WARNING: CPU: 2 PID: 9757 at drivers/thunderbolt/ctl.c:1113 tb_cfg_read+0xa5/0xf0 [thunderbolt]
Modules linked in: vfat fat uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr bnep sunrpc binfmt_misc snd_sof_pci_intel_skl snd_sof_intel_hda_generic soundwire_intel snd_sof_intel_hda_sdw_bpt snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda soundwire_cadence snd_sof_pci snd_sof_xtensa_dsp snd_sof intel_rapl_msr snd_sof_utils snd_soc_acpi_intel_match intel_rapl_common snd_soc_acpi_intel_sdca_quirks soundwire_generic_allocation intel_uncore_frequency snd_soc_acpi intel_uncore_frequency_common crc8 intel_pmc_core_pltdrv soundwire_bus intel_pmc_core snd_soc_sdca pmt_telemetry pmt_class intel_pmc_ssram_telemetry intel_vsec snd_soc_avs intel_tcc_cooling x86_pkg_temp_thermal intel_powerclamp coretemp snd_soc_hda_codec snd_hda_ext_core kvm_intel
 snd_soc_core snd_hda_codec_hdmi snd_compress snd_hda_codec_cs8409 ac97_bus brcmfmac_wcc snd_hda_codec_generic snd_pcm_dmaengine snd_hda_intel kvm snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec snd_hda_core snd_hwdep snd_seq irqbypass rapl iTCO_wdt nls_utf8 snd_seq_device intel_cstate intel_pmc_bxt iTCO_vendor_support mei_pxp mei_hdcp applesmc brcmfmac hfsplus snd_pcm hci_uart brcmutil btqca intel_uncore pcspkr snd_timer cfg80211 snd i2c_i801 i2c_smbus soundcore pwrseq_core btrtl btintel intel_xhci_usb_role_switch btbcm mei_me mmc_core mei bluetooth idma64 acpi_als sbs industrialio_triggered_buffer kfifo_buf industrialio rfkill sbshc joydev loop nfnetlink zram lz4hc_compress lz4_compress i915 i2c_algo_bit drm_buddy ttm nvme thunderbolt drm_display_helper polyval_clmulni spi_pxa2xx_platform dw_dmac ghash_clmulni_intel nvme_core spi_pxa2xx_core sha512_ssse3 sha1_ssse3 nvme_keyring cec nvme_auth applespi video wmi i2c_dev fuse
CPU: 2 UID: 0 PID: 9757 Comm: kworker/u16:4 Not tainted 6.16.10-100.fc41.x86_64 #1 PREEMPT(lazy) 
Hardware name: Apple Inc. MacBookPro14,1/Mac-B4831CEBD52A0C4C, BIOS 529.140.2.0.0 06/23/2024
Workqueue: async async_run_entry_fn
RIP: 0010:tb_cfg_read+0xa5/0xf0 [thunderbolt]
Code: 05 48 d9 19 dc 75 64 48 83 c4 20 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 89 de 48 c7 c7 89 22 6b c0 e8 3b dc d1 d8 <0f> 0b eb ca 44 8b 6c 24 10 41 83 fc 01 75 0b bb ed ff ff ff 41 83
RSP: 0000:ffffd06f43a03ce0 EFLAGS: 00010286
RAX: 0000000000000000 RBX: 00000000ffffff94 RCX: 0000000000000027
RDX: ffff8deee6d1cf88 RSI: 0000000000000001 RDI: ffff8deee6d1cf80
RBP: ffff8ded81b60900 R08: 0000000000000000 R09: 00000000ffffffff
R10: 0000000000000001 R11: 0000000000000004 R12: 0000000000000002
R13: 0000000000000000 R14: 0000000000000003 R15: ffffd06f43a03ce0
FS:  0000000000000000(0000) GS:ffff8def4a6f0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000019fa2c001 CR4: 00000000003726f0
Call Trace:
 <TASK>
 tb_switch_reset+0x76/0x1b0 [thunderbolt]
 ? __pci_restore_msix_state+0x157/0x170
 tb_resume_noirq+0x275/0x290 [thunderbolt]
 tb_domain_resume_noirq+0x42/0x60 [thunderbolt]
 ? __pfx_pci_pm_resume_noirq+0x10/0x10
 dpm_run_callback+0x47/0x140
 device_resume_noirq+0xc7/0x2d0
 async_resume_noirq+0x1d/0x30
 async_run_entry_fn+0x31/0x130
 process_one_work+0x18a/0x340
 worker_thread+0x256/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xf9/0x240
 ? __pfx_kthread+0x10/0x10
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0xf2/0x110
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>

WARNING: CPU: 3 PID: 24472 at lib/refcount.c:28 refcount_warn_saturate+0xbe/0x110
Modules linked in: wireguard curve25519_x86_64 libcurve25519_generic ip6_udp_tunnel udp_tunnel overlay uinput michael_mic rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct qrtr_mhi nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables bnep sunrpc binfmt_misc vfat squashfs fat snd_ps_pdm_dma snd_soc_ps_mach snd_soc_dmic snd_sof_amd_acp70 snd_sof_amd_acp63 snd_sof_amd_vangogh snd_sof_amd_rembrandt snd_sof_amd_renoir snd_sof_amd_acp qrtr snd_sof_pci amd_atl snd_sof_xtensa_dsp intel_rapl_msr ath11k_pci intel_rapl_common snd_sof snd_sof_utils ath11k snd_pci_ps snd_hda_codec_conexant snd_soc_acpi_amd_match snd_hda_codec_generic snd_amd_sdw_acpi soundwire_amd soundwire_generic_allocation snd_hda_codec_hdmi soundwire_bus edac_mce_amd snd_soc_sdca qmi_helpers snd_hda_intel snd_soc_core snd_intel_dspcfg kvm_amd snd_intel_sdw_acpi spd5118 snd_compress
 mac80211 snd_hda_codec ac97_bus kvm uvcvideo btusb snd_pcm_dmaengine snd_rpl_pci_acp6x btrtl snd_hda_core snd_acp_pci snd_amd_acpi_mach snd_ctl_led uvc btintel snd_hwdep snd_acp_legacy_common libarc4 btbcm videobuf2_vmalloc irqbypass snd_seq snd_pci_acp6x huawei_wmi videobuf2_memops rapl btmtk videobuf2_v4l2 wmi_bmof pcspkr sparse_keymap snd_pci_acp5x snd_seq_device videobuf2_common cfg80211 bluetooth snd_rn_pci_acp3x snd_pcm k10temp videodev i2c_piix4 mc snd_acp_config rfkill i2c_smbus snd_timer snd_soc_acpi mhi snd_pci_acp3x amd_pmf snd soundcore amdtee amd_sfh tee platform_profile amd_pmc joydev loop nfnetlink zram lz4hc_compress lz4_compress amdgpu amdxcp i2c_algo_bit drm_ttm_helper ttm drm_exec gpu_sched drm_suballoc_helper drm_panel_backlight_quirks drm_buddy drm_display_helper cec nvme nvme_core polyval_clmulni ghash_clmulni_intel video hid_multitouch sha512_ssse3 nvme_keyring thunderbolt sha1_ssse3 nvme_auth sp5100_tco wmi i2c_hid_acpi i2c_hid serio_raw fuse i2c_dev
CPU: 3 UID: 0 PID: 24472 Comm: kworker/u48:18 Not tainted 6.16.10-100.fc41.x86_64 #1 PREEMPT(lazy) 
Hardware name: HONOR BRN-HXXB/BRN-HXXB-PCB, BIOS 1.15 03/05/2025
Workqueue: async async_run_entry_fn
RIP: 0010:refcount_warn_saturate+0xbe/0x110
Code: 02 01 e8 a5 ca 7b ff 0f 0b e9 89 88 51 ff 80 3d f7 2c 01 02 00 75 85 48 c7 c7 a0 b4 0a a0 c6 05 e7 2c 01 02 01 e8 82 ca 7b ff <0f> 0b e9 66 88 51 ff 80 3d d5 2c 01 02 00 0f 85 5e ff ff ff 48 c7
RSP: 0018:ffffd05f0f103ae8 EFLAGS: 00010282
RAX: 0000000000000000 RBX: ffff8cb6112829c0 RCX: 0000000000000027
RDX: ffff8cb96e59cf88 RSI: 0000000000000001 RDI: ffff8cb96e59cf80
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffff92
R13: ffffd05f0f103b24 R14: ffff8cb6112829c0 R15: 61c8864680b583eb
FS:  0000000000000000(0000) GS:ffff8cb9ccb70000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000d9101bc8000 CR3: 000000034b42c000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 tb_cfg_request_put+0x5a/0x70 [thunderbolt]
 tb_cfg_write_raw+0x21a/0x2c0 [thunderbolt]
 tb_cfg_write+0x58/0xf0 [thunderbolt]
 usb4_switch_set_wake+0x297/0x3e0 [thunderbolt]
 tb_switch_resume+0xe1/0x330 [thunderbolt]
 tb_resume_noirq+0x54/0x290 [thunderbolt]
 tb_domain_resume_noirq+0x42/0x60 [thunderbolt]
 ? __pfx_pci_pm_resume_noirq+0x10/0x10
 dpm_run_callback+0x47/0x140
 device_resume_noirq+0xc7/0x2d0
 async_resume_noirq+0x1d/0x30
 async_run_entry_fn+0x31/0x130
 process_one_work+0x18a/0x340
 worker_thread+0x256/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xf9/0x240
 ? __pfx_kthread+0x10/0x10
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0xf2/0x110
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>