kernel BUG at /usr/src/kernel/kernel/time/timer.c:806!

[monstermichl]

Hello everyone,

we're having a problem with msm_serial_hs_0 for some reason in one of our apps. However, we cannot find the issue and also don't think that it's a problem in our app. The issue only appears sometimes but with no specific pattern.
Besides, it can only appear after the device has completely been disconnected from and re-connected to the power supply. If it doesn't crash after a power cycle, it never crashes. If it crashes after a power cycle it crashes always.
Also, the error is thrown before the COMPONENT_INIT function is called and after the error is raised SierraWireless crashes completely.
We use a WP7607 module with the Linux version swi-mdm9x28-wp 3.18.140 #1 PREEMPT Tue Aug 3 08:17:34 UTC 2021 armv7l GNU/Linux

[  146.904159] ------------[ cut here ]------------
[  146.907745] kernel BUG at /usr/src/kernel/kernel/time/timer.c:806!
[  146.913909] Internal error: Oops - BUG: 0 [#1] PREEMPT ARM
[  146.919373] Modules linked in:
[  146.922417] CPU: 0 PID: 51 Comm: msm_serial_hs_0 Not tainted 3.18.140 #1
[  146.929098] task: ce193200 ti: ce220000 task.ti: ce220000
[  146.934484] PC is at mod_timer+0x7c/0x12c
[  146.938474] LR is at msm_hs_submit_tx_locked+0x108/0x14c
[  146.943770] pc : [<c005b130>]    lr : [<c02a9f70>]    psr: 60070193
[  146.943770] sp : ce221ed0  ip : 00000000  fp : 00000000
[  146.955227] r10: 00000000  r9 : 00000001  r8 : c0016e80
[  146.960436] r7 : cef971c4  r6 : ce1c0000  r5 : 00000000  r4 : ffffc496
[  146.966942] r3 : 00000000  r2 : 00000001  r1 : ffffc496  r0 : cef971c4
[  146.973457] Flags: nZCv  IRQs off  FIQs on  Mode SVC_32  ISA ARM  Segment none
[  146.980663] Control: 10c53c7d  Table: 88828059  DAC: 00000051
[  146.986392]
[  146.986392] PC: 0xc005b0b0:
[  146.990642] b0b0  c0e091d8 e92d41f3 e1a07000 e5904018 e3540000 a0844001 aa000006 e59f3104
[  146.998802] b0d0  e5934000 e0414004 e35400ff d1a04001 da000009 e0814444 e1510004 e0213004
[  147.006958] b0f0  e58d3004 0a000004 e3a01020 e28d0004 eb06fb02 e3e03000 e0044013 e5973000
[  147.015120] b110  e3530000 0a000002 e5973008 e1530004 0a00002a e5973010 e3530000 1a000000
[  147.023281] b130  e7f001f2 e28d1004 e1a00007 ebfffe19 e3a02000 e1a01000 e1a06000 e1a00007
[  147.031436] b150  ebffff85 e1a08000 eb070ecb e59f3078 e5935000 e1560005 0a00000e e5963010
[  147.039599] b170  e1570003 01a05006 0a00000a e597300c e1a00006 e2033003 e587300c eb1cecab
[  147.047755] b190  e1a00005 eb1cec9b e597300c e2033003 e1853003 e587300c e1a01007 e1a00005
[  147.055918]
[  147.055918] LR: 0xc02a9ef0:
[  147.060169] 9ef0  01a0300c e5938024 e3580000 0a000001 e3a03001 e12fff38 e5847100 e3a01000
[  147.068332] 9f10  e596314c e5962144 e59401d0 e0822003 e58d5000 e58d1004 e58d7008 e59f1070
[  147.076493] 9f30  ebffffa8 e1a01005 e1a02007 e3a03903 e594013c e58d3000 e1a03004 eb09f2db
[  147.084648] 9f50  e1a05000 e3a00ffa ebf6c02a e59f3044 e5931000 e0801001 e2840f6d ebf6c450
[  147.092810] 9f70  e5943434 e3530003 daffffc9 e594042c e3500000 0affffc6 e1a03005 e59f2018
[  147.100973] 9f90  e59f1018 e28dd010 e8bd41f0 eaf75aad c0e0479c c09d3d8f c0e091e0 c07c204f
[  147.109129] 9fb0  c09d3d92 e92d4070 e1a04000 e590341c e3530000 0a00000c e59f108c e59f008c
[  147.117291] 9fd0  eb139173 e594042c e3500000 08bd8070 e5943434 e3530001 d8bd8070 e59f2068
[  147.125448]
[  147.125448] SP: 0xce221e50:
[  147.129705] 1e50  ce1bc0a4 00000002 00000008 0000ffff ce1bc000 00000002 c005b134 00000000
[  147.137860] 1e70  c00131d8 00000000 e7100000 c0012da0 cef971c4 ffffc496 00000001 00000000
[  147.146021] 1e90  ffffc496 00000000 ce1c0000 cef971c4 c0016e80 00000001 00000000 00000000
[  147.154182] 1eb0  00000000 ce221ed0 c02a9f70 c005b130 60070193 ffffffff 00000051 0000c000
[  147.162338] 1ed0  cef971c4 00000000 cef97010 00000000 ce1c0000 0000001d c0016e80 c02a9f70
[  147.170500] 1ef0  0000c000 00000000 0000001d 00000003 cef97118 cef97010 20070113 ce1c0000
[  147.178662] 1f10  c098c8ec c02ac85c cef97118 cef97128 ce220000 c0f1a84c c098c8ec c0035680
[  147.186818] 1f30  ce1adbc0 00000000 cef97128 c00355d4 00000000 00000000 00000000 c00357dc
[  147.194980]
[  147.194980] R0: 0xcef97144:
[  147.199237] 7144  cef97118 ce193200 ce1bc400 7fffffff cccccccc 00000000 ce1bc000 cccccccc
[  147.207393] 7164  00000002 00000001 cccccccc 20000021 cf442000 8f442000 cccccccc 00000048
[  147.215555] 7184  cccccccc cccccccc cccccccc cccccccc cccccccc cccccccc 00000010 cccccccc
[  147.223711] 71a4  cccccccc cccccccc cccccccc 00000021 00000000 00000000 c02a84cc cef97010
[  147.231872] 71c4  00000000 00000000 00000000 00000000 00000000 00000000 00000000 ce1bd240
[  147.240033] 71e4  00000000 00000001 dead4ead ffffffff ffffffff cef971f8 cef971f8 8f443000
[  147.248196] 7204  cf443000 00000000 ffffffe0 cef97210 cef97210 c02a86f4 00000000 00000000
[  147.256351] 7224  00000000 c0f1a902 c002fe50 cef9720c ffffffff 00000000 00000000 cef97240
[  147.264513]
[  147.264513] R1: 0xffffc416:
[  147.268764] c414  ******** ******** ******** ******** ******** ******** ******** ********
[  147.276928] c434  ******** ******** ******** ******** ******** ******** ******** ********
[  147.285084] c454  ******** ******** ******** ******** ******** ******** ******** ********
[  147.293247] c474  ******** ******** ******** ******** ******** ******** ******** ********
[  147.301402] c494  ******** ******** ******** ******** ******** ******** ******** ********
[  147.309566] c4b4  ******** ******** ******** ******** ******** ******** ******** ********
[  147.317722] c4d4  ******** ******** ******** ******** ******** ******** ******** ********
[  147.325886] c4f4  ******** ******** ******** ******** ******** ******** ******** ********
[  147.334043] c514  ******** ******** ******** ******** ******** ******** ******** ********
[  147.342207]
[  147.342207] R4: 0xffffc416:
[  147.346457] c414  ******** ******** ******** ******** ******** ******** ******** ********
[  147.354620] c434  ******** ******** ******** ******** ******** ******** ******** ********
[  147.362775] c454  ******** ******** ******** ******** ******** ******** ******** ********
[  147.370932] c474  ******** ******** ******** ******** ******** ******** ******** ********
[  147.379096] c494  ******** ******** ******** ******** ******** ******** ******** ********
[  147.387252] c4b4  ******** ******** ******** ******** ******** ******** ******** ********
[  147.395415] c4d4  ******** ******** ******** ******** ******** ******** ******** ********
[  147.403578] c4f4  ******** ******** ******** ******** ******** ******** ******** ********
[  147.411733] c514  ******** ******** ******** ******** ******** ******** ******** ********
[  147.419897]
[  147.419897] R6: 0xce1bff80:
[  147.424148] ff80  00000001 dead4ead ffffffff ffffffff ce1bff90 ce1bff90 ce1adbc0 ce1adbc0
[  147.432304] ffa0  c0035714 00000000 00000000 c000e798 00000000 00000000 00000000 00000000
[  147.440465] ffc0  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  147.448627] ffe0  00000000 00000000 00000000 00000000 00000013 00000000 00000000 00000000
[  147.456786] 0000  c26cfc00 cfc76405 c0e06b10 c0e06b10 c0294634 00000000 00000001 dead4ead
[  147.464948] 0020  ffffffff ffffffff ce1c0028 ce1c0028 ccd55900 00000000 ce1c0014 00000000
[  147.473104] 0040  c26cfc00 00000000 00000000 00000000 00000000 00000000 00000000 00000100
[  147.481266] 0060  000a0000 c26cfc00 c26cf800 c26cf800 c07c1cd8 00000001 dead4ead ffffffff
[  147.489429]
[  147.489429] R7: 0xcef97144:
[  147.493680] 7144  cef97118 ce193200 ce1bc400 7fffffff cccccccc 00000000 ce1bc000 cccccccc
[  147.501835] 7164  00000002 00000001 cccccccc 20000021 cf442000 8f442000 cccccccc 00000048
[  147.509997] 7184  cccccccc cccccccc cccccccc cccccccc cccccccc cccccccc 00000010 cccccccc
[  147.518159] 71a4  cccccccc cccccccc cccccccc 00000021 00000000 00000000 c02a84cc cef97010
[  147.526314] 71c4  00000000 00000000 00000000 00000000 00000000 00000000 00000000 ce1bd240
[  147.534476] 71e4  00000000 00000001 dead4ead ffffffff ffffffff cef971f8 cef971f8 8f443000
[  147.542638] 7204  cf443000 00000000 ffffffe0 cef97210 cef97210 c02a86f4 00000000 00000000
[  147.550800] 7224  00000000 c0f1a902 c002fe50 cef9720c ffffffff 00000000 00000000 cef97240
[  147.558955]
[  147.558955] R8: 0xc0016e00:
[  147.563213] 6e00  13c4403c 1a00001a e5953000 e3130080 13c4403c 1a000002 e5953000 e3130008
[  147.571369] 6e20  0a000012 e3844c02 e28d3014 e1a02008 e1a01007 e1a00006 eb0b3611 e3500000
[  147.579532] 6e40  159d0014 1a000007 e98d0401 e1a03009 e58d500c e1a02008 e58d4000 e1a01007
[  147.587688] 6e60  e1a00006 ebffff00 e28dd018 e8bd87f0 e3c44f8f e3844f81 eaffffea c0ef72b0
[  147.595851] 6e80  e92d4007 e3500000 e7ebe051 e1a01621 15900148 e59fc02c 10811000 e59f0028
[  147.604006] 6ea0  e59cc000 e5900000 e0410000 e59f101c e08c0280 e58d1000 e1a0100e ebfffc34
[  147.612167] 6ec0  e28dd00c e49df004 c0f1e33c c0e02fc0 c0019d50 e92d40f0 e3a05000 e1530005
[  147.620329] 6ee0  e3e04000 01520004 e1a06002 e1a07003 e59fc058 9a000007 e3500000 e59ce000
[  147.628493] Process msm_serial_hs_0 (pid: 51, stack limit = 0xce220208)
[  147.635087] Stack: (0xce221ed0 to 0xce222000)
[  147.639427] 1ec0:                                     cef971c4 00000000 cef97010 00000000
[  147.647588] 1ee0: ce1c0000 0000001d c0016e80 c02a9f70 0000c000 00000000 0000001d 00000003
[  147.655749] 1f00: cef97118 cef97010 20070113 ce1c0000 c098c8ec c02ac85c cef97118 cef97128
[  147.663908] 1f20: ce220000 c0f1a84c c098c8ec c0035680 ce1adbc0 00000000 cef97128 c00355d4
[  147.672068] 1f40: 00000000 00000000 00000000 c00357dc 00000000 00000000 00000000 cef97128
[  147.680228] 1f60: 00000000 00000001 dead4ead ffffffff ffffffff ce221f74 ce221f74 00000000
[  147.688389] 1f80: 00000001 dead4ead ffffffff ffffffff ce221f90 ce221f90 ce1adbc0 ce1adbc0
[  147.696549] 1fa0: c0035714 00000000 00000000 c000e798 00000000 00000000 00000000 00000000
[  147.704709] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  147.712868] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 00000000 00000000
[  147.721040] [<c005b130>] (mod_timer) from [<c02a9f70>] (msm_hs_submit_tx_locked+0x108/0x14c)
[  147.729455] [<c02a9f70>] (msm_hs_submit_tx_locked) from [<c02ac85c>] (msm_serial_hs_tx_work+0x64/0x14c)
[  147.738825] [<c02ac85c>] (msm_serial_hs_tx_work) from [<c0035680>] (kthread_worker_fn+0xac/0x140)
[  147.747681] [<c0035680>] (kthread_worker_fn) from [<c00357dc>] (kthread+0xc8/0xd4)
[  147.755230] [<c00357dc>] (kthread) from [<c000e798>] (ret_from_fork+0x14/0x3c)
[  147.762436] Code: 0a00002a e5973010 e3530000 1a000000 (e7f001f2)
[  147.768511] ---[ end trace c7db7e7559458adc ]---
[  147.773114] BUG: sleeping function called from invalid context at /usr/src/kernel/kernel/locking/rwsem.c:41
[  147.782828] in_atomic(): 1, irqs_disabled(): 128, pid: 51, name: msm_serial_hs_0
[  147.790205] Preemption disabled at:[<  (null)>]   (null)
[  147.795499]
[  147.796983] CPU: 0 PID: 51 Comm: msm_serial_hs_0 Tainted: G      D        3.18.140 #1
[  147.804800] [<c0014428>] (unwind_backtrace) from [<c00122ac>] (show_stack+0x10/0x14)
[  147.812524] [<c00122ac>] (show_stack) from [<c0795470>] (down_read+0x18/0x48)
[  147.819647] [<c0795470>] (down_read) from [<c002a288>] (exit_signals+0x14/0x12c)
[  147.827019] [<c002a288>] (exit_signals) from [<c0020fb8>] (do_exit+0xcc/0x8a8)
[  147.834224] [<c0020fb8>] (do_exit) from [<c00124b8>] (die+0x208/0x240)
[  147.840737] [<c00124b8>] (die) from [<c00082f0>] (do_undefinstr+0xec/0x21c)
[  147.847678] [<c00082f0>] (do_undefinstr) from [<c0012da0>] (__und_svc_finish+0x0/0x20)
[  147.855572] Exception stack(0xce221e80 to 0xce221ec8)
[  147.860613] 1e80: cef971c4 ffffc496 00000001 00000000 ffffc496 00000000 ce1c0000 cef971c4
[  147.868773] 1ea0: c0016e80 00000001 00000000 00000000 00000000 ce221ed0 c02a9f70 c005b130
[  147.876924] 1ec0: 60070193 ffffffff
[  147.880402] [<c0012da0>] (__und_svc_finish) from [<c005b130>] (mod_timer+0x7c/0x12c)
[  147.888128] [<c005b130>] (mod_timer) from [<c02a9f70>] (msm_hs_submit_tx_locked+0x108/0x14c)
[  147.896554] [<c02a9f70>] (msm_hs_submit_tx_locked) from [<c02ac85c>] (msm_serial_hs_tx_work+0x64/0x14c)
[  147.905923] [<c02ac85c>] (msm_serial_hs_tx_work) from [<c0035680>] (kthread_worker_fn+0xac/0x140)
[  147.914777] [<c0035680>] (kthread_worker_fn) from [<c00357dc>] (kthread+0xc8/0xd4)
[  147.922331] [<c00357dc>] (kthread) from [<c000e798>] (ret_from_fork+0x14/0x3c)
[  147.929533] note: msm_serial_hs_0[51] exited with preempt_count 1

[monstermichl]

Issue has been processed in the Legato forum: https://forum.legato.io/t/kernel-bug-at-usr-src-kernel-kernel-time-timer-c-806/6386