OpenWrt support for Linksys MX8500

lytr · 2024-03-10T23:12:04.562Z

robimarko:

For SSDK, its simple like this:

https://git.codelinaro.org/clo/qsdk/oss/lklm/qca-ssdk/-/commit/fef59290ba2b837d4f17063bdab55b22a783cb59

Just change the model and ID.

Finally port is working (using pinctrl):

[    2.498226] Aquantia AQR114C 90000.mdio-1:08: loading firmware version 'v9.9.5 WNC SAQA-L2 082721 12:00:46' from 'FS'
[   13.969704] aquantia_phy_api_ops_init[2241]:INFO:qca probe aquantia phy driver succeeded!

[  158.327799] nss-dp 3a007000.dp6-syn wan: PHY Link up speed: 1000
[  158.327879] IPv6: ADDRCONF(NETDEV_CHANGE): wan: link becomes ready

root@OpenWrt:/# ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8): 56 data bytes
64 bytes from 8.8.8.8: seq=0 ttl=112 time=32.687 ms
64 bytes from 8.8.8.8: seq=1 ttl=112 time=38.285 ms

But there is no communication on QCA8075 ports...
Only link is detected.

robimarko · 2024-03-11T08:21:12.015Z

That QCN error was due to lack of regulatory DB in the BDF

lytr · 2024-03-11T08:24:46.591Z

The BDF file can be found here: https://github.com/testuser7/firmware_qca-wireless/blob/mx8500/board-linksys_mx8500.qcn9074

Is the regdb size for QCN9074 hardcoded in the code?

robimarko · 2024-03-11T12:16:09.551Z

It probably completely lacks any regulator info, that is the usual issue as size varies depending on the version that was used to generate it

lytr · 2024-03-11T13:12:08.557Z

There is regdb (starting at address 0x12df0 with size 0x1c00). This is default for the firmware WLAN.HK.2.4.0.1.
BDFs for newer firmware use regdb with size 0x2800 (starting at the same address).

georgem83 · 2024-03-11T13:23:13.517Z

I’ve encountered the same issue. Managed to get the radio to initialize after embedding the regdb from upstream in the specific BDF for the device.

IPQ5018: Potential future support for Linksys MX2000 Atlas 6 & MX5500 Atlas 6 Pro For Developers

that worked, had to extract the regdb from the upstream board-2.bin file and embed it in the stock board file using ath11k-bdencoder AND setting .supports_regdb to true. I also see the frequencies match the stock FW. Awesome and thanks for your help! Now back to troubleshooting ipq5018 wifi.

Still needs a lot of testing, but at least ath11k ‘accepts’ the regdb

lytr · 2024-03-11T18:53:52.516Z

Thanks for the tip. After preparing board data with external regdb and enabled supports_regdb radio is correctly detected.

Do I need anything special to operate the 6GHz radio:

Thu Jan  1 00:07:24 1970 daemon.err hostapd: Management frame protection is required in 6 GHz

I have wrong encryption. Radio is up now but not transmitting:

phy2-ap0  ESSID: "6g"
          Access Point: **:**:**:**:**:**
          Mode: Master  Channel: 33 (6.115 GHz)  HT Mode: HE160
          Center Channel 1: 47 2: unknown
          Tx-Power: 10 dBm  Link Quality: unknown/70
          Signal: unknown  Noise: -106 dBm
          Bit Rate: unknown
          Encryption: WPA3 SAE (CCMP)
          Type: nl80211  HW Mode(s): 802.11ax
          Hardware: 17CB:1104 17CB:1104 [Qualcomm Atheros QCN6024/9024/9074]
          TX power offset: none
          Frequency offset: none
          Supports VAPs: yes  PHY name: phy2

I have also enabled supports_regdb for IPQ8074 and prepared board data with external regdb. Radio is working. Does this mean we can use an external regdb in binary format?

robimarko · 2024-03-11T19:28:22.777Z

Yes, external regdb has been working for a while now, the issue was that QCA did not publish it publicly at all, but now we can extract it from up to date upstream BDF-s

lytr · 2024-03-11T19:30:30.573Z

Do we need to add variant to the regdb file name:

[
    {
        "board": [
            {
                "names": [
                    "bus=ahb,qmi-chip-id=0,qmi-board-id=255,variant=Linksys-MX8500"
                ],
                "data": "bus=ahb,qmi-chip-id=0,qmi-board-id=255,variant=Linksys-MX8500.bin"
            }
        ],
        "regdb": [
            {
                "names": [
                    "bus=ahb,qmi-chip-id=0,qmi-board-id=255,variant=Linksys-MX8500"
                ],
                "data": "bus=ahb,qmi-chip-id=0,qmi-board-id=255,variant=Linksys-MX8500.regdb"
            }
        ]
    }
]

?

robimarko · 2024-03-11T19:31:42.236Z

You sure it even needs to be packaged at all, simply putting the regd.bin next to board-2.bin in rootfs should work as driver is for sure attempting to load that

lytr · 2024-03-11T19:33:20.269Z

Is there a failback implemented in ath11k to the BDF internal regdb if the external regdb is not found?

robimarko · 2024-03-11T19:35:21.460Z

I think it first looks in the board-2.bin, and then if no regdb is found there tries the regd.bin binary

lytr · 2024-03-11T19:38:23.009Z

In this order:

board-2.bin: bus=ahb,qmi-chip-id=0,qmi-board-id=255,variant=Linksys-MX8500.bin (internal regdb)
board-2.bin: bus=ahb,qmi-chip-id=0,qmi-board-id=255,variant=Linksys-MX8500.regdb
regdb.bin

?

robimarko · 2024-03-11T20:21:14.776Z

Yes, from what I understand that is the priority ordering.

There are some bits in regdb.bin that supposedly allow for the internal BDF regulatory to be overriden by the external one but I have not seen that actually work

lytr · 2024-03-11T20:30:18.967Z

I wonder why the radio isn't broadcasting anything. Is there any special configuration needed?

root@OpenWrt:/# iw phy2 info
Wiphy phy2
	wiphy index: 2
	max # scan SSIDs: 16
	max scan IEs length: 184 bytes
	max # sched scan SSIDs: 0
	max # match sets: 0
	Retry short limit: 7
	Retry long limit: 4
	Coverage class: 0 (up to 0m)
	Device supports AP-side u-APSD.
	Available Antennas: TX 0xf RX 0xf
	Configured Antennas: TX 0xf RX 0xf
	Supported interface modes:
		 * managed
		 * AP
		 * monitor
		 * mesh point
	Band 4:
		HE Iftypes: managed
			HE MAC Capabilities (0x000b9a181040):
				+HTC HE Supported
				TWT Requester
				Dynamic BA Fragementation Level: 1
				BSR
				Broadcast TWT
				OM Control
				Maximum A-MPDU Length Exponent: 3
				RX Control Frame to MultiBSS
				A-MSDU in A-MPDU
				OM Control UL MU Data Disable RX
			HE PHY Capabilities: (0x1c604c89ffdb839c110c00):
				HE40/HE80/5GHz
				HE160/5GHz
				HE160/HE80+80/5GHz
				LDPC Coding in Payload
				HE SU PPDU with 1x HE-LTF and 0.8us GI
				STBC Tx <= 80MHz
				STBC Rx <= 80MHz
				Full Bandwidth UL MU-MIMO
				DCM Max Constellation: 1
				DCM Max Constellation Rx: 1
				SU Beamformer
				SU Beamformee
				MU Beamformer
				Beamformee STS <= 80Mhz: 7
				Beamformee STS > 80Mhz: 7
				Sounding Dimensions <= 80Mhz: 3
				Sounding Dimensions > 80Mhz: 3
				Ng = 16 SU Feedback
				Ng = 16 MU Feedback
				Codebook Size SU Feedback
				Codebook Size MU Feedback
				PPE Threshold Present
				HE SU PPDU & HE PPDU 4x HE-LTF 0.8us GI
				Max NC: 3
				STBC Rx > 80MHz
				HE ER SU PPDU 4x HE-LTF 0.8us GI
				HE ER SU PPDU 1x HE-LTF 0.8us GI
				TX 1024-QAM
				RX 1024-QAM
			HE RX MCS and NSS set <= 80 MHz
				1 streams: MCS 0-11
				2 streams: MCS 0-11
				3 streams: MCS 0-11
				4 streams: MCS 0-11
				5 streams: not supported
				6 streams: not supported
				7 streams: not supported
				8 streams: not supported
			HE TX MCS and NSS set <= 80 MHz
				1 streams: MCS 0-11
				2 streams: MCS 0-11
				3 streams: MCS 0-11
				4 streams: MCS 0-11
				5 streams: not supported
				6 streams: not supported
				7 streams: not supported
				8 streams: not supported
			HE RX MCS and NSS set 160 MHz
				1 streams: MCS 0-11
				2 streams: MCS 0-11
				3 streams: MCS 0-11
				4 streams: MCS 0-11
				5 streams: not supported
				6 streams: not supported
				7 streams: not supported
				8 streams: not supported
			HE TX MCS and NSS set 160 MHz
				1 streams: MCS 0-11
				2 streams: MCS 0-11
				3 streams: MCS 0-11
				4 streams: MCS 0-11
				5 streams: not supported
				6 streams: not supported
				7 streams: not supported
				8 streams: not supported
		EHT Iftypes: managed
			EHT MAC Capabilities (0x0000):
			EHT PHY Capabilities: (0x0000000000000000):
			EHT MCS/NSS: (0x):
			EHT bw <= 80 MHz, max NSS for MCS 8-9: Rx=0, Tx=0
			EHT bw <= 80 MHz, max NSS for MCS 10-11: Rx=0, Tx=0
			EHT bw <= 80 MHz, max NSS for MCS 12-13: Rx=0, Tx=0
			EHT bw=160 MHz, max NSS for MCS 8-9: Rx=0, Tx=0
			EHT bw=160 MHz, max NSS for MCS 10-11: Rx=0, Tx=0
			EHT bw=160 MHz, max NSS for MCS 12-13: Rx=0, Tx=0
		HE Iftypes: AP
			HE MAC Capabilities (0x000d9a181040):
				+HTC HE Supported
				TWT Responder
				Dynamic BA Fragementation Level: 1
				BSR
				Broadcast TWT
				OM Control
				Maximum A-MPDU Length Exponent: 3
				RX Control Frame to MultiBSS
				A-MSDU in A-MPDU
				OM Control UL MU Data Disable RX
			HE PHY Capabilities: (0x1c604c88ffdb839c110c00):
				HE40/HE80/5GHz
				HE160/5GHz
				HE160/HE80+80/5GHz
				LDPC Coding in Payload
				HE SU PPDU with 1x HE-LTF and 0.8us GI
				STBC Tx <= 80MHz
				STBC Rx <= 80MHz
				Full Bandwidth UL MU-MIMO
				DCM Max Constellation Rx: 1
				SU Beamformer
				SU Beamformee
				MU Beamformer
				Beamformee STS <= 80Mhz: 7
				Beamformee STS > 80Mhz: 7
				Sounding Dimensions <= 80Mhz: 3
				Sounding Dimensions > 80Mhz: 3
				Ng = 16 SU Feedback
				Ng = 16 MU Feedback
				Codebook Size SU Feedback
				Codebook Size MU Feedback
				PPE Threshold Present
				HE SU PPDU & HE PPDU 4x HE-LTF 0.8us GI
				Max NC: 3
				STBC Rx > 80MHz
				HE ER SU PPDU 4x HE-LTF 0.8us GI
				HE ER SU PPDU 1x HE-LTF 0.8us GI
				TX 1024-QAM
				RX 1024-QAM
			HE RX MCS and NSS set <= 80 MHz
				1 streams: MCS 0-11
				2 streams: MCS 0-11
				3 streams: MCS 0-11
				4 streams: MCS 0-11
				5 streams: not supported
				6 streams: not supported
				7 streams: not supported
				8 streams: not supported
			HE TX MCS and NSS set <= 80 MHz
				1 streams: MCS 0-11
				2 streams: MCS 0-11
				3 streams: MCS 0-11
				4 streams: MCS 0-11
				5 streams: not supported
				6 streams: not supported
				7 streams: not supported
				8 streams: not supported
			HE RX MCS and NSS set 160 MHz
				1 streams: MCS 0-11
				2 streams: MCS 0-11
				3 streams: MCS 0-11
				4 streams: MCS 0-11
				5 streams: not supported
				6 streams: not supported
				7 streams: not supported
				8 streams: not supported
			HE TX MCS and NSS set 160 MHz
				1 streams: MCS 0-11
				2 streams: MCS 0-11
				3 streams: MCS 0-11
				4 streams: MCS 0-11
				5 streams: not supported
				6 streams: not supported
				7 streams: not supported
				8 streams: not supported
		EHT Iftypes: AP
			EHT MAC Capabilities (0x0000):
			EHT PHY Capabilities: (0x0000000000000000):
			EHT MCS/NSS: (0x):
			EHT bw <= 80 MHz, max NSS for MCS 8-9: Rx=0, Tx=0
			EHT bw <= 80 MHz, max NSS for MCS 10-11: Rx=0, Tx=0
			EHT bw <= 80 MHz, max NSS for MCS 12-13: Rx=0, Tx=0
			EHT bw=160 MHz, max NSS for MCS 8-9: Rx=0, Tx=0
			EHT bw=160 MHz, max NSS for MCS 10-11: Rx=0, Tx=0
			EHT bw=160 MHz, max NSS for MCS 12-13: Rx=0, Tx=0
		HE Iftypes: mesh point
			HE MAC Capabilities (0x00098a081040):
				+HTC HE Supported
				Dynamic BA Fragementation Level: 1
				BSR
				OM Control
				Maximum A-MPDU Length Exponent: 1
				RX Control Frame to MultiBSS
				A-MSDU in A-MPDU
				OM Control UL MU Data Disable RX
			HE PHY Capabilities: (0x1c600c80fd5b811c100000):
				HE40/HE80/5GHz
				HE160/5GHz
				HE160/HE80+80/5GHz
				LDPC Coding in Payload
				HE SU PPDU with 1x HE-LTF and 0.8us GI
				STBC Tx <= 80MHz
				STBC Rx <= 80MHz
				SU Beamformer
				SU Beamformee
				Beamformee STS <= 80Mhz: 7
				Beamformee STS > 80Mhz: 7
				Sounding Dimensions <= 80Mhz: 3
				Sounding Dimensions > 80Mhz: 3
				Ng = 16 SU Feedback
				Codebook Size SU Feedback
				PPE Threshold Present
				HE SU PPDU & HE PPDU 4x HE-LTF 0.8us GI
				Max NC: 3
				HE ER SU PPDU 1x HE-LTF 0.8us GI
			HE RX MCS and NSS set <= 80 MHz
				1 streams: MCS 0-11
				2 streams: MCS 0-11
				3 streams: MCS 0-11
				4 streams: MCS 0-11
				5 streams: not supported
				6 streams: not supported
				7 streams: not supported
				8 streams: not supported
			HE TX MCS and NSS set <= 80 MHz
				1 streams: MCS 0-11
				2 streams: MCS 0-11
				3 streams: MCS 0-11
				4 streams: MCS 0-11
				5 streams: not supported
				6 streams: not supported
				7 streams: not supported
				8 streams: not supported
			HE RX MCS and NSS set 160 MHz
				1 streams: MCS 0-11
				2 streams: MCS 0-11
				3 streams: MCS 0-11
				4 streams: MCS 0-11
				5 streams: not supported
				6 streams: not supported
				7 streams: not supported
				8 streams: not supported
			HE TX MCS and NSS set 160 MHz
				1 streams: MCS 0-11
				2 streams: MCS 0-11
				3 streams: MCS 0-11
				4 streams: MCS 0-11
				5 streams: not supported
				6 streams: not supported
				7 streams: not supported
				8 streams: not supported
		EHT Iftypes: mesh point
			EHT MAC Capabilities (0x0000):
			EHT PHY Capabilities: (0x0000000000000000):
			EHT MCS/NSS: (0x):
			EHT bw <= 80 MHz, max NSS for MCS 8-9: Rx=0, Tx=0
			EHT bw <= 80 MHz, max NSS for MCS 10-11: Rx=0, Tx=0
			EHT bw <= 80 MHz, max NSS for MCS 12-13: Rx=0, Tx=0
			EHT bw=160 MHz, max NSS for MCS 8-9: Rx=0, Tx=0
			EHT bw=160 MHz, max NSS for MCS 10-11: Rx=0, Tx=0
			EHT bw=160 MHz, max NSS for MCS 12-13: Rx=0, Tx=0
		Frequencies:
			* 5955 MHz [1] (disabled)
			* 5975 MHz [5] (disabled)
			* 5995 MHz [9] (disabled)
			* 6015 MHz [13] (disabled)
			* 6035 MHz [17] (disabled)
			* 6055 MHz [21] (disabled)
			* 6075 MHz [25] (disabled)
			* 6095 MHz [29] (disabled)
			* 6115 MHz [33] (30.0 dBm)
			* 6135 MHz [37] (30.0 dBm)
			* 6155 MHz [41] (30.0 dBm)
			* 6175 MHz [45] (30.0 dBm)
			* 6195 MHz [49] (30.0 dBm)
			* 6215 MHz [53] (30.0 dBm)
			* 6235 MHz [57] (30.0 dBm)
			* 6255 MHz [61] (30.0 dBm)
			* 6275 MHz [65] (30.0 dBm)
			* 6295 MHz [69] (30.0 dBm)
			* 6315 MHz [73] (30.0 dBm)
			* 6335 MHz [77] (30.0 dBm)
			* 6355 MHz [81] (30.0 dBm)
			* 6375 MHz [85] (30.0 dBm)
			* 6395 MHz [89] (30.0 dBm)
			* 6415 MHz [93] (30.0 dBm)
			* 6435 MHz [97] (30.0 dBm)
			* 6455 MHz [101] (30.0 dBm)
			* 6475 MHz [105] (30.0 dBm)
			* 6495 MHz [109] (30.0 dBm)
			* 6515 MHz [113] (30.0 dBm)
			* 6535 MHz [117] (30.0 dBm)
			* 6555 MHz [121] (30.0 dBm)
			* 6575 MHz [125] (30.0 dBm)
			* 6595 MHz [129] (30.0 dBm)
			* 6615 MHz [133] (30.0 dBm)
			* 6635 MHz [137] (30.0 dBm)
			* 6655 MHz [141] (30.0 dBm)
			* 6675 MHz [145] (30.0 dBm)
			* 6695 MHz [149] (30.0 dBm)
			* 6715 MHz [153] (30.0 dBm)
			* 6735 MHz [157] (30.0 dBm)
			* 6755 MHz [161] (30.0 dBm)
			* 6775 MHz [165] (30.0 dBm)
			* 6795 MHz [169] (30.0 dBm)
			* 6815 MHz [173] (30.0 dBm)
			* 6835 MHz [177] (30.0 dBm)
			* 6855 MHz [181] (30.0 dBm)
			* 6875 MHz [185] (30.0 dBm)
			* 6895 MHz [189] (30.0 dBm)
			* 6915 MHz [193] (30.0 dBm)
			* 6935 MHz [197] (30.0 dBm)
			* 6955 MHz [201] (30.0 dBm)
			* 6975 MHz [205] (30.0 dBm)
			* 6995 MHz [209] (30.0 dBm)
			* 7015 MHz [213] (30.0 dBm)
			* 7035 MHz [217] (30.0 dBm)
			* 7055 MHz [221] (30.0 dBm)
			* 7075 MHz [225] (30.0 dBm)
			* 7095 MHz [229] (30.0 dBm)
			* 7115 MHz [233] (30.0 dBm)
			* 5935 MHz [2] (disabled)
	valid interface combinations:
		 * #{ managed } <= 1, #{ AP, mesh point } <= 16,
		   total <= 16, #channels <= 1, STA/AP BI must match, radar detect widths: { 20 MHz (no HT), 20 MHz, 40 MHz, 80 MHz, 80+80 MHz, 160 MHz }

	HT Capability overrides:
		 * MCS: ff ff ff ff ff ff ff ff ff ff
		 * maximum A-MSDU length
		 * supported channel width
		 * short GI for 40 MHz
		 * max A-MPDU length exponent
		 * min MPDU start spacing
	max # scan plans: 1
	max scan plan interval: -1
	max scan plan iterations: 0
	Maximum associated stations in AP mode: 128
	Supported extended features:
		* [ RRM ]: RRM
		* [ SET_SCAN_DWELL ]: scan dwell setting
		* [ FILS_STA ]: STA FILS (Fast Initial Link Setup)
		* [ CQM_RSSI_LIST ]: multiple CQM_RSSI_THOLD records
		* [ CONTROL_PORT_OVER_NL80211 ]: control port over nl80211
		* [ ACK_SIGNAL_SUPPORT ]: ack signal level support
		* [ TXQS ]: FQ-CoDel-enabled intermediate TXQs
		* [ ENABLE_FTM_RESPONDER ]: enable FTM (Fine Time Measurement) responder
		* [ STA_TX_PWR ]: TX power control per station
		* [ CONTROL_PORT_NO_PREAUTH ]: disable pre-auth over nl80211 control port support
		* [ SCAN_FREQ_KHZ ]: scan on kHz frequency support
		* [ CONTROL_PORT_OVER_NL80211_TX_STATUS ]: tx status for nl80211 control port support
		* [ FILS_DISCOVERY ]: FILS discovery frame transmission support
		* [ UNSOL_BCAST_PROBE_RESP ]: unsolicated broadcast probe response transmission support
		* [ BSS_COLOR ]: BSS coloring support

My configuration:

config wifi-device 'radio2'
	option type 'mac80211'
	option path 'soc/20000000.pci/pci0000:00/0000:00:00.0/0000:01:00.0'
	option channel '33'
	option band '6g'
	option htmode 'HE160'
	option disabled '0'
	option country 'US'
	option cell_density '0'

config wifi-iface 'default_radio2'
	option device 'radio2'
	option network 'lan'
	option mode 'ap'
	option ssid '6g'
	option encryption 'sae'
	option key '*'

robimarko · 2024-03-11T21:34:12.495Z

Look at what logread is saying, there is probably an hostapd error

lytr · 2024-03-11T21:49:40.882Z

Thu Jan  1 03:15:18 1970 daemon.notice netifd: radio2 (5092): WARNING: Variable 'data' does not exist or is not an array/object
Thu Jan  1 03:15:18 1970 daemon.notice hostapd: Set new config for phy phy2:
Thu Jan  1 03:15:18 1970 daemon.notice wpa_supplicant[2038]: Set new config for phy phy2
Thu Jan  1 03:15:18 1970 daemon.notice wpa_supplicant[2038]: Set new config for phy phy2
Thu Jan  1 03:15:18 1970 daemon.notice hostapd: Set new config for phy phy2: /var/run/hostapd-phy2.conf
Thu Jan  1 03:15:18 1970 daemon.notice hostapd: Restart interface for phy phy2
Thu Jan  1 03:15:18 1970 daemon.notice hostapd: Configuration file: data: driver=nl80211 logger_syslog=127 logger_syslog_level=2 logger_stdout=127 logger_stdout_level=2 country_code=US ieee80211d=1 ieee80211h=1 hw_mode=a beacon_int=100 chanlist=33 tx_queue_data2_burst=2.0 #num_global_macaddr=1 ieee80211n=1 ht_coex=0 ht_capab=[HT40+] op_class=134 ieee80211ac=1 vht_oper_chwidth=2 vht_oper_centr_freq_seg0_idx=47 vht_capab=[MAX-A-MPDU-LEN-EXP0] ieee80211ax=1 he_oper_chwidth=2 he_oper_centr_freq_seg0_idx=47 he_su_beamformer=1 he_su_beamformee=1 he_mu_beamformer=1 he_bss_color=128 he_spr_sr_control=3 he_default_pe_duration=4 he_rts_threshold=1023 he_mu_edca_qos_info_param_count=0 he_mu_edca_qos_info_q_ack=0 he_mu_edca_qos_info_queue_request=0 he_mu_edca_qos_info_txop_request=0 he_mu_edca_ac_be_aifsn=8 he_mu_edca_ac_be_aci=0 he_mu_edca_ac_be_ecwmin=9 he_mu_edca_ac_be_ecwmax=10 he_mu_edca_ac_be_timer=255 he_mu_edca_ac_bk_aifsn=15 he_mu_edca_ac_bk_aci=1 he_mu_edca_ac_bk_ecwmin=9 he_mu_edca_ac_bk_ecwmax=10 he_mu_edca_ac_bk_timer=255 he_
Thu Jan  1 03:15:18 1970 kern.info kernel: [11718.523019] br-lan: port 5(phy2-ap0) entered blocking state
Thu Jan  1 03:15:18 1970 kern.info kernel: [11718.523062] br-lan: port 5(phy2-ap0) entered disabled state
Thu Jan  1 03:15:18 1970 kern.info kernel: [11718.527778] device phy2-ap0 entered promiscuous mode
Thu Jan  1 03:15:18 1970 kern.info kernel: [11718.533041] br-lan: port 5(phy2-ap0) entered blocking state
Thu Jan  1 03:15:18 1970 kern.info kernel: [11718.538185] br-lan: port 5(phy2-ap0) entered forwarding state
Thu Jan  1 03:15:18 1970 daemon.notice hostapd: phy2-ap0: interface state UNINITIALIZED->COUNTRY_UPDATE
Thu Jan  1 03:15:18 1970 kern.info kernel: [11718.544344] br-lan: port 5(phy2-ap0) entered disabled state
Thu Jan  1 03:15:18 1970 kern.info kernel: [11718.587664] IPv6: ADDRCONF(NETDEV_CHANGE): phy2-ap0: link becomes ready
Thu Jan  1 03:15:18 1970 kern.info kernel: [11718.587819] br-lan: port 5(phy2-ap0) entered blocking state
Thu Jan  1 03:15:18 1970 kern.info kernel: [11718.593096] br-lan: port 5(phy2-ap0) entered forwarding state
Thu Jan  1 03:15:18 1970 daemon.notice netifd: Network device 'phy2-ap0' link is up
Thu Jan  1 03:15:18 1970 daemon.notice netifd: bridge 'br-lan' link is up
Thu Jan  1 03:15:18 1970 daemon.notice netifd: Interface 'lan' has link connectivity
Thu Jan  1 03:15:18 1970 daemon.notice hostapd: phy2-ap0: interface state COUNTRY_UPDATE->ENABLED
Thu Jan  1 03:15:18 1970 daemon.notice hostapd: phy2-ap0: AP-ENABLED
Thu Jan  1 03:15:18 1970 daemon.notice netifd: Wireless device 'radio2' is now up
Thu Jan  1 03:15:19 1970 daemon.warn odhcpd[2166]: No default route present, overriding ra_lifetime!

It might be a VLP (Very Low Power) mode?

lytr · 2024-03-11T22:12:32.058Z

Sometimes during boot I'm getting this error and restart is performed:

[ 5855.192802] pcieport 0000:00:00.0: AER: Multiple Corrected error message received from 0000:00:00.0

lytr · 2024-03-11T22:17:30.377Z

Could the problem with setting gpio44 be that the PHY has id 0x00000000:

root@OpenWrt:~# mdio 9*
 DEV      PHY-ID  LINK
0x00  0x004dd0b1  down
0x01  0x004dd0b1  down
0x02  0x004dd0b1  down
0x03  0x004dd0b1  up
0x04  0x004dd0b1  down
0x05  0x04820a05  down
0x08  0x00000000  down

?

robimarko · 2024-03-11T22:27:33.161Z

AQR-s are C45 only PHY-s so they dont have a C22 address at all and that is probably confusing the probe code completely.

As far as the 6GHz support goes, I am not sure if the 6E power/regulatory commits for ath11k have been backported, have newer tried it as I dont have any boards that support 6E