iMX6DL kernel panic issue when using CSR Wifi driver

[jianxingwang]

Hi

Thank you for support.

We found a kernel panic issue when using CSR wifi driver with our iMX6D platform which runing the OS version as 3.0.35.

Currently we have no idea about this issue, So i copied the crash stack in the following, Hope anyone can help me for this

panic.

<3>[  587.015209] unifi3: unifi_receive_event: Received MaPacketInd with status 4, Frame dropped

<3>[  587.024654] unifi3: unifi_receive_event: Received MaPacketInd with status 4, Frame dropped

<5>[  587.243559] (!!) init: starting 'dhcpcd_wlan0'

<3>[  597.575232] unifi3: unifi_receive_event: Received MaPacketInd with status 4, Frame dropped

<7>[  598.096879] wlan0: no IPv6 routers present

<3>[  600.233547] unifi3: unifi_receive_event: Received MaPacketInd with status 4, Frame dropped

<3>[  600.243102] unifi3: unifi_receive_event: Received MaPacketInd with status 4, Frame dropped

<5>[  607.450101] (!!) init: service 'dhcpcd_wlan0' is being stopped

<6>[  607.498092] (II) init: waitpid returned pid 3780, status = 00000100

<5>[  607.504636] (!!) init: process 'dhcpcd_wlan0', pid 3780 exited

<5>[  607.689298] (!!) init: starting 'dhcpcd_wlan0'

<4>[  617.422335] TouchPanel receive response in 5s, jiffies: 31623.

<7>[  618.286881] wlan0: no IPv6 routers present

<5>[  623.767481] (!!) init: service 'dhcpcd_wlan0' is being stopped

<6>[  623.789368] (II) init: waitpid returned pid 3789, status = 00000100

<5>[  623.821959] (!!) init: process 'dhcpcd_wlan0', pid 3789 exited

<5>[  628.642811] (!!) init: starting 'dhcpcd_wlan0'

<7>[  639.946883] wlan0: no IPv6 routers present

<4>[  642.424971] TouchPanel receive response in 5s, jiffies: 34123.

<5>[  648.844763] (!!) init: service 'dhcpcd_wlan0' is being stopped

<6>[  648.888080] (II) init: waitpid returned pid 3805, status = 00000100

<5>[  648.894642] (!!) init: process 'dhcpcd_wlan0', pid 3805 exited

<5>[  649.088015] (!!) init: starting 'dhcpcd_wlan0'

<4>[  651.788697] TouchPanel receive response in 5s, jiffies: 35060.

<1>[  652.942600] Unable to handle kernel NULL pointer dereference at virtual address 00000000

<1>[  652.951159] pgd = ab7c8000

<1>[  652.953913] [00000000] *pgd=3b5f6831, *pte=00000000, *ppte=00000000

<0>[  652.960788] Internal error: Oops: 17 [#1] PREEMPT SMP

<4>[  652.965845] Modules linked in: snd_usb_audio snd_usbmidi_lib snd_soc_imx_saf7741 mxc_asrc snd_soc_imx_mx2 snd_soc_imx_esai snd_soc_imx_ssi snd_soc_saf7741 snd_soc_core snd_aloop snd_rawmidi snd_hwdep asix cdc_ncm hdmi_mn864779 usbnet hid_ipod spi_ak7756 unifi_sdio snd_pcm snd_page_alloc snd_timer snd soundcore hid gp2ap050a virtual_ts atmel_mxt540e_ts uinput nls_utf8 nls_ascii autofs4 ch softdog pdrd galcore loop usb_storage ext4 jbd2 mbcache

<4>[  653.005594] CPU: 0    Not tainted  (3.0.35 #1)

<4>[  653.010062] PC is at put_page+0x0/0x40

<4>[  653.013826] LR is at skb_release_data+0x84/0xb4

<4>[  653.018364] pc : [<800bb388>]    lr : [<802a0bec>]    psr: 20000013

<4>[  653.018370] sp : ab6a7cf8  ip : 00000000  fp : 0000000c

<4>[  653.029859] r10: aa0feb00  r9 : ab6a7e18  r8 : a0b247c0

<4>[  653.035088] r7 : 00000000  r6 : a0b2464c  r5 : aa0feb00  r4 : 00000001

<4>[  653.041619] r3 : 00000006  r2 : 00000000  r1 : 00000000  r0 : 00000000

<4>[  653.048153] Flags: nzCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user

<4>[  653.055294] Control: 10c53c7d  Table: 3b7c804a  DAC: 00000015

<4>[  653.061043]

<4>[  653.061045] PC: 0x800bb308:

<4>[  653.065326] b308  ebffff52 e3a03000 e5843000 e28dd00c e8bd8ff0 e1a02001 e30a1adc e348100b

<4>[  653.073619] b328  eaffffc8 e52de004 e24dd00c e28d2008 e3a03000 e30a18b4 e348100b e5223004

<4>[  653.081911] b348  ebffffc0 e1a0200d e3c23d7f e3012cd0 e3c3303f e3482049 e5931014 e59f3018

<4>[  653.090205] b368  e7922101 e59d1004 e7930002 e0801001 e7831002 e28dd00c e8bd8000 8002eb54

<4>[  653.098498] b388  e5902000 e3120903 1a00000b e1a02000 e5b21004 f57ff05f e1921f9f e2411001

<4>[  653.106791] b3a8  e182cf91 e33c0000 1afffffa f57ff05f e3510000 112fff1e eafffead eafffeb6

<4>[  653.115086] b3c8  e92d4070 e1a04000 e5903000 e1500003 08bd8070 e3a06c01 e3a05c02 e3406010

<4>[  653.123379] b3e8  e3405020 e5943004 e2430018 e8930006 e5812004 e5821000 e5836000 e5835004

<4>[  653.131672]

<4>[  653.131674] LR: 0x802a0b6c:

<4>[  653.135955] 0b6c  e1a05000 e5d03064 e2032002 e6ef2072 e3520000 0a00000f e2033010 e3a02001

<4>[  653.144249] 0b8c  e6ef3073 e3530000 e5903094 17df2812 e2831028 f57ff05f e1910f9f e0400002

<4>[  653.152540] 0bac  e181cf90 e33c0000 1afffffa f57ff05f e3500000 18bd8038 e5950094 e1d030b0

<4>[  653.160832] 0bcc  e3530000 0a000009 da000008 e3a04000 e2843006 e2844001 e7900183 ebf869e6

<4>[  653.169125] 0bec  e5950094 e1d030b0 e1530004 cafffff7 e5903010 e3530000 0a000001 e2800010

<4>[  653.177417] 0c0c  ebffffca e5950098 e8bd4038 eaf8f789 e92d47f0 e2515000 e1a04000 e1a08003

<4>[  653.185709] 0c2c  e5903094 e5900098 ba000091 e594c0a4 e35c0001 1a00008b e5d41064 e0606003

<4>[  653.194002] 0c4c  e0866005 e201e002 e0866002 e286601f e6efe07e e3c6601f e35e0000 1a00005d

<4>[  653.202295]

<4>[  653.202297] SP: 0xab6a7c78:

<4>[  653.206577] 7c78  80072b9c a0b208bc 800f2cb8 00000000 a0b208c8 00000001 000000c3 00000001

<4>[  653.214870] 7c98  ab6a7cec 0000040f 00000007 a0b2464c 00000000 80035a90 00000000 00000000

<4>[  653.223163] 7cb8  00000000 00000006 00000001 aa0feb00 a0b2464c 00000000 a0b247c0 ab6a7e18

<4>[  653.231454] 7cd8  aa0feb00 0000000c 00000000 ab6a7cf8 802a0bec 800bb388 20000013 ffffffff

<4>[  653.239746] 7cf8  00000000 aa0feb00 ab6a6000 802a0934 a0b24600 80316908 00000001 8029c2e4

<4>[  653.248039] 7d18  a0b24800 00000ffc 00000000 00000001 ab6a7f74 0000000c a0b24794 00000000

<4>[  653.256330] 7d38  a0b2464c a84052c0 000007d1 aa5bc7a0 aa1a31e0 00000000 000009b2 00000000

<4>[  653.264622] 7d58  00000000 80382e34 aadab8a0 00000000 00000000 00000000 ab6a7ee0 00000ffc

<4>[  653.272916]

<4>[  653.272918] R5: 0xaa0fea80:

<4>[  653.277199] ea80  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

<4>[  653.285493] eaa0  00000000 00000000 8029d3b8 00000000 00000000 00000000 00000000 00000000

<4>[  653.293787] eac0  00000000 00000000 00000000 00000000 a0dc9dc0 a0dc9de0 a0dc9dc0 a0dc9dc0

<4>[  653.302080] eae0  000000c8 00000001 7a237e10 96aafeb6 154d5d1f a5e5d1fb 325634df f7affbf9

<4>[  653.310372] eb00  00000000 00000000 00000000 00000000 a0b24800 00000000 aa5bc7a0 aa1a31e0

<4>[  653.318663] eb20  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

<4>[  653.326956] eb40  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

<4>[  653.335248] eb60  00000000 00000000 80316640 00000000 00000000 00000000 00000000 00000000

<4>[  653.343541]

<4>[  653.343544] R6: 0xa0b245cc:

<4>[  653.347825] 45cc  00000000 00000000 00000000 00000000 00000000 00000000 00000000 a0b245e8

<4>[  653.356118] 45ec  a0b245e8 00000000 00000000 00000000 00000000 00000000 00000000 00000000

<4>[  653.364410] 460c  00010001 00000000 00000000 00000000 804b476c a0b24820 a0b24220 ffffffff

<4>[  653.372703] 462c  00000003 00000000 00000000 00000000 00000000 00000000 a0b24644 a0b24644

<4>[  653.380994] 464c  a0b2464c a0b2464c 00000000 00000000 00000000 00000000 00000000 00000000

<4>[  653.389287] 466c  00000000 00000000 00000000 00000000 0001a800 00000000 a0b208a0 00000000

<4>[  653.397582] 468c  00000000 00000100 00000000 00000000 00000000 00000001 00000000 0001a800

<4>[  653.405877] 46ac  a0b246ac a0b246ac 00000000 00000000 00000000 00010000 00000000 000000d0

<4>[  653.414171]

<4>[  653.414173] R8: 0xa0b24740:

<4>[  653.418454] 4740  ffffffff 00000000 c4653600 ffffffff a84052c0 00000000 00000000 00000000

<4>[  653.426747] 4760  00000000 00000000 00000000 00000000 8029c1dc 8029c2a8 80315c90 8029c178

<4>[  653.435039] 4780  00000000 80315b90 ab8f8be0 a82375e0 aa0231c0 00000000 00000000 00000000

<4>[  653.443330] 47a0  a0b247a0 a0b247a0 aadab8a0 a0b24800 00000000 a0b247b4 a0b247b4 00000000

<4>[  653.451624] 47c0  00000000 00000000 00000100 00000000 00000000

<3>[  653.456914] i2c i2c-3: <i2c_imx_trx_complete> I2C Control I2SR_IIF is Set, But I2C IRQ for GIC not trigger in HZ/2 Time

<3>[  653.456941] i2c i2c-2: <i2c_imx_trx_complete> I2C Control I2SR_IIF is Set, But I2C IRQ for GIC not trigger in HZ/2 Time

<4>[  653.479085]  00000000 00000000 00000000

<4>[  653.482958] 47e0  00000000 00000000 a0b247e8 a0b247e8 00000000 00000000 00000000 00000000

<4>[  653.491249] 4800  00000000 00000000 00000000 00010001 00000000 00000000 00000000 804b476c

<4>[  653.499540] 4820  a0566620 a0b24620 ffffffff 00000003 00000000 00000000 00000000 00000000

<4>[  653.507834]

<4>[  653.507836] R9: 0xab6a7d98:

<4>[  653.512117] 7d98  40000040 00000000 aadab8a0 ab6a6000 00000000 00000001 ffffffff 00000000

<4>[  653.520410] 7db8  00000000 00000000 00000000 00000000 aadab8a0 00000000 00000000 00000000

<4>[  653.528701] 7dd8  00000600 60000013 ab6a7e18 00000000 ab6a6000 80491cd0 ab6a6000 00020200

<4>[  653.536993] 7df8  00000000 00000024 a84052c0 00000000 00000000 ab6a7f74 00000018 ab6a7f74

<4>[  653.545285] 7e18  ab6a7e60 00000001 40000040 00000ffc a84052c0 00000000 ab6a7d44 ab6a7f74

<4>[  653.553578] 7e38  ab6a6000 ab6a7f74 ab6a7e80 00000002 40000040 ab6a7f00 00000010 00000000

<4>[  653.561870] 7e58  ab6a7f00 ab6a7f74 7eefa434 00000000 a84052c0 40000040 ab6a7f00 80299fe4

<4>[  653.570162] 7e78  00000000 7eefa460 a1ad7d88 800cb3f0 804b6480 804b6480 a1ad7d88 a1abfe84

<4>[  653.578456]

<4>[  653.578458] R10: 0xaa0fea80:

<4>[  653.582826] ea80  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

<4>[  653.591117] eaa0  00000000 00000000 8029d3b8 00000000 00000000 00000000 00000000 00000000

<4>[  653.599409] eac0  00000000 00000000 00000000 00000000 a0dc9dc0 a0dc9de0 a0dc9dc0 a0dc9dc0

<4>[  653.607702] eae0  000000c8 00000001 7a237e10 96aafeb6 154d5d1f a5e5d1fb 325634df f7affbf9

<4>[  653.615993] eb00  00000000 00000000 00000000 00000000 a0b24800 00000000 aa5bc7a0 aa1a31e0

<4>[  653.624284] eb20  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

<4>[  653.632576] eb40  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

<4>[  653.640867] eb60  00000000 00000000 80316640 00000000 00000000 00000000 00000000 00000000

<0>[  653.649163] Process wliautoserver (pid: 2001, stack limit = 0xab6a62f0)

<0>[  653.655782] Stack: (0xab6a7cf8 to 0xab6a8000)

<0>[  653.660144] 7ce0:                                                       00000000 aa0feb00

<0>[  653.668332] 7d00: ab6a6000 802a0934 a0b24600 80316908 00000001 8029c2e4 a0b24800 00000ffc

<0>[  653.676519] 7d20: 00000000 00000001 ab6a7f74 0000000c a0b24794 00000000 a0b2464c a84052c0

<0>[  653.684705] 7d40: 000007d1 aa5bc7a0 aa1a31e0 00000000 000009b2 00000000 00000000 80382e34

<0>[  653.692893] 7d60: aadab8a0 00000000 00000000 00000000 ab6a7ee0 00000ffc ab6a7f74 40000040

<0>[  653.701080] 7d80: 80382e34 00000000 00000000 ab6a7f00 00000010 802992dc 40000040 00000000

<0>[  653.709266] 7da0: aadab8a0 ab6a6000 00000000 00000001 ffffffff 00000000 00000000 00000000

<0>[  653.717451] 7dc0: 00000000 00000000 aadab8a0 00000000 00000000 00000000 00000600 60000013

<0>[  653.725637] 7de0: ab6a7e18 00000000 ab6a6000 80491cd0 ab6a6000 00020200 00000000 00000024

<0>[  653.733822] 7e00: a84052c0 00000000 00000000 ab6a7f74 00000018 ab6a7f74 ab6a7e60 00000001

<0>[  653.742008] 7e20: 40000040 00000ffc a84052c0 00000000 ab6a7d44 ab6a7f74 ab6a6000 ab6a7f74

<0>[  653.750193] 7e40: ab6a7e80 00000002 40000040 ab6a7f00 00000010 00000000 ab6a7f00 ab6a7f74

<0>[  653.758379] 7e60: 7eefa434 00000000 a84052c0 40000040 ab6a7f00 80299fe4 00000000 7eefa460

<0>[  653.766565] 7e80: a1ad7d88 800cb3f0 804b6480 804b6480 a1ad7d88 a1abfe84 a1abfe74 800ce680

<0>[  653.774750] 7ea0: 84437620 84437640 00000001 00000000 00000001 800b6e64 00000000 84437620

<0>[  653.782936] 7ec0: 00000000 84437620 ab5ea7a0 802989a4 80298988 80116e4c ab5ea7a0 ab5ea7e0

<0>[  653.791122] 7ee0: 0006c668 ab5ea7a0 ab5ea7e0 ab6a7f08 ab5ea7a8 80116de4 ffffffff ab5ea7a0

<0>[  653.799307] 7f00: 0006c0fc 00000224 0006b320 00000dcc 00000020 ab6a6000 7eefa568 aa256680

<0>[  653.807493] 7f20: ab5ea7a0 ffffffff 00000001 801181b4 00000000 a1ad7d88 00000000 800e4698

<0>[  653.815678] 7f40: fffffff7 a84052c0 40000040 7eefa434 00000129 80036244 ab6a6000 00000000

<0>[  653.823864] 7f60: 00000000 8029b310 00000000 7eefa558 2ae50ea0 00000000 00000000 ab6a7f00

<0>[  653.832049] 7f80: 00000002 7eefa460 0000007c 40000000 00000001 fffffff7 7eefa434 00000040

<0>[  653.840235] 7fa0: 0000006a 800360c0 7eefa434 00000040 0000006a 7eefa434 40000040 00000000

<0>[  653.848420] 7fc0: 7eefa434 00000040 0000006a 00000129 7eefa568 2aad7f10 2aad7f10 00000000

<0>[  653.856606] 7fe0: 00000000 7eefa410 2aafebb4 2aafebc4 80000010 0000006a e1d330fe e5900000

<4>[  653.864817] [<800bb388>] (put_page+0x0/0x40) from [<802a0bec>] (skb_release_data+0x84/0xb4)

<4>[  653.873186] [<802a0bec>] (skb_release_data+0x84/0xb4) from [<802a0934>] (__kfree_skb+0x14/0xcc)

<4>[  653.881903] [<802a0934>] (__kfree_skb+0x14/0xcc) from [<80316908>] (unix_stream_recvmsg+0x218/0x64c)

<4>[  653.891050] [<80316908>] (unix_stream_recvmsg+0x218/0x64c) from [<802992dc>] (sock_recvmsg+0xa0/0xc0)

<4>[  653.900282] [<802992dc>] (sock_recvmsg+0xa0/0xc0) from [<80299fe4>] (__sys_recvmsg+0xfc/0x1b4)

<4>[  653.908905] [<80299fe4>] (__sys_recvmsg+0xfc/0x1b4) from [<8029b310>] (sys_recvmsg+0x3c/0x68)

<4>[  653.917447] [<8029b310>] (sys_recvmsg+0x3c/0x68) from [<800360c0>] (ret_fast_syscall+0x0/0x30)

<0>[  653.926070] Code: e7831002 e28dd00c e8bd8000 8002eb54 (e5902000)

<4>[  653.935272] ---[ end trace ea32b4c44717477d ]---

<0>[  653.940265] Kernel panic - not syncing: Fatal exception

<4>[  653.945630] [<8003cd9c>] (unwind_backtrace+0x0/0xf8) from [<8035a938>] (panic+0x74/0x18c)

<4>[  653.953934] [<8035a938>] (panic+0x74/0x18c) from [<80039bb4>] (die+0x218/0x284)

<4>[  653.961345] [<80039bb4>] (die+0x218/0x284) from [<8035a730>] (__do_kernel_fault.part.5+0x54/0x74)

<4>[  653.970298] [<8035a730>] (__do_kernel_fault.part.5+0x54/0x74) from [<800409c4>] (do_page_fault+0x2b4/0x31c)

<4>[  653.980117] [<800409c4>] (do_page_fault+0x2b4/0x31c) from [<80030410>] (do_DataAbort+0x34/0x9c)

<4>[  653.988895] [<80030410>] (do_DataAbort+0x34/0x9c) from [<80035a90>] (__dabt_svc+0x70/0xa0)

<4>[  653.997207] Exception stack(0xab6a7cb0 to 0xab6a7cf8)

<4>[  654.002280] 7ca0:                                     00000000 00000000 00000000 00000006

<4>[  654.010497] 7cc0: 00000001 aa0feb00 a0b2464c 00000000 a0b247c0 ab6a7e18 aa0feb00 0000000c

<4>[  654.018735] 7ce0: 00000000 ab6a7cf8 802a0bec 800bb388 20000013 ffffffff

<4>[  654.025421] [<80035a90>] (__dabt_svc+0x70/0xa0) from [<800bb388>] (put_page+0x0/0x40)

<4>[  654.033313] [<800bb388>] (put_page+0x0/0x40) from [<802a0bec>] (skb_release_data+0x84/0xb4)

<4>[  654.041740] [<802a0bec>] (skb_release_data+0x84/0xb4) from [<802a0934>] (__kfree_skb+0x14/0xcc)

<4>[  654.050495] [<802a0934>] (__kfree_skb+0x14/0xcc) from [<80316908>] (unix_stream_recvmsg+0x218/0x64c)

<4>[  654.059674] [<80316908>] (unix_stream_recvmsg+0x218/0x64c) from [<802992dc>] (sock_recvmsg+0xa0/0xc0)

<4>[  654.068945] [<802992dc>] (sock_recvmsg+0xa0/0xc0) from [<80299fe4>] (__sys_recvmsg+0xfc/0x1b4)

<4>[  654.077606] [<80299fe4>] (__sys_recvmsg+0xfc/0x1b4) from [<8029b310>] (sys_recvmsg+0x3c/0x68)

<4>[  654.086163] [<8029b310>] (sys_recvmsg+0x3c/0x68) from [<800360c0>] (ret_fast_syscall+0x0/0x30)

<2>[  654.094827] CPU1: stopping

<4>[  654.097569] [<8003cd9c>] (unwind_backtrace+0x0/0xf8) from [<800303a8>] (do_IPI+0x1d4/0x208)

<4>[  654.105935] [<800303a8>] (do_IPI+0x1d4/0x208) from [<80035b0c>] (__irq_svc+0x4c/0xe8)

<4>[  654.113771] Exception stack(0xa1ae7eb0 to 0xa1ae7ef8)

<4>[  654.118829] 7ea0:                                     8480ff20 aab54b20 047e1000 00000000

<4>[  654.127015] 7ec0: 8480ff20 a1a3a460 a1ae6000 aab54b20 a1a3a5e8 a1ae6000 7ebf0e50 a1ae7fac

<4>[  654.135200] 7ee0: aab54b20 a1ae7ef8 8035dc74 8035fee0 60000113 ffffffff

<4>[  654.141832] [<80035b0c>] (__irq_svc+0x4c/0xe8) from [<8035fee0>] (_raw_spin_unlock_irq+0x18/0x40)

<4>[  654.150716] [<8035fee0>] (_raw_spin_unlock_irq+0x18/0x40) from [<8035dc74>] (__schedule+0x198/0x6d8)

<4>[  654.159861] [<8035dc74>] (__schedule+0x198/0x6d8) from [<80036120>] (ret_slow_syscall+0x0/0x4)

.

Best

[igorpadykov]

Hi jianxing

probably you used wrong csr driver, recommended

to apply to csr and request updated driver for your specific wifi module.

Best regards

igor

-----------------------------------------------------------------------------------------------------------------------

Note: If this post answers your question, please click the Correct Answer button. Thank you!

-----------------------------------------------------------------------------------------------------------------------

[jianxingwang · Accepted solution]

Hi

Thank you for your response.

The issue is caused by refree the SKB buffer by wifi driver, and has been fixed.

Best

Jianxing Wang

[jianxingwang]

Thank you for your response.

Could please help me to analysis the possibility reason that can caused this panic?

Best

Jianxing Wang