Kernel Oops when communicating with an USB device

Start by reproducing the Oops with the reported CDC device on the Linux 6.6.56-v7+ Raspberry Pi kernel, tracing the path from usbdev_ioctl through dwc_otg_urb_enqueue and dwc_otg_hcd_urb_alloc. Use the supplied kernel logs to isolate the fault; done means the device can communicate without the reported kernel Oops or follow-on recursive faults.

Describe the bug

We have a device that uses CDC Port for communicating and when we send data to the device, we receive this set of kernel Oops.

Steps to reproduce the behaviour

Any communication with this specific device, triggers the Oops.

Device (s)

Raspberry Pi 3 Mod. B+, Raspberry Pi 4 Mod. B

System

Raspberry Pi reference 2024-07-04
Generated using pi-gen, https://github.com/RPi-Distro/pi-gen, 0b115f302a8f1e5bd3523614d7f45b9d447434c7, stage4

Oct 10 2024 18:27:31
Copyright (c) 2012 Broadcom
version 0e63dd5ec215290186b4f3a41496b4425155878e (clean) (release) (start)

Linux raspberrypi 6.6.56-v7+ #1804 SMP Thu Oct 10 18:20:27 BST 2024 armv7l GNU/Linux

Logs

[   63.311793] 8<--- cut here ---
[   63.314920] Unable to handle kernel paging request at virtual address 0a0d3458 when read
[   63.323146] [0a0d3458] *pgd=00000000
[   63.326794] Internal error: Oops: 5 [#1] SMP ARM
[   63.331489] Modules linked in: rfcomm snd_seq_dummy snd_hrtimer snd_seq snd_seq_device cmac algif_hash aes_arm_bs crypto_simd cryptd algi6
[   63.401495] CPU: 3 PID: 1496 Comm: python3 Tainted: G         C         6.6.56-v7+ #1804
[   63.409720] Hardware name: BCM2835
[   63.413165] PC is at __kmem_cache_alloc_node+0x110/0x48c
[   63.418565] LR is at 0xa54d
[   63.421395] pc : [<8036041c>]    lr : [<0000a54d>]    psr: a0000093
[   63.427747] sp : bbd3dce0  ip : bbd3dce0  fp : aec93580
[   63.433042] r10: 00000000  r9 : 00000038  r8 : 811057c4
[   63.438337] r7 : 00000920  r6 : 0a0d3438  r5 : 00000000  r4 : 81401100
[   63.444957] r3 : 00000020  r2 : 39a6b000  r1 : bab06378  r0 : 0000a54c
[   63.451603] Flags: NzCv  IRQs off  FIQs on  Mode SVC_32  ISA ARM  Segment user
[   63.458978] Control: 10c5383d  Table: 0476406a  DAC: 00000055
[   63.464811] Register r0 information: non-paged memory
[   63.469937] Register r1 information: non-slab/vmalloc memory
[   63.475675] Register r2 information: non-paged memory
[   63.480796] Register r3 information: non-paged memory
[   63.485916] Register r4 information: slab kmem_cache start 81401100 pointer offset 0 size 124
[   63.494576] Register r5 information: NULL pointer
[   63.499343] Register r6 information: non-paged memory
[   63.504463] Register r7 information: non-paged memory
[   63.509583] Register r8 information: non-slab/vmalloc memory
[   63.515322] Register r9 information: non-paged memory
[   63.520441] Register r10 information: NULL pointer
[   63.525297] Register r11 information: slab kmalloc-128 start aec93580 pointer offset 0 size 128
[   63.534131] Register r12 information: 2-page vmalloc region starting at 0xbbd3c000 allocated at kernel_clone+0x9c/0x374
[   63.545080] Process python3 (pid: 1496, stack limit = 0x818146ce)
[   63.551260] Stack: (0xbbd3dce0 to 0xbbd3e000)
[   63.555678] dce0: 00000000 7f2f47d4 0000a54d ffffffff bab03480 00000038 8087e804 81401100
[   63.563972] dd00: 00000001 00000920 81dba400 00000000 aec93580 80317bc0 8087e804 bab03480
[   63.572264] dd20: 00000000 80113a8c 81743e10 00000820 00000000 00000038 00000001 81ca0000
[   63.580557] dd40: 81dba400 00000000 aec93580 8087e804 00000000 bbd3dda0 39a6b000 00000820
[   63.588850] dd60: 00000002 83236a00 84f6d000 8087eeec 81ca0000 00000000 82b21200 00000200
[   63.597144] dd80: 00000002 81743e10 00000000 7f2f47d4 00000002 83236a00 00000000 81ca0000
[   63.605437] dda0: 84f6d000 00000820 83236a0c 84f6f8c4 00000000 8084efcc 81525c00 81554e00
[   63.613730] ddc0: 81525c05 80b26c40 835d6a80 80b26c40 835d6a80 80b26c40 81401300 8085f2b4
[   63.622022] dde0: 00000000 80360350 00003817 ffffffff 00000666 ffffffff 80850378 00000200
[   63.630317] de00: 8085f2b4 81401300 01954d58 00002cc0 812ddfc0 8085f464 00000000 80317bc0
[   63.638610] de20: 8085f2b4 00000002 00000820 7f2f47d4 00000001 83236c80 83236c80 98ca7000
[   63.646903] de40: 83236c90 00000000 812ddfc0 84f6f8c4 00000000 8085f464 bbd3de70 00000004
[   63.655196] de60: 00000001 80173384 aecfadc0 00000000 00000000 00000001 aec93580 00000000
[   63.663489] de80: 00000001 00000000 83236a00 00000000 83236c90 00000000 00000000 82a5d600
[   63.671782] dea0: baafba80 801b728c 82a5d600 baafba40 baafba80 801b7eac 00000000 00000000
[   63.680075] dec0: 00000000 20000093 00000000 801b7350 00008103 00000000 00000000 019e9510
[   63.688367] dee0: 00000200 00000000 00000000 00000000 00000000 00000000 019ba510 7f2f47d4
[   63.696662] df00: 00000000 802c550a 00000000 835b3e41 01954d58 00000009 835b3e40 aecfadc0
[   63.704955] df20: 01954d58 8038fe70 00000000 00000008 00000000 00000001 00000161 80100298
[   63.713248] df40: 835d6a80 00000161 00000000 803d79b8 00000000 00000000 00000000 8466ed81
[   63.721541] df60: 0000003f 00000000 185629e0 80100298 00000000 00000000 00000000 7f2f47d4
[   63.729834] df80: 00000000 00000001 019ba510 00000001 00000036 80100298 835d6a80 00000036
[   63.738127] dfa0: 01954d58 80100040 00000001 019ba510 00000009 802c550a 01954d58 7eca6bb0
[   63.746420] dfc0: 00000001 019ba510 00000001 00000036 00004000 00000000 00000001 01954d58
[   63.754714] dfe0: 00000000 7eca6b98 76e1c000 76d9f0e4 60000010 00000009 00000000 00000000
[   63.763011]  __kmem_cache_alloc_node from __kmalloc+0x4c/0x180
[   63.768937]  __kmalloc from dwc_otg_hcd_urb_alloc+0x30/0xbc
[   63.774597]  dwc_otg_hcd_urb_alloc from dwc_otg_urb_enqueue+0x7c/0x334
[   63.781219]  dwc_otg_urb_enqueue from usb_hcd_submit_urb+0xec/0x950
[   63.787579]  usb_hcd_submit_urb from usbdev_ioctl+0x21ac/0x263c
[   63.793586]  usbdev_ioctl from sys_ioctl+0x110/0xa20
[   63.798628]  sys_ioctl from ret_fast_syscall+0x0/0x4c
[   63.803754] Exception stack(0xbbd3dfa8 to 0xbbd3dff0)
[   63.808877] dfa0:                   00000001 019ba510 00000009 802c550a 01954d58 7eca6bb0
[   63.817171] dfc0: 00000001 019ba510 00000001 00000036 00004000 00000000 00000001 01954d58
[   63.825462] dfe0: 00000000 7eca6b98 76e1c000 76d9f0e4
[   63.830584] Code: e3560000 13530000 0a0000c6 e594301c (e796a003)
[   63.836763] ---[ end trace 0000000000000000 ]---
[   63.841441] note: python3[1496] exited with irqs disabled
[  351.377121] 8<--- cut here ---
[  351.380253] Unable to handle kernel paging request at virtual address 3a657079 when read
[  351.388524] [3a657079] *pgd=00000000
[  351.392169] Internal error: Oops: 5 [#2] SMP ARM
[  351.396864] Modules linked in: rfcomm snd_seq_dummy snd_hrtimer snd_seq snd_seq_device cmac algif_hash aes_arm_bs crypto_simd cryptd algi6
[  351.466859] CPU: 2 PID: 1500 Comm: kworker/dying Tainted: G      D  C         6.6.56-v7+ #1804
[  351.475625] Hardware name: BCM2835
[  351.479078] PC is at account_kernel_stack+0x1c/0x7c
[  351.484055] LR is at exit_task_stack_account+0x1c/0x50
[  351.489276] pc : [<80119c0c>]    lr : [<8011ad50>]    psr: 60000013
[  351.495638] sp : bbfa5f50  ip : 00000000  fp : 00000000
[  351.500942] r10: 828429b4  r9 : 00000000  r8 : bbfa5f6c
[  351.506245] r7 : 82bb6900  r6 : 98ca7f80  r5 : bbfa591c  r4 : fffffffc
[  351.512871] r3 : 3a657079  r2 : bbfa5f6c  r1 : ffffffff  r0 : 82843380
[  351.519489] Flags: nZCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
[  351.526724] Control: 10c5383d  Table: 0483c06a  DAC: 00000055
[  351.532546] Register r0 information: slab task_struct start 82842380 pointer offset 4096 size 4544
[  351.541649] Register r1 information: non-paged memory
[  351.546771] Register r2 information: 828600931-page vmalloc region starting at 0x61657274 allocated at 0xd747469
[  351.557097] Register r3 information: non-paged memory
[  351.562218] Register r4 information: non-paged memory
[  351.567339] Register r5 information: 828600931-page vmalloc region starting at 0x61657274 allocated at 0xd747469
[  351.577660] Register r6 information: slab kmalloc-64 start 98ca7f80 pointer offset 0 size 64
[  351.586228] Register r7 information: slab sighand_cache start 82bb6900 pointer offset 0 size 1300
[  351.595238] Register r8 information: 828600931-page vmalloc region starting at 0x61657274 allocated at 0xd747469
[  351.605561] Register r9 information: NULL pointer
[  351.610329] Register r10 information: slab task_struct start 82842380 pointer offset 1588 size 4544
[  351.619515] Register r11 information: NULL pointer
[  351.624371] Register r12 information: NULL pointer
[  351.629228] Process kworker/dying (pid: 1500, stack limit = 0x1657f742)
[  351.635935] Stack: (0xbbfa5f50 to 0xbbfa6000)
[  351.640351] 5f40:                                     82843380 bbfa591c 81590000 8011ad50
[  351.648645] 5f60: 82842380 80123050 bb855ed4 bbfa5f6c bbfa5f6c 7f2f47d4 98c98e80 98c98e80
[  351.656938] 5f80: 00000000 801437a0 826c6440 801438a8 826c6440 801437dc 00000000 00000000
[  351.665231] 5fa0: 00000000 00000000 00000000 8010011c 00000000 00000000 00000000 00000000
[  351.673524] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  351.681816] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 00000000 00000000
[  351.690111]  account_kernel_stack from exit_task_stack_account+0x1c/0x50
[  351.696916]  exit_task_stack_account from do_exit+0x688/0x990
[  351.702751]  do_exit from kthread_exit+0x30/0x48
[  351.707439]  kthread_exit from kthread+0xcc/0x104
[  351.712213]  kthread from ret_from_fork+0x14/0x38
[  351.716987] Exception stack(0xbbfa5fb0 to 0xbbfa5ff8)
[  351.722107] 5fa0:                                     00000000 00000000 00000000 00000000
[  351.730400] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  351.738692] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000
[  351.745401] Code: e2800a01 e1a04101 e590611c e5963010 (e5930000)
[  351.751649] ---[ end trace 0000000000000000 ]---
[  351.756336] Fixing recursive fault but reboot is needed!
[  351.826906] 8<--- cut here ---
[  351.830041] Unable to handle kernel paging request at virtual address 3a657079 when read
[  351.838267] [3a657079] *pgd=00000000
[  351.841900] Internal error: Oops: 5 [#3] SMP ARM
[  351.846583] Modules linked in: rfcomm snd_seq_dummy snd_hrtimer snd_seq snd_seq_device cmac algif_hash aes_arm_bs crypto_simd cryptd algi6
[  351.916339] CPU: 2 PID: 52 Comm: kworker/2:1 Tainted: G      D  C         6.6.56-v7+ #1804
[  351.924724] Hardware name: BCM2835
[  351.928170] Workqueue: events delayed_vfree_work
[  351.932870] PC is at vfree+0x16c/0x248
[  351.936675] LR is at 0x3a657079
[  351.939857] pc : [<803407dc>]    lr : [<3a657079>]    psr: 20000013
[  351.946211] sp : bb915f08  ip : 3a657079  fp : 00000000
[  351.951505] r10: 814c7205  r9 : 00000080  r8 : bab24000
[  351.956799] r7 : 00000000  r6 : 98ca7f80  r5 : 38e38e39  r4 : 00000000
[  351.963417] r3 : 8110b1fc  r2 : 00000000  r1 : fff33a05  r0 : ffffffff
[  351.970036] Flags: nzCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
[  351.977274] Control: 10c5383d  Table: 041e806a  DAC: 00000055
[  351.983096] Register r0 information: non-paged memory
[  351.988221] Register r1 information: non-paged memory
[  351.993342] Register r2 information: NULL pointer
[  351.998111] Register r3 information: non-slab/vmalloc memory
[  352.003852] Register r4 information: NULL pointer
[  352.008620] Register r5 information: non-paged memory
[  352.013740] Register r6 information: slab kmalloc-64 start 98ca7f80 pointer offset 0 size 64
[  352.022310] Register r7 information: NULL pointer
[  352.027078] Register r8 information: non-slab/vmalloc memory
[  352.032816] Register r9 information: non-paged memory
[  352.037936] Register r10 information: slab maple_node start 814c7200 pointer offset 5 size 256
[  352.046682] Register r11 information: NULL pointer
[  352.051538] Register r12 information: non-paged memory
[  352.056747] Process kworker/2:1 (pid: 52, stack limit = 0xe7da8afb)
[  352.063105] Stack: (0xbb915f08 to 0xbb916000)
[  352.067523] 5f00:                   81ccaa50 81cca380 00000000 baaf0130 814c7200 baaf10c0
[  352.075817] 5f20: 81cca380 803408fc 81d83980 8013a1ec baaf10c0 81d839ac 81103d40 81d83980
[  352.084110] 5f40: baaf10c0 81d839ac 81103d40 baaf10e0 61c88647 baaf10dc 00000000 8013a6a8
[  352.092403] 5f60: 81d83980 81cca380 bb8a1ed4 81d80b40 81cca380 8013a404 81d83980 81c24340
[  352.100696] 5f80: bb8a1ed4 00000000 00000000 801438c4 81d80b40 801437dc 00000000 00000000
[  352.108988] 5fa0: 00000000 00000000 00000000 8010011c 00000000 00000000 00000000 00000000
[  352.117281] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  352.125574] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 00000000 00000000
[  352.133870]  vfree from delayed_vfree_work+0x44/0x50
[  352.138918]  delayed_vfree_work from process_one_work+0x160/0x378
[  352.145107]  process_one_work from worker_thread+0x2a4/0x4f0
[  352.150853]  worker_thread from kthread+0xe8/0x104
[  352.155720]  kthread from ret_from_fork+0x14/0x38
[  352.160493] Exception stack(0xbb915fb0 to 0xbb915ff8)
[  352.165613] 5fa0:                                     00000000 00000000 00000000 00000000
[  352.173906] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  352.182198] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000
[  352.188909] Code: e1a0e00c e5928000 e1a02004 e3e00000 (e49e3004)
[  352.195146] ---[ end trace 0000000000000000 ]---
[  352.222290] 8<--- cut here ---
[  352.225401] Unable to handle kernel paging request at virtual address 0a0d3458 when read
[  352.233626] [0a0d3458] *pgd=00000000
[  352.237267] Internal error: Oops: 5 [#4] SMP ARM
[  352.241948] Modules linked in: rfcomm snd_seq_dummy snd_hrtimer snd_seq snd_seq_device cmac algif_hash aes_arm_bs crypto_simd cryptd algi6
[  352.311708] CPU: 3 PID: 242 Comm: systemd-journal Tainted: G      D  C         6.6.56-v7+ #1804
[  352.320531] Hardware name: BCM2835
[  352.323974] PC is at __kmem_cache_alloc_node+0x110/0x48c
[  352.329369] LR is at 0xa5de
[  352.332199] pc : [<8036041c>]    lr : [<0000a5de>]    psr: a0000013
[  352.338552] sp : bb935d48  ip : bb935d48  fp : 98ca7200
[  352.343847] r10: 80e4b2b4  r9 : 00000008  r8 : 811057c4
[  352.349141] r7 : 00000dc0  r6 : 0a0d3438  r5 : 00000000  r4 : 81401100
[  352.355758] r3 : 00000020  r2 : 39a6b000  r1 : bab06378  r0 : 0000a5dd
[  352.362375] Flags: NzCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
[  352.369611] Control: 10c5383d  Table: 041e806a  DAC: 00000055
[  352.375432] Register r0 information: non-paged memory
[  352.380555] Register r1 information: non-slab/vmalloc memory
[  352.386294] Register r2 information: non-paged memory
[  352.391414] Register r3 information: non-paged memory
[  352.396534] Register r4 information: slab kmem_cache start 81401100 pointer offset 0 size 124
[  352.405193] Register r5 information: NULL pointer
[  352.409962] Register r6 information: non-paged memory
[  352.415082] Register r7 information: non-paged memory
[  352.420201] Register r8 information: non-slab/vmalloc memory
[  352.425939] Register r9 information: non-paged memory
[  352.431060] Register r10 information: non-slab/vmalloc memory
[  352.436887] Register r11 information: slab kmalloc-64 start 98ca7200 pointer offset 0 size 64
[  352.445543] Register r12 information: 2-page vmalloc region starting at 0xbb934000 allocated at kernel_clone+0x9c/0x374
[  352.456486] Process systemd-journal (pid: 242, stack limit = 0xa63a33f0)
[  352.463285] Stack: (0xbb935d48 to 0xbb936000)
[  352.467701] 5d40:                   00000cc0 00000000 0000a5de ffffffff 00240000 00000008
[  352.475995] 5d60: 80340cfc 81401100 8011d240 00000dc0 ffffffff 80e4b2b4 98ca7200 80317a4c
[  352.484288] 5d80: 80340cfc 8033dd50 ffffffff 00000dc0 00000000 00000008 00000002 bb800000
[  352.492582] 5da0: 8011d240 00000022 00000dc2 80e4b2b4 98ca7200 80340cfc ff800000 ffffffff
[  352.500875] 5dc0: 00000dc0 8011d240 81402780 003d0f00 8011d240 00002000 00000000 802ec7e4
[  352.509168] 5de0: bbc80000 ffffffff 00000210 7f2f47d4 003d0f00 8477b540 003d0f00 bb935f38
[  352.517462] 5e00: 83c891c0 00000800 00010000 ffffffff 8011d240 8011c090 00000dc0 0000065f
[  352.525755] 5e20: 00000000 ffffffff 8011d240 bb935f18 00000000 00000000 00000000 8127241c
[  352.534048] 5e40: 00000000 00000000 ffff0000 00000000 83e19300 80325320 8231eec0 80325320
[  352.542341] 5e60: bb935ee4 bad09574 bad09590 00000000 00000000 00000000 bb935f18 00000000
[  352.550634] 5e80: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  352.558927] 5ea0: bb935f18 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  352.567220] 5ec0: 00000000 00000000 00000000 7f2f47d4 00000004 003d0f00 003d0f00 bb935f38
[  352.575513] 5ee0: 74fd6d78 00000000 83c891c0 00000078 00100000 8011d240 00000078 00000000
[  352.583806] 5f00: 841e9d48 74fd6d78 74fd72e8 7f2f47d4 74fd72e8 003d0f00 74fd72e8 74fd7780
[  352.592100] 5f20: 74fd6d78 80100298 83c891c0 00000078 7ec0e0c8 8011d8ac 003d0f00 00000000
[  352.600393] 5f40: 74fd72e8 74fd72e8 74fd72e8 00000000 00000000 00000000 74fd6d78 00000000
[  352.608686] 5f60: 74fd7780 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  352.616978] 5f80: 00000000 00000000 fffffffe 7f2f47d4 ffffffff 74fd72e8 7ec0e0d0 7ec0e0c6
[  352.625272] 5fa0: 00000078 80100288 74fd72e8 7ec0e0d0 003d0f00 74fd6d78 74fd72e8 74fd7780
[  352.633565] 5fc0: 74fd72e8 7ec0e0d0 7ec0e0c6 00000078 747d7000 7ec0e0c7 747d7000 7ec0e0c8
[  352.641860] 5fe0: 003d0f00 7ec0dff0 76b12df4 76b10adc 20000010 003d0f00 00000000 00000000
[  352.650154]  __kmem_cache_alloc_node from __kmalloc_node+0x50/0x178
[  352.656520]  __kmalloc_node from __vmalloc_node_range+0x3f4/0x668
[  352.662710]  __vmalloc_node_range from copy_process+0xb44/0x1bbc
[  352.668809]  copy_process from kernel_clone+0x9c/0x374
[  352.674022]  kernel_clone from sys_clone+0x78/0xa0
[  352.678882]  sys_clone from __sys_trace_return+0x0/0x10
[  352.684183] Exception stack(0xbb935fa8 to 0xbb935ff0)
[  352.689304] 5fa0:                   74fd72e8 7ec0e0d0 003d0f00 74fd6d78 74fd72e8 74fd7780
[  352.697597] 5fc0: 74fd72e8 7ec0e0d0 7ec0e0c6 00000078 747d7000 7ec0e0c7 747d7000 7ec0e0c8
[  352.705889] 5fe0: 003d0f00 7ec0dff0 76b12df4 76b10adc
[  352.711011] Code: e3560000 13530000 0a0000c6 e594301c (e796a003)
[  352.717222] ---[ end trace 0000000000000000 ]---
[  352.730940] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1.
[  352.752079] systemd[1]: Stopped systemd-journald.service - Journal Service.
[  352.759850] systemd[1]: systemd-journald.service: Consumed 1.737s CPU time.
[  352.773166] 8<--- cut here ---
[  352.776313] Unable to handle kernel paging request at virtual address 0a0d3458 when read
[  352.784534] [0a0d3458] *pgd=00000000
[  352.788171] Internal error: Oops: 5 [#5] SMP ARM
[  352.792854] Modules linked in: rfcomm snd_seq_dummy snd_hrtimer snd_seq snd_seq_device cmac algif_hash aes_arm_bs crypto_simd cryptd algi6
[  352.862608] CPU: 3 PID: 1 Comm: systemd Tainted: G      D  C         6.6.56-v7+ #1804
[  352.870550] Hardware name: BCM2835
[  352.873993] PC is at __kmem_cache_alloc_node+0x110/0x48c
[  352.879389] LR is at 0xa5de
[  352.882218] pc : [<8036041c>]    lr : [<0000a5de>]    psr: a0000013
[  352.888571] sp : bb82de60  ip : bb82de60  fp : 8117b258
[  352.893866] r10: 849e8008  r9 : 0000001c  r8 : 811057c4
[  352.899160] r7 : 00000dc0  r6 : 0a0d3438  r5 : 00000000  r4 : 81401100
[  352.905777] r3 : 00000020  r2 : 39a6b000  r1 : bab06378  r0 : 0000a5dd
[  352.912395] Flags: NzCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
[  352.919630] Control: 10c5383d  Table: 0241c06a  DAC: 00000055
[  352.925453] Register r0 information: non-paged memory
[  352.930575] Register r1 information: non-slab/vmalloc memory
[  352.936314] Register r2 information: non-paged memory
[  352.941433] Register r3 information: non-paged memory
[  352.946554] Register r4 information: slab kmem_cache start 81401100 pointer offset 0 size 124
[  352.955212] Register r5 information: NULL pointer
[  352.959981] Register r6 information: non-paged memory
[  352.965101] Register r7 information: non-paged memory
[  352.970221] Register r8 information: non-slab/vmalloc memory
[  352.975958] Register r9 information: non-paged memory
[  352.981078] Register r10 information: slab kmalloc-1k start 849e8000 pointer offset 8 size 1024
[  352.989911] Register r11 information: non-slab/vmalloc memory
[  352.995736] Register r12 information: 2-page vmalloc region starting at 0xbb82c000 allocated at kernel_clone+0x9c/0x374
[  353.006682] Process systemd (pid: 1, stack limit = 0x56b5bde9)
[  353.012597] Stack: (0xbb82de60 to 0xbb82e000)
[  353.017015] de60: 81590000 80b26c40 0000a5de ffffffff 00000dc0 81401100 849e8008 0000001c
[  353.025308] de80: 8068f498 00000dc0 849e8000 849e8008 8117b258 80316ebc 8068f498 8068f45c
[  353.033601] dea0: 80ec32e0 00000cc0 8117b258 00000cc0 849e8008 00000000 801d51bc 00000001
[  353.041895] dec0: 849e8000 849e8008 8117b258 8068f498 81f0a000 84bff060 9957b13c 000001ed
[  353.050188] dee0: 00000001 801ddf54 81838d80 00000003 814c54d4 84bff060 000001ed 84bff060
[  353.058481] df00: 000001ed 9957b110 8117b1d4 000001ed 81590000 00000000 8110dea0 804190e0
[  353.066773] df20: 81838d80 8041907c 811989cc 9957b110 000001ed 80388478 81402c00 00000000
[  353.075067] df40: 8da04f6b 00000018 8244502c 00000000 00031388 9957b110 00000000 000001ed
[  353.083360] df60: 82445000 ffffff9c 00000002 00000027 00000380 8038cce0 00000027 822fca90
[  353.091653] df80: 819bdee0 7f2f47d4 76cc9568 00000000 01746dd8 76cc9568 00000027 80100298
[  353.099946] dfa0: 81590000 80100040 00000000 01746dd8 01742f08 000001ed 00000000 00000000
[  353.108239] dfc0: 00000000 01746dd8 76cc9568 00000027 01746dd8 00000000 00000380 00000380
[  353.116533] dfe0: 76d36948 7efac44c 76ac6b38 769a4f6c 60000010 01742f08 00000000 00000000
[  353.124828]  __kmem_cache_alloc_node from kmalloc_trace+0x30/0xc0
[  353.131018]  kmalloc_trace from percpu_ref_init+0x60/0x114
[  353.136592]  percpu_ref_init from cgroup_mkdir+0xc0/0x44c
[  353.142076]  cgroup_mkdir from kernfs_iop_mkdir+0x64/0x8c
[  353.147554]  kernfs_iop_mkdir from vfs_mkdir+0x18c/0x230
[  353.152945]  vfs_mkdir from do_mkdirat+0x118/0x13c
[  353.157808]  do_mkdirat from ret_fast_syscall+0x0/0x4c
[  353.163021] Exception stack(0xbb82dfa8 to 0xbb82dff0)
[  353.168142] dfa0:                   00000000 01746dd8 01742f08 000001ed 00000000 00000000
[  353.176435] dfc0: 00000000 01746dd8 76cc9568 00000027 01746dd8 00000000 00000380 00000380
[  353.184727] dfe0: 76d36948 7efac44c 76ac6b38 769a4f6c
[  353.189850] Code: e3560000 13530000 0a0000c6 e594301c (e796a003)
[  353.196058] ---[ end trace 0000000000000000 ]---
[  353.200843] Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b
[  353.208612] CPU0: stopping
[  353.208617] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G      D  C         6.6.56-v7+ #1804
[  353.208624] Hardware name: BCM2835
[  353.208629]  unwind_backtrace from show_stack+0x18/0x1c
[  353.208644]  show_stack from dump_stack_lvl+0x50/0x68
[  353.208658]  dump_stack_lvl from do_handle_IPI+0x1a8/0x1e4
[  353.208670]  do_handle_IPI from ipi_handler+0x20/0x28
[  353.208681]  ipi_handler from handle_percpu_devid_irq+0x84/0x1c0
[  353.208693]  handle_percpu_devid_irq from generic_handle_domain_irq+0x30/0x40
[  353.208707]  generic_handle_domain_irq from bcm2836_arm_irqchip_handle_ipi+0x94/0xb4
[  353.208723]  bcm2836_arm_irqchip_handle_ipi from generic_handle_domain_irq+0x30/0x40
[  353.208735]  generic_handle_domain_irq from generic_handle_arch_irq+0x34/0x44
[  353.208748]  generic_handle_arch_irq from __irq_svc+0x74/0x94
[  353.208759] Exception stack(0x81101f38 to 0x81101f80)
[  353.208764] 1f20:                                                       00000003 00000001
[  353.208771] 1f40: 00000000 60000093 81108980 8110501c 81108980 81105078 81256d50 80e28bd4
[  353.208779] 1f60: 80eb6ef0 81108468 000112e6 81101f88 80b24908 80b24d60 60000013 ffffffff
[  353.208783]  __irq_svc from default_idle_call+0x38/0xa0
[  353.208795]  default_idle_call from do_idle+0xbc/0x11c
[  353.208811]  do_idle from cpu_startup_entry+0x30/0x34
[  353.208825]  cpu_startup_entry from rest_init+0xb4/0xb8
[  353.208838]  rest_init from arch_post_acpi_subsys_init+0x0/0x18
[  353.208879] CPU2: stopping
[  353.208883] CPU: 2 PID: 0 Comm: swapper/2 Tainted: G      D  C         6.6.56-v7+ #1804
[  353.208890] Hardware name: BCM2835
[  353.208893]  unwind_backtrace from show_stack+0x18/0x1c
[  353.208906]  show_stack from dump_stack_lvl+0x50/0x68
[  353.208917]  dump_stack_lvl from do_handle_IPI+0x1a8/0x1e4
[  353.208929]  do_handle_IPI from ipi_handler+0x20/0x28
[  353.208939]  ipi_handler from handle_percpu_devid_irq+0x84/0x1c0
[  353.208949]  handle_percpu_devid_irq from generic_handle_domain_irq+0x30/0x40
[  353.208960]  generic_handle_domain_irq from bcm2836_arm_irqchip_handle_ipi+0x94/0xb4
[  353.208973]  bcm2836_arm_irqchip_handle_ipi from generic_handle_domain_irq+0x30/0x40
[  353.208985]  generic_handle_domain_irq from generic_handle_arch_irq+0x34/0x44
[  353.208998]  generic_handle_arch_irq from call_with_stack+0x18/0x20
[  353.209011]  call_with_stack from __irq_svc+0x84/0x94
[  353.209019] Exception stack(0xbb875f68 to 0xbb875fb0)
[  353.209026] 5f60:                   00000003 00000001 00000002 60000093 815ac700 8110501c
[  353.209034] 5f80: 815ac700 81105078 81256d50 80e28bd4 00000000 00000000 000112e6 bb875fb8
[  353.209039] 5fa0: 80b24908 80b24d60 60000013 ffffffff
[  353.209043]  __irq_svc from default_idle_call+0x38/0xa0
[  353.209054]  default_idle_call from do_idle+0xbc/0x11c
[  353.209068]  do_idle from cpu_startup_entry+0x30/0x34
[  353.209081]  cpu_startup_entry from secondary_start_kernel+0x11c/0x124
[  353.209095]  secondary_start_kernel from 0x101280
[  353.209108] CPU1: stopping
[  353.209113] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G      D  C         6.6.56-v7+ #1804
[  353.209119] Hardware name: BCM2835
[  353.209123]  unwind_backtrace from show_stack+0x18/0x1c
[  353.209136]  show_stack from dump_stack_lvl+0x50/0x68
[  353.209146]  dump_stack_lvl from do_handle_IPI+0x1a8/0x1e4
[  353.209158]  do_handle_IPI from ipi_handler+0x20/0x28
[  353.209169]  ipi_handler from handle_percpu_devid_irq+0x84/0x1c0
[  353.209179]  handle_percpu_devid_irq from generic_handle_domain_irq+0x30/0x40
[  353.209191]  generic_handle_domain_irq from bcm2836_arm_irqchip_handle_ipi+0x94/0xb4
[  353.209203]  bcm2836_arm_irqchip_handle_ipi from generic_handle_domain_irq+0x30/0x40
[  353.209216]  generic_handle_domain_irq from generic_handle_arch_irq+0x34/0x44
[  353.209229]  generic_handle_arch_irq from call_with_stack+0x18/0x20
[  353.209240]  call_with_stack from __irq_svc+0x84/0x94
[  353.209249] Exception stack(0xbb871f68 to 0xbb871fb0)
[  353.209257] 1f60:                   00000003 00000001 00000001 60000093 815ab540 8110501c
[  353.209263] 1f80: 815ab540 81105078 81256d50 80e28bd4 00000000 00000000 00000007 bb871fb8
[  353.209268] 1fa0: 80b24908 80b24d60 60000013 ffffffff
[  353.209272]  __irq_svc from default_idle_call+0x38/0xa0
[  353.209283]  default_idle_call from do_idle+0xbc/0x11c
[  353.209296]  do_idle from cpu_startup_entry+0x30/0x34
[  353.209310]  cpu_startup_entry from secondary_start_kernel+0x11c/0x124
[  353.209322]  secondary_start_kernel from 0x101280
[  353.617219] ---[ end Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b ]---

Additional context

No response