Wireless 8265 / 8275 crashing on creating TDLS connection

Bug #1836414 reported by Florian Klug
This bug affects 5 people
Affects Status Importance Assigned to Milestone
linux-firmware (Ubuntu)

Bug Description

The Intel 8265 / 8275 Wireless in my Lenovo ThinkPad X1 Yoga (Gen 3) keeps constantly crashing with

Jun 28 21:09:46 thinkflurl wpa_supplicant[882]: TDLS: Creating peer entry for 1c:23:2c:6e:90:09
Jun 28 21:09:46 thinkflurl wpa_supplicant[882]: TDLS: Dialog Token in TPK M1 1
Jun 28 21:09:46 thinkflurl kernel: iwlwifi 0000:02:00.0: Microcode SW error detected. Restarting 0x82000000.

I'm reporting this against the linux-firmware package because I found this bug report https://bugzilla.kernel.org/show_bug.cgi?id=203055 and the firmware posted in comment 1 fixed the crashes. But the thing is, on Jun 28 21:09:46 this crash happend the first time after months of trouble free wifi. And in dpkg.log I don't see any updates to this package before the crash. So I have no clue, what caused this.

What I expected to happen:
I expected a stable wifi connection

What happens:
Wifi keeps crashing

ProblemType: Bug
DistroRelease: Ubuntu 19.04
Package: linux-firmware 1.178.2 [modified: lib/firmware/iwlwifi-8000C-36.ucode lib/firmware/iwlwifi-8265-36.ucode]
ProcVersionSignature: Ubuntu 5.0.0-20.21-generic 5.0.8
Uname: Linux 5.0.0-20-generic x86_64
ApportVersion: 2.20.10-0ubuntu27
Architecture: amd64
CurrentDesktop: XFCE
Date: Fri Jul 12 20:46:10 2019

InstallationDate: Installed on 2019-04-06 (97 days ago)
InstallationMedia: Ubuntu 19.04 "Disco Dingo" - Alpha amd64 (20190326.2)
PackageArchitecture: all
SourcePackage: linux-firmware
UpgradeStatus: No upgrade log present (probably fresh install)

Revision history for this message
Florian Klug (flurl) wrote :
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in linux-firmware (Ubuntu):
status: New → Confirmed
Revision history for this message
ellisonleao (ellisonleao) wrote :
Download full text (21.4 KiB)

Having same issues with x1 carbon 6th gen. Using b/firmware/iwlwifi-8265-36.ucode right now. The

Before the crash i have:

❯ ethtool -i wlp2s0
driver: iwlwifi
version: 5.3.0-7629-generic
firmware-version: 36.77d01142.0

After the crash:

❯ dmesg | grep iwlwifi

[ 4.082948] iwlwifi 0000:02:00.0: Found debug destination: EXTERNAL_DRAM
[ 4.082950] iwlwifi 0000:02:00.0: Found debug configuration: 0
[ 4.083454] iwlwifi 0000:02:00.0: loaded firmware version 36.77d01142.0 op_mode iwlmvm
[ 4.152591] iwlwifi 0000:02:00.0: Detected Intel(R) Dual Band Wireless AC 8265, REV=0x230
[ 4.161466] iwlwifi 0000:02:00.0: Applying debug destination EXTERNAL_DRAM
[ 4.161884] iwlwifi 0000:02:00.0: Allocated 0x00400000 bytes for firmware monitor.
[ 4.226869] iwlwifi 0000:02:00.0: base HW address: <OMMITED>
[ 4.307274] iwlwifi 0000:02:00.0 wlp2s0: renamed from wlan0
[ 5.892975] iwlwifi 0000:02:00.0: Applying debug destination EXTERNAL_DRAM
[ 6.025759] iwlwifi 0000:02:00.0: Applying debug destination EXTERNAL_DRAM
[ 6.094195] iwlwifi 0000:02:00.0: FW already configured (0) - re-configuring
[ 19.943463] iwlwifi 0000:02:00.0: Error sending SCAN_ABORT_UMAC: time out after 2000ms.
[ 19.943475] iwlwifi 0000:02:00.0: Current CMD queue read_ptr 54 write_ptr 55
[ 19.960932] WARNING: CPU: 4 PID: 1057 at drivers/net/wireless/intel/iwlwifi/pcie/trans.c:2015 iwl_trans_pcie_grab_nic_access+0x1f9/0x230 [iwlwifi]
[ 19.960933] Modules linked in: mei_hdcp aufs overlay binfmt_misc dm_crypt nls_iso8859_1 snd_soc_skl snd_soc_hdac_hda snd_hda_ext_core snd_soc_skl_ipc snd_soc_sst_ipc snd_hda_codec_hdmi snd_soc_sst_dsp snd_soc_acpi_intel_match intel_rapl_msr snd_soc_acpi iwlmvm snd_soc_core snd_hda_codec_realtek snd_hda_codec_generic snd_compress mac80211 ac97_bus snd_pcm_dmaengine x86_pkg_temp_thermal intel_powerclamp libarc4 coretemp snd_hda_intel snd_seq_midi snd_seq_midi_event snd_hda_codec kvm_intel snd_hda_core snd_rawmidi snd_hwdep btusb kvm uvcvideo videobuf2_vmalloc videobuf2_memops joydev videobuf2_v4l2 btrtl btbcm input_leds btintel irqbypass intel_cstate bluetooth snd_seq snd_pcm r8188eu(C) serio_raw iwlwifi videobuf2_common wmi_bmof intel_xhci_usb_role_switch intel_rapl_perf thinkpad_acpi lib80211 videodev intel_wmi_thunderbolt mei_me processor_thermal_device ecdh_generic nvram intel_rapl_common mc intel_pch_thermal intel_soc_dts_iosf mei roles ecc ledtrig_audio cfg80211 ucsi_acpi typec_ucsi
[ 19.960969] RIP: 0010:iwl_trans_pcie_grab_nic_access+0x1f9/0x230 [iwlwifi]
[ 19.960980] iwl_write_prph+0x3e/0x90 [iwlwifi]
[ 19.960983] iwl_force_nmi+0x53/0x60 [iwlwifi]
[ 19.960987] iwl_trans_pcie_sync_nmi+0x1f1/0x260 [iwlwifi]
[ 19.960990] iwl_pcie_send_hcmd_sync+0x3ca/0x4b0 [iwlwifi]
[ 19.960996] iwl_trans_pcie_send_hcmd+0x34/0xe0 [iwlwifi]
[ 19.961002] iwl_trans_send_cmd+0x5d/0xc0 [iwlwifi]
[ 19.961089] iwlwifi 0000:02:00.0: iwlwifi transaction failed, dumping registers
[ 19.961090] iwlwifi 0000:02:00.0: iwlwifi device config registers:
[ 19.961270] iwlwifi 0000:02:00.0: 00000000: 24fd8086 00100000 02800078 00000000 00000004 00000000 00000000 00000000
[ 19.961271] iwlwifi 0000:02:00.0: 00000020: 00000000 00000000 00...

Revision history for this message
Pellaeon Lin (pellaeon) wrote :

I worked around this bug by manually downloading iwlwifi-8000C-36.ucode and iwlwifi-8265-36.ucode from https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/ and then installing them in /lib/firmware . Now I have firmware version 36.77d01142.0 and it seemed to solve the issue. The network card has been stable for a day or so. Here's my note: https://nyllep.wordpress.com/2020/04/09/updating-linux-iwlwifi-firmware/

I hope the developer can backport the fix, because this essentially can be used for denial-of-service attack. Any client on the same wifi network can just initiate a TDLS connection setup request and it will crash the network interface.

You-Sheng Yang (vicamo)
tags: added: hwe-networking-wifi
Revision history for this message
Besmir Zanaj (besmirzanaj-gmail) wrote :

adding my dmesg

Revision history for this message
You-Sheng Yang (vicamo) wrote :

This currently affects Eoan/Focal that has iwlwifi-8265-36.ucode of core45-152 release[1]. However, I don't have a determinant way to verify this. Please advice. @Besmir, @Pellaeon, @ellisonleao and @Florian.

[1]: https://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware.git/commit/?id=40e4162adfc91390f6fbbd8269f9439832af1dde

tags: added: eoan focal
You-Sheng Yang (vicamo)
Changed in linux-firmware (Ubuntu Focal):
status: Confirmed → Incomplete
summary: - Wireless 8265 / 8275 crashing
+ Wireless 8265 / 8275 crashing on creating TDLS connection
Revision history for this message
Brian Murray (brian-murray) wrote :

The Eoan Ermine has reached end of life, so this bug will not be fixed for that release

Changed in linux-firmware (Ubuntu Eoan):
status: New → Won't Fix
Revision history for this message
Besmir Zanaj (besmirzanaj-gmail) wrote :

havent had this issue recently. hope the latest updates have fixed that in focal too

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.