Open
Description
This is a summary from troubleshooting on https://www.raspberrypi.org/forums/viewtopic.php?f=28&t=213423&p=1315106
When trying to stream video on Zero W with the noir v2 camera module, I get many variants of kernel oopses and freezes. For example:
[ 273.802531] random: crng init done
[ 379.898672] ------------[ cut here ]------------
[ 379.901131] kernel BUG at Returning to usermode but unexpected PSR bits set?:5!
[ 379.903359] Internal error: Oops - BUG: 0 [#1] ARM
[ 379.905866] Modules linked in: cmac bnep hci_uart btbcm serdev bluetooth ecdh_generic brcmfmac brcmutil cfg80211 snd_bcm2835(C) snd_pcm rfkill snd_timer snd uio_pdrv_genirq uio fixed ip_tables x_tables ipv6
[ 379.913291] CPU: 0 PID: 826 Comm: modprobe Tainted: G C 4.14.34+ #1110
[ 379.917705] Hardware name: BCM2835
[ 379.920005] task: d6a0e120 task.stack: d5662000
[ 379.922689] PC is at no_work_pending+0x30/0x34
[ 379.925152] LR is at 0xbea4f970
[ 379.927229] pc : [<c000fe54>] lr : [<bea4f970>] psr: 20000013
[ 379.929588] sp : d5663fa8 ip : d5663fa8 fp : 00000000
[ 379.932763] r10: 00000000 r9 : d5662000 r8 : c000ff64
[ 379.935421] r7 : 000000d9 r6 : 00d321d8 r5 : 00000020 r4 : 00000078
[ 379.938231] r3 : c0939414 r2 : d5663fe4 r1 : b6e6f198 r0 : 00000000
[ 379.940929] Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user
[ 379.943654] Control: 00c5387d Table: 15664008 DAC: 00000055
[ 379.946464] Process modprobe (pid: 826, stack limit = 0xd5662188)
[ 379.948699] Stack: (0xd5663fa8 to 0xd5664000)
[ 379.951177] 3fa0: 00d321b8 00000020 00000000 00d321d8 00008000 00000000
[ 379.956042] 3fc0: 00d321b8 00000020 00d321d8 000000d9 00000002 0002b990 0003f030 bea4fb10
[ 379.960686] 3fe0: 0003efa8 bea4f970 b6e6f198 b6e6f0b8 60000010 00000000 00000000 00000000
[ 379.966304] Code: e9527fff e1a00000 e28dd048 e1b0f00e (e7f001f2)
[ 379.969043] ---[ end trace ee6907230b405e54 ]---
[ 185.473451] random: crng init done
[ 289.843386] Unable to handle kernel paging request at virtual address a259878c
[ 289.845896] pgd = d3d98000
[ 289.847720] [a259878c] *pgd=00000000
[ 289.849367] Internal error: Oops: 5 [#1] ARM
[ 289.851559] Modules linked in: cmac bnep hci_uart btbcm serdev bluetooth ecdh_generic brcmfmac brcmutil cfg80211 snd_bcm2835(C) rfkill snd_pcm snd_timer snd uio_pdrv_genirq fixed uio ip_tables x_tables ipv6
[ 289.858880] CPU: 0 PID: 566 Comm: VCHIQ completio Tainted: G C 4.14.34+ #1110
[ 289.864663] Hardware name: BCM2835
[ 289.867276] task: d3d24560 task.stack: d3d94000
[ 289.869315] PC is at alloc_contig_range+0x254/0x344
[ 289.871577] LR is at drain_all_pages+0x9c/0x148
[ 289.873676] pc : [<c01005f8>] lr : [<c00fcddc>] psr: 60000013
[ 289.876103] sp : d3d95b80 ip : 00000000 fp : d3d95c14
[ 289.878873] r10: 00000005 r9 : 00017521 r8 : d3d95ba0
[ 289.881112] r7 : c0108314 r6 : c0646614 r5 : d3d95b58 r4 : d3d95b6c
[ 289.883087] r3 : a2598780 r2 : 00000000 r1 : d7c8a500 r0 : 00000000
[ 289.885885] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user
[ 289.888657] Control: 00c5387d Table: 13d98008 DAC: 00000055
[ 289.891100] Process VCHIQ completio (pid: 566, stack limit = 0xd3d94188)
[ 289.894036] Stack: (0xd3d95b80 to 0xd3d96000)
[ 289.897008] 5b80: 00000002 00000006 fffffff0 00017800 00017400 00000004 00000000 00000000
[ 289.902505] 5ba0: d3d95ba0 d3d95ba0 c09be368 00000000 00000001 00000001 00000000 00000000
[ 289.907371] 5bc0: 00000000 00017520 014080c0 ffffffff 00000000 00000000 00000000 00000002
[ 289.913045] 5be0: 00000001 00000000 00000001 00017520 00000120 c0a46a88 fffffff0 00000001
[ 289.918027] 5c00: 00000001 00000800 d3d95c64 d3d95c18 c0155648 c01003b0 00000000 00000000
[ 289.924077] 5c20: 00000000 00000001 00000000 014080c0 00000000 c0a46a98 00000000 00000001
[ 289.931001] 5c40: d3d95ce8 00000001 00000247 00001000 00000000 d3d95d94 d3d95c74 d3d95c68
[ 289.936747] 5c60: c04078d0 c0155554 d3d95c9c d3d95c78 c0019d84 c0407898 d3d95ce8 c0518d68
[ 289.943030] 5c80: d7162e10 00000001 00000000 d53ab780 d3d95ccc d3d95ca0 c0019e5c c0019d50
[ 289.949379] 5ca0: c0518d68 00000001 00000000 014080c0 ffffffff 014080c0 d7162e10 ffffffff
[ 289.956599] 5cc0: d3d95d34 d3d95cd0 c001a01c c0019e18 d3d95d04 d3d95ce0 c004c940 c00409d4
[ 289.964323] 5ce0: d515fd40 00000000 00000000 d7162e10 00001000 014080c0 00000247 c0518d68
[ 289.970769] 5d00: d3d24501 00000000 00000000 00000000 00000000 00000bb0 0000e2f8 00000198
[ 289.977483] 5d20: d7162e10 00000006 d3d95d5c d3d95d38 c001a248 c0019e70 00000247 00000000
[ 289.983707] 5d40: 00000000 c0518d68 0000000f c001a1fc d3d95dd4 d3d95d60 c0518d68 c001a208
[ 289.991248] 5d60: 00000000 00000200 00000200 c0517a80 00000000 d6b44f10 d3d24560 d3d95d88
[ 289.998981] 5d80: 0044bbb0 00000001 00000001 0000e2f8 d3d95dd4 ffffffff c0517a8c c0026478
[ 290.005268] 5da0: c0648df0 c0645a34 c0944318 d6b44e00 00000000 0044bbb0 00000000 0000e2f8
[ 290.012067] 5dc0: 00000072 00000006 d3d95e44 d3d95dd8 c05110ac c0518c84 00000001 c064767c
[ 290.018587] 5de0: d3d95e04 d3d95df0 c064767c 00000020 d6b44efc 00000000 d6b44f10 d6b44f88
[ 290.025889] 5e00: c0a54928 d6b44edc d3d95e2c 20000113 20000113 c09b3f50 b6cb6ce4 c014c406
[ 290.033451] 5e20: c09b3f50 b6cb6ce4 00000001 d6b44e00 d7580194 d50fd000 d3d95f0c d3d95e48
[ 290.039559] 5e40: c0515db8 c0510de0 b63085c0 00000000 00000001 d3d95e60 c0048748 c00484c0
[ 290.046525] 5e60: d7122478 d50fd824 b6cb6d84 c014c407 d7580194 00000040 0000012c d6b44e00
[ 290.053050] 5e80: c0065900 00000007 ffffffff d3d95e98 b63085c0 00000000 d3d95ec4 d695a268
[ 290.060107] 5ea0: 0000b009 0044bbb0 0000e2f8 b63085c0 00000000 d3d95ec0 c004c360 c0638a0c
[ 290.069844] 5ec0: c004c95c c00409d4 00000000 d5215340 00000001 d3d24560 d3d95f1c d3d95ee8
[ 290.076552] 5ee0: c0046aec b6cb6ce4 d730bd88 d522ca00 00000004 00000004 d3d94000 00000000
[ 290.082991] 5f00: d3d95f7c d3d95f10 c016c858 c0515870 d3d95f74 d3d95f20 c06455ac c0046a9c
[ 290.090363] 5f20: 00000004 c01770c4 80000013 ffffffff 7a12d780 c01774c4 d5231a80 b6e79538
[ 290.098061] 5f40: b6cb6ce4 0044bbb0 c014c406 00000004 d3d95f6c d522ca01 b6cb6ce4 d522ca00
[ 290.104406] 5f60: c014c406 00000004 d3d94000 00000000 d3d95fa4 d3d95f80 c016cf54 c016c7c8
[ 290.111185] 5f80: 0000b009 b6e79538 b6cb6ce4 0044bbb0 00000036 c000ff64 00000000 d3d95fa8
[ 290.117580] 5fa0: c000fdc0 c016cf1c b6e79538 b6cb6ce4 00000004 c014c406 b6cb6ce4 0000b009
[ 290.125019] 5fc0: b6e79538 b6cb6ce4 0044bbb0 00000036 b63085c0 b6cb6d84 b6e792b4 b6e68f3c
[ 290.132671] 5fe0: b6e79240 b6cb6cd4 b6e66f44 b6d8180c 80000010 00000004 00000000 00000000
[ 290.138902] [<c01005f8>] (alloc_contig_range) from [<c0155648>] (cma_alloc+0x100/0x24c)
[ 290.145834] [<c0155648>] (cma_alloc) from [<c04078d0>] (dma_alloc_from_contiguous+0x44/0x4c)
[ 290.152461] [<c04078d0>] (dma_alloc_from_contiguous) from [<c0019d84>] (__alloc_from_contiguous+0x40/0xc8)
[ 290.160121] [<c0019d84>] (__alloc_from_contiguous) from [<c0019e5c>] (cma_allocator_alloc+0x50/0x58)
[ 290.167665] [<c0019e5c>] (cma_allocator_alloc) from [<c001a01c>] (__dma_alloc+0x1b8/0x350)
[ 290.173780] [<c001a01c>] (__dma_alloc) from [<c001a248>] (arm_dma_alloc+0x4c/0x58)
[ 290.180857] [<c001a248>] (arm_dma_alloc) from [<c0518d68>] (vchiq_prepare_bulk_data+0xf0/0x6bc)
[ 290.187955] [<c0518d68>] (vchiq_prepare_bulk_data) from [<c05110ac>] (vchiq_bulk_transfer+0x2d8/0x554)
[ 290.195634] [<c05110ac>] (vchiq_bulk_transfer) from [<c0515db8>] (vchiq_ioctl+0x554/0x1958)
[ 290.202681] [<c0515db8>] (vchiq_ioctl) from [<c016c858>] (do_vfs_ioctl+0x9c/0x754)
[ 290.209238] [<c016c858>] (do_vfs_ioctl) from [<c016cf54>] (SyS_ioctl+0x44/0x6c)
[ 290.213236] [<c016cf54>] (SyS_ioctl) from [<c000fdc0>] (ret_fast_syscall+0x0/0x28)
[ 290.219884] Code: e5931000 e0603008 e0833183 e0813103 (e593300c)
[ 290.223715] ---[ end trace ee6907230b405e54 ]---
It can easily be reproduced by these steps:
- Reset to the 2018-04-18-raspbian-stretch-lite.img and enable the headless SSH and /boot/wpa_supplicant.conf
- raspi-config -> enable camera module -> reboot
- (terminal 1)$ raspivid -t 0 -w 1280 -h 720 -o /dev/null
- (terminal 2)$ ssh pi@the-zero-ip
- Repeat step 4 until crash (will happen within 5 minutes)
The issue still exists when testing after updating with rpi-update
.
I have also had freezes on Pi 3B+ with the same camera, but have not been able to create a proper reproduce or catched any kernel messages. It might be more related to #2387