Status update: I bought a probe so I can dump the flash, unfortunately I got the wrong size 
so I've re-ordered the correct size.
I re-sent patches 4-10 in v4 of the patchset https://patchwork.kernel.org/project/linux-mips/list/?series=958536
Unfortunately I missed a review tag so I'll probably need to re-re-send it again. Hopefully I'll get some attention on the other parts of the code beyond just the intc.
Just sent patchset v5 https://patchwork.kernel.org/project/linux-mips/list/?series=960479 (note the first 3 patches were accepted, so 1/7 means 4/10) , new status:
| Patch | Description | Status |
|---|---|---|
| 1 | Add EcoNet to vendor list | Applied  |
| 2 | Interrupt controller bindings | Applied |
| 3 | Interrupt controller code | Applied |
| 4 | Timer bindings | Reviewer signoff |
| 5 | Timer | Received and addressed notes |
| 6 | EcoNet SoC binding | Reviewer signoff |
| 7 | Main platform | Notes addressed, no signoff |
| 8 | Add SmartFiber to vendor list | Reviewer signoff |
| 9 | DTS files for platform | No notes |
| 10 | MAINTAINERS (add myself) | Reviewer signoff |
I think 4 and 5 (now renumbered 1 and 2) will be accepted reasonably soon. 7 and 9 are the big ones that remain. My gut instinct is that after 4 and 5 land, the mips maintainers will take them with minimal notes.
Just a little heads up as the embedded MT7530 switch might be faulty according to this:
Update on progress: All of the patches have now been accepted to the Linux kernel, so in an up-and-coming release, we should have support for EcoNet EN751221 in mainline linux.
I've been swamped with a bunch of other things, so I have not gotten a chance to dump the storage from an EN751627 yet, but I think right now the main priority should be going back to OpenWRT with a new patchset since it's now present in mainline Linux so they should have no reason not to accept it.
Update: I have re-submitted the PR for inclusion in OpenWRT: https://github.com/openwrt/openwrt/pull/19021
And sent a message to the mailing list about it: https://lists.openwrt.org/pipermail/openwrt-devel/2025-June/044052.html
I'm going to update https://econet-linux.pkt.wiki/ now to indicate the status of progress, especially since we now "have something".
Thanks a ton for your work!
ps: your contribution made the headlines https://www.phoronix.com/news/Linux-6.16-MIPS
Hi, I am trying to test the new econet platform initial support with the pull request from Caleb on the Sercomm FG824CD and I need some help.
After dissambling and connecting to the right UART port(there are two, one for the wifi SoC and the econet main SoC), Is the serial console input disabled? And the output is very limited. If I can ask @tower, How did you get to play with the keenetic U-Boot? Directly programming the SPI? I did not see the pads clearly at first glance.
Any advise or help would be really apreciated.
Thank you all for this long journey!
picocom v3.1
port is : /dev/ttyUSB0
flowcontrol : none
baudrate is : 115200
parity is : none
databits are : 8
stopbits are : 1
escape is : C-a
local echo is : no
noinit is : no
noreset is : no
hangup is : no
nolock is : no send_cmd is : lsx receive_cmd is : v
imap is :
omap is :
emap is : crcrlf,delbs,
logfile is : none
initstring : none
exit_after is : not set
exit is : no Type [C-a] [C-h] to see available commands Terminal ready
BGA IC
Xtal:1
DDR3 init. DRAMC init done.
Calculate size. DRAM size=512MB(supported max size)
Set new TRFC.
ddr-1066
7512DRAMC V1.2.2 (0)
reg val 0x501
Set SPI Flash Clock to 50 Mhz
EN751221 at 2018年 02月 08日 星期四 15:30:56 CST version 1.1 free bootbase
Memory size 512MB
reg val 0x501
Set SPI Flash Clock to 50 Mhz
spi_nand_probe: mfr_id=0x2c, dev_id=0x24 Dected SPI NAND Flash : _SPI_NAND_DEVICE_ID_MT29F2G01, Flash Size=0x10000000calc_bmt_pool_size: last_block = 75d, addr = 0xeba0000, after this, it's BMT area!
bmt pool size: 163
BMT & BBT Init Success
phy power down!
Done!
*************************************************** FG824CD_VFES Boot Version 2.0.0.0
*************************************************** Entering Firmware : Everything is OK. Decompress to 80002000 free_mem_ptr=80850000 free_mem_ptr_end=807B0000 from slave Decompress...
Uncompressing [LZMA] ... done.
Disableing Ethernet...
ECNT ring buffer init success
init mod-ksocket
init mod-acodec
init mod-foip3
mario@raspberrypi:~ $ picocom --send-cmd lsx -vv -b 115200 /dev/ttyUSB0
picocom v3.1
port is : /dev/ttyUSB0
flowcontrol : none
baudrate is : 115200
parity is : none
databits are : 8
stopbits are : 1
escape is : C-a
local echo is : no
noinit is : no
noreset is : no
hangup is : no
nolock is : no
send_cmd is : lsx
receive_cmd is : v
imap is :
omap is :
emap is : crcrlf,delbs,
logfile is : none
initstring : none
exit_after is : not set
exit is : no
Type [C-a] [C-h] to see available commands
Terminal ready
�Quantenna Mini U-Boot
Version: v37.4.0.93 Built: 11月 27 2017 at 17:38:49
LoadihlHñBT HBH� T
ARP Retry count exceeded; starting again
T BOOTP broadcast 1
BOOTP broadcast 2
Retry count exceeded; starting again
Loading: *
ARP Retry count exceeded; starting again
T BOOTP broadcast 1
BOOTP broadcast 2
Retry count exceeded; starting again
Loading: *
ARP Retry count exceeded; starting again
T BOOTP broadcast 1
BOOTP broadcast 2
Retry count exceeded; starting again
Loading: *
ARP Retry count exceeded; starting again
T BOOTP broadcast 1
BOOTP broadcast 2
Retry count exceeded; starting again
Loading: #####
done
Bytes transferred = 70156 (0x1120c)
Boot reached stage 13
Boot reached stage 12
Valid CRC found in flash restoring env...
Boot reached stage 11
hw_config_id 65535: 'FG824CD'
Cold boot
Reset status: 0x00000001
Info: data uncached: addr=0xc0000000 size=1024MB
Info: text at 0x88040000, stack at 0x88013ffc(8192), heap at 0x88000000(73728), uboot size 174956
Info: i-cache is enabled
Info: d-cache is enabled
Info: CPU freq is 500000000, dev freq is 125000000
Info: Quantenna U-Boot version:v37.4.0.227
Info: build date '11月 10 2021', time '15:29:22'
SPI flash info:
name : mx25l512e
jedec_id : 0xc22010
sector size : 4096
number of sector : 16
frequency : 104000000
flags : 0x2
lock :
DDR_INIT: type = 16, speed = 2, size = 134217728, rev = 0x43, param = 0x0
DDR_INIT: replacing invalid param = 0x0 with default 0xe7b
500MHz
BDA at 0x80002000
In: serial
Out: serial
Err: serial
Boot reached stage 64
Boot reached stage 65
br
Hit any key to stop autoboot: 0
Boot reached stage 80
1G-FD
Using br device
TFTP from server 1.1.1.1; our IP address is 1.1.1.2
Filename 'topaz-linux.lzma.img'.
Load address: 0x83000000
Loading: #################################################################
#################################################################
#################################################################
#################################################################
##############@###############�################@###################
########D##################@#########B##H############################
##########################################
done
Bytes transferred = 6304574 (0x60333e)
Boot reached stage 81
Boot reached stage 84
Boot reached stage 1
## Booting kernel from Legacy Image at 83000000 ...
Boot reached stage 2
Boot reached stage 3
Image Name: topaz-linux
Image Type: arc Linux Kernel Image (lzma compressed)
Data Size: 6296382 Bytes = 6 MB
Load Address: 8493a000
Entry Point: 8493a000
Qtn flags: 00000001
Verifying Checksum ... OK
Boot reached stage 4
Boot reached stage 5
Boot reached stage 6
Boot reached stage 14
BHj`s@Dmpressing Kernel Image ...
`BHH@OK
Boot reached stage 7
Boot reached stage 8
Command line TAG setup
Params->u.cmdline.cmdline console=ttyS0,115200n8 earlyprintk=1 hw_config_id=65535
p console=ttyS0,115200n8 earlyprintk=1 hw_config_id=65535
## Unset TAG qtn_flags 1
## Transferring control to Linux (at address 8493a000) ATAG parameters 88068274 - 880682cc...
B[ 0.000000] Linux version 2.6.35.12 (tony@tony-virtual-machine) (gcc version 4.2.3 (ARC_2.3)) #2 Mon Dec 27 17:06:40 CST 2021
[ 0.000000] Parsing ATAG parameters from bootloader
[ 0.000000] ATAG_CORE: successful parsing
[ 0.000000] ATAG_CMDLINE: command line = console=ttyS0,115200n8 earlyprintk=1 hw_config_id=65535
[ 0.000000] Board id: 65535
[ 0.000000] ATAG_HW_CONFIG_ID: hw_config_id = 65535
[ 0.000000]
[ 0.000000] Processor Family: ARC 700 [0x33]
[ 0.000000] CPU speed : 500.00 Mhz
[ 0.000000] Timers: TIMER1 TIMER0
[ 0.000000] Interrupt Vect Base: 0x88052800
[ 0.000000] Peripheral Base: NOT present; assuming 0xCOFC0000
[ 0.000000] Data UNCACHED Base (I/O): start 0xc0 Sz, 1024 MB
[ 0.000000] ARC700 MMU Ver [2]
[ 0.000000] PAGE SIZE 8k
[ 0.000000] JTLB 128 x 2 = 256 entries
[ 0.000000] uDTLB 8 entr, uITLB 4 entr
[ 0.000000] TLB Refill "will NOT" Flush uTLBs
[ 0.000000] Detected I-cache :
[ 0.000000] Type=2 way set-assoc, Line length=32, Size=16K (enabled)
[ 0.000000] Detected D-cache :
[ 0.000000] Type=4 way set-assoc, Line length=32, Size=16K (enabled)
[ 0.000000] Extensions:
[ 0.000000] MPY: 32x32 with ANY Result Reg MAC MPY: Dual 16 x 16 and 32 x 16
[ 0.000000] DCCM: N/A ICCM: N/A
[ 0.000000] CRC: N/A, SWAP: Present NORM: Present
[ 0.000000] Min-Max: Present, Barrel Shifter: Present
[ 0.000000] Ext Arith Insn: Present
[ 0.000000] Floating Point Extension: N/A
[ 0.000000] On node 0 totalpages: 16383
[ 0.000000] free_area_init_node: node 0, pgdat 85cf5e74, node_mem_map 85da6024
[ 0.000000] Normal zone: 72 pages used for memmap
[ 0.000000] Normal zone: 0 pages reserved
[ 0.000000] Normal zone: 16311 pages, LIFO batch:3
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16311
[ 0.000000] Kernel command line: console=ttyS0,115200n8 earlyprintk=1 hw_config_id=65535
[ 0.000000] bootconsole [ruby_early0] enabled
[ 0.000000] PID hash table entries: 512 (order: -2, 2048 bytes)
[ 0.000000] Dentry cache hash table entries: 16384 (order: 3, 65536 bytes)
[ 0.000000] Inode-cache hash table entries: 8192 (order: 2, 32768 bytes)
[ 0.000000] Memory: 34424KB available (2178K code,1213K data, 17512K init)
[ 0.000000] Hierarchical RCU implementation.
[ 0.000000] RCU debugfs-based tracing is enabled.
[ 0.000000] Verbose stalled-CPUs detection is disabled.
[ 0.000000] clockevent mode switch to [1]
[ 0.000000] clockevent mode switch to [2]
[ 0.000000] Calibrating delay loop... @249.03 BogoMIPS (lpj=622592)
[ 0.115000] pid_max: default: 4096 minimum: 301
[ 0.120000] Mount-cache hash table entries: 1024
[ 0.125000] Starting run_ksoftirqd, stack (thread_info) at 85d1a000 cpu 0
[ 0.130000] NET: Registered protocol family 16
[ 0.135000] Topaz heap 1 in SRAM 88016360<->88020000
[ 0.140000] Topaz heap 2 in SRAM 88011000<->88012000
[ 0.150000] bio: create slab <bio-0> at 0
[ 0.155000] watch64: 2003/08/22 Josef 'Jeff' Sipek <jeffpc@xxxxxxxxxxxxx>
[ 0.160000] watch64: Enabling Watch64 extensions...done.
[ 0.165000] Switching to clocksource ARC Timer1
[ 0.170000] NET: Registered protocol family 2
[ 0.175000] IP route cache hash table entries: 2048 (order: 0, 8192 bytes)
[ 0.180000] TCP established hash table entries: 4096 (order: 2, 32768 bytes)
[ 0.185000] TCP bind hash table entries: 4096 (order: 1, 16384 bytes)
[ 0.190000] TCP: Hash tables configured (established 4096 bind 4096)
[ 0.195000] TCP reno registered
[ 0.200000] NET: Registered protocol family 1
[ 0.840000] JFFS2 version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
[ 0.845000] msgmni has been set to 67
[ 0.850000] io scheduler noop registered (default)
[ 1.270000] Serial: 8250/16550 driver, 2 ports, IRQ sharing enabled
[ 1.280000] serial8250.0: ttyS0 at MMIO 0xf0000000 (irq = 48) is a 16550A
[ 1.285000] console [ttyS0] enabled, bootconsole disabled
[ 1.285000] console [ttyS0] enabled, bootconsole disabled
[ 1.295000] brd: module loaded
[ 1.300000] loop: module loaded
[ 1.305000] spi_flash: Force not to support Protect Mode
[ 1.315000] Creating 3 MTD partitions on "spi_flash":
[ 1.320000] 0x000000000000-0x000000005000 : "uboot"
[ 1.325000] 0x000000005000-0x00000000b000 : "uboot_env"
[ 1.335000] 0x00000000b000-0x000000010000 : "data"
[ 1.340000] spi_flash: SPI flash driver initialized successfully!
[ 1.345000] ruby_health loading
[ 1.350000] HBM pool: emac rx 0x0 to 0x8000, wmac rx 0x8000 to 0xa000
[ 1.745000] HBM meta: emac rx 0x63c040 to 0x6bc040, wmac rx 0x6bc080 to 0x6dc080
[ 1.750000] topaz_hbm_init_pool_list pool 0 pool_list 0x88000000 bus_range 0x16ec400 to 0x26ec400 sz 2048 count 8192
[ 1.750000] topaz_hbm_init_pool_list pool 1 pool_list 0x88008000 bus_range 0x26fc400 to 0x48fc400 sz 17408 count 2048
[ 1.750000] topaz_hbm_init_pool_list pool 3 pool_list 0x8800a000 bus_range 0x0 to 0x0 sz 0 count 4096
[ 1.755000] topaz_busmon_init success
[ 1.760000] topaz_temp_sens_init success
[ 1.765000] u32 classifier
[ 1.765000] input device check on
[ 1.770000] Actions configured
[ 1.775000] Netfilter messages via NETLINK v0.30.
[ 1.780000] nf_conntrack version 0.5.0 (537 buckets, 2148 max)
[ 1.785000] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 1.790000] TCP cubic registered
[ 1.795000] NET: Registered protocol family 10
[ 1.800000] NET: Registered protocol family 17
[ 1.805000] 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
[ 1.810000] All bugs added by David S. Miller <davem@redhat.com>
[ 1.820000] Freeing unused kernel memory: 17512k freed [8493a000] TO [85a54000]
[ 1.825000] Common mmap addr-space starts 2c0f0000
init started: BusyBox v1.10.3 (2021-12-27 16:54:17 CST)
starting pid 44, tty '': '/etc/init.d/rcS'
[ 2.215000] load_module: 'bootcfg' using DRAM (offset:0x85a10000, size:0x97e2)
/scripts/cmdloop starting /usr/sbin/ubusd, at 00:00:02 up 0 min, load average: 0.00, 0.00, 0.00
Starting portmap: done
Initializing random number generator... done.
/mnt/jffs2/wireless_conf.txt not found. Creating a default conf file
restore_wireless_conf
restore_wireless_conf: wifi_mode = default
restore_wireless_conf: Setting default wireless config params
restore_wireless_conf: board_id = 65535
restore_wireless_conf: board_name = FG824CD
restore_wireless_conf: Writing config params to /mnt/jffs2/wireless_conf.txt
Starting network...
[ 4.055000] load_module: 'rtl8367b' using DRAM (offset:0x85fc0000, size:0x32a73)
[ 4.060000] rtl8367b: module license 'unspecified' taints kernel.
[ 4.065000] Disabling lock debugging due to kernel taint
[ 4.115000] load_module: 'emaclib' using DRAM (offset:0x85f40000, size:0x5535)
[ 4.240000] load_module: 'switch_vlan' using DRAM (offset:0x85f74000, size:0x27e9), SRAM (offset:0x88016368, size:0x2)
[ 4.350000] load_module: 'switch_tqe' using DRAM (offset:0x85fb0000, size:0x428a), SRAM (offset:0x88016378, size:0x1b4c)
[ 4.405000] tqe_descs_alloc: 2048 tqe_rx_descriptors at kern uncached 0x580e1ee0 bus 0x80017ee0
[ 4.495000] load_module: 'fwt_if' using DRAM (offset:0x85fac000, size:0x1b07)
[ 4.535000] load_module: 'fwt_ctrl' using DRAM (offset:0x870c0000, size:0x23ada)
[ 4.595000] load_module: 'dpi' using DRAM (offset:0x85f82000, size:0x1db7)
[ 4.630000] load_module: 'switch_emac' using DRAM (offset:0x85f50000, size:0x2647), SRAM (offset:0x88011a40, size:0x2f8)
[ 4.695000] emac wbsp: 0
[ 4.700000] enable A2 (single)
[ 4.760000] Random stuff F0
emac0 is eth1_0, emac1 is unused
Stateless mode. Using temporary ip address:
/etc/init.d/S40network: line 189: sercomm: not found
Using IP address 1.1.1.2
Netmask is not set
[ 5.335000] emac_lib eth1_0: force link (1000/Full)
[ 5.525000] device eth1_0 entered promiscuous mode
[ 5.530000] br0: port 1(eth1_0) entering forwarding state
[ 5.535000] br0: port 1(eth1_0) entering forwarding state
/sbin/ifup -a
ifconfig: SIOCGIFFLAGS: No such device
Version of /proc/bootcfg/qtn_regulatory_db.bin is Regulatory db version: v37.4.0.60
Version of /etc/qtn_regulatory_db.bin is Regulatory db version: v37.4.0.240
Selected database version: Regulatory db version: v37.4.0.240
Using /etc/qtn_regulatory_db.bin
Starting qevt_server
Starting inetd ...
/etc/init.d/S42inetd: line 48: /usr/sbin/inetd: not found
/scripts/cmdloop starting /sbin/qevt_server, at 00:00:06 up 0 min, load average: 0.16, 0.03, 0.01
[ 6.340000] FWT: [48:3e:5e:14:36:e0] add entry, port:emac0 node:0 index:682 4addr:0 entries:1
[ 7.035000] load_module: 'hw_rev' using DRAM (offset:0x85f54000, size:0x379c)
Starting wireless...
restore_default_config -nr
restore_wireless_conf ap
restore_wireless_conf: wifi_mode = ap
restore_wireless_conf: Setting default wireless config params
restore_wireless_conf: board_id = 65535
restore_wireless_conf: board_name = FG824CD
restore_wireless_conf: Writing config params to /mnt/jffs2/wireless_conf.txt
restore_default_config: Updating security config files for mode ap
restore_default_config: Removing block ACK restrictions
restore_default_config: Configuration has been set to default values. Reboot after customizing to ensure correct operation.
complete
/scripts/cmdloop starting /sbin/qcsapi_rpcd, at 00:00:09 up 0 min, load average: 0.16, 0.03, 0.01
/scripts/cmdloop starting /sbin/call_qcsapi_rpcd, at 00:00:09 up 0 min, load average: 0.16, 0.03, 0.01
'monitor_temperature' is not enabled/set
[ 10.040000] FWT: [48:3e:5e:14:36:e5] add entry, port:emac0 node:0 index:793 4addr:0 entries:2
MAUI service started
DHCP client disabled
Starting httpd
cp: cannot stat '/etc/minihttpd.conf': No such file or directory
starting pid 778, tty '/dev/console': '/bin/sh -l'
BusyBox v1.10.3 (2021-12-27 16:54:17 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.
quantenna # Using IP address 1.1.1.2
Netmask is not set
ifconfig: bad address ''
Loading modules
[ 14.570000] load_module: 'qtn_debug' using DRAM (offset:0x85fa6000, size:0x387)
[ 14.700000] load_module: 'i2cbus' using DRAM (offset:0x85a22000, size:0x1cfe)
[ 14.865000] load_module: 'qtsens' using DRAM (offset:0x85f24000, size:0x7c6)
[ 15.015000] load_module: 'pm_interval' using DRAM (offset:0x87134000, size:0x1552)
[ 15.220000] load_module: 'wlan' using DRAM (offset:0x85800000, size:0xcd2b3)
[ 15.590000] wlan: 0.8.4.2 (0.9.3.3)
[ 15.660000] br0: no IPv6 routers present
[ 15.775000] load_module: 'auc_fw' using DRAM (offset:0x87456000, size:0x8df)
[ 15.885000] load_module: 'qvspmod' using DRAM (offset:0x87144000, size:0x3f65)
[ 15.910000] QVSP module init
[ 15.985000] load_module: 'qdrv' using DRAM (offset:0x85900000, size:0xaa0b1)
[ 16.440000] qdrv wbsp: 0
[ 16.595000] load_module: 'wlan_xauth' using DRAM (offset:0x85f49000, size:0x33f)
[ 16.770000] load_module: 'wlan_ccmp' using DRAM (offset:0x87136000, size:0x1792)
[ 16.965000] load_module: 'wlan_tkip' using DRAM (offset:0x87518000, size:0x2646)
Loading MuC driver (qtn_driver.qtn_ruby.0.bin)
no keyfile specified
unable to load Public Key
Waiting for Wireless Events from interfaces...
QCS API error 22: Invalid argument
[ 18.545000] set power_selection 4
[ 18.555000] qdrv_soc_publish_params: parames->tqe_sem_en 0, auc_tqe_sem_en 0
[ 18.560000] ..... Current RFIC Chip ID -- 4
[ 18.860000] AuC SRAM start 0x88040000 end 0x88080000 size 262144
[ 18.865000] AuC is configured for non-MU SRAM layout
[ 18.870000] AuC SRAM bank 0 start 0x88040000 end 0x88050000
[ 18.875000] AuC SRAM bank 1 start 0x88050000 end 0x88060000
[ 18.880000] AuC SRAM bank 2 start 0x88060000 end 0x88070000
[ 18.885000] AuC SRAM bank 3 start 0x88070000 end 0x88080000
[ 18.915000] MuC: g_tqe_sem_en 0
[ 18.915000] MuC: build date Wed, 12 May 2021 02:43:44 -0700
[ 18.920000] MuC: slow heap begin=0x002a3ae0 end=0x00420ae0
[ 18.925000] MuC: fast heap begin=0x80030800 end=0x80037000
[ 18.930000] MuC: stack start=0x8003ef80 sp=0x8003f6d4
[ 18.935000] MuC: calstate is 3 (prod), dcache on
[ 18.940000] MuC: RFIC version 1 rev 0
[ 18.975000] qdrv_mac_reserve_clear: mac reservation table cleared
[ 19.000000] qdrv_wlan_80211_updateslot: vap is NULL
[ 19.005000] QDRV: I2C dapter not found
[ 19.025000] MuC: bb_init: FEM 0x7 bw_mode 0 chan 0 11b 0 11a 1
[ 19.030000] MuC: set max/nrm gain(0x27) done.
[ 19.035000] MuC: set cca threshold!
[ 19.035000] MuC: rf_optimizing_rf_register_map, set rf to 0x75
[ 19.040000] MuC: os_uc, after bb_rf_complete_attach.
[ 19.045000] MuC: WMAC0: hal fd start=0xe5040300 count=48 size=108 end=0xe5041740
[ 19.050000] MuC: WMAC1: hal fd start=0xe5140d50 count=8 size=84 end=0xe5140ff0
[ 19.055000] MuC: freq 1 proj 1
[ 19.055000] MuC: dynamic one-bit autocorrelation enabled
[ 19.060000] MuC: QMAT SRAM base 0x80070000
[ 19.065000] MuC: enable IRQs
[ 19.195000] qdrv_mu_stat_init
[ 19.290000] MuC: AuC enabled 0xe5101cd4/0x60063840 il 0xe5101288/0xe510128c stats 0x60061180/0x600635800x6007e350
[ 19.295000] MuC: Update MU debug flag failed. keep old value : 0x00000000
[ 19.305000] QDRV: hardware is 4x4 11n/ac Data Only QD840
[ 19.310000] MuC boot succeeded 0.110 seconds
start-vap ap
[ 20.555000] load_module: 'wlan_scan_ap' using DRAM (offset:0x87148000, size:0x3e62)
[ 20.645000] QTM daemon registered
[ 20.775000] qdrv_wlan_80211_updateslot: vap is NULL
[ 20.780000] qvsp_nl_node_init: QVSP not initialized
[ 20.785000] MuC: qtn_mu_ndpa_setup: bw_cap 2 done
[ 20.800000] VAP create succeeded 0.010 seconds
[ 20.810000] MuC: qtn_mu_ndpa_setup: bw_cap 2 done
[ 21.350000] MuC: calibration ver 0x801
bss_tm set to 1
neigh_repo reset to 0
radar in 80MHZ mode
Setting mode to 11ac80
set_region: Setting regulatory region dev_name=wifi0 region=eu mode=ap repeater=0
radar start with[ 23.115000] DFS_s_radio: parameters updated, region: eu
regulatory eu
[ 23.120000] Send genl failed
[ 23.125000] MuC: macfw: radar_start.........
[ 23.130000] MuC: radar_start, region eu = 2
[ 23.215000] qdrv_radar_enable_action: ERROR - radar already enabled
ICAC: max_boot_cac is greater than 0, hence the parameter non_dfs_channel is ignored. To avoid doing initial CAC set max_boot_cac to 0.
dfs_s_radio 0 dfs 0 non-dfs 0 scan 0 auto-channel 0 channel 36
Configure max_boot_cac to 80
[ 24.240000] device wifi0 entered promiscuous mode
[ 24.360000] Enabling SSDP flooding
Beamforming enabled
[ 25.070000] Enabling SCS
[ 25.070000] Send genl failed
SCS enabled
QTM: load profile off
QTM enabled: 0
[ 26.145000] BRIDGE WLAN report flood-forwarding enabled
QCS API error 1010: Cannot contact security manager
No core dump generated
[ 27.925000] qdrv_radar_is_rdetection_required: ERROR - channel not yet set
[ 28.005000] Build name: v37.4.6.247
[ 28.010000] Build revision: 112760
[ 28.015000] Build type: SDK
[ 28.020000] Build timestamp: 1620813337
[ 28.025000] Platform ID: 432
[ 28.030000] Hardware ID: QD840
[ 28.030000] Hardware revision: bbic4_rev_a2
[ 28.035000] Band: 5GHz
[ 28.040000] Kernel version: 2.6.35
[ 28.045000] Calibration version: disabled
[ 28.050000] DC/IQ cal version: V8.1
[ 28.050000] Power cal version: V8.1
[ 28.055000] MuC firmware: qtn_driver.qtn_ruby.0.bin
[ 28.060000] DSP firmware: rdsp_driver.0.bin
[ 28.065000] AuC firmware: auc_driver.nomu.0.bin
[ 28.070000] MAC address 0: 48:3e:5e:14:36:e1
[ 28.075000] MAC address 1: 00:00:00:00:00:00
[ 28.080000] Recommended U-Boot: v37.4.0.227
Carrier ID 0, uboot update flag 0
complete
MU-MIMO is not supported on this device
Starting pktlogger daemon
Starting qrpe daemon...
qtna-rpe(9.0.0-f34af82-2) started
PTA request polarity set to 0
PTA grant polarity set to 0
PTA disabled
Backing up wireless_conf.txt...
radar start with regulatory eu
[ 36.365000] qdrv_radar_is_rdetection_required: ERROR - channel not yet set
[ 36.365000] qdrv_radar_enable_action: ERROR - radar already enabled
radar start with regulatory eu
[ 37.115000] qdrv_radar_is_rdetection_required: ERROR - channel not yet set
[ 37.115000] qdrv_radar_enable_action: ERROR - radar already enabled
radar start with regulatory eu
[ 37.705000] qdrv_radar_is_rdetection_required: ERROR - channel not yet set
[ 37.705000] qdrv_radar_enable_action: ERROR - radar already enabled
radar start with regulatory eu
[ 38.305000] qdrv_radar_is_rdetection_required: ERROR - channel not yet set
[ 38.305000] qdrv_radar_enable_action: ERROR - radar already enabled
radar start with regulatory eu
[ 38.905000] qdrv_radar_is_rdetection_required: ERROR - channel not yet set
[ 38.905000] qdrv_radar_enable_action: ERROR - radar already enabled
radar start with regulatory eu
[ 39.495000] qdrv_radar_is_rdetection_required: ERROR - channel not yet set
[ 39.495000] qdrv_radar_enable_action: ERROR - radar already enabled
radar start with regulatory eu
[ 40.075000] qdrv_radar_is_rdetection_required: ERROR - channel not yet set
[ 40.075000] qdrv_radar_enable_action: ERROR - radar already enabled
radar start with regulatory eu
[ 40.655000] qdrv_radar_is_rdetection_required: ERROR - channel not yet set
[ 40.655000] qdrv_radar_enable_action: ERROR - radar already enabled
radar start with regulatory eu
[ 41.245000] qdrv_radar_is_rdetection_required: ERROR - channel not yet set
[ 41.245000] qdrv_radar_enable_action: ERROR - radar already enabled
radar start with regulatory eu
[ 41.825000] qdrv_radar_is_rdetection_required: ERROR - channel not yet set
[ 41.825000] qdrv_radar_enable_action: ERROR - radar already enabled
radar start with regulatory eu
[ 42.405000] qdrv_radar_is_rdetection_required: ERROR - channel not yet set
[ 42.405000] qdrv_radar_enable_action: ERROR - radar already enabled
radar start with regulatory eu
[ 42.985000] qdrv_radar_is_rdetection_required: ERROR - channel not yet set
[ 42.985000] qdrv_radar_enable_action: ERROR - radar already enabled
[ 43.545000] ICAC: Aborted ICAC due to set channel request
start-prod: adding default "manufacturer=Quantenna" to /mnt/jffs2/hostapd.conf
start-prod: adding default "device_name=Reference Design" to /mnt/jffs2/hostapd.conf
start-prod: adding default "model_name=Topaz" to /mnt/jffs2/hostapd.conf
start-prod: adding default "model_number=QD840.432" to /mnt/jffs2/hostapd.conf
start-prod: adding default "serial_number=483E5E1436E1" to /mnt/jffs2/hostapd.conf
start-prod: adding default "friendly_name=UPnP Access Point" to /mnt/jffs2/hostapd.conf
start-prod: adding default "device_type=6-0050F204-1" to /mnt/jffs2/hostapd.conf
[ 45.425000] MuC: #RX data path optimal flag 0
[ 45.430000] MuC: rx_post_init: free 0 rxq 9 9 394 descr 0x8000f000/6592 cache 0x8002aee0/13184
[ 45.430000] MuC: auto cs is enabled
[ 45.465000] WPS: push button is not configured
[ 45.465000] br0: port 2(wifi0) entering forwarding state
[ 45.465000] br0: port 2(wifi0) entering forwarding state
[ 45.965000] qdrv_radar_is_rdetection_required: ERROR - channel not yet set
[ 48.935000] RADAR: CAC started for channel 100 (5500 MHz)
[ 50.120000] RADAR: CAC stopped for channel 100 (5500 MHz)
[ 53.645000] RADAR: CAC started for channel 100 (5500 MHz)
[ 53.705000] RADAR: CAC stopped for channel 100 (5500 MHz)
[ 55.570000] wifi0: no IPv6 routers present
[ 57.230000] RADAR: CAC started for channel 100 (5500 MHz)
[ 57.635000] RADAR: CAC stopped for channel 100 (5500 MHz)
[ 61.120000] RADAR: CAC started for channel 100 (5500 MHz)
I've yet to see a router with its debug pins disabled.
So this is the second one I fight against, a Xiaomi AX6 which self-bricked while updating stocks firmwares and the UART input was disabled by the boot loader (U-boot) using variables stored in the U-boot env partition. I also saw cases where you have to make some electrical work.
I will recheck but I think this bootloader is disabling a lot. And you can see the full log I posted. It's all I didn't cut nothing.
Thanks for the quick response.
