Backtrace

BUG: Bad rss-counter state mm:00000000ef4b2ef9 type:MM_SWAPENTS val:-1
BUG: unable to handle page fault for address: 0000000000032b60
fbcon: Taking over console
#PF: supervisor write access in kernel mode
#PF: error_code(0x0002) - not-present page
PGD 0 P4D 0 
Oops: 0002 [#1] PREEMPT SMP PTI
CPU: 2 PID: 1027 Comm: gdm-session-wor Tainted: G    B              6.2.9-100.fc36.x86_64 #1
Hardware name: LENOVO 10ASA00YIH/, BIOS FCKT46AUS 12/16/2013
RIP: 0010:native_queued_spin_lock_slowpath+0x256/0x2b0
Code: 90 48 8b 55 00 48 85 d2 74 f5 eb e7 c1 ea 12 83 e0 03 83 ea 01 48 c1 e0 05 48 63 d2 48 05 00 2b 03 00 48 03 04 d5 c0 ea 98 af <48> 89 28 8b 45 08 85 c0 75 09 f3 90 8b 45 08 85 c0 74 f7 48 8b 55
RSP: 0018:ffffb8920144bc48 EFLAGS: 00010206
RAX: 0000000000032b60 RBX: ffff8db2ce3f0ba0 RCX: 00000000000c0000
RDX: 000000000000338e RSI: ffffffffaf8c0f46 RDI: ffffffffaf87ba29
RBP: ffff8db5cfb32b00 R08: ffffb8920144bdc0 R09: ffff8db2ce3f0a78
R10: ffffb8920144be48 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000002 R14: ffff8db2ccb53480 R15: ffffb8920144bd00
FS:  00007f1fa561c8c0(0000) GS:ffff8db5cfb00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000032b60 CR3: 0000000119aae002 CR4: 00000000001706e0
Call Trace:
 <TASK>
 _raw_spin_lock+0x30/0x40
 posix_lock_inode+0xb9/0xab0
 locks_remove_posix+0x187/0x1a0
 locks_remove_file+0x41/0x210
 __fput+0x64/0x250
 task_work_run+0x59/0x90
 exit_to_user_mode_prepare+0x1de/0x1f0
 syscall_exit_to_user_mode+0x17/0x40
 do_syscall_64+0x67/0x80
 ? exit_to_user_mode_prepare+0x180/0x1f0
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f1fa5d6e56b
Code: c3 66 0f 1f 44 00 00 f7 d8 89 05 10 3d 01 00 48 c7 c0 ff ff ff ff c3 0f 1f 84 00 00 00 00 00 f3 0f 1e fa b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d e5 3c 01 00 f7 d8 89 01 48 83
RSP: 002b:00007ffc07e07cd8 EFLAGS: 00000202 ORIG_RAX: 000000000000000b
RAX: 0000000000000000 RBX: 000055811bdf3b40 RCX: 00007f1fa5d6e56b
RDX: 0000000000000002 RSI: 0000000000006008 RDI: 00007f1f96859000
RBP: 00007ffc07e07f10 R08: 000055811bde54b0 R09: 000055811bdec320
R10: 000055811bdf88b0 R11: 0000000000000202 R12: 00007ffc07e07de8
R13: 00007ffc07e07e80 R14: 0000000000000000 R15: 000055811bdf3b40
 </TASK>
Modules linked in: tls snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink qrtr sunrpc binfmt_misc vfat fat squashfs loop intel_rapl_msr mei_hdcp iTCO_wdt intel_pmc_bxt mei_pxp ppdev at24 iTCO_vendor_support snd_hda_codec_realtek snd_hda_codec_generic snd_hda_codec_hdmi ledtrig_audio snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec intel_rapl_common snd_hda_core snd_hwdep joydev snd_seq x86_pkg_temp_thermal intel_powerclamp snd_seq_device coretemp rapl intel_cstate intel_uncore snd_pcm think_lmi pcspkr firmware_attributes_class mei_me snd_timer wmi_bmof mei snd i2c_i801 soundcore i2c_smbus lpc_ich parport_pc parport zram i915 crct10dif_pclmul crc32_pclmul drm_buddy crc32c_intel polyval_clmulni drm_display_helper polyval_generic cec
 ghash_clmulni_intel r8169 sha512_ssse3 ttm video wmi ip6_tables ip_tables fuse
CR2: 0000000000032b60