Xiaomi Mi AIoT Router AX3600

The Xiaomi Mi Router AX3600 is an 802.11ax OFDMA and MU-MIMO Tri-Band WiFi router, which has the following WiFi Interfaces.:

one 2.4GHz (QCN5024 2×2/40MHz ax)
one 5GHz (QCN5054 4×4/80 or 2×2/160MHz ax)
one AIoT (QCA9889 1×1 ac/n)

The radios support up to 4K QAM (through MCS0 - MCS15), for devices and paths that are compatible with those high-density modulations. Supports DFS channels, from channel 36 up to 165 (may vary on each region).

This is a router based on a Qualcomm IPQ8071A 4-core SoC (up to 1.4GHz).

It has three 1G LAN ports, one 1G WAN port and 7 non-detachable external antennas.

Xiaomi is shipping 2 variants of the same model:

- one with Chinese OEM firmware. This variant supports the International OEM firmware as-well.

- another with International OEM firmware. This variant supports the Chinese OEM firmware as-well.

Both have support for OpenWrt.

Sysupgrade Failure: The sysupgrade command may occasionally fail due to a random issue where the wpad service is not effectively stopped during the upgrade process. To resolve this problem, manually stop the wpad service using the command service wpad stop before running sysupgrade. This problem seems to have been fixed in the current snapshot version.
Ath11k Memory Usage: The ath11k driver, which is required for the main wireless radios, consumes a significant amount of memory when there are few connected stations and low bandwidth traffic. There are reports that the problem is less pronounced in the current snapshot and does not affect all users.
NSS Acceleration Support: Currently, the Qualcomm NSS hardware acceleration is not officially supported in OpenWrt. However, there is an ongoing community effort to enable NSS acceleration, you can find more information about this in the NSS: Qualcomm Network Accelerator section.

Notes

Flash chips known to be used are W29N02GZSIBA or GD9FS2G8F2A. There may be more variations of Flash Chips soldered onto it. Further investigation is needed.
Despite the AX3600 having a 256M NAND flash chip, the stock partitioning uses less than half of it (~113M). Xiaomi probably did this for firmware unification purposes, using the AX6 as the least common denominator since it only has 128M of flash.
Additionally, the stock partitioning assumes a ~35M size for each of the `rootfs` MTD partitions and ~30M for the `overlay` MTD partition. Even with that, the mounted `/overlay` partition only has a size of 15M.
OpenWrt partitioning modifies this, allowing the use of all available space, so it is no longer a problem. This partitioning will be reverted when recovering the router to the OEM firmware.

OEM Firmware

root@XiaoQiang:~# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00100000 00020000 "0:SBL1"
mtd1: 00100000 00020000 "0:MIBIB"
mtd2: 00300000 00020000 "0:QSEE"
mtd3: 00080000 00020000 "0:DEVCFG"
mtd4: 00080000 00020000 "0:RPM"
mtd5: 00080000 00020000 "0:CDT"
mtd6: 00080000 00020000 "0:APPSBLENV"
mtd7: 00100000 00020000 "0:APPSBL"
mtd8: 00080000 00020000 "0:ART"
mtd9: 00080000 00020000 "bdata"
mtd10: 00080000 00020000 "crash"
mtd11: 00080000 00020000 "crash_syslog"
mtd12: 023c0000 00020000 "rootfs"
mtd13: 023c0000 00020000 "rootfs_1"
mtd14: 01ec0000 00020000 "overlay"
mtd15: 00080000 00020000 "rsvd0"
mtd16: 0041e000 0001f000 "kernel"
mtd17: 0160a000 0001f000 "ubi_rootfs"
mtd18: 01876000 0001f000 "data"

OpenWrt Firmware

root@OpenWrt:~# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00100000 00020000 "0:sbl1"
mtd1: 00100000 00020000 "0:mibib"
mtd2: 00300000 00020000 "0:qsee"
mtd3: 00080000 00020000 "0:devcfg"
mtd4: 00080000 00020000 "0:rpm"
mtd5: 00080000 00020000 "0:cdt"
mtd6: 00080000 00020000 "0:appsblenv"
mtd7: 00100000 00020000 "0:appsbl"
mtd8: 00080000 00020000 "0:art"
mtd9: 00080000 00020000 "bdata"
mtd10: 00100000 00020000 "pstore"
mtd11: 023c0000 00020000 "ubi_kernel"
mtd12: 0d240000 00020000 "rootfs"

Latest stable version:

Latest snapshot version (can be unstable, use with caution):

Snapshot versions don't have luci installed. If you want it, you can create your own customized firmware using for example the Firmware selector or you can install the package once installed (look at this guide LuCI essentials).

Are known 4 different methods for rooting this model. Choose the one more convenient to you. Perhaps the easier and safer is the JavaScript method.

For Manual, Bash and JavaScript methods, first:

On both Chinese and International model variants, roll back to the Chinese OEM firmware version 1.0.17, available here.
Setup the router admin password (quick way is using the mobile setup app)
Login to the router web interface using the password set using the app and get the value of “stok=” from the URL
Think of a password for SSH logins (8+ chars long, no special chars)

For Patch bdata method, you don't need to downgrade the firmware.

Manual method

You need to use the following URL(s) in order to enable SSH access. Before that please:

Replace <STOK> with the stok value gained above
Replace <PASSWORD> with the password generated above

nvram set ssh_en=1

http://192.168.31.1/cgi-bin/luci/;stok=<STOK>/api/misystem/set_config_iotdev?bssid=gallifrey&user_id=doctor&ssid=-h%0Anvram%20set%20ssh%5Fen%3D1%0A

nvram commit

http://192.168.31.1/cgi-bin/luci/;stok=<STOK>/api/misystem/set_config_iotdev?bssid=gallifrey&user_id=doctor&ssid=-h%0Anvram%20commit%0A

cp /etc/init.d/dropbear /etc/init.d/dropbear_backup

http://192.168.31.1/cgi-bin/luci/;stok=<STOK>/api/misystem/set_config_iotdev?bssid=gallifrey&user_id=doctor&ssid=-h%0Acp%20%2Fetc%2Finit.d%2Fdropbear%20%2Fetc%2Finit.d%2Fdropbear_backup%0A

sed -i '/flg_ssh.*release/ { :a; N; /fi/! ba };/return 0/d' /etc/init.d/dropbear

http://192.168.31.1/cgi-bin/luci/;stok=<STOK>/api/misystem/set_config_iotdev?bssid=gallifrey&user_id=doctor&ssid=-h%0Ased%20-i%20'%2Fflg_ssh.*release%2F%20%7B%20%3Aa%3B%20N%3B%20%2Ffi%2F!%20ba%20%7D%3B%2Freturn%200%2Fd'%20%2Fetc%2Finit.d%2Fdropbear%0A

echo -e “<PASSWORD>/n<PASSWORD>” | passwd root

http://192.168.31.1/cgi-bin/luci/;stok=<STOK>/api/misystem/set_config_iotdev?bssid=gallifrey&user_id=doctor&ssid=-h%0Aecho%20-e%20%27<PASSWORD>%5Cn<PASSWORD>%27%20%7C%20passwd%20root%0A

/etc/init.d/dropbear enable

http://192.168.31.1/cgi-bin/luci/;stok=<STOK>/api/misystem/set_config_iotdev?bssid=gallifrey&user_id=doctor&ssid=-h%0A%2Fetc%2Finit.d%2Fdropbear%20enable%0A

/etc/init.d/dropbear start

http://192.168.31.1/cgi-bin/luci/;stok=<STOK>/api/misystem/set_config_iotdev?bssid=doctor&user_id=doctor&ssid=-h%0A%2Fetc%2Finit.d%2Fdropbear%20start%0A

Bash method

This is to be used in a bash script.

rawurlencode() {
  local string="${1}"
  local strlen=${#string}
  local encoded=""
  local pos c o

  for (( pos=0 ; pos<strlen ; pos++ )); do
     c=${string:$pos:1}
     case "$c" in
        [-_.~a-zA-Z0-9] ) o="${c}" ;;
        * )               printf -v o '%%%02x' "'$c"
     esac
     encoded+="${o}"
  done
  echo "${encoded}"    # You can either set a return variable (FASTER)
  REPLY="${encoded}"   #+or echo the result (EASIER)... or both... :p
}

xiaomiCmd() {
    parsed=$(rawurlencode "$1")
    url="http://192.168.31.1/cgi-bin/luci/;stok=$stok/api/misystem/set_config_iotdev?bssid=redmi&user_id=doctor&ssid=-h%0A$parsed%0A"
    echo $url
    curl "$url"
    echo
}

enableSsh() {
    xiaomiCmd "nvram set ssh_en=1;nvram commit"
    xiaomiCmd "sed -i '/flg_ssh.*release/ { :a; N; /fi/! ba };/return 0/d' /etc/init.d/dropbear"
    xiaomiCmd "echo -e '$password\n$password' | passwd root"
    xiaomiCmd "/etc/init.d/dropbear enable;/etc/init.d/dropbear start"
}
echo your have to enter stok and password variables before running enableSsh:
echo 'stok=<STOK>'
echo 'password=<PASSWORD>'
echo enableSsh

JavaScript method

This is to be used in the browser console (Press F12)

function getSTOK() {
    let match = location.href.match(/;stok=(.*?)\//);
    if (!match) {
        return null;
    }
    return match[1];
}

function execute(stok, command) {
    command = encodeURIComponent(command);
    let path = `/cgi-bin/luci/;stok=${stok}/api/misystem/set_config_iotdev?bssid=SteelyWing&user_id=SteelyWing&ssid=-h%0A${command}%0A`;
    console.log(path);
    return fetch(new Request(location.origin + path));
}

function enableSSH() {
    stok = getSTOK();
    if (!stok) {
        console.error('stok not found in URL');
        return;
    }
    console.log(`stok = "${stok}"`);

    password = prompt('Input new SSH password');
    if (!password) {
        console.error('You must input password');
        return;
    }

    execute(stok,
`
nvram set ssh_en=1
nvram commit
sed -i 's/channel=.*/channel=\\"debug\\"/g' /etc/init.d/dropbear
/etc/init.d/dropbear start
`
    )
        .then((response) => response.text())
        .then((text) => console.log(text));
    console.log('New SSH password: ' + password);
    execute(stok, `echo -e "${password}\\n${password}" | passwd root`)
        .then((response) => response.text())
        .then((text) => console.log(text));
}

enableSSH();

Patch bdata method

Download this file and extract the contents to some place in your computer.

Connect your PC to the router by ethernet on one of its LAN ports.
Make a backup of the configuration if necessary, because telnet will require a factory reset to activate.
Go to the web admin page of the router (miwifi.com or by the local IP address, usually 192.168.31.1)
Copy the content of the create_exploit.js file into the browser console (press F12 + choose Console) and press Enter.
You should expect a window appearing where you can change the bdata region or leave it as is. Caution when changing the bdata.
Wait 10-15 seconds for the patch file to be generated. Then it should download automatically the file.
Unpack the contents of the downloaded file. After unpacking, there should be 3 files: 1.bin, 2.bin and 3.bin.
In the same order, install them in the web admin page of the router where the firmware can be manually updated. If everything is fine, after each load, the router should restart.
Factory reset through the web admin page of the router.
Go to the web admin page of the router and run the script calc_passwd.js in the browser console to find out your password for telnet. This step can be done once and at any time. The default password depends on the serial number and will not change if the serial number is not changed.
Try to connect via telnet (IP 192.168.31.1, port 21). If it says the password is wrong, you can also repeat the “factory reset” step and forward (steps 9 and 10), until it works.

Once connected via telnet, turn on the ssh service:

sed -i 's/channel=.*/channel="debug"/g' /etc/init.d/dropbear
/etc/init.d/dropbear start

Now you should be able to login to root@192.168.31.1 via ssh using the password above.

Device comes with RX disabled by default. At this point, it's highly recommended to enable it to help if something goes wrong. See serial.

For both the Chinese and International firmware model

Installation is done by the ubiformat method, through SSH. Take into account that the name of the files can be different depending of the version you want to install, so replace accordingly:

Open an SSH shell to the router
Scp or wget the file openwrt-qualcommax-ipq807x-xiaomi_ax3600-initramfs-factory.ubi to the router's /tmp directory
Check which rootfs partition is your router booted in (0 = rootfs | 1 = rootfs_1):
```
nvram get flag_boot_rootfs
```
Find the rootfs and rootfs_1 mtd indexes respectively:
```
cat /proc/mtd
```
Please confirm if mtd12 and mtd13 are the correct indexes from above

Use the command ubiformat to flash the opposite mtd with UBI image. Proceed accordingly by the previous command.

If nvram get flag_boot_rootfs returned 0:

ubiformat /dev/mtd13 -y -f /tmp/openwrt-qualcommax-ipq807x-xiaomi_ax3600-initramfs-factory.ubi -s 2048 -O 2048 && nvram set flag_boot_rootfs=1 && nvram set flag_last_success=1 && nvram commit

otherwise:

ubiformat /dev/mtd12 -y -f /tmp/openwrt-qualcommax-ipq807x-xiaomi_ax3600-initramfs-factory.ubi -s 2048 -O 2048 && nvram set flag_boot_rootfs=0 && nvram set flag_last_success=0 && nvram commit

Reboot the device by:
```
reboot
```
Previous commands flashed an ubinized OpenWrt initramfs that will serve as the intermediate step since OpenWrt uses unified rootfs in order to fully utilize NAND and provide enough space for packages. Continue with the next steps in order to permanently flash OpenWrt.
SSH into OpenWrt from one of the LAN ports
Copy the file openwrt-qualcommax-ipq807x-xiaomi_ax3600-squashfs-sysupgrade.bin to the /tmp directory

Sysupgrade the device:

sysupgrade -n /tmp/openwrt-qualcommax-ipq807x-xiaomi_ax3600-squashfs-sysupgrade.bin

Device will reboot with OpenWrt, and then sysupgrade can be used to upgrade the device when desired. Although, see potential issues / limitations.

This SOC has two NSS processors. This NSS processors are able to handle some network / cryptographic functions and offload the main processors of the SOC. Currently, the Qualcomm NSS hardware acceleration is not officially supported in OpenWrt and maybe never will be. The code needed for that is not in the kernel of Linux and the patches provided by Qualcomm are only for very old versions of the kernel, so they can't be imported directly into OpenWrt and adding them require a lot of work and maintenance.

The main processors of the SOC are able to route without using the NSS processors, and this is how the official build of OpenWrt works, but is not as fast as it can be when using the NSS cores.

However, there is an ongoing community effort to enable NSS acceleration. It's important to note that community efforts do not guarantee official support in the future.

If your internet speed is near 1 Gbps speeds, you will note that official OpenWrt build will not reach this speeds. Or if you plan to have additional processes running on the router that can consume resources it will hurt your routing speed. In this case maybe you can try to use this NOT official builds, but remember, they are NOT official and thus they don't have official support.

If your understand that this versions are not official, but you want to try them, here are some relevant links:

There is one thread in the forum, where the development of this NSS versions occur and the only place to ask for support of this NSS versions.
There is one GitHub repository with the current NSS code that is being developed. You can build yourself the firmware starting from this code.

If you are not able to build the code by yourself, some users have some repos with some ready to use builds of this NSS versions. Here are some links to his repos, in alphabetical order of the user's name.

AgustinLorenzo: you can find the releases here. There are two versions, one if you use mesh and the other if you don't.
dimfish: the sources are here and the builds are here. He builds and publishes the packages too so you can install any package later from OpenWrt.
JuliusBairaktaris: you can find the releases here. It is built automatically with each change.

This NSS versions are NOT officially supported and maybe there will never be, so use them at your own risk and don't expect official support from OpenWrt developers

There are several options for debricking the AX3600 Router:

The device can be recovered using a TFTP recovery (recommended, instructions below)
You can use the MiWIFI Repair Tool (instructions below)
you can try to apply the habitual generic debrick options for OpenWrt devices.

The AX3600 can be recovered from a soft-brick with TFTP. The flow is:

The router boots and asks for an IP address on the LAN ports via DHCP
The TFTP server assigns an IP address to the router
The router then connects to the TFTP server (where your DHCP server listen, e.g.: 192.168.31.100) and tries to download a file named with the IP address given by the DHCP server converted to hexadecimal.
- For example, 192.168.31.2 = C0.A8.1F.02, so the router will ask for a file named C0A81F02.img.
- Because of this quirk we will have to configure the tftp server to assign only one IP and we will set the file name to the only IP address it can receive.

Here you have the steps on Linux or Windows to prepare the tftp server.

Linux

On Linux you can use dnsmasq.

Create a folder somewhere to place your firmware for the tftp server and download the OEM firmware (the file name is a very important part):

mkdir -p /tmp/tftp
wget https://cdn.cnbj1.fds.api.mi-img.com/xiaoqiang/rom/r3600/miwifi_r3600_firmware_5da25_1.0.17.bin -O /tmp/tftp/C0A81F02.img

Set a static address on your PC to serve the firmware from:

sudo ip address flush dev <adapter name>
sudo ip address add 192.168.31.100/24 dev <adapter name>

Run the server with the following command:

sudo dnsmasq --no-daemon --listen-address=192.168.31.100 --bind-interfaces --dhcp-range=192.168.31.2,192.168.31.2 --enable-tftp --tftp-root=/tmp/tftp

Windows

On Windows you can use any tftp client, this example is using tftpd64. Download it and decompress the contents in any folder.

Connect your computer ethernet port to the router LAN1 port, nothing else connected.
In Windows, set computer IP as static to 192.168.31.100, mask 255.255.255.0 (depending your version of windows, you will need to fill the DNS too with any valid value, does not matter):

Allow tftp64 in windows firewall or deactivate the windows firewall temporarily.
Configure tftp64 like this:

Configure tftp64 DHCP server to give the IP 192.168.31.2 to the router:

Rename the firmware file that you want to install (for example miwifi_r3600_firmware_5da25_1.0.17.bin) to C0A81F02.img and copy it to the tftpd64 folder.

Now, you can start the recovery:

Power off the Router if you haven't done so already
Keep reset button pressed and power on your AX3600.
- Keep it pressed until you see the system led blinking orange
The device will start loading the firmware.
- If the led is blinking blue it means that the device was flashed successfully and can be restarted
- After restarting the router, it might take some time for the led to go to solid blue
- If the recovery doesn't accept the downloaded file the led switches to solid white - if this is the case, restart the recovery process with other file

Finally you can put the interface of your computer back to DHCP mode (or what you usually have) and start again with breaking your device

You can download the repair tool from http://www1.miwifi.com/miwifi_download.html

Make sure the computer has a static IP address as shown in the instructions above (TFTP recovery)
On the first screen, select your firmware (recommended is miwifi_r3600_firmware_5da25_1.0.17.bin)
Click on the button on the right button to continue to the next step
Select your Ethernet adapter which has the router connected
Click on the button on the right button to continue to the next step
Unplug the router if you haven't done so already
Press and hold the reset button
Power on the router
Wait for the orange LED to start blinking and stop blinking again
Release the reset button
The MiWIFI repair tool should now show show a dialog indicating that data is being copied to the router.
When the files have been copied, the router should show a blinking blue LED.
You may now unplug the router and plug it back in again to restart it.
The repair should now be complete.

Router side RX is disabled by default, to enable run the following commands via SSH on:

nvram set uart_en=1
nvram set boot_wait=on
nvram commit
reboot

fw_setenv uart_en 1
fw_setenv boot_wait on
reboot

How to connect to the Serial Port (UART)

Make sure that your UART adapter is 1.8V I/O level, 3.3V or 5V adapters will kill your SoC

As depicted on the picture above:

Format: Log Type - Time(microsec) - Message - Optional Info Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00147 S - IMAGE_VARIANT_STRING=HAACANAZA S - OEM_IMAGE_VERSION_STRING=CRM S - Boot Config, 0x000002e5 B - 203 - PBL, Start B - 2740 - bootable_media_detect_entry, Start B - 3449 - bootable_media_detect_success, Start B - 3453 - elf_loader_entry, Start B - 6122 - auth_hash_seg_entry, Start B - 6365 - auth_hash_seg_exit, Start B - 68611 - elf_segs_hash_verify_entry, Start B - 131308 - PBL, End B - 146522 - SBL1, Start B - 199897 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4 B - 206546 - pm_device_init, Start B - 331230 - PM_SET_VAL:Skip D - 123982 - pm_device_init, Delta B - 333487 - pm_driver_init, Start D - 5337 - pm_driver_init, Delta B - 339922 - clock_init, Start D - 2135 - clock_init, Delta B - 344009 - boot_flash_init, Start D - 11773 - boot_flash_init, Delta B - 359473 - boot_config_data_table_init, Start D - 3202 - boot_config_data_table_init, Delta - (575 Bytes) B - 366976 - Boot Setting : 0x00000600 B - 370910 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:16 B - 377864 - sbl1_ddr_set_params, Start B - 381677 - CPR configuration: 0x300 B - 385154 - cpr_init, Start B - 387929 - Rail:0 Mode: 5 Voltage: 816000 B - 393084 - CL CPR settled at 768000mV B - 395920 - Rail:1 Mode: 5 Voltage: 880000 B - 400190 - Rail:1 Mode: 7 Voltage: 912000 D - 16470 - cpr_init, Delta B - 406992 - Pre_DDR_clock_init, Start B - 411018 - Pre_DDR_clock_init, End B - 414403 - DDR Type : PCDDR3 B - 420107 - do ddr sanity test, Start D - 1037 - do ddr sanity test, Delta B - 424865 - DDR: Start of HAL DDR Boot Training B - 429592 - DDR: End of HAL DDR Boot Training B - 435265 - DDR: Checksum to be stored on flash is 563280603 B - 445574 - Image Load, Start D - 224114 - QSEE Image Loaded, Delta - (1373936 Bytes) B - 669780 - Image Load, Start D - 61 - SEC Image Loaded, Delta - (0 Bytes) B - 677466 - Image Load, Start D - 10705 - DEVCFG Image Loaded, Delta - (26004 Bytes) B - 688263 - Image Load, Start D - 25254 - RPM Image Loaded, Delta - (105964 Bytes) B - 713578 - Image Load, Start D - 96593 - APPSBL Image Loaded, Delta - (590068 Bytes) B - 810324 - QSEE Execution, Start D - 91 - QSEE Execution, Delta B - 816119 - USB D+ check, Start D - 30 - USB D+ check, Delta B - 822524 - SBL1, End D - 678289 - SBL1, Delta S - Flash Throughput, 6751 KB/s (2096547 Bytes, 310514 us) S - DDR Frequency, 466 MHz S - Core 0 Frequency, 800 MHz U-Boot 2016.01 (Feb 19 2020 - 10:39:20 +0000), Build: jenkins-r3600_ota_publish-25 DRAM: smem ram ptable found: ver: 1 len: 4 512 MiB NAND: ONFI device found ID = 1590aaef Vendor = ef Device = aa SF: Unsupported flash IDs: manuf ff, jedec ffff, ext_jedec ffff ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0) 256 MiB MMC: sdhci: Node Not found, skipping initialization ## Error: flags type check failure for "ethaddr" <= ""00:AA:BB:CC:DD:10"" (type: m) himport_r: can't insert "ethaddr="00:AA:BB:CC:DD:10"" into hash table PCI Link Intialized PCI1 is not defined in the device tree In: serial@78B3000 Out: serial@78B3000 Err: serial@78B3000 machid: 8010010 MMC Device 0 not found eth5 MAC Address from ART is not valid write phy_id=1, reg(0x8074):0x0670 write phy_id=2, reg(0x8074):0x0670 write phy_id=3, reg(0x8074):0x0670 write phy_id=4, reg(0x8074):0x0670 bootwait is off, bootdelay=5 Hit any key to stop autoboot: 0 trigger button release! boot from rootfs 0 miwifi: check crash in rmem ! ubi0: attaching mtd1 ubi0: scanning is finished ubi0: attached mtd1 (name "mtd=0", size 35 MiB) ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048 ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096 ubi0: good PEBs: 286, bad PEBs: 0, corrupted PEBs: 0 ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128 ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 220023969 ubi0: available PEBs: 26, total reserved PEBs: 260, PEBs reserved for bad PEB handling: 40 Read 0 bytes from volume kernel to 44000000 No size specified -> Using max size (4317184) Could not find PCI in device tree ## Loading kernel from FIT Image at 44000000 ... Using 'config@ac04' configuration Trying 'kernel@1' kernel subimage Description: ARM64 OpenWrt Linux-4.4.60 Type: Kernel Image Compression: gzip compressed Data Start: 0x440000e8 Data Size: 3957922 Bytes = 3.8 MiB Architecture: AArch64 OS: Linux Load Address: 0x41080000 Entry Point: 0x41080000 Hash algo: crc32 Hash value: 6040bba3 Hash algo: sha1 Hash value: c137157ca381de8ac3883b105ec1553876d4e349 Verifying Hash Integrity ... crc32+ sha1+ OK ## Loading fdt from FIT Image at 44000000 ... Using 'config@ac04' configuration Trying 'fdt@ac04' fdt subimage Description: ARM64 OpenWrt qcom-ipq807x-hkxx device tree blob Type: Flat Device Tree Compression: uncompressed Data Start: 0x443da1bc Data Size: 79565 Bytes = 77.7 KiB Architecture: AArch64 Hash algo: crc32 Hash value: 6f1349bd Hash algo: sha1 Hash value: eb53fbb8407f6451d8789ab8b0addd335134a552 Verifying Hash Integrity ... crc32+ sha1+ OK Booting using the fdt blob at 0x443da1bc Uncompressing Kernel Image ... OK Loading Device Tree to 4a3e9000, end 4a3ff6cc ... OK Using machid 0x8010010 from environment Starting kernel ... Jumping to AARCH64 kernel via monitor [ 0.000000] Booting Linux on physical CPU 0x0 [ 0.000000] Initializing cgroup subsys cpuset [ 0.000000] Initializing cgroup subsys cpu [ 0.000000] Initializing cgroup subsys cpuacct [ 0.000000] Linux version 4.4.60 (jenkins@153e9c33daea) (gcc version 5.5.0 (OpenWrt GCC 5.5.0 unknown) ) #0 SMP PREEMPT Fri May 8 10:35:38 2020 [ 0.000000] Boot CPU: AArch64 Processor [410fd034] [ 0.000000] Ignoring memory range 0x40000000 - 0x41000000 [ 0.000000] efi: Getting EFI parameters from FDT: [ 0.000000] efi: UEFI not found. [ 0.000000] psci: probing for conduit method from DT. [ 0.000000] psci: PSCIv1.0 detected in firmware. [ 0.000000] psci: Using standard PSCI v0.2 function IDs [ 0.000000] psci: MIGRATE_INFO_TYPE not supported. [ 0.000000] PERCPU: Embedded 14 pages/cpu @ffffffc01ef5c000 s19096 r8192 d30056 u57344 [ 0.000000] Detected VIPT I-cache on CPU0 [ 0.000000] CPU features: enabling workaround for ARM erratum 845719 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 105840 [ 0.000000] Kernel command line: ubi.mtd=rootfs root=mtd:ubi_rootfs rootfstype=squashfs rootwait swiotlb=1 [ 0.000000] PID hash table entries: 2048 (order: 2, 16384 bytes) [ 0.000000] Dentry cache hash table entries: 65536 (order: 7, 524288 bytes) [ 0.000000] Inode-cache hash table entries: 32768 (order: 6, 262144 bytes) [ 0.000000] software IO TLB [mem 0x5fe57000-0x5fe97000] (0MB) mapped at [ffffffc01ee57000-ffffffc01ee96fff] [ 0.000000] Memory: 402204K/430080K available (5491K kernel code, 654K rwdata, 2796K rodata, 224K init, 405K bss, 27876K reserved, 0K cma-reserved) [ 0.000000] Virtual kernel memory layout: [ 0.000000] vmalloc : 0xffffff8000000000 - 0xffffffbdbfff0000 ( 246 GB) [ 0.000000] vmemmap : 0xffffffbdc0000000 - 0xffffffbfc0000000 ( 8 GB maximum) [ 0.000000] 0xffffffbdc0040000 - 0xffffffbdc0800000 ( 7 MB actual) [ 0.000000] fixed : 0xffffffbffa7fd000 - 0xffffffbffac00000 ( 4108 KB) [ 0.000000] PCI I/O : 0xffffffbffae00000 - 0xffffffbffbe00000 ( 16 MB) [ 0.000000] modules : 0xffffffbffc000000 - 0xffffffc000000000 ( 64 MB) [ 0.000000] memory : 0xffffffc000000000 - 0xffffffc01f000000 ( 496 MB) [ 0.000000] .init : 0xffffffc00089a000 - 0xffffffc0008d2000 ( 224 KB) [ 0.000000] .text : 0xffffffc000080000 - 0xffffffc0008997f4 ( 8294 KB) [ 0.000000] .data : 0xffffffc0008e1000 - 0xffffffc000984800 ( 654 KB) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 [ 0.000000] Preemptible hierarchical RCU implementation. [ 0.000000] Build-time adjustment of leaf fanout to 64. [ 0.000000] NR_IRQS:64 nr_irqs:64 0 [ 0.000000] Architected cp15 timer(s) running at 19.20MHz (virt). [ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x46d987e47, max_idle_ns: 440795202767 ns [ 0.000005] sched_clock: 56 bits at 19MHz, resolution 52ns, wraps every 4398046511078ns [ 0.000396] Calibrating delay loop (skipped), value calculated using timer frequency.. 38.40 BogoMIPS (lpj=192000) [ 0.000408] pid_max: default: 32768 minimum: 301 [ 0.000496] Mount-cache hash table entries: 1024 (order: 1, 8192 bytes) [ 0.000505] Mountpoint-cache hash table entries: 1024 (order: 1, 8192 bytes) [ 0.001036] Initializing cgroup subsys io [ 0.001052] Initializing cgroup subsys memory [ 0.001083] Initializing cgroup subsys devices [ 0.001098] Initializing cgroup subsys freezer [ 0.001109] Initializing cgroup subsys net_cls [ 0.001119] Initializing cgroup subsys pids [ 0.001367] EFI services will not be available. [ 0.001392] ASID allocator initialised with 65536 entries [ 0.051825] MSM Memory Dump base table set up [ 0.051850] MSM Memory Dump apps data table set up [ 0.090120] Detected VIPT I-cache on CPU1 [ 0.090164] CPU1: Booted secondary processor [410fd034] [ 0.120106] Detected VIPT I-cache on CPU2 [ 0.120133] CPU2: Booted secondary processor [410fd034] [ 0.150133] Detected VIPT I-cache on CPU3 [ 0.150159] CPU3: Booted secondary processor [410fd034] [ 0.150212] Brought up 4 CPUs [ 0.150237] SMP: Total of 4 processors activated. [ 0.150247] CPU: All CPU(s) started at EL1 [ 0.150270] alternatives: patching kernel code [ 0.167061] DMI not present or invalid. [ 0.167312] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.167336] futex hash table entries: 1024 (order: 5, 131072 bytes) [ 0.167561] pinctrl core: initialized pinctrl subsystem [ 0.168504] NET: Registered protocol family 16 [ 0.190061] cpuidle: using governor ladder [ 0.220078] cpuidle: using governor menu [ 0.220220] vdso: 2 pages (1 code @ ffffffc0008e9000, 1 data @ ffffffc0008e8000) [ 0.220362] DMA: preallocated 256 KiB pool for atomic allocations [ 0.220456] CPU: unavail, SoC Version: 2.0 [ 0.220493] <CORE> glink_init: IPC Logging Disabled [ 0.220891] IPC logging disabled [ 0.220898] IPC logging disabled [ 0.220902] IPC logging disabled [ 0.220907] IPC logging disabled [ 0.220911] IPC logging disabled [ 0.223601] Soc version is not 1, changing clock offsets [ 0.234993] irq: no irq domain found for /soc/smp2p-wcss/slave-kernel ! [ 0.237011] irq: no irq domain found for /soc/smp2p-wcss/slave-kernel ! [ 0.239187] msm_rpm_dev_probe: APSS-RPM communication over GLINK [ 0.240075] sps:sps is ready. [ 0.249857] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 2 [ 0.256344] pps_core: LinuxPPS API ver. 1 registered [ 0.256356] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it> [ 0.256383] PTP clock support registered [ 0.256533] dmi: Firmware registration failed. [ 0.257815] Advanced Linux Sound Architecture Driver Initialized. [ 0.258455] clocksource: Switched to clocksource arch_sys_counter [ 0.261701] NET: Registered protocol family 2 [ 0.262293] TCP established hash table entries: 4096 (order: 3, 32768 bytes) [ 0.262354] TCP bind hash table entries: 4096 (order: 4, 65536 bytes) [ 0.262451] TCP: Hash tables configured (established 4096 bind 4096) [ 0.262503] UDP hash table entries: 256 (order: 1, 8192 bytes) [ 0.262526] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes) [ 0.262695] NET: Registered protocol family 1 [ 0.270308] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.270326] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.273628] io scheduler noop registered [ 0.273644] io scheduler deadline registered (default) [ 0.275687] 20000000.pci supply vdda not found, using dummy regulator [ 0.275767] 20000000.pci supply vdda_phy not found, using dummy regulator [ 0.275802] 20000000.pci supply vdda_refclk not found, using dummy regulator [ 0.276346] PCI host bridge /soc/pci@20000000 ranges: [ 0.276374] IO 0x20200000..0x202fffff -> 0x20200000 [ 0.276388] MEM 0x20300000..0x20ffffff -> 0x20300000 [ 0.411911] qcom-pcie 20000000.pci: link up [ 0.412058] qcom-pcie 20000000.pci: PCI host bridge to bus 0000:00 [ 0.412072] pci_bus 0000:00: root bus resource [bus 00-ff] [ 0.412085] pci_bus 0000:00: root bus resource [io 0x0000-0xfffff] (bus address [0x20200000-0x202fffff]) [ 0.412099] pci_bus 0000:00: root bus resource [mem 0x20300000-0x20ffffff] [ 0.414035] pci 0000:00:00.0: BAR 8: assigned [mem 0x20300000-0x205fffff] [ 0.414050] pci 0000:00:00.0: BAR 9: assigned [mem 0x20600000-0x207fffff 64bit pref] [ 0.414062] pci 0000:00:00.0: BAR 0: assigned [mem 0x20800000-0x20800fff] [ 0.414075] pci 0000:00:00.0: BAR 7: assigned [io 0x1000-0x1fff] [ 0.414091] pci 0000:01:00.0: BAR 0: assigned [mem 0x20400000-0x205fffff 64bit] [ 0.414186] pci 0000:01:00.0: BAR 6: assigned [mem 0x20300000-0x2030ffff pref] [ 0.414197] pci 0000:00:00.0: PCI bridge to [bus 01] [ 0.414207] pci 0000:00:00.0: bridge window [io 0x1000-0x1fff] [ 0.414219] pci 0000:00:00.0: bridge window [mem 0x20300000-0x205fffff] [ 0.414230] pci 0000:00:00.0: bridge window [mem 0x20600000-0x207fffff 64bit pref] [ 0.419757] NET: Registered protocol family 27 [ 0.419770] IPC_RTR: ipc_router_create_log_ctx: IPC Logging disabled [ 0.419783] qmi_log_init: IPC Logging disabled [ 0.419789] qmi_log_init: IPC Logging disabled [ 0.419874] msm_rpm_log_probe: OK [ 0.420461] msm-dcc b3000.dcc: DCC XPU is not specified [ 0.420699] msm-dcc b3000.dcc: DCC SRAM dump setup failed [ 0.420728] msm-dcc b3000.dcc: jiffies_64: 0xffff8af9, cntvct_64: 0x5100c5d [ 0.420739] msm-dcc b3000.dcc: gcnt_hi: 0x00000000(0xffffff80003cc004) [ 0.420750] msm-dcc b3000.dcc: gcnt_lo: 0x05100e0d(0xffffff80003cc000) [ 0.421285] TZ Log : Will warn on Access Violation, as paniconaccessviolation is not set [ 0.421919] msm_serial 78b3000.serial: msm_serial: detected port #0 [ 0.421954] msm_serial 78b3000.serial: uartclk = 3686400 [ 0.421988] 78b3000.serial: ttyMSM0 at MMIO 0x78b3000 (irq = 77, base_baud = 230400) is a MSM [ 0.422005] msm_serial: console setup on port #0 [ 1.235017] console [ttyMSM0] enabled [ 1.240002] msm_serial 78b1000.serial: msm_serial: detected port #1 [ 1.243269] msm_serial 78b1000.serial: uartclk = 19200000 [ 1.249356] 78b1000.serial: ttyMSM1 at MMIO 0x78b1000 (irq = 78, base_baud = 1200000) is a MSM [ 1.255190] msm_serial: driver initialized [ 1.263669] msm_serial_hsl_init: driver initialized [ 1.276430] brd: module loaded [ 1.277110] spi_qup 78b5000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64 [ 1.279866] m25p80 spi32766.0: unrecognized JEDEC id bytes: ff, ff, ff [ 1.286617] nand: device found, Manufacturer ID: 0xef, Chip ID: 0xaa [ 1.291965] nand: Winbond W29N02GZ [ 1.298422] nand: 256 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64 [ 1.301757] 16 ofpart partitions found on MTD device qcom_nand.0 [ 1.309205] Creating 16 MTD partitions on "qcom_nand.0": [ 1.315356] 0x000000000000-0x000000100000 : "0:SBL1" [ 1.322174] 0x000000100000-0x000000200000 : "0:MIBIB" [ 1.326989] 0x000000200000-0x000000500000 : "0:QSEE" [ 1.333487] 0x000000500000-0x000000580000 : "0:DEVCFG" [ 1.336588] 0x000000580000-0x000000600000 : "0:RPM" [ 1.341541] 0x000000600000-0x000000680000 : "0:CDT" [ 1.346316] 0x000000680000-0x000000700000 : "0:APPSBLENV" [ 1.351193] 0x000000700000-0x000000800000 : "0:APPSBL" [ 1.357106] 0x000000800000-0x000000880000 : "0:ART" [ 1.361767] 0x000000880000-0x000000900000 : "bdata" [ 1.366522] 0x000000900000-0x000000980000 : "crash" [ 1.371394] 0x000000980000-0x000000a00000 : "crash_syslog" [ 1.376242] 0x000000a00000-0x000002dc0000 : "rootfs" [ 1.408550] mtd: device 12 (rootfs) set to be root filesystem [ 1.408811] mtdsplit: no squashfs found in "rootfs" [ 1.413274] 0x000002dc0000-0x000005180000 : "rootfs_1" [ 1.445652] 0x000005180000-0x000007040000 : "overlay" [ 1.469243] 0x000007040000-0x0000070c0000 : "rsvd0" [ 1.470760] spmi spmi-0: PMIC Arb Version-2 (0x20010000) [ 1.475762] libphy: Fixed MDIO Bus: probed [ 1.699150] qca-mdio 90000.mdio: Could not find phy-reset-gpio [ 1.699256] libphy: qca_mdio: probed [ 1.705089] qca-mdio 90000.mdio: qca-mdio driver was registered [ 1.707773] Unable to create IPC log context! [ 1.713608] cnss: Platform driver probed successfully. [ 1.717969] Skip QCA8074V1 in V2 platform [ 1.722927] cnss_genl: genl_register_family fail: -17 [ 1.726867] cnss: CNSS genl init failed -17 [ 1.731947] cnss: Platform driver probed successfully. [ 1.736042] i2c /dev entries driver [ 1.747728] device-mapper: ioctl: 4.34.0-ioctl (2015-10-28) initialised: dm-devel@redhat.com [ 1.748181] sdhci: Secure Digital Host Controller Interface driver [ 1.755283] sdhci: Copyright(c) Pierre Ossman [ 1.761231] sdhci-pltfm: SDHCI platform and OF driver helper [ 1.766301] qcom_ice_get_device_tree_data: No vdd-hba-supply regulator, assuming not needed [ 1.771442] ICE IRQ = 81 [ 1.779951] [ 1.779951] Version Rollback Feature Disabled [ 1.782886] sps_register_bam_device : unable to create IPC Logging 0 for bam 0x0000000008b04000 [ 1.787872] sps_register_bam_device : unable to create IPC Logging 1 for bam 0x0000000008b04000sps_register_bam_device : unable to create IPC Logging 2 for bam 0x0000000008b04000 [ 1.805154] sps_register_bam_device : unable to create IPC Logging 3 for bam 0x0000000008b04000sps_register_bam_device : unable to create IPC Logging 4 for bam 0x0000000008b04000 [ 1.821039] sps:BAM 0x0000000008b04000 is registered.[ 1.828794] DEV CI test message [ 1.833478] subsys-restart: ssr_parse_restart_orders(): q6v5_m3 device has been added to q6v5-m3's restart group [ 1.836230] subsys-restart: ssr_parse_restart_orders(): q6v5_wcss device has been added to q6v5-m3's restart group [ 1.846727] remoteproc remoteproc0: q6v5-m3 is available [ 1.857135] SPMI VADC - Min ch: 0 Max ch: 15 [ 1.863946] of_graph_get_next_endpoint(): no port node found in /soc/csr@6001000 [ 1.866600] coresight-csr 6001000.csr: CSR initialized [ 1.874049] of_graph_get_next_endpoint(): no port node found in /soc/cti@6010000 [ 1.879009] of_graph_get_next_endpoint(): no port node found in /soc/cti@6011000 [ 1.886536] of_graph_get_next_endpoint(): no port node found in /soc/cti@6012000 [ 1.893927] of_graph_get_next_endpoint(): no port node found in /soc/cti@6013000 [ 1.901310] of_graph_get_next_endpoint(): no port node found in /soc/cti@6014000 [ 1.908680] of_graph_get_next_endpoint(): no port node found in /soc/cti@6015000 [ 1.916047] of_graph_get_next_endpoint(): no port node found in /soc/cti@6016000 [ 1.923446] of_graph_get_next_endpoint(): no port node found in /soc/cti@6017000 [ 1.930824] of_graph_get_next_endpoint(): no port node found in /soc/cti@6018000 [ 1.938189] of_graph_get_next_endpoint(): no port node found in /soc/cti@6019000 [ 1.945571] of_graph_get_next_endpoint(): no port node found in /soc/cti@601a000 [ 1.952956] of_graph_get_next_endpoint(): no port node found in /soc/cti@601b000 [ 1.960331] of_graph_get_next_endpoint(): no port node found in /soc/cti@601c000 [ 1.967704] of_graph_get_next_endpoint(): no port node found in /soc/cti@601d000 [ 1.975090] of_graph_get_next_endpoint(): no port node found in /soc/cti@601e000 [ 1.982464] of_graph_get_next_endpoint(): no port node found in /soc/cti@601f000 [ 1.989850] of_graph_get_next_endpoint(): no port node found in /soc/cti@6198000 [ 1.997374] of_graph_get_next_endpoint(): no port node found in /soc/cti@6199000 [ 2.004729] of_graph_get_next_endpoint(): no port node found in /soc/cti@619a000 [ 2.012139] of_graph_get_next_endpoint(): no port node found in /soc/cti@619b000 [ 2.019555] of_graph_get_next_endpoint(): no port node found in /soc/cti@610c000 [ 2.026916] sps_register_bam_device : unable to create IPC Logging 0 for bam 0x0000000006044000 [ 2.033981] sps_register_bam_device : unable to create IPC Logging 1 for bam 0x0000000006044000sps_register_bam_device : unable to create IPC Logging 2 for bam 0x0000000006044000 [ 2.051103] sps_register_bam_device : unable to create IPC Logging 3 for bam 0x0000000006044000sps_register_bam_device : unable to create IPC Logging 4 for bam 0x0000000006044000 [ 2.066948] sps:BAM 0x0000000006044000 is registered.[ 2.074580] coresight-tmc 6028000.tmc: TMC initialized [ 2.079400] coresight-tmc 6027000.tmc: TMC initialized [ 2.084530] coresight-funnel 6021000.funnel: FUNNEL initialized [ 2.089589] coresight-funnel 6100000.funnel: FUNNEL initialized [ 2.095382] coresight-funnel 6120000.funnel: FUNNEL initialized [ 2.101312] coresight-funnel 61a1000.funnel: FUNNEL initialized [ 2.107718] coresight-etm4x 619c000.etm: ETM 4.0 initialized [ 2.113428] coresight-etm4x 619d000.etm: ETM 4.0 initialized [ 2.119366] coresight-etm4x 619e000.etm: ETM 4.0 initialized [ 2.125038] coresight-etm4x 619f000.etm: ETM 4.0 initialized [ 2.130317] coresight-replicator-qcom 6026000.replicator: REPLICATOR 1.0 initialized [ 2.136051] coresight-stm 6002000.stm: STM initialized [ 2.144601] of_graph_get_next_endpoint(): no port node found in /soc/hwevent@6101000 [ 2.148487] coresight-hwevent 6101000.hwevent: Hardware Event driver initialized [ 2.158737] Netfilter messages via NETLINK v0.30. [ 2.163683] ip_set: protocol 6 [ 2.168965] NET: Registered protocol family 10 [ 2.171994] NET: Registered protocol family 17 [ 2.175666] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this. [ 2.180115] Bridge firewalling registered [ 2.192827] 8021q: 802.1Q VLAN Support v1.8 [ 2.198339] <CORE> glink_core_register_transport: IPC Logging disabled [ 2.200835] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 2 [ 2.207451] pmd9655_s3: supplied by e-smps1-reg [ 2.214532] msm_glink_smem_native_xprt rx fifo not found [ 2.219192] cpr4_ipq807x_apss_read_fuse_data: apc_corner: speed bin = 0 [ 2.224587] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR fusing revision = 1 [ 2.230939] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR misc fuse value = 0 [ 2.238587] cpr4_ipq807x_apss_read_fuse_data: apc_corner: Voltage boost fuse config = 0 boost = disable [ 2.246078] cpr3_mem_acc_init: apc: not using memory accelerator regulator [ 2.255241] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused SVS: open-loop= 704000 uV [ 2.262189] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused NOM: open-loop= 832000 uV [ 2.272217] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused SVS: quot[ 7]= 684, quot_offset[ 7]= 0 [ 2.281985] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused NOM: quot[ 7]= 927, quot_offset[ 7]= 240 [ 2.292928] cpr3_regulator_init_ctrl: apc: Default CPR mode = closed-loop [ 2.305031] cpufreq: cpufreq_online: CPU0: Running at unlisted freq: 800000 KHz [ 2.310646] cpufreq: cpufreq_online: CPU0: Unlisted initial frequency changed to: 1017600 KHz [ 2.317887] DEV CI test message [ 2.326742] remoteproc remoteproc1: q6v5-wcss is available [ 2.329498] ubi0: attaching mtd12 [ 2.477528] ubi0: scanning is finished [ 2.482777] ubi0: attached mtd12 (name "rootfs", size 35 MiB) [ 2.482798] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes [ 2.487491] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048 [ 2.494272] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096 [ 2.501127] ubi0: good PEBs: 286, bad PEBs: 0, corrupted PEBs: 0 [ 2.507890] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128 [ 2.514148] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 220023969 [ 2.521184] ubi0: available PEBs: 26, total reserved PEBs: 260, PEBs reserved for bad PEB handling: 40 [ 2.530131] ubi0: background thread "ubi_bgt0d" started, PID 118 [ 2.540209] hctosys: unable to open rtc device (rtc0) [ 2.566709] crash_kernel_init, res rsvd1, 50700000, 400000, /reserved-memory/rsvd1@50700000 [ 2.566744] mtd dev crash, size 0x80000 [ 2.574561] crash_kernel_init, crash init, res->start:50700000,crash_buf:0xffffff8001c80000,crash_buf_len 0x7ffe4, crash_avail_sz 0x80000 [ 2.578299] Crash kernel dumper registered ok! [ 2.591003] crash_syslog_init, res rsvd2, 50b00000, 400000, /reserved-memory/rsvd2@50b00000 [ 2.595480] mtd dev crash_syslog, size 0x80000 [ 2.604554] crash_syslog_init, crash init, crash_buf_len 0x3ffe4, crash_avail_sz 0x40000 [ 2.608780] Crash syslog dumper register ok! [ 2.617214] pmd9655_ldo11: disabling [ 2.621940] ALSA device list: [ 2.625153] No soundcards found. [ 2.630327] VFS: Mounted root (squashfs filesystem) readonly on device 31:17. [ 2.631464] Freeing unused kernel memory: 224K (ffffffc00089a000 - ffffffc0008d2000) [ 2.638581] Freeing alternatives memory: 44K (ffffffc0008d2000 - ffffffc0008dd000) [ 2.935965] init: Console is alive [ 2.936084] init: - watchdog - [ 3.048419] random: nonblocking pool is initialized [ 3.966038] kmodloader: loading kernel modules from /etc/modules-boot.d/* [ 3.980412] usbcore: registered new interface driver usbfs [ 3.980467] usbcore: registered new interface driver hub [ 3.984848] usbcore: registered new device driver usb [ 3.991654] Button Hotplug driver version 0.4.1 [ 3.997614] SCSI subsystem initialized [ 4.001518] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 4.003754] ehci-platform: EHCI generic platform driver [ 4.222582] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller [ 4.222622] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 1 [ 4.227114] xhci-hcd xhci-hcd.0.auto: hcc params 0x0220fe65 hci version 0x110 quirks 0x00010010 [ 4.234591] xhci-hcd xhci-hcd.0.auto: irq 190, io mem 0x08a00000 [ 4.243590] hub 1-0:1.0: USB hub found [ 4.249461] hub 1-0:1.0: 1 port detected [ 4.253190] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller [ 4.257081] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 2 [ 4.262446] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM. [ 4.270223] hub 2-0:1.0: USB hub found [ 4.278265] hub 2-0:1.0: 1 port detected [ 4.284576] kmodloader: done loading kernel modules from /etc/modules-boot.d/* [ 4.287594] init: - preinit - Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 7.680458] mount_root: mounting /dev/root [ 7.730303] ubi1: attaching mtd14 [ 7.854413] ubi1: scanning is finished [ 7.876596] ubi1: attached mtd14 (name "overlay", size 30 MiB) [ 7.876624] ubi1: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes [ 7.881331] ubi1: min./max. I/O unit sizes: 2048/2048, sub-page size 2048 [ 7.888175] ubi1: VID header offset: 2048 (aligned 2048), data offset: 4096 [ 7.895041] ubi1: good PEBs: 246, bad PEBs: 0, corrupted PEBs: 0 [ 7.901809] ubi1: user volume: 1, internal volumes: 1, max. volumes count: 128 [ 7.908055] ubi1: max/mean erase counter: 2/0, WL threshold: 4096, image sequence number: 1111721790 [ 7.915098] ubi1: available PEBs: 0, total reserved PEBs: 246, PEBs reserved for bad PEB handling: 40 [ 7.924395] ubi1: background thread "ubi_bgt1d" started, PID 189 UBI device number 1, total 246 LEBs (31236096 bytes, 29.7 MiB), available 0 LEBs (0 bytes), LEB size 126976 bytes (124.0 KiB) ubimkvol: error!: UBI device does not have free logical eraseblo[ 7.953594] UBIFS (ubi1:0): background thread "ubifs_bgt1_0" started, PID 200 cks [ 7.979654] UBIFS (ubi1:0): recovery needed [ 8.071751] UBIFS (ubi1:0): recovery completed [ 8.071839] UBIFS (ubi1:0): UBIFS: mounted UBI device 1, volume 0, name "data" [ 8.075080] UBIFS (ubi1:0): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes [ 8.082303] UBIFS (ubi1:0): FS size: 24379392 bytes (23 MiB, 192 LEBs), journal size 1269760 bytes (1 MiB, 10 LEBs) [ 8.092280] UBIFS (ubi1:0): reserved for root: 1151498 bytes (1124 KiB) [ 8.102517] UBIFS (ubi1:0): media format: w4/r0 (latest is w4/r0), UUID 5BA61A41-3F75-459D-BEB7-8973B32A335B, small LPT model 2116+0 records in 2116+0 records out 2116 bytes (2.1KB) copied, 0.006012 seconds, 343.7KB/s 131072+0 records in 131072+0 records out 131072 bytes (128.0KB) copied, 0.325282 se[ 8.480127] urandom-seed: Seed file not found (/etc/urandom.seed) conds, 393.5KB/s [ 8.876202] procd: - early - [ 8.876249] procd: - watchdog - [ 9.458700] procd: - watchdog - [ 9.458822] procd: - ubus - [ 9.511548] procd: - init - Please press Enter to activate this console. /etc/rc.d/S00sysfixtime: Mon May 11 00:58:56 UTC 2020 /etc/rc.d/S00wifi_fw_mount: 2116+0 records in /etc/rc.d/S00wifi_fw_mount: 2116+0 records out /etc/rc.d/S00wifi_fw_mount: 2116 bytes (2.1KB) copied, 0.006097 seconds, 338.9KB/s /etc/rc.d/S00wifi_fw_mount: 131072+0 records in /etc/rc.d/S00wifi_fw_mount: 131072+0 records out /etc/rc.d/S00wifi_fw_mount: 131072 bytes (128.0KB) copied, 0.331817 seconds, 385.8KB/s /etc/rc.d/S03cgroup_init: mount: mounting none on /dev/cgroup/mem failed: Resource busy /etc/rc.d/S03cgroup_init: mount: mounting none on /dev/cgroup/net_cls failed: Resource busy /etc/rc.d/S03cgroup_init: mount: mounting none on /dev/cgroup/cpu failed: Resource busy /etc/rc.d/S09qca-iot: sh: write error: Invalid argument /etc/rc.d/S09qca-iot: /etc/rc.common: line 154: can't create /sys/class/gpio/gpio/direction: nonexistent directory /etc/rc.d/S09qca-iot: /etc/rc.common: line 154: can't create /sys/class/gpio/gpio/value: nonexistent directory /etc/rc.d/S09qca-iot: /etc/rc.common: line 154: can't create /sys/class/gpio/gpio/value: nonexistent directory /usr/bin/iotd[305]: Started iot daemon [ 10.063008] kmodloader: loading kernel modules from /etc/modules.d/* [ 10.661655] nf_conntrack version 0.5.0 (3144 buckets, 40000 max) [ 10.661684] xqnss: extend init success! [ 10.674178] cfg80211: World regulatory domain updated: [ 10.674204] cfg80211: DFS Master region: unset [ 10.678201] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time) [ 10.682814] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A) [ 10.692374] cfg80211: (2457000 KHz - 2482000 KHz @ 20000 KHz, 92000 KHz AUTO), (N/A, 2000 mBm), (N/A) [ 10.700189] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A) [ 10.709570] cfg80211: (5170000 KHz - 5250000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (N/A) [ 10.717537] cfg80211: (5250000 KHz - 5330000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (0 s) [ 10.727291] cfg80211: (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s) [ 10.736738] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A) [ 10.744804] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A) [ 10.833723] ssdk_switch_device_num_init[998]:INFO:ess-switch dts node number: 1 [ 10.837430] ssdk_dt_get_switch_node[836]:INFO:ess-switch DT exist! [ 10.844338] ssdk_dt_parse_access_mode[737]:INFO:switch_access_mode: local bus [ 10.850505] ssdk_dt_parse_access_mode[750]:INFO:switchreg_base_addr: 0x3a000000 [ 10.857615] ssdk_dt_parse_access_mode[751]:INFO:switchreg_size: 0x1000000 [ 10.864907] ssdk_dt_parse_mac_mode[242]:INFO:mac mode = 0x0 [ 10.871333] ssdk_dt_parse_mac_mode[251]:INFO:mac mode1 = 0xff [ 10.876885] ssdk_dt_parse_mac_mode[260]:INFO:mac mode2 = 0xff [ 10.882639] ssdk_dt_parse_uniphy[279]:INFO:ess-uniphy DT exist! [ 10.888452] ssdk_dt_parse_intf_mac[683]:INFO:dp1 MAC 8c:53:c3:d6:6a:3f [ 10.894268] ssdk_dt_parse_intf_mac[683]:INFO:dp2 MAC 8c:53:c3:b2:64:85 [ 10.900787] ssdk_dt_parse_intf_mac[683]:INFO:dp3 MAC 8c:53:c3:d6:6a:3f [ 10.907290] ssdk_dt_parse_intf_mac[683]:INFO:dp4 MAC 8c:53:c3:d6:6a:3f [ 10.913800] ssdk_dt_parse_intf_mac[683]:INFO:dp5 MAC 8c:53:c3:d6:6a:3f [ 10.920335] ssdk_plat_init start [ 11.000532] ssdk_ppe_clock_init[464]:INFO:ppe and uniphy clock init successfully! [ 11.003692] ssdk_probe[1884]:INFO:ess_rst doesn't exist! [ 11.010926] HPPE initializing... [ 11.012264] malibu_phy_api_ops_init[2851]:INFO:qca probe malibu phy driver succeeded! [ 11.023336] regi_init[3411]:INFO:Initializing HPPE!! [ 11.238458] ssdk_ppe_reset_init[738]:INFO:ppe reset successfully! [ 11.245643] qca_hppe_tdm_hw_init[737]:INFO:tdm setup num=96 [ 11.248918] qca_hppe_portctrl_hw_init[165]:INFO:Hawkeye PPE port initializing [ 11.464565] ssdk_switch_register[1623]:INFO:Chip version 0x1500 [ 11.467546] qca_link_polling_select[1285]:INFO:link-polling-required node does not exist [ 11.473784] ssdk_switch_register[1648]:INFO:polling is selected [ 11.481515] regi_init[3415]:INFO:Initializing HPPE Done!! [ 11.486434] regi_init[3459]:INFO:qca-ssdk module init succeeded! [ 11.494086] tun: Universal TUN/TAP device driver, 1.6 [ 11.494881] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com> [ 11.502756] EDMA ver 1 hw init [ 11.506125] EDMA HW Reset completed succesfully [ 11.509041] Num rings - TxDesc:1 (23-23) TxCmpl:1 (7-7) [ 11.513372] RxDesc:1 (15-15) RxFill:1 (7-7) [ 11.522971] ********************************************************** [ 11.522998] * NSS Data Plane driver [ 11.529436] ********************************************************** [ 11.536165] l2tp_core: L2TP core driver, V2.0 [ 11.540085] l2tp_netlink: L2TP netlink interface [ 11.701293] nss_driver - fw of size 667888 bytes copied to load addr: 40000000, nss_id : 0 [ 11.703242] Supported Frequencies - [ 11.708481] 187.2 MHz 748.8 MHz [ 11.714422] 1.4976 GHz [ 11.715380] [ 11.717894] ffffffbffc62b680: meminfo init succeed [ 11.756285] node size 2 # items 4 [ 11.756313] memory: 40000000 536870912 (avl 435531776) items 4 active_cores 2 [ 11.758606] ffffffbffc62b680: nss core 0 booted successfully [ 11.762223] nss_driver - fw of size 265296 bytes copied to load addr: 40800000, nss_id : 1 [ 11.763041] Supported Frequencies - [ 11.763042] 187.2 MHz [ 11.763043] 748.8 MHz [ 11.763043] 1.4976 GHz [ 11.763044] [ 11.763219] ffffffbffc632780: meminfo init succeed [ 11.792338] node size 2 # items 4 [ 11.796507] memory: 40000000 536870912 (avl 435646464) items 4 active_cores 2 [ 11.799921] ffffffbffc632780: nss core 1 booted successfully [ 11.808386] sit: IPv6 over IPv4 tunneling driver [ 11.815115] nat46: module (version 8ff2ae59ec9840a7b8b45f976c51cae80abe0226) loaded. [ 11.818046] gre: GRE over IPv4 demultiplexor driver [ 11.826049] ip_gre: GRE over IPv4 tunneling driver [ 11.831501] ip6_gre: GRE over IPv6 tunneling driver [ 11.837654] Ethernet Channel Bonding Driver: v3.7.1 (April 27, 2011) [ 11.842332] QCA multicast snooping installed successfully [ 11.848389] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 13.700598] QCA Hy-Fi multicast installation successfully [ 14.368995] nss_lag_init[354]:LAG Manager Installed [ 14.930104] PPP generic driver version 2.4.2 [ 14.930834] NET: Registered protocol family 24 [ 15.259852] <NSS-CRYPTO>:module loaded Build_ID - 05/08/20, 17:25:24 SoC=ipq807x_64 [ 15.480350] cannot find nss-macsec0 node [ 15.480415] cannot find nss-macsec1 node [ 15.483360] cannot find nss-macsec2 node [ 15.487238] nss_macsec init success [ 15.851683] diag: IPC Logging disabled [ 18.599097] u32 classifier [ 18.599116] input device check on [ 18.600685] Actions configured [ 19.079063] Mirror/redirect action on [ 24.059806] ipaccount: ifname [lo] event[5] [ 24.059832] ipaccount: ifname [miireg] event[5] [ 24.062793] ipaccount: ifname [eth0] event[5] [ 24.067302] ipaccount: ifname [eth1] event[5] [ 24.071839] ipaccount: ifname [eth2] event[5] [ 24.076155] ipaccount: ifname [eth3] event[5] [ 24.080505] ipaccount: ifname [eth4] event[5] [ 24.084836] ipaccount: ifname [ip6tnl0] event[5] [ 24.089184] ipaccount: ifname [sit0] event[5] [ 24.093864] ipaccount: ifname [gre0] event[5] [ 24.098120] ipaccount: ifname [gretap0] event[5] [ 24.102467] ipaccount: ifname [ip6gre0] event[5] [ 24.107146] ipaccount: ifname [bond0] event[5] [ 24.111754] ipaccount: ifname [teql0] event[5] [ 24.320891] fuse init (API version 7.23) [ 24.541716] ip_tables: (C) 2000-2006 Netfilter Core Team [ 24.544144] l2tp_ppp: PPPoL2TP kernel driver, V2.0 [ 24.813230] PPP MPPE Compression module registered [ 24.814247] PPTP driver version 0.8.5 [ 24.821025] ipt: xt_cgroup_MARK installed ok. [ 24.831769] xt_time: kernel timezone is -0000 [ 24.841205] kmodloader: done loading kernel modules from /etc/modules.d/* /etc/rc.d/S10boot: uci: Entry not found /etc/rc.d/S10boot: uci: Entry not found /etc/rc.d/S10boot: uci: Entry not found [ 25.282052] ipaccount: ifname [bond0] event[11] /etc/rc.d/S15qca-wpa-supplicant: Successfully initialized wpa_supplicant /etc/rc.d/S16qca-ssdk: /etc/rc.d/S16qca-ssdk: starting /etc/rc.d/S19dnsmasq: cp: can't stat '/etc/dnsmasq.d/*': No such file or directory /etc/rc.d/S19dnsmasq: sh: out of range /etc/rc.d/S19dnsmasq: sh: out of range /etc/rc.d/S19firewall: /etc/rc.common: line 1: /usr/sbin/firewall.webinitrdr: not found [ 27.603607] ECM init [ 27.603663] ECM database jhash random seed: 0xf744a757 [ 27.605894] qcaecm: register ecm_nss_ipv4_post_routing_hook() [ 27.610027] ECM init complete /etc/rc.d/S19qca-nss-ecm: net.bridge.bridge-nf-call-ip6tables = 1 /etc/rc.d/S19qca-nss-ecm: net.bridge.bridge-nf-call-iptables = 1 /etc/rc.d/S19qca-nss-ecm: dev.nss.general.redirect = 1 /etc/rc.d/S21nginx: start fcgi-cgi by spawn-fcgi. /etc/rc.d/S21nginx: start nginx ok. lbd: stopping daemon /etc/init.d/network: Command failed: Not found /etc/init.d/network: killall: iface-mgr: no process killed [ 28.235695] ipaccount: ifname [br-lan] event[16] [ 28.236612] ipaccount: ifname [br-lan] event[5] [ 28.240223] ipaccount: ifname [eth2] event[13] [ 28.244725] ipaccount: ifname [eth2] event[1] [ 28.250788] ipaccount: ifname [eth2] event[20] [ 28.252773] ipaccount: ifname [eth2] event[26] [ 28.258041] ipaccount: ifname [eth2] event[21] [ 28.261592] ipaccount: ifname [eth2] event[11] [ 28.266054] device eth2 entered promiscuous mode [ 28.270791] ipaccount: ifname [br-lan] event[11] [ 28.275626] ipaccount: ifname [br-lan] event[8] [ 28.279817] ipaccount: ifname [eth2] event[27] [ 28.284441] ipaccount: ifname [br-lan] event[8] [ 28.288532] ipaccount: ifname [br-lan] event[13] [ 28.292797] br-lan: port 1(eth2) entered forwarding state [ 28.297674] br-lan: port 1(eth2) entered forwarding state [ 28.303184] ipaccount: ifname [br-lan] event[1] /etc/init.d/network: killall: acfg_tool: no process killed /etc[ 28.312746] ipaccount: ifname [eth3] event[13] [ 28.319168] ipaccount: ifname [eth3] event[1] [ 28.326438] ipaccount: ifname [eth3] event[20] [ 28.327328] ipaccount: ifname [eth3] event[26] [ 28.334731] ipaccount: ifname [eth3] event[21] [ 28.336128] ipaccount: ifname [eth3] event[11] [ 28.342017] device eth3 entered promiscuous mode [ 28.348788] br-lan: port 2(eth3) entered forwarding state [ 28.349556] br-lan: port 2(eth3) entered forwarding state [ 28.355079] ipaccount: ifname [eth3] event[27] [ 28.362040] ipaccount: ifname [eth4] event[13] /init.d/network: /sbin/wifi: eval: line 1: /usr/sbin/acfg_tool: [ 28.369623] ipaccount: ifname [eth4] event[1] [ 28.375367] ipaccount: ifname [eth4] event[20] [ 28.379291] ipaccount: ifname [eth4] event[26] [ 28.383683] ipaccount: ifname [eth4] event[21] [ 28.387902] ipaccount: ifname [eth4] event[11] [ 28.392414] device eth4 entered promiscuous mode [ 28.396774] br-lan: port 3(eth4) entered forwarding state [ 28.401444] br-lan: port 3(eth4) entered forwarding state [ 28.406942] ipaccount: ifname [eth4] event[27] [ 28.413346] ipaccount: ifname [eth1] event[13] [ 28.417226] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready [ 28.421077] ipaccount: ifname [eth1] event[1] [ 28.427258] ipaccount: ifname [lo] event[13] [ 28.431613] ipaccount: ifname [lo] event[1] not found qcawificfg80211 disable radio wifi0 qcawificfg80211 disable radio wifi1 qcawificfg80211 disable radio wifi2 /etc/rc.d/S49messagingagent.sh: start messagingagent ok. /etc/init.d/network: device: wifi0 vifs: cfg023579 /etc/init.d/network: device: wifi1 vifs: cfg043579 /etc/init.d/network: device: wifi2 vifs: cfg063579 /etc/init.d/network: killall: acfg_tool: no process killed /etc/init.d/network: /sbin/wifi: eval: line 1: /usr/sbin/acfg_tool: not found qcawificfg80211: enable radio wifi0 /etc/init.d/network: cp: omitting directory '/cfg/default/internal' /etc/rc.d/S51cp_preinstall_plugins.sh: ls: /usr/share/datacenter/appdata/notuninstallable/app_infos: No such file or directory /etc/init.d/network: cat: can't open '/lib/wifi/wifi_nss_hk_olnum': No such file or d[ 28.853804] configuring additional NSS pbufs irectory /etc/init.d/network: sh: 3: unknown operand [ 28.869300] additional pbufs of size 3100672 got added to NSS [ 28.896498] mem_manager: module license 'unspecified' taints kernel. [ 28.896530] Disabling lock debugging due to kernel taint [ 28.904144] __mm_init_module [ 28.930097] qdf_dbg_mask value is invalid [ 28.930126] Using the default module debug levels instead [ 28.933087] qdf_print_ctrl_register: Allocated print control object 0 [ 28.938605] MINIDUMP VA .bss start=ffffffbffce5af00 module=qdf [ 29.248947] br-lan: port 1(eth2) entered disabled state [ 29.249084] ipaccount: ifname [eth2] event[4] [ 29.253289] ipaccount: ifname [br-lan] event[4] [ 29.257792] br-lan: port 2(eth3) entered disabled state [ 29.262403] ipaccount: ifname [eth3] event[4] [ 29.267771] br-lan: port 3(eth4) entered disabled state [ 29.271982] ipaccount: ifname [eth4] event[4] [ 29.277014] ipaccount: ifname [eth1] event[4] [ 29.500027] wlan: [2900:E:CONFIG] cfg_uint_item_handler: 171: gScanProbeRepeatTime=50 - Out of range [0, 30]; Using 50 [ 29.500125] MINIDUMP VA .bss start=ffffffbffd0e9280 module=umacINFO: Cold boot calibration not applicable: ap-ac04 [ 29.690728] [ 29.690728] MINIDUMP VA .bss start=ffffffbffd374880 module=qca_ol=======ol_if_register_wifi3_0========== [ 29.708029] wlan: [3324:I:ANY] osif_nss_register_module: 90: NSS wifi ops registered for target_type:1 with soc_ops:ffffffbffd4a87f0 [ 29.710800] remoteproc remoteproc0: powering up q6v5-m3 [ 29.739240] remoteproc remoteproc0: Booting fw image IPQ8074/m3_fw.mdt, size 284 [ 29.739278] Sanity check passed for M3 image [ 29.825844] remoteproc remoteproc0: remote processor q6v5-m3 is now up [ 29.826082] <SSR>: glink SUBSYS_BEFOER_POWERUP reinit done [ 29.831465] wlan: [3324:I:ANY] ol_ath_ahb_ssr: 183: ol_ath_ahb_ssr: SSR event 2 [ 29.836848] remoteproc remoteproc1: powering up q6v5-wcss [ 29.844353] remoteproc remoteproc1: Booting fw image IPQ8074/q6_fw.mdt, size 668 [ 29.849946] Sanity check passed for the image [ 30.248572] ipaccount: ifname [br-lan] event[4] /etc/rc.d/S51key_services_boot_check: @@@@@@ R3600 key_service_check skip wireless! [ 30.954008] glink_core_link_up glink is up [ 30.954202] glink_xprt_open_event [ 30.954335] Subsystem error monitoring/handling services are up [ 30.954376] remoteproc remoteproc1: remote processor q6v5-wcss is now up [ 30.954546] wlan: [3324:I:ANY] ol_ath_ahb_ssr: 183: ol_ath_ahb_ssr: SSR event 3 [ 30.973181] IPC_RTR: ipc_router_create_log_ctx: IPC Logging disabled [ 30.981120] diag: In diag_send_feature_mask_update, control channel is not open, p: 2, ffffffbffc911248 [ 30.990903] cnss: QMI WLFW service connected, state: 0x1 [ 30.997140] cnss: device_id : 0xfffe mem mode : [1] [ 31.002265] cnss: Boardid from dts:292,FW:ff [ 31.013807] cnss: BDF location : 0x000000004b0c0000 [ 31.013836] cnss: BDF IPQ8074/bdwlan.b292 size 131072 [ 31.017927] cnss: BDF download response , result: 0, err: 0x0 [ 31.023437] cnss: per device BDF location : 0x000000004b0e0000 [ 31.028908] cnss: CALDATA IPQ8074/caldata.bin size 131072 offset 0x20000 [ 31.036527] cnss: BDF download response , result: 0, err: 0x0 /etc/rc.d/S54hyfi-bridging: /etc/rc.common: .: line 13: can't open '/lib/functions/hyfi-debug.sh' [ 31.055227] wlan: [3324:I:ANY] pld_ahb_wlan_enable: 689: cnss_mode: Mission mode [ 31.064064] wlan: [3324:I:ANY] qca_napi_create: 357: qca_napi_create: napi instance 0 created on pipe 4 [ 31.064367] wlan: [3324:I:ANY] __ol_ath_attach: 3064: Allocated soc ffffffc016480880 [ 31.072386] btcoex_support 0 wlan_prio_gpio 0 [ 31.080373] wlan: [3324:E:CONFIG] cfg_uint_item_handler: 171: dp_int_timer_threshold_tx=1000 - Out of range [8, 100]; Using 1000 [ 31.084635] wlan: [3324:E:CONFIG] cfg_uint_item_handler: 171: dp_rxdma_monitor_desc_ring=128 - Out of range [4096, 16384]; Using 4096 [ 31.096333] wlan: [3324:I:ANY] osif_nss_wifi_soc_setup: 186: nss-wifili:#1 register wifili function for soc [ 31.108078] wlan: [3324:I:ANY] osif_nss_wifi_soc_setup: 198: nss register id -1 nss config 3 Target Type 18 [ 31.118002] wlan: [3324:I:ANY] __ol_ath_attach: 3278: dev name soc0 [ 31.127937] wlan: [3324:I:ANY] ol_ath_soc_attach: 6553: WMI attached. wmi_handle ffffffc017af8400 [ 31.133886] wlan: [3324:I:ANY] htc_wmi_init: 5920: htc_wmi_init() HT Create . ffffffc0166fe000 [ 31.142783] wlan: [3324:I:ANY] htc_wmi_init: 5927: htc_wmi_init() Skipping BMI Done. [ 31.151353] wlan: [3324:I:ANY] htc_wmi_init: 5984: [htc_wmi_init:5984] host_enable 0 nss_nwifi_offload 0 [ 31.162847] wlan: [3324:I:ANY] ol_target_init_complete: 6102: CDP soc attach success [ 31.168831] wlan: [3324:I:ANY] ol_target_init_complete: 6109: Soc attach success NSS config 0 [ 31.176926] wlan: [3324:I:ANY] htc_set_async_ep: 428: htc_set_async_ep: htc_handle ffffffc0166fe000, ep 2, value 1 [ 31.185777] wlan: [3324:I:ANY] htc_set_async_ep: 428: htc_set_async_ep: htc_handle ffffffc0166fe000, ep 3, value 1 [ 31.195838] wlan: [103:I:TIF] HE_CAP Info = 1a08010d [ 31.205763] wlan: [103:I:TIF] Num HW modes = 1 [ 31.210887] wlan: [103:I:TIF] Num PHY = 2 [ 31.215120] wlan: [103:I:TIF] Preferred HW Mode = 1 Num Radios = 2 [ 31.219116] wlan: [103:I:TIF] init_deinit_add_11ax_modes: 1403: Adding 11ax regulatory modes, [ 31.225304] wlan: [103:I:TIF] init_deinit_add_11ax_modes: 1406: phy_id = 0 wireless modes = f97f9001 [ 31.233940] wlan: [103:I:TIF] init_deinit_add_11ax_modes: 1403: Adding 11ax regulatory modes, [ 31.243173] wlan: [103:I:TIF] init_deinit_add_11ax_modes: 1406: phy_id = 1 wireless modes = 680680c [ 31.252962] wlan: [103:I:dfs] WLAN_DEBUG_DFS_ALWAYS : wlan_dfs_pdev_obj_create_notification: 390: dfs_offload 1 [ 31.260925] wlan: [103:I:dfs] WLAN_DEBUG_DFS_ALWAYS : dfs_agile_soc_obj_init: 1038: dfs->dfs_psoc_idx: 0 [ 31.270649] wlan: [103:I:dfs] WLAN_DEBUG_DFS_ALWAYS : dfs_agile_soc_obj_init: 1044: dfs_soc_obj->num_dfs_privs: 1 [ 31.280761] wlan: [103:I:dfs] WLAN_DEBUG_DFS_ALWAYS : wlan_dfs_pdev_obj_create_notification: 362: Do not allocate DFS object for 2G, pdev_id = 1 [ 31.298395] wlan: [103:I:TIF] init_deinit_update_pdev_tgt_info: 1064: CDP PDEV ATTACH success [ 31.305889] wlan: [103:I:TIF] init_deinit_update_pdev_tgt_info: 1064: CDP PDEV ATTACH success /etc/rc.d/S60iweventd: iwevent-call start ok /etc/rc.d/S77trafficd: refresh ifname into ipaacount in [lan-dev 5g-wl 2.4g-wl wl-guest[ 31.363672] ipaccount: refresh dev ifname to [eth2 eth3 eth4 wl0 wl1 wl14] [ 31.367878] ipaccount: landev_init_all() add dev [eth2] is_wireless: 0. [ 31.374870] ipaccount: landev_init_all() add dev [eth3] is_wireless: 0. [ 31.381484] ipaccount: landev_init_all() add dev [eth4] is_wireless: 0. [ 31.388012] ipaccount: landev_init_all() get dev [wl0] not found. [ 31.394674] ipaccount: landev_init_all() get dev [wl1] not found. [ 31.400948] ipaccount: landev_init_all() get dev [wl14] not found. [ 31.412690] wlan: [103:I:ANY] copy_fw_abi_version_tlv: 6258: copy_fw_abi_version_tlv: INIT_CMD version: 1, 0, 0x5f414351, 0x4c4d, 0x0, 0x0 ] /etc/rc.d/S77trafficd: eth2 eth3 eth4 wl0 wl1 wl14 /etc/rc.d/S77trafficd: trafficd start ok /etc/rc.d/S80datacenter: chmod: /userdisk/data: Read-only file system [ 31.544029] wlan: [103:I:ANY] dp_peer_map_attach_wifi3: 9979: dp_peer_map_attach_wifi3 max_peers 311, max_ast_index: 1040 [ 31.544029] [ 31.544153] wlan: [103:I:ANY] ready_extract_init_status_tlv: 8002: ready_extract_init_status_tlv:0 [ 31.558609] wlan: [3324:I:ANY] ol_ath_connect_htc: 1219: WMI is ready [ 31.621251] wlan: [3324:E:WMI] wmi_unified_register_event_handler: Event id 37 is unavailable [ 31.621293] wlan: [3324:E:WMI] wmi_unified_register_event_handler: Event id 141 is unavailable [ 31.629310] wlan: [3324:E:WMI] wmi_unified_register_event_handler: Event id 137 is unavailable [ 31.638238] wlan: [3324:I:ANY] ol_ath_soc_attach: 6627: connect HTC [ 31.646147] wlan: [3324:I:ANY] ol_ath_soc_attach: 6628: bypasswmi : 0 [ 31.652261] wlan: [3324:E:WMI] wmi_unified_register_event_handler: Event id 38 is unavailable [ 31.658756] wlan: [3324:E:WMI] wmi_unified_register_event_handler: Event id 138 is unavailable [ 31.667184] wlan: [3324:E:WMI] wmi_unified_register_event_handler: Event id 139 is unavailable [ 31.676119] wlan: [3324:E:WMI] wmi_unified_register_event_handler: Event id 55 is unavailable [ 31.684784] wlan: [3324:E:WMI] wmi_unified_register_event_handler: Event id 49 is unavailable [ 31.693288] wlan: [3324:E:WMI] wmi_unified_register_event_handler: Event id 25 is unavailable [ 31.701710] wlan: [3324:I:ANY] ol_ath_soc_attach: 6703: ol_ath_soc_attach() UMAC attach . [ 31.711225] wlan: [3324:I:ANY] ath_lowi_if_netlink_init: 177: ath_lowi_if_netlink_init LOWI Netlink successfully created [ 31.718373] wlan: [3324:I:ANY] __ol_ath_attach: 3392: pdev_netdev name wifi0 [ 31.729281] wlan: [3324:I:ANY] __ol_ath_attach: 3437: Skip txrx_pdev_attach_target [ 31.736134] wlan: [3324:I:ANY] __ol_ath_attach: 3461: BURSTING enabled by default [ 31.743828] wlan: [3324:I:ANY] ol_ath_pdev_attach: 7168: interface_id 0 [ 31.751380] wlan: [3324:I:ANY] ol_ath_pdev_regdmn_init: 6857: phy id = 0 Modes supported [ 31.757599] wlan: [3324:I:ANY] ol_ath_pdev_regdmn_init: 6864: 11b = 0 11g = 0 11a = 1 11n = 1 11ac = 1 11ax = 1 [ 31.766249] wlan: [3324:I:ANY] ol_ath_pdev_regdmn_init: 6872: Reg cap - phy_id = 0 supp_bnd = 2, modes = f97f9001, lo_2g = 0, hi_2g = 0 lo_g5 = 4910, hi_5g = 6100 [ 31.776242] wlan: [3324:I:ANY] ol_ath_update_wireless_modes: 1318: wireless_modes = f97f9001 before update [ 31.790647] wlan: [3324:I:ANY] ol_ath_update_wireless_modes: 1333: Wireless_modes = f97f9001 after update [ 31.800519] wlan: [3324:I:ANY] ol_ath_update_ext_caps: 1841: 11ax 5G supported case [ 31.809934] wlan: [3324:I:ANY] ol_resmgr_create: 223: OL Resmgr Init-ed [ 31.817201] ieee80211_cbs_init CBS Inited [ 31.826878] wlan: [3324:I:ANY] acfg_attach: 3457: acfg_attach: 3457: Netlink socket created:ffffffc0179fa000 [ 31.827731] wlan: [3324:I:ANY] ol_if_eeprom_attach: 1459: rate power table override is only supported for AR98XX [ 31.837872] wlan: [3324:I:ANY] ol_ath_stats_attach: 2071: periodic_chan_stats: 1 [ 31.850187] wlan: [3324:I:ANY] wlan_scan_update_channel_list: 1090: num_chan: 25 [ 31.855414] wlan: [0:I:ANY] ol_ath_pdev_attach: 7504: Set global_ic[1], ptr:ffffffbffd0e95e0 [ 31.862762] wlan: [0:I:ANY] dp_lag_soc_enable: 88: pdev(ffffffc0178fc008) Enabling DBDC Repeater 1 [ 31.871243] wlan: [0:I:ANY] dp_lag_pdev_set_primary_radio: 44: pdev(ffffffc0178fc008) is_primary 1 [ 31.871275] wlan: [0:E:NSS] [nss-wifili]: NSS Wifili DBDC Repeater enable message passed [ 31.889070] wlan: [3324:I:ANY] ol_ath_pdev_attach: 7621: Pdev = 0 Number of peers = 137 [ 31.897788] wlan: [0:I:ANY] ol_ath_twt_enable_complete_event_handler: 11862: twt enabled. [ 31.897788] [ 31.900578] wlan: [3324:I:ANY] ol_ath_pri20_cfg_blockchanlist_parse: 583: ( 1) chan 36 blocked from cfg [ 31.900584] wlan: [3324:I:ANY] ol_ath_pri20_cfg_blockchanlist_parse: 583: ( 2) chan 132 blocked from cfg [ 31.900616] wlan: [3324:I:ANY] osif_wrap_attach: 239: osif wrap attached [ 31.900616] [ 31.900620] wlan: [3324:I:ANY] osif_wrap_devt_init: 201: osif wrap dev table init done [ 31.900620] [ 31.900627] wlan: [3324:I:ANY] osif_wrap_attach: 247: Wrap Attached: Wrap_com =ffffffc017afb000 ic->ic_wrap_com=ffffffc017afb000 &wrap_com->wc_devt=ffffffc017afb000 [ 31.900627] [ 31.900654] wlan: [3324:I:ANY] __ol_ath_attach: 3641: needed_headroom reservation 60 [ 31.900659] wlan: [3324:I:ANY] ol_ath_enable_fraglist: 2931: Enabled Fraglist bit for the radio wifi0 features 41 [ 31.900725] wlan: [3324:I:ANY] wlan_cfg80211_init: 9619: Number of 5G channels: 25 [ 31.900990] wlan: [3324:I:ANY] ieee80211_cfg80211_radio_attach: 9713: ic: 0xffffffc014860880, wdev: 0xffffffc014870a70, wiphy: 0xffffffc0166c62a0, netdev: 0xffffffc014860000 [ 31.901057] ipaccount: ifname [wifi0] event[16] [ 31.901496] ipaccount: ifname [wifi0] event[5] [ 31.901744] wlan: [3324:I:ANY] __ol_ath_attach: 3392: pdev_netdev name wifi1 [ 31.901763] wlan: [3324:I:ANY] __ol_ath_attach: 3437: Skip txrx_pdev_attach_target [ 31.901767] wlan: [3324:I:ANY] __ol_ath_attach: 3461: BURSTING enabled by default [ 31.901829] wlan: [3324:I:ANY] ol_ath_pdev_attach: 7168: interface_id 1 [ 31.901844] wlan: [3324:I:ANY] ol_ath_pdev_regdmn_init: 6857: phy id = 1 Modes supported [ 31.901850] wlan: [3324:I:ANY] ol_ath_pdev_regdmn_init: 6864: 11b = 1 11g = 1 11a = 0 11n = 1 11ac = 1 11ax = 1 [ 31.901857] wlan: [3324:I:ANY] ol_ath_pdev_regdmn_init: 6872: Reg cap - phy_id = 1 supp_bnd = 1, modes = 680680c, lo_2g = 2312, hi_2g = 2732 lo_g5 = 0, hi_5g = 0 [ 31.901861] wlan: [3324:I:ANY] ol_ath_update_wireless_modes: 1318: wireless_modes = 680680c before update [ 31.901865] wlan: [3324:I:ANY] ol_ath_update_wireless_modes: 1333: Wireless_modes = 680680c after update [ 31.901870] wlan: [3324:I:ANY] ol_ath_update_ext_caps: 1849: 11ax 2G supported case [ 31.902000] wlan: [3324:I:ANY] ol_resmgr_create: 223: OL Resmgr Init-ed [ 31.902078] ieee80211_cbs_init CBS Inited [ 31.902095] wlan: [3324:I:ANY] acfg_attach: 3432: Offload using existing sock ffffffc0179fa000 [ 31.902106] wlan: [3324:I:ANY] ol_if_eeprom_attach: 1459: rate power table override is only supported for AR98XX [ 31.902111] wlan: [3324:I:ANY] ol_ath_stats_attach: 2071: periodic_chan_stats: 1 [ 31.902335] wlan: [3324:I:ANY] wlan_scan_update_channel_list: 1090: num_chan: 11 [ 31.902365] wlan: [0:I:ANY] ol_ath_pdev_attach: 7504: Set global_ic[2], ptr:ffffffbffd0e95e0 [ 31.902372] wlan: [0:I:ANY] dp_lag_soc_enable: 88: pdev(ffffffc0178fca08) Enabling DBDC Repeater 1 [ 31.902404] wlan: [0:I:ANY] dp_lag_pdev_set_primary_radio: 44: pdev(ffffffc0178fca08) is_primary 0 [ 31.902417] wlan: [3324:I:ANY] ol_ath_pdev_attach: 7621: Pdev = 1 Number of peers = 137 [ 31.903815] wlan: [3324:E:WMI] event handler already registered 0x6019 [ 31.904784] wlan: [3324:I:ANY] ol_ath_pri20_cfg_blockchanlist_parse: 583: ( 1) chan 36 blocked from cfg [ 31.904789] wlan: [3324:I:ANY] ol_ath_pri20_cfg_blockchanlist_parse: 583: ( 2) chan 132 blocked from cfg [ 31.904820] wlan: [3324:I:ANY] osif_wrap_attach: 239: osif wrap attached [ 31.904820] [ 31.904825] wlan: [3324:I:ANY] osif_wrap_devt_init: 201: osif wrap dev table init done [ 31.904825] [ 31.904834] wlan: [3324:I:ANY] osif_wrap_attach: 247: Wrap Attached: Wrap_com =ffffffc00f0f4400 ic->ic_wrap_com=ffffffc00f0f4400 &wrap_com->wc_devt=ffffffc00f0f4400 [ 31.904834] [ 31.904866] wlan: [3324:I:ANY] __ol_ath_attach: 3641: needed_headroom reservation 60 [ 31.904872] wlan: [3324:I:ANY] ol_ath_enable_fraglist: 2931: Enabled Fraglist bit for the radio wifi1 features 41 [ 31.904899] wlan: [3324:I:ANY] wlan_cfg80211_init: 9607: Number of 2G channels: 11 [ 31.905115] wlan: [3324:I:ANY] ieee80211_cfg80211_radio_attach: 9713: ic: 0xffffffc0148a0880, wdev: 0xffffffc0148b0a70, wiphy: 0xffffffc0184ebaa0, netdev: 0xffffffc0148a0000 [ 31.905171] ipaccount: ifname [wifi1] event[16] [ 31.905641] ipaccount: ifname [wifi1] event[5] [ 31.905837] ipaccount: ifname [soc0] event[16] [ 31.906133] ipaccount: ifname [soc0] event[5] [ 31.906217] wlan: [3324:I:ANY] wlan_pdev_operation: 729: num_radios=1, wifi_radios[0].sc = ffffffc014860880_radio_type = 2 [ 31.906223] wlan: [3324:I:ANY] wlan_pdev_operation: 729: num_radios=2, wifi_radios[1].sc = ffffffc0148a0880_radio_type = 2 [ 31.906259] wlan: [3324:I:ANY] init_ath_pci_3_0: 151: 6ath_ol_pci_wifi3.0: (Atheros/multi-bss) [ 31.927290] [ 31.927290] MINIDUMP VA .bss start=ffffffbffd4a8c00 module=wifi_3_0 [ 31.927290] wlan: [4202:I:ANY] osif_nss_register_module: 90: NSS wifi ops registered for target_type:0 with soc_ops:ffffffbffd571858 [ 31.927298] wlan: [4202:I:ANY] osif_nss_register_module: 90: NSS wifi ops registered for target_type:0 with soc_ops:ffffffbffd571858 [ 31.927882] wlan: [4202:I:ANY] init_ath_pci_2_0: 143: 6ath_ol_pci_2_0: (Atheros/multi-bss) [ 31.928029] ath_ol_pci_2_0 0000:01:00.0: enabling device (0000 -> 0002) [ 32.081146] wlan: [4202:I:ANY] hif_set_hia_extnd: 1537: [ 32.081146] CLOCK PLL skipped [ 32.083265] wlan: [4202:E:HIF] hif_pci_configure_legacy_irq: X, ret = 0 [ 32.083286] wlan: [4202:I:ANY] qca_napi_create: 357: qca_napi_create: napi instance 32 created on pipe 4 [ 32.083578] wlan: [4202:I:ANY] __ol_ath_attach: 3064: Allocated soc ffffffc00e980880 [ 32.083660] btcoex_support 0 wlan_prio_gpio 0 [ 32.418524] wlan: [0:E:NSS] [nss-wifili]: NSS Wifili DBDC Repeater enable message passed [ 32.419135] wlan: [0:I:ANY] ol_ath_twt_enable_complete_event_handler: 11862: twt enabled. [ 32.419135] [ 32.433373] wlan: [4202:I:ANY] osif_nss_wifi_soc_setup: 198: nss register id -1 nss config 3 Target Type 7 [ 32.435165] wlan: [4202:I:ANY] __ol_ath_attach: 3278: dev name soc1 [ 32.445122] wlan: [4202:I:ANY] ol_target_init: 2459: 6ol_target_init() BMI inited. [ 32.451433] wlan: [4202:I:ANY] ol_target_init: 2473: 6ol_target_init() BMI Get Target Info. [ 32.459060] wlan: [4202:I:ANY] ol_target_init: 2480: Chip id: 0x7, chip version: 0x4100016d [ 32.467351] wlan: [4202:I:ANY] ol_ath_host_config_update: 4688: 6 [ 32.467351] CE WAR Disabled [ 32.467351] [ 32.475760] wlan: [4202:I:ANY] ol_ath_configure_target: 564: 6NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0 [ 32.486990] wlan: [4202:I:ANY] ol_target_init: 2502: 6ol_target_init() configure Target . [ 32.496280] wlan: [4202:I:ANY] ol_transfer_bin_file: 1407: ol_transfer_bin_file: flash data file defined [ 32.504619] wlan: [4202:I:ANY] ol_transfer_bin_file: 1552: ol_transfer_bin_file[1552] Get Caldata for soc1. [ 32.514187] wlan: [4202:I:ANY] qc98xx_verify_checksum: 805: qc98xx_verify_checksum: flash checksum passed: 0xd3eb [ 32.524026] wlan: [4202:I:ANY] ol_transfer_bin_file: 1607: ol_transfer_bin_file 1607: Download Flash data len 2116 [ 32.534056] wlan: [4202:I:ANY] ol_transfer_bin_file: 1719: 6Board extended Data download address: 0x0 [ 32.550480] wlan: [4202:I:ANY] ol_download_cal_data: 1898: ol_download_cal_data: Board data file: 4 successfully downloaded, download address: 0000000000401cc0 [ 32.553229] wlan: [4202:I:ANY] ol_transfer_bin_file: 1147: 6 [ 32.553229] Mission mode: Firmware CHIP Version 0 [ 32.569280] wlan: [4202:I:ANY] ol_transfer_bin_file: 1215: ol_transfer_bin_file: Downloading firmware file: AR9887/athwlan.bin /etc/rc.d/S96scan: FAIL [ 32.624705] wlan: [4202:I:ANY] ol_transfer_bin_file: 1435: 6ol_transfer_bin_file 1435: downloading file 1, Download data len 234392 /etc/rc.d/S98miqos: { /etc/rc.d/S98miqos: status=0 /etc/rc.d/S98miqos: data=ok /etc/rc.d/S98miqos: } [ 33.626611] wlan: [4202:I:ANY] ol_target_init: 2511: 6ol_target_init() Download FW done. [ 33.626785] wlan: [4202:I:ANY] ol_ath_soc_attach: 6553: WMI attached. wmi_handle ffffffc00f0f7400 [ 33.633867] wlan: [4202:E:WMI] wmi_unified_register_event_handler: Event id 144 is unavailable [ 33.642764] wlan: [4202:E:WMI] wmi_unified_register_event_handler: Event id 62 is unavailable [ 33.651365] wlan: [4202:E:WMI] wmi_unified_register_event_handler: Event id 151 is unavailable [ 33.659958] wlan: [4202:E:WMI] wmi_unified_register_event_handler: Event id 206 is unavailable [ 33.668437] wlan: [4202:I:ANY] htc_wmi_init: 5920: htc_wmi_init() HT Create . ffffffc00e941000 [ 33.677103] wlan: [4202:I:ANY] htc_wmi_init: 5984: [htc_wmi_init:5984] host_enable 1 nss_nwifi_offload 0 [ 33.687818] wlan: [4202:I:ANY] ol_soc_pdev_attach: 317: soc=ffffffc00e980880 0000000000000000 -1 [ 33.695432] wlan: [4202:I:ANY] ol_target_init_complete: 6102: CDP soc attach success [ 33.704051] wlan: [4202:I:ANY] ol_target_init_complete: 6109: Soc attach success NSS config 0 [ 33.711956] wlan: [4202:I:ANY] htc_set_async_ep: 428: htc_set_async_ep: htc_handle ffffffc00e941000, ep 2, value 1 [ 33.720781] wlan: [6:I:TIF] init_deinit_sw_version_check: 1614: Firmware_Build_Number:0 [ 33.731505] wlan: [6:E:TIF] init_deinit_sw_version_check: 1645: host/RAM_fw Build Ver Mismatch: H:0x47, F:0x0 ! [ 33.741402] wlan: [6:E:TIF] init_deinit_sw_version_check: 1660: host/RAM_fw uses same Ver: Major:0x1, Minor:0x0,Release:0x0, Build:0x47 [ 33.748724] wlan: [6:E:TIF] init_deinit_populate_fw_version_cmd: 106: failed to save fw version [ 33.761043] wlan: [6:I:TIF] init_deinit_update_large_ap_config: 307: LARGE_AP enabled. num_peers 144, num_vdevs 16, num_tids 256 [ 33.769576] wlan: [6:I:TIF] init_deinit_mem_mgr_alloc_chunk: 1151: req_id 1 idx 0 num_units 145 unit_len 404 [ 33.781672] wlan: [6:I:dfs] WLAN_DEBUG_DFS_ALWAYS : wlan_dfs_pdev_obj_create_notification: 390: dfs_offload 0 [ 33.791160] wlan: [6:I:dfs] WLAN_DEBUG_DFS_ALWAYS : dfs_agile_soc_obj_init: 1038: dfs->dfs_psoc_idx: 0 [ 33.801103] wlan: [6:I:dfs] WLAN_DEBUG_DFS_ALWAYS : dfs_agile_soc_obj_init: 1044: dfs_soc_obj->num_dfs_privs: 1 [ 33.810679] wlan: [6:I:dfs] WLAN_DEBUG_DFS_ALWAYS : dfs_get_po_radars: 392: UNINIT domain [ 33.820787] wlan: [6:I:ANY] ol_tx_pflow_ctrl_init: 254: Startup Mode-0 set [ 33.828634] wlan: [6:I:ANY] ol_txrx_pdev_attach: 946: pdev attach scn = ffffffc00e600880, scn ctx = 0000000000000000 scn ifnum = 0 [ 33.835336] wlan: [6:I:ANY] ol_txrx_pdev_attach: 947: pdev attach soc = ffffffc00e980880, soc ctx = 0000000000000000, soc id = -1 soc ifnum = 0 [ 33.847281] wlan: [6:I:ANY] htt_alloc_peer_map_mem: 141: [ 33.847281] htt_alloc_peer_map_mem : Alloc Success : host q vaddr ffffffc017a6a000 paddr 58a6a000 [ 33.860295] wlan: [6:I:ANY] htt_alloc_peer_map_mem: 142: [ 33.860295] htt_alloc_peer_map_mem : Flush Interval Configured to 256 pkts [ 33.876338] [ 33.876338] <=== cfg max peer id 2080 ====> [ 33.887359] wlan: [6:I:ANY] ol_txrx_pdev_attach: 996: 61424 tx desc's allocated ; range starts from ffffffc00db40000 [ 33.892853] wlan: [6:I:TIF] init_deinit_update_pdev_tgt_info: 1064: CDP PDEV ATTACH success [ 34.009506] wlan: [0:I:ANY] ol_ath_debug_print_event_handler: 3300: FIRMWARE:P 145 V 16 T 443 [ 34.009506] [ 34.009506] [ 34.014353] wlan: [6:E:TIF] init_deinit_ready_event_handler: 467: agile capability disabled in HW [ 34.020316] wlan: [4202:I:ANY] __ol_ath_check_wmi_ready: 4545: ABI Version mismatch: Host(0x3), Target(0x0) [ 34.029006] wlan: [4202:I:ANY] ol_ath_connect_htc: 1219: WMI is ready [ 34.038549] wlan: [4202:E:WMI] wmi_unified_register_event_handler: Event id 104 is unavailable [ 34.045083] wlan: [4202:E:WMI] wmi_unified_register_event_handler: Event id 180 is unavailable [ 34.053684] wlan: [4202:E:WMI] wmi_unified_register_event_handler: Event id 167 is unavailable [ 34.062174] wlan: [4202:E:CMN_MLME] target_if_vdev_mgr_wmi_event_register: 437: failed to register for delete response [ 34.070767] wlan: [4202:E:DIRECT_BUF_RX] direct_buf_rx_target_attach: 145: hal soc or osdev is null [ 34.081444] wlan: [4202:I:ANY] ol_ath_soc_attach: 6620: ol_ath_soc_attach: Direct Buffer Rx Target Attach Failed [ 34.090404] wlan: [4202:I:ANY] ol_ath_soc_attach: 6627: connect HTC [ 34.100894] wlan: [4202:I:ANY] ol_ath_soc_attach: 6628: bypasswmi : 0 [ 34.106775] wlan: [4202:E:WMI] wmi_unified_register_event_handler: Event id 105 is unavailable [ 34.113502] wlan: [4202:E:WMI] wmi_unified_register_event_handler: Event id 187 is unavailable [ 34.122469] wlan: [4202:E:WMI] wmi_unified_register_event_handler: Event id 188 is unavailable [ 34.130537] wlan: [4202:E:WMI] wmi_unified_register_event_handler: Event id 142 is unavailable [ 34.139110] wlan: [4202:E:WMI] wmi_unified_register_event_handler: Event id 148 is unavailable [ 34.147667] wlan: [4202:I:ANY] ol_ath_soc_attach: 6703: ol_ath_soc_attach() UMAC attach . [ 34.157087] wlan: [4202:I:ANY] ath_lowi_if_netlink_init: 180: ath_lowi_if_netlink_init Incremented LOWI netlink ref count: 2 [ 34.164559] wlan: [4202:I:ANY] __ol_ath_attach: 3392: pdev_netdev name wifi2 [ 34.175903] wlan: [4202:I:ANY] __ol_ath_attach: 3417: nss-wifi: update radio nss context with soc context for legay radio [ 34.182963] wlan: [4202:I:ANY] htt_h2t_frag_desc_bank_cfg_msg: 217: HTT_H2T_MSG_TYPE_FRAG_DESC_BANK_CFG sent to FW for SoC ID = 1 [ 34.182990] wlan: [0:I:ANY] htt_t2h_msg_handler_misc: 449: 6target uses HTT version 2.2; host uses 2.2 [ 34.210920] wlan: [4202:I:ANY] __ol_ath_attach: 3461: BURSTING enabled by default [ 34.214644] wlan: [4202:I:ANY] ol_ath_pdev_attach: 7168: interface_id 2 [ 34.222277] wlan: [4202:I:ANY] ol_ath_update_ext_caps: 1866: 11AX not supported [ 34.228726] wlan: [4202:I:ANY] ol_regdmn_start: 424: ol_regdmn_start: reg-domain param: regdmn=0, countryName=, wModeSelect=FFFFFFFF, netBand=FFFFFFFF, extendedChanMode=0. [ 34.238124] wlan: [4202:I:ANY] ol_resmgr_create: 223: OL Resmgr Init-ed [ 34.251431] ieee80211_cbs_init CBS Inited [ 34.261066] wlan: [4202:I:ANY] acfg_attach: 3407: acfg_attach: Offload using existing sock ffffffc0179fa000 [ 34.261896] acfg_attach: Offload using existing sock ffffffc0179fa000 [ 34.261914] wlan: [4202:I:ANY] ol_ath_stats_attach: 2071: periodic_chan_stats: 1 [ 34.262000] wlan: [4202:I:ANY] ol_txrx_mgmt_tx_cb_set: 3432: >>>> CB Set 0000000000000000 [ 34.262409] wlan: [4202:I:ANY] wlan_scan_update_channel_list: 1090: num_chan: 36 [ 34.262447] wlan: [0:I:ANY] ol_ath_pdev_attach: 7504: Set global_ic[3], ptr:ffffffbffd0e95e0 [ 34.262454] wlan: [0:I:ANY] dp_lag_pdev_set_primary_radio: 44: pdev(ffffffc010bbbc08) is_primary 0 [ 34.262462] wlan: [4202:I:ANY] ol_ath_pdev_attach: 7621: Pdev = 0 Number of peers = 144 [ 34.262471] wlan: [4202:E:CFR] tgt_cfr_init_pdev: 107: Error occurred with exit code 11 [ 34.262471] [ 34.262475] wlan: [4202:E:CFR] wlan_cfr_pdev_open: 105: tgt_cfr_init_pdev failed with 11 [ 34.262475] [ 34.262486] wlan: [4202:I:ANY] ol_ath_pri20_cfg_blockchanlist_parse: 547: cfg block channel list is empty [ 34.262495] wlan: [4202:E:ANY] ol_ath_set_obss_thresh: 7099: ol_ath_set_obss_thresh: Could not set obss pd thresh enable val [ 34.262505] wlan: [4202:I:ANY] osif_wrap_attach: 239: osif wrap attached [ 34.262505] [ 34.262509] wlan: [4202:I:ANY] osif_wrap_devt_init: 201: osif wrap dev table init done [ 34.262509] [ 34.262515] wlan: [4202:I:ANY] osif_wrap_attach: 247: Wrap Attached: Wrap_com =ffffffc00f0f6c00 ic->ic_wrap_com=ffffffc00f0f6c00 &wrap_com->wc_devt=ffffffc00f0f6c00 [ 34.262515] [ 34.262539] wlan: [4202:I:ANY] __ol_ath_attach: 3651: hard_header_len reservation 74 [ 34.262563] wlan: [4202:I:ANY] wlan_cfg80211_init: 9607: Number of 2G channels: 11 [ 34.262583] wlan: [4202:I:ANY] wlan_cfg80211_init: 9619: Number of 5G channels: 25 [ 34.262819] wlan: [4202:I:ANY] ieee80211_cfg80211_radio_attach: 9713: ic: 0xffffffc00e600880, wdev: 0xffffffc00e610a70, wiphy: 0xffffffc00ed75aa0, netdev: 0xffffffc00e600000 [ 34.262868] ipaccount: ifname [wifi2] event[16] [ 34.263298] ipaccount: ifname [wifi2] event[5] [ 34.263437] wlan: [4202:I:ANY] ol_ath_thermal_mitigation_attach: 1378: ol_ath_thermal_mitigation_attach: TT not supported in FW [ 34.263437] [ 34.263455] ipaccount: ifname [soc1] event[16] [ 34.263763] ipaccount: ifname [soc1] event[5] [ 34.263850] wlan: [4202:I:ANY] wlan_pdev_operation: 729: num_radios=3, wifi_radios[2].sc = ffffffc00e600880_radio_type = 2 [ 34.263860] Event 0x3 is registered for RC 1 [ 34.277472] wlan: [5066:I:ANY] pktlog_init_2_0: 1564: Initializing Pktlog for AR9888, pktlog_hdr_size = 16 /etc/rc.d/S99boot_check: : INFO: rcS timing 25.127578623s seconds. No Direct-Attach chipsets found. Mon May 11 08:59:20 CST 2020 boot_check[4989]: Booting up finished. /etc/init.d/network: cat: can't open '1': No such file or directory [ 34.683904] wlan: [103:E:ANY] [soc1] FWLOG: [34503] WHAL_ERROR_RESET_PM ( ) [ 34.683904] [ 34.683950] wlan: [103:E:ANY] [soc1] FWLOG: [34736] WAL_DBGID_PDEV_INFO_PRINT ( 0x16, 0x10, 0x10) [ 34.683950] [ 35.038731] wlan: [5722:I:ANY] wlan_scan_update_channel_list: 1090: num_chan: 13 [ 35.038867] wlan: [5722:I:dfs] WLAN_DEBUG_DFS_ALWAYS : dfs_init_precac_list: 979: freq=58 [ 35.045677] wlan: [5722:I:ANY] wlan_scan_update_channel_list: 1090: num_chan: 13 [ 35.053460] wlan: [5722:I:dfs] WLAN_DEBUG_DFS_ALWAYS : dfs_init_precac_list: 979: freq=58 [ 35.060807] wlan: [5722:I:ANY] number of channels: 2G = 0 5G = 13 /etc/init.d/network: Enable ol_stats by default for Lithium platforms [ 35.400533] wlan: [5737:I:ANY] wlan_cfg80211_set_hwaddr: 5439: wlan_cfg80211_set_hwaddr :8c:53:c3:d6:6a:40 ret: 0 [ 35.428870] wlan: [5739:I:ANY] ol_ath_set_config_param: 1493: set TXBF_SND_PERIOD: value 100 wmi_status 0 [ 35.515760] wlan: [0:I:ANY] ol_ath_set_config_param: 2203: Disconnect_timeout value: 10 [ 35.546054] wlan: [0:I:ANY] ol_ath_set_config_param: 2209: Reconfiguration_timeout value:60 /etc/init.d/network: cat: can't open '/lib/wifi/wifi_nss_hk_olnum': No such file or directory /etc/init.d/network: sh: 3: unknown operand /etc/init.d/network: cat: can't open '/sys/class/net/wl0/address': No such file or directory /etc/init.d/network: sh: out of range /etc/init.d/network: sh: out of range number of vifs: cfg023579 [ 35.760937] ipaccount: ifname [wifi0] event[13] [ 35.761224] ipaccount: ifname [wifi0] event[1] /etc/init.d/network: cfg80211: ifname: wl0 mode: __ap cfgphy: phy0 [ 35.863425] wlan: [5807:I:ANY] wlan_cfg80211_add_virtual_intf: 306: proprietary mode 6 for interface: wl0 : clone params: 0x00000001 [ 35.863499] wlan: [5807:I:ANY] osifp_create_wlan_vap: 10190: VDEV Create 8c:53:c3:d6:6a:40 [ 35.874735] wlan: [5807:E:CMN_MLME] mlme_vdev_ext_obj_create: 1321: VDEV MLME obj is creation [ 35.882781] wlan: [5807:I:ANY] wlan_vap_create: 1548: enter. devhandle=0xffffffc014860880, opmode=IEEE80211_M_HOSTAP, flags=0x1 [ 35.882781] [ 35.891554] wlan: [5807:I:ANY] ol_ath_vap_set_param: 1107: Setting SGI value: 1 [ 35.904440] wlan: [5807:I:ANY] ol_ath_vap_set_param: 2097: VDEV params:HE su_bfee:1|su_bfer:1|mu_bfee:0|mu_bfer:1|dl_muofdma:1|ul_muofdma:1|ul_mumimo:1 [ 35.911436] wlan: [5807:I:ANY] ol_ath_vap_set_param: 2107: he_bf_cap=0x7b [ 35.924921] wlan: [5807:I:ANY] ol_ath_vap_set_param: 2122: VDEV params:AC/VHT sounding mode:HE|SU/MU sounding mode:SU|Trig/Non-Trig sounding mode:Non-Trigged [ 35.931917] wlan: [5807:I:ANY] MBO Initialized [ 35.945898] wlan: [5807:I:ANY] OCE Initialized [ 35.950227] wlan: [5807:I:ANY] osif_nss_ol_vap_create: 1289: NSS wifi offload VAP create IF 31 nss_id -1 [ 35.954715] wlan: [5807:I:ANY] NSS radio_if 29 [ 35.964389] wlan: [0:I:ANY] osif_nss_vdev_cfg_callback: 1041: VDEV configuration success: 0 [ 35.968640] wlan: [5807:I:ANY] osif_nss_ol_vap_create: 1397: vap create ffffffc00ef5a880 : if_num 31 [ 35.976884] wlan: [5807:I:ANY] wlan_vap_create: 1582: exit [ 35.986282] wlan: [5807:E:ANY] SA disabled [ 35.991810] wlan: [5807:E:ANY] SA disabled [ 35.995759] wlan: [5807:I:ANY] osif_create_vap_complete: 10385: TX Checksum:1|SG:1|TSO:1|LRO:0 [ 35.999790] wlan: [5807:I:ANY] WLAN-NSS: VAP NSS ops initialized [ 36.008578] ipaccount: ifname [wl0] event[16] [ 36.015206] ipaccount: ifname [wl0] event[5] [ 36.018954] ipaccount: landev_init set ifname [wl0] [ 36.023445] wlan: [5807:I:ANY] VAP device wl0 created osifp: (ffffffc00ef5a880) os_if: (ffffffc008e60000) /etc/init.d/network: sh: 0: unknown operand /etc/init.d/network: sh: out of range /etc/init.d/network: error_handler received : -22 /etc/init.d/network: Failed to send message to driver Error:-22 [ 36.626067] wlan: [5955:I:ANY] ieee80211_ucfg_setparam: 1302: Setting Max Stations:124 [ 36.638866] wlan: [5958:I:ANY] wlan_set_param: 2826: HE MU BFER already set with this value =1 [ 36.642928] wlan: [5960:I:ANY] ol_ath_vap_set_param: 2097: VDEV params:HE su_bfee:1|su_bfer:1|mu_bfee:0|mu_bfer:1|dl_muofdma:1|ul_muofdma:1|ul_mumimo:0 [ 36.646797] wlan: [5960:I:ANY] ol_ath_vap_set_param: 2107: he_bf_cap=0x3b [ 36.663731] wlan: [5961:I:ANY] ol_ath_vap_set_param: 2097: VDEV params:HE su_bfee:1|su_bfer:1|mu_bfee:0|mu_bfer:1|dl_muofdma:1|ul_muofdma:0|ul_mumimo:0 [ 36.666957] wlan: [5961:I:ANY] ol_ath_vap_set_param: 2107: he_bf_cap=0x1b /etc/init.d/network: sh: 0: unknown operand /etc/init.d/network: Following channels are blocked from Channel selection algorithm /etc/init.d/network: [52] [56] [60] [64] /etc/init.d/network: sh: 0: unknown operand /etc/init.d/network: sh: 0: unknown operand [ 36.945276] ipaccount: ifname [wl0] event[13] [ 36.945544] 8021q: adding VLAN 0 to HW filter on device wl0 [ 36.949000] ipaccount: ifname [wl0] event[1] [ 36.954894] ipaccount: ifname [wl0] event[20] [ 36.958920] ipaccount: ifname [wl0] event[26] [ 36.963016] ipaccount: ifname [wl0] event[21] [ 36.967106] device wl0 entered promiscuous mode [ 36.971853] br-lan: port 4(wl0) entered forwarding state [ 36.975821] br-lan: port 4(wl0) entered forwarding state [ 36.981756] ipaccount: ifname [wl0] event[27] [ 36.986683] ipaccount: ifname [br-lan] event[4] [ 37.025253] wlan: [1512:I:ANY] DES SSID SET=AX3600-5G [ 37.025286] wlan: [1512:I:ANY] wlan_cfg80211_set_phymode: 1151: cfg80211 mode:30 [ 37.030413] wlan: [1512:I:ANY] ol_ath_vdev_install_key_send: 2734: Keyix=1 Keylen=32 Keyflags=1 Cipher=2 [ 37.036760] wlan: [1512:I:ANY] ol_ath_vdev_install_key_send: 2735: macaddr 8c:53:c3:d6:6a:40 [ 37.046865] ipaccount: ifname [wl0] event[4] /etc/init.d/network: OK /etc/init.d/network: sh: out of range qcawificfg80211: enable radio wifi1 /etc/init.d/network: cp: omitting directory '/cfg/default/internal' [ 37.346326] wlan: [0:I:CMN_MLME] vdev[0] ieee chan:44 [ 37.346708] wlan: [0:E:ANY] SA disabled [ 37.350494] wlan: [0:I:ANY] vdev[0]: Mgt Rate:6000(kbps) [ 37.354096] wlan: [0:I:ANY] vdev[0]: Mgt Rate:6000(kbps) [ 37.851751] wlan: [6482:I:ANY] wlan_scan_update_channel_list: 1090: num_chan: 13 [ 37.851831] wlan: [6482:I:ANY] number of channels: 2G = 13 5G = 0 /etc/init.d/network: Enable ol_stats by default for Lithium platforms [ 38.055248] wlan: [6543:I:ANY] wlan_cfg80211_set_hwaddr: 5439: wlan_cfg80211_set_hwaddr :8c:53:c3:d6:6a:3f ret: 0 [ 38.084687] wlan: [6552:I:ANY] ol_ath_set_config_param: 1493: set TXBF_SND_PERIOD: value 100 wmi_status 0 [ 38.188771] wlan: [0:I:ANY] ol_ath_set_config_param: 2203: Disconnect_timeout value: 10 [ 38.221377] wlan: [0:I:ANY] ol_ath_set_config_param: 2209: Reconfiguration_timeout value:60 /etc/init.d/network: cat: can't open '/lib/wifi/wifi_nss_hk_olnum': No such file or directory /etc/init.d/network: sh: 3: unknown operand /etc/init.d/network: cat: can't open '/sys/class/net/wl1/address': No such file or directory /etc/init.d/network: sh: out of range /etc/init.d/network: sh: out of range number of vifs: cfg043579 [ 38.439246] ipaccount: ifname [wifi1] event[13] [ 38.439675] ipaccount: ifname [wifi1] event[1] /etc/init.d/network: cfg80211: ifname: wl1 mode: __ap cfgphy: ph[ 38.454974] wlan: [6700:I:ANY] wlan_cfg80211_add_virtual_intf: 306: proprietary mode 6 for interface: wl1 : clone params: 0x00000001 [ 38.455611] wlan: [6700:I:ANY] osifp_create_wlan_vap: 10190: VDEV Create 8c:53:c3:d6:6a:3f [ 38.467791] wlan: [6700:E:CMN_MLME] mlme_vdev_ext_obj_create: 1321: VDEV MLME obj is creation [ 38.475906] wlan: [6700:I:ANY] wlan_vap_create: 1548: enter. devhandle=0xffffffc0148a0880, opmode=IEEE80211_M_HOSTAP, flags=0x1 [ 38.475906] [ 38.484863] wlan: [6700:I:ANY] ol_ath_vap_set_param: 1107: Setting SGI value: 1 [ 38.497633] wlan: [6700:I:ANY] ol_ath_vap_set_param: 2097: VDEV params:HE su_bfee:1|su_bfer:1|mu_bfee:0|mu_bfer:1|dl_muofdma:1|ul_muofdma:1|ul_mumimo:1 [ 38.504635] wlan: [6700:I:ANY] ol_ath_vap_set_param: 2107: he_bf_cap=0x7b [ 38.518173] wlan: [6700:I:ANY] ol_ath_vap_set_param: 2122: VDEV params:AC/VHT sounding mode:HE|SU/MU sounding mode:SU|Trig/Non-Trig sounding mode:Non-Trigged [ 38.525166] wlan: [6700:I:ANY] MBO Initialized [ 38.539187] wlan: [6700:I:ANY] OCE Initialized [ 38.543507] wlan: [6700:I:ANY] osif_nss_ol_vap_create: 1289: NSS wifi offload VAP create IF 32 nss_id -1 [ 38.547933] wlan: [6700:I:ANY] NSS radio_if 30 [ 38.557640] wlan: [0:I:ANY] osif_nss_vdev_cfg_callback: 1041: VDEV configuration success: 0 [ 38.561928] wlan: [6700:I:ANY] osif_nss_ol_vap_create: 1397: vap create ffffffc008f06880 : if_num 32 [ 38.570176] wlan: [6700:I:ANY] wlan_vap_create: 1582: exit [ 38.579532] wlan: [6700:E:ANY] SA disabled [ 38.585083] wlan: [6700:E:ANY] SA disabled [ 38.589003] wlan: [6700:I:ANY] osif_create_vap_complete: 10385: TX Checksum:1|SG:1|TSO:1|LRO:0 [ 38.593068] wlan: [6700:I:ANY] WLAN-NSS: VAP NSS ops initialized [ 38.601783] ipaccount: ifname [wl1] event[16] [ 38.608510] ipaccount: ifname [wl1] event[5] [ 38.612160] ipaccount: landev_init set ifname [wl1] [ 38.616727] wlan: [6700:I:ANY] VAP device wl1 created osifp: (ffffffc008f06880) os_if: (ffffffc008f28000) y1 /etc/init.d/network: sh: 0: unknown operand /etc/init.d/network: sh: out of range [ 38.968464] br-lan: port 4(wl0) entered forwarding state /etc/init.d/network: error_handler received : -22 /etc/init.d/network: Failed to send message to driver Error:-22 [ 39.072378] wlan: [6857:I:ANY] ieee80211_ucfg_setparam: 1302: Setting Max Stations:124 [ 39.082717] wlan: [6860:I:ANY] wlan_set_param: 2826: HE MU BFER already set with this value =1 [ 39.086052] wlan: [6862:I:ANY] ol_ath_vap_set_param: 2097: VDEV params:HE su_bfee:1|su_bfer:1|mu_bfee:0|mu_bfer:1|dl_muofdma:1|ul_muofdma:1|ul_mumimo:0 [ 39.090615] wlan: [6862:I:ANY] ol_ath_vap_set_param: 2107: he_bf_cap=0x3b [ 39.106815] wlan: [6863:I:ANY] ol_ath_vap_set_param: 2097: VDEV params:HE su_bfee:1|su_bfer:1|mu_bfee:0|mu_bfer:1|dl_muofdma:1|ul_muofdma:0|ul_mumimo:0 [ 39.110861] wlan: [6863:I:ANY] ol_ath_vap_set_param: 2107: he_bf_cap=0x1b /etc/init.d/network: sh: 0: unknown operand /etc/init.d/network: sh: 0: unknown operand /etc/init.d/network: sh: 0: unknown operand /etc/init.d/network: sh: auto: out of range [ 39.299079] ipaccount: ifname [wl1] event[13] [ 39.299322] 8021q: adding VLAN 0 to HW filter on device wl1 [ 39.302548] ipaccount: ifname [wl1] event[1] [ 39.308623] ipaccount: ifname [wl1] event[20] [ 39.312471] ipaccount: ifname [wl1] event[26] [ 39.316722] ipaccount: ifname [wl1] event[21] [ 39.321006] device wl1 entered promiscuous mode [ 39.325295] br-lan: port 5(wl1) entered forwarding state [ 39.329610] br-lan: port 5(wl1) entered forwarding state [ 39.335218] ipaccount: ifname [wl1] event[27] [ 39.341024] wlan: [1512:I:ANY] wlan_cfg80211_do_acs: 3295: vap-1(wl1):ACS Params [ 39.344692] wlan: [1512:I:ANY] wlan_cfg80211_do_acs: 3298: ht_enabled:0|ht40_enabled:0|vht_enabled:0|hw_mode:29|chwidth:20| [ 39.352188] wlan: [1512:I:ANY] ieee80211_autoselect_infra_bss_channel: 3679: ACS started: vap:0xffffffc008f28000 /etc/init.d/network: OK /etc/init.d/network: sh: out of range qcawificfg80211: enable radio wifi2 /etc/init.d/network: cp: omitting directory '/cfg/default/internal' /etc/init.d/network: Enable ol_stats by default for Lithium platforms [ 40.217635] wlan: [7340:I:ANY] wlan_cfg80211_set_hwaddr: 5439: wlan_cfg80211_set_hwaddr :8c:53:c3:d6:6a:41 ret: 0 [ 40.246452] wlan: [7342:I:ANY] ol_ath_set_config_param: 1493: set TXBF_SND_PERIOD: value 100 wmi_status 0 [ 40.335468] wlan: [0:I:ANY] ol_ath_set_config_param: 2203: Disconnect_timeout value: 10 [ 40.368221] wlan: [0:I:ANY] ol_ath_set_config_param: 2209: Reconfiguration_timeout value:60 /etc/init.d/network: cat: can't open '/lib/wifi/wifi_nss_hk_olnum': No such file or directory /etc/init.d/network: sh: 3: unknown operand number of vifs: cfg063579 [ 40.536788] ipaccount: ifname [wifi2] event[13] [ 40.537130] ipaccount: ifname [wifi2] event[1] /etc/init.d/network: cfg80211: ifname: wl2 mode: managed cfgphy:[ 40.552345] wlan: [7381:I:ANY] wlan_cfg80211_add_virtual_intf: 306: proprietary mode 1 for interface: wl2 : clone params: 0x00000001 [ 40.552910] wlan: [7381:I:ANY] osifp_create_wlan_vap: 10190: VDEV Create 8c:53:c3:d6:6a:41 [ 40.565144] wlan: [7381:E:CMN_MLME] mlme_vdev_ext_obj_create: 1321: VDEV MLME obj is creation [ 40.573208] wlan: [7381:I:ANY] wlan_vap_create: 1548: enter. devhandle=0xffffffc00e600880, opmode=IEEE80211_M_STA, flags=0x1 [ 40.573208] [ 40.581997] wlan: [7381:I:ANY] ol_ath_vap_set_param: 1107: Setting SGI value: 1 [ 40.594685] [UNSPECIFIED] vap-0((null)):mlme_sta_swbmiss_timer_disable: swbmiss disabled by tmp curmask 0x2 [ 40.601689] wlan: [7381:I:ANY] wlan_vap_create: 1582: exit [ 40.611738] wlan: [7381:E:ANY] SA disabled [ 40.617167] wlan: [7381:E:ANY] SA disabled [ 40.621221] wlan: [7381:I:ANY] osif_create_vap_complete: 10385: TX Checksum:1|SG:1|TSO:1|LRO:1 [ 40.625671] wlan: [7381:I:ANY] dp_lag_pdev_set_sta_vdev: 57: dp_lag_pdev_set_sta_vdev pdev(ffffffc010bbbc08) sta_vdev ffffffc008c13400 [ 40.633926] ipaccount: ifname [wl2] event[16] [ 40.646503] ipaccount: ifname [wl2] event[5] [ 40.650707] wlan: [7381:I:ANY] VAP device wl2 created osifp: (ffffffc008ec0880) os_if: (ffffffc008f88000) phy2 [ 40.684814] wlan: [103:E:ANY] [soc1] FWLOG: [41232] WHAL_ERROR_RESET_CHANNF1 ( ) [ 40.684814] /etc/init.d/network: sh: 0: unknown operand /etc/init.d/network: Interface doesn't accept private ioctl... /etc/init.d/network: minet (8BE0): Invalid argument /etc/init.d/network: sh: out of range /etc/init.d/network: error_handler received : -22 /etc/init.d/network: Failed to send message to driver Error:-22 [ 41.136056] wlan: [7537:I:ANY] ieee80211_ucfg_setparam: 1310: This command only support on Host AP mode. /etc/init.d/network: error_handler received : -22 /etc/init.d/network: Failed to send message to driver Error:-22 [ 41.175289] wlan: [7539:I:ANY] DES SSID SET=MIIOT_DEV [ 41.328473] br-lan: port 5(wl1) entered forwarding state /etc/init.d/network: [ 41.336106] wlan: [7574:I:ANY] wlan_set_param: 2709: HE Ul MU OFDMA is not allowed in current mode /etc/init.d/network: Interface doesn't accept private ioctl... /etc/init.d/network: he_ulofdma (8BE0): Invalid argument /etc/init.d/network: sh: 0: unknown operand /etc/init.d/network: sh: 0: unknown operand /etc/init.d/network: sh: 0: unknown operand /etc/init.d/network: sh: out of range /etc/init.d/network: sh: out of range [ 41.636592] ipaccount: ifname [wl2] event[13] [ 41.636851] 8021q: adding VLAN 0 to HW filter on device wl2 [ 41.640106] ipaccount: ifname [wl2] event[1] [ 41.645418] ipaccount: ifname [wl2] event[4] [ 41.649963] ipaccount: ifname [wl2] event[4] [ 41.690264] wlan: [1518:I:ANY] wlan_cfg80211_set_wificonfiguration: 7318: wlan_cfg80211_set_wificonfiguration: Unsuported Genric command: 0 /etc/init.d/network: OK /etc/init.d/network: sh: out of range [ 41.705110] ipaccount: ifname [wl2] event[9] [ 41.707258] wlan: [7660:I:ANY] osif_vap_stop: 9126: Clearing Desired BSSID for STA VAP [ 41.711956] wlan: [7660:E:mlme] wlan_mlme_stop_sta_vdev: 492: connection stop failed [ 41.720815] ipaccount: ifname [wl2] event[2] /etc/init.d/network: /etc/rc.common: .: line 13: can't open '/lib/functions/hyfi-debug.sh' /etc/init.d/network: uci: Entry not found /etc/init.d/network: device: wifi0 vifs: cfg023579 /etc/init.d/network: device: wifi1 vifs: cfg043579 /etc/init.d/network: device: wifi2 vifs: cfg063579 [ 43.975830] wlan: [3177:I:ANY] vap-1(wl1): ACS result PCH 6, SCH 0, hw_mode 1chwidth 40, vht_seg0 8, vht_seg1 0 [ 43.975889] wlan: [3177:I:ANY] ieee80211_acs_scan_evhandler: 3423: lock held duration: 0(ms) [ 44.000485] wlan: [1512:I:ANY] DES SSID SET=AX3600-2.4G [ 44.000515] wlan: [1512:I:ANY] wlan_cfg80211_set_phymode: 1151: cfg80211 mode:29 [ 44.005294] wlan: [1512:I:ANY] ol_ath_vdev_install_key_send: 2734: Keyix=1 Keylen=32 Keyflags=1 Cipher=2 [ 44.012251] wlan: [1512:I:ANY] ol_ath_vdev_install_key_send: 2735: macaddr 8c:53:c3:d6:6a:3f [ 44.022043] ipaccount: ifname [wl1] event[4] [ 48.622233] wlan: [3177:I:ANY] vdev[1]: Mgt Rate:1000(kbps) [ 48.622267] wlan: [3177:I:ANY] ieee80211_ht40intol_evhandler: 2942: lock held duration: 0(ms) [ 48.727760] wlan: [0:I:CMN_MLME] vdev[1] ieee chan:6 [ 48.728067] wlan: [0:E:WMI] event handler already registered 0x2a001 [ 48.731818] wlan: [0:E:ANY] SA disabled [ 48.738155] wlan: [0:I:ANY] vdev[1]: Mgt Rate:1000(kbps) [ 48.741720] wlan: [0:I:ANY] vdev[1]: Mgt Rate:1000(kbps)

[ 0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034] [ 0.000000] Linux version 5.15.162 (builder@buildhost) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 12.3.0 r24012-d8dd03c46f) 12.3.0, GNU ld (GNU Binutils) 2.40.0) #0 SMP Mon Jul 15 22:14:18 2024 [ 0.000000] Machine model: Xiaomi AX3600 [ 0.000000] Zone ranges: [ 0.000000] DMA [mem 0x0000000040000000-0x000000005fffffff] [ 0.000000] DMA32 empty [ 0.000000] Normal empty [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000040000000-0x0000000040ffffff] [ 0.000000] node 0: [mem 0x0000000041000000-0x000000004a3fffff] [ 0.000000] node 0: [mem 0x000000004a400000-0x000000004a4fffff] [ 0.000000] node 0: [mem 0x000000004a500000-0x000000004a5fffff] [ 0.000000] node 0: [mem 0x000000004a600000-0x000000004e8fffff] [ 0.000000] node 0: [mem 0x000000004e900000-0x000000005fffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000005fffffff] [ 0.000000] psci: probing for conduit method from DT. [ 0.000000] psci: PSCIv1.0 detected in firmware. [ 0.000000] psci: Using standard PSCI v0.2 function IDs [ 0.000000] psci: MIGRATE_INFO_TYPE not supported. [ 0.000000] psci: SMC Calling Convention v1.0 [ 0.000000] psci: OSI mode supported. [ 0.000000] percpu: Embedded 18 pages/cpu s33880 r8192 d31656 u73728 [ 0.000000] pcpu-alloc: s33880 r8192 d31656 u73728 alloc=18*4096 [ 0.000000] pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 [ 0.000000] Detected VIPT I-cache on CPU0 [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 129024 [ 0.000000] Kernel command line: ubi.mtd=rootfs root=mtd:ubi_rootfs rootfstype=squashfs rootwait uart_en=1 root=/dev/ubiblock0_0 [ 0.000000] Unknown kernel command line parameters "uart_en=1", will be passed to user space. [ 0.000000] Dentry cache hash table entries: 65536 (order: 7, 524288 bytes, linear) [ 0.000000] Inode-cache hash table entries: 32768 (order: 6, 262144 bytes, linear) [ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off [ 0.000000] Memory: 416040K/524288K available (7808K kernel code, 860K rwdata, 1404K rodata, 1280K init, 288K bss, 108248K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 [ 0.000000] rcu: Hierarchical RCU implementation. [ 0.000000] Tracing variant of Tasks RCU enabled. [ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 [ 0.000000] Root IRQ handler: 0xffffffc008010000 [ 0.000000] GICv2m: range[mem 0x0b00a000-0x0b00affc], SPI[448:479] [ 0.000000] arch_timer: cp15 and mmio timer(s) running at 19.20MHz (virt/virt). [ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x46d987e47, max_idle_ns: 440795202767 ns [ 0.000000] sched_clock: 56 bits at 19MHz, resolution 52ns, wraps every 4398046511078ns [ 0.000111] Calibrating delay loop (skipped), value calculated using timer frequency.. 38.40 BogoMIPS (lpj=192000) [ 0.000128] pid_max: default: 32768 minimum: 301 [ 0.000578] Mount-cache hash table entries: 1024 (order: 1, 8192 bytes, linear) [ 0.000594] Mountpoint-cache hash table entries: 1024 (order: 1, 8192 bytes, linear) [ 0.002623] rcu: Hierarchical SRCU implementation. [ 0.003370] smp: Bringing up secondary CPUs ... [ 0.004030] Detected VIPT I-cache on CPU1 [ 0.004098] CPU1: Booted secondary processor 0x0000000001 [0x410fd034] [ 0.004735] Detected VIPT I-cache on CPU2 [ 0.004776] CPU2: Booted secondary processor 0x0000000002 [0x410fd034] [ 0.005393] Detected VIPT I-cache on CPU3 [ 0.005430] CPU3: Booted secondary processor 0x0000000003 [0x410fd034] [ 0.005497] smp: Brought up 1 node, 4 CPUs [ 0.005524] SMP: Total of 4 processors activated. [ 0.005532] CPU features: detected: 32-bit EL0 Support [ 0.005539] CPU features: detected: CRC32 instructions [ 0.005594] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching [ 0.005604] CPU: All CPU(s) started at EL1 [ 0.005625] alternatives: patching kernel code [ 0.015268] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.015305] futex hash table entries: 1024 (order: 4, 65536 bytes, linear) [ 0.015560] pinctrl core: initialized pinctrl subsystem [ 0.017028] NET: Registered PF_NETLINK/PF_ROUTE protocol family [ 0.017548] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations [ 0.017593] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations [ 0.017645] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations [ 0.018049] thermal_sys: Registered thermal governor 'step_wise' [ 0.019616] cpuidle: using governor menu [ 0.019869] ASID allocator initialised with 65536 entries [ 0.075859] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 4 [ 0.085555] SCSI subsystem initialized [ 0.085754] usbcore: registered new interface driver usbfs [ 0.085799] usbcore: registered new interface driver hub [ 0.085836] usbcore: registered new device driver usb [ 0.086063] CPUidle PSCI: failed to enable OSI mode: -95 [ 0.086372] qcom_scm: convention: smc arm 64 [ 0.087891] clocksource: Switched to clocksource arch_sys_counter [ 0.088847] NET: Registered PF_INET protocol family [ 0.088993] IP idents hash table entries: 8192 (order: 4, 65536 bytes, linear) [ 0.089775] tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 4096 bytes, linear) [ 0.089799] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) [ 0.089813] TCP established hash table entries: 4096 (order: 3, 32768 bytes, linear) [ 0.089864] TCP bind hash table entries: 4096 (order: 4, 65536 bytes, linear) [ 0.089945] TCP: Hash tables configured (established 4096 bind 4096) [ 0.090037] UDP hash table entries: 256 (order: 1, 8192 bytes, linear) [ 0.090065] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear) [ 0.090266] NET: Registered PF_UNIX/PF_LOCAL protocol family [ 0.090312] PCI: CLS 0 bytes, default 64 [ 0.091684] workingset: timestamp_bits=46 max_order=17 bucket_order=0 [ 0.096376] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.096395] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.097413] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 248) [ 0.099652] qcom-qmp-phy 84000.phy: Registered Qcom-QMP phy [ 0.101896] qcom-pcie 20000000.pci: host bridge /soc/pci@20000000 ranges: [ 0.101960] qcom-pcie 20000000.pci: IO 0x0020200000..0x002020ffff -> 0x0000000000 [ 0.101988] qcom-pcie 20000000.pci: MEM 0x0020220000..0x002fffffff -> 0x0020220000 [ 0.229448] qcom-pcie 20000000.pci: iATU unroll: enabled [ 0.229465] qcom-pcie 20000000.pci: Detected iATU regions: 8 outbound, 8 inbound [ 0.329531] qcom-pcie 20000000.pci: Link up [ 0.329695] qcom-pcie 20000000.pci: PCI host bridge to bus 0000:00 [ 0.329708] pci_bus 0000:00: root bus resource [bus 00-ff] [ 0.329726] pci_bus 0000:00: root bus resource [io 0x0000-0xffff] [ 0.329738] pci_bus 0000:00: root bus resource [mem 0x20220000-0x2fffffff] [ 0.329782] pci 0000:00:00.0: [17cb:1002] type 01 class 0x060400 [ 0.329811] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x00000fff] [ 0.329894] pci 0000:00:00.0: PME# supported from D0 D3hot D3cold [ 0.333142] pci 0000:01:00.0: [168c:0050] type 00 class 0x028000 [ 0.333288] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x001fffff 64bit] [ 0.333506] pci 0000:01:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref] [ 0.333967] pci 0000:01:00.0: supports D1 [ 0.333977] pci 0000:01:00.0: PME# supported from D0 D1 D3hot [ 0.337031] pci 0000:00:00.0: BAR 8: assigned [mem 0x20300000-0x205fffff] [ 0.337054] pci 0000:00:00.0: BAR 9: assigned [mem 0x20600000-0x207fffff 64bit pref] [ 0.337069] pci 0000:00:00.0: BAR 0: assigned [mem 0x20220000-0x20220fff] [ 0.337084] pci 0000:00:00.0: BAR 7: assigned [io 0x1000-0x1fff] [ 0.337100] pci 0000:01:00.0: BAR 0: assigned [mem 0x20400000-0x205fffff 64bit] [ 0.337173] pci 0000:01:00.0: BAR 6: assigned [mem 0x20300000-0x2030ffff pref] [ 0.337187] pci 0000:00:00.0: PCI bridge to [bus 01-ff] [ 0.337199] pci 0000:00:00.0: bridge window [io 0x1000-0x1fff] [ 0.337212] pci 0000:00:00.0: bridge window [mem 0x20300000-0x205fffff] [ 0.337224] pci 0000:00:00.0: bridge window [mem 0x20600000-0x207fffff 64bit pref] [ 0.339459] pcieport 0000:00:00.0: PME: Signaling with IRQ 82 [ 0.339790] pcieport 0000:00:00.0: AER: enabled with IRQ 82 [ 0.343165] bam-dma-engine 704000.dma-controller: num-channels unspecified in dt [ 0.343190] bam-dma-engine 704000.dma-controller: num-ees unspecified in dt [ 0.346929] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled [ 0.349185] msm_serial 78b3000.serial: msm_serial: detected port #0 [ 0.349248] msm_serial 78b3000.serial: uartclk = 3686400 [ 0.349313] 78b3000.serial: ttyMSM0 at MMIO 0x78b3000 (irq = 22, base_baud = 230400) is a MSM [ 0.349351] msm_serial: console setup on port #0 [ 1.162639] printk: console [ttyMSM0] enabled [ 1.167782] msm_serial: driver initialized [ 1.176359] loop: module loaded [ 1.176452] Loading iSCSI transport class v2.0-870. [ 1.180702] nand: device found, Manufacturer ID: 0xc8, Chip ID: 0xaa [ 1.183457] nand: ESMT GD9FS2G8F2A [ 1.190087] nand: 256 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 128 [ 1.193544] 13 fixed-partitions partitions found on MTD device qcom_nand.0 [ 1.200862] OF: Bad cell count for /soc/nand-controller@79b0000/nand@0/partitions [ 1.207784] OF: Bad cell count for /soc/nand-controller@79b0000/nand@0/partitions [ 1.216111] Creating 13 MTD partitions on "qcom_nand.0": [ 1.222797] 0x000000000000-0x000000100000 : "0:sbl1" [ 1.229556] 0x000000100000-0x000000200000 : "0:mibib" [ 1.234323] 0x000000200000-0x000000500000 : "0:qsee" [ 1.240824] 0x000000500000-0x000000580000 : "0:devcfg" [ 1.243922] 0x000000580000-0x000000600000 : "0:rpm" [ 1.248917] 0x000000600000-0x000000680000 : "0:cdt" [ 1.253648] 0x000000680000-0x000000700000 : "0:appsblenv" [ 1.258547] 0x000000700000-0x000000800000 : "0:appsbl" [ 1.264431] 0x000000800000-0x000000880000 : "0:art" [ 1.269219] 0x000000880000-0x000000900000 : "bdata" [ 1.273867] 0x000000900000-0x000000a00000 : "pstore" [ 1.279167] 0x000000a00000-0x000002dc0000 : "ubi_kernel" [ 1.311135] 0x000002dc0000-0x000010000000 : "rootfs" [ 1.473733] mtd: setting mtd12 (rootfs) as root device [ 1.474036] mtdsplit: no squashfs found in "rootfs" [ 1.482874] spmi spmi-0: PMIC arbiter version v2 (0x20010000) [ 1.486048] s1: supplied by regulator-dummy [ 1.488696] s2: supplied by regulator-dummy [ 1.492596] vdd_s3: supplied by regulator-dummy [ 1.496917] vdd_s4: supplied by regulator-dummy [ 1.501495] s5: supplied by regulator-dummy [ 1.505794] l1: supplied by regulator-dummy [ 1.510029] l2: supplied by regulator-dummy [ 1.514115] l3: supplied by regulator-dummy [ 1.518332] l4: supplied by regulator-dummy [ 1.522500] l5: supplied by regulator-dummy [ 1.526642] l6: supplied by regulator-dummy [ 1.530814] l7: supplied by regulator-dummy [ 1.534994] l8: supplied by regulator-dummy [ 1.539177] l9: supplied by regulator-dummy [ 1.543423] l11: supplied by regulator-dummy [ 1.547493] l12: supplied by regulator-dummy [ 1.551996] l13: supplied by regulator-dummy [ 1.569727] i2c_dev: i2c /dev entries driver [ 1.573916] sdhci: Secure Digital Host Controller Interface driver [ 1.573966] sdhci: Copyright(c) Pierre Ossman [ 1.579083] sdhci-pltfm: SDHCI platform and OF driver helper [ 1.587058] remoteproc remoteproc0: releasing cd00000.q6v5_wcss [ 1.591754] NET: Registered PF_INET6 protocol family [ 1.595898] Segment Routing with IPv6 [ 1.600139] In-situ OAM (IOAM) with IPv6 [ 1.603683] NET: Registered PF_PACKET protocol family [ 1.607654] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. [ 1.612771] 8021q: 802.1Q VLAN Support v1.8 [ 1.644207] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 4 [ 1.644520] cpr4_ipq807x_apss_read_fuse_data: apc_corner: speed bin = 0 [ 1.650477] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR fusing revision = 1 [ 1.656933] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR misc fuse value = 0 [ 1.664606] cpr4_ipq807x_apss_read_fuse_data: apc_corner: Voltage boost fuse config = 0 boost = disable [ 1.672113] cpr3_mem_acc_init: apc: not using memory accelerator regulator [ 1.681245] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused SVS: open-loop= 704000 uV [ 1.688194] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused NOM: open-loop= 816000 uV [ 1.698183] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused TURBO: open-loop= 864000 uV [ 1.707985] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused STURBO: open-loop= 944000 uV [ 1.717839] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused SVS: quot[ 7]= 724, quot_offset[ 7]= 0 [ 1.727606] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused NOM: quot[ 7]= 957, quot_offset[ 7]= 230 [ 1.738456] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused TURBO: quot[ 7]=1044, quot_offset[ 7]= 85 [ 1.749394] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused STURBO: quot[ 7]=1206, quot_offset[ 7]= 160 [ 1.760481] cpr3_regulator_init_ctrl: apc: Default CPR mode = closed-loop [ 1.762798] cpufreq: cpufreq_online: CPU0: Running at unlisted initial frequency: 19200 KHz, changing to: 1017600 KHz [ 1.779227] remoteproc remoteproc0: cd00000.q6v5_wcss is available [ 1.789315] ubi0: attaching mtd12 [ 2.427893] random: crng init done [ 2.729698] ubi0: scanning is finished [ 2.736678] ubi0: attached mtd12 (name "rootfs", size 210 MiB) [ 2.736717] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes [ 2.741426] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048 [ 2.748275] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096 [ 2.755124] ubi0: good PEBs: 1682, bad PEBs: 0, corrupted PEBs: 0 [ 2.761900] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128 [ 2.768155] ubi0: max/mean erase counter: 73/38, WL threshold: 4096, image sequence number: 532123332 [ 2.775270] ubi0: available PEBs: 0, total reserved PEBs: 1682, PEBs reserved for bad PEB handling: 40 [ 2.784571] ubi0: background thread "ubi_bgt0d" started, PID 459 [ 2.794400] block ubiblock0_0: created from ubi0:0(rootfs) [ 2.800448] clk: Disabling unused clocks [ 2.808257] VFS: Mounted root (squashfs filesystem) readonly on device 254:0. [ 2.808868] Freeing unused kernel memory: 1280K [ 2.814552] Run /sbin/init as init process [ 2.818725] with arguments: [ 2.818728] /sbin/init [ 2.818730] with environment: [ 2.818732] HOME=/ [ 2.818734] TERM=linux [ 2.818736] uart_en=1 [ 2.992045] init: Console is alive [ 2.992202] init: - watchdog - [ 3.581067] kmodloader: loading kernel modules from /etc/modules-boot.d/* [ 3.710889] ssdk_switch_device_num_init[1335]:INFO:ess-switch dts node number: 1 [ 3.711013] ssdk_dt_get_switch_node[1124]:INFO:ess-switch DT exist! [ 3.717365] ssdk_dt_parse_access_mode[999]:INFO:switch_access_mode: local bus [ 3.723371] ssdk_dt_parse_access_mode[1012]:INFO:switchreg_base_addr: 0x3a000000 [ 3.730651] ssdk_dt_parse_access_mode[1013]:INFO:switchreg_size: 0x1000000 [ 3.738116] ssdk_dt_parse_mac_mode[327]:INFO:mac mode = 0x0 [ 3.744790] ssdk_dt_parse_mac_mode[336]:INFO:mac mode1 = 0xff [ 3.750272] ssdk_dt_parse_mac_mode[345]:INFO:mac mode2 = 0xff [ 3.756221] ssdk_dt_parse_uniphy[364]:INFO:ess-uniphy DT exist! [ 3.762396] ssdk_dt_parse_intf_mac[942]:INFO:dp2 MAC 28:d1:27:70:60:d3 [ 3.767679] ssdk_dt_parse_intf_mac[942]:INFO:dp3 MAC 28:d1:27:4c:e2:49 [ 3.774291] ssdk_dt_parse_intf_mac[942]:INFO:dp4 MAC 28:d1:27:4c:e2:49 [ 3.780800] ssdk_dt_parse_intf_mac[942]:INFO:dp5 MAC 28:d1:27:4c:e2:49 [ 3.787301] ssdk_plat_init[1692]:INFO:ssdk_plat_init start [ 3.909791] ssdk_gcc_clock_init[1275]:INFO:SSDK gcc clock init successfully! [ 3.911097] malibu_phy_api_ops_init[2846]:INFO:qca probe malibu phy driver succeeded! [ 3.916080] hsl_phy_phydev_get[773]:ERROR:phy_addr 0 phydev is NULL [ 3.929660] regi_init[3953]:INFO:Initializing HPPE!! [ 4.167912] ssdk_ppe_reset_init[1535]:INFO:ppe reset successfully! [ 4.171403] qca_hppe_portctrl_hw_init[126]:INFO:Hawkeye PPE port initializing [ 4.173037] hsl_phy_phydev_get[773]:ERROR:phy_addr 0 phydev is NULL [ 4.180328] hsl_phy_phydev_get[773]:ERROR:phy_addr 0 phydev is NULL [ 4.413013] adpt_hppe_port_mux_mac_type_set[2787]:WARN:port 6 need not to configure mux and mac type [ 4.413074] ssdk_switch_register[2017]:INFO:Chip version 0x1500 [ 4.421219] qca_link_polling_select[1487]:INFO:link-polling-required node does not exist [ 4.426848] ssdk_switch_register[2043]:INFO:polling is selected [ 4.435191] regi_init[3957]:INFO:Initializing HPPE Done!! [ 4.440911] ssdk_genl_init[211]:INFO:ssdk genl family register success. [ 4.446381] regi_init[4020]:INFO:qca-ssdk module init succeeded! [ 4.455037] EDMA ver 1 hw init [ 4.459288] EDMA HW Reset completed succesfully [ 4.461941] Num rings - TxDesc:1 (23-23) TxCmpl:1 (7-7) [ 4.466337] RxDesc:1 (15-15) RxFill:1 (7-7) [ 4.472182] Generic PHY 90000.mdio-1:01: attached PHY driver (mii_bus:phy_addr=90000.mdio-1:01, irq=POLL) [ 4.476384] nss-dp 3a001200.dp2 wan: Registered netdev wan(qcom-id:2) [ 4.485857] Generic PHY 90000.mdio-1:02: attached PHY driver (mii_bus:phy_addr=90000.mdio-1:02, irq=POLL) [ 4.492538] nss-dp 3a001400.dp3 lan1: Registered netdev lan1(qcom-id:3) [ 4.501812] Generic PHY 90000.mdio-1:03: attached PHY driver (mii_bus:phy_addr=90000.mdio-1:03, irq=POLL) [ 4.508503] nss-dp 3a001600.dp4 lan2: Registered netdev lan2(qcom-id:4) [ 4.517991] Generic PHY 90000.mdio-1:04: attached PHY driver (mii_bus:phy_addr=90000.mdio-1:04, irq=POLL) [ 4.524636] nss-dp 3a001800.dp5 lan3: Registered netdev lan3(qcom-id:5) [ 4.533912] ********************************************************** [ 4.540151] * NSS Data Plane driver [ 4.546715] ********************************************************** [ 4.558068] kmodloader: done loading kernel modules from /etc/modules-boot.d/* [ 4.566503] init: - preinit - [ 6.008079] nss-dp 3a001400.dp3 lan1: PHY Link up speed: 10 [ 6.008154] IPv6: ADDRCONF(NETDEV_CHANGE): lan1: link becomes ready [ 7.050083] UBIFS (ubi0:1): Mounting in unauthenticated mode [ 7.050212] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 655 [ 7.080466] UBIFS (ubi0:1): recovery needed [ 7.161457] UBIFS (ubi0:1): recovery completed [ 7.161566] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data" [ 7.164797] UBIFS (ubi0:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes [ 7.172718] UBIFS (ubi0:1): FS size: 198717440 bytes (189 MiB, 1565 LEBs), max 1577 LEBs, journal size 9904128 bytes (9 MiB, 78 LEBs) [ 7.182611] UBIFS (ubi0:1): reserved for root: 4952683 bytes (4836 KiB) [ 7.194576] UBIFS (ubi0:1): media format: w5/r0 (latest is w5/r0), UUID AF2C8116-CB6B-4C69-BF57-2CD7BC161504, small LPT model [ 7.205917] mount_root: switching to ubifs overlay [ 7.215872] overlayfs: null uuid detected in lower fs '/', falling back to xino=off,index=off,nfs_export=off. [ 7.221767] urandom-seed: Seeding with /etc/urandom.seed [ 7.289003] nss-dp 3a001400.dp3 lan1: PHY Link is down [ 7.294404] procd: - early - [ 7.294511] procd: - watchdog - [ 7.857578] procd: - watchdog - [ 7.859389] procd: - ubus - [ 7.915501] procd: - init - [ 8.135839] kmodloader: loading kernel modules from /etc/modules.d/* [ 8.190112] Loading modules backported from Linux version v6.1.97-0-g7753af06eebfb [ 8.190155] Backport generated by backports.git v6.1.97-1-0-g2431d56e [ 8.201025] NET: Registered PF_QIPCRTR protocol family [ 8.241381] PPP generic driver version 2.4.2 [ 8.242139] NET: Registered PF_PPPOX protocol family [ 8.252771] ath10k 5.15 driver, optimized for CT firmware, probing pci device: 0x50. [ 8.253276] ath10k_pci 0000:01:00.0: enabling device (0000 -> 0002) [ 8.260039] ath10k_pci 0000:01:00.0: pci irq msi oper_irq_mode 2 irq_mode 0 reset_mode 0 [ 8.348501] urngd: v1.0.2 started. [ 8.988234] ath10k_pci 0000:01:00.0: qca9887 hw1.0 target 0x4100016d chip_id 0x004000ff sub 0000:0000 [ 8.988292] ath10k_pci 0000:01:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0 [ 8.996547] ath10k_pci 0000:01:00.0: firmware ver 10.1-ct-87-__fW-022-ecad3248 api 2 features wmi-10.x,has-wmi-mgmt-tx,mfp,txstatus-noack,wmi-10.x-CT,ratemask-CT,txrate-CT,get-temp-CT,tx-rc-CT,cust-stats-CT,retry-gt2-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT crc32 61a92df5 [ 9.031909] ath10k_pci 0000:01:00.0: Loading BDF type 0 [ 9.032143] ath10k_pci 0000:01:00.0: board_file api 2 bmi_id N/A crc32 b4ce36fa [ 9.902469] ath10k_pci 0000:01:00.0: 10.1 wmi init: vdevs: 16 peers: 127 tid: 256 [ 9.909458] ath10k_pci 0000:01:00.0: wmi print 'P 128 V 8 T 410' [ 9.909509] ath10k_pci 0000:01:00.0: wmi print 'msdu-desc: 1424 sw-crypt: 0 ct-sta: 0' [ 9.915229] ath10k_pci 0000:01:00.0: wmi print 'alloc rem: 25560 iram: 24780' [ 9.962797] ath10k_pci 0000:01:00.0: htt-ver 2.1 wmi-op 2 htt-op 2 cal nvmem max-sta 128 raw 0 hwcrypto 1 [ 9.963152] ath10k_pci 0000:01:00.0: NOTE: Firmware DBGLOG output disabled in debug_mask: 0x10000000 [ 10.079034] ath: EEPROM regdomain: 0x0 [ 10.079041] ath: EEPROM indicates default country code should be used [ 10.079045] ath: doing EEPROM country->regdmn map search [ 10.079050] ath: country maps to regdmn code: 0x3a [ 10.079054] ath: Country alpha2 being used: US [ 10.079058] ath: Regpair used: 0x3a [ 10.089771] ath11k c000000.wifi: ipq8074 hw2.0 [ 10.089809] ath11k c000000.wifi: FW memory mode: 1 [ 10.093416] remoteproc remoteproc0: powering up cd00000.q6v5_wcss [ 10.098142] remoteproc remoteproc0: Booting fw image IPQ8074/q6_fw.mdt, size 668 [ 11.373365] remoteproc remoteproc0: remote processor cd00000.q6v5_wcss is now up [ 11.378149] kmodloader: done loading kernel modules from /etc/modules.d/* [ 11.417620] ath11k c000000.wifi: qmi ignore invalid mem req type 3 [ 11.425088] ath11k c000000.wifi: chip_id 0x0 chip_family 0x0 board_id 0xff soc_id 0xffffffff [ 11.425142] ath11k c000000.wifi: fw_version 0x290c84a5 fw_build_timestamp 2023-03-25 07:34 fw_build_id WLAN.HK.2.9.0.1-01385-QCAHKSWPL_SILICONZ-1 [ 11.640347] ath11k c000000.wifi: htt event 48 not handled [ 13.700929] br-lan: port 1(lan1) entered blocking state [ 13.700977] br-lan: port 1(lan1) entered disabled state [ 13.705236] device lan1 entered promiscuous mode [ 13.722139] br-lan: port 2(lan2) entered blocking state [ 13.722187] br-lan: port 2(lan2) entered disabled state [ 13.726487] device lan2 entered promiscuous mode [ 13.735623] br-lan: port 3(lan3) entered blocking state [ 13.736256] br-lan: port 3(lan3) entered disabled state [ 13.741534] device lan3 entered promiscuous mode [ 13.916638] ath: EEPROM regdomain: 0x80d0 [ 13.916664] ath: EEPROM indicates we should expect a country code [ 13.916668] ath: doing EEPROM country->regdmn map search [ 13.916671] ath: country maps to regdmn code: 0x37 [ 13.916674] ath: Country alpha2 being used: DK [ 13.916678] ath: Regpair used: 0x37 [ 13.916680] ath: regdomain 0x80d0 dynamically updated by user [ 15.350244] ath10k_pci 0000:01:00.0: 10.1 wmi init: vdevs: 16 peers: 127 tid: 256 [ 15.357212] ath10k_pci 0000:01:00.0: wmi print 'P 128 V 8 T 410' [ 15.357261] ath10k_pci 0000:01:00.0: wmi print 'msdu-desc: 1424 sw-crypt: 0 ct-sta: 0' [ 15.363028] ath10k_pci 0000:01:00.0: wmi print 'alloc rem: 25560 iram: 24780' [ 15.410552] ath10k_pci 0000:01:00.0: pdev param 0 not supported by firmware [ 15.415609] ath10k_pci 0000:01:00.0: rts threshold -1 [ 15.417859] br-lan: port 4(phy0-ap0) entered blocking state [ 15.421526] br-lan: port 4(phy0-ap0) entered disabled state [ 15.427136] device phy0-ap0 entered promiscuous mode [ 15.558127] IPv6: ADDRCONF(NETDEV_CHANGE): phy0-ap0: link becomes ready [ 15.558328] br-lan: port 4(phy0-ap0) entered blocking state [ 15.563564] br-lan: port 4(phy0-ap0) entered forwarding state [ 15.569432] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready [ 15.768200] nss-dp 3a001400.dp3 lan1: PHY Link up speed: 10 [ 15.809133] br-lan: port 1(lan1) entered blocking state [ 15.809181] br-lan: port 1(lan1) entered forwarding state [ 16.077799] br-lan: port 5(phy1-ap0) entered blocking state [ 16.077852] br-lan: port 5(phy1-ap0) entered disabled state [ 16.082492] device phy1-ap0 entered promiscuous mode [ 16.087845] br-lan: port 5(phy1-ap0) entered blocking state [ 16.092990] br-lan: port 5(phy1-ap0) entered forwarding state [ 16.100283] device phy1-ap0 left promiscuous mode [ 16.104298] br-lan: port 5(phy1-ap0) entered disabled state [ 16.159550] br-lan: port 5(phy1-ap0) entered blocking state [ 16.159593] br-lan: port 5(phy1-ap0) entered disabled state [ 16.164227] device phy1-ap0 entered promiscuous mode [ 16.169717] br-lan: port 5(phy1-ap0) entered blocking state [ 16.174704] br-lan: port 5(phy1-ap0) entered forwarding state [ 16.279740] br-lan: port 6(phy2-ap0) entered blocking state [ 16.279798] br-lan: port 6(phy2-ap0) entered disabled state [ 16.284384] device phy2-ap0 entered promiscuous mode [ 16.289846] br-lan: port 6(phy2-ap0) entered blocking state [ 16.294904] br-lan: port 6(phy2-ap0) entered forwarding state [ 16.302151] device phy2-ap0 left promiscuous mode [ 16.306170] br-lan: port 6(phy2-ap0) entered disabled state [ 16.369150] br-lan: port 6(phy2-ap0) entered blocking state [ 16.369190] br-lan: port 6(phy2-ap0) entered disabled state [ 16.373729] device phy2-ap0 entered promiscuous mode [ 16.379212] br-lan: port 6(phy2-ap0) entered blocking state [ 16.384299] br-lan: port 6(phy2-ap0) entered forwarding state [ 16.417986] br-lan: port 5(phy1-ap0) entered disabled state [ 16.418281] br-lan: port 6(phy2-ap0) entered disabled state [ 16.495649] IPv6: ADDRCONF(NETDEV_CHANGE): phy2-ap0: link becomes ready [ 16.495819] br-lan: port 6(phy2-ap0) entered blocking state [ 16.501090] br-lan: port 6(phy2-ap0) entered forwarding state [ 16.550084] br-lan: port 7(phy2-ap1) entered blocking state [ 16.550134] br-lan: port 7(phy2-ap1) entered disabled state [ 16.554735] device phy2-ap1 entered promiscuous mode [ 16.561753] br-lan: port 7(phy2-ap1) entered blocking state [ 16.565247] br-lan: port 7(phy2-ap1) entered forwarding state [ 16.669748] IPv6: ADDRCONF(NETDEV_CHANGE): phy2-ap1: link becomes ready [ 27.208107] nss-dp 3a001600.dp4 lan2: PHY Link up speed: 1000 [ 27.208196] br-lan: port 2(lan2) entered blocking state [ 27.212851] br-lan: port 2(lan2) entered forwarding state [ 33.127935] l11: disabling [ 79.940054] IPv6: ADDRCONF(NETDEV_CHANGE): phy1-ap0: link becomes ready [ 79.940255] br-lan: port 5(phy1-ap0) entered blocking state [ 79.945489] br-lan: port 5(phy1-ap0) entered forwarding state

Write a5 5a 00 00 into crash partition to enter into factory mode. Use with caution.

Source: https://www.5v13.com/mesh/26276.html

How to add tags

ipq807x, ipq8071, 256nand, 512ram, 4port, GigabitEthernet, 0USB, MU-MIMO, wifi6, 802.11ax, u-boot, QCN5024, QCN5054, QCA9889, QCA8075, 4core, CortexA53, 4x4, 8x8, TxBF, serial, VLAN, QPF4288, QPF4588, TXPA, Dual firmware, 12v powered

ipq807x ipq8071 256nand 512ram 4port gigabitethernet 0usb mu-mimo wifi6 802.11ax u-boot qcn5024 qcn5054 qca9889 qca8075 4core cortexa53 4x4 8x8 txbf serial vlan qpf4288 qpf4588 txpa Dual firmware 12v powered

Xiaomi Mi AIoT Router AX3600

Supported Versions

Potential Issues and Limitations

Hardware

Highlights

More Info

Notes

Flash Layout

OEM Firmware

OpenWrt Firmware

Installation

Firmware download

Latest stable version:

Latest snapshot version (can be unstable, use with caution):

Obtain SSH Access

Manual method

Bash method

JavaScript method

Patch bdata method

Install the Firmware

For both the Chinese and International firmware model

NSS: Qualcomm Network Accelerator

Debricking

TFTP recovery

Linux

Windows

MiWIFI Repair Tool (Windows)

Photos

External

Internal

Serial

OEM firmware

OpenWrt firmware

How to connect to the Serial Port (UART)

Bootlogs

OEM bootlog

OpenWrt bootlog

Factory mode

Tags