#12441 LOW Future : reloading mmp_camera causes XO-4 kernel crash

[Zarro Boogs per Child]

#12441: reloading mmp_camera causes XO-4 kernel crash
--------------------+-------------------------------------------------------
 Reporter:  dsd     |                 Owner:  cjb           
     Type:  defect  |                Status:  new           
 Priority:  low     |             Milestone:  Future Release
Component:  kernel  |               Version:  not specified 
 Keywords:          |           Next_action:  never set     
 Verified:  0       |   Deployment_affected:                
Blockedby:          |              Blocking:                
--------------------+-------------------------------------------------------
 Testing 13.1.0 build 22 for XO-4, "rmmod mmp_camera && modprobe
 mmp_camera" causes this oops:

 {{{
 Unable to handle kernel NULL pointer dereference at virtual address
 00000024
 pgd = ec6e8000
 [00000024] *pgd=2cb39831, *pte=00000000, *ppte=00000000
 Internal error: Oops: 17 [#1] PREEMPT ARM
 Modules linked in: mmp_camera(+) fuse xt_tcpudp iptable_filter ip_tables
 x_tables btmrvl_sdio btmrvl mwifiex_sdio mwifiex bluetooth uinput joydev
 mousedev psmouse videobuf2_dma_sg videobuf2_vmalloc videobuf2_memops
 videobuf2_core syscopyarea sysfillrect sysimgblt fb_sys_fops zforce
 sisusbvga siv120d [last unloaded: mmp_camera]
 CPU: 0    Not tainted  (3.5.7_xo4-20121231.0709.olpc.868db60 #1)
 PC is at dev_get_drvdata+0x1c/0x2c
 LR is at mccic_register+0x234/0x524 [mmp_camera]
 pc : [<c022f118>]    lr : [<bf146ddc>]    psr: 200f0013
 sp : ec42fcd8  ip : ec42fce8  fp : ec42fce4
 r10: ec0c4600  r9 : 00000000  r8 : bf1484d4
 r7 : ec939c1c  r6 : ec939828  r5 : c16dbe68  r4 : ec939808
 r3 : 00000000  r2 : 00000000  r1 : 00000000  r0 : 00000020
 Flags: nzCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
 Control: 10c5387d  Table: 2c6e8059  DAC: 00000015
 Process modprobe (pid: 751, stack limit = 0xec42e2f8)
 Stack: (0xec42fcd8 to 0xec430000)
 fcc0:                                                       ec42fd6c
 ec42fce8
 fce0: bf146ddc c022f108 ec42fd0c ec42fcf8 c041d168 c041c530 c061558c
 c01cdf94
 fd00: ec42fd6c ec42fd10 c000e89c c041d124 00035593 ffffffff 000016b8
 fe019100
 fd20: ec939808 0400003c ec939808 00000000 ec939c30 00000000 ec0c4600
 ec42fd6c
 fd40: ec42fd38 ec42fd58 ec939800 00000000 ec939808 00000000 ec939c30
 ec0c4600
 fd60: ec42fd9c ec42fd70 bf14468c bf146bb4 ec42fd8c ec42fd80 ec0c4608
 bf14824c
 fd80: bf14824c c022fbe4 00000000 bf14b000 ec42fdac ec42fda0 c0231008
 bf144458
 fda0: ec42fdd4 ec42fdb0 c022f9d4 c0230ff0 c02317b8 c02ea984 c0231790
 ec0c4608
 fdc0: ec0c463c bf14824c ec42fdf4 ec42fdd8 c022fc5c c022f898 00020000
 00000000
 fde0: ec42fdf8 bf14824c ec42fe1c ec42fdf8 c022db94 c022fbf0 ec04330c
 ec0be5f0
 fe00: bf14824c ec40f2c0 c0619e10 ec91e200 ec42fe2c ec42fe20 c022f388
 c022db44
 fe20: ec42fe5c ec42fe30 c022ee90 c022f36c bf1478a0 bf1485a0 bf14824c
 00000001
 fe40: bf1485a0 ec91e200 00000001 bf14b000 ec42fe84 ec42fe60 c0230210
 c022ed98
 fe60: bf148558 00000001 bf1485a0 ec91e200 00000001 bf14b000 ec42fe94
 ec42fe88
 fe80: c0231318 c0230170 ec42fea4 ec42fe98 bf14b024 c02312d0 ec42fee4
 ec42fea8
 fea0: c0008670 bf14b00c ec42fed4 bf148558 00000001 bf1485a0 ec91e200
 bf148558
 fec0: 00000001 bf1485a0 ec91e200 00000001 c0064ac8 0000001c ec42ffa4
 ec42fee8
 fee0: c0067a78 c00085d8 bf148564 00007fff c01e4e80 00000001 ec42ff44
 00000000
 ff00: c0064c48 f02cae34 f02c92ec 00000158 000005a0 b6ee6db0 bf147c80
 c0423bf4
 ff20: ec42e000 00000000 00000000 00000000 00000000 00000000 00000000
 f02c4000
 ff40: 000090dc f02c92ec f02c9184 f02cae34 000046dc 0000508c bf148540
 00000001
 ff60: 00000023 00000024 0000001a 00000000 0000000f 00000000 00000002
 0002a100
 ff80: 00040000 00023418 00000080 c000ef28 ec42e000 00020000 00000000
 ec42ffa8
 ffa0: c000ecc0 c0066294 0002a100 00040000 b6ef6000 000090dc b6ee6db0
 00023418
 ffc0: 0002a100 00040000 00023418 00000080 00022180 000090dc b6ee6db0
 00000000
 ffe0: b6e43fc0 beefc9e0 b6eddc94 b6e43fd0 60000010 b6ef6000 00000000
 00000000
 [<c022f118>] (dev_get_drvdata+0x1c/0x2c) from [<bf146ddc>]
 (mccic_register+0x234/0x524 [mmp_camera])
 [<bf146ddc>] (mccic_register+0x234/0x524 [mmp_camera]) from [<bf14468c>]
 (mmpcam_probe+0x240/0x33c [mmp_camera])
 [<bf14468c>] (mmpcam_probe+0x240/0x33c [mmp_camera]) from [<c0231008>]
 (platform_drv_probe+0x24/0x28)
 [<c0231008>] (platform_drv_probe+0x24/0x28) from [<c022f9d4>]
 (driver_probe_device+0x148/0x358)
 [<c022f9d4>] (driver_probe_device+0x148/0x358) from [<c022fc5c>]
 (__driver_attach+0x78/0x9c)
 [<c022fc5c>] (__driver_attach+0x78/0x9c) from [<c022db94>]
 (bus_for_each_dev+0x5c/0x98)
 [<c022db94>] (bus_for_each_dev+0x5c/0x98) from [<c022f388>]
 (driver_attach+0x28/0x30)
 [<c022f388>] (driver_attach+0x28/0x30) from [<c022ee90>]
 (bus_add_driver+0x104/0x274)
 [<c022ee90>] (bus_add_driver+0x104/0x274) from [<c0230210>]
 (driver_register+0xac/0x130)
 [<c0230210>] (driver_register+0xac/0x130) from [<c0231318>]
 (platform_driver_register+0x54/0x68)
 [<c0231318>] (platform_driver_register+0x54/0x68) from [<bf14b024>]
 (mmpcam_init_module+0x24/0x34 [mmp_camera])
 [<bf14b024>] (mmpcam_init_module+0x24/0x34 [mmp_camera]) from [<c0008670>]
 (do_one_initcall+0xa4/0x174)
 [<c0008670>] (do_one_initcall+0xa4/0x174) from [<c0067a78>]
 (sys_init_module+0x17f0/0x19a4)
 [<c0067a78>] (sys_init_module+0x17f0/0x19a4) from [<c000ecc0>]
 (ret_fast_syscall+0x0/0x30)
 Code: e52de004 e8bd4000 e3500000 089da800 (e5900004)
 ---[ end trace 52566a0b13f3d5f3 ]---
 }}}

-- 
Ticket URL: <http://dev.laptop.org/ticket/12441>
One Laptop Per Child <http://laptop.org/>
OLPC bug tracking system