Hello gravity,
This is because that powering down by thermal or sysrq-trigger is directly from kernel space, the Trusty vio services are still alive, then when the callback function is triggered in this power down process, it will fail to remove the vio connection, then the power down process will fail.
The callback function is added for another case at that time, we can remove it to fix this issue without any side effect. In our latest L5.10.35, we don't have this call back function.
Thank you.