Bug 215335

Summary:	Regression (5.15.8): UBSAN: shift-out-of-bounds in /home/kernel/COD/linux/drivers/gpu/drm/i915/display/intel_opregion.c:388:15
Product:	Drivers	Reporter:	Esokrarkose
Component:	Video(Other)	Assignee:	drivers_video-other
Status:	RESOLVED MOVED
Severity:	normal	CC:	L.Bonnaud
Priority:	P1
Hardware:	Intel
OS:	Linux
Kernel Version:	5.15.8	Subsystem:
Regression:	Yes	Bisected commit-id:

Description Esokrarkose 2021-12-15 15:34:14 UTC

Freshly installed kernel 5.15.8 from https://kernel.ubuntu.com/~kernel-ppa/mainline/v5.15.8/ and immediately on boot noticed the following:

[    1.172982] fb0: switching to i915 from EFI VGA
[    1.173034] Console: switching to colour dummy device 80x25
[    1.173051] i915 0000:00:02.0: vgaarb: deactivate vga console
[    1.175648] i915 0000:00:02.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[    1.176289] i915 0000:00:02.0: [drm] Finished loading DMC firmware i915/tgl_dmc_ver2_12.bin (v2.12)
[    1.195234] ================================================================================
[    1.195238] UBSAN: shift-out-of-bounds in /home/kernel/COD/linux/drivers/gpu/drm/i915/display/intel_opregion.c:388:15
[    1.195240] shift exponent 34 is too large for 32-bit type 'unsigned int'
[    1.195243] CPU: 1 PID: 213 Comm: systemd-udevd Tainted: G     U            5.15.8-051508-generic #202112141040
[    1.195244] Hardware name: Dell Inc. XPS 13 9310 2-in-1/0W6MV0, BIOS 2.6.0 11/11/2021
[    1.195245] Call Trace:
[    1.195247]  <TASK>
[    1.195248]  show_stack+0x52/0x58
[    1.195253]  dump_stack_lvl+0x4a/0x5f
[    1.195256]  dump_stack+0x10/0x12
[    1.195258]  ubsan_epilogue+0x9/0x45
[    1.195260]  __ubsan_handle_shift_out_of_bounds.cold+0x61/0xe9
[    1.195262]  ? swsci+0x15a/0x270 [i915]
[    1.195346]  ? icl_ddi_tc_is_clock_enabled+0x4d/0xc0 [i915]
[    1.195416]  intel_opregion_notify_encoder.cold+0x2b/0x45 [i915]
[    1.195494]  intel_sanitize_encoder+0x1e2/0x270 [i915]
[    1.195560]  intel_modeset_setup_hw_state+0x322/0x680 [i915]
[    1.195622]  ? drm_modeset_lock_all_ctx+0x151/0x1c0 [drm]
[    1.195645]  ? drm_warn_on_modeset_not_all_locked.part.0+0x5e/0x90 [drm]
[    1.195657]  intel_modeset_init_nogem+0x2a8/0x510 [i915]
[    1.195719]  ? intel_irq_postinstall+0x38b/0x680 [i915]
[    1.195766]  i915_driver_probe+0x1b7/0x470 [i915]
[    1.195807]  ? mutex_lock+0x13/0x40
[    1.195811]  i915_pci_probe+0x58/0x140 [i915]
[    1.195851]  local_pci_probe+0x48/0x90
[    1.195855]  pci_device_probe+0x115/0x1f0
[    1.195856]  really_probe+0x21b/0x420
[    1.195860]  __driver_probe_device+0x115/0x190
[    1.195861]  driver_probe_device+0x23/0xc0
[    1.195863]  __driver_attach+0xbd/0x1d0
[    1.195865]  ? __device_attach_driver+0x110/0x110
[    1.195866]  bus_for_each_dev+0x7c/0xc0
[    1.195868]  driver_attach+0x1e/0x20
[    1.195870]  bus_add_driver+0x135/0x200
[    1.195871]  driver_register+0x95/0xf0
[    1.195873]  __pci_register_driver+0x68/0x70
[    1.195875]  i915_register_pci_driver+0x23/0x30 [i915]
[    1.195912]  i915_init+0x3b/0xfc [i915]
[    1.195963]  ? 0xffffffffc0988000
[    1.195964]  do_one_initcall+0x46/0x1d0
[    1.195967]  ? kmem_cache_alloc_trace+0x19e/0x2e0
[    1.195971]  do_init_module+0x62/0x280
[    1.195973]  load_module+0xac9/0xbb0
[    1.195974]  __do_sys_finit_module+0xbf/0x120
[    1.195975]  __x64_sys_finit_module+0x18/0x20
[    1.195976]  do_syscall_64+0x59/0xc0
[    1.195978]  ? vfs_read+0xff/0x1a0
[    1.195980]  ? exit_to_user_mode_prepare+0x37/0xb0
[    1.195983]  ? syscall_exit_to_user_mode+0x27/0x50
[    1.195984]  ? __x64_sys_mmap+0x33/0x40
[    1.195986]  ? do_syscall_64+0x69/0xc0
[    1.195987]  ? exit_to_user_mode_prepare+0x37/0xb0
[    1.195988]  ? syscall_exit_to_user_mode+0x27/0x50
[    1.195989]  ? __x64_sys_read+0x19/0x20
[    1.195990]  ? do_syscall_64+0x69/0xc0
[    1.195991]  ? do_syscall_64+0x69/0xc0
[    1.195992]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[    1.195994] RIP: 0033:0x7f5f788ee94d
[    1.195996] Code: 5b 41 5c c3 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d b3 64 0f 00 f7 d8 64 89 01 48
[    1.195997] RSP: 002b:00007ffda47327d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[    1.195999] RAX: ffffffffffffffda RBX: 0000560cb8c314e0 RCX: 00007f5f788ee94d
[    1.196000] RDX: 0000000000000000 RSI: 0000560cb8c32770 RDI: 0000000000000015
[    1.196000] RBP: 0000000000020000 R08: 0000000000000000 R09: 00007f5f789e5c60
[    1.196001] R10: 0000000000000015 R11: 0000000000000246 R12: 0000560cb8c32770
[    1.196002] R13: 0000560cb8c3a2d0 R14: 0000000000000000 R15: 0000560cb8c2d7d0
[    1.196003]  </TASK>
[    1.196003] ================================================================================

That never happened before. Please let me know if you need further info.

Comment 1 Esokrarkose 2021-12-15 15:40:58 UTC

100% reproducible, booting 5.15.7 is fine.

Comment 2 Artem S. Tashkinov 2021-12-16 13:27:16 UTC

Please file here as well: https://gitlab.freedesktop.org/drm/intel/-/issues

Comment 3 Esokrarkose 2021-12-16 14:05:16 UTC

Done: https://gitlab.freedesktop.org/drm/intel/-/issues/4800