Adding OpenWrt support for QNAP QHora-301W

MusikJunk · 2024-02-23T10:24:39.346Z

I gave up on loading firmware from filesystem.

Flashing the *.cld files to the firmware paritions just works.

cat /proc/mtd|grep "0:ethphyfw"
mtd10: 00080000 00010000 "0:ethphyfw1"
mtd11: 00080000 00010000 "0:ethphyfw2"

mtd erase /dev/mtd10
mtd -n write /tmp/AQR-G4_v5.4.C-AQR_CIG_WF-1945_0x0_ID44778_VER1630.cld /dev/mtd10
mtd erase /dev/mtd11
mtd -n write /tmp/AQR-G4_v5.4.C-AQR_CIG_WF-1945_0x8_ID44776_VER1630.cld /dev/mtd11

dmesg | grep AQ

[    1.752088] Aquantia AQR113C 90000.mdio-1:00: loading firmware version 'v5.4.C CIG WF-1945_0x0 060120 02:47:48' from 'NVMEM'
[   13.007036] Aquantia AQR113C 90000.mdio-1:08: loading firmware version 'v5.4.C CIG WF-1945_0x8 060120 02:47:48' from 'NVMEM'

sppmaster · 2024-02-23T14:00:24.515Z

MusikJunk:

I gave up on loading firmware from filesystem.

Flashing the *.cld files to the firmware paritions just works.

I couldn't get what is the purpose in doing that?
Isn't there a newer version of Aquantia firmware?

MusikJunk · 2024-02-24T13:34:33.491Z

sppmaster:

I couldn't get what is the purpose in doing that?

After attended sysupgrade to a snapshot mid February my 10G uplink port doesn't came up. I found the PR for loading firmware using kernel so wanted to use the new way. Also liked the idea of not altering U-Boot bootcmd.

sppmaster:

Isn't there a newer version of Aquantia firmware?

Yes, found v5.6.7 online (wrapped with mbn header for U-Boot). Repo: Marvel-AQR-FW
(I didn't try this firmwares)

But Qnap uses different files for the two 10G ports so I decided to use them extracted from stock as suggested by robimarko in the PR.

MusikJunk:

See qualcommax: 301w: enable using kernel for AQR firmware loading

robimarko · 2024-02-24T14:10:16.049Z

FW from the stock FW should be used as the AQR FW provisions certain registers as a custom config per board, in our case they are at least configuring the LED-s but likely more stuff is done

sppmaster · 2024-02-25T01:11:55.452Z

MusikJunk:

Flashing the *.cld files to the firmware paritions just works.

I've tried to do this myself unsuccessfully.
I've downloaded the stock qnap firmware image HORA_301W_20240118-2.3.3.005.img then I've tried to extract the files with binwalk but I've got only garbage files.
Can you write a short How To for the whole process.
I cannot find the *.cld stock firmware files anywhere else.
If I use the same method as you did and flash FW binaries to the respective 0:ethphyfw1 and 0:ethphyfw2 partitions so they can be loaded via NVMEM, do I have to modify the U-Boot environment.
I've started the stock QNAP firmware but there aren't any cld files in /lib/firmware directory.

MusikJunk · 2024-02-25T10:43:56.500Z

See this post for link to a script that decrypts the FW.

The steps are decrypt / untar / unsquashfs

python3 qnap-qts-fw-cryptor.py d HORA_301W HORA_301W_20240118-2.3.3.005.img HORA_301W_20240118-2.3.3.005_decrypted.img.tar

tar -xf HORA_301W_20240118-2.3.3.005_decrypted.img.tar ./usr.squashfs

sudo unsquashfs usr.squashfs

FW is located in /share/10G_FW/

edit:

I changed U-Boot bootcmd back to stock:

fw_setenv bootcmd "bootipq"

check with

fw_printenv -n bootcmd

sppmaster · 2024-02-25T15:19:02.516Z

Thanks a lot.
Done.

root@QNAP:~# dmesg | grep AQ
[    2.144872] Aquantia AQR113C 90000.mdio-1:00: loading firmware version 'v5.4.C CIG WF-1945_0x0 060120 02:47:48' from 'NVMEM'
[   11.435626] Aquantia AQR113C 90000.mdio-1:08: loading firmware version 'v5.4.C CIG WF-1945_0x8 060120 02:47:48' from 'NVMEM'

root@QNAP:~# fw_printenv -n bootcmd
bootipq

Edit - A Big WARNING here (a bug!). Currently using the QNAP stock 10G firmware with NSS wifi brakes the 10G_1 port connection. Cannot get/lease IP address. See this.
Don't use on NSS builds at least for now!

Update - As of 2024-11-03 this is fixed and on NSS build all of the above works OK.

sppmaster · 2024-02-29T21:13:22.609Z

MusikJunk:

After attended sysupgrade to a snapshot mid February my 10G uplink port doesn't came up. I found the PR for loading firmware using kernel so wanted to use the new way. Also liked the idea of not altering U-Boot bootcmd.

The issue was with 10G_1 port, wasn't it?
Does it work right now? It's interesting what may caused the issue.
Because I intentionally left 10G_1 port to use for experiments occasionally and I have might not noticed an issue immediately.
Do you use a regular (Non NSS) build.
Currently the 10G_1 port doesn't work with stock 10G FW on NSS builds contrary to the logic as the stock QNAP FW is actually NSS enabled.

Update - As of 2024-11-03 this is fixed and on NSS build all of the above works OK.

sppmaster · 2024-03-26T09:19:26.528Z

Does anyone here started using kernel 6.6?
Can you confirm 10G ports work OK.
I test unsupported NSS build by @qosmio kernel 6.6
and now both 10G ports simply give

uniphy autoneg time out!

[    2.080096] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    2.154862] Key type encrypted registered
[    2.249273] Aquantia AQR113C 90000.mdio-1:00: loading firmware version 'v5.4.C CIG WF-1945_0x0 060120 02:47:48' from 'NVMEM'
[   11.263063] hwmon hwmon0: temp1_input not attached to any thermal zone
[   11.352378] Aquantia AQR113C 90000.mdio-1:08: loading firmware version 'v5.4.C CIG WF-1945_0x8 060120 02:47:48' from 'NVMEM'
[   13.484351] init: - preinit -
[   15.142380] random: crng init done
[   17.291890] Starting lvm2 during preinit
[   17.557526] device-mapper: ioctl: 4.48.0-ioctl (2023-03-01) initialised: dm-devel@redhat.com
[   17.685662] mount_root: loading kmods from internal overlay
[   17.698713] kmodloader: loading kernel modules from //etc/modules-boot.d/*
[   17.730793] gpio_button_hotplug: loading out-of-tree module taints kernel.
[   17.758574] ssdk_dt_parse_interrupt[935]:INFO:intr-gpio does not exist
[   17.766543] ssdk_phy_driver_init[371]:INFO:dev_id = 0, phy_adress = 8, phy_id = 0x0 phytype doesn't match
[   17.766686] ssdk_phy_driver_init[371]:INFO:dev_id = 0, phy_adress = 0, phy_id = 0x0 phytype doesn't match
[   19.042484] regi_init[3603]:INFO:Initializing HPPE Done!!
[   19.042595] regi_init[3662]:INFO:qca-ssdk module init succeeded!
[   19.048645] EDMA ver 1 hw init
[   19.053161] EDMA HW Reset completed succesfully
[   19.055838] Num rings - TxDesc:1 (23-23) TxCmpl:1 (7-7)
[   19.060233] RxDesc:1 (15-15) RxFill:1 (7-7)
[   20.461080] hwmon hwmon1: temp1_input not attached to any thermal zone
[   20.624897] **********************************************************
[   20.624935] * NSS Data Plane driver
[   20.630323] **********************************************************

This is for both variants - using QNAP stock 10G FW and the AQR generic with MBN with kernel 6.6.

With kernel 6.1 and MBN both 10G ports were working
and with kernel 6.1 and stock QNAP 10G FW only the second port worked OK.
I know that NSS isn't supported but looks like a strange pattern of events.

@robimarko what do you think?

lytr · 2024-03-26T09:48:58.533Z

Same problem here: OpenWrt support for Linksys MX8500 - #136 by lytr

robimarko · 2024-03-26T10:02:34.668Z

Well, now I have this as well which is weird as it used to work.

Why do I have a feeling that SSDK C45 got broken since kernel split the ops and you cannot just pass the magic bit to indicate C45

rmandrad · 2024-03-26T11:16:48.907Z

unsure if it helps - but qca have a commit that provides 10G support where they introduced a number of c45 functions (like qcaphy_c45_get_eee_status)

GitLab

[qca-ssdk]: support 10G phy common feature (7cd27d39) · Commits · CodeLinaro...

Change-Id: Ib266487fb3baf65f30801c3bc4e90ddb1fa6bcc5 Signed-off-by: zhongjia

also support 6.6

GitLab

qca-ssdk: fix build warnings on kernel6.6 (8e40a284) · Commits · CodeLinaro /...

Change-Id: I407b276f03e70b3e6a64a377ebbac6a317648997 Signed-off-by: leiwei

robimarko · 2024-03-26T11:26:03.734Z

I found the root cause, as suspected its because kernel 6.3 has finally split out the C45 MDIO read and write operations out of C22 ones and the old way of marking C45 ops via BIT(30) in the register field doesn't work anymore so it cannot read the PHY ID of C45 only PHY-s.

I have an working fix, just refreshing it now to make a PR.

PR is here, please test:

github.com/openwrt/openwrt

kernel: qca-ssdk: fix C45 MDIO support on kernel 6.6

openwrt:main ← robimarko:ssdk-c45-6.6

opened 11:42AM - 26 Mar 24 UTC

robimarko

+99 -1

Kernel 6.3 has introduced separate C45 read/write operations, and thus split the…m out of the C22 operations completely so the old way of marking C45 reads and writes via the register value does not work anymore. This is causing SSDK to fail and find C45 only PHY-s such as Aquantia ones: ``` [ 22.187877] ssdk_phy_driver_init[371]:INFO:dev_id = 0, phy_adress = 8, phy_id = 0x0 phytype doesn't match [ 22.209924] ssdk_phy_driver_init[371]:INFO:dev_id = 0, phy_adress = 0, phy_id = 0x0 phytype doesn't match ``` This in turn causes USXGMII MAC autoneg bit to not get set and then UNIPHY autoneg will time out, causing the 10G ports not to work: `[ 37.292784] uniphy autoneg time out!` So, lets detect C45 reads and writes by the magic BIT(30) in the register argument and if so call separate C45 mdiobus read/write functions.

sppmaster · 2024-03-26T12:24:21.070Z

I get this

[    1.409217] init: - watchdog -
[    2.077509] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    2.151525] Key type encrypted registered
[    2.246030] Aquantia AQR113C 90000.mdio-1:00: loading firmware version 'v5.4.C CIG WF-1945_0x0 060120 02:47:48' from 'NVMEM'
[   11.234546] hwmon hwmon0: temp1_input not attached to any thermal zone
[   11.323911] Aquantia AQR113C 90000.mdio-1:08: loading firmware version 'v5.4.C CIG WF-1945_0x8 060120 02:47:48' from 'NVMEM'
[   13.481674] init: - preinit -
[   15.136325] random: crng init done
[   17.294908] Starting lvm2 during preinit
[   17.570805] device-mapper: ioctl: 4.48.0-ioctl (2023-03-01) initialised: dm-devel@redhat.com
[   17.690547] mount_root: loading kmods from internal overlay
[   17.703562] kmodloader: loading kernel modules from //etc/modules-boot.d/*
[   17.735218] gpio_button_hotplug: loading out-of-tree module taints kernel.
[   17.763483] ssdk_dt_parse_interrupt[935]:INFO:intr-gpio does not exist
[   17.771599] aquantia_phy_api_ops_init[2241]:INFO:qca probe aquantia phy driver succeeded!
[   19.656403] regi_init[3603]:INFO:Initializing HPPE Done!!
[   19.656515] regi_init[3662]:INFO:qca-ssdk module init succeeded!
[   19.662578] EDMA ver 1 hw init
[   19.667086] EDMA HW Reset completed succesfully
[   19.669763] Num rings - TxDesc:1 (23-23) TxCmpl:1 (7-7)
[   19.674156] RxDesc:1 (15-15) RxFill:1 (7-7)
[   20.409148] hwmon hwmon1: temp1_input not attached to any thermal zone
[   20.562864] **********************************************************
[   20.562902] * NSS Data Plane driver

but the PC connected to the port still doesn't get IP. At least on NSS build and QNAP stock 10G FW.

[  102.624316] nss-dp 3a001200.dp2 lan3: PHY Link is down
[  102.630211] br-lan: port 4(lan3) entered disabled state
[  118.944732] nss-dp 3a007000.dp6-syn 10g-2: PHY Link up speed: 1000
[  118.944920] br-lan: port 2(10g-2) entered blocking state
[  118.949862] br-lan: port 2(10g-2) entered forwarding state
[  270.496752] nss-dp 3a007000.dp6-syn 10g-2: PHY Link is down
[  270.497075] br-lan: port 2(10g-2) entered disabled state
[  276.641072] nss-dp 3a001800.dp5 10g-1: PHY Link up speed: 1000
[  276.641227] br-lan: port 1(10g-1) entered blocking state
[  276.645825] br-lan: port 1(10g-1) entered forwarding state
[  277.125926] uniphy autoneg time out!

robimarko · 2024-03-26T12:28:58.255Z

Honestly, I dont care about the NSS version at all.

Tested on both 10g-1 and 10g-2 and it just worked at 10G.

rmandrad · 2024-03-26T12:43:31.494Z

long shot but have you tried to load the aqr113c firmware via u-boot ?

sppmaster · 2024-03-26T12:43:41.769Z

Thanks a lot for your great work as always.
I've just tested it with the MBN header FW loaded from U-Boot.
Both 10G ports work even with NSS build.

rmandrad:

long shot but have you tried to load the aqr113c firmware via u-boot ?

I've just did it. No issues.

[   20.710015] br-lan: port 3(lan2) entered forwarding state
[   21.729675] Qualcomm QCA8075 90000.mdio-1:10: Downshift occurred from negotiated speed 1Gbps to actual speed 100Mbps, check cabling!
[   21.729743] nss-dp 3a001000.dp1 lan4: PHY Link up speed: 100
[   21.740838] br-vlan: port 1(lan4) entered blocking state
[   21.746317] br-vlan: port 1(lan4) entered forwarding state
[   74.976238] nss-dp 3a001200.dp2 lan3: PHY Link is down
[   74.976529] br-lan: port 4(lan3) entered disabled state
[   88.223820] nss-dp 3a007000.dp6-syn 10g-2: PHY Link up speed: 1000
[   88.226295] br-lan: port 2(10g-2) entered blocking state
[   88.228921] br-lan: port 2(10g-2) entered forwarding state
[  146.590119] nss-dp 3a007000.dp6-syn 10g-2: PHY Link is down
[  146.590381] br-lan: port 2(10g-2) entered disabled state
[  179.357867] nss-dp 3a001800.dp5 10g-1: PHY Link up speed: 1000
[  179.358012] br-lan: port 1(10g-1) entered blocking state
[  179.362613] br-lan: port 1(10g-1) entered forwarding state
[  501.917619] nss-dp 3a001800.dp5 10g-1: PHY Link is down
[  501.917890] br-lan: port 1(10g-1) entered disabled state
[  518.301906] nss-dp 3a007000.dp6-syn 10g-2: PHY Link up speed: 1000
[  518.302007] br-lan: port 2(10g-2) entered blocking state
[  518.307003] br-lan: port 2(10g-2) entered forwarding state

@robimarko Just a curiosity question - are you using QNAP stock or MBN header 10G firmware.

anom3 · 2024-04-01T14:03:24.251Z

anyone look into the cause / a possible fix to the coil whine these 301w give off?

i have 2, and they both whine like crazy especially when pushing the cpu / wifi hard.

btw what i mean by coil whine is umm, "the sound of electricity flowing" heh.

sppmaster · 2024-04-01T19:58:11.304Z

I heard the coil whine on my unit several months ago for the first time and after that read the same on another forum. But for me it can only be heard in a very quiet room mostly at night and from no more than one meter from the unit. It's most audible when WiFi is used for high speed transfers.

I see another glitch with 10G ports. If the cable is plugged in and out several times (5-6 times) into any of the 10G ports, the port stops making a connection (LED is off too) and I have to reboot the router in order to recover from this situation.

m1tchll · 2024-04-05T14:35:48.891Z

I need help to set the environment variables properly, and make it boot.
Thank you all for your help.

                               
IPQ807x# bootm                                                                  
## Loading kernel from FIT Image at 44000000 ...                                
   Using 'config@hk01' configuration                                            
   Trying 'kernel-1' kernel subimage                                            
     Description:  ARM64 OpenWrt Linux-6.1.82                                   
     Type:         Kernel Image                                                 
     Compression:  gzip compressed                                              
     Data Start:   0x440000e8                                                   
     Data Size:    5122563 Bytes = 4.9 MiB                                      
     Architecture: AArch64                                                      
     OS:           Linux                                                        
     Load Address: 0x41000000                                                   
     Entry Point:  0x41000000                                                   
     Hash algo:    crc32                                                        
     Hash value:   9be3b12c                                                     
     Hash algo:    sha1                                                         
     Hash value:   a4705be7c4425d6558d48ffe3b82d27a7ca537f5                     
   Verifying Hash Integrity ... crc32+ sha1+ OK                                 
## Loading fdt from FIT Image at 44000000 ...                                   
   Using 'config@hk01' configuration                                            
   Trying 'fdt-1' fdt subimage                                                  
     Description:  ARM64 OpenWrt qnap_301w device tree blob                     
     Type:         Flat Device Tree                                             
     Compression:  uncompressed                                                 
     Data Start:   0x444e2c28                                                   
     Data Size:    47152 Bytes = 46 KiB                                         
     Architecture: AArch64                                                      
     Hash algo:    crc32                                                        
     Hash value:   7020f746                                                     
     Hash algo:    sha1                                                         
     Hash value:   8b31de02f2d212be788fc3f2d320fa1d202a30fb                     
   Verifying Hash Integrity ... crc32+ sha1+ OK                                 
   Booting using the fdt blob at 0x444e2c28                                     
   Uncompressing Kernel Image ... OK                                            
   Loading Device Tree to 4a3f1000, end 4a3ff82f ... OK                         
fdt-fixup: unable to find compatible node                                       
mtdids not defined, no default present                                          
Using machid 0x8010000 from environment                                         
                                                                                
Starting kernel ...                                                             
                                                                                
Jumping to AARCH64 kernel via monitor                                           
[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]          
[    0.000000] Linux version 6.1.82 (builder@buildhost) (aarch64-openwrt-linux-4
[    0.000000] Machine model: QNAP 301w                                         
[    0.000000] Zone ranges:                                                     
[    0.000000]   DMA      [mem 0x0000000040000000-0x000000007fffffff]           
[    0.000000]   DMA32    empty                                                 
[    0.000000]   Normal   empty                                                 
[    0.000000] Movable zone start for each node                                 
[    0.000000] Early memory node ranges                                         
[    0.000000]   node   0: [mem 0x0000000040000000-0x0000000040ffffff]          
[    0.000000]   node   0: [mem 0x0000000041000000-0x000000004a3fffff]          
[    0.000000]   node   0: [mem 0x000000004a400000-0x00000000510fffff]          
[    0.000000]   node   0: [mem 0x0000000051100000-0x000000007fffffff]          
[    0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000007fffffff] 
[    0.000000] psci: probing for conduit method from DT.                        
[    0.000000] psci: PSCIv1.0 detected in firmware.                             
[    0.000000] psci: Using standard PSCI v0.2 function IDs                      
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.                           
[    0.000000] psci: SMC Calling Convention v1.0                                
[    0.000000] percpu: Embedded 18 pages/cpu s34664 r8192 d30872 u73728         
[    0.000000] Detected VIPT I-cache on CPU0                                    
[    0.000000] alternatives: applying boot alternatives                         
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 258048    
[    0.000000] Kernel command line: console=ttyMSM0,115200n8                    
[    0.000000] Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes)
[    0.000000] Inode-cache hash table entries: 65536 (order: 7, 524288 bytes, l)
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off          
[    0.000000] Memory: 887128K/1048576K available (8128K kernel code, 890K rwda)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1       
[    0.000000] rcu: Hierarchical RCU implementation.                            
[    0.000000]  Tracing variant of Tasks RCU enabled.                           
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 ji.
[    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0                   
[    0.000000] Root IRQ handler: gic_handle_irq                                 
[    0.000000] GICv2m: range[mem 0x0b00a000-0x0b00affc], SPI[448:479]           
[    0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.   
[    0.000000] arch_timer: cp15 and mmio timer(s) running at 19.20MHz (virt/vir.
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycless
[    0.000000] sched_clock: 56 bits at 19MHz, resolution 52ns, wraps every 4398s
[    0.000124] Calibrating delay loop (skipped), value calculated using timer f)
[    0.000138] pid_max: default: 32768 minimum: 301                             
[    0.000607] Mount-cache hash table entries: 2048 (order: 2, 16384 bytes, lin)
[    0.000621] Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes)
[    0.002474] cblist_init_generic: Setting adjustable number of callback queue.
[    0.002483] cblist_init_generic: Setting shift to 2 and lim to 1.            
[    0.002672] rcu: Hierarchical SRCU implementation.                           
[    0.002676] rcu:     Max phase no-delay instances is 1000.                   
[    0.003490] smp: Bringing up secondary CPUs ...                              
[    0.004121] Detected VIPT I-cache on CPU1                                    
[    0.004258] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]       
[    0.004914] Detected VIPT I-cache on CPU2                                    
[    0.005018] CPU2: Booted secondary processor 0x0000000002 [0x410fd034]       
[    0.005630] Detected VIPT I-cache on CPU3                                    
[    0.005728] CPU3: Booted secondary processor 0x0000000003 [0x410fd034]       
[    0.005794] smp: Brought up 1 node, 4 CPUs                                   
[    0.005802] SMP: Total of 4 processors activated.                            
[    0.005807] CPU features: detected: 32-bit EL0 Support                       
[    0.005811] CPU features: detected: CRC32 instructions                       
[    0.005873] CPU features: emulated: Privileged Access Never (PAN) using TTBRg
[    0.005878] CPU: All CPU(s) started at EL1                                   
[    0.005881] alternatives: applying system-wide alternatives                  
[    0.016821] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, ms
[    0.016847] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)   
[    0.017064] pinctrl core: initialized pinctrl subsystem                      
[    0.018479] NET: Registered PF_NETLINK/PF_ROUTE protocol family              
[    0.018997] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations 
[    0.019037] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic alls
[    0.019085] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic as
[    0.019453] thermal_sys: Registered thermal governor 'step_wise'             
[    0.019638] cpuidle: using governor menu                                     
[    0.019888] ASID allocator initialised with 65536 entries                    
[    0.074154] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count4
[    0.083168] SCSI subsystem initialized                                       
[    0.083353] usbcore: registered new interface driver usbfs                   
[    0.083405] usbcore: registered new interface driver hub                     
[    0.083464] usbcore: registered new device driver usb                        
[    0.083886] qcom_scm: convention: smc arm 64                                 
[    0.085396] clocksource: Switched to clocksource arch_sys_counter            
[    0.086564] NET: Registered PF_INET protocol family                          
[    0.086706] IP idents hash table entries: 16384 (order: 5, 131072 bytes, lin)
[    0.088126] tcp_listen_portaddr_hash hash table entries: 512 (order: 1, 8192)
[    0.088149] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes,)
[    0.088176] TCP established hash table entries: 8192 (order: 4, 65536 bytes,)
[    0.088264] TCP bind hash table entries: 8192 (order: 6, 262144 bytes, linea)
[    0.088537] TCP: Hash tables configured (established 8192 bind 8192)         
[    0.088637] UDP hash table entries: 512 (order: 2, 16384 bytes, linear)      
[    0.088673] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes, linear) 
[    0.088887] NET: Registered PF_UNIX/PF_LOCAL protocol family                 
[    0.088923] PCI: CLS 0 bytes, default 64                                     
[    0.090313] workingset: timestamp_bits=46 max_order=18 bucket_order=0        
[    0.095299] squashfs: version 4.0 (2009/01/31) Phillip Lougher               
[    0.095313] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORI.
[    0.096370] Block layer SCSI generic (bsg) driver version 0.4 loaded (major )
[    0.098409] qcom-qmp-usb-phy 58000.phy: supply vdda-phy not found, using dumr
[    0.098569] qcom-qmp-usb-phy 58000.phy: supply vdda-pll not found, using dumr
[    0.100006] qcom-qmp-usb-phy 78000.phy: supply vdda-phy not found, using dumr
[    0.100126] qcom-qmp-usb-phy 78000.phy: supply vdda-pll not found, using dumr
[    0.101829] qcom-qusb2-phy 59000.phy: supply vdd not found, using dummy regur
[    0.101949] qcom-qusb2-phy 59000.phy: supply vdda-pll not found, using dummyr
[    0.102016] qcom-qusb2-phy 59000.phy: supply vdda-phy-dpdm not found, using r
[    0.102173] qcom-qusb2-phy 59000.phy: Registered Qcom-QUSB2 phy              
[    0.102368] qcom-qusb2-phy 79000.phy: supply vdd not found, using dummy regur
[    0.102492] qcom-qusb2-phy 79000.phy: supply vdda-pll not found, using dummyr
[    0.102563] qcom-qusb2-phy 79000.phy: supply vdda-phy-dpdm not found, using r
[    0.102738] qcom-qusb2-phy 79000.phy: Registered Qcom-QUSB2 phy              
[    0.107403] bam-dma-engine 704000.dma-controller: num-channels unspecified it
[    0.107418] bam-dma-engine 704000.dma-controller: num-ees unspecified in dt  
[    0.111975] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled         
[    0.114036] msm_serial 78b3000.serial: msm_serial: detected port #0          
[    0.114089] msm_serial 78b3000.serial: uartclk = 3686400                     
[    0.114203] 78b3000.serial: ttyMSM0 at MMIO 0x78b3000 (irq = 20, base_baud =M
[    0.114233] msm_serial: console setup on port #0                             
[    0.816833] printk: console [ttyMSM0] enabled                                
[    0.822006] msm_serial: driver initialized                                   
[    0.830889] loop: module loaded                                              
[    0.832173] spi_qup 78b5000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64 
[    0.833740] spi-nor spi0.0: w25q64dw (8192 Kbytes)                           
[    0.840472] 13 fixed-partitions partitions found on MTD device spi0.0        
[    0.844749] Creating 13 MTD partitions on "spi0.0":                          
[    0.851259] 0x000000000000-0x000000050000 : "0:sbl1"                         
[    0.856510] 0x000000050000-0x000000060000 : "0:mibib"                        
[    0.861643] 0x000000060000-0x0000001e0000 : "0:qsee"                         
[    0.866600] 0x0000001e0000-0x0000001f0000 : "0:devcfg"                       
[    0.871597] 0x0000001f0000-0x000000200000 : "0:apdp"                         
[    0.876580] 0x000000200000-0x000000240000 : "0:rpm"                          
[    0.881657] 0x000000240000-0x000000250000 : "0:cdt"                          
[    0.886417] 0x000000250000-0x000000270000 : "0:appsblenv"                    
[    0.891109] 0x000000250000-0x000000350000 : "0:appsbl"                       
[    0.896693] 0x000000370000-0x0000003b0000 : "0:art"                          
[    0.901764] 0x0000003b0000-0x000000430000 : "0:ethphyfw1"                    
[    0.906561] 0x000000430000-0x0000004b0000 : "0:ethphyfw2"                    
[    0.912054] 0x0000004b0000-0x000000800000 : "reserved"                       
[    0.922472] spmi spmi-0: PMIC arbiter version v2 (0x20010000)                
[    0.948427] i2c_dev: i2c /dev entries driver                                 
[    0.954717] sdhci: Secure Digital Host Controller Interface driver           
[    0.954759] sdhci: Copyright(c) Pierre Ossman                                
[    0.960011] sdhci-pltfm: SDHCI platform and OF driver helper                 
[    0.966299] remoteproc remoteproc0: releasing cd00000.q6v5_wcss              
[    0.973228] NET: Registered PF_INET6 protocol family                         
[    0.976866] Segment Routing with IPv6                                        
[    0.980837] In-situ OAM (IOAM) with IPv6                                     
[    0.984438] NET: Registered PF_PACKET protocol family                        
[    0.988463] bridge: filtering via arp/ip/ip6tables is no longer available by.
[    0.993440] 8021q: 802.1Q VLAN Support v1.8                                  
[    0.995409] mmc0: SDHCI controller on 7824900.mmc [7824900.mmc] using ADMA 6t
[    1.028727] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count4
[    1.029106] cpr4_ipq807x_apss_read_fuse_data: apc_corner: speed bin = 0      
[    1.034852] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR fusing revisio1
[    1.041470] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR misc fuse valu0
[    1.049157] cpr4_ipq807x_apss_read_fuse_data: apc_corner: Voltage boost fusee
[    1.056632] cpr3_mem_acc_init: apc: not using memory accelerator regulator   
[    1.062337] mmc0: new HS200 MMC card at address 0001                         
[    1.065763] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fuseV
[    1.065772] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fuseV
[    1.073431] mmcblk0: mmc0:0001 Q2J54A 3.64 GiB                               
[    1.077834] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fuseV
[    1.077842] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fuseV
[    1.089617]  mmcblk0: p1 p2 p3 p4 p5 p6 p7 p8 p9                             
[    1.097492] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused 0
[    1.103158] mmcblk0boot0: mmc0:0001 Q2J54A 2.00 MiB                          
[    1.111776] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused 0
[    1.111786] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused 5
[    1.122358] mmcblk0boot1: mmc0:0001 Q2J54A 2.00 MiB                          
[    1.126186] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused 0
[    1.137469] mmcblk0rpmb: mmc0:0001 Q2J54A 512 KiB, chardev (246:0)           
[    1.142259] cpr3_regulator_init_ctrl: apc: Default CPR mode = closed-loop    
[    1.182793] cpufreq: cpufreq_online: CPU0: Running at unlisted initial frequv
[    1.204530] VFS: Cannot open root device "(null)" or unknown-block(0,0): err6
[    1.207514] Please append a correct "root=" boot option; here are the availa:
[    1.215058] 1f00             320 mtdblock0                                   
[    1.215062]  (driver?)                                                       
[    1.227366] 1f01              64 mtdblock1                                   
[    1.227369]  (driver?)                                                       
[    1.233870] 1f02            1536 mtdblock2                                   
[    1.233873]  (driver?)                                                       
[    1.240381] 1f03              64 mtdblock3                                   
[    1.240383]  (driver?)                                                       
[    1.246895] 1f04              64 mtdblock4                                   
[    1.246898]  (driver?)                                                       
[    1.253401] 1f05             256 mtdblock5                                   
[    1.253404]  (driver?)                                                       
[    1.259913] 1f06              64 mtdblock6                                   
[    1.259916]  (driver?)                                                       
[    1.266427] 1f07             128 mtdblock7                                   
[    1.266430]  (driver?)                                                       
[    1.272933] 1f08            1024 mtdblock8                                   
[    1.272936]  (driver?)                                                       
[    1.279448] 1f09             256 mtdblock9                                   
[    1.279451]  (driver?)                                                       
[    1.285958] 1f0a             512 mtdblock10                                  
[    1.285961]  (driver?)                                                       
[    1.292812] 1f0b             512 mtdblock11                                  
[    1.292814]  (driver?)                                                       
[    1.299413] 1f0c            3392 mtdblock12                                  
[    1.299415]  (driver?)                                                       
[    1.306010] b300         3817472 mmcblk0                                     
[    1.306013]  driver: mmcblk                                                  
[    1.312256]   b301           16384 mmcblk0p1 1a373c3c-588e-eff4-5182-68ad83ee
[    1.312259]                                                                  
[    1.322502]   b302           16384 mmcblk0p2 7d35f31d-0980-2220-edfd-62285952
[    1.322505]                                                                  
[    1.331442]   b303           16384 mmcblk0p3 964e7e67-6666-7303-312a-291b7578
[    1.331445]                                                                  
[    1.340384]   b304          524288 mmcblk0p4 2a213133-47f8-80a1-5d66-1d565a26
[    1.340387]                                                                  
[    1.349323]   b305          524288 mmcblk0p5 77f91baf-6750-e138-dbe5-434eaedd
[    1.349326]                                                                  
[    1.358265]   b306          524288 mmcblk0p6 8530d17c-21e3-f82b-12ec-87fd429e
[    1.358269]                                                                  
[    1.367205]   b307            4096 mmcblk0p7 9420c4b0-ba83-2b38-6ba6-2839be02
[    1.367209]                                                                  
[    1.376150]   b308           16384 mmcblk0p8 e590e607-3410-795e-afbc-888e9b2b
[    1.376153]                                                                  
[    1.385084]   b309         2153472 mmcblk0p9 d1402149-3e8e-0709-99d9-170bfabc
[    1.385087]                                                                  
[    1.394031] b320            2048 mmcblk0boot0                                
[    1.394033]  (driver?)                                                       
[    1.399843] b340            2048 mmcblk0boot1                                
[    1.399845]  (driver?)                                                       
[    1.406618] Kernel panic - not syncing: VFS: Unable to mount root fs on unkn)
[    1.408971] CPU: 3 PID: 1 Comm: swapper/0 Not tainted 6.1.82 #0              
[    1.417209] Hardware name: QNAP 301w (DT)                                    
[    1.423022] Call trace:                                                      
[    1.427186]  dump_backtrace.part.0+0xbc/0xd0                                 
[    1.429447]  show_stack+0x18/0x30                                            
[    1.433959]  dump_stack_lvl+0x6c/0x88                                        
[    1.437171]  dump_stack+0x18/0x34                                            
[    1.440816]  panic+0x148/0x2ec                                               
[    1.444113]  mount_block_root+0x15c/0x20c                                    
[    1.447067]  mount_root+0x194/0x1b4                                          
[    1.451145]  prepare_namespace+0x144/0x180                                   
[    1.454446]  kernel_init_freeable+0x274/0x29c                                
[    1.458613]  kernel_init+0x28/0x130                                          
[    1.463037]  ret_from_fork+0x10/0x20                                         
[    1.466339] SMP: stopping secondary CPUs                                     
[    1.470162] Kernel Offset: disabled                                          
[    1.474061] CPU features: 0x00000,00000000,0000400b                          
[    1.477276] Memory Limit: none                                               
[    1.482137] Rebooting in 1 seconds..                                         
                                                                                
Format: Log Type - Time(microsec) - Message - Optional Info                     
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic            
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00158                                 
S - IMAGE_VARIANT_STRING=HAABANAZA                                              
S - OEM_IMAGE_VERSION_STRING=CRM                                                
S - Boot Config, 0x000002e1                                                     
B -       203 - PBL, Start                                                      
B -      2741 - bootable_media_detect_entry, Start                              
B -      2888 - bootable_media_detect_success, Start                            
B -      2892 - elf_loader_entry, Start                                         
B -     11441 - auth_hash_seg_entry, Start                                      
B -     11681 - auth_hash_seg_exit, Start                                       
B -    252798 - elf_segs_hash_verify_entry, Start                               
B -    313469 - PBL, End                                                        
B -    488701 - SBL1, Start                                                     
B -    566659 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4             
B -    576358 - pm_device_init, Start                                           
B -    757376 - PM_SET_VAL:Skip                                                 
D -    179126 - pm_device_init, Delta                                           
B -    759785 - pm_driver_init, Start                                           
D -      5368 - pm_driver_init, Delta                                           
B -    766190 - clock_init, Start                                               
D -      2104 - clock_init, Delta                                               
B -    770094 - boot_flash_init, Start                                          
D -     16104 - boot_flash_init, Delta                                          
B -    789980 - boot_config_data_table_init, Start                              
D -      1006 - boot_config_data_table_init, Delta - (575 Bytes)                
B -    797636 - Boot Setting :  0x00000618                                      
B -    801357 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:0     
B -    808280 - sbl1_ddr_set_params, Start                                      
B -    812093 - CPR configuration: 0x30c                                        
B -    815539 - cpr_init, Start                                                 
B -    818315 - Rail:0 Mode: 5 Voltage: 808000                                  
B -    823561 - CL CPR settled at 760000mV                                      
B -    826367 - Rail:1 Mode: 5 Voltage: 880000                                  
B -    830545 - Rail:1 Mode: 7 Voltage: 912000                                  
D -     16531 - cpr_init, Delta                                                 
B -    837438 - Pre_DDR_clock_init, Start                                       
B -    841464 - Pre_DDR_clock_init, End                                         
B -    844758 - DDR Type : PCDDR3                                               
B -    850492 - do ddr sanity test, Start                                       
D -      1037 - do ddr sanity test, Delta                                       
B -    855342 - DDR: Start of HAL DDR Boot Training                             
B -    859978 - DDR: End of HAL DDR Boot Training                               
B -    865651 - DDR: Checksum to be stored on flash is -1553865925              
B -    876173 - Image Load, Start                                               
D -    335958 - QSEE Image Loaded, Delta - (1376448 Bytes)                      
B -   1212222 - Image Load, Start                                               
D -        30 - SEC Image Loaded, Delta - (0 Bytes)                             
B -   1219908 - Image Load, Start                                               
D -      9760 - DEVCFG Image Loaded, Delta - (26008 Bytes)                      
B -   1229760 - Image Load, Start                                               
D -     25955 - RPM Image Loaded, Delta - (86584 Bytes)                         
B -   1255807 - Image Load, Start                                               
D -    136579 - APPSBL Image Loaded, Delta - (556008 Bytes)                     
B -   1392508 - QSEE Execution, Start                                           
D -        61 - QSEE Execution, Delta                                           
B -   1398303 - USB D+ check, Start                                             
D -         0 - USB D+ check, Delta                                             
B -   1404708 - SBL1, End                                                       
D -    918325 - SBL1, Delta                                                     
S - Flash Throughput, 4428 KB/s  (2045623 Bytes,  461884 us)                    
S - DDR Frequency, 466 MHz                                                      
S - Core 0 Frequency, 1651 MHz                                                  
                                                                                
                                                                                
U-Boot 2016.01 (Aug 18 2020 - 16:35:27 +0800)                                   
                                                                                
DRAM:  smem ram ptable found: ver: 1 len: 4                                     
1 GiB                                                                           
NAND:  Could not find nand_gpio in dts, no defaults defined                     
Nand Flash error. Status = 80                                                   
Reset cmd status failed                                                         
SPI_ADDR_LEN=3                                                                  
SF: Detected W25Q64DW with page size 256 Bytes, erase size 4 KiB, total 8 MiB   
ipq_spi: page_size: 0x100, sector_size: 0x1000, size: 0x800000                  
8 MiB                                                                           
MMC:   <NULL>: 0                                                                
In:    serial@78B3000                                                           
Out:   serial@78B3000                                                           
Err:   serial@78B3000                                                           
machid: 8010000                                                                 
Hit any key to stop autoboot:  0                                                
                                                                                
Net:   MAC0 addr:24:5e:be:55:11:72                                              
PHY ID1: 0x0                                                                    
PHY ID2: 0x0                                                                    
EDMA ver 1 hw init                                                              
Num rings - TxDesc:1 (0-0) TxCmpl:1 (7-7)                                       
RxDesc:1 (15-15) RxFill:1 (7-7)                                                 
ipq807x_edma_alloc_rings: successfull                                           
ipq807x_edma_setup_ring_resources: successfull                                  
ipq807x_edma_configure_rings: successfull                                       
ipq807x_edma_hw_init: successfull                                               
eth0                                                                            
IPQ807x#