Wi-Fi Bluetooth for Linux

Roam prof command on Embedded Artists board is not working/not supported:

fw version is : wl0: May 22 2020 21:24:34 version 7.45.214 (9c83742 CY) FWID 01-59feefd4.

The firmware which we have on our device is from yocto-release for embedded artists board. This is the repo  : git://github.com/murata-wireless which is used in manifest file for meta-murata-wireless layer.

root@imx7ulpea-ucom:/etc/wpa_supplicant# wl roam_prof b 0 -65 -100 10, -65 20 10 120 20 1 100                                                                                                                    

Unable to get wlc_ver iovar -45.

I'm getting this error.  

Best regards,

Tijana

Is there a possibility to use roaming feature with  wpa_supplicant? 

In our test environment we are using two APs configured with same ssid,password. Both ssids are in the same band, only thing which is different is that the APs are set to use different channels (e.g 1 and 5).

We've tried roaming with wpa_supplicant,  with set roam_off = 1 and also roam_off=0. In those cases roaming is not working , device is switched from one AP to another using 4-way handshake. 

If roaming parameters are set using wl tool (band,delta,scan_period,roam_trigger) and roam_off = 0 we can see that device is switching without 4-way handshake.  As I understand in that case internal roaming is performed. 

I've followed this topic which is similar to this question :https://community.infineon.com/t5/Wi-Fi-Combo/11R-Fast-Roaming-support-on-CYW43455/m-p/121621  but with there's no progress so far. 

Is there anything that should be enabled/disabled in fw, or some patch that should be added to wpa_supplicant to be able to do roaming? If so could you provide us with it?

wl version is 1.26 RC0.0

wpa_supplicant version is 2.9.

I'm trying to test cypress-fmac-v5.10.9-2021_1020.zip in my environment (imx6sx-sdb/SDIO Adapter CYW9SDIOAD/WiFi module CYW43455).
When linux v5.10.9, usdhc3 (mmc2) of imx6sx-sdb does not recognize SDIO.
If SD card, it is recognized .

If linux v5.4.x, the below boot message is displayed at the boot time without any problem, and it connects to WiFi module normally.
    mmc2: new high speed SDIO card at address 0001

Somebody help me?

Hi Everyone,

We get a very reproducible crash of the brcmfmac wifi driver under specific traffic circumstances that I will detail below.

Product info:

Device: Raspberry Pi 3B+

OS:  Raspberry Pi OS 5.10.63

WLAN CHIP:  BCM43455

Wireless  firmware version: 7.45.206

We had the exact same crash almost 2 years ago with Raspbian 4.19.75 and wireless firmware 7.45.189, so the problem is not new.

Transmission parameters: channel 36 (5.18 GHz) - MCS3 - HT20.

dmesg crash report:

[ 6582.744261] device mon0 entered promiscuous mode
[ 6595.671916] ieee80211 phy1: brcmf_fw_crashed: Firmware has halted or crashed
[ 6599.210435] device mon0 left promiscuous mode
[ 6601.763640] brcmfmac: brcmf_sdio_bus_rxctl: resumed on timeout
[ 6601.764088] brcmfmac: brcmf_sdio_checkdied: firmware trap in dongle
[ 6601.764297] brcmfmac: dongle trap info: type 0x4 @ epc 0x001aabb0
                 cpsr 0x2000019f spsr 0x200001bf sp 0x0025fdb8
                 lr   0x001aad23 pc   0x001aabb0 offset 0x25fd60
                 r0   0x00218b58 r1   0x00218b58 r2 0x0025fe34 r3 0x00000000
                 r4   0x0022bbbc r5   0x0000ffff r6 0x00000000 r7 0xbe23f199
[ 6601.764324] ieee80211 phy1: _brcmf_set_multicast_list: Setting mcast_list failed, -110
[ 6604.323574] brcmfmac: brcmf_sdio_bus_rxctl: resumed on timeout
[ 6604.324003] brcmfmac: brcmf_sdio_checkdied: firmware trap in dongle
[ 6604.324233] brcmfmac: dongle trap info: type 0x4 @ epc 0x001aabb0
                 cpsr 0x2000019f spsr 0x200001bf sp 0x0025fdb8
                 lr   0x001aad23 pc   0x001aabb0 offset 0x25fd60
                 r0   0x00218b58 r1   0x00218b58 r2 0x0025fe34 r3 0x00000000
                 r4   0x0022bbbc r5   0x0000ffff r6 0x00000000 r7 0xbe23f199
[ 6604.324259] ieee80211 phy1: _brcmf_set_multicast_list: Setting allmulti failed, -110
[ 6606.883511] brcmfmac: brcmf_sdio_bus_rxctl: resumed on timeout
[ 6606.883946] brcmfmac: brcmf_sdio_checkdied: firmware trap in dongle
[ 6606.884168] brcmfmac: dongle trap info: type 0x4 @ epc 0x001aabb0
                 cpsr 0x2000019f spsr 0x200001bf sp 0x0025fdb8
                 lr   0x001aad23 pc   0x001aabb0 offset 0x25fd60
                 r0   0x00218b58 r1   0x00218b58 r2 0x0025fe34 r3 0x00000000
                 r4   0x0022bbbc r5   0x0000ffff r6 0x00000000 r7 0xbe23f199
[ 6606.884206] ieee80211 phy1: _brcmf_set_multicast_list: Setting BRCMF_C_SET_PROMISC failed, -110
[ 6609.443453] brcmfmac: brcmf_sdio_bus_rxctl: resumed on timeout
[ 6609.443866] brcmfmac: brcmf_sdio_checkdied: firmware trap in dongle
[ 6609.444084] brcmfmac: dongle trap info: type 0x4 @ epc 0x001aabb0
                 cpsr 0x2000019f spsr 0x200001bf sp 0x0025fdb8
                 lr   0x001aad23 pc   0x001aabb0 offset 0x25fd60
                 r0   0x00218b58 r1   0x00218b58 r2 0x0025fe34 r3 0x00000000
                 r4   0x0022bbbc r5   0x0000ffff r6 0x00000000 r7 0xbe23f199
[ 6612.003397] brcmfmac: brcmf_sdio_bus_rxctl: resumed on timeout
[ 6612.003804] brcmfmac: brcmf_sdio_checkdied: firmware trap in dongle
[ 6612.004023] brcmfmac: dongle trap info: type 0x4 @ epc 0x001aabb0
                 cpsr 0x2000019f spsr 0x200001bf sp 0x0025fdb8
                 lr   0x001aad23 pc   0x001aabb0 offset 0x25fd60
                 r0   0x00218b58 r1   0x00218b58 r2 0x0025fe34 r3 0x00000000
                 r4   0x0022bbbc r5   0x0000ffff r6 0x00000000 r7 0xbe23f199

 How to reproduce this crash:

It basically involves injecting three "small enough" frames back-to-back. We use nexmon to configure the BCM43455 in monitor mode, and pcap_inject() to inject frames. We forge our own 802.11 frames with radiotap headers.

When making three calls in a row to pcap_inject() with frames of any size smaller than about 600 bytes, the Broadcom driver crashes upon the third call, while the first two frames are transmitted correctly and received by a nearby machine.

On the other hand, making these three calls in a row with frames bigger than about 650 bytes never produces a crash. Making only two back-to-back calls to pcap_inject(), even with frames below 600 bytes, also never crashes the driver.

When inserting a small delay between the second and third call, here is what we get :

• with a delay any smaller than 500 µs: the driver crashes upon the third injection for any frame size below about 600 bytes. For frames above about 650 bytes, no crash;
• with a delay bigger than 600 µs: no crash whatever the frames size, whether big or small.

When repeating the experience on different machines, we noted that the delay above could take other values, possibly due to different radio transmission parameters. However the behavior was always the same as described above.

It looks like some sort of traffic shaping mechanism is acting up inside the driver - and failing under particular circumstances.

If you feel that more extensive tests under various conditions could help sort out this thing, please do not hesitate to ask, as the manipulation is really immediate.

Thanks for help!

Xavier

Hi，experts 

we use wifi driver cypress-fmac-v5.4.18-2021_0527.zip for AW-NM372SM(chipset is CYW43438) . This wifi driver downloaded form https://www.cypress.com/documentation/software-and-drivers-archive/wifi-bt-linux-archive.

Our linux version is v3.10.108.

we encountered an uncommon WiFi driver oops，as below：

[ 09:20:23][224389.020000] ios->clock=400000
[ 09:20:23]#######ping failure,time is 2021-11-08 09:20:56,The total_count is 174936,failure_count is 19528########
[ 09:20:23][224389.370000] ios->clock=400000
[ 09:20:23][224389.370000] ios->clock=400000
[ 09:20:23][224389.540000] ios->clock=400000
[ 09:20:23][224389.560000] mmc0: queuing unknown CIS tuple 0x80 (2 bytes)
[ 09:20:23][224389.560000] mmc0: queuing unknown CIS tuple 0x80 (3 bytes)
[ 09:20:23][224389.570000] mmc0: queuing unknown CIS tuple 0x80 (3 bytes)
[ 09:20:23][224389.580000] mmc0: queuing unknown CIS tuple 0x80 (7 bytes)
[ 09:20:23][224389.590000] mmc0: queuing unknown CIS tuple 0x81 (1 bytes)
[ 09:20:24][224389.780000] ios->clock=400000
[ 09:20:24][224389.780000] ios->clock=50000000
[ 09:20:24][224389.780000] ios->clock=50000000
[ 09:20:24][224389.790000] mmc0: new high speed SDIO card at address 0001
[ 09:20:24][224389.800000] brcmf_chip_recognition found AXI chip: BCM43430/1
[ 09:20:24][224389.840000] brcmf_chip_cores_check [1 ] core 0x800:49 base 0x18000000 wrap 0x18100000
[ 09:20:24][224389.880000] brcmf_chip_cores_check [2 ] core 0x812:39 base 0x18001000 wrap 0x18101000
[ 09:20:24][224389.920000] brcmf_chip_cores_check [3 ] core 0x829:21 base 0x18002000 wrap 0x18102000
[ 09:20:24][224389.920000] brcmf_chip_cores_check [4 ] core 0x82a:9 base 0x18003000 wrap 0x18103000
[ 09:20:24][224389.950000] brcmf_chip_cores_check [5 ] core 0x80e:22 base 0x18004000 wrap 0x18104000
[ 09:20:24][224389.950000] brcmf_chip_cores_check [6 ] core 0x135:0 base 0x00000000 wrap 0x18105000
[ 09:20:24][224389.970000] brcmf_chip_cores_check [7 ] core 0x240:0 base 0x00000000 wrap 0x18106000
[ 09:20:24][224390.000000] brcmf_chip_get_raminfo RAM: base=0x0 size=524288 (0x80000) sr=65536 (0x10000)
[ 09:20:24][224390.010000] brcmf_chip_setup ccrev=49, pmurev=24, pmucaps=0x39d25f18
[ 09:20:24][224390.010000] brcmf_get_module_param Enter, bus=0, chip=43430, rev=1
[ 09:20:24][224390.020000] brcmf_sdio_drivestrengthinit No SDIO driver strength init needed for chip BCM43430/1 rev 1 pmurev 24
[ 09:20:24][224390.030000] brcmf_sdio_probe completed!!
[ 09:20:24][224390.030000] brcmfmac: brcmf_fw_alloc_request: using cypress/cyfmac43430-sdio for chip BCM43430/1
[ 09:20:24][224390.090000] brcmf_sdio_verifymemory Compare RAM dl & ul at 0x00000000; size=419798
[ 09:20:24][224390.180000] brcmf_sdio_verifymemory Compare RAM dl & ul at 0x0007fda0; size=608
[ 09:20:24][224390.310000] brcmf_sdio_firmware_callback enable F2: err=0
[ 09:20:24][224390.310000] brcmf_sdio_sr_init SR enabled
[ 09:20:24][224390.330000] brcmf_bus_change_state ignoring transition, bus not attached yet
[ 09:20:24][224390.340000] brcmf_sdio_readshared sdpcm_shared address 0x000469C0
[ 09:20:24][224390.360000] brcmf_sdio_readshared sdpcm_shared address 0x000469C0
[ 09:20:24][224390.360000] ------------[ cut here ]------------
[ 09:20:24][224390.360000] Kernel BUG at c0028590 [verbose debug info unavailable]
[ 09:20:24][224390.360000] Internal error: Oops - BUG: 0 [#1] PREEMPT ARM
[ 09:20:24][224390.360000] Modules linked in: qmi_wwan option brcmfmac(O) brcmutil(O) cfg80211(O) compat(O) usb_f_rndis u_ether usb_f_fs libcomposite usb_wwan watchdogd(O)
[ 09:20:24][224390.360000] CPU: 0 PID: 4308 Comm: kworker/0:1 Tainted: G O 3.10.108 #2
[ 09:20:24][224390.360000] Workqueue: events request_firmware_work_func
[ 09:20:24][224390.360000] task: c3898b00 ti: c19d6000 task.ti: c19d6000
[ 09:20:24][224390.360000] PC is at add_timer+0x18/0x28
[ 09:20:24][224390.360000] LR is at brcmf_sdio_wd_timer+0x80/0x418 [brcmfmac]
[ 09:20:24][224390.360000] pc : [<c0028590>] lr : [<bf09ad60>] psr: a0000013
[ 09:20:24][224390.360000] sp : c19d7e10 ip : c19d7e20 fp : c19d7e1c
[ 09:20:24][224390.360000] r10: 00000001 r9 : 00000000 r8 : 00000000
[ 09:20:24][224390.360000] r7 : 00000000 r6 : c15fcb48 r5 : c1a819e4 r4 : c1a81800
[ 09:20:24][224390.360000] r3 : 0155ef4c r2 : c1635178 r1 : 00000014 r0 : c1a819e4
[ 09:20:24][224390.360000] Flags: NzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment kernel
[ 09:20:24][224390.360000] Control: 0005317f Table: 01004000 DAC: 00000017
[ 09:20:24][224390.360000] Process kworker/0:1 (pid: 4308, stack limit = 0xc19d61b8)
[ 09:20:24][224390.360000] Stack: (0xc19d7e10 to 0xc19d8000)
[ 09:20:24][224390.360000] 7e00: c19d7e3c c19d7e20 bf09ad60 c0028588
[ 09:20:24][224390.360000] 7e20: c1a80400 c1a81800 bf0a3b3c 00000000 c19d7e94 c19d7e40 bf09e46c bf09acf0
[ 09:20:24][224390.360000] 7e40: 00000260 00000000 00000000 00000002 c227b980 00000006 c102f108 00000000
[ 09:20:24][224390.360000] 7e60: 00000379 00000000 c01bdb54 c1ae61e0 c19d7e9c c227b1c0 00000000 00000000
[ 09:20:24][224390.360000] 7e80: c19d6000 00000000 c19d7ec4 c19d7e98 bf092380 bf09dcd4 c19d7ecc c1ae61c0
[ 09:20:24][224390.360000] 7ea0: c227b240 c227b240 c227b240 c15fd068 00000000 c16d0c00 c19d7eec c19d7ec8
[ 09:20:24][224390.360000] 7ec0: c01bdc70 bf092334 00000001 c15fd850 c1a46840 c1ae61a0 c15fd068 c1a46840
[ 09:20:24][224390.360000] 7ee0: c19d7f2c c19d7ef0 c0032c60 c01bdc40 c15fd068 c1a46840 c15fd068 c19d6000
[ 09:20:24][224390.360000] 7f00: c15fd068 c1a46840 c15fd068 c19d6000 c1a46858 c15fd078 00000000 00000000
[ 09:20:24][224390.360000] 7f20: c19d7f64 c19d7f30 c0033b88 c0032a70 00000000 c1a46840 c003398c c18c5e7c
[ 09:20:24][224390.360000] 7f40: 00000000 c1a46840 c003398c 00000000 00000000 00000000 c19d7fac c19d7f68
[ 09:20:24][224390.360000] 7f60: c0038fcc c003399c c19d7f94 00000000 c0040a90 c1a46840 00000000 c19d7f7c
[ 09:20:24][224390.360000] 7f80: c19d7f7c 00000000 c19d7f88 c19d7f88 c18c5e7c c0038f18 00000000 00000000
[ 09:20:24][224390.360000] 7fa0: 00000000 c19d7fb0 c000e1f8 c0038f28 00000000 00000000 00000000 00000000
[ 09:20:24][224390.360000] 7fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[ 09:20:24][224390.360000] 7fe0: 00000000 00000000 00000000 00000000 00000013 00000000 e282200c eaffffd8
[ 09:20:24][224390.360000] Backtrace:
[ 09:20:24][224390.360000] [<c0028578>] (add_timer+0x0/0x28) from [<bf09ad60>] (brcmf_sdio_wd_timer+0x80/0x418 [brcmfmac])
[ 09:20:24][224390.360000] [<bf09ace0>] (brcmf_sdio_wd_timer+0x0/0x418 [brcmfmac]) from [<bf09e46c>] (brcmf_sdio_firmware_callback+0x7a8/0x94c [brcmfmac])
[ 09:20:24][224390.360000] r7:00000000 r6:bf0a3b3c r5:c1a81800 r4:c1a80400
[ 09:20:24][224390.360000] [<bf09dcc4>] (brcmf_sdio_firmware_callback+0x0/0x94c [brcmfmac]) from [<bf092380>] (brcmf_fw_request_done+0x5c/0xe0 [brcmfmac])
[ 09:20:24][224390.360000] [<bf092324>] (brcmf_fw_request_done+0x0/0xe0 [brcmfmac]) from [<c01bdc70>] (request_firmware_work_func+0x40/0x60)
[ 09:20:24][224390.360000] r8:c16d0c00 r7:00000000 r6:c15fd068 r5:c227b240 r4:c227b240
[ 09:20:24][224390.360000] [<c01bdc30>] (request_firmware_work_func+0x0/0x60) from [<c0032c60>] (process_one_work+0x200/0x350)
[ 09:20:24][224390.360000] r4:c1a46840
[ 09:20:24][224390.360000] [<c0032a60>] (process_one_work+0x0/0x350) from [<c0033b88>] (worker_thread+0x1fc/0x3a0)
[ 09:20:24][224390.360000] [<c003398c>] (worker_thread+0x0/0x3a0) from [<c0038fcc>] (kthread+0xb4/0xc0)
[ 09:20:24][224390.360000] [<c0038f18>] (kthread+0x0/0xc0) from [<c000e1f8>] (ret_from_fork+0x14/0x3c)
[ 09:20:24][224390.360000] r7:00000000 r6:00000000 r5:c0038f18 r4:c18c5e7c
[ 09:20:24][224390.360000] Code: e24cb004 e5902000 e3520000 0a000000 (e7f001f2)
[ 09:20:25][224390.360000] ---[ end trace d888266c12f52e94 ]---
[ 09:20:25][224390.360000] Kernel panic - not syncing: Fatal exception
[ 09:20:26][224390.360000] Rebooting in 5 seconds..
[ 09:20:26]NUC970 IBR 20151008.1735
[ 09:20:26]No Key
[ 09:20:26]Boot from SPI
[ 09:20:26]
[ 09:20:26]
[ 09:20:26]U-Boot 3.0.0 (Sep 24 2020 - 16:25:28)
[ 09:20:26]
[ 09:20:26]CPU: NUC976
[ 09:20:26]DRAM: 64 MiB

。。。

Any help would be appreciated.

I'm trying to use band 13 in Australia. We can't see a network set to that band, we see this setting if we run "iw list", so we should be able to see them.

Frequencies:
* 2412 MHz [1] (20.0 dBm)
* 2417 MHz [2] (20.0 dBm)
* 2422 MHz [3] (20.0 dBm)
* 2427 MHz [4] (20.0 dBm)
* 2432 MHz [5] (20.0 dBm)
* 2437 MHz [6] (20.0 dBm)
* 2442 MHz [7] (20.0 dBm)
* 2447 MHz [8] (20.0 dBm)
* 2452 MHz [9] (20.0 dBm)
* 2457 MHz [10] (20.0 dBm)
* 2462 MHz [11] (20.0 dBm)
* 2467 MHz [12] (20.0 dBm)
* 2472 MHz [13] (20.0 dBm)
* 2484 MHz [14] (disabled)

What settings do we need to change to ensure that it works correctly?
I have attached the files I'm using for this. Are they correct?