Wireless 8265 / 8275 crashing on creating TDLS connection

[Florian Klug]

The Intel 8265 / 8275 Wireless in my Lenovo ThinkPad X1 Yoga (Gen 3) keeps constantly crashing with

Jun 28 21:09:46 thinkflurl wpa_supplicant[882]: TDLS: Creating peer entry for 1c:23:2c:6e:90:09
Jun 28 21:09:46 thinkflurl wpa_supplicant[882]: TDLS: Dialog Token in TPK M1 1
Jun 28 21:09:46 thinkflurl kernel: iwlwifi 0000:02:00.0: Microcode SW error detected. Restarting 0x82000000.

I'm reporting this against the linux-firmware package because I found this bug report https://bugzilla.kernel.org/show_bug.cgi?id=203055 and the firmware posted in comment 1 fixed the crashes. But the thing is, on Jun 28 21:09:46 this crash happend the first time after months of trouble free wifi. And in dpkg.log I don't see any updates to this package before the crash. So I have no clue, what caused this.

What I expected to happen:
I expected a stable wifi connection

What happens:
Wifi keeps crashing

ProblemType: Bug
DistroRelease: Ubuntu 19.04
Package: linux-firmware 1.178.2 [modified: lib/firmware/iwlwifi-8000C-36.ucode lib/firmware/iwlwifi-8265-36.ucode]
ProcVersionSignature: Ubuntu 5.0.0-20.21-generic 5.0.8
Uname: Linux 5.0.0-20-generic x86_64
ApportVersion: 2.20.10-0ubuntu27
Architecture: amd64
CurrentDesktop: XFCE
Date: Fri Jul 12 20:46:10 2019
Dependencies:

InstallationDate: Installed on 2019-04-06 (97 days ago)
InstallationMedia: Ubuntu 19.04 "Disco Dingo" - Alpha amd64 (20190326.2)
PackageArchitecture: all
SourcePackage: linux-firmware
UpgradeStatus: No upgrade log present (probably fresh install)

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[ellisonleao (ellisonleao)]

Having same issues with x1 carbon 6th gen. Using b/firmware/iwlwifi-8265-36.ucode right now. The

Before the crash i have:

❯ ethtool -i wlp2s0
driver: iwlwifi
version: 5.3.0-7629-generic
firmware-version: 36.77d01142.0

After the crash:

❯ dmesg | grep iwlwifi

[ 4.082948] iwlwifi 0000:02:00.0: Found debug destination: EXTERNAL_DRAM
[ 4.082950] iwlwifi 0000:02:00.0: Found debug configuration: 0
[ 4.083454] iwlwifi 0000:02:00.0: loaded firmware version 36.77d01142.0 op_mode iwlmvm
[ 4.152591] iwlwifi 0000:02:00.0: Detected Intel(R) Dual Band Wireless AC 8265, REV=0x230
[ 4.161466] iwlwifi 0000:02:00.0: Applying debug destination EXTERNAL_DRAM
[ 4.161884] iwlwifi 0000:02:00.0: Allocated 0x00400000 bytes for firmware monitor.
[ 4.226869] iwlwifi 0000:02:00.0: base HW address: <OMMITED>
[ 4.307274] iwlwifi 0000:02:00.0 wlp2s0: renamed from wlan0
[ 5.892975] iwlwifi 0000:02:00.0: Applying debug destination EXTERNAL_DRAM
[ 6.025759] iwlwifi 0000:02:00.0: Applying debug destination EXTERNAL_DRAM
[ 6.094195] iwlwifi 0000:02:00.0: FW already configured (0) - re-configuring
[ 19.943463] iwlwifi 0000:02:00.0: Error sending SCAN_ABORT_UMAC: time out after 2000ms.
[ 19.943475] iwlwifi 0000:02:00.0: Current CMD queue read_ptr 54 write_ptr 55
[ 19.960932] WARNING: CPU: 4 PID: 1057 at drivers/net/wireless/intel/iwlwifi/pcie/trans.c:2015 iwl_trans_pcie_grab_nic_access+0x1f9/0x230 [iwlwifi]
[ 19.960933] Modules linked in: mei_hdcp aufs overlay binfmt_misc dm_crypt nls_iso8859_1 snd_soc_skl snd_soc_hdac_hda snd_hda_ext_core snd_soc_skl_ipc snd_soc_sst_ipc snd_hda_codec_hdmi snd_soc_sst_dsp snd_soc_acpi_intel_match intel_rapl_msr snd_soc_acpi iwlmvm snd_soc_core snd_hda_codec_realtek snd_hda_codec_generic snd_compress mac80211 ac97_bus snd_pcm_dmaengine x86_pkg_temp_thermal intel_powerclamp libarc4 coretemp snd_hda_intel snd_seq_midi snd_seq_midi_event snd_hda_codec kvm_intel snd_hda_core snd_rawmidi snd_hwdep btusb kvm uvcvideo videobuf2_vmalloc videobuf2_memops joydev videobuf2_v4l2 btrtl btbcm input_leds btintel irqbypass intel_cstate bluetooth snd_seq snd_pcm r8188eu(C) serio_raw iwlwifi videobuf2_common wmi_bmof intel_xhci_usb_role_switch intel_rapl_perf thinkpad_acpi lib80211 videodev intel_wmi_thunderbolt mei_me processor_thermal_device ecdh_generic nvram intel_rapl_common mc intel_pch_thermal intel_soc_dts_iosf mei roles ecc ledtrig_audio cfg80211 ucsi_acpi typec_ucsi
[ 19.960969] RIP: 0010:iwl_trans_pcie_grab_nic_access+0x1f9/0x230 [iwlwifi]
[ 19.960980] iwl_write_prph+0x3e/0x90 [iwlwifi]
[ 19.960983] iwl_force_nmi+0x53/0x60 [iwlwifi]
[ 19.960987] iwl_trans_pcie_sync_nmi+0x1f1/0x260 [iwlwifi]
[ 19.960990] iwl_pcie_send_hcmd_sync+0x3ca/0x4b0 [iwlwifi]
[ 19.960996] iwl_trans_pcie_send_hcmd+0x34/0xe0 [iwlwifi]
[ 19.961002] iwl_trans_send_cmd+0x5d/0xc0 [iwlwifi]
[ 19.961089] iwlwifi 0000:02:00.0: iwlwifi transaction failed, dumping registers
[ 19.961090] iwlwifi 0000:02:00.0: iwlwifi device config registers:
[ 19.961270] iwlwifi 0000:02:00.0: 00000000: 24fd8086 00100000 02800078 00000000 00000004 00000000 00000000 00000000
[ 19.961271] iwlwifi 0000:02:00.0: 00000020: 00000000 00000000 00...

[Pellaeon Lin (pellaeon)]

I worked around this bug by manually downloading iwlwifi-8000C-36.ucode and iwlwifi-8265-36.ucode from https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/ and then installing them in /lib/firmware . Now I have firmware version 36.77d01142.0 and it seemed to solve the issue. The network card has been stable for a day or so. Here's my note: https://nyllep.wordpress.com/2020/04/09/updating-linux-iwlwifi-firmware/

I hope the developer can backport the fix, because this essentially can be used for denial-of-service attack. Any client on the same wifi network can just initiate a TDLS connection setup request and it will crash the network interface.

[Besmir Zanaj (besmirzanaj-gmail)]

adding my dmesg

[You-Sheng Yang (vicamo)]

This currently affects Eoan/Focal that has iwlwifi-8265-36.ucode of core45-152 release[1]. However, I don't have a determinant way to verify this. Please advice. @Besmir, @Pellaeon, @ellisonleao and @Florian.

[1]: https://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware.git/commit/?id=40e4162adfc91390f6fbbd8269f9439832af1dde

[Brian Murray (brian-murray)]

The Eoan Ermine has reached end of life, so this bug will not be fixed for that release

[Besmir Zanaj (besmirzanaj-gmail)]

havent had this issue recently. hope the latest updates have fixed that in focal too