1 (edytowany przez Janek12 2024-03-23 20:30:58)

Temat: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

Jestem początkujący w tych tematach, ale lubię dłubać, już coś mam, ale po kolei:

1. Sprzęt już rozbierałem i jakby coś to są wlutowane 4 piny do TTLa (mam nadzieję, że nic nie pomyliłem), mimo że mają oznaczenia TP (test point), to przypuszczam, że to jest TTL. Jakieś przejściówki na FT232RL z USB walają się po kątach.

2. Włączenie telnetu za pomocą skryptów, programów:
  2.1 https://github.com/insanid/netgear-tele … ree/master
    U mnie, przynajmniej na nowszych firmware nie działał.
  2.2 https://github.com/bkerler/netgear_teln … -enable.py
    Tego jeszcze nie przetestowałem, bałem się wirusa.

3. Wgrałem stary firmware RBS40V-V2.2.1.64_1.0.47.chk i włączyłem telnet w debug, bo w tej wersji fw jeszcze jest tu:
http://192.168.1.2/debug.htm

4. Niestety miałem walkę z automatycznym updatem, którą udało mi się podczas wgrywania firmware pokonać, odłączając sieć od internetu.

Mimo wydania poleceń jak na stronie:
https://community.netgear.com/t5/Orbi-W … -p/2178518
1. echo V9.7.2.104 >firmware_version
2. cat firmware_version
Wyświetlał się: V9.7.2.104
Satelita się jednak później zaktualizował do wersji firmware V2.3.6.4_1.0.1 gdzie nie można już włączać, wyłączać telnetu, ale o dziwo telnet, przynajmniej chwilowo, nadal działa.
Teraz w telnet: "cat firmware_version"
daje wynik: "cat: can't open 'firmware_version': No such file or directory"

5. Telnet, który o dziwo nadal działa:
opkg jest jakiś ograniczony, wget zwraca błąd 255, nic nie mogę instalować. Nie wiem jak sobie z tym poradzić.
Przykładowe działające polecenia:

root@RBS40V:/# opkg update
Downloading http://downloads.openwrt.org/chaos_calm … ckages.gz.
Downloading http://downloads.openwrt.org/chaos_calm … kages.sig.
Signature check failed.
Remove wrong Signature file.
[...]
Collected errors:
* opkg_download: Failed to download http://downloads.openwrt.org/chaos_calm … ckages.gz, wget returned 255.

ls
bin      etc      lib      overlay  rom      sbin     tmp      var
dev      init     mnt      proc     root     sys      usr      www

root@RBS40V:/# find / | xargs grep 1.0.0.0
grep: /dev/audio1: Device or resource busy
grep: /dev/dsp1: Device or resource busy
grep: /dev/ttyp1: No such device or address
grep: /dev/ptyp1: No such device or address
grep: /dev/ttyp0: No such device or address
grep: /dev/ptyp0: No such device or address
grep: /dev/log: No such device or address
grep: /dev/root: No such file or directory
grep: /dev/audio: Invalid argument
grep: /dev/dsp: Invalid argument
grep: /dev/spiv6: No such device or address
grep: /dev/acos_nat_cli: No such device or address
grep: /dev/wps_led: No such device or address
grep: /dev/watchdog0: Device or resource busy
grep: /dev/msm_sps: No such device or address

6. Jak sobie poradzić aby móc coś instalować, korzystać bezpośrednio z audio, mikrofonu, może nawet wyłączyć Alexę.
Finalnie będę chciał to podłączyć do Home Assistanta, z pominięciem chmur, etc. Philips Hue (emulated_hue), już nie działa bez kombinacji z kontem Philips, a i to ponoć różnie się sprawdza.

Rozumiem, że nie ma OpenWrt na to urządzenie, po za firmware producenta.
Oczywiście będę wdzięczny za wszelakie wskazówki.

2

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

Ktoś musi przeportować urządzenie na openwrt. Producent używa sdk bazującego na openwrt ale nie jest openwrt i za pewne producent niekoniecznie chciał żeby cokolwiek można było instalować.

Masz sprzęt więc spróbuj zrobić na niego normalne openwrt.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

3 (edytowany przez Janek12 2024-03-23 20:39:42)

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

Cezary napisał/a:

Ktoś musi przeportować urządzenie na openwrt. [...] Masz sprzęt więc spróbuj zrobić na niego normalne openwrt.

Dzięki za odpowiedź, ale odnoszę wrażenie, że może mnie to przerosnąć, a z pomocą, ze względu na to, że to jest mało popularne urządzenie, może być trudno.
No nic, poczytam jakieś tutoriale i może ruszę z motyką na słońce, choć mam wrażenie, że to może być zderzenie ze ścianą. Ale przynajmniej wiem, z tego co zrozumiałem, że z obecnym firmware nie ma co kombinować, tracić czasu, bo i tak z tego nic nie będzie.

4

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

Zacznij od prostych rzeczy , jak wklejenie bootloga , wkejenie ,co dają komendy "uname -a" , "cat /sys/kernel/debug/usb/devices" , "cat /proc/mtd"....
Później trzeba zrobić zrzut partycji , device-tree ...

5

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

MiG25 napisał/a:

Zacznij od prostych rzeczy , jak wklejenie bootloga , wkejenie ,co dają komendy "uname -a" , "cat /sys/kernel/debug/usb/devices" , "cat /proc/mtd"....
Później trzeba zrobić zrzut partycji , device-tree ...

Wielkie dzięki, zacząłem już czegoś szukać ale żadnych takich konkretów nie znalazłem.

6

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

Popatrz na moje boje z MF18A , z LBR20 , i T3000 ,to może Cie zainspiruje smile Ja też zaczynałem bez żadnej wiedzy.

7

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

MiG25 napisał/a:

Popatrz na moje boje z MF18A , z LBR20 , i T3000 ,to może Cie zainspiruje smile Ja też zaczynałem bez żadnej wiedzy.

Dzięki, na pewno się przyda, bo na razie patrzę się na to wszystko jak sroka w gnat i niewiele z tego wynika smile Nie znalazłem gotowych tutoriali step by step.

8

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

... bo do każdego sprzętu trzeba podejść indywidualnie.
Mając ogólny zasób wiedzy o sprawach sprzętowych, organizacji Flasha itd trzeba tą wiedzę dostosować do modelu.
Czasem musi to być wyspecjalizowana wiedza z elektroniki oraz informatyki. Nie zawsze wystarczy wiedza z informatyki.

Sama kompilacja dowolnej architektury przebiega podobnie, a więc poradników jest sporo, ponieważ komendy wklepuje się takie jakie są, bo innych nie ma. I to jest ta różnica, czemu tam nie ma poradników a tu są.

Xiaomi AX3000T @ Netgear R6220
* DVBT2 - T230C *

9

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

Sprzęt jest oparty na IPQ4019 więc wsparcie jest możliwe. Ale są tam elementy które mogą nie działać na OpenWrt jak np panel dotykowy: https://fcc.report/FCC-ID/PY318100406/3939685

10

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

Jeśli IPQ4019 to tym bardziej nie ma się czego bać , podłącz się do konsoli szeregowej najpierw (trzeba otworzyć ).

11

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

Dzięki wszystkim. Mimo, że widzę, że mnie to przerasta, to czując wasze wsparcie, postaram się działać, przynajmniej zacząć.

MiG25 napisał/a:

Jeśli IPQ4019 to tym bardziej nie ma się czego bać , podłącz się do konsoli szeregowej najpierw (trzeba otworzyć ).

Od tego zacznę.

12 (edytowany przez Janek12 2024-03-28 01:37:19)

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

Bootlog na firmware V2.3.6.4_1.0.1, wersja Orbi: bootlog1.txt
Tylko nawet nie wiem na jakim firmware powinienem to robić, może na najnowszym, a może na wersji Extended.
Ktoś gdzieś pisał w necie, że z tymi RBSami jest jakiś problem. Nie przyjmują innych plików firmware. Może ze względu na rozszerzenie chm a nie img i inny format pliku. Przykładowy początek pliku chk: chk_start.txt Dodałem tylko parę enterów, aby tekst był bardziej czytelny. Wygląda jakby na początku w pliku firmware był skrypt ładujący, czego w img nie widać.

Podłączenie (pinout):
Pinout Netgear RBS40V

13

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

Nie ma znaczenia firmware, docelowo i tak się go chcesz pozbyć.  Przyjmij że używasz ostatniego dostępnego od producenta.

Na początek musisz wiedzieć jak go reanimować i wgrywać soft przez bootloader, bo tak na razie będziesz go w razie czego uruchamiał. Nie licz na to że pierwszy uruchomiony obraz będzie dobry, więc na początek naucz się go odzyskiwać. Obrazy dla ipq40xx uruchomią się do pewnego momentu, później przyjdzie pora na flash, gpio, sieci, wifi, peryferia. Początkowe obrazy i tak uruchamia się w ramie.

TX płytki podłącza się do RX interfejsu, RX płytki do TX interfejsy. Linia nadawca z linią odbiorą i na odwrót.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

14 (edytowany przez MiG25 2024-03-26 09:51:00)

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

Jeśli na tej przejściówce oznaczenia są prawidłowe ( a zakładam ,że są ) , to te Twoje oznaczenia na płycie RBS40V powinieneś zamienić ( bo jak @Cezary pisał , jak z jednej strony przewodu jest RX to z drugiej TX , i na odwrót).

Poczytaj mój wątek o LBR20 , myślę że jest dosyć podobny.

Myślę ,że na początek zatrzymaj uboot , pokaż jego komendy , i spróbuj w ciemno uruchomić obraz initramfs od LBR20 ( nic nie nadpisze , bo jest uruchomiany z RAM).

Przywrócenie do orginału przez nmrp , to trzeba sprawdzić czy robi się bez problemów.

15

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

No niestety wtopiłem, wydawało by się, że na najprostszej rzeczy. Łączę się bez problemu z portem szeregowym, ale niestety jakby nie mogę nic wysłać do routera. Nie mogę przerwać pracy bootloadera, czyli nie mogę wejść do konsoli. Ręce mi opadają, wydaje mi się, że próbowałem już wszystkiego. Poświęciłem na to kupę czasu. Może błąd jest jakiś trywialny, ale ja już nie mam pomysłów. Wszystko dobrze odczytuję, ale wysłać nic nie mogę. Tzn na przejściówce widać, że dane są wysyłane, bo w trakcie mruga dioda. Przetestowałem kilka przejściówek. Może jeszcze inny kabelek łączący przejściówkę z routerem sprawdzę, ale problem z tym wydaje mi się mało prawdopodobny. Przesyłałem najróżniejsze kody znaków za pomocą różnych programów, używając różnych ustawień portu.
Do głowy przychodzi mi:
1. Mimo wszystko coś źle podłączyłem do routera.
2. Coś jest uszkodzone.
3. Jakaś blokada w sofcie.
4. Jakieś dziwne ustawienie portu COM.

Boję się ryzykować wgrywać coś przez telnet, bo jak padnie, to sprzętu już nie uruchomię. W telnecie wszystko jest ok.

16

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

Może być tak że na płytce brakuje np. jakiegoś rezystora żeby linia TX działała. Sprawdź pod lupą czy ścieżka nie jest przerwana, ew jak masz miernik to sprawdź czy jest przejście pomiędzy pinem w złączu a gdzieś tam na płytce.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

17

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

Dopuki będzie się dało wgrać orginalny soft przez nmrp to nie potrzeba konsoli do przywrócenia , to trzeba też sprawdzić.

18

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

Jeśli jest dostęp do systemu przez telnet to można zmodyfikować zmienne u-boota i ustawić start z obrazu initramfs przez tftp.

19 (edytowany przez Janek12 2024-03-28 07:15:48)

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

Dzięki @Cezary, @Mig25, @frutis za podpowiedzi. Problem rozwiązany, winne było złe podłączenie do routera, zaktualizowałem zdjęcie.

Hit any key to stop autoboot:  6 
(IPQ40xx) # 
   Compression:  uncompressed
     Data Start:   0x840000e4
     Data Size:    6318800 Bytes = 6 MiB
     Architecture: ARM
     OS:           Linux
     Load Address: 0x80208000
     Entry Point:  0x80208000
     Hash algo:    crc32
     Hash value:   5ce3c88f
     Hash algo:    sha1
     Hash value:   2e717340969434fdb9904dbb44a0ea2e658d523f
   Verifying Hash Integrity ... crc32
################
#9 #################################################################
#9 ##########################################
done
Bytes transferred = 6338940 (60b97c hex)
## Booting kernel from FIT Image at 84000000 ...
   Using 'config@1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM OpenWrt Linux-5.15.148
     Type:         Kernel Image
  
################################################
#9 #################################################################
#9 #################################################################
#9 #################################################
###########

#9 ######
############
setenv serverip 192.168.1.12; set fdt_high 0x84000000; tftpboot 0x84000000 image; bootm 0x84000000

eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 up Speed :1000 Full duplex
eth0 PHY4 Down Speed :10 Half duplex
Using eth0 device
TFTP from server 192.168.1.12; our IP address is 192.168.1.9
Filename 'image'.
Load address: 0x84000000
Loading: *#####################################################
+ sha1
 Start:   0x84606cec
     Data Size:    18255 Bytes = 17.8 KiB
     Architecture: ARM
     Hash algo:    crc32
     Hash value:   7fb98468
     Hash algo:    sha1
     Hash value:   4722b5905c532b44134f778fac2b9e4651519685
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x84606cec
   Loading Kernel Image ... 
+ OK
## Flattened Device Tree from FIT Image at 84000000
   Using 'config@1' configuration
   Trying 'fdt-1' FDT blob subimage
     Description:  ARM OpenWrt netgear_rbr50 device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data
OK
OK
   Loading Device Tree to 83ff8000, end 83fff74e ... OK
Device nand2 not found!
eth0 MAC Address from ART is not valid
eth1 MAC Address from ART is not valid
Using machid 0x8010006 from environment

Starting kernel ...

[    0.000000] Booting Linux on ph
c000000.switch lan3 (uninitialized): PHY [90000.mdio-1:03] driver [Qualcomm QCA8072] (irq=POLL)
[    1.7809˙[    1.813883] Freeing unused kernel image (initmem) memory: 12288K
[    1.826757] Run /init as init process
nal link mode
[    1.449509] qca8k-ipq4019 c000000.switch: Link is Up - 1Gbps/Full - flow control rx/tx
[    1.539859] qca8k-ipq4019 c000000.switch wan (uninitialized): PHY [90000.mdio-1:00] driver [Qualcomm QCA8072] (irq=POLL)
[    1.619900] qca8k-ipq4019 c000000.switch lan1 (uninitialized): PHY [90000.mdio-1:01] driver [Qualcomm QCA8072] (irq=POLL)
[    1.699929] qca8k-ipq4019 c000000.switch lan2 (uninitialized): PHY [90000.mdio-1:02] driver [Qualcomm QCA8072] (irq=POLL)
[    1.779903] qca8k-ipq4019 [    2.185940] init: Console is alive
[    2.186343] init: - watchdog -
[    2.198343] kmodloader: loading kernel modules from /etc/modules-boot.d/*
0.auto: Host supports USB 3.0 SuperSpeed
[    2.357203] hub 1-0:1.0: USB hub found
[    2.362999] hub 1-0:1.0: 1 port detected
[    2.373062] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[    2.373730] hub 2-0:1.0: USB hub found
[    2.380332] hub 2-0:1.0: config failed, hub doesn't have any ports! (err -19)
[    2.387795] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    2.401091] init: - preinit -
[    2.675698] random: jshn: uninitialized urandom read (4 bytes read)
0
[    2.327976] xhci-hcd xhci-hcd.0.auto: irq 110, io mem 0x06000000
[    2.337421] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    2.343496] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 2
[    2.348814] xhci-hcd xhci-hcd.[    2.577304] random: jshn: uninitialized urandom read (4 bytes read)
[    2.620655] random: jshn: uninitialized urandom read (4 bytes read)
flow control rx/tx
1.386443] In-situ OAM (IOAM) with IPv6
[    1.390122] NET: Registered PF_PACKET protocol family
[    1.394002] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    1.399270] 8021q: 802.1Q VLAN Support v1.8
[    1.412069] Registering SWP/SWPB emulation handler
[    1.412954] mmc0: SDHCI controller on 7824900.sdhci [7824900.sdhci] using ADMA 64-bit
[    1.449174] qca8k-ipq4019 c000000.switch: configuring for fixed/inter[    2.315900] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    2.315982] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 1
[    2.320606] xhci-hcd xhci-hcd.0.auto: hcc params 0x0220f665 hci version 0x100 quirks 0x000000000201001[    2.877906] ipqess-edma c080000.ethernet eth0: configuring for fixed/internal link mode
[    2.878712] qca8k-ipq4019 c000000.switch lan1: configuring for phy/psgmii link mode
[    2.884827] ipqess-edma c080000.ethernet eth0: Link is Up - 1Gbps/Full - 
nerated random MAC address 32:bb:e8:1c:63:35
[    1.350919] i2c_dev: i2c /dev entries driver
[    1.351220] i2c_qup 78b7000.i2c: using default clock-frequency 100000
[    1.357180] sdhci: Secure Digital Host Controller Interface driver
[    1.360602] sdhci: Copyright(c) Pierre Ossman
[    1.366705] sdhci-pltfm: SDHCI platform and OF driver helper
[    1.371821] sdhci_msm 7824900.sdhci: Got CD GPIO
[    1.375770] NET: Registered PF_INET6 protocol family
[    1.383256] Segment Routing with IPv6
[    
50/16550 driver, 16 ports, IRQ sharing enabled
[    0.503158] msm_serial 78af000.serial: msm_serial: detected port #0
[    0.503216] msm_serial 78af000.serial: uartclk = 1843200
[    0.503308] 78af000.serial: ttyMSM0 at MMIO 0x78af000 (irq = 35, base_baud = 115200) is a MSM
[    0.503348] msm_serial: console setup on port #0
[    1.240710] printk: console [ttyMSM0] enabled
[    1.245809] msm_serial: driver initialized
[    1.255357] loop: module loaded
[    1.325957] ipqess-edma c080000.ethernet: ge
] pcieport 0000:00:00.0: AER: enabled with IRQ 105
[    0.498541] bam-dma-engine 8e04000.dma: num-channels unspecified in dt
[    0.498572] bam-dma-engine 8e04000.dma: num-ees unspecified in dt
[    0.500044] tcsr 1949000.tcsr: setting wifi_glb_cfg = 41000000
[    0.500160] tcsr 194b000.tcsr: setting usb hs phy mode select = e700e7
[    0.500287] tcsr 1953000.ess_tcsr: setting ess interface select = 0
[    0.500384] tcsr 1957000.tcsr: setting wifi_noc_memtype_m0_m2 = 2222222
[    0.501094] Serial: 82
.491226] pci 0000:01:00.0: PME# supported from D0 D3hot
[    0.492934] PCI: bus1: Fast back to back transfers disabled
[    0.493018] pci 0000:00:00.0: BAR 8: assigned [mem 0x40400000-0x405fffff]
[    0.493043] pci 0000:00:00.0: BAR 0: assigned [mem 0x40300000-0x40300fff]
[    0.493069] pci 0000:01:00.0: BAR 0: assigned [mem 0x40400000-0x405fffff 64bit]
[    0.493141] pci 0000:00:00.0: PCI bridge to [bus 01-ff]
[    0.493164] pci 0000:00:00.0:   bridge window [mem 0x40400000-0x405fffff]
[    0.496296
0-0xfffff]
[    0.488475] pci_bus 0000:00: root bus resource [mem 0x40300000-0x40ffffff]
[    0.488532] pci 0000:00:00.0: [17cb:1001] type 01 class 0x060400
[    0.488567] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x00000fff]
[    0.488645] pci 0000:00:00.0: PME# supported from D0 D3hot
[    0.490238] PCI: bus0: Fast back to back transfers disabled
[    0.490510] pci 0000:01:00.0: [168c:0056] type 00 class 0x028000
[    0.490645] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x001fffff 64bit]
[    0
0x00402fffff -> 0x0000000000
[    0.205304] qcom-pcie 40000000.pci:      MEM 0x0040300000..0x0040ffffff -> 0x0040300000
[    0.388093] qcom-pcie 40000000.pci: iATU unroll: disabled
[    0.388130] qcom-pcie 40000000.pci: Detected iATU regions: 32 outbound, 8 inbound
[    0.488236] qcom-pcie 40000000.pci: Link up
[    0.488413] qcom-pcie 40000000.pci: PCI host bridge to bus 0000:00
[    0.488436] pci_bus 0000:00: root bus resource [bus 00-ff]
[    0.488457] pci_bus 0000:00: root bus resource [io  0x000[    3.807184] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[    3.820584] random: procd: uninitialized urandom read (4 bytes read)
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
31] PCI: CLS 0 bytes, default 64
[    0.062852] workingset: timestamp_bits=14 max_order=17 bucket_order=3
[    0.069124] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.069161] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.202249] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 248)
[    0.205192] qcom-pcie 40000000.pci: host bridge /soc/pci@40000000 ranges:
[    0.205265] qcom-pcie 40000000.pci:       IO 0x0040200000..
36 (order: 6, 262144 bytes, linear)
[    0.059462] TCP established hash table entries: 4096 (order: 2, 16384 bytes, linear)
[    0.059526] TCP bind hash table entries: 4096 (order: 3, 32768 bytes, linear)
[    0.059622] TCP: Hash tables configured (established 4096 bind 4096)
[    0.059773] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.059822] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.060267] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.0603
red
[    0.054280] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    0.054311] PTP clock support registered
[    0.056497] clocksource: Switched to clocksource arch_sys_counter
[    0.057978] NET: Registered PF_INET protocol family
[    0.058238] IP idents hash table entries: 8192 (order: 4, 65536 bytes, linear)
[    0.059382] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.059436] Table-perturb hash table entries: 655
90] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.019198] thermal_sys: Registered thermal governor 'step_wise'
[    0.019621] cpuidle: using governor ladder
[    0.019681] cpuidle: using governor menu
[    0.049260] cryptd: max_cpu_qlen set to 1000
[    0.054068] usbcore: registered new interface driver usbfs
[    0.054149] usbcore: registered new interface driver hub
[    0.054213] usbcore: registered new device driver usb
[    0.054267] pps_core: LinuxPPS API ver. 1 registe
rocessors activated (384.00 BogoMIPS).
[    0.008799] CPU: All CPU(s) started in SVC mode.
[    0.014896] VFP support v0.3: implementor 41 architecture 2 part 30 variant 7 rev 5
[    0.015056] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.015091] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[    0.015467] pinctrl core: initialized pinctrl subsystem
[    0.017470] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.0178
default: 32768 minimum: 301
[    0.001259] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.001290] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.003267] qcom_scm: convention: smc legacy
[    0.004490] Setting up static identity map for 0x80300000 - 0x8030003c
[    0.004666] rcu: Hierarchical SRCU implementation.
[    0.005272] smp: Bringing up secondary CPUs ...
[    0.008747] smp: Brought up 1 node, 4 CPUs
[    0.008784] SMP: Total of 4 p
unning at 48.00MHz (virt).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0xb11fd3bfb, max_idle_ns: 440795203732 ns
[    0.000001] sched_clock: 56 bits at 48MHz, resolution 20ns, wraps every 4398046511096ns
[    0.000024] Switching to timer-based delay loop, resolution 20ns
[    0.000321] Calibrating delay loop (skipped), value calculated using timer frequency.. 96.00 BogoMIPS (lpj=480000)
[    0.000351] CPU: Testing write buffer coherency: ok
[    0.000409] pid_max: 
524288K available (6748K kernel code, 611K rwdata, 1020K rodata, 12288K init, 246K bss, 28700K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000] #9Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[    0.000000] arch_timer: cp15 timer(s) r
o,256K(config)ro,256K(pot)ro,256K(traffic_meter)ro,256K(pot_bak)ro,256K(traffic_meter.bak)ro,3840K(kernel),31488K(rootfs),35328K@9233K(firmware),256K(mtdoops)ro,1457651200(reserved)ro,-(unallocated) rootfstype=squashfs,ext4 rootwait
[    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes, linear)
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 495588K/
mem setup node 0 [mem 0x0000000080000000-0x000000009fffffff]
[    0.000000] percpu: Embedded 12 pages/cpu s16588 r8192 d24372 u49152
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 129920
[    0.000000] Kernel command line: root=/dev/mmcblk0p20 blkdevparts=mmcblk0:512K@17K(0:SBL1)ro,512K(0:BOOTCONFIG)ro,512K(0:QSEE)ro,512K(0:QSEE_ALT)ro,256K(0:CDT)ro,256K(0:CDT_ALT)ro,256K(0:DDRPARAMS)ro,256K(0:APPSBLENV)ro,1M(0:APPSBL)ro,1M(0:APPSBL_ALT)ro,256K(0:ART)ro,256K(ARTMTD)ro,2M(language)r

[    0.000000] Memory policy: Data cache writealloc
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000080000000-0x000000009fffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000080000000-0x0000000087dfffff]
[    0.000000]   node   0: [mem 0x0000000087e00000-0x0000000087ffffff]
[    0.000000]   node   0: [mem 0x0000000088000000-0x000000009fffffff]
[    0.000000] Init
ysical CPU 0x0
[    0.000000] Linux version 5.15.148 (cezary@eko.one.pl) (arm-openwrt-linux-muslgnueabi-gcc (OpenWrt GCC 12.3.0 r23004-7f0db09513) 12.3.0, GNU ld (GNU Binutils) 2.40.0) #0 SMP Thu Mar 7 21:14:32 2024
[    0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=10c5387d
[    0.000000] CPU: div instructions available: patching division code
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] OF: fdt: Machine model: NETGEAR RBR50
[    5.925184] procd: - early -
[    5.925396] procd: - watchdog -
[    6.467875] procd: - watchdog -
[    6.468257] procd: - ubus -
[    6.475889] random: ubusd: uninitialized urandom read (4 bytes read)
[    6.520400] random: ubusd: uninitialized urandom read (4 bytes read)
[    6.520815] random: ubusd: uninitialized urandom read (4 bytes read)
[    6.528589] procd: - init -
Please press Enter to activate this console.
[    6.840248] kmodloader: loading kernel modules from /etc/modules.d/*
[    6.848881] Loading modules backported from Linux version v6.1.24-0-g0102425ac76b
[    6.848936] Backport generated by backports.git v5.15.92-1-44-gd6ea70fafd36
[    6.942098] PPP generic driver version 2.4.2
[    6.943121] NET: Registered PF_PPPOX protocol family
[    6.969824] ath10k 5.15 driver, optimized for CT firmware, probing pci device: 0x56.
[    6.970889] ath10k_pci 0000:01:00.0: enabling device (0140 -> 0142)
[    6.977417] ath10k_pci 0000:01:00.0: pci irq msi oper_irq_mode 2 irq_mode 0 reset_mode 0
[    7.699062] urngd: v1.0.2 started.
[    8.159127] ath10k_pci 0000:01:00.0: Failed to find firmware-N.bin (N between 2 and 6) from ath10k/QCA9888/hw2.0: -12
[    8.159214] ath10k_pci 0000:01:00.0: could not fetch firmware files (-12)
[    8.168808] ath10k_pci 0000:01:00.0: could not probe fw (-12)
[    8.245086] random: crng init done
[    8.245134] random: 29 urandom warning(s) missed due to ratelimiting
-2.bin
bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 6b2b5c5b
[    8.991994] ath10k_ahb a000000.wifi: Loading BDF type 0
[    9.001284] ath10k_ahb a000000.wifi: failed to fetch board data for bus=ahb,vendor=0000,device=0000,subsystem-vendor=0000,subsystem-device=0000,variant=Netgear-Orbi-Pr from ath10k/QCA4019/hw1.0/board[    9.164209] ath10k_ahb a000000.wifi: failed to fetch board-2.bin or board.bin from ath10k/QCA4019/hw1.0
[    9.164274] ath10k_ahb a000000.wifi: failed to fetch board file: -12
[    9.172724] ath10k_ahb a000000.wifi: could not probe fw (-12)
[    8.951685] ath10k_ahb a000000.wifi: qca4019 hw1.0 target 0x01000000 chip_id 0x003b00ff sub 0000:0000
[    8.951755] ath10k_ahb a000000.wifi: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[    8.963863] ath10k_ahb a000000.wifi: firmware ver 10.4b-ct-4019-fW-13-5ae337
l,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 6b2b5c5b
[    9.982175] ath10k_ahb a800000.wifi: Loading BDF type 0
[    9.992033] ath10k_ahb a800000.wifi: failed to fetch board data for bus=ahb,vendor=0000,device=0000,subsystem-vendor=0000,subsystem-device=0000,variant=Netgear-Orbi-Pr from ath10k/QCA4019/hw1.0/board-2.bin
5975] kmodloader: done loading kernel modules from /etc/modules.d/*
[    9.941836] ath10k_ahb a800000.wifi: qca4019 hw1.0 target 0x01000000 chip_id 0x003b00ff sub 0000:0000
[    9.941908] ath10k_ahb a800000.wifi: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[    9.953944] ath10k_ahb a800000.wifi: firmware ver 10.4b-ct-4019-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctr[   10.153914] ath10k_ahb a800000.wifi: failed to fetch board-2.bin or board.bin from ath10k/QCA4019/hw1.0
[   10.153978] ath10k_ahb a800000.wifi: failed to fetch board file: -12
[   10.162452] ath10k_ahb a800000.wifi: could not probe fw (-12)
[   10.17
[   27.111574] ipqess-e
[   27.206840] br-lan: port 3(lan3) entered disabled state
[   27.212550] device lan3 entered promiscuous mode
[   27.226673] qca8k-ipq4019 c000000.switch wan: configuring for phy/psgmii link mode
 27.151929] device lan1 entered promiscuous mode
[   27.156646] device eth0 entered promiscuous mode
[   27.175305] qca8k-ipq4019 c000000.switch lan2: configuring for phy/psgmii link mode
[   27.177535] br-lan: port 2(lan2) entered blocking state
[   27.181808] br-lan: port 2(lan2) entered disabled state
[   27.187665] device lan2 entered promiscuous mode
[   27.200237] qca8k-ipq4019 c000000.switch lan3: configuring for phy/psgmii link mode
[   27.202469] br-lan: port 3(lan3) entered blocking state
dma c080000.ethernet eth0: Link is Down
[   27.116925] ipqess-edma c080000.ethernet eth0: configuring for fixed/internal link mode
[   27.117193] ipqess-edma c080000.ethernet eth0: Link is Up - 1Gbps/Full - flow control rx/tx
[   27.124009] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   27.135680] qca8k-ipq4019 c000000.switch lan1: configuring for phy/psgmii link mode
[   27.141440] br-lan: port 1(lan1) entered blocking state
[   27.146210] br-lan: port 1(lan1) entered disabled state
[  
[   30.319135] qca8k-ipq4019 c000000.switch lan3: Link is Up - 1Gbps/Full - flow control rx/tx
[   30.319231] br-lan: port 3(lan3) entered blocking state
[   30.326320] br-lan: port 3(lan3) entered forwarding state
[   30.331811] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
----------------------------------------------
root@OpenWrt:/# >
                                             |
 | wan: dhcp, ?                                                              |
 | wan6: dhcpv6, ?                                                           |
 -----------------------------------------------------------------------------
 === WARNING! ================================================================
 There is no root password defined on this device!
 Use the "passwd" command to set up a new password
 in order to prevent unauthorized SSH logins.
 -------------------------------
_|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------------------------------
 |                                                                           |
 | OpenWrt 23.05-SNAPSHOT, r23780-6f70e09a00                                 |
 |                                                                           |
 | Build time: 2024-03-09 10:34 CET                                          |
 | Cezary Jackiewicz, https://eko.one.pl                                     |
 |                                                                           |
 -----------------------------------------------------------------------------
 | Machine: NETGEAR RBR50                                                    |
 | Uptime: 0d, 00:00:53                                                      |
 | Load: 0.32 0.10 0.04                                                      |
 | Flash:                                                                    |
 | Memory: total: 496.0MB, free: 462.3MB, used: 6%                           |
 | Leases: 0                                                                 |
 | lan: static, 192.168.1.1     



BusyBox v1.36.1 (2023-11-15 10:00:19 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |___

root@OpenWrt:/# >

Z dwa razy trzeba pomóc enterem aby poszło dalej.

20

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

On się nie "zatrzymuje" tylko tak działa - uruchomił się i czeka, a ty enterem wywołałeś konsolę. Tak ma być.

Więc uruchamia się, teraz dostosuj mapę pamięci flash wg tego co oryginał był, sprawdź interfejsy sieciowe czy działają, zrób wifi, ew peryferia i próbuj to wgrać do flash na samym końcu.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

21 (edytowany przez MiG25 2024-03-28 07:55:09)

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

Na pewno wrzuć gdzieś (tu pewnie do posta się nie zmieści) bootlog startu orginału. Soft od RBR50 wogóle nie wykrył nanda ( albo co tam jest ,bo w RBR50 to mmc jest chyba , wszystkie wifi też failed) , więc spróbuj odpalić initramfs z LBR20.

22 (edytowany przez Janek12 2024-03-28 15:01:52)

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

Jak zwykle dzięki @Cezary i @MiG25 za podpowiedzi.

MiG25 napisał/a:

Na pewno wrzuć gdzieś (tu pewnie do posta się nie zmieści) bootlog startu orginału. Soft od RBR50 wogóle nie wykrył nanda ( albo co tam jest ,bo w RBR50 to mmc jest chyba , wszystkie wifi też failed) , więc spróbuj odpalić initramfs z LBR20.

Bootlog na firmware V2.3.6.4_1.0.1, wersja Orbi: bootlog

Firmware initramfs LBR20 znalezione na tej stronie:
https://mirror.math.princeton.edu/pub/l … x/generic/

root@OpenWrt:/# reboot
root@OpenWrt:/# [14700.892517] br-lan: port 1(lan1) entered disabled state
[14700.896111] device lan1 left promiscuous mode
[14700.896744] br-lan: port 1(lan1) entered disabled state
[14700.951894] qca8k-ipq4019 c000000.switch lan1: Link is Down
[14700.954460] device lan2 left promiscuous mode
[14700.956471] br-lan: port 2(lan2) entered disabled state
[14701.003137] ipqess-edma c080000.ethernet eth0: Link is Down
[
Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.1.1-00110
S - IMAGE_VARIANT_STRING=DAACANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x00000025
S - Reset status Config, 0x00000010
S - Core 0 Frequency, 0 MHz
B -       261 - PBL, Start
B -      1338 - bootable_media_detect_entry, Start
B -      2608 - bootable_media_detect_success, Start
B -      2622 - elf_loader_entry, Start
B -      4028 - auth_hash_seg_entry, Start
B -      6178 - auth_hash_seg_exit, Start
B -     74214 - elf_segs_hash_verify_entry, Start
B -    196005 - PBL, End
B -    196029 - SBL1, Start
B -    288046 - pm_device_init, Start
D -         7 - pm_device_init, Delta
B -    289537 - boot_flash_init, Start
D -     91189 - boot_flash_init, Delta
B -    385026 - boot_config_data_table_init, Start
D -     13930 - boot_config_data_table_init, Delta - (419 Bytes)
B -    401707 - clock_init, Start
D -      7577 - clock_init, Delta
B -    412722 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:6
B -    416136 - sbl1_ddr_set_params, Start
B -    421230 - cpr_init, Start
D -         2 - cpr_init, Delta
B -    425612 - Pre_DDR_clock_init, Start
D -         4 - Pre_DDR_clock_init, Delta
D -     13171 - sbl1_ddr_set_params, Delta
B -    438918 - pm_driver_init, Start
D -         2 - pm_driver_init, Delta
B -    509605 - sbl1_wait_for_ddr_training, Start
D -        28 - sbl1_wait_for_ddr_training, Delta
B -    525909 - Image Load, Start
D -    144048 - QSEE Image Loaded, Delta - (268920 Bytes)
B -    670385 - Image Load, Start
D -      2123 - SEC Image Loaded, Delta - (2048 Bytes)
B -    680533 - Image Load, Start
D -    188160 - APPSBL Image Loaded, Delta - (445583 Bytes)
B -    869090 - QSEE Execution, Start
D -        56 - QSEE Execution, Delta
B -    875334 - SBL1, End
D -    681307 - SBL1, Delta
S - Flash Throughput, 2064 KB/s  (717146 Bytes,  347400 us)
S - DDR Frequency, 672 MHz


OrbiVoiceSatellite V1.0.15
U-Boot 2012.07 [Chaos Calmer 15.05.1,r116451] (Jul 07 2018 - 08:02:13)

smem ram ptable found: ver: 1 len: 3
DRAM:  512 MiB
machid : 0x8010006
NAND:  ID = 9590daef
Vendor = ef
Device = da
ONFI device found
SF NAND unsupported id:ff:ff:ff:ffSF: Unsupported manufacturer ff
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
256 MiB
MMC:   qca_mmc: 0
PCI0 Link Intialized
In:    serial
Out:   serial
Err:   serial
machid: 8010006
flash_type: 2
Net:   MAC0 addr:14:59:c0:9e:97:76
PHY ID1: 0x4d
PHY ID2: 0xd0b2
ipq40xx_ess_sw_init done
eth0
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 Down Speed :10 Half duplex
eth0 PHY4 Down Speed :10 Half duplex
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 Down Speed :10 Half duplex
eth0 PHY4 Down Speed :10 Half duplex
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 up Speed :1000 Full duplex
eth0 PHY4 Down Speed :10 Half duplex

 Client starts...[Listening] for ADVERTISE...TTT
Retry count exceeded; boot the image as usual

 nmrp server
(IPQ40xx) # setenv serverip 192.168.1.12; set fdt_high 0x84000000; tftpboot 0x84000000 imagelbr20; bootm 0x84000000                                             eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 up Speed :1000 Full duplex
eth0 PHY4 Down Speed :10 Half duplex
Using eth0 device
TFTP from server 192.168.1.12; our IP address is 192.168.1.9
Filename 'imagelbr20'.
Load address: 0x84000000
Loading: #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ########
done
Bytes transferred = 6788244 (679494 hex)
## Booting kernel from FIT Image at 84000000 ...
   Using 'config@1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM OpenWrt Linux-6.1.82
     Type:         Kernel Image
     Compression:  uncompressed
     Data Start:   0x840000e4
     Data Size:    6765768 Bytes = 6.5 MiB
     Architecture: ARM
     OS:           Linux
     Load Address: 0x80208000
     Entry Point:  0x80208000
     Hash algo:    crc32
     Hash value:   0e48eaeb
     Hash algo:    sha1
     Hash value:   2281e10a84b02d7e2ea7420fc250a8aae4ea723f
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Flattened Device Tree from FIT Image at 84000000
   Using 'config@1' configuration
   Trying 'fdt-1' FDT blob subimage
     Description:  ARM OpenWrt netgear_lbr20 device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x84673ee4
     Data Size:    20591 Bytes = 20.1 KiB
     Architecture: ARM
     Hash algo:    crc32
     Hash value:   74fb202c
     Hash algo:    sha1
     Hash value:   63124accef5c1848ef3289d66091d90ac2ae1cec
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x84673ee4
   Loading Kernel Image ... OK
OK
   Loading Device Tree to 83ff7000, end 83fff06e ... OK
Device nand2 not found!
eth0 MAC Address from ART is not valid
eth1 MAC Address from ART is not valid
Using machid 0x8010006 from environment

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 6.1.82 (builder@buildhost) (arm-openwrt-linux-muslgnueabi-gcc (OpenWrt GCC 13.2.0 r25671-29515862ac) 13.2.0, GNU ld (GNU Binutils) 2.40.0) #0 SMP Tue Mar 26 20:56:57 2024
[    0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=10c5387d
[    0.000000] CPU: div instructions available: patching division code
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] OF: fdt: Machine model: Netgear LBR20
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000080000000-0x000000009fffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000080000000-0x0000000087dfffff]
[    0.000000]   node   0: [mem 0x0000000087e00000-0x0000000087ffffff]
[    0.000000]   node   0: [mem 0x0000000088000000-0x000000009fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000080000000-0x000000009fffffff]
[    0.000000] percpu: Embedded 12 pages/cpu s20436 r8192 d20524 u49152
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 129920
[    0.000000] Kernel command line: ubi.mtd=ubi root=/dev/ubiblock0_0
[    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes, linear)
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 494536K/524288K available (7098K kernel code, 618K rwdata, 1896K rodata, 12288K init, 253K bss, 29752K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000]  Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[    0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[    0.000000] arch_timer: cp15 timer(s) running at 48.00MHz (virt).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0xb11fd3bfb, max_idle_ns: 440795203732 ns
[    0.000001] sched_clock: 56 bits at 48MHz, resolution 20ns, wraps every 4398046511096ns
[    0.000018] Switching to timer-based delay loop, resolution 20ns
[    0.000326] Calibrating delay loop (skipped), value calculated using timer frequency.. 96.00 BogoMIPS (lpj=480000)
[    0.000346] CPU: Testing write buffer coherency: ok
[    0.000402] pid_max: default: 32768 minimum: 301
[    0.001283] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.001303] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.003298] qcom_scm: convention: smc legacy
[    0.004379] cblist_init_generic: Setting adjustable number of callback queues.
[    0.004392] cblist_init_generic: Setting shift to 2 and lim to 1.
[    0.004551] Setting up static identity map for 0x80300000 - 0x8030003c
[    0.004708] rcu: Hierarchical SRCU implementation.
[    0.004715] rcu:     Max phase no-delay instances is 1000.
[    0.005390] smp: Bringing up secondary CPUs ...
[    0.008842] smp: Brought up 1 node, 4 CPUs
[    0.008866] SMP: Total of 4 processors activated (384.00 BogoMIPS).
[    0.008877] CPU: All CPU(s) started in SVC mode.
[    0.015958] VFP support v0.3: implementor 41 architecture 2 part 30 variant 7 rev 5
[    0.016112] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.016142] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[    0.016498] pinctrl core: initialized pinctrl subsystem
[    0.018556] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.018923] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.020274] thermal_sys: Registered thermal governor 'step_wise'
[    0.020634] cpuidle: using governor ladder
[    0.020677] cpuidle: using governor menu
[    0.045589] cryptd: max_cpu_qlen set to 1000
[    0.047585] usbcore: registered new interface driver usbfs
[    0.047683] usbcore: registered new interface driver hub
[    0.047769] usbcore: registered new device driver usb
[    0.047815] pps_core: LinuxPPS API ver. 1 registered
[    0.047821] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    0.047845] PTP clock support registered
[    0.050279] clocksource: Switched to clocksource arch_sys_counter
[    0.051861] NET: Registered PF_INET protocol family
[    0.052123] IP idents hash table entries: 8192 (order: 4, 65536 bytes, linear)
[    0.054095] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.054136] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.054155] TCP established hash table entries: 4096 (order: 2, 16384 bytes, linear)
[    0.054215] TCP bind hash table entries: 4096 (order: 4, 65536 bytes, linear)
[    0.054369] TCP: Hash tables configured (established 4096 bind 4096)
[    0.054525] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.054571] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.054917] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.054972] PCI: CLS 0 bytes, default 64
[    0.056400] workingset: timestamp_bits=14 max_order=17 bucket_order=3
[    0.063803] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.063823] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.195653] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 248)
[    0.198616] gpio-export gpio_export: 4 gpio(s) exported
[    0.199506] qcom-pcie 40000000.pci: host bridge /soc/pci@40000000 ranges:
[    0.199561] qcom-pcie 40000000.pci:       IO 0x0040200000..0x00402fffff -> 0x0000000000
[    0.199591] qcom-pcie 40000000.pci:      MEM 0x0040300000..0x0040ffffff -> 0x0040300000
[    0.382140] qcom-pcie 40000000.pci: iATU unroll: disabled
[    0.382161] qcom-pcie 40000000.pci: iATU regions: 32 ob, 8 ib, align 4K, limit 4G
[    0.482281] qcom-pcie 40000000.pci: PCIe Gen.1 x1 link up
[    0.482526] qcom-pcie 40000000.pci: PCI host bridge to bus 0000:00
[    0.482544] pci_bus 0000:00: root bus resource [bus 00-ff]
[    0.482560] pci_bus 0000:00: root bus resource [io  0x0000-0xfffff]
[    0.482576] pci_bus 0000:00: root bus resource [mem 0x40300000-0x40ffffff]
[    0.482624] pci 0000:00:00.0: [17cb:1001] type 01 class 0x060400
[    0.482653] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x00000fff]
[    0.482726] pci 0000:00:00.0: PME# supported from D0 D3hot
[    0.484576] PCI: bus0: Fast back to back transfers disabled
[    0.484890] pci 0000:01:00.0: [168c:0056] type 00 class 0x028000
[    0.485057] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x001fffff 64bit]
[    0.485827] pci 0000:01:00.0: PME# supported from D0 D3hot
[    0.486616] PCI: bus1: Fast back to back transfers disabled
[    0.486659] pci 0000:00:00.0: BAR 8: assigned [mem 0x40400000-0x405fffff]
[    0.486680] pci 0000:00:00.0: BAR 0: assigned [mem 0x40300000-0x40300fff]
[    0.486701] pci 0000:01:00.0: BAR 0: assigned [mem 0x40400000-0x405fffff 64bit]
[    0.486785] pci 0000:00:00.0: PCI bridge to [bus 01-ff]
[    0.486802] pci 0000:00:00.0:   bridge window [mem 0x40400000-0x405fffff]
[    0.489960] pcieport 0000:00:00.0: AER: enabled with IRQ 35
[    0.492445] bam-dma-engine 8e04000.dma-controller: num-channels unspecified in dt
[    0.492464] bam-dma-engine 8e04000.dma-controller: num-ees unspecified in dt
[    0.494058] tcsr 1949000.tcsr: setting wifi_glb_cfg = 41000000
[    0.494164] tcsr 194b000.tcsr: setting usb hs phy mode select = e700e7
[    0.494253] tcsr 1953000.ess_tcsr: setting ess interface select = 0
[    0.494342] tcsr 1957000.tcsr: setting wifi_noc_memtype_m0_m2 = 2222222
[    0.494670] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.496805] msm_serial 78af000.serial: msm_serial: detected port #0
[    0.496849] msm_serial 78af000.serial: uartclk = 1843200
[    0.496968] 78af000.serial: ttyMSM0 at MMIO 0x78af000 (irq = 39, base_baud = 115200) is a MSM
[    0.497002] msm_serial: console setup on port #0
[    1.227764] printk: console [ttyMSM0] enabled
[    1.233072] msm_serial: driver initialized
[    1.243536] loop: module loaded
[    1.245493] nand: device found, Manufacturer ID: 0xef, Chip ID: 0xda
[    1.245548] nand: Winbond W29N02GV
[    1.252135] nand: 256 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    1.255481] 24 fixed-partitions partitions found on MTD device qcom_nand.0
[    1.262902] Creating 24 MTD partitions on "qcom_nand.0":
[    1.269717] 0x000000000000-0x000000100000 : "0:SBL1"
[    1.277097] 0x000000100000-0x000000200000 : "0:MIBIB"
[    1.281737] 0x000000200000-0x000000300000 : "0:BOOTCONFIG"
[    1.286659] 0x000000300000-0x000000400000 : "0:QSEE"
[    1.292101] 0x000000400000-0x000000500000 : "0:QSEE_1"
[    1.297163] 0x000000500000-0x000000580000 : "0:CDT"
[    1.301702] 0x000000580000-0x000000600000 : "0:CDT_1"
[    1.306421] 0x000000600000-0x000000680000 : "0:BOOTCONFIG1"
[    1.311715] 0x000000680000-0x000000700000 : "0:APPSBLENV"
[    1.317083] 0x000000700000-0x000000900000 : "0:APPSBL"
[    1.323980] 0x000000900000-0x000000b00000 : "0:APPSBL_1"
[    1.329025] 0x000000b00000-0x000000b80000 : "0:ART"
[    1.333268] OF: Bad cell count for /soc/nand-controller@79b0000/nand@0/partitions
[    1.336791] 0x000000b80000-0x000000c00000 : "0:ART.bak"
[    1.345484] 0x000000c00000-0x000000d00000 : "config"
[    1.350888] 0x000000d00000-0x000000d80000 : "boarddata1"
[    1.355670] OF: Bad cell count for /soc/nand-controller@79b0000/nand@0/partitions
[    1.359968] 0x000000d80000-0x000000dc0000 : "boarddata2"
[    1.368107] 0x000000dc0000-0x000000ec0000 : "pot"
[    1.374200] 0x000000ec0000-0x000000f40000 : "boarddata1.bak"
[    1.378224] 0x000000f40000-0x000000f80000 : "boarddata2.bak"
[    1.383729] 0x000000f80000-0x000001280000 : "language"
[    1.391893] 0x000001280000-0x000001300000 : "cert"
[    1.394532] 0x000001300000-0x00000a600000 : "ntgrdata"
[    1.532962] 0x00000a600000-0x00000ad00000 : "kernel"
[    1.540083] 0x00000ad00000-0x000010000000 : "ubi"
[    1.741175] i2c_dev: i2c /dev entries driver
[    1.741347] i2c_qup 78b7000.i2c: using default clock-frequency 100000
[    1.747482] sdhci: Secure Digital Host Controller Interface driver
[    1.750927] sdhci: Copyright(c) Pierre Ossman
[    1.756936] sdhci-pltfm: SDHCI platform and OF driver helper
[    1.764693] NET: Registered PF_INET6 protocol family
[    1.769071] Segment Routing with IPv6
[    1.772153] In-situ OAM (IOAM) with IPv6
[    1.775749] NET: Registered PF_PACKET protocol family
[    1.779647] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    1.784934] 8021q: 802.1Q VLAN Support v1.8
[    1.797721] Registering SWP/SWPB emulation handler
[    1.843793] qca8k-ipq4019 c000000.switch: configuring for fixed/internal link mode
[    1.844219] qca8k-ipq4019 c000000.switch: Link is Up - 1Gbps/Full - flow control rx/tx
[    2.052027] qca8k-ipq4019 c000000.switch lan1 (uninitialized): PHY [90000.mdio-1:03] driver [Qualcomm QCA8072] (irq=POLL)
[    2.130982] qca8k-ipq4019 c000000.switch lan2 (uninitialized): PHY [90000.mdio-1:04] driver [Qualcomm QCA8072] (irq=POLL)
[    2.132202] device eth0 entered promiscuous mode
[    2.141078] DSA: tree 0 setup
[    2.145987] ubi0: attaching mtd23
[    2.575548] ubi0: scanning is finished
[    2.582141] ubi0 error: ubi_read_volume_table: not enough PEBs, required 834, available 664
[    2.582579] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd23, error -28
[  [    2.620384] Freeing unused kernel image (initmem) memory: 12288K
[    2.620705] Run /init as init process
[    2.999926] init: Console is alive
[    3.000374] init: - watchdog -
[    3.014263] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    3.240589] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    3.240673] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 1
[    3.245243] xhci-hcd xhci-hcd.0.auto: hcc params 0x0228f665 hci version 0x100 quirks 0x0000008002010010
[    3.252692] xhci-hcd xhci-hcd.0.auto: irq 67, io mem 0x08a00000
[    3.262171] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    3.267835] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 2
[    3.273415] xhci-hcd xhci-hcd.0.auto: Host supports USB 3.0 SuperSpeed
[    3.281671] hub 1-0:1.0: USB hub found
[    3.287573] hub 1-0:1.0: 1 port detected
[    3.291777] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[    3.295927] hub 2-0:1.0: USB hub found
[    3.308601] hub 2-0:1.0: 1 port detected
[    3.309212] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    3.311665] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 3
[    3.317128] xhci-hcd xhci-hcd.1.auto: USB3 root hub has no ports
[    3.324491] xhci-hcd xhci-hcd.1.auto: hcc params 0x0220f665 hci version 0x100 quirks 0x0000008002010010
[    3.330790] xhci-hcd xhci-hcd.1.auto: irq 68, io mem 0x06000000
[    3.340781] hub 3-0:1.0: USB hub found
[    3.345760] hub 3-0:1.0: 1 port detected
[    3.353688] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    3.364068] init: - preinit -
[    3.590352] usb 1-1: new full-speed USB device number 2 using xhci-hcd
[    4.100289] random: crng init done
[    4.387580] ipqess-edma c080000.ethernet eth0: configuring for fixed/internal link mode
[    4.388323] qca8k-ipq4019 c000000.switch lan1: configuring for phy/psgmii link mode
[    4.394495] qca8k-ipq4019 c000000.switch: PSGMII calibration!
[    4.402154] ipqess-edma c080000.ethernet eth0: Link is Up - 1Gbps/Full - flow control rx/tx
[    5.912905] qca8k-ipq4019 c000000.switch: PSGMII work was stabilized after 2 calibration retries !
[    5.913332] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    8.045818] procd: - early -
[    8.046072] procd: - watchdog -
[    8.618967] procd: - watchdog -
[    8.619372] procd: - ubus -
[    8.774082] procd: - init -
Please press Enter to activate this console.
[    9.149993] kmodloader: loading kernel modules from /etc/modules.d/*
[    9.160985] Loading modules backported from Linux version v6.6.15-0-g51f354b815c4
[    9.161042] Backport generated by backports.git 193becf2
[    9.268667] PPP generic driver version 2.4.2
[    9.269915] NET: Registered PF_PPPOX protocol family
[    9.300083] ath10k 6.4 driver, optimized for CT firmware, probing pci device: 0x56.
[    9.301092] ath10k_pci 0000:01:00.0: enabling device (0140 -> 0142)
[    9.307314] ath10k_pci 0000:01:00.0: pci irq msi oper_irq_mode 2 irq_mode 0 reset_mode 0
[   10.004186] urngd: v1.0.2 started.
[   10.610750] ath10k_pci 0000:01:00.0: Failed to find firmware-N.bin (N between 2 and 6) from ath10k/QCA9888/hw2.0: -12
[   10.610840] ath10k_pci 0000:01:00.0: could not fetch firmware files (-12)
[   10.620446] ath10k_pci 0000:01:00.0: could not probe fw (-12)
[   11.468554] ath10k_ahb a000000.wifi: qca4019 hw1.0 target 0x01000000 chip_id 0x003b00ff sub 0000:0000
[   11.468626] ath10k_ahb a000000.wifi: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   11.480755] ath10k_ahb a000000.wifi: firmware ver 10.4b-ct-4019-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 6b2b5c5b
[   11.549564] ath10k_ahb a000000.wifi: board_file api 2 bmi_id 0:20 crc32 2d972a4b
[   12.839100] ath10k_ahb a000000.wifi: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   12.839173] ath10k_ahb a000000.wifi: msdu-desc: 2500  skid: 32
[   12.887940] ath10k_ahb a000000.wifi: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   12.888901] ath10k_ahb a000000.wifi: wmi print 'free: 53252 iram: 13432 sram: 35752'
[   13.027044] ath10k_ahb a000000.wifi: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-nvmem max-sta 32 raw 0 hwcrypto 1
[   13.987248] ath10k_ahb a800000.wifi: qca4019 hw1.0 target 0x01000000 chip_id 0x003b00ff sub 0000:0000
[   13.987319] ath10k_ahb a800000.wifi: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   13.999323] ath10k_ahb a800000.wifi: firmware ver 10.4b-ct-4019-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 6b2b5c5b
[   14.065040] ath10k_ahb a800000.wifi: board_file api 2 bmi_id 0:21 crc32 2d972a4b
[   15.354657] ath10k_ahb a800000.wifi: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   15.354731] ath10k_ahb a800000.wifi: msdu-desc: 2500  skid: 32
[   15.405087] ath10k_ahb a800000.wifi: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   15.406045] ath10k_ahb a800000.wifi: wmi print 'free: 53252 iram: 13432 sram: 35752'
[   15.546499] ath10k_ahb a800000.wifi: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-nvmem max-sta 32 raw 0 hwcrypto 1
[   15.669979] kmodloader: done loading kernel modules from /etc/modules.d/*
[   32.709713] ipqess-edma c080000.ethernet eth0: Link is Down
[   32.716785] ipqess-edma c080000.ethernet eth0: configuring for fixed/internal link mode
[   32.717062] ipqess-edma c080000.ethernet eth0: Link is Up - 1Gbps/Full - flow control rx/tx
[   32.724305] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   32.732777] qca8k-ipq4019 c000000.switch lan1: configuring for phy/psgmii link mode
[   32.739986] br-lan: port 1(lan1) entered blocking state
[   32.745955] br-lan: port 1(lan1) entered disabled state
[   32.751663] device lan1 entered promiscuous mode
[   32.773605] qca8k-ipq4019 c000000.switch lan2: configuring for phy/psgmii link mode
[   32.774898] br-lan: port 2(lan2) entered blocking state
[   32.780110] br-lan: port 2(lan2) entered disabled state
[   32.785981] device lan2 entered promiscuous mode
[   35.830656] qca8k-ipq4019 c000000.switch lan1: Link is Up - 1Gbps/Full - flow control rx/tx
[   35.830754] br-lan: port 1(lan1) entered blocking state
[   35.837844] br-lan: port 1(lan1) entered forwarding state
[   35.844383] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready



BusyBox v1.36.1 (2024-03-26 20:56:57 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r25671-29515862ac
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/#

Tu firmware RBS40, też z ww serwera:

###########################################
#9 #################################################################
#9 #################################################################
#9 #################################################################
#9 #################################################################
#9 #################################################################
#9 ######
  Compression:  uncompressed
     Data Start:   0x840000e4
     Data Size:    6765768 Bytes = 6.5 MiB
     Architecture: ARM
     OS:           Linux
     Load Address: 0x80208000
     Entry Point:  0x80208000
     Hash algo:    crc32
     Hash value:   0e48eaeb
     Hash algo:    sha1
     Hash value:   2281e10a84b02d7e2ea7420fc250a8aae4ea723f
   Verifying Hash Integrity ... crc32
#
#9 ########################
done
Bytes transferred = 6786084 (678c24 hex)
## Booting kernel from FIT Image at 84000000 ...
   Using 'config@1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM OpenWrt Linux-6.1.82
     Type:         Kernel Image
   
####################
setenv serverip 192.168.1.12; set fdt_high 0x84000000; tftpboot 0x84000000 imageRBS40; bootm 0x84000000

eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 up Speed :1000 Full duplex
eth0 PHY4 Down Speed :10 Half duplex
Using eth0 device
TFTP from server 192.168.1.12; our IP address is 192.168.1.9
Filename 'imageRBS40'.
Load address: 0x84000000
Loading: *############################################
+ sha1
  0x84673ee4
     Data Size:    18431 Bytes = 18 KiB
     Architecture: ARM
     Hash algo:    crc32
     Hash value:   4e0eec1e
     Hash algo:    sha1
     Hash value:   e67ed0137ec7f0a5200899006ade6ab21a8aa9c3
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x84673ee4
   Loading Kernel Image ... 
+ OK
## Flattened Device Tree from FIT Image at 84000000
   Using 'config@1' configuration
   Trying 'fdt-1' FDT blob subimage
     Description:  ARM OpenWrt netgear_rbs40 device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start: 
OK
OK
   Loading Device Tree to 83ff8000, end 83fff7fe ... OK
Device nand2 not found!
eth0 MAC Address from ART is not valid
eth1 MAC Address from ART is not valid
Using machid 0x8010006 from environment

Starting kernel ...

4019 c000000.switch lan3 (uninitialized): PHY [90000.mdio-1:03] driver [Qualcomm QCA8072] (irq=POLL)
[    1.929602] device eth0 entered promiscuous mode
[    1.9˙[    1.967181] Freeing unused kernel image (initmem) memory: 12288K
[    1.977994] Run /init as init process
internal link mode
[    1.484127] qca8k-ipq4019 c000000.switch: Link is Up - 1Gbps/Full - flow control rx/tx
[    1.689461] qca8k-ipq4019 c000000.switch wan (uninitialized): PHY [90000.mdio-1:00] driver [Qualcomm QCA8072] (irq=POLL)
[    1.768426] qca8k-ipq4019 c000000.switch lan1 (uninitialized): PHY [90000.mdio-1:01] driver [Qualcomm QCA8072] (irq=POLL)
[    1.848421] qca8k-ipq4019 c000000.switch lan2 (uninitialized): PHY [90000.mdio-1:02] driver [Qualcomm QCA8072] (irq=POLL)
[    1.928430] qca8k-ipq
v6
[    1.404016] In-situ OAM (IOAM) with IPv6
[    1.407618] NET: Registered PF_PACKET protocol family
[    1.411618] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    1.416833] 8021q: 802.1Q VLAN Support v1.8
[    1.427500] mmc0: SDHCI controller on 7824900.mmc [7824900.mmc] using ADMA 64-bit
[    1.429691] Registering SWP/SWPB emulation handler
[    1.483756] qca8k-ipq4019 c000000.switch: configuring for fixed/
0.serial: uartclk = 1843200
[    0.484452] 78af000.serial: ttyMSM0 at MMIO 0x78af000 (irq = 35, base_baud = 115200) is a MSM
[    0.484485] msm_serial: console setup on port #0
[    1.250143] printk: console [ttyMSM0] enabled
[    1.255431] msm_serial: driver initialized
[    1.265839] loop: module loaded
[    1.368655] i2c_dev: i2c /dev entries driver
[    1.368930] i2c_qup 78b7000.i2c: using default clock-frequency 100000
[    1.374933] sdhci: Secure Digital Host Controller Interface driver
[    1.378384] sdhci: Copyright(c) Pierre Ossman
[    1.384415] sdhci-pltfm: SDHCI platform and OF driver helper
[    1.389764] sdhci_msm 7824900.mmc: Got CD GPIO
[    1.392068] NET: Registered PF_INET6 protocol family
[    1.400837] Segment Routing with IP[    2.370190] init: Console is alive
[    2.370658] init: - watchdog -
[    2.384792] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    2.406515] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    2.414027] init: - preinit -
0.dma-controller: num-ees unspecified in dt
[    0.481073] tcsr 1949000.tcsr: setting wifi_glb_cfg = 41000000
[    0.481175] tcsr 194b000.tcsr: setting usb hs phy mode select = e700e7
[    0.481265] tcsr 1953000.ess_tcsr: setting ess interface select = 0
[    0.481387] tcsr 1957000.tcsr: setting wifi_noc_memtype_m0_m2 = 2222222
[    0.482103] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.484285] msm_serial 78af000.serial: msm_serial: detected port #0
[    0.484333] msm_serial 78af00
m 0x40400000-0x405fffff]
[    0.473843] pci 0000:00:00.0: BAR 0: assigned [mem 0x40300000-0x40300fff]
[    0.473864] pci 0000:01:00.0: BAR 0: assigned [mem 0x40400000-0x405fffff 64bit]
[    0.473950] pci 0000:00:00.0: PCI bridge to [bus 01-ff]
[    0.473965] pci 0000:00:00.0:   bridge window [mem 0x40400000-0x405fffff]
[    0.477102] pcieport 0000:00:00.0: AER: enabled with IRQ 31
[    0.479518] bam-dma-engine 8e04000.dma-controller: num-channels unspecified in dt
[    0.479538] bam-dma-engine 8e0400
] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x00000fff]
[    0.470160] pci 0000:00:00.0: PME# supported from D0 D3hot
[    0.471762] PCI: bus0: Fast back to back transfers disabled
[    0.472029] pci 0000:01:00.0: [168c:0056] type 00 class 0x028000
[    0.472196] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x001fffff 64bit]
[    0.472964] pci 0000:01:00.0: PME# supported from D0 D3hot
[    0.473781] PCI: bus1: Fast back to back transfers disabled
[    0.473824] pci 0000:00:00.0: BAR 8: assigned [me
  0.369650] qcom-pcie 40000000.pci: iATU regions: 32 ob, 8 ib, align 4K, limit 4G
[    0.469773] qcom-pcie 40000000.pci: PCIe Gen.1 x1 link up
[    0.469957] qcom-pcie 40000000.pci: PCI host bridge to bus 0000:00
[    0.469973] pci_bus 0000:00: root bus resource [bus 00-ff]
[    0.469991] pci_bus 0000:00: root bus resource [io  0x0000-0xfffff]
[    0.470004] pci_bus 0000:00: root bus resource [mem 0x40300000-0x40ffffff]
[    0.470055] pci 0000:00:00.0: [17cb:1001] type 01 class 0x060400
[    0.470086
3] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.193212] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 248)
[    0.195136] qcom-pcie 40000000.pci: host bridge /soc/pci@40000000 ranges:
[    0.195197] qcom-pcie 40000000.pci:       IO 0x0040200000..0x00402fffff -> 0x0000000000
[    0.195229] qcom-pcie 40000000.pci:      MEM 0x0040300000..0x0040ffffff -> 0x0040300000
[    0.369633] qcom-pcie 40000000.pci: iATU unroll: disabled
[  
5536 bytes, linear)
[    0.052018] TCP: Hash tables configured (established 4096 bind 4096)
[    0.052168] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.052214] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.052587] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.052645] PCI: CLS 0 bytes, default 64
[    0.053895] workingset: timestamp_bits=14 max_order=17 bucket_order=3
[    0.061132] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.06115
vice driver usb
[    0.045295] pps_core: LinuxPPS API ver. 1 registered
[    0.045301] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    0.045326] PTP clock support registered
[    0.047717] clocksource: Switched to clocksource arch_sys_counter
[    0.049368] NET: Registered PF_INET protocol family
[    0.049638] IP idents hash table entries: 8192 (order: 4, 65536 bytes, linear)
[    0.051714] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.051756] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.051776] TCP established hash table entries: 4096 (order: 2, 16384 bytes, linear)
[    0.051863] TCP bind hash table entries: 4096 (order: 4, 6
.015432] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.015463] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[    0.015808] pinctrl core: initialized pinctrl subsystem
[    0.017793] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.018222] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.019504] thermal_sys: Registered thermal governor 'step_wise'
[    0.019875] cpuidle: using governor ladder
[    0.019921] cpuidle: using governor menu
[    0.043096] cryptd: max_cpu_qlen set to 1000
[    0.045142] usbcore: registered new interface driver usbfs
[    0.045200] usbcore: registered new interface driver hub
[    0.045252] usbcore: registered new de
1.
[    0.004522] Setting up static identity map for 0x80300000 - 0x8030003c
[    0.004673] rcu: Hierarchical SRCU implementation.
[    0.004682] rcu: #9Max phase no-delay instances is 1000.
[    0.005350] smp: Bringing up secondary CPUs ...
[    0.008827] smp: Brought up 1 node, 4 CPUs
[    0.008847] SMP: Total of 4 processors activated (384.00 BogoMIPS).
[    0.008859] CPU: All CPU(s) started in SVC mode.
[    0.015239] VFP support v0.3: implementor 41 architecture 2 part 30 variant 7 rev 5
[    0
.. 96.00 BogoMIPS (lpj=480000)
[    0.000307] CPU: Testing write buffer coherency: ok
[    0.000361] pid_max: default: 32768 minimum: 301
[    0.001244] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.001266] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.003253] qcom_scm: convention: smc legacy
[    0.004351] cblist_init_generic: Setting adjustable number of callback queues.
[    0.004363] cblist_init_generic: Setting shift to 2 and lim to 
0000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[    0.000000] arch_timer: cp15 timer(s) running at 48.00MHz (virt).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0xb11fd3bfb, max_idle_ns: 440795203732 ns
[    0.000001] sched_clock: 56 bits at 48MHz, resolution 20ns, wraps every 4398046511096ns
[    0.000018] Switching to timer-based delay loop, resolution 20ns
[    0.000285] Calibrating delay loop (skipped), value calculated using timer frequency

[    0.000000] Memory: 494548K/524288K available (7098K kernel code, 618K rwdata, 1896K rodata, 12288K init, 253K bss, 29740K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000] #9Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[    0.00
T)ro,256K(ARTMTD)ro,2M(language)ro,256K(config)ro,256K(pot)ro,256K(traffic_meter)ro,256K(pot_bak)ro,256K(traffic_meter.bak)ro,3840K(kernel),31488K(rootfs),35328K@9233K(firmware),256K(mtdoops)ro,1457651200(reserved)ro,-(unallocated) rootfstype=squashfs,ext4 rootwait
[    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes, linear)
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
0009fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000080000000-0x000000009fffffff]
[    0.000000] percpu: Embedded 12 pages/cpu s20436 r8192 d20524 u49152
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 129920
[    0.000000] Kernel command line: root=/dev/mmcblk0p20 blkdevparts=mmcblk0:512K@17K(0:SBL1)ro,512K(0:BOOTCONFIG)ro,512K(0:QSEE)ro,512K(0:QSEE_ALT)ro,256K(0:CDT)ro,256K(0:CDT_ALT)ro,256K(0:DDRPARAMS)ro,256K(0:APPSBLENV)ro,1M(0:APPSBL)ro,1M(0:APPSBL_ALT)ro,256K(0:AR
dt: Machine model: NETGEAR RBS40
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000080000000-0x000000009fffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000080000000-0x0000000087dfffff]
[    0.000000]   node   0: [mem 0x0000000087e00000-0x0000000087ffffff]
[    0.000000]   node   0: [mem 0x0000000088000000-0x00000
[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 6.1.82 (builder@buildhost) (arm-openwrt-linux-muslgnueabi-gcc (OpenWrt GCC 13.2.0 r25671-29515862ac) 13.2.0, GNU ld (GNU Binutils) 2.40.0) #0 SMP Tue Mar 26 20:56:57 2024
[    0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=10c5387d
[    0.000000] CPU: div instructions available: patching division code
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] OF: f
[    5.277723] random: crng init done
[    5.566164] ipqess-edma c080000.ethernet eth0: configuring for fixed/internal link mode
[    5.566941] qca8k-ipq4019 c000000.switch lan1: configuring for phy/psgmii link mode
[    5.573082] qca8k-ipq4019 c000000.switch: PSGMII calibration!
[    5.580743] ipqess-edma c080000.ethernet eth0: Link is Up - 1Gbps/Full - flow control rx/tx
[    6.469629] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    8.651918] procd: - early -
[    8.652170] procd: - watchdog -
[    9.199004] procd: - watchdog -
[    9.199403] procd: - ubus -
[    9.353919] procd: - init -
Please press Enter to activate this console.
[    9.730376] kmodloader: loading kernel modules from /etc/modules.d/*
[    9.741890] Loading modules backported from Linux version v6.6.15-0-g51f354b815c4
[    9.741947] Backport generated by backports.git 193becf2
[    9.865980] PPP generic driver version 2.4.2
[    9.867221] NET: Registered PF_PPPOX protocol family
[    9.897281] ath10k 6.4 driver, optimized for CT firmware, probing pci device: 0x56.
[    9.898380] ath10k_pci 0000:01:00.0: enabling device (0140 -> 0142)
[    9.904523] ath10k_pci 0000:01:00.0: pci irq msi oper_irq_mode 2 irq_mode 0 reset_mode 0
[   10.554453] urngd: v1.0.2 started.
[   11.252614] ath10k_pci 0000:01:00.0: Failed to find firmware-N.bin (N between 2 and 6) from ath10k/QCA9888/hw2.0: -12
[   11.252685] ath10k_pci 0000:01:00.0: could not fetch firmware files (-12)
[   11.262340] ath10k_pci 0000:01:00.0: could not probe fw (-12)
[   12.135108] ath10
 12.179093] ath10k_ahb a000000.wifi: failed to fetch board data for bus=ahb,vendor=0000,device=0000,subsystem-vendor=0000,subsystem-device=0000,variant=Netgear-Orbi-Pr from ath10k/QCA4019/hw1.0/board-2.bin
k_ahb a000000.wifi: qca4019 hw1.0 target 0x01000000 chip_id 0x003b00ff sub 0000:0000
[   12.135186] ath10k_ahb a000000.wifi: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   12.147251] ath10k_ahb a000000.wifi: firmware ver 10.4b-ct-4019-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 6b2b5c5b
[  [   12.374287] ath10k_ahb a000000.wifi: failed to fetch board-2.bin or board.bin from ath10k/QCA4019/hw1.0
[   12.374366] ath10k_ahb a000000.wifi: failed to fetch board file: -12
[   12.382791] ath10k_ahb a000000.wifi: could not probe fw (-12)
[   13.265050] ath10k_ahb a800000.wifi: qca401
0000.wifi: failed to fetch board data for bus=ahb,vendor=0000,device=0000,subsystem-vendor=0000,subsystem-device=0000,variant=Netgear-Orbi-Pr from ath10k/QCA4019/hw1.0/board-2.bin
5476] kmodloader: done loading kernel modules from /etc/modules.d/*
9 hw1.0 target 0x01000000 chip_id 0x003b00ff sub 0000:0000
[   13.265125] ath10k_ahb a800000.wifi: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   13.277108] ath10k_ahb a800000.wifi: firmware ver 10.4b-ct-4019-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 6b2b5c5b
[   13.308968] ath10k_ahb a80[   13.504818] ath10k_ahb a800000.wifi: failed to fetch board-2.bin or board.bin from ath10k/QCA4019/hw1.0
[   13.504881] ath10k_ahb a800000.wifi: failed to fetch board file: -12
[   13.513315] ath10k_ahb a800000.wifi: could not probe fw (-12)
[   13.52
87] device lan2 entered promiscuous mode
[   23.225982] qca8k-ipq4019 c000000.switch lan3: configuring for phy/psgmii link mode
[   23.227438] br-lan: port 3(lan3) entered blocking state
[   23.232599] br-lan: port 3(lan3) entered disabled state
[   23.238322] device lan3 entered promiscuous mode
[   23.253297] qca8k-ipq4019 c000000.switch wan: configuring for phy/psgmii link mode
NGE): eth0: link becomes ready
[   23.161223] qca8k-ipq4019 c000000.switch lan1: configuring for phy/psgmii link mode
[   23.167059] br-lan: port 1(lan1) entered blocking state
[   23.172987] br-lan: port 1(lan1) entered disabled state
[   23.178701] device lan1 entered promiscuous mode
[   23.200039] qca8k-ipq4019 c000000.switch lan2: configuring for phy/psgmii link mode
[   23.201229] br-lan: port 2(lan2) entered blocking state
[   23.206541] br-lan: port 2(lan2) entered disabled state
[   23.2123
[   23.137094] ipqess-edma c080000.ethernet eth0: Link is Down
[   23.143802] ipqess-edma c080000.ethernet eth0: configuring for fixed/internal link mode
[   23.144087] ipqess-edma c080000.ethernet eth0: Link is Up - 1Gbps/Full - flow control rx/tx
[   23.151158] IPv6: ADDRCONF(NETDEV_CHA
[   26.318704] qca8k-ipq4019 c000000.switch lan3: Link is Up - 1Gbps/Full - flow control rx/tx
[   26.318802] br-lan: port 3(lan3) entered blocking state
[   26.325888] br-lan: port 3(lan3) entered forwarding state
[   26.331432] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
 E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r25671-29515862ac
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# 



BusyBox v1.36.1 (2024-03-26 20:56:57 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E

root@OpenWrt:/# 

Tak jak przewidziałeś na LBR20 poszło WiFi, na RBS40 jest failed.

23

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

LBR20 jest chyba pierwszym wspieranym urządzeniem z pamięcią NAND od Netgear'a na architekturze ipq40xx.
Tworząc wsparcie musisz się wzorować na pracy @MiG25 nad LBR20 bo u Ciebie też jest pamięć NAND.

24

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

Więc przeczytaj cały wątek o LBR20, bo trochę informacji tam znajdziesz.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

25

Odp: Netgear Orbi RBS40V (Voice) - bezpośredni dostęp do mikrofaonu i audio

Coś z tymi logami generalnie jest nie tak. Linie pokazują się nie po kolei , można poznać po tych znacznikach czasowych ( np w logu ze startu initramfs z LBR , najpierw są linie ze znacznikiem 2.13...  , później 1.8 , gdzieś w środku z 0.4 ).

I to we wszystkich to jest. Poszukaj jeszcze może ,coś jeszcze jest nie tak....