Warning in brcmfmac/core.c:958 triggered when removing interface

[ceisserer]

I am using my raspberry pi 3 in an environment with a rather weak wifi signal with many re-connects.
Because wpa_supplicant caused some problems in this environment (it doesn't try to re-connect after X unscuccessful connects) I am running a watchdog-script which simply does "systemctl restart wpa_supplicant" in case it detects the connection is down.

With this setup I find the following kernel trace in syslog once a week or so:

Linux raspberrypi 6.6.62+rpt-rpi-v8 raspberrypi/bookworm-feedback#1 SMP PREEMPT Debian 1:6.6.62-1+rpt1 (2024-11-25) aarch64 GNU/Linux

wlan0 IEEE 802.11 ESSID:"abcdefg"
Mode:Managed Frequency:2.437 GHz Access Point: .........
Bit Rate=19.5 Mb/s Tx-Power=31 dBm
Retry short limit:7 RTS thr:off Fragment thr:off
Encryption key:off
Power Management:off
Link Quality=36/70 Signal level=-74 dBm
Rx invalid nwid:0 Rx invalid crypt:0 Rx invalid frag:0
Tx excessive retries:84 Invalid misc:0 Missed beacon:0

[2014821.093325] ------------[ cut here ]------------
[2014821.093348] WARNING: CPU: 2 PID: 1074613 at drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c:958 brcmf_remove_interface+0x22c/0x288 [brcmfmac]
[2014821.093457] Modules linked in: overlay vc4 brcmfmac_wcc snd_soc_hdmi_codec lz4 lz4_compress drm_display_helper zram zsmalloc cec drm_dma_helper brcmfmac drm_kms_helper brcmutil pl2303 binfmt_misc ch341 cfg80211 snd_soc_core ftdi_sio snd_compress raspberrypi_hwmon usbserial snd_pcm_dmaengine bcm2835_codec(C) rfkill v4l2_mem2mem bcm2835_v4l2(C) bcm2835_isp(C) bcm2835_mmal_vchiq(C) videobuf2_dma_contig videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videodev snd_bcm2835(C) raspberrypi_gpiomem snd_pcm w1_therm videobuf2_common snd_timer vc_sm_cma(C) snd w1_gpio mc wire cn sg uio_pdrv_genirq uio fuse drm drm_panel_orientation_quirks backlight dm_mod ip_tables x_tables ipv6 btrfs blake2b_generic xor xor_neon raid6_pq dwc2 i2c_bcm2835
[2014821.093722] CPU: 2 PID: 1074613 Comm: kworker/2:0 Tainted: G WC 6.6.62+rpt-rpi-v8 raspberrypi/bookworm-feedback#1 Debian 1:6.6.62-1+rpt1
[2014821.093735] Hardware name: Raspberry Pi 3 Model B Rev 1.2 (DT)
[2014821.093744] Workqueue: events brcmf_fweh_event_worker [brcmfmac]
[2014821.093819] pstate: 00000005 (nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[2014821.093830] pc : brcmf_remove_interface+0x22c/0x288 [brcmfmac]
[2014821.093902] lr : brcmf_fweh_event_worker+0x338/0x500 [brcmfmac]
[2014821.093973] sp : ffffffc080c13c90
[2014821.093979] x29: ffffffc080c13c90 x28: ffffff8002f38a68 x27: ffffff80034d8250
[2014821.093996] x26: ffffff80034d8200 x25: ffffffe714514958 x24: dead000000000100
[2014821.094013] x23: dead000000000122 x22: ffffff8002f3aa90 x21: ffffff8002f3aa88
[2014821.094030] x20: ffffffe714514938 x19: ffffff8005004a00 x18: 0000000000000000
[2014821.094047] x17: ffffff98cb0d5000 x16: ffffffe772d216f0 x15: 0000000000000000
[2014821.094064] x14: 00008db9ac4f9000 x13: ffffffe772d5cc38 x12: 00000000f5257d14
[2014821.094080] x11: 00000000000000a4 x10: 0000000000001a60 x9 : ffffffe7144f1f78
[2014821.094097] x8 : ffffff80367f9ac0 x7 : 0000000000000003 x6 : ffffff8002f388c0
[2014821.094113] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000001
[2014821.094129] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000
[2014821.094146] Call trace:
[2014821.094152] brcmf_remove_interface+0x22c/0x288 [brcmfmac]
[2014821.094225] brcmf_fweh_event_worker+0x338/0x500 [brcmfmac]
[2014821.094298] process_one_work+0x148/0x3b8
[2014821.094313] worker_thread+0x32c/0x450
[2014821.094323] kthread+0x11c/0x128
[2014821.094336] ret_from_fork+0x10/0x20
[2014821.094350] ---[ end trace 0000000000000000 ]---

[lurch]

@popcornmix Should this be transferred to the Linux repo?

[popcornmix]

Yes transferred as it appears to be an issue in the linux kernel.