complete test log can be found at: https://pastebin.linaro.org/2024/

Stackdump:
  897.050119] CPU3: Booted secondary processor                                 
[  897.053685] Unable to handle kernel NULL pointer dereference at virtual address 00000004            [  897.090697] pgd = c0004000                                                   
[  897.098781] [00000004] *pgd=00000000                                         
[  897.109480] Internal error: Oops: 805 [#1] SMP ARM                           
[  897.123815] Modules linked in:                                               
[  897.133001] CPU: 2    Not tainted  (3.9.0-rc3-00723-g91d15d3 #11)            
[  897.151282] PC is at run_timer_softirq+0x10c/0x288                           
[  897.165622] LR is at run_timer_softirq+0x3c/0x288                            
[  897.179698] pc : [<c0030ba4>]    lr : [<c0030ad4>]    psr: 600001d3        
...
[  899.757348] [<c0030ba4>] (run_timer_softirq+0x10c/0x288) from [<c0029544>] (__do_softirq+0xf4/0x250)                                                         
[  899.784715] [<c0029544>] (__do_softirq+0xf4/0x250) from [<c00299ac>] (irq_exit+0x8c/0xc4)                                                                    
[  899.809219] [<c00299ac>] (irq_exit+0x8c/0xc4) from [<c000e978>] (handle_IRQ+0x3c/0x94)                                                                       
[  899.832938] [<c000e978>] (handle_IRQ+0x3c/0x94) from [<c00084f0>] (gic_handle_irq+0x28/0x5c)                                                                 
[  899.858221] [<c00084f0>] (gic_handle_irq+0x28/0x5c) from [<c000dd00>] (__irq_svc+0x40/0x50) 

Reading symbols from /home/naresh/nico-linux/linux/kernel/timer.o...done.
(gdb) list *(run_timer_softirq+0x10c)
0x279c is in run_timer_softirq (include/linux/list.h:88).
83	 * This is only for internal list manipulation where we know
84	 * the prev/next entries already!
85	 */
86	static inline void __list_del(struct list_head * prev, struct list_head * next)
87	{
88		next->prev = prev;
89		prev->next = next;
90	}
91	
92	/**

Stackdump:
[  900.344354] [<c000dd00>] (__irq_svc+0x40/0x50) from [<c02c8da8>] (bl_enter_powerdown+0x6c/0xd0)                                                              
[  900.370414] [<c02c8da8>] (bl_enter_powerdown+0x6c/0xd0) from [<c02c6f84>] (cpuidle_enter+0x14/0x18)                                                          
[  900.397515] [<c02c6f84>] (cpuidle_enter+0x14/0x18) from [<c02c73b4>] (cpuidle_enter_state+0x14/0x68)                                                         
[  900.424877] [<c02c73b4>] (cpuidle_enter_state+0x14/0x68) from [<c02c74ac>] (cpuidle_idle_call+0xa4/0x198)                                                    
[  900.453541] [<c02c74ac>] (cpuidle_idle_call+0xa4/0x198) from [<c000ee24>] (cpu_idle+0x9c/0x114)                                                              
[  900.479598] [<c000ee24>] (cpu_idle+0x9c/0x114) from [<803d01a4>] (0x803d01a4)[  900.500966] CPU1: stopping                                                   
[  900.509068] [<c00142e0>] (unwind_backtrace+0x0/0xf8) from [<c00134e0>] (handle_IPI+0x198/0x1d8)

GDB disassembling code:
Reading symbols from /home/naresh/nico-linux/linux/drivers/cpuidle/arm_big_little.o...done.
(gdb) list *(bl_enter_powerdown+0x6c)
0x6c is in bl_enter_powerdown (include/linux/time.h:82).
77	 */
78	static inline struct timespec timespec_sub(struct timespec lhs,
79							struct timespec rhs)
80	{
81		struct timespec ts_delta;
82		set_normalized_timespec(&ts_delta, lhs.tv_sec - rhs.tv_sec,
83					lhs.tv_nsec - rhs.tv_nsec);
84		return ts_delta;
85	}