Can you please add support for Xiaomi AX3000T (RD03V2). I explicitly asked the seller on Ali Express to send me the model "RD23", but they sent the model "RD03V2". Thanks in advance...
From Xiaomi MiR Patcher
device_name = RD03V2
rom_version = 2.0.12 release
mac_address = redacted
CountryCode = CN
hackCheck version = 3
WARN: Exploits "arn_switch/start_binding/set_mac_filter" not working!!!
WARN: Exploits "Smartcontroller" are not usable (hackCheck:3)
It is a completely new device, not filogic platform, but qualcommax platform, so nothing (except the sticker and maybe power plug) resembles the other devices going with same name.
Can you figure out "boot log" via web interface? Where would you download firmware upgrade for it?
Please leave first 3 pieces of MAC intact. They are assigned to manufacturer, not individual devices.
You own one, we don't ...
Will there be future support for adding this one ?
This beyond my skill set...
Well, try to find device logs in xiaomi ui, then copy/paste them into text editor like notepad++ and clear last 3 pieces of mac addresses and ip addresses. Then post here, just to see the components in device can be used in OpenWrt. Slim hope somebody else with the device picks up the work later.
I ordered 3 devices for a relative (as they looked like V1 mediatek devices), but one of the three was V2. 
Although not supported by xmir-patcher, I was able to get serial and ssh access using hzyitc's guide on his github for a different device.
With access to the device, I'm happy to provide any information if it moves the needle on this at all.
Given post character limit, i'll post the Serial boot log first, followed by the kernel boot log.
Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1.1-00064
S - IMAGE_VARIANT_STRING=MAACANAZA
S - OEM_IMAGE_VERSION_STRING=node-sh-08
S - Boot Config, 0x000002c5
B - 127 - PBL, Start
B - 1558 - bootable_media_detect_entry, Start
B - 3282 - bootable_media_detect_success, Start
B - 3285 - elf_loader_entry, Start
B - 8175 - auth_hash_seg_entry, Start
B - 8535 - auth_hash_seg_exit, Start
B - 99808 - elf_segs_hash_verify_entry, Start
B - 171007 - PBL, End
B - 140666 - SBL1, Start
B - 201483 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4
B - 209992 - clock_init, Start
D - 7411 - clock_init, Delta
B - 217556 - boot_flash_init, Start
B - 217678 - lsy--->Nov 23 2021, 11:03:10
B - 226371 - lsy--->Nov 23 2021, 11:03:10
D - 25101 - boot_flash_init, Delta
B - 242719 - boot_config_data_table_init, Start
D - 4544 - boot_config_data_table_init, Delta - (575 Bytes)
B - 250344 - Boot Setting : 0x00020618
B - 256871 - CDT version:2,Platform ID:8,Major ID:4,Minor ID:0,Subtype:2
B - 263794 - sbl1_ddr_set_params, Start
B - 265411 - Pre_DDR_clock_init, Start
B - 271053 - Pre_DDR_clock_init, End
B - 913292 - do ddr sanity test, Start
D - 30 - do ddr sanity test, Delta
B - 917958 - Image Load, Start
D - 240828 - QSEE Image Loaded, Delta - (578956 Bytes)
B - 1159640 - Image Load, Start
D - 13664 - DEVCFG Image Loaded, Delta - (13592 Bytes)
B - 1173335 - Image Load, Start
D - 179828 - APPSBL Image Loaded, Delta - (433686 Bytes)
B - 1353224 - QSEE Execution, Start
D - 61 - QSEE Execution, Delta
B - 1359690 - SBL1, End
D - 1221525 - SBL1, Delta
S - Flash Throughput, 2475 KB/s (1027481 Bytes, 415037 us)
S - DDR Frequency, 800 MHz
S - Core 0 Frequency, 800 MHz
U-Boot 2016.01 (Feb 08 2025 - 08:05:42 +0000), Build: jenkins-common_router_openwrt_ota_publish-8537
DRAM: smem ram ptable found: ver: 1 len: 4
256 MiB
NAND: QPIC controller support serial NAND
ID = 21beef
Vendor = ef
Device = be
Serial Nand Device Found With ID : 0xef 0xbe
Serial NAND device Manufacturer:W25N01KWZEIG
Device Size:128 MiB, Page size:2048, Spare Size:64, ECC:4-bit
SF: Unsupported flash IDs: manuf 00, jedec 0000, ext_jedec 0000
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
128 MiB
MMC: sdhci: Node Not found, skipping initialization
PCI Link Intialized
In: serial@78AF000
Out: serial@78AF000
Err: serial@78AF000
machid: 8040002
bootwait is on, bootdelay=5
### main_loop: bootcmd="bootmiwifi"
Hit any key to stop autoboot: 0
miwifi: check crash in rmem !
trigger button release!
board_eth_init: enter
cmbblk is stable 5
board_eth_init: reset_napa_phy_gpio 39
ipq_gmac_init: enter!
MAC0 addr:90:fb:5d:XX:XX:XX
ipq_gmac_init: GEPHY
PHY ID1: 0x4d
PHY ID2: 0xd0c0
ipq_gmac_init: eth0, mac_uint=0, phy_address=7, phy_external_link=1
MAC1 addr:XX:XX:XX:XX:XX:XX
ipq_gmac_init GMAC1:Invalid PHY ID (phy_chip_id=0xffffffff)
ipq_gmac_init: eth1, mac_uint=1, phy_address=0, phy_external_link=0
eth0, eth1 [PRIME]
miwifi_config_env: os_idx = 1, ft_mode = 0
miwifi_config_env: flag_try_sys2_failed 2
Erasing NAND...
Erasing at 0x4e0000 -- 100% complete.
Writing to NAND... OK
miwifi_bootargs: ubi.mtd=rootfs_1 root=mtd:ubi_rootfs rootfstype=squashfs cnss2.bdf_integrated=0x24 cnss2.bdf_pci0=0x60 cnss2.bdf_pci1=0x60 cnss2.skip_radio_bmap=4 rootwait uart_en=1
ubi0: attaching mtd1
ubi0: scanning is finished
ubi0: attached mtd1 (name "mtd=0", size 30 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 240, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 1201567440
ubi0: available PEBs: 44, total reserved PEBs: 196, PEBs reserved for bad PEB handling: 20
Read 0 bytes from volume kernel to 44000000
No size specified -> Using max size (3682304)
## Loading kernel from FIT Image at 44000000 ...
Using 'config@mp03.3' configuration
Trying 'kernel@1' kernel subimage
Description: ARM OpenWrt Linux-4.4.60
Type: Kernel Image
Compression: lzma compressed
Data Start: 0x440000f8
Data Size: 2192714 Bytes = 2.1 MiB
Architecture: ARM
OS: Linux
Load Address: 0x41208000
Entry Point: 0x41208000
Hash algo: crc32
Hash value: f3135aaf
Hash algo: sha1
Hash value: 38daffea840e479f425d910e8df94b723be5672a
Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 44000000 ...
Using 'config@mp03.3' configuration
Trying 'fdt@mp03.3' fdt subimage
Description: ARM OpenWrt qcom-ipq50xx-mpxx device tree blob
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x442e2380
Data Size: 59282 Bytes = 57.9 KiB
Architecture: ARM
Hash algo: crc32
Hash value: 51a104e6
Hash algo: sha1
Hash value: 34651da22b8bce11d41a98912c767417c3d7ed4d
Verifying Hash Integrity ... crc32+ sha1+ OK
Booting using the fdt blob at 0x442e2380
Uncompressing Kernel Image ... OK
Loading Device Tree to 4a3ee000, end 4a3ff791 ... OK
Using machid 0x8040002 from environment
Kernel boot log (continuation of above)
Starting kernel ...
[ 0.000000] Booting Linux on physical CPU 0x0
[ 0.000000] Initializing cgroup subsys cpuset
[ 0.000000] Initializing cgroup subsys cpu
[ 0.000000] Initializing cgroup subsys cpuacct
[ 0.000000] Linux version 4.4.60 (jenkins@57d010c56ca7) (gcc version 7.5.0 (OpenWrt GCC 7.5.0 unknown) ) #0 SMP PREEMPT Thu Feb 6 07:35:15 2025
[ 0.000000] CPU: ARMv7 Processor [51af8014] revision 4 (ARMv7), cr=10c0383d
[ 0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[ 0.000000] Machine model: Qualcomm Technologies, Inc. IPQ5018/AP-MP03.3
[ 0.000000] Reserved memory: OVERLAP DETECTED!
[ 0.000000] q6_mem_regions@4B000000 (0x4b000000--0x4e000000) overlaps with q6_code_data@4B000000 (0x4b000000--0x4b040000)
[ 0.000000] Memory policy: Data cache writealloc
[ 0.000000] psci: probing for conduit method from DT.
[ 0.000000] psci: PSCIv1.0 detected in firmware.
[ 0.000000] psci: Using standard PSCI v0.2 function IDs
[ 0.000000] psci: MIGRATE_INFO_TYPE not supported.
[ 0.000000] PERCPU: Embedded 10 pages/cpu @8fd80000 s11980 r8192 d20788 u40960
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 48320
[ 0.000000] Kernel command line: ubi.mtd=rootfs_1 root=mtd:ubi_rootfs rootfstype=squashfs cnss2.bdf_integrated=0x24 cnss2.bdf_pci0=0x60 cnss2.bdf_pci1=0x60 cnss2.skip_radio_bmap=4 rootwait uart_en=1 swiotlb=1
[ 0.000000] PID hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
[ 0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
[ 0.000000] Memory: 186472K/195584K available (4140K kernel code, 234K rwdata, 1752K rodata, 192K init, 464K bss, 9112K reserved, 0K cma-reserved)
[ 0.000000] Virtual kernel memory layout:
[ 0.000000] vector : 0xffff0000 - 0xffff1000 ( 4 kB)
[ 0.000000] fixmap : 0xffc00000 - 0xfff00000 (3072 kB)
[ 0.000000] vmalloc : 0x90800000 - 0xff800000 (1776 MB)
[ 0.000000] lowmem : 0x80000000 - 0x90000000 ( 256 MB)
[ 0.000000] modules : 0x7f000000 - 0x80000000 ( 16 MB)
[ 0.000000] .text : 0x81208000 - 0x817c92a4 (5893 kB)
[ 0.000000] .init : 0x817ca000 - 0x817fa000 ( 192 kB)
[ 0.000000] .data : 0x817fa000 - 0x818349ac ( 235 kB)
[ 0.000000] .bss : 0x818349ac - 0x818a8ab0 ( 465 kB)
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[ 0.000000] Preemptible hierarchical RCU implementation.
[ 0.000000] Build-time adjustment of leaf fanout to 32.
[ 0.000000] RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
[ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=32, nr_cpu_ids=2
[ 0.000000] NR_IRQS:16 nr_irqs:16 16
[ 0.000000] GICv2m: Node v2m: range[0xb00a000:0xb00affc], SPI[448:480]
[ 0.000000] GICv2m: Node v2m: range[0xb00b000:0xb00bffc], SPI[480:512]
[ 0.000000] Architected cp15 timer(s) running at 24.00MHz (virt).
[ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x588fe9dc0, max_idle_ns: 440795202592 ns
[ 0.000006] sched_clock: 56 bits at 24MHz, resolution 41ns, wraps every 4398046511097ns
[ 0.000018] Switching to timer-based delay loop, resolution 41ns
[ 0.000519] Calibrating delay loop (skipped), value calculated using timer frequency.. 48.00 BogoMIPS (lpj=240000)
[ 0.000533] pid_max: default: 4096 minimum: 301
[ 0.000634] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.000645] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.001268] Initializing cgroup subsys io
[ 0.001292] Initializing cgroup subsys memory
[ 0.001323] Initializing cgroup subsys devices
[ 0.001336] Initializing cgroup subsys freezer
[ 0.001347] Initializing cgroup subsys net_cls
[ 0.001364] Initializing cgroup subsys pids
[ 0.001400] CPU: Testing write buffer coherency: ok
[ 0.001828] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
[ 0.001885] Setting up static identity map for 0x41208200 - 0x41208234
[ 0.051809] MSM Memory Dump base table set up
[ 0.051841] MSM Memory Dump apps data table set up
[ 0.080389] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
[ 0.080484] Brought up 2 CPUs
[ 0.080504] SMP: Total of 2 processors activated (96.00 BogoMIPS).
[ 0.080510] CPU: All CPU(s) started in SVC mode.
[ 0.094942] VFP support v0.3: implementor 51 architecture 3 part 40 variant 3 rev 4
[ 0.095148] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.095174] futex hash table entries: 16 (order: -2, 1024 bytes)
[ 0.095410] pinctrl core: initialized pinctrl subsystem
[ 0.096427] NET: Registered protocol family 16
[ 0.097810] DMA: preallocated 2048 KiB pool for atomic coherent allocations
[ 0.098657] NET: Registered protocol family 42
[ 0.103695] qcom,gcc-ipq5018 1800000.gcc: Registered ipq5018 GCC clocks provider
[ 0.107609] irq: no irq domain found for /soc/smp2p-wcss/slave-kernel !
[ 0.108728] irq: no irq domain found for /soc/smp2p-wcss/slave-kernel !
[ 0.119849] CPU: IPQ5018, SoC Version: 1.1
[ 0.129215] clocksource: Switched to clocksource arch_sys_counter
[ 0.131452] NET: Registered protocol family 2
[ 0.132331] TCP established hash table entries: 2048 (order: 1, 8192 bytes)
[ 0.132369] TCP bind hash table entries: 2048 (order: 2, 16384 bytes)
[ 0.132411] TCP: Hash tables configured (established 2048 bind 2048)
[ 0.132469] UDP hash table entries: 128 (order: 0, 4096 bytes)
[ 0.132488] UDP-Lite hash table entries: 128 (order: 0, 4096 bytes)
[ 0.132696] NET: Registered protocol family 1
[ 0.140823] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.140837] squashfs: patched 4.0 (2020/11/10) Oever Gonzalez
[ 0.140852] jffs2: version 2.2 (NAND) (SUMMARY) (ZLIB) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.142670] io scheduler noop registered
[ 0.142692] io scheduler deadline registered (default)
[ 0.150396] TZ Log : Will warn on Access Violation, as paniconaccessviolation is not set
[ 0.150926] bt_driver 1943008.bt: bt_parse_ipc
[ 0.150975] bt_driver 1943008.bt: bt_parse_mem
[ 0.151019] bt_driver 1943008.bt: bt_parse_dt operating in secure mode
[ 0.152029] 58000.qcom,msm-eud: ttyEUD0 at MMIO 0x0 (irq = 124, base_baud = 0) is a EUD UART
[ 0.153046] Registered Sucessfully
[ 0.153768] msm_serial 78b0000.serial: msm_serial: detected port #1
[ 0.153824] msm_serial 78b0000.serial: uartclk = 24000000
[ 0.153883] 78b0000.serial: ttyMSM1 at MMIO 0x78b0000 (irq = 20, base_baud = 1500000) is a MSM
[ 0.154132] msm_serial 78af000.serial: msm_serial: detected port #0
[ 0.154178] msm_serial 78af000.serial: uartclk = 1843199
[ 0.154227] 78af000.serial: ttyMSM0 at MMIO 0x78af000 (irq = 21, base_baud = 115199) is a MSM
[ 0.154251] msm_serial: console setup on port #0
[ 0.764704] console [ttyMSM0] enabled
[ 0.769795] msm_serial: driver initialized
[ 0.773345] msm_serial_hsl_init: driver initialized
[ 0.778925] QPIC controller hw version Major:2, Minor:1
[ 0.781717] QPIC controller support serial nand.
[ 0.787166] nand: device found, Manufacturer ID: 0xef, Chip ID: 0xbe
[ 0.791775] nand: Winbond W25N01KWZEIG SPI NAND 1G 1.8V
[ 0.798079] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[ 0.803479] 21 ofpart partitions found on MTD device qcom_nand.0
[ 0.810698] Creating 21 MTD partitions on "qcom_nand.0":
[ 0.816833] 0x000000000000-0x000000080000 : "0:SBL1"
[ 0.823526] 0x000000080000-0x000000100000 : "0:MIBIB"
[ 0.828380] 0x000000100000-0x000000140000 : "0:BOOTCONFIG"
[ 0.833217] 0x000000140000-0x000000180000 : "0:BOOTCONFIG1"
[ 0.838544] 0x000000180000-0x000000280000 : "0:QSEE"
[ 0.844584] 0x000000280000-0x000000380000 : "0:QSEE_1"
[ 0.849770] 0x000000380000-0x0000003c0000 : "0:DEVCFG"
[ 0.854114] 0x0000003c0000-0x000000400000 : "0:DEVCFG_1"
[ 0.859291] 0x000000400000-0x000000440000 : "0:CDT"
[ 0.864740] 0x000000440000-0x000000480000 : "0:CDT_1"
[ 0.869404] 0x000000480000-0x000000500000 : "0:APPSBLENV"
[ 0.874722] 0x000000500000-0x000000640000 : "0:APPSBL"
[ 0.880690] 0x000000640000-0x000000780000 : "0:APPSBL_1"
[ 0.885648] 0x000000780000-0x000000880000 : "0:ART"
[ 0.891033] 0x000000880000-0x000000900000 : "0:TRAINING"
[ 0.895236] 0x000000900000-0x000000980000 : "bdata"
[ 0.900851] 0x000000980000-0x000000a00000 : "crash"
[ 0.905360] 0x000000a00000-0x000000a80000 : "crash_syslog"
[ 0.910262] 0x000000a80000-0x000002880000 : "rootfs"
[ 0.934463] mtd: device 18 (rootfs) set to be root filesystem
[ 0.934726] mtdsplit: no squashfs found in "rootfs"
[ 0.939243] 0x000002880000-0x000004680000 : "rootfs_1"
[ 0.963783] 0x000004680000-0x000008000000 : "overlay"
[ 1.001661] libphy: Fixed MDIO Bus: probed
[ 1.219223] qca-mdio 88000.mdio: Could not find phy-reset-gpio
[ 1.219374] libphy: qca_mdio: probed
[ 1.239618] qca-mdio 88000.mdio: qca-mdio driver was registered
[ 1.459233] qca-mdio 90000.mdio: Could not find phy-reset-gpio
[ 1.459372] libphy: qca_mdio: probed
[ 1.463954] qca-mdio 90000.mdio: qca-mdio driver was registered
[ 1.569507] tun: Universal TUN/TAP device driver, 1.6
[ 1.569528] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
[ 1.573605] cnss: INFO: IPC Logging is disabled!
[ 1.580231] cnss[2]: INFO: Platform driver probed successfully. plat 8f148010 tgt 0xfffc
[ 1.584714] cnss[41]: INFO: Platform driver probed successfully. plat 8f158010 tgt 0xfffb
[ 1.594760] qcom-tsens 4a8000.thermal-sensor: tsens calibration failed
[ 1.602813]
[ 1.602813] Version Rollback Feature Disabled
[ 1.609395] qcom-q6v5-wcss-pil cd00000.qcom_q6v5_wcss: ssr registeration success qcom_q6v5_wcss
[ 1.612876] remoteproc remoteproc0: cd00000.qcom_q6v5_wcss is available
[ 1.621528] q6v5_wcss_userpd1(8fda451c) node found
[ 1.628999] platform q6v5_wcss_userpd1: ssr registeration success q6v5_wcss_userpd1
[ 1.633023] remoteproc remoteproc1: q6v5_wcss_userpd1 is available
[ 1.640448] q6v5_wcss_userpd2(8fda47c0) node found
[ 1.647613] platform q6v5_wcss_userpd2: ssr registeration success q6v5_wcss_userpd2
[ 1.651519] remoteproc remoteproc2: q6v5_wcss_userpd2 is available
[ 1.659914] Netfilter messages via NETLINK v0.30.
[ 1.665268] nf_conntrack version 0.5.0 (2913 buckets, 40000 max)
[ 1.670458] ctnetlink v0.93: registering with nfnetlink.
[ 1.676283] Initializing XFRM netlink socket
[ 1.682207] NET: Registered protocol family 10
[ 1.699551] NET: Registered protocol family 17
[ 1.699642] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
[ 1.702924] Bridge firewalling registered
[ 1.715744] 8021q: 802.1Q VLAN Support v1.8
[ 1.719878] Registering SWP/SWPB emulation handler
[ 1.741680] ubi0: attaching mtd19
[ 1.847901] ubi0: scanning is finished
[ 1.853500] ubi0: attached mtd19 (name "rootfs_1", size 30 MiB)
[ 1.853528] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[ 1.858219] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[ 1.865205] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[ 1.872037] ubi0: good PEBs: 240, bad PEBs: 0, corrupted PEBs: 0
[ 1.878791] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[ 1.885059] ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 1201567440
[ 1.892089] ubi0: available PEBs: 44, total reserved PEBs: 196, PEBs reserved for bad PEB handling: 20
[ 1.901404] ubi0: background thread "ubi_bgt0d" started, PID 63
[ 1.930627] hctosys: unable to open rtc device (rtc0)
[ 1.938392] crash_kernel_init, res rsvd1, 4e000000, 80000, /reserved-memory/rsvd1@4E000000
[ 1.938424] mtd dev crash, size 0x80000
[ 1.946382] crash_kernel_init, crash init, res->start:4e000000, crash_buf:0x94280000, crash_buf_len 0x7ffe4, crash_avail_sz 0x80000
[ 1.949922] Crash kernel dumper registered ok!
[ 1.961896] crash_syslog_init, res rsvd2, 4e080000, 80000, /reserved-memory/rsvd2@4E080000
[ 1.966557] mtd dev crash_syslog, size 0x80000
[ 1.975659] crash_syslog_init, crash init, crash_buf_len 0x3ffe4, crash_avail_sz 0x40000
[ 1.979787] Crash syslog dumper register ok!
[ 2.004149] VFS: Mounted root (squashfs filesystem) readonly on device 31:22.
[ 2.004607] Freeing unused kernel memory: 192K (817ca000 - 817fa000)
[ 2.533338] init: Console is alive
[ 2.533557] init: - watchdog -
[ 2.815640] random: nonblocking pool is initialized
[ 3.957703] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[ 3.990161] Button Hotplug driver version 0.4.1
[ 4.133952] ssdk_switch_device_num_init[1159]:INFO:ess-switch dts node number: 1
[ 4.133997] ssdk_dt_get_switch_node[970]:INFO:ess-switch DT exist!
[ 4.140545] ssdk_dt_parse_access_mode[856]:INFO:switch_access_mode: local bus
[ 4.146402] ssdk_dt_parse_access_mode[869]:INFO:switchreg_base_addr: 0x39c00000
[ 4.153677] ssdk_dt_parse_access_mode[870]:INFO:switchreg_size: 0x200000
[ 4.160744] ssdk_dt_parse_mac_mode[295]:INFO:mac mode = 0xc
[ 4.167667] ssdk_dt_parse_mac_mode[301]:INFO:mac mode1 doesn't exit!
[ 4.173016] ssdk_dt_parse_mac_mode[310]:INFO:mac mode2 doesn't exit!
[ 4.179612] ssdk_dt_parse_port_bmp[757]:INFO:port_bmp doesn't exist!
[ 4.185913] ssdk_dt_parse_uniphy[332]:INFO:ess-uniphy DT exist!
[ 4.192305] ssdk_dt_parse_led[943]:INFO:current dts led_source_num is 1
[ 4.197893] ssdk_plat_init start
[ 6.609242] ssdk_mp_reset_init[739]:INFO:MP reset successfully!
[ 6.609308] ssdk_gcc_clock_init[1033]:INFO:SSDK gcc clock init successfully!
[ 6.614607] mpge_phy_api_ops_init[1089]:INFO:qca probe mpge phy driver succeeded!
[ 6.621746] mpge_phy_dac_set[917]:INFO:phy mdac is set as 0x10
[ 6.628678] mpge_phy_dac_set[929]:INFO:phy edac is set as 0x10
[ 6.634477] regi_init[3948]:INFO:Initializing SCOMPHY!
[ 7.775382] ssdk_led_init[152]:INFO:ssdk_led_mode:3, ssdk_led_map:ffc, ssdk_led_src_id:0
[ 7.775506] ssdk_switch_register[1727]:INFO:Chip version 0xee
[ 7.782614] qca_link_polling_select[1332]:INFO:link-polling-required node does not exist
[ 7.788172] ssdk_switch_register[1761]:INFO:polling is selected
[ 7.796382] regi_init[3958]:INFO:Initializing SCOMPHY Done!!
[ 7.802095] regi_init[3989]:INFO:qca-ssdk module init succeeded!
[ 7.814588] **********************************************************
[ 7.814615] * NSS Data Plane driver
[ 7.820364] **********************************************************
[ 7.830893] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[ 7.839524] init: - preinit -
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[ 11.270934] mount_root: mounting /dev/root
Vol#1 name:cfg size:7MiB mount_dir:/data
Vol#2 name:user size:0.4 mount_dir:/data/usr
Vol#3 name:plugin size:maxavsize mount_dir:/data/userdisk
[ 12.160053] ubi1: attaching mtd20
[ 12.368350] ubi1: scanning is finished
[ 12.374436] ubi1: attached mtd20 (name "overlay", size 57 MiB)
[ 12.374465] ubi1: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[ 12.379158] ubi1: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[ 12.386054] ubi1: VID header offset: 2048 (aligned 2048), data offset: 4096
[ 12.392889] ubi1: good PEBs: 460, bad PEBs: 0, corrupted PEBs: 0
[ 12.399656] ubi1: user volume: 3, internal volumes: 1, max. volumes count: 128
[ 12.405895] ubi1: max/mean erase counter: 2/0, WL threshold: 4096, image sequence number: 58521970
[ 12.412939] ubi1: available PEBs: 0, total reserved PEBs: 460, PEBs reserved for bad PEB handling: 20
[ 12.421906] ubi1: background thread "ubi_bgt1d" started, PID 151
UBI device number 1, total 460 LEBs (58408960 bytes, 55.7 MiB), available 0 LEBs (0 bytes), LEB size 126976 bytes (124.0 KiB)
[ 12.642443] UBIFS (ubi1:1): background thread "ubifs_bgt1_1" started, PID 198
[ 12.665859] UBIFS (ubi1:1): recovery needed
[ 12.771976] UBIFS (ubi1:1): recovery completed
[ 12.772130] UBIFS (ubi1:1): UBIFS: mounted UBI device 1, volume 1, name "cfg"
[ 12.775388] UBIFS (ubi1:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[ 12.782588] UBIFS (ubi1:1): FS size: 6094848 bytes (5 MiB, 48 LEBs), journal size 1015809 bytes (0 MiB, 6 LEBs)
[ 12.792430] UBIFS (ubi1:1): reserved for root: 287874 bytes (281 KiB)
[ 12.802320] UBIFS (ubi1:1): media format: w4/r0 (latest is w4/r0), UUID 8CBEDAAD-9895-4FE5-8F77-FAD420B03BE5, small LPT model
[ 12.824784] UBIFS (ubi1:2): background thread "ubifs_bgt1_2" started, PID 202
[ 12.849708] UBIFS (ubi1:2): recovery needed
[ 12.910125] UBIFS (ubi1:2): recovery completed
[ 12.910266] UBIFS (ubi1:2): UBIFS: mounted UBI device 1, volume 2, name "user"
[ 12.913481] UBIFS (ubi1:2): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[ 12.920727] UBIFS (ubi1:2): FS size: 17649664 bytes (16 MiB, 139 LEBs), journal size 1015809 bytes (0 MiB, 7 LEBs)
[ 12.930674] UBIFS (ubi1:2): reserved for root: 833637 bytes (814 KiB)
[ 12.940914] UBIFS (ubi1:2): media format: w4/r0 (latest is w4/r0), UUID 2F85D1DF-D07D-4DAE-B79D-CCF2D8BB7493, small LPT model
[ 12.962993] UBIFS (ubi1:3): background thread "ubifs_bgt1_3" started, PID 206
[ 12.987034] UBIFS (ubi1:3): recovery needed
[ 13.040570] UBIFS (ubi1:3): recovery completed
[ 13.040715] UBIFS (ubi1:3): UBIFS: mounted UBI device 1, volume 3, name "plugin"
[ 13.043978] UBIFS (ubi1:3): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[ 13.051537] UBIFS (ubi1:3): FS size: 27807744 bytes (26 MiB, 219 LEBs), journal size 1396736 bytes (1 MiB, 11 LEBs)
[ 13.061284] UBIFS (ubi1:3): reserved for root: 1313428 bytes (1282 KiB)
[ 13.071521] UBIFS (ubi1:3): media format: w4/r0 (latest is w4/r0), UUID 56F6288E-A789-42C1-8C85-00085E081ABD, small LPT model
131072+0 records in
131072+0 records out
131072 bytes (128.0KB) copied, 0.680735 seconds, 188.0KB/s
ln: /lib/firmware/IPQ5018/caldata.bin: File exists
131072+0 records in
131072+0 records out
131072 bytes (128.0KB) copied, 0.679154 seconds, 188.5KB/s
ln: /lib/firmware/qcn6122/caldata_1.bin: File exists
[ 14.630778] urandom-seed: Seed file not found (/etc/urandom.seed)
do_mount_bind_etc...
[ 15.267157] procd: - early -
[ 15.267266] procd: - watchdog -
[ 15.919327] procd: - watchdog -
[ 15.919616] procd: - ubus -
[ 15.981212] procd: - init -
Please press Enter to activate this console.
/etc/rc.d/S00sysfixtime: Thu Feb 6 11:51:37 UTC 2025
/etc/rc.d/S00wifi_fw_mount: 131072+0 records in
/etc/rc.d/S00wifi_fw_mount: 131072+0 records out
/etc/rc.d/S00wifi_fw_mount: 131072 bytes (128.0KB) copied, 0.707433 seconds, 180.9KB/s
/etc/rc.d/S00wifi_fw_mount: ln: /lib/firmware/IPQ5018/caldata.bin: File exists
/etc/rc.d/S00wifi_fw_mount: 131072+0 records in
/etc/rc.d/S00wifi_fw_mount: 131072+0 records out
/etc/rc.d/S00wifi_fw_mount: 131072 bytes (128.0KB) copied, 0.685857 seconds, 186.6KB/s
/etc/rc.d/S00wifi_fw_mount: ln: /lib/firmware/qcn6122/caldata_1.bin: File exists
wifi detect normal
[ 17.856109] kmodloader: loading kernel modules from /etc/modules.d/*
[ 17.860143] aes_enc: register sysctl success.
[ 17.885182] cfg80211: World regulatory domain updated:
[ 17.885210] cfg80211: DFS Master region: unset
[ 17.889303] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
[ 17.893821] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A)
[ 17.903465] cfg80211: (2457000 KHz - 2482000 KHz @ 20000 KHz, 92000 KHz AUTO), (N/A, 2000 mBm), (N/A)
[ 17.911230] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A)
[ 17.920848] cfg80211: (5170000 KHz - 5250000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (N/A)
[ 17.929086] cfg80211: (5250000 KHz - 5330000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (0 s)
[ 17.938355] cfg80211: (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s)
[ 17.947786] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[ 17.955851] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A)
[ 17.970014] l2tp_core: L2TP core driver, V2.0
[ 17.973025] l2tp_netlink: L2TP netlink interface
[ 18.195892] nss_driver - fw of size 761852 bytes copied to load addr: 40000000, nss_id : 0
[ 18.197381] Supported Frequencies -
[ 18.203084] 850 MHz 1 GHz
[ 18.208679]
[ 18.209580] 7f243680: set sdma 89e77400
[ 18.211341] node size 2 # items 4
[ 18.214590] memory: 40000000 268435456 (avl 216735744) items 4 active_cores 1
[ 18.218069] addr/size storage words 2 2 # words 4 in DTS, ddr size 800000
[ 18.225214] 7f243680: NSS core 0 DDR from 40000000 to 40800000
[ 18.232045] 7f243680: meminfo init succeed
[ 18.241223] gre: GRE over IPv4 demultiplexor driver
[ 18.242956] ip_gre: GRE over IPv4 tunneling driver
[ 18.251005] ip6_gre: GRE over IPv6 tunneling driver
[ 18.263732] Ethernet Channel Bonding Driver: v3.7.1 (April 27, 2011)
[ 18.268946] node size 2 # items 4
[ 18.269162] memory: 40000000 268435456 (avl 216735744) items 4 active_cores 1
[ 18.272413] addr/size storage words 2 2 # words 4 in DTS, ddr size 800000
[ 18.279532] 7f243680: nss core 0 booted successfully
[ 18.296231] ip6_tables: (C) 2000-2006 Netfilter Core Team
[ 18.306770] ip_set: protocol 6
[ 18.351679] i2c /dev entries driver
[ 18.362921] PPP generic driver version 2.4.2
[ 18.390831] NET: Registered protocol family 24
[ 18.395927] PPTP driver version 0.8.5
[ 18.400563] QCA multicast snooping installed successfully
[ 18.418344] cannot find nss-macsec0 node
[ 18.418475] cannot find nss-macsec1 node
[ 18.422368] cannot find nss-macsec2 node
[ 18.425317] nss_macsec init success
[ 18.436814] an8855 gsw@0: AN8855 Driver Version=1.0.3
[ 18.649443] an8855 gsw@0: Switch is Airoha AN8855 rev 1
[ 18.793240] u32 classifier
[ 18.793265] input device check on
[ 19.522164] arp_tables: (C) 2002 David S. Miller
[ 19.527205] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 19.535786] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[ 19.563122] nf_conntrack_rtsp v0.6.21 loading
[ 19.833701] nf_nat_rtsp v0.6.21 loading
[ 19.839161] PPP MPPE Compression module registered
[ 19.851150] ipt: xt_cgroup_MARK installed ok.
[ 19.877551] xt_time: kernel timezone is -0000
[ 19.891738] kmodloader: done loading kernel modules from /etc/modules.d/*
[ 20.984636] sysctl wrote to nf_conntrack_max when file position was not 0!
[ 20.984636] This will not be supported in the future. To silence this
[ 20.984636] warning, set kernel.sysctl_writes_strict = -1
Rest cut due to character limits.
And the printenv from UART/Serial below as well.
Finally pinging @georgem83 in case he is interested in the info. 
IPQ5018# printenv
CountryCode=CN
Router_unconfigured=0
SN=64XXX/XXXXXXXXX
boot_wait=on
bootargs=ubi.mtd=rootfs_1 root=mtd:ubi_rootfs rootfstype=squashfs cnss2.bdf_integrated=0x24 cnss2.bdf_pci0=0x60 cnss2.bdf_pci1=0x60 cnss2.skip_radio_bmap=4 rootwait
bootcmd=bootmiwifi
bootdelay=5
bootfile=C0A81F02.img
color=101
eth1addr=a4:ba:70:XX:XX:XX
ethact=eth1
ethaddr=90:fb:5d:XX:XX:XX
ethprime=eth1
fdt_high=0x4A400000
fdtcontroladdr=4a9d4004
fileaddr=44000000
filesize=15c0404
flag_boot_rootfs=1
flag_boot_success=1
flag_boot_type=2
flag_last_success=1
flag_ota_reboot=0
flag_try_sys1_failed=0
flag_try_sys2_failed=0
flash_type=11
flashing=2
fsbootargs=ubi.mtd=rootfs_1 root=mtd:ubi_rootfs rootfstype=squashfs cnss2.bdf_integrated=0x24 cnss2.bdf_pci0=0x60 cnss2.bdf_pci1=0x60 cnss2.skip_radio_bmap=4
gatewayip=192.168.31.100
ipaddr=192.168.31.2
machid=80XXXXXX
mode=Router
model=RD03v2
mtddevname=fs
mtddevnum=0
mtdids=nand0=nand0
mtdparts=mtdparts=nand0:0x1e00000@0x980000(fs),
netmask=255.255.255.0
no_wifi_dev_times=0
partition=nand0,0
pcbasn=51XXXXXXXXXX/10XXXXXX-XXXX
rand_key=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
rand_nonce=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
restore_defaults=0
serverip=192.168.31.100
soc_hw_version=20180101
soc_version_major=1
soc_version_minor=1
ssh_en=1
stderr=serial@78AF000
stdin=serial@78AF000
stdout=serial@78AF000
telnet_en=1
uart_en=1
wl0_radio=1
wl0_ssid=minet_rd03_XXXX
wl1_radio=1
wl1_ssid=minet_rd03_XXXX
Environment size: 2891/65532 bytes
It's a deathblow, if correct, Qualcomm needs at least 512 MB.
Doubling on it.
I have tried everything I can think of. The only thing to do with logs is an area to upload logs to support. Nothing to view or download them
Some addition:
Thanks - yup.
My device (and I believe all newer V2s) come with 2.0.12 which can't be downgraded (using the normal means of changing the =0 to =1 / changing =1 to =2 in URL).
To enable UART had to use hzyitc's method of connecting UART (readonly), setting up TFTP to serve firmware (.12 as .11 wouldn't load even using this method), triggering recovery to flash, pull power during flash process, start device.
Tried to buy this, betted on discounted 45 bucks in store, oops totally original intl version with 1st hardware revision and sw .33
I got mine today and have this version too damn i wanted to have a better router, need to check if seller says about ram if says 512mb i gonna send it back.
After checking, seller says cpu its a filogic 820 cpu , if its net can send it back, just have to find the log files .