panic #1
Comments
Below Kernel panic is observed due to race condition, where
sock_has_perm called in a thread and is trying to access sksec->sid
without checking sksec. Just before that, sk->sk_security was set
to NULL by selinux_sk_free_security through sk_free in other thread.
31704.949269: <3> IPv4: Attempt to release alive inet socket dd81b200
31704.959049: <1> Unable to handle kernel NULL pointer dereference at \
virtual address 00000000
31704.983562: <1> pgd = c6b74000
31704.985248: <1> [00000000] *pgd=00000000
31704.996591: <0> Internal error: Oops: 5 [#1] PREEMPT SMP ARM
31705.001016: <6> Modules linked in: adsprpc [last unloaded: wlan]
31705.006659: <6> CPU: 1 Tainted: G O \
(3.4.0-g837ab9b-00003-g6bcd9c6 #1)
31705.014042: <6> PC is at sock_has_perm+0x58/0xd4
31705.018292: <6> LR is at sock_has_perm+0x58/0xd4
31705.022546: <6> pc : [<c0341e8c>] lr : [<c0341e8c>] \
psr: 60000013
31705.022549: <6> sp : dda27f00 ip : 00000000 fp : 5f36fc84
31705.034002: <6> r10: 00004000 r9 : 0000009d r8 : e8c2b700
31705.039211: <6> r7 : dda27f24 r6 : dd81b200 r5 : 00000000 \
r4 : 00000000
31705.045721: <6> r3 : 00000000 r2 : dda27ef8 r1 : 00000000 \
r0 : dda27f54
31705.052232: <6> Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM \
Segment user
31705.059349: <6> Control: 10c5787d Table: 10d7406a DAC: 00000015
.
.
.
.
31705.697816: <6> [<c0341e8c>] (sock_has_perm+0x58/0xd4) from \
[<c033ed10>] (security_socket_getsockopt+0x14/0x1c)
31705.707534: <6> [<c033ed10>] (security_socket_getsockopt+0x14/0x1c) \
from [<c0745c18>] (sys_getsockopt+0x34/0xa8)
31705.717343: <6> [<c0745c18>] (sys_getsockopt+0x34/0xa8) from \
[<c0106140>] (ret_fast_syscall+0x0/0x30)
31705.726193: <0> Code: e59832e8 e5933058 e5939004 ebfac736 (e5953000)
31705.732635: <4> ---[ end trace 22889004dafd87bd ]---
Change-Id: I79c3fb525f35ea2494d53788788cd71a38a32d6b
Signed-off-by: Satya Durga Srinivasu Prabhala <[email protected]>
Signed-off-by: Osvaldo Banuelos <[email protected]>
Setting an empty security context (length=0) on a file will lead to incorrectly dereferencing the type and other fields of the security context structure, yielding a kernel BUG. As a zero-length security context is never valid, just reject all such security contexts whether coming from userspace via setxattr or coming from the filesystem upon a getxattr request by SELinux. Setting a security context value (empty or otherwise) unknown to SELinux in the first place is only possible for a root process (CAP_MAC_ADMIN), and, if running SELinux in enforcing mode, only if the corresponding SELinux mac_admin permission is also granted to the domain by policy. In Fedora policies, this is only allowed for specific domains such as livecd for setting down security contexts that are not defined in the build host policy. [On Android, this can only be set by root/CAP_MAC_ADMIN processes, and if running SELinux in enforcing mode, only if mac_admin permission is granted in policy. In Android 4.4, this would only be allowed for root/CAP_MAC_ADMIN processes that are also in unconfined domains. In current AOSP master, mac_admin is not allowed for any domains except the recovery console which has a legitimate need for it. The other potential vector is mounting a maliciously crafted filesystem for which SELinux fetches xattrs (e.g. an ext4 filesystem on a SDcard). However, the end result is only a local denial-of-service (DOS) due to kernel BUG. This fix is queued for 3.14.] Reproducer: su setenforce 0 touch foo setfattr -n security.selinux foo Caveat: Relabeling or removing foo after doing the above may not be possible without booting with SELinux disabled. Any subsequent access to foo after doing the above will also trigger the BUG. BUG output from Matthew Thode: [ 473.893141] ------------[ cut here ]------------ [ 473.962110] kernel BUG at security/selinux/ss/services.c:654! [ 473.995314] invalid opcode: 0000 [#6] SMP [ 474.027196] Modules linked in: [ 474.058118] CPU: 0 PID: 8138 Comm: ls Tainted: G D I 3.13.0-grsec #1 [ 474.116637] Hardware name: Supermicro X8ST3/X8ST3, BIOS 2.0 07/29/10 [ 474.149768] task: ffff8805f50cd010 ti: ffff8805f50cd488 task.ti: ffff8805f50cd488 [ 474.183707] RIP: 0010:[<ffffffff814681c7>] [<ffffffff814681c7>] context_struct_compute_av+0xce/0x308 [ 474.219954] RSP: 0018:ffff8805c0ac3c38 EFLAGS: 00010246 [ 474.252253] RAX: 0000000000000000 RBX: ffff8805c0ac3d94 RCX: 0000000000000100 [ 474.287018] RDX: ffff8805e8aac000 RSI: 00000000ffffffff RDI: ffff8805e8aaa000 [ 474.321199] RBP: ffff8805c0ac3cb8 R08: 0000000000000010 R09: 0000000000000006 [ 474.357446] R10: 0000000000000000 R11: ffff8805c567a000 R12: 0000000000000006 [ 474.419191] R13: ffff8805c2b74e88 R14: 00000000000001da R15: 0000000000000000 [ 474.453816] FS: 00007f2e75220800(0000) GS:ffff88061fc00000(0000) knlGS:0000000000000000 [ 474.489254] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.522215] CR2: 00007f2e74716090 CR3: 00000005c085e000 CR4: 00000000000207f0 [ 474.556058] Stack: [ 474.584325] ffff8805c0ac3c98 ffffffff811b549b ffff8805c0ac3c98 ffff8805f1190a40 [ 474.618913] ffff8805a6202f08 ffff8805c2b74e88 00068800d0464990 ffff8805e8aac860 [ 474.653955] ffff8805c0ac3cb8 000700068113833a ffff880606c75060 ffff8805c0ac3d94 [ 474.690461] Call Trace: [ 474.723779] [<ffffffff811b549b>] ? lookup_fast+0x1cd/0x22a [ 474.778049] [<ffffffff81468824>] security_compute_av+0xf4/0x20b [ 474.811398] [<ffffffff8196f419>] avc_compute_av+0x2a/0x179 [ 474.843813] [<ffffffff8145727b>] avc_has_perm+0x45/0xf4 [ 474.875694] [<ffffffff81457d0e>] inode_has_perm+0x2a/0x31 [ 474.907370] [<ffffffff81457e76>] selinux_inode_getattr+0x3c/0x3e [ 474.938726] [<ffffffff81455cf6>] security_inode_getattr+0x1b/0x22 [ 474.970036] [<ffffffff811b057d>] vfs_getattr+0x19/0x2d [ 475.000618] [<ffffffff811b05e5>] vfs_fstatat+0x54/0x91 [ 475.030402] [<ffffffff811b063b>] vfs_lstat+0x19/0x1b [ 475.061097] [<ffffffff811b077e>] SyS_newlstat+0x15/0x30 [ 475.094595] [<ffffffff8113c5c1>] ? __audit_syscall_entry+0xa1/0xc3 [ 475.148405] [<ffffffff8197791e>] system_call_fastpath+0x16/0x1b [ 475.179201] Code: 00 48 85 c0 48 89 45 b8 75 02 0f 0b 48 8b 45 a0 48 8b 3d 45 d0 b6 00 8b 40 08 89 c6 ff ce e8 d1 b0 06 00 48 85 c0 49 89 c7 75 02 <0f> 0b 48 8b 45 b8 4c 8b 28 eb 1e 49 8d 7d 08 be 80 01 00 00 e8 [ 475.255884] RIP [<ffffffff814681c7>] context_struct_compute_av+0xce/0x308 [ 475.296120] RSP <ffff8805c0ac3c38> [ 475.328734] ---[ end trace f076482e9d754adc ]--- [sds: commit message edited to note Android implications and to generate a unique Change-Id for gerrit] Change-Id: I4d5389f0cfa72b5f59dada45081fa47e03805413 Reported-by: Matthew Thode <[email protected]> Signed-off-by: Stephen Smalley <[email protected]> Cc: [email protected] Signed-off-by: Paul Moore <[email protected]> Signed-off-by: Sivasri Kumar Vanka <[email protected]>
Below Kernel panic is observed due to race condition, where
sock_has_perm called in a thread and is trying to access sksec->sid
without checking sksec. Just before that, sk->sk_security was set
to NULL by selinux_sk_free_security through sk_free in other thread.
31704.949269: <3> IPv4: Attempt to release alive inet socket dd81b200
31704.959049: <1> Unable to handle kernel NULL pointer dereference at \
virtual address 00000000
31704.983562: <1> pgd = c6b74000
31704.985248: <1> [00000000] *pgd=00000000
31704.996591: <0> Internal error: Oops: 5 [#1] PREEMPT SMP ARM
31705.001016: <6> Modules linked in: adsprpc [last unloaded: wlan]
31705.006659: <6> CPU: 1 Tainted: G O \
(3.4.0-g837ab9b-00003-g6bcd9c6 #1)
31705.014042: <6> PC is at sock_has_perm+0x58/0xd4
31705.018292: <6> LR is at sock_has_perm+0x58/0xd4
31705.022546: <6> pc : [<c0341e8c>] lr : [<c0341e8c>] \
psr: 60000013
31705.022549: <6> sp : dda27f00 ip : 00000000 fp : 5f36fc84
31705.034002: <6> r10: 00004000 r9 : 0000009d r8 : e8c2b700
31705.039211: <6> r7 : dda27f24 r6 : dd81b200 r5 : 00000000 \
r4 : 00000000
31705.045721: <6> r3 : 00000000 r2 : dda27ef8 r1 : 00000000 \
r0 : dda27f54
31705.052232: <6> Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM \
Segment user
31705.059349: <6> Control: 10c5787d Table: 10d7406a DAC: 00000015
.
.
.
.
31705.697816: <6> [<c0341e8c>] (sock_has_perm+0x58/0xd4) from \
[<c033ed10>] (security_socket_getsockopt+0x14/0x1c)
31705.707534: <6> [<c033ed10>] (security_socket_getsockopt+0x14/0x1c) \
from [<c0745c18>] (sys_getsockopt+0x34/0xa8)
31705.717343: <6> [<c0745c18>] (sys_getsockopt+0x34/0xa8) from \
[<c0106140>] (ret_fast_syscall+0x0/0x30)
31705.726193: <0> Code: e59832e8 e5933058 e5939004 ebfac736 (e5953000)
31705.732635: <4> ---[ end trace 22889004dafd87bd ]---
Change-Id: I79c3fb525f35ea2494d53788788cd71a38a32d6b
Signed-off-by: Satya Durga Srinivasu Prabhala <[email protected]>
Signed-off-by: Osvaldo Banuelos <[email protected]>
Setting an empty security context (length=0) on a file will lead to incorrectly dereferencing the type and other fields of the security context structure, yielding a kernel BUG. As a zero-length security context is never valid, just reject all such security contexts whether coming from userspace via setxattr or coming from the filesystem upon a getxattr request by SELinux. Setting a security context value (empty or otherwise) unknown to SELinux in the first place is only possible for a root process (CAP_MAC_ADMIN), and, if running SELinux in enforcing mode, only if the corresponding SELinux mac_admin permission is also granted to the domain by policy. In Fedora policies, this is only allowed for specific domains such as livecd for setting down security contexts that are not defined in the build host policy. [On Android, this can only be set by root/CAP_MAC_ADMIN processes, and if running SELinux in enforcing mode, only if mac_admin permission is granted in policy. In Android 4.4, this would only be allowed for root/CAP_MAC_ADMIN processes that are also in unconfined domains. In current AOSP master, mac_admin is not allowed for any domains except the recovery console which has a legitimate need for it. The other potential vector is mounting a maliciously crafted filesystem for which SELinux fetches xattrs (e.g. an ext4 filesystem on a SDcard). However, the end result is only a local denial-of-service (DOS) due to kernel BUG. This fix is queued for 3.14.] Reproducer: su setenforce 0 touch foo setfattr -n security.selinux foo Caveat: Relabeling or removing foo after doing the above may not be possible without booting with SELinux disabled. Any subsequent access to foo after doing the above will also trigger the BUG. BUG output from Matthew Thode: [ 473.893141] ------------[ cut here ]------------ [ 473.962110] kernel BUG at security/selinux/ss/services.c:654! [ 473.995314] invalid opcode: 0000 [#6] SMP [ 474.027196] Modules linked in: [ 474.058118] CPU: 0 PID: 8138 Comm: ls Tainted: G D I 3.13.0-grsec #1 [ 474.116637] Hardware name: Supermicro X8ST3/X8ST3, BIOS 2.0 07/29/10 [ 474.149768] task: ffff8805f50cd010 ti: ffff8805f50cd488 task.ti: ffff8805f50cd488 [ 474.183707] RIP: 0010:[<ffffffff814681c7>] [<ffffffff814681c7>] context_struct_compute_av+0xce/0x308 [ 474.219954] RSP: 0018:ffff8805c0ac3c38 EFLAGS: 00010246 [ 474.252253] RAX: 0000000000000000 RBX: ffff8805c0ac3d94 RCX: 0000000000000100 [ 474.287018] RDX: ffff8805e8aac000 RSI: 00000000ffffffff RDI: ffff8805e8aaa000 [ 474.321199] RBP: ffff8805c0ac3cb8 R08: 0000000000000010 R09: 0000000000000006 [ 474.357446] R10: 0000000000000000 R11: ffff8805c567a000 R12: 0000000000000006 [ 474.419191] R13: ffff8805c2b74e88 R14: 00000000000001da R15: 0000000000000000 [ 474.453816] FS: 00007f2e75220800(0000) GS:ffff88061fc00000(0000) knlGS:0000000000000000 [ 474.489254] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.522215] CR2: 00007f2e74716090 CR3: 00000005c085e000 CR4: 00000000000207f0 [ 474.556058] Stack: [ 474.584325] ffff8805c0ac3c98 ffffffff811b549b ffff8805c0ac3c98 ffff8805f1190a40 [ 474.618913] ffff8805a6202f08 ffff8805c2b74e88 00068800d0464990 ffff8805e8aac860 [ 474.653955] ffff8805c0ac3cb8 000700068113833a ffff880606c75060 ffff8805c0ac3d94 [ 474.690461] Call Trace: [ 474.723779] [<ffffffff811b549b>] ? lookup_fast+0x1cd/0x22a [ 474.778049] [<ffffffff81468824>] security_compute_av+0xf4/0x20b [ 474.811398] [<ffffffff8196f419>] avc_compute_av+0x2a/0x179 [ 474.843813] [<ffffffff8145727b>] avc_has_perm+0x45/0xf4 [ 474.875694] [<ffffffff81457d0e>] inode_has_perm+0x2a/0x31 [ 474.907370] [<ffffffff81457e76>] selinux_inode_getattr+0x3c/0x3e [ 474.938726] [<ffffffff81455cf6>] security_inode_getattr+0x1b/0x22 [ 474.970036] [<ffffffff811b057d>] vfs_getattr+0x19/0x2d [ 475.000618] [<ffffffff811b05e5>] vfs_fstatat+0x54/0x91 [ 475.030402] [<ffffffff811b063b>] vfs_lstat+0x19/0x1b [ 475.061097] [<ffffffff811b077e>] SyS_newlstat+0x15/0x30 [ 475.094595] [<ffffffff8113c5c1>] ? __audit_syscall_entry+0xa1/0xc3 [ 475.148405] [<ffffffff8197791e>] system_call_fastpath+0x16/0x1b [ 475.179201] Code: 00 48 85 c0 48 89 45 b8 75 02 0f 0b 48 8b 45 a0 48 8b 3d 45 d0 b6 00 8b 40 08 89 c6 ff ce e8 d1 b0 06 00 48 85 c0 49 89 c7 75 02 <0f> 0b 48 8b 45 b8 4c 8b 28 eb 1e 49 8d 7d 08 be 80 01 00 00 e8 [ 475.255884] RIP [<ffffffff814681c7>] context_struct_compute_av+0xce/0x308 [ 475.296120] RSP <ffff8805c0ac3c38> [ 475.328734] ---[ end trace f076482e9d754adc ]--- [sds: commit message edited to note Android implications and to generate a unique Change-Id for gerrit] Change-Id: I4d5389f0cfa72b5f59dada45081fa47e03805413 Reported-by: Matthew Thode <[email protected]> Signed-off-by: Stephen Smalley <[email protected]> Cc: [email protected] Signed-off-by: Paul Moore <[email protected]> Signed-off-by: Sivasri Kumar Vanka <[email protected]>
|
[ 3.712716] Unable to handle kernel paging request at virtual address 3741d268 |
Below Kernel panic is observed due to race condition, where
sock_has_perm called in a thread and is trying to access sksec->sid
without checking sksec. Just before that, sk->sk_security was set
to NULL by selinux_sk_free_security through sk_free in other thread.
31704.949269: <3> IPv4: Attempt to release alive inet socket dd81b200
31704.959049: <1> Unable to handle kernel NULL pointer dereference at \
virtual address 00000000
31704.983562: <1> pgd = c6b74000
31704.985248: <1> [00000000] *pgd=00000000
31704.996591: <0> Internal error: Oops: 5 [#1] PREEMPT SMP ARM
31705.001016: <6> Modules linked in: adsprpc [last unloaded: wlan]
31705.006659: <6> CPU: 1 Tainted: G O \
(3.4.0-g837ab9b-00003-g6bcd9c6 #1)
31705.014042: <6> PC is at sock_has_perm+0x58/0xd4
31705.018292: <6> LR is at sock_has_perm+0x58/0xd4
31705.022546: <6> pc : [<c0341e8c>] lr : [<c0341e8c>] \
psr: 60000013
31705.022549: <6> sp : dda27f00 ip : 00000000 fp : 5f36fc84
31705.034002: <6> r10: 00004000 r9 : 0000009d r8 : e8c2b700
31705.039211: <6> r7 : dda27f24 r6 : dd81b200 r5 : 00000000 \
r4 : 00000000
31705.045721: <6> r3 : 00000000 r2 : dda27ef8 r1 : 00000000 \
r0 : dda27f54
31705.052232: <6> Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM \
Segment user
31705.059349: <6> Control: 10c5787d Table: 10d7406a DAC: 00000015
.
.
.
.
31705.697816: <6> [<c0341e8c>] (sock_has_perm+0x58/0xd4) from \
[<c033ed10>] (security_socket_getsockopt+0x14/0x1c)
31705.707534: <6> [<c033ed10>] (security_socket_getsockopt+0x14/0x1c) \
from [<c0745c18>] (sys_getsockopt+0x34/0xa8)
31705.717343: <6> [<c0745c18>] (sys_getsockopt+0x34/0xa8) from \
[<c0106140>] (ret_fast_syscall+0x0/0x30)
31705.726193: <0> Code: e59832e8 e5933058 e5939004 ebfac736 (e5953000)
31705.732635: <4> ---[ end trace 22889004dafd87bd ]---
Change-Id: I79c3fb525f35ea2494d53788788cd71a38a32d6b
Signed-off-by: Satya Durga Srinivasu Prabhala <[email protected]>
Signed-off-by: Osvaldo Banuelos <[email protected]>
[ 0.000000] Booting Linux on physical CPU 0
[ 0.000000] Initializing cgroup subsys cpu
[ 0.000000] Linux version 3.4.0-perf-gc02987471fb (guaiyihu@DESKTOP-98UUC2O) (gcc version 4.7 (GCC) ) #1 SMP PREEMPT Mon Sep 9 00:11:20 CST 2024
[ 0.000000] CPU: ARMv7 Processor [510f02d2] revision 2 (ARMv7), cr=10c5387d
[ 0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIVT ASID tagged instruction cache
[ 0.000000] Machine: MIONE
[ 0.000000] Ignoring unrecognised tag 0xf1000401
[ 0.000000] Ignoring unrecognised tag 0xf1000402
[ 0.000000] unknown memory type for bank at 66200000
[ 0.000000] memory pool 3 (start 5c500000 size 9d00000) initialized
[ 0.000000] Initialized persistent memory from 42d00000-42dfffff
[ 0.000000] Memory policy: ECC disabled, Data cache writealloc
[ 0.000000] smem_find(137, 80): wrong size 72
[ 0.000000] socinfo_init: v6, id=70, ver=2.0, raw_id=1056, raw_ver=1, hw_plat=0, hw_plat_ver=65536
[ 0.000000] accessory_chip=0 hw_plat_subtype=0
[ 0.000000] allocating 11522048 bytes at c7e00000 (48000000 physical) for fb
[ 0.000000] PERCPU: Embedded 9 pages/cpu @c8900000 s15360 r8192 d13312 u36864
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 198404
[ 0.000000] Kernel command line: console=ttyHSL0,115200,n8 androidboot.hardware=mione kgsl.mmutype=gpummu vmalloc=400M androidboot.emmc=true androidboot.serialno=1374137e syspart=system androidboot.baseband=msm
[ 0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
[ 0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
[ 0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
[ 0.000000] Memory: 44MB 325MB 414MB = 783MB total
[ 0.000000] Memory: 765188k/765188k available, 197372k reserved, 423936K highmem
[ 0.000000] Virtual kernel memory layout:
[ 0.000000] vector : 0xffff0000 - 0xffff1000 ( 4 kB)
[ 0.000000] fixmap : 0xfff00000 - 0xfffe0000 ( 896 kB)
[ 0.000000] vmalloc : 0xe6800000 - 0xff000000 ( 392 MB)
[ 0.000000] lowmem : 0xc0000000 - 0xe6000000 ( 608 MB)
[ 0.000000] pkmap : 0xbfe00000 - 0xc0000000 ( 2 MB)
[ 0.000000] modules : 0xbf000000 - 0xbfe00000 ( 14 MB)
[ 0.000000] .text : 0xc0008000 - 0xc0be813c (12161 kB)
[ 0.000000] .init : 0xc0c00000 - 0xc0d19c00 (1127 kB)
[ 0.000000] .data : 0xc0d1a000 - 0xc0e1bc88 (1032 kB)
[ 0.000000] .bss : 0xc0e1bcac - 0xc106d684 (2375 kB)
[ 0.000000] SLUB: Genslabs=11, HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[ 0.000000] Preemptible hierarchical RCU implementation.
[ 0.000000] NR_IRQS:855
[ 0.000000] sched_clock: 32 bits at 6MHz, resolution 148ns, wraps every 636291ms
[ 0.150198] Calibrating delay using timer specific routine.. 13.53 BogoMIPS (lpj=67652)
[ 0.150226] pid_max: default: 32768 minimum: 301
[ 0.150631] Mount-cache hash table entries: 512
[ 0.152119] Initializing cgroup subsys cpuacct
[ 0.152140] Initializing cgroup subsys freezer
[ 0.152198] CPU: Testing write buffer coherency: ok
[ 0.152468] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
[ 0.152493] hw perfevents: enabled with ARMv7 Scorpion-MP PMU driver, 5 counters available
[ 0.152613] Setting up static identity map for 0x40a31e18 - 0x40a31e7c
[ 0.253316] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
[ 0.253444] Brought up 2 CPUs
[ 0.253465] SMP: Total of 2 processors activated (27.06 BogoMIPS).
[ 0.267092] dummy:
[ 0.267563] NET: Registered protocol family 16
[ 0.268133] AXI: msm_bus_fabric_init_driver(): msm_bus_fabric_init_driver
[ 0.269368] gpiochip_add: registered GPIOs 0 to 172 on device: msmgpio
[ 0.270022] msm_rpm_init: RPM firmware 2.0.111
[ 0.270969] saw_probe: id=0, name=8901_s0
[ 0.271328] saw_probe: id=1, name=8901_s1
[ 0.274097] msm_rpm_get_status(): Status id 433 not defined for target
[ 0.276922] Rate 27000000 for pcm_clk is greater than highest Fmax
[ 0.276939] pcm_clk handoff failed (-22)
[ 0.296012] persistent_ram: found existing buffer, size 40542, start 40542
[ 0.471803] console [ram-1] enabled
[ 0.474370] pm8058_probe: PMIC revision: E3
[ 0.476057] gpiochip_add: registered GPIOs 173 to 212 on device: pm-gpio
[ 0.476588] pm_gpio_probe: OK: base=173, ngpio=40
[ 0.477035] gpiochip_add: registered GPIOs 213 to 224 on device: pm8xxx-mpp
[ 0.477228] pm8xxx_mpp_probe: OK: base=213, ngpio=12
[ 0.479531] pm8901_probe: PMIC revision reg: F4
[ 0.479665] pm8901_probe: PMIC version: PM8901 rev 2.1
[ 0.480516] gpiochip_add: registered GPIOs 225 to 228 on device: pm8xxx-mpp
[ 0.480675] pm8xxx_mpp_probe: OK: base=225, ngpio=4
[ 0.481466] __pm8901_preload_dVdd: dVdd preloaded
[ 0.505823] gpio_vreg_probe: id=225, name=ext_5v, gpio=225, gpio_label=ext_5v_en
[ 0.509913] hw-breakpoint: found 3 (+1 reserved) breakpoint and 1 watchpoint registers.
[ 0.510054] hw-breakpoint: maximum watchpoint size is 8 bytes.
[ 0.545671] bio: create slab at 0
[ 0.547795] ION heap vmalloc created
[ 0.548100] ION heap mm created at 38200000 with size 3800000
[ 0.548247] ION heap mm_fw created at 38000000 with size 200000
[ 0.548540] ION heap mfc created at 3ba00000 with size 2000
[ 0.548889] ION heap sf created at 5c501000 with size 4000000
[ 0.549350] ION heap camera_preview created at 60501000 with size 4200000
[ 0.549573] ION heap wb created at 64701000 with size c00000
[ 0.549868] ION heap qsecom created at 65301000 with size 600000
[ 0.550061] ION heap audio created at 65901000 with size 4cf000
[ 0.550507] pmic8058_pwm_probe: OK
[ 0.551417] SCSI subsystem initialized
[ 0.551847] usbcore: registered new interface driver usbfs
[ 0.552171] usbcore: registered new interface driver hub
[ 0.552547] usbcore: registered new device driver usb
[ 0.553291] input: pmic8xxx_pwrkey as /devices/platform/msm_ssbi.0/pm8058-core/pm8xxx-pwrkey/input/input0
[ 0.554254] Linux media interface: v0.10
[ 0.554443] Linux video capture interface: v2.00
[ 0.554966] Advanced Linux Sound Architecture Driver Version 1.0.25.
[ 0.555908] Bluetooth: Core ver 2.16
[ 0.556107] NET: Registered protocol family 31
[ 0.556332] Bluetooth: HCI device and connection manager initialized
[ 0.556461] Bluetooth: HCI socket layer initialized
[ 0.556687] Bluetooth: L2CAP socket layer initialized
[ 0.557127] Bluetooth: SCO socket layer initialized
[ 0.557872] cfg80211: Calling CRDA to update world regulatory domain
[ 0.558769] Switching to clocksource dg_timer
[ 0.591834] NET: Registered protocol family 2
[ 0.592302] IP route cache hash table entries: 16384 (order: 4, 65536 bytes)
[ 0.593212] TCP established hash table entries: 65536 (order: 7, 524288 bytes)
[ 0.594508] TCP bind hash table entries: 65536 (order: 7, 524288 bytes)
[ 0.595957] TCP: Hash tables configured (established 65536 bind 65536)
[ 0.596090] TCP: reno registered
[ 0.596328] UDP hash table entries: 256 (order: 1, 8192 bytes)
[ 0.596474] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[ 0.597156] NET: Registered protocol family 1
[ 0.597614] Trying to unpack rootfs image as initramfs...
[ 0.638068] Freeing initrd memory: 416K
[ 0.639589] Detected 5 counters on the L2CC PMU.
[ 0.640208] ETM/ETB intialized.
[ 0.640648] pil_qdsp6v3 pil_qdsp6v3: using secure boot
[ 0.641953] pil_modem pil_modem: using secure boot
[ 0.642472] pil_dsps pil_dsps: using secure boot
[ 0.644510] smd_channel_probe_worker: allocation table not initialized
[ 0.660667] 8058_s4: Failed to create debugfs directory
[ 0.664800] lpa_if_init: lpa_if_ptr 0xdbb22300 buf_vir 0xffdf0000 buf_phy 0x5bd70000 buf_zise 65536
[ 0.666865] dspcrashd_probe: Platform driver values: Base = 0x46700000, Size = 0x2000000,pdata = 0xdeaddead
[ 0.671385] ACPU PVS: Slow
[ 0.671660] Max ACPU freq: 1512000 KHz
[ 0.675988] 8901_s0: Failed to create debugfs directory
[ 0.676546] 8901_s1: Failed to create debugfs directory
[ 0.678398] CPU0: 23 scaling frequencies supported.
[ 0.678533] CPU1: 23 scaling frequencies supported.
[ 0.681111] highmem bounce pool size: 64 pages
[ 0.685175] fuse init (API version 7.18)
[ 0.685476] msgmni has been set to 667
[ 0.686843] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 248)
[ 0.686984] io scheduler noop registered
[ 0.687057] io scheduler deadline registered (default)
[ 0.687214] io scheduler cfq registered
[ 0.689554] mdp4_csc_config: Block type 10 isn't supported by CSC.
[ 0.689634] mdp4_csc_config: Block type 8 isn't supported by CSC.
[ 0.693236] mipi_dsi base phy_addr = 0x4700000 virt = 0xe6e00000
[ 0.693321] mmss_sfpb base phy_addr = 0x5700000,virt = 0xe687e000
[ 0.693548] mipi_novatek_lcd_init: SUCCESS (SPI)
[ 0.693621] mipi_novatek_lcd_init: SUCCESS (WLED TRIGGER)
[ 0.693984] setting pdata->panel_info.fb_num to 3. type: 9
[ 0.699560] FrameBuffer[0] 480x854 size=4927488 bytes is registered successfully!
[ 0.700495] hdmi_msm hdmi_msm.1: WARNING: HDCP disabled
[ 0.700645] setting pdata->panel_info.fb_num to 1. type: 7
[ 0.703059] FrameBuffer[1] 1920x1080 size=4149248 bytes is registered successfully!
[ 0.703391] mdp4_dtv_vsync_init: ndx=0
[ 0.703555] hdmi_msm hdmi_msm.1: external_common_state_create: sysfs group dbd77808
[ 0.703698] hdmi_msm hdmi_msm.1: hdmi_msm_config_hdcp_feature: HDCP Feature: Disabled
[ 0.704166] setting pdata->panel_info.fb_num to 1. type: 10
[ 0.704389] Inside writeback_driver_init
[ 0.704552] Inside writeback_probe
[ 0.704763] mdp_probe: writeback panel not supprted
[ 0.705563]
[ 0.705566] msm_vidc_enc: Inside vid_enc_init()
[ 0.705854]
[ 0.705857] msm_vidc_enc: Inside vid_enc_vcd_init()
[ 0.727530] msm_serial_hs.0: ttyHS0 at MMIO 0x16540000 (irq = 188) is a MSM HS UART
[ 0.727739] ------------[ cut here ]------------
[ 0.727828] WARNING: at ../../../../../../kernel/xiaomi/mione_plus/arch/arm/mach-msm/clock.c:214 clk_enable+0x98/0x274()
[ 0.727962] gsbi6_uart_clk: Don't call enable on unprepared clocks
[ 0.728092] Modules linked in:
[ 0.728252] [] (unwind_backtrace+0x0/0x11c) from [] (warn_slowpath_common+0x4c/0x64)
[ 0.728392] [] (warn_slowpath_common+0x4c/0x64) from [] (warn_slowpath_fmt+0x2c/0x3c)
[ 0.728530] [] (warn_slowpath_fmt+0x2c/0x3c) from [] (clk_enable+0x98/0x274)
[ 0.728614] [] (clk_enable+0x98/0x274) from [] (msm_hs_set_mctrl_locked+0x14/0x4c)
[ 0.728761] [] (msm_hs_set_mctrl_locked+0x14/0x4c) from [] (uart_add_one_port+0x278/0x388)
[ 0.728905] [] (uart_add_one_port+0x278/0x388) from [] (msm_hs_probe+0x8a4/0x9ac)
[ 0.729055] [] (msm_hs_probe+0x8a4/0x9ac) from [] (platform_drv_probe+0x14/0x18)
[ 0.729198] [] (platform_drv_probe+0x14/0x18) from [] (driver_probe_device+0x134/0x340)
[ 0.729337] [] (driver_probe_device+0x134/0x340) from [] (__driver_attach+0x68/0x8c)
[ 0.729417] [] (__driver_attach+0x68/0x8c) from [] (bus_for_each_dev+0x48/0x80)
[ 0.729556] [] (bus_for_each_dev+0x48/0x80) from [] (bus_add_driver+0x100/0x26c)
[ 0.729694] [] (bus_add_driver+0x100/0x26c) from [] (driver_register+0x9c/0x120)
[ 0.729840] [] (driver_register+0x9c/0x120) from [] (msm_serial_hs_init+0x6c/0xdc)
[ 0.729981] [] (msm_serial_hs_init+0x6c/0xdc) from [] (do_one_initcall+0x90/0x160)
[ 0.730062] [] (do_one_initcall+0x90/0x160) from [] (kernel_init+0xe8/0x1a4)
[ 0.730146] [] (kernel_init+0xe8/0x1a4) from [] (kernel_thread_exit+0x0/0x8)
[ 0.730301] ---[ end trace d0737ebb5ab15f5f ]---
[ 0.730377] ------------[ cut here ]------------
[ 0.730511] WARNING: at ../../../../../../kernel/xiaomi/mione_plus/arch/arm/mach-msm/clock.c:257 clk_disable+0x30/0x20c()
[ 0.730645] gsbi6_uart_clk: Never called prepare or calling disable after unprepare
[ 0.730775] Modules linked in:
[ 0.730920] [] (unwind_backtrace+0x0/0x11c) from [] (warn_slowpath_common+0x4c/0x64)
[ 0.731058] [] (warn_slowpath_common+0x4c/0x64) from [] (warn_slowpath_fmt+0x2c/0x3c)
[ 0.731140] [] (warn_slowpath_fmt+0x2c/0x3c) from [] (clk_disable+0x30/0x20c)
[ 0.731279] [] (clk_disable+0x30/0x20c) from [] (uart_add_one_port+0x278/0x388)
[ 0.731419] [] (uart_add_one_port+0x278/0x388) from [] (msm_hs_probe+0x8a4/0x9ac)
[ 0.731559] [] (msm_hs_probe+0x8a4/0x9ac) from [] (platform_drv_probe+0x14/0x18)
[ 0.731700] [] (platform_drv_probe+0x14/0x18) from [] (driver_probe_device+0x134/0x340)
[ 0.731839] [] (driver_probe_device+0x134/0x340) from [] (__driver_attach+0x68/0x8c)
[ 0.731919] [] (__driver_attach+0x68/0x8c) from [] (bus_for_each_dev+0x48/0x80)
[ 0.732059] [] (bus_for_each_dev+0x48/0x80) from [] (bus_add_driver+0x100/0x26c)
[ 0.732197] [] (bus_add_driver+0x100/0x26c) from [] (driver_register+0x9c/0x120)
[ 0.732336] [] (driver_register+0x9c/0x120) from [] (msm_serial_hs_init+0x6c/0xdc)
[ 0.732476] [] (msm_serial_hs_init+0x6c/0xdc) from [] (do_one_initcall+0x90/0x160)
[ 0.732615] [] (do_one_initcall+0x90/0x160) from [] (kernel_init+0xe8/0x1a4)
[ 0.732696] [] (kernel_init+0xe8/0x1a4) from [] (kernel_thread_exit+0x0/0x8)
[ 0.732830] ---[ end trace d0737ebb5ab15f60 ]---
[ 0.733110] msm_serial_hs module loaded
[ 0.734231] msm_rotator_probe: rotator_hw_revision=1
[ 0.735542] diagchar initialized now
[ 0.741093] kgsl kgsl-3d0: |kgsl_gpummu_init| MMU type set for device is GPUMMU
[ 0.742295] kgsl kgsl-2d0: |kgsl_gpummu_init| MMU type set for device is GPUMMU
[ 0.743314] kgsl kgsl-2d1: |kgsl_gpummu_init| MMU type set for device is GPUMMU
[ 0.748272] brd: module loaded
[ 0.750713] loop: module loaded
[ 0.751754] isa1200_probe: isa1200_1 registered
[ 0.751880] i2c-core: driver [isa1200] using legacy suspend method
[ 0.752010] i2c-core: driver [isa1200] using legacy resume method
[ 0.752240] pm8xxx_upl_probe: OK
[ 0.752732] 8058_l18: Failed to create debugfs directory
[ 0.753605] 8058_l0: Failed to create debugfs directory
[ 0.753749] 8058_s3: Failed to create debugfs directory
[ 0.758675] 8058_s3: Failed to create debugfs directory
[ 0.758823] msm_bahama_setup_power: gpio_request 232 = -22
[ 0.759008] qup_i2c qup_i2c.4: QUP: I2C status flags :0x1343c8, irq:191
[ 0.759155] qup_i2c qup_i2c.4: I2C slave addr:0xc not connected
[ 0.759338] qup_i2c qup_i2c.4: QUP: I2C status flags :0x1343c8, irq:191
[ 0.759487] qup_i2c qup_i2c.4: I2C slave addr:0xc not connected
[ 0.759565] marimba-core 4-000c: i2c read failed
[ 0.759894] adie_codec_register_codec_operations: codec type 1
[ 0.760416] SCSI Media Changer driver v0.25
[ 0.760950] spi_qsd spi_qsd.0: master is unqueued, this is deprecated
[ 0.761615] tun: Universal TUN/TAP device driver, 1.6
[ 0.761749] tun: (C) 1999-2004 Max Krasnyansky [email protected]
[ 0.761885] rmnet_init: SMD devices[8]
[ 0.765008] PPP generic driver version 2.4.2
[ 0.765169] PPP BSD Compression module registered
[ 0.765243] PPP Deflate Compression module registered
[ 0.766018] PPP MPPE Compression module registered
[ 0.766098] NET: Registered protocol family 24
[ 0.766233] SLIP: version 0.8.4-NET3.019-NEWTTY (dynamic channels, max=256) (6 bit encapsulation enabled).
[ 0.766307] CSLIP: code copyright 1989 Regents of the University of California.
[ 0.767385] 8058_s1: Failed to create debugfs directory
[ 0.767542] 8058_l6: Failed to create debugfs directory
[ 0.767623] 8058_l7: Failed to create debugfs directory
[ 0.769685] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[ 0.769904] Rate 2147483647 for jpegd_clk is greater than highest Fmax
[ 0.770035] host driver registered w/ tranceiver
[ 0.770217] usbcore: registered new interface driver cdc_acm
[ 0.770347] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
[ 0.770419] Initializing USB Mass Storage driver...
[ 0.770593] usbcore: registered new interface driver usb-storage
[ 0.770663] USB Mass Storage support registered.
[ 0.770813] usbcore: registered new interface driver ums-alauda
[ 0.770906] usbcore: registered new interface driver ums-cypress
[ 0.771053] usbcore: registered new interface driver ums-datafab
[ 0.771142] usbcore: registered new interface driver ums-freecom
[ 0.771291] usbcore: registered new interface driver ums-isd200
[ 0.771383] usbcore: registered new interface driver ums-jumpshot
[ 0.771532] usbcore: registered new interface driver ums-karma
[ 0.771625] usbcore: registered new interface driver ums-onetouch
[ 0.771774] usbcore: registered new interface driver ums-sddr09
[ 0.771872] usbcore: registered new interface driver ums-sddr55
[ 0.772022] usbcore: registered new interface driver ums-usbat
[ 0.772118] usbcore: registered new interface driver usb_ehset_test
[ 0.772518] peripheral driver registered w/ tranceiver
[ 0.772939] mbim_init: initialize 1 instances
[ 0.773129] mbim_init: Initialized 1 ports
[ 0.774273] rndis_qc_init: initialize rndis QC instance
[ 0.774594] android_usb gadget: Mass Storage Function, version: 2009/09/11
[ 0.774670] android_usb gadget: Number of LUNs=1
[ 0.774802] lun0: LUN: removable file: (no medium)
[ 0.775047] android_usb gadget: android_usb ready
[ 0.775641] mousedev: PS/2 mouse device common for all mice
[ 0.776573] input: mione-keypad as /devices/platform/msm_ssbi.0/pm8058-core/pm8xxx-keypad/input/input1
[ 0.969201] qup_i2c qup_i2c.3: QUP: I2C status flags :0x1343c8, irq:193
[ 0.969297] qup_i2c qup_i2c.3: I2C slave addr:0x4a not connected
[ 0.969437] atmel_mxt_ts 3-004a: mxt_read_regbuf: i2c transfer failed at 0 size 1
[ 0.969646] atmel_mxt_ts: probe of 3-004a failed with error -5
[ 0.969915] qup_i2c qup_i2c.3: QUP: I2C status flags :0x1343c8, irq:193
[ 0.970059] qup_i2c qup_i2c.3: I2C slave addr:0x38 not connected
[ 0.970137] ft5x0x_i2c 3-0038: fail to read device mode register
[ 0.970278] ft5x0x_i2c: probe of 3-0038 failed with error -107
[ 0.971136] input: compass as /devices/virtual/input/input2
[ 0.971794] input: lightsensor as /devices/virtual/input/input3
[ 0.972038] input: proximity as /devices/virtual/input/input4
[ 0.989269] qup_i2c qup_i2c.0: QUP: I2C status flags :0x1343c8, irq:183
[ 0.989357] qup_i2c qup_i2c.0: I2C slave addr:0x45 not connected
[ 0.989494] isl29028 0-0045: fail to detect ISL29028 chip.
[ 0.990804] input: accelerometer as /devices/virtual/input/input5
[ 0.991377] qup_i2c qup_i2c.5: QUP: I2C status flags :0x1343c8, irq:228
[ 0.991523] qup_i2c qup_i2c.5: I2C slave addr:0x1d not connected
[ 0.991601] lsm303d 5-001d: fail to detect LSM303D chip.
[ 0.991909] qup_i2c qup_i2c.5: QUP: I2C status flags :0x1343c8, irq:228
[ 0.992061] qup_i2c qup_i2c.5: I2C slave addr:0x11 not connected
[ 0.992198] Bosch Sensortec Device predefined-address not found,i2c error=-1, id=0x00
[ 0.992272] Now let's try to scan the different address to detect BMA255:
[ 0.992514] qup_i2c qup_i2c.5: QUP: I2C status flags :0x1343c8, irq:228
[ 0.992657] qup_i2c qup_i2c.5: I2C slave addr:0x11 not connected
[ 0.992735]
[ 0.992737] [I]<6><><bma255_scan_device><2536>address 0x11: err=-1, id=0x00
[ 0.993042] qup_i2c qup_i2c.5: QUP: I2C status flags :0x1343c8, irq:228
[ 0.993126] qup_i2c qup_i2c.5: I2C slave addr:0x12 not connected
[ 0.993261]
[ 0.993263] [I]<6><><bma255_scan_device><2536>address 0x12: err=-1, id=0x00
[ 0.993567] qup_i2c qup_i2c.5: QUP: I2C status flags :0x1343c8, irq:228
[ 0.993650] qup_i2c qup_i2c.5: I2C slave addr:0x13 not connected
[ 0.993785]
[ 0.993787] [I]<6><><bma255_scan_device><2536>address 0x13: err=-1, id=0x00
[ 0.994093] qup_i2c qup_i2c.5: QUP: I2C status flags :0x1343c8, irq:228
[ 0.994176] qup_i2c qup_i2c.5: I2C slave addr:0x14 not connected
[ 0.994311]
[ 0.994313] [I]<6><><bma255_scan_device><2536>address 0x14: err=-1, id=0x00
[ 0.994559] qup_i2c qup_i2c.5: QUP: I2C status flags :0x1343c8, irq:228
[ 0.994701] qup_i2c qup_i2c.5: I2C slave addr:0x15 not connected
[ 0.994837]
[ 0.994839] [I]<6><><bma255_scan_device><2536>address 0x15: err=-1, id=0x00
[ 0.995087] qup_i2c qup_i2c.5: QUP: I2C status flags :0x1343c8, irq:228
[ 0.995229] qup_i2c qup_i2c.5: I2C slave addr:0x16 not connected
[ 0.995307]
[ 0.995309] [I]<6><><bma255_scan_device><2536>address 0x16: err=-1, id=0x00
[ 0.995557] qup_i2c qup_i2c.5: QUP: I2C status flags :0x1343c8, irq:228
[ 0.995699] qup_i2c qup_i2c.5: I2C slave addr:0x17 not connected
[ 0.995777]
[ 0.995779] [I]<6><><bma255_scan_device><2536>address 0x17: err=-1, id=0x00
[ 0.996395]
[ 0.996398] [I]<6><><bma255_scan_device><2536>address 0x18: err=0, id=0x00
[ 0.996705] qup_i2c qup_i2c.5: QUP: I2C status flags :0x1343c8, irq:228
[ 0.996789] qup_i2c qup_i2c.5: I2C slave addr:0x19 not connected
[ 0.996926]
[ 0.996928] [I]<6><><bma255_scan_device><2536>address 0x19: err=-1, id=0x00
[ 0.997232] qup_i2c qup_i2c.5: QUP: I2C status flags :0x1343c8, irq:228
[ 0.997316] qup_i2c qup_i2c.5: I2C slave addr:0x1a not connected
[ 0.997452]
[ 0.997454] [I]<6><><bma255_scan_device><2536>address 0x1a: err=-1, id=0x00
[ 0.997702] qup_i2c qup_i2c.5: QUP: I2C status flags :0x1343c8, irq:228
[ 0.997844] qup_i2c qup_i2c.5: I2C slave addr:0x1b not connected
[ 0.997979]
[ 0.997981] [I]<6><><bma255_scan_device><2536>address 0x1b: err=-1, id=0x00
[ 0.998227] qup_i2c qup_i2c.5: QUP: I2C status flags :0x1343c8, irq:228
[ 0.998369] qup_i2c qup_i2c.5: I2C slave addr:0x1c not connected
[ 0.998447]
[ 0.998449] [I]<6><><bma255_scan_device><2536>address 0x1c: err=-1, id=0x00
[ 0.998754] qup_i2c qup_i2c.5: QUP: I2C status flags :0x1343c8, irq:228
[ 0.998895] qup_i2c qup_i2c.5: I2C slave addr:0x1d not connected
[ 0.998973]
[ 0.998975] [I]<6><><bma255_scan_device><2536>address 0x1d: err=-1, id=0x00
[ 0.999693]
[ 0.999695] [I]<6><><bma255_scan_device><2536>address 0x1e: err=0, id=0x10
[ 1.000003] qup_i2c qup_i2c.5: QUP: I2C status flags :0x1343c8, irq:228
[ 1.000091] qup_i2c qup_i2c.5: I2C slave addr:0x1f not connected
[ 1.000227]
[ 1.000229] [I]<6><><bma255_scan_device><2536>address 0x1f: err=-1, id=0x00
[ 1.000428]
[ 1.000430] [E]<3><><bma255_local_init><2616>scan bma255 and set the right addr faild
[ 1.000667] rmi_i2c_probe: Probing s3202 at 0x22 (IRQ 50).
[ 1.001338] rmi sensor00: rmi_i2c_probe: Exported GPIO 50.
[ 1.001414] rmi_i2c 3-0022: registered rmi i2c driver at 0x22.
[ 1.004755] rmi_generic sensor00: Not ready to handle interrupts yet!
[ 1.068838] rmi_generic sensor00: Scanning PDT...
[ 1.069861] rmi_generic sensor00: Initializing F34 for s3202.
[ 1.069963] fn34: Intializing f34 values.
[ 1.072910] fn34: firmware id = 30 30 30 36.
[ 1.074396] rmi_generic sensor00: Initializing F01 for s3202.
[ 1.075453] rmi_generic sensor00: Initializing F11 for s3202.
[ 1.077616] rmi_generic sensor00: Initializing F54 for s3202.
[ 1.079823] rmi_generic sensor00: Initializing F31 for s3202.
[ 1.080776] rmi_generic sensor00: Initializing F1A for s3202.
[ 1.082983] rmi_generic sensor00: Initializing F55 for s3202.
[ 1.085143] rmi_generic sensor00: Initializing F51 for s3202.
[ 1.091873] fn01: found RMI device, manufacturer: synaptics, product: TM2248
[ 1.098304] input: sensor00fn11 as /devices/sensor00/input/input6
[ 1.098552] fn54: Intializing F54.
[ 1.098739] input: sensor00fn54 as /devices/sensor00/input/input7
[ 1.101288] rmi_generic sensor00: Major number of rmidev: 239
[ 1.101365] rmi_generic sensor00: Allocated rmidev 239 0.
[ 1.101551] rmidev rmidev0: Registered a device.
[ 1.102218] using rtc device, pm8xxx_rtc, for alarms
[ 1.102372] rtc-pm8xxx rtc-pm8xxx: rtc core: registered pm8xxx_rtc as rtc0
[ 1.102699] i2c /dev entries driver
[ 1.103239] lirc_dev: IR Remote Control driver registered, major 238
[ 1.103371] IR NEC protocol handler initialized
[ 1.103443] IR RC5(x) protocol handler initialized
[ 1.103573] IR RC6 protocol handler initialized
[ 1.103644] IR JVC protocol handler initialized
[ 1.103772] IR Sony protocol handler initialized
[ 1.103842] IR RC5 (streamzap) protocol handler initialized
[ 1.103970] IR SANYO protocol handler initialized
[ 1.104041] IR MCE Keyboard/mouse protocol handler initialized
[ 1.104113] IR LIRC bridge handler initialized
[ 1.104446] usbcore: registered new interface driver uvcvideo
[ 1.104518] USB Video Class driver (1.1.1)
[ 1.126867] qup_i2c qup_i2c.1: QUP: I2C status flags :0x1343c8, irq:185
[ 1.126959] qup_i2c qup_i2c.1: I2C slave addr:0x37 not connected
[ 1.127098] s5k3h2_match_id: s5k3h2: read id failed
[ 1.127169] msm_sensor_i2c_probe s5k3h2_i2c_probe failed
[ 1.128794] s5k3h2: probe of 1-006e failed with error -107
[ 1.149171] qup_i2c qup_i2c.1: QUP: I2C status flags :0x1343c8, irq:185
[ 1.149317] qup_i2c qup_i2c.1: I2C slave addr:0x10 not connected
[ 1.149395] imx105_match_id: imx105: read id failed
[ 1.149525] msm_sensor_i2c_probe imx105_i2c_probe failed
[ 1.151046] imx105: probe of 1-0020 failed with error -107
[ 1.176567] qup_i2c qup_i2c.1: QUP: I2C status flags :0x1343c8, irq:185
[ 1.176652] qup_i2c qup_i2c.1: I2C slave addr:0x36 not connected
[ 1.176783] msm_sensor_match_id: imx132: read id failed
[ 1.176853] msm_sensor_i2c_probe imx132_i2c_probe failed
[ 1.178036] imx132: probe of 1-0036 failed with error -107
[ 1.201817] mt9e013 liteon read otprom
[ 1.219659] mt9e013 0x304A:0x0020
[ 1.219732] mt9e013 otp try slot:0x3300
[ 1.229340] android_work: android_work: did not send uevent (0 0 (null))
[ 1.239660] mt9e013 0x304A:0x0020
[ 1.239732] mt9e013 otp try slot:0x3200
[ 1.259648] mt9e013 0x304A:0x0020
[ 1.259778] mt9e013 otp try slot:0x3100
[ 1.279651] mt9e013 0x304A:0x0020
[ 1.279722] mt9e013 otp try slot:0x3000
[ 1.299656] mt9e013 0x304A:0x0060
[ 1.299729] mt9e013 otp read ok
[ 1.415200] mt9e013 (0x3600 0x01f0) (0x37c6 0xb66a)
[ 1.415331] mt9e013 gpi:fff0 ver:3006 vendor:0
[ 1.415469] msm_sensor_i2c_probe mt9e013 probe succeeded
[ 1.415749] msm_eeprom_probe probe_fail
[ 1.416021] msm_server_update_sensor_info mctl_node_name[0] = video1
[ 1.417758] vfe31_probe: camif not supported
[ 1.418579] I2C radio driver for Qualcomm FM Radio Transceiver , Version 1.0.0
[ 1.419418] msm_adc successfully registered
[ 1.439154] tsens_tm_probe: OK
[ 1.439542] device-mapper: uevent: version 1.0.3
[ 1.439759] device-mapper: ioctl: 4.22.0-ioctl (2011-10-19) initialised: [email protected]
[ 1.439916] Bluetooth: HCI UART driver ver 2.2
[ 1.440050] Bluetooth: HCI H4 protocol initialized
[ 1.440122] Bluetooth: HCI_IBS protocol initialized
[ 1.440361] cpuidle: using governor ladder
[ 1.440494] cpuidle: using governor menu
[ 1.440867] mmc0: SDCC Version: 0x00000000
[ 1.441083] mmc0: No card detect facilities available
[ 1.441306] 8901_l5: Failed to create debugfs directory
[ 1.441395] 8901_lvs0: Failed to create debugfs directory
[ 1.442585] mmc0: Qualcomm MSM SDCC-core at 0x0000000012400000 irq 136,0 dma 18 dmacrcri 1
[ 1.442720] mmc0: Controller capabilities: 0x00000001
[ 1.442793] mmc0: 8 bit data mode enabled
[ 1.442865] mmc0: 4 bit data mode disabled
[ 1.442997] mmc0: polling status mode disabled
[ 1.443069] mmc0: MMC clock 400000 -> 48000000 Hz, PCLK 0 Hz
[ 1.443199] mmc0: Slot eject status = 0
[ 1.443271] mmc0: Power save feature enable = 1
[ 1.443344] mmc0: DM non-cached buffer at ffda0000, dma_addr 0x5b1a0000
[ 1.443475] mmc0: DM cmd busaddr 0x5b1a0000, cmdptr busaddr 0x5b1b7f40
[ 1.443816] mmc1: SDCC Version: 0x00000000
[ 1.444905] mmc1: No card detect facilities available
[ 1.445121] 8058_l14: Failed to create debugfs directory
[ 1.445276] 8058_l5: Failed to create debugfs directory
[ 1.446421] mmc1: Qualcomm MSM SDCC-core at 0x0000000012180000 irq 134,0 dma 20 dmacrcri 2
[ 1.446556] mmc1: Controller capabilities: 0x00000001
[ 1.446686] mmc1: 8 bit data mode disabled
[ 1.446758] mmc1: 4 bit data mode enabled
[ 1.446831] mmc1: polling status mode disabled
[ 1.446963] mmc1: MMC clock 400000 -> 48000000 Hz, PCLK 0 Hz
[ 1.447035] mmc1: Slot eject status = 0
[ 1.447107] mmc1: Power save feature enable = 1
[ 1.447240] mmc1: DM non-cached buffer at ffd80000, dma_addr 0x5b1c0000
[ 1.447314] mmc1: DM cmd busaddr 0x5b1c0000, cmdptr busaddr 0x5b1d7f40
[ 1.447681] mmc2: SDCC Version: 0x00000000
[ 1.447960] 8058_s3: Failed to create debugfs directory
[ 1.449169] mmc2: Qualcomm MSM SDCC-core at 0x00000000121c0000 irq 133,0 dma 21 dmacrcri 5
[ 1.449304] mmc2: Controller capabilities: 0x00000001
[ 1.449376] mmc2: 8 bit data mode disabled
[ 1.449447] mmc2: 4 bit data mode enabled
[ 1.449575] mmc2: polling status mode disabled
[ 1.449646] mmc2: MMC clock 400000 -> 48000000 Hz, PCLK 0 Hz
[ 1.449775] mmc2: Slot eject status = 1
[ 1.449847] mmc2: Power save feature enable = 1
[ 1.449920] mmc2: DM non-cached buffer at ffd60000, dma_addr 0x5b1e0000
[ 1.450050] mmc2: DM cmd busaddr 0x5b1e0000, cmdptr busaddr 0x5b1f7f40
[ 1.450376] lm3530_gpio_enable: on 1
[ 1.452429] LM3554 probe
[ 1.454512] lm3554 gpio138 :1
[ 1.454716] lm3554 TORCH BRIGHTNESS:218
[ 1.455697] LM3554 torch initialized
[ 1.456156] usbcore: registered new interface driver usbhid
[ 1.456229] usbhid: USB HID core driver
[ 1.456836] ashmem: initialized
[ 1.456954] logger: created 256K log 'log_main'
[ 1.457067] logger: created 256K log 'log_events'
[ 1.457243] logger: created 256K log 'log_radio'
[ 1.457359] logger: created 256K log 'log_system'
[ 1.457821] usbcore: registered new interface driver snd-usb-audio
[ 1.458409] msm-cpu-dai msm-cpu-dai.0: asoc_msm_cpu_probe: dev name msm-cpu-dai.0
[ 1.458667] msm-codec-dai msm-codec-dai.0: asoc_msm_codec_probe: dev name msm-codec-dai.0
[ 1.458921] msm-dsp-audio msm-dsp-audio.0: msm_pcm_probe: dev name msm-dsp-audio.0
[ 1.459731] asoc: msm-codec-dai <-> msm-cpu-dai.0 mapping ok
[ 1.460920] Mirror/redirect action on
[ 1.461001] u32 classifier
[ 1.461072] Actions configured
[ 1.461206] Netfilter messages via NETLINK v0.30.
[ 1.461321] nf_conntrack version 0.5.0 (11962 buckets, 47848 max)
[ 1.461925] ctnetlink v0.93: registering with nfnetlink.
[ 1.462036] NF_TPROXY: Transparent proxy support initialized, version 4.1.0
[ 1.462167] NF_TPROXY: Copyright (c) 2006-2007 BalaBit IT Ltd.
[ 1.462388] xt_time: kernel timezone is -0000
[ 1.462845] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 1.463077] arp_tables: (C) 2002 David S. Miller
[ 1.463199] TCP: cubic registered
[ 1.463629] NET: Registered protocol family 10
[ 1.465080] Mobile IPv6
[ 1.465180] ip6_tables: (C) 2000-2006 Netfilter Core Team
[ 1.465447] IPv6 over IPv4 tunneling driver
[ 1.466306] NET: Registered protocol family 17
[ 1.466460] NET: Registered protocol family 15
[ 1.466677] Bluetooth: RFCOMM TTY layer initialized
[ 1.466762] Bluetooth: RFCOMM socket layer initialized
[ 1.466893] Bluetooth: RFCOMM ver 1.11
[ 1.466966] Bluetooth: BNEP (Ethernet Emulation) ver 1.3
[ 1.467098] Bluetooth: BNEP filters: protocol multicast
[ 1.467171] Bluetooth: HIDP (Human Interface Emulation) ver 1.2
[ 1.467371] Registering the dns_resolver key type
[ 1.467706] VFP support v0.3: implementor 51 architecture 64 part 2d variant 0 rev 0
[ 1.467995] Registering SWP/SWPB emulation handler
[ 1.468067] clock_late_init: Removing enables held for handed-off clocks
[ 1.532949] bcm_wifi_power:5754 on[1] enter
[ 1.534697] MSM Watchdog Initialized
[ 1.560185] mmc0: new high speed MMC card at address 0001
[ 1.560673] mmcblk0: mmc0:0001 KLL00M 3.72 GiB
[ 1.564133] p1 (modem) p2 (sbl1) p3 (sbl2) p4 p5 (rpm) p6 (sbl3) p7 (aboot) p8 (boot) p9 (boot1) p10 (tz) p11 (misc) p12 (modem_st1) p13 (modem_st2) p14 p15 (system) p16 (system1) p17 (recovery) p18 (persist) p19 (cache) p20 (userdata)
[ 1.572493] mmcblk0: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 >
[ 1.671974] msm_sdc3_get_wpswitch:Failed to request GPIO 251
[ 1.672052] mmc1: host does not support reading read-only switch. assuming write-enable.
[ 1.674487] mmc1: new high speed SDHC card at address 0001
[ 1.674886] mmcblk1: mmc1:0001 SD 7.44 GiB
[ 1.678146] p1 (modem)
[ 1.678287] mmcblk1: p1
[ 1.833503] bcm_wifi_power:5765 on[1] leave
[ 1.833638] bcm_wifi_set_carddetect:5742 val[1]
[ 1.833711] mmc2: Slot status change detected (0 -> 1)
[ 1.835209] 8058_l5: Failed to create debugfs directory
[ 1.835356] 8058_l5: Failed to create debugfs directory
[ 1.835699] input: 8660_handset as /devices/platform/msm_ssbi.0/pm8058-core/pm8058-othc.1/input/input8
[ 1.836375] 8058_l5: Failed to create debugfs directory
[ 1.836686] rtc-pm8xxx rtc-pm8xxx: setting system clock to 1970-01-01 00:58:13 UTC (3493)
[ 1.869223] pmic8058_xoadc:The offset for AMUX calibrationwas -601
[ 1.882455] Fuel Gauge Not Ready!
[ 1.882531] Gauge IC Not Ready!
[ 1.882682] battery capacity very low = 1
[ 1.886011] pm8058-charger pm8058-charger: pm8058_chg_determine_initial_state charger present
[ 1.886445] battery capacity very low = 0
[ 1.887254] max17043 5-0036: max17043 Fuel-Gauge Ver 03
[ 1.888302] i2c-core: driver [max17043] using legacy suspend method
[ 1.888399] i2c-core: driver [max17043] using legacy resume method
[ 1.888594] synaptics_rmi4_i2c 3-0020: synaptics_rmi4_probe:request interrupt pin failed
[ 1.888737] synaptics_rmi4_i2c: probe of 3-0020 failed with error -16
[ 1.888917] ALSA device list:
[ 1.888990] #0: msm-audio
[ 1.889256] Warning: unable to open an initial console.
[ 1.889409] Freeing init memory: 100K
[ 1.893939] init: could not import file '/persist/init.cne.rc' from 'init.qcom.rc'
[ 1.894182] init: could not import file '/init.carrier.rc' from '/init.rc'
[ 1.894865] init (1): /proc/1/oom_adj is deprecated, please use /proc/1/oom_score_adj instead.
[ 1.895332] max17043 load_model 0x97 0x1c 0xc1 0xf8
[ 1.895573] init: do_chown: Could not access /selinux/booleans
[ 1.895713] init: do_chown: Could not access /sys/fs/selinux/booleans
[ 1.897482] init: invalid uid 'fm_radio'
[ 1.897507] mmc2: queuing unknown CIS tuple 0x80 (50 bytes)
[ 1.905507] mmc2: queuing unknown CIS tuple 0x80 (7 bytes)
[ 1.908391] mmc2: queuing unknown CIS tuple 0x80 (7 bytes)
[ 1.934462] mmc2: queuing unknown CIS tuple 0x02 (1 bytes)
[ 1.937587] mmc2: new SDIO card at address 0001
[ 1.940501] fake func->num 1
[ 1.940749] fake func->num 2
[ 1.940927] bcm_wifi_power:5754 on[0] enter
[ 2.241426] bcm_wifi_power:5765 on[0] leave
[ 2.241560] bcm_wifi_set_carddetect:5742 val[0]
[ 2.241632] mmc2: Slot status change detected (1 -> 0)
[ 2.242054] mmc2: card 0001 removed
[ 2.269896] max17043 soc:0xf7 0xe5 in 0xf6,0xf8 chk:0
[ 2.269973] max17043 vcell:3855 v_tmp:3850 ocv:3879
[ 2.491002] max17043 soc:60 60 v:3922
[ 2.692862] EXT4-fs (mmcblk0p15): mounted filesystem with ordered data mode. Opts: barrier=1
[ 2.699995] EXT4-fs (mmcblk0p19): mounted filesystem with ordered data mode. Opts: nomblk_io_submit,errors=remount-ro
[ 2.739112] fs_mgr: Running /system/bin/e2fsck on /dev/block/platform/msm_sdcc.1/by-name/cache
[ 2.819354] e2fsck: e2fsck 1.41.14 (22-Dec-2010)
[ 2.819470] e2fsck: /dev/block/platform/msm_sdcc.1/by-name/cache: clean, 25/11520 files, 4905/46080 blocks
[ 2.829229] EXT4-fs (mmcblk0p19): mounted filesystem with ordered data mode. Opts: barrier=1,data=ordered
[ 2.842709] EXT4-fs (mmcblk0p20): mounted filesystem with ordered data mode. Opts: nomblk_io_submit,errors=remount-ro
[ 2.889123] fs_mgr: Running /system/bin/e2fsck on /dev/block/platform/msm_sdcc.1/by-name/userdata
[ 2.909466] e2fsck: e2fsck 1.41.14 (22-Dec-2010)
[ 2.909568] e2fsck: /dev/block/platform/msm_sdcc.1/by-name/userdata: clean, 1209/121600 files, 25748/619504 blocks
[ 2.920942] EXT4-fs (mmcblk0p20): mounted filesystem with ordered data mode. Opts: barrier=1,data=ordered,noauto_da_alloc
[ 2.921909] EXT4-fs (mmcblk0p18): VFS: Can't find ext4 filesystem
[ 2.979137] fs_mgr: Failed to mount an un-encryptable or wiped partition on/dev/block/platform/msm_sdcc.1/by-name/persist at /persist options: barrier=1,data=ordered,nodelalloc error: Invalid argument
[ 2.979374] init: fs_mgr_mount_all returned an error
[ 3.282719] healthd: wakealarm_init: timerfd_create failed
[ 3.283993] binder: 156:156 transaction failed 29189, size 0-0
[ 3.290184] init: cannot find '/system/bin/wiperiface', disabling 'wiperiface'
[ 3.291814] init: cannot find '/system/bin/qseecomd', disabling 'qseecomd'
[ 3.292027] init: cannot find '/system/bin/qrngd', disabling 'qrngd'
[ 3.321392] init: service 'console' requires console
[ 3.324310] init: cannot find '/system/bin/time_daemon', disabling 'time_daemon'
[ 3.324983] enable_store: android_usb: already disabled
[ 3.329700] init: using deprecated syntax for specifying property 'sys.usb.config', use ${name} instead
[ 3.341944] adb_open
[ 3.371234] init: cannot find '/system/bin/quipc_igsn', disabling 'quipc_igsn'
[ 3.396424] init: service 'console' requires console
[ 3.396796] init: cannot find '/system/bin/quipc_main', disabling 'quipc_main'
[ 3.530566] android_work: android_work: sent uevent USB_STATE=CONNECTED
[ 3.599139] android_usb gadget: high-speed config #1: android_usb
[ 3.659214] android_work: android_work: sent uevent USB_STATE=CONFIGURED
[ 4.145397] msm_ioctl_server: Invalid IOCTL = -1073457471
[ 4.145566] msm_ioctl_server: Invalid IOCTL = -1073457469
[ 4.369177] msm-charger msm-charger: handle_charger_ready: best charger = pm8058-usb
[ 4.369407] pm8058-charger pm8058-charger: __pm8058_start_charging 450mA 480min
[ 4.370233] pm8058-charger pm8058-charger: pm8058_chg_fastchg_handler begin fast charging
[ 4.409279] msm-charger msm-charger: handle_charger_ready: starting safety timer
[ 4.459758] max17043 soc:60 60 v:3883
[ 4.461567] pil pil0: q6: Brought out of reset
[ 4.494296] apr_tal:Q6 Is Up
[ 4.690777] mdp4_csc_config: Block type 10 isn't supported by CSC.
[ 4.690868] mdp4_csc_config: Block type 8 isn't supported by CSC.
[ 4.694158] mdp4_calc_req_mdp_clk: src_h is zero!
[ 4.965461] hdmi_msm hdmi_msm.1: hdmi_msm_hpd_feature: 1
[ 4.965643] 8901_hdmi_mvs: Failed to create debugfs directory
[ 4.965818] hdmi_enable_5v(on): success
[ 5.155860] auddev_cb_function, evt_id=64,
[ 5.155950] msm_reset_put:Resetting all devices
[ 5.156024] msm_clear_all_session:
[ 5.678490] ------------[ cut here ]------------
[ 5.678574] kernel BUG at ../../../../../../kernel/xiaomi/mione_plus/lib/genalloc.c:252!
[ 5.678707] Internal error: Oops - BUG: 0 [#1] PREEMPT SMP ARM
[ 5.678782] Modules linked in:
[ 5.678982] CPU: 0 Tainted: G W (3.4.0-perf-gc02987471fb #1)
[ 5.679070] PC is at gen_pool_destroy+0x74/0xb8
[ 5.679209] LR is at gen_pool_destroy+0x68/0xb8
[ 5.679287] pc : [] lr : [] psr: 80000013
[ 5.679291] sp : daaefd58 ip : 00000000 fp : 00200200
[ 5.679490] r10: 0000000c r9 : 00100100 r8 : dac2f384
[ 5.679623] r7 : dac2f384 r6 : dac2f380 r5 : 0000fff0 r4 : e6d03000
[ 5.679697] r3 : 00002016 r2 : 00000000 r1 : 0000fff0 r0 : 00000000
[ 5.679831] Flags: Nzcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user
[ 5.679905] Control: 10c5787d Table: 5adbc06a DAC: 00000015
[ 5.680035]
[ 5.680037] PC: 0xc03b97d0:
[ 5.680172] 97d0 e1a00008 e28dd024 e8bd8ff0 e92d4ff7 e1a07000 e5b74004 e1a06000 e590a00c
[ 5.680916] 97f0 e59f9094 e5948000 e59fb090 ea00001c e894000c e2840018 e5823004 e5832000
[ 5.681657] 9810 e3a02000 e5943010 e5945014 e8840a00 e0635005 e1a05a35 e2953007 4285300e
[ 5.682342] 9830 e1a01005 e1a031c3 e2833018 e58d3004 ebffb5ba e59d3004 e1500005 aa000000
[ 5.683080] 9850 e7f001f2 e3530a01 e1a00004 8a000001 ebfa26a3 ea000000 ebfa025a e1a04008
[ 5.683825] 9870 e5988000 e1540007 1affffe0 e1a00006 e28dd00c e8bd4ff0 eafa2699 00100100
[ 5.684565] 9890 00200200 e59f3048 e92d4010 e1a04000 e5930018 e3500000 0a000005 e3a010d0
[ 5.685262] 98b0 e3a02010 ebfa286b e3500000 1a000001 e8bd8010 e3a00010 e1a03000 e3a02000
[ 5.686014]
[ 5.686017] LR: 0xc03b97c4:
[ 5.686154] 97c4 1affff9e e3a08000 ebf8b9ed e1a00008 e28dd024 e8bd8ff0 e92d4ff7 e1a07000
[ 5.686950] 97e4 e5b74004 e1a06000 e590a00c e59f9094 e5948000 e59fb090 ea00001c e894000c
[ 5.687723] 9804 e2840018 e5823004 e5832000 e3a02000 e5943010 e5945014 e8840a00 e0635005
[ 5.688500] 9824 e1a05a35 e2953007 4285300e e1a01005 e1a031c3 e2833018 e58d3004 ebffb5ba
[ 5.689224] 9844 e59d3004 e1500005 aa000000 e7f001f2 e3530a01 e1a00004 8a000001 ebfa26a3
[ 5.689968] 9864 ea000000 ebfa025a e1a04008 e5988000 e1540007 1affffe0 e1a00006 e28dd00c
[ 5.690637] 9884 e8bd4ff0 eafa2699 00100100 00200200 e59f3048 e92d4010 e1a04000 e5930018
[ 5.691309] 98a4 e3500000 0a000005 e3a010d0 e3a02010 ebfa286b e3500000 1a000001 e8bd8010
[ 5.692042]
[ 5.692044] SP: 0xdaaefcd8:
[ 5.692235] fcd8 c0ef8e98 db1ce180 c0dc3d44 daaefdbc c0e1c0a8 c02acb54 00000000 dac2fa00
[ 5.692907] fcf8 daaefd30 c03b9854 80000013 c0106594 00000000 c0106328 00000000 0000fff0
[ 5.693636] fd18 00000000 00002016 e6d03000 0000fff0 dac2f380 dac2f384 dac2f384 00100100
[ 5.694309] fd38 0000000c 00200200 00000000 daaefd58 c03b9844 c03b9850 80000013 ffffffff
[ 5.694990] fd58 dac2f380 00002016 00000000 db1b0684 c0dc1200 db1b0680 c0dc1200 db1ce180
[ 5.695722] fd78 c0dc3d44 daaefdbc c0e1c0a8 c04613f8 db1b0680 db1ce18c db1ce180 daaee000
[ 5.696449] fd98 dac2ff00 c0454350 00000000 c0dc3ae8 00000000 c04577d4 da67a8e0 db1ce188
[ 5.697178] fdb8 00000000 00000000 00000000 db1cea80 daa47160 00000008 da606e80 daffa550
[ 5.697851]
[ 5.697853] R4: 0xe6d02f80:
[ 5.698043] 2f80 ******** ******** ******** ******** ******** ******** ******** ********
[ 5.698727] 2fa0 ******** ******** ******** ******** ******** ******** ******** ********
[ 5.699470] 2fc0 ******** ******** ******** ******** ******** ******** ******** ********
[ 5.700239] 2fe0 ******** ******** ******** ******** ******** ******** ******** ********
[ 5.701006] 3000 00100100 00200200 0ffdc000 ffffffff 10000000 1fff0000 000fffff 00000000
[ 5.701718] 3020 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[ 5.702502] 3040 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[ 5.703258] 3060 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[ 5.703980]
[ 5.703982] R6: 0xdac2f300:
[ 5.704116] f300 0000000a 00000000 dac2ff80 dac2f1c0 00000001 00000000 00000000 00000000
[ 5.704838] f320 00000000 01b77c00 dab81660 00000001 dac2e910 41ed0001 00004ee9 00000000
[ 5.705505] f340 e6d7e000 e6d80000 00000005 dabaeb8d dac8a14c db1fc98c db1fcb58 db1fce58
[ 5.706233] f360 00000000 00000000 dac2f5c0 00000000 00000000 00000000 00000000 00000000
[ 5.706964] f380 00010001 dac2f384 dac2f384 0000000c 00000000 dab459ec c019dec8 00000134
[ 5.707695] f3a0 c0da7b68 daf0c8a4 00200200 00000000 00000000 00000000 00000000 00000000
[ 5.708373] f3c0 e6d09000 e6d0b000 00000005 dac2f84c dac2f7cc dac2f08c dac2f7d8 dac2f098
[ 5.709106] f3e0 00000000 00000000 dac2f180 00000000 00000000 00000000 00000000 00000000
[ 5.709842]
[ 5.709845] R7: 0xdac2f304:
[ 5.709980] f304 00000000 dac2ff80 dac2f1c0 00000001 00000000 00000000 00000000 00000000
[ 5.710752] f324 01b77c00 dab81660 00000001 dac2e910 41ed0001 00004ee9 00000000 e6d7e000
[ 5.711518] f344 e6d80000 00000005 dabaeb8d dac8a14c db1fc98c db1fcb58 db1fce58 00000000
[ 5.712234] f364 00000000 dac2f5c0 00000000 00000000 00000000 00000000 00000000 00010001
[ 5.713015] f384 dac2f384 dac2f384 0000000c 00000000 dab459ec c019dec8 00000134 c0da7b68
[ 5.713778] f3a4 daf0c8a4 00200200 00000000 00000000 00000000 00000000 00000000 e6d09000
[ 5.714457] f3c4 e6d0b000 00000005 dac2f84c dac2f7cc dac2f08c dac2f7d8 dac2f098 00000000
[ 5.715190] f3e4 00000000 dac2f180 00000000 00000000 00000000 00000000 00000000 dac2f400
[ 5.715918]
[ 5.715921] R8: 0xdac2f304:
[ 5.716055] f304 00000000 dac2ff80 dac2f1c0 00000001 00000000 00000000 00000000 00000000
[ 5.716787] f324 01b77c00 dab81660 00000001 dac2e910 41ed0001 00004ee9 00000000 e6d7e000
[ 5.717516] f344 e6d80000 00000005 dabaeb8d dac8a14c db1fc98c db1fcb58 db1fce58 00000000
[ 5.718185] f364 00000000 dac2f5c0 00000000 00000000 00000000 00000000 00000000 00010001
[ 5.718915] f384 dac2f384 dac2f384 0000000c 00000000 dab459ec c019dec8 00000134 c0da7b68
[ 5.719643] f3a4 daf0c8a4 00200200 00000000 00000000 00000000 00000000 00000000 e6d09000
[ 5.720369] f3c4 e6d0b000 00000005 dac2f84c dac2f7cc dac2f08c dac2f7d8 dac2f098 00000000
[ 5.721038] f3e4 00000000 dac2f180 00000000 00000000 00000000 00000000 00000000 dac2f400
[ 5.721709] Process surfaceflinger (pid: 164, stack limit = 0xdaaee2f0)
[ 5.721839] Stack: (0xdaaefd58 to 0xdaaf0000)
[ 5.721912] fd40: dac2f380 00002016
[ 5.722046] fd60: 00000000 db1b0684 c0dc1200 db1b0680 c0dc1200 db1ce180 c0dc3d44 daaefdbc
[ 5.722122] fd80: c0e1c0a8 c04613f8 db1b0680 db1ce18c db1ce180 daaee000 dac2ff00 c0454350
[ 5.722256] fda0: 00000000 c0dc3ae8 00000000 c04577d4 da67a8e0 db1ce188 00000000 00000000
[ 5.722390] fdc0: 00000000 db1cea80 daa47160 00000008 da606e80 daffa550 00000000 db1cea88
[ 5.722525] fde0: daac9028 c024a284 00000000 00000000 db1cea80 00000000 db122200 dac99300
[ 5.722601] fe00: 00000040 daaee000 00000000 c0246708 db122200 00000000 00007fff c01836fc
[ 5.722735] fe20: c13cb140 daa67480 00000006 daac94c4 00000006 daaeff00 00000001 c0183b20
[ 5.722867] fe40: 00000000 00000000 0000008d 00000000 daa67480 00000006 daaee000 daac94c4
[ 5.723003] fe60: 00000006 daaeff00 daaee000 020c0027 daac9028 c01845c0 00000003 daaee000
[ 5.723080] fe80: daaee000 daac94c4 00000006 c0193970 b6e7480e daac8fc0 daab2fc0 daaeffb0
[ 5.723213] fea0: daac9024 daaefeec 00000006 daaeffb0 00000000 00000016 c0106828 b6eba0f0
[ 5.723347] fec0: daaee000 b6eba0f4 b6e7480e c0109864 b6e7480e c0192748 00000006 200f0013
[ 5.723423] fee0: daa67480 00000000 00000006 daa67480 00000000 c0192860 daaeff10 daaee000
[ 5.723556] ff00: 00000006 00000000 fffffffa 000000a4 000003e8 00000001 00000000 c0260ec4
[ 5.723690] ff20: 00000003 db1fd000 da669ca0 00000008 da680780 b6f39bb8 00000006 0000001f
[ 5.723824] ff40: daaeff58 c01903ac daaeff90 c0191324 daa67480 daaeff90 daac94c4 daaee000
[ 5.723901] ff60: daa67480 c0193d2c 00000000 daaee000 00000002 c0194f90 fffbfedf fffbfedf
[ 5.724034] ff80: 00000002 00000001 00000006 00000016 0000010c 00000000 daaee000 00000000
[ 5.724167] ffa0: b6e7480e c010a0f0 b6f4bf2c c01066d8 00000000 000000a4 00000006 00000000
[ 5.724301] ffc0: b6f4bf2c 00000006 00000016 0000010c 00000001 0000000c b6e74905 b6e7480e
[ 5.724377] ffe0: 000000a4 beb66398 b6eab1ab b6eba0f4 000f0010 000000a4 5c4fd821 5c4fdc21
[ 5.724531] [] (gen_pool_destroy+0x74/0xb8) from [] (kgsl_destroy_pagetable+0x15c/0x194)
[ 5.724678] [] (kgsl_destroy_pagetable+0x15c/0x194) from [] (kgsl_destroy_process_private+0x54/0xa4)
[ 5.724819] [] (kgsl_destroy_process_private+0x54/0xa4) from [] (kgsl_release+0x290/0x2ac)
[ 5.724963] [] (kgsl_release+0x290/0x2ac) from [] (fput+0x10c/0x21c)
[ 5.725044] [] (fput+0x10c/0x21c) from [] (filp_close+0x70/0x7c)
[ 5.725184] [] (filp_close+0x70/0x7c) from [] (put_files_struct+0x90/0xec)
[ 5.725323] [] (put_files_struct+0x90/0xec) from [] (do_exit+0x250/0x8d8)
[ 5.725459] [] (do_exit+0x250/0x8d8) from [] (do_group_exit+0x118/0x158)
[ 5.725543] [] (do_group_exit+0x118/0x158) from [] (get_signal_to_deliver+0x698/0x768)
[ 5.725687] [] (get_signal_to_deliver+0x698/0x768) from [] (do_signal+0xc0/0x4d4)
[ 5.725828] [] (do_signal+0xc0/0x4d4) from [] (do_notify_resume+0x18/0x50)
[ 5.725970] [] (do_notify_resume+0x18/0x50) from [] (work_pending+0x24/0x28)
[ 5.726109] Code: ebffb5ba e59d3004 e1500005 aa000000 (e7f001f2)
[ 5.728359] ---[ end trace d0737ebb5ab15f62 ]---
[ 5.728503] Kernel panic - not syncing: Fatal exception
[ 5.728585] CPU1: stopping
[ 5.728681] [] (unwind_backtrace+0x0/0x11c) from [] (handle_IPI+0x150/0x2e8)
[ 5.728821] [] (handle_IPI+0x150/0x2e8) from [] (gic_handle_irq+0x1b0/0x1c0)
[ 5.728963] [] (gic_handle_irq+0x1b0/0x1c0) from [] (__irq_svc+0x40/0x70)
[ 5.729098] Exception stack(0xdacd5cd8 to 0xdacd5d20)
[ 5.729173] 5cc0: c1851be0 ffffffff
[ 5.729309] 5ce0: c1851bec c1851be0 dacd5dc0 b6845000 dacf9058 00000000 b6961000 dacfc114
[ 5.729445] 5d00: dacd4000 c1851be0 da696a70 dacd5d24 c022d960 c0235d00 60000013 ffffffff
[ 5.729526] [] (__irq_svc+0x40/0x70) from [] (page_remove_rmap+0x18/0x50)
[ 5.729670] [] (page_remove_rmap+0x18/0x50) from [] (unmap_single_vma+0x368/0x630)
[ 5.729809] [] (unmap_single_vma+0x368/0x630) from [] (unmap_vmas+0x38/0x54)
[ 5.729948] [] (unmap_vmas+0x38/0x54) from [] (exit_mmap+0xd0/0x1d0)
[ 5.730035] [] (exit_mmap+0xd0/0x1d0) from [] (mmput+0x3c/0x194)
[ 5.730176] [] (mmput+0x3c/0x194) from [] (exit_mm+0x194/0x1b0)
[ 5.730313] [] (exit_mm+0x194/0x1b0) from [] (do_exit+0x1e0/0x8d8)
[ 5.730392] [] (do_exit+0x1e0/0x8d8) from [] (do_group_exit+0x118/0x158)
[ 5.730536] [] (do_group_exit+0x118/0x158) from [] (get_signal_to_deliver+0x698/0x768)
[ 5.730679] [] (get_signal_to_deliver+0x698/0x768) from [] (do_signal+0xc0/0x4d4)
[ 5.730821] [] (do_signal+0xc0/0x4d4) from [] (do_notify_resume+0x18/0x50)
[ 5.730960] [] (do_notify_resume+0x18/0x50) from [] (work_pending+0x24/0x28)
[ 5.831293] subsystem-fatal-8x60: Q6 NMI was sent.
[ 6.086742] msm_ioctl_server: Invalid IOCTL = -1073457471
[ 6.086844] msm_ioctl_server: Invalid IOCTL = -1073457469
[ 8.090759] warning: `zygote' uses 32-bit capabilities (legacy support in use)
The text was updated successfully, but these errors were encountered: