[RPi5] Kernel Panic After Selecting Live-TV Channel

vanfroda · January 16, 2024 at 1:19 PM

Hello,

I recently bought a new RPI5 and installed it with:

LibreELEC (community): nightly-20240116-0f6c393 (RPi5.aarch64)

(i also tried it with 11.0.5 stable version but the result was the same)

If i select a tv channel from the EPG i have a 50/50% chance that it completely crashes the system.

Code

[ 1188.859682] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000048
[ 1188.859690] Mem abort info:
[ 1188.859691]   ESR = 0x0000000096000047
[ 1188.859693]   EC = 0x25: DABT (current EL), IL = 32 bits
[ 1188.859695]   SET = 0, FnV = 0
[ 1188.859696]   EA = 0, S1PTW = 0
[ 1188.859698]   FSC = 0x07: level 3 translation fault
[ 1188.859700] Data abort info:
[ 1188.859701]   ISV = 0, ISS = 0x00000047, ISS2 = 0x00000000
[ 1188.859702]   CM = 0, WnR = 1, TnD = 0, TagAccess = 0
[ 1188.859704]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[ 1188.859706] user pgtable: 16k pages, 47-bit VAs, pgdp=00000001260a8000
[ 1188.859708] [0000000000000048] pgd=080000010fb58003, p4d=080000010fb58003, pud=080000010fb58003, pmd=080000010fc00003, pte=0000000000000000
[ 1188.859715] Internal error: Oops: 0000000096000047 [#1] SMP
[ 1188.865319] Modules linked in: rfcomm 8021q veth xt_nat xt_tcpudp xt_conntrack xt_MASQUERADE nf_conntrack_netlink iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xt_addrtype iptable_filter ip_tables x_tables br_netfilter bridge stp llc overlay brcmfmac_wcc brcmfmac brcmutil rpivid_hevc(C) hci_uart pisp_be btbcm cfg80211 v4l2_mem2mem bluetooth videobuf2_dma_contig videobuf2_memops videobuf2_v4l2 videodev ghash_ce aes_ce_blk sha2_ce sha256_arm64 aes_ce_cipher ecdh_generic videobuf2_common sha1_ce ecc rfkill mc rp1_adc gpio_keys spi_bcm2835 nvmem_rmem pkcs8_key_parser fuse nfnetlink
[ 1188.918220] CPU: 2 PID: 1282 Comm: kodi.bin Tainted: G         C         6.6.10 #1
[ 1188.925828] Hardware name: Raspberry Pi 5 Model B Rev 1.0 (DT)
[ 1188.931683] pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[ 1188.938675] pc : vc4_hvs_atomic_flush+0x188/0x6d0
[ 1188.943400] lr : vc4_hvs_atomic_flush+0x30c/0x6d0
[ 1188.948120] sp : ffffc00084263910
[ 1188.951442] x29: ffffc00084263910 x28: ffff800101699080 x27: 0000000000000001
[ 1188.958610] x26: ffffc00082ac4124 x25: ffff8001006e1c00 x24: 0000000000000000
[ 1188.965777] x23: ffff800101694000 x22: 0000000000000001 x21: ffffc00082ac4124
[ 1188.972946] x20: 0000000000000000 x19: ffff800101746080 x18: ffffffffffffffff
[ 1188.980114] x17: ffffc00081cda888 x16: ffffc00081cda818 x15: ffffc00082aa3db0
[ 1188.987285] x14: 0000000000000008 x13: 0000005df5a12c39 x12: ffff8001038126ca
[ 1188.994457] x11: 00000000000001eb x10: 0000000000000930 x9 : ffffc00080799898
[ 1189.001629] x8 : ffff8001014d1250 x7 : 0000000000000000 x6 : 0000000000000388
[ 1189.008801] x5 : 0000000000000388 x4 : ffff800101694000 x3 : 000000000000000e
[ 1189.015972] x2 : ffff80010fcd6400 x1 : ffffc00082ac4000 x0 : 0000000000000010
[ 1189.023145] Call trace:
[ 1189.025597]  vc4_hvs_atomic_flush+0x188/0x6d0
[ 1189.029975]  drm_atomic_helper_commit_planes+0x178/0x2e8
[ 1189.035312]  vc4_atomic_commit_tail+0x1c0/0x900
[ 1189.039865]  commit_tail+0xac/0x1b8
[ 1189.043366]  drm_atomic_helper_commit+0x184/0x1a8
[ 1189.048090]  drm_atomic_commit+0xb0/0xf0
[ 1189.052027]  drm_mode_atomic_ioctl+0xa0c/0xcf0
[ 1189.056489]  drm_ioctl_kernel+0xd0/0x180
[ 1189.060427]  drm_ioctl+0x214/0x4c8
[ 1189.063842]  __arm64_sys_ioctl+0xc4/0xf0
[ 1189.067781]  invoke_syscall+0x50/0x120
[ 1189.071546]  el0_svc_common.constprop.0+0x48/0xf0
[ 1189.076271]  do_el0_svc+0x24/0x38
[ 1189.079598]  el0_svc+0x40/0xe8
[ 1189.082663]  el0t_64_sync_handler+0x120/0x130
[ 1189.087037]  el0t_64_sync+0x190/0x198
[ 1189.090714] Code: b940b040 340000c0 f9405040 b940cc43 (b8237814)
[ 1189.096836] ---[ end trace 0000000000000000 ]---

Display More

From the kodi log itself it only shows these type of messages:

Code

2024-01-16 14:06:42.506 T:3863     info <general>: Opening stream: 1001 source: 256
2024-01-16 14:06:42.599 T:3863     info <general>: Creating video codec with codec id: 27
2024-01-16 14:06:42.600 T:3863     info <general>: CDVDVideoCodecDRMPRIME::Open - using decoder V4L2 mem2mem H.264 decoder wrapper
2024-01-16 14:06:42.600 T:3863     info <general>: CDVDVideoCodecDRMPRIME::Open - unable to open codec
2024-01-16 14:06:42.600 T:3863     info <general>: CDVDVideoCodecDRMPRIME::Open - using decoder H.264 / AVC / MPEG-4 AVC / MPEG-4 part 10
2024-01-16 14:06:42.602 T:3863     info <general>: Opening stream: 1002 source: 256
2024-01-16 14:06:42.603 T:3863     info <general>: Opening stream: 1003 source: 256
2024-01-16 14:06:43.438 T:3876  warning <general>: CRenderManager::Configure - timeout waiting for configure
2024-01-16 14:06:43.438 T:3876    error <general>: OutputPicture - failed to configure renderer
2024-01-16 14:06:43.938 T:3876  warning <general>: OutputPicture - timeout waiting for buffer
2024-01-16 14:06:50.122 T:3855     info <general>: Skipped 91 duplicate messages..
2024-01-16 14:06:50.122 T:3855  warning <general>: [plugin.video.vtm.go] [resources.lib.kodiplayer] Player: time-out occurred waiting for playback (30)
2024-01-16 14:06:50.142 T:3876  warning <general>: OutputPicture - timeout waiting for buffer
2024-01-16 14:06:52.844 T:3878     info <general>: Skipped 52 duplicate messages..
2024-01-16 14:06:52.844 T:3878     info <general>: CVideoPlayerAudio::Process - stream stalled
2024-01-16 14:06:52.852 T:3876  warning <general>: OutputPicture - timeout waiting for buffer
2024-01-16 14:06:53.163 T:3876    error <general>: CDVDVideoCodecDRMPRIME::FilterOpen - avfilter_graph_config:  Invalid argument (-22)
2024-01-16 14:06:54.164 T:3876  warning <general>: CRenderManager::Configure - timeout waiting for configure
2024-01-16 14:06:54.164 T:3876    error <general>: OutputPicture - failed to configure renderer
2024-01-16 14:06:54.665 T:3876  warning <general>: OutputPicture - timeout waiting for buffer
2024-01-16 14:07:03.300 T:3878     info <general>: Skipped 142 duplicate messages..
2024-01-16 14:07:03.300 T:3878     info <general>: CVideoPlayerAudio::Process - stream stalled
2024-01-16 14:07:03.326 T:3876  warning <general>: OutputPicture - timeout waiting for buffer
2024-01-16 14:07:13.371 T:3876     info <general>: Skipped 47 duplicate messages..
2024-01-16 14:07:13.371 T:3876  warning <general>: OutputPicture - timeout waiting for buffer
2024-01-16 14:07:23.390 T:3876     info <general>: Skipped 195 duplicate messages..
2024-01-16 14:07:23.390 T:3876  warning <general>: OutputPicture - timeout waiting for buffer
2024-01-16 14:07:33.408 T:3876     info <general>: Skipped 195 duplicate messages..
2024-01-16 14:07:33.408 T:3876  warning <general>: OutputPicture - timeout waiting for buffer
2024-01-16 14:07:43.427 T:3876     info <general>: Skipped 195 duplicate messages..
2024-01-16 14:07:43.427 T:3876  warning <general>: OutputPicture - timeout waiting for buffer
2024-01-16 14:07:53.446 T:3876     info <general>: Skipped 195 duplicate messages..
2024-01-16 14:07:53.446 T:3876  warning <general>: OutputPicture - timeout waiting for buffer
2024-01-16 14:08:03.464 T:3876     info <general>: Skipped 195 duplicate messages..
2024-01-16 14:08:03.464 T:3876  warning <general>: OutputPicture - timeout waiting for buffer
2024-01-16 14:08:13.483 T:3876     info <general>: Skipped 195 duplicate messages..
2024-01-16 14:08:13.483 T:3876  warning <general>: OutputPicture - timeout waiting for buffer
2024-01-16 14:08:23.501 T:3876     info <general>: Skipped 195 duplicate messages..
2024-01-16 14:08:23.501 T:3876  warning <general>: OutputPicture - timeout waiting for buffer

Display More

Full kodi.log

hastebin

Full dmesg

hastebin

Let me know if there is anything else you might need to look into this issue.

Thanks in advance!

vanfroda · January 31, 2024 at 10:58 AM

This issue is also being discussed in the following github issue:

[BUG] RPI5 kernel panic · Issue #1009 · jurialmunkey/skin.arctic.horizon.2

Skin section Fullscreen Video OSD Current Behavior If i select a live tv channel or VOD the audio starts playing for a few seconds, then stops. The video is…

github.com

It seems this happens also on RPI4 with libreelec on anything above LE11.0.3

Can anybody shed a light on what might be causing this failure?

yyogui · February 3, 2024 at 11:46 AM

Same issue on my Pi3 with LE > 11.0.3
The first video is working properly and each time I try to watch a second one, crash...

Is there a LE kernel repo where the bug can be report ?

Code

------------------
[ 440.874676] 8<--- cut here ---
[ 440.874713] Unable to handle kernel NULL pointer dereference at virtual address 00000054
[ 440.874727] [00000054] *pgd=09b54835, *pte=00000000, *ppte=00000000
[ 440.874750] Internal error: Oops: 817 [#1] SMP ARM
[ 440.874838] Modules linked in: rfcomm 8021q ip6table_mangle ip6table_nat ip6t_REJECT nf_reject_ipv6 ip6table_filter ip6_tables iptable_mangle iptable_nat nf_nat ipt_REJECT nf_reject_ipv4 xt_conntrack nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_filter ip_tables x_tables ir_nec_decoder aes_arm_bs crypto_simd cryptd hci_uart btbcm bcm2835_isp(C) bcm2835_codec(C) brcmfmac v4l2_mem2mem videobuf2_dma_contig brcmutil videobuf2_memops ir_rc6_decoder videobuf2_v4l2 bluetooth videobuf2_common rc_rc6_mce cfg80211 videodev rfkill ecdh_generic ecc snd_bcm2835(C) mc gpio_ir_recv pkcs8_key_parser fuse
[ 440.875511] CPU: 3 PID: 699 Comm: kodi.bin Tainted: G C 6.1.74 #1
[ 440.875595] Hardware name: BCM2835
[ 440.875638] PC is at vc4_hvs_atomic_flush+0x180/0x6f8
[ 440.875744] LR is at 0x0
[ 440.875787] pc : [<807f6e18>] lr : [<00000000>] psr: 280f0013
[ 440.875879] sp : acbc1bc0 ip : 82a89800 fp : acbc1c3c
[ 440.875966] r10: acb220cc r9 : 00000001 r8 : acb220cc
[ 440.876058] r7 : 00000000 r6 : 00000000 r5 : 82a2b840 r4 : 822a9840
[ 440.876165] r3 : 82a5b000 r2 : 00000010 r1 : 00000011 r0 : 822a9840
[ 440.876256] Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user
[ 440.876354] Control: 10c5383d Table: 0a2a406a DAC: 00000055
[ 440.876428] Register r0 information: slab kmalloc-1k start 822a9800 pointer offset 64 size 1024
[ 440.876567] Register r1 information: non-paged memory
[ 440.876641] Register r2 information: zero-size pointer
[ 440.876704] Register r3 information: slab kmalloc-1k start 82a5b000 pointer offset 0 size 1024
[ 440.876808] Register r4 information: slab kmalloc-1k start 822a9800 pointer offset 64 size 1024
[ 440.876915] Register r5 information: slab kmalloc-2k start 82a2b800 pointer offset 64 size 2048
[ 440.877028] Register r6 information: NULL pointer
[ 440.877106] Register r7 information: NULL pointer
[ 440.877163] Register r8 information: 0-page vmalloc region starting at 0xacb20000 allocated at __devm_ioremap_resource+0x170/0x1e4
[ 440.877309] Register r9 information: non-paged memory
[ 440.877367] Register r10 information: 0-page vmalloc region starting at 0xacb20000 allocated at __devm_ioremap_resource+0x170/0x1e4
[ 440.877491] Register r11 information: 2-page vmalloc region starting at 0xacbc0000 allocated at kernel_clone+0xa0/0x35c
[ 440.877619] Register r12 information: slab kmalloc-2k start 82a89800 pointer offset 0 size 2048
[ 440.877717] Process kodi.bin (pid: 699, stack limit = 0x8dc6896b)
[ 440.877787] Stack: (0xacbc1bc0 to 0xacbc2000)
[ 440.880835] Backtrace: 
[ 440.880876] vc4_hvs_atomic_flush from drm_atomic_helper_commit_planes+0x20c/0x290
[ 440.885724] r10:89a3fc40 r9:82a5b800 r8:00000001 r7:80d6e36c r6:82a5b400 r5:00000000
[ 440.890065] r4:00000004
[ 440.894019] drm_atomic_helper_commit_planes from vc4_atomic_commit_tail+0x144/0x924
[ 440.897970] r10:00000003 r9:82a0d840 r8:82a0d840 r7:82a73040 r6:82a89800 r5:00000000
[ 440.901697] r4:89a3fc40
[ 440.905311] vc4_atomic_commit_tail from commit_tail+0xac/0x1a4
[ 440.908889] r10:00000000 r9:89a3fc40 r8:81617944 r7:00000066 r6:a629647b r5:00000000
[ 440.912543] r4:89a3fc40
[ 440.916184] commit_tail from drm_atomic_helper_commit+0x144/0x168
[ 440.919889] r9:89a3fc40 r8:00000000 r7:00000000 r6:82a89800 r5:00000000 r4:89a3fc40
[ 440.923518] drm_atomic_helper_commit from drm_atomic_commit+0xbc/0xf0
[ 440.927305] r7:8658e6c0 r6:82a2b840 r5:82a89800 r4:89a3fc40
[ 440.931020] drm_atomic_commit from drm_mode_atomic_ioctl+0x8e0/0xb9c
[ 440.934782] r5:00000002 r4:00000000
[ 440.938512] drm_mode_atomic_ioctl from drm_ioctl_kernel+0xcc/0x170
[ 440.942162] r10:895b4600 r9:00000038 r8:895b4600 r7:acbc1e64 r6:807b6e18 r5:82a89800
[ 440.945893] r4:00000002
[ 440.949593] drm_ioctl_kernel from drm_ioctl+0x1d8/0x3d0
[ 440.953343] r8:829d1a40 r7:000000bc r6:80d5ef68 r5:00000038 r4:c03864bc
[ 440.957016] drm_ioctl from sys_ioctl+0x3f0/0x9f8
[ 440.960782] r10:829d1a40 r9:00000000 r8:8200cb40 r7:7edb2a78 r6:c03864bc r5:8200cb41
[ 440.964585] r4:c03864bc
[ 440.968395] sys_ioctl from ret_fast_syscall+0x0/0x4c
[ 440.972268] Exception stack(0xacbc1fa8 to 0xacbc1ff0)
[ 440.975973] 1fa0: 046af7f0 7edb2a78 00000000 c03864bc 7edb2a78 7edb2a38
[ 440.979809] 1fc0: 046af7f0 7edb2a78 c03864bc 00000036 04c8b598 04734888 04734958 04c8b600
[ 440.983592] 1fe0: 747b9114 7edb2a28 747ae8d8 7463df6c
[ 440.987372] r10:00000036 r9:829d1a40 r8:8010029c r7:00000036 r6:c03864bc r5:7edb2a78
[ 440.991070] r4:046af7f0
[ 440.994798] Code: e5932090 e3520000 159310ac 15932084 (17826101) 
[ 440.998660] ---[ end trace 0000000000000000 ]---
---------------------------------

Display More

**chewitt** · February 3, 2024 at 3:17 PM

Please test a current LE12 nightly. Same?

yyogui · February 3, 2024 at 4:11 PM

Works fine for me !

Did few tests, didn't see any crashes anymore.

vanfroda · February 5, 2024 at 7:16 PM

I just installed the below version, but I still have the same crashes with same footprint.

LibreELEC-RPi5.aarch64-12.0-nightly-20240205-690684c.img.gz

**Da Flex** · February 5, 2024 at 7:59 PM

Please provide a full debug log.

How to post a log (wiki)

1. Enable debugging in Settings>System Settings>Logging
2. Restart Kodi
3. Replicate the problem
4. Generate a log URL (do not post/upload logs to the forum)

use "Settings > LibreELEC > System > Paste system logs" or run "pastekodi" over SSH, then post the URL link

yyogui · February 6, 2024 at 5:38 PM

Please, be aware that this could be linked to the skin in use.

See last post here:

[BUG] RPI5 kernel panic · Issue #1009 · jurialmunkey/skin.arctic.horizon.2

Skin section Fullscreen Video OSD Current Behavior If i select a live tv channel or VOD the audio starts playing for a few seconds, then stops. The video is…

github.com

The skin I was using was not compatible with the last LE12 nightly build i've freshly installed.
So I could not test with my old skin, however I could not reproduce the crash with the new one i'm using.

**Da Flex** · February 6, 2024 at 6:10 PM

We need a log from our own log server. No more HasteBin logs.

vanfroda · February 8, 2024 at 9:31 AM

Hi,

Here are the logs:

https://paste.libreelec.tv/tough-ghoul.log

*note, i had to modify /usr/bin/pastekodi because it was hanging for eternity...

This line, was causing the problem, not sure why, but after commenting that out, the pastekodi command worked immediately:

# kmsprint | cat_data "kmsprint"

vanfroda · February 8, 2024 at 9:45 AM

I cannot seem to edit my previous post, but i wanted to add that the 'kmsprint' command works again after i rebooted the RPI.

Code

Emu:~ # kmsprint
Connector 0 (32) HDMI-A-1 (connected)
 Encoder 0 (31) TMDS
   Crtc 2 (86) [email protected] 148.500 1920/88/44/148/+ 1080/4/5/36/+ 60 (60.00) P|D
     Plane 4 (98) fb-id: 301 (crtcs: 0 1 2 3) 0,0 1920x1080 -> 0,0 1920x1080 (XR24 AR24 AB24 XB24 RG16 BG16 AR15 XR15 RG24 BG24 YU16 YV16 YU24 YV24 YU12 YV12 NV12 NV21 NV16 NV61 P030 XR30 AR30 AB30 XB30 RGB8 BGR8 XR12 AR12 XB12 AB12 BX12 BA12 RX12 RA12)
       FB 301 1920x1080 XR30
Connector 1 (41) HDMI-A-2 (disconnected)
 Encoder 1 (40) TMDS

**Da Flex** · February 11, 2024 at 5:38 PM

vanfroda Congrats, you found a bug ! We are working on it. Please update to the latest nightly build.