Have a look in the stock bootlog, device ist using the HK01-C5 dts
Using 'config@hk01.c5' configuration
Machine: Qualcomm Technologies, Inc. IPQ807x/AP-HK01-C5
And please keep in mind, the stock dts contains a heavily modified QSDK-based device-tree.
Almost no part of the dts-definitions can be used in the OpenWrt upstream kernel (at least not just as c&p)
1 Like
Oops, I'm new here 
04_dtbdump_Qualcomm_Technologies,_Inc._IPQ807x_AP-HK01-C5.dts
[pydtc] Execution Error !
< /: 2 props, 0 nodes >: "" property already exists
That might be related to your python version....
I'm using 3.11.4 and pydtc installed via pip.
Works for me.
EDIT:
I'm using the fdt pip module, it also contains pydtc.
1 Like
I come up with this:
Add support for TP-Link x80-5g · professor-jonny/pj_openwrt@e1d1f15 (github.com)
I'm trying to build it but I do get an error:
Makefile:192: *** Package/ipq-wifi-tplink_x80-5g| is missing the TITLE field. Stop.
I'm assuming this is because there is no upstream board.bin ? I'm guessing I need to comment out the wifi till I get a dump to submit ?
I'm not having luck to get my device to boot into command in U-Boot, I have tried altering the pullup to 5k ohm as Stifilz has but I just get giberish.
1 Like
How to I create the BDF files and Caldata ?
I'm guessing I obtain the files in lib/firmware
Clone https://github.com/qca/qca-swiss-army-knife.git
Create board.json
Then run:
python3 tools/scripts/ath10k/ath10k-bdencoder -c board.json
For the caldata I have to strip this from the ART partition on the OEM Nand How do I go about doing this ?
Hi Jonny,
I've been able to get this working on another device (I have 3 total) that is running the 1.0.3 FW with another adapter (same as below).
I am using a very cheap "FT232RL serial port module USB to TTL serial port small board 5V 3.3V 1.8V level Download the burn line" adapter and some generic resistors (2x 10K ohm making 5K ohm).
Here are my voltage readings on the Deco.
VCC 1.6v-1.7v (ignored, only for reference)
TX 1.6v-1.7v
RX 0.9v-1.0v (1.6v-1.7v on the adapter side of resistors)
Also, RX is reading 0.8v with only one 10K ohm connected.
For TPL command, I start spamming it from boot, as below.
DRAM: smem ram ptable found: ver: 1 len: 4
1 GiB
NAND: Could not find nand_gpio in dts, using defaults
ONFI device found
ID = 158061c8
Vendor = c8
Device = 61
tpl
tpl
tpl
In the meantime, let me know what you need. I'm NZST time zone and check this page regulary and have subscribed.
I'm in nz too, I have that exzact serial adaptor and have tried a few resistor values but I lack parts at home to extensivly test.
Ill pick up a scope and check bias when i get around to it.
If I'm in a console if I type a key most of the time it shows correct input except when there is rx data then there is giberish and seemingly incorect key presses.
Would you have a pic of your setup?
Once I hobble an image ill post it for you to dump firmware I will just remove the wifi stuff and it should build.
Is yours echoing tpl in the comnand window from boot ? Or only after kernel start ?
I was getting bad feedback when I was using jumper wires (with aligator clips in between).
Here is my very crude set up. Excuse the hot glue, I broke the headers off on the other 2x Decos.Makes for a fun probe approach (see pic 3)
Close up of resistors in action
For clarity:
TTL Ground Green Wire -- Deco Ground (Direct)
TTL Rx Orange Wire -- Deco Tx (Direct)
TTL Tx Yellow Wire -- Deco Rx Yellow Wire
TTL 1.8v VCC Red Wire -- 2x 10K ohm (5K ohm) resistor -- Between Yellow Wires (TTL and Deco)
Very crude set up as header pins broke off. (this was causing bad feedback when the aligator leads were in line. Now they are just connecting the wires to the probes)
tpl always shows for me as I am using Putty with the following settings:
Terminal >Line Discipline options
Local Echo = "Force On"
Local line editing = "Force On"
When I was running 1x 10K resistor I could only get into failsafe or the "login" prompt at full boot.
tpl was not working with only 1x 10k resistor.
Your one is still confusing me. It should work!
I'd try on my 3rd Deco and I'm sure it would work, except it is in use.
Did you check voltage? I read a post somewhere about it and that's what gave me the idea to try another resistor and checked voltage. To my supprise it worked
1 Like
I have created an intraramfs image for you to try hopefully this should fix the network and log spam problems.
I still need dumps of the board firmware so I can get Wi-Fi working, but hopefully this will make the Ethernet ports operate so we can do that and mount the Nand so we can poke around and maybe reset the root password?
With dumps we might be able to pass them on to @naf to see if the http tplink U-Boot exploit can be made to work on this device.
1 Like
Boots fine. No network, unless I am missing something?
Can you point me in the direction of mounding Nand? Previously only worked with NOR.
Bootlog
## Loading kernel from FIT Image at 44000000 ...
Using 'config@hk01.c5' configuration
Trying 'kernel-1' kernel subimage
Description: ARM64 OpenWrt Linux-6.6.40
Type: Kernel Image
Compression: gzip compressed
Data Start: 0x440000e8
Data Size: 12741997 Bytes = 12.2 MiB
Architecture: AArch64
OS: Linux
Load Address: 0x41000000
Entry Point: 0x41000000
Hash algo: crc32
Hash value: 9edc01cc
Hash algo: sha1
Hash value: 7852c830813d8003576d729254635f3a29f11723
Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 44000000 ...
Using 'config@hk01.c5' configuration
Trying 'fdt-1' fdt subimage
Description: ARM64 OpenWrt tplink_x80-5g device tree blob
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x44c26f98
Data Size: 43373 Bytes = 42.4 KiB
Architecture: AArch64
Hash algo: crc32
Hash value: 30da71cf
Hash algo: sha1
Hash value: 225d31000855429ba54b6c09307592736847f48a
Verifying Hash Integrity ... crc32+ sha1+ OK
Booting using the fdt blob at 0x44c26f98
Uncompressing Kernel Image ... OK
Loading Device Tree to 4a3f2000, end 4a3ff96c ... OK
Could not find PCI in device tree
Using machid 0x8010400 from environment
Starting kernel ...
Jumping to AARCH64 kernel via monitor
[ 0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[ 0.000000] Linux version 6.6.40 (professor_jonny@MRSPARKLE) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 13.3.0 r26970-e6c9264351) 13.3.0, GNU ld (GNU Binutils) 2.42) #0 SMP Sat Jul 20 12:37:08 2024
[ 0.000000] Machine model: tplink x80-5g
[ 0.000000] OF: reserved mem: 0x0000000040000000..0x0000000040ffffff (16384 KiB) nomap non-reusable nss@40000000
[ 0.000000] OF: reserved mem: 0x000000004a400000..0x000000004a5fffff (2048 KiB) nomap non-reusable tzapp@4a400000
[ 0.000000] OF: reserved mem: 0x000000004a600000..0x000000004a9fffff (4096 KiB) nomap non-reusable bootloader@4a600000
[ 0.000000] OF: reserved mem: 0x000000004aa00000..0x000000004aafffff (1024 KiB) nomap non-reusable sbl@4aa00000
[ 0.000000] OF: reserved mem: 0x000000004ab00000..0x000000004abfffff (1024 KiB) nomap non-reusable smem@4ab00000
[ 0.000000] OF: reserved mem: 0x000000004ac00000..0x000000004affffff (4096 KiB) nomap non-reusable memory@4ac00000
[ 0.000000] OF: reserved mem: 0x000000004b000000..0x0000000050efffff (97280 KiB) nomap non-reusable wcnss@4b000000
[ 0.000000] OF: reserved mem: 0x0000000050f00000..0x0000000050ffffff (1024 KiB) nomap non-reusable q6_etr_dump@50f00000
[ 0.000000] OF: reserved mem: 0x0000000051000000..0x00000000510fffff (1024 KiB) nomap non-reusable m3_dump@51000000
[ 0.000000] Zone ranges:
[ 0.000000] DMA [mem 0x0000000040000000-0x000000007fffffff]
[ 0.000000] DMA32 empty
[ 0.000000] Normal empty
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000040000000-0x0000000040ffffff]
[ 0.000000] node 0: [mem 0x0000000041000000-0x000000004a3fffff]
[ 0.000000] node 0: [mem 0x000000004a400000-0x00000000510fffff]
[ 0.000000] node 0: [mem 0x0000000051100000-0x000000007fffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000007fffffff]
[ 0.000000] psci: probing for conduit method from DT.
[ 0.000000] psci: PSCIv1.0 detected in firmware.
[ 0.000000] psci: Using standard PSCI v0.2 function IDs
[ 0.000000] psci: MIGRATE_INFO_TYPE not supported.
[ 0.000000] psci: SMC Calling Convention v1.0
[ 0.000000] percpu: Embedded 18 pages/cpu s35240 r8192 d30296 u73728
[ 0.000000] Detected VIPT I-cache on CPU0
[ 0.000000] alternatives: applying boot alternatives
[ 0.000000] Kernel command line: root=/dev/ubiblock0_1
[ 0.000000] Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes, linear)
[ 0.000000] Inode-cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 258048
[ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[ 0.000000] software IO TLB: SWIOTLB bounce buffer size adjusted to 1MB
[ 0.000000] software IO TLB: area num 4.
[ 0.000000] software IO TLB: mapped [mem 0x000000007eb00000-0x000000007ec00000] (1MB)
[ 0.000000] Memory: 878372K/1048576K available (8128K kernel code, 892K rwdata, 2476K rodata, 8896K init, 276K bss, 170204K reserved, 0K cma-reserved)
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[ 0.000000] rcu: Hierarchical RCU implementation.
[ 0.000000] Tracing variant of Tasks RCU enabled.
[ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[ 0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[ 0.000000] Root IRQ handler: gic_handle_irq
[ 0.000000] GICv2m: range[mem 0x0b00a000-0x0b00affc], SPI[448:479]
[ 0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[ 0.000000] arch_timer: cp15 and mmio timer(s) running at 19.20MHz (virt/virt).
[ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x46d987e47, max_idle_ns: 440795202767 ns
[ 0.000000] sched_clock: 56 bits at 19MHz, resolution 52ns, wraps every 4398046511078ns
[ 0.000109] Calibrating delay loop (skipped), value calculated using timer frequency.. 38.40 BogoMIPS (lpj=192000)
[ 0.000123] pid_max: default: 32768 minimum: 301
[ 0.005174] Mount-cache hash table entries: 2048 (order: 2, 16384 bytes, linear)
[ 0.005189] Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes, linear)
[ 0.009457] RCU Tasks Trace: Setting shift to 2 and lim to 1 rcu_task_cb_adjust=1.
[ 0.009678] rcu: Hierarchical SRCU implementation.
[ 0.009683] rcu: Max phase no-delay instances is 1000.
[ 0.010542] smp: Bringing up secondary CPUs ...
[ 0.011205] Detected VIPT I-cache on CPU1
[ 0.011304] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
[ 0.011969] Detected VIPT I-cache on CPU2
[ 0.012037] CPU2: Booted secondary processor 0x0000000002 [0x410fd034]
[ 0.012688] Detected VIPT I-cache on CPU3
[ 0.012754] CPU3: Booted secondary processor 0x0000000003 [0x410fd034]
[ 0.012823] smp: Brought up 1 node, 4 CPUs
[ 0.012831] SMP: Total of 4 processors activated.
[ 0.012837] CPU features: detected: 32-bit EL0 Support
[ 0.012841] CPU features: detected: CRC32 instructions
[ 0.012911] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[ 0.012918] CPU: All CPU(s) started at EL1
[ 0.012921] alternatives: applying system-wide alternatives
[ 0.022093] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.022119] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[ 0.023848] pinctrl core: initialized pinctrl subsystem
[ 0.025583] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[ 0.026131] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations
[ 0.026173] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[ 0.026207] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[ 0.026595] thermal_sys: Registered thermal governor 'step_wise'
[ 0.026653] cpuidle: using governor menu
[ 0.026826] ASID allocator initialised with 65536 entries
[ 0.081275] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 4
[ 0.082962] Modules: 27552 pages in range for non-PLT usage
[ 0.082971] Modules: 519072 pages in range for PLT usage
[ 0.087585] SCSI subsystem initialized
[ 0.087778] usbcore: registered new interface driver usbfs
[ 0.087814] usbcore: registered new interface driver hub
[ 0.087864] usbcore: registered new device driver usb
[ 0.088309] qcom_scm: convention: smc arm 64
[ 0.089939] clocksource: Switched to clocksource arch_sys_counter
[ 0.093767] NET: Registered PF_INET protocol family
[ 0.093918] IP idents hash table entries: 16384 (order: 5, 131072 bytes, linear)
[ 0.096442] tcp_listen_portaddr_hash hash table entries: 512 (order: 1, 8192 bytes, linear)
[ 0.096466] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[ 0.096481] TCP established hash table entries: 8192 (order: 4, 65536 bytes, linear)
[ 0.096566] TCP bind hash table entries: 8192 (order: 6, 262144 bytes, linear)
[ 0.096839] TCP: Hash tables configured (established 8192 bind 8192)
[ 0.096942] UDP hash table entries: 512 (order: 2, 16384 bytes, linear)
[ 0.096981] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes, linear)
[ 0.097455] NET: Registered PF_UNIX/PF_LOCAL protocol family
[ 0.097497] PCI: CLS 0 bytes, default 64
[ 0.106870] workingset: timestamp_bits=46 max_order=18 bucket_order=0
[ 0.107418] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.107425] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.115835] qcom-qmp-usb-phy 78000.phy: supply vdda-phy not found, using dummy regulator
[ 0.116002] qcom-qmp-usb-phy 78000.phy: supply vdda-pll not found, using dummy regulator
[ 0.117834] qcom-qusb2-phy 79000.phy: supply vdd not found, using dummy regulator
[ 0.118066] qcom-qusb2-phy 79000.phy: supply vdda-pll not found, using dummy regulator
[ 0.118122] qcom-qusb2-phy 79000.phy: supply vdda-phy-dpdm not found, using dummy regulator
[ 0.118345] qcom-qusb2-phy 79000.phy: Registered Qcom-QUSB2 phy
[ 0.128084] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[ 0.129107] msm_serial 78b3000.serial: msm_serial: detected port #0
[ 0.129173] msm_serial 78b3000.serial: uartclk = 3686400
[ 0.129498] 78b3000.serial: ttyMSM0 at MMIO 0x78b3000 (irq = 20, base_baud = 230400) is a MSM
[ 0.129530] msm_serial: console setup on port #0
[ 0.129570] printk: console [ttyMSM0] enabled
[ 0.887098] msm_serial: driver initialized
[ 0.896362] loop: module loaded
[ 0.897765] nand: device found, Manufacturer ID: 0xc8, Chip ID: 0x61
[ 0.898317] nand: ESMT PSR1GA30DT
[ 0.904934] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[ 0.918548] spmi spmi-0: PMIC arbiter version v2 (0x20010000)
[ 0.991436] i2c_dev: i2c /dev entries driver
[ 0.997389] sdhci: Secure Digital Host Controller Interface driver
[ 0.997434] sdhci: Copyright(c) Pierre Ossman
[ 1.002502] sdhci-pltfm: SDHCI platform and OF driver helper
[ 1.008710] remoteproc remoteproc0: releasing cd00000.q6v5_wcss
[ 1.016302] NET: Registered PF_INET6 protocol family
[ 1.019436] Segment Routing with IPv6
[ 1.023539] In-situ OAM (IOAM) with IPv6
[ 1.027114] NET: Registered PF_PACKET protocol family
[ 1.031164] 8021q: 802.1Q VLAN Support v1.8
[ 1.066364] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 4
[ 1.066704] cpr4_ipq807x_apss_read_fuse_data: apc_corner: speed bin = 0
[ 1.072531] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR fusing revision = 1
[ 1.079089] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR misc fuse value = 0
[ 1.086771] cpr4_ipq807x_apss_read_fuse_data: apc_corner: Voltage boost fuse config = 0 boost = disable
[ 1.094300] cpr3_mem_acc_init: apc: not using memory accelerator regulator
[ 1.103435] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused SVS: open-loop= 704000 uV
[ 1.110382] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused NOM: open-loop= 816000 uV
[ 1.120357] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused TURBO: open-loop= 880000 uV
[ 1.130164] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused STURBO: open-loop= 968000 uV
[ 1.140019] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused SVS: quot[ 7]= 703, quot_offset[ 7]= 0
[ 1.149755] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused NOM: quot[ 7]= 917, quot_offset[ 7]= 210
[ 1.160629] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused TURBO: quot[ 7]=1028, quot_offset[ 7]= 110
[ 1.171569] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused STURBO: quot[ 7]=1188, quot_offset[ 7]= 160
[ 1.182738] cpr3_regulator_init_ctrl: apc: Default CPR mode = closed-loop
[ 1.185420] nand: device found, Manufacturer ID: 0xc8, Chip ID: 0x61
[ 1.200229] nand: ESMT PSR1GA30DT
[ 1.206598] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[ 1.218867] 17 qcomsmem partitions found on MTD device qcom_nand.0
[ 1.218919] Creating 17 MTD partitions on "qcom_nand.0":
[ 1.223977] 0x000000000000-0x000000100000 : "0:sbl1"
[ 1.230972] 0x000000100000-0x000000200000 : "0:mibib"
[ 1.235795] 0x000000200000-0x000000280000 : "0:bootconfig"
[ 1.240250] 0x000000280000-0x000000300000 : "0:bootconfig1"
[ 1.245630] 0x000000300000-0x000000600000 : "0:qsee"
[ 1.253453] 0x000000600000-0x000000680000 : "0:devcfg"
[ 1.256299] 0x000000680000-0x000000700000 : "0:apdp"
[ 1.261305] 0x000000700000-0x000000780000 : "0:rpm"
[ 1.266364] 0x000000780000-0x000000800000 : "0:cdt"
[ 1.271129] 0x000000800000-0x000000980000 : "0:appsblenv"
[ 1.276747] 0x000000980000-0x000000b80000 : "0:appsbl"
[ 1.282848] 0x000000b80000-0x000000c00000 : "0:art"
[ 1.286419] 0x000000c00000-0x000003600000 : "rootfs"
[ 1.327907] mtd: setting mtd12 (rootfs) as root device
[ 1.328257] mtdsplit: no squashfs found in "rootfs"
[ 1.332166] 0x000003600000-0x000006000000 : "rootfs_1"
[ 1.375134] 0x000006000000-0x000006080000 : "0:ethphyfw"
[ 1.376141] 0x000006080000-0x000006980000 : "factory_data"
[ 1.388135] 0x000006980000-0x000007a80000 : "runtime_data"
[ 1.411842] cpufreq: cpufreq_online: CPU0: Running at unlisted initial frequency: 800000 KHz, changing to: 1017600 KHz
[ 1.413928] remoteproc remoteproc0: cd00000.q6v5_wcss is availabì[ 1.431089] Freeing unused kernel memory: 8896K
[ 1.431179] Run /init as init process
[ 1.566261] init: Console is alive
[ 1.566368] init: - watchdog -
[ 1.573686] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[ 1.588776] gpio_button_hotplug: loading out-of-tree module taints kernel.
[ 1.602009] ssdk_dt_parse_interrupt[941]:INFO:intr-gpio does not exist
[ 3.310007] regi_init[2525]:INFO:Initializing HPPE Done!!
[ 3.310130] regi_init[2574]:INFO:qca-ssdk module init succeeded!
[ 3.316441] Platform device for node ffffff803fe2cf38(edma) not found
[ 3.320493] Unable to get EDMA DTS data.
[ 3.326805] DP hal init failed.
[ 3.421834] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[ 3.421888] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 1
[ 3.426354] xhci-hcd xhci-hcd.1.auto: hcc params 0x0220fe65 hci version 0x110 quirks 0x0000008002000010
[ 3.433833] xhci-hcd xhci-hcd.1.auto: irq 32, io mem 0x08a00000
[ 3.443243] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[ 3.449052] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 2
[ 3.454699] xhci-hcd xhci-hcd.1.auto: Host supports USB 3.0 SuperSpeed
[ 3.462603] hub 1-0:1.0: USB hub found
[ 3.468772] hub 1-0:1.0: 1 port detected
[ 3.472773] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[ 3.476825] hub 2-0:1.0: USB hub found
[ 3.484681] hub 2-0:1.0: 1 port detected
[ 3.490692] Platform device for node ffffff803fe2cf38(edma) not found
[ 3.492280] Unable to get EDMA DTS data.
[ 3.498609] DP hal init failed.
[ 3.600235] kmodloader: 1 module could not be probed
[ 3.600375] kmodloader: - qca-nss-dp - 0
[ 3.605653] init: - preinit -
[ 3.769940] usb 1-1: new high-speed USB device number 2 using xhci-hcd
[ 10.579928] random: crng init done
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[ 12.724380] procd: - early -
[ 12.724454] procd: - watchdog -
[ 13.247464] procd: - watchdog -
[ 13.247703] procd: - ubus -
[ 13.400480] procd: - init -
Please press Enter to activate this console.
[ 13.521979] kmodloader: loading kernel modules from /etc/modules.d/*
[ 13.576463] jitterentropy: Initialization failed with host not compliant with requirements: 9
[ 13.642782] Platform device for node ffffff803fe2cf38(edma) not found
[ 13.642826] Unable to get EDMA DTS data.
[ 13.648206] DP hal init failed.
[ 13.672073] urngd: v1.0.2 started.
[ 13.761064] Loading modules backported from Linux version v6.9.9-0-g28fdf4518483
[ 13.761101] Backport generated by backports.git v6.1.97-1-29-gf1d24a3683b2
[ 13.771394] NET: Registered PF_QIPCRTR protocol family
[ 13.802324] PPP generic driver version 2.4.2
[ 13.802963] NET: Registered PF_PPPOX protocol family
[ 13.813217] ath11k c000000.wifi: ipq8074 hw2.0
[ 13.813251] ath11k c000000.wifi: FW memory mode: 0
[ 13.834149] remoteproc remoteproc0: powering up cd00000.q6v5_wcss
[ 13.834253] remoteproc remoteproc0: Booting fw image IPQ8074/q6_fw.mdt, size 668
[ 14.184874] remoteproc remoteproc0: remote processor cd00000.q6v5_wcss is now up
[ 14.228787] ath11k c000000.wifi: qmi ignore invalid mem req type 3
[ 14.236256] ath11k c000000.wifi: chip_id 0x0 chip_family 0x0 board_id 0xff soc_id 0xffffffff
[ 14.236293] ath11k c000000.wifi: fw_version 0x290604a5 fw_build_timestamp 2023-10-12 02:06 fw_build_id WLAN.HK.2.9.0.1-01977-QCAHKSWPL_SILICONZ-1
[ 14.315051] ath11k c000000.wifi: failed to fetch board data for bus=ahb,qmi-chip-id=0,qmi-board-id=255,variant=tplink_x80-5g from ath11k/IPQ8074/hw2.0/board-2.bin
[ 14.315112] ath11k c000000.wifi: failed to fetch board data for bus=ahb,qmi-chip-id=0,qmi-board-id=255 from ath11k/IPQ8074/hw2.0/board-2.bin
[ 14.328530] ath11k c000000.wifi: failed to fetch board data for bus=ahb,qmi-chip-id=0,qmi-board-id=255 from ath11k/IPQ8074/hw2.0/board-2.bin
[ 14.341266] ath11k c000000.wifi: failed to fetch board.bin from IPQ8074/hw2.0
[ 14.353833] ath11k c000000.wifi: qmi failed to fetch board file: -12
[ 14.360851] ath11k c000000.wifi: failed to load board data file: -12
[ 31.849972] l11: disabling
[ 74.729967] ath11k c000000.wifi: Coldboot Calibration timed out
[ 74.747141] jitterentropy: Initialization failed with host not compliant with requirements: 9
[ 74.852152] Platform device for node ffffff803fe2cf38(edma) not found
[ 74.852199] Unable to get EDMA DTS data.
[ 74.857580] DP hal init failed.
[ 74.960223] kmodloader: 2 modules could not be probed
[ 74.960329] kmodloader: - jitterentropy_rng - 0
[ 74.964323] kmodloader: - qca-nss-dp - 0
BusyBox v1.36.1 (2024-07-19 12:47:43 UTC) built-in shell (ash)
_______ ________ __
| |.-----.-----.-----.| | | |.----.| |_
| - || _ | -__| || | | || _|| _|
|_______|| __|_____|__|__||________||__| |____|
|__| W I R E L E S S F R E E D O M
-----------------------------------------------------
OpenWrt SNAPSHOT, r26970-dfde68e9b9
-----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@(none):/#
ifconfig -a
ifconfig -a
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:256 errors:0 dropped:0 overruns:0 frame:0
TX packets:256 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:19968 (19.5 KiB) TX bytes:19968 (19.5 KiB)
miireg Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
[NO FLAGS] MTU:0 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
root@OpenWrt:/#
yip mdio is not mentioned in the boot log I will have to look at the dts
1 Like
You need to enable the edma node in the dts.
2 Likes
1 Like
Mounting NAND isn't neccessary, you will find the mtd devices in /dev/mtd*.
just use dd to dump one. (use "cat /proc/mtd" to find out who is who)
1 Like
I'm in and have network. Was able to get it going after moding the network config. Logs below
IPQ807x# bootm
## Loading kernel from FIT Image at 44000000 ...
Using 'config@hk01.c5' configuration
Trying 'kernel-1' kernel subimage
Description: ARM64 OpenWrt Linux-6.6.40
Type: Kernel Image
Compression: gzip compressed
Data Start: 0x440000e8
Data Size: 12741567 Bytes = 12.2 MiB
Architecture: AArch64
OS: Linux
Load Address: 0x41000000
Entry Point: 0x41000000
Hash algo: crc32
Hash value: 838b40e0
Hash algo: sha1
Hash value: 3d30224d6c1d4ba0cd7cbb78395ef7ff55144694
Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 44000000 ...
Using 'config@hk01.c5' configuration
Trying 'fdt-1' fdt subimage
Description: ARM64 OpenWrt tplink_x80-5g device tree blob
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x44c26de8
Data Size: 43369 Bytes = 42.4 KiB
Architecture: AArch64
Hash algo: crc32
Hash value: 41bfc840
Hash algo: sha1
Hash value: 9ecf28b7d4d50bf3ef125ed0364d4fca4ee07ea8
Verifying Hash Integrity ... crc32+ sha1+ OK
Booting using the fdt blob at 0x44c26de8
Uncompressing Kernel Image ... OK
Loading Device Tree to 4a3f2000, end 4a3ff968 ... OK
Could not find PCI in device tree
Using machid 0x8010400 from environment
Starting kernel ...
Jumping to AARCH64 kernel via monitor
[ 0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[ 0.000000] Linux version 6.6.40 (professor_jonny@MRSPARKLE) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 13.3.0 r26970-e6c9264351) 13.3.0, GNU ld (GNU Binutils) 2.42) #0 SMP Sun Jul 21 05:32:14 2024
[ 0.000000] Machine model: tplink x80-5g
[ 0.000000] OF: reserved mem: 0x0000000040000000..0x0000000040ffffff (16384 KiB) nomap non-reusable nss@40000000
[ 0.000000] OF: reserved mem: 0x000000004a400000..0x000000004a5fffff (2048 KiB) nomap non-reusable tzapp@4a400000
[ 0.000000] OF: reserved mem: 0x000000004a600000..0x000000004a9fffff (4096 KiB) nomap non-reusable bootloader@4a600000
[ 0.000000] OF: reserved mem: 0x000000004aa00000..0x000000004aafffff (1024 KiB) nomap non-reusable sbl@4aa00000
[ 0.000000] OF: reserved mem: 0x000000004ab00000..0x000000004abfffff (1024 KiB) nomap non-reusable smem@4ab00000
[ 0.000000] OF: reserved mem: 0x000000004ac00000..0x000000004affffff (4096 KiB) nomap non-reusable memory@4ac00000
[ 0.000000] OF: reserved mem: 0x000000004b000000..0x0000000050efffff (97280 KiB) nomap non-reusable wcnss@4b000000
[ 0.000000] OF: reserved mem: 0x0000000050f00000..0x0000000050ffffff (1024 KiB) nomap non-reusable q6_etr_dump@50f00000
[ 0.000000] OF: reserved mem: 0x0000000051000000..0x00000000510fffff (1024 KiB) nomap non-reusable m3_dump@51000000
[ 0.000000] Zone ranges:
[ 0.000000] DMA [mem 0x0000000040000000-0x000000007fffffff]
[ 0.000000] DMA32 empty
[ 0.000000] Normal empty
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000040000000-0x0000000040ffffff]
[ 0.000000] node 0: [mem 0x0000000041000000-0x000000004a3fffff]
[ 0.000000] node 0: [mem 0x000000004a400000-0x00000000510fffff]
[ 0.000000] node 0: [mem 0x0000000051100000-0x000000007fffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000007fffffff]
[ 0.000000] psci: probing for conduit method from DT.
[ 0.000000] psci: PSCIv1.0 detected in firmware.
[ 0.000000] psci: Using standard PSCI v0.2 function IDs
[ 0.000000] psci: MIGRATE_INFO_TYPE not supported.
[ 0.000000] psci: SMC Calling Convention v1.0
[ 0.000000] percpu: Embedded 18 pages/cpu s35240 r8192 d30296 u73728
[ 0.000000] Detected VIPT I-cache on CPU0
[ 0.000000] alternatives: applying boot alternatives
[ 0.000000] Kernel command line: root=/dev/ubiblock0_1
[ 0.000000] Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes, linear)
[ 0.000000] Inode-cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 258048
[ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[ 0.000000] software IO TLB: SWIOTLB bounce buffer size adjusted to 1MB
[ 0.000000] software IO TLB: area num 4.
[ 0.000000] software IO TLB: mapped [mem 0x000000007eb00000-0x000000007ec00000] (1MB)
[ 0.000000] Memory: 878372K/1048576K available (8128K kernel code, 892K rwdata, 2476K rodata, 8896K init, 276K bss, 170204K reserved, 0K cma-reserved)
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[ 0.000000] rcu: Hierarchical RCU implementation.
[ 0.000000] Tracing variant of Tasks RCU enabled.
[ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[ 0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[ 0.000000] Root IRQ handler: gic_handle_irq
[ 0.000000] GICv2m: range[mem 0x0b00a000-0x0b00affc], SPI[448:479]
[ 0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[ 0.000000] arch_timer: cp15 and mmio timer(s) running at 19.20MHz (virt/virt).
[ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x46d987e47, max_idle_ns: 440795202767 ns
[ 0.000000] sched_clock: 56 bits at 19MHz, resolution 52ns, wraps every 4398046511078ns
[ 0.000109] Calibrating delay loop (skipped), value calculated using timer frequency.. 38.40 BogoMIPS (lpj=192000)
[ 0.000122] pid_max: default: 32768 minimum: 301
[ 0.005174] Mount-cache hash table entries: 2048 (order: 2, 16384 bytes, linear)
[ 0.005188] Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes, linear)
[ 0.009452] RCU Tasks Trace: Setting shift to 2 and lim to 1 rcu_task_cb_adjust=1.
[ 0.009676] rcu: Hierarchical SRCU implementation.
[ 0.009680] rcu: Max phase no-delay instances is 1000.
[ 0.010535] smp: Bringing up secondary CPUs ...
[ 0.011196] Detected VIPT I-cache on CPU1
[ 0.011295] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
[ 0.011965] Detected VIPT I-cache on CPU2
[ 0.012035] CPU2: Booted secondary processor 0x0000000002 [0x410fd034]
[ 0.012690] Detected VIPT I-cache on CPU3
[ 0.012755] CPU3: Booted secondary processor 0x0000000003 [0x410fd034]
[ 0.012824] smp: Brought up 1 node, 4 CPUs
[ 0.012832] SMP: Total of 4 processors activated.
[ 0.012838] CPU features: detected: 32-bit EL0 Support
[ 0.012842] CPU features: detected: CRC32 instructions
[ 0.012910] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[ 0.012918] CPU: All CPU(s) started at EL1
[ 0.012921] alternatives: applying system-wide alternatives
[ 0.022101] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.022128] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[ 0.023858] pinctrl core: initialized pinctrl subsystem
[ 0.025616] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[ 0.026156] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations
[ 0.026199] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[ 0.026233] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[ 0.026624] thermal_sys: Registered thermal governor 'step_wise'
[ 0.026681] cpuidle: using governor menu
[ 0.026853] ASID allocator initialised with 65536 entries
[ 0.081136] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 4
[ 0.082909] Modules: 27552 pages in range for non-PLT usage
[ 0.082916] Modules: 519072 pages in range for PLT usage
[ 0.087732] SCSI subsystem initialized
[ 0.087925] usbcore: registered new interface driver usbfs
[ 0.087960] usbcore: registered new interface driver hub
[ 0.088022] usbcore: registered new device driver usb
[ 0.088426] qcom_scm: convention: smc arm 64
[ 0.090076] clocksource: Switched to clocksource arch_sys_counter
[ 0.093849] NET: Registered PF_INET protocol family
[ 0.094013] IP idents hash table entries: 16384 (order: 5, 131072 bytes, linear)
[ 0.096597] tcp_listen_portaddr_hash hash table entries: 512 (order: 1, 8192 bytes, linear)
[ 0.096620] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[ 0.096636] TCP established hash table entries: 8192 (order: 4, 65536 bytes, linear)
[ 0.096721] TCP bind hash table entries: 8192 (order: 6, 262144 bytes, linear)
[ 0.096993] TCP: Hash tables configured (established 8192 bind 8192)
[ 0.097095] UDP hash table entries: 512 (order: 2, 16384 bytes, linear)
[ 0.097134] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes, linear)
[ 0.097569] NET: Registered PF_UNIX/PF_LOCAL protocol family
[ 0.097622] PCI: CLS 0 bytes, default 64
[ 0.107033] workingset: timestamp_bits=46 max_order=18 bucket_order=0
[ 0.107628] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.107636] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.116052] qcom-qmp-usb-phy 78000.phy: supply vdda-phy not found, using dummy regulator
[ 0.116239] qcom-qmp-usb-phy 78000.phy: supply vdda-pll not found, using dummy regulator
[ 0.118174] qcom-qusb2-phy 79000.phy: supply vdd not found, using dummy regulator
[ 0.118374] qcom-qusb2-phy 79000.phy: supply vdda-pll not found, using dummy regulator
[ 0.118419] qcom-qusb2-phy 79000.phy: supply vdda-phy-dpdm not found, using dummy regulator
[ 0.118674] qcom-qusb2-phy 79000.phy: Registered Qcom-QUSB2 phy
[ 0.128654] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[ 0.129669] msm_serial 78b3000.serial: msm_serial: detected port #0
[ 0.129723] msm_serial 78b3000.serial: uartclk = 3686400
[ 0.130109] 78b3000.serial: ttyMSM0 at MMIO 0x78b3000 (irq = 20, base_baud = 230400) is a MSM
[ 0.130144] msm_serial: console setup on port #0
[ 0.130184] printk: console [ttyMSM0] enabled
[ 0.887721] msm_serial: driver initialized
[ 0.896856] loop: module loaded
[ 0.898238] nand: device found, Manufacturer ID: 0xc8, Chip ID: 0x61
[ 0.898815] nand: ESMT PSR1GA30DT
[ 0.905432] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[ 0.918872] spmi spmi-0: PMIC arbiter version v2 (0x20010000)
[ 0.991693] i2c_dev: i2c /dev entries driver
[ 0.997782] sdhci: Secure Digital Host Controller Interface driver
[ 0.997827] sdhci: Copyright(c) Pierre Ossman
[ 1.002886] sdhci-pltfm: SDHCI platform and OF driver helper
[ 1.009105] remoteproc remoteproc0: releasing cd00000.q6v5_wcss
[ 1.016757] NET: Registered PF_INET6 protocol family
[ 1.019930] Segment Routing with IPv6
[ 1.023957] In-situ OAM (IOAM) with IPv6
[ 1.027493] NET: Registered PF_PACKET protocol family
[ 1.031556] 8021q: 802.1Q VLAN Support v1.8
[ 1.066594] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 4
[ 1.066937] cpr4_ipq807x_apss_read_fuse_data: apc_corner: speed bin = 0
[ 1.072764] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR fusing revision = 1
[ 1.079322] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR misc fuse value = 0
[ 1.087004] cpr4_ipq807x_apss_read_fuse_data: apc_corner: Voltage boost fuse config = 0 boost = disable
[ 1.094512] cpr3_mem_acc_init: apc: not using memory accelerator regulator
[ 1.103645] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused SVS: open-loop= 704000 uV
[ 1.110601] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused NOM: open-loop= 816000 uV
[ 1.120581] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused TURBO: open-loop= 880000 uV
[ 1.130385] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused STURBO: open-loop= 968000 uV
[ 1.140256] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused SVS: quot[ 7]= 703, quot_offset[ 7]= 0
[ 1.149988] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused NOM: quot[ 7]= 917, quot_offset[ 7]= 210
[ 1.160864] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused TURBO: quot[ 7]=1028, quot_offset[ 7]= 110
[ 1.171805] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused STURBO: quot[ 7]=1188, quot_offset[ 7]= 160
[ 1.182982] cpr3_regulator_init_ctrl: apc: Default CPR mode = closed-loop
[ 1.185589] nand: device found, Manufacturer ID: 0xc8, Chip ID: 0x61
[ 1.200438] nand: ESMT PSR1GA30DT
[ 1.206828] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[ 1.218937] 17 qcomsmem partitions found on MTD device qcom_nand.0
[ 1.218986] Creating 17 MTD partitions on "qcom_nand.0":
[ 1.224106] 0x000000000000-0x000000100000 : "0:sbl1"
[ 1.231356] 0x000000100000-0x000000200000 : "0:mibib"
[ 1.235880] 0x000000200000-0x000000280000 : "0:bootconfig"
[ 1.240401] 0x000000280000-0x000000300000 : "0:bootconfig1"
[ 1.245693] 0x000000300000-0x000000600000 : "0:qsee"
[ 1.253388] 0x000000600000-0x000000680000 : "0:devcfg"
[ 1.256354] 0x000000680000-0x000000700000 : "0:apdp"
[ 1.261420] 0x000000700000-0x000000780000 : "0:rpm"
[ 1.266480] 0x000000780000-0x000000800000 : "0:cdt"
[ 1.271064] 0x000000800000-0x000000980000 : "0:appsblenv"
[ 1.276784] 0x000000980000-0x000000b80000 : "0:appsbl"
[ 1.282888] 0x000000b80000-0x000000c00000 : "0:art"
[ 1.286489] 0x000000c00000-0x000003600000 : "rootfs"
[ 1.327928] mtd: setting mtd12 (rootfs) as root device
[ 1.328277] mtdsplit: no squashfs found in "rootfs"
[ 1.332024] 0x000003600000-0x000006000000 : "rootfs_1"
[ 1.374492] 0x000006000000-0x000006080000 : "0:ethphyfw"
[ 1.375444] 0x000006080000-0x000006980000 : "factory_data"
[ 1.387302] 0x000006980000-0x000007a80000 : "runtime_data"
[ 1.410795] cpufreq: cpufreq_online: CPU0: Running at unlisted initial frequency: 800000 KHz, changing to: 1017600 KHz
[ 1.412697] remoteproc remoteproc0: cd00000.q6v5_wcss is availaâ[ 1.430337] Freeing unused kernel memory: 8896K
[ 1.430534] Run /init as init process
[ 1.587363] init: Console is alive
[ 1.587510] init: - watchdog -
[ 1.596147] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[ 1.611278] gpio_button_hotplug: loading out-of-tree module taints kernel.
[ 1.623816] ssdk_dt_parse_interrupt[941]:INFO:intr-gpio does not exist
[ 3.330144] regi_init[2525]:INFO:Initializing HPPE Done!!
[ 3.330269] regi_init[2574]:INFO:qca-ssdk module init succeeded!
[ 3.336612] EDMA ver 1 hw init
[ 3.340848] EDMA HW Reset completed succesfully
[ 3.343504] Num rings - TxDesc:1 (23-23) TxCmpl:1 (7-7)
[ 3.347898] RxDesc:1 (15-15) RxFill:1 (7-7)
[ 3.353552] dp5: ppe offload disabled: 0 for macid 5
[ 3.357276] dp5: Switch attached to macid 5 status: 0
[ 3.462182] Qualcomm QCA8081 90000.mdio-1:1c: attached PHY driver (mii_bus:phy_addr=90000.mdio-1:1c, irq=POLL)
[ 3.463103] GMAC6(ffffff80055dd900) Invalid MAC@ - using 8a:03:71:1f:00:6f
[ 3.471094] dp6-syn: ppe offload disabled: 0 for macid 6
[ 3.477931] dp6-syn: Switch attached to macid 6 status: 0
[ 3.560486] Qualcomm Atheros AR8031/AR8033 90000.mdio-1:04: attached PHY driver (mii_bus:phy_addr=90000.mdio-1:04, irq=POLL)
[ 3.561353] **********************************************************
[ 3.570797] * NSS Data Plane driver
[ 3.577095] **********************************************************
[ 3.592406] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[ 3.592469] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 1
[ 3.596919] xhci-hcd xhci-hcd.1.auto: hcc params 0x0220fe65 hci version 0x110 quirks 0x0000008002000010
[ 3.604443] xhci-hcd xhci-hcd.1.auto: irq 37, io mem 0x08a00000
[ 3.613819] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[ 3.619622] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 2
[ 3.625188] xhci-hcd xhci-hcd.1.auto: Host supports USB 3.0 SuperSpeed
[ 3.633100] hub 1-0:1.0: USB hub found
[ 3.639342] hub 1-0:1.0: 1 port detected
[ 3.643442] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[ 3.647426] hub 2-0:1.0: USB hub found
[ 3.655239] hub 2-0:1.0: 1 port detected
[ 3.660347] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[ 3.667463] init: - preinit -
[ 3.940066] usb 1-1: new high-speed USB device number 2 using xhci-hcd
[ 10.680064] random: crng init done
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[ 12.814575] procd: - early -
[ 12.814650] procd: - watchdog -
[ 13.338103] procd: - watchdog -
[ 13.338343] procd: - ubus -
[ 13.491216] procd: - init -
Please press Enter to activate this console.
[ 13.617140] kmodloader: loading kernel modules from /etc/modules.d/*
[ 13.677642] jitterentropy: Initialization failed with host not compliant with requirements: 9
[ 13.772502] Loading modules backported from Linux version v6.9.9-0-g28fdf4518483
[ 13.772541] Backport generated by backports.git v6.1.97-1-29-gf1d24a3683b2
[ 13.782820] NET: Registered PF_QIPCRTR protocol family
[ 13.790827] urngd: v1.0.2 started.
[ 13.816923] PPP generic driver version 2.4.2
[ 13.817862] NET: Registered PF_PPPOX protocol family
[ 13.828031] ath11k c000000.wifi: ipq8074 hw2.0
[ 13.828065] ath11k c000000.wifi: FW memory mode: 0
[ 13.849185] remoteproc remoteproc0: powering up cd00000.q6v5_wcss
[ 13.849275] remoteproc remoteproc0: Booting fw image IPQ8074/q6_fw.mdt, size 668
[ 14.200430] remoteproc remoteproc0: remote processor cd00000.q6v5_wcss is now up
[ 14.244392] ath11k c000000.wifi: qmi ignore invalid mem req type 3
[ 14.251858] ath11k c000000.wifi: chip_id 0x0 chip_family 0x0 board_id 0xff soc_id 0xffffffff
[ 14.251894] ath11k c000000.wifi: fw_version 0x290604a5 fw_build_timestamp 2023-10-12 02:06 fw_build_id WLAN.HK.2.9.0.1-01977-QCAHKSWPL_SILICONZ-1
[ 14.328822] ath11k c000000.wifi: failed to fetch board data for bus=ahb,qmi-chip-id=0,qmi-board-id=255,variant=tplink_x80-5g from ath11k/IPQ8074/hw2.0/board-2.bin
[ 14.328884] ath11k c000000.wifi: failed to fetch board data for bus=ahb,qmi-chip-id=0,qmi-board-id=255 from ath11k/IPQ8074/hw2.0/board-2.bin
[ 14.342303] ath11k c000000.wifi: failed to fetch board data for bus=ahb,qmi-chip-id=0,qmi-board-id=255 from ath11k/IPQ8074/hw2.0/board-2.bin
[ 14.355106] ath11k c000000.wifi: failed to fetch board.bin from IPQ8074/hw2.0
[ 14.367612] ath11k c000000.wifi: qmi failed to fetch board file: -12
[ 14.374627] ath11k c000000.wifi: failed to load board data file: -12
[ 31.850102] l11: disabling
BusyBox v1.36.1 (2024-07-19 12:47:43 UTC) built-in shell (ash)
_______ ________ __
| |.-----.-----.-----.| | | |.----.| |_
| - || _ | -__| || | | || _|| _|
|_______|| __|_____|__|__||________||__| |____|
|__| W I R E L E S S F R E E D O M
-----------------------------------------------------
OpenWrt SNAPSHOT, r26970-713c37af57
-----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@(none):/# ifconfig
root@(none):/# ifconfig -a
lan Link encap:Ethernet HWaddr 8A:03:71:1F:00:6F
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
Base address:0x7000
lo Link encap:Local Loopback
LOOPBACK MTU:65536 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
miireg Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
[NO FLAGS] MTU:0 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
wan Link encap:Ethernet HWaddr 00:03:7F:BA:DB:AD
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
Base address:0x1800
root@(none):/# [ 74.730107] ath11k c000000.wifi: Coldboot Calibration timed out
[ 74.747409] jitterentropy: Initialization failed with host not compliant with requirements: 9
[ 74.870319] kmodloader: 1 module could not be probed
[ 74.870433] kmodloader: - jitterentropy_rng - 0
[ 217.610342] nss-dp 3a001800.dp5 wan: PHY Link up speed: 1000
[ 217.611272] ------------[ cut here ]------------
[ 217.615078] nss_port5_rx_clk_src: rcg didn't update its configuration.
[ 217.615112] WARNING: CPU: 1 PID: 312 at drivers/clk/qcom/clk-rcg2.c:133 update_config+0xac/0xb8
[ 217.626022] Modules linked in: pppoe ppp_async nft_fib_inet nf_flow_table_inet ath11k_ahb(O) ath11k(O) pppox ppp_generic nft_reject_ipv6 nft_reject_ipv4 nft_reject_inet nft_reject nft_redir nft_quota nft_numgen nft_nat nft_masq nft_log nft_limit nft_hash nft_flow_offload nft_fib_ipv6 nft_fib_ipv4 nft_fib nft_ct nft_chain_nat nf_tables nf_nat nf_flow_table nf_conntrack mac80211(O) cfg80211(O) slhc qrtr_smd qrtr qmi_helpers(O) nfnetlink nf_reject_ipv6 nf_reject_ipv4 nf_log_syslog nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c compat(O) sha512_generic sha512_arm64 seqiv sha3_generic drbg michael_mic hmac geniv cmac leds_gpio xhci_plat_hcd xhci_pci xhci_hcd dwc3 dwc3_qcom qca_nss_dp(O) qca_ssdk(O) gpio_button_hotplug(O) ext4 mbcache jbd2 aquantia hwmon crc_ccitt crc32c_generic
[ 217.680431] CPU: 1 PID: 312 Comm: kworker/1:3 Tainted: G O 6.6.40 #0
[ 217.702676] Hardware name: tplink x80-5g (DT)
[ 217.710391] Workqueue: events qca_mac_sw_sync_work_task [qca_ssdk]
[ 217.714646] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[ 217.720721] pc : update_config+0xac/0xb8
[ 217.727574] lr : update_config+0xac/0xb8
[ 217.731740] sp : ffffffc08343bab0
[ 217.735645] x29: ffffffc08343bab0 x28: ffffffc079644bb8 x27: ffffffc079644a08
[ 217.738864] x26: 000000000000000a x25: ffffffc08343bd50 x24: ffffff8002910010
[ 217.745982] x23: ffffff80028f2400 x22: 00000000017d7840 x21: ffffffc0809de918
[ 217.753100] x20: ffffffc0813d60c0 x19: 0000000000000000 x18: 00000000000000ff
[ 217.760219] x17: 0000000000000000 x16: 0000000000000000 x15: ffffffc081346e20
[ 217.767336] x14: 00000000000002fd x13: 00000000000000ff x12: 00000000ffffffea
[ 217.774454] x11: 00000000ffffefff x10: ffffffc08139ee20 x9 : ffffffc081346dc8
[ 217.781574] x8 : 0000000000017fe8 x7 : c0000000ffffefff x6 : 0000000000000001
[ 217.788690] x5 : ffffff803fdb8750 x4 : 0000000000000000 x3 : 0000000000000027
[ 217.795809] x2 : 0000000000000027 x1 : 0000000000000023 x0 : 000000000000003a
[ 217.802928] Call trace:
[ 217.810036] update_config+0xac/0xb8
[ 217.812296] clk_rcg2_configure+0x84/0x94
[ 217.816116] clk_rcg2_set_rate_and_parent+0x64/0x80
[ 217.820022] clk_change_rate+0x7c/0x290
[ 217.824708] clk_core_set_rate_nolock+0x150/0x254
[ 217.828531] clk_set_rate+0x38/0x14c
[ 217.833388] ssdk_uniphy_clock_rate_set+0x48/0xbc [qca_ssdk]
[ 217.837039] ssdk_port_speed_clock_set+0xb4/0x184 [qca_ssdk]
[ 217.842682] adpt_hppe_port_bridge_txmac_set+0xd4/0x2d8 [qca_ssdk]
[ 217.848325] adpt_hppe_gcc_port_speed_clock_set+0x140/0x1d0 [qca_ssdk]
[ 217.854315] qca_hppe_mac_sw_sync_task+0x644/0xb98 [qca_ssdk]
[ 217.860823] qca_mac_sw_sync_work_task+0x44/0x3e0 [qca_ssdk]
[ 217.866639] process_one_work+0x160/0x2b0
[ 217.872365] worker_thread+0x2ac/0x48c
[ 217.876270] kthread+0xdc/0xe0
[ 217.879915] ret_from_fork+0x10/0x20
[ 217.882955] ---[ end trace 0000000000000000 ]---
[ 217.887592] ------------[ cut here ]------------
[ 217.891302] nss_port5_tx_clk_src: rcg didn't update its configuration.
[ 217.891333] WARNING: CPU: 1 PID: 312 at drivers/clk/qcom/clk-rcg2.c:133 update_config+0xac/0xb8
[ 217.902236] Modules linked in: pppoe ppp_async nft_fib_inet nf_flow_table_inet ath11k_ahb(O) ath11k(O) pppox ppp_generic nft_reject_ipv6 nft_reject_ipv4 nft_reject_inet nft_reject nft_redir nft_quota nft_numgen nft_nat nft_masq nft_log nft_limit nft_hash nft_flow_offload nft_fib_ipv6 nft_fib_ipv4 nft_fib nft_ct nft_chain_nat nf_tables nf_nat nf_flow_table nf_conntrack mac80211(O) cfg80211(O) slhc qrtr_smd qrtr qmi_helpers(O) nfnetlink nf_reject_ipv6 nf_reject_ipv4 nf_log_syslog nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c compat(O) sha512_generic sha512_arm64 seqiv sha3_generic drbg michael_mic hmac geniv cmac leds_gpio xhci_plat_hcd xhci_pci xhci_hcd dwc3 dwc3_qcom qca_nss_dp(O) qca_ssdk(O) gpio_button_hotplug(O) ext4 mbcache jbd2 aquantia hwmon crc_ccitt crc32c_generic
[ 217.956645] CPU: 1 PID: 312 Comm: kworker/1:3 Tainted: G W O 6.6.40 #0
[ 217.978884] Hardware name: tplink x80-5g (DT)
[ 217.986604] Workqueue: events qca_mac_sw_sync_work_task [qca_ssdk]
[ 217.990860] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[ 217.996936] pc : update_config+0xac/0xb8
[ 218.003789] lr : update_config+0xac/0xb8
[ 218.007956] sp : ffffffc08343bab0
[ 218.011860] x29: ffffffc08343bab0 x28: ffffffc079644bb8 x27: ffffffc079644a08
[ 218.015079] x26: 000000000000000a x25: ffffffc08343bd50 x24: ffffff8002910010
[ 218.022198] x23: ffffff80028f3400 x22: 00000000017d7840 x21: ffffffc0809de880
[ 218.029315] x20: ffffffc0813d5f90 x19: 0000000000000000 x18: 0000000000000126
[ 218.036433] x17: 0000000000000000 x16: 0000000000000000 x15: ffffffc081346e20
[ 218.043551] x14: 0000000000000372 x13: 0000000000000126 x12: 00000000ffffffea
[ 218.050671] x11: 00000000ffffefff x10: ffffffc08139ee20 x9 : ffffffc081346dc8
[ 218.057788] x8 : 0000000000017fe8 x7 : c0000000ffffefff x6 : 0000000000000001
[ 218.064907] x5 : ffffff803fdb8750 x4 : 0000000000000000 x3 : 0000000000000027
[ 218.072024] x2 : 0000000000000027 x1 : 0000000000000023 x0 : 000000000000003a
[ 218.079143] Call trace:
[ 218.086251] update_config+0xac/0xb8
[ 218.088510] clk_rcg2_configure+0x84/0x94
[ 218.092329] clk_rcg2_set_rate_and_parent+0x64/0x80
[ 218.096238] clk_change_rate+0x7c/0x290
[ 218.100922] clk_core_set_rate_nolock+0x150/0x254
[ 218.104745] clk_set_rate+0x38/0x14c
[ 218.109603] ssdk_uniphy_clock_rate_set+0x48/0xbc [qca_ssdk]
[ 218.113254] ssdk_port_speed_clock_set+0xc4/0x184 [qca_ssdk]
[ 218.118896] adpt_hppe_port_bridge_txmac_set+0xd4/0x2d8 [qca_ssdk]
[ 218.124540] adpt_hppe_gcc_port_speed_clock_set+0x140/0x1d0 [qca_ssdk]
[ 218.130529] qca_hppe_mac_sw_sync_task+0x644/0xb98 [qca_ssdk]
[ 218.137039] qca_mac_sw_sync_work_task+0x44/0x3e0 [qca_ssdk]
[ 218.142855] process_one_work+0x160/0x2b0
[ 218.148581] worker_thread+0x2ac/0x48c
[ 218.152486] kthread+0xdc/0xe0
[ 218.156129] ret_from_fork+0x10/0x20
[ 218.159171] ---[ end trace 0000000000000000 ]---
root@OpenWrt:/# ifconfig -a
lan Link encap:Ethernet HWaddr 8A:03:71:1F:00:6F
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
Base address:0x7000
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:320 errors:0 dropped:0 overruns:0 frame:0
TX packets:320 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:24960 (24.3 KiB) TX bytes:24960 (24.3 KiB)
miireg Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
[NO FLAGS] MTU:0 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
wan Link encap:Ethernet HWaddr 00:03:7F:BA:DB:AD
inet6 addr: fe80::203:7fff:feba:dbad/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:373 errors:0 dropped:3 overruns:0 frame:0
TX packets:59 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:99848 (97.5 KiB) TX bytes:17626 (17.2 KiB)
Base address:0x1800
****Changed network config here (as per previous post)****
root@OpenWrt:/# ifconfig -a
br-lan Link encap:Ethernet HWaddr 00:03:7F:BA:DB:AD
inet addr:192.168.1.1 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fd1a:8727:a27b::1/60 Scope:Global
inet6 addr: fe80::203:7fff:feba:dbad/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1369 errors:0 dropped:0 overruns:0 frame:0
TX packets:690 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:132356 (129.2 KiB) TX bytes:45808 (44.7 KiB)
lan Link encap:Ethernet HWaddr 8A:03:71:1F:00:6F
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
Base address:0x7000
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:448 errors:0 dropped:0 overruns:0 frame:0
TX packets:448 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:34944 (34.1 KiB) TX bytes:34944 (34.1 KiB)
miireg Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
[NO FLAGS] MTU:0 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
wan Link encap:Ethernet HWaddr 00:03:7F:BA:DB:AD
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1875 errors:0 dropped:6 overruns:0 frame:0
TX packets:779 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:288721 (281.9 KiB) TX bytes:80342 (78.4 KiB)
Base address:0x1800
Dumps uploaded here using
dd if=/dev/mtdX of=/tmp/mtdX.bin
Awesome, if you dump your config files I can build them into image to save editing them every time.
ill have a play with your dumps.
to be honest iI thought you would have to dump with nanddunp in the nand-tools package or it would have ecc and wear leveling info in the dumps.
can you mount the file system and dump the files in lib/firmware?
I think it should mount in /rom or /overlay I believe.
Config was as per kirdes
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'fd1a:8727:a27b::/48'
config device
option name 'br-lan'
option type 'bridge'
list ports 'wan'
config interface 'lan'
option device 'br-lan'
option proto 'static'
option ipaddr '192.168.1.1'
option netmask '255.255.255.0'
option ip6assign '60'
Have not been able to mount sucessfully. I want to change the root password to see what we have in native access.
Have tried various combinations of mount
root@OpenWrt:/# ubiattach /dev/ubi_ctrl -m 13
[ 3811.831232] ubi0: attaching mtd13
[ 3812.069941] ubi0: scanning is finished
[ 3812.077135] ubi0: attached mtd13 (name "rootfs_1", size 42 MiB)
[ 3812.077179] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[ 3812.081889] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[ 3812.088813] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[ 3812.095678] ubi0: good PEBs: 336, bad PEBs: 0, corrupted PEBs: 0
[ 3812.102445] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 128
[ 3812.108692] ubi0: max/mean erase counter: 6/5, WL threshold: 4096, image sequence number: 477229149
[ 3812.115736] ubi0: available PEBs: 312, total reserved PEBs: 24, PEBs reserved for bad PEB handling: 20
[ 3812.124683] ubi0: background thread "ubi_bgt0d" started, PID 3406
UBI device number 0, total 336 LEBs (42663936 bytes, 40.6 MiB), available 312 LEBs (39616512 bytes, 37.7 MiB), LEB size 126976 bytes (124.0 KiB)
root@OpenWrt:/overlay# mount -t ubifs ubi0:rootfs_1 /rom/
mount: mounting ubi0:rootfs_1 on /rom/ failed: No such device
root@OpenWrt:/overlay# mount -t ubifs ubi0:rootfs_1 /overlay/
mount: mounting ubi0:rootfs_1 on /overlay/ failed: No such device