Bug 86071

Summary: Oops: beaglebone black: drm_fbdev_cma_fini+0xc/0xa4
Product: Drivers Reporter: Matwey V. Kornilov (matwey.kornilov)
Component: Video(Other)Assignee: drivers_video-other
Status: RESOLVED CODE_FIX    
Severity: high CC: airlied, alan, nm, tomi.valkeinen
Priority: P1    
Hardware: ARM   
OS: Linux   
Kernel Version: 3.16.4 Subsystem:
Regression: No Bisected commit-id:
Attachments: Kernel config

Description Matwey V. Kornilov 2014-10-12 08:18:11 UTC
Created attachment 153281 [details]
Kernel config

Hi,

I am running 3.16.4 on Beaglebone Black. On the boot I have the following oops:
The kernel config is attached

[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Initializing cgroup subsys cpuset
[    0.000000] Initializing cgroup subsys cpu
[    0.000000] Initializing cgroup subsys cpuacct
[    0.000000] Linux version 3.16.4-1.g7a8842b-default (geeko@buildhost) (gcc version 4.8.3 20140627 [gcc-4_8-branch revision 212064] (SUSE Linux) ) #1 SMP Mon Oct 6 07:18:42 UTC 2014 (7a8842b)
[    0.000000] CPU: ARMv7 Processor [413fc082] revision 2 (ARMv7), cr=10c5387d
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] Machine model: TI AM335x BeagleBone
[    0.000000] cma: CMA: reserved 16 MiB at 9e800000
[    0.000000] Memory policy: Data cache writeback
[    0.000000]   HighMem zone: 1048574 pages exceeds freesize 0
[    0.000000] CPU: All CPU(s) started in SVC mode.
[    0.000000] AM335X ES2.0 (sgx neon )
[    0.000000] PERCPU: Embedded 9 pages/cpu @dfac1000 s14464 r8192 d14208 u36864
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 129792
[    0.000000] Kernel command line:  plymouth.enable=0 console=ttyO0 showopts
[    0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
[    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] allocated 1046528 bytes of page_cgroup
[    0.000000] please try 'cgroup_disable=memory' option if you don't want memory cgroups
[    0.000000] Memory: 431968K/523264K available (6903K kernel code, 1025K rwdata, 3268K rodata, 942K init, 856K bss, 91296K reserved, 0K highmem)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xffc00000 - 0xffe00000   (2048 kB)
[    0.000000]     vmalloc : 0xe0800000 - 0xff000000   ( 488 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xe0000000   ( 512 MB)
[    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
[    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
[    0.000000]       .text : 0xc0208000 - 0xc0bf7f60   (10176 kB)
[    0.000000]       .init : 0xc0bf8000 - 0xc0ce3880   ( 943 kB)
[    0.000000]       .data : 0xc0ce4000 - 0xc0de4580   (1026 kB)
[    0.000000]        .bss : 0xc0de4580 - 0xc0eba658   ( 857 kB)
[    0.000000] Hierarchical RCU implementation.
[    0.000000]  RCU restricting CPUs from NR_CPUS=5 to nr_cpu_ids=1.
[    0.000000]  Offload RCU callbacks from all CPUs
[    0.000000]  Offload RCU callbacks from CPUs: 0.
[    0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=1
[    0.000000] NR_IRQS:16 nr_irqs:16 16
[    0.000000] IRQ: Found an INTC at 0xfa200000 (revision 5.0) with 128 interrupts
[    0.000000] Total of 128 interrupts on 1 active controller
[    0.000000] OMAP clockevent source: timer2 at 24000000 Hz
[    0.000012] sched_clock: 32 bits at 24MHz, resolution 41ns, wraps every 178956969942ns
[    0.000032] OMAP clocksource: timer1 at 24000000 Hz
[    0.000308] Console: colour dummy device 80x30
[    0.000344] Calibrating delay loop... 997.78 BogoMIPS (lpj=2494464)
[    0.054397] pid_max: default: 32768 minimum: 301
[    0.054519] Security Framework initialized
[    0.054626] AppArmor: AppArmor initialized
[    0.054797] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.054809] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.055775] Initializing cgroup subsys memory
[    0.055878] Initializing cgroup subsys devices
[    0.055914] Initializing cgroup subsys freezer
[    0.055933] Initializing cgroup subsys net_cls
[    0.055964] Initializing cgroup subsys blkio
[    0.055988] Initializing cgroup subsys perf_event
[    0.056045] CPU: Testing write buffer coherency: ok
[    0.056100] ftrace: allocating 27563 entries in 54 pages
[    0.115442] CPU0: thread -1, cpu 0, socket -1, mpidr 0
[    0.115823] Setting up static identity map for 0x80889c20 - 0x80889cb8
[    0.123811] Brought up 1 CPUs
[    0.123831] SMP: Total of 1 processors activated.
[    0.123839] CPU: All CPU(s) started in SVC mode.
[    0.124711] devtmpfs: initialized
[    0.128356] VFP support v0.3: implementor 41 architecture 3 part 30 variant c rev 3
[    0.137738] omap_hwmod: tptc0 using broken dt data from edma
[    0.137845] omap_hwmod: tptc1 using broken dt data from edma
[    0.137939] omap_hwmod: tptc2 using broken dt data from edma
[    0.142345] omap_hwmod: debugss: _wait_target_disable failed
[    0.201881] pinctrl core: initialized pinctrl subsystem
[    0.202478] regulator-dummy: no parameters
[    0.211782] NET: Registered protocol family 16
[    0.213972] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.216170] cpuidle: using governor ladder
[    0.216194] cpuidle: using governor menu
[    0.222313] platform 49000000.edma: alias fck already exists
[    0.222337] platform 49000000.edma: alias fck already exists
[    0.222348] platform 49000000.edma: alias fck already exists
[    0.223099] OMAP GPIO hardware version 0.1
[    0.230488] No ATAGs?
[    0.230519] hw-breakpoint: debug architecture 0x4 unsupported.
[    0.231337] EXYNOS: PMU not supported
[    0.231811] omap_init_mbox: hwmod doesn't have valid attrs
[    0.233449] Serial: AMBA PL011 UART driver
[    0.249653] edma-dma-engine edma-dma-engine.0: TI EDMA DMA engine driver
[    0.250384] vmmcsd_fixed: 3300 mV
[    0.251995] vgaarb: loaded
[    0.253780] SCSI subsystem initialized
[    0.254598] omap_i2c 44e0b000.i2c: could not find pctldev for node /pinmux@44e10800/pinmux_i2c0_pins, deferring probe
[    0.254625] platform 44e0b000.i2c: Driver omap_i2c requests probe deferral
[    0.255464] exynos_iommu_init: Failed to register exynos-iommu driver.
[    0.256540] NetLabel: Initializing
[    0.256553] NetLabel:  domain hash size = 128
[    0.256558] NetLabel:  protocols = UNLABELED CIPSOv4
[    0.256615] NetLabel:  unlabeled traffic allowed by default
[    0.256962] Switched to clocksource timer1
[    0.302655] AppArmor: AppArmor Filesystem Enabled
[    0.315181] NET: Registered protocol family 2
[    0.316035] TCP established hash table entries: 4096 (order: 2, 16384 bytes)
[    0.316086] TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
[    0.316144] TCP: Hash tables configured (established 4096 bind 4096)
[    0.316221] TCP: reno registered
[    0.316234] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    0.316253] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    0.316462] NET: Registered protocol family 1
[    0.317125] Unpacking initramfs...
[    4.517205] Freeing initrd memory: 56096K (c8081000 - cb749000)
[    4.517335] NetWinder Floating Point Emulator V0.97 (extended precision)
[    4.517623] hw perfevents: enabled with ARMv7 Cortex-A8 PMU driver, 5 counters available
[    4.520128] futex hash table entries: 256 (order: 2, 16384 bytes)
[    4.520162] Initialise system trusted keyring
[    4.520295] audit: initializing netlink subsys (disabled)
[    4.520382] audit: type=2000 audit(4.475:1): initialized
[    4.522092] zbud: loaded
[    4.522518] VFS: Disk quotas dquot_6.5.2
[    4.522582] Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
[    4.523179] msgmni has been set to 985
[    4.523368] Key type big_key registered
[    4.524422] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 252)
[    4.524632] io scheduler noop registered
[    4.524647] io scheduler deadline registered
[    4.524788] io scheduler cfq registered (default)
[    4.526070] pinctrl-single 44e10800.pinmux: 142 pins at pa f9e10800 size 568
[    4.530572] Serial: 8250/16550 driver, 32 ports, IRQ sharing disabled
[    4.540120] Serial: IMX driver
[    4.540512] msm_serial: driver initialized
[    4.540767] omap_uart 44e09000.serial: no wakeirq for uart0
[    4.540923] 44e09000.serial: ttyO0 at MMIO 0x44e09000 (irq = 88, base_baud = 3000000) is a OMAP UART0
[    5.277577] console [ttyO0] enabled
[    5.282387] serial: Freescale lpuart driver
[    5.287182] Non-volatile memory driver v1.3
[    5.291650] [drm] Initialized drm 1.1.0 20060810
[    5.299267] libphy: Fixed MDIO Bus: probed
[    5.304441] mousedev: PS/2 mouse device common for all mice
[    5.316155] ledtrig-cpu: registered to indicate activity on CPUs
[    5.322611] hidraw: raw HID events driver (C) Jiri Kosina
[    5.330353] TCP: cubic registered
[    5.333965] NET: Registered protocol family 10
[    5.339820] omap_voltage_late_init: Voltage driver support not added
[    5.346574] sr_dev_init: No voltage domain specified for smartreflex0. Cannot initialize
[    5.355077] sr_dev_init: No voltage domain specified for smartreflex1. Cannot initialize
[    5.364271] ThumbEE CPU extension supported.
[    5.368830] SmartReflex Class3 initialized
[    5.373933] Loading compiled-in X.509 certificates
[    5.379091] registered taskstats version 1
[    5.383612] AppArmor: AppArmor sha1 policy hashing enabled
[    5.390007] slave hdmi: could not get i2c
[    5.394310] platform hdmi: Driver slave requests probe deferral
[    5.400810] platform 4830e000.lcdc: Driver tilcdc requests probe deferral
[    5.419780] omap_i2c 44e0b000.i2c: bus 0 rev0.11 at 400 kHz
[    5.437256] tilcdc 4830e000.lcdc: no encoders/connectors found
[    5.443432] tilcdc 4830e000.lcdc: failed to initialize mode setting
[    5.450030] Unable to handle kernel NULL pointer dereference at virtual address 0000001c
[    5.458531] pgd = c0204000
[    5.461365] [0000001c] *pgd=00000000
[    5.465138] Internal error: Oops: 17 [#1] SMP ARM
[    5.470068] Modules linked in:
[    5.473276] CPU: 0 PID: 6 Comm: kworker/u2:0 Not tainted 3.16.4-1.g7a8842b-default #1
[    5.481509] Workqueue: deferwq deferred_probe_work_func
[    5.486989] task: de099980 ti: de09a000 task.ti: de09a000
[    5.492652] PC is at drm_fbdev_cma_fini+0xc/0xa4
[    5.497498] LR is at tilcdc_unload+0x1c/0x12c
[    5.502065] pc : [<c061663c>]    lr : [<c0636244>]    psr: 60070013
[    5.502065] sp : de09bdd8  ip : 00000000  fp : c0eaedcc
[    5.514100] r10: c0d9b268  r9 : de4a8700  r8 : de190200
[    5.519575] r7 : de4a8700  r6 : de4a8700  r5 : fffffffa  r4 : de6abc00
[    5.526415] r3 : 00000394  r2 : c0d3e374  r1 : 20070093  r0 : 00000000
[    5.533259] Flags: nZCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment kernel
[    5.540920] Control: 10c5387d  Table: 9e58c019  DAC: 00000015
[    5.546942] Process kworker/u2:0 (pid: 6, stack limit = 0xde09a250)
[    5.553511] Stack: (0xde09bdd8 to 0xde09c000)
[    5.558077] bdc0:                                                       00000394 de6abc00
[    5.566652] bde0: fffffffa c0636244 de6abc00 fffffffa de4a8700 c0d9b3e4 de190200 c0636734
[    5.575227] be00: 00000000 c0621c90 00000001 c0eaedac de678080 de6abc00 00000000 00000000
[    5.583802] be20: 00000000 c0d9b27c 00000003 de09a030 00000000 c061f00c de6abc00 c0d9b2c0
[    5.592378] be40: de190200 c062121c 00000000 c03f4818 de190210 de190218 de190210 c0d9b27c
[    5.600954] be60: c0ddfc48 c065b074 c065b054 de190210 c0eaeebc c06591d0 c0ddfc48 c065b180
[    5.609529] be80: c0d9b27c 00000000 de190210 c0659428 c0ddfc48 de036900 00000000 c0657488
[    5.618104] bea0: de0bff70 de678838 de190210 de190244 c0d9c890 c065900c de190210 de190210
[    5.626681] bec0: c0d9c890 c06584fc de190210 c0d9c690 c0d9c6a8 c06589f0 c0658970 c0d9c6c4
[    5.635257] bee0: de033d80 c0dd6d5c de035c00 c0280e78 00000000 de035c60 c0de8a00 00000000
[    5.643832] bf00: de033d80 de033d80 de035c00 de035c14 de09a028 de09a000 de033d98 00000088
[    5.652408] bf20: de035c00 c028181c c0dd6969 de035c00 de035c14 de035c60 de035d94 c0ce70c0
[    5.660983] bf40: 00000000 de02e7c0 00000000 de033d80 c02817c4 00000000 00000000 00000000
[    5.669559] bf60: 00000000 c0287498 55d15704 00000000 956dd865 de033d80 00000000 00000000
[    5.678135] bf80: de09bf80 de09bf80 00000000 00000000 de09bf90 de09bf90 de09bfac de02e7c0
[    5.686710] bfa0: c02873b8 00000000 00000000 c021aec8 00000000 00000000 00000000 00000000
[    5.695285] bfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    5.703861] bfe0: 00000000 00000000 00000000 00000000 00000013 00000000 57564d7b 0d7fd176
[    5.712453] [<c061663c>] (drm_fbdev_cma_fini) from [<c0636244>] (tilcdc_unload+0x1c/0x12c)
[    5.721126] [<c0636244>] (tilcdc_unload) from [<c0636734>] (tilcdc_load+0x3b8/0x528)
[    5.729254] [<c0636734>] (tilcdc_load) from [<c061f00c>] (drm_dev_register+0xb0/0x10c)
[    5.737562] [<c061f00c>] (drm_dev_register) from [<c062121c>] (drm_platform_init+0x58/0xfc)
[    5.746325] [<c062121c>] (drm_platform_init) from [<c065b074>] (platform_drv_probe+0x20/0x50)
[    5.755272] [<c065b074>] (platform_drv_probe) from [<c06591d0>] (driver_probe_device+0x154/0x3ac)
[    5.764580] [<c06591d0>] (driver_probe_device) from [<c0657488>] (bus_for_each_drv+0x60/0x94)
[    5.773523] [<c0657488>] (bus_for_each_drv) from [<c065900c>] (device_attach+0x7c/0x90)
[    5.781919] [<c065900c>] (device_attach) from [<c06584fc>] (bus_probe_device+0x8c/0xb0)
[    5.790315] [<c06584fc>] (bus_probe_device) from [<c06589f0>] (deferred_probe_work_func+0x80/0xcc)
[    5.799717] [<c06589f0>] (deferred_probe_work_func) from [<c0280e78>] (process_one_work+0x14c/0x3fc)
[    5.809299] [<c0280e78>] (process_one_work) from [<c028181c>] (worker_thread+0x58/0x5e4)
[    5.817792] [<c028181c>] (worker_thread) from [<c0287498>] (kthread+0xe0/0xf8)
[    5.825373] [<c0287498>] (kthread) from [<c021aec8>] (ret_from_fork+0x14/0x20)
[    5.832949] Code: c0d9a660 e92d4038 e52de004 e8bd4000 (e590501c)
[    5.839399] ---[ end trace 292c7d4db66d87af ]---
[    5.844337] Unable to handle kernel paging request at virtual address ffffffec
[    5.851910] pgd = c0204000
[    5.854743] [ffffffec] *pgd=9fef6821, *pte=00000000, *ppte=00000000
[    5.861328] Internal error: Oops: 17 [#2] SMP ARM
[    5.866256] Modules linked in:
[    5.869461] CPU: 0 PID: 6 Comm: kworker/u2:0 Tainted: G      D       3.16.4-1.g7a8842b-default #1
[    5.878770] task: de099980 ti: de09a000 task.ti: de09a000
[    5.884433] PC is at kthread_data+0xc/0x14
[    5.888725] LR is at wq_worker_sleeping+0x14/0xc8
[    5.893654] pc : [<c0287ac8>]    lr : [<c0281eb4>]    psr: 00070193
[    5.893654] sp : de09bb00  ip : 00000000  fp : de09bbbc
[    5.905691] r10: de081940  r9 : de099980  r8 : dfac4080
[    5.911165] r7 : c0893c94  r6 : 00000000  r5 : 1ede1000  r4 : 00000000
[    5.918007] r3 : 00000000  r2 : 00000000  r1 : 00000000  r0 : de099980
[    5.924849] Flags: nzcv  IRQs off  FIQs on  Mode SVC_32  ISA ARM  Segment user
[    5.932420] Control: 10c5387d  Table: 9e58c019  DAC: 00000015
[    5.938441] Process kworker/u2:0 (pid: 6, stack limit = 0xde09a250)
[    5.945009] Stack: (0xde09bb00 to 0xde09c000)
[    5.949576] bb00: de099d14 c0884148 de0312c0 00000003 c08fe1a0 0000001a 00000013 0000000e
[    5.958153] bb20: 00000007 c026a7b4 c0ce3080 c0ce3080 de099f50 dfac168c c0ce3080 c0ce3080
[    5.966730] bb40: c0ced604 c0ced594 c0cee834 de09a008 c032eef0 de099980 00000000 de084e00
[    5.975306] bb60: 00000001 c02c7814 00000000 c0268c6c de034040 c0268cc8 de099980 c0de82d4
[    5.983882] bb80: c089503c c032d038 c0ce7040 c0ce03a8 de099980 c026a43c de09bb98 c0ce7040
[    5.992458] bba0: 00000001 de099c90 de099978 de099c90 c0de5188 de081940 de099980 c026a7b4
[    6.001034] bbc0: 0000000b de09bbd8 00000001 de09a000 de09a000 de099cd8 de09bbd8 de09bbd8
[    6.009610] bbe0: 00000017 c0cf3094 de09bd90 de09a000 0000000b 00000017 c0de5188 de099980
[    6.018186] bc00: de09a000 c021f64c de09a250 0000000b c0eaedcc 60070113 c0b54af4 0000001c
[    6.026762] bc20: 00000017 00000000 de09bd90 0000001c de099980 c0d9b268 c0eaedcc c087d0ac
[    6.035338] bc40: 00000017 c08898f8 60070013 ffffffff de09bc8c c0887fc0 c0dec1a8 20070093
[    6.043912] bc60: c0d3e374 00000394 00000037 c0dec1a8 c0dec1a8 c0d3e36c 00000003 00000000
[    6.052489] bc80: 00000001 60070013 00000000 de09bca0 c02bc968 c02bc96c 60070013 ffffffff
[    6.061065] bca0: 00000000 00000000 de09bd10 00000031 c0decab4 00000037 ff0a0004 de09bd90
[    6.069641] bcc0: 0000001c 00000017 0000001c de09bd90 de4a8700 c0d9b268 c0eaedcc c0889b5c
[    6.078217] bce0: 00000017 c0889af0 c0cf40a0 c0209238 00000003 c0b2f280 00000012 c0655818
[    6.086792] bd00: c0b2f280 de09bdcc c0b28f9c c03f1aac 53425553 45545359 6c703d4d 6f667461
[    6.095369] bd20: 44006d72 43495645 702b3d45 6674616c 3a6d726f 30333834 30303065 64636c2e
[    6.103945] bd40: c0e90063 c03f1508 000024ae de7e4e28 de4c8718 de7e4e28 de596f38 c03f1508
[    6.112522] bd60: de7e4e90 c065c690 de09bd68 de09bd68 de7e4e28 de7e4e28 c061663c 60070013
[    6.121098] bd80: ffffffff de09bdc4 de190200 c0887f58 00000000 20070093 c0d3e374 00000394
[    6.129673] bda0: de6abc00 fffffffa de4a8700 de4a8700 de190200 de4a8700 c0d9b268 c0eaedcc
[    6.138250] bdc0: 00000000 de09bdd8 c0636244 c061663c 60070013 ffffffff 00000394 de6abc00
[    6.146825] bde0: fffffffa c0636244 de6abc00 fffffffa de4a8700 c0d9b3e4 de190200 c0636734
[    6.155401] be00: 00000000 c0621c90 00000001 c0eaedac de678080 de6abc00 00000000 00000000
[    6.163977] be20: 00000000 c0d9b27c 00000003 de09a030 00000000 c061f00c de6abc00 c0d9b2c0
[    6.172553] be40: de190200 c062121c 00000000 c03f4818 de190210 de190218 de190210 c0d9b27c
[    6.181129] be60: c0ddfc48 c065b074 c065b054 de190210 c0eaeebc c06591d0 c0ddfc48 c065b180
[    6.189705] be80: c0d9b27c 00000000 de190210 c0659428 c0ddfc48 de036900 00000000 c0657488
[    6.198281] bea0: de0bff70 de678838 de190210 de190244 c0d9c890 c065900c de190210 de190210
[    6.206857] bec0: c0d9c890 c06584fc de190210 c0d9c690 c0d9c6a8 c06589f0 c0658970 c0d9c6c4
[    6.215433] bee0: de033d80 c0dd6d5c de035c00 c0280e78 00000000 de035c60 c0de8a00 00000000
[    6.224009] bf00: de033d80 de033d80 de035c00 de035c14 de09a028 de09a000 de033d98 00000088
[    6.232586] bf20: de035c00 c028181c c0dd6969 de035c00 de035c14 de035c60 de035d94 c0ce70c0
[    6.241161] bf40: 00000000 de02e7c0 00000000 de033d80 c02817c4 00000000 00000000 00000000
[    6.249738] bf60: 00000000 c0287498 55d15704 00000000 956dd865 de033d80 00000000 00000000
[    6.258313] bf80: de09bf80 de09bf80 00000001 00010001 de09bf90 de09bf90 de09bfac de02e7c0
[    6.266888] bfa0: c02873b8 00000000 00000000 c021aec8 00000000 00000000 00000000 00000000
[    6.275463] bfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    6.284040] bfe0: 00000000 00000000 00000000 00000000 00000013 00000000 57564d7b 0d7fd176
[    6.292622] [<c0287ac8>] (kthread_data) from [<c0281eb4>] (wq_worker_sleeping+0x14/0xc8)
[    6.301120] [<c0281eb4>] (wq_worker_sleeping) from [<c0884148>] (__schedule+0x4b4/0x774)
[    6.309613] [<c0884148>] (__schedule) from [<c026a7b4>] (do_exit+0x6e0/0x9c0)
[    6.317101] [<c026a7b4>] (do_exit) from [<c021f64c>] (die+0x30c/0x31c)
[    6.323950] [<c021f64c>] (die) from [<c087d0ac>] (__do_kernel_fault.part.10+0x6c/0x7c)
[    6.332260] [<c087d0ac>] (__do_kernel_fault.part.10) from [<c08898f8>] (do_page_fault.part.11+0x1c4/0x3bc)
[    6.342388] [<c08898f8>] (do_page_fault.part.11) from [<c0889b5c>] (do_page_fault+0x6c/0x74)
[    6.351238] [<c0889b5c>] (do_page_fault) from [<c0209238>] (do_DataAbort+0x40/0xa4)
[    6.359268] [<c0209238>] (do_DataAbort) from [<c0887f58>] (__dabt_svc+0x38/0x60)
[    6.367020] Exception stack(0xde09bd90 to 0xde09bdd8)
[    6.372315] bd80:                                     00000000 20070093 c0d3e374 00000394
[    6.380891] bda0: de6abc00 fffffffa de4a8700 de4a8700 de190200 de4a8700 c0d9b268 c0eaedcc
[    6.389466] bdc0: 00000000 de09bdd8 c0636244 c061663c 60070013 ffffffff
[    6.396405] [<c0887f58>] (__dabt_svc) from [<c061663c>] (drm_fbdev_cma_fini+0xc/0xa4)
[    6.404622] [<c061663c>] (drm_fbdev_cma_fini) from [<c0636244>] (tilcdc_unload+0x1c/0x12c)
[    6.413291] [<c0636244>] (tilcdc_unload) from [<c0636734>] (tilcdc_load+0x3b8/0x528)
[    6.421415] [<c0636734>] (tilcdc_load) from [<c061f00c>] (drm_dev_register+0xb0/0x10c)
[    6.429720] [<c061f00c>] (drm_dev_register) from [<c062121c>] (drm_platform_init+0x58/0xfc)
[    6.438480] [<c062121c>] (drm_platform_init) from [<c065b074>] (platform_drv_probe+0x20/0x50)
[    6.447427] [<c065b074>] (platform_drv_probe) from [<c06591d0>] (driver_probe_device+0x154/0x3ac)
[    6.456734] [<c06591d0>] (driver_probe_device) from [<c0657488>] (bus_for_each_drv+0x60/0x94)
[    6.465677] [<c0657488>] (bus_for_each_drv) from [<c065900c>] (device_attach+0x7c/0x90)
[    6.474072] [<c065900c>] (device_attach) from [<c06584fc>] (bus_probe_device+0x8c/0xb0)
[    6.482469] [<c06584fc>] (bus_probe_device) from [<c06589f0>] (deferred_probe_work_func+0x80/0xcc)
[    6.491867] [<c06589f0>] (deferred_probe_work_func) from [<c0280e78>] (process_one_work+0x14c/0x3fc)
[    6.501446] [<c0280e78>] (process_one_work) from [<c028181c>] (worker_thread+0x58/0x5e4)
[    6.509933] [<c028181c>] (worker_thread) from [<c0287498>] (kthread+0xe0/0xf8)
[    6.517510] [<c0287498>] (kthread) from [<c021aec8>] (ret_from_fork+0x14/0x20)
[    6.525084] Code: e12fff1e e52de004 e8bd4000 e5903368 (e5130014)
[    6.531472] ---[ end trace 292c7d4db66d87b0 ]---
[    6.536310] Fixing recursive fault but reboot is needed!
Comment 1 Matwey V. Kornilov 2014-10-12 09:03:17 UTC
So, the last tested version was 3.16.2, I suppose that the following commits may introduce it

9489fbcdee23e6e4cd6b835c43fb03f64e150d5e drm/tilcdc: fix double kfree
aeb5d9de01102bde4443045397b4b72f52805d13 drm/tilcdc: fix release order on exit
29d674c44bb15f150f8999fc82af06eae776a14c drm/tilcdc: panel: fix leak when unloading the module
c085fc88bf29aa3a5f4ff6712d6f19b2e3eebe74 drm/tilcdc: tfp410: fix dangling sysfs connector node
47b7b0c66ed3dc992b16254d02f2c5a318193392 drm/tilcdc: slave: fix dangling sysfs connector node
d402b324568a68db0c1bcde2c1e7c2cca283d4a0 drm/tilcdc: panel: fix dangling sysfs connector node
Comment 3 Matwey V. Kornilov 2014-10-14 15:40:00 UTC
Come on, you initialize priv->fbdev only near the end of function tilcdc_load,
but you call tilcdc_unload which call drm_fbdev_cma_fini making an assumption that the pointer is not NULL.

The issue is that this stuff is in stable tree. How was this tested?
Comment 4 Matwey V. Kornilov 2014-10-15 16:08:25 UTC
This commit has fixed an issue for me.

https://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git/commit/?id=b478e336b3e75505707a11e78ef8b964ef0a03af