>Synopsis: Kernel panic when writing to /dev/audio
>Category: Kernel
>Environment:
System : OpenBSD 6.2
Details : OpenBSD 6.2-current (GENERIC) #1: Sun Feb 18 16:46:14 CET
2018
r...@foo.fritz.box:/usr/src/sys/arch/arm64/compile/GENERIC
Architecture: OpenBSD.arm64
Machine : arm64
>Description:
Kernel panic when writing to /dev/audio (USB audio)
>How-To-Repeat:
cd /dev; cat urandom > audio, or use sox' play(1) command to play any
mp3 audio
>Fix:
None, i am not familiar with kernel debugging/fixing
SENDBUG: dmesg, pcidump, acpidump and usbdevs are attached.
SENDBUG: Feel free to delete or use the -D flag if they contain sensitive
information.
dmesg:
OpenBSD 6.2-current (GENERIC) #1: Sun Feb 18 16:46:14 CET 2018
r...@foo.fritz.box:/usr/src/sys/arch/arm64/compile/GENERIC
real mem = 964767744 (920MB)
avail mem = 908701696 (866MB)
mainbus0 at root: Raspberry Pi 3 Model B Rev 1.2
cpu0 at mainbus0 mpidr 0: ARM Cortex-A53 r0p4
efi0 at mainbus0: UEFI 2.0.5
efi0: Das U-boot rev 0x0
simplefb0 at mainbus0: 656x416
wsdisplay0 at simplefb0 mux 1
wsdisplay0: screen 0-5 added (std, vt100 emulation)
simplebus0 at mainbus0: "soc"
syscon0 at simplebus0: "syscon"
bcmintc0 at simplebus0
bcmdog0 at simplebus0
pluart0 at simplebus0
bcmaux0 at simplebus0
com0 at simplebus0: ns16550, no working fifo
com0: console
dwctwo0 at simplebus0
agtimer0 at simplebus0: tick rate 19200 KHz
simplebus1 at mainbus0: "clocks"
usb0 at dwctwo0: USB revision 2.0
uhub0 at usb0 configuration 1 interface 0 "Broadcom DWC2 root hub" rev
2.00/1.00 addr 1
uhub1 at uhub0 port 1 configuration 1 interface 0 "Standard Microsystems
product 0x9514" rev 2.00/2.00 addr 2
smsc0 at uhub1 port 1 configuration 1 interface 0 "Standard Microsystems
SMSC9512/14" rev 2.00/2.00 addr 3
smsc0: address b8:27:eb:8d:8e:a8
ukphy0 at smsc0 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI
0x0001f0, model 0x000c
uaudio0 at uhub1 port 3 configuration 1 interface 0 "ABC C-Media USB Audio
Device" rev 1.10/1.00 addr 4
uaudio0: audio rev 1.00, 8 mixer controls
audio0 at uaudio0
uhidev0 at uhub1 port 3 configuration 1 interface 3 "ABC C-Media USB Audio
Device" rev 1.10/1.00 addr 4
uhidev0: iclass 3/0
uhid0 at uhidev0: input=4, output=4, feature=0
umass0 at uhub1 port 4 configuration 1 interface 0 "JetFlash Mass Storage
Device" rev 2.10/11.00 addr 5
umass0: using SCSI over Bulk-Only
scsibus0 at umass0: 2 targets, initiator 0
sd0 at scsibus0 targ 1 lun 0: <JetFlash, Transcend 16GB, 1100> SCSI4 0/direct
removable serial.856410005Y2I6Q9SV6N0
sd0: 15064MB, 512 bytes/sector, 30851072 sectors
vscsi0 at root
scsibus1 at vscsi0: 256 targets
softraid0 at root
scsibus2 at softraid0: 256 targets
bootfile: sd0a:/bsd
boot device: sd0
root on sd0a (24d0157b87573f8c.a) swap on sd0b dump on sd0b
WARNING: / was not properly unmounted
WARNING: CHECK AND RESET THE DATE!
usbdevs:
Controller /dev/usb0:
addr 1: high speed, self powered, config 1, DWC2 root hub(0x0000),
Broadcom(0x0000), rev 1.00
port 1 addr 2: high speed, self powered, config 1, product 0x9514(0x9514),
Standard Microsystems(0x0424), rev 2.00
port 1 addr 3: high speed, self powered, config 1, SMSC9512/14(0xec00),
Standard Microsystems(0x0424), rev 2.00
port 2 powered
port 3 addr 4: full speed, power 100 mA, config 1, C-Media USB Audio
Device(0x0008), ABC(0x0d8c), rev 1.00
port 4 addr 5: high speed, power 300 mA, config 1, Mass Storage
Device(0x1000), JetFlash(0x8564), rev 11.00, iSerialNumber 01TC5Y2I6Q9SV6N0
port 5 powered
pcidump:
acpidump:
login: panic: kernel diagnostic assertion "xfertype != UE_ISOCHRONOUS ||
xfer->nframes < DWC2_MAXISOCP1
Stopped at panic+0x154: TID PID UID PRFLAGS PFLAGS C
PU COMMAND
*419441 22975 0 0x100003 0 0 cat
db_enter() at panic+0x150
panic() at dwc2_device_start+0x448
dwc2_device_start() at usbd_transfer+0x144
usbd_transfer() at uaudio_trigger_output+0x120
uaudio_trigger_output() at audio_start_do+0x94
audio_start_do() at audio_write+0x1d4
audio_write() at audiowrite+0x5c
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb> ps
PID TID PPID UID S FLAGS WAIT COMMAND
*22975 419441 5689 0 7 0x100003 cat
5689 467652 35953 0 3 0x83 wait bash
35953 389800 76291 0 3 0x92 select sshd
55493 253406 1 0 3 0x100083 ttyin getty
97168 494148 1 0 3 0x100098 poll cron
10255 431749 1 110 3 0x100090 poll sndiod
79222 108616 1 99 3 0x100090 poll sndiod
61309 292664 59971 95 3 0x100092 kqread smtpd
55188 161108 59971 103 3 0x100092 kqread smtpd
3057 518445 59971 95 3 0x100092 kqread smtpd
96047 27174 59971 95 3 0x100092 kqread smtpd
62496 434645 59971 95 3 0x100092 kqread smtpd
86341 293036 59971 95 3 0x100092 kqread smtpd
59971 218445 1 0 3 0x100080 kqread smtpd
76291 269291 1 0 3 0x80 select sshd
43366 347618 1 0 3 0x100080 poll ntpd
53308 487670 18663 83 3 0x100092 poll ntpd
18663 139799 1 83 3 0x100092 poll ntpd
46385 231748 81846 74 3 0x100092 bpf pflogd
81846 179519 1 0 3 0x80 netio pflogd
5987 339260 90176 73 3 0x100090 kqread syslogd
90176 288179 1 0 3 0x100082 netio syslogd
26715 191971 1 77 3 0x100090 poll dhclient
46511 488471 1 0 3 0x80 poll dhclient
89838 99419 67154 115 3 0x100092 kqread slaacd
74675 410858 67154 115 3 0x100092 kqread slaacd
67154 112738 1 0 3 0x80 kqread slaacd
35000 80939 0 0 3 0x14200 pgzero zerothread
1930 360823 0 0 3 0x14200 aiodoned aiodoned
7795 131091 0 0 3 0x14200 syncer update
9439 93014 0 0 3 0x14200 cleaner cleaner
86999 116209 0 0 3 0x14200 reaper reaper
27002 169944 0 0 3 0x14200 pgdaemon pagedaemon
78386 146948 0 0 3 0x14200 bored crynlk
71716 214983 0 0 3 0x14200 bored crypto
63505 380144 0 0 3 0x14200 usbtsk usbtask
70205 106443 0 0 3 0x14200 usbatsk usbatsk
97567 374047 0 0 3 0x14200 bored dwc2
86482 325590 0 0 3 0x14200 bored softnet
48572 19531 0 0 3 0x14200 bored systqmp
98789 134774 0 0 3 0x14200 bored systq
36876 246705 0 0 3 0x40014200 bored softclock
81598 422523 0 0 3 0x40014200 idle0
83526 462821 0 0 3 0x14200 kmalloc kmthread
1 154280 0 0 3 0x82 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb> trace
db_enter() at panic+0x150
panic() at dwc2_device_start+0x448
dwc2_device_start() at usbd_transfer+0x144
usbd_transfer() at uaudio_trigger_output+0x120
uaudio_trigger_output() at audio_start_do+0x94
audio_start_do() at audio_write+0x1d4
audio_write() at audiowrite+0x5c
audiowrite() at spec_write+0xa4
spec_write() at VOP_WRITE+0x4c
VOP_WRITE() at vn_write+0xe4
vn_write() at dofilewritev+0x1c4
dofilewritev() at sys_write+0xa0
sys_write() at svc_handler+0x1bc
svc_handler() at do_el0_sync+0xe0
do_el0_sync() at handle_el0_sync+0x68
handle_el0_sync() at 0x7f59761e8
--- trap ---
ddb> boot dump
syncing disks... 6 5 done
WARNING: not updating battery clock
dump to dev 4,1 not possible
rebooting...
U-Boot 2017.11 (Dec 02 2017 - 03:42:26 -0700)
DRAM: 948 MiB
RPI 3 Model B (0xa02082)
MMC: sdhci@7e300000: 0
reading uboot.env
In: serial
Out: vidconsole
Err: vidconsole
Net: No ethernet found.
starting USB...
USB0: Core Release: 2.80a
scanning bus 0 for devices... 5 USB Device(s) found
scanning usb for storage devices... 1 Storage Device(s) found
Hit any key to stop autoboot: 0
Device 0: Vendor: JetFlash Rev: 1100 Prod: Transcend 16GB
Type: Removable Hard Disk
Capacity: 15064.0 MB = 14.7 GB (30851072 x 512)
... is now current device
Scanning usb 0:1...
Found EFI removable media binary efi/boot/bootaa64.efi
Scanning disk sd...@7e300000.blk...
Scanning disk usb_mass_storage.lun0...
Found 2 disks
reading efi/boot/bootaa64.efi
82748 bytes read in 80 ms (1009.8 KiB/s)
## Starting EFI application at 01000000 ...
>> OpenBSD/arm64 BOOTAA64 0.11
boot>
booting sd0a:/bsd: 3927280+587192+577992+805976
[280187+96+460944+245212]=0x842eb0
type 0x0 pa 0x0 va 0x0 pages 0x1 attr 0x8
type 0x7 pa 0x1000 va 0x0 pages 0x1ff attr 0x8
type 0x2 pa 0x200000 va 0x200000 pages 0x4000 attr 0x8
type 0x7 pa 0x4200000 va 0x0 pages 0x3e00 attr 0x8
type 0x4 pa 0x8000000 va 0x8000000 pages 0x6 attr 0x8
type 0x7 pa 0x8007000 va 0x0 pages 0x31814 attr 0x8
type 0x2 pa 0x3981b000 va 0x3981b000 pages 0x4 attr 0x8
type 0x2 pa 0x3981f000 va 0x3981f000 pages 0x4 attr 0x8
type 0x2 pa 0x39823000 va 0x39823000 pages 0x4 attr 0x8
type 0x2 pa 0x39827000 va 0x39827000 pages 0x4 attr 0x8
<etc>
