WSR-2533DHP2 pinctrlメモ(stock dts)

メーカーファームをバラしたら出てきたDeviceTreeからのpinctrl周りのメモ。

audiodefault
“pins_cmd_dat”

  • pinmux: 0x300 0x400 0x500 0x200 0x100
  • (pin num: 3, 4, 5, 2, 1)
  • drive-strength: 0xc
  • bias-pull-down
i2c0@0
“pins_bus”

  • pinmux: 0xe00 0xf00
  • (pin num: 14, 15)
  • bias-disable
mmc0default
“pins_cmd_dat”

  • pinmux: 0x2f02 0x3002 0x3102 0x3202 0x2802 0x2902 0x2a02 0x2b02 0x2c02
  • (pin num: 47, 48, 49, 50, 40, 41, 42, 43, 44)
  • input-enable
  • bias-pull-up

“pins_clk”

  • pinmux: 0x2d02
  • (pin num: 45)
  • bias-pull-down
mmc0@0
“pins_cmd_dat”

  • pinmux: 0x2f02 0x3002 0x3102 0x3202 0x2802 0x2902 0x2a02 0x2b02 0x2c02
  • (pin num: 47, 48, 49, 50, 40, 41, 42, 43, 44)
  • input-enable
  • drive-strength: 0x4
  • bias-pull-up

“pins_clk”

  • pinmux: 0x2d02
  • (pin num: 45)
  • drive-strength: 0x4
  • bias-pull-down: 0x66
mmc1default
“pins_cmd_dat”

  • pinmux: 0x1302 0x1202 0x1102 0x1002 0x1502
  • (pin num: 19, 18, 17, 16, 21)
  • input-enable
  • drive-strength: 0x8
  • bias-pull-up: 0x65

“pins_clk”

  • pinmux: 0x1402
  • (pin num: 20)
  • drive-strength: 0xc
  • bias-pull-down: 0x66

“pins_insert”

  • pinmux: 0x5101
  • (pin num: 81)
  • bias-pull-up
mmc1@0
“pins_cmd_dat”

  • pinmux: 0x1302 0x1202 0x1102 0x1002 0x1502
  • (pin num: 19, 18, 17, 16, 21)
  • input-enable
  • bias-pull-up: 0x65

“pins_clk”

  • pinmux: 0x1402
  • (pin num: 20)
  • bias-pull-down: 0x66
nanddefault
“pins_cmd_dat”

  • pinmux: 0x2500 0x2600 0x2700 0x2800 0x2900 0x2a00 0x2b00 0x2c00 0x2d00 0x2e00 0x2f00 0x3000 0x3100 0x3200
  • (pin num: 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50)
  • input-enable
  • drive-strength: 0x8
  • bias-pull-up
snand@0
“pins_cmd_dat”

  • pinmux: 0x802 0x902 0xb02 0xc02 0xd02
  • (pin num: 8, 9, 11, 12, 13)
  • input-enable
  • drive-strength: 0x10
  • bias-pull-up: 0x65

“pins_clk”

  • pinmux: 0xa02
  • (pin num: 10)
  • drive-strength: 0x10
  • bias-pull-down: 0x66
wbsysdefault
“pins_cmd_dat”

  • pinmux: 0x1301 0x1401
  • (pin num: 19, 20)
  • drive-strength: 0x10
wbsysepa
“pins_cmd_dat”

  • pinmux: 0x5b05 0x5c05 0x5d05 0x5e05 0x5f05 0x6005 0x6105 0x6205 0x6305 0x6405 0x4905 0x4a05 0x4b05 0x4c05 0x4d05 0x1605
  • (pin num: 91, 92, 93, 94, 95, 96, 97, 98, 99, 100, 73, 74, 75, 76, 77, 22)
広告

OpenWrtのgpio-export関連メモ

最近投げたPRでツッコミがあったり、GPIOのexport関連がちょっと込み入った状況なので自分用にメモ。
OpenWrtプロジェクトの中でもexportの用途(RESET等)によってはどれを使うかが明確に決まっていない状況なので、どれを使うべきというのは断言できない。
本来RESETを制御するGPIOは “reset-gpios” が使用されるべきながら、OpenWrtのRTL836xドライバ等ではreset-gpiosの実装が無い(?)などのため、代替としてGPIOをexportすることで対処。

gpio-export

固定でGPIOのexportが必要な場合、OpenWrtで従来から使用されていた方法。
ただしmainline (Linux Kernel)ではrejectされており、あくまでOpenWrt独自の実装方法。

コード例

/ {
...
	gpio-export {
		compatible = "gpio-export";
		#size-cells = <0>;

		gpio_switch_reset {
			gpio-export,name = "buffalo:usb-power";
			gpio-export,output = <1>;
			gpios = <&gpio 13 GPIO_ACTIVE_HIGH>;
		};
	};
};

  

fixed-regulator

電圧固定のレギュレータ。USB Vbus用にGPIOをexportする場合はもちろんのこと、SwitchチップのRESETラインも実態としては同じように特定の電圧を流すかどうかなので、fixed-regulatorを使用してRESETライン用のexportを定義したコードもある。
しかしながら、RESETラインの場合regulatorの本来の用途とは異なるので、今はあまり推奨されない(?)
USB VBusの場合はこれを使用。

コード例

/ {
...
	reg_usb_vbus: reg_usb_vbus {
		compatible = "regulator-fixed";
		regulator-name = "usb_vbus";
		regulator-min-microvolt = <5000000>;
		regulator-max-microvolt = <5000000>;
		gpio = <&gpio 8 GPIO_ACTIVE_HIGH>;
		enable-active-high;
	};
};
  

gpio-hog

OpenWrtのgpio-exportに似た実装で、mainlineに既に存在するもの。
Linux source code: Documentation/devicetree/bindings/gpio/gpio.txt (v4.14.106) – Bootlin
最近投げたPRで、前述の状況からOpenWrtでの実装が定まっていないため、DTS内で記述する方法としてこちらを提案された。

コード例

&gpio {
	rtl8367rb_reset {
		gpio-hog;
		gpios = <0 GPIO_ACTIVE_HIGH>;
		output-high;
		line-name = "rtl8367rb-reset";
	};
};
  

ath9kノード内の場合

&pcie {
	status = "okay";

	ath9k: wifi@0,0 {
		compatible = "pci168c,0030";
		reg = <0x0000 0 0 0 0>;
		qca,no-eeprom;
		#gpio-cells = <2>;
		gpio-controller;

		usb-hub-reset {
			gpio-hog;
			gpios = <10 GPIO_ACTIVE_HIGH>;
			output-high;
		};
	};
};
  

gpio-hog関連ログ(WN-AC733GR3の例)

[    0.489851] rt2880_gpio 10000600.gpio: registering 24 gpios
[    0.500886] rt2880_gpio 10000600.gpio: registering 24 irq handlers
[    0.513143] GPIO line 0 (rtl8367rb-reset) hogged as output/high
  

ユーザースペースでの実装

これまで書いたDeviceTree方面の実装とは別に、ブート時に実行されるスクリプトでGPIOのexportを設定するもの。正直なところ、この方法はあまり正確に把握していないので詳細は割愛。
target/linux/ramips/base-files/etc/board.d/03_gpio_switches
などが例らしい(?)。

WSR-2533DHP2

WG1200CRと同じく、縁があってサポート作業のためお借りできたもの。初となるMT7622機。このtargetのノウハウは無く、ゆっくり弄っていくのでメモ。

Switch

未確認
RTL8367S、OpenWrt / Linux Kernelにドライバ無し

MAC

  • LAN: 18:C2:BF:xx:xx:88 (board_data, mac (text))
  • WAN: 18:C2:BF:xx:xx:88 (board_data, mac (text))
  • 2.4G: 18:C2:BF:xx:xx:89 (Factory, 0x4 (hex))
  • 5G: 18:C2:BF:xx:xx:8C (Factory, 0x5004 (text))

U-Boot

カウントダウン中にスペースキーを押下するとautobootが停止

  • help
    MT7622> help
    ?       - alias for 'help'
    backup_message- print backup message.
    base    - print or set address offset
    bdinfo  - print Board Info structure
    boot    - boot default, i.e., run 'bootcmd'
    boot_to_ctp- boot to ctp
    bootd   - boot default, i.e., run 'bootcmd'
    bootm   - boot application image from memory
    bootmenu- ANSI terminal bootmenu
    bootp   - boot image via network using BOOTP/TFTP protocol
    chpart  - change active partition
    cmp     - memory compare
    coninfo - print console devices and information
    cp      - memory copy
    crc32   - checksum calculation
    ctp_check- check if ctp in load_addr is normal.
    download_setting- set download image file name , and device IP , server IP before upgrade
    dual_image_check- check if image broken and do recovery .
    echo    - echo args to console
    editenv - edit environment variable
    env     - environment handling commands
    esw_read- esw_read   - Dump external switch/GMAC status !!
    
    exit    - exit script
    false   - do nothing, unsuccessfully
    fdt     - flattened device tree utility commands
    filesize_check- check if filesize of the image that you want to upgrade is normal.
    go      - start application at address 'addr'
    help    - print command description/usage
    image_blks- read image size from img_size or image header if no specifying img_size, and divided by blk_size and save image blocks in image_blks variable.
    image_check- check if image in load_addr is normal.
    iminfo  - print header information for application image
    imxtract- extract a part of a multi-image
    invaild_env- need to invaild env.
    itest   - return true/false on integer compare
    loadb   - load binary file over serial line (kermit mode)
    loads   - load S-Record file over serial line
    loadx   - load binary file over serial line (xmodem mode)
    loady   - load binary file over serial line (ymodem mode)
    loop    - infinite loop on address range
    md      - memory display
    mdio    - mdio   - Ralink PHY register R/W command !!
    
    mm      - memory modify (auto-incrementing address)
    mtdparts- define flash/nand partitions
    mtk_image_blks- read image size from image header (MTK format) located at load_addr, divided by blk_size and save image blocks in image_blks variable.
    mw      - memory write (fill)
    nand    - NAND sub-system
    nboot   - boot from NAND device
    nm      - memory modify (constant address)
    nor     - nor   - nor flash command
    
    ping    - send ICMP ECHO_REQUEST to network host
    printenv- print environment variables
    reco_message- print recovery message.
    reg     - reg   - Ralink PHY register R/W command !!
    
    reset   - Perform RESET of the CPU
    run     - run commands in an environment variable
    saveenv - save environment variables to persistent storage
    serious_image_check- seriously check if image in load_addr is normal.
    setenv  - set environment variables
    showvar - print local hushshell variables
    sleep   - delay execution for some time
    snor    - snor   - spi-nor flash command
    
    source  - run script from memory
    test    - minimal test like /bin/sh
    tftpboot- boot image via network using TFTP protocol
    true    - do nothing, successfully
    uboot_check- check if uboot in load_addr is normal.
    version - print monitor, compiler and linker version
    

  • version
    MT7622> version
    
    U-Boot 2014.04-rc1 (Apr 18 2018 - 19:44:31) 0.05
    arm-linux-gcc (Buildroot 2014.11) 4.9.2
    GNU ld (GNU Binutils) 2.24
    

  • printenv
    MT7622> printenv
    arch=arm
    atf_filename=trustzone.bin
    baudrate=115200
    board=mt7622_evb
    board_name=mt7622_evb
    boot0=download_setting kernel;tftpboot ${loadaddr} ${kernel_filename}; bootm
    boot1=download_setting kernel;tftpboot ${loadaddr} ${kernel_filename};run boot_wr_img;run boot_rd_img;bootm
    boot10=download_setting flashimage;tftpboot ${loadaddr} ${flashimage_filename};run wr_flashimage;invaild_env
    boot2=dual_image_check;if test ${dual_image} = good; then run boot_rd_img;bootm;fi
    boot3=download_setting uboot;tftpboot ${loadaddr} ${uboot_filename};run wr_uboot;invaild_env
    boot4=loadb;run wr_uboot;invaild_env
    boot5=download_setting atf;tftpboot ${loadaddr} ${atf_filename};run wr_atf
    boot6=download_setting preloader;tftpboot ${loadaddr} ${preloader_filename};run wr_pl
    boot7=download_setting hdr;tftpboot ${loadaddr} ${hdr_filename};run wr_rom_hdr
    boot8=download_setting ctp;tftpboot ${loadaddr} ${ctp_filename};run wr_ctp
    boot9=run boot_rd_ctp;boot_to_ctp
    boot_rd_ctp=nand read 0x40000000 0x1400000 3000000
    boot_rd_img=nand read ${loadaddr} 0x200000 2000;image_blks 2048;nand read ${loadaddr} 0x200000 ${img_align_size}
    boot_wr_img=filesize_check 0x2000000;if test ${filesize_result} = good; then image_blks 131072;nand erase.spread 0x200000  ${filesize};image_blks 2048;nand write ${loadaddr} 0x200000 ${filesize};fi
    bootcmd=No
    bootdelay=1
    bootfile=linux.trx-recovery
    bootmenu_0=1. System Load Linux to SDRAM via TFTP.=run boot0
    bootmenu_1=2. System Load Linux Kernel then write to Flash via TFTP.=run boot1
    bootmenu_2=3. Boot system code via Flash.=run boot2
    bootmenu_3=4. System Load U-Boot then write to Flash via TFTP.=run boot3
    bootmenu_delay=30
    bootversion=0.05
    cpu=armv7
    ctp_filename=ctp.bin
    ethact=mtk_eth
    ethaddr=00:0C:E7:11:22:33
    fdt_high=0x6c000000
    flashimage_filename=flashimage.bin
    gpt_filename=GPT_EMMC
    hdr_filename=hdr.binary
    invaild_env=no
    ipaddr=192.168.11.1
    kernel_filename=openwrt-mtkarm-squashfs-trx.bin
    loadaddr=0x4007FF28
    preloader_filename=preloader_fpga7622_64_ldvt.bin
    serverip=192.168.11.2
    soc=mt7622
    stderr=serial
    stdin=serial
    stdout=serial
    uboot_filename=u-boot-mtk.bin
    vendor=mediatek
    wr_atf=filesize_check 0x20000;if test ${filesize_result} = good; then mtk_image_blks 131072;nand erase.spread 0x80000   ${filesize} ;mtk_image_blks 2048;nand write ${loadaddr} 0x80000 ${filesize};fi
    wr_ctp=filesize_check 0xF20000;if test ${filesize_result} = good; then nand erase.spread 0x1400000 3000000 ;nand write ${loadaddr} 0x1400000 3000000;fi
    wr_flashimage=filesize_check 0x8000000;if test ${filesize_result} = good; then nand erase.chip ;nand write ${loadaddr} 0x0 8000000;fi
    wr_pl=filesize_check 0x40000;if test ${filesize_result} = good; then nand erase.spread 0x00000 40000 ;nand write ${loadaddr} 0x00000 40000;fi
    wr_rom_hdr=filesize_check 0x40000;if test ${filesize_result} = good; then nand erase.spread 0x00000 20000 ;nand write ${loadaddr} 0x00000 20000;fi
    wr_uboot=filesize_check 0x60000;if test ${filesize_result} = good; then mtk_image_blks 131072;nand erase.spread 0xC0000  ${filesize} ;mtk_image_blks 2048;nand write ${loadaddr} 0xC0000 ${filesize};fi
    
    Environment size: 3187/4092 bytes
    

  • nand info
    MT7622> nand info
    
    Device 0: nand0, sector size 128 KiB
      Page size      2048 b
      OOB size         64 b
      Erase size   131072 b
    

Kernel

  • uname -a
    root@localhost:/# uname -a
    Linux localhost 4.4.92 #0 SMP PREEMPT Thu Oct 11 08:29:22 UTC 2018 aarch64 GNU/Linux
    

  • cat /proc/version
    root@localhost:/# cat /proc/version
    Linux version 4.4.92 (*******_*****@***-build-02) (gcc version 5.4.0 (LEDE GCC 5.4.0 r0-d60d72c) ) #0 SMP PREEMPT Thu Oct 11 08:29:22 UTC 2018
    

  • cat /proc/cpuinfo
    root@localhost:/# cat /proc/cpuinfo
    processor       : 0
    BogoMIPS        : 25.00
    Features        : fp asimd evtstrm aes pmull sha1 sha2 crc32
    CPU implementer : 0x41
    CPU architecture: 8
    CPU variant     : 0x0
    CPU part        : 0xd03
    CPU revision    : 4
    
    processor       : 1
    BogoMIPS        : 25.00
    Features        : fp asimd evtstrm aes pmull sha1 sha2 crc32
    CPU implementer : 0x41
    CPU architecture: 8
    CPU variant     : 0x0
    CPU part        : 0xd03
    CPU revision    : 4
    

  • cat /proc/meminfo
    root@localhost:/# cat /proc/meminfo
    MemTotal:         236876 kB
    MemFree:          132444 kB
    MemAvailable:     152988 kB
    Buffers:            5752 kB
    Cached:            17168 kB
    SwapCached:            0 kB
    Active:            22528 kB
    Inactive:          12120 kB
    Active(anon):      12072 kB
    Inactive(anon):      480 kB
    Active(file):      10456 kB
    Inactive(file):    11640 kB
    Unevictable:           0 kB
    Mlocked:               0 kB
    SwapTotal:             0 kB
    SwapFree:              0 kB
    Dirty:                 0 kB
    Writeback:             0 kB
    AnonPages:         11764 kB
    Mapped:             6008 kB
    Shmem:               824 kB
    Slab:              19436 kB
    SReclaimable:       5624 kB
    SUnreclaim:        13812 kB
    KernelStack:        2160 kB
    PageTables:         1112 kB
    NFS_Unstable:          0 kB
    Bounce:                0 kB
    WritebackTmp:          0 kB
    CommitLimit:      118436 kB
    Committed_AS:     175044 kB
    VmallocTotal:   258867136 kB
    VmallocUsed:           0 kB
    VmallocChunk:          0 kB
    

  • cat /proc/mtd
    root@localhost:/# cat /proc/mtd
    dev:    size   erasesize  name
    mtd0: 00080000 00020000 "Preloader"
    mtd1: 00040000 00020000 "ATF"
    mtd2: 00080000 00020000 "Bootloader"
    mtd3: 00080000 00020000 "Config"
    mtd4: 00040000 00020000 "Factory"
    mtd5: 03a00000 00020000 "Kernel"
    mtd6: 0023ffe4 00020000 "kernel"
    mtd7: 037c0000 00020000 "rootfs"
    mtd8: 02fe0000 00020000 "rootfs_data"
    mtd9: 03a00000 00020000 "Kernel2"
    mtd10: 00200000 00020000 "glbcfg"
    mtd11: 00200000 00020000 "board_data"
    

  • ls -al /sys/class/gpio/
    root@localhost:/# ls -al /sys/class/gpio/
    drwxr-xr-x    2 root     root             0 Jan  1  1970 .
    drwxr-xr-x   34 root     root             0 Jan  1  1970 ..
    --w-------    1 root     root          4096 Jan  1  1970 export
    lrwxrwxrwx    1 root     root             0 Jan  1  1970 gpio409 -> ../../devices/platform/10005000.pinctrl/gpio/gpio409
    lrwxrwxrwx    1 root     root             0 Jan  1  1970 gpio410 -> ../../devices/platform/10005000.pinctrl/gpio/gpio410
    lrwxrwxrwx    1 root     root             0 Jan  1  1970 gpio425 -> ../../devices/platform/10005000.pinctrl/gpio/gpio425
    lrwxrwxrwx    1 root     root             0 Jan  1  1970 gpio427 -> ../../devices/platform/10005000.pinctrl/gpio/gpio427
    lrwxrwxrwx    1 root     root             0 Jan  1  1970 gpio511 -> ../../devices/platform/10005000.pinctrl/gpio/gpio511
    lrwxrwxrwx    1 root     root             0 Jan  1  1970 gpiochip409 -> ../../devices/platform/10005000.pinctrl/gpio/gpiochip409
    --w-------    1 root     root          4096 Jan  1  1970 unexport
    

  • switch –help
    swconfig コマンドは存在していなかった。

    root@localhost:/# switch --help
    Usage:
     switch mib                                   - dump mib counter
     switch ingress-rate on [port] [Kbps]        - set ingress rate limit on port 0~4 
     switch egress-rate on [port] [Kbps]         - set egress rate limit on port 0~4 
     switch ingress-rate off [port]              - del ingress rate limit on port 0~4 
     switch egress-rate off [port]               - del egress rate limit on port 0~4
     switch igmpsnoop on                                   - enable hw igmp snoop
     switch igmpsnoop off                                  - disable hw igmp snoop
     switch mirror [monitor_port] [target_rx_portmask] [target_tx_portmask]    - set port mirror
     switch phy [phy_addr]                   - get phy link status
     switch regs r [offset]                       - register read from offset
     switch regs w [offset] [value]               - register write value to offset
     switch tag off [port]                       - remove vlan tag for egress packet on port 0~4
     switch vlan dump                            - dump switch table
     switch vlan set [vlan idx] [vid] [portmap]  - set vlan id and associated member
     switch tag on [port] [vid]                   - keep vlan tag for egress packet on prot 0~4
     switch tag off [port] [vid]                  - remove vlan tag for egress packet on port 0~4
     switch test_mode [port] [mode]               - set phy test mode. port: 0~4; mode: 1 or 4
     ================   Switch QoS   ================
     table: 0, 1
     type: port =0; 1q = 1; acl = 2; dscp = 3; cvlan = 4; svlan = 5; dmac = 6; smac = 7
     port: LAN/WAN ports: 0 ~ 4; CPU ports: 16, 17
     dscp: 0 ~ 63
     pri: 0 ~ 7
     queue: 0 ~ 7
     weight: 0 for SPQ; 1 ~ 127 for WFQ
     switch qos on                                 - enable switch qos
     switch qos off                                - disable switch qos
     switch qos set_table2type [table] [type]      - set table qos type
     switch qos get_table2type [table]             - get table qos type
     switch qos set_port2table [port] [table]      - set port to table mapping
     switch qos get_port2table [port]              - get port to table mapping
     switch qos set_port2pri [port] [pri]          - set port to priority mapping
     switch qos get_port2pri [port]                - get port to priority mapping
     switch qos set_dscp2pri [dscp] [pri]          - set dscp to priority mapping
     switch qos get_dscp2pri [dscp]                - get dscp to priority mapping
     switch qos set_pri2queue [pri] [queue]        - set priority to queue mapping
     switch qos get_pri2queue                      - get priority to queue mapping
     switch qos set_weight [port] [queue] [weight] - set weight
     switch qos get_weight [port]                  - get weights of queues
    

  • switch vlan dump
    root@localhost:/# switch vlan dump
    [  906.674754] vid    portmap
    [  906.678483]   0    -------
    [  906.682234]   1    1111-1-
    [  906.685980]   2    ----1-1
    [  906.689729]   3    -------
    [  906.693479]   4    -------
    [  906.697228]   5    -------
    [  906.700979]   6    -------
    [  906.704728]   7    -------
    [  906.708477]   8    -------
    [  906.712220]   9    -------
    [  906.715969]  10    -------
    [  906.719714]  11    -------
    [  906.723462]  12    -------
    [  906.727209]  13    -------
    [  906.730958]  14    -------
    [  906.734706]  15    -------
    

  • ls -alh /sys/devices/platform/
    root@localhost:/# ls -alh /sys/devices/platform/
    drwxr-xr-x   77 root     root           0 Jan  1  1970 .
    drwxr-xr-x    5 root     root           0 Jan  1  1970 ..
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 10000000.infracfg
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 10000400.pcie_mirror
    drwxr-xr-x    5 root     root           0 Jan  1  1970 10001000.pwrap
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 10002000.pericfg
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 10004000.timer
    drwxr-xr-x    4 root     root           0 Jan  1  1970 10005000.pinctrl
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 10006000.scpsys
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 10200620.interrupt-controller
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 10203000.emi
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 10204000.sys_cirq
    drwxr-xr-x    4 root     root           0 Jan  1 00:22 10206000.efuse
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 10209000.apmixedsys
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 1020a000.wed
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 1020a000.wed2
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 1020e000.dramc_nao
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 1020f000.rng
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 10210000.topckgen
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 10211000.syscfg_pctl_a
    drwxr-xr-x    5 root     root           0 Jan  1  1970 10212000.watchdog
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 10214000.dramc
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 10310000.interrupt-controller
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 10390000.cci
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 11000780.btif_tx
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 11000800.btif_rx
    drwxr-xr-x    4 root     root           0 Jan  1 00:22 11001000.adc
    drwxr-xr-x    4 root     root           0 Jan  1  1970 11002000.serial
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 11006000.pwm
    drwxr-xr-x    4 root     root           0 Jan  1  1970 11008000.i2c
    drwxr-xr-x    4 root     root           0 Jan  1  1970 11009000.i2c
    drwxr-xr-x    3 root     root           0 Jan  1  1970 1100b000.svs
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 1100b000.thermal
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 1100c000.btif
    drwxr-xr-x    4 root     root           0 Jan  1  1970 1100d000.nfi
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 1100e000.ecc
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 11014000.spi
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 11220000.audio-controller
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 11220000.audiosys
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 11230000.mmc
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 11240000.mmc
    drwxr-xr-x    4 root     root           0 Jan  1  1970 18000000.wbsys
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 1a000000.ssusbsys
    drwxr-xr-x    5 root     root           0 Jan  1  1970 1a0c0000.usb
    drwxr-xr-x    4 root     root           0 Jan  1  1970 1a0c4000.usb-phy
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 1a100800.pciesys
    drwxr-xr-x    4 root     root           0 Jan  1  1970 1a140000.pcie
    drwxr-xr-x    4 root     root           0 Jan  1  1970 1a200000.sata
    drwxr-xr-x    4 root     root           0 Jan  1  1970 1a242000.sata-phy
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 1af00000.syscon
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 1b000000.syscon
    drwxr-xr-x    4 root     root           0 Jan  1  1970 1b100000.ethernet
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 1b102800.wdma
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 1b128000.sgmiisys
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 8000000.chipid
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 alarmtimer
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 dummy133m
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 dummy13m
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 dummy32k
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 dummy40m
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 dummy48m
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 dummy98m
    drwxr-xr-x    4 root     root           0 Jan  1  1970 fixedregulator@0
    drwxr-xr-x    4 root     root           0 Jan  1  1970 fixedregulator@1
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 gswsys@1b100000
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 ice_debug
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 ioc
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 mt7622-cpufreq
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 mtcpufreq
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 opp_table0
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 oscillator@0
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 oscillator@1
    drwxr-xr-x    2 root     root           0 Jan  1 00:22 power
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 psci
    drwxr-xr-x    4 root     root           0 Jan  1  1970 reg-dummy
    drwxr-xr-x    4 root     root           0 Jan  1  1970 serial8250
    drwxr-xr-x    3 root     root           0 Jan  1 00:22 timer
    -rw-r--r--    1 root     root        4.0K Jan  1 00:22 uevent
    

  • bootlog
    
    F0: 102B 0000
    F2: 0000 0000
    V0: 0000 0000 [0001]
    00: 0000 0000
    BP: 0000 0041 [0000]
    G0: 0190 0000
    T0: 0000 0364 [000F]
    Jump to BL
    
    UNIVPLL_CON0 = 0xFE000000!!!
    mt_pll_init: Set pll frequency for 25M crystal
    [PMIC_WRAP]wrap_init pass,the return value=0.
    [pmic_init] Preloader Start..................
    [pmic_init] MT6380 CHIP Code, reg_val = 0, 1:E2  0:E3
    [pmic_init] Done...................
    Chip part number:7622B
    MT7622 Version: 1.2.6, (iPA) 
    SSC OFF
    mt_pll_post_init: mt_get_cpu_freq = 1350000Khz
    mt_pll_post_init: mt_get_mem_freq = 1600000Khz
    mt_pll_post_init: mt_get_bus_freq = 1119920Khz
    [PLFM] Init I2C: OK(0)
    
    [BLDR] Build Time: 20171227-144821
    ==== Dump RGU Reg ========
    RGU MODE:     4D
    RGU LENGTH:   FFE0
    RGU STA:      0
    RGU INTERVAL: FFF
    RGU SWSYSRST: 8000
    ==== Dump RGU Reg End ====
    RGU: g_rgu_satus:0
     mtk_wdt_mode_config  mode value=10, tmp:22000010
    PL P ON
    WDT does not trigger reboot
    WDT NONRST=0x20000000
    WDT IRQ_EN=0x340003
    RGU mtk_wdt_init:MTK_WDT_DEBUG_CTL(590200F3)
    [EMI] MDL number = 2
    [EMI] DRAMC calibration start
    
    [EMI] DRAMC calibration end
    
    [EMI]rank size auto detect
    [EMI]rank0 size: 0x10000000
    [MEM] complex R/W mem test pass
    RAM_CONSOLE wdt status (0x0)=0x0
    [PLFM] Init Boot Device: OK(0)
    
    [PART] blksz: 2048B
    [PART] [0x0000000000000000-0x000000000007FFFF] "PRELOADER" (256 blocks) 
    [PART] [0x0000000000080000-0x00000000000BFFFF] "tee1" (128 blocks) 
    [PART] [0x00000000000C0000-0x000000000013FFFF] "lk" (256 blocks) 
    
    Device APC domain init setup:
    
    Domain Setup (0x0)
    Domain Setup (0x0)
    Device APC domain after setup:
    Domain Setup (0x0)
    Domain Setup (0x0)
    Bad_Block_Table init, sizeof(Bad_Block_Table)= 8192 
    
    =================================================
    Checking Image1
    --> nand read 4007ff28 200000 1c
    
    NAND read: device 0 offset 0x200000, size 0x1c
     28 bytes read: OK
    ---------------------
    TRX MAGIC    32504844
    Image len    a19000
    header crc32 5028d247
    ---------------------
     trx magic OK!
    --> nand read 4007ff28 200000 a19000
    
    NAND read: device 0 offset 0x200000, size 0xa19000
     10588160 bytes read: OK
    ---------------------
    Image1 crc32 5028d247
    ---------------------
     crc32 OK!
    =================================================
    
    =================================================
    Checking Image2
    --> nand read 4007ff28 3c00000 1c
    
    NAND read: device 0 offset 0x3c00000, size 0x1c
     28 bytes read: OK
    ---------------------
    TRX MAGIC    32504844
    Image len    a19000
    header crc32 5028d247
    ---------------------
     trx magic OK!
    --> nand read 4007ff28 3c00000 a19000
    
    NAND read: device 0 offset 0x3c00000, size 0xa19000
     10588160 bytes read: OK
    ---------------------
    Image2 crc32 5028d247
    ---------------------
     crc32 OK!
    =================================================
    ## check Image1 return 0, check Image2 return 0, Image1 crc32=5028d247, Image2 crc32=5028d247.
    Image1 is ok!
    Image2 is ok and same as Image1!
    
    NAND read: device 0 offset 0x200000, size 0x2000
     8192 bytes read: OK
    [do_read_image_blks]This is a FIT image,img_size = 0x238934
    [do_read_image_blks]img_blks = 0x472
    [do_read_image_blks]img_align_size = 0x239000
    
    NAND read: device 0 offset 0x200000, size 0x239000
     2330624 bytes read: OK
    bootm flag=0, states=70f
    Original load address = 0x4007ff28
    After skip trx_header, load address = 0x4007ff44
    
    ## Loading kernel from FIT Image at 4007ff44 ...
       Using 'config@1' configuration
       Trying 'kernel@1' kernel subimage
         Description:  ARM64 OpenWrt Linux-4.4.92
         Type:         Kernel Image
         Compression:  lzma compressed
         Data Start:   0x4008002c
         Data Size:    2299389 Bytes = 2.2 MiB
         Architecture: AArch64
         OS:           Linux
         Load Address: 0x41080000
         Entry Point:  0x41080000
         Hash algo:    crc32
         Hash value:   bc753b2a
         Hash algo:    sha1
         Hash value:   fe3965e724974b579d5c32ee47b682cdf64057fa
       Verifying Hash Integrity ... crc32+ sha1+ OK
    ## Loading fdt from FIT Image at 4007ff44 ...
       Using 'config@1' configuration
       Trying 'fdt@1' fdt subimage
         Description:  ARM64 OpenWrt MTK-AC2600-RFB1 device tree blob
         Type:         Flat Device Tree
         Compression:  uncompressed
         Data Start:   0x402b176c
         Data Size:    28131 Bytes = 27.5 KiB
         Architecture: AArch64
         Hash algo:    crc32
         Hash value:   fa01d5c1
         Hash algo:    sha1
         Hash value:   ee9f542d7a0ff19ffddcefbe33f63e76a5a7528f
       Verifying Hash Integrity ... crc32+ sha1+ OK
       Booting using the fdt blob at 0x402b176c
       Uncompressing Kernel Image ... OK
       Loading Device Tree to 4cf43000, end 4cf4cde2 ... OK
    
    Starting kernel ...
    
    [ATF][     6.504087]save kernel info
    [ATF][     6.507118]Kernel_EL2
    [ATF][     6.509874]Kernel is 64Bit
    [ATF][     6.513062]pc=0x41080000, r0=0x4cf43000, r1=0x0
    INFO:    BL3-1: Preparing for EL3 exit to normal world, Kernel
    INFO:    BL3-1: Next image address = 0x41080000
    INFO:    BL3-1: Next image spsr = 0x3c9
    [ATF][     6.531331]el3_exit
    [    0.000000] Booting Linux on physical CPU 0x0
    [    0.000000] Linux version 4.4.92 (*******_*****@***-build-02) (gcc version 5.4.0 (LEDE GCC 5.4.0 r0-d60d72c) ) #0 SMP PREEMPT Thu Oct 11 08:29:22 UTC 2018
    [    0.000000] Boot CPU: AArch64 Processor [410fd034]
    [    0.000000] On node 0 totalpages: 65488
    [    0.000000]   DMA zone: 1024 pages used for memmap
    [    0.000000]   DMA zone: 0 pages reserved
    [    0.000000]   DMA zone: 65488 pages, LIFO batch:15
    [    0.000000] psci: probing for conduit method from DT.
    [    0.000000] psci: PSCIv0.2 detected in firmware.
    [    0.000000] psci: Using standard PSCI v0.2 function IDs
    [    0.000000] psci: Trusted OS migration not required
    [    0.000000] PERCPU: Embedded 19 pages/cpu @ffffffc00ffa9000 s39424 r8192 d30208 u77824
    [    0.000000] pcpu-alloc: s39424 r8192 d30208 u77824 alloc=19*4096
    [    0.000000] pcpu-alloc: [0] 0 [0] 1 
    [    0.000000] Detected VIPT I-cache on CPU0
    [    0.000000] CPU features: enabling workaround for ARM erratum 845719
    [    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 64464
    [    0.000000] Kernel command line: console=ttyS0,115200n1 init=/sbin/preinit root=/dev/mtdblock7                       initrd=0x44000000,0x615E36 loglevel=8 androidboot.hardware=mt7622 swiotlb=512 rootfstype=squashfs
    [    0.000000] PID hash table entries: 1024 (order: 1, 8192 bytes)
    [    0.000000] Dentry cache hash table entries: 32768 (order: 6, 262144 bytes)
    [    0.000000] Inode-cache hash table entries: 16384 (order: 5, 131072 bytes)
    [    0.000000] software IO TLB [mem 0x4fe49000-0x4ff49000] (1MB) mapped at [ffffffc00fe49000-ffffffc00ff48fff]
    [    0.000000] Memory: 230324K/261952K available (4432K kernel code, 336K rwdata, 1668K rodata, 324K init, 387K bss, 31628K reserved, 0K cma-reserved)
    [    0.000000] Virtual kernel memory layout:
    [    0.000000]     modules : 0xffffff8000000000 - 0xffffff8008000000   (   128 MB)
    [    0.000000]     vmalloc : 0xffffff8008000000 - 0xffffffbdbfff0000   (   246 GB)
    [    0.000000]       .init : 0xffffff8008679000 - 0xffffff80086ca000   (   324 KB)
    [    0.000000]       .text : 0xffffff8008080000 - 0xffffff80084d5000   (  4436 KB)
    [    0.000000]     .rodata : 0xffffff80084d5000 - 0xffffff8008679000   (  1680 KB)
    [    0.000000]       .data : 0xffffff80086ca000 - 0xffffff800871e1e0   (   337 KB)
    [    0.000000]     vmemmap : 0xffffffbdc0000000 - 0xffffffbfc0000000   (     8 GB maximum)
    [    0.000000]               0xffffffbdc0000000 - 0xffffffbdc0400000   (     4 MB actual)
    [    0.000000]     fixed   : 0xffffffbffe7fd000 - 0xffffffbffec00000   (  4108 KB)
    [    0.000000]     PCI I/O : 0xffffffbffee00000 - 0xffffffbfffe00000   (    16 MB)
    [    0.000000]     memory  : 0xffffffc000000000 - 0xffffffc010000000   (   256 MB)
    [    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
    [    0.000000] Preemptible hierarchical RCU implementation.
    [    0.000000]  Build-time adjustment of leaf fanout to 64.
    [    0.000000] NR_IRQS:64 nr_irqs:64 0
    [    0.000000] Architected cp15 timer(s) running at 12.50MHz (phys).
    [    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x2e2049cda, max_idle_ns: 440795202628 ns
    [    0.000003] sched_clock: 56 bits at 12MHz, resolution 80ns, wraps every 4398046511080ns
    [    0.000056] clocksource: timer: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 191126102035 ns
    [    0.000228] Console: colour dummy device 80x25
    [    0.000244] Calibrating delay loop (skipped), value calculated using timer frequency.. 25.00 BogoMIPS (lpj=50000)
    [    0.000250] pid_max: default: 32768 minimum: 301
    [    0.000304] Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
    [    0.000309] Mountpoint-cache hash table entries: 512 (order: 0, 4096 bytes)
    [    0.000765] sched-energy: CPU device node has no sched-energy-costs
    [    0.000771] Invalid sched_group_energy for CPU0
    [    0.000775] CPU0: update cpu_capacity 1024
    [    0.000809] ASID allocator initialised with 65536 entries
    [    0.032091] Detected VIPT I-cache on CPU1
    [    0.032119] Invalid sched_group_energy for CPU1
    [    0.032121] CPU1: update cpu_capacity 1024
    [    0.032122] CPU1: Booted secondary processor [410fd034]
    [    0.032156] Brought up 2 CPUs
    [    0.032168] SMP: Total of 2 processors activated.
    [    0.032175] CPU: All CPU(s) started at EL2
    [    0.032186] alternatives: patching kernel code
    [    0.032270] Invalid sched_group_energy for CPU1
    [    0.032276] Invalid sched_group_energy for Cluster1
    [    0.032279] Invalid sched_group_energy for CPU0
    [    0.032282] Invalid sched_group_energy for Cluster0
    [    0.036310] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
    [    0.036328] futex hash table entries: 512 (order: 4, 65536 bytes)
    [    0.036438] pinctrl core: initialized pinctrl subsystem
    [    0.036950] NET: Registered protocol family 16
    [    0.037377] [SPM] spm_base = ffffff8008024000
    [    0.037381] [SPM] spm_irq_0 = 6, spm_irq_1 = 7
    [    0.037385] [SPM] spm_irq_2 = 8, spm_irq_3 = 9
    [    0.037388] [SPM] set spm as wakeup devcie.
    [    0.037393] [SPM] spm_rtc cnt: 24414.
    [    0.052060] cpuidle: using governor menu
    [    0.052129] vdso: 2 pages (1 code @ ffffff80084db000, 1 data @ ffffff80086d0000)
    [    0.052271] DMA: preallocated 256 KiB pool for atomic allocations
    [    0.052353] Serial: AMBA PL011 UART driver
    [    0.052404] [SPM] PWAKE_EN:1, PCMWDT_EN:0, BYPASS_SYSPWREQ:0, I2C_CHANNEL:2
    [    0.052409] [SLP] SLEEP_DPIDLE_EN:1, REPLACE_DEF_WAKESRC:0, SUSPEND_LOG_EN:1
    [    0.055726] genirq: Setting trigger mode 2 for irq 227 failed (mtk_sysirq_set_type+0x0/0xc8)
    [    0.077398] vgaarb: loaded
    [    0.077558] SCSI subsystem initialized
    [    0.078924] rbus 18000000.wbsys: PCI host bridge to bus 0000:00
    [    0.078937] pci_bus 0000:00: root bus resource [mem 0x18000000-0x180fffff]
    [    0.078944] pci_bus 0000:00: root bus resource [bus 00-ff]
    [    0.078963] pci 0000:00:00.0: [14c3:7622] type 00 class 0x000280
    [    0.078977] pci 0000:00:00.0: reg 0x10: [mem 0x18000000-0x1800000f 64bit]
    [    0.078984] pci 0000:00:00.0: reg 0x18: [mem 0x00000000-0x0000000f]
    [    0.078990] pci 0000:00:00.0: reg 0x1c: [mem 0x00000000-0x0000000f]
    [    0.078997] pci 0000:00:00.0: reg 0x20: [mem 0x00000000-0x0000000f]
    [    0.079004] pci 0000:00:00.0: reg 0x24: [mem 0x00000000-0x0000000f]
    [    0.079033] pci 0000:00:00.0: of_irq_parse_pci() failed with rc=-22
    [    0.079335] clocksource: Switched to clocksource arch_sys_counter
    [    0.083797] NET: Registered protocol family 2
    [    0.084182] TCP established hash table entries: 2048 (order: 2, 16384 bytes)
    [    0.084207] TCP bind hash table entries: 2048 (order: 3, 32768 bytes)
    [    0.084239] TCP: Hash tables configured (established 2048 bind 2048)
    [    0.084280] UDP hash table entries: 256 (order: 1, 8192 bytes)
    [    0.084294] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
    [    0.084404] NET: Registered protocol family 1
    [    0.084437] PCI: CLS 0 bytes, default 128
    [    0.084559] Unpacking initramfs...
    [    0.084567] Initramfs unpacking failed: junk in compressed archive
    [    0.087109] Freeing initrd memory: 6228K
    [    0.094250] squashfs: version 4.0 (2009/01/31) Phillip Lougher
    [    0.094428] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
    [    0.094868] fuse init (API version 7.23)
    [    0.095477] io scheduler noop registered
    [    0.095653] io scheduler cfq registered (default)
    [    0.113881] mtk-pcie 1a140000.pcie: pcie rc 0 linkup success
    [    0.213910] mtk-pcie 1a140000.pcie: Port1 link down
    [    0.214075] mtk-pcie 1a140000.pcie: PCI host bridge to bus 0001:00
    [    0.214084] pci_bus 0001:00: root bus resource [??? 0x00000000 flags 0x0]
    [    0.214091] pci_bus 0001:00: root bus resource [mem 0x20000000-0x2fffffff]
    [    0.214098] pci_bus 0001:00: root bus resource [bus 00-ff]
    [    0.214133] pci 0001:00:00.0: [14c3:5396] type 01 class 0x060400
    [    0.214185] pci 0001:00:00.0: reg 0x10: [mem 0x00000000-0xffffffff 64bit pref]
    [    0.214308] pci 0001:00:00.0: of_irq_parse_pci() failed with rc=-22
    [    0.214429] pci 0001:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
    [    0.214671] pci 0001:01:00.0: [14c3:7615] type 00 class 0x000280
    [    0.214964] pci 0001:01:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit]
    [    0.223397] pci_bus 0001:01: busn_res: [bus 01-ff] end is updated to 01
    [    0.223434] pci 0001:00:00.0: BAR 0: no space for [mem size 0x100000000 64bit pref]
    [    0.223441] pci 0001:00:00.0: BAR 0: failed to assign [mem size 0x100000000 64bit pref]
    [    0.223448] pci 0001:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]
    [    0.223457] pci 0001:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit]
    [    0.223548] pci 0001:00:00.0: PCI bridge to [bus 01]
    [    0.223559] pci 0001:00:00.0:   bridge window [mem 0x20000000-0x200fffff]
    [    0.223616] pcieport 0001:00:00.0: of_irq_parse_pci() failed with rc=-22
    [    0.223631] pcieport 0001:00:00.0: enabling device (0000 -> 0002)
    [    0.223790] pcieport 0001:00:00.0: Signaling PME through PCIe PME interrupt
    [    0.223796] pci 0001:01:00.0: Signaling PME through PCIe PME interrupt
    [    0.223805] pcie_pme 0001:00:00.0:pcie01: service driver pcie_pme loaded
    [    0.227777] Serial: 8250/16550 driver, 4 ports, IRQ sharing disabled
    [    0.228781] console [ttyS0] disabled
    [    0.248950] 11002000.serial: ttyS0 at MMIO 0x11002000 (irq = 230, base_baud = 1562500) is a ST16650V2
    [    1.105143] console [ttyS0] enabled
    [    1.109416] init_led_status(): Reguest GPIO  4 success!
    [    1.114822] init_led_status(): Reguest GPIO  3 success!
    [    1.120222] init_led_status(): Reguest GPIO 15 success!
    [    1.125617] init_led_status(): Reguest GPIO  2 success!
    [    1.131014] init_led_status(): Reguest GPIO 19 success!
    [    1.136412] init_led_status(): Reguest GPIO 20 success!
    [    1.141828] @@@@@@#### buffalo_led_init initialized. 
    [    1.147100] Unable to detect cache hierarchy from DT for CPU 0
    [    1.155997] loop: module loaded
    [    1.159708] dump_power_table[0] = { .cpufreq_khz = 1350000,  .cpufreq_ncpu = 2,      .cpufreq_power = 995 }
    [    1.169223] dump_power_table[1] = { .cpufreq_khz = 1262500,  .cpufreq_ncpu = 2,      .cpufreq_power = 811 }
    [    1.178737] dump_power_table[2] = { .cpufreq_khz = 1137500,  .cpufreq_ncpu = 2,      .cpufreq_power = 736 }
    [    1.188251] dump_power_table[3] = { .cpufreq_khz = 1025000,  .cpufreq_ncpu = 2,      .cpufreq_power = 624 }
    [    1.197765] dump_power_table[4] = { .cpufreq_khz = 1350000,  .cpufreq_ncpu = 1,      .cpufreq_power = 517 }
    [    1.207276] dump_power_table[5] = { .cpufreq_khz = 812500,   .cpufreq_ncpu = 2,      .cpufreq_power = 492 }
    [    1.216698] dump_power_table[6] = { .cpufreq_khz = 1262500,  .cpufreq_ncpu = 1,      .cpufreq_power = 377 }
    [    1.226208] dump_power_table[7] = { .cpufreq_khz = 600000,   .cpufreq_ncpu = 2,      .cpufreq_power = 376 }
    [    1.235631] dump_power_table[8] = { .cpufreq_khz = 1137500,  .cpufreq_ncpu = 1,      .cpufreq_power = 333 }
    [    1.245143] dump_power_table[9] = { .cpufreq_khz = 437500,   .cpufreq_ncpu = 2,      .cpufreq_power = 295 }
    [    1.254567] dump_power_table[10] = { .cpufreq_khz = 1025000, .cpufreq_ncpu = 1,      .cpufreq_power = 258 }
    [    1.264170] dump_power_table[11] = { .cpufreq_khz = 300000,  .cpufreq_ncpu = 2,      .cpufreq_power = 225 }
    [    1.273681] dump_power_table[12] = { .cpufreq_khz = 812500,  .cpufreq_ncpu = 1,      .cpufreq_power = 204 }
    [    1.283191] dump_power_table[13] = { .cpufreq_khz = 600000,  .cpufreq_ncpu = 1,      .cpufreq_power = 166 }
    [    1.292702] dump_power_table[14] = { .cpufreq_khz = 437500,  .cpufreq_ncpu = 1,      .cpufreq_power = 140 }
    [    1.302212] dump_power_table[15] = { .cpufreq_khz = 300000,  .cpufreq_ncpu = 1,      .cpufreq_power = 119 }
    [    1.312849] [cal] calefuse1  = 0x842b1bc0
    [    1.316902] [cal] calefuse2  = 0x530010
    [    1.320772] [cal] g_adc_ge_t = 0x2b1
    [    1.324457] [cal] g_adc_oe_t = 0x210
    [    1.328146] [cal] g_degc_cali        = 0x2f
    [    1.331831] [cal] g_adc_cali_en_t    = 0x1
    [    1.335788] [cal] g_o_slope  = 0x0
    [    1.339197] [cal] g_o_slope_sign     = 0x0
    [    1.343062] [cal] g_id               = 0x0
    [    1.346123] [cal] g_o_vtsmcu1        = 0x0
    [    1.349719] [cal] g_o_vtsmcu2        = 0x14c
    [    1.353493] [cal] g_o_vtsmcu3        = 0x0
    [    1.357088] [cal] g_o_vtsmcu4        = 0x0
    [    1.360684] [cal] g_ge               = 0x1b0
    [    1.363920] [cal] g_gain             = 0x28c0
    [    1.367426] [cal] g_x_roomt1 = 0x1f46
    [    1.373944] MTK-BTIF[E]hal_btif_clk_get_and_prepare(286):[CCF]clk_btif=ffffffc00e7ff900
    [    1.382222] MTK-BTIF[E]hal_btif_clk_get_and_prepare(292):[CCF]clk_btif_apdma=ffffffc00e7ffa00
    [    1.392377] mtk-ecc 1100e000.ecc: probed
    [    1.396786] mtk-nor 11014000.spi: unrecognized JEDEC id bytes: 00, 00, 00
    [    1.403806] mtk-nor: probe of 11014000.spi failed with error -2
    [    1.410351] [rather_probe]ei_local->features = 0xf209db33
    [    1.415921] [rather_probe]ei_local->architecture_config = 533003
    [    1.422154] ethdma_sysctl_base = 0xffffff80087e6000
    [    1.427193] ethdma_frame_engine_base = 0xffffff8008800000
    [    1.433034] ei_local->irq0 = 249
    [    1.436362] ei_local->irq1 = 250
    [    1.439691] ei_local->irq2 = 251
    [    1.443083] [rather_probe]ei_local->chip_name = 7622
    [    1.448203] [Raether] HW IO coherent is enabled !
    [    1.453081] generated random MAC address 06:ab:79:6f:3a:6d
    [    1.458739] Mediatek APSoC Ethernet Driver Initialization.
    [    1.464221] STD_v0.1  2048 rx/3072 tx descriptors allocated, mtu = 1500!
    [    1.471314] NAPI enable, Tx Ring = 3072, Rx Ring = 2048
    [    1.477101] generated random MAC address ae:cb:ee:66:74:82
    [    1.482764] GDMA2_MAC_ADRH -- : 0x0000aecb
    [    1.486991] GDMA2_MAC_ADRL -- : 0xee667482
    [    1.491474] eth1: ===> virtualif_open
    [    1.496326] MTK_WDT_NONRST_REG(20000000)
    [    1.500552] mtk-wdt 10212000.watchdog: register restart_handler on reboot_notifier_list for psci reset
    [    1.510159] mtk-wdt 10212000.watchdog: Watchdog enabled (timeout=31 sec, nowayout=0)
    [    1.518319] register cpuidle driver!!!!!!!!!!!!!!!!!
    [    1.525268] Netfilter messages via NETLINK v0.30.
    [    1.530140] nf_conntrack version 0.5.0 (1848 buckets, 7392 max)
    [    1.536488] Bytecounter: allocated 64 tables
    [    1.541583] NET: Registered protocol family 10
    [    1.546891] sit: IPv6 over IPv4 tunneling driver
    [    1.552041] NET: Registered protocol family 17
    [    1.556651] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
    [    1.569664] 8021q: 802.1Q VLAN Support v1.8
    [    1.574353] registered taskstats version 1
    [    1.579742] nand: device found, Manufacturer ID: 0xef, Chip ID: 0xa1
    [    1.586306] nand: Winbond W29N01HZ
    [    1.589836] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
    [    1.597658] mtk-nand 1100d000.nfi: eccsize 512 eccstrength 4
    [    1.603507] Scanning device for bad blocks
    [    1.857814] 9 ofpart partitions found on MTD device mtk-nand
    [    1.863653] Creating 9 MTD partitions on "mtk-nand":
    [    1.868777] 0x000000000000-0x000000080000 : "Preloader"
    [    1.874720] 0x000000080000-0x0000000c0000 : "ATF"
    [    1.884047] 0x0000000c0000-0x000000140000 : "Bootloader"
    [    1.890008] 0x000000140000-0x0000001c0000 : "Config"
    [    1.899643] 0x0000001c0000-0x000000200000 : "Factory"
    [    1.905309] 0x000000200000-0x000003c00000 : "Kernel"
    [    1.911502] 2 trx-fw partitions found on MTD device Kernel
    [    1.917169] 0x00000020001c-0x000000440000 : "kernel"
    [    1.922771] 0x000000440000-0x000003c00000 : "rootfs"
    [    1.928610] mtd: device 7 (rootfs) set to be root filesystem
    [    1.934672] 1 squashfs-split partitions found on MTD device rootfs
    [    1.941049] 0x000000c20000-0x000003c00000 : "rootfs_data"
    [    1.947309] 0x000003c00000-0x000007600000 : "Kernel2"
    [    1.953245] 0x000007600000-0x000007800000 : "glbcfg"
    [    1.958837] 0x000007800000-0x000007a00000 : "board_data"
    [    1.965063] [SPM] pwrap node has not register regmap
    [    1.970649] regulator regulator.3: info->modeset_reg 0xc = 0x181c32a2
    [    1.978310] regulator regulator.3: info->modeset_reg 0xc = 0x101c32a2
    [    1.995152] VFS: Mounted root (squashfs filesystem) readonly on device 31:7.
    [    2.002630] Freeing unused kernel memory: 324K
    [    2.007231] This architecture does not have kernel memory protection.
    [    3.353336] random: dbus-uuidgen: uninitialized urandom read (12 bytes read, 115 bits of entropy available)
    [    3.363499] random: dbus-uuidgen: uninitialized urandom read (8 bytes read, 115 bits of entropy available)
    [    3.494486] random: dbus-daemon: uninitialized urandom read (12 bytes read, 124 bits of entropy available)
    [    3.507469] random: dbus-daemon: uninitialized urandom read (12 bytes read, 124 bits of entropy available)
    [    3.579361] random: nonblocking pool is initialized
    arca.dbus.mng: is ready
    agent_handler(244):arca.dbus.misc: is ready
    
    Please press Enter to activate this console. [    4.461490] usbcore: registered new interface driver usbfs
    [    4.467257] usbcore: registered new interface driver hub
    [    4.472877] usbcore: registered new device driver usb
    [    4.527510] libata version 3.00 loaded.
    [    4.564529] ahci 1a200000.sata: forcing port_map 0x0 -> 0x1
    [    4.570391] ahci 1a200000.sata: AHCI 0001.0300 32 slots 1 ports 6 Gbps 0x1 impl platform mode
    [    4.579205] ahci 1a200000.sata: flags: ncq sntf pm clo only pmp pio slum part ccc apst 
    [    4.591757] scsi host0: ahci
    [    4.594999] ata1: SATA max UDMA/133 mmio [mem 0x1a200000-0x1a2010ff] port 0x100 irq 248
    [    4.923357] ata1: SATA link down (SStatus 0 SControl 300)
    [    4.948913] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
    [    4.957909] ehci-platform: EHCI generic platform driver
    [    4.986987] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
    [    4.995624] ohci-platform: OHCI generic platform driver
    [    5.063978] 1a0c0000.usb supply vbus not found, using dummy regulator
    [    5.070696] 1a0c0000.usb supply vusb33 not found, using dummy regulator
    [    5.077945] xhci-mtk 1a0c0000.usb: xHCI Host Controller
    [    5.083396] xhci-mtk 1a0c0000.usb: new USB bus registered, assigned bus number 1
    [    5.091143] xhci-mtk 1a0c0000.usb: hcc params 0x01403198 hci version 0x96 quirks 0x00210010
    [    5.099799] xhci-mtk 1a0c0000.usb: irq 245, io mem 0x1a0c0000
    [    5.106142] hub 1-0:1.0: USB hub found
    [    5.110090] hub 1-0:1.0: 2 ports detected
    [    5.114549] xhci-mtk 1a0c0000.usb: xHCI Host Controller
    [    5.119955] xhci-mtk 1a0c0000.usb: new USB bus registered, assigned bus number 2
    [    5.127633] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
    [    5.136343] hub 2-0:1.0: USB hub found
    [    5.140258] hub 2-0:1.0: 1 port detected
    [    5.155937] usbcore: registered new interface driver usb-storage
    [    5.261778] l2tp_core: L2TP core driver, V2.0
    [    5.268496] l2tp_netlink: L2TP netlink interface
    [    5.281497] gre: GRE over IPv4 demultiplexor driver
    [    5.288900] ip_gre: GRE over IPv4 tunneling driver
    [    5.299964] ip6_tables: (C) 2000-2006 Netfilter Core Team
    [    5.378503] ip_tables: (C) 2000-2006 Netfilter Core Team
    [    6.363420] register mt_drv
    [    6.368974] 
    [    6.368974] == pAd = ffffff8009101000, size = 4263680, Status=0 ==
    [    6.376894] AP Driver version-5.0.1.1
    [    6.380680] Use 1st iPAeLNA default bin.
    [    6.384727] Use 1st /etc_ro/wlan/MT7622_EEPROM.bin default bin.
    [    6.390843] PciHif.CSRBaseAddress =0xffffff8009600000, csr_addr=0xffffff8009600000!
    [    6.458565] get_wdev_by_idx: invalid idx(0)
    [    6.462900] RTMPInitPCIeDevice():device_id=0x7615
    [    6.467763] mt_pci_chip_cfg(): HWVer=0x8a10, FWVer=0x8a10, pAd->ChipID=0x7615
    [    6.475132] mt_pci_chip_cfg(): HIF_SYS_REV=0x76150001
    [    6.480347] AP Driver version-5.0.1.1
    [    6.484126] RtmpChipOpsHook(223): Not support for HIF_MT yet! MACVersion=0x0
    [    6.491397] mt7615_init()-->
    [    6.494365] Use 2nd iPAeLNA default bin.
    [    6.498410] Use the default /etc_ro/wlan/MT7615E_EEPROM1.bin bin image!
    [    6.505239] rx_mask = 40000000
    [    8.475281] !!!! init ei_local->tx_mask = 10000000
    [    8.480226] GMAC1_MAC_ADRH -- : 0x000018c2
    [    8.484450] GMAC1_MAC_ADRL -- : 0xbf8ef588
    [    8.497451] Set: phy[0].reg[13] = 0x0007
    [    8.503194] Set: phy[0].reg[14] = 0x003c
    [    8.508901] Set: phy[0].reg[13] = 0x4007
    [    8.514583] Set: phy[0].reg[14] = 0x0000
    [    8.520310] Set: phy[1].reg[13] = 0x0007
    [    8.525978] Set: phy[1].reg[14] = 0x003c
    [    8.531743] Set: phy[1].reg[13] = 0x4007
    [    8.537409] Set: phy[1].reg[14] = 0x0000
    [    8.543075] Set: phy[2].reg[13] = 0x0007
    [    8.548842] Set: phy[2].reg[14] = 0x003c
    [    8.554506] Set: phy[2].reg[13] = 0x4007
    [    8.560246] Set: phy[2].reg[14] = 0x0000
    [    8.565921] Set: phy[3].reg[13] = 0x0007
    [    8.571639] Set: phy[3].reg[14] = 0x003c
    [    8.577322] Set: phy[3].reg[13] = 0x4007
    [    8.583161] Set: phy[3].reg[14] = 0x0000
    [    8.588958] Set: phy[4].reg[13] = 0x0007
    [    8.594649] Set: phy[4].reg[14] = 0x003c
    [    8.600438] Set: phy[4].reg[13] = 0x4007
    [    8.606094] Set: phy[4].reg[14] = 0x0000
    Disable flow control
    [    8.611967] Get: phy[0].reg[4] = 0x05e1
    [    8.617977] Set: phy[0].reg[4] = 0x01e1
    [    8.623575] Set: phy[1].reg[4] = 0x01e1
    [    8.629168] Set: phy[2].reg[4] = 0x01e1
    [    8.634775] Set: phy[3].reg[4] = 0x01e1
    [    8.640374] Set: phy[4].reg[4] = 0x01e1
    [    8.663526] debug : Enter [BRCTL_ADD_IF] 
    [    8.667720] add_if 00000000 ***************************
    [    8.673302] device eth0 entered promiscuous mode
    [    8.711667] br0: port 1(eth0) entered forwarding state
    [    8.716994] br0: port 1(eth0) entered forwarding state
    [    8.807751] GDMA2_MAC_ADRH -- : 0x000018c2
    [    8.812020] GDMA2_MAC_ADRL -- : 0xbf8ef588
    [    8.817982] eth1: ===> virtualif_open
    [    8.957186] ra0: ===> main_virtual_if_open
    [    8.961561] get_wdev_by_idx: invalid idx(0)
    [    8.965890] get_wdev_by_idx: invalid idx(0)
    [    8.970212] get_wdev_by_idx: invalid idx(0)
    [    8.974533] get_wdev_by_idx: invalid idx(0)
    [    8.979155] WHNAT=0
    [    8.981331] whnat_driver_init(): chip not support wifi hardware nat feature
    [    8.988520] get_wdev_by_idx: invalid idx(0)
    [    8.992876] get_wdev_by_idx: invalid idx(0)
    [    9.298279] APWdsInitialize():WdsEntry Number=4
    [    9.303338] [wifi_fwd_set_cb_num] band_cb_offset=36, recv_from_cb_offset=37
    [    9.311157] MacAddress1 = 00:00:00:00:00:00
    [    9.315611] MacAddress2 = 00:00:00:00:00:00
    [    9.320067] MacAddress3 = 00:00:00:00:00:00
    [    9.324523] MacAddress4 = 00:00:00:00:00:00
    [    9.328961] E2pAccessMode=2
    [    9.332617] DBDC Mode=0
    [    9.335367] BSS0 PhyMode=14
    [    9.338246] wmode_band_equal(): Band Equal!
    [    9.342638] TriBandChGrp=0/0/0/0
    [    9.346517] BandSteering=0
    [    9.349347] BndStrgBssIdx=
    [    9.352242] [TxPower] BAND0: 100 
    [    9.355879] Power Boost (CCK, OFDM): RTMPSetProfileParameters[PowerUpCckOfdm] BAND1: (0)-(0)-(0)-(0)-(0)-(0)-(0)
    [    9.366471] Power Boost (HT20): RTMPSetProfileParametersPower Boost (HT40): RTMPSetProfileParametersPower Boost (VHT20): RTMPSetProfileParametersPower Boost (VHT40): RTMPSetProfileParametersPower Boost (VHT80): RTMPSetProfileParametersPower Boost (VHT160): RTMPSetProfileParameters[PERCENTAGEenable] BAND0: 1 
    [    9.395409] [BFBACKOFFenable] BAND0: 0 
    [    9.399403] CalCacheApply = 0 
    [    9.403007] FragThreshold[0]=2346
    [    9.410563] DfsZeroWait Support=0/0
    [    9.414555] DfsZeroWaitCacTime=255/255
    [    9.431525] If/wds0 - PeerPhyOpMode=255
    [    9.436008] APWdsInitialize():WdsEntry Number=4
    [    9.440681] WDS-Enable mode=0
    [    9.445257] HT: WDEV[0] Ext Channel = ABOVE
    [    9.449677] HT: greenap_cap = 1
    [    9.452995] ChipI=7622, Value=0, pcie_aspm in profile=0
    [    9.480028] ICapMode = 0
    [    9.486099] WtcSetMaxStaNum: BssidNum:5, MaxStaNum:121 (WdsNum:4, ApcliNum:1, MaxNumChipRept:32), MinMcastWcid:122
    [    9.496943] Fair Queueing Scheduler Initializatio...
    [    9.502185] set_fq_enable: set Host FQ Enable to 29.(factor to 2)
    [    9.508472] Top Init Done!
    [    9.511263] Use dev_alloc_skb
    [    9.514676] RX[0] DESC ffffffc00c428000 size = 8192
    [    9.519861] RX[1] DESC ffffffc00c42a000 size = 8192
    [    9.524991] cut_through_init(): ct sw token number = 4095
    [    9.530675] cut_through_token_list_init(): TokenList inited done!id_head/tail=0/4096
    [    9.538664] cut_through_token_list_init(): ffffffc00dc37f90,ffffffc00dc37f90
    [    9.546046] cut_through_token_list_init(): TokenList inited done!id_head/tail=0/4096
    [    9.554034] cut_through_token_list_init(): ffffffc00dc37fb0,ffffffc00dc37fb0
    [    9.561391] whnat_ring_init(): cookie=ffffff8009101000
    [    9.566692] whnat_ring_init(): whnat can't find for cookie:ffffff8009101000
    [    9.573875] Hif Init Done!
    [    9.576671] ctl->txq = ffffff800950b410
    [    9.580627] ctl->rxq = ffffff800950b428
    [    9.584582] ctl->ackq = ffffff800950b440
    [    9.588628] ctl->kickq = ffffff800950b458
    [    9.592769] ctl->tx_doneq = ffffff800950b470
    [    9.597174] ctl->rx_doneq = ffffff800950b488
    [    9.601695] mt_rbus 0000:00:00.0: Direct firmware load for mt7622_patch_e2_hdr.bin failed with error -2
    [    9.611395] Parsing patch header
    [    9.614720]  Built date: 20180417160025a
    [    9.618847] 
    [    9.620386]  Platform: ALPS
    [    9.623288]  HW/SW version: 0x8a108a10
    [    9.627187]  Patch version: 0x00000010
    [    9.631082]  Target address: 0x9c000, length: 76400
    [    9.636178] patch is not ready && get semaphore success
    [    9.641606] EventGenericEventHandler: CMD Success
    [    9.646910] MtCmdPatchFinishReq
    [    9.661400] EventGenericEventHandler: CMD Success
    [    9.666303] release patch semaphore
    [    9.669907] WfMcuHwInit: Before NICLoadFirmware, check ICapMode = 0
    [    9.676394] Parsing CPU 0 fw tailer
    [    9.679991]  Chip ID: 0x06
    [    9.682790]  Eco version: 0x00
    [    9.685954]  Region number: 0x00
    [    9.689294]  Format version: 0x00
    [    9.692722]  Ram version: _reserved_
    [    9.696462]  Built date: 20180417160417
    [    9.700584]  Common crc: 0x0
    [    9.703554] Parsing tailer region 0
    [    9.707146]  Feature set: 0x01
    [    9.710308]  Target address: 0xb7000, Download size: 249856
    [    9.716055] Parsing tailer region 1
    [    9.719651]  Feature set: 0x01
    [    9.722809]  Target address: 0x203dc00, Download size: 46096
    [    9.728682] EventGenericEventHandler: CMD Success
    [    9.737486] EventGenericEventHandler: CMD Success
    [    9.742680] MtCmdFwStartReq: override = 0x0, address = 0x0
    [    9.789602] EventGenericEventHandler: CMD Success
    [    9.794491] MCU Init Done!
    [    9.797290] efuse_probe: efuse = 2
    [    9.800800] RtmpChipOpsEepromHook::e2p_type=2, inf_Type=4
    [    9.806396] RtmpEepromGetDefault::e2p_dafault=2
    [    9.811072] RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 2
    [    9.818886] NVM is FLASH mode. dev_idx [0] FLASH OFFSET [0x0]
    [    9.825151] NICReadEEPROMParameters: EEPROM 0x52 bb08
    [    9.831178] MtCmdSetTxLpfCal_7622:(ret = 0)
    [    9.835520] MtCmdSetTxDcIqCal_7622:(ret = 0)
    [    9.839958] MtCmdSetTxDpdCal_7622:(ret = 0)
    [    9.844304] MtCmdSetTxDpdCal_7622:(ret = 0)
    [    9.848647] MtCmdSetTxDpdCal_7622:(ret = 0)
    [    9.852990] MtCmdSetTxDpdCal_7622:(ret = 0)
    [    9.857333] MtCmdSetTxDpdCal_7622:(ret = 0)
    [    9.861676] MtCmdSetTxDpdCal_7622:(ret = 0)
    [    9.866020] MtCmdSetTxDpdCal_7622:(ret = 0)
    [    9.870358] MtCmdSetTxDpdCal_7622:(ret = 0)
    [    9.874695] MtCmdSetTxDpdCal_7622:(ret = 0)
    [    9.879033] MtCmdSetTxDpdCal_7622:(ret = 0)
    [    9.883369] MtCmdSetTxDpdCal_7622:(ret = 0)
    [    9.887706] MtCmdSetTxDpdCal_7622:(ret = 0)
    [    9.892043] MtCmdSetTxDpdCal_7622:(ret = 0)
    [    9.896359] NICReadEEPROMParameters: EEPROM 0x52 bb08
    [    9.902294] mt7622_pa_lna_set(): wifi_cfg=24, mode=1
    [    9.907716] mt7622_tssi_set(): nic_cfg1=20, mode=1
    [   10.871816] Country Region from e2p = 0
    [   10.875788] RcRadioInit(): DbdcMode=0, ConcurrentBand=1
    [   10.881183] RcRadioInit(): pRadioCtrl=ffffffc00e666768,Band=0,rfcap=1,channel=1,PhyMode=2 extCha=0xf
    [   10.890614] MtSingleSkuLoadParam: RF_LOCKDOWN Feature OFF !!!
    [   10.897019] MtBfBackOffLoadParam: RF_LOCKDOWN Feature OFF !!!
    [   10.903073] EEPROM Init Done!
    [   10.906138] mt_mac_init()-->
    [   10.909125] mt7622_init_mac_cr(): TMAC_TRCR0=0x82783c8c
    [   10.914536]  Initialize FT KDP Module...
    [   11.014892] Main bssid = 00:00:00:00:00:00
    [   11.019306] MtCmdSetMacTxRx:(ret = 0)
    [   11.026728] MtCmdSetMacTxRx:(ret = 0)
    [   11.030510]  CMD_RTPRIV_IOCTL_VIRTUAL_INF_UP
    [   11.141613] wifi_sys_open(), wdev idx = 0
    [   11.145764] wdev_attr_update(): wdevId0 = 18:c2:bf:8e:f5:89
    [   11.151529]  [RadarStateCheck] RD_NORMAL_MODE  
    [   11.157099] phy_freq_adjust : no prim_ch value for adjust!
    [   11.162919] Caller: wlan_operate_init+0xe0/0x110 [mt_wifi]
    [   11.168579] phy_mode=14, ch=0, wdev_type=1
    [   11.172805] ht_cap->HtCapInfo: ldpc=1,ch_width=0,gf=0,sgi20=1,sgi40=0,tx_stbc=1,rx_stbc=1,amsdu_size=0
    [   11.182405] ht_cap->HtCapParm: mdpu_density=5, ampdu_factor=3
    [   11.191061] AP inf up for ra_0(func_idx) OmacIdx=0
    [   11.198343] mtd_isr::DriverOwn = TRUE
    [   11.202838] RcGetHdevByChannel():Err! Update PhyMode failed, no phyctrl support this channel=0!
    [   11.211812] HcGetBandByChannel(): no hdev parking on channel:0!
    [   11.217929] AsicRadioOnOffCtrl(): DbdcIdx=0 RadioOn
    [   11.229507] RcGetHdevByChannel():Err! Update PhyMode failed, no phyctrl support this channel=0!
    [   11.238488] HcSetRadioCurStatByChannel(): no hdev parking on channel:0 !!!
    [   11.245581] ApAutoChannelAtBootUp----------------->
    [   11.250613] ApAutoChannelAtBootUp: AutoChannelBootup = 1, AutoChannelFlag = 1
    [   11.258144] MtCmdSetMacTxRx:(ret = 0)
    [   11.261953] MtCmdChannelSwitch: control_chl = 1,control_ch2=0, central_chl = 1 DBDCIdx= 0, Band= 0
    [   11.271197] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   11.503349] MtCmdChannelSwitch: control_chl = 2,control_ch2=0, central_chl = 2 DBDCIdx= 0, Band= 0
    [   11.512597] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   11.735346] MtCmdChannelSwitch: control_chl = 3,control_ch2=0, central_chl = 3 DBDCIdx= 0, Band= 0
    [   11.744594] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   11.967350] MtCmdChannelSwitch: control_chl = 4,control_ch2=0, central_chl = 4 DBDCIdx= 0, Band= 0
    [   11.976602] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   12.199348] MtCmdChannelSwitch: control_chl = 5,control_ch2=0, central_chl = 5 DBDCIdx= 0, Band= 0
    [   12.208598] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   12.431347] MtCmdChannelSwitch: control_chl = 6,control_ch2=0, central_chl = 6 DBDCIdx= 0, Band= 0
    [   12.440597] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   12.663347] MtCmdChannelSwitch: control_chl = 7,control_ch2=0, central_chl = 7 DBDCIdx= 0, Band= 0
    [   12.672594] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   12.895361] MtCmdChannelSwitch: control_chl = 8,control_ch2=0, central_chl = 8 DBDCIdx= 0, Band= 0
    [   12.904613] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   13.127350] MtCmdChannelSwitch: control_chl = 9,control_ch2=0, central_chl = 9 DBDCIdx= 0, Band= 0
    [   13.136624] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   13.343347] MtCmdChannelSwitch: control_chl = 10,control_ch2=0, central_chl = 10 DBDCIdx= 0, Band= 0
    [   13.352835] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   13.559347] MtCmdChannelSwitch: control_chl = 11,control_ch2=0, central_chl = 11 DBDCIdx= 0, Band= 0
    [   13.568774] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   13.775345] ====================================================================
    [   13.783011] Channel   1 : Busy Time =      5, Skip Channel = FALSE, BwCap = TRUE
    [   13.790643] Channel   2 : Busy Time =     66, Skip Channel = FALSE, BwCap = TRUE
    [   13.798295] Channel   3 : Busy Time =    100, Skip Channel = FALSE, BwCap = TRUE
    [   13.805927] Channel   4 : Busy Time =    132, Skip Channel = FALSE, BwCap = TRUE
    [   13.813565] Channel   5 : Busy Time =    537, Skip Channel = FALSE, BwCap = TRUE
    [   13.821245] Channel   6 : Busy Time =    110, Skip Channel = FALSE, BwCap = TRUE
    [   13.828885] Channel   7 : Busy Time =    138, Skip Channel = FALSE, BwCap = TRUE
    [   13.836525] Channel   8 : Busy Time =   3132, Skip Channel = FALSE, BwCap = TRUE
    [   13.844156] Channel   9 : Busy Time =   1213, Skip Channel = FALSE, BwCap = TRUE
    [   13.851787] Channel  10 : Busy Time =   1066, Skip Channel = FALSE, BwCap = TRUE
    [   13.859420] Channel  11 : Busy Time =    278, Skip Channel = FALSE, BwCap = TRUE
    [   13.867050] ====================================================================
    [   13.874691] Rule 3 Channel Busy time value : Select Primary Channel 1
    [   13.881354] Rule 3 Channel Busy time value : Min Channel Busy = 5
    [   13.887662] Rule 3 Channel Busy time value : BW = 20
    [   13.892790]  AutoChSelUpdateChannel(): Update channel for wdev0 for this band PhyMode = 14,Channel = 1 
    [   13.903200]  AutoChSelUpdateChannel(): Update channel for wdev1 for this band PhyMode = 14,Channel = 1 
    [   13.913613]  AutoChSelUpdateChannel(): Update channel for wdev2 for this band PhyMode = 14,Channel = 1 
    [   13.924025]  AutoChSelUpdateChannel(): Update channel for wdev3 for this band PhyMode = 14,Channel = 1 
    [   13.934438]  AutoChSelUpdateChannel(): Update channel for wdev4 for this band PhyMode = 14,Channel = 1 
    [   13.944862] MtCmdChannelSwitch: control_chl = 1,control_ch2=0, central_chl = 1 DBDCIdx= 0, Band= 0
    [   13.954109] BW = 0,TXStream = 4, RXStream = 4, scan(0)
    [   13.978360] [DfsCacNormalStart] Normal start. Enable MAC TX
    [   14.055160] ApAutoChannelAtBootUp main_virtual_if_open
    [   14.457346] get_wdev_by_idx: invalid idx(0)
    [   14.461686] get_wdev_by_idx: invalid idx(0)
    [   14.466007] get_wdev_by_idx: invalid idx(0)
    [   14.470332] get_wdev_by_idx: invalid idx(0)
    [   14.475074] WHNAT=1
    [   14.477246] whnat_cap_support(): chip_id=7615 is in WHNAT support list
    [   14.483987] wifi_slot_get(): bus name=PCI Bus 0001:01, funid=0, get slot id=0
    [   14.491351] whnat_entry_acquire(): PCIE SLOT:0, hook to WHNAT,entry id=0
    [   14.498461] wed_init(0): irq=11,base_addr=0xffffff80095de000
    [   14.504767] wed_ring_init(): wed ring init result = 0
    [   14.514697] create wed ok!!!
    [   14.517857] wdma_init(): wdma(0) base addr=ffffff80095f8800
    [   14.523630] wdma_init(): wdma(0) irq[0]=253
    [   14.527950] wdma_init(): wdma(0) irq[1]=254
    [   14.532269] wdma_init(): wdma(0) irq[2]=255
    [   14.536832] wifi_chip_probe(): Chang CHIP IRQ: 259 to WHNAT IRQ: 11
    [   14.543382] wifi_slot_get(): bus name=PCI Bus 0001:01, funid=0, get slot id=0
    [   14.550805] whnat_probe(): probe fail since whnat is full!
    [   14.556473] whnat_dev0: probe of 1020a000.wed2 failed with error -1
    [   14.563082] get_wdev_by_idx: invalid idx(0)
    [   14.567454] get_wdev_by_idx: invalid idx(0)
    [   14.571786] driver_own()::Try to Clear FW Own...
    [   14.876670] driver_own()::Success to clear FW Own
    [   14.883830] APWdsInitialize():WdsEntry Number=4
    [   14.888883] [wifi_fwd_set_cb_num] band_cb_offset=36, recv_from_cb_offset=37
    [   14.896720] MacAddress1 = 00:00:00:00:00:00
    [   14.901174] MacAddress2 = 00:00:00:00:00:00
    [   14.905627] MacAddress3 = 00:00:00:00:00:00
    [   14.910082] MacAddress4 = 00:00:00:00:00:00
    [   14.914522] E2pAccessMode=2
    [   14.918186] DBDC Mode=0
    [   14.920930] BSS0 PhyMode=49
    [   14.923818] wmode_band_equal(): Band Equal!
    [   14.928211] TriBandChGrp=0/0/0/0
    [   14.932045] BandSteering=0
    [   14.934865] BndStrgBssIdx=
    [   14.937759] [TxPower] BAND0: 100 
    [   14.941395] Power Boost (CCK, OFDM): RTMPSetProfileParameters[PowerUpCckOfdm] BAND1: (0)-(0)-(0)-(0)-(0)-(0)-(0)
    [   14.951991] Power Boost (HT20): RTMPSetProfileParametersPower Boost (HT40): RTMPSetProfileParametersPower Boost (VHT20): RTMPSetProfileParametersPower Boost (VHT40): RTMPSetProfileParametersPower Boost (VHT80): RTMPSetProfileParametersPower Boost (VHT160): RTMPSetProfileParameters[PERCENTAGEenable] BAND0: 1 
    [   14.980850] [BFBACKOFFenable] BAND0: 0 
    [   14.984844] CalCacheApply = 0 
    [   14.988456] FragThreshold[0]=2346
    [   14.996041] DfsZeroWait Support=0/0
    [   15.000035] DfsZeroWaitCacTime=255/255
    [   15.017099] If/wds0 - PeerPhyOpMode=255
    [   15.021589] APWdsInitialize():WdsEntry Number=4
    [   15.026262] WDS-Enable mode=0
    [   15.030844] HT: WDEV[0] Ext Channel = BELOW
    [   15.035261] HT: greenap_cap = 1
    [   15.038579] ChipI=7615, Value=0, pcie_aspm in profile=0
    [   15.065809] ICapMode = 0
    [   15.071918] WtcSetMaxStaNum: BssidNum:5, MaxStaNum:121 (WdsNum:4, ApcliNum:1, MaxNumChipRept:32), MinMcastWcid:122
    [   15.082724] Top Init Done!
    [   15.085535] Use dev_alloc_skb
    [   15.089137] RX[0] DESC ffffff8008f3e000 size = 16384
    [   15.094969] RX[1] DESC ffffff8008f43000 size = 8192
    [   15.100328] cut_through_init(): ct sw token number = 1023
    [   15.105928] cut_through_token_list_init(): TokenList inited done!id_head/tail=0/1024
    [   15.113918] cut_through_token_list_init(): ffffffc00a6d3290,ffffffc00a6d3290
    [   15.121225] cut_through_token_list_init(): TokenList inited done!id_head/tail=0/1024
    [   15.129216] cut_through_token_list_init(): ffffffc00a6d32b0,ffffffc00a6d32b0
    [   15.136528] whnat_ring_init(): cookie=ffffff8009701000
    [   15.141832] wdma_dma_ctrl(): WDMA_GLO_CFG=40000450
    [   15.146815] Hif Init Done!
    [   15.149609] ctl->txq = ffffff8009b0b410
    [   15.153564] ctl->rxq = ffffff8009b0b428
    [   15.157520] ctl->ackq = ffffff8009b0b440
    [   15.161565] ctl->kickq = ffffff8009b0b458
    [   15.165700] ctl->tx_doneq = ffffff8009b0b470
    [   15.170101] ctl->rx_doneq = ffffff8009b0b488
    [   15.174581] Parsing patch header
    [   15.177909]  Built date: 20180417160317a
    [   15.182031] 
    [   15.183566]  Platform: ALPS
    [   15.186465]  HW/SW version: 0x8a108a10
    [   15.190357]  Patch version: 0x00000010
    [   15.194248]  Target address: 0x80000, length: 11072
    [   15.199350] patch is not ready && get semaphore success
    [   15.204790] EventGenericEventHandler: CMD Success
    [   15.209726] MtCmdPatchFinishReq
    [   15.224224] EventGenericEventHandler: CMD Success
    [   15.229140] release patch semaphore
    [   15.232762] WfMcuHwInit: Before NICLoadFirmware, check ICapMode = 0
    [   15.239236] Parsing CPU 0 fw tailer
    [   15.242856]  Chip ID: 0x04
    [   15.245662]  Eco version: 0x00
    [   15.248822]  Region number: 0x00
    [   15.252165]  Format version: 0x00
    [   15.255592]  Ram version: _reserved_
    [   15.259331]  Built date: 20180517150808
    [   15.263452]  Common crc: 0x0
    [   15.266417] Parsing tailer region 0
    [   15.270012]  Feature set: 0x01
    [   15.273238]  Target address: 0x84000, Download size: 409600
    [   15.278987] Parsing tailer region 1
    [   15.282584]  Feature set: 0x01
    [   15.285745]  Target address: 0x209c400, Download size: 52928
    [   15.291640] EventGenericEventHandler: CMD Success
    [   15.300521] EventGenericEventHandler: CMD Success
    [   15.305683] MtCmdFwStartReq: override = 0x1, address = 0x84000
    [   15.311769] EventGenericEventHandler: CMD Success
    [   15.316630] Parsing CPU 1 fw tailer
    [   15.320249]  Chip ID: 0x04
    [   15.323051]  Eco version: 0x00
    [   15.326213]  Region number: 0x00
    [   15.329556]  Format version: 0x00
    [   15.332984]  Ram version: _reserved_
    [   15.336724]  Built date: 20171109171430
    [   15.340858]  Common crc: 0x0
    [   15.343834] Parsing tailer region 0
    [   15.347433]  Feature set: 0x01
    [   15.350589]  Target address: 0x90000000, Download size: 118480
    [   15.356654] EventGenericEventHandler: CMD Success
    [   15.361971] MtCmdFwStartReq: override = 0x4, address = 0x0
    [   15.419267] EventGenericEventHandler: CMD Success
    [   15.472368] MCU Init Done!
    [   15.475226] efuse_probe: efuse = 10000212
    [   15.479365] RtmpChipOpsEepromHook::e2p_type=2, inf_Type=5
    [   15.484934] RtmpEepromGetDefault::e2p_dafault=1
    [   15.489608] RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 1
    [   15.497420] NVM is FLASH mode. dev_idx [1] FLASH OFFSET [0x5000]
    [   15.503936] NICReadEEPROMParameters: EEPROM 0x52 b31f
    [   15.510107] MtCmdSetTxLpfCal:(ret = 0)
    [   15.514000] MtCmdSetTxIqCal:(ret = 0)
    [   15.517820] MtCmdSetTxDcCal:(ret = 0)
    [   15.521632] MtCmdSetRxFiCal:(ret = 0)
    [   15.525470] MtCmdSetRxFdCal:(ret = 0)
    [   15.529278] MtCmdSetRxFdCal:(ret = 0)
    [   15.533086] MtCmdSetRxFdCal:(ret = 0)
    [   15.536890] MtCmdSetRxFdCal:(ret = 0)
    [   15.540715] MtCmdSetRxFdCal:(ret = 0)
    [   15.544519] MtCmdSetRxFdCal:(ret = 0)
    [   15.548322] MtCmdSetRxFdCal:(ret = 0)
    [   15.552128] MtCmdSetRxFdCal:(ret = 0)
    [   15.555932] MtCmdSetRxFdCal:(ret = 0)
    [   15.559726] NICReadEEPROMParameters: EEPROM 0x52 b31f
    [   15.565657] MtCmdPATrimReStoreProc: WF0 = 0x00000000 
    [   15.571584] MtCmdPATrimReStoreProc: WF1 = 0x00000000 
    [   15.577592] MtCmdPATrimReStoreProc: WF2 = 0x00000000 
    [   15.583521] MtCmdPATrimReStoreProc: WF3 = 0x00dd0000 
    [   15.589528] MtCmdPATrimReStoreProc:(Status = 0)
    [   16.126349] Country Region from e2p = 101
    [   16.130504] mt7615_antenna_default_reset(): TxPath = 4, RxPath = 4
    [   16.136883] mt7615_antenna_default_reset(): DBDC BAND0 TxPath = 2, RxPath = 2
    [   16.144248] mt7615_antenna_default_reset(): DBDC BAND1 TxPath = 2, RxPath = 2
    [   16.151614] RcRadioInit(): DbdcMode=0, ConcurrentBand=1
    [   16.157005] RcRadioInit(): pRadioCtrl=ffffffc00b850768,Band=0,rfcap=3,channel=1,PhyMode=2 extCha=0xf
    [   16.166510] MtCmdSetDbdcCtrl:(ret = 0)
    [   16.170387] MtSingleSkuLoadParam: RF_LOCKDOWN Feature OFF !!!
    [   16.176794] MtBfBackOffLoadParam: RF_LOCKDOWN Feature OFF !!!
    [   16.182917] EEPROM Init Done!
    [   16.185986] mt_mac_init()-->
    [   16.188957] mt7615_init_mac_cr()-->
    [   16.192569] mt7615_init_mac_cr(): TMAC_TRCR0=0x82783c8c
    [   16.197960] mt7615_init_mac_cr(): TMAC_TRCR1=0x82783c8c
    [   16.203371]  Initialize FT KDP Module...
    [   16.283296] Main bssid = 00:00:00:00:00:00
    [   16.290713] MtCmdSetMacTxRx:(ret = 0)
    [   16.294640] MtCmdSetMacTxRx:(ret = 0)
    [   16.298423]  CMD_RTPRIV_IOCTL_VIRTUAL_INF_UP
    [   16.415821] wifi_sys_open(), wdev idx = 0
    [   16.419990] wdev_attr_update(): wdevId0 = 18:c2:bf:8e:f5:8c
    [   16.425826] MtCmdSetDbdcCtrl:(ret = 0)
    [   16.429741]  [RadarStateCheck] RD_NORMAL_MODE  
    [   16.435312] phy_freq_adjust : no prim_ch value for adjust!
    [   16.441131] Caller: wlan_operate_init+0xe0/0x110 [mt_wifi]
    [   16.446814] phy_mode=49, ch=0, wdev_type=1
    [   16.451041] ht_cap->HtCapInfo: ldpc=1,ch_width=1,gf=0,sgi20=1,sgi40=1,tx_stbc=1,rx_stbc=1,amsdu_size=1
    [   16.460643] ht_cap->HtCapParm: mdpu_density=5, ampdu_factor=3
    [   16.466696] AP inf up for ra_0(func_idx) OmacIdx=0
    [   16.471644] RcGetHdevByChannel():Err! Update PhyMode failed, no phyctrl support this channel=0!
    [   16.480618] HcGetBandByChannel(): no hdev parking on channel:0!
    [   16.486808] AsicRadioOnOffCtrl(): DbdcIdx=0 RadioOn
    [   16.491927] RcGetHdevByChannel():Err! Update PhyMode failed, no phyctrl support this channel=0!
    [   16.500905] HcSetRadioCurStatByChannel(): no hdev parking on channel:0 !!!
    [   16.507999] ApAutoChannelAtBootUp----------------->
    [   16.513031] ApAutoChannelAtBootUp: AutoChannelBootup = 1, AutoChannelFlag = 1
    [   16.520532] MtCmdSetMacTxRx:(ret = 0)
    [   16.524364] mt7615_apply_dcoc() : reload Central CH [36] BW [0] from cetral freq [5190]  offset [700]
    [   16.534002] MtCmdGetRXDCOCCalResult:(ret = 0)
    [   16.538503] mt7615_apply_dpd() : reload Central CH [36] BW [0] from cetral freq [5180] i[7] offset [2be8]
    [   16.548496] MtCmdGetTXDPDCalResult:(ret = 0)
    [   16.552905] MtCmdChannelSwitch: control_chl = 36,control_ch2=0, central_chl = 36 DBDCIdx= 0, Band= 0
    [   16.562331] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   16.947371] mt7615_apply_dcoc() : reload Central CH [40] BW [0] from cetral freq [5190]  offset [700]
    [   16.957005] MtCmdGetRXDCOCCalResult:(ret = 0)
    [   16.961512] mt7615_apply_dpd() : reload Central CH [40] BW [0] from cetral freq [5200] i[8] offset [2cc0]
    [   16.971524] MtCmdGetTXDPDCalResult:(ret = 0)
    [   16.975932] MtCmdChannelSwitch: control_chl = 40,control_ch2=0, central_chl = 40 DBDCIdx= 0, Band= 0
    [   16.985356] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   17.371429] :MtCmdCr4Set: arg0(13) arg1(255) arg2(4)
    [   17.376660] mt7615_apply_dcoc() : reload Central CH [44] BW [0] from cetral freq [5230]  offset [800]
    [   17.386224] :MtCmdPktBudgetCtrl: bssid(255),wcid(65535),type(0)
    [   17.386316] MtCmdGetRXDCOCCalResult:(ret = 0)
    [   17.386322] mt7615_apply_dpd() : reload Central CH [44] BW [0] from cetral freq [5220] i[9] offset [2d98]
    [   17.386435] MtCmdGetTXDPDCalResult:(ret = 0)
    [   17.386439] MtCmdChannelSwitch: control_chl = 44,control_ch2=0, central_chl = 44 DBDCIdx= 0, Band= 0
    [   17.386441] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   17.767355] mt7615_apply_dcoc() : reload Central CH [48] BW [0] from cetral freq [5230]  offset [800]
    [   17.776997] MtCmdGetRXDCOCCalResult:(ret = 0)
    [   17.781501] mt7615_apply_dpd() : reload Central CH [48] BW [0] from cetral freq [5240] i[10] offset [2e70]
    [   17.791586] MtCmdGetTXDPDCalResult:(ret = 0)
    [   17.795995] MtCmdChannelSwitch: control_chl = 48,control_ch2=0, central_chl = 48 DBDCIdx= 0, Band= 0
    [   17.805486] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   18.191357] mt7615_apply_dcoc() : reload Central CH [52] BW [0] from cetral freq [5270]  offset [900]
    [   18.200984] MtCmdGetRXDCOCCalResult:(ret = 0)
    [   18.205486] mt7615_apply_dpd() : reload Central CH [52] BW [0] from cetral freq [5260] i[11] offset [2f48]
    [   18.215631] MtCmdGetTXDPDCalResult:(ret = 0)
    [   18.220040] MtCmdChannelSwitch: control_chl = 52,control_ch2=0, central_chl = 52 DBDCIdx= 0, Band= 0
    [   18.229463] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   18.615356] mt7615_apply_dcoc() : reload Central CH [56] BW [0] from cetral freq [5270]  offset [900]
    [   18.625025] MtCmdGetRXDCOCCalResult:(ret = 0)
    [   18.629533] mt7615_apply_dpd() : reload Central CH [56] BW [0] from cetral freq [5280] i[12] offset [3020]
    [   18.639652] MtCmdGetTXDPDCalResult:(ret = 0)
    [   18.644060] MtCmdChannelSwitch: control_chl = 56,control_ch2=0, central_chl = 56 DBDCIdx= 0, Band= 0
    [   18.653493] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   19.039370] mt7615_apply_dcoc() : reload Central CH [60] BW [0] from cetral freq [5310]  offset [a00]
    [   19.048995] MtCmdGetRXDCOCCalResult:(ret = 0)
    [   19.053503] mt7615_apply_dpd() : reload Central CH [60] BW [0] from cetral freq [5300] i[13] offset [30f8]
    [   19.063578] MtCmdGetTXDPDCalResult:(ret = 0)
    [   19.067987] MtCmdChannelSwitch: control_chl = 60,control_ch2=0, central_chl = 60 DBDCIdx= 0, Band= 0
    [   19.077424] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   19.463355] mt7615_apply_dcoc() : reload Central CH [64] BW [0] from cetral freq [5310]  offset [a00]
    [   19.472974] MtCmdGetRXDCOCCalResult:(ret = 0)
    [   19.477495] mt7615_apply_dpd() : reload Central CH [64] BW [0] from cetral freq [5320] i[14] offset [31d0]
    [   19.487571] MtCmdGetTXDPDCalResult:(ret = 0)
    [   19.491979] MtCmdChannelSwitch: control_chl = 64,control_ch2=0, central_chl = 64 DBDCIdx= 0, Band= 0
    [   19.501401] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   19.887359] mt7615_apply_dcoc() : reload Central CH [100] BW [0] from cetral freq [5510]  offset [f00]
    [   19.897077] MtCmdGetRXDCOCCalResult:(ret = 0)
    [   19.901585] mt7615_apply_dpd() : reload Central CH [100] BW [0] from cetral freq [5500] i[23] offset [3968]
    [   19.911750] MtCmdGetTXDPDCalResult:(ret = 0)
    [   19.916158] MtCmdChannelSwitch: control_chl = 100,control_ch2=0, central_chl = 100 DBDCIdx= 0, Band= 0
    [   19.925767] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   20.311356] mt7615_apply_dcoc() : reload Central CH [104] BW [0] from cetral freq [5510]  offset [f00]
    [   20.321073] MtCmdGetRXDCOCCalResult:(ret = 0)
    [   20.325574] mt7615_apply_dpd() : reload Central CH [104] BW [0] from cetral freq [5520] i[24] offset [3a40]
    [   20.335736] MtCmdGetTXDPDCalResult:(ret = 0)
    [   20.340219] MtCmdChannelSwitch: control_chl = 104,control_ch2=0, central_chl = 104 DBDCIdx= 0, Band= 0
    [   20.349822] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   20.735353] mt7615_apply_dcoc() : reload Central CH [108] BW [0] from cetral freq [5550]  offset [1000]
    [   20.745229] MtCmdGetRXDCOCCalResult:(ret = 0)
    [   20.749730] mt7615_apply_dpd() : reload Central CH [108] BW [0] from cetral freq [5540] i[25] offset [3b18]
    [   20.759903] MtCmdGetTXDPDCalResult:(ret = 0)
    [   20.764312] MtCmdChannelSwitch: control_chl = 108,control_ch2=0, central_chl = 108 DBDCIdx= 0, Band= 0
    [   20.773918] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   21.159359] mt7615_apply_dcoc() : reload Central CH [112] BW [0] from cetral freq [5550]  offset [1000]
    [   21.169168] MtCmdGetRXDCOCCalResult:(ret = 0)
    [   21.173671] mt7615_apply_dpd() : reload Central CH [112] BW [0] from cetral freq [5560] i[26] offset [3bf0]
    [   21.183855] MtCmdGetTXDPDCalResult:(ret = 0)
    [   21.188263] MtCmdChannelSwitch: control_chl = 112,control_ch2=0, central_chl = 112 DBDCIdx= 0, Band= 0
    [   21.197866] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   21.583357] mt7615_apply_dcoc() : reload Central CH [116] BW [0] from cetral freq [5590]  offset [1100]
    [   21.593155] MtCmdGetRXDCOCCalResult:(ret = 0)
    [   21.597656] mt7615_apply_dpd() : reload Central CH [116] BW [0] from cetral freq [5580] i[27] offset [3cc8]
    [   21.607821] MtCmdGetTXDPDCalResult:(ret = 0)
    [   21.612229] MtCmdChannelSwitch: control_chl = 116,control_ch2=0, central_chl = 116 DBDCIdx= 0, Band= 0
    [   21.621829] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   22.007362] mt7615_apply_dcoc() : reload Central CH [120] BW [0] from cetral freq [5590]  offset [1100]
    [   22.017170] MtCmdGetRXDCOCCalResult:(ret = 0)
    [   22.021674] mt7615_apply_dpd() : reload Central CH [120] BW [0] from cetral freq [5600] i[28] offset [3da0]
    [   22.031839] MtCmdGetTXDPDCalResult:(ret = 0)
    [   22.036248] MtCmdChannelSwitch: control_chl = 120,control_ch2=0, central_chl = 120 DBDCIdx= 0, Band= 0
    [   22.045865] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   22.431353] mt7615_apply_dcoc() : reload Central CH [124] BW [0] from cetral freq [5630]  offset [1200]
    [   22.441157] MtCmdGetRXDCOCCalResult:(ret = 0)
    [   22.445678] mt7615_apply_dpd() : reload Central CH [124] BW [0] from cetral freq [5620] i[29] offset [3e78]
    [   22.455843] MtCmdGetTXDPDCalResult:(ret = 0)
    [   22.460263] MtCmdChannelSwitch: control_chl = 124,control_ch2=0, central_chl = 124 DBDCIdx= 0, Band= 0
    [   22.469934] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   22.855355] mt7615_apply_dcoc() : reload Central CH [128] BW [0] from cetral freq [5630]  offset [1200]
    [   22.865169] MtCmdGetRXDCOCCalResult:(ret = 0)
    [   22.869670] mt7615_apply_dpd() : reload Central CH [128] BW [0] from cetral freq [5640] i[30] offset [3f50]
    [   22.879898] MtCmdGetTXDPDCalResult:(ret = 0)
    [   22.884344] MtCmdChannelSwitch: control_chl = 128,control_ch2=0, central_chl = 128 DBDCIdx= 0, Band= 0
    [   22.893950] BW = 0,TXStream = 4, RXStream = 4, scan(1)
    [   23.279351] ====================================================================
    [   23.286992] Channel  36 : Busy Time =    491, Skip Channel = FALSE, BwCap = TRUE
    [   23.294624] Channel  40 : Busy Time =    223, Skip Channel = FALSE, BwCap = TRUE
    [   23.302255] Channel  44 : Busy Time =    169, Skip Channel = FALSE, BwCap = TRUE
    [   23.309886] Channel  48 : Busy Time =    794, Skip Channel = FALSE, BwCap = TRUE
    [   23.317516] Channel  52 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
    [   23.325146] Channel  56 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
    [   23.332777] Channel  60 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
    [   23.340407] Channel  64 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
    [   23.348037] Channel 100 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
    [   23.355667] Channel 104 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
    [   23.363297] Channel 108 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
    [   23.370927] Channel 112 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
    [   23.378558] Channel 116 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
    [   23.386194] Channel 120 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
    [   23.393834] Channel 124 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
    [   23.401471] Channel 128 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
    [   23.409104] ====================================================================
    [   23.416742] Rule 3 Channel Busy time value : Select Primary Channel 52
    [   23.423479] Rule 3 Channel Busy time value : Min Channel Busy = 0
    [   23.429764] Rule 3 Channel Busy time value : BW = 80
    [   23.434888]  AutoChSelUpdateChannel(): Update channel for wdev0 for this band PhyMode = 49,Channel = 52 
    [   23.445412]  AutoChSelUpdateChannel(): Update channel for wdev1 for this band PhyMode = 49,Channel = 52 
    [   23.455910]  AutoChSelUpdateChannel(): Update channel for wdev2 for this band PhyMode = 49,Channel = 52 
    [   23.466407]  AutoChSelUpdateChannel(): Update channel for wdev3 for this band PhyMode = 49,Channel = 52 
    [   23.476906]  AutoChSelUpdateChannel(): Update channel for wdev4 for this band PhyMode = 49,Channel = 52 
    [   23.487406]  [RadarStateCheck] RD_SILENCE_MODE  
    [   23.493077] [DfsCacNormalStart] CAC 65 seconds start . Disable MAC TX
    [   23.513383] [DfsSwitchCheck]: DFS ByPass TX calibration.
    [   23.518871] mt7615_apply_dcoc() : reload Central CH [58] BW [2] from cetral freq [5290]  offset [1a00]
    [   23.528567] MtCmdGetRXDCOCCalResult:(ret = 0)
    [   23.533068] mt7615_apply_dpd() : reload Central CH [58] BW [2] from cetral freq [5300] i[13] offset [30f8]
    [   23.543141] MtCmdGetTXDPDCalResult:(ret = 0)
    [   23.547549] MtCmdChannelSwitch: control_chl = 52,control_ch2=0, central_chl = 58 DBDCIdx= 0, Band= 0
    [   23.556972] BW = 2,TXStream = 4, RXStream = 4, scan(0)
    [   23.939539] [WrapDfsRadarDetectStart]: DfsChBand[0]: 1, DfsChBand[1]: 0
    [   23.958989] ApAutoChannelAtBootUp<-----------------
    [   23.964023] Current Channel is 52. DfsZeroWaitSupport=0
    [   23.969418] [PMF]APPMFInit:: apidx=0, MFPC=1, MFPR=0, SHA256=0
    [   23.975441] [PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE
    [   23.984270] wifi_sys_linkup(), wdev idx = 0
    [   23.988592] wtc_acquire_groupkey_wcid: Found a non-occupied wtbl_idx:127 for WDEV_TYPE:1
    [   23.988592]  LinkToOmacIdx = 0, LinkToWdevType = 1
    [   24.053998] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO), CmdBssInfoBmcRate.u2BcTransmit= 8192, CmdBssInfoBmcRate.u2McTransmit = 8196
    [   24.081459] UpdateBeaconHandler, BCN_UPDATE_INIT, OmacIdx = 0
    [   25.544260] apidx 0 for WscUUIDInit
    [   25.547872] Generate UUID for apidx(0)
    [25.54][1214][set_confs_after_in[   25.555637] RTMPIoctlMAC():after trim space, ptr len=87, pointer(ffffffc00ac73000)=82078024=0,82078028=0,8207802C=0,82078030=0,82078034=0,82078038=0,82078040=0,82078044=0!
    terface_up:440]: cmd iwpriv rai0 mac 82078024=0,[   25.574948] set_thermal_protection_admin_ctrl_duty_proc: u4Lv0Duty: 100, u4Lv1Duty: 75, u4Lv2Duty: 60, u4Lv3Duty: 20
    82078028=0,8207802C=0,82078030=0,82078034=0,82078038=0,82078040=0,82078044=0
    [25.56][1214][set_confs_after_interface_up:458]: cmd iwpriv rai0 set tpc_duty=100:[   25.600889] set_thermal_protection_criteria_proc: fgHighEn: 1, fgLowEn: 1, fgRFOffEn: 1, cHighTempTh: 122, cLowTempTh: 116, cRFOffTh: 125
    075:060:020
    [25[   25.613955] set_thermal_protection_criteria_proc: u4RechkTimer: 30, ucType: Duty Cycle
    .59][1214][set_c[   25.623404] MtCmdThermalProtect: HighEn: 1, HighTempTh: 122, LowEn: 1, LowTempTh: 116, RechkTimer: 30
    onfs_after_inter[   25.634338] MtCmdThermalProtect: RFOffEn: 1, RFOffTh: 125, ucType: 1
    face_up:463]: cmd iwpriv rai0 set tpc=1:1:1:122:116:125:0030:1
    [   25.654036] debug : Enter [BRCTL_ADD_RULE_IF] 
    [   25.658669] add_if 00000100 ***************************
    [   25.664238] device rai0 entered promiscuous mode
    [   25.669042] br0: port 3(rai0) entered forwarding state
    [   25.674355] br0: port 3(rai0) entered forwarding state
    [   25.701136] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO), CmdBssInfoBmcRate.u2BcTransmit= 0, CmdBssInfoBmcRate.u2McTransmit = 0
    [   25.715814] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO), CmdBssInfoBmcRate.u2BcTransmit= 0, CmdBssInfoBmcRate.u2McTransmit = 0
    [   25.730488] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO), CmdBssInfoBmcRate.u2BcTransmit= 0, CmdBssInfoBmcRate.u2McTransmit = 0
    [   25.745126] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO), CmdBssInfoBmcRate.u2BcTransmit= 0, CmdBssInfoBmcRate.u2McTransmit = 0
    [   25.759761] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO), CmdBssInfoBmcRate.u2BcTransmit= 0, CmdBssInfoBmcRate.u2McTransmit = 0
    [   25.777646] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO), CmdBssInfoBmcRate.u2BcTransmit= 0, CmdBssInfoBmcRate.u2McTransmit = 0
    [   25.792360] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO), CmdBssInfoBmcRate.u2BcTransmit= 0, CmdBssInfoBmcRate.u2McTransmit = 0
    [   25.807016] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO), CmdBssInfoBmcRate.u2BcTransmit= 0, CmdBssInfoBmcRate.u2McTransmit = 0
    [   25.821763] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO), CmdBssInfoBmcRate.u2BcTransmit= 0, CmdBssInfoBmcRate.u2McTransmit = 0
    [   25.836406] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO), CmdBssInfoBmcRate.u2BcTransmit= 0, CmdBssInfoBmcRate.u2McTransmit = 0
    [   25.860927] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO), CmdBssInfoBmcRate.u2BcTransmit= 8196, CmdBssInfoBmcRate.u2McTransmit = 8196
    [   25.873602] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO), CmdBssInfoBmcRate.u2BcTransmit= 8196, CmdBssInfoBmcRate.u2McTransmit = 8196
    [   25.886155] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO), CmdBssInfoBmcRate.u2BcTransmit= 8196, CmdBssInfoBmcRate.u2McTransmit = 8196
    [   25.898740] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO), CmdBssInfoBmcRate.u2BcTransmit= 8196, CmdBssInfoBmcRate.u2McTransmit = 8196
    [   25.911292] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO), CmdBssInfoBmcRate.u2BcTransmit= 8196, CmdBssInfoBmcRate.u2McTransmit = 8196
    [   25.927081] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO), CmdBssInfoBmcRate.u2BcTransmit= 8192, CmdBssInfoBmcRate.u2McTransmit = 8192
    [   25.939736] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO), CmdBssInfoBmcRate.u2BcTransmit= 8192, CmdBssInfoBmcRate.u2McTransmit = 8192
    [   25.952400] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO), CmdBssInfoBmcRate.u2BcTransmit= 8192, CmdBssInfoBmcRate.u2McTransmit = 8192
    [   25.964956] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO), CmdBssInfoBmcRate.u2BcTransmit= 8192, CmdBssInfoBmcRate.u2McTransmit = 8192
    [   25.977526] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO), CmdBssInfoBmcRate.u2BcTransmit= 8192, CmdBssInfoBmcRate.u2McTransmit = 8192
    miniupnpd[1419]: WPS listening on port 56383
    [   26.185030] mcsnoop: flush all snoop entry
    [   26.189373] mcsnoop: Bridge Multicast Snooping module Ver0.1/20070912
    [   26.204662] mcsnoop_br_ioctl_device:275: mcast_maxage 75000 / 250
    [   26.212850] device eth0 left promiscuous mode
    [   26.217586] br0: port 1(eth0) entered disabled state
    [   26.224782] debug : Enter [BRCTL_ADD_RULE_IF] 
    [   26.229415] add_if 00000600 ***************************
    [   26.234996] device eth0 entered promiscuous mode
    [   26.239812] br0: port 1(eth0) entered forwarding state
    [   26.245126] br0: port 1(eth0) entered forwarding state
    Link Status Changed - LAN Port Link Down
    [   26.313684] netwatchd uses obsolete (PF_INET,SOCK_PACKET)
    crond[1483]: crond: crond (busybox 1.18.5) started, log level 8
    [   26.912299] EventThermalProtect: HLType = 1, CurrentTemp = 22, Reason = 1
    start miniupnpd
    miniupnpd[1513]: HTTP listening on port 34416
    miniupnpd[1513]: Listening for NAT-PMP/PCP traffic on port 5351
    ntp.jst.mfeed.ad.jp: Unknown host
    Link Status Changed - WAN Port Link UP
    killall: dnrd_guest: no process killed
    killall: dnrd_unnum: no process killed
    Time out! You may increase DEFAULT_TIMEOUT_COUNT[10]!
    Time out! You may increase DEFAULT_TIMEOUT_COUNT[10]!
    Time out! You may increase DEFAULT_TIMEOUT_COUNT[10]!
    Time out! You may increase DEFAULT_TIMEOUT_COUNT[10]!
    Time out! You may increase DEFAULT_TIMEOUT_COUNT[10]!
    Time out! You may increase DEFAULT_TIMEOUT_COUNT[10]!
    killall: dnrd_guest: no process killed
    killall: dnrd_unnum: no process killed
    killall: dnrd_guest: no process killed
    killall: dnrd_unnum: no process killed
    killall: dnrd_guest: no process killed
    killall: dnrd_unnum: no process killed
    
    

WG1200CR stock -> OpenWrt (ath79)

1つ前の記事で書いた通り、Cのプログラムをでっち上げたのでそれを利用してfactoryを生成。メーカーファームからの投入を試行したのでメモ。

log

[ephp.c read_operand_list 1234] PHP operator precedence issue at: /htdocs/webinc/js/tools_fw_rlt.php, operand_qty: 6, add_qty: 2, mul_qty: 3
SERVD: event [PREFWUPDATE/default]
[/etc/scripts/prefwupdate.sh] ....
SERVD: stop service [THERMAL]
Stop THERMAL service ..
SERVD: event [STATUS.CRITICAL] not found!
SERVD: stop service [WAN]
SERVD: stop service [WIFI]
SERVD: service [WIFI] is already stopped.
SERVD: stop service [LAN]
SERVD: stop service [INET.WAN-1]
[/var/servd/INET.WAN-1_stop.sh]: stopping WAN-1...
[/var/servd/WAN-1-udhcpc.sh]: deconfig eth0.2 ...
SERVD: event [WAN-1.DOWN/default]
[/var/servd/INET.WAN-1_stop.sh]: stopping WAN-1 done !!!
SERVD: stop service [INET.WAN-2]
SERVD: service [INET.WAN-2] is already stopped.
SERVD: stop service [INET.WAN-3]
SERVD: service [INET.WAN-3] is already stopped.
SERVD: stop service [INET.WAN-4]
SERVD: service [INET.WAN-4] is already stopped.
SERVD: stop service [INET.WAN-5]
SERVD: service [INET.WAN-5] is already stopped.
SERVD: stop service [IPT.WAN-1]
SERVD: stop service [IPT.WAN-2]
SERVD: stop service [IPT.WAN-3]
SERVD: stop service [IPT.WAN-4]
SERVD: stop service [IPT.WAN-5]
SERVD: service [IPT.WAN-5] is already stopped.
SERVD: stop service [IPTDMZ]
SERVD: stop service [IPTPORTT]
SERVD: stop service [IPTPFWD]
SERVD: stop service [IPTVSVR]
iptables: No chain/target/match by that name.
SERVD: stop service [IPTMASQ]
SERVD: stop service [INET.LAN-1]
[/var/servd/INET.LAN-1_stop.sh]: stopping LAN-1...
SERVD: event [LAN-1.DOWN/default]
/var/run/phpsh-14632.sh: line 6: can't create /proc/nf_accelerate_to_local: nonexistent directory
[/var/servd/INET.LAN-1_stop.sh]: stopping LAN-1 done !!!
SERVD: stop service [INET.LAN-2]
SERVD: service [INET.LAN-2] is already stopped.
SERVD: stop service [INET.LAN-4]
SERVD: service [INET.LAN-4] is already stopped.
SERVD: stop service [INET.LAN-5]
SERVD: service [INET.LAN-5] is already stopped.
SERVD: stop service [INET.LAN-6]
SERVD: service [INET.LAN-6] is already stopped.
SERVD: stop service [IPT.LAN-1]
SERVD: stop service [IPT.LAN-2]
SERVD: stop service [IPT.LAN-3]
SERVD: service [IPT.LAN-3] is already stopped.
SERVD: stop service [IPT.LAN-4]
SERVD: service [IPT.LAN-4] is already stopped.
SERVD: stop service [IPT.LAN-5]
SERVD: service [IPT.LAN-5] is already stopped.
SERVD: stop service [IPT.LAN-6]
SERVD: service [IPT.LAN-6] is already stopped.
SERVD: stop service [ACCESSCTRL]
SERVD: stop service [INFSVCS.WAN-1]
SERVD: event [INFSVCS.WAN-1.DOWN] not found!
SERVD: event [UPNP.IGD.NOTIFY.WANIPCONN1/default]
SERVD: event [UPDATERESOLV/default]
SERVD: event [WAN-1.DISCONNECTED/default]
SERVD: stop service [HTTP]
SERVD: event [HTTP.DOWN/default]
SERVD: stop service [INFSVCS.LAN-1]
[/etc/events/FWUPDATER.sh] ...
kill servd, xmldb, watchdog, and load.sh
copy upgrade needed file to ramfs
remout /www /htdocs /etc /usr /bin /sbin to empty ramfs avoid someone access rootfs
FWUPDATER: about to write 4259844 bytes data to /dev/mtdblock/6
[  539.180000] ATT:001[SYN-ACK]:IN=br0 OUT= MAC=98:f1:99:f2:1d:24:5c:9a:d8:e6:3f:b3:08:00 SRC=192.168.10.101 DST=88.99.186.153 LEN=263 TOS=0x00 PREC=0x00 TTL=129 ID=23596 PROTO=TCP SPT=49877 DPT=443 WINDOW=65535 RES=0x00 ACK PSH URGP=0 
[  539.410000] ATT:001[SYN-ACK]:IN=br0 OUT= MAC=98:f1:99:f2:1d:24:5c:9a:d8:e6:3f:b3:08:00 SRC=192.168.10.101 DST=88.99.186.153 LEN=263 TOS=0x00 PREC=0x00 TTL=129 ID=23597 PROTO=TCP SPT=49876 DPT=443 WINDOW=65535 RES=0x00 ACK PSH URGP=0 
[  554.070000] ATT:001[SYN-ACK]:IN=br0 OUT= MAC=98:f1:99:f2:1d:24:5c:9a:d8:e6:3f:b3:08:00 SRC=192.168.10.101 DST=88.99.186.153 LEN=263 TOS=0x00 PREC=0x00 TTL=129 ID=23598 DF PROTO=TCP SPT=49877 DPT=443 WINDOW=65535 RES=0x00 ACK PSH URGP=0 
[  554.380000] ATT:001[SYN-ACK]:IN=br0 OUT= MAC=98:f1:99:f2:1d:24:5c:9a:d8:e6:3f:b3:08:00 SRC=192.168.10.101 DST=88.99.186.153 LEN=263 TOS=0x00 PREC=0x00 TTL=129 ID=23599 DF PROTO=TCP SPT=49876 DPT=443 WINDOW=65535 RES=0x00 ACK PSH URGP=0 
[  556.070000] ATT:001[SYN-ACK]:IN=eth0.2 OUT= MAC=98:f1:99:f2:1d:25:00:25:36:14:e9:8c:08:00:45:00:00:47 SRC=178.63.70.146 DST=192.168.1.65 LEN=71 TOS=0x00 PREC=0x00 TTL=51 ID=33765 DF PROTO=TCP SPT=443 DPT=49879 WINDOW=26800 RES=0x00 ACK PSH URGP=0 
FWUPDATER: cost 32.573702 seconds
fwupdate: unable to read SEAMA header!
/etc/events/FWUPDATER.sh: line 44: ca[  571.750000] ath_vap_stopping=1
n't create /proc/driver/system_reset: nonexistent directory
/etc/events/FWUPDATER.sh: line 45: can't create /proc/system_reset: nonexistent directory
The system is going down NOW!
Sent SIGTERM to all processes
[  571.790000] mlme_create_infra_bss : Overriding HT40 channel with HT20 channel
[  571.830000] __ieee80211_smart_ant_init: Smart Antenna is not supported 
[  571.840000] ol_ath_vap_stopping=1
[  571.840000] STOPPED EVENT for vap 0 (8788c000)
[  571.850000] send_vdev_down_cmd_non_tlv for vap 0
[  571.880000] OL vap_start +
[  571.880000] VDEV START
[  571.880000] OL vap_start -
[  571.880000] ol_vdev_start_resp_ev for vap 0 (8788c000)
[  571.890000] su bfee 1 mu bfee 0 su bfer 1 mu bfer 1 impl bf 0 sounding dim 1
[  571.900000] send_vdev_up_cmd_non_tlv for vap 0
[  571.900000] ol_ath_vap_up=1
[  571.900000] __ieee80211_smart_ant_init: Smart Antenna is not supported 
[  571.910000] ol_ath_vap_set_param: Now supported MGMT RATE is 6000(kbps) and rate code: 0x3
[  571.920000] ol_ath_vap_set_param: Now supported MCAST RATE is 6000(kbps) and rate code: 0x3
[  572.630000] [wifi1] FWLOG: [593155] WAL_DBGID_SECURITY_MCAST_KEY_SET ( 0x1 )
[  572.640000] [wifi1] FWLOG: [593171] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 )
[  572.640000] [wifi1] FWLOG: [593171] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 )
[  572.650000] [wifi1] FWLOG: [593200] vap-0 VDEV_MGR_VDEV_START ( 0x1450, 0x2, 0x0, 0x0 )
[  572.660000] [wifi1] FWLOG: [593200] UNKNOWN 14:20 ( 0x0 )
[  572.660000] [wifi1] FWLOG: [593221] VDEV_MGR_HP_START_TIME ( 0x0, 0x1450, 0x21534000 )
[  572.670000] [wifi1] FWLOG: [593221] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x1 )
[  572.680000] [wifi1] FWLOG: [593221] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 )
[  572.690000] [wifi1] FWLOG: [593221] VDEV_MGR_AP_TBTT_CONFIG ( 0x0, 0x1450, 0x0, 0x0 )
Sent SIGKILL to all processes
Requesting system reboot
[  573.770000] Restarting system.


U-Boot 1.1.4 (Nov  1 2017 - 20:40:33)

SVN revision: 1501
ap152 - Dragonfly 1.0DRAM:  
sri
ath_ddr_initial_config(278): (ddr2 init)
ath_sys_frequency: cpu 775 ddr 650 ahb 258
Tap values = (0x10, 0x10, 0x10, 0x10)
128 MB
Top of RAM usable for U-Boot at: 88000000
Reserving 304k for U-Boot at: 87fb0000
Reserving 160k for malloc() at: 87f88000
Reserving 44 Bytes for Board Info at: 87f87fd4
Reserving 36 Bytes for Global Data at: 87f87fb0
Reserving 128k for boot params() at: 87f67fb0
Stack Pointer at: 87f67f98
Now running in RAM - U-Boot at: 87fb0000
Flash Manuf Id 0xc2, DeviceId0 0x20, DeviceId1 0x17
flash size 8MB, sector count = 128
Flash:  8 MB
Power up PLL with outdiv = 0 then switch to 3
In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
No valid address in Flash. Using fixed address
ath_gmac_enet_initialize: reset mask:c02200 
athr_mgmt_init ::done
Dragonfly  ----> S17 PHY *
athrs17_reg_init: complete
SGMII in forced mode
athr_gmac_sgmii_setup SGMII done
: cfg1 0x80000000 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
eth0 up
eth0
Setting 0x181162c0 to 0x40802100
Trying eth0
eth0 link down
FAIL
Using eth0 device
listen from server 192.168.1.10; our IP address is 192.168.1.1
monitor_packet_result 0
Hit any key to stop autoboot:  0 
## Booting image at 9f080040 ...
   Image Name:   MIPS OpenWrt Linux-4.14.105
   Created:      2019-03-13  17:14:02 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1615472 Bytes =  1.5 MB
   Load Address: 80060000
   Entry Point:  80060000
   Verifying Checksum at 0x9f080080 ...OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80060000) ...
## Giving linux memsize in bytes, 134217728

Starting kernel ...

[    0.000000] Linux version 4.14.105 (jenkins@tofu-z77hvub18_openwrt) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+9537-e6d28b4fee)) #0 Wed Mar 13 17:14:02 2019
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019750 (MIPS 74Kc)
[    0.000000] MIPS: machine is NEC Aterm WG1200CR
[    0.000000] SoC: Qualcomm Atheros QCA956X ver 1 rev 0
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x8c/0x474 with crng_init=0
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS0,115200n8 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] Memory: 123184K/131072K available (3779K kernel code, 149K rwdata, 912K rodata, 1232K init, 204K bss, 7888K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS: 51
[    0.000000] CPU clock: 775.000 MHz
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4932285024 ns
[    0.000007] sched_clock: 32 bits at 387MHz, resolution 2ns, wraps every 5541893118ns
[    0.008215] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.074760] pid_max: default: 32768 minimum: 301
[    0.079783] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.086764] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.097654] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.108047] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.114544] pinctrl core: initialized pinctrl subsystem
[    0.120867] NET: Registered protocol family 16
[    0.131277] PCI host bridge /ahb/apb/pcie-controller@18250000 ranges:
[    0.138077]  MEM 0x0000000012000000..0x0000000013ffffff
[    0.143610]   IO 0x0000000000000000..0x0000000000000000
[    0.164196] PCI host bridge to bus 0000:00
[    0.168525] pci_bus 0000:00: root bus resource [mem 0x12000000-0x13ffffff]
[    0.175802] pci_bus 0000:00: root bus resource [io  0x0000]
[    0.181671] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    0.188827] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    0.197596] pci 0000:00:00.0: BAR 0: assigned [mem 0x12000000-0x121fffff 64bit]
[    0.207577] clocksource: Switched to clocksource MIPS
[    0.213804] NET: Registered protocol family 2
[    0.219068] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.226424] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.233172] TCP: Hash tables configured (established 1024 bind 1024)
[    0.239999] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.246163] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.253036] NET: Registered protocol family 1
[    0.260391] Crashlog allocated RAM at address 0x3f00000
[    0.266999] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[    0.277860] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.284004] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.302195] io scheduler noop registered
[    0.306326] io scheduler deadline registered (default)
[    0.313452] pinctrl-single 1804002c.pinmux: 544 pins at pa b804002c size 68
[    0.321751] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[    0.329101] console [ttyS0] disabled
[    0.332902] 18020000.uart: ttyS0 at MMIO 0x18020000 (irq = 8, base_baud = 1562500) is a 16550A
[    0.342032] console [ttyS0] enabled
[    0.342032] console [ttyS0] enabled
[    0.349582] bootconsole [early0] disabled
[    0.349582] bootconsole [early0] disabled
[    0.363588] m25p80 spi0.0: mx25l6405d (8192 Kbytes)
[    0.368723] 7 fixed-partitions partitions found on MTD device spi0.0
[    0.375279] Creating 7 MTD partitions on "spi0.0":
[    0.380249] 0x000000000000-0x000000040000 : "u-boot"
[    0.386055] 0x000000040000-0x000000050000 : "u-boot-env"
[    0.392231] 0x000000050000-0x000000060000 : "devconf"
[    0.398130] 0x000000060000-0x000000070000 : "misc"
[    0.403683] 0x000000070000-0x000000080000 : "wifimngdata"
[    0.409954] 0x000000080000-0x0000007f0000 : "firmware"
[    0.416207] 2 seama-fw partitions found on MTD device firmware
[    0.422277] Creating 2 MTD partitions on "firmware":
[    0.427416] 0x000000000040-0x000000190000 : "kernel"
[    0.433161] 0x000000190000-0x000000770000 : "rootfs"
[    0.438924] mtd: device 7 (rootfs) set to be root filesystem
[    0.444806] 1 squashfs-split partitions found on MTD device rootfs
[    0.451235] 0x000000410000-0x000000770000 : "rootfs_data"
[    0.457428] 0x0000007f0000-0x000000800000 : "art"
[    0.463938] libphy: Fixed MDIO Bus: probed
[    0.807938] libphy: ag71xx_mdio: probed
[    0.814908] switch0: Atheros AR8337 rev. 2 switch registered on mdio-bus.0
[    1.469348] ag71xx 19000000.eth: invalid MAC address, using random address
[    1.808736] ag71xx 19000000.eth: connected to PHY at mdio-bus.0:00 [uid=004dd036, driver=Atheros AR8216/AR8236/AR8316]
[    1.820327] eth0: Atheros AG71xx at 0xb9000000, irq 4, mode: sgmii
[    1.828446] NET: Registered protocol family 10
[    1.836389] Segment Routing with IPv6
[    1.840310] NET: Registered protocol family 17
[    1.844943] 8021q: 802.1Q VLAN Support v1.8
[    1.854680] VFS: Mounted root (squashfs filesystem) readonly on device 31:7.
[    1.868869] Freeing unused kernel memory: 1232K
[    1.873551] This architecture does not have kernel memory protection.
[    2.520873] init: Console is alive
[    2.524572] init: - watchdog -
[    2.547589] random: fast init done
[    3.559875] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    3.672369] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    3.690250] init: - preinit -
[    4.342977] random: jshn: uninitialized urandom read (4 bytes read)
[    4.438282] random: jshn: uninitialized urandom read (4 bytes read)
[    4.731136] random: jshn: uninitialized urandom read (4 bytes read)
[    5.812413] urandom_read: 4 callbacks suppressed
[    5.812420] random: procd: uninitialized urandom read (4 bytes read)
[    5.828955] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[    5.835036] IPv6: ADDRCONF(NETDEV_UP): eth0.1: link is not ready
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    6.908954] eth0: link up (1000Mbps/Full duplex)
[    6.913811] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[    6.920616] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.1: link becomes ready
[    9.041438] mount_root: jffs2 not ready yet, using temporary tmpfs overlay
[    9.069225] urandom-seed: Seed file not found (/etc/urandom.seed)
[    9.146253] eth0: link down
[    9.164727] procd: - early -
[    9.168571] procd: - watchdog -
[    9.772570] procd: - watchdog -
[    9.776058] procd: - ubus -
[    9.806263] random: ubusd: uninitialized urandom read (4 bytes read)
[    9.829662] random: ubusd: uninitialized urandom read (4 bytes read)
[    9.837391] procd: - init -
Please press Enter to activate this console.
[   10.109815] kmodloader: loading kernel modules from /etc/modules.d/*
[   10.121855] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   10.135151] Loading modules backported from Linux version v4.19.23-0-g67d52fae61c1
[   10.143016] Backport generated by backports.git v4.19.23-1-0-g480a925a
[   10.152281] ip_tables: (C) 2000-2006 Netfilter Core Team
[   10.164807] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[   10.220111] xt_time: kernel timezone is -0000
[   10.273835] PPP generic driver version 2.4.2
[   10.280431] NET: Registered protocol family 24
[   10.311894] ath10k 4.19 driver, optimized for CT firmware, probing pci device: 0x56.
[   10.321293] PCI: Enabling device 0000:00:00.0 (0000 -> 0002)
[   10.327446] ath10k_pci 0000:00:00.0: pci irq legacy oper_irq_mode 1 irq_mode 0 reset_mode 0
[   10.519504] ath10k_pci 0000:00:00.0: Direct firmware load for ath10k/fwcfg-pci-0000:00:00.0.txt failed with error -2
[   10.530407] ath10k_pci 0000:00:00.0: Falling back to user helper
[   10.681152] firmware ath10k!fwcfg-pci-0000:00:00.0.txt: firmware_loading_store: map pages failed
[   10.690516] ath10k_pci 0000:00:00.0: Direct firmware load for ath10k/pre-cal-pci-0000:00:00.0.bin failed with error -2
[   10.701599] ath10k_pci 0000:00:00.0: Falling back to user helper
[   11.007662] ath10k_pci 0000:00:00.0: Direct firmware load for ath10k/QCA9888/hw2.0/ct-firmware-5.bin failed with error -2
[   11.019002] ath10k_pci 0000:00:00.0: Falling back to user helper
[   11.151281] firmware ath10k!QCA9888!hw2.0!ct-firmware-5.bin: firmware_loading_store: map pages failed
[   11.161105] ath10k_pci 0000:00:00.0: Direct firmware load for ath10k/QCA9888/hw2.0/ct-firmware-2.bin failed with error -2
[   11.172457] ath10k_pci 0000:00:00.0: Falling back to user helper
[   11.346084] firmware ath10k!QCA9888!hw2.0!ct-firmware-2.bin: firmware_loading_store: map pages failed
[   11.355906] ath10k_pci 0000:00:00.0: Direct firmware load for ath10k/QCA9888/hw2.0/firmware-6.bin failed with error -2
[   11.366987] ath10k_pci 0000:00:00.0: Falling back to user helper
[   11.540529] firmware ath10k!QCA9888!hw2.0!firmware-6.bin: firmware_loading_store: map pages failed
[   12.133436] ath10k_pci 0000:00:00.0: qca9888 hw2.0 target 0x01000000 chip_id 0x00000000 sub 0000:0000
[   12.142996] ath10k_pci 0000:00:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   12.162949] ath10k_pci 0000:00:00.0: firmware ver 10.4b-ct-9888-fW-012-38a5514c api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT crc32 2a31e1c4
[   12.497483] ath10k_pci 0000:00:00.0: board_file api 2 bmi_id 0:18 crc32 d65c17b1
[   14.534673] ath10k_pci 0000:00:00.0: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   14.542446] ath10k_pci 0000:00:00.0: msdu-desc: 2500  skid: 32
[   14.572900] ath10k_pci 0000:00:00.0: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   14.584209] ath10k_pci 0000:00:00.0: wmi print 'free: 121744 iram: 25908 sram: 30092'
[   14.795616] ath10k_pci 0000:00:00.0: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-file max-sta 32 raw 0 hwcrypto 1
[   14.967346] ath9k 18100000.wmac: Direct firmware load for ath9k-eeprom-ahb-18100000.wmac.bin failed with error -2
[   14.977998] ath9k 18100000.wmac: Falling back to user helper
[   15.638153] ieee80211 phy1: Atheros AR9561 Rev:0 mem=0xb8100000, irq=2
[   15.669357] kmodloader: done loading kernel modules from /etc/modules.d/*
[   23.345884] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0
[   23.386281] jffs2_build_filesystem(): unlocking the mtd device... 
[   23.386289] done.
[   23.394701] jffs2_build_filesystem(): erasing all blocks after the end marker... 
[   27.811454] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[   27.879284] device eth0 entered promiscuous mode
[   27.897902] br-lan: port 1(eth0.1) entered blocking state
[   27.903483] br-lan: port 1(eth0.1) entered disabled state
[   27.909370] device eth0.1 entered promiscuous mode
[   28.001388] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   28.078789] IPv6: ADDRCONF(NETDEV_UP): eth0.2: link is not ready
[   28.829239] eth0: link up (1000Mbps/Full duplex)
[   28.834089] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   28.918449] br-lan: port 1(eth0.1) entered blocking state
[   28.924038] br-lan: port 1(eth0.1) entered forwarding state
[   28.930093] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.2: link becomes ready
[   29.077660] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   43.297671] done.
[   43.299695] jffs2: notice: (1248) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   43.749646] overlayfs: upper fs does not support tmpfile.
[  120.177615] random: crng init done



BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+9611-6087c7b9da
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/#

WG1200CR デコード用スクリプト

C言語の知識が皆無なので、とりあえずShellScriptで強引にでっち上げたもの。めっちゃ遅い。
OpenWrt内の “xorimage” バイナリが必要。

整理する余裕が無いので、雑に書いたモノそのまま。変数名など色々アレなのは勘弁。

2019/03/13 追記: OpenWrtのxorimage.cから大部分を流用してNECファームウェア用エンコード/デコードプログラムでっち上げを試行。スクリプトで変換するよりも速い。
musashino205/nec-enc

“KEY”

  • WF1200CR: ryztfyutcrqqo69d
  • WG1200CR: 9gsiy9nzep452pad
  • WG2600HS: met186zxlobyao3p
#!/bin/bash

KEY="9gsiy9nzep452pad"		# for WG1200CR
KEY2_MAX="251"			# 0x01 - 0xFB

# ================ #
#   Environment    #
# ================ #
TOOLS_DIR="/home/tofu/router/firmware-utils"
WORK_DIR="./tmp"
DEF_OUTPUT_DIR="./bin"
DEF_OUTPUT_BIN="${DEF_OUTPUT_DIR}/firmware.dec"
PRINT_INFO="0"

key2_generate()
{
	local max=${1:-251}
	local vals=""

	for i in $(seq 1 $max); do
		vals="${vals}\x$(printf '%02x' ${i})"
	done

	echo -ne "$vals"
}

# input file
INPUT_BIN=$1

[ -z "$INPUT_BIN" ] && echo "input file is not specified!!" && exit 1
[ ! -r "$INPUT_BIN" ] && echo "input file does not exist or cannot read!!" && exit 1

LEN="$(stat -c%s $INPUT_BIN)"
BLOCKS="$(($LEN / $KEY2_MAX))"
BLOCKS2="$(($LEN / 128))"
FOOTER_LEN="$(($LEN % $KEY2_MAX))"
FOOTER2_LEN="$(($LEN % 128))"

#if [ "$PRINT_INFO" -eq "1" ]; then
	echo ""
	echo "=== file info ==="
	echo "input file: $1"
	echo "file length: $LEN bytes"
	echo "blocks: $BLOCKS"
	echo "footer_len: $FOOTER_LEN bytes"
	echo "blocks2: $BLOCKS2"
	echo "footer2_len: $FOOTER2_LEN bytes"
	echo "================="
#fi

#exit 0

if [ "$BLOCKS" -gt "0" ]; then
	[ "$PRINT_INFO" -eq "1" ] && echo "\$BLOCKS > 0"
	value="$(key2_generate)"
fi

[ ! -e "$WORK_DIR" ] && mkdir "$WORK_DIR"

if [ -e "${WORK_DIR}/key2_gen.bin" ]; then
	[ ! -w "${WORK_DIR}/key2_gen.bin" ] && echo "cannot write to \"${WORK_DIR}/key2_gen.bin\" !!" && exit 1
	echo -n "" > "${WORK_DIR}/key2_gen.bin"
fi

for i in $(seq 1 $BLOCKS); do
	echo -n "$value" >> "${WORK_DIR}/key2_gen.bin"
done

# append footer
if [ "$FOOTER_LEN" -gt "0" ]; then
	value="$(key2_generate $FOOTER_LEN)"
	echo -n "$value" >> "${WORK_DIR}/key2_gen.bin"
fi

# xor by xorimage
${TOOLS_DIR}/xorimage \
	-i "${WORK_DIR}/key2_gen.bin" -o "${WORK_DIR}/key2_gen.xor" \
	-p "$KEY"

# xor by xorimage (stage2)
if [ -e "${WORK_DIR}/fw_tmp.bin" ]; then
	[ ! -w "${WORK_DIR}/fw_tmp.bin" ] && echo "cannot write to \"${WORK_DIR}/fw_tmp.bin\" !!" && exit 1
	echo -n "" > "${WORK_DIR}/fw_tmp.bin"
fi

for blk in $(seq 1 $BLOCKS2); do
	ptn="$(hexdump -v -n 128 -s $((($blk - 1) * 128)) -e '/1 "%02x"' ${WORK_DIR}/key2_gen.xor)"

	[ "$PRINT_INFO" -eq "1" ] && echo "seq: $blk, ptn: $ptn"

	dd if="$INPUT_BIN" bs=128 count=1 skip=$(($blk - 1)) 2> /dev/null | \
		${TOOLS_DIR}/xorimage -p "$ptn" -x >> "${WORK_DIR}/fw_tmp.bin"
	
done

if [ "$FOOTER2_LEN" -gt "0" ]; then
	ptn="$(hexdump -v -n $FOOTER2_LEN -s $(($blk * 128)) -e '/1 "%02x"' ${WORK_DIR}/key2_gen.xor)"

	echo "seq: (last block), ptn: $ptn"

	dd if="$INPUT_BIN" bs=1 count=$FOOTER2_LEN skip=$(($blk * 128)) 2> /dev/null | \
		${TOOLS_DIR}/xorimage -p "$ptn" -x >> "${WORK_DIR}/fw_tmp.bin"
fi

DECODE_LEN="$(stat -c%s ${WORK_DIR}/fw_tmp.bin)"

echo "file len: $LEN"
echo "decode len: $DECODE_LEN"
[ ! "$LEN" -eq "$DECODE_LEN" ] && echo "the length of decoded file is wrong!!" && exit 1

[ ! -e "$DEF_OUTPUT_DIR" ] && mkdir "$DEF_OUTPUT_DIR"

cp "${WORK_DIR}/fw_tmp.bin" "$DEF_OUTPUT_BIN"

echo "===== completed ====="

exit 0

WG1200CR

縁があって提供頂いたもの。本当に感謝。
早速シリアルを取って覗いてみたところ、予想通りU-BootもKernelもパスワードが掛けられているほか、U-BootのパスワードはWG2600HPなどとは別のものだった(WG800HPも違っていたが)。
OpenWrtサポートのため弄るのでメモ。

Switch

zone WAN LAN
port
(WG1200CR)
WAN LAN
port
(QCA8334)
port3 port2

MAC

  • LAN: 98:F1:99:xx:xx:24 (u-boot-env, lanmac (text))
  • WAN: 98:F1:99:xx:xx:25 (u-boot-env, wanmac (text))
  • 2.4G: 98:F1:99:xx:xx:26 (u-boot-env, wlan24mac (text))
  • 5G: 98:F1:99:xx:xx:27 (u-boot-env, wlan5mac (text))

U-Boot

autobootをCtrl+Cで止めた場合、192.168.1.1でtelnetdがパスワード無しで開始される。ただし、利用できるコマンドは本来のコマンド群のうち3種類 (boot, bootm, tp) のみ。
パスワードを調べられないかとテストクリップとライタを用いてSPI-NOR Flashのダンプを試みたが、ルータの回路の関係かライタの問題か、データの乱れが著しい。読み取る度にそこかしこの値が変化する。最終的に、なんとか必要部分のダンプに成功しU-Bootのパスワードが判明。

  • help
    ath> help
    ?       - alias for 'help'
    autoscr - run script from memory
    base    - print or set address offset
    bdinfo  - print Board Info structure
    boot    - boot default, i.e., run 'bootcmd'
    bootd   - boot default, i.e., run 'bootcmd'
    bootelf - Boot from an ELF image in memory
    bootm   - boot application image from memory
    bootp   - boot image via network using BootP/TFTP protocol
    bootvx  - Boot vxWorks from an ELF image
    clearenv - clear environment variables to persistent storage
    cmp     - memory compare
    coninfo - print console devices and information
    cp      - memory copy
    crc32   - checksum calculation
    dhcp    - invoke DHCP client to obtain IP/boot params
    echo    - echo args to console
    erase   - erase FLASH memory
    ethreg  - Switch/PHY Reg rd/wr  utility
    exit    - exit script
    flinfo  - print FLASH memory information
    go      - start application at address 'addr'
    help    - print online help
    httpsvr - Start HTTP server to load image
    iminfo  - print header information for application image
    itest   - return true/false on integer compare
    loop    - infinite loop on address range
    mct   - simple RAM test
    md      - memory display
    mii     - MII utility commands
    mm      - memory modify (auto-incrementing)
    mtest   - simple RAM test
    mw      - memory write (fill)
    nfs     - boot image via network using NFS protocol
    nm      - memory modify (constant address)
    pci     - list and access PCI Configuration Space
    ping    - send ICMP ECHO_REQUEST to network host
    pll cpu-pll dither ddr-pll dither - Set to change CPU & DDR speed
    pll erase
    pll get
    printenv- print environment variables
    progmac - Set ethernet MAC addresses
    progmac2 - Set ethernet MAC addresses
    protect - enable or disable FLASH write protection
    rarpboot- boot image via network using RARP/TFTP protocol
    reset   - Perform RESET of the CPU
    run     - run commands in an environment variable
    saveenv - save environment variables to persistent storage
    setenv  - set environment variables
    sleep   - delay execution for some time
    stop_boot - stop boot test
    telnetd - start telnetd
    test    - minimal test like /bin/sh
    tftpboot- boot image via network using TFTP protocol
    tp      - test program
    version - print monitor version
    

  • version
    ath> version
    
    U-Boot 1.1.4 (Nov  1 2017 - 20:40:33)
    

  • tp ?
    ath> tp ?
    support commands ...
    pulse      Ethernet 1000M Pulse Test
    link       Ethernet Link Status
    reset      RESET Test
    test sdram        SDRAM Test
    test timer       TIMER Test
    lan        LAN Test 
    wan        WAN Test
    test checksum      CHECK SUM Test
    test post       Power On Self Test
    get        GET env 
    set        SET env 
    btn        Button Test [reset | wps]
    aging     Aging Test
    err        ERR DISPLAY
    test sw         Switch confirm Test
    

  • printenv
    ath> printenv
    bootargs=console=ttyS0,115200 root=31:02 rootfstype=jffs2 init=/sbin/init mtdparts=ath-nor0:256k(u-boot),64k(u-boot-env),6336k(rootfs),1408k(uImage),64k(mib0),64k(ART)
    bootcmd=bootm 0x9f080040
    bootdelay=2
    baudrate=115200
    ethaddr=0x00:0xaa:0xbb:0xcc:0xdd:0xee
    ipaddr=192.168.1.1
    serverip=192.168.1.10
    seattle=setenv bootcmd 'bootm 0x9f080040' && saveenv
    bc=ap152-8M
    lof=tftp 0x80060000 openwrt-ar71xx-generic-${bc}-rootfs-squashfs.bin && erase 0x9f050000 +${filesize} && cp.b $fileaddr 0x9f050000 $filesize
    lok=tftp 0x80060000 openwrt-ar71xx-generic-${bc}-kernel.bin && erase 0x9f6e0000 +${filesize} && cp.b $fileaddr 0x9f6e0000 $filesize
    lqsdk=setenv bootcmd 'bootm 0x9f6e0000' && saveenv && run lof && run lok
    telnetd=1
    dir=
    lu=tftp 0x80060000 ${dir}u-boot.bin&&erase 0x9f000000 +$filesize&&cp.b $fileaddr 0x9f000000 $filesize
    lf=tftp 0x80060000 ${dir}ap152${bc}-jffs2&&erase 0x9f050000 +0x630000&&cp.b $fileaddr 0x9f050000 $filesize
    lk=tftp 0x80060000 ${dir}vmlinux${bc}.lzma.uImage&&erase 0x9f680000 +$filesize&&cp.b $fileaddr 0x9f680000 $filesize
    mfcmode=0
    calmode=0
    stop_boot=0
    atelnetd=0
    stdin=serial
    stdout=serial
    stderr=serial
    ethact=eth0
    
    Environment size: 1147/32764 bytes
    

  • mii device
    ath> mii device
    MII devices: 'eth0' 
    Current device: 'eth0'
    

  • md.l 0x18050048 1
    ath> md.l 0x18050048 1
    18050048: 03000101    ....
    

  • ethreg
    ath> ethreg 0x4
    Read Reg: 0x00000004 = 0x00000080
    ath> ethreg 0x50
    Read Reg: 0x00000050 = 0xcc35cc35
    ath> ethreg 0x54
    Read Reg: 0x00000054 = 0xca35ca35
    ath> ethreg 0x58
    Read Reg: 0x00000058 = 0xc935c935
    ath> ethreg 0x5c
    Read Reg: 0x0000005c = 0x03ffff00
    ath> ethreg 0x7c
    Read Reg: 0x0000007c = 0x0000007e
    

Kernel

パスワードが掛けられており、またfailsafeも潰されている(or 元々無い)ためどうにもログイン不可。
ファーム本体はseama形式の模様。

  • uname -a
    U-Boot 1.1.4 (Nov  1 2017 - 20:40:33)
    
    SVN revision: 1501
    ap152 - Dragonfly 1.0DRAM:  
    sri
    ath_ddr_initial_config(278): (ddr2 init)
    ath_sys_frequency: cpu 775 ddr 650 ahb 258
    Tap values = (0x10, 0x10, 0x10, 0x10)
    128 MB
    Top of RAM usable for U-Boot at: 88000000
    Reserving 304k for U-Boot at: 87fb0000
    Reserving 160k for malloc() at: 87f88000
    Reserving 44 Bytes for Board Info at: 87f87fd4
    Reserving 36 Bytes for Global Data at: 87f87fb0
    Reserving 128k for boot params() at: 87f67fb0
    Stack Pointer at: 87f67f98
    Now running in RAM - U-Boot at: 87fb0000
    Flash Manuf Id 0xc2, DeviceId0 0x20, DeviceId1 0x17
    flash size 8MB, sector count = 128
    Flash:  8 MB
    Power up PLL with outdiv = 0 then switch to 3
    In:    serial
    Out:   serial
    Err:   serial
    Net:   ath_gmac_enet_initialize...
    No valid address in Flash. Using fixed address
    ath_gmac_enet_initialize: reset mask:c02200 
    athr_mgmt_init ::done
    Dragonfly  ----> S17 PHY *
    athrs17_reg_init: complete
    SGMII in forced mode
    athr_gmac_sgmii_setup SGMII done
    : cfg1 0x80000000 cfg2 0x7114
    eth0: 00:03:7f:09:0b:ad
    eth0 up
    eth0
    Setting 0x181162c0 to 0x40802100
    Trying eth0
    eth0 link down
    FAIL
    Using eth0 device
    listen from server 192.168.1.10; our IP address is 192.168.1.1
    monitor_packet_result 0
    Hit any key to stop autoboot:  0 
    ## Booting image at 9f080040 ...
       Image Name:   MIPS Seattle Linux-3.3.8
       Created:      2018-11-05   9:39:44 UTC
       Image Type:   MIPS Linux Multi-File Image (lzma compressed)
       Data Size:    1064192 Bytes =  1 MB
       Load Address: 80060000
       Entry Point:  80060000
       Contents:
       Image 0:  1064184 Bytes =  1 MB
       Verifying Checksum at 0x9f080080 ...OK
       Uncompressing Multi-File Image ... OK
    No initrd
    ## Transferring control to Linux (at address 80060000) ...
    ## Giving linux memsize in bytes, 134217728
    
    Starting kernel ...
    
    [    0.000000] Linux version 3.3.8 (kevin_huang@ub1204) (gcc version 4.6.3 20120201 (prerelease) (Linaro GCC 4.6-2012.02) ) #1 Mon Nov 5 17:13:14 CST 2018
    [    0.000000] bootconsole [early0] enabled
    [    0.000000] CPU revision is: 00019750 (MIPS 74Kc)
    [    0.000000] SoC: Qualcomm Atheros QCA956X rev 0
    [    0.000000] Clocks: CPU:775.000MHz, DDR:650.000MHz, AHB:258.333MHz, Ref:25.000MHz
    [    0.000000] Determined physical RAM map:
    [    0.000000]  memory: 08000000 @ 00000000 (usable)
    [    0.000000] Initrd not found or empty - disabling initrd
    [    0.000000] Zone PFN ranges:
    [    0.000000]   Normal   0x00000000 -> 0x00008000
    [    0.000000] Movable zone start PFN for each node
    [    0.000000] Early memory PFN ranges
    [    0.000000]     0: 0x00000000 -> 0x00008000
    [    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
    [    0.000000] Kernel command line: board=AP152 console=ttyS0,115200 mtdparts=spi0.0:256k(u-boot)ro,64k(u-boot-env),64k@256k(devdata),64k(devconf),64k(misc),64k(wifimngdata),7616k(upgrade),64k(art),8m@0(rootfs)ro,8m@0(firmware)ro root=/dev/mtdblock8 init=/sbin/init noinitrd crashkernel=10M@20M
    [    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
    [    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
    [    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
    [    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
    [    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
    [    0.000000] Writing ErrCtl register=00000000
    [    0.000000] Readback ErrCtl register=00000000
    [    0.000000] Memory: 126284k/131072k available (2256k kernel code, 4788k reserved, 579k data, 188k init, 0k highmem)
    [    0.000000] SLUB: Genslabs=9, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
    [    0.000000] NR_IRQS:83
    [    0.000000] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
    [    0.060000] pid_max: default: 32768 minimum: 301
    [    0.060000] Mount-cache hash table entries: 512
    [    0.060000] Performance counters: mips/74K PMU enabled, 4 32-bit counters available to each CPU, irq 13
    [    0.070000] NET: Registered protocol family 16
    [    0.080000] gpiochip_add: registered GPIOs 0 to 22 on device: ath79
    [    0.080000] MIPS: machine is Qualcomm Atheros AP152 reference board
    [    0.090000] 
    [    0.090000] WLAN firmware dump buffer allocation of 2097152 bytes @ address 0x87a00000- SUCCESS !!!
    [    0.100000] registering PCI controller with io_map_base unset
    [    0.310000] bio: create slab  at 0
    [    0.310000] PCI host bridge to bus 0000:00
    [    0.320000] pci_bus 0000:00: root bus resource [mem 0x12000000-0x13ffffff]
    [    0.320000] pci_bus 0000:00: root bus resource [io  0x0001]
    [    0.330000] pci 0000:00:00.0: BAR 0: assigned [mem 0x12000000-0x121fffff 64bit]
    [    0.330000] pci 0000:00:00.0: using irq 40 for pin 1
    [    0.340000] Switching to clocksource MIPS
    [    0.340000] NET: Registered protocol family 2
    [    0.350000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
    [    0.350000] TCP established hash table entries: 4096 (order: 3, 32768 bytes)
    [    0.360000] TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
    [    0.360000] TCP: Hash tables configured (established 4096 bind 4096)
    [    0.370000] TCP reno registered
    [    0.370000] UDP hash table entries: 256 (order: 0, 4096 bytes)
    [    0.380000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
    [    0.380000] NET: Registered protocol family 1
    [    0.400000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
    [    0.400000] msgmni has been set to 246
    [    0.410000] io scheduler noop registered
    [    0.410000] io scheduler deadline registered (default)
    [    0.530000] HDLC line discipline maxframe=4096
    [    0.530000] N_HDLC line discipline registered.
    [    0.540000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
    [    0.560000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11) is a 16550A
    [    0.570000] console [ttyS0] enabled, bootconsole disabled
    [    0.570000] console [ttyS0] enabled, bootconsole disabled
    [    0.580000] m25p80 spi0.0: found mx25l6405d, expected m25p80
    [    0.590000] m25p80 spi0.0: mx25l6405d (8192 Kbytes)
    [    0.590000] 10 cmdlinepart partitions found on MTD device spi0.0
    [    0.600000] spi0.0: the flash image has SEAMA header
    [    0.610000] spi0.0: squashfs filesystem found at offset 0x00190060
    [    0.610000] spi0.0: the flash image has SEAMA header
    [    0.620000] Creating 11 MTD partitions on "spi0.0":
    [    0.620000] 0x000000000000-0x000000040000 : "u-boot"
    [    0.630000] 0x000000040000-0x000000050000 : "u-boot-env"
    [    0.640000] 0x000000040000-0x000000050000 : "devdata"
    [    0.640000] 0x000000050000-0x000000060000 : "devconf"
    [    0.650000] 0x000000060000-0x000000070000 : "misc"
    [    0.660000] 0x000000070000-0x000000080000 : "wifimngdata"
    [    0.660000] 0x000000080000-0x0000007f0000 : "upgrade"
    [    0.670000] 0x0000007f0000-0x000000800000 : "art"
    [    0.670000] 0x000000190060-0x000000797060 : "rootfs"
    [    0.680000] mtd: partition "rootfs" set to be root filesystem
    [    0.690000] 0x000000080040-0x000000797060 : "firmware"
    [    0.690000] 0x000000000000-0x000000800000 : "flash"
    [    0.700000] m25p80 spi0.1: found pm25lv512, expected m25p80
    [    0.710000] m25p80 spi0.1: pm25lv512 (64 Kbytes)
    [    0.850000] ag71xx_mdio: probed
    [    0.850000] eth0: Atheros AG71xx at 0xb9000000, irq 4
    [    1.430000] eth0: Atheros AR8327 switch driver attached.
    [    4.370000] ag71xx ag71xx.0: eth0: connected to PHY at ag71xx-mdio.0:00 [uid=004dd036, driver=Atheros AR8216/AR8236/AR8316]
    [    4.380000] PPP generic driver version 2.4.2
    [    4.380000] PPP BSD Compression module registered
    [    4.390000] PPP MPPE Compression module registered
    [    4.390000] NET: Registered protocol family 24
    [    4.400000] Netfilter messages via NETLINK v0.30.
    [    4.400000] nf_conntrack version 0.5.0 (1973 buckets, 7892 max)
    [    4.410000] xt_time: kernel timezone is -0000
    [    4.410000] ip_tables: (C) 2000-2006 Netfilter Core Team
    [    4.420000] TCP cubic registered
    [    4.420000] NET: Registered protocol family 17
    [    4.430000] 8021q: 802.1Q VLAN Support v1.8
    [    4.430000] ### of_selftest(): No testcase data in device tree; not running tests
    [    4.450000] VFS: Mounted root (squashfs filesystem) readonly on device 31:8.
    [    4.450000] Freeing unused kernel memory: 188k freed
    starting pid 825, tty '': '/etc/init.d/rcS'
    [/etc/init.d/S10init.sh]
    [/etc/init.d/S15udevd.sh]
    [/etc/init.d/S19init.sh]
    [/etc/init.d/S19wifi.sh]
    System is starting
    377+0 records in
    377+0 records out
    377+0 records in
    377+0 records out
    [    6.600000] mem_manager: module license 'unspecified' taints kernel.
    [    6.610000] Disabling lock debugging due to kernel taint
    [    6.810000] ath_dfs: Version 2.0.0
    [    6.810000] Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved
    [    6.880000] ath_spectral: Version 2.0.0
    [    6.880000] Copyright (c) 2005-2009 Atheros Communications, Inc. All Rights Reserved
    [    8.090000] ath_hal: 0.9.17.1 (AR5416, AR9380, REGOPS_FUNC, PRIVATE_DIAG, WRITE_EEPROM, 11D)
    [    8.110000] ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
    [    8.140000] ath_tx99: Version 2.0
    [    8.140000] Copyright (c) 2010 Atheros Communications, Inc, All Rights Reserved
    [    8.340000] ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
    [    8.470000] __ath_attach: Set global_scn[0]
    [    8.480000] *** All the minfree values should be ic_wrap_com=869d1000 &wrap_com->wc_devt=869d1000 
    [    8.740000] ath_tx_paprd_init sc 873e0000 PAPRD Enabled
    [    8.750000] wifi0: Atheros 956X: mem_start: =0xb8100000, mem_end: =0xb8120000, irq=47
    [    8.760000] ath_da_pci:  (Atheros/multi-bss)
    [    9.330000] ath_ol_pci:  (Atheros/multi-bss)
    [    9.330000] hif_pci_enable_bus: con_mode = 0x0, device_id = 0x56
    [    9.340000] ath_ol_pci 0000:00:00.0: BAR 0: assigned [mem 0x12000000-0x121fffff 64bit]
    [    9.350000] PCI: Enabling device 0000:00:00.0 (0000 -> 0002)
    [    9.350000] hif_pci_enable_bus: hif_enable_pci done *********** QCA9888 *************hif_pci_enable_bus: hif_type = 0xe, target_type = 0xchif_pci_enable_bus: hif_pci_probe_tgt_wakeup donehif_target_sync: Loop checking FW signalhif_target_sync: Got FW signal, retries = 0hif_config_ce: ce_init donehif_config_ce: X, ret = 0hif_set_hia: Ehif_set_hia_extnd: E
    [    9.400000] chip_id 0xc chip_revision 0x0
    [    9.400000] 
    [    9.400000]  CLOCK PLL skipped
    [    9.410000] hif_set_hia_extnd: setting the target pll frac ffffffff intval ffffffff
    [    9.410000] hif_set_hia_extnd: no frac provided, skipping pre-configuring PLL
    [    9.420000] hif_pci_bus_configure: hif_set_hia donehif_configure_irq: Ehif_pci_configure_legacy_irq: Ehif_pci_configure_legacy_irq: X, ret = 0hif_enable: X OKhif_napi_create: NAPI structures initializedhif_napi_create: NAPI id 6 created for pipe 5qca_napi_create: napi instance 32 created on pipe 4
    [    9.450000] hif_napi_event: received evnt: CONF cmd; v = 1 (state=0x1)hif_napi_event: setting configuration to ON
    [    9.460000] __ol_ath_attach() Allocated scn 86600380
    [    9.470000] __ol_ath_attach: dev name wifi1
    [    9.470000] ol_ath_attach interface_id 1
    [    9.480000] ol_target_init() BMI inited.
    [    9.480000] ol_target_init() BMI Get Target Info.
    [    9.490000] Chip id: 0xc, chip version: 0x1000000
    [    9.490000] 
    [    9.490000]  CE WAR Disabled
    [    9.500000] NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0
    [    9.500000] ol_target_init() configure Target .
    [    9.510000] 
    [    9.510000]  Target Version is 1000000
    [    9.510000] 
    [    9.510000]  Flash Download Address  c0000 
    [    9.520000] ol_transfer_bin_file: flash data file defined
    [    9.520000] ol_transfer_bin_file[3807] Get Caldata for wifi1.
    [    9.530000] qdf_fs_read[59], Open File /tmp/wifi1.caldata SUCCESS!!file system magic:-2054924042super blocksize:4096inode 1230file size:12064qc98xx_verify_checksum: flash checksum passed: 0x97b9
    [    9.550000] ol_transfer_bin_file 3868: Download Flash data len 12064
    [    9.550000] Board extended Data download address: 0x0
    [    9.580000] 
    [    9.580000]  Board data initialized
    [    9.590000] ol_ath_download_firmware: Download OTP, flash download ADDRESS 0xc0000
    [    9.600000] 
    [    9.600000]  Selecting  OTP binary for CHIP Version 0
    [    9.670000] ol_transfer_bin_file 3688: downloading file 0, Download data len 9080
    [    9.710000] 
    [    9.710000]  First OTP send param 8000
    [    9.950000] ol_ath_download_firmware :First OTP download and Execute is good address:0x4800 return param 4660
    [    9.960000] ol_ath_download_firmware:##Board Id 18 , CHIP Id 0
    [    9.970000] ol_ath_download_firmware: BOARDDATA DOWNLOAD TO address 0xc0000
    [    9.980000] 
    [    9.980000]  wifi1: Selecting board data file name boardData_2_0_QCA9888_5G_Y9582.bin
    [    9.990000] ol_transfer_bin_file: Board Data File download to address=0xc0000 file name=QCA9888/hw.2/boardData_2_0_QCA9888_5G_Y9582.bin
    [   10.010000] ol_transfer_bin_file 3688: downloading file 3, Download data len 12064
    [   10.020000] Board extended Data download address: 0x0
    [   10.050000] ol_ath_download_firmware: Using 0x1234 for the remainder of init
    [   10.050000] 
    [   10.050000]  Selecting  OTP binary for CHIP Version 0
    [   10.070000] ol_transfer_bin_file 3688: downloading file 0, Download data len 9080
    [   10.110000] 
    [   10.110000]  [Flash] : Ignore Module param
    [   10.120000] 
    [   10.120000]  Second otp download Param 10000 
    [   10.370000] ol_ath_download_firmware : Second OTP download and Execute is good, param=0x0 
    [   10.380000] 
    [   10.380000]  Mission mode: Firmware CHIP Version 0
    [   10.550000] ol_swap_seg_alloc: Successfully allocated memory for SWAP size=262144 
    [   10.570000] ol_swap_wlan_memory_expansion: length:239071 size_left:239091 dma_size_left:262144 fw_temp:c05be004 fw_entry_size:239095
    [   10.580000] ol_swap_wlan_memory_expansion: dma_virt_addr :a6580000 fw_temp: c05be008 length: 239071
    [   10.590000] Swap: bytes_left to copy: fw:16; dma_page:23073
    [   10.600000] ol_swap_wlan_memory_expansion: length:0 size_left:12 dma_size_left:23073 fw_temp:c05f85eb fw_entry_size:239095
    [   10.610000] Swap: wrong length read:0
    [   10.610000] ol_swap_wlan_memory_expansion: Swap total_bytes copied: 239071 Target address 41a928 
    [   10.620000] scn=86600380  target_write_addr=41a928 seg_info=8667d610 
    [   10.630000] ol_transfer_swap_struct:Code swap structure successfully downloaded for bin type =2 
    [   10.640000] bin_filename=QCA9888/hw.2/athwlan.bin swap_filename=/lib/firmware/QCA9888/hw.2/athwlan.codeswap.bin 
    [   10.650000] ol_transfer_bin_file: Downloading firmware file: QCA9888/hw.2/athwlan.bin
    [   11.040000] ol_transfer_bin_file 3688: downloading file 1, Download data len 377960
    [   12.500000] ol_target_init() Download FW done. 
    [   12.500000] ol_ath_attach() WMI attached. wmi_handle 8788c000 
    [   12.510000] wmi_unified_register_event_handler: Event id 62 is unavailable
    [   12.520000] +htc_create ..  HIF :86684000-htc_create: (0x879de800)
    [   12.520000] htc_wmi_init() HT Create . 879de800
    [   12.530000] htc_wmi_init 7563 host_enable 0 nss_nwifi_offload 0
    [   12.540000] ol_ath_set_default_tgt_config : AC Minfree buffer allocation through module param (umac.ko)
    [   12.540000]  OL_ACBKMinfree : 0
    [   12.550000]  OL_ACBEMinfree : 0
    [   12.550000]  OL_ACVIMinfree : 0
    [   12.550000]  OL_ACVOMinfree : 0
    [   12.560000] hif_enable_fastpath, Enabling fastpath mode
    [   12.560000] +HWT
    [   12.570000] hif_completion_thread_startup: pipe_num:0 pipe_info:0x8668705chif_completion_thread_startup: pipe_num:3 pipe_info:0x8668711chif_completion_thread_startup: pipe_num:4 pipe_info:0x8668715c
    [   12.590000] -HWT
    [   12.590000] Startup Mode-0 set
    [   12.590000] 
    [   12.590000] 
    [   12.600000] htt_peer_map_timer_init Enter pdev 85880000 hrtimer 85884960
    [   12.610000] 
    [   12.610000]  htt_alloc_peer_map_mem : Alloc Success : host q vaddr 866a6000 paddr 66a6000
    [   12.620000] 
    [   12.620000]  htt_alloc_peer_map_mem : Flush Interval Configured to 256 pkts
    [   12.630000] ol_txrx_pdev_attach: 2500 tx desc's allocated ; range starts from 85520000
    [   12.640000] Firmware_Build_Number:10 
    [   12.640000] FW wireless modes: 0x7f9001
    [   12.650000] num_rf_chain:0x00000002  ht_cap_info:0x0000085b  vht_cap_info:0x339979fa  vht_supp_mcs:0x0000fffa
    [   12.660000] wmi_service_coex_gpio 0, wmi_service_4_wire_coex_support 0, coex_version 0
    [   12.670000] 
    [   12.670000] Sending Ext resource cfg: HOST PLATFORM as 1
    [   12.670000] fw_feature_bitmap as 50 to TGT
    [   12.680000] ol_ath_service_ready_event: tt_support: 1
    [   12.680000] ol_ath_service_ready_event: periodic_chan_stats: 1
    [   12.690000] ol_ath_service_ready_event: sw_cal_support_check_flag: 1
    [   12.700000] Peer Caching Enabled ; num_peers = 530, num_active_peers = 52 num_tids = 104, num_vdevs = 17
    [   12.710000] EXT NSS Supported
    [   12.710000] idx 1 req 2  num_units 1 num_unit_info 12 unit size 256 actual units 53 
    [   12.720000] ol_ath_alloc_host_mem_chunk req_id 2 idx 0 num_units 53 unit_len 256,
    [   12.720000] idx 2 req 3  num_units 1 num_unit_info 12 unit size 1024 actual units 53 
    [   12.730000] ol_ath_alloc_host_mem_chunk req_id 3 idx 1 num_units 53 unit_len 1024,
    [   12.740000] idx 3 req 4  num_units 1 num_unit_info 12 unit size 4096 actual units 53 
    [   12.750000] ol_ath_alloc_host_mem_chunk req_id 4 idx 2 num_units 53 unit_len 4096,
    [   12.760000] idx 0 req 1  num_units 0 num_unit_info 2 unit size 896 actual units 531 
    [   12.770000] ol_ath_alloc_host_mem_chunk req_id 1 idx 3 num_units 531 unit_len 896,
    [   12.780000] idx 4 req 5  num_units 0 num_unit_info 2 unit size 1940 actual units 531 
    [   12.790000] ol_ath_alloc_host_mem_chunk req_id 5 idx 4 num_units 531 unit_len 1940,
    [   12.800000] Support not added yet for Service 91
    [   12.800000] Support not added yet for Service 92
    [   12.810000] No EXT_MSG send INIT now
    [   12.810000] chunk 0 len 13568 requested , ptr  0x5588000
    [   12.820000] chunk 1 len 54272 requested , ptr  0x5590000
    [   12.820000] chunk 2 len 217088 requested , ptr  0x55c0000
    [   12.830000] chunk 3 len 475776 requested , ptr  0x5600000
    [   12.830000] chunk 4 len 1030140 requested , ptr  0x5700000
    [   12.840000] ol_ath_service_ready_event[4253] WAPI MBSSID 2 
    [   12.850000] smart_log_init: Smart logging Enabled buf=855a0000 (size=65536)
    [   12.860000] Version = 16777216 3  status = 0
    [   12.870000] ol_ath_connect_htc() WMI is ready
    [   12.870000] htt_h2t_frag_desc_bank_cfg_msg - HTT_H2T_MSG_TYPE_FRAG_DESC_BANK_CFG sent to FW for radio ID = 1
    [   12.880000] target uses HTT version 2.2; host uses 2.2
    [   12.890000] ol_ath_attach() connect HTC. 
    [   12.900000] bypasswmi : 0
    [   12.900000] ol_regdmn_start: reg-domain param: regdmn=0, countryName=, wModeSelect=FFFFFFFF, netBand=FFFFFFFF, extendedChanMode=0.
    [   12.910000] ol_regdmn_init_channels: !avail mode 0x7f9001 (0x2) flags 0x2150
    [   12.920000] ol_regdmn_init_channels: !avail mode 0x7f9001 (0x4) flags 0xa0
    [   12.930000] ol_regdmn_init_channels: !avail mode 0x7f9001 (0x8) flags 0xc0
    [   12.930000] ol_regdmn_init_channels: !avail mode 0x7f9001 (0x20) flags 0xd0
    [   12.940000] ol_regdmn_init_channels: !avail mode 0x7f9001 (0x40) flags 0x150
    [   12.950000] ol_regdmn_init_channels: !avail mode 0x7f9001 (0x800) flags 0x10080
    [   12.960000] ol_regdmn_init_channels: !avail mode 0x7f9001 (0x2000) flags 0x20080
    [   12.960000] ol_regdmn_init_channels: !avail mode 0x7f9001 (0x4000) flags 0x40080
    [   12.970000] Add VHT80 channel: 5210
    [   12.980000] Add VHT80 channel: 5290
    [   12.980000] Add VHT80 channel: 5530
    [   12.980000] Add VHT80 channel: 5610
    [   12.990000] Skipping VHT80 channel 5660
    [   12.990000] Skipping VHT80 channel 5680
    [   12.990000] Skipping VHT80 channel 5700
    [   13.000000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5530, cfreq2:5210 in case of VHT80+80
    [   13.010000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5530, cfreq2:5290 in case of VHT80+80
    [   13.020000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5530, cfreq2:5210 in case of VHT80+80
    [   13.030000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5530, cfreq2:5290 in case of VHT80+80
    [   13.030000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5530, cfreq2:5210 in case of VHT80+80
    [   13.040000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5530, cfreq2:5290 in case of VHT80+80
    [   13.050000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5530, cfreq2:5210 in case of VHT80+80
    [   13.060000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5530, cfreq2:5290 in case of VHT80+80
    [   13.070000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5610, cfreq2:5210 in case of VHT80+80
    [   13.080000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5610, cfreq2:5290 in case of VHT80+80
    [   13.090000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5610, cfreq2:5210 in case of VHT80+80
    [   13.100000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5610, cfreq2:5290 in case of VHT80+80
    [   13.110000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5610, cfreq2:5210 in case of VHT80+80
    [   13.120000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5610, cfreq2:5290 in case of VHT80+80
    [   13.130000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5610, cfreq2:5210 in case of VHT80+80
    [   13.130000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5610, cfreq2:5290 in case of VHT80+80
    [   13.140000] freq=58 
    [   13.150000] freq=106 
    [   13.150000] freq=122 
    [   13.150000] OL Resmgr Init-ed
    [   13.160000] ieee80211_bsteering_attach: Band steering initialized
    [   13.160000] acfg_attach: using existing sock 872ae800
    [   13.170000] SPECTRAL : get_capability not registered
    [   13.170000] HAL_CAP_PHYDIAG : Capable
    [   13.180000] SPECTRAL : Need to fix the capablity check for RADAR (spectral_attach : 237)
    [   13.180000] SPECTRAL : get_capability not registered
    [   13.190000] HAL_CAP_RADAR   : Capable
    [   13.190000] SPECTRAL : Need to fix the capablity check for SPECTRAL
    [   13.190000]  (spectral_attach : 242)
    [   13.200000] SPECTRAL : get_capability not registered
    [   13.210000] HAL_CAP_SPECTRAL_SCAN : Capable
    [   13.210000] SPECTRAL : get_tsf64 not registered
    [   13.220000] spectral_init_netlink 78 NULL SKB
    [   13.220000] Green-AP : Green-AP : Attached
    [   13.220000] 
    [   13.230000] Green-AP : Attached
    [   13.230000] rate power table override is only supported for AR98XX
    [   13.240000] ol_ath_smart_ant_attach: Hardware doest not support Smart Antenna.
    [   13.250000] ol_if_dfs_attach: called; ptr=855b997c, radar_info=871bfb40
    [   13.250000] dfs_attach: event log enabled by default
    [   13.260000] >>>> CB Set   (null)
    [   13.260000] 
    [   13.260000] INIT WIFI LEDs
    [   13.270000] ol_ath_attach() UMAC attach . 
    [   13.270000] 
    [   13.270000]  BURSTING enabled by default
    [   13.280000] ol_ath_attach: Set global_ic[2] ..ptr:86946c00
    [   13.280000] ath_lowi_if_netlink_init LOWI Netlink successfully created
    [   13.290000] osif_wrap_attach:443 osif wrap attached
    [   13.290000] osif_wrap_devt_init:404 osif wrap dev table init done
    [   13.300000]  Wrap Attached: Wrap_com =85034200 ic->ic_wrap_com=85034200 &wrap_com->wc_devt=85034200 
    [   13.310000] __ol_ath_attach: needed_headroom reservation 60
    [   13.320000] ol_ath_thermal_mitigation_attach: --
    [   13.330000] ol_ath_pci_probe num_radios=0, wifi_radios[0].sc = 86600380 wifi_radio_type = 2
    [   13.340000] ath_sysfs_diag_init: diag_fsattr 
    [   13.370000]  pktlog_init: Initializing Pktlog for AR900B, pktlog_hdr_size = 16
    [   13.380000] +hif_update_pipe_callback pipeid 8
    [   13.390000] -hif_update_pipe_callback
    [   13.400000] __sa_init_module 
    [   13.540000] [wifi1] FWLOG: [20789] WAL_DBGID_TX_AC_BUFFER_SET ( 0x3, 0x1e, 0x94c, 0x94c, 0x0 )
    [   13.550000] [wifi1] FWLOG: [20789] WAL_DBGID_TX_AC_BUFFER_SET ( 0x12, 0x1e, 0x94c, 0x94c, 0x0 )
    [   13.560000] [wifi1] FWLOG: [20789] WAL_DBGID_TX_AC_BUFFER_SET ( 0x45, 0x1e, 0x94c, 0x94c, 0x0 )
    [   13.560000] [wifi1] FWLOG: [20789] WAL_DBGID_TX_AC_BUFFER_SET ( 0x67, 0x1e, 0x94c, 0x94c, 0x0 )
    [   13.570000] [wifi1] FWLOG: [20789] WAL_DBGID_TX_AC_BUFFER_SET ( 0x100, 0x11e1a300 )
    [   13.580000] [wifi1] FWLOG: [21079] UNKNOWN 22:55 ( 0x88, 0xa50, 0x540, 0x40, 0x0 )
    [   13.590000] [wifi1] FWLOG: [21079] UNKNOWN 22:55 ( 0x88, 0x40, 0x0, 0x40, 0x0 )
    [   14.500000] ath_net80211_dfs_clist_update: called, cmd=1, nollist=  (null), nentries=0
    [   14.510000] ath_attach_dfs[12614] dfsdomain 3
    [   14.510000] dfs_attach: event log enabled by default
    [   14.550000] isCountryCodeValid: EEPROM regdomain 0x88
    [   14.550000] ol_regdmn_init_channels: !avail mode 0x7f9001 (0x2) flags 0x2150
    [   14.560000] ol_regdmn_init_channels: !avail mode 0x7f9001 (0x4) flags 0xa0
    [   14.570000] ol_regdmn_init_channels: !avail mode 0x7f9001 (0x8) flags 0xc0
    [   14.570000] ol_regdmn_init_channels: !avail mode 0x7f9001 (0x20) flags 0xd0
    [   14.580000] ol_regdmn_init_channels: !avail mode 0x7f9001 (0x40) flags 0x150
    [   14.590000] ol_regdmn_init_channels: !avail mode 0x7f9001 (0x800) flags 0x10080
    [   14.600000] ol_regdmn_init_channels: !avail mode 0x7f9001 (0x2000) flags 0x20080
    [   14.600000] ol_regdmn_init_channels: !avail mode 0x7f9001 (0x4000) flags 0x40080
    [   14.610000] Add VHT80 channel: 5210
    [   14.610000] Add VHT80 channel: 5290
    [   14.620000] Add VHT80 channel: 5530
    [   14.620000] Add VHT80 channel: 5610
    [   14.630000] Skipping VHT80 channel 5660
    [   14.630000] Skipping VHT80 channel 5680
    [   14.630000] Skipping VHT80 channel 5700
    [   14.640000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5530, cfreq2:5210 in case of VHT80+80
    [   14.650000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5530, cfreq2:5290 in case of VHT80+80
    [   14.660000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5530, cfreq2:5210 in case of VHT80+80
    [   14.660000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5530, cfreq2:5290 in case of VHT80+80
    [   14.670000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5530, cfreq2:5210 in case of VHT80+80
    [   14.680000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5530, cfreq2:5290 in case of VHT80+80
    [   14.690000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5530, cfreq2:5210 in case of VHT80+80
    [   14.700000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5530, cfreq2:5290 in case of VHT80+80
    [   14.710000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5610, cfreq2:5210 in case of VHT80+80
    [   14.720000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5610, cfreq2:5290 in case of VHT80+80
    [   14.730000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5610, cfreq2:5210 in case of VHT80+80
    [   14.740000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5610, cfreq2:5290 in case of VHT80+80
    [   14.750000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5610, cfreq2:5210 in case of VHT80+80
    [   14.760000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5610, cfreq2:5290 in case of VHT80+80
    [   14.760000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5610, cfreq2:5210 in case of VHT80+80
    [   14.770000] EMI WAR rejecting fc1 > fc2 Combination cfreq1:5610, cfreq2:5290 in case of VHT80+80
    [   14.780000] freq=58 
    [   14.790000] freq=106 
    [   14.790000] freq=122 
    [/etc/init.d/S20init.sh]
    [   15.540000] [wifi1] FWLOG: [22757] UNKNOWN 22:55 ( 0x88, 0xa50, 0x540, 0x40, 0x0 )
    [   15.550000] [wifi1] FWLOG: [22757] UNKNOWN 22:55 ( 0x88, 0x40, 0x0, 0x40, 0x0 )
      DEFNODE[/etc/defnodes/S11devdata.xml]
      DEFNODE[/etc/defnodes/S12bootdata.sh]
    [   15.860000] Switching to Tx Mode-0
      DEFNODE[/etc/defnodes/S12flashspeed.php]
      DEFNODE[/etc/defnodes/S13dfs.php]
      DEFNODE[/etc/defnodes/S14setchlist.php]
      DEFNODE[/etc/defnodes/S15wifi.sh]
      DEFNODE[/etc/defnodes/S20device.xml]
      DEFNODE[/etc/defnodes/S22timezone.php]
    [/etc/scripts/setdate.sh] 10/01/2017 ...
    Sun Oct  1 09:00:16 GMT 2017
      DEFNODE[/etc/defnodes/S30device.php]
      DEFNODE[/etc/defnodes/S30device.xml]
      DEFNODE[/etc/defnodes/S31diagnostic.xml]
      DEFNODE[/etc/defnodes/S31locale.php]
      DEFNODE[/etc/defnodes/S40device.xml]
      DEFNODE[/etc/defnodes/S40links.php]
      DEFNODE[/etc/defnodes/S80mtfwu.php]
      DEFNODE[/etc/defnodes/S90opendns.php]
      DEFNODE[/etc/defnodes/S90sessions.php]
      DEFNODE[/etc/defnodes/S90sessions_privatekey.php]
      DEFNODE[/etc/defnodes/S90upnpigd.php]
      DEFNODE[/etc/defnodes/S90upnpwfa.php]
    SERVD: start service [LOGD]
    [/etc/init.d/S20interfaces.sh]
    [   17.110000] ssdk_plat_init start
    [   17.120000] Register QCA PHY driver
    [   17.130000] PHY ID is 0x4dd036
    [   17.230000] qca probe f1 phy driver succeeded!
    [   17.240000] qca-ssdk module init succeeded!
    [   17.270000] fast-classifier: starting up
    [   17.270000] fast-classifier: registered
    [/etc/init.d/S21setnode.sh]
    [/etc/init.d/S23udevd.sh]
    [/etc/init.d/S45gpiod.sh]
    [/etc/init.d/S49wlc.sh]
    [/etc/init.d/S50wzcm.sh]
    [/etc/init.d/S90wssctl.sh]
    WSS: starting wssctl
    [/etc/init.d/rcS] done!
    [/etc/init0.d/S21layout.sh]: start ...
    SERVD: start service [LAYOUT]
    [/etc/init0.d/S40event.sh]: start ...
    SERVD: event [SEALPAC.LOAD/default]
    [/etc/init0.d/S40gpioevent.sh]: start ...
    SEAMA: need meta for searching image.
    [/etc/init0.d/S41autowan.sh]: start ...
    [/etc/init0.d/S41event.sh]: start ...
    [/etc/init0.d/S41inf.sh]: start ...
    [/etc/init0.d/S42napt.sh]: start ...
    [/etc/init0.d/S42pthrough.sh]: start ...
    [/etc/init0.d/S43checkfw.sh]: start ...
    [/etc/init0.d/S43netchk.sh]: start ...
    [/etc/init0.d/S51wlan.sh]: start ...
    [/etc/init0.d/S65ddnsd.sh]: start ...
    [/etc/init0.d/S65logd.sh]: start ...
    /etc/init0.d/S65ddnsd.sh: line 7: ddnsd: not found
    [/etc/init0.d/S65user.sh]: start ...
    
     SSDK Init OK!
    operation done.
    
    
     SSDK Init OK!
    operation done.
    
    [   19.130000] device eth0 entered promiscuous mode
    [   19.170000] device eth0.1 entered promiscuous mode
    [   19.190000] device eth0.2 entered promiscuous mode
    [/etc/init0.d/S91proclink.sh]: start ...
    Create /var/proc/alpha symbolic link...
    [/etc/init0.d/S93cpuload.sh]: start ...
    [/etc/init0.d/S94aim.sh]: start ...
    AIM: starting aim
    [/etc/init0.d/S94dnsnquery.sh]: start ...
    Enable pause frame function of port LAN1 (0x1)
    
     SSDK Init OK!
    operation done.
    
    
     SSDK Init OK![/etc/init0.d/S94watchdog.sh]: start ...
    [   19.510000] AR71XX_RESET_REG_WDOG_CTRL: 0x80000000
    [   19.510000]  
    [   19.520000] Last system reboot was due to WDOG
    [   19.560000] br0: port 1(eth0.1) entered forwarding state
    [   19.560000] br0: port 1(eth0.1) entered forwarding state
    [   19.570000] br0: port 2(eth0.2) entered forwarding state
    [   19.580000] br0: port 2(eth0.2) entered forwarding state
    [   19.580000] eth0: link up (1000Mbps/Full duplex)
    
    operation done.
    
    Disable eee function of port LAN1 (0x1)
    
     SSDK Init OK!
    operation done.
    
    
     SSDK Init OK!
    operation done.
    
    
     SSDK Init OK!
    operation done.
    
    
     SSDK Init OK!
    operation done.
    
    
     SSDK Init OK!
    operation done.
    
    SERVD: start service [BRIDGE]
    SERVD: start service [LAN]
    LAN: The device is not in the router mode.
    SERVD: start service [WAN]
    WAN: The device is not in the router mode.
    SERVD: start service [DEVICE.NAPT]
    SERVD: start service [DEVICE.PASSTHROUGH]
    SERVD: start service [DEVICE.NETCHK]
    SERVD: start service [WIFI.PHYINF]
    SERVD: service [WIFI.PHYINF] return error 108.
    SERVD: start service [PHYINF.WIFI]
    [/etc/init0.d/S95password.sh]: start ...
    [   21.600000] br0: port 1(eth0.1) entered disabled state
    [   21.600000] br0: port 2(eth0.2) entered disabled state
    [   23.620000] br0: port 1(eth0.1) entered forwarding state
    [   23.620000] br0: port 1(eth0.1) entered forwarding state
    SERVD: event [WPS.NONE/default]
    [   25.310000] dfs_control ignore cac = 0xffffffff 
    [   25.350000] dfs_control ignore cac = 0xffffffff 
    [   25.370000] dfs_control ignore cac = 0xffffffff 
    [   25.400000] dfs_control ignore cac = 0xffffffff 
    SERVD: stop service [LOGD]
    SERVD: start service [LOGD]
    SERVD: start service [DEVICE.ACCOUNT]
    Password for 'admin' has been updated
    Password for 'root' has been updated
    SERVD: stop service [HTTP]
    SERVD: service [HTTP] is already stopped.
    SERVD: start service [HTTP]
    SERVD: event [HTTP.UP] not found!
    SERVD: start service [ENLAN]
    SERVD: start service [PHYINF.ETH-1]
    SERVD: start service [DNS]
    killall: dnsmasq: no process killed
    SERVD: start service [IPTABLES]
    CONNTRACK_MAX=30000
    CONNTRACK_MIN=15000
    SERVD: start service [INET.BRIDGE-1]
    [/var/servd/INET.BRIDGE-1_start.sh]: starting BRIDGE-1...
    [/var/servd/INET.BRIDGE-1_start.sh]: starting BRIDGE-1 done !!!
    SERVD: start service [IPTABLES]
    SERVD: service [IPTABLES] is already started.
    SERVD: start service [IPTABLES]
    SERVD: service [IPTABLES] is already started.
    SERVD: stop service [IPT.LAN-1]
    SERVD: service [IPT.LAN-1] is already stopped.
    SERVD: start service [IPT.LAN-1]
    SERVD: stop service [IPT.LAN-2]
    SERVD: service [IPT.LAN-2] is already stopped.
    SERVD: start service [IPT.LAN-2]
    SERVD: stop service [IPT.LAN-3]
    SERVD: service [IPT.LAN-3] is already stopped.
    SERVD: start service [IPT.LAN-3]
    SERVD: service [IPT.LAN-3] return error 108.
    SERVD: stop service [IPT.LAN-4]
    SERVD: service [IPT.LAN-4] is already stopped.
    SERVD: start service [IPT.LAN-4]
    SERVD: service [IPT.LAN-4] return error 108.
    SERVD: stop service [IPT.LAN-5]
    SERVD: service [IPT.LAN-5] is already stopped.
    SERVD: start service [IPT.LAN-5]
    SERVD: service [IPT.LAN-5] return error 108.
    SERVD: stop service [IPT.LAN-6]
    SERVD: service [IPT.LAN-6] is already stopped.
    SERVD: start service [IPT.LAN-6]
    SERVD: service [IPT.LAN-6] return error 108.
    SERVD: start service [PHYINF.WIFISTA-1.1]
    killall: wpa_supplicant: no process killed
    [   27.580000] wlan_vap_create : enter. devhandle=0x872f0380, opmode=IEEE80211_M_STA, flags=0x1
    [   27.590000] wlan_vap_create : exit. devhandle=0x872f0380, vap=0x85398000, opmode=IEEE80211_M_STA, flags=0x1.
    [   27.600000] __ieee80211_smart_ant_init: Smart Antenna is not supported 
    [   27.610000] VAP device ath0 created osifp: (85178b80) os_if: (85398000)
    ath0
    [   27.700000]  
    [   27.700000]  DES SSID SET=aterm 
    [   27.710000]  ieee80211_ioctl_siwmode: imr.ifm_active=131200, new mode=2, valid=1 
    [   27.710000] siwfreq
    Error for wireless request "Set Frequency" (8B04) :
        SET failed on device ath0 ; Invalid argument.
    [   27.730000] Setting nec dual creds ie state 1
    [   27.740000] Setting nec tv mode ie state 2
    [   27.750000] device ath0 entered promiscuous mode
    SERVD: event [WLAN.CONNECTED] not found!
    SERVD: start service [PHYINF.WIFISTA-2.1]
    [   28.030000] wlan_vap_create : enter. devhandle=0x86600380, opmode=IEEE80211_M_STA, flags=0x1
    [   28.040000] send_vdev_create_cmd_non_tlv: ID = 0 Type = 2, Subtype = 0 VAP Addr = 98:f1:99:f2:1d:26:
    [   28.050000] send_set_ps_mode_cmd_non_tlv:set psmode=1
    [   28.050000] wlan_vap_create : exit. devhandle=0x86600380, vap=0x853c0000, opmode=IEEE80211_M_STA, flags=0x1.
    [   28.060000] __ieee80211_smart_ant_init: Smart Antenna is not supported 
    [   28.070000] Enabling TX checksum bit for the vap ath1 features 4000 
    [   28.080000] Enabling SG bit for the vap ath1 features 4000 
    [   28.080000] Enabling SG bit for the vap ath1 features 4000 
    [   28.090000] Enabling TSO bit for the vap ath1 features 4000 
    [   28.090000] Enabling LRO bit for the vap ath1 features 4000 
    [   28.100000] VAP device ath1 created osifp: (8517a380) os_if: (853c0000)
    ath1
    [   28.120000] send_set_ps_mode_cmd_non_tlv:set psmode=0
    [   28.120000] send_set_ps_mode_cmd_non_tlv:set psmode=0
    [   28.160000]  
    [   28.160000]  DES SSID SET=aterm 
    [   28.170000]  ieee80211_ioctl_siwmode: imr.ifm_active=65664, new mode=2, valid=1 
    [   28.170000] siwfreq
    Error for wireless request "Set Frequency" (8B04) :
        SET failed on device ath1 ; Invalid argument.
    [   28.190000] Setting nec dual creds ie state 1
    [   28.200000] Setting nec tv mode ie state 2
    [   28.210000] device ath1 entered promiscuous mode
    SERVD: event [WLAN.CONNECTED] not found!
    SERVD: stop service [WEBACCESS]
    SERVD: service [WEBACCESS] is already stopped.
    SERVD: start service [WEBACCESS]
    SERVD: service [WEBACCESS] return error 108.
    SERVD: stop service [ADP]
    SERVD: service [ADP] is already stopped.
    SERVD: start service [ADP]
    Successfully ini[   32.800000] ieee80211_ucfg_getparam : parameter 0x284 not supported 
    tialized wpa_sup[   32.810000] ieee80211_ucfg_getparam : parameter 0x284 not supported 
    plicant
    Success[   32.820000] br0: port 4(ath1) entered forwarding state
    fully initialize[   32.820000] br0: port 4(ath1) entered forwarding state
    d wpa_supplicant[   32.830000] Sending SCAN START cmd
    
    [   32.840000] 8021q: adding VLAN 0 to HW filter on device ath1
    [   32.880000] br0: port 3(ath0) entered forwarding state
    [   32.890000] br0: port 3(ath0) entered forwarding state
    [   32.890000] 8021q: adding VLAN 0 to HW filter on device ath0
    [   32.910000] send_vdev_down_cmd_non_tlv for vap 0
    ath1: CTRL-EVENT-REGDOM-CHANGE init=CORE type=UNKNOWN
    [   32.930000] Sending SCAN START cmd
    [   33.540000] [wifi1] FWLOG: [41242] WAL channel change freq=5260, mode=0 flags=0 rx_ok=1 tx_ok=1
    [   33.550000] [wifi1] FWLOG: [41318] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 )
    [   33.560000] [wifi1] FWLOG: [41318] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 )
    [   33.560000] [wifi1] FWLOG: [41651] WAL channel change freq=5280, mode=0 flags=0 rx_ok=1 tx_ok=1
    [   34.540000] [wifi1] FWLOG: [41965] WAL channel change freq=5300, mode=0 flags=0 rx_ok=1 tx_ok=1
    [   34.550000] [wifi1] FWLOG: [42278] WAL channel change freq=5320, mode=0 flags=0 rx_ok=1 tx_ok=1
    [   34.560000] [wifi1] FWLOG: [42591] WAL channel change freq=5180, mode=0 flags=0 rx_ok=1 tx_ok=1
    [   34.570000] [wifi1] FWLOG: [42802] WAL channel change freq=5200, mode=0 flags=0 rx_ok=1 tx_ok=1
    ath0: CTRL-EVENT-REGDOM-CHANGE init=CORE type=UNKNOWN
    [   35.540000] [wifi1] FWLOG: [43013] WAL channel change freq=5220, mode=0 flags=0 rx_ok=1 tx_ok=1
    [   35.550000] [wifi1] FWLOG: [43224] WAL channel change freq=5240, mode=0 flags=0 rx_ok=1 tx_ok=1
    [   35.560000] [wifi1] FWLOG: [43435] WAL channel change freq=5500, mode=0 flags=0 rx_ok=1 tx_ok=1
    [   35.570000] [wifi1] FWLOG: [43749] WAL channel change freq=5520, mode=0 flags=0 rx_ok=1 tx_ok=1
    [   36.540000] [wifi1] FWLOG: [44062] WAL channel change freq=5540, mode=0 flags=0 rx_ok=1 tx_ok=1
    [   36.550000] [wifi1] FWLOG: [44376] WAL channel change freq=5560, mode=0 flags=0 rx_ok=1 tx_ok=1
    [   36.560000] [wifi1] FWLOG: [44689] WAL channel change freq=5580, mode=0 flags=0 rx_ok=1 tx_ok=1
    [   36.570000] [wifi1] FWLOG: [45002] WAL channel change freq=5600, mode=0 flags=0 rx_ok=1 tx_ok=1
    [   37.540000] [wifi1] FWLOG: [45316] WAL channel change freq=5620, mode=0 flags=0 rx_ok=1 tx_ok=1
    [   37.550000] [wifi1] FWLOG: [45629] WAL channel change freq=5640, mode=0 flags=0 rx_ok=1 tx_ok=1
    [   37.560000] [wifi1] FWLOG: [45942] WAL channel change freq=5660, mode=0 flags=0 rx_ok=1 tx_ok=1
    [   38.340000] send_vdev_down_cmd_non_tlv for vap 0
    [   38.350000] br0: port 4(ath1) entered disabled state
    [   38.540000] [wifi1] FWLOG: [46256] WAL channel change freq=5680, mode=0 flags=0 rx_ok=1 tx_ok=1
    [   38.550000] [wifi1] FWLOG: [46569] WAL channel change freq=5700, mode=0 flags=0 rx_ok=1 tx_ok=1
    [   38.560000] [wifi1] FWLOG: [46888] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 )
    [   38.570000] [wifi1] FWLOG: [46888] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 )
    [   51.670000] br0: port 3(ath0) entered disabled state
    

  • firmware update log
    [/etc/scripts/upwifistatshlper_A_band.sh] CONNSTATUS ath1 1 ....
    not support [CONNSTATUS] ...
    [ephp.c read_operand_list 1234] PHP operator precedence issue at: /htdocs/webinc/js/tools_fw_rlt.php, operand_qty: 6, add_qty: 2, mul_qty: 3
    SERVD: event [PREFWUPDATE/default]
    [/etc/scripts/prefwupdate.sh] ....
    SERVD: stop service [THERMAL]
    Stop THERMAL service ..
    SERVD: event [STATUS.CRITICAL] not found!
    SERVD: stop service [WAN]
    SERVD: stop service [WIFI]
    SERVD: service [WIFI] is already stopped.
    SERVD: stop service [LAN]
    SERVD: stop service [INET.WAN-1]
    [/var/servd/INET.WAN-1_stop.sh]: stopping WAN-1...
    [/var/servd/INET.WAN-1_stop.sh]: stopping WAN-1 done !!!
    SERVD: stop service [INET.WAN-2]
    SERVD: service [INET.WAN-2] is already stopped.
    SERVD: stop service [INET.WAN-3]
    SERVD: service [INET.WAN-3] is already stopped.
    SERVD: stop service [INET.WAN-4]
    SERVD: service [INET.WAN-4] is already stopped.
    SERVD: stop service [INET.WAN-5]
    SERVD: service [INET.WAN-5] is already stopped.
    SERVD: stop service [IPT.WAN-1]
    SERVD: stop service [IPT.WAN-2]
    SERVD: stop service [IPT.WAN-3]
    SERVD: stop service [IPT.WAN-4]
    SERVD: stop service [IPT.WAN-5]
    SERVD: service [IPT.WAN-5] is already stopped.
    SERVD: stop service [IPTDMZ]
    SERVD: stop service [IPTPORTT]
    SERVD: stop service [IPTPFWD]
    SERVD: stop service [IPTVSVR]
    iptables: No chain/target/match by that name.
    SERVD: stop service [IPTMASQ]
    SERVD: stop service [INET.LAN-1]
    [/var/servd/INET.LAN-1_stop.sh]: stopping LAN-1...
    SERVD: event [LAN-1.DOWN/default]
    /var/run/phpsh-4653.sh: line 6: can't create /proc/nf_accelerate_to_local: nonexistent directory
    [/var/servd/INET.LAN-1_stop.sh]: stopping LAN-1 done !!!
    SERVD: stop service [INET.LAN-2]
    SERVD: service [INET.LAN-2] is already stopped.
    SERVD: stop service [INET.LAN-4]
    SERVD: service [INET.LAN-4] is already stopped.
    SERVD: stop service [INET.LAN-5]
    SERVD: service [INET.LAN-5] is already stopped.
    SERVD: stop service [INET.LAN-6]
    SERVD: service [INET.LAN-6] is already stopped.
    SERVD: stop service [IPT.LAN-1]
    SERVD: stop service [IPT.LAN-2]
    SERVD: stop service [IPT.LAN-3]
    SERVD: service [IPT.LAN-3] is already stopped.
    SERVD: stop service [IPT.LAN-4]
    SERVD: service [IPT.LAN-4] is already stopped.
    SERVD: stop service [IPT.LAN-5]
    SERVD: service [IPT.LAN-5] is already stopped.
    SERVD: stop service [IPT.LAN-6]
    SERVD: service [IPT.LAN-6] is already stopped.
    SERVD: stop service [ACCESSCTRL]
    SERVD: stop service [HTTP]
    SERVD: event [HTTP.DOWN/default]
    [/etc/events/FWUPDATER.sh] ...
    kill servd, xmldb, watchdog, and load.sh
    copy upgrade needed file to ramfs
    remout /www /htdocs /etc /usr /bin /sbin to empty ramfs avoid someone access rootfs
    FWUPDATER: about to write 7434336 bytes data to /dev/mtdblock/6
    FWUPDATER: cost 58.500600 seconds
    fwupdate: unable to read SEAMA header!
    /etc/events/FWUPDATER.sh: line 44: ca[  146.890000] ath_vap_stopping=1
    n't create /proc/driver/system_reset: nonexistent directory
    /etc/events/FWUPDATER.sh: line 45: can't create /proc/system_reset: nonexistent directory
    The system is going down NOW!
    Sent SIGTERM to all processes
    [  146.930000] mlme_create_infra_bss : Overriding HT40 channel with HT20 channel
    [  146.970000] __ieee80211_smart_ant_init: Smart Antenna is not supported 
    [  146.980000] ol_ath_vap_stopping=1
    [  146.980000] STOPPED EVENT for vap 0 (8788c000)
    [  146.990000] send_vdev_down_cmd_non_tlv for vap 0
    [  147.020000] OL vap_start +
    [  147.020000] VDEV START
    [  147.020000] OL vap_start -
    [  147.020000] ol_vdev_start_resp_ev for vap 0 (8788c000)
    [  147.030000] su bfee 1 mu bfee 0 su bfer 1 mu bfer 1 impl bf 0 sounding dim 1
    [  147.040000] send_vdev_up_cmd_non_tlv for vap 0
    [  147.040000] ol_ath_vap_up=1
    [  147.040000] __ieee80211_smart_ant_init: Smart Antenna is not supported 
    [  147.050000] ol_ath_vap_set_param: Now supported MGMT RATE is 6000(kbps) and rate code: 0x3
    [  147.060000] ol_ath_vap_set_param: Now supported MCAST RATE is 6000(kbps) and rate code: 0x3
    [  147.580000] [wifi1] FWLOG: [158118] WAL_DBGID_SECURITY_MCAST_KEY_SET ( 0x1 )
    [  147.580000] [wifi1] FWLOG: [158134] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 )
    [  147.590000] [wifi1] FWLOG: [158134] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 )
    [  147.600000] [wifi1] FWLOG: [158163] vap-0 VDEV_MGR_VDEV_START ( 0x1464, 0x2, 0x0, 0x0 )
    [  147.610000] [wifi1] FWLOG: [158163] UNKNOWN 14:20 ( 0x0 )
    [  147.610000] [wifi1] FWLOG: [158183] VDEV_MGR_HP_START_TIME ( 0x0, 0x1464, 0x8007000 )
    [  147.620000] [wifi1] FWLOG: [158183] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x1 )
    [  147.630000] [wifi1] FWLOG: [158183] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 )
    [  147.630000] [wifi1] FWLOG: [158183] VDEV_MGR_AP_TBTT_CONFIG ( 0x0, 0x1464, 0x0, 0x0 )
    Sent SIGKILL to all processes
    Requesting system reboot
    [  148.900000] Restarting system.
    

WN-G300R3

東久留米のハードオフに立ち寄った際、ACアダプタ無しジャンク324円だったため確保した機種。MT7620であることを予想していたため、そのうちやろうかな、と考えていた。
開けてみたところRAMが32MBだったりFlashが4MBだったりととても残念で最初放置しようと決めたものの、他機種でシリアルのピンヘッダを立てる際についでに立て、折角なので自フォーク内でのみサポートを持つことにした。

Switch

未確認

MAC

  • LAN: 34:76:C5:xx:xx:F4 (Config, ethaddr (text))
  • WAN: 34:76:C5:xx:xx:F5 (Config, wanaddr (text))
  • 2G: 34:76:C5:xx:xx:F4 (Factory, 0x4 (hex))

U-Boot

  • help
    U-Boot 1.1.3 (Aug  8 2014 - 12:01:55)
    MT7620 # help
    ?       - alias for 'help'
    bootm   - boot application image from memory
    cp      - memory copy
    erase   - erase SPI FLASH memory
    go      - start application at address 'addr'
    help    - print online help
    loadb   - load binary file over serial line (kermit mode)
    md      - memory display
    mdio   - Ralink PHY register R/W command !!
    mm      - memory modify (auto-incrementing)
    nm      - memory modify (constant address)
    printenv- print environment variables
    reset   - Perform RESET of the CPU
    rf      - read/write rf register
    saveenv - save environment variables to persistent storage
    setenv  - set environment variables
    tftpboot- boot image via network using TFTP protocol
    version - print monitor version
    

  • version
    MT7620 # version
    
    U-Boot 1.1.3 (Aug  8 2014 - 12:01:55)
    

  • printenv
    MT7620 # printenv
    bootcmd=tftp
    bootdelay=1
    baudrate=115200
    ethaddr="34:76:C5:**:**:F4"
    ipaddr=192.168.99.9
    serverip=192.168.99.8
    sn=2599078U1
    hw_ver=1.1.0
    hw_id=030A0065
    pro_id=000
    country=000
    domain=1
    wanaddr=34:76:C5:**:**:F5
    wlanaddr=00:AA:BB:CC:DD:12
    iNICaddr=00:AA:BB:CC:DD:22
    eth_en=0
    snextra=BBE2599078U1********
    bootfile=uImageWLR-3100v2003
    op_mode=0
    uboot_ver=1.0.0.14
    stdin=serial
    stdout=serial
    stderr=serial
    
    Environment size: 401/4092 bytes
    

Kernel

パスワードが掛けられている。

  • uname -a
    # uname -a
    Linux WN-G300R3 2.6.36 #2 Wed Jun 21 11:25:05 CST 2017 mips unknown
    

  • cat /proc/version
    # cat /proc/version
    Linux version 2.6.36 (root@******-******-******-******) (gcc version 4.3.4 (Buildroot 2010.05) ) #2 Wed Jun 21 11:25:05 CST 2017
    

  • cat /proc/cpuinfo
    # cat /proc/cpuinfo
    system type             : Ralink SoC
    processor               : 0
    cpu model               : MIPS 24Kc V5.0
    BogoMIPS                : 399.36
    wait instruction        : yes
    microsecond timers      : yes
    tlb_entries             : 32
    extra interrupt vector  : yes
    hardware watchpoint     : yes, count: 4, address/irw mask: [0x0000, 0x0ff8, 0x0ff8, 0x0ff8]
    ASEs implemented        : mips16 dsp
    shadow register sets    : 1
    core                    : 0
    VCED exceptions         : not available
    VCEI exceptions         : not available
    

  • cat /proc/meminfo
    # cat /proc/meminfo
    MemTotal:          29552 kB
    MemFree:            6660 kB
    Buffers:            2064 kB
    Cached:             8032 kB
    SwapCached:            0 kB
    Active:             3784 kB
    Inactive:           7352 kB
    Active(anon):       1488 kB
    Inactive(anon):      116 kB
    Active(file):       2296 kB
    Inactive(file):     7236 kB
    Unevictable:         628 kB
    Mlocked:             628 kB
    SwapTotal:             0 kB
    SwapFree:              0 kB
    Dirty:                 0 kB
    Writeback:             0 kB
    AnonPages:          1684 kB
    Mapped:             2132 kB
    Shmem:               116 kB
    Slab:               7384 kB
    SReclaimable:        596 kB
    SUnreclaim:         6788 kB
    KernelStack:         472 kB
    PageTables:          312 kB
    NFS_Unstable:          0 kB
    Bounce:                0 kB
    WritebackTmp:          0 kB
    CommitLimit:       14776 kB
    Committed_AS:       5012 kB
    VmallocTotal:    1048372 kB
    VmallocUsed:        3228 kB
    VmallocChunk:    1034064 kB
    

  • cat /proc/mtd
    # cat /proc/mtd
    dev:    size   erasesize  name
    mtd0: 00400000 00001000 "ALL"
    mtd1: 00030000 00001000 "Bootloader"
    mtd2: 00010000 00001000 "Config "
    mtd3: 00010000 00001000 "Factory"
    mtd4: 00390000 00001000 "Kernel"
    mtd5: 00244000 00001000 "app"
    mtd6: 00010000 00001000 "backup"
    mtd7: 00010000 00001000 "storage"
    

  • bootlog (op_mode=0)
    U-boot Ver:1.0.0.14 2014/08/08 12:01:55
    
    
    Board: Ralink APSoC DRAM:  32 MB
    ******************************
    Software System Reset Occurred
    ******************************
    spi_wait_nsec: 28 
    spi device id: 1c 70 16 1c 70 (70161c70)
    Warning: un-recognized chip ID, please update bootloader!
    ============================================ 
    ASIC 7620_MP (Port5None)
    Product Name: WN-G300R3
    DRAM bus: 16 bit
    Total memory: 32 MBytes
    Flash component: SPI Flash
    Date:Aug  8 2014  Time:12:01:55
    ============================================ 
    EMBEDAD SWITH init
    
    Please choose the operation: 
       2: Load system code then write to Flash via TFTP. 
       3: Boot system code via Flash (default).
       9: Load Boot Loader code then write to Flash via TFTP. 
                                                                                                                               0 
       
    3: System Boot system code via Flash.
    ## Booting image at bc050000 ...
       Image Name:   Linux Kernel Image
       Image Type:   MIPS Linux Kernel Image (lzma compressed)
       Data Size:    1359398 Bytes =  1.3 MB
       Load Address: 80000000
       Entry Point:  8000c110
       Verifying Checksum ... OK
       Uncompressing Kernel Image ... OK
    
    Starting kernel ...
    
    
    LINUX started...
    
     THIS IS ASIC
    init started: BusyBox v1.13.3 (2017-06-21 11:21:37 CST)
    starting pid 714, tty '/dev/console': '/sbin/config_init'
    mknod: /dev/ttyS0: File exists
    mknod: /dev/ttyS1: File exists
    Config Init version: 1.10.000.48 date: 2017/06/21
    Sun Jan  1 00:00:00 UTC 2017
    mount: can't find /sys in /etc/fstab or /etc/mtab
    ln: /lib/./modules: File exists
    switch reg write offset=2004, value=ff0003
    switch reg write offset=2104, value=ff0003
    switch reg write offset=2204, value=ff0003
    switch reg write offset=2304, value=ff0003
    switch reg write offset=2404, value=ff0003
    switch reg write offset=2504, value=ff0003
    switch reg write offset=2010, value=810000c0
    switch reg write offset=2110, value=810000c0
    switch reg write offset=2210, value=810000c0
    switch reg write offset=2310, value=810000c0
    switch reg write offset=2410, value=810000c0
    switch reg write offset=2510, value=810000c0
    switch reg write offset=2610, value=81000000
    switch reg write offset=2710, value=81000000
    switch reg write offset=2604, value=20ff0003
    switch reg write offset=2704, value=20ff0003
    switch reg write offset=2014, value=10001
    switch reg write offset=2114, value=10001
    switch reg write offset=2214, value=10001
    switch reg write offset=2314, value=10001
    switch reg write offset=2414, value=10002
    switch reg write offset=2514, value=10001
    REG_ESW_WT_MAC_ATC is 0x7ff0002
    done.
    Checking [/dev/mtdblock5] .... Matched.
    Checking [/apps/appscore.sqsh] .... Matched.
    starting pid 816, tty '/dev/ttyS1': '/sbin/config_term'
    ************************************************************************
    *                                WN-G300R3                             *
    ************************************************************************
    
    KernelApp/Ramdisk Ver:1.10.000.48                        Date:2017/06/21
    password: 
    

  • bootlog (op_mode=1)
    U-boot Ver:1.0.0.14 2014/08/08 12:01:55
    
    
    Board: Ralink APSoC DRAM:  32 MB
    ******************************
    Software System Reset Occurred
    ******************************
    spi_wait_nsec: 28 
    spi device id: 1c 70 16 1c 70 (70161c70)
    Warning: un-recognized chip ID, please update bootloader!
    ============================================ 
    ASIC 7620_MP (Port5None)
    Product Name: WN-G300R3
    DRAM bus: 16 bit
    Total memory: 32 MBytes
    Flash component: SPI Flash
    Date:Aug  8 2014  Time:12:01:55
    ============================================ 
    EMBEDAD SWITH init
    
    Please choose the operation: 
       2: Load system code then write to Flash via TFTP. 
       3: Boot system code via Flash (default).
       9: Load Boot Loader code then write to Flash via TFTP. 
                                                                                                                               0 
       
    3: System Boot system code via Flash.
    ## Booting image at bc050000 ...
       Image Name:   Linux Kernel Image
       Image Type:   MIPS Linux Kernel Image (lzma compressed)
       Data Size:    1359398 Bytes =  1.3 MB
       Load Address: 80000000
       Entry Point:  8000c110
       Verifying Checksum ... OK
       Uncompressing Kernel Image ... OK
    
    Starting kernel ...
    
    
    LINUX started...
    
     THIS IS ASIC
    init started: BusyBox v1.13.3 (2017-06-21 11:21:37 CST)
    starting pid 714, tty '/dev/console': '/sbin/config_init'
    mknod: /dev/ttyS0: File exists
    mknod: /dev/ttyS1: File exists
    Config Init version: 1.10.000.48 date: 2017/06/21
    Sun Jan  1 00:00:00 UTC 2017
    mount: can't find /sys in /etc/fstab or /etc/mtab
    ln: /lib/./modules: File exists
    switch reg write offset=2004, value=ff0003
    switch reg write offset=2104, value=ff0003
    switch reg write offset=2204, value=ff0003
    switch reg write offset=2304, value=ff0003
    switch reg write offset=2404, value=ff0003
    switch reg write offset=2504, value=ff0003
    switch reg write offset=2010, value=810000c0
    switch reg write offset=2110, value=810000c0
    switch reg write offset=2210, value=810000c0
    switch reg write offset=2310, value=810000c0
    switch reg write offset=2410, value=810000c0
    switch reg write offset=2510, value=810000c0
    switch reg write offset=2610, value=81000000
    switch reg write offset=2710, value=81000000
    switch reg write offset=2604, value=20ff0003
    switch reg write offset=2704, value=20ff0003
    switch reg write offset=2014, value=10001
    switch reg write offset=2114, value=10001
    switch reg write offset=2214, value=10001
    switch reg write offset=2314, value=10001
    switch reg write offset=2414, value=10002
    switch reg write offset=2514, value=10001
    REG_ESW_WT_MAC_ATC is 0x7ff0002
    done.
    Checking [/dev/mtdblock5] .... Matched.
    Checking [/apps/appscore.sqsh] .... Matched.
    starting pid 815, tty '/dev/ttyS1': '/sbin/config_term'
    ************************************************************************
    *                                WN-G300R3                             *
    ************************************************************************
    
    KernelApp/Ramdisk Ver:1.10.000.48                        Date:2017/06/21
    password: Application Ver:1.10.000.48            Date:2017/06/21
    
    cmd [mkdir -p /appscore]
    cmd [cp /apps/appscore.sqsh /appscore.sqsh]
    cmd [mount -o loop -t squashfs -r /appscore.sqsh /appscore]
    cmd [test -d /appscore/sbin && ln -sf /appscore/sbin/* /sbin]
    cmd [test -f /appscore/sbin/httpd && ln -sf /appscore/sbin/httpd /sbin/httpsd]
    cmd [test -d /appscore/lib && ln -sf /appscore/lib/* /lib]
    cmd [rm -rf /lib/modules/2.6.36]
    cmd [mkdir -p /lib/modules/2.6.36/kernel]
    cmd [ln -s /apps/lib/modules/2.6.36/kernel/* /lib/modules/2.6.36/kernel]
    cmd [cp /apps/lib/modules/2.6.36/modules.* /lib/modules/2.6.36/]
    cmd [ln -s /apps/sbin/* /sbin]
    ln: /sbin/apps_init: File exists
    ln: /sbin/factory_apps_init: File exists
    ln: /sbin/opmode.sh: File exists
    cmd [rm /sbin/utelnetd]
    cmd [ls /apps/bin/* 1>/dev/null 2>/dev/null && ln -s /apps/bin/* /bin]
    cmd [ls /apps/usr/sbin/* 1>/dev/null 2>/dev/null && ln -s /apps/usr/sbin/* /usr/sbin]
    cmd [ls /apps/usr/bin/* 1>/dev/null 2>/dev/null && ln -s /apps/usr/bin/* /usr/bin]
    cmd [ls /apps/usr/local/* 1>/dev/null 2>/dev/null && ln -s /apps/usr/local/* /usr/local]
    cmd [ls /apps/usr/lib/* 1>/dev/null 2>/dev/null && ln -s /apps/usr/lib/* /usr/lib]
    cmd [mkdir -p /etc/udhcpc]
    cmd [ln -s /apps/etc/udhcpc/* /etc/udhcpc]
    cmd [mkdir -p /usr/lib/tc]
    cmd [ls /apps/usr/lib/tc/* 1>/dev/null 2>/dev/null && ln -s /apps/usr/lib/tc/* /usr/lib/tc]
    cmd [ln -s /apps/etc/xml /etc/xml]
    cmd [/sbin/apcfg_init]
    createShareMem keyid 7001 shmId 0
    Set Str value fail but len not in 1 to 32
    checkpApCfg i=28 [ap2ssid]
    Set Str value fail but len not in 1 to 32
    checkpApCfg i=46 [ap3ssid]
    Set Schedule value fail due to wrong value uid
    checkpApCfg i=585 [sys_ver_manual_sch]
    Set Int value 0 but not in rage 1000 to 50000
    checkpApCfg i=693 [wan2_dl_bw]
    Set Int value 0 but not in rage 1000 to 50000
    checkpApCfg i=709 [wan2_ul_bw]
    checkpApCfg error!!
    cmd [/sbin/sysconfd -dddd &]
    cmd [mkdir -p /mnt/sysconfd]
    cmd [ln -s /mnt/sysconfd /var/sysconfd]
    MSGQ_GETID: Cannot get message queue for key[fwmanager]!
    MSGQ_CREATE: create message queue for key[fwmanager], msgQ Id 0
    CTRL_INTERFACE:[/var/sysconfd_if]  CTRL_INTERFACE_IF:[if0]
    
    System Monitoring
    cmd [apcfgClid &]
    cmd [/sbin/sysconf_cli -t 60 sysinit]
    *********************************************************************
    Initializing system environment
    Setting up /tmp directory ...
    cmd [chmod 777 /tmp]
    Setting up loopback device ...
    cmd [ifconfig lo up 127.0.0.1 netmask 255.0.0.0]
    ***************************************************
    System is in    AP Router Mode [0]
    ***************************************************
    SEM_GETID got id -1
    cmd [sysctl -w net.ipv4.netfilter.ip_conntrack_max=10000]
    net.ipv4.netfilter.ip_conntrack_max = 10000
    cmd [sysctl -w net.ipv4.netfilter.ip_conntrack_icmp_timeout=10]
    net.ipv4.netfilter.ip_conntrack_icmp_timeout = 10
    cmd [sysctl -w net.ipv4.netfilter.ip_conntrack_udp_timeout=180]
    net.ipv4.netfilter.ip_conntrack_udp_timeout = 180
    cmd [sysctl -w net.ipv4.netfilter.ip_conntrack_udp_timeout_stream=180]
    net.ipv4.netfilter.ip_conntrack_udp_timeout_stream = 180
    cmd [sysctl -w net.ipv4.netfilter.ip_conntrack_tcp_timeout_established=600]
    net.ipv4.netfilter.ip_conntrack_tcp_timeout_established = 600
    cmd [sysctl -w kernel.shmmax=3145728]
    kernel.shmmax = 3145728
    cmd [sysctl -w vm.dirty_expire_centisecs=100]
    vm.dirty_expire_centisecs = 100
    cmd [sysctl -w vm.dirty_background_ratio=1]
    vm.dirty_background_ratio = 1
    cmd [sysctl -w vm.dirty_expire_centisecs=300]
    vm.dirty_expire_centisecs = 300
    cmd [sysctl -w vm.dirty_ratio=10]
    vm.dirty_ratio = 10
    cmd [sysctl -w vm.vfs_cache_pressure=150]
    vm.vfs_cache_pressure = 150
    cmd [sysctl -w vm.min_free_kbytes=1024]
    vm.min_free_kbytes = 1024
    cmd [sysctl -w vm.overcommit_memory=0]
    vm.overcommit_memory = 0
    cmd [sysctl -w vm.swappiness=0]
    vm.swappiness = 0
    cmd [sysctl -w fs.file-max=2048]
    fs.file-max = 2048
    cmd [sysctl -w vm.panic_on_oom=1]
    vm.panic_on_oom = 1
    cmd [sysctl -w kernel.panic=3]
    kernel.panic = 3
    Mac: 0, rtcTime:1483228801
    cmd [echo 1483228801 > /dev/urandom]
    cmd [dmesg |grep "CPU feqenuce" > /var/cpumhz]
    sh: dmesg: not found
    Open file err: /var/cpumhz!
    Starting system logging daemon ...cmd [echo JST-9 > /etc/TZ]
    cmd [date -s 2009.1.1-0:0:0]
    Thu Jan  1 00:00:00 JST 2009
    cmd [echo JST-9 > /etc/TZ]
    cmd [logserver -d]
    connect: No such file or directory
    -----> LOG : TIME, Daylight saving status: Disable
    -----> LOG : TIME, Local time=2009/01/01 00:00:00
    cmd [/sbin/klogd]
    sh: /sbin/klogd: not found
    cmd [/sbin/logserver &]
    cmd [/sbin/syslogd -k 0 -R 192.168.0.250]
    cmd [/sbin/logserver -t "Start Log Message Service!" ]
    /tmp/log_tmp open error!
    -----> LOG : SYS, Application Version: 1.10
    OK
    cmd [rm -rf /lib/raeth.ko]
    Setting up Ethernet devices ...
    cmd [/sbin/ifconfig eth2 down]
    cmd [/sbin/ifconfig eth2 hw ether 34:76:C5:A7:D1:F4 
    ]
    cmd [/sbin/ifconfig eth2 up]
    cmd [vconfig add eth2 1]
    cmd [vconfig add eth2 2]
    cmd [/sbin/ifconfig eth2.1 down]
    cmd [/sbin/ifconfig eth2.1 hw ether 34:76:C5:A7:D1:F4 
    ]
    cmd [/sbin/ifconfig eth2.1 up]
    cmd [/sbin/ifconfig eth2.2 down]
    cmd [/sbin/ifconfig eth2.2 hw ether 34:76:C5:A7:D1:F5 
    ]
    cmd [/sbin/ifconfig eth2.2 up]
    cmd [ifconfig eth2.1 0.0.0.0]
    cmd [ifconfig eth2.2 0.0.0.0]
    cmd [mii_mgr -s -p 20 -r 14 -v 0x0065 ]
    Set: phy[20].reg[14] = 0065
    OK
    Configuring Bridge device ...          -----> LOG : BR, start
    cmd [brctl addbr br0]
    cmd [/sbin/ifconfig br0 down]
    cmd [/sbin/ifconfig br0 hw ether 34:76:C5:A7:D1:F4 
    ]
    cmd [/sbin/ifconfig br0 up]
    cmd [brctl setfd br0 0.1]
    cmd [brctl setbridgeprio br0 32768]
    OK
    Setting the host&domain name ...Finished.
    Configuring net ...          cmd [sysctl -p /etc/sysctl.conf]
    net.ipv4.neigh.default.proxy_qlen = 96
    net.ipv4.neigh.default.unres_qlen = 6
    net.ipv4.ip_local_port_range = 32768 65535
    net.ipv4.tcp_timestamps = 0
    net.ipv4.tcp_sack = 0
    net.ipv4.tcp_window_scaling = 0
    net.ipv4.tcp_rmem = 1048576 1048576 1048576
    net.ipv4.tcp_wmem = 1048576 1048576 1048576
    net.ipv4.tcp_mem = 1048576 1048576 1048576
    net.ipv4.tcp_ecn = 0
    net.ipv4.tcp_reordering = 3
    net.ipv4.tcp_fack = 0
    net.ipv4.icmp_echo_ignore_broadcasts = 1
    net.ipv4.icmp_ignore_bogus_error_responses = 1
    net.ipv4.icmp_echo_ignore_all = 0
    net.ipv4.tcp_max_syn_backlog = 2048
    net.ipv4.tcp_syncookies = 1
    net.ipv4.tcp_fin_timeout = 30
    net.ipv4.tcp_retries2 = 15
    net.ipv4.tcp_retries1 = 3
    net.ipv4.tcp_rfc1337 = 1
    net.ipv4.tcp_keepalive_time = 3600
    net.ipv4.tcp_synack_retries = 5
    net.ipv4.tcp_syn_retries = 5
    net.core.somaxconn = 512
    net.core.netdev_max_backlog = 1024
    net.core.dev_weight = 64
    net.core.optmem_max = 1048576
    net.core.rmem_default = 1048576
    net.core.wmem_default = 1048576
    net.core.rmem_max = 1048576
    net.core.wmem_max = 1048576
    cmd [echo 0 > /proc/sys/net/ipv4/conf/br0/rp_filter]
    OK
    cmd [mkdir -p /etc/ipv4ll]
    cmd [ln -s /apps/etc/ipv4ll/* /etc/ipv4ll/.]
    Configuring LAN device ...          -----> LOG : LAN, start
    -----> LOG : LAN, IP address=192.168.0.1
    cmd [/sbin/ifconfig br0 down]
    cmd [/sbin/ifconfig eth2.1 0.0.0.0 up]
    cmd [brctl addif br0 eth2.1]
    cmd [/sbin/ifconfig br0 192.168.0.1 netmask 255.255.255.0]
    cmd [brctl stp br0 0]
    cmd [route add -net 239.0.0.0 netmask 255.0.0.0 br0]
    OK
    cmd [mkdir -p /etc/Wireless/RT2860]
    [WlanOpenWithoutOpenINIC 1407] (0 0)ra0 /mnt/wps_sta_status
    [WlanOpenWithoutOpenINIC 1407] (0 1) 
    [WlanOpenWithoutOpenINIC 1407] (0 2) 
    [WlanOpenWithoutOpenINIC 1407] (0 3)apcli0 /tmp/wps_status
    getRegularDomain,1
    cmd [ifconfig ra2 down]
    ifconfig: SIOCGIFFLAGS: No such device
    cmd [ifconfig ra1 down]
    ifconfig: SIOCGIFFLAGS: No such device
    cmd [ifconfig ra0 down]
    ifconfig: SIOCGIFFLAGS: No such device
    Configuring RT28XX device ...Wlan is in AP Mode
    cmd [insmod /lib/rt2860v2_ap.ko]
    -----> LOG : WLAN[2.4G], CountryRegion = 1
    -----> LOG : WLAN[2.4G], Channel = AutoSelect
    cmd [ifconfig ra0 0.0.0.0 up]
    cmd [ifconfig ra1 0.0.0.0 up]
    cmd [iwpriv ra0 set RadioOn=0]
    cmd [brctl addif br0 ra0]
    cmd [brctl addif br0 ra1]
    cmd [mkdir -p /etc/wsc_xml]
    cmd [ln -s /apps/etc/xml/* /etc/wsc_xml]
    -----> LOG : UPnP, start
    cmd [route add -net 239.0.0.0 netmask 255.0.0.0 br0]
    route: SIOCADDRT: File exists
    cmd [wscd -i ra0 -m 1 -w /etc/wsc_xml -a 192.168.0.1&]
    cmd [iwpriv ra0 set IgmpSnEnable=0]
    sh: wscd: not found
    cmd [iwpriv ra1 set IgmpSnEnable=0]
    cmd [rm -f /etc/Wireless/RT2860/version]
    cmd [touch /etc/Wireless/RT2860/version]
    cmd [echo 2.7.2.0 > /etc/Wireless/RT2860/version]
    cmd [iwpriv ra0 set RadioOn=1]
    cmd [iwpriv ra0 set WscConfMode=7]
    cmd [echo BSF 0 > /proc/netpktconfig/config_interface]
    sh: can't create /proc/netpktconfig/config_interface: nonexistent directory
    cmd [ln -s /apps/usr/sbin/pppd /usr/sbin/pppd0]
    cmd [ln -s /apps/usr/sbin/pppd /usr/sbin/pppd1]
    Wan Manager...
    Configuring WAN device[WAN0] ...
    Connect to ISP using PPPoE ... -----> LOG : WAN, start PPPoE mode
    cmd [chmod 755 /etc/ppp/pap-secrets]
    cmd [chmod 755 /etc/ppp/chap-secrets]
    cmd [chmod 755 /etc/ppp/options.tty0]
    cmd [chmod 0755 /etc/wanconn0.conf]
    cmd [ifconfig eth2.2 hw ether 34:76:C5:A7:D1:F5 0.0.0.0   up]
    -----> LOG : WAN, No PHY Link
    No PHY Link
    cmd [/sbin/wanmanager &]
    -----> LOG : DNS, start DNS Proxy
    Set Domain Routing for FLET'S Square Connection...            
    failed to read /etc/wanconn1.conf
    Failed to load /etc/wanconn1.conf
    Starting DNS Proxy ...            cmd [/sbin/dnsmasq -C /etc/dnsmasq.conf -i br0 -k &]
    OK
    -----> LOG : DHCP, start DHCP Server
    Starting DHCP(udhcpd) server ...            cmd [udhcpd &]
    udhcpd (v1.7.5) started
    Unable to open /etc/udhcpd.leases for reading
    OK
    Starting FW manager ...           cmd [/sbin/fwmanager&]
    OK
    cmd [echo JST-9 > /etc/TZ]
    Starting ntpclient ...            
    -----> LOG : NTP, start NTP Client
    Setup tc for QoS ... Disabled
    
    SCHEDULE, ServiceWlanLowRateInit ...service_index[0].
    
    SCHEDULE, ServiceWlsRadioOffInit ...service_index[1].
    cmd [iwpriv ra0 set RadioOn=1]
    fwmMsgqId is 0
    === Firmware Manager start === 
    -----> LOG : SCHEDULE, 2.4G Wireless Radio On
    
    SCHEDULE, ServiceLedOffInit ...service_index[2].
    -----> LOG : SCHEDULE, LED On
    cmd [gpio -c 9 1]
    cmd [iwpriv ra0 set LedOff=0]
    
    SCHEDULE, ServiceLanOffInit ...service_index[3].
    -----> LOG : SCHEDULE, Set LAN Interface Up
    cmd [mii_mgr -s -p 0 -r 0 -v 3100]
    Set: phy[0].reg[0] = 3100
    cmd [mii_mgr -s -p 1 -r 0 -v 3100]
    Set: phy[1].reg[0] = 3100
    cmd [mii_mgr -s -p 2 -r 0 -v 3100]
    Set: phy[2].reg[0] = 3100
    cmd [mii_mgr -s -p 3 -r 0 -v 3100]
    Set: phy[3].reg[0] = 3100
    
    SCHEDULE, ServiceWanOffInit ...service_index[4].
    -----> LOG : SCHEDULE, Set WAN Interface Up
    cmd [mii_mgr -s -p 4 -r 0 -v 3100]
    Set: phy[4].reg[0] = 3100
    
    SCHEDULE, ServicePowerLedInit ...service_index[5].
    
    
    Schedule starting  [scheduleOpen], ...wait result..
    Schedule result :[Disable (No rules)]. 
    -----> LOG : NET, start NAT
    -----> LOG : NET, start Firewall
    Configuring network routing and filtering ...FCMD[iptables --flush]
    FCMD[iptables -t nat --flush]
    FCMD[iptables -t mangle --flush]
    FCMD[iptables -A INPUT -i lo -j ACCEPT]
    FCMD[iptables -A OUTPUT -o lo -j ACCEPT]
    FCMD[iptables --policy INPUT DROP]
    FCMD[iptables --policy OUTPUT DROP]
    FCMD[iptables --policy FORWARD DROP]
    FCMD[iptables -t nat --policy PREROUTING ACCEPT]
    FCMD[iptables -t nat --policy OUTPUT ACCEPT]
    FCMD[iptables -t nat --policy POSTROUTING ACCEPT]
    FCMD[iptables -t mangle --policy PREROUTING ACCEPT]
    FCMD[iptables -t mangle --policy POSTROUTING ACCEPT]
    FCMD[iptables -t mangle --policy OUTPUT ACCEPT]
    FCMD[iptables --delete-chain]
    FCMD[iptables -t nat --delete-chain]
    FCMD[iptables -t mangle --delete-chain]
    FCMD[iptables -A INPUT  ! -i br0  -p tcp --tcp-flags ALL NONE -j DROP]
    FCMD[iptables -A FORWARD -p tcp --tcp-flags ALL NONE -j DROP]
    FCMD[iptables -A INPUT  ! -i br0  -p tcp --tcp-flags ALL ALL -j DROP]
    FCMD[iptables -A INPUT  ! -i br0  -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP]
    FCMD[iptables -A INPUT  ! -i br0  -p tcp --tcp-flags SYN,FIN SYN,FIN -j DROP]
    FCMD[iptables -A FORWARD -p tcp --tcp-flags SYN,FIN SYN,FIN -j DROP]
    FCMD[iptables -A INPUT  ! -i br0  -p tcp --tcp-flags SYN,RST SYN,RST -j DROP]
    FCMD[iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN,RST -j DROP]
    FCMD[iptables -A INPUT  ! -i br0  -p tcp --tcp-flags FIN,RST FIN,RST -j DROP]
    FCMD[iptables -A FORWARD -p tcp --tcp-flags FIN,RST FIN,RST -j DROP]
    FCMD[iptables -A INPUT  ! -i br0  -p tcp --tcp-flags ACK,FIN FIN -j DROP]
    FCMD[iptables -A FORWARD -p tcp --tcp-flags ACK,FIN FIN -j DROP]
    FCMD[iptables -A INPUT  ! -i br0  -p tcp --tcp-flags ACK,PSH PSH -j DROP]
    FCMD[iptables -A FORWARD -p tcp --tcp-flags ACK,PSH PSH -j DROP]
    FCMD[iptables -A INPUT  ! -i br0  -p tcp --tcp-flags ACK,URG URG -j DROP]
    FCMD[iptables -A FORWARD -p tcp --tcp-flags ACK,URG URG -j DROP]
    FCMD[iptables -N synflood]
    FCMD[iptables -A synflood -p tcp --syn -m limit --limit 20/s --limit-burst 20 -j RETURN]
    FCMD[iptables -A synflood -p tcp -j REJECT --reject-with tcp-reset]
    FCMD[iptables -A INPUT  ! -i br0  -p tcp -m state --state NEW -j synflood]
    FCMD[iptables -t filter -N urlfilter]
    FCMD[iptables -t nat -A PREROUTING -i br0 -p tcp -d 192.168.0.1 --dport 8080 -j DROP]
    FCMD[iptables -t nat -A PREROUTING -i br0 -p tcp --sport 1024:65535 -d 192.168.0.1 --dport 80 -j DNAT --to-destination 192.168.0.1:8080]
    FCMD[iptables -t nat -A PREROUTING -i br0 -p tcp --sport 1024:65535 ! -d 192.168.0.1 --dport 80 -j DNAT --to-destination 192.168.0.1:10404]
    FCMD[iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT]
    FCMD[iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT]
    FCMD[iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT]
    FCMD[iptables -A INPUT -s 192.168.0.1 -j DROP]
    FCMD[iptables -A FORWARD -s 192.168.0.1 -j DROP]
    FCMD[iptables -A OUTPUT -o br0 ! -s 192.168.0.1 -j DROP]
    FCMD[iptables -A INPUT -i br0 -p udp --dport 1900 -j ACCEPT]
    FCMD[iptables -A INPUT -i br0 -p tcp --dport 2869 -j ACCEPT]
    FCMD[iptables -A INPUT -i br0 -d 0.0.0.0 -j DROP]
    FCMD[iptables -A INPUT   -d 224.0.0.0/4 -j ACCEPT]
    FCMD[iptables -A FORWARD -d 224.0.0.0/4 -j ACCEPT]
    FCMD[iptables -A INPUT -i br0 -s 239.0.0.0/8 -j ACCEPT]
    FCMD[iptables -A INPUT -i br0 -d 239.0.0.0/8 -j ACCEPT]
    FCMD[iptables -A OUTPUT -o br0 -p udp -s 0.0.0.0 --sport 67 -d 255.255.255.255 --dport 68 -j ACCEPT]
    FCMD[iptables -A INPUT -i br0 -p tcp --dport 53 -j ACCEPT]
    FCMD[iptables -A INPUT -i br0 -p udp --dport 53 -j ACCEPT]
    FCMD[iptables -A OUTPUT -o eth2.2 -p udp --dport 53 -j ACCEPT]
    FCMD[iptables -A OUTPUT -o eth2.2 -p tcp --dport 53 -j ACCEPT]
    FCMD[iptables -A INPUT -i br0 -p udp --dport 69 -j ACCEPT]
    FCMD[iptables -A INPUT -i br0 -p udp -s 192.168.0.0/255.255.255.0 --dport 123 -j ACCEPT]
    FCMD[iptables -A INPUT --fragment -p icmp -j DROP]
    FCMD[iptables -A OUTPUT --fragment -p icmp -j DROP]
    FCMD[iptables -A FORWARD --fragment -p icmp -j DROP]
    FCMD[iptables -A OUTPUT -p icmp --icmp-type source-quench -j ACCEPT]
    FCMD[iptables -A FORWARD -p icmp --icmp-type source-quench -j ACCEPT]
    FCMD[iptables -A INPUT -p icmp --icmp-type parameter-problem -j ACCEPT]
    FCMD[iptables -A OUTPUT -p icmp --icmp-type parameter-problem -j ACCEPT]
    FCMD[iptables -A FORWARD -p icmp --icmp-type parameter-problem -j ACCEPT]
    FCMD[iptables -A INPUT -p icmp --icmp-type destination-unreachable -j ACCEPT]
    FCMD[iptables -A OUTPUT -o br0 -p icmp --icmp-type destination-unreachable -d 192.168.0.1 -j ACCEPT]
    FCMD[iptables -A FORWARD -o br0 -p icmp --icmp-type destination-unreachable -d 192.168.0.1 -j ACCEPT]
    FCMD[iptables -A OUTPUT -p icmp --icmp-type fragmentation-needed -j ACCEPT]
    FCMD[iptables -A FORWARD -p icmp --icmp-type fragmentation-needed -j ACCEPT]
    FCMD[iptables -A OUTPUT -p icmp --icmp-type destination-unreachable -j DROP]
    FCMD[iptables -A INPUT -p icmp --icmp-type time-exceeded -j ACCEPT]
    FCMD[iptables -A FORWARD -o br0 -p icmp --icmp-type time-exceeded -d 192.168.0.1 -j ACCEPT]
    FCMD[iptables -A OUTPUT -p icmp --icmp-type echo-request -m state --state NEW -j ACCEPT]
    FCMD[iptables -N bad-ping]
    FCMD[iptables -A bad-ping -p icmp --icmp-type echo-request -m limit --limit 20/s --limit-burst 20 -j ACCEPT]
    FCMD[iptables -A bad-ping -p icmp --icmp-type echo-request -j DROP]
    FCMD[iptables -A INPUT -i br0 -p icmp --icmp-type echo-request -j bad-ping]
    FCMD[iptables -A OUTPUT -o br0 -s 192.168.0.1 -j ACCEPT]
    FCMD[iptables -A FORWARD -i br0 -o br0 -j ACCEPT]
    FCMD[iptables -A INPUT -i br0 -j ACCEPT]
    FCMD[/sbin/ifconfig eth2.1 up]
    FCMD[/sbin/ifconfig ra0 up]
    FCMD[echo 1 > /proc/sys/net/ipv4/ip_forward]
    FCMD[echo 0 > /proc/sys/net/ipv4/conf/all/rp_filter]
    FCMD[echo 15 > /proc/sys/net/ipv4/route/gc_interval]
    FCMD[echo 1 > /proc/sys/net/ipv4/ip_dynaddr]
    FCMD[echo 1 > /proc/sys/net/ipv4/conf/eth2.2/arp_filter]
    cmd [sh /var/sysconfd/iptables.sh]
    OK
    cmd [cp /apps/etc/ethertypes /etc/ethertypes]
    Configuring Bridge filtering ...cmd [sh /var/sysconfd/ebtables.sh]
    OK
    Starting SiteBlock server ...            
    Netpacket Filter Open ....              sysGetKernelInfo: netv :1.0
    Kernel netpkt ver netv: 1.0
    cmd [insmod /lib/netpktfilter.ko]
    cmd [echo lan-add eth2.1 > /proc/netpktconfig/config_interface]
    cmd [echo lan-add ra2 > /proc/netpktconfig/config_interface]
    cmd [echo lan-add ra1 > /proc/netpktconfig/config_interface]
    cmd [echo lan-add ra0 > /proc/netpktconfig/config_interface]
    cmd [echo BSF 0 > /proc/netpktconfig/config_interface]
    cmd [echo wlan-add ra2 > /proc/netpktconfig/config_interface]
    cmd [echo wlan-add ra1 > /proc/netpktconfig/config_interface]
    cmd [echo wlan-add ra0 > /proc/netpktconfig/config_interface]
    cmd [echo wan-add eth2.2 > /proc/netpktconfig/config_interface]
    cmd [echo pppoe 0 > /proc/netpktconfig/config_interface]
    cmd [echo ipv6 1 > /proc/netpktconfig/config_interface]
    cmd [echo lan-ip c0a80001 > /proc/netpktconfig/config_interface]
    cmd [echo ratectrl 1 > /proc/netpktconfig/config_interface]
    cmd [echo ratemax 2667 > /proc/netpktconfig/config_interface]
    OK
    Starting UPNPD  ...  -----> LOG : UPnP, Start
    cmd [uuidgen -m 3476c5a7d1f4]
    WAN Speed = 10 Mbps
    cmd [route add -net 239.0.0.0 netmask 255.0.0.0 br0]
    route: SIOCADDRT: File exists
    cmd [mkdir -p /etc/linuxigd]
    cmd [ln -sf /apps/etc/linuxigd/* /etc/linuxigd/.]
    cmd [upnpd -f  ppp0 br0&]
    FAILED
    -----> LOG : HTTP, start
    cmd [ httpd&]
    Starting DDNS  ...  Disabled
    Starting netbios daemon ...  cmd [netbiosd airport 192.168.0.1 &]
    cmd [route add -net 224.0.0.0 netmask 224.0.0.0 br0]
    cmd [llmnrd airport 192.168.0.1&]
    OK
    cmd [echo WN-G300R3 > /etc/hostname]
    cmd [echo "iface br0 static" > /etc/network/interfaces]
    cmd [echo -540 > /etc/gmoffset]
    cmd [HDLFind -c /etc/HDLFind.conf]
    Starting llmnrd....
    rf_data=0xc22
    cmd [route add -net 224.0.0.0 netmask 224.0.0.0 br0]
    route: SIOCADDRT: File exists
    cmd [HDLQC -c /etc/HDLQC.conf]
    Starting Watchdog ...            cmd [watchdog &]
    Initialization has completed
    cmd [date > /var/sysconfd_start_time]
    *We used 8.830000 seconds to initialize all modules*
    cmd [/sbin/processmanager &]
    cmd [/sbin/rmgmt &]
    pSEM_GETID got id 65538
    cmd [/etc/rc.d/rc.local &]
    [RMGMT DBG] RMGMT_VERSION: 3.45.34
    cmd [kill -SIGUSR2 1469]
    *** PROCESS MANAGER Starts ***
    Processmanager update modules
    Reload WAN: ppp0 ...
    Close WAN: ppp0 ...
    -----> LOG : WAN, stop PPPoE mode
    cmd [/sbin/wanmanager -m stop0]
    cmd [/sbin/wanmanager -m stop1]
    cmd [ifconfig eth2.2   0.0.0.0   up]
    Configuring WAN device[WAN0] ...
    Connect to ISP using PPPoE ... -----> LOG : WAN, start PPPoE mode
    cmd [chmod 755 /etc/ppp/pap-secrets]
    cmd [chmod 755 /etc/ppp/chap-secrets]
    cmd [chmod 755 /etc/ppp/options.tty0]
    cmd [chmod 0755 /etc/wanconn0.conf]
    cmd [ifconfig eth2.2   0.0.0.0   up]
    cmd [/sbin/wanmanager -m reload0]
    Sending ACK to 192.168.0.2
    -----> LOG : WAN, No PHY Link
    No PHY Link
    Phy(eth2.2) link disconnected ...Wait for link recover
    Restarting Iptables ....-----> LOG : NET, stop NAT
    -----> LOG : NET, stop Firewall
    Clean iptable...cmd [iptables --flush]
    cmd [iptables -t nat --flush]
    cmd [iptables -t mangle --flush]
    cmd [iptables --policy INPUT   ACCEPT]
    cmd [iptables --policy OUTPUT  ACCEPT]
    cmd [iptables --policy FORWARD ACCEPT]
    OK
    -----> LOG : NET, start NAT
    -----> LOG : NET, start Firewall
    Configuring network routing and filtering ...FCMD[iptables --flush]
    FCMD[iptables -t nat --flush]
    FCMD[iptables -t mangle --flush]
    FCMD[iptables -A INPUT -i lo -j ACCEPT]
    FCMD[iptables -A OUTPUT -o lo -j ACCEPT]
    FCMD[iptables --policy INPUT DROP]
    FCMD[iptables --policy OUTPUT DROP]
    FCMD[iptables --policy FORWARD DROP]
    FCMD[iptables -t nat --policy PREROUTING ACCEPT]
    FCMD[iptables -t nat --policy OUTPUT ACCEPT]
    FCMD[iptables -t nat --policy POSTROUTING ACCEPT]
    FCMD[iptables -t mangle --policy PREROUTING ACCEPT]
    FCMD[iptables -t mangle --policy POSTROUTING ACCEPT]
    FCMD[iptables -t mangle --policy OUTPUT ACCEPT]
    FCMD[iptables --delete-chain]
    FCMD[iptables -t nat --delete-chain]
    FCMD[iptables -t mangle --delete-chain]
    FCMD[iptables -A INPUT  ! -i br0  -p tcp --tcp-flags ALL NONE -j DROP]
    FCMD[iptables -A FORWARD -p tcp --tcp-flags ALL NONE -j DROP]
    FCMD[iptables -A INPUT  ! -i br0  -p tcp --tcp-flags ALL ALL -j DROP]
    FCMD[iptables -A INPUT  ! -i br0  -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP]
    FCMD[iptables -A INPUT  ! -i br0  -p tcp --tcp-flags SYN,FIN SYN,FIN -j DROP]
    FCMD[iptables -A FORWARD -p tcp --tcp-flags SYN,FIN SYN,FIN -j DROP]
    FCMD[iptables -A INPUT  ! -i br0  -p tcp --tcp-flags SYN,RST SYN,RST -j DROP]
    FCMD[iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN,RST -j DROP]
    FCMD[iptables -A INPUT  ! -i br0  -p tcp --tcp-flags FIN,RST FIN,RST -j DROP]
    FCMD[iptables -A FORWARD -p tcp --tcp-flags FIN,RST FIN,RST -j DROP]
    FCMD[iptables -A INPUT  ! -i br0  -p tcp --tcp-flags ACK,FIN FIN -j DROP]
    FCMD[iptables -A FORWARD -p tcp --tcp-flags ACK,FIN FIN -j DROP]
    FCMD[iptables -A INPUT  ! -i br0  -p tcp --tcp-flags ACK,PSH PSH -j DROP]
    FCMD[iptables -A FORWARD -p tcp --tcp-flags ACK,PSH PSH -j DROP]
    FCMD[iptables -A INPUT  ! -i br0  -p tcp --tcp-flags ACK,URG URG -j DROP]
    FCMD[iptables -A FORWARD -p tcp --tcp-flags ACK,URG URG -j DROP]
    FCMD[iptables -N synflood]
    FCMD[iptables -A synflood -p tcp --syn -m limit --limit 20/s --limit-burst 20 -j RETURN]
    FCMD[iptables -A synflood -p tcp -j REJECT --reject-with tcp-reset]
    FCMD[iptables -A INPUT  ! -i br0  -p tcp -m state --state NEW -j synflood]
    FCMD[iptables -t filter -N urlfilter]
    FCMD[iptables -t nat -A PREROUTING -i br0 -p tcp -d 192.168.0.1 --dport 8080 -j DROP]
    FCMD[iptables -t nat -A PREROUTING -i br0 -p tcp --sport 1024:65535 -d 192.168.0.1 --dport 80 -j DNAT --to-destination 192.168.0.1:8080]
    FCMD[iptables -t nat -A PREROUTING -i br0 -p tcp --sport 1024:65535 ! -d 192.168.0.1 --dport 80 -j DNAT --to-destination 192.168.0.1:10404]
    FCMD[iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT]
    FCMD[iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT]
    FCMD[iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT]
    FCMD[iptables -A INPUT -s 192.168.0.1 -j DROP]
    FCMD[iptables -A FORWARD -s 192.168.0.1 -j DROP]
    FCMD[iptables -A OUTPUT -o br0 ! -s 192.168.0.1 -j DROP]
    FCMD[iptables -A INPUT -i br0 -p udp --dport 1900 -j ACCEPT]
    FCMD[iptables -A INPUT -i br0 -p tcp --dport 2869 -j ACCEPT]
    FCMD[iptables -A INPUT -i br0 -d 0.0.0.0 -j DROP]
    FCMD[iptables -A INPUT   -d 224.0.0.0/4 -j ACCEPT]
    FCMD[iptables -A FORWARD -d 224.0.0.0/4 -j ACCEPT]
    FCMD[iptables -A INPUT -i br0 -s 239.0.0.0/8 -j ACCEPT]
    FCMD[iptables -A INPUT -i br0 -d 239.0.0.0/8 -j ACCEPT]
    FCMD[iptables -A OUTPUT -o br0 -p udp -s 0.0.0.0 --sport 67 -d 255.255.255.255 --dport 68 -j ACCEPT]
    FCMD[iptables -A INPUT -i br0 -p tcp --dport 53 -j ACCEPT]
    FCMD[iptables -A INPUT -i br0 -p udp --dport 53 -j ACCEPT]
    FCMD[iptables -A OUTPUT -o eth2.2 -p udp --dport 53 -j ACCEPT]
    FCMD[iptables -A OUTPUT -o eth2.2 -p tcp --dport 53 -j ACCEPT]
    FCMD[iptables -A INPUT -i br0 -p udp --dport 69 -j ACCEPT]
    FCMD[iptables -A INPUT -i br0 -p udp -s 192.168.0.0/255.255.255.0 --dport 123 -j ACCEPT]
    FCMD[iptables -A INPUT --fragment -p icmp -j DROP]
    FCMD[iptables -A OUTPUT --fragment -p icmp -j DROP]
    FCMD[iptables -A FORWARD --fragment -p icmp -j DROP]
    FCMD[iptables -A OUTPUT -p icmp --icmp-type source-quench -j ACCEPT]
    FCMD[iptables -A FORWARD -p icmp --icmp-type source-quench -j ACCEPT]
    FCMD[iptables -A INPUT -p icmp --icmp-type parameter-problem -j ACCEPT]
    FCMD[iptables -A OUTPUT -p icmp --icmp-type parameter-problem -j ACCEPT]
    FCMD[iptables -A FORWARD -p icmp --icmp-type parameter-problem -j ACCEPT]
    FCMD[iptables -A INPUT -p icmp --icmp-type destination-unreachable -j ACCEPT]
    FCMD[iptables -A OUTPUT -o br0 -p icmp --icmp-type destination-unreachable -d 192.168.0.1 -j ACCEPT]
    FCMD[iptables -A FORWARD -o br0 -p icmp --icmp-type destination-unreachable -d 192.168.0.1 -j ACCEPT]
    FCMD[iptables -A OUTPUT -p icmp --icmp-type fragmentation-needed -j ACCEPT]
    FCMD[iptables -A FORWARD -p icmp --icmp-type fragmentation-needed -j ACCEPT]
    FCMD[iptables -A OUTPUT -p icmp --icmp-type destination-unreachable -j DROP]
    FCMD[iptables -A INPUT -p icmp --icmp-type time-exceeded -j ACCEPT]
    FCMD[iptables -A FORWARD -o br0 -p icmp --icmp-type time-exceeded -d 192.168.0.1 -j ACCEPT]
    FCMD[iptables -A OUTPUT -p icmp --icmp-type echo-request -m state --state NEW -j ACCEPT]
    FCMD[iptables -N bad-ping]
    FCMD[iptables -A bad-ping -p icmp --icmp-type echo-request -m limit --limit 20/s --limit-burst 20 -j ACCEPT]
    FCMD[iptables -A bad-ping -p icmp --icmp-type echo-request -j DROP]
    FCMD[iptables -A INPUT -i br0 -p icmp --icmp-type echo-request -j bad-ping]
    FCMD[iptables -A OUTPUT -o br0 -s 192.168.0.1 -j ACCEPT]
    FCMD[iptables -A FORWARD -i br0 -o br0 -j ACCEPT]
    FCMD[iptables -A INPUT -i br0 -j ACCEPT]
    FCMD[/sbin/ifconfig eth2.1 up]
    FCMD[/sbin/ifconfig ra0 up]
    FCMD[echo 1 > /proc/sys/net/ipv4/ip_forward]
    FCMD[echo 0 > /proc/sys/net/ipv4/conf/all/rp_filter]
    FCMD[echo 15 > /proc/sys/net/ipv4/route/gc_interval]
    FCMD[echo 1 > /proc/sys/net/ipv4/ip_dynaddr]
    FCMD[echo 1 > /proc/sys/net/ipv4/conf/eth2.2/arp_filter]
    cmd [sh /var/sysconfd/iptables.sh]
    OK
    OK
    Reloading dnsProxy ...            Stopping DNS Proxy ...            Err: read_to_buf failed to open file /proc/1647/status!
    Err: read_to_buf failed to open file /proc/1648/status!
    OK
    -----> LOG : DNS, start DNS Proxy
    Set Domain Routing for FLET'S Square Connection...            
    Starting DNS Proxy ...            cmd [/sbin/dnsmasq -C /etc/dnsmasq.conf -i br0 -k &]
    OK
    cmd [kill -SIGUSR1 1469]
    Processmanager update modules
    

WG1400HP GPIOメモ

WG1400HPでのGPIOのレジスタを調べたメモ。整理するのが面倒なのでテキストのメモそのまま。

boot> debug memory read 0xb8040000 70
b8040000:00a6031f 20bcee2d 0000ec00 00000000 .... ..-........
b8040010:00000000 00000000 00000000 00000000 ................
b8040020:00000000 00000000 00000000 00000000 ................
b8040030:0c080900 00160000 00000000 07000000 ................
b8040040:00000006 00000908 00000000 00000000 ................
b8040050:00000000 14130000 80808080 80808080 ................
b8040060:80808080 80808080 00000000 00000002 ................

# Output Enable
val: 0xa6031f

IN: 0, 1, 2, 3, 4, 8, 9, 17, 18, 21, 23
OUT: 5, 6, 7, 10, 11, 12, 13, 14, 15, 16, 19, 20, 22

# Input Value
val: 0x20bcee2d

INPUT=1: 0, 2, 3, 5, 9, 10, 11, 13, 14, 15, 18, 19, 20, 21, 23
INPUT=0: 1, 4, 6, 7, 8, 12, 16, 17, 22

# Output Value
val: 0xec00 (kernel: 0x40ec00)

OUTPUT=1: 10, 11, 13, 14, 15

### Used
GPIO IN: 2, 3, 8, 9, 17, 18, 19, 20, 23
GPIO OUT: 5, 6, 7, 10, 11, 22

?: 19 (FUNCTION: reserved (7))
?: 20 (FUNCTION: reserved (6))
I2C_DATA: 0x14 (20)
I2C_CLK: 0x13 (19)

WG1400HP I2C expanderメモ

WG1400HPでLEDとUSB HubのRESETがぶら下がっているらしいI2C接続のExpander (Texas Instruments TCA6416)がBootloaderから制御できたので、割り当てを確認したメモ。

コマンド実行例

Read value:

boot> debug i2c ioexp read P08

Write value:

boot> debug i2c ioexp write P08 1

割り当て

  • P00: USB Hub (μPD720114) RESET
  • P01: ?
  • P02: ?
  • P03: ?
  • P04: CONVERTER (Red)
  • P05: CONVERTER (Green)
  • P06: TV (Red)
  • P07: TV (Green)
  • P10: 5 GHz (Red)
  • P11: 5 GHZ (Green)
  • P12: 2.4 GHz (Red)
  • P13: 2.4 GHz (Green)
  • P14: ACTIVE (Red)
  • P15: ACTIVE (Green)
  • P16: POWER (Red)
  • P17: POWER (Green)

WG1400HP

豊四季のハードオフで偶然1.5k + 税のモノを見つけ、衝動的に購入したもの。
NetBSD機であるためBootloaderの置き換えが必要になると思われるが、搭載しているSoCがQCA9558であり、これはpepe2k/u-boot_modで未サポートであるためどうするか未定。
とりあえず弄っていくのでメモ。

Switch

zone WAN LAN
port
(WG1400HP)
WAN LAN1 LAN2 LAN3 LAN4
port
(AR8327)
port1 port2 port3 port4 port5

MAC

  • LAN: 10:66:82:xx:xx:20 (config, 0x6 (hex))
  • WAN: 10:66:82:xx:xx:21 (config, 0xc (hex))
  • 2.4G: 10:66:82:xx:xx:22 (config, 0x0 (hex))
  • 5G: 10:66:82:xx:xx:23 (config, 0x12 (hex))

Bootloader

chiron

  • help
    boot> help
    support commands ...
    load             load module
    boot             boot loaded module
    tftpd            start tftpd [tftpd [IP] [bfn]]
    dlmode           set tftpd download mode [bfn]
    reboot           reboot system
    help             help command
    macaddr          macaddr read/write
    configid         configid read/write
    randomkey        randomkey read/write
    serial           serial number read/write
    pkg_info         show package information
    presetid         preset id read/write
    version          show boot version
    mhx              mhx utility
    tp               test program
    errorlog         errorlog command
    additional       additional command
    rf-serial        rf-serial command
    time             Time command
    debug            debug command
    ?                help command
    
  • version
    boot> version
    boot version: 1.0.0
    system version: 2.80.24
    TP Version = 1.0.0
    
  • pkg_info
    boot> pkg_info
      PKG NAME : 2x2LIGHTNING
      CPU   : Atheros/QCA9558
      RAM   : 128Mbyte
      Flash : 16Mbyte
        Device         : MX25L12845E(Macronix)
        Top Address    : 0xbf000000
        Config Address : 0xbf020000
        System Address : 0xbf040000
      Ether PHY : Atheros/AR8327(SW)
      DIPSW : 0x2
    
  • debug ?
    boot> debug ?
    support commands ...
    memory           memory read/write
    flash            flash driver r/w
    fs               file system r/w
    load             load test (calc chksum)
    exception        exception
    register         display register
    watchdog         do watchdog reset
    tlb              tlb register
    cache            cache control
    mii              mii control
    l2sw             l2sw control
    ether            ether control
    pci              pci control
    btimer_start     test btimer
    btimer_stop      test btimer
    usb              usb control
    i2c              i2c control
    
  • debug fs ls
    boot> debug fs ls
    Firmware            4457912 bytes
    total 16515072, avail 11981376 bytes
    
  • debug l2sw register dump ?
    boot> debug l2sw register dump ?
    PHY:
    00 : 1000 1000 1000 1000 1000 
    01 : 7949 7949 7949 7949 7949 
    02 : 004d 004d 004d 004d 004d 
    03 : d034 d034 d034 d034 d034 
    04 : 1de1 1de1 1de1 1de1 1de1 
    05 : 0000 0000 0000 0000 0000 
    06 : 0004 0004 0004 0004 0004 
    07 : 2801 2801 2801 2801 2801 
    08 : 0000 0000 0000 0000 0000 
    09 : 0200 0200 0200 0200 0200 
    0a : 0000 0000 0000 0000 0000 
    0b : 0000 0000 0000 0000 0000 
    0c : 0000 0000 0000 0000 0000 
    0d : 4003 4003 4003 4003 4003 
    0e : 003f 003f 003f 003f 003f 
    0f : 2000 2000 2000 2000 2000 
    10 : 0862 0862 0862 0862 0862 
    11 : 0010 0010 0010 0010 0010 
    12 : 0000 0000 0000 0000 0000 
    13 : 0000 0000 0000 0000 0000 
    14 : 002c 002c 002c 002c 002c 
    15 : 0000 0000 0000 0000 0000 
    16 : 04e8 04e8 04e8 04e8 04e8 
    17 : 0000 0000 0000 0000 0000 
    18 : 3200 3200 3200 3200 3200 
    19 : 0000 0000 0000 0000 0000 
    1a : 0000 0000 0000 0000 0000 
    1b : 0000 0000 0000 0000 0000 
    1c : 0000 0000 0000 0000 0000 
    1d : 003f 003f 003f 003f 003f 
    1e : 0000 0000 0000 0000 0000 
    1f : 0000 0000 0000 0000 0000 
    
    DEBUG:
    00 : 02ee 02ee 02ee 02ee 02ee 
    01 : 02b2 01b1 02b2 01b1 01b1 
    02 : 3110 3110 3220 3220 3220 
    03 : 3f11 3f22 3f11 3f11 3f22 
    04 : bbbb bbbb bbbb bbbb bbbb 
    05 : 3c06 3c06 3c06 3c06 3c06 
    06 : 0000 0000 0000 0000 0000 
    07 : 0000 0000 0000 0000 0000 
    08 : 1c00 1c00 1c00 1c00 1c00 
    09 : 8000 8000 8000 8000 8000 
    0a : 3000 3000 3000 b000 3000 
    0b : bc00 bc00 bc00 bc00 bc00 
    0c : 6001 6001 6001 6001 6001 
    0d : c820 2820 c820 2820 2820 
    0e : 0003 0003 0003 0003 0003 
    0f : 0030 0030 0030 0030 0030 
    10 : 0000 0000 0000 0000 0000 
    11 : 7552 7552 7552 7552 7552 
    12 : 4c04 4c04 4c04 4c04 4c04 
    13 : c01b c01b c01b c01b c01b 
    14 : 0752 0752 0752 0752 0752 
    15 : 3220 3220 3220 3220 3220 
    16 : 8000 8000 8000 8000 8000 
    17 : 0000 0000 0000 0000 0000 
    18 : 62ea 62ea 62ea 62ea 62ea 
    19 : 01f4 01f4 01f4 01f4 01f4 
    1a : 01d7 01d7 01d7 01d7 01d7 
    1b : 0176 0176 0176 0176 0176 
    1c : 3cbb 3cbb 3cbb 3cbb 3cbb 
    1d : 00ec 00ec 00ec 00ec 00ec 
    1e : 0076 0076 0076 0076 0076 
    1f : 0000 0000 0000 0000 0000 
    20 : 0000 0000 0000 0000 0000 
    21 : 2d15 2d15 2d15 2d15 2d15 
    22 : 1f6a 1f6a 1f6a 1f6a 1f6a 
    23 : a200 a200 a200 a200 a200 
    24 : 1000 1000 1000 1000 1000 
    25 : 0000 0000 0000 0000 0000 
    26 : 0000 0000 0000 0000 0000 
    27 : 1000 1000 1000 1000 1000 
    28 : 0000 0000 0000 0000 0000 
    29 : b6dd b6dd b6dd b6dd b6dd 
    2a : 0000 0000 0000 0000 0000 
    2b : 3a98 3a98 3a98 3a98 3a98 
    2c : 0000 0000 0000 0000 0000 
    2d : 0000 0000 0000 0000 0000 
    2e : 0000 0000 0000 0000 0000 
    2f : 0000 0000 0000 0000 0000 
    30 : 0000 0000 0000 0000 0000 
    31 : 0000 0000 0000 0000 0000 
    32 : 2200 2200 2200 2200 2200 
    33 : 2200 2200 2200 2200 2200 
    34 : 2200 2200 2200 2200 2200 
    35 : 0000 0000 0000 0000 0000 
    36 : e12c e12c e12c e12c e12c 
    37 : 6040 6040 6040 6040 6040 
    38 : 1111 1111 1111 1111 1111 
    39 : 7359 7359 7359 7359 7359 
    3a : ee6b ee6b ee6b ee6b ee6b 
    3b : 4646 4646 4646 4646 4646 
    3c : 4646 4646 4646 4646 4646 
    3d : 6820 6820 6820 6820 6820 
    3e : e0d8 e0d8 e0d8 e0d8 e0d8 
    3f : 0000 0000 0000 0000 0000 
    
    MMD3:
    
    MMD7:
    
    L2SW:
    
    0000 : 00001204 00080080 00000000 07600000 
    0010 : 202613a0 f0107650 0000690e 00003f1f 
    0020 : 3f500000 00010000 00000000 00000000 
    0030 : 80000301 00000000 0f000000 00000000 
    0040 : 00700000 00000000 000088a8 00000000 
    0050 : cc36cc36 ca36ca36 c936c936 03ffff00 
    0060 : 00000001 00000000 00000000 00000000 
    0070 : b00e6060 03707f07 000005ee 0000004e 
    0080 : 00001280 00001280 00001280 00001280 
    0090 : 00001280 0000004e 00000000 00000000 
    00a0 : 00000000 00000000 00000000 00000000 
    00b0 : 00000000 00000000 00000000 00000000 
    00c0 : 00000000 00000000 80901040 00000000 
    00d0 : 7fff7ff7 00003fff 00000100 00000000 
    00e0 : c74164d0 0002a545 2dc11c9c 00000000 
    00f0 : 00000000 00000000 00000000 00000000 
    
    0100 : 00001550 00000000 00000000 00000000 
    0110 : 00000000 00000000 00000000 00000000 
    0120 : 00240024 00000000 00240024 00000000 
    0130 : 00240024 00000000 00240024 00000000 
    0140 : 00240024 00000000 00240024 00000000 
    0150 : 00240024 00000000 00240024 00000000 
    0160 : 00240024 00000000 00240024 00000000 
    0170 : 00000000 00000000 00000000 00000000 
    0180 : 00000000 00000000 00000000 00000000 
    0190 : 00000000 00000000 00000000 00000000 
    01a0 : 00000000 00000000 00000000 00000000 
    01b0 : 00000000 00000000 00000000 00000000 
    01c0 : 00000000 00000000 00000000 00000000 
    01d0 : 00000000 00000000 00000000 00000000 
    01e0 : 00000000 00000000 00000000 00000000 
    01f0 : 00000000 00000000 00000000 00000000 
    
    0200 : 00000001 00005000 00400040 00000000 
    0210 : 00000000 00000000 00000000 00000000 
    0220 : 00000000 00000000 00000000 00000000 
    0230 : 00000000 00000000 00000000 00000000 
    0240 : 00000000 00000000 00000000 00000000 
    0250 : 00000000 00000000 00000000 00000000 
    0260 : 00000000 00000000 00000000 00000000 
    0270 : 0000000f 00000000 00000000 00000000 
    0280 : 00000000 00000000 00000000 00000000 
    0290 : 00000000 00000000 00000000 00000000 
    02a0 : 00000000 00000000 00000000 00000000 
    02b0 : 00000000 00000000 00000000 00000000 
    02c0 : 00000000 00000000 00000000 00000000 
    02d0 : 00000000 00000000 00000000 00000000 
    02e0 : 00000000 00000000 00000000 00000000 
    02f0 : 00000000 00000000 00000000 00000000 
    
    0400 : 00000000 00000000 00000000 00000000 
    0410 : 00000000 00000000 000c0a80 00000000 
    0420 : 00010001 00003040 00020001 00003040 
    0430 : 00010001 00003040 00010001 00003040 
    0440 : 00010001 00003040 00010001 00003040 
    0450 : 00020001 00003040 00000000 00000000 
    0460 : 00000000 00000000 00000000 00000000 
    0470 : 00000000 00000000 00000000 00000000 
    0480 : 00000000 00000000 00000000 00000000 
    0490 : 00000000 00000000 00000000 00000000 
    04a0 : 00000000 00000000 00000000 00000000 
    04b0 : 00000000 00000000 00000000 00000000 
    04c0 : 00000000 00000000 00000000 00000000 
    04d0 : 00000000 00000000 00000000 00000000 
    04e0 : 00000000 00000000 00000000 00000000 
    04f0 : 00000000 00000000 00000000 00000000 
    
    0600 : 00000000 00000000 00000000 00000006 
    0610 : 0003fff0 00000005 50e8002b 00000000 
    0620 : 000000f0 007f7f7f 00000000 00000000 
    0630 : 00000000 11111111 22222222 33333333 
    0640 : 44444444 55555555 66666666 77777777 
    0650 : 76543210 00000000 00000000 00000000 
    0660 : 0014003c 00000018 00007000 00140040 
    0670 : 00000018 00007000 00140039 00000018 
    0680 : 00007000 00140035 00000018 00007000 
    0690 : 0014002d 00000018 00007000 0014001d 
    06a0 : 00000018 00007000 00140002 00000018 
    06b0 : 00007000 00000000 00000000 00000000 
    06c0 : 00000000 00000000 00000000 00000000 
    06d0 : 00000000 00000000 00000000 00000000 
    06e0 : 00000000 00000000 00000000 00000000 
    06f0 : 00000000 00000000 00000000 00000000 
    0700 : 00000000 00000000 00000000 00000000 
    0710 : 00000000 00000000 00000000 00000000 
    
    0800 : 01200188 00000000 0000000e 00000000 
    0810 : 54332201 33221100 00000000 00000000 
    0820 : 00000000 00000000 00000000 00000000 
    0830 : 10841041 00041041 00041041 00041041 
    0840 : 00041041 10841041 10841041 00000000 
    0850 : 00000000 00000000 00000000 00000000 
    0860 : 00000000 00000000 00000000 00000000 
    0870 : 00000000 00000000 00000000 00000000 
    0880 : 00000000 00000000 00000000 00000000 
    0890 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff 
    08a0 : 7fff7fff 7fff7fff 00000000 00000002 
    08b0 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff 
    08c0 : 7fff7fff 7fff7fff 00000000 00000002 
    08d0 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff 
    08e0 : 7fff7fff 7fff7fff 00000000 00000002 
    08f0 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff 
    0900 : 7fff7fff 7fff7fff 00000000 00000002 
    0910 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff 
    0920 : 7fff7fff 7fff7fff 00000000 00000002 
    0930 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff 
    0940 : 7fff7fff 7fff7fff 00000000 00000002 
    0950 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff 
    0960 : 7fff7fff 7fff7fff 00000000 00000002 
    0970 : 28000000 000000c0 28000000 000000c2 
    0980 : 28000000 000000c2 28000000 000000c2 
    0990 : 28000000 000000c2 28000000 000000c2 
    09a0 : 28000000 000000c0 00000000 00000000 
    09b0 : 003a004a 003a004a 003a004a 003a004a 
    09c0 : 003a004a 003a004a 003a004a 00000000 
    09d0 : 00000000 00000000 00000000 00000000 
    09e0 : 00000000 00000000 00000000 00000000 
    09f0 : 00000000 00000000 00000000 00000000 
    
    VTU:
    
    ATU:
    
  • debug memory read 0xb8040000 70
    (switch uninitialized)

    boot> debug memory read 0xb8040000 70
    b8040000:00a6031f 20bce62d 0000e400 00000000 .... ..-........
    b8040010:00000000 00000000 00000000 00000000 ................
    b8040020:00000000 00000000 00000000 00000000 ................
    b8040030:0c080900 00160000 00000000 07000000 ................
    b8040040:00000006 00000908 00000000 00000000 ................
    b8040050:00000000 14130000 80808080 80808080 ................
    b8040060:80808080 80808080 00000000 00000002 ................
    

    (switch initialized)

    boot> debug memory read 0xb8040000 70
    b8040000:00a6031f 20bcee2d 0000ec00 00000000 .... ..-........
    b8040010:00000000 00000000 00000000 00000000 ................
    b8040020:00000000 00000000 00000000 00000000 ................
    b8040030:0c080900 00160000 00000000 07000000 ................
    b8040040:00000006 00000908 00000000 00000000 ................
    b8040050:00000000 14130000 80808080 80808080 ................
    b8040060:80808080 80808080 00000000 00000002 ................
    
  • debug memory read 0xb8050028 4
    boot> debug memory read 0xb8050028 4
    b8050028:5a000000                            Z...
    
  • debug memory read 0xb8050048 4
    boot> debug memory read 0xb8050048 4
    b8050048:03000000                            ....
    
  • debug memory read 0xb8070000 4
    boot> debug memory read 0xb8070000 4  
    b8070000:00028001                            ....
    
  • debug memory read 0xb806001c d0
    (before tp usb)

    boot> debug memory read 0xb8060000 d0
    b8060000:0002ccc8 00061a80 00000003 0989637c ..............c|
    b8060010:077fffdd 00000000 00000020 2c044830 ........... ,.H0
    b8060020:00000000 00000000 00000000 00000000 ................
    b8060030:00000000 00000000 00000000 00000000 ................
    b8060040:00000000 00000000 00000000 00000000 ................
    b8060050:00000000 00000000 00000000 00000000 ................
    b8060060:00000000 00000000 00000000 00000000 ................
    b8060070:00000000 00000000 00000000 00000000 ................
    b8060080:00000000 00000000 00000000 00000000 ................
    b8060090:00001130 00000000 00000000 00000000 ...0............
    b80600a0:00000000 00000000 00000000 00000000 ................
    b80600b0:00031e5e 00033fc0 00000000 000a6000 ...^..?.......`.
    b80600c0:00000000 00030831 00000000 000003ff .......1........
    

    (after tp usb)

    boot> debug memory read 0xb8060000 d0
    b8060000:00016ccc 00061a80 00000003 098961b8 ..l...........a.
    b8060010:077fffdd 00000000 00000020 2c044008 ........... ,.@.
    b8060020:00000000 00000000 00000000 00000000 ................
    b8060030:00000000 00000000 00000000 00000000 ................
    b8060040:00000000 00000000 00000000 00000000 ................
    b8060050:00000000 00000000 00000000 00000000 ................
    b8060060:00000000 00000000 00000000 00000000 ................
    b8060070:00000000 00000000 00000000 00000000 ................
    b8060080:00000000 00000000 00000000 00000000 ................
    b8060090:00001130 00000000 00000000 00000000 ...0............
    b80600a0:00000000 00000000 00000000 00000000 ................
    b80600b0:00031e5e 00033fc0 00000000 000a6000 ...^..?.......`.
    b80600c0:00000000 00030831 00000000 000003ff .......1........
    
  • debug memory read 0xb8018000 84
    boot> debug memory read 0xb8018000 84
    b8018000:00000025 00000020 00000055 00000001 ...%... ...U....
    b8018010:000000ff 000000a0 000000bc 00000028 ...............(
    b8018020:0000003e 00000006 0000000d 00000000 ...>............
    b8018030:00000000 00000711 00000000 00000000 ................
    b8018040:00000001 00000000 00000000 00000000 ................
    b8018050:00000000 00000000 00000000 00000000 ................
    b8018060:00000000 00000000 00000000 00000001 ................
    b8018070:00000006 00000000 00000000 00000000 ................
    b8018080:00000000                            ....
    

Kernel (NetBSD)

  • Bootlog
    IPL:HARD-RESET
    memory test ... ok
    flinstall OK
    
    boot version: 1.0.0
    
    PKG "2x2LIGHTNING"
    CPU "Atheros/QCA9558"
    Revision 113.0 CLOCK 720.0 MHz
    HEAP MEMORY 262144 bytes
    Boot:InitFilesystem
    RGMII calibration GE0 ... ETH_CFG: 00028001 ETH_XMII: 5a000000
    phy0.0: "Atheros/AR8327(phy)"
    phy0.1: "Atheros/AR8327(SW)"
    active ch:1
    post start
    DRAM Test ..... PASS
    Timer test .... PASS
    FLASH CHKSUM .. PASS
    LAN Test ...... 
    LoopBack count 0 .. 
    phy0.0: "Atheros/AR8327(phy)"
    phy0.1: "Atheros/AR8327(SW)"
    active ch:0
    active ch:1
    phy0.0: "Atheros/AR8327(phy)"
    phy0.1: "Atheros/AR8327(SW)"
    active ch:1
    PASS
    Package TYPE = 0x01
    post success
    now booting Firmware ...
    loaded Firmware
    config=0x80208483 status=0x00000000
    mips_pdcache_write_through=0
    mips_picache_line_size=32 mips_pdcache_line_size=32
      pagemask: 0x00000000
      status: 0x00000000
      config: 0x80208483
      cause: 0x40008000
    load memory 0x1f0e000, 0x60f2000
    load memory 0x1000, 0x5f000
    Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002
        The NetBSD Foundation, Inc.  All rights reserved.
    Copyright (c) 1982, 1986, 1989, 1991, 1993
        The Regents of the University of California.  All rights reserved.
    
    NetBSD 1.6.1 (LIGHTNING2x2.tmp) #0: 2013-10-24 12:31:40 JST
        kubota@A00-30-04938:/home/kubota/lightning/git/hituji/build/lightning2x2/kernel-obj/LIGHTNING2x2.tmp
    
    total memory = 128 MB
    avail memory = 92692 KB
    using 1024 buffers containing 4096 KB of memory
    mainbus0 (root)
    cpu0 at mainbus0: MIPS 74Kc (0x19750) Rev. 80 with software emulated floating point
    cpu0: 64KB/32B 4-way set-associative L1 Instruction cache, 32 TLB entries
    cpu0: 32KB/32B 4-way set-associative write-back L1 Data cache
    arspi0 at mainbus0
    arflash0 at mainbus0 addr 0xbf000000 size 16777216 bytes
    flash: id 0xc2 type 0x17 addr 0xbf000000 size 16777216 bytes
    pfmg: carrier mode 0 pkgid 0x20a01 configid 0xff
    arrtc0 at mainbus0
    argiu0 at mainbus0
    btnu0 at argiu0 port 18
    btnu1 at argiu0 port 2
    btnu2 at argiu0 port 3
    ari2c0 at mainbus0: clk_sel=0(REFCLK), hcnt=0x28, lcnt=0x3e
    iic0 at ari2c0: I2C bus
    tca6416gpio0 at iic0 addr 0x20
    tcaled0 at tca6416gpio0
    athq0 at mainbus0
    LSDK DRV Version = 10.1.357_0909P
    
    athq0: WLAN MAC ADDRESS (10:66:82:e0:02:22)
    pfmg_read_scan_upper_2_4g: 11
    nbuf_hdr_init: struct nbuf(120 bytes) mallocsize(917504 bytes)
    mbuf_freeq_setup: mbuf_freeq_bufcount = 0
    mbuf_freeq_setup: mbuf_freeq_bufcount(6144,6144)
    Enterprise mode: 0x33fc0000
    Restoring Cal data from Flash
    Green-AP : Green-AP : Attached
    
    ath_get_caps[6155] rx chainmask mismatch actual 7 sc_chainmak 0
    ath_get_caps[6130] tx chainmask mismatch actual 7 sc_chainmak 0
    ath_attach_dfs[12110] dfsdomain 3
    ath_tx_paprd_init sc 0xc0179000 PAPRD disabled in HAL
     chan  Freq     HT                       DFS
     1     2412nbg  HT20 HT40PLUS            N
     2     2417nbg  HT20 HT40PLUS            N
     3     2422nbg  HT20 HT40PLUS            N
     4     2427nbg  HT20 HT40PLUS            N
     5     2432nbg  HT20 HT40PLUS HT40MINUS  N
     6     2437nbg  HT20 HT40PLUS HT40MINUS  N
     7     2442nbg  HT20 HT40PLUS HT40MINUS  N
     8     2447nbg  HT20 HT40PLUS HT40MINUS  N
     9     2452nbg  HT20 HT40PLUS HT40MINUS  N
     10    2457nbg  HT20          HT40MINUS  N
     11    2462nbg  HT20          HT40MINUS  N
     12    2467nbg  HT20          HT40MINUS  N
     13    2472nbg  HT20          HT40MINUS  N
    athq0: Atheros 955X: memt=0x80440120, memh=0xb8100000 
    com0 at mainbus0: ns16550a, working fifo
    com0: console
    ehci0 at mainbus0ehci0: EHCI version 1.0
    usb0 at ehci0: USB revision 2.0
    uhub0 at usb0
    uhub0: QCA9558 EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
    uhub0: 1 port with 1 removable, self powered
    qcaled0 at mainbus0
    ageth0 at mainbus0
    ath8327swsphy0 at ageth0 phy 0: Atheros AR8327 10/100/1000 L2SW, rev. 4
    ath8327swsphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT-FDX, auto
    ageth1 at mainbus0
    ath8327swlphy0 at ageth1 phy 1: Atheros AR8327 10/100/1000 L2SW, rev. 4
    ath8327swlphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT-FDX, auto, 1000baseT-FDX FLAG0, 1000baseT-FDX FLAG1
    arpcieu0 at mainbus0:
    pci0 at arpcieu0 bus 0
    pci0: memory space enabled
    athq1 at pci0 dev 0 function 0
    LSDK PCI Version = 10.1.357_0909P
    ath_pci_probe
    disable ASPM on peregrine[0x80] lcr(0x10110000) --> (0x10110000)
    athten1: WLAN MAC ADDRESS (10:66:82:e0:02:23)
    __ol_ath_attach: WLAN MAC ADDRESS (10:66:82:e0:02:23) ic(0xc025d000)
    
     Using PCI Legacy Interrupt
    __ol_ath_attach: ath_attach TODO
    arpcieu1 at mainbus0:
    pci1 at arpcieu1 bus 1
    pci1: memory space enabled
    rtc: CLOCK INITIALIZED 
    kevt0: 
    logbuf: using 655360 bytes logging area
    md0: internal 25600 KB image area
    uhub1 at uhub0 port 1
    uhub1: vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2
    uhub1: single transaction translator
    uhub1: 4 ports with 4 removable, self powered
    boot device: 
    root on md0a dumps on md0b
    root file system type: ffs
    Tue Jan  1 00:00:02 JST 2013
    /usr/local/www/.htpasswd file not exists.(ignore)
    Setting tty flags.
    net.inet6.ip6.forwarding: 0 -> 1
    net.inet6.ip6.accept_rtadv: 0 -> 0
    Building databases...
    mode switch: rt
    vathten0
    vathten1
    vathten4
    ol_transfer_bin_file 1562: Download Board data in flash len:0x0844(0x0844)
    vathten2
    vathten3
    Starting wificonfig
    encrypt key mode AES
    encrypt key mode AES
    Starting evtmgr.
    Starting dlnamgr.
    Starting clid.
    DDR Activity - HIGH
    Starting inetd.
    Starting procmon.
    Starting wzcm.
    DDR Activity - HIGH
    Tue Jan  1 00:00:13 JST 2013
    DDR Activity - HIGH
    DDR Activity - HIGH
    
    NetBSD/scorpimips (Amnesiac) (console)
    
    login: