igt@xe_exec_threads@threads-hang-shared-vm-userptr-rebind - abort - WARNING: CPU: * PID: * at lib/refcount.c* refcount_warn_saturate*
<5> [150.485177] xe 0000:03:00.0: [drm] GT1: Timedout job: seqno=4294967183, lrc_seqno=4294967183, guc_id=35, flags=0x0 in xe_exec_threads [1730]
<7> [150.485182] xe 0000:03:00.0: [drm:xe_devcoredump [xe]] Multiple hangs are occurring, but only the first snapshot was taken
<5> [150.485305] xe 0000:03:00.0: [drm] GT1: Timedout job: seqno=4294967185, lrc_seqno=4294967185, guc_id=36, flags=0x0 in xe_exec_threads [1730]
<7> [150.485308] xe 0000:03:00.0: [drm:xe_devcoredump [xe]] Multiple hangs are occurring, but only the first snapshot was taken
<5> [150.485432] xe 0000:03:00.0: [drm] GT1: Timedout job: seqno=4294967184, lrc_seqno=4294967184, guc_id=35, flags=0x0 in xe_exec_threads [1730]
<7> [150.485435] xe 0000:03:00.0: [drm:xe_devcoredump [xe]] Multiple hangs are occurring, but only the first snapshot was taken
<7> [150.485612] xe 0000:03:00.0: [drm:xe_exec_ioctl [xe]] Ioctl argument check failed at drivers/gpu/drm/xe/xe_exec.c:147: q->ops->reset_status(q)
<5> [150.485880] xe 0000:03:00.0: [drm] GT0: Timedout job: seqno=4294967183, lrc_seqno=4294967183, guc_id=28, flags=0x0 in xe_exec_threads [1730]
<7> [150.485884] xe 0000:03:00.0: [drm:xe_devcoredump [xe]] Multiple hangs are occurring, but only the first snapshot was taken
<4> [150.486004] ------------[ cut here ]------------
<4> [150.486016] refcount_t: addition on 0; use-after-free.
<4> [150.486077] WARNING: CPU: 9 PID: 1646 at lib/refcount.c:25 refcount_warn_saturate+0x9c/0x150
<4> [150.486083] Modules linked in: snd_hda_codec_hdmi snd_hda_intel mei_gsc_proxy mei_gsc xe drm_gpuvm i2c_algo_bit drm_ttm_helper ttm gpu_sched drm_suballoc_helper drm_exec drm_display_helper drm_kunit_helpers drm_kms_helper drm_buddy kunit intel_rapl_msr intel_rapl_common intel_uncore_frequency intel_uncore_frequency_common snd_sof_pci_intel_tgl x86_pkg_temp_thermal snd_sof_pci_intel_cnl intel_powerclamp snd_sof_intel_hda_generic snd_sof_pci snd_sof_xtensa_dsp snd_sof_intel_hda_common snd_soc_hdac_hda hid_generic coretemp snd_sof_intel_hda cmdlinepart mei_pxp snd_sof snd_sof_utils snd_soc_acpi_intel_match spi_nor snd_soc_acpi kvm_intel mtd mei_hdcp snd_intel_dspcfg wmi_bmof nls_iso8859_1 snd_hda_codec kvm snd_hwdep snd_sof_intel_hda_mlink crct10dif_pclmul crc32_pclmul snd_hda_ext_core polyval_clmulni polyval_generic snd_hda_core ghash_clmulni_intel sha512_ssse3 usbhid sha256_ssse3 snd_soc_core sha1_ssse3 hid aesni_intel snd_compress crypto_simd cryptd snd_pcm rapl snd_seq r8169 intel_cstate snd_seq_device snd_timer
<4> [150.486454] video realtek efi_pstore mei_me snd spi_intel_pci i2c_i801 idma64 spi_intel i2c_smbus mei soundcore intel_pmc_core intel_vsec pmt_telemetry wmi acpi_pad pmt_class pinctrl_alderlake acpi_tad mac_hid sch_fq_codel msr parport_pc ppdev lp parport drm ip_tables x_tables autofs4
<4> [150.486548] CPU: 9 UID: 0 PID: 1646 Comm: kworker/u64:15 Tainted: G U 6.11.0-xe #1
<4> [150.486615] Tainted: [U]=USER
<4> [150.486616] Hardware name: ASUS System Product Name/PRIME Z790-P WIFI, BIOS 1645 03/15/2024
<4> [150.486618] Workqueue: submit_wq drm_sched_run_job_work [gpu_sched]
<4> [150.486624] RIP: 0010:refcount_warn_saturate+0x9c/0x150
<4> [150.486626] Code: cc cc 0f b6 1d 01 ac ca 01 80 fb 01 0f 87 9c 9d 9a 00 83 e3 01 75 e4 48 c7 c7 00 3c ea 82 c6 05 e5 ab ca 01 01 e8 04 c9 6e ff <0f> 0b eb cd 0f b6 1d d7 ab ca 01 80 fb 01 0f 87 5c 9d 9a 00 83 e3
<4> [150.486628] RSP: 0018:ffffc90001453c40 EFLAGS: 00010282
<4> [150.486630] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000027
<4> [150.486632] RDX: 0000000000000027 RSI: 00000000ffff8f21 RDI: ffff88885f0a1a08
<4> [150.486633] RBP: ffffc90001453c48 R08: 0000000000000000 R09: 00000000ffff8f21
<4> [150.486634] R10: ffffc90001453a28 R11: ffff88887f654b18 R12: ffff888127886440
<4> [150.486635] R13: ffff8881476bd800 R14: 0000000000037d4c R15: ffff888147a2d008
<4> [150.486636] FS: 0000000000000000(0000) GS:ffff88885f080000(0000) knlGS:0000000000000000
<4> [150.486638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
<4> [150.486700] CR2: 00007f3cdde004b0 CR3: 000000012e93c000 CR4: 0000000000750ef0
<4> [150.486702] PKRU: 55555554
<4> [150.486703] Call Trace:
<4> [150.486704] <TASK>
<4> [150.486705] ? show_regs+0x67/0x70
<4> [150.486709] ? __warn+0x94/0x1b0
<4> [150.486712] ? refcount_warn_saturate+0x9c/0x150
<4> [150.486715] ? report_bug+0x1b7/0x1d0
<4> [150.486719] ? handle_bug+0x46/0x80
<4> [150.486722] ? exc_invalid_op+0x19/0x70
<4> [150.486724] ? asm_exc_invalid_op+0x1b/0x20
<4> [150.486730] ? refcount_warn_saturate+0x9c/0x150
<4> [150.486733] guc_exec_queue_run_job+0xdee/0x1400 [xe]
<4> [150.486997] ? __queue_work+0x197/0x6d0
<4> [150.487014] ? lock_release+0xd1/0x2a0
<4> [150.487052] ? mark_held_locks+0x4d/0x80
<4> [150.487054] ? find_held_lock+0x31/0x90
<4> [150.487057] ? drm_sched_run_job_work+0x251/0x450 [gpu_sched]
<4> [150.487061] ? lock_release+0xd1/0x2a0
<4> [150.487065] drm_sched_run_job_work+0x27e/0x450 [gpu_sched]
<4> [150.487070] process_scheduled_works+0x39f/0x730