BCM wl driver crashes during roaming

Bug #1276651 reported by Prem Anand
This bug affects 26 people
Affects Status Importance Assigned to Milestone
bcmwl (Ubuntu)

Bug Description

Whenever my wireless connection roams from one AP to another AP, I see the following crash

[ 5089.124259] ------------[ cut here ]------------
[ 5089.124283] WARNING: CPU: 1 PID: 605 at /home/apw/COD/linux/net/wireless/sme.c:797 cfg80211_roamed+0x97/0xa0 [cfg80211]()
[ 5089.124284] Modules linked in: snd_hda_codec_hdmi snd_hda_codec_cirrus parport_pc bnep ppdev rfcomm binfmt_misc nls_iso8859_1 lib80211_crypt_tkip intel_rapl x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm crct10dif_pclmul crc32_pclmul ghash_clmulni_intel aesni_intel aes_x86_64 lrw gf128mul glue_helper ablk_helper cryptd wl(POF) hid_apple joydev hid_generic btusb bluetooth uvcvideo snd_hda_intel snd_hda_codec snd_hwdep nouveau videobuf2_vmalloc snd_pcm videobuf2_memops videobuf2_core usbhid snd_page_alloc videodev hid snd_seq_midi snd_seq_midi_event bcm5974 i915 snd_rawmidi applesmc snd_seq input_polldev mxm_wmi snd_seq_device wmi lib80211 snd_timer ttm drm_kms_helper cfg80211 snd drm mei_me soundcore microcode i2c_algo_bit mei apple_gmux lpc_ich video apple_bl mac_hid lp parport ahci sdhci_pci libahci sdhci
[ 5089.124316] CPU: 1 PID: 605 Comm: wl_event_handle Tainted: PF O 3.13.0-031300-generic #201401192235
[ 5089.124317] Hardware name: Apple Inc. MacBookPro10,1/Mac-C3EC7CD22292981F, BIOS MBP101.88Z.00EE.B03.1212211437 12/21/2012
[ 5089.124318] 000000000000031d ffff880457115d68 ffffffff8173356d 0000000000000007
[ 5089.124321] 0000000000000000 ffff880457115da8 ffffffff81067bbc ffff88045528be1a
[ 5089.124323] ffff880454dc5000 ffff8800362e6120 0000000000000095 ffff880407c603c0
[ 5089.124325] Call Trace:
[ 5089.124331] [<ffffffff8173356d>] dump_stack+0x46/0x58
[ 5089.124334] [<ffffffff81067bbc>] warn_slowpath_common+0x8c/0xc0
[ 5089.124336] [<ffffffff81067c0a>] warn_slowpath_null+0x1a/0x20
[ 5089.124345] [<ffffffffa0155ba7>] cfg80211_roamed+0x97/0xa0 [cfg80211]
[ 5089.124367] [<ffffffffa07ab578>] wl_bss_connect_done.isra.21+0x98/0x1a0 [wl]
[ 5089.124383] [<ffffffffa07ab87c>] wl_notify_connect_status+0x1fc/0x410 [wl]
[ 5089.124399] [<ffffffffa07aa185>] wl_event_handler+0x55/0x220 [wl]
[ 5089.124414] [<ffffffffa07aa130>] ? wl_get_assoc_ies+0x240/0x240 [wl]
[ 5089.124417] [<ffffffff8108c5c9>] kthread+0xc9/0xe0
[ 5089.124419] [<ffffffff8108c500>] ? flush_kthread_worker+0xb0/0xb0
[ 5089.124422] [<ffffffff817489bc>] ret_from_fork+0x7c/0xb0
[ 5089.124424] [<ffffffff8108c500>] ? flush_kthread_worker+0xb0/0xb0
[ 5089.124425] ---[ end trace 8ddb9ebe0f635ec5 ]---
[ 5099.616376] ERROR @wl_inform_single_bss : cfg80211_inform_bss_frame error
[ 5112.795658] ERROR @wl_inform_single_bss : cfg80211_inform_bss_frame error
[ 5127.215934] ERROR @wl_inform_single_bss : cfg80211_inform_bss_frame error

Tags: bionic patch
Revision history for this message
Prem Anand (h.prem.anand) wrote :

This issue is seen with bcmwl version on Ubuntu 14.04

hprem@hprem-rmbp:~$ cat /etc/lsb-release
DISTRIB_DESCRIPTION="Ubuntu Trusty Tahr (development branch)"

hprem@hprem-rmbp:~$ sudo dpkg -l bcmwl-kernel-source
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Architecture Description
ii bcmwl-kernel-source amd64 Broadcom 802.11 Linux STA wireless driver source

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in bcmwl (Ubuntu):
status: New → Confirmed
Revision history for this message
Leo (dnbattack) wrote :

07:00.0 Network controller: Broadcom Corporation BCM43142 802.11b/g/n (rev 01)

leo@leo-SVF15A1Z2RB:~$ cat /etc/lsb-release

ii bcmwl-kernel-source amd64 Broadcom 802.11 Linux STA wireless driver source

Revision history for this message
onli (onli) wrote :

I get a similar error when connection to any AP:

[ 533.763420] WARNING: CPU: 0 PID: 5198 at /build/buildd/linux-3.13.0/net/wireless/sme.c:924 cfg80211_connect+0x3f9/0x430 [cfg80211]()
[ 533.763424] Modules linked in: michael_mic arc4 ip6table_filter ip6_tables iptable_filter ip_tables x_tables cuse zram(C) rfcomm bnep bluetooth nfsd auth_rpcgss nfs_acl binfmt_misc nfs lockd sunrpc fscache dm_crypt lib80211_crypt_tkip snd_hda_codec_hdmi kvm wl(POF) snd_hda_codec_realtek snd_hda_intel lib80211 snd_hda_codec cfg80211 serio_raw k10temp snd_seq_midi snd_seq_midi_event snd_hwdep snd_rawmidi snd_pcm snd_seq sp5100_tco snd_page_alloc snd_seq_device i2c_piix4 snd_timer snd soundcore mac_hid parport_pc ppdev w83l785ts asb100 hwmon_vid lp parport f2fs uvesafb pata_acpi hid_generic usbhid hid radeon mxm_wmi r8169 firewire_ohci mii firewire_core i2c_algo_bit crc_itu_t ttm wmi drm_kms_helper drm pata_atiixp ahci ati_agp libahci
[ 533.763532] CPU: 0 PID: 5198 Comm: iwconfig Tainted: PF WC O 3.13.0-29-generic #53-Ubuntu
[ 533.763537] Hardware name: Gigabyte Technology Co., Ltd. GA-990FXA-UD3/GA-990FXA-UD3, BIOS F7 05/14/2012
[ 533.763542] 00000000 00000000 f6ae1d3c c164f613 00000000 f6ae1d6c c10567ee c182ba80
[ 533.763555] 00000000 0000144e f9bb7760 0000039c f9b9ba69 f9b9ba69 e9ce3c00 e9ce3c00
[ 533.763568] f692f000 f6ae1d7c c10568b2 00000009 00000000 f6ae1da8 f9b9ba69 000000d0
[ 533.763580] Call Trace:
[ 533.763594] [<c164f613>] dump_stack+0x41/0x52
[ 533.763604] [<c10567ee>] warn_slowpath_common+0x7e/0xa0
[ 533.763649] [<f9b9ba69>] ? cfg80211_connect+0x3f9/0x430 [cfg80211]
[ 533.763691] [<f9b9ba69>] ? cfg80211_connect+0x3f9/0x430 [cfg80211]
[ 533.763700] [<c10568b2>] warn_slowpath_null+0x22/0x30
[ 533.763742] [<f9b9ba69>] cfg80211_connect+0x3f9/0x430 [cfg80211]
[ 533.763752] [<c1138fda>] ? kmemdup+0x2a/0x40
[ 533.763805] [<f9bb148e>] cfg80211_mgd_wext_connect+0x11e/0x180 [cfg80211]
[ 533.763857] [<f9bb1a54>] cfg80211_mgd_wext_siwap+0x124/0x1a0 [cfg80211]
[ 533.763908] [<f9bb00e0>] cfg80211_wext_siwap+0xf0/0x180 [cfg80211]
[ 533.763960] [<f9bafff0>] ? cfg80211_wext_siwtxpower+0x190/0x190 [cfg80211]
[ 533.763968] [<c1639f17>] ioctl_standard_call+0x67/0x390
[ 533.764020] [<f9bafff0>] ? cfg80211_wext_siwtxpower+0x190/0x190 [cfg80211]
[ 533.764028] [<c1570d21>] ? dev_get_by_name_rcu+0x51/0x70
[ 533.764037] [<c163a43d>] wext_handle_ioctl+0x1fd/0x230
[ 533.764088] [<f9bafff0>] ? cfg80211_wext_siwtxpower+0x190/0x190 [cfg80211]
[ 533.764096] [<c15851ed>] dev_ioctl+0x26d/0x4e0
[ 533.764105] [<c155b44d>] sock_ioctl+0x12d/0x250
[ 533.764112] [<c155b320>] ? sock_fasync+0x80/0x80
[ 533.764121] [<c1189b02>] do_vfs_ioctl+0x2e2/0x4d0
[ 533.764129] [<c1659bb7>] ? __do_page_fault+0x237/0x510
[ 533.764138] [<c1164d2a>] ? kmem_cache_alloc+0x2a/0x190
[ 533.764146] [<c1017977>] ? init_fpu+0x77/0xa0
[ 533.764155] [<c1657560>] ? do_debug+0x180/0x180
[ 533.764162] [<c1017835>] ? fpu_finit+0x55/0x70
[ 533.764169] [<c1189d50>] SyS_ioctl+0x60/0x80
[ 533.764178] [<c165d90d>] sysenter_do_call+0x12/0x28
[ 533.764184] ---[ end trace d35411f740b485a8 ]---

Is this related? bcmwl version on Ubuntu 14.04

Changed in bcmwl (Ubuntu):
status: Confirmed → Triaged
importance: Undecided → High
Revision history for this message
Andre Bogus (bogusandre) wrote :
Revision history for this message
trustin (trustin) wrote :

I have written a patch that:

- attempts to disable automatic roaming (not sure it always works), and
- works around the crash.

It seems to work fine for me in a multi-AP environment, which used to fail before the patch.

Revision history for this message
Ubuntu Foundations Team Bug Bot (crichton) wrote :

The attachment "noroaming.patch" seems to be a patch. If it isn't, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.]

tags: added: patch
Revision history for this message
trustin (trustin) wrote :
Revision history for this message
Dmitry (dmitrymq) wrote :

What is the status of the bug? I can also see the kernel crashes when roaming is used. Disabling roaming is not an option.

Revision history for this message
shivam (shivam-riky) wrote :

Can anyone please provide an update on this defect?
It is a high priority bug and have been pending for a while

Revision history for this message
Schlomo Schapiro (sschapiro) wrote :

I have this problem with a BCM43228 on Dell Latitude E6420 with Ubuntu 16.04. Had to switch to the b43 driver to get usable wifi.

Revision history for this message
Alberto Salvia Novella (es20490446e) wrote :

If you are experiencing this bug in an Ubuntu release, please enter its first name into the tag list.

tags: added: bionic
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.