I have removed ethernet, audio, video, mmc in dts file of our own.
Even Kernel itself, I removed the drivers.
But the same problem happens in around the same location.
There is a suspicious point.
After removing drivers, the location of oops is the same like below.
* In u-boot for mfg, #define CONFIG_BOOTCOMMAND "bootz 10800000 12c00000 18000000"
U-Boot 2016.01-dirty (Jun 22 2017 - 19:17:05 +0900)
CPU: Freescale i.MX6Q rev1.5 at 792MHz
CPU: Industrial temperature grade (-40C to 105C) at 37C
Reset cause: POR
Board: MX6Q-Einsys
I2C: ready
DRAM: 1 GiB
PMIC: PFUZE100 ID=0x10
MMC: FSL_SDHC: 0
*** Warning - bad CRC, using default environment
In: serial
Out: serial
Err: serial
Net: FEC [PRIME]
Warning: FEC (eth0) using random MAC address - ca:75:03:a2:87:68
Hit any key to stop autoboot: 0
Kernel image @ 0x10800000 [ 0x000000 - 0x4f3080 ]
## Loading init Ramdisk from Legacy Image at 12c00000 ...
Image Name: fsl-image-mfgtool-initramfs-imx6
Image Type: ARM Linux RAMDisk Image (gzip compressed)
Data Size: 8591032 Bytes = 8.2 MiB
Load Address: 00000000
Entry Point: 00000000
Verifying Checksum ... OK
## Flattened Device Tree blob at 18000000
Booting using the fdt blob at 0x18000000
Loading Ramdisk to 4ed1b000, end 4f54c6b8 ... OK
Loading Device Tree to 4ed0f000, end 4ed1aba3 ... OK
Starting kernel ...
Booting Linux on physical CPU 0x0
Linux version 4.1.15+ (mach@sip) (gcc version 5.4.1 20170404 (Linaro GCC 5.4-2017.05) ) #1 SMP PREEMPT Thu Jun 22 20:52:08 KST 2017
CPU: ARMv7 Processor [412fc09a] revision 10 (ARMv7), cr=10c5387d
CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
Machine model: Freescale i.MX6 Quad Einsys Board
Reserved memory: created CMA memory pool at 0x3a000000, size 320 MiB
Reserved memory: initialized node linux,cma, compatible id shared-dma-pool
Memory policy: Data cache writealloc
PERCPU: Embedded 12 pages/cpu @bf70b000 s16768 r8192 d24192 u49152
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 260096
Kernel command line: console=ttymxc0,115200 rdinit=/linuxrc
PID hash table entries: 4096 (order: 2, 16384 bytes)
Dentry cache hash table entries: 131072 (order: 7, 524288 bytes)
Inode-cache hash table entries: 65536 (order: 6, 262144 bytes)
Memory: 692924K/1048576K available (6371K kernel code, 239K rwdata, 2156K rodata, 380K init, 413K bss, 27972K reserved, 327680K cma-reserved, 0K highmem)
Virtual kernel memory layout:
vector : 0xffff0000 - 0xffff1000 ( 4 kB)
fixmap : 0xffc00000 - 0xfff00000 (3072 kB)
vmalloc : 0xc0800000 - 0xff000000 (1000 MB)
lowmem : 0x80000000 - 0xc0000000 (1024 MB)
pkmap : 0x7fe00000 - 0x80000000 ( 2 MB)
modules : 0x7f000000 - 0x7fe00000 ( 14 MB)
.text : 0x80008000 - 0x8085c1f4 (8529 kB)
.init : 0x8085d000 - 0x808bc000 ( 380 kB)
.data : 0x808bc000 - 0x808f7d00 ( 240 kB)
.bss : 0x808fa000 - 0x809615b4 ( 414 kB)
SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
Preemptible hierarchical RCU implementation.
Additional per-CPU info printed with stalls.
NR_IRQS:16 nr_irqs:16 16
L2C-310 erratum 769419 enabled
L2C-310 enabling early BRESP for Cortex-A9
L2C-310 full line of zeros enabled for Cortex-A9
L2C-310 ID prefetch enabled, offset 16 lines
L2C-310 dynamic clock gating enabled, standby mode enabled
L2C-310 cache controller enabled, 16 ways, 1024 kB
L2C-310: CACHE_ID 0x410000c7, AUX_CTRL 0x76470001
mxc_clocksource_init 3000000
Switching to timer-based delay loop, resolution 333ns
sched_clock: 32 bits at 3000kHz, resolution 333ns, wraps every 715827882841ns
clocksource mxc_timer1: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 637086815595 ns
Console: colour dummy device 80x30
Calibrating delay loop (skipped), value calculated using timer frequency.. 6.00 BogoMIPS (lpj=30000)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 2048 (order: 1, 8192 bytes)
Mountpoint-cache hash table entries: 2048 (order: 1, 8192 bytes)
CPU: Testing write buffer coherency: ok
CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
Setting up static identity map for 0x10008280 - 0x100082f0
CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
CPU2: thread -1, cpu 2, socket 0, mpidr 80000002
CPU3: thread -1, cpu 3, socket 0, mpidr 80000003
Brought up 4 CPUs
SMP: Total of 4 processors activated (24.00 BogoMIPS).
CPU: All CPU(s) started in SVC mode.
devtmpfs: initialized
VFP support v0.3: implementor 41 architecture 3 part 30 variant 9 rev 4
clocksource jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
pinctrl core: initialized pinctrl subsystem
NET: Registered protocol family 16
DMA: preallocated 256 KiB pool for atomic coherent allocations
cpuidle: using governor ladder
cpuidle: using governor menu
CPU identified as i.MX6Q, silicon rev 1.5
hw-breakpoint: found 5 (+1 reserved) breakpoint and 1 watchpoint registers.
hw-breakpoint: maximum watchpoint size is 4 bytes.
imx6q-pinctrl 20e0000.iomuxc: initialized IMX pinctrl driver
mxs-dma 110000.dma-apbh: initialized
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
2000000.aips-bus:usbphy_nop1 supply vcc not found, using dummy regulator
2000000.aips-bus:usbphy_nop2 supply vcc not found, using dummy regulator
i2c i2c-1: IMX I2C adapter registered
i2c i2c-1: can't use DMA
i2c i2c-2: IMX I2C adapter registered
i2c i2c-2: can't use DMA
Linux video capture interface: v2.00
pps_core: LinuxPPS API ver. 1 registered
pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
PTP clock support registered
imx-ipuv3 2400000.ipu: IPU DMFC NORMAL mode: 1(0~1), 5B(4,5), 5F(6,7)
imx-ipuv3 2800000.ipu: IPU DMFC NORMAL mode: 1(0~1), 5B(4,5), 5F(6,7)
Advanced Linux Sound Architecture Driver Initialized.
Switched to clocksource mxc_timer1
NET: Registered protocol family 2
TCP established hash table entries: 8192 (order: 3, 32768 bytes)
TCP bind hash table entries: 8192 (order: 4, 65536 bytes)
TCP: Hash tables configured (established 8192 bind 8192)
UDP hash table entries: 512 (order: 2, 16384 bytes)
UDP-Lite hash table entries: 512 (order: 2, 16384 bytes)
NET: Registered protocol family 1
RPC: Registered named UNIX socket transport module.
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
RPC: Registered tcp NFSv4.1 backchannel transport module.
Trying to unpack rootfs image as initramfs...
Freeing initrd memory: 8392K (bed1b000 - bf54d000)
CPU PMU: Failed to parse /soc/pmu/interrupt-affinity[0]
hw perfevents: enabled with armv7_cortex_a9 PMU driver, 7 counters available
imx rpmsg driver is registered.
Bus freq driver module loaded
futex hash table entries: 1024 (order: 4, 65536 bytes)
VFS: Disk quotas dquot_6.6.0
VFS: Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
NFS: Registering the id_resolver key type
Key type id_resolver registered
Key type id_legacy registered
jffs2: version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
fuse init (API version 7.23)
io scheduler noop registered
io scheduler deadline registered
io scheduler cfq registered (default)
imx-weim 21b8000.weim: Driver registered.
imx-sdma 20ec000.sdma: no iram assigned, using external mem
imx-sdma 20ec000.sdma: no event needs to be remapped
imx-sdma 20ec000.sdma: loaded firmware 3.3
imx-sdma 20ec000.sdma: initialized
pfuze100-regulator 1-0008: Full layer: 2, Metal layer: 1
pfuze100-regulator 1-0008: FAB: 0, FIN: 0
pfuze100-regulator 1-0008: pfuze100 found.
2020000.serial: ttymxc0 at MMIO 0x2020000 (irq = 24, base_baud = 5000000) is a IMX
console [ttymxc0] enabled
21e8000.serial: ttymxc1 at MMIO 0x21e8000 (irq = 289, base_baud = 5000000) is a IMX
imx sema4 driver is registered.
[drm] Initialized drm 1.1.0 20060810
[drm] Initialized vivante 1.0.0 20120216 on minor 0
brd: module loaded
loop: module loaded
spi_imx 2008000.ecspi: probed
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
ehci-mxc: Freescale On-Chip EHCI Host driver
usbcore: registered new interface driver usb-storage
udc-core: couldn't find an available UDC - added [g_mass_storage] to list of pending drivers
mousedev: PS/2 mouse device common for all mice
snvs_rtc 20cc000.snvs:snvs-rtc-lp: rtc core: registered 20cc000.snvs:snvs-r as rtc0
i2c /dev entries driver
imx2-wdt 20c0000.wdog: use WDOG_B to reboot.
imx2-wdt 20c0000.wdog: timeout 60 sec (nowayout=0)
mxc_vpu 2040000.vpu_fsl: VPU initialized
mxc_vdoa 21e4000.vdoa: i.MX Video Data Order Adapter(VDOA) driver probed
usbcore: registered new interface driver usbhid
usbhid: USB HID core driver
NET: Registered protocol family 17
Key type dns_resolver registered
Registering SWP/SWPB emulation handler
snvs_rtc 20cc000.snvs:snvs-rtc-lp: setting system clock to 1970-01-01 04:08:39 UTC (14919)
VGEN3: disabling
VGEN2: disabling
VGEN1: disabling
SWBST: disabling
SW4: disabling
ssm2604-supply: disabling
usb_h1_vbus: disabling
usb_otg_vbus: disabling
ALSA device list:
No soundcards found.
Freeing unused kernel memory: 380K (8085d000 - 808bc000)
Unable to handle kernel paging request at virtual address bf7309c4
pgd = a8558000
[bf7309c4] *pgd=4f61141e(bad)
Internal error: Oops: 8000000d [#1] PREEMPT SMP ARM
Modules linked in:
CPU: 3 PID: 61 Comm: linuxrc Not tainted 4.1.15+ #1
Hardware name: Freescale i.MX6 Quad/DualLite (Device Tree)
task: a8518000 ti: a8514000 task.ti: a8514000
PC is at 0xbf7309c4
LR is at rational_best_approximation+0x6c/0xb8
pc : [<bf7309c4>] lr : [<802b7854>] psr: 60000193
sp : a8515d30 ip : 808f6ecc fp : 808f6b40
r10: 000004c0 r9 : 00000008 r8 : 808f6b40
r7 : 00000000 r6 : 800bbf84 r5 : 808f6b40 r4 : 00000001
r3 : 800bc950 r2 : 807be5ac r1 : 00000000 r0 : 00000001
Flags: nZCv IRQs off FIQs on Mode SVC_32 ISA ARM Segment user
Control: 10c5387d Table: 3855804a DAC: 00000015
Process linuxrc (pid: 61, stack limit = 0xa8514210)
Stack: (0xa8515d30 to 0xa8516000)
5d20: bf76da80 800bc950 000000c0 bf7309a0
5d40: 800bbeb4 00000000 00000fcc bf76db60 808b89a0 3ee78000 bf7309a0 a8515e20
5d60: 00031000 000d5000 808be4d4 800bcc9c bf76db60 00030000 bf76db60 00000000
5d80: a8515e20 800bcd00 a84ea0c0 00030000 bf76db60 800d15ec 10b5b59f a84df8f0
5da0: a852c000 00000000 bfc60d5c a850a1c0 000d5000 a8514000 a852c000 000d4fff
5dc0: 000004c0 ffffffe0 00000000 00000000 808f7980 a84df8f0 ffffffff a8515e20
5de0: 00000000 00000000 a8516000 a8520000 00000001 800d2568 00000000 a850a1c0
5e00: a84df8f0 a850a1c0 a8515e48 a8518408 a850a1c0 800d845c 00000001 80614b44
5e20: a850a1c0 00000001 00000000 00000000 ffffffff 00000000 00000100 00000020
5e40: 00000400 a8563000 20000113 a8562000 00000000 00000000 a850a1c0 00000000
5e60: a8556000 a8518408 a850a1c0 00000000 a8556000 80035c08 a850a1c0 a8518000
5e80: a8556000 800f3414 a8561000 a85620c0 a855f034 a855f000 a8516000 a855f034
5ea0: a8515eb8 a8560000 a8561000 a8562000 00000001 80132f6c a8516000 00000080
5ec0: a85620c0 00000000 00000001 a8516000 ffffe000 a8515efc a8514000 00000005
5ee0: 00000000 800f22ac 00000017 a8515efc 00000000 7effff88 00000000 014d7e80
5f00: bff41420 bf521f88 00000006 a8516000 808cd64c fffffff8 80948858 00000001
5f20: 808cdabc 00000001 80782bcc 800f2cd0 00000000 a8518000 0000003d 014d80f0
5f40: a8530000 a8516000 00000000 ffffe000 00000001 800f3ea8 a8556038 00000000
5f60: 00000000 a8518270 00000000 014d72b0 014d80f0 000e971c 0000000b 8000f644
5f80: a8514000 00000000 00000000 800f4260 00000000 00000000 76fa4694 014d7f28
5fa0: 014d7e60 8000f4c0 014d7f28 014d7e60 014d7e60 014d72b0 014d80f0 000eab9c
5fc0: 014d7f28 014d7e60 000e971c 0000000b 014d80f0 014d7e60 014d7e80 00000000
5fe0: 76eba520 7ea3ea84 0003c658 76eba52c 60070010 014d7e60 dddff7fe 6f7bdbff
[<802b7854>] (rational_best_approximation) from [<a8515e20>] (0xa8515e20)
Code: bf76d9e0 bf76da00 bf76da20 bf76da60 (bf76da80)
---[ end trace 1b2c6870516c0976 ]---
note: linuxrc[61] exited with preempt_count 3
INFO: rcu_preempt detected stalls on CPUs/tasks:
3: (78 GPs behind) idle=841/140000000000000/0 softirq=11/17 fqs=2101
(detected by 0, t=2102 jiffies, g=-216, c=-217, q=127)
Task dump for CPU 3:
linuxrc R running 0 61 1 0x00000002
[<80611004>] (__schedule) from [<a8515efc>] (0xa8515efc)
random: nonblocking pool is initialized
INFO: rcu_preempt detected stalls on CPUs/tasks:
3: (78 GPs behind) idle=841/140000000000000/0 softirq=11/17 fqs=8404
(detected by 0, t=8407 jiffies, g=-216, c=-217, q=131)
Task dump for CPU 3:
linuxrc R running 0 61 1 0x00000002
[<80611004>] (__schedule) from [<a8515efc>] (0xa8515efc)
INFO: rcu_preempt detected stalls on CPUs/tasks:
3: (78 GPs behind) idle=841/140000000000000/0 softirq=11/17 fqs=14707
(detected by 0, t=14712 jiffies, g=-216, c=-217, q=131)
Task dump for CPU 3:
linuxrc R running 0 61 1 0x00000002
[<80611004>] (__schedule) from [<a8515efc>] (0xa8515efc)
INFO: rcu_preempt detected stalls on CPUs/tasks:
3: (78 GPs behind) idle=841/140000000000000/0 softirq=11/17 fqs=21010
(detected by 0, t=21017 jiffies, g=-216, c=-217, q=131)
Task dump for CPU 3:
linuxrc R running 0 61 1 0x00000002
[<80611004>] (__schedule) from [<a8515efc>] (0xa8515efc)
INFO: rcu_preempt detected stalls on CPUs/tasks:
3: (78 GPs behind) idle=841/140000000000000/0 softirq=11/17 fqs=27313
(detected by 0, t=27322 jiffies, g=-216, c=-217, q=131)
Task dump for CPU 3:
linuxrc R running 0 61 1 0x00000002
[<80611004>] (__schedule) from [<a8515efc>] (0xa8515efc)
INFO: rcu_preempt detected stalls on CPUs/tasks:
3: (78 GPs behind) idle=841/140000000000000/0 softirq=11/17 fqs=33616
(detected by 0, t=33627 jiffies, g=-216, c=-217, q=131)
Task dump for CPU 3:
linuxrc R running 0 61 1 0x00000002
[<80611004>] (__schedule) from [<a8515efc>] (0xa8515efc)
DLL version: 2.7.0
Thursday, June 22, 2017 21:08:38 Start new logging
ModuleID[2] LevelID[10]: CMyExceptionHandler thread is running
ModuleID[2] LevelID[1]: new MxHidDeviceClass
ModuleID[2] LevelID[10]: new MxHidDevice[06C3D340]
ModuleID[2] LevelID[1]: new MxHidDeviceClass
ModuleID[2] LevelID[10]: new MxHidDevice[06C3E600]
ModuleID[2] LevelID[1]: new MxHidDeviceClass
ModuleID[2] LevelID[10]: new MxHidDevice[06C3E9C0]
ModuleID[2] LevelID[1]: new MxHidDeviceClass
ModuleID[2] LevelID[10]: new MxHidDevice[06C900A0]
ModuleID[2] LevelID[1]: new MxHidDeviceClass
ModuleID[2] LevelID[10]: new MxHidDevice[06C90758]
ModuleID[2] LevelID[1]: new MxHidDeviceClass
ModuleID[2] LevelID[10]: new MxHidDevice[06C90A10]
ModuleID[2] LevelID[1]: new MxHidDeviceClass
ModuleID[2] LevelID[10]: new MxHidDevice[06C90DD0]
ModuleID[2] LevelID[10]: Device Manager thread is running
ModuleID[2] LevelID[1]: Can't set m_hStopEvent before it initialized or it already stop
ModuleID[2] LevelID[10]: CmdOperation[0] device chagned and reset to state 0
ModuleID[2] LevelID[10]: ExecuteCommand--Boot[WndIndex:0], File is I:\Freescale\MFG_TOOL\L4.1.15_2.0.0-ga_mfg-tools\mfgtools-with-rootfs\mfgtools\Profiles\Linux\OS Firmware\firmware\u-boot-imx6qeinsys_mfg.imx
ModuleID[2] LevelID[10]: CmdOperation[0], skip current command, so SetEvent(hDevCanDeleteEvent)
ModuleID[2] LevelID[10]: CmdOperation[0], skip current command, so SetEvent(hDevCanDeleteEvent)
ModuleID[2] LevelID[10]: CmdOperation[0], skip current command, so SetEvent(hDevCanDeleteEvent)
ModuleID[2] LevelID[10]: CmdOperation[0], skip current command, so SetEvent(hDevCanDeleteEvent)
ModuleID[2] LevelID[10]: CmdOperation[0], skip current command, so SetEvent(hDevCanDeleteEvent)
ModuleID[2] LevelID[10]: ExecuteCommand--Load[WndIndex:0], File is I:\Freescale\MFG_TOOL\L4.1.15_2.0.0-ga_mfg-tools\mfgtools-with-rootfs\mfgtools\Profiles\Linux\OS Firmware\firmware\zImage-einsys-mfg, address is 0x10800000
ModuleID[2] LevelID[10]: PortMgrDlg(0)--Command Load excute successfully, retry count: 0
ModuleID[2] LevelID[10]: CmdOperation[0], skip current command, so SetEvent(hDevCanDeleteEvent)
ModuleID[2] LevelID[10]: ExecuteCommand--Load[WndIndex:0], File is I:\Freescale\MFG_TOOL\L4.1.15_2.0.0-ga_mfg-tools\mfgtools-with-rootfs\mfgtools\Profiles\Linux\OS Firmware\firmware\fsl-image-mfgtool-initramfs-imx6qdlsolo.cpio.gz.u-boot, address is 0x12C00000
ModuleID[2] LevelID[10]: PortMgrDlg(0)--Command Load excute successfully, retry count: 0
ModuleID[2] LevelID[10]: CmdOperation[0], skip current command, so SetEvent(hDevCanDeleteEvent)
ModuleID[2] LevelID[10]: ExecuteCommand--Load[WndIndex:0], File is I:\Freescale\MFG_TOOL\L4.1.15_2.0.0-ga_mfg-tools\mfgtools-with-rootfs\mfgtools\Profiles\Linux\OS Firmware\firmware\imx6q-einsys.dtb, address is 0x18000000
ModuleID[2] LevelID[10]: PortMgrDlg(0)--Command Load excute successfully, retry count: 0
ModuleID[2] LevelID[10]: CmdOperation[0], skip current command, so SetEvent(hDevCanDeleteEvent)
ModuleID[2] LevelID[10]: CmdOperation[0], skip current command, so SetEvent(hDevCanDeleteEvent)
ModuleID[2] LevelID[10]: CmdOperation[0], skip current command, so SetEvent(hDevCanDeleteEvent)
ModuleID[2] LevelID[10]: CmdOperation[0], skip current command, so SetEvent(hDevCanDeleteEvent)
ModuleID[2] LevelID[10]: CmdOperation[0], skip current command, so SetEvent(hDevCanDeleteEvent)
ModuleID[2] LevelID[10]: ExecuteCommand--Jump[WndIndex:0]
ModuleID[2] LevelID[10]: *********MxHidDevice[06C90DD0] Jump to Ramkernel successfully!**********
ModuleID[2] LevelID[10]: CmdOperation[0], current state command has been finished and the last command is successful, so SetEvent(hDevCanDeleteEvent)
ModuleID[2] LevelID[10]: CCmdOpreation[0] thread is Closed
ModuleID[2] LevelID[10]: CCmdOpreation[0] thread is Closed
ModuleID[2] LevelID[10]: DeviceManager::OnMsgDeviceEvent() - EVENT_KILL
ModuleID[2] LevelID[10]: CMyExceptionHandler::OnMsgExceptionEvent() - KillExceptionHandlerThread
ModuleID[2] LevelID[10]: Exception Handler thread is closed
ModuleID[2] LevelID[1]: delete MxHidDeviceClass
ModuleID[2] LevelID[10]: delete MxHidDevice[06C90DD0]
ModuleID[2] LevelID[10]: Device Manager thread is closed