2021-05-05 12:07:10

by Michael Yartys

[permalink] [raw]
Subject: Possible bug in iwlwifi

Hello

I've been testing out WPA3/WPA2-mixed networks on my OpenWrt router, and I noticed whenever I enable 802.11r the network doesn't show up in the list of Wi-Fi networks in NetworkManager. I initially thought this was due to some bug with wpa_supplicant, but running "iw dev wlp18s0 scan" also fails to list the network. If I'm not mistaken, iw doesn't use wpa_supplicant to scan for networks, so that rules out wpa_supplicant. That means something deeper in the stack is causing this, and my guess falls on iwlwifi. I'm listing what I think is relevant system info below (please let me know if there's anything else that's missing):

Distro: Fedora 34
Kernel: 5.11.17-300.fc34.x86_64

$ sudo lshw -C network
*-network
description: Wireless interface
product: Wireless 7260
vendor: Intel Corporation
physical id: 0
bus info: [email protected]:12:00.0
logical name: wlp18s0
version: bb
serial: redacted
width: 64 bits
clock: 33MHz
capabilities: pm msi pciexpress bus_master cap_list ethernet physical wireless
configuration: broadcast=yes driver=iwlwifi driverversion=5.11.17-300.fc34.x86_64 firmware=17.3216344376.0 7260-17.ucode ip=192.168.1.202 latency=0 link=yes multicast=yes wireless=IEEE 802.11
resources: irq:31 memory:fe500000-fe501fff

-----------------------------------------------------------------------------------------------------

This is what "iw dev wlp18s0 scan" outputs when 802.11r is disabled and it's able to see the network:

BSS "redacted"(on wlp18s0)
last seen: 6947.060s [boottime]
TSF: 0 usec (0d, 00:00:00)
freq: 2412
beacon interval: 100 TUs
capability: ESS Privacy ShortPreamble ShortSlotTime (0x0431)
signal: -45.00 dBm
last seen: 5142 ms ago
Information elements from Probe Response frame:
SSID: OpenWrt_
Supported rates: 6.0* 9.0 12.0* 18.0 24.0* 36.0 48.0 54.0
DS Parameter set: channel 1
Country: NO Environment: Indoor/Outdoor
Channels [1 - 13] @ 20 dBm
ERP: <no flags>
RSN: * Version: 1
* Group cipher: CCMP
* Pairwise ciphers: CCMP
* Authentication suites: PSK PSK/SHA-256 SAE
* Capabilities: 16-PTKSA-RC 1-GTKSA-RC MFP-capable (0x008c)
BSS Load:
* station count: 0
* channel utilisation: 15/255
* available admission capacity: 0 [*32us]
Supported operating classes:
* current operating class: 81
HT capabilities:
Capabilities: 0x19ed
RX LDPC
HT20
SM Power Save disabled
RX HT20 SGI
RX HT40 SGI
TX STBC
RX STBC 1-stream
Max AMSDU length: 7935 bytes
DSSS/CCK HT40
Maximum RX AMPDU length 65535 bytes (exponent: 0x003)
Minimum RX AMPDU time spacing: 8 usec (0x06)
HT TX/RX MCS rate indexes supported: 0-31
HT operation:
* primary channel: 1
* secondary channel offset: no secondary
* STA channel width: 20 MHz
* RIFS: 0
* HT protection: nonmember
* non-GF present: 0
* OBSS non-GF present: 1
* dual beacon: 0
* dual CTS protection: 0
* STBC beacon: 0
* L-SIG TXOP Prot: 0
* PCO active: 0
* PCO phase: 0
Extended capabilities:
* Extended Channel Switching
* SSID List
* UTF-8 SSID
* Operating Mode Notification
Unknown IE (244): 20
WMM: * Parameter version 1
* u-APSD
* BE: CW 15-1023, AIFSN 3
* BK: CW 15-1023, AIFSN 7
* VI: CW 7-15, AIFSN 2, TXOP 3008 usec
* VO: CW 3-7, AIFSN 2, TXOP 1504 usec

Michael Yartys


2021-05-05 12:15:58

by Johannes Berg

[permalink] [raw]
Subject: Re: Possible bug in iwlwifi

On Wed, 2021-05-05 at 12:05 +0000, Michael Yartys wrote:
> Hello
>
> I've been testing out WPA3/WPA2-mixed networks on my OpenWrt router,
> and I noticed whenever I enable 802.11r the network doesn't show up in
> the list of Wi-Fi networks in NetworkManager. I initially thought this
> was due to some bug with wpa_supplicant, but running "iw dev wlp18s0
> scan" also fails to list the network. If I'm not mistaken, iw doesn't
> use wpa_supplicant to scan for networks, so that rules out
> wpa_supplicant. That means something deeper in the stack is causing
> this, and my guess falls on iwlwifi.

Indeed, that's super strange.

Are you able to see the network from another linux machine, and could
maybe do a packet capture there? Or maybe just do

iw wlan0 scan dump -u

on another system that *can* see it?

johannes

2021-05-05 12:26:36

by Michael Yartys

[permalink] [raw]
Subject: Re: Possible bug in iwlwifi

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐

On Wednesday, May 5th, 2021 at 2:09 PM, Johannes Berg <[email protected]> wrote:

> On Wed, 2021-05-05 at 12:05 +0000, Michael Yartys wrote:
>
> > Hello
> >
> > I've been testing out WPA3/WPA2-mixed networks on my OpenWrt router,
> >
> > and I noticed whenever I enable 802.11r the network doesn't show up in
> >
> > the list of Wi-Fi networks in NetworkManager. I initially thought this
> >
> > was due to some bug with wpa_supplicant, but running "iw dev wlp18s0
> >
> > scan" also fails to list the network. If I'm not mistaken, iw doesn't
> >
> > use wpa_supplicant to scan for networks, so that rules out
> >
> > wpa_supplicant. That means something deeper in the stack is causing
> >
> > this, and my guess falls on iwlwifi.
>
> Indeed, that's super strange.
>
> Are you able to see the network from another linux machine, and could
>
> maybe do a packet capture there? Or maybe just do
>
> iw wlan0 scan dump -u
>
> on another system that can see it?

Unfortunately my other laptop also has a Intel 7260 card and can't see the network. My iPad and Android phone are both able to see the network, but they're unable to connect to it.

>
> johannes

2021-05-05 12:38:05

by Michael Yartys

[permalink] [raw]
Subject: Re: Possible bug in iwlwifi

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐

On Wednesday, May 5th, 2021 at 2:25 PM, Michael Yartys <[email protected]> wrote:

> ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
>
> On Wednesday, May 5th, 2021 at 2:09 PM, Johannes Berg [email protected] wrote:
>
> > On Wed, 2021-05-05 at 12:05 +0000, Michael Yartys wrote:
> >
> > > Hello
> > >
> > > I've been testing out WPA3/WPA2-mixed networks on my OpenWrt router,
> > >
> > > and I noticed whenever I enable 802.11r the network doesn't show up in
> > >
> > > the list of Wi-Fi networks in NetworkManager. I initially thought this
> > >
> > > was due to some bug with wpa_supplicant, but running "iw dev wlp18s0
> > >
> > > scan" also fails to list the network. If I'm not mistaken, iw doesn't
> > >
> > > use wpa_supplicant to scan for networks, so that rules out
> > >
> > > wpa_supplicant. That means something deeper in the stack is causing
> > >
> > > this, and my guess falls on iwlwifi.
> >
> > Indeed, that's super strange.
> >
> > Are you able to see the network from another linux machine, and could
> >
> > maybe do a packet capture there? Or maybe just do
> >
> > iw wlan0 scan dump -u
> >
> > on another system that can see it?
>
> Unfortunately my other laptop also has a Intel 7260 card and can't see the network. My iPad and Android phone are both able to see the network, but they're unable to connect to it.

I don't know if it's of any help, but here's what WiFiAnalyzer reports about the network on my Android 11 phone: https://imgur.com/a/dn0HwhG

>
> > johannes

2021-05-05 13:08:29

by Michael Yartys

[permalink] [raw]
Subject: Re: Possible bug in iwlwifi

Sorry for being a bit spammy here, but I forgot that I could simply run "iw scan" on one of my two routers to see how it sees the network on the other router:

$ iw dev wlan1 scan -u
BSS redacted(on wlan1)
TSF: 0 usec (0d, 00:00:00)
freq: 2412
beacon interval: 100 TUs
capability: ESS (0x0431)
signal: -65.00 dBm
last seen: 1930 ms ago
Information elements from Probe Response frame:
SSID: OpenWrt_
RSN: * Version: 1
* Group cipher: CCMP
* Pairwise ciphers: CCMP
* Authentication suites: PSK FT/PSK PSK/SHA-256 SAE FT/SAE
* Capabilities: 16-PTKSA-RC 1-GTKSA-RC MFP-capable (0x008c)
HT capabilities:
Capabilities: 0x19ed
RX LDPC
HT20
SM Power Save disabled
RX HT20 SGI
RX HT40 SGI
TX STBC
RX STBC 1-stream
Max AMSDU length: 7935 bytes
DSSS/CCK HT40
Maximum RX AMPDU length 65535 bytes (exponent: 0x003)
Minimum RX AMPDU time spacing: 8 usec (0x06)
HT TX/RX MCS rate indexes supported: 0-31
HT operation:
* primary channel: 1
* secondary channel offset: no secondary
* STA channel width: 20 MHz

Michael Yartys

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐

On Wednesday, May 5th, 2021 at 2:37 PM, Michael Yartys <[email protected]> wrote:

> ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
>
> On Wednesday, May 5th, 2021 at 2:25 PM, Michael Yartys [email protected] wrote:
>
> > ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
> >
> > On Wednesday, May 5th, 2021 at 2:09 PM, Johannes Berg [email protected] wrote:
> >
> > > On Wed, 2021-05-05 at 12:05 +0000, Michael Yartys wrote:
> > >
> > > > Hello
> > > >
> > > > I've been testing out WPA3/WPA2-mixed networks on my OpenWrt router,
> > > >
> > > > and I noticed whenever I enable 802.11r the network doesn't show up in
> > > >
> > > > the list of Wi-Fi networks in NetworkManager. I initially thought this
> > > >
> > > > was due to some bug with wpa_supplicant, but running "iw dev wlp18s0
> > > >
> > > > scan" also fails to list the network. If I'm not mistaken, iw doesn't
> > > >
> > > > use wpa_supplicant to scan for networks, so that rules out
> > > >
> > > > wpa_supplicant. That means something deeper in the stack is causing
> > > >
> > > > this, and my guess falls on iwlwifi.
> > >
> > > Indeed, that's super strange.
> > >
> > > Are you able to see the network from another linux machine, and could
> > >
> > > maybe do a packet capture there? Or maybe just do
> > >
> > > iw wlan0 scan dump -u
> > >
> > > on another system that can see it?
> >
> > Unfortunately my other laptop also has a Intel 7260 card and can't see the network. My iPad and Android phone are both able to see the network, but they're unable to connect to it.
>
> I don't know if it's of any help, but here's what WiFiAnalyzer reports about the network on my Android 11 phone: https://imgur.com/a/dn0HwhG
>
> > > johannes

2021-05-05 17:31:44

by Johannes Berg

[permalink] [raw]
Subject: Re: Possible bug in iwlwifi

On Wed, 2021-05-05 at 13:06 +0000, Michael Yartys wrote:
> Sorry for being a bit spammy here, but I forgot that I could simply
> run "iw scan" on one of my two routers to see how it sees the network
> on the other router:
>
> $ iw dev wlan1 scan -u
> BSS redacted(on wlan1)

Hm. That looks fine.

Can you do it again with --debug? But then it's hard to redact things,
so maybe send it to me in private.

Thanks,
johannes