qcom-next: fastrpc broken on db820c #309
Description
Booting the kernel on db820c fails with the traces. https://github.com/qualcomm-linux/meta-qcom/actions/runs/22429430542/job/64944972417
qcom,fastrpc remoteproc1:smd-edge.fastrpcsmd-apps-dsp.-1.-1: Error: dsp information is incorrect err: -1
qcom,fastrpc remoteproc1:smd-edge.fastrpcsmd-apps-dsp.-1.-1: Error: dsp information is incorrect err: -1
Starting [0;1;39mBluetooth service[0m...
qcom,fastrpc remoteproc1:smd-edge.fastrpcsmd-apps-dsp.-1.-1: Error: dsp information is incorrect err: -1
file system registered
Starting [0;1;39mD-Bus System Message Bus[0m...
Starting [0;1;39mEthernet Bridge Filtering Tables[0m...
Starting [0;1;39mIPv6 Packet Filtering Framework[0m...
Starting [0;1;39mIPv4 Packet Filtering Framework[0m...
Starting [0;1;39mRollback uncommitted netc…twork config change transactions[0m...
qcom,fastrpc remoteproc1:smd-edge.fastrpcsmd-apps-dsp.-1.-1: Error: dsp information is incorrect err: -1
------------[ cut here ]------------
Trying to vunmap() nonexistent vm area (000000002b482811)
WARNING: CPU: 2 PID: 337 at /usr/src/kernel/mm/vmalloc.c:3470 vunmap+0x5c/0x64
Setting prompt string to ['-+\\[ end trace \\w* \\]-+[^\\n]*\\r', 'dragonboard-820c:', 'root@(.*):[/~]#', 'login:', 'Login incorrect']
Modules linked in: q6asm_dai q6routing q6afe_dai q6adm q6asm q6afe snd_q6dsp_common q6core venus_enc venus_dec snd_soc_wcd9335 videobuf2_dma_contig videobuf2_memops snd_soc_wcd_classh regmap_slimbus fastrpc apr qcom_pd_mapper ath10k_pci ath10k_core ath mac80211 cfg80211 atl1c venus_core v4l2_mem2mem videobuf2_v4l2 videodev videobuf2_common hci_uart snd_soc_hdmi_codec btqca snd_soc_apq8096 snd_soc_qcom_common mc bluetooth snd_soc_core snd_compress snd_pcm ecdh_generic snd_timer ecc snd libaes soundcore slim_qcom_ngd_ctrl qcom_q6v5_pas slimbus qcrypto sha256 sha1 authenc coresight_stm stm_core coresight_cpu_debug qcom_q6v5_mss qcom_pil_info qcom_q6v5 qcom_sysmon qcom_common coresight_etm4x coresight_replicator coresight_tmc coresight_tpiu coresight_funnel coresight openvswitch nsh nf_conncount nf_nat fuse
CPU: 2 UID: 0 PID: 337 Comm: adsprpcd Tainted: G W 6.18.8-yocto-standard #1 PREEMPT
Tainted: [W]=WARN
Hardware name: Qualcomm Technologies, Inc. DB820c (DT)
pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : vunmap+0x5c/0x64
lr : vunmap+0x5c/0x64
sp : ffff800085153c30
x29: ffff800085153c30 x28: ffff00008f1f9040 x27: 0000000000000000
x26: 0000000000000000 x25: 0000000000000000 x24: 0000ffffcc803330
x23: 0000000000300fff x22: ffff800085686000 x21: 0000000000300000
x20: ffff000086b35c00 x19: ffff800085686000 x18: 0000000000000010
x17: 0000000000007000 x16: ffff000088248a80 x15: 0000000000000020
x14: 0000000000000000 x13: 0000000000000001 x12: 000000000000003b
x11: 0000000000000058 x10: 0000000000000018 x9 : ffff80008128fdf8
x8 : 0000000000057fa8 x7 : 0000000000000348 x6 : 0000000000000001
x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff00008f1f9040
Call trace:
vunmap+0x5c/0x64 (P)
dma_direct_free+0x110/0x17c
dma_free_attrs+0x7c/0xc0
fastrpc_device_ioctl+0x9e8/0x1b38 [fastrpc]
__arm64_sys_ioctl+0x90/0xe4
invoke_syscall.constprop.0+0x40/0xf0
el0_svc_common.constprop.0+0x38/0xd8
do_el0_svc+0x1c/0x28
el0_svc+0x34/0xe8
el0t_64_sync_handler+0xa0/0xe4
el0t_64_sync+0x198/0x19c
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
768 pages are still in use!
WARNING: CPU: 3 PID: 337 at /usr/src/kernel/mm/page_alloc.c:7185 free_contig_range+0x148/0x17c
Setting prompt string to ['-\\[ cut here \\]', 'Unhandled fault', 'BUG: KCSAN:', 'BUG: KASAN:', 'BUG: KFENCE:', 'Oops(?: -|:)', 'WARNING:', '(kernel BUG at|BUG:)', 'invalid opcode:', 'Kernel panic - not syncing', 'U-Boot SPL 20[0-9][0-9]', 'dragonboard-820c:', 'root@(.*):[/~]#', 'login:', 'Login incorrect']
login-action: kernel 'warning'
[login-action] Waiting for messages, (timeout 00:14:13)
Waiting using forced prompt support (timeout 00:07:07)
Setting prompt string to ['-+\\[ end trace \\w* \\]-+[^\\n]*\\r', 'dragonboard-820c:', 'root@(.*):[/~]#', 'login:', 'Login incorrect']
Modules linked in: q6asm_dai q6routing q6afe_dai q6adm q6asm q6afe snd_q6dsp_common q6core venus_enc venus_dec snd_soc_wcd9335 videobuf2_dma_contig videobuf2_memops snd_soc_wcd_classh regmap_slimbus fastrpc apr qcom_pd_mapper ath10k_pci ath10k_core ath mac80211 cfg80211 atl1c venus_core v4l2_mem2mem videobuf2_v4l2 videodev videobuf2_common hci_uart snd_soc_hdmi_codec btqca snd_soc_apq8096 snd_soc_qcom_common mc bluetooth snd_soc_core snd_compress snd_pcm ecdh_generic snd_timer ecc snd libaes soundcore slim_qcom_ngd_ctrl qcom_q6v5_pas slimbus qcrypto sha256 sha1 authenc coresight_stm stm_core coresight_cpu_debug qcom_q6v5_mss qcom_pil_info qcom_q6v5 qcom_sysmon qcom_common coresight_etm4x coresight_replicator coresight_tmc coresight_tpiu coresight_funnel coresight openvswitch nsh nf_conncount nf_nat fuse
CPU: 3 UID: 0 PID: 337 Comm: adsprpcd Tainted: G W 6.18.8-yocto-standard #1 PREEMPT
Tainted: [W]=WARN
Starting [0;1;39mTelephony service[0m...
Hardware name: Qualcomm Technologies, Inc. DB820c (DT)
pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : free_contig_range+0x148/0x17c
lr : free_contig_range+0x148/0x17c
sp : ffff800085153bb0
x29: ffff800085153bb0 x28: ffff00008f1f9040 x27: 0000000000000000
x26: 0000000000000000 x25: 0000000000000000 x24: 0000ffffcc803330
x23: 0000000000000300 x22: ffff800081086000 x21: ffffc1ffc0000000
x20: 00000000000df5ff x19: 00000000000df5ff x18: 000000033bb9b065
x17: 0000000000000476 x16: 0000000000000400 x15: 0000626f358ba696
x14: 0000000000000101 x13: ffff000083c35410 x12: 0000000000000001
Bluetooth: hci0: QCA setup on UART is completed
x11: 00000000000000c0 x10: 0000000000000990 x9 : ffff800085153a30
x8 : ffff00008f1f9a30 x7 : 0000000000000001 x6 : 0000000000000001
x5 : 0000000000000000 x4 : 0000000000800000 x3 : 0000000000000018
x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff00008f1f9040
Call trace:
free_contig_range+0x148/0x17c (P)
cma_release+0xd4/0x100
dma_free_contiguous+0x2c/0x7c
dma_direct_free+0xf0/0x17c
dma_free_attrs+0x7c/0xc0
fastrpc_device_ioctl+0x9e8/0x1b38 [fastrpc]
__arm64_sys_ioctl+0x90/0xe4
invoke_syscall.constprop.0+0x40/0xf0
el0_svc_common.constprop.0+0x38/0xd8
do_el0_svc+0x1c/0x28
el0_svc+0x34/0xe8
el0t_64_sync_handler+0xa0/0xe4
el0t_64_sync+0x198/0x19c
---[ end trace 0000000000000000 ]---