Bên trong FPT 97RG6W

Gần đây mình bị reboot loop modem này, mở ra xem debug thử xem bị sao. Khi tháo ra thì board như thế này

Nhìn qua bảng mạch một chút thì mình phán đoán các chân UART và JTAG là 2 chỗ mình vẽ trong khung vàng gần các cổng RJ45, UART bên trái, JTAG bên phải. Trong bài viết mình chỉ đề cập tới UART vì mình cũng không có đồ để debug JTAG.

Dùng đồng hồ đo điện đo một chút thì nhân diện được các chân ở UART như sau:

1 (tận cùng trái)2345
3.3VTXGNDRX3.3V

Dùng Putty với baud rate là 115200, mình nhân được boot log như thế này:



RTL9607C/RTL9603C
PRELOADER Bismarck3.5
II: LPLR:1126, SVN:5109c, Build_date:20052114, Toolkit:msdk-4.8.5-1004k-EB-3.18-                                                                                                                                                             u0.9.33-m32t-150818
II: Disable OCP/LX Timeout Monitor
II: SNAF version check OK!
II: TLB initial done:
    .ro section works!
    .text and .ro sections work!
II: CPU0 900MHz, CPU1 500MHz, DRAM 600MHz, LX 200MHz, SRAM 500MHz, SPIF 100MHz

AK: ******* DRAM calibration version: v3.5 *******
AK: Start DDR3 Reset Procedure
MEMPLL:[31/63/95/127/159/191/223]=407f, c0000210, 2ea23980, 2d0f0030, fff, 0, 0
ZQ:   Clock: ODT/OCD=1e/30 ,zq_zctrl_prog=0x 8080c3e, zq_zctrl_status=0x219365
ZQ: Address: ODT/OCD=1e/50 ,zq_zctrl_prog=0x18080c32, zq_zctrl_status=0x219311
ZQ:      DQ: ODT/OCD=1e/3c ,zq_zctrl_prog=0x28080c38, zq_zctrl_status=0x219333
ZQ:     DQS: ODT/OCD=1e/3c ,zq_zctrl_prog=0x38080c38, zq_zctrl_status=0x219333
ZQ: INTERAL DDR3, ZQCL done, ZQCS Enable
AK: MRS: mr[0]=0x101a50,  mr[1]=0x110004,  mr[2]=0x120010,  mr[3]=0x130000
AK: Bit/max_r_s/max_r_l/max_w_s/max_w_l    Bit/max_r_s/max_r_l/max_w_s/max_w_l
    [ 0]      2      1d       0      1f    [16]      4      1b       0      1f
    [ 1]      2      1d       0      1f    [17]      4      1b       0      1f
    [ 2]      0      1f       0      1f    [18]      2      1d       0      1f
    [ 3]      0      1f       0      1f    [19]      2      1d       0      1f
    [ 4]      0      1f       0      1d    [20]      2      1d       0      1d
    [ 5]      0      1f       0      1d    [21]      0      1f       0      1d
    [ 6]      0      1f       0      1f    [22]      2      1d       0      1f
    [ 7]      0      1f       0      1f    [23]      2      1d       0      1f
    [ 8]      2      1d       0      1d    [24]      2      1d       0      1d
    [ 9]      0      1f       0      1f    [25]      2      1d       0      1f
    [10]      0      1f       0      1f    [26]      0      1f       0      1f
    [11]      0      1f       0      1d    [27]      2      1d       0      1d
    [12]      0      1f       0      1d    [28]      0      1f       0      1d
    [13]      0      1f       0      1d    [29]      0      1f       0      1d
    [14]      2      1d       0      1f    [30]      4      1b       0      1f
    [15]      2      1d       0      1f    [31]      2      1d       0      1f
AK: Let's calibrate DRAM again, it will be better!
AK: Group delay: DQS0=4, DQS1=4
AK: Bit/max_r_s/max_r_l/max_w_s/max_w_l    Bit/max_r_s/max_r_l/max_w_s/max_w_l
    [ 0]      0      1f       0      1f    [16]      0      1f       0      1f
    [ 1]      0      1f       0      1f    [17]      0      1f       0      1f
    [ 2]      0      1f       0      1d    [18]      0      1f       0      1f
    [ 3]      0      1f       0      1f    [19]      0      1f       0      1f
    [ 4]      0      1f       0      1d    [20]      0      1f       0      1d
    [ 5]      0      1d       0      1d    [21]      0      1f       0      1d
    [ 6]      0      1f       0      1f    [22]      0      1f       0      1f
    [ 7]      0      1f       0      1f    [23]      0      1f       0      1f
    [ 8]      0      1f       0      1d    [24]      0      1f       0      1d
    [ 9]      0      1f       0      1f    [25]      0      1f       0      1f
    [10]      0      1d       0      1f    [26]      0      1f       0      1f
    [11]      0      1f       0      1d    [27]      0      1f       0      1d
    [12]      0      1f       0      1d    [28]      0      1f       0      1d
    [13]      0      1f       0      1d    [29]      0      1f       0      1d
    [14]      0      1f       0      1f    [30]      0      1f       0      1f
    [15]      0      1f       0      1f    [31]      0      1f       0      1f
AK: DCR=0x21320000, tRFC[0x2]=0xa0=0xa5nS, DTR[0:2]=0x99644828, 0x808051f, 0x6516000
AK: Disable Rd_after_Wr, Enable Parallel_Bank/R-Buf Patch
II: DDR3, 256MB
II: Change Stack from 0x9f002edc to 0x806fffe0
II: U-boot Magic Number is 0x27051956
II: Inflating U-Boot (0x80700040 -> 0x83c00000)... OK
II: Starting U-boot...


U-Boot 2011.12.NA-svn137295 (May 21 2020 - 14:47:43)CIG_V3.7.13

Board:RTL9607C, CPU:900MHz, LX:200MHz, MEM:600MHz, SPIF:100MHz, Type:DDR3
SPI-NAND Flash: C212/Mode0 1x128MB
Create bbt:  284
Loading 1048576B env. variables from offset 0x200000
Loading 1048576B env. variables from offset 0x300000
Using default environment

[Eeprom1]BSP_EepromRead Eepdata crc check pass.chksum = 0xce5b96e2,calc = 0xce5b96e2
Eepdata crc check pass.
not found base
bootargs[ root=/dev/mtdblock7]
Loaded 1048576B env. variables from offset 0x200000
@@@SWP_FL_128MB@@@
reload debug temp[mw b8000600 0;setenv bootargs console=ttyS0,115200 mtdparts=spinand:1280K(Boot1),768K(Boot2),1M(eeprom2),1M(eeprom1),2M(Config1),2M(Config2),5M(KernelA)ro,28M(ImageA)ro,5M(KernelB),28M(ImageB),20M(OsgiA),20M(OsgiB),[email protected](linux),[email protected](rootfs) root=31:7;spi_nand read 83000000 800000 500000;bootm 83000000]
Net:   LUNA GMAC
Warning: eth device name has a space!

swcore_init
**************************************
*                                    *
*  KEY -- Enter console terminal     *
*                                    *
**************************************
waiting for your select ...
done
## Booting kernel from Legacy Image at 83000000 ...
   Image Name:   Linux Kernel Image  [rg6w055]
   Created:      2020-12-11  10:08:48 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    2827242 Bytes = 2.7 MB
   Load Address: 80000000
   Entry Point:  80000000
   Verifying Checksum ... OK
   calulate crc:15f69def, orignal crc:15f69def, rootfs crc check pass.
   Uncompressing Kernel Image ... OK

Starting kernel ...

DEBUG_MEM_AUTO: DCR=0x21321003
DEBUG_MEM_AUTO: dcr=0x21321003, bankcnt=0x00000008, mem_size=0x10000000, banksize=0x02000000
DEBUG_MEM_AUTO: LUNA_PBO_DL_DRAM_SIZE_BARRIER=0x00101000, LUNA_PBO_UL_DRAM_SIZE_BARRIER=0x00101000
DEBUG_MEM_AUTO: LUNA_PBO_UL_DRAM_OFFSET=0x0f6ff000,LUNA_PBO_DL_DRAM_OFFSET=0x0deff000
DEBUG_MEM_AUTO: PAGE_SIZE=0x00001000
DEBUG_MEM_AUTO: BSP_DSP_MEM_BASE=0xf900000, BSP_IPC_MEM_BASE=0xf800000
DEBUG_MEM_AUTO: [bsp_prom_memmap]add_memory_region(0, 233828352, BOOT_MEM_RAM)
DEBUG_MEM_AUTO: [bsp_prom_memmap]add_memory_region(0x00000000, 0x0deff000, BOOT_MEM_RAM)
DEBUG_MEM_AUTO: [bsp_prom_memmap]add_memory_region(234881024, 24113152, BOOT_MEM_RAM)
DEBUG_MEM_AUTO: [bsp_prom_memmap]add_memory_region(0x0e000000, 0x016ff000, BOOT_MEM_RAM)
Linux version 3.18.24 ([email protected]) (gcc version 4.8.5 20150209 (prerelease) (Realtek MSDK-4.8.5p1 Build 2536) ) #1 SMP Fri Dec 11 18:08:36 CST 2020 [luna SDK V3.1.0] [rg6w055]
MIPS: machine is RTL9607C/RTL9603C
[L2_DEBUG:(bsp_setup_syncctl,604)]mips_cm_base= bfbf8000
[L2_DEBUG:(bsp_setup_syncctl,605)]read_gcr_control() = 0x1  => [L2_DEBUG:(bsp_setup_syncctl,608)]0x10001
[L2_DEBUG:(bsp_scache_config,542)]L2_CONFIG= 0x0
[L2_DEBUG:(bsp_scache_config,546)] - L2_DataStall= 0x0
[L2_DEBUG:(bsp_scache_config,547)] - L2_TagStall = 0x0
[L2_DEBUG:(bsp_scache_config,548)] - L2_WsStall  = 0x0
[L2_DEBUG:(bsp_scache_config,549)] - L2_Bypass: Disable
[L2_DEBUG:(bsp_setup_scache,579)]SCache LineSize= 32 (B)
CPU clock is 900
CPU0 revision is: 0001a120 (MIPS interAptiv (multi))
Determined physical RAM map:
 memory: 0deff000 @ 00000000 (usable)
 memory: 016ff000 @ 0e000000 (usable)
Zone ranges:
  Normal   [mem 0x00000000-0x0f6fefff]
  HighMem  empty
Movable zone start for each node
Early memory node ranges
  node   0: [mem 0x00000000-0x0defefff]
  node   0: [mem 0x0e000000-0x0f6fefff]
Initmem setup node 0 [mem 0x00000000-0x0f6fefff]
VPE topology {2,2} total 4
Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
PERCPU: Embedded 9 pages/cpu @84b5c000 s6016 r8192 d22656 u36864
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 62480
Kernel command line: console=ttyS0,115200 mtdparts=spinand:1280K(Boot1),768K(Boot2),1M(eeprom2),1M(eeprom1),2M(Config1),2M(Config2),5M(KernelA)ro,28M(ImageA)ro,5M(KernelB),28M(ImageB),20M(OsgiA),20M(OsgiB),[email protected](linux),[email protected](rootfs) root=31:7 u_ver=V3.7.13 major=d5 minor=2
root_dev_setup line 301 root: 31:7
board major is 0xd5
board minor is 0x2
PID hash table entries: 1024 (order: 0, 4096 bytes)
Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
Writing ErrCtl register=00000000
Readback ErrCtl register=00000000
Memory: 174368K/251896K available (6495K kernel code, 1535K rwdata, 1692K rodata, 236K init, 65079K bss, 77528K reserved, 0K highmem)
Hierarchical RCU implementation.
NR_IRQS:128
gic_init: GIC_BASE_ADDR=0x1fbc0000, GIC_ADDRSPACE_SZ=0x00020000
Calibrating delay loop... 597.60 BogoMIPS (lpj=2988032)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
CPU1 revision is: 0001a120 (MIPS interAptiv (multi))
Synchronize counters for CPU 1: done.
Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
CPU2 revision is: 0001a120 (MIPS interAptiv (multi))
Synchronize counters for CPU 2: done.
Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
CPU3 revision is: 0001a120 (MIPS interAptiv (multi))
Synchronize counters for CPU 3: done.
Brought up 4 CPUs
devtmpfs: initialized
NET: Registered protocol family 16
SCSI subsystem initialized
usb_enable_IP(776)
set_usbphy(780)
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
Switched to clocksource MIPS
NET: Registered protocol family 2
TCP established hash table entries: 2048 (order: 1, 8192 bytes)
TCP bind hash table entries: 2048 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP: reno registered
UDP hash table entries: 256 (order: 1, 8192 bytes)
UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
NET: Registered protocol family 1
=================================
CONFIG_LUNA_SOC_GPIO: gpio_init()
=================================
[Kthread : luan_watchdog ] init complete!
************ Watchdog Setting ****************
WDT_E=0, (1-enable, 0-disable)
LX(MHz)=200
WDT_CLK_SC=3
PH1_TO=17
PH2_TO=0
WDT_RESET_MODE=0
**********************************************
====   Luna Watchdog Regs   =====
BSP_WDTCNTRR(0xb8003260): 0x00000000
BSP_WDTINTRR(0xb8003264): 0x00000000
BSP_WDTCTRLR(0xb8003268): 0xe4400000
=================================
futex hash table entries: 1024 (order: 4, 65536 bytes)
squashfs: version 4.0 (2009/01/31) Phillip Lougher
jffs2: version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
fuse init (API version 7.23)
msgmni has been set to 340
io scheduler noop registered
io scheduler deadline registered
io scheduler cfq registered (default)
Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x18002000 (irq = 39, base_baud = 12327200) is a 16550A
console [ttyS0] enabled
aipcBoardChipId=0x96070001 aipcBoardChipRev=0x00000002 aipcBoardChipSubType=0x00000018
RTL9607C_CHIP_ID 0x96070001
CHIP_REV_ID_B   0x00000002
aipc: register chrdev(254,0)
aipc: create device successed
aipc: start aipc irq init
aipc: Request IRQ for IPC OK
aipc: create dsp console device successed
aipc: init done
loop: module loaded
Realtek Luna SPI NAND Flash Driver Rev:00:00:00 (ChaoYuan_Yang)
[SPINAND] Blocks number under 6 are protected
Use RTK bb func
Use RTK bb scan
nand: device found, Manufacturer ID: 0xc2, Chip ID: 0x12
nand: Macronix
nand: 128MiB, SLC, page size: 2048, OOB size: 64
BBT2 scan 284 as bad
detect block 284(284) is bad
good block number 1023
14 cmdlinepart partitions found on MTD device spinand
RTK: using dynamic nand partition
Creating 14 MTD partitions on "spinand":
0x000000000000-0x000000140000 : "Boot1"
0x000000140000-0x000000200000 : "Boot2"
0x000000200000-0x000000300000 : "eeprom2"
0x000000300000-0x000000400000 : "eeprom1"
0x000000400000-0x000000600000 : "Config1"
0x000000600000-0x000000800000 : "Config2"
0x000000800000-0x000000d00000 : "KernelA"
0x000000d00000-0x000002900000 : "ImageA"
0x000002900000-0x000002e00000 : "KernelB"
0x000002e00000-0x000004a00000 : "ImageB"
0x000004a00000-0x000005e00000 : "OsgiA"
0x000005e00000-0x000007200000 : "OsgiB"
0x000000800000-0x000000d00000 : "linux"
0x000000d00000-0x000002900000 : "rootfs"
Size of the first partition is 10 blocks.
Realtek SPINAND Flash Driver is successfully installing.
8686 Ethernet driver v0.0.1 (Aug 17, 2016)[Dual Band Disable]
GMAC0 Tx Ring Size:
[#0]:1024 [#1]:64 [#2]:64 [#3]:64 [#4]:64
GMAC0 Rx Ring Size:
[#0]:1024 [#1]:256 [#2]:256 [#3]:64 [#4]:64 [#5]:64
eth0: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 52
RTL8686 GMAC Probing..
Disable gmac[0] padding
GMAC1 Tx Ring Size:
[#0]:1024 [#1]:64 [#2]:64 [#3]:64 [#4]:64
GMAC1 Rx Ring Size:
[#0]:1024 [#1]:256 [#2]:256 [#3]:64 [#4]:64 [#5]:64
eth1: RTL-8686 at 0xb8014000, 00:00:00:01:00:02, IRQ 54
RTL8686 GMAC Probing..
Disable gmac[1] padding
GMAC2 Tx Ring Size:
[#0]:256 [#1]:64 [#2]:64 [#3]:64 [#4]:64
GMAC2 Rx Ring Size:
[#0]:256 [#1]:256 [#2]:256 [#3]:64 [#4]:64 [#5]:64
eth2: RTL-8686 at 0xb8016000, 00:00:00:01:00:02, IRQ 56
RTL8686 GMAC Probing..
Disable gmac[2] padding
eth0.2: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 52
eth0.3: RTL-8686 at 0xb8014000, 00:00:00:01:00:02, IRQ 54
eth0.4: RTL-8686 at 0xb8016000, 00:00:00:01:00:02, IRQ 56
eth0.5: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 52
eth0.6: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 52
nas0: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 52
pon0: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 52
first entry: 0, portmask 2047, rx: 8062c5fc
eth0.2 -> 0x1
eth0.3 -> 0x2
eth0.4 -> 0x4
eth0.5 -> 0x8
eth0.6 -> 0x10
Init RTK Driver Module....OK
Init RTK Core Dev Module....OK

 rtdrv_init !!! for netfilter
pkt_redirect_init complete
interrupt broadcaster init ok!
Enter rtk_rg_fc_init
Enter rtk_rg_fc_api_module_register
========== RTK FleetConntrack Driver Init ==========
fc get phyPortStatus = 0x7ef
Register hwnat module RTK_RG_FC_API_MODULE successfully
sw memory base addr 81cdb800
RTK FleetConntrack Driver(v0) Init was done
 - build ver. r140404 Dec 11 2020 18:07:46
 - mem usage 4830 KB (malloc 1005888  fc_db: 3939656 pro_db: 536)
priority: 0, portmask 2047, rx: 8062c5fc
insert here, priority: 1, portmask 2047, rx: 80301908
[HWNAT] rtk_rg_fc_extmodule_init
PPP generic driver version 2.4.2
PPP MPPE Compression module registered
NET: Registered protocol family 24
Realtek WLAN driver driver version 3.8.7 (2018-12-28)
DFS function - version 2.0.14
Adaptivity function - version 9.6.03
CFG0
PCIE0 reset pin is set to GPIO 40
===> PCIE reset try 0
9607c pcie port 0
IC-B
===> PCIE reset try 1
9607c pcie port 0
IC-B
===> PCIE reset try 2
9607c pcie port 0
IC-B
===> PCIE reset try 3
9607c pcie port 0
IC-B
PCIE_reset_procedure[1643]: Error!! Port 0 WLan device PCIE Link failed, State=0xb5bc43
=====>> EXIT rtl8192cd_init_one (-19) <<=====
init_one fail!!! rc=-19
CFG1
PCIE1 reset pin is set to GPIO 39
===> PCIE reset try 0
9607c pcie port 1
IC-B
Port1 [email protected]
MACHAL_version_init
[MACFM_software_init 148]wifi hal support Mac function = 0x100
[HWNAT] REGISTER tx function for wlan dev:wlan0
#### root = 8e9f0000 ####
#### wlan0-wds0 (wds) = 8f161800 ####
#### wlan0-wds1 (wds) = 8f073000 ####
#### wlan0-wds2 (wds) = 8eb91000 ####
#### wlan0-wds3 (wds) = 8eb93000 ####
#### wlan0-wds4 (wds) = 8eb96000 ####
#### wlan0-wds5 (wds) = 8eb98000 ####
#### wlan0-wds6 (wds) = 8eb9a000 ####
#### wlan0-wds7 (wds) = 8eb9f000 ####


#######################################################
SKB_BUF_SIZE=4832 MAX_SKB_NUM=2048
#######################################################

[MACFM_software_init 148]wifi hal support Mac function = 0x100
#### wlan0-vxd (vxd) = 8ebb0000 ####
[MACFM_software_init 148]wifi hal support Mac function = 0x100
[HWNAT] REGISTER tx function for wlan dev:wlan0-vap0
#### wlan0-vap0 (vap) = 8e410000 ####
[MACFM_software_init 148]wifi hal support Mac function = 0x100
[HWNAT] REGISTER tx function for wlan dev:wlan0-vap1
#### wlan0-vap1 (vap) = 8e480000 ####
[MACFM_software_init 148]wifi hal support Mac function = 0x100
[HWNAT] REGISTER tx function for wlan dev:wlan0-vap2
#### wlan0-vap2 (vap) = 8e4b0000 ####
[MACFM_software_init 148]wifi hal support Mac function = 0x100
[HWNAT] REGISTER tx function for wlan dev:wlan0-vap3
#### wlan0-vap3 (vap) = 8e510000 ####
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
reigster rtl86xx
rtl86xx-ehci rtl86xx-ehci.0: Realtek rtl86xx On-Chip EHCI Host Controller
rtl86xx-ehci rtl86xx-ehci.0: new USB bus registered, assigned bus number 1
rtl86xx-ehci rtl86xx-ehci.0: irq 67, io mem 0x18021000
rtl86xx-ehci rtl86xx-ehci.0: USB 2.0 started, EHCI 1.00
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
rtl86xx-ehci rtl86xx-ehci.1: Realtek rtl86xx On-Chip EHCI Host Controller
rtl86xx-ehci rtl86xx-ehci.1: new USB bus registered, assigned bus number 2
rtl86xx-ehci rtl86xx-ehci.1: irq 33, io mem 0x18021200
rtl86xx-ehci rtl86xx-ehci.1: USB 2.0 started, EHCI 1.00
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
register rtl86xx (0)
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
rtl86xx-ohci rtl86xx-ohci.0: Realtek rtl86xx On-Chip OHCI controller
rtl86xx-ohci rtl86xx-ohci.0: new USB bus registered, assigned bus number 3
rtl86xx-ohci rtl86xx-ohci.0: irq 67, io mem 0x18020000
hub 3-0:1.0: USB hub found
hub 3-0:1.0: 1 port detected
rtl86xx-ohci rtl86xx-ohci.1: Realtek rtl86xx On-Chip OHCI controller
rtl86xx-ohci rtl86xx-ohci.1: new USB bus registered, assigned bus number 4
rtl86xx-ohci rtl86xx-ohci.1: irq 33, io mem 0x18020200
hub 4-0:1.0: USB hub found
hub 4-0:1.0: 1 port detected
usbcore: registered new interface driver uas
usbcore: registered new interface driver usb-storage
u32 classifier
    Performance counters on
Netfilter messages via NETLINK v0.30.
nfnl_acct: registering with nfnetlink.
nf_conntrack version 0.5.0 (2724 buckets, 10896 max)
ctnetlink v0.93: registering with nfnetlink.
xt_time: kernel timezone is -0000
gre: GRE over IPv4 demultiplexor driver
ip_gre: GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP: cubic registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
sit: IPv6 over IPv4 tunneling driver
ip6_gre: GRE over IPv6 tunneling driver
NET: Registered protocol family 17
bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
Bridge firewalling registered
Ebtables v2.0 registered
8021q: 802.1Q VLAN Support v1.8
Realtek GPIO Driver for Flash Reload Default
VFS: Mounted root (squashfs filesystem) readonly on device 31:7.
Freeing unused kernel memory: 236K (80985000 - 809c0000)
mount: mounting devpts on /dev/pts failed: No such file or directory
random: sleep urandom read with 89 bits of entropy available
 #mount midware ok
/
 #mount rwdir (ont.mib) ok
 #mount rwdir2 (ont.mib) ok
ssp attached memory at 77128000
ONT>
#ONT>sysTime: 0
Build Date: 2021-03-15 11:31:20
Mon Mar 15 11:31:20 UTC 2021
timer attached memory at 777A8000
Starting Application: 0x00002000, /bin/TimerMgr................Done. elapsed time:(45)ms
log attached memory at 77808000
Starting Application: 0x00001000, /bin/LogMgr................Done. elapsed time:(49)ms

Update timer: curTime=35a79be6, gTmrTimerMsCounter=00000000
WIFI signal detect remaining time:5320000 ms
mmr attached memory at 7720E000
provinceid is 0x0
find the bosa[0].
Starting Application: 0x00007000, /bin/MiscMgr................Done. elapsed time:(639)ms
major ID[0xd5] minor ID[0x2]
sn:FPTT19c0b396
/bin/sh: can't create /proc/rstbn: nonexistent directory
mec attached memory at 77708000
VOS_XML_Init():
Load XML OK from file /tmp/default_rg.xmlVOS_XML_Init():
Load XML OK from file /tmp/runtime_rg.xmlVOS_XML_Init():
/tmp/runtime_rg.xml has been initialed.
back image file magic is 0x68737173
Starting Application: 0x00003000, /bin/MecMgr................Done. elapsed time:(1008)ms
pmr attached memory at 771B8000
Starting Application: 0x00004000, /bin/PonMgr................Done. elapsed time:(189)ms
net attached memory at 77120000
VOS_RegisterEventListener:2599, Init event socket 7
vos_OnKernelEvent:2531, Start receving event on socket 7
Starting Application: 0x00009000, /bin/NetMgr................Done. elapsed time:(289)ms
emr attached memory at 77A2A000
Starting Application: 0x00005000, /bin/EthMgr................Done. elapsed time:(159)ms
tr069Mgr attached memory at 76D5A000
CfgDIR = /etc/tr069cfg
cd /tmp/cpe3
dir = data
dir = filetrans
dir = options
dir = parameter
cdir = /tmp/cpe3
init tr069_initCapturePacketsState
Starting Application: 0x0000d000, /usr/sbin/tr069Mgr................Done. elapsed time:(2308)ms
web attached memory at 76BCA000
/etc/web_fpt.sh RG6W
Starting Application: 0x0000c000, /usr/sbin/WebMgr................Done. elapsed time:(1126)ms
ifconfig: SIOCGIFFLAGS: No such device
ifconfig: SIOCGIFFLAGS: No such device
/bin/sh: can't create /proc/wlan1/led: nonexistent directory
ifconfig: SIOCSIFMTU: No such device





Preparing stress ...
RTNETLINK answers: RTNETLINK answers: File exists
Cannot assign requested address
iptables: Bad rule (does a matching rule exist in that chain?).
conntrack v1.4.3 (conntrack-tools): 0 flow entries have been deleted.
wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1-va  no private ioctls.

wlan1-va  no private ioctls.

pon rx power changes sharply(old: 0.000000, new: 29.000000)!
wlan1-va  no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.


Sync 0xf00d1, msg no reply, dest NET, VOS_SendSyncMsg:1830
wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

ifconfig: SIOCGIFFLAGS: No such device
wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

ifconfig: SIOCGIFFLAGS: No such device
wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

wlan1     no private ioctls.

/bin/sh: can't create /proc/wlan1/led: nonexistent directory
wlan1     no private ioctls.

wlan1     no private ioctls.

CPU 1 Unable to handle kernel paging request at virtual address 00000020, epc == 80363d68, ra == 803789a0
Oops[#1]:
CPU: 1 PID: 1629 Comm: ifconfig Tainted: G           O   3.18.24 #1
task: 8af5c008 ti: 8b400000 task.ti: 8b400000
$ 0   : 00000000 00000001 00000000 00000000
$ 4   : 8e9f0440 8e9f0440 00000000 00000005
$ 8   : 00000001 0200000f ac02000f ac040100
$12   : aa9f72a0 e9d7a73e 00000000 c4a7ec5e
$16   : 8e9f0440 00000080 8e9f0000 00000000
$20   : 804e67d8 84950000 00000000 00000000
$24   : 00000000 d31d5ba4
$28   : 8b400000 8b403cc0 00000000 803789a0
Hi    : 00000014
Lo    : 66666685
epc   : 80363d68 stactrl_init+0xd0/0x2e0
ra    : 803789a0 rtl8192cd_open+0x1d70/0x3830
Status: 1000fc03        KERNEL EXL IE
Cause : 40800008
BadVA : 00000020
PrId  : 0001a120 (MIPS interAptiv (multi))
Modules linked in: nf_nat_sip nf_conntrack_sip nf_nat_tftp nf_conntrack_tftp nf_nat_ftp nf_conntrack_ftp l2_drv(O) mdr_dbg_mod(O) tun nf_conntrack_urlfilter cig_gpon(O) enet_drv(O) misc_mod(O) klog(O) kvos(O) [last unloaded: nf_conntrack_sip]
Process ifconfig (pid: 1629, threadinfo=8b400000, task=8af5c008, tls=77335460)
Stack : 8e9f0440 00000080 8e9f0000 8b403c40 8e9f0440 00000080 8e9f0000 803789a0
          8e9f0440 8ec11110 8b4852f0 80819d00 81be0000 81fa0000 8b403d90 0000000d
          8b403d90 81be0000 00fa0000 802f58d4 8b403d10 8b403d10 80983544 ffffffe9
          00000000 00000000 0000000d 8b403d90 8e9f0000 8003ff54 8497c260 00000000
          00000000 8ec06d48 8e9f0000 00001043 00000000 00000000 8e9f0000 8e9f002c
          ...
Call Trace:
[<80363d68>] stactrl_init+0xd0/0x2e0
[<803789a0>] rtl8192cd_open+0x1d70/0x3830
[<804e67d8>] __dev_open+0xec/0x164
[<804e6aec>] __dev_change_flags+0xa4/0x18c
[<804e6bf8>] dev_change_flags+0x24/0x68
[<805807d4>] devinet_ioctl+0x6e0/0x8e0
[<804c6798>] sock_ioctl+0x250/0x37c
[<800dbb98>] do_vfs_ioctl+0x51c/0x6f8
[<800dbdc8>] SyS_ioctl+0x54/0x9c
[<8000f688>] handle_sys+0x128/0x14c


Code: 8ca31e80  00621021  8c420000 <8c430020> 90645279  10860009  27180001  1707fff5  00000000
---[ end trace 81af53c9b3fb4cff ]---
Fatal exception: panic in 5 seconds
Kernel panic - not syncing: Fatal exception
Rebooting in 5 seconds..System restart.
---[ end Kernel panic - not syncing: Fatal exception

Đọc log ở đoạn cuối thì có exception dưới kernel do process ifconfig, dẫn đến kernel panic làm modem tự reboot lại. Mình có cố thử vài command như stopreboot,… nhưng không hiệu quả. Xem kỹ board thì thấy dùng flash SPI NAND MXIC MX35LF2GE4AB, mình không có đồ để đọc dữ liệu chip nên mình đành bỏ…

Cách để nhập được command khi modem khởi động là khi boot xong vào GponCLI thì nhập lệnh enable để có thể dùng lệnh. Còn nữa là khi boot lên có đoạn waiting for your select … mình có thử nhấn vài phím và tổ hợp như “KEY”, Ctrl + C, Ctrl + A,… nhưng không thể ngắt được luồng boot của modem.

 

Trả lời

Email của bạn sẽ không được hiển thị công khai.