BCM4366C0 only works with manually started hostapd

updateing · April 3, 2017, 10:30am

Hi everyone, I'm working on a router with BCM47904 + BCM4366C0 x 2. I've written DTS and built LEDE r3899-dc4eae7a8c, everything except wireless is working now.

The firmware for BCM4366C0 embedded in dhd.ko from stock FW does not work at all (produces timeout on everything, including device initialization), so I used the firmware from Linksys EA9500 instead.

But here comes the problem: no radio could be brought up by netifd. When I do wifi up, it throws logs as this:

Mon Apr  3 06:43:00 2017 daemon.notice netifd: radio0 (2298): command failed: No error information (-524)
Mon Apr  3 06:43:00 2017 daemon.notice netifd: radio1 (2299): command failed: No error information (-524)
Mon Apr  3 06:43:00 2017 daemon.notice netifd: radio0 (2322): command failed: No error information (-524)
Mon Apr  3 06:43:00 2017 daemon.notice netifd: radio1 (2323): command failed: No error information (-524)
Mon Apr  3 06:43:00 2017 daemon.notice netifd: radio1 (2323): command failed: Not supported (-95)
Mon Apr  3 06:43:00 2017 daemon.notice netifd: radio1 (2323): command failed: I/O error (-5)
Mon Apr  3 06:43:00 2017 daemon.notice netifd: radio1 (2323): command failed: Too many open files in system (-23)
Mon Apr  3 06:43:01 2017 daemon.notice netifd: radio0 (2322): command failed: Not supported (-95)
Mon Apr  3 06:43:01 2017 daemon.notice netifd: radio0 (2322): command failed: I/O error (-5)
Mon Apr  3 06:43:01 2017 daemon.notice netifd: radio0 (2322): command failed: Too many open files in system (-23)
Mon Apr  3 06:43:01 2017 daemon.notice netifd: radio1 (2323): command failed: Too many open files in system (-23)
Mon Apr  3 06:43:01 2017 daemon.notice netifd: radio1 (2323): Device setup failed: INTERFACE_CREATION_FAILED
Mon Apr  3 06:43:01 2017 daemon.notice netifd: radio1 (2323): WARNING: Variable 'interfaces' does not exist or is not an array/object
Mon Apr  3 06:43:02 2017 daemon.notice netifd: radio0 (2322): command failed: Too many open files in system (-23)
Mon Apr  3 06:43:02 2017 daemon.notice netifd: radio0 (2322): Device setup failed: INTERFACE_CREATION_FAILED
Mon Apr  3 06:43:02 2017 daemon.notice netifd: radio0 (2322): WARNING: Variable 'interfaces' does not exist or is not an array/object

If I remove this line from /lib/netifd/wireless/mac80211.sh,

--- mac80211.sh 2017-04-03 18:13:04.995895072 +0800
+++ mac80211.sh      2017-04-03 18:14:44.499560705 +0800
@@ -473,7 +473,7 @@
                        mac80211_hostapd_setup_bss "$phy" "$ifname" "$macaddr" "$type" || return
 
                        [ -n "$hostapd_ctrl" ] || {
-                               mac80211_iw_interface_add "$phy" "$ifname" __ap || return
+                               #mac80211_iw_interface_add "$phy" "$ifname" __ap || return
                                hostapd_ctrl="${hostapd_ctrl:-/var/run/hostapd/$ifname}"
                        }
                ;;

the radio works, SSIDs get broadcast, but clients can not connect:

Mon Apr  3 06:48:19 2017 daemon.notice netifd: radio0 (2776): command failed: No error information (-524)
Mon Apr  3 06:48:20 2017 daemon.notice netifd: radio1 (2777): command failed: No error information (-524)
Mon Apr  3 06:48:20 2017 daemon.notice netifd: radio0 (2797): command failed: No error information (-524)
Mon Apr  3 06:48:20 2017 daemon.notice netifd: radio1 (2801): command failed: No error information (-524)
Mon Apr  3 06:48:20 2017 daemon.notice netifd: radio0 (2797): command failed: Not supported (-95)
Mon Apr  3 06:48:20 2017 daemon.notice netifd: radio0 (2797): command failed: I/O error (-5)
Mon Apr  3 06:48:20 2017 daemon.err hostapd: Configuration file: /var/run/hostapd-phy0.conf
Mon Apr  3 06:48:20 2017 daemon.err hostapd: Failed to create interface mon.wlan0: -95 (Not supported)
Mon Apr  3 06:48:20 2017 kern.info kernel: [  636.198690] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
Mon Apr  3 06:48:20 2017 kern.info kernel: [  636.206368] br-lan: port 2(wlan0) entered blocking state
Mon Apr  3 06:48:20 2017 kern.info kernel: [  636.211698] br-lan: port 2(wlan0) entered disabled state
Mon Apr  3 06:48:20 2017 kern.info kernel: [  636.217308] device wlan0 entered promiscuous mode
Mon Apr  3 06:48:20 2017 daemon.notice hostapd: wlan0: interface state UNINITIALIZED->COUNTRY_UPDATE
Mon Apr  3 06:48:20 2017 daemon.warn hostapd: wlan0: Could not connect to kernel driver
Mon Apr  3 06:48:20 2017 daemon.err hostapd: Using interface wlan0 with hwaddr d8:c8:e9:fe:c6:6d and ssid "LEDE-HT"
Mon Apr  3 06:48:20 2017 kern.info kernel: [  636.430100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
Mon Apr  3 06:48:20 2017 kern.info kernel: [  636.436623] br-lan: port 2(wlan0) entered blocking state
Mon Apr  3 06:48:20 2017 kern.info kernel: [  636.441971] br-lan: port 2(wlan0) entered forwarding state
Mon Apr  3 06:48:20 2017 daemon.notice hostapd: wlan0: interface state COUNTRY_UPDATE->ENABLED
Mon Apr  3 06:48:20 2017 daemon.notice hostapd: wlan0: AP-ENABLED 
Mon Apr  3 06:48:20 2017 daemon.notice netifd: Network device 'wlan0' link is up
Mon Apr  3 06:48:21 2017 daemon.notice netifd: radio1 (2801): command failed: Not supported (-95)
Mon Apr  3 06:48:21 2017 daemon.notice netifd: radio1 (2801): command failed: I/O error (-5)
Mon Apr  3 06:48:21 2017 daemon.err hostapd: Configuration file: /var/run/hostapd-phy1.conf
Mon Apr  3 06:48:21 2017 daemon.err hostapd: Failed to create interface mon.wlan1: -95 (Not supported)
Mon Apr  3 06:48:21 2017 kern.info kernel: [  637.259353] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
Mon Apr  3 06:48:21 2017 kern.info kernel: [  637.266882] br-lan: port 3(wlan1) entered blocking state
Mon Apr  3 06:48:21 2017 kern.info kernel: [  637.272251] br-lan: port 3(wlan1) entered disabled state
Mon Apr  3 06:48:21 2017 kern.info kernel: [  637.277837] device wlan1 entered promiscuous mode
Mon Apr  3 06:48:21 2017 daemon.notice hostapd: wlan1: interface state UNINITIALIZED->COUNTRY_UPDATE
Mon Apr  3 06:48:21 2017 daemon.notice hostapd: wlan1: interface state COUNTRY_UPDATE->HT_SCAN
Mon Apr  3 06:48:21 2017 daemon.warn hostapd: wlan1: Could not connect to kernel driver
Mon Apr  3 06:48:21 2017 daemon.err hostapd: Using interface wlan1 with hwaddr d8:c8:e9:fe:c6:6e and ssid "LEDE-HT-5G"
Mon Apr  3 06:48:21 2017 kern.info kernel: [  637.787532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
Mon Apr  3 06:48:21 2017 kern.info kernel: [  637.794027] br-lan: port 3(wlan1) entered blocking state
Mon Apr  3 06:48:21 2017 kern.info kernel: [  637.799362] br-lan: port 3(wlan1) entered forwarding state
Mon Apr  3 06:48:21 2017 daemon.notice hostapd: wlan1: interface state HT_SCAN->ENABLED
Mon Apr  3 06:48:21 2017 daemon.notice hostapd: wlan1: AP-ENABLED 
Mon Apr  3 06:48:21 2017 daemon.notice netifd: Network device 'wlan1' link is up
Mon Apr  3 06:48:35 2017 daemon.info hostapd: wlan1: STA c0:ee:fb:02:c3:fb IEEE 802.11: associated
Mon Apr  3 06:48:35 2017 daemon.notice hostapd: wlan1: AP-STA-CONNECTED c0:ee:fb:02:c3:fb
Mon Apr  3 06:48:35 2017 daemon.info hostapd: wlan1: STA c0:ee:fb:02:c3:fb IEEE 802.11: disassociated
Mon Apr  3 06:48:35 2017 daemon.notice hostapd: wlan1: AP-STA-DISCONNECTED c0:ee:fb:02:c3:fb
Mon Apr  3 06:48:35 2017 daemon.info hostapd: wlan1: STA c0:ee:fb:02:c3:fb IEEE 802.11: disassociated
Mon Apr  3 06:48:36 2017 daemon.info hostapd: wlan1: STA c0:ee:fb:02:c3:fb IEEE 802.11: disassociated

Wireshark shows the router sends DEAUTH after the client's first packet with reason 7.

However, if I copy the hostapd conf from /var/run/hostapd-* to somewhere else, and start hostapd manually, both radio will work:

root@LEDE:~# cp /var/run/hostapd-phy* /var
root@LEDE:~# wifi down
root@LEDE:~# hostapd -s -B /var/hostapd-phy0.conf 
root@LEDE:~# hostapd -s -B /var/hostapd-phy1.conf

Mon Apr  3 06:52:30 2017 daemon.err hostapd: Configuration file: /var/run/hostapd-phy0.conf
Mon Apr  3 06:52:30 2017 daemon.err hostapd: Failed to create interface mon.wlan0: -95 (Not supported)
Mon Apr  3 06:52:30 2017 kern.info kernel: [  886.017318] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
Mon Apr  3 06:52:30 2017 kern.info kernel: [  886.024574] br-lan: port 2(wlan0) entered blocking state
Mon Apr  3 06:52:30 2017 kern.info kernel: [  886.029901] br-lan: port 2(wlan0) entered disabled state
Mon Apr  3 06:52:30 2017 kern.info kernel: [  886.035484] device wlan0 entered promiscuous mode
Mon Apr  3 06:52:30 2017 daemon.notice hostapd: wlan0: interface state UNINITIALIZED->COUNTRY_UPDATE
Mon Apr  3 06:52:30 2017 daemon.warn hostapd: wlan0: Could not connect to kernel driver
Mon Apr  3 06:52:30 2017 daemon.err hostapd: Using interface wlan0 with hwaddr d8:c8:e9:fe:c6:6d and ssid "LEDE-HT"
Mon Apr  3 06:52:30 2017 kern.info kernel: [  886.266236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
Mon Apr  3 06:52:30 2017 kern.info kernel: [  886.272768] br-lan: port 2(wlan0) entered blocking state
Mon Apr  3 06:52:30 2017 kern.info kernel: [  886.278097] br-lan: port 2(wlan0) entered forwarding state
Mon Apr  3 06:52:30 2017 daemon.notice hostapd: wlan0: interface state COUNTRY_UPDATE->ENABLED
Mon Apr  3 06:52:30 2017 daemon.notice hostapd: wlan0: AP-ENABLED 
Mon Apr  3 06:52:32 2017 daemon.err hostapd: Configuration file: /var/run/hostapd-phy1.conf
Mon Apr  3 06:52:32 2017 daemon.err hostapd: Failed to create interface mon.wlan1: -95 (Not supported)
Mon Apr  3 06:52:32 2017 kern.info kernel: [  888.508936] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
Mon Apr  3 06:52:32 2017 kern.info kernel: [  888.516245] br-lan: port 3(wlan1) entered blocking state
Mon Apr  3 06:52:32 2017 kern.info kernel: [  888.521578] br-lan: port 3(wlan1) entered disabled state
Mon Apr  3 06:52:32 2017 kern.info kernel: [  888.527217] device wlan1 entered promiscuous mode
Mon Apr  3 06:52:32 2017 daemon.notice hostapd: wlan1: interface state UNINITIALIZED->COUNTRY_UPDATE
Mon Apr  3 06:52:32 2017 daemon.notice hostapd: wlan1: interface state COUNTRY_UPDATE->HT_SCAN
Mon Apr  3 06:52:32 2017 daemon.warn hostapd: wlan1: Could not connect to kernel driver
Mon Apr  3 06:52:32 2017 daemon.err hostapd: Using interface wlan1 with hwaddr d8:c8:e9:fe:c6:6e and ssid "LEDE-HT-5G"
Mon Apr  3 06:52:33 2017 kern.info kernel: [  889.074521] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
Mon Apr  3 06:52:33 2017 kern.info kernel: [  889.081012] br-lan: port 3(wlan1) entered blocking state
Mon Apr  3 06:52:33 2017 kern.info kernel: [  889.086357] br-lan: port 3(wlan1) entered forwarding state
Mon Apr  3 06:52:33 2017 daemon.notice hostapd: wlan1: interface state HT_SCAN->ENABLED
Mon Apr  3 06:52:33 2017 daemon.notice hostapd: wlan1: AP-ENABLED 
Mon Apr  3 06:52:39 2017 daemon.info hostapd: wlan1: STA c0:ee:fb:02:c3:fb IEEE 802.11: associated
Mon Apr  3 06:52:39 2017 daemon.notice hostapd: wlan1: AP-STA-CONNECTED c0:ee:fb:02:c3:fb
Mon Apr  3 06:52:42 2017 daemon.info dnsmasq-dhcp[1461]: DHCPDISCOVER(br-lan) c0:ee:fb:02:c3:fb 
Mon Apr  3 06:52:42 2017 daemon.info dnsmasq-dhcp[1461]: DHCPOFFER(br-lan) 192.168.1.199 c0:ee:fb:02:c3:fb 
Mon Apr  3 06:52:42 2017 daemon.info dnsmasq-dhcp[1461]: DHCPDISCOVER(br-lan) c0:ee:fb:02:c3:fb 
Mon Apr  3 06:52:42 2017 daemon.info dnsmasq-dhcp[1461]: DHCPOFFER(br-lan) 192.168.1.199 c0:ee:fb:02:c3:fb 
Mon Apr  3 06:52:42 2017 daemon.info dnsmasq-dhcp[1461]: DHCPREQUEST(br-lan) 192.168.1.199 c0:ee:fb:02:c3:fb 
Mon Apr  3 06:52:42 2017 daemon.info dnsmasq-dhcp[1461]: DHCPACK(br-lan) 192.168.1.199 c0:ee:fb:02:c3:fb android-6eb6e22865f4f3d

Here is my /etc/config/wireless:


config wifi-device 'radio0'
        option type 'mac80211'
        option channel '11'
        option hwmode '11g'
        option path '18000000.axi/bcma0:7/pci0000:00/0000:00:00.0/0000:01:00.0'
        option htmode 'HT20'
        option country '00'

config wifi-iface 'default_radio0'
        option device 'radio0'
        option network 'lan'
        option mode 'ap'
        option ssid 'LEDE-HT'
        option encryption 'none'

config wifi-device 'radio1'
        option type 'mac80211'
        option hwmode '11a'
        option path '18000000.axi/bcma0:8/pci0001:00/0001:00:00.0/0001:01:00.0'
        option log_level '1'
        option country 'US'
        option channel '161'
        option htmode 'VHT80'

config wifi-iface 'default_radio1'
        option device 'radio1'
        option network 'lan'
        option mode 'ap'
        option ssid 'LEDE-HT-5G'
        option key '12345678'
        option encryption 'none'

I couldn't find out what had gone wrong. Any help is greatly appreciated. Thanks!

rmilecki · April 4, 2017, 1:08pm

Please provide output of "iw phy phy0 info"

updateing · April 5, 2017, 5:21am

Thanks for your help!

Here is the result of iw phy phy0 info

Wiphy phy0
	max # scan SSIDs: 10
	max scan IEs length: 2048 bytes
	max # sched scan SSIDs: 0
	max # match sets: 0
	max # scan plans: 1
	max scan plan interval: -1
	max scan plan iterations: 0
	Retry short limit: 7
	Retry long limit: 4
	Coverage class: 0 (up to 0m)
	Device supports roaming.
	Available Antennas: TX 0 RX 0
	Supported interface modes:
		 * IBSS
		 * managed
		 * AP
		 * P2P-client
		 * P2P-GO
		 * P2P-device
	Band 1:
		Capabilities: 0x1022
			HT20/HT40
			Static SM Power Save
			RX HT20 SGI
			No RX STBC
			Max AMSDU length: 3839 bytes
			DSSS/CCK HT40
		Maximum RX AMPDU length 65535 bytes (exponent: 0x003)
		Minimum RX AMPDU time spacing: 16 usec (0x07)
		HT TX/RX MCS rate indexes supported: 0-31
		Frequencies:
			* 2412 MHz [1] (20.0 dBm)
			* 2417 MHz [2] (20.0 dBm)
			* 2422 MHz [3] (20.0 dBm)
			* 2427 MHz [4] (20.0 dBm)
			* 2432 MHz [5] (20.0 dBm)
			* 2437 MHz [6] (20.0 dBm)
			* 2442 MHz [7] (20.0 dBm)
			* 2447 MHz [8] (20.0 dBm)
			* 2452 MHz [9] (20.0 dBm)
			* 2457 MHz [10] (20.0 dBm)
			* 2462 MHz [11] (20.0 dBm)
			* 2467 MHz [12] (disabled)
			* 2472 MHz [13] (disabled)
			* 2484 MHz [14] (disabled)
	valid interface combinations:
		 * #{ managed } <= 1, #{ P2P-device } <= 1, #{ P2P-client, P2P-GO } <= 1,
		   total <= 3, #channels <= 1
		 * #{ managed } <= 1, #{ AP } <= 1, #{ P2P-client } <= 1, #{ P2P-device } <= 1,
		   total <= 4, #channels <= 1
		 * #{ AP } <= 4,
		   total <= 4, #channels <= 1, STA/AP BI must match

And phy1's:

Wiphy phy1
	max # scan SSIDs: 10
	max scan IEs length: 2048 bytes
	max # sched scan SSIDs: 0
	max # match sets: 0
	max # scan plans: 1
	max scan plan interval: -1
	max scan plan iterations: 0
	Retry short limit: 7
	Retry long limit: 4
	Coverage class: 0 (up to 0m)
	Device supports roaming.
	Available Antennas: TX 0 RX 0
	Supported interface modes:
		 * IBSS
		 * managed
		 * AP
		 * P2P-client
		 * P2P-GO
		 * P2P-device
	Band 2:
		Capabilities: 0x1062
			HT20/HT40
			Static SM Power Save
			RX HT20 SGI
			RX HT40 SGI
			No RX STBC
			Max AMSDU length: 3839 bytes
			DSSS/CCK HT40
		Maximum RX AMPDU length 65535 bytes (exponent: 0x003)
		Minimum RX AMPDU time spacing: 16 usec (0x07)
		HT TX/RX MCS rate indexes supported: 0-31
		VHT Capabilities (0x0c1b4064):
			Max MPDU length: 3895
			Supported Channel Width: 160 MHz
			short GI (80 MHz)
			short GI (160/80+80 MHz)
			MU Beamformer
			MU Beamformee
		VHT RX MCS set:
			1 streams: MCS 0-9
			2 streams: MCS 0-9
			3 streams: MCS 0-9
			4 streams: MCS 0-9
			5 streams: not supported
			6 streams: not supported
			7 streams: not supported
			8 streams: not supported
		VHT RX highest supported: 0 Mbps
		VHT TX MCS set:
			1 streams: MCS 0-9
			2 streams: MCS 0-9
			3 streams: MCS 0-9
			4 streams: MCS 0-9
			5 streams: not supported
			6 streams: not supported
			7 streams: not supported
			8 streams: not supported
		VHT TX highest supported: 0 Mbps
		Frequencies:
			* 5170 MHz [34] (disabled)
			* 5180 MHz [36] (20.0 dBm)
			* 5190 MHz [38] (20.0 dBm)
			* 5200 MHz [40] (20.0 dBm)
			* 5210 MHz [42] (20.0 dBm)
			* 5220 MHz [44] (20.0 dBm)
			* 5230 MHz [46] (20.0 dBm)
			* 5240 MHz [48] (20.0 dBm)
			* 5260 MHz [52] (20.0 dBm) (radar detection)
			* 5280 MHz [56] (20.0 dBm) (radar detection)
			* 5300 MHz [60] (20.0 dBm) (radar detection)
			* 5320 MHz [64] (20.0 dBm) (radar detection)
			* 5500 MHz [100] (20.0 dBm) (radar detection)
			* 5520 MHz [104] (20.0 dBm) (radar detection)
			* 5540 MHz [108] (20.0 dBm) (radar detection)
			* 5560 MHz [112] (20.0 dBm) (radar detection)
			* 5580 MHz [116] (20.0 dBm) (radar detection)
			* 5600 MHz [120] (20.0 dBm) (radar detection)
			* 5620 MHz [124] (20.0 dBm) (radar detection)
			* 5640 MHz [128] (20.0 dBm) (radar detection)
			* 5660 MHz [132] (20.0 dBm) (radar detection)
			* 5680 MHz [136] (20.0 dBm) (radar detection)
			* 5700 MHz [140] (20.0 dBm) (radar detection)
			* 5720 MHz [144] (20.0 dBm) (radar detection)
			* 5745 MHz [149] (20.0 dBm)
			* 5765 MHz [153] (20.0 dBm)
			* 5785 MHz [157] (20.0 dBm)
			* 5805 MHz [161] (20.0 dBm)
			* 5825 MHz [165] (20.0 dBm)
	valid interface combinations:
		 * #{ managed } <= 1, #{ P2P-device } <= 1, #{ P2P-client, P2P-GO } <= 1,
		   total <= 3, #channels <= 1
		 * #{ managed } <= 1, #{ AP } <= 1, #{ P2P-client } <= 1, #{ P2P-device } <= 1,
		   total <= 4, #channels <= 1
		 * #{ AP } <= 4,
		   total <= 4, #channels <= 1, STA/AP BI must match

I will try some other firmwares and see if it helps...

npcomplete · April 6, 2017, 7:40pm

Linksys released a newer firmware in their March build (1.1.7.179240) for EA9500. That one doesn't work for me on ea9500 running LEDE. The earlier firmware works fine.

Old Firmware (in EA9500 v1.1.7.177204):

4366c0-roml/pcie-ag-splitrx-fdap-mbss-mfp-wnm-osen-wl11k-wl11u-txbf-pktctx-amsdutx-ampduretry-chkd2hdma-proptxstatus-11nprop-obss-dbwsw-ringer-dmaindex16-bgdfs-hostpmac Version: 10.10.69.69 CRC: 34d30c8c Date: Tue 2016-08-23 17:31:24 PDT FWID 01-8438621f

Newer Firmware (in EA9500 v1.1.7.179240):

4366c0-roml/pcie-ag-splitrx-fdap-mbss-mfp-wnm-osen-wl11k-wl11u-txbf-pktctx-amsdutx-ampduretry-chkd2hdma-proptxstatus-11nprop-obss-dbwsw-ringer-dmaindex16-bgdfs-stamon-hostpmac-murx-splitassoc-dyn160 Version: 10.10.122.45 CRC: a70e397c Date: Tue 2017-02-14 16:57:54 PST FWID 01-1ebebd8a

I see that new functionality was added/enabled: - -stamon-hostpmac-murx-splitassoc-dyn160

updateing · April 7, 2017, 1:40am

That's a nice find!

Apart from the feature list, the version numbers are different as well. (10.10.69.x -> 10.10.122.x) Maybe brcmfmac could not handle the new series of firmware correctly...

I checked stock firmware of my router and confirmed that it was also a 10.10.69.x one. After switching to another 10.10.69.x firmware (from Netgear R8500) the wireless are up and working.

Thanks for everyone's help!

npcomplete · September 6, 2017, 4:37pm

@rmilecki Do you know if the new firmware will be supported by brcmfmac anytime soon?

When I load new firmware I see constant connect and disconnects.

Old fimrware had:

                VHT Capabilities (0x0c1b4020):
                    Max MPDU length: 3895
                    Supported Channel Width: neither 160 nor 80+80
                    short GI (80 MHz)
                    MU Beamformer
                    MU Beamformee

While new firmware has this: (stamon-murx-splitassoc-dyn160)

		VHT Capabilities (0x0c1b4064):
		Max MPDU length: 3895
		Supported Channel Width: 160 MHz
		short GI (80 MHz)
		short GI (160/80+80 MHz)
		MU Beamformer
		MU Beamformee