Hi Grygorii, On Tue, Jun 7, 2016 at 11:04 AM, Grygorii Strashko <grygorii.strashko@xxxxxx> wrote: > On 06/07/2016 10:32 AM, Belisko Marek wrote: >> >> On Tue, Jun 7, 2016 at 9:21 AM, Roger Quadros <rogerq@xxxxxx> wrote: >>> >>> On 07/06/16 10:18, Roger Quadros wrote: >>>> >>>> Hi Marek, >>>> >>>> On 07/06/16 09:06, Tony Lindgren wrote: >>>>> >>>>> Hi, >>>>> >>>>> * Belisko Marek <marek.belisko@xxxxxxxxx> [160605 02:50]: >>>>>> >>>>>> Hi Tony, >>>>>> >>>>>> we're experiencing crash on gta04 after updating to 4.7-rc1. Crash is: >>>>>> >>>>>> [ 4.045166] Unable to handle kernel NULL pointer dereference at >>>>>> virtual address 0000006c >>>>>> [ 4.053619] pgd = c0004000 >>>>>> [ 4.056457] [0000006c] *pgd=00000000 >>>>>> [ 4.060211] Internal error: Oops: 5 [#1] PREEMPT SMP ARM >>>>>> [ 4.065795] Modules linked in: >>>>>> [ 4.069000] CPU: 0 PID: 1 Comm: swapper/0 Not tainted >>>>>> 4.7.0-rc1-letux+ #351 >>>>>> [ 4.076263] Hardware name: Generic OMAP36xx (Flattened Device Tree) >>>>>> [ 4.082824] task: dd8b6d80 ti: dd8b8000 task.ti: dd8b8000 >>>>>> [ 4.088470] PC is at of_gpiochip_find_and_xlate+0x4/0x70 >>>>>> [ 4.094024] LR is at gpiochip_find+0x3c/0x70 >>>>>> [ 4.098510] pc : [<c0423570>] lr : [<c041f348>] psr: 20000093 >>>>>> [ 4.098510] sp : dd8b9d50 ip : df9adc20 fp : 00000000 >>>>>> [ 4.110504] r10: c0a50858 r9 : 00000007 r8 : c042356c >>>>>> [ 4.115936] r7 : dd8b9d80 r6 : 60000013 r5 : c0b5efb8 r4 : >>>>>> dda44800 >>>>>> [ 4.122772] r3 : dda44abc r2 : 00000000 r1 : dd8b9d80 r0 : >>>>>> 00000000 >>>>>> [ 4.129608] Flags: nzCv IRQs off FIQs on Mode SVC_32 ISA ARM >>>>>> Segment none >>>>>> [ 4.137145] Control: 10c5387d Table: 80004019 DAC: 00000051 >>>>>> [ 4.143157] Process swapper/0 (pid: 1, stack limit = 0xdd8b8218) >>>>>> [ 4.149444] Stack: (0xdd8b9d50 to 0xdd8ba000) >>>>>> [ 4.153991] 9d40: dda44abc >>>>>> dda44800 c0b5efb8 c041f348 >>>>>> [ 4.162536] 9d60: dd8b9df4 00000000 dd8b9df8 df9c2940 00000000 >>>>>> c04236ac dd8b9d84 dd8b9dfe >>>>>> [ 4.171112] 9d80: dd8b9df4 df9b2cd4 00000002 00000000 00000001 >>>>>> 00000000 00000000 00000000 >>>>>> [ 4.179656] 9da0: 00000000 00000000 00000000 00000000 00000000 >>>>>> 00000000 00000000 00000000 >>>>>> [ 4.188201] 9dc0: 00000000 00000000 00000000 fffffdfb dd8b9df8 >>>>>> 00000000 c0730f08 dda61c10 >>>>>> [ 4.196746] 9de0: c088c0f6 c0422958 c08e8f80 c0b9b533 ddd75440 >>>>>> 00000000 65736572 70672d74 >>>>>> [ 4.205291] 9e00: 00736f69 70672d74 00736f69 c0246c14 dd8b6d80 >>>>>> 00000007 00000001 ddd75440 >>>>>> [ 4.213867] 9e20: 00000001 dda61c10 dda61c10 c088c0f6 00000007 >>>>>> c0422bd0 ffffffff 00000007 >>>>>> [ 4.222412] 9e40: ddd75490 dda61c10 c088c0f6 c1364aa4 00000000 >>>>>> c041ecac ddd75480 ddd754d0 >>>>>> [ 4.230957] 9e60: dda61c10 dda61c00 c0b7dfcc c0593324 c05932d0 >>>>>> dda61c10 c0b7dfcc c0481c08 >>>>>> [ 4.239501] 9e80: dda61c10 c1364a9c 00000000 c047fce8 00000000 >>>>>> dda61c10 dda61c44 c0b7dfcc >>>>>> [ 4.248046] 9ea0: c0b67c60 c0b9e4c0 c0b9e4c0 c047fed8 00000000 >>>>>> c0b7dfcc c047fe50 c047e3b8 >>>>>> [ 4.256622] 9ec0: dd899aa4 dda3a1d0 c0b7dfcc 00000000 ddd72180 >>>>>> c047f398 c08e2ef2 dd8b7310 >>>>>> [ 4.265167] 9ee0: 00000000 c0b7dfcc c0a3b71c 00000000 c0a6a668 >>>>>> c0480e28 c04816e0 00000006 >>>>>> [ 4.273712] 9f00: c0a3b71c c010192c 00000073 dd8b9f28 c0150f40 >>>>>> c03f3694 60000000 ffffffff >>>>>> [ 4.282257] 9f20: 00000051 c0b9e4c0 000000b0 df97c1ae 00000000 >>>>>> c01510d4 c0934738 00000006 >>>>>> [ 4.290802] 9f40: 00000006 c093550c 000000b0 c093550c c0a50834 >>>>>> 00000006 c0a5084c 00000006 >>>>>> [ 4.299377] 9f60: c0a50850 000000b1 c0a6a668 c0b9e4c0 c0b9e4c0 >>>>>> c0a00d78 00000006 00000006 >>>>>> [ 4.307922] 9f80: 00000000 c0a00598 00000000 c06ced10 00000000 >>>>>> 00000000 00000000 00000000 >>>>>> [ 4.316467] 9fa0: 00000000 c06ced18 00000000 c01070d0 00000000 >>>>>> 00000000 00000000 00000000 >>>>>> [ 4.325012] 9fc0: 00000000 00000000 00000000 00000000 00000000 >>>>>> 00000000 00000000 00000000 >>>>>> [ 4.333557] 9fe0: 00000000 00000000 00000000 00000000 00000013 >>>>>> 00000000 01000000 00040040 >>>>>> [ 4.342132] [<c0423570>] (of_gpiochip_find_and_xlate) from >>>>>> [<c041f348>] (gpiochip_find+0x3c/0x70) >>>>>> [ 4.351409] [<c041f348>] (gpiochip_find) from [<c04236ac>] >>>>>> (of_get_named_gpiod_flags+0x70/0x8c) >>>>>> [ 4.360504] [<c04236ac>] (of_get_named_gpiod_flags) from >>>>>> [<c0422958>] (gpiod_get_index+0x80/0x22c) >>>>>> [ 4.369873] [<c0422958>] (gpiod_get_index) from [<c0422bd0>] >>>>>> (gpiod_get_array+0x60/0xa8) >>>>>> [ 4.378326] [<c0422bd0>] (gpiod_get_array) from [<c041ecac>] >>>>>> (devm_gpiod_get_array+0x3c/0x7c) >>>>>> [ 4.387237] [<c041ecac>] (devm_gpiod_get_array) from [<c0593324>] >>>>>> (mmc_pwrseq_simple_probe+0x54/0xa8) >>>>>> [ 4.396881] [<c0593324>] (mmc_pwrseq_simple_probe) from >>>> >>>> >>>> Why is mmc_pwrseq_simple_probe being called? I don't see compatible >>>> "mmc-pwrseq-simple" in omap3-gta04.dtsi. >>>> >>>> Or am I looking at the wrong DT file? >>>> >>>> >>>>>> [<c0481c08>] (platform_drv_probe+0x50/0xa0) >>>>>> [ 4.406372] [<c0481c08>] (platform_drv_probe) from [<c047fce8>] >>>>>> (driver_probe_device+0x134/0x29c) >>>>>> [ 4.415649] [<c047fce8>] (driver_probe_device) from [<c047fed8>] >>>>>> (__driver_attach+0x88/0xac) >>>>>> [ 4.424468] [<c047fed8>] (__driver_attach) from [<c047e3b8>] >>>>>> (bus_for_each_dev+0x6c/0x90) >>>>>> [ 4.433013] [<c047e3b8>] (bus_for_each_dev) from [<c047f398>] >>>>>> (bus_add_driver+0xcc/0x1e8) >>>>>> [ 4.441589] [<c047f398>] (bus_add_driver) from [<c0480e28>] >>>>>> (driver_register+0xac/0xf4) >>>>>> [ 4.449951] [<c0480e28>] (driver_register) from [<c010192c>] >>>>>> (do_one_initcall+0xac/0x154) >>>>>> [ 4.458526] [<c010192c>] (do_one_initcall) from [<c0a00d78>] >>>>>> (kernel_init_freeable+0x120/0x1ec) >>>>>> [ 4.467620] [<c0a00d78>] (kernel_init_freeable) from [<c06ced18>] >>>>>> (kernel_init+0x8/0x110) >>>>>> [ 4.476196] [<c06ced18>] (kernel_init) from [<c01070d0>] >>>>>> (ret_from_fork+0x14/0x24) >>>>>> [ 4.484100] Code: e5940000 e8bd4010 eaf892e1 e92d4038 (e590c06c) >>>>>> [ 4.490539] ---[ end trace ad1af1376ad53c79 ]--- >>>>>> [ 4.495361] note: swapper/0[1] exited with preempt_count 1 >>>>>> [ 4.503417] Kernel panic - not syncing: Attempted to kill init! >>>>>> exitcode=0x0000000b >>>>>> >>>>>> during trying to lookup for gpio in pwrseq_simple node. >>>>>> >>>>>> I did some investigation and some lines above I can see: >>>>>> >>>>>> [ 0.820983] omap-gpmc 6e000000.gpmc: GPMC revision 5.0 >>>>>> [ 0.821319] gpmc_mem_init: disabling cs 0 mapped at 0x0-0x1000000 >>>>>> [ 0.821411] gpiochip_find_base: found new base at 508 >>>>>> [ 0.821441] gpio gpiochip6: gpiodev_add_to_list adding: omap-gpmc >>>>>> [ 0.821502] gpio gpiochip6: (omap-gpmc): added GPIO chardev (254:6) >>>>>> [ 0.825042] gpiochip_setup_dev: registered GPIOs 508 to 511 on >>>>>> device: gpiochip6 (omap-gpmc) >>>>>> [ 0.825286] omap-gpmc 6e000000.gpmc: cannot request GPMC CS 0 >>>>>> [ 0.825317] omap-gpmc 6e000000.gpmc: failed to probe DT children >>>>>> [ 0.829620] omap-gpmc: probe of 6e000000.gpmc failed with error -16 >>>>>> >>>>>> negative return code comes from: allocated_resource (in >>>>>> gpmc_cs_request) >>>>>> >>>>>> I add some debug functions to gpiolib and it turns out that omap-gpmc >>>>>> gpio's are added to list of gpio chips but because probe of gpmc >>>>>> failed then pointer to dt node is null and then it fails in >>>>>> of_gpiochip_find_and_xlate with null pointer access. Any idea what can >>>>>> cause this or do you have other report that booting doesn't work? Many >>>>>> thanks. >>>>> >>>>> >>>>> Roger, any ideas about this one? >>>> >>>> >>>> OK. Looks like we're missing a clean up of the gpio_chip when >>>> gpmc_probe_dt_children() fails. I'll send out a patch for that and this >>>> should >>>> fix the NULL pointer issue. >>> >>> >>> Actually, we are calling gpmc_gpio_exit() if gpmc_probe_dt_children() >>> fails. >>> and in gpmc_gpio_exit() we do a gpiochip_remove(). >>> >>> So I don't see why mmc-pwrseq-simple gpio failing is related to GPMC. >> >> It's related because GPMC register gpio chip which is then used by >> gpiolib when looking for pins >> but pointer to dt node is then null as probing of gpmc fails. >> Could be some kind of race that searching will be done and afterwards >> omap-gpmc gpio chip should be removed >> but gpiolib will crash. But that's just guess. Maybe moving omap-gpmc >> gpiochip at the end of probe function will help. >> >>> >>>> >>>> However, we still need to figure out why gpmc_cs_request() is failing. >>>> Thanks for pointing out that allocated_resource() fails, but any idea >>>> why >>>> that might happen? >>>> >>>> The ranges property for CS0 seems to be sane for omap3-gta04.dtsi. >>>> >>>> Have you made any local changes to that dtsi? >>> >>> >>> This question still applies. > > > Marek, how is the gpmc initialized? built-in or module? gpmc is built-in. Thanks. > > -- > regards, > -grygorii BR, marek -- as simple and primitive as possible ------------------------------------------------- Marek Belisko - OPEN-NANDRA Freelance Developer Ruska Nova Ves 219 | Presov, 08005 Slovak Republic Tel: +421 915 052 184 skype: marekwhite twitter: #opennandra web: http://open-nandra.com -- To unsubscribe from this list: send the line "unsubscribe linux-omap" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html