Adding OpenWrt support for Netgear EX6200v2 (sanity check on approach)

Hi all,

Let me start with a disclaimer on experience; assume I know nothing, I am a linux user and know enough to be dangerous in a command line, however I am not a developer and this is my first time undertaking this sort of endeavor so please forgive me if my post is a little disorganized. I am very much in the discovery phase of learning how little I know haha.

I would like to add support to the Netgear EX6200v2. I understand this device is similar to the EX6150v2 and EX6100v2. There have been some posts on the forum indicating at least one user has had success creating an image however it doesn't look like this has been well documented nor has device support been added to the table of hardware.

I've followed read through some developer guides for getting access, getting important files, and I think I have an idea of what to do next, but would like to confirm if I'm on the right path and identify any gaps I might be unaware of in the approach.

Here's what I've done so far:

  • got telnet access and extracted "important files"
  • cloned the OpenWrt repository onto my linux machine
  • searched locally via grep for ex6100v2 and 6150v2 and got the list of files which were changed to support those devices. those files are:
    - target/linux/ipq40xx/image/generic.mk
    - target/linux/ipq40xx/files/arch/arm/boot/dts/qcom-ipq4018-ex6100v2.dts
    - target/linux/ipq40xx/base-files/etc/board.d/01_leds

I have some specific questions on those files but first to confirm what the next steps are: I assume that editing/creating new files will populate menuconfig with the appropriate option under Target Profile? afterwards I can build the image in menuconfig that I can flash and test?

questions on specific files:
generic.mk

Looking at the file and searching for the the EX6100v2 or 6150v2 I find this definition

define Device/netgear_ex6100v2
        $(call Device/netgear_ex61x0v2)
        DEVICE_MODEL := EX6100
        DEVICE_VARIANT := v2
endef

following this definition, I assume that I'd need to edit this file and add a similar definition for the EX6200v2 where I just define the device model and device variant?

because the device has the same SOC, I assume that I can use the existing call Device section? for reference that definition in the generic.mk file is:

define Device/netgear_ex61x0v2
        $(call Device/DniImage)
        DEVICE_VENDOR := NETGEAR
        DEVICE_DTS_CONFIG := config@4
        NETGEAR_BOARD_ID := EX6150v2series
        NETGEAR_HW_ID := 29765285+16+0+128+2x2
        IMAGE_SIZE := 14400k
        SOC := qcom-ipq4018
endef

dts
This file looks pretty straight forward, for reference the file contents for the 6100v2 is:

/ {
        model = "Netgear EX6100v2";
        compatible = "netgear,ex6100v2";
};

&wifi0 {
        qcom,ath10k-calibration-variant = "Netgear-EX6100v2";
};

&wifi1 {
        qcom,ath10k-calibration-variant = "Netgear-EX6100v2";
};

I assume that I need to make a copy of this file and make it specific for the EX6200v2 by essentially find & replace references to the EX6100? am I dumbing this down too much? if so, please point me in the right direction.

I am a little unsure about the qcom,ath10k-calibration-variant though. Based on the name of the section, it sounds like this is something for qualcom Atheros radios? kinda speculating though solely on the name though. the EX6100v2 has qualcom IPQ4018 radios so maybe it doesn't matter if that section stays the same? Or maybe I'm completely misunderstanding this haha.

01_leds
I'm guessing that here is where I'd input the gpio numbers and polarity? I'm a little unsure on the syntax here but this seems like the least critical file to edit. I'll cross that bridge when I get to it as I didn't have much luck just yet identifying the gpio numbers.

While navigating to this file I did also see there's a file named 03_gpio_switches. that sounds like something I'd need to edit to capture the reset button and any other physical buttons?

other questions
I'm really going to highlight my inexperience but, how do I identify what boot loader this device has? I assume that a boot loader is different than the shell console (busy box) that I was able to access. Or do I not need access to it assuming I can build an image with menuconfig? Can someone recommend a resource to get better acquainted with this?

Anyway, that's as far as I've gotten for now. Definitely feeling in over my head but this sounds like a fun challenge. How far off base am I?

TL;DR
IMHO the easiest way to get knowledge about what to change is having a look at the git commit of a recently added device (or the similar ones, if it's not too old).

And do not attempt to flash anything before having gained access to the serial console via UART. This answers the last question: How to know which bootloader? Just watch the serial console. You will want to use the serial console to first boot an initramfs image, fix things, and then try to flash it.

Thanks for the advice, I looked at the git commits for the similar devices and found some other file changes that I missed.

I also ordered a usb to ttl cable to get that uart console. I popped open the device earlier today and it looks like the serial port has pins already installed so no soldering needed thankfully.

Just to update on my progress so far, I went ahead and updated the dts and generic.mk file and like I suspected the target profile option in menuconfig was populated (sweet!). I tried to build an image but for an error, which I imagine might be associated with the other file changes I wasn’t aware of in the gut commit. But will have to pick this up later on in the week.

Run make V=s to get output about the error. Often, it's just a small issue with the .dts. The other files (like network and LED setup) are executed on the device itself and, AFAIK, not parsed or checked during the build.

good news! I was able to access the serial console. I didn't have much luck getting tio to work on my Mac but I busted out an old windows laptop and was able to get this working with TeraTerm.

I'll try to paste the output of the serial console below (might be broken up due to character limits.

It looks like it's using uboot. Should I be able to enter a shell from here? I assume so in order to boot an initramfs image, however. after the device finished booting I tried hitting enter on the console screen but nothing happens.

EDIT: noticed that the TX activity light isn't flashing on my USB to TTL adapter. I tested the adapter by looping the TX and RX pins and confirmed that works. Unsure why TX wouldn't work when connected to the device.

Otherwise, I'm seeing there's a lot of important looking (but over my head) information here, is there information typically found here that's necessary for editing files? still trying to digest this myself, but not sure if that's an unnecessary step :stuck_out_tongue:

Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.1.1-00096
S - IMAGE_VARIANT_STRING=DAABANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x00000021
S - Core 0 Frequency, 0 MHz
B -       261 - PBL, Start
B -      1339 - bootable_media_detect_entry, Start
B -      1679 - bootable_media_detect_success, Start
B -      1693 - elf_loader_entry, Start
B -      5082 - auth_hash_seg_entry, Start
B -      7232 - auth_hash_seg_exit, Start
B -    574529 - elf_segs_hash_verify_entry, Start
B -    690345 - PBL, End
B -    690370 - SBL1, Start
B -    778792 - pm_device_init, Start
D -         6 - pm_device_init, Delta
B -    780305 - boot_flash_init, Start
D -     64831 - boot_flash_init, Delta
B -    849327 - boot_config_data_table_init, Start
D -      3851 - boot_config_data_table_init, Delta - (419 Bytes)
B -    856564 - clock_init, Start
D -      7577 - clock_init, Delta
B -    868555 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:0
B -    872044 - sbl1_ddr_set_params, Start
B -    877031 - cpr_init, Start
D -         2 - cpr_init, Delta
B -    881523 - Pre_DDR_clock_init, Start
D -         4 - Pre_DDR_clock_init, Delta
D -     13146 - sbl1_ddr_set_params, Delta
B -    895224 - pm_driver_init, Start
D -         2 - pm_driver_init, Delta
B -    965573 - sbl1_wait_for_ddr_training, Start
D -        29 - sbl1_wait_for_ddr_training, Delta
B -    981278 - Image Load, Start
D -    134995 - QSEE Image Loaded, Delta - (262104 Bytes)
B -   1116768 - Image Load, Start
D -      1445 - SEC Image Loaded, Delta - (2048 Bytes)
B -   1127136 - Image Load, Start
D -    196867 - APPSBL Image Loaded, Delta - (402135 Bytes)
B -   1324426 - QSEE Execution, Start
D -        59 - QSEE Execution, Delta
B -   1330687 - SBL1, End
D -    642319 - SBL1, Delta
S - Flash Throughput, 2001 KB/s  (666706 Bytes,  333173 us)
S - DDR Frequency, 537 MHz


U-Boot 2012.07 [Barrier Breaker unknown,unknown] (Jun 15 2016 - 18:13:28)

U-boot dni1 V1.2 for DNI HW ID: 29765265; NOR flash 16MB; NAND flash 0MB; RAM 25                                                                                                             6MB
smem ram ptable found: ver: 1 len: 3
DRAM:  256 MiB
machid : 0x8010000
NAND:  SF: Detected W25Q128 with page size 64 KiB, total 16 MiB
ipq_spi: page_size: 0x100, sector_size: 0x10000, size: 0x1000000
16 MiB
MMC:
In:    serial
Out:   serial
Err:   serial
machid: 8010000
flash_type: 0
Net:   SF: Detected W25Q128 with page size 64 KiB, total 16 MiB
flash_read will run command: sf read 0x871efee8 0x1a0000 0x9
MAC0 addr:b0:39:56:7b:d3:55
PHY ID1: 0x4d
PHY ID2: 0xd0b1
ipq40xx_ess_sw_init done
eth0
Hit any key to stop autoboot:  2
 0
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 Down Speed :10 Half duplex
eth0 PHY4 up Speed :1000 Full duplex

 Client starts...[Listening] for ADVERTISE...TTT
Retry count exceeded; boot the image as usual

 nmrp server is stopped or failed !
SF: Detected W25Q128 with page size 64 KiB, total 16 MiB
kernel size : 36941c
SF: Detected W25Q128 with page size 64 KiB, total 16 MiB
## Booting kernel from FIT Image at 84000000 ...
   Using 'config@4' configuration
   Trying 'kernel@1' kernel subimage
     Description:  ARM OpenWrt Linux-3.14.43
     Type:         Kernel Image
     Compression:  gzip compressed
     Data Start:   0x840000e4
     Data Size:    3248358 Bytes = 3.1 MiB
     Architecture: ARM
     OS:           Linux
     Load Address: 0x80208000
     Entry Point:  0x80208000
     Hash algo:    crc32
     Hash value:   28e05487
     Hash algo:    sha1
     Hash value:   83a0420a203a218a825b0c8dd0b208af01fd705f
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Flattened Device Tree from FIT Image at 84000000
   Using 'config@4' configuration
   Trying 'fdt@4' FDT blob subimage
     Description:  ARM OpenWrt qcom-ipq40xx-ap.dkxx device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x84335dfc
     Data Size:    32478 Bytes = 31.7 KiB
     Architecture: ARM
     Hash algo:    crc32
     Hash value:   18ea1128
     Hash algo:    sha1
     Hash value:   091ec630ee47bed0e17fd26bda56d1fe48d79eb8
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x84335dfc
   Uncompressing Kernel Image ... OK
   Loading Device Tree to 86ff5000, end 86fffedd ... OK
SF: Detected W25Q128 with page size 64 KiB, total 16 MiB
flash_read will run command: sf read 0x871ef8ec 0x1a0000 0x9
Using machid 0x8010000 from environment

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 3.14.43 (yanhui.liu@dnixm-compiler3) (gcc version 4
[    0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=10c5387d
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instructio
[    0.000000] Machine model: Qualcomm Technologies, Inc. IPQ40xx/AP-DK01.1-C1
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] PERCPU: Embedded 8 pages/cpu @cfdcb000 s8576 r8192 d16000 u32768
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pag
[    0.000000] Kernel command line: rootwait clk_ignore_unused
[    0.000000] PID hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Memory: 251012K/260096K available (4562K kernel code, 259K rwdata
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
[    0.000000]     vmalloc : 0xd0800000 - 0xff000000   ( 744 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xd0000000   ( 256 MB)
[    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
[    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
[    0.000000]       .text : 0xc0208000 - 0xc07ccb44   (5907 kB)
[    0.000000]       .init : 0xc07cd000 - 0xc07f7180   ( 169 kB)
[    0.000000]       .data : 0xc07f8000 - 0xc0838d58   ( 260 kB)
[    0.000000]        .bss : 0xc0838d58 - 0xc08738c4   ( 235 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Preemptible hierarchical RCU implementation.
[    0.000000] NR_IRQS:16 nr_irqs:16 16
[    0.000000] Architected cp15 timer(s) running at 48.00MHz (virt).
[    0.000010] sched_clock: 56 bits at 48MHz, resolution 20ns, wraps every 28633
[    0.000019] Switching to timer-based delay loop
[    0.000199] Calibrating delay loop (skipped), value calculated using timer fr
[    0.000216] pid_max: default: 32768 minimum: 301
[    0.000475] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000489] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.010339] CPU: Testing write buffer coherency: ok
[    0.010698] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
[    0.010772] Setting up static identity map for 0x80212ff0 - 0x80213048
[    0.090572] CPU1: Booted secondary processor
[    0.090618] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
[    0.110569] CPU2: Booted secondary processor
[    0.110606] CPU2: thread -1, cpu 2, socket 0, mpidr 80000002
[    0.130588] CPU3: Booted secondary processor
[    0.130624] CPU3: thread -1, cpu 3, socket 0, mpidr 80000003
[    0.130758] Brought up 4 CPUs
[    0.130800] SMP: Total of 4 processors activated (384.00 BogoMIPS).
[    0.130809] CPU: All CPU(s) started in SVC mode.
[    0.140806] VFP support v0.3: implementor 41 architecture 2 part 30 variant 7
[    0.141181] pinctrl core: initialized pinctrl subsystem
[    0.141617] regulator-dummy: no parameters
[    0.142233] NET: Registered protocol family 16
[    0.143739] DMA: preallocated 2048 KiB pool for atomic coherent allocations
[    0.144181] cpuidle: using governor ladder
[    0.144196] cpuidle: using governor menu
[    0.151881]
[    0.151881] Version Rollback Feature Disabled
[    0.154856] sps:sps is ready.
[    0.159227] bio: create slab <bio-0> at 0
[    0.160531] SCSI subsystem initialized
[    0.160859] usbcore: registered new interface driver usbfs
[    0.160947] usbcore: registered new interface driver hub
[    0.161087] usbcore: registered new device driver usb
[    0.161249] msm_bus_fabric_init_driver
[    0.161403] msm_bus_device 580000.ad-hoc-bus: Dev 4096
[    0.161430] msm_bus_device 580000.ad-hoc-bus: Util-fact is missing, default t
[    0.161444] msm_bus_device 580000.ad-hoc-bus: Vrail-comp is missing, default
[    0.161463] msm_bus_device 580000.ad-hoc-bus: get_bus_node_device_data:Failed
[    0.161478] msm_bus_device 580000.ad-hoc-bus: Failed to get bus clk for bus40
[    0.161514] msm_bus_device 580000.ad-hoc-bus: Dev 1024
[    0.161534] msm_bus_device 580000.ad-hoc-bus: Util-fact is missing, default t
[    0.161549] msm_bus_device 580000.ad-hoc-bus: Vrail-comp is missing, default
[    0.161564] msm_bus_device 580000.ad-hoc-bus: get_bus_node_device_data:Failed
[    0.161580] msm_bus_device 580000.ad-hoc-bus: Failed to get bus clk for bus10
[    0.187509] Switched to clocksource arch_sys_counter
[    0.189178] NET: Registered protocol family 2
[    0.190404] TCP established hash table entries: 2048 (order: 1, 8192 bytes)
[    0.190452] TCP bind hash table entries: 2048 (order: 2, 16384 bytes)
[    0.190501] TCP: Hash tables configured (established 2048 bind 2048)
[    0.190559] TCP: reno registered
[    0.190576] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    0.190610] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    0.190968] NET: Registered protocol family 1
[    0.192563] futex hash table entries: 1024 (order: 4, 65536 bytes)
[    0.204218] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.205323] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORIT
[    0.206402] SGI XFS with ACLs, security attributes, realtime, large block/ino
[    0.209636] msgmni has been set to 490
[    0.210964] Key type asymmetric registered
[    0.210979] Asymmetric key parser 'x509' registered
[    0.211022] io scheduler noop registered
[    0.211032] io scheduler deadline registered (default)
[    0.211643] tcsr 194b000.tcsr: setting usb hs phy mode select = e700e7
[    0.211708] tcsr 1953000.ess_tcsr: setting ess interface select = 0
[    0.211792] tcsr 1949000.tcsr: setting wifi_glb_cfg = 41000000
[    0.211849] tcsr 1957000.tcsr: setting wifi_noc_memtype_m0_m2 = 2222222
[    0.212525] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    0.213570] msm_serial_hsl_probe: detected port #0 (ttyMSM0)
[    0.213610] msm_serial_hsl_probe: Bus scaling is disabled
[    0.213770] 78af000.serial: ttyMSM0 at MMIO 0x78af000 (irq = 139, base_baud =
[    0.213844] msm_hsl_console_setup: console setup on port #0
[    0.801910] console [ttyMSM0] enabled
[    0.805963] msm_serial_hsl_init: driver initialized
[    0.812605] sps: BAM device 0x07884000 is not registered yet.
[    0.817323] sps:BAM 0x07884000 is registered.
[    0.822755] sps:BAM 0x07884000 (va:0xd0b40000) enabled: ver:0x19, number of p
[    0.829936] m25p80 spi0.0: found w25q128, expected n25q128a11
[    0.835381] m25p80 spi0.0: w25q128 (16384 Kbytes)
[    0.840120] 14 ofpart partitions found on MTD device spi0.0
[    0.845606] Creating 14 MTD partitions on "spi0.0":
[    0.850487] 0x000000000000-0x000000040000 : "0:SBL1"
[    0.856654] 0x000000040000-0x000000060000 : "0:MIBIB"
[    0.861706] 0x000000060000-0x0000000c0000 : "0:QSEE"
[    0.866621] 0x0000000c0000-0x0000000d0000 : "0:CDT"
[    0.871567] 0x0000000d0000-0x0000000e0000 : "0:DDRPARAMS"
[    0.876972] 0x0000000e0000-0x0000000f0000 : "0:APPSBLENV"
[    0.882425] 0x0000000f0000-0x000000170000 : "0:APPSBL"
[    0.887632] 0x000000170000-0x000000180000 : "0:ART"
[    0.892584] 0x000000180000-0x000000190000 : "config"
[    0.897654] 0x000000190000-0x0000001a0000 : "pot"
[    0.902457] 0x0000001a0000-0x0000001b0000 : "dnidata"
[    0.907537] 0x0000001b0000-0x000000fc0000 : "0:HLOS"
[    0.912526] 0x000000520000-0x000000fc0000 : "rootfs"
[    0.917523] mtd: device 12 (rootfs) set to be root filesystem
[    0.922859] 1 squashfs-split partitions found on MTD device rootfs
[    0.928437] 0x000000f50000-0x000000fc0000 : "rootfs_data"
[    0.934909] 0x000000fc0000-0x000001000000 : "language"
[    0.941119] libphy: ipq40xx_mdio: probed
[    0.947612] ipq40xx-mdio 90000.mdio: ipq40xx-mdio driver was registered
[    0.953245] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    0.959725] ehci-pci: EHCI PCI platform driver
[    0.964201] ehci-platform: EHCI generic platform driver
[    0.969772] usbcore: registered new interface driver usb-storage
[    0.977135] nf_conntrack version 0.5.0 (3922 buckets, 15688 max)
[    0.983196] ip_tables: (C) 2000-2006 Netfilter Core Team
[    0.987703] TCP: cubic registered
[    0.991794] NET: Registered protocol family 10
[    0.996435] NET: Registered protocol family 17
[    1.000013] Bridge firewalling registered
[    1.003859] Ebtables v2.0 registered
[    1.007454] 8021q: 802.1Q VLAN Support v1.8
[    1.011695] Registering SWP/SWPB emulation handler
[    1.017626] regulator-dummy: disabling
[    1.021423] input: gpio_keys.7 as /devices/soc.0/gpio_keys.7/input/input0
[    1.027420] drivers/rtc/hctosys.c: unable to open rtc device (rtc0)
[    1.036775] clk: Not disabling unused clocks
[    1.054144] VFS: Mounted root (squashfs filesystem) readonly on device 31:12.
[    1.060555] Freeing unused kernel memory: 168K (c07cd000 - c07f7000)
procd: Console is alive
procd: - watchdog -
[    2.754907] random: nonblocking pool is initialized
[    4.919511] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    5.338506] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    5.342991] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus nu
[    5.350881] xhci-hcd xhci-hcd.0.auto: irq 164, io mem 0x08a00000
[    5.356798] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
[    5.363393] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=
[    5.370585] usb usb1: Product: xHCI Host Controller
[    5.375430] usb usb1: Manufacturer: Linux 3.14.43 xhci-hcd
[    5.380915] usb usb1: SerialNumber: xhci-hcd.0.auto
[    5.386418] hub 1-0:1.0: USB hub found
[    5.389566] hub 1-0:1.0: 1 port detected
[    5.393821] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    5.398921] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus nu
[    5.406724] usb usb2: New USB device found, idVendor=1d6b, idProduct=0003
[    5.413304] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=
[    5.420498] usb usb2: Product: xHCI Host Controller
[    5.425344] usb usb2: Manufacturer: Linux 3.14.43 xhci-hcd
[    5.430827] usb usb2: SerialNumber: xhci-hcd.0.auto
[    5.436344] hub 2-0:1.0: USB hub found
[    5.439466] hub 2-0:1.0: 1 port detected
[    5.717957] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    5.722437] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus nu
[    5.730328] xhci-hcd xhci-hcd.1.auto: irq 168, io mem 0x06000000
[    5.736227] usb usb3: New USB device found, idVendor=1d6b, idProduct=0002
[    5.742843] usb usb3: New USB device strings: Mfr=3, Product=2, SerialNumber=
[    5.750034] usb usb3: Product: xHCI Host Controller
[    5.754877] usb usb3: Manufacturer: Linux 3.14.43 xhci-hcd
[    5.760361] usb usb3: SerialNumber: xhci-hcd.1.auto
[    5.765887] hub 3-0:1.0: USB hub found
[    5.769007] hub 3-0:1.0: 1 port detected
[    5.773292] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    5.778355] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus nu
[    5.786179] usb usb4: New USB device found, idVendor=1d6b, idProduct=0003
[    5.792750] usb usb4: New USB device strings: Mfr=3, Product=2, SerialNumber=
[    5.799947] usb usb4: Product: xHCI Host Controller
[    5.804790] usb usb4: Manufacturer: Linux 3.14.43 xhci-hcd
[    5.810276] usb usb4: SerialNumber: xhci-hcd.1.auto
[    5.815799] hub 4-0:1.0: USB hub found
[    5.818910] hub 4-0:1.0: config failed, hub doesn't have any ports! (err -19)
procd: - preinit -
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
jffs2 is not ready - marker found
377+0 records in
377+0 records out
377+0 records in
377+0 records out
procd: - early -
procd: - watchdog -
procd: - ubus -
procd: - init -
Please press Enter to activate this console.
[   12.438064] ufsd: module license 'Commercial product' taints kernel.
[   12.443392] Disabling lock debugging due to kernel taint
[   12.453486] ufsd:: trace mask set to 0000000f
[   12.456823] ufsd: driver (lke_9.2.0 lke_9.2.0_r251856_b34, build_host("dnixm-
[   12.456823] NTFS support included
[   12.456823] NTFS $UGM included
[   12.456823] optimized: speed
[   12.456823] Build_for__Netgear_R7500v2_k3.4.103_2015-04-10_lke_9.2.0_r251856_
[   12.456823]
[   12.503733] client bridge loaded
[   12.511520] device-mapper: ioctl: 4.27.0-ioctl (2013-10-30) initialised: dm-d
[   12.525149] NTFS driver 2.1.30 [Flags: R/O MODULE].
[   12.532959] PPP generic driver version 2.4.2
[   12.784380] ess-switch DT exist!
[   12.786598] switchreg_base_addr: 0xc000000
[   12.790712] switchreg_size: 0x80000
[   12.794133] switch_access_mode: local bus
[   12.798147] wan bmp:0x0
[   12.800569] ess-psgmii DT exist!
[   12.803770] mac mode=0
[   12.806109] current mac mode = 0
[   12.809342] current dts led_source_num is 0
[   12.813501] mdio DT exist!
[   12.816185] ssdk_plat_init start
[   12.819546] enable ess clk
[   12.932345] reset ok in probe!
[   12.934907] PHY ID is 0x4dd0b1
[   12.997358] qca probe malibu phy driver succeeded!
[   14.806783] Dakota Chip version 0x1401
[   14.810959] qca-ssdk module init succeeded!
[   14.831062] **********************************************************
[   14.836562] * Driver    :NSS GMAC Driver for RTL v(3.72a)
[   14.842049] * Version   :1.0
[   14.844807] * Copyright :Copyright (c) 2013-2015 The Linux Foundation. All ri
[   14.853207] **********************************************************
[   14.865690] qca-nss-drv.ko is loaded for symbol link
[   14.882704] ath_hal: 0.9.17.1 (AR5416, AR9380, WRITE_EEPROM, 11D)
[   14.889614] ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications,
[   14.899933] ath_dfs: Version 2.0.0
[   14.899933] Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights R
[   14.911850] ath_spectral: Version 2.0.0
[   14.911850] Copyright (c) 2005-2009 Atheros Communications, Inc. All Rights R
[   14.922482] SPECTRAL module built on Aug 17 2016 15:35:54
[   14.928780] ath_tx99: Version 2.0
[   14.928780] Copyright (c) 2010 Atheros Communications, Inc, All Rights Reserv
[   14.947333] ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All
[   16.182233] ol_ath_ahb_probe
[   16.184178] ol_ath_ahb_probe: io resource start: 0xa000000, mem=0xd1c00000
[   16.190981]  *********** Dakota *************
[   16.195576]
[   16.195576] __ol_ath_attach() Allocated scn ce2404c0
[   16.201737] ol_ath_ahb_configure: MSI addr: 0b006040, MSI base: 00000040
[   16.208498] Wifi0 CPU frequency 250000000
[   16.212541] ath9k a000000.wifi: ath DEBUG: sc=0xcf1b5c00
[   16.217789]
[   16.217789]  ol_ath_ahb_configure : num_desired MSI set to 0
[   16.224916]
[   16.224916]  Using Legacy Interrupt
[   16.229847]
[   16.229847]  Waiting for target init
[   16.234865]
[   16.234865]  Done waiting
[   16.241762]
[   16.241762]  CLOCK PLL skipped
[   16.245475] __ol_ath_attach: dev name wifi0
[   16.249798] ol_ath_attach() BMI inited.
[   16.253444] ol_ath_attach() BMI Get Target Info.
[   16.257955] Chip id: 0xb, chip version: 0x1000000
[   16.262620]
[   16.262620]  CE WAR Disabled
[   16.267103] NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0
[   16.272551] ol_ath_attach() configure Target .
[   16.276864]
[   16.276864]  Target Version is 1000000
[   16.281992]
[   16.281992]  Flash Download Address  c0000
[   16.287633] ol_transfer_bin_file: flash data file defined
[   16.293006] ol_transfer_bin_file[4070] Get Caldata for wifi0.
[   16.298793] __adf_os_fs_read[42], Open File /tmp/wifi0.caldata SUCCESS!!
[   16.305414] file system magic:16914836
[   16.309250] super blocksize:4096
[   16.312534] inode 3084
[   16.314964] file size:12064
[   16.317925] qc98xx_verify_checksum: flash checksum passed: 0x3f34
[   16.323908] ol_transfer_bin_file 4146: Download Flash data len 12064
[   16.330618] Board extended Data download address: 0x0
[   16.354935]
[   16.354935]  Board data initialized
[   16.358933] ol_ath_download_firmware: Download OTP, flash download ADDRESS 0x
[   16.366420]
[   16.366420]  Selecting  OTP binary for CHIP Version 0
[   16.373323] ath9k a000000.wifi: Firmware loaded from user helper succesfully
[   16.380014] ol_transfer_bin_file 3966: downloading file 0, Download data len
[   16.402679]
[   16.402679]  First OTP send param 8000
[   16.411546] ol_ath_download_firmware :First OTP download and Execute is good
[   16.420438] ol_ath_download_firmware:##Board Id 16 , CHIP Id 0
[   16.426335] ol_ath_download_firmware: BOARDDATA DOWNLOAD TO address 0xc0000
[   16.433203]
[   16.433203]  wifi0: Selecting board data file name boardData_1_0_IPQ4019_Y980
[   16.442749] ol_transfer_bin_file: Board Data File download to address=0xc0000
[   16.455280] ath9k a000000.wifi: Firmware loaded from user helper succesfully
[   16.462217] ol_transfer_bin_file 3966: downloading file 3, Download data len
[   16.470082] Board extended Data download address: 0x0
[   16.494503] ol_ath_download_firmware: Using 0x1234 for the remainder of init
[   16.500529]
[   16.500529]  Selecting  OTP binary for CHIP Version 0
[   16.507143] ath9k a000000.wifi: Firmware loaded from user helper succesfully
[   16.514095] ol_transfer_bin_file 3966: downloading file 0, Download data len
[   16.536733]
[   16.536733]  [Flash] : Ignore Module param
[   16.541298]
[   16.541298]  Second otp download Param 10000
[   16.557315] ol_ath_download_firmware : Second OTP download and Execute is goo
[   16.564558]
[   16.564558]  Mission mode: Firmware CHIP Version 0
[   16.728822] ath9k a000000.wifi: Firmware loaded from user helper succesfully
[   16.735114] ol_swap_seg_alloc: Successfully allocated memory for SWAP size=26
[   16.742881] ath9k a000000.wifi: Firmware loaded from user helper succesfully
[   16.749688] Swap: bytes_left to copy: fw:16; dma_page:123317
[   16.755073] Swap: wrong length read:0
[   16.758774] ol_swap_wlan_memory_expansion: Swap total_bytes copied: 138827 Ta
[   16.767701] scn=ce2404c0  target_write_addr=416d20 seg_info=cf3d8410
[   16.773997] ol_transfer_swap_struct:Code swap structure successfully download
[   16.782782] bin_filename=IPQ4019/hw.1/athwlan.bin swap_filename=/lib/firmware
[   16.793018] ol_transfer_bin_file: Downloading firmware file: IPQ4019/hw.1/ath
[   17.345423] ath9k a000000.wifi: Firmware loaded from user helper succesfully
[   17.351509] ol_transfer_bin_file 3966: downloading file 1, Download data len
[   18.539700] ol_ath_attach() Download FW done.
[   18.543143] ol_ath_attach() HT Create .
[   18.546936] ol_ath_attach() HIF Claim.
[   18.550776] ol_ath_attach() BMI Done.
[   18.554406] ol_ath_attach 7168 host_enable 0 nss_nwifi_offload 0
[   18.560412] ol_ath_set_default_tgt_config : AC Minfree buffer allocation thro
[   18.569779]  OL_ACBKMinfree : 0
[   18.572890]  OL_ACBEMinfree : 0
[   18.576014]  OL_ACVIMinfree : 0
[   18.579153]  OL_ACVOMinfree : 0
[   18.582352] ol_ath_attach() WMI attached. wmi_handle ceb90000
[   18.592924] CE_recv_buf_enqueue 844 Populate last entry 512 for CE 5
[   18.598286] CE_recv_buf_enqueue 853 CE 5 wi 511 dest_ptr 0x8dd74040 nbytes 0
[   18.607814] Startup Mode-0 set
[   18.610141]
[   18.610141] <=== cfg max peer id 1056 ====>
[   18.616066] HTC Service:0x0300 ep:1 TX flow control disabled
[   18.624812] htt_peer_map_timer_init Enter pdev cddf8000 hrtimer cddfc860
[   18.630523]
[   18.630523]  htt_alloc_peer_map_mem : Alloc Success : host q vaddr cf9ee000 p
[   18.640222]
[   18.640222]  htt_alloc_peer_map_mem : Flush Interval Configured to 256 pkts
[   18.648702] CE_pkt_dl_len_set CE 4 Pkt download length 64
[   18.654154] ol_txrx_pdev_attach: 2500 tx desc's allocated ; range starts from
[   18.662988] HTC Service:0x0100 ep:2 TX flow control disabled
[   18.668679] wmi_service_ready_event_rx:  WMI UNIFIED SERVICE READY event
[   18.674505] Firmware_Build_Number:84
[   18.678106] num_rf_chain:0x00000002  ht_cap_info:0x0000085b  vht_cap_info:0x3
[   18.687995]
[   18.687995]  RES CFG Support wmi_service_bitmap 9778
[   18.694498]
 Sending Ext resource cfg: HOST PLATFORM as 1 and fw_feature_bitmap as 10 to TGT
[   18.703050] ol_ath_service_ready_event: tt_support: 1
[   18.708225] Peer Caching Enabled ; num_peers = 530, num_active_peers = 52 num
[   18.717736] idx 1 req 2  num_units 1 num_unit_info 12 unit size 256 actual un
[   18.725445] ol_ath_alloc_host_mem_chunk req_id 2 idx 0 num_units 53 unit_len
[   18.732880] idx 2 req 3  num_units 1 num_unit_info 12 unit size 1024 actual u
[   18.740741] ol_ath_alloc_host_mem_chunk req_id 3 idx 1 num_units 53 unit_len
[   18.748242] idx 3 req 4  num_units 1 num_unit_info 12 unit size 4096 actual u
[   18.756207] ol_ath_alloc_host_mem_chunk req_id 4 idx 2 num_units 53 unit_len
[   18.763605] idx 0 req 1  num_units 0 num_unit_info 2 unit size 720 actual uni
[   18.771477] ol_ath_alloc_host_mem_chunk req_id 1 idx 3 num_units 265 unit_len
[   18.779027] ol_ath_alloc_host_mem_chunk req_id 1 idx 4 num_units 266 unit_len
[   18.786426] idx 4 req 6  num_units 35 num_unit_info 0 unit size 3072 actual u
[   18.794334] ol_ath_alloc_host_mem_chunk req_id 6 idx 5 num_units 35 unit_len
[   18.801799] idx 5 req 7  num_units 1 num_unit_info 0 unit size 6144 actual un
[   18.809466] ol_ath_alloc_host_mem_chunk req_id 7 idx 6 num_units 1 unit_len 6
[   18.816895] idx 6 req 5  num_units 0 num_unit_info 2 unit size 1868 actual un
[   18.824896] ol_ath_alloc_host_mem_chunk req_id 5 idx 7 num_units 132 unit_len
[   18.832547] ol_ath_alloc_host_mem_chunk req_id 5 idx 8 num_units 133 unit_len
[   18.840171] ol_ath_alloc_host_mem_chunk req_id 5 idx 9 num_units 133 unit_len
[   18.847825] ol_ath_alloc_host_mem_chunk req_id 5 idx 10 num_units 133 unit_le
[   18.855350] chunk 0 len 13568 requested ,ptr  0x8ef3c000
[   18.860738] chunk 1 len 54272 requested ,ptr  0x8da70000
[   18.866111] chunk 2 len 217088 requested ,ptr  0x8db00000
[   18.871587] chunk 3 len 190800 requested ,ptr  0x8db40000
[   18.877048] chunk 4 len 191520 requested ,ptr  0x8db80000
[   18.882524] chunk 5 len 107520 requested ,ptr  0x8dae0000
[   18.887993] chunk 6 len 6144 requested ,ptr  0x8e996000
[   18.893280] chunk 7 len 246576 requested ,ptr  0x8dbc0000
[   18.898756] chunk 8 len 248444 requested ,ptr  0x8d400000
[   18.904217] chunk 9 len 248444 requested ,ptr  0x8d440000
[   18.909693] chunk 10 len 248444 requested ,ptr  0x8d480000
[   18.915255] ol_ath_service_ready_event[3817] WAPI MBSSID 2
[   18.945147] wmi_ready_event_rx:  WMI UNIFIED READY event
[   18.949553] ol_ath_connect_htc() WMI is ready
[   18.953913] target uses HTT version 2.2; host uses 2.2
[   18.964054] ol_ath_attach() connect HTC.
[   18.967033] bypasswmi : 0
[   18.969655] ol_regdmn_start: reg-domain param: regdmn=0, countryName=, wModeS
[   18.981388] ol_regdmn_init_channels: !avail mode 0x680c (0x2) flags 0x2150
[   18.988228] ol_regdmn_init_channels: !avail mode 0x680c (0x1) flags 0x140
[   18.995016] ol_regdmn_init_channels: !avail mode 0x680c (0x20) flags 0xd0
[   19.001769] ol_regdmn_init_channels: !avail mode 0x680c (0x40) flags 0x150
[   19.008653] ol_regdmn_init_channels: !avail mode 0x680c (0x1000) flags 0x1010
[   19.015820] ol_regdmn_init_channels: !avail mode 0x680c (0x8000) flags 0x2010
[   19.023033] ol_regdmn_init_channels: !avail mode 0x680c (0x10000) flags 0x401
[   19.030326] ol_regdmn_init_channels: !avail mode 0x680c (0x20000) flags 0x100
[   19.037706] ol_regdmn_init_channels: !avail mode 0x680c (0x40000) flags 0x200
[   19.045074] ol_regdmn_init_channels: !avail mode 0x680c (0x80000) flags 0x400
[   19.052488] ol_regdmn_init_channels: !avail mode 0x680c (0x100000) flags 0x80
[   19.059931] ol_regdmn_init_channels: !avail mode 0x680c (0x200000) flags 0x40
[   19.067469] ol_regdmn_init_channels: !avail mode 0x680c (0x400000) flags 0x80
[   19.075305] OL Resmgr Init-ed
[   19.078109] ieee80211_bsteering_attach: Band steering initialized
[   19.084076] acfg_attach: 6026: Netlink socket created:cf1b7c00
[   19.089908] SPECTRAL : get_capability not registered
[   19.094810] HAL_CAP_PHYDIAG : Capable
[   19.098467] SPECTRAL : Need to fix the capablity check for RADAR (spectral_at
[   19.106529] SPECTRAL : get_capability not registered
[   19.111486] HAL_CAP_RADAR   : Capable
[   19.115126] SPECTRAL : Need to fix the capablity check for SPECTRAL
[   19.115126]  (spectral_attach : 242)
[   19.124938] SPECTRAL : get_capability not registered
[   19.129886] HAL_CAP_SPECTRAL_SCAN : Capable
[   19.134048] SPECTRAL : get_tsf64 not registered
[   19.138579] spectral_init_netlink 78 NULL SKB
[   19.142909] Green-AP : Green-AP : Attached
[   19.142909]
[   19.148467] Green-AP : Attached
[   19.151583] rate power table override is only supported for AR98XX
[   19.157841] ol_ath_smart_ant_attach: Firmware doest not support Smart Antenna
[   19.164950] ol_ath_smart_ant_attach: Hardware doest not support Smart Antenna
[   19.172182] ieee80211com_init_netlink: 3408: Wifipos 1st Netlink socket creat
[   19.180288] ol_if_dfs_attach: called; ptr=cda69984, radar_info=cee07c78
[   19.186827] dfs_attach: event log enabled by default
[   19.192849] ol_ath_attach() UMAC attach .
[   19.195953]
[   19.195953]  BURSTING enabled by default
[   19.201436] ol_ath_attach: Set global_ic[1] ..ptr:bf5aebac
[   19.206833] osif_wrap_attach:434 osif wrap attached
[   19.211679] osif_wrap_devt_init:395 osif wrap dev table init done
[   19.217720]  Wrap Attached: Wrap_com =ceddda00 ic->ic_wrap_com=ceddda00 &wrap
[   19.226820] __ol_ath_attach: needed_headroom reservation 60
[   19.234659] ol_ath_thermal_mitigation_attach: --
[   19.238477] ol_ath_ahb_probe
[   19.241213] ol_ath_ahb_probe: io resource start: 0xa800000, mem=0xd2000000
[   19.248042]  *********** Dakota *************
[   19.252748]
[   19.252748] __ol_ath_attach() Allocated scn cd5c04c0
[   19.258804] ol_ath_ahb_configure: MSI addr: 0b006040, MSI base: 00000050
[   19.265543] Wifi1 CPU frequency 250000000
[   19.269621] ath9k a800000.wifi: ath DEBUG: sc=0xcd56d000
[   19.274805]
[   19.274805]  ol_ath_ahb_configure : num_desired MSI set to 0
[   19.281972]
[   19.281972]  Using Legacy Interrupt
[   19.286871]
[   19.286871]  Waiting for target init
[   19.291914]
[   19.291914]  Done waiting
[   19.301517]
[   19.301517]  CLOCK PLL skipped
[   19.306206] __ol_ath_attach: dev name wifi1
[   19.309615] ol_ath_attach() BMI inited.
[   19.313350] ol_ath_attach() BMI Get Target Info.
[   19.317794] Chip id: 0xb, chip version: 0x1000000
[   19.322464]
[   19.322464]  CE WAR Disabled
[   19.326953] NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0
[   19.332396] ol_ath_attach() configure Target .
[   19.336707]
[   19.336707]  Target Version is 1000000
[   19.341833]
[   19.341833]  Flash Download Address  c0000
[   19.347468] ol_transfer_bin_file: flash data file defined
[   19.352859] ol_transfer_bin_file[4070] Get Caldata for wifi1.
[   19.358633] __adf_os_fs_read[42], Open File /tmp/wifi1.caldata SUCCESS!!
[   19.365262] file system magic:16914836
[   19.369090] super blocksize:4096
[   19.372377] inode 1113
[   19.374807] file size:12064
[   19.377760] qc98xx_verify_checksum: flash checksum passed: 0xd92f
[   19.383752] ol_transfer_bin_file 4146: Download Flash data len 12064
[   19.390443] Board extended Data download address: 0x0
[   19.414677]
[   19.414677]  Board data initialized
[   19.418675] ol_ath_download_firmware: Download OTP, flash download ADDRESS 0x
[   19.426167]
[   19.426167]  Selecting  OTP binary for CHIP Version 0
[   19.432839] ath9k a800000.wifi: Firmware loaded from user helper succesfully
[   19.439751] ol_transfer_bin_file 3966: downloading file 0, Download data len
[   19.462494]
[   19.462494]  First OTP send param 8000
[   19.471360] ol_ath_download_firmware :First OTP download and Execute is good
[   19.480256] ol_ath_download_firmware:##Board Id 17 , CHIP Id 0
[   19.486152] ol_ath_download_firmware: BOARDDATA DOWNLOAD TO address 0xc0000
[   19.493020]
[   19.493020]  wifi1: Selecting board data file name boardData_1_0_IPQ4019_Y980
[   19.502566] ol_transfer_bin_file: Board Data File download to address=0xc0000
[   19.515087] ath9k a800000.wifi: Firmware loaded from user helper succesfully
[   19.522032] ol_transfer_bin_file 3966: downloading file 3, Download data len
[   19.529897] Board extended Data download address: 0x0
[   19.554322] ol_ath_download_firmware: Using 0x1234 for the remainder of init
[   19.560422] [wifi0] FWLOG: [32474] WAL_DBGID_TX_AC_BUFFER_SET ( 0x3, 0x1e, 0x
[   19.567586]  Selecting  OTP binary for CHIP Version 0
[   19.567720] ath9k a800000.wifi: Firmware loaded from user helper succesfully
[   19.567731] ol_transfer_bin_file 3966: downloading file 0, Download data len

[   19.588770] 0x94c, 0x0 )
[   19.591433] [wifi0] FWLOG: [32474] WAL_DBGID_TX_AC_BUFFER_SET ( 0x12, 0x1e, 0
[   19.600110] [wifi0] FWLOG: [32474] WAL_DBGID_TX_AC_BUFFER_SET ( 0x45, 0x1e, 0
[   19.608797] [wifi0] FWLOG: [32474] WAL_DBGID_TX_AC_BUFFER_SET ( 0x67, 0x1e, [
[   19.615491]  [Flash] : Ignore Module param
[   19.615497]
[   19.615497]  Second otp download Param 10000

[   19.627042] 0x94col_ath_download_firmware : Second OTP download and Execute i
[   19.627059]
[   19.627059]  Mission mode: Firmware CHIP Version 0
[   19.627467] ath9k a800000.wifi: Firmware loaded from user helper succesfully
[   19.627804] ol_swap_seg_alloc: Successfully allocated memory for SWAP size=26
[   19.628203] ath9k a800000.wifi: Firmware loaded from user helper succesfully
[   19.628375] Swap: bytes_left to copy: fw:16; dma_page:123317
[   19.628378] Swap: wrong length read:0
[   19.628385] ol_swap_wlan_memory_expansion: Swap total_bytes copied: 138827 Ta
[   19.681963] , [   19.681980] scn=cd5c04c0  target_write_addr=416d20 seg_info=
[   19.681986] ol_transfer_swap_struct:Code swap structure successfully download
[   19.681992] bin_filename=IPQ4019/hw.1/athwlan.bin swap_filename=/lib/firmware
[   19.682027] ol_transfer_bin_file: Downloading firmware file: IPQ4019/hw.1/ath
[   19.682980] ath9k a800000.wifi: Firmware loaded from user helper succesfully
[   19.683001] ol_transfer_bin_file 3966: downloading file 1, Download data len

[   19.731231] 0x94c, 0x0 )
[   20.906257] ol_ath_attach() Download FW done.
[   20.909740] ol_ath_attach() HT Create .
[   20.913502] ol_ath_attach() HIF Claim.
[   20.917290] ol_ath_attach() BMI Done.
[   20.920982] ol_ath_attach 7168 host_enable 0 nss_nwifi_offload 0
[   20.926957] ol_ath_set_default_tgt_config : AC Minfree buffer allocation thro
[   20.936338]  OL_ACBKMinfree : 0
[   20.939462]  OL_ACBEMinfree : 0
[   20.942579]  OL_ACVIMinfree : 0
[   20.945703]  OL_ACVOMinfree : 0
[   20.948926] ol_ath_attach() WMI attached. wmi_handle cd6c0000
[   20.959644] CE_recv_buf_enqueue 844 Populate last entry 512 for CE 5
[   20.964985] CE_recv_buf_enqueue 853 CE 5 wi 511 dest_ptr 0x8d30a040 nbytes 0
[   20.974540] Startup Mode-0 set
[   20.976868]
[   20.976868] <=== cfg max peer id 1056 ====>
[   20.982816] HTC Service:0x0300 ep:1 TX flow control disabled
[   20.991615] htt_peer_map_timer_init Enter pdev cd390000 hrtimer cd394860
[   20.997307]
[   20.997307]  htt_alloc_peer_map_mem : Alloc Success : host q vaddr cdbb6000 p
[   21.007042]
[   21.007042]  htt_alloc_peer_map_mem : Flush Interval Configured to 256 pkts
[   21.015531] CE_pkt_dl_len_set CE 4 Pkt download length 64
[   21.020969] ol_txrx_pdev_attach: 2500 tx desc's allocated ; range starts from
[   21.029802] HTC Service:0x0100 ep:2 TX flow control disabled
[   21.035482] wmi_service_ready_event_rx:  WMI UNIFIED SERVICE READY event
[   21.041316] Firmware_Build_Number:84
[   21.044889] num_rf_chain:0x00000002  ht_cap_info:0x0000085b  vht_cap_info:0x3
[   21.054785]
[   21.054785]  RES CFG Support wmi_service_bitmap 9778
[   21.061313]
 Sending Ext resource cfg: HOST PLATFORM as 1 and fw_feature_bitmap as 10 to TGT
[   21.069861] ol_ath_service_ready_event: tt_support: 1
[   21.075018] Peer Caching Enabled ; num_peers = 530, num_active_peers = 52 num
[   21.084541] idx 1 req 2  num_units 1 num_unit_info 12 unit size 256 actual un
[   21.092257] ol_ath_alloc_host_mem_chunk req_id 2 idx 0 num_units 53 unit_len
[   21.099681] idx 2 req 3  num_units 1 num_unit_info 12 unit size 1024 actual u
[   21.107551] ol_ath_alloc_host_mem_chunk req_id 3 idx 1 num_units 53 unit_len
[   21.115035] idx 3 req 4  num_units 1 num_unit_info 12 unit size 4096 actual u
[   21.123015] ol_ath_alloc_host_mem_chunk req_id 4 idx 2 num_units 53 unit_len
[   21.130408] idx 0 req 1  num_units 0 num_unit_info 2 unit size 720 actual uni
[   21.138279] ol_ath_alloc_host_mem_chunk req_id 1 idx 3 num_units 265 unit_len
[   21.145821] ol_ath_alloc_host_mem_chunk req_id 1 idx 4 num_units 266 unit_len
[   21.153238] idx 4 req 6  num_units 35 num_unit_info 0 unit size 3072 actual u
[   21.161193] ol_ath_alloc_host_mem_chunk req_id 6 idx 5 num_units 35 unit_len
[   21.168617] idx 5 req 7  num_units 1 num_unit_info 0 unit size 6144 actual un
[   21.176249] ol_ath_alloc_host_mem_chunk req_id 7 idx 6 num_units 1 unit_len 6
[   21.183707] idx 6 req 5  num_units 0 num_unit_info 2 unit size 1868 actual un
[   21.191697] ol_ath_alloc_host_mem_chunk req_id 5 idx 7 num_units 132 unit_len
[   21.199348] ol_ath_alloc_host_mem_chunk req_id 5 idx 8 num_units 133 unit_len
[   21.206965] ol_ath_alloc_host_mem_chunk req_id 5 idx 9 num_units 133 unit_len
[   21.214620] ol_ath_alloc_host_mem_chunk req_id 5 idx 10 num_units 133 unit_le
[   21.222162] chunk 0 len 13568 requested ,ptr  0x8c818000
[   21.227539] chunk 1 len 54272 requested ,ptr  0x8c880000
[   21.232912] chunk 2 len 217088 requested ,ptr  0x8c8c0000
[   21.238426] chunk 3 len 190800 requested ,ptr  0x8c900000
[   21.243853] chunk 4 len 191520 requested ,ptr  0x8c940000
[   21.249329] chunk 5 len 107520 requested ,ptr  0x8c8a0000
[   21.254789] chunk 6 len 6144 requested ,ptr  0x8cf5e000
[   21.260091] chunk 7 len 246576 requested ,ptr  0x8c980000
[   21.265551] chunk 8 len 248444 requested ,ptr  0x8c9c0000
[   21.271028] chunk 9 len 248444 requested ,ptr  0x8ca00000
[   21.276489] chunk 10 len 248444 requested ,ptr  0x8ca40000
[   21.282065] ol_ath_service_ready_event[3817] WAPI MBSSID 2
[   21.312219] wmi_ready_event_rx:  WMI UNIFIED READY event
[   21.316623] ol_ath_connect_htc() WMI is ready
[   21.320993] target uses HTT version 2.2; host uses 2.2
[   21.331092] ol_ath_attach() connect HTC.
[   21.334072] bypasswmi : 0
[   21.336683] ol_regdmn_start: reg-domain param: regdmn=0, countryName=, wModeS
[   21.348427] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150
[   21.355449] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0
[   21.362298] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0
[   21.369153] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0
[   21.376087] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150
[   21.383127] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x100
[   21.390419] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20
[   21.397799] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40
[   21.405224] Add VHT80 channel: 5210
[   21.408646] Add VHT80 channel: 5775
[   21.412121] Skipping VHT80 channel 5825
[   21.415933] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x200000) flags 0x
[   21.423666] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x400000) flags 0x
[   21.431682] OL Resmgr Init-ed
[   21.434465] ieee80211_bsteering_attach: Band steering initialized
[   21.440435] acfg_attach: Offload using existing sock cf1b7c00
[   21.446172] SPECTRAL : get_capability not registered
[   21.451098] HAL_CAP_PHYDIAG : Capable
[   21.454733] SPECTRAL : Need to fix the capablity check for RADAR (spectral_at
[   21.462813] SPECTRAL : get_capability not registered
[   21.467761] HAL_CAP_RADAR   : Capable
[   21.471400] SPECTRAL : Need to fix the capablity check for SPECTRAL
[   21.471400]  (spectral_attach : 242)
[   21.481215] SPECTRAL : get_capability not registered
[   21.486153] HAL_CAP_SPECTRAL_SCAN : Capable
[   21.490329] SPECTRAL : get_tsf64 not registered
[   21.494838] spectral_init_netlink 78 NULL SKB
[   21.499190] Green-AP : Green-AP : Attached
[   21.499190]
[   21.504732] Green-AP : Attached
[   21.507863] rate power table override is only supported for AR98XX
[   21.514108] ol_ath_smart_ant_attach: Firmware doest not support Smart Antenna
[   21.521236] ol_ath_smart_ant_attach: Hardware doest not support Smart Antenna
[   21.528443] ieee80211com_init_netlink: Socket already created cf113800
[   21.534988] ol_if_dfs_attach: called; ptr=cc899984, radar_info=cee07c78
[   21.541548] dfs_attach: event log enabled by default
[   21.547626] ol_ath_attach() UMAC attach .
[   21.550735]
[   21.550735]  BURSTING enabled by default
[   21.556195] ol_ath_attach: Set global_ic[2] ..ptr:bf5aebac
[   21.561589] osif_wrap_attach:434 osif wrap attached
[   21.566446] osif_wrap_devt_init:395 osif wrap dev table init done
[   21.572502]  Wrap Attached: Wrap_com =ceddc400 ic->ic_wrap_com=ceddc400 &wrap
[   21.581612] __ol_ath_attach: needed_headroom reservation 60
[   21.589501] ol_ath_thermal_mitigation_attach: --
[   21.593537] ath_pci:  (Atheros/multi-bss)
[   21.600596]  pktlog_init: Initializing Pktlog for AR900B, pktlog_hdr_size = 1
[   21.606981]  pktlog_init: Initializing Pktlog for AR900B, pktlog_hdr_size = 1
[   21.615531] __sa_init_module
[   21.619149] edma module_init
[   21.726202] NET: Registered protocol family 24
[   21.738393] xt_time: kernel timezone is -0000
Loading data from /dev/mtd8 ...

Done!

The data center is Running ...

[   21.922092] [wifi1] FWLOG: [34899] WAL_DBGID_TX_AC_BUFFER_SET ( 0x3, 0x1e, 0x
[   21.929696] [wifi1] FWLOG: [34899] WAL_DBGID_TX_AC_BUFFER_SET ( 0x12, 0x1e, 0
[   21.938372] [wifi1] FWLOG: [34899] WAL_DBGID_TX_AC_BUFFER_SET ( Switching to
[   21.946290] 0x45, 0x1e, 0x94c, 0x94c, 0x0 )
[   21.950438] [wifi1] FWLOG: [34899] WAL_DBGID_TX_AC_BUFFER_SET ( 0x67, 0x1e, 0
Can't start the data center!

[   23.850673] device eth1 entered promiscuous mode
[   24.307893] Switching to Tx Mode-0
[   24.358164] IPv6: ADDRCONF(NETDEV_UP): br0: link is not ready
[   26.380677] br0: port 1(eth1) entered forwarding state
[   26.384896] br0: port 1(eth1) entered forwarding state
Cable plugin...
##### udhcpc deconfig
Nov 30 23:29:00 crond[816]: crond 2.3.2 dillon, started, log level 8

Nov 30 23:29:01 crond[953]: crond 2.3.2 dillon, started, log level 8

FW checking ...
qcawifi disable radio wifi0
qcawifi disable radio wifi1
[   29.793289] kcg 333 :GPL NetUSB up!
[   29.805315] kc   90 : run_telnetDBGDServer start
[   29.809120] kc  227 : init_DebugD end
[   29.812651] INFO182D: NetUSB 1.02.83.2, 00030E2B : May 25 2016 17:01:03
[   29.819314] INFO182F: 7423: EX6200v2 :EX6200v2
[   29.823761] INFO1830:  AUTH ISOC
[   29.826972] INFO1831:  MOVE_HEAD emb_lp filterAudio
[   29.831903] INFO071F:  0 : tunnelID emusblp 0
[   29.836756] INFO071F:  1 : tunnelID emusblp 1
[   29.840771] INFO071F:  2 : tunnelID emusblp 2
[   29.845129] INFO071F:  3 : tunnelID emusblp 3
[   29.849604] INFO071F:  4 : tunnelID emusblp 4
[   29.854451] INFO071F:  5 : tunnelID emusblp 5
[   29.858508] INFO071F:  6 : tunnelID emusblp 6
[   29.863206] INFO071F:  7 : tunnelID emusblp 7
[   29.867261] INFO071F:  8 : tunnelID emusblp 8
[   29.871954] INFO071F:  9 : tunnelID emusblp 9
[   29.876113] INFO0194: wrap_data->read_proc bf6cf528, read_proc bf6cf528
[   29.882778] INFO019B: kc_wrap_create_proc_read_entry 005 wrap_data cbc18cc0
[   29.889690] INFO01A0: kc_wrap_create_proc_read_entry 006
[   29.895195] INFO0B0F:  --- checkSBusTimeoutThread start ---
[   29.895303] INFO008C: Add device intf ced76c00, dev ced13000
[   29.895311] INFO05FE: isHub
[   29.896017] usbcore: registered new interface driver KC NetUSB General Driver
[   29.896267] INFO01ED:  init proc : PAGE_SIZE 4096
[   29.896277] INFO1721:  infomap bf6bfd80
[   29.896284] INFO1724:  sleep to wait br0 to wake up
[   29.896387] INFO15D9: tcpConnector() started... : br0
qcawifi disable radio wifi0
qcawifi disable radio wifi1
url_init string is ftp://updates1.netgear.com/ex6200v2/ww/fileinfo.txt

DNS-LOOKUP dns : 10.0.1.1


Host: updates1.netgear.com, Inet: 52.85.151.69

qcawifi: enable radio wifi1
[   32.937968] isCountryCodeValid: EEPROM regdomain 0x0
[   32.941947] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150
[   32.948985] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0
[   32.955803] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0
[   32.962695] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0
[   32.969651] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150
[   32.976637] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x100
[   32.983940] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20
[   32.991327] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40
[   32.998751] Add VHT80 channel: 5210
[   33.002155] Add VHT80 channel: 5775
[   33.005636] Skipping VHT80 channel 5825
[   33.009475] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x200000) flags 0x
[   33.017246] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x400000) flags 0x
[   33.042650] set BURST_MODE: value 1 wmi_status 0
[   33.079800] set TXBF_SND_PERIOD: value 100 wmi_status 0
[   33.101248] wmi_dbg_cfg_send: mod[0]00000000 dbgcfg30000000 cfgvalid[0] 00000
[   33.279425] wmi_unified_vdev_create_send: ID = 0 Type = 1, Subtype = 0 VAP Ad
[   33.290397] In ieee80211_vap_setup, line:374, wifi-pos enabled vap:0
[   33.296692] __ieee80211_smart_ant_init: Smart Antenna is not supported
[   33.302639] Enabling TX checksum bit for the vap ath1 features 4000
[   33.308689] Enabling SG bit for the vap ath1 features 4000
[   33.314224] Enabling SG bit for the vap ath1 features 4000
[   33.319802] Enabling TSO bit for the vap ath1 features 4000
[   33.325420] Enabling LRO bit for the vap ath1 features 4000
[   33.331077] VAP device ath1 created osifp: (ce20fcc0) os_if: (cbd78000)
[   33.350222] siwfreq
[   33.351318] Set freq vap 0 stop send + cbd78000
[   33.355998] Set freq vap 0 stop send -cbd78000
[   33.387528] Set wait done --cbd78000
[   33.436645] WARNING: Fragmentation with HT mode NOT ALLOWED!!
[   33.478308] Setting Max Stations:18
[   33.486414]
[   33.486414]  DES SSID SET=
[   33.494199]
[   33.494199]  DES SSID SET=NETGEAR-5G_EXT
[   33.518031] su bfee 1 mu bfee 0 su bfer 1 mu bfer 1 impl bf 0 sounding dim 1
[   33.532720] su bfee 1 mu bfee 0 su bfer 1 mu bfer 1 impl bf 0 sounding dim 1
[   33.538854] su bfee 1 mu bfee 0 su bfer 1 mu bfer 1 impl bf 0 sounding dim 1
[   33.550048] su bfee 1 mu bfee 0 su bfer 1 mu bfer 1 impl bf 0 sounding dim 1
[   33.560287] su bfee 1 mu bfee 0 su bfer 1 mu bfer 1 impl bf 1 sounding dim 1
[   33.578789] device ath1 entered promiscuous mode
[   33.637666] OL vap_start +
[   33.639366] wmi_unified_vdev_start_send for vap 0 (cd6c0000)
[   33.644999] OL vap_start -
[   33.825363] ol_vdev_start_resp_ev for vap 0 (cd6c0000)
[   33.829505] ol_ath_wmm_update:
[   33.832662] su bfee 1 mu bfee 0 su bfer 1 mu bfer 1 impl bf 1 sounding dim 1
[   33.839575] wmi_unified_vdev_up_send for vap 0 (cd6c0000)
[   33.844937] __ieee80211_smart_ant_init: Smart Antenna is not supported
[   33.867548] ol_ath_vap_set_param: Now supported MGMT RATE is 6000(kbps) and r
[   33.875161] br0: port 2(ath1) entered forwarding state
[   33.879998] br0: port 2(ath1) entered forwarding state
[   33.885291] 8021q: adding VLAN 0 to HW filter on device ath1
[   34.077758] wmi_unified_vdev_stop_send for vap 0 (cd6c0000)
[   35.126959] [wifi1] beacon buffer av_wbuf is NULL - Ignoring tsf offset event
[   35.133261] STOPPED EVENT for vap 0 (cd6c0000)
[   35.137691] FWLOG: [46917] WAL_DBGID_DEV_RESET ( 0xc01d, 0x36c )
[   35.143572] [wifi1] FWLOG: [47538] vap-0 VDEV_MGR_VDEV_START ( 0x1685, 0x2, 0
[   35.159578] br0: port 2(ath1) entered disabled state
qcawifi: enable radio wifi0
[   35.202248] isCountryCodeValid: EEPROM regdomain 0x0
[   35.206234] ol_regdmn_init_channels: !avail mode 0x680c (0x2) flags 0x2150
[   35.213203] ol_regdmn_init_channels: !avail mode 0x680c (0x1) flags 0x140
[   35.220532] ol_regdmn_init_channels: !avail mode 0x680c (0x20) flags 0xd0
[   35.226634] ol_regdmn_init_channels: !avail mode 0x680c (0x40) flags 0x150
[   35.233936] ol_regdmn_init_channels: !avail mode 0x680c (0x1000) flags 0x1010
[   35.240927] ol_regdmn_init_channels: !avail mode 0x680c (0x8000) flags 0x2010
[   35.247995] ol_regdmn_init_channels: !avail mode 0x680c (0x10000) flags 0x401
[   35.255187] ol_regdmn_init_channels: !avail mode 0x680c (0x20000) flags 0x100
[   35.262599] ol_regdmn_init_channels: !avail mode 0x680c (0x40000) flags 0x200
[   35.270089] ol_regdmn_init_channels: !avail mode 0x680c (0x80000) flags 0x400
[   35.278227] ol_regdmn_init_channels: !avail mode 0x680c (0x100000) flags 0x80
[   35.285457] ol_regdmn_init_channels: !avail mode 0x680c (0x200000) flags 0x40
[   35.292739] ol_regdmn_init_channels: !avail mode 0x680c (0x400000) flags 0x80
[   35.325811] set BURST_MODE: value 1 wmi_status 0
[   35.374459] set TXBF_SND_PERIOD: value 100 wmi_status 0
[   35.398643] wmi_dbg_cfg_send: mod[0]00000000 dbgcfg30000000 cfgvalid[0] 00000
[   35.414165] wmi_unified_vdev_create_send: ID = 0 Type = 1, Subtype = 0 VAP Ad
[   35.423291] In ieee80211_vap_setup, line:374, wifi-pos enabled vap:0
[   35.430567] __ieee80211_smart_ant_init: Smart Antenna is not supported
[   35.436774] Enabling TX checksum bit for the vap ath0 features 4000
[   35.443245] Enabling SG bit for the vap ath0 features 4000
[   35.448770] Enabling SG bit for the vap ath0 features 4000
[   35.453619] Enabling TSO bit for the vap ath0 features 4000
[   35.459418] Enabling LRO bit for the vap ath0 features 4000
[   35.464908] VAP device ath0 created osifp: (cece24c0) os_if: (cb4d0000)
[   35.494818] siwfreq
[   35.495923] Set freq vap 0 stop send + cb4d0000
[   35.500923] Set freq vap 0 stop send -cb4d0000
[   35.527583] Set wait done --cb4d0000
[   35.548347] [wifi0] FWLOG: [49255] WAL_DBGID_DEV_RESET ( 0xc01d, 0x3b5 )
[   35.582836] WARNING: Fragmentation with HT mode NOT ALLOWED!!
[   35.628040] Setting Max Stations:18
[   35.638058]
[   35.638058]  DES SSID SET=
[   35.646116]
[   35.646116]  DES SSID SET=NETGEAR_EXT
[   35.691929] device ath0 entered promiscuous mode
Nov 30 23:29:08 crond[2994]: crond 2.3.2 dillon, started, log level 8

[   35.768411] br0: port 3(ath0) entered listening state
[   35.772543] br0: port 3(ath0) entered listening state
[   35.777824] 8021q: adding VLAN 0 to HW filter on device ath0
[   35.805014] osif_vap_init: Scan in progress.. Cancelling it. vap: 0xcb4d0000
[   35.842777] osif_vap_init: Scan in progress.. Cancelling it. vap: 0xcb4d0000
[   35.983394] osif_vap_stop: Scan in progress.. Cancelling it. vap: 0xcb4d0000
[   36.019960] br0: port 3(ath0) entered disabled state
[   36.058280] br0: port 3(ath0) entered listening state
[   36.062391] br0: port 3(ath0) entered listening state
[   36.067565] 8021q: adding VLAN 0 to HW filter on device ath0
Saving Data...
[   36.126415] [wifi1] FWLOG: [49057] VDEV_MGR_HP_START_TIME ( 0x0, 0x1685, 0xd2
[   36.133042] [wifi1] FWLOG: [49057] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x1 )
[   36.139582] [wifi1] FWLOG: [49057] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 )
[   36.146071] [wifi1] FWLOG: [49057] VDEV_MGR_AP_TBTT_CONFIG ( 0x0, 0x1685, 0x0
[   36.153795] [wifi1] FWLOG: [49072] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 )
[   36.160310] [wifi1] FWLOG: [49072] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 )
[   36.547943] [wifi0] FWLOG: [49759] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 )
[   36.553446] [wifi0] FWLOG: [49759] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 )
[   36.562226] [wifi0] FWLOG: [49797] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 )
[   36.568297] [wifi0] FWLOG: [49797] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 )
[   36.574824] [wifi0] FWLOG: [49941] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 )
[   36.581326] [wifi0] FWLOG: [49941] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 )
Done!

Saving Data...
Done!

[   37.885778] osif_vap_stop: Scan in progress.. Cancelling it. vap: 0xcb4d0000
[   37.919974] br0: port 3(ath0) entered disabled state
procd: - init complete -
[   38.546808] [wifi0] FWLOG: [51890] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 )
[   38.552306] [wifi0] FWLOG: [51890] RESMGR_OCS_GEN_PERIODIC_NOA ( 0x0 )

























The abbreviation of English is Eng!

Didn't find the language table we need!

Nov 30 23:30:01 crond[4595]: crond 2.3.2 dillon, started, log level 8

Can't connect to HOST: updates1.netgear.com!

url_init string is ftp://updates1.netgear.com/ex6200v2/ww/fileinfo.txt

DNS-LOOKUP dns : [Deleted]
Host: updates1.netgear.com, Inet: [Deleted]

Can't connect to HOST: updates1.netgear.com!

Looks good. Yes, you should be able to interrupt the process when it says Hit any key to stop autoboot, and this is what I would do in order to enter U-Boot.

Sometimes, manufacturers omit resistors in order to disable the serial console. Carefully check the PCB near the serial pins. Or it's your TTL adapter, is it your only one? Or can you test with another device (other router, micro controller ...)?

Unfortunately it's my only adapter with no other devices to test on. Like I said though, when I shorted the Tx and Rx pins on the adapter, I was able to see my key presses echo in my terminal so it sounds like that's working. I also noted that when I unplugged the cable from the respective pin on the PCB, the light on the adapter did flash with every keystroke, so it seems to work in isolation. Another observation I made is that when the TX pin from the adapter is connected to the RX of the Router, LEDs on the router's board light Red if the power to the router is off.

Anyway, I managed to take closer pictures of the PCB. the order of pins from top to bottoms is GND, VCC (3.3V), TX (connects to RX on adapter) and RX (connects to TX on adapter). It looks like all pads are populated on the traces to that pin, this includes what looks like a capacitor between the pin and the resistor. I think it's a capacitor based on the printing on the PCB and relative locations to adjacent components, it looks like it's C1062. I also measured the voltage across it after I powered it down and sure enough it dropped over a few seconds.

It's been a while since my last electricity & magnetism course but if I remember correctly, a capacitor is supposed to smooth out changes in voltage, like what would happen during a key press. I'm thinking about scratching the little bugger out (don't have a soldering iron atm though it is on my xmas list). Does this seem like a well calculated risk? :smiley:


Are you sure about the pinout?

Definitely sure on the Gnd and Tx pins based on the fact that i can read off it just fine. I had assumed the VCC and Rx pins based on the resistance values I measured.

For reference those values for top to bottom pins were (in kOhms):

Pin1: 0
Pin2: 105
Pin3: 10
Pin4: 6

Edit:
You were onto something. Pin 2 is Rx and Pin 4 is VCC. I’m grateful I haven’t fried anything yet

1 Like

So I've since been able to successfully build an image (whether or not it'll work is TBD!) I've also got UART access over serial so my next step will be to boot an initramfs image like you suggested.

EDIT: curiosity got the best of my and pulled the trigger on trying the initramfs install with thankfully some success! Answered my own questions below.

Thankfully the initramfs build worked and I was able to boot into openwrt and log into Luci. I had to step out so I couldn’t test to see what worked or didn’t but I didn’t see any alrming errors in the bootlog. Am I safe to flash the sysupgrade image and continue testing?

A couple of questions regarding that:

  1. the ramdisk image that was built is in a .itb format, is this the correct format?
    Yes.

  2. the linux machine that built and is seving the initramfs image is in another room so I have the router connected to my network via ethernet. I did set the server IP and assigned an IP to the router with setenv serverip and ipaddr respectively, is there any reason for this setup not to work? I can definitely relocate to the other room if need be but am hoping to keep working where I'm setup. I was able to ping the server from the uboot console
    I ended up having trouble getting the tftp server configured on the Linux machine so I copied the images onto a flash drive and ran tftp64 on the windows machine where I’m using the serial console. To answer the initial question, yup this works just fine.

  3. I'm having trouble finding instructions on the actual loading/booting commands. this community post speculates tftpboot Filename followed by boot where as the generic flashing over serial writeup (which seems like it's geared towards flashing an image over tftp), gets in the details of writing to specific memory addresses.

Does the first method seem correct to you? or could you point me to a good resource please?

The first method worked.

Anticipating that the second method will be required, I pasted the mtd map below.
I need to figure out which is the correct partition, but to find the memory address would I start at address 0 and add the sizes (in hex?) until I reach the mtd partition of interest?

dev:    size   erasesize  name
mtd0: 00040000 00010000 "0:SBL1"
mtd1: 00020000 00010000 "0:MIBIB"
mtd2: 00060000 00010000 "0:QSEE"
mtd3: 00010000 00010000 "0:CDT"
mtd4: 00010000 00010000 "0:DDRPARAMS"
mtd5: 00010000 00010000 "0:APPSBLENV"
mtd6: 00080000 00010000 "0:APPSBL"
mtd7: 00010000 00010000 "0:ART"
mtd8: 00010000 00010000 "config"
mtd9: 00010000 00010000 "pot"
mtd10: 00010000 00010000 "dnidata"
mtd11: 00e10000 00010000 "0:HLOS"
mtd12: 00aa0000 00010000 "rootfs"
mtd13: 00070000 00010000 "rootfs_data"
mtd14: 00040000 00010000 "language"