From: Karsten Hohmeier <linux@hohmatik.de>
To: tiwai@suse.de
Cc: linux-kernel@vger.kernel.org, linux-sound@vger.kernel.org,
linux@hohmatik.de
Subject: Re: UBSAN: shift-out-of-bounds in sound/pci/ctxfi/cthw20k2.c:956:31
Date: Sat, 21 Mar 2026 20:56:21 +0100 [thread overview]
Message-ID: <20260321195621.16139-1-linux@hohmatik.de> (raw)
In-Reply-To: <87cy149n6k.wl-tiwai@suse.de>
Hello Takashi,
I applied your patch and uncommented the stack dumps.
Here is what I get.
Mar 21 20:41:34 dtest kernel: XXX invalid type 9 for hw20k2
Mar 21 20:41:34 dtest kernel: CPU: 8 UID: 0 PID: 535 Comm: (udev-worker) Tainted: G OE 6.19.8 #2 PREEMPT(lazy)
Mar 21 20:41:34 dtest kernel: Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
Mar 21 20:41:34 dtest kernel: Hardware name: To Be Filled By O.E.M. A320M-DVS R4.0/A320M-DVS R4.0, BIOS P10.44 02/23/2026
Mar 21 20:41:34 dtest kernel: Call Trace:
Mar 21 20:41:34 dtest kernel: <TASK>
Mar 21 20:41:34 dtest kernel: dump_stack_lvl+0x5d/0x80
Mar 21 20:41:34 dtest kernel: daio_device_index.isra.0.cold+0x13/0x45 [snd_ctxfi]
Mar 21 20:41:34 dtest kernel: get_daio_rsc+0x1d1/0x2c0 [snd_ctxfi]
Mar 21 20:41:34 dtest kernel: atc_get_resources+0x161/0x380 [snd_ctxfi]
Mar 21 20:41:34 dtest kernel: ct_atc_create+0x3ec/0x540 [snd_ctxfi]
Mar 21 20:41:34 dtest kernel: ct_card_probe+0x104/0x2c0 [snd_ctxfi]
Mar 21 20:41:34 dtest kernel: local_pci_probe+0x42/0x90
Mar 21 20:41:34 dtest kernel: pci_device_probe+0xda/0x2b0
Mar 21 20:41:34 dtest kernel: ? sysfs_do_create_link_sd+0x6d/0xd0
Mar 21 20:41:34 dtest kernel: really_probe+0xde/0x380
Mar 21 20:41:34 dtest kernel: __driver_probe_device+0x78/0x150
Mar 21 20:41:34 dtest kernel: driver_probe_device+0x1f/0xa0
Mar 21 20:41:34 dtest kernel: ? __pfx___driver_attach+0x10/0x10
Mar 21 20:41:34 dtest kernel: __driver_attach+0xcb/0x200
Mar 21 20:41:34 dtest kernel: bus_for_each_dev+0x85/0xd0
Mar 21 20:41:34 dtest kernel: bus_add_driver+0x118/0x200
Mar 21 20:41:34 dtest kernel: ? __pfx_ct_driver_init+0x10/0x10 [snd_ctxfi]
Mar 21 20:41:34 dtest kernel: driver_register+0x75/0xe0
Mar 21 20:41:34 dtest kernel: do_one_initcall+0x5b/0x300
Mar 21 20:41:34 dtest kernel: do_init_module+0x62/0x250
Mar 21 20:41:34 dtest kernel: init_module_from_file+0xd8/0x140
Mar 21 20:41:34 dtest kernel: idempotent_init_module+0x114/0x310
Mar 21 20:41:34 dtest kernel: __x64_sys_finit_module+0x71/0xe0
Mar 21 20:41:34 dtest kernel: ? syscall_trace_enter+0x8d/0x1d0
Mar 21 20:41:34 dtest kernel: do_syscall_64+0x81/0x600
Mar 21 20:41:34 dtest kernel: ? vfs_read+0x165/0x390
Mar 21 20:41:34 dtest kernel: ? vfs_read+0x165/0x390
Mar 21 20:41:34 dtest kernel: ? restore_fpregs_from_fpstate+0x46/0xa0
Mar 21 20:41:34 dtest kernel: ? switch_fpu_return+0x5b/0xe0
Mar 21 20:41:34 dtest kernel: ? do_syscall_64+0x245/0x600
Mar 21 20:41:34 dtest kernel: ? exc_page_fault+0x7e/0x1a0
Mar 21 20:41:34 dtest kernel: entry_SYSCALL_64_after_hwframe+0x76/0x7e
Mar 21 20:41:34 dtest kernel: RIP: 0033:0x7ff26a11bc29
Mar 21 20:41:34 dtest kernel: Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d b7 51 0d 0>
Mar 21 20:41:34 dtest kernel: RSP: 002b:00007ffcf4bdf7c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
Mar 21 20:41:34 dtest kernel: RAX: ffffffffffffffda RBX: 000055a12d9ec2b0 RCX: 00007ff26a11bc29
Mar 21 20:41:34 dtest kernel: RDX: 0000000000000004 RSI: 00007ff2696e844d RDI: 000000000000004d
Mar 21 20:41:34 dtest kernel: RBP: 0000000000000004 R08: 0000000000000000 R09: 000055a12d5e1670
Mar 21 20:41:34 dtest kernel: R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000020000
Mar 21 20:41:34 dtest kernel: R13: 00007ff2696e844d R14: 000055a12d9e7720 R15: 0000000000000000
Mar 21 20:41:34 dtest kernel: </TASK>
Mar 21 20:41:34 dtest kernel: snd_ctxfi 0000:05:00.0: Failed to get DAIO resource 9!!!
Mar 21 20:41:34 dtest kernel: snd_ctxfi 0000:05:00.0: Something wrong!!!
Mar 21 20:41:34 dtest kernel: snd_ctxfi 0000:05:00.0: probe with driver snd_ctxfi failed with error -22
Sorry, that it takes a while for me to test, but I only have access to this machine on weekends.
Regards
Karsten
next prev parent reply other threads:[~2026-03-21 19:56 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <20260315155004.15633-1-linux@hohmatik.de>
2026-03-16 8:46 ` UBSAN: shift-out-of-bounds in sound/pci/ctxfi/cthw20k2.c:956:31 Takashi Iwai
2026-03-21 19:56 ` Karsten Hohmeier [this message]
2026-03-27 9:08 ` Takashi Iwai
2026-03-28 19:24 ` Karsten Hohmeier
2026-03-29 9:12 ` Takashi Iwai
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260321195621.16139-1-linux@hohmatik.de \
--to=linux@hohmatik.de \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-sound@vger.kernel.org \
--cc=tiwai@suse.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox