[BUG] out of memory on esp32s3 after running ls

[Y334275]

Description / Steps to reproduce the issue

Hi NuttX Community,
I encountered an "out of memory" error after building and flashing NuttX 12.12.0 (kernel mode) to an ESP32-S3. Here are the steps to reproduce the issue:

1. Build NuttX 12.12.0 in kernel mode.
2. Flash the resulting image to an ESP32-S3.
3. After the system boots, run the ls command couple times.

On which OS does this issue occur?

[OS: Linux]

What is the version of your OS?

Ubuntu 22.04.5 LTS

NuttX Version

12.12.0

Issue Architecture

[Arch: xtensa]

Issue Area

[Area: Kernel]

Host information

file sysinfo.h not exists
NuttX CFLAGS:
-isystem /home/nope/PX4-Autopilot/platforms/nuttx/NuttX/nuttx/include
-isystem /home/nope/PX4-Autopilot/platforms/nuttx/NuttX/nuttx/include
-std=gnu11
-mtext-section-literals
-mlongcalls
-Wl--wrap=bootloader_print_banner
-Os
-g2
-fdata-sections
-ffunction-sections
-fno-builtin-printf
-fno-common
-fno-strength-reduce
-fno-strict-aliasing
-fomit-frame-pointer
-Wall
-Wextra
-Wlogical-op
-Wno-builtin-declaration-mismatch
-Wno-cpp
-Wno-format
-Wno-format-truncation
-Wno-maybe-uninitialized
-Wno-missing-field-initializers
-Wno-stringop-truncation
-Wno-sign-compare
-Wno-type-limits
-Wno-unused-parameter
-Wpointer-arith
-Wno-bad-function-cast
-Wno-float-equal
-Wno-implicit-fallthrough
-Wno-implicit-function-declaration
-Wno-logical-op
-Wno-missing-declarations
-Wno-missing-field-initializers
-Wno-missing-prototypes
-Wno-nested-externs
-Wno-nonnull-compare
-Wno-old-style-declaration
-Wno-sign-compare
-Wno-type-limits

NuttX CXXFLAGS:
-isystem /home/nope/PX4-Autopilot/platforms/nuttx/NuttX/nuttx/include/cxx
-isystem /home/nope/PX4-Autopilot/platforms/nuttx/NuttX/nuttx/include
-isystem /home/nope/PX4-Autopilot/platforms/nuttx/NuttX/nuttx/include
-isystem /home/nope/PX4-Autopilot/platforms/nuttx/NuttX/nuttx/include/cxx
-std=c++14
-nostdinc++
-mtext-section-literals
-mlongcalls
-Wl--wrap=bootloader_print_banner
-Os
-g2
-fdata-sections
-ffunction-sections
-fno-builtin-printf
-fno-common
-fno-strength-reduce
-fno-strict-aliasing
-fomit-frame-pointer
-Wall
-Wextra
-Wlogical-op
-Wno-builtin-declaration-mismatch
-Wno-cpp
-Wno-format
-Wno-format-truncation
-Wno-maybe-uninitialized
-Wno-missing-field-initializers
-Wno-stringop-truncation
-Wno-sign-compare
-Wno-type-limits
-Wno-unused-parameter
-Wpointer-arith
-fcheck-new
-fno-builtin
-fno-exceptions
-fno-rtti
-fno-sized-deallocation
-nostdinc++
-Wno-double-promotion
-Wno-missing-declarations

NuttX LDFLAGS:

NuttX configuration options:
CONFIG_ALLOW_BSD_COMPONENTS=y
CONFIG_HOST_LINUX=y
CONFIG_APPS_DIR=../apps
CONFIG_BASE_DEFCONFIG=-dirty
CONFIG_MODULES=y
CONFIG_BUILD_FLAT=y
CONFIG_INTELHEX_BINARY=y
CONFIG_RAW_BINARY=y
CONFIG_OUTPUT_STRIP_PATHS=y
CONFIG_ARCH_HAVE_STDARG_H=y
CONFIG_ARCH_HAVE_SETJMP=y
CONFIG_ARCH_NONE_DEBUG_H=y
CONFIG_FORTIFY_SOURCE=0
CONFIG_NDEBUG=y
CONFIG_DEBUG_ALERT=y
CONFIG_DEBUG_FEATURES=y
CONFIG_DEBUG_ERROR=y
CONFIG_DEBUG_WARN=y
CONFIG_DEBUG_INFO=y
CONFIG_DEBUG_MM=y
CONFIG_DEBUG_MM_ERROR=y
CONFIG_DEBUG_MM_WARN=y
CONFIG_DEBUG_MM_INFO=y
CONFIG_DEBUG_SCHED=y
CONFIG_DEBUG_SCHED_ERROR=y
CONFIG_DEBUG_SCHED_WARN=y
CONFIG_DEBUG_SCHED_INFO=y
CONFIG_ARCH_HAVE_STACKCHECK=y
CONFIG_STACK_COLORATION=y
CONFIG_STACKCHECK_MARGIN=-1
CONFIG_STACK_USAGE_WARNING=0
CONFIG_DEBUG_SYMBOLS=y
CONFIG_DEBUG_SYMBOLS_LEVEL=-g
CONFIG_ARCH_HAVE_CUSTOMOPT=y
CONFIG_DEBUG_FULLOPT=y
CONFIG_LTO_NONE=y
CONFIG_DEBUG_OPT_UNUSED_SECTIONS=y
CONFIG_DEBUG_LINK_MAP=y
CONFIG_ARCH_XTENSA=y
CONFIG_ARCH=\xtensa
CONFIG_ARCH_CHIP=\esp32s3
CONFIG_ESPRESSIF_CHIP_SERIES=\esp32s3
CONFIG_ESPRESSIF_NUM_CPUS=2
CONFIG_ESPRESSIF_SIMPLE_BOOT=y
CONFIG_ESPRESSIF_I2C_PERIPH_MASTER_MODE=y
CONFIG_ESPRESSIF_SPI_PERIPH=y
CONFIG_ESPRESSIF_FLASH_MODE_DIO=y
CONFIG_ESPRESSIF_FLASH_FREQ_40M=y
CONFIG_ESPRESSIF_FLASH_FREQ=\40m
CONFIG_ARCH_CHIP_ESP32S3=y
CONFIG_ARCH_FAMILY_LX7=y
CONFIG_XTENSA_CP_INITSET=0x0001
CONFIG_XTENSA_INTBACKTRACE=y
CONFIG_XTENSA_TOOLCHAIN_ESP=y
CONFIG_ESP_PHY_IRQSTATE_FLAGS_NUMBER=3
CONFIG_ARCH_CHIP_ESP32S3WROOM1N4=y
CONFIG_ESP32S3_DEFAULT_CPU_FREQ_240=y
CONFIG_ESP32S3_DEFAULT_CPU_FREQ_MHZ=240
CONFIG_ESP32S3_INSTRUCTION_CACHE_16KB=y
CONFIG_ESP32S3_INSTRUCTION_CACHE_SIZE=0x4000
CONFIG_ESP32S3_INSTRUCTION_CACHE_8WAYS=y
CONFIG_ESP32S3_ICACHE_ASSOCIATED_WAYS=8
CONFIG_ESP32S3_INSTRUCTION_CACHE_LINE_32B=y
CONFIG_ESP32S3_INSTRUCTION_CACHE_LINE_SIZE=32
CONFIG_ESP32S3_DATA_CACHE_32KB=y
CONFIG_ESP32S3_DATA_CACHE_SIZE=0x8000
CONFIG_ESP32S3_DATA_CACHE_8WAYS=y
CONFIG_ESP32S3_DCACHE_ASSOCIATED_WAYS=8
CONFIG_ESP32S3_DATA_CACHE_LINE_32B=y
CONFIG_ESP32S3_DATA_CACHE_LINE_SIZE=32
CONFIG_ESP32S3_ULP_COPROC_RESERVE_MEM=0
CONFIG_ESP32S3_FLASH_4M=y
CONFIG_ESP32S3_FLASH_DETECT=y
CONFIG_ESP32S3_UART=y
CONFIG_ESP32S3_I2C=y
CONFIG_ESP32S3_SPI=y
CONFIG_ESP32S3_SPIRAM=y
CONFIG_ESP32S3_SPI2=y
CONFIG_ESP32S3_SPI3=y
CONFIG_ESP32S3_RTC=y
CONFIG_ESP32S3_UART0=y
CONFIG_ESP32S3_UART1=y
CONFIG_ESP32S3_UART2=y
CONFIG_ESP32S3_I2C0=y
CONFIG_ESP32S3_I2C1=y
CONFIG_ESP32S3_I2C_PERIPH_MASTER_MODE=y
CONFIG_ESP32S3_I2C0_MASTER_MODE=y
CONFIG_ESP32S3_I2C1_MASTER_MODE=y
CONFIG_ESP32S3_RT_TIMER=y
CONFIG_ESP32S3_SPIRAM_MODE_OCT=y
CONFIG_ESP32S3_DEFAULT_PSRAM_CLK_IO=30
CONFIG_ESP32S3_DEFAULT_PSRAM_CS_IO=26
CONFIG_ESP32S3_SPIRAM_TYPE_AUTO=y
CONFIG_ESP32S3_SPIRAM_SIZE=-1
CONFIG_ESP32S3_SPIRAM_SPEED_40M=y
CONFIG_ESP32S3_SPIRAM_SPEED=40
CONFIG_ESP32S3_SPIRAM_BOOT_INIT=y
CONFIG_ESP32S3_SPIRAM_MEMTEST=y
CONFIG_ESP32S3_SPIRAM_USER_HEAP=y
CONFIG_ESP32S3_GPIO_IRQ=y
CONFIG_ESP32S3_SPI_IO_SPI=y
CONFIG_ESP32S3_SPI_SWCS=y
CONFIG_ESP32S3_SPI_UDCS=y
CONFIG_ESP32S3_SPI2_CSPIN=6
CONFIG_ESP32S3_SPI2_CLKPIN=7
CONFIG_ESP32S3_SPI2_MOSIPIN=15
CONFIG_ESP32S3_SPI2_MISOPIN=16
CONFIG_ESP32S3_SPI3_CSPIN=38
CONFIG_ESP32S3_SPI3_CLKPIN=40
CONFIG_ESP32S3_SPI3_MOSIPIN=39
CONFIG_ESP32S3_SPI3_MISOPIN=41
CONFIG_ESP32S3_RX_FIFO_THRD=120
CONFIG_ESP32S3_RX_FIFO_TOUT=10
CONFIG_ESP32S3_UART0_TXPIN=43
CONFIG_ESP32S3_UART0_RXPIN=44
CONFIG_ESP32S3_UART1_TXPIN=45
CONFIG_ESP32S3_UART1_RXPIN=42
CONFIG_ESP32S3_UART2_TXPIN=8
CONFIG_ESP32S3_UART2_RXPIN=3
CONFIG_ESP32S3_I2C0_SCLPIN=2
CONFIG_ESP32S3_I2C0_SDAPIN=1
CONFIG_ESP32S3_I2C1_SCLPIN=5
CONFIG_ESP32S3_I2C1_SDAPIN=4
CONFIG_ESP32S3_I2CTIMEOSEC=1
CONFIG_ESP32S3_I2CTIMEOMS=500
CONFIG_ESP32S3_RTC_CLK_INT_RC=y
CONFIG_ESP32S3_SYSTEM_BBPLL_RECALIB=y
CONFIG_ESP32S3_RT_TIMER_TASK_NAME=\rt_timer
CONFIG_ESP32S3_RT_TIMER_TASK_PRIORITY=223
CONFIG_ESP32S3_RT_TIMER_TASK_STACK_SIZE=2048
CONFIG_ESP32S3_SPIFLASH=y
CONFIG_ESP32S3_FLASH_MODE_DIO=y
CONFIG_ESP32S3_FLASH_FREQ_40M=y
CONFIG_ESP32S3_FLASH_FREQ=40
CONFIG_ESP32S3_FLASH_SAMPLE_MODE_STR=y
CONFIG_ESP32S3_SPI_FLASH_DONT_USE_ROM_CODE=y
CONFIG_ESP32S3_MTD=y
CONFIG_ESP32S3_SPIFLASH_MTD_BLKSIZE=256
CONFIG_ESP32S3_SPI_FLASH_SUPPORT_PSRAM_STACK=y
CONFIG_ARCH_TOOLCHAIN_GNU=y
CONFIG_ARCH_VECNOTIRQ=y
CONFIG_ARCH_ICACHE=y
CONFIG_ARCH_DCACHE=y
CONFIG_ARCH_HAVE_TEXT_HEAP=y
CONFIG_ARCH_HAVE_TEXT_HEAP_SEPARATE_DATA_ADDRESS=y
CONFIG_ARCH_HAVE_TEXT_HEAP_WORD_ALIGNED_READ=y
CONFIG_ARCH_HAVE_COPY_SECTION=y
CONFIG_ARCH_HAVE_MULTICPU=y
CONFIG_ARCH_HAVE_FPU=y
CONFIG_ARCH_HAVE_MPU=y
CONFIG_ARCH_HAVE_RESET=y
CONFIG_ARCH_HAVE_TESTSET=y
CONFIG_ARCH_HAVE_THREAD_LOCAL=y
CONFIG_ARCH_HAVE_SYSCALL_HOOKS=y
CONFIG_ARCH_HAVE_BACKTRACE=y
CONFIG_ARCH_HAVE_DEBUG=y
CONFIG_ARCH_HAVE_PERF_EVENTS=y
CONFIG_ARCH_HAVE_CPUINFO=y
CONFIG_ARCH_CPUINFO_FREQ_KHZ=0
CONFIG_ARCH_HAVE_TCBINFO=y
CONFIG_ARCH_FPU=y
CONFIG_ARCH_USE_TEXT_HEAP=y
CONFIG_ARCH_STACKDUMP=y
CONFIG_ARCH_STACKDUMP_MAX_LENGTH=0
CONFIG_BOARD_LOOPSPERMSEC=16717
CONFIG_ARCH_HAVE_INTERRUPTSTACK=y
CONFIG_ARCH_INTERRUPTSTACK=2048
CONFIG_BOOT_RUNFROMFLASH=y
CONFIG_RAM_START=0x20000000
CONFIG_RAM_SIZE=114688
CONFIG_FLASH_START=0x0
CONFIG_FLASH_SIZE=0
CONFIG_ARCH_BOARD_CUSTOM=y
CONFIG_ARCH_BOARD_CUSTOM_NAME=\
CONFIG_ARCH_BOARD_CUSTOM_DIR=../../../../boards/espressif/esp32s3/nuttx-config
CONFIG_ARCH_BOARD_CUSTOM_DIR_RELPATH=y
CONFIG_ARCH_BOARD_COMMON=y
CONFIG_ESP32S3_STORAGE_MTD_OFFSET=0x180000
CONFIG_ESP32S3_STORAGE_MTD_SIZE=0x100000
CONFIG_ESP32S3_BOARD_I2C=y
CONFIG_BOARD_CRASHDUMP_NONE=y
CONFIG_BOARDCTL=y
CONFIG_BOARDCTL_RESET=y
CONFIG_BOARD_RESET_ON_ASSERT=0
CONFIG_BOARD_ASSERT_RESET_VALUE=1
CONFIG_BOARDCTL_MKRD=y
CONFIG_BOARD_MEMORY_RANGE=\
CONFIG_DISABLE_OS_API=y
CONFIG_USEC_PER_TICK=1000
CONFIG_TIMER_ADJUST_USEC=0
CONFIG_START_YEAR=2018
CONFIG_START_MONTH=11
CONFIG_START_DAY=30
CONFIG_PREALLOC_TIMERS=50
CONFIG_SPINLOCK=y
CONFIG_IRQ_NWORKS=8
CONFIG_IRQ_WORK_SECTION=\
CONFIG_IRQ_WORK_STACKSIZE=3072
CONFIG_INIT_ENTRY=y
CONFIG_INIT_ARGS=\
CONFIG_INIT_STACKSIZE=6144
CONFIG_INIT_PRIORITY=100
CONFIG_INIT_ENTRYPOINT=\nsh_main
CONFIG_INIT_ENTRYNAME=\nsh_main
CONFIG_ETC_ROMFS=y
CONFIG_ETC_CROMFS=y
CONFIG_ETC_ROMFSMOUNTPT=/etc
CONFIG_ETC_ROMFSDEVNO=0
CONFIG_ETC_ROMFSSECTSIZE=64
CONFIG_ETC_FATDEVNO=1
CONFIG_ETC_FATSECTSIZE=512
CONFIG_ETC_FATNSECTORS=1024
CONFIG_ETC_FATMOUNTPT=/tmp
CONFIG_RR_INTERVAL=0
CONFIG_TASK_NAME_SIZE=24
CONFIG_SCHED_WAITPID=y
CONFIG_PTHREAD_MUTEX_TYPES=y
CONFIG_PTHREAD_MUTEX_ROBUST=y
CONFIG_PTHREAD_MUTEX_DEFAULT_PRIO_INHERIT=y
CONFIG_SCHED_CPULOAD_NONE=y
CONFIG_SCHED_CPULOAD_TICKSPERSEC=100
CONFIG_SCHED_PROFILE_TICKSPERSEC=1000
CONFIG_SCHED_INSTRUMENTATION=y
CONFIG_SCHED_INSTRUMENTATION_SWITCH=y
CONFIG_SCHED_STACK_RECORD=0
CONFIG_DEV_CONSOLE=y
CONFIG_NFILE_DESCRIPTORS_PER_BLOCK=8
CONFIG_FILE_STREAM=y
CONFIG_PRIORITY_INHERITANCE=y
CONFIG_SEM_PREALLOCHOLDERS=32
CONFIG_SIG_PREALLOC_ACTIONS=4
CONFIG_SIG_ALLOC_ACTIONS=1
CONFIG_SIG_PREALLOC_IRQ_ACTIONS=8
CONFIG_SIG_DEFAULT=y
CONFIG_SIG_SIGKILL_ACTION=y
CONFIG_SIG_SIGUSR1_ACTION=y
CONFIG_SIG_SIGUSR2_ACTION=y
CONFIG_SIG_SIGALRM_ACTION=y
CONFIG_SIG_SIGSTOP_ACTION=y
CONFIG_PREALLOC_MQ_MSGS=8
CONFIG_PREALLOC_MQ_IRQ_MSGS=8
CONFIG_MQ_MAXMSGSIZE=32
CONFIG_SCHED_WORKQUEUE=y
CONFIG_WQUEUE_NOTIFIER=y
CONFIG_SCHED_HPWORK=y
CONFIG_SCHED_HPNTHREADS=1
CONFIG_SCHED_HPWORKPRIORITY=249
CONFIG_SCHED_HPWORKSTACKSIZE=3072
CONFIG_SCHED_LPWORK=y
CONFIG_SCHED_LPNTHREADS=1
CONFIG_SCHED_LPWORKPRIORITY=100
CONFIG_SCHED_LPWORKPRIOMAX=178
CONFIG_SCHED_LPWORKSTACKSIZE=2048
CONFIG_DEFAULT_TASK_STACKSIZE=3072
CONFIG_IDLETHREAD_STACKSIZE=3072
CONFIG_PTHREAD_STACK_MIN=512
CONFIG_PTHREAD_STACK_DEFAULT=3072
CONFIG_PTHREAD_GUARDSIZE_DEFAULT=0
CONFIG_SCHED_BACKTRACE=y
CONFIG_GROUP_KILL_CHILDREN_TIMEOUT_MS=-1
CONFIG_PID_INITIAL_COUNT=16
CONFIG_DEV_URANDOM=y
CONFIG_DEV_URANDOM_XORSHIFT128=y
CONFIG_ARCH_HAVE_I2CRESET=y
CONFIG_I2C=y
CONFIG_I2C_RESET=y
CONFIG_I2C_DRIVER=y
CONFIG_SPI=y
CONFIG_SPI_EXCHANGE=y
CONFIG_SPI_DRIVER=y
CONFIG_PWM=y
CONFIG_BCH=y
CONFIG_BCH_BUFFER_ALIGNMENT=0
CONFIG_DEV_NULL=y
CONFIG_DEV_ZERO=y
CONFIG_DEV_OPTEE_NONE=y
CONFIG_DRVR_MKRD=y
CONFIG_MMCSD=y
CONFIG_MMCSD_IOCSUPPORT=y
CONFIG_MMCSD_NSLOTS=1
CONFIG_MMCSD_MULTIBLOCK_LIMIT=0
CONFIG_MMCSD_SPI=y
CONFIG_MMCSD_SPICLOCK=20000000
CONFIG_MMCSD_SPIMODE=0
CONFIG_MMCSD_IDMODE_CLOCK=400000
CONFIG_MMCSD_SPIRETRY_COUNT=0
CONFIG_MTD=y
CONFIG_MTD_PARTITION=y
CONFIG_MTD_BYTE_WRITE=y
CONFIG_MTD_RAMTRON=y
CONFIG_RAMTRON_SETSPEED=y
CONFIG_RAMTRON_EMULATE_SECTOR_SHIFT=10
CONFIG_RAMTRON_EMULATE_PAGE_SHIFT=10
CONFIG_PIPES=y
CONFIG_DEV_PIPE_MAXSIZE=1024
CONFIG_DEV_PIPE_SIZE=70
CONFIG_DEV_FIFO_SIZE=0
CONFIG_DEV_PIPE_VFS_PATH=/var/pipe
CONFIG_DEV_PIPE_NPOLLWAITERS=4
CONFIG_ARCH_HAVE_SERIAL_TERMIOS=y
CONFIG_SERIAL=y
CONFIG_SERIAL_CONSOLE=y
CONFIG_MCU_SERIAL=y
CONFIG_STANDARD_SERIAL=y
CONFIG_SERIAL_NPOLLWAITERS=4
CONFIG_SERIAL_TERMIOS=y
CONFIG_UART0_SERIAL_CONSOLE=y
CONFIG_UART0_SERIALDRIVER=y
CONFIG_UART1_SERIALDRIVER=y
CONFIG_UART2_SERIALDRIVER=y
CONFIG_UART0_RXBUFSIZE=256
CONFIG_UART0_TXBUFSIZE=256
CONFIG_UART0_BAUD=115200
CONFIG_UART0_BITS=8
CONFIG_UART0_PARITY=0
CONFIG_UART0_2STOP=0
CONFIG_UART1_RXBUFSIZE=256
CONFIG_UART1_TXBUFSIZE=256
CONFIG_UART1_BAUD=115200
CONFIG_UART1_BITS=8
CONFIG_UART1_PARITY=0
CONFIG_UART1_2STOP=0
CONFIG_UART2_RXBUFSIZE=256
CONFIG_UART2_TXBUFSIZE=256
CONFIG_UART2_BAUD=115200
CONFIG_UART2_BITS=8
CONFIG_UART2_PARITY=0
CONFIG_UART2_2STOP=0
CONFIG_DRIVERS_WIRELESS=y
CONFIG_DRIVERS_IEEE80211=y
CONFIG_SYSLOG=y
CONFIG_SYSLOG_DEFAULT_MASK=0xff
CONFIG_SYSLOG_CRLF=y
CONFIG_SYSLOG_MAX_CHANNELS=1
CONFIG_SYSLOG_DEVPATH=/dev/ttyS1
CONFIG_SYSLOG_DEFAULT=y
CONFIG_FS_LARGEFILE=y
CONFIG_FS_NEPOLL_DESCRIPTORS=8
CONFIG_FS_LOCK_BUCKET_SIZE=0
CONFIG_SENDFILE_BUFSIZE=512
CONFIG_FS_BACKTRACE=0
CONFIG_FS_MQUEUE_VFS_PATH=/var/mqueue
CONFIG_FS_MQUEUE_NPOLLWAITERS=4
CONFIG_FS_ANONMAP=y
CONFIG_FS_FAT=y
CONFIG_FAT_LCNAMES=y
CONFIG_FAT_LFN=y
CONFIG_FAT_MAXFNAME=48
CONFIG_FAT_LFN_ALIAS_HASH=y
CONFIG_FAT_LFN_UTF8=y
CONFIG_FAT_LFN_ALIAS_TRAILCHARS=0
CONFIG_FS_FATTIME=y
CONFIG_FAT_DMAMEMORY=y
CONFIG_FAT_DIRECT_RETRY=y
CONFIG_FS_ROMFS=y
CONFIG_FS_ROMFS_CACHE_NODE=y
CONFIG_FS_ROMFS_CACHE_FILE_NSECTORS=1
CONFIG_FS_CROMFS=y
CONFIG_FS_BINFS=y
CONFIG_FS_PROCFS=y
CONFIG_FS_PROCFS_REGISTER=y
CONFIG_FS_SPIFFS=y
CONFIG_SPIFFS_CACHE_SIZE=8192
CONFIG_SPIFFS_CACHE_HITSCORE=4
CONFIG_SPIFFS_GC_MAXRUNS=5
CONFIG_SPIFFS_GC_DELWGT=5
CONFIG_SPIFFS_GC_USEDWGT=-1
CONFIG_SPIFFS_GC_ERASEAGEWGT=50
CONFIG_SPIFFS_PAGE_CHECK=y
CONFIG_SPIFFS_NAME_MAX=48
CONFIG_SPIFFS_COPYBUF_STACK=64
CONFIG_SPIFFS_LEADING_SLASH=y
CONFIG_NXFONTS_PACKEDMSFIRST=y
CONFIG_MM_DEFAULT_MANAGER=y
CONFIG_MM_KERNEL_HEAP=y
CONFIG_MM_KERNEL_HEAPSIZE=8192
CONFIG_MM_DEFAULT_ALIGNMENT=8
CONFIG_MM_NODE_GUARDSIZE=0
CONFIG_MM_REGIONS=2
CONFIG_MM_MAP_COUNT_MAX=1024
CONFIG_MM_BACKTRACE=-1
CONFIG_MM_DUMP_ON_FAILURE=y
CONFIG_MM_DUMP_DETAILS_ON_FAILURE=y
CONFIG_MM_FREE_DELAYCOUNT_MAX=0
CONFIG_MM_HEAP_BIGGEST_COUNT=30
CONFIG_MM_HEAP_MEMPOOL_THRESHOLD=-1
CONFIG_GRAN=y
CONFIG_GRAN_INTR=y
CONFIG_MM_IOB=y
CONFIG_IOB_NBUFFERS=36
CONFIG_IOB_BUFSIZE=196
CONFIG_IOB_ALIGNMENT=4
CONFIG_IOB_SECTION=\
CONFIG_IOB_NCHAINS=36
CONFIG_IOB_THROTTLE=0
CONFIG_BINFMT_LOADABLE=y
CONFIG_ELF=y
CONFIG_ELF_STACKSIZE=3072
CONFIG_BINFMT_ELF_RELOCATABLE=y
CONFIG_STDIO_BUFFER_SIZE=32
CONFIG_STDIO_LINEBUFFER=y
CONFIG_NUNGET_CHARS=2
CONFIG_LIBC_FLOATINGPOINT=y
CONFIG_LIBC_LONG_LONG=y
CONFIG_ARCH_LOWPUTC=y
CONFIG_LIBC_ARCH_MEMCHR=y
CONFIG_LIBC_ARCH_MEMCPY=y
CONFIG_LIBC_ARCH_MEMCMP=y
CONFIG_LIBC_ARCH_MEMMOVE=y
CONFIG_LIBC_ARCH_MEMSET=y
CONFIG_LIBC_ARCH_STRCHR=y
CONFIG_LIBC_ARCH_STRCMP=y
CONFIG_LIBC_ARCH_STRCPY=y
CONFIG_LIBC_ARCH_STRLCPY=y
CONFIG_LIBC_ARCH_STRNCPY=y
CONFIG_LIBC_ARCH_STRLEN=y
CONFIG_LIBC_ARCH_STRNLEN=y
CONFIG_LIBC_ARCH_ELF=y
CONFIG_LIBC_PREVENT_STRING_KERNEL=y
CONFIG_LIBC_PREVENT_MEMCHR_KERNEL=y
CONFIG_LIBC_PREVENT_MEMCMP_KERNEL=y
CONFIG_LIBC_PREVENT_MEMCPY_KERNEL=y
CONFIG_LIBC_PREVENT_MEMMOVE_KERNEL=y
CONFIG_LIBC_PREVENT_MEMSET_KERNEL=y
CONFIG_LIBC_PREVENT_STRCAT_KERNEL=y
CONFIG_LIBC_PREVENT_STRCASECMP_KERNEL=y
CONFIG_LIBC_PREVENT_STRCHR_KERNEL=y
CONFIG_LIBC_PREVENT_STRCHRNUL_KERNEL=y
CONFIG_LIBC_PREVENT_STRCMP_KERNEL=y
CONFIG_LIBC_PREVENT_STRCPY_KERNEL=y
CONFIG_LIBC_PREVENT_STRLCAT_KERNEL=y
CONFIG_LIBC_PREVENT_STRLEN_KERNEL=y
CONFIG_LIBC_PREVENT_STRLCPY_KERNEL=y
CONFIG_LIBC_PREVENT_STRNCASECMP_KERNEL=y
CONFIG_LIBC_PREVENT_STRNCAT_KERNEL=y
CONFIG_LIBC_PREVENT_STRNLEN_KERNEL=y
CONFIG_LIBC_PREVENT_STRNCMP_KERNEL=y
CONFIG_LIBC_PREVENT_STRNCPY_KERNEL=y
CONFIG_LIBC_PREVENT_STRRCHR_KERNEL=y
CONFIG_LIBC_RAND_ORDER=1
CONFIG_LIBC_HOMEDIR=/
CONFIG_LIBC_TMPDIR=/tmp
CONFIG_LIBC_MAX_TMPFILE=32
CONFIG_LIBC_MAX_EXITFUNS=1
CONFIG_POSIX_SPAWN_DEFAULT_STACKSIZE=3072
CONFIG_LIBC_HOSTNAME=\
CONFIG_LIBC_OPEN_MAX=256
CONFIG_NAME_MAX=48
CONFIG_PATH_MAX=256
CONFIG_LINE_MAX=80
CONFIG_LIBC_STRERROR_ERRNUM=y
CONFIG_LIBC_NEWLIB_OPTSPEED=y
CONFIG_LIBC_STRSIGNAL=y
CONFIG_LIBC_ELF=y
CONFIG_LIBC_ELF_MAXDEPEND=2
CONFIG_LIBC_ELF_ALIGN_LOG2=2
CONFIG_LIBC_ELF_BUFFERSIZE=32
CONFIG_LIBC_ELF_BUFFERINCR=32
CONFIG_LIBC_ELF_RELOCATION_BUFFERCOUNT=256
CONFIG_LIBC_ELF_SYMBOL_CACHECOUNT=256
CONFIG_LIBC_LZF=y
CONFIG_LIBC_LZF_SMALL=y
CONFIG_LIBC_LZF_HLOG=13
CONFIG_LIBC_LZF_ALIGN=y
CONFIG_TLS_NELEM=0
CONFIG_TLS_TASK_NELEM=4
CONFIG_TLS_NCLEANUP=0
CONFIG_LIBC_GAISTRERROR_ERRNUM=y
CONFIG_LIBC_FTOK_VFS_PATH=/var/ftok
CONFIG_LIBC_MEMFD_ERROR=y
CONFIG_LIBC_TEMPBUFFER=y
CONFIG_LIBC_MAX_TEMPBUFFER=2
CONFIG_LIBC_TEMPBUFFER_MALLOC=y
CONFIG_LIBC_BACKTRACE_BUFFSIZE=0
CONFIG_LIBC_MUTEX_BACKTRACE=0
CONFIG_BUILTIN=y
CONFIG_STREAM_LZF_BLOG=10
CONFIG_STREAM_OUT_BUFFER_SIZE=64
CONFIG_STREAM_HEXDUMP_BUFFER_SIZE=128
CONFIG_STREAM_BASE64_BUFFER_SIZE=128
CONFIG_LIBC_INLINE_QUEUE=y
CONFIG_LIBM_TOOLCHAIN=y
CONFIG_HAVE_CXX=y
CONFIG_HAVE_CXXINITIALIZE=y
CONFIG_LIBCXXMINI=y
CONFIG_CXX_STANDARD=\gnu++17
CONFIG_BUILTIN_TOOLCHAIN=y
CONFIG_COVERAGE_NONE=y
CONFIG_COVERAGE_DEFAULT_PREFIX_STRIP=\0
CONFIG_COVERAGE_DEFAULT_PREFIX=/data
CONFIG_PROFILE_NONE=y
CONFIG_EXAMPLES_CALIB_UDELAY=y
CONFIG_EXAMPLES_CALIB_UDELAY_NUM_MEASUREMENTS=3
CONFIG_EXAMPLES_CALIB_UDELAY_NUM_RESULTS=20
CONFIG_EXAMPLES_CALIB_UDELAY_DELAY_TEST_ITERATIONS=100000
CONFIG_FSUTILS_MKFATFS=y
CONFIG_NSH_LIBRARY=y
CONFIG_NSH_PROMPT_STRING=\nsh>
CONFIG_NSH_PROMPT_MAX=48
CONFIG_NSH_PROMPT_ENV=\PS1
CONFIG_NSH_PROMPT_SUFFIX=>
CONFIG_NSH_READLINE=y
CONFIG_NSH_QUOTE=y
CONFIG_NSH_MAXARGUMENTS=15
CONFIG_NSH_ARGCAT=y
CONFIG_NSH_NESTDEPTH=8
CONFIG_NSH_ALIAS=y
CONFIG_NSH_ALIAS_MAX_AMOUNT=1
CONFIG_NSH_PIPELINE=y
CONFIG_NSH_BUILTIN_APPS=y
CONFIG_NSH_DISABLE_BASENAME=y
CONFIG_NSH_DISABLE_CMP=y
CONFIG_NSH_DISABLE_DIRNAME=y
CONFIG_NSH_DISABLE_HEXDUMP=y
CONFIG_NSH_DISABLE_LOSETUP=y
CONFIG_NSH_DISABLE_LOSMART=y
CONFIG_NSH_DISABLE_LOMTD=y
CONFIG_NSH_DISABLE_MB=y
CONFIG_NSH_DISABLE_MKFIFO=y
CONFIG_NSH_DISABLE_MKRD=y
CONFIG_NSH_DISABLE_MH=y
CONFIG_NSH_DISABLE_MW=y
CONFIG_NSH_DISABLE_PRINTF=y
CONFIG_NSH_DISABLE_PUT=y
CONFIG_NSH_DISABLE_SHUTDOWN=y
CONFIG_NSH_DISABLE_TIMEDATECTL=y
CONFIG_NSH_DISABLE_TRUNCATE=y
CONFIG_NSH_DISABLE_UNAME=y
CONFIG_NSH_DISABLE_WGET=y
CONFIG_NSH_DISABLE_XD=y
CONFIG_NSH_MMCSDMINOR=0
CONFIG_NSH_MMCSDSLOTNO=0
CONFIG_NSH_MMCSDSPIPORTNO=0
CONFIG_NSH_VARS=y
CONFIG_NSH_CODECS_BUFSIZE=128
CONFIG_NSH_PROC_MOUNTPOINT=/proc
CONFIG_NSH_FILEIOSIZE=512
CONFIG_NSH_SYSINITSCRIPT=\init.d/rc.sysinit
CONFIG_NSH_INITSCRIPT=\init.d/rcS
CONFIG_NSH_SCRIPT_REDIRECT_PATH=\
CONFIG_NSH_CONSOLE=y
CONFIG_NSH_ARCHINIT=y
CONFIG_SYSTEM_DD=y
CONFIG_SYSTEM_DD_PROGNAME=\dd
CONFIG_SYSTEM_DD_PRIORITY=100
CONFIG_SYSTEM_DD_STACKSIZE=3072
CONFIG_SYSTEM_DD_STATS=y
CONFIG_SYSTEM_NSH=y
CONFIG_SYSTEM_NSH_PRIORITY=100
CONFIG_SYSTEM_NSH_STACKSIZE=2000
CONFIG_SYSTEM_NSH_PROGNAME=\nsh
CONFIG_SYSTEM_READLINE=y
CONFIG_READLINE_HAVE_EXTMATCH=y
CONFIG_READLINE_ECHO=y
CONFIG_READLINE_TABCOMPLETION=y
CONFIG_READLINE_MAX_BUILTINS=64
CONFIG_READLINE_MAX_EXTCMDS=64
CONFIG_READLINE_CMD_HISTORY=y
CONFIG_READLINE_CMD_HISTORY_LINELEN=64
CONFIG_READLINE_CMD_HISTORY_LEN=4
CONFIG_SYSTEM_SPITOOL=y
CONFIG_SPITOOL_PROGNAME=\spi
CONFIG_SPITOOL_PRIORITY=100
CONFIG_SPITOOL_STACKSIZE=3072
CONFIG_SPITOOL_MINBUS=0
CONFIG_SPITOOL_MAXBUS=3
CONFIG_SPITOOL_DEFFREQ=4000000
CONFIG_SPITOOL_DEFMODE=0
CONFIG_SPITOOL_DEFWIDTH=8
CONFIG_SPITOOL_DEFWORDS=1

Host system OS:
Linux DESKTOP-Q56CRLQ 6.6.87.2-microsoft-standard-WSL2 #1 SMP PREEMPT_DYNAMIC Thu Jun 5 18:30:46 UTC 2025 x86_64 x86_64

Host system PATH:
/home/nope/esp/v5.1/esp-idf/components/espcoredump
/home/nope/esp/v5.1/esp-idf/components/partition_table
/home/nope/esp/v5.1/esp-idf/components/app_update
/home/nope/.espressif/tools/xtensa-esp-elf-gdb/12.1_20231023/xtensa-esp-elf-gdb/bin
/home/nope/.espressif/tools/xtensa-esp32s3-elf/esp-12.2.0_20250801/xtensa-esp32s3-elf/bin
/home/nope/.espressif/tools/esp-clang/15.0.0-23786128ae/esp-clang/bin
/home/nope/.espressif/tools/riscv32-esp-elf/esp-12.2.0_20250801/riscv32-esp-elf/bin
/home/nope/.espressif/tools/esp32ulp-elf/2.35_20220830/esp32ulp-elf/bin
/home/nope/.espressif/tools/openocd-esp32/v0.12.0-esp32-20250707/openocd-esp32/bin
/home/nope/.espressif/tools/xtensa-esp-elf-gdb/12.1_20231023/xtensa-esp-elf-gdb/bin
/home/nope/.espressif/tools/xtensa-esp32s3-elf/esp-12.2.0_20250801/xtensa-esp32s3-elf/bin
/home/nope/.espressif/tools/esp-clang/15.0.0-23786128ae/esp-clang/bin
/home/nope/.espressif/tools/riscv32-esp-elf/esp-12.2.0_20250801/riscv32-esp-elf/bin
/home/nope/.espressif/tools/esp32ulp-elf/2.35_20220830/esp32ulp-elf/bin
/home/nope/.espressif/tools/openocd-esp32/v0.12.0-esp32-20250707/openocd-esp32/bin
/home/nope/.espressif/python_env/idf5.1_py3.12_env/bin
/home/nope/esp/v5.1/esp-idf/tools
/usr/local/cuda/bin
/home/nope/.vscode-server/data/User/globalStorage/github.copilot-chat/debugCommand
/home/nope/.vscode-server/data/User/globalStorage/github.copilot-chat/copilotCli
/home/nope/.vscode-server/bin/c9d77990917f3102ada88be140d28b038d1dd7c7/bin/remote-cli
/home/nope/.nvm/versions/node/v20.19.4/bin
/usr/local/cuda/bin
/home/nope/miniconda3/bin
/home/nope/miniconda3/condabin
/usr/local/sbin
/usr/local/bin
/usr/sbin
/usr/bin
/sbin
/bin
/usr/games
/usr/local/games
/usr/lib/wsl/lib
/mnt/c/VulkanSDK/1.4.309.0/Bin
/mnt/c/Windows/system32
/mnt/c/Windows
/mnt/c/Windows/System32/Wbem
/mnt/c/Windows/System32/WindowsPowerShell/v1.0
/mnt/c/Windows/System32/OpenSSH
/mnt/d/software/nvm
/mnt/d/software/nodejs
/mnt/c/Program Files/Git/cmd
/mnt/c/Program Files (x86)/GnuWin32/bin
/mnt/c/Program Files (x86)/NVIDIA Corporation/PhysX/Common
/mnt/c/Program Files/dotnet
/Docker/host/bin
/mnt/c/Program Files (x86)/Windows Kits/10/Windows Performance Toolkit
/mnt/c/Program Files (x86)/Windows Kits/8.1/Windows Performance Toolkit
/mnt/c/Program Files/NVIDIA Corporation/NVIDIA App/NvDLISR
/mnt/c/Program Files (x86)/Microsoft SQL Server/160/Tools/Binn
/mnt/c/Program Files/Microsoft SQL Server/160/Tools/Binn
/mnt/c/Program Files/Microsoft SQL Server/Client SDK/ODBC/170/Tools/Binn
/mnt/c/Program Files/Microsoft SQL Server/160/DTS/Binn
/mnt/c/Program Files/usbipd-win
/mnt/d/software/ffmpeg-7.1-full_build/bin
/mnt/c/Program Files (x86)/ZeroTier/One
/mnt/c/Program Files/PowerToys/DSCModules
/mnt/c/Users/liu33/AppData/Local/pnpm
/mnt/c/Users/liu33/.cargo/bin
/mnt/c/Users/liu33/AppData/Local/Microsoft/WindowsApps
/mnt/d/software/Microsoft VS Code/bin
/mnt/c/Users/liu33/AppData/Local/Programs/Ollama
/snap/bin
/home/nope/.vscode-server/extensions/ms-python.debugpy-2025.18.0/bundled/scripts/noConfigScripts

Espressif specific information:

Toolchain version:
esp32: Bootloader image not found
esp32s2: Bootloader image not found
esp32s3: Bootloader image not found
esp32c2: Bootloader image not found
esp32c3: Bootloader image not found
esp32c6: Bootloader image not found
esp32h2: Bootloader image not found

Toolchain version:
clang: clang version 15.0.0 (https://github.com/espressif/llvm-project.git 23786128aea96880a5752f6bd1c22aab27622ccf)
gcc: gcc (Ubuntu 11.4.0-1ubuntu1~22.04.2) 11.4.0
xtensa-esp32-elf-gcc: Not found
xtensa-esp32s2-elf-gcc: Not found
xtensa-esp32s3-elf-gcc: xtensa-esp32s3-elf-gcc (crosstool-NG esp-12.2.0_20250801) 12.2.0
riscv-none-elf-gcc: Not found
riscv32-esp-elf-gcc: riscv32-esp-elf-gcc (crosstool-NG esp-12.2.0_20250801) 12.2.0
riscv64-unknown-elf-gcc: Not found

Esptool version:
4.10.0

HAL version:
sync/master.a-nuttx-20250610-23-g6b4f19b48c

CHIP ID:
Not found

Flash ID:
Manufacturer: Not found
Device: Not found

Security information:
Not found

Flash status:
Not found

MAC address:
Not found

Verification

• I have verified before submitting the report.

[Y334275]

I performed further debugging and here’s a summary of my findings:

First, I enabled CONFIG_DEBUG_ASSERTIONS. As a result, I obtained the following logs:

ESP-ROM:esp32s3-20210327
Build:Mar 27 2021
rst:0x3 (RTC_SW_SYS_RST),boot:0x8 (SPI_FAST_FLASH_BOOT)
Saved PC:0x40374724
pro cpu reset by JTAG
SPIWP:0xee
mode:DIO, clock div:2
load:0x3fc95300,len:0x24f8
load:0x40374000,len:0x9360
load:0x50000000,len:0x20
SHA-256 comparison failed:
Calculated: f149d09508d8465342bd470d6768f90b563bc19c0e4d0af984556a9480492679
Expected: 0000000040470000000000000000000000000000000000000000000000000000
Attempting to boot anyway...
entry 0x40374a2c
*** Booting NuttX ***
I (76) boot: chip revision: v0.2
I (76) boot: efuse block revision: v1.3
I (76) boot.esp32s3: Boot SPI Speed : 40MHz
I (77) boot.esp32s3: SPI Mode       : DIO
I (80) boot.esp32s3: SPI Flash Size : 4MB
I (84) boot: Enabling RNG early entropy source...
dram: lma 0x00000020 vma 0x3fc95300 len 0x24f8   (9464)
iram: lma 0x00002520 vma 0x40374000 len 0x9360   (37728)
rtc: lma 0x0000b888 vma 0x50000000 len 0x20     (32)
padd: lma 0x0000b8b8 vma 0x00000000 len 0x4740   (18240)
imap: lma 0x00010000 vma 0x42010000 len 0x150860 (1378400)
padd: lma 0x00160868 vma 0x00000000 len 0xf790   (63376)
dmap: lma 0x00170000 vma 0x3c180000 len 0x61fac  (401324)
total segments stored 7
Aprint_psram_reg: vendor id : 0x0d (AP)
print_psram_reg: dev id    : 0x02 (generation 3)
print_psram_reg: density   : 0x03 (64 Mbit)
print_psram_reg: good-die  : 0x01 (Pass)
print_psram_reg: Latency   : 0x01 (Fixed)
print_psram_reg: VCC       : 0x01 (3V)
print_psram_reg: SRF       : 0x01 (Fast Refresh)
print_psram_reg: BurstType : 0x01 (Hybrid Wrap)
print_psram_reg: BurstLen  : 0x01 (32 Byte)
print_psram_reg: Readlatency  : 0x02 (10 cycles@Fixed)
print_psram_reg: DriveStrength: 0x00 (1/1)
esp_spiram_init: Found 8MB SPI RAM device
esp_spiram_init: Speed: 40MHz
esp_spiram_init: Initialized, cache is in normal (1-core) mode.
esp_spiram_init_cache: PSRAM available size = 8388608
esp_spiram_init_cache: Virtual address size = 0x1e10000, start: 0x3c1f0000, end: 0x3c9f0000
esp_spiram_test: SPI SRAM memory test OK!
BI (847) app_init: Application information:
I (847) app_init: Compile time:     Jan 24 2026 20:10:12
I (847) app_init: ELF file SHA256:  000000000...
I (849) app_init: ESP-IDF:          
I (852) sleep_gpio: Configure to isolate all GPIO pins in sleep state
I (858) sleep_gpio: Enable automatic switching of GPIO sleep configuration
nx_start: Entry
up_allocate_heap: Heap: start=3c1f0000 end=3c9f0000 size=8388608
mm_initialize: Heap: name=Umem, start=0x3c1f0000 size=8388608
mm_addregion: [Umem] Region 1: base=0x3c1f0174 size=8388232
up_allocate_kheap: Heap: start=3fc977f8 end=3fceee34 size=357948
mm_initialize: Heap: name=Kmem, start=0x3fc977f8 size=357948
mm_addregion: [Kmem] Region 1: base=0x3fc9796c size=357568
mm_malloc: Allocated 0x3fc97980, size 72
mm_malloc: Allocated 0x3fc979c8, size 424
mm_malloc: Allocated 0x3fc97b70, size 48
uart_register: Registering /dev/console
mm_malloc: Allocated 0x3fc97ba0, size 48
mm_malloc: Allocated 0x3fc97bd0, size 56
uart_register: Registering /dev/ttyS0
mm_malloc: Allocated 0x3fc97c08, size 56
uart_register: Registering /dev/ttyS1
mm_malloc: Allocated 0x3fc97c40, size 56
uart_register: Registering /dev/ttyS2
mm_malloc: Allocated 0x3fc97c78, size 56
mm_malloc: Allocated 0x3fc97cb0, size 48
mm_malloc: Allocated 0x3fc97ce0, size 56
mm_malloc: Allocated 0x3fc97d18, size 48
mm_malloc: Allocated 0x3fc97d48, size 32
mm_malloc: Allocated 0x3fc97d68, size 16
mm_malloc: Allocated 0x3fc97d78, size 32
work_start_highpri: Starting high-priority kernel worker thread(s)
mm_malloc: Allocated 0x3fc97d98, size 208
mm_malloc: Allocated 0x3fc97e68, size 3080
nxtask_activate: hpwork pid=1,TCB=0x3fc97d98
work_start_lowpri: Starting low-priority kernel worker thread(s)
mm_malloc: Allocated 0x3fc98a70, size 208
mm_malloc: Allocated 0x3fc98b40, size 2056
nxtask_activate: lpwork pid=2,TCB=0x3fc98a70
mm_malloc: Allocated 0x3fc99348, size 48
nx_start_application: Starting init thread
task_spawn: name=nsh_main entry=0x42014ce8 file_actions=0 attr=0x3fc95290 argv=0x3fc952a4
mm_malloc: Allocated 0x3fc99378, size 208
mm_malloc: Allocated 0x3fc99448, size 256
mm_malloc: Allocated 0x3c1f0188, size 424
mm_malloc: Allocated 0x3c1f0330, size 32
mm_malloc: Allocated 0x3c1f0350, size 16
mm_malloc: Allocated 0x3c1f0360, size 6152
nxtask_activate: nsh_main pid=3,TCB=0x3fc99378
mm_malloc: Allocated 0x3fc99548, size 32
mm_malloc: Allocated 0x3fc99568, size 32
mm_malloc: Allocated 0x3fc99588, size 32
mm_malloc: Allocated 0x3fc995a8, size 32
mm_malloc: Allocated 0x3fc995c8, size 32
mm_malloc: Allocated 0x3fc995e8, size 32
mm_malloc: Allocated 0x3fc99608, size 32
mm_malloc: Allocated 0x3fc99628, size 32
mm_malloc: Allocated 0x3fc99648, size 32
mm_malloc: Allocated 0x3fc99668, size 32
mm_malloc: Allocated 0x3fc99688, size 32
mm_malloc: Allocated 0x3fc996a8, size 32
mm_malloc: Allocated 0x3fc996c8, size 32
mm_malloc: Allocated 0x3fc996e8, size 32
mm_malloc: Allocated 0x3fc99708, size 32
mm_malloc: Allocated 0x3fc99728, size 32
mm_malloc: Allocated 0x3fc99748, size 32
mm_malloc: Allocated 0x3fc99768, size 32
mm_malloc: Allocated 0x3fc99788, size 32
lib_cxx_initialize: _sinit: 0x3c1e1ee0 _einit: 0x3c1e1f9c
lib_cxx_initialize: initp: 0x3c1e1ee0 initializer: 0x4037a588
lib_cxx_initialize: Calling 0x4037a588
lib_cxx_initialize: initp: 0x3c1e1ee4 initializer: 0x4203bb28
lib_cxx_initialize: Calling 0x4203bb28
lib_cxx_initialize: initp: 0x3c1e1ee8 initializer: 0x4203f2ac
lib_cxx_initialize: Calling 0x4203f2ac
lib_cxx_initialize: initp: 0x3c1e1eec initializer: 0x4203f430
lib_cxx_initialize: Calling 0x4203f430
lib_cxx_initialize: initp: 0x3c1e1ef0 initializer: 0x4203fd60
lib_cxx_initialize: Calling 0x4203fd60
lib_cxx_initialize: initp: 0x3c1e1ef4 initializer: 0x42041b9c
lib_cxx_initialize: Calling 0x42041b9c
lib_cxx_initialize: initp: 0x3c1e1ef8 initializer: 0x42043f70
lib_cxx_initialize: Calling 0x42043f70
lib_cxx_initialize: initp: 0x3c1e1efc initializer: 0x42050828
lib_cxx_initialize: Calling 0x42050828
lib_cxx_initialize: initp: 0x3c1e1f00 initializer: 0x42051a30
lib_cxx_initialize: Calling 0x42051a30
lib_cxx_initialize: initp: 0x3c1e1f04 initializer: 0x420524f4
lib_cxx_initialize: Calling 0x420524f4
lib_cxx_initialize: initp: 0x3c1e1f08 initializer: 0x420531c4
lib_cxx_initialize: Calling 0x420531c4
lib_cxx_initialize: initp: 0x3c1e1f0c initializer: 0x42054420
lib_cxx_initialize: Calling 0x42054420
lib_cxx_initialize: initp: 0x3c1e1f10 initializer: 0x42054fb4
lib_cxx_initialize: Calling 0x42054fb4
lib_cxx_initialize: initp: 0x3c1e1f14 initializer: 0x42056e70
lib_cxx_initialize: Calling 0x42056e70
lib_cxx_initialize: initp: 0x3c1e1f18 initializer: 0x420575f0
lib_cxx_initialize: Calling 0x420575f0
lib_cxx_initialize: initp: 0x3c1e1f1c initializer: 0x4205cf88
lib_cxx_initialize: Calling 0x4205cf88
lib_cxx_initialize: initp: 0x3c1e1f20 initializer: 0x42069668
lib_cxx_initialize: Calling 0x42069668
lib_cxx_initialize: initp: 0x3c1e1f24 initializer: 0x4206a264
lib_cxx_initialize: Calling 0x4206a264
lib_cxx_initialize: initp: 0x3c1e1f28 initializer: 0x42096948
lib_cxx_initialize: Calling 0x42096948
lib_cxx_initialize: initp: 0x3c1e1f2c initializer: 0x42096fb0
lib_cxx_initialize: Calling 0x42096fb0
lib_cxx_initialize: initp: 0x3c1e1f30 initializer: 0x42098284
lib_cxx_initialize: Calling 0x42098284
lib_cxx_initialize: initp: 0x3c1e1f34 initializer: 0x42099d2c
lib_cxx_initialize: Calling 0x42099d2c
lib_cxx_initialize: initp: 0x3c1e1f38 initializer: 0x4209d4b8
lib_cxx_initialize: Calling 0x4209d4b8
lib_cxx_initialize: initp: 0x3c1e1f3c initializer: 0x4209f3b8
lib_cxx_initialize: Calling 0x4209f3b8
lib_cxx_initialize: initp: 0x3c1e1f40 initializer: 0x420a074c
lib_cxx_initialize: Calling 0x420a074c
lib_cxx_initialize: initp: 0x3c1e1f44 initializer: 0x420a1188
lib_cxx_initialize: Calling 0x420a1188
lib_cxx_initialize: initp: 0x3c1e1f48 initializer: 0x420a371c
lib_cxx_initialize: Calling 0x420a371c
lib_cxx_initialize: initp: 0x3c1e1f4c initializer: 0x420a6af4
lib_cxx_initialize: Calling 0x420a6af4
lib_cxx_initialize: initp: 0x3c1e1f50 initializer: 0x420b03f8
lib_cxx_initialize: Calling 0x420b03f8
lib_cxx_initialize: initp: 0x3c1e1f54 initializer: 0x420b41cc
lib_cxx_initialize: Calling 0x420b41cc
lib_cxx_initialize: initp: 0x3c1e1f58 initializer: 0x420b5808
lib_cxx_initialize: Calling 0x420b5808
lib_cxx_initialize: initp: 0x3c1e1f5c initializer: 0x420d166c
lib_cxx_initialize: Calling 0x420d166c
lib_cxx_initialize: initp: 0x3c1e1f60 initializer: 0x420d41d8
lib_cxx_initialize: Calling 0x420d41d8
lib_cxx_initialize: initp: 0x3c1e1f64 initializer: 0x420d6f44
lib_cxx_initialize: Calling 0x420d6f44
lib_cxx_initialize: initp: 0x3c1e1f68 initializer: 0x420d91b4
lib_cxx_initialize: Calling 0x420d91b4
lib_cxx_initialize: initp: 0x3c1e1f6c initializer: 0x420da224
lib_cxx_initialize: Calling 0x420da224
lib_cxx_initialize: initp: 0x3c1e1f70 initializer: 0x420dd610
lib_cxx_initialize: Calling 0x420dd610
lib_cxx_initialize: initp: 0x3c1e1f74 initializer: 0x420dedf4
lib_cxx_initialize: Calling 0x420dedf4
lib_cxx_initialize: initp: 0x3c1e1f78 initializer: 0x420e06cc
lib_cxx_initialize: Calling 0x420e06cc
lib_cxx_initialize: initp: 0x3c1e1f7c initializer: 0x420ed598
lib_cxx_initialize: Calling 0x420ed598
lib_cxx_initialize: initp: 0x3c1e1f80 initializer: 0x420ee4c0
lib_cxx_initialize: Calling 0x420ee4c0
lib_cxx_initialize: initp: 0x3c1e1f84 initializer: 0x421090c8
lib_cxx_initialize: Calling 0x421090c8
lib_cxx_initialize: initp: 0x3c1e1f88 initializer: 0x4210c100
lib_cxx_initialize: Calling 0x4210c100
lib_cxx_initialize: initp: 0x3c1e1f8c initializer: 0x4214728c
lib_cxx_initialize: Calling 0x4214728c
mm_malloc: Allocated 0x3c1f1b68, size 264
mm_malloc: Allocated 0x3c1f1c70, size 264
lib_cxx_initialize: initp: 0x3c1e1f90 initializer: 0x42149038
lib_cxx_initialize: Calling 0x42149038
lib_cxx_initialize: initp: 0x3c1e1f94 initializer: 0x42149300
lib_cxx_initialize: Calling 0x42149300
lib_cxx_initialize: initp: 0x3c1e1f98 initializer: 0x4214eaec
lib_cxx_initialize: Calling 0x4214eaec
mm_malloc: Allocated 0x3fc997a8, size 56
mm_malloc: Allocated 0x3fc997e0, size 32
nx_start: CPU0: Beginning Idle Loop
mm_malloc: Allocated 0x3fc99800, size 184
mm_malloc: Allocated 0x3fc998b8, size 48
mm_malloc: Allocated 0x3fc998e8, size 48
mm_free: Freeing 0x3c1f0350
mm_free: Freeing 0x3c1f0330
mm_malloc: Allocated 0x3fc99918, size 208
mm_malloc: Allocated 0x3fc999e8, size 256
mm_malloc: Allocated 0x3c1f1d78, size 424
mm_malloc: Allocated 0x3c1f1f20, size 1384
nxtask_activate: wq:manager pid=4,TCB=0x3fc99918
mm_malloc: Allocated 0x3fc99ae8, size 32
mm_malloc: Allocated 0x3fc99b08, size 32
mm_malloc: Allocated 0x3fc99b28, size 32
mm_malloc: Allocated 0x3fc99b48, size 32
mm_malloc: Allocated 0x3fc99b68, size 32
mm_malloc: Allocated 0x3fc99b88, size 32
mm_malloc: Allocated 0x3fc99ba8, size 32
mm_malloc: Allocated 0x3fc99bc8, size 32
mm_malloc: Allocated 0x3fc99be8, size 32
mm_malloc: Allocated 0x3fc99c08, size 32
mm_malloc: Allocated 0x3fc99c28, size 32
mm_malloc: Allocated 0x3fc99c48, size 32
mm_malloc: Allocated 0x3fc99c68, size 32
mm_malloc: Allocated 0x3fc99c88, size 32
mm_malloc: Allocated 0x3fc99ca8, size 32
mm_malloc: Allocated 0x3fc99cc8, size 32
mm_malloc: Allocated 0x3fc99ce8, size 32
mm_malloc: Allocated 0x3fc99d08, size 32
mm_malloc: Allocated 0x3fc99d28, size 32
mm_malloc: Allocated 0x3fc99d48, size 32
mm_malloc: Allocated 0x3fc99d68, size 32
mm_malloc: Allocated 0x3fc99d88, size 32
mm_malloc: Allocated 0x3fc99da8, size 32
mm_malloc: Allocated 0x3c1f2488, size 72
mm_malloc: Allocated 0x3c1f24d0, size 56
mm_malloc: Allocated 0x3c1f2508, size 64
pthread_mutex_timedlock: mutex=0x3fc96558
pthread_mutex_timedlock: Returning 0
pthread_mutex_unlock: mutex=0x3fc96558
pthread_mutex_unlock: Returning 0
mm_malloc: Allocated 0x3c1f0330, size 32
pthread_mutex_timedlock: mutex=0x3fc96558
pthread_mutex_timedlock: Returning 0
pthread_mutex_unlock: mutex=0x3fc96558
pthread_mutex_unlock: Returning 0
mm_malloc: Allocated 0x3c1f2548, size 32
pthread_mutex_timedlock: mutex=0x3fc96558
pthread_mutex_timedlock: Returning 0
pthread_mutex_unlock: mutex=0x3fc96558
pthread_mutex_unlock: Returning 0
mm_malloc: Allocated 0x3c1f2568, size 64
pthread_mutex_timedlock: mutex=0x3fc96558
pthread_mutex_timedlock: Returning 0
pthread_mutex_unlock: mutex=0x3fc96558
pthread_mutex_unlock: Returning 0
mm_malloc: Allocated 0x3c1f25a8, size 104
pthread_mutex_timedlock: mutex=0x3c1f248c
pthread_mutex_timedlock: Returning 0
pthread_mutex_unlock: mutex=0x3c1f248c
pthread_mutex_unlock: Returning 0
mm_malloc: Allocated 0x3fc99dc8, size 216
mm_malloc: Allocated 0x3c1f2610, size 3504
nxtask_activate: wq:manager pid=5,TCB=0x3fc99dc8
pthread_mutex_timedlock: mutex=0x3c1f248c
pthread_mutex_timedlock: Returning 0
pthread_mutex_unlock: mutex=0x3c1f248c
pthread_mutex_unlock: Returning 0
pthread_mutex_timedlock: mutex=0x3c1f248c
pthread_mutex_timedlock: Returning 0
pthread_mutex_unlock: mutex=0x3c1f248c
pthread_mutex_unlock: Returning 0
pthread_mutex_timedlock: mutex=0x3c1f3310
pthread_mutex_timedlock: Returning 0
pthread_mutex_unlock: mutex=0x3c1f3310
pthread_mutex_unlock: Returning 0
mm_malloc: Allocated 0x3c1f0350, size 16
mm_malloc: Allocated 0x3c1f33c0, size 432
mm_malloc: Allocated 0x3fc99ea0, size 32
mm_free: Freeing 0x3fc99ea0
mm_malloc: Allocated 0x3c1f3570, size 72
mm_malloc: Allocated 0x3fc99ea0, size 24
mm_malloc: Allocated 0x3fc99eb8, size 48
mm_malloc: Allocated 0x3fc99ee8, size 56
mm_malloc: Allocated 0x3fc99f20, size 32
mm_free: Freeing 0x3fc99f20
mm_malloc: Allocated 0x3c1f35b8, size 552
mm_malloc: Allocated 0x3fc99f20, size 24
mm_malloc: Allocated 0x3c1f37e0, size 32
pthread_mutex_timedlock: mutex=0x3fc96558
pthread_mutex_timedlock: Returning 0
pthread_mutex_unlock: mutex=0x3fc96558
pthread_mutex_unlock: Returning 0
mm_malloc: Allocated 0x3fc99f38, size 128
mm_malloc: Allocated 0x3fc99fb8, size 48
mm_malloc: Allocated 0x3fc99fe8, size 56
mm_malloc: Allocated 0x3fc9a020, size 56
mm_malloc: Allocated 0x3fc9a058, size 208
mm_malloc: Allocated 0x3fc9a128, size 2056
nxtask_activate: rt_timer pid=6,TCB=0x3fc9a058
mm_malloc: Allocated 0x3c1f3800, size 32
mm_malloc: Allocated 0x3c1f3820, size 16
mm_malloc: Allocated 0x3c1f3830, size 16
mm_malloc: Allocated 0x3c1f3840, size 16
mm_malloc: Allocated 0x3c1f3850, size 16
mm_malloc: Allocated 0x3c1f3860, size 1352
mm_malloc: Allocated 0x3fc9a930, size 32
mm_malloc: Allocated 0x3fc9a950, size 32
mm_malloc: Allocated 0x3fc9a970, size 24
mm_malloc: Allocated 0x3fc9a988, size 520
mm_free: Freeing 0x3fc9a988
mm_free: Freeing 0x3fc9a970
mm_free: Freeing 0x3fc9a950
mm_free: Freeing 0x3fc9a930
dump_assert_info: Current Version: NuttX  11.0.0 1c8b2be659-dirty Jan 24 2026 20:09:44 xtensa
dump_assert_info: Assertion failed mm_heapmember(heap, mem): at file: mm_heap/mm_free.c:243 task: nsh_main process: nsh_main 0x42014ce8
up_dump_register:    PC: 42039357    PS: 00060122
up_dump_register:    A0: 80378d5e    A1: 3c1f18f0    A2: 00000000    A3: 3fc919a0
up_dump_register:    A4: 0000000a    A5: 3c1f1978    A6: 00000000    A7: 3fc95bec
up_dump_register:    A8: 00000001    A9: 3fc99378   A10: 00000000   A11: 0000007e
up_dump_register:   A12: 3c1f1a00   A13: 3c1f19e0   A14: 00000008   A15: 3fc99348
up_dump_register:   SAR: 00000005 CAUSE: 42026724 VADDR: 8203ae48
up_dump_register:  LBEG: 400570e8  LEND: 400570f3  LCNT: 00000000
dump_stackinfo: User Stack:
dump_stackinfo:   base: 0x3c1f0390
dump_stackinfo:   size: 00006096
dump_stackinfo:     sp: 0x3c1f18f0
stack_dump: 0x3c1f18d0: 3c189998 3c1f18f0 400570f3 00000000 8201f9b1 3c1f1910 3c1f0390 3fc99378
stack_dump: 0x3c1f18f0: 3c1f0390 000017d0 3c1f18d0 3c189998 8201ed39 3c1f1a00 3c18621f 000000f3
stack_dump: 0x3c1f1910: 3fc99428 3fc99428 42014ce8 3c1862d9 7474754e 3c1f0058 00000008 00000000
stack_dump: 0x3c1f1930: 3c1f1a00 3c1f00e0 00000008 3fc99348 82022e50 3c1f1990 00000006 3c1862d9
stack_dump: 0x3c1f1950: 0000001c 2e313100 00302e30 42039ec8 4215b5bc 3c1f1970 6331000a 62326238
stack_dump: 0x3c1f1970: 39353665 7269642d 4a207974 32206e61 30322034 32203632 39303a30 0034343a
stack_dump: 0x3c1f1990: 3c1f1a00 3c1f19e0 00000008 65747848 0061736e 3c1f19e0 00000008 00000000
stack_dump: 0x3c1f19b0: 3c1f1a00 3fc99378 3fc919a0 3c1862e9 3c18621f 000000f3 3c1f0000 3fc9a930
stack_dump: 0x3c1f19d0: 00000006 00060120 000000f3 00000000 3fc95300 000017d0 3c1f1b60 3c1f18f0
stack_dump: 0x3c1f19f0: 8201e624 3c1f1a20 3c1f0000 3fc9a930 3c1862e9 3fc9a930 00000000 3c1f1870
stack_dump: 0x3c1f1a10: 82015ecd 3c1f1a40 3fc9a930 3c1f3d50 00000003 3fc95a9c 3fc99378 3c1f1870
stack_dump: 0x3c1f1a30: 82014f22 3c1f1a60 3fc9a930 00000050 00000000 00000000 00000001 3c1f1a40
stack_dump: 0x3c1f1a50: 82014f44 3c1f1a80 3c1f3860 3c1f3c60 00000003 ffffffff 42015598 3c1f1930
stack_dump: 0x3c1f1a70: 82014d99 3c1f1ab0 3c1f3860 00000000 3fc9a930 3c1f1ab0 00000000 00000000
stack_dump: 0x3c1f1a90: 3c1f3d50 00000000 ffffffff 00000000 82014d0f 3c1f1ad0 3c1f3860 3c1f1af0
stack_dump: 0x3c1f1ab0: 3c1f1ae0 3c1f1ac0 00000008 00000000 82021001 3c1f1af0 00000001 3c1f0370
stack_dump: 0x3c1f1ad0: 3c1875cd 4214eaec 4214eaec 42010fc4 8201206c 3c1f1b20 42014ce8 00000001
stack_dump: 0x3c1f1af0: 00000064 3c1f1b20 42014ce8 00000001 3c1875cd 3fc91954 3c1e1f9c 3fc8f10c
stack_dump: 0x3c1f1b10: 00000000 3c1f1b40 00000000 42014ce8 3c1f0370 3fc99250 00000001 3c181267
stack_dump: 0x3c1f1b30: 00000000 3c1f1b60 00000000 00000000 00000000 00000000 00000000 00000000
stack_dump: 0x3c1f1b50: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
mm_free: Freeing 0x3c1f0188
mm_free: Freeing 0x3fc99548
mm_free: Freeing 0x3fc99568
mm_free: Freeing 0x3fc99588
mm_free: Freeing 0x3fc995a8
mm_free: Freeing 0x3fc995c8
mm_free: Freeing 0x3fc995e8
mm_free: Freeing 0x3fc99608
mm_free: Freeing 0x3fc99628
mm_free: Freeing 0x3fc99648
mm_free: Freeing 0x3fc99668
mm_free: Freeing 0x3fc99688
mm_free: Freeing 0x3fc996a8
mm_free: Freeing 0x3fc996c8
mm_free: Freeing 0x3fc996e8
mm_free: Freeing 0x3fc99708
mm_free: Freeing 0x3fc99728
mm_free: Freeing 0x3fc99748
mm_free: Freeing 0x3fc99768
mm_free: Freeing 0x3fc99788
mm_free: Freeing 0x3fc99448
nxtask_exit: nsh_main pid=3,TCB=0x3fc99378
mm_free: Freeing 0x3c1f0360
mm_free: Freeing 0x3fc99378

Next, based on these logs, I used GDB to debug the code. Here are the backtraces from the assertion failure:

#0  0x4215b21e in esp32s3_lowputc_is_tx_fifo_full (priv=<optimized out>) at chip/esp32s3_lowputc.c:729
#1  0x4201c083 in xtensa_lowputc (ch=95 '_') at chip/esp32s3_lowputc.c:994
#2  0x4201c6a6 in up_putc (ch=95) at chip/esp32s3_serial.c:1235
#3  0x420391c4 in up_nputs (str=0x3c18b123 <__FUNCTION__$0+8> "register", len=<optimized out>) at common/xtensa_nputs.c:46
#4  0x42026751 in syslog_default_write (channel=<optimized out>, buffer=<optimized out>, buflen=16) at syslog/syslog_channel.c:319
#5  0x4203ada4 in syslog_write_foreach (buffer=0x3c18b11b <__FUNCTION__$0> "up_dump_register", buflen=16, force=<optimized out>) at syslog/syslog_write.c:163
#6  0x4203ae48 in syslog_write (buffer=0x3c18b11b <__FUNCTION__$0> "up_dump_register", buflen=16) at syslog/syslog_write.c:260
#7  0x42039ef9 in syslograwstream_puts (len=16, buff=0x3c18b11b <__FUNCTION__$0>, self=0x3c1f1810) at stream/lib_syslograwstream.c:219
#8  syslograwstream_puts (self=0x3c1f1810, buff=0x3c18b11b <__FUNCTION__$0>, len=16) at stream/lib_syslograwstream.c:188
#9  0x4202257e in vsprintf_internal (stream=0x3c1f1810, arglist=0x0, numargs=0, fmt=<optimized out>, ap=..., numargs=0, arglist=0x0) at stream/lib_libvsprintf.c:945
#10 0x42022944 in lib_vsprintf_internal (stream=0x3c1f1810, fmt=0x3c18b0ef "%s:  LBEG: %08lx  LEND: %08lx  LCNT: %08lx\n", ap=...) at stream/lib_libvsprintf.c:1443
#11 0x420264a8 in nx_vsyslog (priority=1, fmt=0x3c18b0ef "%s:  LBEG: %08lx  LEND: %08lx  LCNT: %08lx\n", ap=0x3c1f1850) at syslog/vsyslog.c:258
#12 0x42022e28 in vsyslog (priority=1, fmt=0x3c18b0ef "%s:  LBEG: %08lx  LEND: %08lx  LCNT: %08lx\n", ap=...) at syslog/lib_syslog.c:70
#13 0x42022e50 in syslog (priority=1, fmt=0x3c18b0ef "%s:  LBEG: %08lx  LEND: %08lx  LCNT: %08lx\n") at syslog/lib_syslog.c:102
#14 0x420392e8 in up_dump_register (dumpregs=<optimized out>) at common/xtensa_registerdump.c:68
#15 0x40378e3a in dump_running_task (regs=<optimized out>, rtcb=0x3fc99378) at misc/assert.c:659
#16 dump_assert_info (regs=<optimized out>, msg=<optimized out>, linenum=243, filename=<optimized out>, rtcb=0x3fc99378) at misc/assert.c:717
#17 _assert (filename=<optimized out>, linenum=243, msg=<optimized out>, regs=<optimized out>) at misc/assert.c:902
#18 0x4201f9b1 in __assert (filename=0x3c18621f "mm_heap/mm_free.c", linenum=243, msg=0x3c1862e9 "mm_heapmember(heap, mem)") at assert/lib_assert.c:38
#19 0x4201ed39 in mm_free (heap=0x3c1f0000, mem=0x3fc9a930) at mm_heap/mm_free.c:243
#20 0x4201e624 in free (mem=0x3fc9a930) at umm_heap/umm_free.c:51
#21 0x42015ecd in nsh_freefullpath (fullpath=0x3fc9a930 "/etc/init.d/rc.sysinit") at nsh_envcmds.c:233
--Type <RET> for more, q to quit, c to continue without paging--
#22 0x42014f22 in nsh_script (vtbl=0x3c1f3860, cmd=<optimized out>, path=<optimized out>, log=false) at nsh_script.c:201
#23 0x42014f44 in nsh_script_redirect (log=false, path=0x3c181fd1 "/etc/init.d/rc.sysinit", cmd=0x3c181fe0 "sysinit", vtbl=0x3c1f3860) at nsh_script.c:71
#24 nsh_sysinitscript (vtbl=0x3c1f3860) at nsh_script.c:221
#25 0x42014d99 in nsh_initialize () at nsh_init.c:157
#26 0x42014d0f in nsh_main (argc=1, argv=0x3c1f0370) at nsh_main.c:71
#27 0x42021001 in nxtask_startup (entrypt=0x42014ce8 <nsh_main>, argc=1, argv=0x3c1f0370) at sched/task_startup.c:72
#28 0x4201206c in nxtask_start () at task/task_start.c:104

After reviewing the code shown in the backtraces, I identified the root cause of the issue:

1. The fullpath variable in the nsh_script function is allocated on the kernel heap.
2. However, nsh_freefullpath calls a function to free this space from the user heap (mismatched heap allocation/deallocation).

The fullpath variable is returned by nsh_getfullpath, so I inspected that function. It uses strdup to duplicate the path—this is the critical flaw: strdup allocates memory on the kernel heap, but nsh_freefullpath incorrectly frees it from the user heap. Over time, this mismatch corrupts the kernel heap, leading to the out-of-memory error.

Fortunately, I have some familiarity with Xtensa. I checked the Newlib implementation and found the following code in arch/xtensa/src/esp32s3/es32s3_libc_stubs.c:

void *_malloc_r(struct _reent *r, size_t size)
{
  return lib_malloc(size);
}

void *_realloc_r(struct _reent *r, void *ptr, size_t size)
{
  return lib_realloc(ptr, size);
}

void *_calloc_r(struct _reent *r, size_t nmemb, size_t size)
{
  return lib_calloc(nmemb, size);
}

void _free_r(struct _reent *r, void *ptr)
{
  lib_free(ptr);
}

It appears that these implementations of _malloc_r/_realloc_r/_free_r/_calloc_r should call lib_umalloc/lib_ufree (user heap) instead of lib_malloc/lib_free (kernel heap) in this context.

These changes are tested in my environment, and they worked. I don’t know if they will cause other problems.

[eren-terzioglu]

Hi,
Thanks for detailed explanation. We will take a look.

[eren-terzioglu]

For testing error properly, could you send defconfig output coming from make savedefconfig command?

[Y334275]

@eren-terzioglu Hi, here is my defconfig file:

#
# This file is autogenerated: PLEASE DO NOT EDIT IT.
#
# You can use "make menuconfig" to make any modifications to the installed .config file.
# You can then do "make savedefconfig" to generate a new defconfig file that includes your
# modifications.
#
# CONFIG_MMCSD_HAVE_CARDDETECT is not set
# CONFIG_MMCSD_HAVE_WRITEPROTECT is not set
# CONFIG_MMCSD_MMCSUPPORT is not set
# CONFIG_NSH_DISABLE_DATE is not set
# CONFIG_SPI_CALLBACK is not set
CONFIG_ALLOW_BSD_COMPONENTS=y
CONFIG_ARCH="xtensa"
CONFIG_ARCH_BOARD_COMMON=y
CONFIG_ARCH_BOARD_CUSTOM=y
CONFIG_ARCH_BOARD_CUSTOM_DIR="../../../../boards/espressif/esp32s3/nuttx-config"
CONFIG_ARCH_BOARD_CUSTOM_DIR_RELPATH=y
CONFIG_ARCH_BOARD_CUSTOM_NAME=""
CONFIG_ARCH_CHIP="esp32s3"
CONFIG_ARCH_CHIP_ESP32S3=y
CONFIG_ARCH_CHIP_ESP32S3WROOM1N4=y
CONFIG_ARCH_INTERRUPTSTACK=2048
CONFIG_ARCH_STACKDUMP=y
CONFIG_ARCH_XTENSA=y
CONFIG_BOARDCTL_MKRD=y
CONFIG_BOARDCTL_RESET=y
CONFIG_BOARD_LOOPSPERMSEC=16717
CONFIG_BUILTIN=y
CONFIG_CDCACM=y
CONFIG_DEBUG_FEATURES=y
CONFIG_DEFAULT_TASK_STACKSIZE=3072
CONFIG_DEV_FIFO_SIZE=0
CONFIG_DEV_PIPE_MAXSIZE=1024
CONFIG_DEV_PIPE_SIZE=70
CONFIG_DEV_URANDOM=y
CONFIG_DRIVERS_IEEE80211=y
CONFIG_DRIVERS_WIRELESS=y
CONFIG_ELF=y
CONFIG_ESP32S3_GPIO_IRQ=y
CONFIG_ESP32S3_I2C0=y
CONFIG_ESP32S3_I2C1=y
CONFIG_ESP32S3_I2CTIMEOSEC=1
CONFIG_ESP32S3_OTG=y
CONFIG_ESP32S3_RT_TIMER=y
CONFIG_ESP32S3_SPI2=y
CONFIG_ESP32S3_SPI2_CLKPIN=7
CONFIG_ESP32S3_SPI2_CSPIN=6
CONFIG_ESP32S3_SPI2_MISOPIN=16
CONFIG_ESP32S3_SPI2_MOSIPIN=15
CONFIG_ESP32S3_SPI3=y
CONFIG_ESP32S3_SPI3_CLKPIN=40
CONFIG_ESP32S3_SPI3_CSPIN=38
CONFIG_ESP32S3_SPI3_MISOPIN=41
CONFIG_ESP32S3_SPI3_MOSIPIN=39
CONFIG_ESP32S3_SPIFLASH=y
CONFIG_ESP32S3_SPIRAM=y
CONFIG_ESP32S3_SPIRAM_MODE_OCT=y
CONFIG_ESP32S3_SPI_DMA=y
CONFIG_ESP32S3_SPI_SWCS=y
CONFIG_ESP32S3_SPI_UDCS=y
CONFIG_ESP32S3_UART0=y
CONFIG_ESP32S3_UART1=y
CONFIG_ESP32S3_UART1_RXPIN=42
CONFIG_ESP32S3_UART1_TXPIN=45
CONFIG_ESP32S3_UART2=y
CONFIG_ESP32S3_UART2_RXPIN=3
CONFIG_ESP32S3_UART2_TXPIN=8
CONFIG_ETC_CROMFS=y
CONFIG_ETC_ROMFS=y
CONFIG_EXAMPLES_CALIB_UDELAY=y
CONFIG_FAT_DMAMEMORY=y
CONFIG_FAT_LCNAMES=y
CONFIG_FAT_LFN=y
CONFIG_FAT_LFN_ALIAS_HASH=y
CONFIG_FAT_LFN_UTF8=y
CONFIG_FS_BINFS=y
CONFIG_FS_CROMFS=y
CONFIG_FS_FAT=y
CONFIG_FS_FATTIME=y
CONFIG_FS_PROCFS=y
CONFIG_FS_PROCFS_REGISTER=y
CONFIG_FS_ROMFS=y
CONFIG_FS_SPIFFS=y
CONFIG_GRAN=y
CONFIG_GRAN_INTR=y
CONFIG_HAVE_CXX=y
CONFIG_HAVE_CXXINITIALIZE=y
CONFIG_I2C_DRIVER=y
CONFIG_I2C_RESET=y
CONFIG_IDLETHREAD_STACKSIZE=3072
CONFIG_INIT_ENTRYPOINT="nsh_main"
CONFIG_INIT_STACKSIZE=6144
CONFIG_INTELHEX_BINARY=y
CONFIG_IOB_NBUFFERS=36
CONFIG_IOB_NCHAINS=36
CONFIG_LIBC_MAX_EXITFUNS=1
CONFIG_MMCSD=y
CONFIG_MM_IOB=y
CONFIG_MM_REGIONS=2
CONFIG_MTD_RAMTRON=y
CONFIG_NAME_MAX=48
CONFIG_NDEBUG=y
CONFIG_NSH_ARCHINIT=y
CONFIG_NSH_BUILTIN_APPS=y
CONFIG_NSH_DISABLE_BASENAME=y
CONFIG_NSH_DISABLE_CMP=y
CONFIG_NSH_DISABLE_DIRNAME=y
CONFIG_NSH_DISABLE_HEXDUMP=y
CONFIG_NSH_DISABLE_LOSETUP=y
CONFIG_NSH_DISABLE_MKFIFO=y
CONFIG_NSH_DISABLE_MKRD=y
CONFIG_NSH_DISABLE_PRINTF=y
CONFIG_NSH_DISABLE_PUT=y
CONFIG_NSH_DISABLE_TRUNCATE=y
CONFIG_NSH_DISABLE_UNAME=y
CONFIG_NSH_DISABLE_WGET=y
CONFIG_NSH_DISABLE_XD=y
CONFIG_NSH_FILEIOSIZE=512
CONFIG_NSH_MAXARGUMENTS=15
CONFIG_NSH_NESTDEPTH=8
CONFIG_NSH_READLINE=y
CONFIG_NSH_VARS=y
CONFIG_PIPES=y
CONFIG_PREALLOC_TIMERS=50
CONFIG_PRIORITY_INHERITANCE=y
CONFIG_PTHREAD_MUTEX_TYPES=y
CONFIG_PTHREAD_STACK_MIN=512
CONFIG_PWM=y
CONFIG_RAMTRON_EMULATE_PAGE_SHIFT=10
CONFIG_RAMTRON_EMULATE_SECTOR_SHIFT=10
CONFIG_RAMTRON_SETSPEED=y
CONFIG_RAM_SIZE=114688
CONFIG_RAM_START=0x20000000
CONFIG_RAW_BINARY=y
CONFIG_READLINE_CMD_HISTORY=y
CONFIG_READLINE_CMD_HISTORY_LEN=4
CONFIG_READLINE_CMD_HISTORY_LINELEN=64
CONFIG_READLINE_TABCOMPLETION=y
CONFIG_SCHED_BACKTRACE=y
CONFIG_SCHED_HPWORK=y
CONFIG_SCHED_HPWORKPRIORITY=249
CONFIG_SCHED_INSTRUMENTATION=y
CONFIG_SCHED_INSTRUMENTATION_SWITCH=y
CONFIG_SCHED_LPWORK=y
CONFIG_SCHED_LPWORKPRIOMAX=178
CONFIG_SCHED_LPWORKSTACKSIZE=2048
CONFIG_SCHED_WAITPID=y
CONFIG_SEM_PREALLOCHOLDERS=32
CONFIG_SERIAL_TERMIOS=y
CONFIG_SIG_DEFAULT=y
CONFIG_SIG_SIGALRM_ACTION=y
CONFIG_SIG_SIGUSR1_ACTION=y
CONFIG_SIG_SIGUSR2_ACTION=y
CONFIG_SPIFFS_NAME_MAX=48
CONFIG_SPINLOCK=y
CONFIG_SPI_DRIVER=y
CONFIG_STACK_COLORATION=y
CONFIG_START_DAY=30
CONFIG_START_MONTH=11
CONFIG_STDIO_BUFFER_SIZE=32
CONFIG_SYSTEM_CDCACM=y
CONFIG_SYSTEM_NSH=y
CONFIG_SYSTEM_NSH_STACKSIZE=2000
CONFIG_TASK_NAME_SIZE=24
CONFIG_TLS_TASK_NELEM=4
CONFIG_UART0_SERIAL_CONSOLE=y
CONFIG_USEC_PER_TICK=1000
CONFIG_WQUEUE_NOTIFIER=y

I'm working with a custom board, but you can substitute it with esp32s3-devkit for testing purposes.
By the way, I'm building NuttX as part of PX4, rather than building NuttX directly. In this setup, NuttX is compiled in kernel mode.

[eren-terzioglu]

@eren-terzioglu Hi, here is my defconfig file:

#
# This file is autogenerated: PLEASE DO NOT EDIT IT.
#
# You can use "make menuconfig" to make any modifications to the installed .config file.
# You can then do "make savedefconfig" to generate a new defconfig file that includes your
# modifications.
#
# CONFIG_MMCSD_HAVE_CARDDETECT is not set
# CONFIG_MMCSD_HAVE_WRITEPROTECT is not set
# CONFIG_MMCSD_MMCSUPPORT is not set
# CONFIG_NSH_DISABLE_DATE is not set
# CONFIG_SPI_CALLBACK is not set
CONFIG_ALLOW_BSD_COMPONENTS=y
CONFIG_ARCH="xtensa"
CONFIG_ARCH_BOARD_COMMON=y
CONFIG_ARCH_BOARD_CUSTOM=y
CONFIG_ARCH_BOARD_CUSTOM_DIR="../../../../boards/espressif/esp32s3/nuttx-config"
CONFIG_ARCH_BOARD_CUSTOM_DIR_RELPATH=y
CONFIG_ARCH_BOARD_CUSTOM_NAME=""
CONFIG_ARCH_CHIP="esp32s3"
CONFIG_ARCH_CHIP_ESP32S3=y
CONFIG_ARCH_CHIP_ESP32S3WROOM1N4=y
CONFIG_ARCH_INTERRUPTSTACK=2048
CONFIG_ARCH_STACKDUMP=y
CONFIG_ARCH_XTENSA=y
CONFIG_BOARDCTL_MKRD=y
CONFIG_BOARDCTL_RESET=y
CONFIG_BOARD_LOOPSPERMSEC=16717
CONFIG_BUILTIN=y
CONFIG_CDCACM=y
CONFIG_DEBUG_FEATURES=y
CONFIG_DEFAULT_TASK_STACKSIZE=3072
CONFIG_DEV_FIFO_SIZE=0
CONFIG_DEV_PIPE_MAXSIZE=1024
CONFIG_DEV_PIPE_SIZE=70
CONFIG_DEV_URANDOM=y
CONFIG_DRIVERS_IEEE80211=y
CONFIG_DRIVERS_WIRELESS=y
CONFIG_ELF=y
CONFIG_ESP32S3_GPIO_IRQ=y
CONFIG_ESP32S3_I2C0=y
CONFIG_ESP32S3_I2C1=y
CONFIG_ESP32S3_I2CTIMEOSEC=1
CONFIG_ESP32S3_OTG=y
CONFIG_ESP32S3_RT_TIMER=y
CONFIG_ESP32S3_SPI2=y
CONFIG_ESP32S3_SPI2_CLKPIN=7
CONFIG_ESP32S3_SPI2_CSPIN=6
CONFIG_ESP32S3_SPI2_MISOPIN=16
CONFIG_ESP32S3_SPI2_MOSIPIN=15
CONFIG_ESP32S3_SPI3=y
CONFIG_ESP32S3_SPI3_CLKPIN=40
CONFIG_ESP32S3_SPI3_CSPIN=38
CONFIG_ESP32S3_SPI3_MISOPIN=41
CONFIG_ESP32S3_SPI3_MOSIPIN=39
CONFIG_ESP32S3_SPIFLASH=y
CONFIG_ESP32S3_SPIRAM=y
CONFIG_ESP32S3_SPIRAM_MODE_OCT=y
CONFIG_ESP32S3_SPI_DMA=y
CONFIG_ESP32S3_SPI_SWCS=y
CONFIG_ESP32S3_SPI_UDCS=y
CONFIG_ESP32S3_UART0=y
CONFIG_ESP32S3_UART1=y
CONFIG_ESP32S3_UART1_RXPIN=42
CONFIG_ESP32S3_UART1_TXPIN=45
CONFIG_ESP32S3_UART2=y
CONFIG_ESP32S3_UART2_RXPIN=3
CONFIG_ESP32S3_UART2_TXPIN=8
CONFIG_ETC_CROMFS=y
CONFIG_ETC_ROMFS=y
CONFIG_EXAMPLES_CALIB_UDELAY=y
CONFIG_FAT_DMAMEMORY=y
CONFIG_FAT_LCNAMES=y
CONFIG_FAT_LFN=y
CONFIG_FAT_LFN_ALIAS_HASH=y
CONFIG_FAT_LFN_UTF8=y
CONFIG_FS_BINFS=y
CONFIG_FS_CROMFS=y
CONFIG_FS_FAT=y
CONFIG_FS_FATTIME=y
CONFIG_FS_PROCFS=y
CONFIG_FS_PROCFS_REGISTER=y
CONFIG_FS_ROMFS=y
CONFIG_FS_SPIFFS=y
CONFIG_GRAN=y
CONFIG_GRAN_INTR=y
CONFIG_HAVE_CXX=y
CONFIG_HAVE_CXXINITIALIZE=y
CONFIG_I2C_DRIVER=y
CONFIG_I2C_RESET=y
CONFIG_IDLETHREAD_STACKSIZE=3072
CONFIG_INIT_ENTRYPOINT="nsh_main"
CONFIG_INIT_STACKSIZE=6144
CONFIG_INTELHEX_BINARY=y
CONFIG_IOB_NBUFFERS=36
CONFIG_IOB_NCHAINS=36
CONFIG_LIBC_MAX_EXITFUNS=1
CONFIG_MMCSD=y
CONFIG_MM_IOB=y
CONFIG_MM_REGIONS=2
CONFIG_MTD_RAMTRON=y
CONFIG_NAME_MAX=48
CONFIG_NDEBUG=y
CONFIG_NSH_ARCHINIT=y
CONFIG_NSH_BUILTIN_APPS=y
CONFIG_NSH_DISABLE_BASENAME=y
CONFIG_NSH_DISABLE_CMP=y
CONFIG_NSH_DISABLE_DIRNAME=y
CONFIG_NSH_DISABLE_HEXDUMP=y
CONFIG_NSH_DISABLE_LOSETUP=y
CONFIG_NSH_DISABLE_MKFIFO=y
CONFIG_NSH_DISABLE_MKRD=y
CONFIG_NSH_DISABLE_PRINTF=y
CONFIG_NSH_DISABLE_PUT=y
CONFIG_NSH_DISABLE_TRUNCATE=y
CONFIG_NSH_DISABLE_UNAME=y
CONFIG_NSH_DISABLE_WGET=y
CONFIG_NSH_DISABLE_XD=y
CONFIG_NSH_FILEIOSIZE=512
CONFIG_NSH_MAXARGUMENTS=15
CONFIG_NSH_NESTDEPTH=8
CONFIG_NSH_READLINE=y
CONFIG_NSH_VARS=y
CONFIG_PIPES=y
CONFIG_PREALLOC_TIMERS=50
CONFIG_PRIORITY_INHERITANCE=y
CONFIG_PTHREAD_MUTEX_TYPES=y
CONFIG_PTHREAD_STACK_MIN=512
CONFIG_PWM=y
CONFIG_RAMTRON_EMULATE_PAGE_SHIFT=10
CONFIG_RAMTRON_EMULATE_SECTOR_SHIFT=10
CONFIG_RAMTRON_SETSPEED=y
CONFIG_RAM_SIZE=114688
CONFIG_RAM_START=0x20000000
CONFIG_RAW_BINARY=y
CONFIG_READLINE_CMD_HISTORY=y
CONFIG_READLINE_CMD_HISTORY_LEN=4
CONFIG_READLINE_CMD_HISTORY_LINELEN=64
CONFIG_READLINE_TABCOMPLETION=y
CONFIG_SCHED_BACKTRACE=y
CONFIG_SCHED_HPWORK=y
CONFIG_SCHED_HPWORKPRIORITY=249
CONFIG_SCHED_INSTRUMENTATION=y
CONFIG_SCHED_INSTRUMENTATION_SWITCH=y
CONFIG_SCHED_LPWORK=y
CONFIG_SCHED_LPWORKPRIOMAX=178
CONFIG_SCHED_LPWORKSTACKSIZE=2048
CONFIG_SCHED_WAITPID=y
CONFIG_SEM_PREALLOCHOLDERS=32
CONFIG_SERIAL_TERMIOS=y
CONFIG_SIG_DEFAULT=y
CONFIG_SIG_SIGALRM_ACTION=y
CONFIG_SIG_SIGUSR1_ACTION=y
CONFIG_SIG_SIGUSR2_ACTION=y
CONFIG_SPIFFS_NAME_MAX=48
CONFIG_SPINLOCK=y
CONFIG_SPI_DRIVER=y
CONFIG_STACK_COLORATION=y
CONFIG_START_DAY=30
CONFIG_START_MONTH=11
CONFIG_STDIO_BUFFER_SIZE=32
CONFIG_SYSTEM_CDCACM=y
CONFIG_SYSTEM_NSH=y
CONFIG_SYSTEM_NSH_STACKSIZE=2000
CONFIG_TASK_NAME_SIZE=24
CONFIG_TLS_TASK_NELEM=4
CONFIG_UART0_SERIAL_CONSOLE=y
CONFIG_USEC_PER_TICK=1000
CONFIG_WQUEUE_NOTIFIER=y

I'm working with a custom board, but you can substitute it with esp32s3-devkit for testing purposes. By the way, I'm building NuttX as part of PX4, rather than building NuttX directly. In this setup, NuttX is compiled in kernel mode.

Thanks for the information, I will check with this.

[eren-terzioglu]

Hi,
Update for the issue. Seems it is related to commit 1bfe705226788512bf17aa00b3fce05469fd11fb. If you need to make a quick fix, you can revert it in your system. We are working for a solution to it.