1951

Yes they also support the extended partition.

For wireguard you can fork my repo and add it at the end of the config file

1952

Is sysupgrade to 6.6 keeping settings OK?

1953

Build qualcommax-6.x-nss-wifi with Kernel 6.1. iperf3 results:

iperf3 -c 192.168.1.1
Connecting to host 192.168.1.1, port 5201
[  4] local 192.168.1.65 port 2390 connected to 192.168.1.1 port 5201
[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-1.00   sec  89.8 MBytes   753 Mbits/sec
[  4]   1.00-2.00   sec  93.0 MBytes   780 Mbits/sec
[  4]   2.00-3.00   sec  96.6 MBytes   809 Mbits/sec
[  4]   3.00-4.00   sec  89.0 MBytes   747 Mbits/sec
[  4]   4.00-5.00   sec  91.5 MBytes   767 Mbits/sec
[  4]   5.00-6.00   sec  92.0 MBytes   772 Mbits/sec
[  4]   6.00-7.00   sec  92.9 MBytes   779 Mbits/sec
[  4]   7.00-8.00   sec  93.4 MBytes   784 Mbits/sec
[  4]   8.00-9.00   sec  92.4 MBytes   774 Mbits/sec
[  4]   9.00-10.00  sec  88.2 MBytes   740 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-10.00  sec   919 MBytes   771 Mbits/sec                  sender
[  4]   0.00-10.00  sec   918 MBytes   770 Mbits/sec                  receiver

iperf Done.

Build qualcommax-6.x-nss-wifi with Kernel 6.6. iperf3 results:

iperf3.exe -c 192.168.1.1
Connecting to host 192.168.1.1, port 5201
[  4] local 192.168.1.65 port 4064 connected to 192.168.1.1 port 5201
[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-1.00   sec  84.1 MBytes   705 Mbits/sec
[  4]   1.00-2.00   sec  85.5 MBytes   717 Mbits/sec
[  4]   2.00-3.00   sec  86.2 MBytes   724 Mbits/sec
[  4]   3.00-4.00   sec  91.6 MBytes   768 Mbits/sec
[  4]   4.00-5.00   sec  93.1 MBytes   780 Mbits/sec
[  4]   5.00-6.00   sec  92.1 MBytes   774 Mbits/sec
[  4]   6.00-7.00   sec  92.4 MBytes   775 Mbits/sec
[  4]   7.00-8.00   sec  94.2 MBytes   789 Mbits/sec
[  4]   8.00-9.00   sec  94.2 MBytes   793 Mbits/sec
[  4]   9.00-10.00  sec  94.1 MBytes   789 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-10.00  sec   908 MBytes   761 Mbits/sec                  sender
[  4]   0.00-10.00  sec   908 MBytes   761 Mbits/sec                  receiver
1954 
2024-03-25T07:18:53.3603787Z make[3]: Entering directory '/home/runner/work/ax3600-builder/ax3600-builder/openwrt/package/network/utils/fullconenat-nft'
2024-03-25T07:18:53.5137939Z rm -f /home/runner/work/ax3600-builder/ax3600-builder/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-qualcommax_ipq807x/fullconenat-nft-2023.01.10~95ad79bc/.built
2024-03-25T07:18:53.5167127Z touch /home/runner/work/ax3600-builder/ax3600-builder/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-qualcommax_ipq807x/fullconenat-nft-2023.01.10~95ad79bc/.built_check
2024-03-25T07:18:53.5202586Z make -C /home/runner/work/ax3600-builder/ax3600-builder/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-qualcommax_ipq807x/linux-6.6.22 KCFLAGS="-fmacro-prefix-map=/home/runner/work/ax3600-builder/ax3600-builder/openwrt/build_dir/target-aarch64_cortex-a53_musl=target-aarch64_cortex-a53_musl -fno-caller-saves " HOSTCFLAGS="-O2 -I/home/runner/work/ax3600-builder/ax3600-builder/openwrt/staging_dir/host/include -I/home/runner/work/ax3600-builder/ax3600-builder/openwrt/staging_dir/hostpkg/include -I/home/runner/work/ax3600-builder/ax3600-builder/openwrt/staging_dir/target-aarch64_cortex-a53_musl/host/include -Wall -Wmissing-prototypes -Wstrict-prototypes" CROSS_COMPILE="aarch64-openwrt-linux-musl-" ARCH="arm64" KBUILD_HAVE_NLS=no KBUILD_BUILD_USER="" KBUILD_BUILD_HOST="" KBUILD_BUILD_TIMESTAMP="Mon Mar 25 05:04:37 2024" KBUILD_BUILD_VERSION="0" KBUILD_HOSTLDFLAGS="-L/home/runner/work/ax3600-builder/ax3600-builder/openwrt/staging_dir/host/lib" CONFIG_SHELL="bash" V=''  cmd_syscalls= KBUILD_EXTRA_SYMBOLS="/home/runner/work/ax3600-builder/ax3600-builder/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-qualcommax_ipq807x/symvers/gpio-button-hotplug.symvers /home/runner/work/ax3600-builder/ax3600-builder/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-qualcommax_ipq807x/symvers/qca-mcs.symvers /home/runner/work/ax3600-builder/ax3600-builder/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-qualcommax_ipq807x/symvers/qca-nss-dp.symvers /home/runner/work/ax3600-builder/ax3600-builder/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-qualcommax_ipq807x/symvers/qca-ssdk.symvers" CC="aarch64-openwrt-linux-musl-gcc" KERNELRELEASE=6.6.22 M="/home/runner/work/ax3600-builder/ax3600-builder/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-qualcommax_ipq807x/fullconenat-nft-2023.01.10~95ad79bc/src" modules
2024-03-25T07:18:53.5224356Z make[4]: Entering directory '/home/runner/work/ax3600-builder/ax3600-builder/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-qualcommax_ipq807x/linux-6.6.22'
2024-03-25T07:18:53.9084246Z   CC [M]  /home/runner/work/ax3600-builder/ax3600-builder/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-qualcommax_ipq807x/fullconenat-nft-2023.01.10~95ad79bc/src/nft_ext_fullcone.o
2024-03-25T07:18:54.7668601Z /home/runner/work/ax3600-builder/ax3600-builder/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-qualcommax_ipq807x/fullconenat-nft-2023.01.10~95ad79bc/src/nft_ext_fullcone.c:275:17: error: initialization of 'int (*)(struct sk_buff *, const struct nft_expr *, bool)' {aka 'int (*)(struct sk_buff *, const struct nft_expr *, _Bool)'} from incompatible pointer type 'int (*)(struct sk_buff *, const struct nft_expr *)' [-Werror=incompatible-pointer-types]
2024-03-25T07:18:54.7670987Z   275 |         .dump = nft_fullcone_dump,
2024-03-25T07:18:54.7671356Z       |                 ^~~~~~~~~~~~~~~~~
2024-03-25T07:18:54.7673089Z /home/runner/work/ax3600-builder/ax3600-builder/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-qualcommax_ipq807x/fullconenat-nft-2023.01.10~95ad79bc/src/nft_ext_fullcone.c:275:17: note: (near initialization for 'nft_fullcone_ipv4_ops.dump')
2024-03-25T07:18:54.7676710Z /home/runner/work/ax3600-builder/ax3600-builder/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-qualcommax_ipq807x/fullconenat-nft-2023.01.10~95ad79bc/src/nft_ext_fullcone.c:315:17: error: initialization of 'int (*)(struct sk_buff *, const struct nft_expr *, bool)' {aka 'int (*)(struct sk_buff *, const struct nft_expr *, _Bool)'} from incompatible pointer type 'int (*)(struct sk_buff *, const struct nft_expr *)' [-Werror=incompatible-pointer-types]
2024-03-25T07:18:54.7679211Z   315 |         .dump = nft_fullcone_dump,
2024-03-25T07:18:54.7679549Z       |                 ^~~~~~~~~~~~~~~~~
2024-03-25T07:18:54.7680965Z /home/runner/work/ax3600-builder/ax3600-builder/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-qualcommax_ipq807x/fullconenat-nft-2023.01.10~95ad79bc/src/nft_ext_fullcone.c:315:17: note: (near initialization for 'nft_fullcone_ipv6_ops.dump')
2024-03-25T07:18:54.7684213Z /home/runner/work/ax3600-builder/ax3600-builder/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-qualcommax_ipq807x/fullconenat-nft-2023.01.10~95ad79bc/src/nft_ext_fullcone.c:374:17: error: initialization of 'int (*)(struct sk_buff *, const struct nft_expr *, bool)' {aka 'int (*)(struct sk_buff *, const struct nft_expr *, _Bool)'} from incompatible pointer type 'int (*)(struct sk_buff *, const struct nft_expr *)' [-Werror=incompatible-pointer-types]
2024-03-25T07:18:54.7686221Z   374 |         .dump = nft_fullcone_dump,
2024-03-25T07:18:54.7686555Z       |                 ^~~~~~~~~~~~~~~~~
2024-03-25T07:18:54.7688054Z /home/runner/work/ax3600-builder/ax3600-builder/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-qualcommax_ipq807x/fullconenat-nft-2023.01.10~95ad79bc/src/nft_ext_fullcone.c:374:17: note: (near initialization for 'nft_fullcone_inet_ops.dump')
2024-03-25T07:18:54.8486377Z cc1: all warnings being treated as errors
2024-03-25T07:18:54.8600939Z make[6]: *** [scripts/Makefile.build:243: /home/runner/work/ax3600-builder/ax3600-builder/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-qualcommax_ipq807x/fullconenat-nft-2023.01.10~95ad79bc/src/nft_ext_fullcone.o] Error 1
2024-03-25T07:18:54.8605320Z make[5]: *** [/home/runner/work/ax3600-builder/ax3600-builder/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-qualcommax_ipq807x/linux-6.6.22/Makefile:1913: /home/runner/work/ax3600-builder/ax3600-builder/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-qualcommax_ipq807x/fullconenat-nft-2023.01.10~95ad79bc/src] Error 2
2024-03-25T07:18:54.8607601Z make[4]: *** [Makefile:234: __sub-make] Error 2
2024-03-25T07:18:54.8609094Z make[4]: Leaving directory '/home/runner/work/ax3600-builder/ax3600-builder/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-qualcommax_ipq807x/linux-6.6.22'
2024-03-25T07:18:54.8611006Z make[3]: *** [Makefile:53: /home/runner/work/ax3600-builder/ax3600-builder/openwrt/build_dir/target-aarch64_cortex-a53_musl/linux-qualcommax_ipq807x/fullconenat-nft-2023.01.10~95ad79bc/.built] Error 2
2024-03-25T07:18:54.8612533Z make[3]: Leaving directory '/home/runner/work/ax3600-builder/ax3600-builder/openwrt/package/network/utils/fullconenat-nft'
2024-03-25T07:18:54.8614901Z time: package/network/utils/fullconenat-nft/compile#0.99#0.30#1.50
2024-03-25T07:18:54.8622636Z     ERROR: package/network/utils/fullconenat-nft failed to build.
2024-03-25T07:18:54.8626388Z make[2]: *** [package/Makefile:129: package/network/utils/fullconenat-nft/compile] Error 1
2024-03-25T07:18:54.8631791Z make[2]: Leaving directory '/home/runner/work/ax3600-builder/ax3600-builder/openwrt'
2024-03-25T07:18:54.8659942Z make[1]: *** [package/Makefile:123: /home/runner/work/ax3600-builder/ax3600-builder/openwrt/staging_dir/target-aarch64_cortex-a53_musl/stamp/.package_compile] Error 2
2024-03-25T07:18:54.8666470Z make[1]: Leaving directory '/home/runner/work/ax3600-builder/ax3600-builder/openwrt'
2024-03-25T07:18:54.8700242Z make: *** [/home/runner/work/ax3600-builder/ax3600-builder/openwrt/include/toplevel.mk:233: world] Error 2
2024-03-25T07:18:54.8718855Z ##[error]Process completed with exit code 2.

Built with 6.6 and get errors

2 Likes
1955

the only workaround i see for this error is to use firewall3 instead. This is a dependency of firewall4 that should be addressed by the maintainers of this package. Interestingly the github repo has been archived ! or try compiling it with -Wno-incompatible-pointer-types

1956

Testing -Wno-incompatible-pointer-types: https://github.com/JuliusBairaktaris/Qualcommax_NSS_Builder/actions/runs/8418818305

If this is a firewall problem shouldn't this also occur on mainline openwrt?

1957

yes it is an upstream package

1958

Weird, there is no such reported issue in upstream: https://github.com/openwrt/openwrt/pull/14844

1959

I was wrong ... checking "https://github.com/openwrt/openwrt/blob/main/package/network/config/firewall4/Makefile" it doesn't have the fullcone dependency.

image
image1025×339 10.7 KB

1960

@qosmio remove commit, please: 3bbab2ccf223fd10b9759c5b5f51cef94c817719

1961

Don't we need this?
I've got the same fullcone compile error.

1962

The functionality is usually provided by masquerading. This is also the case upstream. So it can be dropped without causing any problems for NSS as far as I know.

Full-Cone NAT: Maps an internal IP address and port to a unique external IP address and port.

Masquerading: Replaces the source IP address of outgoing packets with the firewall's external IP address.

2 Likes
1963

does any one else has issue with IoT radio ath10k_ct on ax3600? I've got it in kernel.log after 2 days. Build qualcommax-6.1-nss-wifi qosmio branch.

[  131.263514] ath10k_pci 0000:01:00.0: SWBA overrun on vdev 0, skipped old beacon
[  131.365915] ath10k_pci 0000:01:00.0: SWBA overrun on vdev 0, skipped old beacon
[  131.423311] ath10k_pci 0000:01:00.0: Cannot communicate with firmware, previous wmi cmds: 36904:-170417 36954:-171608 36904:-171654 36904:-171655, jiffies: 4294798720, attempting restart restart firmware, dev-flags: 0 x142
[  131.423417] ath10k_pci 0000:01:00.0: failed to submit wmi echo: -108
[  131.441942] ath10k_pci 0000:01:00.0: failed to ping firmware: -108
[  131.448469] ath10k_pci 0000:01:00.0: failed to install key for vdev 0 peer 10:52:1c:fc:74:6e: -108
[  131.454446] phy0-ap0: failed to remove key (0, 10:52:1c:fc:74:6e) from hardware (-108)
[  131.454464] ath10k_pci 0000:01:00.0: failed to send wmi nop: -108
[  131.468316] ath10k_pci 0000:01:00.0: SWBA overrun on vdev 0, skipped old beacon
[  131.477455] ath10k_pci 0000:01:00.0: could not request stats (type -268435456 ret -108 specifier 1)
[  131.494314] ath10k_pci 0000:01:00.0: cipher 0 is not supported
[  131.494349] ath10k_pci 0000:01:00.0: failed to remove peer wep key 0: -95
[  131.499496] ath10k_pci 0000:01:00.0: failed to clear all peer wep keys for vdev 0: -95
[  131.506351] ath10k_pci 0000:01:00.0: failed to disassociate station: 10:52:1c:fc:74:6e vdev 0: -95
[  131.514234] ------------[ cut here ]------------
[  131.523087] WARNING: CPU: 2 PID: 2082 at backports-6.6.15/net/mac80211/sta_info.c:1438 sta_set_sinfo+0xc5c/0xca4 [mac80211]
[  131.527874] Modules linked in: ecm nft_fib_inet nf_flow_table_inet ath11k_ahb ath11k ath10k_pci ath10k_core ath wireguard nft_reject_ipv6 nft_reject_ipv4 nft_reject_inet nft_reject_bridge nft_reject nft_redir nft_quota nft_objref nft_numgen nft_nat nft_meta_bridge nft_masq nft_log nft_limit nft_hash nft_fwd_netdev nft_flow_offload nft_fib_ipv6 nft_fib_ipv4 nft_fib nft_dup_netdev nft_ct nft_chain_nat nf_tables nf_nat nf_flow_table nf_conntrack_netlink nf_conntrack_bridge nf_conntrack mac80211 libchacha20poly1305 chacha_neon cfg80211 qrtr_smd qrtr qmi_helpers ppp_async poly1305_neon nfnetlink nf_reject_ipv6 nf_reject_ipv4 nf_log_syslog nf_dup_netdev nf_defrag_ipv4 libcurve25519_generic libcrc32c libchacha l2tp_ppp compat sch_tbf sch_ingress sch_htb sch_hfsc em_u32 cls_u32 cls_route cls_matchall cls_fw cls_flow cls_basic act_skbedit act_mirred act_gact qca_nss_cfi_cryptoapi qca_nss_crypto qca_nss_qdisc qca_nss_pptp pptp qca_nss_pppoe pppoe pppox qca_nss_map_t qca_nss_l2tpv2 ppp_generic
[  131.528069]  slhc
[  131.538410] ath10k_pci 0000:01:00.0: failed to transmit management frame via WMI: -108
[  131.603630]  qca_nss_gre qca_nss_bridge_mgr qca_nss_vlan ip6_gre ip_gre gre ifb nat46 nf_defrag_ipv6 qca_nss_drv ip6_tunnel tunnel6 sha512_generic sha512_arm64 seqiv
[  131.626224] ath10k_pci 0000:01:00.0: removing peer, cleanup-all, deleting: peer 00000000fc97edd6 vdev: 0 addr: 30:30:f9:57:31:e0 
[  131.627781]  jitterentropy_rng drbg michael_mic hmac cmac
[  131.635616] ath10k_pci 0000:01:00.0: removing peer, cleanup-all, deleting: peer 000000008fbc5a75 vdev: 0 addr: 10:52:1c:fc:74:6e 
[  131.650445]  leds_gpio xhci_plat_hcd xhci_pci xhci_hcd dwc3 dwc3_qcom qca_nss_dp
[  131.662071] ath10k_pci 0000:01:00.0: removing peer, cleanup-all, deleting: peer 00000000de77d8a7 vdev: 0 addr: 28:d1:27:4c:c4:d5 
[  131.667459]  qca_ssdk gpio_button_hotplug ext4 mbcache jbd2 aquantia hwmon crc_ccitt crc32c_generic
[  131.698098] CPU: 2 PID: 2082 Comm: hostapd Not tainted 6.1.82 #0
[  131.706944] Hardware name: Xiaomi AX3600 (DT)
[  131.713192] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  131.717449] pc : sta_set_sinfo+0xc5c/0xca4 [mac80211]
[  131.724216] lr : sta_set_sinfo+0xbb4/0xca4 [mac80211]
[  131.729425] sp : ffffffc00d743880
[  131.734456] x29: ffffffc00d743880 x28: ffffff8003a424c0 x27: ffffffc00d743dc8
[  131.737667] ieee80211 phy0: Hardware restart was requested
[  131.737761] x26: ffffff8002070080 x25: ffffffc008c6b300 x24: ffffffc000cde000
[  131.750262] x23: ffffffc00d743a70 x22: ffffff800f1cc900 x21: ffffff80063508a0
[  131.757467] x20: 0000000000000001 x19: ffffff8011b86000 x18: 0000000000000222
[  131.764585] x17: 313a32353a303120 x16: 3a6e6f6974617473 x15: ffffffc008b67338
[  131.771702] x14: 0000000000000666 x13: 0000000000000222 x12: 00000000ffffffea
[  131.778821] x11: 00000000ffffefff x10: ffffffc008bbf338 x9 : ffffffc008b672e0
[  131.785939] x8 : 0000000000017fe8 x7 : c0000000ffffefff x6 : 0000000000000001
[  131.793058] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffffff8003a424c0
[  131.800174] x2 : 0000000000000000 x1 : ffffff8003a424c0 x0 : 00000000ffffffa1
[  131.807295] Call trace:
[  131.814401]  sta_set_sinfo+0xc5c/0xca4 [mac80211]
[  131.816663]  sta_info_destroy_addr_bss+0x54/0x7c [mac80211]
[  131.821526]  ieee80211_color_change_finish+0x1c58/0x1f70 [mac80211]
[  131.826910]  cfg80211_check_station_change+0x1264/0x3590 [cfg80211]
[  131.833159]  genl_family_rcv_msg_doit+0xb8/0x11c
[  131.839407]  genl_rcv_msg+0x108/0x230
[  131.844265]  netlink_rcv_skb+0x5c/0x130
[  131.847824]  genl_rcv+0x38/0x50
[  131.851468]  netlink_unicast+0x1e8/0x2d0
[  131.854596]  netlink_sendmsg+0x19c/0x3d0
[  131.858763]  ____sys_sendmsg+0x1c8/0x270
[  131.862670]  ___sys_sendmsg+0x7c/0xc0
[  131.866575]  __sys_sendmsg+0x48/0xb0
[  131.870134]  __arm64_sys_sendmsg+0x24/0x30
[  131.873779]  invoke_syscall.constprop.0+0x5c/0x104
[  131.877687]  do_el0_svc+0x58/0x16c
[  131.882458]  el0_svc+0x18/0x54
[  131.885844]  el0t_64_sync_handler+0x114/0x120
[  131.888884]  el0t_64_sync+0x174/0x178
[  131.893312] ---[ end trace 0000000000000000 ]---
[  131.897103] ath10k_pci 0000:01:00.0: failed to delete peer 10:52:1c:fc:74:6e for vdev 0: -108
[  131.901740] ------------[ cut here ]------------
[  131.910067] WARNING: CPU: 2 PID: 2082 at backports-6.6.15/net/mac80211/sta_info.c:1446 sta_set_sinfo+0xc84/0xca4 [mac80211]
[  131.914767] Modules linked in: ecm nft_fib_inet nf_flow_table_inet ath11k_ahb ath11k ath10k_pci ath10k_core ath wireguard nft_reject_ipv6 nft_reject_ipv4 nft_reject_inet nft_reject_bridge nft_reject nft_redir nft_quota nft_objref nft_numgen nft_nat nft_meta_bridge nft_masq nft_log nft_limit nft_hash nft_fwd_netdev nft_flow_offload nft_fib_ipv6 nft_fib_ipv4 nft_fib nft_dup_netdev nft_ct nft_chain_nat nf_tables nf_nat nf_flow_table nf_conntrack_netlink nf_conntrack_bridge nf_conntrack mac80211 libchacha20poly1305 chacha_neon cfg80211 qrtr_smd qrtr qmi_helpers ppp_async poly1305_neon nfnetlink nf_reject_ipv6 nf_reject_ipv4 nf_log_syslog nf_dup_netdev nf_defrag_ipv4 libcurve25519_generic libcrc32c libchacha l2tp_ppp compat sch_tbf sch_ingress sch_htb sch_hfsc em_u32 cls_u32 cls_route cls_matchall cls_fw cls_flow cls_basic act_skbedit act_mirred act_gact qca_nss_cfi_cryptoapi qca_nss_crypto qca_nss_qdisc qca_nss_pptp pptp qca_nss_pppoe pppoe pppox qca_nss_map_t qca_nss_l2tpv2 ppp_generic
[  131.914962]  slhc qca_nss_gre qca_nss_bridge_mgr qca_nss_vlan ip6_gre ip_gre gre ifb nat46 nf_defrag_ipv6 qca_nss_drv ip6_tunnel tunnel6 sha512_generic sha512_arm64 seqiv jitterentropy_rng drbg michael_mic hmac cmac leds_gpio xhci_plat_hcd xhci_pci xhci_hcd dwc3 dwc3_qcom qca_nss_dp qca_ssdk gpio_button_hotplug ext4 mbcache jbd2 aquantia hwmon crc_ccitt crc32c_generic
[  132.022991] CPU: 2 PID: 2082 Comm: hostapd Tainted: G        W          6.1.82 #0
[  132.045229] Hardware name: Xiaomi AX3600 (DT)
[  132.052775] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  132.057118] pc : sta_set_sinfo+0xc84/0xca4 [mac80211]
[  132.063887] lr : sta_set_sinfo+0xc80/0xca4 [mac80211]
[  132.069095] sp : ffffffc00d743880
[  132.074125] x29: ffffffc00d743880 x28: ffffff8003a424c0 x27: ffffffc00d743dc8
[  132.077433] x26: ffffff8002070080 x25: ffffffc008c6b300 x24: ffffffc000cde000
[  132.084550] x23: ffffffc00d743a70 x22: ffffff800f1cc900 x21: ffffff80063508a0
[  132.091667] x20: 0000000000000001 x19: ffffff8011b86000 x18: 0000000000000255
[  132.098787] x17: 65363a34373a6366 x16: 3a63313a32353a30 x15: ffffffc008b67338
[  132.105904] x14: ffffff8006353710 x13: 0000000000000255 x12: 0000000000000000
[  132.113023] x11: 00000000ffffefff x10: 0000000000000000 x9 : ffffffc008b672e0
[  132.120141] x8 : 0000000000000000 x7 : c0000000ffffefff x6 : 0000000000000001
[  132.127258] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffffff8003a424c0
[  132.134376] x2 : 0000000000000000 x1 : ffffff8003a424c0 x0 : 00000000ffffff94
[  132.141495] Call trace:
[  132.148603]  sta_set_sinfo+0xc84/0xca4 [mac80211]
[  132.150866]  sta_info_destroy_addr_bss+0x54/0x7c [mac80211]
[  132.155727]  ieee80211_color_change_finish+0x1c58/0x1f70 [mac80211]
[  132.161111]  cfg80211_check_station_change+0x1264/0x3590 [cfg80211]
[  132.167360]  genl_family_rcv_msg_doit+0xb8/0x11c
[  132.173608]  genl_rcv_msg+0x108/0x230
[  132.178466]  netlink_rcv_skb+0x5c/0x130
[  132.182025]  genl_rcv+0x38/0x50
[  132.185671]  netlink_unicast+0x1e8/0x2d0
[  132.188798]  netlink_sendmsg+0x19c/0x3d0
[  132.192965]  ____sys_sendmsg+0x1c8/0x270
[  132.196869]  ___sys_sendmsg+0x7c/0xc0
[  132.200776]  __sys_sendmsg+0x48/0xb0
[  132.204334]  __arm64_sys_sendmsg+0x24/0x30
[  132.207981]  invoke_syscall.constprop.0+0x5c/0x104
[  132.211888]  do_el0_svc+0x58/0x16c
[  132.216661]  el0_svc+0x18/0x54
[  132.220045]  el0t_64_sync_handler+0x114/0x120
[  132.223086]  el0t_64_sync+0x174/0x178
[  132.227513] ---[ end trace 0000000000000000 ]---
[  132.231589] ------------[ cut here ]------------
[  132.235849] WARNING: CPU: 1 PID: 2082 at backports-6.6.15/net/mac80211/sta_info.c:423 sta_info_free+0xb0/0x12c [mac80211]
[  132.240462] Modules linked in: ecm nft_fib_inet nf_flow_table_inet ath11k_ahb ath11k ath10k_pci ath10k_core ath wireguard nft_reject_ipv6 nft_reject_ipv4 nft_reject_inet nft_reject_bridge nft_reject nft_redir nft_quota nft_objref nft_numgen nft_nat nft_meta_bridge nft_masq nft_log nft_limit nft_hash nft_fwd_netdev nft_flow_offload nft_fib_ipv6 nft_fib_ipv4 nft_fib nft_dup_netdev nft_ct nft_chain_nat nf_tables nf_nat nf_flow_table nf_conntrack_netlink nf_conntrack_bridge nf_conntrack mac80211 libchacha20poly1305 chacha_neon cfg80211 qrtr_smd qrtr qmi_helpers ppp_async poly1305_neon nfnetlink nf_reject_ipv6 nf_reject_ipv4 nf_log_syslog nf_dup_netdev nf_defrag_ipv4 libcurve25519_generic libcrc32c libchacha l2tp_ppp compat sch_tbf sch_ingress sch_htb sch_hfsc em_u32 cls_u32 cls_route cls_matchall cls_fw cls_flow cls_basic act_skbedit act_mirred act_gact qca_nss_cfi_cryptoapi qca_nss_crypto qca_nss_qdisc qca_nss_pptp pptp qca_nss_pppoe pppoe pppox qca_nss_map_t qca_nss_l2tpv2 ppp_generic
[  132.240658]  slhc qca_nss_gre qca_nss_bridge_mgr qca_nss_vlan ip6_gre ip_gre gre ifb nat46 nf_defrag_ipv6 qca_nss_drv ip6_tunnel tunnel6 sha512_generic sha512_arm64 seqiv jitterentropy_rng drbg michael_mic hmac cmac leds_gpio xhci_plat_hcd xhci_pci xhci_hcd dwc3 dwc3_qcom qca_nss_dp qca_ssdk gpio_button_hotplug ext4 mbcache jbd2 aquantia hwmon crc_ccitt crc32c_generic
[  132.348512] CPU: 1 PID: 2082 Comm: hostapd Tainted: G        W          6.1.82 #0
[  132.370749] Hardware name: Xiaomi AX3600 (DT)
[  132.378296] pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  132.382640] pc : sta_info_free+0xb0/0x12c [mac80211]
[  132.389408] lr : sta_info_free+0x3c/0x12c [mac80211]
[  132.394615] sp : ffffffc00d743860
[  132.399559] x29: ffffffc00d743860 x28: ffffff8003a424c0 x27: ffffffc00d743dc8
[  132.402779] x26: ffffff8002070080 x25: ffffffc008c6b300 x24: ffffffc000cde000
[  132.409898] x23: ffffffc00d743a70 x22: ffffff800f1cc900 x21: ffffff80063508a0
[  132.417016] x20: ffffff8011b86000 x19: 000000000000000f x18: 0000000000000005
[  132.424133] x17: ffffffc017427000 x16: ffffffc008008000 x15: 0000000000000006
[  132.431252] x14: 0000000000000000 x13: 00000000000002af x12: 0000000000000001
[  132.438370] x11: 0000000000000000 x10: 00000000000008d0 x9 : ffffffc00d743690
[  132.445487] x8 : ffffff8003a42df0 x7 : ffffff8011b86c3a x6 : 000000000a30c8ef
[  132.452606] x5 : 000000000000071a x4 : 0000000000000000 x3 : 0000000000000000
[  132.459723] x2 : 0000000000000000 x1 : 0000000000000003 x0 : 0000000004100113
[  132.466842] Call trace:
[  132.473952]  sta_info_free+0xb0/0x12c [mac80211]
[  132.476213]  sta_set_sinfo+0xc48/0xca4 [mac80211]
[  132.481073]  sta_info_destroy_addr_bss+0x54/0x7c [mac80211]
[  132.485675]  ieee80211_color_change_finish+0x1c58/0x1f70 [mac80211]
[  132.491058]  cfg80211_check_station_change+0x1264/0x3590 [cfg80211]
[  132.497309]  genl_family_rcv_msg_doit+0xb8/0x11c
[  132.503556]  genl_rcv_msg+0x108/0x230
[  132.508415]  netlink_rcv_skb+0x5c/0x130
[  132.511973]  genl_rcv+0x38/0x50
[  132.515618]  netlink_unicast+0x1e8/0x2d0
[  132.518745]  netlink_sendmsg+0x19c/0x3d0
[  132.522912]  ____sys_sendmsg+0x1c8/0x270
[  132.526818]  ___sys_sendmsg+0x7c/0xc0
[  132.530724]  __sys_sendmsg+0x48/0xb0
[  132.534283]  __arm64_sys_sendmsg+0x24/0x30
[  132.537930]  invoke_syscall.constprop.0+0x5c/0x104
[  132.541836]  do_el0_svc+0x58/0x16c
[  132.546608]  el0_svc+0x18/0x54
[  132.549993]  el0t_64_sync_handler+0x114/0x120
[  132.553035]  el0t_64_sync+0x174/0x178
[  132.557462] ---[ end trace 0000000000000000 ]---
[  132.561360] ath10k_pci 0000:01:00.0: failed to clear all peer wep keys for vdev 0: -2
[  132.565809] ath10k_pci 0000:01:00.0: failed to disassociate station: 10:52:1c:fc:74:6e vdev 0: -2
[  132.573542] ------------[ cut here ]------------
[  132.582390] sta_info_move_state() returned -2
[  132.587137] WARNING: CPU: 1 PID: 2082 at backports-6.6.15/net/mac80211/sta_info.c:426 sta_info_free+0x11c/0x12c [mac80211]
[  132.591330] Modules linked in: ecm nft_fib_inet nf_flow_table_inet ath11k_ahb ath11k ath10k_pci ath10k_core ath wireguard nft_reject_ipv6 nft_reject_ipv4 nft_reject_inet nft_reject_bridge nft_reject nft_redir nft_quota nft_objref nft_numgen nft_nat nft_meta_bridge nft_masq nft_log nft_limit nft_hash nft_fwd_netdev nft_flow_offload nft_fib_ipv6 nft_fib_ipv4 nft_fib nft_dup_netdev nft_ct nft_chain_nat nf_tables nf_nat nf_flow_table nf_conntrack_netlink nf_conntrack_bridge nf_conntrack mac80211 libchacha20poly1305 chacha_neon cfg80211 qrtr_smd qrtr qmi_helpers ppp_async poly1305_neon nfnetlink nf_reject_ipv6 nf_reject_ipv4 nf_log_syslog nf_dup_netdev nf_defrag_ipv4 libcurve25519_generic libcrc32c libchacha l2tp_ppp compat sch_tbf sch_ingress sch_htb sch_hfsc em_u32 cls_u32 cls_route cls_matchall cls_fw cls_flow cls_basic act_skbedit act_mirred act_gact qca_nss_cfi_cryptoapi qca_nss_crypto qca_nss_qdisc qca_nss_pptp pptp qca_nss_pppoe pppoe pppox qca_nss_map_t qca_nss_l2tpv2 ppp_generic
[  132.591521]  slhc qca_nss_gre qca_nss_bridge_mgr qca_nss_vlan ip6_gre ip_gre gre ifb nat46 nf_defrag_ipv6 qca_nss_drv ip6_tunnel tunnel6 sha512_generic sha512_arm64 seqiv jitterentropy_rng drbg michael_mic hmac cmac leds_gpio xhci_plat_hcd xhci_pci xhci_hcd dwc3 dwc3_qcom qca_nss_dp qca_ssdk gpio_button_hotplug ext4 mbcache jbd2 aquantia hwmon crc_ccitt crc32c_generic
[  132.699554] CPU: 1 PID: 2082 Comm: hostapd Tainted: G        W          6.1.82 #0
[  132.721791] Hardware name: Xiaomi AX3600 (DT)
[  132.729338] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  132.733680] pc : sta_info_free+0x11c/0x12c [mac80211]
[  132.740449] lr : sta_info_free+0x11c/0x12c [mac80211]
[  132.745657] sp : ffffffc00d743860
[  132.750688] x29: ffffffc00d743860 x28: ffffff8003a424c0 x27: ffffffc00d743dc8
[  132.753995] x26: ffffff8002070080 x25: ffffffc008c6b300 x24: ffffffc000cde000
[  132.761113] x23: ffffffc00d743a70 x22: ffffff800f1cc900 x21: ffffff80063508a0
[  132.768230] x20: ffffff8011b86000 x19: 000000000000000f x18: 00000000000002ac
[  132.775349] x17: 313a32353a303120 x16: 3a6e6f6974617473 x15: ffffffc008b67338
[  132.782467] x14: 0000000000000804 x13: 00000000000002ac x12: 00000000ffffffea
[  132.789585] x11: 00000000ffffefff x10: ffffffc008bbf338 x9 : ffffffc008b672e0
[  132.796703] x8 : 0000000000017fe8 x7 : c0000000ffffefff x6 : 0000000000000001
[  132.803820] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000
[  132.810938] x2 : ffffff801fe9e5d0 x1 : ffffffc017427000 x0 : 0000000000000021
[  132.818057] Call trace:
[  132.825165]  sta_info_free+0x11c/0x12c [mac80211]
[  132.827428]  sta_set_sinfo+0xc48/0xca4 [mac80211]
[  132.832288]  sta_info_destroy_addr_bss+0x54/0x7c [mac80211]
[  132.836977]  ieee80211_color_change_finish+0x1c58/0x1f70 [mac80211]
[  132.842361]  cfg80211_check_station_change+0x1264/0x3590 [cfg80211]
[  132.848610]  genl_family_rcv_msg_doit+0xb8/0x11c
[  132.854858]  genl_rcv_msg+0x108/0x230
[  132.859716]  netlink_rcv_skb+0x5c/0x130
[  132.863276]  genl_rcv+0x38/0x50
[  132.866921]  netlink_unicast+0x1e8/0x2d0
[  132.870048]  netlink_sendmsg+0x19c/0x3d0
[  132.874214]  ____sys_sendmsg+0x1c8/0x270
[  132.878121]  ___sys_sendmsg+0x7c/0xc0
[  132.882025]  __sys_sendmsg+0x48/0xb0
[  132.885585]  __arm64_sys_sendmsg+0x24/0x30
[  132.889231]  invoke_syscall.constprop.0+0x5c/0x104
[  132.893139]  do_el0_svc+0x58/0x16c
[  132.897911]  el0_svc+0x18/0x54
[  132.901295]  el0t_64_sync_handler+0x114/0x120
[  132.904336]  el0t_64_sync+0x174/0x178
[  132.908763] ---[ end trace 0000000000000000 ]---
[  133.840621] ath10k_pci 0000:01:00.0: 10.1 wmi init: vdevs: 16  peers: 127  tid: 256
[  133.847637] ath10k_pci 0000:01:00.0: wmi print 'P 128 V 8 T 410'
[  133.847691] ath10k_pci 0000:01:00.0: wmi print 'msdu-desc: 1424  sw-crypt: 0 ct-sta: 0'
[  133.853439] ath10k_pci 0000:01:00.0: wmi print 'alloc rem: 25560 iram: 24780'
[  133.901084] ath10k_pci 0000:01:00.0: pdev param 0 not supported by firmware
[  133.906068] ath10k_pci 0000:01:00.0: rts threshold -1
[  133.912941] ath10k_pci 0000:01:00.0: device successfully recovered
[  134.757008] ath10k_pci 0000:01:00.0: SWBA overrun on vdev 0, skipped old beacon
[  134.859406] ath10k_pci 0000:01:00.0: SWBA overrun on vdev 0, skipped old beacon```
after restart ath10k radio no issues for next hours, also before -skb I belive there weren't any issues here.

my config:

config wifi-device 'radio0'
        option type 'mac80211'
        option path 'soc/20000000.pci/pci0000:00/0000:00:00.0/0000:01:00.0'
        option cell_density '0'
        option band '2g'
        option country 'US'
        option channel '1'

config wifi-iface 'wifinet2'
        option device 'radio0'
        option mode 'ap'
        option ssid 'mynetwork-IoT'
        option encryption 'psk2'
        option secret 'xxxxxxxx'
        option key 'xxxxxxxx'
        option network 'IoT'
        option wps_pushbutton '1'
        option disassoc_low_ack '0'
        option macfilter 'allow'
        list maclist 'xxxxxxxxx'
        list maclist 'xxxxxxxxx
        list maclist 'xxxxxxxxx
        list maclist 'xxxxxxxxx

Edit: issue resolved. I were doing dirty sysupdate, after clean install no more issue.

1964

so I created this little patch to fix the compilation issue in case people feel the need to keep this module otherwise just remove the dependency from firewall4 and unselect the module

create directory package/network/utils/fullconenat-nft/patches/

0001-nft-fullcone-dump-fix.patch

--- a/src/nft_ext_fullcone.c    2023-01-10 03:04:25.000000000 +0000
+++ b/src/nft_ext_fullcone.c    2023-01-10 03:04:25.000000000 +0000
@@ -179,7 +179,7 @@
        return err;
 }

-static int nft_fullcone_dump(struct sk_buff *skb, const struct nft_expr *expr)
+static int nft_fullcone_dump(struct sk_buff *skb, const struct nft_expr *expr, bool)
 {
        const struct nft_fullcone *priv = nft_expr_priv(expr);

running on 6.6 (branch qualcommax-6.x-nss-wifi)

nf_conntrack           86016 22 ecm,xt_connlimit,nf_conncount,xt_state,xt_nat,xt_helper,xt_conntrack,xt_connmark,xt_connlabel,xt_connbytes,xt_REDIRECT,xt_MASQUERADE,xt_DSCP,nft_redir,nft_nat,nft_masq,nft_fullcone,nft_flow_offload,nft_ct,nf_nat,nf_flow_table,nf_conntrack_netlink
nf_nat                 32768  9 iptable_nat,xt_nat,xt_REDIRECT,xt_MASQUERADE,nft_redir,nft_nat,nft_masq,nft_fullcone,nft_chain_nat
nf_tables             192512507 nft_redir,nft_nat,nft_masq,nft_fullcone,nft_flow_offload,nft_fib_inet,nft_ct,nft_chain_nat,nf_flow_table_inet,nft_reject_ipv6,nft_reject_ipv4,nft_reject_inet,nft_reject,nft_quota,nft_numgen,nft_log,nft_limit,nft_hash,nft_fib_ipv6,nft_fib_ipv4,nft_fib,nft_compat
nft_fullcone           53248  2
5 Likes
1965

image
image966×888 20.6 KB

Edit:
Firewall appears to be broken. BanIP doesnt work as expected:

root@OpenWrt:~# service firewall restart
nft_try_fullcone: cmd /usr/sbin/nft -c 'add table inet fw4-fullcone-test; add chain inet fw4-fullcone-test dstnat { type nat hook prerouting priority -100; policy accept; fullcone; }; add chain inet fw4-fullcone-test srcnat { type nat hook postrouting priority -100; policy accept; fullcone; }; ' 2>/dev/null
nft_try_fullcone failed, disable fullcone globally
nft_try_fullcone: cmd /usr/sbin/nft -c 'add table inet fw4-fullcone-test; add chain inet fw4-fullcone-test dstnat { type nat hook prerouting priority -100; policy accept; fullcone; }; add chain inet fw4-fullcone-test srcnat { type nat hook postrouting priority -100; policy accept; fullcone; }; ' 2>/dev/null
nft_try_fullcone failed, disable fullcone globally

For the lazy people just run: sed -i '/+kmod-nft-fullcone/d' package/network/config/firewall4/Makefile

1 Like
1966

@JuliusBairaktaris have you enabled qca-nss-crypto and qca-nss-cfi-cryptoapi ?

1967

Yes, https://github.com/JuliusBairaktaris/Qualcommax_NSS_Builder/blob/main/ax3600.config

1 Like
1968

@qosmio on the ax9000

for the pci wifi there is the same issue you fixed for the ahb wifi where rx rate is showing zero

image

1969

There is 60MiB less ram reported by Luci on kernel 6.6 (Talking about total ram):

image
image1005×663 14.4 KB

Rx numbers appear fine on ax3600

1970

Seems that related to qualcommax: add 6.6 testing kernel