Severe MEMORY BUG in nfsd triggers a kernel PANIC

Which version of the system do you use? Khadas official images, self-built images, or others?

vim4-ubuntu-24.04-server-linux-5.15-fenix-1.7.5-250925.img.xz

Please describe your issue below:

First burn the image, and then on the first boot, run these commands to reproduce the issue:

#> aptitude update

#> aptitude upgrade

#> aptitude install nfs-kernel-server

#> reboot

#> systemctl status nfs-server.service # will show up as “active (exited)”

#> systemctl stop nfs-server.service

At this point, the board will kernel panic with many messages, among which the relevant ones are:

pc : memcg_slab_post_alloc_hook

lr : kmem_cache_alloc

lr : alloc_empty_file

Post a console log of your issue below:

[  721.548488][7 T2928  ..] BUG: Bad page state in process kworker/7:1  pfn:11243d
[  721.549739][7 T2928  ..] BUG: Bad page state in process kworker/7:1  pfn:11243e
[  721.552637][0 T20    ..] BUG: Bad page state in process kworker/0:1  pfn:123f79
[  721.552671][4 T216   ..] BUG: Bad page state in process kworker/4:2  pfn:131de9
[  721.554607][0 T20    ..] BUG: Bad page state in process kworker/0:1  pfn:11b681
[  721.555368][4 T216   ..] BUG: Bad page state in process kworker/4:2  pfn:11dd5d
[  721.556173][4 T216   ..]  amvdec_mmpeg12_v4l(E) amvdec_mmpeg12(E)
[  721.556180][0 T20    d.] Internal error: BRK handler: fffffffff20003e8 [#1] PREEMPT SMP
[  721.556182][4 T216   ..]  amvdec_mmjpeg_v4l(E)
[  721.556189][0 T20    d.] Modules linked in:
[  721.556472][3 T3120  ..] BUG: Bad page state in process kworker/3:3  pfn:114435
[  721.556480][3 T3120  ..] page:000000004eb91eee refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x114435
[  721.556488][3 T3120  ..] flags: 0x4000000000000000(zone=1|kasantag=0x0)
[  721.556497][3 T3120  ..] raw: 4000000000000000 0000000000000000 dead000000000122 0000000000000000
[  721.556502][3 T3120  ..] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  721.556505][3 T3120  ..] page dumped because: nonzero _refcount
[  721.556507][3 T3120  ..] Modules linked in: nfsd(E) auth_rpcgss(E) nfs_acl(E) lockd(E) grace(E) bnep(E) iv009_isp(E) qrtr(E) sunrpc(E) zram(E) sch_fq_codel(E) snd_seq(E) dhd(E) amvenc_multi(E) jpegenc(E) encoder_common(E) media_sync(E) amvdec_avs2_fb_v4l(E) amvdec_mavs_v4l(E) amvdec_avs2_v4l(E) khadas_mcu(E) iv009_isp_sensor(E) iv009_isp_lens(E) amvdec_avs3_v4l(E) mali_kbase(E) iv009_isp_iq(E) amvdec_av1_v4l(E) amlcam(E) amvdec_av1(E) amvdec_mavs(E) joydev(E) amvdec_ports(E) amvdec_avs2(E) amvdec_vp9_v4l(E) amvdec_vp9(E) amvdec_vc1(E) amvdec_mmpeg4_v4l(E) amvdec_mmpeg4(E) amvdec_mmpeg12_v4l(E) amvdec_mmpeg12(E) amvdec_mmjpeg_v4l(E) amvdec_mmjpeg(E) amvdec_h265_v4l(E) amvdec_h265(E) amvdec_h264mvc(E) amvdec_mh264_v4l(E) amvdec_mh264(E) stream_input(E) pts_server(E) video_framerate_adapter(E) decoder_common(E) firmware(E) media_clock(E) mac80211(E) cfg80211(E) amlogic_snd_codec_ad82128(E) amlogic_snd_codec_pa1(E) amlogic_snd_codec_tas5805(E) amlogic_snd_codec_tas5707(E)
[  721.556636][3 T3120  ..]  amlogic_snd_codec_ad82584f(E) amlogic_snd_codec_tl1(E) amlogic_snd_codec_t9015(E) amlogic_snd_soc(E) amlogic_snd_codec_dummy(E) amlogic_usb_cam(E) amlogic_seckey(E) amlogic_jtag(E) amlogic_led(E) amlogic_host(E) amlogic_socinfo(E) bl40_module(E) amlogic_rtc(E) dwc_otg(E)
[  721.556718][4 T216   ..]  amvdec_mmjpeg(E) amvdec_h265_v4l(E) amvdec_h265(E) amvdec_h264mvc(E) amvdec_mh264_v4l(E) amvdec_mh264(E) stream_input(E) pts_server(E) video_framerate_adapter(E) decoder_common(E) firmware(E) media_clock(E) mac80211(E) cfg80211(E) amlogic_snd_codec_ad82128(E) amlogic_snd_codec_pa1(E) amlogic_snd_codec_tas5805(E) amlogic_snd_codec_tas5707(E) amlogic_snd_codec_ad82584f(E) amlogic_snd_codec_tl1(E) amlogic_snd_codec_t9015(E) amlogic_snd_soc(E) amlogic_snd_codec_dummy(E) amlogic_usb_cam(E) amlogic_seckey(E) amlogic_jtag(E) amlogic_led(E) amlogic_host(E) amlogic_socinfo(E) bl40_module(E) amlogic_rtc(E) dwc_otg(E) amlogic_dvb_ci(E) amlogic_dvb_demux(E) amlogic_audio_utils(E) videobuf_vmalloc(E) v4l2_fwnode(E) v4l2_async(E) i2c_dev(E) dwmac_dwc_qos_eth(E) dwmac_meson(E) system_heap(E) ntfs3(E) zsmalloc(E) sha1_ce(E) amlogic_pcie_v3_host(E) amlogic_wireless(E) amlogic_crypto_dma(E) nfnetlink(E) ip_tables(E) x_tables(E) autofs4(E) r8152(E) amlogic_pcie_v2_host(E)
[  721.556889][4 T216   ..]  dwmac_meson8b(E) stmmac_platform(E) aml_drm(E) stmmac(E) amlogic_mdio_g12a(E) amlogic_inphy(E) mdio_mux(E) amlogic_phy_debug(E) amlogic_irblaster(E) amlogic_usb(E) amlogic_thermal(E) amlogic_camera(E) aml_media(E) amlogic_dvb(E) amlogic_watchdog(E) amlogic_input(E) amlogic_adc(E) amlogic_pm(E) dvb_core(E) videobuf_core(E) aml_smmu(E) optee(E) amlogic_tee(E) tee(E) amlogic_rng(E) amlogic_spi(E) amlogic_i2c(E) amlogic_mmc(E) cqhci(E) amlogic_efuse_unifykey(E) amlogic_cpufreq(E) amlogic_power(E) amlogic_reset(E) gpio_regulator(E) pwm_regulator(E) amlogic_pwm(E) amlogic_mailbox(E) amlogic_pinctrl_soc_t7(E) amlogic_gpio(E) amlogic_aoclk_g12a(E) amlogic_clk_soc_t7(E) amlogic_clk(E) amlogic_memory_debug(E) user_fault(E) amlogic_cpuinfo(E) amlogic_secmon(E) pcs_xpcs(E) amlogic_debug(E) amlogic_hwspinlock(E) amlogic_debug_iotrace(E) amlogic_gkitool(E)
[  721.557050][4 T216   d.] CPU: 4 PID: 216 Comm: kworker/4:2 Tainted: G    B       E     5.15.137 #1.7.5
[  721.557059][4 T216   d.] Hardware name: Khadas VIM4 (DT)
[  721.557063][4 T216   d.] Workqueue: events kfree_rcu_work
[  721.557074][4 T216   d.] Call trace:
[  721.557077][4 T216   d.]  dump_backtrace+0x0/0x1c4
[  721.557084][4 T216   d.]  show_stack+0x18/0x2c
[  721.557091][4 T216   d.]  dump_stack_lvl+0x64/0x80
[  721.557099][4 T216   d.]  dump_stack+0x18/0x34
[  721.557107][4 T216   d.]  bad_page+0xec/0x114
[  721.557114][4 T216   d.]  check_free_page_bad+0x80/0x8c
[  721.557121][4 T216   d.]  free_pcp_prepare+0x2a0/0x2d0
[  721.557128][4 T216   d.]  free_unref_page+0x40/0x344
[  721.557136][4 T216   d.]  __free_pages+0x100/0x110
[  721.557143][4 T216   d.]  kmem_cache_free_bulk+0x6c4/0x730
[  721.557153][4 T216   d.]  kfree_rcu_work+0x18c/0x3e0
[  721.557160][4 T216   d.]  process_one_work+0x1b0/0x4c4
[  721.557169][4 T216   d.]  worker_thread+0x6c/0x44c
[  721.557177][4 T216   d.]  kthread+0x14c/0x160
[  721.557185][4 T216   d.]  ret_from_fork+0x10/0x20
[  721.557195][4 T216   ..] BUG: Bad page state in process kworker/4:2  pfn:111819
[  721.557200][4 T216   ..] page:000000005c80c6dc refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111819
[  721.557209][4 T216   ..] flags: 0x4000000000000000(zone=1|kasantag=0x0)
[  721.557218][4 T216   ..] raw: 4000000000000000 0000000000000000 dead000000000122 0000000000000000
[  721.557225][4 T216   ..] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  721.557229][4 T216   ..] page dumped because: nonzero _refcount
[  721.557232][4 T216   ..] Modules linked in: nfsd(E) auth_rpcgss(E) nfs_acl(E) lockd(E) grace(E) bnep(E) iv009_isp(E) qrtr(E) sunrpc(E) zram(E) sch_fq_codel(E) snd_seq(E) dhd(E) amvenc_multi(E) jpegenc(E) encoder_common(E) media_sync(E) amvdec_avs2_fb_v4l(E) amvdec_mavs_v4l(E) amvdec_avs2_v4l(E) khadas_mcu(E) iv009_isp_sensor(E) iv009_isp_lens(E) amvdec_avs3_v4l(E) mali_kbase(E) iv009_isp_iq(E) amvdec_av1_v4l(E) amlcam(E) amvdec_av1(E) amvdec_mavs(E) joydev(E) amvdec_ports(E) amvdec_avs2(E) amvdec_vp9_v4l(E) amvdec_vp9(E) amvdec_vc1(E) amvdec_mmpeg4_v4l(E) amvdec_mmpeg4(E) amvdec_mmpeg12_v4l(E) amvdec_mmpeg12(E) amvdec_mmjpeg_v4l(E) amvdec_mmjpeg(E) amvdec_h265_v4l(E) amvdec_h265(E) amvdec_h264mvc(E) amvdec_mh264_v4l(E) amvdec_mh264(E) stream_input(E) pts_server(E) video_framerate_adapter(E) decoder_common(E) firmware(E) media_clock(E) mac80211(E) cfg80211(E) amlogic_snd_codec_ad82128(E) amlogic_snd_codec_pa1(E) amlogic_snd_codec_tas5805(E) amlogic_snd_codec_tas5707(E)
[  721.557421][4 T216   ..]  amlogic_snd_codec_ad82584f(E) amlogic_snd_codec_tl1(E) amlogic_snd_codec_t9015(E) amlogic_snd_soc(E) amlogic_snd_codec_dummy(E) amlogic_usb_cam(E) amlogic_seckey(E) amlogic_jtag(E) amlogic_led(E) amlogic_host(E) amlogic_socinfo(E) bl40_module(E) amlogic_rtc(E) dwc_otg(E) amlogic_dvb_ci(E) amlogic_dvb_demux(E) amlogic_audio_utils(E) videobuf_vmalloc(E) v4l2_fwnode(E) v4l2_async(E) i2c_dev(E) dwmac_dwc_qos_eth(E) dwmac_meson(E) system_heap(E) ntfs3(E) zsmalloc(E) sha1_ce(E) amlogic_pcie_v3_host(E) amlogic_wireless(E) amlogic_crypto_dma(E) nfnetlink(E) ip_tables(E) x_tables(E) autofs4(E) r8152(E) amlogic_pcie_v2_host(E) dwmac_meson8b(E) stmmac_platform(E) aml_drm(E) stmmac(E) amlogic_mdio_g12a(E) amlogic_inphy(E) mdio_mux(E) amlogic_phy_debug(E) amlogic_irblaster(E) amlogic_usb(E) amlogic_thermal(E) amlogic_camera(E) aml_media(E) amlogic_dvb(E) amlogic_watchdog(E) amlogic_input(E) amlogic_adc(E) amlogic_pm(E) dvb_core(E) videobuf_core(E) aml_smmu(E) optee(E)
[  721.557598][4 T216   ..]  amlogic_tee(E) tee(E) amlogic_rng(E) amlogic_spi(E) amlogic_i2c(E) amlogic_mmc(E) cqhci(E) amlogic_efuse_unifykey(E) amlogic_cpufreq(E) amlogic_power(E) amlogic_reset(E) gpio_regulator(E) pwm_regulator(E) amlogic_pwm(E) amlogic_mailbox(E) amlogic_pinctrl_soc_t7(E) amlogic_gpio(E) amlogic_aoclk_g12a(E) amlogic_clk_soc_t7(E) amlogic_clk(E)
[  721.557657][0 T20    d.]  nfsd(E) auth_rpcgss(E)
[  721.557660][4 T216   ..]  amlogic_memory_debug(E) user_fault(E) amlogic_cpuinfo(E) amlogic_secmon(E) pcs_xpcs(E) amlogic_debug(E) amlogic_hwspinlock(E) amlogic_debug_iotrace(E) amlogic_gkitool(E)
[  721.557693][4 T216   d.] CPU: 4 PID: 216 Comm: kworker/4:2 Tainted: G    B       E     5.15.137 #1.7.5
[  721.557701][4 T216   d.] Hardware name: Khadas VIM4 (DT)
[  721.557705][4 T216   d.] Workqueue: events kfree_rcu_work
[  721.557714][4 T216   d.] Call trace:
[  721.557717][4 T216   d.]  dump_backtrace+0x0/0x1c4
[  721.557724][4 T216   d.]  show_stack+0x18/0x2c
[  721.557730][4 T216   d.]  dump_stack_lvl+0x64/0x80
[  721.557738][4 T216   d.]  dump_stack+0x18/0x34
[  721.557746][4 T216   d.]  bad_page+0xec/0x114
[  721.557753][4 T216   d.]  check_free_page_bad+0x80/0x8c
[  721.557760][4 T216   d.]  free_pcp_prepare+0x2a0/0x2d0
[  721.557767][4 T216   d.]  free_unref_page+0x40/0x344
[  721.557775][4 T216   d.]  __free_pages+0x100/0x110
[  721.557782][4 T216   d.]  kmem_cache_free_bulk+0x6c4/0x730
[  721.557792][4 T216   d.]  kfree_rcu_work+0x18c/0x3e0
[  721.557800][4 T216   d.]  process_one_work+0x1b0/0x4c4
[  721.557808][4 T216   d.]  worker_thread+0x6c/0x44c
[  721.557817][4 T216   d.]  kthread+0x14c/0x160
[  721.557824][4 T216   d.]  ret_from_fork+0x10/0x20
[  721.558211][3 T3120  ..]  amlogic_dvb_ci(E)
[  721.558729][0 T20    d.]  nfs_acl(E) lockd(E)
[  721.559640][3 T3120  ..]  amlogic_dvb_demux(E) amlogic_audio_utils(E)
[  721.560950][0 T20    d.]  grace(E) bnep(E) iv009_isp(E) qrtr(E) sunrpc(E) zram(E) sch_fq_codel(E) snd_seq(E) dhd(E) amvenc_multi(E) jpegenc(E) encoder_common(E) media_sync(E) amvdec_avs2_fb_v4l(E)
[  721.561774][3 T3120  ..]  videobuf_vmalloc(E)
[  721.562878][0 T20    d.]  amvdec_mavs_v4l(E) amvdec_avs2_v4l(E)
[  721.563983][3 T3120  ..]  v4l2_fwnode(E) v4l2_async(E)
[  721.564721][0 T20    d.]  khadas_mcu(E) iv009_isp_sensor(E) iv009_isp_lens(E) amvdec_avs3_v4l(E) mali_kbase(E) iv009_isp_iq(E) amvdec_av1_v4l(E) amlcam(E) amvdec_av1(E) amvdec_mavs(E) joydev(E) amvdec_ports(E) amvdec_avs2(E) amvdec_vp9_v4l(E)
[  721.576095][3 T3120  ..]  i2c_dev(E)
[  721.579336][0 T20    d.]  amvdec_vp9(E) amvdec_vc1(E) amvdec_mmpeg4_v4l(E) amvdec_mmpeg4(E) amvdec_mmpeg12_v4l(E) amvdec_mmpeg12(E) amvdec_mmjpeg_v4l(E) amvdec_mmjpeg(E) amvdec_h265_v4l(E) amvdec_h265(E) amvdec_h264mvc(E) amvdec_mh264_v4l(E)
[  721.590878][3 T3120  ..]  dwmac_dwc_qos_eth(E)
[  721.600928][0 T20    d.]  amvdec_mh264(E) stream_input(E) pts_server(E) video_framerate_adapter(E) decoder_common(E) firmware(E) media_clock(E) mac80211(E) cfg80211(E) amlogic_snd_codec_ad82128(E) amlogic_snd_codec_pa1(E) amlogic_snd_codec_tas5805(E) amlogic_snd_codec_tas5707(E)
[  721.602086][3 T3120  ..]  dwmac_meson(E)
[  721.602745][0 T20    d.]  amlogic_snd_codec_ad82584f(E) amlogic_snd_codec_tl1(E)
[  721.603417][3 T3120  ..]  system_heap(E) ntfs3(E)
[  721.609413][0 T20    d.]  amlogic_snd_codec_t9015(E) amlogic_snd_soc(E) amlogic_snd_codec_dummy(E) amlogic_usb_cam(E) amlogic_seckey(E) amlogic_jtag(E) amlogic_led(E) amlogic_host(E) amlogic_socinfo(E) bl40_module(E) amlogic_rtc(E) dwc_otg(E)
[  721.615491][3 T3120  ..]  zsmalloc(E)
[  721.621480][0 T20    d.]  amlogic_dvb_ci(E) amlogic_dvb_demux(E) amlogic_audio_utils(E) videobuf_vmalloc(E) v4l2_fwnode(E) v4l2_async(E) i2c_dev(E) dwmac_dwc_qos_eth(E) dwmac_meson(E) system_heap(E) ntfs3(E) zsmalloc(E) sha1_ce(E) amlogic_pcie_v3_host(E) amlogic_wireless(E)
[  721.627460][3 T3120  ..]  sha1_ce(E)
[  721.634156][0 T20    d.]  amlogic_crypto_dma(E) nfnetlink(E) ip_tables(E) x_tables(E) autofs4(E) r8152(E) amlogic_pcie_v2_host(E) dwmac_meson8b(E) stmmac_platform(E) aml_drm(E) stmmac(E) amlogic_mdio_g12a(E) amlogic_inphy(E) mdio_mux(E)
[  721.640054][3 T3120  ..]  amlogic_pcie_v3_host(E)
[  721.645898][0 T20    d.]  amlogic_phy_debug(E) amlogic_irblaster(E) amlogic_usb(E) amlogic_thermal(E) amlogic_camera(E) aml_media(E) amlogic_dvb(E) amlogic_watchdog(E) amlogic_input(E) amlogic_adc(E) amlogic_pm(E) dvb_core(E)
[  721.651845][3 T3120  ..]  amlogic_wireless(E)
[  721.657715][0 T20    d.]  videobuf_core(E) aml_smmu(E) optee(E) amlogic_tee(E) tee(E) amlogic_rng(E) amlogic_spi(E) amlogic_i2c(E) amlogic_mmc(E) cqhci(E) amlogic_efuse_unifykey(E) amlogic_cpufreq(E)
[  721.663627][3 T3120  ..]  amlogic_crypto_dma(E)
[  721.669422][0 T20    d.]  amlogic_power(E) amlogic_reset(E) gpio_regulator(E) pwm_regulator(E) amlogic_pwm(E) amlogic_mailbox(E) amlogic_pinctrl_soc_t7(E) amlogic_gpio(E) amlogic_aoclk_g12a(E) amlogic_clk_soc_t7(E) amlogic_clk(E) amlogic_memory_debug(E)
[  721.675247][3 T3120  ..]  nfnetlink(E)
[  721.681010][0 T20    d.]  user_fault(E) amlogic_cpuinfo(E) amlogic_secmon(E) pcs_xpcs(E) amlogic_debug(E) amlogic_hwspinlock(E) amlogic_debug_iotrace(E) amlogic_gkitool(E)
[  721.681050][0 T20    d.] PC : ffffffd0082ec378, PFN: 14ec V
[  721.686781][3 T3120  ..]  ip_tables(E)
[  721.692402][0 T20    d.] SP : ffffffc0080dbad0, PFN:100208 V
[  721.692410][0 T20    d.] FAR : 0000007fd51522e0  U
[  721.692416][0 T20    d.] R1  : ffffffb220405000, PFN:***** V
[  721.692422][0 T20    d.] R5  : ffffffd00a10ae80, PFN: 330a V
[  721.692428][0 T20    d.] R6  : ffffffc0080dbad0, PFN:100208 V
[  721.692433][0 T20    d.] R7  : ffffffb220405000, PFN:***** V
[  721.692437][0 T20    d.] R9  : ffffffd009ca3960, PFN: 2ea3 V
[  721.692442][0 T20    d.] R10 : ffffffd009f63960, PFN: 3163 V
[  721.692448][0 T20    d.] R13 : ffffffd009ca3960, PFN: 2ea3 V
[  721.692453][0 T20    d.] R22 : fffffffe04714000, PFN:222f14 V
[  721.698010][3 T3120  ..]  x_tables(E)
[  721.704691][0 T20    d.] R23 : ffffffd00a10ae80, PFN: 330a V
[  721.704700][0 T20    d.] R26 : ffffffd00a10b3c0, PFN: 330b V
[  721.704706][0 T20    d.] R29 : ffffffc0080dbad0, PFN:100208 V
[  721.704712][0 T20    d.] R30 : ffffffd0082ebfd0, PFN: 14eb V
[  721.704719][0 T20    d.] 
[  721.704719][0 T20    d.] PC: 0xffffffd0082ec2f8:
[  721.704731][0 T20    d.] c2f8  f8346afa 17ffff59 f9400a80 b5fff140 17ffff88 f000eb00 b946a800 6b00027f
[  721.704740][0 T20    d.] c318  54ffeb83 94015119 17ffff5a b9402ce0 37a80100 f9400760 b50000c0 f9400360
[  721.711083][3 T3120  ..]  autofs4(E)
[  721.716858][0 T20    d.] c338  f9402000 eb00005f 9a9f037b 17ffff18 d280001b 17ffff16 aa1403e2 aa1703e0
[  721.716868][0 T20    d.] c358  52800141 97ff0601 17ffff1e f9400280 3617f320 927df863 f9000283 17ffff96
[  721.716878][0 T20    d.] c378  d4207d00 94323591 d503233f a9b67bfd d5384103 910003fd a90153f3 a9025bf5
[  721.716886][0 T20    d.] c398  a90363f7 aa0203f8 91178062 a9046bf9 a90573fb f9400043 f9004fe3 d2800003
[  721.716895][0 T20    d.] c3b8  b9400302 f9003fe0 910223e0 6b01005f a90883e0 b9400b03 1a81d055 b90077e3
[  721.722936][3 T3120  ..]  r8152(E)
[  721.728767][0 T20    d.] c3d8  710002bf 54000e0d 5280001b 5280001c b90063ff 14000009 93407f93 91000674
[  721.728773][0 T20    d.] 
[  721.728773][0 T20    d.] LR: 0xffffffd0082ebf50:
[  721.728784][0 T20    d.] bf50  d503233f a9b87bfd d5384106 910003fd a90153f3 2a0303f3 d5384107 a9025bf5
[  721.728793][0 T20    d.] bf70  aa0003f6 aa0103f5 a90363f7 aa0203f7 2a0503f8 a9046bf9 2a0403f9 a90573fb
[  721.728802][0 T20    d.] bf90  f94480fb f942f0c8 f9003fe8 d2800008 b5001c3b 3901dfff d503201f 7100173f
[  721.734156][3 T3120  ..]  amlogic_pcie_v2_host(E)
[  721.781610][0 T20    d.] bfb0  54000140 52800034 aa1703e0 1ad32294 52800001 93407e94 aa1403e2 97ff06e5
[  721.781621][0 T20    d.] bfd0  71000f3f 54001be0 7100267f 54000b29 b94032c0 2a1303f5 f90016d5 12187800
[  721.781630][0 T20    d.] bff0  b90032c0 36080a38 f1002ebf 54001be8 93407f23 910022db f100187f 54001b68
[  721.781646][0 T20    d.] c010  8b1506a1 d2801802 8b39d042 52800d19 8b010aa1 aa1b03e0 d37df021 9bb90a79
[  721.781655][0 T20    d.] c030  8b031023 8b0302f4 8b1902f9 aa1903e2 f940669a aa1a03e1 94107c52 72001c1f
[  721.781660][0 T20    d.] 
[  721.781660][0 T20    d.] SP: 0xffffffc0080dba50:
[  721.831110][3 T3120  ..]  dwmac_meson8b(E)
[  721.850319][0 T20    d.] ba50  0a10b3c0 ffffffd0 00000000 00000000 00000001 00000000 080dbad0 ffffffc0
[  721.850331][0 T20    d.] ba70  082ebfd0 ffffffd0 080dbad0 ffffffc0 082ec378 ffffffd0 204000c5 00000000
[  721.850340][0 T20    d.] ba90  080dbab0 ffffffc0 08f6ba98 ffffffd0 080dbac0 ffffffc0 082ea8ec ffffffd0
[  721.850349][0 T20    d.] bab0  080dbad0 ffffffc0 082ec378 ffffffd0 00000000 00000000 082eaa14 ffffffd0
[  721.850357][0 T20    d.] bad0  080dbb50 ffffffc0 082ecff8 ffffffd0 04714000 fffffffe 0011c500 00000000
[  721.850365][0 T20    d.] baf0  00000000 00000000 00000040 00000000 00000001 00000000 00000000 00000000
[  721.855487][3 T3120  ..]  stmmac_platform(E)
[  721.867264][0 T20    d.] bb10  00000004 00000000 0a10b3c0 ffffffd0 00000640 00000000 00000001 00000000
[  721.867276][0 T20    d.] bb30  080dbb50 ffffffc0 082ecfb0 ffffffd0 04714000 00fffffe 7c820600 67cc3662
[  721.867284][0 T20    d.] 
[  721.867284][0 T20    d.] X5: 0xffffffd00a10ae00:
[  721.867294][0 T20    d.] ae00  000cc07d 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  721.867302][0 T20    d.] ae20  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  721.867310][0 T20    d.] ae40  00000000 00000000 00000000 00000000 0004425e 00000000 00000000 00000000
[  721.873037][3 T3120  ..]  aml_drm(E)
[  721.878268][0 T20    d.] ae60  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  721.878279][0 T20    d.] ae80  000051a0 00000000 00006608 00000000 00007a70 00000000 00000000 00000000
[  721.878287][0 T20    d.] aea0  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  721.878296][0 T20    d.] aec0  0a10a840 ffffffd0 09a4b658 ffffffd0 09a4b32c ffffffd0 00000cc1 0000003f
[  721.878305][0 T20    d.] aee0  00100000 00000000 001132f2 00000000 00140000 00000000 00120000 00000000
[  721.883574][3 T3120  ..]  stmmac(E)
[  721.888781][0 T20    d.] 
[  721.888781][0 T20    d.] X6: 0xffffffc0080dba50:
[  721.888793][0 T20    d.] ba50  0a10b3c0 ffffffd0 00000000 00000000 00000001 00000000 080dbad0 ffffffc0
[  721.888803][0 T20    d.] ba70  082ebfd0 ffffffd0 080dbad0 ffffffc0 082ec378 ffffffd0 204000c5 00000000
[  721.888812][0 T20    d.] ba90  080dbab0 ffffffc0 08f6ba98 ffffffd0 080dbac0 ffffffc0 082ea8ec ffffffd0
[  721.888821][0 T20    d.] bab0  080dbad0 ffffffc0 082ec378 ffffffd0 00000000 00000000 082eaa14 ffffffd0
[  721.894087][3 T3120  ..]  amlogic_mdio_g12a(E)
[  721.899316][0 T20    d.] bad0  080dbb50 ffffffc0 082ecff8 ffffffd0 04714000 fffffffe 0011c500 00000000
[  721.899326][0 T20    d.] baf0  00000000 00000000 00000040 00000000 00000001 00000000 00000000 00000000
[  721.899335][0 T20    d.] bb10  00000004 00000000 0a10b3c0 ffffffd0 00000640 00000000 00000001 00000000
[  721.899344][0 T20    d.] bb30  080dbb50 ffffffc0 082ecfb0 ffffffd0 04714000 00fffffe 7c820600 67cc3662
[  721.899351][0 T20    d.] 
[  721.899351][0 T20    d.] X9: 0xffffffd009ca38e0:
[  721.904629][3 T3120  ..]  amlogic_inphy(E)
[  721.909859][0 T20    d.] 38e0  09ca38e0 ffffffd0 09ca38e0 ffffffd0 00000000 00000000 00000000 00000000
[  721.909870][0 T20    d.] 3900  0000000f 00000000 09f63960 ffffffd0 09ca3960 ffffffd0 ffff8d18 00000000
[  721.909879][0 T20    d.] 3920  ffff7fff 00000000 ffff8d19 00000000 00000014 00000000 0a161728 ffffffd0
[  721.909897][0 T20    d.] 3940  fff34530 ffffffff fff00000 ffffffff 00000000 00000000 ffffffff 00000000
[  721.909907][0 T20    d.] 3960  00000000 00000000 00000000 00000000 c2000037 00000000 00000000 00000000
[  721.909916][0 T20    d.] 3980  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  721.915153][3 T3120  ..]  mdio_mux(E)
[  721.920477][0 T20    d.] 39a0  00000000 00000000 00000000 00000000 00000000 00000000 00000001 00000000
[  721.920488][0 T20    d.] 39c0  00000000 00000000 a2000101 00000000 00000000 00000000 00000000 00000000
[  721.920494][0 T20    d.] 
[  721.920494][0 T20    d.] X10: 0xffffffd009f638e0:
[  721.920503][0 T20    d.] 38e0  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  721.920511][0 T20    d.] 3900  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  721.920519][0 T20    d.] 3920  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  721.925779][3 T3120  ..]  amlogic_phy_debug(E)
[  721.931814][0 T20    d.] 3940  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  721.931830][0 T20    d.] 3960  ffff8000 80000000 fff00000 ffffffff fff00048 ffffffff ffff8001 80000000
[  721.931840][0 T20    d.] 3980  fff00048 ffffffff fff00158 ffffffff ffff8002 80000000 fff00158 ffffffff
[  721.931848][0 T20    d.] 39a0  fff00180 ffffffff ffff8003 80000000 fff00180 ffffffff fff001a0 ffffffff
[  721.931857][0 T20    d.] 39c0  ffff8004 80000000 fff001a0 ffffffff fff001e8 ffffffff ffff8005 80000000
[  721.937093][3 T3120  ..]  amlogic_irblaster(E)
[  721.942343][0 T20    d.] 
[  721.942343][0 T20    d.] X13: 0xffffffd009ca38e0:
[  721.942356][0 T20    d.] 38e0  09ca38e0 ffffffd0 09ca38e0 ffffffd0 00000000 00000000 00000000 00000000
[  721.942365][0 T20    d.] 3900  0000000f 00000000 09f63960 ffffffd0 09ca3960 ffffffd0 ffff8d2d 00000000
[  721.942374][0 T20    d.] 3920  ffff7fff 00000000 ffff8d2e 00000000 00000014 00000000 0a161728 ffffffd0
[  721.942383][0 T20    d.] 3940  fff34bd8 ffffffff fff00000 ffffffff 00000000 00000000 ffffffff 00000000
[  721.947633][3 T3120  ..]  amlogic_usb(E)
[  721.952882][0 T20    d.] 3960  00000000 00000000 00000000 00000000 c2000037 00000000 00000000 00000000
[  721.952892][0 T20    d.] 3980  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  721.952900][0 T20    d.] 39a0  00000000 00000000 00000000 00000000 00000000 00000000 00000001 00000000
[  721.952909][0 T20    d.] 39c0  00000000 00000000 a2000101 00000000 00000000 00000000 00000000 00000000
[  721.952918][0 T20    d.] 
[  721.952918][0 T20    d.] X22: 0xfffffffe04713f80:
[  721.958174][3 T3120  ..]  amlogic_thermal(E)
[  721.963416][0 T20    d.] 3f80  00000000 40000000 00000100 dead0000 00000122 dead0000 00000000 00000000
[  721.963426][0 T20    d.] 3fa0  00000000 00000000 00000000 00000000 ffffffff 00000000 00000000 00000000
[  721.963435][0 T20    d.] 3fc0  00000000 40000000 00000100 dead0000 00000122 dead0000 00000000 00000000
[  721.963443][0 T20    d.] 3fe0  00000000 00000000 00000000 00000000 ffffffff 00000000 00000000 00000000
[  721.963451][0 T20    d.] 4000  00000000 40000000 00000000 00000000 00000122 dead0000 00000000 00000000
[  721.963460][0 T20    d.] 4020  00000003 00000000 00000040 00000000 ffffff7f 00000000 00000000 00000000
[  721.968672][3 T3120  ..]  amlogic_camera(E)
[  721.973798][0 T20    d.] 4040  00000000 40000000 04714001 fffffffe 04714088 fffffffe 00000000 00000000
[  721.973808][0 T20    d.] 4060  00000000 00000000 00000000 00000000 ffffffff 00000001 00000000 00000000
[  721.973814][0 T20    d.] 
[  721.973814][0 T20    d.] X23: 0xffffffd00a10ae00:
[  721.973824][0 T20    d.] ae00  000cc07d 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  721.973832][0 T20    d.] ae20  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  721.973840][0 T20    d.] ae40  00000000 00000000 00000000 00000000 0004425e 00000000 00000000 00000000
[  721.978904][3 T3120  ..]  aml_media(E)
[  721.984068][0 T20    d.] ae60  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  721.984078][0 T20    d.] ae80  000051a0 00000000 00006608 00000000 00007a70 00000000 00000000 00000000
[  721.984087][0 T20    d.] aea0  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  721.984096][0 T20    d.] aec0  0a10a840 ffffffd0 09a4b658 ffffffd0 09a4b32c ffffffd0 00000cc1 0000003f
[  721.984105][0 T20    d.] aee0  00100000 00000000 001132f2 00000000 00140000 00000000 00120000 00000000
[  721.984111][0 T20    d.] 
[  721.984111][0 T20    d.] X26: 0xffffffd00a10b340:
[  721.996217][3 T3120  ..]  amlogic_dvb(E)
[  722.001410][0 T20    d.] b340  0a10b338 ffffffd0 0000003c 00000000 04880008 fffffffe 04860008 fffffffe
[  722.001421][0 T20    d.] b360  05f60008 fffffffe 05f10008 fffffffe 0a10b370 ffffffd0 0a10b370 ffffffd0
[  722.001430][0 T20    d.] b380  08ff0008 fffffffe 08f60008 fffffffe 0a10b390 ffffffd0 0a10b390 ffffffd0
[  722.001439][0 T20    d.] b3a0  0a10b3a0 ffffffd0 0a10b3a0 ffffffd0 000002f2 00000000 00000000 00000000
[  722.001446][0 T20    d.] b3c0  00000001 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  722.001454][0 T20    d.] b3e0  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  722.006571][3 T3120  ..]  amlogic_watchdog(E)
[  722.011527][0 T20    d.] b400  000001c0 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  722.011537][0 T20    d.] b420  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  722.011544][0 T20    d.] 
[  722.011544][0 T20    d.] X29: 0xffffffc0080dba50:
[  722.011555][0 T20    d.] ba50  0a10b3c0 ffffffd0 00000000 00000000 00000001 00000000 080dbad0 ffffffc0
[  722.011564][0 T20    d.] ba70  082ebfd0 ffffffd0 080dbad0 ffffffc0 082ec378 ffffffd0 204000c5 00000000
[  722.011572][0 T20    d.] ba90  080dbab0 ffffffc0 08f6ba98 ffffffd0 080dbac0 ffffffc0 082ea8ec ffffffd0
[  722.023584][3 T3120  ..]  amlogic_input(E)
[  722.028405][0 T20    d.] bab0  080dbad0 ffffffc0 082ec378 ffffffd0 00000000 00000000 082eaa14 ffffffd0
[  722.028416][0 T20    d.] bad0  080dbb50 ffffffc0 082ecff8 ffffffd0 04714000 fffffffe 0011c500 00000000
[  722.028425][0 T20    d.] baf0  00000000 00000000 00000040 00000000 00000001 00000000 00000000 00000000
[  722.028433][0 T20    d.] bb10  00000004 00000000 0a10b3c0 ffffffd0 00000640 00000000 00000001 00000000
[  722.028441][0 T20    d.] bb30  080dbb50 ffffffc0 082ecfb0 ffffffd0 04714000 00fffffe 7c820600 67cc3662
[  722.028445][0 T20    d.] 
[  722.028450][0 T20    d.] CPU: 0 PID: 20 Comm: kworker/0:1 Tainted: G    B       E     5.15.137 #1.7.5
[  722.040244][3 T3120  ..]  amlogic_adc(E)
[  722.044966][0 T20    d.] Hardware name: Khadas VIM4 (DT)
[  722.044973][0 T20    d.] Workqueue: events kfree_rcu_work
[  722.044993][0 T20    d.] pstate: 204000c5 (nzCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  722.045004][0 T20    d.] pc : __free_one_page+0x428/0x430
[  722.057063][3 T3120  ..]  amlogic_pm(E)
[  722.061721][0 T20    d.] lr : __free_one_page+0x80/0x430
[  722.061734][0 T20    d.] sp : ffffffc0080dbad0
[  722.061738][0 T20    d.] x29: ffffffc0080dbad0 x28: 0000000000000001 x27: 0000000000000000
[  722.061753][0 T20    d.] x26: ffffffd00a10b3c0 x25: 0000000000000000 x24: 0000000000000000
[  722.061766][0 T20    d.] x23: ffffffd00a10ae80
[  722.066604][3 T3120  ..]  dvb_core(E)
[  722.071073][0 T20    d.]  x22: fffffffe04714000 x21: 0000000000000040
[  722.071088][0 T20    d.] x20: 0000000000000001 x19: 0000000000000040 x18: 0000000000000020
[  722.071101][0 T20    d.] x17: 312e352020202020 x16: 4520202020202020 x15: 0000000000000020
[  722.071114][0 T20    d.] x14: 0000000000000000 x13: ffffffd009ca3960
[  722.082160][3 T3120  ..]  videobuf_core(E)
[  722.086465][0 T20    d.]  x12: 0000000000002559
[  722.086474][0 T20    d.] x11: 0000000000000c73 x10: ffffffd009f63960 x9 : ffffffd009ca3960
[  722.086488][0 T20    d.] x8 : 0000000000000000 x7 : ffffffb220405000 x6 : ffffffc0080dbad0
[  722.086501][0 T20    d.] x5 : ffffffd00a10ae80 x4 : 0000000000000038
[  722.099985][3 T3120  ..]  aml_smmu(E)
[  722.104398][0 T20    d.]  x3 : 0000000000000001
[  722.104408][0 T20    d.] x2 : 0000000000000001 x1 : ffffffb220405000 x0 : 00000000ffffff7f
[  722.104423][0 T20    d.] Call trace:
[  722.104427][0 T20    d.]  __free_one_page+0x428/0x430
[  722.104439][0 T20    d.]  __free_pages_ok+0x2d4/0x56c
[  722.104447][0 T20    d.]  __free_pages+0xec/0x110
[  722.112530][7 T2928  ..] sensors 6-000e: sensor_delaywork_func: Get data failed
[  722.115637][3 T3120  ..]  optee(E)
[  722.120297][0 T20    d.]  kmem_cache_free_bulk+0x6c4/0x730
[  722.120315][0 T20    d.]  kfree_rcu_work+0x18c/0x3e0
[  722.120324][0 T20    d.]  process_one_work+0x1b0/0x4c4
[  722.120336][0 T20    d.]  worker_thread+0x6c/0x44c
[  722.132018][3 T3120  ..]  amlogic_tee(E)
[  722.137005][0 T20    d.]  kthread+0x14c/0x160
[  722.137017][0 T20    d.]  ret_from_fork+0x10/0x20
[  722.137033][0 T20    d.] Code: 3617f320 927df863 f9000283 17ffff96 (d4207d00) 
[  722.137040][0 T20    d.] ---[ end trace f324ec93c241132b ]---
[  722.149143][3 T3120  ..]  tee(E)
[  722.221266][0 T20    d.] Kernel panic - not syncing: BRK handler: Fatal exception
[  722.225841][3 T3120  ..]  amlogic_rng(E)
[  722.233308][0 T20    d.] SMP: stopping secondary CPUs
[  722.233505][0 T20    d.] Kernel Offset: 0x1000000000 from 0xffffffc008000000
[  722.233511][0 T20    d.] PHYS_OFFSET: 0x0
[  722.233515][0 T20    d.] CPU features: 0x0,0000c9a3,00000846
[  722.233522][0 T20    d.] Memory Limit: none
[  723.032427][0 T20    d.] Rebooting in 5 seconds..

Hello @matteoguglielmi

We need to check how to reproduce this issue on our side.