USB crash with recent kernel on Raspberry Pi

[Dave Tyson <dtyson%anduin.org.uk@localhost>]

Been playing with the latest R-Pi snapshot posted by Jun Ebihara on port-arm.
Hooked up a USB webcam and tried mplayer. I thought it might fail as I have an 
outstanding PR-48308 with UVC cameras and it did, but with a different crash.
Camera attached OK, but an ordinary user can crash kernel invoking mplayer:

export DISPLAY=192.168.0.110:0.0
mplayer tv:// -tv driver=v4l2:device=/dev/video0 -fps 30 


I can submit a pr for this if wanted and am happy to compile a new kernel with 
more diagnostics and or fixes :-)

Dave

Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005,
    2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016
    The NetBSD Foundation, Inc.  All rights reserved.
Copyright (c) 1982, 1986, 1989, 1991, 1993
    The Regents of the University of California.  All rights reserved.

NetBSD 7.99.26 (RPI.201602172150Z)
total memory = 448 MB
avail memory = 434 MB
sysctl_createv: sysctl_create(machine_arch) returned 17
timecounter: Timecounters tick every 10.000 msec
mainbus0 (root)
cpu0 at mainbus0 core 0: 700 MHz ARM1176JZ-S r0p7 (ARM11J V6ZK core)
cpu0: DC enabled IC enabled WB enabled LABT
cpu0: 16KB/32B 4-way L1 VIPT Instruction cache
cpu0: 16KB/32B 4-way write-back-locking-C L1 VIPT Data cache
vfp0 at cpu0: VFP11, rounding, exceptions
obio0 at mainbus0
bcmicu0 at obio0
bcmmbox0 at obio0 intr 65: VC mailbox
vcmbox0 at bcmmbox0
bcmtmr0 at obio0 intr 3: VC System Timer
vchiq0 at obio0 intr 66: BCM2835 VCHIQ
bcmpm0 at obio0: Power management, Reset and Watchdog controller
bcmdmac0 at obio0: DMA0 DMA2 DMA4 DMA5 DMA8 DMA9 DMA10
bcmrng0 at obio0: RNG
plcom0 at obio0 intr 57
plcom0: txfifo disabled
plcom0: console
genfb0 at obio0no data for est. mode 640x480x67
: switching to framebuffer console
genfb0: framebuffer at 0x5e402000, size 1920x1080, depth 32, stride 7680
wsdisplay0 at genfb0 kbdmux 1: console (default, vt100 emulation)
wsmux1: connecting to wsdisplay0
wsdisplay0: screen 1-3 added (default, vt100 emulation)
sdhc0 at obio0 intr 62: SDHC controller
sdhc0: interrupting on intr 62
dwctwo0 at obio0 intr 9: USB controller
bcmspi0 at obio0 intr 54: SPI
spi0 at bcmspi0: SPI bus
bsciic0 at obio0 intr 53: BSC0
iic0 at bsciic0: I2C bus
bsciic1 at obio0 intr 53: BSC1
iic1 at bsciic1: I2C bus
bcmgpio0 at obio0: GPIO [0...31]
gpio0 at bcmgpio0: 32 pins
bcmgpio1 at obio0: GPIO [32...53]
gpio1 at bcmgpio1: 22 pins
bcmcm at obio0 not configured
bcmpwm at obio0 not configured
usb0 at dwctwo0: USB revision 2.0
timecounter: Timecounter "clockinterrupt" frequency 100 Hz quality 0
timecounter: Timecounter "bcmtmr0" frequency 1000000 Hz quality 100
sdhc0: SDHC 3.0, rev 153, platform DMA, 250000 kHz, HS SDR50 3.3V, re-tuning 
mode 1, 1024 byte blocks
sdmmc0 at sdhc0 slot 0
uhub0 at usb0: vendor 0000 DWC2 root hub, class 9/0, rev 2.00/1.00, addr 1
uhub0: 1 port with 1 removable, self powered
IPsec: Initialized Security Association Processing.
ld0 at sdmmc0: <0x03:0x5344:SU08G:0x80:0x19c44f4d:0x0c6>
ld0: 7580 MB, 3850 cyl, 64 head, 63 sec, 512 bytes/sect x 15523840 sectors
ld0: 4-bit width, SDR50, 100.000 MHz
uhub1 at uhub0 port 1: vendor 0424 product 9512, class 9/0, rev 2.00/2.00, 
addr 2
uhub1: multiple transaction translators
uhub1: 3 ports with 2 removable, self powered
usmsc0 at uhub1 port 1
usmsc0: vendor 0424 product ec00, rev 2.00/2.00, addr 3
usmsc0: Ethernet address b8:27:eb:cc:63:df
ukphy0 at usmsc0 phy 1: OUI 0x00800f, model 0x000c, rev. 3
ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
uhidev0 at uhub1 port 2 configuration 1 interface 0
uhidev0: vendor 04f3 product 0103, rev 2.00/1.07, addr 4, iclass 3/1
ukbd0 at uhidev0: 8 modifier keys, 6 key codes
wskbd0 at ukbd0: console keyboard, using wsdisplay0
uhidev1 at uhub1 port 2 configuration 1 interface 1
uhidev1: vendor 04f3 product 0103, rev 2.00/1.07, addr 4, iclass 3/0
uhidev1: 2 report ids
uhid0 at uhidev1 reportid 1: input=2, output=0, feature=0
uhid1 at uhidev1 reportid 2: input=1, output=0, feature=0
uvideo0 at uhub1 port 3 configuration 1 interface 0: vendor 04f2 USB2.0 2MP 
UVC Camera, rev 2.00/1.00, addr 5
video0 at uvideo0: vendor 04f2 USB2.0 2MP UVC Camera, rev 2.00/1.00, addr 5
uaudio0 at uhub1 port 3 configuration 1 interface 2
uaudio0: vendor 04f2 USB2.0 2MP UVC Camera, rev 2.00/1.00, addr 5
uaudio0: audio rev 1.00
audio1 at uaudio0: full duplex, playback, capture, independent
boot device: ld0
root on ld0a dumps on ld0b
root file system type: ffs
kern.module.path=/stand/evbarm/7.99.26/modules
vchiq: local ver 6 (min 3), remote ver 6.
vcaudio0 at vchiq0: auds
WARNING: no TOD clock present
WARNING: using filesystem time
WARNING: CHECK AND RESET THE DATE!
audio0 at vcaudio0: half duplex, playback, capture, independent
wsdisplay0: screen 4 added (default, vt100 emulation)
panic: kernel diagnostic assertion "xfertype != UE_ISOCHRONOUS || xfer-
>nframes < DWC2_MAXISOCPACKETS" failed: file 
"/usr/src/sys/external/bsd/dwc2/dwc2.c", line 1370 
cpu0: Begin traceback...
0x9b9a3a3c: netbsd:db_panic+0xc
0x9b9a3a6c: netbsd:vpanic+0x144
0x9b9a3a84: netbsd:kern_assert+0x40
0x9b9a3af4: netbsd:dwc2_device_start+0x44c
0x9b9a3b14: netbsd:dwc2_device_isoc_start+0x3c
0x9b9a3b4c: netbsd:usbd_transfer+0x128
0x9b9a3b94: netbsd:uvideo_start_transfer+0x244
0x9b9a3bac: netbsd:video_stream_on.part.10+0x28
0x9b9a3cec: netbsd:videoioctl+0xc58
0x9b9a3d14: netbsd:cdev_ioctl+0x84
0x9b9a3d3c: netbsd:spec_ioctl+0x94
0x9b9a3d6c: netbsd:VOP_IOCTL+0x6c
0x9b9a3e3c: netbsd:vn_ioctl+0xb0
0x9b9a3f04: netbsd:sys_ioctl+0x25c
0x9b9a3f7c: netbsd:syscall+0x88
0x9b9a3fac: netbsd:swi_handler+0xa0
cpu0: End traceback...

dump to dev 92,1 not possible

-- 
=========================================
Phone: 07805784357
Open Source O/S: www.netbsd.org
Caving: http://www.wirralcavinggroup.org.uk
=========================================