UBSAN: array-index-out-of-bounds

[js1]

[ 43.991642] ------------[ cut here ]------------
[ 43.991650] UBSAN: array-index-out-of-bounds in /var/lib/dkms/broadcom-sta/6.30.223.271/build/src/wl/sys/wl_cfg80211_hybrid.c:2394:26
[ 43.991659] index 1 is out of range for type 'uint8 [1]'
[ 43.991663] CPU: 1 PID: 763 Comm: wl_event_handle Tainted: P OE 6.8.0-31-generic #31-Ubuntu
[ 43.991668] Hardware name: Apple Inc. MacBookAir4,2/Mac-742912EFDBEE19B3, BIOS 135.0.0.0.0 06/14/2019
[ 43.991670] Call Trace:
[ 43.991674] <TASK>
[ 43.991678] dump_stack_lvl+0x48/0x70
[ 43.991692] dump_stack+0x10/0x20
[ 43.991697] __ubsan_handle_out_of_bounds+0xc6/0x110
[ 43.991703] wl_update_bss_info+0x10f/0x370 [wl]
[ 43.991807] wl_bss_connect_done.isra.0+0x170/0x2a0 [wl]
[ 43.991901] wl_notify_connect_status+0xdf/0x450 [wl]
[ 43.991998] wl_event_handler+0x7b/0x240 [wl]
[ 43.992077] ? __pfx_wl_event_handler+0x10/0x10 [wl]
[ 43.992147] kthread+0xf2/0x120
[ 43.992151] ? __pfx_kthread+0x10/0x10
[ 43.992154] ret_from_fork+0x47/0x70
[ 43.992158] ? __pfx_kthread+0x10/0x10
[ 43.992160] ret_from_fork_asm+0x1b/0x30
[ 43.992165] </TASK>
[ 43.992166] ---[ end trace ]---

ProblemType: Bug
DistroRelease: Ubuntu 24.04
Package: linux-image-6.8.0-31-generic 6.8.0-31.31
ProcVersionSignature: Ubuntu 6.8.0-31.31-generic 6.8.1
Uname: Linux 6.8.0-31-generic x86_64
NonfreeKernelModules: wl
ApportVersion: 2.28.1-0ubuntu3
Architecture: amd64
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/seq: js1 1135 F.... pipewire
 /dev/snd/controlC0: js1 1137 F.... wireplumber
CRDA: N/A
CasperMD5CheckResult: unknown
CurrentDesktop: KDE
Date: Wed May 15 22:42:50 2024
InstallationDate: Installed on 2024-03-01 (75 days ago)
InstallationMedia: Kubuntu 23.10 "Mantic Minotaur" - Release amd64 (20231010)
MachineType: Apple Inc. MacBookAir4,2
ProcFB: 0 i915drmfb
ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-6.8.0-31-generic root=/dev/mapper/vgkubuntu-root ro ipv6.disable=1 quiet splash vt.handoff=7
RelatedPackageVersions:
 linux-restricted-modules-6.8.0-31-generic N/A
 linux-backports-modules-6.8.0-31-generic N/A
 linux-firmware 20240318.git3b128b60-0ubuntu2
SourcePackage: linux
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 06/14/2019
dmi.bios.release: 0.1
dmi.bios.vendor: Apple Inc.
dmi.bios.version: 135.0.0.0.0
dmi.board.asset.tag: Base Board Asset Tag#
dmi.board.name: Mac-742912EFDBEE19B3
dmi.board.vendor: Apple Inc.
dmi.board.version: MacBookAir4,2
dmi.chassis.type: 10
dmi.chassis.vendor: Apple Inc.
dmi.chassis.version: Mac-742912EFDBEE19B3
dmi.modalias: dmi:bvnAppleInc.:bvr135.0.0.0.0:bd06/14/2019:br0.1:svnAppleInc.:pnMacBookAir4,2:pvr1.0:rvnAppleInc.:rnMac-742912EFDBEE19B3:rvrMacBookAir4,2:cvnAppleInc.:ct10:cvrMac-742912EFDBEE19B3:skuSystemSKU#:
dmi.product.family: MacBook Air
dmi.product.name: MacBookAir4,2
dmi.product.sku: System SKU#
dmi.product.version: 1.0
dmi.sys.vendor: Apple Inc.

[js1 (sujiannming)]

on different machine running 6.8.0-31-generic:

[ 8341.842158] ------------[ cut here ]------------
[ 8341.842166] UBSAN: array-index-out-of-bounds in /build/linux-yrLejD/linux-6.8.0/drivers/net/wireless/realtek/rtlwifi/btcoexist/halbtc8192e2ant.c:3005:36
[ 8341.842173] index 10 is out of range for type 'u8 [10]'
[ 8341.842177] CPU: 0 PID: 9796 Comm: kworker/0:2 Tainted: P IO 6.8.0-31-generic #31-Ubuntu
[ 8341.842181] Hardware name: Dell Inc. Precision WorkStation T7500 /0D881F, BIOS A18 10/15/2018
[ 8341.842184] Workqueue: rtl92ee_pci rtl_c2hcmd_wq_callback [rtlwifi]
[ 8341.842211] Call Trace:
[ 8341.842213] <TASK>
[ 8341.842217] dump_stack_lvl+0x48/0x70
[ 8341.842227] dump_stack+0x10/0x20
[ 8341.842231] __ubsan_handle_out_of_bounds+0xc6/0x110
[ 8341.842237] ex_btc8192e2ant_bt_info_notify+0x42b/0x4c0 [btcoexist]
[ 8341.842260] exhalbtc_bt_info_notify+0x9c/0xe0 [btcoexist]
[ 8341.842284] rtl_btc_btinfo_notify+0x1d/0x40 [btcoexist]
[ 8341.842305] rtl_c2h_content_parsing.isra.0+0x66/0x100 [rtlwifi]
[ 8341.842322] rtl_c2hcmd_wq_callback+0x3c/0x80 [rtlwifi]
[ 8341.842339] process_one_work+0x16f/0x350
[ 8341.842345] worker_thread+0x306/0x440
[ 8341.842349] ? _raw_spin_lock_irqsave+0xe/0x20
[ 8341.842354] ? __pfx_worker_thread+0x10/0x10
[ 8341.842358] kthread+0xf2/0x120
[ 8341.842362] ? __pfx_kthread+0x10/0x10
[ 8341.842365] ret_from_fork+0x47/0x70
[ 8341.842369] ? __pfx_kthread+0x10/0x10
[ 8341.842372] ret_from_fork_asm+0x1b/0x30
[ 8341.842378] </TASK>
[ 8341.842413] ---[ end trace ]---
[ 8341.847443] ------------[ cut here ]------------
[ 8341.847445] UBSAN: invalid-load in /build/linux-yrLejD/linux-6.8.0/drivers/net/wireless/realtek/rtlwifi/btcoexist/halbtc8192e2ant.c:889:11
[ 8341.847450] load of value 248 is not a valid value for type '_Bool'
[ 8341.847453] CPU: 0 PID: 9796 Comm: kworker/0:2 Tainted: P IO 6.8.0-31-generic #31-Ubuntu
[ 8341.847456] Hardware name: Dell Inc. Precision WorkStation T7500 /0D881F, BIOS A18 10/15/2018
[ 8341.847458] Workqueue: rtl92ee_pci rtl_c2hcmd_wq_callback [rtlwifi]
[ 8341.847477] Call Trace:
[ 8341.847479] <TASK>
[ 8341.847481] dump_stack_lvl+0x48/0x70
[ 8341.847486] dump_stack+0x10/0x20
[ 8341.847490] __ubsan_handle_load_invalid_value+0xce/0x120
[ 8341.847495] btc8192e2ant_rf_shrink.constprop.0.cold+0x79/0xb2 [btcoexist]
[ 8341.847517] btc8192e2ant_run_coexist_mechanism.part.0+0x1be/0x2c0 [btcoexist]
[ 8341.847534] btc8192e2ant_run_coexist_mechanism+0x54/0x70 [btcoexist]
[ 8341.847550] ex_btc8192e2ant_bt_info_notify+0x30f/0x4c0 [btcoexist]
[ 8341.847569] exhalbtc_bt_info_notify+0x9c/0xe0 [btcoexist]
[ 8341.847592] rtl_btc_btinfo_notify+0x1d/0x40 [btcoexist]
[ 8341.847613] rtl_c2h_content_parsing.isra.0+0x66/0x100 [rtlwifi]
[ 8341.847630] rtl_c2hcmd_wq_callback+0x3c/0x80 [rtlwifi]
[ 8341.847647] process_one_work+0x16f/0x350
[ 8341.847652] worker_thread+0x306/0x440
[ 8341.847656] ? _raw_spin_lock_irqsave+0xe/0x20
[ 8341.847660] ? __pfx_worker_thread+0x10/0x10
[ 8341.847664] kthread+0xf2/0x120
[ 8341.847668] ? __pfx_kthread+0x10/0x10
[ 8341.847671] ret_from_fork+0x47/0x70
[ 8341.847674] ? __pfx_kthread+0x10/0x10
[ 8341.847677] ret_from_fork_a...