Backtrace

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor write access in kernel mode
#PF: error_code(0x0002) - not-present page
PGD 23fc97067 P4D 23fc97067 PUD 0 
Oops: 0002 [#1] SMP NOPTI
CPU: 0 PID: 22322 Comm: code-oss Tainted: G           OE     5.11.18-300.fc34.x86_64 #1
Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./B450M-HDV, BIOS P1.20 10/05/2018
RIP: 0010:rb_erase+0x23f/0x350
Code: 84 90 00 00 00 48 89 72 08 48 85 f6 75 4c a8 01 0f 85 7b fe ff ff c3 48 8b 70 08 48 89 d1 48 83 c9 01 48 89 72 10 48 89 50 08 <48> 89 0e 48 8b 0a 48 89 08 48 89 02 48 83 e1 fc 74 62 48 3b 51 10
RSP: 0018:ffffbb4d436e7c48 EFLAGS: 00010082
RAX: ffffbb4d4315fa98 RBX: ffffbb4d436e7ce8 RCX: ffffbb4d4a147ce9
RDX: ffffbb4d4a147ce8 RSI: 0000000000000000 RDI: ffffbb4d436e7ce8
RBP: ffff9fb54ed5d3e0 R08: ffff9fb54ed5d3e0 R09: 0000000000000000
R10: 0000000000050e71 R11: 0000000000000000 R12: 0000000000000000
R13: ffff9fb54ed5d380 R14: 0000000000000000 R15: 00007ffc7f01ec38
FS:  00007ff99b182100(0000) GS:ffff9fb54ec00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 00000002a88b0000 CR4: 00000000003506f0
Call Trace:
 timerqueue_del+0x1e/0x40
 __remove_hrtimer+0x35/0x90
 hrtimer_try_to_cancel.part.0+0x9a/0xd0
 hrtimer_cancel+0x1d/0x40
 futex_wait+0x1f8/0x220
 ? __hrtimer_init+0xc0/0xc0
 do_futex+0x15e/0xb20
 ? eventfd_read+0xd8/0x2c0
 ? wake_up_q+0xa0/0xa0
 __x64_sys_futex+0x73/0x1b0
 do_syscall_64+0x33/0x40
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x7ff99d9031a8
Code: 88 ad 00 00 00 e8 78 34 00 00 8b 74 24 30 45 31 c0 4d 89 f2 89 44 24 34 41 b9 ff ff ff ff 31 d2 4c 89 ff b8 ca 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 bc 00 00 00 8b 7c 24 34 e8 a3 34 00 00 48
RSP: 002b:00007ffc7f01ea10 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: ffffffffffffffda RBX: 00007ffc7f01ea70 RCX: 00007ff99d9031a8
RDX: 0000000000000000 RSI: 0000000000000089 RDI: 00007ffc7f01ec38
RBP: 00007ffc7f01ec10 R08: 0000000000000000 R09: 00000000ffffffff
R10: 00007ffc7f01eae0 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc7f01ebe8 R14: 00007ffc7f01eae0 R15: 00007ffc7f01ec38
Modules linked in: snd_seq_dummy snd_hrtimer rfcomm hid_logitech_hidpp uhid nf_conntrack_netlink xt_addrtype br_netfilter xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT overlay nf_nat_tftp nf_conntrack_tftp bridge stp llc nft_masq nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security ip_set nf_tables nfnetlink ip6table_filter ip6_tables iptable_filter cmac bnep sunrpc snd_hda_codec_realtek snd_hda_codec_generic ledtrig_audio snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg soundwire_intel intel_rapl_msr soundwire_generic_allocation ppdev snd_soc_core snd_compress intel_rapl_common snd_pcm_dmaengine soundwire_cadence snd_usb_audio snd_hda_codec btusb edac_mce_amd btrtl kvm_amd
 snd_hda_core btbcm snd_usbmidi_lib ac97_bus btintel snd_hwdep snd_rawmidi kvm bluetooth snd_seq snd_seq_device irqbypass rapl snd_pcm uvcvideo snd_timer snd videobuf2_vmalloc ecdh_generic pcspkr videobuf2_memops rfkill wmi_bmof videobuf2_v4l2 k10temp i2c_piix4 ecc videobuf2_common soundcore xpad joydev ff_memless parport_pc parport gpio_amdpt gpio_generic acpi_cpufreq v4l2loopback(OE) videodev mc zram ip_tables dm_crypt amdgpu drm_ttm_helper ttm iommu_v2 gpu_sched i2c_algo_bit drm_kms_helper crct10dif_pclmul crc32_pclmul cec crc32c_intel drm ghash_clmulni_intel nvme sp5100_tco ccp r8169 nvme_core wmi pinctrl_amd fuse
CR2: 0000000000000000