid_multitouch i2c_dev fuse
CR2: ffffef04f6800008