Backtrace

general protection fault, probably for non-canonical address 0xfffe98cebc4afd9c: 0000 [#1] PREEMPT SMP NOPTI
CPU: 3 PID: 3459 Comm: chrome Not tainted 5.16.20-200.fc35.x86_64 #1
Hardware name: Micro-Star International Co., Ltd. Prestige 15 A11SCX/MS-16S6, BIOS E16S6IMS.10C 11/20/2020
RIP: 0010:unlink_anon_vmas+0xe4/0x1e0
Code: cf fd ff 49 8b 56 40 48 85 d2 0f 85 6f ff ff ff 49 8b 46 38 83 68 34 01 eb a5 48 8b 0c 24 48 8b 81 88 00 00 00 48 85 c0 74 0f <83> 68 34 01 48 c7 81 88 00 00 00 00 00 00 00 48 85 ed 74 09 48 8d
RSP: 0018:ffffade203c77c38 EFLAGS: 00010282
RAX: fffe98cebc4afd68 RBX: ffff98cec47062c0 RCX: ffff98cec4706258
RDX: 0000000080400029 RSI: fffff4b98711c0c0 RDI: 0000000040000000
RBP: ffff98ce69d6cb58 R08: ffff98cec4703000 R09: 0000000080400028
R10: ffff98cec4703000 R11: 0000000000037800 R12: ffff98cec47062d0
R13: ffff98cec47062d0 R14: ffff98ce69d6cb58 R15: ffff98cec47062c0
FS:  0000000000000000(0000) GS:ffff98d577ac0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055fb2f8d6000 CR3: 000000010ac58003 CR4: 0000000000770ee0
PKRU: 55555558
Call Trace:
 <TASK>
 free_pgtables+0x93/0x100
 exit_mmap+0x95/0x1b0
 __mmput+0x4a/0x130
 do_exit+0x309/0xb40
 ? _raw_spin_unlock_irqrestore+0x25/0x40
 do_group_exit+0x33/0xa0
 get_signal+0xaf/0x9c0
 ? __hrtimer_init+0xc0/0xc0
 arch_do_signal_or_restart+0x109/0x740
 ? do_futex+0x14b/0x1f0
 ? __x64_sys_futex+0x63/0x1a0
 exit_to_user_mode_prepare+0x119/0x230
 syscall_exit_to_user_mode+0x18/0x40
 do_syscall_64+0x48/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f9c512db73a
Code: Unable to access opcode bytes at RIP 0x7f9c512db710.
RSP: 002b:00007ffed709f900 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 00007ffed709fa20 RCX: 00007f9c512db73a
RDX: 0000000000000000 RSI: 0000000000000089 RDI: 00007ffed709fbc8
RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000ffffffff
R10: 00007ffed709fa20 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffed709fbc8 R14: 0000000000000000 R15: 00007ffed709fb78
 </TASK>
Modules linked in: xt_nat veth xt_conntrack xt_MASQUERADE nf_conntrack_netlink nft_counter xt_addrtype nft_compat br_netfilter bridge stp llc uhid rfcomm snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set overlay nf_tables nfnetlink qrtr bnep sunrpc vfat fat squashfs loop snd_soc_skl_hda_dsp snd_soc_intel_hda_dsp_common snd_soc_hdac_hdmi snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_soc_dmic snd_sof_pci_intel_tgl snd_sof_intel_hda_common soundwire_intel soundwire_generic_allocation soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp intel_tcc_cooling iwlmvm snd_sof snd_soc_hdac_hda snd_hda_ext_core snd_soc_acpi_intel_match iTCO_wdt intel_pmc_bxt snd_soc_acpi iTCO_vendor_support mei_pxp mei_hdcp soundwire_bus mac80211
 pmt_telemetry pmt_class intel_rapl_msr x86_pkg_temp_thermal ledtrig_audio intel_powerclamp snd_soc_core coretemp snd_compress ac97_bus snd_pcm_dmaengine libarc4 kvm_intel snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi kvm snd_hda_codec snd_hda_core snd_hwdep snd_seq snd_seq_device irqbypass btusb intel_cstate uvcvideo snd_pcm btrtl intel_uncore iwlwifi pcspkr wmi_bmof btbcm snd_timer i2c_i801 videobuf2_vmalloc btintel snd msi_wmi videobuf2_memops i2c_smbus videobuf2_v4l2 soundcore bluetooth cfg80211 videobuf2_common mei_me mei idma64 videodev ecdh_generic mc rfkill joydev processor_thermal_device_pci_legacy processor_thermal_device processor_thermal_rfim thunderbolt processor_thermal_mbox apple_mfi_fastcharge intel_pmt processor_thermal_rapl intel_rapl_common intel_soc_dts_iosf igen6_edac int3403_thermal int340x_thermal_zone intel_hid int3400_thermal sparse_keymap acpi_pad acpi_tad acpi_thermal_rel zram ip_tables r8152 uas usb_storage mii hid_apple i915 nouveau
 drm_ttm_helper i2c_algo_bit ttm rtsx_pci_sdmmc drm_kms_helper mmc_core hid_multitouch crct10dif_pclmul cec crc32_pclmul crc32c_intel mxm_wmi drm ghash_clmulni_intel nvme rtsx_pci serio_raw ucsi_acpi typec_ucsi nvme_core i2c_hid_acpi typec i2c_hid video wmi pinctrl_tigerlake ipmi_devintf ipmi_msghandler fuse