can you grab the board files from stock? (bdwlan.* files)
I donāt want to waste your time. If the modem isnāt working, I donāt think it makes sense to include the device at this stage. At the moment, I have a minimal build running with just the two LAN ports and PCIe enabled. My next step is to add mhi-pci-generic to the build and observe how it behaves. Thanks again for taking the time to look into this. Iāll report back if thereās any progress.
pci@80000000 -> SDX62 modem (0x17cb:0x0308)
pci@a0000000 -> QCN9000 WiFi (0x17cb:0x1104)
It seems I have found the init sequence and can communicate with the modem:
# mbimcli -d /dev/wwan0mbim0 --query-device-caps
[/dev/wwan0mbim0] Device capabilities retrieved:
Device type: 'embedded'
Cellular class: 'gsm'
Voice class: 'no-voice'
SIM class: 'removable'
Data class: 'umts, hsdpa, hsupa, lte, custom'
SMS caps: 'pdu-receive, pdu-send'
Ctrl caps: 'reg-manual'
Max sessions: '15'
Custom data class: '5G/TDS'
Device ID: 'XXXXXXXXXXXX'
Firmware info: 'unknown'
Hardware info: 'C10 X6E'
Have you got both ethernet ports working? You need to include the yt85xx phy driver in the build
Wifi should be easy once youāve extracted the BDF files. This is an interesting device as it comes with the 6G version of QCN9074.
Let me know if you need any help
I have both working, but:
- The two LEDs state for the internal phy is always on until a cable is connected.
- The MACs from ART are not populated with the dts.
- There is a problem with the modem pci connection. Commands sometimes don't work. (need to check the modem is not in constant restart, but that would be fast)
Warning ** [/dev/wwan0mbim0] error reading from the IOChannel: 'I/O error'
error: couldn't close device: Transaction timed out
My current test patch: google drive link
From the original dts, it seems gpio30 and 46 are used for the phy leds. You haven't defined them in your dts.
can you do a hexdump to confirm they're at the right offsets?
hexdump -C -n 128 /dev/mtd<insert nr of 0:ART partition>
The pcie slots are wrong in my patch pcie0<->pcie1.
The 2 MACs are at the start of the partition. The first byte seems to be set, but the rest is all 0.
It seems that the āIO errorā problem only occurs when mbimcli is used without the -p option. I can control the modem, connect to my provider, and obtain an IP address with mbimcli. However, I do not have a network interface and do not know how to set it up.
Edit:
The interface is mhi_hwip0. ModemManager can set it up, and everything looks fine in LuCI, but while the TX count increases, RX remains at 0/1. It seems to be a bug in the driver related to the PCIe ring buffer setup/usage.
Some progress:
- It is possible to flash the modem from OpenWrt.
- I can talk to the modem via the
mhi_swip0interface. This is currently not very useful, since the modem uses a local network on that interface to fetchupdate.zipfirmware files from OpenWrt. - The USB-C port is connected to the modem, I flashed it to support ADB access.
I donāt know whether it is possible to use mhi_hwip0 at all, or if mhi_swip0 must be repurposed instead.
This seems to be the modem config that works with the stock dts but not with the default "generic pci mhi OpenWrt" + modemmanager:
<!-- Configuration for Olympic -->
<listitem name = "olympic">
<data name="qmi_dpm_enabled" type="int"> 1 </data>
<data name="use_qmuxd" type="int"> 0 </data>
<data name="wda_data_format_enabled" type="int"> 1 </data>
<data name="dpm_retry_timeout" type="int"> 10000 </data>
<data name="tcp_ack_prio" type="int"> 1 </data>
<data name="qos_disabled" type="int"> 1 </data>
<data name="qos_via_idl" type="int"> 0 </data>
<data name="single_qmux_ch_enabled" type="int"> 1 </data>
<data name="single_qmux_ch_conn_id_str" type="string"> rmnet0 </data>
<data name="single_qmux_ch_name" type="string"> DATA5_CNTL </data>
<data name="rmnet_data_enabled" type="int"> 1 </data>
<data name="rtm_rmnet_data_enabled" type="int"> 1 </data>
<data name="dataformat_agg_dl_pkt" type="int"> 10 </data>
<data name="dataformat_agg_dl_size" type="int"> 8192 </data>
<data name="dataformat_agg_ul_pkt" type="int"> 0 </data>
<data name="dataformat_agg_ul_size" type="int"> 0 </data>
<data name="phys_net_dev" type="string"> rmnet_ipa0 </data>
<data name="dataformat_dl_data_aggregation_protocol" type="int"> 9 </data>
<data name="dataformat_ul_data_aggregation_protocol" type="int"> 9 </data>
<data name="dataformat_dl_gro_enabled" type="int"> 0 </data>
<data name="dataformat_ul_gso_enabled" type="int"> 0 </data>
<data name="rsc" type="int"> 0 </data>
<data name="rsb" type="int"> 0 </data>
<data name="low_latency_filters" type="int"> 0 </data>
<data name="set_net_dev_mtu_to_max_v4_v6" type="int"> 1 </data>
<data name="frag_low_mem" type="int"> 300000 </data>
<data name="frag_high_mem" type="int"> 400000 </data>
<data name="num_modems" type="int"> 2 </data>
<list name="modems_enabled">
<data type="int"> 1 </data> <!-- MODEM_MSM -->
<data type="int"> 0 </data> <!-- MODEM_MDM -->
</list>
<data name="control_ports_len" type="int"> 17 </data>
<list name="control_ports">
<data type="string"> rmnet_data0 </data>
<data type="string"> rmnet_data1 </data>
<data type="string"> rmnet_data2 </data>
<data type="string"> rmnet_data3 </data>
<data type="string"> rmnet_data4 </data>
<data type="string"> rmnet_data5 </data>
<data type="string"> rmnet_data6 </data>
<data type="string"> rmnet_data7 </data>
<data type="string"> rmnet_data8 </data>
<data type="string"> rmnet_data9 </data>
<data type="string"> rmnet_data10 </data>
<data type="string"> rmnet_data11 </data>
<data type="string"> rmnet_data12 </data>
<data type="string"> rmnet_data13 </data>
<data type="string"> rmnet_data14 </data>
<data type="string"> rmnet_data15 </data>
<data type="string"> rmnet_data16 </data>
</list>
<data name="data_ports_len" type="int"> 17 </data>
<list name="data_ports">
<data type="string"> rmnet_data0 </data>
<data type="string"> rmnet_data1 </data>
<data type="string"> rmnet_data2 </data>
<data type="string"> rmnet_data3 </data>
<data type="string"> rmnet_data4 </data>
<data type="string"> rmnet_data5 </data>
<data type="string"> rmnet_data6 </data>
<data type="string"> rmnet_data7 </data>
<data type="string"> rmnet_data8 </data>
<data type="string"> rmnet_data9 </data>
<data type="string"> rmnet_data10 </data>
<data type="string"> rmnet_data11 </data>
<data type="string"> rmnet_data12 </data>
<data type="string"> rmnet_data13 </data>
<data type="string"> rmnet_data14 </data>
<data type="string"> rmnet_data15 </data>
<data type="string"> rmnet_data16 </data>
</list>
<data name="ep_config_ext_ioctl_v2" type="int"> 1 </data>
<!--
Please note, the order of the egress/ingress EPs below are as they
will be populated and sent to HW, so please ensure that ordering of EP's
is deliverately chosen.
-->
<data name="egress_ep_configs_len" type="int"> 1 </data>
<list name="egress_ep_configs">
<!-- Egress Default -->
<list name="ep_config">
<data name="egress_ep_type" type="int"> 0 </data>
<data name="pipe_setup_success" type="int"> 1 </data>
<data name="cs_offload_en" type="int"> 1 </data>
<data name="agg_en" type="int"> 1 </data>
<data name="ulso_en" type="int"> 0 </data>
<data name="ipid_min_max_idx" type="int"> 0 </data>
<data name="int_modt" type="int"> 16 </data>
<data name="int_modc" type="int"> 20 </data>
</list>
</list>
<data name="ingress_ep_configs_len" type="int"> 1 </data>
<list name="ingress_ep_configs">
<!-- Ingress Default -->
<list name="ep_config">
<data name="ingress_ep_type" type="int"> 1 </data>
<data name="pipe_setup_success" type="int"> 1 </data>
<data name="cs_offload_en" type="int"> 1 </data>
<data name="buff_size" type="int"> 4096 </data>
<data name="agg_byte_limit" type="int"> 8192 </data>
<data name="agg_time_limit" type="int"> 500 </data>
<data name="agg_pkt_limit" type="int"> 63 </data>
<data name="int_modt" type="int"> 16 </data>
<data name="int_modc" type="int"> 20 </data>
</list>
</list>
<!-- Number of above data ports inited on bootup -->
<data name="static_fwd_links" type="int"> 6 </data>
</listitem>
Update: With the auto update feature in u-boot, it is possible to execute scripts without serial access.
to some extent ... you can use fw_setenv like
fw_setenv bootcmd "run my_custom_script; boot"
Note that for fw_setenv to work, you must have a config file with the mem location of the env variables. usually stored in /etc/fw_env.config
root@OpenWrt:~# cat /etc/fw_env.config
/dev/mtd6 0x0 0x40000 0x20000 2
also, this is done after first-boot, so it would likely require a 2 step approach.
There is no firmware upload in the stock frontend, it happens on the backend. But u-boot checks for an update server at startup with a simple protocol. You can get root with a funny method, though.
Edit: I have a server ready to boot itb.
Http ?
In that case, intercept the traffic and serve your own image ![]()
UDP, I have it ready. It requests a file name and then tftpboots an image with a script (for source addr).
There is no image, you can create one with whatever u-boot script you want. I tftpboot the real OpenWrt itb.
The "final" modem problem:
[04.03.2026, 19:08:58 UTC] daemon.info: ModemManager[4836]: hotplug: add network interface qmapmux0.0: event processed
[04.03.2026, 19:08:58 UTC] daemon.notice: [2254]: <msg> [modem0/bearer7] QMI IPv6 Settings:
[04.03.2026, 19:08:58 UTC] daemon.notice: [2254]: <msg> [modem0/bearer7] address: <IP>
[04.03.2026, 19:08:58 UTC] daemon.notice: [2254]: <msg> [modem0/bearer7] gateway: <IP>
[04.03.2026, 19:08:58 UTC] daemon.notice: [2254]: <msg> [modem0/bearer7] DNS #1: <IP>
[04.03.2026, 19:08:58 UTC] daemon.notice: [2254]: <msg> [modem0/bearer7] DNS #2: <IP>
[04.03.2026, 19:08:58 UTC] daemon.notice: [2254]: <msg> [modem0/bearer7] MTU: 1500
[04.03.2026, 19:08:58 UTC] daemon.notice: [2254]: <msg> [modem0] state changed (connecting -> connected)
[04.03.2026, 19:08:58 UTC] daemon.notice: [2254]: <msg> [modem0] simple connect state (10/10): all done
[04.03.2026, 19:08:58 UTC] daemon.notice: netifd: wwan (4671): successfully connected the modem at bearer /org/freedesktop/ModemManager1/Bearer/7
[04.03.2026, 19:08:58 UTC] daemon.notice: netifd: wwan (4671): signal refresh rate is not set
[04.03.2026, 19:08:58 UTC] daemon.notice: netifd: wwan (4671): network operator name: <provider>
[04.03.2026, 19:08:58 UTC] daemon.notice: netifd: wwan (4671): network operator MCCMNC: <number>
[04.03.2026, 19:08:58 UTC] daemon.notice: netifd: wwan (4671): registration type: home
[04.03.2026, 19:08:58 UTC] daemon.notice: netifd: wwan (4671): access technology: lte, 5gnr
[04.03.2026, 19:08:58 UTC] daemon.notice: netifd: wwan (4671): signal quality: 70%
[04.03.2026, 19:08:58 UTC] daemon.notice: netifd: wwan (4671): IPv4 connection setup required in interface wwan: static
[04.03.2026, 19:08:58 UTC] daemon.notice: netifd: wwan (4671): adding IPv4 address <IP>, netmask 255.255.255.248
[04.03.2026, 19:08:58 UTC] daemon.notice: netifd: wwan (4671): adding default IPv4 route via <IP>
[04.03.2026, 19:08:58 UTC] daemon.notice: netifd: wwan (4671): adding primary DNS at <IP>
[04.03.2026, 19:08:58 UTC] daemon.notice: netifd: wwan (4671): adding secondary DNS at <IP>
[04.03.2026, 19:08:58 UTC] daemon.notice: netifd: wwan (4671): Command failed: ubus call network.interface notify_proto { "action": 0, "ifname": "qmapmux0.0", "link-up": true, "keep": true, "ipaddr": [ { "ipaddr": "<IP>", "mask": "255.255.255.248" } ], "routes": [ { "target": "0.0.0.0", "netmask": "0", "gateway": "<IP>", "source": "<IP>" } ], "dns": [ "<IP>", "<IP>" ], "interface": "wwan" } (Unknown error)
qmapmux0.0 network interface is created due to multiplexing (qmapmux0.0@mhi_hwip0), but instead of setting the interface up, everything gets shut down because of this error.
I am following this thread with interest (I am trying to run OpenWrt on XUNISON Exigo D50 5G without much progress).
@Neon, could you publish your all files or upload them to GitHub? You are much further ahead than me, and the devices are similar, I think. Maybe it would point me in the direction of what I'm doing wrong, or what I'm missing that's preventing it from working properly.
Have you solved the problem of hardware-controlled LEDs with reverse logic?
I even have a problem with starting the modem correctly in pcie...
What do you need?
The key for this device is to change the setup of the modem itself. The modem here has an android system with a netmgr_config.xml.
I changed the config to (the interesting part only):
<!-- Configuration for Olympic -->
<listitem name = "olympic">
<data name="qmi_dpm_enabled" type="int"> 1 </data>
<data name="use_qmuxd" type="int"> 0 </data>
<data name="wda_data_format_enabled" type="int"> 1 </data>
<data name="dpm_retry_timeout" type="int"> 10000 </data>
<data name="tcp_ack_prio" type="int"> 1 </data>
<data name="qos_disabled" type="int"> 1 </data>
<data name="qos_via_idl" type="int"> 0 </data>
<data name="single_qmux_ch_enabled" type="int"> 1 </data>
<data name="single_qmux_ch_conn_id_str" type="string"> rmnet0 </data>
<data name="single_qmux_ch_name" type="string"> DATA5_CNTL </data>
<data name="rmnet_data_enabled" type="int"> 1 </data>
<data name="rtm_rmnet_data_enabled" type="int"> 1 </data>
<data name="dataformat_agg_dl_pkt" type="int"> 10 </data>
<data name="dataformat_agg_dl_size" type="int"> 8192 </data>
<data name="dataformat_agg_ul_pkt" type="int"> 0 </data>
<data name="dataformat_agg_ul_size" type="int"> 0 </data>
<data name="phys_net_dev" type="string"> rmnet_mhi0 </data> <!-- was: rmnet_ipa0 -->
<data name="dataformat_dl_data_aggregation_protocol" type="int"> 9 </data>
<data name="dataformat_ul_data_aggregation_protocol" type="int"> 9 </data>
<data name="dataformat_dl_gro_enabled" type="int"> 0 </data>
<data name="dataformat_ul_gso_enabled" type="int"> 0 </data>
<data name="rsc" type="int"> 0 </data>
<data name="rsb" type="int"> 0 </data>
<data name="low_latency_filters" type="int"> 0 </data>
<data name="set_net_dev_mtu_to_max_v4_v6" type="int"> 1 </data>
<data name="frag_low_mem" type="int"> 300000 </data>
<data name="frag_high_mem" type="int"> 400000 </data>
<data name="num_modems" type="int"> 2 </data>
<list name="modems_enabled">
<data type="int"> 1 </data> <!-- MODEM_MSM -->
<data type="int"> 0 </data> <!-- MODEM_MDM -->
</list>
<data name="control_ports_len" type="int"> 17 </data>
<list name="control_ports">
<data type="string"> rmnet_data0 </data>
<data type="string"> rmnet_data1 </data>
<data type="string"> rmnet_data2 </data>
<data type="string"> rmnet_data3 </data>
<data type="string"> rmnet_data4 </data>
<data type="string"> rmnet_data5 </data>
<data type="string"> rmnet_data6 </data>
<data type="string"> rmnet_data7 </data>
<data type="string"> rmnet_data8 </data>
<data type="string"> rmnet_data9 </data>
<data type="string"> rmnet_data10 </data>
<data type="string"> rmnet_data11 </data>
<data type="string"> rmnet_data12 </data>
<data type="string"> rmnet_data13 </data>
<data type="string"> rmnet_data14 </data>
<data type="string"> rmnet_data15 </data>
<data type="string"> rmnet_data16 </data>
</list>
<data name="data_ports_len" type="int"> 17 </data>
<list name="data_ports">
<data type="string"> rmnet_data0 </data>
<data type="string"> rmnet_data1 </data>
<data type="string"> rmnet_data2 </data>
<data type="string"> rmnet_data3 </data>
<data type="string"> rmnet_data4 </data>
<data type="string"> rmnet_data5 </data>
<data type="string"> rmnet_data6 </data>
<data type="string"> rmnet_data7 </data>
<data type="string"> rmnet_data8 </data>
<data type="string"> rmnet_data9 </data>
<data type="string"> rmnet_data10 </data>
<data type="string"> rmnet_data11 </data>
<data type="string"> rmnet_data12 </data>
<data type="string"> rmnet_data13 </data>
<data type="string"> rmnet_data14 </data>
<data type="string"> rmnet_data15 </data>
<data type="string"> rmnet_data16 </data>
</list>
<data name="ep_config_ext_ioctl_v2" type="int"> 0 </data> <!-- was: 1 -->
<!-- ep_configs removed entirely - not needed without IPA -->
<data name="static_fwd_links" type="int"> 6 </data>
</listitem>
If you do not have access to the modem, your options are limited. But your modem can be totally different. I do not have AT command access for example.
pci@80000000 -> SDX55 modem (0x17cb:0x0306)
pci@a0000000 -> QCN9000 WiFi (0x17cb:0x1104)
Modems are different, but perhaps the initial method of usage and startup will be at least similar.
At the moment, I don't have a modem on the pcie
root@Exigo_Hub:~# lspci
0000:00:00.0 PCI bridge: Qualcomm Device 1004
0001:01:00.0 Network controller: Qualcomm QCN6024/9024/9074 Wireless Network Adapter (rev 01)
0001:00:00.0 PCI bridge: Qualcomm Device 1004
where fork
root@Exigo_Hub:~# lspci
0000:00:00.0 PCI bridge: Qualcomm Device 1004
0000:01:00.0 Unassigned class [ff00]: Qualcomm Device 0306
0001:00:00.0 PCI bridge: Qualcomm Device 1004
0001:01:00.0 Network controller: Qualcomm QCN6024/9024/9074 Wireless Network Adapter (rev 01)
Starting kernel ...
Jumping to AARCH64 kernel via monitor
[ 0.000000] Booting Linux on physical CPU 0x0000000000 [0x51af8014]
[ 0.000000] Linux version 6.12.74 (rafal@rafal-VMware) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 14.3.0 r33269-89f57d48f9) 14.3.0, GNU ld (GNU Binutils) 2.44) #0 SMP Thu Mar 5 02:28:32 2026
[ 0.000000] Machine model: XUNISON Exigo Hub D50 5G
[ 0.000000] OF: reserved mem: 0x000000004a400000..0x000000004a7fffff (4096 KiB) nomap non-reusable tz_apps@4a400000
[ 0.000000] OF: reserved mem: 0x000000004a800000..0x000000004a9fffff (2048 KiB) nomap non-reusable bootloader@4a800000
[ 0.000000] OF: reserved mem: 0x000000004aa00000..0x000000004aafffff (1024 KiB) nomap non-reusable sbl@4aa00000
[ 0.000000] OF: reserved mem: 0x000000004ab00000..0x000000004abfffff (1024 KiB) nomap non-reusable smem@4ab00000
[ 0.000000] OF: reserved mem: 0x000000004ac00000..0x000000004adfffff (2048 KiB) nomap non-reusable tz@4ac00000
[ 0.000000] OF: reserved mem: 0x000000004b000000..0x000000004cafffff (27648 KiB) nomap non-reusable wcss@4b000000
[ 0.000000] Zone ranges:
[ 0.000000] DMA [mem 0x0000000040000000-0x000000005fffffff]
[ 0.000000] DMA32 empty
[ 0.000000] Normal empty
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000040000000-0x000000004a3fffff]
[ 0.000000] node 0: [mem 0x000000004a400000-0x000000004adfffff]
[ 0.000000] node 0: [mem 0x000000004ae00000-0x000000004affffff]
[ 0.000000] node 0: [mem 0x000000004b000000-0x000000004cafffff]
[ 0.000000] node 0: [mem 0x000000004cb00000-0x000000005fffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000005fffffff]
[ 0.000000] psci: probing for conduit method from DT.
[ 0.000000] psci: PSCIv1.0 detected in firmware.
[ 0.000000] psci: Using standard PSCI v0.2 function IDs
[ 0.000000] psci: MIGRATE_INFO_TYPE not supported.
[ 0.000000] psci: SMC Calling Convention v1.0
[ 0.000000] psci: OSI mode supported.
[ 0.000000] psci: [Firmware Bug]: failed to set PC mode: -1
[ 0.000000] percpu: Embedded 20 pages/cpu s43224 r8192 d30504 u81920
[ 0.000000] Detected VIPT I-cache on CPU0
[ 0.000000] CPU features: detected: Spectre-v4
[ 0.000000] alternatives: applying boot alternatives
[ 0.000000] Kernel command line: xu_whitelabel=XU xu_hwlbl=R5Q-D50-1G-DB4-EM console=ttyMSM0,115200n8 root=/dev/ubiblock0_1 swiotlb=1 coherent_pool=2M
[ 0.000000] Unknown kernel command line parameters "xu_whitelabel=XU xu_hwlbl=R5Q-D50-1G-DB4-EM", will be passed to user space.
[ 0.000000] Dentry cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[ 0.000000] Inode-cache hash table entries: 32768 (order: 6, 262144 bytes, linear)
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 131072
[ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[ 0.000000] software IO TLB: area num 2.
[ 0.000000] software IO TLB: SWIOTLB bounce buffer size roundup to 0MB
[ 0.000000] software IO TLB: mapped [mem 0x000000005f540000-0x000000005f5c0000] (0MB)
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[ 0.000000] rcu: Hierarchical RCU implementation.
[ 0.000000] rcu: RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
[ 0.000000] Tracing variant of Tasks RCU enabled.
[ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[ 0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
[ 0.000000] RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2.
[ 0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[ 0.000000] Root IRQ handler: gic_handle_irq
[ 0.000000] GICv2m: range[mem 0x0b00a000-0x0b00aff7], SPI[448:479]
[ 0.000000] GICv2m: range[mem 0x0b00b000-0x0b00bff7], SPI[480:511]
[ 0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[ 0.000000] arch_timer: cp15 and mmio timer(s) running at 24.00MHz (virt/virt).
[ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x588fe9dc0, max_idle_ns: 440795202592 ns
[ 0.000001] sched_clock: 56 bits at 24MHz, resolution 41ns, wraps every 4398046511097ns
[ 0.000128] Calibrating delay loop (skipped), value calculated using timer frequency.. 48.00 BogoMIPS (lpj=240000)
[ 0.000148] pid_max: default: 32768 minimum: 301
[ 0.005067] Mount-cache hash table entries: 1024 (order: 1, 8192 bytes, linear)
[ 0.005087] Mountpoint-cache hash table entries: 1024 (order: 1, 8192 bytes, linear)
[ 0.011367] rcu: Hierarchical SRCU implementation.
[ 0.011380] rcu: Max phase no-delay instances is 1000.
[ 0.011887] Timer migration: 1 hierarchy levels; 8 children per group; 1 crossnode level
[ 0.012484] smp: Bringing up secondary CPUs ...
[ 0.013531] Detected VIPT I-cache on CPU1
[ 0.013673] CPU1: Booted secondary processor 0x0000000001 [0x51af8014]
[ 0.013886] smp: Brought up 1 node, 2 CPUs
[ 0.013904] SMP: Total of 2 processors activated.
[ 0.013908] CPU: All CPU(s) started at EL1
[ 0.013914] CPU features: detected: 32-bit EL0 Support
[ 0.013920] CPU features: detected: CRC32 instructions
[ 0.013997] alternatives: applying system-wide alternatives
[ 0.014226] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[ 0.014513] Memory: 449656K/524288K available (8704K kernel code, 904K rwdata, 2784K rodata, 11200K init, 287K bss, 72788K reserved, 0K cma-reserved)
[ 0.021839] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.021873] futex hash table entries: 512 (order: 3, 32768 bytes, linear)
[ 0.022009] 26752 pages in range for non-PLT usage
[ 0.022017] 518272 pages in range for PLT usage
[ 0.024175] pinctrl core: initialized pinctrl subsystem
[ 0.026854] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[ 0.027905] DMA: preallocated 2048 KiB GFP_KERNEL pool for atomic allocations
[ 0.028230] DMA: preallocated 2048 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[ 0.028535] DMA: preallocated 2048 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[ 0.029098] thermal_sys: Registered thermal governor 'step_wise'
[ 0.029271] cpuidle: using governor menu
[ 0.029591] ASID allocator initialised with 65536 entries
[ 0.035327] /soc@0/phy@7e000: Fixed dependency cycle(s) with /soc@0/clock-controller@1800000
[ 0.035361] /soc@0/phy@86000: Fixed dependency cycle(s) with /soc@0/clock-controller@1800000
[ 0.035499] /soc@0/clock-controller@1800000: Fixed dependency cycle(s) with /soc@0/phy@7e000
[ 0.035514] /soc@0/clock-controller@1800000: Fixed dependency cycle(s) with /soc@0/phy@86000
[ 0.035616] /soc@0/interrupt-controller@b000000: Fixed dependency cycle(s) with /soc@0/interrupt-controller@b000000
[ 0.036186] /soc@0/phy@7e000: Fixed dependency cycle(s) with /soc@0/clock-controller@1800000
[ 0.036365] /soc@0/phy@86000: Fixed dependency cycle(s) with /soc@0/clock-controller@1800000
[ 0.039712] /soc@0/phy@86000: Fixed dependency cycle(s) with /soc@0/clock-controller@1800000
[ 0.039821] /soc@0/phy@7e000: Fixed dependency cycle(s) with /soc@0/clock-controller@1800000
[ 0.039990] /soc@0/clock-controller@1800000: Fixed dependency cycle(s) with /soc@0/phy@7e000
[ 0.040108] /soc@0/clock-controller@1800000: Fixed dependency cycle(s) with /soc@0/phy@86000
[ 0.077399] SCSI subsystem initialized
[ 0.077697] usbcore: registered new interface driver usbfs
[ 0.077811] usbcore: registered new interface driver hub
[ 0.077875] usbcore: registered new device driver usb
[ 0.078233] qcom_scm: convention: smc arm 64
[ 0.081121] clocksource: Switched to clocksource arch_sys_counter
[ 0.085279] NET: Registered PF_INET protocol family
[ 0.085559] IP idents hash table entries: 8192 (order: 4, 65536 bytes, linear)
[ 0.087749] tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 4096 bytes, linear)
[ 0.087786] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[ 0.087808] TCP established hash table entries: 4096 (order: 3, 32768 bytes, linear)
[ 0.087861] TCP bind hash table entries: 4096 (order: 5, 131072 bytes, linear)
[ 0.088041] TCP: Hash tables configured (established 4096 bind 4096)
[ 0.088650] MPTCP token hash table entries: 512 (order: 2, 12288 bytes, linear)
[ 0.088871] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[ 0.088905] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[ 0.089455] NET: Registered PF_UNIX/PF_LOCAL protocol family
[ 0.089542] PCI: CLS 0 bytes, default 64
[ 0.092701] workingset: timestamp_bits=46 max_order=17 bucket_order=0
[ 0.093396] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.093411] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.105170] qcom-m31usb-phy 5b000.phy: supply vdd not found, using dummy regulator
[ 0.111886] gpio-export modem: 2 gpio(s) exported
[ 0.123323] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[ 0.125218] msm_serial 78af000.serial: msm_serial: detected port #0
[ 0.125373] msm_serial 78af000.serial: uartclk = 1843199
[ 0.126092] 78af000.serial: ttyMSM0 at MMIO 0x78af000 (irq = 21, base_baud = 115199) is a MSM
[ 0.126231] msm_serial: console setup on port #0
[ 0.126298] printk: legacy console [ttyMSM0] enabled
[ 0.338335] qcom-pcie 80000000.pcie: host bridge /soc@0/pcie@80000000 ranges:
[ 0.342449] msm_serial: driver initialized
[ 0.353350] qcom-pcie 80000000.pcie: IO 0x0080200000..0x00802fffff -> 0x0000000000
[ 0.353401] qcom-pcie 80000000.pcie: MEM 0x0080300000..0x00902fffff -> 0x0080300000
[ 0.494881] qcom-pcie 80000000.pcie: iATU: unroll T, 8 ob, 8 ib, align 4K, limit 1024G
[ 0.682303] qcom-pcie a0000000.pcie: host bridge /soc@0/pcie@a0000000 ranges:
[ 0.998835] qcom-pcie a0000000.pcie: IO 0x00a0200000..0x00a02fffff -> 0x0000000000
[ 1.006061] qcom-pcie a0000000.pcie: MEM 0x00a0300000..0x00b02fffff -> 0x00a0300000
[ 1.025183] loop: module loaded
[ 1.031802] spi-nand spi0.0: ESMT SPI NAND was found.
[ 1.031865] spi-nand spi0.0: 128 MiB, block size: 128 KiB, page size: 2048, OOB size: 64
[ 1.152830] qcom-pcie a0000000.pcie: iATU: unroll T, 8 ob, 8 ib, align 4K, limit 1024G
[ 1.202629] 18 fixed-partitions partitions found on MTD device spi0.0
[ 1.202697] Creating 18 MTD partitions on "spi0.0":
[ 1.208075] 0x000000000000-0x000000080000 : "0:SBL1"
[ 1.215069] 0x000000080000-0x000000100000 : "0:MIBIB"
[ 1.219934] 0x000000100000-0x000000140000 : "0:BOOTCONFIG"
[ 1.224842] 0x000000140000-0x000000180000 : "0:BOOTCONFIG1"
[ 1.229823] 0x000000180000-0x000000280000 : "0:QSEE"
[ 1.237129] 0x000000280000-0x000000380000 : "0:QSEE_1"
[ 1.242366] 0x000000380000-0x0000003c0000 : "0:DEVCFG"
[ 1.245714] 0x0000003c0000-0x000000400000 : "0:DEVCFG_1"
[ 1.250555] 0x000000400000-0x000000440000 : "0:CDT"
[ 1.256076] 0x000000440000-0x000000480000 : "0:CDT_1"
[ 1.260600] 0x000000480000-0x000000500000 : "0:APPSBLENV"
[ 1.261270] qcom-pcie a0000000.pcie: PCIe Gen.2 x2 link up
[ 1.266172] 0x000000500000-0x000000640000 : "0:APPSBL"
[ 1.270112] qcom-pcie a0000000.pcie: PCI host bridge to bus 0000:00
[ 1.278202] 0x000000640000-0x000000780000 : "0:APPSBL_1"
[ 1.280228] pci_bus 0000:00: root bus resource [bus 00-ff]
[ 1.289360] 0x000000780000-0x000000880000 : "0:ART"
[ 1.291959] pci_bus 0000:00: root bus resource [io 0x100000-0x1fffff] (bus address [0x0000-0xfffff])
[ 1.291979] pci_bus 0000:00: root bus resource [mem 0xa0300000-0xb02fffff]
[ 1.292109] pci 0000:00:00.0: [17cb:1004] type 01 class 0x060400 PCIe Root Port
[ 1.302564] 0x000000880000-0x000000980000 : "0:XUCERT"
[ 1.311504] pci 0000:00:00.0: BAR 0 [mem 0x00000000-0x00000fff]
[ 1.321997] 0x000000980000-0x000000a00000 : "0:TRAINING"
[ 1.325428] pci 0000:00:00.0: PCI bridge to [bus 01-ff]
[ 1.333200] 0x000000a00000-0x000004400000 : "rootfs"
[ 1.336444] pci 0000:00:00.0: bridge window [io 0x100000-0x100fff]
[ 1.352107] pci 0000:00:00.0: bridge window [mem 0x00000000-0x000fffff]
[ 1.358429] pci 0000:00:00.0: bridge window [mem 0x00000000-0x000fffff 64bit pref]
[ 1.365285] pci 0000:00:00.0: PME# supported from D0 D3hot D3cold
[ 1.376807] pci 0000:01:00.0: [17cb:1104] type 00 class 0x028000 PCIe Endpoint
[ 1.379104] pci 0000:01:00.0: BAR 0 [mem 0x00000000-0x001fffff 64bit]
[ 1.386783] pci 0000:01:00.0: PME# supported from D0 D3hot D3cold
[ 1.392815] pci 0000:01:00.0: 8.000 Gb/s available PCIe bandwidth, limited by 5.0 GT/s PCIe x2 link at 0000:00:00.0 (capable of 15.752 Gb/s with 8.0 GT/s PCIe x2 link)
[ 1.399377] pci 0000:00:00.0: bridge window [mem 0xa0400000-0xa05fffff]: assigned
[ 1.413506] pci 0000:00:00.0: BAR 0 [mem 0xa0300000-0xa0300fff]: assigned
[ 1.421136] pci 0000:01:00.0: BAR 0 [mem 0xa0400000-0xa05fffff 64bit]: assigned
[ 1.427919] pci 0000:00:00.0: PCI bridge to [bus 01-ff]
[ 1.435019] pci 0000:00:00.0: bridge window [mem 0xa0400000-0xa05fffff]
[ 1.440201] pci_bus 0000:00: resource 4 [io 0x100000-0x1fffff]
[ 1.443557] mtd: setting mtd16 (rootfs) as root device
[ 1.447165] pci_bus 0000:00: resource 5 [mem 0xa0300000-0xb02fffff]
[ 1.454091] mtdsplit: no squashfs found in "rootfs"
[ 1.458077] pci_bus 0000:01: resource 1 [mem 0xa0400000-0xa05fffff]
[ 1.464315] 0x000004400000-0x000007e00000 : "rootfs_1"
[ 1.472564] pcieport 0000:00:00.0: PME: Signaling with IRQ 24
[ 1.481724] pcieport 0000:00:00.0: AER: enabled with IRQ 24
[ 1.691090] qcom-pcie 80000000.pcie: Phy link never came up
[ 1.691388] qcom-pcie 80000000.pcie: PCI host bridge to bus 0001:00
[ 1.695503] pci_bus 0001:00: root bus resource [bus 00-ff]
[ 1.701806] pci_bus 0001:00: root bus resource [io 0x0000-0xfffff]
[ 1.707295] pci_bus 0001:00: root bus resource [mem 0x80300000-0x902fffff]
[ 1.713651] pci 0001:00:00.0: [17cb:1004] type 01 class 0x060400 PCIe Root Port
[ 1.720443] pci 0001:00:00.0: BAR 0 [mem 0x00000000-0x00000fff]
[ 1.727681] pci 0001:00:00.0: PCI bridge to [bus 01-ff]
[ 1.733545] pci 0001:00:00.0: bridge window [io 0x0000-0x0fff]
[ 1.738716] pci 0001:00:00.0: bridge window [mem 0x00000000-0x000fffff]
[ 1.745034] pci 0001:00:00.0: bridge window [mem 0x00000000-0x000fffff 64bit pref]
[ 1.751896] pci 0001:00:00.0: PME# supported from D0 D3hot D3cold
[ 1.764303] pci 0001:00:00.0: BAR 0 [mem 0x80300000-0x80300fff]: assigned
[ 1.765562] pci 0001:00:00.0: PCI bridge to [bus 01-ff]
[ 1.772434] pci_bus 0001:00: resource 4 [io 0x0000-0xfffff]
[ 1.777350] pci_bus 0001:00: resource 5 [mem 0x80300000-0x902fffff]
[ 1.787636] pcieport 0001:00:00.0: PME: Signaling with IRQ 28
[ 1.790260] pcieport 0001:00:00.0: AER: enabled with IRQ 28
[ 1.810288] i2c_dev: i2c /dev entries driver
[ 1.815870] sdhci: Secure Digital Host Controller Interface driver
[ 1.815925] sdhci: Copyright(c) Pierre Ossman
[ 1.820974] sdhci-pltfm: SDHCI platform and OF driver helper
[ 1.829854] remoteproc remoteproc0: releasing q6wcss
[ 1.834531] NET: Registered PF_INET6 protocol family
[ 1.838892] Segment Routing with IPv6
[ 1.841257] In-situ OAM (IOAM) with IPv6
[ 1.844686] NET: Registered PF_PACKET protocol family
[ 1.849318] 8021q: 802.1Q VLAN Support v1.8
[ 1.909589] cpufreq: cpufreq_online: CPU0: Running at unlisted initial frequency: 799999 KHz, changing to: 1296000 KHz
[ 1.912717] remoteproc remoteproc0: q6wcss is available
[ 1.ÅÆ[ 1.931514] Freeing unused kernel memory: 11200K
[ 1.931617] Run /init as init process
[ 2.367164] init: Console is alive
[ 2.367508] init: - watchdog -
[ 2.386013] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[ 2.396180] button_hotplug: loading out-of-tree module taints kernel.
[ 2.396603] Button Hotplug driver version 0.4.1
[ 2.437749] ssdk_dt_parse_mac_mode[300]:INFO:mac mode1 doesn't exit!
[ 2.437795] ssdk_dt_parse_mac_mode[308]:INFO:mac mode2 doesn't exit!
[ 2.443366] ssdk_dt_parse_port_bmp[1064]:INFO:port_bmp doesn't exist!
[ 2.449528] ssdk_dt_parse_interrupt[942]:INFO:intr-gpio does not exist
[ 3.961104] ssdk_mp_reset_init[1311]:INFO:MP reset successfully!
[ 4.292108] _adpt_mp_uniphy_clk_output_ctrl_set[264]:INFO:uniphy will output clock as 25000000Hz
[ 4.292199] regi_init[2548]:INFO:Initializing SCOMPHY Done!!
[ 4.300163] regi_init[2574]:INFO:qca-ssdk module init succeeded!
[ 4.309015] nss-dp 39c00000.dp1 wan (uninitialized): nss_dp_gmac: Registering netdev wan(qcom-id:1) with GMAC, mac_base: 0xffffffc082310000
[ 4.381955] Qualcomm Atheros IPQ5018 internal PHY 88000.mdio-1:07: attached PHY driver (mii_bus:phy_addr=88000.mdio-1:07, irq=POLL)
[ 4.436218] nss-dp 39d00000.dp2 (unnamed net_device) (uninitialized): nss_dp_gmac: Registering netdev eth%d(qcom-id:2) with GMAC, mac_base: 0xffffffc082330000
[ 4.437251] Generic PHY fixed-0:00: attached PHY driver (mii_bus:phy_addr=fixed-0:00, irq=POLL)
[ 4.452025] **********************************************************
[ 4.457915] * NSS Data Plane driver
[ 4.464609] **********************************************************
[ 4.519330] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[ 4.519425] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 1
[ 4.524070] xhci-hcd xhci-hcd.1.auto: hcc params 0x0220fe65 hci version 0x110 quirks 0x0000808000000010
[ 4.531468] xhci-hcd xhci-hcd.1.auto: irq 43, io mem 0x08a00000
[ 4.540833] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[ 4.546620] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 2
[ 4.552168] xhci-hcd xhci-hcd.1.auto: Host supports USB 3.0 SuperSpeed
[ 4.560715] hub 1-0:1.0: USB hub found
[ 4.566424] hub 1-0:1.0: 1 port detected
[ 4.570996] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[ 4.575991] hub 2-0:1.0: USB hub found
[ 4.582750] hub 2-0:1.0: 1 port detected
[ 4.584990] qca8k 90000.mdio-1:11: configuring for fixed/sgmii link mode
[ 4.596301] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[ 4.598988] qca8k 90000.mdio-1:11: Link is Up - 1Gbps/Full - flow control off
[ 4.604615] init: - preinit -
[ 4.682104] qca8k 90000.mdio-1:11 lan3 (uninitialized): PHY [90000.mdio-1:00] driver [Qualcomm Atheros 8337 internal PHY] (irq=POLL)
[ 4.751938] qca8k 90000.mdio-1:11 lan2 (uninitialized): PHY [90000.mdio-1:01] driver [Qualcomm Atheros 8337 internal PHY] (irq=POLL)
[ 4.822002] qca8k 90000.mdio-1:11 lan1 (uninitialized): PHY [90000.mdio-1:02] driver [Qualcomm Atheros 8337 internal PHY] (irq=POLL)
[ 4.839571] nss-dp 39d00000.dp2 eth0: entered promiscuous mode
[ 4.839795] DSA: tree 0 setup
[ 4.851188] usb 1-1: new high-speed USB device number 2 using xhci-hcd
[ 6.811081] random: crng init done
Cannot parse config file '/etc/fw_env.config': No such file or directory
Failed to find NVMEM device
[ 7.008934] nss-dp 39d00000.dp2 eth0: PHY Link up speed: 1000
[ 7.009542] adpt_mp_port_netdev_change_notify[1186]:ERROR:netdev change notify with incorrect port 0
[ 7.013758] ssdk_dev_event[2313]:ERROR:netdev change notify failed
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[ 11.253159] nss-dp 39d00000.dp2 eth0: PHY Link is down
[ 11.259593] procd: - early -
[ 11.259794] procd: - watchdog -
[ 11.857618] procd: - watchdog -
[ 11.857962] procd: - ubus -
[ 12.016161] procd: - init -
Please press Enter to activate this console.
[ 12.334130] kmodloader: loading kernel modules from /etc/modules.d/*
[ 12.485767] urngd: v1.0.2 started.
[ 12.565128] usbcore: registered new interface driver cdc_wdm
[ 12.575336] usbcore: registered new interface driver qmi_wwan_q
[ 12.580478] Loading modules backported from Linux version v6.18.7-0-g5dfbc5357
[ 12.580522] Backport generated by backports.git c8a37ce
[ 12.642460] NET: Registered PF_QIPCRTR protocol family
[ 12.659890] usbcore: registered new interface driver usbserial_generic
[ 12.660160] usbserial: USB Serial support registered for generic
[ 12.775932] PPP generic driver version 2.4.2
[ 12.778509] NET: Registered PF_PPPOX protocol family
[ 12.798274] ath11k c000000.wifi: Multipd architecture - userpd: 1
[ 12.798902] ath11k c000000.wifi: ipq5018 hw1.0
[ 12.803522] ath11k c000000.wifi: FW memory mode: 1
[ 12.850239] remoteproc remoteproc0: powering up q6wcss
[ 12.850479] remoteproc remoteproc0: Booting fw image ath11k/IPQ5018/hw1.0/q6_fw.mdt, size 1052
[ 12.911567] remoteproc remoteproc0: remote processor q6wcss is now up
[ 12.917175] ath11k c000000.wifi: qmi fail to get qcom,m3-dump-addr, ignore m3 dump mem req
[ 12.918249] qcom-wcss-secure-pil cd00000.remoteproc: fatal error received: err_smem_ver.2.1:
[ 12.918249] QC Image Version : QC_IMAGE_VERSION_STRING=WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1
[ 12.918249] Image Variant : IMAGE_VARIANT_STRING=5018.wlanfw.evalQ
[ 12.918249] platform.c:738 Assertion 0 failed param0 :zero,param1 :zero,param2 :zero
[ 12.918249] Thread ID : 0x0000005d Thread name : wlan_platform Process ID : 0x00000001 Process name :wlan0
[ 12.918249]
[ 12.918249] Registers:
[ 12.918249] SP : 0x4b894da0
[ 12.918249] FP : 0x4b894dc8
[ 12.918249] PC : 0xb022cb50
[ 12.918249] SSR : 0x00000000
[ 12.918249] BADVA : 0x00000000
[ 12.918249] LR : 0xb021cc24
[ 12.918249]
[ 12.918249] StackDump
[ 12.918249] from:0x4b894da0
[ 12.918249] to: 0x4b895118:
[ 12.918249] 00a00000
[ 12.918249] 00000000
[ 12.918249] 00000000
[ 12.918249] 00000000
[ 12.918249] 4c400000
[ 12.918249] 00000000
[ 12.918249] 00000000
[ 12.918249] 00000000
[ 12.918249] 00200000
[ 12.918249] b03394a8
[ 12.918249] 4b894df0
[ 12.918249] 67d28f8d
[ 12.918249] b03395f8
[ 12.918249] b0338f20
[ 12.918249] 000004e8
[ 12.918249] 00000004
[ 12.918249] 00000003
[ 12.918249] 4b8969b0
[ 12.918249] 00000036
[ 12.918249] b03394a8
[ 12.918249] 4b894df8
[ 12.918249] 67d28c1d
[ 12.918249] 4b894f18
[ 12.918249] 67d1c6ed
[ 12.918249] 00000002
[ 12.918249] 00000000
[ 12.918249] 00000000
[ 12.918249] 00000000
[ 12.918249] 00000000
[ 12.918249] 00000000
[ 12.918249] 00000000
[ 12.918249] 00000000
[ 12.918249] 00000000
[ 12.918249] 00000000
[ 12.918249] 00000000
[ 12.918249] 00000000
[ 12.918249] 00000000
[ 12.918249] 00000000
[ 12.918249] 00000000
[ 12.918249] b027925c
[ 12.918249] 4b8968a0
[ 12.918249] 4b8969a0
[ 12.918249] b0299c60
[ 12.918249] 4b8968b0
[ 12.918249] 4b8969b0
[ 12.918249] 4b896700
[ 12.918249] 00000000
[ 12.918249] 000004
[ 12.920429] ath11k_pci 0000:01:00.0: BAR 0 [mem 0xa0400000-0xa05fffff 64bit]: assigned
[ 13.082272] remoteproc remoteproc0: crash detected in q6wcss: type fatal error
[ 13.104402] ath11k_pci 0000:01:00.0: enabling device (0000 -> 0002)
[ 13.120366] ath11k_pci 0000:01:00.0: MSI vectors: 16
[ 13.122050] remoteproc remoteproc0: handling crash #1 in q6wcss
[ 13.125743] ath11k_pci 0000:01:00.0: qcn9074 hw1.0
[ 13.130841] remoteproc remoteproc0: recovering q6wcss
[ 13.136523] ath11k_pci 0000:01:00.0: FW memory mode: 2
[ 13.154271] remoteproc remoteproc0: stopped remote processor q6wcss
[ 13.347901] mhi mhi0: Requested to power ON
[ 13.347984] mhi mhi0: Power on setup success
[ 13.461142] mhi mhi0: Wait for device to enter SBL or Mission mode
[ 13.540562] usbcore: registered new interface driver qcserial
[ 13.540789] usbserial: USB Serial support registered for Qualcomm USB modem
[ 13.546201] kmodloader: done loading kernel modules from /etc/modules.d/*
[ 13.560528] ath11k_pci 0000:01:00.0: chip_id 0x0 chip_family 0x0 board_id 0xff soc_id 0xffffffff
[ 13.560580] ath11k_pci 0000:01:00.0: fw_version 0x290b8862 fw_build_timestamp 2024-09-23 10:51 fw_build_id
[ 13.744708] ath11k_pci 0000:01:00.0: qmi failed to load CAL data file:cal-pci-0000:01:00.0.bin
[ 13.744889] ath11k_pci 0000:01:00.0: failed to load board data file: -12
[ 21.466826] mhi_init Quectel_Linux_PCIE_MHI_Driver_V1.3.8
[ 21.596596] nss-dp 39d00000.dp2 eth0: PHY Link up speed: 1000
[ 21.597676] br-lan: port 1(eth0) entered blocking state
[ 21.601491] br-lan: port 1(eth0) entered disabled state
[ 21.607552] nss-dp 39d00000.dp2 eth0: entered allmulticast mode
[ 21.618168] adpt_mp_port_netdev_change_notify[1186]:ERROR:netdev change notify with incorrect port 0
[ 21.618244] ssdk_dev_event[2313]:ERROR:netdev change notify failed
[ 21.644007] br-lan: port 1(eth0) entered blocking state
[ 21.644078] br-lan: port 1(eth0) entered forwarding state
[ 23.511249] ath11k c000000.wifi: failed to wait qmi memory request: -110
[ 23.511327] ath11k c000000.wifi: qmi failed to respond fw mem req: -110
BusyBox v1.37.0 (2026-01-02 17:07:02 UTC) built-in shell (ash)
_______ ________ __
| |.-----.-----.-----.| | | |.----.| |_
| - || _ | -__| || | | || _|| _|
|_______|| __|_____|__|__||________||__| |____|
|__| W I R E L E S S F R E E D O M
-----------------------------------------------------
OpenWrt SNAPSHOT, r33288-f45235cc7c
-----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
I am open to anything (files/commands) that will move me even a little bit in the right direction.