Extreme Networks WS-AP3935i / WS-AP3935e
The Extreme Networks WS-AP3935i (internal antennas) and WS-AP3935e (same but with external/detachable antennas) is a dual-band 4×4 MIMO 802.11ac (5GHz) and 802.11b/g/n (2.4GHz) “enterprise grade” access point with two Gigabit Ethernet ports. It can be powered via 802.3af PoE (ETH1, ETH0) or a standard 12V 1.1A power adapter and was produced by Extreme Networks.
Supported Versions
Hardware Highlights
OEM Flash Layout
msm partition: nand_flash device nand1 <nand1>, # parts = 13 #: name size offset mask_flags 0: CFG1 0x00010000 0x002a0000 0 1: BootPRI 0x00080000 0x002b0000 0 2: CFG2 0x00010000 0x00330000 0 3: NVRAM1 0x00010000 0x00340000 0 4: NVRAM2 0x00010000 0x00350000 0 5: NVRAM3 0x00010000 0x00360000 0 6: NVRAM4 0x00010000 0x00370000 0 7: NVRAM5 0x00010000 0x00380000 0 8: NVRAM6 0x00010000 0x00390000 0 9: NVRAM7 0x00010000 0x003a0000 0 10: NVRAM8 0x00010000 0x003b0000 0 11: PriImg 0x00e10000 0x003c0000 0 12: SecImg 0x00e10000 0x011d0000 0
The Extreme Networks WS-AP3935x comes configured with redundant system partitions. If the device is rebooted several times watchdog may trigger and will attempt to load the alternate system image (“SecImg”). If the OEM “SecImg” partition is loaded it will attempt to copy itself over PriImg and break OpenWrt install, so it is important to wipe both PriImg and SecImg to ensure stable operation.
Watchdog Reset script:
## Executing script at 7ff5f7a4 check for watchdog, limit=3... check for reset by watchdog... last reset caused by watchdog... updating watchdog count, cnt=0x00000001... bSaveEnviron=1 image_order=0 1 Saving Environment to NAND... Erasing NAND... Erasing at 0x2af000 -- 100% complete. Writing to NAND... done Saving Environment to NAND... Erasing redundant NAND... Erasing at 0x33f000 -- 100% complete. Writing to redundant NAND... done ready to boot kernel...
Initial Installation (over OEM firmware)
Overview:
Wipe OEM Firmware partitionsConfigure U-Boot to load OpenWRTLoad OpenWRT minimal firmware image over TFTPInstall OpenWRT firmware to flash
Preparation
1a) Download and install a TFTP server software:
Tftpd64] (Windows)
Codeplex TFTPServer (Windows, Linux)
Solarwinds Free TFTP Server (Windows)
1b) Download and install a serial client software:
PuTTY (cross-platform)
WinSCP (Windows)
Tera Term (Windows)
1c) Grab the latest OpenWrt initramfs image <openwrt-initramfs.bin>, e.g.
openwrt-****-ipq806x-generic-extreme_ap3935-initramfs-uImage.bin
Change the file name to “initramfs.bin” (optional) and place it in the root directory of your TFTP server.
1d) Grab the latest OpenWrt sysupgrade image <openwrt-sysupgrade.bin>, e.g.
openwrt-****-ipq806x-generic-extreme_ap3935-squashfs-nand-sysupgrade.bin
1e) Connect the serial “CONSOLE” port to your computer's serial port or via USB-to-Serial adapter, then open your serial client software and use the following settings: Speed/Baud: 115200 (bps); Data: 8 (bit); Parity: None; Stop Bits: 1; Flow Control: None
1f) Start your TFTP server software and verify access to port 69 (you may need to add rules or temporarily disable your firewall if using Windows OS).
1g) Connect an ethernet cable from your PC to “LAN1” ethernet port.
Configure U-Boot
2a) Connect power to the WS-AP3935 and press any key (except d) at the U-Boot prompt:
Hit 'd' for diagnostics, or any other key to stop autoboot:
2b) Login to U-Boot console with user “admin” and password “new2day”. If this username/password combination does not work (try at least 2-3 times) hold the router's “RESET” button for 10-20 seconds and retry after boot.
2c) Wipe OEM firmware partitions:
nand erase.part PriImg nand erase.part SecImg
2d) Reset the U-Boot environment to defaults with the following commands:
env default -f saveenv
2e) Configure U-Boot for your network environment: Set serverip to TFTP server IP:
set serverip 192.168.1.2"
Set ipaddr to an unused IP:
set ipaddr 192.168.1.1
Set network mask:
setenv netmask 255.255.255.0
Set bootloader commands - (1) disable watchdog count to prevent NAND ease/writes at every boot (see watchdog reset script above); (2) make u-boot ping something (workaround for eth0/eth1 link flap and detection issues during boot); (3) load OpenWrt firmware image.
set bootcmd 'setenv MOSTRECENTKERNEL 0; setenv WATCHDOG_COUNT 0; setenv WATCHDOG_LIMIT 0; ping 255.255.255.255; run boot_flash'
Make U-Boot ping something to wake eth0 before boot, then boot: Save the U-Boot configuration:
saveenv
Load OpenWrt to RAM
3) Download the initramfs image from the TFTP server to RAM:
tftpboot 0x42000000 initramfs.bin
Boot the OpenWrt initramfs image from RAM:
bootm 0x42000000
4) OpenWrt LAN address defaults to 192.168.1.1, if necessary you can temporarily change the address via serial console to access the router through SSH or the LUCI web interface:
uci set network.lan.ipaddr=192.168.99.1 uci commit network /etc/init.d/network restart
5) Open your web browser of choice and upload the sysupgrade image through the LUCI web interface. Alternatively, you can use SFTP or SCP to copy the sysupgrade image to /tmp/ and issue the command through SSH or serial terminal:
sysupgrade /tmp/openwrt-****-ipq806x-generic-extreme_ap3935-squashfs-nand-sysupgrade.bin
Debricking
Failsafe mode
Basic configuration
→ Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.
Network interfaces
The default network configuration is:
| Interface Name | Description | Default configuration |
|---|---|---|
| br-lan | LAN & WiFi Bridge | 192.168.1.1/24 |
| eth0 | Port “LAN1” | None |
| eth1 | Port “LAN2” | DHCP |
Buttons
The Extreme Networks WS-AP3935i has the following buttons:
| BUTTON | Event |
|---|---|
| Reset | reset |
Hardware
Info
Photos
WS-AP3935i:
WS-AP3935e:
Backside label:
Opening the case
Note: This will void your warranty!
4x Torx (T10) screws on back of device and pry case apart. Thermal pads may stick and provide some resistance.
Main PCB:
Serial
→ port.serial general information about the serial port, serial port cable, etc.
| Serial connection parameters for Extreme Networks WS-AP3935i | 115200bps, 8N1, No Flow Control, 3.3V |
|---|
JTAG
→ port.jtag general information about the JTAG port, JTAG cable, etc.
How to connect to the JTAG Port of this specific device:
Insert photo of PCB with markings for JTAG port
Bootloader mods
Hardware mods
Adding USB Support USB header and solder points are present. Data lines for USB 2.0 are accessible on the PCB, but 5 Volt power conditioning components are missing.
Directly powering a 3.3 Volt device with onboard JTAG header and USB data lines. https://forum.openwrt.org/t/adding-openwrt-support-for-extreme-network-ap3935i/87234/100
mPCIe cards are replaceable, allowing modular upgrades to newer WiFi chips and 4G/5G modem support. WiFi 6 5GHz upgrade with AsiaRF AW7915-NP1 (MediaTek MT7975AN) https://forum.openwrt.org/t/adding-openwrt-support-for-extreme-network-ap3935i/87234/101
Bootlogs
OEM bootlog
U-Boot 2012.07.7-r038300217.1 (Sep 29 2015 - 11:41:04) (back-up) smem ram ptable found: ver: 0 len: 5 DRAM: 1004 MiB NAND: SF: Detected S25FL256S with page size 64 KiB, total 32 MiB ipq_spi: page_size: 0x100, sector_size: 0x10000, size: 0x2000000 544 MiB In: serial Out: serial Err: serial Net: MAC0 addr:dc:ff:ff:eb:04:30 MAC2 addr:00:20:82:e1:02:00 eth0 Warning: eth0 MAC addresses don't match: Address in SROM is dc:ff:ff:eb:04:30 Address in environment is d8:84:66:e3:3e:ec , eth1 Warning: eth1 MAC addresses don't match: Address in SROM is 00:20:82:e1:02:00 Address in environment is d8:84:66:e3:3e:ed Hit 'd' for diagnostics, or any other key to stop autoboot: 0 SF: Detected S25FL256S with page size 64 KiB, total 32 MiB found primary bootROM, load and run... ## Starting application at 0x41200000 ... U-Boot 2012.07.14 (Oct 18 2017 - 22:44:19) (primary) smem ram ptable found: ver: 0 len: 5 DRAM: 1004 MiB NAND: SF: Detected S25FL256S with page size 64 KiB, total 32 MiB ipq_spi: page_size: 0x100, sector_size: 0x10000, size: 0x2000000 544 MiB In: serial Out: serial Err: serial Net: MAC0 addr:dc:ff:ff:eb:04:30 MAC2 addr:00:20:82:e1:02:00 eth0 Warning: eth0 MAC addresses don't match: Address in SROM is dc:ff:ff:eb:04:30 Address in environment is d8:84:66:e3:3e:ec , eth1 Warning: eth1 MAC addresses don't match: Address in SROM is 00:20:82:e1:02:00 Address in environment is d8:84:66:e3:3e:ed Hit 'd' for diagnostics, or any other key to stop autoboot: 0 ## Executing script at 7ff5fa08 check for watchdog, limit=3... check for reset by watchdog... no watchdog... bSaveEnviron=0 image_order=1 0 ready to boot kernel... Loading from nand1, offset 0x11d0000 Image Name: 10.51.24.0003 Image Type: ARM Linux Kernel Image (uncompressed) Data Size: 10071008 Bytes = 9.6 MiB Load Address: 41408000 Entry Point: 41408000 Automatic boot of image at addr 0x42000000 ... Image Name: 10.51.24.0003 Image Type: ARM Linux Kernel Image (uncompressed) Data Size: 10071008 Bytes = 9.6 MiB Load Address: 41408000 Entry Point: 41408000 Verifying Checksum ... OK Loading Kernel Image ... OK OK Setting up atags for msm partition: nand_flash device nand1 <nand1>, # parts = 13 #: name size offset mask_flags 0: CFG1 0x00010000 0x002a0000 0 1: BootPRI 0x00080000 0x002b0000 0 2: CFG2 0x00010000 0x00330000 0 3: NVRAM1 0x00010000 0x00340000 0 4: NVRAM2 0x00010000 0x00350000 0 5: NVRAM3 0x00010000 0x00360000 0 6: NVRAM4 0x00010000 0x00370000 0 7: NVRAM5 0x00010000 0x00380000 0 8: NVRAM6 0x00010000 0x00390000 0 9: NVRAM7 0x00010000 0x003a0000 0 10: NVRAM8 0x00010000 0x003b0000 0 11: PriImg 0x00e10000 0x003c0000 0 12: SecImg 0x00e10000 0x011d0000 0 active partition: nand1,0 - (CFG1) 0x00010000 @ 0x002a0000 defaults: mtdids : nand1=nand1 mtdparts: mtdparts=nand1:64k@2688k(CFG1),512k(BootPRI),64k(CFG2),64k(NVRAM1),64k(NVRAM2),64k(NVRAM3),64k(NVRAM4),64k(NVRAM5),64k(NVRAM6),64k(NVRAM7),64k(NVRAM8),14400k(PriImg),14400k(SecImg) Setting up atags for msm partition: CFG1 Setting up atags for msm partition: BootPRI Setting up atags for msm partition: CFG2 Setting up atags for msm partition: NVRAM1 Setting up atags for msm partition: NVRAM2 Setting up atags for msm partition: NVRAM3 Setting up atags for msm partition: NVRAM4 Setting up atags for msm partition: NVRAM5 Setting up atags for msm partition: NVRAM6 Setting up atags for msm partition: NVRAM7 Setting up atags for msm partition: NVRAM8 Setting up atags for msm partition: PriImg Setting up atags for msm partition: SecImg Using machid 0x1260 from environment Starting kernel ... Booting Linux on physical CPU 0 Linux version 3.4.107--10.51.24.0003 (chantry_build@bld-debian1) (gcc version 4.9.1 (crosstool-NG 1.21.0) ) #2 SMP Wed Nov 16 12:28:02 EST 2022 CPU: ARMv7 Processor [512f04d0] revision 0 (ARMv7), cr=10c5387d CPU: PIPT / VIPT nonaliasing data cache, PIPT instruction cache Machine: Qualcomm Atheros AP148 reference board Partition (from atag) nand_flash -- Offset:0 Size:1000 Partition (from atag) CFG1 -- Offset:2a Size:1 Partition (from atag) BootPRI -- Offset:2b Size:8 Partition (from atag) CFG2 -- Offset:33 Size:1 Partition (from atag) NVRAM1 -- Offset:34 Size:1 Partition (from atag) NVRAM2 -- Offset:35 Size:1 Partition (from atag) NVRAM3 -- Offset:36 Size:1 Partition (from atag) NVRAM4 -- Offset:37 Size:1 Partition (from atag) NVRAM5 -- Offset:38 Size:1 Partition (from atag) NVRAM6 -- Offset:39 Size:1 Partition (from atag) NVRAM7 -- Offset:3a Size:1 Partition (from atag) NVRAM8 -- Offset:3b Size:1 Partition (from atag) PriImg -- Offset:3c Size:e1 Partition (from atag) SecImg -- Offset:11d Size:e1 Truncating RAM at 41400000-7fffffff to -70bfffff (vmalloc region overlap). msm_reserve_memory: 0x44600000, 0x200000 memory pool 3 (start 70a00000 size 200000) initialized Memory policy: ECC disabled, Data cache writealloc smem_find(137, 80): wrong size 72 socinfo_init: v6, id=204, ver=2.0, raw_id=2313, raw_ver=2313, hw_plat=0, hw_plat_ver=65536 accessory_chip=0 hw_plat_subtype=0 PERCPU: Embedded 7 pages/cpu @c2d4d000 s7424 r8192 d13056 u32768 Built 1 zonelists in Zone order, mobility grouping on. Total pages: 192016 Kernel command line: mtdparts=nand1:64k@2688k(CFG1),512k(BootPRI),64k(CFG2),64k(NVRAM1),64k(NVRAM2),64k(NVRAM3),64k(NVRAM4),64k(NVRAM5),64k(NVRAM6),64k(NVRAM7),64k(NVRAM8),14400k(PriImg),14400k(SecImg) BOOT_BOOTROM="U-Boot 2012.07.14 (Oct 18 2017 - 22:44:19) (primary)" BOOT_KERNEL=secondary console=ttyHSL0,115200n81 ubi.mtd=0 panic=30 ro PID hash table entries: 4096 (order: 2, 16384 bytes) Dentry cache hash table entries: 131072 (order: 7, 524288 bytes) Inode-cache hash table entries: 65536 (order: 6, 262144 bytes) Memory: 50MB 706MB = 756MB total Memory: 728836k/732932k available, 45308k reserved, 0K highmem Virtual kernel memory layout: vector : 0xffff0000 - 0xffff1000 ( 4 kB) fixmap : 0xfff00000 - 0xfffe0000 ( 896 kB) vmalloc : 0xf0000000 - 0xff000000 ( 240 MB) lowmem : 0xc0000000 - 0xef800000 ( 760 MB) modules : 0xbf000000 - 0xc0000000 ( 16 MB) .text : 0xc0008000 - 0xc04f9000 (5060 kB) .init : 0xc0500000 - 0xc2401d00 (31752 kB) .data : 0xc2404000 - 0xc249c680 ( 610 kB) .bss : 0xc249c6a4 - 0xc25440d8 ( 671 kB) SLUB: Genslabs=11, HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Hierarchical RCU implementation. NR_IRQS:1689 sched_clock: 32 bits at 32kHz, resolution 31240ns, wraps every 134175798ms Calibrating delay using timer specific routine.. 12.90 BogoMIPS (lpj=6451) pid_max: default: 32768 minimum: 301 Mount-cache hash table entries: 512 CPU: Testing write buffer coherency: ok CPU0: thread -1, cpu 0, socket 0, mpidr 80000000 Setting up static identity map for 0x417916a0 - 0x41791728 CPU1: Booted secondary processor msm_timer_freerun_init: core 1 CPU1: thread -1, cpu 1, socket 0, mpidr 80000001 Brought up 2 CPUs SMP: Total of 2 processors activated (25.80 BogoMIPS). dummy: NET: Registered protocol family 16 AXI: msm_bus_fabric_init_driver(): msm_bus_fabric_init_driver meminfo_init: smem ram ptable found: ver: 0 len: 5 Found 1 memory banks grouped into 8 memory regions gpiochip_add: registered GPIOs 0 to 151 on device: msmgpio smem_find(137, 80): wrong size 72 socinfo_init: v6, id=204, ver=2.0, raw_id=2313, raw_ver=2313, hw_plat=0, hw_plat_ver=65536 accessory_chip=0 hw_plat_subtype=0 msm_rpm_init: RPM firmware 3.0.16777342 clk_tbl_nss - loaded msm_dmov_memcpy_init: Success sps:BAM 0x12244000 enabled: ver:0x5, number of pipes:20 sps:BAM 0x12244000 is registered. sps:sps is ready. msm_pcie_setup: link initialized PCI host bridge to bus 0000:00 pci_bus 0000:00: root bus resource [mem 0x08000000-0x0fefffff] PCI: bus0: Fast back to back transfers disabled pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring PCI: bus1: Fast back to back transfers disabled msm_pcie_setup: link initialized PCI host bridge to bus 0000:02 pci_bus 0000:02: root bus resource [mem 0x2e000000-0x31efffff] PCI: bus2: Fast back to back transfers disabled pci 0000:02:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring PCI: bus3: Fast back to back transfers disabled msm_pcie_setup: link initialization failed pci 0000:02:00.0: BAR 8: assigned [mem 0x2e000000-0x2e1fffff] pci 0000:03:00.0: BAR 0: assigned [mem 0x2e000000-0x2e1fffff 64bit] pci 0000:02:00.0: PCI bridge to [bus 03-03] pci 0000:02:00.0: bridge window [mem 0x2e000000-0x2e1fffff] PCI: enabling device 0000:02:00.0 (0140 -> 0143) pci 0000:00:00.0: BAR 8: assigned [mem 0x08000000-0x081fffff] pci 0000:01:00.0: BAR 0: assigned [mem 0x08000000-0x081fffff 64bit] pci 0000:00:00.0: PCI bridge to [bus 01-01] pci 0000:00:00.0: bridge window [mem 0x08000000-0x081fffff] PCI: enabling device 0000:00:00.0 (0140 -> 0143) bio: create slab <bio-0> at 0 SCSI subsystem initialized spi_qsd spi_qsd.5: master is unqueued, this is deprecated spi_qsd spi_qsd.6: master is unqueued, this is deprecated Switching to clocksource gp_timer NET: Registered protocol family 2 IP route cache hash table entries: 32768 (order: 5, 131072 bytes) TCP established hash table entries: 131072 (order: 8, 1048576 bytes) TCP bind hash table entries: 65536 (order: 8, 1048576 bytes) TCP: Hash tables configured (established 131072 bind 65536) TCP: reno registered UDP hash table entries: 512 (order: 2, 24576 bytes) UDP-Lite hash table entries: 512 (order: 2, 24576 bytes) NET: Registered protocol family 1 acpuclk-ipq806x acpuclk-ipq806x: SPEED BIN: 0 acpuclk-ipq806x acpuclk-ipq806x: ACPU PVS: 1 acpuclk-ipq806x acpuclk-ipq806x: CPU0: 6 frequencies supported acpuclk-ipq806x acpuclk-ipq806x: CPU1: 6 frequencies supported msm_rpm_log_probe: OK jffs2: version 2.2. (NAND) (SUMMARY) (ZLIB) (RTIME) © 2001-2006 Red Hat, Inc. msgmni has been set to 1423 io scheduler noop registered io scheduler deadline registered (default) Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled msm_serial_hs.0: ttyHS0 at MMIO 0x12490000 (irq = 227) is a MSM HS UART msm_serial_hs module loaded msm_serial_hsl: detected port #0 msm_serial_hsl.0: ttyHSL0 at MMIO 0x16640000 (irq = 190) is a MSM msm_serial_hsl: console setup on port #0 console [ttyHSL0] enabled msm_serial_hsl: driver initialized ahci ahci.0: forcing PORTS_IMPL to 0x1 ahci ahci.0: AHCI 0001.0300 32 slots 1 ports 6 Gbps 0x1 impl platform mode ahci ahci.0: flags: ncq sntf pm led clo only pmp pio slum part ccc apst scsi0 : ahci_platform ata1: SATA max UDMA/133 mmio [mem 0x29000000-0x2900017f] port 0x100 irq 241 msm_nand_probe: phys addr 0x1ac00000 msm_nand_probe: dmac 0x3 msm_nand_probe: allocated dma buffer at ffdfc000, dma_addr 6e3cc000 status: 20 nandid: 1590acc2 maker c2 device ac ONFI probe : Found an ONFI compliant device MX30UF4G28AB � Found supported NAND device for 8bit ECC NAND Controller ID : 0x4030 NAND Device ID : 0x1590acc2 Buswidth : 8 Bits Density : 512 MByte Pagesize : 2048 Bytes Erasesize: 131072 Bytes Oobsize : 112 UBI: max. sequence number: 8096 UBI: attached mtd0 to ubi0 UBI: MTD device name: "nand_flash" UBI: MTD device size: 512 MiB UBI: number of good PEBs: 4096 UBI: number of bad PEBs: 0 UBI: number of corrupted PEBs: 0 UBI: max. allowed volumes: 128 UBI: wear-leveling threshold: 4096 UBI: number of internal volumes: 1 UBI: number of user volumes: 1 UBI: available PEBs: 0 UBI: total number of reserved PEBs: 4096 UBI: number of PEBs reserved for bad PEB handling: 40 UBI: max/mean erase counter: 19/4 UBI: image sequence number: 1033986993 UBI: background thread "ubi_bgt0d" started, PID 513 GPIO Bitbanged MDIO: probed tun: Universal TUN/TAP device driver, 1.6 tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com> PPP generic driver version 2.4.2 i2c /dev entries driver cpuidle: using governor ladder Netfilter messages via NETLINK v0.30. nf_conntrack version 0.5.0 (11388 buckets, 45552 max) ctnetlink v0.93: registering with nfnetlink. ip_tables: (C) 2000-2006 Netfilter Core Team TCP: cubic registered NET: Registered protocol family 10 NET: Registered protocol family 17 VFP support v0.3: implementor 51 architecture 64 part 4d variant 2 rev 0 Registering SWP/SWPB emulation handler clock_late_init: Removing enables held for handed-off clocks nss_fixup_platform_data: ART not found no pmic restart interrupt specified Freeing init memory: 31748K UBIFS: mounted UBI device 0, volume 0, name "nand_flash" UBIFS: file system size: 513110016 bytes (501084 KiB, 489 MiB, 4041 LEBs) UBIFS: journal size: 9023488 bytes (8812 KiB, 8 MiB, 72 LEBs) UBIFS: media format: w4/r0 (latest is w4/r0) UBIFS: default compressor: none UBIFS: reserved for root: 0 bytes (0 KiB) data plane cores = 1 fast path cores = 1 chantryGpio_pseSet: Turning off PSE Read/Write Crypto Section successfullyMODEL AP3935i-FCC SERVICETYPE siemens SERVICEATTRS ac_manager,ru_manager AC_HOSTNAME Controller VERSIONBASE 0 SERIALNUMBER 1745Y-1781500000 AP_FLAG 128 AP_MODE 0 AP_PERSONALITY identifi NUM_ANTENNAS 8 (none) armv7l #2 SMP Wed Nov 16 12:28:02 EST 2022 (none) (none) login: admin Password: BusyBox v1.17.4 (2022-11-16 12:01:59 EST) built-in shell (ash) Enter 'help' for a list of built-in commands. AP3935i-FCC 10.51.24.0003 interactive shell for service personnel only AP3935i-1745Y-178150000#
OpenWrt bootlog
U-Boot 2012.07.7-r038300217.1 (Sep 29 2015 - 11:41:04) (back-up) smem ram ptable found: ver: 0 len: 5 DRAM: 1004 MiB NAND: SF: Detected S25FL256S with page size 64 KiB, total 32 MiB ipq_spi: page_size: 0x100, sector_size: 0x10000, size: 0x2000000 544 MiB In: serial Out: serial Err: serial Net: MAC0 addr:dc:ff:ff:eb:04:30 MAC2 addr:00:20:82:e1:02:00 eth0 Warning: eth0 MAC addresses don't match: Address in SROM is dc:ff:ff:eb:04:30 Address in environment is 00:0d:0b:13:6b:00 , eth1 Warning: eth1 MAC addresses don't match: Address in SROM is 00:20:82:e1:02:00 Address in environment is 00:0d:0b:13:6b:01 Hit 'd' for diagnostics, or any other key to stop autoboot: 0 SF: Detected S25FL256S with page size 64 KiB, total 32 MiB found primary bootROM, load and run... ## Starting application at 0x41200000 ... U-Boot 2012.07.14 (Oct 18 2017 - 22:44:19) (primary) smem ram ptable found: ver: 0 len: 5 DRAM: 1004 MiB NAND: SF: Detected S25FL256S with page size 64 KiB, total 32 MiB ipq_spi: page_size: 0x100, sector_size: 0x10000, size: 0x2000000 544 MiB In: serial Out: serial Err: serial Net: MAC0 addr:dc:ff:ff:eb:04:30 MAC2 addr:00:20:82:e1:02:00 eth0 Warning: eth0 MAC addresses don't match: Address in SROM is dc:ff:ff:eb:04:30 Address in environment is 00:0d:0b:13:6b:00 , eth1 Warning: eth1 MAC addresses don't match: Address in SROM is 00:20:82:e1:02:00 Address in environment is 00:0d:0b:13:6b:01 Hit 'd' for diagnostics, or any other key to stop autoboot: 0 Mac0 unit failed Mac0 unit failed Mac0 unit failed Mac0 unit failed Full duplex link Link 2 up, Phy_status = a0b0a0a Port:2 speed 1000Mbps Using eth1 device ## Warning: gatewayip needed but not set ## Warning: gatewayip needed but not set ping failed; host 255.255.255.255 is not alive ## Executing script at 7ff5fa08 first time using environment, will save at the end... check for watchdog, limit=3... check for reset by watchdog... no watchdog... bSaveEnviron=1 image_order=0 1 Saving Environment to NAND... Erasing redundant NAND... Erasing at 0x330000 -- 100% complete. Writing to redundant NAND... done Saving Environment to NAND... Erasing NAND... Erasing at 0x2a0000 -- 100% complete. Writing to NAND... done ready to boot kernel... Loading from nand1, offset 0x3c0000 ** Unknown image type boot failed... ready to boot kernel... Loading from nand1, offset 0x11d0000 ** Unknown image type boot failed... ERROR: Cannot boot either kernel image, dropping to interactive shell (watchdog might trigger) *** Loading, please wait *** SF: Detected S25FL256S with page size 64 KiB, total 32 MiB ### JFFS2 loading '/home/config/shadow' Scanning JFFS2 FS: . done. ### JFFS2 load complete: 57 bytes loaded [30s timeout] login: admin password: new2day Boot (PRI)-> tftpboot 0x42000000 initramfs.bin Full duplex link Link 2 up, Phy_status = a0b0a0a Port:2 speed 1000Mbps Using eth1 device TFTP from server 192.168.1.2; our IP address is 192.168.1.1 Filename 'initramfs.bin'. Load address: 0x42000000 Loading: ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# #################################################### done Bytes transferred = 7438650 (71813a hex) Automatic boot of image at addr 0x42000000 ... Image Name: ARM OpenWrt Linux-6.6.104 Image Type: ARM Linux Kernel Image (uncompressed) Data Size: 7438522 Bytes = 7.1 MiB Load Address: 41408000 Entry Point: 41408000 Verifying Checksum ... OK Loading Kernel Image ... OK OK Setting up atags for msm partition: nand_flash device nand1 <nand1>, # parts = 13 #: name size offset mask_flags 0: CFG1 0x00010000 0x002a0000 0 1: BootPRI 0x00080000 0x002b0000 0 2: CFG2 0x00010000 0x00330000 0 3: NVRAM1 0x00010000 0x00340000 0 4: NVRAM2 0x00010000 0x00350000 0 5: NVRAM3 0x00010000 0x00360000 0 6: NVRAM4 0x00010000 0x00370000 0 7: NVRAM5 0x00010000 0x00380000 0 8: NVRAM6 0x00010000 0x00390000 0 9: NVRAM7 0x00010000 0x003a0000 0 10: NVRAM8 0x00010000 0x003b0000 0 11: PriImg 0x00e10000 0x003c0000 0 12: SecImg 0x00e10000 0x011d0000 0 active partition: nand1,0 - (CFG1) 0x00010000 @ 0x002a0000 defaults: mtdids : nand1=nand1 mtdparts: mtdparts=nand1:64k@2688k(CFG1),512k(BootPRI),64k(CFG2),64k(NVRAM1),64k(NVRAM2),64k(NVRAM3),64k(NVRAM4),64k(NVRAM5),64k(NVRAM6),64k(NVRAM7),64k(NVRAM8),14400k(PriImg),14400k(SecImg) Setting up atags for msm partition: CFG1 Setting up atags for msm partition: BootPRI Setting up atags for msm partition: CFG2 Setting up atags for msm partition: NVRAM1 Setting up atags for msm partition: NVRAM2 Setting up atags for msm partition: NVRAM3 Setting up atags for msm partition: NVRAM4 Setting up atags for msm partition: NVRAM5 Setting up atags for msm partition: NVRAM6 Setting up atags for msm partition: NVRAM7 Setting up atags for msm partition: NVRAM8 Setting up atags for msm partition: PriImg Setting up atags for msm partition: SecImg Using machid 0x1260 from environment Starting kernel ... [ 0.000000] Booting Linux on physical CPU 0x0 [ 0.000000] Linux version 6.6.104 (builder@buildhost) (arm-openwrt-linux-muslgnueabi-gcc (OpenWrt GCC 13.3.0 r28872-daca7c049b) 13.3.0, GNU ld (GNU Binutils) 2.42) #0 SMP Fri Sep 19 21:19:38 2025 [ 0.000000] CPU: ARMv7 Processor [512f04d0] revision 0 (ARMv7), cr=10c5787d [ 0.000000] CPU: div instructions available: patching division code [ 0.000000] CPU: PIPT / VIPT nonaliasing data cache, PIPT instruction cache [ 0.000000] OF: fdt: Machine model: Extreme Networks AP3935 [ 0.000000] Memory policy: Data cache writealloc [ 0.000000] OF: reserved mem: 0x40000000..0x40ffffff (16384 KiB) nomap non-reusable nss@40000000 [ 0.000000] OF: reserved mem: 0x41000000..0x411fffff (2048 KiB) nomap non-reusable smem@41000000 [ 0.000000] OF: reserved mem: 0x41200000..0x414fffff (3072 KiB) nomap non-reusable rsvd@41200000 [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x0000000041400000-0x00000000713fffff] [ 0.000000] HighMem [mem 0x0000000071400000-0x000000007fffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000041400000-0x00000000415fffff] [ 0.000000] node 0: [mem 0x0000000041600000-0x000000007fffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000041400000-0x000000007fffffff] [ 0.000000] On node 0, zone Normal: 1024 pages in unavailable ranges [ 0.000000] percpu: Embedded 13 pages/cpu s21780 r8192 d23276 u53248 [ 0.000000] Kernel command line: ubi.block=0,0 root=/dev/ubiblock0_0 [ 0.000000] Bootloader command line (ignored): mtdparts=nand1:64k@2688k(CFG1),512k(BootPRI),64k(CFG2),64k(NVRAM1),64k(NVRAM2),64k(NVRAM3),64k(NVRAM4),64k(NVRAM5),64k(NVRAM6),64k(NVRAM7),64k(NVRAM8),14400k(PriImg),14400k(SecImg) BOOT_BOOTROM="U-Boot 2012.07.14 (Oct 18 2017 - 22:44:19) (primary)" BOOT_KERNEL=secondary console=ttyHSL0,115200n81 ubi.mtd=0 panic=30 ro [ 0.000000] Dentry cache hash table entries: 131072 (order: 7, 524288 bytes, linear) [ 0.000000] Inode-cache hash table entries: 65536 (order: 6, 262144 bytes, linear) [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 255296 [ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off [ 0.000000] Memory: 992508K/1028096K available (7739K kernel code, 649K rwdata, 1208K rodata, 13312K init, 250K bss, 35588K reserved, 0K cma-reserved, 241664K highmem) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 [ 0.000000] rcu: Hierarchical RCU implementation. [ 0.000000] Tracing variant of Tasks RCU enabled. [ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16 [ 0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention. [ 0.000000] clocksource: dg_timer: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 305801671480 ns [ 0.000001] sched_clock: 32 bits at 6MHz, resolution 160ns, wraps every 343597383600ns [ 0.000017] Switching to timer-based delay loop, resolution 160ns [ 0.000308] Calibrating delay loop (skipped), value calculated using timer frequency.. 12.50 BogoMIPS (lpj=62500) [ 0.000333] CPU: Testing write buffer coherency: ok [ 0.000393] pid_max: default: 32768 minimum: 301 [ 0.008664] Mount-cache hash table entries: 2048 (order: 1, 8192 bytes, linear) [ 0.008691] Mountpoint-cache hash table entries: 2048 (order: 1, 8192 bytes, linear) [ 0.016495] qcom_scm: convention: smc legacy [ 0.018012] RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. [ 0.018234] Setting up static identity map for 0x41700000 - 0x41700060 [ 0.018467] rcu: Hierarchical SRCU implementation. [ 0.018475] rcu: Max phase no-delay instances is 1000. [ 0.019128] smp: Bringing up secondary CPUs ... [ 0.021408] smp: Brought up 1 node, 2 CPUs [ 0.021426] SMP: Total of 2 processors activated (25.00 BogoMIPS). [ 0.021441] CPU: All CPU(s) started in SVC mode. [ 0.036963] VFP support v0.3: implementor 51 architecture 64 part 4d variant 2 rev 0 [ 0.037174] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.037206] futex hash table entries: 512 (order: 3, 32768 bytes, linear) [ 0.041634] pinctrl core: initialized pinctrl subsystem [ 0.044590] NET: Registered PF_NETLINK/PF_ROUTE protocol family [ 0.045060] DMA: preallocated 256 KiB pool for atomic coherent allocations [ 0.046869] thermal_sys: Registered thermal governor 'step_wise' [ 0.046993] cpuidle: using governor ladder [ 0.047058] cpuidle: using governor menu [ 0.078967] usbcore: registered new interface driver usbfs [ 0.079058] usbcore: registered new interface driver hub [ 0.079129] usbcore: registered new device driver usb [ 0.079200] pps_core: LinuxPPS API ver. 1 registered [ 0.079211] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it> [ 0.079268] PTP clock support registered [ 0.082852] clocksource: Switched to clocksource dg_timer [ 0.092857] NET: Registered PF_INET protocol family [ 0.093265] IP idents hash table entries: 16384 (order: 5, 131072 bytes, linear) [ 0.095460] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear) [ 0.095576] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) [ 0.095609] TCP established hash table entries: 8192 (order: 3, 32768 bytes, linear) [ 0.095660] TCP bind hash table entries: 8192 (order: 5, 131072 bytes, linear) [ 0.095809] TCP: Hash tables configured (established 8192 bind 8192) [ 0.096397] MPTCP token hash table entries: 1024 (order: 2, 16384 bytes, linear) [ 0.096749] UDP hash table entries: 512 (order: 2, 16384 bytes, linear) [ 0.096790] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes, linear) [ 0.097460] NET: Registered PF_UNIX/PF_LOCAL protocol family [ 0.097523] PCI: CLS 0 bytes, default 64 [ 0.099262] workingset: timestamp_bits=14 max_order=18 bucket_order=4 [ 0.100779] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.100806] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.390925] bounce: pool size: 64 pages [ 0.391880] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) [ 0.400656] krait-cc soc:clock-controller: CPU0 @ 800000 KHz [ 0.400688] krait-cc soc:clock-controller: CPU1 @ Undefined rate. Forcing new rate. [ 0.401027] krait-cc soc:clock-controller: CPU1 @ 384000 KHz [ 0.401051] krait-cc soc:clock-controller: L2 @ Undefined rate. Forcing new rate. [ 0.401306] krait-cc soc:clock-controller: L2 @ 384000 KHz [ 0.403686] qcom-pcie 1b500000.pci: supply vdda not found, using dummy regulator [ 0.404108] qcom-pcie 1b500000.pci: supply vdda_phy not found, using dummy regulator [ 0.404220] qcom-pcie 1b500000.pci: supply vdda_refclk not found, using dummy regulator [ 0.404490] qcom-pcie 1b500000.pci: host bridge /soc/pci@1b500000 ranges: [ 0.404577] qcom-pcie 1b500000.pci: IO 0x000fe00000..0x000fe0ffff -> 0x0000000000 [ 0.404617] qcom-pcie 1b500000.pci: MEM 0x0008000000..0x000fdfffff -> 0x0008000000 [ 0.405279] qcom-pcie 1b700000.pci: supply vdda not found, using dummy regulator [ 0.405562] qcom-pcie 1b700000.pci: supply vdda_phy not found, using dummy regulator [ 0.405725] qcom-pcie 1b700000.pci: supply vdda_refclk not found, using dummy regulator [ 0.406177] qcom-pcie 1b700000.pci: host bridge /soc/pci@1b700000 ranges: [ 0.406286] qcom-pcie 1b700000.pci: IO 0x0031e00000..0x0031e0ffff -> 0x0000000000 [ 0.406403] qcom-pcie 1b700000.pci: MEM 0x002e000000..0x0031dfffff -> 0x002e000000 [ 0.410223] gsbi 12480000.gsbi: GSBI port protocol: 6 crci: 0 [ 0.411903] gsbi 16300000.gsbi: GSBI port protocol: 6 crci: 0 [ 0.412343] gsbi 16600000.gsbi: GSBI port protocol: 6 crci: 0 [ 0.414058] gsbi 1a200000.gsbi: GSBI port protocol: 3 crci: 0 [ 0.416837] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled [ 0.424462] msm_serial 12490000.serial: msm_serial: detected port #1 [ 0.424537] msm_serial 12490000.serial: uartclk = 25000000 [ 0.425131] 12490000.serial: ttyMSM1 at MMIO 0x12490000 (irq = 29, base_baud = 1562500) is a MSM [ 0.425946] msm_serial 16640000.serial: msm_serial: detected port #0 [ 0.426024] msm_serial 16640000.serial: uartclk = 7372800 [ 0.426627] 16640000.serial: ttyMSM0 at MMIO 0x16640000 (irq = 30, base_baud = 460800) is a MSM [ 0.426687] msm_serial: console setup on port #0 [ 0.426802] printk: console [ttyMSM0] enabled [ 0.539984] msm_serial: driver initialized [ 0.546666] qcom-pcie 1b500000.pci: iATU: unroll F, 8 ob, 8 ib, align 4K, limit 4G [ 0.653228] qcom-pcie 1b500000.pci: PCIe Gen.2 x1 link up [ 0.656920] qcom-pcie 1b700000.pci: iATU: unroll F, 8 ob, 8 ib, align 4K, limit 4G [ 0.664651] qcom-pcie 1b500000.pci: PCI host bridge to bus 0000:00 [ 0.680811] loop: module loaded [ 0.686322] pci_bus 0000:00: root bus resource [bus 00-ff] [ 0.686342] pci_bus 0000:00: root bus resource [io 0x0000-0xffff] [ 0.686355] pci_bus 0000:00: root bus resource [mem 0x08000000-0x0fdfffff] [ 0.735125] nand: device found, Manufacturer ID: 0xc2, Chip ID: 0xac [ 0.748387] nand: Macronix MX30UF4G28AB [ 0.754848] pci 0000:00:00.0: [17cb:0101] type 01 class 0x060400 [ 0.759500] nand: 512 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 112 [ 0.764855] pci 0000:00:00.0: supports D1 [ 0.769159] qcom-nandc 1ac00000.nand-controller: Opcode not supported: 238 [ 0.773379] pci 0000:00:00.0: PME# supported from D0 D1 D3hot [ 0.779467] Block protection check failed [ 0.792031] 1 fixed-partitions partitions found on MTD device qcom_nand.0 [ 0.808579] Creating 1 MTD partitions on "qcom_nand.0": [ 0.813562] PCI: bus0: Fast back to back transfers disabled [ 0.819407] 0x000000000000-0x000020000000 : "ubi" [ 0.826697] pci 0000:01:00.0: [168c:0040] type 00 class 0x028000 [ 1.314872] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x001fffff 64bit] [ 1.322273] pci 0000:01:00.0: PME# supported from D0 D3hot D3cold [ 1.329131] PCI: bus1: Fast back to back transfers disabled [ 1.333555] pci 0000:00:00.0: BAR 8: assigned [mem 0x08000000-0x081fffff] [ 1.338714] pci 0000:01:00.0: BAR 0: assigned [mem 0x08000000-0x081fffff 64bit] [ 1.345889] pci 0000:00:00.0: PCI bridge to [bus 01-ff] [ 1.352770] pci 0000:00:00.0: bridge window [mem 0x08000000-0x081fffff] [ 1.359368] qcom-pcie 1b700000.pci: PCIe Gen.2 x1 link up [ 1.365291] qcom-pcie 1b700000.pci: PCI host bridge to bus 0001:00 [ 1.370344] pci_bus 0001:00: root bus resource [bus 00-ff] [ 1.376459] pci_bus 0001:00: root bus resource [io 0x10000-0x1ffff] (bus address [0x0000-0xffff]) [ 1.381891] pci_bus 0001:00: root bus resource [mem 0x2e000000-0x31dfffff] [ 1.390925] pci 0001:00:00.0: [17cb:0101] type 01 class 0x060400 [ 1.397917] pci 0001:00:00.0: supports D1 [ 1.403865] pci 0001:00:00.0: PME# supported from D0 D1 D3hot [ 1.412657] PCI: bus0: Fast back to back transfers disabled [ 1.414142] pci 0001:01:00.0: [168c:0040] type 00 class 0x028000 [ 1.419178] pci 0001:01:00.0: reg 0x10: [mem 0x00000000-0x001fffff 64bit] [ 1.426872] pci 0001:01:00.0: PME# supported from D0 D3hot D3cold [ 1.433646] PCI: bus1: Fast back to back transfers disabled [ 1.437981] pci 0001:00:00.0: BAR 8: assigned [mem 0x2e000000-0x2e1fffff] [ 1.443294] pci 0001:01:00.0: BAR 0: assigned [mem 0x2e000000-0x2e1fffff 64bit] [ 1.450326] pci 0001:00:00.0: PCI bridge to [bus 01-ff] [ 1.457365] pci 0001:00:00.0: bridge window [mem 0x2e000000-0x2e1fffff] [ 1.464095] pcieport 0000:00:00.0: AER: enabled with IRQ 34 [ 1.471385] pcieport 0001:00:00.0: AER: enabled with IRQ 36 [ 2.083263] random: crng init done [ 2.871536] spi_qup 1a280000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64 [ 2.871702] flash@0 enforce active low on GPIO handle [ 2.879516] spi-nor spi0.0: s25fl256s1 (32768 Kbytes) [ 2.882843] 6 fixed-partitions partitions found on MTD device spi0.0 [ 2.887892] OF: Bad cell count for /soc/gsbi@1a200000/spi@1a280000/flash@0/partitions [ 2.894268] OF: Bad cell count for /soc/gsbi@1a200000/spi@1a280000/flash@0/partitions [ 2.902232] Creating 6 MTD partitions on "spi0.0": [ 2.909794] 0x0000002a0000-0x0000002b0000 : "CFG1" [ 2.915027] 0x0000002b0000-0x000000330000 : "BootPRI" [ 2.919805] 0x000000330000-0x000000340000 : "CFG2" [ 2.925092] 0x000000340000-0x0000003c0000 : "FS" [ 2.929560] 0x0000003c0000-0x0000011d0000 : "PriImg" [ 2.934431] 0x0000011d0000-0x000001fe0000 : "SecImg" [ 3.006045] ipq806x-gmac-dwmac 37000000.ethernet: IRQ eth_wake_irq not found [ 3.006123] ipq806x-gmac-dwmac 37000000.ethernet: IRQ eth_lpi not found [ 3.012796] ipq806x-gmac-dwmac 37400000.ethernet: IRQ eth_wake_irq not found [ 3.018695] ipq806x-gmac-dwmac 37400000.ethernet: IRQ eth_lpi not found [ 3.027223] i2c_dev: i2c /dev entries driver [ 3.037923] sdhci: Secure Digital Host Controller Interface driver [ 3.037976] sdhci: Copyright(c) Pierre Ossman [ 3.043016] sdhci-pltfm: SDHCI platform and OF driver helper [ 3.049220] krait-cache-scaling soc:l2-cache: error -ENODEV: _opp_set_regulators: no regulator (l2) found [ 3.054495] nvmem qfprom6: cell calib raw len 11 unaligned to nvmem word size 4 [ 3.062676] nvmem qfprom6: cell calib_backup raw len 11 unaligned to nvmem word size 4 [ 3.146745] NET: Registered PF_INET6 protocol family [ 3.149176] Segment Routing with IPv6 [ 3.150864] In-situ OAM (IOAM) with IPv6 [ 3.154695] NET: Registered PF_PACKET protocol family [ 3.158461] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. [ 3.164302] 8021q: 802.1Q VLAN Support v1.8 [ 3.176689] Registering SWP/SWPB emulation handler [ 3.249929] qcom_rpm 108000.rpm: RPM firmware 3.0.16777342 [ 3.264220] ipq806x-gmac-dwmac 37000000.ethernet: IRQ eth_wake_irq not found [ 3.264275] ipq806x-gmac-dwmac 37000000.ethernet: IRQ eth_lpi not found [ 3.272003] ipq806x-gmac-dwmac 37000000.ethernet: PTP uses main clock [ 3.277646] ipq806x-gmac-dwmac 37000000.ethernet: User ID: 0x10, Synopsys ID: 0x37 [ 3.283384] ipq806x-gmac-dwmac 37000000.ethernet: DWMAC1000 [ 3.290752] ipq806x-gmac-dwmac 37000000.ethernet: DMA HW capability register supported [ 3.296666] ipq806x-gmac-dwmac 37000000.ethernet: RX Checksum Offload Engine supported [ 3.304391] ipq806x-gmac-dwmac 37000000.ethernet: COE Type 2 [ 3.312190] ipq806x-gmac-dwmac 37000000.ethernet: TX Checksum insertion supported [ 3.318109] ipq806x-gmac-dwmac 37000000.ethernet: Wake-Up On Lan supported [ 3.325473] ipq806x-gmac-dwmac 37000000.ethernet: Enhanced/Alternate descriptors [ 3.332159] ipq806x-gmac-dwmac 37000000.ethernet: Enabled extended descriptors [ 3.339781] ipq806x-gmac-dwmac 37000000.ethernet: Ring mode enabled [ 3.346809] ipq806x-gmac-dwmac 37000000.ethernet: Enable RX Mitigation via HW Watchdog Timer [ 3.355935] ipq806x-gmac-dwmac 37400000.ethernet: IRQ eth_wake_irq not found [ 3.361592] ipq806x-gmac-dwmac 37400000.ethernet: IRQ eth_lpi not found [ 3.369446] ipq806x-gmac-dwmac 37400000.ethernet: PTP uses main clock [ 3.375562] ipq806x-gmac-dwmac 37400000.ethernet: User ID: 0x10, Synopsys ID: 0x37 [ 3.381559] ipq806x-gmac-dwmac 37400000.ethernet: DWMAC1000 [ 3.389124] ipq806x-gmac-dwmac 37400000.ethernet: DMA HW capability register supported [ 3.394952] ipq806x-gmac-dwmac 37400000.ethernet: RX Checksum Offload Engine supported [ 3.402559] ipq806x-gmac-dwmac 37400000.ethernet: COE Type 2 [ 3.410554] ipq806x-gmac-dwmac 37400000.ethernet: TX Checksum insertion supported [ 3.416368] ipq806x-gmac-dwmac 37400000.ethernet: Wake-Up On Lan supported [ 3.423731] ipq806x-gmac-dwmac 37400000.ethernet: Enhanced/Alternate descriptors [ 3.430422] ipq806x-gmac-dwmac 37400000.ethernet: Enabled extended descriptors [ 3.438071] ipq806x-gmac-dwmac 37400000.ethernet: Ring mode enabled [ 3.445090] ipq806x-gmac-dwmac 37400000.ethernet: Enable RX Mitigation via HW Watchdog Timer [ 3.463250] thermal thermal_zone0: failed to read out thermal zone (-110) [ 3.476424] UBI: auto-attach mtd0 [ 3.476457] ubi0: attaching mtd0 [ 17.529737] ubi0: scanning is finished [ 17.552928] ubi0 warning: 0xc0775ee8: cannot reserve enough PEBs for bad PEB handling, reserved 40, need 80 [ 17.555168] ubi0: attached mtd0 (name "ubi", size 512 MiB) [ 17.561475] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes [ 17.567109] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048 [ 17.573974] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096 [ 17.580747] ubi0: good PEBs: 4096, bad PEBs: 0, corrupted PEBs: 0 [ 17.587589] ubi0: user volume: 1, internal volumes: 1, max. volumes count: 128 [ 17.593835] ubi0: max/mean erase counter: 19/4, WL threshold: 4096, image sequence number: 1033986993 [ 17.600889] ubi0: available PEBs: 0, total reserved PEBs: 4096, PEBs reserved for bad PEB handling: 40 [ 17.610846] block ubiblock0_0: created from ubi0:0(nand_flash) [ 17.619548] ubi0: background thread "ubi_bgt0d" started,[ 17.640547] Freeing unused kernel image (initmem) memory: 13312K [ 17.640812] Run /init as init process [ 18.172050] init: Console is alive [ 18.172285] init: - watchdog - [ 18.189335] kmodloader: loading kernel modules from /etc/modules-boot.d/* [ 18.191677] gpio_button_hotplug: loading out-of-tree module taints kernel. [ 18.202258] SCSI subsystem initialized [ 18.228029] kmodloader: done loading kernel modules from /etc/modules-boot.d/* [ 18.229206] init: - preinit - Cannot parse config file '/etc/fw_env.config': No such file or directory Failed to find NVMEM device [ 18.679996] ipq806x-gmac-dwmac 37400000.ethernet eth1: Register MEM_TYPE_PAGE_POOL RxQ-0 [ 18.758036] ipq806x-gmac-dwmac 37400000.ethernet eth1: PHY [37000000.mdio-mii:02] driver [Qualcomm Atheros AR8031/AR8033] (irq=POLL) [ 18.758085] dwmac1000: Master AXI performs any burst length [ 18.769099] ipq806x-gmac-dwmac 37400000.ethernet eth1: No Safety Features support found [ 18.784390] ipq806x-gmac-dwmac 37400000.ethernet eth1: IEEE 1588-2008 Advanced Timestamp supported [ 18.784552] ipq806x-gmac-dwmac 37400000.ethernet eth1: registered PTP clock [ 18.792972] ipq806x-gmac-dwmac 37400000.ethernet eth1: configuring for phy/sgmii link mode Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 22.960804] ipq806x-gmac-dwmac 37400000.ethernet eth1: Link is Up - 1Gbps/Full - flow control rx/tx [ 23.077016] ipq806x-gmac-dwmac 37400000.ethernet eth1: Link is Down [ 23.086136] procd: - early - [ 23.086304] procd: - watchdog - [ 23.639075] procd: - watchdog - [ 23.639423] procd: - ubus - [ 23.697277] procd: - init - Please press Enter to activate this console. [ 24.022646] kmodloader: loading kernel modules from /etc/modules.d/* [ 24.032024] Loading modules backported from Linux version v6.12.44-0-g11a24528d080 [ 24.032058] Backport generated by backports.git v6.1.110-1-35-g410656ef [ 24.108593] PPP generic driver version 2.4.2 [ 24.110099] NET: Registered PF_PPPOX protocol family [ 24.131050] ath10k 6.10 driver, optimized for CT firmware, probing pci device: 0x40. [ 24.131917] ath10k_pci 0000:01:00.0: enabling device (0140 -> 0142) [ 24.138745] ath10k_pci 0000:01:00.0: pci irq msi oper_irq_mode 2 irq_mode 0 reset_mode 0 [ 24.276504] urngd: v1.0.2 started. [ 24.898024] ath10k_pci 0000:01:00.0: qca99x0 hw2.0 target 0x01000000 chip_id 0x003801ff sub 168c:0002 [ 24.898074] ath10k_pci 0000:01:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0 [ 24.908207] ath10k_pci 0000:01:00.0: firmware ver 10.4b-ct-9980-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 b36a12bf [ 26.201342] ath10k_pci 0000:01:00.0: board_file api 2 bmi_id 1:4 crc32 4a3d27bf [ 28.572229] ath10k_pci 0000:01:00.0: 10.4 wmi init: vdevs: 16 peers: 48 tid: 96 [ 28.572274] ath10k_pci 0000:01:00.0: msdu-desc: 2500 skid: 32 [ 28.652385] ath10k_pci 0000:01:00.0: wmi print 'P 48/48 V 16 K 144 PH 176 T 186 msdu-desc: 2500 sw-crypt: 0 ct-sta: 0' [ 28.653140] ath10k_pci 0000:01:00.0: wmi print 'free: 31080 iram: 23028 sram: 9596' [ 28.932778] ath10k_pci 0000:01:00.0: htt-ver 2.2 wmi-op 6 htt-op 4 cal otp max-sta 32 raw 0 hwcrypto 1 [ 29.103715] ath10k 6.10 driver, optimized for CT firmware, probing pci device: 0x40. [ 29.104519] ath10k_pci 0001:01:00.0: enabling device (0140 -> 0142) [ 29.111251] ath10k_pci 0001:01:00.0: pci irq msi oper_irq_mode 2 irq_mode 0 reset_mode 0 [ 29.804267] ath10k_pci 0001:01:00.0: qca99x0 hw2.0 target 0x01000000 chip_id 0x003801ff sub 168c:0002 [ 29.804327] ath10k_pci 0001:01:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0 [ 29.814616] ath10k_pci 0001:01:00.0: firmware ver 10.4b-ct-9980-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 b36a12bf [ 31.102253] ath10k_pci 0001:01:00.0: board_file api 2 bmi_id 1:6 crc32 4a3d27bf [ 33.467947] ath10k_pci 0001:01:00.0: 10.4 wmi init: vdevs: 16 peers: 48 tid: 96 [ 33.467994] ath10k_pci 0001:01:00.0: msdu-desc: 2500 skid: 32 [ 33.548371] ath10k_pci 0001:01:00.0: wmi print 'P 48/48 V 16 K 144 PH 176 T 186 msdu-desc: 2500 sw-crypt: 0 ct-sta: 0' [ 33.549122] ath10k_pci 0001:01:00.0: wmi print 'free: 31080 iram: 23028 sram: 9596' [ 33.835586] ath10k_pci 0001:01:00.0: htt-ver 2.2 wmi-op 6 htt-op 4 cal otp max-sta 32 raw 0 hwcrypto 1 [ 34.002063] kmodloader: done loading kernel modules from /etc/modules.d/* [ 47.799372] ipq806x-gmac-dwmac 37400000.ethernet eth1: Register MEM_TYPE_PAGE_POOL RxQ-0 [ 47.878332] ipq806x-gmac-dwmac 37400000.ethernet eth1: PHY [37000000.mdio-mii:02] driver [Qualcomm Atheros AR8031/AR8033] (irq=POLL) [ 47.878395] dwmac1000: Master AXI performs any burst length [ 47.889442] ipq806x-gmac-dwmac 37400000.ethernet eth1: No Safety Features support found [ 47.904785] ipq806x-gmac-dwmac 37400000.ethernet eth1: IEEE 1588-2008 Advanced Timestamp supported [ 47.904972] ipq806x-gmac-dwmac 37400000.ethernet eth1: registered PTP clock [ 47.912654] ipq806x-gmac-dwmac 37400000.ethernet eth1: configuring for phy/sgmii link mode [ 47.924582] br-lan: port 1(eth1) entered blocking state [ 47.927836] br-lan: port 1(eth1) entered disabled state [ 47.932983] ipq806x-gmac-dwmac 37400000.ethernet eth1: entered allmulticast mode [ 47.938537] ipq806x-gmac-dwmac 37400000.ethernet eth1: entered promiscuous mode [ 47.961351] ipq806x-gmac-dwmac 37000000.ethernet eth0: Register MEM_TYPE_PAGE_POOL RxQ-0 [ 48.046899] ipq806x-gmac-dwmac 37000000.ethernet eth0: PHY [37000000.mdio-mii:01] driver [Qualcomm Atheros AR8035] (irq=POLL) [ 48.253456] ipq806x-gmac-dwmac 37000000.ethernet: Failed to reset the dma [ 48.253507] ipq806x-gmac-dwmac 37000000.ethernet eth0: stmmac_hw_setup: DMA engine initialization failed [ 48.259252] ipq806x-gmac-dwmac 37000000.ethernet eth0: __stmmac_open: Hw setup failed [ 51.044283] ipq806x-gmac-dwmac 37400000.ethernet eth1: Link is Up - 1Gbps/Full - flow control rx/tx [ 51.044392] br-lan: port 1(eth1) entered blocking state [ 51.052145] br-lan: port 1(eth1) entered forwarding state BusyBox v1.36.1 (2025-09-19 21:19:38 UTC) built-in shell (ash) _______ ________ __ | |.-----.-----.-----.| | | |.----.| |_ | - || _ | -__| || | | || _|| _| |_______|| __|_____|__|__||________||__| |____| |__| W I R E L E S S F R E E D O M ----------------------------------------------------- OpenWrt 24.10.3, r28872-daca7c049b ----------------------------------------------------- === WARNING! ===================================== There is no root password defined on this device! Use the "passwd" command to set up a new password in order to prevent unauthorized SSH logins. -------------------------------------------------- root@OpenWrt:~#
Notes
Space for additional notes, links to forum threads or other resources.
- ...
Tags
Add tags below, then remove this fixme.