Hi Paul,

On Thu, Jan 18, 2024 at 01:57:50PM +0100, Paul Menzel wrote:

[ 7487.040106] ------------[ cut here ]------------
[ 7487.040108] refcount_t: underflow; use-after-free.
[ 7487.040117] WARNING: CPU: 2 PID: 54815 at lib/refcount.c:28 refcount_warn_saturate+0xbe/0x110
[ 7487.040123] Modules linked in: sctp libcrc32c typec_displayport r8153_ecm cdc_ether usbnet sd_mod r8152 sg mii uas usb_storage scsi_mod scsi_common l2tp_ppp xfrm_interface l2tp_netlink xfrm6_tunnel l2tp_core tunnel6 tunnel4 ip6_udp_tunnel xfrm_user udp_tunnel xfrm_algo pppox ppp_generic slhc ctr ccm snd_seq_dummy snd_hrtimer snd_seq snd_seq_device qrtr snd_sof_pci_intel_skl snd_sof_intel_hda_common soundwire_intel soundwire_generic_allocation snd_hda_codec_hdmi snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils soundwire_bus snd_ctl_led snd_soc_avs snd_soc_hda_codec snd_soc_skl snd_hda_codec_realtek snd_soc_hdac_hda ath10k_pci snd_hda_ext_core binfmt_misc snd_hda_codec_generic ath10k_core btusb snd_soc_sst_ipc btrtl snd_soc_sst_dsp snd_soc_acpi_intel_match btintel nls_ascii btbcm nls_cp437 ath snd_soc_acpi btmtk mac80211 vfat bluetooth snd_soc_core x86_pkg_temp_thermal fat intel_powerclamp coretemp kvm_intel snd_compress snd_pcm_dmaengine dell_laptop
[ 7487.040173]  snd_hda_intel mei_pxp mei_hdcp mei_wdt i915 ledtrig_audio snd_intel_dspcfg libarc4 snd_intel_sdw_acpi kvm intel_rapl_msr snd_hda_codec sha3_generic joydev jitterentropy_rng dell_smm_hwmon uvcvideo snd_hda_core cfg80211 videobuf2_vmalloc drbg uvc irqbypass snd_hwdep rapl snd_pcm videobuf2_memops videobuf2_v4l2 dell_wmi intel_cstate ansi_cprng dell_smbios videodev snd_timer dcdbas intel_uncore ucsi_acpi ecdh_generic mei_me typec_ucsi iTCO_wdt intel_pmc_bxt snd iTCO_vendor_support wmi_bmof intel_wmi_thunderbolt watchdog dell_wmi_descriptor pcspkr mei videobuf2_common soundcore rfkill drm_buddy typec ecc mc intel_pch_thermal drm_display_helper cec intel_vbtn soc_button_array rc_core processor_thermal_device_pci_legacy processor_thermal_device ttm processor_thermal_wt_hint processor_thermal_rfim processor_thermal_rapl int3400_thermal drm_kms_helper int3403_thermal intel_rapl_common acpi_thermal_rel intel_pmc_core intel_hid intel_xhci_usb_role_switch processor_thermal_wt_req button processor_thermal_power_floor
[ 7487.040218]  processor_thermal_mbox sparse_keymap evdev acpi_pad int340x_thermal_zone ac intel_soc_dts_iosf i2c_algo_bit roles hid_multitouch serio_raw msr parport_pc ppdev lp parport loop efi_pstore configfs nfnetlink efivarfs ip_tables x_tables autofs4 ext4 crc16 mbcache jbd2 crc32c_generic dm_crypt dm_mod usbhid nvme crc32_pclmul crc32c_intel nvme_core t10_pi hid_generic ghash_clmulni_intel crc64_rocksoft_generic sha512_ssse3 crc64_rocksoft i2c_hid_acpi crc_t10dif i2c_hid crct10dif_generic xhci_pci sha512_generic drm xhci_hcd sha256_ssse3 intel_lpss_pci crct10dif_pclmul i2c_i801 crc64 usbcore sha1_ssse3 crct10dif_common i2c_smbus hid battery intel_lpss idma64 usb_common video wmi aesni_intel crypto_simd cryptd
[ 7487.040256] CPU: 2 PID: 54815 Comm: kworker/u8:61 Not tainted 6.7-amd64 #1  Debian 6.7-1~exp1
[ 7487.040258] Hardware name: Dell Inc. XPS 13 9360/0596KF, BIOS 2.21.0 06/02/2022
[ 7487.040260] Workqueue: USBC000:00-con1 ucsi_poll_worker [typec_ucsi]
[ 7487.040269] RIP: 0010:refcount_warn_saturate+0xbe/0x110
[ 7487.040272] Code: 01 01 e8 f5 22 a9 ff 0f 0b c3 cc cc cc cc 80 3d e1 62 7e 01 00 75 85 48 c7 c7 38 ca 8f 89 c6 05 d1 62 7e 01 01 e8 d2 22 a9 ff <0f> 0b c3 cc cc cc cc 80 3d bf 62 7e 01 00 0f 85 5e ff ff ff 48 c7
[ 7487.040274] RSP: 0000:ffffb653c149fd90 EFLAGS: 00010282
[ 7487.040276] RAX: 0000000000000000 RBX: ffffa07c8687ac08 RCX: 0000000000000027
[ 7487.040278] RDX: ffffa07ff1521408 RSI: 0000000000000001 RDI: ffffa07ff1521400
[ 7487.040279] RBP: ffffa07c8687ac00 R08: 0000000000000000 R09: 65646e75203a745f
[ 7487.040280] R10: 75203b776f6c6672 R11: 72657466612d6573 R12: 0000000000000000
[ 7487.040281] R13: ffffa07c8484fc40 R14: ffffffff8951ffa0 R15: ffffa07ee4b06b48
[ 7487.040282] FS:  0000000000000000(0000) GS:ffffa07ff1500000(0000) knlGS:0000000000000000
[ 7487.040283] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 7487.040285] CR2: 0000000000000000 CR3: 0000000246820001 CR4: 00000000003706f0
[ 7487.040286] Call Trace:
[ 7487.040288]  <TASK>
[ 7487.040289]  ? refcount_warn_saturate+0xbe/0x110
[ 7487.040292]  ? __warn+0x81/0x130
[ 7487.040298]  ? refcount_warn_saturate+0xbe/0x110
[ 7487.040300]  ? report_bug+0x171/0x1a0
[ 7487.040304]  ? console_unlock+0xcb/0x120
[ 7487.040307]  ? handle_bug+0x3c/0x80
[ 7487.040309]  ? exc_invalid_op+0x17/0x70
[ 7487.040311]  ? asm_exc_invalid_op+0x1a/0x20
[ 7487.040315]  ? refcount_warn_saturate+0xbe/0x110
[ 7487.040319]  typec_altmode_release+0x49/0xc0 [typec]
[ 7487.040334]  device_release+0x34/0x90
[ 7487.040339]  kobject_put+0x78/0x190
[ 7487.040341]  ucsi_unregister_altmodes+0x41/0xa0 [typec_ucsi]
[ 7487.040347]  ucsi_unregister_partner.part.0+0x77/0xa0 [typec_ucsi]
[ 7487.040353]  ucsi_check_connection+0x73/0xc0 [typec_ucsi]
[ 7487.040359]  ucsi_poll_worker+0x3a/0x110 [typec_ucsi]
[ 7487.040365]  process_one_work+0x171/0x340
[ 7487.040369]  worker_thread+0x27b/0x3a0
[ 7487.040372]  ? __pfx_worker_thread+0x10/0x10
[ 7487.040374]  kthread+0xe5/0x120
[ 7487.040376]  ? __pfx_kthread+0x10/0x10
[ 7487.040378]  ret_from_fork+0x31/0x50
[ 7487.040381]  ? __pfx_kthread+0x10/0x10
[ 7487.040382]  ret_from_fork_asm+0x1b/0x30
[ 7487.040388]  </TASK>
[ 7487.040388] ---[ end trace 0000000000000000 ]---

It is probably unrelated but there is the above warning in your logs
during resume. The warning is related to USB-C and can be avoided if
you do not connect anything to the USB-C ports for the duration of the
test. The real fix for this warning made it into Linus's tree today.

    regards  Christian