tvservice fails

[Juerg Haefliger]

$ sudo tvservice -s
vchi_msg_dequeue -> -1(90)
state 0x1 [TV is off]

yields:

[ 39.097720] vchiq: header ffff8000110d0f68: bufsize 10 < size 34
[ 39.103958] ------------[ cut here ]------------
[ 39.108725] invalid size
[ 39.111398] WARNING: CPU: 2 PID: 2233 at drivers/staging/vc04_services/interface/vchiq_arm/vchiq_arm.c:952 vchiq_ioc_dequeue_message+0x180/0x2c0
[ 39.124567] Modules linked in: cmac algif_hash algif_skcipher af_alg bnep hci_uart btqca btrtl btbcm btintel dm_multipath scsi_dh_rdac scsi_dh_emc scsi_dh_alua btsdio bluetooth ecdh_generic bcm2835_codec(CE) ecc bcm2835_v4l2(CE) brcmfmac bcm2835_isp(CE) bcm2835_mmal_vchiq(CE) brcmutil v4l2_mem2mem snd_bcm2835(CE) videobuf2_vmalloc videobuf2_dma_contig cfg80211 videobuf2_memops snd_pcm videobuf2_v4l2 videobuf2_common snd_timer videodev raspberrypi_hwmon snd bcm2835_gpiomem vc_sm_cma(CE) mc rpivid_mem uio_pdrv_genirq uio nvmem_rmem sch_fq_codel drm ip_tables x_tables autofs4 btrfs blake2b_generic raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor xor_neon raid6_pq libcrc32c raid1 raid0 multipath linear dwc2 crct10dif_ce spidev roles udc_core xhci_pci xhci_pci_renesas phy_generic aes_arm64
[ 39.197843] CPU: 2 PID: 2233 Comm: tvservice Tainted: G C E 5.11.0-1009-raspi #10+21.10.1-Ubuntu
[ 39.207903] Hardware name: Raspberry Pi 4 Model B Rev 1.2 (DT)
[ 39.213817] pstate: 60400005 (nZCv daif +PAN -UAO -TCO BTYPE=--)
[ 39.219909] pc : vchiq_ioc_dequeue_message+0x180/0x2c0
[ 39.225125] lr : vchiq_ioc_dequeue_message+0x180/0x2c0
[ 39.230334] sp : ffff800010e53c70
[ 39.233690] x29: ffff800010e53c70 x28: ffff46e3ce150f80
[ 39.239079] x27: 0000000000000000 x26: 0000000000000000
[ 39.244467] x25: 0000000000000000 x24: ffff8000110d0f68
[ 39.249855] x23: ffff8000110cd194 x22: ffff800010e53d48
[ 39.255243] x21: 0000000000000034 x20: ffff46e3c516e800
[ 39.260632] x19: ffff46e3c516f800 x18: 0000000000000030
[ 39.266019] x17: 0000000000000000 x16: 0000000000000000
[ 39.271406] x15: ffffffffffffffff x14: ffff800090e53957
[ 39.276793] x13: 0000000000000006 x12: ffff80001002d000
[ 39.282181] x11: ffffad7c14e60f70 x10: 0000000000000b10
[ 39.287569] x9 : ffffad7c1400e418 x8 : ffff46e3ce151af0
[ 39.292957] x7 : 000000000000035f x6 : ffffad7c1548e000
[ 39.298345] x5 : 0000000000000000 x4 : ffff46e47b7bc948
[ 39.303731] x3 : ffff46e47b7cccf0 x2 : 0000000000000000
[ 39.309118] x1 : 0000000000000000 x0 : ffff46e3ce150f80
[ 39.314506] Call trace:
[ 39.316981] vchiq_ioc_dequeue_message+0x180/0x2c0
[ 39.321841] vchiq_ioctl+0x7f4/0xdac
[ 39.325464] __arm64_sys_ioctl+0xb4/0x100
[ 39.329530] el0_svc_common.constprop.0+0x88/0x220
[ 39.334392] do_el0_svc+0x30/0xa0
[ 39.337750] el0_svc+0x28/0x70
[ 39.340846] el0_sync_handler+0x1a4/0x1b0
[ 39.344910] el0_sync+0x17c/0x180
[ 39.348268] ---[ end trace b26bb2281d792cc5 ]---

[Juerg Haefliger (juergh)]

Same behavior with Focal 5.4 and Impish 5.13.

[Juerg Haefliger (juergh)]

After testing various kernels (including the raspberrypi kernel) and FW versions, I'm fairly certain that it's a problem with our outdated raspberrypi userland packages. So I'm reassigning the ticket...

[Dave Jones (waveform)]

This is indeed down to the (deliberately) outdated userland package. While this should be fixed for Jammy, the older series are a trickier prospect as bumping the userland version will remove mmal supported on arm64 (this is also the case for Jammy, but libcamera is intended to be the replacement for the legacy camera utilities there).

I'll leave the targetting on the older series for now, pending a decision on whether it's possible to backport a specific patch for tvservice.

[Launchpad Janitor (janitor)]

This bug was fixed in the package raspberrypi-userland - 0~20211124+git14b90ff-0ubuntu1

---------------
raspberrypi-userland (0~20211124+git14b90ff-0ubuntu1) jammy; urgency=medium

  * Bump to current version on RaspiOS Bullseye (LP: #1950289):
    - Fixes the tvservice application (LP: #1944541)
    - d/p/fix-multiarch-dir.patch: refreshed context
    - d/p/add-custom-bootdir.patch: refreshed context
    - d/p/fix-format-overflow.patch: merged upstream
    - d/p/libraspberrypi0.install:
      - split into armhf and arm64 variants
      - removed all the plugins/containers entries from the arm64 variant now
        that MMAL is no longer built for arm64
    - d/p/libraspberrypi0.symbols.arm{hf,64}:
      - removed all hostfs and vcfiled calls
      - removed mmal calls for allocation / lookup / release of client
        components and contexts
    - d/p/libraspberrypi0.symbols.arm64:
      - removed all MMAL related entries
    - d/libraspberrypi0.lintian-overrides.arm64:
      - removed all MMAL related entries
    - d/libraspberrypi-bin.manpages:
      - split into armhf and arm64 variants
      - removed all raspicam related manpages from the arm64 version
    - d/*.[17]:
      - man-pages were merged upstream; these are now in the orig-tar
    - d/rules:
      - fix install on arm64 where containers_* binaries are no longer built

 -- Dave Jones <email address hidden> Wed, 21 Jul 2021 14:03:05 +0100

[Brian Murray (brian-murray)]

The Hirsute Hippo has reached End of Life, so this bug will not be fixed for that release.

[Brian Murray (brian-murray)]

Ubuntu 21.10 (Impish Indri) has reached end of life, so this bug will not be fixed for that specific release.