タグ: WG2600HP

WG2600HPx ファーム展開メモ (2)

続き的なもの。

前回OpenSSLによりdecryptしたファイルを用い、KernelとRootfsの取り出し。
ブートローダ用スクリプト, TP (TestProgram), Kernel (HLOS), RootFSの4つのイメージがFIT形式で格納されている。
余談: 以下は全てWindows 10環境(WSL含む)での作業。

バイナリエディタ等でdecryptしたファーム内のhexデータ d00dfeed (D00DFEED) を探し、

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp2/wg2600hp2_1_0_5
$ busybox hexdump -n 256 -C wg2600hp2_1_0_5.bin.pad.dec
00000000  55 53 42 20 41 54 45 52  4d 57 4c 33 30 35 30 00  |USB ATERMWL3050.|
00000010  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
00000020  00 00 ff ff 00 00 00 68  00 00 00 18 6a af 00 00  |.......h....j...|
00000030  00 00 00 00 00 00 00 00  56 45 52 53 49 4f 4e 3a  |........VERSION:|
00000040  20 33 2e 33 39 2e 32 30  0a 4f 45 4d 31 20 56 45  | 3.39.20.OEM1 VE|
00000050  52 53 49 4f 4e 3a 20 31  2e 30 2e 35 0a 43 6f 70  |RSION: 1.0.5.Cop|
00000060  79 72 69 67 68 74 28 63  29 20 4e 45 43 20 50 6c  |yright(c) NEC Pl|
00000070  61 74 66 6f 72 6d 73 2c  20 4c 74 64 2e 20 32 30  |atforms, Ltd. 20|
00000080  30 31 2d 32 30 31 35 0a  00 02 ff fd 00 f9 66 50  |01-2015.......fP|
00000090  00 00 00 18 ce 19 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  d0 0d fe ed 00 f9 66 34  00 00 00 38 00 f9 64 64  |......f4...8..dd|
000000b0  00 00 00 28 00 00 00 11  00 00 00 10 00 00 00 00  |...(............|
000000c0  00 00 00 3c 00 f9 64 2c  00 00 00 00 00 00 00 00  |...<..d,........|
000000d0  00 00 00 00 00 00 00 00  00 00 00 01 00 00 00 00  |................|
000000e0  00 00 00 03 00 00 00 04  00 00 00 32 5c 41 a9 4f  |...........2\A.O|
000000f0  00 00 00 03 00 00 00 17  00 00 00 00 46 6c 61 73  |............Flas|
00000100

それが先頭に来るよう切り詰め。

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp2/wg2600hp2_1_0_5
$ busybox hexdump -n 256 -C wg2600hp2_1_0_5.bin.pad.dec.itb
00000000  d0 0d fe ed 00 f9 66 34  00 00 00 38 00 f9 64 64  |......f4...8..dd|
00000010  00 00 00 28 00 00 00 11  00 00 00 10 00 00 00 00  |...(............|
00000020  00 00 00 3c 00 f9 64 2c  00 00 00 00 00 00 00 00  |...<..d,........|
00000030  00 00 00 00 00 00 00 00  00 00 00 01 00 00 00 00  |................|
00000040  00 00 00 03 00 00 00 04  00 00 00 32 5c 41 a9 4f  |...........2\A.O|
00000050  00 00 00 03 00 00 00 17  00 00 00 00 46 6c 61 73  |............Flas|
00000060  68 69 6e 67 20 6e 6f 72  20 31 30 30 20 31 30 30  |hing nor 100 100|
00000070  30 30 00 00 00 00 00 01  69 6d 61 67 65 73 00 00  |00......images..|
00000080  00 00 00 01 73 63 72 69  70 74 00 00 00 00 00 03  |....script......|
00000090  00 00 00 0a 00 00 00 00  66 6c 61 73 68 2e 73 63  |........flash.sc|
000000a0  72 00 00 00 00 00 00 03  00 00 63 c7 00 00 00 0c  |r.........c.....|
000000b0  69 66 20 74 65 73 74 20  22 78 24 76 65 72 62 6f  |if test "x$verbo|
000000c0  73 65 22 20 3d 20 22 78  22 3b 20 74 68 65 6e 0a  |se" = "x"; then.|
000000d0  66 61 69 6c 65 64 6d 73  67 3d 27 5b 66 61 69 6c  |failedmsg='[fail|
000000e0  65 64 5d 27 0a 65 6c 73  65 0a 66 61 69 6c 65 64  |ed]'.else.failed|
000000f0  6d 73 67 3d 27 23 23 23  23 23 23 23 23 23 23 23  |msg='###########|
00000100

切り詰めたファイルを dumpimage コマンドでリスト表示。

tofu@Tofu-H170W10:/mnt/d/router/NEC/WG2600HP2/wg2600hp2_1_0_5$ dumpimage -l wg2600hp2_1_0_5.bin.pad.dec.itb
FIT description: Flashing nor 100 10000
Created:         Fri Jan 18 19:24:15 2019
 Image 0 (script)
  Description:  flash.scr
  Created:      Fri Jan 18 19:24:15 2019
  Type:         Script
  Compression:  uncompressed
  Data Size:    25543 Bytes = 24.94 KiB = 0.02 MiB
  Hash algo:    crc32
  Hash value:   fad97085
 Image 1 (tp-147c46b934f3a70b73abf2c62847c7685388b4b8)
  Description:  rotary-tp.bin
  Created:      Fri Jan 18 19:24:15 2019
  Type:         Firmware
  Compression:  uncompressed
  Data Size:    66736 Bytes = 65.17 KiB = 0.06 MiB
  Architecture: ARM
  OS:           Unknown OS
  Load Address: unavailable
  Hash algo:    crc32
  Hash value:   22f74fee
 Image 2 (hlos-894c257106b4e407230bdc07bedb9c44ce088f40)
  Description:  openwrt-ipq806x-3.4-uImage
  Created:      Fri Jan 18 19:24:15 2019
  Type:         Firmware
  Compression:  uncompressed
  Data Size:    1925174 Bytes = 1880.05 KiB = 1.84 MiB
  Architecture: ARM
  OS:           Unknown OS
  Load Address: unavailable
  Hash algo:    crc32
  Hash value:   7d55fcec
 Image 3 (fs-73be11f50c9325ae68c43b1ae01663c947d14314)
  Description:  openwrt-ipq806x-squashfs-root.img
  Created:      Fri Jan 18 19:24:15 2019
  Type:         Firmware
  Compression:  uncompressed
  Data Size:    14325760 Bytes = 13990.00 KiB = 13.66 MiB
  Architecture: ARM
  OS:           Unknown OS
  Load Address: unavailable
  Hash algo:    crc32
  Hash value:   bb43bd4c

再び dumpimage コマンドを用い、KernelとRootFSを取り出し。

-i: 入力ファイル
-p: FIT内の位置指定、上記リストの Image n
最後: 出力先ファイル名
tofu@Tofu-H170W10:/mnt/d/router/NEC/WG2600HP2/wg2600hp2_1_0_5$ dumpimage -T flat_dt -i wg2600hp2_1_0_5.bin.pad.dec.itb -p 2 wg2600hp2_1_0_5_kernel.bin
Extracted:
 Image 2 (hlos-894c257106b4e407230bdc07bedb9c44ce088f40)
  Description:  openwrt-ipq806x-3.4-uImage
  Created:      Fri Jan 18 19:24:15 2019
  Type:         Firmware
  Compression:  uncompressed
  Data Size:    1925174 Bytes = 1880.05 KiB = 1.84 MiB
  Architecture: ARM
  OS:           Unknown OS
  Load Address: unavailable
  Hash algo:    crc32
  Hash value:   7d55fcec
tofu@Tofu-H170W10:/mnt/d/router/NEC/WG2600HP2/wg2600hp2_1_0_5$ dumpimage -T flat_dt -i wg2600hp2_1_0_5.bin.pad.dec.itb -p 3 wg2600hp2_1_0_5_rootfs.bin
Extracted:
 Image 3 (fs-73be11f50c9325ae68c43b1ae01663c947d14314)
  Description:  openwrt-ipq806x-squashfs-root.img
  Created:      Fri Jan 18 19:24:15 2019
  Type:         Firmware
  Compression:  uncompressed
  Data Size:    14325760 Bytes = 13990.00 KiB = 13.66 MiB
  Architecture: ARM
  OS:           Unknown OS
  Load Address: unavailable
  Hash algo:    crc32
  Hash value:   bb43bd4c
広告

WG2600HPx ファーム展開メモ

many thanks goroh_kun (@goroh_kun)

ヘッダ(0x0 – 0xF) 除去したものを32byte単位でpadding

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp/wg2600hp_1_0_13
$ dd if=wg2600hp_1_0_13_noheader.bin of=wg2600hp_1_0_13_noheader.bin.pad bs=32 conv=sync
396727+0 records in
396727+0 records out
12695264 bytes (13 MB, 12 MiB) copied, 2.89493 s, 4.4 MB/s

キーを32byteで作成してhexな文字列で取り出し

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp/wg2600hp_1_0_13
$ echo -n "rotary" | dd bs=32 count=1 conv=sync > key.bin
0+1 records in
1+0 records out
32 bytes copied, 0.0061302 s, 5.2 kB/s

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp/wg2600hp_1_0_13
$ busybox hexdump -v -e '1/1 "%02x"' key.bin
726f746172790000000000000000000000000000000000000000000000000000

バイナリファイルへの出力省略してワンライナーでも可。

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp2/wg2600hp2_1_0_5
$ echo -n "rotary" | dd bs=32 count=1 conv=sync 2> /dev/null | busybox hexdump -v -e '1/1 "%02x"'
726f746172790000000000000000000000000000000000000000000000000000

OpenSSLを用いてdecrypt

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp/wg2600hp_1_0_13
$ openssl enc -aes-256-cbc -d -in wg2600hp_1_0_13_noheader.bin.pad -out wg2600hp_1_0_13_noheader.bin.pad.dec -K 726f746172790000000000000000000000000000000000000000000000000000 -iv 0 -nopad

完了

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp/wg2600hp_1_0_13
$ busybox hexdump -n 128 -C wg2600hp_1_0_13_noheader.bin.pad.dec
00000000  55 53 42 20 41 54 45 52  4d 57 4c 33 30 35 30 00  |USB ATERMWL3050.|
00000010  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
00000020  00 00 ff ff 00 00 00 69  00 00 00 18 25 c3 00 00  |.......i....%...|
00000030  00 00 00 00 00 00 00 00  56 45 52 53 49 4f 4e 3a  |........VERSION:|
00000040  20 33 2e 32 30 2e 36 37  0a 4f 45 4d 31 20 56 45  | 3.20.67.OEM1 VE|
00000050  52 53 49 4f 4e 3a 20 31  2e 30 2e 31 33 0a 43 6f  |RSION: 1.0.13.Co|
00000060  70 79 72 69 67 68 74 28  63 29 20 4e 45 43 20 50  |pyright(c) NEC P|
00000070  6c 61 74 66 6f 72 6d 73  2c 20 4c 74 64 2e 20 32  |latforms, Ltd. 2|
00000080

WG2600HP fwupコマンドメモ

メーカーファームのfailsafe上で実行し、それっぽいログが出てきたのでメモ。現状、どうやってメーカーファームをdecryptしているのかは不明。

ファイル: wg2600hp_1_0_13.bin

Jan 01 00:12:16 [syslog] [FWUP]fwup_main start._
Jan 01 00:12:16 [syslog] [FWUP]fwup_update_firmware start._
Jan 01 00:12:16 [syslog] [FWUP]file len = [12695280]_
Jan 01 00:12:16 [syslog] [FWUP] decrypt_key=[rotary]
Jan 01 00:12:16 [syslog] [FWUP] FW HEADER RCV  [USB ATERMWL3050]
Jan 01 00:12:16 [syslog] [FWUP] FW HEADER PFMG [USB ATERMWL3050]
Jan 01 00:12:16 [syslog] [FW] header ok
Jan 01 00:12:16 [syslog] [FW] id=0x0 108 bytes
Jan 01 00:12:16 [syslog] [FW] chksum ok id=0x0
Jan 01 00:12:16 [syslog] [FW] id=0x2 12695064 bytes
Jan 01 00:12:18 [syslog] [FW] chksum ok id=0x2
Jan 01 00:12:18 [syslog] [FW] id=0x1 24 bytes
Jan 01 00:12:18 [syslog] [FW] chksum ok id=0x1
Jan 01 00:12:18 [syslog] [FW] footer ok
Jan 01 00:12:18 [syslog] [FWUP]parse_crc32 ret = [0]
Jan 01 00:12:18 [syslog] [FWUP] crc32 0
Jan 01 00:12:18 [syslog] [FWUP] crypt 0
Jan 01 00:12:18 [syslog] [FWUP] firmware 0
Jan 01 00:12:18 [syslog] [FW] tp not found
Jan 01 00:12:18 [syslog] [FW] expansion not found
Jan 01 00:12:18 [syslog] [FWUP] decrypt_key=[rotary]
Jan 01 00:12:18 [syslog] [FWUP] FW HEADER RCV  [USB ATERMWL3050]
Jan 01 00:12:18 [syslog] [FWUP] FW HEADER PFMG [USB ATERMWL3050]
Jan 01 00:12:18 [syslog] [FW] header ok
Jan 01 00:12:20 [syslog] [FW] chksum ok id=0x2
Jan 01 00:12:20 [syslog] [FW] id=0x1 24 bytes
Jan 01 00:12:20 [syslog] [FW] chksum ok id=0x1
Jan 01 00:12:20 [syslog] [FW] footer ok
Jan 01 00:12:20 [syslog] [FWUP]parse_crc32 ret = [0]
Jan 01 00:12:20 [syslog] [FWUP] crc32 0
Jan 01 00:12:20 [syslog] [FWUP] crypt 0
Jan 01 00:12:20 [syslog] [FWUP] firmware 0
Jan 01 00:12:20 [syslog] [FW] tp not found
Jan 01 00:12:20 [syslog] [FW] expansion not found
Jan 01 00:12:50 [syslog] [FWUP] fwup_cgi_ready file T.O _
Jan 01 00:12:50 [syslog] main: fwup_update_firmware() error._

WG2600HP bootlog (OpenWrt initramfs)

基盤を破損してしまったのか起動しなくなってしまった1号機に代わり、新たに2号機を購入したので作業再開します。

Flashにはメーカーファームのkernelとrootfsが存在する状態で、OpenWrt masterのinitramfsイメージを使用しブートしたときのbootlog

U-Boot 2012.07 [Standard IPQ806X.LN,local] (Mar 26 2015 - 13:53:09)

smem ram ptable found: ver: 0 len: 5
DRAM:  491 MiB
NAND:  ipq_nand: unknown NAND device manufacturer: 0 device: 0
ipq_nand: failed to identify device
SF: Detected S25FL256S with page size 64 KiB, total 32 MiB
ipq_spi: page_size: 0x100, sector_size: 0x10000, size: 0x2000000
32 MiB
MMC:   
PCI0 Link Intialized
PCI1 Link Intialized
In:    serial
Out:   serial
Err:   serial
PRODUCTDATA CRC Verify OK.
Net:   MAC1 addr:c0:25:a2:ef:1e:25
athrs17_reg_init: complete
athrs17_vlan_config ...done
S17c init  done
MAC2 addr:c0:25:a2:ef:1e:24
eth0, eth1
post start
SF: Detected S25FL256S with page size 64 KiB, total 32 MiB
DRAM Test ..... PASS
Timer test .... PASS
FLASH CHKSUM .. PASS
LAN Test ...... 
LoopBack count 0 .. 
PASS
Package TYPE = 0x01
post success
now booting auto ...
Using eth1 device
TFTP from server 192.168.10.2; our IP address is 192.168.10.1
Filename 'wg2600hp-initramfs.bin'.
Load address: 0x44000000
Loading: #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ########################################
done
Bytes transferred = 5195440 (4f46b0 hex)
Automatic boot of image at addr 0x44000000 ...
   Image Name:   ARM OpenWrt Linux-4.9.91
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    5195376 Bytes = 5 MiB
   Load Address: 42208000
   Entry Point:  42208000
   Verifying Checksum ... OK
   Loading Kernel Image ... OK
OK
mtdids not defined, no default present
info: "mtdparts" not set
Using machid 0x1260 from environment

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 4.9.91 (musashino205@Taiha.Net) (gcc version 7.3.0 (OpenWrt GCC 7.3.0 r0+6765-b8c1d88) ) #0 SMP Sun Apr 22 12:34:38 2018
[    0.000000] CPU: ARMv7 Processor [512f04d0] revision 0 (ARMv7), cr=10c5787d
[    0.000000] CPU: div instructions available: patching division code
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, PIPT instruction cache
[    0.000000] OF: fdt:Machine model: NEC Aterm WG2600HP
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] percpu: Embedded 13 pages/cpu @ddc07000 s20940 r8192 d24116 u53248
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 121920
[    0.000000] Kernel command line: 
[    0.000000] Bootloader command line (ignored): console=ttyHSL1,115200n8 root=mtd:rootfs rootfstype=squashfs reboot=0
[    0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
[    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Memory: 471088K/491520K available (3797K kernel code, 234K rwdata, 1208K rodata, 10312K init, 240K bss, 20432K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
[    0.000000]     vmalloc : 0xde800000 - 0xff800000   ( 528 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xde000000   ( 480 MB)
[    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
[    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
[    0.000000]       .text : 0xc0208000 - 0xc05bd9f8   (3799 kB)
[    0.000000]       .init : 0xc070c000 - 0xc111e000   (10312 kB)
[    0.000000]       .data : 0xc111e000 - 0xc1158900   ( 235 kB)
[    0.000000]        .bss : 0xc115a000 - 0xc1196268   ( 241 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000]  RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
[    0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
[    0.000000] NR_IRQS:16 nr_irqs:16 16
[    0.000000] clocksource: dg_timer: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 305801671480 ns
[    0.000009] sched_clock: 32 bits at 6MHz, resolution 160ns, wraps every 343597383600ns
[    0.000022] Switching to timer-based delay loop, resolution 160ns
[    0.000204] Calibrating delay loop (skipped), value calculated using timer frequency.. 12.50 BogoMIPS (lpj=62500)
[    0.000223] pid_max: default: 32768 minimum: 301
[    0.000326] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000339] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000959] CPU: Testing write buffer coherency: ok
[    0.001252] Setting up static identity map for 0x42208280 - 0x422082d8
[    0.004611] Brought up 2 CPUs
[    0.004625] SMP: Total of 2 processors activated (25.00 BogoMIPS).
[    0.004635] CPU: All CPU(s) started in SVC mode.
[    0.016360] VFP support v0.3: implementor 51 architecture 64 part 4d variant 2 rev 0
[    0.016552] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.016578] futex hash table entries: 512 (order: 3, 32768 bytes)
[    0.016653] pinctrl core: initialized pinctrl subsystem
[    0.017899] NET: Registered protocol family 16
[    0.018143] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.041402] cpuidle: using governor ladder
[    0.072416] cpuidle: using governor menu
[    0.074463] qcom_rpm 108000.rpm: could not find pctldev for node /soc/pinmux@800000/i2c4_pinmux, deferring probe
[    0.114762] msm_bus_fabric_init_driver
[    0.115904] usbcore: registered new interface driver usbfs
[    0.115996] usbcore: registered new interface driver hub
[    0.116078] usbcore: registered new device driver usb
[    0.116134] pps_core: LinuxPPS API ver. 1 registered
[    0.116147] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti 
[    0.116178] PTP clock support registered
[    0.118029] clocksource: Switched to clocksource dg_timer
[    0.122039] NET: Registered protocol family 2
[    0.122585] TCP established hash table entries: 4096 (order: 2, 16384 bytes)
[    0.122632] TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
[    0.122686] TCP: Hash tables configured (established 4096 bind 4096)
[    0.122738] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    0.122760] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    0.122943] NET: Registered protocol family 1
[    0.344603] No memory allocated for crashlog
[    0.344986] workingset: timestamp_bits=30 max_order=17 bucket_order=0
[    0.351522] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.351538] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.358874] io scheduler noop registered
[    0.358889] io scheduler deadline registered (default)
[    0.360314] 1b500000.pci supply vdda not found, using dummy regulator
[    0.360417] 1b500000.pci supply vdda_phy not found, using dummy regulator
[    0.360519] 1b500000.pci supply vdda_refclk not found, using dummy regulator
[    0.361302] OF: PCI: host bridge /soc/pci@1b500000 ranges:
[    0.361342] OF: PCI:    IO 0x0fe00000..0x0fefffff -> 0x0fe00000
[    0.361365] OF: PCI:   MEM 0x08000000..0x0fdfffff -> 0x08000000
[    0.469153] qcom-pcie 1b500000.pci: link up
[    0.469351] qcom-pcie 1b500000.pci: PCI host bridge to bus 0000:00
[    0.469372] pci_bus 0000:00: root bus resource [bus 00-ff]
[    0.469390] pci_bus 0000:00: root bus resource [io  0x0000-0xfffff] (bus address [0xfe00000-0xfefffff])
[    0.469405] pci_bus 0000:00: root bus resource [mem 0x08000000-0x0fdfffff]
[    0.469959] PCI: bus0: Fast back to back transfers disabled
[    0.472058] PCI: bus1: Fast back to back transfers disabled
[    0.472411] pci 0000:00:00.0: BAR 8: assigned [mem 0x08000000-0x081fffff]
[    0.472432] pci 0000:01:00.0: BAR 0: assigned [mem 0x08000000-0x081fffff 64bit]
[    0.472556] pci 0000:00:00.0: PCI bridge to [bus 01-ff]
[    0.472576] pci 0000:00:00.0:   bridge window [mem 0x08000000-0x081fffff]
[    0.473457] 1b700000.pci supply vdda not found, using dummy regulator
[    0.473565] 1b700000.pci supply vdda_phy not found, using dummy regulator
[    0.473649] 1b700000.pci supply vdda_refclk not found, using dummy regulator
[    0.474404] OF: PCI: host bridge /soc/pci@1b700000 ranges:
[    0.474439] OF: PCI:    IO 0x31e00000..0x31efffff -> 0x31e00000
[    0.474458] OF: PCI:   MEM 0x2e000000..0x31dfffff -> 0x2e000000
[    0.584520] qcom-pcie 1b700000.pci: link up
[    0.584695] qcom-pcie 1b700000.pci: PCI host bridge to bus 0001:00
[    0.584712] pci_bus 0001:00: root bus resource [bus 00-ff]
[    0.584727] pci_bus 0001:00: root bus resource [mem 0x2e000000-0x31dfffff]
[    0.585193] PCI: bus0: Fast back to back transfers disabled
[    0.587400] PCI: bus1: Fast back to back transfers disabled
[    0.587874] pci 0001:00:00.0: BAR 8: assigned [mem 0x2e000000-0x2e1fffff]
[    0.587895] pci 0001:01:00.0: BAR 0: assigned [mem 0x2e000000-0x2e1fffff 64bit]
[    0.588024] pci 0001:00:00.0: PCI bridge to [bus 01-ff]
[    0.588043] pci 0001:00:00.0:   bridge window [mem 0x2e000000-0x2e1fffff]
[    0.591066] L2 @ QSB rate. Forcing new rate.
[    0.591274] L2 @ 384000 KHz
[    0.591857] CPU0 @ 800000 KHz
[    0.591868] CPU1 @ QSB rate. Forcing new rate.
[    0.591994] CPU1 @ 384000 KHz
[    0.594644] gsbi 16300000.gsbi: GSBI port protocol: 6 crci: 0
[    0.596057] gsbi 1a200000.gsbi: GSBI port protocol: 3 crci: 0
[    0.597562] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    0.598582] msm_serial 16340000.serial: msm_serial: detected port #0
[    0.598681] msm_serial 16340000.serial: uartclk = 7372800
[    0.598759] 16340000.serial: ttyMSM0 at MMIO 0x16340000 (irq = 167, base_baud = 460800) is a MSM
[    0.598795] msm_serial: console setup on port #0
[    1.310365] console [ttyMSM0] enabled
[    1.315091] msm_serial: driver initialized
[    1.326477] loop: module loaded
[    1.327858] spi_qup 1a280000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64
[    1.329750] m25p80 spi32766.0: s25fl256s1 (32768 Kbytes)
[    1.335891] 16 fixed-partitions partitions found on MTD device spi32766.0
[    1.341213] Creating 16 MTD partitions on "spi32766.0":
[    1.347792] 0x000000000000-0x000000020000 : "SBL1"
[    1.354101] 0x000000020000-0x000000040000 : "MIBIB"
[    1.358760] 0x000000040000-0x000000080000 : "SBL2"
[    1.363556] 0x000000080000-0x000000100000 : "SBL3"
[    1.368556] 0x000000100000-0x000000110000 : "DDRCONFIG"
[    1.373230] 0x000000110000-0x000000120000 : "SSD"
[    1.378451] 0x000000120000-0x0000001a0000 : "TZ"
[    1.383078] 0x0000001a0000-0x000000220000 : "RPM"
[    1.387927] 0x000000220000-0x0000002a0000 : "APPSBL"
[    1.392578] 0x0000002a0000-0x0000002b0000 : "APPSBLENV"
[    1.397470] 0x0000002b0000-0x0000002e0000 : "PRODUCTDATA"
[    1.402528] 0x0000002e0000-0x000000320000 : "ART"
[    1.408013] 0x000000320000-0x000000360000 : "TP"
[    1.412663] 0x000000360000-0x000000860000 : "TINY"
[    1.417407] 0x000000860000-0x000000a60000 : "kernel"
[    1.421977] 0x000000a60000-0x000002000000 : "rootfs"
[    1.427113] mtd: device 15 (rootfs) set to be root filesystem
[    1.431263] 1 squashfs-split partitions found on MTD device rootfs
[    1.436595] 0x0000014b0000-0x000002000000 : "rootfs_data"
[    1.444718] libphy: GPIO Bitbanged MDIO: probed
[    1.497258] switch0: Atheros AR8337 rev. 2 switch registered on gpio-0
[    2.423051] libphy: Fixed MDIO Bus: probed
[    2.423084] libphy: mdio_driver_register: qca8k
[    2.442649] stmmac - user ID: 0x10, Synopsys ID: 0x37
[    2.442682]  Ring mode enabled
[    2.446679]  DMA HW capability register supported[    2.449740]  Enhanced/Alternate descriptors
[    2.455272]  Enabled extended descriptors
[    2.458232]  RX Checksum Offload Engine supported
[    2.462631]  COE Type 2
[    2.467082]  TX Checksum insertion supported
[    2.469406]  Wake-Up On Lan supported
[    2.473858]  Enable RX Mitigation via HW Watchdog Timer
[    2.494131] stmmac - user ID: 0x10, Synopsys ID: 0x37
[    2.494164]  Ring mode enabled
[    2.498162]  DMA HW capability register supported[    2.501398]  Enhanced/Alternate descriptors
[    2.506755]  Enabled extended descriptors
[    2.509796]  RX Checksum Offload Engine supported
[    2.513882]  COE Type 2
[    2.518636]  TX Checksum insertion supported
[    2.520826]  Wake-Up On Lan supported
[    2.525340]  Enable RX Mitigation via HW Watchdog Timer
[    2.529795] i2c /dev entries driver
[    2.534769] Calibration not found.
[    2.537412] qcom-tsens 900000.thermal-sensor: tsens calibration failed
[    2.542085] Speed bin: 0
[    2.547384] PVS bin: 1
[    2.552150] cpuidle: enable-method property 'qcom,kpss-acc-v1' found operations
[    2.552304] cpuidle: enable-method property 'qcom,kpss-acc-v1' found operations
[    2.560052] sdhci: Secure Digital Host Controller Interface driver
[    2.566748] sdhci: Copyright(c) Pierre Ossman
[    2.573094] sdhci-pltfm: SDHCI platform and OF driver helper
[    2.579161] NET: Registered protocol family 10
[    2.584735] NET: Registered protocol family 17
[    2.587695] 8021q: 802.1Q VLAN Support v1.8
[    2.591995] Registering SWP/SWPB emulation handler
[    2.608462] qcom_rpm 108000.rpm: RPM firmware 3.0.16777342
[    2.619985] s1a: Bringing 0uV into 1050000-1050000uV
[    2.620326] s1b: Bringing 0uV into 1050000-1050000uV
[    2.624289] s2a: Bringing 0uV into 800000-800000uV
[    2.629330] s2b: Bringing 0uV into 800000-800000uV
[    2.636512] of: dev_pm_opp_of_cpumask_add_table: couldn't find opp table for cpu:0, -19
[    2.638923] of: dev_pm_opp_of_cpumask_add_table: couldn't find opp table for cpu:1, -19
[   [    2.666037] Freeing unused kernel memory: 10312K
[    2.666060] This architecture does not have kernel memory protection.
[    2.680282] init: Console is alive
[    2.680401] init: - watchdog -
[    2.690360] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    2.699196] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    2.701092] SCSI subsystem initialized
[    2.709928] ehci-platform: EHCI generic platform driver
[    2.711441] qcom-dwc3-usb-phy 100f8830.phy: cannot get HSIO settings from device node, using default values
[    2.714168] qcom-dwc3-usb-phy 110f8830.phy: cannot get HSIO settings from device node, using default values
[    2.724474] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    2.733872] ohci-platform: OHCI generic platform driver
[    2.864938] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    2.865019] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 1
[    2.869720] xhci-hcd xhci-hcd.0.auto: hcc params 0x0228f065 hci version 0x100 quirks 0x02010010
[    2.876964] xhci-hcd xhci-hcd.0.auto: irq 169, io mem 0x11000000
[    2.886849] hub 1-0:1.0: USB hub found
[    2.891989] hub 1-0:1.0: 1 port detected
[    2.895872] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    2.899568] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 2
[    2.904976] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[    2.913404] hub 2-0:1.0: USB hub found
[    2.920774] hub 2-0:1.0: 1 port detected
[    2.924781] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    2.928392] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 3
[    2.933830] xhci-hcd xhci-hcd.1.auto: hcc params 0x0228f065 hci version 0x100 quirks 0x02010010
[    2.941271] xhci-hcd xhci-hcd.1.auto: irq 170, io mem 0x10000000
[    2.951022] hub 3-0:1.0: USB hub found
[    2.956060] hub 3-0:1.0: 1 port detected
[    2.959841] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    2.963680] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 4
[    2.969113] usb usb4: We don't know the algorithms for LPM for this host, disabling LPM.
[    2.976938] hub 4-0:1.0: USB hub found
[    2.984956] hub 4-0:1.0: 1 port detected
[    2.991504] usbcore: registered new interface driver usb-storage
[    2.992555] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    3.008322] init: - preinit -
[    3.165870] random: jshn: uninitialized urandom read (4 bytes read)
[    3.190097] random: jshn: uninitialized urandom read (4 bytes read)
[    3.319478] random: jshn: uninitialized urandom read (4 bytes read)
[    3.345690] random: jshn: uninitialized urandom read (4 bytes read)
[    3.414584] random: jshn: uninitialized urandom read (4 bytes read)
[    4.456010] random: procd: uninitialized urandom read (4 bytes read)
[    4.469796] dwmac1000: Master AXI performs any burst length
[    4.469835] ipq806x-gmac-dwmac 37400000.ethernet eth1: IEEE 1588-2008 Advanced Timestamp supported
[    4.474277] ipq806x-gmac-dwmac 37400000.ethernet eth1: registered PTP clock
[    4.483411] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    5.518503] ipq806x-gmac-dwmac 37400000.ethernet eth1: Link is Up - 1Gbps/Full - flow control off
[    5.518952] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready
[    7.675632] procd: - early -
[    7.675758] procd: - watchdog -
[    8.361175] procd: - watchdog -
[    8.361534] procd: - ubus -
[    8.368163] random: ubusd: uninitialized urandom read (4 bytes read)
[    8.414953] random: ubusd: uninitialized urandom read (4 bytes read)
[    8.415404] random: ubusd: uninitialized urandom read (4 bytes read)
[    8.420527] random: ubusd: uninitialized urandom read (4 bytes read)
[    8.428554] procd: - init -
Please press Enter to activate this console.
[    8.587355] kmodloader: loading kernel modules from /etc/modules.d/*
[    8.594946] ip6_tables: (C) 2000-2006 Netfilter Core Team
[    8.601257] Loading modules backported from Linux version wt-2017-11-01-0-gfe248fc2c180
[    8.601283] Backport generated by backports.git v4.14-rc2-1-31-g86cf0e5d
[    8.609604] ip_tables: (C) 2000-2006 Netfilter Core Team
[    8.619038] nf_conntrack version 0.5.0 (8192 buckets, 32768 max)
[    8.653629] usbcore: registered new interface driver ums-alauda
[    8.654540] usbcore: registered new interface driver ums-cypress
[    8.659335] usbcore: registered new interface driver ums-datafab
[    8.665402] usbcore: registered new interface driver ums-freecom
[    8.671879] usbcore: registered new interface driver ums-isd200
[    8.677141] usbcore: registered new interface driver ums-jumpshot
[    8.682775] usbcore: registered new interface driver ums-karma
[    8.689123] usbcore: registered new interface driver ums-sddr09
[    8.694708] usbcore: registered new interface driver ums-sddr55
[    8.700642] usbcore: registered new interface driver ums-usbat
[    8.710126] xt_time: kernel timezone is -0000
[    8.726662] PPP generic driver version 2.4.2
[    8.727198] NET: Registered protocol family 24
[    8.745573] ath10k_pci 0000:01:00.0: enabling device (0140 -> 0142)
[    8.746152] ath10k_pci 0000:01:00.0: pci irq msi oper_irq_mode 2 irq_mode 0 reset_mode 0
[    8.920394] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/pre-cal-pci-0000:01:00.0.bin failed with error -2
[    8.920431] ath10k_pci 0000:01:00.0: Falling back to user helper
[    8.995719] random: fast init done
[   12.315975] random: crng init done
[   15.247273] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/QCA99X0/hw2.0/firmware-6.bin failed with error -2
[   15.247308] ath10k_pci 0000:01:00.0: Falling back to user helper
[   15.299813] firmware ath10k!QCA99X0!hw2.0!firmware-6.bin: firmware_loading_store: map pages failed
[   15.301145] ath10k_pci 0000:01:00.0: qca99x0 hw2.0 target 0x01000000 chip_id 0x003b01ff sub 168c:0002
[   15.307672] ath10k_pci 0000:01:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 1
[   15.319547] ath10k_pci 0000:01:00.0: firmware ver 10.4.1.00030-1 api 5 features no-p2p crc32 d2901e01
[   15.385762] ath10k_pci 0000:01:00.0: board_file api 2 bmi_id 1:4 crc32 08fa09f2
[   16.654600] ath10k_pci 0000:01:00.0: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-file max-sta 512 raw 0 hwcrypto 1
[   16.745924] ath10k_pci 0001:01:00.0: enabling device (0140 -> 0142)
[   16.746655] ath10k_pci 0001:01:00.0: pci irq msi oper_irq_mode 2 irq_mode 0 reset_mode 0
[   16.919973] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/pre-cal-pci-0001:01:00.0.bin failed with error -2
[   16.920011] ath10k_pci 0001:01:00.0: Falling back to user helper
[   23.708499] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/QCA99X0/hw2.0/firmware-6.bin failed with error -2
[   23.708538] ath10k_pci 0001:01:00.0: Falling back to user helper
[   23.763094] firmware ath10k!QCA99X0!hw2.0!firmware-6.bin: firmware_loading_store: map pages failed
[   23.763285] ath10k_pci 0001:01:00.0: qca99x0 hw2.0 target 0x01000000 chip_id 0x003b01ff sub 168c:0002
[   23.771046] ath10k_pci 0001:01:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 1
[   23.782977] ath10k_pci 0001:01:00.0: firmware ver 10.4.1.00030-1 api 5 features no-p2p crc32 d2901e01
[   23.847272] ath10k_pci 0001:01:00.0: board_file api 2 bmi_id 1:6 crc32 08fa09f2
[   25.122007] ath10k_pci 0001:01:00.0: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-file max-sta 512 raw 0 hwcrypto 1
[   25.216379] kmodloader: done loading kernel modules from /etc/modules.d/*
[   28.811463] dwmac1000: Master AXI performs any burst length
[   28.811504] ipq806x-gmac-dwmac 37400000.ethernet eth1: IEEE 1588-2008 Advanced Timestamp supported
[   28.815943] ipq806x-gmac-dwmac 37400000.ethernet eth1: registered PTP clock
[   28.825022] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready
[   28.834468] br-lan: port 1(eth1.1) entered blocking state
[   28.837628] br-lan: port 1(eth1.1) entered disabled state
[   28.843414] device eth1.1 entered promiscuous mode
[   28.848551] device eth1 entered promiscuous mode
[   28.854728] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   28.873321] dwmac1000: Master AXI performs any burst length
[   28.873362] ipq806x-gmac-dwmac 37200000.ethernet eth0: IEEE 1588-2008 Advanced Timestamp supported
[   28.877821] ipq806x-gmac-dwmac 37200000.ethernet eth0: registered PTP clock
[   28.886939] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[   28.903024] IPv6: ADDRCONF(NETDEV_UP): eth0.2: link is not ready
[   29.838556] ipq806x-gmac-dwmac 37400000.ethernet eth1: Link is Up - 1Gbps/Full - flow control off
[   29.839543] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready
[   29.846686] br-lan: port 1(eth1.1) entered blocking state
[   29.852580] br-lan: port 1(eth1.1) entered forwarding state
[   29.860720] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   29.918454] ipq806x-gmac-dwmac 37200000.ethernet eth0: Link is Up - 1Gbps/Full - flow control off
[   29.918511] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   29.926622] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.2: link becomes ready



BusyBox v1.28.3 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+6765-b8c1d88
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/#

WG2600HPメモ

  • ポート構成

    • WAN: port1
    • LAN1: port2
    • LAN2: port3
    • LAN3: port4
    • LAN4: port5
  • LED GPIO

    公開されているコードからの情報、確認済

    • Power (Green): 14
    • Power (Red): 7
    • Active (Green): 8
    • Active (Red): 9
    • WiFi 2.4G (Green): 55
    • WiFi 2.4G (Red): 56
    • WiFi 5G (Green): 57
    • WiFi 5G (Red): 58
    • TV (Green): 64
    • TV (Red): 65
    • CONVERTER (Green): 6
    • CONVERTER (Red): 15

    drive-strengthがコード見る限り2種類あるけど、どうしたものか
    追記: OpenWrt上ではdrive-strength=2のみでも普通に点灯させられた。これで様子見

    - leds_powg_cfg (4MA, PULLDOWN
    	- GPIO14
    
    - leds_akro8_cfg (8MA, PULLDOWN
    	- (none)
    
    - leds_akro4_cfg (4MA, PULLDOWN
    	- GPIO65
    
    - leds_akro2_cfg (2MA, PULLDOWN
    	- GPIO6, GPIO7, GPIO8, GPIO9,
    	  GPIO15, GPIO55, GPIO56, GPIO57,
    	  GPIO58, GPIO64
    

  • 追加のU-Boot環境変数(案)

    U-BootがBUFFALO機のような復旧手段を何も持っていないうえにブートプロセスの中断ができないため、bootcmdでrambootを必須にしてそれが失敗したら通常ブートに落とす。
    bootipqは色々環境変数を追加しようとするため、別のコマンドラインにするか思案中。nbootでいけたのでこれに決定。bootipqでブートした際はmtdids, mtdpartsを環境変数に設定しているが、特に設定しなくてもブートできた。default environmentがbootcmd=bootipqだったため、結局bootipqに戻した。

    autostart=yes
    ipaddr=192.168.10.1
    serverip=192.168.10.2
    bootargs=console=ttyHSL1,115200n8 root=mtd:rootfs rootfstype=squashfs reboot=0
    ramboot=rootfstype=ramfs; tftpboot 0x44000000 wg2600hp.bin
    bootcmd=run ramboot || bootipq
    

  • bootipqしたときのログ(一部)

    この際、メーカーファームを起動する場合は

    bootargs=console=ttyHSL1,115200n8 root=mtd:rootfs rootfstype=squashfs reboot=0
    

    を設定しておかないとKernelにコントロールが移ってからのログがコンソールに吐き出されなくなるので要注意。この問題により、bootcmdにbootipqのみを設定するミスをやらかした際に、メーカーファームのkernelは起動してくるがコンソールに何も吐かれず操作できないために、WebUIからファームアップデート時の電源断で意図的にkernelを壊す羽目になった。

    boot> bootipq debug
    MMC Device 0 not found
    MMC Device 0 not found
    Using nand device 1
    bootargs=root=/dev/nfs nfsroot=192.168.10.2: ip=192.168.10.1:192.168.10.2:::::off root=mtd:rootfs rootfstype=squashfs reboot=0
    Booting from flash
    set mtdids nand1=nand1 && set mtdparts mtdparts=nand1:${msmparts} && set autostart yes;nboot 0x44000000 1 0x860000
    Loading from nand1, offset 0x860000
       Image Name:   Linux-3.4.103
       Image Type:   ARM Linux Kernel Image (uncompressed)
       Data Size:    1828680 Bytes = 1.7 MiB
       Load Address: 41508000
       Entry Point:  41508000
    Automatic boot of image at addr 0x44000000 ...
       Image Name:   Linux-3.4.103
       Image Type:   ARM Linux Kernel Image (uncompressed)
       Data Size:    1828680 Bytes = 1.7 MiB
       Load Address: 41508000
       Entry Point:  41508000
       Verifying Checksum ... OK
       Loading Kernel Image ... OK
    OK
    info: "mtdparts" not set
    Using machid 0x1260 from environment
    
    Starting kernel ...
    

WG2600HPをinitramfsイメージでブート

U-Bootでコンソールに落ちることができず、failsafeでなんとかU-Bootの環境変数を抜き出せたが、ブート時にNFSで待ち受けてはいるらしいものの必要なIPアドレス等が全く以て不明なため、実際にはU-Bootの環境変数が格納されている領域はメーカーファームでは使われておらず、NFSではなかった(U-Bootのdefault environmentが使用される)。fw_setenvにより環境変数の書き換えが可能だったのでbootcmdを書き換えてしまう。

必要なU-Boot環境変数の設定値

※注: あくまでramboot(TFTPから取得してのブート)にのみ必要なもの

ipaddr=192.168.10.1
serverip=192.168.10.2
ramboot=rootfstype=ramfs; tftpboot 0x44000000 wg2600hp.bin; bootm 0x44000000
bootcmd=run ramboot

上から

  • デバイス側IPアドレス
  • TFTP側サーバアドレス
  • initramfsイメージを使用してブートするためのコマンド。TFTPでイメージを0x44000000へダウンロードしbootmでそこからブートする
    “wg2600hp.bin” はTFTPサーバからダウンロードするファイル名(任意)
  • rambootを実行する

手順

  • 電源を投入し、failsafeに落ちる
  • /etc/fw_env.configを作成する
    /dev/mtd9 0x00000 0x10000 0x10000
    

  • 初期状態の環境変数をメモ
    fw_printenv
    

  • 環境変数を設定
    fw_setenv ipaddr 192.168.10.1
    fw_setenv serverip 192.168.10.2
    fw_setenv ramboot "rootfstype=ramfs; tftpboot 0x44000000 wg2600hp.bin; bootm 0x44000000"
    fw_setenv bootcmd "run ramboot"
    

  • LAN側へPCを接続
  • WG2600HPに設定した通りTFTPdを起動
  • WG2600HPを再起動(電源引き抜いて再度繋ぐ)
  • TFTPでinitramfsイメージが取得されブートする

備考等

  • APPSBLENV にread-onlyが掛かっているか、fw_printenv/fw_setenvが無かったらお手上げだった ∩( ・ω・)∩
  • rambootの “rootfstype=ramfs” は不要かもしれない(未確認) -> 不要。
  • fw_setenv実行時に引数内に半角スペースが含まれていると、そこで区切られてしまい誤った値が設定されてしまうため、” ” を付けて実行する

WG2600HP (3)

  • U-Boot環境変数

    • /etc/fw_env.config

      /dev/mtd9 0x00000 0x10000 0x10000
      

    • 結果

      root@(none):/# fw_printenv
      bootcmd=bootp; setenv bootargs root=/dev/nfs nfsroot=${serverip}:${rootpath} ip=${ipaddr}:${serverip}:${gatewayip}:${netmask}:${hostname}::off; bootm
      bootdelay=5
      baudrate=115200
      

WG2600HP (2)

  • パスワード変更スクリプト探し

    • スクリプト

      #/bin/sh
      
      INITD_FILES=$(ls /etc/init.d/S*)
      
      for f in $INITD_FILES; do
      	echo "===== $f ====="
      	cat $f | grep "Change root"
      	echo " "
      done
      

    • 結果

      root@(none):/tmp# ./files.sh 
      ===== /etc/init.d/S00boot =====
       
      ===== /etc/init.d/S01setup_local =====
       
      ===== /etc/init.d/S10udev =====
       
      ===== /etc/init.d/S11crashlog =====
       
      ===== /etc/init.d/S11startup =====
       
      ===== /etc/init.d/S12pfmg =====
       
      ===== /etc/init.d/S15bootconf =====
                              echo "Change root login password"
       
      ===== /etc/init.d/S20network =====
       
      ===== /etc/init.d/S21nec_wifi_mgr =====
       
      ===== /etc/init.d/S36lkh_netfilter =====
       
      ===== /etc/init.d/S36lkh_netfilter_ipv6 =====
       
      ===== /etc/init.d/S39usb =====
       
      ===== /etc/init.d/S41metalog =====
       
      ===== /etc/init.d/S42ddns_event =====
       
      ===== /etc/init.d/S43evtmgr =====
       
      ===== /etc/init.d/S43sessmgr =====
       
      ===== /etc/init.d/S44nwctld =====
       
      ===== /etc/init.d/S45cdm_init =====
       
      ===== /etc/init.d/S46br_multicast =====
       
      ===== /etc/init.d/S46cmtd =====
       
      ===== /etc/init.d/S46dhcpserver_mode =====
       
      ===== /etc/init.d/S47netlinkd =====
       
      ===== /etc/init.d/S48preconfig =====
       
      ===== /etc/init.d/S49wssctl =====
       
      ===== /etc/init.d/S50telnetd =====
       
      ===== /etc/init.d/S70qca-nss-drv =====
       
      ===== /etc/init.d/S70qca-nss-ecm =====
       
      ===== /etc/init.d/S80index_cgi =====
       
      ===== /etc/init.d/S81mini_httpd =====
       
      ===== /etc/init.d/S82adp =====
       
      ===== /etc/init.d/S83aterm_httpif_cgi =====
       
      ===== /etc/init.d/S84acctimer =====
       
      ===== /etc/init.d/S85aim_init =====
       
      ===== /etc/init.d/S86cpu_therm_moni =====
       
      ===== /etc/init.d/S97watchdog =====
       
      ===== /etc/init.d/S99powerctl =====
       
      ===== /etc/init.d/S99sysctl =====
       
      ===== /etc/init.d/S99thermal =====
      
       

WG2600HP

東海道らぐ横浜当日、途中秋葉原に寄って徘徊していたら駅近くのソフマップで発見。IPQ8064機と予想しており、上手くOpenWrt化できれば扱いやすそうということから購入。

所感

めちゃくちゃ厳しい。

  • U-Bootが現状ではコンソールに落ちる手段を見つけられていない
    • U-Bootの環境変数等を見ることができない
    • コンソールからinitramfsイメージを読ませることができない
  • kernelのコンソールにパスワードが掛かっている
    • システムの詳細な情報を取り出すことができない
      • USB, GPIO, LED, その他色々
  • failsafeも満足に動けない
    • しばらくすると突然再起動されてしまう。watchdogが絡んでいる模様
    • failsafeではkernelのコンソールに掛かっているパスワードを回避できるが、突然リブートされてしまうため満足に動けない
    • rootのパスワードをpasswdとshadowごにょごにょして特定できないかと思ったら、failsafeに落ちれるタイミングより後に何かのスクリプトかプログラムによりrootのパスワードが設定されるらしく(bootlog参照)、failsafe内ではrootのパスワードが未設定状態
  • アップデートファームが暗号化(難読化)されている
    • 素で入っていればrootfsを展開してじっくり探していこうと思ったものの、全部暗号化(難読化)されており自分の技量では復号不可。
    • 実機から取り出そうにも、通常起動のkernelはパスワード不明で入れないし、failsafeではネットワークとUSBポートは使えない上に勝手に再起動されてしまう

2019/02/25 追記: U-Bootのパスワードが外部情報から判明したので、U-Bootを調べた。

U-Boot

  • help
    boot> help
    ?       - alias for 'help'
    additional- [NECPF] additional information read/write/erase command
    base    - print or set address offset
    bdinfo  - print Board Info structure
    bootipq - bootipq from flash device
    bootm   - boot application image from memory
    bootmbn - bootmbn from flash device
    bootp   - boot image via network using BOOTP/TFTP protocol
    bootz   - boot Linux zImage image from memory
    chpart  - change active partition
    ckcrc   - [NECPF] check the crc32 in RAM
    cmp     - memory compare
    configid- [NECPF] configid read/write command
    cp      - memory copy
    crc32   - checksum calculation
    debug   - [NECPF] debug command
    dhcp    - boot image via network using DHCP/TFTP protocol
    echo    - echo args to console
    env     - environment handling commands
    errorlog- [NECPF] errorlog command
    exit    - exit script
    false   - do nothing, unsuccessfully
    fdt     - flattened device tree utility commands
    go      - start application at address 'addr'
    help    - print command description/usage
    i2c     - I2C sub-system
    iminfo  - print header information for application image
    imxtract- extract a part of a multi-image
    ipq_nand- Switch between SBL and Linux kernel page layout.
    loadb   - load binary file over serial line (kermit mode)
    loady   - load binary file over serial line (ymodem mode)
    loop    - infinite loop on address range
    macaddr - [NECPF] macaddr read/write command
    md      - memory display
    mii     - MII utility commands
    mm      - memory modify (auto-incrementing address)
    mmc     - MMC sub system
    mmcinfo - display MMC info
    mphyrd  - qca8511 packet processor PHY register display
    mphyrw  - qca8511 packet processor PHY register write (fill)
    mprd    - qca8511 packet processor register display
    mprw    - qca8511 packet processor register write (fill)
    mtdparts- define flash/nand partitions
    mtest   - simple RAM read/write test
    mw      - memory write (fill)
    nand    - NAND sub-system
    nboot   - boot from NAND device
    nm      - memory modify (constant address)
    pci     - list and access PCI Configuration Space
    ping    - send ICMP ECHO_REQUEST to network host
    pkg_info- [NECPF] show package information
    presetid- [NECPF] presetid read/write/erase command
    printenv- print environment variables
    randomkey- [NECPF] randomkey read/write command
    reset   - Perform RESET of the CPU
    rf_serial- [NECPF] rf_serial read command
    run     - run commands in an environment variable
    saveenv - save environment variables to persistent storage
    serial  - [NECPF] serial read/write/erase command
    setenv  - set environment variables
    sf      - SPI flash sub-system
    show_version- [NECPF] show boot/tp/system version
    showvar - print local hushshell variables
    smeminfo- print SMEM FLASH information
    source  - run script from memory
    test    - minimal test like /bin/sh
    tftpboot- boot image via network using TFTP protocol
    tftpput - TFTP put command, for uploading files to a server
    tftpsrv - act as a TFTP server and boot the first received file
    tp      - [NECPF] run test program
    true    - do nothing, successfully
    ubi     - ubi commands
    usb     - USB sub-system
    usbboot - boot from USB device
    version - print monitor, compiler and linker version
    

  • version
    boot> version
    
    U-Boot 2012.07 [Standard IPQ806X.LN,local] (Mar 26 2015 - 13:53:09)
    arm-openwrt-linux-uclibcgnueabi-gcc (Linaro GCC 4.6-2012.02) 4.6.3 20120201 (prerelease)
    GNU ld (GNU Binutils) 2.22
    

  • show_version
    boot> show_version
    SF: Detected S25FL256S with page size 64 KiB, total 32 MiB
    TP Version = 1.0.1
    Boot Version = 1.0.0
    System (Kernel) Size : 1828808 Bytes (0x001be7c8)
    NEC_VERSION=3.20.59
    OEM_VERSION=1.0.11
    

  • printenv
    boot> printenv
    baudrate=115200
    bootargs=console=ttyHSL1,115200n8
    bootcmd=bootipq
    bootdelay=2
    ethact=eth1
    ethrotate=no
    ipaddr=192.168.0.1
    machid=1260
    stderr=serial
    stdin=serial
    stdout=serial
    
    Environment size: 198/65532 bytes
    

  • pkg_info
    boot> pkg_info
      PKG NAME : ROTARY
      CPU : ARMv7 Processor [512f04d0] revision 0
      RAM : 512 MiB
      Flash : 32 MiB
        Device         : S25FL256S
        Sector size    : 64 KiB
      DIPSW : 0x3
    

  • mii device
    boot> mii device
    MII devices: 'IPQ MDIO1' 'IPQ MDIO2' 
    Current device: 'IPQ MDIO2'
    

  • help debug
    boot> help debug
    debug - [NECPF] debug command
    
    Usage:
    debug - [NECPF] debug command
    debug watchdog enable  - Enable watchdog timer.
    debug watchdog disable - Disable watchdog timer.
    debug watchdog reboot  - Wait for a watchdog timer to expire.
    debug watchdog settime - Set a watchdog time. [sec]
    debug flash read  - flash read.
    debug flash write - flash write.
    debug flash erase - flash erase.
    debug flash info  - flash information.
    debug flash diag  - self diagnostic for flash device.
    debug l2sw read  - l2sw register read.
    debug l2sw write - l2sw register write.
    debug l2sw dump  - l2sw register dump.
    

  • debug l2sw dump
    boot> debug l2sw dump
    ### PHY ###
    
    ADDR : PHY0 PHY1 PHY2 PHY3 PHY4 
    -----+-------------------------
       0 : 3100 1000 3100 3100 3100 
       1 : 7949 796d 7949 7949 7949 
       2 : 004d 004d 004d 004d 004d 
       3 : d036 d036 d036 d036 d036 
       4 : 1de1 1de1 1de1 1de1 1de1 
       5 : 0000 cde1 0000 0000 0000 
       6 : 0004 000f 0004 0004 0004 
       7 : 2801 2801 2801 2801 2801 
       8 : 0000 0000 0000 0000 0000 
       9 : 0200 0200 0200 0200 0200 
       a : 0000 7800 0000 0000 0000 
       b : 0000 0000 0000 0000 0000 
       c : 0000 0000 0000 0000 0000 
       d : 4007 4007 4007 4007 4007 
       e : 0000 0000 0000 0000 0000 
       f : 2000 2000 2000 2000 2000 
      10 : 0862 0862 0862 0862 0862 
      11 : 0010 bc1c 0010 0010 0010 
      12 : 0000 0000 0000 0000 0000 
      13 : 0000 7c00 0000 0000 0000 
      14 : 082c 082c 082c 082c 082c 
      15 : 0000 0000 0000 0000 0000 
      16 : 2400 2400 2400 2400 2400 
      17 : 0000 0000 0000 0000 0000 
      18 : 3200 3200 3200 3200 3200 
      19 : 1000 1000 1000 1000 1000 
      1a : 0000 0000 0000 0000 0000 
      1b : 0000 0000 0000 0000 0000 
      1c : 0000 0000 0000 0000 0000 
      1d : 0000 0000 0000 0000 0000 
      1e : 02ee 02ee 02ee 02ee 02ee 
      1f : 0000 0000 0000 0000 0000 
    
    ### DEBUG ###
    
    ADDR : PHY0 PHY1 PHY2 PHY3 PHY4 
    -----+-------------------------
       0 : 02ee 02ee 02ee 02ee 02ee 
       1 : 02b2 ffd0 02b2 02b2 01b1 
       2 : 3220 3f0f 3110 3110 3220 
       3 : 3f11 3fff 3f22 3f22 3f11 
       4 : fbbb fbbb fbbb fbbb fbbb 
       5 : 1c47 1c47 1c47 1c47 1c47 
       6 : 0000 0000 0000 0000 0000 
       7 : 0000 0000 0000 0000 0000 
       8 : 1c00 1c00 1c00 1c00 1c00 
       9 : 8000 8000 8000 8000 8000 
       a : 3000 3000 3000 3000 3000 
       b : bc40 bc40 bc40 bc40 bc40 
       c : 6001 0800 6001 6001 6001 
       d : 2820 0120 2820 2820 2820 
       e : 0003 0023 0003 0003 0003 
       f : 0030 0030 0030 0030 0030 
      10 : 0000 0000 0000 0000 0000 
      11 : 7552 7552 7552 7552 7552 
      12 : 4c04 4c04 4c04 4c04 4c04 
      13 : c01b c01b c01b c01b c01b 
      14 : 0752 0752 0752 0752 0752 
      15 : b220 b220 b220 b220 b220 
      16 : 8000 8000 8000 8000 8000 
      17 : 0000 070f 0000 0000 0000 
      18 : 62ea 62ea 62ea 62ea 62ea 
      19 : 01f4 01f4 01f4 01f4 01f4 
      1a : 01d7 01d7 01d7 01d7 01d7 
      1b : 0176 02ee 0176 0176 0176 
      1c : 3cbb 3cbb 3cbb 3cbb 3cbb 
      1d : 00ec 00ec 00ec 00ec 00ec 
      1e : 0076 0076 0076 0076 0076 
      1f : 0000 7c00 0000 0000 0000 
      20 : 0000 0000 0000 0000 0000 
      21 : 2d15 2d15 2d15 2d15 2d15 
      22 : 1f6a 1f6a 1f6a 1f6a 1f6a 
      23 : a200 9804 a200 a200 a200 
      24 : 1000 4ec7 1000 1000 1000 
      25 : 0000 0004 0000 0000 0000 
      26 : 0029 0013 0001 000c 0000 
      27 : 1000 900f 1000 1000 1000 
      28 : 0000 e011 0000 0000 0000 
      29 : 36dd 36dd 36dd 36dd 36dd 
      2a : 0000 0000 0000 0000 0000 
      2b : 3a98 3a98 3a98 3a98 3a98 
      2c : 0000 4011 0000 0000 0000 
      2d : 0000 0202 0000 0000 0000 
      2e : 0000 0202 0000 0000 0000 
      2f : 0000 0000 0000 0000 0000 
      30 : 0000 16f4 0000 0000 0000 
      31 : 0000 f810 0000 0000 0000 
      32 : 2200 192a 2200 2200 2200 
      33 : 2200 18c5 2200 2200 2200 
      34 : 2200 17f2 2200 2200 2200 
      35 : 0000 0000 0000 0000 0000 
      36 : e1ec e1ec e1ec e1ec e1ec 
      37 : 6000 6000 6000 6000 6000 
      38 : 1111 2222 1111 1111 1111 
      39 : 7359 7359 7359 7359 7359 
      3a : ee6b ee6b ee6b ee6b ee6b 
      3b : 5a5a 5a5a 5a5a 5a5a 5a5a 
      3c : 5a5a 5a5a 5a5a 5a5a 5a5a 
      3d : 6860 6860 6860 6860 6860 
      3e : e0d8 2058 e0d8 e0d8 e0d8 
      3f : 8000 8000 8000 8000 8000 
    
    ### PHY MMD3 ###
    
    ADDR : PHY0 PHY1 PHY2 PHY3 PHY4 
    -----+-------------------------
       0 : 0000 0000 0000 0000 0000 
       1 : 0000 0000 0000 0000 0000 
       2 : 0000 0000 0000 0000 0000 
       3 : 0000 0000 0000 0000 0000 
       4 : 0000 0000 0000 0000 0000 
       5 : 0089 0089 0089 0089 0089 
       6 : 0000 0000 0000 0000 0000 
       7 : 0000 0000 0000 0000 0000 
       8 : 0000 0000 0000 0000 0000 
       9 : 0000 0000 0000 0000 0000 
       a : 0000 0000 0000 0000 0000 
       b : 0000 0000 0000 0000 0000 
       c : 0000 0000 0000 0000 0000 
       d : 0000 0000 0000 0000 0000 
       e : 0000 0000 0000 0000 0000 
       f : 0000 0000 0000 0000 0000 
      10 : 0000 0000 0000 0000 0000 
      11 : 0000 0000 0000 0000 0000 
      12 : 0000 0000 0000 0000 0000 
      13 : 0000 0000 0000 0000 0000 
      14 : 0006 0006 0006 0006 0006 
      15 : 0000 0000 0000 0000 0000 
      16 : 0000 0000 0000 0000 0000 
      17 : 0000 0000 0000 0000 0000 
      18 : 0000 0000 0000 0000 0000 
      19 : 0000 0000 0000 0000 0000 
      1a : 0000 0000 0000 0000 0000 
      1b : 0000 0000 0000 0000 0000 
      1c : 0000 0000 0000 0000 0000 
      1d : 0000 0000 0000 0000 0000 
      1e : 0000 0000 0000 0000 0000 
      1f : 0000 0000 0000 0000 0000 
      20 : 0000 0000 0000 0000 0000 
      21 : 0000 0000 0000 0000 0000 
      22 : 0000 0000 0000 0000 0000 
      23 : 0000 0000 0000 0000 0000 
      24 : 0000 0000 0000 0000 0000 
      25 : 0000 0000 0000 0000 0000 
      26 : 0000 0000 0000 0000 0000 
      27 : 0000 0000 0000 0000 0000 
      28 : 0000 0000 0000 0000 0000 
      29 : 0000 0000 0000 0000 0000 
      2a : 0000 0000 0000 0000 0000 
      2b : 0000 0000 0000 0000 0000 
      2c : 0000 0000 0000 0000 0000 
      2d : 0000 0000 0000 0000 0000 
      2e : 0000 0000 0000 0000 0000 
      2f : 0000 0000 0000 0000 0000 
      30 : 0000 0000 0000 0000 0000 
      31 : 0000 0000 0000 0000 0000 
      32 : 0000 0000 0000 0000 0000 
      33 : 0000 0000 0000 0000 0000 
      34 : 0000 0000 0000 0000 0000 
      35 : 0000 0000 0000 0000 0000 
      36 : 0000 0000 0000 0000 0000 
      37 : 0000 0000 0000 0000 0000 
      38 : 0000 0000 0000 0000 0000 
      39 : 0000 0000 0000 0000 0000 
      3a : 0000 0000 0000 0000 0000 
      3b : 0000 0000 0000 0000 0000 
      3c : 0000 0000 0000 0000 0000 
      3d : 0000 0000 0000 0000 0000 
      3e : 0000 0000 0000 0000 0000 
      3f : 0000 0000 0000 0000 0000 
      40 : 0000 0000 0000 0000 0000 
      41 : 0000 0000 0000 0000 0000 
      42 : 0000 0000 0000 0000 0000 
      43 : 0000 0000 0000 0000 0000 
      44 : 0000 0000 0000 0000 0000 
      45 : 0000 0000 0000 0000 0000 
      46 : 0000 0000 0000 0000 0000 
      47 : 0000 0000 0000 0000 0000 
      48 : 0000 0000 0000 0000 0000 
      49 : 0000 0000 0000 0000 0000 
      4a : 0000 0000 0000 0000 0000 
      4b : 0000 0000 0000 0000 0000 
      4c : 0000 0000 0000 0000 0000 
      4d : 0000 0000 0000 0000 0000 
      4e : 0000 0000 0000 0000 0000 
      4f : 0000 0000 0000 0000 0000 
      50 : 0000 0000 0000 0000 0000 
      51 : 0000 0000 0000 0000 0000 
      52 : 0000 0000 0000 0000 0000 
      53 : 0000 0000 0000 0000 0000 
      54 : 0000 0000 0000 0000 0000 
      55 : 0000 0000 0000 0000 0000 
      56 : 0000 0000 0000 0000 0000 
      57 : 0000 0000 0000 0000 0000 
      58 : 0000 0000 0000 0000 0000 
      59 : 0000 0000 0000 0000 0000 
      5a : 0000 0000 0000 0000 0000 
      5b : 0000 0000 0000 0000 0000 
      5c : 0000 0000 0000 0000 0000 
      5d : 0000 0000 0000 0000 0000 
      5e : 0000 0000 0000 0000 0000 
      5f : 0000 0000 0000 0000 0000 
      60 : 0000 0000 0000 0000 0000 
      61 : 0000 0000 0000 0000 0000 
      62 : 0000 0000 0000 0000 0000 
      63 : 0000 0000 0000 0000 0000 
      64 : 0000 0000 0000 0000 0000 
      65 : 0000 0000 0000 0000 0000 
      66 : 0000 0000 0000 0000 0000 
      67 : 0000 0000 0000 0000 0000 
      68 : 0000 0000 0000 0000 0000 
      69 : 0000 0000 0000 0000 0000 
      6a : 0000 0000 0000 0000 0000 
      6b : 0000 0000 0000 0000 0000 
      6c : 0000 0000 0000 0000 0000 
      6d : 0000 0000 0000 0000 0000 
      6e : 0000 0000 0000 0000 0000 
      6f : 0000 0000 0000 0000 0000 
      70 : 0000 0000 0000 0000 0000 
      71 : 0000 0000 0000 0000 0000 
      72 : 0000 0000 0000 0000 0000 
      73 : 0000 0000 0000 0000 0000 
      74 : 0000 0000 0000 0000 0000 
      75 : 0000 0000 0000 0000 0000 
      76 : 0000 0000 0000 0000 0000 
      77 : 0000 0000 0000 0000 0000 
      78 : 0000 0000 0000 0000 0000 
      79 : 0000 0000 0000 0000 0000 
      7a : 0000 0000 0000 0000 0000 
      7b : 0000 0000 0000 0000 0000 
      7c : 0000 0000 0000 0000 0000 
      7d : 0000 0000 0000 0000 0000 
      7e : 0000 0000 0000 0000 0000 
      7f : 0000 0000 0000 0000 0000 
    8000 : 0000 0000 0000 0000 0000 
    8001 : 8187 8187 8187 8187 8187 
    8002 : 6a24 6a24 6a24 6a24 6a24 
    8003 : 5d09 5d09 5d09 5d09 5d09 
    8004 : 63f3 63f3 63f3 63f3 63f3 
    8005 : 8b32 8b32 8b32 8b32 8b32 
    8006 : c000 4002 c000 c000 c000 
    8007 : 83f6 83f6 83f6 83f6 83f6 
    8008 : 3030 3030 3030 3030 3030 
    8009 : 00d1 00d1 00d1 00d1 00d1 
    800a : 1040 1040 1040 1040 1040 
    800b : 0094 0094 0094 0094 0094 
    800c : 00eb 00eb 00eb 00eb 00eb 
    800d : cb3f cb3f cb3f cb3f cb3f 
    800e : 0000 0000 0000 0000 0000 
    800f : 1000 1240 1000 1000 1000 
    8010 : 0000 0001 0000 0000 0000 
    8011 : 00c0 00c8 00c0 00c0 00c0 
    8012 : 0000 0000 0000 0000 0000 
    8013 : 0000 0000 0000 0000 0000 
    8014 : 0000 0000 0000 0000 0000 
    8015 : 0000 0000 0000 0000 0000 
    8016 : 0000 0000 0000 0000 0000 
    8017 : 0000 0000 0000 0000 0000 
    8018 : 0000 0000 0000 0000 0000 
    8019 : 0000 0000 0000 0000 0000 
    801a : 0000 0000 0000 0000 0000 
    801b : 0000 0000 0000 0000 0000 
    801c : 0000 0000 0000 0000 0000 
    801d : 0000 0000 0000 0000 0000 
    801e : 0000 0000 0000 0000 0000 
    801f : 0000 0000 0000 0000 0000 
    8020 : 0000 0000 0000 0000 0000 
    8021 : 0000 0000 0000 0000 0000 
    8022 : 0000 0000 0000 0000 0000 
    8023 : 0000 0000 0000 0000 0000 
    8024 : 0000 0000 0000 0000 0000 
    8025 : 0000 0000 0000 0000 0000 
    8026 : 0000 0000 0000 0000 0000 
    8027 : 0000 0000 0000 0000 0000 
    8028 : 0000 0000 0000 0000 0000 
    8029 : 0000 0000 0000 0000 0000 
    802a : 0000 0000 0000 0000 0000 
    802b : 0000 0000 0000 0000 0000 
    802c : 0000 0000 0000 0000 0000 
    802d : 0000 0000 0000 0000 0000 
    802e : 0000 0000 0000 0000 0000 
    802f : 0000 0000 0000 0000 0000 
    8030 : 0000 0000 0000 0000 0000 
    8031 : 0000 0000 0000 0000 0000 
    8032 : 0000 0000 0000 0000 0000 
    8033 : 0000 0000 0000 0000 0000 
    8034 : 0000 0000 0000 0000 0000 
    8035 : 0000 0000 0000 0000 0000 
    8036 : 0000 0000 0000 0000 0000 
    8037 : 0000 0000 0000 0000 0000 
    8038 : 0000 0000 0000 0000 0000 
    8039 : 0000 0000 0000 0000 0000 
    803a : 0000 0000 0000 0000 0000 
    803b : 0000 0000 0000 0000 0000 
    803c : 0000 0000 0000 0000 0000 
    803d : 0000 0000 0000 0000 0000 
    803e : 0000 0000 0000 0000 0000 
    803f : 0000 0000 0000 0000 0000 
    8040 : 0000 0000 0000 0000 0000 
    8041 : 0000 0000 0000 0000 0000 
    8042 : 0000 0000 0000 0000 0000 
    8043 : 0000 0000 0000 0000 0000 
    8044 : 0000 0000 0000 0000 0000 
    8045 : 0000 0000 0000 0000 0000 
    8046 : 0000 0000 0000 0000 0000 
    8047 : 0000 0000 0000 0000 0000 
    8048 : 0000 0000 0000 0000 0000 
    8049 : 0000 0000 0000 0000 0000 
    804a : 0000 0000 0000 0000 0000 
    804b : 0000 0000 0000 0000 0000 
    804c : 0000 0000 0000 0000 0000 
    804d : 0000 0000 0000 0000 0000 
    804e : 0062 0062 0062 0062 0062 
    804f : 07a7 07a7 07a7 07a7 07a7 
    8050 : 2956 2956 2956 2956 2956 
    8051 : 2e70 2e70 2e70 2e70 2e70 
    8052 : 5580 5580 5580 5580 5580 
    8053 : 005e 005e 005e 005e 005e 
    8054 : 52b4 52b4 52b4 52b4 52b4 
    8055 : 0e14 0e14 0e14 0e14 0e14 
    8056 : 0148 0148 0148 0148 0148 
    8057 : 06e2 06e2 06e2 06e2 06e2 
    8058 : 0dbd 0dbd 0dbd 0dbd 0dbd 
    8059 : 001d 001d 001d 001d 001d 
    805a : 0000 0000 0000 0000 0000 
    805b : 1917 1917 1917 1917 1917 
    805c : 312c 312c 312c 312c 312c 
    805d : 10b1 10b1 10b1 10b1 10b1 
    805e : 000b 000b 000b 000b 000b 
    805f : 480f 480f 480f 480f 480f 
    8060 : 0175 0175 0175 0175 0175 
    8061 : 2e2e 2e2e 2e2e 2e2e 2e2e 
    8062 : 0000 0000 0000 0000 0000 
    8063 : 4064 4064 4064 4064 4064 
    8064 : 2222 1111 2222 2222 2222 
    8065 : 0000 0002 0000 0000 0000 
    8066 : 0000 0002 0001 0000 0001 
    8067 : 0000 0002 0001 0000 0000 
    8068 : 0001 0002 0001 0001 0000 
    8069 : d0d0 d0d0 d0d0 d0d0 d0d0 
    806a : d0d0 d0d0 d0d0 d0d0 d0d0 
    806b : 0000 0000 0000 0000 0000 
    806c : 1916 1916 1916 1916 1916 
    806d : 0000 0002 0000 0000 0000 
    806e : 888b 888b 888b 888b 888b 
    806f : 67ef 67ef 67ef 67ef 67ef 
    8070 : 0300 0300 0300 0300 0300 
    8071 : 0000 0000 0000 0000 0000 
    8072 : 0000 0000 0000 0000 0000 
    8073 : 0000 0000 0000 0000 0000 
    8074 : 0000 0000 0000 0000 0000 
    8075 : 0000 0000 0000 0000 0000 
    8076 : 0000 0000 0000 0000 0000 
    8077 : 0000 0000 0000 0000 0000 
    8078 : 0000 0000 0000 0000 0000 
    8079 : 0000 0000 0000 0000 0000 
    807a : 0000 0000 0000 0000 0000 
    807b : 0000 0000 0000 0000 0000 
    807c : 0000 0000 0000 0000 0000 
    807d : 0000 0000 0000 0000 0000 
    807e : 0000 0000 0000 0000 0000 
    807f : 0000 0000 0000 0000 0000 
    
    ### PHY MMD7 ###
    
    ADDR : PHY0 PHY1 PHY2 PHY3 PHY4 
    -----+-------------------------
       0 : 2000 2000 2000 2000 2000 
       1 : 0000 0000 0000 0000 0000 
       2 : 0000 0000 0000 0000 0000 
       3 : 0000 0000 0000 0000 0000 
       4 : 0000 0000 0000 0000 0000 
       5 : 0089 0089 0089 0089 0089 
       6 : 0000 0000 0000 0000 0000 
       7 : 0000 0000 0000 0000 0000 
       8 : 0000 0000 0000 0000 0000 
       9 : 0000 0000 0000 0000 0000 
       a : 0000 0000 0000 0000 0000 
       b : 0000 0000 0000 0000 0000 
       c : 0000 0000 0000 0000 0000 
       d : 0000 0000 0000 0000 0000 
       e : 0000 0000 0000 0000 0000 
       f : 0000 0000 0000 0000 0000 
      10 : 0000 0000 0000 0000 0000 
      11 : 0000 0000 0000 0000 0000 
      12 : 0000 0000 0000 0000 0000 
      13 : 0000 0000 0000 0000 0000 
      14 : 0000 0000 0000 0000 0000 
      15 : 0000 0000 0000 0000 0000 
      16 : 0000 0000 0000 0000 0000 
      17 : 0000 0000 0000 0000 0000 
      18 : 0000 0000 0000 0000 0000 
      19 : 0000 0000 0000 0000 0000 
      1a : 0000 0000 0000 0000 0000 
      1b : 0000 0000 0000 0000 0000 
      1c : 0000 0000 0000 0000 0000 
      1d : 0000 0000 0000 0000 0000 
      1e : 0000 0000 0000 0000 0000 
      1f : 0000 0000 0000 0000 0000 
      20 : 0000 0000 0000 0000 0000 
      21 : 0000 0000 0000 0000 0000 
      22 : 0000 0000 0000 0000 0000 
      23 : 0000 0000 0000 0000 0000 
      24 : 0000 0000 0000 0000 0000 
      25 : 0000 0000 0000 0000 0000 
      26 : 0000 0000 0000 0000 0000 
      27 : 0000 0000 0000 0000 0000 
      28 : 0000 0000 0000 0000 0000 
      29 : 0000 0000 0000 0000 0000 
      2a : 0000 0000 0000 0000 0000 
      2b : 0000 0000 0000 0000 0000 
      2c : 0000 0000 0000 0000 0000 
      2d : 0000 0000 0000 0000 0000 
      2e : 0000 0000 0000 0000 0000 
      2f : 0000 0000 0000 0000 0000 
      30 : 0000 0000 0000 0000 0000 
      31 : 0000 0000 0000 0000 0000 
      32 : 0000 0000 0000 0000 0000 
      33 : 0000 0000 0000 0000 0000 
      34 : 0000 0000 0000 0000 0000 
      35 : 0000 0000 0000 0000 0000 
      36 : 0000 0000 0000 0000 0000 
      37 : 0000 0000 0000 0000 0000 
      38 : 0000 0000 0000 0000 0000 
      39 : 0000 0000 0000 0000 0000 
      3a : 0000 0000 0000 0000 0000 
      3b : 0000 0000 0000 0000 0000 
      3c : 0000 0000 0000 0000 0000 
      3d : 0000 0006 0000 0000 0000 
      3e : 0000 0000 0000 0000 0000 
      3f : 0000 0000 0000 0000 0000 
      40 : 0000 0000 0000 0000 0000 
      41 : 0000 0000 0000 0000 0000 
      42 : 0000 0000 0000 0000 0000 
      43 : 0000 0000 0000 0000 0000 
      44 : 0000 0000 0000 0000 0000 
      45 : 0000 0000 0000 0000 0000 
      46 : 0000 0000 0000 0000 0000 
      47 : 0000 0000 0000 0000 0000 
      48 : 0000 0000 0000 0000 0000 
      49 : 0000 0000 0000 0000 0000 
      4a : 0000 0000 0000 0000 0000 
      4b : 0000 0000 0000 0000 0000 
      4c : 0000 0000 0000 0000 0000 
      4d : 0000 0000 0000 0000 0000 
      4e : 0000 0000 0000 0000 0000 
      4f : 0000 0000 0000 0000 0000 
      50 : 0000 0000 0000 0000 0000 
      51 : 0000 0000 0000 0000 0000 
      52 : 0000 0000 0000 0000 0000 
      53 : 0000 0000 0000 0000 0000 
      54 : 0000 0000 0000 0000 0000 
      55 : 0000 0000 0000 0000 0000 
      56 : 0000 0000 0000 0000 0000 
      57 : 0000 0000 0000 0000 0000 
      58 : 0000 0000 0000 0000 0000 
      59 : 0000 0000 0000 0000 0000 
      5a : 0000 0000 0000 0000 0000 
      5b : 0000 0000 0000 0000 0000 
      5c : 0000 0000 0000 0000 0000 
      5d : 0000 0000 0000 0000 0000 
      5e : 0000 0000 0000 0000 0000 
      5f : 0000 0000 0000 0000 0000 
      60 : 0000 0000 0000 0000 0000 
      61 : 0000 0000 0000 0000 0000 
      62 : 0000 0000 0000 0000 0000 
      63 : 0000 0000 0000 0000 0000 
      64 : 0000 0000 0000 0000 0000 
      65 : 0000 0000 0000 0000 0000 
      66 : 0000 0000 0000 0000 0000 
      67 : 0000 0000 0000 0000 0000 
      68 : 0000 0000 0000 0000 0000 
      69 : 0000 0000 0000 0000 0000 
      6a : 0000 0000 0000 0000 0000 
      6b : 0000 0000 0000 0000 0000 
      6c : 0000 0000 0000 0000 0000 
      6d : 0000 0000 0000 0000 0000 
      6e : 0000 0000 0000 0000 0000 
      6f : 0000 0000 0000 0000 0000 
      70 : 0000 0000 0000 0000 0000 
      71 : 0000 0000 0000 0000 0000 
      72 : 0000 0000 0000 0000 0000 
      73 : 0000 0000 0000 0000 0000 
      74 : 0000 0000 0000 0000 0000 
      75 : 0000 0000 0000 0000 0000 
      76 : 0000 0000 0000 0000 0000 
      77 : 0000 0000 0000 0000 0000 
      78 : 0000 0000 0000 0000 0000 
      79 : 0000 0000 0000 0000 0000 
      7a : 0000 0000 0000 0000 0000 
      7b : 0000 0000 0000 0000 0000 
      7c : 0000 0000 0000 0000 0000 
      7d : 0000 0000 0000 0000 0000 
      7e : 0000 0000 0000 0000 0000 
      7f : 0000 0000 0000 0000 0000 
    8000 : 0000 0000 0000 0000 0000 
    8001 : 0000 0000 0000 0000 0000 
    8002 : 0000 0000 0000 0000 0000 
    8003 : 0000 0000 0000 0000 0000 
    8004 : 0000 0000 0000 0000 0000 
    8005 : 0000 0000 0000 0000 0000 
    8006 : 0000 0000 0000 0000 0000 
    8007 : 0000 0000 0000 0000 0000 
    8008 : 0000 0000 0000 0000 0000 
    8009 : 0000 0000 0000 0000 0000 
    800a : 0000 0000 0000 0000 0000 
    800b : 0000 0000 0000 0000 0000 
    800c : 0000 0000 0000 0000 0000 
    800d : 0000 0000 0000 0000 0000 
    800e : 0000 0000 0000 0000 0000 
    800f : 0000 0000 0000 0000 0000 
    8010 : 0000 0000 0000 0000 0000 
    8011 : 0000 0000 0000 0000 0000 
    8012 : 0000 0000 0000 0000 0000 
    8013 : 0000 0000 0000 0000 0000 
    8014 : 0000 0000 0000 0000 0000 
    8015 : 0000 0000 0000 0000 0000 
    8016 : 0000 0000 0000 0000 0000 
    8017 : e000 e000 e000 e000 e000 
    8018 : 0000 0000 0000 0000 0000 
    8019 : 0000 0000 0000 0000 0000 
    801a : 392a 392a 392a 392a 392a 
    801b : 0000 0000 0000 0000 0000 
    801c : 0000 0000 0000 0000 0000 
    801d : 0000 0000 0000 0000 0000 
    801e : 00c0 00c0 00c0 00c0 00c0 
    801f : 0000 0000 0000 0000 0000 
    8020 : 0000 0000 0000 0000 0000 
    8021 : 0000 0000 0000 0000 0000 
    8022 : 0000 0000 0000 0000 0000 
    8023 : 0000 0000 0000 0000 0000 
    8024 : 0d10 0d10 0d10 0d10 0d10 
    8025 : 0d0d 0d0d 0d0d 0d0d 0d0d 
    8026 : 0a0a 0a0a 0a0a 0a0a 0a0a 
    8027 : 8a05 8a05 8a05 8a05 8a05 
    8028 : 001f 001f 001f 001f 001f 
    8029 : 0000 0000 0000 0000 0000 
    802a : 0000 0000 0000 0000 0000 
    802b : 0000 0000 0000 0000 0000 
    802c : 0000 0000 0000 0000 0000 
    802d : 0000 0000 0000 0000 0000 
    802e : 0000 0000 0000 0000 0000 
    802f : 0000 0000 0000 0000 0000 
    8030 : 190f 2a2b 190f 190f 190f 
    8031 : 0e05 221b 0e05 0e05 0e05 
    8032 : 0008 0008 0008 0008 0008 
    8033 : 0400 0400 0400 0400 0400 
    8034 : 0000 fe00 0000 0000 0000 
    8035 : 0000 0000 0000 0000 0000 
    8036 : 0000 0000 0000 0000 0000 
    8037 : 0000 0000 0000 0000 0000 
    8038 : 005c 0000 0000 0000 0000 
    8039 : 0cb9 0cb9 0cb9 0cb9 0cb9 
    803a : 08a1 08a1 08a1 08a1 08a1 
    803b : 0000 0000 0000 0000 0000 
    803c : 0000 0000 0000 0000 0000 
    803d : 0000 0000 0000 0000 0000 
    803e : 0000 0000 0000 0000 0000 
    803f : 0000 0000 0000 0000 0000 
    8040 : 0000 0000 0000 0000 0000 
    8041 : 0000 0000 0000 0000 0000 
    8042 : 0000 0000 0000 0000 0000 
    8043 : 0000 0000 0000 0000 0000 
    8044 : 0000 0000 0000 0000 0000 
    8045 : 0000 0000 0000 0000 0000 
    8046 : 0000 0000 0000 0000 0000 
    8047 : 0000 0000 0000 0000 0000 
    8048 : 0000 0000 0000 0000 0000 
    8049 : 0000 0000 0000 0000 0000 
    804a : 0000 0000 0000 0000 0000 
    804b : 00f0 00f0 00f0 00f0 00f0 
    804c : 0007 0007 0007 0007 0007 
    804d : 0000 0000 0000 0000 0000 
    804e : 0000 0000 0000 0000 0000 
    804f : 0000 0000 0000 0000 0000 
    8050 : 0000 0000 0000 0000 0000 
    8051 : 0000 0000 0000 0000 0000 
    8052 : 0000 0000 0000 0000 0000 
    8053 : 0000 0000 0000 0000 0000 
    8054 : 0000 0000 0000 0000 0000 
    8055 : 0000 0000 0000 0000 0000 
    8056 : 0000 0000 0000 0000 0000 
    8057 : 0000 0000 0000 0000 0000 
    8058 : 0000 0000 0000 0000 0000 
    8059 : 0000 0000 0000 0000 0000 
    805a : 0000 0000 0000 0000 0000 
    805b : 0000 0000 0000 0000 0000 
    805c : 0000 0000 0000 0000 0000 
    805d : 0000 0000 0000 0000 0000 
    805e : 0000 0000 0000 0000 0000 
    805f : 0000 0000 0000 0000 0000 
    8060 : 0000 0000 0000 0000 0000 
    8061 : 0000 0000 0000 0000 0000 
    8062 : 0000 0000 0000 0000 0000 
    8063 : 0000 0000 0000 0000 0000 
    8064 : 0000 0000 0000 0000 0000 
    8065 : 0000 0000 0000 0000 0000 
    8066 : 0000 0000 0000 0000 0000 
    8067 : 0000 0000 0000 0000 0000 
    8068 : 0000 0000 0000 0000 0000 
    8069 : 0000 0000 0000 0000 0000 
    806a : 0000 0000 0000 0000 0000 
    806b : 0000 0000 0000 0000 0000 
    806c : 0000 0000 0000 0000 0000 
    806d : 0000 0000 0000 0000 0000 
    806e : 0000 0000 0000 0000 0000 
    806f : 0000 0000 0000 0000 0000 
    8070 : 0000 0000 0000 0000 0000 
    8071 : 0000 0000 0000 0000 0000 
    8072 : 0000 0000 0000 0000 0000 
    8073 : 0000 0000 0000 0000 0000 
    8074 : 0000 0000 0000 0000 0000 
    8075 : 0000 0000 0000 0000 0000 
    8076 : 0000 0000 0000 0000 0000 
    8077 : 0000 0000 0000 0000 0000 
    8078 : 0000 0000 0000 0000 0000 
    8079 : 0000 0000 0000 0000 0000 
    807a : 0000 0000 0000 0000 0000 
    807b : 0000 0000 0000 0000 0000 
    807c : 0000 0000 0000 0000 0000 
    807d : 0000 0000 0000 0000 0000 
    807e : 0000 0000 0000 0000 0000 
    807f : 0000 0000 0000 0000 0000 
    
    ### L2SW ###
    
    ADDR : +0       +4       +8       +c       
    -----+------------------------------------
       0 : 00001302 80000080 01000000 06000000 
      10 : 002613a0 f0107650 00002586 00003f1f 
      20 : 3f000c00 0001008b 00000000 00000000 
      30 : 80000700 00000000 0f000000 00000000 
      40 : 20700aaa 00000000 000088a8 00000000 
      50 : cc36cc36 ca36ca36 c936c936 03ffff00 
      60 : 00000001 00000000 00000000 00000000 
      70 : b00ee060 03707f07 000005ee 0000004e 
      80 : 00001280 00001ffe 00001280 00001280 
      90 : 00001280 0000004e 00000000 00000000 
      a0 : 00000000 00000000 00000000 00000000 
      b0 : 00000000 00000000 00000000 00000608 
      c0 : 00000000 00000000 80901040 00000000 
      d0 : fffbff7e 00000001 00000100 000303ff 
      e0 : c74164de 
    
     100 : 00000000 00000000 00000000 00000000 
     110 : 00000000 00000000 00000000 00000000 
     120 : 00240024 00000000 00240024 00000000 
     130 : 00110011 00000000 00240024 00000000 
     140 : 00240024 00000000 00240024 00000000 
     150 : 00240024 00000000 00240024 00000000 
     160 : 00240024 00000000 00240024 
    
     200 : 00000001 00005000 00400040 00000000 
     210 : 00000000 00000000 00000000 00000000 
     220 : 00000000 00000000 00000000 00000000 
     230 : 00000000 00000000 00000000 00000000 
     240 : 00000000 00000000 00000000 00000000 
     250 : 00000000 00000000 00000000 00000000 
     260 : 00000000 20000000 00000000 00000000 
     270 : 0000000f 
    
     400 : 00000000 00000000 00000000 00000000 
     410 : 00000000 00000000 00000000 00000000 
     420 : 00010001 00003040 00020001 00003040 
     430 : 00010001 00003040 00010001 00003040 
     440 : 00010001 00003040 00010001 00003040 
     450 : 00020001 00003040 
    
     600 : 00000000 00000000 00000000 00000000 
     610 : 00000000 00000000 d0e8002b 00000000 
     620 : 001000f0 007f7f7f 00000000 00000000 
     630 : 00000000 11111111 22222222 33333333 
     640 : 44444444 55555555 66666666 77777777 
     650 : 76543210 00000000 00000000 00000000 
     660 : 0014003c 00000018 00007000 00140040 
     670 : 00000018 00007000 00140039 00000018 
     680 : 00007000 00140035 00000018 00007000 
     690 : 0014002d 00000018 00007000 0014001d 
     6a0 : 00000018 00007000 00140002 00000018 
     6b0 : 00007000 00000000 00000000 00000000 
     6c0 : 00000000 00000000 00000000 00000000 
     6d0 : 00000000 00000000 00000000 00000000 
     6e0 : 00000000 00000000 00000000 00000000 
     6f0 : 00000000 00000000 00000000 00000000 
     700 : 00000000 00000000 00000000 00000000 
     710 : ffffffff ffffffff ffffffff 
    
     800 : 01200188 00000000 007f000e 00000000 
     810 : 54332201 33221100 00000000 00000000 
     820 : 00000000 00000000 00000000 00000000 
     830 : 10841041 00041041 00041041 00041041 
     840 : 00041041 10841041 10841041 00000000 
     850 : 00000000 00000000 00000000 00000000 
     860 : 00000000 00000000 00000000 00000000 
     870 : 00000000 00000000 00000000 00000000 
     880 : 00000000 00000000 00000000 00000000 
     890 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff 
     8a0 : 7fff7fff 7fff7fff 00000000 00000002 
     8b0 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff 
     8c0 : 7fff7fff 7fff7fff 00000000 00000002 
     8d0 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff 
     8e0 : 7fff7fff 7fff7fff 00000000 00000002 
     8f0 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff 
     900 : 7fff7fff 7fff7fff 00000000 00000002 
     910 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff 
     920 : 7fff7fff 7fff7fff 00000000 00000002 
     930 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff 
     940 : 7fff7fff 7fff7fff 00000000 00000002 
     950 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff 
     960 : 7fff7fff 7fff7fff 00000000 00000002 
     970 : 28000000 000001c0 28000000 000001c2 
     980 : 28000000 000001c2 28000000 000001c2 
     990 : 28000000 000001c2 28000000 000001c2 
     9a0 : 28000000 000001c0 00000000 00000000 
     9b0 : 003a004a 003a004a 003a004a 003a004a 
     9c0 : 003a004a 003a004a 003a004a 00000000 
     9d0 : 00000000 00000000 00000000 00000000 
     9e0 : 00000000 00000000 00000000 00000000 
     9f0 : 00000000 00000000 00000000 00000000 
     a00 : 00007fff 00047fff 00007fff 00047fff 
     a10 : 00007fff 00047fff 00007fff 00047fff 
     a20 : 00007fff 00047fff 00007fff 00047fff 
     a30 : 00007fff 00047fff 00007fff 00047fff 
     a40 : 00007fff 00047fff 00007fff 00047fff 
     a50 : 00007fff 00047fff 00007fff 00047fff 
     a60 : 00007fff 00047fff 00007fff 00047fff 
     a70 : 00007fff 00047fff 00007fff 00047fff 
     a80 : 00007fff 00047fff 00007fff 00047fff 
     a90 : 00007fff 00047fff 00007fff 00047fff 
     aa0 : 00007fff 00047fff 00007fff 00047fff 
     ab0 : 00007fff 00047fff 00007fff 00047fff 
     ac0 : 00007fff 00047fff 00007fff 00047fff 
     ad0 : 00007fff 00047fff 00007fff 00047fff 
     ae0 : 00007fff 00047fff 00007fff 00047fff 
     af0 : 00007fff 00047fff 00007fff 00047fff 
     b00 : 18407fff 00047fff 00000000 00000000 
     b10 : 18407fff 00047fff 00000000 00000000 
     b20 : 18407fff 00047fff 00000000 00000000 
     b30 : 18407fff 00047fff 00000000 00000000 
     b40 : 18407fff 00047fff 00000000 00000000 
     b50 : 18407fff 00047fff 00000000 00000000 
     b60 : 18407fff 00047fff 00000000 00000000 
     b70 : 00012345 
    
     c00 : 00000000 00000000 00000000 00000000 
     c10 : 00000000 00000000 00000000 00000000 
     c20 : 00000000 00000000 00000000 00000000 
     c30 : 00000000 05f002ce 00000000 00000000 
     c40 : 00000000 00000000 00000000 00000000 
     c50 : 00000000 00000000 00000000 00000000 
     c60 : 00000000 00000000 00000000 00000000 
     c70 : 00010001 00010001 00010001 00000001 
     c80 : 03333333
    

Kernel

パスワードが掛けられておりログインできないため、一部failsafeモードを利用。

  • cat /proc/mtd

    root@(none):/# cat /proc/mtd
    dev:    size   erasesize  name
    mtd0: 00020000 00010000 "SBL1"
    mtd1: 00020000 00010000 "MIBIB"
    mtd2: 00040000 00010000 "SBL2"
    mtd3: 00080000 00010000 "SBL3"
    mtd4: 00010000 00010000 "DDRCONFIG"
    mtd5: 00010000 00010000 "SSD"
    mtd6: 00080000 00010000 "TZ"
    mtd7: 00080000 00010000 "RPM"
    mtd8: 00080000 00010000 "APPSBL"
    mtd9: 00010000 00010000 "APPSBLENV"
    mtd10: 00030000 00010000 "PRODUCTDATA"
    mtd11: 00040000 00010000 "ART"
    mtd12: 00040000 00010000 "TP"
    mtd13: 00500000 00010000 "TINY"
    mtd14: 00200000 00010000 "kernel"
    mtd15: 015a0000 00010000 "rootfs"
    mtd16: 00b50000 00010000 "rootfs_data"
    

  • bootlog

    U-Boot 2012.07 [Standard IPQ806X.LN,local] (Mar 26 2015 - 13:53:09)
    
    smem ram ptable found: ver: 0 len: 5
    DRAM:  491 MiB
    NAND:  ipq_nand: unknown NAND device manufacturer: 0 device: 0
    ipq_nand: failed to identify device
    SF: Detected S25FL256S with page size 64 KiB, total 32 MiB
    ipq_spi: page_size: 0x100, sector_size: 0x10000, size: 0x2000000
    32 MiB
    MMC:   
    *** Warning - bad CRC, using default environment
    
    PCI0 Link Intialized
    PCI1 Link Intialized
    In:    serial
    Out:   serial
    Err:   serial
    PRODUCTDATA CRC Verify OK.
    Net:   MAC1 addr:a4:12:42:a2:d9:a5
    athrs17_reg_init: complete
    athrs17_vlan_config ...done
    S17c init  done
    MAC2 addr:a4:12:42:a2:d9:a4
    eth0, eth1
    post start
    SF: Detected S25FL256S with page size 64 KiB, total 32 MiB
    DRAM Test ..... PASS
    Timer test .... PASS
    FLASH CHKSUM .. PASS
    LAN Test ...... 
    LoopBack count 0 .. 
    PASS
    Package TYPE = 0x01
    post success
    now booting auto ...
    MMC Device 0 not found
    MMC Device 0 not found
    
    Loading from nand1, offset 0x860000
       Image Name:   Linux-3.4.103
       Image Type:   ARM Linux Kernel Image (uncompressed)
       Data Size:    1829032 Bytes = 1.7 MiB
       Load Address: 41508000
       Entry Point:  41508000
    Automatic boot of image at addr 0x44000000 ...
       Image Name:   Linux-3.4.103
       Image Type:   ARM Linux Kernel Image (uncompressed)
       Data Size:    1829032 Bytes = 1.7 MiB
       Load Address: 41508000
       Entry Point:  41508000
       Verifying Checksum ... OK
       Loading Kernel Image ... OK
    OK
    info: "mtdparts" not set
    Using machid 0x1260 from environment
    
    Starting kernel ...
    
    [    0.000000] Booting Linux on physical CPU 0
    [    0.000000] Linux version 3.4.103 (xxxxx@siznecatg142007) (gcc version 4.6.3 20120201 (prerelease) (Linaro GCC 4.6-2012.02) ) #1 SMP PREEMPT Thu Oct 8 12:58:12 JST 2015
    [    0.000000] CPU: ARMv7 Processor [512f04d0] revision 0 (ARMv7), cr=10c5387d
    [    0.000000] CPU: PIPT / VIPT nonaliasing data cache, PIPT instruction cache
    [    0.000000] Machine: Qualcomm Atheros AP148 reference board
    [    0.000000] msm_reserve_memory: 0x44600000, 0x200000
    [    0.000000] memory pool 3 (start 5fc00000 size 400000) initialized
    [    0.000000] Memory policy: ECC disabled, Data cache writealloc
    [    0.000000] smem_find(137, 80): wrong size 72
    [    0.000000] socinfo_init: v6, id=202, ver=2.0, raw_id=2064, raw_ver=2064, hw_plat=0,  hw_plat_ver=65536
    [    0.000000]  accessory_chip=0 hw_plat_subtype=0
    [    0.000000] PERCPU: Embedded 8 pages/cpu @c0c63000 s10496 r8192 d14080 u32768
    [    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 123178
    [    0.000000] Kernel command line: console=ttyHSL1,115200n8 root=mtd:rootfs rootfstype=squashfs reboot=0
    [    0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
    [    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
    [    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
    [    0.000000] Memory: 49MB 436MB = 485MB total
    [    0.000000] Memory: 483460k/489604k available, 13180k reserved, 0K highmem
    [    0.000000] Virtual kernel memory layout:
    [    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
    [    0.000000]     fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
    [    0.000000]     vmalloc : 0xdf000000 - 0xff000000   ( 512 MB)
    [    0.000000]     lowmem  : 0xc0000000 - 0xdeb00000   ( 491 MB)
    [    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
    [    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
    [    0.000000]       .text : 0xc0008000 - 0xc0514000   (5168 kB)
    [    0.000000]       .init : 0xc0600000 - 0xc0702900   (1035 kB)
    [    0.000000]       .data : 0xc0704000 - 0xc079e870   ( 619 kB)
    [    0.000000]        .bss : 0xc079e894 - 0xc085fbe8   ( 773 kB)
    [    0.000000] SLUB: Genslabs=11, HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
    [    0.000000] Preemptible hierarchical RCU implementation.
    [    0.000000] NR_IRQS:1689
    [    0.000000] sched_clock: 32 bits at 32kHz, resolution 31240ns, wraps every 134175798ms
    [    0.000000] Console: colour dummy device 80x30
    [    0.150484] Calibrating delay using timer specific routine.. 12.55 BogoMIPS (lpj=62798)
    [    0.150515] pid_max: default: 32768 minimum: 301
    [    0.150984] Mount-cache hash table entries: 512
    [    0.152421] CPU: Testing write buffer coherency: ok
    [    0.152639] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
    [    0.152671] Setting up static identity map for 0x4187e810 - 0x4187e898
    [    0.154951] CPU1: Booted secondary processor
    [    0.155014] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
    [    0.155107] Brought up 2 CPUs
    [    0.155107] SMP: Total of 2 processors activated (25.11 BogoMIPS).
    [    0.171540] dummy: 
    [    0.172227] NET: Registered protocol family 16
    [    0.172977] AXI: msm_bus_fabric_init_driver(): msm_bus_fabric_init_driver
    [    0.175320] meminfo_init: smem ram ptable found: ver: 0 len: 5
    [    0.175351] Found 1 memory banks grouped into 8 memory regions
    [    0.175632] gpiochip_add: registered GPIOs 0 to 151 on device: msmgpio
    [    0.176257] smem_find(137, 80): wrong size 72
    [    0.176288] socinfo_init: v6, id=202, ver=2.0, raw_id=2064, raw_ver=2064, hw_plat=0,  hw_plat_ver=65536
    [    0.176288]  accessory_chip=0 hw_plat_subtype=0
    [    0.176351] msm_rpm_init: RPM firmware 3.0.16777342
    [    0.184192] clk_tbl_nss - loaded
    [    0.213027] msm_dmov_memcpy_init: Success
    [    0.220368] sps:BAM 0x12244000 enabled: ver:0x5, number of pipes:20
    [    0.220368] sps:BAM 0x12244000 is registered.
    [    0.220618] sps:sps is ready.
    [    0.261043] msm_pcie_setup: link initialized
    [    0.261418] PCI host bridge to bus 0000:00
    [    0.261449] pci_bus 0000:00: root bus resource [mem 0x08000000-0x0fefffff]
    [    0.261949] PCI: bus0: Fast back to back transfers disabled
    [    0.261980] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
    [    0.262699] PCI: bus1: Fast back to back transfers disabled
    [    0.300999] msm_pcie_setup: link initialized
    [    0.301343] PCI host bridge to bus 0000:02
    [    0.301374] pci_bus 0000:02: root bus resource [mem 0x2e000000-0x31efffff]
    [    0.301843] PCI: bus2: Fast back to back transfers disabled
    [    0.301874] pci 0000:02:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
    [    0.302686] PCI: bus3: Fast back to back transfers disabled
    [    0.421368] msm_pcie_setup: link initialization failed
    [    0.421587] pci 0000:02:00.0: BAR 8: assigned [mem 0x2e000000-0x2e1fffff]
    [    0.421618] pci 0000:03:00.0: BAR 0: assigned [mem 0x2e000000-0x2e1fffff 64bit]
    [    0.421680] pci 0000:02:00.0: PCI bridge to [bus 03-03]
    [    0.421711] pci 0000:02:00.0:   bridge window [mem 0x2e000000-0x2e1fffff]
    [    0.421743] PCI: enabling device 0000:02:00.0 (0140 -> 0143)
    [    0.421836] pci 0000:00:00.0: BAR 8: assigned [mem 0x08000000-0x081fffff]
    [    0.421836] pci 0000:01:00.0: BAR 0: assigned [mem 0x08000000-0x081fffff 64bit]
    [    0.421868] pci 0000:00:00.0: PCI bridge to [bus 01-01]
    [    0.421899] pci 0000:00:00.0:   bridge window [mem 0x08000000-0x081fffff]
    [    0.421961] PCI: enabling device 0000:00:00.0 (0140 -> 0143)
    [    0.443673] bio: create slab  at 0
    [    0.445235] SCSI subsystem initialized
    [    0.447110] spi_qsd spi_qsd.5: master is unqueued, this is deprecated
    [    0.449547] spi_qsd spi_qsd.6: master is unqueued, this is deprecated
    [    0.454514] Switching to clocksource gp_timer
    [    0.474726] NET: Registered protocol family 2
    [    0.484504] IP route cache hash table entries: 4096 (order: 2, 16384 bytes)
    [    0.485035] TCP established hash table entries: 16384 (order: 5, 131072 bytes)
    [    0.485223] TCP bind hash table entries: 16384 (order: 5, 131072 bytes)
    [    0.485410] TCP: Hash tables configured (established 16384 bind 16384)
    [    0.485410] TCP: reno registered
    [    0.485442] UDP hash table entries: 256 (order: 1, 8192 bytes)
    [    0.485473] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
    [    0.485910] NET: Registered protocol family 1
    [    0.488003] smd: register irq failed on wcnss_a11
    [    0.488034] smd: deregistering IRQs
    [    0.488097] SMD: smd_core_platform_init() failed
    [    0.489065] Partition(from smem) SBL1 -- Offset:0 Size:20000
    [    0.489065] Partition(from smem) MIBIB -- Offset:20000 Size:20000
    [    0.489097] Partition(from smem) SBL2 -- Offset:40000 Size:40000
    [    0.489128] Partition(from smem) SBL3 -- Offset:80000 Size:80000
    [    0.489159] Partition(from smem) DDRCONFIG -- Offset:100000 Size:10000
    [    0.489159] Partition(from smem) SSD -- Offset:110000 Size:10000
    [    0.489190] Partition(from smem) TZ -- Offset:120000 Size:80000
    [    0.489222] Partition(from smem) RPM -- Offset:1a0000 Size:80000
    [    0.489222] Partition(from smem) APPSBL -- Offset:220000 Size:80000
    [    0.489253] Partition(from smem) APPSBLENV -- Offset:2a0000 Size:10000
    [    0.489284] Partition(from smem) PRODUCTDATA -- Offset:2b0000 Size:30000
    [    0.489315] Partition(from smem) ART -- Offset:2e0000 Size:40000
    [    0.489347] Partition(from smem) TP -- Offset:320000 Size:40000
    [    0.489378] Partition(from smem) TINY -- Offset:360000 Size:500000
    [    0.489378] Partition(from smem) kernel -- Offset:860000 Size:200000
    [    0.489409] Partition(from smem) rootfs -- Offset:a60000 Size:0
    [    0.489440] get_bootconfig_partition: magic not found
    [    0.506966] acpuclk-ipq806x acpuclk-ipq806x: SPEED BIN: 0
    [    0.506997] acpuclk-ipq806x acpuclk-ipq806x: ACPU PVS: 1
    [    0.513620] acpuclk-ipq806x acpuclk-ipq806x: CPU0: 6 frequencies supported
    [    0.513620] acpuclk-ipq806x acpuclk-ipq806x: CPU1: 6 frequencies supported
    [    0.515370] msm_rpm_log_probe: OK
    [    0.545173] squashfs: version 4.0 (2009/01/31) Phillip Lougher
    [    0.545204] jffs2: version 2.2. (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) © 2001-2006 Red Hat, Inc.
    [    0.547110] msgmni has been set to 944
    [    0.548766] io scheduler noop registered
    [    0.548797] io scheduler deadline registered (default)
    [    0.550671] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
    [    0.553889] msm_serial_hs.0: ttyHS0 at MMIO 0x12490000 (irq = 227) is a MSM HS UART
    [    0.554514] msm_serial_hs module loaded
    [    0.554982] msm_serial_hsl: detected port #1
    [    0.555107] msm_serial_hsl.1: ttyHSL1 at MMIO 0x16340000 (irq = 184) is a MSM
    [    0.556169] msm_serial_hsl: console setup on port #1
    [    1.321743] console [ttyHSL1] enabled
    [    1.325148] msm_serial_hsl: driver initialized
    [    1.334270] ahci ahci.0: forcing PORTS_IMPL to 0x1
    [    1.338206] ahci ahci.0: AHCI 0001.0300 32 slots 1 ports 6 Gbps 0x1 impl platform mode
    [    1.345985] ahci ahci.0: flags: ncq sntf pm led clo only pmp pio slum part ccc apst 
    [    1.355014] scsi0 : ahci_platform
    [    1.357981] ata1: SATA max UDMA/133 mmio [mem 0x29000000-0x2900017f] port 0x100 irq 241
    [    1.367853] m25p80 spi5.0: found s25fl256s1, expected s25fl512s
    [    1.372758] m25p80 spi5.0: s25fl256s1 (32768 Kbytes)
    [    1.378319] Creating 16 MTD partitions on "m25p80":
    [    1.382567] 0x000000000000-0x000000020000 : "SBL1"
    [    1.389253] 0x000000020000-0x000000040000 : "MIBIB"
    [    1.394907] 0x000000040000-0x000000080000 : "SBL2"
    [    1.400718] 0x000000080000-0x000000100000 : "SBL3"
    [    1.406997] 0x000000100000-0x000000110000 : "DDRCONFIG"
    [    1.413620] 0x000000110000-0x000000120000 : "SSD"
    [    1.420024] 0x000000120000-0x0000001a0000 : "TZ"
    [    1.426023] 0x0000001a0000-0x000000220000 : "RPM"
    [    1.432052] 0x000000220000-0x0000002a0000 : "APPSBL"
    [    1.438706] 0x0000002a0000-0x0000002b0000 : "APPSBLENV"
    [    1.445454] 0x0000002b0000-0x0000002e0000 : "PRODUCTDATA"
    [    1.451358] mtdoops: Attached to MTD device 10
    [    1.456544] 0x0000002e0000-0x000000320000 : "ART"
    [    1.462667] 0x000000320000-0x000000360000 : "TP"
    [    1.469009] 0x000000360000-0x000000860000 : "TINY"
    [    1.475288] 0x000000860000-0x000000a60000 : "kernel"
    [    1.481661] 0x000000a60000-0x000002000000 : "rootfs"
    [    1.488066] mtd: partition "rootfs" set to be root filesystem
    [    1.493064] mtd: partition "rootfs_data" created automatically, ofs=14B0000, len=B50000 
    [    1.501155] 0x0000014b0000-0x000002000000 : "rootfs_data"
    [    1.541487] GPIO Bitbanged MDIO: probed
    [    1.551327] cpuidle: using governor ladder
    [    1.554420] cpuidle: using governor menu
    [    1.559418] nf_conntrack version 0.5.0 (7554 buckets, 30216 max)
    [    1.565979] TCP: cubic registered
    [    1.568291] NET: Registered protocol family 17
    [    1.572945] Bridge firewalling registered
    [    1.577475] 8021q: 802.1Q VLAN Support v1.8
    [    1.581005] VFP support v0.3: implementor 51 architecture 64 part 4d variant 2 rev 0
    [    1.588691] Registering SWP/SWPB emulation handler
    [    1.593377] clock_late_init: Removing enables held for handed-off clocks
    [    1.608747] no pmic restart interrupt specified
    [    1.613933] msm_cache_dump_probe: could not register L2 buffer ret = -22.
    [    1.724523] ata1: SATA link down (SStatus 0 SControl 300)
    [    1.754545] VFS: Mounted root (squashfs filesystem) readonly on device 31:15.
    [    1.761230] Freeing init memory: 1032K
    22_board_setup start
    TARGET: restoring /etc done.
    - preinit -
    Press the [f] key and hit [enter] to enter failsafe mode
    - regular preinit -
    [    8.038175] jffs2: notice: (1841) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
    switching to jffs2
    jffs2 not ready yet; using ramdisk
    - init -
    [    9.173289] ssdk_plat_init start
    [    9.175570] Register QCA PHY driver
    [    9.820556] qca-ssdk module init succeeded!
    [   10.039518] NET: Registered protocol family 10
    [   10.646173] usbcore: registered new interface driver usbfs
    [   10.650765] usbcore: registered new interface driver hub
    [   10.656076] usbcore: registered new device driver usb
    [   10.854139] NTFS driver 2.1.30 [Flags: R/O MODULE].
    [   11.058669] htled: device registered with major 248
    [   11.095751] pfmgio: device registered with major 247
    [   11.099718] pfmgio: create /proc/pfmg
    [   11.140331] PPP generic driver version 2.4.2
    [   11.555513] PPP MPPE Compression module registered
    [   11.586191] **********************************************************
    [   11.591502] * Driver    :NSS GMAC Driver for RTL v(3.72a)
    [   11.596907] * Version   :1.0
    [   11.599750] * Copyright :Copyright (c) 2013-2014 The Linux Foundation. All rights reserved.
    [   11.608184] **********************************************************nss_driver - fw of size 352256  bytes copied to load addr: 40000000, nss_id : 0
    [   13.047079] nss_driver - Turbo Support 1
    [   13.051265] bf261ca5: NSS Shaping is enabled, handler id: 0
    [   13.096501] nss_driver - fw of size 5392  bytes copied to load addr: 40800000, nss_id : 1
    [   13.104810] Error - Duplicate Interface CB Registered for interface 75
    [   13.110309] Error - Duplicate Interface CB Registered for interface 78
    [   13.148484] IPv6 over IPv4 tunneling driver
    [   13.166979] nss_macsec init success
    [   13.200031] asf: module license 'Proprietary' taints kernel.
    [   13.204717] Disabling lock debugging due to kernel taint
    [   13.533239] ath_hal: 0.9.17.1 (AR5416, AR9380, WRITE_EEPROM, 11D)
    [   13.545923] ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
    [   13.561699] ath_dfs: Version 2.0.0
    [   13.561699] Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved
    [   13.599593] ath_spectral: Version 2.0.0
    [   13.599593] Copyright (c) 2005-2009 Atheros Communications, Inc. All Rights Reserved
    [   13.610184] SPECTRAL module built on Oct  8 2015 12:33:44
    [   13.641955] ath_tx99: Version 2.0
    [   13.641955] Copyright (c) 2010 Atheros Communications, Inc, All Rights Reserved
    [   13.902967] ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
    [   15.181130] ath_pci:  (Atheros/multi-bss)
    [   15.184161] ath_pci_probe
    [   15.186754] PCI device id is 0040 :0040
    [   15.190659] PCI: enabling device 0000:01:00.0 (0140 -> 0142)
    [   15.196438] ath_pci 0000:01:00.0: ath DEBUG: sc=0xdaf37c00
    [   15.201655] 
    [   15.201655]  ol_ath_pci_configure : num_desired MSI set to 0
    [   15.208840] 
    [   15.208840]  Using PCI Legacy Interrupt
    [   15.214089] chip_id 9 chip_revision 1 
    [   15.218306] 
    [   15.218306]  address 4008f8 data daf73c20 
    [   15.224398] 
    [   15.224398]  address 401e90 data daf73c24 
    [   15.231021] 
    [   15.231021]  address 401e94 data daf73c28 
    [   15.237675] 
    [   15.237675]  address 401eb0 data daf73c2c 
    [   15.244267] 
    [   15.244267]  address 400900 data daf73c2c 
    [   15.250890] 
    [   15.250890]  CLOCK PLL skipped 
    [   15.254514] HIF_PCIDeviceProbed: setting the target pll frac ffffffff intval ffffffff
    [   15.262324] HIF_PCIDeviceProbed: no frac provided, skipping pre-configuring PLL
    [   15.269634] HIF_PCIDeviceProbed: ar900b_20_targ_clk is not provided, skipping pre-configuring PLL
    [   15.278475] 
    [   15.278475]  address 4008cc data daf73c2c 
    [   15.286098] __ol_ath_attach: ath_attach TODO
    [   15.289409] __ol_ath_attach 1741 host_enable 0 nss_nwifi_offload 0
    [   15.295532] __ol_ath_attach: dev name wifi0
    [   15.299656] __ol_ath_attach: WLAN MAC ADDRESS (a4:12:42:a2:d9:a7) ic(db000480)
    [   15.306904] ol_ath_set_default_tgt_config : AC Minfree buffer allocation through module param (umac.ko)
    [   15.316307]  OL_ACBKMinfree : 0
    [   15.319368]  OL_ACBEMinfree : 0
    [   15.322492]  OL_ACVIMinfree : 0
    [   15.325616]  OL_ACVOMinfree : 0
    [   15.328741] ol_ath_attach() BMI inited.
    [   15.332677] ol_ath_attach() BMI Get Target Info.
    [   15.337175] ol_ath_attach() TARGET TYPE: 9 Vers 0x1000000
    [   15.342549] 
    [   15.342549]  CE WAR Disabled
    [   15.347016] NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0
    [   15.352452] ol_ath_attach() configure Target .
    [   15.356825] 
    [   15.356825]  Target Version is 1000000
    [   15.361918] 
    [   15.361918]  Flash Download Address  c0000 
    [   15.367541] ol_transfer_bin_file: flash data file defined
    [   15.372914] Cal location [0]: 00000000
    [   15.376694] 
    [   15.376694]  Wifi0 Select OFFSET 1000
    [   15.400812] qc98xx_verify_checksum: flash checksum passed: 0x293d
    [   15.405935] ol_transfer_bin_file 2918: Download Flash data len 12064
    [   15.412371] Board extended Data download address: 0x0
    [   15.437457] 
    [   15.437457]  Board data initialized
    [   15.441455] Flash download ADDRESS 0xc0000
    [   15.445485] 
    [   15.445485]  Selecting  OTP binary for CHIP Version 1
    [   15.581068] 
    [   15.581068]  First OTP send param 8000
    [   20.199250] ol_ath_download_firmware :First  OTP download and Execute is good  return param 36864
    [   20.207154] 
    [   20.207154] ##Board Id 4
    [   20.211090] 
    [   20.211090] ##CHIP Id 1
    [   20.215089] 
    [   20.215089]  BOARDDATA DOWNLOAD TO address c0000
    [   20.322024] ol_transfer_bin_file: Board data file: AR900B/hw.2/boardData_AR900B_CUS238_5GMipiHigh_v2_004.bin ARXXXX v=0x1
    [   20.340955] Board extended Data download address: 0x0
    [   20.365385] ol_ath_download_firmware: Using 0x1234 for the remainder of init
    [   20.371415] 
    [   20.371415]  Selecting  OTP binary for CHIP Version 1
    [   20.412433] 
    [   20.412433]  Second otp download Param 10000 
    [   25.038800] ol_ath_download_firmware : OTP download and Execute is good 
    [   25.044611] 
    [   25.044611]  FIRMWARE : Beeliner CHIP Version 1
    [   25.059825] ol_swap_seg_alloc: Successfully allocated memory for SWAP size=131072 
    [   25.075538] Swap: bytes_left to copy: fw:16; dma_page:27015
    [   25.080099] Swap: wrong length read:0
    [   25.083723] ol_swap_wlan_memory_expansion: Swap total_bytes copied: 104057 Target address 417688 
    [   25.092689] scn=db000480  target_write_addr=417688 seg_info=dd93b810 
    [   25.099031] ol_transfer_swap_struct:Code swap structure successfully downloaded for bin type =2 
    [   25.107841] bin_filename=AR900B/hw.2/athwlan.bin swap_filename=/lib/firmware/AR900B/hw.2/athwlan.codeswap.bin 
    [   26.719743] ol_ath_attach() Download FW. 
    [   26.722742] ol_ath_attach() HT Create .
    [   26.726585] ol_ath_attach() HIF Claim.
    [   26.730334] ol_ath_attach() BMI Done. 
    [   26.734051] ol_ath_attach() WMI attached. wmi_handle db0d0000 
    [   26.739862] +HWT
    [   26.744611] CE_recv_buf_enqueue 809 Populate last entry 512 for CE 5
    [   26.749921] CE_recv_buf_enqueue 818 CE 5 wi 511 dest_ptr 0x5bf57040 nbytes 0 recv_ctxt 0xdaf77300
    [   26.759231] Target:db118800 HTC Service:0x0001, ULpipe:0 DLpipe:1 id:0 Ready
    [   26.765854] -HWT
    [   26.767635] 
    [   26.767635] 
    [   26.773539] Target:db118800 HTC Service:0x0300, ULpipe:4 DLpipe:5 id:1 Ready
    [   26.780349] HTC Service:0x0300 ep:1 TX flow control disabled
    [   26.787597] CE_pkt_dl_len_set CE 4 Pkt download length 64
    [   26.792002] ol_txrx_pdev_attach: 1424 tx desc's allocated ; range starts from d9f70000
    [   26.800124] Target:db118800 HTC Service:0x0100, ULpipe:3 DLpipe:2 id:2 Ready
    [   26.806997] HTC Service:0x0100 ep:2 TX flow control disabled
    [   26.813339] wmi_service_ready_event_rx:  WMI UNIFIED SERVICE READY event 
    [   26.819337] num_rf_chain : 00000004
    [   26.822774] ht_cap_info: : 0000085b
    [   26.826273] vht_cap_info : 339b79b2
    [   26.829709] vht_supp_mcs : 0000ffea
    [   26.833208] ol_ath_service_ready_event: tt_support: 1
    [   26.838238] Peer Caching Enabled ; num_peers = 528, num_active_peers = 66 num_tids = 132, num_vdevs = 16
    [   26.847703] idx 0 req 1  num_units 0 num_unit_info 2 unit size 1296 actual units 529 
    [   26.855982] idx 1 req 2  num_units 1 num_unit_info 4 unit size 256 actual units 67 
    [   26.863167] idx 2 req 3  num_units 1 num_unit_info 4 unit size 1024 actual units 67 
    [   26.870946] idx 3 req 4  num_units 1 num_unit_info 4 unit size 4096 actual units 67 
    [   26.878787] idx 4 req 6  num_units 35 num_unit_info 0 unit size 3072 actual units 35 
    [   26.886472] idx 5 req 7  num_units 1 num_unit_info 0 unit size 6144 actual units 1 
    [   26.894064] idx 6 req 5  num_units 0 num_unit_info 2 unit size 1628 actual units 529 
    [   26.902249] chunk 0 len 685584 requested ,ptr  0x5b500000 
    [   26.907372] chunk 1 len 17152 requested ,ptr  0x5b468000 
    [   26.912714] chunk 2 len 68608 requested ,ptr  0x5b4c0000 
    [   26.918088] chunk 3 len 274432 requested ,ptr  0x5b600000 
    [   26.923555] chunk 4 len 107520 requested ,ptr  0x5b4e0000 
    [   26.929053] chunk 5 len 6144 requested ,ptr  0x5e880000 
    [   26.934333] chunk 6 len 861212 requested ,ptr  0x5b700000 
    [   26.994657] wmi_ready_event_rx:  WMI UNIFIED READY event 
    [   26.999062] ol_ath_connect_htc() WMI is ready
    [   27.003373] ol_ath_set_host_app_area TODO
    [   27.007403] target uses HTT version 2.1; host uses 2.1
    [   27.017525] ol_ath_attach() connect HTC. 
    [   27.020493] ol_regdmn_start: reg-domain param: regdmn=0, countryName=, wModeSelect=FFFFFFFF, netBand=FFFFFFFF, extendedChanMode=0.
    [   27.032271] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150
    [   27.039362] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0
    [   27.046141] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0
    [   27.052983] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0
    [   27.059918] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150
    [   27.066947] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x10080
    [   27.074289] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20080
    [   27.081630] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40080
    [   27.089065] Add VHT80 channel: 5210
    [   27.092471] Add VHT80 channel: 5290
    [   27.095938] Add VHT80 channel: 5530
    [   27.099406] Add VHT80 channel: 5610
    [   27.102874] Skipping VHT80 channel 5660
    [   27.106716] Skipping VHT80 channel 5680
    [   27.110527] Skipping VHT80 channel 5700
    [   27.114557] ol_ath_phyerr_attach: called
    [   27.118306] OL Resmgr Init-ed
    [   27.121243] ieee80211_bsteering_attach: Band steering initialized
    [   27.127303] ol_if_spectral_setup
    [   27.130490] SPECTRAL : get_capability not registered
    [   27.135488] HAL_CAP_PHYDIAG : Capable
    [   27.139081] SPECTRAL : Need to fix the capablity check for RADAR (spectral_attach : 231)
    [   27.147172] SPECTRAL : get_capability not registered
    [   27.152108] HAL_CAP_RADAR   : Capable
    [   27.155763] SPECTRAL : Need to fix the capablity check for SPECTRAL
    [   27.155763]  (spectral_attach : 236)
    [   27.165573] SPECTRAL : get_capability not registered
    [   27.170509] HAL_CAP_SPECTRAL_SCAN : Capable
    [   27.174695] SPECTRAL : get_tsf64 not registered
    [   27.179256] spectral_init_netlink 65 NULL SKB
    [   27.183536] Green-AP : Green-AP : Attached
    [   27.183536] 
    [   27.189159] Green-AP : Attached
    [   27.192189] rate power table override is only supported for AR98XX
    [   27.198437] ol_ath_smart_ant_attach: Hardware doest not support Smart Antenna.
    [   27.205623] ieee80211com_init_netlink: 3223: Wifipos 1st Netlink socket created:daf37000
    [   27.213683] ol_if_dfs_setup: called 
    [   27.217213] ol_if_dfs_attach: called; ptr=da191984, radar_info=daf73bd8
    [   27.224023] ol_ath_rtt_meas_report_attach: called
    [   27.228741] ol_ath_attach() UMAC attach . 
    [   27.232583] ol_if_dfs_configure: called
    [   27.236457] ol_if_dfs_configure: MKK4 domain
    [   27.240643] ol_if_dfs_disable: called
    [   27.244329] ol_ath_attach: Calling ol_if_dfs_configure
    [   27.249422] 
    [   27.249422]  BURSTING enabled by default
    [   27.254920] osif_wrap_attach:400 osif wrap attached
    [   27.259668] osif_wrap_devt_init:361 osif wrap dev table init done
    [   27.265760]  Wrap Attached: Wrap_com =ddad4200 ic->ic_wrap_com=ddad4200 &wrap_com->wc_devt=ddad4200 
    [   27.274851] __ol_ath_attach: init tx/rx TODO
    [   27.279162] __ol_ath_attach: needed_headroom reservation 44
    [   27.285160] ol_ath_thermal_mitigation_attach: ++
    [   27.289284] ol_ath_thermal_mitigation_attach: --
    [   27.293939] ath_pci_probe
    [   27.296469] PCI device id is 0040 :0040
    [   27.300281] PCI: enabling device 0000:03:00.0 (0140 -> 0142)
    [   27.306185] ath_pci 0000:03:00.0: ath DEBUG: sc=0xdd946e00
    [   27.311402] 
    [   27.311402]  ol_ath_pci_configure : num_desired MSI set to 0
    [   27.318556] 
    [   27.318556]  Using PCI Legacy Interrupt
    [   27.323805] chip_id 9 chip_revision 1 
    [   27.327803] 
    [   27.327803]  address 4008f8 data daf73c20 
    [   27.334114] 
    [   27.334114]  address 401e90 data daf73c24 
    [   27.340768] 
    [   27.340768]  address 401e94 data daf73c28 
    [   27.347391] 
    [   27.347391]  address 401eb0 data daf73c2c 
    [   27.353951] 
    [   27.353951]  address 400900 data daf73c2c 
    [   27.360574] 
    [   27.360574]  CLOCK PLL skipped 
    [   27.364167] HIF_PCIDeviceProbed: setting the target pll frac ffffffff intval ffffffff
    [   27.372008] HIF_PCIDeviceProbed: no frac provided, skipping pre-configuring PLL
    [   27.379287] HIF_PCIDeviceProbed: ar900b_20_targ_clk is not provided, skipping pre-configuring PLL
    [   27.388253] 
    [   27.388253]  address 4008cc data daf73c2c 
    [   27.395720] __ol_ath_attach: ath_attach TODO
    [   27.398969] __ol_ath_attach 1741 host_enable 0 nss_nwifi_offload 0
    [   27.405185] __ol_ath_attach: dev name wifi1
    [   27.409309] __ol_ath_attach: WLAN MAC ADDRESS (a4:12:42:a2:d9:a6) ic(d9b40480)
    [   27.416526] ol_ath_set_default_tgt_config : AC Minfree buffer allocation through module param (umac.ko)
    [   27.425898]  OL_ACBKMinfree : 0
    [   27.429022]  OL_ACBEMinfree : 0
    [   27.432146]  OL_ACVIMinfree : 0
    [   27.435332]  OL_ACVOMinfree : 0
    [   27.438394] ol_ath_attach() BMI inited.
    [   27.442299] ol_ath_attach() BMI Get Target Info.
    [   27.446829] ol_ath_attach() TARGET TYPE: 9 Vers 0x1000000
    [   27.452202] 
    [   27.452202]  CE WAR Disabled
    [   27.456701] NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0
    [   27.462136] ol_ath_attach() configure Target .
    [   27.466447] 
    [   27.466447]  Target Version is 1000000
    [   27.471540] 
    [   27.471540]  Flash Download Address  c0000 
    [   27.477225] ol_transfer_bin_file: flash data file defined
    [   27.482630] Cal location [1]: 00004000
    [   27.486379] 
    [   27.486379]  Wifi1 Select OFFSET 5000
    [   27.510340] qc98xx_verify_checksum: flash checksum passed: 0xe3e8
    [   27.515432] ol_transfer_bin_file 2918: Download Flash data len 12064
    [   27.521930] Board extended Data download address: 0x0
    [   27.547141] 
    [   27.547141]  Board data initialized
    [   27.551109] Flash download ADDRESS 0xc0000
    [   27.555170] 
    [   27.555170]  Selecting  OTP binary for CHIP Version 1
    [   27.596251] 
    [   27.596251]  First OTP send param 8000
    [   27.738894] [wifi0] FWLOG: [27401] WAL_DBGID_TX_AC_BUFFER_SET ( 0x3, 0x1e, 0x518, 0x518, 0x0 )
    [   27.746454] [wifi0] FWLOG: [27401] WAL_DBGID_TX_AC_BUFFER_SET ( 0x12, 0x1e, 0x518, 0x518, 0x0 )
    [   27.755139] [wifi0] FWLOG: [27401] WAL_DBGID_TX_AC_BUFFER_SET ( 0x45, 0x1e, 0x518, 0x518, 0x0 )
    [   27.763823] [wifi0] FWLOG: [27401] WAL_DBGID_TX_AC_BUFFER_SET ( 0x67, 0x1e, 0x518, 0x518, 0x0 )
    [   32.214401] ol_ath_download_firmware :First  OTP download and Execute is good  return param 38912
    [   32.222274] 
    [   32.222274] ##Board Id 6
    [   32.226241] 
    [   32.226241] ##CHIP Id 1
    [   32.230240] 
    [   32.230240]  BOARDDATA DOWNLOAD TO address c0000
    [   32.236301] ol_transfer_bin_file: Board data file: AR900B/hw.2/boardData_AR900B_CUS240_2GMipiHigh_v2_006.bin ARXXXX v=0x1
    [   32.256138] Board extended Data download address: 0x0
    [   32.280662] ol_ath_download_firmware: Using 0x1234 for the remainder of init
    [   32.286722] 
    [   32.286722]  Selecting  OTP binary for CHIP Version 1
    [   32.327647] 
    [   32.327647]  Second otp download Param 10000 
    [   36.954014] ol_ath_download_firmware : OTP download and Execute is good 
    [   36.959700] 
    [   36.959731]  FIRMWARE : Beeliner CHIP Version 1
    [   36.974914] ol_swap_seg_alloc: Successfully allocated memory for SWAP size=131072 
    [   36.990565] Swap: bytes_left to copy: fw:16; dma_page:27015
    [   36.995126] Swap: wrong length read:0
    [   36.998750] ol_swap_wlan_memory_expansion: Swap total_bytes copied: 104057 Target address 417688 
    [   37.007778] scn=d9b40480  target_write_addr=417688 seg_info=dd93bb10 
    [   37.014026] ol_transfer_swap_struct:Code swap structure successfully downloaded for bin type =2 
    [   37.022836] bin_filename=AR900B/hw.2/athwlan.bin swap_filename=/lib/firmware/AR900B/hw.2/athwlan.codeswap.bin 
    [   38.110871] ol_ath_attach() Download FW. 
    [   38.113901] ol_ath_attach() HT Create .
    [   38.117713] ol_ath_attach() HIF Claim.
    [   38.121493] ol_ath_attach() BMI Done. 
    [   38.125210] ol_ath_attach() WMI attached. wmi_handle da2e0000 
    [   38.130959] +HWT
    [   38.135613] CE_recv_buf_enqueue 809 Populate last entry 512 for CE 5
    [   38.140924] CE_recv_buf_enqueue 818 CE 5 wi 511 dest_ptr 0x5acf1040 nbytes 0 recv_ctxt 0xda154f00
    [   38.150359] Target:db11b000 HTC Service:0x0001, ULpipe:0 DLpipe:1 id:0 Ready
    [   38.156825] -HWT
    [   38.158637] 
    [   38.158637] 
    [   38.164386] Target:db11b000 HTC Service:0x0300, ULpipe:4 DLpipe:5 id:1 Ready
    [   38.171321] HTC Service:0x0300 ep:1 TX flow control disabled
    [   38.178569] CE_pkt_dl_len_set CE 4 Pkt download length 64
    [   38.182974] ol_txrx_pdev_attach: 1424 tx desc's allocated ; range starts from d9500000
    [   38.191159] Target:db11b000 HTC Service:0x0100, ULpipe:3 DLpipe:2 id:2 Ready
    [   38.197875] HTC Service:0x0100 ep:2 TX flow control disabled
    [   38.204279] wmi_service_ready_event_rx:  WMI UNIFIED SERVICE READY event 
    [   38.210246] num_rf_chain : 00000004
    [   38.213714] ht_cap_info: : 0000085b
    [   38.217182] vht_cap_info : 339b79b2
    [   38.220681] vht_supp_mcs : 0000ffea
    [   38.224148] ol_ath_service_ready_event: tt_support: 1
    [   38.229178] Peer Caching Enabled ; num_peers = 528, num_active_peers = 66 num_tids = 132, num_vdevs = 16
    [   38.238644] idx 0 req 1  num_units 0 num_unit_info 2 unit size 1296 actual units 529 
    [   38.246922] idx 1 req 2  num_units 1 num_unit_info 4 unit size 256 actual units 67 
    [   38.254108] idx 2 req 3  num_units 1 num_unit_info 4 unit size 1024 actual units 67 
    [   38.261886] idx 3 req 4  num_units 1 num_unit_info 4 unit size 4096 actual units 67 
    [   38.269759] idx 4 req 6  num_units 35 num_unit_info 0 unit size 3072 actual units 35 
    [   38.277444] idx 5 req 7  num_units 1 num_unit_info 0 unit size 6144 actual units 1 
    [   38.285035] idx 6 req 5  num_units 0 num_unit_info 2 unit size 1628 actual units 529 
    [   38.293189] chunk 0 len 685584 requested ,ptr  0x5ab00000 
    [   38.298313] chunk 1 len 17152 requested ,ptr  0x5a9f8000 
    [   38.303655] chunk 2 len 68608 requested ,ptr  0x5aa40000 
    [   38.309059] chunk 3 len 274432 requested ,ptr  0x5aa80000 
    [   38.314526] chunk 4 len 107520 requested ,ptr  0x5aa60000 
    [   38.319962] chunk 5 len 6144 requested ,ptr  0x5b4d2000 
    [   38.325273] chunk 6 len 861212 requested ,ptr  0x5a400000 
    [   38.387816] wmi_ready_event_rx:  WMI UNIFIED READY event 
    [   38.392221] ol_ath_connect_htc() WMI is ready
    [   38.396532] ol_ath_set_host_app_area TODO
    [   38.400562] target uses HTT version 2.1; host uses 2.1
    [   38.409684] ol_ath_attach() connect HTC. 
    [   38.412683] ol_regdmn_start: reg-domain param: regdmn=0, countryName=, wModeSelect=FFFFFFFF, netBand=FFFFFFFF, extendedChanMode=0.
    [   38.424429] ol_regdmn_init_channels: !avail mode 0x680c (0x2) flags 0x2150
    [   38.431302] ol_regdmn_init_channels: !avail mode 0x680c (0x1) flags 0x140
    [   38.438081] ol_regdmn_init_channels: !avail mode 0x680c (0x20) flags 0xd0
    [   38.444798] ol_regdmn_init_channels: !avail mode 0x680c (0x40) flags 0x150
    [   38.451671] ol_regdmn_init_channels: !avail mode 0x680c (0x1000) flags 0x10100
    [   38.458919] ol_regdmn_init_channels: !avail mode 0x680c (0x8000) flags 0x20100
    [   38.466073] ol_regdmn_init_channels: !avail mode 0x680c (0x10000) flags 0x40100
    [   38.473352] ol_regdmn_init_channels: !avail mode 0x680c (0x20000) flags 0x100100
    [   38.480787] ol_regdmn_init_channels: !avail mode 0x680c (0x40000) flags 0x200100
    [   38.488128] ol_regdmn_init_channels: !avail mode 0x680c (0x80000) flags 0x400100
    [   38.495501] ol_regdmn_init_channels: !avail mode 0x680c (0x100000) flags 0x800100
    [   38.503030] ol_ath_phyerr_attach: called
    [   38.506935] OL Resmgr Init-ed
    [   38.509840] ieee80211_bsteering_attach: Band steering initialized
    [   38.515901] ol_if_spectral_setup
    [   38.519119] SPECTRAL : get_capability not registered
    [   38.524054] HAL_CAP_PHYDIAG : Capable
    [   38.527741] SPECTRAL : Need to fix the capablity check for RADAR (spectral_attach : 231)
    [   38.535770] SPECTRAL : get_capability not registered
    [   38.540706] HAL_CAP_RADAR   : Capable
    [   38.544361] SPECTRAL : Need to fix the capablity check for SPECTRAL
    [   38.544361]  (spectral_attach : 236)
    [   38.554170] SPECTRAL : get_capability not registered
    [   38.559200] HAL_CAP_SPECTRAL_SCAN : Capable
    [   38.563292] SPECTRAL : get_tsf64 not registered
    [   38.567822] spectral_init_netlink 65 NULL SKB
    [   38.572133] Green-AP : Green-AP : Attached
    [   38.572133] 
    [   38.577725] Green-AP : Attached
    [   38.580818] rate power table override is only supported for AR98XX
    [   38.587035] ol_ath_smart_ant_attach: Hardware doest not support Smart Antenna.
    [   38.594220] ieee80211com_init_netlink: Socket already created daf37000
    [   38.600718] ol_if_dfs_setup: called 
    [   38.604248] ol_if_dfs_attach: called; ptr=da151984, radar_info=daf73bd8
    [   38.611090] ol_ath_rtt_meas_report_attach: called
    [   38.615713] ol_ath_attach() UMAC attach . 
    [   38.619650] ol_if_dfs_configure: called
    [   38.623430] ol_if_dfs_configure: MKK4 domain
    [   38.627741] ol_if_dfs_disable: called
    [   38.631365] ol_ath_attach: Calling ol_if_dfs_configure
    [   38.636488] 
    [   38.636488]  BURSTING enabled by default
    [   38.641955] osif_wrap_attach:400 osif wrap attached
    [   38.646735] osif_wrap_devt_init:361 osif wrap dev table init done
    [   38.652796]  Wrap Attached: Wrap_com =dd946000 ic->ic_wrap_com=dd946000 &wrap_com->wc_devt=dd946000 
    [   38.661980] __ol_ath_attach: init tx/rx TODO
    [   38.666166] __ol_ath_attach: needed_headroom reservation 44
    [   38.672133] ol_ath_thermal_mitigation_attach: ++
    [   38.676382] ol_ath_thermal_mitigation_attach: --
    [   38.712652] Initializing Pktlogs for 11ac
    [   38.715713] Initializing Pktlogs for 11ac
    [   38.740549] __sa_init_module 
    [   38.768853] gre: GRE over IPv4 demultiplexor driver
    [   38.779756] ip_gre: GRE over IPv4 tunneling driver
    [   38.812152] bonding: Ethernet Channel Bonding Driver: v3.7.1 (April 27, 2011)
    [   38.833239] htbtn: button registered with major 246
    [   38.837207] htbtn: create /dev/btnu0 gpio=54
    [   38.841424] htbtn: create /dev/btnu1 gpio=16
    [   38.845704] htbtn: create /dev/btnu2 gpio=17
    [   38.856825] htusb: device registered with major 245
    [   38.860793] htusb: create /proc/htusb/port1
    [   38.945017] ip_tables: (C) 2000-2006 Netfilter Core Team
    [   39.017213] NET: Registered protocol family 24
    [   39.130365] [wifi1] FWLOG: [39026] WAL_DBGID_TX_AC_BUFFER_SET ( 0x3, 0x1e, 0x518, 0x518, 0x0 )
    [   39.137956] [wifi1] FWLOG: [39026] WAL_DBGID_TX_AC_BUFFER_SET ( 0x12, 0x1e, 0x518, 0x518, 0x0 )
    [   39.146610] [wifi1] FWLOG: [39026] WAL_DBGID_TX_AC_BUFFER_SET ( 0x45, 0x1e, 0x518, 0x518, 0x0 )
    [   39.155326] [wifi1] 
    [   39.155951] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
    [   39.156044] msm_hsusb_host msm_hsusb_host: unable to find transceiver
    [   39.170571] FWLOG: [39026] WAL_DBGID_TX_AC_BUFFER_SET ( 0x67, 0x1e, 0x518, 0x518, 0x0 )
    [   39.263761] PPTP driver version 0.8.5
    [   39.506279] xt_time: kernel timezone is -0000
    [   39.719306] nf_conntrack_rtsp v0.6.21 loading
    [   39.729553] nf_nat_rtsp v0.6.21 loading
    [   39.753983] ip6_tables: (C) 2000-2006 Netfilter Core Team
    [   39.875601] ipq-dwc3 ipq-dwc3.0: unable to read platform data num of dbm eps
    [   39.982630] xhci-hcd xhci-hcd.0: xHCI Host Controller
    [   39.986816] xhci-hcd xhci-hcd.0: new USB bus registered, assigned bus number 1
    [   39.993939] xhci-hcd xhci-hcd.0: irq 142, io mem 0x11000000
    [   40.000406] hub 1-0:1.0: USB hub found
    [   40.003155] hub 1-0:1.0: 1 port detected
    [   40.007247] xhci-hcd xhci-hcd.0: xHCI Host Controller
    [   40.012089] xhci-hcd xhci-hcd.0: new USB bus registered, assigned bus number 2
    [   40.020087] hub 2-0:1.0: USB hub found
    [   40.023024] hub 2-0:1.0: 1 port detected
    [   40.062324] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
    [   40.092689] uhci_hcd: USB Universal Host Controller Interface driver
    [   40.133708] i2c /dev entries driver
    [   40.437300] ECM init
    [   40.441861] ECM init complete
    [   40.474695] snd_soc_core: Unknown symbol regmap_init_i2c (err 0)
    [   40.550140] snd_soc_ipq_cpu_dai: Unknown symbol snd_soc_unregister_dais (err 0)
    [   40.556513] snd_soc_ipq_cpu_dai: Unknown symbol snd_soc_register_dais (err 0)
    [   40.570103] snd_soc_ipq_lpass_codec: Unknown symbol snd_soc_register_codec (err 0)
    [   40.576819] snd_soc_ipq_lpass_codec: Unknown symbol snd_soc_unregister_codec (err 0)
    [   40.590909] snd_soc_ipq_pcm_spdif: Unknown symbol snd_soc_register_platform (err 0)
    [   40.597719] snd_soc_ipq_pcm_spdif: Unknown symbol snd_soc_set_runtime_hwparams (err 0)
    [   40.605529] snd_soc_ipq_pcm_spdif: Unknown symbol snd_soc_unregister_platform (err 0)
    [   40.619900] snd_soc_ipq_pcm_mi2s: Unknown symbol snd_soc_register_platform (err 0)
    [   40.626647] snd_soc_ipq_pcm_mi2s: Unknown symbol snd_soc_set_runtime_hwparams (err 0)
    [   40.634333] snd_soc_ipq_pcm_mi2s: Unknown symbol snd_soc_unregister_platform (err 0)
    [   40.648578] snd_soc_ipq_pcm_voip: Unknown symbol snd_soc_register_platform (err 0)
    [   40.655326] snd_soc_ipq_pcm_voip: Unknown symbol snd_soc_set_runtime_hwparams (err 0)
    [   40.663011] snd_soc_ipq_pcm_voip: Unknown symbol snd_soc_unregister_platform (err 0)
    [   40.702624] Initializing USB Mass Storage driver...
    [   40.706716] usbcore: registered new interface driver usb-storage
    [   40.712464] USB Mass Storage support registered.
    [   40.748203] Linux video capture interface: v2.00
    [   40.809497] cpia2: V4L-Driver for Vision CPiA2 based cameras v3.0.1
    [   40.815026] usbcore: registered new interface driver cpia2
    [   40.847328] gspca_main: v2.14.0 registered
    [   40.866979] usbcore: registered new interface driver Philips webcam
    [   40.906685] fuse init (API version 7.18)
    [   40.938987] usbcore: registered new interface driver uvcvideo
    [   40.943673] USB Video Class driver (1.1.1)
    cfg055d81
    cfg075d81
    cfg053777
    cfg061ec7
    cfg071ec7
    cfg026cb7
    kernel.panic = 3
    net.ipv4.conf.default.arp_ignore = 1
    net.ipv4.conf.all.arp_ignore = 1
    net.ipv4.ip_forward = 1
    net.ipv4.icmp_echo_ignore_broadcasts = 1
    net.ipv4.icmp_ignore_bogus_error_responses = 1
    net.ipv4.tcp_ecn = 0
    net.ipv4.tcp_fin_timeout = 30
    net.ipv4.tcp_keepalive_time = 120
    net.ipv4.tcp_syncookies = 1
    net.ipv4.tcp_timestamps = 1
    net.ipv4.tcp_sack = 1
    net.ipv4.tcp_dsack = 1
    net.ipv6.conf.all.forwarding = 1
    net.netfilter.nf_conntrack_acct = 1
    net.netfilter.nf_conntrack_checksum = 0
    net.netfilter.nf_conntrack_max = 16384
    net.netfilter.nf_conntrack_tcp_timeout_established = 3600
    net.netfilter.nf_conntrack_udp_timeout = 60
    net.netfilter.nf_conntrack_udp_timeout_stream = 180
    net.bridge.bridge-nf-call-arptables = 0
    net.bridge.bridge-nf-call-ip6tables = 0
    net.bridge.bridge-nf-call-iptables = 0
    [   41.611027] jffs2: notice: (2271) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
    Thu Jan  1 00:00:00 JST 2015
    [   41.661137] udevd[2277]: starting version 173
    pfmg: starting 
    Change root login password
    mode switch: ap
    [   50.810465] ADDRCONF(NETDEV_UP): eth0: link is not ready
    [   51.963074] __sa_exit_module 
    [   51.970290] Suspending Target - with disable_intr set :wifi1 (sc dd946e00)
    [   51.976194] waiting for target paused event from target :wifi1 (sc dd946e00)
    [   51.983286] osif_wrap_devt_detach:378 osif wrap dev table detached
    [   51.989409] osif_wrap_detach:430 osif wrap detached
    [   51.994220] ol_ath_thermal_mitigation_detach: ++
    [   51.998906] ol_ath_thermal_mitigation_detach: --
    [   52.044486] __ol_ath_detach: init tx/rx cleanup TODO
    [   52.048453] ol_if_dfs_teardown: called 
    [   52.052389] ol_ath_phyerr_detach: called
    [   52.056201] ieee80211_bsteering_detach: Band steering terminated
    [   52.063292] CE_fini 2466 Cleaning up HTT Tx CE
    [   52.066729] CE_fini Cleaning up HTT MSG CE(5)
    [   52.071508] ol_tx_me_exit: Already Disabled !!!
    [   52.076788] ol_if_spectral_detach
    [   52.079069] SPECTRAL : Module removed (spectral = d9be6000)
    [   52.084661] Green-AP : Green-AP : Detached
    [   52.084661] 
    [   52.090159] Green-AP : Detached
    [   52.093814] ath_pci_device_reset :(sc dd946e00)
    [   52.097844] Reset Device 
    [   52.106497] ath_pci_remove
    [   52.108184] Suspending Target - with disable_intr set :wifi0 (sc daf37c00)
    [   52.115057] waiting for target paused event from target :wifi0 (sc daf37c00)
    [   52.122086] osif_wrap_devt_detach:378 osif wrap dev table detached
    [   52.128241] osif_wrap_detach:430 osif wrap detached
    [   52.133083] ol_ath_thermal_mitigation_detach: ++
    [   52.137738] ol_ath_thermal_mitigation_detach: --
    [   52.204498] __ol_ath_detach: init tx/rx cleanup TODO
    [   52.208497] ol_if_dfs_teardown: called 
    [   52.212402] ol_ath_phyerr_detach: called
    [   52.216213] ieee80211_bsteering_detach: Band steering terminated
    [   52.223336] CE_fini 2466 Cleaning up HTT Tx CE
    [   52.226804] CE_fini Cleaning up HTT MSG CE(5)
    [   52.231583] ol_tx_me_exit: Already Disabled !!!
    [   52.237644] ol_if_spectral_detach
    [   52.239925] SPECTRAL : Module removed (spectral = da33c000)
    [   52.245548] Green-AP : Green-AP : Detached
    [   52.245548] 
    [   52.251046] Green-AP : Detached
    [   52.254170] 
    [   52.254170]  releasing the socket   (null) and val of ic is db000480
    [   52.262574] ath_pci_device_reset :(sc daf37c00)
    [   52.266510] Reset Device 
    [   52.275164] ath_pci_remove
    [   52.277069] ath_pci: driver unloaded
    [   52.283598] Removing athdebug proc file
    [   52.286441] ath_dev: driver unloaded
    [   52.293002] ath_tx99: driver unloaded
    [   52.298531] ath_spectral: driver unloaded
    [   52.304373] ath_dfs: driver unloaded
    [   52.309840] ath_rate_atheros: driver unloaded
    [   52.316057] ath_hal: driver unloaded
    phy for wifi device wifi1 not found
    [   52.399781] ath_hal: 0.9.17.1 (AR5416, AR9380, WRITE_EEPROM, 11D)
    [   52.414120] ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
    [   52.431208] ath_dfs: Version 2.0.0
    [   52.431208] Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved
    [   52.450203] ath_spectral: Version 2.0.0
    [   52.450203] Copyright (c) 2005-2009 Atheros Communications, Inc. All Rights Reserved
    [   52.460793] SPECTRAL module built on Oct  8 2015 12:33:44
    [   52.474133] ath_tx99: Version 2.0
    [   52.474133] Copyright (c) 2010 Atheros Communications, Inc, All Rights Reserved
    [   52.498719] ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
    [   52.532364] ath_pci:  (Atheros/multi-bss)
    [   52.535426] ath_pci_probe
    [   52.537956] PCI device id is 0040 :0040
    [   52.542018] ath_pci 0000:01:00.0: ath DEBUG: sc=0xddad5a00
    [   52.547266] 
    [   52.547266]  ol_ath_pci_configure : num_desired MSI set to 0
    [   52.554358] 
    [   52.554358]  Using PCI Legacy Interrupt
    [   52.559668] chip_id 9 chip_revision 1 
    [   52.563823] 
    [   52.563823]  address 4008f8 data db581c20 
    [   52.569978] 
    [   52.569978]  address 401e90 data db581c24 
    [   52.576601] 
    [   52.576601]  address 401e94 data db581c28 
    [   52.583192] 
    [   52.583192]  address 401eb0 data db581c2c 
    [   52.589815] 
    [   52.589815]  address 400900 data db581c2c 
    [   52.596407] 
    [   52.596407]  CLOCK PLL skipped 
    [   52.599968] HIF_PCIDeviceProbed: setting the target pll frac ffffffff intval ffffffff
    [   52.607810] HIF_PCIDeviceProbed: no frac provided, skipping pre-configuring PLL
    [   52.615089] HIF_PCIDeviceProbed: ar900b_20_targ_clk is not provided, skipping pre-configuring PLL
    [   52.623930] 
    [   52.623930]  address 4008cc data db581c2c 
    [   52.631583] __ol_ath_attach: ath_attach TODO
    [   52.634832] __ol_ath_attach 1741 host_enable 0 nss_nwifi_offload 0
    [   52.640987] __ol_ath_attach: dev name wifi0
    [   52.645142] __ol_ath_attach: WLAN MAC ADDRESS (a4:12:42:a2:d9:a7) ic(db140480)
    [   52.652327] ol_ath_set_default_tgt_config : AC Minfree buffer allocation through module param (umac.ko)
    [   52.661730]  OL_ACBKMinfree : 0
    [   52.664854]  OL_ACBEMinfree : 0
    [   52.667978]  OL_ACVIMinfree : 0
    [   52.671102]  OL_ACVOMinfree : 0
    [   52.674226] ol_ath_attach() BMI inited.
    [   52.678163] ol_ath_attach() BMI Get Target Info.
    [   52.682661] ol_ath_attach() TARGET TYPE: 9 Vers 0x1000000
    [   52.688097] 
    [   52.688097]  CE WAR Disabled
    [   52.692502] NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0
    [   52.697969] ol_ath_attach() configure Target .
    [   52.702280] 
    [   52.702280]  Target Version is 1000000
    [   52.707403] 
    [   52.707403]  Flash Download Address  c0000 
    [   52.713027] ol_transfer_bin_file: flash data file defined
    [   52.718431] Cal location [0]: 00000000
    [   52.722180] 
    [   52.722180]  Wifi0 Select OFFSET 1000
    [   52.746235] qc98xx_verify_checksum: flash checksum passed: 0x293d
    [   52.751358] ol_transfer_bin_file 2918: Download Flash data len 12064
    [   52.757856] Board extended Data download address: 0x0
    [   52.782880] 
    [   52.782880]  Board data initialized
    [   52.786910] Flash download ADDRESS 0xc0000
    [   52.790877] 
    [   52.790877]  Selecting  OTP binary for CHIP Version 1
    [   52.833052] 
    [   52.833052]  First OTP send param 8000
    [   57.451296] ol_ath_download_firmware :First  OTP download and Execute is good  return param 36864
    [   57.459169] 
    [   57.459169] ##Board Id 4
    [   57.463136] 
    [   57.463136] ##CHIP Id 1
    [   57.467135] 
    [   57.467135]  BOARDDATA DOWNLOAD TO address c0000
    [   57.473227] ol_transfer_bin_file: Board data file: AR900B/hw.2/boardData_AR900B_CUS238_5GMipiHigh_v2_004.bin ARXXXX v=0x1
    [   57.493095] Board extended Data download address: 0x0
    [   57.517681] ol_ath_download_firmware: Using 0x1234 for the remainder of init
    [   57.523711] 
    [   57.523711]  Selecting  OTP binary for CHIP Version 1
    [   57.565229] 
    [   57.565229]  Second otp download Param 10000 
    [   62.191658] ol_ath_download_firmware : OTP download and Execute is good 
    [   62.197375] 
    [   62.197375]  FIRMWARE : Beeliner CHIP Version 1
    [   62.212714] ol_swap_seg_alloc: Successfully allocated memory for SWAP size=131072 
    [   62.228366] Swap: bytes_left to copy: fw:16; dma_page:27015
    [   62.232927] Swap: wrong length read:0
    [   62.236613] ol_swap_wlan_memory_expansion: Swap total_bytes copied: 104057 Target address 417688 
    [   62.245610] scn=db140480  target_write_addr=417688 seg_info=ddfb8b10 
    [   62.251858] ol_transfer_swap_struct:Code swap structure successfully downloaded for bin type =2 
    [   62.260637] bin_filename=AR900B/hw.2/athwlan.bin swap_filename=/lib/firmware/AR900B/hw.2/athwlan.codeswap.bin 
    [   63.345735] ol_ath_attach() Download FW. 
    [   63.348734] ol_ath_attach() HT Create .
    [   63.352546] ol_ath_attach() HIF Claim.
    [   63.356388] ol_ath_attach() BMI Done. 
    [   63.360043] ol_ath_attach() WMI attached. wmi_handle db280000 
    [   63.365854] +HWT
    [   63.369634] CE_recv_buf_enqueue 809 Populate last entry 512 for CE 5
    [   63.374945] CE_recv_buf_enqueue 818 CE 5 wi 511 dest_ptr 0x5b3f5040 nbytes 0 recv_ctxt 0xda16cf00
    [   63.384098] Target:d8fd9800 HTC Service:0x0001, ULpipe:0 DLpipe:1 id:0 Ready
    [   63.390846] -HWT
    [   63.392658] 
    [   63.392658] 
    [   63.398469] Target:d8fd9800 HTC Service:0x0300, ULpipe:4 DLpipe:5 id:1 Ready
    [   63.405373] HTC Service:0x0300 ep:1 TX flow control disabled
    [   63.411902] CE_pkt_dl_len_set CE 4 Pkt download length 64
    [   63.416401] ol_txrx_pdev_attach: 1424 tx desc's allocated ; range starts from d9540000
    [   63.424523] Target:d8fd9800 HTC Service:0x0100, ULpipe:3 DLpipe:2 id:2 Ready
    [   63.431302] HTC Service:0x0100 ep:2 TX flow control disabled
    [   63.437738] wmi_service_ready_event_rx:  WMI UNIFIED SERVICE READY event 
    [   63.443705] num_rf_chain : 00000004
    [   63.447172] ht_cap_info: : 0000085b
    [   63.450640] vht_cap_info : 339b79b2
    [   63.454108] vht_supp_mcs : 0000ffea
    [   63.457606] ol_ath_service_ready_event: tt_support: 1
    [   63.462605] Peer Caching Enabled ; num_peers = 528, num_active_peers = 66 num_tids = 132, num_vdevs = 16
    [   63.472102] idx 0 req 1  num_units 0 num_unit_info 2 unit size 1296 actual units 529 
    [   63.480381] idx 1 req 2  num_units 1 num_unit_info 4 unit size 256 actual units 67 
    [   63.487566] idx 2 req 3  num_units 1 num_unit_info 4 unit size 1024 actual units 67 
    [   63.495313] idx 3 req 4  num_units 1 num_unit_info 4 unit size 4096 actual units 67 
    [   63.503155] idx 4 req 6  num_units 35 num_unit_info 0 unit size 3072 actual units 35 
    [   63.510871] idx 5 req 7  num_units 1 num_unit_info 0 unit size 6144 actual units 1 
    [   63.518462] idx 6 req 5  num_units 0 num_unit_info 2 unit size 1628 actual units 529 
    [   63.526616] chunk 0 len 685584 requested ,ptr  0x5bb00000 
    [   63.531708] chunk 1 len 17152 requested ,ptr  0x5c608000 
    [   63.537113] chunk 2 len 68608 requested ,ptr  0x5c440000 
    [   63.542455] chunk 3 len 274432 requested ,ptr  0x5a400000 
    [   63.547953] chunk 4 len 107520 requested ,ptr  0x5c620000 
    [   63.553420] chunk 5 len 6144 requested ,ptr  0x5aa6a000 
    [   63.558731] chunk 6 len 861212 requested ,ptr  0x59a00000 
    [   63.619025] wmi_ready_event_rx:  WMI UNIFIED READY event 
    [   63.623430] ol_ath_connect_htc() WMI is ready
    [   63.629178] ol_ath_set_host_app_area TODO
    [   63.632177] target uses HTT version 2.1; host uses 2.1
    [   63.642330] ol_ath_attach() connect HTC. 
    [   63.645329] ol_regdmn_start: reg-domain param: regdmn=0, countryName=, wModeSelect=FFFFFFFF, netBand=FFFFFFFF, extendedChanMode=0.
    [   63.657107] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150
    [   63.664073] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0
    [   63.671009] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0
    [   63.677788] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0
    [   63.684786] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150
    [   63.691752] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x10080
    [   63.699062] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20080
    [   63.706466] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40080
    [   63.713839] Add VHT80 channel: 5210
    [   63.717307] Add VHT80 channel: 5290
    [   63.720743] Add VHT80 channel: 5530
    [   63.724211] Add VHT80 channel: 5610
    [   63.727710] Skipping VHT80 channel 5660
    [   63.731521] Skipping VHT80 channel 5680
    [   63.735332] Skipping VHT80 channel 5700
    [   63.739393] ol_ath_phyerr_attach: called
    [   63.743142] OL Resmgr Init-ed
    [   63.746079] ieee80211_bsteering_attach: Band steering initialized
    [   63.752077] ol_if_spectral_setup
    [   63.755357] SPECTRAL : get_capability not registered
    [   63.760231] HAL_CAP_PHYDIAG : Capable
    [   63.763948] SPECTRAL : Need to fix the capablity check for RADAR (spectral_attach : 231)
    [   63.771977] SPECTRAL : get_capability not registered
    [   63.776913] HAL_CAP_RADAR   : Capable
    [   63.780568] SPECTRAL : Need to fix the capablity check for SPECTRAL
    [   63.780568]  (spectral_attach : 236)
    [   63.790409] SPECTRAL : get_capability not registered
    [   63.795345] HAL_CAP_SPECTRAL_SCAN : Capable
    [   63.799468] SPECTRAL : get_tsf64 not registered
    [   63.803998] spectral_init_netlink 65 NULL SKB
    [   63.808403] Green-AP : Green-AP : Attached
    [   63.808403] 
    [   63.813901] Green-AP : Attached
    [   63.817025] rate power table override is only supported for AR98XX
    [   63.823242] ol_ath_smart_ant_attach: Hardware doest not support Smart Antenna.
    [   63.830427] ieee80211com_init_netlink: 3223: Wifipos 1st Netlink socket created:daf37600
    [   63.838519] ol_if_dfs_setup: called 
    [   63.842018] ol_if_dfs_attach: called; ptr=d956d984, radar_info=db581bd8
    [   63.848828] ol_ath_rtt_meas_report_attach: called
    [   63.853545] ol_ath_attach() UMAC attach . 
    [   63.857482] ol_if_dfs_configure: called
    [   63.861262] ol_if_dfs_configure: MKK4 domain
    [   63.865479] ol_if_dfs_disable: called
    [   63.869134] ol_ath_attach: Calling ol_if_dfs_configure
    [   63.874226] 
    [   63.874226]  BURSTING enabled by default
    [   63.879725] osif_wrap_attach:400 osif wrap attached
    [   63.884504] osif_wrap_devt_init:361 osif wrap dev table init done
    [   63.890565]  Wrap Attached: Wrap_com =daf37000 ic->ic_wrap_com=daf37000 &wrap_com->wc_devt=daf37000 
    [   63.899687] __ol_ath_attach: init tx/rx TODO
    [   63.903905] __ol_ath_attach: needed_headroom reservation 44
    [   63.909965] ol_ath_thermal_mitigation_attach: ++
    [   63.914120] ol_ath_thermal_mitigation_attach: --
    [   63.918775] ath_pci_probe
    [   63.921274] PCI device id is 0040 :0040
    [   63.925398] ath_pci 0000:03:00.0: ath DEBUG: sc=0xdaf37e00
    [   63.930584] 
    [   63.930584]  ol_ath_pci_configure : num_desired MSI set to 0
    [   63.937769] 
    [   63.937769]  Using PCI Legacy Interrupt
    [   63.942986] chip_id 9 chip_revision 1 
    [   63.946985] 
    [   63.946985]  address 4008f8 data db581c20 
    [   63.953295] 
    [   63.953295]  address 401e90 data db581c24 
    [   63.960012] 
    [   63.960012]  address 401e94 data db581c28 
    [   63.966635] 
    [   63.966635]  address 401eb0 data db581c2c 
    [   63.973195] 
    [   63.973195]  address 400900 data db581c2c 
    [   63.979818] 
    [   63.979818]  CLOCK PLL skipped 
    [   63.983411] HIF_PCIDeviceProbed: setting the target pll frac ffffffff intval ffffffff
    [   63.991252] HIF_PCIDeviceProbed: no frac provided, skipping pre-configuring PLL
    [   63.998531] HIF_PCIDeviceProbed: ar900b_20_targ_clk is not provided, skipping pre-configuring PLL
    [   64.007435] 
    [   64.007435]  address 4008cc data db581c2c 
    [   64.014964] __ol_ath_attach: ath_attach TODO
    [   64.018213] __ol_ath_attach 1741 host_enable 0 nss_nwifi_offload 0
    [   64.024398] __ol_ath_attach: dev name wifi1
    [   64.028584] __ol_ath_attach: WLAN MAC ADDRESS (a4:12:42:a2:d9:a6) ic(da100480)
    [   64.035801] ol_ath_set_default_tgt_config : AC Minfree buffer allocation through module param (umac.ko)
    [   64.045142]  OL_ACBKMinfree : 0
    [   64.048234]  OL_ACBEMinfree : 0
    [   64.051390]  OL_ACVIMinfree : 0
    [   64.054545]  OL_ACVOMinfree : 0
    [   64.057700] ol_ath_attach() BMI inited.
    [   64.061543] ol_ath_attach() BMI Get Target Info.
    [   64.066073] ol_ath_attach() TARGET TYPE: 9 Vers 0x1000000
    [   64.071415] 
    [   64.071446]  CE WAR Disabled
    [   64.075945] NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0
    [   64.081412] ol_ath_attach() configure Target .
    [   64.085691] 
    [   64.085691]  Target Version is 1000000
    [   64.090784] 
    [   64.090784]  Flash Download Address  c0000 
    [   64.096438] ol_transfer_bin_file: flash data file defined
    [   64.101811] Cal location [1]: 00004000
    [   64.105654] 
    [   64.105654]  Wifi1 Select OFFSET 5000
    [   64.129584] qc98xx_verify_checksum: flash checksum passed: 0xe3e8
    [   64.134676] ol_transfer_bin_file 2918: Download Flash data len 12064
    [   64.141174] Board extended Data download address: 0x0
    [   64.166385] 
    [   64.166385]  Board data initialized
    [   64.170384] Flash download ADDRESS 0xc0000
    [   64.174414] 
    [   64.174414]  Selecting  OTP binary for CHIP Version 1
    [   64.216338] 
    [   64.216338]  First OTP send param 8000
    [   64.364854] [wifi0] FWLOG: [11613] WAL_DBGID_TX_AC_BUFFER_SET ( 0x3, 0x1e, 0x518, 0x518, 0x0 )
    [   64.372446] [wifi0] FWLOG: [11613] WAL_DBGID_TX_AC_BUFFER_SET ( 0x12, 0x1e, 0x518, 0x518, 0x0 )
    [   64.381099] [wifi0] FWLOG: [11613] WAL_DBGID_TX_AC_BUFFER_SET ( 0x45, 0x1e, 0x518, 0x518, 0x0 )
    [   64.389784] [wifi0] FWLOG: [11613] WAL_DBGID_TX_AC_BUFFER_SET ( 0x67, 0x1e, 0x518, 0x518, 0x0 )
    [   68.834489] ol_ath_download_firmware :First  OTP download and Execute is good  return param 38912
    [   68.842393] 
    [   68.842393] ##Board Id 6
    [   68.846360] 
    [   68.846360] ##CHIP Id 1
    [   68.850359] 
    [   68.850359]  BOARDDATA DOWNLOAD TO address c0000
    [   68.856419] ol_transfer_bin_file: Board data file: AR900B/hw.2/boardData_AR900B_CUS240_2GMipiHigh_v2_006.bin ARXXXX v=0x1
    [   68.876319] Board extended Data download address: 0x0
    [   68.900874] ol_ath_download_firmware: Using 0x1234 for the remainder of init
    [   68.906997] 
    [   68.906997]  Selecting  OTP binary for CHIP Version 1
    [   68.948516] 
    [   68.948516]  Second otp download Param 10000 
    [   73.574851] ol_ath_download_firmware : OTP download and Execute is good 
    [   73.580537] 
    [   73.580537]  FIRMWARE : Beeliner CHIP Version 1
    [   73.595938] ol_swap_seg_alloc: Successfully allocated memory for SWAP size=131072 
    [   73.611652] Swap: bytes_left to copy: fw:16; dma_page:27015
    [   73.616213] Swap: wrong length read:0
    [   73.619837] ol_swap_wlan_memory_expansion: Swap total_bytes copied: 104057 Target address 417688 
    [   73.630334] scn=da100480  target_write_addr=417688 seg_info=ddfb8a10 
    [   73.635770] ol_transfer_swap_struct:Code swap structure successfully downloaded for bin type =2 
    [   73.644548] bin_filename=AR900B/hw.2/athwlan.bin swap_filename=/lib/firmware/AR900B/hw.2/athwlan.codeswap.bin 
    [   74.733239] ol_ath_attach() Download FW. 
    [   74.736269] ol_ath_attach() HT Create .
    [   74.740049] ol_ath_attach() HIF Claim.
    [   74.743830] ol_ath_attach() BMI Done. 
    [   74.747547] ol_ath_attach() WMI attached. wmi_handle d8f60000 
    [   74.753327] +HWT
    [   74.757700] CE_recv_buf_enqueue 809 Populate last entry 512 for CE 5
    [   74.763011] CE_recv_buf_enqueue 818 CE 5 wi 511 dest_ptr 0x5993a040 nbytes 0 recv_ctxt 0xd8fd1480
    [   74.772289] Target:d8fdc000 HTC Service:0x0001, ULpipe:0 DLpipe:1 id:0 Ready
    [   74.779069] -HWT
    [   74.780756] 
    [   74.780756] 
    [   74.786504] Target:d8fdc000 HTC Service:0x0300, ULpipe:4 DLpipe:5 id:1 Ready
    [   74.793408] HTC Service:0x0300 ep:1 TX flow control disabled
    [   74.800687] CE_pkt_dl_len_set CE 4 Pkt download length 64
    [   74.805154] ol_txrx_pdev_attach: 1424 tx desc's allocated ; range starts from d9b00000
    [   74.813183] Target:d8fdc000 HTC Service:0x0100, ULpipe:3 DLpipe:2 id:2 Ready
    [   74.819993] HTC Service:0x0100 ep:2 TX flow control disabled
    [   74.826429] wmi_service_ready_event_rx:  WMI UNIFIED SERVICE READY event 
    [   74.832364] num_rf_chain : 00000004
    [   74.835832] ht_cap_info: : 0000085b
    [   74.839331] vht_cap_info : 339b79b2
    [   74.842799] vht_supp_mcs : 0000ffea
    [   74.846266] ol_ath_service_ready_event: tt_support: 1
    [   74.851296] Peer Caching Enabled ; num_peers = 528, num_active_peers = 66 num_tids = 132, num_vdevs = 16
    [   74.860793] idx 0 req 1  num_units 0 num_unit_info 2 unit size 1296 actual units 529 
    [   74.869072] idx 1 req 2  num_units 1 num_unit_info 4 unit size 256 actual units 67 
    [   74.876257] idx 2 req 3  num_units 1 num_unit_info 4 unit size 1024 actual units 67 
    [   74.884005] idx 3 req 4  num_units 1 num_unit_info 4 unit size 4096 actual units 67 
    [   74.891846] idx 4 req 6  num_units 35 num_unit_info 0 unit size 3072 actual units 35 
    [   74.899562] idx 5 req 7  num_units 1 num_unit_info 0 unit size 6144 actual units 1 
    [   74.907154] idx 6 req 5  num_units 0 num_unit_info 2 unit size 1628 actual units 529 
    [   74.915307] chunk 0 len 685584 requested ,ptr  0x59b00000 
    [   74.920399] chunk 1 len 17152 requested ,ptr  0x5a478000 
    [   74.925804] chunk 2 len 68608 requested ,ptr  0x5b040000 
    [   74.931146] chunk 3 len 274432 requested ,ptr  0x5ab00000 
    [   74.936644] chunk 4 len 107520 requested ,ptr  0x5b060000 
    [   74.942111] chunk 5 len 6144 requested ,ptr  0x5c454000 
    [   74.947391] chunk 6 len 861212 requested ,ptr  0x59000000 
    [   75.009996] wmi_ready_event_rx:  WMI UNIFIED READY event 
    [   75.014401] ol_ath_connect_htc() WMI is ready
    [   75.018744] ol_ath_set_host_app_area TODO
    [   75.022742] target uses HTT version 2.1; host uses 2.1
    [   75.031896] ol_ath_attach() connect HTC. 
    [   75.034926] ol_regdmn_start: reg-domain param: regdmn=0, countryName=, wModeSelect=FFFFFFFF, netBand=FFFFFFFF, extendedChanMode=0.
    [   75.046672] ol_regdmn_init_channels: !avail mode 0x680c (0x2) flags 0x2150
    [   75.053452] ol_regdmn_init_channels: !avail mode 0x680c (0x1) flags 0x140
    [   75.060262] ol_regdmn_init_channels: !avail mode 0x680c (0x20) flags 0xd0
    [   75.067010] ol_regdmn_init_channels: !avail mode 0x680c (0x40) flags 0x150
    [   75.073945] ol_regdmn_init_channels: !avail mode 0x680c (0x1000) flags 0x10100
    [   75.081068] ol_regdmn_init_channels: !avail mode 0x680c (0x8000) flags 0x20100
    [   75.088284] ol_regdmn_init_channels: !avail mode 0x680c (0x10000) flags 0x40100
    [   75.095626] ol_regdmn_init_channels: !avail mode 0x680c (0x20000) flags 0x100100
    [   75.102936] ol_regdmn_init_channels: !avail mode 0x680c (0x40000) flags 0x200100
    [   75.110340] ol_regdmn_init_channels: !avail mode 0x680c (0x80000) flags 0x400100
    [   75.117713] ol_regdmn_init_channels: !avail mode 0x680c (0x100000) flags 0x800100
    [   75.125273] ol_ath_phyerr_attach: called
    [   75.129115] OL Resmgr Init-ed
    [   75.132052] ieee80211_bsteering_attach: Band steering initialized
    [   75.138113] ol_if_spectral_setup
    [   75.141330] SPECTRAL : get_capability not registered
    [   75.146329] HAL_CAP_PHYDIAG : Capable
    [   75.149890] SPECTRAL : Need to fix the capablity check for RADAR (spectral_attach : 231)
    [   75.157981] SPECTRAL : get_capability not registered
    [   75.162917] HAL_CAP_RADAR   : Capable
    [   75.166635] SPECTRAL : Need to fix the capablity check for SPECTRAL
    [   75.166666]  (spectral_attach : 236)
    [   75.176382] SPECTRAL : get_capability not registered
    [   75.181318] HAL_CAP_SPECTRAL_SCAN : Capable
    [   75.185504] SPECTRAL : get_tsf64 not registered
    [   75.190003] spectral_init_netlink 65 NULL SKB
    [   75.194345] Green-AP : Green-AP : Attached
    [   75.194345] 
    [   75.199968] Green-AP : Attached
    [   75.203030] rate power table override is only supported for AR98XX
    [   75.209247] ol_ath_smart_ant_attach: Hardware doest not support Smart Antenna.
    [   75.216463] ieee80211com_init_netlink: Socket already created daf37600
    [   75.222930] ol_if_dfs_setup: called 
    [   75.226491] ol_if_dfs_attach: called; ptr=d8da9984, radar_info=db581bd8
    [   75.233270] ol_ath_rtt_meas_report_attach: called
    [   75.237925] ol_ath_attach() UMAC attach . 
    [   75.241861] ol_if_dfs_configure: called
    [   75.245704] ol_if_dfs_configure: MKK4 domain
    [   75.249890] ol_if_dfs_disable: called
    [   75.253577] ol_ath_attach: Calling ol_if_dfs_configure
    [   75.258669] 
    [   75.258700]  BURSTING enabled by default
    [   75.264229] osif_wrap_attach:400 osif wrap attached
    [   75.268947] osif_wrap_devt_init:361 osif wrap dev table init done
    [   75.275007]  Wrap Attached: Wrap_com =dd946c00 ic->ic_wrap_com=dd946c00 &wrap_com->wc_devt=dd946c00 
    [   75.284098] __ol_ath_attach: init tx/rx TODO
    [   75.288378] __ol_ath_attach: needed_headroom reservation 44
    [   75.294345] ol_ath_thermal_mitigation_attach: ++
    [   75.298594] ol_ath_thermal_mitigation_attach: --
    [   75.312058] Initializing Pktlogs for 11ac
    [   75.315089] Initializing Pktlogs for 11ac
    [   75.327272] __sa_init_module 
    [   75.496282] set TXBF_SND_PERIOD: value 100 wmi_status 0
    [   75.656950] ath_ioctl: SIOC80211IFCREATE CALLED
    [   75.660481] wmi_unified_vdev_create_send: ID = 0 Type = 1, Subtype = 0 VAP Addr = a4:12:42:a2:d9:a7:
    [   75.669634] ieee80211_wifipos_vattach: 3824: Wifipos intialization starting
    [   75.676694] 
    [   75.676694]  BRINGUP:pointer of pvt_wifiposdata is d7c80000 and socket val is daf37600 and socket id is 0
    [   75.687566] ieee80211_wifipos_vattach: 3876: Wifipos intialization work q & timer alloc complete
    [   75.696344] ieee80211_wifipos_vattach: 3889: Wifipos intialization data store 1 alloc complete
    [   75.704935] ieee80211_wifipos_vattach: 3927: Wifipos intialization data store 2 alloc complete
    [   75.713589] ieee80211_wifipos_vattach: 3939: Wifipos intialization complete with ic:db140480
    [   75.721930] ieee80211_wifipos_vattach: 3940: vap addr(a4:12:42:a2:d9:a7) idx(0)
    [   75.729272] __ieee80211_smart_ant_init: Smart Antenna is not supported 
    [   75.735832] Enabling SG bit for the vap ath0 features 4000 
    [   75.741362] Enabling TSO bit for the vap ath0 features 4000 
    [   75.747016] Enabling LRO bit for the vap ath0 features 4000 
    [   75.752577] [wifi1] FWLOG: [23450] WAL_DBGID_TX_AC_BUFFER_SET ( 0x3, 0x1e, 0x518, 0x518, 0x0 )
    [   75.752608] [wifi1] FWLOG: [23450] WAL_DBGID_TX_AC_BUFFER_SET ( 0x12, 0x1e, 0x518, 0x518, 0x0 )
    [   75.752608] [wifi1] FWLOG: [23450] WAL_DBGID_TX_AC_BUFFER_SET ( 0x45, 0x1e, 0x518, 0x518, 0x0 )
    [   75.752639] [wifi1] FWLOG: [23450] WAL_DBGID_TX_AC_BUFFER_SET ( 0x67, 0x1e, 0x518, 0x518, 0x0 )
    [   75.787285] VAP device ath0 created osifp: (de2d5c80) os_if: (db694000)
    [   75.801280] Set freq vap 0 stop send + db694000
    [   75.804810] OL vap_stop +
    [   75.807403] wmi_unified_vdev_stop_send for vap 0 (db280000)
    [   75.812933] OL vap_stop -
    [   75.812964] STOPPED EVENT for vap 0 (db280000)
    [   75.820056] Set freq vap 0 stop send -db694000
    [   75.845485] Set wait done --db694000
    [   75.876194]  
    [   75.876194]  DES SSID SET= 
    [   75.881818]  
    [   75.881818]  DES SSID SET=OpenWrt-a 
    [   76.017150] ath_ioctl: SIOC80211IFCREATE CALLED
    [   76.020681] wmi_unified_vdev_create_send: ID = 1 Type = 1, Subtype = 0 VAP Addr = a6:12:42:a2:d9:a7:
    [   76.029896] ieee80211_wifipos_vattach: 3824: Wifipos intialization starting
    [   76.036894] 
    [   76.036894]  BRINGUP:pointer of pvt_wifiposdata is d7d00000 and socket val is daf37600 and socket id is 0
    [   76.047860] ieee80211_wifipos_vattach: 3876: Wifipos intialization work q & timer alloc complete
    [   76.056544] ieee80211_wifipos_vattach: 3889: Wifipos intialization data store 1 alloc complete
    [   76.065104] ieee80211_wifipos_vattach: 3927: Wifipos intialization data store 2 alloc complete
    [   76.073789] ieee80211_wifipos_vattach: 3939: Wifipos intialization complete with ic:db140480
    [   76.082130] ieee80211_wifipos_vattach: 3940: vap addr(a4:12:42:a2:d9:a7) idx(0)
    [   76.089503] __ieee80211_smart_ant_init: Smart Antenna is not supported 
    [   76.096032] Enabling SG bit for the vap ath01 features 4000 
    [   76.101624] Enabling TSO bit for the vap ath01 features 4000 
    [   76.107372] Enabling LRO bit for the vap ath01 features 4000 
    [   76.113120] VAP device ath01 created osifp: (d9f80c80) os_if: (d8ce8000)
    [   76.127303] Set freq vap 1 stop send + db694000
    [   76.130802] OL vap_stop +
    [   76.133427] wmi_unified_vdev_stop_send for vap 0 (db280000)
    [   76.138987] OL vap_stop -
    [   76.141611] STOPPED EVENT for vap 0 (db280000)
    [   76.141643] Set freq vap 1 stop send -db694000
    [   76.165510] Set wait done --db694000
    [   76.168041] Set freq vap 1 stop send + d8ce8000
    [   76.172571] OL vap_stop +
    [   76.175195] ol_ath_vap_stopping baseid 0 vapid 1
    [   76.179787] wmi_unified_vdev_stop_send for vap 1 (db280000)
    [   76.185348] OL vap_stop -
    [   76.187972] STOPPED EVENT for vap 1 (db280000)
    [   76.187972] Set freq vap 1 stop send -d8ce8000
    [   76.215463] Set wait done --d8ce8000
    [   76.246735]  
    [   76.246735]  DES SSID SET= 
    [   76.252389]  
    [   76.252389]  DES SSID SET=OpenWrt-ax 
    [   76.389034] set TXBF_SND_PERIOD: value 100 wmi_status 0
    [   76.395938] ath_ioctl: SIOC80211IFCREATE CALLED
    [   76.399437] wmi_unified_vdev_create_send: ID = 0 Type = 1, Subtype = 0 VAP Addr = a4:12:42:a2:d9:a6:
    [   76.408591] ieee80211_wifipos_vattach: 3824: Wifipos intialization starting
    [   76.415651] 
    [   76.415651]  BRINGUP:pointer of pvt_wifiposdata is d7d80000 and socket val is daf37600 and socket id is 0
    [   76.426554] ieee80211_wifipos_vattach: 3876: Wifipos intialization work q & timer alloc complete
    [   76.435301] ieee80211_wifipos_vattach: 3889: Wifipos intialization data store 1 alloc complete
    [   76.443861] ieee80211_wifipos_vattach: 3927: Wifipos intialization data store 2 alloc complete
    [   76.452608] ieee80211_wifipos_vattach: 3939: Wifipos intialization complete with ic:da100480
    [   76.460887] ieee80211_wifipos_vattach: 3940: vap addr(a4:12:42:a2:d9:a6) idx(0)
    [   76.468259] __ieee80211_smart_ant_init: Smart Antenna is not supported 
    [   76.474789] Enabling SG bit for the vap ath1 features 4000 
    [   76.480318] Enabling TSO bit for the vap ath1 features 4000 
    [   76.485973] Enabling LRO bit for the vap ath1 features 4000 
    [   76.491627] VAP device ath1 created osifp: (d9f83480) os_if: (d7bd8000)
    [   76.505529] Set freq vap 0 stop send + d7bd8000
    [   76.509028] OL vap_stop +
    [   76.511652] TV ignore @2.4g
    [   76.514401] wmi_unified_vdev_stop_send for vap 0 (d8f60000)
    [   76.519993] OL vap_stop -
    [   76.520024] STOPPED EVENT for vap 0 (d8f60000)
    [   76.527085] Set freq vap 0 stop send -d7bd8000
    [   76.555482] Set wait done --d7bd8000
    [   76.558013] TV ignore @2.4g
    [   76.589128]  
    [   76.589128]  DES SSID SET= 
    [   76.594845]  
    [   76.594845]  DES SSID SET=OpenWrt-g 
    [   76.659481] ath_ioctl: SIOC80211IFCREATE CALLED
    [   76.663011] wmi_unified_vdev_create_send: ID = 1 Type = 1, Subtype = 0 VAP Addr = a6:12:42:a2:d9:a6:
    [   76.672227] ieee80211_wifipos_vattach: 3824: Wifipos intialization starting
    [   76.679162] 
    [   76.679162]  BRINGUP:pointer of pvt_wifiposdata is d7e00000 and socket val is daf37600 and socket id is 0
    [   76.690221] ieee80211_wifipos_vattach: 3876: Wifipos intialization work q & timer alloc complete
    [   76.698875] ieee80211_wifipos_vattach: 3889: Wifipos intialization data store 1 alloc complete
    [   76.707466] ieee80211_wifipos_vattach: 3927: Wifipos intialization data store 2 alloc complete
    [   76.716119] ieee80211_wifipos_vattach: 3939: Wifipos intialization complete with ic:da100480
    [   76.724429] ieee80211_wifipos_vattach: 3940: vap addr(a4:12:42:a2:d9:a6) idx(0)
    [   76.731802] __ieee80211_smart_ant_init: Smart Antenna is not supported 
    [   76.738363] Enabling SG bit for the vap ath11 features 4000 
    [   76.743986] Enabling TSO bit for the vap ath11 features 4000 
    [   76.749734] Enabling LRO bit for the vap ath11 features 4000 
    [   76.755451] VAP device ath11 created osifp: (d9f85c80) os_if: (d7c14000)
    [   76.769572] Set freq vap 1 stop send + d7bd8000
    [   76.773070] OL vap_stop +
    [   76.775695] TV ignore @2.4g
    [   76.778444] wmi_unified_vdev_stop_send for vap 0 (d8f60000)
    [   76.784005] OL vap_stop -
    [   76.784036] STOPPED EVENT for vap 0 (d8f60000)
    [   76.791127] Set freq vap 1 stop send -d7bd8000
    [   76.825492] Set wait done --d7bd8000
    [   76.828022] Set freq vap 1 stop send + d7c14000
    [   76.832521] OL vap_stop +
    [   76.835145] ol_ath_vap_stopping baseid 0 vapid 1
    [   76.839737] wmi_unified_vdev_stop_send for vap 1 (d8f60000)
    [   76.845329] OL vap_stop -
    [   76.845360] STOPPED EVENT for vap 1 (d8f60000)
    [   76.852358] Set freq vap 1 stop send -d7c14000
    [   76.885504] Set wait done --d7c14000
    [   76.888034] TV ignore @2.4g
    [   76.919900]  
    [   76.919900]  DES SSID SET= 
    [   76.925585]  
    [   76.925585]  DES SSID SET=OpenWrt-gx 
    [   76.990659] ath_ioctl: SIOC80211IFCREATE CALLED
    [   76.994189] wmi_unified_vdev_create_send: ID = 2 Type = 1, Subtype = 0 VAP Addr = b6:12:42:a2:d9:a6:
    [   77.003373] ieee80211_wifipos_vattach: 3824: Wifipos intialization starting
    [   77.010527] 
    [   77.010527]  BRINGUP:pointer of pvt_wifiposdata is d7e80000 and socket val is daf37600 and socket id is 0
    [   77.021305] ieee80211_wifipos_vattach: 3876: Wifipos intialization work q & timer alloc complete
    [   77.030021] ieee80211_wifipos_vattach: 3889: Wifipos intialization data store 1 alloc complete
    [   77.038612] ieee80211_wifipos_vattach: 3927: Wifipos intialization data store 2 alloc complete
    [   77.047360] ieee80211_wifipos_vattach: 3939: Wifipos intialization complete with ic:da100480
    [   77.055638] ieee80211_wifipos_vattach: 3940: vap addr(a4:12:42:a2:d9:a6) idx(0)
    [   77.062980] __ieee80211_smart_ant_init: Smart Antenna is not supported 
    [   77.069540] Enabling SG bit for the vap ath12 features 4000 
    [   77.075164] Enabling TSO bit for the vap ath12 features 4000 
    [   77.080880] Enabling LRO bit for the vap ath12 features 4000 
    [   77.086629] VAP device ath12 created osifp: (d7c18480) os_if: (d7be0000)
    [   77.100812] Set freq vap 2 stop send + d7bd8000
    [   77.104311] OL vap_stop +
    [   77.106935] TV ignore @2.4g
    [   77.109684] wmi_unified_vdev_stop_send for vap 0 (d8f60000)
    [   77.115245] OL vap_stop -
    [   77.115276] STOPPED EVENT for vap 0 (d8f60000)
    [   77.122336] Set freq vap 2 stop send -d7bd8000
    [   77.155482] Set wait done --d7bd8000
    [   77.158013] Set freq vap 2 stop send + d7c14000
    [   77.162511] OL vap_stop +
    [   77.165135] ol_ath_vap_stopping baseid 0 vapid 1
    [   77.169728] wmi_unified_vdev_stop_send for vap 1 (d8f60000)
    [   77.175351] OL vap_stop -
    [   77.175382] STOPPED EVENT for vap 1 (d8f60000)
    [   77.182349] Set freq vap 2 stop send -d7c14000
    [   77.215463] Set wait done --d7c14000
    [   77.217994] Set freq vap 2 stop send + d7be0000
    [   77.222492] OL vap_stop +
    [   77.225148] ol_ath_vap_stopping baseid 0 vapid 2
    [   77.229709] wmi_unified_vdev_stop_send for vap 2 (d8f60000)
    [   77.235301] OL vap_stop -
    [   77.235301] STOPPED EVENT for vap 2 (d8f60000)
    [   77.242330] Set freq vap 2 stop send -d7be0000
    [   77.275476] Set wait done --d7be0000
    [   77.278006] TV ignore @2.4g
    [   77.309996]  
    [   77.309996]  DES SSID SET= 
    [   77.315682]  
    [   77.315682]  DES SSID SET=OpenWrt-gw 
    starting nec_wifi_mgr
    (daemon mode).
    Starting /usr/sbin/metalog: /usr/sbin/metalog.
    starting ddns_event
    starting evtmgr
    sessmgr: starting
    nwctld: starting
    CDM: starting cdm_init
    net.netfilter.nf_conntrack_icmp_timeout = 30
    net.netfilter.nf_conntrack_icmpv6_timeout = 30
    net.netfilter.nf_conntrack_tcp_timeout_established = 3600
    net.netfilter.nf_conntrack_udp_timeout = 300
    net.netfilter.nf_conntrack_udp_timeout_stream = 300
    cmtd: starting
    netlinkd: starting
    PreConfig: starting
    WSS: starting wssctl
    net.bridge.bridge-nf-call-ip6tables = 1
    net.bridge.bridge-nf-call-iptables = 1
    starting httpd
    exec httpd
    starting adp
    mode switch: ap
    starting access_timer
    starting aim_init
    starting cpu_therm_moni
    
    Please press Enter to activate this console.
    

  • failsafeの強制再起動

    root@(none):/# [  126.941643] qcom_wdt bark! 126.941612
    [  126.944236] 
    [  126.944236] PID: 1, Name: preinit
    [  126.949015] Backtrace: 
    [  126.951452] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  126.959356] [] (schedule+0x0/0x90) from [] (do_wait+0x16c/0x1b8)
    [  126.967072] [] (do_wait+0x0/0x1b8) from [] (sys_wait4+0x8c/0xc0)
    [  126.974820] [] (sys_wait4+0x0/0xc0) from [] (ret_fast_syscall+0x0/0x30)
    [  126.983130]  r8:c000eb84 r7:00000072 r6:bea209fc r5:00000000 r4:00a7fb10
    [  126.989815] 
    [  126.989815] PID: 2, Name: kthreadd
    [  126.994689] Backtrace: 
    [  126.997125] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  127.005029] [] (schedule+0x0/0x90) from [] (kthreadd+0xe4/0xfc)
    [  127.012652] [] (kthreadd+0x0/0xfc) from [] (do_exit+0x0/0x7b8)
    [  127.020212]  r7:00000013 r6:c005d0c4 r5:c00735c8 r4:00000000
    [  127.025835] 
    [  127.025835] PID: 3, Name: ksoftirqd/0
    [  127.030959] Backtrace: 
    [  127.033395] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  127.041299] [] (schedule+0x0/0x90) from [] (schedule_preempt_disabled+0x28/0x38)
    [  127.050421] [] (schedule_preempt_disabled+0x0/0x38) from [] (run_ksoftirqd+0x11c/0x1a0)
    [  127.060137]  r4:ddf4e000 r3:00000000
    [  127.063698] [] (run_ksoftirqd+0x0/0x1a0) from [] (kthread+0x98/0xa4)
    [  127.071758] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  127.079225]  r6:c005d0c4 r5:c0073320 r4:ddf47eec
    [  127.083817] 
    [  127.083848] PID: 4, Name: kworker/0:0
    [  127.088940] Backtrace: 
    [  127.091377] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  127.099281] [] (schedule+0x0/0x90) from [] (worker_thread+0x1cc/0x2ac)
    [  127.107528] [] (worker_thread+0x0/0x2ac) from [] (kthread+0x98/0xa4)
    [  127.115620] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  127.123055]  r6:c005d0c4 r5:c0073320 r4:ddf47ecc
    [  127.127678] 
    [  127.127678] PID: 5, Name: kworker/u:0
    [  127.132802] Backtrace: 
    [  127.135238] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  127.143111] [] (schedule+0x0/0x90) from [] (worker_thread+0x1cc/0x2ac)
    [  127.151358] [] (worker_thread+0x0/0x2ac) from [] (kthread+0x98/0xa4)
    [  127.159450] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  127.166916]  r6:c005d0c4 r5:c0073320 r4:ddf47ecc
    [  127.171508] 
    [  127.171508] PID: 6, Name: migration/0
    [  127.176632] Backtrace: 
    [  127.179069] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  127.186972] [] (schedule+0x0/0x90) from [] (cpu_stopper_thread+0xe4/0x160)
    [  127.195563] [] (cpu_stopper_thread+0x0/0x160) from [] (kthread+0x98/0xa4)
    [  127.204061] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  127.211527]  r6:c005d0c4 r5:c0073320 r4:ddf47ee4
    [  127.216119] 
    [  127.216119] PID: 7, Name: migration/1
    [  127.221243] Backtrace: 
    [  127.223680] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  127.231583] [] (schedule+0x0/0x90) from [] (cpu_stopper_thread+0xe4/0x160)
    [  127.240174] [] (cpu_stopper_thread+0x0/0x160) from [] (kthread+0x98/0xa4)
    [  127.248672] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  127.256138]  r6:c005d0c4 r5:c0073320 r4:ddf47e74
    [  127.260731] 
    [  127.260731] PID: 8, Name: kworker/1:0
    [  127.265854] Backtrace: 
    [  127.268291] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  127.276194] [] (schedule+0x0/0x90) from [] (worker_thread+0x1cc/0x2ac)
    [  127.284442] [] (worker_thread+0x0/0x2ac) from [] (kthread+0x98/0xa4)
    [  127.292533] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  127.299968]  r6:c005d0c4 r5:c0073320 r4:ddf47e24
    [  127.304592] 
    [  127.304592] PID: 9, Name: ksoftirqd/1
    [  127.309684] Backtrace: 
    [  127.312152] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  127.320024] [] (schedule+0x0/0x90) from [] (schedule_preempt_disabled+0x28/0x38)
    [  127.329147] [] (schedule_preempt_disabled+0x0/0x38) from [] (run_ksoftirqd+0x11c/0x1a0)
    [  127.338862]  r4:ddf62000 r3:00000000
    [  127.342424] [] (run_ksoftirqd+0x0/0x1a0) from [] (kthread+0x98/0xa4)
    [  127.350515] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  127.357950]  r6:c005d0c4 r5:c0073320 r4:ddf47e6c
    [  127.362574] 
    [  127.362574] PID: 10, Name: khelper
    [  127.367416] Backtrace: 
    [  127.369853] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  127.377756] [] (schedule+0x0/0x90) from [] (rescuer_thread+0x164/0x184)
    [  127.386098] [] (rescuer_thread+0x0/0x184) from [] (kthread+0x98/0xa4)
    [  127.394251] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  127.401718]  r6:c005d0c4 r5:c0073320 r4:ddf47f0c
    [  127.406310] 
    [  127.406310] PID: 11, Name: kworker/u:1
    [  127.411527] Backtrace: 
    [  127.413964] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  127.421868] [] (schedule+0x0/0x90) from [] (worker_thread+0x1cc/0x2ac)
    [  127.430115] [] (worker_thread+0x0/0x2ac) from [] (kthread+0x98/0xa4)
    [  127.438175] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  127.445641]  r6:c005d0c4 r5:c0073320 r4:ddf5bedc
    [  127.450234] 
    [  127.450234] PID: 30, Name: kworker/0:1
    [  127.455451] Backtrace: 
    [  127.457888] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  127.465791] [] (schedule+0x0/0x90) from [] (worker_thread+0x1cc/0x2ac)
    [  127.474039] [] (worker_thread+0x0/0x2ac) from [] (kthread+0x98/0xa4)
    [  127.482099] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  127.489565]  r6:c005d0c4 r5:c0073320 r4:ddf59edc
    [  127.494158] 
    [  127.494158] PID: 114, Name: irq/202-msmdata
    [  127.499812] Backtrace: 
    [  127.502249] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  127.510153] [] (schedule+0x0/0x90) from [] (irq_thread+0x80/0x174)
    [  127.518056] [] (irq_thread+0x0/0x174) from [] (kthread+0x98/0xa4)
    [  127.525866] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  127.533302]  r6:c005d0c4 r5:c0073320 r4:ddf47d7c
    [  127.537925] 
    [  127.537925] PID: 260, Name: sync_supers
    [  127.543205] Backtrace: 
    [  127.545641] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  127.553545] [] (schedule+0x0/0x90) from [] (bdi_sync_supers+0x3c/0x54)
    [  127.561793] [] (bdi_sync_supers+0x0/0x54) from [] (kthread+0x98/0xa4)
    [  127.569946]  r5:00000000 r4:ddf47f1c
    [  127.573508] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  127.580974]  r6:c005d0c4 r5:c0073320 r4:ddf47f1c
    [  127.585567] 
    [  127.585567] PID: 262, Name: bdi-default
    [  127.590877] Backtrace: 
    [  127.593314] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  127.601187] [] (schedule+0x0/0x90) from [] (schedule_timeout+0x150/0x1e4)
    [  127.609715] [] (schedule_timeout+0x0/0x1e4) from [] (bdi_forker_thread+0x1ac/0x404)
    [  127.619087]  r7:c0782eb0 r6:c0782f30 r5:c0782eb0 r4:00000000
    [  127.624742] [] (bdi_forker_thread+0x0/0x404) from [] (kthread+0x98/0xa4)
    [  127.633145] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  127.640612]  r6:c005d0c4 r5:c0073320 r4:ddf47ee4
    [  127.645204] 
    [  127.645204] PID: 263, Name: crypto
    [  127.650078] Backtrace: 
    [  127.652514] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  127.660418] [] (schedule+0x0/0x90) from [] (rescuer_thread+0x164/0x184)
    [  127.668728] [] (rescuer_thread+0x0/0x184) from [] (kthread+0x98/0xa4)
    [  127.676882] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  127.684348]  r6:c005d0c4 r5:c0073320 r4:ddf47ed4
    [  127.688972] 
    [  127.688972] PID: 265, Name: kblockd
    [  127.693908] Backtrace: 
    [  127.696344] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  127.704248] [] (schedule+0x0/0x90) from [] (rescuer_thread+0x164/0x184)
    [  127.712589] [] (rescuer_thread+0x0/0x184) from [] (kthread+0x98/0xa4)
    [  127.720743] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  127.728209]  r6:c005d0c4 r5:c0073320 r4:ddf47eac
    [  127.732802] 
    [  127.732802] PID: 270, Name: ata_sff
    [  127.737738] Backtrace: 
    [  127.740174] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  127.748078] [] (schedule+0x0/0x90) from [] (rescuer_thread+0x164/0x184)
    [  127.756419] [] (rescuer_thread+0x0/0x184) from [] (kthread+0x98/0xa4)
    [  127.764573] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  127.772039]  r6:c005d0c4 r5:c0073320 r4:ddf47e6c
    [  127.776632] 
    [  127.776632] PID: 274, Name: spi_qsd.5
    [  127.781755] Backtrace: 
    [  127.784192] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  127.792096] [] (schedule+0x0/0x90) from [] (rescuer_thread+0x164/0x184)
    [  127.800437] [] (rescuer_thread+0x0/0x184) from [] (kthread+0x98/0xa4)
    [  127.808591] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  127.816026]  r6:c005d0c4 r5:c0073320 r4:ddf47d74
    [  127.820649] 
    [  127.820649] PID: 277, Name: msm-spi-thread
    [  127.826210] Backtrace: 
    [  127.828647] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  127.836519] [] (schedule+0x0/0x90) from [] (kthread_worker_fn+0xe0/0x150)
    [  127.845048] [] (kthread_worker_fn+0x0/0x150) from [] (kthread+0x98/0xa4)
    [  127.853452] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  127.860918]  r6:c005d0c4 r5:c0073320 r4:ddf47dbc
    [  127.865510] 
    [  127.865510] PID: 376, Name: modem_notifier
    [  127.871071] Backtrace: 
    [  127.873508] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  127.881412] [] (schedule+0x0/0x90) from [] (rescuer_thread+0x164/0x184)
    [  127.889753] [] (rescuer_thread+0x0/0x184) from [] (kthread+0x98/0xa4)
    [  127.897906] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  127.905373]  r6:c005d0c4 r5:c0073320 r4:ddf47ecc
    [  127.909965] 
    [  127.909965] PID: 378, Name: smd_channel_clo
    [  127.915620] Backtrace: 
    [  127.918056] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  127.925929] [] (schedule+0x0/0x90) from [] (rescuer_thread+0x164/0x184)
    [  127.934270] [] (rescuer_thread+0x0/0x184) from [] (kthread+0x98/0xa4)
    [  127.942424] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  127.949890]  r6:c005d0c4 r5:c0073320 r4:ddf47da4
    [  127.954482] 
    [  127.954514] PID: 379, Name: smsm_cb_wq
    [  127.959700] Backtrace: 
    [  127.962136] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  127.970040] [] (schedule+0x0/0x90) from [] (rescuer_thread+0x164/0x184)
    [  127.978381] [] (rescuer_thread+0x0/0x184) from [] (kthread+0x98/0xa4)
    [  127.986535] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  127.994001]  r6:c005d0c4 r5:c0073320 r4:ddf47da4
    [  127.998594] 
    [  127.998594] PID: 404, Name: qmi
    [  128.003186] Backtrace: 
    [  128.005623] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.013527] [] (schedule+0x0/0x90) from [] (rescuer_thread+0x164/0x184)
    [  128.021868] [] (rescuer_thread+0x0/0x184) from [] (kthread+0x98/0xa4)
    [  128.030021] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  128.037488]  r6:c005d0c4 r5:c0073320 r4:ddf47ecc
    [  128.042080] 
    [  128.042080] PID: 433, Name: nmea
    [  128.046766] Backtrace: 
    [  128.049203] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.057107] [] (schedule+0x0/0x90) from [] (rescuer_thread+0x164/0x184)
    [  128.065448] [] (rescuer_thread+0x0/0x184) from [] (kthread+0x98/0xa4)
    [  128.073602] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  128.081068]  r6:c005d0c4 r5:c0073320 r4:ddf47ecc
    [  128.085660] 
    [  128.085660] PID: 435, Name: rpcrouter
    [  128.090784] Backtrace: 
    [  128.093220] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.101124] [] (schedule+0x0/0x90) from [] (rescuer_thread+0x164/0x184)
    [  128.109465] [] (rescuer_thread+0x0/0x184) from [] (kthread+0x98/0xa4)
    [  128.117619] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  128.125085]  r6:c005d0c4 r5:c0073320 r4:ddf47ecc
    [  128.129678] 
    [  128.129678] PID: 451, Name: kswapd0
    [  128.134614] Backtrace: 
    [  128.137050] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.144954] [] (schedule+0x0/0x90) from [] (kswapd+0x7d8/0x840)
    [  128.152608] [] (kswapd+0x0/0x840) from [] (kthread+0x98/0xa4)
    [  128.160074] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  128.167510]  r6:c005d0c4 r5:c0073320 r4:ddf47f04
    [  128.172133] 
    [  128.172133] PID: 494, Name: fsnotify_mark
    [  128.177600] Backtrace: 
    [  128.180037] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.187941] [] (schedule+0x0/0x90) from [] (fsnotify_mark_destroy+0x10c/0x14c)
    [  128.196875] [] (fsnotify_mark_destroy+0x0/0x14c) from [] (kthread+0x98/0xa4)
    [  128.205623]  r7:00000013 r6:c01099dc r5:00000000 r4:ddf47f24
    [  128.211277] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  128.218744]  r6:c005d0c4 r5:c0073320 r4:ddf47f24
    [  128.223336] 
    [  128.223336] PID: 517, Name: smux_notify_wq
    [  128.228897] Backtrace: 
    [  128.231333] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.239237] [] (schedule+0x0/0x90) from [] (rescuer_thread+0x164/0x184)
    [  128.247547] [] (rescuer_thread+0x0/0x184) from [] (kthread+0x98/0xa4)
    [  128.255732] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  128.263167]  r6:c005d0c4 r5:c0073320 r4:ddf47eb4
    [  128.267791] 
    [  128.267791] PID: 518, Name: smux_tx_wq
    [  128.272977] Backtrace: 
    [  128.275413] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.283317] [] (schedule+0x0/0x90) from [] (rescuer_thread+0x164/0x184)
    [  128.291658] [] (rescuer_thread+0x0/0x184) from [] (kthread+0x98/0xa4)
    [  128.299812] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  128.307278]  r6:c005d0c4 r5:c0073320 r4:ddf47eb4
    [  128.311871] 
    [  128.311871] PID: 519, Name: smux_rx_wq
    [  128.317088] Backtrace: 
    [  128.319525] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.327428] [] (schedule+0x0/0x90) from [] (rescuer_thread+0x164/0x184)
    [  128.335770] [] (rescuer_thread+0x0/0x184) from [] (kthread+0x98/0xa4)
    [  128.343923] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  128.351390]  r6:c005d0c4 r5:c0073320 r4:ddf47eb4
    [  128.355982] 
    [  128.355982] PID: 520, Name: smux_loopback_w
    [  128.361605] Backtrace: 
    [  128.364042] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.371946] [] (schedule+0x0/0x90) from [] (rescuer_thread+0x164/0x184)
    [  128.380287] [] (rescuer_thread+0x0/0x184) from [] (kthread+0x98/0xa4)
    [  128.388441] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  128.395907]  r6:c005d0c4 r5:c0073320 r4:ddf47e94
    [  128.400499] 
    [  128.400499] PID: 526, Name: k_hsuart
    [  128.405529] Backtrace: 
    [  128.407966] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.415870] [] (schedule+0x0/0x90) from [] (rescuer_thread+0x164/0x184)
    [  128.424211] [] (rescuer_thread+0x0/0x184) from [] (kthread+0x98/0xa4)
    [  128.432364] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  128.439831]  r6:c005d0c4 r5:c0073320 r4:ddf47d9c
    [  128.444423] 
    [  128.444423] PID: 538, Name: scsi_eh_0
    [  128.449547] Backtrace: 
    [  128.451983] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.459887] [] (schedule+0x0/0x90) from [] (scsi_error_handler+0x3c/0x45c)
    [  128.468478] [] (scsi_error_handler+0x0/0x45c) from [] (kthread+0x98/0xa4)
    [  128.476975] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  128.484442]  r6:c005d0c4 r5:c0073320 r4:ddf47b8c
    [  128.489065] 
    [  128.489065] PID: 541, Name: kworker/u:2
    [  128.494345] Backtrace: 
    [  128.496782] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.504686] [] (schedule+0x0/0x90) from [] (worker_thread+0x1cc/0x2ac)
    [  128.512933] [] (worker_thread+0x0/0x2ac) from [] (kthread+0x98/0xa4)
    [  128.520993] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  128.528459]  r6:c005d0c4 r5:c0073320 r4:ddfabedc
    [  128.533052] 
    [  128.533052] PID: 553, Name: mtdblock0
    [  128.538175] Backtrace: 
    [  128.540612] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.548516] [] (schedule+0x0/0x90) from [] (mtd_blktrans_thread+0x29c/0x30c)
    [  128.557294] [] (mtd_blktrans_thread+0x0/0x30c) from [] (kthread+0x98/0xa4)
    [  128.565885] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  128.573352]  r6:c005d0c4 r5:c0073320 r4:ddf47c74
    [  128.577944] 
    [  128.577944] PID: 558, Name: mtdblock1
    [  128.583067] Backtrace: 
    [  128.585504] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.593408] [] (schedule+0x0/0x90) from [] (mtd_blktrans_thread+0x29c/0x30c)
    [  128.602155] [] (mtd_blktrans_thread+0x0/0x30c) from [] (kthread+0x98/0xa4)
    [  128.610746] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  128.618213]  r6:c005d0c4 r5:c0073320 r4:ddf47c74
    [  128.622805] 
    [  128.622836] PID: 563, Name: mtdblock2
    [  128.627928] Backtrace: 
    [  128.630365] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.638269] [] (schedule+0x0/0x90) from [] (mtd_blktrans_thread+0x29c/0x30c)
    [  128.647047] [] (mtd_blktrans_thread+0x0/0x30c) from [] (kthread+0x98/0xa4)
    [  128.655638] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  128.663105]  r6:c005d0c4 r5:c0073320 r4:ddf47c74
    [  128.667697] 
    [  128.667697] PID: 568, Name: mtdblock3
    [  128.672820] Backtrace: 
    [  128.675257] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.683161] [] (schedule+0x0/0x90) from [] (mtd_blktrans_thread+0x29c/0x30c)
    [  128.691908] [] (mtd_blktrans_thread+0x0/0x30c) from [] (kthread+0x98/0xa4)
    [  128.700499] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  128.707966]  r6:c005d0c4 r5:c0073320 r4:ddf47c74
    [  128.712589] 
    [  128.712589] PID: 573, Name: mtdblock4
    [  128.717681] Backtrace: 
    [  128.720149] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.728022] [] (schedule+0x0/0x90) from [] (mtd_blktrans_thread+0x29c/0x30c)
    [  128.736801] [] (mtd_blktrans_thread+0x0/0x30c) from [] (kthread+0x98/0xa4)
    [  128.745392] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  128.752858]  r6:c005d0c4 r5:c0073320 r4:ddf47c74
    [  128.757450] 
    [  128.757450] PID: 578, Name: mtdblock5
    [  128.762574] Backtrace: 
    [  128.765010] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.772914] [] (schedule+0x0/0x90) from [] (mtd_blktrans_thread+0x29c/0x30c)
    [  128.781693] [] (mtd_blktrans_thread+0x0/0x30c) from [] (kthread+0x98/0xa4)
    [  128.790284] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  128.797719]  r6:c005d0c4 r5:c0073320 r4:ddf47c74
    [  128.802343] 
    [  128.802343] PID: 583, Name: mtdblock6
    [  128.807466] Backtrace: 
    [  128.809903] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.817775] [] (schedule+0x0/0x90) from [] (mtd_blktrans_thread+0x29c/0x30c)
    [  128.826554] [] (mtd_blktrans_thread+0x0/0x30c) from [] (kthread+0x98/0xa4)
    [  128.835145] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  128.842611]  r6:c005d0c4 r5:c0073320 r4:ddf47c74
    [  128.847204] 
    [  128.847204] PID: 588, Name: mtdblock7
    [  128.852327] Backtrace: 
    [  128.854764] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.862667] [] (schedule+0x0/0x90) from [] (mtd_blktrans_thread+0x29c/0x30c)
    [  128.871446] [] (mtd_blktrans_thread+0x0/0x30c) from [] (kthread+0x98/0xa4)
    [  128.880037] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  128.887503]  r6:c005d0c4 r5:c0073320 r4:ddf47c74
    [  128.892096] 
    [  128.892096] PID: 593, Name: mtdblock8
    [  128.897219] Backtrace: 
    [  128.899656] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.907560] [] (schedule+0x0/0x90) from [] (mtd_blktrans_thread+0x29c/0x30c)
    [  128.916307] [] (mtd_blktrans_thread+0x0/0x30c) from [] (kthread+0x98/0xa4)
    [  128.924898] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  128.932364]  r6:c005d0c4 r5:c0073320 r4:ddf47c74
    [  128.936957] 
    [  128.936988] PID: 598, Name: mtdblock9
    [  128.942080] Backtrace: 
    [  128.944517] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.952421] [] (schedule+0x0/0x90) from [] (mtd_blktrans_thread+0x29c/0x30c)
    [  128.961199] [] (mtd_blktrans_thread+0x0/0x30c) from [] (kthread+0x98/0xa4)
    [  128.969790] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  128.977257]  r6:c005d0c4 r5:c0073320 r4:ddf47c74
    [  128.981849] 
    [  128.981849] PID: 603, Name: mtdblock10
    [  128.987066] Backtrace: 
    [  128.989503] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  128.997407] [] (schedule+0x0/0x90) from [] (mtd_blktrans_thread+0x29c/0x30c)
    [  129.006154] [] (mtd_blktrans_thread+0x0/0x30c) from [] (kthread+0x98/0xa4)
    [  129.014745] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  129.022211]  r6:c005d0c4 r5:c0073320 r4:ddf47c74
    [  129.026804] 
    [  129.026804] PID: 608, Name: mtdblock11
    [  129.032021] Backtrace: 
    [  129.034457] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  129.042361] [] (schedule+0x0/0x90) from [] (mtd_blktrans_thread+0x29c/0x30c)
    [  129.051140] [] (mtd_blktrans_thread+0x0/0x30c) from [] (kthread+0x98/0xa4)
    [  129.059731] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  129.067166]  r6:c005d0c4 r5:c0073320 r4:ddf47c74
    [  129.071790] 
    [  129.071790] PID: 613, Name: mtdblock12
    [  129.076975] Backtrace: 
    [  129.079412] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  129.087316] [] (schedule+0x0/0x90) from [] (mtd_blktrans_thread+0x29c/0x30c)
    [  129.096094] [] (mtd_blktrans_thread+0x0/0x30c) from [] (kthread+0x98/0xa4)
    [  129.104686] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  129.112152]  r6:c005d0c4 r5:c0073320 r4:ddf47c74
    [  129.116744] 
    [  129.116744] PID: 618, Name: mtdblock13
    [  129.121961] Backtrace: 
    [  129.124398] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  129.132302] [] (schedule+0x0/0x90) from [] (mtd_blktrans_thread+0x29c/0x30c)
    [  129.141049] [] (mtd_blktrans_thread+0x0/0x30c) from [] (kthread+0x98/0xa4)
    [  129.149640] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  129.157107]  r6:c005d0c4 r5:c0073320 r4:ddf47c74
    [  129.161699] 
    [  129.161730] PID: 623, Name: mtdblock14
    [  129.166916] Backtrace: 
    [  129.169353] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  129.177257] [] (schedule+0x0/0x90) from [] (mtd_blktrans_thread+0x29c/0x30c)
    [  129.186035] [] (mtd_blktrans_thread+0x0/0x30c) from [] (kthread+0x98/0xa4)
    [  129.194626] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  129.202061]  r6:c005d0c4 r5:c0073320 r4:ddf47c74
    [  129.206685] 
    [  129.206685] PID: 628, Name: mtdblock15
    [  129.211871] Backtrace: 
    [  129.214339] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  129.222211] [] (schedule+0x0/0x90) from [] (mtd_blktrans_thread+0x29c/0x30c)
    [  129.230990] [] (mtd_blktrans_thread+0x0/0x30c) from [] (kthread+0x98/0xa4)
    [  129.239581] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  129.247047]  r6:c005d0c4 r5:c0073320 r4:ddf47c74
    [  129.251640] 
    [  129.251640] PID: 633, Name: mtdblock16
    [  129.256857] Backtrace: 
    [  129.259293] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  129.267197] [] (schedule+0x0/0x90) from [] (mtd_blktrans_thread+0x29c/0x30c)
    [  129.275945] [] (mtd_blktrans_thread+0x0/0x30c) from [] (kthread+0x98/0xa4)
    [  129.284536] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  129.292002]  r6:c005d0c4 r5:c0073320 r4:ddf47c34
    [  129.296594] 
    [  129.296626] PID: 697, Name: iewq
    [  129.301280] Backtrace: 
    [  129.303717] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  129.311621] [] (schedule+0x0/0x90) from [] (rescuer_thread+0x164/0x184)
    [  129.319962] [] (rescuer_thread+0x0/0x184) from [] (kthread+0x98/0xa4)
    [  129.328116] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  129.335582]  r6:c005d0c4 r5:c0073320 r4:ddf47ebc
    [  129.340174] 
    [  129.340174] PID: 698, Name: kinteractiveup
    [  129.345735] Backtrace: 
    [  129.348172] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  129.356076] [] (schedule+0x0/0x90) from [] (kthread+0x7c/0xa4)
    [  129.363636] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  129.371102]  r6:c005d0c4 r5:c0073320 r4:ddf47efc
    [  129.375695] 
    [  129.375695] PID: 702, Name: msm-cpufreq
    [  129.380974] Backtrace: 
    [  129.383411] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  129.391315] [] (schedule+0x0/0x90) from [] (rescuer_thread+0x164/0x184)
    [  129.399656] [] (rescuer_thread+0x0/0x184) from [] (kthread+0x98/0xa4)
    [  129.407810] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  129.415276]  r6:c005d0c4 r5:c0073320 r4:ddf47ebc
    [  129.419868] 
    [  129.419868] PID: 703, Name: kworker/1:1
    [  129.425179] Backtrace: 
    [  129.427616] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  129.435488] [] (schedule+0x0/0x90) from [] (worker_thread+0x1cc/0x2ac)
    [  129.443736] [] (worker_thread+0x0/0x2ac) from [] (kthread+0x98/0xa4)
    [  129.451827] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  129.459293]  r6:c005d0c4 r5:c0073320 r4:ddf61edc
    [  129.463886] 
    [  129.463886] PID: 706, Name: rq_stats
    [  129.468915] Backtrace: 
    [  129.471352] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  129.479256] [] (schedule+0x0/0x90) from [] (rescuer_thread+0x164/0x184)
    [  129.487597] [] (rescuer_thread+0x0/0x184) from [] (kthread+0x98/0xa4)
    [  129.495751] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  129.503217]  r6:c005d0c4 r5:c0073320 r4:ddf47e2c
    [  129.507810] 
    [  129.507810] PID: 712, Name: deferwq
    [  129.512746] Backtrace: 
    [  129.515182] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  129.523086] [] (schedule+0x0/0x90) from [] (rescuer_thread+0x164/0x184)
    [  129.531427] [] (rescuer_thread+0x0/0x184) from [] (kthread+0x98/0xa4)
    [  129.539581] [] (kthread+0x0/0xa4) from [] (do_exit+0x0/0x7b8)
    [  129.547047]  r6:c005d0c4 r5:c0073320 r4:ddf47ecc
    [  129.551640] 
    [  129.551640] PID: 1802, Name: hotplug2
    [  129.556763] Backtrace: 
    [  129.559200] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  129.567104] [] (schedule+0x0/0x90) from [] (schedule_timeout+0x190/0x1e4)
    [  129.575601] [] (schedule_timeout+0x0/0x1e4) from [] (__skb_recv_datagram+0x1f8/0x29c)
    [  129.585160]  r7:7fffffff r6:dd9dc000 r5:de126000 r4:00000000
    [  129.590815] [] (__skb_recv_datagram+0x0/0x29c) from [] (skb_recv_datagram+0x38/0x40)
    [  129.600281] [] (skb_recv_datagram+0x0/0x40) from [] (netlink_recvmsg+0x48/0x324)
    [  129.609372] [] (netlink_recvmsg+0x0/0x324) from [] (sock_recvmsg+0xa8/0xbc)
    [  129.618056] [] (sock_recvmsg+0x0/0xbc) from [] (sys_recvfrom+0x94/0xf0)
    [  129.626398]  r5:ddb42d80 r4:00000a00
    [  129.629959] [] (sys_recvfrom+0x0/0xf0) from [] (sys_recv+0x20/0x28)
    [  129.637925]  r8:c000eb84 r7:00000123 r6:00000003 r5:bec25e20 r4:00000a00
    [  129.644611] [] (sys_recv+0x0/0x28) from [] (ret_fast_syscall+0x0/0x30)
    [  129.652858] 
    [  129.652858] PID: 1828, Name: telnetd
    [  129.657888] Backtrace: 
    [  129.660324] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  129.668228] [] (schedule+0x0/0x90) from [] (schedule_hrtimeout_range_clock+0xf0/0x104)
    [  129.677881] [] (schedule_hrtimeout_range_clock+0x0/0x104) from [] (schedule_hrtimeout_range+0x14/0x18)
    [  129.688878]  r7:00000000 r6:00000004 r5:dd95fb84 r4:dd95e000
    [  129.694532] [] (schedule_hrtimeout_range+0x0/0x18) from [] (poll_schedule_timeout+0x44/0x5c)
    [  129.704686] [] (poll_schedule_timeout+0x0/0x5c) from [] (do_select+0x444/0x474)
    [  129.713714]  r5:00000010 r4:00000000
    [  129.717275] [] (do_select+0x0/0x474) from [] (core_sys_select+0x184/0x31c)
    [  129.725866] [] (core_sys_select+0x0/0x31c) from [] (sys_select+0xc4/0x104)
    [  129.734457] [] (sys_select+0x0/0x104) from [] (ret_fast_syscall+0x0/0x30)
    [  129.742955] 
    [  129.742955] PID: 1832, Name: lock
    [  129.747735] Backtrace: 
    [  129.750171] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  129.758075] [] (schedule+0x0/0x90) from [] (do_nanosleep+0x98/0xe0)
    [  129.766073] [] (do_nanosleep+0x0/0xe0) from [] (hrtimer_nanosleep+0x84/0x108)
    [  129.774914]  r6:bedc7830 r5:00000000 r4:0000c350
    [  129.779506] [] (hrtimer_nanosleep+0x0/0x108) from [] (sys_nanosleep+0xa0/0xa8)
    [  129.788441]  r7:000000a2 r6:00000000 r5:bedc7830 r4:bedc7830
    [  129.794095] [] (sys_nanosleep+0x0/0xa8) from [] (ret_fast_syscall+0x0/0x30)
    [  129.802780]  r4:bedc7830
    [  129.805279] 
    [  129.805279] PID: 1833, Name: ash
    [  129.809965] Backtrace: 
    [  129.812402] [] (__schedule+0x0/0x564) from [] (schedule+0x38/0x90)
    [  129.820306] [] (schedule+0x0/0x90) from [] (schedule_hrtimeout_range_clock+0xf0/0x104)
    [  129.829959] [] (schedule_hrtimeout_range_clock+0x0/0x104) from [] (schedule_hrtimeout_range+0x14/0x18)
    [  129.840955]  r7:00000000 r6:00000000 r5:dd921be4 r4:dd920000
    [  129.846610] [] (schedule_hrtimeout_range+0x0/0x18) from [] (poll_schedule_timeout+0x44/0x5c)
    [  129.856763] [] (poll_schedule_timeout+0x0/0x5c) from [] (do_sys_poll+0x2e0/0x36c)
    [  129.865979]  r5:00000000 r4:00000000
    [  129.869540] [] (do_sys_poll+0x0/0x36c) from [] (sys_poll+0x64/0xc8)
    [  129.877507] [] (sys_poll+0x0/0xc8) from [] (ret_fast_syscall+0x0/0x30)
    [  129.885754]  r7:000000a8 r6:be97b4c4 r5:00000001 r4:ffffffff
    [  129.891408] Kernel panic - not syncing: Qcom Watchdog Bark received
    [  129.891408] 
    [  129.899125] Linux (none) 3.4.103 #1 SMP PREEMPT Thu Oct 8 12:58:12 JST 2015 armv7l
    [  129.906685] date: 1970-01-01 09:02:09
    [  129.910340] CPU1: stopping
    [  129.913027] Backtrace: 
    [  129.915463] [] (dump_backtrace+0x0/0x118) from [] (dump_stack+0x18/0x1c)
    [  129.923867]  r6:ddf65f20 r5:c075b724 r4:00000001 r3:c0780900
    [  129.929522] [] (dump_stack+0x0/0x1c) from [] (handle_IPI+0x1b0/0x1e4)
    [  129.937675] [] (handle_IPI+0x0/0x1e4) from [] (gic_handle_irq+0xb8/0xc4)
    [  129.946079]  r7:ddf65f20 r6:00000006 r5:c075b724 r4:00000006
    [  129.951733] [] (gic_handle_irq+0x0/0xc4) from [] (__irq_svc+0x40/0x70)
    [  129.959981] Exception stack(0xddf65f20 to 0xddf65f68)
    [  129.965010] 5f20: 00000000 00000002 00000001 00000000 00000000 00000000 00000003 c0766ae4
    [  129.973164] 5f40: 4150406a 512f04d0 00000000 ddf65f84 ddf65f50 ddf65f68 c00a2a60 c004525c
    [  129.981349] 5f60: 60000013 ffffffff
    [  129.984817] [] (msm_cpuidle_enter+0x0/0x80) from [] (cpuidle_enter+0x1c/0x20)
    [  129.993658]  r6:00000000 r5:c0c6d180 r4:00000000 r3:c00451ec
    [  129.999312] [] (cpuidle_enter+0x0/0x20) from [] (cpuidle_idle_call+0xa8/0x148)
    [  130.008247] [] (cpuidle_idle_call+0x0/0x148) from [] (cpu_idle+0x68/0xfc)
    [  130.016744]  r7:c079ebc8 r6:c079e988 r5:c075fd60 r4:ddf64000
    [  130.022399] [] (cpu_idle+0x0/0xfc) from [] (secondary_start_kernel+0x134/0x15c)
    [  130.031427]  r6:c078315c r5:00000001 r4:ddf64000 r3:00000000
    [  130.037082] [] (secondary_start_kernel+0x0/0x15c) from [] (0x418711d4)
    [  130.045298]  r6:10c0387d r5:00000015 r4:51000400 r3:c03711bc
    [  130.062761] Rebooting in 5 seconds..
    [  135.063136] Going down for restart now