Wallys DR9074-6E(PN02.7) QCN9074 refuses to work on 6GHz band

Mariusz enebeo at gmail.com
Thu Nov 17 08:51:54 PST 2022


I am still waiting for feedback, I have recompiled the kernel with
testing options CERT_TESTING & CONFIGURATION_ONUS to see if there is
something else at play. I also loaded ath11k module with
debug_mask=0x16

Upon starting hostapd I start seeing a repetitive rx completion error:
[  998.115392] ath11k_pci 0000:07:00.0: txpower from firmware 48,
reported 24 dBm
[  998.115494] ath11k_pci 0000:07:00.0: mac chanctx add freq 5955
width 2 ptr ffff921153c0d058
[  998.115497] ath11k_pci 0000:07:00.0: mac chanctx assign ptr
ffff921153c0d058 vdev_id 0
[  998.115500] ath11k_pci 0000:07:00.0: WMI vdev id 0x0 set param
32770 value 123
[  998.115502] ath11k_pci 0000:07:00.0: WMI vdev id 0x0 set param 135 value 9
[  998.115503] ath11k_pci 0000:07:00.0: mac vdev 0 start center_freq
5955 phymode 11ax-he40
[  998.115505] ath11k_pci 0000:07:00.0: vdev start id 0x0 freq 0x1743 mode 0x11
[  998.161183] ath11k_pci 0000:07:00.0: htc rx completion ep 2 skb
    pK-error
[  998.161190] ath11k_pci 0000:07:00.0: Unknown eventid: 0x4028
[  998.161194] ath11k_pci 0000:07:00.0: htc rx completion ep 2 skb
    pK-error
[  998.161196] ath11k_pci 0000:07:00.0: Unknown eventid: 0x4028
[  998.166883] ath11k_pci 0000:07:00.0: htc rx completion ep 2 skb
    pK-error
[  998.166892] ath11k_pci 0000:07:00.0: pdev ctl failsafe check ev status 0
[  998.172504] ath11k_pci 0000:07:00.0: htc rx completion ep 2 skb
    pK-error
[  998.172518] ath11k_pci 0000:07:00.0: vdev start resp for vdev id 0
[  998.172664] ath11k_pci 0000:07:00.0: vdev c4:4b:d1:d0:00:7e
started, vdev_id 0
[  998.172675] ath11k_pci 0000:07:00.0: WMI vdev id 0x0 set param 45 value 829
[  998.172688] ath11k_pci 0000:07:00.0: WMI vdev id 0x0 set param 3 value 100
[  998.172691] ath11k_pci 0000:07:00.0: Beacon interval: 100 set for VDEV: 0
[  998.172694] ath11k_pci 0000:07:00.0: WMI pdev set param 7 pdev id 1 value 0
[  998.172697] ath11k_pci 0000:07:00.0: Set staggered beacon mode for VDEV: 0
[  998.172705] ath11k_pci 0000:07:00.0: WMI vdev id 0x0 set param 126 value 3
[  998.172707] ath11k_pci 0000:07:00.0: Set BA BUFFER SIZE 256 for VDEV: 0
[  998.172710] ath11k_pci 0000:07:00.0: WMI vdev id 0x0 set param 13 value 2
[  998.172712] ath11k_pci 0000:07:00.0: DTIM period: 2 set for VDEV: 0
[  998.172717] ath11k_pci 0000:07:00.0: WMI mgmt vdev up id 0x0 assoc
id 0 bssid c4:4b:d1:d0:00:7e
[  998.172720] ath11k_pci 0000:07:00.0: mac vdev 0 up
[  998.172722] ath11k_pci 0000:07:00.0: mac vdev_id 0 txpower 30
[  998.172724] ath11k_pci 0000:07:00.0: txpower to set in hw 30
[  998.172728] ath11k_pci 0000:07:00.0: mac obss pd sr_ctrl 0
non_srg_thres 0 srg_max 0
[  998.172732] ath11k_pci 0000:07:00.0: WMI pdev set param 188 pdev id
1 value -1610612542
[  998.172736] ath11k_pci 0000:07:00.0: WMI pdev set param 190 pdev id
1 value 15
[  998.172739] ath11k_pci 0000:07:00.0: WMI pdev set param 198 pdev id 1 value 0
[  998.172742] ath11k_pci 0000:07:00.0: obss pd pdev_id 1 bss color
bitmap 00000000 00000000
[  998.172747] ath11k_pci 0000:07:00.0: obss pd pdev_id 1 partial
bssid bitmap 00000000 00000000
[  998.172750] ath11k_pci 0000:07:00.0: obss pd srg pdev_id 1 bss
color enable bitmap ffffffff ffffffff
[  998.172754] ath11k_pci 0000:07:00.0: obss pd srg pdev_id 1 bssid
enable bitmap ffffffff ffffffff
[  998.172757] ath11k_pci 0000:07:00.0: obss pd non_srg pdev_id 1 bss
color enable bitmap ffffffff ffffffff
[  998.172761] ath11k_pci 0000:07:00.0: obss pd non_srg pdev_id 1
bssid enable bitmap ffffffff ffffffff
[  998.172885] ath11k_pci 0000:07:00.0: WMI vdev id 0x0 set param 26 value 0
[  998.172888] ath11k_pci 0000:07:00.0: Set CTS prot: 0 for VDEV: 0
[  998.172891] ath11k_pci 0000:07:00.0: WMI vdev id 0x0 set param 8 value 2
[  998.172893] ath11k_pci 0000:07:00.0: Set preamble: 2 for VDEV: 0
[  998.172896] ath11k_pci 0000:07:00.0: WMI vdev id 0x0 set param 25
value 268435459
[  998.172900] ath11k_pci 0000:07:00.0: WMI vdev id 0x0 set param 94
value 268435459
[  998.177740] ath11k_pci 0000:07:00.0: htc rx completion ep 2 skb
    pK-error
[  998.177748] ath11k_pci 0000:07:00.0: ignoring unsupported event 0x7008
[  998.180598] ath11k_pci 0000:07:00.0: htc rx completion ep 2 skb
    pK-error
[  998.180600] ath11k_pci 0000:07:00.0: ignoring unsupported event 0x3e001
[  998.195042] ath11k_pci 0000:07:00.0: WMI vdev install key idx 1
cipher 4 len 16
[  998.196269] ath11k_pci 0000:07:00.0: htc rx completion ep 2 skb
    pK-error
[  998.196274] ath11k_pci 0000:07:00.0: vdev install key ev idx 1
flags 00000001 macaddr c4:4b:d1:d0:00:7e status 0
[  998.218911] ath11k_pci 0000:07:00.0: htc rx completion ep 2 skb
    pK-error
[  998.219007] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[  998.219167] ath11k_pci 0000:07:00.0: wmi wmm set ac 0 aifs 3 cwmin
15 cwmax 63 txop 0 acm 0 no_ack 0
[  998.219172] ath11k_pci 0000:07:00.0: wmi wmm set ac 1 aifs 7 cwmin
15 cwmax 1023 txop 0 acm 0 no_ack 0
[  998.219176] ath11k_pci 0000:07:00.0: wmi wmm set ac 2 aifs 1 cwmin
7 cwmax 15 txop 94 acm 0 no_ack 0
[  998.219180] ath11k_pci 0000:07:00.0: wmi wmm set ac 3 aifs 1 cwmin
3 cwmax 7 txop 47 acm 0 no_ack 0
[  998.219207] ath11k_pci 0000:07:00.0: wmi wmm set ac 0 aifs 3 cwmin
15 cwmax 63 txop 0 acm 0 no_ack 0
[  998.219211] ath11k_pci 0000:07:00.0: wmi wmm set ac 1 aifs 7 cwmin
15 cwmax 1023 txop 0 acm 0 no_ack 0
[  998.219214] ath11k_pci 0000:07:00.0: wmi wmm set ac 2 aifs 1 cwmin
7 cwmax 15 txop 94 acm 0 no_ack 0
[  998.219217] ath11k_pci 0000:07:00.0: wmi wmm set ac 3 aifs 1 cwmin
3 cwmax 7 txop 47 acm 0 no_ack 0
[  998.219241] ath11k_pci 0000:07:00.0: wmi wmm set ac 0 aifs 3 cwmin
15 cwmax 63 txop 0 acm 0 no_ack 0
[  998.219244] ath11k_pci 0000:07:00.0: wmi wmm set ac 1 aifs 7 cwmin
15 cwmax 1023 txop 0 acm 0 no_ack 0
[  998.219247] ath11k_pci 0000:07:00.0: wmi wmm set ac 2 aifs 1 cwmin
7 cwmax 15 txop 94 acm 0 no_ack 0
[  998.219250] ath11k_pci 0000:07:00.0: wmi wmm set ac 3 aifs 1 cwmin
3 cwmax 7 txop 47 acm 0 no_ack 0
[  998.219272] ath11k_pci 0000:07:00.0: wmi wmm set ac 0 aifs 3 cwmin
15 cwmax 63 txop 0 acm 0 no_ack 0
[  998.219275] ath11k_pci 0000:07:00.0: wmi wmm set ac 1 aifs 7 cwmin
15 cwmax 1023 txop 0 acm 0 no_ack 0
[  998.219277] ath11k_pci 0000:07:00.0: wmi wmm set ac 2 aifs 1 cwmin
7 cwmax 15 txop 94 acm 0 no_ack 0
[  998.219280] ath11k_pci 0000:07:00.0: wmi wmm set ac 3 aifs 1 cwmin
3 cwmax 7 txop 47 acm 0 no_ack 0
[  998.320920] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[  998.422872] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[  998.525099] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[  998.627328] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[  998.729962] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[  998.832893] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[  998.934766] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[  999.037387] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[  999.139589] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[  999.242822] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[  999.344918] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[  999.446812] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[  999.549138] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[  999.651586] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[  999.754795] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[  999.856897] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[  999.958910] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[ 1000.061380] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[ 1000.163549] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[ 1000.266791] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[ 1000.368367] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[ 1000.470888] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error
[ 1000.573401] ath11k_pci 0000:07:00.0: htc rx completion ep 1 skb
    pK-error

On Tue, 15 Nov 2022 at 11:02, Mariusz <enebeo at gmail.com> wrote:
>
> Hi,
>
> I have asked the manufacturer to confirm. It has the 6E sticker on it
> but I have no lower level tools to read e-fuses if any. Regarding
> board_id they say normally on non-x86 this is set by bootloader so it
> is not hardcoded in eeprom.
> For the HW side, on the PCB there are two markings, 5G (top) and 6E
> (bottom), none of them was bridged from the factory. I bridged the 6E
> one but that did not change anything. In the meantime I also deployed
> aircrack-ng on AX210 client since I have no 6GHz equipment to do other
> testing.
>
> On the client:
> iw wlp1s0 del
> airmon-ng start wlan0mon
> tshark -i wlan0mon -T text -V > log.wifi
> airodump-ng -C 6115 -i wlan0mon --bssid C4:4B:D1:D0:00:7E
>
> Checking available frequencies, this could take few seconds.
> Freq 6115 ][ Elapsed: 0 s ][ 2022-11-08 19:48
> BSSID              PWR  Beacons    #Data, #/s  CH   MB   ENC CIPHER  AUTH ESSID
> C4:4B:D1:D0:00:7E  -46       12        0    0  33   54e  WPA3 CCMP   SAE  dupa
>
> So the client is seeing signal strength and beacon packets which are
> increasing continuously. It has concluded SSID, MAC and encryption
> details correctly on 6E freq - 6115MHz and it is also seeing op class
> 134 = 160Mhz channel as set.  Then I assume electronics at least TX on
> QCN9074 is working fine as the remote client is picking up something
> but whatever is not right as there's no handshake. I tried to
> pre-setup SSID so it auto connects without SSID discovery on Win
> client but no juice. So I dumped packet details, not sure if I read
> all flags right but there's a mix of it mentioning 6GHz supported &
> enabled but in other places OFDM is listed instead of OFDMA. Now which
> part of it is due aircrack-ng having all updates to support/decode 6E
> don't know, it is another variable here.
>
> 802.11 radio information
>     PHY type: 802.11a (OFDM) (5)
>     Turbo type: Non-turbo (0)
>     Data rate: 6.0 Mb/s
>     Channel: 33
>     Frequency: 6115MHz
>     Signal strength (dBm): -47 dBm
>     TSF timestamp: 1826096995
>     [Duration: 312µs]
>         [Preamble: 20µs]
>         [IFS: 204488µs]
>         [Start: 1826096683µs]
>         [End: 1826096995µs]
>
>
> IEEE 802.11 Beacon frame, Flags: ........C
>     Type/Subtype: Beacon frame (0x0008)
>     Frame Control Field: 0x8000
>         .... ..00 = Version: 0
>         .... 00.. = Type: Management frame (0)
>         1000 .... = Subtype: 8
>         Flags: 0x00
>             .... ..00 = DS status: Not leaving DS or network is
> operating in AD-HOC mode (To DS: 0 From DS: 0) (0x0)
>             .... .0.. = More Fragments: This is the last fragment
>             .... 0... = Retry: Frame is not being retransmitted
>             ...0 .... = PWR MGT: STA will stay up
>             ..0. .... = More Data: No data buffered
>             .0.. .... = Protected flag: Data is not protected
>             0... .... = +HTC/Order flag: Not strictly ordered
>     .000 0000 0000 0000 = Duration: 0 microseconds
>     Receiver address: Broadcast (ff:ff:ff:ff:ff:ff)
>     Destination address: Broadcast (ff:ff:ff:ff:ff:ff)
>     Transmitter address: WallysCo_d0:00:7e (c4:4b:d1:d0:00:7e)
>     Source address: WallysCo_d0:00:7e (c4:4b:d1:d0:00:7e)
>     BSS Id: WallysCo_d0:00:7e (c4:4b:d1:d0:00:7e)
>     .... .... .... 0000 = Fragment number: 0
>     0100 0100 0101 .... = Sequence number: 1093
>     Frame check sequence: 0xcf64d100 [unverified]
>     [FCS Status: Unverified]
>
> IEEE 802.11 Wireless Management
>     Fixed parameters (12 bytes)
>         Timestamp: 4349132798
>         Beacon Interval: 0.204800 [Seconds]
>         Capabilities Information: 0x1011
>             .... .... .... ...1 = ESS capabilities: Transmitter is an AP
>             .... .... .... ..0. = IBSS status: Transmitter belongs to a BSS
>             .... ..0. .... 00.. = CFP participation capabilities: No
> point coordinator at AP (0x00)
>             .... .... ...1 .... = Privacy: AP/STA can support WEP
>             .... .... ..0. .... = Short Preamble: Not Allowed
>             .... .... .0.. .... = PBCC: Not Allowed
>             .... .... 0... .... = Channel Agility: Not in use
>             .... ...0 .... .... = Spectrum Management: Not Implemented
>             .... .0.. .... .... = Short Slot Time: Not in use
>             .... 0... .... .... = Automatic Power Save Delivery: Not Implemented
>             ...1 .... .... .... = Radio Measurement: Implemented
>             ..0. .... .... .... = DSSS-OFDM: Not Allowed
>             .0.. .... .... .... = Delayed Block Ack: Not Implemented
>             0... .... .... .... = Immediate Block Ack: Not Implemented
>     Tagged parameters (175 bytes)
>         Tag: SSID parameter set: dupa
>             Tag Number: SSID parameter set (0)
>             Tag length: 4
>             SSID: dupa
>         Tag: Supported Rates 6(B), 9, 12(B), 18, 24(B), 36, 48, 54, [Mbit/sec]
>             Tag Number: Supported Rates (1)
>             Tag length: 8
>             Supported Rates: 6(B) (0x8c)
>             Supported Rates: 9 (0x12)
>             Supported Rates: 12(B) (0x98)
>             Supported Rates: 18 (0x24)
>             Supported Rates: 24(B) (0xb0)
>             Supported Rates: 36 (0x48)
>             Supported Rates: 48 (0x60)
>             Supported Rates: 54 (0x6c)
>         Tag: DS Parameter set: Current Channel: 33
>             Tag Number: DS Parameter set (3)
>             Tag length: 1
>             Current Channel: 33
>         Tag: Traffic Indication Map (TIM): DTIM 1 of 2 bitmap
>             Tag Number: Traffic Indication Map (TIM) (5)
>             Tag length: 4
>             DTIM count: 1
>             DTIM period: 2
>             Bitmap control: 0x00
>                 .... ...0 = Multicast: False
>                 0000 000. = Bitmap Offset: 0x00
>             Partial Virtual Bitmap: 00
>         Tag: Country Information: Country Code BE, Environment 0x04
>             Tag Number: Country Information (7)
>             Tag length: 6
>             Code: BE
>             Environment: 4
>             Country Info: Operating Extension Identifier: 201,
> Operating Class: 134, Coverage Class: 0
>                 Operating Extension Identifier: 201
>                 Operating Class: 134
>                 Coverage Class: 0
>         Tag: RSN Information
>             Tag Number: RSN Information (48)
>             Tag length: 20
>             RSN Version: 1
>             Group Cipher Suite: 00:0f:ac (Ieee 802.11) AES (CCM)
>                 Group Cipher Suite OUI: 00:0f:ac (Ieee 802.11)
>                 Group Cipher Suite type: AES (CCM) (4)
>             Pairwise Cipher Suite Count: 1
>             Pairwise Cipher Suite List 00:0f:ac (Ieee 802.11) AES (CCM)
>                 Pairwise Cipher Suite: 00:0f:ac (Ieee 802.11) AES (CCM)
>                     Pairwise Cipher Suite OUI: 00:0f:ac (Ieee 802.11)
>                     Pairwise Cipher Suite type: AES (CCM) (4)
>             Auth Key Management (AKM) Suite Count: 1
>             Auth Key Management (AKM) List 00:0f:ac (Ieee 802.11) SAE (SHA256)
>                 Auth Key Management (AKM) Suite: 00:0f:ac (Ieee
> 802.11) SAE (SHA256)
>                     Auth Key Management (AKM) OUI: 00:0f:ac (Ieee 802.11)
>                     Auth Key Management (AKM) type: SAE (SHA256) (8)
>             RSN Capabilities: 0x00cc
>                 .... .... .... ...0 = RSN Pre-Auth capabilities:
> Transmitter does not support pre-authentication
>                 .... .... .... ..0. = RSN No Pairwise capabilities:
> Transmitter can support WEP default key 0 simultaneously with Pairwise
> key
>                 .... .... .... 11.. = RSN PTKSA Replay Counter
> capabilities: 16 replay counters per PTKSA/GTKSA/STAKeySA (0x3)
>                 .... .... ..00 .... = RSN GTKSA Replay Counter
> capabilities: 1 replay counter per PTKSA/GTKSA/STAKeySA (0x0)
>                 .... .... .1.. .... = Management Frame Protection Required: True
>                 .... .... 1... .... = Management Frame Protection Capable: True
>                 .... ...0 .... .... = Joint Multi-band RSNA: False
>                 .... ..0. .... .... = PeerKey Enabled: False
>                 ..0. .... .... .... = Extended Key ID for Individually
> Addressed Frames: Not supported
>         Tag: RM Enabled Capabilities (5 octets)
>             Tag Number: RM Enabled Capabilities (70)
>             Tag length: 5
>             RM Capabilities: 0x72 (octet 1)
>                 .... ...0 = Link Measurement: Disabled
>                 .... ..1. = Neighbor Report: Enabled
>                 .... .0.. = Parallel Measurements: Disabled
>                 .... 0... = Repeated Measurements: Disabled
>                 ...1 .... = Beacon Passive Measurement: Enabled
>                 ..1. .... = Beacon Active Measurement: Enabled
>                 .1.. .... = Beacon Table Measurement: Supported
>                 0... .... = Beacon Measurement Reporting Conditions: Disabled
>             RM Capabilities: 0x00 (octet 2)
>                 .... ...0 = Frame Measurement: Disabled
>                 .... ..0. = Channel Load Measurement: Disabled
>                 .... .0.. = Noise Histogram Measurement: Disabled
>                 .... 0... = Statistics Measurement: Disabled
>                 ...0 .... = LCI Measurement: Disabled
>                 ..0. .... = LCI Azimuth capability: Disabled
>                 .0.. .... = Transmit Stream/Category Measurement: Not supported
>                 0... .... = Triggered Transmit Stream/Category
> Measurement: Disabled
>             RM Capabilities: 0x00 (octet 3)
>                 .... ...0 = AP Channel Report capability: Disabled
>                 .... ..0. = RM MIB capability: Disabled
>                 ...0 00.. = Operating Channel Max Measurement Duration: 0
>                 000. .... = Nonoperating Channel Max Measurement Duration: 0
>             RM Capabilities: 0x00 (octet 4)
>                 .... .000 = Measurement Pilotcapability: 0
>                 .... 0... = Measurement Pilot Transmission Information: Disabled
>                 ...0 .... = Neighbor Report TSF Offset: Disabled
>                 ..0. .... = RCPI Measurement capability: Disabled
>                 .0.. .... = RSNI Measurement capability: Not supported
>                 0... .... = BSS Average Access Delay capability: Disabled
>             RM Capabilities: 0x00 (octet 5)
>                 .... ...0 = BSS Available Admission Capacity
> capability: Disabled
>                 .... ..0. = Antenna capability: Disabled
>                 .... .0.. = FTM Range Report Capability: Disabled
>                 .... 0... = Civic Location Measurement Capability: Disabled
>                 0000 .... = Reserved: 0x0
>         Tag: Supported Operating Classes
>             Tag Number: Supported Operating Classes (59)
>             Tag length: 2
>             Current Operating Class: 134
>         Tag: Extended Capabilities (10 octets)
>             Tag Number: Extended Capabilities (127)
>             Tag length: 10
>             Extended Capabilities: 0x04 (octet 1)
>                 .... ...0 = 20/40 BSS Coexistence Management Support:
> Not supported
>                 .... ..0. = Reserved (was On-demand beacon): 0x0
>                 .... .1.. = Extended Channel Switching: Supported
>                 .... 0... = Reserved (was WAVE indication): 0x0
>                 ...0 .... = PSMP Capability: Not supported
>                 ..0. .... = Reserved: 0x0
>                 .0.. .... = S-PSMP Support: Not supported
>                 0... .... = Event: Not supported
>             Extended Capabilities: 0x00 (octet 2)
>                 .... ...0 = Diagnostics: Not supported
>                 .... ..0. = Multicast Diagnostics: Not supported
>                 .... .0.. = Location Tracking: Not supported
>                 .... 0... = FMS: Not supported
>                 ...0 .... = Proxy ARP Service: Not supported
>                 ..0. .... = Collocated Interference Reporting: Not supported
>                 .0.. .... = Civic Location: Not supported
>                 0... .... = Geospatial Location: Not supported
>             Extended Capabilities: 0x00 (octet 3)
>                 .... ...0 = TFS: Not supported
>                 .... ..0. = WNM Sleep Mode: Not supported
>                 .... .0.. = TIM Broadcast: Not supported
>                 .... 0... = BSS Transition: Not supported
>                 ...0 .... = QoS Traffic Capability: Not supported
>                 ..0. .... = AC Station Count: Not supported
>                 .0.. .... = Multiple BSSID: Not supported
>                 0... .... = Timing Measurement: Not supported
>             Extended Capabilities: 0x00 (octet 4)
>                 .... ...0 = Channel Usage: Not supported
>                 .... ..0. = SSID List: Not supported
>                 .... .0.. = DMS: Not supported
>                 .... 0... = UTC TSF Offset: Not supported
>                 ...0 .... = TPU Buffer STA Support: Not supported
>                 ..0. .... = TDLS Peer PSM Support: Not supported
>                 .0.. .... = TDLS channel switching: Not supported
>                 0... .... = Interworking: Not supported
>             Extended Capabilities: 0x00 (octet 5)
>                 .... ...0 = QoS Map: Not supported
>                 .... ..0. = EBR: Not supported
>                 .... .0.. = SSPN Interface: Not supported
>                 .... 0... = Reserved: 0x0
>                 ...0 .... = MSGCF Capability: Not supported
>                 ..0. .... = TDLS Support: Not supported
>                 .0.. .... = TDLS Prohibited: Not supported
>                 0... .... = TDLS Channel Switching Prohibited: Not supported
>             Extended Capabilities: 0x00 (octet 6)
>                 .... ...0 = Reject Unadmitted Frame: Not supported
>                 .... 000. = Service Interval Granularity: 5 ms (0)
>                 ...0 .... = Identifier Location: Not supported
>                 ..0. .... = U-APSD Coexistence: Not supported
>                 .0.. .... = WNM Notification: Not supported
>                 0... .... = QAB Capability: 0x0
>             Extended Capabilities: 0x00 (octet 7)
>                 .... ...0 = UTF-8 SSID: Not supported
>                 .... ..0. = QMF Activated: False
>                 .... .0.. = QMF Reconfiguration Activated: False
>                 .... 0... = Robust AV Streaming: False
>                 ...0 .... = Advanced GCR: False
>                 ..0. .... = Mesh GCR: False
>                 .0.. .... = SCS: False
>                 0... .... = QLoad Report: False
>             Extended Capabilities: 0x0040 (octets 8 & 9)
>                 .... .... .... ...0 = Alternate EDCA: False
>                 .... .... .... ..0. = Unprotected TXOP Negotiation: False
>                 .... .... .... .0.. = Protected TXOP Negotiation: False
>                 .... .... .... 0... = Reserved: 0x0
>                 .... .... ...0 .... = Protected QLoad Report: False
>                 .... .... ..0. .... = TDLS Wider Bandwidth: Not supported
>                 .... .... .1.. .... = Operating Mode Notification: Supported
>                 .... ...0 0... .... = Max Number Of MSDUs In A-MSDU:
> No limit (0)
>                 .... ..0. .... .... = Channel Schedule Management: False
>                 .... .0.. .... .... = Geodatabase Inband Enabling Signal: False
>                 .... 0... .... .... = Network Channel Control: False
>                 ...0 .... .... .... = White Space Map: False
>                 ..0. .... .... .... = Channel Availability Query: False
>                 .0.. .... .... .... = Fine Timing Measurement Responder: False
>                 0... .... .... .... = Fine Timing Measurement Initiator: False
>             Extended Capabilities: 0x40 (octet 10)
>                 .... ...0 = FILS Capable: False
>                 .... ..0. = Extended Spectrum Management Capable: False
>                 .... .0.. = Future Channel Capable: False
>                 .... 0... = Reserved: 0x0
>                 ...0 .... = Reserved: 0x0
>                 ..0. .... = TWT Requester Support: False
>                 .1.. .... = TWT Responder Support: True
>                 0... .... = OBSS Narrow Bandwidth RU in UL OFDMA
> Tolerance Support: False
>         Tag: Tx Power Envelope
>             Tag Number: Tx Power Envelope (195)
>             Tag length: 2
>             Tx Pwr Info: 0x18
>                 .... .000 = Max Tx Pwr Count: 0
>                 ..01 1... = Max Tx Pwr Unit Interpretation: Unknown (3)
>                 00.. .... = Reserved: 0
>             Local Max Tx Pwr Constraint 20MHz: -1.0 dBm
>         Tag: Tx Power Envelope
>             Tag Number: Tx Power Envelope (195)
>             Tag length: 2
>             Tx Pwr Info: 0x58
>                 .... .000 = Max Tx Pwr Count: 0
>                 ..01 1... = Max Tx Pwr Unit Interpretation: Unknown (3)
>                 01.. .... = Reserved: 1
>             Local Max Tx Pwr Constraint 20MHz: 5.0 dBm
>         Tag: RSN eXtension (1 octet)
>             Tag Number: RSN eXtension (244)
>             Tag length: 1
>             RSNX: 0x20 (octet 1)
>                 .... 0000 = RSNX Length: 0
>                 ...0 .... = Protected TWT Operations Support: 0
>                 ..1. .... = SAE Hash to element: 1
>                 00.. .... = Reserved: 0x0
>         Ext Tag: HE Capabilities
>             Tag Number: Element ID Extension (255)
>             Ext Tag length: 38
>             Ext Tag Number: HE Capabilities (35)
>             HE MAC Capabilities Information: 0x10409a18000d
>                 .... .... .... .... .... .... .... .... .... .... ....
> ...1 = +HTC HE Support: Supported
>                 .... .... .... .... .... .... .... .... .... .... ....
> ..0. = TWT Requester Support: Not supported
>                 .... .... .... .... .... .... .... .... .... .... ....
> .1.. = TWT Responder Support: Supported
>                 .... .... .... .... .... .... .... .... .... .... ...0
> 1... = Dynamic Fragmentation Support: Level 1 dynamic fragmentation
> support (1)
>                 .... .... .... .... .... .... .... .... .... .... 000.
> .... = Maximum Number of Fragmented MSDUs: 1
>                 .... .... .... .... .... .... .... .... .... ..00 ....
> .... = Minimum Fragment Size: No restriction on minimum payload size
> (0)
>                 .... .... .... .... .... .... .... .... .... 00.. ....
> .... = Trigger Frame MAC Padding Duration: 0 (0)
>                 .... .... .... .... .... .... .... .... .000 .... ....
> .... = Multi-TID Aggregation Rx Support: 0
>                 .... .... .... .... .... .... .... ...0 0... .... ....
> .... = HE Link Adaptation Support: No feedback if the STA does not
> provide HE MFB (0)
>                 .... .... .... .... .... .... .... ..0. .... .... ....
> .... = All Ack Support: Not supported
>                 .... .... .... .... .... .... .... .0.. .... .... ....
> .... = TRS Support: Not supported
>                 .... .... .... .... .... .... .... 1... .... .... ....
> .... = BSR Support: Supported
>                 .... .... .... .... .... .... ...1 .... .... .... ....
> .... = Broadcast TWT Support: Supported
>                 .... .... .... .... .... .... ..0. .... .... .... ....
> .... = 32-bit BA Bitmap Support: Not supported
>                 .... .... .... .... .... .... .0.. .... .... .... ....
> .... = MU Cascading Support: Not supported
>                 .... .... .... .... .... .... 0... .... .... .... ....
> .... = Ack-Enabled Aggregation Support: Not supported
>                 .... .... .... .... .... ...0 .... .... .... .... ....
> .... = Reserved: 0x0
>                 .... .... .... .... .... ..1. .... .... .... .... ....
> .... = OM Control Support: Supported
>                 .... .... .... .... .... .0.. .... .... .... .... ....
> .... = OFDMA RA Support: Not supported
>                 .... .... .... .... ...1 1... .... .... .... .... ....
> .... = Maximum A-MPDU Length Exponent Extension: 3
>                 .... .... .... .... ..0. .... .... .... .... .... ....
> .... = A-MSDU Fragmentation Support: Not supported
>                 .... .... .... .... .0.. .... .... .... .... .... ....
> .... = Flexible TWT Schedule Support: Not supported
>                 .... .... .... .... 1... .... .... .... .... .... ....
> .... = Rx Control Frame to MultiBSS: Supported
>                 .... .... .... ...0 .... .... .... .... .... .... ....
> .... = BSRP BQRP A-MPDU Aggregation: Not supported
>                 .... .... .... ..0. .... .... .... .... .... .... ....
> .... = QTP Support: Not supported
>                 .... .... .... .0.. .... .... .... .... .... .... ....
> .... = BQR Support: Not supported
>                 .... .... .... 0... .... .... .... .... .... .... ....
> .... = PSR Responder: Not supported
>                 .... .... ...0 .... .... .... .... .... .... .... ....
> .... = NDP Feedback Report Support: Not supported
>                 .... .... ..0. .... .... .... .... .... .... .... ....
> .... = OPS Support: Not supported
>                 .... .... .1.. .... .... .... .... .... .... .... ....
> .... = A-MSDU Not Under BA in Ack-Enabled A-MPDU Support: Supported
>                 .... ..00 0... .... .... .... .... .... .... .... ....
> .... = Multi-TID Aggregation Tx Support: 0
>                 .... .0.. .... .... .... .... .... .... .... .... ....
> .... = HE Subchannel Selective Transmission Support: Not supported
>                 .... 0... .... .... .... .... .... .... .... .... ....
> .... = UL 2x996-tone RU Support: Not supported
>                 ...1 .... .... .... .... .... .... .... .... .... ....
> .... = OM Control UL MU Data Disable RX Support: Supported
>                 ..0. .... .... .... .... .... .... .... .... .... ....
> .... = HE Dynamic SM Power Save: Not supported
>                 .0.. .... .... .... .... .... .... .... .... .... ....
> .... = Punctured Sounding Support: Not supported
>                 0... .... .... .... .... .... .... .... .... .... ....
> .... = HT And VHT Trigger Frame RX Support: Not supported
>             HE PHY Capabilities Information
>                 .... ...0 = Reserved: 0x0
>                     .... ...0 = Reserved: 0x0
>                 0000 110. = Channel Width Set: 0x06
>                     .... ..0. = Reserved: 0x0
>                     .... .1.. = 40 & 80 MHz in the 5 GHz and 6 GHz
> bands: Supported
>                     .... 1... = 160 MHz in the 5 GHz and 6 GHz bands: Supported
>                     ...0 .... = 160/80+80 MHz in the 5 GHz and 6 GHz
> bands: Not supported
>                     ..0. .... = Reserved: 0x0
>                     .0.. .... = 242 tone RUs in the 5 GHz and 6 GHz
> bands: Not supported
>                     0... .... = Reserved: 0x0
>                 Bits 8 to 23: 0x4c60
>                     .... .... .... 0000 = Punctured Preamble Rx: 0x0
>                     .... .... ...0 .... = Device Class: Class B Device (0x0)
>                     .... .... ..1. .... = LDPC Coding In Payload: Supported
>                     .... .... .1.. .... = HE SU PPDU With 1x HE-LTF
> And 0.8us GI: Supported
>                     .... ...0 0... .... = Midamble Tx/Rx Max NSTS: 1
> Space-Time Stream (0x0)
>                     .... ..0. .... .... = NDP With 4x HE-LTF and 3.2us
> GI: Not supported
>                     .... .1.. .... .... = STBC Tx <= 80 MHz: Supported
>                     .... 1... .... .... = STBC Rx <= 80 MHz: Supported
>                     ...0 .... .... .... = Doppler Tx: Not supported
>                     ..0. .... .... .... = Doppler Rx: Not supported
>                     .1.. .... .... .... = Full Bandwidth UL MU-MIMO: Supported
>                     0... .... .... .... = Partial Bandwidth UL
> MU-MIMO: Not supported
>                 Bits 24 to 39: 0xfc08
>                     .... .... .... ..00 = DCM Max Constellation Tx:
> DCM is not supported (0x0)
>                     .... .... .... .0.. = DCM Max NSS Tx: 1 Spatial Stream (0x0)
>                     .... .... ...0 1... = DCM Max Constellation Rx: BPSK (0x1)
>                     .... .... ..0. .... = DCM Max NSS Rx: 1 Spatial Stream (0x0)
>                     .... .... .0.. .... = Rx Partial BW SU In 20 MHz
> HE MU PPDU: Not supported
>                     .... .... 0... .... = SU Beamformer: Not supported
>                     .... ...0 .... .... = SU Beamformee: Not supported
>                     .... ..0. .... .... = MU Beamformer: Not supported
>                     ...1 11.. .... .... = Beamformee STS <= 80 MHz: 0x7
>                     111. .... .... .... = Beamformee STS > 80 MHz: 0x7
>                 Bits 40 to 55: 0x83db
>                     .... .... .... .011 = Number Of Sounding
> Dimensions <= 80 MHz: 3
>                     .... .... ..01 1... = Number Of Sounding
> Dimensions > 80 MHz: 3
>                     .... .... .1.. .... = Ng = 16 SU Feedback: Supported
>                     .... .... 1... .... = Ng = 16 MU Feedback: Supported
>                     .... ...1 .... .... = Codebook Size SU Feedback: Supported
>                     .... ..1. .... .... = Codebook Size MU Feedback: Supported
>                     .... .0.. .... .... = Triggered SU Beamforming
> Feedback: Not supported
>                     .... 0... .... .... = Triggered MU Beamforming
> Feedback: Not supported
>                     ...0 .... .... .... = Triggered CQI Feedback: Not supported
>                     ..0. .... .... .... = Partial Bandwidth Extended
> Range: Not supported
>                     .0.. .... .... .... = Partial Bandwidth DL
> MU-MIMO: Not supported
>                     1... .... .... .... = PPE Thresholds Present: True
>                 Bits 56 to 71: 0x119c
>                     .... .... .... ...0 = PSR-based SR Support: Not supported
>                     .... .... .... ..0. = Power Boost Factor ar
> Support: Not supported
>                     .... .... .... .1.. = HE SU PPDU And HE MU PPDU
> With 4x HE-LTF And 0.8us GI: Supported
>                     .... .... ..01 1... = Max Nc: Supported
>                     .... .... .0.. .... = STBC Tx > 80 MHz: Not supported
>                     .... .... 1... .... = STBC Rx > 80 MHz: Supported
>                     .... ...1 .... .... = HE ER SU PPDU With 4x HE-LTF
> And 0.8us GI: Supported
>                     .... ..0. .... .... = 20 MHz In 40 MHz HE PPDU In
> 2.4 GHz Band: Not supported
>                     .... .0.. .... .... = 20 MHz In 160/80+80 MHz HE
> PPDU: Not supported
>                     .... 0... .... .... = 80 MHz In 160/80+80 MHz HE
> PPDU: Not supported
>                     ...1 .... .... .... = HE ER SU PPDU With 1x HE-LTF
> And 0.8us GI: Supported
>                     ..0. .... .... .... = Midamble Tx/Rx 2x And 1x
> HE-LTF: Not supported
>                     00.. .... .... .... = DCM Max RU: 242-tone RU (0x0)
>                 Bits 72 to 87: 0x000c
>                     .... .... .... ...0 = Longer Than 16 HE SIG-B OFDM
> Symbols Support: Not supported
>                     .... .... .... ..0. = Non-Triggered CQI Feedback:
> Not supported
>                     .... .... .... .1.. = Tx 1024-QAM Support <
> 242-tone RU Support: Supported
>                     .... .... .... 1... = Rx 1024-QAM Support <
> 242-tone RU Support: Supported
>                     .... .... ...0 .... = Rx Full BW SU Using HE MU
> PPDU With Compressed HE-SIG-B: Not supported
>                     .... .... ..0. .... = Rx Full BW SU Using HE MU
> PPDU With Non-Compressed HE-SIG-B: Not supported
>                     .... .... 00.. .... = Nominal Packet Padding: 0 µs
> for all constellations, Nss and RU allocations (0)
>                     .... ...0 .... .... = HE MU PPDU With More Than
> One RU Rx Max N_HE-LTF: 0
>                     0000 000. .... .... = Reserved: 0x00
>             Supported HE-MCS and NSS Set
>                 Rx and Tx MCS Maps <= 80 MHz
>                     Rx HE-MCS Map <= 80 MHz: 0xffaa
>                         .... .... .... ..10 = Max HE-MCS for 1 SS:
> Support for HE-MCS 0-11 (0x2)
>                         .... .... .... 10.. = Max HE-MCS for 2 SS:
> Support for HE-MCS 0-11 (0x2)
>                         .... .... ..10 .... = Max HE-MCS for 3 SS:
> Support for HE-MCS 0-11 (0x2)
>                         .... .... 10.. .... = Max HE-MCS for 4 SS:
> Support for HE-MCS 0-11 (0x2)
>                         .... ..11 .... .... = Max HE-MCS for 5 SS: Not
> supported for HE PPDUs (0x3)
>                         .... 11.. .... .... = Max HE-MCS for 6 SS: Not
> supported for HE PPDUs (0x3)
>                         ..11 .... .... .... = Max HE-MCS for 7 SS: Not
> supported for HE PPDUs (0x3)
>                         11.. .... .... .... = Max HE-MCS for 8 SS: Not
> supported for HE PPDUs (0x3)
>                     Tx HE-MCS Map <= 80 MHz: 0xffaa
>                         .... .... .... ..10 = Max HE-MCS for 1 SS:
> Support for HE-MCS 0-11 (0x2)
>                         .... .... .... 10.. = Max HE-MCS for 2 SS:
> Support for HE-MCS 0-11 (0x2)
>                         .... .... ..10 .... = Max HE-MCS for 3 SS:
> Support for HE-MCS 0-11 (0x2)
>                         .... .... 10.. .... = Max HE-MCS for 4 SS:
> Support for HE-MCS 0-11 (0x2)
>                         .... ..11 .... .... = Max HE-MCS for 5 SS: Not
> supported for HE PPDUs (0x3)
>                         .... 11.. .... .... = Max HE-MCS for 6 SS: Not
> supported for HE PPDUs (0x3)
>                         ..11 .... .... .... = Max HE-MCS for 7 SS: Not
> supported for HE PPDUs (0x3)
>                         11.. .... .... .... = Max HE-MCS for 8 SS: Not
> supported for HE PPDUs (0x3)
>                 Rx and Tx MCS Maps 160 MHz
>                     Rx HE-MCS Map 160 MHz: 0xffaa
>                         .... .... .... ..10 = Max HE-MCS for 1 SS:
> Support for HE-MCS 0-11 (0x2)
>                         .... .... .... 10.. = Max HE-MCS for 2 SS:
> Support for HE-MCS 0-11 (0x2)
>                         .... .... ..10 .... = Max HE-MCS for 3 SS:
> Support for HE-MCS 0-11 (0x2)
>                         .... .... 10.. .... = Max HE-MCS for 4 SS:
> Support for HE-MCS 0-11 (0x2)
>                         .... ..11 .... .... = Max HE-MCS for 5 SS: Not
> supported for HE PPDUs (0x3)
>                         .... 11.. .... .... = Max HE-MCS for 6 SS: Not
> supported for HE PPDUs (0x3)
>                         ..11 .... .... .... = Max HE-MCS for 7 SS: Not
> supported for HE PPDUs (0x3)
>                         11.. .... .... .... = Max HE-MCS for 8 SS: Not
> supported for HE PPDUs (0x3)
>                     Tx HE-MCS Map 160 MHz: 0xffaa
>                         .... .... .... ..10 = Max HE-MCS for 1 SS:
> Support for HE-MCS 0-11 (0x2)
>                         .... .... .... 10.. = Max HE-MCS for 2 SS:
> Support for HE-MCS 0-11 (0x2)
>                         .... .... ..10 .... = Max HE-MCS for 3 SS:
> Support for HE-MCS 0-11 (0x2)
>                         .... .... 10.. .... = Max HE-MCS for 4 SS:
> Support for HE-MCS 0-11 (0x2)
>                         .... ..11 .... .... = Max HE-MCS for 5 SS: Not
> supported for HE PPDUs (0x3)
>                         .... 11.. .... .... = Max HE-MCS for 6 SS: Not
> supported for HE PPDUs (0x3)
>                         ..11 .... .... .... = Max HE-MCS for 7 SS: Not
> supported for HE PPDUs (0x3)
>                         11.. .... .... .... = Max HE-MCS for 8 SS: Not
> supported for HE PPDUs (0x3)
>             PPE Thresholds
>                 .... .011 = NSS: 3
>                 .111 1... = RU Index Bitmask: 0xf
>                 NSS 0
>                     RU allocation: 242
>                         PPET16: BPSK (0x00)
>                         PPET8: None (0x07)
>                     RU allocation: 484
>                         PPET16: BPSK (0x00)
>                         PPET8: None (0x07)
>                     RU allocation: 996
>                         PPET16: BPSK (0x00)
>                         PPET8: None (0x07)
>                     RU allocation: 2x996
>                         PPET16: BPSK (0x00)
>                         PPET8: None (0x07)
>                 NSS 1
>                     RU allocation: 242
>                         PPET16: BPSK (0x00)
>                         PPET8: None (0x07)
>                     RU allocation: 484
>                         PPET16: BPSK (0x00)
>                         PPET8: None (0x07)
>                     RU allocation: 996
>                         PPET16: BPSK (0x00)
>                         PPET8: None (0x07)
>                     RU allocation: 2x996
>                         PPET16: BPSK (0x00)
>                         PPET8: None (0x07)
>                 NSS 2
>                     RU allocation: 242
>                         PPET16: BPSK (0x00)
>                         PPET8: None (0x07)
>                     RU allocation: 484
>                         PPET16: BPSK (0x00)
>                         PPET8: None (0x07)
>                     RU allocation: 996
>                         PPET16: BPSK (0x00)
>                         PPET8: None (0x07)
>                     RU allocation: 2x996
>                         PPET16: BPSK (0x00)
>                         PPET8: None (0x07)
>                 NSS 3
>                     RU allocation: 242
>                         PPET16: BPSK (0x00)
>                         PPET8: None (0x07)
>                     RU allocation: 484
>                         PPET16: BPSK (0x00)
>                         PPET8: None (0x07)
>                     RU allocation: 996
>                         PPET16: BPSK (0x00)
>                         PPET8: None (0x07)
>                     RU allocation: 2x996
>                         PPET16: BPSK (0x00)
>                         PPET8: None (0x07)
>         Ext Tag: HE Operation
>             Tag Number: Element ID Extension (255)
>             Ext Tag length: 11
>             Ext Tag Number: HE Operation (36)
>             HE Operation Parameters: 0x023ff0
>                 .... .... .... .... .... .000 = Default PE Duration: 0
>                 .... .... .... .... .... 0... = TWT Required: Not required
>                 .... .... ..11 1111 1111 .... = TXOP Duration RTS
> Threshold: 1023
>                 .... .... .0.. .... .... .... = VHT Operation
> Information Present: False
>                 .... .... 0... .... .... .... = Co-Hosted BSS: False
>                 .... ...0 .... .... .... .... = ER SU Disable: False
>                 .... ..1. .... .... .... .... = 6 GHz Operation
> Information Present: True
>                 0000 00.. .... .... .... .... = Reserved: 0x00
>             BSS Color Information: 0x92
>                 ..01 0010 = BSS Color: 0x12
>                 .0.. .... = Partial BSS Color: False
>                 1... .... = BSS Color Disabled: True
>             Basic HE-MCS and NSS Set: 0xfffc
>                 .... .... .... ..00 = Max HE-MCS for 1 SS: Support for
> HE-MCS 0-7 (0)
>                 .... .... .... 11.. = Max HE-MCS for 2 SS: Not
> supported for HE PPDUs (3)
>                 .... .... ..11 .... = Max HE-MCS for 3 SS: Not
> supported for HE PPDUs (3)
>                 .... .... 11.. .... = Max HE-MCS for 4 SS: Not
> supported for HE PPDUs (3)
>                 .... ..11 .... .... = Max HE-MCS for 5 SS: Not
> supported for HE PPDUs (3)
>                 .... 11.. .... .... = Max HE-MCS for 6 SS: Not
> supported for HE PPDUs (3)
>                 ..11 .... .... .... = Max HE-MCS for 7 SS: Not
> supported for HE PPDUs (3)
>                 11.. .... .... .... = Max HE-MCS for 8 SS: Not
> supported for HE PPDUs (3)
>             6 GHz Operation Information
>                 Primary Channel: 33
>                 Control: 0x03
>                     .... ..11 = Channel Width: 160MHz or 80MHz+80MHz (3)
>                     .... .0.. = Duplicate Beacon: False
>                     ..00 0... = Regulatory Info: 0
>                     00.. .... = Reserved: 0
>                 Channel Center Frequency Segment 0: 39
>                 Channel Center Frequency Segment 1: 47
>                 Minimum Rate: 6
>         Ext Tag: HE 6 GHz Band Capabilities
>             Tag Number: Element ID Extension (255)
>             Ext Tag length: 2
>             Ext Tag Number: HE 6 GHz Band Capabilities (59)
>             Capabilities Information: 0x36b8
>                 .... .... .... .000 = Minimum MPDU Start Spacing: No
> restriction (0x0)
>                 .... .... ..11 1... = Maximum A-MPDU Length Exponent:
> 1 048 575 (0x7)
>                 .... .... 10.. .... = Maximum MPDU Length: 11 454 (0x2)
>                 .... ...0 .... .... = Reserved: 0x0
>                 .... .11. .... .... = SM Power Save: SM Power Save
> disabled (0x3)
>                 .... 0... .... .... = RD Responder: Not supported
>                 ...1 .... .... .... = Rx Antenna Pattern Consistency: Supported
>                 ..1. .... .... .... = Tx Antenna Pattern Consistency: Supported
>                 00.. .... .... .... = Reserved: 0x0
>         Tag: Vendor Specific: Microsoft Corp.: WMM/WME: Parameter Element
>             Tag Number: Vendor Specific (221)
>             Tag length: 24
>             OUI: 00:50:f2 (Microsoft Corp.)
>             Vendor Specific OUI Type: 2
>             Type: WMM/WME (0x02)
>             WME Subtype: Parameter Element (1)
>             WME Version: 1
>             WME QoS Info: 0x01
>                 0... .... = U-APSD: Disabled
>                 .... 0001 = Parameter Set Count: 0x1
>                 .000 .... = Reserved: 0x0
>             Reserved: 00
>             Ac Parameters ACI 0 (Best Effort), ACM no, AIFSN 3,
> ECWmin/max 4/10 (CWmin/max 15/1023), TXOP 0
>                 ACI / AIFSN Field: 0x03
>                     .... 0011 = AIFSN: 3
>                     ...0 .... = Admission Control Mandatory: No
>                     .00. .... = ACI: Best Effort (0)
>                     0... .... = Reserved: 0
>                 ECW: 0xa4
>                     1010 .... = ECW Max: 10
>                     .... 0100 = ECW Min: 4
>                     CW Max: 1023
>                     CW Min: 15
>                 TXOP Limit: 0
>             Ac Parameters ACI 1 (Background), ACM no, AIFSN 7,
> ECWmin/max 4/10 (CWmin/max 15/1023), TXOP 0
>                 ACI / AIFSN Field: 0x27
>                     .... 0111 = AIFSN: 7
>                     ...0 .... = Admission Control Mandatory: No
>                     .01. .... = ACI: Background (1)
>                     0... .... = Reserved: 0
>                 ECW: 0xa4
>                     1010 .... = ECW Max: 10
>                     .... 0100 = ECW Min: 4
>                     CW Max: 1023
>                     CW Min: 15
>                 TXOP Limit: 0
>             Ac Parameters ACI 2 (Video), ACM no, AIFSN 2, ECWmin/max
> 3/4 (CWmin/max 7/15), TXOP 94
>                 ACI / AIFSN Field: 0x42
>                     .... 0010 = AIFSN: 2
>                     ...0 .... = Admission Control Mandatory: No
>                     .10. .... = ACI: Video (2)
>                     0... .... = Reserved: 0
>                 ECW: 0x43
>                     0100 .... = ECW Max: 4
>                     .... 0011 = ECW Min: 3
>                     CW Max: 15
>                     CW Min: 7
>                 TXOP Limit: 94
>             Ac Parameters ACI 3 (Voice), ACM no, AIFSN 2, ECWmin/max
> 2/3 (CWmin/max 3/7), TXOP 47
>                 ACI / AIFSN Field: 0x62
>                     .... 0010 = AIFSN: 2
>                     ...0 .... = Admission Control Mandatory: No
>                     .11. .... = ACI: Voice (3)
>                     0... .... = Reserved: 0
>                 ECW: 0x32
>                     0011 .... = ECW Max: 3
>                     .... 0010 = ECW Min: 2
>                     CW Max: 7
>                     CW Min: 3
>
>
> If I can check anyhing in between pls. let me know.
> OpenWRT is known to have some tuning for these things but ath11k was
> not included by default hence also QCN9074. So I am now also working
> with 5.15 master, compiled custom OpenWRT with enabled ath11k and
> included *.bin firmware into OpenWRT. Resolved MSI issues to VT-D but
> so far this is still work in progress as the card does not error out
> but never responds to power on command. MHI keeps waiting for power
> on. This is however secondary topic I started looking into due lack of
> progress on a regular distro. Tried also latest 6.1 rc4 kernel on
> ubuntu with no change.
>
> Regards,
> Mariusz
>
>
> On Mon, 14 Nov 2022 at 14:19, Nagarajan Maran (QUIC)
> <quic_nmaran at quicinc.com> wrote:
> >
> > Hi Mariusz,
> >
> >
> >
> > We checked the upstream driver code and firmware bins similar to your setup environment and it seems to work well.
> >
> > Could you kindly check whether your Wi-Fi card has been OTP fused for 6Ghz?
> >
> >
> >
> > -Thanks
> >
> > Nagarajan M.
> >
> >
> >
> > From: Mariusz <enebeo at gmail.com>
> > Sent: Tuesday, November 8, 2022 8:25 PM
> > To: Nagarajan Maran (QUIC) <quic_nmaran at quicinc.com>
> > Cc: ath11k at lists.infradead.org
> > Subject: Re: Wallys DR9074-6E(PN02.7) QCN9074 refuses to work on 6GHz band
> >
> >
> >
> > Perhaps also something interesting, I apply reg domain of Belgium/BE. It has lower 6GHz channels allowed.
> >
> >
> >
> > iw reg get
> > global
> > country BE: DFS-ETSI
> >         (2400 - 2483 @ 40), (N/A, 20), (N/A)
> >         (5150 - 5250 @ 80), (N/A, 23), (N/A), NO-OUTDOOR, AUTO-BW
> >         (5250 - 5350 @ 80), (N/A, 20), (0 ms), NO-OUTDOOR, DFS, AUTO-BW
> >         (5470 - 5725 @ 160), (N/A, 26), (0 ms), DFS
> >         (5725 - 5875 @ 80), (N/A, 13), (N/A)
> >         (5945 - 6425 @ 160), (N/A, 23), (N/A), NO-OUTDOOR
> >         (57000 - 66000 @ 2160), (N/A, 40), (N/A)
> >
> > phy#3 (self-managed)
> > country US: DFS-FCC
> >         (2402 - 2472 @ 40), (6, 30), (N/A)
> >         (5170 - 5250 @ 80), (N/A, 30), (N/A), AUTO-BW
> >         (5250 - 5330 @ 80), (N/A, 24), (0 ms), DFS, AUTO-BW
> >         (5490 - 5730 @ 160), (N/A, 24), (0 ms), DFS, AUTO-BW
> >         (5735 - 5895 @ 160), (N/A, 30), (N/A), AUTO-BW
> >         (5945 - 7125 @ 160), (N/A, 30), (N/A), NO-OUTDOOR, AUTO-BW
> >
> >
> >
> > When I start hostapd with acs_survey or channel=0 it starts but pretends to work, no other client can connect to this ssid.
> >
> >
> >
> > When I disable acs in hostapd.conf and set channel=1  (freq 5955 in 6GHz range) so allowed per reg domain it refuses to start:
> >
> >
> >
> > Mode: IEEE 802.11a  Channel: 1  Frequency: 5955 MHz
> > nl80211: Set freq 5955 (ht_enabled=0, vht_enabled=0, he_enabled=1, eht_enabled=0, bandwidth=160 MHz, cf1=5955 MHz, cf2=0 MHz)
> >   * freq=5955
> >   * eht_enabled=0
> >   * he_enabled=1
> >   * vht_enabled=0
> >   * ht_enabled=0
> >   * radar_background=0
> >   * bandwidth=160
> >   * channel_width=5
> >   * center_freq1=5955
> >   * center_freq2=0
> > nl80211: kernel reports: invalid channel definition
> > nl80211: Failed to set channel (freq=5955): -22 (Invalid argument)
> >
> >
> >
> > reg domain BE is more restrictive than US so channel 1 should be enabled in both cases
> >
> > Previous country code BE, new country code BE
> > nl80211: Regulatory information - country=US (DFS-FCC)
> > nl80211: 2402-2472 @ 40 MHz 30 mBm
> > nl80211: 5170-5250 @ 80 MHz 30 mBm
> > nl80211: 5250-5330 @ 80 MHz 24 mBm (DFS)
> > nl80211: 5490-5730 @ 160 MHz 24 mBm (DFS)
> > nl80211: 5735-5895 @ 160 MHz 30 mBm
> > nl80211: 5945-7125 @ 160 MHz 30 mBm (no outdoor)
> > nl80211: Mode IEEE 802.11a: 5955 5975 5995 6015 6035 6055 6075 6095 6115 6135 6155 6175 6195 6215 6235 6255 6275 6295 6315 6335 6355 6375 6395 6415 6435 6455 6475 6495 6515 6535 6555 6575 6595 6615 6635 6655 6675 6695 6715 6735 6755 6775 6795 6815 6835 6855 6875 6895 6915 6935 6955 6975 6995 7015 7035 7055 7075 7095 7115 5935[DISABLED]
> >
> >
> >
> > for op_class=134 = 160MHz valid channels are 1-29, 33-61, 65-93, 97-125, 129-157, 161-189, 193-221
> >
> >
> >
> >
> >
> > phy: phy3
> > BSS count 1, BSSID mask 00:00:00:00:00:00 (0 bits)
> > wlp1s0: interface state UNINITIALIZED->COUNTRY_UPDATE
> > Previous country code BE, new country code BE
> > nl80211: Regulatory information - country=US (DFS-FCC)
> > nl80211: 2402-2472 @ 40 MHz 30 mBm
> > nl80211: 5170-5250 @ 80 MHz 30 mBm
> > nl80211: 5250-5330 @ 80 MHz 24 mBm (DFS)
> > nl80211: 5490-5730 @ 160 MHz 24 mBm (DFS)
> > nl80211: 5735-5895 @ 160 MHz 30 mBm
> > nl80211: 5945-7125 @ 160 MHz 30 mBm (no outdoor)
> > nl80211: Mode IEEE 802.11a: 5955 5975 5995 6015 6035 6055 6075 6095 6115 6135 6155 6175 6195 6215 6235 6255 6275 6295 6315 6335 6355 6375 6395 6415 6435 6455 6475 6495 6515 6535 6555 6575 6595 6615 6635 6655 6675 6695 6715 6735 6755 6775 6795 6815 6835 6855 6875 6895 6915 6935 6955 6975 6995 7015 7035 7055 7075 7095 7115 5935[DISABLED]
> > Completing interface initialization
> > Mode: IEEE 802.11a  Channel: 33  Frequency: 6115 MHz
> > nl80211: Set freq 6115 (ht_enabled=0, vht_enabled=0, he_enabled=1, eht_enabled=0, bandwidth=160 MHz, cf1=6115 MHz, cf2=0 MHz)
> >   * freq=6115
> >   * eht_enabled=0
> >   * he_enabled=1
> >   * vht_enabled=0
> >   * ht_enabled=0
> >   * radar_background=0
> >   * bandwidth=160
> >   * channel_width=5
> >   * center_freq1=6115
> >   * center_freq2=0
> > nl80211: kernel reports: invalid channel definition
> > nl80211: Failed to set channel (freq=6115): -22 (Invalid argument)
> > Could not set channel for kernel driver
> > Interface initialization failed
> >
> >
> >
> >
> >
> >
> >
> > How is this invalid channel?
> >
> >
> >
> > root at s4:/home/angel/hostap/hostapd# iw phy3 channels
> > Band 4:
> >         * 5955 MHz [1]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 5975 MHz [5]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 5995 MHz [9]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6015 MHz [13]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6035 MHz [17]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6055 MHz [21]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6075 MHz [25]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6095 MHz [29]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6115 MHz [33]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6135 MHz [37]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6155 MHz [41]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6175 MHz [45]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6195 MHz [49]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6215 MHz [53]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6235 MHz [57]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6255 MHz [61]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6275 MHz [65]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6295 MHz [69]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6315 MHz [73]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6335 MHz [77]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6355 MHz [81]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6375 MHz [85]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6395 MHz [89]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6415 MHz [93]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6435 MHz [97]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6455 MHz [101]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6475 MHz [105]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6495 MHz [109]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6515 MHz [113]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6535 MHz [117]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6555 MHz [121]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6575 MHz [125]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6595 MHz [129]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6615 MHz [133]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6635 MHz [137]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6655 MHz [141]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6675 MHz [145]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6695 MHz [149]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6715 MHz [153]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6735 MHz [157]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6755 MHz [161]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6775 MHz [165]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6795 MHz [169]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6815 MHz [173]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6835 MHz [177]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6855 MHz [181]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6875 MHz [185]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6895 MHz [189]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6915 MHz [193]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6935 MHz [197]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6955 MHz [201]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6975 MHz [205]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 6995 MHz [209]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 7015 MHz [213]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 7035 MHz [217]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 7055 MHz [221]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 7075 MHz [225]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 7095 MHz [229]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 7115 MHz [233]
> >           Maximum TX power: 30.0 dBm
> >           Channel widths: 20MHz
> >         * 5935 MHz [2] (disabled)
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > On Mon, 7 Nov 2022 at 17:07, Nagarajan Maran (QUIC) <quic_nmaran at quicinc.com> wrote:
> >
> > Hi Mariusz,
> >
> > We are looking into this issue. It seems that this error can occur when the given frequency is not present or when the given frequency is disabled.
> > To further analyze the issue, could you kindly let us know the output of the below commands during failure case.
> >      1) iw dev
> >      2) iw phyX channels
> >
> > Also, could you kindly send the WiFi driver boot up logs with "debug_mask=0x212" enabled during insmod of ath11k.ko module.
> >
> > Thanks,
> > Nagarajan M.
> >
> > -----Original Message-----
> >
> > From: Mariusz <enebeo at gmail.com>
> > To: ath11k at lists.infradead.org
> > Subject: Wallys DR9074-6E(PN02.7) QCN9074 refuses to work on 6GHz band
> > Message-ID:
> >         <CAJrE-q6NVEF4sNW1s4Zz7Pb2ryzCi69e+_vLQswBWm747DHYDw at mail.gmail.com>
> > Content-Type: text/plain; charset="UTF-8"
> >
> > Hi,
> >
> > As support for QCN9074 got better I went ahead and built a 6E linux based AP. Dell R720 server x86 running Linux s4 5.19.0-23-generic #24-Ubuntu SMP PREEMPT_DYNAMIC Fri Oct 14 15:39:57 UTC 2022 x86_64
> > x86_64 x86_64 GNU/Linux.
> >
> > My issue is that I cannot get it working on 6GHz bands but it works fine on 5GHz. I bought 6E version  and since this is a single band module it cannot be both 5G & 6G and linux driver does not agree with it being 6E version:
> >
> > [71914.038562] ath11k_pci 0000:03:00.0: BAR 0: assigned [mem 0xdf800000-0xdf9fffff 64bit] [71914.038840] ath11k_pci 0000:03:00.0: MSI vectors: 16 [71914.038852] ath11k_pci 0000:03:00.0: qcn9074 hw1.0 [71914.194459] mhi mhi0: Requested to power ON [71914.194712] mhi mhi0: Power on setup success [71914.297749] mhi mhi0: Wait for device to enter SBL or Mission mode [71914.647118] ath11k_pci 0000:03:00.0: chip_id 0x0 chip_family 0x0 board_id 0xff soc_id 0xffffffff [71914.647134] ath11k_pci 0000:03:00.0: fw_version 0x250a04b8 fw_build_timestamp 2021-12-20 06:41 fw_build_id [71916.310787] ath11k_pci 0000:03:00.0 wlp3s0: renamed from wlan0
> >
> > HE PHY Capabilities: (0x1c604c88ffdb839c110c00):
> >                                 HE40/HE80/5GHz
> >                                 HE160/5GHz
> >                                 HE160/HE80+80/5GHz
> >
> > iw dev wlp3s0 set freq 6195 160MHz
> > kernel reports: Channel is disabled
> > command failed: Invalid argument (-22)
> >
> > I am using the latest firmware files from ath11k tree. Is there any special firmware to force this to 6GHz? I read somewhere board_id determines which one it is and 255 disables 6GHz but I miss more data on that.
> >
> > phy#2 (self-managed)
> > country US: DFS-FCC
> >         (2402 - 2472 @ 40), (6, 30), (N/A)
> >         (5170 - 5250 @ 80), (N/A, 30), (N/A), AUTO-BW
> >         (5250 - 5330 @ 80), (N/A, 24), (0 ms), DFS, AUTO-BW
> >         (5490 - 5730 @ 160), (N/A, 24), (0 ms), DFS, AUTO-BW
> >         (5735 - 5895 @ 160), (N/A, 30), (N/A), AUTO-BW
> >         (5945 - 7125 @ 160), (N/A, 30), (N/A), NO-OUTDOOR, AUTO-BW
> >
> > It works fine in 5GHz but this is not what I purchased it for, so I am puzzled if this is something in software or I was sold wrong hardware.Is there a specific board-2.bin for 6GHz? Since the 9074 chip is the same in all versions perhaps this is a software hiccup.
> >
> > Any clues are welcome.
> >
> > Regards,
> > Mario



More information about the ath11k mailing list