Backtrace

BUG: unable to handle page fault for address: ffffea7c59000008
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 3 PID: 85704 Comm: chrome Not tainted 6.0.5-200.fc36.x86_64 #1
Hardware name: TOSHIBA Satellite P75-A/Type2 - Board Product Name1, BIOS 1.60 12/04/2014
RIP: 0010:kfree+0x55/0x400
Code: d8 0f 82 c2 03 00 00 48 c7 c2 00 00 00 80 48 2b 15 a0 f4 50 01 48 01 d0 48 8b 0d 86 f4 50 01 48 c1 e8 0c 48 c1 e0 06 48 01 c8 <48> 8b 50 08 49 89 c4 f6 c2 01 0f 85 8e 02 00 00 0f 1f 44 00 00 49
RSP: 0018:ffffb928a0787890 EFLAGS: 00010286
RAX: ffffea7c59000000 RBX: 00000000400000c0 RCX: ffffe8ed00000000
RDX: 000063d580000000 RSI: ffffffffc060925a RDI: 00000000400000c0
RBP: ffffb928a07879a0 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000005 R11: 00000000007ffffc R12: 0000000000000310
R13: 0000000000000000 R14: ffffb928a0787a98 R15: 000000000000001f
FS:  00007facbf824e00(0000) GS:ffff9c2c572c0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffea7c59000008 CR3: 0000000053bc2002 CR4: 00000000001706e0
Call Trace:
 <TASK>
 eb_relocate_parse_slow+0x1ea/0x5a0 [i915]
 i915_gem_do_execbuffer+0x1140/0x2c30 [i915]
 ? timerqueue_add+0x62/0xb0
 i915_gem_execbuffer2_ioctl+0x115/0x270 [i915]
 ? i915_gem_do_execbuffer+0x2c30/0x2c30 [i915]
 drm_ioctl_kernel+0xa9/0x150
 drm_ioctl+0x22d/0x410
 ? i915_gem_do_execbuffer+0x2c30/0x2c30 [i915]
 __x64_sys_ioctl+0x90/0xd0
 do_syscall_64+0x5b/0x80
 ? __schedule+0x33a/0x12b0
 ? sched_clock_cpu+0xb/0xc0
 ? __rseq_handle_notify_resume+0x99/0x460
 ? fpregs_restore_userregs+0x53/0xe0
 ? exit_to_user_mode_prepare+0x18f/0x1f0
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7facc0f0748f
Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00
RSP: 002b:00007ffce2c6fb50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ffce2c6fce0 RCX: 00007facc0f0748f
RDX: 00007ffce2c6fce0 RSI: 0000000040406469 RDI: 0000000000000018
RBP: 0000000000000018 R08: 0000000000000001 R09: 0000000000000008
R10: 0000000000000008 R11: 0000000000000246 R12: 00007ffce2c6fce0
R13: 000000000000003f R14: 0000000000000800 R15: 00002d3000362000
 </TASK>
Modules linked in: tls rfcomm snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep sunrpc binfmt_misc vfat fat intel_rapl_msr intel_rapl_common iwldvm snd_hda_codec_conexant x86_pkg_temp_thermal snd_hda_codec_generic intel_powerclamp mac80211 snd_hda_codec_hdmi ledtrig_audio coretemp snd_hda_intel kvm_intel snd_intel_dspcfg snd_intel_sdw_acpi mei_hdcp mei_pxp libarc4 at24 kvm iTCO_wdt snd_hda_codec intel_pmc_bxt btusb uvcvideo snd_hda_core iTCO_vendor_support irqbypass snd_hwdep iwlwifi videobuf2_vmalloc btrtl videobuf2_memops rapl snd_seq btbcm videobuf2_v4l2 snd_seq_device intel_cstate btintel videobuf2_common snd_pcm intel_uncore btmtk cfg80211 toshiba_acpi videodev mei_me pcspkr i2c_i801 wmi_bmof snd_timer sparse_keymap bluetooth
 joydev i2c_smbus mc lpc_ich snd industrialio mei soundcore toshiba_bluetooth toshiba_haps rfkill zram i915 hid_logitech_hidpp rtsx_pci_sdmmc crct10dif_pclmul crc32_pclmul crc32c_intel mmc_core polyval_clmulni polyval_generic drm_buddy drm_display_helper ghash_clmulni_intel serio_raw cec alx rtsx_pci mdio hid_logitech_dj ttm wmi video ip6_tables ip_tables fuse
CR2: ffffea7c59000008