esp32-c5 basic-tee example not working

[nbenhur]

ESP-ROM:esp32c5-eco2-20250121
Build:Jan 21 2025
rst:0x1a (CPU_LOCKUP),boot:0x18 (SPI_FAST_FLASH_BOOT)
Core0 Saved PC:0x420100c8
SPI mode:DIO, clock div:1
load:0x408557c0,len:0x1928
load:0x4084bba0,len:0x11ac
load:0x4084e5a0,len:0x351c
entry 0x4084bbaa
I (23) boot: ESP-IDF v6.0.2 2nd stage bootloader
I (23) boot: compile time Aug 8 2026 00:00:34
I (24) boot: chip revision: v1.0
I (24) boot: efuse block revision: v0.2
I (27) boot.esp32c5: SPI Speed : 80MHz
I (30) boot.esp32c5: SPI Mode : DIO
I (34) boot.esp32c5: SPI Flash Size : 8MB
I (38) boot: Enabling RNG early entropy source...
I (42) boot: Partition Table:
I (45) boot: ## Label Usage Type ST Offset Length
I (51) boot: 0 tee TEE app 00 30 00010000 00040000
I (58) boot: 1 secure_storage WiFi data 01 02 00050000 00010000
I (64) boot: 2 factory factory app 00 00 00060000 00180000
I (71) boot: 3 nvs WiFi data 01 02 001e0000 00006000
I (77) boot: 4 phy_init RF data 01 01 001e6000 00001000
I (84) boot: End of partition table
I (87) esp_image: segment 0: paddr=00010020 vaddr=42000020 size=045f4h ( 17908) map
I (98) esp_image: segment 1: paddr=0001461c vaddr=40800000 size=07040h ( 28736) load
I (107) esp_image: segment 2: paddr=0001b664 vaddr=408079b0 size=00e04h ( 3588) load
I (110) esp_image: segment 3: paddr=0001c470 vaddr=00000000 size=03ba8h ( 15272)
I (119) esp_image: segment 4: paddr=00020020 vaddr=42010020 size=15c3ch ( 89148) map
I (140) boot: Loaded TEE app from partition at offset 0x10000
I (140) esp_image: segment 0: paddr=00060020 vaddr=42040020 size=06704h ( 26372) map
I (146) esp_image: segment 1: paddr=0006672c vaddr=40811000 size=098ech ( 39148) load
I (156) esp_image: segment 2: paddr=00070020 vaddr=42030020 size=0ecd4h ( 60628) map
I (166) esp_image: segment 3: paddr=0007ecfc vaddr=4081a8ec size=00064h ( 100) load
I (167) esp_image: segment 4: paddr=0007ed68 vaddr=4081a980 size=018c8h ( 6344) load
I (175) boot: Loaded app from partition at offset 0x60000
I (177) boot: Disabling RNG early entropy source...
I (192) boot: Current privilege level - 3
I (193) boot: Starting TEE: Entry point - 0x408010ac
I (193) esp_tee_secure_sys_cfg: Current privilege level - 0x3
I (195) esp_tee_init: Initializing. RAM available for dynamic allocation:
I (202) esp_tee_init: At 408087C0 len 00007840 (30 KiB): RAM
W (209) secure_storage: TEE Secure Storage enabled in insecure DEVELOPMENT mode
I (214) esp_tee_init: TEE information:
I (217) esp_tee_init: Project name: esp_tee
I (222) esp_tee_init: App version: 1.0.0
I (226) esp_tee_init: Compile time: Aug 8 2026 00:00:55
I (231) esp_tee_init: ELF file SHA256: f1d545749...
--- Warning: Checksum mismatch between flashed and built applications. Checksum of built application is 1127c4e26068978aeaf5ed027302091aca19c433a6b18771043573e0a1d551bc
I (236) esp_tee_init: ESP-IDF: v6.0.2
I (242) MSPI Timing: Enter flash timing tuning
I (245) cpu_start: Unicore app
I (258) cpu_start: GPIO 7 and 6 are used as console UART I/O pinGuru Meditation Error: Core 0 panic'ed (Illegal instruction). Exception was unhandled.
Fault addr: 0x4001bfac | Origin: U-mode
--- 0x4001bfac: lb_enc_start_ind_handler in ROM

Core 0 register dump:
MEPC : 0x4001bfac RA : 0x40025d18 SP : 0x4085df00 GP : 0x4081b184
--- 0x4001bfac: lb_enc_start_ind_handler in ROM
--- 0x40025d18: lmp_enc_mode_req_handler in ROM
TP : 0x4081d110 T0 : 0x40025d2e T1 : 0xffffffe0 T2 : 0x00000009
--- 0x40025d2e: lmp_enc_mode_req_handler in ROM
S0/FP : 0x00000073 S1 : 0x4085f4f8 A0 : 0x00000064 A1 : 0x00000073
A2 : 0x00000000 A3 : 0x4085f4f8 A4 : 0x00000001 A5 : 0x4001bfac
--- 0x4001bfac: lb_enc_start_ind_handler in ROM
A6 : 0xa0000000 A7 : 0x0000000a S2 : 0x00000031 S3 : 0x6000f000
S4 : 0x40860000 S5 : 0x00000006 S6 : 0x00000000 S7 : 0x4001d624
--- 0x4001d624: r_lc_locepr_rsw in ROM
S8 : 0x4085df70 S9 : 0x4085df71 S10 : 0x42040988 S11 : 0x4085df71
T3 : 0x00000000 T4 : 0x00050000 T5 : 0x01f90000 T6 : 0x01fc0000
MSTATUS : 0x00000000 MTVEC : 0x40800003 MCAUSE : 0x00000002 MTVAL : 0xb0002773
MHARTID : 0x00000000

Stack memory
0x4085df00: 0x00000000 0x00000006 0x4085e014 0x4085df71 0xffffffff 0x00000040 0x00000073 0x400261c8
--- 0x400261c8: lmp_sniff_req_handler in ROM
0x4085df20: 0x40812e08 0x40812cf4 0x02030202 0x00000000 0xffffffff 0x00000040 0x00000073 0x4001d680
--- 0x40812e08: _u2m_switch at /home/hlsys/.espressif/v6.0.2/esp-idf/components/esp_tee/src/esp_tee_u2m_switch.S:11
--- 0x40812cf4: esp_tee_service_call at /home/hlsys/.espressif/v6.0.2/esp-idf/components/esp_tee/src/esp_tee.c:55
--- 0x4001d680: r_lc_locepr_lkref in ROM
0x4085df40: 0xffffffff 0x00000040 0x00000073 0x4001d644 0xffffffff 0x00000040 0xfffffffe 0x4001d9e4
--- 0x4001d644: r_lc_locepr_rsw in ROM
--- 0x4001d9e4: r_lc_end_of_sniff_nego in ROM
0x4085df60: 0x00000003 0x4085e06c 0x00000000 0x4085dfe4 0x00380036 0x00000001 0x00000000 0x00000002

please help

[eriksl]

This looks suspicious:

Code: Select all

I (231) esp_tee_init: ELF file SHA256: f1d545749...
--- Warning: Checksum mismatch between flashed and built applications. Checksum of built application is 1127c4e26068978aeaf5ed027302091aca19c433a6b18771043573e0a1d551bc

I am not sure if this is always a showstopper, but the times I had it, it broke.