Adding OpenWrt support for Senao like Devices

For Developers
1

We found that as being out of Support by Watchguard, AP300 hardware are still good enough to be used to something else than garbage to be recycled. These devices have good coverage and are also POE capable. So I believe that they can do more for the world than just be a pile of junk. Next some images of board 7016A0886008 that seems to be marketed by several companies: senao/engenius/extreme/watchguard.

9e626f8e6d27726b70a3fa16439c3c8c6eee107b_2_281x500 41f532fbb81494bab4f9eac5006d8108d618d510_2_281x500

cat /proc/cpuinfo 
system type		: QCA955x
processor		: 0
cpu model		: MIPS 74Kc V5.0
BogoMIPS		: 359.42
wait instruction	: yes
microsecond timers	: yes
tlb_entries		: 32
extra interrupt vector	: yes
hardware watchpoint	: yes, count: 4, address/irw mask: [0x0000, 0x0580, 0x0c38, 0x0ff0]
ASEs implemented	: mips16 dsp
shadow register sets	: 1
core			: 0
VCED exceptions		: not available
VCEI exceptions		: not available

df -h
Filesystem                Size      Used Available Use% Mounted on
rootfs                    7.6M      7.6M         0 100% /
/dev/root                 7.6M      7.6M         0 100% /rom
/dev/mtdblock5            3.8M    304.0K      3.5M   8% /jffs
mini_fo:/jffs             7.6M      7.6M         0 100% /
/dev/mtdblock2          320.0K    220.0K    100.0K  69% /mnt/sntool

mount
rootfs on / type rootfs (rw)
/dev/root on /rom type squashfs (ro,relatime)
proc on /proc type proc (rw,relatime)
sysfs on /sys type sysfs (rw,relatime)
tmpfs on /tmp type tmpfs (rw,nosuid,nodev,relatime,size=57577472,mode=1777)
tmpfs on /dev type tmpfs (rw,relatime,size=512K)
devpts on /dev/pts type devpts (rw,relatime,mode=600)
/dev/mtdblock5 on /jffs type jffs2 (rw,relatime)
mini_fo:/jffs on / type mini_fo (rw,relatime)
/dev/mtdblock2 on /mnt/sntool type jffs2 (ro,relatime)

This crusade has begun here: Adding OpenWrt support for Extreme Network AP3805i - #30 by Dragets

2

(ideally, the name of the thread has the device in it "adding support for AP300")

alright... because UART is not working...

lets change the default boot cycle in a safe way

I made this if statement and tested it on one of my Senao boards
when ethernet of address 192.168.1.101 is connected, it tries TFTP forever (name of file: test.bin)
when ethernet is disconnected, it boots like normal

this allows you to have a chance to load an initramfs-kernel.bin for testing
in other words, using openwrt without changing flash data
however many Senao boards have broken TFTP
sometimes setting MTU to 600 helps (the lowest windows allows)

here is the command for setting the variable in the root shell

fw_setenv bootcmd 'if ping 192.168.1.101; then tftp 0x82000000 test.bin && bootm 0x82000000; else bootm 0x9f0a0000; fi'

and verify with

fw_printenv

Also, since this is a Senao board and the uboot-env looks so similar...

look for a file like
/etc/fwupgrade.sh
and paste the whole thing here

3

Would you like to access device here? (TeamViewer or something like this?)

cat /etc/fwupgrade.sh 
#!/bin/sh

. /lib/upgrade/common.sh

firmware="/tmp/firmware.img"
tmpdir="/tmp/_upgrade"
output="/dev/ttyS0"
fw_env_config="/etc/fw_env.config"
sectorsize="$([ -f "${fw_env_config}" ] && grep "/dev/mtd1 " "${fw_env_config}" | sed -e "s/^\([^ \t]*[ \t]*\)\{4\}.*/\1/g")"
if [ -f "/etc/modelname" ]; then
	modelname="$(cat /etc/modelname)"
else
	modelname="$(cat /proc/sys/kernel/hostname | tr [A-Z] [a-z])"
fi
before_local="/etc/before-upgradelocal.sh"
after_local="/etc/after-upgradelocal.sh"
before="before-upgrade.sh"
after="after-upgrade.sh"
flag_disable_umount="/tmp/flag_disable_umount"

get_wgsum1()
{
    local image=$1;
    local image_size="`ls -l1 ${image} | tr -s ' ' | cut -d ' ' -f3 `"
    local  fw_size="`expr ${image_size} - 32`"
    echo `(dd if=${image} bs=${fw_size} count=1 2>/dev/null; echo -n "82kdlzk2" ) | md5sum | cut -d' ' -f1`
}

get_wgsum2()
{
	local image=$1;
	echo `tail -c 32 $image`;
}

check_image(){
	local image=$1
	local sum1="$(get_wgsum1 ${image})"
	local sum2="$(get_wgsum2 ${image})"

	if [ "${sum1}" == "${sum2}" ]; then
		echo 1
	else
		echo 0
	fi
}

create_mtdaddr() {
	addr="0"
	cat "/proc/mtd" | grep "mtd[0-9]*: " | grep -v "\"rootfs_data\"" | cut -d " " -f 2,4 | \
	while read line; do
		printf "0xbf%06x $(echo "${line}" | cut -d " " -f 2)\n" "${addr}"
		addr="$((${addr} + 0x$(echo "${line}" | cut -d " " -f 1)))"
	done
}

doupgrade() {
	mtdaddr="$(create_mtdaddr)"

	get_start_addr() {
		echo -e "${mtdaddr}" | grep "\"$1\"" | cut -d " " -f 1
	}

	get_size() {
		if [ "$1" = "kernel" ]; then
			echo "0x$(printf "%08x" "$(ls -al "${kernel}" | sed -e "s/^\([^ ]* *\)\{4\}\([0-9]\+\).*$/\2/g")")"
		elif [ "$1" = "rootfs" ]; then
			if [ "$(get_magic_word "${rootfs}")" = "6873" ]; then
				len=""
				for var in $(hexdump "${rootfs}" -s 40 -n 4 -e '/1 "%02x "'); do
					len="${var}${len}"
				done
				len="$((0x${len}))"
			else
				len="$(hexdump "${rootfs}" -s 67 -n 4 -e '"%d"')"
			fi
			printf "0x%08x\n" "$((((${len} - 1) / ${sectorsize} + 1) * ${sectorsize}))"
		fi
	}

	get_checksum() {
		if [ "$1" = "kernel" ]; then
			md5sum "${kernel}"
		elif [ "$1" = "rootfs" ]; then
			dd if="${rootfs}" bs="${sectorsize}" count="$(($(get_size "rootfs") / ${sectorsize}))" 2>/dev/null | md5sum -
		fi | cut -d " " -f 1
	}

	[ -f "${before_local}" ] && chmod a+x "${before_local}" && . "${before_local}"
	[ -f "${before}" ] && chmod a+x "${before}" && . "${before}"
	[ ! -f "${flag_disable_umount}" ] && {
		rootfs_mtd="$(cat /proc/mtd | grep \"rootfs\" | cut -d : -f 1)"
		rootfs_size="$(($( ( fw_printenv | grep ^rootfs_size= | cut -d = -f 2 ) 2>&- )))"
		if [ ! -f "/rom/note" -a -n "${rootfs_mtd}" -a ${rootfs_size} -gt 0 ]; then
			. /lib/functions/boot.sh && 
			umount -l /jffs && 
			pivot /rom /mnt && 
			umount -l /mnt && 
			{
				dd if=/dev/${rootfs_mtd} of=/tmp/root.squashfs bs=${rootfs_size} count=1 && 
				mount /tmp/root.squashfs /mnt && 
				pivot /mnt /rom && 
				umount -l /rom
			} 2>&- || true && 
			ramoverlay
		fi
	}
	[ -n "${kernel}" -a -f "${kernel}" ] && 
		[ "${magic_word_kernel}" = "2705" ] && {
		echo "Writing kernel..." >"${output}"
		fw_setenv vmlinux_start_addr "$(get_start_addr "kernel")"
		fw_setenv vmlinux_size       "$(get_size "kernel")"
		fw_setenv vmlinux_checksum   "$(get_checksum "kernel")"
		mtd write "${kernel}" "kernel"
	}
	[ -n "${rootfs}" -a -f "${rootfs}" ] && 
		[ "${magic_word_rootfs}" = "7371" -o "${magic_word_rootfs}" = "6873" ] && {
		echo "Writing rootfs..." >"${output}"
		fw_setenv rootfs_start_addr "$(get_start_addr "rootfs")"
		fw_setenv rootfs_size       "$(get_size "rootfs")"
		fw_setenv rootfs_checksum   "$(get_checksum "rootfs")"
		mtd -j "/tmp/_sys/sysupgrade.tgz" write "${rootfs}" "rootfs"
	}
	[ -f "${after_local}" ] && chmod a+x "${after_local}" && . "${after_local}"
	[ -f "${after}" ] && chmod a+x "${after}" && . "${after}"
	ask_bool 1 "Reboot"

	#WG: kill watchdog.sh to make sure system reboot.
	killall -9 watchdog.sh
	echo "Upgrade completed, rebooting system..." >"${output}"
}

if [ -f "${firmware}" ]; then
	if [ "${1}" != "force" ] && [ $(check_image ${firmware}) -ne 1 ]; then
		echo "Not WatchGuard firmware, refuse to upgrade" > "${output}"
		return 1;
	fi
	if [ -n "${sectorsize}" ]; then
		sectorsize="$((${sectorsize}))"
	else
		echo "sectorsize Not defined." >"${output}"
		return 3
	fi
	[ -e "${tmpdir}" ] && rm -rf "${tmpdir}"
	mkdir -p "${tmpdir}" && cd "${tmpdir}" && tar zxf "${firmware}" && {
		errcode="1"
		kernel="$(ls -1 | grep "^openwrt\-.*\-${modelname}\-uImage\-lzma\.bin$")"
		rootfs="$(ls -1 | grep "^openwrt\-.*\-${modelname}\-root\.squashfs$")"
		[ -n "${kernel}" -a -f "${kernel}" -a -n "${rootfs}" -a -f "${rootfs}" ] && {
			magic_word_kernel="$(get_magic_word "${kernel}")"
			magic_word_rootfs="$(get_magic_word "${rootfs}")"
			[ "${magic_word_kernel}" = "2705" ] && 
				[ "${magic_word_rootfs}" = "7371" -o "${magic_word_rootfs}" = "6873" ] && 
				errcode="0"
		}
		#pass check when upload with full image file
		[ "${errcode}" -eq "1" ] && [ -f failsafe.bin ] && errcode="0"
		if [ "${errcode}" -eq "0" ] && [ -f "${before}" -o -f "${after}" ]; then
		[ "$1" = "test" ] || {
				echo doupgrade >"${output}"
				rm -rf "${firmware}"
				doupgrade
			}
		else
			echo "Firmware invalid format." >"${output}"
			return 1
		fi
		return
	} || {
		echo "Firmware invalid format." >"${output}"
		return 1
	}
fi
echo "$firmware Not existed." >"${output}"
return 2
4

there's no need for remote access, we can figure it out here

so far it seems to be an exact clone of EAP1200H which I added recently
but we need to make sure there is no external watchdog...and double check several things...

have you tried TFTP with this file? after editing the uboot environment with that command?
(note that it has to be renamed to test.bin if you use my method)
https://downloads.openwrt.org/snapshots/targets/ath79/generic/openwrt-ath79-generic-engenius_eap1200h-initramfs-kernel.bin

try UART again after doing these commands and rebooting
(remember that R175 must be bridged together if you haven't already)

fw_setenv stdin serial
fw_setenv stdout serial
fw_setenv stderr serial

also more info to gather...

cat /etc/modelname
cat /proc/mtd
dmesg
5

this might mean there is an external watchdog

look for this script and also paste that here

6 
cat /etc/modelname
ap300

cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00040000 00010000 "u-boot"
mtd1: 00010000 00010000 "u-boot-env"
mtd2: 00050000 00010000 "custom"
mtd3: 00180000 00010000 "kernel"
mtd4: 00b50000 00010000 "rootfs"
mtd5: 003c0000 00010000 "rootfs_data"
mtd6: 00280000 00010000 "failsafe"
mtd7: 01000000 00010000 "empty"
mtd8: 00010000 00010000 "ART"

Are there 2 watchdog.sh with same content on /rom/usr/sbin and /usr/sbin:

cat /rom/usr/sbin/watchdog.sh 
#!/bin/sh

while [ -e "/proc/hwctrl/watchdog_timer" ]; do
	(echo 1 >/proc/hwctrl/watchdog_timer)
	usleep 15000
	(echo 0 >/proc/hwctrl/watchdog_timer)
	sleep 270
done

dmesg
WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5217654] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5217654] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5248374] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5248374] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5279094] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5279094] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5309814] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5309814] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5340534] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5340534] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5371254] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5371254] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5401974] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5401974] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5432694] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5432694] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5463414] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5463414] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5494134] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5494134] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5524854] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5524854] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5555574] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5555574] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5586294] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5586294] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5617014] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5617014] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5647734] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5647734] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5678454] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5678454] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5709174] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5709174] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5739894] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5739894] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5770615] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5770615] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5801335] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5801335] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5832055] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5832055] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5862775] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5862775] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5893495] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5893495] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5924215] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5924215] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5954935] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5954935] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [5985655] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [5985655] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6016375] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6016375] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6047095] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6047095] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6077815] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6077815] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6108535] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6108535] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6139255] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6139255] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6169975] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6169975] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6200695] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6200695] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6231415] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6231415] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6262135] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6262135] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6292855] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6292855] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6323575] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6323575] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6354295] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6354295] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6385015] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6385015] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6415735] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6415735] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6446455] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6446455] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6477175] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6477175] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6507895] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6507895] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6538615] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6538615] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6569335] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6569335] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6600055] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6600055] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6630775] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6630775] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6661495] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6661495] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6692215] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6692215] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6722935] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6722935] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6753656] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6753656] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6784376] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6784376] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6815096] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6815096] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6845816] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6845816] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6876536] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6876536] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6907256] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6907256] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6937976] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6937976] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6968696] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6968696] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [6999416] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [6999416] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7030136] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7030136] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7060856] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7060856] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7091576] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7091576] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7122296] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7122296] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7153016] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7153016] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7183736] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7183736] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7214456] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7214456] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7245176] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7245176] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7275896] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7275896] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7306616] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7306616] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7337336] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7337336] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7368056] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7368056] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7398776] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7398776] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7429496] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7429496] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7460216] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7460216] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7490936] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7490936] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7521656] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7521656] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7552376] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7552376] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7583096] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7583096] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7613816] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7613816] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7644536] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7644536] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7675256] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7675256] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7705976] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7705976] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7736697] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7736697] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7767417] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7767417] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7798137] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7798137] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7828857] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7828857] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7859577] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7859577] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7890297] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7890297] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7921017] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7921017] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7951737] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7951737] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [7982457] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [7982457] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [8013177] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [8013177] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [8023112] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a6c47, 0x500000a, 0x0, 0x7df8 )
FWLOG: [8023243] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a6ccb, 0x500000a, 0x0, 0x7df9 )
FWLOG: [8023375] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a6d4f, 0x500000a, 0x0, 0x7dfa )
FWLOG: [8023507] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a6dd3, 0x500000a, 0x0, 0x7dfb )
FWLOG: [8023639] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a6e57, 0x500000a, 0x0, 0x7dfc )
FWLOG: [8023771] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a6edb, 0x500000a, 0x0, 0x7dfd )
FWLOG: [8023903] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a6f5f, 0x500000a, 0x0, 0x7dfe )
FWLOG: [8024035] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a6fe3, 0x500000a, 0x0, 0x7dff )
FWLOG: [8024167] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a7067, 0x500000a, 0x0, 0x7e00 )
FWLOG: [8024299] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a70eb, 0x500000a, 0x0, 0x7e01 )
FWLOG: [8024431] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a716f, 0x500000a, 0x0, 0x7e02 )
FWLOG: [8024563] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a71f3, 0x500000a, 0x0, 0x7e03 )
FWLOG: [8024695] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a7277, 0x500000a, 0x0, 0x7e04 )
FWLOG: [8024827] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a72fb, 0x500000a, 0x0, 0x7e05 )
FWLOG: [8024959] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a737f, 0x500000a, 0x0, 0x7e06 )
FWLOG: [8025091] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a7403, 0x500000a, 0x0, 0x7e07 )
FWLOG: [8025223] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a7487, 0x500000a, 0x0, 0x7e08 )
FWLOG: [8025355] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a750b, 0x500000a, 0x0, 0x7e09 )
FWLOG: [8025486] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a758e, 0x500000a, 0x0, 0x7e0a )
FWLOG: [8025618] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a7612, 0x500000a, 0x0, 0x7e0b )
FWLOG: [8025750] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a7696, 0x500000a, 0x0, 0x7e0c )
FWLOG: [8025882] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a771a, 0x500000a, 0x0, 0x7e0d )
FWLOG: [8026014] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a779e, 0x500000a, 0x0, 0x7e0e )
FWLOG: [8026146] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a7822, 0x500000a, 0x0, 0x7e0f )
FWLOG: [8026278] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a78a6, 0x500000a, 0x0, 0x7e10 )
FWLOG: [8026410] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a792a, 0x500000a, 0x0, 0x7e11 )
FWLOG: [8026542] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a79ae, 0x500000a, 0x0, 0x7e12 )
FWLOG: [8026674] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a7a32, 0x500000a, 0x0, 0x7e13 )
FWLOG: [8026806] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a7ab6, 0x500000a, 0x0, 0x7e14 )
FWLOG: [8026938] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a7b3a, 0x500000a, 0x0, 0x7e15 )
FWLOG: [8027070] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a7bbe, 0x500000a, 0x0, 0x7e16 )
FWLOG: [8027202] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a7c42, 0x500000a, 0x0, 0x7e17 )
FWLOG: [8027334] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a7cc6, 0x500000a, 0x0, 0x7e18 )
FWLOG: [8027466] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a7d4a, 0x500000a, 0x0, 0x7e19 )
FWLOG: [8027598] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a7dce, 0x500000a, 0x0, 0x7e1a )
FWLOG: [8027730] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a7e52, 0x500000a, 0x0, 0x7e1b )
FWLOG: [8027861] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a7ed5, 0x500000a, 0x0, 0x7e1c )
FWLOG: [8027993] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a7f59, 0x500000a, 0x0, 0x7e1d )
FWLOG: [8028125] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a7fdd, 0x500000a, 0x0, 0x7e1e )
FWLOG: [8028257] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a8061, 0x500000a, 0x0, 0x7e1f )
FWLOG: [8028389] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x87a80e5, 0x500000a, 0x0, 0x7e20 )
FWLOG: [8043897] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [8043897] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [8074617] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [8074617] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [8105337] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [8105337] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [8136057] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [8136057] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [8166777] WHAL_ERROR_RESET_CHANNF1 (  )
FWLOG: [8166777] WHAL_ERROR_RESET_ERRID ( 0x1 )
FWLOG: [8197497] WHAL_ERROR_RESET_CHANNF1 (  )

Will try TFTP stuff soon after some things here.

7

The kernel log is useless...hmm....

Either way, we need to get TFTP or UART working, at least one of them....

last thing needed is dump of ART

hexdump -C /dev/mtd8

8 
hexdump -C /dev/mtd8
00000000  00 90 7f b4 d7 e2 00 02  6f ff ff ff ff ff ff ff  |........o.......|
00000010  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
*
00001000  02 02 00 02 6f 12 34 56  41 50 31 33 36 2d 37 31  |....o.4VAP136-71|
00001010  32 2d 44 30 30 32 39 00  00 00 00 00 00 00 1f 00  |2-D0029.........|
00001020  77 02 00 00 00 00 04 00  58 00 4d 04 03 00 08 ff  |w.......X.M.....|
00001030  00 00 00 00 00 20 02 20  00 11 11 01 00 10 00 10  |..... . ........|
00001040  00 10 00 1c 1c 1c 12 12  12 38 00 a4 00 00 00 00  |.........8......|
00001050  ff 00 00 00 00 00 00 00  00 00 00 00 00 00 00 0f  |................|
00001060  0e 0e 03 00 2c e2 00 02  0e 1c 80 c0 80 0c 80 c0  |....,...........|
00001070  80 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00001080  00 00 00 00 00 00 00 00  00 00 70 89 a2 03 00 8e  |..........p.....|
00001090  00 00 00 03 00 8f 00 00  00 03 00 90 00 00 00 0b  |................|
000010a0  00 8f 00 00 00 0c 00 8e  00 00 00 0b 00 8f 00 00  |................|
000010b0  00 0c 00 90 00 00 00 0c  00 90 00 00 00 0c 00 90  |................|
000010c0  00 00 00 70 ac 70 8e ac  70 8e ac 7a 93 a2 26 26  |...p.p..p..z..&&|
000010d0  26 26 26 26 26 26 26 20  20 20 26 20 20 20 26 20  |&&&&&&&   &   & |
000010e0  20 20 24 24 20 20 1e 1e  20 20 1e 1e 20 20 1e 1e  |  $$  ..  ..  ..|
000010f0  24 24 20 20 1e 1e 20 20  1e 1e 20 20 1e 1e 24 24  |$$  ..  ..  ..$$|
00001100  20 20 1e 1e 20 20 1e 1e  20 20 1e 1e 22 22 1e 1e  |  ..  ..  ..""..|
00001110  1c 1c 1e 1e 1c 1c 1e 1e  1c 1c 22 22 1e 1e 1c 1c  |..........""....|
00001120  1e 1e 1c 1c 1e 1e 1c 1c  22 22 1e 1e 1c 1c 1e 1e  |........""......|
00001130  1c 1c 1e 1e 1c 1c 11 12  15 17 41 42 45 47 31 32  |..........ABEG12|
00001140  35 37 70 75 a2 ae 70 75  a2 ae 70 75 a2 ae 70 75  |57pu..pu..pu..pu|
00001150  98 a4 70 75 ac b8 70 75  ac b8 70 75 ac b8 70 75  |..pu..pu..pu..pu|
00001160  ac b8 70 75 ac b8 70 75  ac b8 70 75 ac b8 70 75  |..pu..pu..pu..pu|
00001170  a2 b8 28 66 24 64 24 66  20 60 1e 64 1c 5c 1a 60  |..(f$d$f `.d.\.`|
00001180  1a 5a 14 54 14 54 1c 5c  1c 5c 1c 5c 1c 5c 1c 5c  |.Z.T.T.\.\.\.\.\|
00001190  1c 5c 0e 4e 0e 4e 10 50  10 50 10 50 10 50 10 50  |.\.N.N.P.P.P.P.P|
000011a0  10 50 10 01 00 00 22 22  02 00 00 00 00 00 00 00  |.P....""........|
000011b0  00 00 00 00 00 00 44 00  00 00 00 00 00 ff 00 00  |......D.........|
000011c0  00 00 00 00 00 00 00 00  00 00 00 00 00 0e 0e 03  |................|
000011d0  00 2d e2 00 02 0e 1c e0  e0 f0 0c e0 e0 f0 6c 00  |.-............l.|
000011e0  00 00 00 00 00 00 00 00  00 32 36 00 00 00 00 00  |.........26.....|
000011f0  00 00 00 00 00 00 00 4c  54 68 78 8c a0 b9 cd 00  |.......LThx.....|
00001200  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00001280  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 4c  |...............L|
00001290  54 68 78 8c a0 b9 cd 4c  58 68 8c b4 bd b9 cd 4c  |Thx....LXh.....L|
000012a0  58 68 8c b4 bd b9 cd 14  14 14 0a 14 14 14 0a 14  |Xh..............|
000012b0  14 14 0a 14 14 14 0a 14  14 14 0a 14 14 14 0a 14  |................|
000012c0  14 14 0a 14 14 14 0a 14  14 0a 0a 00 00 0a 0a 00  |................|
000012d0  00 0a 0a 00 00 14 14 0a  0a 00 00 0a 0a 00 00 0a  |................|
000012e0  0a 00 00 14 14 0a 0a 00  00 0a 0a 00 00 0a 0a 00  |................|
000012f0  00 14 14 0a 0a 00 00 0a  0a 00 00 0a 0a 00 00 14  |................|
00001300  14 0a 0a 00 00 0a 0a 00  00 0a 0a 00 00 14 14 0a  |................|
00001310  0a 00 00 0a 0a 00 00 0a  0a 00 00 14 14 0a 0a 00  |................|
00001320  00 0a 0a 00 00 0a 0a 00  00 14 14 0a 0a 00 00 0a  |................|
00001330  0a 00 00 0a 0a 00 00 14  14 0a 0a 00 00 0a 0a 00  |................|
00001340  00 0a 0a 00 00 14 14 0a  0a 00 00 0a 0a 00 00 0a  |................|
00001350  0a 00 00 14 14 0a 0a 00  00 0a 0a 00 00 0a 0a 00  |................|
00001360  00 14 14 0a 0a 00 00 0a  0a 00 00 0a 0a 00 00 14  |................|
00001370  14 0a 0a 00 00 0a 0a 00  00 0a 0a 00 00 14 14 0a  |................|
00001380  0a 00 00 0a 0a 00 00 0a  0a 00 00 14 14 0a 0a 00  |................|
00001390  00 0a 0a 00 00 0a 0a 00  00 14 14 0a 0a 00 00 0a  |................|
000013a0  0a 00 00 0a 0a 00 00 10  16 18 40 46 48 30 36 38  |..........@FH068|
000013b0  4c 54 68 78 8c a0 b9 cd  4c 54 68 78 8c a0 b9 cd  |LThx....LThx....|
*
000013f0  4c 54 68 78 8c a0 b9 cd  3c 7c 3c 7c 3c 7c 3c 7c  |LThx....<|<|<|<||
00001400  3c 7c 3c 7c 3c 7c 3c 7c  3c 7c 3c 7c 3c 7c 3c 7c  |<|<|<|<|<|<|<|<||
*
00001440  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
*
00005000  44 08 22 8f 02 0d 00 03  7f 00 00 00 00 00 00 00  |D.".............|
00005010  55 49 00 08 44 0c 08 00  00 00 15 00 00 00 77 00  |UI..D.........w.|
00005020  00 00 00 00 00 00 98 00  00 60 00 00 00 63 75 73  |.........`...cus|
00005030  32 32 33 2d 30 32 32 2d  6e 31 37 32 35 00 00 00  |223-022-n1725...|
00005040  00 60 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |.`..............|
00005050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00005090  00 00 00 00 00 00 0c 01  20 02 00 00 11 11 01 00  |........ .......|
000050a0  10 00 10 00 10 00 00 00  20 00 00 00 00 00 00 00  |........ .......|
000050b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00005130  00 00 00 00 00 00 00 00  00 00 0f 00 49 04 09 00  |............I...|
00005140  99 99 09 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00005150  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000051c0  00 00 00 00 00 00 00 00  00 00 00 00 00 18 18 18  |................|
000051d0  00 18 18 18 00 18 18 18  00 08 08 08 00 08 08 08  |................|
000051e0  00 08 08 08 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000051f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00005220  cd 00 00 40 ff 89 ff 00  00 00 00 00 00 00 00 00  |...@............|
00005230  00 00 00 00 00 00 00 00  00 00 00 00 79 64 00 00  |............yd..|
00005240  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00005250  00 00 79 64 00 00 00 00  00 00 00 00 00 00 00 00  |..yd............|
00005260  00 00 00 00 00 00 00 00  79 64 00 00 00 00 00 00  |........yd......|
00005270  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000052a0  00 00 00 00 00 00 00 00  70 ac 70 8e ac 00 70 8e  |........p.p...p.|
000052b0  ac 00 70 8e ac 00 1c 1c  1c 1c 1c 1c 1c 1c 1c 1c  |..p.............|
000052c0  1a 1a 1c 1c 1a 1a 1c 1c  1a 1a 14 14 14 88 44 40  |..............D@|
000052d0  08 84 44 00 00 00 14 14  14 88 44 40 08 84 44 00  |..D.......D@..D.|
000052e0  00 00 14 14 14 88 44 40  08 84 44 00 00 00 14 14  |......D@..D.....|
000052f0  14 88 44 40 08 84 44 00  00 00 14 14 14 88 44 40  |..D@..D.......D@|
00005300  08 84 44 00 00 00 14 14  14 88 44 40 08 84 44 00  |..D.......D@..D.|
00005310  00 00 11 12 15 17 1a 1c  41 42 45 47 4a 4c 31 32  |........ABEGJL12|
00005320  35 37 3a 3c 00 00 70 75  9d a2 70 75 9d a2 70 75  |57:<..pu..pu..pu|
00005330  9d a2 7a 7f 93 98 70 75  9d a2 7a 7f 93 98 70 75  |..z...pu..z...pu|
00005340  ac b8 70 75 a7 ac 70 75  a7 ac 7a 7f 9d a2 70 75  |..pu..pu..z...pu|
00005350  a7 ac 7a 7f 9d a2 70 75  a7 ac 70 75 a7 ac 70 75  |..z...pu..pu..pu|
00005360  a7 ac 7a 7f 9d a2 70 75  a7 ac 7a 7f 9d a2 3c 7c  |..z...pu..z...<||
00005370  3c 3c 3c 7c 3c 3c 3c 7c  3c 3c 3c 7c 3c 3c 3c 7c  |<<<|<<<|<<<|<<<||
*
000053b0  3c 3c 3c 7c 3c 3c 00 00  00 00 00 00 00 00 00 00  |<<<|<<..........|
000053c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000053d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 1a 1c  |................|
000053e0  1e 20 1a 1c 1e 20 1a 1c  1e 20 1a 1c 1e 20 1a 1c  |. ... ... ... ..|
*
00005400  1e 20 1a 1c 1e 20 1a 1c  1e 20 1a 1c 1e 20 00 00  |. ... ... ... ..|
00005410  4c 58 68 90 a8 bd c5 cd  0e 12 7e 00 91 00 12 16  |LXh.......~.....|
00005420  8d 00 a0 00 12 16 8d 00  a1 00 00 fa 7a 00 0e 12  |............z...|
00005430  80 00 93 00 12 16 88 00  9a 00 12 16 8e 00 a1 00  |................|
00005440  00 fa 79 00 0e 12 7f 00  92 00 12 16 86 00 97 00  |..y.............|
00005450  12 16 8f 00 a2 00 00 fa  79 00 0e 12 81 00 93 00  |........y.......|
00005460  12 16 8d 00 9d 00 11 15  81 00 98 00 00 fa 79 00  |..............y.|
00005470  0e 12 86 00 97 00 11 15  80 00 96 00 12 16 8a 00  |................|
00005480  99 00 00 fa 79 00 0f 13  93 00 9e 00 12 16 8c 00  |....y...........|
00005490  9b 00 13 17 92 00 9d 00  00 fa 78 00 0f 13 89 00  |..........x.....|
000054a0  93 00 12 16 85 00 94 00  13 17 8b 00 95 00 00 fa  |................|
000054b0  78 00 10 14 88 00 97 00  13 17 8f 00 9b 00 13 17  |x...............|
000054c0  85 00 90 00 00 fa 79 00  00 00 00 00 00 00 00 00  |......y.........|
000054d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00005500  00 00 00 00 00 00 00 00  4c 5c 68 8c a0 cd 4c 5c  |........L\h...L\|
00005510  68 8c a0 cd 4c 5c 68 8c  a0 cd 4c 5c 68 8c a0 cd  |h...L\h...L\h...|
00005520  28 28 26 26 28 28 26 26  28 28 26 26 28 28 26 26  |((&&((&&((&&((&&|
00005530  28 28 26 26 28 28 26 26  1a 1a 1a ee ee ce 48 ee  |((&&((&&......H.|
00005540  8c e4 ce 48 1a 1a 1a ee  ee ce 48 ee 8c e4 ce 48  |...H......H....H|
00005550  1a 1a 1a ee ee ce 48 ee  8c e4 ce 48 1a 1a 1a ee  |......H....H....|
00005560  ee ce 48 ee 8c e4 ce 48  1a 1a 1a ee ee ce 48 ee  |..H....H......H.|
00005570  8c e4 ce 48 1a 1a 1a ee  ee ce 48 ee 8c e4 ce 48  |...H......H....H|
00005580  1a 1a 1a ee ee ce 48 ee  8c e4 ce 48 1a 1a 1a ee  |......H....H....|
00005590  ee ce 48 ee 8c e4 ce 48  1a 1a 1a ee ee ce 48 ee  |..H....H......H.|
000055a0  8c e4 ce 48 1a 1a 1a ee  ee ce 48 ee 8c e4 ce 48  |...H......H....H|
000055b0  1a 1a 1a ee ee ce 48 ee  8c e4 ce 48 1a 1a 1a ee  |......H....H....|
000055c0  ee ce 48 ee 8c e4 ce 48  1a 1a 1a ee ee ce 48 ee  |..H....H......H.|
000055d0  8c e4 ce 48 1a 1a 1a ee  ee ce 48 ee 8c e4 ce 48  |...H......H....H|
000055e0  1a 1a 1a ee ee ce 48 ee  8c e4 ce 48 1a 1a 1a ee  |......H....H....|
000055f0  ee ce 48 ee 8c e4 ce 48  1a 1a 1a ee ee ce 48 ee  |..H....H......H.|
00005600  8c e4 ce 48 1a 1a 1a ee  ee ce 48 ee 8c e4 ce 48  |...H......H....H|
00005610  10 16 18 19 1b 1d 40 46  48 49 4b 4d 30 36 38 39  |......@FHIKM0689|
00005620  3b 3d 00 00 4c 5a 5c 8c  b4 b8 bd cd 4c 5a 5c 8c  |;=..LZ\.....LZ\.|
00005630  b4 b8 bd cd 4e 58 5c 8e  ae b6 bf c7 52 62 92 a2  |....NX\.....Rb..|
00005640  b2 c3 00 00 4c 5a 5c 8c  b4 b8 bd cd 4e 58 5c 8e  |....LZ\.....NX\.|
00005650  ae b6 bf c7 4c 58 5c 68  8c 94 a0 b4 4c 58 5c 68  |....LX\h....LX\h|
00005660  8c 94 a0 b4 4e 56 5e 66  8e 96 ae 00 52 62 92 a2  |....NV^f....Rb..|
00005670  00 00 00 00 4c 58 5c 68  8c 94 a0 b4 4e 56 5e 66  |....LX\h....NV^f|
00005680  8e 96 ae 00 4c 5a 5c 8c  b4 b8 bd cd 4c 5a 5c 8c  |....LZ\.....LZ\.|
00005690  b4 b8 bd cd 4e 58 5c 8e  ae b6 bf c7 52 62 92 a2  |....NX\.....Rb..|
000056a0  b2 c3 00 00 4c 5a 5c 8c  b4 b8 bd cd 4e 58 5c 8e  |....LZ\.....NX\.|
000056b0  ae b6 bf c7 66 26 7c 7c  3c 3c 66 26 66 26 7c 7c  |....f&||<<f&f&|||
000056c0  3c 3c 66 26 5e 2c 7c 7c  3c 3c 5a 2a 5c 3c 3c 3c  |<<f&^,||<<Z*\<<<|
000056d0  3c 56 00 00 66 26 7c 7c  3c 3c 66 26 5e 2c 7c 7c  |<V..f&||<<f&^,|||
000056e0  3c 3c 5a 2a 5a 18 18 58  5e 1e 60 60 5a 18 18 58  |<<Z*Z..X^.``Z..X|
000056f0  5e 1e 60 60 5a 1a 1a 58  62 62 64 00 5a 5a 62 62  |^.``Z..Xbbd.ZZbb|
00005700  00 00 00 00 5a 18 18 58  5e 1e 60 60 5a 1a 1a 58  |....Z..X^.``Z..X|
00005710  62 62 64 00 58 18 7c 7c  3c 3c 7c 3c 58 18 7c 7c  |bbd.X.||<<|<X.|||
00005720  3c 3c 7c 3c 54 18 7c 7c  3c 3c 3c 3c 54 3c 3c 3c  |<<|<T.||<<<<T<<<|
00005730  3c 3c 00 00 58 18 7c 7c  3c 3c 7c 3c 54 18 7c 7c  |<<..X.||<<|<T.|||
00005740  3c 3c 3c 3c 00 00 00 00  00 00 00 00 00 00 00 00  |<<<<............|
00005750  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00005780  00 00 00 00 17 26 28 2a  1c 26 2a 2c 28 2d 31 33  |.....&(*.&*,(-13|
00005790  25 30 35 35 28 30 31 35  2e 30 37 37 24 33 36 37  |%055(015.077$367|
000057a0  2c 34 38 38 17 26 28 2a  1c 26 2a 2c 28 2d 31 33  |,488.&(*.&*,(-13|
000057b0  25 30 35 35 28 30 31 35  2e 30 37 37 24 33 36 37  |%055(015.077$367|
000057c0  2c 34 38 38 17 26 28 2a  1c 26 2a 2c 28 2d 31 33  |,488.&(*.&*,(-13|
000057d0  25 30 35 35 28 30 31 35  2e 30 37 37 24 33 36 37  |%055(015.077$367|
000057e0  2c 34 38 38 00 00 00 00  00 00 00 00 00 00 00 00  |,488............|
000057f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00005840  00 00 00 00 ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
00005850  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
*
00008000  fa f3 00 21 41 50 5f 49  50 41 44 44 52 3d 31 39  |...!AP_IPADDR=19|
00008010  32 2e 31 36 38 2e 37 2e  32 0a 41 50 5f 4e 45 54  |2.168.7.2.AP_NET|
00008020  4d 41 53 4b 3d 32 35 35  2e 32 35 35 2e 32 35 35  |MASK=255.255.255|
00008030  2e 30 0a 57 41 4e 5f 4d  4f 44 45 3d 62 72 69 64  |.0.WAN_MODE=brid|
00008040  67 65 64 0a 57 41 4e 5f  49 50 41 44 44 52 3d 31  |ged.WAN_IPADDR=1|
00008050  39 32 2e 31 36 38 2e 32  2e 31 0a 57 41 4e 5f 4e  |92.168.2.1.WAN_N|
00008060  45 54 4d 41 53 4b 3d 32  35 35 2e 32 35 35 2e 32  |ETMASK=255.255.2|
00008070  35 35 2e 30 0a 57 4c 41  4e 5f 4f 4e 5f 42 4f 4f  |55.0.WLAN_ON_BOO|
00008080  54 3d 6e 0a 41 50 5f 53  54 41 52 54 4d 4f 44 45  |T=n.AP_STARTMODE|
00008090  3d 64 75 61 6c 0a 41 50  5f 52 41 44 49 4f 5f 49  |=dual.AP_RADIO_I|
000080a0  44 3d 30 0a 41 50 5f 52  41 44 49 4f 5f 49 44 5f  |D=0.AP_RADIO_ID_|
000080b0  32 3d 31 0a 41 50 5f 50  52 49 4d 41 52 59 5f 43  |2=1.AP_PRIMARY_C|
000080c0  48 3d 38 0a 41 50 5f 43  48 4d 4f 44 45 3d 31 31  |H=8.AP_CHMODE=11|
000080d0  4e 47 48 54 34 30 4d 49  4e 55 53 0a 41 50 5f 50  |NGHT40MINUS.AP_P|
000080e0  52 49 4d 41 52 59 5f 43  48 5f 32 3d 33 36 0a 41  |RIMARY_CH_2=36.A|
000080f0  50 5f 43 48 4d 4f 44 45  5f 32 3d 31 31 4e 41 48  |P_CHMODE_2=11NAH|
00008100  54 34 30 50 4c 55 53 0a  50 55 52 45 47 3d 30 0a  |T40PLUS.PUREG=0.|
00008110  50 55 52 45 4e 3d 30 0a  54 58 51 55 45 55 45 4c  |PUREN=0.TXQUEUEL|
00008120  45 4e 3d 31 30 30 30 0a  53 48 4f 52 54 47 49 3d  |EN=1000.SHORTGI=|
00008130  31 0a 53 48 4f 52 54 47  49 5f 32 3d 31 0a 41 4d  |1.SHORTGI_2=1.AM|
00008140  50 44 55 45 4e 41 42 4c  45 3d 31 0a 41 4d 50 44  |PDUENABLE=1.AMPD|
00008150  55 45 4e 41 42 4c 45 5f  32 3d 31 0a 41 4d 50 44  |UENABLE_2=1.AMPD|
00008160  55 46 52 41 4d 45 53 3d  33 32 0a 41 4d 50 44 55  |UFRAMES=32.AMPDU|
00008170  46 52 41 4d 45 53 5f 32  3d 33 32 0a 41 4d 50 44  |FRAMES_2=32.AMPD|
00008180  55 4c 49 4d 49 54 3d 35  30 30 30 30 0a 41 4d 50  |ULIMIT=50000.AMP|
00008190  44 55 4c 49 4d 49 54 5f  32 3d 35 30 30 30 30 0a  |DULIMIT_2=50000.|
000081a0  41 4d 50 44 55 4d 49 4e  3d 33 32 37 36 38 0a 41  |AMPDUMIN=32768.A|
000081b0  4d 50 44 55 4d 49 4e 5f  32 3d 33 32 37 36 38 0a  |MPDUMIN_2=32768.|
000081c0  43 57 4d 4d 4f 44 45 3d  31 0a 43 57 4d 4d 4f 44  |CWMMODE=1.CWMMOD|
000081d0  45 5f 32 3d 31 0a 52 41  54 45 43 54 4c 3d 61 75  |E_2=1.RATECTL=au|
000081e0  74 6f 0a 4d 41 4e 52 41  54 45 3d 30 78 38 63 38  |to.MANRATE=0x8c8|
000081f0  63 38 63 38 63 0a 4d 41  4e 52 45 54 52 49 45 53  |c8c8c.MANRETRIES|
00008200  3d 30 78 30 34 30 34 30  34 30 34 0a 52 58 5f 43  |=0x04040404.RX_C|
00008210  48 41 49 4e 4d 41 53 4b  3d 37 0a 52 58 5f 43 48  |HAINMASK=7.RX_CH|
00008220  41 49 4e 4d 41 53 4b 5f  32 3d 37 0a 54 58 5f 43  |AINMASK_2=7.TX_C|
00008230  48 41 49 4e 4d 41 53 4b  3d 37 0a 54 58 5f 43 48  |HAINMASK=7.TX_CH|
00008240  41 49 4e 4d 41 53 4b 5f  32 3d 37 0a 53 57 41 50  |AINMASK_2=7.SWAP|
00008250  5f 4c 45 44 3d 31 0a 4c  45 44 5f 43 55 53 54 4f  |_LED=1.LED_CUSTO|
00008260  4d 3d 33 0a 41 50 5f 53  53 49 44 3d 73 63 6f 72  |M=3.AP_SSID=scor|
00008270  70 5f 32 67 5f 6a 61 6d  65 73 6a 68 79 65 68 0a  |p_2g_jamesjhyeh.|
00008280  41 50 5f 4d 4f 44 45 3d  61 70 0a 41 50 5f 4d 4f  |AP_MODE=ap.AP_MO|
00008290  44 45 5f 32 3d 61 70 0a  41 50 5f 4d 4f 44 45 5f  |DE_2=ap.AP_MODE_|
000082a0  33 3d 61 70 0a 41 50 5f  4d 4f 44 45 5f 34 3d 61  |3=ap.AP_MODE_4=a|
000082b0  70 0a 41 50 5f 4d 4f 44  45 5f 35 3d 61 70 0a 41  |p.AP_MODE_5=ap.A|
000082c0  50 5f 4d 4f 44 45 5f 36  3d 61 70 0a 41 50 5f 4d  |P_MODE_6=ap.AP_M|
000082d0  4f 44 45 5f 37 3d 61 70  0a 41 50 5f 4d 4f 44 45  |ODE_7=ap.AP_MODE|
000082e0  5f 38 3d 61 70 0a 41 50  5f 53 45 43 4d 4f 44 45  |_8=ap.AP_SECMODE|
000082f0  3d 4e 6f 6e 65 0a 41 50  5f 53 45 43 4d 4f 44 45  |=None.AP_SECMODE|
00008300  5f 32 3d 4e 6f 6e 65 0a  41 50 5f 53 45 43 4d 4f  |_2=None.AP_SECMO|
00008310  44 45 5f 33 3d 4e 6f 6e  65 0a 41 50 5f 53 45 43  |DE_3=None.AP_SEC|
00008320  4d 4f 44 45 5f 34 3d 4e  6f 6e 65 0a 41 50 5f 53  |MODE_4=None.AP_S|
00008330  45 43 4d 4f 44 45 5f 35  3d 4e 6f 6e 65 0a 41 50  |ECMODE_5=None.AP|
00008340  5f 53 45 43 4d 4f 44 45  5f 36 3d 4e 6f 6e 65 0a  |_SECMODE_6=None.|
00008350  41 50 5f 53 45 43 4d 4f  44 45 5f 37 3d 4e 6f 6e  |AP_SECMODE_7=Non|
00008360  65 0a 41 50 5f 53 45 43  4d 4f 44 45 5f 38 3d 4e  |e.AP_SECMODE_8=N|
00008370  6f 6e 65 0a 41 50 5f 50  52 49 4d 41 52 59 5f 4b  |one.AP_PRIMARY_K|
00008380  45 59 5f 30 3d 31 0a 41  50 5f 50 52 49 4d 41 52  |EY_0=1.AP_PRIMAR|
00008390  59 5f 4b 45 59 5f 31 3d  31 0a 41 50 5f 57 45 50  |Y_KEY_1=1.AP_WEP|
000083a0  5f 4d 4f 44 45 5f 30 3d  31 0a 41 50 5f 57 45 50  |_MODE_0=1.AP_WEP|
000083b0  5f 4d 4f 44 45 5f 31 3d  31 0a 41 50 5f 53 45 43  |_MODE_1=1.AP_SEC|
000083c0  46 49 4c 45 3d 50 53 4b  0a 57 50 53 5f 45 4e 41  |FILE=PSK.WPS_ENA|
000083d0  42 4c 45 3d 30 0a 41 50  5f 53 45 43 46 49 4c 45  |BLE=0.AP_SECFILE|
000083e0  5f 32 3d 50 53 4b 0a 57  50 53 5f 45 4e 41 42 4c  |_2=PSK.WPS_ENABL|
000083f0  45 5f 32 3d 30 0a 41 50  5f 53 45 43 46 49 4c 45  |E_2=0.AP_SECFILE|
00008400  5f 33 3d 50 53 4b 0a 57  50 53 5f 45 4e 41 42 4c  |_3=PSK.WPS_ENABL|
00008410  45 5f 33 3d 30 0a 41 50  5f 53 45 43 46 49 4c 45  |E_3=0.AP_SECFILE|
00008420  5f 34 3d 50 53 4b 0a 57  50 53 5f 45 4e 41 42 4c  |_4=PSK.WPS_ENABL|
00008430  45 5f 34 3d 30 0a 41 50  5f 53 45 43 46 49 4c 45  |E_4=0.AP_SECFILE|
00008440  5f 35 3d 50 53 4b 0a 57  50 53 5f 45 4e 41 42 4c  |_5=PSK.WPS_ENABL|
00008450  45 5f 35 3d 30 0a 41 50  5f 53 45 43 46 49 4c 45  |E_5=0.AP_SECFILE|
00008460  5f 36 3d 50 53 4b 0a 57  50 53 5f 45 4e 41 42 4c  |_6=PSK.WPS_ENABL|
00008470  45 5f 36 3d 30 0a 41 50  5f 53 45 43 46 49 4c 45  |E_6=0.AP_SECFILE|
00008480  5f 37 3d 50 53 4b 0a 57  50 53 5f 45 4e 41 42 4c  |_7=PSK.WPS_ENABL|
00008490  45 5f 37 3d 30 0a 41 50  5f 53 45 43 46 49 4c 45  |E_7=0.AP_SECFILE|
000084a0  5f 38 3d 50 53 4b 0a 57  50 53 5f 45 4e 41 42 4c  |_8=PSK.WPS_ENABL|
000084b0  45 5f 38 3d 30 0a 41 50  5f 4d 4f 44 45 5f 39 3d  |E_8=0.AP_MODE_9=|
000084c0  61 70 0a 41 50 5f 53 45  43 4d 4f 44 45 5f 39 3d  |ap.AP_SECMODE_9=|
000084d0  4e 6f 6e 65 0a 41 50 5f  53 45 43 46 49 4c 45 5f  |None.AP_SECFILE_|
000084e0  39 3d 50 53 4b 0a 57 50  53 5f 45 4e 41 42 4c 45  |9=PSK.WPS_ENABLE|
000084f0  5f 39 3d 30 0a 41 50 5f  4d 4f 44 45 5f 31 30 3d  |_9=0.AP_MODE_10=|
00008500  61 70 0a 41 50 5f 53 45  43 4d 4f 44 45 5f 31 30  |ap.AP_SECMODE_10|
00008510  3d 4e 6f 6e 65 0a 41 50  5f 53 45 43 46 49 4c 45  |=None.AP_SECFILE|
00008520  5f 31 30 3d 50 53 4b 0a  57 50 53 5f 45 4e 41 42  |_10=PSK.WPS_ENAB|
00008530  4c 45 5f 31 30 3d 30 0a  41 50 5f 4d 4f 44 45 5f  |LE_10=0.AP_MODE_|
00008540  31 31 3d 61 70 0a 41 50  5f 53 45 43 4d 4f 44 45  |11=ap.AP_SECMODE|
00008550  5f 31 31 3d 4e 6f 6e 65  0a 41 50 5f 53 45 43 46  |_11=None.AP_SECF|
00008560  49 4c 45 5f 31 31 3d 50  53 4b 0a 57 50 53 5f 45  |ILE_11=PSK.WPS_E|
00008570  4e 41 42 4c 45 5f 31 31  3d 30 0a 41 50 5f 4d 4f  |NABLE_11=0.AP_MO|
00008580  44 45 5f 31 32 3d 61 70  0a 41 50 5f 53 45 43 4d  |DE_12=ap.AP_SECM|
00008590  4f 44 45 5f 31 32 3d 4e  6f 6e 65 0a 41 50 5f 53  |ODE_12=None.AP_S|
000085a0  45 43 46 49 4c 45 5f 31  32 3d 50 53 4b 0a 57 50  |ECFILE_12=PSK.WP|
000085b0  53 5f 45 4e 41 42 4c 45  5f 31 32 3d 30 0a 41 50  |S_ENABLE_12=0.AP|
000085c0  5f 4d 4f 44 45 5f 31 33  3d 61 70 0a 41 50 5f 53  |_MODE_13=ap.AP_S|
000085d0  45 43 4d 4f 44 45 5f 31  33 3d 4e 6f 6e 65 0a 41  |ECMODE_13=None.A|
000085e0  50 5f 53 45 43 46 49 4c  45 5f 31 33 3d 50 53 4b  |P_SECFILE_13=PSK|
000085f0  0a 57 50 53 5f 45 4e 41  42 4c 45 5f 31 33 3d 30  |.WPS_ENABLE_13=0|
00008600  0a 41 50 5f 4d 4f 44 45  5f 31 34 3d 61 70 0a 41  |.AP_MODE_14=ap.A|
00008610  50 5f 53 45 43 4d 4f 44  45 5f 31 34 3d 4e 6f 6e  |P_SECMODE_14=Non|
00008620  65 0a 41 50 5f 53 45 43  46 49 4c 45 5f 31 34 3d  |e.AP_SECFILE_14=|
00008630  50 53 4b 0a 57 50 53 5f  45 4e 41 42 4c 45 5f 31  |PSK.WPS_ENABLE_1|
00008640  34 3d 30 0a 41 50 5f 4d  4f 44 45 5f 31 35 3d 61  |4=0.AP_MODE_15=a|
00008650  70 0a 41 50 5f 53 45 43  4d 4f 44 45 5f 31 35 3d  |p.AP_SECMODE_15=|
00008660  4e 6f 6e 65 0a 41 50 5f  53 45 43 46 49 4c 45 5f  |None.AP_SECFILE_|
00008670  31 35 3d 50 53 4b 0a 57  50 53 5f 45 4e 41 42 4c  |15=PSK.WPS_ENABL|
00008680  45 5f 31 35 3d 30 0a 41  50 5f 4d 4f 44 45 5f 31  |E_15=0.AP_MODE_1|
00008690  36 3d 61 70 0a 41 50 5f  53 45 43 4d 4f 44 45 5f  |6=ap.AP_SECMODE_|
000086a0  31 36 3d 4e 6f 6e 65 0a  41 50 5f 53 45 43 46 49  |16=None.AP_SECFI|
000086b0  4c 45 5f 31 36 3d 50 53  4b 0a 57 50 53 5f 45 4e  |LE_16=PSK.WPS_EN|
000086c0  41 42 4c 45 5f 31 36 3d  30 0a 56 4f 57 5f 45 4e  |ABLE_16=0.VOW_EN|
000086d0  41 42 4c 45 3d 30 0a 56  4f 57 5f 44 45 42 55 47  |ABLE=0.VOW_DEBUG|
000086e0  3d 30 0a 56 4f 57 5f 45  4e 41 42 4c 45 5f 32 3d  |=0.VOW_ENABLE_2=|
000086f0  30 0a 56 4f 57 5f 44 45  42 55 47 5f 32 3d 30 0a  |0.VOW_DEBUG_2=0.|
00008700  57 45 50 5f 49 53 5f 48  45 58 31 3d 30 0a 57 45  |WEP_IS_HEX1=0.WE|
00008710  50 5f 49 53 5f 48 45 58  32 3d 30 0a 57 45 50 5f  |P_IS_HEX2=0.WEP_|
00008720  49 53 5f 48 45 58 33 3d  30 0a 57 45 50 5f 49 53  |IS_HEX3=0.WEP_IS|
00008730  5f 48 45 58 34 3d 30 0a  57 45 50 5f 49 53 5f 48  |_HEX4=0.WEP_IS_H|
00008740  45 58 35 3d 30 0a 57 45  50 5f 49 53 5f 48 45 58  |EX5=0.WEP_IS_HEX|
00008750  36 3d 30 0a 57 45 50 5f  49 53 5f 48 45 58 37 3d  |6=0.WEP_IS_HEX7=|
00008760  30 0a 57 45 50 5f 49 53  5f 48 45 58 38 3d 30 0a  |0.WEP_IS_HEX8=0.|
00008770  57 50 41 5f 49 53 5f 48  45 58 3d 30 0a 57 50 41  |WPA_IS_HEX=0.WPA|
00008780  5f 49 53 5f 48 45 58 5f  32 3d 30 0a 57 50 41 5f  |_IS_HEX_2=0.WPA_|
00008790  49 53 5f 48 45 58 5f 33  3d 30 0a 57 50 41 5f 49  |IS_HEX_3=0.WPA_I|
000087a0  53 5f 48 45 58 5f 34 3d  30 0a 57 50 41 5f 49 53  |S_HEX_4=0.WPA_IS|
000087b0  5f 48 45 58 5f 35 3d 30  0a 57 50 41 5f 49 53 5f  |_HEX_5=0.WPA_IS_|
000087c0  48 45 58 5f 36 3d 30 0a  57 50 41 5f 49 53 5f 48  |HEX_6=0.WPA_IS_H|
000087d0  45 58 5f 37 3d 30 0a 57  50 41 5f 49 53 5f 48 45  |EX_7=0.WPA_IS_HE|
000087e0  58 5f 38 3d 30 0a 49 45  45 45 38 30 32 31 31 56  |X_8=0.IEEE80211V|
000087f0  5f 50 52 4f 58 59 41 52  50 3d 30 0a 41 50 5f 53  |_PROXYARP=0.AP_S|
00008800  53 49 44 5f 32 3d 70 65  61 63 5f 35 67 5f 6a 61  |SID_2=peac_5g_ja|
00008810  6d 65 73 6a 68 79 65 68  0a 57 53 43 5f 50 49 4e  |mesjhyeh.WSC_PIN|
00008820  3d 31 32 33 34 35 36 37  30 0a 57 53 43 5f 4e 41  |=12345670.WSC_NA|
00008830  4d 45 3d 41 74 68 65 72  6f 73 41 70 0a 41 50 5f  |ME=AtherosAp.AP_|
00008840  45 4e 52 4f 4c 4c 45 45  3d 41 74 68 65 72 6f 73  |ENROLLEE=Atheros|
00008850  41 70 0a 00 00 00 00 70  0a 00 00 00 00 ff ff ff  |Ap.....p........|
00008860  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
*
00010000
9

Well...
Good and bad news.
Bad things first... UART keep showing garbage.

Good is that was able to boot that image.
TFTP show that AP is downloading. I see some garbage on console like the same character repeating while download is in progress and some activity after download.
AP start responding on 192.168.1.1, I can connect to ssh on it, get new image prompt.
It keep up for exactly 5 minutes and reboot.
Here some dmesg...

dmesg using original image:

dmesg
.0: PME# disabled
pcibios_map_irq: IRQ 75 for bus 0
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
NET: Registered protocol family 1
ATH GPIOC major 0
squashfs: version 4.0 (2009/01/31) Phillip Lougher
Registering mini_fo version $Id$
JFFS2 version 2.2 (ZLIB) (RTIME) (c) 2001-2006 Red Hat, Inc.
msgmni has been set to 219
io scheduler noop registered
io scheduler deadline registered (default)
Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0xb8020000 (irq = 19) is a 16550A
console [ttyS0] enabled
loop: module loaded
8 cmdlinepart partitions found on MTD device ath-nor0
Creating 8 MTD partitions on "ath-nor0":
0x000000000000-0x000000040000 : "u-boot"
0x000000040000-0x000000050000 : "u-boot-env"
0x000000050000-0x0000000a0000 : "custom"
0x0000000a0000-0x000000220000 : "kernel"
0x000000220000-0x000000d70000 : "rootfs"
mtd: partition "rootfs" set to be root filesystem
mtd: partition "rootfs_data" created automatically, ofs=9B0000, len=3C0000
0x0000009b0000-0x000000d70000 : "rootfs_data"
0x000000d70000-0x000000ff0000 : "failsafe"
0x000000ff0000-0x000001ff0000 : "empty"
0x000001ff0000-0x000002000000 : "ART"
GACT probability on
Mirror/redirect action on
u32 classifier
    Actions configured
nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use
nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or
sysctl net.netfilter.nf_conntrack_acct=1 to enable it.
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 17
Bridge firewalling registered
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
athwdt_init: Registering WDT success
ath_otp_init: Registering OTP success
VFS: Mounted root (squashfs filesystem) readonly on device 31:4.
Freeing unused kernel memory: 132k freed
Please be patient, while OpenWrt loads ...
mini_fo: using base directory: /
mini_fo: using storage directory: /jffs
EAP900 Lan LED Control: hwctrl_entry=879f92a0 hwctrl!!!
qca955x_GMAC: Length per segment 1536
955x_GMAC: qca955x_gmac_attach
955x_GMAC: qca955x_set_gmac_caps
Currently in polling mode unit0
mac:0 Registering S17....
qca955x_GMAC: RX TASKLET - Pkts per Intr:160
qca955x_GMAC: Mac address for unit 0:bfff0000
qca955x_GMAC: ff:ff:ff:ff:ff:ff
Benson1 MAC =87b2f9a8
qca955x_GMAC: Max segments per packet :   1
qca955x_GMAC: Max tx descriptor count :   128
qca955x_GMAC: Max rx descriptor count :   224
qca955x_GMAC: Mac capability flags    :   2200
ttyS0: 1 input overrun(s)
NET: Registered protocol family 10
lo: Disabled Privacy Extensions
To set s17 LOOKUP_CTRL_REG registers, flag 0
athr_gmac_ring_alloc Allocated 2048 at 0x87aa9000
athr_gmac_ring_alloc Allocated 3584 at 0x87b2e000
955x_GMAC: eth0 in RGMII MODE
Scorpion -----> S17 PHY
_athrs17_mac0_intf done
athrs17_reg_init:done
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
Phy setup Complete
To set s17 LOOKUP_CTRL_REG registers, flag 1
SysRq : HELP : loglevel(0-9) reBoot Crash terminate-all-tasks(E) memory-full-oom-kill(F) kill-all-tasks(I) thaw-filesystems(J) saK show-memory-usage(M) nice-all-RT-tasks(N) show-registers(P) show-all-timers(Q) unRaw Sync show-task-states(T) Unmount show-blocked-tasks(W)
SysRq : HELP : loglevel(0-9) reBoot Crash terminate-all-tasks(E) memory-full-oom-kill(F) kill-all-tasks(I) thaw-filesystems(J) saK show-memory-usage(M) nice-all-RT-tasks(N) show-registers(P) show-all-timers(Q) unRaw Sync show-task-states(T) Unmount show-blocked-tasks(W)
ttyS0: 1 input overrun(s)
ADDRCONF(NETDEV_UP): eth0: link is not ready
athr_gmac_ring_free Freeing at 0x87aa9000
athr_gmac_ring_free Freeing at 0x87b2e000
To set s17 LOOKUP_CTRL_REG registers, flag 0
SysRq : HELP : loglevel(0-9) reBoot Crash terminate-all-tasks(E) memory-full-oom-kill(F) kill-all-tasks(I) thaw-filesystems(J) saK show-memory-usage(M) nice-all-RT-tasks(N) show-registers(P) show-all-timers(Q) unRaw Sync show-task-states(T) Unmount show-blocked-tasks(W)
athr_gmac_ring_alloc Allocated 2048 at 0x87aa5800
athr_gmac_ring_alloc Allocated 3584 at 0x87b56000
955x_GMAC: eth0 in RGMII MODE
Scorpion -----> S17 PHY
Error: cannot be initialized twice!
athrs17_reg_init:done
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
Phy setup Complete
To set s17 LOOKUP_CTRL_REG registers, flag 1
ADDRCONF(NETDEV_UP): eth0: link is not ready
device eth0 entered promiscuous mode
PPP generic driver version 2.4.2
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
NET: Registered protocol family 24
PPPoL2TP kernel driver, V1.0
PPTP driver version 0.8.4
ipt_TRIGGER: module license 'unspecified' taints kernel.
Disabling lock debugging due to kernel taint
xt_time: kernel timezone is -0000
nf_conntrack_rtsp v0.6.21 loading
nf_nat_rtsp v0.6.21 loading
ip_set version 4 loaded
arp_tables: (C) 2002 David S. Miller
Ebtables v2.0 registered

Enet:0 port0 up
TX & RX flow ctrl enabled in GE0 & GE1 ....
955x_GMAC: enet unit:0 is up...
eth0  RGMII  1000Mbps  full duplex
955x_GMAC: qca955x_soc_gmac_set_mac_duplex
955x_GMAC: qca955x_soc_gmac_set_link Done
955x_GMAC: done cfg2 0x7215 ifctl 0x0 miictrl
br-lan: port 1(eth0) entering forwarding state
ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
ip6_tables: (C) 2000-2006 Netfilter Core Team
ath_hal: 0.9.17.1 (AR5416, AR9380, DEBUG, REGOPS_FUNC, WRITE_EEPROM, TX_DATA_SWAP
SysRq : HELP : loglevel(0-9) reBoot Crash terminate-all-tasks(E) memory-full-oom-kill(F) kill-all-tasks(I) thaw-filesystems(J) saK show-memory-usage(M) nice-all-RT-tasks(N) show-registers(P) show-all-timers(Q) unRaw Sync show-task-states(T) Unmount show-blocked-tasks(W)
SysRq : HELP : loglevel(0-9) reBoot Crash terminate-all-tasks(E) memory-full-oom-kill(F) kill-all-tasks(I) thaw-filesystems(J) saK show-memory-usage(M) nice-all-RT-tasks(N) show-registers(P) show-all-timers(Q) unRaw Sync show-task-states(T) Unmount show-blocked-tasks(W)
, RX_DATA_SWAP, 11D)
SysRq : HELP : loglevel(0-9) reBoot Crash terminate-all-tasks(E) memory-full-oom-kill(F) kill-all-tasks(I) thaw-filesystems(J) saK show-memory-usage(M) nice-all-RT-tasks(N) show-registers(P) show-all-timers(Q) unRaw Sync show-task-states(T) Unmount show-blocked-tasks(W)
ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
ath_dfs: Version 2.0.0
Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved
ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
ath_ahb: 10.2.85 (Atheros/multi-bss)
__ath_attach: Set global_scn[0]
*** All the minfree values should be <= ATH_TXBUF-32, otherwise default value will be used instead ***
SysRq : HELP : loglevel(0-9) reBoot Crash terminate-all-tasks(E) memory-full-oom-kill(F) kill-all-tasks(I) thaw-filesystems(J) saK show-memory-usage(M) nice-all-RT-tasks(N) show-registers(P) show-all-timers(Q) unRaw Sync show-task-states(T) Unmount show-blocked-tasks(W)
ACBKMinfree = 48
ACBEMinfree = 32
ACVIMinfree = 16
ACVOMinfree = 0
CABMinfree = 48
UAPSDMinfree = 0
ATH_TXBUF=448
Bootstrap clock 40MHz
Enterprise mode: 0x33fc0000
Restoring Cal data from Flash
Green-AP : Green-AP : Attached

ath_get_caps[6115] rx chainmask mismatch actual 7 sc_chainmak 0
ath_get_caps[6090] tx chainmask mismatch actual 7 sc_chainmak 0
ath_attach_dfs[12502] dfsdomain 1
ath_tx_paprd_init sc 86010000 PAPRD disabled in HAL
wifi0: Atheros ???: mem=0xb8100000, irq=2
ath_pci: 10.2.85 (Atheros/multi-bss)
ath_pci_probe
PCI device id is 003c :003c
PCI: Setting latency timer of device 0000:00:00.0 to 64
ath_pci 0000:00:00.0: ath DEBUG: sc=0x86d3ba00

 ol_ath_pci_configure : num_desired MSI set to 0

 Using PCI Legacy Interrupt
__ol_ath_attach: ath_attach TODO
__ol_ath_attach: dev name wifi1
ol_ath_attach() BMI inited.
ol_ath_attach() BMI Get Target Info.
ol_ath_attach() TARGET TYPE: 7 Vers 0x4100016c
NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0
ol_ath_attach() configure Target .
qc98xx_verify_checksum: flash checksum passed: 0x8f22
ol_transfer_bin_file 1860: Download Flash data len 2116
ol_transfer_bin_file 1775: Download Firmware data len 218160
ol_ath_attach() Download FW.
ol_ath_attach() HT Create .
ol_ath_attach() HIF Claim.
ol_ath_attach() BMI Done.
ol_ath_attach() WMI attached. wmi_handle 860d0000
+HWT
CE_recv_buf_enqueue 569 Populate last entry 512 for CE 5
CE_recv_buf_enqueue 578 CE 5 wi 511 dest_ptr 0x7e51e0 nbytes 0 recv_ctxt 0x860ffb60
SysRq : HELP : loglevel(0-9) reBoot Crash terminate-all-tasks(E) memory-full-oom-kill(F) kill-all-tasks(I) thaw-filesystems(J) saK show-memory-usage(M) nice-all-RT-tasks(N) show-registers(P) show-all-timers(Q) unRaw Sync show-task-states(T) Unmount show-blocked-tasks(W)
-HWT
HTC Service:0x0300 ep:1 TX flow control disabled
CE_pkt_dl_len_set CE 4 Pkt download length 64
TXRX: Created pdev 86d3b400
HTC Service:0x0100 ep:2 TX flow control disabled
wmi_service_ready_event_rx:  WMI UNIFIED SERVICE READY event
num_rf_chain : 00000003
ht_cap_info: : 0000085b
vht_cap_info : 338001b2
vht_supp_mcs : 0000ffea
LARGE_AP enabled. num_peers 144, num_vdevs 16, num_tids 256
idx 0 req 1  num_units 0 num_unit_info 2 unit size 408 actual units 145
chunk 0 len 59160 requested ,ptr  0x6fb0000
FIRMWARE:P 145 V 16 T 443

FIRMWARE:_wlan_rtt_enable
SysRq : HELP : loglevel(0-9) reBoot Crash terminate-all-tasks(E) memory-full-oom-kill(F) kill-all-tasks(I) thaw-filesystems(J) saK show-memory-usage(M) nice-all-RT-tasks(N) show-registers(P) show-all-timers(Q) unRaw Sync show-task-states(T) Unmount show-blocked-tasks(W)
SysRq : HELP : loglevel(0-9) reBoot Crash terminate-all-tasks(E) memory-full-oom-kill(F) kill-all-tasks(I) thaw-filesystems(J) saK show-memory-usage(M) nice-all-RT-tasks(N) show-registers(P) show-all-timers(Q) unRaw Sync show-task-states(T) Unmount show-blocked-tasks(W)
wmi_ready_event_rx:  WMI UNIFIED READY event
ol_ath_connect_htc() WMI is ready
ol_ath_set_host_app_area TODO
target uses HTT version 2.1; host uses 2.1
ol_ath_attach() connect HTC.
ol_regdmn_start: reg-domain param: regdmn=0, countryName=, wModeSelect=FFFFFFFF, netBand=FFFFFFFF, extendedChanMode=0.
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x10080
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20080
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40080
Add VHT80 channel: 5210
Add VHT80 channel: 5290
Add VHT80 channel: 5530
Add VHT80 channel: 5610
Add VHT80 channel: 5690
Add VHT80 channel: 5775
Skipping VHT80 channel 5825
ol_ath_phyerr_attach: called
OL Resmgr Init-ed
Green-AP : Green-AP : Attached

Green-AP : Attached
wlan LED Control: 87bc41a0 athignoredfs!!!
wlan LED Control: 87bc4220 athnodefixedrate!!!
wlan LED Control: 87bc42a0 athrtscts!!!
wlan LED Control: 87bc4320 bandsteer!!!
wlan LED Control: 87bc43a0 ap_rssi!!!
wlan LED Control: 87bc4420 ap_roaming!!!
wlan LED Control: 87bc44a0 athversion!!!
wlan LED Control: 87bc4520 athdebug!!!
wlan LED Control: 879f92a0 hwctrl!!!
SysRq : HELP : loglevel(0-9) reBoot Crash terminate-all-tasks(E) memory-full-oom-kill(F) kill-all-tasks(I) thaw-filesystems(J) saK show-memory-usage(M) nice-all-RT-tasks(N) show-registers(P) show-all-timers(Q) unRaw Sync show-task-states(T) Unmount show-blocked-tasks(W)
ol_if_dfs_setup: called
ol_if_dfs_attach: called; ptr=86f95974, radar_info=86eb7be0
ol_ath_rtt_meas_report_attach: called
ol_ath_attach() UMAC attach .
ol_if_dfs_configure: called
ol_if_dfs_configure: FCC domain
ol_if_dfs_disable: called
ol_ath_attach: Calling ol_if_dfs_configure
__ol_ath_attach: init tx/rx TODO
__ol_ath_attach: hard_header_len reservation 58
SysRq : HELP : loglevel(0-9) reBoot Crash terminate-all-tasks(E) memory-full-oom-kill(F) kill-all-tasks(I) thaw-filesystems(J) saK show-memory-usage(M) nice-all-RT-tasks(N) show-registers(P) show-all-timers(Q) unRaw Sync show-task-states(T) Unmount show-blocked-tasks(W)
SysRq : HELP : loglevel(0-9) reBoot Crash terminate-all-tasks(E) memory-full-oom-kill(F) kill-all-tasks(I) thaw-filesystems(J) saK show-memory-usage(M) nice-all-RT-tasks(N) show-registers(P) show-all-timers(Q) unRaw Sync show-task-states(T) Unmount show-blocked-tasks(W)
ttyS0: 1 input overrun(s)
Initializing Pktlogs for 11ac
ath_attach_dfs[12502] dfsdomain 1
        DCS for CW interference mitigation:   0
        DCS for WLAN interference mitigation: 0
ath_attach_dfs[12502] dfsdomain 1
wlan_vap_create : enter. devhandle=0x860002c0, opmode=IEEE80211_M_HOSTAP, flags=0x3
wlan_vap_create : exit. devhandle=0x860002c0, opmode=IEEE80211_M_HOSTAP, flags=0x3.
VAP device ath49 created
device ath49 entered promiscuous mode
isCountryCodeValid: EEPROM regdomain 0x0
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x10080
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20080
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40080
Add VHT80 channel: 5210
Add VHT80 channel: 5290
Add VHT80 channel: 5530
Add VHT80 channel: 5610
Add VHT80 channel: 5690
Add VHT80 channel: 5775
Skipping VHT80 channel 5825
FWLOG: [53766] WHAL_ERROR_RECV_STOPPCU ( 0x110298a, 0x3 )
FWLOG: [53766] WHAL_ERROR_RESET_PM (  )
isCountryCodeValid: EEPROM regdomain 0x0
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x10080
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20080
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40080
Add VHT80 channel: 5210
Add VHT80 channel: 5290
Add VHT80 channel: 5530
Add VHT80 channel: 5610
Add VHT80 channel: 5690
Add VHT80 channel: 5775
Skipping VHT80 channel 5825
ath_ioctl: SIOC80211IFCREATE CALLED
wmi_unified_vdev_create_send: ID = 0 VAP Addr = 00:90:7f:b4:d7:e4:
TXRX: Created vdev 86179840 (00:90:7f:b4:d7:e4)
Setting vdev param = 26, value = 147
Setting vdev param = 27, value = 295
Setting vdev param = 28, value = 300
ol_ath_node_alloc: after allocate adding, the peer count number is 0
VAP device ath99 created
TXRX: ol_txrx_peer_find_add_id: peer 861c4000 ID 358 vid 0 mac 00:90:7f:b4:d7:e4
TXRX: ol_txrx_peer_find_add_id: peer 861c4000 ID 374 vid 0 mac 00:90:7f:b4:d7:e4
device ath99 entered promiscuous mode

dmesg using new OpenWrt image

dmesg
[    0.000000] Linux version 5.4.96 (builder@buildhost) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r15730-3cc08b5702)) #0 Wed Feb 10 14:47:23 2021
[    0.000000] printk: bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019750 (MIPS 74Kc)
[    0.000000] MIPS: machine is EnGenius EAP1200H
[    0.000000] SoC: Qualcomm Atheros QCA9558 ver 1 rev 0
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] On node 0 totalpages: 32768
[    0.000000]   Normal zone: 288 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 32768 pages, LIFO batch:7
[    0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[    0.000000] pcpu-alloc: [0] 0
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32480
[    0.000000] Kernel command line: console=ttyS0,115200n8 rootfstype=squashfs,jffs2
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes, linear)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes, linear)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 114312K/131072K available (5233K kernel code, 191K rwdata, 1188K rodata, 8612K init, 205K bss, 16760K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS: 51
[    0.000000] random: get_random_bytes called from start_kernel+0x32c/0x520 with crng_init=0
[    0.000000] CPU clock: 720.000 MHz
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 5309056796 ns
[    0.000007] sched_clock: 32 bits at 360MHz, resolution 2ns, wraps every 5965232126ns
[    0.008297] Calibrating delay loop... 359.42 BogoMIPS (lpj=718848)
[    0.042877] pid_max: default: 32768 minimum: 301
[    0.047920] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.055709] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.067844] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
[    0.078249] futex hash table entries: 256 (order: -1, 3072 bytes, linear)
[    0.085581] pinctrl core: initialized pinctrl subsystem
[    0.093343] NET: Registered protocol family 16
[    0.122811] workqueue: max_active 576 requested for napi_workq is out of range, clamping between 1 and 512
[    0.136264] clocksource: Switched to clocksource MIPS
[    0.142690] NET: Registered protocol family 2
[    0.148145] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.157106] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.165277] TCP bind hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.172793] TCP: Hash tables configured (established 1024 bind 1024)
[    0.179664] UDP hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.186665] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.194372] NET: Registered protocol family 1
[    0.199064] PCI: CLS 0 bytes, default 32
[    0.322734] workingset: timestamp_bits=14 max_order=15 bucket_order=1
[    0.335503] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.341747] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.364068] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[    0.375398] pinctrl-single 1804002c.pinmux: 544 pins, size 68
[    0.382448] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.391198] printk: console [ttyS0] disabled
[    0.395821] 18020000.uart: ttyS0 at MMIO 0x18020000 (irq = 9, base_baud = 2500000) is a 16550A
[    0.405006] printk: console [ttyS0] enabled
[    0.413904] printk: bootconsole [early0] disabled
[    0.432639] spi-nor spi0.0: s25fl256s1 (32768 Kbytes)
[    0.437855] 9 fixed-partitions partitions found on MTD device spi0.0
[    0.444313] Creating 9 MTD partitions on "spi0.0":
[    0.449192] 0x000000000000-0x000000040000 : "u-boot"
[    0.455064] 0x000000040000-0x000000050000 : "u-boot-env"
[    0.461279] 0x000000050000-0x0000000a0000 : "custom"
[    0.467132] 0x0000000a0000-0x0000000b0000 : "loader"
[    0.473001] 0x0000000b0000-0x000000220000 : "fwconcat1"
[    0.479130] 0x000000220000-0x000000230000 : "fakeroot"
[    0.485198] 0x000000230000-0x000000d70000 : "fwconcat0"
[    0.491322] 0x000000d70000-0x000000ff0000 : "failsafe"
[    0.497400] 0x000000ff0000-0x000001000000 : "art"
[    0.503198] Concatenating MTD devices:
[    0.507053] (0): "fwconcat0"
[    0.509983] (1): "fwconcat1"
[    0.512909] into device "virtual_flash"
[    0.516828] 1 fixed-partitions partitions found on MTD device virtual_flash
[    0.523896] Creating 1 MTD partitions on "virtual_flash":
[    0.529387] 0x000000000000-0x000000cb0000 : "firmware"
[    0.557201] libphy: Fixed MDIO Bus: probed
[    0.575999] ag71xx 19000000.eth: invalid MAC address, using random address
[    0.898036] libphy: ag71xx_mdio: probed
[    0.919147] ag71xx 19000000.eth: connected to PHY at mdio.0:05 [uid=004dd072, driver=Atheros 8035 ethernet]
[    0.929618] eth0: Atheros AG71xx at 0xb9000000, irq 4, mode: rgmii-id
[    0.936495] i2c /dev entries driver
[    0.942131] NET: Registered protocol family 10
[    0.951674] Segment Routing with IPv6
[    0.955534] NET: Registered protocol family 17
[    0.960129] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    0.973283] 8021q: 802.1Q VLAN Support v1.8
[    0.978312] PCI host bridge /ahb/pcie-controller@180c0000 ranges:
[    0.984556]  MEM 0x0000000010000000..0x0000000011ffffff
[    0.989873]   IO 0x0000000000000000..0x0000000000000000
[    0.995331] PCI host bridge to bus 0000:00
[    0.999518] pci_bus 0000:00: root bus resource [mem 0x10000000-0x11ffffff]
[    1.006504] pci_bus 0000:00: root bus resource [io  0x0000]
[    1.012168] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    1.019058] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    1.027125] pci 0000:00:00.0: [168c:003c] type 00 class 0x028000
[    1.033275] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x001fffff 64bit]
[    1.040217] pci 0000:00:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref]
[    1.047098] pci 0000:00:00.0: supports D1
[    1.051180] pci 0000:00:00.0: PME# supported from D0 D1 D3hot
[    1.058024] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 00
[    1.064783] pci 0000:00:00.0: BAR 0: assigned [mem 0x10000000-0x101fffff 64bit]
[    1.072224] pci 0000:00:00.0: BAR 6: assigned [mem 0x10200000-0x1020ffff pref]
[    1.080435] hctosys: unable to open rtc device (rtc0)
[    1.117328] Freeing unused kernel memory: 8612K
[    1.121947] This architecture does not have kernel memory protection.
[    1.128481] Run /init as init process
[    1.204293] random: fast init done
[    1.452860] init: Console is alive
[    1.456589] init: - watchdog -
[    1.476036] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    1.485217] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    1.503425] init: - preinit -
[    1.738257] random: jshn: uninitialized urandom read (4 bytes read)
[    1.847951] random: jshn: uninitialized urandom read (4 bytes read)
[    1.882112] random: jshn: uninitialized urandom read (4 bytes read)
[    5.101631] eth0: link up (1000Mbps/Full duplex)
[    5.106362] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[    6.169924] eth0: link down
[    6.183341] procd: - early -
[    6.186399] procd: - watchdog -
[    6.761064] procd: - watchdog -
[    6.764611] procd: - ubus -
[    6.774618] urandom_read: 5 callbacks suppressed
[    6.774624] random: ubusd: uninitialized urandom read (4 bytes read)
[    6.818074] random: ubusd: uninitialized urandom read (4 bytes read)
[    6.827529] procd: - init -
[    7.366844] kmodloader: loading kernel modules from /etc/modules.d/*
[    7.405905] Loading modules backported from Linux version v5.8.18-0-gab435ce49bd1
[    7.413544] Backport generated by backports.git v5.8.18-1-0-ga630fd46
[    7.471228] xt_time: kernel timezone is -0000
[    7.590470] PPP generic driver version 2.4.2
[    7.605003] NET: Registered protocol family 24
[    7.624149] urngd: v1.0.2 started.
[    7.696085] ath: phy0: Unable to initialize hardware; initialization status: -5
[    7.703522] ath9k 18100000.wmac: failed to initialize device
[    7.709321] ath9k: probe of 18100000.wmac failed with error -5
[    7.740606] kmodloader: done loading kernel modules from /etc/modules.d/*
[    7.824950] random: crng init done
[   34.922849] br-lan: port 1(eth0) entered blocking state
[   34.928201] br-lan: port 1(eth0) entered disabled state
[   34.933788] device eth0 entered promiscuous mode
[   36.973623] eth0: link up (1000Mbps/Full duplex)
[   36.978497] br-lan: port 1(eth0) entered blocking state
[   36.983825] br-lan: port 1(eth0) entered forwarding state
[   36.991032] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
10

This is super good news to be honest, we don't need UART anymore
we have everything we need

Are you familiar with the build system or want to learn?

or you want me to make builds for you?

11

I´m not a dev guy, know some things but I´m honestly more interested now in install some thing functional and also don't have a dev environment ready here, so if you want to build, I really appreciate your help.

12

With more time, I really want to learn how to...

13

it will take a few tries because we have to guess which GPIO is for watchdog
but it might be number 16 like the other board

could you paste the uboot-env again
(last time it was a picture or something)

also I like to have the FCC ID for the commit message

also a link to the original firmware, maybe the one you downgraded to?

and can you verify that 0x0 at ART is the MAC address?
00 90 7f b4 d7 e2
if that's not it can you give the MAC address on the label?

thats it for now I think :laughing:

1 Like
14

FCC is Q6G-AP300
MAC address is correct.
Here you can get all versions https://software.watchguard.com/SoftwareDownloads?familyId=a2RF0000000XUhmMAG, I used 1.0.0.1. To get bin is just extract zip few times with 7zip. Don´t remember how many times there a zip inside a zip.
In case you try to install it, default password is wgwap

For u-boot you mean:

fw_printenv
bootdelay=2
baudrate=115200
ethaddr=0x00:0xaa:0xbb:0xcc:0xdd:0xee
ipaddr=192.168.1.1
serverip=192.168.1.101
factory_boot=tftp 0x3000000 vmlinux-art-ramdisk && bootm 0x3000000
failsafe_boot=bootm 0x9fd70000
vmlinux_start_addr=0xbf0a0000
vmlinux_size=0x000eae6e
vmlinux_checksum=bdef98717749a4b52da23bf4e7878ce2
rootfs_start_addr=0xbf220000
rootfs_size=0x00790000
rootfs_checksum=ac5a2ebd1fc55be0c6a561dec4588dd5
stdin=serial
stdout=serial
stderr=serial
bootargs=console=ttyS0,115200n81 root=31:04 rootfstype=squashfs init=/etc/preinit mtdparts=ath-nor0:256k(u-boot),64k(u-boot-env),320k(custom),1536k(kernel),11584k(rootfs),2560k(failsafe),16384k(empty),64k(ART) board=AP300
bootcmd=if ping 192.168.1.101; then tftp 0x82000000 ap300.bin && bootm 0x82000000; else bootm 0x9f0a0000; fi
15

oops i forgot to ask for this output

ifconfig

16

It is using DHCP now

ifconfig 
br-lan    Link encap:Ethernet  HWaddr 00:90:7F:B4:D7:E2  
          inet addr:192.168.1.103  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::290:7fff:feb4:d7e2/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:45300 errors:0 dropped:0 overruns:0 frame:0
          TX packets:8306 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:2960669 (2.8 MiB)  TX bytes:1257536 (1.1 MiB)

eth0      Link encap:Ethernet  HWaddr 00:90:7F:B4:D7:E2  
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:45554 errors:0 dropped:0 overruns:0 frame:0
          TX packets:8302 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:3794593 (3.6 MiB)  TX bytes:1320594 (1.2 MiB)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:52 errors:0 dropped:0 overruns:0 frame:0
          TX packets:52 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:3714 (3.6 KiB)  TX bytes:3714 (3.6 KiB)
17

ifconfig is not showing the wireless interfaces...is wireless turned off on original firmware?

anyway here is a test image....I will be updating this gist as we go...

hit "view raw" to download
load it with TFTP
see if it stays online for more than 5 minutes (watchdog timer is set on GPIO 16)
test wireless
make a backup of all mtdblocks with LuCI at System --> Flash firmware / Backup
paste the whole kernel log dmesg

https://gist.github.com/mpratt14/ae08223fbb9bb9a639197452d215bffb

1 Like
18

Hi @mpratt14!!! Image seems almost perfect til now.
Is up for about 22 minutes since first try.

I will set a SSID and leave some devices connected over night to see what happens.

For now I´m really speechless for your support!!

Let´s test it for few hours or days before definitive upgrade?

[    0.000000] Linux version 5.4.96 (pi@SDDesk) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r13719+835-66e04abbb6)) #0 Thu Feb 11 04:28:49 2021
[    0.000000] printk: bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019750 (MIPS 74Kc)
[    0.000000] MIPS: machine is WatchGuard AP300
[    0.000000] SoC: Qualcomm Atheros QCA9558 ver 1 rev 0
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] On node 0 totalpages: 32768
[    0.000000]   Normal zone: 288 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 32768 pages, LIFO batch:7
[    0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[    0.000000] pcpu-alloc: [0] 0 
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32480
[    0.000000] Kernel command line: console=ttyS0,115200n8 rootfstype=squashfs,jffs2
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes, linear)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes, linear)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 112400K/131072K available (4916K kernel code, 184K rwdata, 1124K rodata, 10920K init, 196K bss, 18672K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS: 51
[    0.000000] random: get_random_bytes called from start_kernel+0x32c/0x520 with crng_init=0
[    0.000000] CPU clock: 720.000 MHz
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 5309056796 ns
[    0.000007] sched_clock: 32 bits at 360MHz, resolution 2ns, wraps every 5965232126ns
[    0.008284] Calibrating delay loop... 359.42 BogoMIPS (lpj=718848)
[    0.042878] pid_max: default: 32768 minimum: 301
[    0.047921] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.055708] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.067864] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
[    0.078272] futex hash table entries: 256 (order: -1, 3072 bytes, linear)
[    0.085609] pinctrl core: initialized pinctrl subsystem
[    0.092017] NET: Registered protocol family 16
[    0.121549] workqueue: max_active 576 requested for napi_workq is out of range, clamping between 1 and 512
[    0.134699] clocksource: Switched to clocksource MIPS
[    0.141123] NET: Registered protocol family 2
[    0.146445] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.155401] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.163569] TCP bind hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.171082] TCP: Hash tables configured (established 1024 bind 1024)
[    0.177963] UDP hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.184960] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.192648] NET: Registered protocol family 1
[    0.197342] PCI: CLS 0 bytes, default 32
[    0.369355] workingset: timestamp_bits=14 max_order=15 bucket_order=1
[    0.381966] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.388209] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.412293] pinctrl-single 1804002c.pinmux: 544 pins, size 68
[    0.419407] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[    0.426848] printk: console [ttyS0] disabled
[    0.431449] 18020000.uart: ttyS0 at MMIO 0x18020000 (irq = 9, base_baud = 2500000) is a 16550A
[    0.440642] printk: console [ttyS0] enabled
[    0.449540] printk: bootconsole [early0] disabled
[    0.465528] spi-nor spi0.0: s25fl256s1 (32768 Kbytes)
[    0.470761] 10 fixed-partitions partitions found on MTD device spi0.0
[    0.477306] Creating 10 MTD partitions on "spi0.0":
[    0.482263] 0x000000000000-0x000000040000 : "u-boot"
[    0.488109] 0x000000040000-0x000000050000 : "u-boot-env"
[    0.494293] 0x000000050000-0x0000000a0000 : "custom"
[    0.500136] 0x0000000a0000-0x0000000b0000 : "loader"
[    0.506013] 0x0000000b0000-0x000000220000 : "fwconcat2"
[    0.512113] 0x000000220000-0x000000230000 : "fakeroot"
[    0.518138] 0x000000230000-0x000000d70000 : "fwconcat0"
[    0.524235] 0x000000d70000-0x000000ff0000 : "failsafe"
[    0.530276] 0x000000ff0000-0x000001ff0000 : "fwconcat1"
[    0.536390] 0x000001ff0000-0x000002000000 : "art"
[    0.542195] Concatenating MTD devices:
[    0.546049] (0): "fwconcat0"
[    0.548977] (1): "fwconcat1"
[    0.551905] (2): "fwconcat2"
[    0.554827] into device "virtual_flash"
[    0.558747] 1 fixed-partitions partitions found on MTD device virtual_flash
[    0.565814] Creating 1 MTD partitions on "virtual_flash":
[    0.571302] 0x000000000000-0x000001cb0000 : "firmware"
[    0.614410] libphy: Fixed MDIO Bus: probed
[    0.948472] libphy: ag71xx_mdio: probed
[    0.969936] ag71xx 19000000.eth: connected to PHY at mdio.0:05 [uid=004dd072, driver=Atheros 8035 ethernet]
[    0.980383] eth0: Atheros AG71xx at 0xb9000000, irq 4, mode: rgmii-id
[    0.987145] i2c /dev entries driver
[    0.990860] ath79-wdt 18060008.wdt: unable to register misc device, err=-16
[    0.997966] ath79-wdt: probe of 18060008.wdt failed with error -16
[    1.005356] NET: Registered protocol family 10
[    1.013335] Segment Routing with IPv6
[    1.017196] NET: Registered protocol family 17
[    1.021797] 8021q: 802.1Q VLAN Support v1.8
[    1.026874] PCI host bridge /ahb/pcie-controller@180c0000 ranges:
[    1.033098]  MEM 0x0000000010000000..0x0000000011ffffff
[    1.038414]   IO 0x0000000000000000..0x0000000000000000
[    1.043884] PCI host bridge to bus 0000:00
[    1.048073] pci_bus 0000:00: root bus resource [mem 0x10000000-0x11ffffff]
[    1.055053] pci_bus 0000:00: root bus resource [io  0x0000]
[    1.060708] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    1.067599] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    1.075667] pci 0000:00:00.0: [168c:003c] type 00 class 0x028000
[    1.081814] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x001fffff 64bit]
[    1.088758] pci 0000:00:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref]
[    1.095636] pci 0000:00:00.0: supports D1
[    1.099713] pci 0000:00:00.0: PME# supported from D0 D1 D3hot
[    1.106551] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 00
[    1.113310] pci 0000:00:00.0: BAR 0: assigned [mem 0x10000000-0x101fffff 64bit]
[    1.120758] pci 0000:00:00.0: BAR 6: assigned [mem 0x10200000-0x1020ffff pref]
[    1.169143] Freeing unused kernel memory: 10920K
[    1.173852] This architecture does not have kernel memory protection.
[    1.180385] Run /init as init process
[    1.190726] random: fast init done
[    1.633724] init: Console is alive
[    1.637466] init: - watchdog -
[    1.657611] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    1.666785] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    1.685037] init: - preinit -
[    1.915245] random: jshn: uninitialized urandom read (4 bytes read)
[    2.025952] random: jshn: uninitialized urandom read (4 bytes read)
[    2.059899] random: jshn: uninitialized urandom read (4 bytes read)
[    5.292066] eth0: link up (1000Mbps/Full duplex)
[    5.296794] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[    6.340901] eth0: link down
[    6.354223] procd: - early -
[    6.357312] procd: - watchdog -
[    6.918523] procd: - watchdog -
[    6.922071] procd: - ubus -
[    6.932205] urandom_read: 4 callbacks suppressed
[    6.932212] random: ubusd: uninitialized urandom read (4 bytes read)
[    6.975521] random: ubusd: uninitialized urandom read (4 bytes read)
[    6.982392] random: ubusd: uninitialized urandom read (4 bytes read)
[    6.991477] procd: - init -
[    7.539565] kmodloader: loading kernel modules from /etc/modules.d/*
[    7.575134] Loading modules backported from Linux version v5.8.18-0-gab435ce49bd1
[    7.582774] Backport generated by backports.git v5.8.18-1-0-ga630fd46
[    7.637710] xt_time: kernel timezone is -0000
[    7.760939] PPP generic driver version 2.4.2
[    7.771701] NET: Registered protocol family 24
[    7.804006] urngd: v1.0.2 started.
[    7.847160] ath10k 5.8 driver, optimized for CT firmware, probing pci device: 0x3c.
[    7.867526] ath10k_pci 0000:00:00.0: enabling device (0000 -> 0002)
[    7.876184] ath10k_pci 0000:00:00.0: pci irq legacy oper_irq_mode 1 irq_mode 0 reset_mode 0
[    8.017875] random: crng init done
[   11.353017] ath10k_pci 0000:00:00.0: qca988x hw2.0 target 0x4100016c chip_id 0x043202ff sub 0000:0000
[   11.362431] ath10k_pci 0000:00:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   11.374643] ath10k_pci 0000:00:00.0: firmware ver 10.1-ct-8x-__fW-022-ecad3248 api 2 features wmi-10.x,has-wmi-mgmt-tx,mfp,txstatus-noack,wmi-10.x-CT,ratemask-CT,txrate-CT,get-temp-CT,tx-rc-CT,cust-stats-CT,retry-gt2-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT crc32 3e4cf97f
[   11.762534] ath10k_pci 0000:00:00.0: board_file api 1 bmi_id N/A crc32 bebc7c08
[   12.685714] ath10k_pci 0000:00:00.0: 10.1 wmi init: vdevs: 16  peers: 127  tid: 256
[   12.703023] ath10k_pci 0000:00:00.0: wmi print 'P 128 V 8 T 410'
[   12.709361] ath10k_pci 0000:00:00.0: wmi print 'msdu-desc: 1424  sw-crypt: 0 ct-sta: 0'
[   12.717506] ath10k_pci 0000:00:00.0: wmi print 'alloc rem: 24984 iram: 38672'
[   12.771370] ath10k_pci 0000:00:00.0: htt-ver 2.1 wmi-op 2 htt-op 2 cal file max-sta 128 raw 0 hwcrypto 1
[   12.785629] ath10k_pci 0000:00:00.0: NOTE:  Firmware DBGLOG output disabled in debug_mask: 0x10000000
[   12.898010] ath: EEPROM regdomain sanitized
[   12.898019] ath: EEPROM regdomain: 0x64
[   12.898022] ath: EEPROM indicates we should expect a direct regpair map
[   12.898040] ath: Country alpha2 being used: 00
[   12.898043] ath: Regpair used: 0x64
[   12.967500] ath: EEPROM regdomain sanitized
[   12.967510] ath: EEPROM regdomain: 0x64
[   12.967514] ath: EEPROM indicates we should expect a direct regpair map
[   12.967532] ath: Country alpha2 being used: 00
[   12.967535] ath: Regpair used: 0x64
[   12.984509] ieee80211 phy1: Selected rate control algorithm 'minstrel_ht'
[   12.986214] ieee80211 phy1: Atheros AR9550 Rev:0 mem=0xb8100000, irq=13
[   13.027056] kmodloader: done loading kernel modules from /etc/modules.d/*
[   70.353252] br-lan: port 1(eth0) entered blocking state
[   70.358610] br-lan: port 1(eth0) entered disabled state
[   70.364193] device eth0 entered promiscuous mode
[   73.420056] eth0: link up (1000Mbps/Full duplex)
[   73.424960] br-lan: port 1(eth0) entered blocking state
[   73.430289] br-lan: port 1(eth0) entered forwarding state
[   73.437447] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   86.730844] eth0: link down
[   86.734218] br-lan: port 1(eth0) entered disabled state
[   92.876051] eth0: link up (1000Mbps/Full duplex)
[   92.880916] br-lan: port 1(eth0) entered blocking state
[   92.886241] br-lan: port 1(eth0) entered forwarding state
[  199.537511] br-lan: port 1(eth0) entered disabled state
[  199.566087] device eth0 left promiscuous mode
[  199.570639] br-lan: port 1(eth0) entered disabled state
[  199.594137] eth0: link down
[  199.629028] br-lan: port 1(eth0) entered blocking state
[  199.634380] br-lan: port 1(eth0) entered disabled state
[  199.639954] device eth0 entered promiscuous mode
[  199.682220] br-lan: port 1(eth0) entered blocking state
[  199.687566] br-lan: port 1(eth0) entered forwarding state
[  200.587265] br-lan: port 1(eth0) entered disabled state
[  202.700101] eth0: link up (1000Mbps/Full duplex)
[  202.709218] br-lan: port 1(eth0) entered blocking state
[  202.714560] br-lan: port 1(eth0) entered forwarding state
[  221.130838] eth0: link down
[  221.134207] br-lan: port 1(eth0) entered disabled state
[  226.252043] eth0: link up (1000Mbps/Full duplex)
[  226.256907] br-lan: port 1(eth0) entered blocking state
[  226.262249] br-lan: port 1(eth0) entered forwarding state
[  321.003907] ath10k_pci 0000:00:00.0: 10.1 wmi init: vdevs: 16  peers: 127  tid: 256
[  321.021240] ath10k_pci 0000:00:00.0: wmi print 'P 128 V 8 T 410'
[  321.027580] ath10k_pci 0000:00:00.0: wmi print 'msdu-desc: 1424  sw-crypt: 0 ct-sta: 0'
[  321.035740] ath10k_pci 0000:00:00.0: wmi print 'alloc rem: 24984 iram: 38672'
[  321.104089] ath10k_pci 0000:00:00.0: pdev param 0 not supported by firmware
[  321.118905] ath10k_pci 0000:00:00.0: rts threshold -1
[  321.129541] br-lan: port 2(wlan0) entered blocking state
[  321.134989] br-lan: port 2(wlan0) entered disabled state
[  321.140664] device wlan0 entered promiscuous mode
[  324.509099] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  324.515757] br-lan: port 2(wlan0) entered blocking state
[  324.521180] br-lan: port 2(wlan0) entered forwarding state
[  382.040295] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  382.142713] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  382.245095] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  382.347509] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  382.449909] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  382.552312] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  382.654707] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  382.757112] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  382.859508] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  382.961903] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  383.064311] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  383.166717] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  383.269111] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  383.371512] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  383.473918] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  383.576315] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  383.678729] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  383.781112] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  383.883521] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  383.985922] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  384.088328] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  384.190721] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  384.293114] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  384.395533] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  384.497934] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  384.600330] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  384.702730] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  384.805127] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  384.907540] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  385.009938] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  385.112343] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  385.214742] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  385.290723] ath10k_pci 0000:00:00.0: Cannot communicate with firmware, previous wmi cmds: 36954:20504 36904:20455 36904:20450 36952:20368, jiffies: 21312, attempting to fake crash and restart firmware, dev-flags: 0x42
[  385.310365] ath10k_pci 0000:00:00.0: failed to send wmi nop: -143
[  385.316591] ath10k_pci 0000:00:00.0: could not request stats (type -268435456 ret -143 specifier 1)
[  385.325840] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  385.333928] ath10k_pci 0000:00:00.0: failed to set beacon mode for vdev 0: -143
[  385.341406] ath10k_pci 0000:00:00.0: failed to set dtim period for vdev 0: -143
[  385.349399] ath10k_pci 0000:00:00.0: firmware crashed! (guid f1a864c1-2ce5-4d98-aeda-346c1baa687d)
[  385.358559] ath10k_pci 0000:00:00.0: qca988x hw2.0 target 0x4100016c chip_id 0x043202ff sub 0000:0000
[  385.367922] ath10k_pci 0000:00:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[  385.380160] ath10k_pci 0000:00:00.0: firmware ver 10.1-ct-8x-__fW-022-ecad3248 api 2 features wmi-10.x,has-wmi-mgmt-tx,mfp,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,get-temp-CT,tx-rc-CT,cust-stats-CT,retry-gt2-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT crc32 3e4cf97f
[  385.410993] ath10k_pci 0000:00:00.0: board_file api 1 bmi_id N/A crc32 bebc7c08
[  385.418427] ath10k_pci 0000:00:00.0: htt-ver 2.1 wmi-op 2 htt-op 2 cal file max-sta 128 raw 0 hwcrypto 1
[  385.428202] ath10k_pci 0000:00:00.0: firmware register dump:
[  385.433960] ath10k_pci 0000:00:00.0: [00]: 0x00940750 0x00400C00 0x00980000 0x009AF0DC
[  385.441996] ath10k_pci 0000:00:00.0: [04]: 0x009AF148 0x009AF264 0x00941B6C 0x00941B20
[  385.450043] ath10k_pci 0000:00:00.0: [08]: 0x00941B00 0x009423A4 0x009422DC 0x009422C4
[  385.458084] ath10k_pci 0000:00:00.0: [12]: 0x00941B90 0x009423F4 0x009423D4 0x009423DC
[  385.466126] ath10k_pci 0000:00:00.0: [16]: 0x009423E4 0x009423EC 0x00942888 0x00942520
[  385.474168] ath10k_pci 0000:00:00.0: [20]: 0x009424FC 0x0094241C 0x00942540 0x00942498
[  385.482203] ath10k_pci 0000:00:00.0: [24]: 0x00942450 0x0094250C 0x009424D0 0x00942750
[  385.490238] ath10k_pci 0000:00:00.0: [28]: 0x00942798 0x00942844 0x009428C4 0x00942594
[  385.498272] ath10k_pci 0000:00:00.0: [32]: 0x0094258C 0x00942C28 0x00942F4C 0x00942F7C
[  385.506315] ath10k_pci 0000:00:00.0: [36]: 0x00942F90 0x00942FE4 0x00942FF8 0x00943040
[  385.514349] ath10k_pci 0000:00:00.0: [40]: 0x0094077C 0x00940790 0x00943084 0x00942F00
[  385.522384] ath10k_pci 0000:00:00.0: [44]: 0x009AF290 0x00942A80 0x00942D40 0x00942D64
[  385.530419] ath10k_pci 0000:00:00.0: [48]: 0x00942D78 0x00942D9C 0x00957E18 0x00957E28
[  385.538461] ath10k_pci 0000:00:00.0: [52]: 0x00957E20 0x00940788 0x009430EC 0x00000000
[  385.546495] ath10k_pci 0000:00:00.0: [56]: 0x00000000 0x00000000 0x00000000 0x00000000
[  385.554528] ath10k_pci 0000:00:00.0: Copy Engine register dump:
[  385.560547] ath10k_pci 0000:00:00.0: [00]: 0x00057400   8   8   3   3
[  385.567093] ath10k_pci 0000:00:00.0: [01]: 0x00057800  19  19 309 310
[  385.573639] ath10k_pci 0000:00:00.0: [02]: 0x00057c00  32  32  24  32
[  385.580186] ath10k_pci 0000:00:00.0: [03]: 0x00058000   5   5   5   5
[  385.586734] ath10k_pci 0000:00:00.0: [04]: 0x00058400   3   3  43   3
[  385.593281] ath10k_pci 0000:00:00.0: [05]: 0x00058800   9   9   8   9
[  385.599828] ath10k_pci 0000:00:00.0: [06]: 0x00058c00  13  13  13  13
[  385.606375] ath10k_pci 0000:00:00.0: [07]: 0x00059000   0   0   0   0
[  385.613038] ath10k_pci 0000:00:00.0: debug log header, dbuf: 0x411aa8  dropped: 0
[  385.620707] ath10k_pci 0000:00:00.0: [0] next: 0x411ac0 buf: 0x40f90c sz: 1500 len: 496 count: 31 free: 0
[  385.630495] ath10k_pci 0000:00:00.0: ath10k_pci ATH10K_DBG_BUFFER:
[  385.636780] ath10k: [0000]: 889E0600 204CFC0B 0A000000 0B000000 9C9E0600 204CFC0B 0A000000 0B000000
[  385.645969] ath10k: [0008]: B19E0600 204CFC0B 0A000000 0B000000 C59E0600 204CFC0B 0A000000 0B000000
[  385.655151] ath10k: [0016]: DA9E0600 204CFC0B 0A000000 0B000000 EE9E0600 204CFC0B 0A000000 0B000000
[  385.664338] ath10k: [0024]: 039F0600 204CFC0B 0A000000 0B000000 179F0600 204CFC0B 0A000000 0B000000
[  385.673524] ath10k: [0032]: 2C9F0600 204CFC0B 0A000000 0B000000 409F0600 204CFC0B 0A000000 0B000000
[  385.682702] ath10k: [0040]: 559F0600 204CFC0B 0A000000 0B000000 699F0600 204CFC0B 0A000000 0B000000
[  385.691881] ath10k: [0048]: 7E9F0600 204CFC0B 0A000000 0B000000 929F0600 204CFC0B 0A000000 0B000000
[  385.701058] ath10k: [0056]: A79F0600 204CFC0B 0A000000 0B000000 BB9F0600 204CFC0B 0A000000 0B000000
[  385.710237] ath10k: [0064]: D09F0600 204CFC0B 0A000000 0B000000 E49F0600 204CFC0B 0A000000 0B000000
[  385.719416] ath10k: [0072]: F99F0600 204CFC0B 0A000000 0B000000 0DA00600 204CFC0B 0A000000 0B000000
[  385.728594] ath10k: [0080]: 22A00600 204CFC0B 0A000000 0B000000 36A00600 204CFC0B 0A000000 0B000000
[  385.737773] ath10k: [0088]: 4BA00600 204CFC0B 0A000000 0B000000 5FA00600 204CFC0B 0A000000 0B000000
[  385.746950] ath10k: [0096]: 74A00600 204CFC0B 0A000000 0B000000 88A00600 204CFC0B 0A000000 0B000000
[  385.756129] ath10k: [0104]: 9DA00600 204CFC0B 0A000000 0B000000 B1A00600 204CFC0B 0A000000 0B000000
[  385.765308] ath10k: [0112]: C6A00600 204CFC0B 0A000000 0B000000 DAA00600 204CFC0B 0A000000 0B000000
[  385.774483] ath10k: [0120]: EFA00600 204CFC0B 0A000000 0B000000
[  385.780493] ath10k_pci 0000:00:00.0: ATH10K_END
[  385.785165] ath10k_pci 0000:00:00.0: [1] next: 0x411aa8 buf: 0x40fefc sz: 1500 len: 0 count: 0 free: 0
[  385.798857] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  385.806351] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  385.813811] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  385.821259] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  385.829929] ath10k_pci 0000:00:00.0: failed to set cts protection for vdev 0: -143
[  385.838793] ath10k_pci 0000:00:00.0: failed to recalculate rts/cts prot for vdev 0: -143
[  385.848410] ath10k_pci 0000:00:00.0: failed to set preamble for vdev 0: -143
[  385.856519] ath10k_pci 0000:00:00.0: failed to set mgmt tx rate -143
[  385.864558] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  385.872562] ath10k_pci 0000:00:00.0: removing peer, cleanup-all, deleting: peer 6297f2f1 vdev: 0 addr: 00:90:7f:b4:d7:e4 
[  385.986308] ieee80211 phy0: Hardware restart was requested
[  385.992726] ath10k_pci 0000:00:00.0: failed to send pdev bss chan info request: -143
[  386.936040] ath10k_pci 0000:00:00.0: 10.1 wmi init: vdevs: 16  peers: 127  tid: 256
[  386.953330] ath10k_pci 0000:00:00.0: wmi print 'P 128 V 8 T 410'
[  386.959671] ath10k_pci 0000:00:00.0: wmi print 'msdu-desc: 1424  sw-crypt: 0 ct-sta: 0'
[  386.967828] ath10k_pci 0000:00:00.0: wmi print 'alloc rem: 24984 iram: 38672'
[  387.035421] ath10k_pci 0000:00:00.0: pdev param 0 not supported by firmware
[  387.042760] ath10k_pci 0000:00:00.0: set-coverage-class, phyclk: 88  value: 0
[  387.050936] ath10k_pci 0000:00:00.0: rts threshold -1
[  387.063424] ath10k_pci 0000:00:00.0: device successfully recovered
[  420.478940] br-lan: port 3(wlan1) entered blocking state
[  420.484369] br-lan: port 3(wlan1) entered disabled state
[  420.490059] device wlan1 entered promiscuous mode
[  420.523637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  420.530329] br-lan: port 3(wlan1) entered blocking state
[  420.535761] br-lan: port 3(wlan1) entered forwarding state
[  603.725392] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  603.827792] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  603.930193] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  604.032583] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  604.134994] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  604.237387] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  604.339784] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  604.442185] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  604.544590] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  604.646976] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  604.749391] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  604.851797] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  604.954176] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  605.056586] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  605.158974] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  605.261391] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  605.363781] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  605.466193] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  605.568597] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  605.670982] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  605.773382] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  605.875779] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  605.978179] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  606.080590] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  606.182991] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  606.285381] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  606.387775] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  606.490179] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  606.592581] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  606.694995] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  606.730710] ath10k_pci 0000:00:00.0: Cannot communicate with firmware, previous wmi cmds: 36954:76008 36904:75876 36904:75876 36904:75876, jiffies: 76672, attempting to fake crash and restart firmware, dev-flags: 0x42
[  606.750511] ath10k_pci 0000:00:00.0: failed to transmit management frame via WMI: -11
[  606.758585] ath10k_pci 0000:00:00.0: failed to transmit management frame via WMI: -143
[  606.797391] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  606.899793] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  607.002192] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  607.104597] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  607.207003] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  607.242732] ath10k_pci 0000:00:00.0: failed to send wmi nop: -143
[  607.248946] ath10k_pci 0000:00:00.0: could not request stats (type -268435456 ret -143 specifier 1)
[  607.258347] ath10k_pci 0000:00:00.0: firmware crashed! (guid eebb92bb-c10a-4b1f-b0c4-c8314e835177)
[  607.267581] ath10k_pci 0000:00:00.0: qca988x hw2.0 target 0x4100016c chip_id 0x043202ff sub 0000:0000
[  607.276964] ath10k_pci 0000:00:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[  607.289212] ath10k_pci 0000:00:00.0: firmware ver 10.1-ct-8x-__fW-022-ecad3248 api 2 features wmi-10.x,has-wmi-mgmt-tx,mfp,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,get-temp-CT,tx-rc-CT,cust-stats-CT,retry-gt2-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT crc32 3e4cf97f
[  607.320032] ath10k_pci 0000:00:00.0: SWBA overrun on vdev 0, skipped old beacon
[  607.327565] ath10k_pci 0000:00:00.0: board_file api 1 bmi_id N/A crc32 bebc7c08
[  607.335008] ath10k_pci 0000:00:00.0: htt-ver 2.1 wmi-op 2 htt-op 2 cal file max-sta 128 raw 0 hwcrypto 1
[  607.344796] ath10k_pci 0000:00:00.0: firmware register dump:
[  607.350561] ath10k_pci 0000:00:00.0: [00]: 0x00940750 0x00400C00 0x00980000 0x009AF0DC
[  607.358616] ath10k_pci 0000:00:00.0: [04]: 0x009AF148 0x009AF264 0x00941B6C 0x00941B20
[  607.366686] ath10k_pci 0000:00:00.0: [08]: 0x00941B00 0x009423A4 0x009422DC 0x009422C4
[  607.374736] ath10k_pci 0000:00:00.0: [12]: 0x00941B90 0x009423F4 0x009423D4 0x009423DC
[  607.382787] ath10k_pci 0000:00:00.0: [16]: 0x009423E4 0x009423EC 0x00942888 0x00942520
[  607.390831] ath10k_pci 0000:00:00.0: [20]: 0x009424FC 0x0094241C 0x00942540 0x00942498
[  607.398880] ath10k_pci 0000:00:00.0: [24]: 0x00942450 0x0094250C 0x009424D0 0x00942750
[  607.406960] ath10k_pci 0000:00:00.0: [28]: 0x00942798 0x00942844 0x009428C4 0x00942594
19

Nice! we are almost there

you are lucky this board is so similar to the one I just added, and the one that Dragets just added :laughing:

There is some work left, mostly GPIO
also a question...does the label give only 1 MAC address or multiple?
and what are the MACs labeled as? ETH and 5 GHz maybe?

for that image i uploaded, I removed the LED definitions on purpose so you can test them

take this script "blink all"
https://openwrt.org/docs/techref/hardware/port.gpio#script_blink_all

connect to ssh

cd /tmp
vi gpio

to use vi, if you are not familiar
after vi gpio press the i key for "insert" mode
paste the script
hit Escape key to leave "insert" mode
vi command for write and quit
:wq
then hit enter to return to terminal

now make it executable and run it starting at GPIO 18 (most likely all LEDs are after 18)
(do not touch GPIO 0 - 12)

chmod 777 gpio
./gpio 1s 18

this script toggles every GPIO
I just need you to record which GPIO number is for which LED
also how many LEDs are there?

if you are not sure exactly you can have the script toggle only one GPIO like this
./gpio 1s 22 22
syntax is
<seconds> <start> <end>

20

on the other boards GPIO 13 is one of the LEDs

so also do
./gpio 1s 13 13
and tell me which one it is