Device: Genexis devices #6

Open
opened 2026-04-15 20:35:55 +00:00 by Sirherobrine23 · 111 comments
Owner
  • All includes mt7916 or mt7915
  • genexis arcee (cx20):
    • 3x 1GbE ports (lan{1, 2}, wan)
    • 2x buttons
    • 3x leds
  • genexis laxy:
    • 3x 1GbE ports (lan{1, 2, 3})
    • 3x buttons
    • 10x pwm leds
  • genexis pixly_r1 (cx30):
    • 3x 1GbE ports (lan{1, 2}, wan)
    • 2x buttons
    • 3x pwm leds
  • genexis rodimus_r1 (hx40):
    • 1x 1GbE ports (lan1?, have one led maped in dts)
    • 3x buttons
    • 6x leds
  • genexis zephyr (hx30):
    • 3x 1GbE ports (lan{1, 2, 3})
    • 3x buttons
    • 7x leds
- ***All includes mt7916 or mt7915*** - genexis arcee (cx20): - 3x 1GbE ports (lan{1, 2}, wan) - 2x buttons - 3x leds - genexis laxy: - 3x 1GbE ports (lan{1, 2, 3}) - 3x buttons - 10x pwm leds - genexis pixly_r1 (cx30): - 3x 1GbE ports (lan{1, 2}, wan) - 2x buttons - 3x pwm leds - genexis rodimus_r1 (hx40): - 1x 1GbE ports (lan1?, have one led maped in dts) - 3x buttons - 6x leds - genexis zephyr (hx30): - 3x 1GbE ports (lan{1, 2, 3}) - 3x buttons - 7x leds
Gemnon was assigned by Sirherobrine23 2026-04-15 20:35:55 +00:00
Owner

Stock dts

Is it really ? :)

> Stock dts Is it really ? :)
Author
Owner

That's what @Gemnon pulled and sent me, i'm going to trust him and add his dts to the branch so I can test it, he has both devices to test

That's what @Gemnon pulled and sent me, i'm going to trust him and add his dts to the branch so I can test it, he has both devices to test
Author
Owner

and also manage to get the NPU firmware, if it works with the v2 driver, i'll use it for testing, and it's already in the NPU repository

and also manage to get the NPU firmware, if it works with the v2 driver, i'll use it for testing, and it's already in the NPU repository
Owner

That's what @Gemnon pulled and sent me, i'm going to trust him and add his dts to the branch so I can test it, he has both devices to test

Compared to other devices there are lots of diffs in the dts. The device uses alot of different drivers compared to the SDK.

> That's what @Gemnon pulled and sent me, i'm going to trust him and add his dts to the branch so I can test it, he has both devices to test Compared to other devices there are lots of diffs in the dts. The device uses alot of different drivers compared to the SDK.
Author
Owner

he also sent me some firmware that will probably let me extract that dts from uboot

/dts-v1/;

/ {
	timestamp = <0x662b6bf8>;
	description = "IOWRT FIT upgrade image";
	#address-cells = <0x01>;
	id = "IOPSYS";
	created = "20240910-113626";
	model = "PIXLY";
	iopsys_version = "heimgardos-7.3.1.17.2.0-20240910-113626-airoha-en7523-pixly";
	
	images {
		
		bootloader {
			data-size = <0x80000>;
			data-offset = <0x00>;
			description = "bootloader";
			compression = "none";
			iopsys_bootloader_version = "4004";
			
			hash-1 {
				value = <0x1bab6165 0xea59d02e 0x46395bb0 0x9692bc89 0x4afa9712 0x251c6823 0x7b9d2e84 0x167d198d>;
				algo = "sha256";
			};
		};
		
		boot {
			data-size = <0x372052>;
			data-offset = <0x80000>;
			description = "boot";
			compression = "none";
			
			hash-1 {
				value = <0xa1e138b 0x74b386ac 0x8369ef43 0x1fe8c0b4 0x1100e89a 0x53e22baa 0x1eb561d1 0x78e2099>;
				algo = "sha256";
			};
		};
		
		rootfs {
			data-size = <0x1ae1eb4>;
			data-offset = <0x3f2054>;
			description = "rootfs";
			compression = "none";
			
			hash-1 {
				value = <0x1282c659 0xb090f1f9 0x750cfd4b 0x2df9b391 0xecdbd8d3 0x27a7349d 0xceaea370 0x618cad32>;
				algo = "sha256";
			};
		};
		
		u-boot-env {
			data-size = <0x160a>;
			data-offset = <0x1ed3f08>;
			description = "u-boot-env";
			compression = "none";
			
			hash-1 {
				value = <0x607b3c81 0x7f969938 0xf57bc30d 0x718c7f2e 0x20d1b1dd 0x34bd4f54 0x62f863a6 0xa943bcb6>;
				algo = "sha256";
			};
		};
		
		upgrade_bundle {
			data-size = <0xce7>;
			data-offset = <0x1ed5514>;
			description = "upgrade_bundle";
			created = "20240910-113626";
			type = "multi";
			compression = "none";
			
			hash-1 {
				value = <0x7342db21 0x3db66b2 0x983e62dc 0x6a84cbde 0x75509772 0x462f7777 0x3e6376b9 0x6a585ea3>;
				algo = "sha256";
			};
		};
	};
};
he also sent me some firmware that will probably let me extract that dts from uboot ```dts /dts-v1/; / { timestamp = <0x662b6bf8>; description = "IOWRT FIT upgrade image"; #address-cells = <0x01>; id = "IOPSYS"; created = "20240910-113626"; model = "PIXLY"; iopsys_version = "heimgardos-7.3.1.17.2.0-20240910-113626-airoha-en7523-pixly"; images { bootloader { data-size = <0x80000>; data-offset = <0x00>; description = "bootloader"; compression = "none"; iopsys_bootloader_version = "4004"; hash-1 { value = <0x1bab6165 0xea59d02e 0x46395bb0 0x9692bc89 0x4afa9712 0x251c6823 0x7b9d2e84 0x167d198d>; algo = "sha256"; }; }; boot { data-size = <0x372052>; data-offset = <0x80000>; description = "boot"; compression = "none"; hash-1 { value = <0xa1e138b 0x74b386ac 0x8369ef43 0x1fe8c0b4 0x1100e89a 0x53e22baa 0x1eb561d1 0x78e2099>; algo = "sha256"; }; }; rootfs { data-size = <0x1ae1eb4>; data-offset = <0x3f2054>; description = "rootfs"; compression = "none"; hash-1 { value = <0x1282c659 0xb090f1f9 0x750cfd4b 0x2df9b391 0xecdbd8d3 0x27a7349d 0xceaea370 0x618cad32>; algo = "sha256"; }; }; u-boot-env { data-size = <0x160a>; data-offset = <0x1ed3f08>; description = "u-boot-env"; compression = "none"; hash-1 { value = <0x607b3c81 0x7f969938 0xf57bc30d 0x718c7f2e 0x20d1b1dd 0x34bd4f54 0x62f863a6 0xa943bcb6>; algo = "sha256"; }; }; upgrade_bundle { data-size = <0xce7>; data-offset = <0x1ed5514>; description = "upgrade_bundle"; created = "20240910-113626"; type = "multi"; compression = "none"; hash-1 { value = <0x7342db21 0x3db66b2 0x983e62dc 0x6a84cbde 0x75509772 0x462f7777 0x3e6376b9 0x6a585ea3>; algo = "sha256"; }; }; }; }; ```
31 MiB
Sirherobrine23 pinned this 2026-04-15 22:32:35 +00:00
Sirherobrine23 changed title from Device: Heimgard Pixly to Device: Heimgard/Genexis CX30 2026-04-16 08:05:53 +00:00
Author
Owner

ubi names:

  • env1
  • env2
  • boot1
  • boot2
  • rootfs1
  • rootfs2
  • overlay1
  • overlay2
  • art
  • boarddata
  • container
ubi names: - `env1` - `env2` - `boot1` - `boot2` - `rootfs1` - `rootfs2` - `overlay1` - `overlay2` - `art` - `boarddata` - `container`
Owner

Stock dts

Is it really ? :)

Cant be sure extracted it from the firmware. And the boxes i have behave strange there are CX30-s that try to get ip address via dhcp, others that listens on 192.168.39.1, some boxes (HX30, HX40) listen on 192.168.1.1, some of the same on 192.168.5.1. Some not even have model number, still trying to figure out the things (but which ones i tried just fails with decompression error when i try to boot any initramfs image from here). Iam pretty sure they used to be development boxes as some had github version of iowrt thing on them.

Also by default ssh password auth disabled, i can enable it, some boxes let me change the burnt in root password (which is the same from the hash on all boxes but i have no idea what) via luci (and for some reason it only change ssh root password not the device password), for some luci just gives an error and have to backup config, alter /etc/shadow reload config for access. Serial port can be accessed on all via holes on the back of the boxes, uboot has bootstopkeysha256 set to something (will have to brute-force it) but that can be overriden in env.

@Sirherobrine23

This one is the (Unknown Model) which i could not even get paired with a product at Genexis/Heimgard:
I0M0QCCXF (laxy) Have a pon, 2 fxs, 4 gigabit lan port, 256M flash, 512M memory, MT7916D

mtd layout looks like pretty much the same as other ones:
dev: size erasesize name
mtd0: 00100000 00020000 "u-boot"
mtd1: 0ff00000 00020000 "ubi"
mtd2: 0001f000 0001f000 "env1"
mtd3: 0001f000 0001f000 "env2"
mtd4: 00383000 0001f000 "boot1"
mtd5: 00383000 0001f000 "boot2"
mtd6: 01b9c000 0001f000 "rootfs1"
mtd7: 021e8000 0001f000 "rootfs2"
mtd8: 0141a000 0001f000 "overlay1"
mtd9: 0141a000 0001f000 "overlay2"
mtd10: 00193000 0001f000 "art"
mtd11: 0041e000 0001f000 "boarddata"
mtd12: 07d17000 0001f000 "container"

> > Stock dts > > Is it really ? :) Cant be sure extracted it from the firmware. And the boxes i have behave strange there are CX30-s that try to get ip address via dhcp, others that listens on 192.168.39.1, some boxes (HX30, HX40) listen on 192.168.1.1, some of the same on 192.168.5.1. Some not even have model number, still trying to figure out the things (but which ones i tried just fails with decompression error when i try to boot any initramfs image from here). Iam pretty sure they used to be development boxes as some had github version of iowrt thing on them. Also by default ssh password auth disabled, i can enable it, some boxes let me change the burnt in root password (which is the same from the hash on all boxes but i have no idea what) via luci (and for some reason it only change ssh root password not the device password), for some luci just gives an error and have to backup config, alter /etc/shadow reload config for access. Serial port can be accessed on all via holes on the back of the boxes, uboot has bootstopkeysha256 set to something (will have to brute-force it) but that can be overriden in env. @Sirherobrine23 This one is the (Unknown Model) which i could not even get paired with a product at Genexis/Heimgard: I0M0QCCXF (laxy) Have a pon, 2 fxs, 4 gigabit lan port, 256M flash, 512M memory, MT7916D mtd layout looks like pretty much the same as other ones: dev: size erasesize name mtd0: 00100000 00020000 "u-boot" mtd1: 0ff00000 00020000 "ubi" mtd2: 0001f000 0001f000 "env1" mtd3: 0001f000 0001f000 "env2" mtd4: 00383000 0001f000 "boot1" mtd5: 00383000 0001f000 "boot2" mtd6: 01b9c000 0001f000 "rootfs1" mtd7: 021e8000 0001f000 "rootfs2" mtd8: 0141a000 0001f000 "overlay1" mtd9: 0141a000 0001f000 "overlay2" mtd10: 00193000 0001f000 "art" mtd11: 0041e000 0001f000 "boarddata" mtd12: 07d17000 0001f000 "container"
Owner
So the listing what i have with the corresponding ota images i could find: CX20: G0A0ACKW0 (arcee): https://firmware.homecontrol-cloud.com/heimgard/G0A0ACKW0-HOv1/v1-heimgard/host/arcee-7.3.1.17.2.0/last.itb CX30: I0A0NCKX0 (pixly) https://firmware.homecontrol-cloud.com/heimgard/I0A0NCKX0-HOv1/v1-heimgard/host/pixly-7.3.1.17.2.0/last.itb "Unknown model": I0M0QCCXF (laxy) https://firmware.homecontrol-cloud.com/heimgard/I0M0QCCXF-HOv1/v1-heimgard/host/laxy-7.3.1.17.2.0/last.itb HX30: I0ABGCUFD (zephyr) https://firmware.homecontrol-cloud.com/heimgard/I0ABGCUFD-HOv1/v1-heimgard/host/zephyr-7.3.1.17.2.0/last.itb HX40: G0A0GCUXD (rodimus) https://firmware.homecontrol-cloud.com/heimgard/G0A0GCUXD-HOv1/v1-heimgard/host/rodimus-7.3.1.17.2.0/last.itb All have Heimgard logo and using heimgard ota so i think they are from the time before Genexis acquired them...
Author
Owner

@Gemnon could create a branch and add the devices. i currently working with the u-boot for Mikrotik and the xx230v/xx530v and i need to review the merbanan changes for the WED and NPU. You have code write, and for now it's easy to add the devices, look at these commits for example:

@Gemnon could create a branch and add the devices. i currently working with the u-boot for Mikrotik and the xx230v/xx530v and i need to review the merbanan changes for the WED and NPU. You have code write, and for now it's easy to add the devices, look at these commits for example: - 63edd204022cd48fae562c8d2f54753e64bbd72b - 19910446b7d48ed634304111ca9555c665d237f3
Owner

Allso adding some dmesg outputs the boxes i have with me now, will attach the other two later if it helps.

Allso adding some dmesg outputs the boxes i have with me now, will attach the other two later if it helps.
Sirherobrine23 changed title from Device: Heimgard/Genexis CX30 to Device: Genexis devices 2026-04-20 08:53:00 +00:00
Author
Owner

try this build @Gemnon

try this build @Gemnon
Owner

@Sirherobrine23

Same result:

Uncompressing Kernel Image
lzma compressed: uncompress error 7
Must RESET board to recover
resetting ...

Also when i try to extract it with imxtract it sais:

=> imxtract 0x90000000 kernel-1 0x80008000
## Copying 'kernel-1' subimage from FIT image at 90000000 ...
crc32+ sha1+ Unimplemented compression type 3

Not sure if it has anything to do with uncompress error 7 though (it does with the stock firmware image too so that has nothing to do with it for sure)

@Sirherobrine23 Same result: ``` Uncompressing Kernel Image lzma compressed: uncompress error 7 Must RESET board to recover resetting ... ``` Also when i try to extract it with imxtract it sais: ``` => imxtract 0x90000000 kernel-1 0x80008000 ## Copying 'kernel-1' subimage from FIT image at 90000000 ... crc32+ sha1+ Unimplemented compression type 3 ``` Not sure if it has anything to do with uncompress error 7 though (it does with the stock firmware image too so that has nothing to do with it for sure)
Owner

Pretty sure the reason is the size.

It can extract and load lzma heimgard_cx30-kernel.bin, well until "Starting linux..." where it locks up, so lzma works in u-boot, just initramfs image too big for it.

Pretty sure the reason is the size. It can extract and load lzma heimgard_cx30-kernel.bin, well until "Starting linux..." where it locks up, so lzma works in u-boot, just initramfs image too big for it.
Owner

Was changed load address (0x80208000) like it is on other boxes recompiled. And i have lines... And lockup at npu thing (well no initramfs so no wonder it cant load it). That is a progress. At least it can boot stuff. :)

Think have to shrink down initramfs somehow, to be able to boot it. Or move to nand boot.

Tried to boot via seperate ramdisk, but failed most likely because i have no idea how to do it. (ram_try.log)

Tried to boot via seperate uncompressed ramdisk because i figured kernel not able to uncompress it, now it booted fully. (booted.log)

Ethernet works, after copying over /lib/firmware/mediatek from iowrt and reload mt7915e module wifi works too, at least shows up by iw.

Was changed load address (0x80208000) like it is on other boxes recompiled. And i have lines... And lockup at npu thing (well no initramfs so no wonder it cant load it). That is a progress. At least it can boot stuff. :) Think have to shrink down initramfs somehow, to be able to boot it. Or move to nand boot. Tried to boot via seperate ramdisk, but failed most likely because i have no idea how to do it. (ram_try.log) Tried to boot via seperate uncompressed ramdisk because i figured kernel not able to uncompress it, now it booted fully. (booted.log) Ethernet works, after copying over /lib/firmware/mediatek from iowrt and reload mt7915e module wifi works too, at least shows up by iw.
Author
Owner

Was changed load address (0x80208000) like it is on other boxes recompiled. And i have lines... And lockup at npu thing (well no initramfs so no wonder it cant load it). That is a progress. At least it can boot stuff. :)

I recently noticed that the NPU log isn't showing up, i'll look into that, but it should be working. Interestingly, the initramfs loads with less than 10Mb of size, if you're basing the build on my configuration, the files will exceed 22MB because it includes some testing tools and additional things for testings

Ethernet works, after copying over /lib/firmware/mediatek from iowrt and reload mt7915e module wifi works too, at least shows up by iw.

The only things that need firmware are the NPU and the mt7916e, I couldn't find the eeprom for mt7916e in the volume art, but that might be my mistake in how i extracted the firmware from the dump you sent me

> Was changed load address (0x80208000) like it is on other boxes recompiled. And i have lines... And lockup at npu thing (well no initramfs so no wonder it cant load it). That is a progress. At least it can boot stuff. :) I recently noticed that the NPU log isn't showing up, i'll look into that, but it should be working. Interestingly, the initramfs loads with less than 10Mb of size, if you're basing the build on my configuration, the files will exceed 22MB because it includes some testing tools and additional things for testings > Ethernet works, after copying over /lib/firmware/mediatek from iowrt and reload mt7915e module wifi works too, at least shows up by iw. The only things that need firmware are the NPU and the mt7916e, I couldn't find the eeprom for mt7916e in the volume art, but that might be my mistake in how i extracted the firmware from the dump you sent me
Owner

I recently noticed that the NPU log isn't showing up, i'll look into that, but it should be working. Interestingly, the initramfs loads with less than 10Mb of size, if you're basing the build on my configuration, the files will exceed 22MB because it includes some testing tools and additional things for testings

Well for me it seems it breaks on decompression because of its size, i think it hits a protected range (or there is some iowrt u-boot limit).
if i just upload the kernel to 0x9600000 and a cpio ramdisk image to 0x86000000 set bootargs to make root=/dev/ram0 and
bootm 0x96000000 0x86000000 it works (and not stuck on npu binary) if i try to boot the generated initramfs it fails with decompression error... But lzma working because lzmad kernel alone booting just fine.

> I recently noticed that the NPU log isn't showing up, i'll look into that, but it should be working. Interestingly, the initramfs loads with less than 10Mb of size, if you're basing the build on my configuration, the files will exceed 22MB because it includes some testing tools and additional things for testings Well for me it seems it breaks on decompression because of its size, i think it hits a protected range (or there is some iowrt u-boot limit). if i just upload the kernel to 0x9600000 and a cpio ramdisk image to 0x86000000 set bootargs to make root=/dev/ram0 and bootm 0x96000000 0x86000000 it works (and not stuck on npu binary) if i try to boot the generated initramfs it fails with decompression error... But lzma working because lzmad kernel alone booting just fine.
Author
Owner

Load a uboot chainload and try booting from new uboot

https://sirherobrine23.com.br/airoha_an7523/builds/releases/download/v49/openwrt-airoha-en7523-tplink_xx230v_v1-chainload-uboot.bin

Since the 230 has a header, just skip the 512B and it will start normally:

tftpboot 0x90000000 192.168.1.100:<230 chainload file> && bootm 0x90000200

Load a uboot chainload and try booting from new uboot https://sirherobrine23.com.br/airoha_an7523/builds/releases/download/v49/openwrt-airoha-en7523-tplink_xx230v_v1-chainload-uboot.bin Since the 230 has a header, just skip the 512B and it will start normally: `tftpboot 0x90000000 192.168.1.100:<230 chainload file> && bootm 0x90000200`
Owner

Load a uboot chainload and try booting from new uboot

https://sirherobrine23.com.br/airoha_an7523/builds/releases/download/v49/openwrt-airoha-en7523-tplink_xx230v_v1-chainload-uboot.bin

Since the 230 has a header, just skip the 512B and it will start normally:

tftpboot 0x90000000 192.168.1.100:<230 chainload file> && bootm 0x90000200

Yes, this one loads your initramfs image just fine (had some errors with ubi but think that is because it is not for this device).

> Load a uboot chainload and try booting from new uboot > > https://sirherobrine23.com.br/airoha_an7523/builds/releases/download/v49/openwrt-airoha-en7523-tplink_xx230v_v1-chainload-uboot.bin > > Since the 230 has a header, just skip the 512B and it will start normally: > > `tftpboot 0x90000000 192.168.1.100:<230 chainload file> && bootm 0x90000200` Yes, this one loads your initramfs image just fine (had some errors with ubi but think that is because it is not for this device).
Author
Owner

We'll have to replace the U-boot, as is the case on all devices. This is bad, but what can you do? I don't know if your device will be able to replace the U-boot, Since it doesn't have a security key, it's probably possible to replace the uboot on your router

We'll have to replace the U-boot, as is the case on all devices. This is bad, but what can you do? I don't know if your device will be able to replace the U-boot, Since it doesn't have a security key, it's probably possible to replace the uboot on your router
Author
Owner

Did you modify the DTS file and the image/en7523.mk file? If so, could you send me the changes so I can merge

Did you modify the DTS file and the image/en7523.mk file? If so, could you send me the changes so I can merge
Owner

We'll have to replace the U-boot, as is the case on all devices. This is bad, but what can you do? I don't know if your device will be able to replace the U-boot, Since it doesn't have a security key, it's probably possible to replace the uboot on your router

What is missing from the vendor uboot ?

> We'll have to replace the U-boot, as is the case on all devices. This is bad, but what can you do? I don't know if your device will be able to replace the U-boot, Since it doesn't have a security key, it's probably possible to replace the uboot on your router What is missing from the vendor uboot ?
Author
Owner

had some errors with ubi but think that is because it is not for this device

I will replace the uboot from the xx230v, xx530v, and ex530v with the mainstream uboot, i just need to change a few things, what's holding me back right now is my Mikrotik with the nor and nand with spi driver

> had some errors with ubi but think that is because it is not for this device I will replace the uboot from the xx230v, xx530v, and ex530v with the mainstream uboot, i just need to change a few things, what's holding me back right now is my Mikrotik with the `nor` and `nand` with spi driver
Owner

Is there even nor support? I know the old stuff has nor support but not the new. Wont we need a driver for it?

Is there even nor support? I know the old stuff has nor support but not the new. Wont we need a driver for it?
Author
Owner

What is missing from the vendor uboot ?

His uboot vendor is limiting the size of the initramfs boot

> What is missing from the vendor uboot ? His uboot vendor is limiting the size of the initramfs boot
Author
Owner

Is there even nor support? I know the old stuff has nor support but not the new. Wont we need a driver for it?

A small change in the dts and NOR is detected, but not NAND. In the new Airoha driver, they are supporting NOR at the same time, this can be seen in the Mikrotik dts

> Is there even nor support? I know the old stuff has nor support but not the new. Wont we need a driver for it? A small change in the dts and NOR is detected, but not NAND. In the new Airoha driver, they are supporting NOR at the same time, this can be seen in the Mikrotik dts
Owner

Ahh, yeah Nand and Nor protocols are ontop of the SPI driver. Forgot about that.

Ahh, yeah Nand and Nor protocols are ontop of the SPI driver. Forgot about that.
Owner

For it to work well you need the proper CS selected via pinmux. That might not have the needed plumbing.

For it to work well you need the proper CS selected via pinmux. That might not have the needed plumbing.
Author
Owner

Ahh, yeah Nand and Nor protocols are ontop of the SPI driver. Forgot about that.

[   18.794171] 2 fixed-partitions partitions found on MTD device spi0.0
[   18.800587] Creating 2 MTD partitions on "spi0.0":
[   18.805426] 0x000000000000-0x0000000f0000 : "bootloader"
[   18.812090] 0x0000000f0000-0x000000100000 : "art"
[   18.818813] spi-nand spi0.1: unknown raw ID 4014c84014
[   18.823975] spi-nand spi0.1: probe with driver spi-nand failed with error -95
	spi_ctrl: spi@1fa10000 {
		compatible = "airoha,en7581-snand";
		reg = <0x1fa10000 0x140>,
		      <0x1fa11000 0x160>;

		clocks = <&scuclk EN7523_CLK_SPI>;
		clock-names = "spi";

		#address-cells = <1>;
		#size-cells = <0>;

		nor: flash@0 {
			compatible = "jedec,spi-nor";
			reg = <0>;
			spi-max-frequency = <50000000>;
			spi-tx-bus-width = <1>;
			spi-rx-bus-width = <2>;
		};

		nand: flash@1 {
			compatible = "spi-nand";
			reg = <1>;
			spi-max-frequency = <50000000>;
			spi-tx-bus-width = <1>;
			spi-rx-bus-width = <2>;
		};
	};
> Ahh, yeah Nand and Nor protocols are ontop of the SPI driver. Forgot about that. ``` [ 18.794171] 2 fixed-partitions partitions found on MTD device spi0.0 [ 18.800587] Creating 2 MTD partitions on "spi0.0": [ 18.805426] 0x000000000000-0x0000000f0000 : "bootloader" [ 18.812090] 0x0000000f0000-0x000000100000 : "art" [ 18.818813] spi-nand spi0.1: unknown raw ID 4014c84014 [ 18.823975] spi-nand spi0.1: probe with driver spi-nand failed with error -95 ``` ```dts spi_ctrl: spi@1fa10000 { compatible = "airoha,en7581-snand"; reg = <0x1fa10000 0x140>, <0x1fa11000 0x160>; clocks = <&scuclk EN7523_CLK_SPI>; clock-names = "spi"; #address-cells = <1>; #size-cells = <0>; nor: flash@0 { compatible = "jedec,spi-nor"; reg = <0>; spi-max-frequency = <50000000>; spi-tx-bus-width = <1>; spi-rx-bus-width = <2>; }; nand: flash@1 { compatible = "spi-nand"; reg = <1>; spi-max-frequency = <50000000>; spi-tx-bus-width = <1>; spi-rx-bus-width = <2>; }; }; ```
Author
Owner

For it to work well you need the proper CS selected via pinmux. That might not have the needed plumbing.

pinmux in pinctrl?

> For it to work well you need the proper CS selected via pinmux. That might not have the needed plumbing. pinmux in pinctrl?
Author
Owner

For it to work well you need the proper CS selected via pinmux. That might not have the needed plumbing.

I tried using NFi with spi_ctrl, but it either timed out or returned a zered ID for nand:

[    1.279611] spi-nor spi0.0: probe with driver spi-nor failed with error -110
[    1.537006] spi-nand spi0.1: probe with driver spi-nand failed with error -110
[   18.796241] 3 fixed-partitions partitions found on MTD device spi0.0
[   18.802623] Creating 3 MTD partitions on "spi0.0":
[   18.807444] 0x000000000000-0x000000000800 : "preload"
[   18.813321] 0x000000000800-0x0000000fe000 : "u-boot"
[   18.818452] mtd: partition "u-boot" doesn't start on an erase/write block boundary -- force read-only
[   18.828706] 0x0000000fe000-0x000000100000 : "factory"
[   18.836563] spi-nand spi0.1: unknown raw ID 0000000000
[   18.841727] spi-nand spi0.1: probe with driver spi-nand failed with error -95
> For it to work well you need the proper CS selected via pinmux. That might not have the needed plumbing. I tried using NFi with spi_ctrl, but it either timed out or returned a zered ID for nand: ``` [ 1.279611] spi-nor spi0.0: probe with driver spi-nor failed with error -110 [ 1.537006] spi-nand spi0.1: probe with driver spi-nand failed with error -110 ``` ``` [ 18.796241] 3 fixed-partitions partitions found on MTD device spi0.0 [ 18.802623] Creating 3 MTD partitions on "spi0.0": [ 18.807444] 0x000000000000-0x000000000800 : "preload" [ 18.813321] 0x000000000800-0x0000000fe000 : "u-boot" [ 18.818452] mtd: partition "u-boot" doesn't start on an erase/write block boundary -- force read-only [ 18.828706] 0x0000000fe000-0x000000100000 : "factory" [ 18.836563] spi-nand spi0.1: unknown raw ID 0000000000 [ 18.841727] spi-nand spi0.1: probe with driver spi-nand failed with error -95 ```
Owner

Move this discussion to airoha_an7523/openwrt#3 (comment)

Move this discussion to https://sirherobrine23.com.br/airoha_an7523/openwrt/issues/3#issuecomment-2921
Owner

We'll have to replace the U-boot, as is the case on all devices. This is bad, but what can you do? I don't know if your device will be able to replace the U-boot, Since it doesn't have a security key, it's probably possible to replace the uboot on your router

What is missing from the vendor uboot ?

Well iopsys u-boot version 4004 dies loading initramfs with "lzma compressed: uncompress error 7" (it loads just a kernel fine so think it is due to size), the one @Sirherobrine23 sent boots the very same image just fine.

> > We'll have to replace the U-boot, as is the case on all devices. This is bad, but what can you do? I don't know if your device will be able to replace the U-boot, Since it doesn't have a security key, it's probably possible to replace the uboot on your router > > What is missing from the vendor uboot ? Well iopsys u-boot version 4004 dies loading initramfs with "lzma compressed: uncompress error 7" (it loads just a kernel fine so think it is due to size), the one @Sirherobrine23 sent boots the very same image just fine.
Author
Owner

I will add this router to u-boot

I will add this router to u-boot
Owner

I will add this router to u-boot

Thanks, will test it. Just ordered another 10 (so there are many available now to brick :)), iam pretty sure that they sent theese units to be destroyed in Romania and they ended up on Vinted instead for some reason. Sold as Genexis but all Heimgard units before acquisition. Genexis as far as i know sells only to isps and those isps pretty sure lock those boxes up (lamely mostly :) ).

So i would call them Heimgard hardware as no idea if there was any hardware changes by Genexis (do not think so) since they acquired them.

> I will add this router to u-boot Thanks, will test it. Just ordered another 10 (so there are many available now to brick :)), iam pretty sure that they sent theese units to be destroyed in Romania and they ended up on Vinted instead for some reason. Sold as Genexis but all Heimgard units before acquisition. Genexis as far as i know sells only to isps and those isps pretty sure lock those boxes up (lamely mostly :) ). So i would call them Heimgard hardware as no idea if there was any hardware changes by Genexis (do not think so) since they acquired them.
Author
Owner

@merbanan u confirm have changes in devices hardware?

@merbanan u confirm have changes in devices hardware?
Owner

Honestly I dont know. But the devices should have the recovery option available by pulling gpio0 down, so writing something new to the device should be possible. One must not wipe the art partition though because the calibration data is stored there for the wifi cards.

Honestly I dont know. But the devices should have the recovery option available by pulling gpio0 down, so writing something new to the device should be possible. One must not wipe the art partition though because the calibration data is stored there for the wifi cards.
Author
Owner

@Gemnon this device is USB2 or USB3?

@Gemnon this device is USB2 or USB3?
Owner

@Gemnon this device is USB2 or USB3?

Heimgard CX30 is non, does not have usb ports, it has usb-c for power (did not tested but doubt if it can be use via hub as an usb port too), CX20 do not have it eigher, HX30/40 and laxy has usb port i think they are 2.0 from:

https://dk-store.netceed.com/upload_dir/shop/75000.pdf
and
https://dk-store.netceed.com/upload_dir/shop/75001.pdf

> @Gemnon this device is USB2 or USB3? Heimgard CX30 is non, does not have usb ports, it has usb-c for power (did not tested but doubt if it can be use via hub as an usb port too), CX20 do not have it eigher, HX30/40 and laxy has usb port i think they are 2.0 from: https://dk-store.netceed.com/upload_dir/shop/75000.pdf and https://dk-store.netceed.com/upload_dir/shop/75001.pdf
Author
Owner

@Gemnon, the xx230v's uboot chainload, you have tftpput which you can use to perform a full NAND dump, in case you need to recover it

read with mtd and send to tftp server with tftput

@Gemnon, the xx230v's uboot chainload, you have `tftpput` which you can use to perform a full NAND dump, in case you need to recover it read with `mtd` and send to tftp server with `tftput`
Author
Owner
U-Boot> mtd list
List of MTD devices:
* spi-nand0
  - device: nand@0
  - parent: spi@1fa10000
  - driver: spi_nand
  - path: /spi@1fa10000/nand@0
  - type: NAND flash
  - block size: 0x20000 bytes
  - min I/O: 0x800 bytes
  - OOB size: 64 bytes
  - OOB available: 8 bytes
  - ECC strength: 1 bits
  - ECC step size: 512 bytes
  - bitflip threshold: 1 bits
  - 0x000000000000-0x000008000000 : "spi-nand0"
          - 0x000000000000-0x000000080000 : "uboot-atf"
          - 0x000000080000-0x000000120000 : "romfile"
          - 0x0000000a0000-0x000000240000 : "misc"
          - 0x0000001a0000-0x0000002a0000 : "chainloader"
          - 0x0000002a0000-0x000007500000 : "ubi"
          - 0x000007500000-0x000008000000 : "reserved_bmt"
U-Boot> mtd read spi-nand0 $loadaddr 0x0 0x8000000    
Reading 134217728 byte(s) (65536 page(s)) at offset 0x00000000
U-Boot> tftpput $loadaddr 0x8000000 192.168.1.100:cx30_dump.bin

replace => 0x8000000 in mtd read with size of nand

``` U-Boot> mtd list List of MTD devices: * spi-nand0 - device: nand@0 - parent: spi@1fa10000 - driver: spi_nand - path: /spi@1fa10000/nand@0 - type: NAND flash - block size: 0x20000 bytes - min I/O: 0x800 bytes - OOB size: 64 bytes - OOB available: 8 bytes - ECC strength: 1 bits - ECC step size: 512 bytes - bitflip threshold: 1 bits - 0x000000000000-0x000008000000 : "spi-nand0" - 0x000000000000-0x000000080000 : "uboot-atf" - 0x000000080000-0x000000120000 : "romfile" - 0x0000000a0000-0x000000240000 : "misc" - 0x0000001a0000-0x0000002a0000 : "chainloader" - 0x0000002a0000-0x000007500000 : "ubi" - 0x000007500000-0x000008000000 : "reserved_bmt" U-Boot> mtd read spi-nand0 $loadaddr 0x0 0x8000000 Reading 134217728 byte(s) (65536 page(s)) at offset 0x00000000 U-Boot> tftpput $loadaddr 0x8000000 192.168.1.100:cx30_dump.bin ``` ## replace => 0x8000000 in mtd read with size of nand
Owner

@Gemnon, the xx230v's uboot chainload, you have tftpput which you can use to perform a full NAND dump, in case you need to recover it

read with mtd and send to tftp server with tftput

Thanks did that already on CX30, iopsys u-boot also has tftpput so have full backup for the cx30 iam testing on.
Will get the same for the other boxes.

Need that file? (can upload it tommorow, as it is on my laptop i left at work)

> @Gemnon, the xx230v's uboot chainload, you have `tftpput` which you can use to perform a full NAND dump, in case you need to recover it > > read with `mtd` and send to tftp server with `tftput` Thanks did that already on CX30, iopsys u-boot also has tftpput so have full backup for the cx30 iam testing on. Will get the same for the other boxes. Need that file? (can upload it tommorow, as it is on my laptop i left at work)
Author
Owner

if you want to send it, I can locate the mt76 EEPROM in the ART file, because that UBI dump you sent is strange

if you want to send it, I can locate the mt76 EEPROM in the ART file, because that UBI dump you sent is strange
Owner

if you want to send it, I can locate the mt76 EEPROM in the ART file, because that UBI dump you sent is strange

I might be wrong but what fixed my boot was copying over /lib/firmware from iowrt.
Is it not /lib/firmware/mediatek/mt7916_eeprom.bin in rootfs ? I attached the stuff extracted on ota.
Not sure if it is but copying that folder to ramfs seems to made it recognize wifi. (also i think all combo is there not just the one for pixly (under /lib/firmware/mediatek/airoha) but i might be wrong)

> if you want to send it, I can locate the mt76 EEPROM in the ART file, because that UBI dump you sent is strange I might be wrong but what fixed my boot was copying over /lib/firmware from iowrt. Is it not /lib/firmware/mediatek/mt7916_eeprom.bin in rootfs ? I attached the stuff extracted on ota. Not sure if it is but copying that folder to ramfs seems to made it recognize wifi. (also i think all combo is there not just the one for pixly (under /lib/firmware/mediatek/airoha) but i might be wrong)
3.7 MiB
Author
Owner

I might be wrong but what fixed my boot was copying over /lib/firmware from iowrt.
Is /lib/firmware/mediatek/mt7916_eeprom.bin in rootfs

Normally, the EEPROM is located in the ART part and in the rootfs. if it's not in the ART part, we should use the one in the rootfs, but we always prefer the ART part

> I might be wrong but what fixed my boot was copying over /lib/firmware from iowrt. > Is /lib/firmware/mediatek/mt7916_eeprom.bin in rootfs Normally, the EEPROM is located in the ART part and in the rootfs. if it's not in the ART part, we should use the one in the rootfs, but we always prefer the ART part
Owner

Will send it tommorow.
The dump i found home is what i made from luci in heimgardos, and there art partition and boarddata is just full of ff , most likely luci could not back it off (or was protected) but it should be in nand backup.

Will send it tommorow. The dump i found home is what i made from luci in heimgardos, and there art partition and boarddata is just full of ff , most likely luci could not back it off (or was protected) but it should be in nand backup.
Author
Owner

@Gemnon

  • mac addr: ?

  • mt76 eeprom (probably): art: off 0x000c0000, size: 0x1000:

╭─sirherobrine23@matheus-note ~/gitwork/airoha_en7523/dumps/ubifs-root/ubi.bin 
╰─$ dd status=none if=img-702916436_vol-art.ubifs skip=$((0x000c0000))B count=$((0xe00))B | xxd -c32 
00000000: 1679 0000 b0dd 74af 93e2 b0dd 74af 93e3 0000 0000 0000 0000 0000 0000 0000 0000  .y....t.....t...................
00000020: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000040: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000060: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000080: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
000000a0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
000000c0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
000000e0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000100: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000120: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000140: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000180: 0000 0000 0000 0000 0000 0000 0000 0000 125b 484c 0028 0000 05d0 0000 0000 0000  .................[HL.(..........
000001a0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
000001c0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
000001e0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000200: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000220: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000260: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000280: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
000002a0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
000002c0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
000002e0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000300: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000320: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000340: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000360: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000380: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
000003a0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
000003c0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
000003e0: 0000 0000 0000 0012 1212 0000 0000 0000 0000 0000 0000 2222 2222 3333 3333 3333  ......................""""333333
00000400: 3333 3333 3333 3333 3333 3333 3333 3333 3333 3333 3333 0000 0000 0000 0000 0000  3333333333333333333333..........
00000420: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000440: 0028 2828 2826 2626 2626 2626 2626 2626 2626 2626 2626 2626 2600 0000 0000 0000  .((((&&&&&&&&&&&&&&&&&&&&.......
00000460: 0000 0000 0024 2424 2422 2222 2224 2424 2422 2222 2224 2424 2422 2222 2224 2424  .....$$$$""""$$$$""""$$$$""""$$$
00000480: 2422 2222 2200 0000 0000 0000 0000 0000 0000 0000 0081 c2c1 81c2 c200 0000 0000  $""""...........................
000004a0: 0081 8180 8080 8080 c181 8081 81c1 c1c1 c1c1 c280 c181 80c2 c1c2 c280 c2c1 c200  ................................
000004c0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
000004e0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000500: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000520: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000540: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000560: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000580: 0000 0000 007f 7f7f d1d1 dddd e9e9 f5f5 0101 0909 1515 d1d1 dddd e9e9 f5f5 fdfd  ................................
000005a0: 0909 1515 d1d1 dddd e9e9 f5f5 fdfd 0909 1515 d1d1 dddd e9e9 f5f5 fdfd 0909 1515  ................................
000005c0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
000005e0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000600: 1cf2 fc00 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000620: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000640: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000660: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000680: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
000006a0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
000006c0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
000006e0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000700: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000720: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000740: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000760: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000780: 0000 0000 0000 0000 0000 0000 0000 0000 021e 021e 0200 0200 0237 0237 0237 0237  .........................7.7.7.7
000007a0: 0237 0237 0237 0237 0237 0237 0237 0237 0237 0237 0237 0237 0237 0237 0237 0237  .7.7.7.7.7.7.7.7.7.7.7.7.7.7.7.7
000007c0: 0237 0237 0237 0237 0237 0237 0237 0237 0022 00c6 c6c3 c3c2 0000 c2c2 c200 0081  .7.7.7.7.7.7.7.7."..............
000007e0: 8285 85c2 c282 8282 8285 85c2 c2c2 0000 8182 8585 8787 c2c2 0081 8182 8585 8787  ................................
00000800: c2c2 0000 8182 8585 8787 c2c2 0000 8182 8585 8787 c2c2 0000 8182 8585 8787 c4c4  ................................
00000820: c2c1 00c3 c3c3 c3c1 0081 8383 c3c3 c3c1 0081 8383 c3c2 c2c2 0081 8284 84c2 c3c3  ................................
00000840: c3c1 0081 8383 8686 c3c3 c3c1 0081 8383 8686 c2c2 c200 8182 8484 8686 8282 8284  ................................
00000860: 8586 8888 8b8b c3c3 c3c1 0081 8383 8686 c3c3 c3c1 0081 8383 8686 c3c3 c3c1 0081  ................................
00000880: 8383 8686 c4c4 c2c1 00c3 c3c3 c100 8183 8386 86c3 c3c3 c100 8183 8386 86c2 c2c2  ................................
000008a0: 0081 8284 8486 8682 8282 8485 8688 888b 8bc3 c3c3 c100 8183 8386 86c3 c3c3 c100  ................................
000008c0: 8183 8386 86c3 c3c3 c100 8183 8386 8600 0000 0000 0000 0000 0000 0000 0000 0000  ................................
000008e0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000900: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000920: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000940: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000960: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000980: 0000 0000 0000 0000 0000 0000 0000 0000 00bd 0000 0000 0000 00fd 0000 0000 0000  ................................
000009a0: 0000 0000 0000 0000 00c5 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
000009c0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
000009e0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000a00: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000a20: 0049 5256 5555 5555 004a 5251 5151 5151 004a 5355 5656 5656 0049 504e 5151 5151  .IRVUUUU.JRQQQQQ.JSUVVVV.IPNQQQQ
00000a40: 0049 5150 5454 5454 0049 5051 5151 5151 0049 5251 5050 5050 0049 5251 5151 5151  .IQPTTTT.IPQQQQQ.IRQPPPP.IRQQQQQ
00000a60: 0049 5251 5454 5454 0049 5150 5454 5454 0049 5352 5151 5151 0049 5353 5252 5252  .IRQTTTT.IQPTTTT.ISRQQQQ.ISSRRRR
00000a80: 0049 5150 5050 5050 0049 5152 5454 5454 0049 5251 5353 5353 0000 0000 0000 0000  .IQPPPPP.IQRTTTT.IRQSSSS........
00000aa0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000ac0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000ae0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000b00: 0000 0000 0000 0000 0000 0000 0000 0000 d1d1 dddd e9e9 f5f5 fdfd 1414 1d1d 0000  ................................
00000b20: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000b40: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000b60: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000b80: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000ba0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000bc0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000be0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000c00: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000c20: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000c40: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000c60: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000c80: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000ca0: 8384 0000 c3c4 c382 8282 81c1 c4c5 c400 0000 c1c3 c4c4 c481 8181 c1c2 0000 0000  ................................
00000cc0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000ce0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000d00: c0bb c0bb c0bb c0bb 40c5 c0c4 c0c3 c0c3 40c3 40c5 40c4 c0c3 40c3 c0c2 c0c5 c0c4  ........@.......@.@.@...@.......
00000d20: 40c4 40c4 c0c3 c0c5 c0c4 40c4 40c4 c0c3 0000 0000 0000 0000 0000 0000 0000 0000  @.@.......@.@...................
00000d40: 0000 0000 0000 0000 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6  ........@.@.@.@.@.@.@.@.@.@.@.@.
00000d60: 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6  @.@.@.@.@.@.@.@.@.@.@.@.@.@.@.@.
00000d80: 40c6 40c6 40c6 40c6 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  @.@.@.@.........................
00000da0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000dc0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................
00000de0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000  ................................

@Gemnon - mac addr: ? - mt76 eeprom (probably): art: off `0x000c0000`, size: `0x1000`: ``` ╭─sirherobrine23@matheus-note ~/gitwork/airoha_en7523/dumps/ubifs-root/ubi.bin ╰─$ dd status=none if=img-702916436_vol-art.ubifs skip=$((0x000c0000))B count=$((0xe00))B | xxd -c32 00000000: 1679 0000 b0dd 74af 93e2 b0dd 74af 93e3 0000 0000 0000 0000 0000 0000 0000 0000 .y....t.....t................... 00000020: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000040: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000060: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000080: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 000000a0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 000000c0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 000000e0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000100: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000120: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000140: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000180: 0000 0000 0000 0000 0000 0000 0000 0000 125b 484c 0028 0000 05d0 0000 0000 0000 .................[HL.(.......... 000001a0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 000001c0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 000001e0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000200: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000220: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000260: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000280: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 000002a0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 000002c0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 000002e0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000300: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000320: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000340: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000360: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000380: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 000003a0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 000003c0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 000003e0: 0000 0000 0000 0012 1212 0000 0000 0000 0000 0000 0000 2222 2222 3333 3333 3333 ......................""""333333 00000400: 3333 3333 3333 3333 3333 3333 3333 3333 3333 3333 3333 0000 0000 0000 0000 0000 3333333333333333333333.......... 00000420: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000440: 0028 2828 2826 2626 2626 2626 2626 2626 2626 2626 2626 2626 2600 0000 0000 0000 .((((&&&&&&&&&&&&&&&&&&&&....... 00000460: 0000 0000 0024 2424 2422 2222 2224 2424 2422 2222 2224 2424 2422 2222 2224 2424 .....$$$$""""$$$$""""$$$$""""$$$ 00000480: 2422 2222 2200 0000 0000 0000 0000 0000 0000 0000 0081 c2c1 81c2 c200 0000 0000 $""""........................... 000004a0: 0081 8180 8080 8080 c181 8081 81c1 c1c1 c1c1 c280 c181 80c2 c1c2 c280 c2c1 c200 ................................ 000004c0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 000004e0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000500: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000520: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000540: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000560: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000580: 0000 0000 007f 7f7f d1d1 dddd e9e9 f5f5 0101 0909 1515 d1d1 dddd e9e9 f5f5 fdfd ................................ 000005a0: 0909 1515 d1d1 dddd e9e9 f5f5 fdfd 0909 1515 d1d1 dddd e9e9 f5f5 fdfd 0909 1515 ................................ 000005c0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 000005e0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000600: 1cf2 fc00 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000620: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000640: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000660: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000680: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 000006a0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 000006c0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 000006e0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000700: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000720: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000740: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000760: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000780: 0000 0000 0000 0000 0000 0000 0000 0000 021e 021e 0200 0200 0237 0237 0237 0237 .........................7.7.7.7 000007a0: 0237 0237 0237 0237 0237 0237 0237 0237 0237 0237 0237 0237 0237 0237 0237 0237 .7.7.7.7.7.7.7.7.7.7.7.7.7.7.7.7 000007c0: 0237 0237 0237 0237 0237 0237 0237 0237 0022 00c6 c6c3 c3c2 0000 c2c2 c200 0081 .7.7.7.7.7.7.7.7.".............. 000007e0: 8285 85c2 c282 8282 8285 85c2 c2c2 0000 8182 8585 8787 c2c2 0081 8182 8585 8787 ................................ 00000800: c2c2 0000 8182 8585 8787 c2c2 0000 8182 8585 8787 c2c2 0000 8182 8585 8787 c4c4 ................................ 00000820: c2c1 00c3 c3c3 c3c1 0081 8383 c3c3 c3c1 0081 8383 c3c2 c2c2 0081 8284 84c2 c3c3 ................................ 00000840: c3c1 0081 8383 8686 c3c3 c3c1 0081 8383 8686 c2c2 c200 8182 8484 8686 8282 8284 ................................ 00000860: 8586 8888 8b8b c3c3 c3c1 0081 8383 8686 c3c3 c3c1 0081 8383 8686 c3c3 c3c1 0081 ................................ 00000880: 8383 8686 c4c4 c2c1 00c3 c3c3 c100 8183 8386 86c3 c3c3 c100 8183 8386 86c2 c2c2 ................................ 000008a0: 0081 8284 8486 8682 8282 8485 8688 888b 8bc3 c3c3 c100 8183 8386 86c3 c3c3 c100 ................................ 000008c0: 8183 8386 86c3 c3c3 c100 8183 8386 8600 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 000008e0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000900: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000920: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000940: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000960: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000980: 0000 0000 0000 0000 0000 0000 0000 0000 00bd 0000 0000 0000 00fd 0000 0000 0000 ................................ 000009a0: 0000 0000 0000 0000 00c5 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 000009c0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 000009e0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000a00: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000a20: 0049 5256 5555 5555 004a 5251 5151 5151 004a 5355 5656 5656 0049 504e 5151 5151 .IRVUUUU.JRQQQQQ.JSUVVVV.IPNQQQQ 00000a40: 0049 5150 5454 5454 0049 5051 5151 5151 0049 5251 5050 5050 0049 5251 5151 5151 .IQPTTTT.IPQQQQQ.IRQPPPP.IRQQQQQ 00000a60: 0049 5251 5454 5454 0049 5150 5454 5454 0049 5352 5151 5151 0049 5353 5252 5252 .IRQTTTT.IQPTTTT.ISRQQQQ.ISSRRRR 00000a80: 0049 5150 5050 5050 0049 5152 5454 5454 0049 5251 5353 5353 0000 0000 0000 0000 .IQPPPPP.IQRTTTT.IRQSSSS........ 00000aa0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000ac0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000ae0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000b00: 0000 0000 0000 0000 0000 0000 0000 0000 d1d1 dddd e9e9 f5f5 fdfd 1414 1d1d 0000 ................................ 00000b20: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000b40: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000b60: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000b80: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000ba0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000bc0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000be0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000c00: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000c20: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000c40: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000c60: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000c80: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000ca0: 8384 0000 c3c4 c382 8282 81c1 c4c5 c400 0000 c1c3 c4c4 c481 8181 c1c2 0000 0000 ................................ 00000cc0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000ce0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000d00: c0bb c0bb c0bb c0bb 40c5 c0c4 c0c3 c0c3 40c3 40c5 40c4 c0c3 40c3 c0c2 c0c5 c0c4 ........@.......@.@.@...@....... 00000d20: 40c4 40c4 c0c3 c0c5 c0c4 40c4 40c4 c0c3 0000 0000 0000 0000 0000 0000 0000 0000 @.@.......@.@................... 00000d40: 0000 0000 0000 0000 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 ........@.@.@.@.@.@.@.@.@.@.@.@. 00000d60: 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 40c6 @.@.@.@.@.@.@.@.@.@.@.@.@.@.@.@. 00000d80: 40c6 40c6 40c6 40c6 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 @.@.@.@......................... 00000da0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000dc0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ 00000de0: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ................................ ```
Owner

@Gemnon

  • mac addr: ?

  • mt76 eeprom (probably): art: off 0x000c0000, size: 0x1000:

Yes seem to be like that is it.

wlan0_0   Link encap:Ethernet  HWaddr B0:DD:74:AF:93:E2  
          inet6 addr: fe80::b2dd:74ff:feaf:93e2/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:156 (156.0 B)

wlan1_0   Link encap:Ethernet  HWaddr B0:DD:74:AF:93:E3  
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

> @Gemnon > > - mac addr: ? > > - mt76 eeprom (probably): art: off `0x000c0000`, size: `0x1000`: Yes seem to be like that is it. ``` wlan0_0 Link encap:Ethernet HWaddr B0:DD:74:AF:93:E2 inet6 addr: fe80::b2dd:74ff:feaf:93e2/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:2 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:156 (156.0 B) wlan1_0 Link encap:Ethernet HWaddr B0:DD:74:AF:93:E3 UP BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) ```
Author
Owner

cx20 art is same addresses, i make dtsi for genexis devices

cx20 art is same addresses, i make dtsi for genexis devices
Author
Owner

@Gemnon

  • mac addr: ?

  • mt76 eeprom (probably): art: off 0x000c0000, size: 0x1000:

Yes seem to be like that is it.

wlan0_0   Link encap:Ethernet  HWaddr B0:DD:74:AF:93:E2  
          inet6 addr: fe80::b2dd:74ff:feaf:93e2/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:156 (156.0 B)

wlan1_0   Link encap:Ethernet  HWaddr B0:DD:74:AF:93:E3  
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

they are in the EEPROM, so there's a chance the Ethernet ports have different addresses.

000c0000: 1679 0000 - b0dd 74af 93e2 - b0dd 74af 93e3 - 0000 0000 0000 0000 0000 0000 0000 0000 .y....t.....t...................

> > @Gemnon > > > > - mac addr: ? > > > > - mt76 eeprom (probably): art: off `0x000c0000`, size: `0x1000`: > > Yes seem to be like that is it. > > ``` > wlan0_0 Link encap:Ethernet HWaddr B0:DD:74:AF:93:E2 > inet6 addr: fe80::b2dd:74ff:feaf:93e2/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:0 errors:0 dropped:0 overruns:0 frame:0 > TX packets:2 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:1000 > RX bytes:0 (0.0 B) TX bytes:156 (156.0 B) > > wlan1_0 Link encap:Ethernet HWaddr B0:DD:74:AF:93:E3 > UP BROADCAST MULTICAST MTU:1500 Metric:1 > RX packets:0 errors:0 dropped:0 overruns:0 frame:0 > TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:1000 > RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) > > ``` > they are in the EEPROM, so there's a chance the Ethernet ports have different addresses. `000c0000`: `1679 0000` - `b0dd 74af 93e2` - `b0dd 74af 93e3` - `0000 0000 0000 0000 0000 0000 0000 0000 .y....t.....t...................`
Owner

@Gemnon

  • mac addr: ?

  • mt76 eeprom (probably): art: off 0x000c0000, size: 0x1000:

Yes seem to be like that is it.

wlan0_0   Link encap:Ethernet  HWaddr B0:DD:74:AF:93:E2  
          inet6 addr: fe80::b2dd:74ff:feaf:93e2/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:156 (156.0 B)

wlan1_0   Link encap:Ethernet  HWaddr B0:DD:74:AF:93:E3  
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

they are in the EEPROM, so there's a chance the Ethernet ports have different addresses.

ethernet is B0:DD:74:AF:93:E0

It might get it from u-boot env as there it is set :

base_macaddr=B0DD74AF93E0
ethaddr=B0:DD:74:AF:93:E0

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: ip_vti0@NONE: <NOARP> mtu 1480 qdisc noop state DOWN group default qlen 1000
    link/ipip 0.0.0.0 brd 0.0.0.0
3: sit0@NONE: <NOARP> mtu 1480 qdisc noop state DOWN group default qlen 1000
    link/sit 0.0.0.0 brd 0.0.0.0
4: ip6tnl0@NONE: <NOARP> mtu 1452 qdisc noop state DOWN group default qlen 1000
    link/tunnel6 :: brd ::
5: lan_int2_if: <BROADCAST,MULTICAST,LOWER_UP> mtu 1500 qdisc noop state UNKNOWN group default qlen 1000
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
6: lan_int3_if: <BROADCAST,MULTICAST,LOWER_UP> mtu 1500 qdisc noop state UNKNOWN group default qlen 1000
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
7: lan_int4_if: <BROADCAST,MULTICAST,LOWER_UP> mtu 1500 qdisc noop state UNKNOWN group default qlen 1000
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
8: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN group default qlen 1000
    link/ether b0:dd:74:af:93:e0 brd ff:ff:ff:ff:ff:ff
    inet6 fe80::b2dd:74ff:feaf:93e0/64 scope link 
       valid_lft forever preferred_lft forever
9: eth0.1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast master br-lan state DOWN group default qlen 1000
    link/ether b0:dd:74:af:93:e0 brd ff:ff:ff:ff:ff:ff
10: eth0.2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master br-lan state UP group default qlen 1000
    link/ether b0:dd:74:af:93:e0 brd ff:ff:ff:ff:ff:ff
11: eth0.3: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
    link/ether b0:dd:74:af:93:e0 brd ff:ff:ff:ff:ff:ff
12: eth0.4: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
    link/ether b0:dd:74:af:93:e0 brd ff:ff:ff:ff:ff:ff
13: nas10: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN group default qlen 1000
    link/ether b0:dd:74:af:93:e1 brd ff:ff:ff:ff:ff:ff
14: wan_int2_if: <BROADCAST,MULTICAST,LOWER_UP> mtu 1500 qdisc noop state UNKNOWN group default qlen 1000
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
15: wan_int3_if: <BROADCAST,MULTICAST,LOWER_UP> mtu 1500 qdisc noop state UNKNOWN group default qlen 1000
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
16: wan_int4_if: <BROADCAST,MULTICAST,LOWER_UP> mtu 1500 qdisc noop state UNKNOWN group default qlen 1000
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
17: gre0@NONE: <NOARP> mtu 1476 qdisc noop state DOWN group default qlen 1000
    link/gre 0.0.0.0 brd 0.0.0.0
18: gretap0@NONE: <BROADCAST,MULTICAST> mtu 1462 qdisc noop state DOWN group default qlen 1000
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
19: erspan0@NONE: <BROADCAST,MULTICAST> mtu 1450 qdisc noop state DOWN group default qlen 1000
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
20: ip6gre0@NONE: <NOARP> mtu 1448 qdisc noop state DOWN group default qlen 1000
    link/gre6 :: brd ::
23: br-lan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether b0:dd:74:af:93:e0 brd ff:ff:ff:ff:ff:ff
    inet 192.168.39.1/24 brd 192.168.39.255 scope global br-lan
       valid_lft forever preferred_lft forever
    inet6 fd5e:5036:c5a0::1/60 scope global noprefixroute 
       valid_lft forever preferred_lft forever
    inet6 fe80::b2dd:74ff:feaf:93e0/64 scope link 
       valid_lft forever preferred_lft forever
24: wlan0_0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP group default qlen 1000
    link/ether b0:dd:74:af:93:e2 brd ff:ff:ff:ff:ff:ff
    inet6 fe80::b2dd:74ff:feaf:93e2/64 scope link 
       valid_lft forever preferred_lft forever
25: wlan1_0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP group default qlen 1000
    link/ether b0:dd:74:af:93:e3 brd ff:ff:ff:ff:ff:ff
    inet6 fe80::b2dd:74ff:feaf:93e3/64 scope link 
       valid_lft forever preferred_lft forever
26: wlan1_1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP group default qlen 1000
    link/ether b2:dd:74:af:93:e3 brd ff:ff:ff:ff:ff:ff
    inet6 fe80::b0dd:74ff:feaf:93e3/64 scope link 
       valid_lft forever preferred_lft forever

> > > @Gemnon > > > > > > - mac addr: ? > > > > > > - mt76 eeprom (probably): art: off `0x000c0000`, size: `0x1000`: > > > > Yes seem to be like that is it. > > > > ``` > > wlan0_0 Link encap:Ethernet HWaddr B0:DD:74:AF:93:E2 > > inet6 addr: fe80::b2dd:74ff:feaf:93e2/64 Scope:Link > > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > > RX packets:0 errors:0 dropped:0 overruns:0 frame:0 > > TX packets:2 errors:0 dropped:0 overruns:0 carrier:0 > > collisions:0 txqueuelen:1000 > > RX bytes:0 (0.0 B) TX bytes:156 (156.0 B) > > > > wlan1_0 Link encap:Ethernet HWaddr B0:DD:74:AF:93:E3 > > UP BROADCAST MULTICAST MTU:1500 Metric:1 > > RX packets:0 errors:0 dropped:0 overruns:0 frame:0 > > TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 > > collisions:0 txqueuelen:1000 > > RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) > > > > ``` > > > > they are in the EEPROM, so there's a chance the Ethernet ports have different addresses. ethernet is B0:DD:74:AF:93:E0 It might get it from u-boot env as there it is set : base_macaddr=B0DD74AF93E0 ethaddr=B0:DD:74:AF:93:E0 ``` 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: ip_vti0@NONE: <NOARP> mtu 1480 qdisc noop state DOWN group default qlen 1000 link/ipip 0.0.0.0 brd 0.0.0.0 3: sit0@NONE: <NOARP> mtu 1480 qdisc noop state DOWN group default qlen 1000 link/sit 0.0.0.0 brd 0.0.0.0 4: ip6tnl0@NONE: <NOARP> mtu 1452 qdisc noop state DOWN group default qlen 1000 link/tunnel6 :: brd :: 5: lan_int2_if: <BROADCAST,MULTICAST,LOWER_UP> mtu 1500 qdisc noop state UNKNOWN group default qlen 1000 link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff 6: lan_int3_if: <BROADCAST,MULTICAST,LOWER_UP> mtu 1500 qdisc noop state UNKNOWN group default qlen 1000 link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff 7: lan_int4_if: <BROADCAST,MULTICAST,LOWER_UP> mtu 1500 qdisc noop state UNKNOWN group default qlen 1000 link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff 8: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN group default qlen 1000 link/ether b0:dd:74:af:93:e0 brd ff:ff:ff:ff:ff:ff inet6 fe80::b2dd:74ff:feaf:93e0/64 scope link valid_lft forever preferred_lft forever 9: eth0.1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast master br-lan state DOWN group default qlen 1000 link/ether b0:dd:74:af:93:e0 brd ff:ff:ff:ff:ff:ff 10: eth0.2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master br-lan state UP group default qlen 1000 link/ether b0:dd:74:af:93:e0 brd ff:ff:ff:ff:ff:ff 11: eth0.3: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000 link/ether b0:dd:74:af:93:e0 brd ff:ff:ff:ff:ff:ff 12: eth0.4: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000 link/ether b0:dd:74:af:93:e0 brd ff:ff:ff:ff:ff:ff 13: nas10: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN group default qlen 1000 link/ether b0:dd:74:af:93:e1 brd ff:ff:ff:ff:ff:ff 14: wan_int2_if: <BROADCAST,MULTICAST,LOWER_UP> mtu 1500 qdisc noop state UNKNOWN group default qlen 1000 link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff 15: wan_int3_if: <BROADCAST,MULTICAST,LOWER_UP> mtu 1500 qdisc noop state UNKNOWN group default qlen 1000 link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff 16: wan_int4_if: <BROADCAST,MULTICAST,LOWER_UP> mtu 1500 qdisc noop state UNKNOWN group default qlen 1000 link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff 17: gre0@NONE: <NOARP> mtu 1476 qdisc noop state DOWN group default qlen 1000 link/gre 0.0.0.0 brd 0.0.0.0 18: gretap0@NONE: <BROADCAST,MULTICAST> mtu 1462 qdisc noop state DOWN group default qlen 1000 link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff 19: erspan0@NONE: <BROADCAST,MULTICAST> mtu 1450 qdisc noop state DOWN group default qlen 1000 link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff 20: ip6gre0@NONE: <NOARP> mtu 1448 qdisc noop state DOWN group default qlen 1000 link/gre6 :: brd :: 23: br-lan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether b0:dd:74:af:93:e0 brd ff:ff:ff:ff:ff:ff inet 192.168.39.1/24 brd 192.168.39.255 scope global br-lan valid_lft forever preferred_lft forever inet6 fd5e:5036:c5a0::1/60 scope global noprefixroute valid_lft forever preferred_lft forever inet6 fe80::b2dd:74ff:feaf:93e0/64 scope link valid_lft forever preferred_lft forever 24: wlan0_0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP group default qlen 1000 link/ether b0:dd:74:af:93:e2 brd ff:ff:ff:ff:ff:ff inet6 fe80::b2dd:74ff:feaf:93e2/64 scope link valid_lft forever preferred_lft forever 25: wlan1_0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP group default qlen 1000 link/ether b0:dd:74:af:93:e3 brd ff:ff:ff:ff:ff:ff inet6 fe80::b2dd:74ff:feaf:93e3/64 scope link valid_lft forever preferred_lft forever 26: wlan1_1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP group default qlen 1000 link/ether b2:dd:74:af:93:e3 brd ff:ff:ff:ff:ff:ff inet6 fe80::b0dd:74ff:feaf:93e3/64 scope link valid_lft forever preferred_lft forever ```
Author
Owner

nothing in any part of nand dump

╭─sirherobrine23@matheus-note ~/gitwork/airoha_en7523/dumps/gene 
╰─$ dd status=none if=cx30_dump.bin | xxd -c32 | grep 'b0dd 74af 93e0'                                                                                            1 ↵
╭─sirherobrine23@matheus-note ~/gitwork/airoha_en7523/dumps/gene 
╰─$                                                                                                                                                               1 ↵
nothing in any part of nand dump ``` ╭─sirherobrine23@matheus-note ~/gitwork/airoha_en7523/dumps/gene ╰─$ dd status=none if=cx30_dump.bin | xxd -c32 | grep 'b0dd 74af 93e0' 1 ↵ ╭─sirherobrine23@matheus-note ~/gitwork/airoha_en7523/dumps/gene ╰─$ 1 ↵ ```
Owner

nothing in any part of nand dump

╭─sirherobrine23@matheus-note ~/gitwork/airoha_en7523/dumps/gene 
╰─$ dd status=none if=cx30_dump.bin | xxd -c32 | grep 'b0dd 74af 93e0'                                                                                            1 ↵
╭─sirherobrine23@matheus-note ~/gitwork/airoha_en7523/dumps/gene 
╰─$                                                                                                                                                               1 ↵

fw_printenv shows those but not as hex but plaintext.
base_macaddr=B0DD74AF93E0
ethaddr=B0:DD:74:AF:93:E0

That is why i think it is taken from there.

> nothing in any part of nand dump > > ``` > ╭─sirherobrine23@matheus-note ~/gitwork/airoha_en7523/dumps/gene > ╰─$ dd status=none if=cx30_dump.bin | xxd -c32 | grep 'b0dd 74af 93e0' 1 ↵ > ╭─sirherobrine23@matheus-note ~/gitwork/airoha_en7523/dumps/gene > ╰─$ 1 ↵ > ``` fw_printenv shows those but not as hex but plaintext. base_macaddr=B0DD74AF93E0 ethaddr=B0:DD:74:AF:93:E0 That is why i think it is taken from there.
Author
Owner

img-702916436_vol-env1.ubifs:

00000060: 6472 3d42 3044 4437 3441 4639 3345 3000 6261 7564 7261 7465 3d31 3135 3230 3000  dr=B0DD74AF93E0.baudrate=115200.

img-702916436_vol-env2.ubifs:

00000060: 6472 3d42 3044 4437 3441 4639 3345 3000 6261 7564 7261 7465 3d31 3135 3230 3000  dr=B0DD74AF93E0.baudrate=115200.

img-702916436_vol-overlay1.ubifs:

00137380: 642d 4230 4444 3734 4146 3933 4530 270a 0a11 0000 42fa bef2 3118 1006 3285 1367  d-B0DD74AF93E0'.....B...1...2..g
001629c0: 3762 2d38 6530 642d 4230 4444 3734 4146 3933 4530 270a 0a11 0000 7920 275a 5a28  7b-8e0d-B0DD74AF93E0'.....y 'ZZ(
00163200: 090c 4230 4444 3734 4146 3933 4530 270a 0a11 0000 0000 0000 3118 1006 3e59 888b  ..B0DD74AF93E0'.........1...>Y..
0016ca00: a409 0c42 3044 4437 3441 4639 3345 3027 0a0a 1100 0000 0000 3118 1006 3e59 888b  ...B0DD74AF93E0'........1...>Y..
0019a2e0: 0238 6530 642d 4230 4444 3734 4146 3933 4530 270a 0a11 0000 3118 1006 379c 782a  .8e0d-B0DD74AF93E0'.....1...7.x*
002afa00: 0330 a409 293c 0234 0404 2001 a509 3120 f3a4 090c 4230 4444 3734 4146 3933 4530  .0..)<.4.. ...1 ....B0DD74AF93E0
002b0220: 0264 28dc 0e29 5400 2001 7d0a 3120 f37c 0a0c 4230 4444 3734 4146 3933 4530 270a  .d(..)T. .}.1 .|..B0DD74AF93E0'.

img-702916436_vol-overlay2.ubifs:

002a5bc0: 1129 f00a 202b 9408 0001 6530 642d 4230 4444 3734 4146 3933 4530 270a 0a11 0000  .).. +....e0d-B0DD74AF93E0'.....
003d7ce0: 4150 2d42 3044 4437 3441 4639 3345 302d 4248 2d35 4748 7a27 0a09 6f70 7469 6f6e  AP-B0DD74AF93E0-BH-5GHz'..option
003da4e0: 4150 2d42 3044 4437 3441 4639 3345 302d 4248 2d35 4748 7a27 0a09 6f70 7469 6f6e  AP-B0DD74AF93E0-BH-5GHz'..option
003f9ce0: 4150 2d42 3044 4437 3441 4639 3345 302d 4248 2d35 4748 7a27 0a09 6f70 7469 6f6e  AP-B0DD74AF93E0-BH-5GHz'..option
003fc4e0: 4150 2d42 3044 4437 3441 4639 3345 302d 4248 2d35 4748 7a27 0a09 6f70 7469 6f6e  AP-B0DD74AF93E0-BH-5GHz'..option
004d74e0: 4150 2d42 3044 4437 3441 4639 3345 302d 4248 2d35 4748 7a27 0a09 6f70 7469 6f6e  AP-B0DD74AF93E0-BH-5GHz'..option
005984e0: 4150 2d42 3044 4437 3441 4639 3345 302d 4248 2d35 4748 7a27 0a09 6f70 7469 6f6e  AP-B0DD74AF93E0-BH-5GHz'..option
0059ace0: 4150 2d42 3044 4437 3441 4639 3345 302d 4248 2d35 4748 7a27 0a09 6f70 7469 6f6e  AP-B0DD74AF93E0-BH-5GHz'..option
005a64e0: 4150 2d42 3044 4437 3441 4639 3345 302d 4248 2d35 4748 7a27 0a09 6f70 7469 6f6e  AP-B0DD74AF93E0-BH-5GHz'..option
005f9ce0: 4150 2d42 3044 4437 3441 4639 3345 302d 4248 2d35 4748 7a27 0a09 6f70 7469 6f6e  AP-B0DD74AF93E0-BH-5GHz'..option
005fc4e0: 4150 2d42 3044 4437 3441 4639 3345 302d 4248 2d35 4748 7a27 0a09 6f70 7469 6f6e  AP-B0DD74AF93E0-BH-5GHz'..option
00607ce0: 4150 2d42 3044 4437 3441 4639 3345 302d 4248 2d35 4748 7a27 0a09 6f70 7469 6f6e  AP-B0DD74AF93E0-BH-5GHz'..option
img-702916436_vol-env1.ubifs: ``` 00000060: 6472 3d42 3044 4437 3441 4639 3345 3000 6261 7564 7261 7465 3d31 3135 3230 3000 dr=B0DD74AF93E0.baudrate=115200. ``` img-702916436_vol-env2.ubifs: ``` 00000060: 6472 3d42 3044 4437 3441 4639 3345 3000 6261 7564 7261 7465 3d31 3135 3230 3000 dr=B0DD74AF93E0.baudrate=115200. ``` img-702916436_vol-overlay1.ubifs: ``` 00137380: 642d 4230 4444 3734 4146 3933 4530 270a 0a11 0000 42fa bef2 3118 1006 3285 1367 d-B0DD74AF93E0'.....B...1...2..g 001629c0: 3762 2d38 6530 642d 4230 4444 3734 4146 3933 4530 270a 0a11 0000 7920 275a 5a28 7b-8e0d-B0DD74AF93E0'.....y 'ZZ( 00163200: 090c 4230 4444 3734 4146 3933 4530 270a 0a11 0000 0000 0000 3118 1006 3e59 888b ..B0DD74AF93E0'.........1...>Y.. 0016ca00: a409 0c42 3044 4437 3441 4639 3345 3027 0a0a 1100 0000 0000 3118 1006 3e59 888b ...B0DD74AF93E0'........1...>Y.. 0019a2e0: 0238 6530 642d 4230 4444 3734 4146 3933 4530 270a 0a11 0000 3118 1006 379c 782a .8e0d-B0DD74AF93E0'.....1...7.x* 002afa00: 0330 a409 293c 0234 0404 2001 a509 3120 f3a4 090c 4230 4444 3734 4146 3933 4530 .0..)<.4.. ...1 ....B0DD74AF93E0 002b0220: 0264 28dc 0e29 5400 2001 7d0a 3120 f37c 0a0c 4230 4444 3734 4146 3933 4530 270a .d(..)T. .}.1 .|..B0DD74AF93E0'. ``` img-702916436_vol-overlay2.ubifs: ``` 002a5bc0: 1129 f00a 202b 9408 0001 6530 642d 4230 4444 3734 4146 3933 4530 270a 0a11 0000 .).. +....e0d-B0DD74AF93E0'..... 003d7ce0: 4150 2d42 3044 4437 3441 4639 3345 302d 4248 2d35 4748 7a27 0a09 6f70 7469 6f6e AP-B0DD74AF93E0-BH-5GHz'..option 003da4e0: 4150 2d42 3044 4437 3441 4639 3345 302d 4248 2d35 4748 7a27 0a09 6f70 7469 6f6e AP-B0DD74AF93E0-BH-5GHz'..option 003f9ce0: 4150 2d42 3044 4437 3441 4639 3345 302d 4248 2d35 4748 7a27 0a09 6f70 7469 6f6e AP-B0DD74AF93E0-BH-5GHz'..option 003fc4e0: 4150 2d42 3044 4437 3441 4639 3345 302d 4248 2d35 4748 7a27 0a09 6f70 7469 6f6e AP-B0DD74AF93E0-BH-5GHz'..option 004d74e0: 4150 2d42 3044 4437 3441 4639 3345 302d 4248 2d35 4748 7a27 0a09 6f70 7469 6f6e AP-B0DD74AF93E0-BH-5GHz'..option 005984e0: 4150 2d42 3044 4437 3441 4639 3345 302d 4248 2d35 4748 7a27 0a09 6f70 7469 6f6e AP-B0DD74AF93E0-BH-5GHz'..option 0059ace0: 4150 2d42 3044 4437 3441 4639 3345 302d 4248 2d35 4748 7a27 0a09 6f70 7469 6f6e AP-B0DD74AF93E0-BH-5GHz'..option 005a64e0: 4150 2d42 3044 4437 3441 4639 3345 302d 4248 2d35 4748 7a27 0a09 6f70 7469 6f6e AP-B0DD74AF93E0-BH-5GHz'..option 005f9ce0: 4150 2d42 3044 4437 3441 4639 3345 302d 4248 2d35 4748 7a27 0a09 6f70 7469 6f6e AP-B0DD74AF93E0-BH-5GHz'..option 005fc4e0: 4150 2d42 3044 4437 3441 4639 3345 302d 4248 2d35 4748 7a27 0a09 6f70 7469 6f6e AP-B0DD74AF93E0-BH-5GHz'..option 00607ce0: 4150 2d42 3044 4437 3441 4639 3345 302d 4248 2d35 4748 7a27 0a09 6f70 7469 6f6e AP-B0DD74AF93E0-BH-5GHz'..option ```
Owner

my last build with changes 76ea660aef

Will test on cx30, should I try to flash that uboot, or load it from uboot and then initramfs and then use sysupgrade image?

> my last build with changes 76ea660aef Will test on cx30, should I try to flash that uboot, or load it from uboot and then initramfs and then use sysupgrade image?
Author
Owner

don't replace uboot for now

don't replace uboot for now
Author
Owner

For now, use the xx230v chainload for testing, until I consider uboot stable and update the dts files between openwrt and uboot

For now, use the xx230v chainload for testing, until I consider uboot stable and update the dts files between openwrt and uboot
Owner

For now, use the xx230v chainload for testing, until I consider uboot stable and update the dts files between openwrt and uboot

Well this one panicked after getting to ubi line:

[  19.434943] ubi0: attaching mtd1
[   20.519442] ubi0: scanning is finished
[   20.533371] ubi0: attached mtd1 (name "ubi", size 255 MiB)
[   20.538921] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[   20.545803] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[   20.552603] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[   20.559584] ubi0: good PEBs: 2040, bad PEBs: 0, corrupted PEBs: 0
[   20.565681] ubi0: user volume: 11, internal volumes: 1, max. volumes count: 128
[   20.573007] ubi0: max/mean erase counter: 4/1, WL threshold: 4096, image sequence number: 702916436
[   20.582064] ubi0: available PEBs: 299, total reserved PEBs: 1741, PEBs reserved for bad PEB handling: 40
[   20.591576] ubi0: background thread "ubi_bgt0d" started, PID 149
[   80.657877] rcu: INFO: rcu_sched self-detected stall on CPU
[   80.663471] rcu: 	0-....: (5999 ticks this GP) idle=6fb4/1/0x40000004 softirq=183/183 fqs=2151
[   80.672088] rcu: 	(t=6000 jiffies g=-955 q=99 ncpus=2)
[   80.677231] CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.12.80 #0
[   80.677241] Hardware name: Generic DT based system
[   80.677245] PC is at handle_softirqs+0x90/0x268
[   80.677264] LR is at 0xed42e8
[   80.677270] pc : [<c011e3d4>]    lr : [<00ed42e8>]    psr: 40000113
[   80.677277] sp : c0013fa0  ip : 00000000  fp : c0082580
[   80.677282] r10: c1ea5d00  r9 : c1ea5d00  r8 : c1f03d40
[   80.677288] r7 : 0000000a  r6 : 00000040  r5 : 00000282  r4 : c0082580
[   80.677294] r3 : 1daaf000  r2 : 00000000  r1 : c1ea5d00  r0 : d07fa6f0
[   80.677301] Flags: nZcv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
[   80.677309] Control: 10c5383d  Table: 8020406a  DAC: 00000055
[   80.677314] Call trace: 
[   80.677322]  handle_softirqs from irq_exit+0x98/0xc4
[   80.677345]  irq_exit from call_with_stack+0x18/0x20
[   80.677364]  call_with_stack from __irq_svc+0x6c/0x7c
[   80.677375] Exception stack(0xc005bce8 to 0xc005bd30)
[   80.677385] bce0:                   c3458c00 0000000f ffff0000 c3442b30 c007c8d8 0000000a
[   80.677395] bd00: 0000000f e029034c 0000000f 00000af0 e0290348 c1fc2d10 00055c5c c005bd38
[   80.677402] bd20: c05ebbac c06c3f14 a0000013 ffffffff
[   80.677407]  __irq_svc from page_pool_destroy+0x0/0x18c
[   80.677422]  page_pool_destroy from airoha_qdma_cleanup+0x27c/0x350
[   80.677438]  airoha_qdma_cleanup from airoha_probe+0x2160/0x25c8
[   80.677452]  airoha_probe from platform_probe+0x5c/0xb4
[   80.677470]  platform_probe from really_probe+0xc8/0x2c8
[   80.677483]  really_probe from __driver_probe_device+0x88/0x1a0
[   80.677494]  __driver_probe_device from driver_probe_device+0x38/0xe4
[   80.677506]  driver_probe_device from __driver_attach+0x90/0x140
[   80.677517]  __driver_attach from bus_for_each_dev+0x60/0x94
[   80.677535]  bus_for_each_dev from bus_add_driver+0xd0/0x1fc
[   80.677551]  bus_add_driver from driver_register+0x80/0x11c
[   80.677562]  driver_register from do_one_initcall+0x48/0x27c
[   80.677575]  do_one_initcall from kernel_init_freeable+0x230/0x284
[   80.677591]  kernel_init_freeable from kernel_init+0x1c/0x12c
[   80.677607]  kernel_init from ret_from_fork+0x14/0x38
[   80.677619] Exception stack(0xc005bfb0 to 0xc005bff8)
[   80.677627] bfa0:                                     00000000 00000000 00000000 00000000
[   80.677636] bfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[   80.677644] bfe0: 00000000 00000000 00000000 00000000 00000013 00000000
[   80.896828] sched: DL replenish lagged too much
> For now, use the xx230v chainload for testing, until I consider uboot stable and update the dts files between openwrt and uboot Well this one panicked after getting to ubi line: ``` [ 19.434943] ubi0: attaching mtd1 [ 20.519442] ubi0: scanning is finished [ 20.533371] ubi0: attached mtd1 (name "ubi", size 255 MiB) [ 20.538921] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes [ 20.545803] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048 [ 20.552603] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096 [ 20.559584] ubi0: good PEBs: 2040, bad PEBs: 0, corrupted PEBs: 0 [ 20.565681] ubi0: user volume: 11, internal volumes: 1, max. volumes count: 128 [ 20.573007] ubi0: max/mean erase counter: 4/1, WL threshold: 4096, image sequence number: 702916436 [ 20.582064] ubi0: available PEBs: 299, total reserved PEBs: 1741, PEBs reserved for bad PEB handling: 40 [ 20.591576] ubi0: background thread "ubi_bgt0d" started, PID 149 [ 80.657877] rcu: INFO: rcu_sched self-detected stall on CPU [ 80.663471] rcu: 0-....: (5999 ticks this GP) idle=6fb4/1/0x40000004 softirq=183/183 fqs=2151 [ 80.672088] rcu: (t=6000 jiffies g=-955 q=99 ncpus=2) [ 80.677231] CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.12.80 #0 [ 80.677241] Hardware name: Generic DT based system [ 80.677245] PC is at handle_softirqs+0x90/0x268 [ 80.677264] LR is at 0xed42e8 [ 80.677270] pc : [<c011e3d4>] lr : [<00ed42e8>] psr: 40000113 [ 80.677277] sp : c0013fa0 ip : 00000000 fp : c0082580 [ 80.677282] r10: c1ea5d00 r9 : c1ea5d00 r8 : c1f03d40 [ 80.677288] r7 : 0000000a r6 : 00000040 r5 : 00000282 r4 : c0082580 [ 80.677294] r3 : 1daaf000 r2 : 00000000 r1 : c1ea5d00 r0 : d07fa6f0 [ 80.677301] Flags: nZcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 80.677309] Control: 10c5383d Table: 8020406a DAC: 00000055 [ 80.677314] Call trace: [ 80.677322] handle_softirqs from irq_exit+0x98/0xc4 [ 80.677345] irq_exit from call_with_stack+0x18/0x20 [ 80.677364] call_with_stack from __irq_svc+0x6c/0x7c [ 80.677375] Exception stack(0xc005bce8 to 0xc005bd30) [ 80.677385] bce0: c3458c00 0000000f ffff0000 c3442b30 c007c8d8 0000000a [ 80.677395] bd00: 0000000f e029034c 0000000f 00000af0 e0290348 c1fc2d10 00055c5c c005bd38 [ 80.677402] bd20: c05ebbac c06c3f14 a0000013 ffffffff [ 80.677407] __irq_svc from page_pool_destroy+0x0/0x18c [ 80.677422] page_pool_destroy from airoha_qdma_cleanup+0x27c/0x350 [ 80.677438] airoha_qdma_cleanup from airoha_probe+0x2160/0x25c8 [ 80.677452] airoha_probe from platform_probe+0x5c/0xb4 [ 80.677470] platform_probe from really_probe+0xc8/0x2c8 [ 80.677483] really_probe from __driver_probe_device+0x88/0x1a0 [ 80.677494] __driver_probe_device from driver_probe_device+0x38/0xe4 [ 80.677506] driver_probe_device from __driver_attach+0x90/0x140 [ 80.677517] __driver_attach from bus_for_each_dev+0x60/0x94 [ 80.677535] bus_for_each_dev from bus_add_driver+0xd0/0x1fc [ 80.677551] bus_add_driver from driver_register+0x80/0x11c [ 80.677562] driver_register from do_one_initcall+0x48/0x27c [ 80.677575] do_one_initcall from kernel_init_freeable+0x230/0x284 [ 80.677591] kernel_init_freeable from kernel_init+0x1c/0x12c [ 80.677607] kernel_init from ret_from_fork+0x14/0x38 [ 80.677619] Exception stack(0xc005bfb0 to 0xc005bff8) [ 80.677627] bfa0: 00000000 00000000 00000000 00000000 [ 80.677636] bfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 80.677644] bfe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 80.896828] sched: DL replenish lagged too much ```
Author
Owner

I'll have to revert the Ethernet driver to see why I'm getting a kernel panic on Ethernet, as this is only happening with the en7529 SoC; it's working normally with the en7562

I'll have to revert the Ethernet driver to see why I'm getting a kernel panic on Ethernet, as this is only happening with the en7529 SoC; it's working normally with the en7562
Author
Owner

Regarding the backups you're making, using chainload to back up the NAND probably won't give you the same error as with the vendor u-boot

Regarding the backups you're making, using chainload to back up the NAND probably won't give you the same error as with the vendor u-boot
Owner

Regarding the backups you're making, using chainload to back up the NAND probably won't give you the same error as with the vendor u-boot

It gives the very same error on laxy, and mtd list incorrect but that might be because it is not uboot for this.

List of MTD devices:
* spi-nand0
  - device: nand@0
  - parent: spi@1fa10000
  - driver: spi_nand
  - path: /spi@1fa10000/nand@0
  - type: NAND flash
  - block size: 0x20000 bytes
  - min I/O: 0x800 bytes
  - OOB size: 128 bytes
  - OOB available: 56 bytes
  - ECC strength: 8 bits
  - ECC step size: 512 bytes
  - bitflip threshold: 6 bits
  - 0x000000000000-0x000010000000 : "spi-nand0"
          - 0x000000000000-0x000000080000 : "uboot-atf"
          - 0x000000080000-0x000000120000 : "romfile"
          - 0x0000000a0000-0x000000240000 : "misc"
          - 0x0000001a0000-0x0000002a0000 : "chainloader"
          - 0x0000002a0000-0x000007500000 : "ubi"
          - 0x000007500000-0x000008000000 : "reserved_bmt"
U-Boot>  mtd read spi-nand0 $loadaddr 0x0 0x10000000  
Reading 268435456 byte(s) (131072 page(s)) at offset 0x00000000
WARNING at drivers/mtd/nand/spi/core.c:144/spinand_select_target()!
Failure while reading at offset 0x10000000
Read on spi-nand0 failed with error -22
> Regarding the backups you're making, using chainload to back up the NAND probably won't give you the same error as with the vendor u-boot It gives the very same error on laxy, and mtd list incorrect but that might be because it is not uboot for this. ``` List of MTD devices: * spi-nand0 - device: nand@0 - parent: spi@1fa10000 - driver: spi_nand - path: /spi@1fa10000/nand@0 - type: NAND flash - block size: 0x20000 bytes - min I/O: 0x800 bytes - OOB size: 128 bytes - OOB available: 56 bytes - ECC strength: 8 bits - ECC step size: 512 bytes - bitflip threshold: 6 bits - 0x000000000000-0x000010000000 : "spi-nand0" - 0x000000000000-0x000000080000 : "uboot-atf" - 0x000000080000-0x000000120000 : "romfile" - 0x0000000a0000-0x000000240000 : "misc" - 0x0000001a0000-0x0000002a0000 : "chainloader" - 0x0000002a0000-0x000007500000 : "ubi" - 0x000007500000-0x000008000000 : "reserved_bmt" U-Boot> mtd read spi-nand0 $loadaddr 0x0 0x10000000 Reading 268435456 byte(s) (131072 page(s)) at offset 0x00000000 WARNING at drivers/mtd/nand/spi/core.c:144/spinand_select_target()! Failure while reading at offset 0x10000000 Read on spi-nand0 failed with error -22 ```
Author
Owner

Only the mapping is wrong, but the size is correct, this won't prevent the dump from being done

Only the mapping is wrong, but the size is correct, this won't prevent the dump from being done
Author
Owner

Is your NAND have 256Mb of size?

Is your NAND have 256Mb of size?
Owner

Is your NAND have 256Mb of size?

It should have (think all have 256Mb size, and 512 RAM except c20 as that have half of RAM that is why i had to backup it half) and it only not reads the last 2MB maybe error on NAND (sadly only have one laxy box so cant test it on another)

U-Boot 2023.07.02-OpenWrt-r23630-842932a63d-00059-g88f17672a-dirty (Sep 10 2024 - 12:34:36 +0200)

CPU:   Airoha EN7529DT
DRAM:  496 MiB
Core:  7 devices, 6 uclasses, devicetree: fit
spi-nand: spi_nand spinand@0: Winbond SPI NAND was found.
spi-nand: spi_nand spinand@0: 256 MiB, block size: 128 KiB, page size: 2048, OOB size: 128
+ 0x000000000000-0x000010000000 : "spi-nand0"
  + 0x000000000000-0x000000100000 : "u-boot"
  + 0x000000100000-0x000010000000 : "ubi"
In:    serial@1fbf0000
Out:   serial@1fbf0000
Err:   serial@1fbf0000
Net:   eth0: en75xx-eth
Loading Environment from UBI... ubi0: default fastmap pool size: 100
ubi0: default fastmap WL pool size: 50
ubi0: attaching mtd2
ubi0: scanning is finished
ubi0: attached mtd2 (name "ubi", size 255 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 2022, bad PEBs: 18, corrupted PEBs: 0
ubi0: user volume: 11, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 3/1, WL threshold: 4096, image sequence number: 1985439503
ubi0: available PEBs: 14, total reserved PEBs: 2008, PEBs reserved for bad PEB handling: 22
Read 126976 bytes from volume env1 to 9eaf6280
Read 126976 bytes from volume env2 to 9eb152c0

> Is your NAND have 256Mb of size? It should have (think all have 256Mb size, and 512 RAM except c20 as that have half of RAM that is why i had to backup it half) and it only not reads the last 2MB maybe error on NAND (sadly only have one laxy box so cant test it on another) ``` U-Boot 2023.07.02-OpenWrt-r23630-842932a63d-00059-g88f17672a-dirty (Sep 10 2024 - 12:34:36 +0200) CPU: Airoha EN7529DT DRAM: 496 MiB Core: 7 devices, 6 uclasses, devicetree: fit spi-nand: spi_nand spinand@0: Winbond SPI NAND was found. spi-nand: spi_nand spinand@0: 256 MiB, block size: 128 KiB, page size: 2048, OOB size: 128 + 0x000000000000-0x000010000000 : "spi-nand0" + 0x000000000000-0x000000100000 : "u-boot" + 0x000000100000-0x000010000000 : "ubi" In: serial@1fbf0000 Out: serial@1fbf0000 Err: serial@1fbf0000 Net: eth0: en75xx-eth Loading Environment from UBI... ubi0: default fastmap pool size: 100 ubi0: default fastmap WL pool size: 50 ubi0: attaching mtd2 ubi0: scanning is finished ubi0: attached mtd2 (name "ubi", size 255 MiB) ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048 ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096 ubi0: good PEBs: 2022, bad PEBs: 18, corrupted PEBs: 0 ubi0: user volume: 11, internal volumes: 1, max. volumes count: 128 ubi0: max/mean erase counter: 3/1, WL threshold: 4096, image sequence number: 1985439503 ubi0: available PEBs: 14, total reserved PEBs: 2008, PEBs reserved for bad PEB handling: 22 Read 126976 bytes from volume env1 to 9eaf6280 Read 126976 bytes from volume env2 to 9eb152c0 ```
Owner

New release still locks up same place.

Meanwhile let a box on the internet to test the Heimgard app and it worked (after a few restart), noticed ota url changed to hmg-ota.genexis.eu but they have the very same last version for theese as Heimgard. (because hmg most likely means Heimgard anyway :))

New release still locks up same place. Meanwhile let a box on the internet to test the Heimgard app and it worked (after a few restart), noticed ota url changed to hmg-ota.genexis.eu but they have the very same last version for theese as Heimgard. (because hmg most likely means Heimgard anyway :))
Author
Owner

I need to do a rollback of the ethernet driver and it will probably NPU drive, to solve this problem

I need to do a rollback of the ethernet driver and it will probably NPU drive, to solve this problem
Owner

Build based in this commit ec2fb58a49f491218af7d01d2c091775c5fd9379

No panic this time, no ethernet and no wifi. Will try on the box i usuallly test in a few hour (this is a cx30 too but at home)

Second box same, cx20 same (no ethernet/wifi but boots), hx40 boots (no ethernet/wifi), hx30 crash at npu.

## Loading kernel (any) from FIT Image at 94000000 ...
   Using 'config-1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM OpenWrt Linux-6.12.80
     Type:         Kernel Image
     Compression:  lzma compressed
     Data Start:   0x940000e4
     Data Size:    24336162 Bytes = 23.2 MiB
     Architecture: ARM
     OS:           Linux
     Load Address: 0x80208000
     Entry Point:  0x80208000
     Hash algo:    crc32
     Hash value:   750be65e
     Hash algo:    sha1
     Hash value:   397f6d039d6abdaa6e2d7eb010836672a75b6177
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt (any) from FIT Image at 94000000 ...
   Using 'config-1' configuration
   Trying 'fdt-1' fdt subimage
     Description:  ARM OpenWrt genexis_cx30 device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x95735940
     Data Size:    13615 Bytes = 13.3 KiB
     Architecture: ARM
     Hash algo:    crc32
     Hash value:   28f9d2f1
     Hash algo:    sha1
     Hash value:   cac04d4d23b28cc7b1e6d67d9601d7dbea44db6e
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x95735940
Working FDT set to 95735940
   Uncompressing Kernel Image to 80208000
   Loading Device Tree to 9eb1e000, end 9eb2452e ... OK
Working FDT set to 9eb1e000

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 6.12.80 (sirherobrine23@matheus-note) (arm-openwrt-linux-muslgnueabi-gcc (OpenWrt GCC 14.3.0 r33479-5f7ec5c8b9) 14.3.0, GNU ld (GNU Binutils) 2.44) #0 SMP Tue Apr 28 23:05:10 2026
[    0.000000] CPU: ARMv7 Processor [410fd034] revision 4 (ARMv7), cr=10c5383d
[    0.000000] CPU: div instructions available: patching division code
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] OF: fdt: Machine model: Heimgard/Genexis CX30
[    0.000000] OF: fdt: Ignoring memory range 0x80000000 - 0x80200000
[    0.000000] earlycon: ns16550 at MMIO32 0x1fbf0000 (options '115200n8')
[    0.000000] printk: legacy bootconsole [ns16550] enabled
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000080200000-0x000000009fffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000080200000-0x0000000083ffffff]
[    0.000000]   node   0: [mem 0x0000000084000000-0x00000000844fffff]
[    0.000000]   node   0: [mem 0x0000000084500000-0x00000000848fffff]
[    0.000000]   node   0: [mem 0x0000000084900000-0x00000000862fffff]
[    0.000000]   node   0: [mem 0x0000000086300000-0x000000009fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000080200000-0x000000009fffffff]
[    0.000000] On node 0, zone Normal: 512 pages in unavailable ranges
[    0.000000] OF: reserved mem: 0x80000000..0x8003ffff (256 KiB) nomap non-reusable atf@80000000
[    0.000000] OF: reserved mem: 0x84000000..0x840fffff (1024 KiB) nomap non-reusable npu_binary@84000000
[    0.000000] OF: reserved mem: 0x84100000..0x844fffff (4096 KiB) nomap non-reusable qdma0-buf@84100000
[    0.000000] OF: reserved mem: 0x84900000..0x84cfffff (4096 KiB) nomap non-reusable qdma1-buf@84900000
[    0.000000] OF: reserved mem: 0x84d00000..0x862fffff (22528 KiB) nomap non-reusable npu-pkt@84d00000
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv1.1 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.
[    0.000000] psci: SMC Calling Convention v1.2
[    0.000000] percpu: Embedded 14 pages/cpu s25228 r8192 d23924 u57344
[    0.000000] Kernel command line: console=ttyS0,115200 earlycon
[    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes, linear)
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 130560
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000] 	Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2.
[    0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[    0.000000] GICv3: 256 SPIs implemented
[    0.000000] GICv3: 0 Extended SPIs implemented
[    0.000000] GICv3: GICv3 features: 16 PPIs
[    0.000000] GICv3: GICD_CTRL.DS=0, SCR_EL3.FIQ=0
[    0.000000] GICv3: CPU0: found redistributor 0 region 0:0x09080000
[    0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[    0.000000] arch_timer: cp15 timer(s) running at 25.00MHz (virt).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns
[    0.000001] sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns
[    0.008800] Switching to timer-based delay loop, resolution 40ns
[    0.015553] Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=250000)
[    0.026940] CPU: Testing write buffer coherency: ok
[    0.032332] pid_max: default: 32768 minimum: 301
[    0.044104] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.052156] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.063707] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
[    0.070965] Setting up static identity map for 0x80300000 - 0x80300060
[    0.078332] rcu: Hierarchical SRCU implementation.
[    0.083599] rcu: 	Max phase no-delay instances is 1000.
[    0.089620] Timer migration: 1 hierarchy levels; 8 children per group; 1 crossnode level
[    0.098814] smp: Bringing up secondary CPUs ...
[    0.118886] GICv3: CPU1: found redistributor 1 region 0:0x090a0000
[    0.118944] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
[    0.119091] smp: Brought up 1 node, 2 CPUs
[    0.136602] SMP: Total of 2 processors activated (100.00 BogoMIPS).
[    0.143502] CPU: All CPU(s) started in SVC mode.
[    0.149054] Memory: 452596K/522240K available (7751K kernel code, 622K rwdata, 2020K rodata, 20480K init, 217K bss, 68512K reserved, 0K cma-reserved)
[    0.168001] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.178873] futex hash table entries: 512 (order: 3, 32768 bytes, linear)
[    0.189781] pinctrl core: initialized pinctrl subsystem
[    0.197570] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.204359] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.212692] thermal_sys: Registered thermal governor 'step_wise'
[    0.212775] cpuidle: using governor menu
[    0.226237] /pcie@1fa91000: Fixed dependency cycle(s) with /pcie@1fa91000/interrupt-controller
[    0.236133] /pcie@1fa92000: Fixed dependency cycle(s) with /pcie@1fa92000/interrupt-controller
[    0.254318] SCSI subsystem initialized
[    0.258679] usbcore: registered new interface driver usbfs
[    0.264765] usbcore: registered new interface driver hub
[    0.270730] usbcore: registered new device driver usb
[    0.277659] clocksource: Switched to clocksource arch_sys_counter
[    0.290476] NET: Registered PF_INET protocol family
[    0.295986] IP idents hash table entries: 8192 (order: 4, 65536 bytes, linear)
[    0.304868] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.314121] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.322656] TCP established hash table entries: 4096 (order: 2, 16384 bytes, linear)
[    0.331215] TCP bind hash table entries: 4096 (order: 4, 65536 bytes, linear)
[    0.339179] TCP: Hash tables configured (established 4096 bind 4096)
[    0.346562] MPTCP token hash table entries: 512 (order: 1, 8192 bytes, linear)
[    0.354773] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.361990] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.370092] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.376344] PCI: CLS 0 bytes, default 64
[    0.382172] workingset: timestamp_bits=14 max_order=17 bucket_order=3
[    0.390936] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.397360] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.735082] mtk-pcie 1fa91000.pcie: host bridge /pcie@1fa91000 ranges:
[    0.742400] mtk-pcie 1fa91000.pcie:      MEM 0x0020000000..0x0021ffffff -> 0x0020000000
[    1.276219] mtk-pcie 1fa91000.pcie: PCI host bridge to bus 0000:00
[    1.283088] pci_bus 0000:00: root bus resource [bus 00-ff]
[    1.289160] pci_bus 0000:00: root bus resource [mem 0x20000000-0x21ffffff]
[    1.296935] pci 0000:00:00.0: [14c3:0810] type 01 class 0x060400 PCIe Root Port
[    1.305184] pci 0000:00:00.0: BAR 0: can't handle BAR larger than 4GB (size 0x200000000)
[    1.314141] pci 0000:00:00.0: BAR 0 [mem size 0x00000001 64bit pref disabled]
[    1.322080] pci 0000:00:00.0: PCI bridge to [bus 00]
[    1.327608] pci 0000:00:00.0:   bridge window [mem 0x00000000-0x000fffff]
[    1.337193] PCI: bus0: Fast back to back transfers disabled
[    1.343380] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    1.352827] pci 0000:01:00.0: [14c3:790a] type 00 class 0x028000 PCIe Endpoint
[    1.360971] pci 0000:01:00.0: BAR 0 [mem 0x00000000-0x000fffff 64bit pref]
[    1.368662] pci 0000:01:00.0: BAR 2 [mem 0x00000000-0x00007fff 64bit]
[    1.375844] pci 0000:01:00.0: BAR 4 [mem 0x00000000-0x00000fff 64bit pref]
[    1.384160] pci 0000:01:00.0: PME# supported from D0 D3hot D3cold
[    1.391220] pci 0000:01:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s PCIe x1 link at 0000:00:00.0 (capable of 4.000 Gb/s with 5.0 GT/s PCIe x1 link)
[    1.408239] PCI: bus1: Fast back to back transfers disabled
[    1.414377] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01
[    1.421736] pci 0000:00:00.0: bridge window [mem 0x20000000-0x201fffff]: assigned
[    1.430026] pci 0000:00:00.0: BAR 0 [mem 0x20200000 64bit pref disabled]: assigned
[    1.438414] pci 0000:00:00.0: BAR 0: error updating (0x2020000c != 0x0000000c)
[    1.446396] pci 0000:01:00.0: BAR 0 [mem 0x20000000-0x200fffff 64bit pref]: assigned
[    1.455035] pci 0000:01:00.0: BAR 2 [mem 0x20100000-0x20107fff 64bit]: assigned
[    1.463220] pci 0000:01:00.0: BAR 4 [mem 0x20108000-0x20108fff 64bit pref]: assigned
[    1.471834] pci 0000:00:00.0: PCI bridge to [bus 01]
[    1.477322] pci 0000:00:00.0:   bridge window [mem 0x20000000-0x201fffff]
[    1.484867] pci_bus 0000:00: resource 4 [mem 0x20000000-0x21ffffff]
[    1.491773] pci_bus 0000:01: resource 1 [mem 0x20000000-0x201fffff]
[    1.499347] pcieport 0000:00:00.0: enabling device (0140 -> 0142)
[    1.506790] pcieport 0000:00:00.0: PME: Signaling with IRQ 30
[    1.514688] mtk-pcie 1fa92000.pcie: host bridge /pcie@1fa92000 ranges:
[    1.521936] mtk-pcie 1fa92000.pcie:      MEM 0x0022000000..0x0023ffffff -> 0x0022000000
[    1.678695] mtk-pcie 1fa92000.pcie: PCI host bridge to bus 0001:00
[    1.685511] pci_bus 0001:00: root bus resource [bus 00-ff]
[    1.691611] pci_bus 0001:00: root bus resource [mem 0x22000000-0x23ffffff]
[    1.699542] pci 0001:00:01.0: [14c3:0811] type 01 class 0x060400 PCIe Root Port
[    1.707797] pci 0001:00:01.0: BAR 0: can't handle BAR larger than 4GB (size 0x200000000)
[    1.716689] pci 0001:00:01.0: BAR 0 [mem size 0x00000001 64bit pref disabled]
[    1.724637] pci 0001:00:01.0: PCI bridge to [bus 00]
[    1.730193] pci 0001:00:01.0:   bridge window [mem 0x00000000-0x000fffff]
[    1.739820] PCI: bus0: Fast back to back transfers disabled
[    1.745969] pci 0001:00:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    1.755483] pci 0001:01:00.0: [14c3:7906] type 00 class 0x028000 PCIe Endpoint
[    1.763641] pci 0001:01:00.0: BAR 0 [mem 0x00000000-0x000fffff 64bit pref]
[    1.771319] pci 0001:01:00.0: BAR 2 [mem 0x00000000-0x00007fff 64bit]
[    1.778513] pci 0001:01:00.0: BAR 4 [mem 0x00000000-0x00000fff 64bit pref]
[    1.786810] pci 0001:01:00.0: PME# supported from D0 D3hot D3cold
[    1.793937] pci 0001:01:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s PCIe x1 link at 0001:00:01.0 (capable of 8.000 Gb/s with 5.0 GT/s PCIe x2 link)
[    1.811014] PCI: bus1: Fast back to back transfers disabled
[    1.817146] pci_bus 0001:01: busn_res: [bus 01-ff] end is updated to 01
[    1.824503] pci 0001:00:01.0: bridge window [mem 0x22000000-0x221fffff]: assigned
[    1.832750] pci 0001:00:01.0: BAR 0 [mem 0x22200000 64bit pref disabled]: assigned
[    1.841140] pci 0001:00:01.0: BAR 0: error updating (0x2220000c != 0x0000000c)
[    1.849138] pci 0001:01:00.0: BAR 0 [mem 0x22000000-0x220fffff 64bit pref]: assigned
[    1.857748] pci 0001:01:00.0: BAR 2 [mem 0x22100000-0x22107fff 64bit]: assigned
[    1.865858] pci 0001:01:00.0: BAR 4 [mem 0x22108000-0x22108fff 64bit pref]: assigned
[    1.874470] pci 0001:00:01.0: PCI bridge to [bus 01]
[    1.879978] pci 0001:00:01.0:   bridge window [mem 0x22000000-0x221fffff]
[    1.887505] pci_bus 0001:00: resource 4 [mem 0x22000000-0x23ffffff]
[    1.894408] pci_bus 0001:01: resource 1 [mem 0x22000000-0x221fffff]
[    1.902004] pcieport 0001:00:01.0: enabling device (0140 -> 0142)
[    1.909576] pcieport 0001:00:01.0: PME: Signaling with IRQ 32
[    1.917774] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    1.925702] printk: legacy console [ttyS0] disabled
[    1.931529] 1fbf0000.serial: ttyS0 at MMIO 0x1fbf0000 (irq = 33, base_baud = 115200) is a 16550
[    1.941197] printk: legacy console [ttyS0] enabled
[    1.941197] printk: legacy console [ttyS0] enabled
[    1.951295] printk: legacy bootconsole [ns16550] disabled
[    1.951295] printk: legacy bootconsole [ns16550] disabled
[    1.967539] spi-nand spi0.0: Winbond SPI NAND was found.
[    1.972928] spi-nand spi0.0: 256 MiB, block size: 128 KiB, page size: 2048, OOB size: 128
[    1.988024] random: crng init done
[   18.821041] 2 fixed-partitions partitions found on MTD device spi0.0
[   18.827703] Creating 2 MTD partitions on "spi0.0":
[   18.832520] 0x000000000000-0x000000100000 : "u-boot"
[   18.841365] 0x000000100000-0x000010000000 : "ubi"
[   19.403391] ubi0: attaching mtd1
[   20.488220] ubi0: scanning is finished
[   20.502119] ubi0: attached mtd1 (name "ubi", size 255 MiB)
[   20.507680] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[   20.514570] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[   20.521379] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[   20.528356] ubi0: good PEBs: 2040, bad PEBs: 0, corrupted PEBs: 0
[   20.534449] ubi0: user volume: 11, internal volumes: 1, max. volumes count: 128
[   20.541770] ubi0: max/mean erase counter: 4/2, WL threshold: 4096, image sequence number: 572855880
[   20.550829] ubi0: available PEBs: 279, total reserved PEBs: 1761, PEBs reserved for bad PEB handling: 40
[   20.560337] ubi0: background thread "ubi_bgt0d" started, PID 149
[   20.649341] airoha-npu 1e900000.npu: L2C sram: 0x00, FPGA Stage: 0
[C0]core freq at 333000000 Hz

[C0]timer_init: Timer clk is running at 125 Mhz

[C0]npu_gre_tunnel_tx_header_init L15 gre_tx_head_addr[0]=0x8400351c

[C0]npu_gre_tunnel_tx_header_init L15 gre_tx_head_addr[1]=0x84003544

[C0][NPU] ba_node_init...

[C0]baNode_array_init

[C0]counter_init:2

[C0][NPU] queue_mutex_init...

[C1]core1_main

[C2]timer_isr  Store Value 1e903000, val[C2]core2_main

[C2]do npu_enq_deq_init

[C3]core3_main

[C3]core3_main for npu tunnel offload v21

[C3]npu bridge buf init sucess

[   21.607643] airoha-npu 1e900000.npu: wlan get msg: id 10, core 0, body size 4
[   21.614808] airoha-npu 1e900000.npu: NPU not support get version
[   21.634611] mtk-eip93 1fb70000.crypto: EIP93:3:0:1,PE(0xfe007:0x41710041)
[   21.641926] NET: Registered PF_INET6 protocol family
[   21.648204] Segment Routing with IPv6
[   21.651923] In-situ OAM (IOAM) with IPv6
[   21.655925] NET: Registered PF_PACKET protocol family
[   21.661248] 8021q: 802.1Q VLAN Support v1.8
[   21.665523] Registering SWP/SWPB emulation handler
[   21.869312] clk: Disabling unused clocks
[   21.873262] PM: genpd: Disabling unused power domains
[   21.899310] Freeing unused kernel image (initmem) memory: 20480K
[   21.906921] Run /init as init process
[   22.578552] init: Console is alive
[   22.582182] init: - watchdog -
[   22.599362] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[   22.615683] gpio_button_hotplug: loading out-of-tree module taints kernel.
[   22.651476] usbcore: registered new interface driver usb-storage
[   22.658021] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[   22.675694] init: - preinit -
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[   23.887933] procd: - early -
[   23.890964] procd: - watchdog -
[   24.424909] procd: - watchdog -
[   24.428699] procd: - ubus -
[   24.484755] procd: - init -
Please press Enter to activate this console.
[   24.868334] kmodloader: loading kernel modules from /etc/modules.d/*
[   25.202303] i2c_dev: i2c /dev entries driver
[   25.219167] GACT probability on
[   25.228794] Mirror/redirect action on
[   25.245642] u32 classifier
[   25.248400]     input device check on
[   25.252062]     Actions configured
[   25.349525] ntfs3: Enabled Linux POSIX ACLs support
[   25.369247] Loading modules backported from Linux version v6.18.7-0-g5dfbc5357
[   25.376490] Backport generated by backports.git c8a37ce
[   25.492965] usbcore: registered new interface driver ums-alauda
[   25.510960] usbcore: registered new interface driver ums-cypress
[   25.531357] usbcore: registered new interface driver ums-datafab
[   25.539471] usbcore: registered new interface driver ums-freecom
[   25.546885] usbcore: registered new interface driver ums-isd200
[   25.562163] usbcore: registered new interface driver ums-jumpshot
[   25.591103] usbcore: registered new interface driver ums-karma
[   25.598889] usbcore: registered new interface driver ums-sddr09
[   25.609553] usbcore: registered new interface driver ums-sddr55
[   25.617459] usbcore: registered new interface driver ums-usbat
[   25.661479] urngd: v1.0.2 started.
[   25.716630] xt_time: kernel timezone is -0000
[   25.831165] mt7915e_hif 0000:01:00.0: enabling device (0140 -> 0142)
[   25.838431] mt7915e 0001:01:00.0: enabling device (0140 -> 0142)
[   26.027959] mt7915e 0001:01:00.0: HW/SW Version: 0x8a108a10, Build Time: 20240823172725a
[   26.051153] mt7915e 0001:01:00.0: WM Firmware Version: ____000000, Build Time: 20240823172741
[   26.150356] mt7915e 0001:01:00.0: WA Firmware Version: DEV_000000, Build Time: 20240823172837
[   26.362217] mt7915e 0001:01:00.0: eeprom load fail, use default bin
[   26.368644] mt7915e 0001:01:00.0: Direct firmware load for mediatek/mt7916_eeprom.bin failed with error -2
[   26.378427] mt7915e 0001:01:00.0: Falling back to sysfs fallback for: mediatek/mt7916_eeprom.bin
[   26.409638] mt7915e 0001:01:00.0: probe with driver mt7915e failed with error -12
[   26.442404] PPP generic driver version 2.4.2
[   26.448305] NET: Registered PF_PPPOX protocol family
[   26.456837] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information.
[   26.464737] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
[   26.494341] kmodloader: done loading kernel modules from /etc/modules.d/*
[   39.868709] platform 1fb58000.switch: deferred probe pending: (reason unknown)
[   39.875955] platform 1fb50000.ethernet: deferred probe pending: (reason unknown)

> Build based in this commit ec2fb58a49f491218af7d01d2c091775c5fd9379 No panic this time, no ethernet and no wifi. Will try on the box i usuallly test in a few hour (this is a cx30 too but at home) Second box same, cx20 same (no ethernet/wifi but boots), hx40 boots (no ethernet/wifi), hx30 crash at npu. ``` ## Loading kernel (any) from FIT Image at 94000000 ... Using 'config-1' configuration Trying 'kernel-1' kernel subimage Description: ARM OpenWrt Linux-6.12.80 Type: Kernel Image Compression: lzma compressed Data Start: 0x940000e4 Data Size: 24336162 Bytes = 23.2 MiB Architecture: ARM OS: Linux Load Address: 0x80208000 Entry Point: 0x80208000 Hash algo: crc32 Hash value: 750be65e Hash algo: sha1 Hash value: 397f6d039d6abdaa6e2d7eb010836672a75b6177 Verifying Hash Integrity ... crc32+ sha1+ OK ## Loading fdt (any) from FIT Image at 94000000 ... Using 'config-1' configuration Trying 'fdt-1' fdt subimage Description: ARM OpenWrt genexis_cx30 device tree blob Type: Flat Device Tree Compression: uncompressed Data Start: 0x95735940 Data Size: 13615 Bytes = 13.3 KiB Architecture: ARM Hash algo: crc32 Hash value: 28f9d2f1 Hash algo: sha1 Hash value: cac04d4d23b28cc7b1e6d67d9601d7dbea44db6e Verifying Hash Integrity ... crc32+ sha1+ OK Booting using the fdt blob at 0x95735940 Working FDT set to 95735940 Uncompressing Kernel Image to 80208000 Loading Device Tree to 9eb1e000, end 9eb2452e ... OK Working FDT set to 9eb1e000 Starting kernel ... [ 0.000000] Booting Linux on physical CPU 0x0 [ 0.000000] Linux version 6.12.80 (sirherobrine23@matheus-note) (arm-openwrt-linux-muslgnueabi-gcc (OpenWrt GCC 14.3.0 r33479-5f7ec5c8b9) 14.3.0, GNU ld (GNU Binutils) 2.44) #0 SMP Tue Apr 28 23:05:10 2026 [ 0.000000] CPU: ARMv7 Processor [410fd034] revision 4 (ARMv7), cr=10c5383d [ 0.000000] CPU: div instructions available: patching division code [ 0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache [ 0.000000] OF: fdt: Machine model: Heimgard/Genexis CX30 [ 0.000000] OF: fdt: Ignoring memory range 0x80000000 - 0x80200000 [ 0.000000] earlycon: ns16550 at MMIO32 0x1fbf0000 (options '115200n8') [ 0.000000] printk: legacy bootconsole [ns16550] enabled [ 0.000000] Memory policy: Data cache writealloc [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x0000000080200000-0x000000009fffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000080200000-0x0000000083ffffff] [ 0.000000] node 0: [mem 0x0000000084000000-0x00000000844fffff] [ 0.000000] node 0: [mem 0x0000000084500000-0x00000000848fffff] [ 0.000000] node 0: [mem 0x0000000084900000-0x00000000862fffff] [ 0.000000] node 0: [mem 0x0000000086300000-0x000000009fffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000080200000-0x000000009fffffff] [ 0.000000] On node 0, zone Normal: 512 pages in unavailable ranges [ 0.000000] OF: reserved mem: 0x80000000..0x8003ffff (256 KiB) nomap non-reusable atf@80000000 [ 0.000000] OF: reserved mem: 0x84000000..0x840fffff (1024 KiB) nomap non-reusable npu_binary@84000000 [ 0.000000] OF: reserved mem: 0x84100000..0x844fffff (4096 KiB) nomap non-reusable qdma0-buf@84100000 [ 0.000000] OF: reserved mem: 0x84900000..0x84cfffff (4096 KiB) nomap non-reusable qdma1-buf@84900000 [ 0.000000] OF: reserved mem: 0x84d00000..0x862fffff (22528 KiB) nomap non-reusable npu-pkt@84d00000 [ 0.000000] psci: probing for conduit method from DT. [ 0.000000] psci: PSCIv1.1 detected in firmware. [ 0.000000] psci: Using standard PSCI v0.2 function IDs [ 0.000000] psci: MIGRATE_INFO_TYPE not supported. [ 0.000000] psci: SMC Calling Convention v1.2 [ 0.000000] percpu: Embedded 14 pages/cpu s25228 r8192 d23924 u57344 [ 0.000000] Kernel command line: console=ttyS0,115200 earlycon [ 0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes, linear) [ 0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes, linear) [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 130560 [ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 [ 0.000000] rcu: Hierarchical RCU implementation. [ 0.000000] Tracing variant of Tasks RCU enabled. [ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 0.000000] RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. [ 0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16 [ 0.000000] GICv3: 256 SPIs implemented [ 0.000000] GICv3: 0 Extended SPIs implemented [ 0.000000] GICv3: GICv3 features: 16 PPIs [ 0.000000] GICv3: GICD_CTRL.DS=0, SCR_EL3.FIQ=0 [ 0.000000] GICv3: CPU0: found redistributor 0 region 0:0x09080000 [ 0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention. [ 0.000000] arch_timer: cp15 timer(s) running at 25.00MHz (virt). [ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns [ 0.000001] sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns [ 0.008800] Switching to timer-based delay loop, resolution 40ns [ 0.015553] Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=250000) [ 0.026940] CPU: Testing write buffer coherency: ok [ 0.032332] pid_max: default: 32768 minimum: 301 [ 0.044104] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.052156] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.063707] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000 [ 0.070965] Setting up static identity map for 0x80300000 - 0x80300060 [ 0.078332] rcu: Hierarchical SRCU implementation. [ 0.083599] rcu: Max phase no-delay instances is 1000. [ 0.089620] Timer migration: 1 hierarchy levels; 8 children per group; 1 crossnode level [ 0.098814] smp: Bringing up secondary CPUs ... [ 0.118886] GICv3: CPU1: found redistributor 1 region 0:0x090a0000 [ 0.118944] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001 [ 0.119091] smp: Brought up 1 node, 2 CPUs [ 0.136602] SMP: Total of 2 processors activated (100.00 BogoMIPS). [ 0.143502] CPU: All CPU(s) started in SVC mode. [ 0.149054] Memory: 452596K/522240K available (7751K kernel code, 622K rwdata, 2020K rodata, 20480K init, 217K bss, 68512K reserved, 0K cma-reserved) [ 0.168001] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.178873] futex hash table entries: 512 (order: 3, 32768 bytes, linear) [ 0.189781] pinctrl core: initialized pinctrl subsystem [ 0.197570] NET: Registered PF_NETLINK/PF_ROUTE protocol family [ 0.204359] DMA: preallocated 256 KiB pool for atomic coherent allocations [ 0.212692] thermal_sys: Registered thermal governor 'step_wise' [ 0.212775] cpuidle: using governor menu [ 0.226237] /pcie@1fa91000: Fixed dependency cycle(s) with /pcie@1fa91000/interrupt-controller [ 0.236133] /pcie@1fa92000: Fixed dependency cycle(s) with /pcie@1fa92000/interrupt-controller [ 0.254318] SCSI subsystem initialized [ 0.258679] usbcore: registered new interface driver usbfs [ 0.264765] usbcore: registered new interface driver hub [ 0.270730] usbcore: registered new device driver usb [ 0.277659] clocksource: Switched to clocksource arch_sys_counter [ 0.290476] NET: Registered PF_INET protocol family [ 0.295986] IP idents hash table entries: 8192 (order: 4, 65536 bytes, linear) [ 0.304868] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear) [ 0.314121] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) [ 0.322656] TCP established hash table entries: 4096 (order: 2, 16384 bytes, linear) [ 0.331215] TCP bind hash table entries: 4096 (order: 4, 65536 bytes, linear) [ 0.339179] TCP: Hash tables configured (established 4096 bind 4096) [ 0.346562] MPTCP token hash table entries: 512 (order: 1, 8192 bytes, linear) [ 0.354773] UDP hash table entries: 256 (order: 1, 8192 bytes, linear) [ 0.361990] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear) [ 0.370092] NET: Registered PF_UNIX/PF_LOCAL protocol family [ 0.376344] PCI: CLS 0 bytes, default 64 [ 0.382172] workingset: timestamp_bits=14 max_order=17 bucket_order=3 [ 0.390936] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.397360] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.735082] mtk-pcie 1fa91000.pcie: host bridge /pcie@1fa91000 ranges: [ 0.742400] mtk-pcie 1fa91000.pcie: MEM 0x0020000000..0x0021ffffff -> 0x0020000000 [ 1.276219] mtk-pcie 1fa91000.pcie: PCI host bridge to bus 0000:00 [ 1.283088] pci_bus 0000:00: root bus resource [bus 00-ff] [ 1.289160] pci_bus 0000:00: root bus resource [mem 0x20000000-0x21ffffff] [ 1.296935] pci 0000:00:00.0: [14c3:0810] type 01 class 0x060400 PCIe Root Port [ 1.305184] pci 0000:00:00.0: BAR 0: can't handle BAR larger than 4GB (size 0x200000000) [ 1.314141] pci 0000:00:00.0: BAR 0 [mem size 0x00000001 64bit pref disabled] [ 1.322080] pci 0000:00:00.0: PCI bridge to [bus 00] [ 1.327608] pci 0000:00:00.0: bridge window [mem 0x00000000-0x000fffff] [ 1.337193] PCI: bus0: Fast back to back transfers disabled [ 1.343380] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring [ 1.352827] pci 0000:01:00.0: [14c3:790a] type 00 class 0x028000 PCIe Endpoint [ 1.360971] pci 0000:01:00.0: BAR 0 [mem 0x00000000-0x000fffff 64bit pref] [ 1.368662] pci 0000:01:00.0: BAR 2 [mem 0x00000000-0x00007fff 64bit] [ 1.375844] pci 0000:01:00.0: BAR 4 [mem 0x00000000-0x00000fff 64bit pref] [ 1.384160] pci 0000:01:00.0: PME# supported from D0 D3hot D3cold [ 1.391220] pci 0000:01:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s PCIe x1 link at 0000:00:00.0 (capable of 4.000 Gb/s with 5.0 GT/s PCIe x1 link) [ 1.408239] PCI: bus1: Fast back to back transfers disabled [ 1.414377] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01 [ 1.421736] pci 0000:00:00.0: bridge window [mem 0x20000000-0x201fffff]: assigned [ 1.430026] pci 0000:00:00.0: BAR 0 [mem 0x20200000 64bit pref disabled]: assigned [ 1.438414] pci 0000:00:00.0: BAR 0: error updating (0x2020000c != 0x0000000c) [ 1.446396] pci 0000:01:00.0: BAR 0 [mem 0x20000000-0x200fffff 64bit pref]: assigned [ 1.455035] pci 0000:01:00.0: BAR 2 [mem 0x20100000-0x20107fff 64bit]: assigned [ 1.463220] pci 0000:01:00.0: BAR 4 [mem 0x20108000-0x20108fff 64bit pref]: assigned [ 1.471834] pci 0000:00:00.0: PCI bridge to [bus 01] [ 1.477322] pci 0000:00:00.0: bridge window [mem 0x20000000-0x201fffff] [ 1.484867] pci_bus 0000:00: resource 4 [mem 0x20000000-0x21ffffff] [ 1.491773] pci_bus 0000:01: resource 1 [mem 0x20000000-0x201fffff] [ 1.499347] pcieport 0000:00:00.0: enabling device (0140 -> 0142) [ 1.506790] pcieport 0000:00:00.0: PME: Signaling with IRQ 30 [ 1.514688] mtk-pcie 1fa92000.pcie: host bridge /pcie@1fa92000 ranges: [ 1.521936] mtk-pcie 1fa92000.pcie: MEM 0x0022000000..0x0023ffffff -> 0x0022000000 [ 1.678695] mtk-pcie 1fa92000.pcie: PCI host bridge to bus 0001:00 [ 1.685511] pci_bus 0001:00: root bus resource [bus 00-ff] [ 1.691611] pci_bus 0001:00: root bus resource [mem 0x22000000-0x23ffffff] [ 1.699542] pci 0001:00:01.0: [14c3:0811] type 01 class 0x060400 PCIe Root Port [ 1.707797] pci 0001:00:01.0: BAR 0: can't handle BAR larger than 4GB (size 0x200000000) [ 1.716689] pci 0001:00:01.0: BAR 0 [mem size 0x00000001 64bit pref disabled] [ 1.724637] pci 0001:00:01.0: PCI bridge to [bus 00] [ 1.730193] pci 0001:00:01.0: bridge window [mem 0x00000000-0x000fffff] [ 1.739820] PCI: bus0: Fast back to back transfers disabled [ 1.745969] pci 0001:00:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring [ 1.755483] pci 0001:01:00.0: [14c3:7906] type 00 class 0x028000 PCIe Endpoint [ 1.763641] pci 0001:01:00.0: BAR 0 [mem 0x00000000-0x000fffff 64bit pref] [ 1.771319] pci 0001:01:00.0: BAR 2 [mem 0x00000000-0x00007fff 64bit] [ 1.778513] pci 0001:01:00.0: BAR 4 [mem 0x00000000-0x00000fff 64bit pref] [ 1.786810] pci 0001:01:00.0: PME# supported from D0 D3hot D3cold [ 1.793937] pci 0001:01:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s PCIe x1 link at 0001:00:01.0 (capable of 8.000 Gb/s with 5.0 GT/s PCIe x2 link) [ 1.811014] PCI: bus1: Fast back to back transfers disabled [ 1.817146] pci_bus 0001:01: busn_res: [bus 01-ff] end is updated to 01 [ 1.824503] pci 0001:00:01.0: bridge window [mem 0x22000000-0x221fffff]: assigned [ 1.832750] pci 0001:00:01.0: BAR 0 [mem 0x22200000 64bit pref disabled]: assigned [ 1.841140] pci 0001:00:01.0: BAR 0: error updating (0x2220000c != 0x0000000c) [ 1.849138] pci 0001:01:00.0: BAR 0 [mem 0x22000000-0x220fffff 64bit pref]: assigned [ 1.857748] pci 0001:01:00.0: BAR 2 [mem 0x22100000-0x22107fff 64bit]: assigned [ 1.865858] pci 0001:01:00.0: BAR 4 [mem 0x22108000-0x22108fff 64bit pref]: assigned [ 1.874470] pci 0001:00:01.0: PCI bridge to [bus 01] [ 1.879978] pci 0001:00:01.0: bridge window [mem 0x22000000-0x221fffff] [ 1.887505] pci_bus 0001:00: resource 4 [mem 0x22000000-0x23ffffff] [ 1.894408] pci_bus 0001:01: resource 1 [mem 0x22000000-0x221fffff] [ 1.902004] pcieport 0001:00:01.0: enabling device (0140 -> 0142) [ 1.909576] pcieport 0001:00:01.0: PME: Signaling with IRQ 32 [ 1.917774] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled [ 1.925702] printk: legacy console [ttyS0] disabled [ 1.931529] 1fbf0000.serial: ttyS0 at MMIO 0x1fbf0000 (irq = 33, base_baud = 115200) is a 16550 [ 1.941197] printk: legacy console [ttyS0] enabled [ 1.941197] printk: legacy console [ttyS0] enabled [ 1.951295] printk: legacy bootconsole [ns16550] disabled [ 1.951295] printk: legacy bootconsole [ns16550] disabled [ 1.967539] spi-nand spi0.0: Winbond SPI NAND was found. [ 1.972928] spi-nand spi0.0: 256 MiB, block size: 128 KiB, page size: 2048, OOB size: 128 [ 1.988024] random: crng init done [ 18.821041] 2 fixed-partitions partitions found on MTD device spi0.0 [ 18.827703] Creating 2 MTD partitions on "spi0.0": [ 18.832520] 0x000000000000-0x000000100000 : "u-boot" [ 18.841365] 0x000000100000-0x000010000000 : "ubi" [ 19.403391] ubi0: attaching mtd1 [ 20.488220] ubi0: scanning is finished [ 20.502119] ubi0: attached mtd1 (name "ubi", size 255 MiB) [ 20.507680] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes [ 20.514570] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048 [ 20.521379] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096 [ 20.528356] ubi0: good PEBs: 2040, bad PEBs: 0, corrupted PEBs: 0 [ 20.534449] ubi0: user volume: 11, internal volumes: 1, max. volumes count: 128 [ 20.541770] ubi0: max/mean erase counter: 4/2, WL threshold: 4096, image sequence number: 572855880 [ 20.550829] ubi0: available PEBs: 279, total reserved PEBs: 1761, PEBs reserved for bad PEB handling: 40 [ 20.560337] ubi0: background thread "ubi_bgt0d" started, PID 149 [ 20.649341] airoha-npu 1e900000.npu: L2C sram: 0x00, FPGA Stage: 0 [C0]core freq at 333000000 Hz [C0]timer_init: Timer clk is running at 125 Mhz [C0]npu_gre_tunnel_tx_header_init L15 gre_tx_head_addr[0]=0x8400351c [C0]npu_gre_tunnel_tx_header_init L15 gre_tx_head_addr[1]=0x84003544 [C0][NPU] ba_node_init... [C0]baNode_array_init [C0]counter_init:2 [C0][NPU] queue_mutex_init... [C1]core1_main [C2]timer_isr Store Value 1e903000, val[C2]core2_main [C2]do npu_enq_deq_init [C3]core3_main [C3]core3_main for npu tunnel offload v21 [C3]npu bridge buf init sucess [ 21.607643] airoha-npu 1e900000.npu: wlan get msg: id 10, core 0, body size 4 [ 21.614808] airoha-npu 1e900000.npu: NPU not support get version [ 21.634611] mtk-eip93 1fb70000.crypto: EIP93:3:0:1,PE(0xfe007:0x41710041) [ 21.641926] NET: Registered PF_INET6 protocol family [ 21.648204] Segment Routing with IPv6 [ 21.651923] In-situ OAM (IOAM) with IPv6 [ 21.655925] NET: Registered PF_PACKET protocol family [ 21.661248] 8021q: 802.1Q VLAN Support v1.8 [ 21.665523] Registering SWP/SWPB emulation handler [ 21.869312] clk: Disabling unused clocks [ 21.873262] PM: genpd: Disabling unused power domains [ 21.899310] Freeing unused kernel image (initmem) memory: 20480K [ 21.906921] Run /init as init process [ 22.578552] init: Console is alive [ 22.582182] init: - watchdog - [ 22.599362] kmodloader: loading kernel modules from /etc/modules-boot.d/* [ 22.615683] gpio_button_hotplug: loading out-of-tree module taints kernel. [ 22.651476] usbcore: registered new interface driver usb-storage [ 22.658021] kmodloader: done loading kernel modules from /etc/modules-boot.d/* [ 22.675694] init: - preinit - Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 23.887933] procd: - early - [ 23.890964] procd: - watchdog - [ 24.424909] procd: - watchdog - [ 24.428699] procd: - ubus - [ 24.484755] procd: - init - Please press Enter to activate this console. [ 24.868334] kmodloader: loading kernel modules from /etc/modules.d/* [ 25.202303] i2c_dev: i2c /dev entries driver [ 25.219167] GACT probability on [ 25.228794] Mirror/redirect action on [ 25.245642] u32 classifier [ 25.248400] input device check on [ 25.252062] Actions configured [ 25.349525] ntfs3: Enabled Linux POSIX ACLs support [ 25.369247] Loading modules backported from Linux version v6.18.7-0-g5dfbc5357 [ 25.376490] Backport generated by backports.git c8a37ce [ 25.492965] usbcore: registered new interface driver ums-alauda [ 25.510960] usbcore: registered new interface driver ums-cypress [ 25.531357] usbcore: registered new interface driver ums-datafab [ 25.539471] usbcore: registered new interface driver ums-freecom [ 25.546885] usbcore: registered new interface driver ums-isd200 [ 25.562163] usbcore: registered new interface driver ums-jumpshot [ 25.591103] usbcore: registered new interface driver ums-karma [ 25.598889] usbcore: registered new interface driver ums-sddr09 [ 25.609553] usbcore: registered new interface driver ums-sddr55 [ 25.617459] usbcore: registered new interface driver ums-usbat [ 25.661479] urngd: v1.0.2 started. [ 25.716630] xt_time: kernel timezone is -0000 [ 25.831165] mt7915e_hif 0000:01:00.0: enabling device (0140 -> 0142) [ 25.838431] mt7915e 0001:01:00.0: enabling device (0140 -> 0142) [ 26.027959] mt7915e 0001:01:00.0: HW/SW Version: 0x8a108a10, Build Time: 20240823172725a [ 26.051153] mt7915e 0001:01:00.0: WM Firmware Version: ____000000, Build Time: 20240823172741 [ 26.150356] mt7915e 0001:01:00.0: WA Firmware Version: DEV_000000, Build Time: 20240823172837 [ 26.362217] mt7915e 0001:01:00.0: eeprom load fail, use default bin [ 26.368644] mt7915e 0001:01:00.0: Direct firmware load for mediatek/mt7916_eeprom.bin failed with error -2 [ 26.378427] mt7915e 0001:01:00.0: Falling back to sysfs fallback for: mediatek/mt7916_eeprom.bin [ 26.409638] mt7915e 0001:01:00.0: probe with driver mt7915e failed with error -12 [ 26.442404] PPP generic driver version 2.4.2 [ 26.448305] NET: Registered PF_PPPOX protocol family [ 26.456837] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 26.464737] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved. [ 26.494341] kmodloader: done loading kernel modules from /etc/modules.d/* [ 39.868709] platform 1fb58000.switch: deferred probe pending: (reason unknown) [ 39.875955] platform 1fb50000.ethernet: deferred probe pending: (reason unknown) ```
Author
Owner

In my xx230v it was the same thing, I must have reverted to some problematic commit I was having last month, I'll have to check my local Git repository to find the working driver, since I got this one from the server

In my xx230v it was the same thing, I must have reverted to some problematic commit I was having last month, I'll have to check my local Git repository to find the working driver, since I got this one from the server
Author
Owner

Regarding the MT76, we must be having some problem with the EEPROM load because if it's a raw MTD it can initialize correctly, but when it's in the UBI it can't load. I must be doing something wrong

Regarding the MT76, we must be having some problem with the EEPROM load because if it's a raw MTD it can initialize correctly, but when it's in the UBI it can't load. I must be doing something wrong
Author
Owner

dts from firmware

dts from firmware
Owner

now CONFIG_MTD_UBI_NVMEM is enabled in kernel config (needs to get eeprom in ubi)

It cx30 locked now on NPU (at least that was the last line)

> now `CONFIG_MTD_UBI_NVMEM` is enabled in kernel config (needs to get eeprom in ubi) It cx30 locked now on NPU (at least that was the last line)
20 KiB
Owner

Latest build boot log on cx30.

[    9.588326] spi_master spi0: cannot find modalias for /spi@1fa10000/flash@1
[    9.595344] spi_master spi0: Failed to create SPI device for /spi@1fa10000/flash@1
[   69.667581] rcu: INFO: rcu_sched self-detected stall on CPU
[   69.673177] rcu: 	0-....: (5999 ticks this GP) idle=3d3c/1/0x40000004 softirq=116/116 fqs=2108
[   69.681793] rcu: 	(t=6000 jiffies g=-1031 q=93 ncpus=2)
[   69.687023] CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.12.87 #0
[   69.687034] Hardware name: Generic DT based system
[   69.687038] PC is at handle_softirqs+0x90/0x268
[   69.687058] LR is at 0xed5df0
[   69.687064] pc : [<c011e5dc>]    lr : [<00ed5df0>]    psr: 40000113
[   69.687070] sp : c0013fa0  ip : 00000000  fp : c0087080
[   69.687076] r10: c1356d00  r9 : c1356d00  r8 : c1403d40
[   69.687081] r7 : 0000000a  r6 : 00000040  r5 : 00000282  r4 : c0087080
[   69.687087] r3 : 1e5fe000  r2 : 00000000  r1 : c1356d00  r0 : 416d0338
[   69.687094] Flags: nZcv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
[   69.687103] Control: 10c5383d  Table: 8020406a  DAC: 00000055
[   69.687107] Call trace: 
[   69.687116]  handle_softirqs from irq_exit+0x88/0xb8
[   69.687139]  irq_exit from call_with_stack+0x18/0x20
[   69.687162]  call_with_stack from __irq_svc+0x6c/0x7c
[   69.687179] Exception stack(0xc005bcd0 to 0xc005bd18)
[   69.687188] bcc0:                                     c204c800 0000000f ffff0000 c204cb94
[   69.687197] bce0: c204c800 00000001 0000000f e029834c 0000000f 00000af0 e0298348 c14c2ddc
[   69.687206] bd00: 0001adc0 c005bd20 c05eae00 c06c21a4 a0000013 ffffffff
[   69.687212]  __irq_svc from page_pool_destroy+0x20/0x18c
[   69.687229]  page_pool_destroy from airoha_qdma_cleanup+0x27c/0x368
[   69.687247]  airoha_qdma_cleanup from airoha_probe+0x2150/0x25b8
[   69.687264]  airoha_probe from platform_probe+0x5c/0xb4
[   69.687283]  platform_probe from really_probe+0xc8/0x2cc
[   69.687298]  really_probe from __driver_probe_device+0x94/0x1c8
[   69.687311]  __driver_probe_device from driver_probe_device+0x38/0xe4
[   69.687324]  driver_probe_device from __driver_attach+0x90/0x140
[   69.687337]  __driver_attach from bus_for_each_dev+0x60/0x94
[   69.687349]  bus_for_each_dev from bus_add_driver+0xd0/0x1fc
[   69.687360]  bus_add_driver from driver_register+0x80/0x11c
[   69.687373]  driver_register from do_one_initcall+0x48/0x27c
[   69.687388]  do_one_initcall from kernel_init_freeable+0x230/0x284
[   69.687408]  kernel_init_freeable from kernel_init+0x1c/0x130
[   69.687425]  kernel_init from ret_from_fork+0x14/0x38
[   69.687434] Exception stack(0xc005bfb0 to 0xc005bff8)
[   69.687442] bfa0:                                     00000000 00000000 00000000 00000000
[   69.687452] bfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[   69.687460] bfe0: 00000000 00000000 00000000 00000000 00000013 00000000
[   69.908294] sched: DL replenish lagged too much

Latest build boot log on cx30. ``` [ 9.588326] spi_master spi0: cannot find modalias for /spi@1fa10000/flash@1 [ 9.595344] spi_master spi0: Failed to create SPI device for /spi@1fa10000/flash@1 [ 69.667581] rcu: INFO: rcu_sched self-detected stall on CPU [ 69.673177] rcu: 0-....: (5999 ticks this GP) idle=3d3c/1/0x40000004 softirq=116/116 fqs=2108 [ 69.681793] rcu: (t=6000 jiffies g=-1031 q=93 ncpus=2) [ 69.687023] CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.12.87 #0 [ 69.687034] Hardware name: Generic DT based system [ 69.687038] PC is at handle_softirqs+0x90/0x268 [ 69.687058] LR is at 0xed5df0 [ 69.687064] pc : [<c011e5dc>] lr : [<00ed5df0>] psr: 40000113 [ 69.687070] sp : c0013fa0 ip : 00000000 fp : c0087080 [ 69.687076] r10: c1356d00 r9 : c1356d00 r8 : c1403d40 [ 69.687081] r7 : 0000000a r6 : 00000040 r5 : 00000282 r4 : c0087080 [ 69.687087] r3 : 1e5fe000 r2 : 00000000 r1 : c1356d00 r0 : 416d0338 [ 69.687094] Flags: nZcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 69.687103] Control: 10c5383d Table: 8020406a DAC: 00000055 [ 69.687107] Call trace: [ 69.687116] handle_softirqs from irq_exit+0x88/0xb8 [ 69.687139] irq_exit from call_with_stack+0x18/0x20 [ 69.687162] call_with_stack from __irq_svc+0x6c/0x7c [ 69.687179] Exception stack(0xc005bcd0 to 0xc005bd18) [ 69.687188] bcc0: c204c800 0000000f ffff0000 c204cb94 [ 69.687197] bce0: c204c800 00000001 0000000f e029834c 0000000f 00000af0 e0298348 c14c2ddc [ 69.687206] bd00: 0001adc0 c005bd20 c05eae00 c06c21a4 a0000013 ffffffff [ 69.687212] __irq_svc from page_pool_destroy+0x20/0x18c [ 69.687229] page_pool_destroy from airoha_qdma_cleanup+0x27c/0x368 [ 69.687247] airoha_qdma_cleanup from airoha_probe+0x2150/0x25b8 [ 69.687264] airoha_probe from platform_probe+0x5c/0xb4 [ 69.687283] platform_probe from really_probe+0xc8/0x2cc [ 69.687298] really_probe from __driver_probe_device+0x94/0x1c8 [ 69.687311] __driver_probe_device from driver_probe_device+0x38/0xe4 [ 69.687324] driver_probe_device from __driver_attach+0x90/0x140 [ 69.687337] __driver_attach from bus_for_each_dev+0x60/0x94 [ 69.687349] bus_for_each_dev from bus_add_driver+0xd0/0x1fc [ 69.687360] bus_add_driver from driver_register+0x80/0x11c [ 69.687373] driver_register from do_one_initcall+0x48/0x27c [ 69.687388] do_one_initcall from kernel_init_freeable+0x230/0x284 [ 69.687408] kernel_init_freeable from kernel_init+0x1c/0x130 [ 69.687425] kernel_init from ret_from_fork+0x14/0x38 [ 69.687434] Exception stack(0xc005bfb0 to 0xc005bff8) [ 69.687442] bfa0: 00000000 00000000 00000000 00000000 [ 69.687452] bfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 69.687460] bfe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 69.908294] sched: DL replenish lagged too much ```
26 KiB
Author
Owner

The Ethernet driver hasn't changed at all in the latest commits 🤔, But only the SPI driver was working, so I'm not really sure what it is. Did you test it with the latest build from the automatic build releases?

The Ethernet driver hasn't changed at all in the latest commits 🤔, But only the SPI driver was working, so I'm not really sure what it is. Did you test it with the latest build from the automatic build releases?
Author
Owner

I'm migrating my email server, so I won't be able to check it tomorrow, probably today i make solution for this, but my xx230v and Mikrotik not having this problem in Ethernet driver

I'm migrating my email server, so I won't be able to check it tomorrow, probably today i make solution for this, but my xx230v and Mikrotik not having this problem in Ethernet driver
Owner

The Ethernet driver hasn't changed at all in the latest commits 🤔, But only the SPI driver was working, so I'm not really sure what it is. Did you test it with the latest build from the automatic build releases?

Used the one from:
https://sirherobrine23.com.br/airoha_an7523/builds/releases/download/v59/openwrt-airoha-an7523-genexis_cx30-initramfs-kernel.bin

Just redownloaded to be sure but same error. :)

> The Ethernet driver hasn't changed at all in the latest commits 🤔, But only the SPI driver was working, so I'm not really sure what it is. Did you test it with the latest build from the automatic build releases? Used the one from: https://sirherobrine23.com.br/airoha_an7523/builds/releases/download/v59/openwrt-airoha-an7523-genexis_cx30-initramfs-kernel.bin Just redownloaded to be sure but same error. :)
Author
Owner

If v58 or v54 works, it's probably due to some change I made in the DTS file when I renamed it from en7523 to an7523, so I'll have to look into that.

If v58 or v54 works, it's probably due to some change I made in the DTS file when I renamed it from en7523 to an7523, so I'll have to look into that.
Owner

If v58 or v54 works, it's probably due to some change I made in the DTS file when I renamed it from en7523 to an7523, so I'll have to look into that.

Thanks, will check on the older ones, is it not possible that the cause it is bigger than mine (i stripped down the first test to 8m because vendor uboot unpack) and while cross uboot can extract it but as it is not protecting reserved memory blocks (i think stock uboot fails extracting because of it) later it cause issues?

> If v58 or v54 works, it's probably due to some change I made in the DTS file when I renamed it from en7523 to an7523, so I'll have to look into that. Thanks, will check on the older ones, is it not possible that the cause it is bigger than mine (i stripped down the first test to 8m because vendor uboot unpack) and while cross uboot can extract it but as it is not protecting reserved memory blocks (i think stock uboot fails extracting because of it) later it cause issues?
Author
Owner

If you're writing to the NAND, the initramfs file doesn't alter anything in the NAND, it only reads the MAC addresses and nothing else, because everything is literally in RAM

It would be a problem if you were to record on the NAND because you would have to do some things in ubi for write Openwrt with new ubi partitions mapping

If you're writing to the NAND, the initramfs file doesn't alter anything in the NAND, it only reads the MAC addresses and nothing else, because everything is literally in RAM It would be a problem if you were to record on the NAND because you would have to do some things in ubi for write Openwrt with new ubi partitions mapping
Owner

If you're writing to the NAND, the initramfs file doesn't alter anything in the NAND, it only reads the MAC addresses and nothing else, because everything is literally in RAM

It would be a problem if you were to record on the NAND because you would have to do some things in ubi for write Openwrt with new ubi partitions mapping

Iam just booting from tftpboot right now via chainloader, what i compiled from v51 source (april 18th) back then boots, but v51 from the releases page locks up. Also stock uboot capable to but sysupgrade images kernel (and locks up the very same place), so not get to the point to find out if there is no rootfs. (so it must be size its issue)

> If you're writing to the NAND, the initramfs file doesn't alter anything in the NAND, it only reads the MAC addresses and nothing else, because everything is literally in RAM > > It would be a problem if you were to record on the NAND because you would have to do some things in ubi for write Openwrt with new ubi partitions mapping Iam just booting from tftpboot right now via chainloader, what i compiled from ~~v51~~ source (april 18th) back then boots, but v51 from the releases page locks up. Also stock uboot capable to but sysupgrade images kernel (and locks up the very same place), so not get to the point to find out if there is no rootfs. (so it must be size its issue)
Author
Owner

I'll take a look, I still haven't been able to mount the rootfs either with xx230v, I also attached the last log (initramfs) which was from the 06th

I'll take a look, I still haven't been able to mount the rootfs either with xx230v, I also attached the last log (initramfs) which was from the 06th
Author
Owner

@Gemnon test this build

@Gemnon test this build
Owner

@Gemnon test this build

It crash:

`[ 80.667443] Hardware name: Generic DT based system
[ 80.667448] PC is at handle_softirqs+0x90/0x268
[ 80.667467] LR is at 0xed4720
[ 80.667474] pc : [] lr : [<00ed4720>] psr: 40000113
[ 80.667480] sp : c0013fa0 ip : 00000000 fp : c0085280
[ 80.667485] r10: c1ea6d00 r9 : c1ea6d00 r8 : c1f03d40
[ 80.667491] r7 : 0000000a r6 : 00000040 r5 : 00000282 r4 : c0085280
[ 80.667497] r3 : 1daae000 r2 : 00000000 r1 : c1ea6d00 r0 : cfe9e868
[ 80.667505] Flags: nZcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user
[ 80.667513] Control: 10c5383d Table: 835d806a DAC: 00000055
[ 80.667517] Call trace:
[ 80.667526] handle_softirqs from irq_exit+0x98/0xc4
[ 80.667548] irq_exit from call_with_stack+0x18/0x20
[ 80.667568] call_with_stack from __irq_svc+0x6c/0x7c
[ 80.667579] Exception stack(0xc005bcd0 to 0xc005bd18)
[ 80.667588] bcc0: c3268400 0000000f ffff0000 c3268794
[ 80.667598] bce0: c3268400 00000001 0000000f e029834c 0000000f 00000af0 e0298348 c1fc2d10
[ 80.667606] bd00: 00055e15 c005bd20 c05ecb08 c06c5194 a0000013 ffffffff
[ 80.667613] __irq_svc from page_pool_destroy+0x20/0x18c
[ 80.667628] page_pool_destroy from airoha_qdma_cleanup+0x27c/0x368
[ 80.667645] airoha_qdma_cleanup from airoha_probe+0x2150/0x25b8
[ 80.667659] airoha_probe from platform_probe+0x5c/0xb4
[ 80.667677] platform_probe from really_probe+0xc8/0x2c8
[ 80.667691] really_probe from __driver_probe_device+0x88/0x1a0
[ 80.667703] __driver_probe_device from driver_probe_device+0x38/0xe4
[ 80.667714] driver_probe_device from __driver_attach+0x90/0x140
[ 80.667725] __driver_attach from bus_for_each_dev+0x60/0x94
[ 80.667744] bus_for_each_dev from bus_add_driver+0xd0/0x1fc
[ 80.667760] bus_add_driver from driver_register+0x80/0x11c
[ 80.667771] driver_register from do_one_initcall+0x48/0x27c
[ 80.667785] do_one_initcall from kernel_init_freeable+0x230/0x284
[ 80.667801] kernel_init_freeable from kernel_init+0x1c/0x12c
[ 80.667818] kernel_init from ret_from_fork+0x14/0x38
[ 80.667830] Exception stack(0xc005bfb0 to 0xc005bff8)
[ 80.667838] bfa0: 00000000 00000000 00000000 00000000
[ 80.667847] bfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[ 80.667855] bfe0: 00000000 00000000 00000000 00000000 00000013 00000000
[ 80.888695] sched: DL replenish lagged too much

`

> @Gemnon test this build It crash: `[ 80.667443] Hardware name: Generic DT based system [ 80.667448] PC is at handle_softirqs+0x90/0x268 [ 80.667467] LR is at 0xed4720 [ 80.667474] pc : [<c011e3fc>] lr : [<00ed4720>] psr: 40000113 [ 80.667480] sp : c0013fa0 ip : 00000000 fp : c0085280 [ 80.667485] r10: c1ea6d00 r9 : c1ea6d00 r8 : c1f03d40 [ 80.667491] r7 : 0000000a r6 : 00000040 r5 : 00000282 r4 : c0085280 [ 80.667497] r3 : 1daae000 r2 : 00000000 r1 : c1ea6d00 r0 : cfe9e868 [ 80.667505] Flags: nZcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 80.667513] Control: 10c5383d Table: 835d806a DAC: 00000055 [ 80.667517] Call trace: [ 80.667526] handle_softirqs from irq_exit+0x98/0xc4 [ 80.667548] irq_exit from call_with_stack+0x18/0x20 [ 80.667568] call_with_stack from __irq_svc+0x6c/0x7c [ 80.667579] Exception stack(0xc005bcd0 to 0xc005bd18) [ 80.667588] bcc0: c3268400 0000000f ffff0000 c3268794 [ 80.667598] bce0: c3268400 00000001 0000000f e029834c 0000000f 00000af0 e0298348 c1fc2d10 [ 80.667606] bd00: 00055e15 c005bd20 c05ecb08 c06c5194 a0000013 ffffffff [ 80.667613] __irq_svc from page_pool_destroy+0x20/0x18c [ 80.667628] page_pool_destroy from airoha_qdma_cleanup+0x27c/0x368 [ 80.667645] airoha_qdma_cleanup from airoha_probe+0x2150/0x25b8 [ 80.667659] airoha_probe from platform_probe+0x5c/0xb4 [ 80.667677] platform_probe from really_probe+0xc8/0x2c8 [ 80.667691] really_probe from __driver_probe_device+0x88/0x1a0 [ 80.667703] __driver_probe_device from driver_probe_device+0x38/0xe4 [ 80.667714] driver_probe_device from __driver_attach+0x90/0x140 [ 80.667725] __driver_attach from bus_for_each_dev+0x60/0x94 [ 80.667744] bus_for_each_dev from bus_add_driver+0xd0/0x1fc [ 80.667760] bus_add_driver from driver_register+0x80/0x11c [ 80.667771] driver_register from do_one_initcall+0x48/0x27c [ 80.667785] do_one_initcall from kernel_init_freeable+0x230/0x284 [ 80.667801] kernel_init_freeable from kernel_init+0x1c/0x12c [ 80.667818] kernel_init from ret_from_fork+0x14/0x38 [ 80.667830] Exception stack(0xc005bfb0 to 0xc005bff8) [ 80.667838] bfa0: 00000000 00000000 00000000 00000000 [ 80.667847] bfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 80.667855] bfe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 80.888695] sched: DL replenish lagged too much `
28 KiB
Author
Owner

Which SoC is this? EN7529?

Which SoC is this? EN7529?
Owner

Which SoC is this? EN7529?

CPU: Airoha EN7529DT

Based on vendor uboot. Stock kernel sais EN7523 though:

[    0.194833] en7523-pctl_probe 1fa20210.pinctrl: initialised Airoha EN7523 pinctrl driver
[    0.197390] ===EN7523 PCIe initmtk-pcie 1fa91000.pcie: pcie rc 0 linkup success
[   11.683799] EN7523 PPE SRAM HW default setting is 512 at 64byte, no need to set by sw
root@heimgard-8640:~# reset reason: POR_RESET

> Which SoC is this? EN7529? CPU: Airoha EN7529DT Based on vendor uboot. Stock kernel sais EN7523 though: ``` [ 0.194833] en7523-pctl_probe 1fa20210.pinctrl: initialised Airoha EN7523 pinctrl driver [ 0.197390] ===EN7523 PCIe initmtk-pcie 1fa91000.pcie: pcie rc 0 linkup success [ 11.683799] EN7523 PPE SRAM HW default setting is 512 at 64byte, no need to set by sw root@heimgard-8640:~# reset reason: POR_RESET ```
Author
Owner

the xx230v is EN7529CT, in theory is same SoC

the xx230v is EN7529CT, in theory is same SoC
Author
Owner

This my latest build with npu disable to genexis dts

This my latest build with npu disable to genexis dts
Owner

This is what happened:

[   20.114852] spi_master spi0: cannot find modalias for /spi@1fa10000/flash@1
[   20.121892] spi_master spi0: Failed to create SPI device for /spi@1fa10000/flash@1
[   80.217470] rcu: INFO: rcu_sched detected stalls on CPUs/tasks:
[   80.223418] rcu: 	(detected by 0, t=6002 jiffies, g=-963, q=90 ncpus=2)
[   80.230040] rcu: All QSes seen, last rcu_sched kthread activity 6003 (-21985--27988), jiffies_till_next_fqs=1, root ->qsmask 0x0
[   80.241602] rcu: rcu_sched kthread starved for 6004 jiffies! g-963 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[   80.251601] rcu: 	Unless rcu_sched kthread gets sufficient CPU time, OOM is now expected behavior.
[   80.260560] rcu: RCU grace-period kthread stack dump:
[   80.265603] task:rcu_sched       state:R  running task     stack:0     pid:16    tgid:16    ppid:2      flags:0x00000000
[   80.276481] Call trace: 
[   80.276490]  __schedule from schedule+0x20/0xc0
[   80.283564]  schedule from schedule_timeout+0x64/0xbc
[   80.288625]  schedule_timeout from rcu_gp_fqs_loop+0xdc/0x4b4
[   80.294390]  rcu_gp_fqs_loop from rcu_gp_kthread+0x10c/0x14c
[   80.300056]  rcu_gp_kthread from kthread+0xd8/0xf4
[   80.304857]  kthread from ret_from_fork+0x14/0x38
[   80.309570] Exception stack(0xc0091fb0 to 0xc0091ff8)
[   80.314625] 1fa0:                                     00000000 00000000 00000000 00000000
[   80.322803] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[   80.330980] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000
[   80.337592] rcu: Stack dump where RCU GP kthread last ran:
[   80.343080] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.87 #0
[   80.349700] Hardware name: Generic DT based system
[   80.354492] PC is at handle_softirqs+0x90/0x268
[   80.359031] LR is at 0xed5d00
[   80.362001] pc : [<c011e5dc>]    lr : [<00ed5d00>]    psr: 40000113
[   80.368268] sp : c0013fa0  ip : 00000000  fp : c1f0d180
[   80.373493] r10: c1e22d00  r9 : c1e22d00  r8 : c1f03d40
[   80.378720] r7 : 0000000a  r6 : 04200002  r5 : 00000082  r4 : c1f0d180
[   80.385247] r3 : 1db32000  r2 : 00000000  r1 : c1e22d00  r0 : b50e4d90
[   80.391775] Flags: nZcv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
[   80.398912] Control: 10c5383d  Table: 8357806a  DAC: 00000055
[   80.404656] Call trace: 
[   80.404662]  handle_softirqs from irq_exit+0x88/0xb8
[   80.412166]  irq_exit from call_with_stack+0x18/0x20
[   80.417149]  call_with_stack from __irq_svc+0x6c/0x7c
[   80.422209] Exception stack(0xc1f01f30 to 0xc1f01f78)
[   80.427264] 1f20:                                     00000003 00000001 005f6674 40000000
[   80.435443] 1f40: 00000000 c1f09e6c c1f0d180 c1f09e84 00000000 00000000 c1f9c010 c1f09e08
[   80.443618] 1f60: 00000018 c1f01f80 c087bb8c c087c314 60000013 ffffffff
[   80.450231]  __irq_svc from default_idle_call+0x2c/0x30
[   80.455465]  default_idle_call from do_idle+0x238/0x28c
[   80.460699]  do_idle from cpu_startup_entry+0x28/0x2c
[   80.465768]  cpu_startup_entry from kernel_init+0x0/0x130
[   80.471176]  kernel_init from start_kernel+0x6e4/0x6e8
[   80.476325]  start_kernel from 0x0
[   85.037502] rcu: INFO: rcu_sched detected expedited stalls on CPUs/tasks: { 0-.... } 6483 jiffies s: 101 root: 0x1/.
[   85.048073] rcu: blocking rcu_node structures (internal RCU debug):
[   85.054346] Sending NMI from CPU 1 to CPUs 0:
[   85.058719] NMI backtrace for cpu 0
[   85.058726] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.87 #0
[   85.058736] Hardware name: Generic DT based system
[   85.058740] PC is at handle_softirqs+0x90/0x268
[   85.058756] LR is at 0xed5d00
[   85.058761] pc : [<c011e5dc>]    lr : [<00ed5d00>]    psr: 40000113
[   85.058766] sp : c0013fa0  ip : 00000000  fp : c1f0d180
[   85.058772] r10: c1e22d00  r9 : c1e22d00  r8 : c1f03d40
[   85.058777] r7 : 0000000a  r6 : 04200002  r5 : 00000082  r4 : c1f0d180
[   85.058783] r3 : 1db32000  r2 : 00000000  r1 : c1e22d00  r0 : b50e4d90
[   85.058790] Flags: nZcv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
[   85.058798] Control: 10c5383d  Table: 8357806a  DAC: 00000055
[   85.058802] Call trace: 
[   85.058806]  handle_softirqs from irq_exit+0x88/0xb8
[   85.058829]  irq_exit from call_with_stack+0x18/0x20
[   85.058851]  call_with_stack from __irq_svc+0x6c/0x7c
[   85.058865] Exception stack(0xc1f01f30 to 0xc1f01f78)
[   85.058873] 1f20:                                     00000003 00000001 005f6674 40000000
[   85.058883] 1f40: 00000000 c1f09e6c c1f0d180 c1f09e84 00000000 00000000 c1f9c010 c1f09e08
[   85.058891] 1f60: 00000018 c1f01f80 c087bb8c c087c314 60000013 ffffffff
[   85.058896]  __irq_svc from default_idle_call+0x2c/0x30
[   85.058907]  default_idle_call from do_idle+0x238/0x28c
[   85.058923]  do_idle from cpu_startup_entry+0x28/0x2c
[   85.058943]  cpu_startup_entry from kernel_init+0x0/0x130
[   85.058958]  kernel_init from start_kernel+0x6e4/0x6e8
[   85.058975]  start_kernel from 0x0
This is what happened: ``` [ 20.114852] spi_master spi0: cannot find modalias for /spi@1fa10000/flash@1 [ 20.121892] spi_master spi0: Failed to create SPI device for /spi@1fa10000/flash@1 [ 80.217470] rcu: INFO: rcu_sched detected stalls on CPUs/tasks: [ 80.223418] rcu: (detected by 0, t=6002 jiffies, g=-963, q=90 ncpus=2) [ 80.230040] rcu: All QSes seen, last rcu_sched kthread activity 6003 (-21985--27988), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 80.241602] rcu: rcu_sched kthread starved for 6004 jiffies! g-963 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 80.251601] rcu: Unless rcu_sched kthread gets sufficient CPU time, OOM is now expected behavior. [ 80.260560] rcu: RCU grace-period kthread stack dump: [ 80.265603] task:rcu_sched state:R running task stack:0 pid:16 tgid:16 ppid:2 flags:0x00000000 [ 80.276481] Call trace: [ 80.276490] __schedule from schedule+0x20/0xc0 [ 80.283564] schedule from schedule_timeout+0x64/0xbc [ 80.288625] schedule_timeout from rcu_gp_fqs_loop+0xdc/0x4b4 [ 80.294390] rcu_gp_fqs_loop from rcu_gp_kthread+0x10c/0x14c [ 80.300056] rcu_gp_kthread from kthread+0xd8/0xf4 [ 80.304857] kthread from ret_from_fork+0x14/0x38 [ 80.309570] Exception stack(0xc0091fb0 to 0xc0091ff8) [ 80.314625] 1fa0: 00000000 00000000 00000000 00000000 [ 80.322803] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 80.330980] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 80.337592] rcu: Stack dump where RCU GP kthread last ran: [ 80.343080] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.87 #0 [ 80.349700] Hardware name: Generic DT based system [ 80.354492] PC is at handle_softirqs+0x90/0x268 [ 80.359031] LR is at 0xed5d00 [ 80.362001] pc : [<c011e5dc>] lr : [<00ed5d00>] psr: 40000113 [ 80.368268] sp : c0013fa0 ip : 00000000 fp : c1f0d180 [ 80.373493] r10: c1e22d00 r9 : c1e22d00 r8 : c1f03d40 [ 80.378720] r7 : 0000000a r6 : 04200002 r5 : 00000082 r4 : c1f0d180 [ 80.385247] r3 : 1db32000 r2 : 00000000 r1 : c1e22d00 r0 : b50e4d90 [ 80.391775] Flags: nZcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 80.398912] Control: 10c5383d Table: 8357806a DAC: 00000055 [ 80.404656] Call trace: [ 80.404662] handle_softirqs from irq_exit+0x88/0xb8 [ 80.412166] irq_exit from call_with_stack+0x18/0x20 [ 80.417149] call_with_stack from __irq_svc+0x6c/0x7c [ 80.422209] Exception stack(0xc1f01f30 to 0xc1f01f78) [ 80.427264] 1f20: 00000003 00000001 005f6674 40000000 [ 80.435443] 1f40: 00000000 c1f09e6c c1f0d180 c1f09e84 00000000 00000000 c1f9c010 c1f09e08 [ 80.443618] 1f60: 00000018 c1f01f80 c087bb8c c087c314 60000013 ffffffff [ 80.450231] __irq_svc from default_idle_call+0x2c/0x30 [ 80.455465] default_idle_call from do_idle+0x238/0x28c [ 80.460699] do_idle from cpu_startup_entry+0x28/0x2c [ 80.465768] cpu_startup_entry from kernel_init+0x0/0x130 [ 80.471176] kernel_init from start_kernel+0x6e4/0x6e8 [ 80.476325] start_kernel from 0x0 [ 85.037502] rcu: INFO: rcu_sched detected expedited stalls on CPUs/tasks: { 0-.... } 6483 jiffies s: 101 root: 0x1/. [ 85.048073] rcu: blocking rcu_node structures (internal RCU debug): [ 85.054346] Sending NMI from CPU 1 to CPUs 0: [ 85.058719] NMI backtrace for cpu 0 [ 85.058726] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.87 #0 [ 85.058736] Hardware name: Generic DT based system [ 85.058740] PC is at handle_softirqs+0x90/0x268 [ 85.058756] LR is at 0xed5d00 [ 85.058761] pc : [<c011e5dc>] lr : [<00ed5d00>] psr: 40000113 [ 85.058766] sp : c0013fa0 ip : 00000000 fp : c1f0d180 [ 85.058772] r10: c1e22d00 r9 : c1e22d00 r8 : c1f03d40 [ 85.058777] r7 : 0000000a r6 : 04200002 r5 : 00000082 r4 : c1f0d180 [ 85.058783] r3 : 1db32000 r2 : 00000000 r1 : c1e22d00 r0 : b50e4d90 [ 85.058790] Flags: nZcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 85.058798] Control: 10c5383d Table: 8357806a DAC: 00000055 [ 85.058802] Call trace: [ 85.058806] handle_softirqs from irq_exit+0x88/0xb8 [ 85.058829] irq_exit from call_with_stack+0x18/0x20 [ 85.058851] call_with_stack from __irq_svc+0x6c/0x7c [ 85.058865] Exception stack(0xc1f01f30 to 0xc1f01f78) [ 85.058873] 1f20: 00000003 00000001 005f6674 40000000 [ 85.058883] 1f40: 00000000 c1f09e6c c1f0d180 c1f09e84 00000000 00000000 c1f9c010 c1f09e08 [ 85.058891] 1f60: 00000018 c1f01f80 c087bb8c c087c314 60000013 ffffffff [ 85.058896] __irq_svc from default_idle_call+0x2c/0x30 [ 85.058907] default_idle_call from do_idle+0x238/0x28c [ 85.058923] do_idle from cpu_startup_entry+0x28/0x2c [ 85.058943] cpu_startup_entry from kernel_init+0x0/0x130 [ 85.058958] kernel_init from start_kernel+0x6e4/0x6e8 [ 85.058975] start_kernel from 0x0
Author
Owner

This is only happening with the cx30, is laxy having the same problem? because this only happened to me once when I was messing with the SPI where the entire boot system would hang, worrying about the mac address of the ram or flash memory.

This is only happening with the cx30, is laxy having the same problem? because this only happened to me once when I was messing with the SPI where the entire boot system would hang, worrying about the mac address of the ram or flash memory.
Owner

Theese booted ethernet not work though. :)

Theese booted ethernet not work though. :)
Author
Owner

You let it boot completely because it was still loading the kernel modules. Try again and wait a bit, as the drivers loaded directly

If it loaded, it's because the MAC address was being mapped by uboot env

You let it boot completely because it was still loading the kernel modules. Try again and wait a bit, as the drivers loaded directly If it loaded, it's because the MAC address was being mapped by uboot env
Owner

You let it boot completely because it was still loading the kernel modules. Try again and wait a bit, as the drivers loaded directly

If it loaded, it's because the MAC address was being mapped by uboot env

I did, some reason eth0 gets into bridge. But i have lan1, lan2 and wan , once i added those to bridge and removed eth0 ping works so ethernet works .If i remember good in dsa that is how it should be, but i might be wrong. But you right it is working once i get the interfaces to bridge.

> You let it boot completely because it was still loading the kernel modules. Try again and wait a bit, as the drivers loaded directly > > If it loaded, it's because the MAC address was being mapped by uboot env I did, some reason eth0 gets into bridge. But i have lan1, lan2 and wan , once i added those to bridge and removed eth0 ping works so ethernet works .If i remember good in dsa that is how it should be, but i might be wrong. But you right it is working once i get the interfaces to bridge.
Author
Owner

I haven't yet added these devices to the 02_network, so the bridge isn't loading on the network interfaces.

I haven't yet added these devices to the 02_network, so the bridge isn't loading on the network interfaces.
Owner

CX30 works fine with v60 , will test other devices and figure out how to get to flash. Genexis/iopsys image is fit in fit, in the fit there is an "uncompressed" boot fit image that contains kernel and dtb and gets imxtracted to kernel partition, and then there is rootfs what it imxtract to rootfs. Openwrt sysupgrade image is all in one.

CX30 works fine with v60 , will test other devices and figure out how to get to flash. Genexis/iopsys image is fit in fit, in the fit there is an "uncompressed" boot fit image that contains kernel and dtb and gets imxtracted to kernel partition, and then there is rootfs what it imxtract to rootfs. Openwrt sysupgrade image is all in one.
Author
Owner

The base MAC address is the same for Ethernet? Because if so, I'll add the script to correct this for the Genexis devices, but for now the devices will use the 2.4GHz wireless address for the network switch until I add the script if necessary

The base MAC address is the same for Ethernet? Because if so, I'll add the script to correct this for the Genexis devices, but for now the devices will use the 2.4GHz wireless address for the network switch until I add the script if necessary
Owner

The base MAC address is the same for Ethernet? Because if so, I'll add the script to correct this for the Genexis devices, but for now the devices will use the 2.4GHz wireless address for the network switch until I add the script if necessary

Nope they actually different even wifi mac is. And it is the same with openwrt on zephyr and pixly (i mean they get the very same mac), there is a base_macaddr environment variable what they use for ethernet in AABBCCDDEEFF format. Also on zephyr 2.5gbit ports not work yet not even sure there is driver for it right now :) Attaching logs, orig is the original iowrt boot, openwrt is v60. Going to check the other device in a bit.

For rodimus ethernet seems to be broken there is lan1 in openwrt but non of the ports seem to work. Also rodimus and zephyr have zigbee thing on usb (not even used in stock firmware so no idea why it is there) and never used zigbee so not even know what it is good for.
:

echo -e "version\r" | socat -T 2 - /dev/ttyUSB0,b115200,ra
w,echo=0
stack ver. [6.10.2 GA build 267]
211018_xG21_Z3S_V5V61020>

Arcee has a phantom wan (it has just two lan ports :)) but otherwise seem to work just mac address have nothing to do with the devices (like the others)

Laxy there is lan1,lan2,lan3 (it has 4 ports and pon) could not get link on any but that boots too.

Added a few pics from the back of the boxes ,for port numbers (rodimus-hx30) have 3 buttons on the side (Wlan/WPS/reset).

> The base MAC address is the same for Ethernet? Because if so, I'll add the script to correct this for the Genexis devices, but for now the devices will use the 2.4GHz wireless address for the network switch until I add the script if necessary Nope they actually different even wifi mac is. And it is the same with openwrt on zephyr and pixly (i mean they get the very same mac), there is a base_macaddr environment variable what they use for ethernet in AABBCCDDEEFF format. Also on zephyr 2.5gbit ports not work yet not even sure there is driver for it right now :) Attaching logs, orig is the original iowrt boot, openwrt is v60. Going to check the other device in a bit. For rodimus ethernet seems to be broken there is lan1 in openwrt but non of the ports seem to work. Also rodimus and zephyr have zigbee thing on usb (not even used in stock firmware so no idea why it is there) and never used zigbee so not even know what it is good for. : ``` echo -e "version\r" | socat -T 2 - /dev/ttyUSB0,b115200,ra w,echo=0 stack ver. [6.10.2 GA build 267] 211018_xG21_Z3S_V5V61020> ``` Arcee has a phantom wan (it has just two lan ports :)) but otherwise seem to work just mac address have nothing to do with the devices (like the others) Laxy there is lan1,lan2,lan3 (it has 4 ports and pon) could not get link on any but that boots too. Added a few pics from the back of the boxes ,for port numbers (rodimus-hx30) have 3 buttons on the side (Wlan/WPS/reset).
Author
Owner

I’d like to ask you to provide a short list so I can create the dts files correctly:

  • Number of Ethernet ports, along with the port names
    • Whether any external PHYs are used
  • USB ports and their type (USB 2.0 or 3.0)
  • MAC address offset or a dump of each device and the MAC addresses so I can locate each one
  • In addition to the devices that use/have an xPON port

Also rodimus and zephyr have zigbee thing on usb (not even used in stock firmware so no idea why it is there) and never used zigbee so not even know what it is good for.

ZigBee is used to create a network to control IoT devices without relying on Wi-Fi to create that network. If I'm not mistaken, the W1700k also has a ZigBee component, which it seems wasn't used either

there is a base_macaddr environment variable what they use for ethernet in AABBCCDDEEFF format.

What was causing the chaotic startup was me trying to use the MAC address as the stored base for the u-boot environment, I think something is missing in the kernel, that's why OpenWRT wasn't starting directly, I'll have to create a script to correct the addresses that are extracted from the u-boot environment later

I’d like to ask you to provide a short list so I can create the dts files correctly: - Number of Ethernet ports, along with the port names - Whether any external PHYs are used - USB ports and their type (USB 2.0 or 3.0) - MAC address offset or a dump of each device and the MAC addresses so I can locate each one - In addition to the devices that use/have an xPON port > Also rodimus and zephyr have zigbee thing on usb (not even used in stock firmware so no idea why it is there) and never used zigbee so not even know what it is good for. ZigBee is used to create a network to control IoT devices without relying on Wi-Fi to create that network. If I'm not mistaken, the W1700k also has a ZigBee component, which it seems wasn't used either > there is a base_macaddr environment variable what they use for ethernet in AABBCCDDEEFF format. What was causing the chaotic startup was me trying to use the MAC address as the stored base for the u-boot environment, I think something is missing in the kernel, that's why OpenWRT wasn't starting directly, I'll have to create a script to correct the addresses that are extracted from the u-boot environment later
Author
Owner

So the LEDs are working on all devices?

So the LEDs are working on all devices?
Author
Owner

MAC address offset or a dump of each device and the MAC addresses so I can locate each one

If you are going to submit it, please send it to this repository: https://sirherobrine23.com.br/airoha_en7523/off-topics-private/issues

> MAC address offset or a dump of each device and the MAC addresses so I can locate each one If you are going to submit it, please send it to this repository: https://sirherobrine23.com.br/airoha_en7523/off-topics-private/issues
Owner

I’d like to ask you to provide a short list so I can create the dts files correctly:

  • Number of Ethernet ports, along with the port names
    • Whether any external PHYs are used
  • USB ports and their type (USB 2.0 or 3.0)
  • MAC address offset or a dump of each device and the MAC addresses so I can locate each one
  • In addition to the devices that use/have an xPON port

laxy: 4x 1gbit ports lan1,lan2,lan3,lan4, has 1xUSB 3.0 (at least iowrt shown 5000 speed when connected my usb drive to it and it was recognized on usb2) it has xPON port, also have 2 fxs port (i do not think there is external PHYs)

rodimus: 4x 1gbit ports lan1,lan2,lan3,lan4, 1 2.5gbit wan port wan, has 1xUSB 2.0 (device got recognized on usb1) and 1 fxs port, no xPON. (i do not think there is external PHYs)

zephyr: 3x1gbit port ( lan1, lan2, lan3), 2x 2.5gbit port (lan4,wan) has 1xUSB 2.0 (device got recognized on usb1), 1 fxs port and i think lan4 is an external phy:

arcee: 2x1gbit port (lan1,lan2), no USB

pixly: 3x1gbit port (lan1,lan2,wan) no USB

there is a base_macaddr environment variable what they use for ethernet in AABBCCDDEEFF format.

What was causing the chaotic startup was me trying to use the MAC address as the stored base for the u-boot environment, I think something is missing in the kernel, that's why OpenWRT wasn't starting directly, I'll have to create a script to correct the addresses that are extracted from the u-boot environment later

Will try to find those, but as we chainload foreign uboot to be able to boot initramfs kernel wont get envs from that? :)

> I’d like to ask you to provide a short list so I can create the dts files correctly: > > - Number of Ethernet ports, along with the port names > - Whether any external PHYs are used > - USB ports and their type (USB 2.0 or 3.0) > - MAC address offset or a dump of each device and the MAC addresses so I can locate each one > - In addition to the devices that use/have an xPON port laxy: 4x 1gbit ports lan1,lan2,lan3,lan4, has 1xUSB 3.0 (at least iowrt shown 5000 speed when connected my usb drive to it and it was recognized on usb2) it has xPON port, also have 2 fxs port (i do not think there is external PHYs) rodimus: 4x 1gbit ports lan1,lan2,lan3,lan4, 1 2.5gbit wan port wan, has 1xUSB 2.0 (device got recognized on usb1) and 1 fxs port, no xPON. (i do not think there is external PHYs) zephyr: 3x1gbit port ( lan1, lan2, lan3), 2x 2.5gbit port (lan4,wan) has 1xUSB 2.0 (device got recognized on usb1), 1 fxs port and i think lan4 is an external phy: arcee: 2x1gbit port (lan1,lan2), no USB pixly: 3x1gbit port (lan1,lan2,wan) no USB > > there is a base_macaddr environment variable what they use for ethernet in AABBCCDDEEFF format. > > What was causing the chaotic startup was me trying to use the MAC address as the stored base for the u-boot environment, I think something is missing in the kernel, that's why OpenWRT wasn't starting directly, I'll have to create a script to correct the addresses that are extracted from the u-boot environment later Will try to find those, but as we chainload foreign uboot to be able to boot initramfs kernel wont get envs from that? :)
Gemnon reopened this issue 2026-05-15 09:57:44 +00:00
Owner

Sorry still going to test new builds just previous weeks was busy , could get iowrt stuff to at least build packages I need for the devices. But still would prefer openwrt. Got some more boxes. Well can be sure CX20 is arcee and all this stuff are engineering boxes.

Sorry still going to test new builds just previous weeks was busy , could get iowrt stuff to at least build packages I need for the devices. But still would prefer openwrt. Got some more boxes. Well can be sure CX20 is arcee and all this stuff are engineering boxes.
Author
Owner

Sorry if we don't pay much attention to some things, I'm fixing some drivers, and others are probably busy with other things.

Well can be sure CX20 is arcee and all this stuff are engineering boxes.

Interesting, if the PCB has any revisions it will be interesting, some devices have undergone minor changes on my part, but most people in this organization can open PRs and/or commit, if they want to send something to a repository.

Sorry if we don't pay much attention to some things, I'm fixing some drivers, and others are probably busy with other things. > Well can be sure CX20 is arcee and all this stuff are engineering boxes. Interesting, if the PCB has any revisions it will be interesting, some devices have undergone minor changes on my part, but most people in this organization can open PRs and/or commit, if they want to send something to a repository.
Owner

Sorry if we don't pay much attention to some things, I'm fixing some drivers, and others are probably busy with other things.

Well can be sure CX20 is arcee and all this stuff are engineering boxes.

Interesting, if the PCB has any revisions it will be interesting, some devices have undergone minor changes on my part, but most people in this organization can open PRs and/or commit, if they want to send something to a repository.

No worries iam glad what you do! Iam not much a developer sadly, just removed their call home stuff from rootfs and made sure on reset boxes not cause havoc, can't even build iowrt as device profiles needs GitHub login :) Not sure how GPL compatible is this. But then even could not find Heimgard repo or at least the last source tarball before it went Genexis :)

> Sorry if we don't pay much attention to some things, I'm fixing some drivers, and others are probably busy with other things. > > > > Well can be sure CX20 is arcee and all this stuff are engineering boxes. > > Interesting, if the PCB has any revisions it will be interesting, some devices have undergone minor changes on my part, but most people in this organization can open PRs and/or commit, if they want to send something to a repository. No worries iam glad what you do! Iam not much a developer sadly, just removed their call home stuff from rootfs and made sure on reset boxes not cause havoc, can't even build iowrt as device profiles needs GitHub login :) Not sure how GPL compatible is this. But then even could not find Heimgard repo or at least the last source tarball before it went Genexis :)
Owner

Tested the latest build on pixly mac addresses good now and both ethernet/wifi working. :)

Have a lot of lines of this though (but think that just some debug info)
[ 1051.971303] airoha-spi 1fa10000.spi: exec_op cs=0 opcode=13 tx=1 addr=3 dummy=0 data=0 dir=0

Tested the latest build on pixly mac addresses good now and both ethernet/wifi working. :) Have a lot of lines of this though (but think that just some debug info) [ 1051.971303] airoha-spi 1fa10000.spi: exec_op cs=0 opcode=13 tx=1 addr=3 dummy=0 data=0 dir=0
1.9 MiB
Author
Owner

That's good, that SPI log was a debug log I forgot to remove

That's good, that SPI log was a debug log I forgot to remove
Author
Owner

I was testing some things for Mikrotik hEX S 2025, but I'll have to do it in uboot and not in the kernel

I was testing some things for Mikrotik hEX S 2025, but I'll have to do it in uboot and not in the kernel
Author
Owner

@Gemnon I added some changes for a few devices today (47fbe84c61)

I'm not sure which Ethernet chips some of these devices use (likely the same as the e650) so please wait for the build in github so I can update the dts, 01_leds, and 02_network.

  • Rodimus R1
  • Zephyr
@Gemnon I added some changes for a few devices today (47fbe84c61a2b471e42a8df55c45b3166c1cc845) I'm not sure which Ethernet chips some of these devices use (likely the same as the e650) so please wait for the build in [github](https://github.com/Sirherobrine23/airoha_en7523_builds/actions/runs/28039480967) so I can update the dts, 01_leds, and 02_network. - Rodimus R1 - Zephyr
Owner

They use Airoha EN8811.

They use Airoha EN8811.
Sign in to join this conversation.
3 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: airoha_en7523/openwrt#6