[Bug 296153] rtw88: RTL8822BE: regression in 15.1

From: <bugzilla-noreply_at_freebsd.org>
Date: Fri, 19 Jun 2026 15:40:48 UTC 
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296153

            Bug ID: 296153
           Summary: rtw88: RTL8822BE: regression in 15.1
           Product: Base System
           Version: 15.1-RELEASE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: wireless
          Assignee: wireless@FreeBSD.org
          Reporter: naito.yuichiro@gmail.com

I have a notebook PC, HP Envy x360. This PC has a Wifi chip RTL8822BE, as shown
below by the pciconf command.

rtw880@pci0:2:0:0:      class=0x028000 rev=0x00 hdr=0x00 vendor=0x10ec
device=0xb822 subvend
or=0x103c subdevice=0x831b
    vendor     = 'Realtek Semiconductor Co., Ltd.'
    device     = 'RTL8822BE 802.11a/b/g/n/ac WiFi adapter'
    class      = network

It worked on FreeBSD 15.0, but stopped working after upgrading to 15.1.

I installed the following firmware that fwget tells me to install.

# fwget
Needed firmware packages: 'wifi-firmware-rtw88-kmod-rtw8822b
gpu-firmware-amd-kmod-picasso'

# pkg info -x kmod
drm-66-kmod-6.6.25.1501000_8
gpu-firmware-amd-kmod-picasso-20250109.1501000
gpu-firmware-amd-kmod-raven-20250109.1501000
wifi-firmware-rtw88-kmod-rtw8822b-20251125

The rtw88 driver appears to load the firmware successfully, as shown in dmesg.

rtw880: <rtw88> port 0xf000-0xf0ff mem 0xfce00000-0xfce0ffff at device 0.0 on
pci2
linuxkpi: Using chanctx emulation.
rtw880: successfully loaded firmware image 'rtw88/rtw8822b_fw.bin'
rtw880: Firmware version 30.20.0, H2C version 14

I set up my wlan1 interface as follows.

# ifconfig wlan1 create wlandev rtw880
# ifconfig wlan1 up
# ifconfig wlan1 scan
SSID/MESH ID                      BSSID              CHAN RATE    S:N     INT
CAPS
                                  xx:xx:xx:xx:xx:xx    6   54M  -70:-96   200
EPS  RSN HTCAP
 VHTCAP VHTOPMODE WME
JCOM_KEKI                         xx:xx:xx:xx:xx:xx    6   54M  -71:-96   200
EPS  RSN HTCAP
 VHTCAP VHTOPMODE WME WPS
DIRECT-0d-EPSON-EW-M754T Series   xx:xx:xx:xx:xx:xx   11   54M  -64:-96   100
EP   RSN HTCAP
 WME WPS
HUMAX-5D1F8-A                     xx:xx:xx:xx:xx:xx   36   54M  -80:-96   100
EP   RSN BSSLO
AD HTCAP VHTCAP VHTOPMODE VHTPWRENV WPS WME
                                  xx:xx:xx:xx:xx:xx   44   54M  -63:-96   100
EP   RSN HTCAP
 VHTCAP VHTOPMODE VHTPWRENV WME
                                  xx:xx:xx:xx:xx:xx   44   54M  -71:-96   100
EP   RSN HTCAP
 VHTCAP VHTOPMODE VHTPWRENV WME
aterm-d74c89-a                    xx:xx:xx:xx:xx:xx   44   54M  -70:-96   100
EP   HTCAP VHT
CAP VHTOPMODE VHTPWRENV HECAP HEOPER MU_EDCA_PARAM_SET WME ATH RSN WPA WPS
NSD1K-5D30-a                      xx:xx:xx:xx:xx:xx   48   54M  -36:-96   100
EP   RSN BSSLO
AD SUP_OP_CLASS HTCAP VHTCAP VHTOPMODE VHTPWRENV HECAP HEOPER MU_EDCA_PARAM_SET
WPS WME

The `ifconfig scan` command works fine. I replaced all the MAC addresses with
xx
for security reasons. Then, I started wpa_supplicant, but it failed to connect
to my access point.

# /etc/rc.d/wpa_supplicant start wlan1
Starting wpa_supplicant.

I see the authentication timed out in /var/log/daemon file.

Jun 20 00:01:07 karr wpa_supplicant[4557]: Successfully initialized
wpa_supplicant
Jun 20 00:01:07 karr wpa_supplicant[4557]: ioctl[SIOCS80211, op=20, val=0,
arg_len=7]: Invalid argument
Jun 20 00:01:07 karr syslogd: last message repeated 1 times
Jun 20 00:01:12 karr wpa_supplicant[4558]: wlan1: Trying to associate with
xx:xx:xx:xx:xx:xx (SSID='NSD1K-5D30-a' freq=5240 MHz)
Jun 20 00:01:22 karr wpa_supplicant[4558]: wlan1: Authentication with
xx:xx:xx:xx:xx:xx timed out.
Jun 20 00:01:22 karr wpa_supplicant[4558]: wlan1: Added BSSID xx:xx:xx:xx:xx:xx
into ignore list, ignoring for 10 seconds
Jun 20 00:01:22 karr wpa_supplicant[4558]: wlan1: CTRL-EVENT-DISCONNECTED
bssid=xx:xx:xx:xx:xx:xx reason=3 locally_generated=1
Jun 20 00:01:22 karr wpa_supplicant[4558]: wlan1: BSSID xx:xx:xx:xx:xx:xx
ignore list count incremented to 2, ignoring for 10 seconds
Jun 20 00:01:22 karr wpa_supplicant[4558]: wlan1: CTRL-EVENT-DSCP-POLICY
clear_all
Jun 20 00:01:27 karr wpa_supplicant[4558]: wlan1: Trying to associate with
xx:xx:xx:xx:xx:xx (SSID='NSD1K-5D30-g' freq=2457 MHz)
Jun 20 00:01:37 karr wpa_supplicant[4558]: wlan1: Authentication with
xx:xx:xx:xx:xx:xx timed out.
Jun 20 00:01:37 karr wpa_supplicant[4558]: wlan1: Removed BSSID
xx:xx:xx:xx:xx:xx from ignore list (clear)
Jun 20 00:01:37 karr wpa_supplicant[4558]: wlan1: Added BSSID xx:xx:xx:xx:xx:xx
into ignore list, ignoring for 10 seconds
Jun 20 00:01:37 karr wpa_supplicant[4558]: wlan1: CTRL-EVENT-DISCONNECTED
bssid=xx:xx:xx:xx:xx:xx reason=3 locally_generated=1
Jun 20 00:01:37 karr wpa_supplicant[4558]: wlan1: BSSID xx:xx:xx:xx:xx:xx
ignore list count incremented to 2, ignoring for 10 seconds
Jun 20 00:01:37 karr wpa_supplicant[4558]: wlan1: CTRL-EVENT-DSCP-POLICY
clear_all
Jun 20 00:01:41 karr wpa_supplicant[4558]: wlan1: Trying to associate with
f4:23:9c:d3:5d:35 (SSID='NSD1K-5D30-a' freq=5240 MHz)
Jun 20 00:01:51 karr wpa_supplicant[4558]: wlan1: Authentication with
xx:xx:xx:xx:xx:xx timed out.
Jun 20 00:01:51 karr wpa_supplicant[4558]: wlan1: Added BSSID xx:xx:xx:xx:xx:xx
pinto ignore list, ignoring for 10 seconds
Jun 20 00:01:51 karr wpa_supplicant[4558]: wlan1: CTRL-EVENT-DISCONNECTED
bssid=xx:xx:xx:xx:xx:xx reason=3 locally_generated=1
Jun 20 00:01:51 karr wpa_supplicant[4558]: wlan1: BSSID xx:xx:xx:xx:xx:xx
ignore list count incremented to 2, ignoring for 10 seconds
Jun 20 00:01:51 karr wpa_supplicant[4558]: wlan1: CTRL-EVENT-DSCP-POLICY
clear_all

And dmesg shows the following messages.

wlan1: Ethernet address: xx:xx:xx:xx:xx:xx
rtw880: lkpi_sta_scan_to_auth:2724: lvif 0xfffffe00b9f03000 vap
0xfffffe00b9f03010 iv_bss 0xfffffe00b67c4000 lvif_bss 0 lvif_bss->ni 0 synched
0, ni 0xfffffe00b891d000 lsta 0xfffff800369c0800
rtw880: lkpi_sta_a_to_a:3580: lvif 0xfffffe00b9f03000 vap 0xfffffe00b9f03010
iv_bss 0xfffffe00b67c4000 lvif_bss 0xfffff800369c0800 lvif_bss->ni
0xfffffe00b891d000 synched 0
rtw880: lkpi_iv_newstate: error 95 during state transition 2 (AUTH) -> 2 (AUTH)
rtw880: lkpi_sta_scan_to_auth:2724: lvif 0xfffffe00b9f03000 vap
0xfffffe00b9f03010 iv_bss 0xfffffe00b891d000 lvif_bss 0 lvif_bss->ni 0 synched
0, ni 0xfffffe00b7e7b000 lsta 0xfffff8002813f800
rtw880: lkpi_sta_a_to_a:3580: lvif 0xfffffe00b9f03000 vap 0xfffffe00b9f03010
iv_bss 0xfffffe00b891d000 lvif_bss 0xfffff8002813f800 lvif_bss->ni
0xfffffe00b7e7b000 synched 0
rtw880: lkpi_iv_newstate: error 95 during state transition 2 (AUTH) -> 2 (AUTH)

I see that wlan1 doesn't work.

wlan1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=0
        ether xx:xx:xx:xx:xx:xx
        groups: wlan
        ssid NSD1K-5D30-a channel 40 (5200 MHz 11a)
        regdomain FCC country US authmode WPA1+WPA2/802.11i privacy ON
        deftxkey UNDEF txpower 17 bmiss 7 mcastrate 6 mgmtrate 6 scanvalid 60
        wme roaming MANUAL
        parent interface: rtw880
        media: IEEE 802.11 Wireless Ethernet autoselect (autoselect)
        status: no carrier
        nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>

It's a serious issue for me that wifi doesn't work, so I'm using a USB Wifi
dongle for wlan0. This is why I reported how to reproduce this issue on wlan1.

-- 
You are receiving this mail because:
You are the assignee for the bug.