[Bug 2039231] Re: UBSAN: array-index-out-of-bounds in /build/linux-oem-6.5-XiW3QL/linux-oem-6.5-6.5.0/drivers/scsi/mpt3sas/mpt3sas_scsih.c:7655:12

[Wouter Depuydt]

*** This bug is a duplicate of bug 2028830 ***
https://bugs.launchpad.net/bugs/2028830

Same here on Ubuntu 22.04 (linux-generic-hwe-22.04) and 24.04 (linux-
generic)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2039231

Title:
   UBSAN: array-index-out-of-bounds in /build/linux-
  oem-6.5-XiW3QL/linux-
  oem-6.5-6.5.0/drivers/scsi/mpt3sas/mpt3sas_scsih.c:7655:12

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-hwe-6.5/+bug/2039231/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2039231] Re: UBSAN: array-index-out-of-bounds in /build/linux-oem-6.5-XiW3QL/linux-oem-6.5-6.5.0/drivers/scsi/mpt3sas/mpt3sas_scsih.c:7655:12

[Launchpad Bug Tracker]

*** This bug is a duplicate of bug 2028830 ***
https://bugs.launchpad.net/bugs/2028830

Status changed to 'Confirmed' because the bug affects multiple users.

** Changed in: linux-hwe-6.5 (Ubuntu)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2039231

Title:
   UBSAN: array-index-out-of-bounds in /build/linux-
  oem-6.5-XiW3QL/linux-
  oem-6.5-6.5.0/drivers/scsi/mpt3sas/mpt3sas_scsih.c:7655:12

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-hwe-6.5/+bug/2039231/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2039231] Re: UBSAN: array-index-out-of-bounds in /build/linux-oem-6.5-XiW3QL/linux-oem-6.5-6.5.0/drivers/scsi/mpt3sas/mpt3sas_scsih.c:7655:12

[Björn Hinz]

*** This bug is a duplicate of bug 2028830 ***
https://bugs.launchpad.net/bugs/2028830

Same issue with latest linux-generic-hwe-22.04 (6.5.0.28.29~22.04.1)

** Also affects: linux-hwe (Ubuntu)
   Importance: Undecided
   Status: New

** No longer affects: linux-hwe (Ubuntu)

** Also affects: linux-hwe-6.5 (Ubuntu)
   Importance: Undecided
   Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2039231

Title:
   UBSAN: array-index-out-of-bounds in /build/linux-
  oem-6.5-XiW3QL/linux-
  oem-6.5-6.5.0/drivers/scsi/mpt3sas/mpt3sas_scsih.c:7655:12

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-hwe-6.5/+bug/2039231/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2039231] Re: UBSAN: array-index-out-of-bounds in /build/linux-oem-6.5-XiW3QL/linux-oem-6.5-6.5.0/drivers/scsi/mpt3sas/mpt3sas_scsih.c:7655:12

[MichaelE]

*** This bug is a duplicate of bug 2028830 ***
https://bugs.launchpad.net/bugs/2028830

** This bug has been marked a duplicate of bug 2028830
   [mpt3sas, UBSAN] ]linux 6.5-rc give error messages at boot

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2039231

Title:
   UBSAN: array-index-out-of-bounds in /build/linux-
  oem-6.5-XiW3QL/linux-
  oem-6.5-6.5.0/drivers/scsi/mpt3sas/mpt3sas_scsih.c:7655:12

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-oem-6.5/+bug/2039231/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2039231] Re: UBSAN: array-index-out-of-bounds in /build/linux-oem-6.5-XiW3QL/linux-oem-6.5-6.5.0/drivers/scsi/mpt3sas/mpt3sas_scsih.c:7655:12

[MichaelE]

Bug persists with Linux mothership 6.5.0-25-generic #25~22.04.1-Ubuntu
SMP PREEMPT_DYNAMIC Tue Feb 20 16:09:15 UTC 2 x86_64 x86_64 x86_64
GNU/Linux

4.836804] mpt2sas_cm0: hba_port entry: 92af6f74, port: 255 is added to 
hba_port list
[4.845313] 

[4.853526] UBSAN: array-index-out-of-bounds in 
/build/linux-hwe-6.5-v5pKK4/linux-hwe-6.5-6.5.0/drivers/scsi/mpt3sas/mpt3sas_scsih.c:6810:36
[4.867458] usb 1-5.4: New USB device found, idVendor=413c, idProduct=2005, 
bcdDevice= 1.05
[4.870216] index 1 is out of range for type 'MPI2_SAS_IO_UNIT0_PHY_DATA [1]'
[4.878708] usb 1-5.4: New USB device strings: Mfr=1, Product=2, 
SerialNumber=0
[4.887238] CPU: 7 PID: 64 Comm: kworker/u16:1 Not tainted 6.5.0-25-generic 
#25~22.04.1-Ubuntu
[4.895838] usb 1-5.4: Product: DELL USB Keyboard
[4.904638] Hardware name: Supermicro Super Server/X11SAE-F, BIOS 3.9 
06/07/2023
[4.904639] Workqueue: fw_event_mpt2sas0 _firmware_event_work [mpt3sas]
[4.913480] usb 1-5.4: Manufacturer: DELL

[4.922450] Call Trace:
[4.922452]  
[4.965913]  dump_stack_lvl+0x48/0x70
[4.974249]  dump_stack+0x10/0x20
[4.982443]  __ubsan_handle_out_of_bounds+0xc6/0x110
[4.990653]  _scsih_sas_host_add+0x669/0x700 [mpt3sas]
[4.998847]  _mpt3sas_fw_work+0x753/0xbc0 [mpt3sas]
[5.006983]  ? raw_spin_rq_unlock+0x10/0x40
[5.015051]  ? finish_task_switch.isra.0+0x85/0x2a0
[5.023121]  ? __schedule+0x2d3/0x750
[5.031159]  _firmware_event_work+0x16/0x20 [mpt3sas]
[5.039151]  process_one_work+0x23d/0x450
[5.047001]  worker_thread+0x50/0x3f0
[5.054741]  ? __pfx_worker_thread+0x10/0x10
[5.062451]  kthread+0xef/0x120
[5.070124]  ? __pfx_kthread+0x10/0x10
[5.077713]  ret_from_fork+0x44/0x70
[5.085179]  ? __pfx_kthread+0x10/0x10
[5.092562]  ret_from_fork_asm+0x1b/0x30
[5.099915]  
[5.107079] 

[5.115636] mpt2sas_cm0: host_add: handle(0x0001), 
sas_addr(0x500605b0069ea0d0), phys(8)
[5.123297] 

[5.130856] UBSAN: array-index-out-of-bounds in 
/build/linux-hwe-6.5-v5pKK4/linux-hwe-6.5-6.5.0/drivers/scsi/mpt3sas/mpt3sas_scsih.c:6598:38
[5.146512] index 1 is out of range for type 'MPI2_SAS_IO_UNIT0_PHY_DATA [1]'
[5.154538] CPU: 7 PID: 64 Comm: kworker/u16:1 Not tainted 6.5.0-25-generic 
#25~22.04.1-Ubuntu
[5.162702] Hardware name: Supermicro Super Server/X11SAE-F, BIOS 3.9 
06/07/2023
[5.170925] Workqueue: fw_event_mpt2sas0 _firmware_event_work [mpt3sas]
[5.179103] Call Trace:
[5.187121]  
[5.195014]  dump_stack_lvl+0x48/0x70
[5.202871]  dump_stack+0x10/0x20
[5.209613] usb 1-13.1: new low-speed USB device number 8 using xhci_hcd
[5.210706]  __ubsan_handle_out_of_bounds+0xc6/0x110
[5.226527]  _scsih_sas_host_refresh+0x51f/0x590 [mpt3sas]
[5.234282]  _scsih_sas_topology_change_event.isra.0+0x251/0x690 [mpt3sas]
[5.241922]  ? _mpt3sas_fw_work+0x538/0xbc0 [mpt3sas]
[5.249318]  _mpt3sas_fw_work+0x80d/0xbc0 [mpt3sas]
[5.256600]  ? raw_spin_rq_unlock+0x10/0x40
[5.263744]  ? finish_task_switch.isra.0+0x85/0x2a0
[5.270822]  ? __schedule+0x2d3/0x750
[5.277745]  _firmware_event_work+0x16/0x20 [mpt3sas]
[5.284605]  process_one_work+0x23d/0x450
[5.291367]  worker_thread+0x50/0x3f0
[5.298010]  ? __pfx_worker_thread+0x10/0x10
[5.304600]  kthread+0xef/0x120
[5.311172]  ? __pfx_kthread+0x10/0x10
[5.317812]  ret_from_fork+0x44/0x70
[5.324485]  ? __pfx_kthread+0x10/0x10
[5.331152]  ret_from_fork_asm+0x1b/0x30
[5.337870]  
[5.344512] 

[5.351440] 

[5.354534] usb 1-13.1: New USB device found, idVendor=0557, idProduct=2419, 
bcdDevice= 1.00
[5.358272] UBSAN: array-index-out-of-bounds in 
/build/linux-hwe-6.5-v5pKK4/linux-hwe-6.5-6.5.0/drivers/scsi/mpt3sas/mpt3sas_scsih.c:6602:36
[5.358273] index 1 is out of range for type 'MPI2_SAS_IO_UNIT0_PHY_DATA [1]'
[5.365200] workqueue: hub_event hogged CPU for >1us 4 times, consider 
switching to WQ_UNBOUND
[5.365205] usb 1-13.1: New USB device strings: Mfr=0, Product=0, 
SerialNumber=0
[5.379569] CPU: 7 PID: 64 Comm: kworker/u16:1 Not tainted 6.5.0-25-generic 
#25~22.04.1-Ubuntu
[5.410109] Hardware name: Supermicro Super Server/X11SAE-F, BIOS 3.9 
06/07/2023
[5.418063] Workqueue: fw_event_mpt2sas0 _firmware_event_work [mpt3sas]
[5.426099] Call Trace:
[5.434111]  
[5.442082]  dump_stack_lvl+0x48/0x70
[5.450120]  dump_stack+0x10/0x20
[5.458083]  __ubsan_handle_out_of_bounds+0xc6/0x110
[5.465988]  _scsih_sas_host_refresh+0x4e7/0x590 [mpt3sas]
[

[Bug 2039231] Re: UBSAN: array-index-out-of-bounds in /build/linux-oem-6.5-XiW3QL/linux-oem-6.5-6.5.0/drivers/scsi/mpt3sas/mpt3sas_scsih.c:7655:12

[MichaelE]

lspci for the above

00:00.0 Host bridge: Intel Corporation Xeon E3-1200 v5/E3-1500 v5/6th Gen Core 
Processor Host Bridge/DRAM Registers (rev 07)
00:01.0 PCI bridge: Intel Corporation 6th-10th Gen Core Processor PCIe 
Controller (x16) (rev 07)
00:01.1 PCI bridge: Intel Corporation Xeon E3-1200 v5/E3-1500 v5/6th Gen Core 
Processor PCIe Controller (x8) (rev 07)
00:14.0 USB controller: Intel Corporation 100 Series/C230 Series Chipset Family 
USB 3.0 xHCI Controller (rev 31)
00:14.2 Signal processing controller: Intel Corporation 100 Series/C230 Series 
Chipset Family Thermal Subsystem (rev 31)
00:15.0 Signal processing controller: Intel Corporation 100 Series/C230 Series 
Chipset Family Serial IO I2C Controller #0 (rev 31)
00:15.1 Signal processing controller: Intel Corporation 100 Series/C230 Series 
Chipset Family Serial IO I2C Controller #1 (rev 31)
00:16.0 Communication controller: Intel Corporation 100 Series/C230 Series 
Chipset Family MEI Controller #1 (rev 31)
00:16.3 Serial controller: Intel Corporation 100 Series/C230 Series Chipset 
Family KT Redirection (rev 31)
00:17.0 SATA controller: Intel Corporation Q170/Q150/B150/H170/H110/Z170/CM236 
Chipset SATA Controller [AHCI Mode] (rev 31)
00:1c.0 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI 
Express Root Port #1 (rev f1)
00:1c.2 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI 
Express Root Port #3 (rev f1)
00:1c.4 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI 
Express Root Port #5 (rev f1)
00:1c.5 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI 
Express Root Port #6 (rev f1)
00:1c.6 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI 
Express Root Port #7 (rev f1)
00:1c.7 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI 
Express Root Port #8 (rev f1)
00:1d.0 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI 
Express Root Port #9 (rev f1)
00:1f.0 ISA bridge: Intel Corporation C236 Chipset LPC/eSPI Controller (rev 31)
00:1f.2 Memory controller: Intel Corporation 100 Series/C230 Series Chipset 
Family Power Management Controller (rev 31)
00:1f.3 Audio device: Intel Corporation 100 Series/C230 Series Chipset Family 
HD Audio Controller (rev 31)
00:1f.4 SMBus: Intel Corporation 100 Series/C230 Series Chipset Family SMBus 
(rev 31)
00:1f.6 Ethernet controller: Intel Corporation Ethernet Connection (2) I219-LM 
(rev 31)
01:00.0 Serial Attached SCSI controller: Broadcom / LSI SAS2308 PCI-Express 
Fusion-MPT SAS-2 (rev 05)
02:00.0 Serial Attached SCSI controller: Broadcom / LSI SAS2308 PCI-Express 
Fusion-MPT SAS-2 (rev 05)
03:00.0 USB controller: ASMedia Technology Inc. ASM1142 USB 3.1 Host Controller
04:00.0 PCI bridge: Tundra Semiconductor Corp. Device 8113 (rev 01)
06:00.0 Ethernet controller: Intel Corporation I210 Gigabit Network Connection 
(rev 03)
07:00.0 PCI bridge: ASPEED Technology, Inc. AST1150 PCI-to-PCI Bridge (rev 03)
08:00.0 VGA compatible controller: ASPEED Technology, Inc. ASPEED Graphics 
Family (rev 30)
09:00.0 PCI bridge: Microsemi / PMC / IDT PES12N3A 12-lane 3-Port PCI Express 
Switch (rev 0e)
0a:02.0 PCI bridge: Microsemi / PMC / IDT PES12N3A 12-lane 3-Port PCI Express 
Switch (rev 0e)
0a:04.0 PCI bridge: Microsemi / PMC / IDT PES12N3A 12-lane 3-Port PCI Express 
Switch (rev 0e)
0b:00.0 Ethernet controller: Intel Corporation 82576 Gigabit Network Connection 
(rev 01)
0b:00.1 Ethernet controller: Intel Corporation 82576 Gigabit Network Connection 
(rev 01)
0c:00.0 Ethernet controller: Intel Corporation 82576 Gigabit Network Connection 
(rev 01)
0c:00.1 Ethernet controller: Intel Corporation 82576 Gigabit Network Connection 
(rev 01)
0d:00.0 PCI bridge: PLX Technology, Inc. PEX 8114 PCI Express-to-PCI/PCI-X 
Bridge (rev bc)
0e:08.0 SCSI storage controller: Broadcom / LSI 53c1030 PCI-X Fusion-MPT Dual 
Ultra320 SCSI (rev c1)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2039231

Title:
   UBSAN: array-index-out-of-bounds in /build/linux-
  oem-6.5-XiW3QL/linux-
  oem-6.5-6.5.0/drivers/scsi/mpt3sas/mpt3sas_scsih.c:7655:12

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-oem-6.5/+bug/2039231/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2039231] Re: UBSAN: array-index-out-of-bounds in /build/linux-oem-6.5-XiW3QL/linux-oem-6.5-6.5.0/drivers/scsi/mpt3sas/mpt3sas_scsih.c:7655:12

[MichaelE]

I have it on Ubuntu 22.04.4 LTS with kernel 6.5.0-21-generic. It does
not appear with kernel 5.12.0-97-generic

System still boots, but not understanding the impact I stay with the
5.12 kernel for now.

2024-02-24T15:17:22.325371+01:00 mothership kernel: [2.670320] mpt3sas 
version 43.100.00.00 loaded
2024-02-24T15:17:22.325385+01:00 mothership kernel: [2.670811] intel-lpss 
:00:15.1: enabling device ( -> 0002)
2024-02-24T15:17:22.325387+01:00 mothership kernel: [2.672018] platform 
idma64.1: Adding to iommu group 25
2024-02-24T15:17:22.325388+01:00 mothership kernel: [2.672436] mpt2sas_cm0: 
64 BIT PCI BUS DMA ADDRESSING SUPPORTED, total mem (65631140 kB)
2024-02-24T15:17:22.325389+01:00 mothership kernel: [2.672473] cryptd: 
max_cpu_qlen set to 1000
2024-02-24T15:17:22.325389+01:00 mothership kernel: [2.673274] idma64 
idma64.1: Found Intel integrated DMA 64-bit
2024-02-24T15:17:22.325390+01:00 mothership kernel: [2.673309] platform 
i2c_designware.1: Adding to iommu group 26
2024-02-24T15:17:22.325397+01:00 mothership kernel: [2.676101] ACPI: bus 
type drm_connector registered
2024-02-24T15:17:22.325399+01:00 mothership kernel: [2.676294] i801_smbus 
:00:1f.4: SMBus using PCI interrupt
2024-02-24T15:17:22.325399+01:00 mothership kernel: [2.687442] mpt2sas_cm0: 
CurrentHostPageSize is 0: Setting default host page size to 4k
2024-02-24T15:17:22.325400+01:00 mothership kernel: [2.699409] pci 
:00:1f.1: [8086:a120] type 00 class 0x058000
2024-02-24T15:17:22.325402+01:00 mothership kernel: [2.700412] hub 2-0:1.0: 
10 ports detected
2024-02-24T15:17:22.325402+01:00 mothership kernel: [2.707338] mpt2sas_cm0: 
MSI-X vectors supported: 16
2024-02-24T15:17:22.325403+01:00 mothership kernel: [2.708191] Fusion MPT 
base driver 3.04.20
2024-02-24T15:17:22.325413+01:00 mothership kernel: [2.708213] Copyright 
(c) 1999-2008 LSI Corporation
2024-02-24T15:17:22.325414+01:00 mothership kernel: [2.717327] pci 
:00:1f.1: reg 0x10: [mem 0xfd00-0xfdff 64bit]
2024-02-24T15:17:22.325415+01:00 mothership kernel: [2.723653]   no of 
cores: 8, max_msix_vectors: -1
2024-02-24T15:17:22.325416+01:00 mothership kernel: [2.723655] mpt2sas_cm0: 
 0 8 8
2024-02-24T15:17:22.325417+01:00 mothership kernel: [2.728114] mpt2sas_cm0: 
High IOPs queues : disabled
2024-02-24T15:17:22.325418+01:00 mothership kernel: [2.735959] pci 
:00:1f.1: Adding to iommu group 27
2024-02-24T15:17:22.325431+01:00 mothership kernel: [2.739934] pps pps0: 
new PPS source ptp0
2024-02-24T15:17:22.325433+01:00 mothership kernel: [2.742852] 
mpt2sas0-msix0: PCI-MSI-X enabled: IRQ 138
2024-02-24T15:17:22.325433+01:00 mothership kernel: [2.742877] 
mpt2sas0-msix1: PCI-MSI-X enabled: IRQ 139
2024-02-24T15:17:22.325434+01:00 mothership kernel: [2.742879] 
mpt2sas0-msix2: PCI-MSI-X enabled: IRQ 140
2024-02-24T15:17:22.325435+01:00 mothership kernel: [2.742879] 
mpt2sas0-msix3: PCI-MSI-X enabled: IRQ 141
2024-02-24T15:17:22.325436+01:00 mothership kernel: [2.742880] 
mpt2sas0-msix4: PCI-MSI-X enabled: IRQ 142
2024-02-24T15:17:22.325437+01:00 mothership kernel: [2.742881] 
mpt2sas0-msix5: PCI-MSI-X enabled: IRQ 143
2024-02-24T15:17:22.325450+01:00 mothership kernel: [2.742882] 
mpt2sas0-msix6: PCI-MSI-X enabled: IRQ 144
2024-02-24T15:17:22.325451+01:00 mothership kernel: [2.742883] 
mpt2sas0-msix7: PCI-MSI-X enabled: IRQ 145
2024-02-24T15:17:22.325452+01:00 mothership kernel: [2.742884] mpt2sas_cm0: 
iomem(0xdef4), mapped(0x82d6238c), size(65536)
2024-02-24T15:17:22.325453+01:00 mothership kernel: [2.742886] mpt2sas_cm0: 
ioport(0xe000), size(256)
2024-02-24T15:17:22.325454+01:00 mothership kernel: [2.745310] scsi host1: 
ahci
2024-02-24T15:17:22.325455+01:00 mothership kernel: [2.749928] scsi host2: 
ahci
2024-02-24T15:17:22.325472+01:00 mothership kernel: [2.759402] igb 
:06:00.0: added PHC on eth0
2024-02-24T15:17:22.325473+01:00 mothership kernel: [2.766173] scsi host3: 
ahci
2024-02-24T15:17:22.325474+01:00 mothership kernel: [2.772143] igb 
:06:00.0: Intel(R) Gigabit Ethernet Network Connection
2024-02-24T15:17:22.325476+01:00 mothership kernel: [2.779647] mpt2sas_cm0: 
CurrentHostPageSize is 0: Setting default host page size to 4k
2024-02-24T15:17:22.325477+01:00 mothership kernel: [2.787622] igb 
:06:00.0: eth0: (PCIe:2.5Gb/s:Width x1) 0c:c4:7a:b3:f7:4d
2024-02-24T15:17:22.325478+01:00 mothership kernel: [2.791274] scsi host4: 
ahci
2024-02-24T15:17:22.325485+01:00 mothership kernel: [2.800648] mpt2sas_cm0: 
scatter gather: sge_in_main_msg(1), sge_per_chain(9), sge_per_io(128), 
chains_per_io(15)
2024-02-24T15:17:22.325486+01:00 mothership kernel: [2.804861] igb 
:06:00.0: eth0: PBA No: 010A00-000
2024-02-24T15:17:22.325493+01:00 mothership kernel: [2.814434] mpt2sas_cm0: 
request pool(0x47ada070) -