Backtrace

BUG: unable to handle page fault for address: ffffc6ba2f13d708
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 0 PID: 2890 Comm: chrome Not tainted 6.0.5-200.fc36.x86_64 #1
Hardware name:  /DH61BR, BIOS BEH6110H.86A.0120.2013.1112.1412 11/12/2013
RIP: 0010:kfree+0x55/0x400
Code: d8 0f 82 c2 03 00 00 48 c7 c2 00 00 00 80 48 2b 15 a0 f4 50 01 48 01 d0 48 8b 0d 86 f4 50 01 48 c1 e8 0c 48 c1 e0 06 48 01 c8 <48> 8b 50 08 49 89 c4 f6 c2 01 0f 85 8e 02 00 00 0f 1f 44 00 00 49
RSP: 0018:ffff9f6242b57908 EFLAGS: 00010286
RAX: ffffc6ba2f13d700 RBX: 00001c0c04f5c000 RCX: ffffc49640000000
RDX: 00006cef40000000 RSI: ffffffffc050e25a RDI: 00001c0c04f5c000
RBP: ffff9f6242b57a18 R08: 0000000000000000 R09: 000000008010000f
R10: 0000000000000005 R11: 00000000007ffffc R12: 0000000000000380
R13: 0000000000000000 R14: ffff9f6242b57b10 R15: 000000000000002f
FS:  00007fd7eedc9e00(0000) GS:ffff931257600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc6ba2f13d708 CR3: 0000000196772003 CR4: 00000000001706f0
Call Trace:
 <TASK>
 eb_relocate_parse_slow+0x1ea/0x5a0 [i915]
 i915_gem_do_execbuffer+0x1140/0x2c30 [i915]
 i915_gem_execbuffer2_ioctl+0x115/0x270 [i915]
 ? i915_gem_do_execbuffer+0x2c30/0x2c30 [i915]
 drm_ioctl_kernel+0xa9/0x150
 drm_ioctl+0x22d/0x410
 ? i915_gem_do_execbuffer+0x2c30/0x2c30 [i915]
 __x64_sys_ioctl+0x90/0xd0
 do_syscall_64+0x5b/0x80
 ? native_flush_tlb_local+0x30/0x40
 ? flush_tlb_func+0x112/0x240
 ? sched_clock_cpu+0xb/0xc0
 ? __irq_exit_rcu+0x3d/0x140
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fd7f050748f
Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00
RSP: 002b:00007ffe85066f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ffe850670e0 RCX: 00007fd7f050748f
RDX: 00007ffe850670e0 RSI: 0000000040406469 RDI: 0000000000000018
RBP: 0000000000000018 R08: 0000000000000001 R09: 0000000000000008
R10: 0000000000000008 R11: 0000000000000246 R12: 00007ffe850670e0
R13: 000000000000003f R14: 0000000000001000 R15: 00001c0c00a94000
 </TASK>
Modules linked in: tls xt_nat veth xt_conntrack xt_MASQUERADE nf_conntrack_netlink xt_addrtype nft_compat br_netfilter bridge stp llc overlay uinput snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr sunrpc ath9k ath9k_common ath9k_hw mac80211 intel_rapl_msr vfat snd_hda_codec_realtek fat snd_hda_codec_generic intel_rapl_common ledtrig_audio ppdev mei_pxp x86_pkg_temp_thermal snd_hda_intel intel_powerclamp at24 iTCO_wdt coretemp mei_hdcp intel_pmc_bxt iTCO_vendor_support kvm_intel snd_intel_dspcfg snd_intel_sdw_acpi kvm snd_hda_codec libarc4 ath irqbypass rapl intel_cstate intel_uncore snd_hda_core joydev cfg80211 snd_hwdep snd_seq snd_seq_device rfkill snd_pcm parport_pc snd_timer parport mei_me snd mei soundcore lpc_ich i2c_i801 pcspkr
 i2c_smbus zram i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni drm_buddy uas drm_display_helper polyval_generic ghash_clmulni_intel usb_storage cec e1000e ttm video ip6_tables ip_tables fuse
CR2: ffffc6ba2f13d708