av1d/rk3588 decoding aborted in mpi_dec_utils: "malloc(): unsorted double linked list corrupted"

[nyanmisaka]

MPP logs:

mpi_dec_test -i /tmp/av1-crash.ivf -t 16777224 -n 1

mpp[402007]: mpi_dec_utils: input file /tmp/av1-crash.ivf size 130879102
mpp[402007]: mpi_dec_utils: cmd parse result:
mpp[402007]: mpi_dec_utils: input  file name: /tmp/av1-crash.ivf
mpp[402007]: mpi_dec_utils: output file name:
mpp[402007]: mpi_dec_utils: width      :    0
mpp[402007]: mpi_dec_utils: height     :    0
mpp[402007]: mpi_dec_utils: type       : 16777224
mpp[402007]: mpi_dec_utils: max frames :    1
mpp[402007]: mpi_dec_test: mpi_dec_test start
mpp[402007]: mpp_info: mpp version: 0986d01 author: Yandong Lin    2026-08-26 fix[vproc]: Fix calloc transposed args
mpp[402007]: mpi_dec_test: 0xaaaae2696920 mpi_dec_test decoder test start w 0 h 0 type 16777224
malloc(): unsorted double linked list corrupted
Aborted

KMD version:

[   17.934569] mpp_service mpp-srv: 90eefde08d7d author: Chandler Chen 2026-06-01 video: rockchip: mpp: fix vepu510 spurious wdg timeout after page fault

Sample file in IVF:
av1-crash.zip

Sample file in MKV:
https://kodi.wiki/view/Samples => 28
https://mega.nz/file/eOQTXKQA#PCMDK-jzyPA1xGMUC0GSe4yHzVWdIlYxitB-OuRrC88