Hi Paul,
On Thu, Jan 18, 2024 at 01:57:50PM +0100, Paul Menzel wrote:
> [ 7487.040106] ------------[ cut here ]------------
> [ 7487.040108] refcount_t: underflow; use-after-free.
> [ 7487.040117] WARNING: CPU: 2 PID: 54815 at lib/refcount.c:28 refcount_warn_saturate+0xbe/0x110
> [ 7487.040123] Modules linked in: sctp libcrc32c typec_displayport r8153_ecm cdc_ether usbnet sd_mod r8152 sg mii uas usb_storage scsi_mod scsi_common l2tp_ppp xfrm_interface l2tp_netlink xfrm6_tunnel l2tp_core tunnel6 tunnel4 ip6_udp_tunnel xfrm_user udp_tunnel xfrm_algo pppox ppp_generic slhc ctr ccm snd_seq_dummy snd_hrtimer snd_seq snd_seq_device qrtr snd_sof_pci_intel_skl snd_sof_intel_hda_common soundwire_intel soundwire_generic_allocation snd_hda_codec_hdmi snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils soundwire_bus snd_ctl_led snd_soc_avs snd_soc_hda_codec snd_soc_skl snd_hda_codec_realtek snd_soc_hdac_hda ath10k_pci snd_hda_ext_core binfmt_misc snd_hda_codec_generic ath10k_core btusb snd_soc_sst_ipc btrtl snd_soc_sst_dsp snd_soc_acpi_intel_match btintel nls_ascii btbcm nls_cp437 ath snd_soc_acpi btmtk mac80211 vfat bluetooth snd_soc_core x86_pkg_temp_thermal fat intel_powerclamp coretemp kvm_intel snd_compress snd_pcm_dmaengine dell_laptop
> [ 7487.040173] snd_hda_intel mei_pxp mei_hdcp mei_wdt i915 ledtrig_audio snd_intel_dspcfg libarc4 snd_intel_sdw_acpi kvm intel_rapl_msr snd_hda_codec sha3_generic joydev jitterentropy_rng dell_smm_hwmon uvcvideo snd_hda_core cfg80211 videobuf2_vmalloc drbg uvc irqbypass snd_hwdep rapl snd_pcm videobuf2_memops videobuf2_v4l2 dell_wmi intel_cstate ansi_cprng dell_smbios videodev snd_timer dcdbas intel_uncore ucsi_acpi ecdh_generic mei_me typec_ucsi iTCO_wdt intel_pmc_bxt snd iTCO_vendor_support wmi_bmof intel_wmi_thunderbolt watchdog dell_wmi_descriptor pcspkr mei videobuf2_common soundcore rfkill drm_buddy typec ecc mc intel_pch_thermal drm_display_helper cec intel_vbtn soc_button_array rc_core processor_thermal_device_pci_legacy processor_thermal_device ttm processor_thermal_wt_hint processor_thermal_rfim processor_thermal_rapl int3400_thermal drm_kms_helper int3403_thermal intel_rapl_common acpi_thermal_rel intel_pmc_core intel_hid intel_xhci_usb_role_switch processor_thermal_wt_req button processor_thermal_power_floor
> [ 7487.040218] processor_thermal_mbox sparse_keymap evdev acpi_pad int340x_thermal_zone ac intel_soc_dts_iosf i2c_algo_bit roles hid_multitouch serio_raw msr parport_pc ppdev lp parport loop efi_pstore configfs nfnetlink efivarfs ip_tables x_tables autofs4 ext4 crc16 mbcache jbd2 crc32c_generic dm_crypt dm_mod usbhid nvme crc32_pclmul crc32c_intel nvme_core t10_pi hid_generic ghash_clmulni_intel crc64_rocksoft_generic sha512_ssse3 crc64_rocksoft i2c_hid_acpi crc_t10dif i2c_hid crct10dif_generic xhci_pci sha512_generic drm xhci_hcd sha256_ssse3 intel_lpss_pci crct10dif_pclmul i2c_i801 crc64 usbcore sha1_ssse3 crct10dif_common i2c_smbus hid battery intel_lpss idma64 usb_common video wmi aesni_intel crypto_simd cryptd
> [ 7487.040256] CPU: 2 PID: 54815 Comm: kworker/u8:61 Not tainted 6.7-amd64 #1 Debian 6.7-1~exp1
> [ 7487.040258] Hardware name: Dell Inc. XPS 13 9360/0596KF, BIOS 2.21.0 06/02/2022
> [ 7487.040260] Workqueue: USBC000:00-con1 ucsi_poll_worker [typec_ucsi]
> [ 7487.040269] RIP: 0010:refcount_warn_saturate+0xbe/0x110
> [ 7487.040272] Code: 01 01 e8 f5 22 a9 ff 0f 0b c3 cc cc cc cc 80 3d e1 62 7e 01 00 75 85 48 c7 c7 38 ca 8f 89 c6 05 d1 62 7e 01 01 e8 d2 22 a9 ff <0f> 0b c3 cc cc cc cc 80 3d bf 62 7e 01 00 0f 85 5e ff ff ff 48 c7
> [ 7487.040274] RSP: 0000:ffffb653c149fd90 EFLAGS: 00010282
> [ 7487.040276] RAX: 0000000000000000 RBX: ffffa07c8687ac08 RCX: 0000000000000027
> [ 7487.040278] RDX: ffffa07ff1521408 RSI: 0000000000000001 RDI: ffffa07ff1521400
> [ 7487.040279] RBP: ffffa07c8687ac00 R08: 0000000000000000 R09: 65646e75203a745f
> [ 7487.040280] R10: 75203b776f6c6672 R11: 72657466612d6573 R12: 0000000000000000
> [ 7487.040281] R13: ffffa07c8484fc40 R14: ffffffff8951ffa0 R15: ffffa07ee4b06b48
> [ 7487.040282] FS: 0000000000000000(0000) GS:ffffa07ff1500000(0000) knlGS:0000000000000000
> [ 7487.040283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [ 7487.040285] CR2: 0000000000000000 CR3: 0000000246820001 CR4: 00000000003706f0
> [ 7487.040286] Call Trace:
> [ 7487.040288] <TASK>
> [ 7487.040289] ? refcount_warn_saturate+0xbe/0x110
> [ 7487.040292] ? __warn+0x81/0x130
> [ 7487.040298] ? refcount_warn_saturate+0xbe/0x110
> [ 7487.040300] ? report_bug+0x171/0x1a0
> [ 7487.040304] ? console_unlock+0xcb/0x120
> [ 7487.040307] ? handle_bug+0x3c/0x80
> [ 7487.040309] ? exc_invalid_op+0x17/0x70
> [ 7487.040311] ? asm_exc_invalid_op+0x1a/0x20
> [ 7487.040315] ? refcount_warn_saturate+0xbe/0x110
> [ 7487.040319] typec_altmode_release+0x49/0xc0 [typec]
> [ 7487.040334] device_release+0x34/0x90
> [ 7487.040339] kobject_put+0x78/0x190
> [ 7487.040341] ucsi_unregister_altmodes+0x41/0xa0 [typec_ucsi]
> [ 7487.040347] ucsi_unregister_partner.part.0+0x77/0xa0 [typec_ucsi]
> [ 7487.040353] ucsi_check_connection+0x73/0xc0 [typec_ucsi]
> [ 7487.040359] ucsi_poll_worker+0x3a/0x110 [typec_ucsi]
> [ 7487.040365] process_one_work+0x171/0x340
> [ 7487.040369] worker_thread+0x27b/0x3a0
> [ 7487.040372] ? __pfx_worker_thread+0x10/0x10
> [ 7487.040374] kthread+0xe5/0x120
> [ 7487.040376] ? __pfx_kthread+0x10/0x10
> [ 7487.040378] ret_from_fork+0x31/0x50
> [ 7487.040381] ? __pfx_kthread+0x10/0x10
> [ 7487.040382] ret_from_fork_asm+0x1b/0x30
> [ 7487.040388] </TASK>
> [ 7487.040388] ---[ end trace 0000000000000000 ]---
It is probably unrelated but there is the above warning in your logs
during resume. The warning is related to USB-C and can be avoided if
you do not connect anything to the USB-C ports for the duration of the
test. The real fix for this warning made it into Linus's tree today.
regards Christian
