STM32MP257 – OP-TEE Panic with SERC ILAC Exception (ID 94) during Boot

[shashidharv]

Hello ST team,

I am facing a boot-time crash in OP‑TEE on an STM32MP257DAI3.

The system boots through BL2 and BL31 successfully, but OP-TEE triggers a data abort followed by a SERC exception, leading to a panic at <stm32_serc_handle_ilac>.

I would appreciate guidance on correct RIF/RISAF configuration for OP-TEE and how to trace SERC exception ID's to actual peripheral .

Here is my OPTEE  error log

WARNING: This OP-TEE configuration might be insecure!
WARNING: Embeds insecure stm32mp_provisioning driver
.....
I/TC: Platform stm32mp2: flavor PLATFORM_FLAVOR - DT stm32mp257f-ev1.dts
I/TC: OP-TEE ST profile: secure_and_system_services
D/TC:0 0 call_initcalls:40 level 3 check_ta_store()
D/TC:0 0 check_ta_store:418 TA store: "early TA"
D/TC:0 0 check_ta_store:418 TA store: "Secure Storage TA"
D/TC:0 0 check_ta_store:418 TA store: "REE"
D/TC:0 0 call_initcalls:40 level 3 early_ta_init()
D/TC:0 0 early_ta_init:56 Early TA 80a4c275-0a47-4905-8285-1486a9771a08 size 46235 (compressed, uncompressed 96928)
D/TC:0 0 early_ta_init:56 Early TA 1a8342cc-81a5-4512-99fe-9e2b3e37d626 size 43444 (compressed, uncompressed 92816)
D/TC:0 0 call_initcalls:40 level 3 verify_pseudo_tas_conformance()
D/TC:0 0 call_initcalls:40 level 3 mobj_init()
D/TC:0 0 call_initcalls:40 level 3 default_mobj_init()
D/TC:0 0 call_initcalls:40 level 3 tee_cryp_init()
D/TC:0 0 call_initcalls:40 level 4 init_console_from_dt()
I/TC: DTB enables console (non-secure)
D/TC:0 0 call_initcalls:40 level 4 tee_fs_init_key_manager()
E/TC:0 0 
E/TC:0 0 Core data-abort at address 0x7a850000
E/TC:0 0  esr 0x96000210  ttbr0 0x82149000   ttbr1 0x00000000   cidr 0x0
E/TC:0 0  cpu #0          cpsr 0x600003c4
E/TC:0 0  x0  000000008214afe0 x1  0000000000000000
E/TC:0 0  x2  0000000000000020 x3  0000000000000020
E/TC:0 0  x4  0000000000000000 x5  0000000000000010
E/TC:0 0  x6  0000000000000000 x7  0000000000000000
E/TC:0 0  x8  0000000010000004 x9  00000000820f3340
E/TC:0 0  x10 0000000000000000 x11 000000008214ada0
E/TC:0 0  x12 0000000000000002 x13 0000000000007130
E/TC:0 0  x14 000000008214adb4 x15 0000000082097ed0
E/TC:0 0  x16 0000000082021448 x17 0000000000000000
E/TC:0 0  x18 0000000000000000 x19 000000008214af90
E/TC:0 0  x20 0000000000000000 x21 0000000000000000
E/TC:0 0  x22 0000000000000010 x23 0000000000000001
E/TC:0 0  x24 0000000000000000 x25 000000007a850000
E/TC:0 0  x26 0000000000000000 x27 0000000000000000
E/TC:0 0  x28 0000000000000000 x29 000000008214adc0
E/TC:0 0  x30 0000000082026c20 elr 0000000082026c20
E/TC:0 0  sp_el0 000000008214adc0
D/TC:0 0 get_fault_type:534 [abort] Unhandled fault!
E/TC:0 0 stm32_serc_handle_ilac:134 SERC exceptions [95:64]: 0x40000000
E/TC:0 0 stm32_serc_handle_ilac:140 SERC exception ID: 94
E/TC:0 0 Panic at core/drivers/firewall/stm32_serc.c:156 <stm32_serc_handle_ilac>
E/TC:0 0 TEE load address @ 0x82000000
E/TC:0 0 Call stack:
E/TC:0 0  0x82008940
E/TC:0 0  0x82039dbc
E/TC:0 0  0x8202cc8c
E/TC:0 0  0x820050b0

Thank You,

shashidhar.