iMX6 kernel crash with Marvell Bluetooth module enabled

[raymondwang]

Can anyone help us why kernel crash?

Kernel crash details:

binder: 2571:2580 refcount change on invalid ref 225
binder: 2571:2841 refcount change on invalid ref 225
binder: 2571:2841 refcount change on invalid ref 225
binder: transaction release 10604 bad handle 225
BT FW is active(6)
Unable to handle kernel NULL pointer dereference at virtual address 00000020
pgd = d1000000
[00000020] *pgd=00000000
Internal error: Oops: 5 1 PREEMPT SMP
Modules linked in: mbt8xxx cfg80211
CPU: 1 Not tainted (3.0.35-06194-gd8e1e7e-dirty #104)
PC is at binder_thread_read+0x490/0xc50
LR is at __schedule+0x6b4/0x960
pc : [<c04a6004>] lr : [<c066b020>] psr: a0000013
sp : d12bfe30 ip : 00000000 fp : 687614b0
r10: d0c5eda0 r9 : c0956980 r8 : 80287202
r7 : 687614b4 r6 : d01bfca0 r5 : d0504400 r4 : d10a95e0
r3 : d01d0080 r2 : 00000000 r1 : d12be030 r0 : c131a320
Flags: NzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user
Control: 10c53c7d Table: 2100004a DAC: 00000015

PC: 0xc04a5f84:
5f84 e58d3030 e59a3034 e592000c e58d3034 ebef4892 e5961034 e5963030 e5860038
5fa4 e1da23b8 e7e72352 e1510002 aa00009f e3130001 0a0000ed e1500002 d3078202
5fc4 d3488028 ca00009b e596202c e58d303c e58d2038 e596303c e58d3044 e5963010
5fe4 e3530000 058d3040 0a000009 e1a0200d e3c21d7f e5932000 e3c1303f e593300c
6004 e5920020 e59333b4 e5931010 ebf01b27 e58d0040 e5963028 e1a02008 e5951038
6024 e1a00007 e593c020 e2811028 e0831001 e58dc048 e593c024 e58d1050 e58dc04c
6044 e5933020 e2833003 e3c33003 e0811003 e58d1054 ebf80147 e3500000 1affff0f
6064 e1a0c00d e3cc3d7f e3c3303f e2870004 e5933008 e2902028 30d22003 33a03000

LR: 0xc066afa0:
afa0 e1a0000a eb000985 e1a00009 eb000983 eaffffde e3a02001 e1a00009 e1a01008
afc0 ebe85152 e598300c e3a02001 e588201c e3130020 0affffdb e1a00008 e59914e4
afe0 ebe90321 eaffffd7 e59f62d0 ea000002 e5966000 e3560000 0a000097 e5963018
b000 e1a00005 e12fff33 e2508000 0afffff7 e50b80a4 eafffea7 e1a00005 eb000857
b020 eaffff5a e1a00006 ebe7ba2f eaffff3d e1a00006 ebe7c218 eaffff35 e24b606c
b040 e3a01048 e3a08000 e3a09000 e1a00006 ebf0ed12 e3a00003 e3a02001 e3a03000
b060 e3a01001 e1cd80f8 e88d0042 ebea2fb8 eafffef8 e51b109c e3a02001 ebe934fb
b080 eafffe5c e3003508 e3a02e4a e18580d3 e59f322c e18500d2 e5933054 e14b08f4

SP: 0xd12bfdb0:
fdb0 c131a320 d12be000 d01d0080 00000000 ffffffff ffffffff c131a320 d01d0080
fdd0 00000000 0000040f 00000005 d01bfca0 687614b4 c004d2d0 c131a320 d12be030
fdf0 00000000 d01d0080 d10a95e0 d0504400 d01bfca0 687614b4 80287202 c0956980
fe10 d0c5eda0 687614b0 00000000 d12bfe30 c066b020 c04a6004 a0000013 ffffffff
fe30 d4bb2000 c00cfbc0 00000000 d41f0e80 d01d0080 c00d267c d41f0e80 d01d0080
fe50 d01d0088 687615b0 00000001 687614b0 68751ec0 63227b80 00000018 00000010
fe70 d12bfe6c 00002716 00000000 c00d30a8 00000000 c00d30bc c09569d0 c09fb558
fe90 d12bfec8 d12be000 d47d87a0 c0186201 d0504400 00000000 d10a95e0 c04a6a50

R0: 0xc131a2a0:
a2a0 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
a2c0 00000024 00000000 00000000 00000000 00000000 00000000 00000000 00000000
a2e0 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
a300 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
a320 00000000 00000000 00000001 000003f0 000002b0 000001d5 00000134 000000d4
a340 ffff9c07 00000000 00000000 00000000 00000000 00000000 0000005d 00000000
a360 00000d0e 00000000 00006ea9 00000000 0000005d 00000000 00000001 00000000
a380 3d6d4da9 00000004 de38d491 0000001d de38d491 0000001d 00000000 00000000

R1: 0xd12bdfb0:
dfb0 0000002b 6916db18 00000010 ffffffff 65557778 ffffffff 00000000 000000fc
dfd0 00000000 00000014 6555778c 6916dc8c 40083ff4 6916dad0 4007eb0d 40187f20
dff0 20000010 0000002b 00000000 00000000 00000000 00000002 00000000 d01d0080
e010 c09197d0 00000001 00000015 d01d0080 c131a320 d0574e20 d12be000 c00451b4
e030 d113c520 00000001 d12bfbec d12bfb38 c066ad5c 00000000 00000000 00000000
e050 00000000 00000000 01010000 00000000 68f6df00 00000000 00000000 00000000
e070 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
e090 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

R3: 0xd01d0000:
0000 c0d0bc20 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0020 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0040 d11ae020 d01d2060 00000080 d01d0080 00000003 ffffffff 00000000 00000001
0060 00000002 ffffffff 00000000 00000000 00000000 00000000 00000000 00000000
0080 00000000 d12be000 00000002 00400040 00000000 00000000 00000001 00000001
00a0 00000082 00000082 00000082 00000000 c066f998 00000000 0000006e 0253c825
00c0 00000001 00000000 00000000 d4ab7a90 d4ab7a90 00000001 4d6f3b91 0000000a
00e0 00a5f45f 00000000 f608db56 00000009 00a5f45f 00000000 00000001 00000000

R4: 0xd10a9560:
9560 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
9580 2949879f 2949779f 2949679f 2949579f 40bd879f 40bd779f 40bd679f 40bd579f
95a0 40bd479f 40bd379f 40bd279f 00000000 40bd079f 40bcf79f 40bce79f 40bcd79f
95c0 40bcc79f 40bcb79f 40bca79f 40bc979f 40bc879f 40bc579f 40bb879f 40bb779f
95e0 d0504400 d04482c5 d02a86c4 00000000 00000d22 00000001 00000000 d10a95fc
9600 d10a95fc 00007201 00007201 00000000 00000000 d10a9614 d10a9614 00000000
9620 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
9640 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

R5: 0xd0504380:
4380 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
43a0 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
43c0 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
43e0 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
4400 d0aac200 d07c4200 d413c984 d0b175b0 d058a9e4 d01182b0 00000c80 d49ac3e8
4420 d0f56100 d4470c40 00000000 00000000 00000000 dcd00000 8be70000 dcd00000
4440 dcd000a0 dcd000a8 dcd00008 0007f000 d0112c00 000fe000 00000000 d01bfca4
4460 d01bfca4 00000000 00000000 d0f63e6c d0fbde6c 00000000 00000000 0000000c

R6: 0xd01bfc20:
fc20 00003015 00100100 00200200 00000001 00000000 00000000 d4263e00 d4305d60
fc40 00000000 00000000 db40013c 00000001 00000010 0000000b 00000000 0000271c
fc60 0000301c 00100100 00200200 00000001 00000000 d0aad5e0 d43b2c00 d41f0c80
fc80 00000000 00000000 00000000 00000002 00000010 0000000b 00000000 000003f5
fca0 00003022 d050445c d050445c 00000001 d42498a0 00000000 d0504400 00000000
fcc0 00000000 00000001 dcd0002c 00000018 00000010 0000000a 00000000 00002716
fce0 00002f77 d113a7a4 d113a724 d113a7e4 d113a930 00000000 00000000 00000000
fd00 d12a6c40 d4263e00 d12a6c20 00000110 00000001 00000001 00000000 00000000

R9: 0xc0956900:
6900 00000000 00000000 00000000 00000000 00000000 c08579ac c0956778 00000000
6920 c0857928 00000000 00000000 00000000 00000000 00000000 00000000 00000000
6940 00000000 00000000 d422bba0 00000001 00000000 00000000 c0956958 c0956958
6960 00000000 00000000 00000000 00000000 c0956970 c0956970 c0956978 c0956978
6980 00000030 c0857b04 c06ba59c c09567fc c0956a2c 00000000 d41a6e00 00000000
69a0 00000000 00000001 00000000 00000000 c09569b0 c09569b0 00000000 00000400
69c0 c09569c0 c09569c0 c04a2f44 00000007 ffffffff 00000000 00000000 d11b9dfc
69e0 d4233e7c d01d0080 00000000 00000000 c09569f0 c09569f0 c04a1728 c04a03ec

R10: 0xd0c5ed20:
ed20 d0369000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
ed40 00002987 d0c5ed44 d0c5ed44 00000003 d10d1af1 d0eae9d0 d11b3ed0 d06c4000
ed60 d0b27a3c 00000001 00000000 00000000 655576b8 65557698 00001fe5 d0c5ed7c
ed80 d0c5ed7c 00000000 00000000 00000000 00000000 00000000 00000000 00000000
eda0 000026f2 d0c5eda4 d0c5eda4 00000003 d10d1431 00000000 00000000 d0504400
edc0 d113a9fc 00000002 00000000 00000001 68751ec0 63227b80 00001fe5 d0c5eddc
ede0 d0c5eddc 00000000 00000000 00000000 00000000 00000000 00000000 00000000
ee00 000026e8 d0c5ee04 d0c5ee04 00000003 d0c11d51 d12a6f30 00000000 d0504400
Process Binder_3 (pid: 3362, stack limit = 0xd12be2f0)
Stack: (0xd12bfe30 to 0xd12c0000)
fe20: d4bb2000 c00cfbc0 00000000 d41f0e80
fe40: d01d0080 c00d267c d41f0e80 d01d0080 d01d0088 687615b0 00000001 687614b0
fe60: 68751ec0 63227b80 00000018 00000010 d12bfe6c 00002716 00000000 c00d30a8
fe80: 00000000 c00d30bc c09569d0 c09fb558 d12bfec8 d12be000 d47d87a0 c0186201
fea0: d0504400 00000000 d10a95e0 c04a6a50 d12bfed8 00000000 ab794dac 00000000
fec0: 0000b798 68f6de20 00000000 00000000 68755fe0 00000100 00000000 687614b0
fee0: 00000000 d474e470 68f6de20 d47d87a0 0000000a c004da84 d12be000 00000000
ff00: 00000000 c01422bc d12be000 00000000 d12bff24 c007f274 d0ce21e8 d0dd4a80
ff20: 00000000 00000001 00000000 00000000 00000000 00000000 d11e0520 d0ce21e8
ff40: 00000004 00000000 d21626c8 00000002 d12be000 00000000 00000000 c01330ec
ff60: d0ce21e0 d47d87a0 68f6de20 c0186201 0000000a c004da84 d12be000 00000000
ff80: 00000000 c01427c0 00000000 00000001 401bb228 64dbd7d0 64dbd7a0 64dbd800
ffa0: 00000036 c004d900 64dbd7d0 64dbd7a0 0000000a c0186201 68f6de20 68f6de1c
ffc0: 64dbd7d0 64dbd7a0 64dbd800 00000036 00000001 64dbd7a8 00000000 00000000
ffe0: 4021df24 68f6de00 4019a9b1 40187008 00000010 0000000a 00000000 00000000
[<c04a6004>] (binder_thread_read+0x490/0xc50) from [<c04a6a50>] (binder_ioctl+0x28c/0x610)
[<c04a6a50>] (binder_ioctl+0x28c/0x610) from [<c01422bc>] (do_vfs_ioctl+0x80/0x54c)
[<c01422bc>] (do_vfs_ioctl+0x80/0x54c) from [<c01427c0>] (sys_ioctl+0x38/0x5c)
[<c01427c0>] (sys_ioctl+0x38/0x5c) from [<c004d900>] (ret_fast_syscall+0x0/0x30)
Code: e3c21d7f e5932000 e3c1303f e593300c (e5920020)
--[ end trace b77c2a79fff4c4a4 ]--
Kernel panic - not syncing: Fatal exception
[<c0054fc4>] (unwind_backtrace+0x0/0x138) from [<c0666538>] (panic+0x74/0x194)
[<c0666538>] (panic+0x74/0x194) from [<c0051454>] (die+0x218/0x284)
[<c0051454>] (die+0x218/0x284) from [<c0665f2c>] (__do_kernel_fault.part.3+0x54/0x74)
[<c0665f2c>] (__do_kernel_fault.part.3+0x54/0x74) from [<c0058d70>] (do_page_fault+0x2cc/0x334)
[<c0058d70>] (do_page_fault+0x2cc/0x334) from [<c0047410>] (do_DataAbort+0x34/0x9c)
[<c0047410>] (do_DataAbort+0x34/0x9c) from [<c004d2d0>] (__dabt_svc+0x70/0xa0)
Exception stack(0xd12bfde8 to 0xd12bfe30)
fde0: c131a320 d12be030 00000000 d01d0080 d10a95e0 d0504400
fe00: d01bfca0 687614b4 80287202 c0956980 d0c5eda0 687614b0 00000000 d12bfe30
fe20: c066b020 c04a6004 a0000013 ffffffff
[<c004d2d0>] (__dabt_svc+0x70/0xa0) from [<c04a6004>] (binder_thread_read+0x490/0xc50)
[<c04a6004>] (binder_thread_read+0x490/0xc50) from [<c04a6a50>] (binder_ioctl+0x28c/0x610)
[<c04a6a50>] (binder_ioctl+0x28c/0x610) from [<c01422bc>] (do_vfs_ioctl+0x80/0x54c)
[<c01422bc>] (do_vfs_ioctl+0x80/0x54c) from [<c01427c0>] (sys_ioctl+0x38/0x5c)
[<c01427c0>] (sys_ioctl+0x38/0x5c) from [<c004d900>] (ret_fast_syscall+0x0/0x30)
CPU0: stopping
[<c0054fc4>] (unwind_backtrace+0x0/0x138) from [<c00473a8>] (do_IPI+0x1d4/0x208)
[<c00473a8>] (do_IPI+0x1d4/0x208) from [<c004d34c>] (__irq_svc+0x4c/0xe8)
Exception stack(0xc08e3f68 to 0xc08e3fb0)
3f60: 00000000 00000000 c09011d8 f40c4000 c08e2000 c097f8a4
3f80: c0670234 c0900694 1000406a 412fc09a 00000000 00000000 c0054750 c08e3fb0
3fa0: c005ce84 c004e468 20000013 ffffffff
[<c004d34c>] (__irq_svc+0x4c/0xe8) from [<c004e468>] (default_idle+0x24/0x28)
[<c004e468>] (default_idle+0x24/0x28) from [<c004e778>] (cpu_idle+0xc8/0x108)
[<c004e778>] (cpu_idle+0xc8/0x108) from [<c00088bc>] (start_kernel+0x29c/0x2ec)
[<c00088bc>] (start_kernel+0x29c/0x2ec) from [<10008040>] (0x10008040)
CPU2: stopping
[<c0054fc4>] (unwind_backtrace+0x0/0x138) from [<c00473a8>] (do_IPI+0x1d4/0x208)
[<c00473a8>] (do_IPI+0x1d4/0x208) from [<c004d34c>] (__irq_svc+0x4c/0xe8)
Exception stack(0xd4071f90 to 0xd4071fd8)
1f80: 00000000 00000000 c09011d8 f40c4000
1fa0: d4070000 c097f8a4 c0670234 c0900694 1000406a 412fc09a 00000000 00000000
1fc0: 00000002 d4071fd8 c005ce84 c004e468 20000013 ffffffff
[<c004d34c>] (__irq_svc+0x4c/0xe8) from [<c004e468>] (default_idle+0x24/0x28)
[<c004e468>] (default_idle+0x24/0x28) from [<c004e778>] (cpu_idle+0xc8/0x108)
[<c004e778>] (cpu_idle+0xc8/0x108) from [<106624b4>] (0x106624b4)
CPU3: stopping
[<c0054fc4>] (unwind_backtrace+0x0/0x138) from [<c00473a8>] (do_IPI+0x1d4/0x208)
[<c00473a8>] (do_IPI+0x1d4/0x208) from [<c004d34c>] (__irq_svc+0x4c/0xe8)
Exception stack(0xd409bf90 to 0xd409bfd8)
bf80: 00000000 00000000 c09011d8 f40c4000
bfa0: d409a000 c097f8a4 c0670234 c0900694 1000406a 412fc09a 00000000 00000000
bfc0: c0054750 d409bfd8 c005ce84 c004e468 20000013 ffffffff
[<c004d34c>] (__irq_svc+0x4c/0xe8) from [<c004e468>] (default_idle+0x24/0x28)
[<c004e468>] (default_idle+0x24/0x28) from [<c004e778>] (cpu_idle+0xc8/0x108)
[<c004e778>] (cpu_idle+0xc8/0x108) from [<106624b4>] (0x106624b4)

[raymondwang · Accepted solution]

Update Marvell driver to LINUX2635-14 66 9 p75-M2614301 can resolve this issue.

[beginnerwu]

Hello Ray:

       Can I ask you a few questions? My work basically depend on your post about wifi and bluetooth. sd8787.

     1 WiFi can now work. Bluetooth problem described here like you.kernel crash.
      LINUX2635-14 66 9 p75-M2614301.Where can I find?I am a beginner.More than ever before the VxWorks work.

     2  In xhteam · GitHub

        I can see the fruits of your selfless.I would like to ask, Bluetooth part of it can work regularly? If have the above said problem.

        I used your libbt and Marvell driver, Bluetooth can work. But appears above the problem.Kernel crash.

    Can you help me?

    I am working on Freescale sabre6q.

   thanks.

[beginnerwu]

I did not expect, eventually driving problems.

Driven by the above versionLINUX2635..., no crashes, continuous closed Bluetooth dozens of times. Spent a lot of time. The original has been less believe drive so fragile, thought it would be subjected to rigorous testing before release. The practice proved that, I was wrong.

The drive can be found at GitHub, people have done a lot of work.

[raymondwang]

Does any guy else using sd8787?  My bluetooth on android 4.2 bluedroid stack does not work gracefully. It will cause my kernel crash very often(Sometimes it can work).

Please help me!