カテゴリー: Qualcomm

WG2600HPx ファーム展開メモ (2)

続き的なもの。

前回OpenSSLによりdecryptしたファイルを用い、KernelとRootfsの取り出し。
ブートローダ用スクリプト, TP (TestProgram), Kernel (HLOS), RootFSの4つのイメージがFIT形式で格納されている。
余談: 以下は全てWindows 10環境(WSL含む)での作業。

バイナリエディタ等でdecryptしたファーム内のhexデータ d00dfeed (D00DFEED) を探し、

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp2/wg2600hp2_1_0_5
$ busybox hexdump -n 256 -C wg2600hp2_1_0_5.bin.pad.dec
00000000  55 53 42 20 41 54 45 52  4d 57 4c 33 30 35 30 00  |USB ATERMWL3050.|
00000010  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
00000020  00 00 ff ff 00 00 00 68  00 00 00 18 6a af 00 00  |.......h....j...|
00000030  00 00 00 00 00 00 00 00  56 45 52 53 49 4f 4e 3a  |........VERSION:|
00000040  20 33 2e 33 39 2e 32 30  0a 4f 45 4d 31 20 56 45  | 3.39.20.OEM1 VE|
00000050  52 53 49 4f 4e 3a 20 31  2e 30 2e 35 0a 43 6f 70  |RSION: 1.0.5.Cop|
00000060  79 72 69 67 68 74 28 63  29 20 4e 45 43 20 50 6c  |yright(c) NEC Pl|
00000070  61 74 66 6f 72 6d 73 2c  20 4c 74 64 2e 20 32 30  |atforms, Ltd. 20|
00000080  30 31 2d 32 30 31 35 0a  00 02 ff fd 00 f9 66 50  |01-2015.......fP|
00000090  00 00 00 18 ce 19 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  d0 0d fe ed 00 f9 66 34  00 00 00 38 00 f9 64 64  |......f4...8..dd|
000000b0  00 00 00 28 00 00 00 11  00 00 00 10 00 00 00 00  |...(............|
000000c0  00 00 00 3c 00 f9 64 2c  00 00 00 00 00 00 00 00  |...<..d,........|
000000d0  00 00 00 00 00 00 00 00  00 00 00 01 00 00 00 00  |................|
000000e0  00 00 00 03 00 00 00 04  00 00 00 32 5c 41 a9 4f  |...........2\A.O|
000000f0  00 00 00 03 00 00 00 17  00 00 00 00 46 6c 61 73  |............Flas|
00000100

それが先頭に来るよう切り詰め。

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp2/wg2600hp2_1_0_5
$ busybox hexdump -n 256 -C wg2600hp2_1_0_5.bin.pad.dec.itb
00000000  d0 0d fe ed 00 f9 66 34  00 00 00 38 00 f9 64 64  |......f4...8..dd|
00000010  00 00 00 28 00 00 00 11  00 00 00 10 00 00 00 00  |...(............|
00000020  00 00 00 3c 00 f9 64 2c  00 00 00 00 00 00 00 00  |...<..d,........|
00000030  00 00 00 00 00 00 00 00  00 00 00 01 00 00 00 00  |................|
00000040  00 00 00 03 00 00 00 04  00 00 00 32 5c 41 a9 4f  |...........2\A.O|
00000050  00 00 00 03 00 00 00 17  00 00 00 00 46 6c 61 73  |............Flas|
00000060  68 69 6e 67 20 6e 6f 72  20 31 30 30 20 31 30 30  |hing nor 100 100|
00000070  30 30 00 00 00 00 00 01  69 6d 61 67 65 73 00 00  |00......images..|
00000080  00 00 00 01 73 63 72 69  70 74 00 00 00 00 00 03  |....script......|
00000090  00 00 00 0a 00 00 00 00  66 6c 61 73 68 2e 73 63  |........flash.sc|
000000a0  72 00 00 00 00 00 00 03  00 00 63 c7 00 00 00 0c  |r.........c.....|
000000b0  69 66 20 74 65 73 74 20  22 78 24 76 65 72 62 6f  |if test "x$verbo|
000000c0  73 65 22 20 3d 20 22 78  22 3b 20 74 68 65 6e 0a  |se" = "x"; then.|
000000d0  66 61 69 6c 65 64 6d 73  67 3d 27 5b 66 61 69 6c  |failedmsg='[fail|
000000e0  65 64 5d 27 0a 65 6c 73  65 0a 66 61 69 6c 65 64  |ed]'.else.failed|
000000f0  6d 73 67 3d 27 23 23 23  23 23 23 23 23 23 23 23  |msg='###########|
00000100

切り詰めたファイルを dumpimage コマンドでリスト表示。

tofu@Tofu-H170W10:/mnt/d/router/NEC/WG2600HP2/wg2600hp2_1_0_5$ dumpimage -l wg2600hp2_1_0_5.bin.pad.dec.itb
FIT description: Flashing nor 100 10000
Created:         Fri Jan 18 19:24:15 2019
 Image 0 (script)
  Description:  flash.scr
  Created:      Fri Jan 18 19:24:15 2019
  Type:         Script
  Compression:  uncompressed
  Data Size:    25543 Bytes = 24.94 KiB = 0.02 MiB
  Hash algo:    crc32
  Hash value:   fad97085
 Image 1 (tp-147c46b934f3a70b73abf2c62847c7685388b4b8)
  Description:  rotary-tp.bin
  Created:      Fri Jan 18 19:24:15 2019
  Type:         Firmware
  Compression:  uncompressed
  Data Size:    66736 Bytes = 65.17 KiB = 0.06 MiB
  Architecture: ARM
  OS:           Unknown OS
  Load Address: unavailable
  Hash algo:    crc32
  Hash value:   22f74fee
 Image 2 (hlos-894c257106b4e407230bdc07bedb9c44ce088f40)
  Description:  openwrt-ipq806x-3.4-uImage
  Created:      Fri Jan 18 19:24:15 2019
  Type:         Firmware
  Compression:  uncompressed
  Data Size:    1925174 Bytes = 1880.05 KiB = 1.84 MiB
  Architecture: ARM
  OS:           Unknown OS
  Load Address: unavailable
  Hash algo:    crc32
  Hash value:   7d55fcec
 Image 3 (fs-73be11f50c9325ae68c43b1ae01663c947d14314)
  Description:  openwrt-ipq806x-squashfs-root.img
  Created:      Fri Jan 18 19:24:15 2019
  Type:         Firmware
  Compression:  uncompressed
  Data Size:    14325760 Bytes = 13990.00 KiB = 13.66 MiB
  Architecture: ARM
  OS:           Unknown OS
  Load Address: unavailable
  Hash algo:    crc32
  Hash value:   bb43bd4c

再び dumpimage コマンドを用い、KernelとRootFSを取り出し。

-i: 入力ファイル
-p: FIT内の位置指定、上記リストの Image n
最後: 出力先ファイル名
tofu@Tofu-H170W10:/mnt/d/router/NEC/WG2600HP2/wg2600hp2_1_0_5$ dumpimage -T flat_dt -i wg2600hp2_1_0_5.bin.pad.dec.itb -p 2 wg2600hp2_1_0_5_kernel.bin
Extracted:
 Image 2 (hlos-894c257106b4e407230bdc07bedb9c44ce088f40)
  Description:  openwrt-ipq806x-3.4-uImage
  Created:      Fri Jan 18 19:24:15 2019
  Type:         Firmware
  Compression:  uncompressed
  Data Size:    1925174 Bytes = 1880.05 KiB = 1.84 MiB
  Architecture: ARM
  OS:           Unknown OS
  Load Address: unavailable
  Hash algo:    crc32
  Hash value:   7d55fcec
tofu@Tofu-H170W10:/mnt/d/router/NEC/WG2600HP2/wg2600hp2_1_0_5$ dumpimage -T flat_dt -i wg2600hp2_1_0_5.bin.pad.dec.itb -p 3 wg2600hp2_1_0_5_rootfs.bin
Extracted:
 Image 3 (fs-73be11f50c9325ae68c43b1ae01663c947d14314)
  Description:  openwrt-ipq806x-squashfs-root.img
  Created:      Fri Jan 18 19:24:15 2019
  Type:         Firmware
  Compression:  uncompressed
  Data Size:    14325760 Bytes = 13990.00 KiB = 13.66 MiB
  Architecture: ARM
  OS:           Unknown OS
  Load Address: unavailable
  Hash algo:    crc32
  Hash value:   bb43bd4c
広告

WG2600HPx ファーム展開メモ

many thanks goroh_kun (@goroh_kun)

ヘッダ(0x0 – 0xF) 除去したものを32byte単位でpadding

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp/wg2600hp_1_0_13
$ dd if=wg2600hp_1_0_13_noheader.bin of=wg2600hp_1_0_13_noheader.bin.pad bs=32 conv=sync
396727+0 records in
396727+0 records out
12695264 bytes (13 MB, 12 MiB) copied, 2.89493 s, 4.4 MB/s

キーを32byteで作成してhexな文字列で取り出し

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp/wg2600hp_1_0_13
$ echo -n "rotary" | dd bs=32 count=1 conv=sync > key.bin
0+1 records in
1+0 records out
32 bytes copied, 0.0061302 s, 5.2 kB/s

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp/wg2600hp_1_0_13
$ busybox hexdump -v -e '1/1 "%02x"' key.bin
726f746172790000000000000000000000000000000000000000000000000000

バイナリファイルへの出力省略してワンライナーでも可。

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp2/wg2600hp2_1_0_5
$ echo -n "rotary" | dd bs=32 count=1 conv=sync 2> /dev/null | busybox hexdump -v -e '1/1 "%02x"'
726f746172790000000000000000000000000000000000000000000000000000

OpenSSLを用いてdecrypt

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp/wg2600hp_1_0_13
$ openssl enc -aes-256-cbc -d -in wg2600hp_1_0_13_noheader.bin.pad -out wg2600hp_1_0_13_noheader.bin.pad.dec -K 726f746172790000000000000000000000000000000000000000000000000000 -iv 0 -nopad

完了

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp/wg2600hp_1_0_13
$ busybox hexdump -n 128 -C wg2600hp_1_0_13_noheader.bin.pad.dec
00000000  55 53 42 20 41 54 45 52  4d 57 4c 33 30 35 30 00  |USB ATERMWL3050.|
00000010  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
00000020  00 00 ff ff 00 00 00 69  00 00 00 18 25 c3 00 00  |.......i....%...|
00000030  00 00 00 00 00 00 00 00  56 45 52 53 49 4f 4e 3a  |........VERSION:|
00000040  20 33 2e 32 30 2e 36 37  0a 4f 45 4d 31 20 56 45  | 3.20.67.OEM1 VE|
00000050  52 53 49 4f 4e 3a 20 31  2e 30 2e 31 33 0a 43 6f  |RSION: 1.0.13.Co|
00000060  70 79 72 69 67 68 74 28  63 29 20 4e 45 43 20 50  |pyright(c) NEC P|
00000070  6c 61 74 66 6f 72 6d 73  2c 20 4c 74 64 2e 20 32  |latforms, Ltd. 2|
00000080

WG2600HP2

某フリマアプリで、ブート不可のジャンクとして出品されていたものを購入。
説明を見た限りではブートローダは生きており、KernelかRootfsの破損によりブートできなくなっているものと思われた。

WG2600HP2のコードネームはWG2600HPと同じ “ROTARY” であり、ハードウェアの差異はほとんど無いと思われる。

U-Boot

  • help
    boot> help
    ?       - alias for 'help'
    additional- [NECPF] additional information read/write/erase command
    ar8xxx_dump- Dump ar8xxx registers
    base    - print or set address offset
    bdinfo  - print Board Info structure
    bootipq - bootipq from flash device
    bootm   - boot application image from memory
    bootp   - boot image via network using BOOTP/TFTP protocol
    bootz   - boot Linux zImage image from memory
    chpart  - change active partition
    ckcrc   - [NECPF] check the crc32 in RAM
    cmp     - memory compare
    configid- [NECPF] configid read/write command
    cp      - memory copy
    crc32   - checksum calculation
    debug   - [NECPF] debug command
    dhcp    - boot image via network using DHCP/TFTP protocol
    dumpipq_data- dumpipq_data crashdump collection from memory
    echo    - echo args to console
    env     - environment handling commands
    errorlog- [NECPF] errorlog command
    ethspeed- Force ethernet speed to 10/100/autoneg
    exit    - exit script
    false   - do nothing, unsuccessfully
    fdt     - flattened device tree utility commands
    fuseipq - fuse QFPROM registers from memory
    
    
    go      - start application at address 'addr'
    help    - print command description/usage
    i2c     - I2C sub-system
    iminfo  - print header information for application image
    imxtract- extract a part of a multi-image
    ipq_nand- Switch between SBL and Linux kernel page layout.
    loadb   - load binary file over serial line (kermit mode)
    loady   - load binary file over serial line (ymodem mode)
    loop    - infinite loop on address range
    macaddr - [NECPF] macaddr read/write command
    md      - memory display
    mii     - MII utility commands
    mm      - memory modify (auto-incrementing address)
    mmc     - MMC sub system
    mmcinfo - display MMC info
    mphyrd  - qca8511 packet processor PHY register display
    mphyrw  - qca8511 packet processor PHY register write (fill)
    mprd    - qca8511 packet processor register display
    mprw    - qca8511 packet processor register write (fill)
    mtdparts- define flash/nand partitions
    mtest   - simple RAM read/write test
    mw      - memory write (fill)
    nand    - NAND sub-system
    nboot   - boot from NAND device
    nm      - memory modify (constant address)
    pci     - list and access PCI Configuration Space
    ping    - send ICMP ECHO_REQUEST to network host
    pkg_info- [NECPF] show package information
    presetid- [NECPF] presetid read/write/erase command
    printenv- print environment variables
    randomkey- [NECPF] randomkey read/write command
    reset   - Perform RESET of the CPU
    rf_regdmn- [NECPF] rf_regdmn read command
    rf_serial- [NECPF] rf_serial read command
    run     - run commands in an environment variable
    saveenv - save environment variables to persistent storage
    serial  - [NECPF] serial read/write/erase command
    setenv  - set environment variables
    sf      - SPI flash sub-system
    show_version- [NECPF] show boot/tp/system version
    showvar - print local hushshell variables
    smeminfo- print SMEM FLASH information
    source  - run script from memory
    test    - minimal test like /bin/sh
    tftpboot- boot image via network using TFTP protocol
    tftpput - TFTP put command, for uploading files to a server
    tftpsrv - act as a TFTP server and boot the first received file
    tp      - [NECPF] run test program
    true    - do nothing, successfully
    uartrd  - uartrd from flash device
    uartwr  - uartwr from flash device
    ubi     - ubi commands
    usb     - USB sub-system
    usbboot - boot from USB device
    version - print monitor, compiler and linker version
    

  • version

    boot> version
    
    
    U-Boot 2012.07 [Standard IPQ806X.LN,local] (May 20 2016 - 11:16:41)
    arm-openwrt-linux-uclibcgnueabi-gcc (Linaro GCC 4.6-2012.02) 4.6.3 20120201 (prerelease)
    GNU ld (GNU Binutils) 2.22
    

  • show_version

    boot> show_version
    TP Version = 2.0.0
    Boot Version = 2.0.0
    System (Kernel) Size : 1923472 Bytes (0x001d5990)
    NEC_VERSION=3.39.20
    OEM_VERSION=1.0.5
    

  • printenv

    boot> printenv
    baudrate=115200
    bootargs=console=ttyHSL1,115200n8
    bootcmd=bootipq
    bootdelay=2
    eth1addr=98:f1:99:**:**:**
    ethact=eth1
    ethaddr=98:f1:99:**:**:**
    ethrotate=no
    ipaddr=192.168.0.1
    machid=1260
    stderr=serial
    stdin=serial
    stdout=serial
    
    
    Environment size: 255/65532 bytes
    

  • pkg_info

    boot> pkg_info
    PKG NAME : ROTARY
    CPU : ARMv7 Processor [512f04d0] revision 0
    RAM : 510 MiB
    Flash : 32 MiB
    Device         : S25FL256S
    Sector size    : 64 KiB
    DIPSW : 0x3
    

  • mii device
    boot> mii device
    MII devices: 'IPQ MDIO1' 'IPQ MDIO2'
    Current device: 'IPQ MDIO2'
    

  • help debug
    boot> help debug
    debug - [NECPF] debug command
    
    
    Usage:
    debug - [NECPF] debug command
    debug watchdog enable  - Enable watchdog timer.
    debug watchdog disable - Disable watchdog timer.
    debug watchdog reboot  - Wait for a watchdog timer to expire.
    debug watchdog settime - Set a watchdog time. [sec]
    debug flash read  - flash read.
    debug flash write - flash write.
    debug flash erase - flash erase.
    debug flash info  - flash information.
    debug flash diag  - self diagnostic for flash device.
    debug l2sw read  - l2sw register read.
    debug l2sw write - l2sw register write.
    debug l2sw dump  - l2sw register dump.
    

  • debug l2sw dump

    boot> debug l2sw dump
    ### PHY ###
    
    
    ADDR : PHY0 PHY1 PHY2 PHY3 PHY4
    -----+-------------------------
    0 : 3100 1000 3100 3100 3100
    1 : 7949 7949 7949 7949 7949
    2 : 004d 004d 004d 004d 004d
    3 : d036 d036 d036 d036 d036
    4 : 1de1 1de1 1de1 1de1 1de1
    5 : 0000 0000 0000 0000 0000
    6 : 0004 0004 0004 0004 0004
    7 : 2801 2801 2801 2801 2801
    8 : 0000 0000 0000 0000 0000
    9 : 0200 0200 0200 0200 0200
    a : 0000 0000 0000 0000 0000
    b : 0000 0000 0000 0000 0000
    c : 0000 0000 0000 0000 0000
    d : 4007 4007 4007 4007 4007
    e : 0000 0000 0000 0000 0000
    f : 2000 2000 2000 2000 2000
    10 : 0862 0862 0862 0862 0862
    11 : 0010 0010 0010 0010 0010
    12 : 0000 0000 0000 0000 0000
    13 : 0000 0000 0000 0000 0000
    14 : 082c 082c 082c 082c 082c
    15 : 0000 0000 0000 0000 0000
    16 : 2400 2400 2400 2400 2400
    17 : 0000 0000 0000 0000 0000
    18 : 3200 3200 3200 3200 3200
    19 : 1000 1000 1000 1000 1000
    1a : 0000 0000 0000 0000 0000
    1b : 0000 0000 0000 0000 0000
    1c : 0000 0000 0000 0000 0000
    1d : 003f 003f 003f 003f 003f
    1e : 8000 8000 8000 8000 8000
    1f : 0000 0000 0000 0000 0000
    
    ### DEBUG ###
    
    ADDR : PHY0 PHY1 PHY2 PHY3 PHY4
    -----+-------------------------
    0 : 02ee 02ee 02ee 02ee 02ee
    1 : 02b2 01b1 01b1 01b1 02b2
    2 : 3220 3220 3220 3110 3220
    3 : 3f11 3f11 3f11 3f22 3f22
    4 : fbbb fbbb fbbb fbbb fbbb
    5 : 1c47 1c47 1c47 1c47 1c47
    6 : 0000 0000 0000 0000 0000
    7 : 0000 0000 0000 0000 0000
    8 : 1c00 1c00 1c00 1c00 1c00
    9 : 8000 8000 8000 8000 8000
    a : 3000 3000 3000 3000 3000
    b : bc40 bc40 bc40 bc40 bc40
    c : 6001 6001 6001 6001 6001
    d : 2820 a820 2820 2820 2820
    e : 0003 0003 0003 0003 0003
    f : 0030 0030 0030 0030 0030
    10 : 0000 0000 0000 0000 0000
    11 : 7552 7552 7552 7552 7552
    12 : 4c04 4c04 4c04 4c04 4c04
    13 : c01b c01b c01b c01b c01b
    14 : 0752 0752 0752 0752 0752
    15 : b220 b220 b220 b220 b220
    16 : 8000 8000 8000 8000 8000
    17 : 0000 0000 0000 0000 0000
    18 : 62ea 62ea 62ea 62ea 62ea
    19 : 01f4 01f4 01f4 01f4 01f4
    1a : 01d7 01d7 01d7 01d7 01d7
    1b : 0176 02ee 0176 0176 0176
    1c : 3cbb 3cbb 3cbb 3cbb 3cbb
    1d : 00ec 00ec 00ec 00ec 00ec
    1e : 0076 0076 0076 0076 0076
    1f : 0000 0000 0000 0000 0000
    20 : 0000 0000 0000 0000 0000
    21 : 2d15 2d15 2d15 2d15 2d15
    22 : 1f6a 1f6a 1f6a 1f6a 1f6a
    23 : a200 a200 a200 a200 a200
    24 : 1000 5000 1000 1000 1000
    25 : 0000 0000 0000 0000 0000
    26 : 0000 0000 0000 0002 0000
    27 : 1000 1000 1000 1000 1000
    28 : 0000 0000 0000 0000 0000
    29 : 36dd 36dd 36dd 36dd 36dd
    2a : 0000 0000 0000 0000 0000
    2b : 3a98 3a98 3a98 3a98 3a98
    2c : 0000 0000 0000 0000 0000
    2d : 0000 0000 0000 0000 0000
    2e : 0000 0000 0000 0000 0000
    2f : 0000 0000 0000 0000 0000
    30 : 0000 0000 0000 0000 0000
    31 : 0000 0000 0000 0000 0000
    32 : 2200 2200 2200 2200 2200
    33 : 2200 2200 2200 2200 2200
    34 : 2200 2200 2200 2200 2200
    35 : 0000 0000 0000 0000 0000
    36 : e1ec e1ec e1ec e1ec e1ec
    37 : 6000 6000 6000 6000 6000
    38 : 1111 1111 1111 1111 1111
    39 : 7359 7359 7359 7359 7359
    3a : ee6b ee6b ee6b ee6b ee6b
    3b : 5a5a 5a5a 5a5a 5a5a 5a5a
    3c : 5a5a 5a5a 5a5a 5a5a 5a5a
    3d : 6860 6860 6860 6860 6860
    3e : e0d8 e0d8 e0d8 e0d8 e0d8
    3f : 8000 8000 8000 8000 8000
    
    ### PHY MMD3 ###
    
    ADDR : PHY0 PHY1 PHY2 PHY3 PHY4
    -----+-------------------------
    0 : 0000 0000 0000 0000 0000
    1 : 0000 0000 0000 0000 0000
    2 : 0000 0000 0000 0000 0000
    3 : 0000 0000 0000 0000 0000
    4 : 0000 0000 0000 0000 0000
    5 : 0089 0089 0089 0089 0089
    6 : 0000 0000 0000 0000 0000
    7 : 0000 0000 0000 0000 0000
    8 : 0000 0000 0000 0000 0000
    9 : 0000 0000 0000 0000 0000
    a : 0000 0000 0000 0000 0000
    b : 0000 0000 0000 0000 0000
    c : 0000 0000 0000 0000 0000
    d : 0000 0000 0000 0000 0000
    e : 0000 0000 0000 0000 0000
    f : 0000 0000 0000 0000 0000
    10 : 0000 0000 0000 0000 0000
    11 : 0000 0000 0000 0000 0000
    12 : 0000 0000 0000 0000 0000
    13 : 0000 0000 0000 0000 0000
    14 : 0006 0006 0006 0006 0006
    15 : 0000 0000 0000 0000 0000
    16 : 0000 0000 0000 0000 0000
    17 : 0000 0000 0000 0000 0000
    18 : 0000 0000 0000 0000 0000
    19 : 0000 0000 0000 0000 0000
    1a : 0000 0000 0000 0000 0000
    1b : 0000 0000 0000 0000 0000
    1c : 0000 0000 0000 0000 0000
    1d : 0000 0000 0000 0000 0000
    1e : 0000 0000 0000 0000 0000
    1f : 0000 0000 0000 0000 0000
    20 : 0000 0000 0000 0000 0000
    21 : 0000 0000 0000 0000 0000
    22 : 0000 0000 0000 0000 0000
    23 : 0000 0000 0000 0000 0000
    24 : 0000 0000 0000 0000 0000
    25 : 0000 0000 0000 0000 0000
    26 : 0000 0000 0000 0000 0000
    27 : 0000 0000 0000 0000 0000
    28 : 0000 0000 0000 0000 0000
    29 : 0000 0000 0000 0000 0000
    2a : 0000 0000 0000 0000 0000
    2b : 0000 0000 0000 0000 0000
    2c : 0000 0000 0000 0000 0000
    2d : 0000 0000 0000 0000 0000
    2e : 0000 0000 0000 0000 0000
    2f : 0000 0000 0000 0000 0000
    30 : 0000 0000 0000 0000 0000
    31 : 0000 0000 0000 0000 0000
    32 : 0000 0000 0000 0000 0000
    33 : 0000 0000 0000 0000 0000
    34 : 0000 0000 0000 0000 0000
    35 : 0000 0000 0000 0000 0000
    36 : 0000 0000 0000 0000 0000
    37 : 0000 0000 0000 0000 0000
    38 : 0000 0000 0000 0000 0000
    39 : 0000 0000 0000 0000 0000
    3a : 0000 0000 0000 0000 0000
    3b : 0000 0000 0000 0000 0000
    3c : 0000 0000 0000 0000 0000
    3d : 0000 0000 0000 0000 0000
    3e : 0000 0000 0000 0000 0000
    3f : 0000 0000 0000 0000 0000
    40 : 0000 0000 0000 0000 0000
    41 : 0000 0000 0000 0000 0000
    42 : 0000 0000 0000 0000 0000
    43 : 0000 0000 0000 0000 0000
    44 : 0000 0000 0000 0000 0000
    45 : 0000 0000 0000 0000 0000
    46 : 0000 0000 0000 0000 0000
    47 : 0000 0000 0000 0000 0000
    48 : 0000 0000 0000 0000 0000
    49 : 0000 0000 0000 0000 0000
    4a : 0000 0000 0000 0000 0000
    4b : 0000 0000 0000 0000 0000
    4c : 0000 0000 0000 0000 0000
    4d : 0000 0000 0000 0000 0000
    4e : 0000 0000 0000 0000 0000
    4f : 0000 0000 0000 0000 0000
    50 : 0000 0000 0000 0000 0000
    51 : 0000 0000 0000 0000 0000
    52 : 0000 0000 0000 0000 0000
    53 : 0000 0000 0000 0000 0000
    54 : 0000 0000 0000 0000 0000
    55 : 0000 0000 0000 0000 0000
    56 : 0000 0000 0000 0000 0000
    57 : 0000 0000 0000 0000 0000
    58 : 0000 0000 0000 0000 0000
    59 : 0000 0000 0000 0000 0000
    5a : 0000 0000 0000 0000 0000
    5b : 0000 0000 0000 0000 0000
    5c : 0000 0000 0000 0000 0000
    5d : 0000 0000 0000 0000 0000
    5e : 0000 0000 0000 0000 0000
    5f : 0000 0000 0000 0000 0000
    60 : 0000 0000 0000 0000 0000
    61 : 0000 0000 0000 0000 0000
    62 : 0000 0000 0000 0000 0000
    63 : 0000 0000 0000 0000 0000
    64 : 0000 0000 0000 0000 0000
    65 : 0000 0000 0000 0000 0000
    66 : 0000 0000 0000 0000 0000
    67 : 0000 0000 0000 0000 0000
    68 : 0000 0000 0000 0000 0000
    69 : 0000 0000 0000 0000 0000
    6a : 0000 0000 0000 0000 0000
    6b : 0000 0000 0000 0000 0000
    6c : 0000 0000 0000 0000 0000
    6d : 0000 0000 0000 0000 0000
    6e : 0000 0000 0000 0000 0000
    6f : 0000 0000 0000 0000 0000
    70 : 0000 0000 0000 0000 0000
    71 : 0000 0000 0000 0000 0000
    72 : 0000 0000 0000 0000 0000
    73 : 0000 0000 0000 0000 0000
    74 : 0000 0000 0000 0000 0000
    75 : 0000 0000 0000 0000 0000
    76 : 0000 0000 0000 0000 0000
    77 : 0000 0000 0000 0000 0000
    78 : 0000 0000 0000 0000 0000
    79 : 0000 0000 0000 0000 0000
    7a : 0000 0000 0000 0000 0000
    7b : 0000 0000 0000 0000 0000
    7c : 0000 0000 0000 0000 0000
    7d : 0000 0000 0000 0000 0000
    7e : 0000 0000 0000 0000 0000
    7f : 0000 0000 0000 0000 0000
    8000 : 0000 0000 0000 0000 0000
    8001 : 8187 8187 8187 8187 8187
    8002 : 6a24 6a24 6a24 6a24 6a24
    8003 : 5d09 5d09 5d09 5d09 5d09
    8004 : 63f3 63f3 63f3 63f3 63f3
    8005 : 8b32 8b32 8b32 8b32 8b32
    8006 : c000 c000 c000 c000 c000
    8007 : 83f6 83f6 83f6 83f6 83f6
    8008 : 3030 3030 3030 3030 3030
    8009 : 00d1 00d1 00d1 00d1 00d1
    800a : 1040 1040 1040 1040 1040
    800b : 0094 0094 0094 0094 0094
    800c : 00eb 00eb 00eb 00eb 00eb
    800d : cb3f cb3f cb3f cb3f cb3f
    800e : 0000 0000 0000 0000 0000
    800f : 1000 1000 1000 1000 1000
    8010 : 0000 0000 0000 0000 0000
    8011 : 00c0 00c0 00c0 00c0 00c0
    8012 : 0000 0000 0000 0000 0000
    8013 : 0000 0000 0000 0000 0000
    8014 : 0000 0000 0000 0000 0000
    8015 : 0000 0000 0000 0000 0000
    8016 : 0000 0000 0000 0000 0000
    8017 : 0000 0000 0000 0000 0000
    8018 : 0000 0000 0000 0000 0000
    8019 : 0000 0000 0000 0000 0000
    801a : 0000 0000 0000 0000 0000
    801b : 0000 0000 0000 0000 0000
    801c : 0000 0000 0000 0000 0000
    801d : 0000 0000 0000 0000 0000
    801e : 0000 0000 0000 0000 0000
    801f : 0000 0000 0000 0000 0000
    8020 : 0000 0000 0000 0000 0000
    8021 : 0000 0000 0000 0000 0000
    8022 : 0000 0000 0000 0000 0000
    8023 : 0000 0000 0000 0000 0000
    8024 : 0000 0000 0000 0000 0000
    8025 : 0000 0000 0000 0000 0000
    8026 : 0000 0000 0000 0000 0000
    8027 : 0000 0000 0000 0000 0000
    8028 : 0000 0000 0000 0000 0000
    8029 : 0000 0000 0000 0000 0000
    802a : 0000 0000 0000 0000 0000
    802b : 0000 0000 0000 0000 0000
    802c : 0000 0000 0000 0000 0000
    802d : 0000 0000 0000 0000 0000
    802e : 0000 0000 0000 0000 0000
    802f : 0000 0000 0000 0000 0000
    8030 : 0000 0000 0000 0000 0000
    8031 : 0000 0000 0000 0000 0000
    8032 : 0000 0000 0000 0000 0000
    8033 : 0000 0000 0000 0000 0000
    8034 : 0000 0000 0000 0000 0000
    8035 : 0000 0000 0000 0000 0000
    8036 : 0000 0000 0000 0000 0000
    8037 : 0000 0000 0000 0000 0000
    8038 : 0000 0000 0000 0000 0000
    8039 : 0000 0000 0000 0000 0000
    803a : 0000 0000 0000 0000 0000
    803b : 0000 0000 0000 0000 0000
    803c : 0000 0000 0000 0000 0000
    803d : 0000 0000 0000 0000 0000
    803e : 0000 0000 0000 0000 0000
    803f : 0000 0000 0000 0000 0000
    8040 : 0000 0000 0000 0000 0000
    8041 : 0000 0000 0000 0000 0000
    8042 : 0000 0000 0000 0000 0000
    8043 : 0000 0000 0000 0000 0000
    8044 : 0000 0000 0000 0000 0000
    8045 : 0000 0000 0000 0000 0000
    8046 : 0000 0000 0000 0000 0000
    8047 : 0000 0000 0000 0000 0000
    8048 : 0000 0000 0000 0000 0000
    8049 : 0000 0000 0000 0000 0000
    804a : 0000 0000 0000 0000 0000
    804b : 0000 0000 0000 0000 0000
    804c : 0000 0000 0000 0000 0000
    804d : 0000 0000 0000 0000 0000
    804e : 0062 0062 0062 0062 0062
    804f : 07a7 07a7 07a7 07a7 07a7
    8050 : 2956 2956 2956 2956 2956
    8051 : 2e70 2e70 2e70 2e70 2e70
    8052 : 5580 5580 5580 5580 5580
    8053 : 005e 005e 005e 005e 005e
    8054 : 52b4 52b4 52b4 52b4 52b4
    8055 : 0e14 0e14 0e14 0e14 0e14
    8056 : 0148 0148 0148 0148 0148
    8057 : 06e2 06e2 06e2 06e2 06e2
    8058 : 0dbd 0dbd 0dbd 0dbd 0dbd
    8059 : 001d 001d 001d 001d 001d
    805a : 0000 0000 0000 0000 0000
    805b : 1917 1917 1917 1917 1917
    805c : 312c 312c 312c 312c 312c
    805d : 10b1 10b1 10b1 10b1 10b1
    805e : 000b 000b 000b 000b 000b
    805f : 480f 480f 480f 480f 480f
    8060 : 0175 0175 0175 0175 0175
    8061 : 2e2e 2e2e 2e2e 2e2e 2e2e
    8062 : 0000 0000 0000 0000 0000
    8063 : 4064 4064 4064 4064 4064
    8064 : 2222 1111 2222 2222 2222
    8065 : 0000 0000 0001 0000 0000
    8066 : 0001 0000 0001 0001 0000
    8067 : 0001 0000 0001 0001 0001
    8068 : 0001 0001 0000 0000 0001
    8069 : d0d0 d0d0 d0d0 d0d0 d0d0
    806a : d0d0 d0d0 d0d0 d0d0 d0d0
    806b : 0000 0000 0000 0000 0000
    806c : 1916 1916 1916 1916 1916
    806d : 0000 0000 0000 0000 0000
    806e : 888b 888b 888b 888b 888b
    806f : 67ef 67ef 67ef 67ef 67ef
    8070 : 0300 0300 0300 0300 0300
    8071 : 0000 0000 0000 0000 0000
    8072 : 0000 0000 0000 0000 0000
    8073 : 0000 0000 0000 0000 0000
    8074 : 0000 0000 0000 0000 0000
    8075 : 0000 0000 0000 0000 0000
    8076 : 0000 0000 0000 0000 0000
    8077 : 0000 0000 0000 0000 0000
    8078 : 0000 0000 0000 0000 0000
    8079 : 0000 0000 0000 0000 0000
    807a : 0000 0000 0000 0000 0000
    807b : 0000 0000 0000 0000 0000
    807c : 0000 0000 0000 0000 0000
    807d : 0000 0000 0000 0000 0000
    807e : 0000 0000 0000 0000 0000
    807f : 0000 0000 0000 0000 0000
    
    ### PHY MMD7 ###
    
    ADDR : PHY0 PHY1 PHY2 PHY3 PHY4
    -----+-------------------------
    0 : 2000 2000 2000 2000 2000
    1 : 0000 0000 0000 0000 0000
    2 : 0000 0000 0000 0000 0000
    3 : 0000 0000 0000 0000 0000
    4 : 0000 0000 0000 0000 0000
    5 : 0089 0089 0089 0089 0089
    6 : 0000 0000 0000 0000 0000
    7 : 0000 0000 0000 0000 0000
    8 : 0000 0000 0000 0000 0000
    9 : 0000 0000 0000 0000 0000
    a : 0000 0000 0000 0000 0000
    b : 0000 0000 0000 0000 0000
    c : 0000 0000 0000 0000 0000
    d : 0000 0000 0000 0000 0000
    e : 0000 0000 0000 0000 0000
    f : 0000 0000 0000 0000 0000
    10 : 0000 0000 0000 0000 0000
    11 : 0000 0000 0000 0000 0000
    12 : 0000 0000 0000 0000 0000
    13 : 0000 0000 0000 0000 0000
    14 : 0000 0000 0000 0000 0000
    15 : 0000 0000 0000 0000 0000
    16 : 0000 0000 0000 0000 0000
    17 : 0000 0000 0000 0000 0000
    18 : 0000 0000 0000 0000 0000
    19 : 0000 0000 0000 0000 0000
    1a : 0000 0000 0000 0000 0000
    1b : 0000 0000 0000 0000 0000
    1c : 0000 0000 0000 0000 0000
    1d : 0000 0000 0000 0000 0000
    1e : 0000 0000 0000 0000 0000
    1f : 0000 0000 0000 0000 0000
    20 : 0000 0000 0000 0000 0000
    21 : 0000 0000 0000 0000 0000
    22 : 0000 0000 0000 0000 0000
    23 : 0000 0000 0000 0000 0000
    24 : 0000 0000 0000 0000 0000
    25 : 0000 0000 0000 0000 0000
    26 : 0000 0000 0000 0000 0000
    27 : 0000 0000 0000 0000 0000
    28 : 0000 0000 0000 0000 0000
    29 : 0000 0000 0000 0000 0000
    2a : 0000 0000 0000 0000 0000
    2b : 0000 0000 0000 0000 0000
    2c : 0000 0000 0000 0000 0000
    2d : 0000 0000 0000 0000 0000
    2e : 0000 0000 0000 0000 0000
    2f : 0000 0000 0000 0000 0000
    30 : 0000 0000 0000 0000 0000
    31 : 0000 0000 0000 0000 0000
    32 : 0000 0000 0000 0000 0000
    33 : 0000 0000 0000 0000 0000
    34 : 0000 0000 0000 0000 0000
    35 : 0000 0000 0000 0000 0000
    36 : 0000 0000 0000 0000 0000
    37 : 0000 0000 0000 0000 0000
    38 : 0000 0000 0000 0000 0000
    39 : 0000 0000 0000 0000 0000
    3a : 0000 0000 0000 0000 0000
    3b : 0000 0000 0000 0000 0000
    3c : 0000 0000 0000 0000 0000
    3d : 0000 0000 0000 0000 0000
    3e : 0000 0000 0000 0000 0000
    3f : 0000 0000 0000 0000 0000
    40 : 0000 0000 0000 0000 0000
    41 : 0000 0000 0000 0000 0000
    42 : 0000 0000 0000 0000 0000
    43 : 0000 0000 0000 0000 0000
    44 : 0000 0000 0000 0000 0000
    45 : 0000 0000 0000 0000 0000
    46 : 0000 0000 0000 0000 0000
    47 : 0000 0000 0000 0000 0000
    48 : 0000 0000 0000 0000 0000
    49 : 0000 0000 0000 0000 0000
    4a : 0000 0000 0000 0000 0000
    4b : 0000 0000 0000 0000 0000
    4c : 0000 0000 0000 0000 0000
    4d : 0000 0000 0000 0000 0000
    4e : 0000 0000 0000 0000 0000
    4f : 0000 0000 0000 0000 0000
    50 : 0000 0000 0000 0000 0000
    51 : 0000 0000 0000 0000 0000
    52 : 0000 0000 0000 0000 0000
    53 : 0000 0000 0000 0000 0000
    54 : 0000 0000 0000 0000 0000
    55 : 0000 0000 0000 0000 0000
    56 : 0000 0000 0000 0000 0000
    57 : 0000 0000 0000 0000 0000
    58 : 0000 0000 0000 0000 0000
    59 : 0000 0000 0000 0000 0000
    5a : 0000 0000 0000 0000 0000
    5b : 0000 0000 0000 0000 0000
    5c : 0000 0000 0000 0000 0000
    5d : 0000 0000 0000 0000 0000
    5e : 0000 0000 0000 0000 0000
    5f : 0000 0000 0000 0000 0000
    60 : 0000 0000 0000 0000 0000
    61 : 0000 0000 0000 0000 0000
    62 : 0000 0000 0000 0000 0000
    63 : 0000 0000 0000 0000 0000
    64 : 0000 0000 0000 0000 0000
    65 : 0000 0000 0000 0000 0000
    66 : 0000 0000 0000 0000 0000
    67 : 0000 0000 0000 0000 0000
    68 : 0000 0000 0000 0000 0000
    69 : 0000 0000 0000 0000 0000
    6a : 0000 0000 0000 0000 0000
    6b : 0000 0000 0000 0000 0000
    6c : 0000 0000 0000 0000 0000
    6d : 0000 0000 0000 0000 0000
    6e : 0000 0000 0000 0000 0000
    6f : 0000 0000 0000 0000 0000
    70 : 0000 0000 0000 0000 0000
    71 : 0000 0000 0000 0000 0000
    72 : 0000 0000 0000 0000 0000
    73 : 0000 0000 0000 0000 0000
    74 : 0000 0000 0000 0000 0000
    75 : 0000 0000 0000 0000 0000
    76 : 0000 0000 0000 0000 0000
    77 : 0000 0000 0000 0000 0000
    78 : 0000 0000 0000 0000 0000
    79 : 0000 0000 0000 0000 0000
    7a : 0000 0000 0000 0000 0000
    7b : 0000 0000 0000 0000 0000
    7c : 0000 0000 0000 0000 0000
    7d : 0000 0000 0000 0000 0000
    7e : 0000 0000 0000 0000 0000
    7f : 0000 0000 0000 0000 0000
    8000 : 0000 0000 0000 0000 0000
    8001 : 0000 0000 0000 0000 0000
    8002 : 0000 0000 0000 0000 0000
    8003 : 0000 0000 0000 0000 0000
    8004 : 0000 0000 0000 0000 0000
    8005 : 0000 0000 0000 0000 0000
    8006 : 0000 0000 0000 0000 0000
    8007 : 0000 0000 0000 0000 0000
    8008 : 0000 0000 0000 0000 0000
    8009 : 0000 0000 0000 0000 0000
    800a : 0000 0000 0000 0000 0000
    800b : 0000 0000 0000 0000 0000
    800c : 0000 0000 0000 0000 0000
    800d : 0000 0000 0000 0000 0000
    800e : 0000 0000 0000 0000 0000
    800f : 0000 0000 0000 0000 0000
    8010 : 0000 0000 0000 0000 0000
    8011 : 0000 0000 0000 0000 0000
    8012 : 0000 0000 0000 0000 0000
    8013 : 0000 0000 0000 0000 0000
    8014 : 0000 0000 0000 0000 0000
    8015 : 0000 0000 0000 0000 0000
    8016 : 0000 0000 0000 0000 0000
    8017 : a000 a000 a000 a000 a000
    8018 : 0000 0000 0000 0000 0000
    8019 : 0000 0000 0000 0000 0000
    801a : 392a 392a 392a 392a 392a
    801b : 0000 0000 0000 0000 0000
    801c : 0000 0000 0000 0000 0000
    801d : 0000 0000 0000 0000 0000
    801e : 00c0 00c0 00c0 00c0 00c0
    801f : 0000 0000 0000 0000 0000
    8020 : 0000 0000 0000 0000 0000
    8021 : 0000 0000 0000 0000 0000
    8022 : 0000 0000 0000 0000 0000
    8023 : 0000 0000 0000 0000 0000
    8024 : 0d10 0d10 0d10 0d10 0d10
    8025 : 0d0d 0d0d 0d0d 0d0d 0d0d
    8026 : 0a0a 0a0a 0a0a 0a0a 0a0a
    8027 : 8a05 8a05 8a05 8a05 8a05
    8028 : 001f 001f 001f 001f 001f
    8029 : 0000 0000 0000 0000 0000
    802a : 0000 0000 0000 0000 0000
    802b : 0000 0000 0000 0000 0000
    802c : 0000 0000 0000 0000 0000
    802d : 0000 0000 0000 0000 0000
    802e : 0000 0000 0000 0000 0000
    802f : 0000 0000 0000 0000 0000
    8030 : 190f 190f 190f 190f 190f
    8031 : 0e05 0e05 0e05 0e05 0e05
    8032 : 0008 0008 0008 0008 0008
    8033 : 0400 0400 0400 0400 0400
    8034 : 0000 0000 0000 0000 0000
    8035 : 0000 0000 0000 0000 0000
    8036 : 0000 0000 0000 0000 0000
    8037 : 0000 0000 0000 0000 0000
    8038 : 026a 0000 0000 0000 0000
    8039 : 0cb9 0cb9 0cb9 0cb9 0cb9
    803a : 08a1 08a1 08a1 08a1 08a1
    803b : 0000 0000 0000 0000 0000
    803c : 0000 0000 0000 0000 0000
    803d : 0000 0000 0000 0000 0000
    803e : 0000 0000 0000 0000 0000
    803f : 0000 0000 0000 0000 0000
    8040 : 0000 0000 0000 0000 0000
    8041 : 0000 0000 0000 0000 0000
    8042 : 0000 0000 0000 0000 0000
    8043 : 0000 0000 0000 0000 0000
    8044 : 0000 0000 0000 0000 0000
    8045 : 0000 0000 0000 0000 0000
    8046 : 0000 0000 0000 0000 0000
    8047 : 0000 0000 0000 0000 0000
    8048 : 0000 0000 0000 0000 0000
    8049 : 0000 0000 0000 0000 0000
    804a : 0000 0000 0000 0000 0000
    804b : 00f0 00f0 00f0 00f0 00f0
    804c : 0007 0007 0007 0007 0007
    804d : 0000 0000 0000 0000 0000
    804e : 0000 0000 0000 0000 0000
    804f : 0000 0000 0000 0000 0000
    8050 : 0000 0000 0000 0000 0000
    8051 : 0000 0000 0000 0000 0000
    8052 : 0000 0000 0000 0000 0000
    8053 : 0000 0000 0000 0000 0000
    8054 : 0000 0000 0000 0000 0000
    8055 : 0000 0000 0000 0000 0000
    8056 : 0000 0000 0000 0000 0000
    8057 : 0000 0000 0000 0000 0000
    8058 : 0000 0000 0000 0000 0000
    8059 : 0000 0000 0000 0000 0000
    805a : 0000 0000 0000 0000 0000
    805b : 0000 0000 0000 0000 0000
    805c : 0000 0000 0000 0000 0000
    805d : 0000 0000 0000 0000 0000
    805e : 0000 0000 0000 0000 0000
    805f : 0000 0000 0000 0000 0000
    8060 : 0000 0000 0000 0000 0000
    8061 : 0000 0000 0000 0000 0000
    8062 : 0000 0000 0000 0000 0000
    8063 : 0000 0000 0000 0000 0000
    8064 : 0000 0000 0000 0000 0000
    8065 : 0000 0000 0000 0000 0000
    8066 : 0000 0000 0000 0000 0000
    8067 : 0000 0000 0000 0000 0000
    8068 : 0000 0000 0000 0000 0000
    8069 : 0000 0000 0000 0000 0000
    806a : 0000 0000 0000 0000 0000
    806b : 0000 0000 0000 0000 0000
    806c : 0000 0000 0000 0000 0000
    806d : 0000 0000 0000 0000 0000
    806e : 0000 0000 0000 0000 0000
    806f : 0000 0000 0000 0000 0000
    8070 : 0000 0000 0000 0000 0000
    8071 : 0000 0000 0000 0000 0000
    8072 : 0000 0000 0000 0000 0000
    8073 : 0000 0000 0000 0000 0000
    8074 : 0000 0000 0000 0000 0000
    8075 : 0000 0000 0000 0000 0000
    8076 : 0000 0000 0000 0000 0000
    8077 : 0000 0000 0000 0000 0000
    8078 : 0000 0000 0000 0000 0000
    8079 : 0000 0000 0000 0000 0000
    807a : 0000 0000 0000 0000 0000
    807b : 0000 0000 0000 0000 0000
    807c : 0000 0000 0000 0000 0000
    807d : 0000 0000 0000 0000 0000
    807e : 0000 0000 0000 0000 0000
    807f : 0000 0000 0000 0000 0000
    
    ### L2SW ###
    
    ADDR : +0       +4       +8       +c
    -----+------------------------------------
    0 : 00001302 80000080 01000000 06000000
    10 : 002613a0 f0107650 00002586 00003f1f
    20 : 3f000e00 0001008b 00000000 00000000
    30 : 80000700 00000000 0f000000 00000000
    40 : 20700aaa 00000000 000088a8 00000000
    50 : cc36cc36 ca36ca36 c936c936 03ffff00
    60 : 00000001 00000000 00000000 00000000
    70 : b00ee060 03707f07 000005ee 0000004e
    80 : 00001280 000012c2 00001280 00001280
    90 : 00001280 0000004e 00000000 00000000
    a0 : 00000000 00000000 00000000 00000000
    b0 : 00000000 00000000 00000000 00000608
    c0 : 00000000 00000000 80901040 00000000
    d0 : fffbff7e 00000001 00000100 000303ff
    e0 : c74164de
    
    100 : 00000000 00000000 00000000 00000000
    110 : 00000000 00000000 00000000 00000000
    120 : 00240024 00000000 00240024 00000000
    130 : 00110011 00000000 00240024 00000000
    140 : 00240024 00000000 00240024 00000000
    150 : 00240024 00000000 00240024 00000000
    160 : 00240024 00000000 00240024
    
    200 : 00000001 00005000 00400040 00000000
    210 : 00000000 00000000 00000000 00000000
    220 : 00000000 00000000 00000000 00000000
    230 : 00000000 00000000 00000000 00000000
    240 : 00000000 00000000 00000000 00000000
    250 : 00000000 00000000 00000000 00000000
    260 : 00000000 20000000 00000000 00000000
    270 : 0000000f
    
    400 : 00000000 00000000 00000000 00000000
    410 : 00000000 00000000 00000000 00000000
    420 : 00010001 00003040 00020001 00003040
    430 : 00010001 00003040 00010001 00003040
    440 : 00010001 00003040 00010001 00003040
    450 : 00020001 00003040
    
    600 : 00000000 00000000 00000000 00000000
    610 : 00000000 00000000 d0e8002b 00000000
    620 : 001000f0 007f7f7f 00000000 00000000
    630 : 00000000 11111111 22222222 33333333
    640 : 44444444 55555555 66666666 77777777
    650 : 76543210 00000000 00000000 00000000
    660 : 0014003c 00000018 00007000 00140040
    670 : 00000018 00007000 00140039 00000018
    680 : 00007000 00140035 00000018 00007000
    690 : 0014002d 00000018 00007000 0014001d
    6a0 : 00000018 00007000 00140002 00000018
    6b0 : 00007000 00000000 00000000 00000000
    6c0 : 00000000 00000000 00000000 00000000
    6d0 : 00000000 00000000 00000000 00000000
    6e0 : 00000000 00000000 00000000 00000000
    6f0 : 00000000 00000000 00000000 00000000
    700 : 00000000 00000000 00000000 00000000
    710 : ffffffff ffffffff ffffffff
    
    800 : 01200188 00000000 007f000e 00000000
    810 : 54332201 33221100 00000000 00000000
    820 : 00000000 00000000 00000000 00000000
    830 : 10841041 00041041 00041041 00041041
    840 : 00041041 10841041 10841041 00000000
    850 : 00000000 00000000 00000000 00000000
    860 : 00000000 00000000 00000000 00000000
    870 : 00000000 00000000 00000000 00000000
    880 : 00000000 00000000 00000000 00000000
    890 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff
    8a0 : 7fff7fff 7fff7fff 00000000 00000002
    8b0 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff
    8c0 : 7fff7fff 7fff7fff 00000000 00000002
    8d0 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff
    8e0 : 7fff7fff 7fff7fff 00000000 00000002
    8f0 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff
    900 : 7fff7fff 7fff7fff 00000000 00000002
    910 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff
    920 : 7fff7fff 7fff7fff 00000000 00000002
    930 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff
    940 : 7fff7fff 7fff7fff 00000000 00000002
    950 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff
    960 : 7fff7fff 7fff7fff 00000000 00000002
    970 : 28000000 000001c0 28000000 000001c2
    980 : 28000000 000001c2 28000000 000001c2
    990 : 28000000 000001c2 28000000 000001c2
    9a0 : 28000000 000001c0 00000000 00000000
    9b0 : 003a004a 003a004a 003a004a 003a004a
    9c0 : 003a004a 003a004a 003a004a 00000000
    9d0 : 00000000 00000000 00000000 00000000
    9e0 : 00000000 00000000 00000000 00000000
    9f0 : 00000000 00000000 00000000 00000000
    a00 : 00007fff 00047fff 00007fff 00047fff
    a10 : 00007fff 00047fff 00007fff 00047fff
    a20 : 00007fff 00047fff 00007fff 00047fff
    a30 : 00007fff 00047fff 00007fff 00047fff
    a40 : 00007fff 00047fff 00007fff 00047fff
    a50 : 00007fff 00047fff 00007fff 00047fff
    a60 : 00007fff 00047fff 00007fff 00047fff
    a70 : 00007fff 00047fff 00007fff 00047fff
    a80 : 00007fff 00047fff 00007fff 00047fff
    a90 : 00007fff 00047fff 00007fff 00047fff
    aa0 : 00007fff 00047fff 00007fff 00047fff
    ab0 : 00007fff 00047fff 00007fff 00047fff
    ac0 : 00007fff 00047fff 00007fff 00047fff
    ad0 : 00007fff 00047fff 00007fff 00047fff
    ae0 : 00007fff 00047fff 00007fff 00047fff
    af0 : 00007fff 00047fff 00007fff 00047fff
    b00 : 18407fff 00047fff 00000000 00000000
    b10 : 18407fff 00047fff 00000000 00000000
    b20 : 18407fff 00047fff 00000000 00000000
    b30 : 18407fff 00047fff 00000000 00000000
    b40 : 18407fff 00047fff 00000000 00000000
    b50 : 18407fff 00047fff 00000000 00000000
    b60 : 18407fff 00047fff 00000000 00000000
    b70 : 00012345
    
    c00 : 00000000 00000000 00000000 00000000
    c10 : 00000000 00000000 00000000 00000000
    c20 : 00000000 00000000 00000000 00000000
    c30 : 00000000 0500015e 00000000 00000000
    c40 : 00000000 00000000 00000000 00000000
    c50 : 00000000 00000000 00000000 00000000
    c60 : 00000000 00000000 00000000 00000000
    c70 : 00010001 00010001 00010001 00000001
    c80 : 03333333
    

Kernel

RootFSのsquashfsを破損しており、マウントできずKernel Panicを起こしboot loop。

  • bootlog

    U-Boot 2012.07 [Standard IPQ806X.LN,local] (May 20 2016 - 11:16:41)
    
    smem ram ptable found: ver: 0 len: 5
    DRAM:  491 MiB
    NAND:  ipq_nand: unknown NAND device manufacturer: 0 device: 0
    ipq_nand: failed to identify device
    SF: Detected S25FL256S with page size 64 KiB, total 32 MiB
    ipq_spi: page_size: 0x100, sector_size: 0x10000, size: 0x2000000
    32 MiB
    MMC:   
    *** Warning - bad CRC, using default environment
    
    PCI0 Link Intialized
    PCI1 Link Intialized
    In:    serial
    Out:   serial
    Err:   serial
    PRODUCTDATA CRC Verify OK.
    Net:   MAC1 addr:98:f1:99:**:**:**
    athrs17_reg_init: complete
    athrs17_vlan_config ...done
    S17c init  done
    MAC2 addr:98:f1:99:**:**:**
    eth0, eth1
    now booting auto ...
    MMC Device 0 not found
    MMC Device 0 not found
    
    NAND read: device 1 offset 0x860000, size 0x200000
     2097152 bytes read: OK
       Image Name:   Linux-3.4.103
       Image Type:   ARM Linux Kernel Image (uncompressed)
       Data Size:    1923472 Bytes = 1.8 MiB
       Load Address: 41508000
       Entry Point:  41508000
       Verifying Checksum ... OK
       Loading Kernel Image ... OK
    OK
    info: "mtdparts" not set
    Using machid 0x1260 from environment
    
    Starting kernel ...
    
    [    0.000000] Booting Linux on physical CPU 0
    [    0.000000] Linux version 3.4.103 (araki@junmple-build) (gcc version 4.6.3 20120201 (prerelease) (Linaro GCC 4.6-2012.02) ) #1 SMP PREEMPT Fri Jan 18 19:23:35 JST 2019
    [    0.000000] CPU: ARMv7 Processor [512f04d0] revision 0 (ARMv7), cr=10c5387d
    [    0.000000] CPU: PIPT / VIPT nonaliasing data cache, PIPT instruction cache
    [    0.000000] Machine: NECPF Rotary board based Qualcomm Atheros AP148 reference board
    [    0.000000] msm_reserve_memory: 0x44000000, 0x600000
    [    0.000000] msm_reserve_memory: 0x44600000, 0x200000
    [    0.000000] memory pool 3 (start 5fc00000 size 400000) initialized
    [    0.000000] Memory policy: ECC disabled, Data cache writealloc
    [    0.000000] smem_find(137, 80): wrong size 72
    [    0.000000] socinfo_init: v6, id=202, ver=2.0, raw_id=2064, raw_ver=2064, hw_plat=0,  hw_plat_ver=65536
    [    0.000000]  accessory_chip=0 hw_plat_subtype=0
    [    0.000000] PERCPU: Embedded 8 pages/cpu @c0c67000 s10496 r8192 d14080 u32768
    [    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 121642
    [    0.000000] Kernel command line: console=ttyHSL1,115200n8 root=mtd:rootfs rootfstype=squashfs restart.download_mode=0 reboot=1
    [    0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
    [    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
    [    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
    [    0.000000] Memory: 43MB 436MB = 479MB total
    [    0.000000] Memory: 477300k/489588k available, 13196k reserved, 0K highmem
    [    0.000000] Virtual kernel memory layout:
    [    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
    [    0.000000]     fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
    [    0.000000]     vmalloc : 0xdf000000 - 0xff000000   ( 512 MB)
    [    0.000000]     lowmem  : 0xc0000000 - 0xdeb00000   ( 491 MB)
    [    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
    [    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
    [    0.000000]       .text : 0xc0008000 - 0xc053d938   (5335 kB)
    [    0.000000]       .init : 0xc0600000 - 0xc0702900   (1035 kB)
    [    0.000000]       .data : 0xc0704000 - 0xc07a1700   ( 630 kB)
    [    0.000000]        .bss : 0xc07a1724 - 0xc0863638   ( 776 kB)
    [    0.000000] SLUB: Genslabs=11, HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
    [    0.000000] Preemptible hierarchical RCU implementation.
    [    0.000000] NR_IRQS:1689
    [    0.000000] sched_clock: 32 bits at 32kHz, resolution 31240ns, wraps every 134175798ms
    [    0.000000] Console: colour dummy device 80x30
    [    0.150390] Calibrating delay using timer specific routine.. 12.55 BogoMIPS (lpj=62795)
    [    0.150421] pid_max: default: 32768 minimum: 301
    [    0.150921] Mount-cache hash table entries: 512
    [    0.152483] CPU: Testing write buffer coherency: ok
    [    0.152702] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
    [    0.152733] Setting up static identity map for 0x41870488 - 0x41870510
    [    0.155045] CPU1: Booted secondary processor
    [    0.155107] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
    [    0.155201] Brought up 2 CPUs
    [    0.155232] SMP: Total of 2 processors activated (25.11 BogoMIPS).
    [    0.169728] dummy: 
    [    0.170446] NET: Registered protocol family 16
    [    0.171227] AXI: msm_bus_fabric_init_driver(): msm_bus_fabric_init_driver
    [    0.173789] meminfo_init: smem ram ptable found: ver: 0 len: 5
    [    0.173820] Found 1 memory banks grouped into 8 memory regions
    [    0.174101] gpiochip_add: registered GPIOs 0 to 151 on device: msmgpio
    [    0.174789] smem_find(137, 80): wrong size 72
    [    0.174882] socinfo_init: v6, id=202, ver=2.0, raw_id=2064, raw_ver=2064, hw_plat=0,  hw_plat_ver=65536
    [    0.174882]  accessory_chip=0 hw_plat_subtype=0
    [    0.174945] msm_rpm_init: RPM firmware 3.0.16777371
    [    0.182255] clk_tbl_nss - loaded
    [    0.209559] msm_dmov_memcpy_init: Success
    [    0.216994] sps:BAM 0x12244000 enabled: ver:0x5, number of pipes:20
    [    0.217025] sps:BAM 0x12244000 is registered.
    [    0.217275] sps:sps is ready.
    [    0.250796] msm_pcie_setup: link initialized
    [    0.251171] PCI host bridge to bus 0000:00
    [    0.251202] pci_bus 0000:00: root bus resource [mem 0x08000000-0x0fefffff]
    [    0.251702] PCI: bus0: Fast back to back transfers disabled
    [    0.251702] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
    [    0.252421] PCI: bus1: Fast back to back transfers disabled
    [    0.290909] msm_pcie_setup: link initialized
    [    0.291252] PCI host bridge to bus 0000:02
    [    0.291283] pci_bus 0000:02: root bus resource [mem 0x2e000000-0x31efffff]
    [    0.291721] PCI: bus2: Fast back to back transfers disabled
    [    0.291752] pci 0000:02:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
    [    0.292564] PCI: bus3: Fast back to back transfers disabled
    [    0.411246] msm_pcie_setup: link initialization failed
    [    0.411465] pci 0000:02:00.0: BAR 8: assigned [mem 0x2e000000-0x2e1fffff]
    [    0.411496] pci 0000:03:00.0: BAR 0: assigned [mem 0x2e000000-0x2e1fffff 64bit]
    [    0.411527] pci 0000:02:00.0: PCI bridge to [bus 03-03]
    [    0.411558] pci 0000:02:00.0:   bridge window [mem 0x2e000000-0x2e1fffff]
    [    0.411621] PCI: enabling device 0000:02:00.0 (0140 -> 0143)
    [    0.411683] pci 0000:00:00.0: BAR 8: assigned [mem 0x08000000-0x081fffff]
    [    0.411715] pci 0000:01:00.0: BAR 0: assigned [mem 0x08000000-0x081fffff 64bit]
    [    0.411746] pci 0000:00:00.0: PCI bridge to [bus 01-01]
    [    0.411746] pci 0000:00:00.0:   bridge window [mem 0x08000000-0x081fffff]
    [    0.411808] PCI: enabling device 0000:00:00.0 (0140 -> 0143)
    [    0.432521] bio: create slab  at 0
    [    0.434020] SCSI subsystem initialized
    [    0.435863] spi_qsd spi_qsd.5: master is unqueued, this is deprecated
    [    0.438519] spi_qsd spi_qsd.6: master is unqueued, this is deprecated
    [    0.442517] Switching to clocksource gp_timer
    [    0.463199] NET: Registered protocol family 2
    [    0.472602] IP route cache hash table entries: 4096 (order: 2, 16384 bytes)
    [    0.473227] TCP established hash table entries: 16384 (order: 5, 131072 bytes)
    [    0.473414] TCP bind hash table entries: 16384 (order: 5, 131072 bytes)
    [    0.473601] TCP: Hash tables configured (established 16384 bind 16384)
    [    0.473633] TCP: reno registered
    [    0.473633] UDP hash table entries: 256 (order: 1, 8192 bytes)
    [    0.473664] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
    [    0.474070] NET: Registered protocol family 1
    [    0.476194] Partition(from smem) SBL1 -- Offset:0 Size:20000
    [    0.476226] Partition(from smem) MIBIB -- Offset:20000 Size:20000
    [    0.476226] Partition(from smem) SBL2 -- Offset:40000 Size:40000
    [    0.476257] Partition(from smem) SBL3 -- Offset:80000 Size:80000
    [    0.476257] Partition(from smem) DDRCONFIG -- Offset:100000 Size:10000
    [    0.476288] Partition(from smem) SSD -- Offset:110000 Size:10000
    [    0.476288] Partition(from smem) TZ -- Offset:120000 Size:80000
    [    0.476319] Partition(from smem) RPM -- Offset:1a0000 Size:80000
    [    0.476319] Partition(from smem) APPSBL -- Offset:220000 Size:80000
    [    0.476351] Partition(from smem) APPSBLENV -- Offset:2a0000 Size:10000
    [    0.476382] Partition(from smem) PRODUCTDATA -- Offset:2b0000 Size:30000
    [    0.476382] Partition(from smem) ART -- Offset:2e0000 Size:40000
    [    0.476413] Partition(from smem) TP -- Offset:320000 Size:40000
    [    0.476413] Partition(from smem) TINY -- Offset:360000 Size:500000
    [    0.476444] Partition(from smem) HLOS -- Offset:860000 Size:200000
    [    0.476476] Partition(from smem) rootfs -- Offset:a60000 Size:0
    [    0.489347] acpuclk-ipq806x acpuclk-ipq806x: SPEED BIN: 0
    [    0.489347] acpuclk-ipq806x acpuclk-ipq806x: ACPU PVS: 1
    [    0.496376] acpuclk-ipq806x acpuclk-ipq806x: CPU0: 6 frequencies supported
    [    0.496376] acpuclk-ipq806x acpuclk-ipq806x: CPU1: 6 frequencies supported
    [    0.497875] msm_rpm_log_probe: OK
    [    0.519556] squashfs: version 4.0 (2009/01/31) Phillip Lougher
    [    0.519587] jffs2: version 2.2. (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) © 2001-2006 Red Hat, Inc.
    [    0.521493] msgmni has been set to 932
    [    0.523898] Asymmetric key parser 'x509' registered
    [    0.523961] io scheduler noop registered
    [    0.523992] io scheduler deadline registered (default)
    [    0.525710] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
    [    0.527835] msm_serial_hs: probe of msm_serial_hs.0 failed with error -2
    [    0.528147] msm_serial_hs module loaded
    [    0.528397] msm_serial_hsl: detected port #1
    [    0.528584] msm_serial_hsl.1: ttyHSL1 at MMIO 0x16340000 (irq = 184) is a MSM
    [    0.529053] msm_serial_hsl: console setup on port #1
    [    1.288566] console [ttyHSL1] enabled
    [    1.297282] msm_serial_hsl: driver initialized
    [    1.306060] ahci ahci.0: forcing PORTS_IMPL to 0x1
    [    1.309871] ahci ahci.0: AHCI 0001.0300 32 slots 1 ports 6 Gbps 0x1 impl platform mode
    [    1.317775] ahci ahci.0: flags: ncq sntf pm led clo only pmp pio slum part ccc apst 
    [    1.326772] scsi0 : ahci_platform
    [    1.329803] ata1: SATA max UDMA/133 mmio [mem 0x29000000-0x2900017f] port 0x100 irq 241
    [    1.339643] m25p80 spi5.0: found s25fl256s1, expected s25fl512s
    [    1.344579] m25p80 spi5.0: s25fl256s1 (32768 Kbytes)
    [    1.350046] Creating 16 MTD partitions on "m25p80":
    [    1.354482] 0x000000000000-0x000000020000 : "SBL1"
    [    1.360980] 0x000000020000-0x000000040000 : "MIBIB"
    [    1.366604] 0x000000040000-0x000000080000 : "SBL2"
    [    1.372039] 0x000000080000-0x000000100000 : "SBL3"
    [    1.377569] 0x000000100000-0x000000110000 : "DDRCONFIG"
    [    1.383536] 0x000000110000-0x000000120000 : "SSD"
    [    1.388878] 0x000000120000-0x0000001a0000 : "TZ"
    [    1.393939] 0x0000001a0000-0x000000220000 : "RPM"
    [    1.399000] 0x000000220000-0x0000002a0000 : "APPSBL"
    [    1.404467] 0x0000002a0000-0x0000002b0000 : "APPSBLENV"
    [    1.410059] 0x0000002b0000-0x0000002e0000 : "PRODUCTDATA"
    [    1.415682] mtdoops: Attached to MTD device 10
    [    1.420368] 0x0000002e0000-0x000000320000 : "ART"
    [    1.426085] 0x000000320000-0x000000360000 : "TP"
    [    1.431583] 0x000000360000-0x000000860000 : "TINY"
    [    1.437425] 0x000000860000-0x000000a60000 : "HLOS"
    [    1.443236] 0x000000a60000-0x000002000000 : "rootfs"
    [    1.449109] mtd: partition "rootfs" set to be root filesystem
    [    1.455232] mtd: partition "rootfs_data" created automatically, ofs=1810000, len=7F0000 
    [    1.462324] 0x000001810000-0x000002000000 : "rootfs_data"
    [    1.501280] GPIO Bitbanged MDIO: probed
    [    1.504967] i2c /dev entries driver
    [    1.514557] cpuidle: using governor ladder
    [    1.517650] cpuidle: using governor menu
    [    1.522930] nf_conntrack version 0.5.0 (7457 buckets, 29828 max)
    [    1.529334] TCP: cubic registered
    [    1.531646] NET: Registered protocol family 17
    [    1.536488] Bridge firewalling registered
    [    1.540049] 8021q: 802.1Q VLAN Support v1.8
    [    1.545079] VFP support v0.3: implementor 51 architecture 64 part 4d variant 2 rev 0
    [    1.551983] Registering SWP/SWPB emulation handler
    [    1.556794] clock_late_init: Removing enables held for handed-off clocks
    [    1.572852] no pmic restart interrupt specified
    [    1.682536] ata1: SATA link down (SStatus 0 SControl 300)
    [    1.690846] SQUASHFS error: unable to read id index table
    [    1.772539] List of all partitions:
    [    1.775007] 1f00             128 mtdblock0  (driver?)
    [    1.780037] 1f01             128 mtdblock1  (driver?)
    [    1.785067] 1f02             256 mtdblock2  (driver?)
    [    1.790096] 1f03             512 mtdblock3  (driver?)
    [    1.795126] 1f04              64 mtdblock4  (driver?)
    [    1.800156] 1f05              64 mtdblock5  (driver?)
    [    1.805217] 1f06             512 mtdblock6  (driver?)
    [    1.810246] 1f07             512 mtdblock7  (driver?)
    [    1.815276] 1f08             512 mtdblock8  (driver?)
    [    1.820306] 1f09              64 mtdblock9  (driver?)
    [    1.825335] 1f0a             192 mtdblock10  (driver?)
    [    1.830459] 1f0b             256 mtdblock11  (driver?)
    [    1.835582] 1f0c             256 mtdblock12  (driver?)
    [    1.840706] 1f0d            5120 mtdblock13  (driver?)
    [    1.845829] 1f0e            2048 mtdblock14  (driver?)
    [    1.850952] 1f0f           22144 mtdblock15  (driver?)
    [    1.856076] 1f10            8128 mtdblock16  (driver?)
    [    1.861199] No filesystem could mount root, tried:  squashfs
    [    1.866822] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(31,15)
    [    1.875257] Linux (none) 3.4.103 #1 SMP PREEMPT Fri Jan 18 19:23:35 JST 2019 armv7l
    [    1.882911] date: 1970-01-01 09:00:01
    [    1.886566] CPU0: stopping
    [    1.889253] [] (unwind_backtrace+0x0/0x124) from [] (handle_IPI+0x1a8/0x1dc)
    [    1.898000] [] (handle_IPI+0x1a8/0x1dc) from [] (gic_handle_irq+0xb0/0xbc)
    [    1.906591] [] (gic_handle_irq+0xb0/0xbc) from [] (__irq_svc+0x40/0x70)
    [    1.914932] Exception stack(0xc0705f30 to 0xc0705f78)
    [    1.919962] 5f20:                                     00000000 00000000 00000001 00000000
    [    1.928116] 5f40: 00000000 00000000 00000003 c0766aa4 4150406a 512f04d0 00000000 00000000
    [    1.936269] 5f60: a0a0a0a0 c0705f78 c009992c c0041594 60000013 ffffffff
    [    1.942892] [] (__irq_svc+0x40/0x70) from [] (msm_cpuidle_enter+0x68/0x78)
    [    1.951483] [] (msm_cpuidle_enter+0x68/0x78) from [] (cpuidle_enter+0x14/0x18)
    [    1.960418] [] (cpuidle_enter+0x14/0x18) from [] (cpuidle_idle_call+0xa0/0x140)
    [    1.969447] [] (cpuidle_idle_call+0xa0/0x140) from [] (cpu_idle+0x60/0xf4)
    [    1.978038] [] (cpu_idle+0x60/0xf4) from [] (rest_init+0x88/0xa0)
    [    1.985848] [] (rest_init+0x88/0xa0) from [] (start_kernel+0x338/0x444)
    [    1.994189] [] (start_kernel+0x338/0x444) from [] (0x41508040)
    [    2.451421] Rebooting in 5 seconds..
    [    7.451452] Going down for restart now
    
    

WG2600HP fwupコマンドメモ

メーカーファームのfailsafe上で実行し、それっぽいログが出てきたのでメモ。現状、どうやってメーカーファームをdecryptしているのかは不明。

ファイル: wg2600hp_1_0_13.bin

Jan 01 00:12:16 [syslog] [FWUP]fwup_main start._
Jan 01 00:12:16 [syslog] [FWUP]fwup_update_firmware start._
Jan 01 00:12:16 [syslog] [FWUP]file len = [12695280]_
Jan 01 00:12:16 [syslog] [FWUP] decrypt_key=[rotary]
Jan 01 00:12:16 [syslog] [FWUP] FW HEADER RCV  [USB ATERMWL3050]
Jan 01 00:12:16 [syslog] [FWUP] FW HEADER PFMG [USB ATERMWL3050]
Jan 01 00:12:16 [syslog] [FW] header ok
Jan 01 00:12:16 [syslog] [FW] id=0x0 108 bytes
Jan 01 00:12:16 [syslog] [FW] chksum ok id=0x0
Jan 01 00:12:16 [syslog] [FW] id=0x2 12695064 bytes
Jan 01 00:12:18 [syslog] [FW] chksum ok id=0x2
Jan 01 00:12:18 [syslog] [FW] id=0x1 24 bytes
Jan 01 00:12:18 [syslog] [FW] chksum ok id=0x1
Jan 01 00:12:18 [syslog] [FW] footer ok
Jan 01 00:12:18 [syslog] [FWUP]parse_crc32 ret = [0]
Jan 01 00:12:18 [syslog] [FWUP] crc32 0
Jan 01 00:12:18 [syslog] [FWUP] crypt 0
Jan 01 00:12:18 [syslog] [FWUP] firmware 0
Jan 01 00:12:18 [syslog] [FW] tp not found
Jan 01 00:12:18 [syslog] [FW] expansion not found
Jan 01 00:12:18 [syslog] [FWUP] decrypt_key=[rotary]
Jan 01 00:12:18 [syslog] [FWUP] FW HEADER RCV  [USB ATERMWL3050]
Jan 01 00:12:18 [syslog] [FWUP] FW HEADER PFMG [USB ATERMWL3050]
Jan 01 00:12:18 [syslog] [FW] header ok
Jan 01 00:12:20 [syslog] [FW] chksum ok id=0x2
Jan 01 00:12:20 [syslog] [FW] id=0x1 24 bytes
Jan 01 00:12:20 [syslog] [FW] chksum ok id=0x1
Jan 01 00:12:20 [syslog] [FW] footer ok
Jan 01 00:12:20 [syslog] [FWUP]parse_crc32 ret = [0]
Jan 01 00:12:20 [syslog] [FWUP] crc32 0
Jan 01 00:12:20 [syslog] [FWUP] crypt 0
Jan 01 00:12:20 [syslog] [FWUP] firmware 0
Jan 01 00:12:20 [syslog] [FW] tp not found
Jan 01 00:12:20 [syslog] [FW] expansion not found
Jan 01 00:12:50 [syslog] [FWUP] fwup_cgi_ready file T.O _
Jan 01 00:12:50 [syslog] main: fwup_update_firmware() error._

WXR-2533DHP AR8337 register

WXR-2533DHPにはAtheros/Qualcomm Atheros/Qualcomm機に入っていることが多い ethreg コマンドが存在せず、stock firmwareにおけるAR8327系switchのレジスタを確認できていなかったが、偶然 /proc のsysfsでレジスタのread/writeが行えるようになっていることに気付いた。
これを利用し、dts内の ar8327-initvals に必要なレジスタ値を取得。

シェルスクリプトで必要なレジスタ値をガッと取得

root@AP7403BD****98:/# for reg in 0x4 0x8 0xc 0x50 0x54 0x58 0x5c 0xe0 0xe4 0x7c 0x94; do echo r $reg > /proc/ar8xxx/reg; done
[ 2213.914058] Read command : subcmd=r
[ 2213.916526] Read command : regval=4
[ 2213.921180] reg 0x4=0x7600000
[ 2213.923242] Read command : subcmd=r
[ 2213.926616] Read command : regval=8
[ 2213.931271] reg 0x8=0x1000000
[ 2213.933395] Read command : subcmd=r
[ 2213.936707] Read command : regval=c
[ 2213.941362] reg 0xc=0x80
[ 2213.942986] Read command : subcmd=r
[ 2213.946360] Read command : regval=50
[ 2213.951109] reg 0x50=0xcc35cc35
[ 2213.953389] Read command : subcmd=r
[ 2213.956701] Read command : regval=54
[ 2213.961449] reg 0x54=0xca35ca35
[ 2213.963698] Read command : subcmd=r
[ 2213.967041] Read command : regval=58
[ 2213.971852] reg 0x58=0xc935c935
[ 2213.974133] Read command : subcmd=r
[ 2213.977444] Read command : regval=5c
[ 2213.982193] reg 0x5c=0x3ffff00
[ 2213.984411] Read command : subcmd=r
[ 2213.987847] Read command : regval=e0
[ 2213.992502] reg 0xe0=0xc74164de
[ 2213.994907] Read command : subcmd=r
[ 2213.998094] Read command : regval=e4
[ 2214.003030] reg 0xe4=0x6a545
[ 2214.004998] Read command : subcmd=r
[ 2214.008341] Read command : regval=7c
[ 2214.013152] reg 0x7c=0x7e
[ 2214.014932] Read command : subcmd=r
[ 2214.018244] Read command : regval=94
[ 2214.022992] reg 0x94=0x7e

WI-U3-866D on WXR-2533DHP

OpenWrtにRTL8812AUドライバが追加されていたので試しに。ただ、以前と変わらず不安定な印象。
WI-U3-866D固有の問題である可能性も無きにしも非ず。

接続

普通にUSB 3.0ポートへ接続。何故かUSB 2.0デバイスとして認識され、そのままUSB 3.0接続への切り替え等は発生しない。
iwinfo ではwlan2がWI-U3-866Dに該当。

root@OpenWrt:/# [   84.616036] usb 1-1: new high-speed USB device number 2 using xhci-hcd
[   85.267793] RTL871X: rtw_ndev_init(wlan2)

root@OpenWrt:/# iwinfo
wlan0     ESSID: unknown
          Access Point: 74:03:BD:BC:1D:9B
          Mode: Client  Channel: unknown (unknown)
          Tx-Power: 0 dBm  Link Quality: unknown/70
          Signal: unknown  Noise: unknown
          Bit Rate: unknown
          Encryption: unknown
          Type: nl80211  HW Mode(s): 802.11nac
          Hardware: 168C:0040 168C:0002 [Generic MAC80211]
          TX power offset: unknown
          Frequency offset: unknown
          Supports VAPs: yes  PHY name: phy0

wlan1     ESSID: unknown
          Access Point: 74:03:BD:BC:1D:9A
          Mode: Client  Channel: unknown (unknown)
          Tx-Power: 0 dBm  Link Quality: unknown/70
          Signal: unknown  Noise: unknown
          Bit Rate: unknown
          Encryption: unknown
          Type: nl80211  HW Mode(s): 802.11bgn
          Hardware: 168C:0040 168C:0002 [Generic MAC80211]
          TX power offset: unknown
          Frequency offset: unknown
          Supports VAPs: yes  PHY name: phy1

wlan2     ESSID: unknown
          Access Point: 74:03:BD:8F:DF:59
          Mode: Client  Channel: unknown (unknown)
          Tx-Power: 12 dBm  Link Quality: unknown/70
          Signal: unknown  Noise: unknown
          Bit Rate: unknown
          Encryption: unknown
          Type: nl80211  HW Mode(s): 802.11abg
          Hardware: unknown [Generic MAC80211]
          TX power offset: unknown
          Frequency offset: unknown
          Supports VAPs: no  PHY name: phy2

root@OpenWrt:/# lsusb
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 004 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 002: ID 0411:025d BUFFALO INC. (formerly MelCo., Inc.) 
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
root@OpenWrt:/# lsusb -t
/:  Bus 04.Port 1: Dev 1, Class=root_hub, Driver=xhci-hcd/1p, 5000M
/:  Bus 03.Port 1: Dev 1, Class=root_hub, Driver=xhci-hcd/1p, 480M
/:  Bus 02.Port 1: Dev 1, Class=root_hub, Driver=xhci-hcd/1p, 5000M
/:  Bus 01.Port 1: Dev 1, Class=root_hub, Driver=xhci-hcd/1p, 480M
    |__ Port 1: Dev 2, If 0, Class=Vendor Specific Class, Driver=rtl8812au, 480M

AP接続試行時

LuCI上からスキャン / 接続操作。何故か uninit が走る。この時点で iwinfoiw dev の情報からドングルが消える。

root@OpenWrt:/# [  200.594440] IPv6: ADDRCONF(NETDEV_UP): wlan2: link is not ready
[  250.955660] RTL871X: rtw_ndev_uninit(wlan2)

root@OpenWrt:/# iwinfo
wlan0     ESSID: unknown
          Access Point: 74:03:BD:BC:1D:9B
          Mode: Client  Channel: unknown (unknown)
          Tx-Power: 0 dBm  Link Quality: unknown/70
          Signal: unknown  Noise: unknown
          Bit Rate: unknown
          Encryption: unknown
          Type: nl80211  HW Mode(s): 802.11nac
          Hardware: 168C:0040 168C:0002 [Generic MAC80211]
          TX power offset: unknown
          Frequency offset: unknown
          Supports VAPs: yes  PHY name: phy0

wlan1     ESSID: unknown
          Access Point: 74:03:BD:BC:1D:9A
          Mode: Client  Channel: unknown (unknown)
          Tx-Power: 0 dBm  Link Quality: unknown/70
          Signal: unknown  Noise: unknown
          Bit Rate: unknown
          Encryption: unknown
          Type: nl80211  HW Mode(s): 802.11bgn
          Hardware: 168C:0040 168C:0002 [Generic MAC80211]
          TX power offset: unknown
          Frequency offset: unknown
          Supports VAPs: yes  PHY name: phy1

ドングル取り外し

上のスキャン / 接続操作の後ドングルをUSB 3.0ポートから引き抜く。Oopsを吐いた後、そのままKernel Panicを起こしてお亡くなりになり、reboot。

root@OpenWrt:/# [  304.981232] usb 1-1: USB disconnect, device number 2
[  304.981804] Internal error: Oops - undefined instruction: 0 [#1] SMP ARM
[  304.985272] Modules linked in: pppoe ppp_async ath10k_pci ath10k_core ath rtl8812au pppox ppp_generic nf_conntrack_ipv6 mac80211 iptable_nat ipt_REJECT ipt_MASQUERADE cfg80211 xt_time xt_tcpudp xt_tcpmss xt_statistic xt_state xt_recent xt_nat xt_multiport xt_mark xt_mac xt_limit xt_length xt_hl xt_helper xt_ecn xt_dscp xt_conntrack xt_connmark xt_connlimit xt_connbytes xt_comment xt_TCPMSS xt_REDIRECT xt_LOG xt_HL xt_FLOWOFFLOAD xt_DSCP xt_CT xt_CLASSIFY ums_usbat ums_sddr55 ums_sddr09 ums_karma ums_jumpshot ums_isd200 ums_freecom ums_datafab ums_cypress ums_alauda slhc nf_reject_ipv4 nf_nat_redirect nf_nat_masquerade_ipv4 nf_conntrack_ipv4 nf_nat_ipv4 nf_nat nf_log_ipv4 nf_flow_table_hw nf_flow_table nf_defrag_ipv6 nf_defrag_ipv4 nf_conntrack_rtcache nf_conntrack_netlink iptable_raw iptable_mangle
[  305.040299]  iptable_filter ipt_ECN ip_tables crc_ccitt compat fuse act_connmark nf_conntrack act_skbedit act_mirred em_u32 cls_u32 cls_tcindex cls_flow cls_route cls_fw sch_tbf sch_htb sch_hfsc sch_ingress ledtrig_usbport ledtrig_heartbeat xt_set ip_set_list_set ip_set_hash_netiface ip_set_hash_netport ip_set_hash_netnet ip_set_hash_net ip_set_hash_netportnet ip_set_hash_mac ip_set_hash_ipportnet ip_set_hash_ipportip ip_set_hash_ipport ip_set_hash_ipmark ip_set_hash_ip ip_set_bitmap_port ip_set_bitmap_ipmac ip_set_bitmap_ip ip_set nfnetlink ip6t_REJECT nf_reject_ipv6 nf_log_ipv6 nf_log_common ip6table_mangle ip6table_filter ip6_tables x_tables ifb ip6_tunnel tunnel6 vfat fat ntfs nls_utf8 nls_iso8859_1 nls_cp437 uas usb_storage leds_gpio xhci_plat_hcd xhci_pci xhci_hcd dwc3 dwc3_of_simple ohci_platform
[  305.111300]  ohci_hcd phy_qcom_dwc3 ahci ehci_platform sd_mod ahci_platform libahci_platform libahci libata scsi_mod ehci_hcd gpio_button_hotplug ext4 jbd2 mbcache crc32c_generic
[  305.133559] CPU: 0 PID: 17 Comm: kworker/0:1 Not tainted 4.14.89 #0
[  305.149420] Hardware name: Generic DT based system
[  305.155611] Workqueue: usb_hub_wq hub_event
[  305.160445] task: dd465900 task.stack: dd4ea000
[  305.164540] PC is at rollback_registered_many+0xc4/0x474
[  305.169044] LR is at rollback_registered_many+0x40/0x474
[  305.174594] pc : []    lr : []    psr: 20000013
[  305.179892] sp : dd4ebd58  ip : dd465900  fp : dc9e2200
[  305.185877] r10: c08b1eb4  r9 : 00000001  r8 : dd4ebd90
[  305.191086] r7 : dd4ebd68  r6 : dca45844  r5 : dca45800  r4 : dd4ebd4c
[  305.196298] r3 : 00000003  r2 : 00000000  r1 : 00000000  r0 : 00000001
[  305.202898] Flags: nzCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment none
[  305.209407] Control: 10c5787d  Table: 5c12806a  DAC: 00000051
[  305.216610] Process kworker/0:1 (pid: 17, stack limit = 0xdd4ea210)
[  305.222339] Stack: (0xdd4ebd58 to 0xdd4ec000)
[  305.228422] bd40:                                                       00000001 c079764c
[  305.232966] bd60: dd2fc850 dc33b3c0 dd4ebd68 dd4ebd68 dca45800 00000000 dca43000 dc9e2220
[  305.241127] bd80: 00000034 c0b5c648 dc9e2228 c068b194 dca45844 dca45844 dc33b3c0 dca45800
[  305.249285] bda0: dca43124 c068b208 e0ea1000 bf720628 00000000 bf72066c e0ea1000 dc9e2200
[  305.257444] bdc0: 00000000 bf721ad8 bf78799c db9e3c70 00000000 c06127e4 db9e3c00 ffffffed
[  305.265605] bde0: dc9e2220 dc9e2220 dc9e2254 bf78799c 00000000 00000034 c0b5c648 dc9e2228
[  305.273766] be00: db9e3c70 c058fd60 dd550f30 dc9e2220 c0b1d7c8 dc9e2278 c0b03c08 c058ecf0
[  305.281923] be20: 00008d84 dc9e2220 00000001 c058bacc dc9e2200 c03e4ff8 00000001 c0793bc4
[  305.290083] be40: dcca6400 dc9e3ae0 00000118 00040e59 dc9e2200 db9e3c00 00000000 00000001
[  305.298243] be60: dcea9000 dc9e2200 dcca6400 dc873904 00000100 c0611334 00000000 db9e3c00
[  305.306404] be80: dc9e3e00 db9e3ca4 db9e3c70 dcca6400 dc873904 c0609554 00000000 00000000
[  305.314563] bea0: 40000000 00000001 dc875800 00000001 00000001 dc873904 00000100 c060ad00
[  305.322722] bec0: dd4ebf0a 00000000 dc873800 dc873834 dcca6400 dc875800 dcca652c dc8758a4
[  305.330882] bee0: 00000001 dcea9000 dc873620 c0b1d690 00000000 c0b4ea14 dcca652c dd465900
[  305.339042] bf00: db5e7c00 00000000 00010100 dd465c70 dd4ebf4c dc873904 dd4c1580 ddc07500
[  305.347201] bf20: ddc0b300 00000000 00000000 00000008 ddc07500 c032fc14 ddc07518 ffffe000
[  305.355361] bf40: dd4c1580 ddc07500 dd4c1598 ddc07518 ffffe000 c0b02d00 00000008 c0330cc0
[  305.363521] bf60: dd44debc dd4dd000 dd4ea000 dd4c5340 dd44debc dd4dd01c dd4c1580 c033097c
[  305.371681] bf80: 00000000 c0335884 00000000 dd4c5340 c0335744 00000000 00000000 00000000
[  305.379841] bfa0: 00000000 00000000 00000000 c0307f48 00000000 00000000 00000000 00000000
[  305.388000] bfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  305.396160] bfe0: 00000000 00000000 00000000 00000000 00000013 00000000 00000000 00000000
[  305.404312] [] (rollback_registered_many) from [] (unregister_netdevice_queue+0x88/0xe0)
[  305.412466] [] (unregister_netdevice_queue) from [] (unregister_netdev+0x1c/0x2c)
[  305.422653] [] (unregister_netdev) from [] (rtw_unregister_netdev+0x2c/0x44 [rtl8812au])
[  305.431988] [] (rtw_unregister_netdev [rtl8812au]) from [] (rtw_unregister_netdevs+0x2c/0x4c [rtl8812au])
[  305.441797] [] (rtw_unregister_netdevs [rtl8812au]) from [] (rtw_dev_remove+0x24/0x84 [rtl8812au])
[  305.452786] [] (rtw_dev_remove [rtl8812au]) from [] (usb_unbind_interface+0x94/0x1dc)
[  305.463169] [] (usb_unbind_interface) from [] (device_release_driver_internal+0x128/0x1f0)
[  305.472797] [] (device_release_driver_internal) from [] (bus_remove_device+0xe0/0x118)
[  305.482689] [] (bus_remove_device) from [] (device_del+0x190/0x344)
[  305.492320] [] (device_del) from [] (usb_disable_device+0x88/0x1bc)
[  305.500223] [] (usb_disable_device) from [] (usb_disconnect+0x88/0x210)
[  305.508208] [] (usb_disconnect) from [] (hub_event+0xee4/0xf20)
[  305.516545] [] (hub_event) from [] (process_one_work+0x24c/0x404)
[  305.524180] [] (process_one_work) from [] (worker_thread+0x344/0x58c)
[  305.532172] [] (worker_thread) from [] (kthread+0x140/0x14c)
[  305.540332] [] (kthread) from [] (ret_from_fork+0x14/0x2c)
[  305.547802] Code: ea000003 e3530001 e5c59311 0a000000 (e7f001f2) 
[  305.554814] ---[ end trace 3133cf18efab4894 ]---
[  305.560968] Kernel panic - not syncing: Fatal exception
[  305.565672] CPU1: stopping
[  305.570611] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G      D         4.14.89 #0
[  305.573384] Hardware name: Generic DT based system
[  305.580629] [] (unwind_backtrace) from [] (show_stack+0x14/0x20)
[  305.585400] [] (show_stack) from [] (dump_stack+0x88/0x9c)
[  305.593286] [] (dump_stack) from [] (handle_IPI+0xf4/0x1a8)
[  305.600310] [] (handle_IPI) from [] (gic_handle_irq+0x9c/0xb8)
[  305.607514] [] (gic_handle_irq) from [] (__irq_svc+0x6c/0x90)
[  305.615140] Exception stack(0xdd461f80 to 0xdd461fc8)
[  305.622727] 1f80: 00000001 00000000 00000000 c0315300 ffffe000 c0b03c74 c0b03c28 00000000
[  305.627767] 1fa0: 00000000 512f04d0 00000000 00000000 dd461fc8 dd461fd0 c030884c c0308850
[  305.635897] 1fc0: 60000013 ffffffff
[  305.644057] [] (__irq_svc) from [] (arch_cpu_idle+0x38/0x44)
[  305.647366] [] (arch_cpu_idle) from [] (do_idle+0xe8/0x1bc)
[  305.654998] [] (do_idle) from [] (cpu_startup_entry+0x1c/0x20)
[  305.662025] [] (cpu_startup_entry) from [] (0x423017cc)
[  305.669669] Rebooting in 3 seconds..

WXR-2533DHP stock -> OpenWrt (2)

以前のstock -> OpenWrt化の記事を書いた時点から、内部的な挙動を変更したのでメモ。

WXR-2533DHPのデフォルトパッケージとして squashfs-tools-mksquashfs を持たせて mksquashfs コマンドを使用できるようにし、WXR-2533DHPのブートに必要なダミーのUBIボリュームをsysupgrade時に作成するようにした。
これにより、factoryを投入後UBIのイメージを使用して sysupgrade -F する必要が無くなり、squashfs-sysupgrade イメージでsysupgradeするのみで良くなった。

Bootlog

stock → OpenWrt (initramfs) → OpenWrt (squashfs)
ハイライトは入力個所

Killed
Monitor.sh starting.......
Start of fw_blink_cnt.sh -------------------------------------------------
End of fw_blink_cnt.sh -------------------------------------------------
do ubi firmware upgrade ...
[  416.083692] UBI: attaching mtd1 to ubi1
[  416.086504] UBI: physical eraseblock size:   131072 bytes (128 KiB)
[  416.093095] UBI: logical eraseblock size:    126976 bytes
[  416.098125] UBI: smallest flash I/O unit:    2048
[  416.103124] UBI: VID header offset:          2048 (aligned 2048)
[  416.108809] UBI: data offset:                4096
[  416.668822] UBI: empty MTD device detected
[  416.672133] UBI: max. sequence number:       0
[  416.676382] UBI: create volume table (copy #1)
[  416.693252] UBI: create volume table (copy #2)
[  416.710059] UBI: attached mtd1 to ubi1
[  416.712808] UBI: MTD device name:            "rootfs_1"
[  416.717994] UBI: MTD device size:            64 MiB
[  416.723149] UBI: number of good PEBs:        512
[  416.727460] UBI: number of bad PEBs:         0
[  416.732083] UBI: number of corrupted PEBs:   0
[  416.736301] UBI: max. allowed volumes:       128
[  416.741080] UBI: wear-leveling threshold:    4096
[  416.745610] UBI: number of internal volumes: 1
[  416.750265] UBI: number of user volumes:     0
[  416.754545] UBI: available PEBs:             503
[  416.759044] UBI: total number of reserved PEBs: 9
[  416.764011] UBI: number of PEBs reserved for bad PEB handling: 5
[  416.769853] UBI: max/mean erase counter: 0/0
[  416.774039] UBI: image sequence number:  1171577802
[  416.778881] UBI: background thread "ubi_bgt1d" started, PID 7267
ubiupdatevol /dev/ubi1_0 /tmp/uhttp-upgrade.img -o 128 -s 4819470
ubiupdatevol /dev/ubi1_1 /tmp/uhttp-upgrade.img -o 4819598 -s 158
$Shutting down pppd: 
disable_ipv4_dns
IPv6_dns = nameserver 240b:12:500:6500:225:36ff:fe14:e98c
reload_servers_safe
######policy stop
Stop DS-Lite Tunnel ...
Stop DS-Lite Tunnel done...
Stop MAP E ...
Stop DS-Lite Tunnel ...
Stop DS-Lite Tunnel done...
Stop MAP E ...
Stop RADVD ...
ip -6 addr delet 240b:12:500:6500:7603:bdff:febc:1d99/64 dev eth0
TMP_WAN_IPV6= 
[  447.302061] Restarting system.
[  447.304092] Going down for restart now


BUFFALO WXR-2533DHP U-Boot Ver 1.14 (May 18 2015 - 13:24:36)

CPU:   IPQ8064 clock 1.4 GHz
DRAM:  DDR3 512 MiB clock 533 MHz
NAND:  ECC 4 bits, 256 MiB
SF: Detected W25Q32 with page size 64 KiB, total 4 MiB
MMC:   
In:    serial
Out:   serial
Err:   serial
cdp: get part failed for 0:HLOS
cdp: get part failed for rootfs
Net:   MAC2 addr:74:3:bd:bc:1d:98
athrs17_reg_init: complete
athrs17_vlan_config ...done
S17c init  done
eth1
Memory Test Start
Pattern: 55555555
Pattern: AAAAAAAA
Pattern: 00000000
Memory Test Pass 

Hit any key to stop autoboot:  0 
Checking Bank1 Image ... 
Creating 1 MTD partitions on "nand0":
0x000000000000-0x000004000000 : "mtd=0"
Bank1 Image is good
kernel_checksum is 0x4d51f25f , rootfs_checksum is 0xd3 
Checking Bank2 Image ... 
Creating 1 MTD partitions on "nand0":
0x000004000000-0x000008000000 : "mtd=0"
Bank2 Image is good
kernel_checksum is 0x4acf4726 , rootfs_checksum is 0xc9 
Bank1 Image not the same as Bank2 Image 
Cpoy to Bank1 image from Bank2 image 
Creating 1 MTD partitions on "nand0":
0x000000000000-0x000004000000 : "mtd=0"
4819470 bytes written to volume kernel
158 bytes written to volume ubi_rootfs
MMC Device 0 not found

dmagic1 0 dmagic2 0 
 
MMC Device 0 not found
Using nand device 1
Device 1: nand1... is now current device
bootargs=console=ttyHSL1,115200n8 ubi.mtd=rootfs root=mtd:ubi_rootfs rootfstype=squashfs
Booting from flash
set mtdids nand0=nand0 && set mtdparts mtdparts=nand0:0x4000000@0x0(fs),${msmparts} && ubi part fs && ubi read 0x44000000 kernel && bootm 0x44000000
Creating 1 MTD partitions on "nand0":
0x000000000000-0x000004000000 : "mtd=0"
   Image Name:   ARM OpenWrt Linux-4.14.89
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    4819406 Bytes = 4.6 MiB
   Load Address: 42208000
   Entry Point:  42208000
   Verifying Checksum ... OK
   Loading Kernel Image ... OK
OK
Setting up atags for msm partition: rootfs

device nand0 , # parts = 1
 #: name                size            offset          mask_flags
 0: fs                  0x04000000      0x00000000      0

active partition: nand0,0 - (fs) 0x04000000 @ 0x00000000

defaults:
mtdids  : none
mtdparts: none
Using machid 0x1260 from environment

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 4.14.89 (jenkins@tofu-z77hvub18_openwrt) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+8849-8f8ac4c3dc)) #0 SMP Thu Dec 20 13:01:38 2018
[    0.000000] CPU: ARMv7 Processor [512f04d0] revision 0 (ARMv7), cr=10c5787d
[    0.000000] CPU: div instructions available: patching division code
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, PIPT instruction cache
[    0.000000] OF: fdt: Machine model: Buffalo WXR-2533DHP
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] random: get_random_bytes called from start_kernel+0x88/0x408 with crng_init=0
[    0.000000] percpu: Embedded 15 pages/cpu @ddc01000 s29324 r8192 d23924 u61440
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 121920
[    0.000000] Kernel command line: 
[    0.000000] Bootloader command line (ignored): console=ttyHSL1,115200n8 ubi.mtd=rootfs root=mtd:ubi_rootfs rootfstype=squashfs
[    0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
[    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Memory: 472264K/491520K available (4745K kernel code, 152K rwdata, 1260K rodata, 8192K init, 228K bss, 19256K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
[    0.000000]     vmalloc : 0xde800000 - 0xff800000   ( 528 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xde000000   ( 480 MB)
[    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
[    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
[    0.000000]       .text : 0xc0208000 - 0xc07a25f8   (5738 kB)
[    0.000000]       .init : 0xc0900000 - 0xc1100000   (8192 kB)
[    0.000000]       .data : 0xc1100000 - 0xc11261c0   ( 153 kB)
[    0.000000]        .bss : 0xc1128000 - 0xc11610d8   ( 229 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[    0.000000] clocksource: dg_timer: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 305801671480 ns
[    0.000006] sched_clock: 32 bits at 6MHz, resolution 160ns, wraps every 343597383600ns
[    0.000020] Switching to timer-based delay loop, resolution 160ns
[    0.000233] Calibrating delay loop (skipped), value calculated using timer frequency.. 12.50 BogoMIPS (lpj=62500)
[    0.000258] pid_max: default: 32768 minimum: 301
[    0.000381] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000397] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000981] CPU: Testing write buffer coherency: ok
[    0.001752] Setting up static identity map for 0x42300000 - 0x42300060
[    0.001912] Hierarchical SRCU implementation.
[    0.002650] smp: Bringing up secondary CPUs ...
[    0.004459] smp: Brought up 1 node, 2 CPUs
[    0.004478] SMP: Total of 2 processors activated (25.00 BogoMIPS).
[    0.004491] CPU: All CPU(s) started in SVC mode.
[    0.014986] VFP support v0.3: implementor 51 architecture 64 part 4d variant 2 rev 0
[    0.015147] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.015173] futex hash table entries: 512 (order: 3, 32768 bytes)
[    0.015284] pinctrl core: initialized pinctrl subsystem
[    0.016308] NET: Registered protocol family 16
[    0.016556] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.017914] cpuidle: using governor ladder
[    0.017980] cpuidle: using governor menu
[    0.039275] msm_bus_fabric_init_driver
[    0.040686] usbcore: registered new interface driver usbfs
[    0.040777] usbcore: registered new interface driver hub
[    0.040867] usbcore: registered new device driver usb
[    0.040929] pps_core: LinuxPPS API ver. 1 registered
[    0.040941] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti 
[    0.040972] PTP clock support registered
[    0.042787] clocksource: Switched to clocksource dg_timer
[    0.046101] NET: Registered protocol family 2
[    0.046616] TCP established hash table entries: 4096 (order: 2, 16384 bytes)
[    0.046660] TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
[    0.046713] TCP: Hash tables configured (established 4096 bind 4096)
[    0.046805] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    0.046835] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    0.047035] NET: Registered protocol family 1
[    0.187062] No memory allocated for crashlog
[    0.187376] workingset: timestamp_bits=30 max_order=17 bucket_order=0
[    0.192028] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.192043] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.198948] io scheduler noop registered
[    0.198967] io scheduler deadline registered (default)
[    0.200358] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda not found, using dummy regulator
[    0.200465] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda_phy not found, using dummy regulator
[    0.200562] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda_refclk not found, using dummy regulator
[    0.201344] OF: PCI: host bridge /soc/pci@1b500000 ranges:
[    0.201388] OF: PCI:    IO 0x0fe00000..0x0fefffff -> 0x0fe00000
[    0.201413] OF: PCI:   MEM 0x08000000..0x0fdfffff -> 0x08000000
[    0.309447] qcom-pcie 1b500000.pci: link up
[    0.309631] qcom-pcie 1b500000.pci: PCI host bridge to bus 0000:00
[    0.309655] pci_bus 0000:00: root bus resource [bus 00-ff]
[    0.309674] pci_bus 0000:00: root bus resource [io  0x0000-0xfffff] (bus address [0xfe00000-0xfefffff])
[    0.309689] pci_bus 0000:00: root bus resource [mem 0x08000000-0x0fdfffff]
[    0.310219] PCI: bus0: Fast back to back transfers disabled
[    0.312458] PCI: bus1: Fast back to back transfers disabled
[    0.312557] pci 0000:00:00.0: BAR 8: assigned [mem 0x08000000-0x081fffff]
[    0.312581] pci 0000:01:00.0: BAR 0: assigned [mem 0x08000000-0x081fffff 64bit]
[    0.312711] pci 0000:00:00.0: PCI bridge to [bus 01-ff]
[    0.312736] pci 0000:00:00.0:   bridge window [mem 0x08000000-0x081fffff]
[    0.313417] pcieport 0000:00:00.0: AER enabled with IRQ 34
[    0.313991] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda not found, using dummy regulator
[    0.314095] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda_phy not found, using dummy regulator
[    0.314199] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda_refclk not found, using dummy regulator
[    0.314953] OF: PCI: host bridge /soc/pci@1b700000 ranges:
[    0.314994] OF: PCI:    IO 0x31e00000..0x31efffff -> 0x31e00000
[    0.315017] OF: PCI:   MEM 0x2e000000..0x31dfffff -> 0x2e000000
[    0.424937] qcom-pcie 1b700000.pci: link up
[    0.425090] qcom-pcie 1b700000.pci: PCI host bridge to bus 0001:00
[    0.425109] pci_bus 0001:00: root bus resource [bus 00-ff]
[    0.425124] pci_bus 0001:00: root bus resource [mem 0x2e000000-0x31dfffff]
[    0.425579] PCI: bus0: Fast back to back transfers disabled
[    0.427926] PCI: bus1: Fast back to back transfers disabled
[    0.428011] pci 0001:00:00.0: BAR 8: assigned [mem 0x2e000000-0x2e1fffff]
[    0.428033] pci 0001:01:00.0: BAR 0: assigned [mem 0x2e000000-0x2e1fffff 64bit]
[    0.428164] pci 0001:00:00.0: PCI bridge to [bus 01-ff]
[    0.428184] pci 0001:00:00.0:   bridge window [mem 0x2e000000-0x2e1fffff]
[    0.428672] pcieport 0001:00:00.0: AER enabled with IRQ 67
[    0.430956] L2 @ QSB rate. Forcing new rate.
[    0.431159] L2 @ 384000 KHz
[    0.431329] CPU0 @ 800000 KHz
[    0.431343] CPU1 @ QSB rate. Forcing new rate.
[    0.431461] CPU1 @ 384000 KHz
[    0.435536] gsbi 16300000.gsbi: GSBI port protocol: 6 crci: 0
[    0.436941] gsbi 1a200000.gsbi: GSBI port protocol: 3 crci: 0
[    0.438421] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    0.439246] msm_serial 16340000.serial: msm_serial: detected port #0
[    0.439344] msm_serial 16340000.serial: uartclk = 7372800
[    0.439423] 16340000.serial: ttyMSM0 at MMIO 0x16340000 (irq = 100, base_baud = 460800) is a MSM
[    0.439460] msm_serial: console setup on port #0
[    1.172231] console [ttyMSM0] enabled
[    1.177094] msm_serial: driver initialized
[    1.185782] loop: module loaded
[    1.187920] nand: device found, Manufacturer ID: 0x2c, Chip ID: 0xaa
[    1.187957] nand: Micron MT29F2G08ABBEAH4
[    1.194439] nand: 256 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    1.198290] 2 fixed-partitions partitions found on MTD device qcom_nand.0
[    1.205774] Creating 2 MTD partitions on "qcom_nand.0":
[    1.212567] 0x000000000000-0x000004000000 : "ubi"
[    1.225487] random: fast init done
[    1.392922] 0x000004000000-0x000008000000 : "rootfs_1"
[    1.569415] spi_qup 1a280000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64
[    1.584327] m25p80 spi0.0: w25q32dw (4096 Kbytes)
[    1.584484] 13 fixed-partitions partitions found on MTD device spi0.0
[    1.588013] Creating 13 MTD partitions on "spi0.0":
[    1.594534] 0x000000000000-0x000000010000 : "SBL1"
[    1.599973] 0x000000010000-0x000000030000 : "MIBIB"
[    1.604812] 0x000000030000-0x000000060000 : "SBL2"
[    1.609504] 0x000000060000-0x000000090000 : "SBL3"
[    1.614492] 0x000000090000-0x0000000a0000 : "DDRCONFIG"
[    1.619144] 0x0000000a0000-0x0000000b0000 : "SSD"
[    1.624328] 0x0000000b0000-0x0000000e0000 : "TZ"
[    1.629113] 0x0000000e0000-0x000000100000 : "RPM"
[    1.633933] 0x000000100000-0x000000170000 : "APPSBL"
[    1.638405] 0x000000170000-0x000000180000 : "APPSBLENV"
[    1.643537] 0x000000180000-0x0000001c0000 : "ART"
[    1.648408] 0x0000001c0000-0x0000001d0000 : "BOOTCONFIG"
[    1.653341] 0x0000001d0000-0x000000240000 : "APPSBL_1"
[    1.659584] libphy: GPIO Bitbanged MDIO: probed
[    1.704291] switch0: Atheros AR8337 rev. 2 switch registered on gpio-0
[    2.564122] ar8327: qca,phy-rgmii-en is not specified
[    2.564543] libphy: Fixed MDIO Bus: probed
[    2.588350] ipq806x-gmac-dwmac 37200000.ethernet: PTP uses main clock
[    2.588708] stmmac - user ID: 0x10, Synopsys ID: 0x37
[    2.593890] ipq806x-gmac-dwmac 37200000.ethernet: Ring mode enabled
[    2.598812] ipq806x-gmac-dwmac 37200000.ethernet: DMA HW capability register supported
[    2.604960] ipq806x-gmac-dwmac 37200000.ethernet: Enhanced/Alternate descriptors
[    2.612873] ipq806x-gmac-dwmac 37200000.ethernet: Enabled extended descriptors
[    2.620515] ipq806x-gmac-dwmac 37200000.ethernet: RX Checksum Offload Engine supported
[    2.627544] ipq806x-gmac-dwmac 37200000.ethernet: COE Type 2
[    2.635414] ipq806x-gmac-dwmac 37200000.ethernet: TX Checksum insertion supported
[    2.641173] ipq806x-gmac-dwmac 37200000.ethernet: Wake-Up On Lan supported
[    2.648633] ipq806x-gmac-dwmac 37200000.ethernet: Enable RX Mitigation via HW Watchdog Timer
[    2.676057] ipq806x-gmac-dwmac 37400000.ethernet: PTP uses main clock
[    2.676305] stmmac - user ID: 0x10, Synopsys ID: 0x37
[    2.681486] ipq806x-gmac-dwmac 37400000.ethernet: Ring mode enabled
[    2.686596] ipq806x-gmac-dwmac 37400000.ethernet: DMA HW capability register supported
[    2.692597] ipq806x-gmac-dwmac 37400000.ethernet: Enhanced/Alternate descriptors
[    2.700643] ipq806x-gmac-dwmac 37400000.ethernet: Enabled extended descriptors
[    2.708206] ipq806x-gmac-dwmac 37400000.ethernet: RX Checksum Offload Engine supported
[    2.715232] ipq806x-gmac-dwmac 37400000.ethernet: COE Type 2
[    2.723142] ipq806x-gmac-dwmac 37400000.ethernet: TX Checksum insertion supported
[    2.728880] ipq806x-gmac-dwmac 37400000.ethernet: Wake-Up On Lan supported
[    2.736323] ipq806x-gmac-dwmac 37400000.ethernet: Enable RX Mitigation via HW Watchdog Timer
[    2.743794] i2c /dev entries driver
[    2.752462] Calibration not found.
[    2.754913] qcom-tsens 900000.thermal-sensor: tsens calibration failed
[    2.759430] Speed bin: 0
[    2.764883] PVS bin: 1
[    2.768865] cpuidle: enable-method property 'qcom,kpss-acc-v1' found operations
[    2.769743] cpuidle: enable-method property 'qcom,kpss-acc-v1' found operations
[    2.777474] sdhci: Secure Digital Host Controller Interface driver
[    2.784238] sdhci: Copyright(c) Pierre Ossman
[    2.790419] sdhci-pltfm: SDHCI platform and OF driver helper
[    2.796529] NET: Registered protocol family 10
[    2.801830] Segment Routing with IPv6
[    2.805015] NET: Registered protocol family 17
[    2.809219] 8021q: 802.1Q VLAN Support v1.8
[    2.812936] Registering SWP/SWPB emulation handler
[    2.829454] qcom_rpm 108000.rpm: RPM firmware 3.0.16777342
[    2.844830] s1a: supplied by regulator-dummy
[    2.844916] s1a: Bringing 0uV into 1050000-1050000uV
[    2.848468] s1b: supplied by regulator-dummy
[    2.853240] s1b: Bringing 0uV into 1050000-1050000uV
[    2.857613] s2a: supplied by regulator-dummy
[    2.862367] s2a: Bringing 0uV into 800000-800000uV
[    2.866890] s2b: supplied by regulator-dummy
[    2.871231] s2b: Bringing 0uV into 800000-800000uV
[    2.881060] UBI: auto-attach mtd0
[    2.881095] ubi0: attaching mtd0
[    2.977065] random: crng init done
[    3.911204] ubi0: scanning is finished
[    3.931436] ubi0: attached mtd0 (name "ubi", size 64 MiB)
[    3.931457] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    3.935876] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    3.942576] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    3.949486] ubi0: good PEBs: 512, bad PEBs: 0, corrupted PEBs: 0
[    3.956265] ubi0: user volume: 3, internal volumes: 1, max. volumes count: 128
[    3.962455] ubi0: max/mean erase counter: 12/1, WL threshold: 4096, image sequence number: 0
[    3.969542] ubi0: available PEBs: 136, total reserved PEBs: 376, PEBs reserved for bad PEB handling: 40
[    3.978153] hctosys: unable to open rtc device[    4.009139] Freeing unused kernel memory: 8192K
[    4.045472] init: Console is alive
[    4.045767] init: - watchdog -
[    4.063289] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    4.069988] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    4.071844] SCSI subsystem initialized
[    4.080623] ehci-platform: EHCI generic platform driver
[    4.083152] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    4.085039] ohci-platform: OHCI generic platform driver
[    4.221365] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    4.221461] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 1
[    4.226232] xhci-hcd xhci-hcd.0.auto: hcc params 0x0228f065 hci version 0x100 quirks 0x0000000002010010
[    4.233519] xhci-hcd xhci-hcd.0.auto: irq 110, io mem 0x11000000
[    4.243461] hub 1-0:1.0: USB hub found
[    4.248960] hub 1-0:1.0: 1 port detected
[    4.252779] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    4.256657] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 2
[    4.261871] xhci-hcd xhci-hcd.0.auto: Host supports USB 3.0  SuperSpeed
[    4.269581] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[    4.276422] hub 2-0:1.0: USB hub found
[    4.284436] hub 2-0:1.0: 1 port detected
[    4.288146] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    4.291995] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 3
[    4.297499] xhci-hcd xhci-hcd.1.auto: hcc params 0x0228f065 hci version 0x100 quirks 0x0000000002010010
[    4.304929] xhci-hcd xhci-hcd.1.auto: irq 111, io mem 0x10000000
[    4.314673] hub 3-0:1.0: USB hub found
[    4.320479] hub 3-0:1.0: 1 port detected
[    4.324313] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    4.328102] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 4
[    4.333466] xhci-hcd xhci-hcd.1.auto: Host supports USB 3.0  SuperSpeed
[    4.341015] usb usb4: We don't know the algorithms for LPM for this host, disabling LPM.
[    4.347971] hub 4-0:1.0: USB hub found
[    4.355984] hub 4-0:1.0: 1 port detected
[    4.361164] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    4.364940] init: - preinit -
[    5.693942] Generic PHY fixed-0:01: attached PHY driver [Generic PHY] (mii_bus:phy_addr=fixed-0:01, irq=POLL)
[    5.695341] dwmac1000: Master AXI performs any burst length
[    5.702849] ipq806x-gmac-dwmac 37400000.ethernet eth1: IEEE 1588-2008 Advanced Timestamp supported
[    5.708490] ipq806x-gmac-dwmac 37400000.ethernet eth1: registered PTP clock
[    5.718340] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    6.793200] ipq806x-gmac-dwmac 37400000.ethernet eth1: Link is Up - 1Gbps/Full - flow control off
[    6.793275] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready
[    8.899424] procd: - early -
[    8.899562] procd: - watchdog -
[    9.550522] procd: - watchdog -
[    9.551021] procd: - ubus -
[    9.605286] procd: - init -
Please press Enter to activate this console.
[    9.709522] kmodloader: loading kernel modules from /etc/modules.d/*
[    9.711344] ip6_tables: (C) 2000-2006 Netfilter Core Team
[    9.718577] Loading modules backported from Linux version v4.19.7-0-g61c68f2a2af0
[    9.720232] Backport generated by backports.git v4.19.7-1-0-g148b072d
[    9.728596] ip_tables: (C) 2000-2006 Netfilter Core Team
[    9.736682] nf_conntrack version 0.5.0 (8192 buckets, 32768 max)
[    9.761616] xt_time: kernel timezone is -0000
[    9.779861] PPP generic driver version 2.4.2
[    9.781661] NET: Registered protocol family 24
[    9.795285] ath10k 4.16 driver, optimized for CT firmware, probing pci device: 0x40.
[    9.795996] ath10k_pci 0000:01:00.0: enabling device (0140 -> 0142)
[    9.802675] ath10k_pci 0000:01:00.0: pci irq msi oper_irq_mode 2 irq_mode 0 reset_mode 0
[    9.975599] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/fwcfg-pci-0000:01:00.0.txt failed with error -2
[    9.975643] ath10k_pci 0000:01:00.0: Falling back to user helper
[   10.013864] firmware ath10k!fwcfg-pci-0000:01:00.0.txt: firmware_loading_store: map pages failed
[   10.014180] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/pre-cal-pci-0000:01:00.0.bin failed with error -2
[   10.021726] ath10k_pci 0000:01:00.0: Falling back to user helper
[   14.259017] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/QCA99X0/hw2.0/ct-firmware-5.bin failed with error -2
[   14.259057] ath10k_pci 0000:01:00.0: Falling back to user helper
[   14.307517] firmware ath10k!QCA99X0!hw2.0!ct-firmware-5.bin: firmware_loading_store: map pages failed
[   14.307788] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/QCA99X0/hw2.0/ct-firmware-2.bin failed with error -2
[   14.315843] ath10k_pci 0000:01:00.0: Falling back to user helper
[   14.367096] firmware ath10k!QCA99X0!hw2.0!ct-firmware-2.bin: firmware_loading_store: map pages failed
[   14.367442] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/QCA99X0/hw2.0/firmware-6.bin failed with error -2
[   14.375449] ath10k_pci 0000:01:00.0: Falling back to user helper
[   14.421036] firmware ath10k!QCA99X0!hw2.0!firmware-6.bin: firmware_loading_store: map pages failed
[   14.422707] ath10k_pci 0000:01:00.0: qca99x0 hw2.0 target 0x01000000 chip_id 0x003b01ff sub 168c:0002
[   14.429027] ath10k_pci 0000:01:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   14.441474] ath10k_pci 0000:01:00.0: firmware ver 10.4b-ct-9980-fW-012-620ae964 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT crc32 52695766
[   14.507362] ath10k_pci 0000:01:00.0: board_file api 2 bmi_id 1:1 crc32 08fa09f2
[   15.694480] ath10k_pci 0000:01:00.0: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   15.694508] ath10k_pci 0000:01:00.0: msdu-desc: 2500  skid: 32
[   15.770280] ath10k_pci 0000:01:00.0: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   15.771030] ath10k_pci 0000:01:00.0: wmi print 'free: 35468 iram: 35780 sram: 12808'
[   16.013030] ath10k_pci 0000:01:00.0: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-file max-sta 32 raw 0 hwcrypto 1
[   16.121879] ath10k 4.16 driver, optimized for CT firmware, probing pci device: 0x40.
[   16.123055] ath10k_pci 0001:01:00.0: enabling device (0140 -> 0142)
[   16.129615] ath10k_pci 0001:01:00.0: pci irq msi oper_irq_mode 2 irq_mode 0 reset_mode 0
[   16.304899] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/fwcfg-pci-0001:01:00.0.txt failed with error -2
[   16.304937] ath10k_pci 0001:01:00.0: Falling back to user helper
[   16.424350] firmware ath10k!fwcfg-pci-0001:01:00.0.txt: firmware_loading_store: map pages failed
[   16.424542] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/pre-cal-pci-0001:01:00.0.bin failed with error -2
[   16.432201] ath10k_pci 0001:01:00.0: Falling back to user helper
[   21.382164] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/QCA99X0/hw2.0/ct-firmware-5.bin failed with error -2
[   21.382212] ath10k_pci 0001:01:00.0: Falling back to user helper
[   21.436034] firmware ath10k!QCA99X0!hw2.0!ct-firmware-5.bin: firmware_loading_store: map pages failed
[   21.436331] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/QCA99X0/hw2.0/ct-firmware-2.bin failed with error -2
[   21.444355] ath10k_pci 0001:01:00.0: Falling back to user helper
[   21.497140] firmware ath10k!QCA99X0!hw2.0!ct-firmware-2.bin: firmware_loading_store: map pages failed
[   21.497481] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/QCA99X0/hw2.0/firmware-6.bin failed with error -2
[   21.505501] ath10k_pci 0001:01:00.0: Falling back to user helper
[   21.555474] firmware ath10k!QCA99X0!hw2.0!firmware-6.bin: firmware_loading_store: map pages failed
[   21.555602] ath10k_pci 0001:01:00.0: qca99x0 hw2.0 target 0x01000000 chip_id 0x003b01ff sub 168c:0002
[   21.563391] ath10k_pci 0001:01:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   21.574658] ath10k_pci 0001:01:00.0: firmware ver 10.4b-ct-9980-fW-012-620ae964 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT crc32 52695766
[   21.641838] ath10k_pci 0001:01:00.0: board_file api 2 bmi_id 1:2 crc32 08fa09f2
[   22.823399] ath10k_pci 0001:01:00.0: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   22.823426] ath10k_pci 0001:01:00.0: msdu-desc: 2500  skid: 32
[   22.901850] ath10k_pci 0001:01:00.0: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   22.902632] ath10k_pci 0001:01:00.0: wmi print 'free: 35468 iram: 35780 sram: 12808'
[   23.150497] ath10k_pci 0001:01:00.0: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-file max-sta 32 raw 0 hwcrypto 1
[   23.262587] kmodloader: done loading kernel modules from /etc/modules.d/*
[   26.720854] Generic PHY fixed-0:01: attached PHY driver [Generic PHY] (mii_bus:phy_addr=fixed-0:01, irq=POLL)
[   26.721558] dwmac1000: Master AXI performs any burst length
[   26.729828] ipq806x-gmac-dwmac 37400000.ethernet eth1: IEEE 1588-2008 Advanced Timestamp supported
[   26.735282] ipq806x-gmac-dwmac 37400000.ethernet eth1: registered PTP clock
[   26.744309] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready
[   26.771635] br-lan: port 1(eth1.1) entered blocking state
[   26.771663] br-lan: port 1(eth1.1) entered disabled state
[   26.776270] device eth1.1 entered promiscuous mode
[   26.781386] device eth1 entered promiscuous mode
[   26.796647] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   26.807719] Generic PHY fixed-0:00: attached PHY driver [Generic PHY] (mii_bus:phy_addr=fixed-0:00, irq=POLL)
[   26.808427] dwmac1000: Master AXI performs any burst length
[   26.816694] ipq806x-gmac-dwmac 37200000.ethernet eth0: IEEE 1588-2008 Advanced Timestamp supported
[   26.822087] ipq806x-gmac-dwmac 37200000.ethernet eth0: registered PTP clock
[   26.831530] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[   26.844112] IPv6: ADDRCONF(NETDEV_UP): eth0.2: link is not ready
[   27.754759] ipq806x-gmac-dwmac 37400000.ethernet eth1: Link is Up - 1Gbps/Full - flow control off
[   27.757885] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready
[   27.763657] br-lan: port 1(eth1.1) entered blocking state
[   27.768708] br-lan: port 1(eth1.1) entered forwarding state
[   27.777502] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   27.913229] ipq806x-gmac-dwmac 37200000.ethernet eth0: Link is Up - 1Gbps/Full - flow control off
[   27.913372] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   27.921991] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.2: link becomes ready



BusyBox v1.29.3 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+8855-dbecc23962
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# sysupgrade http://taiha.net/jenkins/job/OpenWrt-master-BUFFALO-W
XR-2533DHP/lastSuccessfulBuild/artifact/bin/targets/ipq806x/generic/openwrt-ipq8
06x-buffalo_wxr-2533dhp-squashfs-sysupgrade.bin
Downloading 'http://taiha.net/jenkins/job/OpenWrt-master-BUFFALO-WXR-2533DHP/lastSuccessfulBuild/artifact/bin/targets/ipq806x/generic/openwrt-ipq806x-buffalo_wxr-2533dhp-squashfs-sysupgrade.bin'
Connecting to 240b:12:500:65f0:c822:64a3:7e11:4961:80
Writing to '/tmp/sysupgrade.img'
/tmp/sysupgrade.img  100% |*******************************|  4890k  0:00:00 ETA
Download completed (5008076 bytes)
Cannot save config while running from ramdisk.
Commencing upgrade. Closing all shell sessions.
Watchdog handover: fd=3
- watchdog -
killall: telnetd: no process killed
Sending TERM to remaining processes ... ntpd odhcp6c udhcpc dnsmasq ubusd logd netifd odhcpd 
Sending KILL to remaining processes ... 
Performing system upgrade...

created fake-rootfs data: /tmp/fkroot.bin
fake-rootfs data checksum: 0xd0
[   65.679406] ubi1: attaching mtd1
[   66.865186] ubi1: scanning is finished
[   66.888168] ubi1: attached mtd1 (name "rootfs_1", size 64 MiB)
[   66.888194] ubi1: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[   66.892972] ubi1: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[   66.899747] ubi1: VID header offset: 2048 (aligned 2048), data offset: 4096
[   66.906698] ubi1: good PEBs: 512, bad PEBs: 0, corrupted PEBs: 0
[   66.913461] ubi1: user volume: 3, internal volumes: 1, max. volumes count: 128
[   66.919625] ubi1: max/mean erase counter: 6/1, WL threshold: 4096, image sequence number: 1171577802
[   66.926740] ubi1: available PEBs: 136, total reserved PEBs: 376, PEBs reserved for bad PEB handling: 40
[   66.936144] ubi1: background thread "ubi_bgt1d" started, PID 1766
UBI device number 1, total 512 LEBs (65011712 bytes, 62.0 MiB), available 136 LEBs (17268736 bytes, 16.4 MiB), LEB size 126976 bytes (124.0 KiB)
Volume ID 0, size 18 LEBs (2285568 bytes, 2.1 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "kernel", alignment 1
Volume ID 1, size 1 LEBs (126976 bytes, 124.0 KiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "ubi_rootfs", alignment 1
write fake-rootfs data to ubi0_1
Volume ID 2, size 22 LEBs (2793472 bytes, 2.6 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs", alignment 1
Set volume size to 54218752
Volume ID 3, size 427 LEBs (54218752 bytes, 51.7 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs_data", alignment 1
sysupgrade successful
umount: can't unmount /dev: Resource busy
umount: can't unmount /tmp: Resource busy
umount: can't unmount /: Invalid argument
[   71.331901] reboot: Restarting system


BUFFALO WXR-2533DHP U-Boot Ver 1.14 (May 18 2015 - 13:24:36)

CPU:   IPQ8064 clock 1.4 GHz
DRAM:  DDR3 512 MiB clock 533 MHz
NAND:  ECC 4 bits, 256 MiB
SF: Detected W25Q32 with page size 64 KiB, total 4 MiB
MMC:   
In:    serial
Out:   serial
Err:   serial
cdp: get part failed for 0:HLOS
cdp: get part failed for rootfs
Net:   MAC2 addr:74:3:bd:bc:1d:98
athrs17_reg_init: complete
athrs17_vlan_config ...done
S17c init  done
eth1
Memory Test Start
Pattern: 55555555
Pattern: AAAAAAAA
Pattern: 00000000
Memory Test Pass 

Hit any key to stop autoboot:  0 
Checking Bank1 Image ... 
Creating 1 MTD partitions on "nand0":
0x000000000000-0x000004000000 : "mtd=0"
Bank1 Image is good
kernel_checksum is 0xef770a57 , rootfs_checksum is 0xd0 
Checking Bank2 Image ... 
Creating 1 MTD partitions on "nand0":
0x000004000000-0x000008000000 : "mtd=0"
UBI Volume is empty 
Bank2 Image is fail

NAND erase: device 0 offset 0x4000000, size 0x4000000
Erasing at 0x7fe0000 -- 100% complete.
OK
Creating 1 MTD partitions on "nand0":
0x000004000000-0x000008000000 : "mtd=0"
UBI: empty MTD device detected
UBI: create volume table (copy #1)
UBI: create volume table (copy #2)
Creating dynamic volume kernel of size 5332992
Creating dynamic volume ubi_rootfs of size 31490048
Creating dynamic volume ubi_rootfs_data of size 5332992
Bank2 UBI Partition is Broken
Cpoy to Bank2 Image from Bank1 Image 
Creating 1 MTD partitions on "nand0":
0x000004000000-0x000008000000 : "mtd=0"
2265046 bytes written to volume kernel
158 bytes written to volume ubi_rootfs
MMC Device 0 not found

dmagic1 0 dmagic2 0 
 
MMC Device 0 not found
Using nand device 1
Device 1: nand1... is now current device
bootargs=console=ttyHSL1,115200n8 ubi.mtd=rootfs root=mtd:ubi_rootfs rootfstype=squashfs
Booting from flash
set mtdids nand0=nand0 && set mtdparts mtdparts=nand0:0x4000000@0x0(fs),${msmparts} && ubi part fs && ubi read 0x44000000 kernel && bootm 0x44000000
Creating 1 MTD partitions on "nand0":
0x000000000000-0x000004000000 : "mtd=0"
   Image Name:   ARM OpenWrt Linux-4.14.89
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2264982 Bytes = 2.2 MiB
   Load Address: 42208000
   Entry Point:  42208000
   Verifying Checksum ... OK
   Loading Kernel Image ... OK
OK
Setting up atags for msm partition: rootfs

device nand0 , # parts = 1
 #: name                size            offset          mask_flags
 0: fs                  0x04000000      0x00000000      0

active partition: nand0,0 - (fs) 0x04000000 @ 0x00000000

defaults:
mtdids  : none
mtdparts: none
Using machid 0x1260 from environment

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 4.14.89 (jenkins@tofu-z77hvub18_openwrt) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+8849-8f8ac4c3dc)) #0 SMP Thu Dec 20 13:01:38 2018
[    0.000000] CPU: ARMv7 Processor [512f04d0] revision 0 (ARMv7), cr=10c5787d
[    0.000000] CPU: div instructions available: patching division code
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, PIPT instruction cache
[    0.000000] OF: fdt: Machine model: Buffalo WXR-2533DHP
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] random: get_random_bytes called from start_kernel+0x88/0x408 with crng_init=0
[    0.000000] percpu: Embedded 15 pages/cpu @ddc01000 s29324 r8192 d23924 u61440
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 121920
[    0.000000] Kernel command line: 
[    0.000000] Bootloader command line (ignored): console=ttyHSL1,115200n8 ubi.mtd=rootfs root=mtd:ubi_rootfs rootfstype=squashfs
[    0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
[    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Memory: 479436K/491520K available (4745K kernel code, 152K rwdata, 1260K rodata, 1024K init, 228K bss, 12084K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
[    0.000000]     vmalloc : 0xde800000 - 0xff800000   ( 528 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xde000000   ( 480 MB)
[    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
[    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
[    0.000000]       .text : 0xc0208000 - 0xc07a25f8   (5738 kB)
[    0.000000]       .init : 0xc0900000 - 0xc0a00000   (1024 kB)
[    0.000000]       .data : 0xc0a00000 - 0xc0a261c0   ( 153 kB)
[    0.000000]        .bss : 0xc0a28000 - 0xc0a610d8   ( 229 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[    0.000000] clocksource: dg_timer: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 305801671480 ns
[    0.000006] sched_clock: 32 bits at 6MHz, resolution 160ns, wraps every 343597383600ns
[    0.000020] Switching to timer-based delay loop, resolution 160ns
[    0.000233] Calibrating delay loop (skipped), value calculated using timer frequency.. 12.50 BogoMIPS (lpj=62500)
[    0.000258] pid_max: default: 32768 minimum: 301
[    0.000380] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000397] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000971] CPU: Testing write buffer coherency: ok
[    0.001739] Setting up static identity map for 0x42300000 - 0x42300060
[    0.001898] Hierarchical SRCU implementation.
[    0.002637] smp: Bringing up secondary CPUs ...
[    0.004460] smp: Brought up 1 node, 2 CPUs
[    0.004478] SMP: Total of 2 processors activated (25.00 BogoMIPS).
[    0.004490] CPU: All CPU(s) started in SVC mode.
[    0.015005] VFP support v0.3: implementor 51 architecture 64 part 4d variant 2 rev 0
[    0.015167] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.015193] futex hash table entries: 512 (order: 3, 32768 bytes)
[    0.015304] pinctrl core: initialized pinctrl subsystem
[    0.016317] NET: Registered protocol family 16
[    0.016566] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.017921] cpuidle: using governor ladder
[    0.017988] cpuidle: using governor menu
[    0.039324] msm_bus_fabric_init_driver
[    0.040786] usbcore: registered new interface driver usbfs
[    0.040880] usbcore: registered new interface driver hub
[    0.040971] usbcore: registered new device driver usb
[    0.041031] pps_core: LinuxPPS API ver. 1 registered
[    0.041044] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti 
[    0.041075] PTP clock support registered
[    0.042920] clocksource: Switched to clocksource dg_timer
[    0.046232] NET: Registered protocol family 2
[    0.046750] TCP established hash table entries: 4096 (order: 2, 16384 bytes)
[    0.046792] TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
[    0.046845] TCP: Hash tables configured (established 4096 bind 4096)
[    0.046939] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    0.046970] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    0.047163] NET: Registered protocol family 1
[    0.048321] No memory allocated for crashlog
[    0.048588] workingset: timestamp_bits=30 max_order=17 bucket_order=0
[    0.053527] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.053545] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.062791] io scheduler noop registered
[    0.062810] io scheduler deadline registered (default)
[    0.064424] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda not found, using dummy regulator
[    0.064537] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda_phy not found, using dummy regulator
[    0.064633] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda_refclk not found, using dummy regulator
[    0.065410] OF: PCI: host bridge /soc/pci@1b500000 ranges:
[    0.065454] OF: PCI:    IO 0x0fe00000..0x0fefffff -> 0x0fe00000
[    0.065479] OF: PCI:   MEM 0x08000000..0x0fdfffff -> 0x08000000
[    0.173117] qcom-pcie 1b500000.pci: link up
[    0.173301] qcom-pcie 1b500000.pci: PCI host bridge to bus 0000:00
[    0.173325] pci_bus 0000:00: root bus resource [bus 00-ff]
[    0.173344] pci_bus 0000:00: root bus resource [io  0x0000-0xfffff] (bus address [0xfe00000-0xfefffff])
[    0.173359] pci_bus 0000:00: root bus resource [mem 0x08000000-0x0fdfffff]
[    0.173882] PCI: bus0: Fast back to back transfers disabled
[    0.176115] PCI: bus1: Fast back to back transfers disabled
[    0.176213] pci 0000:00:00.0: BAR 8: assigned [mem 0x08000000-0x081fffff]
[    0.176238] pci 0000:01:00.0: BAR 0: assigned [mem 0x08000000-0x081fffff 64bit]
[    0.176367] pci 0000:00:00.0: PCI bridge to [bus 01-ff]
[    0.176392] pci 0000:00:00.0:   bridge window [mem 0x08000000-0x081fffff]
[    0.176940] pcieport 0000:00:00.0: AER enabled with IRQ 34
[    0.177494] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda not found, using dummy regulator
[    0.177588] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda_phy not found, using dummy regulator
[    0.177701] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda_refclk not found, using dummy regulator
[    0.178452] OF: PCI: host bridge /soc/pci@1b700000 ranges:
[    0.178491] OF: PCI:    IO 0x31e00000..0x31efffff -> 0x31e00000
[    0.178514] OF: PCI:   MEM 0x2e000000..0x31dfffff -> 0x2e000000
[    0.288419] qcom-pcie 1b700000.pci: link up
[    0.288582] qcom-pcie 1b700000.pci: PCI host bridge to bus 0001:00
[    0.288603] pci_bus 0001:00: root bus resource [bus 00-ff]
[    0.288617] pci_bus 0001:00: root bus resource [mem 0x2e000000-0x31dfffff]
[    0.289088] PCI: bus0: Fast back to back transfers disabled
[    0.291458] PCI: bus1: Fast back to back transfers disabled
[    0.291542] pci 0001:00:00.0: BAR 8: assigned [mem 0x2e000000-0x2e1fffff]
[    0.291564] pci 0001:01:00.0: BAR 0: assigned [mem 0x2e000000-0x2e1fffff 64bit]
[    0.291696] pci 0001:00:00.0: PCI bridge to [bus 01-ff]
[    0.291716] pci 0001:00:00.0:   bridge window [mem 0x2e000000-0x2e1fffff]
[    0.292223] pcieport 0001:00:00.0: AER enabled with IRQ 67
[    0.294675] L2 @ QSB rate. Forcing new rate.
[    0.294885] L2 @ 384000 KHz
[    0.295056] CPU0 @ 800000 KHz
[    0.295069] CPU1 @ QSB rate. Forcing new rate.
[    0.295188] CPU1 @ 384000 KHz
[    0.299157] gsbi 16300000.gsbi: GSBI port protocol: 6 crci: 0
[    0.300554] gsbi 1a200000.gsbi: GSBI port protocol: 3 crci: 0
[    0.301994] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    0.302840] msm_serial 16340000.serial: msm_serial: detected port #0
[    0.302940] msm_serial 16340000.serial: uartclk = 7372800
[    0.303021] 16340000.serial: ttyMSM0 at MMIO 0x16340000 (irq = 100, base_baud = 460800) is a MSM
[    0.303058] msm_serial: console setup on port #0
[    1.035919] console [ttyMSM0] enabled
[    1.040612] msm_serial: driver initialized
[    1.049290] loop: module loaded
[    1.051437] nand: device found, Manufacturer ID: 0x2c, Chip ID: 0xaa
[    1.051472] nand: Micron MT29F2G08ABBEAH4
[    1.057952] nand: 256 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    1.061800] 2 fixed-partitions partitions found on MTD device qcom_nand.0
[    1.069289] Creating 2 MTD partitions on "qcom_nand.0":
[    1.076174] 0x000000000000-0x000004000000 : "ubi"
[    1.088958] random: fast init done
[    1.255704] 0x000004000000-0x000008000000 : "rootfs_1"
[    1.430904] spi_qup 1a280000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64
[    1.445696] m25p80 spi0.0: w25q32dw (4096 Kbytes)
[    1.445850] 13 fixed-partitions partitions found on MTD device spi0.0
[    1.449382] Creating 13 MTD partitions on "spi0.0":
[    1.455890] 0x000000000000-0x000000010000 : "SBL1"
[    1.461335] 0x000000010000-0x000000030000 : "MIBIB"
[    1.466187] 0x000000030000-0x000000060000 : "SBL2"
[    1.470890] 0x000000060000-0x000000090000 : "SBL3"
[    1.475866] 0x000000090000-0x0000000a0000 : "DDRCONFIG"
[    1.480512] 0x0000000a0000-0x0000000b0000 : "SSD"
[    1.485713] 0x0000000b0000-0x0000000e0000 : "TZ"
[    1.490482] 0x0000000e0000-0x000000100000 : "RPM"
[    1.495268] 0x000000100000-0x000000170000 : "APPSBL"
[    1.499769] 0x000000170000-0x000000180000 : "APPSBLENV"
[    1.504920] 0x000000180000-0x0000001c0000 : "ART"
[    1.509760] 0x0000001c0000-0x0000001d0000 : "BOOTCONFIG"
[    1.514742] 0x0000001d0000-0x000000240000 : "APPSBL_1"
[    1.520974] libphy: GPIO Bitbanged MDIO: probed
[    1.545534] switch0: Atheros AR8337 rev. 2 switch registered on gpio-0
[    2.386085] ar8327: qca,phy-rgmii-en is not specified
[    2.386473] libphy: Fixed MDIO Bus: probed
[    2.391822] ipq806x-gmac-dwmac 37200000.ethernet: PTP uses main clock
[    2.394538] stmmac - user ID: 0x10, Synopsys ID: 0x37
[    2.400628] ipq806x-gmac-dwmac 37200000.ethernet: Ring mode enabled
[    2.405749] ipq806x-gmac-dwmac 37200000.ethernet: DMA HW capability register supported
[    2.411743] ipq806x-gmac-dwmac 37200000.ethernet: Enhanced/Alternate descriptors
[    2.419796] ipq806x-gmac-dwmac 37200000.ethernet: Enabled extended descriptors
[    2.427360] ipq806x-gmac-dwmac 37200000.ethernet: RX Checksum Offload Engine supported
[    2.434388] ipq806x-gmac-dwmac 37200000.ethernet: COE Type 2
[    2.442204] ipq806x-gmac-dwmac 37200000.ethernet: TX Checksum insertion supported
[    2.448100] ipq806x-gmac-dwmac 37200000.ethernet: Wake-Up On Lan supported
[    2.455477] ipq806x-gmac-dwmac 37200000.ethernet: Enable RX Mitigation via HW Watchdog Timer
[    2.463990] ipq806x-gmac-dwmac 37400000.ethernet: PTP uses main clock
[    2.470947] stmmac - user ID: 0x10, Synopsys ID: 0x37
[    2.477195] ipq806x-gmac-dwmac 37400000.ethernet: Ring mode enabled
[    2.482136] ipq806x-gmac-dwmac 37400000.ethernet: DMA HW capability register supported
[    2.488278] ipq806x-gmac-dwmac 37400000.ethernet: Enhanced/Alternate descriptors
[    2.496272] ipq806x-gmac-dwmac 37400000.ethernet: Enabled extended descriptors
[    2.503832] ipq806x-gmac-dwmac 37400000.ethernet: RX Checksum Offload Engine supported
[    2.510784] ipq806x-gmac-dwmac 37400000.ethernet: COE Type 2
[    2.518765] ipq806x-gmac-dwmac 37400000.ethernet: TX Checksum insertion supported
[    2.524575] ipq806x-gmac-dwmac 37400000.ethernet: Wake-Up On Lan supported
[    2.531878] ipq806x-gmac-dwmac 37400000.ethernet: Enable RX Mitigation via HW Watchdog Timer
[    2.539407] i2c /dev entries driver
[    2.548166] Calibration not found.
[    2.550450] qcom-tsens 900000.thermal-sensor: tsens calibration failed
[    2.555169] Speed bin: 0
[    2.560427] PVS bin: 1
[    2.564487] cpuidle: enable-method property 'qcom,kpss-acc-v1' found operations
[    2.565363] cpuidle: enable-method property 'qcom,kpss-acc-v1' found operations
[    2.573013] sdhci: Secure Digital Host Controller Interface driver
[    2.579873] sdhci: Copyright(c) Pierre Ossman
[    2.586116] sdhci-pltfm: SDHCI platform and OF driver helper
[    2.592084] NET: Registered protocol family 10
[    2.597514] Segment Routing with IPv6
[    2.600515] NET: Registered protocol family 17
[    2.605008] 8021q: 802.1Q VLAN Support v1.8
[    2.608556] Registering SWP/SWPB emulation handler
[    2.625077] qcom_rpm 108000.rpm: RPM firmware 3.0.16777342
[    2.640317] s1a: supplied by regulator-dummy
[    2.640403] s1a: Bringing 0uV into 1050000-1050000uV
[    2.644025] s1b: supplied by regulator-dummy
[    2.648651] s1b: Bringing 0uV into 1050000-1050000uV
[    2.653105] s2a: supplied by regulator-dummy
[    2.657935] s2a: Bringing 0uV into 800000-800000uV
[    2.662294] s2b: supplied by regulator-dummy
[    2.666815] s2b: Bringing 0uV into 800000-800000uV
[    2.676585] UBI: auto-attach mtd0
[    2.676620] ubi0: attaching mtd0
[    2.771894] random: crng init done
[    3.703369] ubi0: scanning is finished
[    3.723698] ubi0: attached mtd0 (name "ubi", size 64 MiB)
[    3.723720] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    3.728068] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    3.734906] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    3.741697] ubi0: good PEBs: 512, bad PEBs: 0, corrupted PEBs: 0
[    3.748528] ubi0: user volume: 4, internal volumes: 1, max. volumes count: 128
[    3.754767] ubi0: max/mean erase counter: 13/1, WL threshold: 4096, image sequence number: 0
[    3.761753] ubi0: available PEBs: 0, total reserved PEBs: 512, PEBs reserved for bad PEB handling: 40
[    3.770525] ubi0: background thread "ubi_bgt0d" started, PID 62
[    3.771636] block ubiblock0_2: created from ubi0:2(rootfs)
[    3.785256] ubiblock: device ubiblock0_2 (rootfs) set to be root file[    3.807236] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    3.809550] Freeing unused kernel memory: 1024K
[    4.218765] init: Console is alive
[    4.218896] init: - watchdog -
[    5.275578] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    5.338958] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    5.340910] SCSI subsystem initialized
[    5.349699] ehci-platform: EHCI generic platform driver
[    5.352287] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    5.354237] ohci-platform: OHCI generic platform driver
[    5.491947] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    5.492026] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 1
[    5.496767] xhci-hcd xhci-hcd.0.auto: hcc params 0x0228f065 hci version 0x100 quirks 0x0000000002010010
[    5.504092] xhci-hcd xhci-hcd.0.auto: irq 110, io mem 0x11000000
[    5.514065] hub 1-0:1.0: USB hub found
[    5.519531] hub 1-0:1.0: 1 port detected
[    5.523408] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    5.527152] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 2
[    5.532445] xhci-hcd xhci-hcd.0.auto: Host supports USB 3.0  SuperSpeed
[    5.540162] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[    5.547031] hub 2-0:1.0: USB hub found
[    5.555000] hub 2-0:1.0: 1 port detected
[    5.558742] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    5.562572] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 3
[    5.568088] xhci-hcd xhci-hcd.1.auto: hcc params 0x0228f065 hci version 0x100 quirks 0x0000000002010010
[    5.575500] xhci-hcd xhci-hcd.1.auto: irq 111, io mem 0x10000000
[    5.585269] hub 3-0:1.0: USB hub found
[    5.591058] hub 3-0:1.0: 1 port detected
[    5.594878] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    5.598678] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 4
[    5.604030] xhci-hcd xhci-hcd.1.auto: Host supports USB 3.0  SuperSpeed
[    5.611594] usb usb4: We don't know the algorithms for LPM for this host, disabling LPM.
[    5.618544] hub 4-0:1.0: USB hub found
[    5.626539] hub 4-0:1.0: 1 port detected
[    5.631817] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    5.644966] init: - preinit -
[    7.476861] Generic PHY fixed-0:01: attached PHY driver [Generic PHY] (mii_bus:phy_addr=fixed-0:01, irq=POLL)
[    7.478368] dwmac1000: Master AXI performs any burst length
[    7.485848] ipq806x-gmac-dwmac 37400000.ethernet eth1: IEEE 1588-2008 Advanced Timestamp supported
[    7.491337] ipq806x-gmac-dwmac 37400000.ethernet eth1: registered PTP clock
[    7.501189] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    8.553642] ipq806x-gmac-dwmac 37400000.ethernet eth1: Link is Up - 1Gbps/Full - flow control off
[    8.553713] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready
[   10.773291] UBIFS (ubi0:3): default file-system created
[   11.003900] UBIFS (ubi0:3): background thread "ubifs_bgt0_3" started, PID 146
[   11.259172] UBIFS (ubi0:3): UBIFS: mounted UBI device 0, volume 3, name "rootfs_data"
[   11.259220] UBIFS (ubi0:3): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[   11.266118] UBIFS (ubi0:3): FS size: 52948992 bytes (50 MiB, 417 LEBs), journal size 2666496 bytes (2 MiB, 21 LEBs)
[   11.275967] UBIFS (ubi0:3): reserved for root: 2500911 bytes (2442 KiB)
[   11.286250] UBIFS (ubi0:3): media format: w4/r0 (latest is w5/r0), UUID CDD1044B-1045-48AF-83BC-80C1B67A1394, small LPT model
[   11.296754] mount_root: overlay filesystem has not been fully initialized yet
[   11.304594] mount_root: switching to ubifs overlay
[   11.337665] urandom-seed: Seed file not found (/etc/urandom.seed)
[   11.462077] procd: - early -
[   11.462255] procd: - watchdog -
[   12.136573] procd: - watchdog -
[   12.137066] procd: - ubus -
[   12.228244] procd: - init -
Please press Enter to activate this console.
[   12.437084] kmodloader: loading kernel modules from /etc/modules.d/*
[   12.439432] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   12.446643] Loading modules backported from Linux version v4.19.7-0-g61c68f2a2af0
[   12.447797] Backport generated by backports.git v4.19.7-1-0-g148b072d
[   12.456178] ip_tables: (C) 2000-2006 Netfilter Core Team
[   12.464372] nf_conntrack version 0.5.0 (8192 buckets, 32768 max)
[   12.492337] xt_time: kernel timezone is -0000
[   12.518176] PPP generic driver version 2.4.2
[   12.519623] NET: Registered protocol family 24
[   12.532410] ath10k 4.16 driver, optimized for CT firmware, probing pci device: 0x40.
[   12.532920] ath10k_pci 0000:01:00.0: enabling device (0140 -> 0142)
[   12.539874] ath10k_pci 0000:01:00.0: pci irq msi oper_irq_mode 2 irq_mode 0 reset_mode 0
[   12.715891] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/fwcfg-pci-0000:01:00.0.txt failed with error -2
[   12.715934] ath10k_pci 0000:01:00.0: Falling back to user helper
[   12.748124] firmware ath10k!fwcfg-pci-0000:01:00.0.txt: firmware_loading_store: map pages failed
[   12.748456] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/pre-cal-pci-0000:01:00.0.bin failed with error -2
[   12.756101] ath10k_pci 0000:01:00.0: Falling back to user helper
[   16.824798] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/QCA99X0/hw2.0/ct-firmware-5.bin failed with error -2
[   16.824843] ath10k_pci 0000:01:00.0: Falling back to user helper
[   16.867820] firmware ath10k!QCA99X0!hw2.0!ct-firmware-5.bin: firmware_loading_store: map pages failed
[   16.868131] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/QCA99X0/hw2.0/ct-firmware-2.bin failed with error -2
[   16.876143] ath10k_pci 0000:01:00.0: Falling back to user helper
[   16.925109] firmware ath10k!QCA99X0!hw2.0!ct-firmware-2.bin: firmware_loading_store: map pages failed
[   16.925458] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/QCA99X0/hw2.0/firmware-6.bin failed with error -2
[   16.933433] ath10k_pci 0000:01:00.0: Falling back to user helper
[   16.969418] firmware ath10k!QCA99X0!hw2.0!firmware-6.bin: firmware_loading_store: map pages failed
[   17.409313] ath10k_pci 0000:01:00.0: qca99x0 hw2.0 target 0x01000000 chip_id 0x003b01ff sub 168c:0002
[   17.409344] ath10k_pci 0000:01:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   17.419486] ath10k_pci 0000:01:00.0: firmware ver 10.4b-ct-9980-fW-012-620ae964 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT crc32 52695766
[   17.486698] ath10k_pci 0000:01:00.0: board_file api 2 bmi_id 1:1 crc32 08fa09f2
[   18.664895] ath10k_pci 0000:01:00.0: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   18.664922] ath10k_pci 0000:01:00.0: msdu-desc: 2500  skid: 32
[   18.740771] ath10k_pci 0000:01:00.0: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   18.741519] ath10k_pci 0000:01:00.0: wmi print 'free: 35468 iram: 35780 sram: 12808'
[   18.983955] ath10k_pci 0000:01:00.0: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-file max-sta 32 raw 0 hwcrypto 1
[   19.079243] ath10k 4.16 driver, optimized for CT firmware, probing pci device: 0x40.
[   19.080186] ath10k_pci 0001:01:00.0: enabling device (0140 -> 0142)
[   19.086998] ath10k_pci 0001:01:00.0: pci irq msi oper_irq_mode 2 irq_mode 0 reset_mode 0
[   19.255173] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/fwcfg-pci-0001:01:00.0.txt failed with error -2
[   19.255209] ath10k_pci 0001:01:00.0: Falling back to user helper
[   19.580424] firmware ath10k!fwcfg-pci-0001:01:00.0.txt: firmware_loading_store: map pages failed
[   19.580627] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/pre-cal-pci-0001:01:00.0.bin failed with error -2
[   19.588378] ath10k_pci 0001:01:00.0: Falling back to user helper
[   21.231532] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/QCA99X0/hw2.0/ct-firmware-5.bin failed with error -2
[   21.231577] ath10k_pci 0001:01:00.0: Falling back to user helper
[   21.274512] firmware ath10k!QCA99X0!hw2.0!ct-firmware-5.bin: firmware_loading_store: map pages failed
[   21.274782] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/QCA99X0/hw2.0/ct-firmware-2.bin failed with error -2
[   21.282722] ath10k_pci 0001:01:00.0: Falling back to user helper
[   21.352406] firmware ath10k!QCA99X0!hw2.0!ct-firmware-2.bin: firmware_loading_store: map pages failed
[   21.352671] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/QCA99X0/hw2.0/firmware-6.bin failed with error -2
[   21.360763] ath10k_pci 0001:01:00.0: Falling back to user helper
[   21.411628] firmware ath10k!QCA99X0!hw2.0!firmware-6.bin: firmware_loading_store: map pages failed
[   21.411830] ath10k_pci 0001:01:00.0: qca99x0 hw2.0 target 0x01000000 chip_id 0x003b01ff sub 168c:0002
[   21.419580] ath10k_pci 0001:01:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   21.431185] ath10k_pci 0001:01:00.0: firmware ver 10.4b-ct-9980-fW-012-620ae964 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT crc32 52695766
[   21.498050] ath10k_pci 0001:01:00.0: board_file api 2 bmi_id 1:2 crc32 08fa09f2
[   22.680151] ath10k_pci 0001:01:00.0: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   22.680183] ath10k_pci 0001:01:00.0: msdu-desc: 2500  skid: 32
[   22.757948] ath10k_pci 0001:01:00.0: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   22.758726] ath10k_pci 0001:01:00.0: wmi print 'free: 35468 iram: 35780 sram: 12808'
[   23.007042] ath10k_pci 0001:01:00.0: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-file max-sta 32 raw 0 hwcrypto 1
[   23.112941] kmodloader: done loading kernel modules from /etc/modules.d/*
[   27.460773] Generic PHY fixed-0:01: attached PHY driver [Generic PHY] (mii_bus:phy_addr=fixed-0:01, irq=POLL)
[   27.461478] dwmac1000: Master AXI performs any burst length
[   27.469761] ipq806x-gmac-dwmac 37400000.ethernet eth1: IEEE 1588-2008 Advanced Timestamp supported
[   27.475195] ipq806x-gmac-dwmac 37400000.ethernet eth1: registered PTP clock
[   27.484226] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready
[   27.510929] br-lan: port 1(eth1.1) entered blocking state
[   27.510958] br-lan: port 1(eth1.1) entered disabled state
[   27.515560] device eth1.1 entered promiscuous mode
[   27.520682] device eth1 entered promiscuous mode
[   27.551804] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   27.558909] Generic PHY fixed-0:00: attached PHY driver [Generic PHY] (mii_bus:phy_addr=fixed-0:00, irq=POLL)
[   27.559615] dwmac1000: Master AXI performs any burst length
[   27.567874] ipq806x-gmac-dwmac 37200000.ethernet eth0: IEEE 1588-2008 Advanced Timestamp supported
[   27.573330] ipq806x-gmac-dwmac 37200000.ethernet eth0: registered PTP clock
[   27.582682] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[   27.600269] IPv6: ADDRCONF(NETDEV_UP): eth0.2: link is not ready
[   28.563399] ipq806x-gmac-dwmac 37400000.ethernet eth1: Link is Up - 1Gbps/Full - flow control off
[   28.566617] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready
[   28.571700] br-lan: port 1(eth1.1) entered blocking state
[   28.577429] br-lan: port 1(eth1.1) entered forwarding state
[   28.595765] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   28.633401] ipq806x-gmac-dwmac 37200000.ethernet eth0: Link is Up - 1Gbps/Full - flow control off
[   28.633475] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   28.649836] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.2: link becomes ready



BusyBox v1.29.3 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+8855-dbecc23962
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# ubus call system board
{
        "kernel": "4.14.89",
        "hostname": "OpenWrt",
        "system": "ARMv7 Processor rev 0 (v7l)",
        "model": "Buffalo WXR-2533DHP",
        "board_name": "buffalo,wxr-2533dhp",
        "release": {
                "distribution": "OpenWrt",
                "version": "SNAPSHOT",
                "revision": "r0+8855-dbecc23962",
                "target": "ipq806x\/generic",
                "description": "OpenWrt SNAPSHOT r0+8855-dbecc23962"
        }
}

WXR-2533DHP ubinfo -a (stock)

stock firmwareにおける ubinfo -a のメモ。メーカーファームへの復旧用情報というような感じ。

root@AP7403BDBC1D98:/# ubinfo -a
UBI version:                    1
Count of UBI devices:           1
UBI control device major/minor: 10:58
Present UBI devices:            ubi0

ubi0
Volumes count:                           3
Logical eraseblock size:                 126976 bytes, 124.0 KiB
Total amount of logical eraseblocks:     512 (65011712 bytes, 62.0 MiB)
Amount of available logical eraseblocks: 171 (21712896 bytes, 20.7 MiB)
Maximum count of volumes                 128
Count of bad physical eraseblocks:       0
Count of reserved physical eraseblocks:  5
Current maximum erase counter value:     8
Minimum input/output unit size:          2048 bytes
Character device major/minor:            248:0
Present volumes:                         0, 1, 2

Volume ID:   0 (on ubi0)
Type:        dynamic
Alignment:   1
Size:        42 LEBs (5332992 bytes, 5.1 MiB)
State:       OK
Name:        kernel
Character device major/minor: 248:1
-----------------------------------
Volume ID:   1 (on ubi0)
Type:        dynamic
Alignment:   1
Size:        248 LEBs (31490048 bytes, 30.0 MiB)
State:       OK
Name:        ubi_rootfs
Character device major/minor: 248:2
-----------------------------------
Volume ID:   2 (on ubi0)
Type:        dynamic
Alignment:   1
Size:        42 LEBs (5332992 bytes, 5.1 MiB)
State:       OK
Name:        ubi_rootfs_data
Character device major/minor: 248:3

WXR-2533DHP pinmux ctl_reg

それっぽい値が取れたのでメモ。

レジスタ参考

計算式等

pinmux_base:	0x800000
ctl_reg_offset:	0x1000 + 0x10 * pin_id
ctl_reg:		pinmux_base + ctl_reg_offset

mux_bit: 2
pull_bit: 0
drv_bit: 6

# func (mux)
func = (ctl_reg >> mux_bit) & 7

# pull (bias)
pull = (ctl_reg >> pull_bit) & 3

# drive strength
drive_strength = (((ctl_reg >> drv_bit) & 7) + 1) * 2

static const char * const pulls_keeper[] = { /* ipq806xはこっち? */
	"no pull",
	"pull down",
	"keeper",
	"pull up"
};

static const char * const pulls_no_keeper[] = {
	"no pull",
	"pull down",
	"pull up",
};

devmem2を利用して取得した実際の値

###  U-Boot
pin  reg     val  func  pull  drv
0    801000  c4   1     0     8
1    801010  2c4  1     0     8
2    801020  1    0     1     2
3    801030  1    0     1     2
4    801040  1    0     1     2
5    801050  1    0     1     2
6    801060  100  0     0     a   (=10)
7    801070  300  0     0     a
8    801080  300  0     0     a
9    801090  300  0     0     a
10   8010a0  344  1     0     c   (=12)
11   8010b0  344  1     0     c
12   8010c0  4    1     0     2
13   8010d0  4    1     0     2
14   8010e0  1    0     1     2
15   8010f0  300  0     0     a
16   801100  300  0     0     a
17   801110  1    0     1     2
18   801120  105  1     1     a
19   801130  105  1     1     a
20   801140  303  0     3     a
21   801150  1c5  1     1     10  (=16)????
22   801160  300  0     0     a
23   801170  300  0     0     a
24   801180  300  0     0     a
25   801190  300  0     0     a
26   8011a0  300  0     0     a
27   8011b0  2c8  2     0     8
28   8011c0  2c8  2     0     8
29   8011d0  2c8  2     0     8
30   8011e0  2c8  2     0     8
31   8011f0  2c8  2     0     8
32   801200  2c8  2     0     8
33   801210  1    0     1     2
34   801220  304  1     0     a
35   801230  304  1     0     a
36   801240  304  1     0     a
37   801250  304  1     0     a
38   801260  304  1     0     a
39   801270  307  1     3     a
40   801280  306  1     2     a
41   801290  306  1     2     a
42   8012a0  306  1     2     a
43   8012b0  306  1     2     a
44   8012c0  306  1     2     a
45   8012d0  306  1     2     a
46   8012e0  306  1     2     a
47   8012f0  306  1     2     a
48   801300  1    0     1     2
49   801310  1    0     1     2
50   801320  1    0     1     2
51   801330  c8   2     0     8
52   801340  c8   2     0     8
53   801350  300  0     0     a
54   801360  100  0     0     a
55   801370  100  0     0     a
56   801380  100  0     0     a
57   801390  100  0     0     a
58   8013a0  1    0     1     2
59   8013b0  c8   2     0     8
60   8013c0  c8   2     0     8
61   8013d0  c8   2     0     8
62   8013e0  c8   2     0     8
63   8013f0  300  0     3     a
64   801400  100  0     0     a
65   801410  100  0     0     a
66   801420  1    0     1     2
67   801430  1    0     1     2
68   801440  1    0     1     2

###  Kernel
pin  reg     val  func  pull  drv
0    801000  c0   0     0     8
1    801010  2c4  1     0     8
2    801020  c0   0     0     8
3    801030  200  0     0     2
4    801040  1    0     1     2
5    801050  1    0     1     2
6    801060  3    0     3     2
7    801070  203  0     3     2
8    801080  203  0     3     2
9    801090  203  0     3     2
10   8010a0  344  1     0     c
11   8010b0  344  1     0     c
12   8010c0  144  1     0     c
13   8010d0  144  1     0     c
14   8010e0  c5   1     1     8
15   8010f0  203  0     3     2
16   801100  203  0     3     2
17   801110  c    3     0     2
18   801120  105  1     1     a
19   801130  105  1     1     a
20   801140  107  1     3     a
21   801150  145  1     1     c
22   801160  203  0     3     2
23   801170  203  0     3     2
24   801180  203  0     3     2
25   801190  203  0     3     2
26   8011a0  200  0     0     2
27   8011b0  c8   2     0     8
28   8011c0  c8   2     0     8
29   8011d0  c8   2     0     8
30   8011e0  c8   2     0     8
31   8011f0  c8   2     0     8
32   801200  c8   2     0     8
33   801210  301  0     1     a
34   801220  304  1     0     a
35   801230  304  1     0     a
36   801240  304  1     0     a
37   801250  304  1     0     a
38   801260  304  1     0     a
39   801270  307  1     3     a
40   801280  306  1     2     a
41   801290  306  1     2     a
42   8012a0  306  1     2     a
43   8012b0  306  1     2     a
44   8012c0  306  1     2     a
45   8012d0  306  1     2     a
46   8012e0  306  1     2     a
47   8012f0  306  1     2     a
48   801300  200  0     0     2
49   801310  1    0     1     2
50   801320  1    0     1     2
51   801330  c8   2     0     8
52   801340  c8   2     0     8
53   801350  200  0     0     2
54   801360  3    0     3     2
55   801370  3    0     3     2
56   801380  3    0     3     2
57   801390  3    0     3     2
58   8013a0  3    0     3     2
59   8013b0  c8   2     0     8
60   8013c0  c8   2     0     8
61   8013d0  c8   2     0     8
62   8013e0  c8   2     0     8
63   8013f0  200  0     0     2
64   801400  3    0     3     2
65   801410  3    0     3     2
66   801420  1    0     1     2
67   801430  3    0     3     2
68   801440  203  0     3     2

WXR-2533DHP factory firmware

initramfs + fakerootの構成。メーカーファームにおいて、UBI内のKernelパーティションがおよそ5MBしかないため、デフォルトから何もパッケージを追加していない最小ビルドの状態でないと入りきらなくなりやすい。

factoryファーム構成

taiha.net/jenkins での#123 ビルドの例

種類 header OpenWrt initramfs image fakeroot checksum
領域 0x0 – 0x80 0x80 – 0x516080 0x516080 – 0x51611E 0x51611E – 0x51611F
サイズ 0x80
(128 B)
0x516000
(5,208 KB)
0x9E
(158 B)
0x1
(1 B)
備考 メーカーファーム上でのチェックに使用されるファームウェアヘッダ
KernelとRootfsの各サイズ値も含む
OpenWrtのinitramfsイメージ + 5,208KBに合わせるためのpadding U-Bootのチェックを通過させるためのfakeなrootfs
(squashfs (157 byte) +
checksum (1 byte))
mkbuffaloimgによって付される、ファームウェアのチェックサム

手順

  • WebUIからfactoryファームを投入

    メーカーファームのWebUI上で、ファームウェア更新ページからfactoryイメージを選択して更新を実行

  • OpenWrt initramfs上でsysupgrade

    更新実行後再起動され、factoryファーム内のOpenWrt initramfsイメージで起動する。ここで、UBI形式のイメージを使用してsysupgradeを実行する。
    通常のtar形式のイメージでもsysupgradeできるものの、この時点では30MB前後あるfakeなrootfsがそのまま引き継がれてしまうため(正確にはfakeroot自体は158byteであるが、sysupgrade時にfakerootをバックアップする手法が
    # cat /dev/ubi0_x > /tmp/fkroot.bin
    であるため、30MBのボリューム全体が書き出される)、UBI形式のものを使用してmtd0を丸ごと書き換える。
    なお、UBI形式のイメージを使用する場合metadataの問題があるので
    sysupgrade -F
    を使用する。

  • 完了

    UBI形式のイメージでsysupgrade後、起動してくれば完了。

stock -> OpenWrt initramfsログ

root@AP7403BDBC1D98:/# Killed
Monitor.sh starting.......
Start of fw_blink_cnt.sh -------------------------------------------------
[  527.281287] IPv4: martian source 192.168.11.3 from 192.168.11.1, on dev eth0
[  527.287285] ll header: 00000000: ff ff ff ff ff ff 74 03 bd 13 bf 6d 08 06        ......t....m..
[  527.296063] IPv4: martian source 192.168.11.100 from 192.168.11.1, on dev eth0
[  527.303280] ll header: 00000000: ff ff ff ff ff ff 74 03 bd 13 bf 6d 08 06        ......t....m..
[  527.312058] IPv4: martian source 192.168.11.4 from 192.168.11.1, on dev eth0
[  527.319056] ll header: 00000000: ff ff ff ff ff ff 74 03 bd 13 bf 6d 08 06        ......t....m..
[  527.383755] IPv4: martian source 192.168.11.3 from 192.168.11.1, on dev eth0
[  527.389784] ll header: 00000000: ff ff ff ff ff ff 74 03 bd 13 bf 6d 08 06        ......t....m..
[  527.398531] IPv4: martian source 192.168.11.100 from 192.168.11.1, on dev eth0
[  527.405748] ll header: 00000000: ff ff ff ff ff ff 74 03 bd 13 bf 6d 08 06        ......t....m..
End of fw_blink_cnt.sh -------------------------------------------------
do ubi firmware upgrade ...
[  539.664761] UBI: attaching mtd1 to ubi1
[  539.667603] UBI: physical eraseblock size:   131072 bytes (128 KiB)
[  539.674226] UBI: logical eraseblock size:    126976 bytes
[  539.679412] UBI: smallest flash I/O unit:    2048
[  539.683880] UBI: VID header offset:          2048 (aligned 2048)
[  539.690221] UBI: data offset:                4096
[  540.292189] UBI: empty MTD device detected
[  540.295313] UBI: max. sequence number:       0
[  540.299781] UBI: create volume table (copy #1)
[  540.316713] UBI: create volume table (copy #2)
[  540.335020] UBI: attached mtd1 to ubi1
[  540.337738] UBI: MTD device name:            "rootfs_1"
[  540.343236] UBI: MTD device size:            64 MiB
[  540.347860] UBI: number of good PEBs:        512
[  540.352671] UBI: number of bad PEBs:         0
[  540.356826] UBI: number of corrupted PEBs:   0
[  540.361512] UBI: max. allowed volumes:       128
[  540.365854] UBI: wear-leveling threshold:    4096
[  540.370852] UBI: number of internal volumes: 1
[  540.374976] UBI: number of user volumes:     0
[  540.379725] UBI: available PEBs:             503
[  540.384005] UBI: total number of reserved PEBs: 9
[  540.388691] UBI: number of PEBs reserved for bad PEB handling: 5
[  540.395407] UBI: max/mean erase counter: 0/0
[  540.398937] UBI: image sequence number:  -2105425566
[  540.404154] UBI: background thread "ubi_bgt1d" started, PID 7403
ubiupdatevol /dev/ubi1_0 /tmp/uhttp-upgrade.img -o 128 -s 5332992
ubiupdatevol /dev/ubi1_1 /tmp/uhttp-upgrade.img -o 5333120 -s 158
$Shutting down pppd: 
disable_ipv4_dns
IPv6_dns = nameserver 240b:12:500:6500:225:36ff:fe14:e98c
reload_servers_safe
######policy stop
Stop DS-Lite Tunnel ...
Stop DS-Lite Tunnel done...
Stop MAP E ...
Stop DS-Lite Tunnel ...
Stop DS-Lite Tunnel done...
Stop MAP E ...
Stop RADVD ...
ip -6 addr delet 240b:12:500:6500:7603:bdff:febc:1d99/64 dev eth0
TMP_WAN_IPV6= 
[  571.545548] Restarting system.
[  571.547578] Going down for restart now


BUFFALO WXR-2533DHP U-Boot Ver 1.14 (May 18 2015 - 13:24:36)

CPU:   IPQ8064 clock 1.4 GHz
DRAM:  DDR3 512 MiB clock 533 MHz
NAND:  ECC 4 bits, 256 MiB
SF: Detected W25Q32 with page size 64 KiB, total 4 MiB
MMC:   
In:    serial
Out:   serial
Err:   serial
cdp: get part failed for 0:HLOS
cdp: get part failed for rootfs
Net:   MAC2 addr:74:3:bd:bc:1d:98
athrs17_reg_init: complete
athrs17_vlan_config ...done
S17c init  done
eth1
Memory Test Start
Pattern: 55555555
Pattern: AAAAAAAA
Pattern: 00000000
Memory Test Pass 

Hit any key to stop autoboot:  0 
Checking Bank1 Image ... 
Creating 1 MTD partitions on "nand0":
0x000000000000-0x000004000000 : "mtd=0"
Bank1 Image is good
kernel_checksum is 0x4d51f25f , rootfs_checksum is 0xd3 
Checking Bank2 Image ... 
Creating 1 MTD partitions on "nand0":
0x000004000000-0x000008000000 : "mtd=0"
Bank2 Image is good
kernel_checksum is 0x75087475 , rootfs_checksum is 0x2c 
Bank1 Image not the same as Bank2 Image 
Cpoy to Bank1 image from Bank2 image 
Creating 1 MTD partitions on "nand0":
0x000000000000-0x000004000000 : "mtd=0"
4582158 bytes written to volume kernel
158 bytes written to volume ubi_rootfs
MMC Device 0 not found

dmagic1 0 dmagic2 0 
 
MMC Device 0 not found
Using nand device 1
Device 1: nand1... is now current device
bootargs=console=ttyHSL1,115200n8 ubi.mtd=rootfs root=mtd:ubi_rootfs rootfstype=squashfs
Booting from flash
set mtdids nand0=nand0 && set mtdparts mtdparts=nand0:0x4000000@0x0(fs),${msmparts} && ubi part fs && ubi read 0x44000000 kernel && bootm 0x44000000
Creating 1 MTD partitions on "nand0":
0x000000000000-0x000004000000 : "mtd=0"
   Image Name:   ARM OpenWrt Linux-4.14.43
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    4582094 Bytes = 4.4 MiB
   Load Address: 42208000
   Entry Point:  42208000
   Verifying Checksum ... OK
   Loading Kernel Image ... OK
OK
Setting up atags for msm partition: rootfs

device nand0 , # parts = 1
 #: name                size            offset          mask_flags
 0: fs                  0x04000000      0x00000000      0

active partition: nand0,0 - (fs) 0x04000000 @ 0x00000000

defaults:
mtdids  : none
mtdparts: none
Using machid 0x1260 from environment

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 4.14.43 (jenkins@Tofu-Z77HVUS16) (gcc version 7.3.0 (OpenWrt GCC 7.3.0 r0+7048-9377c85)) #0 SMP Sun May 27 07:06:53 2018
[    0.000000] CPU: ARMv7 Processor [512f04d0] revision 0 (ARMv7), cr=10c5787d
[    0.000000] CPU: div instructions available: patching division code
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, PIPT instruction cache
[    0.000000] OF: fdt: Machine model: Buffalo WXR-2533DHP
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] random: get_random_bytes called from start_kernel+0x88/0x408 with crng_init=0
[    0.000000] percpu: Embedded 15 pages/cpu @ddc01000 s29260 r8192 d23988 u61440
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 121920
[    0.000000] Kernel command line: rootfstype=squashfs noinitrd
[    0.000000] Bootloader command line (ignored): console=ttyHSL1,115200n8 ubi.mtd=rootfs root=mtd:ubi_rootfs rootfstype=squashfs
[    0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
[    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Memory: 473276K/491520K available (4697K kernel code, 152K rwdata, 1252K rodata, 7168K init, 244K bss, 18244K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
[    0.000000]     vmalloc : 0xde800000 - 0xff800000   ( 528 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xde000000   ( 480 MB)
[    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
[    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
[    0.000000]       .text : 0xc0208000 - 0xc0796700   (5690 kB)
[    0.000000]       .init : 0xc0900000 - 0xc1000000   (7168 kB)
[    0.000000]       .data : 0xc1000000 - 0xc1026180   ( 153 kB)
[    0.000000]        .bss : 0xc1028000 - 0xc1065234   ( 245 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000]  RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
[    0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
[    0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[    0.000000] clocksource: dg_timer: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 305801671480 ns
[    0.000006] sched_clock: 32 bits at 6MHz, resolution 160ns, wraps every 343597383600ns
[    0.000019] Switching to timer-based delay loop, resolution 160ns
[    0.000225] Calibrating delay loop (skipped), value calculated using timer frequency.. 12.50 BogoMIPS (lpj=62500)
[    0.000252] pid_max: default: 32768 minimum: 301
[    0.000370] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000386] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000874] CPU: Testing write buffer coherency: ok
[    0.001586] Setting up static identity map for 0x42300000 - 0x42300060
[    0.001734] Hierarchical SRCU implementation.
[    0.002436] smp: Bringing up secondary CPUs ...
[    0.004173] smp: Brought up 1 node, 2 CPUs
[    0.004188] SMP: Total of 2 processors activated (25.00 BogoMIPS).
[    0.004197] CPU: All CPU(s) started in SVC mode.
[    0.015412] VFP support v0.3: implementor 51 architecture 64 part 4d variant 2 rev 0
[    0.015575] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.015600] futex hash table entries: 512 (order: 3, 32768 bytes)
[    0.015701] pinctrl core: initialized pinctrl subsystem
[    0.016690] NET: Registered protocol family 16
[    0.016963] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.018311] cpuidle: using governor ladder
[    0.018373] cpuidle: using governor menu
[    0.039035] msm_bus_fabric_init_driver
[    0.040407] usbcore: registered new interface driver usbfs
[    0.040495] usbcore: registered new interface driver hub
[    0.040583] usbcore: registered new device driver usb
[    0.040646] pps_core: LinuxPPS API ver. 1 registered
[    0.040659] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti 
[    0.040690] PTP clock support registered
[    0.042536] clocksource: Switched to clocksource dg_timer
[    0.045796] NET: Registered protocol family 2
[    0.046302] TCP established hash table entries: 4096 (order: 2, 16384 bytes)
[    0.046340] TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
[    0.046392] TCP: Hash tables configured (established 4096 bind 4096)
[    0.046483] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    0.046506] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    0.046689] NET: Registered protocol family 1
[    0.175112] No memory allocated for crashlog
[    0.175366] workingset: timestamp_bits=30 max_order=17 bucket_order=0
[    0.180057] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.180071] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.186783] io scheduler noop registered
[    0.186798] io scheduler deadline registered (default)
[    0.188291] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda not found, using dummy regulator
[    0.188411] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda_phy not found, using dummy regulator
[    0.188509] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda_refclk not found, using dummy regulator
[    0.189293] OF: PCI: host bridge /soc/pci@1b500000 ranges:
[    0.189336] OF: PCI:    IO 0x0fe00000..0x0fefffff -> 0x0fe00000
[    0.189361] OF: PCI:   MEM 0x08000000..0x0fdfffff -> 0x08000000
[    0.297233] qcom-pcie 1b500000.pci: link up
[    0.297414] qcom-pcie 1b500000.pci: PCI host bridge to bus 0000:00
[    0.297437] pci_bus 0000:00: root bus resource [bus 00-ff]
[    0.297456] pci_bus 0000:00: root bus resource [io  0x0000-0xfffff] (bus address [0xfe00000-0xfefffff])
[    0.297470] pci_bus 0000:00: root bus resource [mem 0x08000000-0x0fdfffff]
[    0.297988] PCI: bus0: Fast back to back transfers disabled
[    0.300219] PCI: bus1: Fast back to back transfers disabled
[    0.300313] pci 0000:00:00.0: BAR 8: assigned [mem 0x08000000-0x081fffff]
[    0.300339] pci 0000:01:00.0: BAR 0: assigned [mem 0x08000000-0x081fffff 64bit]
[    0.300467] pci 0000:00:00.0: PCI bridge to [bus 01-ff]
[    0.300492] pci 0000:00:00.0:   bridge window [mem 0x08000000-0x081fffff]
[    0.301049] pcieport 0000:00:00.0: AER enabled with IRQ 34
[    0.301604] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda not found, using dummy regulator
[    0.301704] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda_phy not found, using dummy regulator
[    0.301809] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda_refclk not found, using dummy regulator
[    0.302581] OF: PCI: host bridge /soc/pci@1b700000 ranges:
[    0.302620] OF: PCI:    IO 0x31e00000..0x31efffff -> 0x31e00000
[    0.302643] OF: PCI:   MEM 0x2e000000..0x31dfffff -> 0x2e000000
[    0.412697] qcom-pcie 1b700000.pci: link up
[    0.412856] qcom-pcie 1b700000.pci: PCI host bridge to bus 0001:00
[    0.412875] pci_bus 0001:00: root bus resource [bus 00-ff]
[    0.412889] pci_bus 0001:00: root bus resource [mem 0x2e000000-0x31dfffff]
[    0.413350] PCI: bus0: Fast back to back transfers disabled
[    0.415688] PCI: bus1: Fast back to back transfers disabled
[    0.415766] pci 0001:00:00.0: BAR 8: assigned [mem 0x2e000000-0x2e1fffff]
[    0.415788] pci 0001:01:00.0: BAR 0: assigned [mem 0x2e000000-0x2e1fffff 64bit]
[    0.415918] pci 0001:00:00.0: PCI bridge to [bus 01-ff]
[    0.415939] pci 0001:00:00.0:   bridge window [mem 0x2e000000-0x2e1fffff]
[    0.416440] pcieport 0001:00:00.0: AER enabled with IRQ 67
[    0.418679] L2 @ QSB rate. Forcing new rate.
[    0.418886] L2 @ 384000 KHz
[    0.419057] CPU0 @ 800000 KHz
[    0.419069] CPU1 @ QSB rate. Forcing new rate.
[    0.419182] CPU1 @ 384000 KHz
[    0.423201] gsbi 16300000.gsbi: GSBI port protocol: 6 crci: 0
[    0.424605] gsbi 1a200000.gsbi: GSBI port protocol: 3 crci: 0
[    0.426038] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    0.426852] msm_serial 16340000.serial: msm_serial: detected port #0
[    0.426954] msm_serial 16340000.serial: uartclk = 7372800
[    0.427031] 16340000.serial: ttyMSM0 at MMIO 0x16340000 (irq = 100, base_baud = 460800) is a MSM
[    0.427068] msm_serial: console setup on port #0
[    1.174152] console [ttyMSM0] enabled
[    1.178868] msm_serial: driver initialized
[    1.187499] loop: module loaded
[    1.189650] nand: device found, Manufacturer ID: 0x2c, Chip ID: 0xaa
[    1.189684] nand: Micron MT29F2G08ABBEAH4
[    1.196168] nand: 256 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    1.200004] 2 fixed-partitions partitions found on MTD device qcom_nand.0
[    1.207501] Creating 2 MTD partitions on "qcom_nand.0":
[    1.214379] 0x000000000000-0x000004000000 : "ubi"
[    1.226868] random: fast init done
[    1.387785] 0x000004000000-0x000008000000 : "rootfs_1"
[    1.556837] spi_qup 1a280000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64
[    1.572987] m25p80 spi0.0: w25q32dw (4096 Kbytes)
[    1.573207] 13 fixed-partitions partitions found on MTD device spi0.0
[    1.576688] Creating 13 MTD partitions on "spi0.0":
[    1.583220] 0x000000000000-0x000000010000 : "SBL1"
[    1.589172] 0x000000010000-0x000000030000 : "MIBIB"
[    1.593874] 0x000000030000-0x000000060000 : "SBL2"
[    1.598516] 0x000000060000-0x000000090000 : "SBL3"
[    1.603488] 0x000000090000-0x0000000a0000 : "DDRCONFIG"
[    1.608123] 0x0000000a0000-0x0000000b0000 : "SSD"
[    1.613385] 0x0000000b0000-0x0000000e0000 : "TZ"
[    1.618119] 0x0000000e0000-0x000000100000 : "RPM"
[    1.622938] 0x000000100000-0x000000170000 : "APPSBL"
[    1.627416] 0x000000170000-0x000000180000 : "APPSBLENV"
[    1.632460] 0x000000180000-0x0000001c0000 : "ART"
[    1.637552] 0x0000001c0000-0x0000001d0000 : "BOOTCONFIG"
[    1.642271] 0x0000001d0000-0x000000240000 : "APPSBL_1"
[    1.649136] libphy: GPIO Bitbanged MDIO: probed
[    1.689714] switch0: Atheros AR8337 rev. 2 switch registered on gpio-0
[    2.608695] libphy: Fixed MDIO Bus: probed
[    2.624332] ipq806x-gmac-dwmac 37200000.ethernet: PTP uses main clock
[    2.624822] stmmac - user ID: 0x10, Synopsys ID: 0x37
[    2.629771] ipq806x-gmac-dwmac 37200000.ethernet: Ring mode enabled
[    2.634928] ipq806x-gmac-dwmac 37200000.ethernet: DMA HW capability register supported
[    2.640882] ipq806x-gmac-dwmac 37200000.ethernet: Enhanced/Alternate descriptors
[    2.648953] ipq806x-gmac-dwmac 37200000.ethernet: Enabled extended descriptors
[    2.656514] ipq806x-gmac-dwmac 37200000.ethernet: RX Checksum Offload Engine supported
[    2.663543] ipq806x-gmac-dwmac 37200000.ethernet: COE Type 2
[    2.671348] ipq806x-gmac-dwmac 37200000.ethernet: TX Checksum insertion supported
[    2.677260] ipq806x-gmac-dwmac 37200000.ethernet: Wake-Up On Lan supported
[    2.684634] ipq806x-gmac-dwmac 37200000.ethernet: Enable RX Mitigation via HW Watchdog Timer
[    2.706879] ipq806x-gmac-dwmac 37400000.ethernet: PTP uses main clock
[    2.707227] stmmac - user ID: 0x10, Synopsys ID: 0x37
[    2.712318] ipq806x-gmac-dwmac 37400000.ethernet: Ring mode enabled
[    2.717450] ipq806x-gmac-dwmac 37400000.ethernet: DMA HW capability register supported
[    2.723524] ipq806x-gmac-dwmac 37400000.ethernet: Enhanced/Alternate descriptors
[    2.731416] ipq806x-gmac-dwmac 37400000.ethernet: Enabled extended descriptors
[    2.739050] ipq806x-gmac-dwmac 37400000.ethernet: RX Checksum Offload Engine supported
[    2.746080] ipq806x-gmac-dwmac 37400000.ethernet: COE Type 2
[    2.753983] ipq806x-gmac-dwmac 37400000.ethernet: TX Checksum insertion supported
[    2.759718] ipq806x-gmac-dwmac 37400000.ethernet: Wake-Up On Lan supported
[    2.767182] ipq806x-gmac-dwmac 37400000.ethernet: Enable RX Mitigation via HW Watchdog Timer
[    2.775005] i2c /dev entries driver
[    2.783800] Calibration not found.
[    2.785664] qcom-tsens 900000.thermal-sensor: tsens calibration failed
[    2.790763] Speed bin: 0
[    2.795721] PVS bin: 1
[    2.800191] cpuidle: enable-method property 'qcom,kpss-acc-v1' found operations
[    2.800610] cpuidle: enable-method property 'qcom,kpss-acc-v1' found operations
[    2.808496] sdhci: Secure Digital Host Controller Interface driver
[    2.815080] sdhci: Copyright(c) Pierre Ossman
[    2.821251] sdhci-pltfm: SDHCI platform and OF driver helper
[    2.828172] NET: Registered protocol family 10
[    2.833699] Segment Routing with IPv6
[    2.835799] NET: Registered protocol family 17
[    2.839994] 8021q: 802.1Q VLAN Support v1.8
[    2.843948] Registering SWP/SWPB emulation handler
[    2.864906] qcom_rpm 108000.rpm: RPM firmware 3.0.16777342
[    2.878827] s1a: supplied by regulator-dummy
[    2.878945] s1a: Bringing 0uV into 1050000-1050000uV
[    2.882564] s1b: supplied by regulator-dummy
[    2.887316] s1b: Bringing 0uV into 1050000-1050000uV
[    2.891756] s2a: supplied by regulator-dummy
[    2.896492] s2a: Bringing 0uV into 800000-800000uV
[    2.900939] s2b: supplied by regulator-dummy
[    2.905316] s2b: Bringing 0uV into 800000-800000uV
[    2.916522] UBI: auto-attach mtd0
[    2.916566] ubi0: attaching mtd0
[    3.057851] random: crng init done
[    3.980856] ubi0: scanning is finished
[    4.000883] ubi0: attached mtd0 (name "ubi", size 64 MiB)
[    4.000904] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    4.005316] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    4.012022] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    4.018935] ubi0: good PEBs: 512, bad PEBs: 0, corrupted PEBs: 0
[    4.025721] ubi0: user volume: 3, internal volumes: 1, max. volumes count: 128
[    4.031903] ubi0: max/mean erase counter: 39/15, WL threshold: 4096, image sequence number: 339727551
[    4.038991] ubi0: available PEBs: 136, total reserved PEBs: 376, PEBs reserved for bad PEB handling: 40
[    4.048323] hctosys: unable to open rtc device (rt[    4.073367] Freeing unused kernel memory: 7168K
[    4.087573] init: Console is alive
[    4.087697] init: - watchdog -
[    4.104626] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    4.110417] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    4.113994] SCSI subsystem initialized
[    4.126371] ehci-platform: EHCI generic platform driver
[    4.130687] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    4.131106] ohci-platform: OHCI generic platform driver
[    4.271034] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    4.271126] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 1
[    4.275915] xhci-hcd xhci-hcd.0.auto: hcc params 0x0228f065 hci version 0x100 quirks 0x02010010
[    4.283205] xhci-hcd xhci-hcd.0.auto: irq 110, io mem 0x11000000
[    4.292357] hub 1-0:1.0: USB hub found
[    4.298092] hub 1-0:1.0: 1 port detected
[    4.301669] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    4.305610] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 2
[    4.310933] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[    4.318843] hub 2-0:1.0: USB hub found
[    4.326804] hub 2-0:1.0: 1 port detected
[    4.330527] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    4.334440] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 3
[    4.339799] xhci-hcd xhci-hcd.1.auto: hcc params 0x0228f065 hci version 0x100 quirks 0x02010010
[    4.347299] xhci-hcd xhci-hcd.1.auto: irq 111, io mem 0x10000000
[    4.356352] hub 3-0:1.0: USB hub found
[    4.362165] hub 3-0:1.0: 1 port detected
[    4.365957] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    4.369780] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 4
[    4.375220] usb usb4: We don't know the algorithms for LPM for this host, disabling LPM.
[    4.383053] hub 4-0:1.0: USB hub found
[    4.390977] hub 4-0:1.0: 1 port detected
[    4.396255] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    4.406055] init: - preinit -
[    5.803695] Generic PHY fixed-0:01: attached PHY driver [Generic PHY] (mii_bus:phy_addr=fixed-0:01, irq=POLL)
[    5.804924] dwmac1000: Master AXI performs any burst length
[    5.812599] ipq806x-gmac-dwmac 37400000.ethernet eth1: IEEE 1588-2008 Advanced Timestamp supported
[    5.818289] ipq806x-gmac-dwmac 37400000.ethernet eth1: registered PTP clock
[    5.827988] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    6.893002] ipq806x-gmac-dwmac 37400000.ethernet eth1: Link is Up - 1Gbps/Full - flow control off
[    6.894884] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready
[    9.010297] procd: - early -
[    9.010436] procd: - watchdog -
[    9.648365] procd: - watchdog -
[    9.648938] procd: - ubus -
[    9.703984] procd: - init -
Please press Enter to activate this console.
[    9.815882] kmodloader: loading kernel modules from /etc/modules.d/*
[    9.817955] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   10.153329] Loading modules backported from Linux version wt-2017-11-01-0-gfe248fc2c180
[   10.153375] Backport generated by backports.git v4.14-rc2-1-31-g86cf0e5d
[   10.163453] ip_tables: (C) 2000-2006 Netfilter Core Team
[   10.488968] nf_conntrack version 0.5.0 (8192 buckets, 32768 max)
[   10.677255] xt_time: kernel timezone is -0000
[   10.902532] PPP generic driver version 2.4.2
[   10.904196] NET: Registered protocol family 24
[   10.911171] ath10k_pci 0000:01:00.0: enabling device (0140 -> 0142)
[   10.911712] ath10k_pci 0000:01:00.0: pci irq msi oper_irq_mode 2 irq_mode 0 reset_mode 0
[   11.084416] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/pre-cal-pci-0000:01:00.0.bin failed with error -2
[   11.084447] ath10k_pci 0000:01:00.0: Falling back to user helper
[   13.786401] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/QCA99X0/hw2.0/firmware-6.bin failed with error -2
[   13.786438] ath10k_pci 0000:01:00.0: Falling back to user helper
[   13.833937] firmware ath10k!QCA99X0!hw2.0!firmware-6.bin: firmware_loading_store: map pages failed
[   13.835105] ath10k_pci 0000:01:00.0: qca99x0 hw2.0 target 0x01000000 chip_id 0x003b01ff sub 168c:0002
[   13.841811] ath10k_pci 0000:01:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 1
[   13.854434] ath10k_pci 0000:01:00.0: firmware ver 10.4.1.00030-1 api 5 features no-p2p crc32 d2901e01
[   13.915589] ath10k_pci 0000:01:00.0: board_file api 2 bmi_id 1:1 crc32 08fa09f2
[   15.180717] ath10k_pci 0000:01:00.0: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-file max-sta 512 raw 0 hwcrypto 1
[   15.268686] ath10k_pci 0001:01:00.0: enabling device (0140 -> 0142)
[   15.269367] ath10k_pci 0001:01:00.0: pci irq msi oper_irq_mode 2 irq_mode 0 reset_mode 0
[   15.444919] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/pre-cal-pci-0001:01:00.0.bin failed with error -2
[   15.444954] ath10k_pci 0001:01:00.0: Falling back to user helper
[   17.078546] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/QCA99X0/hw2.0/firmware-6.bin failed with error -2
[   17.078581] ath10k_pci 0001:01:00.0: Falling back to user helper
[   17.126213] firmware ath10k!QCA99X0!hw2.0!firmware-6.bin: firmware_loading_store: map pages failed
[   17.126453] ath10k_pci 0001:01:00.0: qca99x0 hw2.0 target 0x01000000 chip_id 0x003b01ff sub 168c:0002
[   17.134197] ath10k_pci 0001:01:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 1
[   17.146142] ath10k_pci 0001:01:00.0: firmware ver 10.4.1.00030-1 api 5 features no-p2p crc32 d2901e01
[   17.212801] ath10k_pci 0001:01:00.0: board_file api 2 bmi_id 1:2 crc32 08fa09f2
[   18.484905] ath10k_pci 0001:01:00.0: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-file max-sta 512 raw 0 hwcrypto 1
[   18.571599] kmodloader: done loading kernel modules from /etc/modules.d/*
[   22.730854] Generic PHY fixed-0:01: attached PHY driver [Generic PHY] (mii_bus:phy_addr=fixed-0:01, irq=POLL)
[   22.731856] dwmac1000: Master AXI performs any burst length
[   22.739891] ipq806x-gmac-dwmac 37400000.ethernet eth1: IEEE 1588-2008 Advanced Timestamp supported
[   22.745348] ipq806x-gmac-dwmac 37400000.ethernet eth1: registered PTP clock
[   22.754381] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready
[   22.774109] br-lan: port 1(eth1.1) entered blocking state
[   22.774142] br-lan: port 1(eth1.1) entered disabled state
[   22.778712] device eth1.1 entered promiscuous mode
[   22.783975] device eth1 entered promiscuous mode
[   22.799484] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   22.830039] Generic PHY fixed-0:00: attached PHY driver [Generic PHY] (mii_bus:phy_addr=fixed-0:00, irq=POLL)
[   22.831031] dwmac1000: Master AXI performs any burst length
[   22.839028] ipq806x-gmac-dwmac 37200000.ethernet eth0: IEEE 1588-2008 Advanced Timestamp supported
[   22.844558] ipq806x-gmac-dwmac 37200000.ethernet eth0: registered PTP clock
[   22.854006] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[   22.885216] IPv6: ADDRCONF(NETDEV_UP): eth0.2: link is not ready
[   23.832988] ipq806x-gmac-dwmac 37400000.ethernet eth1: Link is Up - 1Gbps/Full - flow control off
[   23.835339] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready
[   23.841147] br-lan: port 1(eth1.1) entered blocking state
[   23.847014] br-lan: port 1(eth1.1) entered forwarding state
[   23.864584] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   23.923601] ipq806x-gmac-dwmac 37200000.ethernet eth0: Link is Up - 1Gbps/Full - flow control off
[   23.923661] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   23.937431] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.2: link becomes ready



BusyBox v1.28.3 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+7048-9377c85
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/#