Backtrace

general protection fault, probably for non-canonical address 0x2ea7ce2b0442908: 0000 [#1] PREEMPT SMP PTI
CPU: 2 PID: 3420 Comm: chrome Not tainted 6.0.5-200.fc36.x86_64 #1
Hardware name: TOSHIBA Satellite P75-A/Type2 - Board Product Name1, BIOS 1.60 12/04/2014
RIP: 0010:kfree+0x55/0x400
Code: d8 0f 82 c2 03 00 00 48 c7 c2 00 00 00 80 48 2b 15 a0 f4 50 01 48 01 d0 48 8b 0d 86 f4 50 01 48 c1 e8 0c 48 c1 e0 06 48 01 c8 <48> 8b 50 08 49 89 c4 f6 c2 01 0f 85 8e 02 00 00 0f 1f 44 00 00 49
RSP: 0018:ffffabbb46d778f0 EFLAGS: 00010207
RAX: 02ea7ce2b0442900 RBX: baa205aa910a42aa RCX: fffff30800000000
RDX: 0000710100000000 RSI: ffffffffc072c25a RDI: baa205aa910a42aa
RBP: ffffabbb46d77a00 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000005 R11: 00000000007ffffc R12: 0000000000000268
R13: 0000000000000000 R14: ffffabbb46d77af8 R15: 0000000000000018
FS:  00007fac1f76be00(0000) GS:ffff8f00d7280000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fabf4c01060 CR3: 000000021a7f6001 CR4: 00000000001706e0
Call Trace:
 <TASK>
 eb_relocate_parse_slow+0x1ea/0x5a0 [i915]
 i915_gem_do_execbuffer+0x1140/0x2c30 [i915]
 ? put_cpu_partial+0x6d/0xb0
 i915_gem_execbuffer2_ioctl+0x115/0x270 [i915]
 ? i915_gem_do_execbuffer+0x2c30/0x2c30 [i915]
 drm_ioctl_kernel+0xa9/0x150
 drm_ioctl+0x22d/0x410
 ? i915_gem_do_execbuffer+0x2c30/0x2c30 [i915]
 __x64_sys_ioctl+0x90/0xd0
 do_syscall_64+0x5b/0x80
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fac20f0748f
Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00
RSP: 002b:00007fff2c582b00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fff2c582c90 RCX: 00007fac20f0748f
RDX: 00007fff2c582c90 RSI: 0000000040406469 RDI: 0000000000000018
RBP: 0000000000000018 R08: 0000000000000001 R09: 0000000000000008
R10: 0000000000000008 R11: 0000000000000246 R12: 00007fff2c582c90
R13: 000000000000003f R14: 0000000000000800 R15: 00000e4c00362000
 </TASK>
Modules linked in: tls uas usb_storage rfcomm snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep ipheth sunrpc binfmt_misc btusb btrtl vfat btbcm btintel fat btmtk iwldvm bluetooth intel_rapl_msr intel_rapl_common mac80211 x86_pkg_temp_thermal intel_powerclamp coretemp snd_hda_codec_conexant snd_hda_codec_generic ledtrig_audio kvm_intel snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi libarc4 snd_hda_codec iTCO_wdt intel_pmc_bxt mei_hdcp mei_pxp uvcvideo kvm at24 snd_hda_core iTCO_vendor_support iwlwifi snd_hwdep irqbypass videobuf2_vmalloc videobuf2_memops snd_seq videobuf2_v4l2 rapl snd_seq_device videobuf2_common intel_cstate toshiba_acpi cfg80211 snd_pcm videodev pcspkr sparse_keymap wmi_bmof intel_uncore
 joydev industrialio mei_me snd_timer i2c_i801 toshiba_bluetooth apple_mfi_fastcharge mc snd i2c_smbus lpc_ich mei soundcore toshiba_haps rfkill zram i915 hid_logitech_hidpp rtsx_pci_sdmmc mmc_core crct10dif_pclmul crc32_pclmul crc32c_intel drm_buddy polyval_clmulni polyval_generic drm_display_helper ghash_clmulni_intel serio_raw alx cec rtsx_pci mdio ttm hid_logitech_dj wmi video ip6_tables ip_tables fuse