Backtrace

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#3] PREEMPT SMP NOPTI
CPU: 0 PID: 850 Comm: systemd-logind Tainted: G      D W         5.17.5-300.fc36.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20
Code: 44 00 00 48 8b bf e0 05 00 00 e9 3f fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 ff e0 0f 1f 00 cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffad69c1d3bdc0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffad69c1d3bde0 RCX: 0000000000000001
RDX: ffff9309d5affe78 RSI: ffff9309c17ba002 RDI: ffff930a0a5a5000
RBP: ffff9309c3822248 R08: ffff9309c17ba090 R09: ffff930ac6608990
R10: 0000000000000000 R11: ffff9309c17ba000 R12: ffff9309d5a73540
R13: ffff930ac21ee000 R14: ffff9309c3805cd0 R15: dead000000000100
FS:  00007f54c63efbc0(0000) GS:ffff930adbc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000113004005 CR4: 00000000000306f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x71/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x201/0x250
 drm_release+0x65/0x110
 __fput+0x8e/0x250
 task_work_run+0x59/0x90
 exit_to_user_mode_prepare+0x229/0x230
 syscall_exit_to_user_mode+0x18/0x40
 do_syscall_64+0x46/0x80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f54c6ff35fa
Code: b8 03 00 00 00 0f 05 48 3d 00 f0 ff ff 77 41 c3 48 83 ec 18 89 7c 24 0c e8 73 6f f8 ff 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 c3 6f f8 ff 8b 44 24
RSP: 002b:00007fff43fe7cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000017 RCX: 00007f54c6ff35fa
RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000017
RBP: 00007f54c63ef9e8 R08: 0000558d9060fa90 R09: 00007f54c704d380
R10: 00007fff43fe7aa4 R11: 0000000000000293 R12: 0000000000000000
R13: 0000558d905f16c0 R14: 0000000000000000 R15: 00007fff43fe7e10
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc snd_intel8x0 snd_ac97_codec ac97_bus snd_seq snd_seq_device intel_rapl_msr snd_pcm intel_rapl_common rapl joydev snd_timer e1000 pcspkr snd soundcore vboxguest i2c_piix4 zram dm_crypt vmwgfx crc32c_intel drm_ttm_helper serio_raw ata_generic ttm pata_acpi video ip6_tables ip_tables ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000