linux-kernel - iwlwifi stopped working with AX200 (6.16-rc3 regression)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <aF35FqJAw63NSl63@mail-itl>
Date: Fri, 27 Jun 2025 03:51:18 +0200
From: Marek Marczykowski-Górecki <marmarek@...isiblethingslab.com>
To: Miri Korenblit <miriam.rachel.korenblit@...el.com>,
	Colin Ian King <colin.i.king@...il.com>
Cc: linux-wireless@...r.kernel.org, linux-kernel@...r.kernel.org,
	regressions@...ts.linux.dev
Subject: iwlwifi stopped working with AX200 (6.16-rc3 regression)

Hi,

With Linux 6.16-rc3 iwlwifi stopped working for me - device never
initializes fully. It was working fine with Linux 6.16-rc2. Log
includes:

    iwlwifi 0000:00:07.0: Registered PHC clock: iwlwifi-PTP, with index: 0
    ------------[ cut here ]------------
    WARNING: CPU: 0 PID: 516 at drivers/net/wireless/intel/iwlwifi/mvm/mld-mac.c:37 iwl_mvm_mld_mac_ctxt_cmd_common+0x17d/0x1d0 [iwlmvm]
    Modules linked in: nft_reject_ipv6 nf_reject_ipv6 nft_reject_ipv4 nf_reject_ipv4 nft_reject qrtr nft_ct nft_masq nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables iwlmvm mac80211 libarc4 joydev iwlwifi intel_rapl_msr intel_rapl_common cfg80211 polyval_clmulni ghash_clmulni_intel sha512_ssse3 rfkill sha1_ssse3 r8169 pcspkr i2c_piix4 ehci_pci realtek ata_generic ehci_hcd i2c_smbus pata_acpi serio_raw xen_scsiback target_core_mod xen_netback xen_privcmd xen_gntdev xen_gntalloc xen_blkback xen_evtchn i2c_dev fuse loop nfnetlink overlay xen_blkfront
    CPU: 0 UID: 0 PID: 516 Comm: NetworkManager Not tainted 6.16.0-0.rc3.1.qubes.1.fc41.x86_64 #1 PREEMPT(full) 
    Hardware name: Xen HVM domU, BIOS 4.19.2 05/27/2025
    RIP: 0010:iwl_mvm_mld_mac_ctxt_cmd_common+0x17d/0x1d0 [iwlmvm]
    Code: eb a2 ba 01 00 00 00 66 41 89 55 18 eb 96 41 83 fe 02 74 25 41 c6 45 19 01 eb c8 b9 01 00 00 00 66 41 89 4d 1a e9 7a ff ff ff <0f> 0b 5b 5d 41 5c 41 5d 41 5e e9 04 26 f5 ec bf 01 00 00 00 66 41
    RSP: 0018:ffffd45c807b3600 EFLAGS: 00010282
    RAX: 00000000ffffffff RBX: ffff8d334a68a008 RCX: ffff8d33428c3efc
    RDX: 00000000000000bf RSI: 0000000000000308 RDI: ffff8d33428c3efc
    RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000
    R10: 0000000000000000 R11: 0000000000000001 R12: ffff8d334a799c98
    R13: ffffd45c807b3634 R14: 0000000000000000 R15: ffff8d334a799c98
    FS:  00007b3ca8f0a800(0000) GS:ffff8d33a15db000(0000) knlGS:0000000000000000
    CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
    CR2: 000072848666ab60 CR3: 000000000049f000 CR4: 0000000000350ef0
    Call Trace:
     <TASK>
     iwl_mvm_mld_mac_ctxt_cmd_sta+0x6b/0x1d0 [iwlmvm]
     iwl_mvm_mld_mac_ctxt_add+0x32/0xc0 [iwlmvm]
     iwl_mvm_mld_mac_add_interface+0x137/0x3b0 [iwlmvm]
     drv_add_interface+0x52/0x230 [mac80211]
     ieee80211_do_open+0x57b/0x720 [mac80211]
     ieee80211_open+0x8c/0xa0 [mac80211]
     __dev_open+0x114/0x2a0
     __dev_change_flags+0x1f6/0x240
     ? security_inode_post_setattr+0xf8/0x110
     netif_change_flags+0x26/0x70
     do_setlink.isra.0+0x326/0xcd0
     ? cred_has_capability.isra.0+0xa7/0x140
     ? __rtnl_newlink+0x1fe/0x3f0
     rtnl_newlink+0x4a4/0x8d0
     ? __pfx_rtnl_newlink+0x10/0x10
     rtnetlink_rcv_msg+0x37e/0x450
     ? avc_has_perm+0x5c/0xe0
     ? __pfx_rtnetlink_rcv_msg+0x10/0x10
     netlink_rcv_skb+0x52/0x100
     netlink_unicast+0x27d/0x3d0
     netlink_sendmsg+0x228/0x480
     ____sys_sendmsg+0x35e/0x390
     ___sys_sendmsg+0x99/0xe0
     __sys_sendmsg+0x88/0xf0
     do_syscall_64+0x84/0x2c0
     ? syscall_exit_work+0x108/0x140
     ? do_syscall_64+0x200/0x2c0
     ? syscall_exit_work+0x108/0x140
     ? do_syscall_64+0x200/0x2c0
     entry_SYSCALL_64_after_hwframe+0x76/0x7e
    RIP: 0033:0x7b3ca9e876c2
    Code: 08 0f 85 81 42 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 66
    RSP: 002b:00007ffed9f47ff8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
    RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007b3ca9e876c2
    RDX: 0000000000000000 RSI: 00007ffed9f48090 RDI: 000000000000000d
    RBP: 00007ffed9f48030 R08: 0000000000000000 R09: 0000000000000000
    R10: 0000000000000000 R11: 0000000000000246 R12: 0000642f470dd5a0
    R13: 000000000000001a R14: 0000000000000000 R15: 00007ffed9f4822c
     </TASK>
    ---[ end trace 0000000000000000 ]---
    iwlwifi 0000:00:07.0: Microcode SW error detected. Restarting 0x0.
    iwlwifi 0000:00:07.0: Start IWL Error Log Dump:
    iwlwifi 0000:00:07.0: Transport status: 0x0000004B, valid: 6
    iwlwifi 0000:00:0[2025-06-27 00:40:21] 7.0: Loaded firmware version: 77.864baa2e.0 cc-a0-77.ucode
    iwlwifi 0000:00:07.0: 0x00000071 | NMI_INTERRUPT_UMAC_FATAL    
    iwlwifi 0000:00:07.0: 0x00A0A2F0 | trm_hw_status0
    iwlwifi 0000:00:07.0: 0x00000000 | trm_hw_status1
    iwlwifi 0000:00:07.0: 0x004F8D82 | branchlink2
    iwlwifi 0000:00:07.0: 0x004EEDD2 | interruptlink1
    iwlwifi 0000:00:07.0: 0x004EEDD2 | interruptlink2
    iwlwifi 0000:00:07.0: 0x00015332 | data1
    iwlwifi 0000:00:07.0: 0x00001000 | data2
    iwlwifi 0000:00:07.0: 0x00000000 | data3
    iwlwifi 0000:00:07.0: 0x00000000 | beacon time
    iwlwifi 0000:00:07.0: 0x00062EC7 | tsf low
    iwlwifi 0000:00:07.0: 0x00000000 | tsf hi
    iwlwifi 0000:00:07.0: 0x00000000 | time gp1
    iwlwifi 0000:00:07.0: 0x00069534 | time gp2
    iwlwifi 0000:00:07.0: 0x00000001 | uCode revision type
    iwlwifi 0000:00:07.0: 0x0000004D | uCode version major
    iwlwifi 0000:00:07.0: 0x864BAA2E | uCode version minor
    iwlwifi 0000:00:07.0: 0x00000340 | hw version
    iwlwifi 0000:00:07.0: 0x00C89000 | board version
    iwlwifi 0000:00:07.0: 0x8032F500 | hcmd
    iwlwifi 0000:00:07.0: 0x20028000 | isr0
    iwlwifi 0000:00:07.0: 0x00000000 | isr1
    iwlwifi 0000:00:07.0: 0x08F04802 | isr2
    iwlwifi 0000:00:07.0: 0x00C3400C | isr3
    iwlwifi 0000:00:07.0: 0x00000000 | isr4
    iwlwifi 0000:00:07.0: 0x00110148 | last cmd Id
    iwlwifi 0000:00:07.0: 0x00015332 | wait_event
    iwlwifi 0000:00:07.0: 0x00000000 | l2p_control
    iwlwifi 0000:00:07.0: 0x00000000 | l2p_duration
    iwlwifi 0000:00:07.0: 0x00000000 | l2p_mhvalid
    iwlwifi 0000:00:07.0: 0x00000000 | l2p_addr_match
    iwlwifi 0000:00:07.0: 0x00000008 | lmpm_pmg_sel
    iwlwifi 0000:00:07.0: 0x00000000 | timestamp
    iwlwifi 0000:00:07.0: 0x0000084C | flow_handler
    iwlwifi 0000:00:07.0: Start IWL Error Log Dump:
    iwlwifi 0000:00:07.0: Transport status: 0x0000004B, valid: 7
    iwlwifi 0000:00:07.0: 0x20103126 | ADVANCED_SYSASSERT
    iwlwifi 0000:00:07.0: 0x00000000 | umac branchlink1
    iwlwifi 0000:00:07.0: 0x80455D7A | umac branchlink2
    iwlwifi 0000:00:07.0: 0xC0081228 | umac interruptlink1
    iwlwifi 0000:00:07.0: 0x00000000 | umac interruptlink2
    iwlwifi 0000:00:07.0: 0x00000000 | umac data1
    iwlwifi 0000:00:07.0: 0x00000000 | umac data2
    iwlwifi 0000:00:07.0: 0xDEADBEEF | umac data3
    iwlwifi 0000:00:07.0: 0x0000004D | umac major
    iwlwifi 0000:00:07.0: 0x864BAA2E | umac minor
    iwlwifi 0000:00:07.0: 0x0006952F | frame pointer
    iwlwifi 0000:00:07.0: 0xC0886C14 | stack pointer
    iwlwifi 0000:00:07.0: 0x00120308 | last host cmd
    iwlwifi 0000:00:07.0: 0x00000009 | isr status reg
    iwlwifi 0000:00:07.0: IML/ROM dump:
    iwlwifi 0000:00:07.0: 0x00000003 | IML/ROM error/state
    iwlwifi 0000:00:07.0: 0x000062FC | IML/ROM data1
    iwlwifi 0000:00:07.0: 0x00000080 | IML/ROM WFPM_AUTH_KEY_0
    iwlwifi 0000:00:07.0: Fseq Registers:
    iwlwifi 0000:00:07.0: 0x60000000 | FSEQ_ERROR_CODE
    iwlwifi 0000:00:07.0: 0x80290021 | FSEQ_TOP_INIT_VERSION
    iwlwifi 0000:00:07.0: 0x00050008 | FSEQ_CNVIO_INIT_VERSION
    iwlwifi 0000:00:07.0: 0x0000A503 | FSEQ_OTP_VERSION
    iwlwifi 0000:00:07.0: 0x80000003 | FSEQ_TOP_CONTENT_VERSION
    iwlwifi 0000:00:07.0: 0x4552414E | FSEQ_ALIVE_TOKEN
    iwlwifi 0000:00:07.0: 0x00100530 | FSEQ_CNVI_ID
    iwlwifi 0000:00:07.0: 0x00000532 | FSEQ_CNVR_ID
    iwlwifi 0000:00:07.0: 0x00100530 | CNVI_AUX_MISC_CHIP
    iwlwifi 0000:00:07.0: 0x00000532 | CNVR_AUX_MISC_CHIP
    iwlwifi 0000:00:07.0: 0x05B0905B | CNVR_SCU_SD_REGS_SD_REG_DIG_DCDC_VTRIM
    iwlwifi 0000:00:07.0: 0x0000025B | CNVR_SCU_SD_REGS_SD_REG_ACTIVE_VDIG_MIRROR
    iwlwifi 0000:00:07.0: 0x00050008 | FSEQ_PREV_CNVIO_INIT_VERSION
    iwlwifi 0000:00:07.0: 0x00290021 | FSEQ_WIFI_FSEQ_VERSION
    iwlwifi 0000:00:07.0: 0x00290021 | FSEQ_BT_FSEQ_VERSION
    iwlwifi 0000:00:07.0: 0x000000F0 | FSEQ_CLASS_TP_VERSION
    iwlwifi 0000:00:07.0: UMAC CURRENT PC: 0x80472b1c
    iwlwifi 0000:00:07.0: LMAC1 CURRENT PC: 0xd0
    iwlwifi 0000:00:07.0: FW error in SYNC CMD MAC_CONFIG_CMD
    CPU: 0 UID: 0 PID: 516 Comm: NetworkManager Tainted: G        W           6.16.0-0.rc3.1.qubes.1.fc41.x86_64 #1 PREEMPT(full) 
    Tainted: [W]=WARN
    Hardware name: Xen HVM domU, BIOS 4.19.2 05/27/2025
    Call Trace:
     <TASK>
     dump_stack_lvl+0x5d/0x80
     iwl_trans_pcie_send_hcmd_sync+0x355/0x360 [iwlwifi]
     ? __pfx_autoremove_wake_function+0x10/0x10
     iwl_trans_send_cmd+0x4f/0xe0 [iwlwifi]
     iwl_mvm_send_cmd_pdu+0x61/0xb0 [iwlmvm]
     iwl_mvm_mld_mac_ctxt_cmd_sta+0x10b/0x1d0 [iwlmvm]
     iwl_mvm_mld_mac_ctxt_add+0x32/0xc0 [iwlmvm]
     iwl_mvm_mld_mac_add_interface+0x137/0x3b0 [iwlmvm]
     drv_add_interface+0x52/0x230 [mac80211]
     ieee80211_do_open+0x57b/0x720 [mac80211]
     ieee80211_open+0x8c/0xa0 [mac80211]
     __dev_open+0x114/0x2a0
     __dev_change_flags+0x1f6/0x240
     ? security_inode_post_setattr+0xf8/0x110
     netif_change_flags+0x26/0x70
     do_setlink.isra.0+0x326/0xcd0
     ? cred_has_capability.isra.0+0xa7/0x140
     ? __rtnl_newlink+0x1fe/0x3f0
     rtnl_newlink+0x4a4/0x8d0
     ? __pfx_rtnl_newlink+0x10/0x10
     rtnetlink_rcv_msg+0x37e/0x450
     ? avc_has_perm+0x5c/0xe0
     ? __pfx_rtnetlink_rcv_msg+0x10/0x10
     netlink_rcv_skb+0x52/0x100
     netlink_unicast+0x27d/0x3d0
     netlink_sendmsg+0x228/0x480
     ____sys_sendmsg+0x35e/0x390
     ___sys_sendmsg+0x99/0xe0
     __sys_sendmsg+0x88/0xf0
     do_syscall_64+0x84/0x2c0
     ? syscall_exit_work+0x108/0x140
     ? do_syscall_64+0x200/0x2c0
     ? syscall_exit_work+0x108/0x140
     ? do_syscall_64+0x200/0x2c0
     entry_SYSCALL_64_after_hwframe+0x76/0x7e
    RIP: 0033:0x7b3ca9e876c2
    Code: 08 0f 85 81 42 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 66
    RSP: 002b:00007ffed9f47ff8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
    RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007b3ca9e876c2
    RDX: 0000000000000000 RSI: 00007ffed9f48090 RDI: 000000000000000d
    RBP: 00007ffed9f48030 R08: 0000000000000000 R09: 0000000000000000
    R10: 0000000000000000 R11: 0000000000000246 R12: 0000642f470dd5a0
    R13: 000000000000001a R14: 0000000000000000 R15: 00007ffed9f4822c
     </TASK>
    iwlwifi 0000:00:07.0: Failed to send MAC_CONFIG_CMD (action:0): -5

I see the only change there between rc2 and rc3 is fixing that WARN_ON
condition. Unfortunately, I don't know what cmd_ver value I have there,
but apparently it's outside of that range (and yet, the driver worked
fine before).

The device is:
02:00.0 Network controller [0280]: Intel Corporation Wi-Fi 6 AX200 [8086:2723] (rev 1a)
    Subsystem: Intel Corporation Wi-Fi 6 AX200NGW [8086:0084]

#regzbot introduced: v6.16-rc2..v6.16-rc3

-- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab


Download attachment "signature.asc" of type "application/pgp-signature" (489 bytes)