multiple UBSAN warnings in Intel IPU6 camera driver at boot
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux (Ubuntu) |
Invalid
|
High
|
You-Sheng Yang | ||
Jammy |
Fix Released
|
Medium
|
You-Sheng Yang |
Bug Description
[SRU Justfication]
[Impact]
Several UBSAN warnings captured on Intel IPU6 camera equipped platforms
running 5.15+ kernels.
[Fix]
Upstream fix commit 8dcb7d8df28f ("media: pci: intel: Avoid UBSAN
warnings of index bound and shift").
[Test Case]
Boot Intel IPU6 camera equipped platforms and check dmesg.
[Where problems could occur]
This patch turns a few return statements to error to stop further
processing that may fall in UBSAN warnings. No other side effect.
[Other Info]
While plan for -generic and oem-5.17 is still under discuss, only Jammy
is nominated for linux-oem-
This depends on the pull request titled "Support Intel IPU6 MIPI camera
on Alder Lake platforms" for bug 1955383 for Jammy.
========== original bug report ==========
UBSAN is turned on by default in Ubuntu 5.15 kernel. While Intel IPU6 driver is still suffering from bug 1958004, intel_iommu issue, so these are found with intel_iommu=off.
[ 51.469485] =======
[ 51.469490] UBSAN: invalid-load in /tmp/kernel-
[ 51.469494] load of value 2 is not a valid value for type '_Bool'
[ 51.469497] CPU: 8 PID: 1315 Comm: camerasrc0:src Tainted: G O 5.15.0-2017-generic #17~20.
[ 51.469500] Hardware name: Dell Inc. XPS 9320/, BIOS 0.2.7 12/02/2021
[ 51.469501] Call Trace:
[ 51.469504] <TASK>
[ 51.469508] dump_stack_
[ 51.469516] dump_stack+
[ 51.469519] ubsan_epilogue+
[ 51.469523] __ubsan_
[ 51.469530] dma_buf_
[ 51.469537] ipu_psys_
[ 51.469545] ipu_psys_
[ 51.469550] ? __fget_
[ 51.469556] __x64_sys_
[ 51.469560] do_syscall_
[ 51.469564] ? do_user_
[ 51.469567] ? irqentry_
[ 51.469570] ? irqentry_
[ 51.469573] ? exc_page_
[ 51.469576] ? asm_exc_
[ 51.469581] entry_SYSCALL_
[ 51.469585] RIP: 0033:0x7fa5e047250b
[ 51.469588] Code: 0f 1e fa 48 8b 05 85 39 0d 00 64 c7 00 26 00 00 00 48 c7 c0 ff ff ff ff c3 66 0f 1f 44 00 00 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 55 39 0d 00 f7 d8 64 89 01 48
[ 51.469589] RSP: 002b:00007fa5de
[ 51.469592] RAX: ffffffffffffffda RBX: 00007fa5d0004000 RCX: 00007fa5e047250b
[ 51.469593] RDX: 000000000000001f RSI: 00000000c0044102 RDI: 000000000000001e
[ 51.469595] RBP: 00007fa5d4a371e0 R08: 0000000000000000 R09: 000000000000007c
[ 51.469596] R10: 00007fa5debfa120 R11: 0000000000000246 R12: 0000000000000000
[ 51.469597] R13: 00007fa5d4a31bc0 R14: 00007fa5debfa36c R15: 00007fa5debfa430
[ 51.469598] </TASK>
[ 51.469599] =======
[ 52.050608] =======
[ 52.050620] UBSAN: array-index-
[ 52.050631] index -1 is out of range for type 'ipu_resource_alloc [128]'
[ 52.050637] CPU: 8 PID: 803 Comm: psys_sched_cmd Tainted: G O 5.15.0-2017-generic #17~20.
[ 52.050647] Hardware name: Dell Inc. XPS 9320/, BIOS 0.2.7 12/02/2021
[ 52.050651] Call Trace:
[ 52.050656] <TASK>
[ 52.050664] dump_stack_
[ 52.050692] dump_stack+
[ 52.050703] ubsan_epilogue+
[ 52.050716] __ubsan_
[ 52.050731] ipu_psys_
[ 52.050761] ipu_psys_
[ 52.050781] ? ipu_psys_
[ 52.050801] ipu_psys_
[ 52.050819] ipu_psys_
[ 52.050836] ipu_psys_
[ 52.050850] ? __wake_
[ 52.050859] ? psys_isr_
[ 52.050874] kthread+0x127/0x150
[ 52.050884] ? set_kthread_
[ 52.050893] ret_from_
[ 52.050911] </TASK>
[ 52.050914] =======
[ 52.050924] =======
[ 52.050926] UBSAN: shift-out-of-bounds in /tmp/kernel-
[ 52.050932] shift exponent 34 is too large for 32-bit type 'unsigned int'
[ 52.050938] CPU: 8 PID: 803 Comm: psys_sched_cmd Tainted: G O 5.15.0-2017-generic #17~20.
[ 52.050944] Hardware name: Dell Inc. XPS 9320/, BIOS 0.2.7 12/02/2021
[ 52.050947] Call Trace:
[ 52.050949] <TASK>
[ 52.050951] dump_stack_
[ 52.050964] dump_stack+
[ 52.050975] ubsan_epilogue+
[ 52.050985] __ubsan_
[ 52.050997] ? ipu_resource_
[ 52.051016] ? __alloc_
[ 52.051033] ipu_psys_
[ 52.051061] ipu_psys_
[ 52.051079] ? ipu_psys_
[ 52.051095] ipu_psys_
[ 52.051111] ipu_psys_
[ 52.051126] ipu_psys_
[ 52.051140] ? __wake_
[ 52.051145] ? psys_isr_
[ 52.051160] kthread+0x127/0x150
[ 52.051167] ? set_kthread_
[ 52.051175] ret_from_
[ 52.051189] </TASK>
[ 52.051191] =======
[ 52.051193] =======
[ 52.051195] UBSAN: shift-out-of-bounds in /tmp/kernel-
[ 52.051199] shift exponent 34 is too large for 32-bit type 'unsigned int'
[ 52.051202] CPU: 8 PID: 803 Comm: psys_sched_cmd Tainted: G O 5.15.0-2017-generic #17~20.
[ 52.051206] Hardware name: Dell Inc. XPS 9320/, BIOS 0.2.7 12/02/2021
[ 52.051209] Call Trace:
[ 52.051210] <TASK>
[ 52.051212] dump_stack_
[ 52.051224] dump_stack+
[ 52.051235] ubsan_epilogue+
[ 52.051245] __ubsan_
[ 52.051256] ? ipu_resource_
[ 52.051273] ? __alloc_
[ 52.051289] ipu_psys_
[ 52.051312] ipu_psys_
[ 52.051329] ? ipu_psys_
[ 52.051345] ipu_psys_
[ 52.051360] ipu_psys_
[ 52.051375] ipu_psys_
[ 52.051388] ? __wake_
[ 52.051393] ? psys_isr_
[ 52.051407] kthread+0x127/0x150
[ 52.051414] ? set_kthread_
[ 52.051422] ret_from_
[ 52.051436] </TASK>
[ 52.051437] =======
---
ProblemType: Bug
ApportVersion: 2.20.11-
Architecture: amd64
AudioDevicesInUse: Error: command ['fuser', '-v', '/dev/snd/seq', '/dev/snd/timer'] failed with exit code 1:
CasperMD5CheckR
Dependencies:
DistributionCha
# This is the distribution channel descriptor for the OEM CDs
# For more information see http://
canonical-
DistroRelease: Ubuntu 20.04
InstallationDate: Installed on 2021-12-20 (26 days ago)
InstallationMedia: Ubuntu 20.04 "Focal" - Build amd64 LIVE Binary 20200502-05:58
MachineType: Dell Inc. XPS 9320
Package: linux-firmware 1.187.25+staging.42 [origin: LP-PPA-
PackageArchitec
ProcFB: 0 EFI VGA
ProcKernelCmdLine: BOOT_IMAGE=
ProcVersionSign
PulseList: Error: command ['pacmd', 'list'] failed with exit code 1: No PulseAudio daemon running, or not running as session daemon.
RelatedPackageV
linux-
linux-
linux-firmware 1.187.25+staging.42
Tags: third-party-
Uname: Linux 5.15.0-2017-generic x86_64
UnreportableReason: This is not an official Ubuntu package. Please remove any third party package and try again.
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: N/A
_MarkForUpload: True
dmi.bios.date: 12/02/2021
dmi.bios.release: 0.2
dmi.bios.vendor: Dell Inc.
dmi.bios.version: 0.2.7
dmi.board.vendor: Dell Inc.
dmi.chassis.type: 10
dmi.chassis.vendor: Dell Inc.
dmi.modalias: dmi:bvnDellInc.
dmi.product.family: XPS
dmi.product.name: XPS 9320
dmi.product.sku: 0AF3
dmi.sys.vendor: Dell Inc.
CVE References
Changed in linux (Ubuntu Jammy): | |
importance: | Undecided → Medium |
status: | New → Fix Committed |
Changed in linux (Ubuntu Jammy): | |
status: | In Progress → Fix Committed |
apport information