Google Wifi
Google Wifi is a 2×2 802.11ac AP with a quad-core Qualcomm IPQ4019 SoC, 512 MB RAM, and 4 GB eMMC storage. Its stock firmware is based on ChromeOS, including a bootloader based on Coreboot and Depthcharge, and can be convinced to run non-Google-signed software (such as OpenWrt) by entering Developer Mode. The device is also known by its internal name “Google Wifi Gale”
Supported Versions
Hardware Highlights
Installation
Factory Reset
Google Wifi must be restored to its factory default software before running OpenWrt. See here for more info.
To restore factory software, you can utilize Google Wifi's Recovery Mode, where Google will walk you through creating a USB recovery stick using the OnHub Recovery Utility. Despite the name, this tool works for Google Wifi, and not simply its predecessor, the Google OnHub.
Tools required:
- USB-C hub with power-delivery (to support both USB storage and USB-C power supply)
- USB drive, 4 GB or larger
- A Chrome browser on a Windows, Mac OS, or ChromeOS machine (unfortunately, the Recovery Utility does not support GNU/Linux)
If you want to skip the Recovery Utility, you can read through the recovery metadata table yourself and download a recovery image manually.
Once you have a Recovery USB image, the recovery procedure is as follows:
- Hold the Reset button (front of case)
- Connect power to the device
- After about 16 seconds, the LED should blink orange. You may now release the Reset button
- Plug in USB stick containing Recovery image
- LED should turn off, and recovery begins
- After about 5-6 minutes, the device should automatically reboot; LED will pulse blue
- Recovery is complete
Note that Recovery mode does not appear to work with all USB drives (for example, some newer USB 3.0 flash drives). If the device appears not to be accepting your USB drive, try swapping for a different one.
Installing OpenWrt
In the following steps, you will configure Google Wifi for Developer Mode, and boot from a USB image containing OpenWrt. You will again need:
- USB-C hub with power-delivery
- USB drive (flash OpenWrt
google_wifi-squashfs-factory.bin
to the drive - for example using the OnHub Recovery Utility - PH0 screwdriver to remove the case screw, and a flat screwdriver or guitar pick to pry it open (see below)
Procedure:
- Prepare your USB-C hub with PD: attach the USB drive containing
google_wifi-squashfs-factory.bin
and connect your power source, but do NOT connect the hub to the device yet. - Open the case and locate SW7 (see below)
- Factory reset the device with stock firmware (NB: if a flash failed, you should preferably flash stock before trying again):
- Hold the Reset button (front of case)
- Connect power to the device using the USB-C hub. The LED will go through various stages: typically solid white, flashing blue...
- After about 16 seconds, the LED should blink orange. You may now release the Reset button
- After about 3 seconds, the LED should pulse orange and amber. Now press SW7
- Device will blink purple once or twice and restart
- Wait a few seconds for the device to finish booting (it will pulse blue). It will start blinking purple again
- Press SW7. LED should turn off and device should boot your USB image
- If this step fails it sometimes helps to flash the google recovery image and start over.
- Wait about 30 seconds for it to boot. There's no indication when boot is complete, so the best way to check is to connect a cable to the LAN port and ping 192.168.1.1
- To program your image to the main flash, connect ethernet to the LAN port and run the following SSH commands:
## Copy firmware (-O uses the legacy SCP protocol instead of SFTP and may be required depending on your version of SSH) scp -O openwrt-ipq40xx-chromium-google_wifi-squashfs-factory.bin root@192.168.1.1:/tmp/ ## Write firmware to eMMC and clobber secondary GPT at end of eMMC ssh root@192.168.1.1 -C "dd if=/dev/zero bs=512 seek=7634911 of=/dev/mmcblk0 count=33 && \ dd if=/tmp/openwrt-ipq40xx-chromium-google_wifi-squashfs-factory.bin of=/dev/mmcblk0" ## Ideally, we might add a GPT repair step, so primary and alternate are intact, but this isn't strictly necessary.
Now reboot, remove your USB drive, and enjoy!
Note: upon subsequent boots, the device will pulse alternatively blue/purple for a few seconds before starting the boot sequence where the LED is flashing blue; this is normal.
Expanding storage (optional)
You can expand your storage to the full 4GB this device has by executing the following through SSH:
opkg update && opkg install cfdisk resize2fs cfdisk /dev/mmcblk0
At this point, the cfdisk interface will come up.
- Go to the last partition before the empty space line
- Select resize
- It should automatically select enough space to take up the rest of the empty space
- Write the partition table and exit
- Reboot
- Update the filesystem with:
resize2fs /dev/loop0
Specific configuration
Network interfaces
The default network configuration is:
Interface Name | Description | Default configuration |
---|---|---|
br-lan | LAN & WiFi | 192.168.1.1/24 |
eth0 | WAN port | DHCP |
eth1 | LAN port | DHCP |
wlan0 | WiFi 2.4GHz | Disabled |
wlan1 | WiFi 5GHz | Disabled |
802.11s mesh network
802.11 mesh networking is supported on this device. There are no requirements specific to the hardware. Follow the mesh11sd documentation to configure mesh.
Hardware
Hardware specifications can be found at Google_Wifi_(NLS-1304-25) or Google_Wifi_(AC-1304). The NLS and AC models are identical, except for some unused Zigbee hardware.
Info
Architecture | ARM |
---|---|
Vendor | Qualcomm |
Bootloader | Coreboot + Depthcharge |
System-On-Chip | Qualcomm IPQ4019 |
CPU/Speed | 716 MHz |
Flash-Chip | Unknown |
Flash size | 4 GiB |
RAM | 512 MiB |
Wireless | QCA4019 2.4GHz 802.11bgn + QCA4019 5GHz 802.11ac |
Ethernet | 2x 10/100/1000 Mbit/s |
Switch | ? |
USB | 1x USB-C / 3.0 |
Serial | Yes |
JTAG | Not populated |
Photos
TODO: photo of casing / front reset button
PCB
Points of interest:
- Yellow: SW7, Developer Mode switch
- Red: Write-Protect screw
- White button (on side of case, not pictured): reset button
Opening the case
- Remove the single screw on the bottom of the device.
- Insert a flat screwdriver or a guitar pick into the crack between the edge and the base cover, and ease off the cover.
Serial
A standard UART port is not easily available on this device. It does, however, support a variant of Google's Closed Cased Debugging (CCD), where debug features (such as serial console) are exposed via the USB Type-C port.
To use CCD, you need a special cable, called a SuzyQ. Google's documentation provides instructions on how to purchase one, or how to make your own.
Notes:
- A SuzyQ cable only works in one direction. If it doesn't work one way, try flipping the connector.
- CCD debug features are only enabled by directly attaching to the device's USB port. It does not work when connected through a USB-C hub. Because Google Wifi only has a single USB-C port, this means you cannot use both SuzyQ and any other USB peripherals (e.g., USB storage).
- The serial console will output by default (i.e., you can see the boot log), but it will only receive data (i.e., to interact with the console) if you remove the Write-Protect screw (see PCB section).
- Console default is 115200,8n1
When you first attach the USB-A end of a SuzyQ to a Linux machine, it will show up like this in dmesg
:
usb 1-1.2.1: new high-speed USB device number 20 using xhci_hcd usb 1-1.2.1: New USB device found, idVendor=18d1, idProduct=501f, bcdDevice=32.99 usb 1-1.2.1: New USB device strings: Mfr=10, Product=11, SerialNumber=12 usb 1-1.2.1: Product: SuzyQable usb 1-1.2.1: Manufacturer: Google Inc. usb 1-1.2.1: SerialNumber: 00xxxxxxxxxx hub 1-1.2.1:1.0: USB hub found hub 1-1.2.1:1.0: 2 ports detected
When the USB-C end is correctly attached to a Google Wifi system, dmesg
will show something like:
usb 1-1.2.1.2: new full-speed USB device number 21 using xhci_hcd usb 1-1.2.1.2: New USB device found, idVendor=18d1, idProduct=500f, bcdDevice= 1.00 usb 1-1.2.1.2: New USB device strings: Mfr=1, Product=2, SerialNumber=0 usb 1-1.2.1.2: Product: Gale debug usb 1-1.2.1.2: Manufacturer: Google Inc. usb_serial_simple 1-1.2.1.2:1.0: google converter detected usb 1-1.2.1.2: google converter now attached to ttyUSB0 usb_serial_simple 1-1.2.1.2:1.1: google converter detected usb 1-1.2.1.2: google converter now attached to ttyUSB1
Bootlogs
OEM bootlog
coreboot-60d1b1c Mon Jan 9 00:04:49 UTC 2017 bootblock starting... Exception handlers installed. Translation table is @ 0a0f0000 Mapping address range [0x00000000:0x00000000) as uncached Creating new subtable @0a0f4000 for [0x0a000000:0x0a100000) Mapping address range [0x0a0c0000:0x0a100000) as writeback Creating new subtable @0a0f4400 for [0x0a800000:0x0a900000) Mapping address range [0x0a8c0000:0x0a900000) as writeback Creating new subtable @0a0f4800 for [0x08600000:0x08700000) Mapping address range [0x08600000:0x08608000) as writeback Setting address range [0x80000000:0xa0000000) as unmapped Setting address range [0x87300000:0x87500000) as unmapped Setting address range [0xa0000000:0x00000000) as unmapped Creating new subtable @0a0f4c00 for [0x00000000:0x00100000) Setting address range [0x00000000:0x00000400) as unmapped No uber-sbl parameter detected SF: Detected W25Q64 with sector size 0x1000, total 0x800000 VBOOT: Loading verstage. CBFS @ 20000 size 2e0000 CBFS: 'Master Header Locator' located CBFS at [20000:300000) CBFS: Locating 'fallback/verstage' CBFS: Found @ offset 1cf40 size 987c coreboot-60d1b1c Mon Jan 9 00:04:49 UTC 2017 verstage starting... Exception handlers installed. SF: Detected W25Q64 with sector size 0x1000, total 0x800000 FMAP: Found "FMAP" version 1.0 at 300000. FMAP: base = 0 size = 800000 #areas = 24 FMAP: area RW_NVRAM found @ 6f0000 (65536 bytes) tis_init: ValidSts bit set(1) in TPM_ACCESS register after 8 ms 1.2 TPM (chip type slb9645tt device-id 0x1A) TPM: Startup TPM: command 0x99 returned 0x0 TPM: Asserting physical presence TPM: command 0x4000000a returned 0x0 TPM: command 0x65 returned 0x0 TPM: flags disable=0, deactivated=0, nvlocked=1 setup_tpm():320: TPM: SetupTPM() succeeded TPM: tlcl_read(0x1007, 10) TPM: command 0xcf returned 0x0 Reading tristate GPIOs: 0 Z 0 = 10 (binary_first base3 number system) Board ID 10 WW_RING: initialized 1 out of 1 Phase 1 FMAP: area GBB found @ 301000 (913152 bytes) VB2:vb2_check_recovery() Recovery reason from previous boot: 0x0 / 0x0 Phase 2 Phase 3 FMAP: area GBB found @ 301000 (913152 bytes) FMAP: area VBLOCK_B found @ 580000 (8192 bytes) FMAP: area VBLOCK_B found @ 580000 (8192 bytes) VB2:vb2_verify_keyblock() Checking key block signature... FMAP: area VBLOCK_B found @ 580000 (8192 bytes) FMAP: area VBLOCK_B found @ 580000 (8192 bytes) VB2:vb2_verify_fw_preamble() Verifying preamble. Phase 4 FMAP: area FW_MAIN_B found @ 582000 (1367808 bytes) VB2:vb2api_init_hash() HW crypto for hash_alg 2 not supported, using SW Saving nvdata SF: Detected W25Q64 with sector size 0x1000, total 0x800000 TPM: command 0x14 returned 0x0 TPM: command 0x14 returned 0x0 TPM: Set global lock TPM: tlcl_write(0x0, 0) TPM: command 0xcd returned 0x0 Slot B is selected CBFS: 'VBOOT' located CBFS at [582000:5af240) CBFS: Locating 'fallback/romstage' CBFS: Found @ offset 0 size 469b coreboot-60d1b1c Mon Jan 9 00:04:49 UTC 2017 romstage starting... SF: Detected W25Q64 with sector size 0x1000, total 0x800000 CBFS: 'VBOOT' located CBFS at [582000:5af240) CBFS: Locating 'cdt.mbn' CBFS: Found @ offset bac0 size 1ac CBFS: 'VBOOT' located CBFS at [582000:5af240) CBFS: Locating 'ddr.mbn' CBFS: Found @ offset bcc0 size 7d38 DDR version private build initialized SDI Entry: 0x860038d Mapping address range [0x80000000:0xa0000000) as writeback Mapping address range [0x87300000:0x87500000) as uncached CBMEM: IMD: root @ 8727f000 254 entries. IMD: root @ 8727ec00 62 entries. creating vboot_handoff structure Reading tristate GPIOs: 0 Z 0 = 10 (binary_first base3 number system) Board ID 10 Copying FW preamble CBFS: 'VBOOT' located CBFS at [582000:5af240) CBFS: Locating 'fallback/ramstage' CBFS: Found @ offset 4700 size 6f3b coreboot-60d1b1c Mon Jan 9 00:04:49 UTC 2017 ramstage starting... SF: Detected W25Q64 with sector size 0x1000, total 0x800000 FMAP: Found "FMAP" version 1.0 at 300000. FMAP: base = 0 size = 800000 #areas = 24 FMAP: area RO_VPD found @ 3e0000 (131072 bytes) FMAP: area RW_VPD found @ 6e0000 (32768 bytes) FMAP: area RO_VPD found @ 3e0000 (131072 bytes) FMAP: area RW_VPD found @ 6e0000 (32768 bytes) Exception handlers installed. BS: BS_PRE_DEVICE times (us): entry 9 run 14 exit 9 BS: BS_DEV_INIT_CHIPS times (us): entry 9 run 29 exit 9 Enumerating buses... Show all devs... Before device enumeration. Root Device: enabled 1 CPU_CLUSTER: 0: enabled 1 Compare with tree... Root Device: enabled 1 CPU_CLUSTER: 0: enabled 1 Root Device scanning... root_dev_scan_bus for Root Device CPU_CLUSTER: 0 enabled root_dev_scan_bus for Root Device done scan_bus: scanning of bus Root Device took 12403 usecs done BS: BS_DEV_ENUMERATE times (us): entry 9 run 37291 exit 10 Allocating resources... Reading resources... Root Device read_resources bus 0 link: 0 Root Device read_resources bus 0 link: 0 done Done reading resources. Show resources in subtree (Root Device)...After reading. Root Device child on link 0 CPU_CLUSTER: 0 CPU_CLUSTER: 0 CPU_CLUSTER: 0 resource base 80000000 size 7500000 align 0 gran 0 limit 0 flags e0004200 index 0 CPU_CLUSTER: 0 resource base 87500000 size b00000 align 0 gran 0 limit 0 flags f0004200 index 1 CPU_CLUSTER: 0 resource base 88000000 size 18000000 align 0 gran 0 limit 0 flags e0004200 index 2 Setting resources... Root Device assign_resources, bus 0 link: 0 CPU_CLUSTER: 0 missing set_resources Root Device assign_resources, bus 0 link: 0 Done setting resources. Show resources in subtree (Root Device)...After assigning values. Root Device child on link 0 CPU_CLUSTER: 0 CPU_CLUSTER: 0 CPU_CLUSTER: 0 resource base 80000000 size 7500000 align 0 gran 0 limit 0 flags e0004200 index 0 CPU_CLUSTER: 0 resource base 87500000 size b00000 align 0 gran 0 limit 0 flags f0004200 index 1 CPU_CLUSTER: 0 resource base 88000000 size 18000000 align 0 gran 0 limit 0 flags e0004200 index 2 Done allocating resources. BS: BS_DEV_RESOURCES times (us): entry 9 run 120232 exit 9 Enabling resources... done. BS: BS_DEV_ENABLE times (us): entry 9 run 2986 exit 10 Initializing devices... Root Device init ... CBFS: 'VBOOT' located CBFS at [582000:5af240) CBFS: Locating 'tzbsp_no_xpu.mbn' CBFS: Found @ offset 13a40 size 9428 Starting TZBSP Translation table is @ 0a0f0000 Mapping address range [0x00000000:0x00000000) as uncached Creating new subtable @0a0f4000 for [0x0a000000:0x0a100000) Mapping address range [0x0a0c0000:0x0a100000) as writeback Creating new subtable @0a0f4400 for [0x0a800000:0x0a900000) Mapping address range [0x0a8c0000:0x0a900000) as writeback Creating new subtable @0a0f4800 for [0x08600000:0x08700000) Mapping address range [0x08600000:0x08608000) as writeback Mapping address range [0x80000000:0xa0000000) as writeback Mapping address range [0x87300000:0x87500000) as uncached Setting address range [0xa0000000:0x00000000) as unmapped Creating new subtable @0a0f4c00 for [0x00000000:0x00100000) Setting address range [0x00000000:0x00000400) as unmapped Setting up USB HOST1 controller. Version = 5533270a software reset done USB Host mode reg = 101004 cbmem_add_vpd_calibration_data: added wifi_base64_calibration0 to CBMEM cbmem_add_vpd_calibration_data: added wifi_base64_calibration1 to CBMEM Root Device init finished in 532272 usecs CPU_CLUSTER: 0 init ... CPU: QCA 40xx CPU_CLUSTER: 0 init finished in 3788 usecs Devices initialized Show all devs... After init. Root Device: enabled 1 CPU_CLUSTER: 0: enabled 1 BS: BS_DEV_INIT times (us): entry 9 run 556429 exit 3 Finalize devices... Devices finalized BS: BS_POST_DEVICE times (us): entry 2 run 3788 exit 2 BS: BS_OS_RESUME_CHECK times (us): entry 2 run 4 exit 2 Writing coreboot table at 0x8724c000 rom_table_end = 0x8724c000 ... aligned to 0x87250000 0. 0000000080000000-000000008724bfff: RAM 1. 000000008724c000-000000008727ffff: CONFIGURATION TABLES 2. 0000000087280000-00000000874fffff: RAM 3. 0000000087500000-0000000087ffffff: RESERVED 4. 0000000088000000-000000009fffffff: RAM Reading tristate GPIOs: 0 Z 0 = 10 (binary_first base3 number system) Board ID 10 Passing 5 GPIOs to payload: NAME | PORT | POLARITY | VALUE developer | 0x00000029 | low | low recovery | 0x00000039 | low | low write protect | 0x00000035 | low | low power | undefined | low | low lid | undefined | low | high CBFS: 'VBOOT' located CBFS at [582000:5af240) Wrote coreboot table at: 8724c000, 0x320 bytes, checksum 6d92 coreboot table: 824 bytes. IMD ROOT 0. 8727f000 00001000 IMD SMALL 1. 8727e000 00001000 CONSOLE 2. 8725e000 00020000 TIME STAMP 3. 8725d000 00000400 VBOOT 4. 8725c000 00000c0c VPD 5. 87254000 00007fcc WIFI CLBR 6. 8724e000 00005e94 COREBOOT 7. 8724c000 00002000 IMD small region: IMD ROOT 0. 8727ec00 00000400 VBOOT SEL 1. 8727ebe0 00000008 BS: BS_WRITE_TABLES times (us): entry 2 run 120589 exit 3 CBFS: 'VBOOT' located CBFS at [582000:5af240) CBFS: Locating 'fallback/payload' CBFS: Found @ offset 1cec0 size 10341 Loading segment from rom address 0x87289428 code (compression=1) New segment dstaddr 0x88104040 memsize 0x1249b70 srcaddr 0x87289460 filesize 0x10309 Loading segment from rom address 0x87289444 Entry Point 0x88104041 Bounce Buffer at 9ffcf000, 197488 bytes Loading Segment: addr: 0x0000000088104040 memsz: 0x0000000001249b70 filesz: 0x0000000000010309 lb: [0x00000000872e0000, 0x00000000872f81b8) Post relocation: addr: 0x0000000088104040 memsz: 0x0000000001249b70 filesz: 0x0000000000010309 using LZMA [ 0x88104040, 88121470, 0x8934dbb0) <- 87289460 Clearing Segment: addr: 0x0000000088121470 memsz: 0x000000000122c740 dest 88104040, end 8934dbb0, bouncebuffer 9ffcf000 Loaded segments BS: BS_PAYLOAD_LOAD times (us): entry 2 run 175595 exit 2 Jumping to boot code at 88104041(8724c000) CPU0: stack: 0a8fc000 - 0a900000, lowest used address 0a8ff5f0, stack used: 2576 bytes Starting depthcharge on gale... WARNING: can't convert coreboot GPIOs, 'lid' won't be resampled at runtime! WARNING: can't convert coreboot GPIOs, 'power' won't be resampled at runtime! clock_config_mmc : 1 WW_RING: initialized controller found at 0x32 WW_RING: initialized 1 out of 1 The GBB signature is at 0x88004020 and is: 24 47 42 42 Wipe memory regions: [0x00000080000000, 0x00000080208000) [0x00000080208200, 0x0000008724c000) [0x00000087280000, 0x00000087500000) [0x0000008934dbb0, 0x0000009ff00000) Initializing XHCI USB controller at 0x8a00000. Calling VbSelectAndLoadKernel(). TPM: TlclRead(0x1008, 13) 1.2 TPM (chip type slb9645tt device-id 0x1A) TPM: command 0xcf returned 0x0 TPM: command 0x65 returned 0x0 TPM: RollbackKernelRead 10001 Entering VbBootDeveloper() VbAudioOpen() - ticks_per_msec is 1000 sound_stop: No sound ops set. VbAudioOpen() - VbExBeep() is limited VbGetDevMusicNotes: use_short is 0, hdr is 0x0, maxsize is 0 VbGetDevMusicNotes: using 5 default notes VbAudioOpen() - note count 5 sound_start: No sound ops set. sound_start: No sound ops set. VbBootDeveloper() - trying fixed disk sound_stop: No sound ops set. VbTryLoadKernel() start, get_info_flags=0x2 MMC version = 10000042 clock_config_mmc : 1 clock_config_mmc : 2 Man 000015 Snr 2445147822 Product 4FPD3R Revision 0.2 VbTryLoadKernel() found 1 disks VbTryLoadKernel() trying disk 0 GptNextKernelEntry looking at new prio partition 2 GptNextKernelEntry s1 t0 p1 GptNextKernelEntry looking at new prio partition 4 GptNextKernelEntry s0 t15 p0 GptNextKernelEntry looking at new prio partition 6 GptNextKernelEntry s0 t15 p0 GptNextKernelEntry likes partition 2 Found kernel entry at 20480 size 32768 Checking key block signature... - sig_size=512, expecting 512 for algorithm 8 - sig_size=256, expecting 256 for algorithm 4 Kernel preamble is good. - sig_size=256, expecting 256 for algorithm 4 Partition is good. Same kernel version Good_partition >= 0 VbTryLoadKernel() LoadKernel() = 0 TPM: Lock physical presence TPM: command 0x4000000a returned 0x0 VbSelectAndLoadKernel() returning 0 Boot policy: Match for type 0 with cmdline 1 Modified kernel command line: cros_secure console= loglevel=7 init=/sbin/init cros_secure oops=panic panic=-1 root=/dev/dm-0 rootwait ro dm_verity.error_behavior=3 dm_verity.max_bios=-1 dm_verity.dev_wait=1 dm="1 vroot none ro 1,0 1536000 verity payload=PARTUUID=314f0fc9-3119-3c40-92df-a5f135899022/PARTNROFF=1 hashtree=PARTUUID=314f0fc9-3119-3c40-92df-a5f135899022/PARTNROFF=1 hashstart=1536000 alg=sha1 root_hexdigest=25009619ed1c7b8e4eae62d0d4cc7f794507d4d6 salt=8da0ac678592acf6395953f6dca6310b5682844dc5ae70c2e96c88474c273afa" noinitrd vt.global_cursor_default=0 kern_guid=314f0fc9-3119-3c40-92df-a5f135899022 coherent_pool=2M Loading FIT. Image fdt@12 has 4873 bytes. Image fdt@11 has 4975 bytes. Image fdt@10 has 4166 bytes. Image fdt@9 has 6023 bytes. Image fdt@8 has 20301 bytes. Image fdt@7 has 18611 bytes. Image fdt@6 has 14306 bytes. Image fdt@5 has 4369 bytes. Image fdt@4 has 4506 bytes. Image fdt@3 has 5523 bytes. Image fdt@2 has 7318 bytes. Image fdt@1 has 7302 bytes. Image kernel@1 has 4574040 bytes. Compat preference: google,gale-v2 Config conf@12, kernel kernel@1, fdt fdt@12, compat sony,xperia-honami qcom,msm8974 Config conf@11, kernel kernel@1, fdt fdt@11, compat qcom,msm8960-cdp qcom,msm8960 Config conf@10, kernel kernel@1, fdt fdt@10, compat qcom,msm8660-surf qcom,msm8660 Config conf@9, kernel kernel@1, fdt fdt@9, compat qcom,ipq8064-ap148 qcom,ipq8064 Config conf@8, kernel kernel@1, fdt fdt@8, compat google,gale qcom,ipq4019 Config conf@7, kernel kernel@1, fdt fdt@7, compat google,gale-v2 (match) qcom,ipq4019 Config conf@6, kernel kernel@1, fdt fdt@6, compat qcom,ipq4019 Config conf@5, kernel kernel@1, fdt fdt@5, compat qcom,apq8084-mtp qcom,apq8084 Config conf@4, kernel kernel@1, fdt fdt@4, compat qcom,apq8084-ifc6540 qcom,apq8084 Config conf@3, kernel kernel@1, fdt fdt@3, compat qcom,apq8074-dragonboard qcom,apq8074 Config conf@2, kernel kernel@1, fdt fdt@2, compat qcom,apq8064-ifc6410 qcom,apq8064 Config conf@1 (default), kernel kernel@1, fdt fdt@1, compat qcom,apq8064-cm-qs600 qcom,apq8064 Choosing best match conf@7. Shutting down all USB controllers. Exiting depthcharge with code 4 at timestamp: 41854151 Developer Console To return to the browser, press: [ Ctrl ] and [ Alt ] and [ <- ] (F1) To use this console, the developer mode switch must be engaged. Doing so will destroy any saved data on the system. In developer mode, it is possible to - login and sudo as user 'chronos' - require a password for sudo and login(*) - disable power management behavior (screen dimming): sudo initctl stop powerd - install your own operating system image! * To set a password for 'chronos', run the following as root: chromeos-setdevpasswd If you are having trouble booting a self-signed kernel, you may need to enable USB booting. To do so, run the following as root: enable_dev_usb_boot Have fun and send patches! localhost login: root root@localhost $ dmesg [ 0.000000] Booting Linux on physical CPU 0x0 [ 0.000000] Initializing cgroup subsys cpuset [ 0.000000] Initializing cgroup subsys cpu [ 0.000000] Initializing cgroup subsys cpuacct [ 0.000000] Linux version 3.18.0-13978-gd4d7f05 (chrome-bot@build65-m2.golo.chromium.org) (gcc version 4.9.x 20150123 (prerelease) (4.9.2_cos_gg_4.9.2-r151-32c89c19b042a12b5a1bf0153299154ea5435c03_4.9.2-r151) ) #1 SMP PREEMPT Thu Apr 27 21:32:48 PDT 2017 [ 0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=10c5387d [ 0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache [ 0.000000] Machine model: Google IPQ4019/Gale [ 0.000000] Memory policy: Data cache writealloc [ 0.000000] On node 0 totalpages: 126976 [ 0.000000] free_area_init_node: node 0, pgdat c0e66e80, node_mem_map dfaf9000 [ 0.000000] Normal zone: 1024 pages used for memmap [ 0.000000] Normal zone: 0 pages reserved [ 0.000000] Normal zone: 126976 pages, LIFO batch:31 [ 0.000000] PERCPU: Embedded 11 pages/cpu @dfab9000 s14144 r8192 d22720 u45056 [ 0.000000] pcpu-alloc: s14144 r8192 d22720 u45056 alloc=11*4096 [ 0.000000] pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 125952 [ 0.000000] Kernel command line: cros_secure console= loglevel=7 init=/sbin/init cros_secure oops=panic panic=-1 root=/dev/dm-0 rootwait ro dm_verity.error_behavior=3 dm_verity.max_bios=-1 dm_verity.dev_wait=1 dm="1 vroot none ro 1,0 1536000 verity payload=PARTUUID=314f0fc9-3119-3c40-92df-a5f135899022/PARTNROFF=1 hashtree=PARTUUID=314f0fc9-3119-3c40-92df-a5f135899022/PARTNROFF=1 hashstart=1536000 alg=sha1 root_hexdigest=25009619ed1c7b8e4eae62d0d4cc7f794507d4d6 salt=8da0ac678592acf6395953f6dca6310b5682844dc5ae70c2e96c88474c273afa" noinitrd vt.global_cursor_default=0 kern_guid=314f0fc9-3119-3c40-92df-a5f135899022 coherent_pool=2M [ 0.000000] device-mapper: init: will configure 1 devices [ 0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes) [ 0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes) [ 0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes) [ 0.000000] Memory: 489864K/507904K available (7736K kernel code, 440K rwdata, 1992K rodata, 1024K init, 607K bss, 18040K reserved, 0K highmem) [ 0.000000] Virtual kernel memory layout: vector : 0xffff0000 - 0xffff1000 ( 4 kB) fixmap : 0xffc00000 - 0xffe00000 (2048 kB) vmalloc : 0xe0800000 - 0xff000000 ( 488 MB) lowmem : 0xc0000000 - 0xe0000000 ( 512 MB) pkmap : 0xbfe00000 - 0xc0000000 ( 2 MB) modules : 0xbf000000 - 0xbfe00000 ( 14 MB) .text : 0xc0208000 - 0xc0c80108 (10721 kB) .init : 0xc0d00000 - 0xc0e00000 (1024 kB) .data : 0xc0e00000 - 0xc0e6e0e8 ( 441 kB) .bss : 0xc0e6e0e8 - 0xc0f06000 ( 608 kB) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 [ 0.000000] Preemptible hierarchical RCU implementation. [ 0.000000] NR_IRQS:16 nr_irqs:16 16 [ 0.000000] Architected cp15 timer(s) running at 48.00MHz (virt). [ 0.000008] sched_clock: 56 bits at 48MHz, resolution 20ns, wraps every 2863311552512ns [ 0.000026] Switching to timer-based delay loop, resolution 20ns [ 0.000405] Calibrating delay loop (skipped), value calculated using timer frequency.. 96.00 BogoMIPS (lpj=480000) [ 0.000430] pid_max: default: 32768 minimum: 301 [ 0.000569] Security Framework initialized [ 0.000593] SELinux: Initializing. [ 0.000686] SELinux: Starting in permissive mode [ 0.000700] Yama: becoming mindful. [ 0.000745] Chromium OS LSM: enabled [ 0.000839] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.000857] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.001963] Initializing cgroup subsys devices [ 0.001996] Initializing cgroup subsys freezer [ 0.002052] CPU: Testing write buffer coherency: ok [ 0.002102] ftrace: allocating 24647 entries in 73 pages [ 0.049533] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000 [ 0.049668] Setting up static identity map for 0x809353b8 - 0x80935410 [ 0.229929] CPU1: Booted secondary processor [ 0.229980] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001 [ 0.290032] CPU2: Booted secondary processor [ 0.290075] CPU2: thread -1, cpu 2, socket 0, mpidr 80000002 [ 0.350134] CPU3: Booted secondary processor [ 0.350176] CPU3: thread -1, cpu 3, socket 0, mpidr 80000003 [ 0.350307] Brought up 4 CPUs [ 0.350351] SMP: Total of 4 processors activated. [ 0.350360] CPU: All CPU(s) started in SVC mode. [ 0.370554] devtmpfs: initialized [ 0.372841] VFP support v0.3: implementor 41 architecture 2 part 30 variant 7 rev 5 [ 0.374462] pinctrl core: initialized pinctrl subsystem [ 0.375090] regulator-dummy: no parameters [ 0.383674] NET: Registered protocol family 16 [ 0.385847] DMA: preallocated 2048 KiB pool for atomic coherent allocations [ 0.409862] cpuidle: using governor ladder [ 0.439886] cpuidle: using governor menu [ 0.446749] console [pstore-1] enabled [ 0.446766] pstore: Registered ramoops as persistent store backend [ 0.446789] ramoops: attached 0x100000@0x9ff00000, ecc: 0/0 [ 0.463326] hw-breakpoint: Debug register access (0xee003e17) caused undefined instruction on CPU 3 [ 0.463334] hw-breakpoint: Debug register access (0xee003e17) caused undefined instruction on CPU 1 [ 0.463342] hw-breakpoint: Debug register access (0xee003e17) caused undefined instruction on CPU 2 [ 0.463346] hw-breakpoint: CPU 1 failed to disable vector catch [ 0.463427] hw-breakpoint: Debug register access (0xee003e17) caused undefined instruction on CPU 0 [ 0.463565] Switched to clocksource arch_sys_counter [ 0.464517] gpiochip_add: registered GPIOs 0 to 99 on device: 1000000.pinctrl [ 0.464538] GPIO chip 1000000.pinctrl: created GPIO range 0->99 ==> 1000000.pinctrl PIN 0->99 [ 0.516514] SD0 VccQ: 1800 <--> 3000 mV [ 0.517451] SCSI subsystem initialized [ 0.527913] libata version 3.00 loaded. [ 0.528445] usbcore: registered new interface driver usbfs [ 0.528577] usbcore: registered new interface driver hub [ 0.528711] usbcore: registered new device driver usb [ 0.529180] pps_core: LinuxPPS API ver. 1 registered [ 0.529201] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it> [ 0.529265] PTP clock support registered [ 0.530168] of_get_named_gpiod_flags: parsed 'write-protect-gpio' property of node '/firmware/chromeos[0]' - status (0) [ 0.530419] of_get_named_gpiod_flags: parsed 'recovery-switch' property of node '/firmware/chromeos[0]' - status (0) [ 0.530640] of_get_named_gpiod_flags: parsed 'developer-switch' property of node '/firmware/chromeos[0]' - status (0) [ 0.530887] chromeos_arm chromeos_arm: chromeos system detected [ 0.531819] Advanced Linux Sound Architecture Driver Initialized. [ 0.579624] NET: Registered protocol family 2 [ 0.580967] TCP established hash table entries: 4096 (order: 2, 16384 bytes) [ 0.581086] TCP bind hash table entries: 4096 (order: 4, 81920 bytes) [ 0.581307] TCP: Hash tables configured (established 4096 bind 4096) [ 0.581383] TCP: reno registered [ 0.581411] UDP hash table entries: 256 (order: 1, 12288 bytes) [ 0.581467] UDP-Lite hash table entries: 256 (order: 1, 12288 bytes) [ 0.581863] NET: Registered protocol family 1 [ 0.581946] PCI: CLS 0 bytes, default 64 [ 0.583153] hw perfevents: enabled with armv7_cortex_a7 PMU driver, 5 counters available [ 0.585779] futex hash table entries: 1024 (order: 4, 65536 bytes) [ 0.585996] audit: initializing netlink subsys (disabled) [ 0.586099] audit: type=2000 audit(0.569:1): initialized [ 0.603470] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.604435] jffs2: version 2.2. (NAND) (SUMMARY) \xffffffc2\xffffffa9 2001-2006 Red Hat, Inc. [ 0.605171] msgmni has been set to 956 [ 0.605293] SELinux: Registering netfilter hooks [ 0.605999] device_jail: allocated device range 260046848 -> 260047104 [ 0.606688] alt_syscall: table 'read_write_test' available. [ 0.606749] alt_syscall: table 'android' available. [ 0.606801] alt_syscall: table 'android_permissive' available. [ 0.606858] alt_syscall: table 'third_party' available. [ 0.606900] alt_syscall: table 'third_party_permissive' available. [ 0.610368] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 247) [ 0.610413] io scheduler noop registered [ 0.610441] io scheduler deadline registered [ 0.610778] io scheduler cfq registered (default) [ 0.615227] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled [ 0.617149] msm_serial 78af000.serial: msm_serial: detected port #0 [ 0.617215] msm_serial 78af000.serial: uartclk = 1843200 [ 0.617294] msm_serial 78af000.serial: ttyMSM0 at MMIO 0x78af000 (irq = 61, base_baud = 115200) is a MSM [ 0.618072] msm_serial 78b0000.serial: msm_serial: detected port #1 [ 0.618166] msm_serial 78b0000.serial: uartclk = 1843200 [ 0.618236] msm_serial 78b0000.serial: ttyMSM1 at MMIO 0x78b0000 (irq = 62, base_baud = 115200) is a MSM [ 0.618922] msm_serial: driver initialized [ 0.620422] error detecting cacheinfo..cpu0 [ 0.627748] loop: module loaded [ 0.627830] lkdtm: No crash points registered, enable through debugfs [ 0.630539] spi_qup 78b5000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64 [ 0.630671] of_get_named_gpiod_flags: parsed 'cs-gpios' property of node '/soc/spi@78b5000[0]' - status (0) [ 0.632864] spi_qup 78b6000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64 [ 0.633004] of_get_named_gpiod_flags: parsed 'cs-gpios' property of node '/soc/spi@78b6000[0]' - status (0) [ 0.635529] libphy: Fixed MDIO Bus: probed [ 0.636464] libphy: ipq40xx_mdio: probed [ 0.661961] ESS reset ok! [ 0.695058] ESS reset ok! [ 1.115053] platform 8a00000.dwc3: Driver dwc3 requests probe deferral [ 1.115864] platform 6000000.dwc3: Driver dwc3 requests probe deferral [ 1.116528] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 1.116566] ehci-pci: EHCI PCI platform driver [ 1.116691] ehci-platform: EHCI generic platform driver [ 1.117508] usbcore: registered new interface driver cdc_acm [ 1.117533] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters [ 1.117682] usbcore: registered new interface driver usb-storage [ 1.117903] usbcore: registered new interface driver usbserial [ 1.117989] usbcore: registered new interface driver usbserial_generic [ 1.118072] usbserial: USB Serial support registered for generic [ 1.126444] tpm_i2c_infineon 0-0020: 1.2 TPM (device-id 0x1A) [ 1.220978] i2c_qup 78b8000.i2c: noise-reject-scl = 1 [ 1.221008] i2c_qup 78b8000.i2c: noise-reject-sda = 1 [ 1.225393] device-mapper: ioctl: 4.28.0-ioctl (2014-09-17) initialised: dm-devel@redhat.com [ 1.225934] device-mapper: verity-chromeos: dm-verity-chromeos registered [ 1.228371] sdhci: Secure Digital Host Controller Interface driver [ 1.228398] sdhci: Copyright(c) Pierre Ossman [ 1.228424] sdhci-pltfm: SDHCI platform and OF driver helper [ 1.229388] sdhci_msm 7824900.sdhci: GPIO lookup for consumer wp [ 1.229408] sdhci_msm 7824900.sdhci: using device tree for GPIO lookup [ 1.229485] of_get_named_gpiod_flags: can't parse 'wp-gpios' property of node '/soc/sdhci@7824000[0]' [ 1.229502] of_get_named_gpiod_flags: can't parse 'wp-gpio' property of node '/soc/sdhci@7824000[0]' [ 1.229517] sdhci_msm 7824900.sdhci: using lookup tables for GPIO lookup [ 1.229535] sdhci_msm 7824900.sdhci: lookup for GPIO wp failed [ 1.229694] sdhci_msm 7824900.sdhci: clock rate set to 192000000 [ 1.232214] sdhci_msm 7824900.sdhci: No vmmc regulator found [ 1.273603] mmc0: SDHCI controller on 7824900.sdhci [7824900.sdhci] using ADMA 64-bit [ 1.274184] of_get_named_gpiod_flags: can't parse 'enable-gpio' property of node '/soc/i2c@78b8000/lp55231@32[0]' [ 1.336980] mmc0: BKOPS_EN bit is not set [ 1.341441] mmc0: data error, mask 00200000 [ 1.344341] mmc0: new HS200 MMC card at address 0001 [ 1.345160] mmcblk0: mmc0:0001 4FPD3R 3.64 GiB [ 1.345429] mmcblk0boot0: mmc0:0001 4FPD3R partition 1 4.00 MiB [ 1.345683] mmcblk0boot1: mmc0:0001 4FPD3R partition 2 4.00 MiB [ 1.345907] mmcblk0rpmb: mmc0:0001 4FPD3R partition 3 512 KiB [ 1.350465] mmcblk0: p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 1.397581] lp5523x 1-0032: lp5523 Programmable led chip found [ 1.407666] usbcore: registered new interface driver usbhid [ 1.407693] usbhid: USB HID core driver [ 1.414089] ion_chunk_heap_create: base 2654994432 size 4194304 align 16384 [ 1.415319] ashmem: initialized [ 1.417667] GACT probability NOT on [ 1.417707] Netfilter messages via NETLINK v0.30. [ 1.417852] nf_conntrack version 0.5.0 (7654 buckets, 30616 max) [ 1.418729] ctnetlink v0.93: registering with nfnetlink. [ 1.420080] ip_tables: (C) 2000-2006 Netfilter Core Team [ 1.420350] TCP: cubic registered [ 1.420377] Initializing XFRM netlink socket [ 1.421813] NET: Registered protocol family 10 [ 1.433701] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 1.433966] NET: Registered protocol family 17 [ 1.434622] ThumbEE CPU extension supported. [ 1.434664] Registering SWP/SWPB emulation handler [ 1.439288] Key type encrypted registered [ 2.004066] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller [ 2.004576] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 1 [ 2.004950] xhci-hcd xhci-hcd.0.auto: irq 199, io mem 0x08a00000 [ 2.005301] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002 [ 2.005330] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 2.005356] usb usb1: Product: xHCI Host Controller [ 2.005377] usb usb1: Manufacturer: Linux 3.18.0-13978-gd4d7f05 xhci-hcd [ 2.005402] usb usb1: SerialNumber: xhci-hcd.0.auto [ 2.006573] hub 1-0:1.0: USB hub found [ 2.006664] hub 1-0:1.0: 1 port detected [ 2.007398] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller [ 2.007815] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 2 [ 2.008210] usb usb2: New USB device found, idVendor=1d6b, idProduct=0003 [ 2.008240] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 2.008266] usb usb2: Product: xHCI Host Controller [ 2.008287] usb usb2: Manufacturer: Linux 3.18.0-13978-gd4d7f05 xhci-hcd [ 2.008310] usb usb2: SerialNumber: xhci-hcd.0.auto [ 2.009459] hub 2-0:1.0: USB hub found [ 2.009542] hub 2-0:1.0: 1 port detected [ 2.484517] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller [ 2.485039] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 3 [ 2.485405] xhci-hcd xhci-hcd.1.auto: irq 200, io mem 0x06000000 [ 2.485760] usb usb3: New USB device found, idVendor=1d6b, idProduct=0002 [ 2.485789] usb usb3: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 2.485813] usb usb3: Product: xHCI Host Controller [ 2.485836] usb usb3: Manufacturer: Linux 3.18.0-13978-gd4d7f05 xhci-hcd [ 2.485859] usb usb3: SerialNumber: xhci-hcd.1.auto [ 2.487026] hub 3-0:1.0: USB hub found [ 2.487115] hub 3-0:1.0: 1 port detected [ 2.487865] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller [ 2.488320] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 4 [ 2.488725] usb usb4: New USB device found, idVendor=1d6b, idProduct=0003 [ 2.488754] usb usb4: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 2.488779] usb usb4: Product: xHCI Host Controller [ 2.488800] usb usb4: Manufacturer: Linux 3.18.0-13978-gd4d7f05 xhci-hcd [ 2.488823] usb usb4: SerialNumber: xhci-hcd.1.auto [ 2.490013] hub 4-0:1.0: USB hub found [ 2.490097] hub 4-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 2.491701] /mnt/host/source/src/third_party/kernel/v3.18/drivers/rtc/hctosys.c: unable to open rtc device (rtc0) [ 2.499637] ALSA device list: [ 2.499667] No soundcards found. [ 2.499837] Warning: unable to open an initial console. [ 2.499905] device-mapper: init: attempting early device configuration. [ 2.501433] device-mapper: init: adding target '0 1536000 verity payload=PARTUUID=314f0fc9-3119-3c40-92df-a5f135899022/PARTNROFF=1 hashtree=PARTUUID=314f0fc9-3119-3c40-92df-a5f135899022/PARTNROFF=1 hashstart=1536000 alg=sha1 root_hexdigest=25009619ed1c7b8e4eae62d0d4cc7f794507d4d6 salt=8da0ac678592acf6395953f6dca6310b5682844dc5ae70c2e96c88474c273afa' [ 2.501504] device-mapper: verity: Argument 0: 'payload=PARTUUID=314f0fc9-3119-3c40-92df-a5f135899022/PARTNROFF=1' [ 2.501531] device-mapper: verity: Argument 1: 'hashtree=PARTUUID=314f0fc9-3119-3c40-92df-a5f135899022/PARTNROFF=1' [ 2.501557] device-mapper: verity: Argument 2: 'hashstart=1536000' [ 2.501578] device-mapper: verity: Argument 3: 'alg=sha1' [ 2.501596] device-mapper: verity: Argument 4: 'root_hexdigest=25009619ed1c7b8e4eae62d0d4cc7f794507d4d6' [ 2.501621] device-mapper: verity: Argument 5: 'salt=8da0ac678592acf6395953f6dca6310b5682844dc5ae70c2e96c88474c273afa' [ 2.511831] device-mapper: init: dm-0 is ready [ 2.515979] EXT4-fs (dm-0): couldn't mount as ext3 due to feature incompatibilities [ 2.516940] EXT4-fs (dm-0): mounting ext2 file system using the ext4 subsystem [ 2.525103] EXT4-fs (dm-0): mounted filesystem without journal. Opts: (null) [ 2.525200] VFS: Mounted root (ext2 filesystem) readonly on device 254:0. [ 2.526252] devtmpfs: mounted [ 2.529006] Freeing unused kernel memory: 1024K (c0d00000 - c0e00000) [ 2.905087] random: init urandom read with 16 bits of entropy available [ 3.013635] Chromium OS LSM: dev(254,0): read-only [ 3.013666] Chromium OS LSM: module locking engaged. [ 3.013743] Chromium OS LSM: init_module locked obj="/lib/modules/3.18.0-13978-gd4d7f05/kernel/drivers/net/ethernet/qualcomm/sfe/shortcut-fe/shortcut-fe.ko" pid=122 cmdline="modprobe shortcut-fe-cm" [ 3.094749] udevd[130]: starting version 225 [ 3.161299] Unsafe core_pattern used with suid_dumpable=2. Pipe handler or fully qualified core dump path required. [ 3.386771] EXT4-fs (mmcblk0p1): recovery complete [ 3.387553] EXT4-fs (mmcblk0p1): mounted filesystem with ordered data mode. Opts: commit=30 [ 3.399229] EXT4-fs (mmcblk0p8): mounted filesystem with ordered data mode. Opts: (null) [ 4.922370] EXT4-fs (mmcblk0p1): re-mounted. Opts: commit=30,data=ordered [ 5.074728] init: pstore main process (217) terminated with status 1 [ 5.564088] init: cgroups main process (216) terminated with status 2 [ 5.805223] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this. [ 6.223204] init: failsafe-delay main process (361) killed by TERM signal [ 6.288576] init: conntrackd pre-start process (431) terminated with status 1 [ 6.410555] Bluetooth: Core ver 2.21 [ 6.412547] NET: Registered protocol family 31 [ 6.412580] Bluetooth: HCI device and connection manager initialized [ 6.412637] Bluetooth: HCI socket layer initialized [ 6.412672] Bluetooth: L2CAP socket layer initialized [ 6.412795] Bluetooth: SCO socket layer initialized [ 6.844290] init: conntrackd post-stop process (504) terminated with status 1 [ 7.799790] AHB support is still work in progress [ 7.923820] udevd[571]: Process '/sbin/crda' failed with exit code 234. [ 7.976484] ath10k_ahb a000000.wifi: Direct firmware load for ath10k/pre-cal-ahb-a000000.wifi.bin failed with error -2 [ 7.976686] ath10k_ahb a000000.wifi: Direct firmware load for ath10k/cal-ahb-a000000.wifi.bin failed with error -2 [ 7.984732] cfg80211: World regulatory domain updated: [ 7.984770] cfg80211: DFS Master region: unset [ 7.984789] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time) [ 7.984821] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A) [ 7.984846] cfg80211: (2457000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A) [ 7.984871] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A) [ 7.984899] cfg80211: (5170000 KHz - 5250000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (N/A) [ 7.984927] cfg80211: (5250000 KHz - 5330000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (0 s) [ 7.984956] cfg80211: (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s) [ 7.984981] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A) [ 7.985221] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A) [ 8.019488] ath10k_ahb a000000.wifi: qca4019 hw1.0 target 0x01000000 chip_id 0x003b00ff sub 0000:0000 [ 8.019562] ath10k_ahb a000000.wifi: kconfig debug 1 debugfs 1 tracing 1 dfs 0 testmode 1 [ 8.025620] ath10k_ahb a000000.wifi: firmware ver 10.4-3.2.1-00051 api 5 features no-p2p,mfp,peer-flow-ctrl crc32 d31a61d4 [ 8.070066] ath10k_ahb a000000.wifi: Direct firmware load for ath10k/QCA4019/hw1.0/board-2-us.bin failed with error -2 [ 8.072962] ath10k_ahb a000000.wifi: board_file api 2 bmi_id 0:16 crc32 6b621e1b [ 8.074206] ess_edma c080000.edma wan0: renamed from eth0 [ 8.115063] ess_edma c080000.edma lan0: renamed from eth1 [ 8.732808] random: nonblocking pool is initialized [ 9.425935] ath10k_ahb a000000.wifi: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-dt max-sta 512 raw 0 hwcrypto 1 [ 9.433409] ath: EEPROM regdomain: 0x8348 [ 9.433427] ath: EEPROM indicates we should expect a country code [ 9.433444] ath: doing EEPROM country->regdmn map search [ 9.433456] ath: country maps to regdmn code: 0x3a [ 9.433467] ath: Country alpha2 being used: US [ 9.433476] ath: Regpair used: 0x3a [ 9.444857] wifi diag: phy0 init [ 9.471903] cfg80211: Regulatory domain changed to country: US [ 9.471949] cfg80211: DFS Master region: FCC [ 9.471969] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time) [ 9.472002] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 3000 mBm), (N/A) [ 9.472029] cfg80211: (5170000 KHz - 5250000 KHz @ 80000 KHz, 80000 KHz AUTO), (N/A, 3000 mBm), (N/A) [ 9.472055] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 3000 mBm), (N/A) [ 9.472081] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 4000 mBm), (N/A) [ 9.585697] ath10k_ahb a800000.wifi: Direct firmware load for ath10k/pre-cal-ahb-a800000.wifi.bin failed with error -2 [ 9.585828] ath10k_ahb a800000.wifi: Direct firmware load for ath10k/cal-ahb-a800000.wifi.bin failed with error -2 [ 9.585882] ath10k_ahb a800000.wifi: qca4019 hw1.0 target 0x01000000 chip_id 0x003b00ff sub 0000:0000 [ 9.585915] ath10k_ahb a800000.wifi: kconfig debug 1 debugfs 1 tracing 1 dfs 0 testmode 1 [ 9.590593] ath10k_ahb a800000.wifi: firmware ver 10.4-3.2.1-00051 api 5 features no-p2p,mfp,peer-flow-ctrl crc32 d31a61d4 [ 9.631389] ath10k_ahb a800000.wifi: Direct firmware load for ath10k/QCA4019/hw1.0/board-2-us.bin failed with error -2 [ 9.631679] ath10k_ahb a800000.wifi: board_file api 2 bmi_id 0:21 crc32 6b621e1b [ 10.676274] Bluetooth: HCI UART driver ver 2.3 [ 10.676313] Bluetooth: HCI UART protocol H4 registered [ 10.676332] Bluetooth: HCI UART protocol LL registered [ 10.676438] Bluetooth: HCI UART protocol ATH3K registered [ 10.977228] ath10k_ahb a800000.wifi: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-dt max-sta 512 raw 0 hwcrypto 1 [ 10.986623] ath: EEPROM regdomain: 0x8348 [ 10.986646] ath: EEPROM indicates we should expect a country code [ 10.986663] ath: doing EEPROM country->regdmn map search [ 10.986675] ath: country maps to regdmn code: 0x3a [ 10.986686] ath: Country alpha2 being used: US [ 10.986695] ath: Regpair used: 0x3a [ 10.998839] wifi diag: phy1 init [ 11.010378] ath10k_ahb a000000.wifi wlan-2400mhz: renamed from wlan0 [ 11.047442] ath10k_ahb a800000.wifi wlan-5000mhz: renamed from wlan1 [ 11.087487] udevd[582]: Process '/usr/sbin/iw dev wlan0 set power_save on' failed with exit code 237. [ 11.138108] udevd[573]: Process '/usr/sbin/iw dev wlan1 set power_save on' failed with exit code 237. [ 12.117371] init: uinput main process (755) terminated with status 1 [ 12.155276] device lan0 entered promiscuous mode [ 12.217927] IPv6: ADDRCONF(NETDEV_UP): lan0: link is not ready [ 12.630590] pktgen: Packet Generator for packet performance testing. Version: 2.74 [ 13.708660] init: prioritized-device pre-start process (941) terminated with status 2 [ 14.443347] IPv6: ADDRCONF(NETDEV_UP): wan0: link is not ready [ 15.988289] IPv6: ADDRCONF(NETDEV_UP): wlan-2400mhz: link is not ready [ 16.012465] device wlan-2400mhz entered promiscuous mode [ 16.921918] [phy0] FWLOG: [1400] WAL_DBGID_TX_AC_BUFFER_SET ( 0x3, 0x1e, 0x94c, 0x94c, 0x0 ) [ 16.922021] [phy0] FWLOG: [1400] WAL_DBGID_TX_AC_BUFFER_SET ( 0x12, 0x1e, 0x94c, 0x94c, 0x0 ) [ 16.922101] [phy0] FWLOG: [1400] WAL_DBGID_TX_AC_BUFFER_SET ( 0x45, 0x1e, 0x94c, 0x94c, 0x0 ) [ 16.922178] [phy0] FWLOG: [1400] WAL_DBGID_TX_AC_BUFFER_SET ( 0x67, 0x1e, 0x94c, 0x94c, 0x0 ) [ 16.922256] [phy0] FWLOG: [1435] RATECTRL_DBGID_NSS_CHANGE ( 0x2 ) [ 17.509288] IPv6: ADDRCONF(NETDEV_UP): wlan-5000mhz: link is not ready [ 17.515196] device wlan-5000mhz entered promiscuous mode [ 17.876278] init: ap-controller main process (741) terminated with status 254 [ 17.876470] init: ap-controller main process ended, respawning [ 18.426090] [phy1] FWLOG: [1386] WAL_DBGID_TX_AC_BUFFER_SET ( 0x3, 0x1e, 0x94c, 0x94c, 0x0 ) [ 18.426193] [phy1] FWLOG: [1386] WAL_DBGID_TX_AC_BUFFER_SET ( 0x12, 0x1e, 0x94c, 0x94c, 0x0 ) [ 18.426273] [phy1] FWLOG: [1386] WAL_DBGID_TX_AC_BUFFER_SET ( 0x45, 0x1e, 0x94c, 0x94c, 0x0 ) [ 18.426353] [phy1] FWLOG: [1386] WAL_DBGID_TX_AC_BUFFER_SET ( 0x67, 0x1e, 0x94c, 0x94c, 0x0 ) [ 18.426431] [phy1] FWLOG: [1426] RATECTRL_DBGID_NSS_CHANGE ( 0x2 ) [ 23.275494] init: thermald main process (920) killed by TERM signal [ 23.565417] 8021q: 802.1Q VLAN Support v1.8 [ 23.566848] ath10k_ahb a000000.wifi: rx_channel set to freq 2462 [ 23.855226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan-2400mhz: link becomes ready [ 23.855502] br-lan: port 2(wlan-2400mhz) entered forwarding state [ 23.855613] br-lan: port 2(wlan-2400mhz) entered forwarding state [ 23.918808] [phy0] FWLOG: [9204] vap-0 VDEV_MGR_VDEV_START ( 0x99e, 0x2, 0x0, 0x0 ) [ 23.918900] [phy0] FWLOG: [9421] VDEV_MGR_HP_START_TIME ( 0x0, 0x99e, 0x785001 ) [ 23.918960] [phy0] FWLOG: [9421] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x1 ) [ 23.918995] [phy0] FWLOG: [9421] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 ) [ 23.919028] [phy0] FWLOG: [9421] VDEV_MGR_AP_TBTT_CONFIG ( 0x0, 0x99e, 0x0, 0x0 ) [ 23.919095] [phy0] FWLOG: [9495] WAL_DBGID_SECURITY_ENCR_EN ( ) [ 23.919123] [phy0] FWLOG: [9495] WAL_DBGID_SECURITY_MCAST_KEY_SET ( 0x1 ) [ 24.024214] ath10k_ahb a800000.wifi: rx_channel set to freq 5180 [ 25.520421] [phy1] FWLOG: [8105] vap-0 VDEV_MGR_VDEV_START ( 0x143c, 0x2, 0x0, 0x0 ) [ 25.532014] IPv6: ADDRCONF(NETDEV_CHANGE): wlan-5000mhz: link becomes ready [ 25.532306] br-lan: port 3(wlan-5000mhz) entered forwarding state [ 25.532420] br-lan: port 3(wlan-5000mhz) entered forwarding state [ 26.519903] [phy1] FWLOG: [9639] VDEV_MGR_HP_START_TIME ( 0x0, 0x143c, 0x7b7001 ) [ 26.520001] [phy1] FWLOG: [9639] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x1 ) [ 26.520038] [phy1] FWLOG: [9639] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 ) [ 26.520092] [phy1] FWLOG: [9639] VDEV_MGR_AP_TBTT_CONFIG ( 0x0, 0x143c, 0x0, 0x0 ) [ 26.520179] [phy1] FWLOG: [9650] WAL_DBGID_SECURITY_ENCR_EN ( ) [ 26.520207] [phy1] FWLOG: [9650] WAL_DBGID_SECURITY_MCAST_KEY_SET ( 0x1 ) [ 26.863570] br-lan: port 2(wlan-2400mhz) entered forwarding state [ 28.533569] br-lan: port 3(wlan-5000mhz) entered forwarding state root@localhost $ crossystem arch = arm # Platform architecture backup_nvram_request = 1 # Backup the nvram somewhere at the next boot. Cleared on success. battery_cutoff_request = 0 # Cut off battery and shutdown on next boot. block_devmode = 0 # Block all use of developer mode clear_tpm_owner_request = 0 # Clear TPM owner on next boot clear_tpm_owner_done = 1 # Clear TPM owner done cros_debug = 1 # OS should allow debug features dbg_reset = 0 # Debug reset mode request (writable) debug_build = 0 # OS image built for debug features dev_boot_usb = 1 # Enable developer mode boot from USB/SD (writable) dev_boot_legacy = 0 # Enable developer mode boot Legacy OSes (writable) dev_boot_signed_only = 0 # Enable developer mode boot only from official kernels (writable) dev_default_boot = disk # default boot from legacy or usb (writable) devsw_boot = 1 # Developer switch position at boot devsw_cur = 1 # Developer switch current position disable_dev_request = 0 # Disable virtual dev-mode on next boot Unable to open FDT property active-ec-firmware ecfw_act = (error) # Active EC firmware fmap_base = 0x00300000 # Main firmware flashmap physical address fwb_tries = 0 # Try firmware B count (writable) fw_vboot2 = 1 # 1 if firmware was selected by vboot2 or 0 otherwise fwid = Google_Gale.8281.38.0 # Active firmware ID fwupdate_tries = 0 # Times to try OS firmware update (writable, inside kern_nv) fw_tried = B # Firmware tried this boot (vboot2) fw_try_count = 0 # Number of times to try fw_try_next (writable) fw_try_next = B # Firmware to try next (vboot2,writable) fw_result = success # Firmware result this boot (vboot2,writable) fw_prev_tried = B # Firmware tried on previous boot (vboot2) fw_prev_result = success # Firmware result of previous boot (vboot2) hwid = GALE C2I-A2I-A3C-A4I-E5K # Hardware ID inside_vm = 0 # Running in a VM? kern_nv = 0x00010000 # Non-volatile field for kernel use kernkey_vfy = sig # Type of verification done on kernel key block loc_idx = 0 # Localization index for firmware screens (writable) mainfw_act = B # Active main firmware mainfw_type = developer # Active main firmware type nvram_cleared = 1 # Have NV settings been lost? Write 0 to clear oprom_needed = 0 # Should we load the VGA Option ROM at boot? phase_enforcement = (error) # Board should have full security settings applied recovery_reason = 0 # Recovery mode reason for current boot recovery_request = 0 # Recovery mode request (writable) recovery_subcode = 0 # Recovery reason subcode (writable) recoverysw_boot = 0 # Recovery switch position at boot recoverysw_cur = 0 # Recovery switch current position recoverysw_ec_boot = 0 # Recovery switch position at EC boot ro_fwid = Google_Gale.8281.38.0 # Read-only firmware ID sw_wpsw_boot = 0 # Firmware write protect software setting enabled at boot (Baytrail only) tpm_attack = 0 # TPM was interrupted since this flag was cleared tpm_fwver = 0x00010001 # Firmware version stored in TPM tpm_kernver = 0x00010001 # Kernel version stored in TPM tpm_rebooted = 0 # TPM requesting repeated reboot (vboot2) try_ro_sync = 0 # try read only software sync tried_fwb = 0 # Tried firmware B before A this boot vdat_flags = 0x0000c416 # Flags from VbSharedData vdat_timers = LFS=0,0 LF=0,0 LK=2,32130292 # Timer values from VbSharedData wipeout_request = 0 # Firmware requested factory reset (wipeout) wpsw_boot = 0 # Firmware write protect hardware switch position at boot wpsw_cur = 0 # Firmware write protect hardware switch current position
OpenWrt bootlog
Note: this used local work-in-progress, which was eventually committed to openwrt.git:
coreboot-60d1b1c Mon Jan 9 00:04:49 UTC 2017 bootblock starting... Exception handlers installed. Translation table is @ 0a0f0000 Mapping address range [0x00000000:0x00000000) as uncached Creating new subtable @0a0f4000 for [0x0a000000:0x0a100000) Mapping address range [0x0a0c0000:0x0a100000) as writeback Creating new subtable @0a0f4400 for [0x0a800000:0x0a900000) Mapping address range [0x0a8c0000:0x0a900000) as writeback Creating new subtable @0a0f4800 for [0x08600000:0x08700000) Mapping address range [0x08600000:0x08608000) as writeback Setting address range [0x80000000:0xa0000000) as unmapped Setting address range [0x87300000:0x87500000) as unmapped Setting address range [0xa0000000:0x00000000) as unmapped Creating new subtable @0a0f4c00 for [0x00000000:0x00100000) Setting address range [0x00000000:0x00000400) as unmapped No uber-sbl parameter detected SF: Detected W25Q64 with sector size 0x1000, total 0x800000 VBOOT: Loading verstage. CBFS @ 20000 size 2e0000 CBFS: 'Master Header Locator' located CBFS at [20000:300000) CBFS: Locating 'fallback/verstage' CBFS: Found @ offset 1cf40 size 987c coreboot-60d1b1c Mon Jan 9 00:04:49 UTC 2017 verstage starting... Exception handlers installed. SF: Detected W25Q64 with sector size 0x1000, total 0x800000 FMAP: Found "FMAP" version 1.0 at 300000. FMAP: base = 0 size = 800000 #areas = 24 FMAP: area RW_NVRAM found @ 6f0000 (65536 bytes) tis_init: ValidSts bit set(1) in TPM_ACCESS register after 8 ms 1.2 TPM (chip type slb9645tt device-id 0x1A) TPM: Startup TPM: command 0x99 returned 0x0 TPM: Asserting physical presence TPM: command 0x4000000a returned 0x0 TPM: command 0x65 returned 0x0 TPM: flags disable=0, deactivated=0, nvlocked=1 setup_tpm():320: TPM: SetupTPM() succeeded TPM: tlcl_read(0x1007, 10) TPM: command 0xcf returned 0x0 Reading tristate GPIOs: 0 Z 0 = 10 (binary_first base3 number system) Board ID 10 WW_RING: initialized 1 out of 1 Phase 1 FMAP: area GBB found @ 301000 (913152 bytes) VB2:vb2_check_recovery() Recovery reason from previous boot: 0x0 / 0x0 Phase 2 Phase 3 FMAP: area GBB found @ 301000 (913152 bytes) FMAP: area VBLOCK_B found @ 580000 (8192 bytes) FMAP: area VBLOCK_B found @ 580000 (8192 bytes) VB2:vb2_verify_keyblock() Checking key block signature... FMAP: area VBLOCK_B found @ 580000 (8192 bytes) FMAP: area VBLOCK_B found @ 580000 (8192 bytes) VB2:vb2_verify_fw_preamble() Verifying preamble. Phase 4 FMAP: area FW_MAIN_B found @ 582000 (1367808 bytes) VB2:vb2api_init_hash() HW crypto for hash_alg 2 not supported, using SW TPM: command 0x14 returned 0x0 TPM: command 0x14 returned 0x0 TPM: Set global lock TPM: tlcl_write(0x0, 0) TPM: command 0xcd returned 0x0 Slot B is selected CBFS: 'VBOOT' located CBFS at [582000:5af240) CBFS: Locating 'fallback/romstage' CBFS: Found @ offset 0 size 469b coreboot-60d1b1c Mon Jan 9 00:04:49 UTC 2017 romstage starting... SF: Detected W25Q64 with sector size 0x1000, total 0x800000 CBFS: 'VBOOT' located CBFS at [582000:5af240) CBFS: Locating 'cdt.mbn' CBFS: Found @ offset bac0 size 1ac CBFS: 'VBOOT' located CBFS at [582000:5af240) CBFS: Locating 'ddr.mbn' CBFS: Found @ offset bcc0 size 7d38 DDR version private build initialized SDI Entry: 0x860038d Mapping address range [0x80000000:0xa0000000) as writeback Mapping address range [0x87300000:0x87500000) as uncached CBMEM: IMD: root @ 8727f000 254 entries. IMD: root @ 8727ec00 62 entries. creating vboot_handoff structure Reading tristate GPIOs: 0 Z 0 = 10 (binary_first base3 number system) Board ID 10 Copying FW preamble CBFS: 'VBOOT' located CBFS at [582000:5af240) CBFS: Locating 'fallback/ramstage' CBFS: Found @ offset 4700 size 6f3b coreboot-60d1b1c Mon Jan 9 00:04:49 UTC 2017 ramstage starting... SF: Detected W25Q64 with sector size 0x1000, total 0x800000 FMAP: Found "FMAP" version 1.0 at 300000. FMAP: base = 0 size = 800000 #areas = 24 FMAP: area RO_VPD found @ 3e0000 (131072 bytes) FMAP: area RW_VPD found @ 6e0000 (32768 bytes) FMAP: area RO_VPD found @ 3e0000 (131072 bytes) FMAP: area RW_VPD found @ 6e0000 (32768 bytes) Exception handlers installed. BS: BS_PRE_DEVICE times (us): entry 9 run 14 exit 9 BS: BS_DEV_INIT_CHIPS times (us): entry 10 run 30 exit 11 Enumerating buses... Show all devs... Before device enumeration. Root Device: enabled 1 CPU_CLUSTER: 0: enabled 1 Compare with tree... Root Device: enabled 1 CPU_CLUSTER: 0: enabled 1 Root Device scanning... root_dev_scan_bus for Root Device CPU_CLUSTER: 0 enabled root_dev_scan_bus for Root Device done scan_bus: scanning of bus Root Device took 12393 usecs done BS: BS_DEV_ENUMERATE times (us): entry 9 run 37272 exit 9 Allocating resources... Reading resources... Root Device read_resources bus 0 link: 0 Root Device read_resources bus 0 link: 0 done Done reading resources. Show resources in subtree (Root Device)...After reading. Root Device child on link 0 CPU_CLUSTER: 0 CPU_CLUSTER: 0 CPU_CLUSTER: 0 resource base 80000000 size 7500000 align 0 gran 0 limit 0 flags e0004200 index 0 CPU_CLUSTER: 0 resource base 87500000 size b00000 align 0 gran 0 limit 0 flags f0004200 index 1 CPU_CLUSTER: 0 resource base 88000000 size 18000000 align 0 gran 0 limit 0 flags e0004200 index 2 Setting resources... Root Device assign_resources, bus 0 link: 0 CPU_CLUSTER: 0 missing set_resources Root Device assign_resources, bus 0 link: 0 Done setting resources. Show resources in subtree (Root Device)...After assigning values. Root Device child on link 0 CPU_CLUSTER: 0 CPU_CLUSTER: 0 CPU_CLUSTER: 0 resource base 80000000 size 7500000 align 0 gran 0 limit 0 flags e0004200 index 0 CPU_CLUSTER: 0 resource base 87500000 size b00000 align 0 gran 0 limit 0 flags f0004200 index 1 CPU_CLUSTER: 0 resource base 88000000 size 18000000 align 0 gran 0 limit 0 flags e0004200 index 2 Done allocating resources. BS: BS_DEV_RESOURCES times (us): entry 9 run 120261 exit 10 Enabling resources... done. BS: BS_DEV_ENABLE times (us): entry 9 run 2985 exit 9 Initializing devices... Root Device init ... CBFS: 'VBOOT' located CBFS at [582000:5af240) CBFS: Locating 'tzbsp_no_xpu.mbn' CBFS: Found @ offset 13a40 size 9428 Starting TZBSP Translation table is @ 0a0f0000 Mapping address range [0x00000000:0x00000000) as uncached Creating new subtable @0a0f4000 for [0x0a000000:0x0a100000) Mapping address range [0x0a0c0000:0x0a100000) as writeback Creating new subtable @0a0f4400 for [0x0a800000:0x0a900000) Mapping address range [0x0a8c0000:0x0a900000) as writeback Creating new subtable @0a0f4800 for [0x08600000:0x08700000) Mapping address range [0x08600000:0x08608000) as writeback Mapping address range [0x80000000:0xa0000000) as writeback Mapping address range [0x87300000:0x87500000) as uncached Setting address range [0xa0000000:0x00000000) as unmapped Creating new subtable @0a0f4c00 for [0x00000000:0x00100000) Setting address range [0x00000000:0x00000400) as unmapped Setting up USB HOST1 controller. Version = 5533270a software reset done USB Host mode reg = 101004 cbmem_add_vpd_calibration_data: added wifi_base64_calibration0 to CBMEM cbmem_add_vpd_calibration_data: added wifi_base64_calibration1 to CBMEM Root Device init finished in 532340 usecs CPU_CLUSTER: 0 init ... CPU: QCA 40xx CPU_CLUSTER: 0 init finished in 3788 usecs Devices initialized Show all devs... After init. Root Device: enabled 1 CPU_CLUSTER: 0: enabled 1 BS: BS_DEV_INIT times (us): entry 9 run 556493 exit 3 Finalize devices... Devices finalized BS: BS_POST_DEVICE times (us): entry 2 run 3787 exit 2 BS: BS_OS_RESUME_CHECK times (us): entry 1 run 6 exit 2 Writing coreboot table at 0x8724c000 rom_table_end = 0x8724c000 ... aligned to 0x87250000 0. 0000000080000000-000000008724bfff: RAM 1. 000000008724c000-000000008727ffff: CONFIGURATION TABLES 2. 0000000087280000-00000000874fffff: RAM 3. 0000000087500000-0000000087ffffff: RESERVED 4. 0000000088000000-000000009fffffff: RAM Reading tristate GPIOs: 0 Z 0 = 10 (binary_first base3 number system) Board ID 10 Passing 5 GPIOs to payload: NAME | PORT | POLARITY | VALUE developer | 0x00000029 | low | low recovery | 0x00000039 | low | low write protect | 0x00000035 | low | low power | undefined | low | low lid | undefined | low | high CBFS: 'VBOOT' located CBFS at [582000:5af240) Wrote coreboot table at: 8724c000, 0x320 bytes, checksum ba35 coreboot table: 824 bytes. IMD ROOT 0. 8727f000 00001000 IMD SMALL 1. 8727e000 00001000 CONSOLE 2. 8725e000 00020000 TIME STAMP 3. 8725d000 00000400 VBOOT 4. 8725c000 00000c0c VPD 5. 87254000 00007fcc WIFI CLBR 6. 8724e000 00005e94 COREBOOT 7. 8724c000 00002000 IMD small region: IMD ROOT 0. 8727ec00 00000400 VBOOT SEL 1. 8727ebe0 00000008 BS: BS_WRITE_TABLES times (us): entry 2 run 120593 exit 2 CBFS: 'VBOOT' located CBFS at [582000:5af240) CBFS: Locating 'fallback/payload' CBFS: Found @ offset 1cec0 size 10341 Loading segment from rom address 0x87289428 code (compression=1) New segment dstaddr 0x88104040 memsize 0x1249b70 srcaddr 0x87289460 filesize 0x10309 Loading segment from rom address 0x87289444 Entry Point 0x88104041 Bounce Buffer at 9ffcf000, 197488 bytes Loading Segment: addr: 0x0000000088104040 memsz: 0x0000000001249b70 filesz: 0x0000000000010309 lb: [0x00000000872e0000, 0x00000000872f81b8) Post relocation: addr: 0x0000000088104040 memsz: 0x0000000001249b70 filesz: 0x0000000000010309 using LZMA [ 0x88104040, 88121470, 0x8934dbb0) <- 87289460 Clearing Segment: addr: 0x0000000088121470 memsz: 0x000000000122c740 dest 88104040, end 8934dbb0, bouncebuffer 9ffcf000 Loaded segments BS: BS_PAYLOAD_LOAD times (us): entry 1 run 175598 exit 3 Jumping to boot code at 88104041(8724c000) CPU0: stack: 0a8fc000 - 0a900000, lowest used address 0a8ff5f0, stack used: 2576 bytes Starting depthcharge on gale... WARNING: can't convert coreboot GPIOs, 'lid' won't be resampled at runtime! WARNING: can't convert coreboot GPIOs, 'power' won't be resampled at runtime! clock_config_mmc : 1 WW_RING: initialized controller found at 0x32 WW_RING: initialized 1 out of 1 The GBB signature is at 0x88004020 and is: 24 47 42 42 Wipe memory regions: [0x00000080000000, 0x00000080208000) [0x00000080208200, 0x0000008724c000) [0x00000087280000, 0x00000087500000) [0x0000008934dbb0, 0x0000009ff00000) Initializing XHCI USB controller at 0x8a00000. Calling VbSelectAndLoadKernel(). TPM: TlclRead(0x1008, 13) 1.2 TPM (chip type slb9645tt device-id 0x1A) TPM: command 0xcf returned 0x0 TPM: command 0x65 returned 0x0 TPM: RollbackKernelRead 10001 Entering VbBootDeveloper() VbAudioOpen() - ticks_per_msec is 1000 sound_stop: No sound ops set. VbAudioOpen() - VbExBeep() is limited VbGetDevMusicNotes: use_short is 0, hdr is 0x0, maxsize is 0 VbGetDevMusicNotes: using 5 default notes VbAudioOpen() - note count 5 sound_start: No sound ops set. sound_start: No sound ops set. VbBootDeveloper() - trying fixed disk sound_stop: No sound ops set. VbTryLoadKernel() start, get_info_flags=0x2 MMC version = 10000042 clock_config_mmc : 1 clock_config_mmc : 2 Man 000015 Snr 2445147822 Product 4FPD3R Revision 0.2 VbTryLoadKernel() found 1 disks VbTryLoadKernel() trying disk 0 GptNextKernelEntry looking at new prio partition 2 GptNextKernelEntry s1 t0 p1 GptNextKernelEntry likes partition 2 Found kernel entry at 33327 size 33201 Checking key block signature... - sig_size=512, expecting 512 for algorithm 8 In RSAVerify(): Padding check failed! In RSAVerify(): Hash check failed! Invalid key block signature. Verifying key block signature failed. Checking key block hash only... - sig_size=256, expecting 256 for algorithm 4 Kernel preamble is good. Key block valid: 0 Combined version: 65537 - sig_size=256, expecting 256 for algorithm 4 Partition is good. In recovery mode or dev-signed kernel Good_partition >= 0 VbTryLoadKernel() LoadKernel() = 0 TPM: Lock physical presence TPM: command 0x4000000a returned 0x0 VbSelectAndLoadKernel() returning 0 Boot policy: Match for type 0 with cmdline 1 Modified kernel command line: cros_secure root=PARTUUID=5452574f-2211-4433-5566-778899aabb02/PARTNROFF=1 rootdelay=7 earlycon Loading FIT. Image fdt@1 has 17814 bytes. Image kernel@1 has 2817528 bytes. Compat preference: google,gale-v2 Config config@1 (default), kernel kernel@1, fdt fdt@1, compat google,wifi google,gale-v2 (match) qcom,ipq4019 Choosing best match config@1. Shutting down all USB controllers. Exiting depthcharge with code 4 at timestamp: 41269236 [ 0.000000] Booting Linux on physical CPU 0x0 [ 0.000000] Linux version 5.4.98 (norris@bDebian) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r15520+17-54bfebdca00f)) #0 SMP Tue Feb 16 06:44:51 2021 [ 0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=10c5387d [ 0.000000] CPU: div instructions available: patching division code [ 0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache [ 0.000000] OF: fdt: Machine model: Google WiFi (Gale) [ 0.000000] earlycon: msm_serial_dm0 at MMIO 0x078af000 (options '') [ 0.000000] printk: bootconsole [msm_serial_dm0] enabled [ 0.000000] Memory policy: Data cache writealloc [ 0.000000] OF: reserved mem: OVERLAP DETECTED! [ 0.000000] rsvd@87000000 (0x87000000--0x88000000) overlaps with smem@87e00000 (0x87e00000--0x87e80000) [ 0.000000] percpu: Embedded 15 pages/cpu s30028 r8192 d23220 u61440 [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 125824 [ 0.000000] Kernel command line: cros_secure root=PARTUUID=5452574f-2211-4433-5566-778899aabb02/PARTNROFF=1 rootdelay=7 earlycon [ 0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes, linear) [ 0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes, linear) [ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off [ 0.000000] Memory: 491992K/507904K available (5773K kernel code, 201K rwdata, 1556K rodata, 1024K init, 236K bss, 15912K reserved, 0K cma-reserved, 0K highmem) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 [ 0.000000] rcu: Hierarchical RCU implementation. [ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16 [ 0.000000] random: get_random_bytes called from start_kernel+0x2f0/0x498 with crng_init=0 [ 0.000000] arch_timer: cp15 timer(s) running at 48.00MHz (virt). [ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0xb11fd3bfb, max_idle_ns: 440795203732 ns [ 0.000007] sched_clock: 56 bits at 48MHz, resolution 20ns, wraps every 4398046511096ns [ 0.010586] Switching to timer-based delay loop, resolution 20ns [ 0.018816] Calibrating delay loop (skipped), value calculated using timer frequency.. 96.00 BogoMIPS (lpj=480000) [ 0.024822] pid_max: default: 32768 minimum: 301 [ 0.035182] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.039754] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.047802] CPU: Testing write buffer coherency: ok [ 0.055092] qcom_scm: convention: smc legacy [ 0.060057] Setting up static identity map for 0x80300000 - 0x80300060 [ 0.064007] rcu: Hierarchical SRCU implementation. [ 0.070690] smp: Bringing up secondary CPUs ... [ 0.078193] smp: Brought up 1 node, 4 CPUs [ 0.079416] SMP: Total of 4 processors activated (384.00 BogoMIPS). [ 0.083634] CPU: All CPU(s) started in SVC mode. [ 0.094688] VFP support v0.3: implementor 41 architecture 2 part 30 variant 7 rev 5 [ 0.094876] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.102004] futex hash table entries: 1024 (order: 4, 65536 bytes, linear) [ 0.112303] pinctrl core: initialized pinctrl subsystem [ 0.119769] NET: Registered protocol family 16 [ 0.124226] DMA: preallocated 256 KiB pool for atomic coherent allocations [ 0.129580] cpuidle: using governor ladder [ 0.135305] cpuidle: using governor menu [ 0.140250] printk: console [pstore0] enabled [ 0.143390] pstore: Registered ramoops as persistent store backend [ 0.147680] ramoops: using 0x100000@0x9ff00000, ecc: 0 [ 0.174942] cryptd: max_cpu_qlen set to 1000 [ 0.178429] SCSI subsystem initialized [ 0.178694] usbcore: registered new interface driver usbfs [ 0.181899] usbcore: registered new interface driver hub [ 0.187369] usbcore: registered new device driver usb [ 0.192870] pps_core: LinuxPPS API ver. 1 registered [ 0.197729] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it> [ 0.202786] PTP clock support registered [ 0.212144] qcom_scm: convention: smc legacy [ 0.216319] workqueue: max_active 576 requested for napi_workq is out of range, clamping between 1 and 512 [ 0.221114] clocksource: Switched to clocksource arch_sys_counter [ 0.230431] thermal_sys: Registered thermal governor 'step_wise' [ 0.230732] NET: Registered protocol family 2 [ 0.242375] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 6144 bytes, linear) [ 0.246030] TCP established hash table entries: 4096 (order: 2, 16384 bytes, linear) [ 0.254247] TCP bind hash table entries: 4096 (order: 3, 32768 bytes, linear) [ 0.262233] TCP: Hash tables configured (established 4096 bind 4096) [ 0.269295] UDP hash table entries: 256 (order: 1, 8192 bytes, linear) [ 0.275652] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear) [ 0.282230] NET: Registered protocol family 1 [ 0.288812] PCI: CLS 0 bytes, default 64 [ 0.295348] workingset: timestamp_bits=14 max_order=17 bucket_order=3 [ 0.302900] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.303635] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.364098] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled [ 0.364723] msm_serial 78af000.serial: msm_serial: detected port #0 [ 0.369553] msm_serial 78af000.serial: uartclk = 1843200 [ 0.375592] 78af000.serial: ttyMSM0 at MMIO 0x78af000 (irq = 29, base_baud = 115200ù[ 0.389547] printk: console [ttyMSM0] enabled [ 0.389547] printk: console [ttyMSM0] enabled [ 0.392897] printk: bootconsole [msm_serial_dm0] disabled [ 0.392897] printk: bootconsole [msm_serial_dm0] disabled [ 0.402928] msm_serial 78b0000.serial: msm_serial: detected port #1 [ 0.408014] msm_serial 78b0000.serial: uartclk = 48000000 [ 0.414126] 78b0000.serial: ttyMSM1 at MMIO 0x78b0000 (irq = 30, base_baud = 3000000) is a MSM [ 0.419844] msm_serial: driver initialized [ 0.433071] loop: module loaded [ 0.433455] lkdtm: No crash points registered, enable through debugfs [ 0.436311] spi_qup 78b5000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64 [ 0.448592] random: fast init done [ 0.454108] spi-nor spi0.0: s25fl064k (8192 Kbytes) [ 0.455513] spi_qup 78b6000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64 [ 0.459203] libphy: ipq4019_mdio: probed [ 0.490147] ESS reset ok! [ 0.514387] ESS reset ok! [ 0.934327] libphy: Fixed MDIO Bus: probed [ 1.145063] dwc3-qcom 8af8800.usb3: IRQ hs_phy_irq not found [ 1.145106] dwc3-qcom 8af8800.usb3: IRQ dp_hs_phy_irq not found [ 1.149795] dwc3-qcom 8af8800.usb3: IRQ dm_hs_phy_irq not found [ 1.155493] dwc3-qcom 8af8800.usb3: IRQ ss_phy_irq not found [ 1.161829] dwc3 8a00000.dwc3: Failed to get clk 'ref': -2 [ 1.282605] dwc3-qcom 60f8800.usb2: IRQ hs_phy_irq not found [ 1.282643] dwc3-qcom 60f8800.usb2: IRQ dp_hs_phy_irq not found [ 1.287333] dwc3-qcom 60f8800.usb2: IRQ dm_hs_phy_irq not found [ 1.293015] dwc3-qcom 60f8800.usb2: IRQ ss_phy_irq not found [ 1.299313] dwc3 6000000.dwc3: Failed to get clk 'ref': -2 [ 1.391946] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller [ 1.392012] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 1 [ 1.396561] xhci-hcd xhci-hcd.0.auto: hcc params 0x0228f665 hci version 0x100 quirks 0x0000000002010010 [ 1.404011] xhci-hcd xhci-hcd.0.auto: irq 98, io mem 0x08a00000 [ 1.414147] hub 1-0:1.0: USB hub found [ 1.419202] hub 1-0:1.0: 1 port detected [ 1.423334] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller [ 1.427076] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 2 [ 1.432394] xhci-hcd xhci-hcd.0.auto: Host supports USB 3.0 SuperSpeed [ 1.440004] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM. [ 1.447070] hub 2-0:1.0: USB hub found [ 1.454817] hub 2-0:1.0: 1 port detected [ 1.458779] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller [ 1.462442] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 3 [ 1.467897] xhci-hcd xhci-hcd.1.auto: hcc params 0x0220f665 hci version 0x100 quirks 0x0000000002010010 [ 1.475331] xhci-hcd xhci-hcd.1.auto: irq 99, io mem 0x06000000 [ 1.485427] hub 3-0:1.0: USB hub found [ 1.490555] hub 3-0:1.0: 1 port detected [ 1.494800] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller [ 1.498431] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 4 [ 1.503753] xhci-hcd xhci-hcd.1.auto: Host supports USB 3.0 SuperSpeed [ 1.511468] usb usb4: We don't know the algorithms for LPM for this host, disabling LPM. [ 1.518579] hub 4-0:1.0: USB hub found [ 1.526177] hub 4-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1.530008] usbcore: registered new interface driver usb-storage [ 1.537076] i2c /dev entries driver [ 1.543211] i2c_qup 78b7000.i2c: using default clock-frequency 100000 [ 1.546899] i2c_qup 78b8000.i2c: using default clock-frequency 100000 [ 1.555320] sdhci: Secure Digital Host Controller Interface driver [ 1.559175] sdhci: Copyright(c) Pierre Ossman [ 1.565310] sdhci-pltfm: SDHCI platform and OF driver helper [ 1.602570] mmc0: SDHCI controller on 7824900.sdhci [7824900.sdhci] using ADMA 64-bit [ 1.678455] mmc0: new HS200 MMC card at address 0001 [ 1.680598] mmcblk0: mmc0:0001 4FPD3R 3.64 GiB [ 1.683746] mmcblk0boot0: mmc0:0001 4FPD3R partition 1 4.00 MiB [ 1.687755] mmcblk0boot1: mmc0:0001 4FPD3R partition 2 4.00 MiB [ 1.693091] mmcblk0rpmb: mmc0:0001 4FPD3R partition 3 512 KiB, chardev (247:0) [ 1.702233] Alternate GPT is invalid, using primary GPT. [ 1.705929] mmcblk0: p1 p2 p3 p128 [ 1.711411] lp5523x 1-0032: lp5523 Programmable led chip found [ 1.722105] NET: Registered protocol family 10 [ 1.723880] Segment Routing with IPv6 [ 1.725570] NET: Registered protocol family 17 [ 1.729240] 8021q: 802.1Q VLAN Support v1.8 [ 1.733720] Registering SWP/SWPB emulation handler [ 1.742429] pstore: Using crash dump compression: deflate [ 1.75079ú[ 1.751981] Waiting 7 sec before mounting root device... [ 8.879828] VFS: Mounted root (squashfs filesystem) readonly on device 179:3. [ 8.884684] Freeing unused kernel memory: 1024K [ 8.911938] Run /sbin/init as init process [ 9.263540] init: Console is alive [ 9.263777] init: - watchdog - [ 10.006316] kmodloader: loading kernel modules from /etc/modules-boot.d/* [ 10.102483] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 10.103380] ehci-fsl: Freescale EHCI Host controller driver [ 10.108788] ehci-platform: EHCI generic platform driver [ 10.119852] kmodloader: done loading kernel modules from /etc/modules-boot.d/* [ 10.126586] init: - preinit - [ 10.784919] random: jshn: uninitialized urandom read (4 bytes read) [ 10.825253] random: jshn: uninitialized urandom read (4 bytes read) [ 10.856568] random: jshn: uninitialized urandom read (4 bytes read) [ 11.093918] ess_edma c080000.edma eth1: Link is Down Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 15.427467] mount_root: loading kmods from internal overlay [ 15.442283] kmodloader: loading kernel modules from //etc/modules-boot.d/* [ 15.443453] kmodloader: done loading kernel modules from //etc/modules-boot.d/* [ 15.891739] block: attempting to load /etc/config/fstab [ 15.892007] block: unable to load configuration (fstab: Entry not found) [ 15.895862] block: no usable configuration [ 15.950160] urandom_read: 4 callbacks suppressed [ 15.950168] random: procd: uninitialized urandom read (4 bytes read) [ 16.091247] F2FS-fs (loop0): Mounted with checkpoint version = 428fa17a [ 16.303848] block: attempting to load /etc/config/fstab [ 16.304037] block: unable to load configuration (fstab: Entry not found) [ 16.308062] block: no usable configuration [ 16.316355] mount_root: switching to f2fs overlay [ 16.381949] urandom-seed: Seeding with /etc/urandom.seed [ 16.448730] procd: - early - [ 16.448852] procd: - watchdog - [ 16.994332] procd: - watchdog - [ 17.091257] procd: - ubus - [ 17.181049] random: ubusd: uninitialized urandom read (4 bytes read) [ 17.182583] random: ubusd: uninitialized urandom read (4 bytes read) [ 17.283159] procd: - init - Please press Enter to activate this console. [ 17.873176] kmodloader: loading kernel modules from /etc/modules.d/* [ 17.902359] urngd: v1.0.2 started. [ 17.969659] random: crng init done [ 18.076413] Loading modules backported from Linux version v5.10-rc6-0-gb65054597872 [ 18.076463] Backport generated by backports.git v5.10-rc6-1-0-g3a9d70a3 [ 18.206794] usbcore: registered new interface driver usbserial_generic [ 18.206899] usbserial: USB Serial support registered for generic [ 18.222964] xt_time: kernel timezone is -0000 [ 18.262953] usbcore: registered new interface driver ftdi_sio [ 18.263070] usbserial: USB Serial support registered for FTDI USB Serial Device [ 18.294079] usbcore: registered new interface driver pl2303 [ 18.294329] usbserial: USB Serial support registered for pl2303 [ 18.304521] PPP generic driver version 2.4.2 [ 18.307310] NET: Registered protocol family 24 [ 18.310828] usbcore: registered new interface driver usb_serial_simple [ 18.313455] usbserial: USB Serial support registered for carelink [ 18.319850] usbserial: USB Serial support registered for zio [ 18.325915] usbserial: USB Serial support registered for funsoft [ 18.331635] usbserial: USB Serial support registered for flashloader [ 18.337592] usbserial: USB Serial support registered for google [ 18.343974] usbserial: USB Serial support registered for libtransistor [ 18.349582] usbserial: USB Serial support registered for vivopay [ 18.356202] usbserial: USB Serial support registered for moto_modem [ 18.362358] usbserial: USB Serial support registered for motorola_tetra [ 18.368333] usbserial: USB Serial support registered for novatel_gps [ 18.374941] usbserial: USB Serial support registered for hp4x [ 18.381542] usbserial: USB Serial support registered for suunto [ 18.387155] usbserial: USB Serial support registered for siemens_mpi [ 19.454261] ath10k_ahb a000000.wifi: qca4019 hw1.0 target 0x01000000 chip_id 0x003b00ff sub 0000:0000 [ 19.454319] ath10k_ahb a000000.wifi: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0 [ 19.465829] ath10k_ahb a000000.wifi: firmware ver 10.4b-ct-4019-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 6b2b5c5b [ 19.546375] ath10k_ahb a000000.wifi: board_file api 2 bmi_id 0:16 crc32 e2dfaa91 [ 20.833657] ath10k_ahb a000000.wifi: 10.4 wmi init: vdevs: 16 peers: 48 tid: 96 [ 20.833710] ath10k_ahb a000000.wifi: msdu-desc: 2500 skid: 32 [ 20.868401] ath10k_ahb a000000.wifi: wmi print 'P 48/48 V 16 K 144 PH 176 T 186 msdu-desc: 2500 sw-crypt: 0 ct-sta: 0' [ 20.869375] ath10k_ahb a000000.wifi: wmi print 'free: 53252 iram: 13432 sram: 35752' [ 20.995877] ath10k_ahb a000000.wifi: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-dt max-sta 32 raw 0 hwcrypto 1 [ 22.160294] ath10k_ahb a800000.wifi: qca4019 hw1.0 target 0x01000000 chip_id 0x003b00ff sub 0000:0000 [ 22.160359] ath10k_ahb a800000.wifi: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0 [ 22.173301] ath10k_ahb a800000.wifi: firmware ver 10.4b-ct-4019-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 6b2b5c5b [ 22.227682] ath10k_ahb a800000.wifi: board_file api 2 bmi_id 0:21 crc32 e2dfaa91 [ 23.515519] ath10k_ahb a800000.wifi: 10.4 wmi init: vdevs: 16 peers: 48 tid: 96 [ 23.515579] ath10k_ahb a800000.wifi: msdu-desc: 2500 skid: 32 [ 23.564740] ath10k_ahb a800000.wifi: wmi print 'P 48/48 V 16 K 144 PH 176 T 186 msdu-desc: 2500 sw-crypt: 0 ct-sta: 0' [ 23.566403] ath10k_ahb a800000.wifi: wmi print 'free: 53252 iram: 13432 sram: 35752' [ 23.706481] ath10k_ahb a800000.wifi: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-dt max-sta 32 raw 0 hwcrypto 1 [ 23.924303] kmodloader: done loading kernel modules from /etc/modules.d/* [ 29.093248] br-lan: port 1(eth1) entered blocking state [ 29.093311] br-lan: port 1(eth1) entered disabled state [ 29.097718] device eth1 entered promiscuous mode [ 29.212838] ess_edma c080000.edma eth0: Link is Down [ 32.373730] ess_edma c080000.edma eth0: Link is Up - 1Gbps/Full - flow control rx/tx [ 32.374797] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready BusyBox v1.33.0 () built-in shell (ash) _______ ________ __ | |.-----.-----.-----.| | | |.----.| |_ | - || _ | -__| || | | || _|| _| |_______|| __|_____|__|__||________||__| |____| |__| W I R E L E S S F R E E D O M ----------------------------------------------------- OpenWrt SNAPSHOT, r15803+24-542eab31a602 ----------------------------------------------------- === WARNING! ===================================== There is no root password defined on this device! Use the "passwd" command to set up a new password in order to prevent unauthorized SSH logins. -------------------------------------------------- root@OpenWrt:/# cat /etc/os-release NAME="OpenWrt" VERSION="SNAPSHOT" ID="openwrt" ID_LIKE="lede openwrt" PRETTY_NAME="OpenWrt SNAPSHOT" VERSION_ID="snapshot" HOME_URL="https://openwrt.org/" BUG_URL="https://bugs.openwrt.org/" SUPPORT_URL="https://forum.openwrt.org/" BUILD_ID="r15803+24-542eab31a602" OPENWRT_BOARD="ipq40xx/generic" OPENWRT_ARCH="arm_cortex-a7_neon-vfpv4" OPENWRT_TAINTS="no-all busybox" OPENWRT_DEVICE_MANUFACTURER="OpenWrt" OPENWRT_DEVICE_MANUFACTURER_URL="https://openwrt.org/" OPENWRT_DEVICE_PRODUCT="Generic" OPENWRT_DEVICE_REVISION="v0" OPENWRT_RELEASE="OpenWrt SNAPSHOT r15803+24-542eab31a602" root@OpenWrt:/#
Notes
Some technical references that may be useful:
- GaleForce: a past attempt at supporting custom software running on Google Wifi
- Note that there is some confusion about whether GaleForce still works on the latest Google software updates
Upstreaming notes
A few features were provided by non-upstream kernel patches. Some development notes:
- The factory bootloader does not yet reboot correctly when using upstream Linux drivers. See [RFC PATCH] firmware: qcom_scm: disable SDI at boot for description and initial patch. This likely needs resubmitted with a new Device Tree
compatible
property.- Merged to openwrt.git via commit a93ec36630ef ("ipq40xx: qcom_scm: Disable SDI at boot")
- The factory bootloader does not yet support SMP when using upstream Linux drivers. Instead, the device simply works with a single CPU. See [RFC] qcom_scm: IPQ4019 firmware does not support atomic API? for more info. This also may need a new
compatible
property and be submitted upstream.- Merged to openwrt.git via commit 26af098e0e ("ipq40xx: qcom_scm: Fix cold boot address command")