port-evbarm/50677: Raspberry Pi B and 2B panic under heavy USB (incl. network) load

[michael.blatt%gmail.com@localhost]

>Number:         50677
>Category:       port-evbarm
>Synopsis:       Raspberry Pi B and 2B panic under heavy USB (incl. network) load
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    port-evbarm-maintainer
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Jan 18 23:55:00 +0000 2016
>Originator:     Michael Blatt
>Release:        7.0, 7.0_STABLE, 7.99.25
>Organization:
>Environment:
NetBSD rpi 7.99.25 NetBSD 7.99.25 (RPI) #0: Mon Jan 18 22:11:47 GMT 2016  michael@rpi2:/usr/obj/sys/arch/
evbarm/compile/RPI evbarm
>Description:
Raspberry Pi B and 2B panic under heavy USB (incl. network) load
This happens when compiling packages over NFS, or playing sound through a USB Audio interface (from an NFS mount).
Initial kernel messages (at this point things still work, but USB/network is slow):
dwctwo0: dwc2_hc_chhltd_intr_dma: Channel 6 - ChHltd set, but reason is unknown
dwctwo0: hcint 0x00000002, intsts 0x04400009
dwctwo0: dwc2_update_urb_state_abn(): trimming xfer length
dwctwo0: dwc2_update_urb_state(): trimming xfer length

Followed by either this (even though usmsc0 is not in use or connected):
usmsc0: warning: Failed to read register 0x114
usmsc0: warning: MII is busy
This is identical to #49148 - the processes relying on network access/USB just hang.

Or a panic:
Non-emulated page fault with intr_depth > 0
Fatal kernel mode data abort: 'Translation Fault (P)'
trapframe: 0x8e0a1830
FSR=00000017, FAR=0000003a, spsr=80010113
r0 =8fa1d808, r1 =8fa1db34, r2 =00000001, r3 =8fba8b24
r4 =8fba8b84, r5 =8f987860, r6 =00000000, r7 =8fa1d808
r8 =8f985f34, r9 =8fba8b48, r10=8fa1db34, r11=8e0a18cc
r12=8e0a18d0, ssp=8e0a1880, slr=8021452c, pc =8021357c

Stopped in pid 2427.1 (mpd) at  netbsd:dwc2_assign_and_init_hc+0xa8:    ldrb    r
2, [r6, #0x03a]

bt:
0x8e0a18cc: netbsd:dwc2_assign_and_init_hc+0xc
0x8e0a190c: netbsd:dwc2_hcd_select_transactions+0xb0
0x8e0a198c: netbsd:dwc2_handle_hcd_intr+0x300
0x8e0a19a4: netbsd:dwc2_interrupt+0x28
0x8e0a19c4: netbsd:dwc2_intr+0xd4
0x8e0a19e4: netbsd:pic_dispatch+0x28
0x8e0a1a64: netbsd:pic_do_pending_ints+0x384
0x8e0a1ae4: netbsd:irq_entry+0x60
0x8e0a1b0c: netbsd:ifq_enqueue+0xc8
0x8e0a1b4c: netbsd:ether_output+0x424
0x8e0a1b84: netbsd:ip_hresolv_output+0x78
0x8e0a1c2c: netbsd:ip_output+0xe88
0x8e0a1d04: netbsd:tcp_output+0x1570
0x8e0a1d34: netbsd:tcp_send_wrapper+0x80
0x8e0a1db4: netbsd:sosend+0x6a8
0x8e0a1e6c: netbsd:do_sys_sendmsg_so.isra.3+0x234
0x8e0a1eac: netbsd:do_sys_sendmsg+0x90
0x8e0a1f04: netbsd:sys_sendto+0x64
0x8e0a1f7c: netbsd:syscall+0x88
0x8e0a1fac: netbsd:swi_handler+0xa0

couldn't use the sync command: "dump to dev 92,1 not possible"

Boot dmesg: the memory is due to me setting gpu_mem high in an attempt to kernel dump onto a 256MB swap partition, didn't help.

NetBSD 7.99.25 (RPI) #0: Mon Jan 18 22:11:47 GMT 2016
        michael@rpi2:/usr/obj/sys/arch/evbarm/compile/RPI
total memory = 252 MB  
avail memory = 239 MB
sysctl_createv: sysctl_create(machine_arch) returned 17
timecounter: Timecounters tick every 10.000 msec
mainbus0 (root)
cpu0 at mainbus0 core 0: 700 MHz ARM1176JZ-S r0p7 (ARM11J V6ZK core)
cpu0: DC enabled IC enabled WB enabled LABT
cpu0: 16KB/32B 4-way L1 VIPT Instruction cache
cpu0: 16KB/32B 4-way write-back-locking-C L1 VIPT Data cache
vfp0 at cpu0: VFP11, rounding, exceptions
obio0 at mainbus0
bcmicu0 at obio0
bcmmbox0 at obio0 intr 65: VC mailbox
vcmbox0 at bcmmbox0
cmtmr0 at obio0 intr 3: VC System Timer
vchiq0 at obio0 intr 66: BCM2835 VCHIQ
bcmpm0 at obio0: Power management, Reset and Watchdog controller
bcmdmac0 at obio0: DMA0 DMA2 DMA4 DMA5 DMA8 DMA9 DMA10
bcmrng0 at obio0: RNG
plcom0 at obio0 intr 57
plcom0: txfifo disabled
plcom0: console
genfb0 at obio0
genfb0: framebuffer at 0x1e876000, size 1280x720, depth 32, stride 5120
wsdisplay0 at genfb0 kbdmux 1
wsmux1: connecting to wsdisplay0
wsdisplay0: screen 0-3 added (default, vt100 emulation)
sdhc0 at obio0 intr 62: SDHC controller
sdhc0: interrupting on intr 62
dwctwo0 at obio0 intr 9: USB controller
bcmspi0 at obio0 intr 54: SPI
spi0 at bcmspi0: SPI bus
bsciic0 at obio0 intr 53: BSC0
iic0 at bsciic0: I2C bus
bsciic1 at obio0 intr 53: BSC1
iic1 at bsciic1: I2C bus
bcmgpio0 at obio0: GPIO [0...31]
gpio0 at bcmgpio0: 32 pins
bcmgpio1 at obio0: GPIO [32...53]
gpio1 at bcmgpio1: 22 pins
bcmcm at obio0 not configured
bcmpwm at obio0 not configured
usb0 at dwctwo0: USB revision 2.0
timecounter: Timecounter "clockinterrupt" frequency 100 Hz quality 0
timecounter: Timecounter "bcmtmr0" frequency 1000000 Hz quality 100
sdhc0: SDHC 3.0, rev 153, platform DMA, 250000 kHz, HS SDR50 3.3V, re-tuning mod
e 1, 1024 byte blocks
sdmmc0 at sdhc0 slot 0
uhub0 at usb0: vendor 0000 DWC2 root hub, class 9/0, rev 2.00/1.00, addr 1
uhub0: 1 port with 1 removable, self powered
IPsec: Initialized Security Association Processing.
ld0 at sdmmc0: <0x03:0x5344:SU16G:0x80:0x02f268d5:0x0ba>
ld0: 15193 MB, 7717 cyl, 64 head, 63 sec, 512 bytes/sect x 31116288 sectors
ld0: 4-bit width, High-Speed/SDR25, 50.000 MHz
uhub1 at uhub0 port 1: vendor 0424 product 9512, class 9/0, rev 2.00/2.00, addr 2

uhub1: multiple transaction translators
uhub1: 3 ports with 2 removable, self powered
usmsc0 at uhub1 port 1
usmsc0: vendor 0424 product ec00, rev 2.00/2.00, addr 3
usmsc0: Ethernet address b8:27:eb:7c:7e:bd
ukphy0 at usmsc0 phy 1: OUI 0x00800f, model 0x000c, rev. 3
ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
uaudio0 at uhub1 port 2 configuration 1 interface 0
uaudio0: C-Media Electronics Inc. USB Audio Device, rev 1.10/1.00, addr 4
uaudio0: audio rev 1.00
audio1 at uaudio0: full duplex, playback, capture, independent
uhidev0 at uhub1 port 2 configuration 1 interface 3
uhidev0: C-Media Electronics Inc. USB Audio Device, rev 1.10/1.00, addr 4, iclas
s 3/0
uhid0 at uhidev0: input=4, output=4, feature=0
rum0 at uhub1 port 3
rum0: Belkin Belkin 54g USB Network Adapter, rev 2.00/0.01, addr 5
rum0: MAC/BBP RT2573 (rev 0x2573a), RF RT2528, address 00:17:3f:13:11:a9
rum0: 11b rates: 1Mbps 2Mbps 5.5Mbps 11Mbps
rum0: 11g rates: 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36M
bps 48Mbps 54Mbps
boot device: ld0
root on ld0a dumps on ld0b
/: replaying log to memory
root file system type: ffs
kern.module.path=/stand/evbarm/7.99.25/modules
vchiq: local ver 6 (min 3), remote ver 6.
vcaudio0 at vchiq0: auds
WARNING: no TOD clock present
WARNING: using filesystem time
WARNING: CHECK AND RESET THE DATE!
audio0 at vcaudio0: half duplex, playback, capture, independent
/: replaying log to disk
wsdisplay0: screen 4 added (default, vt100 emulation)

>How-To-Repeat:
a:
1. mount pkgsrc share over nfs
2. compile software (if happens faster if WRKOBJDIR is on the nfs share too)

or
b:
1. play sound onto the USB Audio interface
2. change tracks part-way through

>Fix:
no known fix