[ 3520.856803] [TTM] Buffer eviction failed
[ 3520.856856] ------------[ cut here ]------------
[ 3520.856859] refcount_t: underflow; use-after-free.
[ 3520.856888] WARNING: CPU: 3 PID: 6842 at lib/refcount.c:28 refcount_warn_saturate+0xae/0xf0
[ 3520.856910] Modules linked in: nft_chain_nat xt_MASQUERADE nf_conntrack_netlink xfrm_user xfrm_algo nft_counter xt_addrtype nft_compat nf_tables nfnetlink xt_conntrack nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c br_netfilter bridge stp llc overlay intel_powerclamp kvm_intel binfmt_misc snd_hda_codec_realtek snd_hda_codec_hdmi snd_hda_codec_generic kvm ledtrig_audio snd_hda_intel snd_intel_dspcfg intel_cstate soundwire_intel soundwire_generic_allocation soundwire_cadence snd_hda_codec snd_hda_core snd_hwdep soundwire_bus snd_soc_core snd_compress ac97_bus snd_pcm_dmaengine snd_pcm samsung_laptop snd_seq_midi snd_seq_midi_event snd_rawmidi uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 snd_seq videobuf2_common videodev mc input_leds snd_seq_device wl(POE) snd_timer joydev serio_raw btusb btrtl btbcm btintel bluetooth snd cfg80211 at24 ecdh_generic ecc soundcore mac_hid sch_fq_codel cuse coretemp msr parport_pc ppdev lp parport ip_tables x_tables autofs4
[ 3520.857127]  hid_logitech_hidpp hid_logitech_dj hid_generic usbhid hid nouveau mxm_wmi i2c_algo_bit drm_ttm_helper ttm drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops cec rc_core gpio_ich drm ahci i2c_i801 psmouse wmi i2c_smbus lpc_ich sky2 libahci video
[ 3520.857204] CPU: 3 PID: 6842 Comm: chrome Kdump: loaded Tainted: P           OE     5.11.0-31-generic #33-Ubuntu
[ 3520.857213] Hardware name: SAMSUNG ELECTRONICS CO., LTD. Q430/Q530                  /Q430/Q530                  , BIOS 02KF.M008.20100529.KSJ 05/29/2010
[ 3520.857219] RIP: 0010:refcount_warn_saturate+0xae/0xf0
[ 3520.857231] Code: 38 2a 96 01 01 e8 cb fe 62 00 0f 0b 5d c3 80 3d 25 2a 96 01 00 75 91 48 c7 c7 38 ce 20 97 c6 05 15 2a 96 01 01 e8 ab fe 62 00 <0f> 0b 5d c3 80 3d 03 2a 96 01 00 0f 85 6d ff ff ff 48 c7 c7 90 ce
[ 3520.857239] RSP: 0018:ffffaa0c03cd3ce8 EFLAGS: 00010282
[ 3520.857247] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffff958b5bd98ac8
[ 3520.857253] RDX: 00000000ffffffd8 RSI: 0000000000000027 RDI: ffff958b5bd98ac0
[ 3520.857259] RBP: ffffaa0c03cd3ce8 R08: 0000000000000000 R09: ffffaa0c03cd3ac8
[ 3520.857264] R10: ffffaa0c03cd3ac0 R11: ffffffff97953588 R12: ffff958969711800
[ 3520.857268] R13: ffff9589472ec400 R14: ffff958a54ab4000 R15: ffff9589472ec400
[ 3520.857273] FS:  00007fce92a3c040(0000) GS:ffff958b5bd80000(0000) knlGS:0000000000000000
[ 3520.857281] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3520.857286] CR2: 0000101072e54000 CR3: 000000002e774000 CR4: 00000000000006e0
[ 3520.857292] Call Trace:
[ 3520.857305]  ttm_bo_put+0x3f/0x50 [ttm]
[ 3520.857331]  nouveau_gem_new+0xc4/0x100 [nouveau]
[ 3520.857611]  ? nouveau_gem_new+0x100/0x100 [nouveau]
[ 3520.857871]  nouveau_gem_ioctl_new+0x5b/0x100 [nouveau]
[ 3520.858133]  ? nouveau_gem_new+0x100/0x100 [nouveau]
[ 3520.858398]  drm_ioctl_kernel+0xae/0xf0 [drm]
[ 3520.858500]  drm_ioctl+0x245/0x400 [drm]
[ 3520.858586]  ? nouveau_gem_new+0x100/0x100 [nouveau]
[ 3520.858850]  ? __fget_files+0x5f/0x90
[ 3520.858864]  ? __fget_light+0x32/0x80
[ 3520.858879]  nouveau_drm_ioctl+0x66/0xc0 [nouveau]
[ 3520.859145]  __x64_sys_ioctl+0x91/0xc0
[ 3520.859158]  do_syscall_64+0x38/0x90
[ 3520.859170]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 3520.859182] RIP: 0033:0x7fce8ceb0317
[ 3520.859192] Code: b3 66 90 48 8b 05 71 4b 2d 00 64 c7 00 26 00 00 00 48 c7 c0 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 41 4b 2d 00 f7 d8 64 89 01 48
[ 3520.859199] RSP: 002b:00007ffe0666ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3520.859211] RAX: ffffffffffffffda RBX: 0000558a4cc3bc70 RCX: 00007fce8ceb0317
[ 3520.859216] RDX: 00007ffe0666efa0 RSI: 00000000c0306480 RDI: 0000000000000017
[ 3520.859222] RBP: 00007ffe0666efa0 R08: 0000000000000000 R09: 0000000000000000
[ 3520.859226] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000c0306480
[ 3520.859230] R13: 0000000000000017 R14: 0000558a4cbab6f8 R15: 0000558a4b680d70
[ 3520.859241] ---[ end trace 57662ca5129b9b95 ]---