Openwrt open wps kernel panic

I use istoreos ,when i want to open s7 to be ap,the kernel’s log always print “wl_cfg80211 hostapd sec : No WPSIE in beacon”, so i want to toggle wps ,when i open wps,the system can not enter,the ttl com print:

[ 2488.136623] Unable to handle kernel access to user memory outside uaccess routines at virtual address 0000000000000001

[ 2488.137580] Mem abort info:

[ 2488.137832] ESR = 0x96000005

[ 2488.138109] EC = 0x25: DABT (current EL), IL = 32 bits

[ 2488.138580] SET = 0, FnV = 0

[ 2488.138853] EA = 0, S1PTW = 0

[ 2488.139158] Data abort info:

[ 2488.139557] ISV = 0, ISS = 0x00000005

[ 2488.139897] CM = 0, WnR = 0

[ 2488.140265] user pgtable: 4k pages, 39-bit VAs, pgdp=00000001074f2000

[ 2488.140835] [0000000000000001] pgd=0000000000000000, p4d=0000000000000000, pud=0000000000000000

[ 2488.141607] Internal error: Oops: 0000000096000005 [#1] SMP

[ 2488.142099] Modules linked in: xt_FULLCONENAT ath9k ath9k_htc ath9k_common rtw_8822cu rtw_8822ce rtw_8822c rtw_8822bu rtw_8822be rtw_8822b rtw_8821cu rtw_8821ce rtw_8821c rtw_8723du rtw_8723de rtw_8723d rtl8821ae rtl8192se rtl8192de rtl8192cu rtl8192c_common rtl_usb rtl_pci mt76x0u mt76x0_common iwlmvm iwldvm cdc_mbim btcoexist brcmfmac b43 ath9k_hw ath6kl_usb ath6kl_core ath10k_pci ath10k_core ath wireguard sr9700 snd_usb_audio smsc95xx sierra_net rtw_usb rtw_pci rtw_core rtlwifi rtl8xxxu rtl8812au rsi_usb rsi_91x rndis_host qmi_wwan qcserial pppoe plusb option mwifiex_pcie mwifiex mt7921u mt7921e mt7921_common mt7915e mt76x2u mt76x2_common mt76x02_usb mt76x02_lib mt7663u mt7663_usb_sdio_common mt7615e mt7615_common mt76_usb mt76_connac_lib mt76 mmc_spi mcs7830 mac80211 libchacha20poly1305 l2tp_ppp kalmia iwlwifi ipw ipt_REJECT huawei_cdc_ncm dm9601 dhdpcie cfg80211 cdc_subset cdc_ncm cdc_ether cdc_eem ax88179_178a asix aqc111 zstd xt_time xt_tcpudp xt_tcpmss xt_string xt_statistic

[ 2488.142308] xt_state xt_socket xt_recent xt_quota2 xt_quota xt_policy xt_pkttype xt_physdev xt_owner xt_nat xt_multiport xt_mark xt_mac xt_lscan xt_limit xt_length2 xt_length xt_iprange xt_ipp2p xt_iface xt_hl xt_helper xt_geoip xt_fuzzy xt_esp xt_ecn xt_dscp xt_conntrack xt_connmark xt_connlimit xt_connlabel xt_connbytes xt_condition xt_comment xt_cgroup xt_bpf xt_addrtype xt_TPROXY xt_TCPMSS xt_REDIRECT xt_NETMAP xt_MASQUERADE xt_LUA xt_LOGMARK xt_LOG xt_IPMARK xt_HL xt_FLOWOFFLOAD xt_DSCP xt_CT xt_CLASSIFY xt_ACCOUNT xr_usb_serial_common visor uvcvideo usbnet usblp usbhid usbatm usb_wwan usb_serial_simple ums_usbat ums_sddr55 ums_sddr09 ums_karma ums_jumpshot ums_isd200 ums_freecom ums_datafab ums_cypress ums_alauda ts_fsm ts_bm ti_usb_3410_5052 snd_usbmidi_lib smsc sierra sch_mqprio sch_cake rtl8150 r8152 pptp pppox ppp_synctty ppp_mppe ppp_async poly1305_neon pl2303 pegasus oti6858 of_mmc_spi ntfs3 nlmon nf_tproxy_ipv6 nf_tproxy_ipv4 nf_socket_ipv6 nf_socket_ipv4 nf_reject_ipv4

[ 2488.150035] nf_nat_tftp nf_nat_snmp_basic nf_nat_sip nf_nat_rtsp nf_nat_pptp nf_nat_irc nf_nat_h323 nf_nat_ftp nf_nat_amanda nf_log_ipv6 nf_log_ipv4 nf_log_common nf_flow_table nf_conntrack_tftp nf_conntrack_snmp nf_conntrack_sip nf_conntrack_rtsp nf_conntrack_pptp nf_conntrack_netlink nf_conntrack_irc nf_conntrack_h323 nf_conntrack_ftp nf_conntrack_broadcast ts_kmp nf_conntrack_amanda nf_conncount mos7840 mos7720 mdio_gpio mdio_bitbang mct_u232 macvlan lzo_rle lzo libcurve25519_generic lib80211_crypt_wep lib80211_crypt_tkip lib80211_crypt_ccmp lib80211 keyspan kaweth iptable_raw iptable_nat iptable_mangle iptable_filter ipt_ah ipt_ECN ipheth ip_tables io_edgeport hso hid_generic hid_cp2112 gpio_backlight garmin_gps ftdi_sio ezusb dmx_usb cypress_m8 crc_ccitt cp210x cordic compat_xtables compat cm109 cls_flower chaoskey ch341 cdc_wdm cdc_acm brcmutil br_netfilter belkin_sa ax88796b at24 ark3116 act_vlan pktgen rknpu mali bifrost_kbase snd_soc_rockchip_hdmi dw_hdmi_qp_i2s_audio

[ 2488.157744] dw_hdmi_i2s_audio snd_soc_rockchip_multicodecs snd_soc_rockchip_i2s_tdm rockchipdrm dw_hdmi_qp_cec dw_hdmi_qp dw_hdmi_hdcp dw_hdmi_cec dw_hdmi cec sch_teql sch_sfq sch_multiq sch_gred sch_fq sch_dsmark sch_codel em_text em_nbyte em_meta em_cmp act_simple act_pedit act_csum em_ipset cls_bpf act_bpf act_ctinfo act_connmark sch_tbf sch_ingress sch_htb sch_hfsc em_u32 cls_u32 cls_route cls_matchall cls_fw cls_flow cls_basic act_skbedit act_mirred act_gact configs phy_rockchip_samsung_hdptx_hdmi dw_hdcp2 sg hid evdev usb_f_uvc videobuf2_v4l2 videodev videobuf2_vmalloc videobuf2_memops videobuf2_common ledtrig_usbport trelay siit ledtrig_pattern ledtrig_activity xt_set ip_set_list_set ip_set_hash_netportnet ip_set_hash_netport ip_set_hash_netnet ip_set_hash_netiface ip_set_hash_net ip_set_hash_mac ip_set_hash_ipportnet ip_set_hash_ipportip ip_set_hash_ipport ip_set_hash_ipmark ip_set_hash_ipmac ip_set_hash_ip ip_set_bitmap_port ip_set_bitmap_ipmac ip_set_bitmap_ip ip_set nfnetlink

[ 2488.165408] net2280 st sr_mod ip6table_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip6t_NPT ip6t_rt ip6t_mh ip6t_ipv6header ip6t_hbh ip6t_frag ip6t_eui64 ip6t_ah ip6table_mangle ip6table_filter ip6_tables ip6t_REJECT x_tables nf_reject_ipv6 pppoatm nfsd bonding ip6_gre ip_gre gre r8168 r8125 igc e1000 e100 ifb dummy nat46 l2tp_ip6 l2tp_ip l2tp_eth ip6_vti ip_vti sit sctp l2tp_netlink l2tp_core ipcomp6 xfrm6_tunnel esp6 ah6 xfrm4_tunnel ipcomp esp4 ah4 ipip ip6_tunnel netlink_diag tunnel6 tunnel4 ip_tunnel udp_diag tcp_diag raw_diag inet_diag rpcsec_gss_krb5 dm_raid veth tun snd_pcm_oss snd_mixer_oss snd_hwdep snd_compress nbd mISDN_dsp l1oip mISDN_core xfrm_ipcomp af_key udf minix hfsplus hfs cramfs cifs binfmt_misc br2684 atm aoe multipath bcma raid456 async_raid6_recov async_pq async_xor async_memcpy async_tx raid10 raid1 raid0 linear md_mod nls_iso8859_1 zram zsmalloc vxlan udp_tunnel ip6_udp_tunnel macsec seqiv echainiv deflate cts authenc crypto_acompress ohci_pci uhci_hcd

[ 2488.173206] rtl8367b swconfig rtl8366_smi sata_via sata_sil24 sata_sil ata_piix pata_pdc202xx_old sata_nv pata_artop fsl_mph_dr_of ehci_platform ehci_fsl igb gpio_button_hotplug xfs reiserfs jfs f2fs btrfs xor zstd_compress zlib_deflate xor_neon raid6_pq lzo_compress dm_mirror dm_region_hash dm_log dm_crypt button_hotplug ssb ptp pps_core encrypted_keys trusted tpm

[ 2488.183675] CPU: 1 PID: 6543 Comm: hostapd Not tainted 5.10.201 #0

[ 2488.184221] Hardware name: ArmSoM RK3588 sige7 Board V1.1 (DT)

[ 2488.184736] pstate: 00400005 (nzcv daif +PAN -UAO -TCO BTYPE=–)

[ 2488.185301] pc : wl_cfg80211_change_beacon+0x4f4/0x690 [dhdpcie]

[ 2488.185846] lr : wl_cfg80211_change_beacon+0x330/0x690 [dhdpcie]

[ 2488.186370] sp : ffffffc0138037d0

[ 2488.186667] x29: ffffffc0138037d0 x28: ffffff810e77b4bc

[ 2488.187140] x27: ffffff810e77b48a x26: ffffff810f448880

[ 2488.187614] x25: ffffff810a9080a0 x24: ffffff810a179260

[ 2488.188086] x23: ffffff810a908000 x22: 0000000000000000

[ 2488.188558] x21: ffffffc00a15f000 x20: 0000000000000000

[ 2488.189029] x19: ffffff8107694000 x18: 0000000000000000

[ 2488.189501] x17: 0000000000000000 x16: 0000000000000000

[ 2488.189973] x15: 0000000000000000 x14: 2410200100231067

[ 2488.190445] x13: 726f2e7472776e65 x12: 0000000000000000

[ 2488.190917] x11: fffffffffffffffc x10: 0000000000000004

[ 2488.191388] x9 : 0000000000000004 x8 : 0000000000000008

[ 2488.191859] x7 : ffffffffffffffff x6 : 0000000000000000

[ 2488.192331] x5 : ffffff810a1798b8 x4 : 0000000000000020

[ 2488.192805] x3 : 0000000000000020 x2 : 0000000000000000

[ 2488.193278] x1 : 0000000000000000 x0 : ffffff810a208c80

[ 2488.193754] Call trace:

[ 2488.193996] wl_cfg80211_change_beacon+0x4f4/0x690 [dhdpcie]

[ 2488.194514] __cfg80211_send_event_skb+0xd5c/0x1114 [cfg80211]

[ 2488.195032] genl_family_rcv_msg_doit+0xb8/0x120

[ 2488.195440] genl_rcv_msg+0xd4/0x1d0

[ 2488.195761] netlink_rcv_skb+0x5c/0x130

[ 2488.196101] genl_rcv+0x38/0x50

[ 2488.196388] netlink_unicast+0x1dc/0x2c4

[ 2488.196739] netlink_sendmsg+0x1a4/0x3bc

[ 2488.197096] ____sys_sendmsg+0x270/0x2b4

[ 2488.197448] ___sys_sendmsg+0x7c/0xc0

[ 2488.197778] __sys_sendmsg+0x58/0xb0

[ 2488.198097] __arm64_sys_sendmsg+0x24/0x30

[ 2488.198464] el0_svc_common.constprop.0+0x64/0x114

[ 2488.198890] do_el0_svc+0x28/0x90

[ 2488.199191] el0_svc+0x14/0x20

[ 2488.199467] el0_sync_handler+0xa4/0x130

[ 2488.199822] el0_sync+0x164/0x180

[ 2488.200125] Code: 958ec35f 17ffffa3 f9400721 f9470700 (39400422)

[ 2488.200667] —[ end trace ec99b6b575a01982 ]—

[ 2488.201894] Kernel panic - not syncing: Oops: Fatal exception

[ 2488.202407] SMP: stopping secondary CPUs

[ 2488.247262] CPU1 online:1

[ 2488.247497] EL1(NS) PC: <0x00ffffc010579004> 0xffffc010579004

[ 2488.248011] EL1(NS) PC: <0x00ffffc010579000> 0xffffc010579000

[ 2488.248527] EL1(NS) PC: <0x00ffffc010579004> 0xffffc010579004

[ 2488.249141]

[ 2488.249279] CPU2 online:0

[ 2488.249515] EL1(NS) PC: <0x00ffffc010015108> 0xffffc010015108

[ 2488.250131]

[ 2488.250266] CPU3 online:0

[ 2488.250500] EL1(NS) PC: <0x00ffffc010015108> 0xffffc010015108

[ 2488.251117]

[ 2488.251253] CPU4 online:0

[ 2488.251490] EL1(NS) PC: <0x0fffffc010015108> 0xfffffc010015108

[ 2488.252126]

[ 2488.252262] CPU5 online:0

[ 2488.252499] EL1(NS) PC: <0x0fffffc010015108> 0xfffffc010015108

[ 2488.253135]

[ 2488.253270] CPU6 online:0

[ 2488.253505] EL1(NS) PC: <0x0fffffc010015108> 0xfffffc010015108

[ 2488.254144]

[ 2488.254279] CPU7 online:0

[ 2488.254515] EL1(NS) PC: <0x0fffffc010015108> 0xfffffc010015108

[ 2489.615777] rockchip-thermal fec00000.tsadc: channal 0: temperature(38 C)

[ 2489.616380] rockchip-thermal fec00000.tsadc: channal 1: temperature(37 C)

[ 2489.616982] rockchip-thermal fec00000.tsadc: channal 2: temperature(37 C)

[ 2489.617583] rockchip-thermal fec00000.tsadc: channal 3: temperature(38 C)

[ 2489.618185] rockchip-thermal fec00000.tsadc: channal 4: temperature(37 C)

[ 2489.618787] rockchip-thermal fec00000.tsadc: channal 5: temperature(37 C)

[ 2489.619389] rockchip-thermal fec00000.tsadc: channal 6: temperature(37 C)

[ 2489.619990] THERMAL REGS:

[ 2489.620227] 00000000: 00000100 00000001 0000000c 0000007f 00000000 00000001 00000000 0000007f

[ 2489.620976] 00000020: 00000000 0000007e 00000000 0000012c 0000012b 0000012b 0000012b 0000012a

[ 2489.621724] 00000040: 0000012b 0000012b 00000000 00000000 00000000 00000000 00000000 00000000

[ 2489.622470] 00000060: 00000000 00000000 00000000 00000148 00000000 00000000 00000000 00000000

[ 2489.623213] 00000080: 00000000 00000000

[ 2489.623554] Kernel Offset: disabled

[ 2489.623866] CPU features: 0x08000006,48002008

[ 2489.624250] Memory Limit: none

[ 2489.624532] cpu cpu6: cur_freq: 408000000 Hz, volt_vdd: 675000 uV, volt_mem: 675000 uV

[ 2489.625236] cpu cpu4: cur_freq: 600000000 Hz, volt_vdd: 675000 uV, volt_mem: 675000 uV

[ 2489.625938] cpu cpu0: cur_freq: 1800000000 Hz, volt_vdd: 912500 uV, volt_mem: 912500 uV

[ 2489.626646] rockchip-dmc dmc: cur_freq: 528000000 Hz, volt_vdd: 675000 uV, volt_mem: 700000 uV

We will update the iStoreos firmware next Monday and replace the WiFi module with AP6275P

ok,really thanks,hope armsom to be better

Dear armsom-HD,i update the new iStoreos firmware,but the problem still exit

Can you explain how you updated the firmware?
Because I have verified the new firmware

I used maskrom mod to flush img.You can go to Network->Wireless->Endit And Open The Ap,then you will see a loop log in Status-> System Log print “[dhd-pcie] CFG80211-ERROR) wl_cfg80211_hostapd_sec : No WPSIE in beacon” .If you open Wireless Security->Enable WPS pushbutton, requires WPA(2)-PSK/WPA3-SAE the system will shutdown and can not enter again

Hello, I did see what you said about printing, but the system did not restart after following the open Wireless Security>Enable WPS pushbutton and requiring WPA (2) - PSK/WPA3-SAE

i shoted a video to recurrent this problem bipam7-panic

I’m sorry, I can’t see the video you posted. I haven’t reproduced this issue on my end. If you have more detailed operation steps, we should be able to locate the problem faster.