iwlwifi disconnect and crash - intel wifi7
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
HWE Next |
Fix Released
|
High
|
AaronMa | ||
OEM Priority Project |
New
|
Undecided
|
Unassigned | ||
linux (Ubuntu) |
Fix Released
|
High
|
AaronMa | ||
Jammy |
Invalid
|
Undecided
|
Unassigned | ||
Mantic |
Fix Released
|
High
|
Unassigned | ||
linux-oem-6.5 (Ubuntu) |
Invalid
|
Undecided
|
Unassigned | ||
Jammy |
Fix Released
|
High
|
Unassigned | ||
Mantic |
Invalid
|
Undecided
|
Unassigned |
Bug Description
iwlwifi disconnecting and crashing when I using Wifi 2.4GHz.
------------[ cut here ]------------
Invalid rxb from HW 0
WARNING: CPU: 14 PID: 896 at drivers/
Modules linked in: ccm vboxdrv(OE) rfcomm cmac algif_hash algif_skcipher af_alg bnep btusb btrtl btbcm btintel btmtk bluetooth ecdh_generic input_leds joydev ecc intel_rapl_msr intel_rapl_common intel_uncore_
xhci_pci xhci_pci_renesas nvme_common video wmi mac_hid
CPU: 14 PID: 896 Comm: irq/160-iwlwifi Tainted: P W OE 6.5.0-26-generic #26~22.04.1-Ubuntu
Hardware name: ASRock Z790 Nova WiFi/Z790 Nova WiFi, BIOS 3.09 12/26/2023
RIP: 0010:iwl_
Code: e9 8b 43 34 83 43 30 08 83 e8 08 89 43 34 e9 70 fe ff ff 44 89 f0 89 d6 45 89 e6 41 89 c4 48 c7 c7 a8 cb 53 c4 e8 42 e4 62 e8 <0f> 0b 4c 89 ff e8 e8 3b ff ff 8b 55 d4 85 d2 0f 95 c0 41 21 c6 e9
RSP: 0018:ffffb91d80
RAX: 0000000000000000 RBX: ffff956747353c30 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffb91d803e0e78 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001007
R13: 0000000000000015 R14: 0000000000000000 R15: ffff956746a30028
FS: 000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000002659c472000 CR3: 0000000112e8e000 CR4: 0000000000752ee0
PKRU: 55555554
Call Trace:
<IRQ>
? show_regs+0x6d/0x80
? __warn+0x89/0x160
? iwl_pcie_
? report_
? handle_
? exc_invalid_
? asm_exc_
? iwl_pcie_
? iwl_pcie_
? free_unref_
iwl_pcie_
? skb_free_
__napi_
net_rx_
? __irq_wake_
__do_softirq+
? __pfx_irq_
do_softirq.
</IRQ>
<TASK>
__local_
iwl_pcie_
irq_thread_
irq_thread+
? __pfx_irq_
? __pfx_irq_
kthread+0xef/0x120
? __pfx_kthread+
ret_from_
? __pfx_kthread+
ret_from_
</TASK>
---[ end trace 0000000000000000 ]---
iwlwifi 0000:05:00.0: Microcode SW error detected. Restarting 0x0.
iwlwifi 0000:05:00.0: Start IWL Error Log Dump:
iwlwifi 0000:05:00.0: Transport status: 0x0000004A, valid: 6
iwlwifi 0000:05:00.0: Loaded firmware version: 83.ec13314b.0 gl-c0-fm-
iwlwifi 0000:05:00.0: 0x00000084 | NMI_INTERRUPT_
iwlwifi 0000:05:00.0: 0x00000003 | trm_hw_status0
iwlwifi 0000:05:00.0: 0x00000000 | trm_hw_status1
iwlwifi 0000:05:00.0: 0x002C280A | branchlink2
iwlwifi 0000:05:00.0: 0x00009328 | interruptlink1
iwlwifi 0000:05:00.0: 0x00009328 | interruptlink2
iwlwifi 0000:05:00.0: 0x0000F46C | data1
iwlwifi 0000:05:00.0: 0x01000000 | data2
iwlwifi 0000:05:00.0: 0x00000000 | data3
iwlwifi 0000:05:00.0: 0xA0005E44 | beacon time
iwlwifi 0000:05:00.0: 0x2806818F | tsf low
iwlwifi 0000:05:00.0: 0x00000000 | tsf hi
iwlwifi 0000:05:00.0: 0x00000000 | time gp1
iwlwifi 0000:05:00.0: 0x0BB840A7 | time gp2
iwlwifi 0000:05:00.0: 0x00000001 | uCode revision type
iwlwifi 0000:05:00.0: 0x00000053 | uCode version major
iwlwifi 0000:05:00.0: 0xEC13314B | uCode version minor
iwlwifi 0000:05:00.0: 0x00000472 | hw version
iwlwifi 0000:05:00.0: 0x00C80002 | board version
iwlwifi 0000:05:00.0: 0x03B7001C | hcmd
iwlwifi 0000:05:00.0: 0x67F68000 | isr0
iwlwifi 0000:05:00.0: 0x01400000 | isr1
iwlwifi 0000:05:00.0: 0x48F0001A | isr2
iwlwifi 0000:05:00.0: 0x00C0040A | isr3
iwlwifi 0000:05:00.0: 0x10000000 | isr4
iwlwifi 0000:05:00.0: 0x03B6001C | last cmd Id
iwlwifi 0000:05:00.0: 0x0000F46C | wait_event
iwlwifi 0000:05:00.0: 0x00304288 | l2p_control
iwlwifi 0000:05:00.0: 0x00019C34 | l2p_duration
iwlwifi 0000:05:00.0: 0x02001A5A | l2p_mhvalid
iwlwifi 0000:05:00.0: 0x000001D8 | l2p_addr_match
iwlwifi 0000:05:00.0: 0x00000009 | lmpm_pmg_sel
iwlwifi 0000:05:00.0: 0x00000000 | timestamp
iwlwifi 0000:05:00.0: 0x0000C828 | flow_handler
iwlwifi 0000:05:00.0: Start IWL Error Log Dump:
iwlwifi 0000:05:00.0: Transport status: 0x0000004A, valid: 6
iwlwifi 0000:05:00.0: Loaded firmware version: 83.ec13314b.0 gl-c0-fm-
iwlwifi 0000:05:00.0: 0x00000084 | NMI_INTERRUPT_
iwlwifi 0000:05:00.0: 0x000002F0 | trm_hw_status0
iwlwifi 0000:05:00.0: 0x00000000 | trm_hw_status1
iwlwifi 0000:05:00.0: 0x002C280A | branchlink2
iwlwifi 0000:05:00.0: 0x002B79C6 | interruptlink1
iwlwifi 0000:05:00.0: 0x002B79C6 | interruptlink2
iwlwifi 0000:05:00.0: 0x002A50FC | data1
iwlwifi 0000:05:00.0: 0x01000000 | data2
iwlwifi 0000:05:00.0: 0x00000000 | data3
iwlwifi 0000:05:00.0: 0xA0005E44 | beacon time
iwlwifi 0000:05:00.0: 0x2806818F | tsf low
iwlwifi 0000:05:00.0: 0x00000000 | tsf hi
iwlwifi 0000:05:00.0: 0x00000000 | time gp1
iwlwifi 0000:05:00.0: 0x0BB840A6 | time gp2
iwlwifi 0000:05:00.0: 0x00000001 | uCode revision type
iwlwifi 0000:05:00.0: 0x00000053 | uCode version major
iwlwifi 0000:05:00.0: 0xEC13314B | uCode version minor
iwlwifi 0000:05:00.0: 0x00000472 | hw version
iwlwifi 0000:05:00.0: 0x00C80002 | board version
iwlwifi 0000:05:00.0: 0x809DFC4D | hcmd
iwlwifi 0000:05:00.0: 0x00020000 | isr0
iwlwifi 0000:05:00.0: 0x00000000 | isr1
iwlwifi 0000:05:00.0: 0x48F00002 | isr2
iwlwifi 0000:05:00.0: 0x00C0000C | isr3
iwlwifi 0000:05:00.0: 0x00000000 | isr4
iwlwifi 0000:05:00.0: 0x00000000 | last cmd Id
iwlwifi 0000:05:00.0: 0x002A50FC | wait_event
iwlwifi 0000:05:00.0: 0x00000000 | l2p_control
iwlwifi 0000:05:00.0: 0x00000000 | l2p_duration
iwlwifi 0000:05:00.0: 0x003C0000 | l2p_mhvalid
iwlwifi 0000:05:00.0: 0x00000007 | l2p_addr_match
iwlwifi 0000:05:00.0: 0x00000028 | lmpm_pmg_sel
iwlwifi 0000:05:00.0: 0x00000000 | timestamp
iwlwifi 0000:05:00.0: 0x0000C828 | flow_handler
iwlwifi 0000:05:00.0: Start IWL Error Log Dump:
iwlwifi 0000:05:00.0: Transport status: 0x0000004A, valid: 7
iwlwifi 0000:05:00.0: 0x20000066 | NMI_INTERRUPT_HOST
iwlwifi 0000:05:00.0: 0x00000000 | umac branchlink1
iwlwifi 0000:05:00.0: 0xC00809B0 | umac branchlink2
iwlwifi 0000:05:00.0: 0x802698E4 | umac interruptlink1
iwlwifi 0000:05:00.0: 0x0107AD64 | umac interruptlink2
iwlwifi 0000:05:00.0: 0x01000000 | umac data1
iwlwifi 0000:05:00.0: 0x0107AD64 | umac data2
iwlwifi 0000:05:00.0: 0x00000000 | umac data3
iwlwifi 0000:05:00.0: 0x00000053 | umac major
iwlwifi 0000:05:00.0: 0xEC13314B | umac minor
iwlwifi 0000:05:00.0: 0x0BB8409B | frame pointer
iwlwifi 0000:05:00.0: 0xD00D625C | stack pointer
iwlwifi 0000:05:00.0: 0x0016010C | last host cmd
iwlwifi 0000:05:00.0: 0x00000400 | isr status reg
iwlwifi 0000:05:00.0: TCM1 status:
iwlwifi 0000:05:00.0: 0x00000070 | error ID
iwlwifi 0000:05:00.0: 0x0000184E | tcm branchlink2
iwlwifi 0000:05:00.0: 0x00001C44 | tcm interruptlink1
iwlwifi 0000:05:00.0: 0x00001C44 | tcm interruptlink2
iwlwifi 0000:05:00.0: 0x40000000 | tcm data1
iwlwifi 0000:05:00.0: 0xDEADBEEF | tcm data2
iwlwifi 0000:05:00.0: 0xDEADBEEF | tcm data3
iwlwifi 0000:05:00.0: 0x000018AC | tcm log PC
iwlwifi 0000:05:00.0: 0x00803FF0 | tcm frame pointer
iwlwifi 0000:05:00.0: 0x00803F4C | tcm stack pointer
iwlwifi 0000:05:00.0: 0x00000000 | tcm msg ID
iwlwifi 0000:05:00.0: 0x4000000F | tcm ISR status
iwlwifi 0000:05:00.0: 0x00000003 | tcm HW status[0]
iwlwifi 0000:05:00.0: 0x00000000 | tcm HW status[1]
iwlwifi 0000:05:00.0: 0x00019C34 | tcm HW status[2]
iwlwifi 0000:05:00.0: 0x40024148 | tcm HW status[3]
iwlwifi 0000:05:00.0: 0x00000001 | tcm HW status[4]
iwlwifi 0000:05:00.0: 0x00000000 | tcm SW status[0]
iwlwifi 0000:05:00.0: RCM1 status:
iwlwifi 0000:05:00.0: 0x00000070 | error ID
iwlwifi 0000:05:00.0: 0x00001B9E | rcm branchlink2
iwlwifi 0000:05:00.0: 0x00000648 | rcm interruptlink1
iwlwifi 0000:05:00.0: 0x00000648 | rcm interruptlink2
iwlwifi 0000:05:00.0: 0x20000000 | rcm data1
iwlwifi 0000:05:00.0: 0xDEADBEEF | rcm data2
iwlwifi 0000:05:00.0: 0xDEADBEEF | rcm data3
iwlwifi 0000:05:00.0: 0x00001C00 | rcm log PC
iwlwifi 0000:05:00.0: 0x00803FF0 | rcm frame pointer
iwlwifi 0000:05:00.0: 0x00803EB8 | rcm stack pointer
iwlwifi 0000:05:00.0: 0x00000000 | rcm msg ID
iwlwifi 0000:05:00.0: 0x20003080 | rcm ISR status
iwlwifi 0000:05:00.0: 0x3E6202CD | frame HW status
iwlwifi 0000:05:00.0: 0x00000000 | LMAC-to-RCM request mbox
iwlwifi 0000:05:00.0: 0x00000000 | RCM-to-LMAC request mbox
iwlwifi 0000:05:00.0: 0x00004288 | MAC header control
iwlwifi 0000:05:00.0: 0x72DF0990 | MAC header addr1 low
iwlwifi 0000:05:00.0: 0x02001A5A | MAC header info
iwlwifi 0000:05:00.0: 0x00000000 | MAC header error
iwlwifi 0000:05:00.0: TCM2 status:
iwlwifi 0000:05:00.0: 0x00000070 | error ID
iwlwifi 0000:05:00.0: 0x0000184E | tcm branchlink2
iwlwifi 0000:05:00.0: 0x00001C44 | tcm interruptlink1
iwlwifi 0000:05:00.0: 0x00001C44 | tcm interruptlink2
iwlwifi 0000:05:00.0: 0x40000000 | tcm data1
iwlwifi 0000:05:00.0: 0xDEADBEEF | tcm data2
iwlwifi 0000:05:00.0: 0xDEADBEEF | tcm data3
iwlwifi 0000:05:00.0: 0x000018AC | tcm log PC
iwlwifi 0000:05:00.0: 0x00803FF0 | tcm frame pointer
iwlwifi 0000:05:00.0: 0x00803F4C | tcm stack pointer
iwlwifi 0000:05:00.0: 0x00000000 | tcm msg ID
iwlwifi 0000:05:00.0: 0x40000000 | tcm ISR status
iwlwifi 0000:05:00.0: 0x000002F0 | tcm HW status[0]
iwlwifi 0000:05:00.0: 0x00000000 | tcm HW status[1]
iwlwifi 0000:05:00.0: 0x00000000 | tcm HW status[2]
iwlwifi 0000:05:00.0: 0x00004008 | tcm HW status[3]
iwlwifi 0000:05:00.0: 0x00000000 | tcm HW status[4]
iwlwifi 0000:05:00.0: 0x00000000 | tcm SW status[0]
iwlwifi 0000:05:00.0: RCM2 status:
iwlwifi 0000:05:00.0: 0x00000070 | error ID
iwlwifi 0000:05:00.0: 0x00001B9E | rcm branchlink2
iwlwifi 0000:05:00.0: 0x00002178 | rcm interruptlink1
iwlwifi 0000:05:00.0: 0x00002178 | rcm interruptlink2
iwlwifi 0000:05:00.0: 0x20000000 | rcm data1
iwlwifi 0000:05:00.0: 0xDEADBEEF | rcm data2
iwlwifi 0000:05:00.0: 0xDEADBEEF | rcm data3
iwlwifi 0000:05:00.0: 0x00001C00 | rcm log PC
iwlwifi 0000:05:00.0: 0x00803FF0 | rcm frame pointer
iwlwifi 0000:05:00.0: 0x00803F4C | rcm stack pointer
iwlwifi 0000:05:00.0: 0x00000000 | rcm msg ID
iwlwifi 0000:05:00.0: 0x20000000 | rcm ISR status
iwlwifi 0000:05:00.0: 0x00020400 | frame HW status
iwlwifi 0000:05:00.0: 0x00000000 | LMAC-to-RCM request mbox
iwlwifi 0000:05:00.0: 0x00000000 | RCM-to-LMAC request mbox
iwlwifi 0000:05:00.0: 0x00000000 | MAC header control
iwlwifi 0000:05:00.0: 0x00000000 | MAC header addr1 low
iwlwifi 0000:05:00.0: 0x003C0000 | MAC header info
iwlwifi 0000:05:00.0: 0x00000000 | MAC header error
iwlwifi 0000:05:00.0: IML/ROM dump:
iwlwifi 0000:05:00.0: 0x00000B03 | IML/ROM error/state
iwlwifi 0000:05:00.0: 0x0000DED3 | IML/ROM data1
iwlwifi 0000:05:00.0: 0x00000080 | IML/ROM WFPM_AUTH_KEY_0
iwlwifi 0000:05:00.0: Fseq Registers:
iwlwifi 0000:05:00.0: 0x66A00000 | FSEQ_ERROR_CODE
iwlwifi 0000:05:00.0: 0x80B00004 | FSEQ_TOP_
iwlwifi 0000:05:00.0: 0x00550000 | FSEQ_CNVIO_
iwlwifi 0000:05:00.0: 0x0000AA14 | FSEQ_OTP_VERSION
iwlwifi 0000:05:00.0: 0x0000000F | FSEQ_TOP_
iwlwifi 0000:05:00.0: 0x4552414E | FSEQ_ALIVE_TOKEN
iwlwifi 0000:05:00.0: 0x02001910 | FSEQ_CNVI_ID
iwlwifi 0000:05:00.0: 0x02001910 | FSEQ_CNVR_ID
iwlwifi 0000:05:00.0: 0x02001910 | CNVI_AUX_MISC_CHIP
iwlwifi 0000:05:00.0: 0x02001910 | CNVR_AUX_MISC_CHIP
iwlwifi 0000:05:00.0: 0x8F0F1BEF | CNVR_SCU_
iwlwifi 0000:05:00.0: 0x00000000 | CNVR_SCU_
iwlwifi 0000:05:00.0: 0x00550000 | FSEQ_PREV_
iwlwifi 0000:05:00.0: 0x00B00004 | FSEQ_WIFI_
iwlwifi 0000:05:00.0: 0x00B00004 | FSEQ_BT_
iwlwifi 0000:05:00.0: 0x000000BF | FSEQ_CLASS_
iwlwifi 0000:05:00.0: UMAC CURRENT PC: 0x8026935a
iwlwifi 0000:05:00.0: LMAC1 CURRENT PC: 0xd0
iwlwifi 0000:05:00.0: LMAC2 CURRENT PC: 0xd0
iwlwifi 0000:05:00.0: UMAC CURRENT PC 1: 0x80269358
iwlwifi 0000:05:00.0: TCM1 CURRENT PC: 0xd0
iwlwifi 0000:05:00.0: RCM1 CURRENT PC: 0xd0
iwlwifi 0000:05:00.0: RCM2 CURRENT PC: 0xd0
iwlwifi 0000:05:00.0: Function Scratch status:
iwlwifi 0000:05:00.0: 0x01010100 | Func Scratch
iwlwifi 0000:05:00.0: WRT: Collecting data: ini trigger 4 fired (delay=0ms).
ieee80211 phy0: Hardware restart was requested
iwlwifi 0000:05:00.0: WRT: Invalid buffer destination
iwlwifi 0000:05:00.0: Failed to send recovery cmd blob was invalid 1
SRU Justification:
==============
[Impact]
iwlwifi crashed with the following error log:
[ 282.045897] Invalid rxb from HW 0
[ 282.045941] WARNING: CPU: 3 PID: 784 at drivers/
......
[ 282.046175] CPU: 3 PID: 784 Comm: irq/185-iwlwifi Not tainted 6.5.0-1016-oem #17-Ubuntu
[ 282.046181] RIP: 0010:iwl_
[ 282.046247] Call Trace:
[ 282.046250] <IRQ>
[ 282.046254] ? show_regs+0x6d/0x80
[ 282.046264] ? __warn+0x89/0x160
[ 282.046269] ? iwl_pcie_
[ 282.046308] ? report_
[ 282.046315] ? handle_
[ 282.046319] ? exc_invalid_
[ 282.046323] ? asm_exc_
[ 282.046331] ? iwl_pcie_
[ 282.046366] ? iwl_pcie_
[ 282.046400] ? enqueue_
[ 282.046405] iwl_pcie_
[ 282.046440] __napi_
[ 282.046445] net_rx_
[ 282.046449] ? __irq_wake_
[ 282.046455] __do_softirq+
[ 282.046461] ? __pfx_irq_
[ 282.046465] do_softirq.
[ 282.046471] </IRQ>
[ 282.046472] <TASK>
[ 282.046473] __local_
[ 282.046479] iwl_pcie_
[ 282.046515] irq_thread_
[ 282.046519] irq_thread+
[ 282.046549] ? __pfx_irq_
[ 282.046554] ? __pfx_irq_
[ 282.046558] kthread+0xef/0x120
[ 282.046564] ? __pfx_kthread+
[ 282.046570] ret_from_
[ 282.046575] ? __pfx_kthread+
[ 282.046580] ret_from_
[ 282.046586] </TASK>
[ 282.046587] ---[ end trace 0000000000000000 ]---
[ 282.046976] iwlwifi 0000:09:00.0: Microcode SW error detected. Restarting 0x0.
[Fix]
From stable updates:
commit c1c1039135c3 ("wifi: iwlwifi: increase number of RX buffers for EHT devices")
increase number of RX buffers for new wifi card BE200, it needs one more
commit to support the bigger queue's RB status / write pointer.
[Test]
Tested on hardware, Intel BE200 works fine after stress with iperf3 for 20 mins.
[Where problems could occur]
It may break Intel wifi driver.
CVE References
Changed in linux-signed-hwe-6.5 (Ubuntu): | |
assignee: | nobody → Anthony Wong (anthonywong) |
Changed in linux-signed-hwe-6.5 (Ubuntu): | |
assignee: | Anthony Wong (anthonywong) → AaronMa (mapengyu) |
importance: | Undecided → High |
status: | New → In Progress |
affects: | linux-signed-hwe-6.5 (Ubuntu) → linux (Ubuntu) |
Changed in linux (Ubuntu): | |
importance: | High → Undecided |
status: | In Progress → New |
Changed in linux (Ubuntu Jammy): | |
status: | New → Invalid |
Changed in linux-oem-6.5 (Ubuntu Mantic): | |
status: | New → Invalid |
Changed in linux-oem-6.5 (Ubuntu): | |
status: | New → Invalid |
tags: | added: oem-priority originate-from-2057871 sutton |
tags: | added: originate-from-2059064 |
description: | updated |
Changed in hwe-next: | |
assignee: | nobody → AaronMa (mapengyu) |
Changed in linux (Ubuntu Mantic): | |
status: | New → In Progress |
Changed in linux-oem-6.5 (Ubuntu Jammy): | |
status: | New → In Progress |
Changed in hwe-next: | |
status: | New → In Progress |
Changed in linux (Ubuntu): | |
status: | New → In Progress |
Changed in linux (Ubuntu Mantic): | |
importance: | Undecided → High |
Changed in linux-oem-6.5 (Ubuntu Jammy): | |
importance: | Undecided → High |
Changed in hwe-next: | |
importance: | Undecided → High |
Changed in linux (Ubuntu): | |
importance: | Undecided → High |
Changed in linux (Ubuntu Mantic): | |
status: | In Progress → Fix Committed |
Changed in linux-oem-6.5 (Ubuntu Jammy): | |
status: | In Progress → Fix Committed |
tags: | added: originate-from-2060420 stella |
Changed in linux (Ubuntu): | |
status: | In Progress → Fix Released |
Changed in hwe-next: | |
status: | In Progress → Fix Released |
I also noticed 100% utilization of a single CPU thread (by the kernel) when this happens. /bugs.launchpad .net/ubuntu/ +source/ linux-signed- hwe-6.5/ +bug/2057484 (
Probably same issue as https:/
kernel worker event freezes during traffic on iwlwifi)