Do you have the stock DTS?
My bet is that one of the GPIO-s should be marked as reserved as its probably regulator enable/disable and only RPM can toggle it, especially since RPM fails on stock FW most likely indicating that its not using full MP5496 regulator but rather an fixed one
Sure thing. This is the dts I've been following. I extracted it from the firmware.
There's another one too (but not sure if that's the correct one), so for now I'm using the one I linked to.
That seems like the reference DTS only.
Do you happen to have a GPL dump with U-Boot source?
If not, then you are going to need to add a print to msm_gpio_get_direction to see on which pin it craps out to reserve it (My money is on GPIO20)
Oh, sorry... this is the only DTS I've got, and I don't have any GPL or U-Boot source either.
Are you able to give some instructions on how to add msm_gpio_get_direction as print?
Its easy, just add a print here:
Something like pr_info("GPIO offset %u\n", offset);
You can just edit it directly in build_dir/target-/linux-/linux-*/ and so on and then rebuild
Output:
[ 0.214081] GPIO offset 0
[ 0.216951] GPIO offset 1
[ 0.219554] GPIO offset 2
[ 0.222178] GPIO offset 3
[ 0.224762] GPIO offset 4
[ 0.227367] GPIO offset 5
[ 0.229971] GPIO offset 6
[ 0.232583] GPIO offset 7
[ 0.235180] GPIO offset 8
[ 0.237782] GPIO offset 9
[ 0.240387] GPIO offset 10
[ 0.242998] GPIO offset 11
[ 0.245596] GPIO offset 12
[ 0.248286] GPIO offset 13
[ 0.250977] GPIO offset 14
[ 0.253675] GPIO offset 15
[ 0.256359] GPIO offset 16
[ 0.259050] GPIO offset 17
[ 0.261741] GPIO offset 18
[ 0.264439] GPIO offset 19
I added this line to see what happened, prob not the correct one. But it got further in the loading... tho it did stop.
&tlmm {
/* Reserved I/Os for preventing boot crash */
gpio-reserved-ranges = <20 1>;
Boot log
Starting kernel ...
Jumping to AARCH64 kernel via monitor
[ 0.000000] Booting Linux on physical CPU 0x0000000000 [0x51af8014]
[ 0.000000] Linux version 6.6.27 (nuc@nuc) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 13.2.0 r25996-e0363233c9) 13.2.0, GNU ld (GNU Binutils) 2.40.0) #0 SMP Mon Apr 22 09:27:05 2024
[ 0.000000] Machine model: Cambium Networks XE3-4
[ 0.000000] earlycon: msm_serial_dm0 at MMIO 0x00000000078b1000 (options '')
[ 0.000000] printk: bootconsole [msm_serial_dm0] enabled
[ 0.000000] [Firmware Bug]: Kernel image misaligned at boot, please fix your bootloader!
[ 0.000000] OF: reserved mem: 0x0000000000060000..0x0000000000065fff (24 KiB) nomap non-reusable memory@60000
[ 0.000000] OF: reserved mem: 0x000000004a100000..0x000000004a4fffff (4096 KiB) nomap non-reusable bootloader@4a100000
[ 0.000000] OF: reserved mem: 0x000000004a500000..0x000000004a5fffff (1024 KiB) nomap non-reusable sbl@4a500000
[ 0.000000] OF: reserved mem: 0x000000004a600000..0x000000004a9fffff (4096 KiB) nomap non-reusable memory@4a600000
[ 0.000000] OF: reserved mem: 0x000000004aa00000..0x000000004aafffff (1024 KiB) nomap non-reusable memory@4aa00000
[ 0.000000] OF: reserved mem: 0x000000004ab00000..0x000000004fffffff (87040 KiB) nomap non-reusable memory@4ab00000
[ 0.000000] Zone ranges:
[ 0.000000] DMA [mem 0x0000000040000000-0x000000007fffffff]
[ 0.000000] DMA32 empty
[ 0.000000] Normal empty
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000040000000-0x000000004a0fffff]
[ 0.000000] node 0: [mem 0x000000004a100000-0x000000004fffffff]
[ 0.000000] node 0: [mem 0x0000000050000000-0x000000007fffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000007fffffff]
[ 0.000000] psci: probing for conduit method from DT.
[ 0.000000] psci: PSCIv1.0 detected in firmware.
[ 0.000000] psci: Using standard PSCI v0.2 function IDs
[ 0.000000] psci: MIGRATE_INFO_TYPE not supported.
[ 0.000000] psci: SMC Calling Convention v1.0
[ 0.000000] percpu: Embedded 18 pages/cpu s35240 r8192 d30296 u73728
[ 0.000000] Detected VIPT I-cache on CPU0
[ 0.000000] CPU features: detected: Spectre-v4
[ 0.000000] alternatives: applying boot alternatives
[ 0.000000] Kernel command line: console=ttyMSM0,115200n8 cnss2.bdf_pci0=0xab earlycon=msm_serial_dm,0x78b1000 root=/dev/ubiblock0_1
[ 0.000000] Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes, linear)
[ 0.000000] Inode-cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 258048
[ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[ 0.000000] software IO TLB: SWIOTLB bounce buffer size adjusted to 1MB
[ 0.000000] software IO TLB: area num 4.
[ 0.000000] software IO TLB: mapped [mem 0x000000007eb00000-0x000000007ec00000] (1MB)
[ 0.000000] Memory: 908064K/1048576K available (7872K kernel code, 880K rwdata, 2348K rodata, 10304K init, 276K bss, 140512K reserved, 0K cma-reserved)
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[ 0.000000] rcu: Hierarchical RCU implementation.
[ 0.000000] Tracing variant of Tasks RCU enabled.
[ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[ 0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[ 0.000000] Root IRQ handler: gic_handle_irq
[ 0.000000] GICv2m: range[mem 0x0b00a000-0x0b00affc], SPI[448:479]
[ 0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[ 0.000000] arch_timer: cp15 and mmio timer(s) running at 24.00MHz (virt/virt).
[ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x588fe9dc0, max_idle_ns: 440795202592 ns
[ 0.000000] sched_clock: 56 bits at 24MHz, resolution 41ns, wraps every 4398046511097ns
[ 0.010847] Calibrating delay loop (skipped), value calculated using timer frequency.. 48.00 BogoMIPS (lpj=240000)
[ 0.018747] pid_max: default: 32768 minimum: 301
[ 0.034335] Mount-cache hash table entries: 2048 (order: 2, 16384 bytes, linear)
[ 0.034374] Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes, linear)
[ 0.045611] RCU Tasks Trace: Setting shift to 2 and lim to 1 rcu_task_cb_adjust=1.
[ 0.049253] rcu: Hierarchical SRCU implementation.
[ 0.056520] rcu: Max phase no-delay instances is 1000.
[ 0.062007] smp: Bringing up secondary CPUs ...
[ 0.067103] Detected VIPT I-cache on CPU1
[ 0.067201] CPU1: Booted secondary processor 0x0000000001 [0x51af8014]
[ 0.067880] Detected VIPT I-cache on CPU2
[ 0.067949] CPU2: Booted secondary processor 0x0000000002 [0x51af8014]
[ 0.068625] Detected VIPT I-cache on CPU3
[ 0.068690] CPU3: Booted secondary processor 0x0000000003 [0x51af8014]
[ 0.068760] smp: Brought up 1 node, 4 CPUs
[ 0.102508] SMP: Total of 4 processors activated.
[ 0.106584] CPU features: detected: 32-bit EL0 Support
[ 0.111359] CPU features: detected: CRC32 instructions
[ 0.116464] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[ 0.121525] CPU: All CPU(s) started at EL1
[ 0.129767] alternatives: applying system-wide alternatives
[ 0.141821] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.141879] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[ 0.152529] pinctrl core: initialized pinctrl subsystem
[ 0.159171] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[ 0.163146] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations
[ 0.168465] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[ 0.175777] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[ 0.183807] thermal_sys: Registered thermal governor 'step_wise'
[ 0.183866] cpuidle: using governor menu
[ 0.197534] ASID allocator initialised with 65536 entries
[ 0.207873] OF: /soc@0/dp4: could not find phandle 35
[ 0.207953] OF: /soc@0/dp5: could not find phandle 35
[ 0.250928] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 4
[ 0.252774] Modules: 27296 pages in range for non-PLT usage
[ 0.252783] Modules: 518816 pages in range for PLT usage
[ 0.262247] SCSI subsystem initialized
[ 0.268377] usbcore: registered new interface driver usbfs
[ 0.271751] usbcore: registered new interface driver hub
[ 0.277237] usbcore: registered new device driver usb
[ 0.282975] qcom_scm: convention: smc arm 64
[ 0.287997] qcom_glink_rpm remoteproc:glink-edge: RPM TOC has invalid magic
[ 0.291951] qcom_glink_rpm: probe of remoteproc:glink-edge failed with error -22
[ 0.299841] clocksource: Switched to clocksource arch_sys_counter
[ 0.310439] NET: Registered PF_INET protocol family
[ 0.312425] IP idents hash table entries: 16384 (order: 5, 131072 bytes, linear)
[ 0.319594] tcp_listen_portaddr_hash hash table entries: 512 (order: 1, 8192 bytes, linear)
[ 0.324614] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[ 0.332682] TCP established hash table entries: 8192 (order: 4, 65536 bytes, linear)
[ 0.340735] TCP bind hash table entries: 8192 (order: 6, 262144 bytes, linear)
[ 0.348634] TCP: Hash tables configured (established 8192 bind 8192)
[ 0.355510] UDP hash table entries: 512 (order: 2, 16384 bytes, linear)
[ 0.361953] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes, linear)
[ 0.368696] NET: Registered PF_UNIX/PF_LOCAL protocol family
[ 0.375587] PCI: CLS 0 bytes, default 64
[ 0.392926] workingset: timestamp_bits=46 max_order=18 bucket_order=0
[ 0.393514] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.398364] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.415086] qcom-qmp-usb-phy 78000.ssphy: supply vdda-phy not found, using dummy regulator
[ 0.415274] qcom-qmp-usb-phy 78000.ssphy: supply vdda-pll not found, using dummy regulator
[ 0.424056] qcom-qusb2-phy 59000.qusb: supply vdd not found, using dummy regulator
[ 0.430765] qcom-qusb2-phy 59000.qusb: supply vdda-pll not found, using dummy regulator
[ 0.438131] qcom-qusb2-phy 59000.qusb: supply vdda-phy-dpdm not found, using dummy regulator
[ 0.446280] qcom-qusb2-phy 59000.qusb: Registered Qcom-QUSB2 phy
[ 0.454992] qcom-qusb2-phy 79000.qusb: supply vdd not found, using dummy regulator
[ 0.460859] qcom-qusb2-phy 79000.qusb: supply vdda-pll not found, using dummy regulator
[ 0.468110] qcom-qusb2-phy 79000.qusb: supply vdda-phy-dpdm not found, using dummy regulator
[ 0.476264] qcom-qusb2-phy 79000.qusb: Registered Qcom-QUSB2 phy
[ 0.486403] qcom-pcie 20000000.pci: host bridge /soc@0/pci@20000000 ranges:
[ 0.490653] qcom-pcie 20000000.pci: IO 0x0020200000..0x002020ffff -> 0x0000000000
[ 0.493215] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[ 0.497279] qcom-pcie 20000000.pci: MEM 0x0020220000..0x002fffffff -> 0x0020220000
[ 0.506305] msm_serial 78b0000.serial: msm_serial: detected port #0
[ 0.519600] msm_serial 78b0000.serial: uartclk = 24000000
[ 0.526263] 78b0000.serial: ttyMSM0 at MMIO 0x78b0000 (irq = 21, base_baud = 1500000) is a MSM
[ 0.531422] msm_serial: console setup on port #0
[ 0.539955] printk: console [ttyMSM0] enabled
[ 0.544648] printk: bootconsole [msm_serial_dm0] disabled
I was about to suggest that, that is exactly what you need since it stopped after GPIO19.
GPIO20 is commonly used by TZ for regulators.
It stopped since you did not pass console=ttyMSM0 or set it via alias
Ah okey. Good to know about the GPIO20. I was unsure if it should be 1 or 0 after 20. <20 1>.
From the DTS below. But maybe I'm missing something? If so, I can just add console=ttyMSM0 to bootargs-append right?
aliases {
serial0 = &blsp1_uart2;
...
chosen {
stdout-path = "serial0:115200n8";
Thank you @robimarko . It booted, and I got access to SSH with LAN1, the 8081 port. LAN2 gave me nss-dp 3a001600.dp4 lan2 (uninitialized): failed to connect to phy device so I'll have a look at that.
Wifi is not working because of board bin, but that will be on the to do list.
One thing tho, this message
[ 0.000000] [Firmware Bug]: Kernel image misaligned at boot, please fix your bootloader!
something we can fix, or is it a bug and nothing to fix?
Its because of load adress, did you change the default of 0x41000000 ?
I did, so I'll revert that to the default value again. 
Is this a new node @robimarko , that is under SOC? https://gist.github.com/skramstad/4d98fb33983c8cc3404e7f14d104da03#file-xe3-4-stock-dts-L101
I have wifi for 2G and 5G up and running with ipq6018-wifi, but the last bit for qcn9000/qcn9074 is a bit hard to understand. I can't find any references with wifi1@f00000, and wondering if this is a bridge that some DTS has defined.
wifi1@f00000 {
compatible = "qcom,cnss-qcn9000";
qcom,wlan-ramdump-dynamic = <0x400000>;
status = "ok";
mhi,max-channels = <0x1e>;
mhi,timeout = <0x2710>;
#address-cells = <0x01>;
#size-cells = <0x00>;
qrtr_node_id = <0x20>;
qca,auto-restart;
base-addr = <0x50200000>;
m3-dump-addr = <0x52500000>;
etr-addr = <0x52600000>;
caldb-addr = <0x52700000>;
hremote-size = <0x2300000>;
tgt-mem-mode = <0x00>;
board_id = <0xa4>;
caldb-size = <0x800000>;
mhi_channels {
mhi_chan@0 {
reg = <0x00>;
label = "LOOPBACK";
mhi,num-elements = <0x20>;
mhi,event-ring = <0x01>;
mhi,chan-dir = <0x01>;
mhi,data-type = <0x00>;
mhi,doorbell-mode = <0x02>;
mhi,ee = <0x14>;
};
mhi_chan@1 {
reg = <0x01>;
label = "LOOPBACK";
mhi,num-elements = <0x20>;
mhi,event-ring = <0x01>;
mhi,chan-dir = <0x02>;
mhi,data-type = <0x00>;
mhi,doorbell-mode = <0x02>;
mhi,ee = <0x14>;
};
mhi_chan@4 {
reg = <0x04>;
label = "DIAG";
mhi,num-elements = <0x20>;
mhi,event-ring = <0x01>;
mhi,chan-dir = <0x01>;
mhi,data-type = <0x00>;
mhi,doorbell-mode = <0x02>;
mhi,ee = <0x14>;
};
mhi_chan@5 {
reg = <0x05>;
label = "DIAG";
mhi,num-elements = <0x20>;
mhi,event-ring = <0x01>;
mhi,chan-dir = <0x02>;
mhi,data-type = <0x00>;
mhi,doorbell-mode = <0x02>;
mhi,ee = <0x14>;
};
mhi_chan@20 {
reg = <0x14>;
label = "IPCR";
mhi,num-elements = <0x20>;
mhi,event-ring = <0x01>;
mhi,chan-dir = <0x01>;
mhi,data-type = <0x01>;
mhi,doorbell-mode = <0x02>;
mhi,ee = <0x14>;
mhi,auto-start;
};
mhi_chan@21 {
reg = <0x15>;
label = "IPCR";
mhi,num-elements = <0x20>;
mhi,event-ring = <0x01>;
mhi,chan-dir = <0x02>;
mhi,data-type = <0x00>;
mhi,doorbell-mode = <0x02>;
mhi,ee = <0x14>;
mhi,auto-queue;
mhi,auto-start;
};
};
mhi_events {
mhi_event@0 {
mhi,num-elements = <0x20>;
mhi,intmod = <0x01>;
mhi,msi = <0x01>;
mhi,priority = <0x01>;
mhi,brstmode = <0x02>;
mhi,data-type = <0x01>;
};
mhi_event@1 {
mhi,num-elements = <0x100>;
mhi,intmod = <0x01>;
mhi,msi = <0x02>;
mhi,priority = <0x01>;
mhi,brstmode = <0x02>;
};
};
mhi_devices {
mhi_qrtr {
mhi,chan = "IPCR";
qcom,net-id = <0x00>;
};
};
};
That is a QSDK thing, if there really is an QCN9024/74 card then you just need to enable PCIe and include the required ath11k-pci driver along with a BDF and thats it
Thank you. I'll try that.
Hmm... So I've managed to add the board-2.bin, but it does not add the caldata from the ART partition as it does with the ipq6018. (Don't know why board-2.bin has -rwxr-xr-x tho).
This qcn9074 is a 6GHz (or you can use it as a 5GHz with stock firmware).
root@OpenWrt:~# ll /lib/firmware/ath11k/QCN9074/hw1.0/
drwxr-xr-x 2 root root 82 Apr 22 09:27 ./
drwxr-xr-x 3 root root 28 Apr 22 09:27 ../
-rw-r--r-- 1 root root 156458 Apr 22 09:27 Notice.txt
-rw-r--r-- 1 root root 4227216 Apr 22 09:27 amss.bin
-rwxr-xr-x 1 root root 131184 Apr 22 09:27 board-2.bin*
-rw-r--r-- 1 root root 340108 Apr 22 09:27 m3.bin
If I manually added the missing cal-pci-0000:01:00.0.bin extracted from the ART partition, and a second reboot the output was
[ 10.720849] ath11k_pci 0000:01:00.0: BAR 0: assigned [mem 0x20400000-0x205fffff 64bit]
[ 10.727400] ath11k_pci 0000:01:00.0: enabling device (0000 -> 0002)
[ 10.742324] ath11k_pci 0000:01:00.0: MSI vectors: 16
[ 10.754980] ath11k_pci 0000:01:00.0: qcn9074 hw1.0
[ 10.781515] ath11k_pci 0000:01:00.0: FW memory mode: 2
[ 12.380208] ath11k_pci 0000:01:00.0: firmware crashed: MHI_CB_EE_RDDM
[ 12.380277] ath11k_pci 0000:01:00.0: ignore reset dev flags 0x8000
And I try to figure out why sysupgrade is not working, output from console is
root@OpenWrt:/# Watchdog handover: fd=3
- watchdog -
Watchdog did not previously reset the system
Mon Apr 22 09:36:01 UTC 2024 upgrade: Sending TERM to remaining processes ...
Mon Apr 22 09:36:01 UTC 2024 upgrade: Sending signal TERM to netifd (1735)
Mon Apr 22 09:36:05 UTC 2024 upgrade: Sending KILL to remaining processes ...
Mon Apr 22 09:36:05 UTC 2024 upgrade: Sending signal KILL to netifd (1735)
[ 287.799692] stage2 (3358): drop_caches: 3
Mon Apr 22 09:36:14 UTC 2024 upgrade: Switching to ramdisk...
[ 290.029599] UBIFS (ubi0:2): background thread "ubifs_bgt0_2" stops
[ 290.040776] UBIFS (ubi0:2): un-mount UBI device 0
Mon Apr 22 09:36:16 UTC 2024 upgrade: Performing system upgrade...
[ 290.092706] do_stage2 (3358): drop_caches: 3
Could not open mtd device: firmware
Can't open device for writing!
cat: write error: Broken pipe
sysupgrade aborted with return code: 256
[ 290.560104] remoteproc remoteproc0: stopped remote processor cd00000.remoteproc
I don't have any mtd device: firmware, so I'm trying to see how you tell sysupgrade to use rootfs
[ 1.094611] Creating 4 MTD partitions on "qcom_nand.0":
[ 1.101550] 0x000000000000-0x000006000000 : "rootfs"
[ 1.175208] mtd: setting mtd0 (rootfs) as root device
[ 1.175499] mtdsplit: no squashfs found in "rootfs"
[ 1.179260] 0x000006000000-0x00000c000000 : "rootfs_1"
[ 1.253358] 0x00000c000000-0x00000f000000 : "NVRAM"
[ 1.288844] 0x00000f000000-0x000010000000 : "crashLog"
Well, you gotta add your device to the caldata extraction script, its not gonna extract magically.
As for the sysupgrade, you also gotta add your device to use the appropriate recipe
I have added this, so I thought that was OK.
"ath11k/QCN9074/hw1.0/cal-pci-0000:01:00.0.bin"|\
"ath11k/QCN9074/hw1.0/cal-pci-0001:01:00.0.bin")
case "$board" in
cambiumnetworks,xe3-4)
caldata_extract "0:ART" 0x26800 0x20000
;;
esac
;;
*)
exit 1
;;
esac
A little update with board-2.bin from https://git.codelinaro.org/clo/qsdk/oss/ath11k-bdf/-/blob/NHSS.QSDK.12.5.r2/QCN9074/hw1.0/WLAN.HK.2.9.0.1/WLAN.HK.2.9.0.1-01977-QCAHKSWPL_SILICONZ-1/board-2.bin?ref_type=heads
And now it detected this 5GHZ card. So something is going on with my board-2.bin extracted from the firmware.
Qualcomm Atheros QCN6024/9024/9074 802.11ac/ax/n
Got it to detect the pci qcn9074 and give 2 options in Luci 5GHz and 6GHz band. Didn't know we had that feature.
The BDF board-2.json needed this bus=pci,qmi-chip-id=0,qmi-board-id=255. From earlier I had bus=ahb, that the ipq6018 uses. I could not add variant either. I just hope this works and give me no issues.
# cat /etc/config/wireless
...
config wifi-device 'radio2'
option type 'mac80211'
option path 'soc@0/20000000.pci/pci0000:00/0000:00:00.0/0000:01:00.0'
Wiphy phy2
wiphy index: 2
max # scan SSIDs: 16
max scan IEs length: 184 bytes
max # sched scan SSIDs: 0
max # match sets: 0
Retry short limit: 7
Retry long limit: 4
Coverage class: 0 (up to 0m)
Device supports RSN-IBSS.
Device supports AP-side u-APSD.
Supported Ciphers:
* TKIP (00-0f-ac:2)
* CCMP-128 (00-0f-ac:4)
* CMAC (00-0f-ac:6)
* CMAC-256 (00-0f-ac:13)
* GMAC-128 (00-0f-ac:11)
* GMAC-256 (00-0f-ac:12)
* GCMP-128 (00-0f-ac:8)
* GCMP-256 (00-0f-ac:9)
* CCMP-256 (00-0f-ac:10)
Available Antennas: TX 0xf RX 0xf
Configured Antennas: TX 0xf RX 0xf
Supported interface modes:
* managed
* AP
* monitor
* mesh point
Band 2:
HE Iftypes: managed
HE MAC Capabilities (0x000b9a181040):
+HTC HE Supported
TWT Requester
Dynamic BA Fragementation Level: 1
BSR
Broadcast TWT
OM Control
Maximum A-MPDU Length Exponent: 3
RX Control Frame to MultiBSS
A-MSDU in A-MPDU
OM Control UL MU Data Disable RX
HE PHY Capabilities: (0x1c604c89ffdb839c110c00):
HE40/HE80/5GHz
HE160/5GHz
HE160/HE80+80/5GHz
LDPC Coding in Payload
HE SU PPDU with 1x HE-LTF and 0.8us GI
STBC Tx <= 80MHz
STBC Rx <= 80MHz
Full Bandwidth UL MU-MIMO
DCM Max Constellation: 1
DCM Max Constellation Rx: 1
SU Beamformer
SU Beamformee
MU Beamformer
Beamformee STS <= 80Mhz: 7
Beamformee STS > 80Mhz: 7
Sounding Dimensions <= 80Mhz: 3
Sounding Dimensions > 80Mhz: 3
Ng = 16 SU Feedback
Ng = 16 MU Feedback
Codebook Size SU Feedback
Codebook Size MU Feedback
PPE Threshold Present
HE SU PPDU & HE PPDU 4x HE-LTF 0.8us GI
Max NC: 3
STBC Rx > 80MHz
HE ER SU PPDU 4x HE-LTF 0.8us GI
HE ER SU PPDU 1x HE-LTF 0.8us GI
TX 1024-QAM
RX 1024-QAM
HE RX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE RX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
EHT Iftypes: managed
EHT MAC Capabilities (0x0000):
EHT PHY Capabilities: (0x0000000000000000):
EHT MCS/NSS: (0x):
EHT bw <= 80 MHz, max NSS for MCS 8-9: Rx=0, Tx=0
EHT bw <= 80 MHz, max NSS for MCS 10-11: Rx=0, Tx=0
EHT bw <= 80 MHz, max NSS for MCS 12-13: Rx=0, Tx=0
EHT bw=160 MHz, max NSS for MCS 8-9: Rx=0, Tx=0
EHT bw=160 MHz, max NSS for MCS 10-11: Rx=0, Tx=0
EHT bw=160 MHz, max NSS for MCS 12-13: Rx=0, Tx=0
HE Iftypes: AP
HE MAC Capabilities (0x000d9a181040):
+HTC HE Supported
TWT Responder
Dynamic BA Fragementation Level: 1
BSR
Broadcast TWT
OM Control
Maximum A-MPDU Length Exponent: 3
RX Control Frame to MultiBSS
A-MSDU in A-MPDU
OM Control UL MU Data Disable RX
HE PHY Capabilities: (0x1c604c88ffdb839c110c00):
HE40/HE80/5GHz
HE160/5GHz
HE160/HE80+80/5GHz
LDPC Coding in Payload
HE SU PPDU with 1x HE-LTF and 0.8us GI
STBC Tx <= 80MHz
STBC Rx <= 80MHz
Full Bandwidth UL MU-MIMO
DCM Max Constellation Rx: 1
SU Beamformer
SU Beamformee
MU Beamformer
Beamformee STS <= 80Mhz: 7
Beamformee STS > 80Mhz: 7
Sounding Dimensions <= 80Mhz: 3
Sounding Dimensions > 80Mhz: 3
Ng = 16 SU Feedback
Ng = 16 MU Feedback
Codebook Size SU Feedback
Codebook Size MU Feedback
PPE Threshold Present
HE SU PPDU & HE PPDU 4x HE-LTF 0.8us GI
Max NC: 3
STBC Rx > 80MHz
HE ER SU PPDU 4x HE-LTF 0.8us GI
HE ER SU PPDU 1x HE-LTF 0.8us GI
TX 1024-QAM
RX 1024-QAM
HE RX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE RX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
EHT Iftypes: AP
EHT MAC Capabilities (0x0000):
EHT PHY Capabilities: (0x0000000000000000):
EHT MCS/NSS: (0x):
EHT bw <= 80 MHz, max NSS for MCS 8-9: Rx=0, Tx=0
EHT bw <= 80 MHz, max NSS for MCS 10-11: Rx=0, Tx=0
EHT bw <= 80 MHz, max NSS for MCS 12-13: Rx=0, Tx=0
EHT bw=160 MHz, max NSS for MCS 8-9: Rx=0, Tx=0
EHT bw=160 MHz, max NSS for MCS 10-11: Rx=0, Tx=0
EHT bw=160 MHz, max NSS for MCS 12-13: Rx=0, Tx=0
HE Iftypes: mesh point
HE MAC Capabilities (0x00098a081040):
+HTC HE Supported
Dynamic BA Fragementation Level: 1
BSR
OM Control
Maximum A-MPDU Length Exponent: 1
RX Control Frame to MultiBSS
A-MSDU in A-MPDU
OM Control UL MU Data Disable RX
HE PHY Capabilities: (0x1c600c80fd5b811c100000):
HE40/HE80/5GHz
HE160/5GHz
HE160/HE80+80/5GHz
LDPC Coding in Payload
HE SU PPDU with 1x HE-LTF and 0.8us GI
STBC Tx <= 80MHz
STBC Rx <= 80MHz
SU Beamformer
SU Beamformee
Beamformee STS <= 80Mhz: 7
Beamformee STS > 80Mhz: 7
Sounding Dimensions <= 80Mhz: 3
Sounding Dimensions > 80Mhz: 3
Ng = 16 SU Feedback
Codebook Size SU Feedback
PPE Threshold Present
HE SU PPDU & HE PPDU 4x HE-LTF 0.8us GI
Max NC: 3
HE ER SU PPDU 1x HE-LTF 0.8us GI
HE RX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE RX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
EHT Iftypes: mesh point
EHT MAC Capabilities (0x0000):
EHT PHY Capabilities: (0x0000000000000000):
EHT MCS/NSS: (0x):
EHT bw <= 80 MHz, max NSS for MCS 8-9: Rx=0, Tx=0
EHT bw <= 80 MHz, max NSS for MCS 10-11: Rx=0, Tx=0
EHT bw <= 80 MHz, max NSS for MCS 12-13: Rx=0, Tx=0
EHT bw=160 MHz, max NSS for MCS 8-9: Rx=0, Tx=0
EHT bw=160 MHz, max NSS for MCS 10-11: Rx=0, Tx=0
EHT bw=160 MHz, max NSS for MCS 12-13: Rx=0, Tx=0
Bitrates (non-HT):
* 6.0 Mbps
* 9.0 Mbps
* 12.0 Mbps
* 18.0 Mbps
* 24.0 Mbps
* 36.0 Mbps
* 48.0 Mbps
* 54.0 Mbps
Frequencies:
* 5180 MHz [36] (30.0 dBm)
* 5200 MHz [40] (30.0 dBm)
* 5220 MHz [44] (30.0 dBm)
* 5240 MHz [48] (30.0 dBm)
* 5260 MHz [52] (30.0 dBm) (radar detection)
* 5280 MHz [56] (30.0 dBm) (radar detection)
* 5300 MHz [60] (30.0 dBm) (radar detection)
* 5320 MHz [64] (30.0 dBm) (radar detection)
* 5500 MHz [100] (30.0 dBm) (radar detection)
* 5520 MHz [104] (30.0 dBm) (radar detection)
* 5540 MHz [108] (30.0 dBm) (radar detection)
* 5560 MHz [112] (30.0 dBm) (radar detection)
* 5580 MHz [116] (30.0 dBm) (radar detection)
* 5600 MHz [120] (30.0 dBm) (radar detection)
* 5620 MHz [124] (30.0 dBm) (radar detection)
* 5640 MHz [128] (30.0 dBm) (radar detection)
* 5660 MHz [132] (30.0 dBm) (radar detection)
* 5680 MHz [136] (30.0 dBm) (radar detection)
* 5700 MHz [140] (30.0 dBm) (radar detection)
* 5720 MHz [144] (30.0 dBm) (radar detection)
* 5745 MHz [149] (30.0 dBm)
* 5765 MHz [153] (30.0 dBm)
* 5785 MHz [157] (30.0 dBm)
* 5805 MHz [161] (30.0 dBm)
* 5825 MHz [165] (30.0 dBm)
* 5845 MHz [169] (30.0 dBm)
* 5865 MHz [173] (30.0 dBm)
* 5885 MHz [177] (30.0 dBm)
Band 4:
HE Iftypes: managed
HE MAC Capabilities (0x000b9a181040):
+HTC HE Supported
TWT Requester
Dynamic BA Fragementation Level: 1
BSR
Broadcast TWT
OM Control
Maximum A-MPDU Length Exponent: 3
RX Control Frame to MultiBSS
A-MSDU in A-MPDU
OM Control UL MU Data Disable RX
HE PHY Capabilities: (0x1c604c89ffdb839c110c00):
HE40/HE80/5GHz
HE160/5GHz
HE160/HE80+80/5GHz
LDPC Coding in Payload
HE SU PPDU with 1x HE-LTF and 0.8us GI
STBC Tx <= 80MHz
STBC Rx <= 80MHz
Full Bandwidth UL MU-MIMO
DCM Max Constellation: 1
DCM Max Constellation Rx: 1
SU Beamformer
SU Beamformee
MU Beamformer
Beamformee STS <= 80Mhz: 7
Beamformee STS > 80Mhz: 7
Sounding Dimensions <= 80Mhz: 3
Sounding Dimensions > 80Mhz: 3
Ng = 16 SU Feedback
Ng = 16 MU Feedback
Codebook Size SU Feedback
Codebook Size MU Feedback
PPE Threshold Present
HE SU PPDU & HE PPDU 4x HE-LTF 0.8us GI
Max NC: 3
STBC Rx > 80MHz
HE ER SU PPDU 4x HE-LTF 0.8us GI
HE ER SU PPDU 1x HE-LTF 0.8us GI
TX 1024-QAM
RX 1024-QAM
HE RX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE RX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
EHT Iftypes: managed
EHT MAC Capabilities (0x0000):
EHT PHY Capabilities: (0x0000000000000000):
EHT MCS/NSS: (0x):
EHT bw <= 80 MHz, max NSS for MCS 8-9: Rx=0, Tx=0
EHT bw <= 80 MHz, max NSS for MCS 10-11: Rx=0, Tx=0
EHT bw <= 80 MHz, max NSS for MCS 12-13: Rx=0, Tx=0
EHT bw=160 MHz, max NSS for MCS 8-9: Rx=0, Tx=0
EHT bw=160 MHz, max NSS for MCS 10-11: Rx=0, Tx=0
EHT bw=160 MHz, max NSS for MCS 12-13: Rx=0, Tx=0
HE Iftypes: AP
HE MAC Capabilities (0x000d9a181040):
+HTC HE Supported
TWT Responder
Dynamic BA Fragementation Level: 1
BSR
Broadcast TWT
OM Control
Maximum A-MPDU Length Exponent: 3
RX Control Frame to MultiBSS
A-MSDU in A-MPDU
OM Control UL MU Data Disable RX
HE PHY Capabilities: (0x1c604c88ffdb839c110c00):
HE40/HE80/5GHz
HE160/5GHz
HE160/HE80+80/5GHz
LDPC Coding in Payload
HE SU PPDU with 1x HE-LTF and 0.8us GI
STBC Tx <= 80MHz
STBC Rx <= 80MHz
Full Bandwidth UL MU-MIMO
DCM Max Constellation Rx: 1
SU Beamformer
SU Beamformee
MU Beamformer
Beamformee STS <= 80Mhz: 7
Beamformee STS > 80Mhz: 7
Sounding Dimensions <= 80Mhz: 3
Sounding Dimensions > 80Mhz: 3
Ng = 16 SU Feedback
Ng = 16 MU Feedback
Codebook Size SU Feedback
Codebook Size MU Feedback
PPE Threshold Present
HE SU PPDU & HE PPDU 4x HE-LTF 0.8us GI
Max NC: 3
STBC Rx > 80MHz
HE ER SU PPDU 4x HE-LTF 0.8us GI
HE ER SU PPDU 1x HE-LTF 0.8us GI
TX 1024-QAM
RX 1024-QAM
HE RX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE RX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
EHT Iftypes: AP
EHT MAC Capabilities (0x0000):
EHT PHY Capabilities: (0x0000000000000000):
EHT MCS/NSS: (0x):
EHT bw <= 80 MHz, max NSS for MCS 8-9: Rx=0, Tx=0
EHT bw <= 80 MHz, max NSS for MCS 10-11: Rx=0, Tx=0
EHT bw <= 80 MHz, max NSS for MCS 12-13: Rx=0, Tx=0
EHT bw=160 MHz, max NSS for MCS 8-9: Rx=0, Tx=0
EHT bw=160 MHz, max NSS for MCS 10-11: Rx=0, Tx=0
EHT bw=160 MHz, max NSS for MCS 12-13: Rx=0, Tx=0
HE Iftypes: mesh point
HE MAC Capabilities (0x00098a081040):
+HTC HE Supported
Dynamic BA Fragementation Level: 1
BSR
OM Control
Maximum A-MPDU Length Exponent: 1
RX Control Frame to MultiBSS
A-MSDU in A-MPDU
OM Control UL MU Data Disable RX
HE PHY Capabilities: (0x1c600c80fd5b811c100000):
HE40/HE80/5GHz
HE160/5GHz
HE160/HE80+80/5GHz
LDPC Coding in Payload
HE SU PPDU with 1x HE-LTF and 0.8us GI
STBC Tx <= 80MHz
STBC Rx <= 80MHz
SU Beamformer
SU Beamformee
Beamformee STS <= 80Mhz: 7
Beamformee STS > 80Mhz: 7
Sounding Dimensions <= 80Mhz: 3
Sounding Dimensions > 80Mhz: 3
Ng = 16 SU Feedback
Codebook Size SU Feedback
PPE Threshold Present
HE SU PPDU & HE PPDU 4x HE-LTF 0.8us GI
Max NC: 3
HE ER SU PPDU 1x HE-LTF 0.8us GI
HE RX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE RX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
EHT Iftypes: mesh point
EHT MAC Capabilities (0x0000):
EHT PHY Capabilities: (0x0000000000000000):
EHT MCS/NSS: (0x):
EHT bw <= 80 MHz, max NSS for MCS 8-9: Rx=0, Tx=0
EHT bw <= 80 MHz, max NSS for MCS 10-11: Rx=0, Tx=0
EHT bw <= 80 MHz, max NSS for MCS 12-13: Rx=0, Tx=0
EHT bw=160 MHz, max NSS for MCS 8-9: Rx=0, Tx=0
EHT bw=160 MHz, max NSS for MCS 10-11: Rx=0, Tx=0
EHT bw=160 MHz, max NSS for MCS 12-13: Rx=0, Tx=0
Bitrates (non-HT):
* 6.0 Mbps
* 9.0 Mbps
* 12.0 Mbps
* 18.0 Mbps
* 24.0 Mbps
* 36.0 Mbps
* 48.0 Mbps
* 54.0 Mbps
Frequencies:
* 5955 MHz [1] (30.0 dBm)
* 5975 MHz [5] (30.0 dBm)
* 5995 MHz [9] (30.0 dBm)
* 6015 MHz [13] (30.0 dBm)
* 6035 MHz [17] (30.0 dBm)
* 6055 MHz [21] (30.0 dBm)
* 6075 MHz [25] (30.0 dBm)
* 6095 MHz [29] (30.0 dBm)
* 6115 MHz [33] (30.0 dBm)
* 6135 MHz [37] (30.0 dBm)
* 6155 MHz [41] (30.0 dBm)
* 6175 MHz [45] (30.0 dBm)
* 6195 MHz [49] (30.0 dBm)
* 6215 MHz [53] (30.0 dBm)
* 6235 MHz [57] (30.0 dBm)
* 6255 MHz [61] (30.0 dBm)
* 6275 MHz [65] (30.0 dBm)
* 6295 MHz [69] (30.0 dBm)
* 6315 MHz [73] (30.0 dBm)
* 6335 MHz [77] (30.0 dBm)
* 6355 MHz [81] (30.0 dBm)
* 6375 MHz [85] (30.0 dBm)
* 6395 MHz [89] (30.0 dBm)
* 6415 MHz [93] (30.0 dBm)
* 6435 MHz [97] (30.0 dBm)
* 6455 MHz [101] (30.0 dBm)
* 6475 MHz [105] (30.0 dBm)
* 6495 MHz [109] (30.0 dBm)
* 6515 MHz [113] (30.0 dBm)
* 6535 MHz [117] (30.0 dBm)
* 6555 MHz [121] (30.0 dBm)
* 6575 MHz [125] (30.0 dBm)
* 6595 MHz [129] (30.0 dBm)
* 6615 MHz [133] (30.0 dBm)
* 6635 MHz [137] (30.0 dBm)
* 6655 MHz [141] (30.0 dBm)
* 6675 MHz [145] (30.0 dBm)
* 6695 MHz [149] (30.0 dBm)
* 6715 MHz [153] (30.0 dBm)
* 6735 MHz [157] (30.0 dBm)
* 6755 MHz [161] (30.0 dBm)
* 6775 MHz [165] (30.0 dBm)
* 6795 MHz [169] (30.0 dBm)
* 6815 MHz [173] (30.0 dBm)
* 6835 MHz [177] (30.0 dBm)
* 6855 MHz [181] (30.0 dBm)
* 6875 MHz [185] (30.0 dBm)
* 6895 MHz [189] (30.0 dBm)
* 6915 MHz [193] (30.0 dBm)
* 6935 MHz [197] (30.0 dBm)
* 6955 MHz [201] (30.0 dBm)
* 6975 MHz [205] (30.0 dBm)
* 6995 MHz [209] (30.0 dBm)
* 7015 MHz [213] (30.0 dBm)
* 7035 MHz [217] (30.0 dBm)
* 7055 MHz [221] (30.0 dBm)
* 7075 MHz [225] (30.0 dBm)
* 7095 MHz [229] (30.0 dBm)
* 7115 MHz [233] (30.0 dBm)
* 5935 MHz [2] (disabled)
Supported commands:
* new_interface
* set_interface
* new_key
* start_ap
* new_station
* new_mpath
* set_mesh_config
* set_bss
* authenticate
* associate
* deauthenticate
* disassociate
* join_ibss
* join_mesh
* remain_on_channel
* set_tx_bitrate_mask
* frame
* frame_wait_cancel
* set_wiphy_netns
* set_channel
* probe_client
* set_noack_map
* register_beacons
* start_p2p_device
* set_mcast_rate
* connect
* disconnect
* channel_switch
* set_qos_map
* set_multicast_to_unicast
software interface modes (can always be added):
* monitor
valid interface combinations:
* #{ managed } <= 1, #{ AP, mesh point } <= 16,
total <= 16, #channels <= 1, STA/AP BI must match, radar detect widths: { 20 MHz (no HT), 20 MHz, 40 MHz, 80 MHz, 80+80 MHz, 160 MHz }
HT Capability overrides:
* MCS: ff ff ff ff ff ff ff ff ff ff
* maximum A-MSDU length
* supported channel width
* short GI for 40 MHz
* max A-MPDU length exponent
* min MPDU start spacing
Device supports TX status socket option.
Device supports HT-IBSS.
Device supports SAE with AUTHENTICATE command
Device supports scan flush.
Device supports AP scan.
Device supports per-vif TX power setting
Driver supports full state transitions for AP/GO clients
Driver supports a userspace MPM
Driver/device bandwidth changes during BSS lifetime (AP/GO mode)
Device supports static SMPS
Device supports dynamic SMPS
Device supports configuring vdev MAC-addr on create.
Device supports randomizing MAC-addr in scans.
max # scan plans: 1
max scan plan interval: -1
max scan plan iterations: 0
Supported TX frame types:
* IBSS: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
* managed: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
* AP: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
* AP/VLAN: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
* mesh point: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
* P2P-client: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
* P2P-GO: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
* P2P-device: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
Supported RX frame types:
* IBSS: 0x40 0xb0 0xc0 0xd0
* managed: 0x40 0xb0 0xd0
* AP: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
* AP/VLAN: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
* mesh point: 0xb0 0xc0 0xd0
* P2P-client: 0x40 0xd0
* P2P-GO: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
* P2P-device: 0x40 0xd0
Maximum associated stations in AP mode: 128
Supported extended features:
* [ RRM ]: RRM
* [ SET_SCAN_DWELL ]: scan dwell setting
* [ FILS_STA ]: STA FILS (Fast Initial Link Setup)
* [ CQM_RSSI_LIST ]: multiple CQM_RSSI_THOLD records
* [ CONTROL_PORT_OVER_NL80211 ]: control port over nl80211
* [ ACK_SIGNAL_SUPPORT ]: ack signal level support
* [ TXQS ]: FQ-CoDel-enabled intermediate TXQs
* [ ENABLE_FTM_RESPONDER ]: enable FTM (Fine Time Measurement) responder
* [ STA_TX_PWR ]: TX power control per station
* [ CONTROL_PORT_NO_PREAUTH ]: disable pre-auth over nl80211 control port support
* [ SCAN_FREQ_KHZ ]: scan on kHz frequency support
* [ CONTROL_PORT_OVER_NL80211_TX_STATUS ]: tx status for nl80211 control port support
* [ FILS_DISCOVERY ]: FILS discovery frame transmission support
* [ UNSOL_BCAST_PROBE_RESP ]: unsolicated broadcast probe response transmission support
* [ BSS_COLOR ]: BSS coloring support
@robimarko do you see anything in the console log that needs attention?
Here is latest WIP https://github.com/skramstad/openwrt/commit/cd95add32b4a732594110c6e940c0c8c3ed54f26
I'm also testing WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1 for IPQ6018, and so far it has been stable. But the firmware is very picky on BDF.