UBSAN: shift-out-of-bounds in .../intel_opregion.c:388:15

Bug #1961738 reported by Daniel van Vugt
14
This bug affects 3 people
Affects Status Importance Assigned to Milestone
Linux
Fix Released
Unknown
linux (Ubuntu)
Fix Released
Low
Unassigned

Bug Description

This seems to happen at boot on all 11th gen Intel systems I've seen. But also on a 10th gen Intel system seen in other bug reports.

[ 1.778960] ================================================================================
[ 1.778964] UBSAN: shift-out-of-bounds in /build/linux-aa0B4d/linux-5.15.0/drivers/gpu/drm/i915/display/intel_opregion.c:388:15
[ 1.778967] shift exponent 37 is too large for 32-bit type 'unsigned int'
[ 1.778969] CPU: 5 PID: 374 Comm: systemd-udevd Not tainted 5.15.0-18-generic #18-Ubuntu
[ 1.778970] Hardware name: Microsoft Corporation Surface Laptop 4/Surface Laptop 4, BIOS 10.300.141 06/17/2021
[ 1.778971] Call Trace:
[ 1.778972] <TASK>
[ 1.778973] show_stack+0x52/0x58
[ 1.778977] dump_stack_lvl+0x4a/0x5f
[ 1.778979] dump_stack+0x10/0x12
[ 1.778980] ubsan_epilogue+0x9/0x45
[ 1.778981] __ubsan_handle_shift_out_of_bounds.cold+0x61/0xe9
[ 1.778983] ? icl_ddi_tc_is_clock_enabled+0x4d/0xc0 [i915]
[ 1.779060] intel_opregion_notify_encoder.cold+0x2b/0x45 [i915]
[ 1.779129] intel_sanitize_encoder+0x1e2/0x270 [i915]
[ 1.779187] intel_modeset_setup_hw_state+0x322/0x680 [i915]
[ 1.779236] ? drm_modeset_lock_all_ctx+0x151/0x1c0 [drm]
[ 1.779253] ? drm_warn_on_modeset_not_all_locked.part.0+0x5e/0x90 [drm]
[ 1.779265] intel_modeset_init_nogem+0x2a8/0x510 [i915]
[ 1.779315] ? intel_irq_postinstall+0x38b/0x680 [i915]
[ 1.779358] i915_driver_probe+0x1b7/0x470 [i915]
[ 1.779395] ? mutex_lock+0x13/0x40
[ 1.779399] i915_pci_probe+0x58/0x140 [i915]
[ 1.779435] local_pci_probe+0x48/0x90
[ 1.779438] pci_device_probe+0x115/0x1f0
[ 1.779439] really_probe+0x21b/0x420
[ 1.779442] __driver_probe_device+0x115/0x190
[ 1.779444] driver_probe_device+0x23/0xc0
[ 1.779445] __driver_attach+0xbd/0x1d0
[ 1.779447] ? __device_attach_driver+0x110/0x110
[ 1.779448] bus_for_each_dev+0x7c/0xc0
[ 1.779450] driver_attach+0x1e/0x20
[ 1.779452] bus_add_driver+0x135/0x200
[ 1.779453] driver_register+0x95/0xf0
[ 1.779454] __pci_register_driver+0x68/0x70
[ 1.779455] i915_register_pci_driver+0x23/0x30 [i915]
[ 1.779488] i915_init+0x3b/0xfc [i915]
[ 1.779534] ? 0xffffffffc1229000
[ 1.779535] do_one_initcall+0x46/0x1d0
[ 1.779539] ? kmem_cache_alloc_trace+0x19e/0x2e0
[ 1.779543] do_init_module+0x62/0x280
[ 1.779545] load_module+0xac9/0xbb0
[ 1.779546] __do_sys_finit_module+0xbf/0x120
[ 1.779548] __x64_sys_finit_module+0x18/0x20
[ 1.779549] do_syscall_64+0x59/0xc0
[ 1.779551] ? do_syscall_64+0x69/0xc0
[ 1.779552] ? do_syscall_64+0x69/0xc0
[ 1.779553] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1.779555] RIP: 0033:0x7f0a61a13a3d
[ 1.779557] Code: 5b 41 5c c3 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c3 53 0f 00 f7 d8 64 89 01 48
[ 1.779558] RSP: 002b:00007ffcfe9e0748 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[ 1.779560] RAX: ffffffffffffffda RBX: 00005601776d2090 RCX: 00007f0a61a13a3d
[ 1.779561] RDX: 0000000000000000 RSI: 00007f0a61ba8441 RDI: 0000000000000017
[ 1.779561] RBP: 0000000000020000 R08: 0000000000000000 R09: 0000000000000002
[ 1.779562] R10: 0000000000000017 R11: 0000000000000246 R12: 00007f0a61ba8441
[ 1.779562] R13: 00005601776cd450 R14: 00005601777f7d60 R15: 00005601777f8e30
[ 1.779564] </TASK>
[ 1.779564] ================================================================================

ProblemType: Bug
DistroRelease: Ubuntu 22.04
Package: linux-image-5.15.0-18-generic 5.15.0-18.18
ProcVersionSignature: Ubuntu 5.15.0-18.18-generic 5.15.12
Uname: Linux 5.15.0-18-generic x86_64
ApportVersion: 2.20.11-0ubuntu77
Architecture: amd64
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC0: dan 1364 F.... pipewire-media-
                      dan 1365 F.... pulseaudio
 /dev/snd/seq: dan 1363 F.... pipewire
CasperMD5CheckResult: pass
CurrentDmesg:
 Error: command ['pkexec', 'dmesg'] failed with exit code 127: Error executing command as another user: Not authorized

 This incident has been reported.
Date: Tue Feb 22 15:11:13 2022
InstallationDate: Installed on 2022-02-14 (8 days ago)
InstallationMedia: Ubuntu 22.04 LTS "Jammy Jellyfish" - Alpha amd64 (20220214)
MachineType: Microsoft Corporation Surface Laptop 4
ProcFB: 0 i915drmfb
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-5.15.0-18-generic root=UUID=6f840793-70c0-4fc9-b509-2f18ca9665ac ro quiet splash vt.handoff=7
RelatedPackageVersions:
 linux-restricted-modules-5.15.0-18-generic N/A
 linux-backports-modules-5.15.0-18-generic N/A
 linux-firmware 20220217.git6342082c-0ubuntu1
SourcePackage: linux
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 06/17/2021
dmi.bios.vendor: Microsoft Corporation
dmi.bios.version: 10.300.141
dmi.board.name: Surface Laptop 4
dmi.board.vendor: Microsoft Corporation
dmi.chassis.type: 9
dmi.chassis.vendor: Microsoft Corporation
dmi.modalias: dmi:bvnMicrosoftCorporation:bvr10.300.141:bd06/17/2021:svnMicrosoftCorporation:pnSurfaceLaptop4:pvr124I00061T000M0100000D0B07F1C01P16Y0U02S0:rvnMicrosoftCorporation:rnSurfaceLaptop4:rvr:cvnMicrosoftCorporation:ct9:cvr:skuSurface_Laptop_4_19501951:
dmi.product.family: Surface
dmi.product.name: Surface Laptop 4
dmi.product.sku: Surface_Laptop_4_1950:1951
dmi.product.version: 124I:00061T:000M:0100000D:0B:07F:1C:01P:16Y:0U:02S:0
dmi.sys.vendor: Microsoft Corporation

Revision history for this message
Daniel van Vugt (vanvugt) wrote :
Revision history for this message
Daniel van Vugt (vanvugt) wrote :
Changed in linux (Ubuntu):
status: New → Triaged
importance: Undecided → Low
description: updated
tags: added: i915
Revision history for this message
Daniel van Vugt (vanvugt) wrote :

The aforementioned commit is now in the jammy kernel. No wonder I hadn't seen this bug in a while.

Changed in linux (Ubuntu):
status: Triaged → Fix Released
Changed in linux:
status: Unknown → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.