Re: Netgear R7800 - ath10k QCA 9984 firmware crash

[Sebastian Gottschall]

since i'm mainly the dd-wrt developer and you tested it as well with the 
same reproduceable crash it would be nice if you could provide me a 
nvram backup with a reproduceable crash (you should change passwords of 
course) to my private email. so i can apply it to my device and to see 
whats happen. if you have a beta device i just can guess that the 
calibration data which is stored in flash memory has maybe a different 
location, so openwrt as well as dd-wrt uses crap to initialize the 
hardware. this is just a guess. but i have 2 r7800 factory models. you 
can also send me a full flash backup of your device using wetransfer, so 
i can compare the content with my device and check if there is a flash 
layout specific different. this would help to track down the problem 
cause and maybe find a specific workaround for such devices by detecting 
them well

Sebastian
Am 20.09.2018 um 09:44 schrieb Bruno Rosset:
HI Sebastian,

I just flash the r7800 with the openwrt 18.06.1 factory image (here :
https://downloads.openwrt.org/releases/18.06.1/targets/ipq806x/generic/openwrt-18.06.1-ipq806x-netgear_r7800-squashfs-factory.img)

I forgot to mention that I get a beta hardware of the R7800, perhaps
there is something different in my hardware compared to the released
one.

Regards,
Bruno
Le jeu. 20 sept. 2018 à 08:36, Sebastian Gottschall
<s.gottsch...@newmedia-net.de> a écrit :
can you tell me how to reproduce this crash? i have 2 r7800 running with
dd-wrt but no crashes

Am 19.09.2018 um 22:37 schrieb Bruno Rosset:
Hi all,

I get a firmware crash using latest openwrt 18.06.1 on the Netgear
R7800 with stock firmware
Dmesg is :
[   13.804366] ath10k_pci 0000:01:00.0: assign IRQ: got 67
[   13.804805] ath10k_pci 0000:01:00.0: enabling device (0140 -> 0142)
[   13.804887] ath10k_pci 0000:01:00.0: enabling bus mastering
[   13.805346] ath10k_pci 0000:01:00.0: pci irq msi oper_irq_mode 2
irq_mode 0 reset_mode 0
[   13.974787] ath10k_pci 0000:01:00.0: Direct firmware load for
ath10k/pre-cal-pci-0000:01:00.0.bin failed with error -2
[   13.974827] ath10k_pci 0000:01:00.0: Falling back to user helper
[   14.304794] ath10k_pci 0000:01:00.0: Direct firmware load for
ath10k/QCA9984/hw1.0/firmware-6.bin failed with error -2
[   14.304857] ath10k_pci 0000:01:00.0: Falling back to user helper
[   14.337111] firmware ath10k!QCA9984!hw1.0!firmware-6.bin:
firmware_loading_store: map pages failed
[   14.702947] ath10k_pci 0000:01:00.0: qca9984/qca9994 hw1.0 target
0x01000000 chip_id 0x00000000 sub 168c:cafe
[   14.702997] ath10k_pci 0000:01:00.0: kconfig debug 0 debugfs 1
tracing 0 dfs 1 testmode 1
[   14.716459] ath10k_pci 0000:01:00.0: firmware ver 10.4-3.5.3-00053
api 5 features no-p2p,mfp,peer-flow-ctrl,btcoex-param,allows-mesh-bcast,no-ps
crc32 4c56a386
[   15.973104] ath10k_pci 0000:01:00.0: board_file api 2 bmi_id 0:31
crc32 dd6d039c
[   19.753460] ath10k_pci 0000:01:00.0: firmware crashed! (guid
ca7089d2-df9a-4f9d-8fa6-d1b908cf3220)
[   19.753494] ath10k_pci 0000:01:00.0: qca9984/qca9994 hw1.0 target
0x01000000 chip_id 0x00000000 sub 168c:cafe
[   19.761307] ath10k_pci 0000:01:00.0: kconfig debug 0 debugfs 1
tracing 0 dfs 1 testmode 1
[   19.773202] ath10k_pci 0000:01:00.0: firmware ver 10.4-3.5.3-00053
api 5 features no-p2p,mfp,peer-flow-ctrl,btcoex-param,allows-mesh-bcast,no-ps
crc32 4c56a386
[   19.779887] ath10k_pci 0000:01:00.0: board_file api 2 bmi_id 0:31
crc32 dd6d039c
[   19.793511] ath10k_pci 0000:01:00.0: htt-ver 0.0 wmi-op 6 htt-op 4
cal pre-cal-file max-sta 32 raw 0 hwcrypto 1
[   19.803176] ath10k_pci 0000:01:00.0: firmware register dump:
[   19.810956] ath10k_pci 0000:01:00.0: [00]: 0x01000000 0x000015B3
0x009CBB38 0x00975B31
[   19.816861] ath10k_pci 0000:01:00.0: [04]: 0x009CBB38 0x00060530
0x00000011 0x00415760
[   19.824587] ath10k_pci 0000:01:00.0: [08]: 0x00417E6C 0x00400000
0x00000001 0x00422990
[   19.832485] ath10k_pci 0000:01:00.0: [12]: 0x00000009 0xFFFFFFFF
0x00973B25 0x00973B47
[   19.840384] ath10k_pci 0000:01:00.0: [16]: 0x009CBB38 0x000CEEA7
0x00000000 0x00000000
[   19.848284] ath10k_pci 0000:01:00.0: [20]: 0x409CBB38 0x004068DC
0x00000001 0x00403628
[   19.856183] ath10k_pci 0000:01:00.0: [24]: 0x809814EF 0x0040693C
0x00000049 0xC09CBB38
[   19.864083] ath10k_pci 0000:01:00.0: [28]: 0x800DF216 0x004069AC
0x00000004 0x00415300
[   19.871983] ath10k_pci 0000:01:00.0: [32]: 0x800C383A 0x004069DC
0x00415160 0x00400000
[   19.879881] ath10k_pci 0000:01:00.0: [36]: 0x809800A3 0x00406A0C
0x00415170 0x009C41F8
[   19.887781] ath10k_pci 0000:01:00.0: [40]: 0x8098003A 0x00406A5C
0x00400000 0x00400600
[   19.895680] ath10k_pci 0000:01:00.0: [44]: 0x809607C1 0x00406A8C
0xD8400100 0x00406A9C
[   19.903579] ath10k_pci 0000:01:00.0: [48]: 0x80960892 0x00406AAC
0x00000000 0x00000008
[   19.911479] ath10k_pci 0000:01:00.0: [52]: 0x80960E39 0x00406ACC
0x00400000 0x00400600
[   19.919378] ath10k_pci 0000:01:00.0: [56]: 0x80960E9D 0x00406AEC
0x00000000 0x00400600
[   19.927277] ath10k_pci 0000:01:00.0: Copy Engine register dump:
[   19.935181] ath10k_pci 0000:01:00.0: [00]: 0x0004a000  11  11  12  11
[   19.940994] ath10k_pci 0000:01:00.0: [01]: 0x0004a400  11  11  10  11
[   19.947590] ath10k_pci 0000:01:00.0: [02]: 0x0004a800   0   0  63   0
[   19.954014] ath10k_pci 0000:01:00.0: [03]: 0x0004ac00   0   0   0   0
[   19.960439] ath10k_pci 0000:01:00.0: [04]: 0x0004b000   0   0   0   0
[   19.966862] ath10k_pci 0000:01:00.0: [05]: 0x0004b400   0   0   0   0
[   19.973285] ath10k_pci 0000:01:00.0: [06]: 0x0004b800   0   0   0   0
[   19.979709] ath10k_pci 0000:01:00.0: [07]: 0x0004bc00   1   1   1   1
[   19.986132] ath10k_pci 0000:01:00.0: [08]: 0x0004c000   0   0 127   0
[   19.992556] ath10k_pci 0000:01:00.0: [09]: 0x0004c400   1   1   1   1
[   19.998980] ath10k_pci 0000:01:00.0: [10]: 0x0004c800   0   0   0   0
[   20.005403] ath10k_pci 0000:01:00.0: [11]: 0x0004cc00   0   0   0   0
[   20.795948] ath10k_pci 0000:01:00.0: failed to receive control
response completion, polling..
[   21.835766] ath10k_pci 0000:01:00.0: ctl_resp never came in (-110)
[   21.835810] ath10k_pci 0000:01:00.0: failed to connect to HTC: -110
[   21.915174] ath10k_pci 0000:01:00.0: could not init core (-110)
[   21.915620] ath10k_pci 0000:01:00.0: could not probe fw (-110)
[   21.920266] ath10k_pci 0001:01:00.0: assign IRQ: got 100
[   21.921197] ath10k_pci 0001:01:00.0: enabling device (0140 -> 0142)
[   21.926032] ath10k_pci 0001:01:00.0: enabling bus mastering
[   21.926715] ath10k_pci 0001:01:00.0: pci irq msi oper_irq_mode 2
irq_mode 0 reset_mode 0
[   21.962217] ath10k_pci 0000:01:00.0: cannot restart a device that
hasn't been started
[   22.104728] ath10k_pci 0001:01:00.0: Direct firmware load for
ath10k/pre-cal-pci-0001:01:00.0.bin failed with error -2
[   22.104769] ath10k_pci 0001:01:00.0: Falling back to user helper
[   22.424677] ath10k_pci 0001:01:00.0: Direct firmware load for
ath10k/QCA9984/hw1.0/firmware-6.bin failed with error -2
[   22.424736] ath10k_pci 0001:01:00.0: Falling back to user helper
[   22.462387] firmware ath10k!QCA9984!hw1.0!firmware-6.bin:
firmware_loading_store: map pages failed
[   22.463844] ath10k_pci 0001:01:00.0: qca9984/qca9994 hw1.0 target
0x01000000 chip_id 0x00000000 sub 168c:cafe
[   22.470250] ath10k_pci 0001:01:00.0: kconfig debug 0 debugfs 1
tracing 0 dfs 1 testmode 1
[   22.483627] ath10k_pci 0001:01:00.0: firmware ver 10.4-3.5.3-00053
api 5 features no-p2p,mfp,peer-flow-ctrl,btcoex-param,allows-mesh-bcast,no-ps
crc32 4c56a386
[   23.743494] ath10k_pci 0001:01:00.0: board_file api 2 bmi_id 0:31
crc32 dd6d039c
[   27.528777] ath10k_pci 0001:01:00.0: firmware crashed! (guid
2112523e-3948-4925-b383-9e672937c6d5)
[   27.528819] ath10k_pci 0001:01:00.0: qca9984/qca9994 hw1.0 target
0x01000000 chip_id 0x00000000 sub 168c:cafe
[   27.536696] ath10k_pci 0001:01:00.0: kconfig debug 0 debugfs 1
tracing 0 dfs 1 testmode 1
[   27.548985] ath10k_pci 0001:01:00.0: firmware ver 10.4-3.5.3-00053
api 5 features no-p2p,mfp,peer-flow-ctrl,btcoex-param,allows-mesh-bcast,no-ps
crc32 4c56a386
[   27.555303] ath10k_pci 0001:01:00.0: board_file api 2 bmi_id 0:31
crc32 dd6d039c
[   27.568835] ath10k_pci 0001:01:00.0: htt-ver 0.0 wmi-op 6 htt-op 4
cal pre-cal-file max-sta 32 raw 0 hwcrypto 1
[   27.578512] ath10k_pci 0001:01:00.0: firmware register dump:
[   27.586281] ath10k_pci 0001:01:00.0: [00]: 0x01000000 0x000015B3
0x009CBB38 0x00975B31
[   27.592186] ath10k_pci 0001:01:00.0: [04]: 0x009CBB38 0x00060530
0x00000011 0x00415760
[   27.599910] ath10k_pci 0001:01:00.0: [08]: 0x00417E6C 0x00400000
0x00000001 0x00422990
[   27.607809] ath10k_pci 0001:01:00.0: [12]: 0x00000009 0xFFFFFFFF
0x00973B25 0x00973B47
[   27.615708] ath10k_pci 0001:01:00.0: [16]: 0x009CBB38 0x000CEEAC
0x00000000 0x00000000
[   27.623608] ath10k_pci 0001:01:00.0: [20]: 0x409CBB38 0x004068DC
0x00000001 0x00403628
[   27.631507] ath10k_pci 0001:01:00.0: [24]: 0x809814EF 0x0040693C
0x00000049 0xC09CBB38
[   27.639405] ath10k_pci 0001:01:00.0: [28]: 0x800DF216 0x004069AC
0x00000004 0x00415300
[   27.647305] ath10k_pci 0001:01:00.0: [32]: 0x800C383A 0x004069DC
0x00415160 0x00400000
[   27.655205] ath10k_pci 0001:01:00.0: [36]: 0x809800A3 0x00406A0C
0x00415170 0x009C41F8
[   27.663104] ath10k_pci 0001:01:00.0: [40]: 0x8098003A 0x00406A5C
0x00400000 0x00400600
[   27.671004] ath10k_pci 0001:01:00.0: [44]: 0x809607C1 0x00406A8C
0xD8400100 0x00406A9C
[   27.678902] ath10k_pci 0001:01:00.0: [48]: 0x80960892 0x00406AAC
0x00000000 0x00000008
[   27.686801] ath10k_pci 0001:01:00.0: [52]: 0x80960E39 0x00406ACC
0x00400000 0x00400600
[   27.694700] ath10k_pci 0001:01:00.0: [56]: 0x80960E9D 0x00406AEC
0x00000000 0x00400600
[   27.702603] ath10k_pci 0001:01:00.0: Copy Engine register dump:
[   27.710506] ath10k_pci 0001:01:00.0: [00]: 0x0004a000  11  11  12  11
[   27.716322] ath10k_pci 0001:01:00.0: [01]: 0x0004a400  11  11  10  11
[   27.722917] ath10k_pci 0001:01:00.0: [02]: 0x0004a800   0   0  63   0
[   27.729340] ath10k_pci 0001:01:00.0: [03]: 0x0004ac00   0   0   0   0
[   27.735764] ath10k_pci 0001:01:00.0: [04]: 0x0004b000   0   0   0   0
[   27.742188] ath10k_pci 0001:01:00.0: [05]: 0x0004b400   0   0   0   0
[   27.748611] ath10k_pci 0001:01:00.0: [06]: 0x0004b800   0   0   0   0
[   27.755035] ath10k_pci 0001:01:00.0: [07]: 0x0004bc00   1   1   1   1
[   27.761459] ath10k_pci 0001:01:00.0: [08]: 0x0004c000   0   0 127   0
[   27.767884] ath10k_pci 0001:01:00.0: [09]: 0x0004c400   1   1   1   1
[   27.774304] ath10k_pci 0001:01:00.0: [10]: 0x0004c800   0   0   0   0
[   27.780731] ath10k_pci 0001:01:00.0: [11]: 0x0004cc00   0   0   0   0
[   28.567840] ath10k_pci 0001:01:00.0: failed to receive control
response completion, polling..
[   29.616315] ath10k_pci 0001:01:00.0: ctl_resp never came in (-110)
[   29.616341] ath10k_pci 0001:01:00.0: failed to connect to HTC: -110
[   29.695567] ath10k_pci 0001:01:00.0: could not init core (-110)
[   29.695988] ath10k_pci 0001:01:00.0: could not probe fw (-110)
[   29.703824] kmodloader: done loading kernel modules from /etc/modules.d/*
[   29.732245] ath10k_pci 0001:01:00.0: cannot restart a device that
hasn't been started

Replacing stock firmware with latest from kvalo github (here :
https://github.com/kvalo/ath10k-firmware/tree/master/QCA9984/hw1.0/3.6.0.1)
I get the same result
Dmesg is :
[  235.442819] ath10k_pci 0001:01:00.0: disabling bus mastering
[  235.482588] ath10k_pci 0000:01:00.0: disabling bus mastering
[  260.586372] ath10k_pci 0000:01:00.0: assign IRQ: got 67
[  260.586771] ath10k_pci 0000:01:00.0: enabling bus mastering
[  260.587218] ath10k_pci 0000:01:00.0: pci irq msi oper_irq_mode 2
irq_mode 0 reset_mode 0
[  260.754869] ath10k_pci 0000:01:00.0: Direct firmware load for
ath10k/QCA9984/hw1.0/firmware-6.bin failed with error -2
[  260.754917] ath10k_pci 0000:01:00.0: Falling back to user helper
[  260.786271] firmware ath10k!QCA9984!hw1.0!firmware-6.bin:
firmware_loading_store: map pages failed
[  260.787219] ath10k_pci 0000:01:00.0: qca9984/qca9994 hw1.0 target
0x01000000 chip_id 0x00000000 sub 168c:cafe
[  260.794202] ath10k_pci 0000:01:00.0: kconfig debug 0 debugfs 1
tracing 0 dfs 1 testmode 1
[  260.806246] ath10k_pci 0000:01:00.0: firmware ver
10.4-3.6.0.1-00003 api 5 features
no-p2p,mfp,peer-flow-ctrl,btcoex-param,allows-mesh-bcast,no-ps crc32
266d70b0
[  262.065148] ath10k_pci 0000:01:00.0: board_file api 2 bmi_id 0:31
crc32 dd6d039c
[  265.858256] ath10k_pci 0000:01:00.0: firmware crashed! (guid
2b6addfc-915e-437a-a7fa-3691cbf4b39e)
[  265.858347] ath10k_pci 0000:01:00.0: qca9984/qca9994 hw1.0 target
0x01000000 chip_id 0x00000000 sub 168c:cafe
[  265.866136] ath10k_pci 0000:01:00.0: kconfig debug 0 debugfs 1
tracing 0 dfs 1 testmode 1
[  265.881167] ath10k_pci 0000:01:00.0: firmware ver
10.4-3.6.0.1-00003 api 5 features
no-p2p,mfp,peer-flow-ctrl,btcoex-param,allows-mesh-bcast,no-ps crc32
266d70b0
[  265.885460] ath10k_pci 0000:01:00.0: board_file api 2 bmi_id 0:31
crc32 dd6d039c
[  265.898696] ath10k_pci 0000:01:00.0: htt-ver 0.0 wmi-op 6 htt-op 4
cal pre-cal-file max-sta 32 raw 0 hwcrypto 1
[  265.908193] ath10k_pci 0000:01:00.0: firmware register dump:
[  265.915961] ath10k_pci 0000:01:00.0: [00]: 0x01000000 0x000015B3
0x009CC074 0x00975B31
[  265.921864] ath10k_pci 0000:01:00.0: [04]: 0x009CC074 0x00060530
0x00000011 0x004142FC
[  265.929590] ath10k_pci 0000:01:00.0: [08]: 0x00416AFC 0x00400000
0x00000001 0x00421F90
[  265.937488] ath10k_pci 0000:01:00.0: [12]: 0x00000009 0xFFFFFFFF
0x00973B25 0x00973B47
[  265.945389] ath10k_pci 0000:01:00.0: [16]: 0x009CC074 0x000CFE13
0x00000000 0x00000000
[  265.953289] ath10k_pci 0000:01:00.0: [20]: 0x409CC074 0x004068DC
0x00000001 0x00403628
[  265.961187] ath10k_pci 0000:01:00.0: [24]: 0x8098153B 0x0040693C
0x0000004E 0xC09CC074
[  265.969087] ath10k_pci 0000:01:00.0: [28]: 0x800E026F 0x004069AC
0x00000004 0x00413E60
[  265.976984] ath10k_pci 0000:01:00.0: [32]: 0x800C383A 0x004069DC
0x00413CB0 0x00400000
[  265.984884] ath10k_pci 0000:01:00.0: [36]: 0x809800A3 0x00406A0C
0x00413CC0 0x009C4750
[  265.992784] ath10k_pci 0000:01:00.0: [40]: 0x8098003A 0x00406A5C
0x00400000 0x00400600
[  266.000684] ath10k_pci 0000:01:00.0: [44]: 0x809607C1 0x00406A8C
0xD8400100 0x00406A9C
[  266.008582] ath10k_pci 0000:01:00.0: [48]: 0x80960892 0x00406AAC
0x00000000 0x00000008
[  266.016482] ath10k_pci 0000:01:00.0: [52]: 0x80960E39 0x00406ACC
0x00400000 0x00400600
[  266.024381] ath10k_pci 0000:01:00.0: [56]: 0x80960E9D 0x00406AEC
0x00000000 0x00400600
[  266.032279] ath10k_pci 0000:01:00.0: Copy Engine register dump:
[  266.040186] ath10k_pci 0000:01:00.0: [00]: 0x0004a000  12  12  29  28
[  266.045999] ath10k_pci 0000:01:00.0: [01]: 0x0004a400  11  11  10  11
[  266.052595] ath10k_pci 0000:01:00.0: [02]: 0x0004a800   0   0  63   0
[  266.059018] ath10k_pci 0000:01:00.0: [03]: 0x0004ac00   0   0   0   0
[  266.065441] ath10k_pci 0000:01:00.0: [04]: 0x0004b000   0   0   0   0
[  266.071865] ath10k_pci 0000:01:00.0: [05]: 0x0004b400   0   0   0   0
[  266.078289] ath10k_pci 0000:01:00.0: [06]: 0x0004b800   0   0   0   0
[  266.084713] ath10k_pci 0000:01:00.0: [07]: 0x0004bc00   1   1   1   1
[  266.091136] ath10k_pci 0000:01:00.0: [08]: 0x0004c000   0   0 127   0
[  266.097559] ath10k_pci 0000:01:00.0: [09]: 0x0004c400   1   1   1   1
[  266.103982] ath10k_pci 0000:01:00.0: [10]: 0x0004c800   0   0   0   0
[  266.110408] ath10k_pci 0000:01:00.0: [11]: 0x0004cc00   0   0   0   0
[  266.876609] ath10k_pci 0000:01:00.0: failed to receive control
response completion, polling..
[  267.915918] ath10k_pci 0000:01:00.0: ctl_resp never came in (-110)
[  267.915970] ath10k_pci 0000:01:00.0: failed to connect to HTC: -110
[  267.996406] ath10k_pci 0000:01:00.0: could not init core (-110)
[  267.996972] ath10k_pci 0000:01:00.0: could not probe fw (-110)
[  268.001578] ath10k_pci 0001:01:00.0: assign IRQ: got 100
[  268.002612] ath10k_pci 0001:01:00.0: enabling bus mastering
[  268.003292] ath10k_pci 0001:01:00.0: pci irq msi oper_irq_mode 2
irq_mode 0 reset_mode 0
[  268.032241] ath10k_pci 0000:01:00.0: cannot restart a device that
hasn't been started
[  268.174893] ath10k_pci 0001:01:00.0: Direct firmware load for
ath10k/QCA9984/hw1.0/firmware-6.bin failed with error -2
[  268.174936] ath10k_pci 0001:01:00.0: Falling back to user helper
[  268.206575] firmware ath10k!QCA9984!hw1.0!firmware-6.bin:
firmware_loading_store: map pages failed
[  268.207955] ath10k_pci 0001:01:00.0: qca9984/qca9994 hw1.0 target
0x01000000 chip_id 0x00000000 sub 168c:cafe
[  268.214521] ath10k_pci 0001:01:00.0: kconfig debug 0 debugfs 1
tracing 0 dfs 1 testmode 1
[  268.227852] ath10k_pci 0001:01:00.0: firmware ver
10.4-3.6.0.1-00003 api 5 features
no-p2p,mfp,peer-flow-ctrl,btcoex-param,allows-mesh-bcast,no-ps crc32
266d70b0
[  269.485480] ath10k_pci 0001:01:00.0: board_file api 2 bmi_id 0:31
crc32 dd6d039c
[  273.282901] ath10k_pci 0001:01:00.0: firmware crashed! (guid
28f0a68b-f881-40cb-b515-f4320b412b7a)
[  273.282982] ath10k_pci 0001:01:00.0: qca9984/qca9994 hw1.0 target
0x01000000 chip_id 0x00000000 sub 168c:cafe
[  273.290780] ath10k_pci 0001:01:00.0: kconfig debug 0 debugfs 1
tracing 0 dfs 1 testmode 1
[  273.306323] ath10k_pci 0001:01:00.0: firmware ver
10.4-3.6.0.1-00003 api 5 features
no-p2p,mfp,peer-flow-ctrl,btcoex-param,allows-mesh-bcast,no-ps crc32
266d70b0
[  273.310039] ath10k_pci 0001:01:00.0: board_file api 2 bmi_id 0:31
crc32 dd6d039c
[  273.323420] ath10k_pci 0001:01:00.0: htt-ver 0.0 wmi-op 6 htt-op 4
cal pre-cal-file max-sta 32 raw 0 hwcrypto 1
[  273.332841] ath10k_pci 0001:01:00.0: firmware register dump:
[  273.340604] ath10k_pci 0001:01:00.0: [00]: 0x01000000 0x000015B3
0x009CC074 0x00975B31
[  273.346508] ath10k_pci 0001:01:00.0: [04]: 0x009CC074 0x00060530
0x00000011 0x004142FC
[  273.354234] ath10k_pci 0001:01:00.0: [08]: 0x00416AFC 0x00400000
0x00000001 0x00421F90
[  273.362135] ath10k_pci 0001:01:00.0: [12]: 0x00000009 0xFFFFFFFF
0x00973B25 0x00973B47
[  273.370033] ath10k_pci 0001:01:00.0: [16]: 0x009CC074 0x000CFE13
0x00000000 0x00000000
[  273.377932] ath10k_pci 0001:01:00.0: [20]: 0x409CC074 0x004068DC
0x00000001 0x00403628
[  273.385833] ath10k_pci 0001:01:00.0: [24]: 0x8098153B 0x0040693C
0x0000004E 0xC09CC074
[  273.393732] ath10k_pci 0001:01:00.0: [28]: 0x800E026F 0x004069AC
0x00000004 0x00413E60
[  273.401631] ath10k_pci 0001:01:00.0: [32]: 0x800C383A 0x004069DC
0x00413CB0 0x00400000
[  273.409529] ath10k_pci 0001:01:00.0: [36]: 0x809800A3 0x00406A0C
0x00413CC0 0x009C4750
[  273.417429] ath10k_pci 0001:01:00.0: [40]: 0x8098003A 0x00406A5C
0x00400000 0x00400600
[  273.425329] ath10k_pci 0001:01:00.0: [44]: 0x809607C1 0x00406A8C
0xD8400100 0x00406A9C
[  273.433227] ath10k_pci 0001:01:00.0: [48]: 0x80960892 0x00406AAC
0x00000000 0x00000008
[  273.441127] ath10k_pci 0001:01:00.0: [52]: 0x80960E39 0x00406ACC
0x00400000 0x00400600
[  273.449027] ath10k_pci 0001:01:00.0: [56]: 0x80960E9D 0x00406AEC
0x00000000 0x00400600
[  273.456924] ath10k_pci 0001:01:00.0: Copy Engine register dump:
[  273.464831] ath10k_pci 0001:01:00.0: [00]: 0x0004a000  12  12  29  28
[  273.470647] ath10k_pci 0001:01:00.0: [01]: 0x0004a400  11  11  10  11
[  273.477243] ath10k_pci 0001:01:00.0: [02]: 0x0004a800   0   0  63   0
[  273.483664] ath10k_pci 0001:01:00.0: [03]: 0x0004ac00   0   0   0   0
[  273.490088] ath10k_pci 0001:01:00.0: [04]: 0x0004b000   0   0   0   0
[  273.496512] ath10k_pci 0001:01:00.0: [05]: 0x0004b400   0   0   0   0
[  273.502936] ath10k_pci 0001:01:00.0: [06]: 0x0004b800   0   0   0   0
[  273.509360] ath10k_pci 0001:01:00.0: [07]: 0x0004bc00   1   1   1   1
[  273.515783] ath10k_pci 0001:01:00.0: [08]: 0x0004c000   0   0 127   0
[  273.522208] ath10k_pci 0001:01:00.0: [09]: 0x0004c400   1   1   1   1
[  273.528632] ath10k_pci 0001:01:00.0: [10]: 0x0004c800   0   0   0   0
[  273.535054] ath10k_pci 0001:01:00.0: [11]: 0x0004cc00   0   0   0   0
[  274.326491] ath10k_pci 0001:01:00.0: failed to receive control
response completion, polling..
[  275.356625] ath10k_pci 0001:01:00.0: ctl_resp never came in (-110)
[  275.356672] ath10k_pci 0001:01:00.0: failed to connect to HTC: -110
[  275.436389] ath10k_pci 0001:01:00.0: could not init core (-110)
[  275.436925] ath10k_pci 0001:01:00.0: could not probe fw (-110)
[  275.472295] ath10k_pci 0001:01:00.0: cannot restart a device that
hasn't been started

Various tests with others firmware from candelatech , stock LEDE 17.01
or dd-wrt give me firmware crash also

I already tried to enable debug info for firmware crash with 'rmmod
ath10k_pci; rmmod ath10k_core; modprobe ath10k_core
debug_mask=0xffffffff ; modprobe ath10k_pci ' but without success

Flashing back netgear factory firmware is OK, and all is functionnal

What can I do next ?

Thanks all