[QCA9984] Wireless AC 5GHZ cannot start

[gwlim]

Please provide this info. See this link for more info on how to gather debug info: http://www.candelatech.com/ath10k-bugs.php

Description of the problem (how to configure, how to reproduce, how often it happens). Unable to start AP Mode on QCA9984. On certain channels scanning works. Reverted to OEM Firmware 5GHZ works fine hence no issue with WiFi hardware Tx-Power: 20 dBm Signal: 0 dBm | Noise: -108 dBm Bitrate: 0.0 Mbit/s

Software (OS, Firmware version, kernel, driver, etc) OpenWrt Trunk Kernel 5.4 firmware ver 10.4b-ct-9984-fH-13-795874169 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,htt-mgt-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 123549a3

Hardware (NIC chipset, platform, etc) OpenWrt Trunk TP-LINK WDR8500v2 ath10k_pci 0000:00:00.0: qca9984/qca9994 hw1.0 target 0x01000000 chip_id 0x00000000 sub 168c:cafe

Logs (dmesg, maybe supplicant and/or hostap)

[   39.145236] ath10k 5.4 driver, optimized for CT firmware, probing pci device: 0x46.
[   39.153307] ath10k_mac_create, priv_size: 804  hw: 73bea779  hw->priv: e4d16f89
[   39.177739] ath10k_pci 0000:00:00.0: enabling device (0000 -> 0002)
[   39.184535] ath10k_pci 0000:00:00.0: pci irq legacy oper_irq_mode 1 irq_mode 0 reset_mode 0
[   40.359346] ath10k_pci 0000:00:00.0: qca9984/qca9994 hw1.0 target 0x01000000 chip_id 0x00000000 sub 168c:cafe
[   40.369628] ath10k_pci 0000:00:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   40.383047] ath10k_pci 0000:00:00.0: firmware ver 10.4b-ct-9984-fH-13-795874169 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,htt-mgt-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 123549a3
[   42.860874] ath10k_pci 0000:00:00.0: board_file api 2 bmi_id 0:1 crc32 85498734
[   48.939678] ath10k_pci 0000:00:00.0: unsupported HTC service id: 1536
[   48.950727] ath10k_pci 0000:00:00.0: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   48.958500] ath10k_pci 0000:00:00.0: msdu-desc: 2500  skid: 32
[   49.040300] ath10k_pci 0000:00:00.0: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   49.051608] ath10k_pci 0000:00:00.0: wmi print 'free: 84936 iram: 13572 sram: 11224'
[   49.338599] ath10k_pci 0000:00:00.0: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-file max-sta 32 raw 0 hwcrypto 1
[   49.421852] ath: EEPROM regdomain sanitized
[   49.421861] ath: EEPROM regdomain: 0x64
[   49.421864] ath: EEPROM indicates we should expect a direct regpair map
[   49.421879] ath: Country alpha2 being used: 00
[   49.421881] ath: Regpair used: 0x64
[   49.481259] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[   49.565105] ath: EEPROM regdomain sanitized
[   49.565114] ath: EEPROM regdomain: 0x64
[   49.565117] ath: EEPROM indicates we should expect a direct regpair map
[   49.565134] ath: Country alpha2 being used: 00
[   49.565136] ath: Regpair used: 0x64
[   49.576767] ieee80211 phy1: Selected rate control algorithm 'minstrel_ht'
[   49.578490] ieee80211 phy1: Atheros AR9561 Rev:0 mem=0xb8100000, irq=2
[   49.587940] kmodloader: done loading kernel modules from /etc/modules.d/*
[   60.830573] eth0: link up (1000Mbps/Full duplex)
[   60.846176] br-lan: port 1(eth0.1) entered blocking state
[   60.851803] br-lan: port 1(eth0.1) entered disabled state
[   60.857640] device eth0.1 entered promiscuous mode
[   60.862622] device eth0 entered promiscuous mode
[   60.936194] br-lan: port 1(eth0.1) entered blocking state
[   60.941822] br-lan: port 1(eth0.1) entered forwarding state
[   61.841183] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   61.848165] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   63.964133] ath: EEPROM regdomain: 0x8348
[   63.968318] ath: EEPROM indicates we should expect a country code
[   63.974630] ath: doing EEPROM country->regdmn map search
[   63.980122] ath: country maps to regdmn code: 0x3a
[   63.985078] ath: Country alpha2 being used: US
[   63.989670] ath: Regpair used: 0x3a
[   63.993273] ath: regdomain 0x8348 dynamically updated by user
[   63.999273] ath: EEPROM regdomain: 0x8348
[   64.003419] ath: EEPROM indicates we should expect a country code
[   64.009717] ath: doing EEPROM country->regdmn map search
[   64.015207] ath: country maps to regdmn code: 0x3a
[   64.020161] ath: Country alpha2 being used: US
[   64.024763] ath: Regpair used: 0x3a
[   64.028368] ath: regdomain 0x8348 dynamically updated by user
[   64.500051] br-lan: port 2(wlan1) entered blocking state
[   64.505595] br-lan: port 2(wlan1) entered disabled state
[   64.511371] device wlan1 entered promiscuous mode
[   65.145916] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   65.152735] br-lan: port 2(wlan1) entered blocking state
[   65.158272] br-lan: port 2(wlan1) entered forwarding state
[   71.674741] ath10k_pci 0000:00:00.0: unsupported HTC service id: 1536
[   71.681892] ath10k_pci 0000:00:00.0: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   71.689675] ath10k_pci 0000:00:00.0: msdu-desc: 2500  skid: 32
[   71.771456] ath10k_pci 0000:00:00.0: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   71.782781] ath10k_pci 0000:00:00.0: wmi print 'free: 84936 iram: 13572 sram: 11224'
[   72.168684] ath10k_pci 0000:00:00.0: Firmware lacks feature flag indicating a retry limit of > 2 is OK, requested limit: 4
[   72.247733] br-lan: port 3(wlan0) entered blocking state
[   72.253283] br-lan: port 3(wlan0) entered disabled state
[   72.259091] device wlan0 entered promiscuous mode
[   72.448340] ath10k_pci 0000:00:00.0: NOTE:  Firmware DBGLOG output disabled in debug_mask: 0x10000000
[  134.162059] ath10k_pci 0000:00:00.0: mac flush null vif, drop 0 queues 0xffff
[  134.213292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  134.220180] br-lan: port 3(wlan0) entered blocking state
[  134.225731] br-lan: port 3(wlan0) entered forwarding state
[ 1157.163762] device wlan0 left promiscuous mode
[ 1157.168513] br-lan: port 3(wlan0) entered disabled state
[ 1157.177057] ath10k_pci 0000:00:00.0: mac flush null vif, drop 0 queues 0xffff
[ 1157.187144] ath10k_pci 0000:00:00.0: peer-unmap-event: unknown peer id 0
[ 1157.195047] ath10k_pci 0000:00:00.0: peer-unmap-event: unknown peer id 0
[ 1157.467529] device wlan1 left promiscuous mode
[ 1157.472273] br-lan: port 2(wlan1) entered disabled state
[ 1168.729840] ath10k_pci 0000:00:00.0: unsupported HTC service id: 1536
[ 1168.736962] ath10k_pci 0000:00:00.0: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[ 1168.744746] ath10k_pci 0000:00:00.0: msdu-desc: 2500  skid: 32
[ 1168.826503] ath10k_pci 0000:00:00.0: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[ 1168.837811] ath10k_pci 0000:00:00.0: wmi print 'free: 84936 iram: 13572 sram: 11224'
[ 1169.221360] ath10k_pci 0000:00:00.0: Firmware lacks feature flag indicating a retry limit of > 2 is OK, requested limit: 4
[ 1169.240202] br-lan: port 2(wlan0) entered blocking state
[ 1169.245755] br-lan: port 2(wlan0) entered disabled state
[ 1169.251528] device wlan0 entered promiscuous mode
[ 1169.359876] br-lan: port 3(wlan1) entered blocking state
[ 1169.365566] br-lan: port 3(wlan1) entered disabled state
[ 1169.371489] device wlan1 entered promiscuous mode
[ 1169.376488] br-lan: port 3(wlan1) entered blocking state
[ 1169.382018] br-lan: port 3(wlan1) entered forwarding state
[ 1169.558898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1231.890015] ath10k_pci 0000:00:00.0: mac flush null vif, drop 0 queues 0xffff
[ 1231.941653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1231.948445] br-lan: port 2(wlan0) entered blocking state
[ 1231.953986] br-lan: port 2(wlan0) entered forwarding state

iw phy0 info
Wiphy phy0
    wiphy index: 0
    max # scan SSIDs: 16
    max scan IEs length: 199 bytes
    max # sched scan SSIDs: 0
    max # match sets: 0
    max # scan plans: 1
    max scan plan interval: -1
    max scan plan iterations: 0
    Retry short limit: 7
    Retry long limit: 4
    Coverage class: 0 (up to 0m)
    Device supports AP-side u-APSD.
    Available Antennas: TX 0xf RX 0xf
    Configured Antennas: TX 0xf RX 0xf
    Supported interface modes:
         * IBSS
         * managed
         * AP
         * AP/VLAN
         * monitor
         * mesh point
         * P2P-client
         * P2P-GO
         * P2P-device
    Band 2:
        Capabilities: 0x19ef
            RX LDPC
            HT20/HT40
            SM Power Save disabled
            RX HT20 SGI
            RX HT40 SGI
            TX STBC
            RX STBC 1-stream
            Max AMSDU length: 7935 bytes
            DSSS/CCK HT40
        Maximum RX AMPDU length 65535 bytes (exponent: 0x003)
        Minimum RX AMPDU time spacing: 8 usec (0x06)
        HT TX/RX MCS rate indexes supported: 0-31
        VHT Capabilities (0x339b79fa):
            Max MPDU length: 11454
            Supported Channel Width: 160 MHz, 80+80 MHz
            RX LDPC
            short GI (80 MHz)
            short GI (160/80+80 MHz)
            TX STBC
            SU Beamformer
            SU Beamformee
            MU Beamformer
            MU Beamformee
            RX antenna pattern consistency
            TX antenna pattern consistency
        VHT RX MCS set:
            1 streams: MCS 0-9
            2 streams: MCS 0-9
            3 streams: MCS 0-9
            4 streams: MCS 0-9
            5 streams: not supported
            6 streams: not supported
            7 streams: not supported
            8 streams: not supported
        VHT RX highest supported: 1560 Mbps
        VHT TX MCS set:
            1 streams: MCS 0-9
            2 streams: MCS 0-9
            3 streams: MCS 0-9
            4 streams: MCS 0-9
            5 streams: not supported
            6 streams: not supported
            7 streams: not supported
            8 streams: not supported
        VHT TX highest supported: 1560 Mbps
        Frequencies:
            * 5180 MHz [36] (23.0 dBm)
            * 5200 MHz [40] (23.0 dBm)
            * 5220 MHz [44] (23.0 dBm)
            * 5240 MHz [48] (23.0 dBm)
            * 5260 MHz [52] (23.0 dBm) (radar detection)
            * 5280 MHz [56] (23.0 dBm) (radar detection)
            * 5300 MHz [60] (23.0 dBm) (radar detection)
            * 5320 MHz [64] (23.0 dBm) (radar detection)
            * 5500 MHz [100] (23.0 dBm) (radar detection)
            * 5520 MHz [104] (23.0 dBm) (radar detection)
            * 5540 MHz [108] (23.0 dBm) (radar detection)
            * 5560 MHz [112] (23.0 dBm) (radar detection)
            * 5580 MHz [116] (23.0 dBm) (radar detection)
            * 5600 MHz [120] (23.0 dBm) (radar detection)
            * 5620 MHz [124] (23.0 dBm) (radar detection)
            * 5640 MHz [128] (23.0 dBm) (radar detection)
            * 5660 MHz [132] (23.0 dBm) (radar detection)
            * 5680 MHz [136] (23.0 dBm) (radar detection)
            * 5700 MHz [140] (23.0 dBm) (radar detection)
            * 5720 MHz [144] (23.0 dBm) (radar detection)
            * 5745 MHz [149] (30.0 dBm)
            * 5765 MHz [153] (30.0 dBm)
            * 5785 MHz [157] (30.0 dBm)
            * 5805 MHz [161] (30.0 dBm)
            * 5825 MHz [165] (30.0 dBm)
            * 5845 MHz [169] (disabled)
            * 5865 MHz [173] (disabled)
    valid interface combinations:
         * #{ managed } <= 16, #{ AP, mesh point } <= 16, #{ IBSS } <= 1,
           total <= 16, #channels <= 1, STA/AP BI must match, radar detect widths: { 20 MHz (no HT), 20 MHz, 40 MHz, 80 MHz, 80+80 MHz, 160 MHz }

    HT Capability overrides:
         * MCS: ff ff ff ff ff ff ff ff ff ff
         * maximum A-MSDU length
         * supported channel width
         * short GI for 40 MHz
         * max A-MPDU length exponent
         * min MPDU start spacing
    Maximum associated stations in AP mode: 0
    Supported extended features:
        * [ VHT_IBSS ]: VHT-IBSS
        * [ RRM ]: RRM
        * [ SET_SCAN_DWELL ]: scan dwell setting
        * [ CQM_RSSI_LIST ]: multiple CQM_RSSI_THOLD records
        * [ CONTROL_PORT_OVER_NL80211 ]: control port over nl80211
        * [ TXQS ]: FQ-CoDel-enabled intermediate TXQs
        * [ AIRTIME_FAIRNESS ]: airtime fairness scheduling
        * [ AQL ]: Airtime Queue Limits (AQL)
        * [ CONTROL_PORT_NO_PREAUTH ]: disable pre-auth over nl80211 control port support
        * [ DEL_IBSS_STA ]: deletion of IBSS station support
        * [ SCAN_FREQ_KHZ ]: scan on kHz frequency support
        * [ CONTROL_PORT_OVER_NL80211_TX_STATUS ]: tx status for nl80211 control port support

iw dev wlan0 info
Interface wlan0
    ifindex 17
    wdev 0x4
    addr xx:xx:xx:xx:xx:xx
    ssid XXXXXXXX
    type AP
    wiphy 0
    channel 36 (5180 MHz), width: 80 MHz, center1: 5210 MHz
    txpower 20.00 dBm
    multicast TXQ:
        qsz-byt qsz-pkt flows   drops   marks   overlmt hashcol tx-bytes    tx-packets
        0   0   0   0   0   0   0   0       0

cat /var/run/hostapd-phy0.conf 
driver=nl80211
logger_syslog=127
logger_syslog_level=2
logger_stdout=127
logger_stdout_level=2
country_code=US
ieee80211d=1
ieee80211h=1
hw_mode=a
beacon_int=100
dtim_period=2
channel=36
chanlist=36

tx_queue_data2_burst=2.0
ieee80211n=1
ht_coex=0
ht_capab=[HT40+][LDPC][SHORT-GI-20][SHORT-GI-40][TX-STBC][RX-STBC1][MAX-AMSDU-7935][DSSS_CCK-40]
ieee80211ac=1
vht_oper_chwidth=1
vht_oper_centr_freq_seg0_idx=42
vht_capab=[RXLDPC][SHORT-GI-80][SHORT-GI-160][TX-STBC-2BY1][SU-BEAMFORMER][SU-BEAMFORMEE][MU-BEAMFORMER][MU-BEAMFORMEE][RX-ANTENNA-PATTERN][TX-ANTENNA-PATTERN][RX-STBC-1][VHT160-80PLUS80][MAX-MPDU-11454][MAX-A-MPDU-LEN-EXP7]

radio_config_id=4d573edd51b07733a7e6b5fefdccd3a8
interface=wlan0
ctrl_interface=/var/run/hostapd
ap_isolate=1
bss_load_update_period=60
chan_util_avg_period=600
disassoc_low_ack=0
preamble=1
wmm_enabled=1
ignore_broadcast_ssid=0
uapsd_advertisement_enabled=1
utf8_ssid=1
multi_ap=0
sae_require_mfp=1
wpa_passphrase=xxxxxxxxx
wpa_psk_file=/var/run/hostapd-wlan0.psk
auth_algs=1
wpa=2
wpa_pairwise=CCMP
ssid=XXXXXXXXXXXX
bridge=br-lan
mobility_domain=xxxx
ft_psk_generate_local=1
ft_over_ds=1
reassociation_deadline=1000
nas_identifier=xxxxxxxxx
wpa_disable_eapol_key_retries=0
wpa_key_mgmt=WPA-PSK FT-PSK WPA-PSK-SHA256 SAE FT-SAE
okc=1
ieee80211w=1
group_mgmt_cipher=AES-128-CMAC
dynamic_vlan=0
vlan_naming=1
vlan_file=/var/run/hostapd-wlan0.vlan
config_id=fc34eda45a59237c00dd838f3c98ab70
bssid=xx:xx:xx:xx:xx:xx

[gwlim]

Original Board Data board.zip

[qosmio]

iw dev wlan0 info is showing the access point is up and broadcasting. This would not be related to the firmware. It's a combination of your authentication and channel choices likely.

[gwlim]

Wifi Analyzer is running but the SSID does not appear in the scan. Reverting to factory firmware shows the radios are working

[gwlim]

Never mind I think the tx aspect of the radios are damaged hence signal strengh is so low