Bug 1605167

Summary: warning on start-up taints kernel
Product: [Fedora] Fedora Reporter: Erik Faye-Lund <kusmabite>
Component: kernelAssignee: Kernel Maintainer List <kernel-maint>
Status: NEW --- QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: airlied, bskeggs, ewk, hdegoede, ichavero, itamar, jarodwilson, jglisse, john.j5live, jonathan, josef, kernel-maint, linville, mchehab, mjg59, orion, steved, thomas.howard
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
verbose lsusb output for the problem camera
none
Output of "v4l2-ctl -d /dev/video2 --all --list-formats-ext" none

Description Erik Faye-Lund 2018-07-20 10:58:33 UTC
Description of problem:

While starting up my system, I get a kernel warning that taints my kernel, and prevents ABRT from automatically reporting other, more serious issues.

Version-Release number of selected component (if applicable):

4.18.0-0.rc4.git4.1.fc29.x86_64 

How reproducible:


Steps to Reproduce:
1. Boot system
2. Login to a user account
3. dmesg | grep -i taint

Actual results:

Kernel is tainted

Expected results:

Kernel is not tainted

Additional info:

This happens on a Dell XPS 13 9370 system:

Here's the crash-report in the dmesg-output:

[ 7237.814053] Unknown pixelformat 0x00000000
[ 7237.814133] WARNING: CPU: 4 PID: 14972 at drivers/media/v4l2-core/v4l2-ioctl.c:1297 v4l_enum_fmt+0xf11/0x12d0 [videodev]
[ 7237.814135] Modules linked in: rfcomm fuse thunderbolt ccm iptable_mangle xt_CHECKSUM iptable_nat ipt_MASQUERADE nf_nat_ipv4 nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack libcrc32c devlink tun ip6table_filter ip6_tables ip_set nfnetlink ebtable_nat ebtable_broute bridge stp llc ebtable_filter ebtables bnep sunrpc vfat fat snd_hda_codec_hdmi arc4 hid_multitouch mei_wdt iTCO_wdt iTCO_vendor_support dell_wmi wmi_bmof intel_wmi_thunderbolt intel_rapl x86_pkg_temp_thermal intel_powerclamp coretemp dell_laptop kvm_intel dell_smbios dcdbas kvm snd_soc_skl snd_soc_skl_ipc ath10k_pci snd_soc_sst_ipc snd_soc_sst_dsp ath10k_core snd_hda_ext_core dell_wmi_descriptor snd_soc_acpi snd_soc_core snd_hda_codec_realtek irqbypass snd_hda_codec_generic intel_cstate snd_compress intel_uncore intel_rapl_perf
[ 7237.814244]  ac97_bus snd_pcm_dmaengine snd_hda_intel mac80211 snd_hda_codec snd_usb_audio snd_usbmidi_lib snd_hda_core uvcvideo snd_rawmidi snd_hwdep videobuf2_vmalloc videobuf2_memops joydev videobuf2_v4l2 snd_seq ath btusb snd_seq_device btrtl btbcm videobuf2_common btintel snd_pcm bluetooth videodev cfg80211 media idma64 snd_timer ecdh_generic rtsx_pci_ms mei_me snd memstick mei rfkill i2c_i801 intel_lpss_pci ucsi_acpi soundcore processor_thermal_device intel_lpss typec_ucsi intel_pch_thermal intel_soc_dts_iosf typec wmi pinctrl_sunrisepoint pinctrl_intel int3400_thermal int3403_thermal int340x_thermal_zone intel_hid acpi_thermal_rel sparse_keymap acpi_pad dm_crypt i915 rtsx_pci_sdmmc mmc_core crct10dif_pclmul crc32_pclmul crc32c_intel i2c_algo_bit drm_kms_helper ghash_clmulni_intel nvme drm
[ 7237.814361]  serio_raw nvme_core rtsx_pci r8152 mii i2c_hid video
[ 7237.814382] CPU: 4 PID: 14972 Comm: chrome Not tainted 4.18.0-0.rc4.git4.1.fc29.x86_64 #1
[ 7237.814385] Hardware name: Dell Inc. XPS 13 9370/0F6P3V, BIOS 1.4.0 05/25/2018
[ 7237.814394] RIP: 0010:v4l_enum_fmt+0xf11/0x12d0 [videodev]
[ 7237.814396] Code: c6 ae d9 8a c0 e9 fe f1 ff ff 48 c7 c6 a4 cf 8a c0 3d 4d 54 32 31 0f 84 ec f1 ff ff 89 c6 48 c7 c7 5b dc 8a c0 e8 43 43 82 e6 <0f> 0b 41 80 7c 24 0c 00 0f 85 ee f1 ff ff 41 8b 44 24 2c 49 8d 7c 
[ 7237.814497] RSP: 0018:ffffab7882813cd0 EFLAGS: 00010286
[ 7237.814500] RAX: 0000000000000000 RBX: ffff99889d9c4b40 RCX: 0000000000000006
[ 7237.814503] RDX: 0000000000000007 RSI: 0000000000000001 RDI: ffff998d1d9d6cc0
[ 7237.814505] RBP: 0000000000000000 R08: 00000d24d7706e71 R09: 0000000000000000
[ 7237.814507] R10: 0000000000000000 R11: 0000000000000000 R12: ffffab7882813dc0
[ 7237.814509] R13: ffffffffc0a389c0 R14: ffff998b0c34e780 R15: ffff99889d9c4b40
[ 7237.814511] FS:  00007fe7a78beac0(0000) GS:ffff998d1d800000(0000) knlGS:0000000000000000
[ 7237.814514] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 7237.814516] CR2: 000013470742b028 CR3: 0000000019d1c003 CR4: 00000000003626e0
[ 7237.814518] Call Trace:
[ 7237.814531]  __video_do_ioctl+0x135/0x2f0 [videodev]
[ 7237.814545]  ? copy_overflow+0x20/0x20 [videodev]
[ 7237.814551]  video_usercopy+0x24f/0x740 [videodev]
[ 7237.814567]  ? selinux_file_ioctl+0x171/0x210
[ 7237.814575]  v4l2_ioctl+0x45/0x50 [videodev]
[ 7237.814580]  do_vfs_ioctl+0xa5/0x6e0
[ 7237.814589]  ksys_ioctl+0x60/0x90
[ 7237.814595]  __x64_sys_ioctl+0x16/0x20
[ 7237.814600]  do_syscall_64+0x60/0x1f0
[ 7237.814605]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 7237.814608] RIP: 0033:0x7fe7aee6d727
[ 7237.814610] Code: 0f 1f 00 f3 0f 1e fa 48 8b 05 5d b7 0c 00 64 c7 00 26 00 00 00 48 c7 c0 ff ff ff ff c3 66 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 b7 0c 00 f7 d8 64 89 01 48 
[ 7237.814712] RSP: 002b:00007ffec9db6828 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 7237.814716] RAX: ffffffffffffffda RBX: 00007ffec9db69e0 RCX: 00007fe7aee6d727
[ 7237.814718] RDX: 00007ffec9db6a60 RSI: 00000000c0405602 RDI: 0000000000000019
[ 7237.814721] RBP: 00007ffec9db6af0 R08: 0000000000000000 R09: 00007ffec9db6680
[ 7237.814723] R10: 0000000000000000 R11: 0000000000000246 R12: 000015d6daed5da0
[ 7237.814725] R13: 00007ffec9db69a9 R14: 0000000000000000 R15: 0000000000000019
[ 7237.814737] irq event stamp: 77486
[ 7237.814742] hardirqs last  enabled at (77485): [<ffffffffa7136a53>] console_unlock+0x463/0x610
[ 7237.814745] hardirqs last disabled at (77486): [<ffffffffa7c01389>] error_entry+0x89/0x110
[ 7237.814748] softirqs last  enabled at (76936): [<ffffffffa7e0038c>] __do_softirq+0x38c/0x4f7
[ 7237.814753] softirqs last disabled at (76925): [<ffffffffa70c1911>] irq_exit+0x101/0x110
[ 7237.814755] ---[ end trace fede0538b10fd6ae ]---

Comment 1 Erik Faye-Lund 2018-07-20 11:02:35 UTC
On second thought, 7237 seconds, that's not right after boot. I guess I just assumed this happened right on boot because it usually blocks all ABRT-reports. I suppose this happens after doing some video-related task? I run qemu a lot, that might be related...

Comment 2 Erik Faye-Lund 2018-07-20 11:24:55 UTC
Hmm, looks a bit like this is a case of the user-space being able to taint the kernel by bad input... but if so I wonder if this should have been picked up earlier (by the type-handler rather than v4l_fill_fmtdesc) and produced an error to usermode...? Another possible culprit, could be the type-handler overwriting the format through "arg"...

Comment 3 Thomas Howard 2018-07-26 02:10:36 UTC
Created attachment 1470565 [details]
verbose lsusb output for the problem camera

I am seeing this too on a Dell XPS 9370 laptop using Fedora 28, I think this is caused by the IR webcam used for Windows Hello facial recognition not providing a sensible pixelformat.

I am also unable to get any images out of the camera using any of the normal tools.

Comment 4 Thomas Howard 2018-07-26 02:14:32 UTC
Created attachment 1470567 [details]
Output of "v4l2-ctl -d /dev/video2 --all --list-formats-ext"

I have also attached some details I got using v4l2-ctl

Assuming these details can be trusted, it looks like the camera should be able to output images at 340x340 at 60 frames a second. I presume these will be some form of greyscale images based on it being an infrared camera.

Comment 5 Orion Poplawski 2020-11-24 16:24:29 UTC
I seem to be seeing something similar on EL 8.2

Comment 6 Charles Haithcock 2026-07-24 14:54:17 UTC
This report has not received an update in over 90 days. If this issue is still relevant to you, please do not hesitate to update this report with any relevant details on recent investigative steps or changes and we will absolutely work to understand how to best move forward. Otherwise, this bug report will need to be closed in 30 days. No worries, however; should you need still assistance after the report is closed, please do not hesitate to create a new bug report referencing this report and with any new details on the matter. 

NOTE: This is an automated mass update.