I am not able to reply to topic - UF896 - Qualcomm MSM8916 LTE router ~384MiB RAM/2.4GiB flash, Android: OpenWrt? as my user is new and limited to 3 replies. Someone was asking for HUMF02-V05 stock firmware that is uploaded here. @Mods feel free to merge this topic with the another one if you'd like.
I couldn't flash OpenWRT and it has never worked for me. I wish there was better documentation and support around this....
D:\UFI-Dongle-FW\OpenWrt_UFI103S>flash.bat
OpenStick Bootloader
please make sure your device in fastboot mode
Press any key to continue . . .
Erasing 'boot' FAILED (remote: 'unknown command')
fastboot: error: Command failed
Warning: skip copying boot image avb footer (boot partition size: 0, boot image size: 342032).
Sending 'boot' (334 KB) OKAY [ 0.010s]
Writing 'boot' FAILED (remote: 'unknown command')
fastboot: error: Command failed
Rebooting OKAY [ 0.010s]
Finished. Total time: 0.010s
when detected a fastboot device
Press any key to continue . . .
FAILED (remote: 'unknown command')
fastboot: error: Command failed
FAILED (remote: 'unknown command')
fastboot: error: Command failed
FAILED (remote: 'unknown command')
fastboot: error: Command failed
FAILED (remote: 'unknown command')
fastboot: error: Command failed
Erasing 'lk2nd' FAILED (remote: 'unknown command')
fastboot: error: Command failed
Erasing 'boot' FAILED (remote: 'unknown command')
fastboot: error: Command failed
Rebooting into bootloader OKAY [ 0.005s]
Finished. Total time: 0.010s
when detected a fastboot device
Press any key to continue . . .
Sending 'partition' (33 KB) OKAY [ 0.010s]
Writing 'partition' FAILED (remote: 'unknown command')
fastboot: error: Command failed
Sending 'hyp' (12 KB) OKAY [ 0.000s]
Writing 'hyp' FAILED (remote: 'unknown command')
fastboot: error: Command failed
Sending 'rpm' (512 KB) OKAY [ 0.015s]
Writing 'rpm' FAILED (remote: 'unknown command')
fastboot: error: Command failed
Sending 'sbl1' (512 KB) OKAY [ 0.020s]
Writing 'sbl1' FAILED (remote: 'unknown command')
fastboot: error: Command failed
Sending 'tz' (591 KB) OKAY [ 0.020s]
Writing 'tz' FAILED (remote: 'unknown command')
fastboot: error: Command failed
Sending 'fsc' (1 KB) OKAY [ 0.000s]
Writing 'fsc' FAILED (remote: 'unknown command')
fastboot: error: Command failed
Sending 'fsg' (2048 KB) OKAY [ 0.070s]
Writing 'fsg' FAILED (remote: 'unknown command')
fastboot: error: Command failed
Sending 'modemst1' (2048 KB) OKAY [ 0.070s]
Writing 'modemst1' FAILED (remote: 'unknown command')
fastboot: error: Command failed
Sending 'modemst2' (2048 KB) OKAY [ 0.063s]
Writing 'modemst2' FAILED (remote: 'unknown command')
fastboot: error: Command failed
Sending 'aboot' (280 KB) OKAY [ 0.020s]
Writing 'aboot' FAILED (remote: 'unknown command')
fastboot: error: Command failed
Sending 'cdt' (0 KB) OKAY [ 0.010s]
Writing 'cdt' FAILED (remote: 'unknown command')
fastboot: error: Command failed
Erasing 'boot' FAILED (remote: 'unknown command')
fastboot: error: Command failed
Erasing 'rootfs' FAILED (remote: 'unknown command')
fastboot: error: Command failed
Rebooting OKAY [ 0.005s]
Finished. Total time: 0.005s
flashing debian!
when detected a fastboot device
Press any key to continue . . .
Warning: skip copying boot image avb footer (boot partition size: 0, boot image size: 5567274).
Sending 'boot' (5436 KB) OKAY [ 0.175s]
Writing 'boot' FAILED (remote: 'unknown command')
fastboot: error: Command failed
Sending sparse 'rootfs' 1/3 (202988 KB) OKAY [ 6.880s]
Writing 'rootfs' FAILED (remote: 'unknown command')
fastboot: error: Command failed
Rebooting OKAY [ 0.009s]
Finished. Total time: 0.009s
all done!!
Press any key to continue . . .
Here is the full dump for the stock firmware of HUMF02-V05, hope it helps someone.
Try to flash boot with edl, somehow for me it works out better than fastboot. Before running start.sh, do this:
edl e boot
edl w aboot aboot.bin
To get into EDL mode, plug the dongle in while holding the reset button.
I couldn't flash OpenWrt on HMUF02 yet, as the sysupgrade step always fails, and the dongle never turns back on after it. OpenStick though boots and runs fine except for the modem part (devicetree issue probably).
Does anyone happen to own the H806 pocket router?
It seems the be based on the same hardware design as these USB dongles, just with a built-in battery. Mine was delivered today, I had only paid €14,88 with shipping included, but meanwhile they seem to be slightly more expensive:
I will take it apart and make some pictures when I find the time, hopefulyl over the weekend 
I think the hardware should be very similar, just with battery.
1 Like
Let us know if this has also msm8916 processor
Indeed, the processor is MSM8916 with some WCN362x wifi module, so it's basically the same design, just in a portable case with battery
I will have to find the UART pinout and then make some pictures with the pads, it looks like there is also some footprint on the PCB that could be for an LCD connector, so maybe the very cheap ones with LCD could also be the same platform, would be curious to have a little framebuffer device included (even though it couldn't do much in terms of resolution and refresh rate etc.)
// edit: the LCD variant seems to be called H807 or H807Pro, available fro ~EUR23 at the moment: https://aliexpress.com/item/1005006549224033.html maybe I have to order more stuff to play 
but first test the H806 without LCD...
2 Likes
It looks like you device is similar to Xunyou D623 with board number MF601SL which is quite popular in china.
Have fun with Openwrt and Debian,I will be interested to know from you if it is worth buying.
I found that with SP970_A based (AmazonBasics LTE modem) which register itself as a rndis_host type device, usbmode sending the standardEject message kills the usb-gadget mode driver inside the android and it usb0 gadget device doesn't work anymore. I fixed it by uninstall usb-modeswitch
although I think a better way is to either disable the config for 05c6:9024 device in /etc/usb-mode.json or detect if this is not announcing itself as a modem rather a rndis driver and not run usb-modeswitch on it.
Here is my dmesg log before and after uninstalling the usb-modeswitch package.
55.610841] ess_edma c080000.edma eth1: Link is Up - 1Gbps/Full - flow control rx/tx
[ 55.610957] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready
[ 123.020422] usb 1-1: USB disconnect, device number 2
[ 137.769965] usb 1-1: new high-speed USB device number 3 using xhci-hcd
[ 138.021257] rndis_host 1-1:1.0 usb0: register 'rndis_host' at usb-xhci-hcd.0.auto-1, RNDIS device, aa:97:a2:07:6c:7e
[ 169.764530] usb 1-1: USB disconnect, device number 3
[ 169.765116] rndis_host 1-1:1.0 usb0: unregister 'rndis_host' usb-xhci-hcd.0.auto-1, RNDIS device
[ 170.279731] usb 1-1: new high-speed USB device number 4 using xhci-hcd
[ 170.502186] rndis_host 1-1:1.0 usb0: register 'rndis_host' at usb-xhci-hcd.0.auto-1, RNDIS device, 02:35:34:0b:0d:06
[ 170.508527] rndis_host 1-1:1.0 usb0: unregister 'rndis_host' usb-xhci-hcd.0.auto-1, RNDIS device
[ 497.171126] ath10k_ahb a800000.wifi: Invalid VHT mcs 15 peer stats
[ 2782.018408] usb 1-1: reset high-speed USB device number 4 using xhci-hcd
[ 3140.629672] usb 1-1: USB disconnect, device number 4
[ 3154.790433] usb 1-1: new high-speed USB device number 5 using xhci-hcd
[ 3155.013554] rndis_host 1-1:1.0 usb0: register 'rndis_host' at usb-xhci-hcd.0.auto-1, RNDIS device, a6:36:7f:7d:39:65
[ 3185.803398] usb 1-1: USB disconnect, device number 5
[ 3185.803712] rndis_host 1-1:1.0 usb0: unregister 'rndis_host' usb-xhci-hcd.0.auto-1, RNDIS device
[ 3186.339548] usb 1-1: new high-speed USB device number 6 using xhci-hcd
[ 3186.565930] rndis_host 1-1:1.0 usb0: register 'rndis_host' at usb-xhci-hcd.0.auto-1, RNDIS device, 02:35:34:0b:0d:06
[ 3186.576531] rndis_host 1-1:1.0 usb0: unregister 'rndis_host' usb-xhci-hcd.0.auto-1, RNDIS device
[ 3486.242024] usb 1-1: USB disconnect, device number 6
[ 3501.408090] usb 1-1: new high-speed USB device number 7 using xhci-hcd
[ 3501.640503] rndis_host 1-1:1.0 usb0: register 'rndis_host' at usb-xhci-hcd.0.auto-1, RNDIS device, e2:f1:b5:f0:36:7e
I believe the below patch made by the author at VoCore2: Support USB 4G LTE | Vonger's Blog is causing the issue. This might have worked for dongles which show up as a modem rather than rndis device.
"05c6:9024": {
"*": {
"t_vendor": 1478,
"t_product": [ 36901 ],
"mode": "StandardEject",
"msg": [ ]
}
},
Hello, I flashed your stock firmware for HMUF02-v05, and my dongle is showing error and rebooting.
Log of error:
I/ServiceManager( 244): Waiting for service AtCmdFwd...
D/FastDormancyService( 1588): detect mobile data activity! isAlarmExpired: false mFDset: 3
D/FastDormancyService( 1588): sent:0 received:0
D/FastDormancyService( 1588): scheduling timer:1000ms Alarm:15000ms
D/MainService( 910): :/system/bin/dnsmasq : stat = S have dns =12
I/ServiceManager( 244): Waiting for service AtCmdFwd...
E/MainService( 910): sn verify wifi ap222
I/Diag_Lib( 809): diag: register callback
E/Diag_Lib( 809): logging switched
I/Diag_Lib( 809): NV read / write command: 38
E/Diag_Lib( 809): logging switched
I/ROOTDEV ( 809): sn_code sn_code[0] = 26
I/ROOTDEV ( 809): sn_code sn_code[1] = c3
I/ROOTDEV ( 809): sn_code sn_code[2] = 09
I/ROOTDEV ( 809): sn_code sn_code[3] = 30
I/ROOTDEV ( 809): sn_code sn_code[4] = 30
I/ROOTDEV ( 809): sn_code sn_code[5] = 30
I/ROOTDEV ( 809): sn_code sn_code[6] = 30
I/ROOTDEV ( 809): sn_code sn_code[7] = 30
I/ROOTDEV ( 809): sn_code sn_code[8] = 30
I/ROOTDEV ( 809): sn_code sn_code[9] = 30
I/ROOTDEV ( 809): sn_code sn_code[10] = 30
I/ROOTDEV ( 809): sn_code sn_code[11] = 30
I/ROOTDEV ( 809): sn_code sn_code[12] = 30
I/ROOTDEV ( 809): sn_code sn_code[13] = 30
I/ROOTDEV ( 809): sn_code sn_code[14] = 30
I/ROOTDEV ( 809): sn_code sn_code[15] = 30
I/ROOTDEV ( 809): sn_code sn_code[16] = 30
I/ROOTDEV ( 809): sn_code sn_code[17] = 30
I/ROOTDEV ( 809): sn_code sn_code[18] = 30
I/ROOTDEV ( 809): sn_code sn_code[19] = 30
I/ROOTDEV ( 809): sn_code sn_code[20] = 30
I/ROOTDEV ( 809): sn_code sn_code[21] = 30
I/ROOTDEV ( 809): sn_code sn_code[22] = 30
I/ROOTDEV ( 809): sn_code sn_code[23] = 30
I/ROOTDEV ( 809): sn_code sn_code[24] = 30
I/ROOTDEV ( 809): sn_code sn_code[25] = 30
I/ROOTDEV ( 809): sn_code sn_code[26] = 30
I/ROOTDEV ( 809): sn_code sn_code[27] = 30
I/ROOTDEV ( 809): sn_code sn_code[28] = 30
I/ROOTDEV ( 809): sn_code sn_code[29] = 30
I/ROOTDEV ( 809): sn_code sn_code[30] = 30
I/ROOTDEV ( 809): sn_code sn_code[31] = 30
I/ROOTDEV ( 809): sn_code sn_code[32] = 00
I/ROOTDEV ( 809): sn_code sn_code[33] = 00
I/ROOTDEV ( 809): sn_code sn_code[34] = 00
I/ROOTDEV ( 809): sn_code sn_code[35] = 00
E/ROOTDEV ( 809): could not open rootdevice222
E/MainService( 910): disable wifi ap due to 1111111
D/Tethering( 809): WIFI_AP_STATE_CHANGED: wifiApState=10
D/Tethering( 809): tetherableUsbRegexs: [Ljava.lang.String;@41c92868tetherableWifiRegexs[Ljava.lang.String;@41c92910
D/Tethering( 809): mTetherableEthRegexs: [Ljava.lang.String;@41bc0808
D/StatusBar.NetworkController( 910): onReceive action is android.net.wifi.WIFI_AP_STATE_CHANGED
D/StatusBar.NetworkController( 910): updateWifiIcons, mWifiIconId = (null) mQSWifiIconId = (null)
D/Tethering( 809): updateConfiguration activeNetType: 0
D/Tethering( 809): setUsbTethering(false)
D/Tethering( 809): tetherUsb false
D/StatusBar.NetworkController( 910): refreshViews connected={ data } level=2 combinedSignalIconId=0x7f0201f7/com.android.systemui:drawable/stat_sys_signal_2_fully mobileLabel=TIM 4G wifiLabel= emergencyOnly=false combinedLabel=TIM 4G mAirplaneMode=false mDataActivity=4 mPhoneSignalIconId=0x7f0201f7/com.android.systemui:drawable/stat_sys_signal_2_fully mQSPhoneSignalIconId=0x7f02004e/com.android.systemui:drawable/ic_qs_signal_2 mDataDirectionIconId=0x0/(null) mDataSignalIconId=0x7f0201f7/com.android.systemui:drawable/stat_sys_signal_2_fully mDataTypeIconId=0x7f0200b2/com.android.systemui:drawable/stat_sys_data_fully_connected_4g mQSDataTypeIconId=0x7f020053/com.android.systemui:drawable/ic_qs_signal_4g mNoSimIconId=0x0/(null) mWifiIconId=0x0/(null) mQSWifiIconId=0x0/(null) mWifiActivityIconId=0x0/(null) mBluetoothTetherIconId=0x10805d7/android:drawable/stat_sys_tether_bluetooth
D/CommandListener( 194): Setting iface cfg
D/CommandListener( 194): Trying to bring up wlan0
Can you help me to solve this error?
Do i need to flash efs or something?
Hello everyone,
I am currently planning a project where I need to flash OpenWrt to a newer version of this stick (FY_UZ801_V3.2 and FY_UZ801_V3.0).
Therefore, I am currently looking for the most elegant way to do this successfully.
One thought that came to my mind that hasn't been mentioned yet is using Docker.
Does anyone have any ideas on this or have tried it?
I think the hardware might be able to handle the stress, and there seem to be ways to use Docker on Android and of course Debian, which seems to run pretty well on the stick according to some earlier posts in this thread.
I have both versions.
I installed openwrt on them and they are both working good except for WiFi speed which is slower than stock android firmwares. I used uz801 openwrt image shared by jack above.
Flashing process is straight forward, put your stick on fastboot mode and click on flash.sh (Linux) or flash.bat (window) inside the firmware downloaded and flashing will start automatically.
Do NOT forget to take a dump of the stock firmware in case you mess up things you can restore, also restore files inside your modem.bin dump and copy all files to /lib/firmware of openwrt.
Does your v3.0 stick come with option to enable esim in SIM setup page?
There's a modem problem on a HMUF02-V05: failed/sim-missing.
Currently trying to rebuild a kernel for this board, already managed to brute-force the proper GPIO pins for LEDs but having a hard time looking for the modem pins. How can I find them? I extracted the dts from the stock Android image but I can't find any relevant information there.
Hi
thank you for your reply.
It's so awesome that a topic being 2 years old is still so good supported by the community!
Its great news that OpenWrt runs on your sticks. With Jacks post you meant this link posted by jackadam1981 in September?
For the dumping process:
I dumped my sticks using edl
and more precisely this command: python3.12 edl rl my/dump/dir
Is this sufficient or is there a better way to do this?
For your question regarding the eSIM support:
I actually have 2x v3.0 3x v3.2 and 1x v1.1 with various firmware versions with the newest being V3.4.3.3 on the v3.0 Sticks, but none of them showed eSIM support in the default interface.
Because eSIM support is a hardware feature I thought that this board would not be able to be used with eSIMs. Am I wrong on this? This would actually be really useful for my project. There are maybe workarounds to use eSIMs on devices without this hardware but all I found had a rather bad smell on it.
My assumption was that if the hardware exists on the board that it would show up in OpenWRT once it's running.
By the way:
does anyone know who makes these sticks?
I found huasifei which could be the manufacturer based on their website, but I never got an answer with a verification.
Finally some PCB shots from the H806 (version without LCD)
bootlog
Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.0.C4.1-00009
S - IMAGE_VARIANT_STRING=HAAAANAZA
S - OEM_IMAGE_VERSION_STRING=lee-machine
S - Boot Config, 0x000002e1
S - Core 0 Frequency, 0 MHz
B - 1545 - PBL, Start
B - 3490 - bootable_media_detect_entry, Start
B - 233199 - bootable_media_detect_success, Start
B - 233204 - elf_loader_entry, Start
B - 234255 - auth_hash_seg_entry, Start
B - 234465 - auth_hash_seg_exit, Start
B - 249070 - elf_segs_hash_verify_entry, Start
B - 307657 - PBL, End
B - 315431 - SBL1, Start
B - 379481 - pm_device_init, Start
D - 14731 - pm_device_init, Delta
B - 394822 - boot_flash_init, Start
D - 30 - boot_flash_init, Delta
B - 398818 - boot_config_data_table_init, Start
D - 28792 - boot_config_data_table_init, Delta - (0 Bytes)
B - 432185 - CDT version:3,Platform ID:11,Major ID:1,Minor ID:0,Subtype:5
B - 438376 - sbl1_ddr_set_params, Start
B - 442097 - cpr_init, Start
D - 0 - cpr_init, Delta
B - 447618 - Pre_DDR_clock_init, Start
D - 183 - Pre_DDR_clock_init, Delta
D - 0 - sbl1_ddr_set_params, Delta
B - 460184 - pm_driver_init, Start
D - 3660 - pm_driver_init, Delta
B - 472414 - clock_init, Start
D - 30 - clock_init, Delta
Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.0.C4.1-00009
S - IMAGE_VARIANT_STRING=HAAAANAZA
S - OEM_IMAGE_VERSION_STRING=lee-machine
S - Boot Config, 0x000002e1
S - Core 0 Frequency, 0 MHz
B - 1545 - PBL, Start
B - 3490 - bootable_media_detect_entry, Start
B - 233387 - bootable_media_detect_success, Start
B - 233391 - elf_loader_entry, Start
B - 234436 - auth_hash_seg_entry, Start
B - 234646 - auth_hash_seg_exit, Start
B - 249243 - elf_segs_hash_verify_entry, Start
B - 307829 - PBL, End
B - 315583 - SBL1, Start
B - 379603 - pm_device_init, Start
D - 14731 - pm_device_init, Delta
B - 394944 - boot_flash_init, Start
D - 30 - boot_flash_init, Delta
B - 398940 - boot_config_data_table_init, Start
D - 28792 - boot_config_data_table_init, Delta - (0 Bytes)
B - 432307 - CDT version:3,Platform ID:11,Major ID:1,Minor ID:0,Subtype:5
B - 438498 - sbl1_ddr_set_params, Start
B - 442219 - cpr_init, Start
D - 0 - cpr_init, Delta
B - 447740 - Pre_DDR_clock_init, Start
D - 183 - Pre_DDR_clock_init, Delta
D - 0 - sbl1_ddr_set_params, Delta
B - 460306 - pm_driver_init, Start
D - 3660 - pm_driver_init, Delta
B - 472536 - clock_init, Start
D - 30 - clock_init, Delta
B - 482632 - Image Load, Start
D - 27023 - QSEE Image Loaded, Delta - (332224 Bytes)
B - 509655 - Image Load, Start
D - 7045 - SEC Image Loaded, Delta - (2048 Bytes)
B - 518957 - sbl1_efs_handle_cookies, Start
D - 427 - sbl1_efs_handle_cookies, Delta
B - 525301 - Image Load, Start
D - 17568 - QHEE Image Loaded, Delta - (15032 Bytes)
B - 542900 - Image Load, Start
D - 19062 - RPM Image Loaded, Delta - (148956 Bytes)
B - 561993 - Image Load, Start
D - 22722 - APPSBL Image Loaded, Delta - (345236 Bytes)
B - 584715 - QSEE Execution, Start
D - 61 - QSEE Execution, Delta
B - 590419 - SBL1, End
D - 277184 - SBL1, Delta
S - Flash Throughput, 117000 KB/s (843496 Bytes, 7198 us)
S - DDR Frequency, 400 MHz
Android Bootloader - UART_DM Initialized!!!
[0] welcome to lk
[10] platform_init()
[10] Configured XPU violations to be fatal errors
[10] target_init()
[50] Done initialization of the card
[60] pm8x41_get_is_cold_boot: cold boot
[70] read_debug_mode_mmc
[70] buf: DebugMode:0
[70] debug_mode: 0
[70] pm8x41_get_is_cold_boot: cold boot
[80] Unable to locate /bootselect partition
[80] use_signed_kernel=0, is_unlocked=0, is_tampered=0.
[90] Loading boot image (6977536): start
[210] Loading boot image (6977536): done
[220] DTB Total entry: 203, DTB version: 3
[220] Using DTB entry 0x000000ce/00000000/0x0001000b/261 for device 0x000000ce/00010000/0x0501000b/5
[230] pm8x41_get_is_cold_boot: cold boot
[240] target_pause_for_battery_charge : pon_reason is 16 cold_boot:1
[240] cmdline: console=ttyHSL0,115200,n8 androidboot.console=ttyHSL0 androidboot.hardware=qcom user_debug=31 msm_rtb.filter=0x237 ehci-hcd.park=3 androidboot.bootdevice=7824900.sdhci androidboot.emmc=true androidboot.serialno=1a21990 androidboot.mode=charger an[260] Updating device tree: start
[420] Updating device tree: done
[420] booting linux @ 0x80008000, ramdisk @ 0x82000000 (533043), tags/device tree @ 0x81e00000
[ 0.000000] Booting Linux on physical CPU 0x0
[ 0.000000] Initializing cgroup subsys cpu
[ 0.000000] Initializing cgroup subsys cpuacct
[ 0.000000] Linux version 3.10.28 (user17@cf4c1a952808) (gcc version 4.7 (GCC) ) #1 SMP PREEMPT Wed Aug 23 10:27:11 CST 2023
[ 0.000000] CPU: ARMv7 Processor [410fd030] revision 0 (ARMv7), cr=10c5387d
[ 0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[ 0.000000] Machine: Qualcomm Technologies, Inc. MSM 8916 (Flattened Device Tree), model: Qualcomm Technologies, Inc. MSM 8916 512MB QRD SKUI
[ 0.000000] Node qcom,mdss_fb_primary memblock_reserve memory 83200000-841a0000
[ 0.000000] cma: Found external_image__region@0, memory base 0x86000000, size 8 MiB, limit 0xffffffff
[ 0.000000] cma: Found modem_adsp_region@0, memory base 0x86800000, size 85 MiB, limit 0xffffffff
[ 0.000000] cma: Found pheripheral_region@0, memory base 0x8bd00000, size 6 MiB, limit 0xffffffff
[ 0.000000] cma: Found venus_qseecom_region@0, memory base 0x00000000, size 18 MiB, limit 0x90000000
[ 0.000000] cma: Found audio_region@0, memory base 0x00000000, size 3 MiB, limit 0xffffffff
[ 0.000000] cma: CMA: reserved 8 MiB at 0x86000000 for external_image_mem
[ 0.000000] cma: CMA: reserved 85 MiB at 0x86800000 for modem_adsp_mem
[ 0.000000] cma: CMA: reserved 6 MiB at 0x8bd00000 for peripheral_mem
[ 0.000000] cma: CMA: reserved 20 MiB at 0x8ec00000 for venus_qseecom_mem
[ 0.000000] cma: CMA: reserved 4 MiB at 0x9fc00000 for audio_mem
[ 0.000000] cma: CMA: reserved 8 MiB at 0x9f400000 for default region
[ 0.000000] Memory policy: ECC disabled, Data cache writealloc
[ 0.000000] SMP: 4 cores greater than maximum (2), clipping
[ 0.000000] ------------[ cut here ]------------
[ 0.000000] WARNING: at /home/share/8916/MF800_dsds/LINUX/android/kernel/arch/arm/kernel/devtree.c:142 arm_dt_init_cpu_maps+0x144/0x248()
[ 0.000000] DT /cpu 3 nodes greater than max cores 2, capping them
[ 0.000000] Modules linked in:
[ 0.000000] CPU: 0 PID: 0 Comm: swapper Not tainted 3.10.28 #1
[ 0.000000] [<c010be84>] (unwind_backtrace+0x0/0x11c) from [<c0109b08>] (show_stack+0x10/0x14)
[ 0.000000] [<c0109b08>] (show_stack+0x10/0x14) from [<c011a750>] (warn_slowpath_common+0x4c/0x6c)
[ 0.000000] [<c011a750>] (warn_slowpath_common+0x4c/0x6c) from [<c011a7f0>] (warn_slowpath_fmt+0x2c/0x3c)
[ 0.000000] [<c011a7f0>] (warn_slowpath_fmt+0x2c/0x3c) from [<c0f045ec>] (arm_dt_init_cpu_maps+0x144/0x248)
[ 0.000000] [<c0f045ec>] (arm_dt_init_cpu_maps+0x144/0x248) from [<c0f03b10>] (setup_arch+0x59c/0x808)
[ 0.000000] [<c0f03b10>] (setup_arch+0x59c/0x808) from [<c0f007e0>] (start_kernel+0x70/0x344)
[ 0.000000] [<c0f007e0>] (start_kernel+0x70/0x344) from [<80008070>] (0x80008070)
[ 0.000000] ---[ end trace 1b75b31a2719ed1c ]---
[ 0.000000] PERCPU: Embedded 10 pages/cpu @c1658000 s18176 r8192 d14592 u40960
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 104704
[ 0.000000] Kernel command line: console=ttyHSL0,115200,n8 androidboot.console=ttyHSL0 androidboot.hardware=qcom user_debug=31 msm_rtb.filter=0x237 ehci-hcd.park=3 androidboot.bootdevice=7824900.sdhci androidboot.emmc=true androidboot.serialno=1a21990 androidboot.mode=charger androidboot.baseband=msm mdss_mdp.panel=0:spi:0
[ 0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
[ 0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
[ 0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
[ 0.000000] Memory: 351800K/422912K available (9492K kernel code, 935K rwdata, 3820K rodata, 1073K init, 1147K bss, 71112K reserved, 0K highmem)
[ 0.000000] Virtual kernel memory layout:
[ 0.000000] vector : 0xffff0000 - 0xffff1000 ( 4 kB)
[ 0.000000] fixmap : 0xfff00000 - 0xfffe0000 ( 896 kB)
[ 0.000000] vmalloc : 0xe0800000 - 0xff000000 ( 488 MB)
[ 0.000000] lowmem : 0xc0000000 - 0xe0000000 ( 512 MB)
[ 0.000000] pkmap : 0xbfe00000 - 0xc0000000 ( 2 MB)
[ 0.000000] modules : 0xbf000000 - 0xbfe00000 ( 14 MB)
[ 0.000000] .text : 0xc0008000 - 0xc0e003f8 (14305 kB)
[ 0.000000] .init : 0xc0f00000 - 0xc100c700 (1074 kB)
[ 0.000000] .data : 0xc100e000 - 0xc10f7e54 ( 936 kB)
[ 0.000000] .bss : 0xc10f7f18 - 0xc1216d94 (1148 kB)
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[ 0.000000] Preemptible hierarchical RCU implementation.
[ 0.000000] RCU dyntick-idle grace-period acceleration is enabled.
[ 0.000000] NR_IRQS:16 nr_irqs:16 16
[ 0.000000] Architected cp15 and mmio timer(s) running at 19.20MHz (virt/virt).
[ 0.000000] sched_clock: 56 bits at 19MHz, resolution 52ns, wraps every 3579139424256ns
[ 0.000000] Switching to timer-based delay loop
[ 0.000000] sched_clock: 32 bits at 19MHz, resolution 52ns, wraps every 223696213963ns
[ 0.000000] Console: colour dummy device 80x30
[ 0.000670] Calibrating delay loop (skipped), value calculated using timer frequency.. 38.40 BogoMIPS (lpj=192000)
[ 0.000682] pid_max: default: 32768 minimum: 301
[ 0.000915] Security Framework initialized
[ 0.000945] SELinux: Initializing.
[ 0.001084] Mount-cache hash table entries: 512
[ 0.002030] Initializing cgroup subsys debug
[ 0.002042] Initializing cgroup subsys freezer
[ 0.002077] CPU: Testing write buffer coherency: ok
[ 0.002475] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
[ 0.002554] Setting up static identity map for 0xc0923ec0 - 0xc0923f18
[ 0.002587] Configuring XPU violations to be fatal errors
[ 0.003438] ftrace: Allocated trace_printk buffers
[ 0.015564] MSM Memory Dump base table set up
[ 0.015589] MSM Memory Dump apps data table set up
[ 0.017132] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
[ 0.017260] Brought up 2 CPUs
[ 0.017275] SMP: Total of 2 processors activated (76.80 BogoMIPS).
[ 0.017281] CPU: All CPU(s) started in SVC mode.
[ 0.031553] pinctrl core: initialized pinctrl subsystem
[ 0.031914] regulator-dummy: no parameters
[ 0.033091] NET: Registered protocol family 16
[ 0.035328] DMA: preallocated 256 KiB pool for atomic coherent allocations
[ 0.090744] msm_watchdog b017000.qcom,wdt: MSM Watchdog Initialized
[ 0.094565] spmi_pmic_arb 200f000.qcom,spmi: PMIC Arb Version-2 0x20010000
[ 0.098817] cma: Assigned CMA region at 0 to 1de0000.qcom,venus device
[ 0.099327] cma: Assigned CMA region at 0 to 4080000.qcom,mss device
[ 0.099647] cma: Assigned CMA region at 0 to a21b000.qcom,pronto device
[ 0.100113] ACC: mem_acc_efuse_init: efuse_addr = 0x00058000 (len=0x1000)
[ 0.100139] ACC: mem_acc_fuse_is_setting_expected: [row:0] = 0x4820000000700705 @52:1 == 1 ?: no
[ 0.100282] mem_acc_corner: 0 <--> 0 mV
[ 0.111193] KPI: Bootloader start count = 21297
[ 0.111201] KPI: Bootloader end count = 35569
[ 0.111209] KPI: Bootloader display count = 4104852899
[ 0.111216] KPI: Bootloader load kernel count = 4027
[ 0.111223] KPI: Kernel MPM timestamp = 54179
[ 0.111230] KPI: Kernel MPM Clock frequency = 32768
[ 0.111250] socinfo_print: v8, id=206, ver=1.0, raw_id=1797, raw_ver=0, hw_plat=11, hw_plat_ver=65536
[ 0.111250] accessory_chip=0, hw_plat_subtype=5, pmic_model=65547, pmic_die_revision=131072
[ 0.111862] msm_smd: Missing required property - label. Using legacy parsing
[ 0.111923] smd_channel_probe_worker: allocation table not initialized
[ 0.111994] msm_smd: Missing required property - label. Using legacy parsing
[ 0.112039] smd_channel_probe_worker: allocation table not initialized
[ 0.112108] msm_smd: Missing required property - label. Using legacy parsing
[ 0.116589] msm_spm_dev_probe: CPU2 SPM device probe failed: -12
[ 0.116609] spm-v2: probe of b0a9000.qcom,spm failed with error -12
[ 0.116648] msm_spm_dev_probe: CPU3 SPM device probe failed: -12
[ 0.116663] spm-v2: probe of b0b9000.qcom,spm failed with error -12
[ 0.117643] msm_mpm_dev_probe(): Cannot get clk resource for XO
[ 0.117665] platform 601d0.qcom,mpm: Driver mpm-v2 requests probe deferral
[ 0.118840] 8916_s1_corner: 0 <--> 0 mV at 0 mV normal idle
[ 0.119333] 8916_s1_corner_ao: 0 <--> 0 mV at 0 mV normal idle
[ 0.119797] 8916_s1_floor_corner: 0 <--> 0 mV at 0 mV normal idle
[ 0.120304] 8916_s3: 1200 <--> 1300 mV at 1200 mV normal idle
[ 0.120819] 8916_s4: 1800 <--> 2100 mV at 1800 mV normal idle
[ 0.121270] 8916_l1: 1225 mV normal idle
[ 0.121743] 8916_l2: 1200 mV normal idle
[ 0.122208] 8916_l3: 500 <--> 1287 mV at 0 mV normal idle
[ 0.122652] 8916_l3_corner_ao: 0 <--> 0 mV at 0 mV normal idle
[ 0.123095] 8916_l3_corner_so: 0 <--> 0 mV at 0 mV normal idle
[ 0.123553] 8916_l4: 2050 mV normal idle
[ 0.124041] 8916_l5: 1800 mV normal idle
[ 0.124503] 8916_l6: 1800 mV normal idle
[ 0.124994] 8916_l7: 1800 mV normal idle
[ 0.125488] 8916_l7_ao: 1800 mV normal idle
[ 0.125924] 8916_l7_so: 1800 mV normal idle
[ 0.126408] 8916_l8: 2850 <--> 2900 mV at 2850 mV normal idle
[ 0.126881] 8916_l9: 3300 mV normal idle
[ 0.127379] 8916_l10: 2700 <--> 2800 mV at 2700 mV normal idle
[ 0.127878] 8916_l11: 1800 <--> 2950 mV at 1800 mV normal idle
[ 0.128351] 8916_l12: 1800 <--> 2950 mV at 1800 mV normal idle
[ 0.128842] 8916_l13: 3075 mV normal idle
[ 0.129342] 8916_l14: 1800 <--> 3300 mV at 1800 mV normal idle
[ 0.129819] 8916_l15: 1800 <--> 3300 mV at 1800 mV normal idle
[ 0.130328] 8916_l16: 1800 <--> 3300 mV at 1800 mV normal idle
[ 0.130810] 8916_l17: 2850 mV normal idle
[ 0.131319] 8916_l18: 2700 mV normal idle
[ 0.131904] 8916_s2: 1050 <--> 1350 mV at 1150 mV
[ 0.132054] spm_regulator_probe: name=8916_s2, range=MV, voltage=1150000 uV, mode=PWM, step rate=1200 uV/us
[ 0.132613] cpr_efuse_init: apc_corner: efuse_addr = 0x00058000 (len=0x1000)
[ 0.132657] cpr_parse_speed_bin_fuse: apc_corner: [row: 0]: 0x4820000000700705, speed_bits = 0
[ 0.132759] cpr_pvs_init: apc_corner: pvs voltage: [1050000 1125000 1262500] uV
[ 0.132770] cpr_pvs_init: apc_corner: ceiling voltage: [1050000 1150000 1350000] uV
[ 0.132781] cpr_pvs_init: apc_corner: floor voltage: [1050000 1050000 1162500] uV
[ 0.132987] cpr_init_cpr_efuse: apc_corner: [row:27] = 0xb08d2203488d0f29
[ 0.133011] cpr_init_cpr_efuse: apc_corner: CPR disable fuse = 0
[ 0.133024] cpr_init_cpr_efuse: apc_corner: Corner[1]: ro_sel = 2, target quot = 840
[ 0.133036] cpr_init_cpr_efuse: apc_corner: Corner[2]: ro_sel = 2, target quot = 840
[ 0.133049] cpr_init_cpr_efuse: apc_corner: Corner[3]: ro_sel = 2, target quot = 1084
[ 0.133117] cpr_get_corner_quot_adjustment: apc_corner: fuse corner 2 quotient adjustment scaling factor: 0.000
[ 0.133127] cpr_get_corner_quot_adjustment: apc_corner: fuse corner 3 quotient adjustment scaling factor: 0.596
[ 0.133143] cpr_get_corner_quot_adjustment: apc_corner: adjusted quotient[1] = 840
[ 0.133152] cpr_get_corner_quot_adjustment: apc_corner: adjusted quotient[2] = 840
[ 0.133160] cpr_get_corner_quot_adjustment: apc_corner: adjusted quotient[3] = 840
[ 0.133169] cpr_get_corner_quot_adjustment: apc_corner: adjusted quotient[4] = 840
[ 0.133177] cpr_get_corner_quot_adjustment: apc_corner: adjusted quotient[5] = 959
[ 0.133186] cpr_get_corner_quot_adjustment: apc_corner: adjusted quotient[6] = 1016
[ 0.133194] cpr_get_corner_quot_adjustment: apc_corner: adjusted quotient[7] = 1051
[ 0.133202] cpr_get_corner_quot_adjustment: apc_corner: adjusted quotient[8] = 1084
[ 0.133256] cpr_populate_opp_table: apc_corner: adding OPP entry failed - OPP may not be enabled, rc=-22
[ 0.133298] cpr_init_cpr_parameters: apc_corner: up threshold = 0, down threshold = 2
[ 0.133327] cpr_init_cpr_parameters: apc_corner: CPR is enabled by default.
[ 0.133338] cpr_config: apc_corner: Timer count: 0x17700 (for 5000 us)
[ 0.133623] apc_corner: 0 <--> 0 mV
[ 0.134499] i2c-msm-v2 78b8000.i2c: probing driver i2c-msm-v2
[ 0.134563] i2c-msm-v2 78b8000.i2c: error on clk_get(core_clk):-517
[ 0.134577] i2c-msm-v2 78b8000.i2c: error probe() failed with err:-517
[ 0.134602] platform 78b8000.i2c: Driver i2c-msm-v2 requests probe deferral
[ 0.136547] msm-thermal qcom,msm-thermal.56: msm_thermal:Failed reading node=/soc/qcom,msm-thermal, key=qcom,rpm-phase-resource-type err=-22. KTM continues
[ 0.136565] msm-thermal qcom,msm-thermal.56: msm_thermal:Failed reading node=/soc/qcom,msm-thermal, key=qcom,gfx-phase-warm-temp. err=-22. KTM continues
[ 0.136582] msm-thermal qcom,msm-thermal.56: probe_therm_reset:Failed reading node=/soc/qcom,msm-thermal, key=qcom,therm-reset-temp err=-22. KTM continues
[ 0.136598] msm-thermal qcom,msm-thermal.56: probe_vdd_mx:Failed reading node=/soc/qcom,msm-thermal, key=qcom,mx-restriction-temp. KTM continues
[ 0.136614] msm-thermal qcom,msm-thermal.56: probe_psm:Failed reading node=/soc/qcom,msm-thermal, key=qcom,pmic-sw-mode-temp. err=-22. KTM continues
[ 0.136914] msm_thermal:vdd_restriction_reg_init Defer vdd rstr freq init.
[ 0.136941] msm-thermal qcom,msm-thermal.56: probe_ocr:Failed reading node=/soc/qcom,msm-thermal, key=qcom,pmic-opt-curr-temp err:-22. KTM continues
[ 0.137865] sps:sps is ready.
[ 0.144673] qcom,rpmcc-8916 1800000.qcom,rpmcc: Registered RPM clocks.
[ 0.155084] qcom,gcc-8916 1800000.qcom,gcc: Registered GCC clocks
[ 0.156850] clock-a7 b011050.qcom,clock-a7: Speed bin: 0 PVS Version: 0
[ 0.159214] i2c-msm-v2 78b8000.i2c: probing driver i2c-msm-v2
[ 0.159296] AXI: msm_bus_scale_register_client(): msm_bus_scale_register_client: Bus driver not ready.
[ 0.159309] i2c-msm-v2 78b8000.i2c: msm_bus_scale_register_client(mstr-id:86):0 (not a problem)
[ 0.186105] bio: create slab <bio-0> at 0
[ 0.188090] SCSI subsystem initialized
[ 0.188350] usbcore: registered new interface driver usbfs
[ 0.188421] usbcore: registered new interface driver hub
[ 0.188528] usbcore: registered new device driver usb
[ 0.188655] media: Linux media interface: v0.10
[ 0.188710] Linux video capture interface: v2.00
[ 0.188882] BATTERY: batterydata_init: Battery-data device created!
[ 0.190228] cma: Assigned CMA region at 0 to 1b.qcom,ion-heap device
[ 0.190331] cma: Assigned CMA region at 0 to 1c.qcom,ion-heap device
[ 0.190432] cma: Assigned CMA region at 0 to 17.qcom,ion-heap device
[ 0.190532] cma: Assigned CMA region at 0 to 1a.qcom,ion-heap device
[ 0.190678] ION heap system created
[ 0.190748] ION heap kmalloc created
[ 0.190773] ION heap qsecom created at 0x8ec00000 with size 1200000
[ 0.190787] ION heap audio created at 0x9fc00000 with size 314000
[ 0.190800] ION heap pil_1 created at 0x8bd00000 with size 600000
[ 0.190813] ION heap pil_2 created at 0x86800000 with size 5500000
[ 0.190909] msm_bus_fabric_init_driver
[ 0.191052] msm_bus_device 580000.ad-hoc-bus: Dev 1024
[ 0.191170] msm_bus_device 580000.ad-hoc-bus: msmbus_coresight initialized
[ 0.191190] msm_bus_device 580000.ad-hoc-bus: Dev 0
[ 0.191289] msm_bus_device 580000.ad-hoc-bus: msmbus_coresight initialized
[ 0.191311] msm_bus_device 580000.ad-hoc-bus: Dev 4096
[ 0.191404] msm_bus_device 580000.ad-hoc-bus: msmbus_coresight initialized
[ 0.192768] msm_bus_init_clk: Valid node clk node 1024 ctx 0
[ 0.192773] msm_bus_init_clk: Valid node clk node 1024 ctx 1msm_bus_init_clk: Valid node clk node 0 ctx 0
[ 0.192838] msm_bus_init_clk: Valid node clk node 0 ctx 1msm_bus_init_clk: Valid node clk node 4096 ctx 0
[ 0.192897] msm_bus_init_clk: Valid node clk node 4096 ctx 1[ 0.198612] gdsc_venus: no parameters
[ 0.198818] gdsc_mdss: no parameters
[ 0.199027] gdsc_jpeg: no parameters
[ 0.199216] gdsc_vfe: no parameters
[ 0.199444] gdsc_oxili_gx: no parameters
[ 0.200242] msm_iommu 1f00000.qcom,iommu: device gfx_iommu (model: 500) mapped at e09c0000, with 2 ctx banks
[ 0.203373] msm_iommu 1e00000.qcom,iommu: device apps_iommu (model: 500) mapped at e0b80000, with 20 ctx banks
[ 0.204202] msm_iommu_ctx 1f09000.qcom,iommu-ctx: context gfx3d_user using bank 1
[ 0.204305] msm_iommu_ctx 1f0a000.qcom,iommu-ctx: context gfx3d_priv using bank 2
[ 0.204389] msm_iommu_ctx 1e22000.qcom,iommu-ctx: context jpeg_enc0 using bank 2
[ 0.204468] msm_iommu_ctx 1e23000.qcom,iommu-ctx: context vfe using bank 3
[ 0.204540] msm_iommu_ctx 1e24000.qcom,iommu-ctx: context mdp_0 using bank 4
[ 0.204617] msm_iommu_ctx 1e25000.qcom,iommu-ctx: context venus_ns using bank 5
[ 0.204689] msm_iommu_ctx 1e26000.qcom,iommu-ctx: context cpp using bank 6
[ 0.204762] msm_iommu_ctx 1e27000.qcom,iommu-ctx: context mDSP using bank 7
[ 0.204833] msm_iommu_ctx 1e28000.qcom,iommu-ctx: context gss using bank 8
[ 0.204905] msm_iommu_ctx 1e29000.qcom,iommu-ctx: context a2 using bank 9
[ 0.204982] msm_iommu_ctx 1e32000.qcom,iommu-ctx: context mdp_1 using bank 18
[ 0.205062] msm_iommu_ctx 1e33000.qcom,iommu-ctx: context venus_sec_pixel using bank 19
[ 0.205137] msm_iommu_ctx 1e34000.qcom,iommu-ctx: context venus_sec_bitstream using bank 20
[ 0.205211] msm_iommu_ctx 1e35000.qcom,iommu-ctx: context venus_sec_non_pixel using bank 21
[ 0.205284] msm_iommu_ctx 1e36000.qcom,iommu-ctx: context venus_fw using bank 22
[ 0.205357] msm_iommu_ctx 1e37000.qcom,iommu-ctx: context periph_rpm using bank 23
[ 0.205429] msm_iommu_ctx 1e38000.qcom,iommu-ctx: context periph_CE using bank 24
[ 0.205502] msm_iommu_ctx 1e39000.qcom,iommu-ctx: context periph_BLSP using bank 25
[ 0.205574] msm_iommu_ctx 1e3a000.qcom,iommu-ctx: context periph_SDC1 using bank 26
[ 0.205693] msm_iommu_ctx 1e3b000.qcom,iommu-ctx: context periph_SDC2 using bank 27
[ 0.205767] msm_iommu_ctx 1e3c000.qcom,iommu-ctx: context periph_audio using bank 28
[ 0.205840] msm_iommu_ctx 1e3d000.qcom,iommu-ctx: context periph_USB_HS1 using bank 29
[ 0.206420] Advanced Linux Sound Architecture Driver Initialized.
[ 0.206838] Bluetooth: Core ver 2.16
[ 0.206873] NET: Registered protocol family 31
[ 0.206879] Bluetooth: HCI device and connection manager initialized
[ 0.206889] Bluetooth: HCI socket layer initialized
[ 0.206898] Bluetooth: L2CAP socket layer initialized
[ 0.206920] Bluetooth: SCO socket layer initialized
[ 0.207180] cfg80211: Calling CRDA to update world regulatory domain
[ 0.207203] cfg80211: World regulatory domain updated:
[ 0.207208] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)
[ 0.207216] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
[ 0.207222] cfg80211: (2457000 KHz - 2482000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
[ 0.207228] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (300 mBi, 2000 mBm)
[ 0.207235] cfg80211: (5170000 KHz - 5250000 KHz @ 80000 KHz), (300 mBi, 2000 mBm)
[ 0.207241] cfg80211: (5250000 KHz - 5330000 KHz @ 80000 KHz), (300 mBi, 2000 mBm)
[ 0.207247] cfg80211: (5490000 KHz - 5710000 KHz @ 80000 KHz), (300 mBi, 2000 mBm)
[ 0.207252] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (300 mBi, 2000 mBm)
[ 0.207258] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm)
[ 0.207895] Switching to clocksource arch_sys_counter
[ 0.235161] mdss_pll_probe: MDSS pll label = MDSS DSI 0 PLL
[ 0.239546] dsi_pll_clock_register_lpm: Registered DSI PLL clocks successfully
[ 0.240263] NET: Registered protocol family 2
[ 0.240700] TCP established hash table entries: 4096 (order: 3, 32768 bytes)
[ 0.240755] TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
[ 0.240805] TCP: Hash tables configured (established 4096 bind 4096)
[ 0.240839] TCP: reno registered
[ 0.240849] UDP hash table entries: 256 (order: 1, 8192 bytes)
[ 0.240865] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[ 0.241052] NET: Registered protocol family 1
[ 0.241512] gcc-mdss-8916 qcom,gcc-mdss.28: Registered GCC MDSS clocks.
[ 0.242192] Trying to unpack rootfs image as initramfs...
[ 0.266622] Freeing initrd memory: 520K (c2000000 - c2082000)
[ 0.269402] hw perfevents: enabled with ARMv8 Cortex-A53 PMU driver, 7 counters available
[ 0.271805] audit: initializing netlink socket (disabled)
[ 0.271833] type=2000 audit(0.229:1): initialized
[ 0.428675] fuse init (API version 7.22)
[ 0.429008] msgmni has been set to 753
[ 0.430792] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249)
[ 0.430800] io scheduler noop registered
[ 0.430806] io scheduler deadline registered
[ 0.430828] io scheduler row registered
[ 0.430982] io scheduler cfq registered (default)
[ 0.433127] platform qcom,smp2pgpio-ssr-smp2p-1-in.12: Driver smp2pgpio requests probe deferral
[ 0.433299] platform qcom,smp2pgpio-ssr-smp2p-1-out.13: Driver smp2pgpio requests probe deferral
[ 0.434122] platform qcom,smp2pgpio-ssr-smp2p-4-in.18: Driver smp2pgpio requests probe deferral
[ 0.434293] platform qcom,smp2pgpio-ssr-smp2p-4-out.19: Driver smp2pgpio requests probe deferral
[ 0.434772] mdss_mdp_probe: MDSS HW Base phy_Address=0x1a00000 virt=0xe1500000
[ 0.434787] mdss_mdp_probe: MDSS VBIF HW Base phy_Address=0x1ac8000 virt=0xe08ec000
[ 0.434841] mdss_mdp_pipe_addr_setup: type:1 ftchid:1 xinid:0 num:0 ndx:0x1 prio:0
[ 0.434854] mdss_mdp_pipe_addr_setup: type:2 ftchid:7 xinid:1 num:3 ndx:0x8 prio:1
[ 0.434861] mdss_mdp_pipe_addr_setup: type:2 ftchid:8 xinid:5 num:4 ndx:0x10 prio:2
[ 0.434875] mdss_mdp_pipe_addr_setup: type:3 ftchid:4 xinid:2 num:6 ndx:0x40 prio:3
[ 0.434897] mdss_mdp_parse_dt_handler: Error from prop qcom,mdss-pipe-sw-reset-off : u32 array read
[ 0.435089] mdss_mdp_parse_dt_handler: Error from prop qcom,mdss-ib-factor-overlap : u32 array read
[ 0.435094] mdss_mdp_parse_dt_fudge_factors: err reading qcom,mdss-ib-factor-overlap
[ 0.435104] mdss_mdp_parse_dt_handler: Error from prop qcom,mdss-ib-factor-cmd : u32 array read
[ 0.435110] mdss_mdp_parse_dt_fudge_factors: err reading qcom,mdss-ib-factor-cmd
[ 0.435128] mdss_mdp_parse_dt_prop_len: prop qcom,mdss-clk-levels : doesn't exist in device tree
[ 0.435149] mdss_mdp_parse_dt_prop_len: prop qcom,mdss-ad-off : doesn't exist in device tree
[ 0.435387] mdss_mdp_irq_clk_register: unable to get clk: lut_clk
[ 0.437027] msm-tlmmv4-pinctrl 1000000.pinctrl: does not have pin group mdss-pins
[ 0.437037] msm-tlmmv4-pinctrl 1000000.pinctrl: could not map group config for "mdss-pins"
[ 0.437049] pinmux core: msm-pinctrl does not support function mdss-pins-func
[ 0.437057] msm-tlmmv4-pinctrl 1000000.pinctrl: invalid function mdss-pins-func in map table
[ 0.437069] msm-tlmmv4-pinctrl 1000000.pinctrl: does not have pin group mdss-pins
[ 0.437077] msm-tlmmv4-pinctrl 1000000.pinctrl: could not map group config for "mdss-pins"
[ 0.437086] pinmux core: msm-pinctrl does not support function mdss-pins-func
[ 0.437093] msm-tlmmv4-pinctrl 1000000.pinctrl: invalid function mdss-pins-func in map table
[ 0.437123] mdss_dsi_ctrl_probe: DSI Ctrl name = MDSS DSI CTRL->0
[ 0.437225] msm-tlmmv4-pinctrl 1000000.pinctrl: does not have pin group mdss-pins
[ 0.437233] msm-tlmmv4-pinctrl 1000000.pinctrl: could not map group config for "mdss-pins"
[ 0.437243] pinmux core: msm-pinctrl does not support function mdss-pins-func
[ 0.437251] msm-tlmmv4-pinctrl 1000000.pinctrl: invalid function mdss-pins-func in map table
[ 0.437262] msm-tlmmv4-pinctrl 1000000.pinctrl: does not have pin group mdss-pins
[ 0.437269] msm-tlmmv4-pinctrl 1000000.pinctrl: could not map group config for "mdss-pins"
[ 0.437278] pinmux core: msm-pinctrl does not support function mdss-pins-func
[ 0.437285] msm-tlmmv4-pinctrl 1000000.pinctrl: invalid function mdss-pins-func in map table
[ 0.437295] mdss_dsi_pinctrl_init: failed to get pinctrl
[ 0.437300] mdss_dsi_ctrl_probe: failed to get pin resources
[ 0.437341] mdss_dsi_ctrl_probe:1504:dsi specific cfg not present
[ 0.437354] mdss_dsi_panel_init: Panel Name = s55hd30m043_720p video mode dsi panel
/// snipped since post is too long... this is ridiculuos
It enumerates as 05c6:f000 Qualcomm, Inc. Android and spawns an MTP devices (which throws an error at least on ubuntu, not tried on Windows yet).
I tried pressing several buttons while attaching USB-power (power button, reset button, both) but could not get it into fastboot or anything, also no adb when booted (at least not in mass storage mode 
)
At some point, I also managed to have it enumerate as RNDIS, probably when booting with buttons pressed, but I could not find a network interface being created.
I could then also access the shell via serial, some output from cat /sys/kernel/debug/gpio:
GPIOs 902-1023, platform/1000000.pinctrl, msm_tlmm_v4_gpio:
gpio-910 (wifi ) out hi
gpio-911 (sms ) out lo
gpio-914 (mic_ext_bias ) out hi
gpio-918 (red ) out hi
gpio-920 (green ) out lo
gpio-921 (blue ) out lo
gpio-922 (ext_pa_enable ) out lo
gpio-925 (key_reset ) in hi
gpio-926 (bat_red ) out hi
gpio-927 (bat_green ) out lo
gpio-933 (ext_mbhc_det ) in lo
gpio-938 (spilcd-bkl-gpio ) in lo
gpio-1009 (volume_up ) in lo
gpio-1022 (key_wps ) in hi
I also tried the edl tool as suggested by @JoffeL, but could not get it into edl mode yet, so shorting USB D+ to GND is supposed to be an option? so I need to use the battery apparently, since it would not enumerate to my host when a USB data line ist pulled low. Any suggestions on dumping the firmware here?
I definitely remember I had successfully flashed one of those USB dongles to OpenWrt built from a commit in this thread before, but can't remember how I flashed it back then...
if you can access it via adb you could try adb reboot edl if you have not already.
And if you don't have a shell and if it is the same manufacturer you could try to get one by calling the usbdebug.html on your routers interface.
that's usually:
http://192.168.100.1/usbdebug.html
This enables a root shell to the device via adb since (at least) firmware version V2.3.7
Hello,
Can you please guide how you installed openwrt on it, I got the same model (UZ801_V3.0) yesterday but I don't have a clue on how to get in.
Also, were you able to get the sim work?
Hi,
I have UZ801 v3.0, and I don't have any idea on how to get in.
Can you please help me get openwrt installed on it.
My objective is to have usb dongle with vpn client on it.
Regards
I went for Openstick instead of OpenWrt actually. Link
Remember to login to the modem before any activities and stash original FW files, you'll need them later. Just look for 'firmware' in /
thank you, were you able to use to sim?
Also I'm not very techi. Is there step by step guide available somewhere?
Thank you in advance.