Vi Capture lead to the kernel oops
4733.090252] pcie cdev 6 flush rx buffer ok
[ 4733.090918] tegra-pcie-dw-ep 141a0000.pcie_ep: xavier pcie node 7 is opened.
[ 4733.090924] tegra-pcie-dw-ep 141a0000.pcie_ep: xavier pcie node 7 is opened, cmpl_ready_to_wr=0, cmpl_ready_to_rd=0.
[ 4733.190963] pcie cdev 7 flush rx buffer ok
[ 4751.902316] [RCE] vi5_hwinit: firmware CL2018101701 protocol version 2.2
[ 4752.329714] channel context at 3 is busy
[ 4752.329750] ------------[ cut here ]------------
[ 4752.329865] WARNING: CPU: 2 PID: 10293 at /home/dji/work/src/88e6321_mod/JetPack_4.2-L4T_R32.1/sources/kernel/kernel/nvidia/drivers/platform/tegra/rtcpu/capture-ivc.c:224 tegra_capture_ivc_notify_chan_id+0x190/0x1a8
[ 4752.330153] Modules linked in: fuse nvs_bmi160 nvs nvgpu binfmt_misc nfsd bluedroid_pm nfs_acl ip_tables x_tables
[ 4752.330199] CPU: 2 PID: 10293 Comm: nvargus-daemon Not tainted 4.9.140+ #3
[ 4752.330200] Hardware name: jetson-xavier (DT)
[ 4752.330203] task: ffffffc3eae16200 task.stack: ffffffc15ee10000
[ 4752.330206] PC is at tegra_capture_ivc_notify_chan_id+0x190/0x1a8
[ 4752.330208] LR is at tegra_capture_ivc_notify_chan_id+0x190/0x1a8
[ 4752.330211] pc : [] lr : [] pstate: 60400045
[ 4752.330212] sp : ffffffc15ee13ba0
[ 4752.330214] x29: ffffffc15ee13ba0 x28: ffffffc3eae16200
[ 4752.330217] x27: ffffff8008f52000 x26: 000000000000001d
[ 4752.330221] x25: ffffffc15ee13c38 x24: ffffffc3a6b64020
[ 4752.330224] x23: 0000000000000003 x22: ffffffc3a6b64e58
[ 4752.330227] x21: 0000000000000072 x20: 0000000000000e40
[ 4752.330230] x19: ffffffc3a6b64018 x18: 0000000000000000
[ 4752.330233] x17: 0000007f8d9a8b10 x16: ffffff8008269f88
[ 4752.330236] x15: ffffffffffffffff x14: ffffff800a15b1f8
[ 4752.330239] x13: ffffff800a15ae2c x12: ffffffffffffffff
[ 4752.330242] x11: 0000000000000040 x10: 0000000000000a20
[ 4752.330246] x9 : 000000000000052b x8 : 2073692033207461
[ 4752.330249] x7 : 20747865746e6f63 x6 : ffffff800a15a0f4
[ 4752.330252] x5 : 00ffffffffffffff x4 : 0000000000000006
[ 4752.330255] x3 : 0000000000010000 x2 : 0000000000010000
[ 4752.330258] x1 : ffffffc3eae16200 x0 : 000000000000001c
[ 4752.330262] —[ end trace 0460990f1c54ce55 ]—
[ 4752.330343] Call trace:
[ 4752.330348] [] tegra_capture_ivc_notify_chan_id+0x190/0x1a8
[ 4752.330353] [] vi_capture_setup+0x3e4/0x4f8
[ 4752.330356] [] vi_channel_ioctl+0x290/0x638
[ 4752.330361] [] do_vfs_ioctl+0xb0/0x8f8
[ 4752.330364] [] SyS_ioctl+0x94/0xa8
[ 4752.330369] [] el0_svc_naked+0x34/0x38
[ 4752.330547] tegra194-vi5 15c10000.vi: failed to update control callback
[ 4753.366228] tegra194-vi5 15c10000.vi: no reply from camera processor
[ 4753.366398] tegra194-vi5 15c10000.vi: vi capture setup failed
[ 4754.386233] tegra194-vi5 15c10000.vi: no reply from camera processor
[ 4755.414164] tegra194-vi5 15c10000.vi: no reply from camera processor
[ 4755.414353] attach is NULL
[ 4755.414400] ------------[ cut here ]------------
[ 4755.414492] WARNING: CPU: 1 PID: 10293 at /home/dji/work/src/88e6321_mod/JetPack_4.2-L4T_R32.1/sources/kernel/kernel/kernel-4.9/drivers/dma-buf/dma-buf.c:851 dma_buf_unmap_attachment+0x104/0x150
[ 4755.414759] Modules linked in: fuse nvs_bmi160 nvs nvgpu binfmt_misc nfsd bluedroid_pm nfs_acl ip_tables x_tables
[ 4755.414806] CPU: 1 PID: 10293 Comm: nvargus-daemon Tainted: G W 4.9.140+ #3
[ 4755.414808] Hardware name: jetson-xavier (DT)
[ 4755.414811] task: ffffffc3eae16200 task.stack: ffffffc15ee10000
[ 4755.414814] PC is at dma_buf_unmap_attachment+0x104/0x150
[ 4755.414816] LR is at dma_buf_unmap_attachment+0x104/0x150
[ 4755.414820] pc : [] lr : [] pstate: 60400045
[ 4755.414821] sp : ffffffc15ee13cd0
[ 4755.414823] x29: ffffffc15ee13cd0 x28: ffffffc3eae16200
[ 4755.414828] x27: ffffff8008f52000 x26: 0000000000000039
[ 4755.414831] x25: 0000000000000000 x24: ffffffc376c9fe68
[ 4755.414857] x23: ffffffc376c9fc00 x22: 0000000000000020
[ 4755.414860] x21: 0000000000000000 x20: ffffffc37c544f98
[ 4755.414863] x19: 0000000000000000 x18: 0000000000000010
[ 4755.414866] x17: 0000007f7ecc6f90 x16: ffffff80081374a0
[ 4755.414869] x15: 0000000000000006 x14: 0a726f737365636f
[ 4755.414872] x13: 7270206172656d61 x12: 63206d6f72662079
[ 4755.414875] x11: 6c706572206f6e20 x10: 3a69762e30303030
[ 4755.414878] x9 : 0000000000000554 x8 : 0000000000000002
[ 4755.414882] x7 : ffffffc15ee13cd0 x6 : ffffff800a15a0e6
[ 4755.414907] x5 : 00ffffffffffffff x4 : 0000000000000006
[ 4755.414910] x3 : 0000000000010000 x2 : 0000000000010000
[ 4755.414913] x1 : ffffffc3eae16200 x0 : 000000000000000e
[ 4755.414917] —[ end trace 0460990f1c54ce56 ]—
[ 4755.414997] Call trace:
[ 4755.415002] [] dma_buf_unmap_attachment+0x104/0x150
[ 4755.415008] [] capture_common_unpin_memory+0x2c/0x60
[ 4755.415012] [] vi_capture_request_unpin+0x74/0xb8
[ 4755.415037] [] vi_capture_shutdown+0x8c/0x120
[ 4755.415042] [] vi_channel_close_ex+0x2c/0x88
[ 4755.415045] [] vi_channel_release+0x2c/0x40
[ 4755.415050] [] __fput+0x94/0x1d0
[ 4755.415053] [] ____fput+0x20/0x30
[ 4755.415059] [] task_work_run+0xc0/0xe0
[ 4755.415064] [] do_notify_resume+0xa4/0xb0
[ 4755.415067] [] work_pending+0x8/0x10
[ 4755.415157] ------------[ cut here ]------------
[ 4755.415244] WARNING: CPU: 1 PID: 10293 at /home/dji/work/src/88e6321_mod/JetPack_4.2-L4T_R32.1/sources/kernel/kernel/kernel-4.9/drivers/dma-buf/dma-buf.c:640 dma_buf_put+0x38/0x48
[ 4755.415494] Modules linked in: fuse nvs_bmi160 nvs nvgpu binfmt_misc nfsd bluedroid_pm nfs_acl ip_tables x_tables
[ 4755.415522] CPU: 1 PID: 10293 Comm: nvargus-daemon Tainted: G W 4.9.140+ #3
[ 4755.415523] Hardware name: jetson-xavier (DT)
[ 4755.415525] task: ffffffc3eae16200 task.stack: ffffffc15ee10000
[ 4755.415527] PC is at dma_buf_put+0x38/0x48
[ 4755.415530] LR is at capture_common_unpin_memory+0x48/0x60
[ 4755.415533] pc : [] lr : [] pstate: 60400045
[ 4755.415534] sp : ffffffc15ee13ce0
[ 4755.415535] x29: ffffffc15ee13ce0 x28: ffffffc3eae16200
[ 4755.415539] x27: ffffff8008f52000 x26: 0000000000000039
[ 4755.415542] x25: 0000000000000000 x24: ffffffc376c9fe68
[ 4755.415545] x23: ffffffc376c9fc00 x22: 0000000000000020
[ 4755.415565] x21: 0000000000000008 x20: ffffffc37c544f80
[ 4755.415568] x19: ffffff800b4fd000 x18: 0000000000000010
[ 4755.415571] x17: 0000007f7ecc6f90 x16: ffffff80081374a0
[ 4755.415574] x15: 0000000000000006 x14: 0a726f737365636f
[ 4755.415577] x13: 7270206172656d61 x12: 63206d6f72662079
[ 4755.415580] x11: 6c706572206f6e20 x10: 3a69762e30303030
[ 4755.415583] x9 : 0000000000000554 x8 : 0000000000000002
[ 4755.415586] x7 : ffffffc15ee13cd0 x6 : ffffff800a15a0e6
[ 4755.415589] x5 : 00ffffffffffffff x4 : 0000000000000006
[ 4755.415609] x3 : 0000000000010000 x2 : 0000000000010000
[ 4755.415613] x1 : 0000000000000000 x0 : 0000000000000000
[ 4755.415617] —[ end trace 0460990f1c54ce57 ]—
[ 4755.415694] Call trace:
[ 4755.415698] [] dma_buf_put+0x38/0x48
[ 4755.415701] [] capture_common_unpin_memory+0x48/0x60
[ 4755.415704] [] vi_capture_request_unpin+0x74/0xb8
[ 4755.415707] [] vi_capture_shutdown+0x8c/0x120
[ 4755.415709] [] vi_channel_close_ex+0x2c/0x88
[ 4755.415711] [] vi_channel_release+0x2c/0x40
[ 4755.415715] [] __fput+0x94/0x1d0
[ 4755.415718] [] ____fput+0x20/0x30
[ 4755.415737] [] task_work_run+0xc0/0xe0
[ 4755.415740] [] do_notify_resume+0xa4/0xb0
[ 4755.415743] [] work_pending+0x8/0x10
[ 4755.415953] Unable to handle kernel NULL pointer dereference at virtual address 00000000
[ 4755.416084] Mem abort info:
[ 4755.416139] ESR = 0x96000046
[ 4755.416193] Exception class = DABT (current EL), IL = 32 bits
[ 4755.416290] SET = 0, FnV = 0
[ 4755.416369] EA = 0, S1PTW = 0
[ 4755.416527] Data abort info:
[ 4755.416763] ISV = 0, ISS = 0x00000046
[ 4755.417089] CM = 0, WnR = 1
[ 4755.417303] user pgtable: 4k pages, 39-bit VAs, pgd = ffffffc1e8a03000
[ 4755.423741] [0000000000000000] *pgd=00000003eea56003, *pud=00000003eea56003, *pmd=0000000000000000
[ 4755.433243] Internal error: Oops: 96000046 [#1] PREEMPT SMP
[ 4755.439018] Modules linked in: fuse nvs_bmi160 nvs nvgpu binfmt_misc nfsd bluedroid_pm nfs_acl ip_tables x_tables
[ 4755.449808] CPU: 1 PID: 10293 Comm: nvargus-daemon Tainted: G W 4.9.140+ #3
[ 4755.458177] Hardware name: jetson-xavier (DT)
[ 4755.462468] task: ffffffc3eae16200 task.stack: ffffffc15ee10000
[ 4755.468158] PC is at __mutex_lock_slowpath+0xa8/0x160
[ 4755.473600] LR is at __mutex_lock_slowpath+0x84/0x160
[ 4755.478822] pc : [] lr : [] pstate: a0400045
[ 4755.486173] sp : ffffffc15ee13c50
[ 4755.489588] x29: ffffffc15ee13c50 x28: ffffffc3eae16200
[ 4755.495185] x27: ffffff8008f52000 x26: 0000000000000039
[ 4755.500693] x25: 0000000000000000 x24: ffffffc3ec36d960
[ 4755.506294] x23: ffffffc376c9fc00 x22: ffffffc3ec36d95c
[ 4755.511633] x21: ffffffc3eae16200 x20: ffffffffffffffff
[ 4755.516882] x19: ffffffc3ec36d958 x18: 0000007f7ed50a70
[ 4755.522656] x17: 0000007f7ecc6f90 x16: ffffff80081374a0
[ 4755.528345] x15: 0000000000000000 x14: 0000000000000002
[ 4755.534030] x13: 000000000000270f x12: 0000007f1e8061a0
[ 4755.539633] x11: 00000000002d7de5 x10: 0000000000000a20
[ 4755.545234] x9 : ffffffc15ee13b30 x8 : ffffffc3eae16c80
[ 4755.551006] x7 : 00000000001398e2 x6 : 0000000000000400
[ 4755.556517] x5 : 0000000000000000 x4 : 000000000002eea3
[ 4755.561859] x3 : 0000000000000000 x2 : 0000000000010000
[ 4755.567195] x1 : ffffffc15ee13c98 x0 : 0000000000000000
[ 4755.573946] Process nvargus-daemon (pid: 10293, stack limit = 0xffffffc15ee10000)
[ 4755.580933] Call trace:
[ 4755.583250] [] __mutex_lock_slowpath+0xa8/0x160
[ 4755.589085] [] mutex_lock+0x50/0x68
[ 4755.593908] [] dma_buf_unmap_attachment+0x3c/0x150
[ 4755.600282] [] capture_common_unpin_memory+0x2c/0x60
[ 4755.605965] [] vi_capture_request_unpin+0x74/0xb8
[ 4755.612106] [] vi_capture_shutdown+0x8c/0x120
[ 4755.617431] [] vi_channel_close_ex+0x2c/0x88
[ 4755.623295] [] vi_channel_release+0x2c/0x40
[ 4755.628375] [] __fput+0x94/0x1d0
[ 4755.633179] [] ____fput+0x20/0x30
[ 4755.637814] [] task_work_run+0xc0/0xe0
[ 4755.643070] [] do_notify_resume+0xa4/0xb0
[ 4755.648579] [] work_pending+0x8/0x10
[ 4755.653657] —[ end trace 0460990f1c54ce58 ]—
[ 4755.666716] note: nvargus-daemon[10293] exited with preempt_count 2
[ 4755.890166] fence timeout on [ffffffc173947540] after 1500ms
[ 4755.890310] name=[nvhost_sync:43], current value=252 waiting value=253
[ 4755.890430] ---- mlocks ----
[ 4755.890533] ---- syncpts ----
[ 4755.890589] id 1 (interrupt_syncpt) min 1372617 max 0 refs 1 (previous client : )
[ 4755.890708] id 8 (gv11b_511) min 233 max 233 refs 1 (previous client : )
[ 4755.890812] id 9 (gv11b_510) min 9 max 9 refs 1 (previous client : )
[ 4755.890921] id 11 (gv11b_509) min 17 max 17 refs 1 (previous client : gv11b_509)
[ 4755.891038] id 13 (progress) min 1122 max 0 refs 1 (previous client : progress)
[ 4755.891148] id 14 (stats_progress) min 4862 max 0 refs 1 (previous client : stats_progress)
[ 4755.891277] id 16 (gv11b_508_user) min 1572864 max 1572864 refs 1 (previous client : gv11b_508_user)
[ 4755.891714] id 18 (gv11b_507_user) min 1572885 max 1572883 refs 1 (previous client : gv11b_507_user)
[ 4755.892417] id 20 (gv11b_506_user) min 1572864 max 1572864 refs 1 (previous client : gv11b_506_user)
[ 4755.893101] id 22 (gv11b_505_user) min 1572864 max 1572864 refs 1 (previous client : gv11b_505_user)
[ 4755.894161] tegra194-vi5 15c10000.vi: no reply from camera processor
[ 4755.894168] tegra194-vi5 15c10000.vi: vi capture get status failed:(-110)
[ 4755.911552] id 24 (gv11b_504_user) min 1572864 max 1572864 refs 1 (previous client : gv11b_504_user)
[ 4755.920794] id 25 (progress) min 444 max 0 refs 1 (previous client : progress)
[ 4755.928356] id 30 (gv11b_503) min 42 max 42 refs 1 (previous client : gv11b_503)
[ 4755.935583] id 31 (gv11b_502) min 48 max 48 refs 1 (previous client : gv11b_502)
[ 4755.943425] id 32 (gv11b_501) min 40 max 40 refs 1 (previous client : gv11b_501)
[ 4755.951046] id 33 (gv11b_500) min 39 max 39 refs 1 (previous client : gv11b_500)
[ 4755.958614] id 34 (gv11b_499) min 39 max 39 refs 1 (previous client : gv11b_499)
[ 4755.966256] id 35 (progress) min 459 max 0 refs 1 (previous client : progress)
[ 4755.973398] id 37 (15340000.vic_nvargus-daemon_0) min 3 max 3 refs 1 (previous client : 15340000.vic_nvargus-daemon_0)
[ 4755.984160] id 38 (gv11b_489) min 39 max 39 refs 1 (previous client : gv11b_489)
[ 4755.991783] id 39 (gv11b_496) min 36 max 36 refs 1 (previous client : gv11b_496)
[ 4755.999101] id 40 (gv11b_494) min 39 max 39 refs 1 (previous client : gv11b_494)
[ 4756.006782] id 41 (gv11b_497) min 39 max 39 refs 1 (previous client : gv11b_488)
[ 4756.014167] id 42 (gv11b_488) min 39 max 39 refs 1 (previous client : gv11b_497)
[ 4756.021648] id 43 (progress) min 252 max 0 refs 1 (previous client : progress)
[ 4756.028807] id 45 (gv11b_487) min 24 max 24 refs 1 (previous client : gv11b_490)
[ 4756.036214] id 46 (15340000.vic_nvargus-daemon_0) min 15 max 15 refs 1 (previous client : 15340000.vic_nvargus-daemon_0)
[ 4756.047232] id 47 (gv11b_485) min 39 max 39 refs 1 (previous client : gv11b_487)
[ 4756.054768] id 48 (gv11b_491) min 39 max 39 refs 1 (previous client : gv11b_485)
[ 4756.061929] id 49 (gv11b_490) min 39 max 39 refs 1 (previous client : gv11b_491)
[ 4756.069646] id 50 (gv11b_498) min 39 max 39 refs 1 (previous client : gv11b_498)
[ 4756.077101] id 53 (gv11b_492_user) min 21 max 21 refs 1 (previous client : gv11b_486)
[ 4756.084782] id 54 (gv11b_486) min 15 max 15 refs 1 (previous client : 15340000.vic_nvargus-daemon_0)
[ 4756.093819] id 55 (gv11b_486_user) min 40 max 36 refs 1 (previous client : gv11b_492)
[ 4756.101624] id 56 (gv11b_493) min 36 max 36 refs 1 (previous client : gv11b_493)
[ 4756.109044] id 57 (gv11b_493_user) min 387 max 36 refs 1 (previous client : gv11b_495)
[ 4756.117150] id 58 (gv11b_484) min 36 max 36 refs 1 (previous client : gv11b_484)
[ 4756.124480] id 60 (gv11b_495) min 1572864 max 1572864 refs 1 (previous client : gv11b_483_user)
[ 4756.134806] ---- channels ----
[ 4756.137786]
channel 2 - 15820000.se
[ 4756.143942] NvHost basic channel registers:
[ 4756.148183] CMDFIFO_STAT_0: 00002040
[ 4756.152070] CMDFIFO_RDATA_0: 0a0c0244
[ 4756.155481] CMDP_OFFSET_0: 00000000
[ 4756.159127] CMDP_CLASS_0: 00000000
[ 4756.162803] CHANNELSTAT_0: 00000000
[ 4756.166742] The CDMA sync queue is empty.
[ 4756.172498]
channel 3 - 15830000.se
[ 4756.178939] NvHost basic channel registers:
[ 4756.183111] CMDFIFO_STAT_0: 00002040
[ 4756.186348] CMDFIFO_RDATA_0: 10487102
[ 4756.189994] CMDP_OFFSET_0: 00000000
[ 4756.193771] CMDP_CLASS_0: 00000000
[ 4756.197451] CHANNELSTAT_0: 00000000
[ 4756.200859] The CDMA sync queue is empty.
[ 4756.206586]
channel 4 - 15840000.se
[ 4756.213110] NvHost basic channel registers:
[ 4756.216971] CMDFIFO_STAT_0: 00002040
[ 4756.220650] CMDFIFO_RDATA_0: 20440140
[ 4756.224610] CMDP_OFFSET_0: 00000000
[ 4756.228285] CMDP_CLASS_0: 00000000
[ 4756.231670] CHANNELSTAT_0: 00000000
[ 4756.235344] The CDMA sync queue is empty.
[ 4756.240855]
---- host general irq ----
[ 4756.247918] sync_intc0mask = 0x00000001
[ 4756.251799] sync_intmask = 0x50000003
[ 4756.255345]
---- host syncpt irq mask ----
[ 4756.262308]
---- host syncpt irq status ----