Decklink kernel crash with Ubuntu 23.10

PRETTY_NAME="Ubuntu 23.10"
NAME="Ubuntu"
VERSION_ID="23.10"
VERSION="23.10 (Mantic Minotaur)"
VERSION_CODENAME=mantic

Linux encoder04 6.5.0-9-generic #9-Ubuntu SMP PREEMPT_DYNAMIC Sat Oct 7 01:35:40 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux

8.188855] ================================================================================
[ 8.188873] UBSAN: array-index-out-of-bounds in /var/lib/dkms/blackmagic-io/12.7a4/build/bm_mm.c:73:18
[ 8.188884] index 0 is out of range for type 'page *[*]'
[ 8.188890] CPU: 5 PID: 1171 Comm: uv Tainted: P OE 6.5.0-9-generic #9-Ubuntu
[ 8.188892] Hardware name: Intel(R) Client Systems NUC12WSKi7/NUC12WSBi7, BIOS WSADL357.0090.2023.0821.1714 08/21/2023
[ 8.188893] Call Trace:
[ 8.188894] <TASK>
[ 8.188897] dump_stack_lvl+0x48/0x70
[ 8.188903] dump_stack+0x10/0x20
[ 8.188905] __ubsan_handle_out_of_bounds+0xc6/0x110
[ 8.188908] bm_put_user_pages+0x6c/0x170 [blackmagic_io]
[ 8.188935] bm_mm_put_user_pages+0x16/0x30 [blackmagic_io]
[ 8.188950] _ZN25IOGeneralMemoryDescriptor8completeEj+0x60/0x80 [blackmagic_io]
[ 8.188972] _ZN22MemDescriptorBusMapper4freeEv+0x52/0x80 [blackmagic_io]
[ 8.189005] _ZNK8OSObject7releaseEi+0x90/0xa0 [blackmagic_io]
[ 8.189032] _ZN15VideoInputFrame8completeEv+0xe7/0x190 [blackmagic_io]
[ 8.189062] _ZN19VideoInputInterface22getCompletedInputFrameEP51BlackmagicVideoInputCompletedFramePrivateDescriptor+0xbd/0x180 [blackmagic_io]
[ 8.189089] _ZN15UserClientClass22getCompletedInputFrameEP51BlackmagicVideoInputCompletedFramePrivateDescriptorPj+0x19/0x30 [blackmagic_io]
[ 8.189121] _ZN15UserClientClass14externalMethodEjP25IOExternalMethodArgumentsP24IOExternalMethodDispatchP8OSObjectPv+0xbc9/0xd50 [blackmagic_io]
[ 8.189151] ? _ZN18IoctlMessageKernel6unpackEv+0x14f/0x160 [blackmagic_io]
[ 8.189177] _ZN20UserClientClassLinux5ioctlEjm+0xbb/0xf0 [blackmagic_io]
[ 8.189206] bmio_client_ioctl+0xc/0x10 [blackmagic_io]
[ 8.189225] bmio_ioctl+0x1a/0x40 [blackmagic_io]
[ 8.189237] __x64_sys_ioctl+0xa0/0xf0
[ 8.189239] do_syscall_64+0x59/0x90
[ 8.189241] ? syscall_exit_to_user_mode+0x37/0x60
[ 8.189243] ? do_syscall_64+0x68/0x90
[ 8.189244] entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 8.189247] RIP: 0033:0x7f412eb238ef
[ 8.189271] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 8.189272] RSP: 002b:00007f4119f0f4e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 8.189274] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f412eb238ef
[ 8.189275] RDX: 00007f4119f0f540 RSI: 0000000000090013 RDI: 0000000000000009
[ 8.189275] RBP: 00007f4119f0f750 R08: 00000007fffffff8 R09: 00007f4119f0f7a8
[ 8.189276] R10: 0000000000000000 R11: 0000000000000246 R12: 000055a02f41b3c0
[ 8.189277] R13: 00007f4119f0f540 R14: 00007f4119f0f760 R15: 0000000000000000
[ 8.189278] </TASK>
[ 8.189278] ================================================================================
[ 8.189402] ================================================================================
[ 8.189411] UBSAN: array-index-out-of-bounds in /var/lib/dkms/blackmagic-io/12.7a4/build/bm_mm.c:154:37
[ 8.189419] index 0 is out of range for type 'page *[*]'
[ 8.189426] CPU: 5 PID: 1171 Comm: uv Tainted: P OE 6.5.0-9-generic #9-Ubuntu
[ 8.189427] Hardware name: Intel(R) Client Systems NUC12WSKi7/NUC12WSBi7, BIOS WSADL357.0090.2023.0821.1714 08/21/2023
[ 8.189427] Call Trace:
[ 8.189428] <TASK>
[ 8.189428] dump_stack_lvl+0x48/0x70
[ 8.189431] dump_stack+0x10/0x20
[ 8.189432] __ubsan_handle_out_of_bounds+0xc6/0x110
[ 8.189434] bm_mmap_map+0x5d/0x1f0 [blackmagic_io]
[ 8.189450] _ZN11IOMemoryMap21initInTaskWithAddressEP11task_structP11bm_user_memPvlb+0x37/0x60 [blackmagic_io]
[ 8.189471] _ZN11IOMemoryMap17inTaskWithAddressEP11task_structP11bm_user_memPvlb+0x56/0x90 [blackmagic_io]
[ 8.189492] _ZN25IOGeneralMemoryDescriptor3mapEj+0xdb/0x120 [blackmagic_io]
[ 8.189513] _ZN15UserClientClass16readAudioSamplesEP30BlackmagicAudioInputReadParamsP30BlackmagicAudioInputReadResultjPj+0x1c3/0x200 [blackmagic_io]
[ 8.189543] _ZN15UserClientClass14externalMethodEjP25IOExternalMethodArgumentsP24IOExternalMethodDispatchP8OSObjectPv+0xabe/0xd50 [blackmagic_io]
[ 8.189572] ? _ZN18IoctlMessageKernel6unpackEv+0x14f/0x160 [blackmagic_io]
[ 8.189597] _ZN20UserClientClassLinux5ioctlEjm+0xbb/0xf0 [blackmagic_io]
[ 8.189626] bmio_client_ioctl+0xc/0x10 [blackmagic_io]
[ 8.189645] bmio_ioctl+0x1a/0x40 [blackmagic_io]
[ 8.189656] __x64_sys_ioctl+0xa0/0xf0
[ 8.189658] do_syscall_64+0x59/0x90
[ 8.189659] ? count_memcg_events.constprop.0+0x2a/0x50
[ 8.189661] ? handle_mm_fault+0xad/0x360
[ 8.189662] ? do_user_addr_fault+0x17a/0x6b0
[ 8.189664] ? exit_to_user_mode_prepare+0x30/0xb0
[ 8.189667] ? irqentry_exit_to_user_mode+0x17/0x20
[ 8.189669] ? irqentry_exit+0x43/0x50
[ 8.189670] ? exc_page_fault+0x94/0x1b0
[ 8.189671] entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 8.189673] RIP: 0033:0x7f412eb238ef
[ 8.189677] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 8.189677] RSP: 002b:00007f4119f0f830 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 8.189678] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f412eb238ef
[ 8.189679] RDX: 00007f4119f0f890 RSI: 0000000000090017 RDI: 0000000000000009
[ 8.189680] RBP: 00007f4119f0f910 R08: 00000007fffffff8 R09: 00007f4119f0f968
[ 8.189680] R10: 0000000000000000 R11: 0000000000000246 R12: 000055a02f41b3c0
[ 8.189681] R13: 00007f4119f0f890 R14: 00007f4119f0f920 R15: 0000000000000030
[ 8.189682] </TASK>
[ 8.189682] ================================================================================
[ 8.189690] ================================================================================
[ 8.189698] UBSAN: array-index-out-of-bounds in /var/lib/dkms/blackmagic-io/12.7a4/build/bm_mm.c:154:20
[ 8.189707] index 0 is out of range for type 'page *[*]'
[ 8.189712] CPU: 5 PID: 1171 Comm: uv Tainted: P OE 6.5.0-9-generic #9-Ubuntu
[ 8.189713] Hardware name: Intel(R) Client Systems NUC12WSKi7/NUC12WSBi7, BIOS WSADL357.0090.2023.0821.1714 08/21/2023
[ 8.189714] Call Trace:
[ 8.189714] <TASK>
[ 8.189714] dump_stack_lvl+0x48/0x70
[ 8.189716] dump_stack+0x10/0x20
[ 8.189718] __ubsan_handle_out_of_bounds+0xc6/0x110
[ 8.189719] bm_mmap_map+0x6c/0x1f0 [blackmagic_io]
[ 8.189734] _ZN11IOMemoryMap21initInTaskWithAddressEP11task_structP11bm_user_memPvlb+0x37/0x60 [blackmagic_io]
[ 8.189755] _ZN11IOMemoryMap17inTaskWithAddressEP11task_structP11bm_user_memPvlb+0x56/0x90 [blackmagic_io]
[ 8.189776] _ZN25IOGeneralMemoryDescriptor3mapEj+0xdb/0x120 [blackmagic_io]
[ 8.189797] _ZN15UserClientClass16readAudioSamplesEP30BlackmagicAudioInputReadParamsP30BlackmagicAudioInputReadResultjPj+0x1c3/0x200 [blackmagic_io]
[ 8.189827] _ZN15UserClientClass14externalMethodEjP25IOExternalMethodArgumentsP24IOExternalMethodDispatchP8OSObjectPv+0xabe/0xd50 [blackmagic_io]
[ 8.189856] ? _ZN18IoctlMessageKernel6unpackEv+0x14f/0x160 [blackmagic_io]
[ 8.189880] _ZN20UserClientClassLinux5ioctlEjm+0xbb/0xf0 [blackmagic_io]
[ 8.189908] bmio_client_ioctl+0xc/0x10 [blackmagic_io]
[ 8.189927] bmio_ioctl+0x1a/0x40 [blackmagic_io]
[ 8.189938] __x64_sys_ioctl+0xa0/0xf0
[ 8.189940] do_syscall_64+0x59/0x90
[ 8.189941] ? count_memcg_events.constprop.0+0x2a/0x50
[ 8.189942] ? handle_mm_fault+0xad/0x360
[ 8.189943] ? do_user_addr_fault+0x17a/0x6b0
[ 8.189944] ? exit_to_user_mode_prepare+0x30/0xb0
[ 8.189946] ? irqentry_exit_to_user_mode+0x17/0x20
[ 8.189947] ? irqentry_exit+0x43/0x50
[ 8.189949] ? exc_page_fault+0x94/0x1b0
[ 8.189950] entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 8.189952] RIP: 0033:0x7f412eb238ef
[ 8.189954] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 8.189954] RSP: 002b:00007f4119f0f830 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 8.189955] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f412eb238ef
[ 8.189955] RDX: 00007f4119f0f890 RSI: 0000000000090017 RDI: 0000000000000009
[ 8.189956] RBP: 00007f4119f0f910 R08: 00000007fffffff8 R09: 00007f4119f0f968
[ 8.189956] R10: 0000000000000000 R11: 0000000000000246 R12: 000055a02f41b3c0
[ 8.189957] R13: 00007f4119f0f890 R14: 00007f4119f0f920 R15: 0000000000000030
[ 8.189958] </TASK>
[ 8.189958] ================================================================================
[ 8.189966] ================================================================================
[ 8.189974] UBSAN: array-index-out-of-bounds in /var/lib/dkms/blackmagic-io/12.7a4/build/bm_mm.c:155:29
[ 8.189983] index 0 is out of range for type 'page *[*]'
[ 8.189989] CPU: 5 PID: 1171 Comm: uv Tainted: P OE 6.5.0-9-generic #9-Ubuntu
[ 8.189989] Hardware name: Intel(R) Client Systems NUC12WSKi7/NUC12WSBi7, BIOS WSADL357.0090.2023.0821.1714 08/21/2023
[ 8.189990] Call Trace:
[ 8.189990] <TASK>
[ 8.189990] dump_stack_lvl+0x48/0x70
[ 8.189992] dump_stack+0x10/0x20
[ 8.189994] __ubsan_handle_out_of_bounds+0xc6/0x110
[ 8.189995] bm_mmap_map+0x85/0x1f0 [blackmagic_io]
[ 8.190010] _ZN11IOMemoryMap21initInTaskWithAddressEP11task_structP11bm_user_memPvlb+0x37/0x60 [blackmagic_io]
[ 8.190031] _ZN11IOMemoryMap17inTaskWithAddressEP11task_structP11bm_user_memPvlb+0x56/0x90 [blackmagic_io]
[ 8.190052] _ZN25IOGeneralMemoryDescriptor3mapEj+0xdb/0x120 [blackmagic_io]
[ 8.190072] _ZN15UserClientClass16readAudioSamplesEP30BlackmagicAudioInputReadParamsP30BlackmagicAudioInputReadResultjPj+0x1c3/0x200 [blackmagic_io]
[ 8.190103] _ZN15UserClientClass14externalMethodEjP25IOExternalMethodArgumentsP24IOExternalMethodDispatchP8OSObjectPv+0xabe/0xd50 [blackmagic_io]
[ 8.190131] ? _ZN18IoctlMessageKernel6unpackEv+0x14f/0x160 [blackmagic_io]
[ 8.190156] _ZN20UserClientClassLinux5ioctlEjm+0xbb/0xf0 [blackmagic_io]
[ 8.190183] bmio_client_ioctl+0xc/0x10 [blackmagic_io]
[ 8.190202] bmio_ioctl+0x1a/0x40 [blackmagic_io]
[ 8.190213] __x64_sys_ioctl+0xa0/0xf0
[ 8.190215] do_syscall_64+0x59/0x90
[ 8.190216] ? count_memcg_events.constprop.0+0x2a/0x50
[ 8.190217] ? handle_mm_fault+0xad/0x360
[ 8.190218] ? do_user_addr_fault+0x17a/0x6b0
[ 8.190219] ? exit_to_user_mode_prepare+0x30/0xb0
[ 8.190221] ? irqentry_exit_to_user_mode+0x17/0x20
[ 8.190222] ? irqentry_exit+0x43/0x50
[ 8.190224] ? exc_page_fault+0x94/0x1b0
[ 8.190225] entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 8.190226] RIP: 0033:0x7f412eb238ef
[ 8.190228] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 8.190229] RSP: 002b:00007f4119f0f830 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 8.190229] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f412eb238ef
[ 8.190230] RDX: 00007f4119f0f890 RSI: 0000000000090017 RDI: 0000000000000009
[ 8.190230] RBP: 00007f4119f0f910 R08: 00000007fffffff8 R09: 00007f4119f0f968
[ 8.190231] R10: 0000000000000000 R11: 0000000000000246 R12: 000055a02f41b3c0
[ 8.190231] R13: 00007f4119f0f890 R14: 00007f4119f0f920 R15: 0000000000000030
[ 8.190232] </TASK>
[ 8.190233] ================================================================================

Same here on Fedora 40
Kernel: 6.12.11-100

Code: Select all

UBSAN: array-index-out-of-bounds in /var/lib/dkms/blackmagic-io/14.4.1a4/build/bm_mm.c:73:18
[  100.287575]  bm_put_user_pages+0x4d/0x120 [blackmagic_io]
[  100.287618]  bm_mm_put_user_pages+0x16/0x20 [blackmagic_io]
[  100.287657]  _ZN25IOGeneralMemoryDescriptor8completeEj+0x60/0x80 [blackmagic_io]
[  100.287700]  _ZN22MemDescriptorBusMapper4freeEv+0x41/0x90 [blackmagic_io]
[  100.287744]  _ZNK8OSObject7releaseEi+0x77/0x90 [blackmagic_io]
[  100.287765]  _ZN15VideoInputFrame8completeEv+0xf0/0x1e0 [blackmagic_io]
[  100.287789]  _ZN19VideoInputInterface22getCompletedInputFrameEP51BlackmagicVideoInputCompletedFramePrivateDescriptor+0x7a/0x180 [blackmagic_io]
[  100.287807]  _ZN15UserClientClass22getCompletedInputFrameEP51BlackmagicVideoInputCompletedFramePrivateDescriptorPj+0x1d/0x30 [blackmagic_io]
[  100.287831]  _ZN15UserClientClass14externalMethodEjP25IOExternalMethodArgumentsP24IOExternalMethodDispatchP8OSObjectPv+0xc71/0xe00 [blackmagic_io]
[  100.287850]  _ZN20UserClientClassLinux5ioctlEjm+0xbb/0x100 [blackmagic_io]
[  100.287872]  bmio_client_ioctl+0x10/0x20 [blackmagic_io]
[  100.287889]  bmio_ioctl+0x17/0x30 [blackmagic_io]
[  100.288022] UBSAN: array-index-out-of-bounds in /var/lib/dkms/blackmagic-io/14.4.1a4/build/bm_mm.c:154:37
[  100.288041]  bm_mmap_map+0x59/0x1e0 [blackmagic_io]
[  100.288056]  _ZN11IOMemoryMap17inTaskWithAddressEP11task_structP11bm_user_memPvlb+0x97/0x110 [blackmagic_io]
[  100.288075]  _ZN25IOGeneralMemoryDescriptor3mapEj+0x71/0x130 [blackmagic_io]
[  100.288089]  _ZN15UserClientClass16readAudioSamplesEP30BlackmagicAudioInputReadParamsP30BlackmagicAudioInputReadResultjPj+0xd7/0x260 [blackmagic_io]
[  100.288110]  _ZN15UserClientClass14externalMethodEjP25IOExternalMethodArgumentsP24IOExternalMethodDispatchP8OSObjectPv+0xb48/0xe00 [blackmagic_io]
[  100.288126]  _ZN20UserClientClassLinux5ioctlEjm+0xbb/0x100 [blackmagic_io]
[  100.288147]  bmio_client_ioctl+0x10/0x20 [blackmagic_io]
[  100.288163]  bmio_ioctl+0x17/0x30 [blackmagic_io]
[  100.288279] UBSAN: array-index-out-of-bounds in /var/lib/dkms/blackmagic-io/14.4.1a4/build/bm_mm.c:154:20
[  100.288296]  bm_mmap_map+0x68/0x1e0 [blackmagic_io]
[  100.288311]  _ZN11IOMemoryMap17inTaskWithAddressEP11task_structP11bm_user_memPvlb+0x97/0x110 [blackmagic_io]
[  100.288327]  _ZN25IOGeneralMemoryDescriptor3mapEj+0x71/0x130 [blackmagic_io]
[  100.288341]  _ZN15UserClientClass16readAudioSamplesEP30BlackmagicAudioInputReadParamsP30BlackmagicAudioInputReadResultjPj+0xd7/0x260 [blackmagic_io]
[  100.288359]  _ZN15UserClientClass14externalMethodEjP25IOExternalMethodArgumentsP24IOExternalMethodDispatchP8OSObjectPv+0xb48/0xe00 [blackmagic_io]
[  100.288373]  _ZN20UserClientClassLinux5ioctlEjm+0xbb/0x100 [blackmagic_io]
[  100.288392]  bmio_client_ioctl+0x10/0x20 [blackmagic_io]
[  100.288408]  bmio_ioctl+0x17/0x30 [blackmagic_io]
[  100.288505] UBSAN: array-index-out-of-bounds in /var/lib/dkms/blackmagic-io/14.4.1a4/build/bm_mm.c:155:29
[  100.288521]  bm_mmap_map+0x81/0x1e0 [blackmagic_io]
[  100.288536]  _ZN11IOMemoryMap17inTaskWithAddressEP11task_structP11bm_user_memPvlb+0x97/0x110 [blackmagic_io]
[  100.288551]  _ZN25IOGeneralMemoryDescriptor3mapEj+0x71/0x130 [blackmagic_io]
[  100.288565]  _ZN15UserClientClass16readAudioSamplesEP30BlackmagicAudioInputReadParamsP30BlackmagicAudioInputReadResultjPj+0xd7/0x260 [blackmagic_io]
[  100.288582]  _ZN15UserClientClass14externalMethodEjP25IOExternalMethodArgumentsP24IOExternalMethodDispatchP8OSObjectPv+0xb48/0xe00 [blackmagic_io]
[  100.288597]  _ZN20UserClientClassLinux5ioctlEjm+0xbb/0x100 [blackmagic_io]
[  100.288614]  bmio_client_ioctl+0x10/0x20 [blackmagic_io]
[  100.288630]  bmio_ioctl+0x17/0x30 [blackmagic_io]


same on Ubuntu 24.04, Kernel 6.8.0-53-generic

UBSAN: array-index-out-of-bounds in /var/lib/dkms/blackmagic-io/14.4.1a4/build/bm_mm.c:154:37
UBSAN: array-index-out-of-bounds in /var/lib/dkms/blackmagic-io/14.4.1a4/build/bm_mm.c:154:20
UBSAN: array-index-out-of-bounds in /var/lib/dkms/blackmagic-io/14.4.1a4/build/bm_mm.c:155:29
UBSAN: array-index-out-of-bounds in /var/lib/dkms/blackmagic-io/14.4.1a4/build/bm_mm.c:73:18

UB sanitizer happily catches those errors, but it's not really pretty

I'm curious if there are any updates on this?

I'm looking for a stable combination of Decklink drivers on Debian/Ubuntu systems - as this doesn't look very inviting to upgrade from 20.04. / kernel v5.x?