BCM wl driver crashes during roaming

Bug #1276651 reported by Prem Anand on 2014-02-05
126
This bug affects 24 people
Affects Status Importance Assigned to Milestone
bcmwl (Ubuntu)
High
Unassigned

Bug Description

Whenever my wireless connection roams from one AP to another AP, I see the following crash

[ 5089.124259] ------------[ cut here ]------------
[ 5089.124283] WARNING: CPU: 1 PID: 605 at /home/apw/COD/linux/net/wireless/sme.c:797 cfg80211_roamed+0x97/0xa0 [cfg80211]()
[ 5089.124284] Modules linked in: snd_hda_codec_hdmi snd_hda_codec_cirrus parport_pc bnep ppdev rfcomm binfmt_misc nls_iso8859_1 lib80211_crypt_tkip intel_rapl x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm crct10dif_pclmul crc32_pclmul ghash_clmulni_intel aesni_intel aes_x86_64 lrw gf128mul glue_helper ablk_helper cryptd wl(POF) hid_apple joydev hid_generic btusb bluetooth uvcvideo snd_hda_intel snd_hda_codec snd_hwdep nouveau videobuf2_vmalloc snd_pcm videobuf2_memops videobuf2_core usbhid snd_page_alloc videodev hid snd_seq_midi snd_seq_midi_event bcm5974 i915 snd_rawmidi applesmc snd_seq input_polldev mxm_wmi snd_seq_device wmi lib80211 snd_timer ttm drm_kms_helper cfg80211 snd drm mei_me soundcore microcode i2c_algo_bit mei apple_gmux lpc_ich video apple_bl mac_hid lp parport ahci sdhci_pci libahci sdhci
[ 5089.124316] CPU: 1 PID: 605 Comm: wl_event_handle Tainted: PF O 3.13.0-031300-generic #201401192235
[ 5089.124317] Hardware name: Apple Inc. MacBookPro10,1/Mac-C3EC7CD22292981F, BIOS MBP101.88Z.00EE.B03.1212211437 12/21/2012
[ 5089.124318] 000000000000031d ffff880457115d68 ffffffff8173356d 0000000000000007
[ 5089.124321] 0000000000000000 ffff880457115da8 ffffffff81067bbc ffff88045528be1a
[ 5089.124323] ffff880454dc5000 ffff8800362e6120 0000000000000095 ffff880407c603c0
[ 5089.124325] Call Trace:
[ 5089.124331] [<ffffffff8173356d>] dump_stack+0x46/0x58
[ 5089.124334] [<ffffffff81067bbc>] warn_slowpath_common+0x8c/0xc0
[ 5089.124336] [<ffffffff81067c0a>] warn_slowpath_null+0x1a/0x20
[ 5089.124345] [<ffffffffa0155ba7>] cfg80211_roamed+0x97/0xa0 [cfg80211]
[ 5089.124367] [<ffffffffa07ab578>] wl_bss_connect_done.isra.21+0x98/0x1a0 [wl]
[ 5089.124383] [<ffffffffa07ab87c>] wl_notify_connect_status+0x1fc/0x410 [wl]
[ 5089.124399] [<ffffffffa07aa185>] wl_event_handler+0x55/0x220 [wl]
[ 5089.124414] [<ffffffffa07aa130>] ? wl_get_assoc_ies+0x240/0x240 [wl]
[ 5089.124417] [<ffffffff8108c5c9>] kthread+0xc9/0xe0
[ 5089.124419] [<ffffffff8108c500>] ? flush_kthread_worker+0xb0/0xb0
[ 5089.124422] [<ffffffff817489bc>] ret_from_fork+0x7c/0xb0
[ 5089.124424] [<ffffffff8108c500>] ? flush_kthread_worker+0xb0/0xb0
[ 5089.124425] ---[ end trace 8ddb9ebe0f635ec5 ]---
[ 5099.616376] ERROR @wl_inform_single_bss : cfg80211_inform_bss_frame error
[ 5112.795658] ERROR @wl_inform_single_bss : cfg80211_inform_bss_frame error
[ 5127.215934] ERROR @wl_inform_single_bss : cfg80211_inform_bss_frame error

Prem Anand (h.prem.anand) wrote :

This issue is seen with bcmwl version 6.30.223.141 on Ubuntu 14.04

hprem@hprem-rmbp:~$ cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=14.04
DISTRIB_CODENAME=trusty
DISTRIB_DESCRIPTION="Ubuntu Trusty Tahr (development branch)"

hprem@hprem-rmbp:~$ sudo dpkg -l bcmwl-kernel-source
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Architecture Description
+++-==============================================================-====================================-====================================-==================================================================================================================================
ii bcmwl-kernel-source 6.30.223.141+bdcom-0ubuntu2 amd64 Broadcom 802.11 Linux STA wireless driver source
hprem@hprem-rmbp:~$

Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in bcmwl (Ubuntu):
status: New → Confirmed
Leo (dnbattack) wrote :

07:00.0 Network controller: Broadcom Corporation BCM43142 802.11b/g/n (rev 01)

leo@leo-SVF15A1Z2RB:~$ cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=13.10
DISTRIB_CODENAME=saucy
DISTRIB_DESCRIPTION="Ubuntu 13.10"

ii bcmwl-kernel-source 6.30.223.141+bdcom-0ubuntu1 amd64 Broadcom 802.11 Linux STA wireless driver source

onli (onli) wrote :

I get a similar error when connection to any AP:

[ 533.763420] WARNING: CPU: 0 PID: 5198 at /build/buildd/linux-3.13.0/net/wireless/sme.c:924 cfg80211_connect+0x3f9/0x430 [cfg80211]()
[ 533.763424] Modules linked in: michael_mic arc4 ip6table_filter ip6_tables iptable_filter ip_tables x_tables cuse zram(C) rfcomm bnep bluetooth nfsd auth_rpcgss nfs_acl binfmt_misc nfs lockd sunrpc fscache dm_crypt lib80211_crypt_tkip snd_hda_codec_hdmi kvm wl(POF) snd_hda_codec_realtek snd_hda_intel lib80211 snd_hda_codec cfg80211 serio_raw k10temp snd_seq_midi snd_seq_midi_event snd_hwdep snd_rawmidi snd_pcm snd_seq sp5100_tco snd_page_alloc snd_seq_device i2c_piix4 snd_timer snd soundcore mac_hid parport_pc ppdev w83l785ts asb100 hwmon_vid lp parport f2fs uvesafb pata_acpi hid_generic usbhid hid radeon mxm_wmi r8169 firewire_ohci mii firewire_core i2c_algo_bit crc_itu_t ttm wmi drm_kms_helper drm pata_atiixp ahci ati_agp libahci
[ 533.763532] CPU: 0 PID: 5198 Comm: iwconfig Tainted: PF WC O 3.13.0-29-generic #53-Ubuntu
[ 533.763537] Hardware name: Gigabyte Technology Co., Ltd. GA-990FXA-UD3/GA-990FXA-UD3, BIOS F7 05/14/2012
[ 533.763542] 00000000 00000000 f6ae1d3c c164f613 00000000 f6ae1d6c c10567ee c182ba80
[ 533.763555] 00000000 0000144e f9bb7760 0000039c f9b9ba69 f9b9ba69 e9ce3c00 e9ce3c00
[ 533.763568] f692f000 f6ae1d7c c10568b2 00000009 00000000 f6ae1da8 f9b9ba69 000000d0
[ 533.763580] Call Trace:
[ 533.763594] [<c164f613>] dump_stack+0x41/0x52
[ 533.763604] [<c10567ee>] warn_slowpath_common+0x7e/0xa0
[ 533.763649] [<f9b9ba69>] ? cfg80211_connect+0x3f9/0x430 [cfg80211]
[ 533.763691] [<f9b9ba69>] ? cfg80211_connect+0x3f9/0x430 [cfg80211]
[ 533.763700] [<c10568b2>] warn_slowpath_null+0x22/0x30
[ 533.763742] [<f9b9ba69>] cfg80211_connect+0x3f9/0x430 [cfg80211]
[ 533.763752] [<c1138fda>] ? kmemdup+0x2a/0x40
[ 533.763805] [<f9bb148e>] cfg80211_mgd_wext_connect+0x11e/0x180 [cfg80211]
[ 533.763857] [<f9bb1a54>] cfg80211_mgd_wext_siwap+0x124/0x1a0 [cfg80211]
[ 533.763908] [<f9bb00e0>] cfg80211_wext_siwap+0xf0/0x180 [cfg80211]
[ 533.763960] [<f9bafff0>] ? cfg80211_wext_siwtxpower+0x190/0x190 [cfg80211]
[ 533.763968] [<c1639f17>] ioctl_standard_call+0x67/0x390
[ 533.764020] [<f9bafff0>] ? cfg80211_wext_siwtxpower+0x190/0x190 [cfg80211]
[ 533.764028] [<c1570d21>] ? dev_get_by_name_rcu+0x51/0x70
[ 533.764037] [<c163a43d>] wext_handle_ioctl+0x1fd/0x230
[ 533.764088] [<f9bafff0>] ? cfg80211_wext_siwtxpower+0x190/0x190 [cfg80211]
[ 533.764096] [<c15851ed>] dev_ioctl+0x26d/0x4e0
[ 533.764105] [<c155b44d>] sock_ioctl+0x12d/0x250
[ 533.764112] [<c155b320>] ? sock_fasync+0x80/0x80
[ 533.764121] [<c1189b02>] do_vfs_ioctl+0x2e2/0x4d0
[ 533.764129] [<c1659bb7>] ? __do_page_fault+0x237/0x510
[ 533.764138] [<c1164d2a>] ? kmem_cache_alloc+0x2a/0x190
[ 533.764146] [<c1017977>] ? init_fpu+0x77/0xa0
[ 533.764155] [<c1657560>] ? do_debug+0x180/0x180
[ 533.764162] [<c1017835>] ? fpu_finit+0x55/0x70
[ 533.764169] [<c1189d50>] SyS_ioctl+0x60/0x80
[ 533.764178] [<c165d90d>] sysenter_do_call+0x12/0x28
[ 533.764184] ---[ end trace d35411f740b485a8 ]---

Is this related? bcmwl version 6.30.223.141 on Ubuntu 14.04

Changed in bcmwl (Ubuntu):
status: Confirmed → Triaged
importance: Undecided → High
trustin (trustin) wrote :

I have written a patch that:

- attempts to disable automatic roaming (not sure it always works), and
- works around the crash.

It seems to work fine for me in a multi-AP environment, which used to fail before the patch.

The attachment "noroaming.patch" seems to be a patch. If it isn't, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.]

tags: added: patch
trustin (trustin) wrote :
Dmitry (dmitrymq) wrote :

What is the status of the bug? I can also see the kernel crashes when roaming is used. Disabling roaming is not an option.

shivam (shivam-riky) wrote :

Can anyone please provide an update on this defect?
It is a high priority bug and have been pending for a while

Schlomo Schapiro (sschapiro) wrote :

I have this problem with a BCM43228 on Dell Latitude E6420 with Ubuntu 16.04. Had to switch to the b43 driver to get usable wifi.

If you are experiencing this bug in an Ubuntu release, please enter its first name into the tag list.

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers