Backtrace

WARNING: CPU: 0 PID: 3600 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Modules linked in: uinput isofs snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock sunrpc binfmt_misc snd_seq_midi snd_seq_midi_event btusb btrtl btbcm btintel btmtk snd_ens1371 snd_ac97_codec snd_rawmidi gameport ac97_bus snd_seq bluetooth intel_rapl_msr snd_seq_device intel_rapl_common rapl snd_pcm vmw_balloon snd_timer pcspkr snd rfkill vmw_vmci soundcore i2c_piix4 joydev loop zram vmwgfx crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic mptspi ghash_clmulni_intel scsi_transport_spi sha512_ssse3 e1000 mptscsih drm_ttm_helper mptbase ttm serio_raw ata_generic pata_acpi ip6_tables ip_tables fuse
CPU: 0 PID: 3600 Comm: firefox Not tainted 6.2.2-301.fc38.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/22/2020
RIP: 0010:refcount_warn_saturate+0xba/0x110
Code: 01 01 e8 d4 1f 74 00 0f 0b c3 cc cc cc cc 80 3d e3 96 b2 01 00 75 85 48 c7 c7 80 08 8f b7 c6 05 d3 96 b2 01 01 e8 b1 1f 74 00 <0f> 0b c3 cc cc cc cc 80 3d c1 96 b2 01 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffb8fad0953c98 EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffff8dcaba64ba00 RCX: 0000000000000000
RDX: 0000000000000001 RSI: 0000000000000027 RDI: 00000000ffffffff
RBP: ffff8dcad961dc00 R08: 0000000000000000 R09: ffffb8fad0953b30
R10: 0000000000000003 R11: ffff8dcbbfec18a8 R12: 0000000000000027
R13: 0000000000000001 R14: ffff8dcad961dc40 R15: ffff8dcb9eb4aa68
FS:  0000000000000000(0000) GS:ffff8dcbb9e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f40c35ff990 CR3: 000000000d68a002 CR4: 00000000001706f0
Call Trace:
 <TASK>
 drm_gem_object_release_handle+0x50/0x60
 ? __pfx_drm_gem_object_release_handle+0x10/0x10
 idr_for_each+0x6d/0xf0
 drm_gem_release+0x1c/0x30
 drm_file_free.part.0+0x1e4/0x250
 drm_release+0x64/0xd0
 __fput+0x8e/0x250
 task_work_run+0x56/0x90
 do_exit+0x32f/0xb00
 do_group_exit+0x2d/0x80
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x58/0x80
 ? preempt_count_add+0x47/0xa0
 ? fpregs_restore_userregs+0x12/0xe0
 ? exit_to_user_mode_prepare+0x18f/0x1f0
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f40df4fc73d
Code: Unable to access opcode bytes at 0x7f40df4fc713.
RSP: 002b:00007ffdb05583a8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f40df4fc73d
RDX: 00000000000000e7 RSI: ffffffffffffff48 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001
R10: 1999999999999999 R11: 0000000000000206 R12: 0000000000000001
R13: 0000000000000000 R14: 00007ffdb0558430 R15: 00007f40d1a5dae0
 </TASK>