wifi: ath12k: Attempting MLO with main (6.15.rc7) for NCM865 / WCN7850 in station mode leads to crash/backtrace

Benjamin Eggerstedt benjamin.eggerstedt at gmail.com
Sun Jun 1 12:52:09 PDT 2025


Hi,

I have the following update for you:

a)
- The vanilla v6.15 kernel works with the patch provided by Doug Brewer here: https://0x0.st/s/yfQHTDVDbzo7M5b6dHswjg/83Xm.15 via https://lore.kernel.org/ath12k/CAG0V13QTtGLvqELd90WzV1FF0jgSmA92nkrYR6KL=L1w3mAEYQ@mail.gmail.com/T/#mcc446a505a73a095197bfe8984cde9b875f016ec 
- The vanilla v6.15 kernel gets a MLO connection but lost the ability to see 6 GHz, so MLO is limited to band 2.4 + 5 GHz
- The vanilla v6.15 kernel suffers the same PCI errors as the ath-kernel (but it doesn’t lock-up/freeze, when connecting to the wireless)

Jun 01 20:48:14 debian kernel: ath12k_pci 0000:03:00.0: BAR 0 [mem 0xf7000000-0xf71fffff 64bit]: assigned
Jun 01 20:48:14 debian kernel: ath12k_pci 0000:03:00.0: enabling device (0000 -> 0002)
Jun 01 20:48:14 debian kernel: ath12k_pci 0000:03:00.0: MSI vectors: 16
Jun 01 20:48:14 debian kernel: ath12k_pci 0000:03:00.0: Hardware name: wcn7850 hw2.0
Jun 01 20:48:14 debian kernel: NET: Registered PF_QIPCRTR protocol family
Jun 01 20:48:14 debian kernel: pcieport 0000:00:1b.4: AER: Multiple Uncorrectable (Non-Fatal) error message received from 0000:00:1b.4
Jun 01 20:48:14 debian kernel: pcieport 0000:00:1b.4: PCIe Bus Error: severity=Uncorrectable (Non-Fatal), type=Transaction Layer, (Completer ID)
Jun 01 20:48:14 debian kernel: pcieport 0000:00:1b.4:   device [8086:a2eb] error status/mask=00008000/00010000
Jun 01 20:48:14 debian kernel: pcieport 0000:00:1b.4:    [15] CmpltAbrt              (First)
Jun 01 20:48:14 debian kernel: pcieport 0000:00:1b.4: AER:   TLP Header: 0x00000000 0x00000000 0x00000000 0x00000000
Jun 01 20:48:14 debian kernel: mhi mhi0: Requested to power ON
Jun 01 20:48:14 debian kernel: mhi mhi0: Power on setup success
Jun 01 20:48:14 debian kernel: mhi mhi0: Wait for device to enter SBL or Mission mode
...
Jun 01 20:48:14 debian kernel: ath12k_pci 0000:03:00.0: AER: can't recover (no error_detected callback)
Jun 01 20:48:14 debian kernel: pcieport 0000:00:1b.4: AER: device recovery failed
Jun 01 20:48:14 debian kernel: ath12k_pci 0000:03:00.0: qmi dma allocation failed (7012352 B type 1), will try later with small size
Jun 01 20:48:14 debian kernel: ath12k_pci 0000:03:00.0: chip_id 0x2 chip_family 0x4 board_id 0xff soc_id 0x40170200
Jun 01 20:48:14 debian kernel: ath12k_pci 0000:03:00.0: fw_version 0x1108811c fw_build_timestamp 2025-05-17 00:21 fw_build_id QC_IMAGE_VERSION_STRING=WLAN.HMT.1.1.c5-00284.1-QCAHMTS>
Jun 01 20:48:14 debian kernel: r8169 0000:06:00.0: Unable to load firmware rtl_nic/rtl8168h-2.fw (-2)
Jun 01 20:48:15 debian kernel: Generic FE-GE Realtek PHY r8169-0-600:00: attached PHY driver (mii_bus:phy_addr=r8169-0-600:00, irq=MAC)
Jun 01 20:48:15 debian kernel: r8169 0000:06:00.0 enp6s0: Link is Down
Jun 01 20:48:15 debian kernel: ath12k_pci 0000:03:00.0 wlp3s0: renamed from wlan0
...
Jun 01 20:52:18 debian kernel: wlp3s0: authenticate with 88:3c:93:01:ce:40 (local address=f6:05:44:0b:76:f7)
Jun 01 20:52:18 debian kernel: wlp3s0: send auth to 88:3c:93:01:ce:40 (try 1/3)
Jun 01 20:52:18 debian kernel: wlp3s0: authenticate with 88:3c:93:01:ce:40 (local address=f6:05:44:0b:76:f7)
Jun 01 20:52:18 debian kernel: wlp3s0: send auth to 88:3c:93:01:ce:40 (try 1/3)
Jun 01 20:52:18 debian kernel: wlp3s0: authenticated
Jun 01 20:52:18 debian kernel: wlp3s0: associate with 88:3c:93:01:ce:40 (try 1/3)
Jun 01 20:52:18 debian kernel: wlp3s0: RX AssocResp from 88:3c:93:01:ce:40 (capab=0x511 status=0 aid=4)
Jun 01 20:52:18 debian kernel: wlp3s0: [link 0] local address ea:30:57:8e:3e:0e, AP link address 88:3c:93:01:ce:40
Jun 01 20:52:18 debian kernel: wlp3s0: [link 1] local address f6:05:44:0b:76:f7, AP link address 88:3c:93:01:ce:50 (assoc)
Jun 01 20:52:18 debian kernel: wlp3s0: associated
Jun 01 20:52:18 debian kernel: wlp3s0: Limiting TX power to 30 (30 - 0) dBm as advertised by 88:3c:93:01:ce:50
Jun 01 20:53:41 debian kernel: wlp3s0: deauthenticating from 88:3c:93:01:ce:40 by local choice (Reason: 3=DEAUTH_LEAVING)
Jun 01 20:56:06 debian kernel: wlp3s0: authenticate with 88:3c:93:01:ce:40 (local address=4e:48:ef:30:ed:17)
Jun 01 20:56:06 debian kernel: wlp3s0: send auth to 88:3c:93:01:ce:40 (try 1/3)
Jun 01 20:56:06 debian kernel: wlp3s0: authenticate with 88:3c:93:01:ce:40 (local address=4e:48:ef:30:ed:17)
Jun 01 20:56:06 debian kernel: wlp3s0: send auth to 88:3c:93:01:ce:40 (try 1/3)
Jun 01 20:56:06 debian kernel: wlp3s0: authenticated
Jun 01 20:56:06 debian kernel: wlp3s0: associate with 88:3c:93:01:ce:40 (try 1/3)
Jun 01 20:56:06 debian kernel: wlp3s0: RX AssocResp from 88:3c:93:01:ce:40 (capab=0x511 status=0 aid=4)
Jun 01 20:56:06 debian kernel: wlp3s0: [link 0] local address ca:a7:b2:c3:ce:ee, AP link address 88:3c:93:01:ce:40
Jun 01 20:56:06 debian kernel: wlp3s0: [link 1] local address 4e:48:ef:30:ed:17, AP link address 88:3c:93:01:ce:50 (assoc)
Jun 01 20:56:06 debian kernel: wlp3s0: associated
Jun 01 20:56:06 debian kernel: wlp3s0: Limiting TX power to 30 (30 - 0) dBm as advertised by 88:3c:93:01:ce:50
Jun 01 21:23:43 debian kernel: wlp3s0: deauthenticating from 88:3c:93:01:ce:40 by local choice (Reason: 3=DEAUTH_LEAVING)
Jun 01 21:23:43 debian kernel: ath12k_pci 0000:03:00.0: failed to send HAL_REO_CMD_FLUSH_CACHE, tid 14 (-105)
Jun 01 21:23:43 debian kernel: ath12k_pci 0000:03:00.0: failed to send HAL_REO_CMD_FLUSH_CACHE cmd, tid 16 (-105)

$ lspci -tv
-[0000:00]-+-00.0  Intel Corporation 8th Gen Core 4-core Desktop Processor Host Bridge/DRAM Registers [Coffee Lake S]
           +-02.0  Intel Corporation CoffeeLake-S GT2 [UHD Graphics 630]
           +-08.0  Intel Corporation Xeon E3-1200 v5/v6 / E3-1500 v5 / 6th/7th/8th Gen Core Processor Gaussian Mixture Model
           +-14.0  Intel Corporation 200 Series/Z370 Chipset Family USB 3.0 xHCI Controller
           +-16.0  Intel Corporation 200 Series PCH CSME HECI #1
           +-17.0  Intel Corporation 200 Series PCH SATA controller [AHCI mode]
           +-1b.0-[01]--
           +-1b.3-[02]--
           +-1b.4-[03]----00.0  Qualcomm Technologies, Inc WCN785x Wi-Fi 7(802.11be) 320MHz 2x2 [FastConnect 7800]
           +-1c.0-[04]--
           +-1c.3-[05]--
           +-1c.4-[06]----00.0  Realtek Semiconductor Co., Ltd. RTL8111/8168/8211/8411 PCI Express Gigabit Ethernet Controller
           +-1c.5-[07]--
           +-1c.6-[08]--
           +-1c.7-[09]--
           +-1d.0-[0a]----00.0  Lite-On IT Corp. / Plextor M6e PCI Express SSD [Marvell 88SS9183]
           +-1f.0  Intel Corporation Device a2cc
           +-1f.2  Intel Corporation 200 Series/Z370 Chipset Family Power Management Controller
           +-1f.3  Intel Corporation 200 Series PCH HD Audio
           \-1f.4  Intel Corporation 200 Series/Z370 Chipset Family SMBus Controller

$ lspci -vvv

03:00.0 Network controller: Qualcomm Technologies, Inc WCN785x Wi-Fi 7(802.11be) 320MHz 2x2 [FastConnect 7800] (rev 01)
	Subsystem: Quectel Wireless Solutions Co., Ltd. Device 8000
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort+ <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 64 bytes
	Interrupt: pin ? routed to IRQ 139
	Region 0: Memory at f7000000 (64-bit, non-prefetchable) [size=2M]
	Capabilities: [40] Power Management version 3
		Flags: PMEClk- DSI- D1- D2- AuxCurrent=0mA PME(D0+,D1-,D2-,D3hot+,D3cold+)
		Status: D0 NoSoftRst+ PME-Enable- DSel=0 DScale=0 PME-
	Capabilities: [50] MSI: Enable+ Count=16/32 Maskable+ 64bit-
		Address: fee00618  Data: 0000
		Masking: ffff8000  Pending: 00000000
	Capabilities: [70] Express (v2) Endpoint, IntMsgNum 0
		DevCap:	MaxPayload 128 bytes, PhantFunc 0, Latency L0s unlimited, L1 unlimited
			ExtTag- AttnBtn- AttnInd- PwrInd- RBE+ FLReset- SlotPowerLimit 25W TEE-IO-
		DevCtl:	CorrErr+ NonFatalErr+ FatalErr+ UnsupReq+
			RlxdOrd+ ExtTag- PhantFunc- AuxPwr- NoSnoop+
			MaxPayload 128 bytes, MaxReadReq 512 bytes
		DevSta:	CorrErr- NonFatalErr- FatalErr- UnsupReq- AuxPwr+ TransPend-
		LnkCap:	Port #0, Speed 8GT/s, Width x2, ASPM L0s L1, Exit Latency L0s <1us, L1 <64us
			ClockPM- Surprise- LLActRep- BwNot- ASPMOptComp+
		LnkCtl:	ASPM Disabled; RCB 64 bytes, LnkDisable- CommClk+
			ExtSynch- ClockPM- AutWidDis- BWInt- AutBWInt-
		LnkSta:	Speed 8GT/s, Width x1 (downgraded)
			TrErr- Train- SlotClk+ DLActive- BWMgmt- ABWMgmt-
		DevCap2: Completion Timeout: Range ABCD, TimeoutDis+ NROPrPrP- LTR+
			 10BitTagComp- 10BitTagReq- OBFF Not Supported, ExtFmt- EETLPPrefix-
			 EmergencyPowerReduction Not Supported, EmergencyPowerReductionInit-
			 FRS- TPHComp+ ExtTPHComp-
			 AtomicOpsCap: 32bit- 64bit- 128bitCAS-
		DevCtl2: Completion Timeout: 50us to 50ms, TimeoutDis-
			 AtomicOpsCtl: ReqEn-
			 IDOReq- IDOCompl- LTR+ EmergencyPowerReductionReq-
			 10BitTagReq- OBFF Disabled, EETLPPrefixBlk-
		LnkCap2: Supported Link Speeds: 2.5-8GT/s, Crosslink- Retimer- 2Retimers- DRS-
		LnkCtl2: Target Link Speed: 8GT/s, EnterCompliance- SpeedDis-
			 Transmit Margin: Normal Operating Range, EnterModifiedCompliance- ComplianceSOS-
			 Compliance Preset/De-emphasis: -6dB de-emphasis, 0dB preshoot
		LnkSta2: Current De-emphasis Level: -6dB, EqualizationComplete+ EqualizationPhase1+
			 EqualizationPhase2+ EqualizationPhase3+ LinkEqualizationRequest-
			 Retimer- 2Retimers- CrosslinkRes: unsupported
	Capabilities: [100 v2] Advanced Error Reporting
		UESta:	DLP- SDES- TLP- FCP- CmpltTO- CmpltAbrt- UnxCmplt- RxOF- MalfTLP-
			ECRC- UnsupReq- ACSViol- UncorrIntErr- BlockedTLP- AtomicOpBlocked- TLPBlockedErr-
			PoisonTLPBlocked- DMWrReqBlocked- IDECheck- MisIDETLP- PCRC_CHECK- TLPXlatBlocked-
		UEMsk:	DLP- SDES- TLP- FCP- CmpltTO- CmpltAbrt- UnxCmplt- RxOF- MalfTLP-
			ECRC- UnsupReq- ACSViol- UncorrIntErr+ BlockedTLP- AtomicOpBlocked- TLPBlockedErr-
			PoisonTLPBlocked- DMWrReqBlocked- IDECheck- MisIDETLP- PCRC_CHECK- TLPXlatBlocked-
		UESvrt:	DLP+ SDES+ TLP- FCP+ CmpltTO- CmpltAbrt- UnxCmplt- RxOF+ MalfTLP+
			ECRC- UnsupReq- ACSViol- UncorrIntErr+ BlockedTLP- AtomicOpBlocked- TLPBlockedErr-
			PoisonTLPBlocked- DMWrReqBlocked- IDECheck- MisIDETLP- PCRC_CHECK- TLPXlatBlocked-
		CESta:	RxErr- BadTLP- BadDLLP- Rollover- Timeout- AdvNonFatalErr- CorrIntErr- HeaderOF-
		CEMsk:	RxErr- BadTLP- BadDLLP- Rollover- Timeout- AdvNonFatalErr+ CorrIntErr+ HeaderOF+
		AERCap:	First Error Pointer: 00, ECRCGenCap+ ECRCGenEn- ECRCChkCap+ ECRCChkEn-
			MultHdrRecCap- MultHdrRecEn- TLPPfxPres- HdrLogCap-
		HeaderLog: 00000000 00000000 00000000 00000000
	Capabilities: [148 v1] Secondary PCI Express
		LnkCtl3: LnkEquIntrruptEn- PerformEqu-
		LaneErrStat: 0
	Capabilities: [158 v1] Transaction Processing Hints
		No steering table available
	Capabilities: [1e4 v1] Latency Tolerance Reporting
		Max snoop latency: 3145728ns
		Max no snoop latency: 3145728ns
	Capabilities: [1ec v1] L1 PM Substates
		L1SubCap: PCI-PM_L1.2+ PCI-PM_L1.1+ ASPM_L1.2+ ASPM_L1.1+ L1_PM_Substates+
			  PortCommonModeRestoreTime=70us PortTPowerOnTime=0us
		L1SubCtl1: PCI-PM_L1.2- PCI-PM_L1.1- ASPM_L1.2- ASPM_L1.1-
			   T_CommonMode=0us LTR1.2_Threshold=0ns
		L1SubCtl2: T_PwrOn=44us
	Kernel driver in use: ath12k_pci
	Kernel modules: ath12k

b)
- The crash/backtrace is limited to the kernels that originate from https://git.kernel.org/pub/scm/linux/kernel/git/ath/ath.git 
- I remember that I suffered the same crash (the system simply entirely freezes) when attempting to use an Intel BE200
- The issue remained the same with wpa_supplicant v2.12-devel-hostap_2_11-873-gb01c4843b
- I’m happy to provide any logs or try things from the ath-branches, if you tell me what you need or want me to test

Thanks,
Regards,
Benny





More information about the ath12k mailing list