Xiaomi Redmi AX6 Wi-Fi 6 Mesh Router

Xiaomi Redmi AX6 is a Wi-fi 6 (802.11ax) capable mesh router, with 4+2 core ARM CPU, 512MB RAM, 128MB flash and 1+3 gigabit capable ethernet ports.

The Xiaomi Redmi AX6 Router is an 802.11ax OFDMA and MU-MIMO Dual-Band WiFi router, which has the following WiFi Interfaces.:

one 2.4GHz (QCN5024 2×2/40MHz ax)
one 5GHz (QCN5054 4×4/80 or 2×2/160MHz ax)

The radios support up to 4K QAM (through MCS0 - MCS15), for devices and paths that are compatible with those high-density modulations. Supports DFS channels, from channel 36 up to 165 (may vary on each region).

This is a router based on a Qualcomm IPQ8071A / QCA8074 V2 4-core SoC (up to 1.4GHz).

It has three 1G LAN ports, one 1G WAN port and 6 non-detachable external antennas.

Xiaomi is shipping the router only in a variant with Chinese OEM firmware. The router has support for OpenWrt.

Supported since 8253cb2de59aff81e576ea2655b1d290e4098001

The sysupgrade command may fail due to a random issue of wpad not being effectively stopped while upgrading Openwrt. Stopping the wpad service with service wpad stop before doing the sysupgrade fixes the issue.
Ath11k memory: The ath11k driver needed for the main wireless radios uses a lot of memory when there are few stations connected and low bandwidth traffic flowing. After testing, this problem has been improved in the current snapshot version.
NSS acceleration: the Qualcom NSS hardware acceleration is not available and maybe never will be. There is a community effort to enable it in the forum but this does not guarantee that it will be officially supported in the future.
The IPQ807x target has not yet support for DSA, on OpenWrt: See this forum post. The regular DSA instructions on the mini tutorial do demonstrably work however; wireless interfaces need to be set up in the Network→Wireless section and then be bridged in their Interface Configuration→General Setup→Network menu to connect them to wired interfaces, and the contributor making this statement only uses tagged VLANs on the wired ports.

OpenWrt forum thread: https://forum.openwrt.org/t/add-support-for-redmi-ax6-ax3000-wi-fi-6-mesh-router/76071
China Openwrt installation https://www.acwifi.net/14253.html
Experimental community OpenWrt with NSS acceleration support https://forum.openwrt.org/t/ipq807x-nss-build/148529

Notes

Flash chips known is ESMT F59D1G81MB-AZM1P9ACX. Maybe there are more variations of Flash Chips soldered on it. Needs more investigation.
Stock partitioning assumes ~35M size for each of `rootfs` MTD partitions, and ~30M for `overlay` MTD partition (and even with that, mounted `/overlay` partition somewhy only have size of 15M)

Snapshot versions don't have luci installed. If you want it, you can create your own customized firmware using for example the Firmware selector or you can install the package once installed (look at this guide LuCI essentials).

To flash this image there is a need for SSH access to the OEM firmware. It is not possible for now to flash OpenWrt from the stock FW with the OpenWrt Factory image. To gain SSH access, you will need a second router (any device) with OpenWrt firmware (further refered to as Router B).

SSH Access

Roll back to firmware to 1.0.16 || https://cdn.cnbj1.fds.api.mi-img.com/xiaoqiang/rom/ra69/miwifi_ra69_firmware_a7244_1.0.16.bin
Setup the router admin password (quick way is using the mobile setup app)
On Router B:

Change LAN Interface IP to “169.254.31.1” and disable DHCP
(Your PC may disconnect from the router. In that case, set manual IP on the PC to e.g. “192.254.31.101”, subnet “255.255.255.0”, gateway “192.254.31.1”)
Create wifi with SSID “ROUTERB” and set WPA2/PSK password “password”
SSH or SCP in and create a file /usr/lib/lua/luci/controller/admin/xqsystem.lua

Copy following to the file:

module("luci.controller.admin.xqsystem", package.seeall)

function index()
    local page   = node("api")
    page.target  = firstchild()
    page.title   = ("")
    page.order   = 100
    page.index = true
    page   = node("api","xqsystem")
    page.target  = firstchild()
    page.title   = ("")
    page.order   = 100
    page.index = true
    entry({"api", "xqsystem", "token"}, call("getToken"), (""), 103, 0x08)
end

local LuciHttp = require("luci.http")

function getToken()
    local result = {}
    result["code"] = 0
    result["token"] = "; nvram set ssh_en=1; nvram commit; sed -i 's/channel=.*/channel=\"debug\"/g' /etc/init.d/dropbear; /etc/init.d/dropbear start;"
    LuciHttp.write_json(result)
end

Copy following to a web browser:

http://169.254.31.1/cgi-bin/luci/api/xqsystem/token

The browser should return (not necessarily in the same order):

{"token":"; sed -i 's\/channel=.*\/channel=\"debug\"\/g' \/etc\/init.d\/dropbear; \/etc\/init.d\/dropbear start;","code":0}

4. Connect back to Redmi AX6 and proceed:

Open the web interface and log in on
```
http://192.168.31.1
```
Retreive the STOK value from the web address. E.g. for following
```
http://192.168.31.1/cgi-bin/luci/;stok=e16d77efa062846cb8869db6504b56ca/web/home#router
```
the STOK is “e16d77efa062846cb8869db6504b56ca”. The router generates a new STOK value each time you log into the web interface. Use always the current one.
Copy the following line to the web browser and replace “<STOK>” by the value of your STOK retrieved earlier (the wifi on Router B predefined earlier must be on and working):
```
http://192.168.31.1/cgi-bin/luci/;stok=<STOK>/api/misystem/extendwifi_connect?ssid=ROUTERB&password=password
```
After some time, the page should return
```
{"msg":"connect succces!","code":0}
```
If you get “504 Gateway time-out”, make sure you used WPA2 security mode for the password on Router B and repeat the previous point. If you get a “DHCP error”, make sure you disabled DHCP server on LAN interface of Router B and repeat the previous point.
Copy the following line to the web browser and replace “<STOK>” by the value of your STOK retrieved earlier:
```
http://192.168.31.1/cgi-bin/luci/;stok=<STOK>/api/xqsystem/oneclick_get_remote_token?username=xxx&password=xxx&nonce=xxx
```
You should see the same code as at the end of Point 3. Make sure the router does not upgrade to a newer firmware version as this would revert the SSH access.

5. Now you have a working SSH access to AX6:

Login using SSH:
```
ssh root@192.168.31.1
```
and used password generated here from the Serial Number of your router.

Enter the following lines one by one to the SSH terminal:

nvram set uart_en=1     # enable serial port for write
nvram set boot_wait=on  # wait for the user a key on boot for UART access
nvram set telnet_en=1   # enable telnet
nvram set ssh_en=1      # enable ssh
nvram commit

Flashing OpenWrt

After getting SSH access, you will now be able to flash a previously compiled image (by you since for the time being there are no official automated images):

Copy the OpenWrt generated image (the openwrt-ipq807x-generic-xiaomi_ax6-initramfs-nand-factory.ubi one) to the /tmp folder over SCP for example (note that since OpenSSH 9.0 you have to add the `-O` for compatability with the dropbear server)
This is a device with a dual partition scheme layout, so you need to find out which one is running with the command
```
nvram get flag_boot_rootfs
```

The output should be the partition number where the current system was booted from

mtd12: 023c0000 00020000 "rootfs"  - is the 0
mtd13: 023c0000 00020000 "rootfs_1"  - is the 1

Since you can't flash the current partition because it's locked you can only flash the opposite one by replacing the mtd number in the following command
```
ubiformat /dev/mtd12 -f /tmp/openwrt-ipq807x-generic-xiaomi_ax6-initramfs-nand-factory.ubi -s 2048 -O 2048
```
After flashing the image you need to configure the u-boot to boot from the recently flashed image by replacing the 1 with the number of the opposite partition (1 or 0) and running the commands:
```
nvram set flag_last_success=0 # if you've flashed mtd12, or "1" if mtd13
nvram set flag_boot_rootfs=0 # same
```
If you don't care about flag_last_success and flag_boot_rootfs variables just set flag_ota_reboot=1! It will boot to the other partition on each reboot (not only the next one!):
```
nvram set flag_ota_reboot=1
```
save the changes and reboot
```
nvram commit
reboot
```
Previous commands flashed an ubinized OpenWrt initramfs that will serve as the intermediate step since OpenWrt uses unified rootfs in order to fully utilize NAND and provide enough space for packages. Continue with the next steps in order to permanently flash OpenWrt.
SSH into OpenWrt from one of the LAN ports
Copy the file openwrt-ipq807x-generic-redmi_ax6-squashfs-sysupgrade.bin to the /tmp directory

Sysupgrade the device:

sysupgrade -n /tmp/openwrt-ipq807x-generic-redmi_ax6-squashfs-sysupgrade.bin

Device will reboot with OpenWrt, and then sysupgrade can be used to upgrade the device when desired. Although, see potential issues / limitations.

In openwrt the commands to check and change the boot partition are different:

fw_printenv flag_boot_rootfs
fw_setenv flag_boot_rootfs 0 # if you've flashed mtd12 or "1" if mtd13
fw_setenv flag_last_success 0 # same

→ generic.debrick

Redmi AX6 can be recovered from a soft-brick with TFTP. The flow is:

The router boots and asks for an IP address on the LAN ports via DHCP
The TFTP server assigns an IP address to the router
The router then connects to the TFTP server (where your DHCP server listen, e.g.: 192.168.31.100) and tries to download a file named with the IP address given by the DHCP server converted to hexadecimal.

Because of this quirk we will have to configure the tftp server to assign only one IP and we will set the file name to the only IP address it can receive.

For Windows you can use tftpd64 and on Linux you can use dnsmasq. These are the steps to do it for Linux (this can be adapted to the tftpd64's graphical interface very easily):

Create a folder somewhere to place your firmware for the tftp server and download the OEM firmware (the file name is a very important part; if you have previously had installed Xiaomi firmware version 1.1.14, you might need to adjust the name of the .img file to a different one. The router will be looking for a specific file name on the tftp – if it does not match the one you have in the tmp folder, rename it accordingly and proceed again):
```
mkdir -p /tmp/tftp
wget https://cdn.cnbj1.fds.api.mi-img.com/xiaoqiang/rom/ra69/miwifi_ra69_all_81ac71_1.1.10.bin -O /tmp/tftp/C0A81F02.img
```
To ensure that the TFTP server has access to the firmware, set the privileges:
```
sudo chmod -R 755 /tmp/tftp
sudo chown -R nobody:nogroup /tmp/tftp
```

Obtain the name of the ethernet adapter (to be used in further steps):
```
ip link
```

The result will loke something like (in this case, the name of the ethernet adapter is enp2s0):

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp2s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether xx:xx:xx:xx:xx:xx brd ff:ff:ff:ff:ff:ff
3: wlp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DORMANT group default qlen 1000
    link/ether yy:yy:yy:yy:yy:yy brd ff:ff:ff:ff:ff:ff

Set a static address on your PC to serve the firmware from:

sudo ip address flush dev <adapter name>
sudo ip address add 192.168.31.100/24 dev <adapter name>

Run the server with the following command:

sudo dnsmasq --no-daemon --listen-address=192.168.31.100 --bind-interfaces --dhcp-range=192.168.31.2,192.168.31.254 --enable-tftp --tftp-root=/tmp/tftp --log-dhcp --log-facility=-

Unplug the power, press and hold the reset button, plug the power back while still holding the button.
- Hold the reset button until the router's LED starts flashing orange.
- then it goes solid orange again, release the button.
- If in the terminal, you see that the router requests a different firmware file (different name; if you have previously had a Xiaomi firmware v.1.1.14 on the router), rename the file in the tmp folder and repeat the procedures from the IP flush again.
When the device finished loading the firmware, the led starts flashing with orange (amber) light. Wait for until blue led to goes solid!
- It might take some time for the led to go solid blue
- If the recovery doesn't accept the downloaded file the led switches to solid white - if this is the case, restart the recovery process with other file
- If the led is blinking blue led it means the device was flashed successfully and can be restarted
Put your interface back to DHCP mode and start again with breaking your device

Architecture	AArch64
Vendor	Qualcomm
Bootloader	U-Boot 2016.01 (Jul 10 2020 - 05:56:17 +0000)
System-On-Chip	4x ARM Cortex A53 (IPQ8071A / QCA8074 V2)
CPU/Speed	Up to 1.4 GHz
Flash-Chip	ESMT F59D1G81MB-AZM1P9ACX
Flash size	128 MB
RAM	512MB DDR3 (EM6HE16EWAKG-10H)
Wireless	5G QCN5054 4×4 MIMO 80MHz 2×2 MIMO 160MHz / 2.4G QCN5024 2×2 MIMO 573Mbps (CPU restricted).
Wireless features	RX LDPC, TX STBC, SUBF, MUBF (2.4GHz 2 streams; 5GHz 4 streams), 160/80+80MHz
Wireless features	5GHz FEM: QPF4550 (+20.5dBm MCS9VHT80); 2.4GHz FEM: QPF4200 (+21dBm MCS9VHT40; +22.5dBm MCS7VHT40 )
Ethernet	1 - 10/100/1000M adaptive WAN port (Auto MDI/MDIX); 3 - 10/100/1000M adaptive LAN ports (Auto MDI/MDI×)
Switch	Qualcomm QCA8075
USB	No
Serial	Yes
JTAG	Not populated

Redmi AX6 front PCB

Redmi AX6 back PCB

Redmi AX6 RF frontend comparison

To open the case, first remove the sticker from the bottom of the device. Two phillips screws are holding it together. After removing the screws, there are still plastic claws around the top piece and the edge. Gently use a guitar pick or similar tool to start separating the top piece around the edge.

Serial port pinout is clearly marked on the board.

Note: It's been reported the device uses 1.8V.

TTL serial connection is possible, the header has to be soldered, no missing components (resistors etc). There is 5 seconds to enter the bootloader (press ENTER).

Serial connection parameters for Xiaomi Redmi AX6	TTL, 115200, 8N1

No JTAG interface

Format: Log Type - Time(microsec) - Message - Optional Info Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00147 S - IMAGE_VARIANT_STRING=HAACANAAA S - OEM_IMAGE_VERSION_STRING=xiaoyang-gv S - Boot Config, 0x000002e5 B - 201 - PBL, Start B - 2738 - bootable_media_detect_entry, Start B - 3444 - bootable_media_detect_success, Start B - 3449 - elf_loader_entry, Start B - 6112 - auth_hash_seg_entry, Start B - 6355 - auth_hash_seg_exit, Start B - 68488 - elf_segs_hash_verify_entry, Start B - 131189 - PBL, End B - 141794 - SBL1, Start B - 194071 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4 B - 200476 - pm_device_init, Start B - 320890 - PM_SET_VAL:Skip D - 119743 - pm_device_init, Delta B - 323178 - pm_driver_init, Start D - 5368 - pm_driver_init, Delta B - 329613 - clock_init, Start D - 2135 - clock_init, Delta B - 333670 - boot_flash_init, Start D - 11895 - boot_flash_init, Delta B - 349255 - boot_config_data_table_init, Start D - 3202 - boot_config_data_table_init, Delta - (575 Bytes) B - 356758 - Boot Setting : 0x00000600 B - 360693 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:16 B - 367647 - sbl1_ddr_set_params, Start B - 371459 - CPR configuration: 0x300 B - 374845 - cpr_init, Start B - 377712 - Rail:0 Mode: 5 Voltage: 808000 B - 382866 - CL CPR settled at 760000mV B - 385703 - Rail:1 Mode: 5 Voltage: 880000 B - 389881 - Rail:1 Mode: 7 Voltage: 912000 D - 16470 - cpr_init, Delta B - 396774 - Pre_DDR_clock_init, Start B - 400800 - Pre_DDR_clock_init, End B - 404186 - DDR Type : PCDDR3 B - 409798 - do ddr sanity test, Start D - 1037 - do ddr sanity test, Delta B - 414647 - DDR: Start of HAL DDR Boot Training B - 419375 - DDR: End of HAL DDR Boot Training B - 425048 - DDR: Checksum to be stored on flash is -403985928 B - 435387 - Image Load, Start D - 224328 - QSEE Image Loaded, Delta - (1373936 Bytes) B - 659806 - Image Load, Start D - 61 - SEC Image Loaded, Delta - (0 Bytes) B - 667462 - Image Load, Start D - 10736 - DEVCFG Image Loaded, Delta - (26004 Bytes) B - 678289 - Image Load, Start D - 25254 - RPM Image Loaded, Delta - (105964 Bytes) B - 703604 - Image Load, Start D - 96655 - APPSBL Image Loaded, Delta - (590228 Bytes) B - 800381 - QSEE Execution, Start D - 61 - QSEE Execution, Delta B - 806206 - USB D+ check, Start D - 0 - USB D+ check, Delta B - 812581 - SBL1, End D - 673105 - SBL1, Delta S - Flash Throughput, 6753 KB/s (2096707 Bytes, 310482 us) S - DDR Frequency, 466 MHz S - Core 0 Frequency, 800 MHz U-Boot 2016.01 (Jul 10 2020 - 05:56:17 +0000), Build: jenkins-ra69_ota_publish-19 DRAM: smem ram ptable found: ver: 1 len: 4 512 MiB NAND: ONFI device found ID = 158061c8 Vendor = c8 Device = 61 SF: Unsupported flash IDs: manuf ff, jedec ffff, ext_jedec ffff ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0) 128 MiB MMC: sdhci: Node Not found, skipping initialization ## Error: flags type check failure for "ethaddr" <= ""00:AA:BB:CC:DD:10"" (type: m) himport_r: can't insert "ethaddr="00:AA:BB:CC:DD:10"" into hash table PCI1 is not defined in the device tree In: serial@78B3000 Out: serial@78B3000 Err: serial@78B3000 machid: 8010010 MMC Device 0 not found eth5 MAC Address from ART is not valid write phy_id=1, reg(0x8074):0x0670 write phy_id=2, reg(0x8074):0x0670 write phy_id=3, reg(0x8074):0x0670 write phy_id=4, reg(0x8074):0x0670 bootwait is off, bootdelay=5 Hit any key to stop autoboot: 0 trigger button release! boot from rootfs 1 miwifi: check crash in rmem ! ubi0: attaching mtd1 ubi0: scanning is finished ubi0: attached mtd1 (name "mtd=0", size 35 MiB) ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048 ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096 ubi0: good PEBs: 286, bad PEBs: 0, corrupted PEBs: 0 ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128 ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 305386615 ubi0: available PEBs: 40, total reserved PEBs: 246, PEBs reserved for bad PEB handling: 20 Read 0 bytes from volume kernel to 44000000 No size specified -> Using max size (4317184) Could not find PCI in device tree ## Loading kernel from FIT Image at 44000000 ... Using 'config@ac04' configuration Trying 'kernel@1' kernel subimage Description: ARM64 OpenWrt Linux-4.4.60 Type: Kernel Image Compression: gzip compressed Data Start: 0x440000e8 Data Size: 3957925 Bytes = 3.8 MiB Architecture: AArch64 OS: Linux Load Address: 0x41080000 Entry Point: 0x41080000 Hash algo: crc32 Hash value: 2ce02202 Hash algo: sha1 Hash value: 3fe50e4ae8337afb7b96a86638221462ee455ad3 Verifying Hash Integrity ... crc32+ sha1+ OK ## Loading fdt from FIT Image at 44000000 ... Using 'config@ac04' configuration Trying 'fdt@ac04' fdt subimage Description: ARM64 OpenWrt qcom-ipq807x-hkxx device tree blob Type: Flat Device Tree Compression: uncompressed Data Start: 0x443da1c0 Data Size: 79565 Bytes = 77.7 KiB Architecture: AArch64 Hash algo: crc32 Hash value: b4ed9ff8 Hash algo: sha1 Hash value: 6119388eb1ae982f4a3586f267c7ea804db115bb Verifying Hash Integrity ... crc32+ sha1+ OK Booting using the fdt blob at 0x443da1c0 Uncompressing Kernel Image ... OK Loading Device Tree to 4a3e9000, end 4a3ff6cc ... OK Using machid 0x8010010 from environment Starting kernel ... Jumping to AARCH64 kernel via monitor [ 0.000000] Booting Linux on physical CPU 0x0 [ 0.000000] Initializing cgroup subsys cpuset [ 0.000000] Initializing cgroup subsys cpu [ 0.000000] Initializing cgroup subsys cpuacct [ 0.000000] Linux version 4.4.60 (jenkins@92a4a83f0eca) (gcc version 5.5.0 (OpenWrt GCC 5.5.0 unknown) ) #0 SMP PREEMPT Tue Aug 18 13:50:52 2020 [ 0.000000] Boot CPU: AArch64 Processor [410fd034] [ 0.000000] Ignoring memory range 0x40000000 - 0x41000000 [ 0.000000] efi: Getting EFI parameters from FDT: [ 0.000000] efi: UEFI not found. [ 0.000000] psci: probing for conduit method from DT. [ 0.000000] psci: PSCIv1.0 detected in firmware. [ 0.000000] psci: Using standard PSCI v0.2 function IDs [ 0.000000] psci: MIGRATE_INFO_TYPE not supported. [ 0.000000] PERCPU: Embedded 14 pages/cpu @ffffffc01ef5c000 s19096 r8192 d30056 u57344 [ 0.000000] Detected VIPT I-cache on CPU0 [ 0.000000] CPU features: enabling workaround for ARM erratum 845719 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 105840 [ 0.000000] Kernel command line: ubi.mtd=rootfs_1 root=mtd:ubi_rootfs rootfstype=squashfs rootwait swiotlb=1 [ 0.000000] PID hash table entries: 2048 (order: 2, 16384 bytes) [ 0.000000] Dentry cache hash table entries: 65536 (order: 7, 524288 bytes) [ 0.000000] Inode-cache hash table entries: 32768 (order: 6, 262144 bytes) [ 0.000000] software IO TLB [mem 0x5fe57000-0x5fe97000] (0MB) mapped at [ffffffc01ee57000-ffffffc01ee96fff] [ 0.000000] Memory: 402204K/430080K available (5491K kernel code, 654K rwdata, 2796K rodata, 224K init, 405K bss, 27876K reserved, 0K cma-reserved) [ 0.000000] Virtual kernel memory layout: [ 0.000000] vmalloc : 0xffffff8000000000 - 0xffffffbdbfff0000 ( 246 GB) [ 0.000000] vmemmap : 0xffffffbdc0000000 - 0xffffffbfc0000000 ( 8 GB maximum) [ 0.000000] 0xffffffbdc0040000 - 0xffffffbdc0800000 ( 7 MB actual) [ 0.000000] fixed : 0xffffffbffa7fd000 - 0xffffffbffac00000 ( 4108 KB) [ 0.000000] PCI I/O : 0xffffffbffae00000 - 0xffffffbffbe00000 ( 16 MB) [ 0.000000] modules : 0xffffffbffc000000 - 0xffffffc000000000 ( 64 MB) [ 0.000000] memory : 0xffffffc000000000 - 0xffffffc01f000000 ( 496 MB) [ 0.000000] .init : 0xffffffc00089a000 - 0xffffffc0008d2000 ( 224 KB) [ 0.000000] .text : 0xffffffc000080000 - 0xffffffc0008997f4 ( 8294 KB) [ 0.000000] .data : 0xffffffc0008e1000 - 0xffffffc000984800 ( 654 KB) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 [ 0.000000] Preemptible hierarchical RCU implementation. [ 0.000000] Build-time adjustment of leaf fanout to 64. [ 0.000000] NR_IRQS:64 nr_irqs:64 0 [ 0.000000] Architected cp15 timer(s) running at 19.20MHz (virt). [ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x46d987e47, max_idle_ns: 440795202767 ns [ 0.000005] sched_clock: 56 bits at 19MHz, resolution 52ns, wraps every 4398046511078ns [ 0.000422] Calibrating delay loop (skipped), value calculated using timer frequency.. 38.40 BogoMIPS (lpj=192000) [ 0.000434] pid_max: default: 32768 minimum: 301 [ 0.000522] Mount-cache hash table entries: 1024 (order: 1, 8192 bytes) [ 0.000532] Mountpoint-cache hash table entries: 1024 (order: 1, 8192 bytes) [ 0.001064] Initializing cgroup subsys io [ 0.001080] Initializing cgroup subsys memory [ 0.001110] Initializing cgroup subsys devices [ 0.001125] Initializing cgroup subsys freezer [ 0.001136] Initializing cgroup subsys net_cls [ 0.001146] Initializing cgroup subsys pids [ 0.001396] EFI services will not be available. [ 0.001421] ASID allocator initialised with 65536 entries [ 0.051840] MSM Memory Dump base table set up [ 0.051865] MSM Memory Dump apps data table set up [ 0.090113] Detected VIPT I-cache on CPU1 [ 0.090156] CPU1: Booted secondary processor [410fd034] [ 0.120099] Detected VIPT I-cache on CPU2 [ 0.120127] CPU2: Booted secondary processor [410fd034] [ 0.150127] Detected VIPT I-cache on CPU3 [ 0.150154] CPU3: Booted secondary processor [410fd034] [ 0.150206] Brought up 4 CPUs [ 0.150233] SMP: Total of 4 processors activated. [ 0.150242] CPU: All CPU(s) started at EL1 [ 0.150266] alternatives: patching kernel code [ 0.167086] DMI not present or invalid. [ 0.167337] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.167362] futex hash table entries: 1024 (order: 5, 131072 bytes) [ 0.167585] pinctrl core: initialized pinctrl subsystem [ 0.168528] NET: Registered protocol family 16 [ 0.190056] cpuidle: using governor ladder [ 0.220073] cpuidle: using governor menu [ 0.220217] vdso: 2 pages (1 code @ ffffffc0008e9000, 1 data @ ffffffc0008e8000) [ 0.220359] DMA: preallocated 256 KiB pool for atomic allocations [ 0.220453] CPU: unavail, SoC Version: 2.0 [ 0.220489] <CORE> glink_init: IPC Logging Disabled [ 0.220888] IPC logging disabled [ 0.220894] IPC logging disabled [ 0.220899] IPC logging disabled [ 0.220904] IPC logging disabled [ 0.220908] IPC logging disabled [ 0.223617] Soc version is not 1, changing clock offsets [ 0.235006] irq: no irq domain found for /soc/smp2p-wcss/slave-kernel ! [ 0.237038] irq: no irq domain found for /soc/smp2p-wcss/slave-kernel ! [ 0.239222] msm_rpm_dev_probe: APSS-RPM communication over GLINK [ 0.240154] sps:sps is ready. [ 0.249922] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 2 [ 0.256446] pps_core: LinuxPPS API ver. 1 registered [ 0.256459] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it> [ 0.256485] PTP clock support registered [ 0.256635] dmi: Firmware registration failed. [ 0.257962] Advanced Linux Sound Architecture Driver Initialized. [ 0.258605] clocksource: Switched to clocksource arch_sys_counter [ 0.261860] NET: Registered protocol family 2 [ 0.262452] TCP established hash table entries: 4096 (order: 3, 32768 bytes) [ 0.262512] TCP bind hash table entries: 4096 (order: 4, 65536 bytes) [ 0.262609] TCP: Hash tables configured (established 4096 bind 4096) [ 0.262662] UDP hash table entries: 256 (order: 1, 8192 bytes) [ 0.262685] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes) [ 0.262856] NET: Registered protocol family 1 [ 0.270481] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.270498] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.273794] io scheduler noop registered [ 0.273810] io scheduler deadline registered (default) [ 0.275947] 20000000.pci supply vdda not found, using dummy regulator [ 0.276029] 20000000.pci supply vdda_phy not found, using dummy regulator [ 0.276064] 20000000.pci supply vdda_refclk not found, using dummy regulator [ 0.276611] PCI host bridge /soc/pci@20000000 ranges: [ 0.276638] IO 0x20200000..0x202fffff -> 0x20200000 [ 0.276653] MEM 0x20300000..0x20ffffff -> 0x20300000 [ 1.308651] qcom-pcie 20000000.pci: phy link never came up [ 1.310195] qcom-pcie 20000000.pci: hostinit failed [ 1.310205] qcom-pcie 20000000.pci: cannot initialize host [ 1.310353] qcom-pcie: probe of 20000000.pci failed with error -110 [ 1.315797] NET: Registered protocol family 27 [ 1.315810] IPC_RTR: ipc_router_create_log_ctx: IPC Logging disabled [ 1.315823] qmi_log_init: IPC Logging disabled [ 1.315828] qmi_log_init: IPC Logging disabled [ 1.315919] msm_rpm_log_probe: OK [ 1.316498] msm-dcc b3000.dcc: DCC XPU is not specified [ 1.316741] msm-dcc b3000.dcc: DCC SRAM dump setup failed [ 1.316764] msm-dcc b3000.dcc: jiffies_64: 0xffff8b52, cntvct_64: 0xc1445f4 [ 1.316776] msm-dcc b3000.dcc: gcnt_hi: 0x00000000(0xffffff80003cc004) [ 1.316786] msm-dcc b3000.dcc: gcnt_lo: 0x0c1447a9(0xffffff80003cc000) [ 1.317332] TZ Log : Will warn on Access Violation, as paniconaccessviolation is not set [ 1.317998] msm_serial 78b3000.serial: msm_serial: detected port #0 [ 1.318033] msm_serial 78b3000.serial: uartclk = 3686400 [ 1.318066] 78b3000.serial: ttyMSM0 at MMIO 0x78b3000 (irq = 77, base_baud = 230400) is a MSM [ 1.318084] msm_serial: console setup on port #0 [ 2.053860] console [ttyMSM0] enabled [ 2.058822] msm_serial 78b1000.serial: msm_serial: detected port #1 [ 2.062092] msm_serial 78b1000.serial: uartclk = 19200000 [ 2.068163] 78b1000.serial: ttyMSM1 at MMIO 0x78b1000 (irq = 78, base_baud = 1200000) is a MSM [ 2.074023] msm_serial: driver initialized [ 2.082505] msm_serial_hsl_init: driver initialized [ 2.095261] brd: module loaded [ 2.095944] spi_qup 78b5000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64 [ 2.098723] m25p80 spi32766.0: unrecognized JEDEC id bytes: ff, ff, ff [ 2.105476] nand: device found, Manufacturer ID: 0xc8, Chip ID: 0x61 [ 2.110787] nand: GigaDevice PSR1GA30DT [ 2.117254] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64 [ 2.120937] 16 ofpart partitions found on MTD device qcom_nand.0 [ 2.128455] Creating 16 MTD partitions on "qcom_nand.0": [ 2.134636] 0x000000000000-0x000000100000 : "0:SBL1" [ 2.141589] 0x000000100000-0x000000200000 : "0:MIBIB" [ 2.146387] 0x000000200000-0x000000500000 : "0:QSEE" [ 2.153161] 0x000000500000-0x000000580000 : "0:DEVCFG" [ 2.155908] 0x000000580000-0x000000600000 : "0:RPM" [ 2.160891] 0x000000600000-0x000000680000 : "0:CDT" [ 2.165642] 0x000000680000-0x000000700000 : "0:APPSBLENV" [ 2.170516] 0x000000700000-0x000000800000 : "0:APPSBL" [ 2.176498] 0x000000800000-0x000000880000 : "0:ART" [ 2.181144] 0x000000880000-0x000000900000 : "bdata" [ 2.185858] 0x000000900000-0x000000980000 : "crash" [ 2.190721] 0x000000980000-0x000000a00000 : "crash_syslog" [ 2.195563] 0x000000a00000-0x000002dc0000 : "rootfs" [ 2.232557] mtd: device 12 (rootfs) set to be root filesystem [ 2.232882] mtdsplit: no squashfs found in "rootfs" [ 2.237284] 0x000002dc0000-0x000005180000 : "rootfs_1" [ 2.274445] 0x000005180000-0x000007040000 : "overlay" [ 2.302197] 0x000007040000-0x0000070c0000 : "rsvd0" [ 2.303801] spmi spmi-0: PMIC Arb Version-2 (0x20010000) [ 2.308782] libphy: Fixed MDIO Bus: probed [ 2.532078] qca-mdio 90000.mdio: Could not find phy-reset-gpio [ 2.532187] libphy: qca_mdio: probed [ 2.538021] qca-mdio 90000.mdio: qca-mdio driver was registered [ 2.540749] Unable to create IPC log context! [ 2.546468] cnss: Platform driver probed successfully. [ 2.550942] Skip QCA8074V1 in V2 platform [ 2.555821] cnss_genl: genl_register_family fail: -17 [ 2.559845] cnss: CNSS genl init failed -17 [ 2.564826] cnss: Platform driver probed successfully. [ 2.569006] i2c /dev entries driver [ 2.580550] device-mapper: ioctl: 4.34.0-ioctl (2015-10-28) initialised: dm-devel@redhat.com [ 2.581003] sdhci: Secure Digital Host Controller Interface driver [ 2.588046] sdhci: Copyright(c) Pierre Ossman [ 2.594065] sdhci-pltfm: SDHCI platform and OF driver helper [ 2.599150] qcom_ice_get_device_tree_data: No vdd-hba-supply regulator, assuming not needed [ 2.604249] ICE IRQ = 81 [ 2.612792] [ 2.612792] Version Rollback Feature Disabled [ 2.615714] sps_register_bam_device : unable to create IPC Logging 0 for bam 0x0000000008b04000 [ 2.620710] sps_register_bam_device : unable to create IPC Logging 1 for bam 0x0000000008b04000sps_register_bam_device : unable to create IPC Logging 2 for bam 0x0000000008b04000 [ 2.637965] sps_register_bam_device : unable to create IPC Logging 3 for bam 0x0000000008b04000sps_register_bam_device : unable to create IPC Logging 4 for bam 0x0000000008b04000 [ 2.653860] sps:BAM 0x0000000008b04000 is registered.[ 2.661603] DEV CI test message [ 2.666300] subsys-restart: ssr_parse_restart_orders(): q6v5_m3 device has been added to q6v5-m3's restart group [ 2.669066] subsys-restart: ssr_parse_restart_orders(): q6v5_wcss device has been added to q6v5-m3's restart group [ 2.679544] remoteproc remoteproc0: q6v5-m3 is available [ 2.689972] SPMI VADC - Min ch: 0 Max ch: 15 [ 2.696751] of_graph_get_next_endpoint(): no port node found in /soc/csr@6001000 [ 2.699437] coresight-csr 6001000.csr: CSR initialized [ 2.706858] of_graph_get_next_endpoint(): no port node found in /soc/cti@6010000 [ 2.711834] of_graph_get_next_endpoint(): no port node found in /soc/cti@6011000 [ 2.719371] of_graph_get_next_endpoint(): no port node found in /soc/cti@6012000 [ 2.726733] of_graph_get_next_endpoint(): no port node found in /soc/cti@6013000 [ 2.734128] of_graph_get_next_endpoint(): no port node found in /soc/cti@6014000 [ 2.741516] of_graph_get_next_endpoint(): no port node found in /soc/cti@6015000 [ 2.748885] of_graph_get_next_endpoint(): no port node found in /soc/cti@6016000 [ 2.756247] of_graph_get_next_endpoint(): no port node found in /soc/cti@6017000 [ 2.763643] of_graph_get_next_endpoint(): no port node found in /soc/cti@6018000 [ 2.771025] of_graph_get_next_endpoint(): no port node found in /soc/cti@6019000 [ 2.778387] of_graph_get_next_endpoint(): no port node found in /soc/cti@601a000 [ 2.785783] of_graph_get_next_endpoint(): no port node found in /soc/cti@601b000 [ 2.793155] of_graph_get_next_endpoint(): no port node found in /soc/cti@601c000 [ 2.800539] of_graph_get_next_endpoint(): no port node found in /soc/cti@601d000 [ 2.807905] of_graph_get_next_endpoint(): no port node found in /soc/cti@601e000 [ 2.815291] of_graph_get_next_endpoint(): no port node found in /soc/cti@601f000 [ 2.822672] of_graph_get_next_endpoint(): no port node found in /soc/cti@6198000 [ 2.830213] of_graph_get_next_endpoint(): no port node found in /soc/cti@6199000 [ 2.837535] of_graph_get_next_endpoint(): no port node found in /soc/cti@619a000 [ 2.844964] of_graph_get_next_endpoint(): no port node found in /soc/cti@619b000 [ 2.852378] of_graph_get_next_endpoint(): no port node found in /soc/cti@610c000 [ 2.859756] sps_register_bam_device : unable to create IPC Logging 0 for bam 0x0000000006044000 [ 2.866787] sps_register_bam_device : unable to create IPC Logging 1 for bam 0x0000000006044000sps_register_bam_device : unable to create IPC Logging 2 for bam 0x0000000006044000 [ 2.883896] sps_register_bam_device : unable to create IPC Logging 3 for bam 0x0000000006044000sps_register_bam_device : unable to create IPC Logging 4 for bam 0x0000000006044000 [ 2.899782] sps:BAM 0x0000000006044000 is registered.[ 2.907407] coresight-tmc 6028000.tmc: TMC initialized [ 2.912217] coresight-tmc 6027000.tmc: TMC initialized [ 2.917346] coresight-funnel 6021000.funnel: FUNNEL initialized [ 2.922409] coresight-funnel 6100000.funnel: FUNNEL initialized [ 2.928206] coresight-funnel 6120000.funnel: FUNNEL initialized [ 2.934130] coresight-funnel 61a1000.funnel: FUNNEL initialized [ 2.940561] coresight-etm4x 619c000.etm: ETM 4.0 initialized [ 2.946242] coresight-etm4x 619d000.etm: ETM 4.0 initialized [ 2.952191] coresight-etm4x 619e000.etm: ETM 4.0 initialized [ 2.957853] coresight-etm4x 619f000.etm: ETM 4.0 initialized [ 2.963142] coresight-replicator-qcom 6026000.replicator: REPLICATOR 1.0 initialized [ 2.968885] coresight-stm 6002000.stm: STM initialized [ 2.977408] of_graph_get_next_endpoint(): no port node found in /soc/hwevent@6101000 [ 2.981313] coresight-hwevent 6101000.hwevent: Hardware Event driver initialized [ 2.991680] Netfilter messages via NETLINK v0.30. [ 2.996511] ip_set: protocol 6 [ 3.001789] NET: Registered protocol family 10 [ 3.004814] NET: Registered protocol family 17 [ 3.008485] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this. [ 3.012936] Bridge firewalling registered [ 3.025647] 8021q: 802.1Q VLAN Support v1.8 [ 3.031020] <CORE> glink_core_register_transport: IPC Logging disabled [ 3.033649] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 2 [ 3.040160] msm_glink_smem_native_xprt rx fifo not found [ 3.047489] pmd9655_s3: supplied by e-smps1-reg [ 3.053103] cpr4_ipq807x_apss_read_fuse_data: apc_corner: speed bin = 0 [ 3.057146] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR fusing revision = 1 [ 3.063760] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR misc fuse value = 0 [ 3.071409] cpr4_ipq807x_apss_read_fuse_data: apc_corner: Voltage boost fuse config = 0 boost = disable [ 3.078911] cpr3_mem_acc_init: apc: not using memory accelerator regulator [ 3.088052] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused SVS: open-loop= 704000 uV [ 3.095013] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused NOM: open-loop= 816000 uV [ 3.105038] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused SVS: quot[ 7]= 698, quot_offset[ 7]= 0 [ 3.114808] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused NOM: quot[ 7]= 916, quot_offset[ 7]= 215 [ 3.125752] cpr3_regulator_init_ctrl: apc: Default CPR mode = closed-loop [ 3.137858] cpufreq: cpufreq_online: CPU0: Running at unlisted freq: 800000 KHz [ 3.143468] cpufreq: cpufreq_online: CPU0: Unlisted initial frequency changed to: 1017600 KHz [ 3.150734] DEV CI test message [ 3.159566] remoteproc remoteproc1: q6v5-wcss is available [ 3.162291] ubi0: attaching mtd13 [ 3.351826] ubi0: scanning is finished [ 3.358530] ubi0: attached mtd13 (name "rootfs_1", size 35 MiB) [ 3.358550] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes [ 3.363255] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048 [ 3.370197] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096 [ 3.377047] ubi0: good PEBs: 286, bad PEBs: 0, corrupted PEBs: 0 [ 3.383823] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128 [ 3.390076] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 305386615 [ 3.397104] ubi0: available PEBs: 40, total reserved PEBs: 246, PEBs reserved for bad PEB handling: 20 [ 3.406058] ubi0: background thread "ubi_bgt0d" started, PID 118 [ 3.416145] hctosys: unable to open rtc device (rtc0) [ 3.446719] crash_kernel_init, res rsvd1, 50700000, 400000, /reserved-memory/rsvd1@50700000 [ 3.446752] mtd dev crash, size 0x80000 [ 3.454632] crash_kernel_init, crash init, res->start:50700000,crash_buf:0xffffff8001c80000,crash_buf_len 0x7ffe4, crash_avail_sz 0x80000 [ 3.458308] Crash kernel dumper registered ok! [ 3.471011] crash_syslog_init, res rsvd2, 50b00000, 400000, /reserved-memory/rsvd2@50b00000 [ 3.475489] mtd dev crash_syslog, size 0x80000 [ 3.484632] crash_syslog_init, crash init, crash_buf_len 0x3ffe4, crash_avail_sz 0x40000 [ 3.488790] Crash syslog dumper register ok! [ 3.497222] pmd9655_ldo11: disabling [ 3.501955] ALSA device list: [ 3.505163] No soundcards found. [ 3.510338] VFS: Mounted root (squashfs filesystem) readonly on device 31:17. [ 3.511471] Freeing unused kernel memory: 224K (ffffffc00089a000 - ffffffc0008d2000) [ 3.518560] Freeing alternatives memory: 44K (ffffffc0008d2000 - ffffffc0008dd000) [ 3.866556] init: Console is alive [ 3.866675] init: - watchdog - [ 3.988974] random: nonblocking pool is initialized [ 4.980890] kmodloader: loading kernel modules from /etc/modules-boot.d/* [ 4.996429] usbcore: registered new interface driver usbfs [ 4.996482] usbcore: registered new interface driver hub [ 5.000929] usbcore: registered new device driver usb [ 5.007658] Button Hotplug driver version 0.4.1 [ 5.013720] SCSI subsystem initialized [ 5.017441] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 5.019908] ehci-platform: EHCI generic platform driver [ 5.248565] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller [ 5.248655] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 1 [ 5.253093] xhci-hcd xhci-hcd.0.auto: hcc params 0x0220fe65 hci version 0x110 quirks 0x00010010 [ 5.260537] xhci-hcd xhci-hcd.0.auto: irq 189, io mem 0x08a00000 [ 5.269577] hub 1-0:1.0: USB hub found [ 5.275431] hub 1-0:1.0: 1 port detected [ 5.279183] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller [ 5.283062] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 2 [ 5.288397] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM. [ 5.296238] hub 2-0:1.0: USB hub found [ 5.304262] hub 2-0:1.0: 1 port detected [ 5.310542] kmodloader: done loading kernel modules from /etc/modules-boot.d/* [ 5.319016] init: - preinit - Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 8.674408] mount_root: mounting /dev/root [ 8.725656] ubi1: attaching mtd14 [ 8.885682] ubi1: scanning is finished [ 8.908221] ubi1: attached mtd14 (name "overlay", size 30 MiB) [ 8.908249] ubi1: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes [ 8.912958] ubi1: min./max. I/O unit sizes: 2048/2048, sub-page size 2048 [ 8.919809] ubi1: VID header offset: 2048 (aligned 2048), data offset: 4096 [ 8.926657] ubi1: good PEBs: 246, bad PEBs: 0, corrupted PEBs: 0 [ 8.933433] ubi1: user volume: 1, internal volumes: 1, max. volumes count: 128 [ 8.939687] ubi1: max/mean erase counter: 2/0, WL threshold: 4096, image sequence number: 711819256 [ 8.946714] ubi1: available PEBs: 0, total reserved PEBs: 246, PEBs reserved for bad PEB handling: 20 [ 8.955675] ubi1: background thread "ubi_bgt1d" started, PID 189 UBI device number 1, total 246 LEBs (31236096 bytes, 29.7 MiB), available 0 LEBs (0 bytes), LEB size 126976 bytes (124.0 KiB) u[ 8.979228] UBIFS (ubi1:0): background thread "ubifs_bgt1_0" started, PID 200 bimkvol: error!: UBI device does not have free logical eraseblocks [ 9.015525] UBIFS (ubi1:0): recovery needed [ 9.123860] UBIFS (ubi1:0): recovery completed [ 9.123924] UBIFS (ubi1:0): UBIFS: mounted UBI device 1, volume 0, name "data" [ 9.127190] UBIFS (ubi1:0): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes [ 9.134415] UBIFS (ubi1:0): FS size: 26918912 bytes (25 MiB, 212 LEBs), journal size 1396736 bytes (1 MiB, 11 LEBs) [ 9.144390] UBIFS (ubi1:0): reserved for root: 1271446 bytes (1241 KiB) [ 9.154628] UBIFS (ubi1:0): media format: w4/r0 (latest is w4/r0), UUID FB3689B6-15C2-4FD2-B89B-27D6C707D1AA, small LPT model 2116+0 records in 2116+0 records out 2116 bytes (2.1KB) copied, 0.006090 seconds, 339.3KB/s 131072+0 records in 131072+0 records out 131072 bytes (128.0KB) copied, 0.345192 [ 9.542534] urandom-seed: Seed file not found (/etc/urandom.seed) seconds, 370.8KB/s [ 10.062019] procd: - early - [ 10.062070] procd: - watchdog - [ 10.660570] procd: - watchdog - [ 10.660694] procd: - ubus - [ 10.712929] procd: - init - Please press Enter to activate this console. /etc/rc.d/S00sysfixtime: Tue Dec 29 00:52:11 UTC 2020 /etc/rc.d/S00wifi_fw_mount: 2116+0 records in /etc/rc.d/S00wifi_fw_mount: 2116+0 records out /etc/rc.d/S00wifi_fw_mount: 2116 bytes (2.1KB) copied, 0.006010 seconds, 343.8KB/s /etc/rc.d/S00wifi_fw_mount: 131072+0 records in /etc/rc.d/S00wifi_fw_mount: 131072+0 records out /etc/rc.d/S00wifi_fw_mount: 131072 bytes (128.0KB) copied, 0.342413 seconds, 373.8KB/s /etc/rc.d/S03cgroup_init: mount: mounting none on /dev/cgroup/mem failed: Resource busy /etc/rc.d/S03cgroup_init: mount: mounting none on /dev/cgroup/net_cls failed: Resource busy /etc/rc.d/S03cgroup_init: mount: mounting none on /dev/cgroup/cpu failed: Resource busy /etc/rc.d/S09qca-iot: sh: write error: Invalid argument /etc/rc.d/S09qca-iot: /etc/rc.common: line 154: can't create /sys/class/gpio/gpio/direction: nonexistent directory /etc/rc.d/S09qca-iot: /etc/rc.common: line 154: can't create /sys/class/gpio/gpio/value: nonexistent directory /etc/rc.d/S09qca-iot: /etc/rc.common: line 154: can't create /sys/class/gpio/gpio/value: nonexistent directory /usr/bin/iotd[305]: Started iot daemon [ 11.263160] kmodloader: loading kernel modules from /etc/modules.d/* [ 11.865874] nf_conntrack version 0.5.0 (3144 buckets, 40000 max) [ 11.865904] xqnss: extend init success! [ 11.878400] cfg80211: World regulatory domain updated: [ 11.878426] cfg80211: DFS Master region: unset [ 11.882461] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time) [ 11.887035] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A) [ 11.896654] cfg80211: (2457000 KHz - 2482000 KHz @ 20000 KHz, 92000 KHz AUTO), (N/A, 2000 mBm), (N/A) [ 11.904437] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A) [ 11.913809] cfg80211: (5170000 KHz - 5250000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (N/A) [ 11.921781] cfg80211: (5250000 KHz - 5330000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (0 s) [ 11.931529] cfg80211: (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s) [ 11.940947] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A) [ 11.949019] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A) [ 12.047114] ssdk_switch_device_num_init[998]:INFO:ess-switch dts node number: 1 [ 12.050846] ssdk_dt_get_switch_node[836]:INFO:ess-switch DT exist! [ 12.057729] ssdk_dt_parse_access_mode[737]:INFO:switch_access_mode: local bus [ 12.063889] ssdk_dt_parse_access_mode[750]:INFO:switchreg_base_addr: 0x3a000000 [ 12.071012] ssdk_dt_parse_access_mode[751]:INFO:switchreg_size: 0x1000000 [ 12.078299] ssdk_dt_parse_mac_mode[242]:INFO:mac mode = 0x0 [ 12.084720] ssdk_dt_parse_mac_mode[251]:INFO:mac mode1 = 0xff [ 12.090281] ssdk_dt_parse_mac_mode[260]:INFO:mac mode2 = 0xff [ 12.096032] ssdk_dt_parse_uniphy[279]:INFO:ess-uniphy DT exist! [ 12.101865] ssdk_dt_parse_intf_mac[683]:INFO:dp1 MAC 9c:9d:7e:55:18:a5 [ 12.107661] ssdk_dt_parse_intf_mac[683]:INFO:dp2 MAC 28:d1:27:f7:b7:c4 [ 12.114171] ssdk_dt_parse_intf_mac[683]:INFO:dp3 MAC 9c:9d:7e:55:18:a5 [ 12.120688] ssdk_dt_parse_intf_mac[683]:INFO:dp4 MAC 9c:9d:7e:55:18:a5 [ 12.127191] ssdk_dt_parse_intf_mac[683]:INFO:dp5 MAC 9c:9d:7e:55:18:a5 [ 12.133721] ssdk_plat_init start [ 12.210708] ssdk_ppe_clock_init[464]:INFO:ppe and uniphy clock init successfully! [ 12.213873] ssdk_probe[1884]:INFO:ess_rst doesn't exist! [ 12.221794] HPPE initializing... [ 12.222443] malibu_phy_api_ops_init[2851]:INFO:qca probe malibu phy driver succeeded! [ 12.233529] regi_init[3411]:INFO:Initializing HPPE!! [ 12.448603] ssdk_ppe_reset_init[738]:INFO:ppe reset successfully! [ 12.455797] qca_hppe_tdm_hw_init[737]:INFO:tdm setup num=96 [ 12.459068] qca_hppe_portctrl_hw_init[165]:INFO:Hawkeye PPE port initializing [ 12.674716] ssdk_switch_register[1623]:INFO:Chip version 0x1500 [ 12.677698] qca_link_polling_select[1285]:INFO:link-polling-required node does not exist [ 12.683936] ssdk_switch_register[1648]:INFO:polling is selected [ 12.691666] regi_init[3415]:INFO:Initializing HPPE Done!! [ 12.696586] regi_init[3459]:INFO:qca-ssdk module init succeeded! [ 12.704143] tun: Universal TUN/TAP device driver, 1.6 [ 12.705033] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com> [ 12.713220] EDMA ver 1 hw init [ 12.716277] EDMA HW Reset completed succesfully [ 12.719188] Num rings - TxDesc:1 (23-23) TxCmpl:1 (7-7) [ 12.723524] RxDesc:1 (15-15) RxFill:1 (7-7) [ 12.735363] ********************************************************** [ 12.735391] * NSS Data Plane driver [ 12.740896] ********************************************************** [ 12.748127] l2tp_core: L2TP core driver, V2.0 [ 12.751571] l2tp_netlink: L2TP netlink interface [ 12.909993] nss_driver - fw of size 667888 bytes copied to load addr: 40000000, nss_id : 0 [ 12.911755] Supported Frequencies - [ 12.917139] 187.2 MHz 748.8 MHz [ 12.923122] 1.4976 GHz [ 12.924080] [ 12.926546] ffffffbffc62c680: meminfo init succeed [ 12.975794] node size 2 # items 4 [ 12.975819] memory: 40000000 536870912 (avl 435597312) items 4 active_cores 2 [ 12.978097] ffffffbffc62c680: nss core 0 booted successfully [ 12.983131] nss_driver - fw of size 265296 bytes copied to load addr: 40800000, nss_id : 1 [ 12.984039] Supported Frequencies - [ 12.984040] 187.2 MHz [ 12.984040] 748.8 MHz [ 12.984041] 1.4976 GHz [ 12.984042] [ 12.984218] ffffffbffc633780: meminfo init succeed [ 13.011898] node size 2 # items 4 [ 13.016014] memory: 40000000 536870912 (avl 435621888) items 4 active_cores 2 [ 13.019423] ffffffbffc633780: nss core 1 booted successfully [ 13.027991] sit: IPv6 over IPv4 tunneling driver [ 13.034626] nat46: module (version 8ff2ae59ec9840a7b8b45f976c51cae80abe0226) loaded. [ 13.037578] gre: GRE over IPv4 demultiplexor driver [ 13.045390] ip_gre: GRE over IPv4 tunneling driver [ 13.050831] ip6_gre: GRE over IPv6 tunneling driver [ 13.056786] Ethernet Channel Bonding Driver: v3.7.1 (April 27, 2011) [ 13.062120] QCA multicast snooping installed successfully [ 13.068273] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 15.041276] QCA Hy-Fi multicast installation successfully [ 15.799159] nss_lag_init[354]:LAG Manager Installed [ 16.430265] PPP generic driver version 2.4.2 [ 16.430922] NET: Registered protocol family 24 [ 16.800032] <NSS-CRYPTO>:module loaded Build_ID - 08/19/20, 03:00:01 SoC=ipq807x_64 [ 17.040489] cannot find nss-macsec0 node [ 17.040545] cannot find nss-macsec1 node [ 17.043494] cannot find nss-macsec2 node [ 17.047373] nss_macsec init success [ 17.411889] diag: IPC Logging disabled [ 20.209254] u32 classifier [ 20.209275] input device check on [ 20.210844] Actions configured [ 20.619244] Mirror/redirect action on [ 25.659788] ipaccount: ifname [lo] event[5] [ 25.659814] ipaccount: ifname [miireg] event[5] [ 25.662770] ipaccount: ifname [eth0] event[5] [ 25.667290] ipaccount: ifname [eth1] event[5] [ 25.671829] ipaccount: ifname [eth2] event[5] [ 25.676138] ipaccount: ifname [eth3] event[5] [ 25.680485] ipaccount: ifname [eth4] event[5] [ 25.684818] ipaccount: ifname [ip6tnl0] event[5] [ 25.689167] ipaccount: ifname [sit0] event[5] [ 25.693846] ipaccount: ifname [gre0] event[5] [ 25.698098] ipaccount: ifname [gretap0] event[5] [ 25.702450] ipaccount: ifname [ip6gre0] event[5] [ 25.707128] ipaccount: ifname [bond0] event[5] [ 25.711741] ipaccount: ifname [teql0] event[5] [ 25.961054] fuse init (API version 7.23) [ 26.191976] ip_tables: (C) 2000-2006 Netfilter Core Team [ 26.194440] l2tp_ppp: PPPoL2TP kernel driver, V2.0 [ 26.463420] PPP MPPE Compression module registered [ 26.464452] PPTP driver version 0.8.5 [ 26.471242] ipt: xt_cgroup_MARK installed ok. [ 26.482113] xt_time: kernel timezone is -0000 [ 26.491664] kmodloader: done loading kernel modules from /etc/modules.d/* /etc/rc.d/S10boot: cp: omitting directory '/cfg/default/internal' /etc/rc.d/S10boot: cat: can't open '/lib/wifi/wifi_nss_hk_olnum': No such file or d[ 29.770358] configuring additional NSS pbufs irectory /etc/rc.d/S10boot: sh: 3: unknown operand [ 29.782802] additional pbufs of size 3100672 got added to NSS [ 29.796130] mem_manager: module license 'unspecified' taints kernel. [ 29.796158] Disabling lock debugging due to kernel taint [ 29.802480] __mm_init_module [ 29.826227] qdf_dbg_mask value is invalid [ 29.826250] Using the default module debug levels instead [ 29.829259] qdf_print_ctrl_register: Allocated print control object 0 [ 29.834654] MINIDUMP VA .bss start=ffffffbffcd28f00 module=qdf [ 30.293876] wlan: [1394:E:CONFIG] cfg_uint_item_handler: 171: gScanProbeRepeatTime=50 - Out of range [0, 30]; Using 50 [ 30.293969] MINIDUMP VA .bss start=ffffffbffcfb8a80 module=umacINFO: Cold boot calibration not applicable: ap-ac04 [ 30.459108] [ 30.459108] MINIDUMP VA .bss start=ffffffbffd244900 module=qca_ol=======ol_if_register_wifi3_0========== [ 30.471651] wlan: [1406:I:ANY] osif_nss_register_module: 90: NSS wifi ops registered for target_type:1 with soc_ops:ffffffbffd3788b8 [ 30.474293] remoteproc remoteproc0: powering up q6v5-m3 [ 30.502548] remoteproc remoteproc0: Booting fw image IPQ8074/m3_fw.mdt, size 284 [ 30.502581] Sanity check passed for M3 image [ 30.555945] remoteproc remoteproc0: remote processor q6v5-m3 is now up [ 30.556137] <SSR>: glink SUBSYS_BEFOER_POWERUP reinit done [ 30.561389] wlan: [1406:I:ANY] ol_ath_ahb_ssr: 183: ol_ath_ahb_ssr: SSR event 2 [ 30.566842] remoteproc remoteproc1: powering up q6v5-wcss [ 30.574319] remoteproc remoteproc1: Booting fw image IPQ8074/q6_fw.mdt, size 668 [ 30.579823] Sanity check passed for the image [ 31.679051] glink_core_link_up glink is up [ 31.679240] glink_xprt_open_event [ 31.679378] Subsystem error monitoring/handling services are up [ 31.679415] remoteproc remoteproc1: remote processor q6v5-wcss is now up [ 31.679440] IPC_RTR: ipc_router_create_log_ctx: IPC Logging disabled [ 31.679561] wlan: [1406:I:ANY] ol_ath_ahb_ssr: 183: ol_ath_ahb_ssr: SSR event 3 [ 31.705085] cnss: QMI WLFW service connected, state: 0x1 [ 31.705264] diag: In diag_send_feature_mask_update, control channel is not open, p: 2, ffffffbffc916248 [ 31.717190] cnss: device_id : 0xfffe mem mode : [1] [ 31.726763] cnss: Boardid from dts:292,FW:ff [ 31.737223] cnss: BDF location : 0x000000004b0c0000 [ 31.737252] cnss: BDF IPQ8074/bdwlan.b292 size 131072 [ 31.741294] cnss: BDF download response , result: 0, err: 0x0 [ 31.746472] cnss: per device BDF location : 0x000000004b0e0000 [ 31.751979] cnss: CALDATA IPQ8074/caldata.bin size 131072 offset 0x20000 [ 31.759686] cnss: BDF download response , result: 0, err: 0x0 [ 31.780196] wlan: [1406:I:ANY] pld_ahb_wlan_enable: 689: cnss_mode: Mission mode [ 31.788794] wlan: [1406:I:ANY] qca_napi_create: 357: qca_napi_create: napi instance 0 created on pipe 4 [ 31.789088] wlan: [1406:I:ANY] __ol_ath_attach: 3064: Allocated soc ffffffc018280880 [ 31.797198] btcoex_support 0 wlan_prio_gpio 0 [ 31.805171] wlan: [1406:E:CONFIG] cfg_uint_item_handler: 171: dp_int_timer_threshold_tx=1000 - Out of range [8, 100]; Using 1000 [ 31.809379] wlan: [1406:E:CONFIG] cfg_uint_item_handler: 171: dp_rxdma_monitor_desc_ring=128 - Out of range [4096, 16384]; Using 4096 [ 31.821057] wlan: [1406:I:ANY] osif_nss_wifi_soc_setup: 186: nss-wifili:#1 register wifili function for soc [ 31.832840] wlan: [1406:I:ANY] osif_nss_wifi_soc_setup: 198: nss register id -1 nss config 3 Target Type 18 [ 31.842730] wlan: [1406:I:ANY] __ol_ath_attach: 3278: dev name soc0 [ 31.852690] wlan: [1406:I:ANY] ol_ath_soc_attach: 6558: WMI attached. wmi_handle ffffffc01bf5d000 [ 31.858562] wlan: [1406:I:ANY] htc_wmi_init: 5925: htc_wmi_init() HT Create . ffffffc0180e5000 [ 31.867528] wlan: [1406:I:ANY] htc_wmi_init: 5932: htc_wmi_init() Skipping BMI Done. [ 31.876219] wlan: [1406:I:ANY] htc_wmi_init: 5989: [htc_wmi_init:5989] host_enable 0 nss_nwifi_offload 0 [ 31.887949] wlan: [1406:I:ANY] ol_target_init_complete: 6107: CDP soc attach success [ 31.893555] wlan: [1406:I:ANY] ol_target_init_complete: 6114: Soc attach success NSS config 0 [ 31.901373] wlan: [1406:I:ANY] htc_set_async_ep: 428: htc_set_async_ep: htc_handle ffffffc0180e5000, ep 2, value 1 [ 31.909880] wlan: [1406:I:ANY] htc_set_async_ep: 428: htc_set_async_ep: htc_handle ffffffc0180e5000, ep 3, value 1 [ 31.920586] wlan: [1138:I:TIF] HE_CAP Info = 1a08010d [ 31.930385] wlan: [1138:I:TIF] Num HW modes = 1 [ 31.935450] wlan: [1138:I:TIF] Num PHY = 2 [ 31.939800] wlan: [1138:I:TIF] Preferred HW Mode = 1 Num Radios = 2 [ 31.943970] wlan: [1138:I:TIF] init_deinit_add_11ax_modes: 1403: Adding 11ax regulatory modes, [ 31.950174] wlan: [1138:I:TIF] init_deinit_add_11ax_modes: 1406: phy_id = 0 wireless modes = f97f9001 [ 31.958898] wlan: [1138:I:TIF] init_deinit_add_11ax_modes: 1403: Adding 11ax regulatory modes, [ 31.968106] wlan: [1138:I:TIF] init_deinit_add_11ax_modes: 1406: phy_id = 1 wireless modes = 680680c [ 31.977036] wlan: [1138:I:dfs] WLAN_DEBUG_DFS_ALWAYS : wlan_dfs_pdev_obj_create_notification: 390: dfs_offload 1 [ 31.985997] wlan: [1138:I:dfs] WLAN_DEBUG_DFS_ALWAYS : dfs_agile_soc_obj_init: 1038: dfs->dfs_psoc_idx: 0 [ 31.996245] wlan: [1138:I:dfs] WLAN_DEBUG_DFS_ALWAYS : dfs_agile_soc_obj_init: 1044: dfs_soc_obj->num_dfs_privs: 1 [ 32.006000] wlan: [1138:I:dfs] WLAN_DEBUG_DFS_ALWAYS : wlan_dfs_pdev_obj_create_notification: 362: Do not allocate DFS object for 2G, pdev_id = 1 [ 32.023624] wlan: [1138:I:TIF] init_deinit_update_pdev_tgt_info: 1064: CDP PDEV ATTACH success [ 32.031371] wlan: [1138:I:TIF] init_deinit_update_pdev_tgt_info: 1064: CDP PDEV ATTACH success [ 32.138399] wlan: [1138:I:ANY] copy_fw_abi_version_tlv: 6258: copy_fw_abi_version_tlv: INIT_CMD version: 1, 0, 0x5f414351, 0x4c4d, 0x0, 0x0 [ 32.268701] wlan: [1138:I:ANY] dp_peer_map_attach_wifi3: 9979: dp_peer_map_attach_wifi3 max_peers 311, max_ast_index: 1040 [ 32.268701] [ 32.268816] wlan: [1138:I:ANY] ready_extract_init_status_tlv: 8002: ready_extract_init_status_tlv:0 [ 32.280109] wlan: [1406:I:ANY] ol_ath_connect_htc: 1219: WMI is ready [ 32.342637] wlan: [1406:E:WMI] wmi_unified_register_event_handler: Event id 37 is unavailable [ 32.342862] wlan: [1406:E:WMI] wmi_unified_register_event_handler: Event id 141 is unavailable [ 32.350361] wlan: [1406:E:WMI] wmi_unified_register_event_handler: Event id 137 is unavailable [ 32.358836] wlan: [1406:I:ANY] ol_ath_soc_attach: 6632: connect HTC [ 32.368090] wlan: [1406:I:ANY] ol_ath_soc_attach: 6633: bypasswmi : 0 [ 32.373589] wlan: [1406:E:WMI] wmi_unified_register_event_handler: Event id 38 is unavailable [ 32.380177] wlan: [1406:E:WMI] wmi_unified_register_event_handler: Event id 138 is unavailable [ 32.388702] wlan: [1406:E:WMI] wmi_unified_register_event_handler: Event id 139 is unavailable [ 32.397200] wlan: [1406:E:WMI] wmi_unified_register_event_handler: Event id 55 is unavailable [ 32.405788] wlan: [1406:E:WMI] wmi_unified_register_event_handler: Event id 49 is unavailable [ 32.414392] wlan: [1406:E:WMI] wmi_unified_register_event_handler: Event id 25 is unavailable [ 32.422886] wlan: [1406:I:ANY] ol_ath_soc_attach: 6708: ol_ath_soc_attach() UMAC attach . [ 32.431401] *skip LOWI socket init, save id22 for ALD* [ 32.439791] wlan: [1406:I:ANY] __ol_ath_attach: 3397: pdev_netdev name wifi0 [ 32.445034] wlan: [1406:I:ANY] __ol_ath_attach: 3442: Skip txrx_pdev_attach_target [ 32.452144] wlan: [1406:I:ANY] __ol_ath_attach: 3466: BURSTING enabled by default [ 32.459794] wlan: [1406:I:ANY] ol_ath_pdev_attach: 7173: interface_id 0 [ 32.467092] wlan: [1406:I:ANY] ol_ath_pdev_regdmn_init: 6862: phy id = 0 Modes supported [ 32.473503] wlan: [1406:I:ANY] ol_ath_pdev_regdmn_init: 6869: 11b = 0 11g = 0 11a = 1 11n = 1 11ac = 1 11ax = 1 [ 32.482039] wlan: [1406:I:ANY] ol_ath_pdev_regdmn_init: 6877: Reg cap - phy_id = 0 supp_bnd = 2, modes = f97f9001, lo_2g = 0, hi_2g = 0 lo_g5 = 4910, hi_5g = 6100 [ 32.492272] wlan: [1406:I:ANY] ol_ath_update_wireless_modes: 1318: wireless_modes = f97f9001 before update [ 32.506611] wlan: [1406:I:ANY] ol_ath_update_wireless_modes: 1333: Wireless_modes = f97f9001 after update [ 32.516153] wlan: [1406:I:ANY] ol_ath_update_ext_caps: 1844: 11ax 5G supported case [ 32.526760] wlan: [1406:I:ANY] ol_resmgr_create: 223: OL Resmgr Init-ed [ 32.533300] ieee80211_cbs_init CBS Inited [ 32.543106] wlan: [1406:I:ANY] acfg_attach: 3457: acfg_attach: 3457: Netlink socket created:ffffffc0170df000 [ 32.543812] wlan: [1406:I:ANY] ol_if_eeprom_attach: 1459: rate power table override is only supported for AR98XX [ 32.554088] wlan: [1406:I:ANY] ol_ath_stats_attach: 2071: periodic_chan_stats: 1 [ 32.567395] wlan: [1406:I:ANY] wlan_scan_update_channel_list: 1090: num_chan: 25 [ 32.571324] wlan: [0:I:ANY] ol_ath_pdev_attach: 7509: Set global_ic[1], ptr:ffffffbffcfb8de0 [ 32.578645] wlan: [0:I:ANY] dp_lag_soc_enable: 88: pdev(ffffffc018274888) Enabling DBDC Repeater 1 [ 32.587148] wlan: [0:E:NSS] [nss-wifili]: NSS Wifili DBDC Repeater enable message passed [ 32.595823] wlan: [0:I:ANY] dp_lag_pdev_set_primary_radio: 44: pdev(ffffffc018274888) is_primary 1 [ 32.604157] wlan: [1406:I:ANY] ol_ath_pdev_attach: 7626: Pdev = 0 Number of peers = 137 [ 32.613243] wlan: [0:I:ANY] ol_ath_twt_enable_complete_event_handler: 11867: twt enabled. [ 32.613243] [ 32.615478] wlan: [1406:I:ANY] ol_ath_pri20_cfg_blockchanlist_parse: 583: ( 1) chan 36 blocked from cfg [ 32.615483] wlan: [1406:I:ANY] ol_ath_pri20_cfg_blockchanlist_parse: 583: ( 2) chan 132 blocked from cfg [ 32.615511] wlan: [1406:I:ANY] osif_wrap_attach: 239: osif wrap attached [ 32.615511] [ 32.615515] wlan: [1406:I:ANY] osif_wrap_devt_init: 201: osif wrap dev table init done [ 32.615515] [ 32.615522] wlan: [1406:I:ANY] osif_wrap_attach: 247: Wrap Attached: Wrap_com =ffffffc018523400 ic->ic_wrap_com=ffffffc018523400 &wrap_com->wc_devt=ffffffc018523400 [ 32.615522] [ 32.615547] wlan: [1406:I:ANY] __ol_ath_attach: 3646: needed_headroom reservation 60 [ 32.615553] wlan: [1406:I:ANY] ol_ath_enable_fraglist: 2931: Enabled Fraglist bit for the radio wifi0 features 41 [ 32.615616] wlan: [1406:I:ANY] wlan_cfg80211_init: 9619: Number of 5G channels: 25 [ 32.615856] wlan: [1406:I:ANY] ieee80211_cfg80211_radio_attach: 9713: ic: 0xffffffc016940880, wdev: 0xffffffc016950a70, wiphy: 0xffffffc01702a2a0, netdev: 0xffffffc016940000 [ 32.615921] ipaccount: ifname [wifi0] event[16] [ 32.616328] ipaccount: ifname [wifi0] event[5] [ 32.616431] wlan: [1406:I:ANY] __ol_ath_attach: 3397: pdev_netdev name wifi1 [ 32.616450] wlan: [1406:I:ANY] __ol_ath_attach: 3442: Skip txrx_pdev_attach_target [ 32.616454] wlan: [1406:I:ANY] __ol_ath_attach: 3466: BURSTING enabled by default [ 32.616500] wlan: [1406:I:ANY] ol_ath_pdev_attach: 7173: interface_id 1 [ 32.616511] wlan: [1406:I:ANY] ol_ath_pdev_regdmn_init: 6862: phy id = 1 Modes supported [ 32.616517] wlan: [1406:I:ANY] ol_ath_pdev_regdmn_init: 6869: 11b = 1 11g = 1 11a = 0 11n = 1 11ac = 1 11ax = 1 [ 32.616523] wlan: [1406:I:ANY] ol_ath_pdev_regdmn_init: 6877: Reg cap - phy_id = 1 supp_bnd = 1, modes = 680680c, lo_2g = 2312, hi_2g = 2732 lo_g5 = 0, hi_5g = 0 [ 32.616527] wlan: [1406:I:ANY] ol_ath_update_wireless_modes: 1318: wireless_modes = 680680c before update [ 32.616531] wlan: [1406:I:ANY] ol_ath_update_wireless_modes: 1333: Wireless_modes = 680680c after update [ 32.616535] wlan: [1406:I:ANY] ol_ath_update_ext_caps: 1852: 11ax 2G supported case [ 32.616646] wlan: [1406:I:ANY] ol_resmgr_create: 223: OL Resmgr Init-ed [ 32.616717] ieee80211_cbs_init CBS Inited [ 32.616731] wlan: [1406:I:ANY] acfg_attach: 3432: Offload using existing sock ffffffc0170df000 [ 32.616741] wlan: [1406:I:ANY] ol_if_eeprom_attach: 1459: rate power table override is only supported for AR98XX [ 32.616746] wlan: [1406:I:ANY] ol_ath_stats_attach: 2071: periodic_chan_stats: 1 [ 32.616962] wlan: [1406:I:ANY] wlan_scan_update_channel_list: 1090: num_chan: 11 [ 32.616983] wlan: [0:I:ANY] ol_ath_pdev_attach: 7509: Set global_ic[2], ptr:ffffffbffcfb8de0 [ 32.616989] wlan: [0:I:ANY] dp_lag_soc_enable: 88: pdev(ffffffc016383288) Enabling DBDC Repeater 1 [ 32.617010] wlan: [0:I:ANY] dp_lag_pdev_set_primary_radio: 44: pdev(ffffffc016383288) is_primary 0 [ 32.617020] wlan: [1406:I:ANY] ol_ath_pdev_attach: 7626: Pdev = 1 Number of peers = 137 [ 32.618361] wlan: [1406:E:WMI] event handler already registered 0x6019 [ 32.619289] wlan: [1406:I:ANY] ol_ath_pri20_cfg_blockchanlist_parse: 583: ( 1) chan 36 blocked from cfg [ 32.619294] wlan: [1406:I:ANY] ol_ath_pri20_cfg_blockchanlist_parse: 583: ( 2) chan 132 blocked from cfg [ 32.619314] wlan: [1406:I:ANY] osif_wrap_attach: 239: osif wrap attached [ 32.619314] [ 32.619318] wlan: [1406:I:ANY] osif_wrap_devt_init: 201: osif wrap dev table init done [ 32.619318] [ 32.619324] wlan: [1406:I:ANY] osif_wrap_attach: 247: Wrap Attached: Wrap_com =ffffffc01257cc00 ic->ic_wrap_com=ffffffc01257cc00 &wrap_com->wc_devt=ffffffc01257cc00 [ 32.619324] [ 32.619341] wlan: [1406:I:ANY] __ol_ath_attach: 3646: needed_headroom reservation 60 [ 32.619346] wlan: [1406:I:ANY] ol_ath_enable_fraglist: 2931: Enabled Fraglist bit for the radio wifi1 features 41 [ 32.619362] wlan: [1406:I:ANY] wlan_cfg80211_init: 9607: Number of 2G channels: 11 [ 32.619502] wlan: [1406:I:ANY] ieee80211_cfg80211_radio_attach: 9713: ic: 0xffffffc016980880, wdev: 0xffffffc016990a70, wiphy: 0xffffffc01702d2a0, netdev: 0xffffffc016980000 [ 32.619527] ipaccount: ifname [wifi1] event[16] [ 32.619889] ipaccount: ifname [wifi1] event[5] [ 32.619970] ipaccount: ifname [soc0] event[16] [ 32.620204] ipaccount: ifname [soc0] event[5] [ 32.620237] wlan: [1406:I:ANY] wlan_pdev_operation: 729: num_radios=1, wifi_radios[0].sc = ffffffc016940880_radio_type = 2 [ 32.620243] wlan: [1406:I:ANY] wlan_pdev_operation: 729: num_radios=2, wifi_radios[1].sc = ffffffc016980880_radio_type = 2 [ 32.620271] wlan: [1406:I:ANY] init_ath_pci_3_0: 151: 6ath_ol_pci_wifi3.0: (Atheros/multi-bss) [ 33.040948] [ 33.040948] MINIDUMP VA .bss start=ffffffbffd378d00 module=wifi_3_0 [ 33.040949] wlan: [0:E:NSS] [nss-wifili]: NSS Wifili DBDC Repeater enable message passed [ 33.057856] wlan: [0:I:ANY] ol_ath_twt_enable_complete_event_handler: 11867: twt enabled. [ 33.057856] [ 33.081847] wlan: [1411:I:ANY] osif_nss_register_module: 90: NSS wifi ops registered for target_type:0 with soc_ops:ffffffbffd441858 [ 33.081893] wlan: [1411:I:ANY] osif_nss_register_module: 90: NSS wifi ops registered for target_type:0 with soc_ops:ffffffbffd441858 [ 33.093631] wlan: [1411:I:ANY] init_ath_pci_2_0: 143: 6ath_ol_pci_2_0: (Atheros/multi-bss) No Direct-Attach chipsets found. /etc/rc.d/S10boot: cat: can't open '1': No such file or directory /etc/rc.d/S10boot: killall: acfg_tool: no process killed /etc/rc.d/S10boot: /sbin/wifi: eval: line 1: /usr/sbin/acfg_tool: not found [ 33.986139] ipaccount: ifname [bond0] event[11] /etc/rc.d/S15qca-wpa-supplicant: Successfully initialized wpa_supplicant /etc/rc.d/S16qca-ssdk: /etc/rc.d/S16qca-ssdk: starting /etc/rc.d/S19dnsmasq: cp: can't stat '/etc/dnsmasq.d/*': No such file or directory /etc/rc.d/S19dnsmasq: sh: out of range /etc/rc.d/S19dnsmasq: sh: out of range /etc/rc.d/S19firewall: /etc/rc.common: line 1: /usr/sbin/firewall.webinitrdr: not found [ 36.642469] ECM init [ 36.642525] ECM database jhash random seed: 0x972d4bfa [ 36.644836] qcaecm: register ecm_nss_ipv4_post_routing_hook() [ 36.648905] ECM init complete /etc/rc.d/S19qca-nss-ecm: net.bridge.bridge-nf-call-ip6tables = 1 /etc/rc.d/S19qca-nss-ecm: net.bridge.bridge-nf-call-iptables = 1 /etc/rc.d/S19qca-nss-ecm: dev.nss.general.redirect = 1 /etc/rc.d/S20network: uci: Invalid argument /etc/rc.d/S21nginx: start fcgi-cgi by spawn-fcgi. /etc/rc.d/S21nginx: start nginx ok. lbd: stopping daemon /etc/init.d/network: Command failed: Not found [ 40.351217] ipaccount: ifname [br-lan] event[16] [ 40.352169] ipaccount: ifname [br-lan] event[5] [ 40.355695] ipaccount: ifname [eth2] event[13] [ 40.369225] ipaccount: ifname [eth2] event[1] [ 40.370196] ipaccount: ifname [eth2] event[20] [ 40.372766] ipaccount: ifname [eth2] event[26] [ 40.377211] ipaccount: ifname [eth2] event[21] [ 40.381571] ipaccount: ifname [eth2] event[11] [ 40.385762] device eth2 entered promiscuous mode [ 40.390635] ipaccount: ifname [br-lan] event[11] [ 40.395272] ipaccount: ifname [br-lan] event[8] [ 40.399825] ipaccount: ifname [eth2] event[27] [ 40.404560] ipaccount: ifname [br-lan] event[8] [ 40.408515] ipaccount: ifname [br-lan] event[13] [ 40.413741] br-lan: port 1(eth2) entered forwarding state [ 40.417683] br-lan: port 1(eth2) entered forwarding state [ 40.423698] ipaccount: ifname [br-lan] event[1] [ 40.433393] ipaccount: ifname [eth3] event[13] [ 40.435614] ipaccount: ifname [eth3] event[1] [ 40.438041] ipaccount: ifname [eth3] event[20] [ 40.441904] ipaccount: ifname [eth3] event[26] [ 40.446572] ipaccount: ifname [eth3] event[21] [ 40.451328] ipaccount: ifname [eth3] event[11] [ 40.458716] device eth3 entered promiscuous mode [ 40.459361] br-lan: port 2(eth3) entered forwarding state [ 40.464041] br-lan: port 2(eth3) entered forwarding state [ 40.470039] ipaccount: ifname [eth3] event[27] [ 40.477333] ipaccount: ifname [eth4] event[13] [ 40.481622] ipaccount: ifname [eth4] event[1] [ 40.484460] ipaccount: ifname [eth4] event[20] [ 40.488198] ipaccount: ifname [eth4] event[26] [ 40.492831] ipaccount: ifname [eth4] event[21] [ 40.496844] ipaccount: ifname [eth4] event[11] [ 40.501254] device eth4 entered promiscuous mode [ 40.505665] br-lan: port 3(eth4) entered forwarding state [ 40.510342] br-lan: port 3(eth4) entered forwarding state [ 40.515836] ipaccount: ifname [eth4] event[27] /etc/init.d/network: Command failed: Not found /etc/init.d/network: killall: iface-mgr: no process killed [ 40.571549] ipaccount: ifname [eth1] event[13] [ 40.572246] ipaccount: ifname [eth1] event[1] [ 40.575860] ipaccount: ifname [lo] event[13] [ 40.580191] ipaccount: ifname [lo] event[1] /etc/init.d/network: killall: acfg_tool: no process killed /etc/init.d/network: /sbin/wifi: eval: line 1: /usr/sbin/acfg_tool: not found qcawificfg80211 disable radio wifi0 [ 40.607434] hyfi_netlink_receive:114:hyfi: Not attached to bridge br-lan qcawificfg80211 disable radio wifi1 /etc/rc.d/S49messagingagent.sh: start messagingagent ok. /etc/rc.d/S50acd: acd *** not in cap/re mode, skip handle crond[3365]: crond (busybox 1.25.1) started, log level 5 /etc/init.d/network: device: wifi0 vifs: cfg023579 /etc/init.d/network: device: wifi1 vifs: cfg043579 miot_2G /etc/init.d/network: killall: acfg_tool: no process killed /etc/init.d/network: /sbin/wifi: eval: line 1: /usr/sbin/acfg_tool: not found qcawificfg80211: enable radio wifi0 /etc/init.d/network: cp: omitting directory '/cfg/default/internal' /etc/rc.d/S51cp_preinstall_plugins.sh: ls: /usr/share/datacenter/appdata/notuninstallable/app_infos: No such file or directory /etc/rc.d/S51cp_preinstall_plugins.sh: ls: /usr/share/datacenter/appdata/uninstallable/app_infos: No such file or directory [ 41.348818] br-lan: port 1(eth2) entered disabled state [ 41.348949] ipaccount: ifname [eth2] event[4] [ 41.352986] ipaccount: ifname [br-lan] event[4] [ 41.357429] br-lan: port 2(eth3) entered disabled state [ 41.361777] ipaccount: ifname [eth3] event[4] [ 41.367784] br-lan: port 3(eth4) entered disabled state [ 41.371999] ipaccount: ifname [eth4] event[4] [ 41.377153] ipaccount: ifname [eth1] event[4] /etc/init.d/network: Enable ol_stats by default for Lithium platforms [ 42.113784] wlan: [4576:I:ANY] wlan_cfg80211_set_hwaddr: 5439: wlan_cfg80211_set_hwaddr :9c:9d:7e:55:18:5b ret: 0 [ 42.145010] wlan: [4590:I:ANY] ol_ath_set_config_param: 1493: set TXBF_SND_PERIOD: value 100 wmi_status 0 [ 42.261094] wlan: [0:I:ANY] ol_ath_set_config_param: 2203: Disconnect_timeout value: 10 [ 42.294200] wlan: [0:I:ANY] ol_ath_set_config_param: 2209: Reconfiguration_timeout value:60 /etc/init.d/network: cat: can't open '/lib/wifi/wifi_nss_hk_olnum': No such file or directory /etc/init.d/network: sh: 3: unknown operand [ 42.348747] ipaccount: ifname [br-lan] event[4] number of vifs: [ 42.512428] ipaccount: ifname [wifi0] event[13] [ 42.513122] ipaccount: ifname [wifi0] event[1] /etc/init.d/network: sh: wl2: unknown operand /etc/init.d/network: sh: wl13: unknown operand qcawificfg80211: enable radio wifi1 /etc/init.d/network: cp: omitting directory '/cfg/default/internal' /etc/rc.d/S51key_services_boot_check: @@@@@@ RA69 key_service_check skip wireless! /etc/init.d/network: Enable ol_stats by default for Lithium platforms [ 43.376151] wlan: [5560:I:ANY] wlan_cfg80211_set_hwaddr: 5439: wlan_cfg80211_set_hwaddr :9c:9d:7e:55:18:a5 ret: 0 [ 43.404267] wlan: [5562:I:ANY] ol_ath_set_config_param: 1493: set TXBF_SND_PERIOD: value 100 wmi_status 0 [ 43.493014] wlan: [0:I:ANY] ol_ath_set_config_param: 2203: Disconnect_timeout value: 10 [ 43.523392] wlan: [0:I:ANY] ol_ath_set_config_param: 2209: Reconfiguration_timeout value:60 /etc/init.d/network: cat: can't open '/lib/wifi/wifi_nss_hk_olnum': No such file or directory /etc/init.d/network: sh: 3: unknown operand number of vifs: [ 43.695206] ipaccount: ifname [wifi1] event[13] [ 43.695415] ipaccount: ifname [wifi1] event[1] /etc/init.d/network: sh: wl2: unknown operand /etc/init.d/network: sh: wl13: unknown operand /etc/init.d/network: /sbin/wifi: eval: line 1: iface_mgr_setup: not found /etc/init.d/network: device: wifi0 vifs: cfg023579 /etc/init.d/network: device: wifi1 vifs: cfg043579 miot_2G /etc/rc.d/S54hyfi-bridging: hyfi-bridging *** not in cap/re mode, skip handle /etc/rc.d/S55hyd: hyd *** not in cap/re mode, skip handle /etc/rc.d/S60iweventd: iwevent-call start ok /etc/rc.d/S77trafficd: refresh ifname into ipaacount in [lan-dev 5g-wl 2.4g-wl wl-guest[ 48.853059] ipaccount: refresh dev ifname to [eth2 eth3 eth4 wl0 wl1 wl14 wl5] [ 48.856951] ipaccount: landev_init_all() add dev [eth2] is_wireless: 0. [ 48.864276] ipaccount: landev_init_all() add dev [eth3] is_wireless: 0. [ 48.870857] ipaccount: landev_init_all() add dev [eth4] is_wireless: 0. [ 48.877430] ipaccount: landev_init_all() get dev [wl0] not found. [ 48.884088] ipaccount: landev_init_all() get dev [wl1] not found. [ 48.890297] ipaccount: landev_init_all() get dev [wl14] not found. [ 48.896353] ipaccount: landev_init_all() get dev [wl5] not found. 5g-wl-backhaul] /etc/rc.d/S77trafficd: eth2 eth3 eth4 wl0 wl1 wl14 wl5 /etc/rc.d/S77trafficd: trafficd start ok /etc/rc.d/S80datacenter: chmod: /userdisk/data: Read-only file system xqwhc_repacd: **ppid=1, cmd=</sbin/procd> /etc/rc.d/S97repacd: cat: can't open '/proc/0/cmdline': No such file or directory xqwhc_repacd: *parent ppid 0, cmd=<> xqwhc_repacd: *** in non-mesh mode, skip repacd handle xqwhc_repacd: **ppid=1, cmd=</sbin/procd> /etc/init.d/repacd: cat: can't open '/proc/0/cmdline': No such file or directory xqwhc_repacd: *parent ppid 0, cmd=<> xqwhc_repacd: *** in non-mesh mode, skip repacd handle /etc/rc.d/S98miqos: { /etc/rc.d/S98miqos: status=0 /etc/rc.d/S98miqos: data=ok /etc/rc.d/S98miqos: } /etc/rc.d/S98xqwhc: xqwhc *** not in cap/re mode, skip handle /etc/rc.d/S98xqwhc: { "name": "xqwhc", "script": "\/etc\/rc.d\/S98xqwhc", "instances": { }, "triggers": [ ], "data": { } } /etc/rc.d/S99boot_check: : INFO: rcS timing 45.418749785s seconds. Tue Dec 29 08:52:51 CST 2020 boot_check[6670]: Booting up finished.

IPQ807x# version U-Boot 2016.01 (Jul 10 2020 - 05:56:17 +0000) arm-openwrt-linux-muslgnueabi-gcc (OpenWrt GCC 5.2.0 998fe11+r49254) 5.2.0 GNU ld (GNU Binutils) 2.24.0 IPQ807x# help ? - alias for 'help' aq_load_fw- LOAD aq-fw-binary aq_phy_restart- Restart Aquantia phy base - print or set address offset bdinfo - print Board Info structure bootm - boot application image from memory bootmiwifi- bootmiwifi from flash device bootp - boot image via network using BOOTP/TFTP protocol bootz - boot Linux zImage image from memory btnc - check reset button if pressed to 5s - if so ret 1 btni - init gpios for button chpart - change active partition cmp - memory compare cp - memory copy crc32 - checksum calculation dcache - enable or disable data cache dhcp - boot image via network using DHCP/TFTP protocol dm - Driver model low level access echo - echo args to console env - environment handling commands erase - erase FLASH memory exectzt - execute TZT exit - exit script false - do nothing, unsuccessfully fdt - flattened device tree utility commands flash - flash part_name flash part_name load_addr file_size flasherase- flerase part_name flinfo - print FLASH memory information fuseipq - fuse QFPROM registers from memory go - start application at address 'addr' help - print command description/usage i2c - I2C sub-system icache - enable or disable instruction cache imxtract- extract a part of a multi-image ipq_mdio- IPQ mdio utility commands is_sec_boot_enabled- check secure boot fuse is enabled or not itest - return true/false on integer compare loop - infinite loop on address range md - memory display mii - MII utility commands mm - memory modify (auto-incrementing address) mmc - MMC sub system mmcinfo - display MMC info mtdparts- define flash/nand partitions mtest - simple RAM read/write test mw - memory write (fill) nand - NAND sub-system nboot - boot from NAND device nm - memory modify (constant address) pci - list and access PCI Configuration Space ping - send ICMP ECHO_REQUEST to network host printenv- print environment variables protect - enable or disable FLASH write protection reset - Perform RESET of the CPU rmemcrash- miwifi check and save crash buff to mtd run - run commands in an environment variable runmulticore- Enable and schedule secondary cores saveenv - save environment variables to persistent storage secure_authenticate- authenticate the signed image setenv - set environment variables sf - SPI flash sub-system showvar - print local hushshell variables sleep - delay execution for some time smeminfo- print SMEM FLASH information source - run script from memory test - minimal test like /bin/sh tftpboot- boot image via network using TFTP protocol tftpput - TFTP put command, for uploading files to a server true - do nothing, successfully uart - UART sub-system ubi - ubi commands usb - USB sub-system usbboot - boot from USB device version - print monitor, compiler and linker version xqup - load image and upgrade to flash IPQ807x# bdinfo arch_number = 0x08010010 boot_params = 0x40000100 DRAM bank = 0x00000000 -> start = 0x40000000 -> size = 0x20000000 eth0name = eth0 ethaddr = 9c:9d:7e:55:18:a5 current eth = eth0 ip_addr = 192.168.31.1 baudrate = 115200 bps TLB addr = 0x4A9A0000 relocaddr = 0x4A900000 reloc off = 0x00000000 irq_sp = 0x4A7DFA90 sp start = 0x4A7DFA80 IPQ807x# base Base Address: 0x00000000 IPQ807x# printenv CountryCode=CN Router_unconfigured=0 SN=12345/A0U123456 boot_wait=off bootargs=ubi.mtd=rootfs_1 root=mtd:ubi_rootfs rootfstype=squashfs rootwait bootcmd=bootmiwifi bootdelay=5 color=100 eth1addr=28:d1:27:f7:b7:c4 eth2addr=9c:9d:7e:55:18:a5 eth3addr=9c:9d:7e:55:18:a5 eth4addr=9c:9d:7e:55:18:a5 ethact=eth0 ethaddr=9c:9d:7e:55:18:a5 fdt_high=0x4A400000 fdtcontroladdr=4a979e90 flag_boot_rootfs=1 flag_boot_success=1 flag_boot_type=2 flag_flash_permission=1 flag_last_success=1 flag_ota_reboot=0 flag_show_upgrade_info=1 flag_try_sys1_failed=0 flag_try_sys2_failed=0 flash_type=2 fsbootargs=ubi.mtd=rootfs_1 root=mtd:ubi_rootfs rootfstype=squashfs ipaddr=192.168.31.1 machid=1234567 miot_did=643138169 miot_key=E8AXEyZTBeuoGyRy mode=Router model=RA69 mtddevname=fs mtddevnum=0 mtdids=nand0=nand0 mtdparts=mtdparts=nand0:0x23c0000@0x2dc0000(fs), no_wifi_dev_times=0 nv_sys_pwd=c8197f570e4838b2783007428394ddb9de74cb1c nv_wan_type=dhcp nv_wifi_enc=mixed-psk nv_wifi_enc1=mixed-psk nv_wifi_pwd=test1234 nv_wifi_pwd1=test1234 nv_wifi_ssid=Redmi_4CB7 nv_wifi_ssid1=Redmi_4CB7_5G partition=nand0,0 restore_defaults=0 serverip=192.168.31.100 soc_version_major=2 soc_version_minor=0 ssh_en=1 stderr=serial@78B3000 stdin=serial@78B3000 stdout=serial@78B3000 telnet_en=0 uart_en=1 wl0_radio=1 wl0_ssid=Redmi_5G wl1_radio=1 wl1_ssid=Redmi Environment size: 1449/65532 bytes

root@XiaoQiang:/# bootinfo

ROM    ver: config core 'version'
        # ROM ver
        option ROM '1.0.18'
        # channel
        option CHANNEL 'release'
        # hardware platform R1AC or R1N etc.
        option HARDWARE 'RA69'
        # CFE ver
        option UBOOT '1.0.2'
        # Linux Kernel ver
        option LINUX '4.4.16'
        # RAMFS ver
        option RAMFS '0.0.1'
        # SQUASHFS ver
        option SQAFS '0.0.1'
        # ROOTFS ver
        option ROOTFS '0.0.1'
  #build time
  option BUILDTIME 'Wed, 19 Aug 2020 02:57:56 +0000'
  #build timestamp
  option BUILDTS '1597805876'
  #build git tag
   option GTAG 'commit 83f49d45da9a3e68cf4042d0f962ad66f751b14c'
Hardware  : Ver. A
ROM    sum:
System    : Dual - 2
KERNEL    : ubi.mtd=rootfs_1 root=mtd:ubi_rootfs rootfstype=squashfs rootwait uart_en=1 swiotlb=1

MTD  table:
dev:    size   erasesize  name
mtd0: 00100000 00020000 "0:SBL1"
mtd1: 00100000 00020000 "0:MIBIB"
mtd2: 00300000 00020000 "0:QSEE"
mtd3: 00080000 00020000 "0:DEVCFG"
mtd4: 00080000 00020000 "0:RPM"
mtd5: 00080000 00020000 "0:CDT"
mtd6: 00080000 00020000 "0:APPSBLENV"
mtd7: 00100000 00020000 "0:APPSBL"
mtd8: 00080000 00020000 "0:ART"
mtd9: 00080000 00020000 "bdata"
mtd10: 00080000 00020000 "crash"
mtd11: 00080000 00020000 "crash_syslog"
mtd12: 023c0000 00020000 "rootfs"
mtd13: 023c0000 00020000 "rootfs_1"
mtd14: 01ec0000 00020000 "overlay"
mtd15: 00080000 00020000 "rsvd0"
mtd16: 0041e000 0001f000 "kernel"
mtd17: 016c4000 0001f000 "ubi_rootfs"
mtd18: 01ae2000 0001f000 "data"

IPQ807x# smeminfo
flash_type:             0x2
flash_index:            0x0
flash_chip_select:      0x0
flash_block_size:       0x20000
flash_density:          0x100000
partition table offset  0x0
No.: Name             Attributes            Start             Size
  0: 0:SBL1           0x0000ffff              0x0         0x100000
  1: 0:MIBIB          0x0000ffff         0x100000         0x100000
  2: 0:QSEE           0x0000ffff         0x200000         0x300000
  3: 0:DEVCFG         0x0000ffff         0x500000          0x80000
  4: 0:RPM            0x0000ffff         0x580000          0x80000
  5: 0:CDT            0x0000ffff         0x600000          0x80000
  6: 0:APPSBLENV      0x0000ffff         0x680000          0x80000
  7: 0:APPSBL         0x0000ffff         0x700000         0x100000
  8: 0:ART            0x0000ffff         0x800000          0x80000
  9: bdata            0x0000ffff         0x880000          0x80000
 10: crash            0x0000ffff         0x900000          0x80000
 11: crash_syslog     0x0000ffff         0x980000          0x80000
 12: rootfs           0x0000ffff         0xa00000        0x23c0000
 13: rootfs_1         0x0000ffff        0x2dc0000        0x23c0000
 14: overlay          0x0000ffff        0x5180000        0x1ec0000
 15: rsvd0            0x0000ffff        0x7040000          0x80000

root@XiaoQiang:/# cat /proc/interrupts
           CPU0       CPU1       CPU2       CPU3
  3:       3216       2476       4398       2446       GIC  20 Edge      arch_timer
 40:          1          0          0          0   msmgpio  34 Edge      soc:gpio_keys
 76:          0          0          0          0       GIC 270 Level     bam_dma
 77:        229          0          0          0       GIC 340 Level     msm_serial0
 79:          2          0          0          0       GIC 127 Level     78b5000.spi
 80:          0          0          0          0       GIC 357 Edge      q6_wdog_interrupt
 81:          0          0          0          0       GIC 344 Edge      7803000.sdcc1ice
 82:          3          0          0          0       GIC 354 Edge      smp2p
 83:          0          0          0          0       GIC 276 Edge      tzerror
 88:       1367          0          0          0       GIC 409 Edge      nss_empty_buf_sos
 89:          3          0          0          0       GIC 410 Edge      nss_empty_buf_queue
 90:          0          0          0          0       GIC 411 Edge      nss-tx-unblock
 91:      65576          0          0          0       GIC 412 Edge      nss_queue0
 92:          0          0          0          0       GIC 413 Edge      nss_queue1
 93:          0          0          0          0       GIC 414 Edge      nss_queue2
 94:          0          0          0          0       GIC 415 Edge      nss_queue3
 95:          0          0          0          0       GIC 416 Edge      nss_coredump_complete
 96:          0          0          0          0       GIC 417 Edge      nss_paged_empty_buf_sos
 97:        616          0          0          0       GIC 422 Edge      nss_empty_buf_sos
 98:          0          0          0          0       GIC 423 Edge      nss_empty_buf_queue
 99:          0          0          0          0       GIC 424 Edge      nss-tx-unblock
100:      62537          0          0          0       GIC 425 Edge      nss_queue0
101:          0          0          0          0       GIC 426 Edge      nss_queue1
102:          0          0          0          0       GIC 427 Edge      nss_queue2
103:          0          0          0          0       GIC 428 Edge      nss_queue3
104:          0          0          0          0       GIC 429 Edge      nss_coredump_complete
105:          0          0          0          0       GIC 430 Edge      nss_paged_empty_buf_sos
106:          0          0          0          0       GIC  35 Level     watchdog bark
107:         62          0          0          0       GIC 353 Edge      qcom,glink-smem-native-xprt-modem
108:          0          0          0          0       GIC 239 Level     bam_dma
109:      62541          0          0          0       GIC 178 Level     bam_dma
132:          4          0          0          0       GIC 348 Edge      ce0
133:         16          0          0          0       GIC 347 Edge      ce1
134:         25          0          0          0       GIC 346 Edge      ce2
135:         18          0          0          0       GIC 343 Edge      ce3
137:         11          0          0          0       GIC 443 Edge      ce5
139:         17          0          0          0       GIC  72 Edge      ce7
140:     178800          0          0          0       GIC  71 Edge      ce8
141:          0          0          0          0       GIC 334 Edge      ce9
142:          0          0          0          0       GIC 333 Edge      ce10
143:          0          0          0          0       GIC  69 Edge      ce11
147:          2          0          0          0       GIC 326 Edge      host2rxdma-monitor-ring3
148:          0          0          0          0       GIC 325 Edge      host2rxdma-monitor-ring2
149:          2          0          0          0       GIC 324 Edge      host2rxdma-monitor-ring1
150:          0          0          0          0       GIC 323 Edge      reo2ost-exception
151:          0          0          0          0       GIC 322 Edge      wbm2host-rx-release
152:          0          0          0          0       GIC 321 Edge      reo2host-status
153:          0          0          0          0       GIC 320 Edge      reo2host-destination-ring4
154:          0          0          0          0       GIC 271 Edge      reo2host-destination-ring3
160:          1          7          0          0       GIC 263 Edge      ppdu-end-interrupts-mac3
161:          0          0          0          0       GIC 262 Edge      ppdu-end-interrupts-mac2
162:          1          0          0          0       GIC 261 Edge      ppdu-end-interrupts-mac1
163:          3          0          0          0       GIC 260 Edge      rxdma2host-monitor-status-ring-mac3
164:          0          0          0          0       GIC 256 Edge      rxdma2host-monitor-status-ring-mac2
165:          3          0          0          0       GIC 255 Edge      rxdma2host-monitor-status-ring-mac1
167:          0          0          0          0       GIC 215 Edge      host2rxdma-host-buf-ring-mac2
169:          0          0          0          0       GIC 211 Edge      rxdma2host-destination-ring-mac3
170:          0          0          0          0       GIC 210 Edge      rxdma2host-destination-ring-mac2
171:          0          0          0          0       GIC 209 Edge      rxdma2host-destination-ring-mac1
176:          0          0          0          0       GIC 191 Edge      wbm2host-tx-completions-ring3
182:          0          0          0          0       GIC 216 Edge      tsens_interrupt
183:          5          0          0          0       GIC  47 Edge      cpr3
185:          3          0          0          0  pmic_arb 3211277 Edge      spmi-vadc
186:          0          0          0          1     smp2p   1 Edge      error_ready_interrupt
187:          0          0          0          0     smp2p   0 Edge      err_fatal_interrupt
188:          0          0          0          0     smp2p   3 Edge      stop_ack_interrupt
189:          0          0          0          0       GIC 172 Edge      xhci-hcd:usb1
IPI0:      3803       7280       8479       6934       Rescheduling interrupts
IPI1:         5         12         11         10       Function call interrupts
IPI2:         0          0          0          0       CPU stop interrupts
IPI3:         0          0          0          0       Timer broadcast interrupts
IPI4:         0          0          0          0       IRQ work interrupts
IPI5:         0          0          0          0       CPU wakeup interrupts
Err:          0

Issue the following commands in bootloader:

setenv uart_en 1
setenv telnet_en 1
setenv ssh_en 1
saveenv
reset

To enable SSH, after the above steps you will need to set a password using the following command:

passwd root

then edit /etc/init.d/dropbear file:

vi /etc/init.d/dropbear

look for the following section

if [ "$flg_ssh" != "1" -o "$channel" = "release" ]; then

and modify it to this:

if [ "$flg_ssh" != "1" -o "$channel" = "release1" ]; then

save the file and reboot the router.

How to add tags

ipq807x, IPQ8071, 128NAND, 512RAM, 4port, GigabitEthernet, 802.11ax, wifi6, CortexA53, QCN5054, QCN5024, 4x4, mu-mimo, VHT160, 4core, LDPC, QPF4550, QPF4200, TXBF, txpa, serial, U-Boot, ARMv8

ipq807x ipq8071 128nand 512ram 4port gigabitethernet 802.11ax wifi6 cortexa53 qcn5054 qcn5024 4x4 mu-mimo vht160 4core ldpc qpf4550 qpf4200 txbf txpa serial u-boot armv8

Xiaomi Redmi AX6 Wi-Fi 6 Mesh Router

OpenWrt support

Potential issues / Limitations

Supporting activities

Hardware highlights

More Info

Notes

Installation

Firmware download

Installing OpenWrt

SSH Access

Flashing OpenWrt

Debricking

TFTP recovery

Hardware

Info

Photos

Opening the case

Serial port

JTAG

Bootlogs

OEM bootlog

Bootloader

MTD layout

/proc/interrupts

How to enable Serial, SSH, Telnet

Notes

Tags