Alcatel HH41V
PCB Marking: bab1jx000dc2 (basically the same as HH40V just without telephone jack populated)
Flash: 25Q256JVEQ 32M
RAM: M14D1G1664A 128M
SoC: QCA9531-BL3A
Modem: MDM9207
Partial boot log (couldn't get it to boot with uart adapter connected):
U-Boot 1.1.4-g6ca0e911-dirty (Oct 25 2018 - 11:19:42)
ap147 - Honey Bee 2.0DRAM:
sri
Honey Bee 2.0
ath_ddr_initial_config(219): (16bit) ddr1 init
ath_sys_frequency: cpu 650 ddr 597 ahb 216
tap = 0x00000002
Tap (low, high) = (0x7, 0x25)
Tap values = (0x16, 0x16, 0x16, 0x16)
config goio start!
config goio end!
4 MB
Incomplete boot log(beginning is missing, couldn't get device to boot with uart connected, first i did power on, then connected uart as fast as i could. 115200baud):
delay 1s
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x205a100
Hit any key to stop autoboot: 0
run command saveenv!
Saving Environment to Flash...
Un-Protected 1 sectors
Erasing Flash...Erasing flash...
First 0x4 last 0x4 sector size 0x10000 4
Erased 1 sectors
Writing to Flash... write addr: 9f040000
done
Protected 1 sectors
jrd reset = 1, wps = 1
oem_updat_flag = 0x19852003
## Booting image at 9fe80000 ...
Image Name: MIPS OpenWrt Linux-3.3.8
Created: 2018-10-25 3:37:38 UTC
Image Type: MIPS Linux Multi-File Image (lzma compressed)
Data Size: 1116437 Bytes = 1.1 MB
Load Address: 80060000
Entry Point: 80060000
Contents:
Image 0: 1116429 Bytes = 1.1 MB
Verifying Checksum at 0x9fe80040 ...OK
Uncompressing Multi-File Image ... OK
Starting kernel ...
[ 0.000000] Linux version 3.3.8 (yunhua.zhao@TctSwd) (gcc version 4.6.3 20120 201 (prerelease) (Linaro GCC 4.6-2012.02) ) #1 Thu Oct 25 11:37:08 CST 2018
[ 0.000000] bootconsole [early0] enabled
[ 0.000000] CPU revision is: 00019374 (MIPS 24Kc)
[ 0.000000] SoC: Qualcomm Atheros QCA9531 rev 2
[ 0.000000] Clocks: CPU:650.000MHz, DDR:597.119MHz, AHB:216.666MHz, Ref:25.00 0MHz
[ 0.000000] Determined physical RAM map:
[ 0.000000] memory: 08000000 @ 00000000 (usable)
[ 0.000000] Initrd not found or empty - disabling initrd
[ 0.000000] Zone PFN ranges:
[ 0.000000] Normal 0x00000000 -> 0x00008000
[ 0.000000] Movable zone start PFN for each node
[ 0.000000] Early memory PFN ranges
[ 0.000000] 0: 0x00000000 -> 0x00008000
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pag es: 32512
[ 0.000000] Kernel command line: board=AP147 console=ttyS0,115200 mtdparts=s pi0.0:256k(u-boot),64k(u-boot-env),1024k(oem),13504k(rootfs),1472k(kernel),64k(a rt),14976k@0x150000(firmware) rootfstype=squashfs,jffs2 noinitrd crashkernel=10M @20M oops=panic
[ 0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[ 0.000000] Writing ErrCtl register=00000000
[ 0.000000] Readback ErrCtl register=00000000
[ 0.000000] Memory: 126084k/131072k available (2356k kernel code, 4988k reser ved, 641k data, 224k init, 0k highmem)
[ 0.000000] SLUB: Genslabs=9, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, No des=1
[ 0.000000] NR_IRQS:83
[ 0.000000] Calibrating delay loop... 432.53 BogoMIPS (lpj=2162688)
[ 0.060000] pid_max: default: 32768 minimum: 301
[ 0.060000] Mount-cache hash table entries: 512
[ 0.070000] Performance counters: mips/24K PMU enabled, 2 32-bit counters ava ilable to each CPU, irq 13
[ 0.080000] NET: Registered protocol family 16
[ 0.080000] gpiochip_add: registered GPIOs 0 to 17 on device: ath79
[ 0.090000] MIPS: machine is Qualcomm Atheros AP147 reference board
[ 0.090000] AP147 Reference Board Id is 255
[ 0.100000] ar724x-pci ar724x-pci.0: PCIe link is down
[ 0.100000] registering PCI controller with io_map_base unset
[ 0.110000]
[ 0.110000] WLAN firmware dump buffer allocation of 2097152 bytes @ address 0 x87a00000- SUCCESS !!!
[ 0.120000] ar71xx: invalid MDIO id 1
[ 0.520000] bio: create slab <bio-0> at 0
[ 0.530000] PCI host bridge to bus 0000:00
[ 0.530000] pci_bus 0000:00: root bus resource [mem 0x10000000-0x11ffffff]
[ 0.540000] pci_bus 0000:00: root bus resource [io 0x0000]
[ 0.540000] Switching to clocksource MIPS
[ 0.550000] NET: Registered protocol family 2
[ 0.550000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.550000] TCP established hash table entries: 4096 (order: 3, 32768 bytes)
[ 0.560000] TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
[ 0.560000] TCP: Hash tables configured (established 4096 bind 4096)
[ 0.570000] TCP reno registered
[ 0.570000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[ 0.580000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[ 0.580000] NET: Registered protocol family 1
[ 0.600000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.610000] JFFS2 version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY ) (c) 2001-2006 Red Hat, Inc.
[ 0.620000] msgmni has been set to 246
[ 0.620000] io scheduler noop registered
[ 0.620000] io scheduler deadline registered (default)
[ 0.630000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[ 0.650000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11) is a 16550A
[ 0.660000] console [ttyS0] enabled, bootconsole disabled
[ 0.660000] console [ttyS0] enabled, bootconsole disabled
[ 0.680000] m25p80 spi0.0: found w25q256, expected m25p80
[ 0.680000] m25p80 spi0.0: w25q256 (32768 Kbytes)
[ 0.690000] 7 cmdlinepart partitions found on MTD device spi0.0
[ 0.690000] Creating 7 MTD partitions on "spi0.0":
[ 0.700000] 0x000000000000-0x000000040000 : "u-boot"
[ 0.700000] 0x000000040000-0x000000050000 : "u-boot-env"
[ 0.710000] 0x000000050000-0x000000150000 : "oem"
[ 0.720000] 0x000000150000-0x000000e80000 : "rootfs"
[ 0.720000] mtd: partition "rootfs" set to be root filesystem
[ 0.730000] mtd: partition "rootfs_data" created automatically, ofs=BA0000, l en=2E0000
[ 0.740000] 0x000000ba0000-0x000000e80000 : "rootfs_data"
[ 0.740000] 0x000000e80000-0x000000ff0000 : "kernel"
[ 0.750000] 0x000000ff0000-0x000001000000 : "art"
[ 0.760000] 0x000000150000-0x000000ff0000 : "firmware"
[ 0.770000] ag71xx_module_init start
[ 0.770000] ag71xx_sgmii_procfs_init start
[ 0.790000] ag71xx_mdio: probed
[ 0.930000] ag71xx_mdio: probed
[ 0.930000] ag71xx_probe start
[ 0.940000] eth0: Atheros AG71xx at 0xb9000000, irq 4
[ 0.940000] ag71xx_hw_init start
[ 0.940000] ag71xx_hw_stop start
[ 1.500000] ag71xx_hw_setup start
[ 1.500000] ag71xx_dma_reset start
[ 1.510000] ag71xx_phy_connect start
[ 1.510000] dev_to_mii_bus start
[ 1.510000] dev_find_class start
[ 1.520000] ag71xx_phy_connect_multi start
[ 1.520000] ag71xx ag71xx.0: eth0: connected to PHY at ag71xx-mdio.1:04 [uid= 004dd042, driver=Generic PHY]
[ 1.530000] ag71xx_probe start
[ 1.540000] eth1: Atheros AG71xx at 0xba000000, irq 5
[ 1.540000] ag71xx_hw_init start
[ 1.540000] ag71xx_hw_stop start
[ 2.100000] ag71xx_hw_setup start
[ 2.100000] ag71xx_dma_reset start
[ 2.100000] ag71xx_phy_connect start
[ 2.110000] dev_to_mii_bus start
[ 2.110000] dev_find_class start
[ 2.120000] eth1: Found an AR934X built-in switch
[ 3.150000] TCP cubic registered
[ 3.150000] NET: Registered protocol family 17
[ 3.160000] Bridge firewalling registered
[ 3.160000] 8021q: 802.1Q VLAN Support v1.8
[ 3.170000] ### of_selftest(): No testcase data in device tree; not running t ests
[ 3.180000] VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
[ 3.190000] Freeing unused kernel memory: 224k freed
[ 5.040000] ag71xx_open start 1
[ 5.040000] ag71xx_rings_init start
[ 5.050000] ag71xx_ring_alloc start
[ 5.050000] ag71xx_ring_tx_init start
[ 5.060000] ag71xx_ring_alloc start
[ 5.060000] ag71xx_ring_rx_init start
[ 5.060000] ag71xx_phy_start start
[ 5.070000] ag71xx_hw_set_macaddr start
- preinit -
Press the [f] key and hit [enter] to enter failsafe mode
- regular preinit -
[ 8.450000] JFFS2 notice: (647) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 12 of xref (0 dead, 0 orphan) found.
switching to jffs2
- init -
[ 8.790000] ag71xx_stop start
[ 8.800000] ag71xx_phy_stop start
[ 8.800000] ag71xx_stop xx stop
[ 8.800000] ag71xx_hw_stop start
[ 8.800000] ag71xx_dma_reset start
[ 8.810000] ag71xx_rings_cleanup start
[ 8.820000] ag71xx_ring_rx_clean start
[ 8.820000] ag71xx_ring_free start
[ 8.820000] ag71xx_ring_tx_clean start
[ 8.830000] ag71xx_ring_free start
Please press Enter to activate this console. [ 9.930000] ssdk_plat_init start
[ 9.940000] chip_version:0x0
[ 9.940000] chip_version:0x2
[ 9.940000] Register QCA PHY driver
[ 9.950000] PHY ID is 0x4dd042
[ 10.000000] qca probe f2 phy driver succeeded!
[ 10.000000] qca-ssdk module init succeeded!
[ 10.180000] NET: Registered protocol family 10
[ 10.550000] SCSI subsystem initialized
[ 10.740000] usbcore: registered new interface driver usbfs
[ 10.750000] usbcore: registered new interface driver hub
[ 10.750000] usbcore: registered new device driver usb
[ 10.910000] Button Hotplug driver version 0.4.1
[ 11.190000] NTFS driver 2.1.30 [Flags: R/O MODULE].
[ 11.500000] PPP generic driver version 2.4.2
[ 11.530000] NET: Registered protocol family 24
[ 11.710000] bonding: Ethernet Channel Bonding Driver: v3.7.1 (April 27, 2011)
[ 11.920000] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 12.190000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[ 12.190000] ehci-platform ehci-platform.0: Generic Platform EHCI Controller
[ 12.200000] ehci-platform ehci-platform.0: new USB bus registered, assigned bus number 1
[ 12.240000] ehci-platform ehci-platform.0: irq 3, io mem 0x1b000000
[ 12.260000] ehci-platform ehci-platform.0: USB 2.0 started, EHCI 1.00
[ 12.260000] hub 1-0:1.0: USB hub found
[ 12.270000] hub 1-0:1.0: 1 port detected
[ 12.380000] nf_conntrack version 0.5.0 (1973 buckets, 7892 max)
[ 12.600000] usb 1-1: new high-speed USB device number 2 using ehci-platform
[ 13.050000] xt_time: kernel timezone is +0100
[ 13.720000] xt_IPMARK: Unknown symbol xtnu_unregister_targets (err 0)
[ 13.730000] xt_IPMARK: Unknown symbol xtnu_register_targets (err 0)
[ 13.810000] nf_conntrack_rtsp v0.6.21 loading
[ 13.820000] nf_nat_rtsp v0.6.21 loading
[ 13.890000] Ebtables v2.0 registered
[ 14.210000] ip6_tables: (C) 2000-2006 Netfilter Core Team
[ 14.630000] AR71XX_RESET_REG_WDOG_CTRL: 0x0
[ 14.630000]
[ 14.830000] Initializing USB Mass Storage driver...
[ 14.840000] scsi0 : usb-storage 1-1:1.5
[ 14.850000] usbcore: registered new interface driver usb-storage
[ 14.850000] USB Mass Storage support registered.
[ 14.930000] usbcore: registered new interface driver cdc_ether
[ 15.080000] rndis_host 1-1:1.0: usb0: register 'rndis_host' at usb-ehci-platform.0-1, RNDIS device, ba:34:bc:b2:57:f6
[ 15.090000] usbcore: registered new interface driver rndis_host
[ 15.190000] fuse init (API version 7.18)
[ 15.840000] scsi 0:0:0:0: Direct-Access ONETOUCH MobileBroadBand 2.31 PQ: 0 ANSI: 2
[ 15.860000] sd 0:0:0:0: [sda] 30720 2048-byte logical blocks: (62.9 MB/60.0 MiB)
[ 15.880000] sd 0:0:0:0: [sda] Write Protect is off
[ 15.890000] sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[ 15.900000] sd 0:0:0:0: [sda] 30720 2048-byte logical blocks: (62.9 MB/60.0 MiB)
[ 15.920000] sda:
[ 15.920000] sd 0:0:0:0: [sda] 30720 2048-byte logical blocks: (62.9 MB/60.0 MiB)
[ 15.930000] sd 0:0:0:0: [sda] Attached SCSI removable disk
[ 16.600000] mem_manager: module license 'unspecified' taints kernel.
[ 16.610000] Disabling lock debugging due to kernel taint
[ 16.620000] __mm_init_module
[ 16.850000] ath_dfs: Version 2.0.0
[ 16.850000] Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved
[ 16.880000] ath_spectral: Version 2.0.0
[ 16.880000] Copyright (c) 2005-2009 Atheros Communications, Inc. All Rights Reserved
[ 18.060000] ath_hal: 0.9.17.1 (AR5416, AR9380, REGOPS_FUNC, PRIVATE_DIAG, WRITE_EEPROM, 11D)
[ 18.090000] ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
[ 18.180000] ath_tx99: Version 2.0
[ 18.180000] Copyright (c) 2010 Atheros Communications, Inc, All Rights Reserved
[ 18.380000] ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
[ 18.420000] __ath_attach: Set global_scn[0]
[ 18.430000] *** All the minfree values should be <= ATH_TXBUF-32, otherwise default value will be used instead ***
[ 18.440000] ACBKMinfree = 48
[ 18.440000] ACBEMinfree = 32
[ 18.440000] ACVIMinfree = 16
[ 18.450000] ACVOMinfree = 0
[ 18.450000] CABMinfree = 48
[ 18.450000] UAPSDMinfree = 0
[ 18.450000] ATH_TXBUF=2700
[ 18.470000] Enterprise mode: 0x03fc0000
[ 18.470000] Restoring Cal data from FS
[ 18.470000] qdf_fs_read[59], Open File /tmp/wifi0.caldata SUCCESS!!file system magic:16914836super blocksize:4096inode 194file size:12064qdf_fs_read[79]: caldata data size mismatch, fsize=12064, cal_size=1088
[ 18.490000] ART Version : -48.0.0
[ 18.500000] SW Image Version : -48.0.0.0.0
[ 18.500000] Board Revision :
[ 18.500000] ar9300_attach: nf_2_nom -110 nf_2_max -60 nf_2_min -125
[ 18.510000] SPECTRAL : get_capability not registered
[ 18.520000] HAL_CAP_PHYDIAG : Capable
[ 18.520000] SPECTRAL : Need to fix the capablity check for RADAR (spectral_attach : 237)
[ 18.530000] SPECTRAL : get_capability not registered
[ 18.540000] HAL_CAP_RADAR : Capable
[ 18.540000] SPECTRAL : Need to fix the capablity check for SPECTRAL
[ 18.540000] (spectral_attach : 242)
[ 18.550000] SPECTRAL : get_capability not registered
[ 18.550000] HAL_CAP_SPECTRAL_SCAN : Capable
[ 18.560000] SPECTRAL : get_tsf64 not registered
[ 18.560000] spectral_init_netlink 78 NULL SKB
[ 18.570000] SPECTRAL : No ADVANCED SPECTRAL SUPPORT
[ 18.570000] SPECTRAL :----- module attached
[ 18.580000] Green-AP : Green-AP : Attached
[ 18.580000]
[ 18.590000] ath_get_caps[6156] rx chainmask mismatch actual 3 sc_chainmak 0
[ 18.600000] ath_get_caps[6131] tx chainmask mismatch actual 3 sc_chainmak 0
[ 18.610000] band steering initialized for direct attach hardware
[ 18.620000] ieee80211_bsteering_attach: Band steering initialized
[ 18.620000] acfg_attach: 2884: Netlink socket created:86161a00
[ 18.630000] ath_attach_dfs[12577] dfsdomain 1
[ 18.640000] dfs_attach: event log enabled by default
[ 18.650000] SPECTRAL : module already attached
[ 18.650000] ath_attach: Set global_ic[1]..gloabl_ic ptr:8632b150
[ 18.660000] osif_wrap_attach:441 osif wrap attached
[ 18.670000] osif_wrap_devt_init:402 osif wrap dev table init done
[ 18.670000] Wrap Attached: Wrap_com =86161200 ic->ic_wrap_com=86161200 &wrap_com->wc_devt=86161200
[ 18.690000] ath_tx_paprd_init sc 86128000 PAPRD disabled in HAL
[ 18.700000] wifi0: Atheros ???: mem=0xb8100000, irq=47
[ 18.700000] ath_da_pci: (Atheros/multi-bss)
[ 19.220000] ath_ol_pci: (Atheros/multi-bss)
[ 19.310000] __sa_init_module
No offload chipsets found.
qcawifi disable radio wifi0
[ 22.720000] ag71xx_open start 1
[ 22.720000] ag71xx_rings_init start
[ 22.730000] ag71xx_ring_alloc start
[ 22.730000] ag71xx_ring_tx_init start
[ 22.740000] ag71xx_ring_alloc start
[ 22.740000] ag71xx_ring_rx_init start
[ 22.740000] ag71xx_phy_start start
[ 23.780000] ag71xx_hw_set_macaddr start
[ 23.800000] ADDRCONF(NETDEV_UP): eth1: link is not ready
[ 23.910000] ag71xx_stop start
[ 23.910000] ag71xx_phy_stop start
[ 23.920000] ag71xx_stop xx stop
[ 23.920000] ag71xx_hw_stop start
[ 23.920000] ag71xx_dma_reset start
[ 23.930000] ag71xx_rings_cleanup start
[ 23.930000] ag71xx_ring_rx_clean start
[ 23.940000] ag71xx_ring_free start
[ 23.940000] ag71xx_ring_tx_clean start
[ 23.940000] ag71xx_ring_free start
[ 23.980000] ag71xx_open start 1
[ 23.980000] ag71xx_rings_init start
[ 23.980000] ag71xx_ring_alloc start
[ 23.990000] ag71xx_ring_tx_init start
[ 23.990000] ag71xx_ring_alloc start
[ 24.000000] ag71xx_ring_rx_init start
[ 24.000000] ag71xx_phy_start start
[ 24.500000] try to mount /dev/sda 1
[ 24.510000] mount -t vfat -o rw,sync /dev/sda /cache
[ 24.540000] mount /dev/sda on /cache successfully
[ 25.110000] ag71xx_hw_set_macaddr start
[ 25.110000] ADDRCONF(NETDEV_UP): eth1: link is not ready
[ 25.140000] device eth1 entered promiscuous mode
[ 25.140000] ADDRCONF(NETDEV_UP): br-lan: link is not ready
[ 25.480000] ag71xx_open start 1
[ 25.480000] ag71xx_rings_init start
[ 25.480000] ag71xx_ring_alloc start
[ 25.490000] ag71xx_ring_tx_init start
[ 25.490000] ag71xx_ring_alloc start
[ 25.490000] ag71xx_ring_rx_init start
[ 25.500000] ag71xx_phy_start start
[ 25.500000] ag71xx_hw_set_macaddr start
[ 25.550000] ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 26.300000] ag71xx_link_adjust adjust ... open:1, stop:1
[ 26.300000] ag71xx_fast_reset start
[ 26.300000] ag71xx_dma_reset start
[ 26.300000] ag71xx_hw_setup start
[ 26.300000] ag71xx_hw_set_macaddr start
[ 26.300000] ag71xx_hw_start start
[ 26.300000] ag71xx_speed_str start
[ 26.300000] eth1: link up (1000Mbps/Full duplex).
[ 26.300000] eth1: link up kobject_uevent.
[ 26.340000] br-lan: port 1(eth1) entered forwarding state
[ 26.340000] br-lan: port 1(eth1) entered forwarding state
[ 26.350000] ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready
[ 26.370000] ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[ 28.340000] br-lan: port 1(eth1) entered forwarding state
[ 36.240000] fast-classifier: starting up
[ 36.240000] fast-classifier: registered
[ 36.450000] oem_start
[ 36.460000] /jrd-resource/resource/jrdcfg/enable_telnet not exist
[ 36.570000] JFFS2 notice: (1695) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 40.470000] -----------------webs server start--------------
[ 41.590000] core_app start ... 0918_3
[ 41.590000]
[ 41.610000] -----------------webs server initdata end--------------
[ 41.850000] custom_info5
[ 41.850000]
[ 42.170000] jrd_led_thread_init
[ 42.170000] jrd_router init
[ 42.170000] jrd_oem_router_get_info
[ 42.180000] jrd_led_thread_func
[ 42.260000] jrd_oem_router_get_info end
[ 42.660000] Get wan mac addr:
[ 42.690000] e4:e1:30:7a:f0:70
[ 43.000000] try to get imei
[ 47.410000] jrd_router init thread start
[ 47.540000] jrd_wifi_dec_valid_wifiparam ok
[ 47.620000] Get wan mac addr:
[ 47.620000] e4:e1:30:7a:f0:70
[ 47.620000] jrd_netlink_set_routermacclone_init
[ 47.740000] jrd_wifi_config_database_config ok
[ 47.910000] router get links
[ 47.910000]
[ 48.360000] router cfg init end ...
[ 48.360000]
[ 48.370000] jrd_netlink_judgement start ...
[ 48.370000]
[ 48.700000] wifi process when startup
[ 48.870000] jrd_netlink_judgement timer:89
[ 49.030000] ACS channel is keeping
[ 49.070000] get 2GAPForceStatus:0,ret:0||status:0, Keep User settings, 1 Force OFF, 2 Force ON
[ 49.070000]
[ 49.200000] get nothing:
[ 50.110000] do nothing to eth0 ...
[ 50.110000]
qcawifi disable radio wifi0
[ 50.320000] jrd_netlink_judgement end
[ 50.320000]
qcawifi: enable radio wifi0
[ 50.800000] ath_net80211_dfs_clist_update: called, cmd=1, nollist= (null), nentries=0
[ 50.810000] ath_attach_dfs[12577] dfsdomain 1
[ 50.820000] dfs_attach: event log enabled by default
[ 50.980000] Disconnect_timeout value entered:10
[ 51.000000] reconfiguration_timeout value entered:60
[ 51.390000] wlan_vap_create : enter. devhandle=0x86130380, opmode=IEEE80211_M_HOSTAP, flags=0x1
[ 51.400000] ieee80211_mbo_vattach:MBO Initialized
[ 51.400000] ieee80211_oce_vattach: OCE Initialized
[ 51.410000] wlan_vap_create : exit. devhandle=0x86130380, vap=0x86fe0000, opmode=IEEE80211_M_HOSTAP, flags=0x1.
[ 51.420000] __ieee80211_smart_ant_init: Smart Antenna is not supported
[ 51.430000] VAP device ath0 created osifp: (85536b80) os_if: (86fe0000)
[ 51.480000] siwfreq
[ 51.480000] Set freq vap 0 stop send + 86fe0000
[ 51.480000] Set freq vap 0 stop send -86fe0000
[ 51.520000] Set wait done --86fe0000
[ 51.670000] Setting Max Stations:32
[ 51.690000]
[ 51.690000] DES SSID SET=
[ 51.710000] vap-0(ath0):set SIOC80211NWID, 21 characters
[ 51.710000]
[ 51.710000] DES SSID SET=My SSID
[ 53.430000] GETIMEI FAIL:client_send_sync_msg
[ 53.670000] ieee80211_ioctl_siwmode: imr.ifm_active=131712, new mode=3, valid=1
[ 53.700000] DEVICE IS DOWN ifname=ath0
[ 53.700000] DEVICE IS DOWN ifname=ath0
[ 54.140000] jrd_sys_thread start
[ 54.270000] modem sys start indication received
[ 54.510000] Warning: node not in table 0x85f76000
[ 54.530000] /cache is ok
[ 54.530000]
[ 54.670000] 8021q: adding VLAN 0 to HW filter on device ath0
[ 54.690000] LAN_STATUS
[ 54.690000]
[ 54.750000] device ath0 entered promiscuous mode
[ 54.760000] br-lan: port 2(ath0) entered forwarding state
[ 54.760000] br-lan: port 2(ath0) entered forwarding state
[ 54.980000] jrd_oem_socket_monitor_thread start
[ 55.100000] wifi is starting, please wait
[ 56.280000] jrd del_connect_redirect_rules lan:0 dial:0 config:1 0
[ 56.760000] br-lan: port 2(ath0) entered forwarding state
[ 57.440000] mlme_create_infra_bss : Overriding HT40 channel with HT20 channel
[ 57.510000] __ieee80211_smart_ant_init: Smart Antenna is not supported
[ 58.220000] jrd_save_dmesg
I gained access to root console via uart. Started dropbear and logged in. I did full mtd backup but it contains some personal settings(ssid, password):
root@hh41:/tmp/backup# cat /proc/mtd
dev: size erasesize name
mtd0: 00040000 00010000 "u-boot"
mtd1: 00010000 00010000 "u-boot-env"
mtd2: 00100000 00010000 "oem"
mtd3: 00d30000 00010000 "rootfs"
mtd4: 002e0000 00010000 "rootfs_data"
mtd5: 00170000 00010000 "kernel"
mtd6: 00010000 00010000 "art"
mtd7: 00ea0000 00010000 "firmware"
root@hh41:/tmp/backup# dd if=/dev/mtd0 of=/tmp/backup/uboot.backup
512+0 records in
512+0 records out
root@hh41:/tmp/backup# dd if=/dev/mtd1 of=/tmp/backup/ubootenv.backup
128+0 records in
128+0 records out
root@hh41:/tmp/backup# dd if=/dev/mtd2 of=/tmp/backup/oem.backup
2048+0 records in
2048+0 records out
root@hh41:/tmp/backup# dd if=/dev/mtd3 of=/tmp/backup/rootfs.backup
27008+0 records in
27008+0 records out
root@hh41:/tmp/backup# dd if=/dev/mtd4 of=/tmp/backup/rootfsdata.backup
5888+0 records in
5888+0 records out
root@hh41:/tmp/backup# dd if=/dev/mtd5 of=/tmp/backup/kernel.backup
2944+0 records in
2944+0 records out
root@hh41:/tmp/backup# dd if=/dev/mtd6 of=/tmp/backup/art.backup
128+0 records in
128+0 records out
root@hh41:/tmp/backup# dd if=/dev/mtd7 of=/tmp/backup/firmware.backup
29952+0 records in
29952+0 records out
root@hh41:/tmp/backup# ls
art.backup firmware.backup kernel.backup oem.backup rootfs.backup rootfsdata.backup uboot.backup ubootenv.backup
Rootfs and rootfsdata and firmware contain private settings afaik, what can I do to delete them and upload it for you guys?
Stock OPKG List:
root@hh41:/tmp/backup# opkg list
6relayd - 2013-10-21.1-2013-10-21.1
base-files - 117-unknown
bridge - 1.5-1
busybox - 1.19.4-6
common - 2016-11-18
config-manager - 1.0-1
core-api - 1.0-1
core-app - 1.0-1
ddns-scripts - 1.0.0-21
dnsmasq-dhcpv6 - 2.73-1
dropbear - 2011.54-2
easycwmp - 1.5.0
ebtables - 2.0.10-4-1
ebtables-utils - 2.0.10-4-1
fdisk - 2.21.2-1
firewall - 2-55.1
fota - 1.0-1
getopt - 2.21.2-1
hal - 1.0-1
hotplug2 - 1.0-beta-4
ip - 3.3.0-1
iptables - 1.4.10-4
iptables-mod-conntrack-extra - 1.4.10-4
iptables-mod-extra - 1.4.10-4
iptables-mod-filter - 1.4.10-4
iptables-mod-ipopt - 1.4.10-4
iptables-mod-nat-extra - 1.4.10-4
iwinfo - 36
jshn - 2013-07-04-11e8afea0f7eb34f8c23a8e589ee659c46f3f8aa
jsonc - 1.0-1
kernel - 3.3.8-1-0b5604c387af8cff9dd515169f1ff7f3
kmod-art2 - 3.3.8+CS10.2v4.9.436-1
kmod-bonding - 3.3.8-1
kmod-button-hotplug - 3.3.8-3
kmod-ebtables - 3.3.8-1
kmod-ebtables-ipv4 - 3.3.8-1
kmod-ebtables-ipv6 - 3.3.8-1
kmod-fast-classifier - 3.3.8+g6ca0e91-dirty-1
kmod-fs-ext4 - 3.3.8-1
kmod-fs-msdos - 3.3.8-1
kmod-fs-ntfs - 3.3.8-1
kmod-fs-vfat - 3.3.8-1
kmod-fuse - 3.3.8-1
kmod-gpio-button-hotplug - 3.3.8-1
kmod-ifb - 3.3.8-1
kmod-ip6tables - 3.3.8-1
kmod-ipt-conntrack - 3.3.8-1
kmod-ipt-conntrack-extra - 3.3.8-1
kmod-ipt-core - 3.3.8-1
kmod-ipt-extra - 3.3.8-1
kmod-ipt-filter - 3.3.8-1
kmod-ipt-ipmark - 3.3.8+1.42-3.1
kmod-ipt-ipopt - 3.3.8-1
kmod-ipt-nat - 3.3.8-1
kmod-ipt-nat-extra - 3.3.8-1
kmod-ipt-nathelper - 3.3.8-1
kmod-ipt-nathelper-extra - 3.3.8-1
kmod-ipt-nathelper-rtsp - 3.3.8+1.42-3.1
kmod-ipt-u32 - 3.3.8-1
kmod-ipv6 - 3.3.8-1
kmod-leds-gpio - 3.3.8-1
kmod-ledtrig-default-on - 3.3.8-1
kmod-ledtrig-netdev - 3.3.8-1
kmod-ledtrig-timer - 3.3.8-1
kmod-lib-crc-ccitt - 3.3.8-1
kmod-lib-crc16 - 3.3.8-1
kmod-lib-textsearch - 3.3.8-1
kmod-nls-base - 3.3.8-1
kmod-nls-cp437 - 3.3.8-1
kmod-nls-iso8859-1 - 3.3.8-1
kmod-ppp - 3.3.8-1
kmod-pppoe - 3.3.8-1
kmod-pppox - 3.3.8-1
kmod-qca-ssdk-nohnat - 3.3.8+g6ca0e91-dirty-1
kmod-qca-wifi-10.4-unified-perf - 3.3.8+g6ca0e91-dirty-1
kmod-sched - 3.3.8-1
kmod-sched-connmark - 3.3.8-1
kmod-sched-core - 3.3.8-1
kmod-scsi-core - 3.3.8-1
kmod-shortcut-fe - 3.3.8+g6ca0e91-dirty-1
kmod-usb-core - 3.3.8-1
kmod-usb-net - 3.3.8-1
kmod-usb-net-cdc-ether - 3.3.8-1
kmod-usb-net-rndis - 3.3.8-1
kmod-usb-storage - 3.3.8-1
kmod-usb2 - 3.3.8-1
kmod-wdt-ath79 - 3.3.8-1
libblobmsg-json - 2013-07-04-11e8afea0f7eb34f8c23a8e589ee659c46f3f8aa
libc - 0.9.33.2-1
libcurl - 7.29.0-1
libdaemon - 0.14-2
libgcc - 4.6-linaro-1
libip4tc - 1.4.10-4
libip6tc - 1.4.10-4
libiwinfo - 36
libjson - 0.11-2
libjson-c - 0.11-2
liblua - 5.1.4-8
libmicroxml - 2015-03-18-caa8d3e6887f5c70e54df555dd78e4e45cfa74cc
libnfnetlink - 1.0.0-2
libnl - 3.2.21-1
libnl-tiny - 0.1-3
libopenssl - 1.0.1h-1
libpthread - 0.9.33.2-1
librt - 0.9.33.2-1
libsqlite3 - 3071201-1
libstdcpp - 4.6-linaro-1
libubox - 2013-07-04-11e8afea0f7eb34f8c23a8e589ee659c46f3f8aa
libubus - 2013-01-13-bf566871bd6a633e4504c60c6fc55b2a97305a50
libuci - g424292.1-1
libuuid - 2.21.2-1
libxtables - 1.4.10-4
mcproxy - 1.1.0.y-1
miniupnpd - 1.8.20130426-1
mtd - 18.1
mtd-utils - 1.4.5-1
netifd - 2013-05-13-bc4a4bb127622c76085ecec7fd20448aad7bafaf
ntfs-3g - 2011.4.12-1-fuseint
openssl-util - 1.0.1h-1
opkg - 618-5
ppp - 2.4.5-8
ppp-mod-pppoe - 2.4.5-8
qca-acfg-10.4 - g6ca0e91-dirty-1
qca-hostap-10.4 - g6ca0e91-dirty-1
qca-hostapd-cli-10.4 - g6ca0e91-dirty-1
qca-iface-mgr-10.4 - g6ca0e91-dirty-1
qca-legacy-uboot-ap147-16M - g6ca0e91-dirty-1
qca-spectral-10.4 - g6ca0e91-dirty-1
qca-ssdk-shell - g6ca0e91-dirty-1
qca-wifi-fw-hw10-10.4-asic - WLAN.BL.3.4-00071-S-1-1
qca-wifi-fw-hw3-10.4-asic - CNSS.PS.2.4-00011-S-1-1
qca-wifi-fw-hw6-10.4-asic - CNSS.PS.2.4-00011-S-1-1
qca-wpa-cli-10.4 - g6ca0e91-dirty-1
qca-wpa-supplicant-10.4 - g6ca0e91-dirty-1
qca-wpc-10.4 - g6ca0e91-dirty-1
qca-wrapd-10.4 - g6ca0e91-dirty-1
qcmbr-10.4 - g6ca0e91-dirty-1
qos-scripts - 1.2.1-6
quagga - 0.99.21-6
quagga-libzebra - 0.99.21-6
quagga-ripd - 0.99.21-6
quagga-watchquagga - 0.99.21-6
radvd - 1.9.1-2
rp-pppoe-relay - 3.10-2
send-data - 1.0-1
shflags - 1.0.4-191
sock-client - 1.0-1
sqlite3-cli - 3071201-1
sqlite3-db - 1.0-1
sshpass - 1.0-1
swconfig - 10
tc - 3.3.0-1
timer - 1.0-1
uboot-envtools - 2013.10-3
ubus - 2013-01-13-bf566871bd6a633e4504c60c6fc55b2a97305a50
ubusd - 2013-01-13-bf566871bd6a633e4504c60c6fc55b2a97305a50
uci - g424292.1-1
unzip - 5.52-1
webs - 2013-09-03-1
wget - 1.13.4-1
wide-dhcpv6-client - 20080615-11
wireless-tools - 29-5
xmllib - 1.0-1
zlib - 1.2.7-1
In the end I installed fw for HH40V on HH41V. I did not do any tests, I'm writing this just after successful openwrt boot on HH41V. I have set some basic network config via uart and accessed luci via LAN1 port.
Orange led for LAN1 is stuck on.
Bboot log from HH40V openwrt image running on HH41V will be in reply because it can't all fit in one post.
In Network->Interfaces->Devices:
- eth1 is lan1
- eth0 is lan2/wan
- usb0 is modem
Both ethernet interfaces report as "connected" but in reality only eth1 is conencted.
I wanted to desolder cans on bottom and next to SoC to see other chips but gave up and decided to try HH40V openwrt image.
Here are some hardware pics:
