# DF-2100 — intel_vgt_deballoon drm_mm_remove_node on unallocated nodes

## Verdict
REPRODUCED (source-only confirmation). Bug confirmed by source tracing.

## Mechanism
intel_vgt_deballoon (i915_vgpu.c:128-129) unconditionally calls vgt_deballoon_space on all 4 bl_info.space[] entries. intel_vgt_balloon (197-275) only conditionally allocates them. drm_mm_remove_node on an unallocated (zero-initialized) node dereferences NULL mm -> crash. Only reachable in vGPU (Intel GVT-g) environments.

## Fix
Add allocated check in vgt_deballoon_space: if (!node->allocated) return;

## Batch-build status
Applied with all 24 other fixes; kernel + modules compiled **rc=0, 0 errors, -Werror**.