ASKEY RTL0080W-D112 (O2 Germany 4G+ Router)

Burbadak · August 19, 2023, 9:00am

Hello fellow developers ;), I have come across a number of these routers that are used a lot in Germany by O2/Telefonica. The could be found allover for really cheap (5-20€), because they seem to have a weakness in the power supply adapter and sometime they lose the NAND setting bricking them. The PS issues are relatively easy to fix and the NAND sometimes could be recovered by booting the recovery image (not all the time, sometimes it goes a Chilian Telefonica branded device !!!).

Unfortunately I didn't find (almost) any information about them regarding OpenWRT, but I think from what I've seen until now opening one that it has nice serial interfaces on both boards (it has a Linux running baseboard and a separate LTE board) and from the first look the HW seem promising. Also it has a reasonable standard U-Boot, no strange proprietary bootloaders.

My question to the community is about the proper way to to start working on this device, how to make an addition in the Table Of Hardware and how to proceed further so we will be able to build and install OpenWRT on it, or prove that is not possible.

Also can we use this topic as an anchor for further development or it needs to have a special title/place ?

Many thank for you advice and guidance,
Bur

frollic · August 19, 2023, 9:05am

you're going to need serial interface sooner or later anyway.

start by posting the boot log, and u-boot capabilities (the output from the help command in u-boot).

then theres

Burbadak · August 19, 2023, 9:16am

Many thanks @frollic, I have already soldered a header on the main router interface and managed to connect to it (actually is a very convenient 2.52mm or 0.1" serial header on both boards).

I halo have a plethora of pictures on how to disassemble them, because as almost all Chinesian designs they've used every trick on the book, short of gluing them shut, to make opening, or good forbid repair, as difficult as possible . Of course, once one knows where to look and what to push, it becomes way easier.

I have looked at your links, very interesting, but seem to be mostly related to software, we're still not there yet, so how do I make an entry in the HW table to post pictures, boot logs and other stuff ?

Thanks,
Bur

frollic · August 19, 2023, 9:20am

I don't see any point, do we know it's actually supportable ?
if you ask me, there's no need for a ToH entry until the device is supported.

hell, some supported device doesn't even have a ToH entry

post them here, they can always be C&Ped into a future wiki entry page.

if you want the middle-road, create an entry in https://openwrt.org/inbox/start,
but you'll need Applying for OpenWrt wiki account to do it.

Burbadak · August 19, 2023, 9:25am

OK then, prepare for an avalanche of pictures and log files . the table of hw entry is useful in my opinion to help people start with the device, sometimes ones are more proficient in hw than sw and vice-versa and may be intimidated by opening it, but as you've said, if is not against the forum custom, here is a good place as well, let me organize the stuff and I will dump it here.

Cheers,
Bur

frollic · August 19, 2023, 9:29am

just remember to use the </> button when you post cli output.

Burbadak · August 19, 2023, 5:38pm

Please keep in mind that this is a device that have lost its settings, the Linux runs OK, but the web interface not and is crying after some files !!!]

So, let's start with the U-Boot (can be stopped with a key)

Boot reached stage 13
Boot reached stage 12
Valid CRC found in flash restoring env...
Boot reached stage 11
hw_config_id 65535: 'QHS860_ASKEY'
Cold boot
Reset status: 0x00000001
PCIe early init, done@420ms

Info: data uncached: addr=0xc0000000 size=1024MB
Info: text at 0x98040000, stack at 0x98013ffc(8192), heap at 0x98000000(73728), uboot size 170636
Info: i-cache is enabled
Info: d-cache is enabled
Info: CPU freq is 500000000, dev freq is 125000000

Info: Quantenna U-Boot version:v37.4.0.102
Info: build date 'Nov 25 2019', time '17:21:38'

SPI flash info:
        name             : mx25l25635f
        jedec_id         : 0xc22019
        sector size      : 65536
        number of sector : 512
        frequency        : 104000000
        flags            : 0x0
        lock             : 
DDR_INIT: type = 16, speed = 2, size = 268435456, rev = 0x43, param = 0x0 
500MHz
init board as PCIe Root Complex mode
BDA at 0x80002000
In:    serial
Out:   serial
Err:   serial
Boot reached stage 64
Askey_rtl8365mb_init
Askey_switch_test_smi reg=0x1202, data=0x88a8 (0x88a8)
Askey switch_init_reg_done
Askey_switch_rgmii_check reg=0x1358, data=0x76 (0x76)
Askey_switch_rgmii_delay reg=0x1307, data=0x5 (0x5)
Boot reached stage 65
br
askey led when boot upHit any key to stop autoboot:  0 
topaz>printenv
bootdelay=1
bootfile=topaz-linux.lzma.img
bootcmd=bootselect
loadaddr=0x83000000
max_tx_power=23
min_tx_power=7
safety_image_addr=0x40000
safety_image_size=0x7a0000
live_image_addr=0x7e0000
live_image_size=0x7a0000
ethaddr=00:26:86:00:00:00
wifiaddr=00:26:86:00:00:01
hw_config_id=65535
ext_lna_gain=12
antenna_num=4
antenna_gain=4506
flash_img=0
carrier_id=0
env_recovery=0
filepath.txt=cfg 0x00001000 0x00000400
gpio.bin=cfg 0x00001400 0x00000200
qtn_regulatory_db.bin=cfg 0x00001600 0x000007e1
qtn_hw_board_config.bin=cfg 0x00001de1 0x000001b8
qtn_hw_board_db.bin=cfg 0x00001f99 0x00000ab6
ext_lna_bypass_gain=-7
tx_power_cal=0
rx_iq.cal=cfg 0x00002a4f 0x00000308
dc_iq.cal=cfg 0x00002d57 0x00001a30
pdetector.cal=cfg 0x00004787 0x00000332
config_data_end=0x00004ab9
deploy_region=de
ethact=br
filesize=0x79a871
fileaddr=0x83000000
ipaddr=192.168.1.200
serverip=192.168.1.150
mtdparts=spi_flash:128k(uboot),64k(uboot_env),64k(uboot_env_bak),7808k(linux_safety),7808k(linux_live),-(data)
bootargs=console=ttyS0,115200n8 earlyprintk=1 hw_config_id=65535 mtdparts=spi_flash:128k(uboot),64k(uboot_env),64k(uboot_env_bak),7808k(linux_safety),7808k(linux_live),-(data)
bootselect=1
calstate=3
stdin=serial
stdout=serial
stderr=serial

Environment size: 1231/24572 bytes
topaz>

The following U-Boot commands are supported:

topaz>help
?       - alias for 'help'
base    - print or set address offset
boardcfg- list current board config
boardopts- list board config options
boot    - boot default, i.e., run 'bootcmd'
bootd   - boot default, i.e., run 'bootcmd'
bootm   - boot application image from memory
bootp   - boot image via network using BOOTP/TFTP protocol
bootselect- boot live/safety depending on value of 'bootselect'
cmp     - memory compare
coninfo - print console devices and information
cp      - memory copy
crc32   - checksum calculation
dcache  - enable or disable data cache
echo    - echo args to console
emac    - emac read stats
go      - start application at address 'addr'
hdmaw   - Hdma debug
help    - print online help
icache  - enable or disable instruction cache
iminfo  - print header information for application image
loadb   - load binary file over serial line (kermit mode)
loady   - load binary file over serial line (ymodem mode)
loop    - infinite loop on address range
lsid    - list board IDs
md      - memory display
mdio    - read/write mdio
mm      - memory modify (auto-incrementing)
msi_cfg - enable or disable msi
mtest   - simple RAM test
mw      - memory write (fill)
nm      - memory modify (constant address)
pcie    - pcie operation sub-system
pcieboot- boot from pcie.  Waits for host to load memory and then calls bootm
ping    - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
qmemtest- qmemtest [checkerboard, stress, random, random_long, cached, march]
[-loop <loop_count>] [-seed <16bit seed>] [-start <addr>] [-end <addr>]
qtn_dump_file- Dumps file from config data space <filename>
qtn_erase_file- Erases file from flash <filename>
qtn_list_files- list files from config data space
qtn_netboot- boot with tftp/bootp loop
qtn_rename_file- Renames file from <oldname> to <newname>
qtn_setmtdparts- set the environment variable 'mtdparts'
qtn_show_board_config- Show board hw configuration
qtn_show_board_database- Show board hw configuration database content
qtn_upload_file- Upload file from memory to flash via ethernet port
qtn_upload_file_serial- Upload file from memory to flash via serial port
qtnboot - boot from live image, recover safety image if necessary
rarpboot- boot image via network using RARP/TFTP protocol
reset   - Perform RESET of the CPU
run     - run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv  - set environment variables
setgpio - Configure gpio as output and set the output value
sleep   - delay execution for some time
spi_flash- SPI flash sub-system
tftpboot- boot image via network using TFTP protocol
updatecrc- update CRC
upgradeenv- upgrade environment
version - print monitor version
xr      - Extended reg test

Next post will be the very long boot log.
As will see something is missing, it continuassly complains about both missing files and of missing failseve configurations but in the next post we'll get a telnet shell and do some basic Linux stuff.

Burbadak · August 19, 2023, 5:49pm

First half of the loooong bootlog:

Boot reached stage 13
Boot reached stage 12
Valid CRC found in flash restoring env...
Boot reached stage 11
hw_config_id 65535: 'QHS860_ASKEY'
Cold boot
Reset status: 0x00000001
PCIe early init, done@420ms

Info: data uncached: addr=0xc0000000 size=1024MB
Info: text at 0x98040000, stack at 0x98013ffc(8192), heap at 0x98000000(73728), uboot size 170636
Info: i-cache is enabled
Info: d-cache is enabled
Info: CPU freq is 500000000, dev freq is 125000000

Info: Quantenna U-Boot version:v37.4.0.102
Info: build date 'Nov 25 2019', time '17:21:38'

SPI flash info:
        name             : mx25l25635f
        jedec_id         : 0xc22019
        sector size      : 65536
        number of sector : 512
        frequency        : 104000000
        flags            : 0x0
        lock             : 
DDR_INIT: type = 16, speed = 2, size = 268435456, rev = 0x43, param = 0x0 
500MHz
init board as PCIe Root Complex mode
BDA at 0x80002000
In:    serial
Out:   serial
Err:   serial
Boot reached stage 64
Askey_rtl8365mb_init
Askey_switch_test_smi reg=0x1202, data=0x88a8 (0x88a8)
Askey switch_init_reg_done
Askey_switch_rgmii_check reg=0x1358, data=0x76 (0x76)
Askey_switch_rgmii_delay reg=0x1307, data=0x5 (0x5)
Boot reached stage 65
br
askey led when boot upHit any key to stop autoboot:  0 
get_qtnboot_envvars: vars: safety_image_addr 0x40000 safety_image_size 0x7a0000 live_image_addr 0x7e0000 live_image_size 0x7a0000
do_bootselect: setenv bootargs ${bootargs} mtdparts=${mtdparts}
do_bootselect: spi_flash read 0x00040000 0x83000000 0x007a0000
Read: flash=0x40000 mem=0x83000000 size=7995392 ret_size=7995392
do_bootselect: bootm 0x83000000
Boot reached stage 1
## Booting kernel from Legacy Image at 83000000 ...
Boot reached stage 2
Boot reached stage 3
   Image Name:   topaz-linux
   Image Type:   arc Linux Kernel Image (lzma compressed)
   Data Size:    7964785 Bytes =  7.6 MB
   Load Address: 8493a000
   Entry Point:  8493a000
   Qtn flags:    00000001
   Verifying Checksum ... OK
Boot reached stage 4
Boot reached stage 5
Boot reached stage 6
Boot reached stage 14
   Uncompressing Kernel Image ... OK
Boot reached stage 7
Boot reached stage 8
Command line TAG setup
Params->u.cmdline.cmdline console=ttyS0,115200n8 earlyprintk=1 hw_config_id=65535 mtdparts=spi_flash:128k(uboot),64k(uboot_env),64k(uboot_env_bak),7808k(linux_safety),7808k(linux_live),-(data) mtdparts=spi_flash:128k(uboot),64k(uboot_env),64k(uboot_env_bak),7808k(l
p console=ttyS0,115200n8 earlyprintk=1 hw_config_id=65535 mtdparts=spi_flash:128k(uboot),64k(uboot_env),64k(uboot_env_bak),7808k(linux_safety),7808k(linux_live),-(data) mtdparts=spi_flash:128k(uboot),64k(uboot_env),64k(uboot_env_bak),7808k(l
##  Unset TAG qtn_flags 1
## Transferring control to Linux (at address 8493a000) ATAG parameters 98067194 - 980672a4...

[    0.000000] Linux version 2.6.35.12 (shake_hsieh@db02) (gcc version 4.2.3 (ARC_2.3)) #2 Tue Nov 8 03:29:40 CST 2022
[    0.000000] Parsing ATAG parameters from bootloader
[    0.000000] ATAG_CORE: successful parsing
[    0.000000] ATAG_CMDLINE: command line = console=ttyS0,115200n8 earlyprintk=1 hw_config_id=65535 mtdparts=spi_flash:128k(uboot),64k(uboot_env),64k(uboot_env_bak),7808k(linux_safety),7808k(linux_live),-(data) mtdparts=spi_flash:128k(uboot),64k(uboot_env),64k(uboot_env_bak),7808kl
[    0.000000] Board id: 65535
[    0.000000] ATAG_HW_CONFIG_ID: hw_config_id = 65535
[    0.000000] 
[    0.000000] Processor Family: ARC 700 [0x33]
[    0.000000] CPU speed :      500.00 Mhz
[    0.000000] Timers:  TIMER1 TIMER0 
[    0.000000] Interrupt Vect Base:     0x98051c00 
[    0.000000] Peripheral Base: NOT present; assuming 0xCOFC0000 
[    0.000000] Data UNCACHED Base (I/O): start 0xc0 Sz, 1024 MB 
[    0.000000] ARC700 MMU Ver [2]
[    0.000000]    PAGE SIZE 8k
[    0.000000]    JTLB 128 x 2 = 256 entries
[    0.000000]    uDTLB 8 entr, uITLB 4 entr
[    0.000000] TLB Refill "will NOT" Flush uTLBs
[    0.000000] Detected I-cache : 
[    0.000000]   Type=2 way set-assoc, Line length=32, Size=16K (enabled)
[    0.000000] Detected D-cache : 
[    0.000000]   Type=4 way set-assoc, Line length=32, Size=16K (enabled)
[    0.000000] Extensions:
[    0.000000]    MPY: 32x32 with ANY Result Reg   MAC MPY: Dual 16 x 16 and 32 x 16
[    0.000000]    DCCM: N/A  ICCM: N/A
[    0.000000]    CRC: N/A,   SWAP: Present   NORM: Present
[    0.000000]    Min-Max: Present,   Barrel Shifter: Present
[    0.000000]    Ext Arith Insn: Present
[    0.000000] Floating Point Extension: N/A
[    0.000000] On node 0 totalpages: 32767
[    0.000000] free_area_init_node: node 0, pgdat 8662f6e4, node_mem_map 866e6024
[    0.000000]   Normal zone: 144 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 32623 pages, LIFO batch:7
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32623
[    0.000000] Kernel command line: console=ttyS0,115200n8 earlyprintk=1 hw_config_id=65535 mtdparts=spi_flash:128k(uboot),64k(uboot_env),64k(uboot_env_bak),7808k(linux_safety),7808k(linux_live),-(data) mtdparts=spi_flash:128k(uboot),64k(uboot_env),64k(uboot_env_bak),7808k(l
[    0.000000] bootconsole [ruby_early0] enabled
[    0.000000] PID hash table entries: 1024 (order: -1, 4096 bytes)
[    0.000000] Dentry cache hash table entries: 32768 (order: 4, 131072 bytes)
[    0.000000] Inode-cache hash table entries: 16384 (order: 3, 65536 bytes)
[    0.000000] Memory: 155344KB available (2321K code,1294K data, 26760K init)
[    0.000000] Hierarchical RCU implementation.
[    0.000000]  RCU debugfs-based tracing is enabled.
[    0.000000]  Verbose stalled-CPUs detection is disabled.
[    0.000000] clockevent mode switch to [1]
[    0.000000] clockevent mode switch to [2]
[    0.000000] Calibrating delay loop... 248.21 BogoMIPS (lpj=620544)
[    0.105000] pid_max: default: 4096 minimum: 301
[    0.110000] Mount-cache hash table entries: 1024
[    0.115000] Starting run_ksoftirqd, stack (thread_info) at 86652000 cpu 0
[    0.120000] NET: Registered protocol family 16
[    0.125000] Topaz heap 1 in SRAM 98015e20<->98020000
[    0.130000] Topaz heap 2 in SRAM 98011000<->98012000
[    0.140000] bio: create slab <bio-0> at 0
[    0.145000] pci 0000:00:00.0: reg 10: [io  0x0000-0x00ff]
[    0.155000] pci 0000:00:00.0: reg 18: [mem 0x00000000-0x00003fff 64bit]
[    0.160000] pci 0000:00:00.0: supports D1 D2
[    0.165000] pci 0000:00:00.0: PME# supported from D0 D1 D2 D3hot D3cold
[    0.170000] pci 0000:00:00.0: PME# disabled
[    0.175000] pcibios_fixup_bus called bus name  no 0 flags 0 next_dev 8f817400 
[    0.180000] pcibios_fixup_bus: Device [ 0: 0.0] has mem 1 io 1 cmd 0 
[    0.185000] pcibios_fixup_bus: Enabling I/O for device [ 0: 0.0]
[    0.190000] pcibios_fixup_bus: Enabling memory for device [ 0: 0.0]
[    0.195000] pci 0000:00:00.0: BAR 2: assigned [mem 0xc0000000-0xc0003fff 64bit]
[    0.200000] pci 0000:00:00.0: BAR 2: set to [mem 0xc0000000-0xc0003fff 64bit] (PCI address [0xc0000000-0xc0003fff]
[    0.205000] pci 0000:00:00.0: BAR 0: can't assign io (size 0x100)
[    0.210000] pci_bus 0000:00: resource 1 [mem 0xc0000000-0xc1ffffff]
[    0.215000] PCI Bus Scan completed!
[    0.220000] watch64: 2003/08/22 Josef 'Jeff' Sipek <jeffpc@xxxxxxxxxxxxx>
[    0.225000] watch64: Enabling Watch64 extensions...done.
[    0.230000] Switching to clocksource ARC Timer1
[    0.240000] NET: Registered protocol family 2
[    0.245000] IP route cache hash table entries: 2048 (order: 0, 8192 bytes)
[    0.250000] TCP established hash table entries: 8192 (order: 3, 65536 bytes)
[    0.255000] TCP bind hash table entries: 8192 (order: 2, 32768 bytes)
[    0.260000] TCP: Hash tables configured (established 8192 bind 8192)
[    0.265000] TCP reno registered
[    0.265000] NET: Registered protocol family 1
[    0.270000] PCI: CLS 0 bytes, default 32
[    1.190000] JFFS2 version 2.2. (NAND) �© 2001-2006 Red Hat, Inc.
[    1.195000] msgmni has been set to 303
[    1.200000] io scheduler noop registered (default)
[    1.625000] Serial: 8250/16550 driver, 2 ports, IRQ sharing enabled
[    1.630000] serial8250.0: ttyS0 at MMIO 0xf0000000 (irq = 48) is a 16550A
[    1.635000] console [ttyS0] enabled, bootconsole disabled
[    1.635000] console [ttyS0] enabled, bootconsole disabled
[    1.640000] brd: module loaded
[    1.650000] loop: module loaded
[    1.660000] spi_flash: Force not to support Protect Mode 
[    1.665000] mtd: no closing ) found in partition name
[    1.670000] Creating 7 MTD partitions on "spi_flash":
[    1.675000] 0x000000000000-0x000000020000 : "uboot"
[    1.680000] 0x000000020000-0x000000030000 : "uboot_env"
[    1.690000] 0x000000030000-0x000000040000 : "uboot_env_bak"
[    1.700000] 0x000000040000-0x0000007e0000 : "linux_safety"
[    1.705000] 0x0000007e0000-0x000000f80000 : "linux_live"
[    1.715000] 0x000000f80000-0x000001000000 : "data"
[    1.720000] 0x000001000000-0x000002000000 : "extend"
[    1.730000] spi_flash: SPI flash driver initialized successfully!
[    1.735000] ruby_health loading
[    1.740000] HBM pool: emac rx 0x0 to 0x8000, wmac rx 0x8000 to 0xa000
[    2.140000] HBM meta: emac rx 0x63c040 to 0x6bc040, wmac rx 0x6bc080 to 0x6dc080
[    2.145000] topaz_hbm_init_pool_list pool 0 pool_list 0x98000000 bus_range 0x816ec400 to 0x826ec400 sz 2048 count 8192
[    2.145000] topaz_hbm_init_pool_list pool 1 pool_list 0x98008000 bus_range 0x826fc400 to 0x848fc400 sz 17408 count 2048
[    2.145000] topaz_hbm_init_pool_list pool 3 pool_list 0x9800a000 bus_range 0x0 to 0x0 sz 0 count 4096
[    2.155000] topaz_busmon_init success
[    2.155000] topaz_temp_sens_init success
[    2.160000] u32 classifier
[    2.165000]     input device check on
[    2.165000]     Actions configured
[    2.170000] Netfilter messages via NETLINK v0.30.
[    2.175000] nf_conntrack version 0.5.0 (2427 buckets, 9708 max)
[    2.185000] ip_tables: (C) 2000-2006 Netfilter Core Team
[    2.190000] TCP cubic registered
[    2.190000] NET: Registered protocol family 10
[    2.200000] NET: Registered protocol family 17
[    2.205000] 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
[    2.210000] All bugs added by David S. Miller <davem@redhat.com>
D[    2.225000] Freeing unused kernel memory: 26760k freed [8493a000] TO [8635c000]
[    2.230000] Common mmap addr-space starts 290f0000
init started: BusyBox v1.10.3 (2022-11-08 03:18:16 CST)
starting pid 64, tty '': '/etc/init.d/rcS'
[    2.760000] load_module: 'bootcfg' using DRAM (offset:0x8d410000, size:0x96e8)
/scripts/cmdloop starting /usr/sbin/ubusd, at 00:00:03 up 0 min, load average: 0.00, 0.00, 0.00
Initializing random number generator... done.
Starting network...
[    3.985000] load_module: 'emaclib' using DRAM (offset:0x8d408000, size:0x7e83)
[    3.995000] emaclib: Unknown symbol rtk_l2_agingEnable_set (err 0)
[    4.000000] emaclib: Unknown symbol rtk_l2_aging_get (err 0)
[    4.005000] emaclib: Unknown symbol rtk_l2_aging_set (err 0)
[    4.010000] emaclib: Unknown symbol rtk_l2_addr_next_get (err 0)
[    4.015000] emaclib: Unknown symbol rtk_port_phyEnableAll_set (err 0)
[    4.020000] emaclib: Unknown symbol rtk_port_phyEnableLAN_set (err 0)
[    4.025000] emaclib: Unknown symbol rtk_vlan_reset (err 0)
[    4.030000] emaclib: Unknown symbol rtk_switch_init (err 0)
[    4.035000] emaclib: Unknown symbol rtk_vlan_set (err 0)
[    4.040000] emaclib: Unknown symbol rtk_vlan_portPvid_get (err 0)
[    4.045000] emaclib: Unknown symbol rtk_vlan_portPvid_set (err 0)
[    4.050000] emaclib: Unknown symbol rtk_vlan_get (err 0)
[    4.060000] emaclib: Unknown symbol rtk_led_groupConfig_set (err 0)
[    4.065000] emaclib: Unknown symbol rtk_port_phyStatus_get (err 0)
[    4.070000] emaclib: Unknown symbol smi_read (err 0)
[    4.080000] emaclib: Unknown symbol rtk_stat_port_getAll (err 0)
[    4.090000] emaclib: Unknown symbol rtk_vlan_init (err 0)
[    4.095000] emaclib: Unknown symbol rtk_port_phyTestMode_set (err 0)
[    4.105000] emaclib: Unknown symbol rtk_l2_agingEnable_get (err 0)
insmod: cannot insert '/lib/modules/2.6.35.12/extra/ruby/emaclib.ko': unknown symbol in module
modprobe: failed to load module emaclib
[    4.175000] load_module: 'switch_vlan' using DRAM (offset:0x8d424000, size:0x28d6), SRAM (offset:0x98015e28, size:0x1)
[    4.295000] load_module: 'switch_tqe' using DRAM (offset:0x8d408000, size:0x5764), SRAM (offset:0x98015e38, size:0x4)
[    4.350000] tqe_descs_alloc: 512 tqe_rx_descriptors at kern uncached 0x4f091e60 bus 0x98015e60
[    4.435000] load_module: 'fwt_if' using DRAM (offset:0x8d3ce000, size:0x1aad)
[    4.470000] load_module: 'fwt_ctrl' using DRAM (offset:0x8d4c0000, size:0x23aca)
[    4.505000] Failed to allocate SRAM IP-MAC lookup table, size 0x608
[    4.525000] load_module: 'dpi' using DRAM (offset:0x8d3ae000, size:0x1d5d)
[    4.555000] load_module: 'emaclib' using DRAM (offset:0x8d488000, size:0x7e83)
[    4.565000] emaclib: Unknown symbol rtk_l2_agingEnable_set (err 0)
[    4.570000] emaclib: Unknown symbol rtk_l2_aging_get (err 0)
[    4.580000] emaclib: Unknown symbol rtk_l2_aging_set (err 0)
[    4.585000] emaclib: Unknown symbol rtk_l2_addr_next_get (err 0)
[    4.595000] emaclib: Unknown symbol rtk_port_phyEnableAll_set (err 0)
[    4.600000] emaclib: Unknown symbol rtk_port_phyEnableLAN_set (err 0)
[    4.605000] emaclib: Unknown symbol rtk_vlan_reset (err 0)
[    4.610000] emaclib: Unknown symbol rtk_switch_init (err 0)
[    4.620000] emaclib: Unknown symbol rtk_vlan_set (err 0)
[    4.625000] emaclib: Unknown symbol rtk_vlan_portPvid_get (err 0)
[    4.630000] emaclib: Unknown symbol rtk_vlan_portPvid_set (err 0)
[    4.635000] emaclib: Unknown symbol rtk_vlan_get (err 0)
[    4.640000] emaclib: Unknown symbol rtk_led_groupConfig_set (err 0)
[    4.645000] emaclib: Unknown symbol rtk_port_phyStatus_get (err 0)
[    4.650000] emaclib: Unknown symbol smi_read (err 0)
[    4.665000] emaclib: Unknown symbol rtk_stat_port_getAll (err 0)
[    4.670000] emaclib: Unknown symbol rtk_vlan_init (err 0)
[    4.680000] emaclib: Unknown symbol rtk_port_phyTestMode_set (err 0)
[    4.685000] emaclib: Unknown symbol rtk_l2_agingEnable_get (err 0)
insmod: cannot insert '/lib/modules/2.6.35.12/extra/ruby/emaclib.ko': unknown symbol in module
[    4.705000] load_module: 'switch_emac' using DRAM (offset:0x8d47c000, size:0x25e5), SRAM (offset:0x98018298, size:0x2f8)
[    4.765000] emac wbsp: 0
[    4.765000] enable A2 (single)
[    4.770000] Random stuff 2D
[    4.920000] Askey test reg=0x1202, data=0x88a8 (0x88a8)
[    9.965000] Askey_switch_rgmii_check reg=0x1358, data=0x76 (0x76)
[   10.010000] Askey_switch_rgmii_delay reg=0x1307, data=0x5 (0x5)
[   10.015000] Askey rtk_led_groupConfig_set LED_GROUP_2 LED_CONFIG_LINK_ACT
[   10.460000] Askey rtk_l2_agingEnable_get port1 0
[   10.500000] Askey rtk_l2_agingEnable_get port2 0
[   10.540000] Askey rtk_l2_aging_get 458 sec
[   10.540000] Askey emac_debugfs_init 
[   10.545000] Askey emac_debugfs_init done
[   10.550000] Askey vlan_set_debugfs_init 
[   10.555000] Askey vlan_set_debugfs_init done
emac0 is unused, emac1 is eth1_0
Using IP address 192.168.1.200
Netmask is not set
[   10.845000] emac_lib eth1_0: force link (1000/Full)
[   11.025000] device eth1_0 entered promiscuous mode
[   11.035000] br0: port 1(eth1_0) entering forwarding state
[   11.040000] br0: port 1(eth1_0) entering forwarding state
/sbin/ifup -a
ifconfig: SIOCGIFFLAGS: No such device
[   11.365000] FWT: [54:ee:75:30:f4:9a] add entry, port:emac1 node:0 index:910 4addr:0 entries:1
Version of /proc/bootcfg/qtn_regulatory_db.bin is Regulatory db version: v37.3.0.21
Version of /etc/qtn_regulatory_db.bin is Regulatory db version: v37.4.0.226
Selected database version: Regulatory db version: v37.4.0.226
Using /etc/qtn_regulatory_db.bin
Starting qevt_server
SSH disable
Starting inetd ...
/scripts/cmdloop starting /sbin/qevt_server, at 00:00:12 up 0 min, load average: 0.15, 0.03, 0.01
PCIe host enabled
[   12.710000] load_module: 'qdpc_host' using DRAM (offset:0x8d498000, size:0x58d4), SRAM (offset:0x9801b5e8, size:0xf4c)
[   12.720000] qdpc_host: module license 'Proprietary' taints kernel.
[   12.725000] Disabling lock debugging due to kernel taint
ifconfig: host0: error fetching interface information: Device not found
[   13.610000] load_module: 'hw_rev' using DRAM (offset:0x8d454000, size:0x364e)
Starting wireless...
Loading modules
[   14.305000] load_module: 'qtn_debug' using DRAM (offset:0x8d44a800, size:0x32d)
[   14.385000] load_module: 'i2cbus' using DRAM (offset:0x8d452000, size:0x1c84)
[   14.500000] load_module: 'qtsens' using DRAM (offset:0x8d442000, size:0x76c)
[   14.590000] load_module: 'pm_interval' using DRAM (offset:0x8d420000, size:0x14f8)
[   14.740000] load_module: 'wlan' using DRAM (offset:0x8d700000, size:0xc2ce6)
[   15.115000] wlan: 0.8.4.2 (0.9.3.3)
[   15.305000] load_module: 'auc_fw' using DRAM (offset:0x8d382000, size:0x884)
[   15.390000] load_module: 'emaclib' using DRAM (offset:0x8d588000, size:0x7e83)
[   15.400000] emaclib: Unknown symbol rtk_l2_agingEnable_set (err 0)
[   15.405000] emaclib: Unknown symbol rtk_l2_aging_get (err 0)
[   15.415000] emaclib: Unknown symbol rtk_l2_aging_set (err 0)
[   15.420000] emaclib: Unknown symbol rtk_l2_addr_next_get (err 0)
[   15.430000] emaclib: Unknown symbol rtk_port_phyEnableAll_set (err 0)
[   15.435000] emaclib: Unknown symbol rtk_port_phyEnableLAN_set (err 0)
[   15.440000] emaclib: Unknown symbol rtk_vlan_reset (err 0)
[   15.445000] emaclib: Unknown symbol rtk_switch_init (err 0)
[   15.455000] emaclib: Unknown symbol rtk_vlan_set (err 0)
[   15.460000] emaclib: Unknown symbol rtk_vlan_portPvid_get (err 0)
[   15.470000] emaclib: Unknown symbol rtk_vlan_portPvid_set (err 0)
[   15.475000] emaclib: Unknown symbol rtk_vlan_get (err 0)
[   15.485000] emaclib: Unknown symbol rtk_led_groupConfig_set (err 0)
[   15.490000] emaclib: Unknown symbol rtk_port_phyStatus_get (err 0)
[   15.500000] emaclib: Unknown symbol smi_read (err 0)
[   15.510000] emaclib: Unknown symbol rtk_stat_port_getAll (err 0)
[   15.520000] emaclib: Unknown symbol rtk_vlan_init (err 0)
[   15.525000] emaclib: Unknown symbol rtk_port_phyTestMode_set (err 0)
[   15.530000] emaclib: Unknown symbol rtk_l2_agingEnable_get (err 0)
insmod: cannot insert '/lib/modules/2.6.35.12/extra/ruby/emaclib.ko': unknown symbol in module
[   15.580000] load_module: 'qvspmod' using DRAM (offset:0x8d4b8000, size:0x3eab)
[   15.610000] QVSP module init
[   15.680000] load_module: 'qdrv' using DRAM (offset:0x85800000, size:0xa7bb2)
[   16.015000] qdrv wbsp: 0
[   16.105000] load_module: 'wlan_xauth' using DRAM (offset:0x8d67f000, size:0x2e4)
[   16.205000] load_module: 'wlan_ccmp' using DRAM (offset:0x8d4ac000, size:0x1734)
[   16.320000] load_module: 'wlan_tkip' using DRAM (offset:0x8e330000, size:0x25e8)
Loading MuC driver (qtn_driver.qtn_ruby.0.bin)
no keyfile specified
unable to load Public Key
Waiting for Wireless Events from interfaces...
[   17.670000] set power_selection 4
[   17.800000] set power_selection 2
complete
[   17.935000] qdrv_soc_publish_params: parames->tqe_sem_en 0, auc_tqe_sem_en 0
[   17.940000] ..... Current RFIC Chip ID -- 4
[   18.105000] AuC SRAM start 0x98040000 end 0x98080000 size 262144
[   18.110000] AuC is configured for non-MU SRAM layout
[   18.115000] AuC SRAM bank 0 start 0x98040000 end 0x98050000
[   18.120000] AuC SRAM bank 1 start 0x98050000 end 0x98060000
[   18.125000] AuC SRAM bank 2 start 0x98060000 end 0x98070000
[   18.130000] AuC SRAM bank 3 start 0x98070000 end 0x98080000
[   18.155000] MuC: g_tqe_sem_en 0
[   18.160000] MuC: build date Mon, 12 Apr 2021 19:27:57 -0700
[   18.165000] MuC: slow heap begin=0x802a5a40 end=0x80422a40
[   18.170000] MuC: fast heap begin=0x98030800 end=0x98037000
[   18.175000] MuC: stack start=0x9803ef80 sp=0x9803f6d4
[   18.180000] MuC: calstate is 3 (prod), dcache on
[   18.185000] MuC: RFIC version 1 rev 0
[   18.225000] MuC: bb_init: FEM 0x7 bw_mode 0 chan 0 11b 0 11a 1
[   18.230000] MuC: set max/nrm gain(0x27) done.
[   18.230000] MuC: set cca threshold!
[   18.235000] MuC: rf_optimizing_rf_register_map, set rf to 0x75
[   18.240000] MuC: os_uc, after bb_rf_complete_attach.
[   18.245000] MuC: WMAC0: hal fd start=0xe5040300 count=48 size=108 end=0xe5041740
[   18.250000] MuC: WMAC1: hal fd start=0xe5140d50 count=8 size=84 end=0xe5140ff0
[   18.255000] MuC: freq 1 proj 1
[   18.260000] MuC: dynamic one-bit autocorrelation enabled
[   18.265000] MuC: QMAT SRAM base 0x98070000
[   18.270000] MuC: enable IRQs
[   18.280000] qdrv_mac_reserve_clear: mac reservation table cleared
[   18.400000] qdrv_mu_stat_init
[   18.415000] qdrv_wlan_80211_updateslot: vap is NULL
[   18.420000] QDRV: I2C dapter not found
[   18.495000] MuC: AuC enabled 0xe5101cd4/0x60063840 il 0xe5101288/0xe510128c stats 0x60061180/0x600635800x6007e350
[   18.500000] MuC: Update MU debug flag failed. keep old value : 0x00000000
[   18.520000] QDRV: hardware is 4x4 11ac FO RGMII DBDC QV860
[   18.525000] MuC boot succeeded 0.125 seconds
start-vap ap
[   19.780000] load_module: 'wlan_scan_ap' using DRAM (offset:0x8e32c000, size:0x3c14)
[   19.865000] QTM daemon registered
[   20.005000] qdrv_wlan_80211_updateslot: vap is NULL
[   20.010000] qvsp_nl_node_init: QVSP not initialized
[   20.015000] MuC: qtn_mu_ndpa_setup: bw_cap 2 done
Jan  1 00:00:20 [   20.030000] VAP create succeeded 0.010 seconds
qevt_server: Dot11Msg:Interface status change FALSE
Jan  1 00:00:20 qevt_server: Dot11Msg:Interface status change FALSE
[   20.045000] MuC: qtn_mu_ndpa_setup: bw_cap 2 done
[   20.560000] MuC: calibration ver 0x801
Jan  1 00:00:20 iwevent: 00:00:20.817086   wifi0    Custom driver event:Dot11Msg: Channel Changed to 40 (reason 4)


bss_tm set to 1
neigh_repo reset to 0
radar in 80MHZ mode
Setting mode to 11ac80
[   21.030000] br0: no IPv6 routers present
Jan  1 00:00:22 local_init_tx_power_table[876]: loading power table from /etc/power_tables/tx_power_QSR1000_cl.txt

Jan  1 00:00:22 local_regulatory_get_regulatory_info[876]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[876]: Regulation cl is taken for tx_power

Jan  1 00:00:22 local_regulatory_get_regulatory_info[876]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[876]: Regulation cl is taken for tx_power

Jan  1 00:00:22 local_regulatory_get_regulatory_info[876]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[876]: Regulation cl is taken for tx_power

Jan  1 00:00:22 local_regulatory_get_regulatory_info[876]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[876]: Regulation cl is taken for tx_power

set_region: Setting regulatory region dev_name=wifi0 region=cl mode=ap repeater=0
Jan  1 00:00:22 local_init_tx_power_table[900]: loading power table from /etc/power_tables/tx_power_QSR1000_cl.txt

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: Regulation cl is taken for tx_power

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: Regulation cl is taken for tx_power

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: Regulation cl is taken for tx_power

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: /etc/power_tables/tx[   22.260000] MuC: macfw: radar_start.........
_power_QSR1000_c[   22.265000] MuC: radar_start, region us = 1
l.txt incorrect regulation of tx_power us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: Regulation cl is taken for tx_power

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: Regulation cl is taken for tx_power

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: Regulation cl is taken for tx_power

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: Regulation cl is taken for tx_power

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: Regulation cl is taken for tx_power

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: Regulation cl is taken for tx_power

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: Regulation cl is taken for tx_power

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: Regulation cl is taken for tx_power

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: Regulation cl is taken for tx_power

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: Regulation cl is taken for tx_power

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: Regulation cl is taken for tx_power

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: Regulation cl is taken for tx_power

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: Regulation cl is taken for tx_power

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: Regulation cl is taken for tx_power

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of DFS us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: Regulation cl is taken for DFS

radar start with regulatory cl
Jan  1 00:00:22 802.11d Set country code[900]: country code set to cl
Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl

Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: Regulation cl is taken for tx_power
Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl
Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: Regulation cl is taken for tx_power
Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl
Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: Regulation cl is taken for tx_power
Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: /etc/power_tables/tx_power_QSR1000_cl.txt incorrect regulation of tx_power us, expect cl
Jan  1 00:00:22 local_regulatory_get_regulatory_info[900]: Regulation cl is taken for tx_power
ICAC: parameter max_boot_cac cannot be greater than 0 in non-EU regulatory domain. ICAC will be disabled
dfs_s_radio 0 dfs 0 non-dfs 0 scan 0 auto-channel  channel 0
Jan  1 00:00:23 Set Channel[930]: freq 0, wrq.u.[   22.970000] Enabling SCS
freq.e 0, wrq.u.freq.m 0
Jan  1 00:00:23 iwevent: 00:00:23.221037   wifi0    Set Channel=0
Jan  1 00:00:23 iwevent: 00:00:23.235839   wifi0    Custom driver event:SCS: stats task is started
Jan  1 00:00:23 iwevent: 00:00:23.236801   wifi0    Custom driver event:SCS: channel sampling started - interval is 5 seconds
Configure max_boot_cac to -1
[   23.150000] device wifi0 entered promiscuous mode
Jan  1 00:00:23 qevt_server: Dot11Msg:Interface status change FALSE
Jan  1 00:00:23 qevt_server: Dot11Msg:Interface status change FALSE
Jan  1 00:00:23 qevt_server: Dot11Msg:Interface status change FALSE
[   23.270000] Enabling SSDP flooding
[   23.460000] MuC: #RX data path optimal flag 0
[   23.465000] MuC: rx_post_init: free 0 rxq 9 9 394 descr 0x9800f000/6592 cache 0x9802ac60/13184
[   23.470000] MuC: auto cs is enabled
[   23.505000] WPS: push button is not configured
Jan  1 00:00:23 qevt_server: Dot[   23.510000] br0: port 2(wifi0) entering forwarding state
11Msg:Interface [   23.515000] br0: port 2(wifi0) entering forwarding state

Burbadak · August 19, 2023, 5:50pm

Second half of the bootlog, very spamy with these two missing files:

status change TRUE
Jan  1 00:00:23 qevt_server: Dot11Msg:Interface status change TRUE
Jan  1 00:00:23 qevt_server: Dot11Msg:Interface status change TRUE
Configuration file: /mnt/jffs2/hostapd.conf
Jan  1 00:00:24 qevt_server: Dot[   24.190000] br0: port 2(wifi0) entering forwarding state
11Msg:Interface status change FALSE
Jan  1 00:00:24 qevt_server: Dot11Msg:Interface status change FALSE
Jan  1 00:00:24 iwevent: 00:00:24.462748   wifi0    Custom driver event:SCAN ABORT
Jan  1 00:00:24 qevt_server: Dot11Msg:Interface status change FALSE
madwifi_sta_deauth: Interface not up.
madwifi_sta_deauth: Interface not up.
Using interface wifi0 with hwaddr 00:26:86:04:3F:30 and ssid "Quantenna"
Jan  1 00:00:24 iwevent: 00:00:24.784555   wifi0    Set ESSID:"Quantenna"
[   24.715000] br0: port 2(wifi0) entering forwarding state
[   24.720000] br0: port 2(wifi0) entering forwarding state
Jan  1 00:00:24 qevt_server: Dot11Msg:Interface status change TRUE
wifi0: interface state UNINITIALIZED->ENABLED
Jan  1 00:00:24 qevt_server: Dot11Msg:Interface status change TRUE
Jan  1 00:00:24 qevt_server: Dot11Msg:Interface status change TRUE
wifi0: AP-ENABLED 
Beamforming enabled
SCS enabled
QTM: load profile off
QTM enabled: 0
[   26.435000] BRIDGE WLAN report flood-forwarding enabled
Jan  1 00:00:27 iwevent: 00:00:27.725852   wifi0    Set ESSID:"Quantenna"
Jan  1 00:00:27 Contact Security Daemon[1234]: UPDATE_BSSCONFIG wifi0: got reply OK
No core dump generated
[   28.285000] RADAR: CAC started for channel  52 (5260 MHz)
Jan  1 00:00:28 iwevent: 00:00:28.555960   wifi0    Scan request completed
Jan  1 00:00:28 iwevent: 00:00:28.556937   wifi0    Custom driver event:RADAR: CAC started for channel  52 (5260 MHz)
Jan  1 00:00:28 iwevent: 00:00:28.557819   wifi0    Custom driver event:Dot11Msg: Channel Changed to 52 (reason 4)
[   28.780000] Build name:            v37.4.0.226.3
[   28.785000] Build revision:        112712
[   28.790000] Build type:            SDK
[   28.795000] Build timestamp:       1618276514
[   28.800000] Platform ID:           465
[   28.805000] Hardware ID:           QV860
[   28.805000] Hardware revision:     bbic4_rev_a2
[   28.810000] Band:                  5GHz
[   28.815000] Kernel version:        2.6.35
[   28.820000] Calibration version:   disabled
[   28.825000] DC/IQ cal version:     V8.1
[   28.830000] Power cal version:     V8.1
[   28.830000] MuC firmware:          qtn_driver.qtn_ruby.0.bin
[   28.835000] DSP firmware:          rdsp_driver.0.bin
[   28.840000] AuC firmware:          auc_driver.nomu.0.bin
[   28.845000] MAC address 0:         00:26:86:04:3f:30
[   28.850000] MAC address 1:         00:00:00:00:00:00
[   28.855000] Recommended U-Boot:    v37.4.0.198
Carrier ID 0, uboot update flag 0
MU-MIMO is not supported on this device
Starting qrpe daemon...
qtna-rpe(9.0.0-f34af82) started
qdock app 0 do not recognized
PTA request polarity set to 0
PTA grant polarity set to 0
PTA disabled
[   30.565000] load_module: 'qwe_rpe' using DRAM (offset:0x8d650000, size:0x5c66)
[   30.595000] Start RPE for QWE radio
[ Jan  1 00:00:31 qevt_server: Dot11Msg:Interface status change FALSE
Jan  1 00:00:31 qevt_server: Dot11Msg:Interface status change FALSE
Jan  1 00:00:31 qevt_server: Dot11Msg:Interface status change FALSE
Jan  1 00:00:31 qevt_server: Dot11Msg:Interface status change FALSE
Jan  1 00:00:31 qevt_server: Dot11Msg:Interface status change FALSE
Jan  1 00:00:31 qevt_server: Dot11Msg:Interface status change FALSE
Jan  1 00:00:31 qevt_server: Dot11Msg:Interface status change FALSE
Jan  1 00:00:31 qevt_server: Dot11Msg:Interface status change FALSE
Jan  1 00:00:31 qevt_server: Dot11Msg:Interface status change FALSE
Jan  1 00:00:31 qevt_server: Dot11Msg:Interface status change FALSE
Jan  1 00:00:31 qevt_server: Dot11Msg:Interface status change FALSE
Jan  1 00:00:31 qevt_server: Dot11Msg:Interface status change FALSE
Jan  1 00:00:31 qevt_server: Dot11Msg:Interface status change FALSE
Jan  1 00:00:31 qevt_server: Dot11Msg:Interface status change FALSE
  30.700000] load_module: 'rtl8192cd' using DRAM (offset:0x85e00000, size:0x11c259)
[   30.840000] Realtek WLAN driver - version 3.6 (2017-07-07-v17)NUM_STAT=64
[   30.840000] Adaptivity function - version 9.3.4
[   30.840000] Askey add Adaptivity patch
[   30.845000] Enabling MEM
[   30.845000] MACHAL_version_init
[   30.860000] tqe_descs_alloc: 4096 tqe_rx_descriptors at kern uncached 0x53420000 bus 0x85080000
[   30.865000] tqe_pcie_netdev_init: tqe_sem_en 0
[   30.870000] wlan0: PCI cache line size set incorrectly (0 bytes) by BIOS/FW, 
[   30.870000] The device 818b has PCI Express capability
[   30.870000] RC cap:256, dev cap:128
[   30.870000] Setting MPS to 128
[   30.875000] not two slots, enable_efuse=1
[   30.875000] page_ptr=75102000, size=507248, ring_dma_addr:85102000, alloc_dma_buf:75100000, ring_virt_addr:75102000
[   30.890000] not two slots, enable_efuse=1
[   30.905000] not two slots, enable_efuse=1
[   30.920000] not two slots, enable_efuse=1
[   30.925000] not two slots, enable_efuse=1
[   30.940000] not two slots, enable_efuse=1
perform wlanup through rtlactd
<<<<<<<< begain wlanup
start my wlan0
Initialize wlan0 intf
[ Jan  1 00:00:36 qevt_server: Dot11Msg:Interface status change TRUE
Jan  1 00:00:36 qevt_server: Dot11Msg:Interface status change TRUE
Jan  1 00:00:36 qevt_server: Dot11Msg:Interface status change TRUE
Jan  1 00:00:36 qevt_server: Dot11Msg:Interface status change TRUE
Jan  1 00:00:36 qevt_server: Dot11Msg:Interface status change TRUE
can't open file:/var/rtl8192c/wlan0/rs2_port!
can't open file:/var/rtl8192c/wlan0/rs2_ip!
can't open file:/var/rtl8192c/wlan0/rs2_password!
route: SIOCDELRT: No such process

 wlanif_name=[wlan0],__[flash.c-1167]
default_config_path=/var/rtl8192c/wlan0/
cmd: wscd -start -c /var/wsc-wlan0.conf -w wlan0 -fi /var/wscd-wlan0.fifo

WiFi Simple Config v2.9-wps2.0 (2022.11.07-19:23+0000).

Jan  1 00:00:36 iwevent: 00:00:36.530248   wlan0     Custom drive r event:QWE24_WP3S: Unknown

4
 .450000] WlanSupportAbility = 0x1
[   34.460000] PrepareRXBD88XX(165):size=507248, ring_dma_addr:85102000, alloc_dma_buf:75100000, ring_virt_addr:75102000
[   34.460000] QNum: 0x0, RXBDHead: 0x75102000, tmp_dma_ring_addr:0x85102000
[   34.465000] head:75102000, ring_dma_addr:85102000, size:1000
[   34.465000] ptxbd_head:75103000, tmp_tx_dma_ring_addr:85103000
[   34.465000] ptx_desc_head:75133400, tmp_tx_dma_ring_addr2:85133400, size: 20, 30
[   34.465000] ptxbd_bcn_head:7517ba00, tmp_tx_dma_ring_addr3:8517ba00,
[   34.465000] ptxdesc_bcn_head:7517bc80, tmp_tx_dma_ring_addr4:8517bc80, 
[   34.465000] PrepareTXBD88XX(550), q_num:0, TXBD_RWPtr_Reg:0x3b0, TXBD_Reg:0x310, ptxbd:75103000 85103000, ptx_desc:75133400 85133400
[   34.465000] PrepareTXBD88XX(550), q_num:1, TXBD_RWPtr_Reg:0x3ac, TXBD_Reg:0x330, ptxbd:7510b000 8510b000, ptx_desc:7513f400 8513f400
[   34.465000] PrepareTXBD88XX(550), q_num:2, TXBD_RWPtr_Reg:0x3a8, TXBD_Reg:0x328, ptxbd:75113000 85113000, ptx_desc:7514b400 8514b400
[   34.465000] PrepareTXBD88XX(550), q_num:3, TXBD_RWPtr_Reg:0x3a4, TXBD_Reg:0x320, ptxbd:7511b000 8511b000, ptx_desc:75157400 85157400
[   34.465000] PrepareTXBD88XX(550), q_num:4, TXBD_RWPtr_Reg:0x3a0, TXBD_Reg:0x318, ptxbd:75123000 85123000, ptx_desc:75163400 85163400
[   34.465000] PrepareTXBD88XX(550), q_num:5, TXBD_RWPtr_Reg:0x3b8, TXBD_Reg:0x340, ptxbd:7512b000 8512b000, ptx_desc:7516f400 8516f400
[   34.465000] PrepareTXBD88XX(550), q_num:6, TXBD_RWPtr_Reg:0x3bc, TXBD_Reg:0x348, ptxbd:7512c000 8512c000, ptx_desc:75170c00 85170c00
[   34.465000] PrepareTXBD88XX(550), q_num:7, TXBD_RWPtr_Reg:0x3c0, TXBD_Reg:0x350, ptxbd:7512d000 8512d000, ptx_desc:75172400 85172400
[   34.465000] PrepareTXBD88XX(550), q_num:8, TXBD_RWPtr_Reg:0x3c4, TXBD_Reg:0x358, ptxbd:7512e000 8512e000, ptx_desc:75173c00 85173c00
[   34.465000] PrepareTXBD88XX(550), q_num:9, TXBD_RWPtr_Reg:0x3c8, TXBD_Reg:0x360, ptxbd:7512f000 8512f000, ptx_desc:75175400 85175400
[   34.465000] PrepareTXBD88XX(550), q_num:10, TXBD_RWPtr_Reg:0x3cc, TXBD_Reg:0x368, ptxbd:75130000 85130000, ptx_desc:75176c00 85176c00
[   34.465000] PrepareTXBD88XX(550), q_num:11, TXBD_RWPtr_Reg:0x3d0, TXBD_Reg:0x370, ptxbd:75131000 85131000, ptx_desc:75178400 85178400
[   34.465000] PrepareTXBD88XX(550), q_num:12, TXBD_RWPtr_Reg:0x3d4, TXBD_Reg:0x378, ptxbd:75132000 85132000, ptx_desc:75179c00 85179c00
[   34.465000] PrepareTXBD88XX(550), q_num:13, TXBD_RWPtr_Reg:0x0, TXBD_Reg:0x0, ptxbd:75133000 85133000, ptx_desc:7517b400 8517b400
[   34.465000] PrepareTXBD88XX(550), q_num:14, TXBD_RWPtr_Reg:0x0, TXBD_Reg:0x308, ptxbd:7517ba00 8517ba00, ptx_desc:7517bc80 8517bc80
[   34.465000] ptxbd_bcn[0]: 0x7517ba00, Dword0: 0x28, Dword1: 0x8517bc80 
[   34.465000] ptxbd_bcn[1]: 0x7517ba80, Dword0: 0x28, Dword1: 0x8517bcb0 
[   34.465000] ptxbd_bcn[2]: 0x7517bb00, Dword0: 0x28, Dword1: 0x8517bce0 
[   34.465000] ptxbd_bcn[3]: 0x7517bb80, Dword0: 0x28, Dword1: 0x8517bd10 
[   34.465000] ptxbd_bcn[4]: 0x7517bc00, Dword0: 0x28, Dword1: 0x8517bd40 
[   34.765000] [QWERPE] [Info ] (qwerpe_register_:2096)qwerpe bss [80:78:71:a7:ac:47] for wlan0 is created
[   34.765000] [ODM_software_init][12372] BoardType = 0x0 rfe_type=0
[   34.765000] eric-8822 [ODM_software_init][12581] 
[   34.765000] clock 25MHz
[   34.765000] start power seq 
[   34.775000] 
[   34.775000] 
[   34.775000] ************* Initialize MAC/PHY parameter *************
[   34.780000] [MAC_REG_8192Emp]
[   34.780000] rtl8192e version = 58
[   34.780000] [PHY_REG_8192Emp]
[   34.780000] RTL8192E_MAC_PHY_Parameter_v021_MP_20130718
[   34.780000] [PHY_REG_PG_8192Emp]
[   34.780000] RL6286_MAC_PHY_Parameter_v024_20130125
[   34.780000] [AGC_TAB_8192Emp]
[   34.780000] RTL8192E_MAC_PHY_Parameter_v016_MP_20130705
[   34.785000] RadioA_8192Emp
[   34.785000] RTL8192E_MAC_PHY_Parameter_v023_MP_20130910
[   35.125000] [RadioB_8192Emp]
[   35.125000] RTL8192E_MAC_PHY_Parameter_v023_MP_20130910
[   35.455000] [PHY_ConfigTXPwrTrackingWithParaFile 4359]
[   35.455000] [PHY_ConfigTXPwrTrackingWithParaFile 4429] read_bytes=2283
[   35.455000] [TxPowerTrack_AP]
[   35.925000] wifi0: no IPv6 routers present
[   35.950000] device wlan0 entered promiscuous mode
[   35.950000] br0: port 3(wlan0) entering forwarding state
[   35.950000] br0: port 3(wlan0) entering forwarding state
Register to wlan0
iwcontrol RegisterPID to (wlan0)
sh: cannot create /proc/gpio: nonexistent directory
>>>>>>>> finish wlanup
sh: cannot create /proc/gpio: nonexistent directory
complete
Waiting for Wireless Events from interfaces...
wifi5g_current_config exists.
complete
MCS set 0 done
complete
Beacon set 100 done
complete
Short_GI set TRUE done
complete
WMM set 1 done
[   39complete
.565000] MuC: qtn_ioctl_set_param: set rts threshold to 65536
complete
Enable_interface set 1 done
region=cl
QoS setting done.
Too few command line parameters in call_qcsapi, expected 3, found 2
max clinet setting done
off
PM setting done
Setting AP/LTE config...
cat: can't open '/tmp/device_mode': No such file or directory
Too few command line parameters in call_qcsapi, expected 3, found 2
priority set  done
cat: can't open '/tmp/examine_ip': No such file or directory
cat: can't open '/tmp/device_mode': No such file or directory
Too few command line parameters in call_qcsapi, expected 3, found 2
DTIM set  done
cat: can't open '/tmp/device_mode': No such file or directory
20_40_bss_coex set 0 done
'monitor_temperature' is not enabled/set
DHCP client disabled
Starting httpd
cat: can't open '/tmp/device_mode': No such file or directory
cat: can't open '/tmp/examine_ip': No such file or directory
cat: can't open '/tmp/device_mode': No such file or directory
cat: can't open '/tmp/device_mode': No such file or directory
dev_comm_udp_r START !! 
Started device communication
dev_comm_udp_r START !! 
cat: can't open '/tmp/OldMqData': No such file or directory
bootcfg writes complete
cat: can't open '/tmp/device_mode': No such file or directory
cat: can't open '/tmp/examine_ip': No such file or directory
cat: can't open '/tmp/device_mode': No such file or directory
cat: can't open '/tmp/device_mode': No such file or directory
complete
complete
complete
complete
complete
bootcfg writes complete
cat: can't open '/tmp/device_mode': No such file or directory
cat: can't open '/tmp/examine_ip': No such file or directory
cat: can't open '/tmp/device_mode': No such file or directory
cat: can't open '/tmp/device_mode': No such file or directory
wifi24_current_config exists.
cat: can't open '/mnt/jffs2/wifi24_mac_addrs': No such file or directory
Interface doesn't accept private ioctl...
set_mib (89F1): Operation not permitted
Interface doesn't accept private ioctl...
set_mib (89F1): Operation not permitted
/etc/init.d/rcS: /etc/init.d/S96LED.sh: line 57: echoAskey wlan0 wifi24_mac_addrs not exist!: not found
cat: can't open '/mnt/jffs2/failover_parameter': No such file or directory
Askey wlan0 in br0
Set MBSS isolation
cat: can't open '/mnt/jffs2/failover_parameter': No such file or directory
qhop_config exists.
cat: can't open '/mnt/jffs2/failover_parameter': No such file or directory
 QHOP.sh START... 
Set MBSS isolation done
cat: can't open '/mnt/jffs2/failover_parameter': No such file or directory
cat: can't open '/mnt/jffs2/failover_parameter': No such file or directory
[===== PID 2029 Starting main loop at 1970-01-01 00:00 =====]
askey link_scan
Create reset_2g_wps.
cat: can't open '/tmp/device_mode': No such file or directory
cat: can't open '/tmp/examine_ip': No such file or directory
cat: can't open '/tmp/device_mode': No such file or directory
cat: can't open '/tmp/device_mode': No such file or directory
[ Jan  1 00:00:45 qevt_server: Dot11Msg:Interface status change FALSE
Jan  1 00:00:45 qevt_server: Dot11Msg:Interface status change FALSE
  45.205000] [QWERPE] [Info ] (qwerpe_unregiste:2104)qwerpe bss [80:78:71:a7:aJan  1 00:00:45 qevt_server: Dot11Msg:Interface status change FALSE
c:47] is deleted
[   45.280000] br0: port 3(wlan0) entering forwarding state
default DTIM_Interval done
route add -net 192.168.0.200 netmask 255.255.255.255 dev br0
echo 192.168.0.200 >/tmp/mdm_ip
starting pid 2229, tty '/dev/console': '/bin/sh -l'


BusyBox v1.10.3 (2022-11-08 03:18:16 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

quantenna # default Coexist_20_40MHz done
default Preamble_Type done
default Control_Sideband done
cat: can't open '/tmp/device_mode': No such file or directory
default WMM_APSD done
default Global_Max_Clients done
cat: can't open '/tmp/examine_ip': No such file or directory
default Protection_802_11n done
cat: can't open '/tmp/device_mode': No such file or directory
default txforce done
cat: can't open '/tmp/device_mode': No such file or directory
default Transmit_Power done
[ cat: can't open '/tmp/device_mode': No such file or directory
default Enable 1
cat: can't open '/tmp/examine_ip': No such file or directory
cat: can't open '/tmp/device_mode': No such file or directory
  cat: can't open '/tmp/device_mode': No such file or directory
46cat: can't open '/tmp/device_mode': No such file or directory
cat: can't open '/tmp/examine_ip': No such file or directory
cat: can't open '/tmp/device_mode': No such file or directory
cat: can't open '/tmp/device_mode': No such file or directory
cat: can't open '/tmp/examine_ip': No such file or directory
cat: can't open '/tmp/device_mode': No such file or directory
cat: can't open '/tmp/examine_ip': No such file or directory
cat: can't open '/tmp/device_mode': No such file or directory
cat: can't open '/tmp/device_mode': No such file or directory
complete
cat: can't open '/tmp/device_mode': No such file or directory
cat: can't open '/tmp/examine_ip': No such file or directory
cat: can't open '/tmp/device_mode': No such file or directory
Too few command line parameters in call_qcsapi, expected 3, found 2
cat: can't open '/tmp/device_mode': No such file or directory
.620000] WlanSupportAbility = 0x1
[   46.630000] PrepareRXBD88XX(165):size=507248, ring_dma_addr:85102000, alloc_dma_buf:75100000, ring_virt_addr:75102000
[   46.630000] QNum: 0x0, RXBDHead: 0x75102000, tmp_dma_ring_addr:0x85102000
[   46.635000] head:75102000, ring_dma_addr:85102000, size:1000
[   46.635000] ptxbd_head:75103000, tmp_tx_dma_ring_addr:85103000
[   46.635000] ptx_desc_head:75133400, tmp_tx_dma_ring_addr2:85133400, size: 20, 30
[   46.635000] ptxbd_bcn_head:7517ba00, tmp_tx_dma_ring_addr3:8517ba00,
[   46.635000] pcat: can't open '/tmp/device_modte': No such filex or directory
desc_bcn_head:7517bc80, tmp_tx_dma_ring_addr4:8517bc80, 
[   46.635000] PrepareTcat: can't open '/tmp/examine_ip': No such file Xor directory
BD88XX(550), q_num:0, TXBD_RWPtr_Reg:0x3b0, TXBD_Reg:0x310, ptxbd:75103000 85103000, ptx_desc:75133400 85133400
[   4cat: can't open '/tmp/device_mode': No such file or directory
6.635000] PrepareTXBD88XX(550), q_num:1,cat: can't open  '/tmp/device_modTe': No such fileX or directory
BD_RWPtr_Reg:0x3ac, TXBD_Reg:0x330, ptxbd:7510b000 8510b000, ptx_desc:7513f400 8513f400
[   46.635000] PrepareTXBD88XX(550), q_num:2, TXBD_RWPtr_Reg:0x3a8, TXBD_Reg:0x328, ptxbd:75113000 85113000, ptx_desc:7514b400 8514b400
[   46.635000] PrepareTXBD88XX(550), q_num:3, TXBD_RWPtr_Reg:0x3a4, TXBD_Reg:0x320, ptxbd:7511b000 8511b000, ptx_desc:75157400 85157400
[   46.635000] PrepareTXBD88XX(550), q_num:4, TXBD_RWPtr_Reg:0x3a0, TXBD_Reg:0x318, ptxbd:75123000 85123000, ptx_desc:75163400 85163400
[   46.635000] PrepareTXBD88XX(550), q_num:5, TXBD_RWPtr_Reg:0x3b8, TXBD_Reg:0x340, ptxbd:7512b000 8512b000, ptx_desc:7516f400 8516f400
[   46.635000] PrepareTXBD88XX(550), q_num:6, TXBD_RWPtr_Reg:0x3bc, TXBD_Reg:0x348, ptxbd:7512c000 8512c000, ptx_desc:75170c00 85170c00
[   46.635000] PrepareTXBD88XX(550), q_num:7, TXBD_RWPtr_Reg:0x3c0, TXBD_Reg:0x350, ptxbd:7512d000 8512d000, ptx_desc:75172400 85172400
[   46.635000] PrepareTXBD88XX(550), q_num:8, TXBD_RWPtr_Reg:0x3c4, TXBD_Reg:0x358, ptxbd:7512e000 8512e000, ptx_desc:75173c00 85173c00
[   46.635000] PrepareTXBD88XX(550), q_num:9, TXBD_RWPtr_Reg:0x3c8, TXBD_Reg:0x360, ptxbd:7512f000 8512f000, ptx_desc:75175400 85175400
[   46.635000] PrepareTXBD88XX(550), q_num:10, TXBD_RWPtr_Reg:0x3cc, TXBD_Reg:0x368, ptxbd:75130000 85130000, ptx_desc:75176c00 85176c00
[   46.635000] PrepareTXBD88XX(550), q_num:11, TXBD_RWPtr_Reg:0x3d0, TXBD_Reg:0x370, ptxbd:75131000 85131000, ptx_desc:75178400 85178400
[   46.635000] PrepareTXBD88XX(550), q_num:12, TXBD_RWPtr_Reg:0x3d4, TXBD_Reg:0x378, ptxbd:75132000 85132000, ptx_desc:75179c00 85179c00
[   46.635000] PrepareTXBD88XX(550), q_num:13, TXBD_RWPtr_Reg:0x0, TXBD_Reg:0x0, ptxbd:75133000 85133000, ptx_desc:7517b400 8517b400
[   46.635000] PrepareTXBD88XX(550), q_num:14, TXBD_RWPtr_Reg:0x0, TXBD_Reg:0x308, ptxbd:7517ba00 8517ba00, ptx_desc:7517bc80 8517bc80
[   46.635000] ptxbd_bcn[0]: 0x7517ba00, Dword0: 0x28, Dword1: 0x8517bc80 
[   46.635000] ptxbd_bcn[1]: 0x7517ba80, Dword0: 0x28, Dword1: 0x8517bcb0 
[   46.635000] ptxbd_bcn[2]: 0x7517bb00, Dword0: 0x28, Dword1: 0x8517bce0 
[   46.635000] ptxbd_bcn[3]: 0x7517bb80, Dword0: 0x28, Dword1: 0x8517bd10 
[   46.635000] ptxbd_bcn[4]: 0x7517bc00, Dword0: 0x28, Dword1: 0x8517bd40 
[   46.635000] [QWERPE] [Info ] (qwerpe_register_:2096)qwerpe bss [80:78:71:a7:ac:47] for wlan0 is created
[   46.635000] [ODM_software_init][12372] BoardType = 0x0 rfe_type=0
[   46.635000] eric-8822 [ODM_software_init][12581] 
[   46.635000] clock 25MHz
[   46.635000] start power seq 
[   46.655000] 
[   46.655000] 
[   46.655000] ************* Initialize MAC/PHY parameter *************
[   46.655000] [MAC_REG_8192Emp]
[   46.655000] rtl8192e version = 58
[   46.655000] [PHY_REG_8192Emp]
[   46.655000] RTL8192E_MAC_PHY_Parameter_v021_MP_20130718
[   46.655000] [PHY_REG_PG_8192Emp]
[   46.660000] RL6286_MAC_PHY_Parameter_v024_20130125
[   46.660000] [AGC_TAB_8192Emp]
[   46.660000] RTL8192E_MAC_PHY_Parameter_v016_MP_20130705
[   46.660000] RadioA_8192Emp
[   46.660000] RTL8192E_MAC_PHY_Parameter_v023_MP_20130910
[   47.000000] [RadioB_8192Emp]
[   47.005000] RTL8192E_MAC_PHY_Parameter_v023_MP_20130910
[   47.330000] [PHY_ConfigTXPwrTrackingWithParaFile 4359]
[   47.330000] [PHY_ConfigTXPwrTrackingWithParaFile 4429] read_bytes=2283
[   47.330000] [TxPowerTrack_AP]
[   47.695000] br0: port 3(wlan0) entering forwarding state
[   47.695000] br0: port 3(wlan0) entering forwarding state
cat: can't open '/tmp/device_mode': No such file or directory
cat: can't open '/tmp/examine_ip': No such file or directory
[   60.190000] wlan0: no IPv6 routers present
sh: 1: unknown operand
Device doesn't under AP mode or failover disable

quantenna #

Burbadak · August 19, 2023, 5:59pm

The device limps to some configuration where it has the IP 192.168.1.200 and gives a root shell on the normal telnet port, here is some basic Linux stuff:

telnet 192.168.1.200
Trying 192.168.1.200...
Connected to 192.168.1.200.
Escape character is '^]'.

Linux 2.6.35.12 (soc1) (0)

soc1 login: root


BusyBox v1.10.3 (2022-11-08 03:18:16 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

quantenna # mount
rootfs on / type rootfs (rw)
proc on /proc type proc (rw,relatime)
/dev/mtdblock5 on /mnt/jffs2 type jffs2 (rw,relatime)
devpts on /dev/pts type devpts (rw,nosuid,noexec,relatime,gid=5,mode=620)
tmpfs on /tmp type tmpfs (rw,nosuid,nodev,noexec,relatime)
sysfs on /sys type sysfs (rw,nosuid,nodev,noexec,relatime)
none on /sys/kernel/debug type debugfs (rw,relatime)

quantenna # cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00020000 00010000 "uboot"
mtd1: 00010000 00010000 "uboot_env"
mtd2: 00010000 00010000 "uboot_env_bak"
mtd3: 007a0000 00010000 "linux_safety"
mtd4: 007a0000 00010000 "linux_live"
mtd5: 00080000 00010000 "data"
mtd6: 01000000 00010000 "extend"

quantenna # cat /proc/meminfo 
MemTotal:         182104 kB
MemFree:          126040 kB
Buffers:               0 kB
Cached:            32728 kB
SwapCached:            0 kB
Active:            15920 kB
Inactive:          21864 kB
Active(anon):       5160 kB
Inactive(anon):      168 kB
Active(file):      10760 kB
Inactive(file):    21696 kB
Unevictable:           0 kB
Mlocked:               0 kB
SwapTotal:             0 kB
SwapFree:              0 kB
Dirty:                 0 kB
Writeback:             0 kB
AnonPages:          5080 kB
Mapped:             2528 kB
Shmem:               272 kB
Slab:              13200 kB
SReclaimable:       3080 kB
SUnreclaim:        10120 kB
KernelStack:         560 kB
PageTables:         1472 kB
NFS_Unstable:          0 kB
Bounce:                0 kB
WritebackTmp:          0 kB
CommitLimit:       91048 kB
Committed_AS:      30600 kB
VmallocTotal:     212992 kB
VmallocUsed:       66592 kB
VmallocChunk:     128464 kB

quantenna # cat /proc/cpuinfo

Processor Family: ARC 700 [0x33]
CPU speed :	500.00 Mhz
Timers: 	TIMER1 TIMER0 
Interrupt Vect Base: 	0x98051c00 
Peripheral Base: NOT present; assuming 0xCOFC0000 
Data UNCACHED Base (I/O): start 0xc0 Sz, 1024 MB 
Bogo MIPS : 	248.21
ARC700 MMU Ver [2]
   PAGE SIZE 8k
   JTLB 128 x 2 = 256 entries
   uDTLB 8 entr, uITLB 4 entr
TLB Refill "will NOT" Flush uTLBs
Detected I-cache : 
  Type=2 way set-assoc, Line length=32, Size=16K (enabled)
Detected D-cache : 
  Type=4 way set-assoc, Line length=32, Size=16K (enabled)
Extensions:
   MPY: 32x32 with ANY Result Reg   MAC MPY: Dual 16 x 16 and 32 x 16
   DCCM: N/A  ICCM: N/A
   CRC: N/A,   SWAP: Present   NORM: Present
   Min-Max: Present,   Barrel Shifter: Present
   Ext Arith Insn: Present
Floating Point Extension: N/A

quantenna # uname -a 
Linux soc1 2.6.35.12 #2 Tue Nov 8 03:29:40 CST 2022 arc unknown

So it seems that it has enough umpf to accept OpenWRT

AndrewZ · August 19, 2023, 6:05pm

Please also show the results of

cat /sys/kernel/debug/gpio 
cat /sys/kernel/debug/usb/devices

frollic · August 19, 2023, 6:38pm

based on https://openwrt.org/docs/techref/instructionset/arc_arc700, there are currently no openwrt devices using this platform.

Burbadak · August 19, 2023, 6:51pm

OK, a bit of HW trivia: the router has two boards, one circular in the base, that is the whole sheabang, the CPU is an QT3860BC also called Topaz for some reason and that seem to be used in a lot of routers, also it seem to be strong enough for OpenWRT, and a vertical one that is just a Qualcomm MDM9230 LTE Cat6 module with the LEDs and SIM slot, here is the full list of parts on the routerboard:

So, what do we have on the base board (Wi-Fi, Phone and Ethernet)

###
ONSEMI QT3860BC - Baseband Chip DBDC, WiFi 5, 4x4, 2.4 GHz / 5 GHz

General description

The QT3860BC is a baseband chip that supports the 802.11ac standard.
It is also backward compatible with the 802.11n/a.
QT3860BC supports all mandatory 802.11ac features, as well as most of the optional features
 and 4 streams of data and MU-MIMO.

###
Realtek RTL8365MB - LAYER 2 MANAGED 4+1-PORT 10/100/1000M SWITCH CONTROLLER

General Description
The RTL8365MB is a high-performance 4+1-port 10/100/1000M Ethernet switch,
featuring a low-power integrated 4-port Giga-PHY that supports 1000Base-T, 100Base-TX, and 10Base-T.
For specific applications, the RTL8365MB-VC supports an extra interface that could be configured as RGMII/MII interfaces.
The RTL8365MB-VC integrates all the functions of a high-speed switch system; 
including SRAM for packet buffering, non-blocking switch fabric, 
and internal register management into a single CMOS device.

###
MACRONIX 25L25645G - 32MB SPI Flash

GENERAL DESCRIPTION
MX25L25645G is 256Mb bits Serial NOR Flash memory, which is configured as 33,554,432 x 8 internally.
When it is in two or four I/O mode, the structure becomes 134,217,728 bits x 2,
or 67,108,864 bits x 4.

###
ESMT M15T2G16128A - 16M x 16 Bit x 8 Banks DDR3(L)

General Description
The 2Gb Double-Data-Rate-3 (DDR3(L)) DRAM is double data rate architecture to achieve high-speed operation.
It is internally configured as an eight-bank DRAM. The 2Gb chip is organized as 16Mbit x 16 I/Os x 8 bank devices. 

###
Realtek  RTL8192ER - 802.11bgn PCIe Network Interface Controller

General Description
The Realtek RTL8192ER-CG is an 802.11bgn 2.4G single-chip that integrates 
Wireless LAN (WLAN) and a network PCIe controller.
It combines a WLAN MAC, a 2T2R capable WLAN baseband, and WLAN RF in a single chip. 
The RTL8192ER-CG provides a complete solution for a high-throughput performance 
and low power consumption integrated wireless LAN device.

###
Diodes Inc (PERICOM) P16C557-05 - PCIe ® 2.0 Clock Generator with 4 HCSL Outputs

General Description
The PI6C557-05 is a spread spectrum clock generator compliant to PCI Express® 2.0 and Ethernet requirements.
The device is used for PC or embedded systems to substantially reduce Electromagnetic Interference (EMI).
The PI6C557-05 provides four differential (HCSL) or LVDS spread spectrum outputs.

###
ONSEMI QT2518B - RF Transceiver, 4x4, 5 GHz, WiFi 5

General Description
The QT2518B is an 802.11ac/n 4x4 MIMO chipset (BBIC and RFIC) that is integrated into wireless home 
and enterprise networking equipment, as well as consumer electronics devices, 
for an unprecedented level of reliability and performance of up to 1.7 Gbps.
It is the world's most fully integrated solution to combine a 4x4 MIMO 5 GHz radio transceiver, 
dynamic digital transmit (Tx) beamforming, and integrated mesh networking to deliver guaranteed 
high-speed bandwidth for total coverage of any size home or office, anywhere.

Burbadak · August 19, 2023, 7:09pm

quantenna # cat /sys/kernel/debug/gpio 
GPIOs 0-21, arcgpio:
 gpio-1   (sysfs               ) out lo
 gpio-2   (sysfs               ) out hi
 gpio-3   (sysfs               ) out hi
 gpio-4   (sysfs               ) in  hi
 gpio-7   (sysfs               ) in  hi
 gpio-9   (sysfs               ) out lo
 gpio-12  (sysfs               ) in  lo
 gpio-16  (sysfs               ) out hi

cat /sys/kernel/debug/usb/devices
cat: can't open '/sys/kernel/debug/usb/devices': No such file or directory

quantenna # ifconfig
br0       Link encap:Ethernet  HWaddr 00:08:55:41:00:05  
          inet addr:192.168.1.200  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::20c4:92ff:feeb:b1ba/64 Scope:Link
          inet6 addr: 2a02:3037:607:7028:208:55ff:fe41:5/64 Scope:Global
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:290 errors:0 dropped:0 overruns:0 frame:0
          TX packets:750 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:59640 (58.2 KiB)  TX bytes:850163 (830.2 KiB)

eth1_0    Link encap:Ethernet  HWaddr 00:08:55:41:00:05  
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:301 errors:0 dropped:0 overruns:0 frame:0
          TX packets:749 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:8 
          RX bytes:65892 (64.3 KiB)  TX bytes:853165 (833.1 KiB)
          Interrupt:20 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

wifi0     Link encap:Ethernet  HWaddr 00:26:86:04:3F:30  
          inet6 addr: fe80::226:86ff:fe04:3f30/64 Scope:Link
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:54 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1024 
          RX bytes:0 (0.0 B)  TX bytes:1404 (1.3 KiB)

wlan0     Link encap:Ethernet  HWaddr 80:78:71:A7:AC:47  
          inet6 addr: fe80::8278:71ff:fea7:ac47/64 Scope:Link
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:4294967296 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:4294967296 (4.0 GiB)  TX bytes:0 (0.0 B)
          Interrupt:28 Base address:0x8000

AndrewZ · August 19, 2023, 7:29pm

That's bad as I expected to see the information about the modem there.

frollic · August 19, 2023, 7:30pm

same SoC, seems it didn't lead anywhere

slh · August 19, 2023, 9:11pm

That would only be he 5 GHz WLAN companion SOC, it shouldn't act as the system SOC - and it's bad news, as there is no support for it, so you can already strike 5 GHz WLAN support from the specs sheet.

Burbadak · August 20, 2023, 8:02am

OK, first, let's take them in order:

First of all, reading the legalese document is worth doing, the good people from ASKEY claimed in their GPL License Agreement that will make the uses OS software available according to the license if anybody writing a mail at askey-gpl-o2-homespot@askey.com. I have written them a friendly email where I've requested an SDK and pointing that they left out the Linux kernel and the U-Boot bootloader. Let see if some stuff will come out of it. It will be helpful that other community members will request the SDK as well, maybe we can rebuild a basic firmware. Then OpenWRT on top of it will not be a impossible task.
@AndrewZ the modem is definitely a Qualcomm MDM9230, because I've opened the shields of the LTE board and looked ;), furthermore, looking at the attached picture with keen eyes one will see a micro-USB connector that actually works, and the modem is seen by a Linux machine either as a standard QMI modem (this model is known by recent kernels) or as a little storage device when the reset pin is hold by the router board is goes into this programming/update mode looking as a storage device. I will see which GPIO is and play with it more.

Meanwhile, the controlling GPIO pin(s ?) flutter during the boot proces and I've got a glimpse of the modem via the mentioned USB socket:

[2178429.273846] usb 3-9.4.1: new high-speed USB device number 114 using xhci_hcd
[2178429.375414] usb 3-9.4.1: New USB device found, idVendor=1690, idProduct=7588, bcdDevice=ff.ff
[2178429.375419] usb 3-9.4.1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[2178429.375420] usb 3-9.4.1: Product: Android
[2178429.375421] usb 3-9.4.1: Manufacturer: Android
[2178429.375422] usb 3-9.4.1: SerialNumber: 6035d1f04127
[2178429.395757] option 3-9.4.1:1.0: GSM modem (1-port) converter detected
[2178429.395893] usb 3-9.4.1: GSM modem (1-port) converter now attached to ttyUSB1
[2178429.398892] option 3-9.4.1:1.2: GSM modem (1-port) converter detected
[2178429.399030] usb 3-9.4.1: GSM modem (1-port) converter now attached to ttyUSB2
[2178429.399296] option 3-9.4.1:1.3: GSM modem (1-port) converter detected
[2178429.399413] usb 3-9.4.1: GSM modem (1-port) converter now attached to ttyUSB3
[2178429.406252] qmi_wwan 3-9.4.1:1.4: cdc-wdm2: USB WDM device
[2178429.406851] qmi_wwan 3-9.4.1:1.4 wwan1: register 'qmi_wwan' at usb-0000:00:14.0-9.4.1, WWAN/QMI device, 06:e0:7c:3c:00:2c
[2178429.407256] usb-storage 3-9.4.1:1.5: USB Mass Storage device detected
[2178429.407585] scsi host6: usb-storage 3-9.4.1:1.5
[2178429.466867] qmi_wwan 3-9.4.1:1.4 wwx06e07c3c002c: renamed from wwan1
[2178430.426982] scsi 6:0:0:0: Direct-Access     Linux    File-CD Gadget   0310 PQ: 0 ANSI: 2
[2178430.427650] sd 6:0:0:0: Attached scsi generic sg2 type 0
[2178430.428174] sd 6:0:0:0: Power-on or device reset occurred
[2178430.428687] sd 6:0:0:0: [sdc] Media removed, stopped polling
[2178430.429822] sd 6:0:0:0: [sdc] Attached SCSI removable disk
[2178589.560957] usb 3-9.4.1: USB disconnect, device number 114
[2178589.561251] option1 ttyUSB1: GSM modem (1-port) converter now disconnected from ttyUSB1
[2178589.561290] option 3-9.4.1:1.0: device disconnected
[2178589.561689] option1 ttyUSB2: GSM modem (1-port) converter now disconnected from ttyUSB2
[2178589.561710] option 3-9.4.1:1.2: device disconnected
[2178589.561878] option1 ttyUSB3: GSM modem (1-port) converter now disconnected from ttyUSB3
[2178589.561902] option 3-9.4.1:1.3: device disconnected
[2178589.562221] qmi_wwan 3-9.4.1:1.4 wwx06e07c3c002c: unregister 'qmi_wwan' usb-0000:00:14.0-9.4.1, WWAN/QMI device
[2178605.910083] usb 3-9.4.1: new high-speed USB device number 115 using xhci_hcd
[2178606.012524] usb 3-9.4.1: New USB device found, idVendor=1690, idProduct=7588, bcdDevice=ff.ff
[2178606.012535] usb 3-9.4.1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[2178606.012540] usb 3-9.4.1: Product: Android
[2178606.012543] usb 3-9.4.1: Manufacturer: Android
[2178606.012545] usb 3-9.4.1: SerialNumber: 2edb25e50c86
[2178606.036834] option 3-9.4.1:1.0: GSM modem (1-port) converter detected
[2178606.036917] usb 3-9.4.1: GSM modem (1-port) converter now attached to ttyUSB1
[2178606.039952] option 3-9.4.1:1.2: GSM modem (1-port) converter detected
[2178606.040017] usb 3-9.4.1: GSM modem (1-port) converter now attached to ttyUSB2
[2178606.040122] option 3-9.4.1:1.3: GSM modem (1-port) converter detected
[2178606.040178] usb 3-9.4.1: GSM modem (1-port) converter now attached to ttyUSB3
[2178606.047368] qmi_wwan 3-9.4.1:1.4: cdc-wdm2: USB WDM device
[2178606.047745] qmi_wwan 3-9.4.1:1.4 wwan1: register 'qmi_wwan' at usb-0000:00:14.0-9.4.1, WWAN/QMI device, 06:e0:7c:3c:00:2c
[2178606.048023] usb-storage 3-9.4.1:1.5: USB Mass Storage device detected
[2178606.048220] scsi host6: usb-storage 3-9.4.1:1.5
[2178606.117441] qmi_wwan 3-9.4.1:1.4 wwx06e07c3c002c: renamed from wwan1
[2178607.066925] scsi 6:0:0:0: Direct-Access     Linux    File-CD Gadget   0310 PQ: 0 ANSI: 2
[2178607.067539] sd 6:0:0:0: Attached scsi generic sg2 type 0
[2178607.068103] sd 6:0:0:0: Power-on or device reset occurred
[2178607.068696] sd 6:0:0:0: [sdc] Media removed, stopped polling
[2178607.069577] sd 6:0:0:0: [sdc] Attached SCSI removable disk
[2178638.713314] usb 3-9.4.1: USB disconnect, device number 115
[2178638.713645] option1 ttyUSB1: GSM modem (1-port) converter now disconnected from ttyUSB1
[2178638.713691] option 3-9.4.1:1.0: device disconnected
[2178638.714572] option1 ttyUSB2: GSM modem (1-port) converter now disconnected from ttyUSB2
[2178638.714617] option 3-9.4.1:1.2: device disconnected
[2178638.714859] option1 ttyUSB3: GSM modem (1-port) converter now disconnected from ttyUSB3
[2178638.714891] option 3-9.4.1:1.3: device disconnected

@slh Let's think positive, is time to push a bit and put a fully open source FW in these babies :).

Cheers,
Bur

slh · August 20, 2023, 9:01am

It's been years since quantenna promised to deliver topaz firmware for qtnfmac 'soon', meanwhile they've been acquired by onsemi and vanished from the earth.

Burbadak · August 20, 2023, 9:03am

And nao for some heeeeecking !!!

The official link for those routers FW is:

For the people that don't read German, or want a direct FW link for this device:

http://dl1.askeycloudapi.com/file/Telefonica_O2/RTL0080W-D112(DE-RoHS)/WWHC051-D112/21.13.119/RTL0080VW-D112_DE_g34.0_RTL0080.D112.DE.21.13.119_all.bin

This bin file is actually a standard zip so if you change the extension from .bin to .zip is producing these files after unpacking:

     157 Jun 14  2021 md5.txt
67432198 Jun 14  2021 update164d720e954e523811903ef58d058050.zip
 6825147 Jun 14  2021 Web_DE_g34.0_RTL0080.D112.DE.21.44.119.img

$ cat md5.txt 
164d720e954e523811903ef58d058050  update164d720e954e523811903ef58d058050.zip
1b0f7aed2e6404cddef23ccf5915dacb  Web_DE_g34.0_RTL0080.D112.DE.21.44.119.img

$ md5sum update164d720e954e523811903ef58d058050.zip 
164d720e954e523811903ef58d058050  update164d720e954e523811903ef58d058050.zip

$ md5sum Web_DE_g34.0_RTL0080.D112.DE.21.44.119.img 
1b0f7aed2e6404cddef23ccf5915dacb  Web_DE_g34.0_RTL0080.D112.DE.21.44.119.img

So at least the md5 hashing used is a standard method and not some "chinesified" version, that is good to know, so far this is the simplest and most sane firmware update package I've seen, exploring the two components in the next posts.