There are two ways to propagate the error in MMCCAM:
* Using cmd.error which is set by the peripheral driver;
* Using CCB status which is... also set by the driver.
The problem is that those two error conditions not necessarily match.
This leads to the confusion when handling MMC reply. So enforce the consistency
by panicking if request is marked as completed successfully but MMC-level error
is present.