Installation error: sys-firewall / no internet

Hello,

I have a new small system (intel n100 cpu) and try to install R4.2.2.
During configuration the installer complains:

Title: [Dom0] Error (on dom0)
[‘/usr/bin/qvm-start’,‘sys-firewall’] failed:
stdout: “”
stderr:"Cannot connect to qrexec agent for 60 seconds, see /var/log/xen/console/guest-sys-net.log for details
"

Installer finished after clicking OK button.
Login works.
Qubes seem to be created properly.
The log file does not exist.
sys-net does not boot.

Any advice?
Maybe boot with kernel-latest?

Maybe you have a problem with PCI devices attached to sys-net qube.
You need to check the logs in dom0 to make sure:
journalctl
/var/log/libvirt/libxl/libxl-driver.log
/var/log/xen/console/guest-sys-net.log
/var/log/xen/console/guest-sys-net-dm.log
Maybe it’s this issue with PCI reset and you need to set no-strict-reset for the problematic device:

Reinstalling with kernel-latest didn’t help.
sys-usb works.
sys-net works too when i remove all pci devices. wifi device seems to be the problem.
I hope the log files above are helpful. I’m not allowed to upload the files (fully).

...cut from guest-sys-net.log

[2024-09-04 14:43:20] [    4.251499] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[2024-09-04 14:43:20] [    4.251530] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[2024-09-04 14:43:20] [    4.251559] usb 1-1: Product: QEMU USB Tablet
[2024-09-04 14:43:20] [    4.251575] usb 1-1: Manufacturer: QEMU
[2024-09-04 14:43:20] [    4.251587] usb 1-1: SerialNumber: 42
[2024-09-04 14:43:20] [    4.272815] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:05.0/usb1/1-1/1-1:1.0/0003:0627:0001.0001/input/input6
[2024-09-04 14:43:20] [    4.273233] hid-generic 0003:0627:0001.0001: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:05.0-1/input0
[2024-09-04 14:43:20]          Starting .[0;1;39msystemd-vconsole-setup.service.[0m - Virtual Console Setup...

[2024-09-04 14:43:20] [.[0;32m  OK  .[0m] Started .[0;1;39mabrtd.service.[0m - ABRT Daemon.

[2024-09-04 14:43:20] [    4.296172] rtw_8821ce 0000:00:07.0: Firmware version 24.11.0, H2C version 12
[2024-09-04 14:43:20] [.[0;32m  OK  .[0m] Started .[0;1;39mabrt-journal-core.service.[0m - ABRT coredumpctl message creator.

[2024-09-04 14:43:20] [    4.331562] BUG: kernel NULL pointer dereference, address: 000000000000003c
[2024-09-04 14:43:20] [    4.331589] #PF: supervisor read access in kernel mode
[2024-09-04 14:43:20] [    4.331604] #PF: error_code(0x0000) - not-present page
[2024-09-04 14:43:20] [    4.331618] PGD 0 P4D 0 
[2024-09-04 14:43:20] [    4.331628] Oops: 0000 [#1] PREEMPT SMP NOPTI
[2024-09-04 14:43:20] [    4.331644] CPU: 1 PID: 448 Comm: (udev-worker) Not tainted 6.9.7-1.qubes.fc37.x86_64 #1
[2024-09-04 14:43:20] [    4.331665] Hardware name: Xen HVM domU, BIOS 4.17.4 05/25/2024
[2024-09-04 14:43:20] [    4.331683] RIP: 0010:rtw_pci_probe+0x27f/0x2d8 [rtw88_pci]
[2024-09-04 14:43:20] [    4.331704] Code: 27 26 42 e5 48 89 df e8 2f ea ff ff 48 8b b3 48 84 00 00 48 85 f6 74 bd 4c 89 e7 e8 ab 5c ec e4 4c 89 e7 e8 f3 c4 fa e4 eb ab <66> 41 81 7e 3c 86 80 0f 85 bd fe ff ff c6 83 38 84 00 00 01 e9 b1
[2024-09-04 14:43:20] [    4.331749] RSP: 0018:ffff9cb4c0787828 EFLAGS: 00010246
[2024-09-04 14:43:20] [    4.331767] RAX: ffffffffc0a531a0 RBX: ffff8b8753731fe0 RCX: 0000000000000002
[2024-09-04 14:43:20] [    4.331787] RDX: ffff8b8753732cec RSI: 0000000000000030 RDI: ffff8b8753734978
[2024-09-04 14:43:20] [    4.331808] RBP: 0000000000000000 R08: 000000000000000c R09: 0000000000000000
[2024-09-04 14:43:20] [    4.331828] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8b8741dec000
[2024-09-04 14:43:20] [    4.331848] R13: ffff8b8753730900 R14: 0000000000000000 R15: ffff8b8753738030
[2024-09-04 14:43:20] [    4.331869] FS:  00007fcba7eaf980(0000) GS:ffff8b8757100000(0000) knlGS:0000000000000000
[2024-09-04 14:43:20] [    4.331890] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[2024-09-04 14:43:20] [    4.331909] CR2: 000000000000003c CR3: 0000000008d04003 CR4: 0000000000770ef0
[2024-09-04 14:43:20] [    4.331932] PKRU: 55555554
[2024-09-04 14:43:20] [    4.331939] Call Trace:
[2024-09-04 14:43:20] [    4.331949]  <TASK>
[2024-09-04 14:43:20] [    4.331958]  ? __die+0x23/0x70
[2024-09-04 14:43:20] [    4.331973]  ? page_fault_oops+0x95/0x190
[2024-09-04 14:43:20] [    4.331987]  ? exc_page_fault+0x76/0x170
[2024-09-04 14:43:20] [    4.332001]  ? asm_exc_page_fault+0x26/0x30
[2024-09-04 14:43:20] [    4.332015]  ? rtw_pci_probe+0x27f/0x2d8 [rtw88_pci]
[2024-09-04 14:43:20] [    4.332034]  ? rtw_pci_probe+0x131/0x2d8 [rtw88_pci]
[2024-09-04 14:43:20] [    4.332053]  local_pci_probe+0x42/0xa0
[2024-09-04 14:43:20] [    4.332068]  pci_call_probe+0x54/0x190
[2024-09-04 14:43:20] [    4.332081]  pci_device_probe+0x80/0x100
[2024-09-04 14:43:20] [    4.332094]  ? driver_sysfs_add+0x57/0xc0
[2024-09-04 14:43:20] [    4.332107]  really_probe+0xd3/0x380
[2024-09-04 14:43:20] [    4.332119]  ? __pfx___driver_attach+0x10/0x10
[2024-09-04 14:43:20] [    4.332135]  __driver_probe_device+0x78/0x150
[2024-09-04 14:43:20] [    4.332151]  driver_probe_device+0x1f/0x90
[2024-09-04 14:43:20] [    4.332163]  __driver_attach+0xd2/0x1c0
[2024-09-04 14:43:20] [    4.332176]  bus_for_each_dev+0x85/0xd0
[2024-09-04 14:43:20] [    4.332190]  bus_add_driver+0x142/0x270
[2024-09-04 14:43:20] [    4.332202]  driver_register+0x59/0x100
[2024-09-04 14:43:20] [    4.332215]  ? __pfx_rtw_8821ce_driver_init+0x10/0x10 [rtw88_8821ce]
[2024-09-04 14:43:20] [    4.332237]  do_one_initcall+0x58/0x330
[2024-09-04 14:43:20] [    4.332251]  do_init_module+0x90/0x270
[2024-09-04 14:43:20] [    4.332264]  init_module_from_file+0x86/0xc0
[2024-09-04 14:43:20] [    4.332281]  idempotent_init_module+0x120/0x2b0
[2024-09-04 14:43:20] [    4.332297]  __x64_sys_finit_module+0x5e/0xb0
[2024-09-04 14:43:20] [    4.332313]  do_syscall_64+0x84/0x160
[2024-09-04 14:43:20] [    4.332326]  ? do_filp_open+0xc4/0x170
[2024-09-04 14:43:20] [    4.332341]  ? kmem_cache_free+0x308/0x3e0
[2024-09-04 14:43:20] [    4.332354]  ? syscall_exit_work+0xf3/0x120
[2024-09-04 14:43:20] [    4.332367]  ? syscall_exit_to_user_mode+0x75/0x230
[2024-09-04 14:43:20] [    4.332383]  ? do_syscall_64+0x90/0x160
[2024-09-04 14:43:20] [    4.332396]  ? switch_fpu_return+0x4f/0xd0
[2024-09-04 14:43:20] [    4.332408]  ? syscall_exit_to_user_mode+0x75/0x230
[2024-09-04 14:43:20] [    4.332424]  ? __seccomp_filter+0x32f/0x500
[2024-09-04 14:43:20] [    4.332437]  ? syscall_exit_work+0xf3/0x120
[2024-09-04 14:43:20] [    4.332450]  ? syscall_exit_to_user_mode+0x75/0x230
[2024-09-04 14:43:20] [    4.332466]  ? do_syscall_64+0x90/0x160
[2024-09-04 14:43:20] [    4.332477]  ? __irq_exit_rcu+0x4b/0xc0
[2024-09-04 14:43:20] [    4.332490]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[2024-09-04 14:43:20] [    4.332505] RIP: 0033:0x7fcba81291bd
[2024-09-04 14:43:20] [    4.332518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 2b cc 0c 00 f7 d8 64 89 01 48
[2024-09-04 14:43:20] [    4.332565] RSP: 002b:00007ffdc893b518 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[2024-09-04 14:43:20] [    4.332586] RAX: ffffffffffffffda RBX: 00005de0566e40a0 RCX: 00007fcba81291bd
[2024-09-04 14:43:20] [    4.332607] RDX: 0000000000000000 RSI: 00007fcba871907d RDI: 000000000000001e
[2024-09-04 14:43:20] [    4.332627] RBP: 00007ffdc893b5d0 R08: 0000000000000001 R09: 00007ffdc893b560
[2024-09-04 14:43:20] [    4.332647] R10: 0000000000000050 R11: 0000000000000246 R12: 00007fcba871907d
[2024-09-04 14:43:20] [    4.332667] R13: 0000000000020000 R14: 00005de056dfb430 R15: 00005de056e007e0
[2024-09-04 14:43:20] [    4.332688]  </TASK>
[2024-09-04 14:43:20] [    4.332696] Modules linked in: nf_nat intel_pmc_core intel_vsec nf_conntrack pmt_telemetry pmt_class nf_defrag_ipv6 nf_defrag_ipv4 crct10dif_pclmul crc32_pclmul rtw88_8821ce(+) crc32c_intel polyval_clmulni polyval_generic rtw88_8821c rtw88_pci rtw88_core ghash_clmulni_intel sha512_ssse3 mac80211 sha256_ssse3 nf_tables sha1_ssse3 libarc4 cfg80211 rfkill pcspkr floppy r8169 drm_vram_helper ata_generic ehci_pci drm_ttm_helper i2c_piix4 ehci_hcd pata_acpi ttm realtek serio_raw xen_scsiback target_core_mod xen_netback xen_privcmd xen_gntdev xen_gntalloc xen_blkback xen_evtchn fuse loop nfnetlink overlay xen_blkfront
[2024-09-04 14:43:20] [    4.356688] CR2: 000000000000003c
[2024-09-04 14:43:20] [    4.356702] ---[ end trace 0000000000000000 ]---
[2024-09-04 14:43:20] [    4.356716] RIP: 0010:rtw_pci_probe+0x27f/0x2d8 [rtw88_pci]
[2024-09-04 14:43:20] [    4.356738] Code: 27 26 42 e5 48 89 df e8 2f ea ff ff 48 8b b3 48 84 00 00 48 85 f6 74 bd 4c 89 e7 e8 ab 5c ec e4 4c 89 e7 e8 f3 c4 fa e4 eb ab <66> 41 81 7e 3c 86 80 0f 85 bd fe ff ff c6 83 38 84 00 00 01 e9 b1
[2024-09-04 14:43:20] [    4.356781] RSP: 0018:ffff9cb4c0787828 EFLAGS: 00010246
[2024-09-04 14:43:20] [    4.356796] RAX: ffffffffc0a531a0 RBX: ffff8b8753731fe0 RCX: 0000000000000002
[2024-09-04 14:43:20] [    4.356815] RDX: ffff8b8753732cec RSI: 0000000000000030 RDI: ffff8b8753734978
[2024-09-04 14:43:20] [    4.356834] RBP: 0000000000000000 R08: 000000000000000c R09: 0000000000000000
[2024-09-04 14:43:20] [    4.356853] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8b8741dec000
[2024-09-04 14:43:20] [    4.356871] R13: ffff8b8753730900 R14: 0000000000000000 R15: ffff8b8753738030
[2024-09-04 14:43:20] [    4.356890] FS:  00007fcba7eaf980(0000) GS:ffff8b8757100000(0000) knlGS:0000000000000000
[2024-09-04 14:43:20] [    4.356910] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[2024-09-04 14:43:20] [    4.356926] CR2: 000000000000003c CR3: 0000000008d04003 CR4: 0000000000770ef0
[2024-09-04 14:43:20] [    4.356946] PKRU: 55555554
[2024-09-04 14:43:20] [    4.356954] Kernel panic - not syncing: Fatal exception
[2024-09-04 14:43:20] [    4.357143] Kernel Offset: 0x24e00000 from 0xffffffff80200000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)

...cut from guest-sys-net-dm.log

[2024-09-04 14:43:14] 
[2024-09-04 14:43:14] wrote 2048 bytes to vchan
[2024-09-04 14:43:14] wrote 1491 bytes to vchan
[2024-09-04 14:43:14] vchan client disconnected
[2024-09-04 14:43:15] {"timestamp": {"seconds": 1725453795, "microseconds": 875625}, "event": "DEVICE_DELETED", "data": {"path": "/machine/peripheral-anon/device[3]"}}

[2024-09-04 14:43:15] {"timestamp": {"seconds": 1725453795, "microseconds": 875762}, "event": "DEVICE_DELETED", "data": {"path": "/machine/peripheral-anon/device[0]"}}

[2024-09-04 14:43:19] [00:06.0] xen_pt_msixctrl_reg_write: enable MSI-X
[2024-09-04 14:43:19] [00:06.0] msi_msix_update: Updating MSI-X with pirq 151 gvec 0xef gflags 0x0 (entry: 0x0)
[2024-09-04 14:43:20] {"timestamp": {"seconds": 1725453800, "microseconds": 522732}, "event": "RESET", "data": {"guest": true, "reason": "guest-reset"}}

[2024-09-04 14:43:20] {"timestamp": {"seconds": 1725453800, "microseconds": 523931}, "event": "RESET", "data": {"guest": true, "reason": "guest-reset"}}

[2024-09-04 14:43:20] pcifront pci-0: Rescanning PCI Frontend Bus 0000:00
[2024-09-04 14:43:21] pcifront pci-0: Rescanning PCI Frontend Bus 0000:00
[2024-09-04 14:43:21] pci_bus 0000:00: busn_res: [bus 00-ff] is released
[2024-09-04 14:43:21] ------------[ cut here ]------------
[2024-09-04 14:43:21] sysfs group 'power' not found for kobject '0000:00'
[2024-09-04 14:43:21] WARNING: CPU: 0 PID: 10 at 0xffffffff810e970b
[2024-09-04 14:43:21] CPU: 0 PID: 10 Comm: xenwatch Tainted: G                T 5.10.200-xen-stubdom #1
[2024-09-04 14:43:21] RIP: e030:0xffffffff810e970b
[2024-09-04 14:43:21] Code: f6 74 2e 49 89 fc 48 89 df e8 ab fc ff ff 48 89 c3 48 85 c0 75 23 49 8b 14 24 48 8b 75 00 48 c7 c7 7f de 84 81 e8 4c 85 16 00 <0f> 0b 5b 5d 41 5c c3 48 89 df e8 fe cf ff ff 48 89 ee 48 89 df e8
[2024-09-04 14:43:21] RSP: e02b:ffffc90000253d20 EFLAGS: 00010282
[2024-09-04 14:43:21] RAX: 0000000000000033 RBX: 0000000000000000 RCX: 0000000000000003
[2024-09-04 14:43:21] RDX: 0000000000000095 RSI: 00000000ffffefff RDI: 0000000000000200
[2024-09-04 14:43:21] RBP: ffffffff81822800 R08: 0000000000000000 R09: ffffc90000253b68
[2024-09-04 14:43:21] R10: ffffffff81a3efe0 R11: ffffc90000253b60 R12: ffff8880045d5d20
[2024-09-04 14:43:21] R13: ffff8880045d5c00 R14: dead000000000100 R15: ffff8880045d5c28

Are you able to start vault and sys-usb qubes?

hi, something is mixed up.
my answer is now above yours.

If you have another way to connect the Qubes OS to the network (e.g. remove the wireless controller from sys-net and use ethernet controller in sys-net) then you can try to install the latest kernel for qubes by running this command in dom0 terminal:

sudo qubes-dom0-update kernel-latest-qubes-vm

Then try to attach the wireless controller back to sys-net and try to start it with latest kernel.
If it still won’t work then you can try to install the out-of-ketnel driver in the template of sys-net:

You can create a separate template for sys-net with out-of-kernel driver installed.
To install the out-of-kernel driver in the template you need to use the in-VM kernel for the template and sys-net qube:

– no comment –

Thank you very much, this is the solution!
I appreciate your help very much!

The Linux Kernel 5.9 version comes with a broken `rtw88` module developed by Realtek that has poor compatibility with most revisions of the 8821ce chip.

You must disable it by adding the following to your module blacklists...