Need help uploading openwrt itb to QNAP QHora-301W

m1tchll · April 4, 2024, 8:52am

I tried to do an attended-sysupgrade on my QNAP QHora-301W. I waited over an hour to reboot, and when I did it didn't load openwrt. I attached a serial cable and booted. I need to make sure I have the correct file to load and i need some insrtuctions on loading the file.

Can someone help me?

Thanks,
Robert Mitchell

Format: Log Type - Time(microsec) - Message - Optional Info                     
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic            
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00158                                 
S - IMAGE_VARIANT_STRING=HAABANAZA                                              
S - OEM_IMAGE_VERSION_STRING=CRM                                                
S - Boot Config, 0x000002e1                                                     
B -       203 - PBL, Start                                                      
B -      2741 - bootable_media_detect_entry, Start                              
B -      2888 - bootable_media_detect_success, Start                            
B -      2892 - elf_loader_entry, Start                                         
B -     11444 - auth_hash_seg_entry, Start                                      
B -     11685 - auth_hash_seg_exit, Start                                       
B -    252836 - elf_segs_hash_verify_entry, Start                               
B -    313507 - PBL, End                                                        
B -    325923 - SBL1, Start                                                     
B -    377925 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4             
B -    384391 - pm_device_init, Start                                           
B -    506635 - PM_SET_VAL:Skip                                                 
D -    121756 - pm_device_init, Delta                                           
B -    509075 - pm_driver_init, Start                                           
D -      5368 - pm_driver_init, Delta                                           
B -    515450 - clock_init, Start                                               
D -      2104 - clock_init, Delta                                               
B -    519354 - boot_flash_init, Start                                          
D -     16043 - boot_flash_init, Delta                                          
B -    539148 - boot_config_data_table_init, Start                              
D -      1006 - boot_config_data_table_init, Delta - (575 Bytes)                
B -    546834 - Boot Setting :  0x00000618                                      
B -    550555 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:0     
B -    557479 - sbl1_ddr_set_params, Start                                      
B -    561291 - CPR configuration: 0x30c                                        
B -    564738 - cpr_init, Start                                                 
B -    567513 - Rail:0 Mode: 5 Voltage: 808000                                  
B -    572729 - CL CPR settled at 760000mV                                      
B -    575565 - Rail:1 Mode: 5 Voltage: 880000                                  
B -    579744 - Rail:1 Mode: 7 Voltage: 912000                                  
D -     16531 - cpr_init, Delta                                                 
B -    586545 - Pre_DDR_clock_init, Start                                       
B -    590663 - Pre_DDR_clock_init, End                                         
B -    593957 - DDR Type : PCDDR3                                               
B -    599691 - do ddr sanity test, Start                                       
D -      1037 - do ddr sanity test, Delta                                       
B -    604449 - DDR: Start of HAL DDR Boot Training                             
B -    609176 - DDR: End of HAL DDR Boot Training                               
B -    614849 - DDR: Checksum to be stored on flash is -1553865925              
B -    625372 - Image Load, Start                                               
D -    335957 - QSEE Image Loaded, Delta - (1376448 Bytes)                      
B -    961421 - Image Load, Start                                               
D -        61 - SEC Image Loaded, Delta - (0 Bytes)                             
B -    969076 - Image Load, Start                                               
D -      9760 - DEVCFG Image Loaded, Delta - (26008 Bytes)                      
B -    978928 - Image Load, Start                                               
D -     25955 - RPM Image Loaded, Delta - (86584 Bytes)                         
B -   1004975 - Image Load, Start                                               
D -    136579 - APPSBL Image Loaded, Delta - (556008 Bytes)                     
B -   1141706 - QSEE Execution, Start                                           
D -        91 - QSEE Execution, Delta                                           
B -   1147501 - USB D+ check, Start                                             
D -         0 - USB D+ check, Delta                                             
B -   1153906 - SBL1, End                                                       
D -    830271 - SBL1, Delta                                                     
S - Flash Throughput, 4430 KB/s  (2045623 Bytes,  461734 us)                    
S - DDR Frequency, 466 MHz                                                      
S - Core 0 Frequency, 1651 MHz                                                  
                                                                                
                                                                                
U-Boot 2016.01 (Aug 18 2020 - 16:35:27 +0800)                                   
                                                                                
DRAM:  smem ram ptable found: ver: 1 len: 4                                     
1 GiB                                                                           
NAND:  Could not find nand_gpio in dts, no defaults defined                     
Nand Flash error. Status = 80                                                   
Reset cmd status failed                                                         
SPI_ADDR_LEN=3                                                                  
SF: Detected W25Q64DW with page size 256 Bytes, erase size 4 KiB, total 8 MiB   
ipq_spi: page_size: 0x100, sector_size: 0x1000, size: 0x800000                  
8 MiB                                                                           
MMC:   <NULL>: 0                                                                
In:    serial@78B3000                                                           
Out:   serial@78B3000                                                           
Err:   serial@78B3000                                                           
machid: 8010000                                                                 
Hit any key to stop autoboot:  0                                                
                                                                                
Net:   MAC0 addr:24:5e:be:55:11:72                                              
PHY ID1: 0x0                                                                    
PHY ID2: 0x0                                                                    
EDMA ver 1 hw init                                                              
Num rings - TxDesc:1 (0-0) TxCmpl:1 (7-7)                                       
RxDesc:1 (15-15) RxFill:1 (7-7)                                                 
ipq807x_edma_alloc_rings: successfull                                           
ipq807x_edma_setup_ring_resources: successfull                                  
ipq807x_edma_configure_rings: successfull                                       
ipq807x_edma_hw_init: successfull                                               
eth0                                                                            
IPQ807x# printenv                                                               
BMAC=245EBE551172                                                               
CC=US                                                                           
FWMode=Normal                                                                   
HV=0x01                                                                         
MD=2021/01/25 10:00                                                             
MF=0x01                                                                         
MN=A03                                                                          
NMAC=8                                                                          
PLN=IPQ8072a                                                                    
PN=X6QHora-301W                                                                 
QSN=Q211Q00912                                                                  
SSID=QHora-301W_1172                                                            
VN=0x01                                                                         
baudrate=115200                                                                 
boot_0=good                                                                     
boot_1=good                                                                     
boot_2=good                                                                     
bootargs=console=ttyMSM0,115200n8                                               
bootcmd=aq_load_fw 0 && aq_load_fw 8 && bootipq                                 
current_entry=0                                                                 
eth1addr=24:5e:be:55:11:73                                                      
eth2addr=24:5e:be:55:11:74                                                      
eth3addr=24:5e:be:55:11:75                                                      
eth4addr=24:5e:be:55:11:76                                                      
eth5addr=24:5e:be:55:11:77                                                      
ethact=eth0                                                                     
ethaddr=24:5e:be:55:11:72                                                       
fdt_high=0x4A400000                                                             
fdtcontroladdr=4a96c8d0                                                         
flash_type=8                                                                    
fw_type=router                                                                  
machid=8010000                                                                  
netmask=255.255.255.0                                                           
scan_ramoops_history_done=1                                                     
serverip=192.168.10.1                                                           
soc_version_major=2                                                             
soc_version_minor=0                                                             
stderr=serial@78B3000                                                           
stdin=serial@78B3000                                                            
stdout=serial@78B3000                                                           
                                                                                
Environment size: 829/131068 bytes                                              
IPQ807x#

egc · April 4, 2024, 9:09am

Have you looked at:

github.com/openwrt/openwrt

ipq807x: add QNAP 301w

committed 11:42AM - 16 Jan 23 UTC

+533 -1

QNAP 301w is a AX WIFI router with 4 1G and 2 10G ports. Specifications: •… CPU: Qualcomm IPQ8072A Quad core Cortex-A53 2.2GHz • RAM: 1024MB of DDR3 • Storage: 4GB eMMC (contains kernel and rootfs) / 8MB NOR (contains art and u-boot-env) • Ethernet: 4x 1G RJ45 ports + 2 10G ports (Aquantia AQR113C) • WLAN: 2.4GHz: Qualcomm QCN5024 4x4 (40 MHz) 802.11b/g/n/ax 1174 Mbps PHY rate 5GHz: Qualcomm QCN5054 4x4 (80 MHz) or 2x2 (160 MHz) 802.11a/b/g/n/ac/ax 2402 PHY rate • LEDs: 7 x GPIO-controlled dual color LEDs + 2 GPIO-controlled single color LEDs • Buttons: 1x soft reset / 1x WPS • Power: 12V DC jack A poulated serial header is onboard. RX/TX is working, bootwait is active, secure boot is not enabled. SSH can be activated in the stock firmware, hold WPS button til the second beep (yes the router has a buzzer) SSH is available on port 22200, login with user admin and password "mac address of the router". Installation Instructions: • obtain serial access (https://openwrt.org/inbox/toh/qnap/301w#serial) • stop auto boot • setenv serverip 192.168.10.1 • setenv ipaddr 192.168.10.10 • tftpboot the initramfs image (openwrt-ipq807x-generic-qnap_301w-initramfs-fit-uImage.itb) • bootm • make sure that current_entry is set to "0": "fw_printenv -n current_entry" should be print "0". If not, do "fw_setenv current_entry 0" • copy openwrt-ipq807x-generic-qnap_301w-squashfs-sysupgrade.bin to the device to /tmp folder • sysupgrade -n /tmp/openwrt-ipq807x-generic-qnap_301w-squashfs-sysupgrade.bin this flashes openwrt to the first kernel and rootfs partition (mmcblk0p1 / mmcblk0p4) • reboot Note: this leaves the second kernel / rootfs parition untouched. So if you want to go back to stock, stop u-boot autoboot, "setenv current_entry 1" , "saveenv", "bootipq". Stock firmware should start from the second partition. Then do a firmwareupgrade in the stock gui, that should overwrite the openwrt in the first partitions Make 10G Aquantia phy's work: The aquantia phy's need a firmware to work. This can either be loaded in linux with a userspace tool or in u-boot. I was not successfull to load the firmware in linux (aq-fw-download) but luckily there is aq_load_fw available in u-boot. But first the right firmware needs to write to the 0:ETHPHYFW mtd partition (it is empty on my device) Grab the ethphy firmware image from: https://github.com/kirdesde/nbg7815_gpl/blob/master/target/linux/ipq/ipq807x_64/prebuilt_images/AQR_ethphyfw.mbn and scp that to openwrt. Check the 0:ETHPHYFW partition number: cat /proc/mtd|grep "0:ETHPHYFW", should be mtd10. Backup the 0:ETHPHYFW partition: dd if=/dev/mtd10 of=/tmp/ethphyfw.backup, scp ethphyfw.backup to a save place. Write the new firmware image to the 0:ETHPHYFW partition: "mtd erase /dev/mtd10", "mtd -n write AQR_ethphyfw.mbn /dev/mtd10". Reboot to u-boot. Check if aq_load_fw is working: "aq_load_fw 0", that checks the firmware and if successfull, loads iram and dram to one of the aquantia phy's. If that worked, add the aq_load_fw to the bootcmd: setenv bootcmd "aq_load_fw 0 && aq_load_fw 8 && bootipq" "saveenv" "reset" Board reboots and the firmware load to both phy's should start and then openwrt boots. Check if the 10G ports work. Note: lan port labeled "10G-2" is configured as WAN port as per default. All other port are in the br-lan. This can be changed in the network config. Signed-off-by: Dirk Buchwalder <buchwalder@posteo.de>

m1tchll · April 4, 2024, 10:49am

Yes. That's what I'm using. Right now I'm trying tftpboot, but I'm getting something wrong.

tIPQ807x# tftpboot fw.bin                                                        
ipq807x_eth_halt: done                                                          
eth0 PHY0 Down Speed :10 Half duplex                                            
eth0 PHY1 Down Speed :10 Half duplex                                            
eth0 PHY2 Down Speed :10 Half duplex                                            
eth0 PHY3 up Speed :1000 Full duplex                                            
eth0 PHY4 Down Speed :10 Half duplex                                            
10M speed not supported                                                         
ipq807x_eth_init: done                                                          
Using eth0 device                                                               
TFTP from server 192.168.10.10; our IP address is 192.168.10.1                  
Filename 'fw.bin'.                                                              
Load address: 0x44000000                                                        
Loading: TFTP server dies: print the pkt buffer                                 
                                                                                
TFTP server died; starting again

Borromini · April 4, 2024, 10:58am

Is your TFTP server running correctly? Since it 'dies', according to your bootloader.

m1tchll · April 4, 2024, 11:01am

I'll check it and post the results.

m1tchll · April 4, 2024, 5:29pm

I had to sleep. I noticed this while scanning through output from the SOC. It look like I do have the kernel loaded, but possibly not correct Uboot variables to run properly. Can I get someone to look and see if that is correct?

## Loading kernel from FIT Image at 44000000 ...                                
   Using 'config@hk01' configuration                                            
   Trying 'kernel-1' kernel subimage                                            
     Description:  ARM64 OpenWrt Linux-6.1.82                                   
     Type:         Kernel Image                                                 
     Compression:  gzip compressed                                              
     Data Start:   0x440000e8                                                   
     Data Size:    5122563 Bytes = 4.9 MiB                                      
     Architecture: AArch64                                                      
     OS:           Linux                                                        
     Load Address: 0x41000000                                                   
     Entry Point:  0x41000000                                                   
     Hash algo:    crc32                                                        
     Hash value:   9be3b12c                                                     
     Hash algo:    sha1                                                         
     Hash value:   a4705be7c4425d6558d48ffe3b82d27a7ca537f5                     
   Verifying Hash Integrity ... crc32+ sha1+ OK                                 
## Loading fdt from FIT Image at 44000000 ...                                   
   Using 'config@hk01' configuration                                            
   Trying 'fdt-1' fdt subimage                                                  
     Description:  ARM64 OpenWrt qnap_301w device tree blob                     
     Type:         Flat Device Tree                                             
     Compression:  uncompressed                                                 
     Data Start:   0x444e2c28                                                   
     Data Size:    47152 Bytes = 46 KiB                                         
     Architecture: AArch64                                                      
     Hash algo:    crc32                                                        
     Hash value:   7020f746                                                     
     Hash algo:    sha1                                                         
     Hash value:   8b31de02f2d212be788fc3f2d320fa1d202a30fb                     
   Verifying Hash Integrity ... crc32+ sha1+ OK                                 
   Booting using the fdt blob at 0x444e2c28                                     
   Uncompressing Kernel Image ... OK                                            
   Loading Device Tree to 4a3f1000, end 4a3ff82f ... OK                         
fdt-fixup: unable to find compatible node                                       
Using machid 0x8010000 from environment                                         
                                                                                
Starting kernel ...                                                             
                                                                                
Jumping to AARCH64 kernel via monitor                                           
[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]          
[    0.000000] Linux version 6.1.82 (builder@buildhost) (aarch64-openwrt-linux-4
[    0.000000] Machine model: QNAP 301w                                         
[    0.000000] Zone ranges:                                                     
[    0.000000]   DMA      [mem 0x0000000040000000-0x000000007fffffff]           
[    0.000000]   DMA32    empty                                                 
[    0.000000]   Normal   empty                                                 
[    0.000000] Movable zone start for each node                                 
[    0.000000] Early memory node ranges                                         
[    0.000000]   node   0: [mem 0x0000000040000000-0x0000000040ffffff]          
[    0.000000]   node   0: [mem 0x0000000041000000-0x000000004a3fffff]          
[    0.000000]   node   0: [mem 0x000000004a400000-0x00000000510fffff]          
[    0.000000]   node   0: [mem 0x0000000051100000-0x000000007fffffff]          
[    0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000007fffffff] 
[    0.000000] psci: probing for conduit method from DT.                        
[    0.000000] psci: PSCIv1.0 detected in firmware.                             
[    0.000000] psci: Using standard PSCI v0.2 function IDs                      
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.                           
[    0.000000] psci: SMC Calling Convention v1.0                                
[    0.000000] percpu: Embedded 18 pages/cpu s34664 r8192 d30872 u73728         
[    0.000000] Detected VIPT I-cache on CPU0                                    
[    0.000000] alternatives: applying boot alternatives                         
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 258048    
[    0.000000] Kernel command line: console=ttyMSM0,115200n8 root=PARTUUID=2a21t
[    0.000000] Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes)
[    0.000000] Inode-cache hash table entries: 65536 (order: 7, 524288 bytes, l)
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off          
[    0.000000] Memory: 887128K/1048576K available (8128K kernel code, 890K rwda)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1       
[    0.000000] rcu: Hierarchical RCU implementation.                            
[    0.000000]  Tracing variant of Tasks RCU enabled.                           
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 ji.
[    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0                   
[    0.000000] Root IRQ handler: gic_handle_irq                                 
[    0.000000] GICv2m: range[mem 0x0b00a000-0x0b00affc], SPI[448:479]           
[    0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.   
[    0.000000] arch_timer: cp15 and mmio timer(s) running at 19.20MHz (virt/vir.
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycless
[    0.000000] sched_clock: 56 bits at 19MHz, resolution 52ns, wraps every 4398s
[    0.000125] Calibrating delay loop (skipped), value calculated using timer f)
[    0.000139] pid_max: default: 32768 minimum: 301                             
[    0.000612] Mount-cache hash table entries: 2048 (order: 2, 16384 bytes, lin)
[    0.000626] Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes)
[    0.002467] cblist_init_generic: Setting adjustable number of callback queue.
[    0.002476] cblist_init_generic: Setting shift to 2 and lim to 1.            
[    0.002667] rcu: Hierarchical SRCU implementation.                           
[    0.002671] rcu:     Max phase no-delay instances is 1000.                   
[    0.003502] smp: Bringing up secondary CPUs ...                              
[    0.004133] Detected VIPT I-cache on CPU1                                    
[    0.004274] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]       
[    0.004928] Detected VIPT I-cache on CPU2                                    
[    0.005035] CPU2: Booted secondary processor 0x0000000002 [0x410fd034]       
[    0.005645] Detected VIPT I-cache on CPU3                                    
[    0.005742] CPU3: Booted secondary processor 0x0000000003 [0x410fd034]       
[    0.005807] smp: Brought up 1 node, 4 CPUs                                   
[    0.005815] SMP: Total of 4 processors activated.                            
[    0.005820] CPU features: detected: 32-bit EL0 Support                       
[    0.005825] CPU features: detected: CRC32 instructions                       
[    0.005886] CPU features: emulated: Privileged Access Never (PAN) using TTBRg
[    0.005893] CPU: All CPU(s) started at EL1                                   
[    0.005896] alternatives: applying system-wide alternatives                  
[    0.016873] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, ms
[    0.016899] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)   
[    0.017116] pinctrl core: initialized pinctrl subsystem                      
[    0.018546] NET: Registered PF_NETLINK/PF_ROUTE protocol family              
[    0.019088] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations 
[    0.019127] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic alls
[    0.019175] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic as
[    0.019542] thermal_sys: Registered thermal governor 'step_wise'             
[    0.019726] cpuidle: using governor menu                                     
[    0.019996] ASID allocator initialised with 65536 entries                    
[    0.073940] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count4
[    0.082961] SCSI subsystem initialized                                       
[    0.083147] usbcore: registered new interface driver usbfs                   
[    0.083198] usbcore: registered new interface driver hub                     
[    0.083257] usbcore: registered new device driver usb                        
[    0.083683] qcom_scm: convention: smc arm 64                                 
[    0.085240] clocksource: Switched to clocksource arch_sys_counter            
[    0.086450] NET: Registered PF_INET protocol family                          
[    0.086603] IP idents hash table entries: 16384 (order: 5, 131072 bytes, lin)
[    0.088038] tcp_listen_portaddr_hash hash table entries: 512 (order: 1, 8192)
[    0.088062] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes,)
[    0.088076] TCP established hash table entries: 8192 (order: 4, 65536 bytes,)
[    0.088163] TCP bind hash table entries: 8192 (order: 6, 262144 bytes, linea)
[    0.088439] TCP: Hash tables configured (established 8192 bind 8192)         
[    0.088541] UDP hash table entries: 512 (order: 2, 16384 bytes, linear)      
[    0.088590] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes, linear) 
[    0.088806] NET: Registered PF_UNIX/PF_LOCAL protocol family                 
[    0.088844] PCI: CLS 0 bytes, default 64                                     
[    0.090220] workingset: timestamp_bits=46 max_order=18 bucket_order=0        
[    0.095203] squashfs: version 4.0 (2009/01/31) Phillip Lougher               
[    0.095214] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORI.
[    0.096298] Block layer SCSI generic (bsg) driver version 0.4 loaded (major )
[    0.098429] qcom-qmp-usb-phy 58000.phy: supply vdda-phy not found, using dumr
[    0.098603] qcom-qmp-usb-phy 58000.phy: supply vdda-pll not found, using dumr
[    0.100022] qcom-qmp-usb-phy 78000.phy: supply vdda-phy not found, using dumr
[    0.100193] qcom-qmp-usb-phy 78000.phy: supply vdda-pll not found, using dumr
[    0.101907] qcom-qusb2-phy 59000.phy: supply vdd not found, using dummy regur
[    0.102052] qcom-qusb2-phy 59000.phy: supply vdda-pll not found, using dummyr
[    0.102095] qcom-qusb2-phy 59000.phy: supply vdda-phy-dpdm not found, using r
[    0.102241] qcom-qusb2-phy 59000.phy: Registered Qcom-QUSB2 phy              
[    0.102432] qcom-qusb2-phy 79000.phy: supply vdd not found, using dummy regur
[    0.102577] qcom-qusb2-phy 79000.phy: supply vdda-pll not found, using dummyr
[    0.102631] qcom-qusb2-phy 79000.phy: supply vdda-phy-dpdm not found, using r
[    0.102792] qcom-qusb2-phy 79000.phy: Registered Qcom-QUSB2 phy              
[    0.107619] bam-dma-engine 704000.dma-controller: num-channels unspecified it
[    0.107635] bam-dma-engine 704000.dma-controller: num-ees unspecified in dt  
[    0.112175] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled         
[    0.114267] msm_serial 78b3000.serial: msm_serial: detected port #0          
[    0.114306] msm_serial 78b3000.serial: uartclk = 3686400                     
[    0.114422] 78b3000.serial: ttyMSM0 at MMIO 0x78b3000 (irq = 20, base_baud =M
[    0.114452] msm_serial: console setup on port #0                             
[    0.822260] printk: console [ttyMSM0] enabled                                
[    0.827396] msm_serial: driver initialized                                   
[    0.836224] loop: module loaded                                              
[    0.837567] spi_qup 78b5000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64 
[    0.839160] spi-nor spi0.0: w25q64dw (8192 Kbytes)                           
[    0.845798] 13 fixed-partitions partitions found on MTD device spi0.0        
[    0.850122] Creating 13 MTD partitions on "spi0.0":                          
[    0.856637] 0x000000000000-0x000000050000 : "0:sbl1"                         
[    0.861829] 0x000000050000-0x000000060000 : "0:mibib"                        
[    0.867098] 0x000000060000-0x0000001e0000 : "0:qsee"                         
[    0.871922] 0x0000001e0000-0x0000001f0000 : "0:devcfg"                       
[    0.877036] 0x0000001f0000-0x000000200000 : "0:apdp"                         
[    0.881913] 0x000000200000-0x000000240000 : "0:rpm"                          
[    0.887066] 0x000000240000-0x000000250000 : "0:cdt"                          
[    0.891602] 0x000000250000-0x000000270000 : "0:appsblenv"                    
[    0.896504] 0x000000250000-0x000000350000 : "0:appsbl"                       
[    0.902066] 0x000000370000-0x0000003b0000 : "0:art"                          
[    0.907153] 0x0000003b0000-0x000000430000 : "0:ethphyfw1"                    
[    0.911896] 0x000000430000-0x0000004b0000 : "0:ethphyfw2"                    
[    0.917477] 0x0000004b0000-0x000000800000 : "reserved"                       
[    0.927870] spmi spmi-0: PMIC arbiter version v2 (0x20010000)                
[    0.954033] i2c_dev: i2c /dev entries driver                                 
[    0.960372] sdhci: Secure Digital Host Controller Interface driver

frollic · April 4, 2024, 6:04pm

Stop auto boot, and execute printenv.

m1tchll · April 4, 2024, 7:27pm

I'm not sure what I should enter to stop auto boot.

IPQ807x# printenv                                                               
BMAC=245EBE551172                                                               
CC=US                                                                           
FWMode=Normal                                                                   
HV=0x01                                                                         
MD=2021/01/25 10:00                                                             
MF=0x01                                                                         
MN=A03                                                                          
NMAC=8                                                                          
PLN=IPQ8072a                                                                    
PN=X6QHora-301W                                                                 
QSN=Q211Q00912                                                                  
SSID=QHora-301W_1172                                                            
VN=0x01                                                                         
baudrate=115200                                                                 
boot_0=good                                                                     
boot_1=good                                                                     
boot_2=good                                                                     
bootargs=console=ttyMSM0,115200n8                                               
bootcmd=aq_load_fw 0 && aq_load_fw 8 && bootipq                                 
current_entry=0                                                                 
eth1addr=24:5e:be:55:11:73                                                      
eth2addr=24:5e:be:55:11:74                                                      
eth3addr=24:5e:be:55:11:75                                                      
eth4addr=24:5e:be:55:11:76                                                      
eth5addr=24:5e:be:55:11:77                                                      
ethact=eth0                                                                     
ethaddr=24:5e:be:55:11:72                                                       
fdt_high=0x4A400000                                                             
fdtcontroladdr=4a96c8d0                                                         
flash_type=8                                                                    
fw_type=router                                                                  
ipaddr=192.168.10.1                                                             
machid=8010000                                                                  
netmask=255.255.255.0                                                           
scan_ramoops_history_done=1                                                     
serverip=192.168.10.10                                                          
soc_version_major=2                                                             
soc_version_minor=0                                                             
stderr=serial@78B3000                                                           
stdin=serial@78B3000                                                            
stdout=serial@78B3000                                                           
                                                                                
Environment size: 852/131068 bytes

frollic · April 4, 2024, 8:04pm

Seems you just did ?

m1tchll · April 4, 2024, 8:05pm

I'm not sure what I did to get here, but something is running. I tried my username root/openwrt password and failed to log in.

I have too much data that I'm trying to send here. I need another wat to send this:

-rwxrwxrwx 1 mythtv mythtv 106195 Apr  4 15:58 lastboot.txt

frollic · April 4, 2024, 8:06pm

I'd say you're connected to the wrong box.

m1tchll · April 4, 2024, 8:20pm

I haven't changed my connections, so I couldn't have.

I did manage to stop autoboot.


                                                                                
Format: Log Type - Time(microsec) - Message - Optional Info                     
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic            
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00158                                 
S - IMAGE_VARIANT_STRING=HAABANAZA                                              
S - OEM_IMAGE_VERSION_STRING=CRM                                                
S - Boot Config, 0x000002e1                                                     
B -       203 - PBL, Start                                                      
B -      2741 - bootable_media_detect_entry, Start                              
B -      2887 - bootable_media_detect_success, Start                            
B -      2891 - elf_loader_entry, Start                                         
B -     11381 - auth_hash_seg_entry, Start                                      
B -     11624 - auth_hash_seg_exit, Start                                       
B -    250661 - elf_segs_hash_verify_entry, Start                               
B -    311330 - PBL, End                                                        
B -    323635 - SBL1, Start                                                     
B -    375638 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4             
B -    382104 - pm_device_init, Start                                           
B -    503433 - PM_SET_VAL:Skip                                                 
D -    120841 - pm_device_init, Delta                                           
B -    505842 - pm_driver_init, Start                                           
D -      5337 - pm_driver_init, Delta                                           
B -    512186 - clock_init, Start                                               
D -      2104 - clock_init, Delta                                               
B -    516182 - boot_flash_init, Start                                          
D -     16012 - boot_flash_init, Delta                                          
B -    535976 - boot_config_data_table_init, Start                              
D -      1006 - boot_config_data_table_init, Delta - (575 Bytes)                
B -    543662 - Boot Setting :  0x00000618                                      
B -    547383 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:0     
B -    554307 - sbl1_ddr_set_params, Start                                      
B -    558119 - CPR configuration: 0x30c                                        
B -    561566 - cpr_init, Start                                                 
B -    564341 - Rail:0 Mode: 5 Voltage: 808000                                  
B -    569557 - CL CPR settled at 760000mV                                      
B -    572393 - Rail:1 Mode: 5 Voltage: 880000                                  
B -    576572 - Rail:1 Mode: 7 Voltage: 912000                                  
D -     16531 - cpr_init, Delta                                                 
B -    583373 - Pre_DDR_clock_init, Start                                       
B -    587460 - Pre_DDR_clock_init, End                                         
B -    590785 - DDR Type : PCDDR3                                               
B -    596458 - do ddr sanity test, Start                                       
D -      1067 - do ddr sanity test, Delta                                       
B -    601307 - DDR: Start of HAL DDR Boot Training                             
B -    605943 - DDR: End of HAL DDR Boot Training                               
B -    611738 - DDR: Checksum to be stored on flash is -1553865925              
B -    622139 - Image Load, Start                                               
D -    335957 - QSEE Image Loaded, Delta - (1376448 Bytes)                      
B -    958188 - Image Load, Start                                               
D -        30 - SEC Image Loaded, Delta - (0 Bytes)                             
B -    965843 - Image Load, Start                                               
D -      9760 - DEVCFG Image Loaded, Delta - (26008 Bytes)                      
B -    975695 - Image Load, Start                                               
D -     25986 - RPM Image Loaded, Delta - (86584 Bytes)                         
B -   1001772 - Image Load, Start                                               
D -    136579 - APPSBL Image Loaded, Delta - (556008 Bytes)                     
B -   1138473 - QSEE Execution, Start                                           
D -        61 - QSEE Execution, Delta                                           
B -   1144268 - USB D+ check, Start                                             
D -         0 - USB D+ check, Delta                                             
B -   1150673 - SBL1, End                                                       
D -    829356 - SBL1, Delta                                                     
S - Flash Throughput, 4431 KB/s  (2045623 Bytes,  461641 us)                    
S - DDR Frequency, 466 MHz                                                      
S - Core 0 Frequency, 1651 MHz                                                  
                                                                                
                                                                                
U-Boot 2016.01 (Aug 18 2020 - 16:35:27 +0800)                                   
                                                                                
DRAM:  smem ram ptable found: ver: 1 len: 4                                     
1 GiB                                                                           
NAND:  Could not find nand_gpio in dts, no defaults defined                     
Nand Flash error. Status = 80                                                   
Reset cmd status failed                                                         
SPI_ADDR_LEN=3                                                                  
SF: Detected W25Q64DW with page size 256 Bytes, erase size 4 KiB, total 8 MiB   
ipq_spi: page_size: 0x100, sector_size: 0x1000, size: 0x800000                  
8 MiB                                                                           
MMC:   <NULL>: 0                                                                
In:    serial@78B3000                                                           
Out:   serial@78B3000                                                           
Err:   serial@78B3000                                                           
machid: 8010000                                                                 
Hit any key to stop autoboot:  2                                                
                                                                                
Net:   MAC0 addr:24:5e:be:55:11:72                                              
PHY ID1: 0x0                                                                    
PHY ID2: 0x0                                                                    
EDMA ver 1 hw init                                                              
Num rings - TxDesc:1 (0-0) TxCmpl:1 (7-7)                                       
RxDesc:1 (15-15) RxFill:1 (7-7)                                                 
ipq807x_edma_alloc_rings: successfull                                           
ipq807x_edma_setup_ring_resources: successfull                                  
ipq807x_edma_configure_rings: successfull                                       
ipq807x_edma_hw_init: successfull                                               
eth0                                                                            
IPQ807x# printenv                                                               
BMAC=245EBE551172                                                               
CC=US                                                                           
FWMode=Normal                                                                   
HV=0x01                                                                         
MD=2021/01/25 10:00                                                             
MF=0x01                                                                         
MN=A03                                                                          
NMAC=8                                                                          
PLN=IPQ8072a                                                                    
PN=X6QHora-301W                                                                 
QSN=Q211Q00912                                                                  
SSID=QHora-301W_1172                                                            
VN=0x01                                                                         
baudrate=115200                                                                 
boot_0=bad                                                                      
boot_1=bad                                                                      
boot_2=good                                                                     
bootargs=console=ttyMSM0,115200n8                                               
bootcmd=aq_load_fw 0 && aq_load_fw 8 && bootipq                                 
current_entry=0                                                                 
eth1addr=24:5e:be:55:11:73                                                      
eth2addr=24:5e:be:55:11:74                                                      
eth3addr=24:5e:be:55:11:75                                                      
eth4addr=24:5e:be:55:11:76                                                      
eth5addr=24:5e:be:55:11:77                                                      
ethact=eth0                                                                     
ethaddr=24:5e:be:55:11:72                                                       
fdt_high=0x4A400000                                                             
fdtcontroladdr=4a96c8d0                                                         
flash_type=8                                                                    
fw_type=router                                                                  
machid=8010000                                                                  
netmask=255.255.255.0                                                           
scan_ramoops_history_done=1                                                     
soc_version_major=2                                                             
soc_version_minor=0                                                             
stderr=serial@78B3000                                                           
stdin=serial@78B3000                                                            
stdout=serial@78B3000                                                           
                                                                                
Environment size: 803/131068 bytes                                              
IPQ807x#

frollic · April 4, 2024, 8:26pm

What's the actual problem ?

In your 3rd post it booted ...

m1tchll · April 4, 2024, 8:35pm

Now it doesn't boot to openwrt. I sent the U-boot log showing U-boot booted and printenv data.

This is where it is now in screen:
IPQ807x#

frollic · April 4, 2024, 8:47pm

Try executing the three commands separated by && from the bootcmd variable.

Post the complete output.

m1tchll · April 4, 2024, 8:58pm

I think this is good news

IPQ807x# aq_load_fw 0 && aq_load_fw 8 && bootipq                                
SPI_ADDR_LEN=3                                                                  
SF: Detected W25Q64DW with page size 256 Bytes, erase size 4 KiB, total 8 MiB   
device 0 offset 0x3b0000, size 0x80000                                          
SF: 524288 bytes @ 0x3b0000 Read: OK                                            
CRC check good on phy fw file (0x4B33)                                          
PHYFW:Loading IRAM...........done.                                              
PHYFW:Loading DRAM..............done.                                           
phy fw image load good CRC-16 matches (0x6FFA)                                  
SPI_ADDR_LEN=3                                                                  
SF: Detected W25Q64DW with page size 256 Bytes, erase size 4 KiB, total 8 MiB   
device 0 offset 0x3b0000, size 0x80000                                          
SF: 524288 bytes @ 0x3b0000 Read: OK                                            
CRC check good on phy fw file (0x4B33)                                          
PHYFW:Loading IRAM...........done.                                              
PHYFW:Loading DRAM..............done.                                           
phy fw image load good CRC-16 matches (0x6FFA)                                  
                                                                                
MMC read: dev # 0, block # 34, count 32768 ... 32768 blocks read: OK            
## Loading kernel from FIT Image at 44000000 ...                                
   Using 'config@hk01' configuration                                            
   Trying 'kernel-1' kernel subimage                                            
     Description:  ARM64 OpenWrt Linux-6.1.82                                   
     Type:         Kernel Image                                                 
     Compression:  gzip compressed                                              
     Data Start:   0x440000e8                                                   
     Data Size:    5122563 Bytes = 4.9 MiB                                      
     Architecture: AArch64                                                      
     OS:           Linux                                                        
     Load Address: 0x41000000                                                   
     Entry Point:  0x41000000                                                   
     Hash algo:    crc32                                                        
     Hash value:   9be3b12c                                                     
     Hash algo:    sha1                                                         
     Hash value:   a4705be7c4425d6558d48ffe3b82d27a7ca537f5                     
   Verifying Hash Integrity ... crc32+ sha1+ OK                                 
## Loading fdt from FIT Image at 44000000 ...                                   
   Using 'config@hk01' configuration                                            
   Trying 'fdt-1' fdt subimage                                                  
     Description:  ARM64 OpenWrt qnap_301w device tree blob                     
     Type:         Flat Device Tree                                             
     Compression:  uncompressed                                                 
     Data Start:   0x444e2c28                                                   
     Data Size:    47152 Bytes = 46 KiB                                         
     Architecture: AArch64                                                      
     Hash algo:    crc32                                                        
     Hash value:   7020f746                                                     
     Hash algo:    sha1                                                         
     Hash value:   8b31de02f2d212be788fc3f2d320fa1d202a30fb                     
   Verifying Hash Integrity ... crc32+ sha1+ OK                                 
   Booting using the fdt blob at 0x444e2c28                                     
   Uncompressing Kernel Image ... OK                                            
   Loading Device Tree to 4a3f1000, end 4a3ff82f ... OK                         
fdt-fixup: unable to find compatible node                                       
Using machid 0x8010000 from environment                                         
                                                                                
Starting kernel ...                                                             
                                                                                
Jumping to AARCH64 kernel via monitor                                           
[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]          
[    0.000000] Linux version 6.1.82 (builder@buildhost) (aarch64-openwrt-linux-4
[    0.000000] Machine model: QNAP 301w                                         
[    0.000000] Zone ranges:                                                     
[    0.000000]   DMA      [mem 0x0000000040000000-0x000000007fffffff]           
[    0.000000]   DMA32    empty                                                 
[    0.000000]   Normal   empty                                                 
[    0.000000] Movable zone start for each node                                 
[    0.000000] Early memory node ranges                                         
[    0.000000]   node   0: [mem 0x0000000040000000-0x0000000040ffffff]          
[    0.000000]   node   0: [mem 0x0000000041000000-0x000000004a3fffff]          
[    0.000000]   node   0: [mem 0x000000004a400000-0x00000000510fffff]          
[    0.000000]   node   0: [mem 0x0000000051100000-0x000000007fffffff]          
[    0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000007fffffff] 
[    0.000000] psci: probing for conduit method from DT.                        
[    0.000000] psci: PSCIv1.0 detected in firmware.                             
[    0.000000] psci: Using standard PSCI v0.2 function IDs                      
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.                           
[    0.000000] psci: SMC Calling Convention v1.0                                
[    0.000000] percpu: Embedded 18 pages/cpu s34664 r8192 d30872 u73728         
[    0.000000] Detected VIPT I-cache on CPU0                                    
[    0.000000] alternatives: applying boot alternatives                         
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 258048    
[    0.000000] Kernel command line: console=ttyMSM0,115200n8 root=PARTUUID=2a21t
[    0.000000] Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes)
[    0.000000] Inode-cache hash table entries: 65536 (order: 7, 524288 bytes, l)
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off          
[    0.000000] Memory: 887128K/1048576K available (8128K kernel code, 890K rwda)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1       
[    0.000000] rcu: Hierarchical RCU implementation.                            
[    0.000000]  Tracing variant of Tasks RCU enabled.                           
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 ji.
[    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0                   
[    0.000000] Root IRQ handler: gic_handle_irq                                 
[    0.000000] GICv2m: range[mem 0x0b00a000-0x0b00affc], SPI[448:479]           
[    0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.   
[    0.000000] arch_timer: cp15 and mmio timer(s) running at 19.20MHz (virt/vir.
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycless
[    0.000000] sched_clock: 56 bits at 19MHz, resolution 52ns, wraps every 4398s
[    0.000125] Calibrating delay loop (skipped), value calculated using timer f)
[    0.000138] pid_max: default: 32768 minimum: 301                             
[    0.000606] Mount-cache hash table entries: 2048 (order: 2, 16384 bytes, lin)
[    0.000620] Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes)
[    0.002460] cblist_init_generic: Setting adjustable number of callback queue.
[    0.002469] cblist_init_generic: Setting shift to 2 and lim to 1.            
[    0.002659] rcu: Hierarchical SRCU implementation.                           
[    0.002662] rcu:     Max phase no-delay instances is 1000.                   
[    0.003470] smp: Bringing up secondary CPUs ...                              
[    0.004103] Detected VIPT I-cache on CPU1                                    
[    0.004243] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]       
[    0.004902] Detected VIPT I-cache on CPU2                                    
[    0.005006] CPU2: Booted secondary processor 0x0000000002 [0x410fd034]       
[    0.005615] Detected VIPT I-cache on CPU3                                    
[    0.005712] CPU3: Booted secondary processor 0x0000000003 [0x410fd034]       
[    0.005778] smp: Brought up 1 node, 4 CPUs                                   
[    0.005786] SMP: Total of 4 processors activated.                            
[    0.005791] CPU features: detected: 32-bit EL0 Support                       
[    0.005796] CPU features: detected: CRC32 instructions                       
[    0.005858] CPU features: emulated: Privileged Access Never (PAN) using TTBRg
[    0.005864] CPU: All CPU(s) started at EL1                                   
[    0.005867] alternatives: applying system-wide alternatives                  
[    0.016826] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, ms
[    0.016853] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)   
[    0.017069] pinctrl core: initialized pinctrl subsystem                      
[    0.018494] NET: Registered PF_NETLINK/PF_ROUTE protocol family              
[    0.019031] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations 
[    0.019071] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic alls
[    0.019120] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic as
[    0.019487] thermal_sys: Registered thermal governor 'step_wise'             
[    0.019669] cpuidle: using governor menu                                     
[    0.019938] ASID allocator initialised with 65536 entries                    
[    0.073781] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count4
[    0.082824] SCSI subsystem initialized                                       
[    0.083009] usbcore: registered new interface driver usbfs                   
[    0.083061] usbcore: registered new interface driver hub                     
[    0.083119] usbcore: registered new device driver usb                        
[    0.083547] qcom_scm: convention: smc arm 64                                 
[    0.085099] clocksource: Switched to clocksource arch_sys_counter            
[    0.086263] NET: Registered PF_INET protocol family                          
[    0.086406] IP idents hash table entries: 16384 (order: 5, 131072 bytes, lin)
[    0.087827] tcp_listen_portaddr_hash hash table entries: 512 (order: 1, 8192)
[    0.087851] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes,)
[    0.087877] TCP established hash table entries: 8192 (order: 4, 65536 bytes,)
[    0.087965] TCP bind hash table entries: 8192 (order: 6, 262144 bytes, linea)
[    0.088238] TCP: Hash tables configured (established 8192 bind 8192)         
[    0.088338] UDP hash table entries: 512 (order: 2, 16384 bytes, linear)      
[    0.088375] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes, linear) 
[    0.088588] NET: Registered PF_UNIX/PF_LOCAL protocol family                 
[    0.088626] PCI: CLS 0 bytes, default 64                                     
[    0.089897] workingset: timestamp_bits=46 max_order=18 bucket_order=0        
[    0.094933] squashfs: version 4.0 (2009/01/31) Phillip Lougher               
[    0.094945] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORI.
[    0.095993] Block layer SCSI generic (bsg) driver version 0.4 loaded (major )
[    0.098061] qcom-qmp-usb-phy 58000.phy: supply vdda-phy not found, using dumr
[    0.098230] qcom-qmp-usb-phy 58000.phy: supply vdda-pll not found, using dumr
[    0.099647] qcom-qmp-usb-phy 78000.phy: supply vdda-phy not found, using dumr
[    0.099783] qcom-qmp-usb-phy 78000.phy: supply vdda-pll not found, using dumr
[    0.101510] qcom-qusb2-phy 59000.phy: supply vdd not found, using dummy regur
[    0.101646] qcom-qusb2-phy 59000.phy: supply vdda-pll not found, using dummyr
[    0.101712] qcom-qusb2-phy 59000.phy: supply vdda-phy-dpdm not found, using r
[    0.101870] qcom-qusb2-phy 59000.phy: Registered Qcom-QUSB2 phy              
[    0.102070] qcom-qusb2-phy 79000.phy: supply vdd not found, using dummy regur
[    0.102181] qcom-qusb2-phy 79000.phy: supply vdda-pll not found, using dummyr
[    0.102253] qcom-qusb2-phy 79000.phy: supply vdda-phy-dpdm not found, using r
[    0.102440] qcom-qusb2-phy 79000.phy: Registered Qcom-QUSB2 phy              
[    0.107239] bam-dma-engine 704000.dma-controller: num-channels unspecified it
[    0.107254] bam-dma-engine 704000.dma-controller: num-ees unspecified in dt  
[    0.111804] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled         
[    0.113899] msm_serial 78b3000.serial: msm_serial: detected port #0          
[    0.113955] msm_serial 78b3000.serial: uartclk = 3686400                     
[    0.114069] 78b3000.serial: ttyMSM0 at MMIO 0x78b3000 (irq = 20, base_baud =M
[    0.114098] msm_serial: console setup on port #0                             
[    0.821910] printk: console [ttyMSM0] enabled                                
[    0.827083] msm_serial: driver initialized                                   
[    0.835926] loop: module loaded                                              
[    0.837202] spi_qup 78b5000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64 
[    0.838809] spi-nor spi0.0: w25q64dw (8192 Kbytes)                           
[    0.845487] 13 fixed-partitions partitions found on MTD device spi0.0        
[    0.849786] Creating 13 MTD partitions on "spi0.0":                          
[    0.856306] 0x000000000000-0x000000050000 : "0:sbl1"                         
[    0.861523] 0x000000050000-0x000000060000 : "0:mibib"                        
[    0.866691] 0x000000060000-0x0000001e0000 : "0:qsee"                         
[    0.871615] 0x0000001e0000-0x0000001f0000 : "0:devcfg"                       
[    0.876701] 0x0000001f0000-0x000000200000 : "0:apdp"                         
[    0.881549] 0x000000200000-0x000000240000 : "0:rpm"                          
[    0.886774] 0x000000240000-0x000000250000 : "0:cdt"                          
[    0.891249] 0x000000250000-0x000000270000 : "0:appsblenv"                    
[    0.896192] 0x000000250000-0x000000350000 : "0:appsbl"                       
[    0.901736] 0x000000370000-0x0000003b0000 : "0:art"                          
[    0.906804] 0x0000003b0000-0x000000430000 : "0:ethphyfw1"                    
[    0.911527] 0x000000430000-0x0000004b0000 : "0:ethphyfw2"                    
[    0.917169] 0x0000004b0000-0x000000800000 : "reserved"                       
[    0.927514] spmi spmi-0: PMIC arbiter version v2 (0x20010000)                
[    0.953622] i2c_dev: i2c /dev entries driver                                 
[    0.960030] sdhci: Secure Digital Host Controller Interface driver           
[    0.960074] sdhci: Copyright(c) Pierre Ossman                                
[    0.965138] sdhci-pltfm: SDHCI platform and OF driver helper                 
[    0.971508] remoteproc remoteproc0: releasing cd00000.q6v5_wcss              
[    0.978640] NET: Registered PF_INET6 protocol family                         
[    0.982090] Segment Routing with IPv6                                        
[    0.986211] In-situ OAM (IOAM) with IPv6                                     
[    0.989764] NET: Registered PF_PACKET protocol family                        
[    0.993717] bridge: filtering via arp/ip/ip6tables is no longer available by.
[    0.998786] 8021q: 802.1Q VLAN Support v1.8                                  
[    1.005127] mmc0: SDHCI controller on 7824900.mmc [7824900.mmc] using ADMA 6t
[    1.033847] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count4
[    1.034209] cpr4_ipq807x_apss_read_fuse_data: apc_corner: speed bin = 0      
[    1.040011] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR fusing revisio1
[    1.046580] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR misc fuse valu0
[    1.054234] cpr4_ipq807x_apss_read_fuse_data: apc_corner: Voltage boost fusee
[    1.061754] cpr3_mem_acc_init: apc: not using memory accelerator regulator   
[    1.070885] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fuseV
[    1.077834] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fuseV
[    1.087815] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fuseV
[    1.097623] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fuseV
[    1.107486] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused 0
[    1.117246] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused 0
[    1.128095] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused 5
[    1.139033] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused 0
[    1.150155] cpr3_regulator_init_ctrl: apc: Default CPR mode = closed-loop    
[    1.153195] cpufreq: cpufreq_online: CPU0: Running at unlisted initial frequz
[�[    1.179526] Waiting for root device PARTUUID=2a213133-47f8-80a1-5d66-1d565.
[    1.190033] mmc0: new HS200 MMC card at address 0001                         
[    1.190512] mmcblk0: mmc0:0001 Q2J54A 3.64 GiB                               
[    1.195521]  mmcblk0: p1 p2 p3 p4 p5 p6 p7 p8 p9                             
[    1.199029] mmcblk0boot0: mmc0:0001 Q2J54A 2.00 MiB                          
[    1.203598] mmcblk0boot1: mmc0:0001 Q2J54A 2.00 MiB                          
[    1.208364] mmcblk0rpmb: mmc0:0001 Q2J54A 512 KiB, chardev (246:0)           
[    1.247981] VFS: Mounted root (squashfs filesystem) readonly on device 179:4.
[    1.248438] Freeing unused kernel memory: 1280K                              
[    1.335127] Run /sbin/init as init process                                   
[    1.336108] Run /etc/init as init process                                    
[    1.338209] Run /bin/init as init process                                    
[    1.342238] Run /bin/sh as init process                                      
[    1.346253] Kernel panic - not syncing: No working init found.  Try passing .
[    1.349846] CPU: 1 PID: 1 Comm: swapper/0 Not tainted 6.1.82 #0              
[    1.364062] Hardware name: QNAP 301w (DT)                                    
[    1.369876] Call trace:                                                      
[    1.374038]  dump_backtrace.part.0+0xbc/0xd0                                 
[    1.376299]  show_stack+0x18/0x30                                            
[    1.380811]  dump_stack_lvl+0x6c/0x88                                        
[    1.384023]  dump_stack+0x18/0x34                                            
[    1.387669]  panic+0x148/0x2ec                                               
[    1.390966]  kernel_init+0x128/0x130                                         
[    1.393919]  ret_from_fork+0x10/0x20                                         
[    1.397654] SMP: stopping secondary CPUs                                     
[    1.401217] Kernel Offset: disabled                                          
[    1.405117] CPU features: 0x00000,00000000,0000400b                          
[    1.408332] Memory Limit: none                                               
[    1.413192] Rebooting in 1 seconds..                                         
                                                                                
Format: Log Type - Time(microsec) - Message - Optional Info                     
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic            
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00158                                 
S - IMAGE_VARIANT_STRING=HAABANAZA                                              
S - OEM_IMAGE_VERSION_STRING=CRM                                                
S - Boot Config, 0x000002e1                                                     
B -       203 - PBL, Start                                                      
B -      2741 - bootable_media_detect_entry, Start                              
B -      2888 - bootable_media_detect_success, Start                            
B -      2892 - elf_loader_entry, Start                                         
B -     11439 - auth_hash_seg_entry, Start                                      
B -     11680 - auth_hash_seg_exit, Start                                       
B -    252720 - elf_segs_hash_verify_entry, Start                               
B -    313391 - PBL, End                                                        
B -    489220 - SBL1, Start                                                     
B -    567300 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4             
B -    576999 - pm_device_init, Start                                           
B -    758199 - PM_SET_VAL:Skip                                                 
D -    179340 - pm_device_init, Delta                                           
B -    760639 - pm_driver_init, Start                                           
D -      5368 - pm_driver_init, Delta                                           
B -    767014 - clock_init, Start                                               
D -      2104 - clock_init, Delta                                               
B -    770918 - boot_flash_init, Start                                          
D -     16012 - boot_flash_init, Delta                                          
B -    790712 - boot_config_data_table_init, Start                              
D -      1006 - boot_config_data_table_init, Delta - (575 Bytes)                
B -    798398 - Boot Setting :  0x00000618                                      
B -    802119 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:0     
B -    809043 - sbl1_ddr_set_params, Start                                      
B -    812855 - CPR configuration: 0x30c                                        
B -    816302 - cpr_init, Start                                                 
B -    819077 - Rail:0 Mode: 5 Voltage: 808000                                  
B -    824293 - CL CPR settled at 760000mV                                      
B -    827129 - Rail:1 Mode: 5 Voltage: 880000                                  
B -    831308 - Rail:1 Mode: 7 Voltage: 912000                                  
D -     16531 - cpr_init, Delta                                                 
B -    838201 - Pre_DDR_clock_init, Start                                       
B -    842196 - Pre_DDR_clock_init, End                                         
B -    845490 - DDR Type : PCDDR3                                               
B -    851255 - do ddr sanity test, Start                                       
D -      1037 - do ddr sanity test, Delta                                       
B -    856013 - DDR: Start of HAL DDR Boot Training                             
B -    860740 - DDR: End of HAL DDR Boot Training                               
B -    866413 - DDR: Checksum to be stored on flash is -1553865925              
B -    876936 - Image Load, Start                                               
D -    335957 - QSEE Image Loaded, Delta - (1376448 Bytes)                      
B -   1212985 - Image Load, Start                                               
D -        30 - SEC Image Loaded, Delta - (0 Bytes)                             
B -   1220671 - Image Load, Start                                               
D -      9760 - DEVCFG Image Loaded, Delta - (26008 Bytes)                      
B -   1230522 - Image Load, Start                                               
D -     25956 - RPM Image Loaded, Delta - (86584 Bytes)                         
B -   1256569 - Image Load, Start                                               
D -    136579 - APPSBL Image Loaded, Delta - (556008 Bytes)                     
B -   1393270 - QSEE Execution, Start                                           
D -        61 - QSEE Execution, Delta                                           
B -   1399065 - USB D+ check, Start                                             
D -         0 - USB D+ check, Delta                                             
B -   1405470 - SBL1, End                                                       
D -    918568 - SBL1, Delta                                                     
S - Flash Throughput, 4429 KB/s  (2045623 Bytes,  461792 us)                    
S - DDR Frequency, 466 MHz                                                      
S - Core 0 Frequency, 1651 MHz                                                  
                                                                                
                                                                                
U-Boot 2016.01 (Aug 18 2020 - 16:35:27 +0800)                                   
                                                                                
DRAM:  smem ram ptable found: ver: 1 len: 4                                     
1 GiB                                                                           
NAND:  Could not find nand_gpio in dts, no defaults defined                     
Nand Flash error. Status = 80                                                   
Reset cmd status failed                                                         
SPI_ADDR_LEN=3                                                                  
SF: Detected W25Q64DW with page size 256 Bytes, erase size 4 KiB, total 8 MiB   
ipq_spi: page_size: 0x100, sector_size: 0x1000, size: 0x800000                  
8 MiB                                                                           
MMC:   <NULL>: 0                                                                
In:    serial@78B3000                                                           
Out:   serial@78B3000                                                           
Err:   serial@78B3000                                                           
machid: 8010000                                                                 
Hit any key to stop autoboot:  2                                                
                                                                                
Net:   MAC0 addr:24:5e:be:55:11:72                                              
PHY ID1: 0x0                                                                    
PHY ID2: 0x0                                                                    
EDMA ver 1 hw init                                                              
Num rings - TxDesc:1 (0-0) TxCmpl:1 (7-7)                                       
RxDesc:1 (15-15) RxFill:1 (7-7)                                                 
ipq807x_edma_alloc_rings: successfull                                           
ipq807x_edma_setup_ring_resources: successfull                                  
ipq807x_edma_configure_rings: successfull                                       
ipq807x_edma_hw_init: successfull                                               
eth0                                                                            
IPQ807x#

frollic · April 4, 2024, 9:02pm

I really think you should restart the install procedure as documented in https://github.com/openwrt/openwrt/commit/bd17683261e1dde1fdd4223745852de1ce8cfc89, not because there's a problem with your uboot, but with the image installed.

I wouldn't however use a snapshot, but latest stable -
https://firmware-selector.openwrt.org/?version=23.05.3&target=ipq807x%2Fgeneric&id=qnap_301w

m1tchll · April 5, 2024, 3:51am

I did get the file to upload.

IPQ807x# aq_load_fw 0 && aq_load_fw 8 && bootipq                                
SPI_ADDR_LEN=3                                                                  
SF: Detected W25Q64DW with page size 256 Bytes, erase size 4 KiB, total 8 MiB   
device 0 offset 0x3b0000, size 0x80000                                          
SF: 524288 bytes @ 0x3b0000 Read: OK                                            
CRC check good on phy fw file (0x4B33)                                          
PHYFW:Loading IRAM...........done.                                              
PHYFW:Loading DRAM..............done.                                           
phy fw image load good CRC-16 matches (0x6FFA)                                  
SPI_ADDR_LEN=3                                                                  
SF: Detected W25Q64DW with page size 256 Bytes, erase size 4 KiB, total 8 MiB   
device 0 offset 0x3b0000, size 0x80000                                          
SF: 524288 bytes @ 0x3b0000 Read: OK                                            
CRC check good on phy fw file (0x4B33)                                          
PHYFW:Loading IRAM...........done.                                              
PHYFW:Loading DRAM..............done.                                           
phy fw image load good CRC-16 matches (0x6FFA)                                  
                                                                                
MMC read: dev # 0, block # 34, count 32768 ... 32768 blocks read: OK            
## Loading kernel from FIT Image at 44000000 ...                                
   Using 'config@hk01' configuration                                            
   Trying 'kernel-1' kernel subimage                                            
     Description:  ARM64 OpenWrt Linux-6.1.82                                   
     Type:         Kernel Image                                                 
     Compression:  gzip compressed                                              
     Data Start:   0x440000e8                                                   
     Data Size:    5122563 Bytes = 4.9 MiB                                      
     Architecture: AArch64                                                      
     OS:           Linux                                                        
     Load Address: 0x41000000                                                   
     Entry Point:  0x41000000                                                   
     Hash algo:    crc32                                                        
     Hash value:   9be3b12c                                                     
     Hash algo:    sha1                                                         
     Hash value:   a4705be7c4425d6558d48ffe3b82d27a7ca537f5                     
   Verifying Hash Integrity ... crc32+ sha1+ OK                                 
## Loading fdt from FIT Image at 44000000 ...                                   
   Using 'config@hk01' configuration                                            
   Trying 'fdt-1' fdt subimage                                                  
     Description:  ARM64 OpenWrt qnap_301w device tree blob                     
     Type:         Flat Device Tree                                             
     Compression:  uncompressed                                                 
     Data Start:   0x444e2c28                                                   
     Data Size:    47152 Bytes = 46 KiB                                         
     Architecture: AArch64                                                      
     Hash algo:    crc32                                                        
     Hash value:   7020f746                                                     
     Hash algo:    sha1                                                         
     Hash value:   8b31de02f2d212be788fc3f2d320fa1d202a30fb                     
   Verifying Hash Integrity ... crc32+ sha1+ OK                                 
   Booting using the fdt blob at 0x444e2c28                                     
   Uncompressing Kernel Image ... OK                                            
   Loading Device Tree to 4a3f1000, end 4a3ff82f ... OK                         
fdt-fixup: unable to find compatible node                                       
Using machid 0x8010000 from environment                                         
                                                                                
Starting kernel ...                                                             
                                                                                
Jumping to AARCH64 kernel via monitor                                           
[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]          
[    0.000000] Linux version 6.1.82 (builder@buildhost) (aarch64-openwrt-linux-4
[    0.000000] Machine model: QNAP 301w                                         
[    0.000000] Zone ranges:                                                     
[    0.000000]   DMA      [mem 0x0000000040000000-0x000000007fffffff]           
[    0.000000]   DMA32    empty                                                 
[    0.000000]   Normal   empty                                                 
[    0.000000] Movable zone start for each node                                 
[    0.000000] Early memory node ranges                                         
[    0.000000]   node   0: [mem 0x0000000040000000-0x0000000040ffffff]          
[    0.000000]   node   0: [mem 0x0000000041000000-0x000000004a3fffff]          
[    0.000000]   node   0: [mem 0x000000004a400000-0x00000000510fffff]          
[    0.000000]   node   0: [mem 0x0000000051100000-0x000000007fffffff]          
[    0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000007fffffff] 
[    0.000000] psci: probing for conduit method from DT.                        
[    0.000000] psci: PSCIv1.0 detected in firmware.                             
[    0.000000] psci: Using standard PSCI v0.2 function IDs                      
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.                           
[    0.000000] psci: SMC Calling Convention v1.0                                
[    0.000000] percpu: Embedded 18 pages/cpu s34664 r8192 d30872 u73728         
[    0.000000] Detected VIPT I-cache on CPU0                                    
[    0.000000] alternatives: applying boot alternatives                         
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 258048    
[    0.000000] Kernel command line: console=ttyMSM0,115200n8 root=PARTUUID=2a21t
[    0.000000] Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes)
[    0.000000] Inode-cache hash table entries: 65536 (order: 7, 524288 bytes, l)
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off          
[    0.000000] Memory: 887128K/1048576K available (8128K kernel code, 890K rwda)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1       
[    0.000000] rcu: Hierarchical RCU implementation.                            
[    0.000000]  Tracing variant of Tasks RCU enabled.                           
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 ji.
[    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0                   
[    0.000000] Root IRQ handler: gic_handle_irq                                 
[    0.000000] GICv2m: range[mem 0x0b00a000-0x0b00affc], SPI[448:479]           
[    0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.   
[    0.000000] arch_timer: cp15 and mmio timer(s) running at 19.20MHz (virt/vir.
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycless
[    0.000000] sched_clock: 56 bits at 19MHz, resolution 52ns, wraps every 4398s
[    0.000124] Calibrating delay loop (skipped), value calculated using timer f)
[    0.000138] pid_max: default: 32768 minimum: 301                             
[    0.000607] Mount-cache hash table entries: 2048 (order: 2, 16384 bytes, lin)
[    0.000621] Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes)
[    0.002457] cblist_init_generic: Setting adjustable number of callback queue.
[    0.002465] cblist_init_generic: Setting shift to 2 and lim to 1.            
[    0.002655] rcu: Hierarchical SRCU implementation.                           
[    0.002659] rcu:     Max phase no-delay instances is 1000.                   
[    0.003484] smp: Bringing up secondary CPUs ...                              
[    0.004115] Detected VIPT I-cache on CPU1                                    
[    0.004251] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]       
[    0.004909] Detected VIPT I-cache on CPU2                                    
[    0.005011] CPU2: Booted secondary processor 0x0000000002 [0x410fd034]       
[    0.005622] Detected VIPT I-cache on CPU3                                    
[    0.005717] CPU3: Booted secondary processor 0x0000000003 [0x410fd034]       
[    0.005783] smp: Brought up 1 node, 4 CPUs                                   
[    0.005791] SMP: Total of 4 processors activated.                            
[    0.005796] CPU features: detected: 32-bit EL0 Support                       
[    0.005800] CPU features: detected: CRC32 instructions                       
[    0.005862] CPU features: emulated: Privileged Access Never (PAN) using TTBRg
[    0.005867] CPU: All CPU(s) started at EL1                                   
[    0.005871] alternatives: applying system-wide alternatives                  
[    0.016816] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, ms
[    0.016844] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)   
[    0.017061] pinctrl core: initialized pinctrl subsystem                      
[    0.018485] NET: Registered PF_NETLINK/PF_ROUTE protocol family              
[    0.019021] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations 
[    0.019061] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic alls
[    0.019108] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic as
[    0.019476] thermal_sys: Registered thermal governor 'step_wise'             
[    0.019659] cpuidle: using governor menu                                     
[    0.019928] ASID allocator initialised with 65536 entries                    
[    0.073975] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count4
[    0.083015] SCSI subsystem initialized                                       
[    0.083201] usbcore: registered new interface driver usbfs                   
[    0.083254] usbcore: registered new interface driver hub                     
[    0.083312] usbcore: registered new device driver usb                        
[    0.083740] qcom_scm: convention: smc arm 64                                 
[    0.085282] clocksource: Switched to clocksource arch_sys_counter            
[    0.086504] NET: Registered PF_INET protocol family                          
[    0.086658] IP idents hash table entries: 16384 (order: 5, 131072 bytes, lin)
[    0.088093] tcp_listen_portaddr_hash hash table entries: 512 (order: 1, 8192)
[    0.088116] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes,)
[    0.088130] TCP established hash table entries: 8192 (order: 4, 65536 bytes,)
[    0.088218] TCP bind hash table entries: 8192 (order: 6, 262144 bytes, linea)
[    0.088492] TCP: Hash tables configured (established 8192 bind 8192)         
[    0.088591] UDP hash table entries: 512 (order: 2, 16384 bytes, linear)      
[    0.088641] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes, linear) 
[    0.088856] NET: Registered PF_UNIX/PF_LOCAL protocol family                 
[    0.088892] PCI: CLS 0 bytes, default 64                                     
[    0.090238] workingset: timestamp_bits=46 max_order=18 bucket_order=0        
[    0.095250] squashfs: version 4.0 (2009/01/31) Phillip Lougher               
[    0.095276] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORI.
[    0.096364] Block layer SCSI generic (bsg) driver version 0.4 loaded (major )
[    0.098415] qcom-qmp-usb-phy 58000.phy: supply vdda-phy not found, using dumr
[    0.098588] qcom-qmp-usb-phy 58000.phy: supply vdda-pll not found, using dumr
[    0.100018] qcom-qmp-usb-phy 78000.phy: supply vdda-phy not found, using dumr
[    0.100193] qcom-qmp-usb-phy 78000.phy: supply vdda-pll not found, using dumr
[    0.101920] qcom-qusb2-phy 59000.phy: supply vdd not found, using dummy regur
[    0.102060] qcom-qusb2-phy 59000.phy: supply vdda-pll not found, using dummyr
[    0.102099] qcom-qusb2-phy 59000.phy: supply vdda-phy-dpdm not found, using r
[    0.102244] qcom-qusb2-phy 59000.phy: Registered Qcom-QUSB2 phy              
[    0.102439] qcom-qusb2-phy 79000.phy: supply vdd not found, using dummy regur
[    0.102589] qcom-qusb2-phy 79000.phy: supply vdda-pll not found, using dummyr
[    0.102644] qcom-qusb2-phy 79000.phy: supply vdda-phy-dpdm not found, using r
[    0.102818] qcom-qusb2-phy 79000.phy: Registered Qcom-QUSB2 phy              
[    0.107628] bam-dma-engine 704000.dma-controller: num-channels unspecified it
[    0.107643] bam-dma-engine 704000.dma-controller: num-ees unspecified in dt  
[    0.112208] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled         
[    0.114305] msm_serial 78b3000.serial: msm_serial: detected port #0          
[    0.114345] msm_serial 78b3000.serial: uartclk = 3686400                     
[    0.114462] 78b3000.serial: ttyMSM0 at MMIO 0x78b3000 (irq = 20, base_baud =M
[    0.114492] msm_serial: console setup on port #0                             
[    0.822300] printk: console [ttyMSM0] enabled                                
[    0.827463] msm_serial: driver initialized                                   
[    0.836323] loop: module loaded                                              
[    0.837597] spi_qup 78b5000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64 
[    0.839218] spi-nor spi0.0: w25q64dw (8192 Kbytes)                           
[    0.845900] 13 fixed-partitions partitions found on MTD device spi0.0        
[    0.850184] Creating 13 MTD partitions on "spi0.0":                          
[    0.856695] 0x000000000000-0x000000050000 : "0:sbl1"                         
[    0.861915] 0x000000050000-0x000000060000 : "0:mibib"                        
[    0.867093] 0x000000060000-0x0000001e0000 : "0:qsee"                         
[    0.871979] 0x0000001e0000-0x0000001f0000 : "0:devcfg"                       
[    0.877084] 0x0000001f0000-0x000000200000 : "0:apdp"                         
[    0.881954] 0x000000200000-0x000000240000 : "0:rpm"                          
[    0.887117] 0x000000240000-0x000000250000 : "0:cdt"                          
[    0.891697] 0x000000250000-0x000000270000 : "0:appsblenv"                    
[    0.896570] 0x000000250000-0x000000350000 : "0:appsbl"                       
[    0.902101] 0x000000370000-0x0000003b0000 : "0:art"                          
[    0.907227] 0x0000003b0000-0x000000430000 : "0:ethphyfw1"                    
[    0.911932] 0x000000430000-0x0000004b0000 : "0:ethphyfw2"                    
[    0.917573] 0x0000004b0000-0x000000800000 : "reserved"                       
[    0.927918] spmi spmi-0: PMIC arbiter version v2 (0x20010000)                
[    0.954290] i2c_dev: i2c /dev entries driver                                 
[    0.960710] sdhci: Secure Digital Host Controller Interface driver           
[    0.960751] sdhci: Copyright(c) Pierre Ossman                                
[    0.965857] sdhci-pltfm: SDHCI platform and OF driver helper                 
[    0.972378] remoteproc remoteproc0: releasing cd00000.q6v5_wcss              
[    0.979325] NET: Registered PF_INET6 protocol family                         
[    0.982665] Segment Routing with IPv6                                        
[    0.986875] In-situ OAM (IOAM) with IPv6                                     
[    0.990429] NET: Registered PF_PACKET protocol family                        
[    0.994382] bridge: filtering via arp/ip/ip6tables is no longer available by.
[    0.999446] 8021q: 802.1Q VLAN Support v1.8                                  
[    1.003532] mmc0: SDHCI controller on 7824900.mmc [7824900.mmc] using ADMA 6t
[    1.034761] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count4
[    1.035183] cpr4_ipq807x_apss_read_fuse_data: apc_corner: speed bin = 0      
[    1.040912] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR fusing revisio1
[    1.047503] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR misc fuse valu0
[    1.055147] cpr4_ipq807x_apss_read_fuse_data: apc_corner: Voltage boost fusee
[    1.062685] cpr3_mem_acc_init: apc: not using memory accelerator regulator   
[    1.071799] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fuseV
[    1.078748] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fuseV
[    1.088730] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fuseV
[    1.098537] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fuseV
[    1.108399] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused 0
[    1.118159] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused 0
[    1.129009] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused 5
[    1.139945] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused 0
[    1.151072] cpr3_regulator_init_ctrl: apc: Default CPR mode = closed-loop    
�[    1.180265] Waiting for root device PARTUUID=2a213133-47f8-80a1-5d66-1d565a.
[    1.190236] mmc0: new HS200 MMC card at address 0001                         
[    1.190714] mmcblk0: mmc0:0001 Q2J54A 3.64 GiB                               
[    1.195823]  mmcblk0: p1 p2 p3 p4 p5 p6 p7 p8 p9                             
[    1.199348] mmcblk0boot0: mmc0:0001 Q2J54A 2.00 MiB                          
[    1.203854] mmcblk0boot1: mmc0:0001 Q2J54A 2.00 MiB                          
[    1.208591] mmcblk0rpmb: mmc0:0001 Q2J54A 512 KiB, chardev (246:0)           
[    1.238142] VFS: Mounted root (squashfs filesystem) readonly on device 179:4.
[    1.238612] Freeing unused kernel memory: 1280K                              
[    1.295309] Run /sbin/init as init process                                   
[    1.296230] Run /etc/init as init process                                    
[    1.298367] Run /bin/init as init process                                    
[    1.302422] Run /bin/sh as init process                                      
[    1.306433] Kernel panic - not syncing: No working init found.  Try passing .
[    1.310031] CPU: 3 PID: 1 Comm: swapper/0 Not tainted 6.1.82 #0              
[    1.324245] Hardware name: QNAP 301w (DT)                                    
[    1.330059] Call trace:                                                      
[    1.334222]  dump_backtrace.part.0+0xbc/0xd0                                 
[    1.336484]  show_stack+0x18/0x30                                            
[    1.340994]  dump_stack_lvl+0x6c/0x88                                        
[    1.344207]  dump_stack+0x18/0x34                                            
[    1.347852]  panic+0x148/0x2ec                                               
[    1.351149]  kernel_init+0x128/0x130                                         
[    1.354102]  ret_from_fork+0x10/0x20                                         
[    1.357838] SMP: stopping secondary CPUs                                     
[    1.361401] Kernel Offset: disabled                                          
[    1.365301] CPU features: 0x00000,00000000,0000400b                          
[    1.368515] Memory Limit: none                                               
[    1.373376] Rebooting in 1 seconds..                                         
                                                                                
Format: Log Type - Time(microsec) - Message - Optional Info                     
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic            
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00158                                 
S - IMAGE_VARIANT_STRING=HAABANAZA                                              
S - OEM_IMAGE_VERSION_STRING=CRM                                                
S - Boot Config, 0x000002e1                                                     
B -       203 - PBL, Start                                                      
B -      2738 - bootable_media_detect_entry, Start                              
B -      2884 - bootable_media_detect_success, Start                            
B -      2889 - elf_loader_entry, Start                                         
B -     11378 - auth_hash_seg_entry, Start                                      
B -     11620 - auth_hash_seg_exit, Start                                       
B -    250656 - elf_segs_hash_verify_entry, Start                               
B -    311326 - PBL, End                                                        
B -    485773 - SBL1, Start                                                     
B -    563762 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4             
B -    573461 - pm_device_init, Start                                           
B -    752953 - PM_SET_VAL:Skip                                                 
D -    177479 - pm_device_init, Delta                                           
B -    755363 - pm_driver_init, Start                                           
D -      5337 - pm_driver_init, Delta                                           
B -    761676 - clock_init, Start                                               
D -      2074 - clock_init, Delta                                               
B -    765672 - boot_flash_init, Start                                          
D -     16104 - boot_flash_init, Delta                                          
B -    785558 - boot_config_data_table_init, Start                              
D -      1006 - boot_config_data_table_init, Delta - (575 Bytes)                
B -    793213 - Boot Setting :  0x00000618                                      
B -    796934 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:0     
B -    803858 - sbl1_ddr_set_params, Start                                      
B -    807670 - CPR configuration: 0x30c                                        
B -    811117 - cpr_init, Start                                                 
B -    813923 - Rail:0 Mode: 5 Voltage: 808000                                  
B -    819138 - CL CPR settled at 760000mV                                      
B -    821944 - Rail:1 Mode: 5 Voltage: 880000                                  
B -    826123 - Rail:1 Mode: 7 Voltage: 912000                                  
D -     16531 - cpr_init, Delta                                                 
B -    833016 - Pre_DDR_clock_init, Start                                       
B -    837042 - Pre_DDR_clock_init, End                                         
B -    840336 - DDR Type : PCDDR3                                               
B -    846070 - do ddr sanity test, Start                                       
D -      1037 - do ddr sanity test, Delta                                       
B -    850919 - DDR: Start of HAL DDR Boot Training                             
B -    855555 - DDR: End of HAL DDR Boot Training                               
B -    861228 - DDR: Checksum to be stored on flash is -1553865925              
B -    871751 - Image Load, Start                                               
D -    335957 - QSEE Image Loaded, Delta - (1376448 Bytes)                      
B -   1207800 - Image Load, Start                                               
D -        61 - SEC Image Loaded, Delta - (0 Bytes)                             
B -   1215455 - Image Load, Start                                               
D -      9760 - DEVCFG Image Loaded, Delta - (26008 Bytes)                      
B -   1225307 - Image Load, Start                                               
D -     25955 - RPM Image Loaded, Delta - (86584 Bytes)                         
B -   1251354 - Image Load, Start                                               
D -    136579 - APPSBL Image Loaded, Delta - (556008 Bytes)                     
B -   1388055 - QSEE Execution, Start                                           
D -        61 - QSEE Execution, Delta                                           
B -   1393880 - USB D+ check, Start                                             
D -         0 - USB D+ check, Delta                                             
B -   1400285 - SBL1, End                                                       
D -    916800 - SBL1, Delta                                                     
S - Flash Throughput, 4430 KB/s  (2045623 Bytes,  461732 us)                    
S - DDR Frequency, 466 MHz                                                      
S - Core 0 Frequency, 1651 MHz                                                  
                                                                                
                                                                                
U-Boot 2016.01 (Aug 18 2020 - 16:35:27 +0800)                                   
                                                                                
DRAM:  smem ram ptable found: ver: 1 len: 4                                     
1 GiB                                                                           
NAND:  Could not find nand_gpio in dts, no defaults defined                     
Nand Flash error. Status = 80                                                   
Reset cmd status failed                                                         
SPI_ADDR_LEN=3                                                                  
SF: Detected W25Q64DW with page size 256 Bytes, erase size 4 KiB, total 8 MiB   
ipq_spi: page_size: 0x100, sector_size: 0x1000, size: 0x800000                  
8 MiB                                                                           
MMC:   <NULL>: 0                                                                
In:    serial@78B3000                                                           
Out:   serial@78B3000                                                           
Err:   serial@78B3000                                                           
machid: 8010000                                                                 
Hit any key to stop autoboot:  2                                                
                                                                                
Net:   MAC0 addr:24:5e:be:55:11:72                                              
PHY ID1: 0x0                                                                    
PHY ID2: 0x0                                                                    
EDMA ver 1 hw init                                                              
Num rings - TxDesc:1 (0-0) TxCmpl:1 (7-7)                                       
RxDesc:1 (15-15) RxFill:1 (7-7)                                                 
ipq807x_edma_alloc_rings: successfull                                           
ipq807x_edma_setup_ring_resources: successfull                                  
ipq807x_edma_configure_rings: successfull                                       
ipq807x_edma_hw_init: successfull                                               
eth0                                                                            
IPQ807x# printenv                                                               
BMAC=245EBE551172                                                               
CC=US                                                                           
FWMode=Normal                                                                   
HV=0x01                                                                         
MD=2021/01/25 10:00                                                             
MF=0x01                                                                         
MN=A03                                                                          
NMAC=8                                                                          
PLN=IPQ8072a                                                                    
PN=X6QHora-301W                                                                 
QSN=Q211Q00912                                                                  
SSID=QHora-301W_1172                                                            
VN=0x01                                                                         
autostart=yes                                                                   
baudrate=115200                                                                 
boot_0=bad                                                                      
boot_1=bad                                                                      
boot_2=good                                                                     
bootargs=console=ttyMSM0,115200n8                                               
bootcmd=aq_load_fw 0 && aq_load_fw 8 && bootipq                                 
bootfile=fw.bin                                                                 
current_entry=0                                                                 
eth1addr=24:5e:be:55:11:73                                                      
eth2addr=24:5e:be:55:11:74                                                      
eth3addr=24:5e:be:55:11:75                                                      
eth4addr=24:5e:be:55:11:76                                                      
eth5addr=24:5e:be:55:11:77                                                      
ethact=eth0                                                                     
ethaddr=24:5e:be:55:11:72                                                       
fdt_high=0x4A400000                                                             
fdtcontroladdr=4a96c8d0                                                         
flash_type=8                                                                    
fw_type=router                                                                  
ipaddr=192.168.1.10                                                             
machid=8010000                                                                  
netmask=255.255.255.0                                                           
scan_ramoops_history_done=1                                                     
serverip=192.168.1.120                                                          
soc_version_major=2                                                             
soc_version_minor=0                                                             
stderr=serial@78B3000                                                           
stdin=serial@78B3000                                                            
stdout=serial@78B3000                                                           
                                                                                
Environment size: 884/131068 bytes

m1tchll · April 5, 2024, 4:09am

I must have env settings messed up. Can you point to the bad ones, so I can try to set them properly?

frollic · April 5, 2024, 9:50am

You're still booting a snapshot image, not a stable release.

Check the uboot values you're supposed to set, in the git commit.

As for the right ones, I don't own the device, sorry.
You could however ask the people in Adding OpenWrt support for QNAP QHora-301W about them.