Backtrace

WARNING: CPU: 0 PID: 2911 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput isofs snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack snd_seq_midi snd_seq_midi_event nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink snd_ens1371 snd_ac97_codec bnep snd_rawmidi gameport ac97_bus snd_seq btusb btrtl snd_seq_device snd_pcm btbcm btintel intel_rapl_msr qrtr intel_rapl_common btmtk snd_timer bluetooth rapl snd soundcore rfkill vmw_balloon pcspkr i2c_piix4 joydev vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock vmw_vmci sunrpc binfmt_misc zram crct10dif_pclmul vmwgfx crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme ghash_clmulni_intel sha512_ssse3 nvme_core serio_raw vmxnet3 drm_ttm_helper ttm nvme_common ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 2911 Comm: firefox Not tainted 6.1.14-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 0f 33 67 00 0f 0b c3 cc cc cc cc 80 3d 4f d4 bd 01 00 75 85 48 c7 c7 30 31 76 90 c6 05 3f d4 bd 01 01 e8 ec 32 67 00 <0f> 0b c3 cc cc cc cc 80 3d 2a d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb86d0007bd20 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffff8cc913459600 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff90749b33 RDI: 00000000ffffffff
RBP: ffff8cc915167400 R08: 0000000000000000 R09: ffffb86d0007bbc0
R10: 0000000000000003 R11: ffff8cc97ffc3da8 R12: 0000000000000009
R13: 0000000000000001 R14: ffff8cc915167440 R15: ffff8cc912a2d718
FS:  0000000000000000(0000) GS:ffff8cc97be00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000559f57bc7f40 CR3: 0000000041748001 CR4: 00000000003706f0
Call Trace:
 <TASK>
 drm_gem_object_release_handle+0x50/0x60
 ? drm_gem_object_handle_put_unlocked+0xf0/0xf0
 idr_for_each+0x5d/0xc0
 drm_gem_release+0x1c/0x30
 drm_file_free.part.0+0x1e4/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x338/0xb00
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x58/0x80
 ? do_syscall_64+0x67/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f443e0d9d81
Code: Unable to access opcode bytes at 0x7f443e0d9d57.
RSP: 002b:00007fff45d73278 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f443e0d9d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffffffffff40 R09: 0000000000000001
R10: 1999999999999999 R11: 0000000000000206 R12: 0000000000000001
R13: 0000000000000000 R14: 00007fff45d73300 R15: 00007f443086a790
 </TASK>