------------[ cut here ]------------
Trying to vfree() bad address (00000000c8277ee6)
WARNING: CPU: 5 PID: 14014 at mm/vmalloc.c:2234 __vunmap+0x20b/0x230
Modules linked in: tcp_diag udp_diag inet_diag xt_nat veth fuse xt_MASQUERADE nf_conntrack_netlink nfnetlink xfrm_user xfrm_algo br_netfilter bridge 8021q garp mrp stp llc nf_log_ipv4 nf_log_common xt_multiport xt_LOG xt_limit xt_tcpudp ipt_REJECT nf_reject_ipv4 xt_comment xt_addrtype xt_state xt_conntrack iptable_filter iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 intel_rapl_msr intel_rapl_common x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm iTCO_wdt eeepc_wmi asus_wmi battery sparse_keymap iTCO_vendor_support mei_hdcp rfkill wmi_bmof intel_wmi_thunderbolt irqbypass snd_hda_codec_realtek snd_hda_codec_generic ledtrig_audio crct10dif_pclmul crc32_pclmul ghash_clmulni_intel aesni_intel crypto_simd cryptd glue_helper snd_hda_codec_hdmi intel_cstate nls_iso8859_1 nls_cp437 zfs(POE) nouveau intel_uncore i915 zunicode(POE) e1000e zavl(POE) icp(POE) pcspkr i2c_i801 intel_rapl_perf snd_usb_audio mxm_wmi snd_hda_intel snd_usbmidi_lib ttm snd_intel_nhlt
 i2c_algo_bit snd_hda_codec zcommon(POE) snd_rawmidi znvpair(POE) snd_seq_device spl(OE) drm_kms_helper snd_hda_core mc joydev mousedev input_leds zlua(POE) drm snd_hwdep snd_pcm mei_me mei snd_timer intel_gtt snd agpgart syscopyarea sysfillrect sysimgblt soundcore fb_sys_fops wmi evdev mac_hid vboxnetflt(OE) vboxnetadp(OE) vboxdrv(OE) sg crypto_user ip_tables x_tables btrfs hid_cherry sd_mod hid_logitech_hidpp hid_logitech_dj hid_generic usbhid hid ahci libahci sata_mv libata xhci_pci scsi_mod xhci_hcd vfat fat raid1 raid0 dm_raid raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx dm_mod md_mod libcrc32c crc32c_generic crc32c_intel xor raid6_pq
CPU: 5 PID: 14014 Comm: gnome-s:disk$2 Tainted: P           OE     5.4.21-1-lts #1
Hardware name: System manufacturer System Product Name/Z170-A, BIOS 3504 06/29/2017
RIP: 0010:__vunmap+0x20b/0x230
Code: 6b 01 49 8b 7d 20 e8 44 d5 fc ff 4c 89 ef 5b 5d 41 5c 41 5d 41 5e e9 24 d1 02 00 48 89 fe 48 c7 c7 b0 a5 ae 9a e8 b3 47 e4 ff <0f> 0b 5b 5d 41 5c 41 5d 41 5e c3 4c 89 e6 48 c7 c7 d8 a5 ae 9a e8
RSP: 0018:ffffb5b6017efa38 EFLAGS: 00010282
RAX: 0000000000000000 RBX: ffff9db7438cd300 RCX: 0000000000000006
RDX: 0000000000000007 RSI: 0000000000000096 RDI: ffff9db91eb57700
RBP: 00000000000005a0 R08: 00000000000009dc R09: 0000000000000003
R10: 0000000000000000 R11: 0000000000000001 R12: ffff9db7d8fe85a0
R13: 0000072b35fede91 R14: ffffb5b6017efb38 R15: 0000000000000000
FS:  00007f4234caf700(0000) GS:ffff9db91eb40000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f5630009ab8 CR3: 00000001dec0a003 CR4: 00000000003606e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 nvkm_umem_unmap+0x49/0x60 [nouveau]
 nvkm_object_dtor+0xa1/0x110 [nouveau]
 nvkm_object_del+0x20/0x80 [nouveau]
 nvkm_ioctl_del+0x37/0x50 [nouveau]
 nvkm_ioctl+0xde/0x180 [nouveau]
 nvif_object_fini+0x59/0x80 [nouveau]
 nouveau_mem_fini+0x53/0x70 [nouveau]
 nouveau_mem_del+0x11/0x30 [nouveau]
 ttm_bo_release+0x23d/0x2a0 [ttm]
 nouveau_gem_object_del+0x51/0x80 [nouveau]
 drm_gem_object_release_handle+0x70/0x90 [drm]
 ? drm_gem_object_handle_put_unlocked+0xa0/0xa0 [drm]
 idr_for_each+0x70/0xe0
 drm_gem_release+0x1c/0x30 [drm]
 drm_file_free.part.0+0x20b/0x260 [drm]
 drm_release+0x9a/0xd0 [drm]
 __fput+0xae/0x230
 task_work_run+0x8a/0xb0
 do_exit+0x36d/0xaf0
 do_group_exit+0x3a/0xa0
 get_signal+0x15a/0x880
 do_signal+0x43/0x640
 exit_to_usermode_loop+0x7f/0x100
 do_syscall_64+0x110/0x140
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x7f424b099cf5
Code: Bad RIP value.
RSP: 002b:00007f4234cae860 EFLAGS: 00000282 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 0000000000000000 RCX: 00007f424b099cf5
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000056304b4740c8
RBP: 000056304b4740a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000282 R12: 00007f4234cae890
R13: 000056304b474078 R14: 000056304b4740c8 R15: 0000000000000000
---[ end trace e2ce9a65ed8cb3c7 ]---