Netgear AirCard AC785(S), AC790(S), AC810(S) - Обсуждение | [wifirouter]Обсуждение LTE роутеров Netgear



Реп: (60)
Обсуждение Netgear AirCard AC785(S), AC790(S), AC810(S)

Обсуждаем LTE роутеры Netgear AirCard

Характеристики последних трех моделей роутеров Netgear
Для России актуальны европейские версии роутеров (не залоченные). Для них в нумерации никаких букв в конце номера модели не ставится.
Netgear AirCard AC785 Mobile Hotspot
URL на европейский сайт Netgear
Роутер на чипсете Qualcomm MDM9225, LTE cat.4, агрегации нет, скорость до 150Мбит/c
SKU код, указанный на коробке, для единой европейской модели: AC785-100EUS
Поддерживаемые частоты:
LTE FDD: B1, B3, B7, B8, B20
LTE TDD: B38
3G: 850/900/2100 MHz
2G: 900/1800 MHz

Аккумулятор для AC875: NETGEAR W-3
Емкость: 2000 mAh (3.7V, 7.4Wh)
Netgear AirCard AC790 Mobile Hotspot
URL на европейский сайт Netgear
Роутер на чипсете Qualcomm MDM9230, LTE cat.6, агрегация двух полос, скорость до 300Мбит/c
SKU код, указанный на коробке, для единой европейской модели: AC790-100EUS
Поддерживаемые частоты:
LTE FDD: B1, B3, B7, B8, B20
LTE TDD: B38, B40
LTE CA: B3+B20, B3+B7, B7+B20, B3+B3, B7+B7, B38+B38
3G: 850/900/1900/2100
2G: не поддерживается

Аккумулятор для AC790: NETGEAR W-7
Емкость: 2930 mAh (3.8V, 11.8Wh)
Netgear AirCard AC810 Mobile Hotspot
URL на европейский сайт Netgear
Роутер на чипсете Qualcomm MDM9240,
SKU код, указанный на коробке, для единой европейской модели: AC810-100EUS
На коробке с роутером указано - LTE cat.9, агрегация трех полос, скорость до 450Мбит/c
На сайте и в даташите указано - LTE cat.11, агрегация трех полос, скорость до 600Мбит/c
Поддерживаемые частоты:
LTE FDD: B1, B3, B7, B8, B20
LTE TDD: B38, B40, B41
LTE 2CA: B1+B8, B1+B20, B3+B3, B3+B7, B7+B7, B3+B8, B3+B20, B3+B38, B20+B20, B38+B38, B41+B41
LTE 3CA: B3+B3+B7, B3+B3+B20, B3+B7+B7, B3+B7+B20, b40+B40+B40, B41+B41+B41
3G: 850/900/1900/2100
2G: не поддерживается

Аккумулятор для AC810: NETGEAR W-7
Емкость: 2930 mAh (3.8V, 11.8Wh)

Операторские версии роутеров идут с буквой S на конце номера модели:
Отличаются LTE диапазонами для конкретного оператора, и обычно идут залочены под него.
К примеру:
Netgear AirCard AC810S для австралийского оператора Telstra
Роутер на чипсете Qualcomm MDM9240, LTE cat.11, агрегация трех полос, скорость до 600Мбит/c
http://www.netgear.com…d/hotspots/AC810S.aspx
SKU код: AC810S-1TLAUS
LTE FDD: B1, B3, B7, B8, B28 (частоты австралийские, нашего B20 нет. Из-за этого пользы в России не так много)
LTE TDD: не поддерживается (нашего B38 нет)
LTE 2CA: B3+B28, B3+B7, B7+B28, B7+B7
LTE 3CA: B28+B3+B7, B3+B7+B7, B28+B7+B7
3G: 850/900/1900/2100
2G: не поддерживается
Netgear AirCard AC810S для польского оператора Play
Роутер на чипсете Qualcomm MDM9240, LTE cat.9, агрегация трех полос, скорость до 450Мбит/c
http://www.play.pl/tel…netgear-router-ac810s/
SKU код: AC810S-1P1PLS
LTE FDD: B1, B3, B7, B8, B20
LTE TDD: B38, B40, B41
LTE 2CA: B1+B8, B1+B20, B3+B3, B3+B7, B7+B7, B3+B8, B3+B20, B3+B38, B20+B20, B38+B38, B41+B41
LTE 3CA: B3+B3+B7, B3+B3+B20, B3+B7+B7, B3+B7+B20, b40+B40+B40, B41+B41+B41
3G: 850/900/1900/2100
2G: не поддерживается

Роутер не залочен на оператора Play. Работают любые симкарты.
По частотам и характеристикам, польский роутер AC810S-1P1PLS полностью аналогичен европейской версии AC810-100EUS.
Netgear AirCard AC810S для американского оператора Sprint
Роутер на чипсете Qualcomm MDM9640, LTE cat.9, агрегация трех полос, скорость до 450Мбит/c
Роутер с поддержкой CDMA / RTT / Ev-Do
SKU код: AC810S-1SNNAS
LTE FDD: B2, B4, B5, B12, B25, B26
LTE TDD: B41
CDMA/Ev-Do: 800, 850, 1900
3G: Band II, IV, V
2G: не поддерживается
Netgear AirCard AC815S для американского оператора AT&T
Роутер на чипсете Qualcomm MDM9240, LTE cat.9, агрегация трех (двух ???) полос, скорость до 450Мбит/c
- пыле-влаго защищенный корпус (IP65)
- аккумулятор повышенной емкости 4340 mAh
http://www.netgear.com…/AC815S.aspx?cid=gwmng
SKU код: AC815S-1A1NAS
LTE FDD: B2, B4, B5, B7, B12, B30
LTE TDD: не поддерживается
LTE CA: ???
3G: Band II, V
2G: 850, 1900
Полезная информация по роутерам Netgear
Сборник доработок
Доступ к AT-порту роутера
Четыре способа:

1. Через штатный драйвер (работает на любых AC78X, AC79X, AC81X)
- Качаем драйвер портов AC78xSDrivers.exe с сайта netgear.
- устанавливаем драйвер, после чего в системе появятся три виртуальных порта COMxx:
NETGEAR WWAN Modem VSP
NETGEAR DM Port VSP
NETGEAR NMEA Port VSP
- подключаем роутер USB-шнурком к компьютеру.
- стучимся в виртуальный порт "NETGEAR WWAN Modem VSP" терминалкой.

2. Доступ напрямую к порту без установки драйвера, по USB-шнурку через сетевой интерфейс RNDIS
В роутерах Netgear - AT порт активен также в режиме AT port over TCP. Для использования:
- подключаем роутер USB-шнурком к компьютеру.
- Используем к примеру Putty или любой другой терминал и в настройках выбираем
HostName: 192.168.1.1
Port: 5510
ConnectionType: Telnet

3. Доступ напрямую к порту, через Wi-Fi соединение
По умолчанию доступ в порт 5510 через Wi-Fi заблокирован. Для обхода нужно поменять номер порта на другое значение.
подключаться по Wi-Fi можно будет по аналогии с примером выше:
HostName: 192.168.1.1
Port: XXXX(который выставите в конфиге)
ConnectionType: Telnet

Подробности по смене порта от sandwern

Внимание!
Стандартный пароль от Sierra "A710" - не подходит к роутерам Netgear для разблокировки расширенных AT-команд

Netgear использует свои изменённые пароли. Причем для разных моделей - пароли тоже разные.
Для Aircard AC810-100EUS блокировка с расширенных AT-команд снимается через AT!ENTERCND="whistler"
Для Aircard AC810S-1P1PLS блокировка с расширенных AT-команд снимается через AT!ENTERCND="seymour"
Для Aircard AC810S-1TLAUS блокировка с расширенных AT-команд снимается через AT!ENTERCND="grouse"
Для Aircard AC810S-1RDQAS блокировка с расширенных AT-команд снимается через AT!ENTERCND="cypress"
Для Aircard AC790-100EUS блокировка с расширенных AT-команд снимается через AT!ENTERCND="lavender"
Для прочих Aircard ACxxx - пароли ещё не известны. Но при желании его всегда можно попытаться узнать из самого роутера...
Достаточно снять дамп разделов флешки и его оттуда вытащить...
Доступ к диагностическому порту роутера (для QPST, QXDM и т.д.
Два варианта:
1. Через штатный драйвер от Netgear
- Качаем драйвер портов AC78xSDrivers.exe с сайта netgear.
- устанавливаем драйвер, после чего в системе появятся три виртуальных порта COMxx:
NETGEAR WWAN Modem VSP
NETGEAR DM Port VSP
NETGEAR NMEA Port VSP
- подключаем роутер USB-шнурком к компьютеру.
- Устанавливаем QPST, и в настройках выбираем порт "NETGEAR DM Port VSP"
QPST 2.7.437 взять можно тут или 2.7.441 тут

2. Доступ напрямую к порту без установки драйвера
В роутере AC810 - диагностический порт активен также в режиме DM port over TCP
Значения по умолчанию:
HostName: 192.168.1.1
Port: 5511

Для использования совместно с QPST, добавляем эти значения в формате IP:PORT на вкладке Ports > Add New Port > Outgoing IP Connections.
По умолчанию, доступ к порту 5511 открыт только при подключении роутера к компьютеру по USB-кабелю.
Если хотите получить работу с диангостическим портом через Wi-Fi, то нужно поменять номер порта на другое значение.

Подробности по смене диагностического порта от sandwern
Определение параметров несущих при работе в режиме агрегации (Carrier Aggregation)
Актуально для AC790 и AC810.

Параметры несущих участвующих в режиме агрегации (Carrier Aggregation) - не видны в Web-интерфейсе роутера. Там отображаются данные только по основной несущей. Узнать параметры всех несущих можно только с помощью AT-команд.
Чтобы их увидеть нужно:
1. Запустить закачку и дождаться отображения на дисплее роутера значка LTE-A.
2. отправить команду AT!GSTATUS?

В ответе в секции "PCC:" будут параметры основной несущей. В секциях "SCC1:" и "SCC2:" по дополнительным.

пример от Sandwern. Агрегация B7 (20Mhz) + B7 (20Mhz):
AT!GSTATUS?
!GSTATUS:
Current Time: 254 Mode: ONLINE
System mode: LTE PS state: Attached
EMM state: Registered Normal Service
RRC state: RRC Connected
IMS reg state: No Srv

PCC:
LTE band: B7
LTE bw: 20 MHz
LTE Rx chan: 2850
LTE Tx chan: 20850
RSSI (dBm): -73.5
RSRP (dBm): -101.5
RSRQ (dB): -7.2
RSSNR (dB): 19
Tx Power (dBm): 11.0
LTE Cell ID: 253717762
Physical Cell ID: 29
TAC: 9987

SCC1:
LTE band: B7
LTE bw: 20 MHz
LTE Rx chan: 3048
RSSI (dBm): -78.3
RSRP (dBm): -97.1
RSRQ (dB): -9.7
Physical Cell ID: 29

OK

Настройка пользовательских профилей для AT!BAND


Сообщение отредактировал M|A|G - 04.09.21, 15:21



Реп: (7)
* sandwern,
* vvevvevve,
Коллеги, Вы меня запутали окончательно... Спасибо огромное за помощь, но я так и не понял, на каком устройстве остановится...Huawei Е5787 - купить не представляется возможным (либо я слепой),
E5786 - старый...
Сабж - что-то тоже отговариваете. Какой роутер сейчас топ? Чтобы использовать Мегафон в Северной столице и В Москве? Однозначного решения я так понимаю нет?



Реп: (77)
batareika85 @ 04.02.17, 16:58 *
Однозначного решения я так понимаю нет?


Согласен. Каждое устройство имеет свои достоинства и недостатки.

Кстати, надо еще упомянуть про ZTE UFi MF970 LTE Cat6 - он есть на Aliexpress, тоже работает с LTE-A, только поддерживаемые частоты надо еще раз проверить.
Много вариантов есть, но в России продаются лишь некоторые модели. E5786 тоже будет работать, хотя о нем отзывы разнятся, но критических проблем с LTE-A 2CA МегаФона не замечено (на основе отзывов пользователей в теме).

Если позволите, напишу маленький алгоритм, как выбрать нужную модель.

1. Уточняете частоты операторов. Уточняете комбинации агрегации (какие диапазоны используется в LTE-A. Можно звонком оператору).
2. Осуществляете поиск устройств. Сверяете диапазоны и комбинации, заявленные производителем. Если есть сомнения, можно спросить в теме устройства на 4PDA, если таковая имеется.
3. Если необходимые диапазоны и комбинации поддерживаются, осуществляете поиск отзывов пользователей в интернете.
4. Если отзывы положительные и проблем нет, то устройство можно сделать кандидатом к покупке. Осталось еще раз оценить характеристики, в т.ч. емкость аккумулятора, а затем выбрать продавца и уточнить условия гарантии.
5. Среди кандидатов на покупку выбираете наиболее симпатичный вариант. Приобретаете, радуетесь. Или сообщаете о багах (в т.ч. ранее неизвестных).

Как видите, самый сложный шаг лишь первый, остальные просто требуют времени. Просто, как в магазине, который заинтересован Вам продать определенное устройство, в данном случае поступить нельзя, по этой причине, выбор только за Вами.

Вообще, есть тема такая: Выбор и сравнение беспроводных модемов и мобильных роутеров
То модераторы здесь нас могут наказать.

Для начала определитесь просто:
1. Максимальный бюджет;
2. Нужна ли поддержка GSM;
3. Готовы ли возиться или надо, чтобы из коробки всё работало.

Ну и наверно всё. ;)



Реп: (1433)
sandwern @ 04.02.17, 16:58 *
На сайте Ericsson есть еще упоминание. Но и это не считается, т.к. мог использоваться инженерный образец и специальная прошивка

На самом деле, это уже лучше. Да, пусть инженерный образец, пусть специальная прошивка...но принципиально это возможно, получается. Едва ли в промышленных образцах что-то так сломали, что перестало работать. И та прошивка - она ведь тоже никуда не потерялась: если с ней работало, то, значит, можно сделать так же и в "боевой" версии.



Реп: (1433)
batareika85 @ 04.02.17, 16:58 *
Какой роутер сейчас топ?

Если Вы выбираете устройство по критерию "чтоб самое крутое", то так и скажите. Тогда всё, что написал выше sandwern, для Вас не имеет значения. И Вам нужно просто дождаться появления MR1100 в продаже - круче его нет, и ещё очень долго не будет.



Реп: (77)
Если вдруг кому интересно, прикрепляю лог dmesg после загрузки.

Программа dmesg выводит список всего оборудования, обнаруженного ядром.

[ 0.000000] Booting Linux on physical CPU 0x0
[ 0.000000] Initializing cgroup subsys cpu
[ 0.000000] Initializing cgroup subsys cpuacct
[ 0.000000] Linux version 3.10.49-svn4120 (ntgrbuild@ntgrbc-fwbuild4) (gcc version 4.8.1 (GCC) ) #1 PREEMPT Tue Feb 23 15:58:23 PST 2016
[ 0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=10c53c7d
[ 0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[ 0.000000] Machine: Qualcomm Technologies, Inc. MSM 9640 (Flattened Device Tree), model: Netgear AC810S
[ 0.000000] cma: Found peripheral1_region@0x81c00000, memory base 0x81c00000, size 85 MiB, limit 0xffffffff
[ 0.000000] cma: Found peripheral2_region@0x87d00000, memory base 0x87d00000, size 3 MiB, limit 0xffffffff
[ 0.000000] cma: Found netgear_region@0x8ff00000, memory base 0x8ff00000, size 1 MiB, limit 0xffffffff
[ 0.000000] cma: CMA: reserved 85 MiB at 0x81c00000 for peripheral1_mem
[ 0.000000] cma: CMA: reserved 3 MiB at 0x87d00000 for peripheral2_mem
[ 0.000000] cma: CMA: reserved 1 MiB at 0x8ff00000 for netgear_smem
[ 0.000000] cma: CMA: reserved 16 MiB at 0x8ec00000 for default region
[ 0.000000] Memory policy: ECC disabled, Data cache writeback
[ 0.000000] On node 0 totalpages: 42752
[ 0.000000] free_area_init_node: node 0, pgdat c089d378, node_mem_map c09b3000
[ 0.000000] Normal zone: 512 pages used for memmap
[ 0.000000] Normal zone: 0 pages reserved
[ 0.000000] Normal zone: 42752 pages, LIFO batch:7
[ 0.000000] HighMem zone: 1048574 pages exceeds freesize 0
[ 0.000000] CPU: All CPU(s) started in SVC mode.
[ 0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[ 0.000000] pcpu-alloc: [0] 0
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 42240
[ 0.000000] Kernel command line: noinitrd rw console=ttyHSL0,115200,n8 androidboot.hardware=qcom ehci-hcd.park=3 msm_rtb.filter=0x37 androidboot.serialno=34d920 androidboot.baseband=msm rootfstype=ubifs rootflags=bulk_read root=ubi0:rootfs ubi.mtd=13
[ 0.000000] PID hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
[ 0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
[ 0.000000] Memory: 142700K/171008K available (5886K kernel code, 391K rwdata, 2280K rodata, 246K init, 1092K bss, 28308K reserved, 0K highmem)
[ 0.000000] Virtual kernel memory layout:
[ 0.000000] vector : 0xffff0000 - 0xffff1000 ( 4 kB)
[ 0.000000] fixmap : 0xfff00000 - 0xfffe0000 ( 896 kB)
[ 0.000000] vmalloc : 0xd0800000 - 0xff000000 ( 744 MB)
[ 0.000000] lowmem : 0xc0000000 - 0xd0000000 ( 256 MB)
[ 0.000000] pkmap : 0xbfe00000 - 0xc0000000 ( 2 MB)
[ 0.000000] modules : 0xbf000000 - 0xbfe00000 ( 14 MB)
[ 0.000000] .text : 0xc0008000 - 0xc0801a30 (8167 kB)
[ 0.000000] .init : 0xc0802000 - 0xc083f9ac ( 247 kB)
[ 0.000000] .data : 0xc0840000 - 0xc08a1c68 ( 392 kB)
[ 0.000000] .bss : 0xc08a1c68 - 0xc09b2ec4 (1093 kB)
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[ 0.000000] Preemptible hierarchical RCU implementation.
[ 0.000000] NR_IRQS:16 nr_irqs:16 16
[ 0.000000] GIC CPU mask not found - kernel will fail to boot.
[ 0.000000] GIC CPU mask not found - kernel will fail to boot.
[ 0.000000] Architected mmio timer(s) running at 19.20MHz (virt).
[ 0.000000] sched_clock: 56 bits at 19MHz, resolution 52ns, wraps every 3579139424256ns
[ 0.000000] Switching to timer-based delay loop
[ 0.000000] sched_clock: 32 bits at 19MHz, resolution 52ns, wraps every 223696213963ns
[ 0.000000] Console: colour dummy device 80x30
[ 0.000391] Calibrating delay loop (skipped), value calculated using timer frequency.. 38.40 BogoMIPS (lpj=192000)
[ 0.000402] pid_max: default: 32768 minimum: 301
[ 0.000547] Mount-cache hash table entries: 512
[ 0.000943] Initializing cgroup subsys debug
[ 0.000955] Initializing cgroup subsys freezer
[ 0.000983] CPU: Testing write buffer coherency: ok
[ 0.001188] Setting up static identity map for 0xc0594b88 - 0xc0594be0
[ 0.001988] MSM Memory Dump base table set up
[ 0.002016] MSM Memory Dump apps data table set up
[ 0.008442] pinctrl core: initialized pinctrl subsystem
[ 0.008669] regulator-dummy: no parameters
[ 0.009393] NET: Registered protocol family 16
[ 0.010726] DMA: preallocated 256 KiB pool for atomic coherent allocations
[ 0.017846] spmi_pmic_arb 200f000.qcom,spmi: missing property: qcom,pmic-arb-max-peripherals
[ 0.017863] spmi_pmic_arb 200f000.qcom,spmi: PMIC Arb Version-2 0x20010000
[ 0.018192] spmi_pmic_arb 200f000.qcom,spmi: missing property: qcom,pmic-arb-max-periph-interrupts
[ 0.019019] spmi spmi-0: of_spmi_register_devices: invalid sid on /soc/qcom,spmi@200f000/qcom,pmd9635_rtc
[ 0.019825] msm_watchdog b017000.qcom,wdt: wdog absent resource not present
[ 0.019999] msm_watchdog b017000.qcom,wdt: MSM Watchdog Initialized
[ 0.023192] cma: Assigned CMA region at 81c00000 to 4080000.qcom,mss device
[ 0.025525] gpiochip_find_base: found new base at 924
[ 0.025626] gpiochip_add: registered GPIOs 924 to 1023 on device: msm_tlmm_gpio
[ 0.025770] hw-breakpoint: found 5 (+1 reserved) breakpoint and 4 watchpoint registers.
[ 0.025780] hw-breakpoint: maximum watchpoint size is 8 bytes.
[ 0.026002] msm_mpm_dev_probe(): Cannot get clk resource for XO
[ 0.026025] platform 601d0.qcom,mpm: Driver mpm-v2 requests probe deferral
[ 0.026233] smd_open() before smd_init()
[ 0.026250] platform qcom,rpm-smd.22: Driver rpm-smd requests probe deferral
[ 0.026481] msm-jtag-fuse a601c.jtagfuse: JTag Fuse initialized
[ 0.027871] smd_channel_probe_now: allocation table not initialized
[ 0.029866] i2c-msm-v2 78b7000.i2c: probing driver i2c-msm-v2
[ 0.029926] i2c-msm-v2 78b7000.i2c: error on clk_get(core_clk):-517
[ 0.029938] i2c-msm-v2 78b7000.i2c: error probe() failed with err:-517
[ 0.029962] platform 78b7000.i2c: Driver i2c-msm-v2 requests probe deferral
[ 0.031022] msm-thermal qcom,msm-thermal.25: msm_thermal:Failed reading node=/soc/qcom,msm-thermal, key=qcom,core-limit-temp. err=-22. KTM continues
[ 0.031039] msm-thermal qcom,msm-thermal.25: probe_freq_mitigation:Failed reading node=/soc/qcom,msm-thermal, key=qcom,freq-mitigation-temp. err=-22. KTM continues
[ 0.031054] msm-thermal qcom,msm-thermal.25: msm_thermal:Failed reading node=/soc/qcom,msm-thermal, key=qcom,rpm-phase-resource-type err=-22. KTM continues
[ 0.031068] msm-thermal qcom,msm-thermal.25: msm_thermal:Failed reading node=/soc/qcom,msm-thermal, key=qcom,gfx-sensor-id. err=-22. KTM continues
[ 0.031081] msm-thermal qcom,msm-thermal.25: probe_therm_reset:Failed reading node=/soc/qcom,msm-thermal, key=qcom,therm-reset-temp err=-22. KTM continues
[ 0.031131] msm_thermal:msm_thermal_dev_probe Failed reading node=/soc/qcom,msm-thermal, key=qcom,freq-control-mask. err:-517
[ 0.031149] platform qcom,msm-thermal.25: Driver msm-thermal requests probe deferral
[ 0.031712] sps:sps is ready.
[ 0.032112] platform b008018.qcom,a7pll: Driver msm-clock-controller requests probe deferral
[ 0.032237] platform 1800000.qcom,gcc: Driver msm-clock-controller requests probe deferral
[ 0.032576] platform b010008.qcom,clock-a7: Driver clock-a7 requests probe deferral
[ 0.032960] msm_mpm_dev_probe(): Cannot get clk resource for XO
[ 0.032980] platform 601d0.qcom,mpm: Driver mpm-v2 requests probe deferral
[ 0.033790] 9635_s1: 700 <--> 1100 mV at 700 mV normal idle
[ 0.034247] 9635_s2: 1250 mV normal idle
[ 0.034650] 9635_s3: 1025 mV normal idle
[ 0.035062] 9635_s4: 1850 mV normal idle
[ 0.035429] 9635_s5_level: 0 <--> 0 mV normal idle
[ 0.035704] 9635_s5_level_ao: 0 <--> 0 mV normal idle
[ 0.035972] 9635_s5_floor_level: 0 <--> 0 mV normal idle
[ 0.036352] 9635_l1: 1225 <--> 1250 mV at 1225 mV normal idle
[ 0.036725] 9635_l2: 1200 mV normal idle
[ 0.037100] 9635_l3: 1000 mV normal idle
[ 0.037474] 9635_l4: 1000 mV normal idle
[ 0.037855] 9635_l5: 1800 mV normal idle
[ 0.038237] 9635_l6: 1800 mV normal idle
[ 0.038611] 9635_l7: 1800 mV normal idle
[ 0.039001] 9635_l8: 1800 mV normal idle
[ 0.039388] 9635_l9_level: 0 <--> 0 mV normal idle
[ 0.039871] 9635_l10: 3200 mV normal idle
[ 0.040266] 9635_l11: 1800 <--> 2850 mV at 1800 mV normal idle
[ 0.040676] 9635_l12: 2700 mV normal idle
[ 0.041071] 9635_l13: 1800 <--> 2850 mV at 1800 mV normal idle
[ 0.041461] 9635_l14: 1800 <--> 2850 mV at 1800 mV normal idle
[ 0.041850] 9635_l15: 1800 mV normal idle
[ 0.042258] 9635_l16: 950 mV normal idle
[ 0.042641] i2c-msm-v2 78b7000.i2c: probing driver i2c-msm-v2
[ 0.042704] i2c-msm-v2 78b7000.i2c: error on clk_get(core_clk):-517
[ 0.042716] i2c-msm-v2 78b7000.i2c: error probe() failed with err:-517
[ 0.042740] platform 78b7000.i2c: Driver i2c-msm-v2 requests probe deferral
[ 0.042841] msm-thermal qcom,msm-thermal.25: msm_thermal:Failed reading node=/soc/qcom,msm-thermal, key=qcom,core-limit-temp. err=-22. KTM continues
[ 0.042855] msm-thermal qcom,msm-thermal.25: probe_freq_mitigation:Failed reading node=/soc/qcom,msm-thermal, key=qcom,freq-mitigation-temp. err=-22. KTM continues
[ 0.042870] msm-thermal qcom,msm-thermal.25: msm_thermal:Failed reading node=/soc/qcom,msm-thermal, key=qcom,rpm-phase-resource-type err=-22. KTM continues
[ 0.042884] msm-thermal qcom,msm-thermal.25: msm_thermal:Failed reading node=/soc/qcom,msm-thermal, key=qcom,gfx-sensor-id. err=-22. KTM continues
[ 0.042897] msm-thermal qcom,msm-thermal.25: probe_therm_reset:Failed reading node=/soc/qcom,msm-thermal, key=qcom,therm-reset-temp err=-22. KTM continues
[ 0.043034] msm-thermal qcom,msm-thermal.25: probe_psm:Failed reading node=/soc/qcom,msm-thermal, key=qcom,pmic-sw-mode-temp. err=-22. KTM continues
[ 0.043372] msm-thermal qcom,msm-thermal.25: probe_ocr:Failed reading node=/soc/qcom,msm-thermal, key=qcom,pmic-opt-curr-temp err:-22. KTM continues
[ 0.043383] msm_thermal:get_kernel_cluster_info CPU0 topology not initialized.
[ 0.044392] msm-clock-controller b008018.qcom,a7pll: registered clocks
[ 0.053721] msm-clock-controller 1800000.qcom,gcc: registered clocks
[ 0.053982] clock-a7 b010008.qcom,clock-a7: No speed/PVS binning available. Defaulting to 0!
[ 0.054774] i2c-msm-v2 78b7000.i2c: probing driver i2c-msm-v2
[ 0.054836] AXI: msm_bus_scale_register_client(): msm_bus_scale_register_client: Bus driver not ready.
[ 0.054847] i2c-msm-v2 78b7000.i2c: msm_bus_scale_register_client(mstr-id:86):0 (not a problem)
[ 0.055184] irq: no irq domain found for /soc/wcd9xxx-irq !
[ 0.071223] bio: create slab <bio-0> at 0
[ 0.071929] KPI: Bootloader start count = 32417
[ 0.071939] KPI: Bootloader end count = 54026
[ 0.071946] KPI: Bootloader display count = 3457070209
[ 0.071952] KPI: Bootloader load kernel count = 16345
[ 0.071959] KPI: Kernel MPM timestamp = 63819
[ 0.071965] KPI: Kernel MPM Clock frequency = 32768
[ 0.071986] socinfo_print: v0.10, id=234, ver=2.0, raw_id=2385, raw_ver=1, hw_plat=8, hw_plat_ver=0
[ 0.071986] accessory_chip=0, hw_plat_subtype=0, pmic_model=65544, pmic_die_revision=65537 foundry_id=1 serial_number=3463456
[ 0.072308] of_get_named_gpio_flags: can't parse gpios property
[ 0.072425] ethernet_phy: no parameters
[ 0.072527] of_get_named_gpio_flags: can't parse gpios property
[ 0.072608] codec_2.15v: no parameters
[ 0.072708] of_get_named_gpio_flags: can't parse gpios property
[ 0.072797] wlan_vreg: no parameters
[ 0.073031] sd_2.95: no parameters
[ 0.073306] vgaarb: loaded
[ 0.073545] SCSI subsystem initialized
[ 0.073667] usbcore: registered new interface driver usbfs
[ 0.073714] usbcore: registered new interface driver hub
[ 0.073843] usbcore: registered new device driver usb
[ 0.074793] ION heap system created
[ 0.075094] msm_bus_fabric_init_driver
[ 0.075249] msm_bus_device 580000.ad-hoc-bus: Dev 0
[ 0.075268] msm_bus_device 580000.ad-hoc-bus: Util-fact is missing, default to 100
[ 0.075278] msm_bus_device 580000.ad-hoc-bus: Vrail-comp is missing, default to 100
[ 0.075395] msm_bus_device 580000.ad-hoc-bus: msmbus_coresight initialized
[ 0.075423] msm_bus_device 580000.ad-hoc-bus: Dev 4096
[ 0.075439] msm_bus_device 580000.ad-hoc-bus: Util-fact is missing, default to 100
[ 0.075449] msm_bus_device 580000.ad-hoc-bus: Vrail-comp is missing, default to 100
[ 0.075471] msm_bus_device 580000.ad-hoc-bus: Coresight support absent for bus: 4096
[ 0.075499] msm_bus_device 580000.ad-hoc-bus: Dev 1024
[ 0.075514] msm_bus_device 580000.ad-hoc-bus: Util-fact is missing, default to 100
[ 0.075524] msm_bus_device 580000.ad-hoc-bus: Vrail-comp is missing, default to 100
[ 0.075614] msm_bus_device 580000.ad-hoc-bus: msmbus_coresight initialized
[ 0.076757] msm_bus_init_clk: Valid node clk node 0 ctx 0
[ 0.076764] msm_bus_init_clk: Valid node clk node 0 ctx 1msm_bus_init_clk: Valid node clk node 4096 ctx 0
[ 0.076864] msm_bus_init_clk: Valid node clk node 4096 ctx 1msm_bus_init_clk: Valid node clk node 1024 ctx 0
[ 0.076942] msm_bus_init_clk: Valid node clk node 1024 ctx 1<3>[ 0.081565] ipa ipa_uc_state_check:265 uC interface not initialized
[ 0.083735] sps:BAM 0x07904000 is registered.
[ 0.084199] ipa ipa_uc_state_check:265 uC interface not initialized
[ 0.084379] sps:BAM 0x07904000 (va:0xd0ac0000) enabled: ver:0x26, number of pipes:20
[ 0.085995] ipa ipa_uc_state_check:265 uC interface not initialized
[ 0.086453] ipa ipa_uc_state_check:265 uC interface not initialized
[ 0.088358] IPA driver initialization was successful.
[ 0.088795] gdsc_pcie: no parameters
[ 0.088993] gdsc_usb30: no parameters
[ 0.090001] Bluetooth: Core ver 2.16
[ 0.090041] NET: Registered protocol family 31
[ 0.090048] Bluetooth: HCI device and connection manager initialized
[ 0.090063] Bluetooth: HCI socket layer initialized
[ 0.090074] Bluetooth: L2CAP socket layer initialized
[ 0.090102] Bluetooth: SCO socket layer initialized
[ 0.090326] cfg80211: Calling CRDA to update world regulatory domain
[ 0.090353] cfg80211: World regulatory domain updated:
[ 0.090360] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)
[ 0.090369] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
[ 0.090377] cfg80211: (2457000 KHz - 2482000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
[ 0.090385] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (300 mBi, 2000 mBm)
[ 0.090393] cfg80211: (5170000 KHz - 5250000 KHz @ 80000 KHz), (300 mBi, 2000 mBm)
[ 0.090401] cfg80211: (5250000 KHz - 5330000 KHz @ 80000 KHz), (300 mBi, 2000 mBm)
[ 0.090408] cfg80211: (5490000 KHz - 5710000 KHz @ 80000 KHz), (300 mBi, 2000 mBm)
[ 0.090416] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (300 mBi, 2000 mBm)
[ 0.090424] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm)
[ 0.090653] pcie:pcie_init.
[ 0.093468] msm_pcie_probe: PCIe: RC0 could not get pinctrl sleep state
[ 0.094327] Switching to clocksource arch_sys_counter
[ 0.108608] NET: Registered protocol family 2
[ 0.109047] TCP established hash table entries: 2048 (order: 2, 16384 bytes)
[ 0.109083] TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
[ 0.109106] TCP: Hash tables configured (established 2048 bind 2048)
[ 0.109145] TCP: reno registered
[ 0.109156] UDP hash table entries: 256 (order: 0, 4096 bytes)
[ 0.109170] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[ 0.109352] NET: Registered protocol family 1
[ 0.109381] PCI: CLS 0 bytes, default 64
[ 0.116605] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.116631] msgmni has been set to 310
[ 0.117287] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 248)
[ 0.117298] io scheduler noop registered
[ 0.117304] io scheduler deadline registered
[ 0.117319] io scheduler row registered
[ 0.117434] io scheduler cfq registered (default)
[ 0.117539] gpiochip_find_base: found new base at 922
[ 0.117626] gpiochip_add: registered GPIOs 922 to 923 on device: pmd9635-gpio
[ 0.117712] qcom,qpnp-pin qpnp-pin-ce8bea00: qpnp_pin_probe: gpio_chip registered between 922-923
[ 0.117857] gpiochip_find_base: found new base at 919
[ 0.117931] gpiochip_add: registered GPIOs 919 to 921 on device: pmd9635-mpp
[ 0.118101] qcom,qpnp-pin qpnp-pin-ce8bec00: qpnp_pin_probe: gpio_chip registered between 919-921
[ 0.118296] gpiochip_find_base: found new base at 887
[ 0.118374] gpiochip_add: registered GPIOs 887 to 918 on device: smp2p
[ 0.118746] gpiochip_find_base: found new base at 855
[ 0.118819] gpiochip_add: registered GPIOs 855 to 886 on device: smp2p
[ 0.118849] gpiochip_find_base: found new base at 823
[ 0.118927] gpiochip_add: registered GPIOs 823 to 854 on device: smp2p
[ 0.119301] gpiochip_find_base: found new base at 791
[ 0.119375] gpiochip_add: registered GPIOs 791 to 822 on device: smp2p
[ 0.119405] gpiochip_find_base: found new base at 759
[ 0.119481] gpiochip_add: registered GPIOs 759 to 790 on device: slave-kernel
[ 0.119558] platform qcom,smp2pgpio-ssr-smp2p-1-in.9: Driver smp2pgpio requests probe deferral
[ 0.119587] gpiochip_find_base: found new base at 759
[ 0.119658] gpiochip_add: registered GPIOs 759 to 790 on device: master-kernel
[ 0.119716] platform qcom,smp2pgpio-ssr-smp2p-1-out.10: Driver smp2pgpio requests probe deferral
[ 0.281285] st7789sebi2 7980000.ebi2: st7789_probe - initialized (15:58:07).
[ 0.293235] msm_rpm_log_probe: OK
[ 0.295560] of_get_named_gpio_flags exited with status -517
[ 0.295578] pil-q6v5-mss 4080000.qcom,mss: [modem]: Error getting proxy unvoting gpio
[ 0.295679] platform 4080000.qcom,mss: Driver pil-q6v5-mss requests probe deferral
[ 0.296818] msm_serial_hsl_init: driver initialized
[ 0.304879] brd: module loaded
[ 0.306749] loop: module loaded
[ 0.307177] SCSI Media Changer driver v0.25
[ 0.313280] sps: BAM device 0x07984000 is not registered yet.
[ 0.313502] sps:BAM 0x07984000 is registered.
[ 0.313514] msm_nand_bam_init: msm_nand_bam_init: BAM device registered: bam_handle 0xce17b400
[ 0.313781] sps:BAM 0x07984000 (va:0xd0e20000) enabled: ver:0x18, number of pipes:7
[ 0.316827] msm_nand_parse_smem_ptable: Parsing partition table info from SMEM
[ 0.316868] msm_nand_parse_smem_ptable: SMEM partition table found: ver: 4 len: 20
[ 0.316892] msm_nand_version_check: nand_major:1, nand_minor:3, qpic_major:1, qpic_minor:1
[ 0.316927] msm_nand_scan: NAND Id: 0x1590ac2c Buswidth: 8Bits Density: 512 MByte
[ 0.316935] msm_nand_scan: pagesize: 2048 Erasesize: 131072 oobsize: 64 (in Bytes)
[ 0.316941] msm_nand_scan: BCH ECC: 4 Bit
[ 0.316956] msm_nand_scan: CFG0: 0x2a0408c0, CFG1: 0x0804745c
[ 0.316956] RAWCFG0: 0x2c8400c0, RAWCFG1: 0x0005055d
[ 0.316956] ECCBUFCFG: 0x00000203, ECCBCHCFG: 0x42040700
[ 0.316956] RAWECCCFG: 0x42000701, BAD BLOCK BYTE: 0x000001d1
[ 0.316976] Creating 20 MTD partitions on "7980000.nand":
[ 0.316987] 0x000000000000-0x000000140000 : "sbl"
[ 0.317561] 0x000000140000-0x000000280000 : "mibib"
[ 0.318059] 0x000000280000-0x000001900000 : "efs2"
[ 0.318551] 0x000001900000-0x000001a00000 : "tz"
[ 0.318986] 0x000001a00000-0x000001aa0000 : "rpm"
[ 0.319422] 0x000001aa0000-0x000001ba0000 : "aboot"
[ 0.319868] 0x000001ba0000-0x0000025e0000 : "boot"
[ 0.320322] 0x0000025e0000-0x000002620000 : "scrub"
[ 0.320780] 0x000002620000-0x000006ce0000 : "modem"
[ 0.321260] 0x000006ce0000-0x000006e60000 : "misc"
[ 0.321751] 0x000006e60000-0x0000078c0000 : "recovery"
[ 0.322242] 0x0000078c0000-0x000007980000 : "fota_none"
[ 0.322701] 0x000007980000-0x000009040000 : "recoveryfs"
[ 0.323121] 0x000009040000-0x000011960000 : "system"
[ 0.323564] 0x000011960000-0x0000128e0000 : "pad1"
[ 0.324003] 0x0000128e0000-0x000013d20000 : "userrw"
[ 0.324560] 0x000013d20000-0x0000177e0000 : "hdata"
[ 0.325035] 0x0000177e0000-0x00001eda0000 : "ntgfota"
[ 0.325509] 0x00001eda0000-0x00001f7a0000 : "cust"
[ 0.326002] 0x00001f7a0000-0x00001fda0000 : "persist"
[ 0.326498] msm_nand_probe: NANDc phys addr 0x7980000, BAM phys addr 0x7984000, BAM IRQ 279
[ 0.326508] msm_nand_probe: Allocated DMA buffer at virt_addr 0xcec48000, phys_addr 0x8ec48000
[ 0.327760] of_get_named_gpio_flags: can't parse gpios property
[ 0.327773] of_get_named_gpio_flags: can't parse gpios property
[ 0.327780] of_get_named_gpio_flags: can't parse gpios property
[ 0.327786] of_get_named_gpio_flags: can't parse gpios property
[ 0.327793] of_get_named_gpio_flags: can't parse gpios property
[ 0.327893] of_get_named_gpio_flags: can't parse gpios property
[ 0.327902] of_get_named_gpio_flags: can't parse gpios property
[ 0.340229] msm_pcie_enable: PCIe: Assert the reset of endpoint of RC0.
[ 0.344012] msm_pcie_enable: PCIe RC0 PHY is ready!
[ 0.354047] msm_pcie_enable: PCIe: Release the reset of endpoint of RC0.
[ 0.396061] msm_pcie_enable: PCIe RC0 link initialized
[ 0.396299] PCI host bridge to bus 0000:00
[ 0.396315] pci_bus 0000:00: root bus resource [io 0x40200000-0x402fffff]
[ 0.396326] pci_bus 0000:00: root bus resource [mem 0x40300000-0x40ffffff]
[ 0.396336] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[ 0.396438] pci 0000:00:00.0: [17cb:0301] type 01 class 0x060400
[ 0.396542] msm_pcie_oper_conf: Read of RC0 0:0x00 + 0x0014[4] is all FFs
[ 0.396567] pci 0000:00:00.0: reg 10: [mem 0x00000000-0x00000fff 64bit]
[ 0.396898] pci 0000:00:00.0: PME# supported from D0 D3hot D3cold
[ 0.397297] PCI: bus0: Fast back to back transfers disabled
[ 0.397315] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[ 0.397759] pci 0000:01:00.0: [168c:003e] type 00 class 0x028000
[ 0.397885] msm_pcie_oper_conf: Read of RC0 1:0x00 + 0x0014[4] is all FFs
[ 0.397914] pci 0000:01:00.0: reg 10: [mem 0x00000000-0x001fffff 64bit]
[ 0.398516] pci 0000:01:00.0: PME# supported from D0 D3hot D3cold
[ 0.399252] PCI: bus1: Fast back to back transfers disabled
[ 0.399265] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01
[ 0.399339] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 01
[ 0.399555] msm_pcie_oper_conf: Read of RC0 0:0x00 + 0x0028[4] is all FFs
[ 0.399586] pci 0000:00:00.0: BAR 8: assigned [mem 0x40400000-0x405fffff]
[ 0.399598] pci 0000:00:00.0: BAR 0: assigned [mem 0x40300000-0x40300fff 64bit]
[ 0.399699] pci 0000:01:00.0: BAR 0: assigned [mem 0x40400000-0x405fffff 64bit]
[ 0.399964] pci 0000:00:00.0: PCI bridge to [bus 01]
[ 0.400009] pci 0000:00:00.0: bridge window [mem 0x40400000-0x405fffff]
[ 0.400089] PCI: enabling device 0000:00:00.0 (0140 -> 0143)
[ 0.403427] msm_pcie_disable: PCIe: Assert the reset of endpoint of RC0.
[ 0.405818] pcie_pipe_clk
[ 0.405826] pcie_pipe_clk_src
[ 0.405833] CMD_RCGR: 0x00000000
[ 0.405839] CFG_RCGR: 0x00000200
[ 0.405845] gcc_pcie_pipe_clk
[ 0.405851] CBCR: 0x00004ff0
[ 0.405857] ------------[ cut here ]------------
[ 0.405875] WARNING: at /home/ntgrbuild/tags_9x40r11/NTG9X40C_11.14.07.00/mdm9x40r11_core/apps_proc/kernel/drivers/clk/qcom/clock-local2.c:413 branch_clk_halt_check+0xd0/0xf8()
[ 0.405882] gcc_pcie_pipe_clk: status stuck on
[ 0.405887] Modules linked in:
[ 0.405901] CPU: 0 PID: 1 Comm: swapper Not tainted 3.10.49-svn4120 #1
[ 0.405924] [<c001432c>] (unwind_backtrace+0x0/0xec) from [<c0011858>] (show_stack+0x10/0x14)
[ 0.405941] [<c0011858>] (show_stack+0x10/0x14) from [<c0022ec8>] (warn_slowpath_common+0x4c/0x68)
[ 0.405958] [<c0022ec8>] (warn_slowpath_common+0x4c/0x68) from [<c0022f10>] (warn_slowpath_fmt+0x2c/0x3c)
[ 0.405974] [<c0022f10>] (warn_slowpath_fmt+0x2c/0x3c) from [<c03f3758>] (branch_clk_halt_check+0xd0/0xf8)
[ 0.405991] [<c03f3758>] (branch_clk_halt_check+0xd0/0xf8) from [<c03f3f6c>] (branch_clk_disable+0x8c/0xb4)
[ 0.406006] [<c03f3f6c>] (branch_clk_disable+0x8c/0xb4) from [<c03f0e6c>] (clk_disable+0xb0/0x174)
[ 0.406022] [<c03f0e6c>] (clk_disable+0xb0/0x174) from [<c01c357c>] (msm_pcie_pipe_clk_deinit+0x80/0xa8)
[ 0.406038] [<c01c357c>] (msm_pcie_pipe_clk_deinit+0x80/0xa8) from [<c01ca0b0>] (msm_pcie_disable+0x1dc/0x220)
[ 0.406055] [<c01ca0b0>] (msm_pcie_disable+0x1dc/0x220) from [<c01ca568>] (msm_pcie_pm_suspend.isra.15+0x474/0x524)
[ 0.406071] [<c01ca568>] (msm_pcie_pm_suspend.isra.15+0x474/0x524) from [<c01cadec>] (msm_pcie_pm_control+0x59c/0xbf4)
[ 0.406087] [<c01cadec>] (msm_pcie_pm_control+0x59c/0xbf4) from [<c02a4ba8>] (cnss_wlan_pci_probe+0xe8/0x2a8)
[ 0.406103] [<c02a4ba8>] (cnss_wlan_pci_probe+0xe8/0x2a8) from [<c01b8178>] (pci_device_probe+0x68/0xa8)
[ 0.406119] [<c01b8178>] (pci_device_probe+0x68/0xa8) from [<c024bbb8>] (driver_probe_device+0xb4/0x1fc)
[ 0.406135] [<c024bbb8>] (driver_probe_device+0xb4/0x1fc) from [<c024bdac>] (__driver_attach+0x68/0x8c)
[ 0.406150] [<c024bdac>] (__driver_attach+0x68/0x8c) from [<c024a32c>] (bus_for_each_dev+0x70/0x84)
[ 0.406164] [<c024a32c>] (bus_for_each_dev+0x70/0x84) from [<c024b328>] (bus_add_driver+0xdc/0x218)
[ 0.406179] [<c024b328>] (bus_add_driver+0xdc/0x218) from [<c024c320>] (driver_register+0x9c/0x124)
[ 0.406193] [<c024c320>] (driver_register+0x9c/0x124) from [<c02a416c>] (cnss_probe+0x764/0xb90)
[ 0.406208] [<c02a416c>] (cnss_probe+0x764/0xb90) from [<c024ccf0>] (platform_drv_probe+0x14/0x18)
[ 0.406224] [<c024ccf0>] (platform_drv_probe+0x14/0x18) from [<c024bbb8>] (driver_probe_device+0xb4/0x1fc)
[ 0.406239] [<c024bbb8>] (driver_probe_device+0xb4/0x1fc) from [<c024bdac>] (__driver_attach+0x68/0x8c)
[ 0.406253] [<c024bdac>] (__driver_attach+0x68/0x8c) from [<c024a32c>] (bus_for_each_dev+0x70/0x84)
[ 0.406267] [<c024a32c>] (bus_for_each_dev+0x70/0x84) from [<c024b328>] (bus_add_driver+0xdc/0x218)
[ 0.406282] [<c024b328>] (bus_add_driver+0xdc/0x218) from [<c024c320>] (driver_register+0x9c/0x124)
[ 0.406297] [<c024c320>] (driver_register+0x9c/0x124) from [<c000875c>] (do_one_initcall+0x8c/0x12c)
[ 0.406314] [<c000875c>] (do_one_initcall+0x8c/0x12c) from [<c0802af8>] (kernel_init_freeable+0xf4/0x1b4)
[ 0.406332] [<c0802af8>] (kernel_init_freeable+0xf4/0x1b4) from [<c0584b78>] (kernel_init+0x8/0xe4)
[ 0.406348] [<c0584b78>] (kernel_init+0x8/0xe4) from [<c000dc58>] (ret_from_fork+0x14/0x3c)
[ 0.406380] ---[ end trace 38c01166e738dd3b ]---
[ 0.407411] cnss: Platform driver probed successfully.
[ 0.408043] NET: Registered protocol family 27
[ 0.408388] msm_sharedmem: sharedmem_register_qmi: qmi init successful
[ 0.412313] msm-dwc3 8a00000.ssusb: unable to read platform data tx fifo size
[ 0.412330] msm-dwc3 8a00000.ssusb: unable to read platform data qdss tx fifo size
[ 0.441341] (NULL device *): msg2133_init
[ 0.441398] msg2133 3-0026: msg2133_probe
[ 0.441421] 9635_l13: Failed to create debugfs directory
[ 0.441433] 9635_l13: requested voltage range [-1072888196, -1072888196] does not fit within constraints: [1800000, 2850000]
[ 0.441443] msg2133 3-0026: Setting up regulator 9635_l13 voltage -1072888196uV.
[ 0.494400] of_get_named_gpio_flags: can't parse gpios property
[ 0.494413] msg2133 3-0026: gpio 'pen-down' not specified in dts node
[ 0.494523] msg2133 3-0026: msg2133_init_gpio
[ 0.554640] i2c-msm-v2 78b7000.i2c: msm_bus_scale_register_client(mstr-id:86):0x8 (ok)
[ 0.567972] input: MSG2133 Touchscreen as /devices/virtual/input/input0
[ 0.568367] qcom,qpnp-rtc qpnp-rtc-ce8bee00: rtc core: registered qpnp_rtc as rtc0
[ 0.568541] i2c /dev entries driver
[ 0.569610] smb1357_otg_supply: no parameters
[ 0.577657] dwc3 8a00000.dwc3: OTG state changed from (null) to b_idle
[ 0.577692] dwc3 8a00000.dwc3: Avail curr from USB = 1500
[ 0.578953] dwc3 8a00000.dwc3: OTG state changed from b_idle to b_peripheral
[ 0.580948] smb135x-charger 3-001c: SMB135X version = smb1356 revision = rev2.1 successfully probed batt=1 dc = 0 usb = 1
[ 0.581499] unable to find DT imem DLOAD mode node
[ 0.581774] unable to find DT imem EDLOAD mode node
[ 0.608170] Bluetooth: HCI UART driver ver 2.2
[ 0.608183] Bluetooth: HCI H4 protocol initialized
[ 0.608190] Bluetooth: HCI_IBS protocol initialized
[ 0.608399] bt_dt_parse_vreg_info: qca,bt-vdd-io: is not provided in device tree
[ 0.608409] bt_dt_parse_vreg_info: qca,bt-vdd-xtal: is not provided in device tree
[ 0.608452] bt_power bt_qca6174.18: no qca,bt-vdd-pa-voltage-level property
[ 0.608461] bt_dt_parse_vreg_info: qca,bt-vdd-ldo: is not provided in device tree
[ 0.608468] bt_dt_parse_vreg_info: qca,bt-chip-pwd: is not provided in device tree
[ 0.608956] cpuidle: using governor ladder
[ 0.608967] cpuidle: using governor menu
[ 0.609002] sdhci: Secure Digital Host Controller Interface driver
[ 0.609008] sdhci: Copyright(c) Pierre Ossman
[ 0.609014] sdhci-pltfm: SDHCI platform and OF driver helper
[ 0.609801] usbcore: registered new interface driver usbhid
[ 0.609811] usbhid: USB HID core driver
[ 0.610441] sps:BAM 0x08b04000 is registered.
[ 0.610701] qcom,qpnp-power-on qpnp-power-on-ce8be800: PMIC@SID0 Power-on reason: Triggered from Hard Reset and 'cold' boot
[ 0.610726] qcom,qpnp-power-on qpnp-power-on-ce8be800: PMIC@SID0: Power-off reason: Triggered from PS_HOLD (PS_HOLD/MSM controlled shutdown)
[ 0.610919] input: qpnp_pon as /devices/virtual/input/input1
[ 0.611355] PMIC@SID0: PMD9635 v1.1 options: 3, 2, 2, 2
[ 0.612225] devfreq qcom,cpubw.21: Couldn't update frequency transition information.
[ 0.612758] coresight-fuse a601c.fuse: Fuse initialized
[ 0.613209] coresight-cti 810000.cti: CTI initialized
[ 0.613341] coresight-cti 811000.cti: CTI initialized
[ 0.613476] coresight-cti 812000.cti: CTI initialized
[ 0.613609] coresight-cti 813000.cti: CTI initialized
[ 0.613744] coresight-cti 814000.cti: CTI initialized
[ 0.613870] coresight-cti 815000.cti: CTI initialized
[ 0.614004] coresight-cti 816000.cti: CTI initialized
[ 0.614142] coresight-cti 817000.cti: CTI initialized
[ 0.614269] coresight-cti 818000.cti: CTI initialized
[ 0.614461] coresight-cti 843000.cti: CTI initialized
[ 0.614609] coresight-cti 838000.cti: CTI initialized
[ 0.614742] coresight-cti 83c000.cti: CTI initialized
[ 0.615077] coresight-csr 801000.csr: CSR initialized
[ 0.615446] coresight-tmc 826000.tmc: Byte Counter feature enabled
[ 0.615680] sps:BAM 0x00884000 is registered.
[ 0.615873] coresight-tmc 826000.tmc: TMC initialized
[ 0.616125] coresight-tmc 825000.tmc: TMC initialized
[ 0.616676] nidnt boot config: 0
[ 0.616774] coresight-tpiu: probe of 820000.tpiu failed with error -22
[ 0.617173] coresight-funnel 821000.funnel: FUNNEL initialized
[ 0.617519] coresight-replicator 824000.replicator: REPLICATOR initialized
[ 0.617929] coresight-stm 802000.stm: STM initialized
[ 0.618265] coresight-hwevent 86c000.hwevent: Hardware Event driver initialized
[ 0.618705] coresight-etm 842000.etm: ETM initialized
[ 0.619265] coresight-modem-etm modem_etm0.14: Modem ETM initialized
[ 0.619786] coresight-rpm-etm rpm_etm0.13: RPM ETM initialized
[ 0.620291] coresight-qpdi 1941000.qpdi: CoreSight QPDI driver initialized
[ 0.620535] Netfilter messages via NETLINK v0.30.
[ 0.620609] nf_conntrack version 0.5.0 (2485 buckets, 9940 max)
[ 0.620898] ctnetlink v0.93: registering with nfnetlink.
[ 0.620981] ip_set: protocol 6
[ 0.621241] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 0.621371] TCP: cubic registered
[ 0.621853] NET: Registered protocol family 10
[ 0.622425] ip6_tables: (C) 2000-2006 Netfilter Core Team
[ 0.622566] sit: IPv6 over IPv4 tunneling driver
[ 0.623070] NET: Registered protocol family 17
[ 0.623150] Bridge firewalling registered
[ 0.623164] Ebtables v2.0 registered
[ 0.623390] Bluetooth: RFCOMM TTY layer initialized
[ 0.623420] Bluetooth: RFCOMM socket layer initialized
[ 0.623428] Bluetooth: RFCOMM ver 1.11
[ 0.623436] Bluetooth: BNEP (Ethernet Emulation) ver 1.3
[ 0.623442] Bluetooth: BNEP filters: protocol multicast
[ 0.623454] Bluetooth: BNEP socket layer initialized
[ 0.623461] Bluetooth: HIDP (Human Interface Emulation) ver 1.2
[ 0.623472] Bluetooth: HIDP socket layer initialized
[ 0.623619] gpiochip_find_base: found new base at 759
[ 0.623702] gpiochip_add: registered GPIOs 759 to 790 on device: slave-kernel
[ 0.624207] gpiochip_find_base: found new base at 727
[ 0.624277] gpiochip_add: registered GPIOs 727 to 758 on device: master-kernel
[ 0.626082] VFP support v0.3: implementor 41 architecture 2 part 30 variant 7 rev 5
[ 0.629038] sd_2.95: disabling
[ 0.629054] codec_2.15v: disabling
[ 0.629076] regulator-dummy: disabling
[ 0.629238] UBI-0: ubi_attach_mtd_dev:attaching mtd13 to ubi0
[ 0.677894] msg2133 3-0026: Buttons: 0
[ 0.677909] msg2133 3-0026: Release
[ 0.714470] msg2133 3-0026: Buttons: 0
[ 0.714483] msg2133 3-0026: Release
[ 0.721502] msg2133 3-0026: Buttons: 0
[ 0.721514] msg2133 3-0026: Release
[ 1.210566] UBI-0: scan_all:scanning is finished
[ 1.217249] UBI-0: ubi_attach_mtd_dev:attached mtd13 (name "system", size 137 MiB)
[ 1.217261] UBI-0: ubi_attach_mtd_dev:PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[ 1.217270] UBI-0: ubi_attach_mtd_dev:min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[ 1.217278] UBI-0: ubi_attach_mtd_dev:VID header offset: 2048 (aligned 2048), data offset: 4096
[ 1.217286] UBI-0: ubi_attach_mtd_dev:good PEBs: 1097, bad PEBs: 0, corrupted PEBs: 0
[ 1.217294] UBI-0: ubi_attach_mtd_dev:user volume: 3, internal volumes: 1, max. volumes count: 128
[ 1.217304] UBI-0: ubi_attach_mtd_dev:max/mean erase counter: 89/38, WL threshold: 4096, image sequence number: 167258269
[ 1.217313] UBI-0: ubi_attach_mtd_dev:available PEBs: 0, total reserved PEBs: 1097, PEBs reserved for bad PEB handling: 80
[ 1.217332] UBI-0: ubi_thread:background thread "ubi_bgt0d" started, PID 99
[ 1.217350] RNDIS_IPA module is loaded.
[ 1.217824] file system registered
[ 1.217882] mbim_init: initialize 1 instances
[ 1.217955] mbim_init: Initialized 1 ports
[ 1.217961] mbim_bam_setup: no_ports:1
[ 1.218082] mbim_bam_setup: Initialized 1 ports
[ 1.219057] rndis_qc_init: initialize rndis QC instance
[ 1.219385] android_usb gadget: Mass Storage Function, version: 2009/09/11
[ 1.219395] android_usb gadget: Number of LUNs=1
[ 1.219403] lun0: LUN: removable read only CD-ROM file: (no medium)
[ 1.219651] android_usb gadget: android_usb ready
[ 1.219988] qcom,qpnp-rtc qpnp-rtc-ce8bee00: setting system clock to 1970-01-02 16:06:45 UTC (144405)
[ 1.220801] msm_thermal:interrupt_mode_init Interrupt mode init
[ 1.221565] parse_cluster_params(): Ignoring cluster params
[ 1.221595] /soc/qcom,lpm-levels/qcom,pm-cluster@0: No CPU phandle, assuming single cluster
[ 1.222675] rmnet_ipa started initialization
[ 1.222686] IPA SSR support = False
[ 1.222692] IPA ipa-loaduC = False
[ 1.225255] rmnet_ipa completed initialization
[ 1.225905] clock_late_init: Removing enables held for handed-off clocks
[ 1.227846] Warning: unable to open an initial console.
[ 1.228747] UBIFS-0: background thread "ubifs_bgt0_0" started, PID 111
[ 1.287499] UBIFS-0: mounted UBI, volume 0, name "rootfs"
[ 1.287512] UBIFS-0: LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[ 1.287523] UBIFS-0: FS size: 38473728 bytes (36 MiB, 303 LEBs), journal size 9023488 bytes (8 MiB, 72 LEBs)
[ 1.287530] UBIFS-0: reserved for root: 0 bytes (0 KiB)
[ 1.287541] UBIFS-0: media format: w4/r0 (latest is w4/r0), UUID D76DD3A0-D3B5-4062-9978-0B95CF1B56A4, small LPT model
[ 1.288937] VFS: Mounted root (ubifs filesystem) on device 0:11.
[ 1.289166] Freeing unused kernel memory: 244K (c0802000 - c083f000)
[ 1.825469] UBIFS-0: background thread "ubifs_bgt0_1" started, PID 170
[ 1.895861] UBIFS-0: mounted UBI, volume 1, name "usrfs"
[ 1.895875] UBIFS-0: LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[ 1.895885] UBIFS-0: FS size: 85200896 bytes (81 MiB, 671 LEBs), journal size 9023488 bytes (8 MiB, 72 LEBs)
[ 1.895893] UBIFS-0: reserved for root: 0 bytes (0 KiB)
[ 1.895904] UBIFS-0: media format: w4/r0 (latest is w4/r0), UUID EBAF48B5-98B1-49C0-837E-C6CDDB2F54D9, small LPT model
[ 1.926663] UBI-1: ubi_attach_mtd_dev:attaching mtd8 to ubi1
[ 2.225014] UBI-1: scan_all:scanning is finished
[ 2.234726] UBI-1: ubi_attach_mtd_dev:attached mtd8 (name "modem", size 70 MiB)
[ 2.234740] UBI-1: ubi_attach_mtd_dev:PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[ 2.234749] UBI-1: ubi_attach_mtd_dev:min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[ 2.234757] UBI-1: ubi_attach_mtd_dev:VID header offset: 2048 (aligned 2048), data offset: 4096
[ 2.234765] UBI-1: ubi_attach_mtd_dev:good PEBs: 566, bad PEBs: 0, corrupted PEBs: 0
[ 2.234773] UBI-1: ubi_attach_mtd_dev:user volume: 1, internal volumes: 1, max. volumes count: 128
[ 2.234782] UBI-1: ubi_attach_mtd_dev:max/mean erase counter: 6/2, WL threshold: 4096, image sequence number: 1796338445
[ 2.234791] UBI-1: ubi_attach_mtd_dev:available PEBs: 0, total reserved PEBs: 566, PEBs reserved for bad PEB handling: 80
[ 2.240753] UBI-1: ubi_thread:background thread "ubi_bgt1d" started, PID 180
[ 2.261907] UBIFS-1: background thread "ubifs_bgt1_0" started, PID 184
[ 2.312131] UBIFS-1: mounted UBI, volume 0, name "modem"
[ 2.312148] UBIFS-1: LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[ 2.312158] UBIFS-1: FS size: 59805696 bytes (57 MiB, 471 LEBs), journal size 9023488 bytes (8 MiB, 72 LEBs)
[ 2.312165] UBIFS-1: reserved for root: 0 bytes (0 KiB)
[ 2.312176] UBIFS-1: media format: w4/r0 (latest is w4/r0), UUID A7B83B87-522E-4067-8479-659AA443C33B, small LPT model
>[ 2.320826] Detected mtd block number 15 for userrw
[ 2.322826] UBI-2: ubi_attach_mtd_dev:attaching mtd15 to ubi2
[ 2.408539] UBI-2: scan_all:scanning is finished
[ 2.418833] UBI-2: ubi_attach_mtd_dev:attached mtd15 (name "userrw", size 20 MiB)
[ 2.418847] UBI-2: ubi_attach_mtd_dev:PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[ 2.418856] UBI-2: ubi_attach_mtd_dev:min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[ 2.418864] UBI-2: ubi_attach_mtd_dev:VID header offset: 2048 (aligned 2048), data offset: 4096
[ 2.418872] UBI-2: ubi_attach_mtd_dev:good PEBs: 162, bad PEBs: 0, corrupted PEBs: 0
[ 2.418879] UBI-2: ubi_attach_mtd_dev:user volume: 1, internal volumes: 1, max. volumes count: 128
[ 2.418889] UBI-2: ubi_attach_mtd_dev:max/mean erase counter: 470/292, WL threshold: 4096, image sequence number: 34870392
[ 2.418897] UBI-2: ubi_attach_mtd_dev:available PEBs: 0, total reserved PEBs: 162, PEBs reserved for bad PEB handling: 80
[ 2.419816] UBI-2: ubi_thread:background thread "ubi_bgt2d" started, PID 193
>[ 2.435476] Detected ubi volume name userrw for ubi 2
>[ 2.441536] Detected mtd block number 16 for hdata
[ 2.443559] UBI-3: ubi_attach_mtd_dev:attaching mtd16 to ubi3
[ 2.694828] UBI-3: scan_all:scanning is finished
[ 2.700340] UBI-3 warning: print_rsvd_warning: cannot reserve enough PEBs for bad PEB handling, reserved 11, need 80
[ 2.704687] UBI-3: ubi_attach_mtd_dev:attached mtd16 (name "hdata", size 58 MiB)
[ 2.704701] UBI-3: ubi_attach_mtd_dev:PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[ 2.704709] UBI-3: ubi_attach_mtd_dev:min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[ 2.704718] UBI-3: ubi_attach_mtd_dev:VID header offset: 2048 (aligned 2048), data offset: 4096
[ 2.704726] UBI-3: ubi_attach_mtd_dev:good PEBs: 470, bad PEBs: 0, corrupted PEBs: 0
[ 2.704734] UBI-3: ubi_attach_mtd_dev:user volume: 1, internal volumes: 1, max. volumes count: 128
[ 2.704743] UBI-3: ubi_attach_mtd_dev:max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 199025607
[ 2.704752] UBI-3: ubi_attach_mtd_dev:available PEBs: 0, total reserved PEBs: 470, PEBs reserved for bad PEB handling: 11
[ 2.705679] UBI-3: ubi_thread:background thread "ubi_bgt3d" started, PID 204
>[ 2.715929] Detected ubi volume name hdata for ubi 3
>[ 2.722000] Detected mtd block number 19 for persist
[ 2.723991] UBI-4: ubi_attach_mtd_dev:attaching mtd19 to ubi4
[ 2.749812] UBI-4: scan_all:scanning is finished
[ 2.759994] UBI-4: ubi_attach_mtd_dev:attached mtd19 (name "persist", size 6 MiB)
[ 2.760009] UBI-4: ubi_attach_mtd_dev:PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[ 2.760017] UBI-4: ubi_attach_mtd_dev:min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[ 2.760026] UBI-4: ubi_attach_mtd_dev:VID header offset: 2048 (aligned 2048), data offset: 4096
[ 2.760034] UBI-4: ubi_attach_mtd_dev:good PEBs: 48, bad PEBs: 0, corrupted PEBs: 0
[ 2.760042] UBI-4: ubi_attach_mtd_dev:user volume: 1, internal volumes: 1, max. volumes count: 128
[ 2.760051] UBI-4: ubi_attach_mtd_dev:max/mean erase counter: 4/2, WL threshold: 4096, image sequence number: 1678655639
[ 2.760060] UBI-4: ubi_attach_mtd_dev:available PEBs: 0, total reserved PEBs: 48, PEBs reserved for bad PEB handling: 16
[ 2.760975] UBI-4: ubi_thread:background thread "ubi_bgt4d" started, PID 215
>[ 2.770546] Detected ubi volume name persist for ubi 4
[ 2.774537] UBIFS-2: background thread "ubifs_bgt2_0" started, PID 221
[ 2.836246] UBIFS-2: mounted UBI, volume 0, name "userrw"
[ 2.836262] UBIFS-2: LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[ 2.836272] UBIFS-2: FS size: 8634368 bytes (8 MiB, 68 LEBs), journal size 2412544 bytes (2 MiB, 19 LEBs)
[ 2.836280] UBIFS-2: reserved for root: 0 bytes (0 KiB)
[ 2.836291] UBIFS-2: media format: w4/r0 (latest is w4/r0), UUID BD35807D-33DD-4970-8266-4BD2918FA560, small LPT model
[ 2.906596] UBIFS-3: mounted UBI, volume 0, name "hdata", R/O mode
[ 2.906611] UBIFS-3: LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[ 2.906620] UBIFS-3: FS size: 56504320 bytes (53 MiB, 445 LEBs), journal size 7745536 bytes (7 MiB, 61 LEBs)
[ 2.906628] UBIFS-3: reserved for root: 0 bytes (0 KiB)
[ 2.906639] UBIFS-3: media format: w4/r0 (latest is w4/r0), UUID 5C173F35-7EDB-40B4-9C18-3C991FDC33FC, small LPT model
[ 2.967852] swi_mtu_store: android_usb: MTU = 1500
[ 2.968221] swi_rndis_store: swi_rndis_store: rndis link = 0
[ 3.025563] enable_store: android_usb: already disabled
[ 3.036937] rndis_qc_function_bind_config: rndis_qc_function_bind_config MAC: 00:A0:C6:00:00:00
[ 3.037005] rndis_qc_bind_config_vendor: Getting random host_ethaddr=d6:84:00:ab:59:9f, device_ethaddr=fa:55:98:d6:3a:da
[ 3.037014] rndis_qc_bind_config_vendor: Setting host_ethaddr=00:a0:c6:00:00:00, device_ethaddr=fa:55:98:d6:3a:daRNDIS_IPA NetDev was initialized
[ 3.042599] ecm_qc_function_bind_config: ecm_qc_function_bind_config MAC: 00:A0:C6:00:00:00
[ 3.042645] ecm_qc_bind_config: Getting random host_ethaddr=42:89:1c:cd:bd:6c, device_ethaddr=be:ea:b6:f7:98:7c
[ 3.042653] ecm_qc_bind_config: Setting host_ethaddr=00:a0:c6:00:00:00, device_ethaddr=be:ea:b6:f7:98:7c<3>[ 3.054911] ecm_ipa@ecm_ipa_init@345@ctx:swicompswitch: ECM_IPA was initialized successfully
[ 3.103989] [/home/ntgrbuild/tags_9x40r11/NTG9X40C_11.14.07.00/mdm9x40r11_core/apps_proc/kernel/drivers/usb/gadget/usb_netlink_base.c:106] SIPC1 = 0, SIVer1 = 0 SIPC2 = 0 SIver2 = 0
[ 3.136054] [/home/ntgrbuild/tags_9x40r11/NTG9X40C_11.14.07.00/mdm9x40r11_core/apps_proc/kernel/drivers/usb/gadget/usb_netlink_base.c:106] SIPC1 = 0, SIVer1 = 0 SIPC2 = 0 SIver2 = 0<6>[ 3.145966] usr_pid_store: android_usb: User process id = 249
[ 3.164549] read descriptors
[ 3.164569] read strings
[ 3.406186] android_work: android_work: sent uevent USB_STATE=CONNECTED
[ 3.426780] android_usb gadget: super-speed config #1: 86000c8.android_usb
[ 3.450026] gen_ndis_query_resp swi_mtu 1500
[ 3.457801] gen_ndis_query_resp swi_mtu 1500<6>[ 3.485419] android_work: android_work: sent uevent USB_STATE=CONFIGURED
[ 3.537992] sps:BAM 0x08b04000 (va:0xd0e40000) enabled: ver:0x26, number of pipes:8
[ 3.538483] ipa ipa_uc_state_check:270 uC is not loaded
[ 3.544816] ipa ipa_uc_state_check:270 uC is not loaded
[ 3.559834] RNDIS_IPA NetDev pipes were connected
[ 3.582441] subsys-restart: __subsystem_get(): Changing subsys fw_name to modem
[ 3.583605] pil-q6v5-mss 4080000.qcom,mss: modem: loading from 0x81c00000 to 0x87000000
[ 3.688710] pil-q6v5-mss 4080000.qcom,mss: MBA: loading from 0x8f000000 to 0x8f100000
[ 3.737092] pil-q6v5-mss 4080000.qcom,mss: MBA boot done
>[ 3.848582] QCMAP:start
[ 4.164750] read descriptors
[ 4.164771] read strings
>[ 4.307896] QTI:start
>[ 4.431776] USB QCMAP NL IOCTL Snd GETNEIGH Succ
[ 4.520016] ------------[ cut here ]------------
[ 4.520042] WARNING: at /home/ntgrbuild/tags_9x40r11/NTG9X40C_11.14.07.00/mdm9x40r11_core/apps_proc/kernel/net/netfilter/nf_queue.c:35 nf_register_queue_handler+0x28/0x38()
[ 4.520049] Modules linked in:
[ 4.520062] CPU: 0 PID: 472 Comm: sh Tainted: G W 3.10.49-svn4120 #1
[ 4.520085] [<c001432c>] (unwind_backtrace+0x0/0xec) from [<c0011858>] (show_stack+0x10/0x14)
[ 4.520102] [<c0011858>] (show_stack+0x10/0x14) from [<c0022ec8>] (warn_slowpath_common+0x4c/0x68)
[ 4.520119] [<c0022ec8>] (warn_slowpath_common+0x4c/0x68) from [<c002309c>] (warn_slowpath_null+0x18/0x20)
[ 4.520134] [<c002309c>] (warn_slowpath_null+0x18/0x20) from [<c0440014>] (nf_register_queue_handler+0x28/0x38)
[ 4.520151] [<c0440014>] (nf_register_queue_handler+0x28/0x38) from [<c0459324>] (proc_sip_segment+0x38/0x54)
[ 4.520167] [<c0459324>] (proc_sip_segment+0x38/0x54) from [<c0124cf4>] (proc_sys_call_handler+0x9c/0xb8)
[ 4.520181] [<c0124cf4>] (proc_sys_call_handler+0x9c/0xb8) from [<c0124d20>] (proc_sys_write+0x10/0x18)
[ 4.520197] [<c0124d20>] (proc_sys_write+0x10/0x18) from [<c00d5ed4>] (vfs_write+0xd0/0x180)
[ 4.520212] [<c00d5ed4>] (vfs_write+0xd0/0x180) from [<c00d6390>] (SyS_write+0x38/0x68)
[ 4.520228] [<c00d6390>] (SyS_write+0x38/0x68) from [<c000dbc0>] (ret_fast_syscall+0x0/0x30)
[ 4.520236] ---[ end trace 38c01166e738dd3d ]---
[ 4.661371] _gpio_request: gpio-23 (sysfs) status -517
[ 4.661384] export_store: status -19
[ 4.661860] _gpio_request: gpio-33 (sysfs) status -517
[ 4.661869] export_store: status -19
>[ 4.756051] QCMAP: InitBridge HW Address of bridge is 50:6a:03:8f:2a:bc
[ 4.955169] device rndis0 entered promiscuous mode
[ 4.977596] device ecm0 entered promiscuous mode
>[ 5.071276] QCMAP:Start DHCP server
[ 5.164928] read descriptors
[ 5.164948] read strings
[ 5.260342] msm_thermal:set_enabled enabled = 0
>[ 5.315080] eMBMs Tunneling Module:start
[ 5.452049] store_rndis_control: [store_rndis_control] 0
[ 5.452049] , 2
>[ 5.459186] QCMAP:DHCP server started
>[ 5.476627] QCMAP:DHCP server started
[ 5.507750] RNDIS_IPA NetDev was opened
[ 5.515146] bridge0: port 1(rndis0) entered forwarding state
[ 5.515186] bridge0: port 1(rndis0) entered forwarding state
[ 5.548468] ecm_qc_open_ipa: ecm_qc_open_ipa: sending networkd up
[ 5.548911] IPv6: ADDRCONF(NETDEV_UP): ecm0: link is not ready
>[ 5.551555] USB Client Mac Address is 0:a0:c6:0:0:0
[ 6.166992] read descriptors
[ 6.167013] read strings
[ 6.233624] _gpio_request: gpio-13 (sysfs) status -517
[ 6.233637] export_store: status -19
[ 6.237875] _gpio_request: gpio-12 (sysfs) status -517
[ 6.237888] export_store: status -19
[ 6.453289] detected fb_set_par error, error code: 22
[ 6.457840] detected fb_set_par error, error code: 22
>[ 6.553379] QCMAP:USB Client IP Addr fe80::c039:be7c:1936:d470
[ 7.167179] read descriptors
[ 7.167198] read strings
[ 8.167357] read descriptors
[ 8.167376] read strings
[ 9.167589] read descriptors
[ 9.167607] read strings
[ 10.167801] read descriptors
[ 10.167823] read strings
>[ 10.409072] QCMAP:USB Client IP Addr 192.168.32.4
[ 10.467982] nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead.
[ 11.168001] read descriptors
[ 11.168021] read strings
[ 12.132021] pil-q6v5-mss 4080000.qcom,mss: modem: Brought out of reset
[ 12.168214] read descriptors
[ 12.168233] read strings
[ 12.197986] pil-q6v5-mss 4080000.qcom,mss: modem: Power/Clock ready interrupt received
[ 12.198017] pil-q6v5-mss 4080000.qcom,mss: Subsystem error monitoring/handling services are up
[ 12.417118] diag: In diag_dci_write_proc, invalid data 0xce0bf000, peripheral: 0, len: 527
[ 12.460642] ipa-wan handle_indication_req:128 not send indication
[ 12.460707] Sending QMI_IPA_INIT_MODEM_DRIVER_REQ_V01
[ 12.462375] ipa ipa_uc_response_hdlr:415 IPA uC loaded
[ 12.462406] ipa ipa_uc_wdi_event_log_info_handler:319 wdi stats sz invalid exp=152 is=160
[ 12.462451] QMI_IPA_INIT_MODEM_DRIVER_REQ_V01 response received
[ 13.168424] read descriptors
[ 13.168444] read strings
[ 13.408069] ipa-wan ipa_wwan_ioctl:1310 dev(rmnet_data0) register to IPA
[ 13.408691] ipa-wan ipa_wwan_ioctl:1310 dev(rmnet_data1) register to IPA
[ 13.409210] ipa-wan ipa_wwan_ioctl:1310 dev(rmnet_data2) register to IPA
[ 13.409661] ipa-wan ipa_wwan_ioctl:1310 dev(rmnet_data3) register to IPA
[ 13.415265] ipa-wan ipa_wwan_ioctl:1310 dev(rmnet_data4) register to IPA
[ 13.419043] ipa-wan ipa_wwan_ioctl:1310 dev(rmnet_data5) register to IPA
[ 13.421276] ipa-wan ipa_wwan_ioctl:1310 dev(rmnet_data6) register to IPA
[ 13.423882] ipa-wan ipa_wwan_ioctl:1310 dev(rmnet_data7) register to IPA
[ 14.168604] read descriptors
[ 14.168624] read strings
>[ 14.358512] QCMAP:Init Complete
>[ 14.369087] QCMAP:Enable mobileap
>[ 14.435607] USB QCMAP NL IOCTL Snd GETNEIGH Succ
>[ 14.458244] QTI:RNDIS mode
>[ 14.465249] QTI:LINK_UP message posted
>[ 14.753128] QCMAP:Enable mobileap done
>[ 14.849149] USB QCMAP NL IOCTL Snd GETNEIGH Succ
>[ 14.856255] QTI:Processing LINK_UP
>[ 14.862890] QTI:Enable mobileap
>[ 14.868943] QTI:Setup TETHERED link
[ 15.083109] can't set rx trigger
[ 15.168816] read descriptors
[ 15.168836] read strings
>[ 15.195775] QTI:LINK_UP Processed
>[ 15.258690] Scheduler: delete block rules
>[ 15.291012] ALX:start/load
[ 15.324249] Qualcomm Atheros(R) AR813x/AR815x/AR816x PCI-E Ethernet Network Driver
[ 15.388013] warning: `qrngd' uses 32-bit capabilities (legacy support in use)
>[ 15.505052] DM port over TCP available at port 5522, Interface: LAN
>[ 15.508565] AToTCP bound to 192.168.32.1:5520, Interface: LAN
[ 16.169108] read descriptors
[ 16.169159] read strings
>[ 16.887031] Scheduler: delete block rules
>[ 16.984231] QCMAP:bringup v4
[ 17.169390] read descriptors
[ 17.169410] read strings
>[ 17.683261] QCMAP:WAN connected v4
[ 18.013194] ipa ipa_nat_del_cmd:684 using temp memory during nat del
[ 18.021528] ipa-wan qmi_filter_notify_send:619 delete UL filter rule for pipe 11
[ 18.169581] read descriptors
[ 18.169604] read strings
>[ 18.341491] QCMAP:Start DHCP server
[ 18.411484] store_rndis_control: [store_rndis_control] 0
[ 18.411484] , 2
>[ 18.419787] QCMAP:DHCP server started
>[ 18.644016] QCMAP:Start DHCP server
[ 18.673398] store_rndis_control: [store_rndis_control] 0
[ 18.673398] , 2
>[ 18.676372] QCMAP:DHCP server started
[ 19.169917] read descriptors
[ 19.169968] read strings
[ 20.170313] read descriptors
[ 20.170364] read strings
[ 20.564417] bridge0: port 1(rndis0) entered forwarding state
[ 20.796853] NOHZ: local_softirq_pending 08
[ 21.170688] read descriptors
[ 21.170741] read strings
[ 22.171072] read descriptors
[ 22.171123] read strings
[ 23.171548] read descriptors
[ 23.171601] read strings
[ 24.171858] read descriptors
[ 24.171881] read strings
[ 25.172056] read descriptors
[ 25.172076] read strings
[ 26.172389] read descriptors
[ 26.172447] read strings
>[ 26.926333] QCMAP:Start WLAN Enable
[ 27.172702] read descriptors
[ 27.172725] read strings
>[ 27.226114] QCMAP: Wlan0 Hostapd kill complete
>[ 27.247226] Starting WLAN... start ap
[ 27.915293] wlan: loading driver v4.2.23.60
[ 27.927875] msm_pcie_enable: PCIe: Assert the reset of endpoint of RC0.
[ 27.931170] msm_pcie_enable: PCIe RC0 PHY is ready!
[ 27.941244] msm_pcie_enable: PCIe: Release the reset of endpoint of RC0.
[ 27.983557] msm_pcie_enable: PCIe RC0 link initialized
[ 28.001700] cnss:failed to get fw: evicted30.bin
[ 28.002007] hif_pci_probe:, con_mode= 0x0
[ 28.002022] PCI device id is 003e :003e
[ 28.002047] PCI: enabling device 0000:01:00.0 (0140 -> 0142)
[ 28.003500]
[ 28.003500] hif_pci_configure : num_desired MSI set to 0
[ 28.003558]
[ 28.003558] Using PCI Legacy Interrupt
[ 28.062521] /proc/cld/athdiagpfs created
[ 28.089518] wlan: [1834:E :HDD] wlan_hdd_cfg80211_init: wiphy->bands[i] is NULL, i = 2
[ 28.090267] NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0
[ 28.090581] crystal_freq: 48000000Hz
[ 28.090670] Step 1a: 66666
[ 28.090792] Step 1b: 6AAA8
[ 28.090878] Step 2a: 400
[ 28.091002] Step 2b: 160
[ 28.091091] Step 3a: 0
[ 28.091218] Step 3b: 1
[ 28.091361] Step 5a: 11458
[ 28.091595] Step 5b: 5000E
[ 28.091775] Step 7a: 5000E
[ 28.091905] Step 7b: 4000E
[ 28.092085] Step 9a: 3
[ 28.092191] Step 9b: 1
[ 28.092254] Step 10a: 4000E
[ 28.092352] Step 10b: E
[ 28.093364] Board extended Data download address: 0x0
[ 28.099171] wlan: [1834:E :VOS] __ol_transfer_bin_file: transferring file: bdwlan30.bin size 8124 bytes done!
[ 28.099237] ol_download_firmware: Using 0x1234 for the remainder of init
[ 28.099246] ol_transfer_codeswap_struct: failed to get codeswap structure
[ 28.120428] wlan: [1834:E :VOS] __ol_transfer_bin_file: transferring file: otp30.bin size 23773 bytes done!
[ 28.120677] __ol_transfer_bin_file: no Setup file defined
[ 28.172928] read descriptors
[ 28.172994] read strings
[ 28.917770] wlan: [1834:E :VOS] __ol_transfer_bin_file: transferring file: qwlan30.bin size 714966 bytes done!
[ 28.918007] +HTCCreate .. HIF :c8c8e800
[ 28.918084] -HTCCreate (0xc1510000)
[ 28.918199] WDA_open-5302: WMA --> wmi_unified_attach - success
[ 28.918308] ol_if_dfs_attach: called; ptr=ce23db8c, radar_info=c84b7c24
[ 28.919394] wlan: [1834:E :SAP] dfs_init_radar_filters[201]: Unknown dfs domain 0
[ 28.919493] +HWT
[ 28.919513] pipe_num:0 pipe_info:0xc8c8e870
[ 28.919616] pipe_num:3 pipe_info:0xc8c8e90c
[ 28.919645] pipe_num:4 pipe_info:0xc8c8e940
[ 28.919863] pipe_num:5 pipe_info:0xc8c8e974
[ 28.928003] Target Ready! : transmit resources : 2 size:1792, MaxMsgsPerHTCBundle = 1
[ 28.928029] HTC Service Index : 1 TX : 0x100 : alloc:2
[ 28.928049] HTC Service:0x0001, ULpipe:0 DLpipe:1 id:0 Ready
[ 28.928059] -HWT
[ 28.928468] is_full_reorder_offloaded? 1
[ 28.928492] HTC Service TX : 0x300 : allocation is zero!
[ 28.928677] HTC Service:0x0300, ULpipe:4 DLpipe:1 id:1 Ready
[ 28.928695] HTC Service:0x0300 ep:1 TX flow control disabled
[ 28.929632] htt_tx_attach:htt_desc_start:0xcef80000 htt_desc_end:0xcef8b580
[ 28.935648] HTT: full reorder offload enabled
[ 28.941723] HTC Service:0x0100, ULpipe:3 DLpipe:2 id:2 Ready
[ 28.941752] wma_pre_start-5684: WMA --> wmi_unified_connect_htc_service - success
[ 28.941810] wma_mc_process_msg-23282: McThread: WNI_CFG_DNLD_REQ
[ 28.949991] HTC using TX credit flow control
[ 28.950386] __wmi_control_rx: WMI UNIFIED SERVICE READY event
[ 28.950405] wma_rx_service_ready_event-26201: WMA <-- WMI_SERVICE_READY_EVENTID
[ 28.950428] wlan: [13:E :WDA] wma_rx_service_ready_event: Firmware build version : 0000005a
[ 28.950455] wlan: [13:E :WDA] wma_rx_service_ready_event: Board version: 0.1011113
[ 28.950488] wma_rx_service_ready_event-26321: WMA --> WMI_INIT_CMDID
[ 28.966477] __wmi_control_rx: WMI UNIFIED READY event
[ 28.966498] wma_rx_ready_event-26350: WMA <-- WMI_READY_EVENTID
[ 28.985191] wlan: [1834:E :SME] csr_init_chan_list: 323: init time country code US
[ 28.985272] cfg80211: Calling CRDA for country: US
[ 28.995057] wlan: [80:E :VOS] error: wiphy->bands is NULL, i = 2
[ 28.995093] wlan: [80:F :HDD] pAdapter is null !!
[ 28.995120] cfg80211: Regulatory domain changed to country: US
[ 28.995133] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)
[ 28.995148] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 3000 mBm)
[ 28.995164] cfg80211: (5170000 KHz - 5250000 KHz @ 80000 KHz), (600 mBi, 2400 mBm)
[ 28.995180] cfg80211: (5250000 KHz - 5330000 KHz @ 80000 KHz), (600 mBi, 2400 mBm)
[ 28.995195] cfg80211: (5490000 KHz - 5730000 KHz @ 80000 KHz), (600 mBi, 2400 mBm)
[ 28.995211] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (600 mBi, 3000 mBm)
[ 28.996267] wlan: [1834:E :HDD] hdd_ipa_uc_rt_debug_init:898: hdd_ipa_uc_rt_debug_init: IPA RT debug is not enabled
[ 28.996738] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 4000 mBm)
[ 28.999254] wlan: [1834:E :HDD] hdd_ipa_init:4500: UC Ready
[ 28.999693] wlan: [1834:E :HDD] hdd_ipa_uc_ol_init:1762: hdd_ipa_uc_ol_init CONS DB pipe out 0x79620c8
[ 29.005838] wlan: [1834:E :HDD] hdd_ipa_uc_ol_init:1814: hdd_ipa_uc_ol_init PROD DB pipe out 0x79620c0
[ 29.005893] wlan: [1834:E :WDA] MCC TX Pause Event Handler register
[ 29.005909] wlan: [1834:E :WDA] Target does not support batch scan feature
[ 29.006443] Pkt log is disabled
[ 29.006538] wlan: [1834:E :SME] sme_AddChAvoidCallback: Plug in CH AVOID CB
[ 29.006635] target uses HTT version 3.27; host uses 3.12
[ 29.006644] *** Warning: host/target HTT versions are different, though compatible!
[ 29.007466] wlan: [1847:E :WDA] wma_unified_vdev_create_send: ID = 0 VAP Addr = 50:6a:03:8f:2a:bb
[ 29.007507] wma_vdev_attach-6534: vdev_id 0, txrx_vdev_handle = c1739e00
[ 29.035016] Host SW:4.2.23.60, FW:0.0.0.90, HW:QCA6174_REV3_1
[ 29.035135] wlan_logging_sock_activate_svc: Initalizing FEConsoleLog = 0 NumBuff = 32
[ 29.036447] wlan: [1847:E :WDA] Invalid wda_cli_set pdev command/Not yet implemented 0x34
[ 29.037170] wlan_logging_sock_activate_svc: Activated wlan_logging svc
[ 29.037745] wlan: driver loaded
[ 29.039329] wlan: [1847:E :WDA] TM sending the following to firmware: min 0 max 255 enable 1
[ 29.039358] wlan: [1847:E :WDA] TM Sending thermal mgmt cmd: low temp 0, upper temp 255, enabled 1
[ 29.050181] wlan: [1868:E :SME] PmcOffloadEnableStaModePowerSave: 3705: Failed to Queue Sta Mode Ps Request
[ 29.050328] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
>[ 29.059940] QCMAP:Start Hostapd
[ 29.144996] wma_vdev_detach-5941: vdev_id:0 vdev_hdl:c1739e00
[ 29.145018] wlan: [0:E :WDA] Call txrx detach with callback for vdev 0
[ 29.154280] cfg80211: Calling CRDA for country: FR
[ 29.156579] wlan: [13:E :VOS] error: wiphy->bands is NULL, i = 2
[ 29.156693] cfg80211: Regulatory domain changed to country: FR
[ 29.156701] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)
[ 29.156709] cfg80211: (2402000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 2000 mBm)
[ 29.156717] cfg80211: (5170000 KHz - 5250000 KHz @ 80000 KHz), (N/A, 2000 mBm)
[ 29.156725] cfg80211: (5250000 KHz - 5330000 KHz @ 80000 KHz), (N/A, 2000 mBm)
[ 29.156733] cfg80211: (5490000 KHz - 5710000 KHz @ 80000 KHz), (N/A, 2700 mBm)
[ 29.156740] cfg80211: (57240000 KHz - 65880000 KHz @ 2160000 KHz), (N/A, 4000 mBm)
[ 29.173317] read descriptors
[ 29.173336] read strings
[ 29.178704] wlan: [1847:E :WDA] wma_unified_vdev_create_send: ID = 0 VAP Addr = 00:00:00:00:00:00
[ 29.178784] wma_vdev_attach-6534: vdev_id 0, txrx_vdev_handle = cbcdcc00
[ 29.179048] wlan: [1878:E :HDD] hdd_hostapd_SAPEventCB: usrDataForCallback is null
[ 29.179434] wlan: [1847:E :WDA] scan_id a001, vdev_id 0, scan type 0, msg_type 1103
[ 29.509663] wlan: [13:E :WDA] scan complete - scan_id a001, vdev_id 0
[ 29.509936] wlan: [1847:E :SME] Found 0 BSS, statusCode 0
[ 29.510136] wlan: [1847:E :SME] sme_SelectCBMode: HW: 256 CH: 36 ORIG_BW: 2
[ 29.510136]
[ 29.510463] wlan: [1847:E :SME] sme_SelectCBMode: CH: 36 NEW_BW: 2 5G-CB_Mode:6
[ 29.510971] wma_vdev_detach-5941: vdev_id:0 vdev_hdl:cbcdcc00
[ 29.511019] wlan: [0:E :WDA] Call txrx detach with callback for vdev 0
[ 29.522311] wlan: [1847:E :WDA] scan_id a002, vdev_id 0, scan type 0, msg_type 1103
[ 29.687877] wlan: [13:E :WDA] scan complete - scan_id a002, vdev_id 0
[ 29.688122] wlan: [1847:E :SME] Found 0 BSS, statusCode 0
[ 29.900639] wlan: [1878:E :SAP] WLANSAP_set_Dfs_Restrict_JapanW53: 3135: Regdomain not japan, set disable JP W53 not valid
[ 29.900663] wlan: [1878:E :SAP] WLANSAP_set_Dfs_Preferred_Channel_location: 3208: sapdfs:NOT JAPAN REG, Invalid Set preferred chans location
[ 29.900944] wlan: [1878:E :SME] sme_SelectCBMode: HW: 256 CH: 36 ORIG_BW: 2
[ 29.900944]
[ 29.901365] wlan: [1878:E :SME] sme_SelectCBMode: CH: 36 NEW_BW: 2 5G-CB_Mode:6
[ 29.901530] wlan: [1878:E :SME] sme_SelectCBMode: HW: 256 CH: 36 ORIG_BW: 2
[ 29.901530]
[ 29.901781] wlan: [1878:E :SME] sme_SelectCBMode: CH: 36 NEW_BW: 2 5G-CB_Mode:6
[ 29.901801] wlan: [1878:E :SME] sme_SelectCBMode: HW: 256 CH: 36 ORIG_BW: 2
[ 29.901801]
[ 29.902041] wlan: [1878:E :SME] sme_SelectCBMode: CH: 36 NEW_BW: 2 5G-CB_Mode:6
[ 29.902126] wlan: [1847:E :WDA] wma_unified_vdev_create_send: ID = 0 VAP Addr = 50:6a:03:8f:2a:bb
[ 29.904681] wma_vdev_attach-6534: vdev_id 0, txrx_vdev_handle = cbcdcc00
[ 29.905731] wlan: [1847:E :PE ] limMlmAddBss: 1694: TRYING TO HIDE SSID 0
[ 29.905765] wlan: [1847:E :PE ] mlm_add_sta: 1591: GF: 0, ChnlWidth: 1, MimoPS: 3, lsigTXOP: 0, dsssCCK: 0, SGI20: 1, SGI401
[ 29.905878] wlan: [1847:E :WDA] wma_create_peer: Created peer with peer_addr 51:9a:04:8f:2a:bb vdev_id 0, peer_count - 1
[ 30.006657] wlan: [1847:E :HDD] AP(36) 51:9a:04:8f:2a:bb
[ 30.019247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 30.026305] wlan: [1847:E :WDA] wma_ipa_offload_enable_disable: offload_type=0, enable=1
[ 30.042894] wma_set_bsskey-14267: BSS Key setup with vdev_mac 51:9a:04:8f:2a:bb
[ 30.042894]
[ 30.043130] TXRX: ol_txrx_peer_find_add_id: Delete Peer c8fbd000
[ 30.043159] TXRX: Couldn't find peer from ID 35 - skipping security inits
>[ 30.085184] QCMAP: Wlan0 Hostapd Start Success
[ 30.111294] device wlan0 entered promiscuous mode
[ 30.111402] bridge0: port 3(wlan0) entered forwarding state
[ 30.111462] bridge0: port 3(wlan0) entered forwarding state
[ 30.145552] ipa __ipa_mdfy_flt_rule:1097 bad params
[ 30.145567] ipa ipa_mdfy_flt_rule:1302 failed to mdfy rt rule 0
>[ 30.166037] QCMAP:WLAN Enabled
[ 30.173647] read descriptors
[ 30.173668] read strings
[ 30.179347] wlan: [1847:E :WDA] TM set level 0
[ 31.174004] read descriptors
[ 31.174056] read strings
[ 32.176296] read descriptors
[ 32.176358] read strings
[ 33.176735] read descriptors
[ 33.176793] read strings
[ 34.177095] read descriptors
[ 34.177121] read strings
[ 35.177348] read descriptors
[ 35.177375] read strings
[ 35.272677] NOHZ: local_softirq_pending 08
[ 36.177546] read descriptors
[ 36.177565] read strings
[ 37.177856] read descriptors
[ 37.177911] read strings
[ 38.178273] read descriptors
[ 38.178401] read strings
[ 39.178758] read descriptors
[ 39.178814] read strings
[ 40.179186] read descriptors
[ 40.179245] read strings
[ 41.179641] read descriptors
[ 41.179704] read strings
[ 42.180093] read descriptors
[ 42.180146] read strings
[ 43.180517] read descriptors
[ 43.180572] read strings
[ 44.180956] read descriptors
[ 44.181013] read strings
[ 45.124375] bridge0: port 3(wlan0) entered forwarding state
[ 45.181317] read descriptors
[ 45.181350] read strings
[ 46.181646] read descriptors
[ 46.181700] read strings


Прикрепленные файлы

Прикрепленный файлdmesg_export.txt ( 63.53 КБ )


Сообщение отредактировал sandwern - 06.02.17, 00:24



Реп: (2)
Okay, let's try this again. I had an account 'cocacolazero' but I lost it. Registration or even logging on is not easy since there is captcha in Russian.

I have AC790s and recently purchased Netgear LB1110. Let's handle AC790s first. I wish to dump the firmware and find out the 'entercnd' password. ADB port is not open. Only open ports are 5510 (telnet and standard AT access) and 5511 (unknown use).

I managed to connect the router over USB in 'boothold' mode, as described here Netgear AirCard AC785(S), AC790(S), AC810(S) - Обсуждение but because qtools are fully in Russian, I am really stuck. I simply don't understand what the tools reply. This is the github repo I found, https://github.com/forth32/qtools. Is there an english version?

Qtool guide seems to work, with the only difference that 790 uses a different chip, so it is "qdload -pXX -k8 -i" instead of "qdload -pXX -k3 -i", following the output of "qdload -kl".

I need a very clear instructions what to do, a line after line, and an example (e.g. from 810) if possible, so I can do this blind. Please reply either in English or *very simple* Russian so Google translate could handle that. Many thanks!

Сообщение отредактировал redbulldiet - 05.02.17, 19:46



Реп: (16)
* redbulldiet,
i can hardly speculate qtools are russian locale only. if you try to snap shot any russian instance, that will be greatly appreciated. Once one man gets stuck, another man seeks any thing to stick him out.



Реп: (1433)
redbulldiet @ 05.02.17, 19:45 *
but because qtools are fully in Russian

I've translated qdload and qrflash for you. See english versions here.
Test run (Alcatel Y850) log:
G:\LTE\qtools_eng>qdload -p10 -k3 -i

Waiting for Hello packet from device...

ID of image to load: 00000007

Loading loaders/NPRG9x25p.bin...

Sending programmer to device...

Programmer has been sucsessfully sent

Protocol version: 3
Platform: MDM9x25
NAND controller base address: f9af0000
Flash chip: Micron MT29F4G08ABBEA3W , NAND 512MiB 1.8V 8-bit
Sector size: 516 bytes
Page size: 4096 bytes (8 sectors)
Pages per block: 64
OOB size: 256 bytes/page
ECC algo: BCH, 8 bits
ЕСС size: 13 bytes/sector
Spare size: 2 bytes/sector
Badblock marker position: user+175
Flash chip size = 2048 blocks (512 MB)


G:\LTE\qtools_eng>qrflash -p10 -s@ -m

# Start Size A0 A1 A2 F# Format ------ Name-----
============================================================
00 0 00000a ff 01 00 00 LNX 0:SBL
01 a 00000a ff 01 ff 00 LNX 0:MIBIB
02 14 00000e ff 01 00 00 LNX 0:SDI
03 22 00000e ff 01 00 00 LNX 0:TZ
04 30 000003 ff 01 00 00 LNX 0:MBA
05 33 00000e ff 01 00 00 LNX 0:RPM
06 41 00003c ff 01 00 00 LNX 0:EFS2
07 7d 0000cc ff 01 00 00 LNX 0:QDSP
08 149 000050 ff 01 00 00 LNX 0:JRDRESOURCE
09 199 000004 ff 01 00 00 LNX 0:APPSBL
10 19d 00002a ff 01 00 00 LNX 0:APPS
11 1c7 0002f9 ff 01 00 00 LNX 0:CACHE
12 4c0 0000c8 ff 01 00 00 LNX 0:CDROM
13 588 000022 ff 01 00 00 LNX 0:RECOVERY
14 5aa 000028 ff 01 00 00 LNX 0:OEM
15 5d2 000048 ff 01 00 00 LNX 0:RECOVERYFS
16 61a 0000b7 ff 01 00 00 LNX 0:SYSTEM
17 6d1 000123 ff 01 00 00 LNX 0:USERDATA
18 7f4 00000c ff 01 00 00 LNX 0:MANUDATA
============================================================
Partition table version: 4

G:\LTE\qtools_eng>qrflash -p10 -f0

# Start Size A0 A1 A2 F# Format ------ Name-----
============================================================
00 0 00000a ff 01 00 00 LNX 0:SBL
* R: block 000009 [start+009] (100%)

G:\LTE\qtools_eng>qrflash -p10 -z160 -ry -f16

! Setting OOB size 160 instead of 256

# Start Size A0 A1 A2 F# Format ------ Name-----
============================================================
16 61a 0000b7 ff 01 00 00 LNX 0:SYSTEM
* R: block 000630 [start+016] (12%)
! Page 19 sector 6: bits corrected: 1
* R: block 00063a [start+020] (18%)
! Page 48 sector 1: bits corrected: 1
* R: block 00063b [start+021] (18%)
! Page 2 sector 3: bits corrected: 1
* R: block 000664 [start+04a] (40%)
! Page 56 sector 6: bits corrected: 1
* R: block 0006d0 [start+0b6] (100%)

G:\LTE\qtools_eng>

P.S. Have you tried all of known passwords ("A710","whistler","grouse","cypress") already?

Сообщение отредактировал vvevvevve - 05.02.17, 23:39



Реп: (2)
Yes, I tried all known passwords. None works. Either for AC790 or LB1110. Thanks for translating the tools. Brilliant work. Now I can see what I am doing.

So after at!boothold QDLoader is correctly attached, in my case, to COM 14

What works:
qcommand -p14 -c "c 0b" = works, AC790 reboots into standard operation from boothold. This means that the setup works, COM port works and AC790 correctly enters and escapes boothold.

What doesn't work:
qdload -p14 -k8 -i = returns

Waiting for Hello packet from device...

Failed to get Hello packet from device


AC790 is MDM9230 based, so -k8 should work. What should I do now?

qrflash -p14 -s -m @ = doesn't work either. Returns an error there was no hello.


Other stuff:
at!fmbadblocks?
MST4G08G32FMHD (4096 blocks):

0 Bad blocks found.

at!package?
AC790-100EUS_23112775_NTG9X35C_11.11.00.00_00_EMEA_001.006_000



Сообщение отредактировал redbulldiet - 05.02.17, 23:50



Реп: (1433)
redbulldiet @ 05.02.17, 23:42 *
What should I do now?

Try to launch AT!QPSTDLOAD before AT!BOOTHOLD .
And don't forget to restart (with battery removal!) your device before every attempt to load the NAND programmer.

Additionally, show me results of AT!USBCOMP=?, AT!USBCOMP? and AT!IMAGE? commands execution.

Сообщение отредактировал vvevvevve - 05.02.17, 23:55



Реп: (1433)
redbulldiet @ 05.02.17, 23:42 *
qrflash -p14 -s -m @ = doesn't work either

That's correct. This utility needs a running programmer to work. You should load it first with qdload.



Реп: (2)
Okay, there's progress. A hard reset (with battery removed) and at!qpstdload before at!boothold did the trick.

C:\temp2\qtools>qdload -p14 -k8 -i

Waiting for Hello packet from device...

ID of image to load: 00000007

Loading loaders/NPRG9x35p.bin...

Sending programmer to device...

Programmer has been sucsessfully sent

Protocol version: 3
Platform: MDM9x3x
NAND controller base address: f9af0000
Flash chip: Hynix H27S4G8F2EDA-BC , NAND 512MiB 1.8V 8-bit
Sector size: 516 bytes
Page size: 2048 bytes (4 sectors)
Pages per block: 64
OOB size: 64 bytes/page
ECC algo: BCH, 4 bits
??? size: 7 bytes/sector
Spare size: 4 bytes/sector
Badblock marker position: user+1d1
Flash chip size = 4096 blocks (512 MB)


C:\temp2\qtools>qrflash -p14 -s@ -m

# Start Size A0 A1 A2 F# Format ------ Name-----
============================================================
00 0 00000a ff 01 00 00 LNX 0:SBL
01 a 00000a ff 01 ff 00 LNX 0:MIBIB
02 14 0000b4 ff 01 ff 00 LNX 0:EFS2
03 c8 000006 ff 01 00 00 LNX 0:SDI
04 ce 000008 ff 01 00 00 LNX 0:TZ
05 d6 000008 ff 01 00 00 LNX 0:RPM
06 de 000008 ff 01 00 00 LNX 0:aboot
07 e6 000052 ff 01 00 00 LNX 0:boot
08 138 000008 ff 01 00 00 LNX 0:SCRUB
09 140 000236 ff 01 00 00 LNX 0:modem
10 376 000050 ff 01 00 00 LNX 0:cache
11 3c6 00000a ff 01 00 00 LNX 0:misc
12 3d0 000052 ff 01 00 00 LNX 0:recovery
13 422 00000a ff 01 00 00 LNX 0:fota_none
14 42c 0000b6 ff 01 00 00 LNX 0:recoveryfs
15 4e2 00012c ff 01 00 00 LNX 0:system
16 60e 0002bc ff 01 00 00 LNX 0:userdata
17 8ca 00007c ff 01 00 00 LNX 0:PAD1
18 946 0000a2 ff 01 00 00 LNX 0:USERRW
19 9e8 0001d6 ff 01 00 00 LNX 0:HDATA
20 bbe 0003ae ff 01 00 00 LNX 0:NTGFOTA
21 f6c 000050 ff 01 00 00 LNX 0:CUST
22 fbc 000030 ff 01 00 00 LNX 0:PERSIST
============================================================
Partition table version: 4


Options you requested:

at!usbcomp=?
ERROR

at!usbcomp?
ERROR

at!image?
ERROR


could be these will be available after entering the password (when we find it)?

Okay, let's download that firmware. The guide says "qrflash -pXX -f Y" so what is "Y"?

Добавлено 06.02.2017, 00:11:

Oh "Y" must be "21" as in
21 f6c 000050 ff 01 00 00 LNX 0:CUST


is it?

Сообщение отредактировал redbulldiet - 06.02.17, 00:08



Реп: (1433)
redbulldiet @ 06.02.17, 00:07 *
could be these will be available after entering the password (when we find it)?

Yes, I think.
redbulldiet @ 06.02.17, 00:07 *
is it?

Exactly so. Read this image and let me look at it.



Реп: (2)
Done. See private messaging. Btw, I think if only you maintained qtools in English on github, your work would receive much more international attention. Why not.

Сообщение отредактировал redbulldiet - 06.02.17, 00:41



Реп: (2)
The password for AC790-100EUS is "lavender". Works for me. Kudos to vvevvevve for all the guidelines and finally finding the password!

Сообщение отредактировал redbulldiet - 06.02.17, 01:20



Реп: (1433)
redbulldiet @ 06.02.17, 00:37 *
if only you maintained qtools in English on github, your work would receive much more international attention

The question is whether we really need such an attention... :)



Реп: (1433)
Надо, наверное, уже где-нибудь в шапке сделать табличку со всеми этими птичками, травками и деревьями - паролями для разных модификаций разных устройств из числа обсуждаемых.



Реп: (16)
Как и ожидалось, видимо, требуется намекнуть им в Нетгире, что у нас независимая от конкретного ISP, a не S, хотя в мордочке указано 810S, это факт. Получил сегодня на свой запрос Summary:
**AirCard 810S - Wants to update the firmware. Обычный отлуп, типа иди-ка к своему ISP. "Данная заявка была закрыта, пожалуйста, зарегистрируйте новый запрос если вам необходима дальнейшая помощь".



Реп: (77)
lewisreed @ 06.02.17, 12:32 *
AirCard 810S - Wants to update the firmware.


Обновление будет, они сейчас баги собирают. На форуме своем опрашивают участников одной темы через ЛС:

A netgear moderator contacted me in pm and asking me to highlight the issues i underlined to submit it to the technical team


Ситуация с CA_3-38, правда, пока не ясна. Надеюсь, и с этим делом разберутся...



Реп: (1)
Приветствую, являюсь обладателем роутера AC785-100EUS, ознакомившись с данной темой форума, появилось желание залезть внутрь данного роутера. Роутер пылится несколько месяцев. В городе буду через неделю, по приезду сниму cust. Нужна будет помощь с извлечением пароля. есть также желание залесть в iptables, прописать ттл. В данном деле я новичек, рассчитываю на вашу помощь:)
P.S. после ввода МТСом отслеживания ттл, пришлось приобрести андроид смартфон, и прописать в загрузчике фиксированный ттл. так как постоянно в командировках по регионам, и нужно подавать интернет на ноутбук, айпад и время от времени айфон. но заданный раздающий интернет телефон не стабильно работает, и хочу вновь задействовать роутер для АР.


Полная версия   Текстовая версия

Помощь   Правила

Сейчас: 29.03.24, 11:39