OpenWRT support for STRONG 4G+ROUTER1200

I bought a STRONG 4G+ROUTER1200 for ~$60.

It contains an LTE CAT6 modem, 2.4G and 5G WiFi, 4x 1G ethernet. It has 128M flash and 256M RAM. I would like to run OpenWRT on it.

I was able to get root access through u-boot.

Here's what I found out so far:

Linux version 4.1.25+ (david@ubuntu12) (gcc version 4.9.4 (Buildroot 2017.05-svn2186) ) #2 SMP PREEMPT Wed Jul 20 20:25:09 CST 2022
CPU: ARMv7 Processor [414fc091] revision 1 (ARMv7), cr=18c5387d
CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
Machine model: ZTE ZX279128R

lsmod output:

mtk7613e_ap 4602956 2 - Live 0xbf4dd000 (O)
mt7603e_ap 2083814 3 mtk7613e_ap, Live 0xbf290000 (O)
nf_conn 2529 0 - Live 0xbf28c000 (O)
rtsp_alg 8510 0 - Live 0xbf285000 (O)
switch 115501 0 - Live 0xbf25d000 (O)
multicast 132436 3 mtk7613e_ap,mt7603e_ap,switch,[permanent], Live 0xbf233000 (O)
gpondrv 17187 0 - Live 0xbf229000 (O)
netdriver 22737 2 mtk7613e_ap,mt7603e_ap, Live 0xbf21e000 (O)
ffe 92891 1 switch, Live 0xbf200000 (O)
iprt 14365 0 - Live 0xbf1f8000 (O)
tm_128s 1322953 2 switch,gpondrv, Live 0xbf078000 (O)
plat_zxic_128s 177685 6
mtk7613e_ap,mt7603e_ap,switch,gpondrv,netdriver,tm_128s, Live 0xbf040000 (O)
zx_ponreg 2481 3 switch,gpondrv,tm_128s, Live 0xbf03c000 (O)
wan_bridge 42137 1 netdriver, Live 0xbf02b000 (O)
qos_mod 54280 3 - Live 0xbf016000 (O)
bspdriver 55447 5 mtk7613e_ap,mt7603e_ap,switch,gpondrv,tm_128s,[permanent], Live 0xbf000000 (O)

Kernel modules:

-rw-rw-r--    1 root     root         72940 Jul 20  2022 bspdriver.ko
-rw-rw-r--    1 root     root         98256 Jul 20  2022 ffe.ko
-rw-rw-r--    1 root     root         26040 Jul 20  2022 gpondrv.ko
-rw-rw-r--    1 root     root         21516 Jul 20  2022 iprt.ko
-rw-rw-r--    1 root     root         39396 Jul 20  2022 mapfilter.ko
-rw-rw-r--    1 root     root       2518552 Jul 20  2022 mt7603e_ap.ko
-rw-rw-r--    1 root     root       5456004 Jul 20  2022 mtk7613e_ap.ko
-rw-rw-r--    1 root     root        164216 Jul 20  2022 multicast.ko
-rw-rw-r--    1 root     root         32468 Jul 20  2022 netdriver.ko
-rw-rw-r--    1 root     root          6336 Jul 20  2022 nf_conn.ko
-rw-rw-r--    1 root     root        157144 Jul 20  2022 plat-zxic_128s.ko
-rw-rw-r--    1 root     root        189136 Jul 20  2022 plat-zxylzb_12x.ko
-rw-rw-r--    1 root     root         71428 Jul 20  2022 qos_mod.ko
-rw-rw-r--    1 root     root         14912 Jul 20  2022 rtsp_alg.ko
-rw-rw-r--    1 root     root        155944 Jul 20  2022 switch.ko
-rw-rw-r--    1 root     root       1678408 Jul 20  2022 tm_127128.ko
-rw-rw-r--    1 root     root       1336884 Jul 20  2022 tm_128s.ko
-rw-rw-r--    1 root     root         58124 Jul 20  2022 wan_bridge.ko
-rw-rw-r--    1 root     root        308700 Jul 20  2022 zram.ko
-rw-rw-r--    1 root     root          5132 Jul 20  2022 zx_ponreg.ko

Device tree:

/dts-v1/;

/ {
        #address-cells = <0x01>;
        #size-cells = <0x01>;
        model = "ZTE ZX279128R";
        compatible = "zte,zx279128-smp";

        chosen {`
                stdout-path = "serial0:115200n8";
        };

        aliases {
                i2c0 = "/soc/i2c@9a102000";
                i2c1 = "/soc/i2c@9a103000";
                ssp0 = "/soc/ssp@9a105000";
                pon = "/soc/pon@92000000";
                npp = "/soc/npp@921c0000";
                tm = "/soc/tm@92340000";
                pp = "/soc/pp@92380000";
                sw = "/soc/sw@92300000";
                idm = "/soc/idm@921c8000";
                pcie = "/soc/pcie@10000000";
                gephy128 = "/soc/gephy128@9b000000";
                gephy128s = "/soc/gephy128s@9b000000";
                fephy = "/soc/fephy@9b400000";
                gephy = "/soc/gephy@9b000000";
                nand = "/soc/nand@00d80000";
                serial0 = "/soc/serial@0x94404000";
                serial1 = "/soc/serial@0x94405000";
        };

        memory {
                device_type = "memory";
                reg = <0x40000000 0x8000000>;
        };

        cpus {
                #address-cells = <0x01>;
                #size-cells = <0x00>;
                enable-method = "zte,zx279128-smp";

                cpu@0 {
                        compatible = "arm,cortex-a9";
                        device_type = "cpu";
                        next-level-cache = <0x01>;
                        reg = <0x00>;
                };

                cpu@1 {
                        compatible = "arm,cortex-a9";
                        device_type = "cpu";
                        next-level-cache = <0x01>;
                        reg = <0x01>;
                };
        };

        memory@40000000 {
                device_type = "memory";
                reg = <0x00 0x40000000 0x00 0x20000000>;
        };

        soc {
                #address-cells = <0x01>;
                #size-cells = <0x01>;
                compatible = "simple-bus";
                interrupt-parent = <0x02>;
                ranges;

                interrupt-controller@00801000 {
                        compatible = "arm,cortex-a9-gic";
                        #interrupt-cells = <0x03>;
                        #address-cells = <0x01>;
                        #size-cells = <0x01>;
                        interrupt-controller;
                        reg = <0x801000 0x1000 0x800100 0x100>;
                        linux,phandle = <0x02>;
                        phandle = <0x02>;
                };

                timer@00800200 {
                        compatible = "arm,cortex-a9-global-timer";
                        reg = <0x800200 0x20>;
                        interrupts = <0x01 0x0b 0x04>;
                        interrupt-parent = <0x02>;
                        clocks = <0x03 0x1d>;
                };

                watchdog@00800620 {
                        compatible = "arm,cortex-a9-twd-wdt";
                        reg = <0x800620 0x20>;
                        interrupts = <0x01 0x0e 0x101>;
                        clocks = <0x03 0x1d>;
                        status = "okay";
                };

                mg-crm@00804000 {
                        compatible = "arm,cortex-a9-mg-crm";
                        reg = <0x803000 0x1000 0x804000 0x1000>;
                };

                l2-cache-controller@0x00c00000 {
                        compatible = "arm,pl310-cache";
                        reg = <0xc00000 0x1000>;
                        cache-unified;
                        cache-level = <0x02>;
                        arm,data-latency = <0x02 0x02 0x02>;
                        arm,tag-latency = <0x02 0x02 0x02>;
                        linux,phandle = <0x01>;
                        phandle = <0x01>;
                };

                iram@200000 {
                        compatible = "zte,iram";
                        reg = <0x200800 0x1000>;
                        status = "enable";
                };

                nand@00d80000 {
                        #address-cells = <0x01>;
                        #size-cells = <0x01>;
                        compatible = "denali,denali-nand-dt";
                        reg = <0xd80000 0x7c00000 0xd00000 0x80000>;
                        reg-names = "nand_data\0denali_reg";
                        interrupts = <0x00 0x14 0x04>;
                        dma-mask = <0xffffffff>;
                        clocks = <0x03 0x31>;
                        status = "okay";
                };

                dwmmc0@08980000 {
                        #address-cells = <0x01>;
                        #size-cells = <0x01>;
                        compatible = "zte,zx288080_sd";
                        reg = <0x8980000 0x1000>;
                        interrupts = <0x00 0x23 0x04 0x00 0x2b 0x04>;
                        clocks = <0x03 0x17 0x03 0x18 0x03 0x19>;
                        clock-names = "fb_sdmmc_work_clk\0fb_sdmmc_ahb_clk\0fb_sdmmc_cdet_clk";
                        fifo-depth = <0x20>;
                        clock-frequency = <0x2faf080>;
                        clock-freq-min-max = <0x61a80 0x2faf080>;
                        card-detect-delay = <0xc8>;
                        num-slots = <0x01>;
                        supports-highspeed;
                        bus-width = <0x04>;
                        status = "okay";
                };

                topcrm@94000000 {
                        compatible = "zte,ZX279127-topcrm\0syscon";
                        reg = <0x94000000 0x1000>;
                        #clock-cells = <0x01>;
                        linux,phandle = <0x03>;
                        phandle = <0x03>;
                };

                lsp0crpm@94400000 {
                        compatible = "zte,ZX279127-lsp0crpm";
                        reg = <0x94400000 0x1000>;
                        #clock-cells = <0x01>;
                        linux,phandle = <0x04>;
                        phandle = <0x04>;
                };

                serial@0x94404000 {
                        compatible = "zte,ZX279127-uart";
                        reg = <0x94405000 0x1000 0x94404000 0x1000>;
                        interrupts = <0x00 0x0a 0x04 0x00 0x0b 0x04>;
                        clocks = <0x04 0x0e 0x04 0x0f>;
                        clock-names = "uartclk\0apb_pclk";
                        status = "okay";
                };

                serial@0x94405000 {
                        compatible = "zte,ZX279127-uart";
                        reg = <0x94406000 0x1000 0x94405000 0x1000>;
                        interrupts = <0x00 0x09 0x04 0x00 0x0c 0x04>;
                        clocks = <0x04 0x11 0x04 0x12>;
                        clock-names = "uartclk\0apb_pclk";
                        status = "disabled";
                };

                spifc@94406000 {
                        #address-cells = <0x01>;
                        #size-cells = <0x01>;
                        compatible = "zte,ZX27912x-spifc";
                        reg = <0x94407000 0x1000 0x94406000 0x1000>;
                        reg-names = "spifc_reg_127\0spifc_reg_128s";
                        interrupts = <0x00 0x08 0x04 0x00 0x0d 0x04>;
                        clocks = <0x04 0x14>;
                        status = "okay";
                };

                lsp1crpm@9a100000 {
                        compatible = "zte,ZX279127-lsp1crpm";
                        reg = <0x9a100000 0x1000>;
                        #clock-cells = <0x01>;
                        linux,phandle = <0x05>;
                        phandle = <0x05>;
                };

                i2c@9a102000 {
                        compatible = "zte,ZX279127-i2c";
                        reg = <0x9a102000 0x40>;
                        interrupts = <0x00 0x1a 0x04 0x00 0x16 0x04>;
                        clocks = <0x05 0x04>;
                        status = "okay";
                };

                i2c@9a103000 {
                        compatible = "zte,zx279127-i2c";
                        reg = <0x9a103000 0x40>;
                        interrupts = <0x00 0x1b 0x04 0x00 0x17 0x04>;
                        clocks = <0x05 0x07>;
                        status = "disabled";
                };

                temp@94100034 {
                        compatible = "zxic,tempsensor";
                        reg = <0x94100034 0x0c>;
                        interrupts = <0x00 0x33 0x04 0x00 0x5a 0x04 0x00 0x5b 0x04>;
                        status = "okay";
                };

                mdio@9a101000 {
                        compatible = "zte,zx279128s-mdio";
                        reg = <0x9a101000 0x18>;
                        clocks = <0x05 0x01>;
                        status = "okay";
                };

                pon@92000000 {
                        compatible = "zte,zx27912x-pon";
                        reg = <0x92000000 0x2000000 0x92000000 0x140000 0x92000000 0x2000000 0x94000000 0x100000 0x94100000 0x100000 0x94200000 0x100000 0x9fe00000 0x100000>;
                        interrupts = <0x00 0x1e 0x04 0x00 0x1c 0x04 0x00 0x22 0x04>;
                        status = "okay";
                };

                npp@921c0000 {
                        compatible = "zte,zx279128s-npp";
                        reg = <0x921c0000 0x8000 0x921cc000 0x34000>;
                        interrupts = <0x00 0x23 0x04 0x00 0x26 0x04>;
                        status = "okay";
                };

                sw@92300000 {
                        compatible = "zte,zx279127-sw";
                        reg = <0x92300000 0x34000>;
                        interrupts = <0x00 0x51 0x04>;
                        status = "okay";
                };

                tm@92340000 {
                        compatible = "zte,zx279128s-tm";
                        reg = <0x92340000 0x40000>;
                        interrupts = <0x00 0x24 0x04>;
                        status = "okay";
                };

                pp@92380000 {
                        compatible = "zte,zx27912x-pp";
                        reg = <0x92140000 0x40000 0x92380000 0x40000>;
                        interrupts = <0x00 0x50 0x04 0x00 0x25 0x04>;
                        status = "okay";
                };

                idm@921c8000 {
                        compatible = "zte,zx27912x-idm";
                        reg = <0x92334000 0x4000 0x921c8000 0x4000>;
                        interrupts = <0x00 0x52 0x04 0x00 0x26 0x04>;
                        status = "okay";
                };

                fephy@9b400000 {
                        compatible = "zte,zx279127-fephy";
                        interrupts = <0x00 0x1d 0x08 0x00 0x1e 0x08 0x00 0x1f 0x08>;
                        status = "okay";
                };

                gephy@9b000000 {
                        compatible = "zte,zx279127-gephy";
                        reg = <0x9b000000 0x400000>;
                        interrupts = <0x00 0x20 0x04>;
                        status = "okay";
                };

                gephy128@9b000000 {
                        compatible = "zte,zx279128-gephy";
                        reg = <0x9b000000 0x100000 0x9b100000 0x100000 0x9b200000 0x100000 0x9b300000 0x100000>;
                        interrupts = <0x00 0x1f 0x04 0x00 0x20 0x04 0x00 0x21 0x04 0x00 0x22 0x04>;
                        status = "okay";
                };

                gephy128s@9b000000 {
                        compatible = "zte,zx279128s-gephy";
                        reg = <0x9b000000 0x100000 0x9b100000 0x100000 0x9b200000 0x100000 0x9b300000 0x100000>;
                        interrupts = <0x00 0x27 0x04 0x00 0x28 0x04 0x00 0x29 0x04 0x00 0x2a 0x04>;
                        status = "okay";
                };

                ssp@9a105000 {
                        compatible = "zte,zx279127-ssp";
                        reg = <0x9a105000 0x1000>;
                        interrupts = <0x00 0x19 0x04>;
                        clocks = <0x05 0x0e>;
                        spi-num-chipselects = <0x02>;
                        status = "okay";

                        silicon@0 {
                                compatible = "rohm,dh2228fv";
                                reg = <0x00>;
                                spi-max-frequency = <0x1e8480>;
                        };
                };

                tdm@9a106000 {
                        compatible = "zte,ZX279127-tdm";
                        reg = <0x9a106000 0x1000 0x9a107000 0x1000>;
                        interrupts = <0x00 0x1b 0x04 0x00 0x16 0x04>;
                        clocks = <0x05 0x16>;
                        status = "okay";
                };

                pcie@10000000 {
                        compatible = "zte,ZX279127-pcie";
                        interrupts = <0x00 0x27 0x04 0x00 0x29 0x04 0x00 0x40 0x04 0x00 0x3f 0x04 0x00 0x4e 0x04 0x00 0x3b 0x04 0x00 0x4a 0x04>;
                        status = "okay";
                };

                usb@09000000 {
                        compatible = "zte,zx279127-dwc2";
                        reg = <0x9000000 0x10000>;
                        interrupts = <0x00 0x22 0x04 0x00 0x24 0x04 0x00 0x2c 0x04>;
                        dr_mode = "host";
                        status = "okay";
                };

                usb@09100000 {
                        compatible = "zte,zx279128-dwc3";
                        reg = <0x9100000 0x100000>;
                        clocks = <0x03 0x32 0x03 0x34 0x03 0x36>;
                        clock-names = "usb_bus_clk\0usb_ref_clk0\0usb_ref_clk1";
                        #address-cells = <0x01>;
                        #size-cells = <0x01>;
                        status = "okay";
                        ranges;

                        dwc3@0x09100000 {
                                compatible = "snps,dwc3";
                                reg = <0x9100000 0x100000>;
                                interrupts = <0x00 0x32 0x04>;
                                dr_mode = "host";
                                tx-fifo-resize;
                        };
                };
        };
};

Any useful hints for building OpenWRT for this device? What would be a good starting point?

that was pretty expensive, compared to prices in EU.

https://openwrt.org/docs/guide-developer/adding_new_device
https://openwrt.org/docs/guide-developer/add.new.device

Please also show the output of cat /sys/kernel/debug/usb/devices

add the output of free and df -kh, while your at it.

cat: can't open '/sys/kernel/debug/usb/devices': No such file or directory
/etc # lsusb
Bus 003 Device 002: ID 2c7c:030b
Bus 001 Device 001: ID 1d6b:0002
Bus 002 Device 001: ID 1d6b:0002
Bus 003 Device 001: ID 1d6b:0003
/etc # free
             total         used         free       shared      buffers
Mem:        231580        74888       156692         2704            0
-/+ buffers:              74888       156692
Swap:            0            0            0
/etc # df -kh
Filesystem                Size      Used Available Use% Mounted on
/dev/root                32.0M     21.2M     10.8M  66% /
/dev/mtdblock2            2.0M    420.0K      1.6M  21% /tagparam
tmpfs                    56.0M      2.3M     53.7M   4% /var
tmpfs                     1.0M         0      1.0M   0% /mnt
/dev/mtdblock10           8.0M    568.0K      7.4M   7% /db_excp
/dev/mtdblock7            8.0M      1.2M      6.8M  15% /userconfig
/dev/mtdblock9            3.0M    468.0K      2.5M  15% /wlan

2c7c:030b appears to be Quectel EM060K-GL

1 Like

I thought it was a rather good deal:
https://www.amazon.nl/Strong-4G-ROUTER1200-WLAN-router-GHz/dp/B0BDZZSWGM

you can often get an used MF286D for 50% less, and it would have a Cat12 modem, while this one appears to be Cat6.

but if you bought it, you bought it ...

2 Likes

It has a EG060K-EA on board.

The PCB contains five RF shields. I'm afraid to damage the board so I would rather not take the lids off.

This SoC is not supported on mainline Linux and OpenWrt.

I have asked support @ strong-eu.com to release to build environment, in accordance with GPL.

how to get root access:

Use the UART JM01 pins to setup a serial link at 115200,N,8,1
power up the device and interrupt the u-boot process by hitting enter.

load the kernel into ram:

nand read 0x44000000 0x200000 0x500000

modify the noot arguments:

setenv bootargs console=$(console) root=/dev/mtdblock5 ro rootfstype=jffs2  mem=$(memsize) init=/bin/sh -s -c 'busybox' #

continue boot:

bootm 0x440001e0

When the root shell appears, type

source /etc/init.d/rcS

to complete initialization.

Doesn't really mean anything.

Read the somewhat similar story about the SoC used in the Gl-iNet SFT1200.

How do GL-iNet devices become supported by official OpenWrt releases? - #3 by daniel.

Buildroot 2017.05-svn2186

Can you ask strong for this, as it's the forked SDK that supports the ZTE CPUs, ubuntu12 suggests it was compiled on Ubuntu 12.04.

Looks like a rebadged ZTE mf296r

1 Like

Yes, I’ve asked them already

The boot log contains lots of warnings and error messages.
Also, some weird stuff, like:

region code:299
region name:Quanguo

boot log:

Boot SPI NAND
start read bootheader
start read secondboot
non secure boot 
Jump
ddr init enter, rate is 1600 mbps
ddr init done 


U-Boot 2013.04-svn214847 (Jul 20 2022 - 20:17:43)

CPU  : ZX279128R@A9,800MHZ
Board: ZXIC zx279128revb
CONFIG_SYS_SDRAM_SIZE = 0x10000000
DRAM:  256 MiB
CONFIG_SYS_SDRAM_SIZE = 0x10000000
CONFIG_SKY_VID = 156 zxic_get_vid = 156 boot sky vid = 156
product_vid = 156
vid=156-TQY00R
NAND:  boot mode: 3
id:c8-1-7f-7f
id:c8-1-7f-7f
is_two_plane[0]
id:c8-1-7f-7f
id:c8-1-7f-7f
id:c8-1-7f-7f
id:c8-1-7f-7f
id:c8-1-7f-7f
id:c8-1-7f-7f
id:c8-1-7f-7f
id:c8-1-7f-7f
id:c8-1-7f-7f
id:c8-1-7f-7f
id:c8-1-7f-7f
id:c8-1-7f-7f

Manu ID: 0xc8, Chip ID: 0x01 (ESMT SPI NAND F50L1G41LB 128MiB 3,3V)
128 MiB
<nand_read_skip_bad_,1302>!mtdpart=0x1,offset=0x0,mtdpartoffset=0x180000,mtdPartsize=0x80000,length=0x20000
In:    serial
Out:   serial
Err:   serial
clk_pll env is not setted, core clk won't change
Net:   enter ref_clk_set.. mode = 0 .
enter pll_cfg_fractional
ref_clk_set success!
gpon serdes init 
innerGeLedPolarSet 0
innerGeLedPolarSet 0
innerGeLedPolarSet 0
innerGeLedPolarSet 0
eth0
CONFIG_SKY_VID = 156  zxic_get_vid=156 boot sky vid = 156
[zx5201_config](line:369) zx5201_config 

Hit 1 to upgrade software version
Hit ENTER key to stop autoboot:  1  0 
do_mcupg function enter..
Using eth0 device
mac 0 phy status changed: 1000M full-duplex
-----smac_init
multi upgrade check timeout.
Receive multicast packet failed (>.<)
do_mcupg function enter..
Using eth0 device
multi upgrade check timeout.
Receive multicast packet failed (>.<)
addr=200000
addr=700000
select=0x0
search=0x2
<nand_read_skip_bad_,1302>!mtdpart=0x4,offset=0x0,mtdpartoffset=0x1400000,mtdPartsize=0x100000,length=0x1000
select=0x0
search=0x2
search->result[select].entry=2001e0
mtd_length=2b58f0
<nand_read_skip_bad_,1302>!mtdpart=0x2,offset=0x0,mtdpartoffset=0x200000,mtdPartsize=0x500000,length=0x2b58f0
<nand_read_skip_bad_,1302>!mtdpart=0x0,offset=0x0,mtdpartoffset=0x0,mtdPartsize=0x180000,length=0x80000
lseek=0x4686b040
cmdline=U-Boot V1.0.0 20220720202532 
## Booting kernel from Legacy Image at 440001e0 ...
   Image Name:   Linux Kernel Image
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2840269 Bytes = 2.7 MiB
   Load Address: 40008000
   Entry Point:  40008000
   Verifying Checksum ... OK
   Loading Kernel Image ... OK
OK
----------------------
|-->setup versioninfo tag...

Starting kernel ...

Booting Linux on physical CPU 0x0
Initializing cgroup subsys cpuset
Initializing cgroup subsys cpu
Initializing cgroup subsys cpuacct
Linux version 4.1.25+ (david@ubuntu12) (gcc version 4.9.4 (Buildroot 2017.05-svn2186) ) #2 SMP PREEMPT Wed Jul 20 20:25:09 CST 2022
CPU: ARMv7 Processor [414fc091] revision 1 (ARMv7), cr=18c5387d
CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
Machine model: ZTE ZX279128R
Ignoring memory range 0x0 - 0x40000000
Ignoring memory block 0x0 - 0x20000000
in function:early_mem line: 766 zxic_mem_size = 0x10000000
Memory policy: Data cache writealloc
======= zx_map_io pon =======
======= zx_map_io =======
acl length 0x100000
opc length 0x100000
PERCPU: Embedded 11 pages/cpu @ceba0000 s15212 r8192 d21652 u45056
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 64960
Kernel command line: console=ttyAMA0,115200n8 root=/dev/mtdblock5 ro rootfstype=jffs2 mem=256M; U-Boot V1.0.0 20220720202532 0x200000 0x0 0x83 0x82
PID hash table entries: 1024 (order: 0, 4096 bytes)
Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
Memory: 231384K/262144K available (5239K kernel code, 288K rwdata, 1756K rodata, 196K init, 2194K bss, 30760K reserved, 0K cma-reserved)
Virtual kernel memory layout:
    vector  : 0xffff0000 - 0xffff1000   (   4 kB)
    fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
    vmalloc : 0xd0800000 - 0xff000000   ( 744 MB)
    lowmem  : 0xc0000000 - 0xd0000000   ( 256 MB)
    modules : 0xbf000000 - 0xc0000000   (  16 MB)
      .text : 0xc0008000 - 0xc06dce84   (6996 kB)
      .init : 0xc06dd000 - 0xc070e000   ( 196 kB)
      .data : 0xc070e000 - 0xc0756040   ( 289 kB)
       .bss : 0xc0756040 - 0xc097a9e8   (2195 kB)
SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
Preemptible hierarchical RCU implementation.
	Additional per-CPU info printed with stalls.
NR_IRQS:16 nr_irqs:16 16
L2C: platform modifies aux control register: 0x02030000 -> 0x32430000
L2C: platform provided aux values permit register corruption.
L2C: DT/platform modifies aux control register: 0x02030000 -> 0x02430000
L2C-310 enabling early BRESP for Cortex-A9
L2C-310 full line of zeros enabled for Cortex-A9
L2C-310 dynamic clock gating enabled, standby mode enabled
L2C-310 cache controller enabled, 16 ways, 256 kB
L2C-310: CACHE_ID 0x410000c9, AUX_CTRL 0x46430001
sched_clock: 64 bits at 500MHz, resolution 2ns, wraps every 4398046511103ns
clocksource arm_global_timer: mask: 0xffffffffffffffff max_cycles: 0xe6a171a037, max_idle_ns: 881590485102 ns
Calibrating delay loop... 1987.37 BogoMIPS (lpj=9936896)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
Initializing cgroup subsys blkio
Initializing cgroup subsys memory
Initializing cgroup subsys devices
Initializing cgroup subsys freezer
Initializing cgroup subsys net_cls
Initializing cgroup subsys net_prio
CPU: Testing write buffer coherency: ok
CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
Setting up static identity map for 0x400081e0 - 0x40008214
CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
Brought up 2 CPUs
SMP: Total of 2 processors activated (3981.31 BogoMIPS).
CPU: All CPU(s) started in SVC mode.
devtmpfs: initialized
clocksource jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
pinctrl core: initialized pinctrl subsystem
NET: Registered protocol family 16
e8_arp_detect_init OK!
DMA: preallocated 512 KiB pool for atomic coherent allocations
cpuidle: using governor ladder
cpuidle: using governor menu
genirq: Setting trigger mode 8 for irq 39 failed (gic_set_type+0x0/0x4c)
genirq: Setting trigger mode 8 for irq 40 failed (gic_set_type+0x0/0x4c)
CONFIG_SKY_VID = 156 zxic_get_vid = 156 kernel sky vid = 156
current_cputype=3,product_vid = 156
vid=156-TQY00R
board id=156, hardversion=V6.0, boardname=TQY00R
cpu id=0, vendor=ZX279128S
mux=f377aab
mux=52ffd75
mux=555c555
mux=75077
gpio_nr=12
led_nr=8
i=0,address=54,attribute=0,bused=1,mode=1,realgpio=6
i=1,address=86,attribute=0,bused=1,mode=1,realgpio=20
i=2,address=87,attribute=0,bused=1,mode=1,realgpio=21
i=3,address=79,attribute=0,bused=1,mode=1,realgpio=55
i=4,address=81,attribute=0,bused=1,mode=1,realgpio=57
i=5,address=80,attribute=0,bused=1,mode=1,realgpio=58
i=6,address=78,attribute=0,bused=1,mode=1,realgpio=59
i=7,address=62,attribute=0,bused=1,mode=1,realgpio=60
i=8,address=89,attribute=1,bused=1,mode=1,realgpio=8
i=9,address=90,attribute=1,bused=1,mode=1,realgpio=10
i=10,address=82,attribute=1,bused=1,mode=1,realgpio=12
i=11,address=71,attribute=1,bused=1,mode=1,realgpio=38
i=12,address=72,attribute=1,bused=1,mode=1,realgpio=39
i=13,address=74,attribute=1,bused=1,mode=1,realgpio=40
i=14,address=73,attribute=1,bused=1,mode=1,realgpio=41
i=15,address=32,attribute=0,bused=1,mode=0,realgpio=0
i=16,address=18,attribute=0,bused=1,mode=0,realgpio=18
i=17,address=17,attribute=0,bused=1,mode=0,realgpio=15
i=17,15,0,-1,1
i=18,18,0,-1,1
i=32,0,0,-1,1
i=54,6,1,0,1
i=62,60,1,1,1
i=71,38,1,1,1
i=72,39,1,0,1
i=73,41,1,1,1
i=74,40,1,0,1
i=78,59,1,1,1
i=79,55,1,1,1
i=80,58,1,1,1
i=81,57,1,1,1
i=82,12,1,1,1
i=86,20,1,1,1
i=87,21,1,1,1
i=89,8,1,1,1
i=90,10,1,1,1
fe:0
ge:5
opti:0
lan:5
pots:0
usb:2
wifi:2
ups:0
catv:0
uart:1
moca:0
e1:0
xge:0
bob:1
sim:0
enet:5
eth_emac:0,eth_mode:1,eth_rate:0,eth_nego:1,eth_cmode:1,eth_port:0
eth_emac:0,eth_mode:1,eth_rate:0,eth_nego:1,eth_cmode:1,eth_port:1
eth_emac:0,eth_mode:1,eth_rate:0,eth_nego:1,eth_cmode:1,eth_port:2
eth_emac:0,eth_mode:1,eth_rate:0,eth_nego:1,eth_cmode:1,eth_port:3
eth_emac:0,eth_mode:1,eth_rate:0,eth_nego:1,eth_cmode:1,eth_port:4
optscheme:6,vendor=GN25L95
[zx279128_init_machine] num_online_cpus:2 num_possible_cpus:2 num_present_cpus:2 num_active_cpus:2
Serial: AMBA PL011 UART driver
94405000.serial: ttyAMA0 at MMIO 0x94404000 (irq = 22, base_baud = 0) is a 
console [ttyAMA0] enabled
Serial: AMBA PL011 UART add port0 success
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
Switched to clocksource arm_global_timer
NET: Registered protocol family 2
TCP established hash table entries: 2048 (order: 1, 8192 bytes)
TCP bind hash table entries: 2048 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
UDP hash table entries: 256 (order: 1, 8192 bytes)
UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
NET: Registered protocol family 1
synopsys pcie probe enter!!!!!!
pcie0 irq is 50
pcie1 irq is 51
pcie1 link down irq is 52
pcie1 link down irq is 53
Add synopsys PCIe port 0
SYNOPSYS pcie port0 memory addr(PA): 0x10000000
SYNOPSYS pcie port0 system control addr(VA): 0xf0500000
SYNOPSYS pcie port0 reg addr(VA): 0xd0888000
SYNOPSYS pcie port0 top crm addr(VA): 0xf0400000
SYNOPSYS pcie port0 phy apb addr(VA): 0xd0890000
SYNOPSYS pcie port0 cfg  addr(VA): 0xd08a0000
SYNOPSYS pcie port0 local irq num: 50
SYNOPSYS pcie port0 mem_offset: 0x0
Add synopsys PCIe port 1
SYNOPSYS pcie port1 memory addr(PA): 0x20000000
SYNOPSYS pcie port1 system control addr(VA): 0xf0500000
SYNOPSYS pcie port1 reg addr(VA): 0xd0898000
SYNOPSYS pcie port1 top crm addr(VA): 0xf0400000
SYNOPSYS pcie port1 phy apb addr(VA): 0xd08b8000
SYNOPSYS pcie port1 cfg  addr(VA): 0xd08c0000
SYNOPSYS pcie port1 local irq num: 51
SYNOPSYS pcie port1 mem_offset: 0x0
init synopsys pcie
synopsys pcie driver preinit
synopsys pcie  PreInit Controller 0
synopsys pcie0 controller setting
pinmux va base is 0xf0600000
*0****pcie0 wifi reset pin(52)=0
*0****pcie0 wifi reset pin(54)=0
*1****pcie0 wifi reset pin(52)=1
*1****pcie0 wifi reset pin(54)=1
synopsys pcie  PreInit Controller 1
synopsys pcie1 controller setting
pinmux va base is 0xf0600000
*0****pcie0 wifi reset pin(52)=1
*0****pcie0 wifi reset pin(54)=1
*1****pcie0 wifi reset pin(52)=1
*1****pcie0 wifi reset pin(54)=1
**********synopsys PCIe Setup*********
synopsys pcie port0 controller root bus: 0
**********synopsys PCI driver ScanBus************
PCI host bridge to bus 0000:00
pci_bus 0000:00: root bus resource [mem 0x10000000-0x17ffffff]
pci_bus 0000:00: root bus resource [io  0x1000-0xffff]
pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
PCI: bus0: Fast back to back transfers disabled
**********synopsys PCIe Setup*********
synopsys pcie port1 controller root bus: 1
**********synopsys PCI driver ScanBus************
PCI host bridge to bus 0000:01
pci_bus 0000:01: root bus resource [mem 0x20000000-0x27ffffff]
pci_bus 0000:01: root bus resource [io  0x10000-0x1ffff]
pci_bus 0000:01: No busn resource found for root bus, will use [bus 01-ff]
PCI: bus1: Fast back to back transfers disabled
synopsys pcie0 controller waitting L0 state
pcie0 link up,cnt 1!
synopsys pcie port0 irqs setting
pcie0 irq is 50
pcie0 link down irq is 52
request pcie link down irq failed
synopsys pcie port0 windows map setting
synopsys pcie controller0 enable
synopsys pcie1 controller waitting L0 state
pcie1 link up,cnt 1!
synopsys pcie port1 irqs setting
pcie1 irq is 51
pcie1 link down irq is 53
request pcie link down irq failed
synopsys pcie port1 windows map setting
synopsys pcie controller1 enable
pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff]
pci 0000:00:00.0: BAR 0: assigned [mem 0x10000000-0x100fffff 64bit pref]
pci 0000:00:00.0: BAR 2: assigned [mem 0x10100000-0x10103fff 64bit pref]
pci 0000:00:00.0: BAR 4: assigned [mem 0x10104000-0x10104fff 64bit pref]
futex hash table entries: 512 (order: 2, 16384 bytes)
squashfs: version 4.0 (2009/01/31) Phillip Lougher
ntfs: driver 2.1.32 [Flags: R/W].
jffs2: version 2.2. (NAND) � 2001-2006 Red Hat, Inc.
fuse init (API version 7.23)
io scheduler noop registered (default)
no nand flash attach
denali-nand-dt: probe of d80000.nand failed with error -1
zte_spifc_reg:ce4b199c
spifc->io_base :f0706000
nand: device found, Manufacturer ID: 0xc8, Chip ID: 0x01
nand: ESMT SPI NAND F50L1G41LB 128MiB 3,3V
nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
is_two_plane: 0
Specmaf_id:c8,Specdev_id:1
NAND Chip: oobsize:0x40, pagesize:0x800, blocksize:0x20000, chipsize:0x8000000, ECC capbility is 8 bits, CRC protection is disabled is_two_plane[0]
Scanning device for bad blocks
Creating 13 MTD partitions on "ZX279127-ZX279131-spifc":
0x000000000000-0x000008000000 : "whole flash"
0x000000000000-0x000000200000 : "u-boot"
0x000006800000-0x000006a00000 : "parameter tags"
0x000000200000-0x000000700000 : "kernel0"
0x000000700000-0x000000c00000 : "kernel1"
0x000001800000-0x000003800000 : "rootfs0"
0x000003800000-0x000005800000 : "rootfs1"
0x000000c00000-0x000001400000 : "usercfg"
0x000001400000-0x000001500000 : "others"
0x000001500000-0x000001800000 : "wlan"
0x000005800000-0x000006000000 : "middleware"
0x000006a00000-0x000008000000 : "versionbackup"
0x000006000000-0x000006800000 : "framework1"
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
PPP generic driver version 2.4.2
PPP MPPE Compression module registered
NET: Registered protocol family 24
usbcore: registered new interface driver catc
usbcore: registered new interface driver kaweth
pegasus: v0.9.3 (2013/04/25), Pegasus/Pegasus II USB Ethernet driver
usbcore: registered new interface driver pegasus
usbcore: registered new interface driver rtl8150
usbcore: registered new interface driver r8152
usbcore: registered new interface driver asix
usbcore: registered new interface driver ax88179_178a
usbcore: registered new interface driver cdc_ether
usbcore: registered new interface driver cdc_eem
usbcore: registered new interface driver dm9601
usbcore: registered new interface driver sr9700
usbcore: registered new interface driver CoreChips
usbcore: registered new interface driver smsc75xx
usbcore: registered new interface driver smsc95xx
usbcore: registered new interface driver gl620a
usbcore: registered new interface driver net1080
usbcore: registered new interface driver plusb
usbcore: registered new interface driver rndis_host
usbcore: registered new interface driver cdc_subset
usbcore: registered new interface driver MOSCHIP usb-ethernet driver
usbcore: registered new interface driver cx82310_eth
usbcore: registered new interface driver cdc_ncm
usbcore: registered new interface driver huawei_cdc_ncm
usbcore: registered new interface driver qmi_wwan_q
usbcore: registered new interface driver qmi_wwan
usbcore: registered new interface driver cdc_mbim
ZX_VA_TOP_CRM+0x4C=0x3cfff
**********TOP_CRM_BASE+0x08=0x1ff7ffff******
dwc2 9000000.usb: 1792 invalid for host_rx_fifo_size. Check HW configuration.
dwc2 9000000.usb: 1024 invalid for host_nperio_tx_fifo_size. Check HW configuration.
dwc2 9000000.usb: 1024 invalid for max_packet_count. Check HW configuration.
dwc2 9000000.usb: DWC OTG Controller
dwc2 9000000.usb: new USB bus registered, assigned bus number 1
dwc2 9000000.usb: irq 54, io mem 0x00000000
usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
usb usb1: Product: DWC OTG Controller
usb usb1: Manufacturer: Linux 4.1.25+ dwc2_hsotg
usb usb1: SerialNumber: 9000000.usb
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
ehci-pci: EHCI PCI platform driver
ehci-platform: EHCI generic platform driver
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
ohci-pci: OHCI PCI platform driver
ohci-platform: OHCI generic platform driver
uhci_hcd: USB Universal Host Controller Interface driver
xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 2
xhci-hcd xhci-hcd.0.auto: hcc params 0x0220f66c hci version 0x100 quirks 0x00010010
xhci-hcd xhci-hcd.0.auto: irq 55, io mem 0x09100000
usb usb2: New USB device found, idVendor=1d6b, idProduct=0002
usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
usb usb2: Product: xHCI Host Controller
usb usb2: Manufacturer: Linux 4.1.25+ xhci-hcd
usb usb2: SerialNumber: xhci-hcd.0.auto
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 3
usb usb3: We don't know the algorithms for LPM for this host, disabling LPM.
usb usb3: New USB device found, idVendor=1d6b, idProduct=0003
usb usb3: New USB device strings: Mfr=3, Product=2, SerialNumber=1
usb usb3: Product: xHCI Host Controller
usb usb3: Manufacturer: Linux 4.1.25+ xhci-hcd
usb usb3: SerialNumber: xhci-hcd.0.auto
hub 3-0:1.0: USB hub found
hub 3-0:1.0: 1 port detected
fusbh200_hcd: FUSBH200 Host Controller (EHCI) Driver
Warning! fusbh200_hcd should always be loaded before uhci_hcd and ohci_hcd, not after
usbcore: registered new interface driver cdc_acm
cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
usbcore: registered new interface driver usblp
usbcore: registered new interface driver cdc_wdm
usbcore: registered new interface driver usb-storage
usbcore: registered new interface driver usbserial
usbcore: registered new interface driver cp210x
usbserial: USB Serial support registered for cp210x
usbcore: registered new interface driver ftdi_sio
usbserial: USB Serial support registered for FTDI USB Serial Device
usbcore: registered new interface driver ipw
usbserial: USB Serial support registered for IPWireless converter
usbcore: registered new interface driver option
usbserial: USB Serial support registered for GSM modem (1-port)
usbcore: registered new interface driver pl2303
usbserial: USB Serial support registered for pl2303
usbcore: registered new interface driver qcserial
usbserial: USB Serial support registered for Qualcomm USB modem
I2C probe start!
zx_i2c_probe i2c-1 i2c-1->clk is ce5e4da0 ,clk rate is 100000000
I2C probe successed!
<pdt_wdt_init>(565):creat proc files for watchdog!!!
<pdt_wdt_init>(569):Starting Watchdog Timer...
wdt debug: nr_cpu_ids= 2
zxwdt: heartbeat 8 msec, clock 500000000
usbcore: registered new interface driver usbhid
usbhid: USB HID core driver
zx tempsensor: zx_bsp_tempsensor.regs = 0xf0500034,&(zx_bsp_tempsensor.regs->cfg)= 0xf0500034
bsp_temp_start,val = 0x2f6
<pdt_temp_init>(516):creat proc files for temper sensor!!!
<pdt_temp_init>(521):temper sensor is running...
zx tempsensor: work clock 0
zx tempsensor: selector0's int num 27 allocated.
zx tempsensor: selector1's int num 28 allocated.
zx tempsensor: selector2's int num 29 allocated.
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (3615 buckets, 26000 max)
xt_time: kernel timezone is -0000
ip_set: protocol 6
zte--oss cpu usage module init
11930:22:58 [Klogstdio][Info] [(882)LogStdioProcInit] LogStdioProcInit

LogUdpWatchProcInit
MAXNET DPI interface Loaded
detail_process_init start
ip_tables: (C) 2000-2006 Netfilter Core Team
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
sit: IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
Bridge firewalling registered
Ebtables v2.0 registered
l2tp_core: L2TP core driver, V2.0
l2tp_ppp: PPPoL2TP kernel driver, V2.0
Registering SWP/SWPB emulation handler
DevBw module init

==========zxic_notifier_init success=================
FLowRL module init
usb 3-1: new SuperSpeed USB device number 2 using xhci-hcd
usb 3-1: LPM exit latency is zeroed, disabling LPM.
usb 3-1: config 1 has an invalid interface number: 12 but max is 5
usb 3-1: config 1 has no interface number 5
usb 3-1: New USB device found, idVendor=2c7c, idProduct=030b
usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 3-1: Product: EG060K-EA
usb 3-1: Manufacturer: Quectel
usb 3-1: SerialNumber: 260281c0
option 3-1:1.0: GSM modem (1-port) converter detected
usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0
csp_report_usb_serial_change_msg,1
option 3-1:1.1: GSM modem (1-port) converter detected
usb 3-1: GSM modem (1-port) converter now attached to ttyUSB1
csp_report_usb_serial_change_msg,1
option 3-1:1.2: GSM modem (1-port) converter detected
usb 3-1: GSM modem (1-port) converter now attached to ttyUSB2
csp_report_usb_serial_change_msg,1
option 3-1:1.3: GSM modem (1-port) converter detected
usb 3-1: GSM modem (1-port) converter now attached to ttyUSB3
csp_report_usb_serial_change_msg,1
qmi_wwan_q 3-1:1.4: cdc-wdm0: USB WDM device
qmi_wwan_q 3-1:1.4: Quectel EG060K-EA work on RawIP mode
qmi_wwan_q 3-1:1.4: rx_urb_size = 16384
qmi_wwan_q 3-1:1.4 wwan0: register 'qmi_wwan_q' at usb-xhci-hcd.0.auto-1, WWAN/QMI device, c6:0b:c6:77:73:dd
option 3-1:1.12: GSM modem (1-port) converter detected
devpath :1
port :1
u_dev->bus->busnum :3
VFS: Mounted root (jffs2 filesystem) readonly on device 31:5.
Freeing unused kernel memory: 196K (c06dd000 - c070e000)
This architecture does not have kernel memory protection.
mounting /dev/mtdblock2 to /tagparam, wait ...
  Mounting ramdisk at /var
 Mounting ramdisk at /mnt
  Mounting /dev/mtdblock10 to /db_excp
  Mount mtd10 ok!
  Mounting /dev/mtdblock7 to /userconfig
  Mount ok!
sismac region_code 299
sismac region code euqal 299
/proc/skubootenv/regioncode 
mounting /dev/mtdblock9 to /wlan, wait ...
Mount /dev/mtdblock12 to cmplugin
mount: mounting /dev/mtdblock12 on /cmplugin failed: No such file or directory
mkdir: can't create directory '/cmplugin/': Read-only file system
Configuring MAC interfaces
ls: /etc/sysconfig/network-scripts/ifcfg-mii*: No such file or directory
Bringing up interface lo
[gpio_module_init] gpio_elements:18 led_elements:8
storage_wakeup_proc_create success!
<verinfo_module_init>(1302)---->verinfo=U-Boot V1.0.0 20220720202532 0x200000 0x0 0x83 0x82
verinfo: U-Boot V1.0.0 20220720202532 0x200000 0x0 0x83 0x82, u32CurrentSoftNumber: 0
addr==200000
<verinfo_module_init>(1307)---->s32Description is ZXIC 128R UNI V1.0.0
s8VendorInfo is ZXIC
<verinfo_module_init>(1309)----><verinfo_module_init>(1311)---->can find /usr/local/upgrade_module/phapp_verphapp_version_info_get error!
fail_addr=40,i2c_probe(0x50) failed.
bspdriver select mode is EEPROM.
qupengchao : pon0 create success
register fpga driver success, major=222
pon init
the pon mode is 8
pon_reset =0xffffffff 
enter ref_clk_set.. mode = 0 .
enter pll_cfg_fractional
ref_clk_set success!
rxpll_ready
get tm irq succeed,g_tm_irq:35
pon tm init
enter pon_tm_bppe_pool_init
bppe_va_addr = 0xcef00000
ZX_PA_BUF_BASE0 = 0x4ef00000
--111---
jumbo_bppe_va_addr = 0xcef10000
before zxOsCacheFlush
netif_napi_add() called with weight 512 on device pon
DMA_DN_DESC_CNT = 0x0
DMA_UP_DESC_CNT = 0x0
pon_tm net init ok,248/176
get pp irq succeed,g_pp_irq:37
pon_pp init
get npp irq succeed,g_npp_irq:19
pon_npp init
idm_status_proc success!
idm_desc_init d0b2c000/4de10000
request idm irq succeed 
idm net init ok
mult pmau 0x3810
mac 0 link down
mac 1 link down
mac 2 link down
mac 3 link down
rgmii_in_use.
get idm irq succeed,g_idm_irq:33
= TM Module SYS FS Init ended successfully =
tm_initModule begin...
tm_pon_tm_initial----start
tm_pon_tm_initial----finish
tm_pon_pp_initial----start
tm_pon_pp_initial----finish
tm_pon_npp_initial----start
tm_pon_npp_initial----finish
tm_initial successed !!!
enter tm_sdk_init  
modify acl hash when set extern acl hash
tm_initModule end...
iprt_data_init success!
ethdriver_init....
g_mii_dev_name[0]  sw 
g_mii_dev_name[1]  pon 
zx279100_gpon_Init ok
Init switch module
zy switch detected boardtype:192
zy uni num:5
switch config 9127/9128 GPON  mode!
[SW][sw_init_switch] reg hff
[yqs]set cpu queue rate limit to 4000pps
[SW][sw_init_switch] reg get statistics 
Init switch module Success
select GN25L95 mode is EEPROM.
get tag erro id:-7
region code:299
region name:Quanguo
USER_CFG is same as ETC_CFG, donot need copy
  Database default setting is [current : 299]
*****************pc start********************
*****************echo 5000 > /proc/sys/vm/min_free_kbytes********************
chmod: /usr/data: No such file or directory
/etc/init.d/rcS: line 307: can't create /proc/sys/kernel/jembench: nonexistent directory
/etc/init.d/rcS: line 319: can't create /proc/sys/kernel/jvm_osgi: nonexistent directory

zxic login: [mem_monitor] --ENTER--
target pid is not exist 
./getMac.sh
./vasdocker
./vasdocker.conf
/usr/bin/vasdocker_monitor.sh: line 115: can't create : nonexistent directory
<3000000008>11930:23:04 [Klogfile][Error] [(1203)CheckLogConfFile] CheckLogConfFile%CheckRestartCntConfFile

full boot log

uboot info:

version:

U-Boot 2013.04-svn214847 (Jul 20 2022 - 20:17:43)
arm-buildroot-linux-gnueabi-gcc.br_real (Buildroot 2017.05-svn2186) 4.9.4
GNU ld (GNU Binutils) 2.27

help:

?       - alias for 'help'
base    - print or set address offset
bdinfo  - print Board Info structure
boot    - boot default, i.e., run 'bootcmd'
bootd   - boot default, i.e., run 'bootcmd'
bootk   - boot kernel
bootm   - boot application image from memory
bootz   - boot Linux zImage image from memory
cmp     - memory compare
coninfo - print console devices and information
cp      - memory copy
dhcp    - boot image via network using DHCP/TFTP protocol
downver - upgrade software downloaded from TFTP server
echo    - echo args to console
erase   - erase FLASH memory
fdt     - flattened device tree utility commands
flinfo  - print FLASH memory information
go      - start application at address 'addr'
gpiotest- gpiotest dir [num] [in/out]
gpiotest value [num] [1/0]
gpiotest gvalue [num]
help    - print command description/usage
imxtract- extract a part of a multi-image
itest   - return true/false on integer compare
mcupg   -  multicast upgrade
md      - memory display
memtester- do memory test
mii     - MII utility commands
mtddebug- mtddebug operate
mtest   - simple RAM read/write test
mw      - memory write (fill)
nand    - NAND sub-system
ping    - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
protect - enable or disable FLASH write protection
reset   - Perform RESET of the CPU
run     - run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv  - set environment variables
sleep   - delay execution for some time
snumber - Get or set serial number for zte boards
tftp    - boot image via network using TFTP protocol
version - print monitor, compiler and linker version
watchdog- watchdog reset && disable
xmodem  - xmodem

bdinfo:

arch_number = 0x002A9771
boot_params = 0x40000100
DRAM bank   = 0x00000000
-> start    = 0x40000000
-> size     = 0x10000000
eth0name    = eth0
ethaddr     = 34:D8:56:17:DC:1E
current eth = eth0
ip_addr     = 192.168.1.1
baudrate    = 115200 bps
TLB addr    = 0x4FFF0000
relocaddr   = 0x4FF9B000
reloc off   = 0x0809B000
irq_sp      = 0x4F55AF40
sp start    = 0x4F55AF30

printenv:

baudrate=115200
bootcmd=setenv bootargs console=$(console) root=/dev/mtdblock5 ro rootfstype=jffs2  mem=$(memsize);bootm 0x440001e0;
bootdelay=1
bootfile=uboot.bin
bootloaderfile=bootloader.bin
configfile=zxic_pubconfig.bcb
console=ttyAMA0,115200n8
ethact=eth0
ethaddr=34:D8:56:17:DC:1E
fullfile=upgrade.bin
fwmagic=86a1e81c9aa668917b427e9645204217
gatewayip=192.168.1.1
hostname=unknown
ipaddr=192.168.1.1
linuzfile=vmlinuz.bin
loadaddr=0x44000000
memsize=256M
netmask=255.255.255.0
netretry=5
recoveredcfgver=8
serverip=192.168.1.101
stderr=serial
stdin=serial
stdout=serial
versioninfo=U-Boot V1.0.0 20220720202532 0x200000 0x0 0x83 0x82

Environment size: 692/131068 bytes

Flash dump here:

mtd0:  0x000000000000-0x000008000000 : "whole flash"
mtd1:  0x000000000000-0x000000200000 : "u-boot"
mtd2:  0x000006800000-0x000006a00000 : "parameter tags"
mtd3:  0x000000200000-0x000000700000 : "kernel0"
mtd4:  0x000000700000-0x000000c00000 : "kernel1"
mtd5:  0x000001800000-0x000003800000 : "rootfs0"
mtd6:  0x000003800000-0x000005800000 : "rootfs1"
mtd7:  0x000000c00000-0x000001400000 : "usercfg"
mtd8:  0x000001400000-0x000001500000 : "others"
mtd9:  0x000001500000-0x000001800000 : "wlan"
mtd10: 0x000005800000-0x000006000000 : "middleware"
mtd11: 0x000006a00000-0x000008000000 : "versionbackup"
mtd12: 0x000006000000-0x000006800000 : "framework1"

mtd2, mtd5, mtd6, mtd7, mtd9, mtd10 contain JFFS2 filesystems.
Then can be extracted using:

binwalk -e mtd5.bin