はじめに
手に入れてしまったので、分解します。私に捕まったコンシューマ向けルーターは基本的に分解されてしまいます。可哀想に
これまで分解してBUFFALOのルーターの中で最も新しかったのが、WZR-1750DHP2とかで、2013年発売のモデルだったので、一気に7年も新しいモデルを分解するので進化が楽しみです。
BUFFALO WSR-5400AX6について
2020年6月に発売されたWiFi6対応ルーターです。
公式ページによると、1.5GHzのトリプルコアだそうです。強い。
ファームウェアのバージョンは1.06です。
分解
底面に一箇所、シールの下に1箇所の計2箇所があります。後は爪で止まっているので適当にバキバキやれば取れます。
ヒートシンクに付いている4つのネジを外して、ヒートシンクを取った後にアンテナを外し、基板と筐体を止めているネジ3箇所を外せば、基板と筐体を分離できます。
ヒートシンクがめっちゃゴツいです。しかも両面にヒートシンクがあって、相当発熱することがわかります。
各種IC
SoCはBroadcom BCM6750
製品ページ
RAMはMicron mt41k256m16tw-107
データシート(自鯖ミラー)
ROMはwinbond W29N02KVSIAF
データシート(自鯖ミラー)
WiFi ICはBroadcom BCM43684
製品ページ
スペックをまとめると
CPU・・・ARM Cortex-A7 3コア 1.5GHz
RAM・・・512MB
ROM・・・256MB
って感じです。CPUが32bitなのが残念です。
BroadcomのICが多いのでOpenWRTによるサポートはされない気がします。sirannkedo
UART
基板上を見ると、UARTです！って主張をするJ203というパターンがあります。適当にピンを立てて、オシロスコープでピンアサインとボーレートを調べるとこんな感じでした。VCCは3.3Vです。ボーレートは115200ぽさそうですね。
PCにつなげてブートログを見てみると色々喋ってます。このページの最後の方にまとめて記しておきます。ブートローダはCFEですね。カーネルは4.1.52だそうです。
なんと、ルートシェルにパスワードが掛かっていませんでした。これまでBuffaloのルーターをまともにいじっていなかった(だいたいすぐにOpenWRTを入れていた)ので、わからないんですけど、どの機種もかかってないものなんですかね
コンソールでタブキーを二回押して得られた使えるコマンド一覧も下部に記しておきます。sshdがあったり、openvpnがあったり、ntfs-3gがあったり、smbdがあったりと、面白いです。他のUSBがついていてNAS機能がある機種のファームウェアをあまりいじっていないんでしょう
ファームウェアバックアップ
tftpコマンドが使用できるのでそれを使ってバックアップを取ります。が、なぜか、33MiBを超えるとタイムアウトしてしまい、それ以上転送できませんでした。http経由でダウンロードできないか、/tmpを/www/下の適当なフォルダにマウントして、ダウンロードできないか試してみましたが、できませんでした。そこで、シェルスクリプトをChatGPTに書いてもらって分割して転送するようにしました。
cd /tmp
touch uploadmtd.sh
chmod +x uploadmtd.sh
cat > uploadmtd.shで、下のコードをコピペしてCtrl+Cで書き込みを終了します。
#!/bin/sh
TARGET_FOLDER="/tmp"
TARGET_IP=$1
BLOCK_SIZE=512 # blocksize
TOTAL_SIZE=$((30 * 1024 * 1024)) # image size
BLOCK_COUNT=$((TOTAL_SIZE / BLOCK_SIZE)) # block count for an image
cd $TARGET_FOLDER
for i in 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14; do
DEVICE="/dev/mtd$i"
COUNT=1
while :; do
PART_FILE="${DEVICE}_part${COUNT}.img"
dd if=$DEVICE of=$PART_FILE bs=$BLOCK_SIZE count=$BLOCK_COUNT skip=$((BLOCK_COUNT * (COUNT - 1)))
FILE_SIZE=$(ls -l $PART_FILE | awk '{print $5}')
tftp -p -r $PART_FILE -l $PART_FILE $TARGET_IP
rm $PART_FILE
if [ $FILE_SIZE -lt $TOTAL_SIZE ]; then
dd if=$DEVICE of=chechsumcal
echo "$i"
md5sum chechsumcal
rm chechsumcal
break
fi
COUNT=$((COUNT + 1))
done
done有線LANとかでTFTPサーバ(自分は3CDaemonを使用)を立てたPCと接続し、
./uploadmtd.sh TFTPサーバのIPで実行します。mtdごとのハッシュ値が出るので、メモしておくと良いでしょう。mtd14だけはエラーが出て無限ループに陥ってしまったので電源をぶち抜いてリセットしました。mtd14は諦めです。
送信し終わったらPC側でファイルを結合します。Windowsなら
copy /b mtd0_part* mtd0.imgでよく、Linuxなら
cat mtd0_part* > mtd0.imgだと思います。0から13まで全てで実行し、md5でチェックすれば完了です。
lsmtdっていうコマンドが存在していて、それを確認したところ、
こんな感じになりました。たくさん分かれてます。mountで確認すると
mtd8を/etc/configにマウントしています。ファイルの中身を覗いた感じ、nvram showで得られるものと似たような感じがします。
おわりに
分解してとりあえず見てみましたが、Broadcom製のチップというのも相まってこれ以上はいじらずに使うつもりです。唯一のWiFi6対応なルータなので大切に使おうと思います。
ブートログ
----
BTRM
V1.1
CACH
CODE
ZBSS
MAIN
OTP?
OTPP
USBT
NAND
IMG?
IMGL
UHD?
UHDP
RLO?
RLOP
UBI?
UBIP
PASS
HELO
CPU0
L1CD
MMUI
ZBBS
MAIN
5.0207p1-1.0.0-3.45
SEND
Boot Strap Register: 0x7fffffc2
NVRAM memcfg 0x20000427
MCB chksum 0x870be862, config 0x20000427
MemsysInit lpf0fc_generic 3.3.7.100 20180907
DDR3
8421D880 80180000 801A0000 00000000 00000000 00805997
MCB rev=0x00060301 Ref ID=0x05997 Sub Bld=0x008
Dram Timing 11-11-11
start of memsys_begin
mc_cfg_init(): Initialize the default values on mc_cfg
init_memc_dram_profile(): Initializing MEMC DRAM profile
---------------------------------------------------------------
MEMC DRAM profile (memc_dram_profile_struct) values:
dram_type = DDR3
====================================================
PART values:
part_speed_grade = 1600 CL11
part_size_Mbits = 4096 (DRAM size in MegaBits)
part_row_bits = 15 (number of row bits)
part_col_bits = 10 (number of column bits)
part_ba_bits = 3 (number of bank bits)
part_width_bits = 16 (DRAM width in bits)
NUMER OF PARTS:
part_num = 1 (Number of parts)
TOTAL values:
total_size_Mbits = 4096 (DRAM size in MegaBits)
total_cs_bits = 0 (number of cs bits, for dual_rank mode)
total_width_bits = 16 (DRAM width in bits)
total_burst_bytes = 16 (Number of bytes per DRAM access)
total_max_byte_addr = 0x1fffffff (Maximum/last DRAM byte address)
(Number of bits in total_max_byte_addr is 29)
(i.e. total_max_byte_addr goes from bit 0 to bit 28)
ddr_2T_mode = 1
ddr_hdp_mode = 0
large_page = 1
ddr_dual_rank = 0
cs_mode = 0
MEMC timing (memc_dram_timing_cfg_struct) values:
====================================================
MC_CHN_TIM_TIM1_0 register fields:
tCwl = 8
tRP = 11
tCL = 11
tRCD = 11
MC_CHN_TIM_TIM1_1 register fields:
tCCD_L = 4
tCCD = 4
tRRD_L = 6
tRRD = 6
MC_CHN_TIM_TIM1_2 register fields:
tFAW = 32
tRTP = 6
tRCr = 39
MC_CHN_TIM_TIM1_3 register fields:
tWTR_L = 6
tWTR = 6
tWR_L = 12
tWR = 12
MC_CHN_TIM_TIM2 register fields:
tR2R = 0
tR2W = 2
tW2R = 2
tW2W = 0
tAL = 0
tRFC = 208
====================================================
Poll PHY Status register
PHY Status= 1
Disable Auto-Refresh
[0x80180200] = 0x00000305
End of memsys_begin
Add/Ctl Alignment
no adjustment
ZQ Cal LP PHY
R in Ohm
P: Finger=0x2D0 Term=0x78 Drv=0x41
N: Finger=0x2D0 Term=0x78 Drv=0x41
PLL Ref(Hz)=0x02FAF080 UI STEPS=0x03A
DDR CLK(MHz)=0x30B WL CLK dly(ps)=0x0C8 bitT(ps)=0x281 VDLsize(fs)=0x2B2B CLK_VDL=0x01A
start of memc_init
[0x80180004] = 0x0110061f
[0x80180234] = 0x00000501
Enable Auto-Refresh
[0x80180110] = 0x11100f0e
[0x80180114] = 0x15141312
[0x80180118] = 0x19181716
[0x8018011c] = 0x001c1b1a
[0x80180124] = 0x04000000
[0x80180128] = 0x08070605
[0x8018012c] = 0x00000a09
[0x80180134] = 0x000d0c0b
Writing to MC_CHN_CFG_CNFG reg; data=0x00000000
[0x80180100] = 0x00000000
cfg_memc_timing_ctrl() Called
[0x80180214] = 0x080b0b0b
[0x80180218] = 0x04040606
[0x8018021c] = 0x20000627
[0x80180220] = 0x06060c0c
[0x80180224] = 0x120000d0
End of memc_init
start of pre_shmoo
[0x80180004] = 0xc110071f
end of pre_shmoo
SHMOO 28nm
801A0000 80180800 00000000 00020000 00000000
Shmoo WL
One UI Steps : 0x45
auto-clk result = 00F (filter=0C steps)
initial CLK shift = 01A
final CLK shift = 00F
000000000011111111112222222222333333333344444444445555555555666666666
012345678901234567890123456789012345678901234567890123456789012345678
00 S-----------X--------------------------------------------------------
01 S-----------X--------------------------------------------------------
Shmoo RD En
DQSN DRIVE PAD CONTROL (from) (to)
B0 0003196B 0007996B
B1 0003196B 0007996B
B0 RISE UI=1 VDL=20 PICK UI=2 VDL=20
B1 RISE UI=1 VDL=1F PICK UI=2 VDL=1F
000000000011111111112222222222333333333344444444445555555555666666666
012345678901234567890123456789012345678901234567890123456789012345678
000000000011111111112222222222333333333344444444445555555555666666666
012345678901234567890123456789012345678901234567890123456789012345678
00 -----++++++++++++++++++++++++X++++++++++++++++++++++++---------------
01 ---------++++++++++++++++++++++++X++++++++++++++++++++++++-----------
02 -----++++++++++++++++++++++++X+++++++++++++++++++++++++--------------
03 --------+++++++++++++++++++++++++X++++++++++++++++++++++++++---------
04 ------++++++++++++++++++++++++X+++++++++++++++++++++++++-------------
05 ---------++++++++++++++++++++++++X++++++++++++++++++++++++-----------
06 ----++++++++++++++++++++++++X++++++++++++++++++++++++----------------
07 ----++++++++++++++++++++++++X++++++++++++++++++++++++----------------
08 ------++++++++++++++++++++++++X+++++++++++++++++++++++++-------------
09 ------++++++++++++++++++++++++X++++++++++++++++++++++++--------------
10 --------++++++++++++++++++++++++X+++++++++++++++++++++++++-----------
11 --+++++++++++++++++++++++++X++++++++++++++++++++++++++---------------
12 ------+++++++++++++++++++++++X++++++++++++++++++++++++---------------
13 -----++++++++++++++++++++++++X++++++++++++++++++++++++---------------
14 ----------++++++++++++++++++++++++X++++++++++++++++++++++++----------
15 -----++++++++++++++++++++++++X++++++++++++++++++++++++---------------
Shmoo RD DQ P
000000000011111111112222222222333333333344444444445555555555666666666
012345678901234567890123456789012345678901234567890123456789012345678
00 ---+++++++++++++++++++++++++X++++++++++++++++++++++++++--------------
01 --------+++++++++++++++++++++++++X++++++++++++++++++++++++++---------
02 ----+++++++++++++++++++++++++X++++++++++++++++++++++++++-------------
03 --------+++++++++++++++++++++++++X++++++++++++++++++++++++++---------
04 -----+++++++++++++++++++++++++X++++++++++++++++++++++++++------------
05 -------+++++++++++++++++++++++++X++++++++++++++++++++++++++----------
06 ----++++++++++++++++++++++++X+++++++++++++++++++++++++---------------
07 ---++++++++++++++++++++++++X+++++++++++++++++++++++++----------------
08 ----+++++++++++++++++++++++++X++++++++++++++++++++++++++-------------
09 ---+++++++++++++++++++++++++X++++++++++++++++++++++++++--------------
10 -----++++++++++++++++++++++++++X++++++++++++++++++++++++++-----------
11 ++++++++++++++++++++++++++X+++++++++++++++++++++++++++---------------
12 ---+++++++++++++++++++++++++X+++++++++++++++++++++++++---------------
13 --+++++++++++++++++++++++++X++++++++++++++++++++++++++---------------
14 -------++++++++++++++++++++++++++X++++++++++++++++++++++++++---------
15 --+++++++++++++++++++++++++X++++++++++++++++++++++++++---------------
Shmoo RD DQ N
000000000011111111112222222222333333333344444444445555555555666666666
012345678901234567890123456789012345678901234567890123456789012345678
00 ----++++++++++++++++++++++++X+++++++++++++++++++++++++---------------
01 --------++++++++++++++++++++++++X+++++++++++++++++++++++++-----------
02 -----++++++++++++++++++++++++X+++++++++++++++++++++++++--------------
03 ---------+++++++++++++++++++++++++X+++++++++++++++++++++++++---------
04 ------++++++++++++++++++++++++X+++++++++++++++++++++++++-------------
05 --------++++++++++++++++++++++++X+++++++++++++++++++++++++-----------
06 ----++++++++++++++++++++++++X++++++++++++++++++++++++----------------
07 -----+++++++++++++++++++++++X++++++++++++++++++++++++----------------
08 ------++++++++++++++++++++++++X+++++++++++++++++++++++++-------------
09 ------++++++++++++++++++++++++X++++++++++++++++++++++++--------------
10 -------+++++++++++++++++++++++++X+++++++++++++++++++++++++-----------
11 --+++++++++++++++++++++++++X++++++++++++++++++++++++++---------------
12 ------+++++++++++++++++++++++X++++++++++++++++++++++++---------------
13 -----++++++++++++++++++++++++X++++++++++++++++++++++++---------------
14 ----------++++++++++++++++++++++++X++++++++++++++++++++++++----------
15 -----+++DQ
000000000011111111112222222222333333333344444444445555555555666666666
012345678901234567890123456789012345678901234567890123456789012345678
00 ------+++++++++++++++++++++++++X+++++++++++++++++++++++++------------
01 ------+++++++++++++++++++++++++X++++++++++++++++++++++++++-----------
02 ------+++++++++++++++++++++++++X++++++++++++++++++++++++++-----------
03 ---------++++++++++++++++++++++++++X++++++++++++++++++++++++++-------
04 -------+++++++++++++++++++++++++X++++++++++++++++++++++++++----------
05 ----------+++++++++++++++++++++++++X+++++++++++++++++++++++++--------
06 ------+++++++++++++++++++++++++X++++++++++++++++++++++++++-----------
07 ------+++++++++++++++++++++++++X+++++++++++++++++++++++++------------
08 -----++++++++++++++++++++++++++X++++++++++++++++++++++++++-----------
09 ------++++++++++++++++++++++++++X++++++++++++++++++++++++++----------
10 ---------+++++++++++++++++++++++++X++++++++++++++++++++++++++--------
11 -++++++++++++++++++++++++++X++++++++++++++++++++++++++---------------
12 -----++++++++++++++++++++++++++X++++++++++++++++++++++++++-----------
13 ----+++++++++++++++++++++++++X+++++++++++++++++++++++++--------------
14 ---------+++++++++++++++++++++++++X++++++++++++++++++++++++++--------
15 -----++++++++++++++++++++++++X+++++++++++++++++++++++++--------------
Shmoo WR DM
WR DM
000000000011111111112222222222333333333344444444445555555555666666666
012345678901234567890123456789012345678901234567890123456789012345678
00 ---------++++++++++++++++++++++++++X++++++++++++++++++++++++++-------
01 ---++++++++++++++++++++++++++X+emsys_end
[0x80180004] = 0x8110071f
[0x80180010] = 0x00000009
end of memsys_end
DDR test done successfully
FPS0
----
PAR1
U006
COM0
UBI#
0006
BT06
0008
----
PAR2
U006
COM0
UBI#
0006
BT06
0952
----
TRY1
NAN3
UBI!
NAN5
Base: 5.2_07p1
CFE version 1.0.0-5.192 for BCM963178 (32bit,SP,LE)
Build Date: Thu Nov 16 18:02:31 CST 2023 (ken@cvs1)
Copyright (C) 2000-2015 Broadcom Corporation.
SEND
Boot Strap Register: 0x7fffffc2
Chip ID: BCM6750_A2, ARM Cortex A7 Triple Core: 1500MHz
Total Memory: 536870912 bytes (512MB)
NAND ECC BCH-4, page size 0x800 bytes, spare size used 64 bytes
NAND flash device: , id 0x0000efda block 128KB size 262144KB
AOSS button pressed not detected && flag!=1
Take PMC out of reset
waiting for PMC finish booting
PMC rev: 3.0.8.223958 running
pmc_init:PMC using DQM mode
Board IP address : 192.168.11.6:ffffff00
Host IP address : 192.168.11.168
Gateway IP address :
Run from flash/host/tftp (f/h/c) : f
Default host flash file name : bcm963xx_fs_kernel
Boot delay (0-9 seconds) : 1
Boot image (0=latest, 1=previous) : 0
Default host ramdisk file name : WSR-5400AX6_ramdisk
Default ramdisk store address : 0x8000000
Default DTB file name : WSR-5400AX6.dtb
Board Id : WSR-2976AX6
Number of MAC Addresses (1-64) : 11
Base MAC Address : 18:ec:e7:51:b2:50
PSI Size (1-512) KBytes : 48
Enable Backup PSI [0|1] : 0
System Log Size (0-256) KBytes : 0
Auxillary File System Size Percent: 0
WLan Feature : 0x00
Partition 1 Size (MB) : 8M
Partition 2 Size (MB) : 2M
Partition 3 Size (MB) : 0M
Partition 4 Size (MB) (Data) : 8M
Initalizing switch low level hardware.
Software Resetting Switch ... Done.
Waiting MAC port Rx/Tx to be enabled by hardware ...Done
Disable Switch All MAC port Rx/Tx
*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 0
P1 Sequence:6, P2 Sequence:6
Verify partition 1 kernel
gtk_ubi_find_file: got vmlinux.lz size 2509110
Verify partition 2 kernel
gtk_ubi_find_file: got vmlinux.lz size 2509110
Verify partition 2 kernel
gtk_ubi_find_file: got vmlinux.lz size 2509110
Verify partition 1 kernel
gtk_ubi_find_file: got vmlinux.lz size 2509110
Booting from partition 1 (address 0x00100000, flash offset 0x00100000) ...
ubi_find_file: got vmlinux.lz size 2509110
Decompression LZMA Image OK!
Entry at 0x00018000
Starting program at 0x00018000
cfe_fs_fetch_file: file WSR-2976AX6.dtb not found
ubi_find_file: got 963178.dtb size 5120
/memory = 0x20000000 bytes @ 0x0
Setting ROOTFS: root=/dev/ubiblock0_0 ubi.mtd=0 ubi.block=0,0 rootfstype=squashfs
CFE appending "isolcpus=2" from PROFILE to boot cmdline
Appending CFE version to dtb, ret:0
Appending NVRAM to dtb, ret:0
Booting Linux on physical CPU 0x0
Linux version 4.1.52 (ken@cvs1) (gcc version 5.5.0 (Buildroot 2017.11.1) ) #1 SMP PREEMPT Thu Nov 16 18:25:37 CST 2023
CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=10c5387d
CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
Machine model: Broadcom BCM963178
bootconsole [earlycon0] enabled
Memory policy: Data cache writealloc
On node 0 totalpages: 131072
free_area_init_node: node 0, pgdat c065f100, node_mem_map dfbf8000
Normal zone: 1024 pages used for memmap
Normal zone: 0 pages reserved
Normal zone: 131072 pages, LIFO batch:31
PERCPU: Embedded 11 pages/cpu @dfbcf000 s15372 r8192 d21492 u45056
pcpu-alloc: s15372 r8192 d21492 u45056 alloc=11*4096
pcpu-alloc: [0] 0 [0] 1 [0] 2
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 130048
Kernel command line: isolcpus=2 root=/dev/ubiblock0_0 ubi.mtd=0 ubi.block=0,0 rootfstype=squashfs console=ttyAMA0 earlyprintk debug irqaffinity=0 pci=pcie_bus_safe
PID hash table entries: 2048 (order: 1, 8192 bytes)
Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
Memory: 511772K/524288K available (4734K kernel code, 191K rwdata, 1296K rodata, 208K init, 326K bss, 12516K reserved, 0K cma-reserved, 0K highmem)
Virtual kernel memory layout:
vector : 0xffff0000 - 0xffff1000 ( 4 kB)
fixmap : 0xffc00000 - 0xfff00000 (3ap : 0xbfe00000 - 0xc0000000 ( 2 MB)
modules : 0xbf000000 - 0xbfe00000 ( 14 MB)
.text : 0xc0018000 - 0xc05fbc7c (6032 kB)
.init : 0xc05fc000 - 0xc0630000 ( 208 kB)
.data : 0xc0630000 - 0xc065fdc0 ( 192 kB)
.bss : 0xc065fdc0 - 0xc06b181c ( 327 kB)
Preemptible hierarchical RCU implementation.
NR_IRQS:16 nr_irqs:16 16
Architected cp15 timer(s) running at 50.00MHz (phys).
clocksource arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0xb8812736b, max_idle_ns: 440795202655 ns
sched_clock: 56 bits at 50MHz, resolution 20ns, wraps every 4398046511100ns
Switching to timer-based delay loop, resolution 20ns
BRCM Legacy Drivers' Helper, all legacy drivers' IO memories/interrupts should be remapped here
Remapping interrupts...
hwirq virq
60 20
61 21
43 22
44 23
45 24
46 25
66 26
110 27
69 28
152 29
153 30
154 31
155 32
156 33
157 34
158 35
159 36
76 37
78 38
77 39
79 40
104 41
105 42
106 43
96 44
97 45
98 46
99 47
100 48
101 49
148 50
71 51
128 52
Remapping IO memories...
phys virt size
0000000080180000 00000000e0840000 00024000
0000000080200000 00000000e0c00000 00200000
0000000080400000 00000000e0900000 00090000
00000000ff800000 00000000e0820000 00013000
00000000ff85a000 00000000e0810000 00008000
00000000ffe00000 00000000e0a00000 00100000
00000000ff860000 00000000e0808000 00002000
0000000083010a00 00000000e0802a00 00000100
000000008000c000 00000000e0838000 00003fff
0000000083010000 00000000e080c000 00001000
0000000083018000 00000000e080e000 00001000
0000000083020000 00000000e081a000 00001000
0000000083028000 00000000e081c000 00001000
0000000083030000 00000000e081e000 00001000
0000000083038000 00000000e0834000 00001000
0000000083050000 00000000e0836000 00001000
0000000083060000 00000000e083e000 00001000
0000000083068000 00000000e0866000 00001000
00000000810a0000 00000000e0868000 00001000
0000000081060000 00000000e086c000 00003000
00000000ffff0000 00000000e086a000 00001000
0000000083000000 00000000e0870000 00001000
000000008306c000 00000000e0872000 00001000
0000000080490000 00000000e0880000 00010000
0000000080650000 00000000e08c0000 00020000
0000000080700000 00000000e0f00000 00090000
0000000080800000 00000000e0878000 00006800
0000000081100000 00000000e1000000 00091000
Calibrating delay loop (skipped), value calculated using timer frequency.. 100.00 BogoMIPS (lpj=50000)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
--Kernel Config--
SMP=1
PREEMPT=1
DEBUG_SPINLOCK=0
DEBUG_MUTEXES=0
CPU: Testing write buffer coherency: ok
Setting up static identity map for 0x182c0 - 0x182f4
Reserved memory mapping...
phys virt size
CCI hardfrom dtb
cfe-v: 1.0.0-3.45
Brought up 3 CPUs
SMP: Total of 3 processors activated (300.00 BogoMIPS).
CPU: All CPU(s) started in SVC mode.
devtmpfs: initialized
VFP support v0.3: implementor 41 architecture 2 part 30 variant 7 rev 5
clocksource jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns
futex hash table entries: 1024 (order: 4, 65536 bytes)
NET: Registered protocol family 16
DMA: preallocated 256 KiB pool for atomic coherent allocations
cpuidle: using governor ladder
cpuidle: using governor menu
Serial: AMBA PL011 UART driver
ff812000.serial: ttyAMA0 at MMIO 0xff812000 (irq = 55, base_baud = 0) is a PL011 rev3
console [ttyAMA0] enabled
console [ttyAMA0] enabled
bootconsole [earlycon0] disabled
bootconsole [ea disabled
Gemtek GPIO devices controller init
Broadcom Logger v0.1
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
bcmhs_spi bcmhs_spi.1: master is unqueued, this is deprecated
skb_free_task created successfully with start budget 256
BLOG v3.0 Initialized
BLOG Rule v1.0 Initialized
Broadcom IQoS v1.0 initialized
Broadcom GBPM v0.1 initialized
Switched to clocksource arch_sys_counter
NET: Registered protocol family 2
default registered
default registered
MPTCP: Stable release v0.91
TCP established hash table entries: 4096 (order: 2, 16384 bytes)
TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
UDP hash table entries: 256 (order: 1, 8192 bytes)
UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
NET: Registered protocol family 1
RPC: Registered named UNIX socket transport module.
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
RPC: Registered tcp NFSv4.1 backchannel transport module.
PCI: CLS 0 bytes, default 64
squashfs: version 4.0 (2009/01/31) Phillip Lougher
jffs2: version 2.2. (NAND) (SUMMARY) © 2001-2006 Red Hat, Inc.
fuse init (API version 7.23)
io scheduler noop registered (default)
brd: module loaded
loop: module loaded
nand: device found, Manufacturer ID: 0xef, Chip ID: 0xda
nand: Unknown W29N02KV
nand: 256 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 128
bcm63xx_nand ff801800.nand: Adjust timing_1 to 0x6532845b timing_2 to 0x00091e94
bcm63xx_nand ff801800.nand: detected 256MiB total, 128KiB blocks, 2KiB pages, 16B OOB, 8-bit, BCH-4
Bad block table found at page 131008, version 0x01
Bad block table found at page 130944, version 0x01
>>>>> For primary mtd partition rootfs, cferam/vmlinux.lz UBI volume, vmlinux fs mounted as squash fs on UBI <<<<<
Secondary mtd partition rootfs_update detected as UBI for cferam/vmlinux source and squash fs on UBI for vmlinux filesystem
Creating 10 MTD par Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <[email protected]>
PPP generic driver version 2.4.2
PPP BSD Compression module registered
PPP Deflate Compression module registered
NET: Registered protocol family 24
bcm96xxx-wdt ff800480.watchdog: Broadcom BCM96xxx watchdog timer
brcmboard registered
brcmboard: brcm_board_init entry
print_rst_status: Last RESET due to POR reset
print_rst_status: RESET reason: 0x00000000
DYING GASP IRQ Initialized and Enabled
map_hw_timer_interrupt,130: interrupt_id 22
map_hw_timer_interrupt,130: interrupt_id 23
map_hw_timer_interrupt,130: interrupt_id 24
map_hw_timer_interrupt,130: interrupt_id 25
Allocated EXT_TIMER number 3
Broadcom Timer Initialized
BPM: tot_mem_size=536870912B (512MB), buf_mem_size <15%> =80530635B (76MB), num of buffers=30690, buf size=2624
Broadcom BPM Module Char Driver v0.1 Registered<304>
[NTC bpm] bpm_module_init: tot_mem_pool=1279 mem_idx:1279
init procfs
Gemtek GPIO driver init
char device gpiotimer (major 252) created.
GACT probability NOT on
Mirror/redirect action on
u32 classifier
input device check on
Actions configured
Initializing XFRM netlink socket
NET: Registered protocol family 10
sit: IPv6 over IPv4 tunneling driver
ip6_tunnel: Create ip6_tunnel_fmr proc
ip6_tunnel: Success
ip6_gre: GRE over IPv6 tunneling driver
fullmesh registered
NET: Registered protocol family 17
NET: Registered protocol family 15
bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
Ebtables v2.0 registered
ebt_time registered
ebt_blog registered
ebt_ftos registered
ebt_wmm_mark registered
ebt_qos_map registered
ebt_qos_map registered
L2TP core: blog_l2tp_rcv_check
l2tp_core: L2TP core driver, V2.0
l2tp_ppp: PPPoL2TP kernel driver, V2.0
8021q: 802.1Q VLAN Support v1.8
Registering SWP/SWPB emulation handler
ubi0: attaching mtd0
bcm63xx_nand ff801800.nand: corrected 1 bitflips in blank page at 0x7300800
ubi0: fixable bit-flip detected at PEB 912
ubi0: scanning is finished
ubi0: attached mtd0 (name "rootfs", size 118 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data o, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 4, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 7/0, WL threshold: 4096, image sequence number: 678674373
ubi0: available PEBs: 0, total reserved PEBs: 944, PEBs reserved for bad PEB handling: 111
ubi0: background thread "ubi_bgt0d" started, PID 378
block ubiblock0_0: created from ubi0:0(rootfs_ubifs)
VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
devtmpfs: mounted
Freeing unused kernel memory: 208K
init started: BusyBox v1.12.1 (2023-11-16 18:28:24 CST)
starting pid 406, tty '': '/bin/sh -l -c "bcm_boot_launcher start"'
Mounting filesystems...
>>>>> Starting mdev <<<<<
>>>>> Creating static device nodes <<<<<
>>>>> Mounting /data partition <<<<<
ubi1: attaching mtd2
ubi1: scanning is finished
ubi1 warning: print_rsvd_warning: cannot reserve enough PEBs for bad PEB handling, reserved 4, need 8
ubi1: attached mtd2 (name "data", size 8 MiB)
ubi1: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi1: min./max. I/O unit sizes: 2048/2048, sub-pagned 2048), data offset: 4096
ubi1: good PEBs: 64, bad PEBs: 0, corrupted PEBs: 0
ubi1: user volume: 1, internal volumes: 1, max. volumes count: 128
ubi1: max/mean erase counter: 43/24, WL threshold: 4096, image sequence number: 175567391
ubi1: available PEBs: 0, total reserved PEBs: 64, PEBs reserved for bad PEB handling: 4
ubi1: background thread "ubi_bgt1d" started, PID 471
>>>>> Mounting data partition as UBIFS <<<<<
UBIFS (ubi1:0): background thread "ubifs_bgt1_0" started, PID 489
UBIFS (ubi1:0): recovery needed
UBIFS (ubi1:0): recovery completed
UBIFS (ubi1:0): UBIFS: mounted UBI device 1, volume 0, name "data"
UBIFS (ubi1:0): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
UBIFS (ubi1:0): FS size: 5840896 bytes (5 MiB, 46 LEBs), journal size 1015809 bytes (0 MiB, 6 LEBs)
UBIFS (ubi1:0): reserved for root: 275879 bytes (269 KiB)
UBIFS (ubi1:0): media format: w4/r0 (latest is w4/r0), UUID BBA13B7C-5686-4B26-970F-36907989B842, small LPT model
jffs2: notice: (503) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
nvram_init: INFO=>nvram MAC initialized successfully!
==>shm_init()!!
check_shm_hash: Check shm hash value
nvram_init: INFO=>nvram conf initialized successfully!
nvram_init: INFO=> RAM CONF successful created!
nvram_init: INFO=> RC.CONF successful created!
Configuring system...
wlcsm: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
Initializing WLCSM Module
WLCSM Module loaded successfully
restore done!
*** populated ***
Loading drivers and kernel modules...
BCMLIBS loaded...
Broadcom 802.1Q VLAN Interface, v0.1
brcmchipinfo: brcm_chipinfo_init entry
Broadcom Ingress QoS Module Char Driver v1.0 Registered<303>
Broadcom Ingress QoS v1.0 initialized
Broadcom Packet Flow Cache
FCACHE_CONFIG_MAX_FLOW_ENTRIES<16384>
FCACHE_CONFIG_MAX_FDB_ENTRIES<1024>
FCACHE_CONFIG_MAX_HOST_DEV_ENTRIES<64>
FCACHE_CONFIG_MAX_HOST_MAC_ENTRIES<32>
npe_max_entries<32768>
Bind blog_notify_evt_enqueue_fn[<bf08afb8>]
= 9 period_msec = 5
NBUFF v1.0 Initialized
Total # of labels = 68
Initialized fcache state
Pkt HW acceleration is disabled/unavailable.
Broadcom Packet Flow Cache Char Driver v4.0 Registered<302>
fc_timer_task created successfully
Pkt HW acceleration is disabled/unavailable.
Created Proc FS /procfs/fcache
Broadcom Packet Flow Cache registered with netdev chain
Broadcom Packet Flow Cache learning via BLOG enabled.
[FHW] pktDbgLvl[0xbf0a1fc4]=0
[FHW] fhw_construct:
Initialized Fcache HW accelerator layer state
flwStatsThread created. numFlwsPerPoll 546 maxFlwIdx 16383
Fcache Pathstats created
Constructed Broadcom Packet Flow Cache v4.0
Broadcom Command List Driver v1.0
Broadcom Archer Packet Accelerator Intializing
Open archer Netdevice
Archer DS DPI Initialized
Archer US DPI Initialized
Archer WLAN Interface Construct (Threshold 32 packets, Timeout 500 usec, Jiffies 10)
SYSPORT Driver Constructed (Budget: 128, Coalescing: 826828 nsec)
Archer Mode set to L2+L3
Archer WLAN Rx Thread Initialized
Archer Mode set to L2+L3
Initialized Archer Host Layer
Flow Table (256, 64): e1695000, 4194304 bytes
Flow Info Table (44, 65536): e1a96000, 2883584 bytes
Command List Table (128): virt 0xd7200000, phys 0x17200000, size 2097152 bytes
Command List Control Table (8): d70a0000, 131072 bytes
Sysport Classifier Initialized: Maximum 16384 flows
Archer IQ status changed from 0 to 1
[NTC bitpool] idx_pool_init: 551:FHW[0]:Create Index Pool_Size = 16384
Retrieve num_fhw_path=64
Pathstats allocated 2048 bytes
Broadcom Packet Flow Cache HW acceleration enabled.
Enabled Archer binding to Flow Cache
Broadcom Archer Network Processor Char Driver v0.1 Registered <339>
Archer TCP Pure ACK Enabled
LAG/Trunking enabled <0x08>
SYSPORT Host Binding Successfull
eth0: Down <18:EC:E7:51:B2:50> <IntSw P0, Logical 00> PHY_ID <0x0007f008:0x08: On-chip 1G GPHY> Cfg: ANG.1G; Down
eth1: Down <18:EC:E7:51:B2:50> <IntSw P1, Logical 01> PHY_ID <0x0007f009:0x09: On-chip 1G GPHY> Cfg: ANG.1G; Down
eth2: Down <18:EC:E7:51:B2:50> <IntSw P2, Logical 02> PHY_ID <0x0007f00a:0x0a: On-chip 1G GPHY> Cfg: ANG.1G; Down
eth3: Down <18:EC:E7:51:B2:50> <IntSw P3, Logical 03> PHY_ID <0x0007f00b:0x0b: On-chip 1G GPHY> Cfg: ANG.1G; Down
eth4: Down <18:EC:E7:51:B2:50> <IntSw P4, Logical 04> PHY_ID <0x0007f00c:0x0c: On-chip 1G GPHY> Cfg: ANG.1G; Down
===> Activate Deep Green Mode
logical_port 0, intf_index 0, phys_port 0 -> port_index 0, 4 queues
logical_port 1, intf_index 0, phys_port 1 -> port_index 1, 4 queues
logical_port 2, intf_index 0, phys_port 2 -> port_index 2, 4 queues
logical_port 3, intf_index 0, phys_port 3 -> port_index 3, 4 queues
logical_port 4, intf_index 0, phys_port 4 -> port_index 4, 8 queues
SYSPORT[0] = SWITCH_INTERNAL
RXQ[0]: IRQ 44, CPU 2
CSB Initialized: 0xd6c4b000 (0xd6c4b000), size 64 (128)
Ports 5, TDMA Rings 24
Archer DMA Layer Initialized
Sysport Recycle Task: IRQ 45, CPU 2
dgasp: kerSysRegisterDyingGaspHandler: bcmsw registered
bcm_enet_init:L2316 ENET system contructed and configured enet-kthrd thread
enet_kthread_handler:L293 Instantiating ENET thread
PCIe HCD (impl1)
bcm963xx-pcie: found core [1] vcore [0]
bcm963xx-pcie: [0] DT node available: /pcie@84000000
bcm963xx-pcie: vcore [0] initialized with [1] device
pcie-vcore 84000000.pcie: PCI host bridge to bus 0000:01
pci_bus 0000:01: root.0: reg 0x10: [mem 0x84000000-0x84ffffff 64bit]
pci 0000:01:00.0: supports D1 D2
PCI: bus1: Fast back to back transfers disabled
pci 0000:01:00.0: BAR 0: assigned [mem 0x84000000-0x84ffffff 64bit]
bcm963xx-pcie: [0] DT node available: /pcie@80040000
bcm963xx-pcie: found port [0] GEN2 Core Rev [3.23] with 1 Lanes
getrcal for res select 5, int 659, ext 624, ratio 121 ratio1 156, rcal 9
bcm963xx-pcie: Core [0] setting resistor calibration value to 0x9
bcm963xx-pcie: core [0] Link UP - [1] lanes, [GEN2] speed
bcm963xx-pcie 80040000.pcie: PCI host bridge to bus 0001:00
pci_bus 0001:00: root bus resource [mem 0xc0000000-0xcfffffff]
pci_bus 0001:00: root bus resource [bus 00-ff]
bcm963xx-pcie: Coreci 0001:00:00.0: [14e4:0675] type 01 class 0x060400
pci 0001:00:00.0: PME# supported from D0 D3hot
PCI: bus0: Fast back to back transfers disabled
pci 0001:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
pci 0001:01:00.0: [14e4:aaa4] type 00 class 0x028000
pci 0001:01:00.0: reg 0x10: [mem 0x00000000-0x0000ffff 64bit]
pci 0001:01:00.0: reg 0x18: [mem 0x00000000-0x007fffff 64bit]
pci 0001:01:00.0: reg 0x20: [mem 0x00000000-0x000fffff 64bit pref]
pci 0001:01:00.0: supports D1 D2
pci 0001:00:00.0: Checking PCIe ASPM for vendor 14e4 device aaa4
pci 0001:00:00.0: Disabling PCIe ASPM for vendor 14e4 device aaa4
PCI: bus1: Fast back to back transfers disabled
pci_bus 0001:01: busn_res: [bus 01-ff] end is updated to 01
pci 0001:00:00.0: BAR 8: assigned [mem 0xc0000000-0xc0bfffff]
pci 0001:00:00.0: BAR 9: assigned [mem 0xc0c00000-0xc0cfffff 64bit pref]
pci 0001:01:00.0: BAR 2: assigned [mem 0xc0000000-0xc07fffff 64bit]
pci 0001:01:00.0: BAR 4: assigned [mem 0xc0c00000-0xc0cfffff 64bit pref]
pci 0001:01:00.0: BAR 0: assigned [mem 0xc0800000-0xc080ffff 64bit]
pci 0001:00:00.0: PCI bridge to [bus 01]
pci 0001:00:00.0: bridge window [mem 0xc0000000-0xc0bfffff]
pci 0001:00:00.0: bridge window [mem 0xc0c00000-0xc0cfffff 64bit pref]
pcieport 0001:00:00.0: enabling device (0140 -> 0142)
pcieport 0001:00:00.0: Max Payload Size set to 512/ 512 (was 128), Max Read Rq 512
pci 0001:01:00.0: Max Payload Size set to 512/ 512 (was 128), Max Read Rq 512
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
ehci-platform: EHCI generic platform driver
ehci-pci: EHCI PCI platform driver
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
ohci-platform: OHCI generic platform driver
ohci-pci: OHCI PCI platform driver
++++ Powering up USB blocks
xhci-hcd xhci-hcd.0: xHCI Host Controller
xhci-hcd xhci-hcd.0: new USB bus registered, assigned bus number 1
xhci-hcd xhci-hcd.0: hcc params 0x0250f17d hci version 0x100 quirks 0x00010010
xhci-hcd xhci-hcd.0: irq 43, io mem 0x8000d000
hub 1-0:1.0: USB ave any ports! (err -19)
xhci-hcd xhci-hcd.0: xHCI Host Controller
xhci-hcd xhci-hcd.0: new USB bus registered, assigned bus number 2
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
ehci-platform ehci-platform.0: EHCI Host Controller
ehci-platform ehci-platform.0: new USB bus registered, assigned bus number 3
ehci-platform ehci-platform.0: irq 42, io mem 0x8000c300
ehci-platform ehci-platform.0: USB 2.0 started, EHCI 1.00
hub 3-0:1.0: USB hub found
hub 3-0:1.0: 1 port detected
ohci-platform ohci-platform.0: Generic Platform OHCI controller
ohci-platform ohci-platform.0: new USB bus registered, assigned bus number 4
ohci-platform ohci-platform.0: irq 41, io mem 0x8000c400
hub 4-0:1.0: USB hub found
hub 4-0:1.0: 1 port detected
ehci-platform ehci-platform.1: EHCI Host Controller
ehci-platform ehci-platform.1: new USB bus registered, assigned bus number 5
ehci-platform ehci-platform.1: irq 42, io mem 0x8000c500
ehci-platform ehci-platform.1: USB 2.0 started, EHCI 1.00
hub 5-0:1.0: USB hub found
hub 5-0:1.0: 1 port detected
ohci-platform ohci-platform.1: Generic Platform OHCI controller
ohci-platform ohci-platform.1: new USB bus registered, assigned bus number 6
ohci-platform ohci-platform.1: irq 41, io mem 0x8000c600
hub 6-0:1.0: USB hub found
hub 6-0:1.0: 1 port detected
usbcore: registered new interface driver usblp
usbcore: registered new interface driver usb-storage
usbcore: registered new interface driver uas
usb usb2-port1: over-current condition
broadcomThermalDrv brcm-therm: init (CPU count 3 3 3 3)
usb usb3-port1: over-current condition
brcm_otp_init entry
random: nvram urandom read with 0 bits of entropy available
no modules list in nvram, using defaults...
loading WLAN kernel modules ... firmware_class cfg80211 hnd emf igs dhd wl
usb usb5-port1: over-current condition
cfg80211: Calling CRDA to update world regulatory domain
Loading HND Module
igs_module_init:867: IGS 29 create network socket successful
dhd_module_init in
DHD_FKB_POOL size is:1280 and entry size:2624
DHD_PKTTAG POOL size is:2592 and entry size:64
dhd_pktfwd_sys_init: dhd_PKTFWD[1.0.0] Success
dhd_queue_budget = 256
dhd_sta_threshold = 2048
dhd_if_threshold =
DHD: dongle ram size is set to 6291456(orig 6291456) at 0x0
dhd:0: fw path:/etc/wlan/dhd nv path:(null)
CFG80211-ERROR) wl_setup_wiphy : Registering Vendor80211
dhd_attach(): thread:dhd_watchdog_thread:31f started
dhd_deferred_work_init: work queue initialized
wl0: pktfwd_tbl 0xbf314960
dhd0_awl attach successful tx: 1, rx: 2
Archer WLAN Bind: wl0, wl_radio_idx 0, radio_index 0, mode FKB
dhd_wfd_bind: wl0 wfd_idx 0 success
dhdpcie_irq_enabled: depth:0
dhd:0: fw path:/etc/wlan/dhd nv path:(null)
DHD concate_extfdimg_name: Final FW path is /etc/wlan/dhd/43684b0/rtecdc.bin
dhd_bus_download_firmware: firmware path=/etc/wlan/dhd/43684b0/rtecdc.bin, nvram path=
dhdpcie_ramsize_adj: Enter
dhdpcie_ramsize_adj: Adjust dongle RAMSIZE to 0x580000
dhdpcie_download_code_file: download firmware /etc/wlan/dhd/43684b0/rtecdc.bin
dhdpcie_bus_write_vars: Download, Upload and compare of NVRAM succeeded.
PCIe IPC addr (0x00179c0c) read took 48023 usec. ram[0x00000000,0x0057fffc]
PCIe IPC: addr 0x00179c0c sz 128, Rev host 0x83 dngl 0x83
FWID 0x4e8ede8f, flags 0x10b10083, dcap1 0x2f8f0000 dcap2 0x00000001
trap 0x00000000 assrt 0x00000000,0x00000000,0 cons 0x00267f88
mbox h2d 0x0028dce0 d2h 0x0028dce4 rings 0x0028b280
HME Pages: 1 0 0 0 0 32 0 0
PCIe IPC RINGS sz 128: ring_mem 0x0028b300
h2d wr 0x0028d480 rd 0x0028d8a4 d2h wr 0x0028dcc8 rd 0x0028dcd4
rings h2d 530 d2h 6 flows 528 ifs 16
PCIe IPC: d2h_sync_mode 0x00000000
PCIe IPC: Max rings: h2d 530 d2h 6
PCIe IPC: 2 bytes sized indices
Host iDMA enable
PCIe IPC: DMAing indices: H2D 1 D2H 1
H2D DMA WR INDX : d6222000 array size 1060 = 2 * 530
D2H DMA RD INDX : d6237d00 array size 12 = 2 * 6
D2H DMA WR INDX : d6237c80 array size 12 = 2 * 6
H2D DMA RD INDX : d6239800 array size 1060 = 2 * 530
PCIe IPC: DHD HDR 1
dhdpcie_bus_init_pcie_ipc: Firmware supports CSI Monitor
Force disable fast delete ring feature
PCIe IPC: WI Formats TxP 1 RxP 1 TxC 1 RxC 1
H2D TxPost : format 1 = type 2 size 32 max 1024 hdr_off 16
H2D RxPost 1: format 1 = type 1 size 8 max 1024 shift 0
H2D TxCpln 3: format 1 = type 1 size 8 max 1024
H2D RxCpln 4: format 1 = type 1 size 8 max 1024 offset 0
PCIe IPC: RxPost buf_len 1836 host_physaddrhi 0x00000000
HME: Reset
HME: Haddr64 len 64, 64 PhysAddr lo 0x16234280 hi 0x00000000
HME: Page size 4096 bytes
HME: User #0 len 1, 4096 PhysAddr lo 0x16203000 hi 0x00000000 (va d6203000)
HME: User #5 len 32, 131072 PhysAddr lo 0x162a0000 hi 0x00000000 (va d62a0000)
dhd_bus_start: Initializing 530 h2drings
Attach flowrings pool for 528 rings
iDMA enabled PCIEControl = 1083839a
Created netlink: radio unit idx 0, nl_id 23
CSIMON: HOST CSIMON[1.1.0]
CUR_ETHERADDR : 6
18 ec e7 51 b2 58
dhd_sync_with_dongle: GET_REVINFO device 0x442b, vendor 0x14e4, chipnum 0xaaa4, corerev 129
Dongle Host Driver, version 17.10.157.2805 (r796514)
Compiled in drivers/net/wireless/bcmdhd
Register interface [wl0] MAC: 18:ec:e7:51:b2:58
dhd_module_init out
osl_skb_audit: PASS
wl_module_init: passivemode set to 0x1
wl_module_init: txworkq set to 0x0
wl_pktfwd_sys_init: WL_PKTFWD[1.1.0] Success
wl 0000:01:00.0: enabling device (0140 -> 0142)
wl1: creating kthread wl1-kthrd
si_doattach: using BAR0 value: enum_base=84000000
BME Service Initialization
BME: M2M Core id 0x844 rev 128
M2M Service Initialization: M2M_DD_ENAB 0x00000003
M2M: M2M Core id 0x844 rev 128
M2M: SUCCESS eng 0 alloc rings <d49da000,d6f5e000>,d3124800 depth 256
M2M: SUCCESS eng 1 alloc rings <d30a2000,d6f02000>,d3124000 depth 256
M2M: DMA 0 IntRcvLazy 01000000
M2M: DMA 0 RcvCtrl XmtCtrl enabled
M2M: DMA 1 IntRcvLazy 01000000
M2M: DMA 1 RcvCtrl XmtCtrl enabled
wl1: phy_radio_attach: RF Band Cap: 2G:1 5G:1
wl1: wlc_ap_attach dynamic_ed_thresh2_enable = 0
kerSysGetWifiLed(0) returned 0
BME:register key<1010804> user RLM sel IDX set 1 mem 4 8 hi 0 0
wl1 taf_do_enable: TAF is enabled
CSIMON module registered
wl1_awl attach successful tx: 1, rx: 2
WL_FLCTL[1] bpm_total_skbLAN Bind: wl%d, wl_radio_idx 1, radio_index 1, mode SKB
wl_wfd_bind: wl1 wfd_idx 1 success
wl1: Broadcom BCM63178 802.11 Wireless Controller 17.10.157.2805 (r796514)
Configuring wlan related threads...
no thread pin applied
Wlan related processes are pinned by default
set bcm_archer_us 583 to aff:4
set bcmsw_recycle 622 to aff:2
set bcm_archer_wlan 587 to aff:2
cfg80211: Calling CRDA to update world regulatory domain
set wl1-kthrd 820 to aff:2
set wl1-kthrd and pid:820 to prio:5
Failed to set wl1-kthrd to realtime priority 5
Starting HouseKeeping task...
Loading GRE kernel modules...
gre: GRE over IPv4 demultiplexor driver
ip_gre: GRE over IPv4 tunneling driver
Configuring networking...
Enabling IPv6 Forwarding...
OpenSSL 1.1.1b 26 Feb 2019
writing RSA key
Saving kernel bootup messages for dumpsysinfo...
/etc/rc3.d/S63save-dmesg: line 20: /bin/dmesg: not found
Assigning ip address 192.168.11.6 to br0
/etc/rc3.d/S80gencfg_init.sh: line 13: sendarp: not found
IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
device eth0 entered promiscuous mode
tmctl: tmctl_portTmInit() failed, ret = 2.
ret code = 108.
IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready
device eth1 entered promiscuous mode
tmctl: tmctl_portTmInit() failed, ret = 2.
ret code = 108.
IPv6: ADDRCONF(NETDEV_UP): eth2: link is not ready
device eth2 entered promiscuous mode
tmctl: tmctl_portTmInit() failed, ret = 2.
ret code = 108.
IPv6: ADDRCONF(NETDEV_UP): eth3: link is not ready
device eth3 entered promiscuous mode
tmctl: tmctl_portTmInit() failed, ret = 2.
ret code = 108.
IPv6: ADDRCONF(NETDEV_UP): eth4: link is not ready
device eth4 entered promiscuous mode
tmctl: tmctl_portTmInit() failed, ret = 2.
ret code = 108.
=========================================\n
=========gemtek_rcs_01.sh start==========\n
=========================================\n
led=0, on=5, off=5, blinks,=4000, reset=1, time=4000
mkdir: cannot create directory '/var/log': File exists
---------------- Get WLAN MAC 18:ec:e7:51:b2:50---------------
CAN'T FIND TransferStatus
CAN'T FIND WanCheckPhase
CurrentFwVersion+no_mesh_to_mesh_flag+1.06+150
Fri Jan 1 00:00:00 JST 2021
led=7, on=1, off=4000, blinks,=1, reset=1, time=4000
led=6, on=4000, off=1, blinks,=1, reset=1, time=4000
1301
input_access=[3]
echo 3 > /proc/lan_wlan_access_controller
Success.
Success.
gt_fwsetenv : get bootloader version
CFE=1.0.0-3.45
license 2,----/--/--
Broadcom Packet Flow Cache learning via BLOG disabled.
Broadcom Packet Flow Cache flushing the flows
Broadcom Packet Flow Cache acceleration mode <L2 & L3>
Broadcom Packet Flow Cache learning via BLOG enabled.
Success.
licensestatus 2
WTB function is disabled
1.04 disabled_security
iptables: No chain/target/match by that name.
iptables v1.6.2: Couldn't find target `DIOT-INPUT'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.6.2: Couldn't find target `DIOT-OUTPUT'
Try `iptables -h' or 'iptables --help' Couldn't find target `DIOT-FORWARD'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.6.2: Couldn't find target `DIOT-FORWARD'
Try `iptables -h' or 'iptables --help' for more information.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
ip6tables: No chain/target/match by that name.
ip6tables v1.6.2: Couldn't find target `DIOT-INPUT'
Try `ip6tables -h' or 'ip6tables --help' for more information.
ip6tables v1.6.2: Couldn't find target `DIOT-OUTPUT'
Try `ip6tables -h' or 'ip6tables --help' for more information.
ip6tables v1.6.2: Couldn't find target `DIOT-FORWARD'
t `DIOT-FORWARD'
Try `ip6tables -h' or 'ip6tables --help' for more information.
ip6tables: No chain/target/match by that name.
ip6tables: No chain/target/match by that name.
ip6tables: No chain/target/match by that name.
ip6tables: No chain/target/match by that name.
ip6tables: No chain/target/match by that name.
ip6tables: No chain/target/match by that name.
killall: diot_setup: no process killed
killall: diot_security: no process killed
[DBG] IPV6 PASSTHROUGH OFF !!
rmmod: /lib/modules/4.1.52/kernel/net/ipv6passthru/ipv6passthru.ko: No such file or directory
[DBG] IPV6 PASSTHROUGH OFF !!
rmmod: /lib/modules/4.1.52/kernel/net/ipv6passthru/ipv6passthru.ko: No such file or directory
killall: dnsmasq: no process killed
/usr/shell/dnsmasq.sh stop ok
/usr/shell/dnsmasq.sh start ok
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
/usr/shell/udhcpd.sh config ok
/usr/shell/udhcpd.sh start ok
START add route..............
***** g_wl_interface = wl1.1 ******
MAX_NUM_SESSIONS : 5; NUM_SEES: 64
wl: Unsupported
Set nvram
populate nvram from /tmp/wifi_config done!
brctl setwlanforward br0 15 15
psntpdate: Resource temporarily unavailable
=== psntpdate: checkntp_gettime=0 ===
brctl setwlanforward br0 15 15
GTK DBG: set is_agent_mode to 0
killall: wlssk: no process killed
Configuring wlan related threads...
no thread pin applied
Wlan related processes are pinned by default
set bcm_archer_us 583 to aff:4
set bcmsw_recycle 622 to aff:2
set bcm_archer_wlan 587 to aff:2
set wl1-kthrd 820 to aff:2
set wl1-kthrd and pid:820 to prio:5
Failed to set wl1-kthrd to realtime priority 5
killall: wps_pbcd: no process killed
killall: hostapd: no process killed
killall: wpa_supplicant: no process killed
wl0: WLC_SET_VAR(bss): Numerical result out of range
wl0: WLC_SET_VAR(bss): Numerical result out of range
wl0: WLC_SET_VAR(bsscfg:map_8021q_settings): Operation not supported
wl0: WLC_SET_VAR(bsscfg:map_8021q_settings): Operation not supported
wl0: WLC_SET_VAR(bsscfg:map_8021q_settings): Operation not supported
wl0: WLC_SET_VAR(bsscfg:map_8021q_settings): Operation not supported
wl0: WLC_SET_VAR(bsscfg:map_8021q_settings): Operation not supported
wl0: WLC_SET_VAR(bsscfg:map_8021q_settings): Operation not supported
wl0: WLC_SET_VAR(bsscfg:map_8021q_settings): Operation not supported
wl0: WLC_SET_VAR(psta): Operation not supported
wl0: WLC_SET_VAR(wme_tx_params): Operation not supported
wl0: WLC_SET_VAR(btc_mode): Operation not supported
wl0: cmd=72: Invalid argument
wl0: WLC_SET_VAR(2g_rate): Operation not supported
wl0: WLC_SET_VAR(6g_rate): Operation not supported
wl0: WLC_SET_VAR(2g_mrate): Operation not supported
wl0: WLC_SET_VAR(6g_mrate): Operation not supported
wl0: WLC_SET_VAR(rtsthresh): Invalid argument
wl0: WLC_SET_VAR(probresp_sw): Operation not supported
wl0: WLC_SET_VAR(bcn_rotate): Operation not supported
wl0: WLC_SET_VAR(atf): Operation not supported
Invalid option for UPR or FD for wl0
wl0: WLC_SET_VAR(traffic_thresh): Invalid argument
wl0: WLC_SET_VAR(traffic_thresh): Invalid argument
wl0: WLC_SET_VAR(traffic_thresh): Invalid argument
wl0: WLC_SET_VAR(traffic_thresh): Invalid argument
wl0: WLC_SET_VAR(traffic_thresh): Invalid argument
**************************************************************
* WLCONF_WARNING: Setting WEP and/or TKIP is not recommended *
**************************************************************
wl0: WLC_SET_VAR(bsscfg:join_pref): Invalid argument
**************************************************************
* WLCONF_WARNING: WEP not recommended! Configuring WEP keys *
**************************************************************
wl0: WLC_SET_VAR(bsscfg:join_pref): Invalid argument
**************************************************************
* WLCONF_WARNING: Setting WEP and/or TKIP is not recommended *
**************************************************************
wl0: WLC_SET_VAR(bsscfg:join_pref): Invalid argument
**************************************************************
* WLCONF_WARNING: WEP not recommended! Configuring WEP keys *
**************************************************************
wl0: WLC_SET_VAR(bsscfg:join_pref): Invalid argument
wl0: WLC_SET_VAR(bsscfg:join_pref): Invalid argument
wl0: WLC_SET_VAR(bsscfg:join_pref): Invalid argument
wl0: WLC_SET_VAR(bsscfg:join_pref): Invalid argument
wl0: WLC_SET_VAR(bsscfg:join_pref): Invalid argument
wl0: WLC_SET_VAR(roam_off): Invalid argument
wl0: WLC_SET_VAR(roam_off): Invalid argument
wl0: WLC_SET_VAR(roam_off): Invalid argument
wl0: WLC_SET_VAR(roam_off): Invalid argument
wl0: WLC_SET_VAR(bcnprs_txpwr_offset): Invalid argument
wl1: cmd=231: Invalid argument
wl1: WLC_SET_VAR(wet_enab): Operation not supported
wl1: WLC_SET_VAR(bsscfg:map_8021q_settings): Operation not supported
wl1: WLC_SET_VAR(bsscfg:map_8021q_settings): Operation not supported
wl1: WLC_SET_VAR(bsscfg:map_8021q_settings): Operation not supported
wl1: WLC_SET_VAR(bsscfg:map_8021q_settings): Operation not supported
wl1: WLC_SET_VAR(bsscfg:map_8021q_settings): Operation not supported
wl1: WLC_SET_VAR(bsscfg:map_8021q_settings): Operation not supported
wl1: WLC_SET_VAR(bsscfg:map_8021q_settings): Operation not supported
wl1: WLC_SET_VAR(psta): Operation not supported
wl1: WLC_SET_VAR(bsscfg:aspm): Operation not supported
wl1: WLC_SET_VAR(bsscfg:aspm): Operation not supported
wl1: WLC_SET_VAR(bsscfg:aspm): Operation not supported
wl1: WLC_SET_VAR(bsscfg:aspm): Operation not supported
wl1: WLC_SET_VAR(bsscfg:aspm): Operation not supported
wl1: WLC_SET_VAR(bsscfg:aspm): Operation not supported
wl1: WLC_SET_VAR(bsscfg:aspm): Operation not supported
wl1: WLC_SET_VAR(bsscfg:aspm): Operation not supported
wl1: cmd=243: Invalid argument
wl1: WLC_SET_VAR(wme_tx_params): Operation not supported
wl1: WLC_SET_VAR(btc_mode): Operation not supported
wl1: WLC_SET_VAR(5g_rate): Operation not supported
wl1: WLC_SET_VAR(6g_rate): Operation not supported
wl1: WLC_SET_VAR(5g_mrate): Operation not supported
wl1: WLC_SET_VAR(6g_mrate): Operation not supported
wl1: WLC_SET_VAR(rtsthresh): Invalid argument
wl1: WLC_SET_VAR(bcn_rotate): Operation not supported
Invalid option for UPR or FD for wl1
**************************************************************
* WLCONF_WARNING: Setting WEP and/or TKIP is not recommended *
**************************************************************
wl1: WLC_SET_VAR(bsscfg:join_pref): Invalid argument
**************************************************************
* WLCONF_WARNING: WEP not recommended! Configuring WEP keys *
**************************************************************
wl1: WLC_SET_VAR(bsscfg:join_pref): Invalid argument
**************************************************************
* WLCONF_WARNING: Setting WEP and/or TKIP is not recommended *
**************************************************************
wl1: WLC_SET_VAR(bsscfg:join_pref): Invalid argument
**************************************************************
* WLCONF_WARNING: WEP not recommended! Configuring WEP keys *
**************************************************************
wl1: WLC_SET_VAR(bsscfg:join_pref): Invalid argument
wl1: WLC_SET_VAR(bsscfg:join_pref): Invalid argument
wl1: WLC_SET_VAR(bsscfg:join_pref): Invalid argument
wl1: WLC_SET_VAR(bsscfg:join_pref): Invalid argument
wl1: WLC_SET_VAR(bsscfg:join_pref): Invalid argument
wl1: WLC_SET_VAR(roam_off): Invalid argument
wl1: WLC_SET_VAR(roam_off): Invalid argument
wl1: WLC_SET_VAR(roam_off): Invalid argument
wl1: WLC_SET_VAR(roam_off): Invalid argument
wl1: WLC_SET_VAR(bcnprs_txpwr_offset): Invalid argument
eapd_brcm_open: Sock buffer size SO_RCVBUF=425984 SO_SNDBUF=425984
eapd_brcm_open: Sock buffer size SO_RCVBUF=425984 SO_SNDBUF=425984
eapd_brcm_open: Sock buffer size SO_RCVBUF=425984 SO_SNDBUF=425984
eapd_brcm_open: Sock buffer size SO_RCVBUF=425984 SO_SNDBUF=425984
eapd_brcm_open: Sock buffer size SO_RCVBUF=425984 SO_SNDBUF=425984
eapd_brcm_open: Sock buffer size SO_RCVBUF=425984 SO_SNDBUF=425984
eapd_brcm_open: Sock buffer size SO_RCVBUF=425984 SO_SNDBUF=425984
eapd_brcm_open: Sock buffer size SO_RCVBUF=425984 SO_SNDBUF=425984
eapd_brcm_open: Sock buffer size SO_RCVBUF=425984 SO_SNDBUF=425984
dm directory may not exist (No such file or directory). Creating it
acsd: wl0: Selecting 5g band ACS policy
acsd: wl0: selected channel spec: 0xe872
acsd: wl0: Adjusted channel spec: 0xe872
acsd: wl0: selected channel spec: 0xe872
acsd: wl1: Selecting 2g band ACS policy
acsd: wl1: selected channel spec: 0x1009
acsd: wl1: Adjusted channel spec: 0x1009
acsd: wl1: selected channel spec: 0x1009
sh: acs_cli: not found
sh: acs_cli: not found
radio_iflist[0]: wl0 wl0.1 wl0.6 wl0.7
radio_iflist[1]: wl1 wl1.1 wl1.6 wl1.7
radio_iflist[2]:
radio_iflist[3]:
radio_iflist[0]: wl0 wl0.1 wl0.6 wl0.7
filtered_iflist: wl0 wl0.1 wl0.6 wl0.7
primary_iflist: wl0
virtual_iflist: wl0.1 wl0.6 wl0.7
supplicant iflist: wl0
wl0 wl0.1 wl0.6 wl0.7
gt_nvram get WIFIWscExternalRegistrar=1
Err: rc: 1237: default: key len: 4
Err: rc: 1237: default: key len: 4
Err: rc: 1237: default: key len: 4
gt_nvram get WIFIWscExternalRegistrar=1
killall: psntpdate: no process killed
gt_nvram get WPSEnable=1
gt_nvram get WIFIWscConfStatus=2
gt_nvram get WIFIWscExternalRegistrar=1
gt_nvram get WIFIWscExternalRegistrar=1
gt_nvram get WIFIWscExternalRegistrar=1
Err: rc: 3133: conversion fn returned err for wpa3_psk in iface wl0.7
SAM DEBUG start_hostapd(3563),.............
rfkill: Cannot open RFKILL control device
wl0: interface state UNINITIALIZED->COUNTRY_UPDATE
BSD is not enabled: 0=0
radio_iflist[1]: wl1 wl1.1 wl1.6 wl1.7
filtered_iflist: wl1 wl1.1 wl1.6 wl1.7
primary_iflist: wl1
virtual_iflist: wl1.1 wl1.6 wl1.7
supplicant iflist: wl1
wl1 wl1.1 wl1.6 wl1.7
gt_nvram get WIFIWscExternalRegistrar=1
Err: rc: 1237: default: key len: 4
Err: rc: 1237: default: key len: 4
Err: rc: 1237: default: key len: 4
gt_nvram get WIFIWscExternalRegistrar=1
gt_nvram get WPSEnable=1
gt_nvram get WIFIWscConfStatus=2
gt_nvram get WIFIWscExternalRegistrar=1
gt_nvram get WIFIWscExternalRegistrar=1
gt_nvram get WIFIWscExternalRegistrar=1
Err: rc: 3133: conversion fn returned err for wpa3_psk in iface wl1.7
SAM DEBUG start_hostapd(3563),.............
rfkill: Cannot open RFKILL control device
wl1: interface state UNINITIALIZED->COUNTRY_UPDATE
killall: wlan_led_ctrl: no process killed
[Enter Test] in wlan_led_ctrl.c main()
./etc/rc3.d/S92gemtek_rcs_02: line 1: #!/bin/sh: not found
=========================================\n
=========gemtek_rcs_02.sh start==========\n
=========================================\n
killall: online_fw_notifier: no process killed
===== Auto FW Update: online_fw_notifier starts ! =====
START add route..............
===== Auto FW Update: Time to get firmware list = 9 : 9 =====
===== Auto FW Update: Time to update firmware = 4 : 9 =====
>>> update fc_status ---
Broadcom Packet Flow Cache flushing the flows
wl: Not Found
wl: Not Found
wl: Not Found
killall: psntpdate: no process killed
wl: Not Found
wl: Not Found
wl: Not Found
wl: Not Found
wl: Not Found
wl: Not Found
wl: Not Found
wl: Not Found
wl: Not Found
wl: Not Found
wl: Not Found
Set DNS empty in refresh_dns
=========SET Thermal throttle by wl...==========\n
domain
adding dns fdfd:1da8:98a1::1
route: SIOCDELRT: No such process
/usr/shell/udhcpc.sh stop ok
Find Nvram default file.
[NAPServ]nap_serv.c(241) main: pid: 3565
[NAPServ] called NAP_PL_GetWanIfName
[ML_GetParamEx]
starting pid 3567, tty '': '-/bin/sh'
BusyBox v1.12.1 (2023-11-16 18:28:24 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.
# route: SIOCDELRT: No such process
/usr/shell/staticip.sh stop ok
echo 3554 > /var/device_detect/pid
START CreateThread function to do arp_monitor...
IPC-ERR:ML_CreateIpcClientRaw(398):can't connect ipc: +/diot-security-ipc
hostsacd_incident_restore_handle(507):HSAC-ERR:can't initialize incident handler
killall: v6plus_clie
[ML_GetParamEx]
[DS-Lite] Disable debug mode.
[DS-Lite] Disable trace loop.
Disable DS-Lite success!
killall: internet_chk: no process killed
killall: tproxy: no process killed
iptables: No chain/target/match by that name.
iptables v1.6.2: Couldn't find target `IFILTER'
Try `iptables -h' or 'iptables --help' for more information.
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
====Auto Switch: Enter CHECK_WAN_LINK state====
====Auto Switch: WAN_LINK is offline!====
====Auto Switch: Enter CHECK_LAN_LINK state====
====Auto Switch: LAN_LINK is offline!====
--WLSSK RESTART DONE--
IPC-ERR:ML_CreateIpcClientRaw(398):can't connect ipc: +/diot-security-ipc
hostsacd_incident_restore_handle(507):HSAC-ERR:can't initialize incident handler
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamExramEx]
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
hostsacd_daily_proc(145):HSAC-DBG:DATE[2021/1/1 9:0:50] 1609459250 60 60004(4) loggerdb:1423
1905 MAC: 1a:ec:e7:51:b2:51
1905 MAC: 1a:ec:e7:51:b2:52
Sorry, rule does not exist.
Sorry, rule does not exist.
Sorry, rule does not exist.
Sorry, rule does not exist.
psntpdate: Resource temporarily unavailable
=== psntpdate: checkntp_gettime=0 ===
IEEE1905-Agent >> Wlcfg_proto_create_m1(2305) : M1 creation is successful m1 len=[404]
IEEE1905-Controller >> i5MessageApAutoconfigurationWscReceive(2522) : Received AP Autoconfiguration WSC M1 from 1A:EC:E7:51:B2:51 for radio 18:EC:E7:51:B2:51
sed: /tm
GTK DEBUG Wlcfg_proto_create_m2(2792), Create GTK SSID Flag. tmp=[ssid_flag=5#$#]
GTK DEBUG Wlcfg_proto_create_m2(2792), Create GTK SSID Flag. tmp=[ssid_flag=1#$#]
GTK DEBUG Wlcfg_proto_create_m2(2792), Create GTK SSID Flag. tmp=[ssid_flag=2#$#]
IEEE1905-Agent >> i5MessageApAutoconfigurationWscReceive(2553) : Received AP Autoconfiguration WSC M2 from 1A:EC:E7:51:B2:52 for radio 18:EC:E7:51:B2:51
GTK DEBUG Wlcfg_pr
GTK DEBUG Wlcfg_proto_process_m2(2992),bssinfo->gtk_ssid_flag=[49]
GTK DEBUG Wlcfg_proto_process_m2(2992),bssinfo->gtk_ssid_flag=[50]
GTK DEBUG wbd_slave_create_bss_on_ifr(2230), ifname[wl1] Prefix[wl1_] All BSS has same settings ret[-1], check interface bss
GTK DEBUG gtk_wl_bss_up(2019), wl_command=[wl -i wl0.1 bss up]
GTK DEBUG gtk_wl_bss_up(2019), wl_command=[wl -i wl0.6 bss up]
GTK DEBUG gtk_wl_bss_up(2019), wl_command=[wl -i wl0.7
IEEE1905-Agent >> Wlcfg_proto_create_m1(2305) : M1 creation is successful m1 len=[404]
IEEE1905-Controller >> i5MessageApAutoconfigurationWscReceive(2522) : Received AP Autoconfiguration WSC M1 from 1A:EC:E7:51:B2:51 for radio 18:EC:E7:51:B2:58
[Enter T
.GTK DEBUG Wlcfg_proto_create_m2(2792), Create GTK SSID Flag. tmp=[ssid_flag=5#$#]
GTK DEBUG Wlcfg_proto_create_m2(2792), Create GTK SSID Flag. tmp=[ssid_flag=1#$#]
GTK DEBUG Wlcfg_proto_create_m2(2792), Create GTK SSID Flag. tmp=[ssid_flag=2#$#]
IEEE1905-Agent >> i5MessageApAutoconfigurationWscReceive(2553) : Received AP Autoconfiguration WSC M2 from 1A:EC:E7:51:B2:52 for radio 18:EC:E7:51:B2:58
GTK DEBUG Wlcfg_prtk_ssid_flag=[53]
GTK DEBUG Wlcfg_proto_process_m2(2992),bssinfo->gtk_ssid_flag=[49]
GTK DEBUG Wlcfg_proto_process_m2(2992),bssinfo->gtk_ssid_flag=[50]
GTK DEBUG wbd_slave_create_bss_on_ifr(2230), ifname[wl0] Prefix[wl0_] All BSS has same settings ret[-1], check interface bss
GTK DEBUG gtk_wl_bss_up(2019), wl_command=[wl -i wl1.1 bss up]
GTK DEBUG gtk_wl_bss_up(2019), wl_command=[wl -i wl1.6 bss up]
GTK DEBUG gtk_wl_bss_up(2019), wl_command=[wl -i wl1.7 bss up]
[Enter Test] in wlan_led_ctrl.c main()
.GTK DEBUG wbd_slave_create_self_fbt_nvrams(3574), gtk_80211rEnable==0, prefix:wl1.1_
GTK DEBUG wbd_slave_create_self_fbt_nvrams(3574), gtk_80211rEnable==0, prefix:wl1.6_
GTK DEBUG wbd_slave_create_self_fbt_nvrams(3574), gtk_80211rEnable==0, prefix:wl0.1_
GTK DEBUG wbd_slave_create_self_fbt_nvrams(3574), gtk_80211rEnable==0, prefix:wl0.6_
killall: psntpdate: no process killed
IPC-ERR:ML_CreateIpcClientRaw(398):can't connect ipc: +/diot-security-ipc
hostsacd_incident_restore_handle(507):HSAC-ERR:can't initialize incident handler
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
[ML_GetParamEx]
hostsacd_daily_proc(145):HSAC-DBG:DATE[2021/1/1 9:1:50] 1609459310 120 120007(4) loggerdb:1422CFE
CFE> help
Available commands:
otpcfg Reading/fusing potp/sotp bits
erase_misc_parti Erase misc partition
x Change extra partitions size
find Find string in NAND
comp Compare NAND blocks
bb ead with and without ECC
fb Find NAND bad blocks
rn Read NAND contents along with spare area with ECC off
dn Dump NAND contents along with spare area
phy Set memory or registers.
meminfo Display CFE System Memory
kernp Updates extra bootloader parameter for kernel. To end input enter // consecutively at any time then press <enter>
sm Set memory or registers.
db Dump bytes.
dh Dump half-words.
dw Dump words.
w Write the whole image start from beginning of the flash
e Erase NAND flash
ws Write whole image (priviously loaded by kermit or JTAG) to flash .
ba set linux kernel boot argument
ldt load device tree blob from tftp server.
go goto and execute from specefic address.
loadb load binary via network or kermit protocol.
r Run program from flash image or from host depending on [f/h/c] flags
p Print boot line and board parameter info
c Change booline parameters
i Erase persistent storage data
avs Change AVS config
ddr Change board DDR config
a Change board AFE ID
b Change board parameters
reset Reset the board
pmdio Pseudo MDIO access for external switches.
spi Legacy SPI access of external switch.
pmclog pmclog
pmc pmc cmd
closeavs pmc close avs cmd
cpufreq set CPU frequency
force override chipid check for images.
help Obtain help for CFE commands
For more information about a command, enter 'help command-name'
*** command status = 0使えるコマンド一覧
BrInternet_Chk mapgetcfg.sh
WlGetDriverCfg.sh matrixtunnel
WlGetDriverStats.sh matrixtunnel_httpd
[ mcp
[[ mcpctl
acs_cli2 mcpd
acsd2 md5sum
airiq_app mdev
airiq_service memaccess
airiq_service.cfg miniupnpd
aoss mkdir
aoss_sta mkfs.fat
aoss_wst mknod
ap_client mlc
ap_client_run mode_switch
ap_client_run_aoss mount
ap_client_run_wps moveset
ap_serv mpstat
appeventd mtd_debug
archer mtdinfo
archerctl mtdpart
arp mv
arping nanddump
ash nandtest
aspmd nandwrite
auto_detect6 nap_servd
auto_fw_update_iface_chk_main nbtscan
auto_switch ncap
auto_switch_check ndisc6
awk netstat
basename network_service
bash nftl_format
bcm_boot_launcher nftldump
bcm_bootstate ns_detect
bcm_flasher nslookup
bcmlog ntfs-3g
bcmmcastctl ntp
bcmmserver ntpclient
blog nvram
blogctl nvramUpdate
bmc nvram_recover
boot_block_housekeeping online_fw_notifier
bpm online_fwlist_check
bpmctl openl2tpd
br_gateway_chk openssl
brctl openvpn
bsd otpctl
bsdcli pbc_detect
buffalog pidof
busybox pidstat
cac_time_chceker ping
cat ping6
ccf_checkLicenseStatus pki
ceventc posix-stress
ceventd poweroff
checkWanLan ppp_utils
check_auto_config_status pppd
chmod pppoe-relay
client.cert pppoe_terminate
client.priv pptp
conntrack printf
conntrackd ps
cp pscan
curl psictl
cut psntpdate
date pspctl
db pwd
dd pwr
debug_loop_acs_dfs.sh pwrctl
debug_monitor qos
detect_eco radvd
df radvdump
dh rawSocketTest
dhcp6c rc4
dhcp6cRcv.sh rdisc6
dhcp6ctl rdnssd
dhcp6s read_fw
dhd reboot
dhdctl recv_image
diot_setup redsocks
diotsec/ renice
dnsmasq restart_wpa_supplicant
dnsspoof rfddump
doc_loadbios rfdformat
docfdisk ripd
dropbearconvert rm
dry rmmod
dumpleases route
dumpmem rtmpinit
dumpsysinfo.sh run_aoss
dw sb
eapd scratchpadctl
ebtables sed
echo send_multicast
eco serve_image
emf server_buf.cert
envram server_buf_2038.cert
envrams setmem
epi_ttcp setpci
ethctl sh
ether-wake sleep
ethswctl smbd
ethtool smbpasswd
eventd spitr
expect sqlite3
expr ssd
fatlabel sshd
fb string_JP.tar.bz2
fc stty
fcctl sw
fh swanctl
find switch_set
firewall sync
flash_erase sysctl
flash_eraseall syslogd
flash_lock tail
flash_otp_dump tar
flash_otp_info taskset
flash_otp_lock tc
flash_otp_write tclsh
flash_policy.xml tcpdump
flash_unlock tcptraceroute6
flashcp test
free_user tftp
fsck.fat tmctl
ftl_check toad
ftl_format toast
fw top
gp_redirect touch
gpio tproxy
grep traceroute
gt_device_detect tracert6
gt_flash_util transfer
gt_fwsetenv ubiattach
gt_nvram ubiblock
gt_upnp_security ubicrc32
gt_utils ubidetach
guestport_countdown ubiformat
gzip ubimkvol
halt ubinfo
hnddm.sh ubinize
hostapd ubirename
hostapd_cli ubirmvol
hostname ubirsvol
hostsacd ubiupdatevol
hspotap udhcpc
httpd udhcpd
httpd_gp umount
i5ctl uname
ieee1905 unzip
ifconfig updatedd
ifilter_checkLicense.sh upnp_incident_ports.conf
igs upnp_incident_rule
improxy upnpc
inadyn uptime
init urlfilterd
insmod utelnetd
internet_chk v6plus_client
iostat vconfig
ip vi
ip6tables vis-datacollector
ip6tables-restore vis-dcon
ip6tables-save vlanctl
iperf vpmstats
iperf3 wan_check
ipsec wan_check6
iptables wb_cli
iptables-restore wbd_master
iptables-save wbd_slave
ipv6passthru_util wc
iq wdtctl
iqctl wget
ivictl wl
iw wl_server_socket
kidstimer_check wlaffinity
kidstimer_countdown wlan_forward
kidstimer_mac_filter wlan_led_ctrl
kill wlan_reserv
killall wlconf
klogd wlctl
l2tpconfig wlssk
led wpa_cli
link_detect wpa_supplicant
lld2d wps_pbcd
ln wsc_trigger
ls xargs
lsmod xtables-multi
lsmtd zcip
lspci zebra