Backtrace

WARNING: CPU: 3 PID: 2683 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nf_nat_tftp nf_conntrack_tftp bridge stp llc nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security rfkill ip_set nf_tables nfnetlink ip6table_filter iptable_filter qrtr vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock sunrpc binfmt_misc snd_hda_codec_generic intel_rapl_msr ledtrig_audio intel_rapl_common snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi rapl snd_hda_codec snd_hda_core vmw_balloon snd_hwdep snd_seq pcspkr joydev snd_seq_device snd_pcm pktcdvd snd_timer i2c_piix4 snd soundcore vmw_vmci loop zram crct10dif_pclmul crc32_pclmul
 crc32c_intel polyval_clmulni polyval_generic vmwgfx ghash_clmulni_intel sha512_ssse3 serio_raw vmxnet3 vmw_pvscsi drm_ttm_helper ata_generic ttm pata_acpi scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse
CPU: 3 PID: 2683 Comm: Xwayland Tainted: G S                 6.1.18-200.fc37.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 12/12/2018
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 e9 ab 9f ff 0f 0b c3 cc cc cc cc 80 3d 91 d4 bd 01 00 75 85 48 c7 c7 68 40 76 9d c6 05 81 d4 bd 01 01 e8 c6 ab 9f ff <0f> 0b c3 cc cc cc cc 80 3d 6c d4 bd 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffa27d84c8fcf8 EFLAGS: 00010296
RAX: 0000000000000026 RBX: ffffa27d84c8fd18 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffff9d74aa5b RDI: 00000000ffffffff
RBP: ffff8f16c9b34008 R08: 0000000000000000 R09: ffffa27d84c8fb80
R10: 0000000000000003 R11: ffffffff9e147448 R12: ffff8f171e226ae0
R13: ffff8f16ccd20000 R14: ffff8f1706cd16d0 R15: dead000000000100
FS:  0000000000000000(0000) GS:ffff8f1ddfd80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000560787ee7000 CR3: 000000012914c002 CR4: 00000000001706e0
Call Trace:
 <TASK>
 vmw_user_surface_base_release+0x5e/0x70 [vmwgfx]
 ttm_prime_refcount_release+0x2c/0x40 [vmwgfx]
 ttm_release_base+0x72/0xa0 [vmwgfx]
 ttm_ref_object_release+0xb6/0xd0 [vmwgfx]
 ttm_object_file_release+0x39/0x90 [vmwgfx]
 vmw_postclose+0x15/0x20 [vmwgfx]
 drm_file_free.part.0+0x204/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x347/0xb20
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x58/0x80
 ? do_user_addr_fault+0x1ef/0x690
 ? syscall_exit_to_user_mode+0x17/0x40
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fdd09642d81
Code: Unable to access opcode bytes at 0x7fdd09642d57.
RSP: 002b:00007ffdf6b56058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007fdd0973ba00 RCX: 00007fdd09642d81
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: fffffffffffffd18 R09: 0000000000000000
R10: 00007ffdf6b55ae0 R11: 0000000000000246 R12: 00007fdd0973ba00
R13: 0000000000000000 R14: 00007fdd097412e8 R15: 00007fdd09741300
 </TASK>