This is indeed down to the (deliberately) outdated userland package. While this should be fixed for Jammy, the older series are a trickier prospect as bumping the userland version will remove mmal supported on arm64 (this is also the case for Jammy, but libcamera is intended to be the replacement for the legacy camera utilities there).
I'll leave the targetting on the older series for now, pending a decision on whether it's possible to backport a specific patch for tvservice. ** No longer affects: linux-raspi (Ubuntu) ** Also affects: raspberrypi-userland (Ubuntu Jammy) Importance: Undecided Status: New ** No longer affects: linux-raspi (Ubuntu Focal) ** No longer affects: linux-raspi (Ubuntu Hirsute) ** No longer affects: linux-raspi (Ubuntu Impish) ** Changed in: raspberrypi-userland (Ubuntu Jammy) Assignee: (unassigned) => Dave Jones (waveform) -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux-raspi in Ubuntu. https://bugs.launchpad.net/bugs/1944541 Title: tvservice fails Status in raspberrypi-userland package in Ubuntu: New Status in raspberrypi-userland source package in Focal: New Status in raspberrypi-userland source package in Hirsute: New Status in raspberrypi-userland source package in Impish: New Status in raspberrypi-userland source package in Jammy: New Bug description: $ sudo tvservice -s vchi_msg_dequeue -> -1(90) state 0x1 [TV is off] yields: [ 39.097720] vchiq: header ffff8000110d0f68: bufsize 10 < size 34 [ 39.103958] ------------[ cut here ]------------ [ 39.108725] invalid size [ 39.111398] WARNING: CPU: 2 PID: 2233 at drivers/staging/vc04_services/interface/vchiq_arm/vchiq_arm.c:952 vchiq_ioc_dequeue_message+0x180/0x2c0 [ 39.124567] Modules linked in: cmac algif_hash algif_skcipher af_alg bnep hci_uart btqca btrtl btbcm btintel dm_multipath scsi_dh_rdac scsi_dh_emc scsi_dh_alua btsdio bluetooth ecdh_generic bcm2835_codec(CE) ecc bcm2835_v4l2(CE) brcmfmac bcm2835_isp(CE) bcm2835_mmal_vchiq(CE) brcmutil v4l2_mem2mem snd_bcm2835(CE) videobuf2_vmalloc videobuf2_dma_contig cfg80211 videobuf2_memops snd_pcm videobuf2_v4l2 videobuf2_common snd_timer videodev raspberrypi_hwmon snd bcm2835_gpiomem vc_sm_cma(CE) mc rpivid_mem uio_pdrv_genirq uio nvmem_rmem sch_fq_codel drm ip_tables x_tables autofs4 btrfs blake2b_generic raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor xor_neon raid6_pq libcrc32c raid1 raid0 multipath linear dwc2 crct10dif_ce spidev roles udc_core xhci_pci xhci_pci_renesas phy_generic aes_arm64 [ 39.197843] CPU: 2 PID: 2233 Comm: tvservice Tainted: G C E 5.11.0-1009-raspi #10+21.10.1-Ubuntu [ 39.207903] Hardware name: Raspberry Pi 4 Model B Rev 1.2 (DT) [ 39.213817] pstate: 60400005 (nZCv daif +PAN -UAO -TCO BTYPE=--) [ 39.219909] pc : vchiq_ioc_dequeue_message+0x180/0x2c0 [ 39.225125] lr : vchiq_ioc_dequeue_message+0x180/0x2c0 [ 39.230334] sp : ffff800010e53c70 [ 39.233690] x29: ffff800010e53c70 x28: ffff46e3ce150f80 [ 39.239079] x27: 0000000000000000 x26: 0000000000000000 [ 39.244467] x25: 0000000000000000 x24: ffff8000110d0f68 [ 39.249855] x23: ffff8000110cd194 x22: ffff800010e53d48 [ 39.255243] x21: 0000000000000034 x20: ffff46e3c516e800 [ 39.260632] x19: ffff46e3c516f800 x18: 0000000000000030 [ 39.266019] x17: 0000000000000000 x16: 0000000000000000 [ 39.271406] x15: ffffffffffffffff x14: ffff800090e53957 [ 39.276793] x13: 0000000000000006 x12: ffff80001002d000 [ 39.282181] x11: ffffad7c14e60f70 x10: 0000000000000b10 [ 39.287569] x9 : ffffad7c1400e418 x8 : ffff46e3ce151af0 [ 39.292957] x7 : 000000000000035f x6 : ffffad7c1548e000 [ 39.298345] x5 : 0000000000000000 x4 : ffff46e47b7bc948 [ 39.303731] x3 : ffff46e47b7cccf0 x2 : 0000000000000000 [ 39.309118] x1 : 0000000000000000 x0 : ffff46e3ce150f80 [ 39.314506] Call trace: [ 39.316981] vchiq_ioc_dequeue_message+0x180/0x2c0 [ 39.321841] vchiq_ioctl+0x7f4/0xdac [ 39.325464] __arm64_sys_ioctl+0xb4/0x100 [ 39.329530] el0_svc_common.constprop.0+0x88/0x220 [ 39.334392] do_el0_svc+0x30/0xa0 [ 39.337750] el0_svc+0x28/0x70 [ 39.340846] el0_sync_handler+0x1a4/0x1b0 [ 39.344910] el0_sync+0x17c/0x180 [ 39.348268] ---[ end trace b26bb2281d792cc5 ]--- To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/raspberrypi-userland/+bug/1944541/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp