iMX8MM CAAM errors when using 'tk(cbc(aes))' for filesystem encryption

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

iMX8MM CAAM errors when using 'tk(cbc(aes))' for filesystem encryption

266 Views
djs2
Contributor I

I'm getting the following error when writing to a filesystem using the CAAM for filesystem encryption with `tk(cbc(aes))`.

caam_jr 30902000.jr: 4000141c: DECO: desc idx 20: DECO Watchdog timer timeout error

This only happens occasionally but seems to be more prevalent when running with all cores enabled.

0 Kudos
Reply
2 Replies

214 Views
Harvey021
NXP TechSupport
NXP TechSupport

Can you please share the version of BSP you're working and the Steps and logs when problems occur?

 

Regards

Harvey

0 Kudos
Reply

68 Views
djs2
Contributor I

Sorry for the delay in replying.

We are using `linux-imx_5.15.71_2.2.2-phy5` from Phytec with patches from https://github.com/Freescale/linux-fslc/tree/5.15-2.2.x-imx up until 5.15.183.  Unfortunately the problem only occurs occasionally (less than 1 instance every 500 hours or so of CI testing across multiple units) and I haven't been able to create a simple reproducer.

An initial attempt to enable `CONFIG_CRYPTO_DEV_FSL_CAAM_DEBUG` prevents our device from booting as we are using the CAAM to encrypt the root filesystem along with various data partitions and this generates too much logging.

I'm looking at adding log information to a circular buffer and emitting this when the error occurs.  As this will only result in the last 1000 or so records being emitted, I'd like to know whether there are any setup messages that we should always log to support analysis.

Thanks

Daniel

0 Kudos
Reply
%3CLINGO-SUB%20id%3D%22lingo-sub-2184884%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3EiMX8MM%20CAAM%20errors%20when%20using%20'tk(cbc(aes))'%20for%20filesystem%20encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2184884%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%3CP%3EI'm%20getting%20the%20following%20error%20when%20writing%20to%20a%20filesystem%20using%20the%20CAAM%20for%20filesystem%20encryption%20with%20%60%3CSPAN%3Etk(cbc(aes))%60.%3C%2FSPAN%3E%3C%2FP%3E%3CBLOCKQUOTE%3E%3CP%3E%3CSPAN%3Ecaam_jr%2030902000.jr%3A%204000141c%3A%20DECO%3A%20desc%20idx%2020%3A%20DECO%20Watchdog%20timer%20timeout%20error%3C%2FSPAN%3E%3C%2FP%3E%3C%2FBLOCKQUOTE%3E%3CP%3E%3CSPAN%3EThis%20only%20happens%20occasionally%20but%20seems%20to%20be%20more%20prevalent%20when%20running%20with%20all%20cores%20enabled.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2202598%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%20translate%3D%22no%22%3ERe%3A%20iMX8MM%20CAAM%20errors%20when%20using%20'tk(cbc(aes))'%20for%20filesystem%20encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2202598%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%3CP%3ESorry%20for%20the%20delay%20in%20replying.%3C%2FP%3E%3CP%3EWe%20are%20using%20%60linux-imx_5.15.71_2.2.2-phy5%60%20from%20Phytec%20with%20patches%20from%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FFreescale%2Flinux-fslc%2Ftree%2F5.15-2.2.x-imx%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgithub.com%2FFreescale%2Flinux-fslc%2Ftree%2F5.15-2.2.x-imx%3C%2FA%3E%26nbsp%3Bup%20until%205.15.183.%26nbsp%3B%20Unfortunately%20the%20problem%20only%20occurs%20occasionally%20(less%20than%201%20instance%20every%20500%20hours%20or%20so%20of%20CI%20testing%20across%20multiple%20units)%20and%20I%20haven't%20been%20able%20to%20create%20a%20simple%20reproducer.%3C%2FP%3E%3CP%3EAn%20initial%20attempt%20to%20enable%20%60%3CSPAN%3ECONFIG_CRYPTO_DEV_FSL_CAAM_DEBUG%60%20prevents%20our%20device%20from%20booting%20as%20we%20are%20using%20the%20CAAM%20to%20encrypt%20the%20root%20filesystem%20along%20with%20various%20data%20partitions%20and%20this%20generates%20too%20much%20logging.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EI'm%20looking%20at%20adding%20log%20information%20to%20a%20circular%20buffer%20and%20emitting%20this%20when%20the%20error%20occurs.%26nbsp%3B%20As%20this%20will%20only%20result%20in%20the%20last%201000%20or%20so%20records%20being%20emitted%2C%20I'd%20like%20to%20know%20whether%20there%20are%20any%20setup%20messages%20that%20we%20should%20always%20log%20to%20support%20analysis.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EThanks%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EDaniel%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2187937%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%20translate%3D%22no%22%3ERe%3A%20iMX8MM%20CAAM%20errors%20when%20using%20'tk(cbc(aes))'%20for%20filesystem%20encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2187937%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%3CP%3ECan%20you%20please%20share%20the%20version%20of%20BSP%20you're%20working%20and%20the%26nbsp%3B%3CSPAN%3ESteps%20and%20logs%20when%20problems%20occur%3F%3C%2FSPAN%3E%3C%2FP%3E%0A%3CBR%20%2F%3E%0A%3CP%3E%3CSPAN%3ERegards%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EHarvey%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E