WSL2 with any linux distro: `apt-get update` Hash Sum mismatch

[kinseii]

Windows Version

Microsoft Windows [Version 10.0.26100.3476]

WSL Version

2.4.13.0

Are you using WSL 1 or WSL 2?

• WSL 2
• WSL 1

Kernel Version

Linux version 5.15.167.4-microsoft-standard-WSL2 (root@f9c826d3017f) (gcc (GCC) 11.2.0, GNU ld (GNU Binutils) 2.37) #1 SMP Tue Nov 5 00:21:55 UTC 2024

Distro Version

Ubuntu 24.02

Other Software

I have the issue with apt-get update command: Hash Sum mismatch.

WSL version: 2.4.13.0
Kernel version: 5.15.167.4-1
WSLg version: 1.0.65
MSRDC version: 1.2.5716
Direct3D version: 1.611.1-81528511
DXCore version: 10.0.26100.1-240331-1435.ge-release
Windows version: 10.0.26100.3476

WSL:

Windows Subsystem for Linux Distributions:
Ubuntu-24.04 (Default)

Log:

root@nb1:/etc/apt/sources.list.d# apt-get update
Get:1 http://archive.ubuntu.com/ubuntu noble InRelease [256 kB]
Get:2 http://archive.ubuntu.com/ubuntu noble-updates InRelease [126 kB]
Get:3 http://archive.ubuntu.com/ubuntu noble-backports InRelease [126 kB]
Get:4 http://archive.ubuntu.com/ubuntu noble/main amd64 Packages [1401 kB]
Get:5 http://security.ubuntu.com/ubuntu noble-security InRelease [126 kB]
Get:6 http://archive.ubuntu.com/ubuntu noble/main Translation-en [513 kB]
Get:7 http://archive.ubuntu.com/ubuntu noble/main amd64 Components [464 kB]
Get:8 http://archive.ubuntu.com/ubuntu noble/main amd64 c-n-f Metadata [30.5 kB]
Get:9 http://archive.ubuntu.com/ubuntu noble/universe amd64 Packages [15.0 MB]
Get:10 http://security.ubuntu.com/ubuntu noble-security/main amd64 Packages [731 kB]
Err:9 http://archive.ubuntu.com/ubuntu noble/universe amd64 Packages
  Hash Sum mismatch
  Hashes of expected file:
   - Filesize:15037908 [weak]
   - SHA256:ba9057fa1b91438cc8a1d26808d00c85389fe101d0c1496254df97236405599a
   - SHA1:f90c48a0fe91f4bff279e60eb7e5583cb898848a [weak]
   - MD5Sum:070718db2f33ee0a489e9abbfb780cbe [weak]
  Hashes of received file:
   - SHA256:fa5b1856dd1e47a902036286d320fedf2dce38fc2bc7b3490c802b4703e7e47d
   - SHA1:37a7669aae950cb135baf9c3a15b3564634b2f8a [weak]
   - MD5Sum:bd82d3ab1c2ca3c658eb0aabaa0ca946 [weak]
   - Filesize:15037908 [weak]
  Last modification reported: Thu, 25 Apr 2024 11:56:24 +0000
  Release file created at: Thu, 25 Apr 2024 15:10:33 +0000
Get:11 http://archive.ubuntu.com/ubuntu noble/universe Translation-en [5982 kB]
Get:12 http://archive.ubuntu.com/ubuntu noble/universe amd64 Components [3871 kB]
Get:13 http://archive.ubuntu.com/ubuntu noble/universe amd64 c-n-f Metadata [301 kB]
Get:14 http://archive.ubuntu.com/ubuntu noble/restricted amd64 Packages [93.9 kB]
Get:15 http://archive.ubuntu.com/ubuntu noble/restricted Translation-en [18.7 kB]
Get:16 http://archive.ubuntu.com/ubuntu noble/restricted amd64 c-n-f Metadata [416 B]
Get:17 http://archive.ubuntu.com/ubuntu noble/multiverse amd64 Packages [269 kB]
Get:18 http://archive.ubuntu.com/ubuntu noble/multiverse Translation-en [118 kB]
Get:19 http://archive.ubuntu.com/ubuntu noble/multiverse amd64 Components [35.0 kB]
Get:20 http://archive.ubuntu.com/ubuntu noble/multiverse amd64 c-n-f Metadata [8328 B]
Get:21 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 Packages [979 kB]
Get:22 http://security.ubuntu.com/ubuntu noble-security/main Translation-en [139 kB]
Get:23 http://security.ubuntu.com/ubuntu noble-security/main amd64 Components [8976 B]
Get:24 http://security.ubuntu.com/ubuntu noble-security/main amd64 c-n-f Metadata [7068 B]
Get:25 http://security.ubuntu.com/ubuntu noble-security/universe amd64 Packages [827 kB]
Get:26 http://archive.ubuntu.com/ubuntu noble-updates/main Translation-en [215 kB]
Get:27 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 Components [151 kB]
Get:28 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 c-n-f Metadata [13.5 kB]
Get:29 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 Packages [1046 kB]
Err:29 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 Packages
  Hash Sum mismatch
  Hashes of expected file:
   - Filesize:1046312 [weak]
   - SHA256:13bff52e8634d4ea1f89f00ee0b290a345d2c6f32c7116bd5fc236a271e9cc7e
   - SHA1:9762c757406765f90d1bedd1ea32f6e87ce8c9a2 [weak]
   - MD5Sum:c4683a262b93f9575fc2c5781aad5edb [weak]
  Hashes of received file:
   - SHA256:fde58e9769d9c9824e4878b1aa53fc4660b5231a0ac23490ea383f2a1c26ec48
   - SHA1:61e5682470aeb49333e663f3d27152e4483777f3 [weak]
   - MD5Sum:34262e8a99f962519682f11160e6469b [weak]
   - Filesize:1046312 [weak]
  Last modification reported: Wed, 02 Apr 2025 02:42:48 +0000
  Release file created at: Wed, 02 Apr 2025 04:05:03 +0000
Get:30 http://archive.ubuntu.com/ubuntu noble-updates/universe Translation-en [263 kB]
Get:31 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 Components [365 kB]
Get:32 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 c-n-f Metadata [26.0 kB]
Get:33 http://archive.ubuntu.com/ubuntu noble-updates/restricted amd64 Packages [876 kB]
Get:34 http://security.ubuntu.com/ubuntu noble-security/universe Translation-en [179 kB]
Err:33 http://archive.ubuntu.com/ubuntu noble-updates/restricted amd64 Packages

Get:35 http://archive.ubuntu.com/ubuntu noble-updates/restricted Translation-en [177 kB]
Get:36 http://security.ubuntu.com/ubuntu noble-security/universe amd64 Components [51.9 kB]
Get:37 http://archive.ubuntu.com/ubuntu noble-updates/restricted amd64 Components [212 B]
Get:38 http://archive.ubuntu.com/ubuntu noble-updates/restricted amd64 c-n-f Metadata [492 B]
Get:39 http://archive.ubuntu.com/ubuntu noble-updates/multiverse amd64 Packages [21.5 kB]
Get:40 http://security.ubuntu.com/ubuntu noble-security/universe amd64 c-n-f Metadata [17.0 kB]
Get:41 http://security.ubuntu.com/ubuntu noble-security/restricted amd64 Packages [844 kB]
Err:39 http://archive.ubuntu.com/ubuntu noble-updates/multiverse amd64 Packages

Get:42 http://archive.ubuntu.com/ubuntu noble-updates/multiverse Translation-en [4788 B]
Get:43 http://archive.ubuntu.com/ubuntu noble-updates/multiverse amd64 Components [940 B]
Get:44 http://archive.ubuntu.com/ubuntu noble-backports/main amd64 Packages [39.1 kB]
Get:45 http://archive.ubuntu.com/ubuntu noble-backports/main Translation-en [8676 B]
Get:46 http://archive.ubuntu.com/ubuntu noble-backports/main amd64 Components [7068 B]
Get:47 http://archive.ubuntu.com/ubuntu noble-backports/main amd64 c-n-f Metadata [272 B]
Get:48 http://archive.ubuntu.com/ubuntu noble-backports/universe amd64 Packages [26.4 kB]
Get:49 http://archive.ubuntu.com/ubuntu noble-backports/universe Translation-en [16.3 kB]
Get:50 http://archive.ubuntu.com/ubuntu noble-backports/universe amd64 Components [15.7 kB]
Get:51 http://archive.ubuntu.com/ubuntu noble-backports/universe amd64 c-n-f Metadata [1304 B]
Get:52 http://archive.ubuntu.com/ubuntu noble-backports/restricted amd64 Components [216 B]
Get:53 http://security.ubuntu.com/ubuntu noble-security/restricted Translation-en [170 kB]
Get:54 http://security.ubuntu.com/ubuntu noble-security/restricted amd64 Components [212 B]
Get:55 http://security.ubuntu.com/ubuntu noble-security/restricted amd64 c-n-f Metadata [468 B]
Get:56 http://security.ubuntu.com/ubuntu noble-security/multiverse amd64 Packages [17.6 kB]
Get:57 http://security.ubuntu.com/ubuntu noble-security/multiverse Translation-en [3792 B]
Get:58 http://archive.ubuntu.com/ubuntu noble-backports/restricted amd64 c-n-f Metadata [116 B]
Get:59 http://archive.ubuntu.com/ubuntu noble-backports/multiverse amd64 Components [212 B]
Get:60 http://archive.ubuntu.com/ubuntu noble-backports/multiverse amd64 c-n-f Metadata [116 B]
Get:61 http://security.ubuntu.com/ubuntu noble-security/multiverse amd64 Components [212 B]
Get:62 http://security.ubuntu.com/ubuntu noble-security/multiverse amd64 c-n-f Metadata [380 B]
Fetched 36.0 MB in 3s (10.5 MB/s)
Reading package lists... Done
E: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/by-hash/SHA256/ba9057fa1b91438cc8a1d26808d00c85389fe101d0c1496254df97236405599a  Hash Sum mismatch
   Hashes of expected file:
    - Filesize:15037908 [weak]
    - SHA256:ba9057fa1b91438cc8a1d26808d00c85389fe101d0c1496254df97236405599a
    - SHA1:f90c48a0fe91f4bff279e60eb7e5583cb898848a [weak]
    - MD5Sum:070718db2f33ee0a489e9abbfb780cbe [weak]
   Hashes of received file:
    - SHA256:fa5b1856dd1e47a902036286d320fedf2dce38fc2bc7b3490c802b4703e7e47d
    - SHA1:37a7669aae950cb135baf9c3a15b3564634b2f8a [weak]
    - MD5Sum:bd82d3ab1c2ca3c658eb0aabaa0ca946 [weak]
    - Filesize:15037908 [weak]
   Last modification reported: Thu, 25 Apr 2024 11:56:24 +0000
   Release file created at: Thu, 25 Apr 2024 15:10:33 +0000
E: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/noble-updates/universe/binary-amd64/by-hash/SHA256/13bff52e8634d4ea1f89f00ee0b290a345d2c6f32c7116bd5fc236a271e9cc7e  Hash Sum mismatch
   Hashes of expected file:
    - Filesize:1046312 [weak]
    - SHA256:13bff52e8634d4ea1f89f00ee0b290a345d2c6f32c7116bd5fc236a271e9cc7e
    - SHA1:9762c757406765f90d1bedd1ea32f6e87ce8c9a2 [weak]
    - MD5Sum:c4683a262b93f9575fc2c5781aad5edb [weak]
   Hashes of received file:
    - SHA256:fde58e9769d9c9824e4878b1aa53fc4660b5231a0ac23490ea383f2a1c26ec48
    - SHA1:61e5682470aeb49333e663f3d27152e4483777f3 [weak]
    - MD5Sum:34262e8a99f962519682f11160e6469b [weak]
    - Filesize:1046312 [weak]
   Last modification reported: Wed, 02 Apr 2025 02:42:48 +0000
   Release file created at: Wed, 02 Apr 2025 04:05:03 +0000
E: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/noble-updates/restricted/binary-amd64/by-hash/SHA256/69bc2af898ae4b2bf11cc6799fe9345e1ee3d75d30ab38551612bb396a1080df
E: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/noble-updates/multiverse/binary-amd64/by-hash/SHA256/c920e9c2b511da92a7ccfd700bbd9f74cc0327411c6d31134a0019c566d12fa2
E: Some index files failed to download. They have been ignored, or old ones used instead.

Repro Steps

apt-get update

Expected Behavior

The apt-get update command should be successful.

Actual Behavior

Error: Hash Sum mismatch

Diagnostic Logs

No response

[github-actions]

Logs are required for review from WSL team

If this a feature request, please reply with '/feature'. If this is a question, reply with '/question'.
Otherwise please attach logs by following the instructions below, your issue will not be reviewed unless they are added. These logs will help us understand what is going on in your machine.

How to collect WSL logs

Download and execute collect-wsl-logs.ps1 in an administrative powershell prompt:

Invoke-WebRequest -UseBasicParsing "https://raw.githubusercontent.com/microsoft/WSL/master/diagnostics/collect-wsl-logs.ps1" -OutFile collect-wsl-logs.ps1
Set-ExecutionPolicy Bypass -Scope Process -Force
.\collect-wsl-logs.ps1

The script will output the path of the log file once done.

If this is a networking issue, please use collect-networking-logs.ps1, following the instructions here

Once completed please upload the output files to this Github issue.

Click here for more info on logging
If you choose to email these logs instead of attaching to the bug, please send them to wsl-gh-logs@microsoft.com with the number of the github issue in the subject, and in the message a link to your comment in the github issue and reply with '/emailed-logs'.

[kinseii]

If you choose to email these logs instead of attaching to the bug, please send them to wsl-gh-logs@microsoft.com with the number of the github issue in the subject, and in the message a link to your comment in the github issue and reply with '/emailed-logs'.

/emailed-logs

[github-actions]

Diagnostic information

Found '/emailed-logs', adding tag 'emailed-logs'

[kinseii]

I checked on Ubuntu 24.04 and 22.04 and 20.04 and Debian distributions. The situation is the same everywhere.

[kinseii]

I checked also on WSL versions 2.3.26 and 2.1.5, but the problem remains.

[kinseii]

If I try to download a large file from WSL, I get “Decryption” errors:

# wget https://huggingface.co/deepseek-ai/DeepSeek-V3-0324/resolve/main/model-00001-of-000163.safetensors
--2025-04-02 04:50:10--  https://huggingface.co/deepseek-ai/DeepSeek-V3-0324/resolve/main/model-00001-of-000163.safetensors
Resolving huggingface.co (huggingface.co)... 108.138.246.67, 108.138.246.79, 108.138.246.71, ...
Connecting to huggingface.co (huggingface.co)|108.138.246.67|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://cdn-lfs-***********
[following]
--2025-04-02 04:50:10--  https://cdn-lfs-***********
Resolving cdn-lfs-us-1.hf.co (cdn-lfs-us-1.hf.co)... 108.139.10.38, 108.139.10.116, 108.139.10.59, ...
Connecting to cdn-lfs-us-1.hf.co (cdn-lfs-us-1.hf.co)|108.139.10.38|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 5234139343 (4.9G) [binary/octet-stream]
Saving to: ‘model-00001-of-000163.safetensors’

model-00001-of-000163.safetensors                      0%[                                                                                                                    ]  14.87M  16.9MB/s    in 0.9s

2025-04-02 04:50:11 (16.9 MB/s) - Read error at byte 15591988/5234139343 (Decryption has failed.). Retrying.

--2025-04-02 04:50:12--  (try: 2)  https://cdn-lfs-**************
Connecting to cdn-lfs-us-1.hf.co (cdn-lfs-us-1.hf.co)|108.139.10.38|:443... connected.
HTTP request sent, awaiting response... 206 Partial Content
Length: 5234139343 (4.9G), 5218547355 (4.9G) remaining [binary/octet-stream]
Saving to: ‘model-00001-of-000163.safetensors’

model-00001-of-000163.safetensors                      0%[>                                                                                                                   ]  44.01M  15.2MB/s    in 1.9s

2025-04-02 04:50:14 (15.2 MB/s) - Read error at byte 46151436/5234139343 (Decryption has failed.). Retrying.

However, if I download wget for Windows from under Windows itself, everything downloads fine without any errors.

[kinseii]

I used a VPN and everything worked fine, no errors. Probably the problem is with the ISP router, maybe it is infected and spoofing TLS? But why is this problem only with WSL?

[kinseii]

I tried downloading a large file on another laptop under WSL 2.1.3 and Ubuntu 22.04 and everything works fine.

[kinseii]

I also tried a different Internet (Mobile carrier via hotspot) and everything works fine.

I also checked another exact same laptop (borrowed from a relative) and everything is exactly the same!
That is, both laptops and my main ISP have these errors. If I just change the laptop of another manufacturer, the error does not occur. Or if I change the Internet on my main laptop, everything works as well. I don't understand at all what it can be.

Configuration of the problem laptop (same 2 pcs): Dell Inspiron 15 3535 - AMD Ryzen 7 7730U / 16 Gb.

Configuration of the non-problem laptop: Lenovo IdeaPad Slim 5i - Intel Core i5 1335U / 8 Gb.

[kinseii]

I also connected a USB wifi adapter to my main laptop and even with that I had the “Decryption” problem. I decided to get twisted and connected the laptop to a hot-spot 2.4Ghz cell phone, which in turn was connecting via Wi-Fi on the 5Ghz band to my main internet and there were no errors!

[kinseii]

So, it's obvious that the router has a conflict specifically only with the WSL network stack.

[kinseii]

I spent half the night trying to figure out what was wrong and yet I found a workaround for this problem! Assuming that the network directly from Windows works fine, you need to mirroring traffic. So I added to .wslconfig:

[wsl2]
networkingMode=mirrored

And everything works great! But I still don't know what the problem is. The thing is that on a Lenovo laptop with Core i5, there is no such option and the problem does not occur.