After I upgraded the driver running in r35.4.1 without problems to r35.5.0, when I used the v4l2-ctl command to print the frame rate, when I did not connect the sensor, or the sensor did not have a start stream, the following error occurred in dmesg:
[ 1432.454398] tegra-camrtc-capture-vi tegra-capture-vi: uncorr_err: request timed out after 2500 ms
[ 1432.454698] tegra-camrtc-capture-vi tegra-capture-vi: err_rec: attempting to reset the capture channel
[ 1432.454990] (NULL device *): vi_capture_control_message: NULL VI channel received
[ 1432.455216] t194-nvcsi 13e40000.host1x:nvcsi@15a00000: csi5_stream_close: Error in closing stream_id=0, csi_port=0
[ 1432.455540] (NULL device *): vi_capture_control_message: NULL VI channel received
[ 1432.455760] t194-nvcsi 13e40000.host1x:nvcsi@15a00000: csi5_stream_open: VI channel not found for stream- 0 vc- 0
[ 1432.456261] tegra-camrtc-capture-vi tegra-capture-vi: err_rec: successfully reset the capture channel
[ 1435.010744] tegra-camrtc-capture-vi tegra-capture-vi: uncorr_err: request timed out after 2500 ms
[ 1435.011045] tegra-camrtc-capture-vi tegra-capture-vi: err_rec: attempting to reset the capture channel
[ 1435.011344] (NULL device *): vi_capture_control_message: NULL VI channel received
[ 1435.011576] t194-nvcsi 13e40000.host1x:nvcsi@15a00000: csi5_stream_close: Error in closing stream_id=0, csi_port=0
[ 1435.011894] (NULL device *): vi_capture_control_message: NULL VI channel received
[ 1435.012133] t194-nvcsi 13e40000.host1x:nvcsi@15a00000: csi5_stream_open: VI channel not found for stream- 0 vc- 0
[ 1435.012696] tegra-camrtc-capture-vi tegra-capture-vi: err_rec: successfully reset the capture channel
[ 1435.042338] [RCE] ERROR: camera-ip/vi5/vi5.c:3913 [vi5_update_channel_match_data] "match configuration is already in use by by channel 35 cannot set channel match configuration"
[ 1435.042344] [RCE] ERROR: services/capture/capture-scheduler.c:3024 [capture_scheduler_thread] "Error processing event 0x100003"
[1435.042338] [RCE] ERROR: camera-ip/vi5/vi5.c:3913 [vi5_update_channel_match_data] “match configuration is already in use by by channel 35 cannot set channel match configuration”
[1435.042344] [RCE] ERROR: services/capture/capture-scheduler.c:3024 [capture_scheduler_thread] “Error processing event 0x100003” The two logs have not appeared before. I want to know if its presence means there is a bug in my drive.
When I was testing the slave mode of the multiplex camera, I used the v4l2-ctl command to print the frame rate of the multiplex camera. I controlled the output frame rate of the sensor by adjusting the trigger signal frequency provided by the outside, and the tests were all normal. But when I finally broke the trigger signal, I tried to terminate the v4l2-ctl command, and a kernel crash occurred, dmesg as follows:
[ 1808.228198] [RCE] ERROR: camera-ip/vi5/vi5.c:3913 [vi5_update_channel_match_data] "match configuration is already in use by by channel 32 cannot set channel match configuration"
[ 1808.228204] [RCE] ERROR: services/capture/capture-scheduler.c:3024 [capture_scheduler_thread] "Error processing event 0x100003"
[ 1808.436350] tegra-camrtc-capture-vi tegra-capture-vi: uncorr_err: request timed out after 2500 ms
[ 1808.436379] tegra-camrtc-capture-vi tegra-capture-vi: uncorr_err: request timed out after 2500 ms
[ 1808.436620] tegra-camrtc-capture-vi tegra-capture-vi: err_rec: attempting to reset the capture channel
[ 1808.436632] (NULL device *): vi_capture_control_message: NULL VI channel received
[ 1808.436910] tegra-camrtc-capture-vi tegra-capture-vi: err_rec: attempting to reset the capture channel
[ 1808.437144] t194-nvcsi 13e40000.host1x:nvcsi@15a00000: csi5_stream_close: Error in closing stream_id=2, csi_port=2
[ 1808.437148] (NULL device *): vi_capture_control_message: NULL VI channel received
[ 1808.437380] (NULL device *): vi_capture_control_message: NULL VI channel received
[ 1808.437621] t194-nvcsi 13e40000.host1x:nvcsi@15a00000: csi5_stream_open: VI channel not found for stream- 2 vc- 3
[ 1808.439598] tegra-camrtc-capture-vi tegra-capture-vi: err_rec: successfully reset the capture channel
[ 1808.439628] t194-nvcsi 13e40000.host1x:nvcsi@15a00000: csi5_stream_close: Error in closing stream_id=0, csi_port=0
[ 1808.441012] max96705 31-0044: ===>max96705 7 stop streaming 0
[ 1808.444552] (NULL device *): vi_capture_control_message: NULL VI channel received
[ 1808.452062] max96705 31-0044: i2c-r, 0x04 = 0xc7
[ 1808.452074] t194-nvcsi 13e40000.host1x:nvcsi@15a00000: csi5_stream_open: VI channel not found for stream- 0 vc- 1
[ 1808.462494] max96705 31-0044: i2c-w, 0x04 = 0x47
[ 1808.463128] tegra-camrtc-capture-vi tegra-capture-vi: err_rec: successfully reset the capture channel
[ 1808.610793] ------------[ cut here ]------------
[ 1808.610951] refcount_t: addition on 0; use-after-free.
[ 1808.610979] WARNING: CPU: 0 PID: 3822 at lib/refcount.c:25 refcount_warn_saturate+0x98/0x140
[ 1808.611237] Modules linked in: sg1_ar0144_gmsl1(E) max96712(E) max9296(E) max96705(E) nvidia_modeset(OE) fuse(E) lzo_rle(E) lzo_compress(E) zram(E) ramoops(E) reed_solomon(E) bnep(E) aes_ce_blk(E) crypto_simd(E) rtk_btusb(E) rtl8822ce(E) cryptd(E) input_leds(E) btusb(E) snd_soc_tegra186_asrc(E) aes_ce_cipher(E) ghash_ce(E) btrtl(E) snd_soc_tegra210_ope(E) snd_soc_tegra186_arad(E) snd_soc_tegra186_dspk(E) snd_soc_tegra210_iqc(E) loop(E) snd_soc_tegra210_afc(E) snd_soc_tegra210_mvc(E) sha2_ce(E) snd_soc_tegra210_dmic(E) btbcm(E) snd_soc_tegra210_adsp(E) snd_soc_tegra210_adx(E) snd_soc_tegra210_admaif(E) snd_soc_tegra210_amx(E) sha256_arm64(E) ucsi_ccg(E) snd_soc_tegra210_mixer(E) btintel(E) snd_soc_tegra210_sfc(E) snd_soc_tegra210_i2s(E) snd_soc_tegra_machine_driver(E) snd_soc_tegra_pcm(E) sha1_ce(E) typec_ucsi(E) snd_soc_tegra_utils(E) nct1008(E) snd_soc_spdif_tx(E) i2c_nvvrs11(E) nvadsp(E) typec(E) cfg80211(E) snd_soc_simple_card_utils(E) snd_hda_codec_hdmi(E) snd_soc_tegra210_ahub(E)
[ 1808.611371] tegra_bpmp_thermal(E) userspace_alert(E) snd_hda_tegra(E) tegra210_adma(E) snd_hda_codec(E) snd_soc_rt5640(E) spi_tegra114(E) snd_hda_core(E) snd_soc_rl6231(E) nvidia(OE) binfmt_misc(E) ina3221(E) pwm_fan(E) nvgpu(E) nvmap(E) ip_tables(E) x_tables(E) [last unloaded: max96712]
[ 1808.611418] CPU: 0 PID: 3822 Comm: v4l2-ctl Tainted: G W OE 5.10.192-tegra #1
[ 1808.611421] Hardware name: Jetson AGX Orin Developer Kit (DT)
[ 1808.611426] pstate: 60400009 (nZCv daif +PAN -UAO -TCO BTYPE=--)
[ 1808.611431] pc : refcount_warn_saturate+0x98/0x140
[ 1808.611435] lr : refcount_warn_saturate+0x98/0x140
[ 1808.611437] sp : ffff800021aeba80
[ 1808.611440] x29: ffff800021aeba80 x28: ffff021298165880
[ 1808.611447] x27: 0000000000000000 x26: 0000ffff999b6acc
[ 1808.611453] x25: ffffa463944f2000 x24: ffff021298165e80
[ 1808.611459] x23: ffff021956f0a1f8 x22: ffff02124252c0a0
[ 1808.611465] x21: ffff021283ebac70 x20: ffff021956f0a550
[ 1808.611471] x19: ffff021283ebac40 x18: 0000000000000010
[ 1808.611477] x17: 0000000000000000 x16: ffffa46392af50f0
[ 1808.611482] x15: ffff021298165df0 x14: ffffffffffffffff
[ 1808.611488] x13: ffff8000a1aeb6b7 x12: ffff800021aeb6bf
[ 1808.611494] x11: ffffa46394aae500 x10: 0000000000000ab0
[ 1808.611500] x9 : ffff800021aeba80 x8 : 612d657375203b30
[ 1808.611505] x7 : 206e6f206e6f6974 x6 : c0000000ffffefff
[ 1808.611511] x5 : ffff02196cfc7978 x4 : ffffa46394807ba8
[ 1808.611517] x3 : 0000000000000001 x2 : ffff02196cfc7980
[ 1808.611523] x1 : 0000000000000000 x0 : 0000000000000000
[ 1808.611529] Call trace:
[ 1808.611534] refcount_warn_saturate+0x98/0x140
[ 1808.611540] kthread_stop+0x4c/0x290
[ 1808.611547] vi5_channel_stop_kthreads+0x44/0x60
[ 1808.611551] vi5_channel_stop_streaming+0xa8/0xb0
[ 1808.611557] tegra_channel_stop_streaming+0x3c/0x70
[ 1808.611561] __vb2_queue_cancel+0x40/0x220
[ 1808.611565] vb2_core_queue_release+0x30/0x60
[ 1808.611569] _vb2_fop_release+0x88/0xb0
[ 1808.611574] tegra_channel_close+0x68/0x190
[ 1808.611580] v4l2_release+0xc0/0x100
[ 1808.611586] __fput+0x80/0x260
[ 1808.611590] ____fput+0x24/0x30
[ 1808.611596] task_work_run+0x88/0xe0
[ 1808.611602] do_exit+0x35c/0xb00
[ 1808.611607] do_group_exit+0x4c/0xb0
[ 1808.611612] get_signal+0x184/0x8c0
[ 1808.611619] do_notify_resume+0x18c/0x990
[ 1808.611623] work_pending+0xc/0x738
[ 1808.611627] ---[ end trace 795c82a44854a7cc ]---
[ 1808.611775] ------------[ cut here ]------------
[ 1808.611908] refcount_t: underflow; use-after-free.
[ 1808.611925] WARNING: CPU: 0 PID: 3822 at lib/refcount.c:28 refcount_warn_saturate+0xec/0x140
[ 1808.612153] Modules linked in: sg1_ar0144_gmsl1(E) max96712(E) max9296(E) max96705(E) nvidia_modeset(OE) fuse(E) lzo_rle(E) lzo_compress(E) zram(E) ramoops(E) reed_solomon(E) bnep(E) aes_ce_blk(E) crypto_simd(E) rtk_btusb(E) rtl8822ce(E) cryptd(E) input_leds(E) btusb(E) snd_soc_tegra186_asrc(E) aes_ce_cipher(E) ghash_ce(E) btrtl(E) snd_soc_tegra210_ope(E) snd_soc_tegra186_arad(E) snd_soc_tegra186_dspk(E) snd_soc_tegra210_iqc(E) loop(E) snd_soc_tegra210_afc(E) snd_soc_tegra210_mvc(E) sha2_ce(E) snd_soc_tegra210_dmic(E) btbcm(E) snd_soc_tegra210_adsp(E) snd_soc_tegra210_adx(E) snd_soc_tegra210_admaif(E) snd_soc_tegra210_amx(E) sha256_arm64(E) ucsi_ccg(E) snd_soc_tegra210_mixer(E) btintel(E) snd_soc_tegra210_sfc(E) snd_soc_tegra210_i2s(E) snd_soc_tegra_machine_driver(E) snd_soc_tegra_pcm(E) sha1_ce(E) typec_ucsi(E) snd_soc_tegra_utils(E) nct1008(E) snd_soc_spdif_tx(E) i2c_nvvrs11(E) nvadsp(E) typec(E) cfg80211(E) snd_soc_simple_card_utils(E) snd_hda_codec_hdmi(E) snd_soc_tegra210_ahub(E)
[ 1808.612263] tegra_bpmp_thermal(E) userspace_alert(E) snd_hda_tegra(E) tegra210_adma(E) snd_hda_codec(E) snd_soc_rt5640(E) spi_tegra114(E) snd_hda_core(E) snd_soc_rl6231(E) nvidia(OE) binfmt_misc(E) ina3221(E) pwm_fan(E) nvgpu(E) nvmap(E) ip_tables(E) x_tables(E) [last unloaded: max96712]
[ 1808.612302] CPU: 0 PID: 3822 Comm: v4l2-ctl Tainted: G W OE 5.10.192-tegra #1
[ 1808.612305] Hardware name: Jetson AGX Orin Developer Kit (DT)
[ 1808.612310] pstate: 60400009 (nZCv daif +PAN -UAO -TCO BTYPE=--)
[ 1808.612313] pc : refcount_warn_saturate+0xec/0x140
[ 1808.612317] lr : refcount_warn_saturate+0xec/0x140
[ 1808.612319] sp : ffff800021aeba80
[ 1808.612322] x29: ffff800021aeba80 x28: ffff021298165880
[ 1808.612328] x27: 0000000000000000 x26: 0000ffff999b6acc
[ 1808.612334] x25: ffffa463944f2000 x24: ffff021298165e80
[ 1808.612340] x23: ffff021956f0a1f8 x22: ffff02124252c0a0
[ 1808.612346] x21: ffff021283ebac70 x20: 0000000000000000
[ 1808.612352] x19: ffff021283ebac40 x18: 0000000000000010
[ 1808.612358] x17: 0000000000000000 x16: ffffa46392af50f0
[ 1808.612364] x15: ffff021298165df0 x14: ffffffffffffffff
[ 1808.612370] x13: ffff8000a1aeb6b7 x12: ffff800021aeb6bf
[ 1808.612375] x11: ffffa46394aae500 x10: 0000000000000ab0
[ 1808.612381] x9 : ffff800021aeba80 x8 : 72657466612d6573
[ 1808.612387] x7 : 75203b776f6c6672 x6 : c0000000ffffefff
[ 1808.612393] x5 : ffff02196cfc7978 x4 : ffffa46394807ba8
[ 1808.612398] x3 : 0000000000000001 x2 : ffff02196cfc7980
[ 1808.612404] x1 : 0000000000000000 x0 : 0000000000000000
[ 1808.612410] Call trace:
[ 1808.612414] refcount_warn_saturate+0xec/0x140
[ 1808.612418] kthread_stop+0x27c/0x290
[ 1808.612423] vi5_channel_stop_kthreads+0x44/0x60
[ 1808.612427] vi5_channel_stop_streaming+0xa8/0xb0
[ 1808.612431] tegra_channel_stop_streaming+0x3c/0x70
[ 1808.612435] __vb2_queue_cancel+0x40/0x220
[ 1808.612439] vb2_core_queue_release+0x30/0x60
[ 1808.612442] _vb2_fop_release+0x88/0xb0
[ 1808.612448] tegra_channel_close+0x68/0x190
[ 1808.612452] v4l2_release+0xc0/0x100
[ 1808.612457] __fput+0x80/0x260
[ 1808.612461] ____fput+0x24/0x30
[ 1808.612466] task_work_run+0x88/0xe0
[ 1808.612471] do_exit+0x35c/0xb00
[ 1808.612475] do_group_exit+0x4c/0xb0
[ 1808.612480] get_signal+0x184/0x8c0
[ 1808.612486] do_notify_resume+0x18c/0x990
[ 1808.612490] work_pending+0xc/0x738
[ 1808.612492] ---[ end trace 795c82a44854a7cd ]---
[ 1808.628484] max96712 31-002d: ====>Disable link 3!
[ 1808.628840] max96712 31-002d: i2c-r, 0x0006 = 0x0e
[ 1808.629122] max96712 31-002d: i2c-w, 0x0006 = 0x06
[ 1808.629262] max96705 31-0043: ===>max96705 6 stop streaming 0
[ 1808.629550] max96705 31-0043: i2c-r, 0x04 = 0xc7
[ 1808.629766] max96705 31-0043: i2c-w, 0x04 = 0x47
[ 1808.630299] bwmgr API not supported
[ 1808.630444] ar0144 31-001d: sensor_power_off:
[ 1808.796600] max96712 31-002d: ====>Disable link 2!
[ 1808.796948] max96712 31-002d: i2c-r, 0x0006 = 0x06
[ 1808.797229] max96712 31-002d: i2c-w, 0x0006 = 0x02
[ 1808.798368] bwmgr API not supported
[ 1808.798517] ar0144 31-001c: sensor_power_off:
[ 1809.845371] tegra194-vi5 13e40000.host1x:vi1@14c00000: capture control message timed out
[ 1810.741939] tegra-camrtc-capture-vi tegra-capture-vi: uncorr_err: request timed out after 2500 ms
[ 1810.742221] tegra-camrtc-capture-vi tegra-capture-vi: err_rec: attempting to reset the capture channel
[ 1810.742521] (NULL device *): vi_capture_control_message: NULL VI channel received
[ 1810.742752] t194-nvcsi 13e40000.host1x:nvcsi@15a00000: csi5_stream_close: Error in closing stream_id=2, csi_port=2
[ 1810.743067] (NULL device *): vi_capture_control_message: NULL VI channel received
[ 1810.743293] t194-nvcsi 13e40000.host1x:nvcsi@15a00000: csi5_stream_open: VI channel not found for stream- 2 vc- 1
[ 1810.744063] tegra-camrtc-capture-vi tegra-capture-vi: err_rec: successfully reset the capture channel
[ 1810.870054] tegra194-vi5 13e40000.host1x:vi1@14c00000: capture control message timed out
[ 1810.870314] tegra194-vi5 13e40000.host1x:vi1@14c00000: csi_stream_release: failed to disable nvcsi tpg on stream 2 virtual channel 2
[ 1810.998180] tegra-camrtc-capture-vi tegra-capture-vi: uncorr_err: request timed out after 2500 ms
[ 1810.998445] tegra-camrtc-capture-vi tegra-capture-vi: err_rec: attempting to reset the capture channel
[ 1810.998729] (NULL device *): vi_capture_control_message: NULL VI channel received
[ 1810.998945] t194-nvcsi 13e40000.host1x:nvcsi@15a00000: csi5_stream_close: Error in closing stream_id=0, csi_port=0
[ 1810.999262] (NULL device *): vi_capture_control_message: NULL VI channel received
[ 1810.999493] t194-nvcsi 13e40000.host1x:nvcsi@15a00000: csi5_stream_open: VI channel not found for stream- 0 vc- 1
[ 1810.999963] tegra-camrtc-capture-vi tegra-capture-vi: err_rec: successfully reset the capture channel
[ 1811.042154] [RCE] ERROR: camera-ip/vi5/vi5.c:3913 [vi5_update_channel_match_data] "match configuration is already in use by by channel 35 cannot set channel match configuration"
[ 1811.042160] [RCE] ERROR: services/capture/capture-scheduler.c:3024 [capture_scheduler_thread] "Error processing event 0x100003"
[ 1811.894736] tegra194-vi5 13e40000.host1x:vi1@14c00000: capture control message timed out
[ 1811.895005] tegra194-vi5 13e40000.host1x:vi1@14c00000: vi_capture_release: release channel IVC failed
[ 1811.895356] ------------[ cut here ]------------
[ 1811.895374] WARNING: CPU: 0 PID: 3822 at /home/fyx/work/nvidia/r35.5.0/Linux_for_Tegra/source/public/kernel_src/kernel/nvidia/drivers/media/platform/tegra/camera/fusa-capture/capture-vi.c:972 vi_capture_release+0x2b4/0x2e0
[ 1811.895951] Modules linked in: sg1_ar0144_gmsl1(E) max96712(E) max9296(E) max96705(E) nvidia_modeset(OE) fuse(E) lzo_rle(E) lzo_compress(E) zram(E) ramoops(E) reed_solomon(E) bnep(E) aes_ce_blk(E) crypto_simd(E) rtk_btusb(E) rtl8822ce(E) cryptd(E) input_leds(E) btusb(E) snd_soc_tegra186_asrc(E) aes_ce_cipher(E) ghash_ce(E) btrtl(E) snd_soc_tegra210_ope(E) snd_soc_tegra186_arad(E) snd_soc_tegra186_dspk(E) snd_soc_tegra210_iqc(E) loop(E) snd_soc_tegra210_afc(E) snd_soc_tegra210_mvc(E) sha2_ce(E) snd_soc_tegra210_dmic(E) btbcm(E) snd_soc_tegra210_adsp(E) snd_soc_tegra210_adx(E) snd_soc_tegra210_admaif(E) snd_soc_tegra210_amx(E) sha256_arm64(E) ucsi_ccg(E) snd_soc_tegra210_mixer(E) btintel(E) snd_soc_tegra210_sfc(E) snd_soc_tegra210_i2s(E) snd_soc_tegra_machine_driver(E) snd_soc_tegra_pcm(E) sha1_ce(E) typec_ucsi(E) snd_soc_tegra_utils(E) nct1008(E) snd_soc_spdif_tx(E) i2c_nvvrs11(E) nvadsp(E) typec(E) cfg80211(E) snd_soc_simple_card_utils(E) snd_hda_codec_hdmi(E) snd_soc_tegra210_ahub(E)
[ 1811.896091] tegra_bpmp_thermal(E) userspace_alert(E) snd_hda_tegra(E) tegra210_adma(E) snd_hda_codec(E) snd_soc_rt5640(E) spi_tegra114(E) snd_hda_core(E) snd_soc_rl6231(E) nvidia(OE) binfmt_misc(E) ina3221(E) pwm_fan(E) nvgpu(E) nvmap(E) ip_tables(E) x_tables(E) [last unloaded: max96712]
[ 1811.896142] CPU: 0 PID: 3822 Comm: v4l2-ctl Tainted: G W OE 5.10.192-tegra #1
[ 1811.896145] Hardware name: Jetson AGX Orin Developer Kit (DT)
[ 1811.896150] pstate: 60400009 (nZCv daif +PAN -UAO -TCO BTYPE=--)
[ 1811.896156] pc : vi_capture_release+0x2b4/0x2e0
[ 1811.896161] lr : vi_capture_release+0x2b4/0x2e0
[ 1811.896164] sp : ffff800021aeba60
[ 1811.896167] x29: ffff800021aeba60 x28: ffff021298165880
[ 1811.896174] x27: 0000000000000000 x26: 0000ffff999b6acc
[ 1811.896180] x25: ffffa463944f2000 x24: ffff021298165880
[ 1811.896186] x23: 00000000ffffff92 x22: ffff0212d69f7f00
[ 1811.896192] x21: 000000000000ffff x20: 0000000000000001
[ 1811.896198] x19: ffff02125992d400 x18: 0000000000000010
[ 1811.896203] x17: 0000000000000000 x16: ffffa46392af50f0
[ 1811.896209] x15: ffff021298165df0 x14: 3169763a78317473
[ 1811.896215] x13: 6f682e3030303034 x12: 61635f6976203a30
[ 1811.896221] x11: 3030303063343140 x10: 72203a657361656c
[ 1811.896227] x9 : 65725f6572757470 x8 : 653331203569762d
[ 1811.896233] x7 : 3439316172676574 x6 : c0000000ffffefff
[ 1811.896238] x5 : ffff02196cfc7978 x4 : ffffa46394807ba8
[ 1811.896244] x3 : 0000000000000001 x2 : 0000000000000000
[ 1811.896250] x1 : 0000000000000000 x0 : 0000000000000000
[ 1811.896257] Call trace:
[ 1811.896263] vi_capture_release+0x2b4/0x2e0
[ 1811.896269] vi_capture_shutdown+0x68/0x100
[ 1811.896275] vi_channel_close_ex+0x30/0x90
[ 1811.896280] vi_channel_release+0x30/0x40
[ 1811.896288] __fput+0x80/0x260
[ 1811.896292] ____fput+0x24/0x30
[ 1811.896300] task_work_run+0x88/0xe0
[ 1811.896306] do_exit+0x35c/0xb00
[ 1811.896310] do_group_exit+0x4c/0xb0
[ 1811.896315] get_signal+0x184/0x8c0
[ 1811.896322] do_notify_resume+0x18c/0x990
[ 1811.896326] work_pending+0xc/0x738
[ 1811.896330] ---[ end trace 795c82a44854a7ce ]---
[ 1811.946022] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000
[ 1811.946280] Mem abort info:
[ 1811.946368] ESR = 0x96000004
[ 1811.946464] EC = 0x25: DABT (current EL), IL = 32 bits
[ 1811.946619] SET = 0, FnV = 0
[ 1811.946709] EA = 0, S1PTW = 0
[ 1811.946833] Data abort info:
[ 1811.946924] ISV = 0, ISS = 0x00000004
[ 1811.947036] CM = 0, WnR = 0
Is this a kernel crash caused by the driver? How to locate the code that causes the kernel crash? Thank you for your advice.