IPQ5018: GLiNET B3000 info

here is the info package i've put together for the glinet-b3000 board, for those interested.

---> glinet-gl-b3000-info

2 Likes

I trying to put together a patch set for 5.15 / no nss based off of @hzyitc repo, i have a few questions if someone can help ..

from hzyitc patchset ..

@@ -9,6 +9,7 @@ touch /etc/config/ubootenv

board=$(board_name)
case "$board" in
	cmcc,rax3000q|\
	redmi,ax3000|\
	xiaomi,cr881x)
		ubootenv_add_uci_config "/dev/mtd10" "0x0" "0x10000" "0x20000"
@@ -9,6 +9,7 @@ board=$(board_name)

case "$FIRMWARE" in

"ath11k/IPQ5018/hw1.0/caldata.bin")

case "$board" in

cmcc,rax3000q \

redmi,ax3000 \

xiaomi,cr881x)

caldata_extract "0:ART" 0x1000 0x20000

@@ -17,6 +18,7 @@ case "$FIRMWARE" in

;;

"ath11k/qcn6122/hw1.0/caldata_1.bin")

case "$board" in

cmcc,rax3000q \

redmi,ax3000 \

xiaomi,cr881x)

caldata_extract "0:ART" 0x26800 0x20000

Here all 3 ipq50xx boards are using the same partitions and sizes, how are these addresses determined ?

@Hostle what do you see in mtd info?

here is the partition scheme

IPQ5018# smeminfo
ubi0: attaching mtd1
ubi0: scanning is finished
ubi0: attached mtd1 (name "mtd=0", size 120 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: minunit sizes: 048/2048, sub-page size 2048
ubi0: VID header offset: d 2048), data offset: 4096
ubi0: good PEBs: 960, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 4, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 7/3, WL thres image sequence number: 1649316990
flash_type:able PEBs: 0,0xbtal reserved PEBs: 960, PEBs reserved for bad PEB handling: 20
flash_index:            0x0
flash_chip_select:      0x0
flae:   0x20000
flash_density:          0x80000
partition table offset  0x0
No.: Name             Attributes            Start             Size
  0: 0:SBL1           0x0000ffff              0x0          0x80000
  1: 0:MIBIB          0x0000ffff          0x80000          0x80000
  2: 0:BOOTCONFIG     0x0000ffff         0x100000          0x40000
  3: 0:QSEE           0x0000ffff         0x140000         0x100000
  4: 0:DEVCFG         0x0000ffff         0x240000          0x40000
  5: 0:CDT            0x0000ffff    00          0x40000
  6: 0:APPSBLENV      0x0000ffff         0x2c0000          0x80000
  7: 0:APPSBL         0x0000ffff         0x340000         0 
  8: 0:ART            0x0000ffff         0x480000         0x100000
  9: 0:TRAINING       0x0     0x58000          0x80000
 10: CFG              0x0000ffff         0x600000         0x200000
 11: rootfs           0x0000ffff         0x800000        0x7800000
        ubi vol 0 kernel
        ubi vol 1 wifi_fw
        ubi vol 2 ubi_rootfs
        ubi vol 3 rootfs_data

from the boot log..

[    2.705595] Creating 12 MTD partitions on "qcom_nand.0":                     
[    2.712432] 0x000000000000-0x000000080000 : "0:SBL1"                         
[    2.719372] 0x000000080000-0x000000100000 : "0:MIBIB"                        
[    2.724308] 0x000000100000-0x000000140000 : "0:BOOTCONFIG"                   
[    2.729042] 0x000000140000-0x000000240000 : "0:QSEE"                         
[    2.735158] 0x000000240000-0x000000280000 : "0:DEVCFG"                       
[    2.739482] 0x000000280000-0x0000002c0000 : "0:CDT"                          
[    2.744402] 0x0000002c0000-0x000000340000 : "0:APPSBLENV"                    
[    2.749477] 0x000000340000-0x000000480000 : "0:APPSBL"5778] 0x00000480000-0x"
[    2.760467] 0x000000580000-0x000000600000 : "0:TRAINING"                     
[    2.764784] 0x000000600000-0x0000008000[    2.771966] 0x000000800000-0x00000"
[    2.886072] mtd: device 11 (rootfs) set to be root filesystem                
[    2.886379] mtdsplit: no squin "rootfs"                                      
[    2.891719] spi_qup 78b5000.spi: IN:block:16, fifo:64:16, fifo:64 

All the info i have gathered is available in the link from the first post, the logs, pictures, mtd parts, and the relevant dts files. The board bins are not included but I have them as well.

In /lib/read_caldata_to_fs.sh file.

1 Like

Ok perfect, i'll get that, thank you. I have noticed a few other things .,.

The nand info for this board was not included in the intial ipq5108 support

DRAM ptable founen: 4                                                           
512 iB                                                                          
NAND:  QPIC cpport serial NAND                                                  
ID = 21baef                                                                     
Vendor = ef                                                                     
Device = ba                                                                     
Serial Nand Device Found With ID : 0xef 0xba                                    
Serial NAND device Manufacturer:W25N01GWZEIG 

from the patch set

1. W25N01JW
2. GD5F1GQ5REYIG
3. F50D1G41LB
4. GD5F4GQ6REYIHR
5. W25N02JWZEIF
6. MX35UF1GE4AC
7. F50D2G41KA-83YIG2V
8. DS35M1GA
9. GD5F2GQ5REYIG

Also this board is mp03.5-c1. I have included everything in the info package in my first post, I think I have most of what is needed, can you have a look and let me know if I should grab something else from the unit before i start throwing firmware at it.

thanks for all you've done already, you've put in a pile of work

caldata_extract "0:ART" 0x1000 0x20000
caldata_extract "0:ART" 0x26800 0x20000

perfect

I have the patch set complete, everything builds without error. But still 1 question remains regarding the nand patch. I am not sure if i need add the chip info for W25N01GWZEIG

W25N02JWZEIF data sheet

W25N01GWZEIG data sheet (updated)

Add Qualcomm Atheros IPQ50xx target

any thoughts ?

Ok, well absence of valid advice, I've been looking at logs for the devices that have been added, and it would seem that each supported device has a reference to a chip from the list in the patch. So lets add the chip.

Seems pretty straight forward, just not sure about all the values being use, specifically bold ones below
"W25N02JWZEIF SPI NAND 2G 1.8V",
{ .id = {0xef, 0xbf} },
SZ_2K, SZ_256, SZ_128K, 0, 2, 64, NAND_ECC_INFO(4, SZ_512) },

can someone please help me fill in these blanks so I can make this final patch and test this unit on 5.15. Going but what I can translate from the data sheet

"W25N01GWZEIG SPI NAND 1G 1.8V",
		{ .id = {0xef, 0xba} },
SZ_2K, SZ_128, SZ_128K, 0, 2, 64, NAND_ECC_INFO(4, SZ_512) },

aside from this everything else looks real good and I am pretty certain it'll boot up nicely and ..hopefully have wifi, albeit no nss.

the answer was staring right at me...the nand chip is SPINAND and is supported already

SPINAND_INFO("W25N01GV",
		     SPINAND_ID(SPINAND_READID_METHOD_OPCODE_DUMMY, 0xaa, 0x21),
		     NAND_MEMORG(1, 2048, 64, 64, 1024, 20, 1, 1, 1),
		     NAND_ECCREQ(1, 512),
		     SPINAND_INFO_OP_VARIANTS(&read_cache_variants,
					      &write_cache_variants,
					      &update_cache_variants),

time to test 5.15 on the B3000

Ipq5018 has a serial nand controller for which you need to apply patches to qcom nand controller Linux driver.
On 5.15, I would recommend you look at the downstream patches 401-409 here:

I would urge you to leave kernel 5.15 behind and focus on 6.6 and look at this patch set instead which introduces a new driver for the spi nand controller:

https://patchwork.kernel.org/project/linux-arm-msm/cover/20240922113351.2390195-1-quic_mdalam@quicinc.com/

1 Like

thank you for info. I'll look at it right away. I have started on 6.6 already, I just figured since nss stuff for 5018 is not working yet, I would do the 5.15 to get something going, as at the time it was more complete.

I'll have a look, but I assumed since I am working on a fork of hyztics tree these were included ?

Yes these patches are present, but ty regardless.

if you could be so kind, I did have one question about 407 as I noticed that the id for the W25N01GWZEIG was not included. However i was unsure if it needed to be defined here or not. Please see the 2 post i just restored above. If it needs to be added I was unsure of a few of the parameters being used. I will wait for conformation before I test the image, no sense in creating a recovery mission if it can be avoid.

All remnants of kernel v5.15 and v6.1 have been removed from OpenWrt/ main within the last couple of days, all new device support most now be v6.6 based (maybe v6.12 if it takes until ~next year).

1 Like

yes i realize that, but thank you. I already stated my reasons for messing with the 5.15. And if for nothing else i need a recovery image. Besides that, the work involved here is minimal,from what i can see, georgem83 and hzyitc have done all the real work. Aside for going through the patch work and re ... all I've had to add is the patch for the mp03.5-c1 config and minimal work on the dts.

@slh i do have question for you regarding directory structure and layout for the ipq50xx moving forward. Everyone seems to be using a little different layout and I am not sure which is correct. Also since the ipq5000 and ipq5018 are so similar, is it preferred to have them as one or should one use a sub ipq501x. I compile these questions into something legible and start a separate thread, hopefully everyone can agree to conform to some type of structure.

I'm not really into the details of ipq50xx, but - unless there are very strong reasons to do otherwise, the natural choice would be target/linux/qualcommax/ipq50xx, regardless of the question if ipq500x or ipq501x are support/ or not at this point. The plan is to make the cut where it makes sense, functionally, not to over-optimize, but not to hurt yourself either by trying to shoehorn SOCs that are 'too different' into one (imho they will rely on different *.dtsi, but otherwise require the same kernel config and -patches).

Case in point, the ip807x target does support ipq807x and ipq817x devices (Linksys MX4200).

Keep in mind, each additional target needs resources, on the maintenance side and on the buildbot one - so there needs to be a good reason to split SOCs, unless really sensible or necessary.

ipq53xx (wifi7 would be another case --> new subtarget).

again i'll start a seperate thread as to not muddle this one with the details but perhaps this will demonstrate my question ..

define Device/cmcc_rax3000q
  $(call Device/FitImage)
  $(call Device/UbiFit)
  SOC := ipq5000
  DEVICE_VENDOR := CMCC
  DEVICE_MODEL := RAX3000Q
  BLOCKSIZE := 128k
  PAGESIZE := 2048
  DEVICE_DTS_CONFIG := config@mp02.1
  IMAGES := nand-factory.ubi
  DEVICE_PACKAGES := \
	ath11k-firmware-ipq5018 \
	ath11k-firmware-qcn6122 \
	ipq-wifi-cmcc_rax3000q
endef
TARGET_DEVICES += cmcc_rax3000q

define Device/glinet_gl-b3000
  $(call Device/FitImage)
  $(call Device/UbiFit)
  SOC := ipq5018
  DEVICE_VENDOR := GL.iNET
  DEVICE_MODEL := GL-B3000
  BLOCKSIZE := 128k
  PAGESIZE := 2048
  DEVICE_DTS_CONFIG := config@mp03.5-c1
  IMAGES := nand-factory.ubi
  IMAGES := sysupgrade.tar nand-factory.bin
  IMAGE/sysupgrade.tar := sysupgrade-tar | append-metadata
  DEVICE_PACKAGES := \
  	ath11k1-firmware-ipq50xx-spruce \
  	ath11k1-firmware-qcn6122 \
  	ipq-wifi-glinet_gl-b3000
endef
TARGET_DEVICES += glinet_gl-b3000

define Device/redmi_ax3000
  $(call Device/FitImage)
  $(call Device/UbiFit)
  SOC := ipq5000
  DEVICE_VENDOR := Redmi
  DEVICE_MODEL := AX3000
  DEVICE_ALT0_VENDOR := Xiaomi
  DEVICE_ALT0_MODEL := CR880x
  DEVICE_ALT0_VARIANT := (M81 version)
  DEVICE_ALT1_VENDOR := Xiaomi
  DEVICE_ALT1_MODEL := CR880x
  DEVICE_ALT1_VARIANT := (M79 version)
  BLOCKSIZE := 128k
  PAGESIZE := 2048
  DEVICE_DTS_CONFIG := config@mp02.1
  IMAGES := nand-factory.ubi
  DEVICE_PACKAGES := \
	ath11k-firmware-ipq5018 \
	ath11k-firmware-qcn6122 \
	ipq-wifi-redmi_ax3000
endef
TARGET_DEVICES += redmi_ax3000

define Device/xiaomi_cr881x
  $(call Device/FitImage)
  $(call Device/UbiFit)
  SOC := ipq5018
  DEVICE_VENDOR := Xiaomi
  DEVICE_MODEL := CR881x
  BLOCKSIZE := 128k
  PAGESIZE := 2048
  DEVICE_DTS_CONFIG := config@mp03.3
  IMAGES := nand-factory.ubi
  DEVICE_PACKAGES := \
	ath11k-firmware-ipq5018 \
	ath11k-firmware-qcn6122 \
	ipq-wifi-xiaomi_cr881x
endef
TARGET_DEVICES += xiaomi_cr881x

all but the b3000 use the same config ... and same dtsi for that matter, the board dts are different of course. So to your response, these are simular enought to blanket them both in ipq50xx

and here is the typical layout i see being used pre 6.6

In 6.6 I have seen more of the target/linux/qualcommax/ipqXXX being used and that's how i've started in 6.6 so i will stick to it.

so when i look at the actual nand_ids.c it is already there

linux-5.15.150/drivers/mtd/nand/raw/nand_ids.c

{"W25N01GW SPI NAND 1.8V 1G-BIT",
		{ .id = {0xef, 0xba} },
		SZ_2K, SZ_128, SZ_128K, 0, 2, 64, NAND_ECC_INFO(4, SZ_512) },

I am confident i have everything in order ... progress hates a coward. I am going to send it

1 Like

so ..it boots with no wifi, I had a suspicion the "spruce stuff" would come into play.

Format: Log Type - Time(microsec) - Message - Optional InfoIPQ5018# tftpboot openwrt-ipq50xx-aarch64-glinet_gl-b3000-squashfs-nand-factory.ubi
eth0  Down Speed :10 Half duplex
Port1 Down Speed :10M Half duplex
Port3 Up Speed :100M Full duplex
Using eth1 device
TFTP from server 192.168.1.8; our IP address is 192.168.1.1
Filename 'openwrt-ipq50xx-aarch64-glinet_gl-b3000-squashfs-nand-factory.ubi'.
Load address: 0x42000000
Loading: *
Got TFTP_OACK: TFTP remote port: changes from 69 to 60780
#################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ##########
         2.4 MiB/s
done
Bytes transferred = 13500416 (ce0000 hex)
IPQ5018# flash rootfs

NAND erase: device 0 offset 0x800000, size 0x7800000
Erasing at 0x7fe0000 -- 100% complete.
OK

NAND write: device 0 offset 0x800000, size 0xce0000
 13500416 bytes written: OK
IPQ5018# setenv flag_try_sys1_failed 0
IPQ5018# setenv flag_boot_rootfs 0
IPQ5018# setenv flag_last_success 0
IPQ5018# saveenv
Saving Environment to NAND...
Erasing NAND...
Erasing at 0x320000 -- 100% complete.
Writing to NAND... OK
IPQ5018# reset
resetting ...

Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1.1-00081
S - IMAGE_VARIANT_STRING=MAACANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x000002c5
B -       128 - PBL, Start
B -      1563 - bootable_media_detect_entry, Start
B -      3286 - bootable_media_detect_success, Start
B -      3289 - elf_loader_entry, Start
B -      8205 - auth_hash_seg_entry, Start
B -      8565 - auth_hash_seg_exit, Start
B -     98107 - elf_segs_hash_verify_entry, Start
B -    168000 - PBL, End
B -    138317 - SBL1, Start
B -    199714 - GCC [RstStat:0x10, RstDbg:0x500100] WDog Stat : 0x4
B -    208071 - System Reset Reason : Power on Reset [0x20]
B -    212615 - clock_init, Start
D -      7625 - clock_init, Delta
B -    221582 - boot_flash_init, Start
D -     13725 - boot_flash_init, Delta
B -    235368 - boot_config_data_table_init, Start
D -      4514 - boot_config_data_table_init, Delta - (575 Bytes)
B -    242963 - Boot Setting :  0x00030618
B -    249520 - CDT version:2,Platform ID:8,Major ID:4,Minor ID:0,Subtype:4
B -    256413 - sbl1_ddr_set_params, Start
B -    258030 - Pre_DDR_clock_init, Start
B -    263703 - Pre_DDR_clock_init, End
B -    906368 - do ddr sanity test, Start
D -        30 - do ddr sanity test, Delta
B -    911035 - Image Load, Start
D -    242353 - QSEE Image Loaded, Delta - (584836 Bytes)
B -   1154242 - Image Load, Start
D -     12230 - DEVCFG Image Loaded, Delta - (13040 Bytes)
B -   1166533 - Image Load, Start
D -    181323 - APPSBL Image Loaded, Delta - (438578 Bytes)
B -   1347917 - QSEE Execution, Start
D -        61 - QSEE Execution, Delta
B -   1354383 - SBL1, End
D -   1218750 - SBL1, Delta
S - Flash Throughput, 2495 KB/s  (1037365 Bytes,  415706 us)
S - DDR Frequency, 800 MHz
S - Core 0 Frequency, 800 MHz


U-Boot 2016.01 (24.01.30 - 14:36:14 +0800)

DRAM:  smem ram ptable found: ver: 1 len: 4
512 MiB
NAND:  QPIC controller support serial NAND
ID = 21baef
Vendor = ef
Device = ba
Serial Nand Device Found With ID : 0xef 0xba
Serial NAND device Manufacturer:W25N01GWZEIG
Device Size:128 MiB, Page size:2048, Spare Size:64, ECC:4-bit
SF: Unsupported flash IDs: manuf 00, jedec 0000, ext_jedec 0000
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
128 MiB
MMC:   sdhci: Node Not found, skipping initialization

PCI Link Intialized
In:    serial@78AF000
Out:   serial@78AF000
Err:   serial@78AF000
machid: 8040004
eth0 MAC Address from ART is not valid

Net:   cmbblk is stable 5
MAC0 addr:0:11:22:33:44:55
PHY ID1: 0x4d
PHY ID2: 0xd0c0
MAC1 addr:94:83:c4:a4:a7:21
athrs17_reg_init: complete
athrs17_vlan_config ...done
S17c init  done
board_update_caldata: Unable to find slot-Id, Default CapIn/CapOut values used
eth0, eth1

Hit "gl" key to stop booting in 2 seconds



NAND read: device 0 offset 0x480000, size 0x70
 112 bytes read: OK
Device haven tested, checking MAC info...

NAND read: device 0 offset 0x480000, size 0x10
 16 bytes read: OK
Device don't have WAN MAC info, please write MAC in calibration firmware...
ubi0: attaching mtd1
ubi0: scanning is finished
ubi0: volume 2 ("rootfs_data") re-sized from 9 to 835 LEBs
ubi0: attached mtd1 (name "mtd=0", size 120 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 960, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 3, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 1711145382
ubi0: available PEBs: 0, total reserved PEBs: 960, PEBs reserved for bad PEB handling: 20
Read 0 bytes from volume kernel to 44000000
No size specified -> Using max size (4063232)
## Loading kernel from FIT Image at 44000000 ...
   Using 'config@mp03.5-c1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM64 OpenWrt Linux-5.15.150
     Type:         Kernel Image
     Compression:  lzma compressed
     Data Start:   0x440000ec
     Data Size:    3927694 Bytes = 3.7 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x41000000
     Entry Point:  0x41000000
     Hash algo:    crc32
     Hash value:   74f3d11f
     Hash algo:    sha1
     Hash value:   5a065f9de0585cbc12fa821068e053c86da6209b
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 44000000 ...
   Using 'config@mp03.5-c1' configuration
   Trying 'fdt-1' fdt subimage
     Description:  ARM64 OpenWrt glinet_gl-b3000 device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x443bf0bc
     Data Size:    18663 Bytes = 18.2 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   c9d5eef3
     Hash algo:    sha1
     Hash value:   969644d6393784a722e6461930037f2feaf135bb
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x443bf0bc
   Uncompressing Kernel Image ... OK
   Loading Device Tree to 4a3f8000, end 4a3ff8e6 ... OK
Using machid 0x8040004 from environment

Starting kernel ...

Jumping to AARCH64 kernel via monitor
[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x51af8014]
[    0.000000] Linux version 5.15.150 (hostle@hostle-Satellite-C670) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 12.3.0 r23809-234f1a2efa) 12.3                                                                                             .0, GNU ld (GNU Binutils) 2.40.0) #0 SMP PREEMPT Fri Mar 22 22:09:42 2024
[    0.000000] Machine model: GL.iNet B3000
[    0.000000] OF: reserved mem: OVERLAP DETECTED!
[    0.000000] q6_code_data@4B000000 (0x000000004b000000--0x000000004b060000) overlaps with q6_mem_regions@4B000000 (0x000000004b000000--0x00000                                                                                             0004fd00000)
[    0.000000] OF: reserved mem: OVERLAP DETECTED!
[    0.000000] q6_mem_regions@4B000000 (0x000000004b000000--0x000000004fd00000) overlaps with q6_ipq5018_data@4C400000 (0x000000004c400000--0x00                                                                                             0000004d100000)
[    0.000000] Zone ranges:
[    0.000000]   DMA      [mem 0x0000000040000000-0x000000005fffffff]
[    0.000000]   DMA32    empty
[    0.000000]   Normal   empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000040000000-0x000000004aafffff]
[    0.000000]   node   0: [mem 0x000000004ab00000-0x000000004fcfffff]
[    0.000000]   node   0: [mem 0x000000004fd00000-0x000000005fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000005fffffff]
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv1.0 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.
[    0.000000] psci: SMC Calling Convention v1.0
[    0.000000] psci: OSI mode supported.
[    0.000000] percpu: Embedded 22 pages/cpu s49752 r8192 d32168 u90112
[    0.000000] Detected VIPT I-cache on CPU0
[    0.000000] CPU features: detected: Spectre-v4
[    0.000000] CPU features: kernel page table isolation disabled by kernel configuration
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 129024
[    0.000000] Kernel command line: console=ttyMSM0,115200n8 ubi.mtd=rootfs root=mtd:ubi_rootfs rootfstype=squashfs rootwait root=/dev/ubiblock0_1 swiotlb=1 coherent_pool=2M
[    0.000000] Dentry cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[    0.000000] Inode-cache hash table entries: 32768 (order: 6, 262144 bytes, linear)
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 419188K/524288K available (7744K kernel code, 904K rwdata, 2368K rodata, 384K init, 287K bss, 105100K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] rcu: Preemptible hierarchical RCU implementation.
[    0.000000]  Trampoline variant of Tasks RCU enabled.
[    0.000000]  Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[    0.000000] Root IRQ handler: gic_handle_irq
[    0.000000] GICv2m: range[mem 0x0b00a000-0x0b00affc], SPI[448:479]
[    0.000000] GICv2m: range[mem 0x0b00b000-0x0b00bffc], SPI[480:511]
[    0.000000] arch_timer: cp15 and mmio timer(s) running at 24.00MHz (virt/virt).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x588fe9dc0, max_idle_ns: 440795202592 ns
[    0.000000] sched_clock: 56 bits at 24MHz, resolution 41ns, wraps every 4398046511097ns
[    0.000280] Calibrating delay loop (skipped), value calculated using timer frequency.. 48.00 BogoMIPS (lpj=240000)
[    0.000301] pid_max: default: 32768 minimum: 301
[    0.000786] Mount-cache hash table entries: 1024 (order: 1, 8192 bytes, linear)
[    0.000808] Mountpoint-cache hash table entries: 1024 (order: 1, 8192 bytes, linear)
[    0.004313] rcu: Hierarchical SRCU implementation.
[    0.005164] smp: Bringing up secondary CPUs ...
[    0.006247] Detected VIPT I-cache on CPU1
[    0.006330] CPU1: Booted secondary processor 0x0000000001 [0x51af8014]
[    0.006549] smp: Brought up 1 node, 2 CPUs
[    0.006579] SMP: Total of 2 processors activated.
[    0.006588] CPU features: detected: 32-bit EL0 Support
[    0.006596] CPU features: detected: CRC32 instructions
[    0.006681] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[    0.006692] CPU: All CPU(s) started at EL1
[    0.006719] alternatives: patching kernel code
[    0.012856] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.012892] futex hash table entries: 512 (order: 3, 32768 bytes, linear)
[    0.013176] pinctrl core: initialized pinctrl subsystem
[    0.015264] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.016299] DMA: preallocated 2048 KiB GFP_KERNEL pool for atomic allocations
[    0.016648] DMA: preallocated 2048 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[    0.016969] DMA: preallocated 2048 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[    0.017575] thermal_sys: Registered thermal governor 'step_wise'
[    0.017586] thermal_sys: Registered thermal governor 'user_space'
[    0.018062] cpuidle: using governor ladder
[    0.018120] cpuidle: using governor menu
[    0.018405] NET: Registered PF_QIPCRTR protocol family
[    0.018664] hw-breakpoint: found 6 breakpoint and 4 watchpoint registers.
[    0.018806] ASID allocator initialised with 65536 entries
[    0.076789] qcom,gcc-ipq5018 1800000.gcc: Registered ipq5018 GCC clocks provider
[    0.118877] pps_core: LinuxPPS API ver. 1 registered
[    0.118894] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    0.118921] PTP clock support registered
[    0.119199] qcom_scm: convention: smc arm 64
[    0.119796] Advanced Linux Sound Architecture Driver Initialized.
[    0.121184] clocksource: Switched to clocksource arch_sys_counter
[    0.122507] NET: Registered PF_INET protocol family
[    0.122695] IP idents hash table entries: 8192 (order: 4, 65536 bytes, linear)
[    0.123614] tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.123651] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.123670] TCP established hash table entries: 4096 (order: 3, 32768 bytes, linear)
[    0.123724] TCP bind hash table entries: 4096 (order: 4, 65536 bytes, linear)
[    0.123815] TCP: Hash tables configured (established 4096 bind 4096)
[    0.123978] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.124016] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.124323] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.124381] PCI: CLS 0 bytes, default 64
[    0.125723] hw perfevents: enabled with armv8_cortex_a53 PMU driver, 7 counters available
[    0.127473] workingset: timestamp_bits=46 max_order=17 bucket_order=0
[    0.134852] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.134875] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.189232] Key type asymmetric registered
[    0.189263] Asymmetric key parser 'x509' registered
[    0.197511] msm_serial 78af000.serial: msm_serial: detected port #0
[    0.197564] msm_serial 78af000.serial: uartclk = 1843199
[    0.197625] 78af000.serial: ttyMSM0 at MMIO 0x78af000 (irq = 18, base_baud = 115199) is a MSM
[    0.197667] msm_serial: console setup on port #0
[    0.842060] printk: console [ttyMSM0] enabled
[    0.847265] msm_serial: driver initialized
[    0.863682] brd: module loaded
[    0.869238] loop: module loaded
[    0.870990] ipq5018-pinctrl 1000000.pinctrl: invalid function qspi_data in map table
[    0.871265] ipq5018-pinctrl 1000000.pinctrl: invalid function qspi_data in map table
[    0.879180] ipq5018-pinctrl 1000000.pinctrl: invalid function qspi_data in map table
[    0.886966] ipq5018-pinctrl 1000000.pinctrl: invalid function qspi_data in map table
[    0.895296] nand: device found, Manufacturer ID: 0xef, Chip ID: 0xba
[    0.902415] nand: Winbond W25N01GW SPI NAND 1.8V 1G-BIT
[    0.908677] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    0.913658] QPIC controller hw version Major:2, Minor:1
[    0.921413] 12 fixed-partitions partitions found on MTD device qcom_nand.0
[    0.926390] Creating 12 MTD partitions on "qcom_nand.0":
[    0.933366] 0x000000000000-0x000000080000 : "0:SBL1"
[    0.940146] 0x000000080000-0x000000100000 : "0:MIBIB"
[    0.945102] 0x000000100000-0x000000140000 : "0:BOOTCONFIG"
[    0.949642] 0x000000140000-0x000000240000 : "0:QSEE"
[    0.956088] 0x000000240000-0x000000280000 : "0:DEVCFG"
[    0.960180] 0x000000280000-0x0000002c0000 : "0:CDT"
[    0.965206] 0x0000002c0000-0x000000340000 : "0:APPSBLENV"
[    0.970256] 0x000000340000-0x000000480000 : "0:APPSBL"
[    0.976761] 0x000000480000-0x000000580000 : "0:ART"
[    0.981491] 0x000000580000-0x000000600000 : "0:TRAINING"
[    0.985579] 0x000000600000-0x000000800000 : "CFG"
[    0.992948] 0x000000800000-0x000008000000 : "rootfs"
[    1.133062] mtd: setting mtd11 (rootfs) as root device
[    1.133539] mtdsplit: no squashfs found in "rootfs"
[    1.287580] i2c_dev: i2c /dev entries driver
[    1.288540] cpufreq: cpufreq_online: CPU0: Running at unlisted initial frequency: 24000 KHz, changing to: 800000 KHz
[    1.291385] sdhci: Secure Digital Host Controller Interface driver
[    1.301448] sdhci: Copyright(c) Pierre Ossman
[    1.307405] sdhci-pltfm: SDHCI platform and OF driver helper
[    1.313623] remoteproc remoteproc0: releasing cd00000.remoteproc
[    1.318560]  cs_system_cfg: CoreSight Configuration manager initialised
[    1.325539] NET: Registered PF_INET6 protocol family
[    1.331629] Segment Routing with IPv6
[    1.335165] In-situ OAM (IOAM) with IPv6
[    1.338749] NET: Registered PF_PACKET protocol family
[    1.342795] 8021q: 802.1Q VLAN Support v1.8
[    1.370301] remoteproc remoteproc0: cd00000.remoteproc is available
[    1.371761] remoteproc remoteproc1: 4ab000.remoteproc_pd1 is available
[    1.376919] remoteproc remoteproc2: cd00000.remoteproc:remoteproc_pd2 is available
[    1.383497] remoteproc remoteproc3: cd00000.remoteproc:remoteproc_pd3 is available
[    1.390564] ubi0: attaching mtd11
[    1.946123] ubi0: scanning is finished
[    1.956717] ubi0: attached mtd11 (name "rootfs", size 120 MiB)
[    1.956754] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    1.961511] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    1.968303] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    1.975185] ubi0: good PEBs: 960, bad PEBs: 0, corrupted PEBs: 0
[    1.981945] ubi0: user volume: 3, internal volumes: 1, max. volumes count: 128
[    1.988183] ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 1711145382
[    1.995229] ubi0: available PEBs: 0, total reserved PEBs: 960, PEBs reserved for bad PEB handling: 20
[    2.004548] ubi0: background thread "ubi_bgt0d" started, PID 86
[    2.016799] block ubiblock0_1: created from ubi0:1(rootfs)
[    2.019948] ALSA devi▒[    2.042145] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    2.042417] Freeing unused kernel memory: 384K
[    2.091238] Run /sbin/init as init process
[    2.461631] init: Console is alive
[    3.001229] random: crng init done
[    3.465891] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    3.505727] ssdk_switch_device_num_init[1335]:INFO:ess-switch dts node number: 2
[    3.505828] ssdk_dt_get_switch_node[1124]:INFO:ess-switch DT exist!
[    3.512450] ssdk_dt_parse_access_mode[999]:INFO:switch_access_mode: local bus
[    3.518277] ssdk_dt_parse_access_mode[1012]:INFO:switchreg_base_addr: 0x39c00000
[    3.525555] ssdk_dt_parse_access_mode[1013]:INFO:switchreg_size: 0x200000
[    3.532987] ssdk_dt_parse_mac_mode[327]:INFO:mac mode = 0xf
[    3.539628] ssdk_dt_parse_mac_mode[333]:INFO:mac mode1 doesn't exit!
[    3.545035] ssdk_dt_parse_mac_mode[342]:INFO:mac mode2 doesn't exit!
[    3.551650] ssdk_dt_parse_port_bmp[899]:INFO:port_bmp doesn't exist!
[    3.558011] ssdk_dt_parse_uniphy[364]:INFO:ess-uniphy DT exist!
[    3.564351] ssdk_dt_parse_led[1097]:INFO:current dts led_source_num is 1
[    3.569941] ssdk_plat_init[1692]:INFO:ssdk_plat_init start
[    6.111221] ssdk_mp_reset_init[837]:INFO:MP reset successfully!
[    6.111298] ssdk_gcc_clock_init[1275]:INFO:SSDK gcc clock init successfully!
[    6.116523] mpge_phy_api_ops_init[1092]:INFO:qca probe mpge phy driver succeeded!
[    6.124065] regi_init[3981]:INFO:Initializing SCOMPHY!
[    6.495217] _adpt_mp_uniphy_clk_output_ctrl_set[238]:INFO:uniphy will output clock as 25000000Hz
[    6.495279] ssdk_led_init[151]:INFO:ssdk_led_mode:3, ssdk_led_map:ffc, ssdk_led_src_id:0
[    6.503317] ssdk_switch_register[2006]:INFO:Chip version 0xee
[    6.511200] qca_link_polling_select[1484]:INFO:link-polling-required node does not exist
[    6.516788] ssdk_switch_register[2040]:INFO:polling is selected
[    6.524957] regi_init[3991]:INFO:Initializing SCOMPHY Done!!
[    6.530662] ssdk_dt_get_switch_node[1124]:INFO:ess-switch DT exist!
[    6.536512] ssdk_dt_parse_access_mode[999]:INFO:switch_access_mode: mdio
[    6.542496] ssdk_dt_parse_mac_mode[324]:INFO:mac mode doesn't exit!
[    6.549425] ssdk_dt_parse_mac_mode[333]:INFO:mac mode1 doesn't exit!
[    6.555437] ssdk_dt_parse_mac_mode[342]:INFO:mac mode2 doesn't exit!
[    6.562061] ssdk_dt_parse[1228]:INFO:switch node is qca83xx!
[    6.568348] ssdk_plat_init[1692]:INFO:ssdk_plat_init start
[    6.646234] f1_phy_api_ops_init[1603]:INFO:qca probe f1 phy driver succeeded!
[    6.646268] regi_init[3920]:INFO:Initializing ISISC!!
[    6.901188] qca_ar8327_gpio_reset[3853]:INFO:GPIO504 reset switch done
[    6.901441] ssdk_switch_register[2014]:INFO:Chip version 0x1302
[    6.906651] qca_link_polling_select[1484]:INFO:link-polling-required node does not exist
[    6.912454] ssdk_switch_register[2040]:INFO:polling is selected
[    8.661186] regi_init[3925]:INFO:Initializing ISISC Done!!
[    8.661346] regi_init[4017]:INFO:qca-ssdk module init succeeded!
[    8.667932] (unnamed net_device) (uninitialized): nss_dp_gmac: Registering netdev eth%d(qcom-id:1) with GMAC, mac_base: 0xffffffc009240000
[    8.674638] eth0: Registered netdev eth0(qcom-id:1)
[    8.684519] (unnamed net_device) (uninitialized): nss_dp_gmac: Registering netdev eth%d(qcom-id:2) with GMAC, mac_base: 0xffffffc0092f0000
[    8.690108] eth1: Registered netdev eth1(qcom-id:2)
[    8.701661] **********************************************************
[    8.706018] * NSS Data Plane driver
[    8.712736] **********************************************************
[    8.716543] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    8.729656] init: - preinit -
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[   11.599900] UBIFS (ubi0:2): default file-system created
[   11.600690] UBIFS (ubi0:2): Mounting in unauthenticated mode
[   11.604258] UBIFS (ubi0:2): background thread "ubifs_bgt0_2" started, PID 176
[   11.685544] UBIFS (ubi0:2): UBIFS: mounted UBI device 0, volume 2, name "rootfs_data"
[   11.685591] UBIFS (ubi0:2): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[   11.692428] UBIFS (ubi0:2): FS size: 104628224 bytes (99 MiB, 824 LEBs), max 835 LEBs, journal size 5206016 bytes (4 MiB, 41 LEBs)
[   11.702288] UBIFS (ubi0:2): reserved for root: 4941849 bytes (4826 KiB)
[   11.713906] UBIFS (ubi0:2): media format: w5/r0 (latest is w5/r0), UUID 0558FBA0-EF4C-40A1-8530-4A1767165927, small LPT model
[   11.722829] mount_root: overlay filesystem has not been fully initialized yet
[   11.732709] mount_root: switching to ubifs overlay
[   11.743011] overlayfs: null uuid detected in lower fs '/', falling back to xino=off,index=off,nfs_export=off.
[   11.746542] urandom-seed: Seed file not found (/etc/urandom.seed)
[   11.837264] procd: - early -
[   12.453757] procd: - ubus -
[   12.522722] procd: - init -
Please press Enter to activate this console.
[   12.999522] kmodloader: loading kernel modules from /etc/modules.d/*
[   13.052620] l2tp_core: L2TP core driver, V2.0
[   13.054293] l2tp_netlink: L2TP netlink interface
[   13.060119] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver
[   13.085260] nat46: module (version 4c5beee236841724219598fabb1edc93d4f08ce5) loaded.
[   13.087050] gre: GRE over IPv4 demultiplexor driver
[   13.094140] ip_gre: GRE over IPv4 tunneling driver
[   13.117459] ip6_gre: GRE over IPv6 tunneling driver
[   13.132766] Loading modules backported from Linux version v6.1.24-0-g0102425ac76b
[   13.132803] Backport generated by backports.git v5.15.92-1-44-gd6ea70fafd36
[   13.237606] xt_time: kernel timezone is -0000
[   13.355409] PPP generic driver version 2.4.2
[   13.362886] NET: Registered PF_PPPOX protocol family
[   13.367259] PPTP driver version 0.8.5
[   13.409266] ath11k c000000.wifi: ipq5018 hw1.0
[   13.409308] ath11k c000000.wifi: FW memory mode: 0
[   13.413260] remoteproc remoteproc1: powering up 4ab000.remoteproc_pd1
[   13.451623] urngd: v1.0.2 started.
[   13.475234] remoteproc remoteproc1: Booting fw image IPQ5018/q6_fw.mdt, size 1820
[   13.475310] remoteproc remoteproc0: powering up cd00000.remoteproc
[   13.491519] remoteproc remoteproc0: Booting fw image IPQ5018/q6_fw.mdt, size 1820
[   15.827579] remoteproc remoteproc0: remote processor cd00000.remoteproc is now up
[   15.841397] remoteproc remoteproc1: remote processor 4ab000.remoteproc_pd1 is now up
[   15.879688] ath11k c000000.wifi: qmi fail to get qcom,m3-dump-addr, ignore m3 dump mem req
[   15.882968] qcom-q6-mpd cd00000.remoteproc: fatal error received: err_smem_ver.2.1:
[   15.882968] QC Image Version : QC_IMAGE_VERSION_STRING=WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
[   15.882968] Image Variant : IMAGE_VARIANT_STRING=5018.wlanfw2.map_spr_spr_evalQ
[   15.882968] platform.c:717 Assertion 0 failed param0 :zero,param1 :zero,param2 :zero
[   15.882968] Thread ID : 0x0000005b Thread name : wlan_platform Process ID : 0x00000001 Process name :wlan0
[   15.882968]
[   15.882968] Registers:
[   15.882968] SP : 0x4c296f10
[   15.882968] FP : 0x4c296f38
[   15.882968] PC : 0xb023e830
[   15.882968] SSR : 0x00000000
[   15.882968] BADVA : 0x00000000
[   15.882968] LR : 0xb022e260
[   15.882968]
[   15.882968] StackDump
[   15.882968] from:0x4c296f10
[   15.882968] to: 0x00000000:
[   15.882968]
[   15.937505] remoteproc remoteproc0: crash detected in cd00000.remoteproc: type fatal error
[   15.959794] remoteproc remoteproc0: handling crash #1 in cd00000.remoteproc
[   15.968208] remoteproc remoteproc0: recovering cd00000.remoteproc
[   15.981263] remoteproc remoteproc0: stopped remote processor cd00000.remoteproc
[   16.095130] remoteproc remoteproc0: remote processor cd00000.remoteproc is now up
[   26.071207] ath11k c000000.wifi: failed to wait qmi memory request: -110
[   26.071253] ath11k c000000.wifi: qmi failed to respond fw mem req: -110
[   79.831202] ath11k c000000.wifi: Coldboot Calibration timed out
[   79.832097] ath11k soc:wifi1@c000000: qcn6122
[   79.835932] ath11k soc:wifi1@c000000: FW memory mode: 1
[   79.840908] remoteproc remoteproc3: powering up cd00000.remoteproc:remoteproc_pd3
[   79.845684] remoteproc remoteproc3: Booting fw image IPQ5018/q6_fw.mdt, size 1820
[   79.855868] remoteproc remoteproc3: remote processor cd00000.remoteproc:remoteproc_pd3 is now up
[   79.951904] ath11k soc:wifi1@c000000: qmi fail to get qcom,m3-dump-addr, ignore m3 dump mem req
[   79.951957] ath11k soc:wifi1@c000000: qmi ignore invalid mem req type 10
[   79.961927] qcom-q6-mpd cd00000.remoteproc: fatal error received: err_smem_ver.2.1:
[   79.961927] QC Image Version : QC_IMAGE_VERSION_STRING=WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
[   79.961927] Image Variant : IMAGE_VARIANT_STRING=5018.wlanfw2.map_spr_spr_evalQ
[   79.961927] platform.c:717 Assertion 0 failed param0 :zero,param1 :zero,param2 :zero
[   79.961927] Thread ID : 0x00000059 Thread name : wlan_platform Process ID : 0x00000003 Process name :wlan2
[   79.961927]
[   79.961927] Registers:
[   79.961927] SP : 0x4c29b480
[   79.961927] FP : 0x4c29b4a8
[   79.961927] PC : 0xd025bc70
[   79.961927] SSR : 0x00000000
[   79.961927] BADVA : 0x00000000
[   79.961927] LR : 0xd0249f98
[   79.961927]
[   79.961927] StackDump
[   79.961927] from:0x4c29b480
[   79.961927] to: 0x00000000:
[   79.961927]
[   80.016846] remoteproc remoteproc0: crash detected in cd00000.remoteproc: type fatal error
[   80.039122] remoteproc remoteproc0: handling crash #2 in cd00000.remoteproc
[   80.047544] remoteproc remoteproc0: recovering cd00000.remoteproc
[   80.060541] remoteproc remoteproc0: stopped remote processor cd00000.remoteproc
[   80.174677] remoteproc remoteproc0: remote processor cd00000.remoteproc is now up
[   90.071205] ath11k soc:wifi1@c000000: failed to wait qmi memory request: -110
[   90.071255] ath11k soc:wifi1@c000000: qmi failed to respond fw mem req: -110
[  141.271202] ath11k soc:wifi1@c000000: Coldboot Calibration timed out
[  141.279893] kmodloader: done loading kernel modules from /etc/modules.d/*
[  151.939845] br-lan: port 1(eth0) entered blocking state
[  151.939903] br-lan: port 1(eth0) entered disabled state
[  151.952839] device eth0 entered promiscuous mode
[  152.951435] br-lan: port 1(eth0) entered blocking state
[  152.951488] br-lan: port 1(eth0) entered forwarding state
[  152.960769] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready



BusyBox v1.36.1 (2024-03-22 22:09:42 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 23.05.3, r23809-234f1a2efa
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# ifconfig
br-lan    Link encap:Ethernet  HWaddr 00:11:22:33:44:55
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fddc:2b5c:ae8f::1/60 Scope:Global
          inet6 addr: fe80::211:22ff:fe33:4455/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:10 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:1588 (1.5 KiB)

eth0      Link encap:Ethernet  HWaddr 00:11:22:33:44:55
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:18 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:4262 (4.1 KiB)
          Interrupt:75

eth1      Link encap:Ethernet  HWaddr 94:83:C4:A4:A7:21
          inet6 addr: fe80::9683:c4ff:fea4:a721/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:200 errors:107 dropped:110 overruns:107 frame:0
          TX packets:25 errors:107 dropped:0 overruns:107 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:32493 (31.7 KiB)  TX bytes:5386 (5.2 KiB)
          Interrupt:76

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:88 errors:0 dropped:0 overruns:0 frame:0
          TX packets:88 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:6864 (6.7 KiB)  TX bytes:6864 (6.7 KiB)

the relevant part of the error

 remoteproc remoteproc3: powering up cd00000.remoteproc:remoteproc_pd3
[   79.845684] remoteproc remoteproc3: Booting fw image IPQ5018/q6_fw.mdt, size 1820
[   79.855868] remoteproc remoteproc3: remote processor cd00000.remoteproc:remoteproc_pd3 is now up
[   79.951904] ath11k soc:wifi1@c000000: qmi fail to get qcom,m3-dump-addr, ignore m3 dump mem req
[   79.951957] ath11k soc:wifi1@c000000: qmi ignore invalid mem req type 10
[   79.961927] qcom-q6-mpd cd00000.remoteproc: fatal error received: err_smem_ver.2.1:
[   79.961927] QC Image Version : QC_IMAGE_VERSION_STRING=WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
[   79.961927] Image Variant : IMAGE_VARIANT_STRING=5018.wlanfw2.map_spr_spr_evalQ
[   79.961927] platform.c:717 Assertion 0 failed param0 :zero,param1 :zero,param2 :zero

I am using the board.bins from the origional firmware, it would appear as tho i must use the ath11k-ipq5018-spruce firmware (which compiles fine) but the throw the same error. I think i should be using this one instead ...

Package: ath11k1-firmware-ipq50xx-map-spruce
Version: 19
Depends: libc
Source: package/firmware/ath11k1-firmware
SourceName: ath11k1-firmware-ipq50xx-map-spruce
Section: firmware
SourceDateEpoch: 1725492877
Maintainer: John Crispin <john@phrozen.org>
Architecture: aarch64_cortex-a53
Installed-Size: 4454804
Description:  Standard ath11k1 firmware for IPQ50xx+spruce from QCA

I will test this later, in any case,

ipq5018-map-spruce 
fw-firmware version:  WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1 v1
ipq5018-map-spruce m3_fw.flist
build/ms/bin/5018.wlanfw2.map_spr_spr_eval_cs/PIL_IMAGES/qcn6122/m3_fw.b00
build/ms/bin/5018.wlanfw2.map_spr_spr_eval_cs/PIL_IMAGES/qcn6122/m3_fw.b01
build/ms/bin/5018.wlanfw2.map_spr_spr_eval_cs/PIL_IMAGES/qcn6122/m3_fw.b02