Skip to content

Kernel oops or hard freeze when streaming video on Zero W (and Pi 3B+) #2555

Open
@balboah

Description

@balboah

This is a summary from troubleshooting on https://www.raspberrypi.org/forums/viewtopic.php?f=28&t=213423&p=1315106

When trying to stream video on Zero W with the noir v2 camera module, I get many variants of kernel oopses and freezes. For example:

[  273.802531] random: crng init done
[  379.898672] ------------[ cut here ]------------
[  379.901131] kernel BUG at Returning to usermode but unexpected PSR bits set?:5!
[  379.903359] Internal error: Oops - BUG: 0 [#1] ARM
[  379.905866] Modules linked in: cmac bnep hci_uart btbcm serdev bluetooth ecdh_generic brcmfmac brcmutil cfg80211 snd_bcm2835(C) snd_pcm rfkill snd_timer snd uio_pdrv_genirq uio fixed ip_tables x_tables ipv6
[  379.913291] CPU: 0 PID: 826 Comm: modprobe Tainted: G         C      4.14.34+ #1110
[  379.917705] Hardware name: BCM2835
[  379.920005] task: d6a0e120 task.stack: d5662000
[  379.922689] PC is at no_work_pending+0x30/0x34
[  379.925152] LR is at 0xbea4f970
[  379.927229] pc : [<c000fe54>]    lr : [<bea4f970>]    psr: 20000013
[  379.929588] sp : d5663fa8  ip : d5663fa8  fp : 00000000
[  379.932763] r10: 00000000  r9 : d5662000  r8 : c000ff64
[  379.935421] r7 : 000000d9  r6 : 00d321d8  r5 : 00000020  r4 : 00000078
[  379.938231] r3 : c0939414  r2 : d5663fe4  r1 : b6e6f198  r0 : 00000000
[  379.940929] Flags: nzCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
[  379.943654] Control: 00c5387d  Table: 15664008  DAC: 00000055
[  379.946464] Process modprobe (pid: 826, stack limit = 0xd5662188)
[  379.948699] Stack: (0xd5663fa8 to 0xd5664000)
[  379.951177] 3fa0:                   00d321b8 00000020 00000000 00d321d8 00008000 00000000
[  379.956042] 3fc0: 00d321b8 00000020 00d321d8 000000d9 00000002 0002b990 0003f030 bea4fb10
[  379.960686] 3fe0: 0003efa8 bea4f970 b6e6f198 b6e6f0b8 60000010 00000000 00000000 00000000
[  379.966304] Code: e9527fff e1a00000 e28dd048 e1b0f00e (e7f001f2)
[  379.969043] ---[ end trace ee6907230b405e54 ]---
[  185.473451] random: crng init done
[  289.843386] Unable to handle kernel paging request at virtual address a259878c
[  289.845896] pgd = d3d98000
[  289.847720] [a259878c] *pgd=00000000
[  289.849367] Internal error: Oops: 5 [#1] ARM
[  289.851559] Modules linked in: cmac bnep hci_uart btbcm serdev bluetooth ecdh_generic brcmfmac brcmutil cfg80211 snd_bcm2835(C) rfkill snd_pcm snd_timer snd uio_pdrv_genirq fixed uio ip_tables x_tables ipv6
[  289.858880] CPU: 0 PID: 566 Comm: VCHIQ completio Tainted: G         C      4.14.34+ #1110
[  289.864663] Hardware name: BCM2835
[  289.867276] task: d3d24560 task.stack: d3d94000
[  289.869315] PC is at alloc_contig_range+0x254/0x344
[  289.871577] LR is at drain_all_pages+0x9c/0x148
[  289.873676] pc : [<c01005f8>]    lr : [<c00fcddc>]    psr: 60000013
[  289.876103] sp : d3d95b80  ip : 00000000  fp : d3d95c14
[  289.878873] r10: 00000005  r9 : 00017521  r8 : d3d95ba0
[  289.881112] r7 : c0108314  r6 : c0646614  r5 : d3d95b58  r4 : d3d95b6c
[  289.883087] r3 : a2598780  r2 : 00000000  r1 : d7c8a500  r0 : 00000000
[  289.885885] Flags: nZCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
[  289.888657] Control: 00c5387d  Table: 13d98008  DAC: 00000055
[  289.891100] Process VCHIQ completio (pid: 566, stack limit = 0xd3d94188)
[  289.894036] Stack: (0xd3d95b80 to 0xd3d96000)
[  289.897008] 5b80: 00000002 00000006 fffffff0 00017800 00017400 00000004 00000000 00000000
[  289.902505] 5ba0: d3d95ba0 d3d95ba0 c09be368 00000000 00000001 00000001 00000000 00000000
[  289.907371] 5bc0: 00000000 00017520 014080c0 ffffffff 00000000 00000000 00000000 00000002
[  289.913045] 5be0: 00000001 00000000 00000001 00017520 00000120 c0a46a88 fffffff0 00000001
[  289.918027] 5c00: 00000001 00000800 d3d95c64 d3d95c18 c0155648 c01003b0 00000000 00000000
[  289.924077] 5c20: 00000000 00000001 00000000 014080c0 00000000 c0a46a98 00000000 00000001
[  289.931001] 5c40: d3d95ce8 00000001 00000247 00001000 00000000 d3d95d94 d3d95c74 d3d95c68
[  289.936747] 5c60: c04078d0 c0155554 d3d95c9c d3d95c78 c0019d84 c0407898 d3d95ce8 c0518d68
[  289.943030] 5c80: d7162e10 00000001 00000000 d53ab780 d3d95ccc d3d95ca0 c0019e5c c0019d50
[  289.949379] 5ca0: c0518d68 00000001 00000000 014080c0 ffffffff 014080c0 d7162e10 ffffffff
[  289.956599] 5cc0: d3d95d34 d3d95cd0 c001a01c c0019e18 d3d95d04 d3d95ce0 c004c940 c00409d4
[  289.964323] 5ce0: d515fd40 00000000 00000000 d7162e10 00001000 014080c0 00000247 c0518d68
[  289.970769] 5d00: d3d24501 00000000 00000000 00000000 00000000 00000bb0 0000e2f8 00000198
[  289.977483] 5d20: d7162e10 00000006 d3d95d5c d3d95d38 c001a248 c0019e70 00000247 00000000
[  289.983707] 5d40: 00000000 c0518d68 0000000f c001a1fc d3d95dd4 d3d95d60 c0518d68 c001a208
[  289.991248] 5d60: 00000000 00000200 00000200 c0517a80 00000000 d6b44f10 d3d24560 d3d95d88
[  289.998981] 5d80: 0044bbb0 00000001 00000001 0000e2f8 d3d95dd4 ffffffff c0517a8c c0026478
[  290.005268] 5da0: c0648df0 c0645a34 c0944318 d6b44e00 00000000 0044bbb0 00000000 0000e2f8
[  290.012067] 5dc0: 00000072 00000006 d3d95e44 d3d95dd8 c05110ac c0518c84 00000001 c064767c
[  290.018587] 5de0: d3d95e04 d3d95df0 c064767c 00000020 d6b44efc 00000000 d6b44f10 d6b44f88
[  290.025889] 5e00: c0a54928 d6b44edc d3d95e2c 20000113 20000113 c09b3f50 b6cb6ce4 c014c406
[  290.033451] 5e20: c09b3f50 b6cb6ce4 00000001 d6b44e00 d7580194 d50fd000 d3d95f0c d3d95e48
[  290.039559] 5e40: c0515db8 c0510de0 b63085c0 00000000 00000001 d3d95e60 c0048748 c00484c0
[  290.046525] 5e60: d7122478 d50fd824 b6cb6d84 c014c407 d7580194 00000040 0000012c d6b44e00
[  290.053050] 5e80: c0065900 00000007 ffffffff d3d95e98 b63085c0 00000000 d3d95ec4 d695a268
[  290.060107] 5ea0: 0000b009 0044bbb0 0000e2f8 b63085c0 00000000 d3d95ec0 c004c360 c0638a0c
[  290.069844] 5ec0: c004c95c c00409d4 00000000 d5215340 00000001 d3d24560 d3d95f1c d3d95ee8
[  290.076552] 5ee0: c0046aec b6cb6ce4 d730bd88 d522ca00 00000004 00000004 d3d94000 00000000
[  290.082991] 5f00: d3d95f7c d3d95f10 c016c858 c0515870 d3d95f74 d3d95f20 c06455ac c0046a9c
[  290.090363] 5f20: 00000004 c01770c4 80000013 ffffffff 7a12d780 c01774c4 d5231a80 b6e79538
[  290.098061] 5f40: b6cb6ce4 0044bbb0 c014c406 00000004 d3d95f6c d522ca01 b6cb6ce4 d522ca00
[  290.104406] 5f60: c014c406 00000004 d3d94000 00000000 d3d95fa4 d3d95f80 c016cf54 c016c7c8
[  290.111185] 5f80: 0000b009 b6e79538 b6cb6ce4 0044bbb0 00000036 c000ff64 00000000 d3d95fa8
[  290.117580] 5fa0: c000fdc0 c016cf1c b6e79538 b6cb6ce4 00000004 c014c406 b6cb6ce4 0000b009
[  290.125019] 5fc0: b6e79538 b6cb6ce4 0044bbb0 00000036 b63085c0 b6cb6d84 b6e792b4 b6e68f3c
[  290.132671] 5fe0: b6e79240 b6cb6cd4 b6e66f44 b6d8180c 80000010 00000004 00000000 00000000
[  290.138902] [<c01005f8>] (alloc_contig_range) from [<c0155648>] (cma_alloc+0x100/0x24c)
[  290.145834] [<c0155648>] (cma_alloc) from [<c04078d0>] (dma_alloc_from_contiguous+0x44/0x4c)
[  290.152461] [<c04078d0>] (dma_alloc_from_contiguous) from [<c0019d84>] (__alloc_from_contiguous+0x40/0xc8)
[  290.160121] [<c0019d84>] (__alloc_from_contiguous) from [<c0019e5c>] (cma_allocator_alloc+0x50/0x58)
[  290.167665] [<c0019e5c>] (cma_allocator_alloc) from [<c001a01c>] (__dma_alloc+0x1b8/0x350)
[  290.173780] [<c001a01c>] (__dma_alloc) from [<c001a248>] (arm_dma_alloc+0x4c/0x58)
[  290.180857] [<c001a248>] (arm_dma_alloc) from [<c0518d68>] (vchiq_prepare_bulk_data+0xf0/0x6bc)
[  290.187955] [<c0518d68>] (vchiq_prepare_bulk_data) from [<c05110ac>] (vchiq_bulk_transfer+0x2d8/0x554)
[  290.195634] [<c05110ac>] (vchiq_bulk_transfer) from [<c0515db8>] (vchiq_ioctl+0x554/0x1958)
[  290.202681] [<c0515db8>] (vchiq_ioctl) from [<c016c858>] (do_vfs_ioctl+0x9c/0x754)
[  290.209238] [<c016c858>] (do_vfs_ioctl) from [<c016cf54>] (SyS_ioctl+0x44/0x6c)
[  290.213236] [<c016cf54>] (SyS_ioctl) from [<c000fdc0>] (ret_fast_syscall+0x0/0x28)
[  290.219884] Code: e5931000 e0603008 e0833183 e0813103 (e593300c)
[  290.223715] ---[ end trace ee6907230b405e54 ]---

It can easily be reproduced by these steps:

  1. Reset to the 2018-04-18-raspbian-stretch-lite.img and enable the headless SSH and /boot/wpa_supplicant.conf
  2. raspi-config -> enable camera module -> reboot
  3. (terminal 1)$ raspivid -t 0 -w 1280 -h 720 -o /dev/null
  4. (terminal 2)$ ssh pi@the-zero-ip
  5. Repeat step 4 until crash (will happen within 5 minutes)

The issue still exists when testing after updating with rpi-update.

I have also had freezes on Pi 3B+ with the same camera, but have not been able to create a proper reproduce or catched any kernel messages. It might be more related to #2387

Metadata

Metadata

Assignees

No one assigned

    Labels

    Wifi IssueAny issues related to wifi

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions