Implement ipq60xx support (shameless plug)

mrnuke commented 2 years ago

I have a TP-Link EAP610-Outdoor that I'd like to support. The purpose of this shameless plug is to let people know I'm working on a ipq60xx device.

I've started implementing it here: https://github.com/mrnuke/openwrt/commits/eap610-outdoor

It's based heavily on the existing ipq807x work from this repo. I don't have a plan on this this might be merged, but since it relies on nss-packages for the time being, I would like it to go through this repo first. I'll happily takes comments, concerns or suggestions in this issue.

Status

[x] Serial console and basic booting
[x] Wired networking (via qca-nss-dp and qca-ssdk)
- [x] MAC address extracted from factory data
- [x] Realtek PHY driver included by default
[ ] Wireless networking (ath11k)
- [x] 2.4GHz/5GHz
- [ ] 160 MHz channels on 5GHz
- [ ] Board firmware included by default
[ ] Other stuff?

robimarko commented 2 years ago

I have started poking around IPQ60xx a month ago, done some basic fixes that were quickly merged upstream. CPU scaling is completely broken in the kernel, it is pending merge upstream.

Plenty of other stuff is missing as well, the issue is that I only have the CP01 dev board(A crappy Wallys one) and EAP101 as far as the HW goes.

So, this is pretty much on TODO list.

mrnuke commented 2 years ago

I'll leave the CPU scaling to the experts (that's you @robimarko).

I'm currentlly looking at:

Identify minimalist set of required patches
Get ethernet working via nss-dp (scary: Realtek PHY has an upstream driver in 5.15)
Get WiFi working on the assumption that working driver exists

robimarko commented 2 years ago

ath11k should work, at least it worked for me couple of months ago

mrnuke commented 2 years ago

How did you get the q6v5_wcss: remoteproc@cd00000 node to load a driver? The compatible = "qcom,ipq6018-wcss-pil"; property is in the upstream dtsi, yet I was not able to find a corresponding driver.

robimarko commented 2 years ago

Well, like I said a ton of stuff is missing, WCSS is one of them. You need the WCSS series from IPQ807x and then to add compatible in the driver for IPQ6018. I am not sure if there are missing clocks as well

mrnuke commented 2 years ago

I'm not quite getting the ethernet working with qca-nss-dp and qca-ssdk.. The driver loads, eth0 appears, but no packets go through -- ess switch, uniphy, and edma nodes are present in dtb. I noticed a couple of clock failures:

[    1.490360] ssdk_uniphy_port5_clock_source_set[1031]:INFO: ( nss_port5_rx_clk_src :: uniphy1_gcc_rx_clk )
[    1.490384] ssdk_uniphy_port5_clock_source_set[1037]:ERROR:set parent fail: -22!
[    1.499981] ssdk_uniphy_port5_clock_source_set[1031]:INFO: ( nss_port5_tx_clk_src :: uniphy1_gcc_tx_clk )
[    1.499999] ssdk_uniphy_port5_clock_source_set[1037]:ERROR:set parent fail: -22!

But, the clocks exist:

root@OpenWrt:/# ls /sys/kernel/debug/clk/uniphy1* -d
/sys/kernel/debug/clk/uniphy1_gcc_rx_clk
/sys/kernel/debug/clk/uniphy1_gcc_tx_clk
root@OpenWrt:/# ls /sys/kernel/debug/clk/nss_port5* -d
/sys/kernel/debug/clk/nss_port5_rx_clk_src
/sys/kernel/debug/clk/nss_port5_rx_div_clk_src
/sys/kernel/debug/clk/nss_port5_tx_clk_src
/sys/kernel/debug/clk/nss_port5_tx_div_clk_src

Is this something you've seen before?

EDIT: I just noticed a separate branch for ipq60xx on your nss-packages repo. I will try that first...

robimarko commented 2 years ago

As I said before, there are clocks missing or broken for sure. Resets for networking are missing for sure, that I know of.

solidus1983 commented 2 years ago

I have IPQ6018 GL-Flint i could help test with on this with UART connection.

mrnuke commented 2 years ago

@solidus1983, I have some peripherals working on my eap610-outdoor branch, to which I force-push regularly.

Wifi and ethernet are not working. Board reboots when enabling WiFi. Ethernet via nss-dp-drv complains about some clocks and doesn't send any interface traffic -- or there's a kernel panic related to edma. Trying to follow @robimarko's advice about locating the missing bits.

solidus1983 commented 2 years ago

@mrnuke Thanks for the reply, i take it this is not using the QSDK kernel 5.4? Also could clocks be in the dts file ? if so maybe looking at another IPQ6018 SOC's dts which has working clocks might help no ?

Else the offer is still open for testing. I have yet to start coding and currently learning. I take it this is C# being used ?

What i do know is that GL-Inet has been using the IPQ807x drivers for IPQ6018 so it might be a good start there possibly.

robimarko commented 2 years ago

DTS is just a way to describe the HW, it doesn't actually implement anything. There is a lot of clock related stuff missing, PLLs are using outdated config etc

solidus1983 commented 2 years ago

@robimarko I am new to all this to be honest, so thinking out side the box so to speak.

mrnuke commented 2 years ago

@robimarko, I'm trying to understand what they did in the QCA 5.4 downstream kernel. Cherry-picking a few clock commits fixes a lot of issues. I'm not understanding why they would change the nss_port clk parents from .parent_data to .parent_names.

The claim is it fixes a crash, but I see it fixes the Clk set parent fail! complaint from qca-ssdk.

https://git.codelinaro.org/clo/qsdk/oss/kernel/linux-ipq-5.4/-/commit/d7022cd843188144ec6bf7e996552d2104da4a62

robimarko commented 2 years ago

Ughh, they messed up like they always do, and instead of fixing that they just hack it. I assume they messed up the parenting as they only set fw_name which is locally available, but SSDK is trying to set parenting manually without them being available as you need to pass them by DT node.

So, what probably needs to be done instead of hacking it together and itself is a workaround for a lack of proper switch driver is to also set the .name property so it will still fallback to global clock names

mrnuke commented 2 years ago

You're right, just doing the following fixes the parenting issue

       { .fw_name = "uniphy0_gcc_rx_clk", .name = "uniphy0_gcc_rx_clk" },
       { .fw_name = "uniphy0_gcc_tx_clk", .name = "uniphy0_gcc_tx_clk" },
       { .fw_name = "uniphy1_gcc_rx_clk", .name = "uniphy1_gcc_rx_clk" },
       { .fw_name = "uniphy1_gcc_tx_clk", .name = "uniphy1_gcc_tx_clk" },

I noticed in the ipq807x branch, there are some ipq6018 fixes (which I promptly picked up). How can we keep my ports and your work in sync? I'm thinking if maybe there's a branch I can send you PR's to.

robimarko commented 2 years ago

Those are for the PLL so that clock scaling actually works instead of the broken sh*t QCA upstreamed like it never even worked from the start.

I dont have an OpenWrt tree at all as all I did on IPQ60xx was targeted at linux-next, my plan was to get working on it again after finishing IPQ807x which as you can tell is dragging on forever due to ath11k issues

mrnuke commented 2 years ago

It can be a kernel branch. I mostly do git format-patch -o ../openwrt/target/linux/ipq60xx/patches-5.15/ anyway. I want to make sure I have the things you consider important, and make sure you don't forward-port changes that I already cherry-picked.

mrnuke commented 2 years ago

I'm a bit stuck. On top of all the patches for ip807x-5.15 branch, I took changes form the QCA 5.4 kernel, related to clocks and wcss:

714e6b9ab711 "clk: ipq6018: Add missing clocks "
5b6c148bfb6c "ipq6018: rproc: Add non secure Q6 bringup sequence "
other misc patches relating to these two peripherals

Problem 1 is that, while nss-dp loads up and does not crash, the "TX bytes" of eth0 always shows up as 0.0 B. I can check with tcpdump that packets are received successfully. I also see packets being sent, but I can't see those packets on the other end of the wire.

Problem 2 is that the remoteproc crashes due to a watchdog. I suspected that might be clock related and set .need_mem_protection = false, to bring up up more clocks. ath11k then fails with Coldboot Calibration failed. IN either case, the system then unexpectedly reboots and hangs.

solidus1983 commented 2 years ago

So after looking at the current work that @mrnuke has done whats the best way to port the GL-AX1800 over. I have tried already with simply dumping in the QCA 5.4 Kernel dts and dtsi files over and that didn't compile well.

I am rather new to all this however i have UART on the board and willing to learn.

mrnuke commented 2 years ago

What I've done so far was to diff against QCA 5.4 kernel, and see what patches I need to cherry-pick. You can use most of the nodes from the eap610 dts. The ess-switch and dp@5 nodes might need some adjustment for your device. You might need to extract the factory firmware for that info, as well as the factory dtb, and board-specific wifi firmware. Once you plug in those pieces, we have to figure out why Ethernet isn't transmitting, and why wifi crashes.

solidus1983 commented 2 years ago

@mrnuke Well currently i build against the GL-iNet infrabuilder repo which has the dts/dtsi files and patches however doesn't seem to play nice with OpenWRT might be due to it being QCA 5.4 Kernel.

As for the Wireless crashes, when does it crash before or after it's been brought up? As for Ethernet no transmitting surely, that would be a driver issue.

mrnuke commented 2 years ago

The first step to get this running on OpenWRT is to get it running with an upstream kernel -- currently 5.15). You can start on top of my eap610-outdoor branch -- I force-push to it regularly.

Extracting vendor firmware

Good news! The GL-iNet images are simple QSDK upgrade images. You can analyze them easily:

$ dumpimage -V
dumpimage version 2022.04
$ dumpimage -l qsdk-ax1800-3.214-0509.img 
Image contains unit addresses @, this will break signing
FIT description: Flashing nand 800 20000
Created:         Sun May  8 23:23:36 2022
 Image 0 (script)

Filesystem

pip3 install ubi-reader --user

$ dumpimage qsdk-ax1800-3.214-0509.img -T flat_dt -p 4 -o qsdk-ubi
$ ubireader_extract_images qsdk-ubi 
$ ls -lh ubifs-root/qsdk-ubi/
-rw-r--r--. 1 mrnuke mrnuke 4.7M Sep 11 13:30 img-874724779_vol-kernel.ubifs
-rw-r--r--. 1 mrnuke mrnuke    0 Sep 11 13:30 img-874724779_vol-rootfs_data.ubifs
-rw-r--r--. 1 mrnuke mrnuke  31M Sep 11 13:30 img-874724779_vol-ubi_rootfs.ubifs
-rw-r--r--. 1 mrnuke mrnuke 2.0M Sep 11 13:30 img-874724779_vol-wifi_fw.ubifs

Kernel and devictree

$ dumpimage ubifs-root/qsdk-ubi/img-874724779_vol-kernel.ubifs -T flat_dt -p 7 -o extracted.dtb 
$ dtc -i dtb extracted.dtb

The correct dtb to extract depends on the configuration -- usually printed on the serial console on boot,

Wi-Fi Firmware

$ unsquashfs ubifs-root/qsdk-ubi/img-874724779_vol-wifi_fw.ubifs
$ ls squashfs-root/
bdwlan.b00  bdwlan.b20  bdwlan.bin                m3_fw.flist  q6_fw.b04    qdss_trace_config.bin
bdwlan.b01  bdwlan.b21  firmware_rdp_feature.ini  m3_fw.mdt    q6_fw.b05
bdwlan.b02  bdwlan.b22  fw_version.txt            q6_fw.b00    q6_fw.b07
bdwlan.b10  bdwlan.b23  m3_fw.b00                 q6_fw.b01    q6_fw.b08
bdwlan.b11  bdwlan.b30  m3_fw.b01                 q6_fw.b02    q6_fw.flist
bdwlan.b12  bdwlan.b31  m3_fw.b02                 q6_fw.b03    q6_fw.mdt

solidus1983 commented 2 years ago

Right, I followed your instructions so now have the files, Here is my serial output

ubi0: attaching mtd1
ubi0: scanning is finished
ubi0: volume 2 ("rootfs_data") re-sized from 9 to 506 LEBs
ubi0: attached mtd1 (name "mtd=0", size 115 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 920, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 3, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 1657885310
ubi0: available PEBs: 0, total reserved PEBs: 920, PEBs reserved for bad PEB handling: 20
Read 0 bytes from volume kernel to 44000000
No size specified -> Using max size (4063232)
## Loading kernel from FIT Image at 44000000 ...
   Using 'config@cp03-c1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM OpenWrt Linux-4.4.60
     Type:         Kernel Image
     Compression:  gzip compressed
     Data Start:   0x440000e4
     Data Size:    3985978 Bytes = 3.8 MiB
     Architecture: ARM
     OS:           Linux
     Load Address: 0x41008000
     Entry Point:  0x41008000
     Hash algo:    crc32
     Hash value:   4bf2c327
     Hash algo:    sha1
     Hash value:   064507b0273f725d7e578c796727934c297ade93
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 44000000 ...
   Using 'config@cp03-c1' configuration
   Trying 'fdt-1' fdt subimage
     Description:  ARM OpenWrt glinet_ax1800 device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x443cd458
     Data Size:    67013 Bytes = 65.4 KiB
     Architecture: ARM
     Hash algo:    crc32
     Hash value:   a62e6eb0
     Hash algo:    sha1
     Hash value:   bf7b3e4613b4121483f61c108819b4d2690ed21a
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x443cd458
   Uncompressing Kernel Image ... OK
   Loading Device Tree to 484ec000, end 484ff5c4 ... OK
Could not find PCI in device tree
Using machid 0x8030200 from environment

Starting kernel ...

So that should mean

$ dumpimage ubifs-root/qsdk-ubi/img-1666694895_vol-kernel.ubifs -T flat_dt -p 3 -o p3.dtb

I have attached the resulting files as a zip gl-ax1800.zip

mrnuke commented 2 years ago

Using 'config@cp03-c1' configuration

Okay, so dumpimage should list a configuration named config@cp03-c1, which has the corrrect dtb name. There should also an image node with the dtb name found.

$  dumpimage ubifs-root/qsdk-ubi/img-874724779_vol-kernel.ubifs -T flat_dt -p 7 -o extracted.dtb
...
 Image 7 (fdt@cp03-c1)
  Description:  ARM OpenWrt qcom-ipq60xx-cpxx device tree blob
...
 Configuration 6 (config@cp03-c1)
  Description:  OpenWrt
  Kernel:       kernel@1
  FDT:          fdt@cp03-c1

In this case it happens to be image 7 that has the correct DTB. The previous instructions give image 7 as the example, so should work.

My next suggestion is to get the ess-switch and dp1 -> dp5 nodes in the OpenWRT devicetree to look like the nodes in the extracted dtb. Note that dp nodes in openwrt use phy-handle instead of the qcom,reverse-rhodesian properties in the QSDK.

Does the vendor u-boot allow you to enter a console and boot from tftp? If so, would be interesting to feed it an initramfs image, and see if networking works on your device, or if it fails on TX.

solidus1983 commented 2 years ago

Yes i can break uboot with gl

Uboot Help

aq_load_fw- LOAD aq-fw-binary
aq_phy_restart- Restart Aquantia phy
base    - print or set address offset
bdinfo  - print Board Info structure
bootelf - Boot from an ELF image in memory
bootipq - bootipq from flash device
bootm   - boot application image from memory
bootp   - boot image via network using BOOTP/TFTP protocol
bootvx  - Boot vxWorks from an ELF image
bootz   - boot Linux zImage image from memory
canary  - test stack canary
chpart  - change active partition
cmp     - memory compare
coninfo - print console devices and information
cp      - memory copy
crc32   - checksum calculation
dcache  - enable or disable data cache
dhcp    - boot image via network using DHCP/TFTP protocol
dhcpd   - start dhcpd server

dm      - Driver model low level access
echo    - echo args to console
editenv - edit environment variable
env     - environment handling commands
erase   - erase FLASH memory
exectzt - execute TZT

exit    - exit script
false   - do nothing, unsuccessfully
fdt     - flattened device tree utility commands
flash   - flash part_name
        flash part_name load_addr file_size

flasherase- flerase part_name

flinfo  - print FLASH memory information
fuseipq - fuse QFPROM registers from memory

go      - start application at address 'addr'
gpio    - print gpio direction and value
help    - print command description/usage
httpd   - start www server for firmware recovery with [localAddress]

i2c     - I2C sub-system
icache  - enable or disable instruction cache
imxtract- extract a part of a multi-image
ipq_mdio- IPQ mdio utility commands
is_sec_boot_enabled- check secure boot fuse is enabled or not

itest   - return true/false on integer compare
loop    - infinite loop on address range
md      - memory display
mii     - MII utility commands
mm      - memory modify (auto-incrementing address)
mmc     - MMC sub system
mmcinfo - display MMC info
mtdparts- define flash/nand partitions
mtest   - simple RAM read/write test
mw      - memory write (fill)
nand    - NAND sub-system
nboot   - boot from NAND device
nm      - memory modify (constant address)
part    - disk partition related commands
pci     - list and access PCI Configuration Space
ping    - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
protect - enable or disable FLASH write protection
reset   - Perform RESET of the CPU
run     - run commands in an environment variable
runmulticore- Enable and schedule secondary cores
saveenv - save environment variables to persistent storage
secure_authenticate- authenticate the signed image

setenv  - set environment variables
setexpr - set environment variable as the result of eval expression
sf      - SPI flash sub-system
showvar - print local hushshell variables
sleep   - delay execution for some time
smeminfo- print SMEM FLASH information
source  - run script from memory
test    - minimal test like /bin/sh
tftpboot- boot image via network using TFTP protocol
tftpput - TFTP put command, for uploading files to a server
true    - do nothing, successfully
uart    - UART sub-system
ubi     - ubi commands
usb     - USB sub-system
usbboot - boot from USB device
version - print monitor, compiler and linker version

Also side note using dumpimage for -p 7 shows

dumper@dumper:~/qca6018$ dumpimage ubifs-root/qsdk-ubi/img-1666694895_vol-kernel.ubifs -T flat_dt -p 7 -o extracted.dtb
Extracted:
 Image 7 (fdt@cp01-c1)
  Description:  ARM OpenWrt qcom-ipq60xx-cpxx device tree blob
  Created:      Fri May 20 19:04:19 2022
  Type:         Flat Device Tree
  Compression:  uncompressed
  Data Size:    68714 Bytes = 67.10 KiB = 0.07 MiB
  Architecture: ARM
  Hash algo:    crc32
  Hash value:   6966c19c
  Hash algo:    sha1
  Hash value:   95b8684deb0a5d86a8cc621fa31a74281f1e768e

However doing it like

dumper@dumper:~/qca6018$ dumpimage ubifs-root/qsdk-ubi/img-1666694895_vol-kernel.ubifs -T flat_dt -p 3 -o extracted.dtb
Extracted:
 Image 3 (fdt@cp03-c1)
  Description:  ARM OpenWrt qcom-ipq60xx-cpxx device tree blob
  Created:      Fri May 20 19:04:19 2022
  Type:         Flat Device Tree
  Compression:  uncompressed
  Data Size:    61264 Bytes = 59.83 KiB = 0.06 MiB
  Architecture: ARM
  Hash algo:    crc32
  Hash value:   b13551d8
  Hash algo:    sha1
  Hash value:   7aac02316e9b8e11361229b93d5f52102f44eaca

edit.zip

Also here is the dtb output from extracted.dtb using dtc -i dtb extracted.dtb > edit.dtb

This is based on file qsdk-ax1800-3.215-0521.img

I have work in like 6 hours so going to hit the sack for now.

mrnuke commented 2 years ago

setenv ipaddr 192.168.7.69
setenv serverip 192.168.7.2
tftpboot openwrt-ipq.img
bootm

Replace serverip and ipaddr with your setuo.

solidus1983 commented 2 years ago

setenv ipaddr 192.168.7.69
setenv serverip 192.168.7.2
tftpboot openwrt-ipq.img
bootm
Replace serverip and ipaddr with your setuo.

Ok, where is the openwrt-ipq.img ?

mrnuke commented 2 years ago

That's the openwrt image you put on your tftp server:

$ tftp <serverip> -c put bin/targets/ipq60xx/generic/openwrt-ipq60xx-generic-eap610-outdoor-initramfs-fit-uImage.itb openwrt-ipq.img

solidus1983 commented 2 years ago

Do you have a copy of that image ? Saves booting the compiler up.

mrnuke commented 2 years ago

My eap610 image would be pretty useless without the devicetree adjustments described earlier

solidus1983 commented 2 years ago

My eap610 image would be pretty useless without the devicetree adjustments described earlier

Ah right will get on that later if i have free time. Thanks for you help though.

kirdesde commented 2 years ago

I'm a bit stuck. On top of all the patches for ip807x-5.15 branch, I took changes form the QCA 5.4 kernel, related to clocks and wcss:
* [714e6b9ab711 "clk: ipq6018: Add missing clocks "](https://git.codelinaro.org/clo/qsdk/oss/kernel/linux-ipq-5.4/-/commit/714e6b9ab711846cd09b94f83436e23932dd2814)

* [5b6c148bfb6c "ipq6018: rproc: Add non secure Q6 bringup sequence "](https://git.codelinaro.org/clo/qsdk/oss/kernel/linux-ipq-5.4/-/commit/5b6c148bfb6c25449c59a0a87896a90f883307fd)

* other misc patches relating to these two peripherals
Problem 1 is that, while nss-dp loads up and does not crash, the "TX bytes" of eth0 always shows up as 0.0 B. I can check with tcpdump that packets are received successfully. I also see packets being sent, but I can't see those packets on the other end of the wire.

Problem 2 is that the remoteproc crashes due to a watchdog. I suspected that might be clock related and set .need_mem_protection = false, to bring up up more clocks. ath11k then fails with Coldboot Calibration failed. IN either case, the system then unexpectedly reboots and hangs.

Hi. thanks for working on the ipq6018 target. I've got ath11k working (on a netgear WAX610)

coldboot calibration needs to disabled (like for the IPQ8074)

+++ b/drivers/net/wireless/ath/ath11k/core.c
@@ -158,7 +158,7 @@ static const struct ath11k_hw_params ath
    .supports_shadow_regs = false,
    .idle_ps = false,
    .supports_sta_ps = false,
-       .cold_boot_calib = true,
+       .cold_boot_calib = false,
    .fw_mem_mode = 0,
    .num_vdevs = 16 + 1,
    .num_peers = 512,

I'm using the following firmware from the quic upstream repo: WLAN.HK.2.6.0.1-00861 The 2.5.01 firmware led to a ath11k crash related to regulatory update.

BTW And the DP is working fine for me.

solidus1983 commented 2 years ago

setenv ipaddr 192.168.7.69
setenv serverip 192.168.7.2
tftpboot openwrt-ipq.img
bootm
Replace serverip and ipaddr with your setuo.
Ok, where is the openwrt-ipq.img ?

Wrong Image Format for bootm command
ERROR: can't get kernel image!

It simply give me the error above.

mrnuke commented 2 years ago

1. coldboot calibration needs to disabled (like for the IPQ8074)

Thanks you! That's what was causing most of the problems!

2. I'm using the following firmware from the quic upstream repo: WLAN.HK.2.6.0.1-00861
   The 2.5.01 firmware led to a ath11k crash related to regulatory update.

Once I got fix 1 in, I was able to access the device via wifi, despite an inordinate amount of nagging from ath11k. I got the new board-2.bin from quic repo here

BTW And the DP is working fine for me.

Let me guess. WAX610 uses a QCA phy that's supported in qca-ssdk, not some realtek variant, right?

kirdesde commented 2 years ago

1. coldboot calibration needs to disabled (like for the IPQ8074)
Thanks you! That's what was causing most of the problems!
2. I'm using the following firmware from the quic upstream repo: WLAN.HK.2.6.0.1-00861
   The 2.5.01 firmware led to a ath11k crash related to regulatory update.
Once I got fix 1 in, I was able to access the device via wifi, despite an inordinate amount of nagging from ath11k. I got the new board-2.bin from quic repo here

BTW And the DP is working fine for me.

Let me guess. WAX610 uses a QCA phy that's supported in qca-ssdk, not some realtek variant, right?

Yeah, it's a QCA8081. Is qca-nss-dp even necessary for the realtek phy? Does the stock firmware uses the DP? If so, they have probably patched the qca-nss-dp to support the realtek phy. Can you provide the dmesg output for the DP from the stock firmware?

mrnuke commented 2 years ago

Serial log of EAP610-Outdoor on vendor Firmware

IPQ6018# setenv bootargs
IPQ6018# bootipq
ubi0: attaching mtd1
ubi0: scanning is finished
ubi0: attached mtd1 (name "mtd=0", size 33 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 269, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 1172702875
ubi0: available PEBs: 122, total reserved PEBs: 147, PEBs reserved for bad PEB handling: 20
checking volume(ubi_rootfs) passed
checking volume(kernel) passed
Read 0 bytes from volume kernel to 44000000
No size specified -> Using max size (3691040)
fdt_getprop find dtb_config_name config@cp03-c1
bootm 0x44000000#config@cp03-c1
## Loading kernel from FIT Image at 44000000 ...
   Using 'config@cp03-c1' configuration
   Trying 'kernel@1' kernel subimage
     Description:  ARM64 OpenWrt Linux-4.4.60
     Type:         Kernel Image
     Compression:  gzip compressed
     Data Start:   0x440000e8
     Data Size:    3616720 Bytes = 3.4 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x41080000
     Entry Point:  0x41080000
     Hash algo:    crc32
     Hash value:   8dc1f352
     Hash algo:    sha1
     Hash value:   858dae32e65cb82e6e81305c9a257d008fd4b2ef
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 44000000 ...
   Using 'config@cp03-c1' configuration
   Trying 'fdt@cp03-c1' fdt subimage
     Description:  ARM64 OpenWrt qcom-ipq6018-cp03-c1 device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x44373200
     Data Size:    71440 Bytes = 69.8 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   0ab25e08
     Hash algo:    sha1
     Hash value:   2c7b142b854aa98a1b5ea46674528bebe3d4bbca
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x44373200
   Uncompressing Kernel Image ... OK
   Loading Device Tree to 484eb000, end 484ff70f ... OK
Could not find PCI in device tree
Using machid 0x8030200 from environment
Starting kernel ...
Jumping to AARCH64 kernel via monitor
[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Initializing cgroup subsys cpuset
[    0.000000] Initializing cgroup subsys cpu
[    0.000000] Initializing cgroup subsys cpuacct
[    0.000000] Linux version 4.4.60 (jenkins@sohoiapbuild) (gcc version 5.2.0 (OpenWrt GCC 5.2.0 ff0b127+r49254) ) #1 SMP PREEMPT Wed Jan 26 10:54:35 CST 2022
[    0.000000] Boot CPU: AArch64 Processor [51af8014]
[    0.000000] Ignoring memory range 0x40000000 - 0x41000000
[    0.000000] Machine: Qualcomm Technologies, Inc. IPQ6018/AP-CP03-C1
[    0.000000] efi: Getting EFI parameters from FDT:
[    0.000000] efi: UEFI not found.
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv1.0 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.
[    0.000000] PERCPU: Embedded 15 pages/cpu @ffffffc01ef60000 s20608 r8192 d32640 u61440
[    0.000000] Detected VIPT I-cache on CPU0
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 109620
[    0.000000] Kernel command line: ubi.mtd=rootfs root=mtd:ubi_rootfs rootfstype=squashfs rootwait swiotlb=1 coherent_pool=2M
[    0.000000] PID hash table entries: 2048 (order: 2, 16384 bytes)
[    0.000000] Dentry cache hash table entries: 65536 (order: 7, 524288 bytes)
[    0.000000] Inode-cache hash table entries: 32768 (order: 6, 262144 bytes)
[    0.000000] software IO TLB [mem 0x5fe5b000-0x5fe9b000] (0MB) mapped at [ffffffc01ee5b000-ffffffc01ee9afff]
[    0.000000] Memory: 418992K/445440K available (4868K kernel code, 576K rwdata, 2136K rodata, 232K init, 365K bss, 26448K reserved, 0K cma-reserved)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vmalloc : 0xffffff8000000000 - 0xffffffbdbfff0000   (   246 GB)
[    0.000000]     vmemmap : 0xffffffbdc0000000 - 0xffffffbfc0000000   (     8 GB maximum)
[    0.000000]               0xffffffbdc0040000 - 0xffffffbdc0800000   (     7 MB actual)
[    0.000000]     fixed   : 0xffffffbffa7fd000 - 0xffffffbffac00000   (  4108 KB)
[    0.000000]     PCI I/O : 0xffffffbffae00000 - 0xffffffbffbe00000   (    16 MB)
[    0.000000]     modules : 0xffffffbffc000000 - 0xffffffc000000000   (    64 MB)
[    0.000000]     memory  : 0xffffffc000000000 - 0xffffffc01f000000   (   496 MB)
[    0.000000]       .init : 0xffffffc000759000 - 0xffffffc000793000   (   232 KB)
[    0.000000]       .text : 0xffffffc000080000 - 0xffffffc000759000   (  7012 KB)
[    0.000000]       .data : 0xffffffc0007a0000 - 0xffffffc000830200   (   577 KB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Preemptible hierarchical RCU implementation.
[    0.000000]  Build-time adjustment of leaf fanout to 64.
[    0.000000] NR_IRQS:64 nr_irqs:64 0
[    0.000000] Architected cp15 timer(s) running at 24.00MHz (virt).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x588fe9dc0, max_idle_ns: 440795202592 ns
[    0.000005] sched_clock: 56 bits at 24MHz, resolution 41ns, wraps every 4398046511097ns
[    0.000421] Calibrating delay loop (skipped), value calculated using timer frequency.. 48.00 BogoMIPS (lpj=240000)
[    0.000433] pid_max: default: 32768 minimum: 301
[    0.000525] Mount-cache hash table entries: 1024 (order: 1, 8192 bytes)
[    0.000534] Mountpoint-cache hash table entries: 1024 (order: 1, 8192 bytes)
[    0.001075] Initializing cgroup subsys io
[    0.001091] Initializing cgroup subsys memory
[    0.001118] Initializing cgroup subsys devices
[    0.001132] Initializing cgroup subsys freezer
[    0.001142] Initializing cgroup subsys net_cls
[    0.001152] Initializing cgroup subsys pids
[    0.001399] EFI services will not be available.
[    0.001420] ASID allocator initialised with 65536 entries
[    0.051776] MSM Memory Dump base table set up
[    0.051798] MSM Memory Dump apps data table set up
[    0.090134] Detected VIPT I-cache on CPU1
[    0.090177] CPU1: Booted secondary processor [51af8014]
[    0.120120] Detected VIPT I-cache on CPU2
[    0.120147] CPU2: Booted secondary processor [51af8014]
[    0.150149] Detected VIPT I-cache on CPU3
[    0.150175] CPU3: Booted secondary processor [51af8014]
[    0.150229] Brought up 4 CPUs
[    0.150254] SMP: Total of 4 processors activated.
[    0.150263] CPU: All CPU(s) started at EL1
[    0.165041] DMI not present or invalid.
[    0.165275] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.165298] futex hash table entries: 1024 (order: 5, 131072 bytes)
[    0.165659] pinctrl core: initialized pinctrl subsystem
[    0.166665] NET: Registered protocol family 16
[    0.190076] cpuidle: using governor ladder
[    0.220093] cpuidle: using governor menu
[    0.220300] NET: Registered protocol family 42
[    0.220369] vdso: 2 pages (1 code @ ffffffc0007a5000, 1 data @ ffffffc0007a4000)
[    0.220398] hw-breakpoint: found 6 breakpoint and 4 watchpoint registers.
[    0.221308] DMA: preallocated 2048 KiB pool for atomic allocations
[    0.221437] CPU: IPQ6000, SoC Version: 1.0
[    0.221853] IPC logging disabled
[    0.221859] IPC logging disabled
[    0.221864] IPC logging disabled
[    0.221869] IPC logging disabled
[    0.221873] IPC logging disabled
[    0.237957] irq: no irq domain found for /soc/smp2p-wcss/slave-kernel !
[    0.238771] sps:sps is ready.
[    0.241841] irq: no irq domain found for /soc/smp2p-wcss/slave-kernel !
[    0.249554] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 4
[    0.280927] socinfo_select_format: Unsupported format v0.13. Falling back to v0.12.
[    0.280951] socinfo_print: v0.12, id=421, ver=1.0, raw_id=313, raw_ver=0, hw_plat=8, hw_plat_ver=196610
[    0.280951]  accessory_chip=0, hw_plat_subtype=0, pmic_model=0, pmic_die_revision=0 foundry_id=2 serial_number=1691199702 num_pmics=0 chip_family=0x66 raw_device_family=0x2 raw_device_number=0x17
[    0.281672] pps_core: LinuxPPS API ver. 1 registered
[    0.281679] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti 
[    0.281706] PTP clock support registered
[    0.281753] dmi: Firmware registration failed.
[    0.283196] rpmsg_dev_probe: No pm domain
[    0.284625] clocksource: Switched to clocksource arch_sys_counter
[    0.286885] NET: Registered protocol family 2
[    0.287372] TCP established hash table entries: 4096 (order: 3, 32768 bytes)
[    0.287432] TCP bind hash table entries: 4096 (order: 4, 65536 bytes)
[    0.287529] TCP: Hash tables configured (established 4096 bind 4096)
[    0.287574] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    0.287597] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    0.287755] NET: Registered protocol family 1
[    0.288394] hw perfevents: enabled with armv8_cortex_a53 PMU driver, 7 counters available
[    0.296061] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.296077] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.299430] Key type asymmetric registered
[    0.299445] Asymmetric key parser 'x509' registered
[    0.299474] io scheduler noop registered
[    0.299487] io scheduler deadline registered (default)
[    0.305712] msm_rpm_log_probe: OK
[    0.305988] msm-dcc b3000.dcc: DCC XPU is not specified
[    0.306236] msm-dcc b3000.dcc: jiffies_64: 0xffff8aee, cntvct_64: 0x1b2f01c1
[    0.306248] msm-dcc b3000.dcc: gcnt_hi: 0x00000000(0xffffff800021e004)
[    0.306259] msm-dcc b3000.dcc: gcnt_lo: 0x1b2f03fb(0xffffff800021e000)
[    0.306868] TZ SMMU State: SMMU Stage2 Enabled
[    0.306920] TZ Log : Will warn on Access Violation, as paniconaccessviolation is not set
[    0.307069] rpmsg_dev_probe: No pm domain
[    0.307660] msm_serial 78b1000.serial: msm_serial: detected port #0
[    0.307691] msm_serial 78b1000.serial: uartclk = 1843200
[    0.307723] 78b1000.serial: ttyMSM0 at MMIO 0x78b1000 (irq = 5, base_baud = 115200) is a MSM
[    0.307740] msm_serial: console setup on port #0
[    1.011751] console [ttyMSM0] enabled
[    1.016638] msm_serial: driver initialized
[    1.020137] msm_serial_hsl_init: driver initialized
[    1.032734] brd: module loaded
[    1.033376] spi_qup 78b5000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64
[    1.036585] QPIC controller hw version Major:1, Minor:5
[    1.042201] nand: device found, Manufacturer ID: 0xc8, Chip ID: 0x61
[    1.046905] nand: ONFI 10-Compliant GigaDevice PSR1GA30DT
[    1.053427] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    1.058847] 18 ofpart partitions found on MTD device qcom_nand.0
[    1.066206] Creating 18 MTD partitions on "qcom_nand.0":
[    1.072353] 0x000000000000-0x000000180000 : "0:SBL1"
[    1.079707] 0x000000180000-0x000000280000 : "0:MIBIB"
[    1.084115] 0x000000280000-0x000000380000 : "0:BOOTCONFIG"
[    1.089111] 0x000000380000-0x000000480000 : "0:BOOTCONFIG1"
[    1.094422] 0x000000480000-0x000000800000 : "0:QSEE"
[    1.102143] 0x000000800000-0x000000880000 : "0:DEVCFG"
[    1.104680] 0x000000880000-0x000000900000 : "0:RPM"
[    1.109599] 0x000000900000-0x000000980000 : "0:CDT"
[    1.114370] 0x000000980000-0x000000dc0000 : "0:APPSBLENV"
[    1.122582] 0x000000dc0000-0x0000010c0000 : "0:APPSBL"
[    1.126979] 0x0000010c0000-0x0000013c0000 : "0:APPSBL_1"
[    1.131995] 0x0000013c0000-0x0000014c0000 : "oops"
[    1.135750] 0x0000014c0000-0x000003660000 : "rootfs"
[    1.169294] mtd: device 12 (rootfs) set to be root filesystem
[    1.169616] mtdsplit: no squashfs found in "rootfs"
[    1.174017] 0x000003660000-0x000005800000 : "rootfs_1"
[    1.209211] 0x000005800000-0x000006000000 : "factory_data"
[    1.216920] 0x000006000000-0x000006c00000 : "runtime_data"
[    1.228047] 0x000006c00000-0x000007400000 : "backup_data"
[    1.235810] 0x000007400000-0x000007a00000 : "runtime_back"
[    1.242529] libphy: Fixed MDIO Bus: probed
[    1.683365] qca-mdio 90000.mdio: Could not find phy-reset-gpio
[    1.683477] libphy: qca_mdio: probed
[    1.688479] qca-mdio 90000.mdio: qca-mdio driver was registered
[    1.691921] Unable to create IPC log context!
[    1.697900] cnss: Platform driver probed successfully. plat ffffffc01d2f2018 tgt 0xfffd
[    1.702161] i2c /dev entries driver
[    1.714079] device-mapper: ioctl: 4.34.0-ioctl (2015-10-28) initialised: dm-devel@redhat.com
[    1.715209] qcom_ice_get_device_tree_data: No vdd-hba-supply regulator, assuming not needed
[    1.721989] ICE IRQ = 15
[    1.730514] 
[    1.730514] Version Rollback Feature Disabled
[    1.735248] qcom-q6v5-wcss-pil cd00000.qcom_q6v5_wcss: ssr registeration success qcom_q6v5_wcss
[    1.738497] remoteproc remoteproc0: cd00000.qcom_q6v5_wcss is available
[    1.747680] of_graph_get_next_endpoint(): no port node found in /soc/csr@6001000
[    1.753696] coresight-csr 6001000.csr: CSR initialized
[    1.761405] of_graph_get_next_endpoint(): no port node found in /soc/cti@6010000
[    1.766372] of_graph_get_next_endpoint(): no port node found in /soc/cti@6011000
[    1.773902] of_graph_get_next_endpoint(): no port node found in /soc/cti@6012000
[    1.781289] of_graph_get_next_endpoint(): no port node found in /soc/cti@6013000
[    1.788679] of_graph_get_next_endpoint(): no port node found in /soc/cti@6014000
[    1.796044] of_graph_get_next_endpoint(): no port node found in /soc/cti@6015000
[    1.803409] of_graph_get_next_endpoint(): no port node found in /soc/cti@6016000
[    1.810810] of_graph_get_next_endpoint(): no port node found in /soc/cti@6017000
[    1.818179] of_graph_get_next_endpoint(): no port node found in /soc/cti@6018000
[    1.825568] of_graph_get_next_endpoint(): no port node found in /soc/cti@6019000
[    1.832926] of_graph_get_next_endpoint(): no port node found in /soc/cti@601a000
[    1.840324] of_graph_get_next_endpoint(): no port node found in /soc/cti@601b000
[    1.847698] of_graph_get_next_endpoint(): no port node found in /soc/cti@601c000
[    1.855078] of_graph_get_next_endpoint(): no port node found in /soc/cti@601d000
[    1.862441] of_graph_get_next_endpoint(): no port node found in /soc/cti@601e000
[    1.869837] of_graph_get_next_endpoint(): no port node found in /soc/cti@601f000
[    1.877217] of_graph_get_next_endpoint(): no port node found in /soc/cti@6198000
[    1.884735] of_graph_get_next_endpoint(): no port node found in /soc/cti@6199000
[    1.892067] of_graph_get_next_endpoint(): no port node found in /soc/cti@619a000
[    1.899495] of_graph_get_next_endpoint(): no port node found in /soc/cti@619b000
[    1.906912] of_graph_get_next_endpoint(): no port node found in /soc/cti@610c000
[    1.914239] sps_register_bam_device : unable to create IPC Logging 0 for bam 0x0000000006064000
[    1.921349] sps_register_bam_device : unable to create IPC Logging 1 for bam 0x0000000006064000sps_register_bam_device : unable to create IPC Logging 2 for bam 0x0000000006064000
[    1.938442] sps_register_bam_device : unable to create IPC Logging 3 for bam 0x0000000006064000sps_register_bam_device : unable to create IPC Logging 4 for bam 0x0000000006064000
[    1.954316] sps:BAM 0x0000000006064000 is registered.[    1.962015] coresight-tmc 6048000.tmc: TMC initialized
[    1.966757] coresight-tmc 6047000.tmc: TMC initialized
[    1.971892] coresight-funnel 6041000.funnel: FUNNEL initialized
[    1.976953] coresight-funnel 6100000.funnel: FUNNEL initialized
[    1.982735] coresight-funnel 6130000.funnel: FUNNEL initialized
[    1.988659] coresight-funnel 6120000.funnel: FUNNEL initialized
[    1.994558] coresight-funnel 61a1000.funnel: FUNNEL initialized
[    2.000987] coresight-etm4x 619c000.etm: ETM 4.0 initialized
[    2.006684] coresight-etm4x 619d000.etm: ETM 4.0 initialized
[    2.012605] coresight-etm4x 619e000.etm: ETM 4.0 initialized
[    2.018304] coresight-etm4x 619f000.etm: ETM 4.0 initialized
[    2.023572] coresight-replicator-qcom 6046000.replicator: REPLICATOR 1.0 initialized
[    2.029328] coresight-stm 6002000.stm: STM initialized
[    2.037797] of_graph_get_next_endpoint(): no port node found in /soc/hwevent@6101000
[    2.041732] coresight-hwevent 6101000.hwevent: Hardware Event driver initialized
[    2.049948] NET: Registered protocol family 17
[    2.056980] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
[    2.061190] 8021q: 802.1Q VLAN Support v1.8
[    2.075321] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 4
[    2.079086] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 4
[    2.085355] cpr4_ipq807x_apss_read_fuse_data: apc_corner: speed bin = 0
[    2.092422] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR fusing revision = 2
[    2.099057] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR misc fuse value = 0
[    2.106707] cpr4_ipq807x_apss_read_fuse_data: apc_corner: Voltage boost fuse config = 0 boost = disable
[    2.114188] cpr3_mem_acc_init: apc: not using memory accelerator regulator
[    2.123340] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused      SVS: open-loop= 675000 uV
[    2.130288] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused      NOM: open-loop= 787500 uV
[    2.140270] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused    TURBO: open-loop= 850000 uV
[    2.150078] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused   STURBO: open-loop= 900000 uV
[    2.159918] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused      SVS: quot[ 7]= 592, quot_offset[ 7]=   0
[    2.169701] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused      NOM: quot[ 7]= 783, quot_offset[ 7]= 190
[    2.180549] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused    TURBO: quot[ 7]= 882, quot_offset[ 7]=  95
[    2.191486] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused   STURBO: quot[ 7]= 954, quot_offset[ 7]=  70
[    2.202639] cpr3_regulator_init_ctrl: apc: Default CPR mode = closed-loop
[    2.214972] cpufreq: cpufreq_online: CPU0: Running at unlisted freq: 799999 KHz
[    2.220790] cpufreq: cpufreq_online: CPU0: Unlisted initial frequency changed to: 864000 KHz
[    2.228193] ubi0: attaching mtd12
[    2.410569] ubi0: scanning is finished
[    2.417258] ubi0: attached mtd12 (name "rootfs", size 33 MiB)
[    2.417278] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    2.421973] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    2.428756] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    2.435609] ubi0: good PEBs: 269, bad PEBs: 0, corrupted PEBs: 0
[    2.442371] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[    2.448629] ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 1172702875
[    2.455666] ubi0: available PEBs: 122, total reserved PEBs: 147, PEBs reserved for bad PEB handling: 20
[    2.464961] ubi0: background thread "ubi_bgt0d" started, PID 106
[    2.474823] hctosys: unable to open rtc device (rtc0)
[    2.648002] random: nonblocking pool is initialized
[    4.112545] VFS: Mounted root (squashfs filesystem) readonly on device 31:18.
[    4.112697] Freeing unused kernel memory: 232K (ffffffc000759000 - ffffffc000793000)
[    4.118696] Freeing alternatives memory: 36K (ffffffc000793000 - ffffffc00079c000)
init started: BusyBox v1.20.2 (2022-01-26 11:08:04 CST)
starting pid 113, tty '': '/etc/rc.d/rcS >/dev/console 2>&1'
[    4.459418] ubi1: attaching mtd14
[    4.501341] ubi1: scanning is finished
[    4.507880] ubi1: attached mtd14 (name "factory_data", size 8 MiB)
[    4.507902] ubi1: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    4.512943] ubi1: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    4.519812] ubi1: VID header offset: 2048 (aligned 2048), data offset: 4096
[    4.526669] ubi1: good PEBs: 64, bad PEBs: 0, corrupted PEBs: 0
[    4.533426] ubi1: user volume: 1, internal volumes: 1, max. volumes count: 128
[    4.539340] ubi1: max/mean erase counter: 12/4, WL threshold: 4096, image sequence number: 709531835
[    4.546636] ubi1: available PEBs: 0, total reserved PEBs: 64, PEBs reserved for bad PEB handling: 20
[    4.555935] ubi1: background thread "ubi_bgt1d" started, PID 136
UBI device number 1, total 64 LEBs (8126464 bytes, 7.8 MiB), available 0 LEBs (0 bytes), LEB size 126976 bytes (124.0 KiB)
ubi_factory_data found, mounting...
[    4.581941] UBIFS (ubi1:0): background thread "ubifs_bgt1_0" started, PID 142
[    4.618154] UBIFS (ubi1:0): recovery needed
[    4.701073] UBIFS (ubi1:0): recovery completed
[    4.701136] UBIFS (ubi1:0): UBIFS: mounted UBI device 1, volume 0, name "ubi_factory_data"
[    4.704403] UBIFS (ubi1:0): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[    4.712669] UBIFS (ubi1:0): FS size: 3809280 bytes (3 MiB, 30 LEBs), journal size 1269760 bytes (1 MiB, 10 LEBs)
[    4.722642] UBIFS (ubi1:0): reserved for root: 0 bytes (0 KiB)
[    4.732881] UBIFS (ubi1:0): media format: w4/r0 (latest is w4/r0), UUID 71591CB7-1B7A-4F1E-920C-34C0F820CC7C, small LPT model
[    4.744924] ubi2: attaching mtd16
[    4.791686] ubi2: scanning is finished
[    4.798215] ubi2: attached mtd16 (name "backup_data", size 8 MiB)
[    4.798236] ubi2: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    4.803277] ubi2: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    4.810061] ubi2: VID header offset: 2048 (aligned 2048), data offset: 4096
[    4.816917] ubi2: good PEBs: 64, bad PEBs: 0, corrupted PEBs: 0
[    4.823674] ubi2: user volume: 1, internal volumes: 1, max. volumes count: 128
[    4.829588] ubi2: max/mean erase counter: 4/2, WL threshold: 4096, image sequence number: 1075435203
[    4.836884] ubi2: available PEBs: 0, total reserved PEBs: 64, PEBs reserved for bad PEB handling: 20
[    4.846180] ubi2: background thread "ubi_bgt2d" started, PID 148
UBI device number 2, total 64 LEBs (8126464 bytes, 7.8 MiB), available 0 LEBs (0 bytes), LEB size 126976 bytes (124.0 KiB)
ubi_backup_data found, mounting...
[    4.872179] UBIFS (ubi2:0): background thread "ubifs_bgt2_0" started, PID 154
[    4.906996] UBIFS (ubi2:0): recovery needed
[    4.990248] UBIFS (ubi2:0): recovery completed
[    4.990310] UBIFS (ubi2:0): UBIFS: mounted UBI device 2, volume 0, name "ubi_backup_data"
[    4.993579] UBIFS (ubi2:0): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[    5.001842] UBIFS (ubi2:0): FS size: 3809280 bytes (3 MiB, 30 LEBs), journal size 1269760 bytes (1 MiB, 10 LEBs)
[    5.011731] UBIFS (ubi2:0): reserved for root: 0 bytes (0 KiB)
[    5.021969] UBIFS (ubi2:0): media format: w4/r0 (latest is w4/r0), UUID 7F2DC103-5560-4007-B382-A0751E277291, small LPT model
[    5.034299] ubi3: attaching mtd15
both fdata mount ok
[    5.105673] ubi3: scanning is finished
[    5.112310] ubi3: attached mtd15 (name "runtime_data", size 12 MiB)
[    5.112332] ubi3: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    5.117387] ubi3: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    5.124316] ubi3: VID header offset: 2048 (aligned 2048), data offset: 4096
[    5.131181] ubi3: good PEBs: 96, bad PEBs: 0, corrupted PEBs: 0
[    5.137951] ubi3: user volume: 1, internal volumes: 1, max. volumes count: 128
[    5.143849] ubi3: max/mean erase counter: 4/1, WL threshold: 4096, image sequence number: 1928559587
[    5.151151] ubi3: available PEBs: 0, total reserved PEBs: 96, PEBs reserved for bad PEB handling: 20
[    5.160448] ubi3: background thread "ubi_bgt3d" started, PID 160
UBI device number 3, total 96 LEBs (12189696 bytes, 11.6 MiB), available 0 LEBs (0 bytes), LEB size 126976 bytes (124.0 KiB)
ubi_runtime_data found, attach 15 success, mounting...
[    5.186846] UBIFS (ubi3:0): background thread "ubifs_bgt3_0" started, PID 166
[    5.221554] UBIFS (ubi3:0): recovery needed
[    5.308388] UBIFS (ubi3:0): recovery completed
[    5.308469] UBIFS (ubi3:0): UBIFS: mounted UBI device 3, volume 0, name "ubi_runtime_data"
[    5.311718] UBIFS (ubi3:0): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[    5.319981] UBIFS (ubi3:0): FS size: 7872512 bytes (7 MiB, 62 LEBs), journal size 1777664 bytes (1 MiB, 14 LEBs)
[    5.329959] UBIFS (ubi3:0): reserved for root: 0 bytes (0 KiB)
[    5.340196] UBIFS (ubi3:0): media format: w4/r0 (latest is w4/r0), UUID FC2621B9-D881-4788-AAD2-10F135947827, small LPT model
[NM_Debug](main) 01042: getopt_long: c=C 
[NM_Debug](main) 01042: getopt_long: c=� 
[NM_Debug](main) 01125: excute the command: start=====>
[NM_Debug](nm_lock_init) 00149: create semaphore...
[NM_Debug](nm_lib_getProductInfoFromNvram) 00786: productinfo from NVRAM is (EAP610-Outdoor(TP-Link|UN|AX1800-D):1.0
key=BgIAAAAkAABSU0ExAAQAAAEAAQDZtUNzD6KsxO4Tfx/Sp8S7w8TwPWwoppXy77wSPNs5WoV+Wr4kh09nu70vHVmSPji5KFUG+hmRjapsJsIJj+M0Zmd4EycKY8r0Ea3D4XO/uvloX4VHVPsDZkm8Krian5iNy6BgApVlebx0zQxto0GkgvPBq1nhoZxJNapLghGO7w==
rsaKey=BgIAAACkAABSU0ExAAQAAAEAAQDzyeWCpUptcSIr3Wuk6j3wEyGLbCalB127Ge315dfiwAV8UfeMi9m34xauO62IMNPSSm5biNChqO+eDyLG2dSndRA+BYnh6xFYu9t6PkxiJRvaumwejQwork0ohtXuqBC8k4yd1HlXcsI/rzvgZ0eDon5mdUzQ6Ac0iLA3RXDAng==
HWID=116D929D9F3E0FF1324B2A4D7B1E8C17
)
[NM_Debug](nm_region_getRegionName) 00192: Flash region info, code: 841, name: US.
This board use 4.4.60
[    5.784325] ssdk_switch_device_num_init[1084]:INFO:ess-switch dts node number: 1
[    5.788081] ssdk_dt_get_switch_node[919]:INFO:ess-switch DT exist!
[    5.795041] ssdk_dt_parse_access_mode[820]:INFO:switch_access_mode: local bus
[    5.801186] ssdk_dt_parse_access_mode[833]:INFO:switchreg_base_addr: 0x3a000000
[    5.808316] ssdk_dt_parse_access_mode[834]:INFO:switchreg_size: 0x1000000
[    5.815605] ssdk_dt_parse_mac_mode[288]:INFO:mac mode = 0xff
[    5.822018] ssdk_dt_parse_mac_mode[297]:INFO:mac mode1 = 0xf
[    5.827669] ssdk_dt_parse_mac_mode[306]:INFO:mac mode2 = 0xff
[    5.833309] ssdk_dt_parse_phy_info[639]:INFO:[PORT 5] port_mac_sel = QGMAC_PORT
[    5.839057] ssdk_dt_parse_uniphy[325]:INFO:ess-uniphy DT exist!
[    5.846441] ssdk_dt_parse_intf_mac[766]:INFO:dp1 MAC 00:03:7f:ba:db:ad
[    5.852380] ssdk_plat_init start
[    5.935800] ssdk_gcc_clock_init[629]:INFO:SSDK gcc clock init successfully!
[    5.938979] ssdk_probe[1922]:INFO:ess_rst doesn't exist!
[    5.946201] HPPE initializing...
[    5.946904] rtl8211_phy_init[536]:ERROR:Init RTL8211, dev_id: 0, port_bmp: 20
[    5.953874] rtl8211_phy_api_ops_init[516]:INFO:qca probe rtl8211 phy driver succeeded!
[    5.961716] regi_init[3373]:INFO:Initializing HPPE!!
[    6.184625] ssdk_ppe_reset_init[860]:INFO:ppe reset successfully!
[    6.190270] qca_hppe_tdm_hw_init[674]:INFO:tdm setup num=96
[    6.193913] qca_hppe_portctrl_hw_init[102]:INFO:Cypress PPE port initializing
[    7.441693] ssdk_switch_register[1631]:INFO:Chip version 0x1501
[    7.444682] qca_link_polling_select[1281]:INFO:link-polling-required node does not exist
[    7.450912] ssdk_switch_register[1656]:INFO:polling is selected
[    7.458646] regi_init[3377]:INFO:Initializing HPPE Done!!
[    7.463540] regi_init[3428]:INFO:qca-ssdk module init succeeded!
[    7.500652] EDMA ver 1 hw init
[    7.500892] EDMA HW Reset completed succesfully
[    7.502620] Num rings - TxDesc:1 (23-23) TxCmpl:1 (23-23)
[    7.507040] RxDesc:1 (15-15) RxFill:1 (7-7)
[    7.513819] **********************************************************
[    7.516585] * NSS Data Plane driver
[    7.523159] **********************************************************
[    7.755674] nss_driver - fw of size 778752  bytes copied to load addr: 40000000, nss_id : 0
[    7.757467] Supported Frequencies - 
[    7.762818] 187.2 MHz 748.8 MHz 
[    7.768802] 1.4976 GHz [    7.769757] 
[    7.772103] ffffffbffc3bf080: set sdma ffffffc01c5e9700
[    7.773670] node size 2 # items 4
[    7.778542] memory: 40000000 536870912 (avl 437944320) items 4 active_cores 1
[    7.782013] addr/size storage words 2 2 # words 4 in DTS, ddr size 1000000
[    7.789134] ffffffbffc3bf080: NSS core 0 DDR from 40000000 to 41000000
[    7.796019] ffffffbffc3bf080: meminfo init succeed
[    7.832559] node size 2 # items 4
[    7.832581] memory: 40000000 536870912 (avl 438059008) items 4 active_cores 1
[    7.834872] addr/size storage words 2 2 # words 4 in DTS, ddr size 1000000
[    7.841968] ffffffbffc3bf080: nss core 0 booted successfully
[    7.848931] Invalid macid 6
[    7.878552] xt_time: kernel timezone is -0000
[    7.906380] nf_conntrack version 0.5.0 (3275 buckets, 13100 max)
[    7.975995] ip_tables: (C) 2000-2006 Netfilter Core Team
[    8.010383] Ebtables v2.0 registered
[    8.034604] ---portal module open ok
[    8.036964] 
[    8.036964] Register vlan_manage hooks success.
[    8.045838] [Debug gpio_parse_conf:271] Open File /etc/EAP610-Outdoor_1.0/gpio.conf SUCCESS!!
[    8.053554] [Debug gpio_parse_conf:295] Ignore line (0), skipLen 14, readCount 256
[    8.053585] [Debug gpio_parse_conf:295] Ignore line (0), skipLen 44, readCount 256
[    8.060897] [Debug gpio_parse_conf:295] Ignore line (0), skipLen 6 , readCount 256
[    8.068515] [Debug gpio_parse_conf:295] Ignore line (0), skipLen 7 , readCount 256
[    8.075965] [Debug gpio_parse_conf:295] Ignore line (0), skipLen 2 , readCount 256
[    8.083474] [Debug gpio_parse_conf:295] Ignore line (0), skipLen 7 , readCount 256
[    8.091143] [Debug gpio_parse_conf:295] Ignore line (0), skipLen 44, readCount 256
[    8.098633] [Debug gpio_parse_conf:295] Ignore line (0), skipLen 6 , readCount 256
[    8.106156] [Debug gpio_parse_conf:295] Ignore line (0), skipLen 7 , readCount 256
[    8.113683] [Debug gpio_parse_conf:295] Ignore line (0), skipLen 2 , readCount 256
[    8.121292] [Debug gpio_parse_conf:295] Ignore line (0), skipLen 7 , readCount 256
[    8.128791] [Debug gpio_parse_conf:295] Ignore line (0), skipLen 44, readCount 256
[    8.136349] [Debug gpio_parse_conf:295] Ignore line (0), skipLen 7 , readCount 250
[    8.143925] [Debug gpio_parse_conf:295] Ignore line (0), skipLen 6 , readCount 243
[    8.151454] [Debug gpio_parse_conf:295] Ignore line (0), skipLen 6 , readCount 237
[    8.159001] [Debug gpio_parse_conf:295] Ignore line (0), skipLen 6 , readCount 231
[    8.166625] [Debug gpio_parse_conf:295] Ignore line (0), skipLen 2 , readCount 225
[    8.174126] [Debug gpio_parse_conf:295] Ignore line (0), skipLen 51, readCount 223
[    8.181657] [Debug gpio_parse_conf:295] Ignore line (0), skipLen 44, readCount 172
[    8.189223] [Debug gpio_parse_conf:323] GPIO Parse OK:  led_green   led(1) high(1) high(1) 37
[    8.196799] [Debug gpio_parse_conf:323] GPIO Parse OK:  led_yellow  led(1) high(1) low (0) 35
[    8.205361] [Debug gpio_parse_conf:323] GPIO Parse OK:  btn_reset   btn(2) low (0) high(1) 9
[    8.213893] [Debug btn_netlink_init:179] btn: create netlink socket SUCCESS.
[    8.222413] [Debug wdt_module_init:249] Create watchdog proc dir SUCCESS.
[    8.229411] [Debug led_entry_handler:783] Create led_green   proc dir SUCCESS.
[    8.236088] [Debug led_entry_handler:783] Create led_yellow  proc dir SUCCESS.
[    8.243441] [tplink_gpio_handle:2698] button 9 value 1.
[    8.250380] [Debug btn_reset_action:357] RESET button released
[    8.255576] [Debug btn_entry_handler:913] Init button: btn_reset 2 9 0 success.
[    8.280657] rate_limit: module license 'BSD' taints kernel.
[    8.280683] Disabling lock debugging due to kernel taint
[    8.332479] cfg80211: World regulatory domain updated:
[    8.332506] cfg80211:  DFS Master region: unset
[    8.336521] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
[    8.341119] cfg80211:   (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A)
[    8.350674] cfg80211:   (2457000 KHz - 2482000 KHz @ 20000 KHz, 92000 KHz AUTO), (N/A, 2000 mBm), (N/A)
[    8.358483] cfg80211:   (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A)
[    8.367861] cfg80211:   (5170000 KHz - 5250000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (N/A)
[    8.375854] cfg80211:   (5250000 KHz - 5330000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (0 s)
[    8.385568] cfg80211:   (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s)
[    8.395024] cfg80211:   (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[    8.403089] cfg80211:   (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A)
[    8.410852] QCA multicast snooping installed successfully
mount: mounting none on /data failed: No such file or directory
mkdir: can't create directory '/data/': Read-only file system
[NM_Debug](main) 01042: getopt_long: c=p 
[NM_Debug](main) 01042: getopt_long: c=r 
[NM_Debug](main) 01042: getopt_long: c=� 
[NM_Debug](main) 01125: excute the command: start=====>
[NM_Debug](nvrammanager_readPtnFromNvram) 00834: Ptn used size buflen = 10000 
[NM_Debug](nm_region_getRegionName) 00192: Flash region info, code: 841, name: US.
wlanmonitor is not supported.
sh: write error: Invalid argument
[    8.564609] [Debug btn_netlink_receive:72] BTN netlink with user space daemon 257 SUCCESS.
ap_watchdog is not supported.
[NM_Debug](main) 01042: getopt_long: c=r 
[NM_Debug](main) 01042: getopt_long: c=p 
[NM_Debug](main) 01042: getopt_long: c=� 
[NM_Debug](main) 01125: excute the command: start=====>
[NM_Debug](nvrammanager_readPtnFromNvram) 00834: Ptn used size buflen = 8 
Japan disaster mode is not enabled for region not match
starting pid 280, tty '': '/sbin/getty ttyMSM0 115200'
[Debug checkLedParamValid:345] Param: mode off  , delayon 0  , delayoff 0  , blinkCount 0.
[Debug checkLedParamValid:345] Param: mode off  , delayon 0  , delayoff 0  , blinkCount 0.
[Debug checkLedParamValid:345] Param: mode repeat, delayon 200, delayoff 200, blinkCount 0.
[Debug checkLedParamValid:345] Param: mode repeat, delayon 200, delayoff 200, blinkCount 0.
[Debug checkLedParamValid:345] Param: mode off  , delayon 0  , delayoff 0  , blinkCount 0.
[Debug checkLedParamValid:345] Param: mode off  , delayon 0  , delayoff 0  , blinkCount 0.
[Debug checkLedParamValid:345] Param: mode repeat, delayon 500, delayoff 500, blinkCount 0.
[Debug checkLedParamValid:345] Param: mode repeat, delayon 500, delayoff 500, blinkCount 0.
[Debug checkLedParamValid:34Into util_dbg_setMod, pModName(all), enable(1)
[NM_Debug](nm_region_getRegionName) 00192: Flash region info, code: 841, name: US.
 (none) aarch64 #1 SMP PREEMPT Wed Jan 26 10:54:35 CST 2022 (none)
(none) login: [Debug ledListenEventHandler:148] Accept a new client.
[Debug ledClientEventHandler:110] GPIOD received led rule: LED_S[    8.894162] [Debug led_proc_write:651] Write led_yellow.
[    8.901811] [Debug led_common_write_proc:490] Execute LED action:    { 1   0   0   0   0 }
YS_INIT_PROCESS.
[NM_Debug](nm_region_getRegionName) 00192: Fla[    8.916852] [Debug led_proc_write:651] Write led_green.
[    8.920765] [Debug led_common_write_proc:490] Execute LED action:    { 2   0   0   0   0 }
sh region info, code: 841, name: US.
==============radio config============
radioType: 0x11
EIRP: 1
0.      radioID:0
        band:2
        mimo:2
        mimogain:3
        anttgain:2
        mode:23
        blockAcsBand:0
1.      radioID:1
        band:5
        mimo:2
        mimogain:3
        anttgain:3
        mode:30
        blockAcsBand:0
chanlimit:1
dfsImproveSupp:1
thermalSupp:0
        level[0] 0 0 0
        level[1] 0 0 0
        level[2] 0 0 0
        level[3] 0 0 0
QCA HAL BB reg: 
        CCA: 0
         00000000 
        AGC: 0
         00000000 
         00000000 
        PSD 0
         00000000 
         00000000 
         00000000 
ofdmaCfgSupp:1
noAutoWradarSupp:1
==============radio config============
_radio_region_init(): 234  @ read next region flag, parse finish
_radio_region_init(): 263  @ region:841, parse channel num:11
_radio_region_init(): 234  @ read next region flag, parse finish
_radio_region_init(): 263  @ region:841, parse channel num:21
UTF8 essid(TP-Link_2.4GHz_D26CA2)
UTF8 essid(TP-Link_5GHz_D26CA3)
[Debug ledListenEventHandler:148] Accept a new client.
[Debug ledClientEventHandler:110] GPIOD received led rule: LED[    9.118899] [Debug led_proc_write:651] Write led_green.
[    9.126679] [Debug led_common_write_proc:490] Execute LED action:    { 5   0   0   0   0 }
_ENABLE_ALL.
[    9.138103] [NOTICE led_common_write_proc:527] pledconf->backup.mode 0 1
[    9.158448] 
[    9.158448] Disable VlanManage, data.enable(0), data.vid(1)
[    9.206781] 
[    9.206781] manage vlan set port: ssh (22), http (80), https (443)
[    9.206819] 
[    9.206819] manage vlan set port: ssh (22), http (80), https (443)
Generating 1024 bit rsa key, this may take a while...
Public key portion is:
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQCJKjroPT/HUuul64kxeSewK693jUDTkH1rerGbDBgxUlhrMhvYVxFgGeJdP47TbG/mCkRWc9qq/hfjCWW1pOlq5H2KLNQhzqQ2Qa8R+v8dK0Ueqo4EkA4SzPWPNde7TCnRTLrg75Itqg4r0mQdCWMdf+yvvQyIx3Ji4Vk7/i10gw== root@EAP610-Outdoor
Fingerprint: sha1!! b8:9b:d9:5f:ef:6a:48:1f:d3:4c:4c:f4:53:09:83:7e:7f:9b:35:e3
Generating 1024 bit dss key, this may take a while...
[    9.839581] wlan: [383:E:CONFIG] cfg_uint_item_handler: 171: gScanProbeRepeatTime=50 - Out of range [0, 30]; Using 50
qmi_cci_xprt_qrtr_supported(101) qmi_cci_xprt_qrtr_supported: QRTR SUPPORTED
[   10.274242] wlan: [399:I:ANY] =======ol_if_register_wifi3_0==========
[   10.274242] 
[   10.274280] wlan: [399:I:ANY] osif_nss_register_module: 90: NSS wifi ops registered for target_type:1 with soc_ops:ffffffbffcc0d5a0
[   10.281087] wlan: [399:I:ANY] ol_ath_wifi_ssr: 256: ol_ath_wifi_ssr: SSR event 2 bus_type 1
[   11.341668] wlan: [399:I:ANY] ol_ath_wifi_ssr: 256: ol_ath_wifi_ssr: SSR event 3 bus_type 1
[   11.341708] wlan: [399:I:ANY] ol_ath_check_fw_ready: 614: Waiting for FW ready device fffd
[   11.454638] wlan: [399:I:ANY] ol_ath_check_fw_ready: 624: FW ready received for device fffd
[   11.456101] wlan: [399:I:ANY] pld_ahb_wlan_enable: 691: cnss_mode: Cold boot calibration
[   11.688394] wlan: [399:I:ANY] Coldboot calibration wait started
[   11.688394] 
[   12.089139] wlan: [399:I:ANY] Coldboot calibration wait ended
[   12.089139] 
[   12.090793] wlan: [399:I:ANY] ol_ath_do_cold_boot_calibration: 598: Coldboot calib successful: radio_id 0x65533
[   12.096123] wlan: [399:I:ANY] init_ath_pci_3_0: 179: 6ath_ol_pci_wifi3.0 :  (Atheros/multi-bss)
[   12.108924] wlan: [409:I:ANY] ol_ath_wifi_ssr: 256: ol_ath_wifi_ssr: SSR event 0 bus_type 1
[   12.140460] wlan: [409:I:ANY] ol_ath_wifi_ssr: 256: ol_ath_wifi_ssr: SSR event 1 bus_type 1
Public key portion is:
ssh-dss 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 root@EAP610-Outdoor
Fingerprint: sha1!! c2:f3:23:15:28:1b:10:6a:9f:45:b9:fe:ee:ed:ec:98:39:fd:02:cf
[   12.301647] wlan: [422:I:ANY] =======ol_if_register_wifi3_0==========
[   12.301647] 
[   12.301685] wlan: [422:I:ANY] osif_nss_register_module: 90: NSS wifi ops registered for target_type:1 with soc_ops:ffffffbffce315a0
[   12.308530] wlan: [422:I:ANY] ol_ath_wifi_ssr: 256: ol_ath_wifi_ssr: SSR event 2 bus_type 1
[   12.616829] wlan: [422:I:ANY] ol_ath_wifi_ssr: 256: ol_ath_wifi_ssr: SSR event 3 bus_type 1
[   12.616869] wlan: [422:I:ANY] ol_ath_check_fw_ready: 614: Waiting for FW ready device fffd
[   12.624270] wlan: [422:I:ANY] ol_ath_check_fw_ready: 624: FW ready received for device fffd
[   12.632685] wlan: [422:I:ANY] pld_ahb_wlan_enable: 699: cnss_mode: Mission mode 
[   12.647394] wlan: [422:I:ANY] qca_napi_create: 364: qca_napi_create: napi instance 0 created on pipe 4
[   12.648466] wlan: [422:I:ANY] __ol_ath_attach: 3944: Allocated soc ffffffc018700880
[   12.665287] wlan: [422:E:CONFIG] cfg_uint_item_handler: 171: dp_int_timer_threshold_tx=1000 - Out of range [8, 100]; Using 1000
[   12.665392] wlan: [422:E:CONFIG] cfg_uint_item_handler: 171: dp_nss_comp_ring_size=4096 - Out of range [8192, 49152]; Using 8192
[   12.676469] wlan: [422:E:CONFIG] cfg_uint_item_handler: 171: dp_rxdma_monitor_desc_ring=2048 - Out of range [4096, 16384]; Using 4096
[   12.688343] wlan: [422:I:ANY] osif_nss_wifi_soc_setup: 204: nss register id -1 nss config 0 Target Type 19 
[   12.700045] wlan: [422:I:ANY] __ol_ath_attach: 4151: dev name soc0
[   12.709885] wlan: [422:I:ANY] ol_ath_soc_attach: 7243: WMI attached. wmi_handle ffffffc01a461c68 
[   12.716020] wlan: [422:I:ANY] htc_wmi_init: 6253: htc_wmi_init() HT Create . ffffffc01a735068
[   12.724904] wlan: [422:I:ANY] htc_wmi_init: 6260: htc_wmi_init() Skipping BMI Done. 
[   12.733268] wlan: [422:I:ANY] htc_wmi_init: 6317: [htc_wmi_init:6317] host_enable 0 nss_nwifi_offload 0
[   12.746098] wlan: [422:I:ANY] ol_target_init_complete: 6439: CDP soc attach success
[   12.750194] wlan: [422:I:ANY] ol_target_init_complete: 6446: Soc attach success NSS config 0 
[   12.757904] wlan: [422:I:ANY] htc_set_async_ep: 428: htc_set_async_ep: htc_handle ffffffc01a735068, ep 2, value 1
[   12.766577] wlan: [422:I:ANY] htc_set_async_ep: 428: htc_set_async_ep: htc_handle ffffffc01a735068, ep 3, value 1
[   12.777284] wlan: [101:I:TIF] HE_CAP Info = 1a08010d
[   12.787007] wlan: [101:I:TIF] Num HW modes = 2
[   12.792027] wlan: [101:I:TIF] Num PHY = 2
[   12.796292] wlan: [101:I:TIF] Preferred HW Mode = 1 Num Radios = 2
[   12.800366] wlan: [101:I:TIF] init_deinit_add_11ax_modes: 1779: Adding 11ax regulatory modes,
[   12.806456] wlan: [101:I:TIF] init_deinit_add_11ax_modes: 1783:  phy_id = 0 wireless modes = 391f9001
[   12.815046] wlan: [101:I:TIF] init_deinit_add_11ax_modes: 1779: Adding 11ax regulatory modes,
[   12.824242] wlan: [101:I:TIF] init_deinit_add_11ax_modes: 1783:  phy_id = 1 wireless modes = 680680c
[   12.832757] wlan: [101:I:TIF] init_deinit_add_11ax_modes: 1806: hw_mode_id = 1 phy_id = 0 wireless modes = 0
[   12.841957] wlan: [101:I:TIF] init_deinit_add_11ax_modes: 1806: hw_mode_id = 1 phy_id = 1 wireless modes = 0
[   12.851766] wlan: [101:I:TIF] init_deinit_add_11ax_modes: 1806: hw_mode_id = 5 phy_id = 0 wireless modes = 0
[   12.861575] wlan: [101:I:TIF] init_deinit_add_11ax_modes: 1806: hw_mode_id = 5 phy_id = 1 wireless modes = 0
[   12.871884] wlan: [101:I:dfs] WLAN_DEBUG_DFS_ALWAYS : wlan_dfs_pdev_obj_create_notification: 421: dfs_offload 1
[   12.881199] wlan: [101:I:dfs] WLAN_DEBUG_DFS_ALWAYS : dfs_agile_soc_obj_init: 2850: dfs->dfs_psoc_idx: 0 
[   12.891003] wlan: [101:I:dfs] WLAN_DEBUG_DFS_ALWAYS : dfs_agile_soc_obj_init: 2856: dfs_soc_obj->num_dfs_privs: 1 
[   12.901207] wlan: [101:I:dfs] WLAN_DEBUG_DFS_ALWAYS : wlan_dfs_pdev_obj_create_notification: 393: Do not allocate DFS object for 2G, pdev_id = 1
[   12.911032] wlan: [101:I:ANY] init_deinit_update_pdev_tgt_info: 1347: pdev id:0 wmi_handle:ffffffc01a461c68
[   12.973315] wlan: [101:I:ANY] init_deinit_update_pdev_tgt_info: 1403: Pdev = 0 Number of peers = 144 vdevs = 11
[   12.973352] wlan: [101:I:TIF] init_deinit_update_pdev_tgt_info: 1406: CDP PDEV ATTACH success
[   12.982533] wlan: [101:I:ANY] init_deinit_update_pdev_tgt_info: 1347: pdev id:1 wmi_handle:ffffffc019978868
[   13.013085] wlan: [101:I:ANY] init_deinit_update_pdev_tgt_info: 1403: Pdev = 1 Number of peers = 144 vdevs = 11
[   13.013121] wlan: [101:I:TIF] init_deinit_update_pdev_tgt_info: 1406: CDP PDEV ATTACH success
[   13.122487] wlan: [101:I:ANY] copy_fw_abi_version_tlv: 6960: copy_fw_abi_version_tlv: INIT_CMD version: 1, 0, 0x5f414351, 0x4c4d, 0x0, 0x0
[   13.213145] wlan: [101:I:ANY] ready_extract_init_status_tlv: 9002: ready_extract_init_status_tlv:0
[   13.213177] wlan: [101:I:ANY] dp_peer_map_attach_wifi3: 9842: dp_peer_map_attach_wifi3 max_peers 327, max_ast_index: 1040
[   13.213177] 
[   13.221142] wlan: [422:I:ANY] ol_ath_connect_htc: 1217: WMI is ready
[   13.233626] wlan: [422:I:ANY] ol_ath_soc_attach: 7334: connect HTC
[   13.239921] wlan: [422:I:ANY] ol_ath_soc_attach: 7335: bypasswmi : 0
[   13.245925] wlan: [422:I:ANY] ol_ath_soc_attach: 7409: ol_ath_soc_attach() UMAC attach . 
[   13.252435] 
[   13.260479] ****************************************************
[   13.262041]                   tp mesh init                   
[   13.268124] ****************************************************
[   13.273892] wlan: [422:I:ANY] __ol_ath_attach: 4269: pdev_netdev name wifi0
[   13.280030] wlan: [422:I:ANY] __ol_ath_attach: 4316: Skip txrx_pdev_attach_target
[   13.286794] wlan: [422:I:ANY] __ol_ath_attach: 4342: BURSTING enabled by default
[   13.294503] wlan: [422:I:ANY] ol_ath_pdev_attach: 9196: interface_id 0
[   13.301906] wlan: [422:I:TIF] ol_ath_pdev_regdmn_init: 7563:  phy id = 0 Modes supported
[   13.308237] wlan: [422:I:TIF] ol_ath_pdev_regdmn_init: 7570:  11b = 0 11g = 0 11a = 1 11n = 1 11ac = 1 11ax = 1
[   13.316487] wlan: [422:I:TIF] ol_ath_pdev_regdmn_init: 7579:  Reg cap - phy_id = 0 supp_bnd = 2, modes = 391f9001, lo_2g = 0, hi_2g = 0 lo_g5 = 4900, hi_5g = 6100
[   13.326302] wlan: [422:I:ANY] ol_ath_update_wireless_modes: 1347: wireless_modes = 391f9001 before update
[   13.340876] wlan: [422:I:ANY] ol_ath_update_wireless_modes: 1363: Wireless_modes = 391f9001 after update
[   13.350512] wlan: [422:I:ANY] ol_ath_update_ext_caps: 1945: 11ax 5G supported case
[   13.360177] wlan: [422:I:ANY] ol_resmgr_create: 223: OL Resmgr Init-ed
[   13.367626] wlan: [422:I:ANY] acfg_attach: 3519: acfg_attach: 3519: Netlink socket created:ffffffc019981400
[   13.373950] wlan: [422:I:ANY] ol_ath_stats_attach: 2362: periodic_chan_stats: 1
[   13.384239] wlan: [422:I:ANY] wlan_scan_update_channel_list: 1153: num_chan: 9
[   13.390912] wlan: [0:I:ANY] ol_ath_pdev_attach: 9540: Set global_ic[1], ptr:ffffffbffc969970
[   13.398168] wlan: [0:I:ANY] dp_lag_soc_enable: 102: pdev(ffffffc019978070) Enabling DBDC Repeater 1 
[   13.406763] wlan: [0:I:ANY] dp_lag_pdev_set_primary_radio: 55: pdev(ffffffc019978070) is_primary 1 
[   13.415876] wlan: [422:I:ANY] ol_ath_twt_enable_command: 7994: TWT is disable in INI. Do not send enable cmd to FW
[   13.428701] wlan: [422:I:ANY] ol_ath_pri20_cfg_blockchanlist_parse: 544: cfg block channel list is empty
[   13.435067] wlan: [422:I:ANY] ol_ath_configure_cong_ctrl_max_msdus: 3869: pdev_idx = 0 tx_desc_limit = 16384
[   13.444726] wlan: [422:I:ANY] osif_wrap_attach: 239: osif wrap attached
[   13.444726] 
[   13.454496] wlan: [422:I:ANY] osif_wrap_devt_init: 201: osif wrap dev table init done
[   13.454496] 
[   13.462580] wlan: [422:I:ANY] osif_wrap_attach: 247:  Wrap Attached: Wrap_com =ffffffc019981868 ic->ic_wrap_com=ffffffc019981868 &wrap_com->wc_devt=ffffffc019981868 
[   13.462580] 
[   13.471811] wlan: [422:I:ANY] __ol_ath_attach: 4514: needed_headroom reservation 60
[   13.488326] wlan: [422:I:ANY] ieee80211_cfg80211_radio_attach: 12035: ic: 0xffffffc0171e0880, wdev: 0xffffffc0171f8a68, wiphy: 0xffffffc01c5072a0, netdev: 0xffffffc0171e0000 
[   13.496195] wlan: [422:I:ANY] __ol_ath_attach: 4269: pdev_netdev name wifi1
[   13.511118] wlan: [422:I:ANY] __ol_ath_attach: 4316: Skip txrx_pdev_attach_target
[   13.517963] wlan: [422:I:ANY] __ol_ath_attach: 4342: BURSTING enabled by default
[   13.525676] wlan: [422:I:ANY] ol_ath_pdev_attach: 9196: interface_id 1
[   13.533060] wlan: [422:I:TIF] ol_ath_pdev_regdmn_init: 7563:  phy id = 1 Modes supported
[   13.539405] wlan: [422:I:TIF] ol_ath_pdev_regdmn_init: 7570:  11b = 1 11g = 1 11a = 0 11n = 1 11ac = 1 11ax = 1
[   13.547654] wlan: [422:I:TIF] ol_ath_pdev_regdmn_init: 7579:  Reg cap - phy_id = 1 supp_bnd = 1, modes = 680680c, lo_2g = 2312, hi_2g = 2732 lo_g5 = 0, hi_5g = 0
[   13.557469] wlan: [422:I:ANY] ol_ath_update_wireless_modes: 1347: wireless_modes = 680680c before update
[   13.572040] wlan: [422:I:ANY] ol_ath_update_wireless_modes: 1363: Wireless_modes = 680680c after update
[   13.581587] wlan: [422:I:ANY] ol_ath_update_ext_caps: 1953: 11ax 2G supported case
[   13.590830] wlan: [422:I:ANY] ol_resmgr_create: 223: OL Resmgr Init-ed
[   13.598516] wlan: [422:I:ANY] acfg_attach: 3494: Offload using existing sock ffffffc019981400
[   13.604858] wlan: [422:I:ANY] ol_ath_stats_attach: 2362: periodic_chan_stats: 1
[   13.613734] wlan: [422:I:ANY] wlan_scan_update_channel_list: 1153: num_chan: 11
[   13.620604] wlan: [0:I:ANY] ol_ath_pdev_attach: 9540: Set global_ic[2], ptr:ffffffbffc969970
[   13.627856] wlan: [0:I:ANY] dp_lag_soc_enable: 102: pdev(ffffffc019978c70) Enabling DBDC Repeater 1 
[   13.636536] wlan: [0:I:ANY] dp_lag_pdev_set_primary_radio: 55: pdev(ffffffc019978c70) is_primary 0 
[   13.645652] wlan: [422:I:ANY] ol_ath_twt_enable_command: 7994: TWT is disable in INI. Do not send enable cmd to FW
[   13.658479] wlan: [422:I:ANY] ol_ath_pri20_cfg_blockchanlist_parse: 544: cfg block channel list is empty
[   13.664843] wlan: [422:I:ANY] ol_ath_configure_cong_ctrl_max_msdus: 3869: pdev_idx = 1 tx_desc_limit = 16384
[   13.674484] wlan: [422:I:ANY] osif_wrap_attach: 239: osif wrap attached
[   13.674484] 
[   13.684278] wlan: [422:I:ANY] osif_wrap_devt_init: 201: osif wrap dev table init done
[   13.684278] 
[   13.692356] wlan: [422:I:ANY] osif_wrap_attach: 247:  Wrap Attached: Wrap_com =ffffffc019983068 ic->ic_wrap_com=ffffffc019983068 &wrap_com->wc_devt=ffffffc019983068 
[   13.692356] 
[   13.701502] wlan: [422:I:ANY] __ol_ath_attach: 4514: needed_headroom reservation 60
[   13.717720] wlan: [422:I:ANY] wlan_cfg80211_init: 11909: Number of 2G channels: 11 
[   13.725590] wlan: [422:I:ANY] ieee80211_cfg80211_radio_attach: 12035: ic: 0xffffffc017240880, wdev: 0xffffffc017258a68, wiphy: 0xffffffc010f712a0, netdev: 0xffffffc017240000 
[   13.733530] wlan: [422:I:Dynamic Mode Change] ol_ath_check_and_reconfig_hw_mode: 3838: Running with HW mode = 1
[   13.749034] wlan: [422:E:QLD] qld_register: 108: Handle or address is NULL
[   13.758515] wlan: [422:I:ANY] wlan_pdev_operation: 728: num_radios=1, wifi_radios[0].sc = ffffffc0171e0880_radio_type = 2
[   13.765451] wlan: [422:I:ANY] wlan_pdev_operation: 728: num_radios=2, wifi_radios[1].sc = ffffffc017240880_radio_type = 2
[   13.776495] wlan: [422:I:ANY] init_ath_pci_3_0: 179: 6ath_ol_pci_wifi3.0 :  (Atheros/multi-bss)
[   13.888375] wlan: [429:I:ANY] osif_nss_register_module: 90: NSS wifi ops registered for target_type:0 with soc_ops:ffffffbffced0e60
[   13.888769] wlan: [429:I:ANY] init_ath_pci_2_0: 143: 6ath_ol_pci_2_0:  (Atheros/multi-bss)
=========== updating smp affinity ============
[   14.126608] wlan: [517:I:ANY] wlan_scan_update_channel_list: 1153: num_chan: 11
[   14.126704] wlan: [517:I:ANY] number of channels: 2G = 11 5G = 0, 6G = 0
Invalid command : HALDbg
Invalid command : chainmasksel
Interface doesn't accept private ioctl...
AMPDU (8BE0): Operation not permitted
Interface doesn't accept private ioctl...
AMPDUFrames (8BE0): Operation not permitted
Interface doesn't accept private ioctl...
AMPDULim (8BE0): Operation not permitted
[   14.169551] wlan: [531:I:Monitor Filter] dp_mon_ht2_rx_ring_cfg: 119: srng type 2 Max_mac_rings 1 
[   14.172310] wlan: [531:I:Monitor Filter] dp_mon_ht2_rx_ring_cfg: 119: srng type 1 Max_mac_rings 1 
[   14.184868] wlan: [533:I:ANY] ol_ath_set_config_param: 1674: set TXBF_SND_PERIOD: value 100 wmi_status 0
==== configure 2G thermal policy ====
[   14.446557] wlan: [554:I:ANY] wlan_cfg80211_add_virtual_intf: 338: proprietary mode 6 for interface: ath0 : clone params: 0x00000001 
[   14.446629] wlan: [554:I:ANY] osifp_create_wlan_vap: 9942: VDEV Create 28:87:ba:d2:6c:a2
[   14.457609] wlan: [554:I:ANY] wlan_vap_create: 1611: devhandle=0xffffffc017240880, opmode=IEEE80211_M_HOSTAP, flags=0x1
[   14.457609] 
[   14.466014] wlan: [554:I:ANY] ol_ath_vap_set_param: 1208: Setting SGI value: 1
[   14.477979] wlan: [554:I:ANY] ol_ath_vap_set_param: 2308: VDEV params:HE su_bfee:1|su_bfer:1|mu_bfee:0|mu_bfer:1|dl_muofdma:1|ul_muofdma:1|ul_mumimo:0|dl_muofdma_bfer:0
[   14.484987] wlan: [554:I:ANY] ol_ath_vap_set_param: 2321: he_bf_cap=0x3b
[   14.500173] wlan: [554:I:ANY] ol_ath_vap_set_param: 2336: VDEV params:AC/VHT sounding mode:HE|SU/MU sounding mode:SU|Trig/Non-Trig sounding mode:Non-Trigged
[   14.506908] wlan: [554:I:ANY] MBO Initialized
[   14.520814] wlan: [554:I:ANY] OCE Initialized
[   14.525387] wlan: [554:I:ANY] osif_create_vap_complete: 10150: TX Checksum:1|SG:1|TSO:1|LRO:0
[   14.531146] wlan: [554:I:ANY] VAP device ath0 created osifp: (ffffffc010a06880) os_if: (ffffffc018838068)
[   14.541982] wlan: [556:I:ANY] wlan_scan_update_channel_list: 1153: num_chan: 11
[   14.547598] wlan: [556:I:ANY] number of channels: 2G = 11 5G = 0, 6G = 0
[   14.601041] wlan: [580:I:ANY] ol_ath_vap_set_param: 2308: VDEV params:HE su_bfee:0|su_bfer:1|mu_bfee:0|mu_bfer:1|dl_muofdma:1|ul_muofdma:1|ul_mumimo:0|dl_muofdma_bfer:0
[   14.601087] wlan: [580:I:ANY] ol_ath_vap_set_param: 2321: he_bf_cap=0x3a
[   14.650412] wlan: [604:I:ANY] ieee80211_ioctl_siwfreq: 2681: VAP is not ready. Saving channel [-1] freq [0] to configure later
[   14.653445] wlan: [606:I:ANY] ol_ath_vap_set_param: 1208: Setting SGI value: 1
[   14.666637] wlan: [610:I:ANY] DES SSID SET=TP-Link_2.4GHz_D26CA2
[   14.682929] wlan: [620:I:ANY] ieee80211_ucfg_setparam: 4582: set beacon rate:1000.
[   14.682929] 
[   14.686048] wlan: [622:I:ANY] ol_ath_vap_set_param: 1345: Configuring BCAST RATE is deffered as channel is not yet set for VAP 
[   14.694024] wlan: [624:I:ANY] ol_ath_vap_set_param: 1302: Configuring MCAST RATE is deffered as channel is not yet set for VAP 
[   14.705328] wlan: [626:I:ANY] ieee80211_ucfg_setparam: 3028: set mgmt rate:1000.
[   14.705328] 
[   14.713717] wlan: [626:I:ANY] ol_ath_vap_set_param: 1388: Configuring MGMT RATE is deffered as channel is not yet set for VAP 
[   14.725772] Set data minrate: 0 
[   14.734010] Disable data minrate
[   14.737458] bw_nss_val: 0x10fff
[   14.743630] Set sta minrate: 1000 
[   14.743654] Set sta minrate: 1000
[   14.752849] Set disable CCK rate: 0 
[   14.752874] Set dis cckrate: 0
[   14.764029] wlan: [640:I:ANY] WARNING: Fragmentation with HT mode NOT ALLOWED!!
[   14.764029] 
Error for wireless request "Set Fragmentation Threshold" (8B24) [   14.769976] wlan: [644:I:ANY] ol_ath_vap_set_param: 1208: Setting SGI value: 1
[   14.780134] wlan: [646:I:ANY] ol_ath_vap_set_param: 2308: VDEV params:HE su_bfee:0|su_bfer:1|mu_bfee:0|mu_bfer:1|dl_muofdma:1|ul_muofdma:0|ul_mumimo:0|dl_muofdma_bfer:0
[   14.784479] wlan: [646:I:ANY] ol_ath_vap_set_param: 2321: he_bf_cap=0x1a
[   14.802764] wlan: [648:I:ANY] ol_ath_vap_set_param: 2308: VDEV params:HE su_bfee:0|su_bfer:1|mu_bfee:0|mu_bfer:1|dl_muofdma:0|ul_muofdma:0|ul_mumimo:0|dl_muofdma_bfer:0
[   14.806403] wlan: [648:I:ANY] ol_ath_vap_set_param: 2321: he_bf_cap=0xa
:
    SET failed on device ath0 ; Invalid argument.
[   14.884712] wlan: [680:I:ANY] ol_ath_set_config_param: 3451: reject rssi en:0
Removing interface ath0 failed
FAIL
[   14.929210] wlan: [512:I:ANY] wlan_cfg80211_do_acs: 3732: vap-0(ath0):ACS Params
[   14.929238] wlan: [512:I:ANY] wlan_cfg80211_do_acs: 3735: ht_enabled:1|ht40_enabled:0|vht_enabled:1|hw_mode:29|chwidth:20|
[   14.935748] ++++wlan_cfg80211_do_acs: wait acs time: 0(ms)
[   14.946634] wlan: [512:I:ANY] ieee80211_autoselect_infra_bss_channel: 4114: ACS started: vap:0xffffffc018838068
OK
brctl: bridge br0: Resource busy
00.00.15.842128 MCSD plugin   info : Initializing plugin manager
mcastds: Entering evloopRun
[   16.031731] wlan: [710:I:ANY] wlan_scan_update_channel_list: 1153: num_chan: 9
[   16.032500] wlan: [710:I:ANY] wlan_scan_update_channel_list: 1153: num_chan: 9
[   16.037918] wlan: [710:I:ANY] number of channels: 2G = 0 5G = 9, 6G = 0
Invalid command : HALDbg
Invalid command : chainmasksel
Interface doesn't accept private ioctl...
AMPDU (8BE0): Operation not permitted
Interface doesn't accept private ioctl...
AMPDUFrames (8BE0): Operation not permitted
Interface doesn't accept private ioctl...
AMPDULim (8BE0): Oper[   16.073409] wlan: [725:I:Monitor Filter] dp_mon_ht2_rx_ring_cfg: 119: srng type 2 Max_mac_rings 1 
[   16.079580] wlan: [725:I:Monitor Filter] dp_mon_ht2_rx_ring_cfg: 119: srng type 1 Max_mac_rings 1 
[   16.091421] wlan: [727:I:ANY] ol_ath_set_config_param: 1674: set TXBF_SND_PERIOD: value 100 wmi_status 0
ation not permitted
==== configure 5G thermal policy ====
[   16.147472] wlan: [746:I:ANY] wlan_cfg80211_add_virtual_intf: 338: proprietary mode 6 for interface: ath10 : clone params: 0x00000001 
[   16.147544] wlan: [746:I:ANY] osifp_create_wlan_vap: 9942: VDEV Create 28:87:ba:d2:6c:a3
[   16.158668] wlan: [746:I:ANY] wlan_vap_create: 1611: devhandle=0xffffffc0171e0880, opmode=IEEE80211_M_HOSTAP, flags=0x1
[   16.158668] 
[   16.166963] wlan: [746:I:ANY] ol_ath_vap_set_param: 1208: Setting SGI value: 1
[   16.178982] wlan: [746:I:ANY] ol_ath_vap_set_param: 2308: VDEV params:HE su_bfee:1|su_bfer:1|mu_bfee:0|mu_bfer:1|dl_muofdma:1|ul_muofdma:1|ul_mumimo:1|dl_muofdma_bfer:0
[   16.185987] wlan: [746:I:ANY] ol_ath_vap_set_param: 2321: he_bf_cap=0x7b
[   16.201224] wlan: [746:I:ANY] ol_ath_vap_set_param: 2336: VDEV params:AC/VHT sounding mode:HE|SU/MU sounding mode:SU|Trig/Non-Trig sounding mode:Non-Trigged
[   16.207915] wlan: [746:I:ANY] MBO Initialized
[   16.221820] wlan: [746:I:ANY] OCE Initialized
[   16.226384] wlan: [746:I:ANY] osif_create_vap_complete: 10150: TX Checksum:1|SG:1|TSO:1|LRO:0
[   16.232262] wlan: [746:I:ANY] VAP device ath10 created osifp: (ffffffc0101c8880) os_if: (ffffffc00fdb0068)
[   16.243606] wlan: [749:I:ANY] wlan_scan_update_channel_list: 1153: num_chan: 9
[   16.249210] wlan: [749:I:ANY] wlan_scan_update_channel_list: 1153: num_chan: 9
[   16.255746] wlan: [749:I:ANY] number of channels: 2G = 0 5G = 9, 6G = 0
[   16.301271] wlan: [773:I:ANY] ol_ath_vap_set_param: 2308: VDEV params:HE su_bfee:0|su_bfer:1|mu_bfee:0|mu_bfer:1|dl_muofdma:1|ul_muofdma:1|ul_mumimo:1|dl_muofdma_bfer:0
[   16.301316] wlan: [773:I:ANY] ol_ath_vap_set_param: 2321: he_bf_cap=0x7a
[   16.353781] wlan: [799:I:ANY] ieee80211_ioctl_siwfreq: 2681: VAP is not ready. Saving channel [-1] freq [0] to configure later
[   16.357163] wlan: [802:I:ANY] ol_ath_vap_set_param: 1208: Setting SGI value: 1
[   16.370185] wlan: [806:I:ANY] DES SSID SET=TP-Link_5GHz_D26CA3
[   16.386237] wlan: [817:I:ANY] ieee80211_ucfg_setparam: 4582: set beacon rate:6000.
[   16.386237] 
[   16.389293] wlan: [819:I:ANY] ol_ath_vap_set_param: 1345: Configuring BCAST RATE is deffered as channel is not yet set for VAP 
[   16.397160] wlan: [821:I:ANY] ol_ath_vap_set_param: 1302: Configuring MCAST RATE is deffered as channel is not yet set for VAP 
[   16.408575] wlan: [823:I:ANY] ieee80211_ucfg_setparam: 3028: set mgmt rate:6000.
[   16.408575] 
[   16.417116] wlan: [823:I:ANY] ol_ath_vap_set_param: 1388: Configuring MGMT RATE is deffered as channel is not yet set for VAP 
[   16.429026] Set data minrate: 0 
[   16.437324] Disable data minrate
[   16.440690] bw_nss_val: 0x10fff
[   16.447018] Set sta minrate: 6000 
[   16.447042] Set sta minrate: 6000
[   16.456095] Set disable CCK rate: 0 
[   16.456121] Set dis cckrate: 0
[   16.467502] wlan: [837:I:ANY] WARNING: Fragmentation with HT mode NOT ALLOWED!!
[   16.467502] 
Error for wireless request "Set Fragmentation Threshold" (8B24) [   16.473347] wlan: [841:I:ANY] ol_ath_vap_set_param: 1208: Setting SGI value: 1
[   16.483733] wlan: [843:I:ANY] ol_ath_vap_set_param: 2308: VDEV params:HE su_bfee:0|su_bfer:1|mu_bfee:0|mu_bfer:1|dl_muofdma:1|ul_muofdma:0|ul_mumimo:1|dl_muofdma_bfer:0
[   16.487977] wlan: [843:I:ANY] ol_ath_vap_set_param: 2321: he_bf_cap=0x5a
:
    SET failed on device ath10 ; Invalid argument.
[   16.506521] wlan: [845:I:ANY] ol_ath_vap_set_param: 2308: VDEV params:HE su_bfee:0|su_bfer:1|mu_bfee:0|mu_bfer:1|dl_muofdma:0|ul_muofdma:0|ul_mumimo:1|dl_muofdma_bfer:0
[   16.514561] wlan: [845:I:ANY] ol_ath_vap_set_param: 2321: he_bf_cap=0x4a
[   16.570226] wlan: [872:I:ANY] ol_ath_set_config_param: 3451: reject rssi en:0
Removing interface ath10 failed
FAIL
[   16.586254] wlan: [512:I:ANY] wlan_cfg80211_do_acs: 3732: vap-1(ath10):ACS Params
[   16.586284] wlan: [512:I:ANY] wlan_cfg80211_do_acs: 3735: ht_enabled:1|ht40_enabled:0|vht_enabled:1|hw_mode:30|chwidth:20|
[   16.592982] ++++wlan_cfg80211_do_acs: wait acs time: 0(ms)
[   16.604095] wlan: [512:I:ANY] ieee80211_autoselect_infra_bss_channel: 4114: ACS started: vap:0xffffffc00fdb0068
OK
brctl: bridge br0: Resource busy
radio_region_getChanCommonFlag(): 990  @ invalid chanInde[   17.645761] 
[   17.645761] manage vlan set ssid vlan: idx (0), intfName (ath0), vlan (0)
[   17.649725] 
[   17.649725] manage vlan set ssid vlan: idx (1), intfName (ath10), vlan (0)
x:0, current channelNum = 21
[   17.698242] tp mesh events being sent to PID:270
[Debug ledListenEventHandler:148] Accept a new client.
[Debug ledClientEventHandler:110] GPIOD received led rule: LED_SYS_INIT_OK.
[   17.710007] [Debug led_proc_write:651] Write led_yellow.
[   17.713539] [Debug led_common_write_proc:490] Execute LED action:    { 1   0   0   0   0 }
[   17.728281] [Debug led_proc_write:651] Write led_green.
[   17.728313] [Debug led_common_write_proc:490] Execute LED action:    { 3   0   500 500 4 }
[   18.339929] wlan: [385:I:ANY] vap-0(ath0): ACS result PCH 11 freq 2462, SCH 7 freq 2442, hw_mode 1 chwidth 40, vht_seg0 9 freq 2452, vht_seg1 0 freq 0
[   18.339990] wlan: [385:I:ANY] ieee80211_acs_scan_evhandler: 3848: lock held duration: 1(ms)
[   18.341032] wlan: [512:I:ANY] DES SSID SET=TP-Link_2.4GHz_D26CA2
[   18.341042] wlan: [512:I:ANY] wlan_cfg80211_chan_to_phymode: 1242: wlan_cfg80211_chan_to_phymode: band:0 width: 2 channel_cfreq: 2462 center_freq1: 2452 chandef.center_freq2: 0 flags: 0 
[   18.341157] wlan: [512:I:ANY] ieee80211_ucfg_set_freq_internal: 559: 
[   18.341157]  Channel is configured already!!
[   18.395797] wlan: [0:I:CMN_MLME] vdev[0] ieee chan:11 freq:2462
[   18.396021] wlan: [0:E:FILS discovery] wlan_fd_set_valid_fd_period: 607: Invalid FD Interval : 0. Valid range is 20 - 100ms.
[   18.396021] FD Interval should be a factor of BI.
[   18.396021] Disabling FD
[   18.396021] 
[   18.400711] wlan: [0:E:FILS discovery] wlan_fd_set_valid_fd_period: 607: Invalid FD Interval : 0. Valid range is 20 - 100ms.
[   18.400711] FD Interval should be a factor of BI.
[   18.400711] Disabling FD
[   18.400711] 
[   18.420763] wlan: [0:I:ANY] vdev[0]: Mgt Rate:1000(kbps)
[   18.440580] wlan: [0:I:ANY] ol_ath_vap_set_param: 1377: ol_ath_vap_set_param: Now supported BCAST RATE is 1000(kbps) and rate code: 0x10000103
[   18.445859] wlan: [0:I:ANY] ol_ath_vap_set_param: 1334: ol_ath_vap_set_param: Now supported MCAST RATE is 1000(kbps) and rate code: 0x10000103
[   18.458486] wlan: [0:I:ANY] vdev[0]: Mgt Rate:1000(kbps)
[   18.471190] wlan: [0:I:ANY] ol_ath_vap_set_param: 1377: ol_ath_vap_set_param: Now supported BCAST RATE is 1000(kbps) and rate code: 0x10000103
[   18.476672] wlan: [0:I:ANY] ol_ath_vap_set_param: 1334: ol_ath_vap_set_param: Now supported MCAST RATE is 1000(kbps) and rate code: 0x10000103
ath0: CTRL-EVENT-CHANNEL-SWITCH freq=2462 ht_enabled=1 ch_offset=0 ch_width=20 MHz cf1=2462 cf2=0 dfs=0
[   19.382659] wlan: [385:I:ANY] vap-1(ath10): ACS result PCH 149 freq 5745, SCH 157 freq 5785, hw_mode 2 chwidth 80, vht_seg0 155 freq 5775, vht_seg1 0 freq 0
[   19.382720] wlan: [385:I:ANY] ieee80211_acs_scan_evhandler: 3848: lock held duration: 1(ms)
[   19.383783] wlan: [512:I:ANY] DES SSID SET=TP-Link_5GHz_D26CA3
[   19.383789] wlan: [512:I:ANY] wlan_cfg80211_set_phymode: 1218: desired hw mode: 30
[   19.384070] wlan: [512:I:ANY] ieee80211_ucfg_set_freq_internal: 559: 
[   19.384070]  Channel is configured already!!
[   19.481055] wlan: [0:I:CMN_MLME] vdev[1] ieee chan:149 freq:5745
[   19.481250] wlan: [0:E:FILS discovery] wlan_fd_set_valid_fd_period: 607: Invalid FD Interval : 0. Valid range is 20 - 100ms.
[   19.481250] FD Interval should be a factor of BI.
[   19.481250] Disabling FD
[   19.481250] 
[   19.486261] wlan: [0:E:FILS discovery] wlan_fd_set_valid_fd_period: 607: Invalid FD Interval : 0. Valid range is 20 - 100ms.
[   19.486261] FD Interval should be a factor of BI.
[   19.486261] Disabling FD
[   19.486261] 
[   19.506062] wlan: [0:I:ANY] vdev[1]: Mgt Rate:6000(kbps)
[   19.525892] wlan: [0:I:ANY] ol_ath_vap_set_param: 1377: ol_ath_vap_set_param: Now supported BCAST RATE is 6000(kbps) and rate code: 0x10000003
[   19.531199] wlan: [0:I:ANY] ol_ath_vap_set_param: 1334: ol_ath_vap_set_param: Now supported MCAST RATE is 6000(kbps) and rate code: 0x10000003
[   19.543799] wlan: [0:I:ANY] vdev[1]: Mgt Rate:6000(kbps)
[   19.556531] wlan: [0:I:ANY] ol_ath_vap_set_param: 1377: ol_ath_vap_set_param: Now supported BCAST RATE is 6000(kbps) and rate code: 0x10000003
[   19.562016] wlan: [0:I:ANY] ol_ath_vap_set_param: 1334: ol_ath_vap_set_param: Now supported MCAST RATE is 6000(kbps) and rate code: 0x10000003
ath10: CTRL-EVENT-CHANNEL-SWITCH freq=5745 ht_enabled=1 ch_offset=1 ch_width=80 MHz cf1=5775 cf2=0 dfs=0
iptables: Bad rule (does a matching rule exist in that chain?).
now ok to start tddp---------------------
uclite init ok, now startup eap-cs ---------------------
httpMudCreate: MUD 0x4a7e58 was created
[NM_Debug](nm_region_getRegionName) 00192: Flash region info, code: 841, name: US.
[NM_Debug](nm_region_getRegionName) 00192: Flash region info, code: 841, name: US.
[utilities_debug: httpSystemFirmwareInit:271]register rpm
[utilities_debug: httpSystemFirmwareInit:271]register rpm
httpServerCreate------------------
httpServerCreate------------------
httpServerCreate: try to add port 22080
httpServerCreate: try to add port 80
[Debug ledListenEventHandler:148] Accept a new client.
[Debug ledClientEventHandler:110] GPIOD received led rule: LED[   20.704507] [Debug led_proc_write:651] Write led_green.
[   20.708813] [Debug led_common_write_proc:490] Execute LED action:    { 7   0   0   0   0 }
_ISOLATED_FINISH.
[   28.691104] tp dfs events being sent to PID:284
route: SIOCDELRT: No such process
[UNIX_SOCK][unix_sock_connSrv:301]connect to file(/var/run/srv/22) failed after retry(0), errno(2):No such file or directory
Into util_dbg_setMod, pModName(all), enable(1)
route: SIOCDELRT: No such process
[UNIX_SOCK][unix_sock_connSrv:301]connect to file(/var/run/srv/22) failed after retry(0), errno(2):No such file or directory

kirdesde commented 2 years ago

For me it looks like they added the rtl phy init into the ssdk:

[  5.946201] HPPE initializing...
[    5.946904] rtl8211_phy_init[536]:ERROR:Init RTL8211, dev_id: 0, port_bmp: 20
[    5.953874] rtl8211_phy_api_ops_init[516]:INFO:qca probe rtl8211 phy driver succeeded!

Any chance for getting the gpl source?

Maybe @robimarko has an idea how to add the phy init to the ssdk.

robimarko commented 2 years ago

@kirdesde That is from the stock FW?

If so, its definitively not in the "upstream" SSDK. BTW: https://git.codelinaro.org/clo/qsdk/oss/lklm/qca-ssdk/-/commit/c1cb29074905dae1f9a6d1f61ed601727b52c5c2

TP-Link has GPL for that EAP610: https://static.tp-link.com/upload/gpl-code/2022/202204/20220411/ipq60xx_eap610_outdoor_v1.tar.gz

As far as I can tell, it should parse stuff from the kernel instead of internally just for cases where PHY driver is in kernel

kirdesde commented 2 years ago

@kirdesde That is from the stock FW? Yes, it's from the provide stock kernel log.

If so, its definitively not in the "upstream" SSDK. BTW: https://git.codelinaro.org/clo/qsdk/oss/lklm/qca-ssdk/-/commit/c1cb29074905dae1f9a6d1f61ed601727b52c5c2

TP-Link has GPL for that EAP610: https://static.tp-link.com/upload/gpl-code/2022/202204/20220411/ipq60xx_eap610_outdoor_v1.tar.gz

Yeah, already saw that, but it doesn't contain any qca source related....I can only find pre-built kernel modules (inkl. qca*)

As far as I can tell, it should parse stuff from the kernel instead of internally just for cases where PHY driver is in kernel

kirdesde commented 2 years ago

Looks like they only provide the bare minimum gpl sources, but anything else is pre-built (it contains an entire rootfs)

robimarko commented 2 years ago

Then you should contact them, they must provide all of these components in source as they are GPLv2

mrnuke commented 2 years ago

BTW: https://git.codelinaro.org/clo/qsdk/oss/lklm/qca-ssdk/-/commit/c1cb29074905dae1f9a6d1f61ed601727b52c5c2

Excellent! That's just the patch I needed! I'll need to rebase your qca-ssdk patches on top of the newer release, but that fixes it!

robimarko commented 2 years ago

Excellent, it also allows to move from the built-in drivers for other PHY-s as well in theory

kirdesde commented 2 years ago

Excellent, it also allows to move from the built-in drivers for other PHY-s as well in theory

You mean we can drop nss-dp and use the kernel drivers for QCA8075, QCA8081 and so on?

Or is the DP driver still necessary?

robimarko commented 2 years ago

NSS-DP is the ethernet controller driver, you must use it, but it in theory allows not using the PHY drivers from SSDK. For QCA8081 that isn't hard, but QCA8075 is a real mess

mrnuke commented 2 years ago

I got the SSDK updated in PR #68

solidus1983 commented 2 years ago

@mrnuke


TFTP from server 192.168.132.2; our IP address is 192.168.132.1
Filename 'ipq6018.img'.
Load address: 0x44000000
Loading: *
Got TFTP_OACK: TFTP remote port: changes from 69 to 59086
#################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ###########
         4.2 MiB/s
done
Bytes transferred = 9693213 (93e81d hex)
ipq6018_eth_halt: done
IPQ6018#

Then bootm throws

ipq6018_eth_halt: done IPQ6018# bootm Wrong Image Format for bootm command ERROR: can't get kernel image! IPQ6018#

mrnuke commented 2 years ago

@solidus1983, that might be a bit harder to track down. I only have a couple of suggestions:

double-check that ipq6018.img is indeed the initramfs image
Make sure you don't have a gateway at 192.168.132.1, or change the ip (setenv ipaddr 192.168.132.xxx)

solidus1983 commented 2 years ago

@mrnuke

Original file openwrt-ipq60xx-generic-gl-ax1800-initramfs-fit-uImage.itb
TFTP Server is setup to 192.168.132.2 with direct connection from Flint to Laptop with no gateway.
Routers ip is simply 192.168.132.1

I got as far as it is compiling just hitting the booting wall.

Could it be because i took the dts and dtsi files from TIP 5.4 branch and removed the qcom- from the include statements?

kirdesde commented 2 years ago

I'd also bet you are not booting a initramfs image. You are tftp-ing a ipq6018.img...

Please provide your image definition (generic.mk/Makefile)

robimarko / openwrt