Zyxel NWA110AX
The Zyxel NWA110AX is a dual band 2×2:2 802.11ax wireless access point with PoE.
The device is very similar to the NWA210AX except for being 2×2 instead of 4×4 in the 5GHz band and not having the 2.5GbE ethernet port.
Supported Versions
Hardware Highlights
Installation
Notes
The device uses a dual-image setup and OpenWrt can only be installed as image 0. When the currently running stock firmware is image 0, OpenWrt will be installed as image 1, fail to boot and the device returns to stock firmware. If this happens, install any version of stock firmware so that it runs as image 1, before installing OpenWrt. Alternatively, if there already is a valid stock firmware in image 1, the debug dual-image show and debug dual-image set boot-image image1 commands can be used in the stock CLI via serial/SSH/telnet to switch to image 1.
OEM easy installation
- Get the OpenWrt factory image and rename it to a shorter name, for example openwrt.bin (the stock firmware has a character limit)
- In the web interface, go to Maintenance → File Manager → Firmware Package (or click the link next to Firmware Version under Device Information on the dashboard)
- Under Upload File browse to the renamed OpenWrt factory image and click on Upload
OEM installation using the TFTP method
- Disconnect the device from power
- Configure your machine to 192.168.1.103/24 and start a TFTP server
- Put the stock firmware image into the TFTP server root and rename it to ZLD-current
- Establish a serial connection to the device through the console port
- Connect the device to power
- When prompted, press a key to abort automatic boot and enter debug mode
- Use the atnz command to flash the firmware image
- Use the atgo command to boot from the newly flashed image
Specific values needed for tftp
| Machine tftp server IPv4 address | 192.168.1.103/24 |
|---|---|
| Firmware tftp image | Latest OpenWrt release (NOTE: Name must be “ZLD-current”) |
Switch Boot Image
- OpenWrt to stock: zyxel-bootconfig-ipq807x set image1
- Stock to OpenWrt: debug dual-image set boot-image image0
Upgrading OpenWrt
Debricking
Use the TFTP flashing method above to restore either an OpenWrt or stock firmware image.
Failsafe mode
Basic configuration
→ Basic configuration After flashing, proceed with this.
Specific Configuration
Network interfaces
The default network configuration is:
| Interface Name | Description | Default configuration |
|---|---|---|
| br-lan | Uplink & WiFi | DHCP |
Buttons
→ hardware.button on howto use and configure the hardware button(s). Here, we merely name the buttons, so we can use them in the above Howto.
The ZyXEL NWA110AX has the following buttons:
| BUTTON | Event |
|---|---|
| Reset | reset |
Hardware
Info
Photos
Opening the case
→ Warranty
Opening the case isn't really necessary as the serial port is externally accessible.
Remove all four PH2 and the bigger grounding screw. Lift the cover out with something sharp. The cover is somewhat sticky due to thermal pads.
Serial
→ port.serial general information about the serial port, serial port cable, etc.
How to connect to the Serial Port of this specific device:
| Serial connection parameters for ZyXEL NWA110AX | 115200, 8N1, 3.3V |
|---|
JTAG
→ port.jtag general information about the JTAG port, JTAG cable, etc.
Hardware mods
None so far.
Bootlogs
OEM bootlog
Format: Log Type - Time(microsec) - Message - Optional Info Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00163 S - IMAGE_VARIANT_STRING=HAABANAZA S - OEM_IMAGE_VERSION_STRING=CRM S - Boot Config, 0x000002e1 B - 201 - PBL, Start B - 2736 - bootable_media_detect_entry, Start B - 2882 - bootable_media_detect_success, Start B - 2887 - elf_loader_entry, Start B - 11376 - auth_hash_seg_entry, Start B - 11620 - auth_hash_seg_exit, Start B - 250719 - elf_segs_hash_verify_entry, Start B - 311400 - PBL, End B - 322995 - SBL1, Start B - 374875 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4 B - 381341 - pm_device_init, Start B - 502548 - PM_SET_VAL:Skip D - 120749 - pm_device_init, Delta B - 504958 - pm_driver_init, Start D - 5368 - pm_driver_init, Delta B - 511302 - clock_init, Start D - 2104 - clock_init, Delta B - 515358 - boot_flash_init, Start D - 16439 - boot_flash_init, Delta B - 535458 - boot_config_data_table_init, Start D - 1067 - boot_config_data_table_init, Delta - (575 Bytes) B - 543113 - Boot Setting : 0x00000618 B - 546865 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:9 B - 553788 - sbl1_ddr_set_params, Start B - 557601 - CPR configuration: 0x30c B - 560986 - cpr_init, Start B - 563853 - Rail:0 Mode: 5 Voltage: 816000 B - 569008 - CL CPR settled at 768000mV B - 571844 - Rail:1 Mode: 5 Voltage: 880000 B - 576023 - Rail:1 Mode: 7 Voltage: 920000 D - 16500 - cpr_init, Delta B - 582916 - Pre_DDR_clock_init, Start B - 586942 - Pre_DDR_clock_init, End B - 590236 - DDR Type : PCDDR4 B - 596915 - do ddr sanity test, Start D - 1067 - do ddr sanity test, Delta B - 600728 - DDR: Start of HAL DDR Boot Training B - 605455 - DDR: End of HAL DDR Boot Training B - 611159 - DDR: Checksum to be stored on flash is 1471746091 B - 621559 - Image Load, Start D - 338001 - QSEE Image Loaded, Delta - (1377492 Bytes) B - 959652 - Image Load, Start D - 61 - SEC Image Loaded, Delta - (0 Bytes) B - 967338 - Image Load, Start D - 9882 - DEVCFG Image Loaded, Delta - (26152 Bytes) B - 977311 - Image Load, Start D - 26017 - RPM Image Loaded, Delta - (86660 Bytes) B - 1003419 - Image Load, Start D - 135268 - APPSBL Image Loaded, Delta - (548254 Bytes) B - 1138809 - QSEE Execution, Start D - 61 - QSEE Execution, Delta B - 1144634 - USB D+ check, Start D - 0 - USB D+ check, Delta B - 1151009 - SBL1, End D - 830332 - SBL1, Delta S - Flash Throughput, 4424 KB/s (2039805 Bytes, 460998 us) S - DDR Frequency, 600 MHz S - Core 0 Frequency, 800 MHz U-Boot 2016.01 (Jan 12 2026 - 15:04:09 +0800), Build: jenkins-wlan-ap-nwa110ax.195-311 EXT HW WDT: en=1, wdi=0, flag=0 Watchdog enabled DRAM: smem ram ptable found: ver: 1 len: 4 1 GiB NAND: Could not find nand_gpio in dts, using defaults ONFI device found ID = 1590aaef Vendor = ef Device = aa SPI_ADDR_LEN=3 SF: Detected W25Q64DW with page size 256 Bytes, erase size 4 KiB, total 8 MiB ipq_spi: page_size: 0x100, sector_size: 0x1000, size: 0x800000 264 MiB MMC: sdhci: Node Not found, skipping initialization In: serial@78B3000 Out: serial@78B3000 Err: serial@78B3000 machid: 8010009 MMC Device 0 not found SPI_ADDR_LEN=3 SF: Detected W25Q64DW with page size 256 Bytes, erase size 4 KiB, total 8 MiB device 0 offset 0x610000, size 0x10000 SF: 65536 bytes @ 0x610000 Read: OK Bus 0: i2c@78ba000 (active 0) Setting bus to 0 Valid chip addresses: 30 Hit any key to stop autoboot: 0 Hit any key to stop autoboot: 0 Net: MAC0 addr:0:3:7f:ba:db:ad PHY ID1: 0x4d PHY ID2: 0xd074 EDMA ver 1 hw init Num rings - TxDesc:1 (0-0) TxCmpl:1 (7-7) RxDesc:1 (15-15) RxFill:1 (7-7) ipq807x_edma_alloc_rings: successfull ipq807x_edma_setup_ring_resources: successfull ipq807x_edma_configure_rings: successfull ipq807x_edma_hw_init: successfull eth0 IPQ807x# ? ? - alias for 'help' at - print OK atds - show dual image info atgo - boot athe - show available commands atna - set board IP for tftp atnf - set filename for tftp atns - set server IP for tftp atnz - do firmware update via tftp atsh - dump Manufacturer Related Data (MRD) atsr - reboot IPQ807x# atds atds SPI_ADDR_LEN=3 SF: Detected W25Q64DW with page size 256 Bytes, erase size 4 KiB, total 8 MiB device 0 offset 0x60000, size 0x10000 SF: 65536 bytes @ 0x60000 Read: OK SPI_ADDR_LEN=3 SF: Detected W25Q64DW with page size 256 Bytes, erase size 4 KiB, total 8 MiB device 0 offset 0x80000, size 0x10000 SF: 65536 bytes @ 0x80000 Read: OK image0 status: success (0x2) image1 status: success (0x1) Boot image : image0 IPQ807x# atsh SPI_ADDR_LEN=3 SF: Detected W25Q64DW with page size 256 Bytes, erase size 4 KiB, total 8 MiB device 0 offset 0x610000, size 0x10000 SF: 65536 bytes @ 0x610000 Read: OK Vendor name : Zyxel Communications Corp. Product model : NWA110AX System type : 10 MAC address : bccf4fe5cf10 Default country code : ed Boot module debug flag: 0 Hardware version : Zyxel NWA110AX IPQ807X Serial number : S202L47101234 SNMP MIB level & OID : 060102030405060708091011121314151617181920 Main feature bit : 0 Other feature bits : e1 59 00 00 00 00 00 00 00 00 88 00 00 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 HW test flag : 0 MFG flag : 0 MRD recovery flag : 0 IPQ807x# atnz ipq807x_eth_halt: done eth0 PHY0 up Speed :1000 Full duplex Phy ops not mapped Phy ops not mapped Phy ops not mapped Phy ops not mapped Phy ops not mapped ipq807x_eth_init: done Using eth0 device TFTP from server 192.168.1.103; our IP address is 192.168.1.2 Filename 'ZLD-current'. Load address: 0x44000000 Loading: ^C ipq807x_eth_halt: done Abort IPQ807x# atgo aquantia_port not specified in dtsSPI_ADDR_LEN=3 SF: Detected W25Q64DW with page size 256 Bytes, erase size 4 KiB, total 8 MiB device 0 offset 0x80000, size 0x10000 SF: 65536 bytes @ 0x80000 Read: OK SPI_ADDR_LEN=3 SF: Detected W25Q64DW with page size 256 Bytes, erase size 4 KiB, total 8 MiB device 0 offset 0x60000, size 0x10000 SF: 65536 bytes @ 0x60000 Read: OK SPI_ADDR_LEN=3 SF: Detected W25Q64DW with page size 256 Bytes, erase size 4 KiB, total 8 MiB device 0 offset 0x60000, size 0x10000 SF: 65536 bytes @ 0x60000 Read: OK SPI_ADDR_LEN=3 SF: Detected W25Q64DW with page size 256 Bytes, erase size 4 KiB, total 8 MiB SF: 131072 bytes @ 0x60000 Erased: OK device 0 offset 0x60000, size 0x10000 SF: 65536 bytes @ 0x60000 Written: OK ubi0: attaching mtd2 ubi0: scanning is finished ubi0: volume 3 ("rootfs_data") re-sized from 1 to 133 LEBs ubi0: attached mtd2 (name "mtd=0", size 60 MiB) ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048 ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096 ubi0: good PEBs: 480, bad PEBs: 0, corrupted PEBs: 0 ubi0: user volume: 4, internal volumes: 1, max. volumes count: 128 ubi0: max/mean erase counter: 12/6, WL threshold: 4096, image sequence number: 1747793310 ubi0: available PEBs: 0, total reserved PEBs: 480, PEBs reserved for bad PEB handling: 40 Read 0 bytes from volume kernel to 44000000 No size specified -> Using max size (4444160) ## Loading kernel from FIT Image at 44000000 ... Using 'config@ac01' configuration Trying 'kernel@1' kernel subimage Description: ARM64 OpenWrt Linux-4.4.60 Type: Kernel Image Compression: gzip compressed Data Start: 0x440000e8 Data Size: 3999548 Bytes = 3.8 MiB Architecture: AArch64 OS: Linux Load Address: 0x41080000 Entry Point: 0x41080000 Hash algo: crc32 Hash value: 73d965e2 Hash algo: sha1 Hash value: 03a4547a42462599b9601efc62909a3cf2e0ceff Verifying Hash Integrity ... crc32+ sha1+ OK ## Loading fdt from FIT Image at 44000000 ... Using 'config@ac01' configuration Trying 'fdt@ac01' fdt subimage Description: ARM64 OpenWrt qcom-ipq807x-ac01 device tree blob Type: Flat Device Tree Compression: uncompressed Data Start: 0x4440ed6c Data Size: 82541 Bytes = 80.6 KiB Architecture: AArch64 Hash algo: crc32 Hash value: 801dc20e Hash algo: sha1 Hash value: a59613c29976c2b7feed6568f71cb1107d5f8d09 Verifying Hash Integrity ... crc32+ sha1+ OK Booting using the fdt blob at 0x4440ed6c Uncompressing Kernel Image ... OK Loading Device Tree to 4a3e8000, end 4a3ff26c ... OK Using machid 0x8010009 from environment Starting kernel ... Jumping to AARCH64 kernel via monitor OpenRC init version 0.41.2.7c49bf175 starting Starting sysinit runlevel ^[[74;282R OpenRC 0.41.2.7c49bf175 is starting up Linux 4.4.60 (aarch64) * Mounting /proc ... [ ok ] * Mounting /run ... * /run/openrc: creating directory * /run/lock: creating directory * Caching service dependencies ... [ ok ] * Mounting /sys ... * Remounting devtmpfs on /dev ... [ ok ] [ ok ] * Mounting debug filesystem ... [ ok ] * Mounting /dev/mqueue ... * Mounting config filesystem ... [ ok ] [ ok ] * Mounting /dev/pts ... [ ok ] * Mounting /dev/shm ... [ ok ] mdev 6.903 | * Setting up mdev as hotplug agent ... mdev 6.908 | [ ok ] mdev 6.915 | * Populating /dev with existing devices with mdev -s ... mdev 7.657 | [ ok ] Starting boot runlevel Starting default runlevel Firmware upgrade successful.......... Start EnterpriseWLAN system daemon.... .. Got LINK_CHANGE ................................... WIFI FW mount is successful ln: ./firmware_rdp_feature.ini: Read-only file system 12064+0 records in 12064+0 records out 12064 bytes (11.8KB) copied, 0.051904 seconds, 227.0KB/s 131072+0 records in 131072+0 records out 131072 bytes (128.0KB) copied, 0.501372 seconds, 255.3KB/s ***** starting cnssdaemon -i integrated ***** *****cnssdaemon pid=3406********* *********initiating cold boot calibration************* No Direct-Attach chipsets found. Applying system configuration file, please wait... CLI converting stage1 for startup-config.conf ... ............................EnterpriseWLAN system is configured successfully with startup-config.conf CLI converting stage2 for startup-config.conf ... netopeer-server start Got LINK_CHANGE Port [0] Copper is up --> Group [0] is up Welcome to NWA110AX Username:
OpenWrt bootlog
Format: Log Type - Time(microsec) - Message - Optional Info Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic S - QC_IMAGE_VERSION_STRING=BOOT. Switch Boot Image: * OpenWrt to stock: "zyxel-bootconfig-ipq807x set image1" * Stock to OpenWrt: "debug dual-image set boot-image image0" BF.3.3.1-00163 S - IMAGE_VARIANT_STRING=HAABANAZA S - OEM_IMAGE_VERSION_STRING=CRM S - Boot Config, 0x000002e1 B - 201 - PBL, Start B - 2734 - bootable_media_detect_entry, Start B - 2880 - bootable_media_detect_success, Start B - 2884 - elf_loader_entry, Start B - 11373 - auth_hash_seg_entry, Start B - 11615 - auth_hash_seg_exit, Start B - 250713 - elf_segs_hash_verify_entry, Start B - 311398 - PBL, End B - 485682 - SBL1, Start B - 563579 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4 B - 573339 - pm_device_init, Start B - 752679 - PM_SET_VAL:Skip D - 177479 - pm_device_init, Delta B - 755088 - pm_driver_init, Start D - 5337 - pm_driver_init, Delta B - 761402 - clock_init, Start D - 2135 - clock_init, Delta B - 765458 - boot_flash_init, Start D - 16348 - boot_flash_init, Delta B - 785588 - boot_config_data_table_init, Start D - 1067 - boot_config_data_table_init, Delta - (575 Bytes) B - 793213 - Boot Setting : 0x00000618 B - 796965 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:9 B - 803888 - sbl1_ddr_set_params, Start B - 807731 - CPR configuration: 0x30c B - 811086 - cpr_init, Start B - 813984 - Rail:0 Mode: 5 Voltage: 816000 B - 819138 - CL CPR settled at 768000mV B - 821975 - Rail:1 Mode: 5 Voltage: 880000 B - 826153 - Rail:1 Mode: 7 Voltage: 920000 D - 16500 - cpr_init, Delta B - 833046 - Pre_DDR_clock_init, Start B - 837072 - Pre_DDR_clock_init, End B - 840366 - DDR Type : PCDDR4 B - 847046 - do ddr sanity test, Start D - 1067 - do ddr sanity test, Delta B - 850858 - DDR: Start of HAL DDR Boot Training B - 855616 - DDR: End of HAL DDR Boot Training B - 861289 - DDR: Checksum to be stored on flash is 1471746091 B - 871720 - Image Load, Start D - 338001 - QSEE Image Loaded, Delta - (1377492 Bytes) B - 1209813 - Image Load, Start D - 30 - SEC Image Loaded, Delta - (0 Bytes) B - 1217499 - Image Load, Start D - 9882 - DEVCFG Image Loaded, Delta - (26152 Bytes) B - 1227472 - Image Load, Start D - 26017 - RPM Image Loaded, Delta - (86660 Bytes) B - 1253580 - Image Load, Start D - 135237 - APPSBL Image Loaded, Delta - (548254 Bytes) B - 1388939 - QSEE Execution, Start D - 91 - QSEE Execution, Delta B - 1394734 - USB D+ check, Start D - 0 - USB D+ check, Delta B - 1401139 - SBL1, End D - 917745 - SBL1, Delta S - Flash Throughput, 4425 KB/s (2039805 Bytes, 460877 us) S - DDR Frequency, 600 MHz S - Core 0 Frequency, 800 MHz U-Boot 2016.01 (Jan 12 2026 - 15:04:09 +0800), Build: jenkins-wlan-ap-nwa110ax.195-311 EXT HW WDT: en=1, wdi=0, flag=0 Watchdog enabled DRAM: smem ram ptable found: ver: 1 len: 4 1 GiB NAND: Could not find nand_gpio in dts, using defaults ONFI device found ID = 1590aaef Vendor = ef Device = aa SPI_ADDR_LEN=3 SF: Detected W25Q64DW with page size 256 Bytes, erase size 4 KiB, total 8 MiB ipq_spi: page_size: 0x100, sector_size: 0x1000, size: 0x800000 264 MiB MMC: sdhci: Node Not found, skipping initialization In: serial@78B3000 Out: serial@78B3000 Err: serial@78B3000 machid: 8010009 MMC Device 0 not found SPI_ADDR_LEN=3 SF: Detected W25Q64DW with page size 256 Bytes, erase size 4 KiB, total 8 MiB device 0 offset 0x610000, size 0x10000 SF: 65536 bytes @ 0x610000 Read: OK Bus 0: i2c@78ba000 (active 0) Setting bus to 0 Valid chip addresses: 30 Hit any key to stop autoboot: 0 aquantia_port not specified in dtsSPI_ADDR_LEN=3 SF: Detected W25Q64DW with page size 256 Bytes, erase size 4 KiB, total 8 MiB device 0 offset 0x80000, size 0x10000 SF: 65536 bytes @ 0x80000 Read: OK SPI_ADDR_LEN=3 SF: Detected W25Q64DW with page size 256 Bytes, erase size 4 KiB, total 8 MiB device 0 offset 0x60000, size 0x10000 SF: 65536 bytes @ 0x60000 Read: OK ubi0: attaching mtd2 ubi0: scanning is finished ubi0: attached mtd2 (name "mtd=0", size 60 MiB) ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048 ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096 ubi0: good PEBs: 480, bad PEBs: 0, corrupted PEBs: 0 ubi0: user volume: 3, internal volumes: 1, max. volumes count: 128 ubi0: max/mean erase counter: 3/1, WL threshold: 4096, image sequence number: 1610532512 ubi0: available PEBs: 0, total reserved PEBs: 480, PEBs reserved for bad PEB handling: 40 Read 0 bytes from volume kernel to 44000000 No size specified -> Using max size (5586944) ## Loading kernel from FIT Image at 44000000 ... Using 'config@ac01' configuration Trying 'kernel-1' kernel subimage Description: ARM64 OpenWrt Linux-6.12.68 Type: Kernel Image Compression: gzip compressed Data Start: 0x440000e8 Data Size: 5522198 Bytes = 5.3 MiB Architecture: AArch64 OS: Linux Load Address: 0x41000000 Entry Point: 0x41000000 Hash algo: crc32 Hash value: a179a26e Hash algo: sha1 Hash value: aaef8636f4ed31451ee3248c22f310a80c123d04 Verifying Hash Integrity ... crc32+ sha1+ OK ## Loading fdt from FIT Image at 44000000 ... Using 'config@ac01' configuration Trying 'fdt-1' fdt subimage Description: ARM64 OpenWrt zyxel_nwa110ax device tree blob Type: Flat Device Tree Compression: uncompressed Data Start: 0x44544540 Data Size: 45323 Bytes = 44.3 KiB Architecture: AArch64 Hash algo: crc32 Hash value: e109e5ce Hash algo: sha1 Hash value: 6e415b97dacf6e17c3117128b2dd2547307d54b7 Verifying Hash Integrity ... crc32+ sha1+ OK Booting using the fdt blob at 0x44544540 Uncompressing Kernel Image ... OK Loading Device Tree to 4a3f1000, end 4a3ff10a ... OK fdt-fixup: unable to find compatible node Using machid 0x8010009 from environment Starting kernel ... Jumping to AARCH64 kernel via monitor [ 0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034] [ 0.000000] Linux version 6.12.68 (build@e403190db63e) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 14.3.0 r32902-b7cd16dba3) 14.3.0, GNU ld (GNU Binutils) 2.44) #0 SMP Mon Feb 2 23:13:59 2026 [ 0.000000] Machine model: Zyxel NWA110AX [ 0.000000] OF: reserved mem: 0x0000000040000000..0x0000000040ffffff (16384 KiB) nomap non-reusable nss@40000000 [ 0.000000] OF: reserved mem: 0x000000004a400000..0x000000004a5fffff (2048 KiB) nomap non-reusable tzapp@4a400000 [ 0.000000] OF: reserved mem: 0x000000004a600000..0x000000004a9fffff (4096 KiB) nomap non-reusable bootloader@4a600000 [ 0.000000] OF: reserved mem: 0x000000004aa00000..0x000000004aafffff (1024 KiB) nomap non-reusable sbl@4aa00000 [ 0.000000] OF: reserved mem: 0x000000004ab00000..0x000000004abfffff (1024 KiB) nomap non-reusable smem@4ab00000 [ 0.000000] OF: reserved mem: 0x000000004ac00000..0x000000004affffff (4096 KiB) nomap non-reusable memory@4ac00000 [ 0.000000] OF: reserved mem: 0x000000004b000000..0x0000000050efffff (97280 KiB) nomap non-reusable wcnss@4b000000 [ 0.000000] OF: reserved mem: 0x0000000050f00000..0x0000000050ffffff (1024 KiB) nomap non-reusable q6_etr_dump@50f00000 [ 0.000000] OF: reserved mem: 0x0000000051000000..0x00000000510fffff (1024 KiB) nomap non-reusable m3_dump@51000000 [ 0.000000] Zone ranges: [ 0.000000] DMA [mem 0x0000000040000000-0x000000007fffffff] [ 0.000000] DMA32 empty [ 0.000000] Normal empty [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000040000000-0x0000000040ffffff] [ 0.000000] node 0: [mem 0x0000000041000000-0x000000004a3fffff] [ 0.000000] node 0: [mem 0x000000004a400000-0x00000000510fffff] [ 0.000000] node 0: [mem 0x0000000051100000-0x000000007fffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000007fffffff] [ 0.000000] psci: probing for conduit method from DT. [ 0.000000] psci: PSCIv1.0 detected in firmware. [ 0.000000] psci: Using standard PSCI v0.2 function IDs [ 0.000000] psci: MIGRATE_INFO_TYPE not supported. [ 0.000000] psci: SMC Calling Convention v1.0 [ 0.000000] percpu: Embedded 20 pages/cpu s43224 r8192 d30504 u81920 [ 0.000000] Detected VIPT I-cache on CPU0 [ 0.000000] alternatives: applying boot alternatives [ 0.000000] Kernel command line: console=ttyMSM0,115200n8 loglevel=0 bootImage=0 mtdoops.mtddev=disklog mtdoops.record_size=126976 mtdoops.dump_oops=0 ubi.mtd=rootfs root=mtd:ubi_rootfs rootfstype=squashfs rootwait root=/dev/ubiblock0_1 loglevel=7 [ 0.000000] Unknown kernel command line parameters "bootImage=0", will be passed to user space. [ 0.000000] Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) [ 0.000000] Inode-cache hash table entries: 65536 (order: 7, 524288 bytes, linear) [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 262144 [ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off [ 0.000000] software IO TLB: SWIOTLB bounce buffer size adjusted to 1MB [ 0.000000] software IO TLB: area num 4. [ 0.000000] software IO TLB: mapped [mem 0x000000007eb00000-0x000000007ec00000] (1MB) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 [ 0.000000] rcu: Hierarchical RCU implementation. [ 0.000000] Tracing variant of Tasks RCU enabled. [ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 0.000000] RCU Tasks Trace: Setting shift to 2 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=4. [ 0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 [ 0.000000] Root IRQ handler: gic_handle_irq [ 0.000000] GICv2m: range[mem 0x0b00a000-0x0b00affc], SPI[448:479] [ 0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention. [ 0.000000] arch_timer: cp15 and mmio timer(s) running at 19.20MHz (virt/virt). [ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x46d987e47, max_idle_ns: 440795202767 ns [ 0.000001] sched_clock: 56 bits at 19MHz, resolution 52ns, wraps every 4398046511078ns [ 0.000109] Calibrating delay loop (skipped), value calculated using timer frequency.. 38.40 BogoMIPS (lpj=192000) [ 0.000122] pid_max: default: 32768 minimum: 301 [ 0.005166] Mount-cache hash table entries: 2048 (order: 2, 16384 bytes, linear) [ 0.005182] Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes, linear) [ 0.010228] rcu: Hierarchical SRCU implementation. [ 0.010238] rcu: Max phase no-delay instances is 1000. [ 0.010542] Timer migration: 1 hierarchy levels; 8 children per group; 1 crossnode level [ 0.010960] smp: Bringing up secondary CPUs ... [ 0.011642] Detected VIPT I-cache on CPU1 [ 0.011761] CPU1: Booted secondary processor 0x0000000001 [0x410fd034] [ 0.012533] Detected VIPT I-cache on CPU2 [ 0.012614] CPU2: Booted secondary processor 0x0000000002 [0x410fd034] [ 0.013304] Detected VIPT I-cache on CPU3 [ 0.013378] CPU3: Booted secondary processor 0x0000000003 [0x410fd034] [ 0.013461] smp: Brought up 1 node, 4 CPUs [ 0.013469] SMP: Total of 4 processors activated. [ 0.013473] CPU: All CPU(s) started at EL1 [ 0.013477] CPU features: detected: 32-bit EL0 Support [ 0.013482] CPU features: detected: CRC32 instructions [ 0.013529] alternatives: applying system-wide alternatives [ 0.013740] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching [ 0.014027] Memory: 881652K/1048576K available (8768K kernel code, 902K rwdata, 2864K rodata, 960K init, 286K bss, 163452K reserved, 0K cma-reserved) [ 0.023703] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.023730] futex hash table entries: 1024 (order: 4, 65536 bytes, linear) [ 0.023869] 29264 pages in range for non-PLT usage [ 0.023874] 520784 pages in range for PLT usage [ 0.026014] pinctrl core: initialized pinctrl subsystem [ 0.028250] NET: Registered PF_NETLINK/PF_ROUTE protocol family [ 0.028887] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations [ 0.028926] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations [ 0.028961] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations [ 0.029364] thermal_sys: Registered thermal governor 'step_wise' [ 0.029429] cpuidle: using governor menu [ 0.029702] ASID allocator initialised with 65536 entries [ 0.060729] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 4 [ 0.083552] SCSI subsystem initialized [ 0.083777] usbcore: registered new interface driver usbfs [ 0.083818] usbcore: registered new interface driver hub [ 0.083867] usbcore: registered new device driver usb [ 0.084163] qcom_scm: convention: smc arm 64 [ 0.086060] clocksource: Switched to clocksource arch_sys_counter [ 0.089775] NET: Registered PF_INET protocol family [ 0.089965] IP idents hash table entries: 16384 (order: 5, 131072 bytes, linear) [ 0.092376] tcp_listen_portaddr_hash hash table entries: 512 (order: 1, 8192 bytes, linear) [ 0.092401] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) [ 0.092417] TCP established hash table entries: 8192 (order: 4, 65536 bytes, linear) [ 0.092504] TCP bind hash table entries: 8192 (order: 6, 262144 bytes, linear) [ 0.092853] TCP: Hash tables configured (established 8192 bind 8192) [ 0.093388] MPTCP token hash table entries: 1024 (order: 3, 24576 bytes, linear) [ 0.093580] UDP hash table entries: 512 (order: 2, 16384 bytes, linear) [ 0.093620] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes, linear) [ 0.094067] NET: Registered PF_UNIX/PF_LOCAL protocol family [ 0.094109] PCI: CLS 0 bytes, default 64 [ 0.095987] workingset: timestamp_bits=46 max_order=18 bucket_order=0 [ 0.096568] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.096576] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.109937] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled [ 0.110965] msm_serial 78b3000.serial: msm_serial: detected port #0 [ 0.111056] msm_serial 78b3000.serial: uartclk = 3686400 [ 0.111432] 78b3000.serial: ttyMSM0 at MMIO 0x78b3000 (irq = 19, base_baud = 230400) is a MSM [ 0.111479] msm_serial: console setup on port #0 [ 0.111517] printk: legacy console [ttyMSM0] enabled [ 0.863611] msm_serial: driver initialized [ 0.873504] loop: module loaded [ 0.874964] nand: device found, Manufacturer ID: 0xef, Chip ID: 0xaa [ 0.875472] nand: Winbond W29N02GZ [ 0.882102] nand: 256 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64 [ 0.885562] 5 fixed-partitions partitions found on MTD device qcom_nand.0 [ 0.892850] Creating 5 MTD partitions on "qcom_nand.0": [ 0.899698] 0x000000000000-0x000003c00000 : "rootfs" [ 0.957728] mtd: setting mtd0 (rootfs) as root device [ 0.958099] mtdsplit: no squashfs found in "rootfs" [ 0.961781] 0x000003c00000-0x000004400000 : "0:WIFIFW" [ 0.973898] 0x000004400000-0x000008000000 : "rootfs_1" [ 1.027362] 0x000008000000-0x000008800000 : "0:WIFIFW_1" [ 1.034952] 0x000008800000-0x000010000000 : "logs" [ 1.145648] spi_qup 78b5000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64 [ 1.147142] 21 fixed-partitions partitions found on MTD device spi0.0 [ 1.151793] Creating 21 MTD partitions on "spi0.0": [ 1.158153] 0x000000000000-0x000000050000 : "0:sbl1" [ 1.163325] 0x000000050000-0x000000060000 : "0:mibib" [ 1.168594] 0x000000060000-0x000000080000 : "0:bootconfig" [ 1.173382] 0x000000080000-0x0000000a0000 : "0:bootconfig1" [ 1.178818] 0x0000000a0000-0x000000220000 : "0:qsee" [ 1.184203] 0x000000220000-0x0000003a0000 : "0:qsee_1" [ 1.189514] 0x0000003a0000-0x0000003b0000 : "0:devcfg" [ 1.194388] 0x0000003b0000-0x0000003c0000 : "0:devcfg_1" [ 1.199550] 0x0000003c0000-0x0000003d0000 : "0:apdp" [ 1.204968] 0x0000003d0000-0x0000003e0000 : "0:apdp_1" [ 1.209989] 0x0000003e0000-0x000000420000 : "0:rpm" [ 1.214863] 0x000000420000-0x000000460000 : "0:rpm_1" [ 1.219699] 0x000000460000-0x000000470000 : "0:cdt" [ 1.224859] 0x000000470000-0x000000480000 : "0:cdt_1" [ 1.229565] 0x000000480000-0x000000490000 : "0:appsblenv" [ 1.234751] 0x000000490000-0x000000530000 : "0:appsbl" [ 1.240244] 0x000000530000-0x0000005d0000 : "0:appsbl_1" [ 1.245175] 0x0000005d0000-0x000000610000 : "0:art" [ 1.250675] 0x000000610000-0x000000620000 : "mrd" [ 1.255682] 0x000000620000-0x000000630000 : "mrd_1" [ 1.260227] 0x000000630000-0x000000800000 : "conf" [ 1.273219] spmi_pmic_arb 200f000.spmi: PMIC arbiter version v2 (0x20010000) [ 1.291088] i2c_dev: i2c /dev entries driver [ 1.300146] sdhci: Secure Digital Host Controller Interface driver [ 1.300198] sdhci: Copyright(c) Pierre Ossman [ 1.305234] sdhci-pltfm: SDHCI platform and OF driver helper [ 1.311253] remoteproc remoteproc0: releasing cd00000.q6v5_wcss [ 1.319101] NET: Registered PF_INET6 protocol family [ 1.322516] Segment Routing with IPv6 [ 1.326335] In-situ OAM (IOAM) with IPv6 [ 1.329872] NET: Registered PF_PACKET protocol family [ 1.334023] 8021q: 802.1Q VLAN Support v1.8 [ 1.372917] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 4 [ 1.373347] cpr4_ipq807x_apss_read_fuse_data: apc_corner: speed bin = 0 [ 1.379085] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR fusing revision = 1 [ 1.385650] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR misc fuse value = 0 [ 1.393361] cpr4_ipq807x_apss_read_fuse_data: apc_corner: Voltage boost fuse config = 0 boost = disable [ 1.400892] cpr3_mem_acc_init: apc: not using memory accelerator regulator [ 1.409980] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused SVS: open-loop= 712000 uV [ 1.416928] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused NOM: open-loop= 840000 uV [ 1.426904] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused TURBO: open-loop= 904000 uV [ 1.436713] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused STURBO: open-loop= 992000 uV [ 1.446572] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused SVS: quot[ 7]= 704, quot_offset[ 7]= 0 [ 1.456341] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused NOM: quot[ 7]= 938, quot_offset[ 7]= 230 [ 1.467197] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused TURBO: quot[ 7]=1041, quot_offset[ 7]= 100 [ 1.478128] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused STURBO: quot[ 7]=1190, quot_offset[ 7]= 145 [ 1.489318] cpr3_regulator_init_ctrl: apc: Default CPR mode = closed-loop [ 1.492916] cpufreq: cpufreq_online: CPU0: Running at unlisted initial frequency: 800000 KHz, changing to: 1017600 KHz [ 1.509468] remoteproc remoteproc0: cd00000.q6v5_wcss is available [ 1.518505] ubi0: attaching mtd0 [ 1.840328] ubi0: scanning is finished [ 1.906645] ubi0: attached mtd0 (name "rootfs", size 60 MiB) [ 1.906693] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes [ 1.911386] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048 [ 1.918086] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096 [ 1.924927] ubi0: good PEBs: 480, bad PEBs: 0, corrupted PEBs: 0 [ 1.931705] ubi0: user volume: 3, internal volumes: 1, max. volumes count: 128 [ 1.937957] ubi0: max/mean erase counter: 3/1, WL threshold: 4096, image sequence number: 1610532512 [ 1.944985] ubi0: available PEBs: 0, total reserved PEBs: 480, PEBs reserved for bad PEB handling: 40 [ 1.954296] ubi0: background thread "ubi_bgt0d" started, PID 646 [ 1.964064] block ubiblock0_1: created from ubi0:1(rootfs) [ 1.969621] clk: Disabling unused[ 1.981965] VFS: Mounted root (squashfs filesystem) readonly on device 254:0. [ 1.982470] Freeing unused kernel memory: 960K [ 1.988247] Run /sbin/init as init process [ 2.199099] init: Console is alive [ 2.199245] init: - watchdog - [ 2.678728] kmodloader: loading kernel modules from /etc/modules-boot.d/* [ 2.747305] gpio_button_hotplug: loading out-of-tree module taints kernel. [ 2.836943] ssdk_dt_parse_port_bmp[1064]:INFO:port_bmp doesn't exist! [ 2.837007] ssdk_dt_parse_interrupt[942]:INFO:intr-gpio does not exist [ 3.443203] regi_init[2525]:INFO:Initializing HPPE Done!! [ 3.443342] regi_init[2574]:INFO:qca-ssdk module init succeeded! [ 3.450319] EDMA ver 1 hw init [ 3.453893] EDMA HW Reset completed succesfully [ 3.456592] Num rings - TxDesc:1 (23-23) TxCmpl:1 (7-7) [ 3.460963] RxDesc:1 (15-15) RxFill:1 (7-7) [ 3.536531] Qualcomm Atheros AR8031/AR8033 90000.mdio-1:01: attached PHY driver (mii_bus:phy_addr=90000.mdio-1:01, irq=POLL) [ 3.537553] ********************************************************** [ 3.546850] * NSS Data Plane driver [ 3.553155] ********************************************************** [ 3.589449] lp5562 0-0030: internal clock used [ 3.591355] lp5562 0-0030: lp5562 Programmable led chip found [ 3.595199] kmodloader: done loading kernel modules from /etc/modules-boot.d/* [ 3.602659] init: - preinit - [ 4.216064] random: crng init done Cannot parse config file '/etc/fw_env.config': No such file or directory Failed to find NVMEM device Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 7.606436] nss-dp 3a001000.dp1 uplink: PHY Link up speed: 1000 [ 8.773692] UBIFS (ubi0:2): Mounting in unauthenticated mode [ 8.773875] UBIFS (ubi0:2): background thread "ubifs_bgt0_2" started, PID 831 [ 8.810301] UBIFS (ubi0:2): recovery needed [ 8.917679] UBIFS (ubi0:2): recovery completed [ 8.917790] UBIFS (ubi0:2): UBIFS: mounted UBI device 0, volume 2, name "rootfs_data" [ 8.921033] UBIFS (ubi0:2): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes [ 8.928954] UBIFS (ubi0:2): FS size: 41140224 bytes (39 MiB, 324 LEBs), max 334 LEBs, journal size 2031616 bytes (1 MiB, 16 LEBs) [ 8.938847] UBIFS (ubi0:2): reserved for root: 1943154 bytes (1897 KiB) [ 8.950465] UBIFS (ubi0:2): media format: w5/r0 (latest is w5/r0), UUID 69248EBC-69D4-4A1D-81F0-FB29731C8298, small LPT model [ 8.961337] mount_root: switching to ubifs overlay [ 8.972795] overlayfs: null uuid detected in lower fs '/', falling back to xino=off,index=off,nfs_export=off. [ 8.977343] urandom-seed: Seeding with /etc/urandom.seed [ 9.106388] nss-dp 3a001000.dp1 uplink: PHY Link is down [ 9.111370] procd: - early - [ 9.111488] procd: - watchdog - [ 9.674060] procd: - watchdog - [ 9.674674] procd: - ubus - [ 9.828143] procd: - init - Please press Enter to activate this console. [ 10.193687] kmodloader: loading kernel modules from /etc/modules.d/* [ 10.340570] Loading modules backported from Linux version v6.18.7-0-g5dfbc5357 [ 10.340618] Backport generated by backports.git c8a37ce [ 10.354367] NET: Registered PF_QIPCRTR protocol family [ 10.425102] urngd: v1.0.2 started. [ 10.487865] PPP generic driver version 2.4.2 [ 10.489021] NET: Registered PF_PPPOX protocol family [ 10.530681] ath11k c000000.wifi: ipq8074 hw2.0 [ 10.530724] ath11k c000000.wifi: FW memory mode: 0 [ 10.569439] remoteproc remoteproc0: powering up cd00000.q6v5_wcss [ 10.569887] remoteproc remoteproc0: Booting fw image IPQ8074/q6_fw.mdt, size 668 [ 11.831759] remoteproc remoteproc0: remote processor cd00000.q6v5_wcss is now up [ 11.875739] ath11k c000000.wifi: qmi fail to get qcom,m3-dump-addr, ignore m3 dump mem req [ 11.883219] ath11k c000000.wifi: chip_id 0x0 chip_family 0x0 board_id 0xff soc_id 0xffffffff [ 11.883256] ath11k c000000.wifi: fw_version 0x290b84a5 fw_build_timestamp 2024-09-23 11:32 fw_build_id WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 [ 12.178804] remoteproc remoteproc0: stopped remote processor cd00000.q6v5_wcss [ 12.178857] remoteproc remoteproc0: powering up cd00000.q6v5_wcss [ 12.185028] remoteproc remoteproc0: Booting fw image IPQ8074/q6_fw.mdt, size 668 [ 12.539372] remoteproc remoteproc0: remote processor cd00000.q6v5_wcss is now up [ 12.543555] kmodloader: done loading kernel modules from /etc/modules.d/* [ 12.583412] ath11k c000000.wifi: qmi fail to get qcom,m3-dump-addr, ignore m3 dump mem req [ 12.590921] ath11k c000000.wifi: chip_id 0x0 chip_family 0x0 board_id 0xff soc_id 0xffffffff [ 12.590981] ath11k c000000.wifi: fw_version 0x290b84a5 fw_build_timestamp 2024-09-23 11:32 fw_build_id WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 [ 12.916522] ath11k c000000.wifi: htt event 48 not handled [ 15.212694] br-lan: port 1(uplink) entered blocking state [ 15.212749] br-lan: port 1(uplink) entered disabled state [ 15.217215] nss-dp 3a001000.dp1 uplink: entered allmulticast mode [ 15.222812] nss-dp 3a001000.dp1 uplink: entered promiscuous mode [ 18.326427] nss-dp 3a001000.dp1 uplink: PHY Link up speed: 1000 [ 18.326510] br-lan: port 1(uplink) entered blocking state [ 18.331177] br-lan: port 1(uplink) entered forwarding state [ 22.886698] platform 73a000.crypto: deferred probe pending: (reason unknown) [ 32.486154] l11: disabling


