Confirmed, If I manully release MLModel in sceneDidDisconnect, and then the problem disappear.
I'm convinced this is a system-level bug; if the app crashes or killed, it causes something to leak in the system, that makes absolutely no sense.
Although I temporarily resolved the issue using sceneDidDisconnect. However, sceneDidDisconnect is not a reliable cleanup point because it is not guaranteed to be invoked in many real-world termination scenarios.
For example, the callback may not be called when the app is force-terminated by Xcode Stop, killed by the system due to memory pressure (Jetsam), terminated by the watchdog, crashes unexpectedly, or is otherwise killed before scene teardown occurs.
I have also reproduced the -42905 failure by repeatedly launching the app, loading the encrypted model, and then pressing Xcode's Stop button. In that scenario the process is terminated without a guaranteed opportunity to execute sceneDidDisconnect, yet the failure still accumulates over time. This suggests that cleanup cannot rely solely on application-level lifecycle callbacks.
This must be a system bug; it’s hard to believe this issue has persisted for over four years and still hasn’t been resolved.