BCM wl driver crashes during roaming

[Prem Anand]

Whenever my wireless connection roams from one AP to another AP, I see the following crash

[ 5089.124259] ------------[ cut here ]------------
[ 5089.124283] WARNING: CPU: 1 PID: 605 at /home/apw/COD/linux/net/wireless/sme.c:797 cfg80211_roamed+0x97/0xa0 [cfg80211]()
[ 5089.124284] Modules linked in: snd_hda_codec_hdmi snd_hda_codec_cirrus parport_pc bnep ppdev rfcomm binfmt_misc nls_iso8859_1 lib80211_crypt_tkip intel_rapl x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm crct10dif_pclmul crc32_pclmul ghash_clmulni_intel aesni_intel aes_x86_64 lrw gf128mul glue_helper ablk_helper cryptd wl(POF) hid_apple joydev hid_generic btusb bluetooth uvcvideo snd_hda_intel snd_hda_codec snd_hwdep nouveau videobuf2_vmalloc snd_pcm videobuf2_memops videobuf2_core usbhid snd_page_alloc videodev hid snd_seq_midi snd_seq_midi_event bcm5974 i915 snd_rawmidi applesmc snd_seq input_polldev mxm_wmi snd_seq_device wmi lib80211 snd_timer ttm drm_kms_helper cfg80211 snd drm mei_me soundcore microcode i2c_algo_bit mei apple_gmux lpc_ich video apple_bl mac_hid lp parport ahci sdhci_pci libahci sdhci
[ 5089.124316] CPU: 1 PID: 605 Comm: wl_event_handle Tainted: PF O 3.13.0-031300-generic #201401192235
[ 5089.124317] Hardware name: Apple Inc. MacBookPro10,1/Mac-C3EC7CD22292981F, BIOS MBP101.88Z.00EE.B03.1212211437 12/21/2012
[ 5089.124318] 000000000000031d ffff880457115d68 ffffffff8173356d 0000000000000007
[ 5089.124321] 0000000000000000 ffff880457115da8 ffffffff81067bbc ffff88045528be1a
[ 5089.124323] ffff880454dc5000 ffff8800362e6120 0000000000000095 ffff880407c603c0
[ 5089.124325] Call Trace:
[ 5089.124331] [<ffffffff8173356d>] dump_stack+0x46/0x58
[ 5089.124334] [<ffffffff81067bbc>] warn_slowpath_common+0x8c/0xc0
[ 5089.124336] [<ffffffff81067c0a>] warn_slowpath_null+0x1a/0x20
[ 5089.124345] [<ffffffffa0155ba7>] cfg80211_roamed+0x97/0xa0 [cfg80211]
[ 5089.124367] [<ffffffffa07ab578>] wl_bss_connect_done.isra.21+0x98/0x1a0 [wl]
[ 5089.124383] [<ffffffffa07ab87c>] wl_notify_connect_status+0x1fc/0x410 [wl]
[ 5089.124399] [<ffffffffa07aa185>] wl_event_handler+0x55/0x220 [wl]
[ 5089.124414] [<ffffffffa07aa130>] ? wl_get_assoc_ies+0x240/0x240 [wl]
[ 5089.124417] [<ffffffff8108c5c9>] kthread+0xc9/0xe0
[ 5089.124419] [<ffffffff8108c500>] ? flush_kthread_worker+0xb0/0xb0
[ 5089.124422] [<ffffffff817489bc>] ret_from_fork+0x7c/0xb0
[ 5089.124424] [<ffffffff8108c500>] ? flush_kthread_worker+0xb0/0xb0
[ 5089.124425] ---[ end trace 8ddb9ebe0f635ec5 ]---
[ 5099.616376] ERROR @wl_inform_single_bss : cfg80211_inform_bss_frame error
[ 5112.795658] ERROR @wl_inform_single_bss : cfg80211_inform_bss_frame error
[ 5127.215934] ERROR @wl_inform_single_bss : cfg80211_inform_bss_frame error

[Prem Anand (h.prem.anand)]

This issue is seen with bcmwl version 6.30.223.141 on Ubuntu 14.04

hprem@hprem-rmbp:~$ cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=14.04
DISTRIB_CODENAME=trusty
DISTRIB_DESCRIPTION="Ubuntu Trusty Tahr (development branch)"

hprem@hprem-rmbp:~$ sudo dpkg -l bcmwl-kernel-source
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Architecture Description
+++-==============================================================-====================================-====================================-==================================================================================================================================
ii bcmwl-kernel-source 6.30.223.141+bdcom-0ubuntu2 amd64 Broadcom 802.11 Linux STA wireless driver source
hprem@hprem-rmbp:~$

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Leo (dnbattack)]

07:00.0 Network controller: Broadcom Corporation BCM43142 802.11b/g/n (rev 01)

leo@leo-SVF15A1Z2RB:~$ cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=13.10
DISTRIB_CODENAME=saucy
DISTRIB_DESCRIPTION="Ubuntu 13.10"

ii bcmwl-kernel-source 6.30.223.141+bdcom-0ubuntu1 amd64 Broadcom 802.11 Linux STA wireless driver source

[onli (onli)]

I get a similar error when connection to any AP:

[ 533.763420] WARNING: CPU: 0 PID: 5198 at /build/buildd/linux-3.13.0/net/wireless/sme.c:924 cfg80211_connect+0x3f9/0x430 [cfg80211]()
[ 533.763424] Modules linked in: michael_mic arc4 ip6table_filter ip6_tables iptable_filter ip_tables x_tables cuse zram(C) rfcomm bnep bluetooth nfsd auth_rpcgss nfs_acl binfmt_misc nfs lockd sunrpc fscache dm_crypt lib80211_crypt_tkip snd_hda_codec_hdmi kvm wl(POF) snd_hda_codec_realtek snd_hda_intel lib80211 snd_hda_codec cfg80211 serio_raw k10temp snd_seq_midi snd_seq_midi_event snd_hwdep snd_rawmidi snd_pcm snd_seq sp5100_tco snd_page_alloc snd_seq_device i2c_piix4 snd_timer snd soundcore mac_hid parport_pc ppdev w83l785ts asb100 hwmon_vid lp parport f2fs uvesafb pata_acpi hid_generic usbhid hid radeon mxm_wmi r8169 firewire_ohci mii firewire_core i2c_algo_bit crc_itu_t ttm wmi drm_kms_helper drm pata_atiixp ahci ati_agp libahci
[ 533.763532] CPU: 0 PID: 5198 Comm: iwconfig Tainted: PF WC O 3.13.0-29-generic #53-Ubuntu
[ 533.763537] Hardware name: Gigabyte Technology Co., Ltd. GA-990FXA-UD3/GA-990FXA-UD3, BIOS F7 05/14/2012
[ 533.763542] 00000000 00000000 f6ae1d3c c164f613 00000000 f6ae1d6c c10567ee c182ba80
[ 533.763555] 00000000 0000144e f9bb7760 0000039c f9b9ba69 f9b9ba69 e9ce3c00 e9ce3c00
[ 533.763568] f692f000 f6ae1d7c c10568b2 00000009 00000000 f6ae1da8 f9b9ba69 000000d0
[ 533.763580] Call Trace:
[ 533.763594] [<c164f613>] dump_stack+0x41/0x52
[ 533.763604] [<c10567ee>] warn_slowpath_common+0x7e/0xa0
[ 533.763649] [<f9b9ba69>] ? cfg80211_connect+0x3f9/0x430 [cfg80211]
[ 533.763691] [<f9b9ba69>] ? cfg80211_connect+0x3f9/0x430 [cfg80211]
[ 533.763700] [<c10568b2>] warn_slowpath_null+0x22/0x30
[ 533.763742] [<f9b9ba69>] cfg80211_connect+0x3f9/0x430 [cfg80211]
[ 533.763752] [<c1138fda>] ? kmemdup+0x2a/0x40
[ 533.763805] [<f9bb148e>] cfg80211_mgd_wext_connect+0x11e/0x180 [cfg80211]
[ 533.763857] [<f9bb1a54>] cfg80211_mgd_wext_siwap+0x124/0x1a0 [cfg80211]
[ 533.763908] [<f9bb00e0>] cfg80211_wext_siwap+0xf0/0x180 [cfg80211]
[ 533.763960] [<f9bafff0>] ? cfg80211_wext_siwtxpower+0x190/0x190 [cfg80211]
[ 533.763968] [<c1639f17>] ioctl_standard_call+0x67/0x390
[ 533.764020] [<f9bafff0>] ? cfg80211_wext_siwtxpower+0x190/0x190 [cfg80211]
[ 533.764028] [<c1570d21>] ? dev_get_by_name_rcu+0x51/0x70
[ 533.764037] [<c163a43d>] wext_handle_ioctl+0x1fd/0x230
[ 533.764088] [<f9bafff0>] ? cfg80211_wext_siwtxpower+0x190/0x190 [cfg80211]
[ 533.764096] [<c15851ed>] dev_ioctl+0x26d/0x4e0
[ 533.764105] [<c155b44d>] sock_ioctl+0x12d/0x250
[ 533.764112] [<c155b320>] ? sock_fasync+0x80/0x80
[ 533.764121] [<c1189b02>] do_vfs_ioctl+0x2e2/0x4d0
[ 533.764129] [<c1659bb7>] ? __do_page_fault+0x237/0x510
[ 533.764138] [<c1164d2a>] ? kmem_cache_alloc+0x2a/0x190
[ 533.764146] [<c1017977>] ? init_fpu+0x77/0xa0
[ 533.764155] [<c1657560>] ? do_debug+0x180/0x180
[ 533.764162] [<c1017835>] ? fpu_finit+0x55/0x70
[ 533.764169] [<c1189d50>] SyS_ioctl+0x60/0x80
[ 533.764178] [<c165d90d>] sysenter_do_call+0x12/0x28
[ 533.764184] ---[ end trace d35411f740b485a8 ]---

Is this related? bcmwl version 6.30.223.141 on Ubuntu 14.04

[Andre Bogus (bogusandre)]

Could be related to https://aur.archlinux.org/packages/broadcom-wl/

[trustin (trustin)]

I have written a patch that:

- attempts to disable automatic roaming (not sure it always works), and
- works around the crash.

It seems to work fine for me in a multi-AP environment, which used to fail before the patch.

[Ubuntu Foundations Team Bug Bot (crichton)]

The attachment "noroaming.patch" seems to be a patch. If it isn't, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.]

[Dmitry (dmitrymq)]

What is the status of the bug? I can also see the kernel crashes when roaming is used. Disabling roaming is not an option.

[shivam (shivam-riky)]

Can anyone please provide an update on this defect?
It is a high priority bug and have been pending for a while

[Schlomo Schapiro (sschapiro)]

I have this problem with a BCM43228 on Dell Latitude E6420 with Ubuntu 16.04. Had to switch to the b43 driver to get usable wifi.

[Alberto Salvia Novella (es20490446e)]

If you are experiencing this bug in an Ubuntu release, please enter its first name into the tag list.