From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mgamail.intel.com (mgamail.intel.com [198.175.65.9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id A4642362123 for ; Thu, 4 Dec 2025 17:50:18 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=198.175.65.9 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1764870620; cv=none; b=LImoByds6rF9F9qko7plExluNUV2r0q3uHmaG6fvdcio4WZKg5f5Z5qjM86HxxxXxvuLULbwliGjjl/O4peM7e2QXJ4WBEFhRS9OMKOuKXzhAatyhGtDstCM2nDGojXwftPW8gn6+IZXGxiUAei6fMhg9tmK6gkzV3Vv+2iFCmc= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1764870620; c=relaxed/simple; bh=plZqPd5AgvFzy8Z5GnGogb0ce974/c0CwB9yW1Q1AMY=; h=Message-ID:Subject:From:To:Cc:Date:In-Reply-To:References: Content-Type:MIME-Version; b=VZCUDylSiq/LkjMR5UdMtGK0D9WnbxbPrPmKlL/d/PMChRw9XulkNEbYwwzwE+nJv2PxPgj7PInkUge9qidrKXVDdQbIMKyL4OXhbt3RKfH5ZEzUOPAEDQsGaG3zZalU+gCcohST99PmzF+Uk03AjncEFs8vWWfJ1Ow7hw/Qjyg= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=linux.intel.com; spf=pass smtp.mailfrom=linux.intel.com; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.b=Oo912eAq; arc=none smtp.client-ip=198.175.65.9 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=linux.intel.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=linux.intel.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.b="Oo912eAq" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1764870619; x=1796406619; h=message-id:subject:from:to:cc:date:in-reply-to: references:content-transfer-encoding:mime-version; bh=plZqPd5AgvFzy8Z5GnGogb0ce974/c0CwB9yW1Q1AMY=; b=Oo912eAq1ZAkRtWRopBKftGHGf3Qr0m6hq6ikp/Jz/Qrxh2crUwtBX0l cDndTwt+MCTspMtuOYmOvXfvRsg4JIo5AESflnYuTfTcA14t9QlzDxLzH UA4bhKdWu753eiPgSNiMddTG2RL3ieMl0jdbiqjEYeAYC686FGdiu4j1O HW8pfopwpA7DdaTNY8ychunbGo4ChAptth8Oem5anMBlJPkj68GbL7mhb Nsgfy7aMamz/BkE+7Ehv6uKXztzVtThnyg/eqtKKfl5z2hpqTGttBUBMB iK19OL4apRtXcDD4apjm2ZKt02T/PBG3EqA70v2fQVe1A8xvZz0Xn/VfU A==; X-CSE-ConnectionGUID: NehFJUOiTKeweVMgIGk7Ug== X-CSE-MsgGUID: PWOVacu3SnWqlaPXYphYfQ== X-IronPort-AV: E=McAfee;i="6800,10657,11632"; a="89551150" X-IronPort-AV: E=Sophos;i="6.20,249,1758610800"; d="scan'208";a="89551150" Received: from orviesa006.jf.intel.com ([10.64.159.146]) by orvoesa101.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 04 Dec 2025 09:50:18 -0800 X-CSE-ConnectionGUID: dbEtKAJPSKuxVJXyT41FOA== X-CSE-MsgGUID: cxJvP8gRQfqrnAztoQ68Xg== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="6.20,249,1758610800"; d="scan'208";a="194119709" Received: from hrotuna-mobl2.ger.corp.intel.com (HELO [10.245.245.167]) ([10.245.245.167]) by orviesa006-auth.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 04 Dec 2025 09:50:14 -0800 Message-ID: Subject: Re: [git pull] drm for 6.19-rc1 From: Thomas =?ISO-8859-1?Q?Hellstr=F6m?= To: Linus Torvalds , Dave Airlie , Matthew Brost , Jouni =?ISO-8859-1?Q?H=F6gander?= , Matt Roper Cc: Simona Vetter , dri-devel , LKML Date: Thu, 04 Dec 2025 18:50:11 +0100 In-Reply-To: References: Organization: Intel Sweden AB, Registration Number: 556189-6027 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.54.3 (3.54.3-2.fc41) Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Hi, Linus, On Thu, 2025-12-04 at 09:35 -0800, Linus Torvalds wrote: > On Tue, 2 Dec 2025 at 23:23, Dave Airlie wrote: > >=20 > > This is the main drm pull request for 6.19. >=20 > I have pulled this and pushed out the result. It "works" for me on my > Xe setup, but I do get a new refcount warning, which looks like > something might be seriously wrong. >=20 > (Side note: I'm also running with >=20 > =C2=A0 > https://lore.kernel.org/all/20251119153321.2640969-1-jani.nikula@intel.co= m/ >=20 > fixed up for the merge and applied to make my dual 6k monitor setup > happy). >=20 > I get this: >=20 > =C2=A0 refcount_t: underflow; use-after-free. > =C2=A0 WARNING: lib/refcount.c:28 at 0x0, CPU#43: gst-plugin-scan/2770 > =C2=A0 Modules linked in: rfcomm sunrpc nf_conntrack_netbios_ns ... > =C2=A0 CPU: 43 UID: 60578 PID: 2770 Comm: gst-plugin-scan Not tainted > 6.18.0-06709-gab59a11f1240 #25 PREEMPTLAZY > =C2=A0 Hardware name: Gigabyte Technology Co., Ltd. TRX40 AORUS > MASTER/TRX40 AORUS MASTER, BIOS F7 09/07/2022 > =C2=A0 RIP: 0010:refcount_warn_saturate+0x42/0x70 > =C2=A0 ... > =C2=A0 Call Trace: > =C2=A0=C2=A0 xe_exec_queue_destroy+0x1be/0x1d0 [xe] > =C2=A0=C2=A0 xe_vm_close_and_put+0x3b8/0x770 [xe] > =C2=A0=C2=A0 xe_vm_destroy_ioctl+0x107/0x180 [xe] > =C2=A0=C2=A0 drm_ioctl_kernel+0xa3/0xd0 [drm] > =C2=A0=C2=A0 drm_ioctl+0x30f/0x470 [drm] > =C2=A0=C2=A0 xe_drm_ioctl+0x48/0x70 [xe] > =C2=A0=C2=A0 __se_sys_ioctl+0x6d/0xb0 > =C2=A0=C2=A0 do_syscall_64+0x6a/0x260 > =C2=A0=C2=A0 entry_SYSCALL_64_after_hwframe+0x4b/0x53 >=20 > which hopefully gives somebody an idea. Looks like a backmerge gone wrong and duplicating a put. We'll pick that up and try to provide a fix ASAP. Thanks, Thomas >=20 > Added Xe people involved with recent commits to the participants. >=20 > Anybody? >=20 > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = Linus