iwm0: could not initiate 2 GHz scan

classic Classic list List threaded Threaded
7 messages Options
Reply | Threaded
Open this post in threaded view
|

iwm0: could not initiate 2 GHz scan

Chris Wojo
Currently, I'm running a snapshot 5.9-beta # 1800.



I'm trying to connect to a wireless access point but receive "iwm0: could not initiate 2 GHz scan" from dmesg.

dhclient comes back with no link.

I have tried changing media from "autoselect mode 11n" to autoselect mode 11g/b, but I receive the same error.

In all modes, I am able to run ifconfig iwm0 scan, and get results.  

Wondering if this is due to being in a work environment with multiple access points with same nwid; although I doubt that because of seeing different mac address.



Thanks in advance.



Below is dmesg output.



OpenBSD 5.9-beta (GENERIC.MP) #1800: Fri Jan  8 10:40:52 MST 2016

    [hidden email]:/usr/src/sys/arch/amd64/compile/GENERIC.MP

real mem = 21331415040 (20343MB)

avail mem = 20680794112 (19722MB)

mpath0 at root

scsibus0 at mpath0: 256 targets

mainbus0 at root

bios0 at mainbus0: SMBIOS rev. 2.7 @ 0x9cbfd000 (65 entries)

bios0: vendor LENOVO version "JBET54WW (1.19 )" date 11/06/2015

bios0: LENOVO 20BXCTO1WW

acpi0 at bios0: rev 2

acpi0: sleep states S0 S3 S4 S5

acpi0: tables DSDT FACP ASF! HPET ECDT APIC MCFG SSDT SSDT SSDT SSDT SSDT SSDT SSDT SSDT SSDT PCCT SSDT UEFI MSDM BATB FPDT UEFI DMAR

acpi0: wakeup devices LID_(S4) SLPB(S3) IGBE(S4) EXP2(S4) XHCI(S3) EHC1(S3)

acpitimer0 at acpi0: 3579545 Hz, 24 bits

acpihpet0 at acpi0: 14318179 Hz

acpiec0 at acpi0

acpimadt0 at acpi0 addr 0xfee00000: PC-AT compat

cpu0 at mainbus0: apid 0 (boot processor)

cpu0: Intel(R) Core(TM) i7-5600U CPU @ 2.60GHz, 2494.55 MHz

cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,RDSEED,ADX,SMAP,PT,SENSOR,ARAT

cpu0: 256KB 64b/line 8-way L2 cache

cpu0: smt 0, core 0, package 0

mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges

cpu0: apic clock running at 99MHz

cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4.1.1.1, IBE

cpu1 at mainbus0: apid 1 (application processor)

cpu1: Intel(R) Core(TM) i7-5600U CPU @ 2.60GHz, 2494.22 MHz

cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,RDSEED,ADX,SMAP,PT,SENSOR,ARAT

cpu1: 256KB 64b/line 8-way L2 cache

cpu1: smt 1, core 0, package 0

cpu2 at mainbus0: apid 2 (application processor)

cpu2: Intel(R) Core(TM) i7-5600U CPU @ 2.60GHz, 2494.22 MHz

cpu2: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,RDSEED,ADX,SMAP,PT,SENSOR,ARAT

cpu2: 256KB 64b/line 8-way L2 cache

cpu2: smt 0, core 1, package 0

cpu3 at mainbus0: apid 3 (application processor)

cpu3: Intel(R) Core(TM) i7-5600U CPU @ 2.60GHz, 2494.22 MHz

cpu3: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,RDSEED,ADX,SMAP,PT,SENSOR,ARAT

cpu3: 256KB 64b/line 8-way L2 cache

cpu3: smt 1, core 1, package 0

ioapic0 at mainbus0: apid 2 pa 0xfec00000, version 20, 40 pins

acpimcfg0 at acpi0 addr 0xf8000000, bus 0-63

bus 0

extent `pcimem' (0x0 - 0xffffffffffffffff), flags=0

     0x0 - 0x9ffff

     0xc0000 - 0x9fffffff

     0xfec00000 - 0xfed3ffff

     0xfed4c000 - 0xffffffffffffffff

acpiprt0 at acpi0: bus 0 (PCI0)

acpiprt1 at acpi0: bus -1 (PEG_)

acpiprt2 at acpi0: bus 2 (EXP1)

acpiprt3 at acpi0: bus 3 (EXP2)

acpiprt4 at acpi0: bus -1 (EXP3)

acpicpu0 at acpi0: C3(200@233 mwait.1@0x40), C2(200@148 mwait.1@0x33), C1(1000@1 mwait.1), PSS

acpicpu1 at acpi0: C3(200@233 mwait.1@0x40), C2(200@148 mwait.1@0x33), C1(1000@1 mwait.1), PSS

acpicpu2 at acpi0: C3(200@233 mwait.1@0x40), C2(200@148 mwait.1@0x33), C1(1000@1 mwait.1), PSS

acpicpu3 at acpi0: C3(200@233 mwait.1@0x40), C2(200@148 mwait.1@0x33), C1(1000@1 mwait.1), PSS

acpipwrres0 at acpi0: PUBS, resource for XHCI, EHC1

acpipwrres1 at acpi0: NVP3, resource for PEG_

acpipwrres2 at acpi0: NVP2, resource for PEG_

acpitz0 at acpi0: critical temperature is 128 degC

acpibtn0 at acpi0: LID_

acpibtn1 at acpi0: SLPB

acpibat0 at acpi0: BAT0 model "45N1773" serial 20427 type LION oem "SANYO"

acpibat1 at acpi0: BAT1 model "45N1775" serial  2659 type LION oem "SANYO"

acpiac0 at acpi0: AC unit online

acpithinkpad0 at acpi0

cpu0: Enhanced SpeedStep 2494 MHz: speeds: 2601, 2600, 2500, 2300, 2100, 2000, 1800, 1700, 1500, 1400, 1200, 1100, 900, 800, 600, 500 MHz

pci0 at mainbus0 bus 0

pchb0 at pci0 dev 0 function 0 "Intel Core 5G Host" rev 0x09

inteldrm0 at pci0 dev 2 function 0 "Intel HD Graphics 5500" rev 0x09

drm0 at inteldrm0

inteldrm0: msi

inteldrm0: 1920x1080

wsdisplay0 at inteldrm0 mux 1: console (std, vt100 emulation)

wsdisplay0: screen 1-5 added (std, vt100 emulation)

azalia0 at pci0 dev 3 function 0 "Intel Core 5G HD Audio" rev 0x09: msi

azalia0: No codecs found

xhci0 at pci0 dev 20 function 0 "Intel 9 Series xHCI" rev 0x03: msi

usb0 at xhci0: USB revision 3.0

uhub0 at usb0 "Intel xHCI root hub" rev 3.00/1.00 addr 1

"Intel 9 Series MEI" rev 0x03 at pci0 dev 22 function 0 not configured

em0 at pci0 dev 25 function 0 "Intel I218-LM" rev 0x03: msi, address 50:7b:9d:75:2b:ba

azalia1 at pci0 dev 27 function 0 "Intel 9 Series HD Audio" rev 0x03: msi

azalia1: codecs: Realtek ALC292

audio0 at azalia1

ppb0 at pci0 dev 28 function 0 "Intel 9 Series PCIE" rev 0xe3: msi

pci1 at ppb0 bus 2

rtsx0 at pci1 dev 0 function 0 "Realtek RTS5227 Card Reader" rev 0x01: msi

sdmmc0 at rtsx0

ppb1 at pci0 dev 28 function 1 "Intel 9 Series PCIE" rev 0xe3: msi

pci2 at ppb1 bus 3

iwm0 at pci2 dev 0 function 0 "Intel Dual Band Wireless AC 7265" rev 0x99, msi

ehci0 at pci0 dev 29 function 0 "Intel 9 Series USB" rev 0x03: apic 2 int 23

usb1 at ehci0: USB revision 2.0

uhub1 at usb1 "Intel EHCI root hub" rev 2.00/1.00 addr 1

pcib0 at pci0 dev 31 function 0 "Intel 9 Series LPC" rev 0x03

ahci0 at pci0 dev 31 function 2 "Intel 9 Series AHCI" rev 0x03: msi, AHCI 1.3

ahci0: port 0: 6.0Gb/s

scsibus1 at ahci0: 32 targets

sd0 at scsibus1 targ 0 lun 0: <ATA, TOSHIBA THNSFJ25, JULA> SCSI3 0/direct fixed naa.500080d91050aa82

sd0: 244198MB, 512 bytes/sector, 500118192 sectors, thin

ichiic0 at pci0 dev 31 function 3 "Intel 9 Series SMBus" rev 0x03: apic 2 int 18

iic0 at ichiic0

"Intel 9 Series Thermal" rev 0x03 at pci0 dev 31 function 6 not configured

isa0 at pcib0

isadma0 at isa0

pckbc0 at isa0 port 0x60/5 irq 1 irq 12

pckbd0 at pckbc0 (kbd slot)

wskbd0 at pckbd0: console keyboard, using wsdisplay0

pms0 at pckbc0 (aux slot)

wsmouse0 at pms0 mux 0

wsmouse1 at pms0 mux 0

pms0: Synaptics clickpad, firmware 8.1

pcppi0 at isa0 port 0x61

spkr0 at pcppi0

efifb at mainbus0 not configured

uhub2 at uhub0 port 2 "ALCOR Generic USB Hub" rev 1.10/3.10 addr 2

uhub3 at uhub2 port 1 "Terminus Technology USB 2.0 Hub" rev 2.00/1.11 addr 3

uhidev0 at uhub2 port 3 configuration 1 interface 0 "Logitech USB Receiver" rev 1.10/15.00 addr 4

uhidev0: iclass 3/1

ums0 at uhidev0: 8 buttons, Z dir

wsmouse2 at ums0 mux 0

uhidev1 at uhub2 port 4 configuration 1 interface 0 "Microsoft Natural\M-. Ergonomic Keyboard 4000" rev 2.00/1.73 addr 5

uhidev1: iclass 3/1

ukbd0 at uhidev1: 8 variable keys, 6 key codes

wskbd1 at ukbd0 mux 1

wskbd1: connecting to wsdisplay0

uhidev2 at uhub2 port 4 configuration 1 interface 1 "Microsoft Natural\M-. Ergonomic Keyboard 4000" rev 2.00/1.73 addr 5

uhidev2: iclass 3/0, 1 report id

uhid0 at uhidev2 reportid 1: input=7, output=0, feature=0

uhub4 at uhub1 port 1 "Intel Rate Matching Hub" rev 2.00/0.03 addr 2

vscsi0 at root

scsibus2 at vscsi0: 256 targets

softraid0 at root

scsibus3 at softraid0: 256 targets

root on sd0a (ec5b9307214ab3ca.a) swap on sd0b dump on sd0b

iwm0: hw rev 0x210, fw ver 25.228 (API ver 9), address 18:5e:0f:6e:57:44

iwm0: could not initiate 2 GHz scan

iwm0: could not initiate 2 GHz scan

iwm0: could not initiate 2 GHz scan

iwm0: device timeout

iwm0: could not initiate 2 GHz scan

iwm0: could not initiate 2 GHz scan

iwm0: could not initiate 2 GHz scan

iwm0: could not initiate 2 GHz scan

iwm0: could not initiate 2 GHz scan

iwm0: device timeout

Reply | Threaded
Open this post in threaded view
|

Re: iwm0: could not initiate 2 GHz scan

Stefan Sperling-5
On Mon, Jan 11, 2016 at 11:13:03AM -0700, Chris Wojo wrote:
> I'm trying to connect to a wireless access point but receive "iwm0: could not initiate 2 GHz scan" from dmesg.

I'm seeing these message sometimes but they are transient
and scanning usually works fine after another attempt.
So I haven't investigated this problem yet.

> Wondering if this is due to being in a work environment with multiple access points with same nwid; although I doubt that because of seeing different mac address.

That shouldn't be a problem.

Do you see this issue only in that specific environment?
Does it also occur with OpenBD 5.8 release?

> iwm0: device timeout

That's bad. It means the device failed to transmit.
This is probably the reason you can't connect to the AP.

Reply | Threaded
Open this post in threaded view
|

Re: iwm0: could not initiate 2 GHz scan

Laurence Tratt
In reply to this post by Chris Wojo
On Mon, Jan 11, 2016 at 11:13:03AM -0700, Chris Wojo wrote:

Hello Chris,

> Currently, I'm running a snapshot 5.9-beta # 1800.
>
> I'm trying to connect to a wireless access point but receive "iwm0: could
> not initiate 2 GHz scan" from dmesg.
>
> dhclient comes back with no link.

I saw this yesterday on a recent snapshot, although in an odd way. Despite
the "could not initiate 2GHz scan" message, I could connect to a 2GHz
network, but not a 5GHz one (with the same symptoms you saw: dhclient saying
there was no link).


Laurie
--
Personal                                             http://tratt.net/laurie/
Software Development Team                                http://soft-dev.org/
   https://github.com/ltratt              http://twitter.com/laurencetratt

Reply | Threaded
Open this post in threaded view
|

Re: iwm0: could not initiate 2 GHz scan

Chris Wojo
In reply to this post by Stefan Sperling-5
---- On Mon, 11 Jan 2016 13:16:53 -0700 Stefan Sperling <[hidden email]>wrote ----

 > On Mon, Jan 11, 2016 at 11:13:03AM -0700, Chris Wojo wrote:
 > > I'm trying to connect to a wireless access point but receive "iwm0: could not initiate 2 GHz scan" from dmesg.
 >
 > I'm seeing these message sometimes but they are transient
 > and scanning usually works fine after another attempt.
 > So I haven't investigated this problem yet.
 >
 > > Wondering if this is due to being in a work environment with multiple access points with same nwid; although I doubt that because of seeing different mac address.
 >
 > That shouldn't be a problem.
 >
 > Do you see this issue only in that specific environment?
 > Does it also occur with OpenBD 5.8 release?
 >
 > > iwm0: device timeout
 >
 > That's bad. It means the device failed to transmit.
 > This is probably the reason you can't connect to the AP.
 >

So it appears that iwm0 does work on snapshot #1800 on my home wireless AP.
The errors previously reported still occur on the office network where several AP's are using the same NWID.
I would be more than happy to troubleshoot this so others won't run into the same problem.
Thank you.

Reply | Threaded
Open this post in threaded view
|

Re: iwm0: could not initiate 2 GHz scan

Stefan Sperling-5
On Tue, Jan 12, 2016 at 07:11:55PM -0700, Chris Wojo wrote:
> So it appears that iwm0 does work on snapshot #1800 on my home wireless AP.
> The errors previously reported still occur on the office network where several AP's are using the same NWID.
> I would be more than happy to troubleshoot this so others won't run into the same problem.
> Thank you.

So it's clear we still have an issue here. This could be a problem
with frame protection settings, which if wrongly configured would
cause Tx failures and frames damaged while in flight. Protection
settings for the network are advertised by the AP and we must apply
them correctly or many things won't work.
(cf. http://www.testequipmentdepot.com/flukenetworks/pdf/802.11n-compatibility.pdf)

One issue I'm already aware of is that we currently don't update
protection settings in case the AP decides to change them while
we're associated. But your problem indicates that perhaps we're
not configuring frame protection correctly in the first place.

Can you please send one line showing a beacon for your AP at home,
and a few lines showing beacons from the various APs at your office?

You can print beacons as a line of text like this:

  tcpdump -n -i iwm0 -s 1500 -vvv -y IEEE802_11_RADIO subtype beacon
 
Note that if you run this command while associated to an AP (i.e. while
ifconfig iwm0 shows status: active) it will only show beacons for that AP.

Could you also compile and run a kernel with the follwing diff applied,
and show me what this prints while you're tyring to associate and DHCP
to the APs?

Thanks.

Index: if_iwm.c
===================================================================
RCS file: /cvs/src/sys/dev/pci/if_iwm.c,v
retrieving revision 1.75
diff -u -p -r1.75 if_iwm.c
--- if_iwm.c 7 Jan 2016 23:08:38 -0000 1.75
+++ if_iwm.c 13 Jan 2016 08:55:33 -0000
@@ -145,6 +145,7 @@
 #define le16_to_cpup(_a_) (le16toh(*(const uint16_t *)(_a_)))
 #define le32_to_cpup(_a_) (le32toh(*(const uint32_t *)(_a_)))
 
+#define IWM_DEBUG
 #ifdef IWM_DEBUG
 #define DPRINTF(x) do { if (iwm_debug > 0) printf x; } while (0)
 #define DPRINTFN(n, x) do { if (iwm_debug >= (n)) printf x; } while (0)
@@ -4948,6 +4949,7 @@ iwm_mvm_mac_ctxt_cmd_common(struct iwm_s
  if (ni->ni_flags & IEEE80211_NODE_HT) {
  enum ieee80211_htprot htprot =
     (ni->ni_htop1 & IEEE80211_HTOP1_PROT_MASK);
+ DPRINTF(("%s: htprot = %d\n", __func__, htprot));
  switch (htprot) {
  case IEEE80211_HTPROT_NONE:
  break;

Reply | Threaded
Open this post in threaded view
|

Re: iwm0: could not initiate 2 GHz scan

Chris Wojo
 ---- On Wed, 13 Jan 2016 01:58:14 -0700 Stefan Sperling <[hidden email]>
wrote ----
 > So it's clear we still have an issue here. This could be a problem
 > with frame protection settings, which if wrongly configured would
 > cause Tx failures and frames damaged while in flight. Protection
 > settings for the network are advertised by the AP and we must apply
 > them correctly or many things won't work.
 > (cf.
http://www.testequipmentdepot.com/flukenetworks/pdf/802.11n-compatibility.pdf
)
 >
 > One issue I'm already aware of is that we currently don't update
 > protection settings in case the AP decides to change them while
 > we're associated. But your problem indicates that perhaps we're
 > not configuring frame protection correctly in the first place.
 >
 > Can you please send one line showing a beacon for your AP at home,
 > and a few lines showing beacons from the various APs at your office?
 >
 > You can print beacons as a line of text like this:
 >
 >   tcpdump -n -i iwm0 -s 1500 -vvv -y IEEE802_11_RADIO subtype beacon
 >
 > Note that if you run this command while associated to an AP (i.e. while
 > ifconfig iwm0 shows status: active) it will only show beacons for that AP.
 >
 > Could you also compile and run a kernel with the follwing diff applied,
 > and show me what this prints while you're tyring to associate and DHCP
 > to the APs?
 >
 > Thanks.
 >
 > Index: if_iwm.c
 > ===================================================================
 > RCS file: /cvs/src/sys/dev/pci/if_iwm.c,v
 > retrieving revision 1.75
 > diff -u -p -r1.75 if_iwm.c
 > --- if_iwm.c    7 Jan 2016 23:08:38 -0000    1.75
 > +++ if_iwm.c    13 Jan 2016 08:55:33 -0000
 > @@ -145,6 +145,7 @@
 >  #define le16_to_cpup(_a_) (le16toh(*(const uint16_t *)(_a_)))
 >  #define le32_to_cpup(_a_) (le32toh(*(const uint32_t *)(_a_)))
 >
 > +#define IWM_DEBUG
 >  #ifdef IWM_DEBUG
 >  #define DPRINTF(x)    do { if (iwm_debug > 0) printf x; } while (0)
 >  #define DPRINTFN(n, x)    do { if (iwm_debug >= (n)) printf x; } while
(0)
 > @@ -4948,6 +4949,7 @@ iwm_mvm_mac_ctxt_cmd_common(struct iwm_s
 >      if (ni->ni_flags & IEEE80211_NODE_HT) {
 >          enum ieee80211_htprot htprot =
 >              (ni->ni_htop1 & IEEE80211_HTOP1_PROT_MASK);
 > +        DPRINTF(("%s: htprot = %d\n", __func__, htprot));
 >          switch (htprot) {
 >          case IEEE80211_HTPROT_NONE:
 >              break;
 >
 >
 >

Here is a one liner from the beacons at home:
19:19:02.891580 802.11 flags=42<PROTECTED>: QoS data: 30:85:a9:8b:27:2c >
18:5e:0f:6e:57:44 sap 00 I (s=18,r=0,C) len=98, <radiotap v0, tsf 79151629,
0Mbit/s, chan 1, 11g, sig 47dBm, noise -
86dBm>

This is a selection of my home dmesg output approximately when connecting:
iwm apm stop
iwm apm start
iwm apm start
Radio type=0x0-0x2-0x1
loading ring 0 descriptors (0xffffff0001c04000) at 1c040
loading ring 1 descriptors (0xffffff0001c21000) at 1c210
loading ring 2 descriptors (0xffffff0001c3e000) at 1c3e0
loading ring 3 descriptors (0xffffff0001c5b000) at 1c5b0
loading ring 4 descriptors (0xffffff0001c78000) at 1c780
loading ring 5 descriptors (0xffffff0001c95000) at 1c950
loading ring 6 descriptors (0xffffff0001cb2000) at 1cb20
loading ring 7 descriptors (0xffffff0001ccf000) at 1ccf0
loading ring 8 descriptors (0xffffff0001cec000) at 1cec0
loading ring 9 descriptors (0xffffff0001d09000) at 1d090
loading ring 10 descriptors (0xffffff0001d26000) at 1d260
loading ring 11 descriptors (0xffffff0001d2e000) at 1d2e0
loading ring 12 descriptors (0xffffff0001d36000) at 1d360
loading ring 13 descriptors (0xffffff0001d3e000) at 1d3e0
loading ring 14 descriptors (0xffffff0001d46000) at 1d460
loading ring 15 descriptors (0xffffff0001d4e000) at 1d4e0
loading ring 16 descriptors (0xffffff0001d56000) at 1d560
loading ring 17 descriptors (0xffffff0001d5e000) at 1d5e0
loading ring 18 descriptors (0xffffff0001d66000) at 1d660
loading ring 19 descriptors (0xffffff0001d6e000) at 1d6e0
shadow registers enabled
LOAD FIRMWARE type 1 offset 8388608 len 81920
LOAD FIRMWARE type 1 offset 0 len 183268
LOAD FIRMWARE type 1 offset 4294954188 len 32
enabled txq 9 FIFO 7
sending command 0x98 qid 9, idx 0
Sending phy db data and configuration to runtime image
sending command 0x6c qid 9, idx 1
sending command 0x6c qid 9, idx 2
sending command 0x6c qid 9, idx 3
sending command 0x6c qid 9, idx 4
sending command 0x6c qid 9, idx 5
sending command 0x6c qid 9, idx 6
sending command 0x6c qid 9, idx 7
sending command 0x6c qid 9, idx 8
sending command 0x6c qid 9, idx 9
sending command 0x6c qid 9, idx 10
sending command 0x6c qid 9, idx 11
sending command 0x6c qid 9, idx 12
sending command 0x6c qid 9, idx 13
sending command 0x6c qid 9, idx 14
sending command 0x6c qid 9, idx 15
Finished sending phy db non channel data
sending command 0x6a qid 9, idx 16
sending command 0x18 qid 9, idx 17
Internal station added.
sending command 0x8 qid 9, idx 18
sending command 0x8 qid 9, idx 19
sending command 0x8 qid 9, idx 20
Sending device power command with flags = 0x2001
sending command 0x77 qid 9, idx 21
enabled txq 0 FIFO 0
enabled txq 1 FIFO 1
enabled txq 2 FIFO 2
enabled txq 3 FIFO 3
dtim 1 0
sending command 0x28 qid 9, idx 22
switching state INIT->SCAN
Handling ieee80211 scan request
sending command 0x80 qid 9, idx 23
Scan request was sent successfully
iwm apm stop
iwm apm start
iwm apm start
Radio type=0x0-0x2-0x1
loading ring 0 descriptors (0xffffff0001c04000) at 1c040
loading ring 1 descriptors (0xffffff0001c21000) at 1c210
loading ring 2 descriptors (0xffffff0001c3e000) at 1c3e0
loading ring 3 descriptors (0xffffff0001c5b000) at 1c5b0
loading ring 4 descriptors (0xffffff0001c78000) at 1c780
loading ring 5 descriptors (0xffffff0001c95000) at 1c950
loading ring 6 descriptors (0xffffff0001cb2000) at 1cb20
loading ring 7 descriptors (0xffffff0001ccf000) at 1ccf0
loading ring 8 descriptors (0xffffff0001cec000) at 1cec0
loading ring 9 descriptors (0xffffff0001d09000) at 1d090
loading ring 10 descriptors (0xffffff0001d26000) at 1d260
loading ring 11 descriptors (0xffffff0001d2e000) at 1d2e0
loading ring 12 descriptors (0xffffff0001d36000) at 1d360
loading ring 13 descriptors (0xffffff0001d3e000) at 1d3e0
loading ring 14 descriptors (0xffffff0001d46000) at 1d460
loading ring 15 descriptors (0xffffff0001d4e000) at 1d4e0
loading ring 16 descriptors (0xffffff0001d56000) at 1d560
loading ring 17 descriptors (0xffffff0001d5e000) at 1d5e0
loading ring 18 descriptors (0xffffff0001d66000) at 1d660
loading ring 19 descriptors (0xffffff0001d6e000) at 1d6e0
shadow registers enabled
LOAD FIRMWARE type 0 offset 8388608 len 81920
LOAD FIRMWARE type 0 offset 0 len 101588
LOAD FIRMWARE type 0 offset 4294954188 len 32
enabled txq 9 FIFO 7
sending command 0x98 qid 9, idx 0
sending command 0x6a qid 9, idx 1
iwm apm stop
iwm apm start
iwm apm start
Radio type=0x0-0x2-0x1
loading ring 0 descriptors (0xffffff0001c04000) at 1c040
loading ring 1 descriptors (0xffffff0001c21000) at 1c210
loading ring 2 descriptors (0xffffff0001c3e000) at 1c3e0
loading ring 3 descriptors (0xffffff0001c5b000) at 1c5b0
loading ring 4 descriptors (0xffffff0001c78000) at 1c780
loading ring 5 descriptors (0xffffff0001c95000) at 1c950
loading ring 6 descriptors (0xffffff0001cb2000) at 1cb20
loading ring 7 descriptors (0xffffff0001ccf000) at 1ccf0
loading ring 8 descriptors (0xffffff0001cec000) at 1cec0
loading ring 9 descriptors (0xffffff0001d09000) at 1d090
loading ring 10 descriptors (0xffffff0001d26000) at 1d260
loading ring 11 descriptors (0xffffff0001d2e000) at 1d2e0
loading ring 12 descriptors (0xffffff0001d36000) at 1d360
loading ring 13 descriptors (0xffffff0001d3e000) at 1d3e0
loading ring 14 descriptors (0xffffff0001d46000) at 1d460
loading ring 15 descriptors (0xffffff0001d4e000) at 1d4e0
loading ring 16 descriptors (0xffffff0001d56000) at 1d560
loading ring 17 descriptors (0xffffff0001d5e000) at 1d5e0
loading ring 18 descriptors (0xffffff0001d66000) at 1d660
loading ring 19 descriptors (0xffffff0001d6e000) at 1d6e0
shadow registers enabled
LOAD FIRMWARE type 1 offset 8388608 len 81920
LOAD FIRMWARE type 1 offset 0 len 183268
LOAD FIRMWARE type 1 offset 4294954188 len 32
enabled txq 9 FIFO 7
sending command 0x98 qid 9, idx 0
Sending phy db data and configuration to runtime image
sending command 0x6c qid 9, idx 1
sending command 0x6c qid 9, idx 2
sending command 0x6c qid 9, idx 3
sending command 0x6c qid 9, idx 4
sending command 0x6c qid 9, idx 5
sending command 0x6c qid 9, idx 6
sending command 0x6c qid 9, idx 7
sending command 0x6c qid 9, idx 8
sending command 0x6c qid 9, idx 9
sending command 0x6c qid 9, idx 10
sending command 0x6c qid 9, idx 11
sending command 0x6c qid 9, idx 12
sending command 0x6c qid 9, idx 13
sending command 0x6c qid 9, idx 14
sending command 0x6c qid 9, idx 15
Finished sending phy db non channel data
sending command 0x6a qid 9, idx 16
sending command 0x18 qid 9, idx 17
Internal station added.
sending command 0x8 qid 9, idx 18
sending command 0x8 qid 9, idx 19
sending command 0x8 qid 9, idx 20
Sending device power command with flags = 0x2001
sending command 0x77 qid 9, idx 21
enabled txq 0 FIFO 0
enabled txq 1 FIFO 1
enabled txq 2 FIFO 2
enabled txq 3 FIFO 3
dtim 1 0
sending command 0x28 qid 9, idx 22
switching state INIT->SCAN
Handling ieee80211 scan request
sending command 0x80 qid 9, idx 23
Scan request was sent successfully
scan ended
Handling ieee80211 scan request
sending command 0x80 qid 9, idx 24
Scan request was sent successfully
scan ended
switching state SCAN->AUTH
sending command 0xd0 qid 9, idx 25
sending command 0x8 qid 9, idx 26
sending command 0x2b qid 9, idx 27
sending command 0x18 qid 9, idx 28
Add new TE, duration 1000 TU
sending command 0x29 qid 9, idx 29
iwm0: TE notif status = 0x1 action = 0x1
switching state AUTH->ASSOC
sending command 0x18 qid 9, idx 30
dtim 1 0
DTIM TBTT is 0x87917b2183/0x3720a7, offset 0
sending command 0x28 qid 9, idx 31
switching state ASSOC->RUN
Sending power table command on mac id 0x0 for power level 1, flags = 0x0
Keep alive = 25 sec
Disable power management
sending command 0xa9 qid 9, idx 32
sending command 0xd2 qid 9, idx 33
ba_enable_beacon_abort is: 0
ba_escape_timer is: 6
bf_debug_flag is: 0
bf_enable_beacon_filter is: 1
bf_energy_delta is: 5
bf_escape_timer is: 50
bf_roaming_energy_delta is: 1
bf_roaming_state is: 72
bf_temp_threshold is: 112
bf_temp_fast_filter is: 1
bf_temp_slow_filter is: 5
sending command 0x2c qid 9, idx 34
sending command 0x4e qid 9, idx 35
sending command 0x18 qid 9, idx 36
RX BA Session started in fw
iwm0: TE notif status = 0x1 action = 0x2



Here are a few beacons from work:
10:33:15.817662 802.11 flags=0<>: beacon, timestamp 23562979537691, interval
100, caps=2041<ESS,SHORT_PREAMBLE,SHORT_SLOTTIME>, ssid (), rates 1M 2M 5M 11M
6M 9M 12M 18M, ds (chan 11), tim 0x0002000000, erp 0x00,
htcaps=<20MHz,SGI@20MHz,RXSTBC 1 stream,A-MSDU 3839,A-MPDU max 65535,RxMCS
0xff000000000000000000>, xrates 24M 36M 48M 54M, htop=<20MHz chan 11,STA chanw
20MHz,RIFS,basic MCS set 0x0000000000000000>, vendor
0x0050f2020101800003a4000027a4000042435e0062322f00, <radiotap v0, tsf
232055160, 1Mbit/s, chan 11, 11g, sig 45dBm, noise 0dBm>
10:33:15.820014 802.11 flags=0<>: beacon, timestamp 23562979569940, interval
102, caps=12061<ESS,PRIVACY,SHORT_PREAMBLE,SHORT_SLOTTIME,RADIO_MEASUREMENT>,
ssid (UW-AUTH), rates 1M 2M 5M 6M 9M 11M 12M 18M, ds (chan 11), tim
0x00010000, country 'US ', 9 stations, 56% utilization, admission capacity
732us/s, erp 0x00, htcaps=<20MHz,SGI@20MHz,TXSTBC,RXSTBC 1 stream,A-MSDU
7935,DSSS/CCK@40MHz,A-MPDU max 65535,A-MPDU spacing 8.00us,RxMCS
0xffffff00000000000000>, rsn 0x0100000fac040100000fac040100000fac012800,
xrates 24M 36M 48M 54M, htop=<20MHz chan 11,STA chanw 20MHz,protect
non-member,non-greenfield STA,basic MCS set 0x0000000000000000>, 127:4
0x00100000, 133:30
0x14008f000f00ff03590055572d41502d303500000000000000000900003c, 150:6
0x004096000e00, vendor 0x0050f2020101800003a4000027a4000042435e0062322f00,
vendor 0x004096010104, vendor 0x0040960305, vendor 0x0040960b09, vendor
0x0040961401, <radiotap v0, tsf 232056505, 1Mbit/s, chan 11, 11g, sig 29dBm,
noise 0dBm>
10:33:15.835904 802.11 flags=0<>: beacon, timestamp 23562979567316, interval
102, caps=12061<ESS,PRIVACY,SHORT_PREAMBLE,SHORT_SLOTTIME,RADIO_MEASUREMENT>,
ssid (UW-Guest), rates 1M 2M 5M 6M 9M 11M 12M 18M, ds (chan 11), tim
0x00010000, country 'US ', 9 stations, 56% utilization, admission capacity
732us/s, erp 0x00, htcaps=<20MHz,SGI@20MHz,TXSTBC,RXSTBC 1 stream,A-MSDU
7935,DSSS/CCK@40MHz,A-MPDU max 65535,A-MPDU spacing 8.00us,RxMCS
0xffffff00000000000000>, rsn 0x0100000fac040100000fac040100000fac022800,
xrates 24M 36M 48M 54M, htop=<20MHz chan 11,STA chanw 20MHz,protect
non-member,non-greenfield STA,basic MCS set 0x0000000000000000>, 127:4
0x00100000, 133:30
0x14008f000f00ff03590055572d41502d303500000000000000000900003c, 150:6
0x004096000e00, vendor 0x0050f2020101800003a4000027a4000042435e0062322f00,
vendor 0x004096010104, vendor 0x0040960305, vendor 0x0040960b09, vendor
0x0040961401, <radiotap v0, tsf 232072316, 1Mbit/s, chan 11, 11g, sig 29dBm,
noise 0dBm>
10:33:16.098388 802.11 flags=0<>: beacon, timestamp 10105362278450, interval
102, caps=10021<ESS,PRIVACY,RADIO_MEASUREMENT>, ssid (UW-AUTH), rates 6M 9M
12M 18M 24M 36M 48M 54M, tim 0x00010000, country 'US ', channels 36-39 limit
17dB, channels 52-55 limit 24dB, channels 100-104 limit 24dB, channels 132-134
limit 24dB, 7 stations, 11% utilization, admission capacity 732us/s,
htcaps=<20/40MHz,SGI@20MHz,SGI@40MHz,TXSTBC,RXSTBC 1 stream,A-MSDU
7935,DSSS/CCK@40MHz,A-MPDU max 65535,A-MPDU spacing 8.00us,RxMCS
0xffffff00000000000000>, rsn 0x0100000fac040100000fac040100000fac012800,
htop=<20MHz chan 36,STA chanw 20MHz,RIFS,non-greenfield STA,basic MCS set
0x0000000000000000>, 127:4 0x00100000, 133:30
0x04008f000f00ff03590055572d41502d303600000000000000000700003b, 150:6
0x004096000e00, vendor 0x0050f2020101800003a4000027a4000042435e0062322f00,
vendor 0x004096010104, vendor 0x0040960305, vendor 0x0040960b09, vendor
0x0040961401, <radiotap v0, tsf 232335401, 6Mbit/s, chan 36, 11a, sig 14dBm,
noise 0dBm>
10:33:16.116947 802.11 flags=0<>: beacon, timestamp 10105362278450, interval
102, caps=10021<ESS,PRIVACY,RADIO_MEASUREMENT>, ssid (UW-Guest), rates 6M 9M
12M 18M 24M 36M 48M 54M, tim 0x00010000, country 'US ', channels 36-39 limit
17dB, channels 52-55 limit 24dB, channels 100-104 limit 24dB, channels 132-134
limit 24dB, 7 stations, 11% utilization, admission capacity 732us/s,
htcaps=<20/40MHz,SGI@20MHz,SGI@40MHz,TXSTBC,RXSTBC 1 stream,A-MSDU
7935,DSSS/CCK@40MHz,A-MPDU max 65535,A-MPDU spacing 8.00us,RxMCS
0xffffff00000000000000>, rsn 0x0100000fac040100000fac040100000fac022800,
htop=<20MHz chan 36,STA chanw 20MHz,RIFS,non-greenfield STA,basic MCS set
0x0000000000000000>, 127:4 0x00100000, 133:30
0x04008f000f00ff03590055572d41502d303600000000000000000700003b, 150:6
0x004096000e00, vendor 0x0050f2020101800003a4000027a4000042435e0062322f00,
vendor 0x004096010104, vendor 0x0040960305, vendor 0x0040960b09, vendor
0x0040961401, <radiotap v0, tsf 232353833, 6Mbit/s, chan 36, 11a, sig 13dBm,
noise 0dBm>
10:33:16.122286 802.11 flags=0<>: beacon, timestamp 52449989855282, interval
102, caps=10021<ESS,PRIVACY,RADIO_MEASUREMENT>, ssid (UW-Wireless), rates 6M
9M 12M 18M 24M 36M 48M 54M, tim 0x00010100000000, country 'US ', channels
36-39 limit 17dB, channels 52-55 limit 24dB, channels 100-104 limit 24dB,
channels 132-134 limit 24dB, 40 stations, 0% utilization, admission capacity
731us/s, htcaps=<20/40MHz,SGI@20MHz,SGI@40MHz,TXSTBC,RXSTBC 1 stream,A-MSDU
7935,DSSS/CCK@40MHz,A-MPDU max 65535,A-MPDU spacing 8.00us,RxMCS
0xffffff00000000000000>, rsn 0x0100000fac040100000fac040100000fac022800,
htop=<20MHz chan 36,STA chanw 20MHz,RIFS,non-greenfield STA,basic MCS set
0x0000000000000000>, 127:4 0x00100000, 133:30
0x0c008f000f00ff03590055572d41502d303100000000000000002800003b, 150:6
0x004096000e00, vendor 0x0050f2020101800003a4000027a4000042435e0062322f00,
vendor 0x004096010104, vendor 0x0040960305, vendor 0x0040960b09, vendor
0x0040961401, <radiotap v0, tsf 232359195, 6Mbit/s, chan 36, 11a, sig 5dBm,
noise 0dBm>
10:33:16.425514 802.11 flags=0<>: beacon, timestamp 447966720043, interval
100,
caps=143061<ESS,PRIVACY,SHORT_PREAMBLE,QOS,SHORT_SLOTTIME,DELAYED_B_ACK,IMMED
IATE_B_ACK>, ssid (), vendor 0x0050f2110110022c0128000000010000, <radiotap v0,
tsf 232661143, 6Mbit/s, chan 48, 11a, sig 16dBm, noise 0dBm>


This would be a selection of dmesg output for the work AP's:
iwm apm stop
iwm apm start
iwm apm start
Radio type=0x0-0x2-0x1
loading ring 0 descriptors (0xffffff0001c04000) at 1c040
loading ring 1 descriptors (0xffffff0001c21000) at 1c210
loading ring 2 descriptors (0xffffff0001c3e000) at 1c3e0
loading ring 3 descriptors (0xffffff0001c5b000) at 1c5b0
loading ring 4 descriptors (0xffffff0001c78000) at 1c780
loading ring 5 descriptors (0xffffff0001c95000) at 1c950
loading ring 6 descriptors (0xffffff0001cb2000) at 1cb20
loading ring 7 descriptors (0xffffff0001ccf000) at 1ccf0
loading ring 8 descriptors (0xffffff0001cec000) at 1cec0
loading ring 9 descriptors (0xffffff0001d09000) at 1d090
loading ring 10 descriptors (0xffffff0001d26000) at 1d260
loading ring 11 descriptors (0xffffff0001d2e000) at 1d2e0
loading ring 12 descriptors (0xffffff0001d36000) at 1d360
loading ring 13 descriptors (0xffffff0001d3e000) at 1d3e0
loading ring 14 descriptors (0xffffff0001d46000) at 1d460
loading ring 15 descriptors (0xffffff0001d4e000) at 1d4e0
loading ring 16 descriptors (0xffffff0001d56000) at 1d560
loading ring 17 descriptors (0xffffff0001d5e000) at 1d5e0
loading ring 18 descriptors (0xffffff0001d66000) at 1d660
loading ring 19 descriptors (0xffffff0001d6e000) at 1d6e0
shadow registers enabled
LOAD FIRMWARE type 0 offset 8388608 len 81920
LOAD FIRMWARE type 0 offset 0 len 101588
LOAD FIRMWARE type 0 offset 4294954188 len 32
enabled txq 9 FIFO 7
sending command 0x98 qid 9, idx 0
sending command 0x6a qid 9, idx 1
iwm apm stop
iwm apm start
iwm apm start
Radio type=0x0-0x2-0x1
loading ring 0 descriptors (0xffffff0001c04000) at 1c040
loading ring 1 descriptors (0xffffff0001c21000) at 1c210
loading ring 2 descriptors (0xffffff0001c3e000) at 1c3e0
loading ring 3 descriptors (0xffffff0001c5b000) at 1c5b0
loading ring 4 descriptors (0xffffff0001c78000) at 1c780
loading ring 5 descriptors (0xffffff0001c95000) at 1c950
loading ring 6 descriptors (0xffffff0001cb2000) at 1cb20
loading ring 7 descriptors (0xffffff0001ccf000) at 1ccf0
loading ring 8 descriptors (0xffffff0001cec000) at 1cec0
loading ring 9 descriptors (0xffffff0001d09000) at 1d090
loading ring 10 descriptors (0xffffff0001d26000) at 1d260
loading ring 11 descriptors (0xffffff0001d2e000) at 1d2e0
loading ring 12 descriptors (0xffffff0001d36000) at 1d360
loading ring 13 descriptors (0xffffff0001d3e000) at 1d3e0
loading ring 14 descriptors (0xffffff0001d46000) at 1d460
loading ring 15 descriptors (0xffffff0001d4e000) at 1d4e0
loading ring 16 descriptors (0xffffff0001d56000) at 1d560
loading ring 17 descriptors (0xffffff0001d5e000) at 1d5e0
loading ring 18 descriptors (0xffffff0001d66000) at 1d660
loading ring 19 descriptors (0xffffff0001d6e000) at 1d6e0
shadow registers enabled
LOAD FIRMWARE type 1 offset 8388608 len 81920
LOAD FIRMWARE type 1 offset 0 len 183268
LOAD FIRMWARE type 1 offset 4294954188 len 32
enabled txq 9 FIFO 7
sending command 0x98 qid 9, idx 0
Sending phy db data and configuration to runtime image
sending command 0x6c qid 9, idx 1
sending command 0x6c qid 9, idx 2
sending command 0x6c qid 9, idx 3
sending command 0x6c qid 9, idx 4
sending command 0x6c qid 9, idx 5
sending command 0x6c qid 9, idx 6
sending command 0x6c qid 9, idx 7
sending command 0x6c qid 9, idx 8
sending command 0x6c qid 9, idx 9
sending command 0x6c qid 9, idx 10
sending command 0x6c qid 9, idx 11
sending command 0x6c qid 9, idx 12
sending command 0x6c qid 9, idx 13
sending command 0x6c qid 9, idx 14
sending command 0x6c qid 9, idx 15
Finished sending phy db non channel data
sending command 0x6a qid 9, idx 16
sending command 0x18 qid 9, idx 17
Internal station added.
sending command 0x8 qid 9, idx 18
sending command 0x8 qid 9, idx 19
sending command 0x8 qid 9, idx 20
Sending device power command with flags = 0x2001
sending command 0x77 qid 9, idx 21
enabled txq 0 FIFO 0
enabled txq 1 FIFO 1
enabled txq 2 FIFO 2
enabled txq 3 FIFO 3
iwm_mvm_mac_ctxt_cmd_common: htprot = 0
dtim 1 0
sending command 0x28 qid 9, idx 22
switching state INIT->SCAN
Handling ieee80211 scan request
sending command 0x80 qid 9, idx 23
Scan request was sent successfully
iwm apm stop
iwm apm start
iwm apm start
Radio type=0x0-0x2-0x1
loading ring 0 descriptors (0xffffff0001c04000) at 1c040
loading ring 1 descriptors (0xffffff0001c21000) at 1c210
loading ring 2 descriptors (0xffffff0001c3e000) at 1c3e0
loading ring 3 descriptors (0xffffff0001c5b000) at 1c5b0
loading ring 4 descriptors (0xffffff0001c78000) at 1c780
loading ring 5 descriptors (0xffffff0001c95000) at 1c950
loading ring 6 descriptors (0xffffff0001cb2000) at 1cb20
loading ring 7 descriptors (0xffffff0001ccf000) at 1ccf0
loading ring 8 descriptors (0xffffff0001cec000) at 1cec0
loading ring 9 descriptors (0xffffff0001d09000) at 1d090
loading ring 10 descriptors (0xffffff0001d26000) at 1d260
loading ring 11 descriptors (0xffffff0001d2e000) at 1d2e0
loading ring 12 descriptors (0xffffff0001d36000) at 1d360
loading ring 13 descriptors (0xffffff0001d3e000) at 1d3e0
loading ring 14 descriptors (0xffffff0001d46000) at 1d460
loading ring 15 descriptors (0xffffff0001d4e000) at 1d4e0
loading ring 16 descriptors (0xffffff0001d56000) at 1d560
loading ring 17 descriptors (0xffffff0001d5e000) at 1d5e0
loading ring 18 descriptors (0xffffff0001d66000) at 1d660
loading ring 19 descriptors (0xffffff0001d6e000) at 1d6e0
shadow registers enabled
LOAD FIRMWARE type 0 offset 8388608 len 81920
LOAD FIRMWARE type 0 offset 0 len 101588
LOAD FIRMWARE type 0 offset 4294954188 len 32
enabled txq 9 FIFO 7
sending command 0x98 qid 9, idx 0
sending command 0x6a qid 9, idx 1
iwm apm stop
iwm apm start
iwm apm start
Radio type=0x0-0x2-0x1
loading ring 0 descriptors (0xffffff0001c04000) at 1c040
loading ring 1 descriptors (0xffffff0001c21000) at 1c210
loading ring 2 descriptors (0xffffff0001c3e000) at 1c3e0
loading ring 3 descriptors (0xffffff0001c5b000) at 1c5b0
loading ring 4 descriptors (0xffffff0001c78000) at 1c780
loading ring 5 descriptors (0xffffff0001c95000) at 1c950
loading ring 6 descriptors (0xffffff0001cb2000) at 1cb20
loading ring 7 descriptors (0xffffff0001ccf000) at 1ccf0
loading ring 8 descriptors (0xffffff0001cec000) at 1cec0
loading ring 9 descriptors (0xffffff0001d09000) at 1d090
loading ring 10 descriptors (0xffffff0001d26000) at 1d260
loading ring 11 descriptors (0xffffff0001d2e000) at 1d2e0
loading ring 12 descriptors (0xffffff0001d36000) at 1d360
loading ring 13 descriptors (0xffffff0001d3e000) at 1d3e0
loading ring 14 descriptors (0xffffff0001d46000) at 1d460
loading ring 15 descriptors (0xffffff0001d4e000) at 1d4e0
loading ring 16 descriptors (0xffffff0001d56000) at 1d560
loading ring 17 descriptors (0xffffff0001d5e000) at 1d5e0
loading ring 18 descriptors (0xffffff0001d66000) at 1d660
loading ring 19 descriptors (0xffffff0001d6e000) at 1d6e0
shadow registers enabled
LOAD FIRMWARE type 1 offset 8388608 len 81920
LOAD FIRMWARE type 1 offset 0 len 183268
LOAD FIRMWARE type 1 offset 4294954188 len 32
enabled txq 9 FIFO 7
sending command 0x98 qid 9, idx 0
Sending phy db data and configuration to runtime image
sending command 0x6c qid 9, idx 1
sending command 0x6c qid 9, idx 2
sending command 0x6c qid 9, idx 3
sending command 0x6c qid 9, idx 4
sending command 0x6c qid 9, idx 5
sending command 0x6c qid 9, idx 6
sending command 0x6c qid 9, idx 7
sending command 0x6c qid 9, idx 8
sending command 0x6c qid 9, idx 9
sending command 0x6c qid 9, idx 10
sending command 0x6c qid 9, idx 11
sending command 0x6c qid 9, idx 12
sending command 0x6c qid 9, idx 13
sending command 0x6c qid 9, idx 14
sending command 0x6c qid 9, idx 15
Finished sending phy db non channel data
sending command 0x6a qid 9, idx 16
sending command 0x18 qid 9, idx 17
Internal station added.
sending command 0x8 qid 9, idx 18
sending command 0x8 qid 9, idx 19
sending command 0x8 qid 9, idx 20
Sending device power command with flags = 0x2001
sending command 0x77 qid 9, idx 21
enabled txq 0 FIFO 0
enabled txq 1 FIFO 1
enabled txq 2 FIFO 2
enabled txq 3 FIFO 3
iwm_mvm_mac_ctxt_cmd_common: htprot = 0
dtim 1 0
sending command 0x28 qid 9, idx 22
switching state INIT->SCAN
Handling ieee80211 scan request
sending command 0x80 qid 9, idx 23
iwm apm stop
iwm apm start
iwm apm start
Radio type=0x0-0x2-0x1
loading ring 0 descriptors (0xffffff0001c04000) at 1c040
loading ring 1 descriptors (0xffffff0001c21000) at 1c210
loading ring 2 descriptors (0xffffff0001c3e000) at 1c3e0
loading ring 3 descriptors (0xffffff0001c5b000) at 1c5b0
loading ring 4 descriptors (0xffffff0001c78000) at 1c780
loading ring 5 descriptors (0xffffff0001c95000) at 1c950
loading ring 6 descriptors (0xffffff0001cb2000) at 1cb20
loading ring 7 descriptors (0xffffff0001ccf000) at 1ccf0
loading ring 8 descriptors (0xffffff0001cec000) at 1cec0
loading ring 9 descriptors (0xffffff0001d09000) at 1d090
loading ring 10 descriptors (0xffffff0001d26000) at 1d260
loading ring 11 descriptors (0xffffff0001d2e000) at 1d2e0
loading ring 12 descriptors (0xffffff0001d36000) at 1d360
loading ring 13 descriptors (0xffffff0001d3e000) at 1d3e0
loading ring 14 descriptors (0xffffff0001d46000) at 1d460
loading ring 15 descriptors (0xffffff0001d4e000) at 1d4e0
loading ring 16 descriptors (0xffffff0001d56000) at 1d560
loading ring 17 descriptors (0xffffff0001d5e000) at 1d5e0
loading ring 18 descriptors (0xffffff0001d66000) at 1d660
loading ring 19 descriptors (0xffffff0001d6e000) at 1d6e0
shadow registers enabled
LOAD FIRMWARE type 0 offset 8388608 len 81920
LOAD FIRMWARE type 0 offset 0 len 101588
LOAD FIRMWARE type 0 offset 4294954188 len 32
enabled txq 9 FIFO 7
sending command 0x98 qid 9, idx 0
sending command 0x6a qid 9, idx 1
iwm apm stop
iwm apm start
iwm apm start
Radio type=0x0-0x2-0x1
loading ring 0 descriptors (0xffffff0001c04000) at 1c040
loading ring 1 descriptors (0xffffff0001c21000) at 1c210
loading ring 2 descriptors (0xffffff0001c3e000) at 1c3e0
loading ring 3 descriptors (0xffffff0001c5b000) at 1c5b0
loading ring 4 descriptors (0xffffff0001c78000) at 1c780
loading ring 5 descriptors (0xffffff0001c95000) at 1c950
loading ring 6 descriptors (0xffffff0001cb2000) at 1cb20
loading ring 7 descriptors (0xffffff0001ccf000) at 1ccf0
loading ring 8 descriptors (0xffffff0001cec000) at 1cec0
loading ring 9 descriptors (0xffffff0001d09000) at 1d090
loading ring 10 descriptors (0xffffff0001d26000) at 1d260
loading ring 11 descriptors (0xffffff0001d2e000) at 1d2e0
loading ring 12 descriptors (0xffffff0001d36000) at 1d360
loading ring 13 descriptors (0xffffff0001d3e000) at 1d3e0
loading ring 14 descriptors (0xffffff0001d46000) at 1d460
loading ring 15 descriptors (0xffffff0001d4e000) at 1d4e0
loading ring 16 descriptors (0xffffff0001d56000) at 1d560
loading ring 17 descriptors (0xffffff0001d5e000) at 1d5e0
loading ring 18 descriptors (0xffffff0001d66000) at 1d660
loading ring 19 descriptors (0xffffff0001d6e000) at 1d6e0
shadow registers enabled
LOAD FIRMWARE type 1 offset 8388608 len 81920
LOAD FIRMWARE type 1 offset 0 len 183268
LOAD FIRMWARE type 1 offset 4294954188 len 32
enabled txq 9 FIFO 7
sending command 0x98 qid 9, idx 0
Sending phy db data and configuration to runtime image
sending command 0x6c qid 9, idx 1
sending command 0x6c qid 9, idx 2
sending command 0x6c qid 9, idx 3
sending command 0x6c qid 9, idx 4
sending command 0x6c qid 9, idx 5
sending command 0x6c qid 9, idx 6
sending command 0x6c qid 9, idx 7
sending command 0x6c qid 9, idx 8
sending command 0x6c qid 9, idx 9
sending command 0x6c qid 9, idx 10
sending command 0x6c qid 9, idx 11
sending command 0x6c qid 9, idx 12
sending command 0x6c qid 9, idx 13
sending command 0x6c qid 9, idx 14
sending command 0x6c qid 9, idx 15
Finished sending phy db non channel data
sending command 0x6a qid 9, idx 16
iwm0: could not initiate 2 GHz scan
sending command 0x18 qid 9, idx 17
Internal station added.
sending command 0x8 qid 9, idx 18
sending command 0x8 qid 9, idx 19
sending command 0x8 qid 9, idx 20
Sending device power command with flags = 0x2001
sending command 0x77 qid 9, idx 21
enabled txq 0 FIFO 0
enabled txq 1 FIFO 1
enabled txq 2 FIFO 2
enabled txq 3 FIFO 3
iwm_mvm_mac_ctxt_cmd_common: htprot = 0
dtim 1 0
sending command 0x28 qid 9, idx 22
switching state INIT->SCAN
Handling ieee80211 scan request
sending command 0x80 qid 9, idx 23
iwm apm stop
iwm apm start
iwm apm start
Radio type=0x0-0x2-0x1
loading ring 0 descriptors (0xffffff0001c04000) at 1c040
loading ring 1 descriptors (0xffffff0001c21000) at 1c210
loading ring 2 descriptors (0xffffff0001c3e000) at 1c3e0
loading ring 3 descriptors (0xffffff0001c5b000) at 1c5b0
loading ring 4 descriptors (0xffffff0001c78000) at 1c780
loading ring 5 descriptors (0xffffff0001c95000) at 1c950
loading ring 6 descriptors (0xffffff0001cb2000) at 1cb20
loading ring 7 descriptors (0xffffff0001ccf000) at 1ccf0
loading ring 8 descriptors (0xffffff0001cec000) at 1cec0
loading ring 9 descriptors (0xffffff0001d09000) at 1d090
loading ring 10 descriptors (0xffffff0001d26000) at 1d260
loading ring 11 descriptors (0xffffff0001d2e000) at 1d2e0
loading ring 12 descriptors (0xffffff0001d36000) at 1d360
loading ring 13 descriptors (0xffffff0001d3e000) at 1d3e0
loading ring 14 descriptors (0xffffff0001d46000) at 1d460
loading ring 15 descriptors (0xffffff0001d4e000) at 1d4e0
loading ring 16 descriptors (0xffffff0001d56000) at 1d560
loading ring 17 descriptors (0xffffff0001d5e000) at 1d5e0
loading ring 18 descriptors (0xffffff0001d66000) at 1d660
loading ring 19 descriptors (0xffffff0001d6e000) at 1d6e0
shadow registers enabled
LOAD FIRMWARE type 0 offset 8388608 len 81920
LOAD FIRMWARE type 0 offset 0 len 101588
LOAD FIRMWARE type 0 offset 4294954188 len 32
enabled txq 9 FIFO 7
sending command 0x98 qid 9, idx 0
sending command 0x6a qid 9, idx 1
iwm apm stop
iwm apm start
iwm apm start
Radio type=0x0-0x2-0x1
loading ring 0 descriptors (0xffffff0001c04000) at 1c040
loading ring 1 descriptors (0xffffff0001c21000) at 1c210
loading ring 2 descriptors (0xffffff0001c3e000) at 1c3e0
loading ring 3 descriptors (0xffffff0001c5b000) at 1c5b0
loading ring 4 descriptors (0xffffff0001c78000) at 1c780
loading ring 5 descriptors (0xffffff0001c95000) at 1c950
loading ring 6 descriptors (0xffffff0001cb2000) at 1cb20
loading ring 7 descriptors (0xffffff0001ccf000) at 1ccf0
loading ring 8 descriptors (0xffffff0001cec000) at 1cec0
loading ring 9 descriptors (0xffffff0001d09000) at 1d090
loading ring 10 descriptors (0xffffff0001d26000) at 1d260
loading ring 11 descriptors (0xffffff0001d2e000) at 1d2e0
loading ring 12 descriptors (0xffffff0001d36000) at 1d360
loading ring 13 descriptors (0xffffff0001d3e000) at 1d3e0
loading ring 14 descriptors (0xffffff0001d46000) at 1d460
loading ring 15 descriptors (0xffffff0001d4e000) at 1d4e0
loading ring 16 descriptors (0xffffff0001d56000) at 1d560
loading ring 17 descriptors (0xffffff0001d5e000) at 1d5e0
loading ring 18 descriptors (0xffffff0001d66000) at 1d660
loading ring 19 descriptors (0xffffff0001d6e000) at 1d6e0
shadow registers enabled
LOAD FIRMWARE type 1 offset 8388608 len 81920
LOAD FIRMWARE type 1 offset 0 len 183268
LOAD FIRMWARE type 1 offset 4294954188 len 32
enabled txq 9 FIFO 7
sending command 0x98 qid 9, idx 0
Sending phy db data and configuration to runtime image
sending command 0x6c qid 9, idx 1
sending command 0x6c qid 9, idx 2
sending command 0x6c qid 9, idx 3
sending command 0x6c qid 9, idx 4
sending command 0x6c qid 9, idx 5
sending command 0x6c qid 9, idx 6
sending command 0x6c qid 9, idx 7
sending command 0x6c qid 9, idx 8
sending command 0x6c qid 9, idx 9
sending command 0x6c qid 9, idx 10
sending command 0x6c qid 9, idx 11
sending command 0x6c qid 9, idx 12
sending command 0x6c qid 9, idx 13
sending command 0x6c qid 9, idx 14
sending command 0x6c qid 9, idx 15
Finished sending phy db non channel data
sending command 0x6a qid 9, idx 16
iwm0: could not initiate 2 GHz scan
sending command 0x18 qid 9, idx 17
Internal station added.
sending command 0x8 qid 9, idx 18
sending command 0x8 qid 9, idx 19
sending command 0x8 qid 9, idx 20
Sending device power command with flags = 0x2001
sending command 0x77 qid 9, idx 21
enabled txq 0 FIFO 0
enabled txq 1 FIFO 1
enabled txq 2 FIFO 2
enabled txq 3 FIFO 3
iwm_mvm_mac_ctxt_cmd_common: htprot = 0
dtim 1 0
sending command 0x28 qid 9, idx 22
switching state INIT->SCAN
Handling ieee80211 scan request
sending command 0x80 qid 9, idx 23
Scan request was sent successfully
scan ended
Handling ieee80211 scan request
sending command 0x80 qid 9, idx 24
Scan request was sent successfully
scan ended
switching state SCAN->AUTH
sending command 0xd0 qid 9, idx 25
sending command 0x8 qid 9, idx 26
sending command 0x2b qid 9, idx 27
sending command 0x18 qid 9, idx 28
Add new TE, duration 1000 TU
sending command 0x29 qid 9, idx 29
iwm0: TE notif status = 0x1 action = 0x1
switching state AUTH->ASSOC
sending command 0x18 qid 9, idx 30
dtim 1 0
DTIM TBTT is 0x156e74a104b5/0x41a53f, offset 0
sending command 0x28 qid 9, idx 31
iwm0: TE notif status = 0x1 action = 0x2
switching state ASSOC->AUTH
iwm apm stop
iwm apm start
iwm apm start
Radio type=0x0-0x2-0x1
loading ring 0 descriptors (0xffffff0001c04000) at 1c040
loading ring 1 descriptors (0xffffff0001c21000) at 1c210
loading ring 2 descriptors (0xffffff0001c3e000) at 1c3e0
loading ring 3 descriptors (0xffffff0001c5b000) at 1c5b0
loading ring 4 descriptors (0xffffff0001c78000) at 1c780
loading ring 5 descriptors (0xffffff0001c95000) at 1c950
loading ring 6 descriptors (0xffffff0001cb2000) at 1cb20
loading ring 7 descriptors (0xffffff0001ccf000) at 1ccf0
loading ring 8 descriptors (0xffffff0001cec000) at 1cec0
loading ring 9 descriptors (0xffffff0001d09000) at 1d090
loading ring 10 descriptors (0xffffff0001d26000) at 1d260
loading ring 11 descriptors (0xffffff0001d2e000) at 1d2e0
loading ring 12 descriptors (0xffffff0001d36000) at 1d360
loading ring 13 descriptors (0xffffff0001d3e000) at 1d3e0
loading ring 14 descriptors (0xffffff0001d46000) at 1d460
loading ring 15 descriptors (0xffffff0001d4e000) at 1d4e0
loading ring 16 descriptors (0xffffff0001d56000) at 1d560
loading ring 17 descriptors (0xffffff0001d5e000) at 1d5e0
loading ring 18 descriptors (0xffffff0001d66000) at 1d660
loading ring 19 descriptors (0xffffff0001d6e000) at 1d6e0
shadow registers enabled
LOAD FIRMWARE type 0 offset 8388608 len 81920
LOAD FIRMWARE type 0 offset 0 len 101588
LOAD FIRMWARE type 0 offset 4294954188 len 32
enabled txq 9 FIFO 7
sending command 0x98 qid 9, idx 0
sending command 0x6a qid 9, idx 1
iwm apm stop
iwm apm start
iwm apm start
Radio type=0x0-0x2-0x1
loading ring 0 descriptors (0xffffff0001c04000) at 1c040
loading ring 1 descriptors (0xffffff0001c21000) at 1c210
loading ring 2 descriptors (0xffffff0001c3e000) at 1c3e0
loading ring 3 descriptors (0xffffff0001c5b000) at 1c5b0
loading ring 4 descriptors (0xffffff0001c78000) at 1c780
loading ring 5 descriptors (0xffffff0001c95000) at 1c950
loading ring 6 descriptors (0xffffff0001cb2000) at 1cb20
loading ring 7 descriptors (0xffffff0001ccf000) at 1ccf0
loading ring 8 descriptors (0xffffff0001cec000) at 1cec0
loading ring 9 descriptors (0xffffff0001d09000) at 1d090
loading ring 10 descriptors (0xffffff0001d26000) at 1d260
loading ring 11 descriptors (0xffffff0001d2e000) at 1d2e0
loading ring 12 descriptors (0xffffff0001d36000) at 1d360
loading ring 13 descriptors (0xffffff0001d3e000) at 1d3e0
loading ring 14 descriptors (0xffffff0001d46000) at 1d460
loading ring 15 descriptors (0xffffff0001d4e000) at 1d4e0
loading ring 16 descriptors (0xffffff0001d56000) at 1d560
loading ring 17 descriptors (0xffffff0001d5e000) at 1d5e0
loading ring 18 descriptors (0xffffff0001d66000) at 1d660
loading ring 19 descriptors (0xffffff0001d6e000) at 1d6e0
shadow registers enabled
LOAD FIRMWARE type 1 offset 8388608 len 81920
LOAD FIRMWARE type 1 offset 0 len 183268
LOAD FIRMWARE type 1 offset 4294954188 len 32
enabled txq 9 FIFO 7
sending command 0x98 qid 9, idx 0
Sending phy db data and configuration to runtime image
sending command 0x6c qid 9, idx 1
sending command 0x6c qid 9, idx 2
sending command 0x6c qid 9, idx 3
sending command 0x6c qid 9, idx 4
sending command 0x6c qid 9, idx 5
sending command 0x6c qid 9, idx 6
sending command 0x6c qid 9, idx 7
sending command 0x6c qid 9, idx 8
sending command 0x6c qid 9, idx 9
sending command 0x6c qid 9, idx 10
sending command 0x6c qid 9, idx 11
sending command 0x6c qid 9, idx 12
sending command 0x6c qid 9, idx 13
sending command 0x6c qid 9, idx 14
sending command 0x6c qid 9, idx 15
Finished sending phy db non channel data
sending command 0x6a qid 9, idx 16
sending command 0x18 qid 9, idx 17
Internal station added.
sending command 0x8 qid 9, idx 18
sending command 0x8 qid 9, idx 19
sending command 0x8 qid 9, idx 20
Sending device power command with flags = 0x2001
sending command 0x77 qid 9, idx 21
enabled txq 0 FIFO 0
enabled txq 1 FIFO 1
enabled txq 2 FIFO 2
enabled txq 3 FIFO 3
dtim 1 0
sending command 0x28 qid 9, idx 22
Force transition to INIT; MGT=192
Going INIT->SCAN
Handling ieee80211 scan request
sending command 0x80 qid 9, idx 23
Scan request was sent successfully
scan ended
Handling ieee80211 scan request
sending command 0x80 qid 9, idx 24
Scan request was sent successfully
scan ended
switching state SCAN->AUTH
sending command 0xd0 qid 9, idx 25
sending command 0x8 qid 9, idx 26
sending command 0x2b qid 9, idx 27
sending command 0x18 qid 9, idx 28
Add new TE, duration 1000 TU
sending command 0x29 qid 9, idx 29
iwm0: TE notif status = 0x1 action = 0x1
switching state AUTH->ASSOC
sending command 0x18 qid 9, idx 30
dtim 1 0
DTIM TBTT is 0xd1db54b0960/0x342c5f, offset 0
sending command 0x28 qid 9, idx 31
iwm0: TE notif status = 0x1 action = 0x2

Reply | Threaded
Open this post in threaded view
|

Re: iwm0: could not initiate 2 GHz scan

Stefan Sperling-5
On Thu, Jan 14, 2016 at 07:41:59PM -0700, Chris Wojo wrote:
> Here is a one liner from the beacons at home:

It seems this AP does not support 802.11n and is using WEP.
Is this correct?

> Here are a few beacons from work:

There's nothing unusual in these beacons as far as I can tell.

> This would be a selection of dmesg output for the work AP's:

It looks as if your connection failures at work could be related
to authentication failures. The OpenBSD client won't move from ASSOC
to RUN state. This usually means WPA authentication is failing.
Let's try to confirm this theory.

Which authentication mechanism is used on this network?
It's using some form of WPA but I'm not sure which exactly.
Can you show the lines 'ifconfig iwm0 scan' displays for these APs?
These lines should indicate the authentication method used.
If the lines contain '802.1x' you'll need to install wpa_supplicant
from packages and configure it before connecting.
See http://undeadly.org/cgi?action=article&sid=20130128142215 for details.

Can you run 'ifconfig iwm0 debug' before trying to connect, and show
the WPA 'handshake' messages which should now end up in dmesg?
Upon success, 4 handshake messages are exchanged and the 'status:'
line displayed by 'ifconfig iwm0' becomes 'active'. Note that dhclient
cannot do anything before the link becomes active, so if you've only
been checking dhclient output that's not the right place to look.

Can you show what 'ifconfig iwm0' (as non-root user so passwords remain
hidden) looks like while you're trying to connect at work?
Perhaps you have a WEP key and a WPA set at the same time after moving
from home to the office while the laptop is suspended?
Switching from a WEP network to a WPA network requires clearing the
WEP key with 'ifconfig iwm0 -nwkey' in addition to the commands which
set up WPA. I've fallen into this trap myself many many times.

If none of the above help, did you ever manage to use any OpenBSD client
in this environment? Can you connect to this network with an OpenBSD
client using a wifi device supported by a driver other than iwm(4)?