Backtrace

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#2] PREEMPT SMP PTI
CPU: 0 PID: 3871 Comm: Xwayland Tainted: G      D W         5.17.5-300.fc36.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
RIP: 0010:drm_gem_object_free+0xc/0x20
Code: 44 00 00 48 8b bf e0 05 00 00 e9 3f fe 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 8b 87 40 01 00 00 <48> 8b 00 48 85 c0 74 06 e9 f7 26 79 00 cc 0f 0b c3 cc 66 90 0f 1f
RSP: 0018:ffffad48c4eabd98 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffad48c4eabdb8 RCX: 0000000000000001
RDX: ffff8ebf30706278 RSI: ffff8ebf5ef74b6a RDI: ffff8ec007fadc00
RBP: ffff8ebf03f82bc8 R08: ffff8ebf5ef74c88 R09: ffff8ec006f59150
R10: 0000000000000003 R11: ffff8ebf5ef74b68 R12: ffff8ebf306ecc00
R13: ffff8ec007a24000 R14: ffff8ebf26b7c2d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8ec099c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000003ce10006 CR4: 00000000000706f0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5d/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2f/0x40 [vmwgfx]
 ttm_release_base+0x74/0xa0 [vmwgfx]
 ttm_ref_object_release+0xa2/0xb0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x65/0x110
 __fput+0x91/0x250
 task_work_run+0x5c/0x90
 do_exit+0x31d/0xad0
 make_task_dead+0x51/0x60
 rewind_stack_and_make_dead+0x17/0x17
RIP: 0033:0x7f6ae18a91bf
Code: Unable to access opcode bytes at RIP 0x7f6ae18a9195.
RSP: 002b:00007ffe1ad87800 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6ae18a91bf
RDX: 00007ffe1ad878a0 RSI: 000000004008644a RDI: 000000000000000c
RBP: 00007ffe1ad878a0 R08: 0000560d1477ddf0 R09: 0000000000000000
R10: 00000000ffffff9d R11: 0000000000000246 R12: 000000004008644a
R13: 000000000000000c R14: 0000560d14797e30 R15: 0000560d147979e0
 </TASK>
Modules linked in: tls uinput isofs snd_seq_dummy snd_hrtimer nls_utf8 cifs cifs_arc4 cifs_md4 dns_resolver fscache netfs vboxvideo drm_vram_helper nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr vboxsf sunrpc binfmt_misc vfat fat snd_intel8x0 snd_ac97_codec ac97_bus snd_seq snd_seq_device snd_pcm intel_rapl_msr intel_rapl_common rapl snd_timer pcspkr joydev snd soundcore i2c_piix4 vboxguest zram mptsas scsi_transport_sas nvme nvme_core mptspi scsi_transport_spi crct10dif_pclmul crc32_pclmul mptscsih crc32c_intel vmwgfx mptbase ghash_clmulni_intel virtio_scsi serio_raw hid_multitouch e1000 drm_ttm_helper ttm ata_generic pata_acpi video ip6_tables ip_tables ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000