igt@xe_exec_fault_mode@twice-.*userptr-rebind-imm - incomplete - WARNING: .* at lib/refcount.c:.* refcount_warn_saturate
<7> [397.291016] xe 0000:aa:00.0: [drm:xe_vm_bind_ioctl [xe]] op=2, addr=0x00000000001b0000, range=0x0000000000010000, bo_offset_or_userptr=0x00007f640d6d0000
<7> [397.291093] xe 0000:aa:00.0: [drm:xe_vm_bind_ioctl [xe]] MAP: addr=0x00000000001b0000, range=0x0000000000010000
<7> [397.293518] xe 0000:aa:00.0: [drm:__xe_pt_bind_vma [xe]] Preparing bind, with range [1b0000...1c0000) engine ff110008b7bcca00.
<7> [397.294361] xe 0000:aa:00.0: [drm:xe_vm_dbg_print_entries [xe]] 1 entries to update
<7> [397.294451] xe 0000:aa:00.0: [drm:xe_vm_dbg_print_entries [xe]] 0: Update level 4 at (0 + 1) [0...1000000000000) f:0
<7> [397.294687] xe 0000:aa:00.0: [drm:xe_vm_bind_ioctl [xe]] op=1, addr=0x00000000001b0000, range=0x0000000000010000, bo_offset_or_userptr=0x0000000000000000
<7> [397.294766] xe 0000:aa:00.0: [drm:xe_vm_bind_ioctl [xe]] UNMAP: addr=0x00000000001b0000, range=0x0000000000010000, keep=0
<7> [397.294852] xe 0000:aa:00.0: [drm:__xe_pt_unbind_vma [xe]] Preparing unbind, with range [1b0000...1c0000) engine ff1100023e020800.
<7> [397.294913] xe 0000:aa:00.0: [drm:xe_vm_dbg_print_entries [xe]] 1 entries to update
<7> [397.294970] xe 0000:aa:00.0: [drm:xe_vm_dbg_print_entries [xe]] 0: Update level 4 at (0 + 1) [0...1000000000000) f:0
<4> [397.295040] ------------[ cut here ]------------
<4> [397.295042] refcount_t: underflow; use-after-free.
<4> [397.295056] WARNING: CPU: 50 PID: 3133 at lib/refcount.c:28 refcount_warn_saturate+0xbe/0x110
<4> [397.295063] Modules linked in: xe drm_kunit_helpers kunit vgem drm_shmem_helper fuse drm_gpuvm video i2c_algo_bit drm_ttm_helper ttm gpu_sched drm_suballoc_helper x86_pkg_temp_thermal drm_exec drm_display_helper drm_kms_helper coretemp syscopyarea sysfillrect sysimgblt fb_sys_fops drm_buddy cfbfillrect cfbimgblt kvm_intel fb_io_fops cfbcopyarea fb fbdev kvm ixgbe igc irqbypass mdio crct10dif_pclmul smsc75xx mei_me ptp usbnet crc32_pclmul ghash_clmulni_intel dca mii pmt_telemetry pmt_class intel_vsec i2c_i801 pps_core i2c_smbus mei i2c_ismt wmi acpi_power_meter drm drm_panel_orientation_quirks ip_tables x_tables [last unloaded: kunit]
<4> [397.295141] CPU: 50 PID: 3133 Comm: xe_exec_fault_m Tainted: G N 6.7.0-xe #1
<4> [397.295145] Hardware name: Intel Corporation ArcherCity/ArcherCity, BIOS EGSDCRB1.86B.0087.D13.2208261706 08/26/2022
<4> [397.295147] RIP: 0010:refcount_warn_saturate+0xbe/0x110
<4> [397.295150] Code: 01 01 e8 c5 63 9c ff 0f 0b c3 cc cc cc cc 80 3d ae d6 56 01 00 75 85 48 c7 c7 48 fa 72 82 c6 05 9e d6 56 01 01 e8 a2 63 9c ff <0f> 0b c3 cc cc cc cc 80 3d 89 d6 56 01 00 0f 85 5e ff ff ff 48 c7
<4> [397.295153] RSP: 0018:ffa000000b45b738 EFLAGS: 00010282
<4> [397.295156] RAX: 0000000000000000 RBX: ff1100023e020800 RCX: 0000000000000027
<4> [397.295158] RDX: 0000000000000027 RSI: 000000010002d678 RDI: ff1100085fd2c8c8
<4> [397.295161] RBP: ff1100019b282000 R08: 0000000000000000 R09: ffa000000b45b5d0
<4> [397.295162] R10: 00000000012f5aa8 R11: 00000000012f5b40 R12: ff110008a2968028
<4> [397.295164] R13: ff1100023e020800 R14: ff110001cad30400 R15: 0000000000000001
<4> [397.295166] FS: 00007f640d6e8140(0000) GS:ff1100085fd00000(0000) knlGS:0000000000000000
<4> [397.295169] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033