Adding support for Linksys MR5500

Elmo299 · May 10, 2023, 8:51am

I have the Hydra Pro 6 MR5500 from Linksys, but they have disable the vLan options completely in the webGUI json files. I found out using a spider on the webGUI address.

Now I have downloaded the stock firmware and unpacked it for now and have the Squashfs root. It does run on OpenWrt already.

In the firmware_rdp.ini file I have found out that it uses the following hardware/ firmware:

IPQ5018
qcn9000

But IPQ5018 support for OpenWrt seems to be a difficult issue?
So how can I use the information inside/ firmware packages and config to build a compatible OpenWrt image?

frollic · May 10, 2023, 8:58am

you can't.
read Adding OpenWrt support for TP-Link RE700X, IPQ5018 - #12 by slh

Elmo299 · May 10, 2023, 9:15am

I see, reading the bootlog of the RE700X it differs from the MR5500 on platform base.
The RE700X bootlog shows the Maple V2 platform while the MR5500 uses the Maple V3 platform and according to Qualcomm the support for the Maple V3 states OpenWrt V15.0 compatible.

frollic · May 10, 2023, 9:19am

if you want to create a firmware based on an 8 yo release, not compatible with any official openwrt release, go for it, but please ask Qualcomm/Linksys about any issues you might run into, during and post compile.

seth-space · November 22, 2023, 12:27pm

any developments in this field?
The router is very interesting at the moment but without serious open source support a dead end..

any development in open source for this router?
Qualcomm Networking Pro 810-platform.

Linksys HYDRA PRO 6E:

IPQ6018-soc, Arm Cortex-A53-1,8GHz. chipset 2x 256MB (512MB l) DDR3 ESMC permanent storage 512MB flash Macronix.
2,4 and 5GHz : QCN5052- en QCN5022-chips.
6Ghz Qualcomm QCN9074-chipset,
frontendmodules Skyworks,
85340 = 2,4GHz
, de 85755 = 5GHz
85784 = 6GHz-band.
Ethernet:
Qualcomm QCA8075-ethernetchipset.
5Gbit/s-wan- Marvells AQR114C-chip.
bluetoothchipset: CSR8811

slh · November 23, 2023, 3:51am

There is some ongoing development happening for ipq60xx, but it'll take time (months++) - SOC development, support for the specific device may-or-may-not come afterwards. In general, never bet on future device support, always go with something that already is supported right now (at least in snapshots, if you feel frisky, maybe something that has an active pull request and people actively working on it).

podtor · January 12, 2025, 12:41pm

Below is a description of how to disassemble the Linksys MR5500 and how to connect via TTL

Linksys MR5500 Official Support https://support.linksys.com/kb/article/207-en/

serial port 115200, 8, N, 1 , 3.3V eg. via tera term
user: root
pass: admin

brada4 · January 12, 2025, 2:02pm

Can you get boot log and show the link where one would download OEM firmware upgrades? Maybe note FCC ID if one is printed somewhere.

PS I asked moderators to join your effort with previous porting thread.

podtor · January 12, 2025, 2:55pm

Initial details below

Boot

Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1.1-00052
S - IMAGE_VARIANT_STRING=MAACANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x000002c5
B -       126 - PBL, Start
B -      1557 - bootable_media_detect_entry, Start
B -      3278 - bootable_media_detect_success, Start
B -      3281 - elf_loader_entry, Start
B -      8179 - auth_hash_seg_entry, Start
B -      8539 - auth_hash_seg_exit, Start
B -     98841 - elf_segs_hash_verify_entry, Start
B -    168026 - PBL, End
B -    138348 - SBL1, Start
B -    199714 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4
B -    208010 - clock_init, Start
D -      7472 - clock_init, Delta
B -    215635 - boot_flash_init, Start
D -     13145 - boot_flash_init, Delta
B -    228841 - boot_config_data_table_init, Start
D -      4849 - boot_config_data_table_init, Delta - (575 Bytes)
B -    236771 - Boot Setting :  0x00000618
B -    242963 - CDT version:2,Platform ID:8,Major ID:4,Minor ID:0,Subtype:1
B -    249856 - sbl1_ddr_set_params, Start
B -    251472 - Pre_DDR_clock_init, Start
B -    257145 - Pre_DDR_clock_init, End
B -    898133 - do ddr sanity test, Start
D -        30 - do ddr sanity test, Delta
B -    902800 - Image Load, Start
D -    220149 - QSEE Image Loaded, Delta - (523680 Bytes)
B -   1123803 - Image Load, Start
D -     14060 - DEVCFG Image Loaded, Delta - (13592 Bytes)
B -   1137894 - Image Load, Start
D -    177022 - APPSBL Image Loaded, Delta - (424484 Bytes)
B -   1314977 - QSEE Execution, Start
D -        61 - QSEE Execution, Delta
B -   1321443 - SBL1, End
D -   1185779 - SBL1, Delta
S - Flash Throughput, 2457 KB/s  (962331 Bytes,  391644 us)
S - DDR Frequency, 800 MHz
S - Core 0 Frequency, 800 MHz


U-Boot 2016.01 (Jun 11 2021 - 16:34:17 +0800)

CBT U-Boot ver: 3.2.02  ([IPQ5018].[SPF11.3].[CSU2])

DRAM:  smem ram ptable found: ver: 1 len: 4
512 MiB
NAND:  QPIC controller support serial NAND
ID = 22c822c8
Vendor = c8
Device = 22
Serial Nand Device Found With ID : 0xc8 0x22
Serial NAND device Manufature:GD5F2GQ5REYIH
Device Size:256 MiB, Page size:2048, Spare Size:64, ECC:4-bit
SF: Unsupported flash IDs: manuf 00, jedec 0000, ext_jedec 0000
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
256 MiB
MMC:   sdhci: Node Not found, skipping initialization

PCI Link Intialized
PCI1 is not defined in the device tree
In:    serial@78AF000
Out:   serial@78AF000
Err:   serial@78AF000
machid: 8040001
eth0 MAC Address from ART is not valid
eth1 MAC Address from ART is not valid

Updating boot_count ... done

Hit any key to stop autoboot:  3  2  1  0 

Net:   cmbblk is stable 5
MAC1 addr:0:11:22:33:44:55
athrs17_reg_init: complete
athrs17_vlan_config ...done
S17c init  done
eth0
Warning: eth0 MAC addresses don't match:
Address in SROM is         00:11:22:33:44:55
Address in environment is  00:03:11:22:33:ad

IPQ5018#

help ?

?
?       - alias for 'help'
ar8xxx_dump- Dump ar8xxx registers
base    - print or set address offset
bdinfo  - print Board Info structure
bootelf - Boot from an ELF image in memory
bootipq - bootipq from flash device
bootm   - boot application image from memory
bootp   - boot image via network using BOOTP/TFTP protocol
bootvx  - Boot vxWorks from an ELF image
bootz   - boot Linux zImage image from memory
canary  - test stack canary
chpart  - change active partition
cmp     - memory compare
coninfo - print console devices and information
cp      - memory copy
crc32   - checksum calculation
dcache  - enable or disable data cache
devinfo - device info handling commands
dhcp    - boot image via network using DHCP/TFTP protocol
dm      - Driver model low level access
echo    - echo args to console
editenv - edit environment variable
env     - environment handling commands
erase   - erase FLASH memory
exectzt - execute TZT

exit    - exit script
false   - do nothing, unsuccessfully
fatinfo - print information about filesystem
fatload - load binary file from a dos filesystem
fatls   - list files in a directory (default /)
fatsize - determine a file's size
fatwrite- write file into a dos filesystem
fdt     - flattened device tree utility commands
flash   - flash part_name 
	flash part_name load_addr file_size 

flasherase- flerase part_name 

flinfo  - print FLASH memory information
fuseipq - fuse QFPROM registers from memory

go      - start application at address 'addr'
help    - print command description/usage
i2c     - I2C sub-system
icache  - enable or disable instruction cache
imxtract- extract a part of a multi-image
ipq5018_mdio- IPQ5018 mdio utility commands
ipq_mdio- IPQ mdio utility commands
is_sec_boot_enabled- check secure boot fuse is enabled or not

itest   - return true/false on integer compare
loop    - infinite loop on address range
md      - memory display
mii     - MII utility commands
mm      - memory modify (auto-incrementing address)
mmc     - MMC sub system
mmcinfo - display MMC info
mtdparts- define flash/nand partitions
mtest   - simple RAM read/write test
mw      - memory write (fill)
nand    - NAND sub-system
nboot   - boot from NAND device
nfs     - boot image via network using NFS protocol
nm      - memory modify (constant address)
part    - disk partition related commands
pci     - list and access PCI Configuration Space
ping    - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
protect - enable or disable FLASH write protection
reset   - Perform RESET of the CPU
run     - run commands in an environment variable
runmulticore- Enable and schedule secondary cores
saveenv - save environment variables to persistent storage
secure_authenticate- authenticate the signed image

setenv  - set environment variables
setexpr - set environment variable as the result of eval expression
sf      - SPI flash sub-system
showvar - print local hushshell variables
sleep   - delay execution for some time
smeminfo- print SMEM FLASH information
source  - run script from memory
test    - minimal test like /bin/sh
tftp    - boot image via network using TFTP protocol
tftpput - TFTP put command, for uploading files to a server
true    - do nothing, successfully
tzt     - load and run tzt

uart    - UART sub-system
ubi     - ubi commands
usb     - USB sub-system
usbboot - boot from USB device
version - print monitor, compiler and linker version
zip     - zip a memory region
IPQ5018#

cat /proc/mtd

cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00080000 00020000 "0:SBL1"
mtd1: 00080000 00020000 "0:MIBIB"
mtd2: 00100000 00020000 "0:QSEE"
mtd3: 00040000 00020000 "0:DEVCFG"
mtd4: 00040000 00020000 "0:CDT"
mtd5: 00080000 00020000 "0:APPSBLENV"
mtd6: 00140000 00020000 "0:APPSBL"
mtd7: 00100000 00020000 "0:ART"
mtd8: 00080000 00020000 "0:TRAINING"
mtd9: 00080000 00020000 "u_env"
mtd10: 00040000 00020000 "s_env"
mtd11: 00040000 00020000 "devinfo"
mtd12: 05200000 00020000 "kernel"
mtd13: 04a00000 00020000 "rootfs"
mtd14: 05200000 00020000 "alt_kernel"
mtd15: 04a00000 00020000 "alt_rootfs"
mtd16: 00200000 00020000 "sysdiag"
mtd17: 04400000 00020000 "syscfg"
mtd18: 04316000 0001f000 "squashfs"
mtd19: 03c8c000 0001f000 "syscfg"
~ #

cat /proc/cpuinfo

cat /proc/cpuinfo
processor	: 0
model name	: ARMv7 Processor rev 4 (v7l)
BogoMIPS	: 60.48
Features	: half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt vfpd32 lpae evtstrm aes pmull sha1 sha2 crc32 
CPU implementer	: 0x51
CPU architecture: 7
CPU variant	: 0xa
CPU part	: 0x801
CPU revision	: 4

processor	: 1
model name	: ARMv7 Processor rev 4 (v7l)
BogoMIPS	: 60.48
Features	: half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt vfpd32 lpae evtstrm aes pmull sha1 sha2 crc32 
CPU implementer	: 0x51
CPU architecture: 7
CPU variant	: 0xa
CPU part	: 0x801
CPU revision	: 4

Hardware	: Generic DT based system
Revision	: 0000
Serial		: 0000000000000000
~ #

cat /proc/meminfo


~ # cat /proc/meminfo
MemTotal:         412416 kB
MemFree:          166160 kB
MemAvailable:     220348 kB
Buffers:           16848 kB
Cached:            57964 kB
SwapCached:            0 kB
Active:            38704 kB
Inactive:          43692 kB
Active(anon):       8760 kB
Inactive(anon):      608 kB
Active(file):      29944 kB
Inactive(file):    43084 kB
Unevictable:           0 kB
Mlocked:               0 kB
HighTotal:             0 kB
HighFree:              0 kB
LowTotal:         412416 kB
LowFree:          166160 kB
SwapTotal:             0 kB
SwapFree:              0 kB
Dirty:                 0 kB
Writeback:             0 kB
AnonPages:          7640 kB
Mapped:            12240 kB
Shmem:              1784 kB
Slab:              97408 kB
SReclaimable:       4300 kB
SUnreclaim:        93108 kB
KernelStack:        1368 kB
PageTables:          752 kB
NFS_Unstable:          0 kB
Bounce:                0 kB
WritebackTmp:          0 kB
CommitLimit:      206208 kB
Committed_AS:      90220 kB
VmallocTotal:    1572864 kB
VmallocUsed:           0 kB
VmallocChunk:          0 kB
~ # [fw.sh] fwup_checked_after_boot: 0
[fwupd] status details:"ERROR: Connecting server"
[fw.sh] fwup_forced_update: 0

cat /proc/cmdline

cat /proc/cmdline
init=/sbin/init rootfstype=squashfs ubi.mtd=alt_rootfs root=mtd:squashfs rootwait swiotlb=1 coherent_pool=2M

brctl show

brctl show
bridge name	bridge id		STP enabled	interfaces
br0		8000.80691a06dcaa	no		ath0
							ath1
							eth0.2
br2		8000.80691a06dcab	no

podtor · January 12, 2025, 2:56pm

where/how to look for it?

frollic · January 12, 2025, 3:39pm

Vendor home page.

podtor · January 12, 2025, 4:01pm

look into https://forum.dd-wrt.com/wiki/index.php/Linksys_MR5500 "Notes, Links, Further Reading" at the end of the page

it would be best if @brada4 wrote exactly what the link to the OEM firmware meant, from linksys website?

podtor · January 12, 2025, 6:19pm

MR5500 OEM Bootlog part1

OEM Bootlog part1


reset
resetting ...

Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1.1-00052
S - IMAGE_VARIANT_STRING=MAACANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x000002c5
B -       126 - PBL, Start
B -      1557 - bootable_media_detect_entry, Start
B -      3278 - bootable_media_detect_success, Start
B -      3282 - elf_loader_entry, Start
B -      8218 - auth_hash_seg_entry, Start
B -      8578 - auth_hash_seg_exit, Start
B -     98296 - elf_segs_hash_verify_entry, Start
B -    167511 - PBL, End
B -    137921 - SBL1, Start
B -    199287 - GCC [RstStat:0x10, RstDbg:0x500100] WDog Stat : 0x4
B -    207583 - clock_init, Start
D -      7472 - clock_init, Delta
B -    215208 - boot_flash_init, Start
D -     13115 - boot_flash_init, Delta
B -    228384 - boot_config_data_table_init, Start
D -      4819 - boot_config_data_table_init, Delta - (575 Bytes)
B -    236314 - Boot Setting :  0x00000618
B -    242505 - CDT version:2,Platform ID:8,Major ID:4,Minor ID:0,Subtype:1
B -    249429 - sbl1_ddr_set_params, Start
B -    251015 - Pre_DDR_clock_init, Start
B -    256688 - Pre_DDR_clock_init, End
B -    897676 - do ddr sanity test, Start
D -        30 - do ddr sanity test, Delta
B -    902342 - Image Load, Start
D -    220149 - QSEE Image Loaded, Delta - (523680 Bytes)
B -   1123345 - Image Load, Start
D -     14091 - DEVCFG Image Loaded, Delta - (13592 Bytes)
B -   1137436 - Image Load, Start
D -    177022 - APPSBL Image Loaded, Delta - (424484 Bytes)
B -   1314519 - QSEE Execution, Start
D -        61 - QSEE Execution, Delta
B -   1320985 - SBL1, End
D -   1185748 - SBL1, Delta
S - Flash Throughput, 2457 KB/s  (962331 Bytes,  391584 us)
S - DDR Frequency, 800 MHz
S - Core 0 Frequency, 800 MHz


U-Boot 2016.01 (Jun 11 2021 - 16:34:17 +0800)

CBT U-Boot ver: 3.2.02  ([IPQ5018].[SPF11.3].[CSU2])

DRAM:  smem ram ptable found: ver: 1 len: 4
512 MiB
NAND:  QPIC controller support serial NAND
ID = 22c822c8
Vendor = c8
Device = 22
Serial Nand Device Found With ID : 0xc8 0x22
Serial NAND device Manufature:GD5F2GQ5REYIH
Device Size:256 MiB, Page size:2048, Spare Size:64, ECC:4-bit
SF: Unsupported flash IDs: manuf 00, jedec 0000, ext_jedec 0000
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
256 MiB
MMC:   sdhci: Node Not found, skipping initialization

PCI Link Intialized
PCI1 is not defined in the device tree
In:    serial@78AF000
Out:   serial@78AF000
Err:   serial@78AF000
machid: 8040001
eth0 MAC Address from ART is not valid
eth1 MAC Address from ART is not valid

Updating boot_count ... done

Hit any key to stop autoboot:  3  2  1  0 

NAND read: device 0 offset 0x58c0000, size 0x800000
 8388608 bytes read: OK
## Loading kernel from FIT Image at 44000000 ...
   Using 'config@1' configuration
   Trying 'kernel@1' kernel subimage
     Description:  ARM Linksys Linux-4.4.60
     Type:         Kernel Image
     Compression:  gzip compressed
     Data Start:   0x440000e4
     Data Size:    4422079 Bytes = 4.2 MiB
     Architecture: ARM
     OS:           Linux
     Load Address: 0x41208000
     Entry Point:  0x41208000
     Hash algo:    crc32
     Hash value:   c149da37
     Hash algo:    sha1
     Hash value:   e4e5783656ba987545f32e6bda1452cf5312722e
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 44000000 ...
   Using 'config@1' configuration
   Trying 'fdt@1' fdt subimage
     Description:  ARM Linksys Jamaica device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x44437bd8
     Data Size:    56543 Bytes = 55.2 KiB
     Architecture: ARM
     Hash algo:    crc32
     Hash value:   8c8ce822
     Hash algo:    sha1
     Hash value:   cd217727db9e13c074841f04bfc58efdc8c86d31
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x44437bd8
   Uncompressing Kernel Image ... OK
   Loading Device Tree to 4a3ef000, end 4a3ffcde ... OK
Could not find PCI in device tree
Using machid 0x8040001 from environment

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Initializing cgroup subsys cpuset
[    0.000000] Initializing cgroup subsys cpu
[    0.000000] Initializing cgroup subsys cpuacct
[    0.000000] Linux version 4.4.60 (root@build-vm) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 r35193) ) #1 SMP PREEMPT Tue Dec 14 18:14:22 PST 2021
[    0.000000] CPU: ARMv7 Processor [51af8014] revision 4 (ARMv7), cr=10c0383d
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] Machine model: Qualcomm Technologies, Inc. IPQ5018/AP-MP03.1
[    0.000000] Ignoring memory range 0x40000000 - 0x41000000
[    0.000000] Reserved memory: created DMA memory pool at 0x4ea00000, size 16 MiB
[    0.000000] Reserved memory: initialized node dma_pool1@4ea00000, compatible id shared-dma-pool
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv1.0 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.
[    0.000000] PERCPU: Embedded 11 pages/cpu @9eb61000 s15168 r8192 d21696 u45056
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 105636
[    0.000000] Kernel command line: init=/sbin/init rootfstype=squashfs ubi.mtd=alt_rootfs root=mtd:squashfs rootwait swiotlb=1 coherent_pool=2M
[    0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
[    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Memory: 411392K/427008K available (6346K kernel code, 402K rwdata, 2064K rodata, 1024K init, 455K bss, 15616K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
[    0.000000]     vmalloc : 0x9f800000 - 0xff800000   (1536 MB)
[    0.000000]     lowmem  : 0x80000000 - 0x9f000000   ( 496 MB)
[    0.000000]     pkmap   : 0x7fe00000 - 0x80000000   (   2 MB)
[    0.000000]     modules : 0x7f000000 - 0x7fe00000   (  14 MB)
[    0.000000]       .text : 0x80208000 - 0x80b36a80   (9403 kB)
[    0.000000]       .init : 0x80c00000 - 0x80d00000   (1024 kB)
[    0.000000]       .data : 0x80d00000 - 0x80d64854   ( 403 kB)
[    0.000000]        .bss : 0x80d67000 - 0x80dd8db8   ( 456 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] Preemptible hierarchical RCU implementation.
[    0.000000] 	Build-time adjustment of leaf fanout to 32.
[    0.000000] 	RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
[    0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=32, nr_cpu_ids=2
[    0.000000] NR_IRQS:16 nr_irqs:16 16
[    0.000000] Architected cp15 timer(s) running at 24.00MHz (virt).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x588fe9dc0, max_idle_ns: 440795202592 ns
[    0.000005] sched_clock: 56 bits at 24MHz, resolution 41ns, wraps every 4398046511097ns
[    0.000017] Switching to timer-based delay loop, resolution 41ns
[    0.000539] Calibrating delay loop (skipped), value calculated using timer frequency.. 48.00 BogoMIPS (lpj=240000)
[    0.000558] pid_max: default: 32768 minimum: 301
[    0.000669] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000681] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.001365] Initializing cgroup subsys io
[    0.001389] Initializing cgroup subsys memory
[    0.001424] Initializing cgroup subsys devices
[    0.001438] Initializing cgroup subsys freezer
[    0.001450] Initializing cgroup subsys net_cls
[    0.001461] Initializing cgroup subsys pids
[    0.001510] CPU: Testing write buffer coherency: ok
[    0.001979] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
[    0.002047] Setting up static identity map for 0x41300000 - 0x41300058
[    0.053514] MSM Memory Dump base table set up
[    0.053548] MSM Memory Dump apps data table set up
[    0.090477] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
[    0.090613] Brought up 2 CPUs
[    0.090632] SMP: Total of 2 processors activated (96.00 BogoMIPS).
[    0.090639] CPU: All CPU(s) started in SVC mode.
[    0.104610] VFP support v0.3: implementor 51 architecture 3 part 40 variant 3 rev 4
[    0.105012] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.105044] futex hash table entries: 512 (order: 3, 32768 bytes)
[    0.105589] pinctrl core: initialized pinctrl subsystem
[    0.106907] NET: Registered protocol family 16
[    0.108308] DMA: preallocated 2048 KiB pool for atomic coherent allocations
[    0.130273] cpuidle: using governor ladder
[    0.160303] cpuidle: using governor menu
[    0.160617] NET: Registered protocol family 42
[    0.165742] qcom,gcc-ipq5018 1800000.gcc: Registered ipq5018 GCC clocks provider
[    0.171752] irq: no irq domain found for /soc/smp2p-wcss/slave-kernel !
[    0.183500] hw-breakpoint: found 5 (+1 reserved) breakpoint and 4 watchpoint registers.
[    0.183516] hw-breakpoint: maximum watchpoint size is 8 bytes.
[    0.185347] CPU: IPQ5018, SoC Version: 1.1
[    0.187256] IPC logging disabled
[    0.187269] IPC logging disabled
[    0.187274] IPC logging disabled
[    0.187279] IPC logging disabled
[    0.187284] IPC logging disabled
[    0.187551] sps:sps is ready.
[    0.222879] usbcore: registered new interface driver usbfs
[    0.222960] usbcore: registered new interface driver hub
[    0.223091] usbcore: registered new device driver usb
[    0.223229] pps_core: LinuxPPS API ver. 1 registered
[    0.223239] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    0.223267] PTP clock support registered
[    0.226274] clocksource: Switched to clocksource arch_sys_counter
[    0.228924] NET: Registered protocol family 2
[    0.229893] TCP established hash table entries: 4096 (order: 2, 16384 bytes)
[    0.229952] TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
[    0.230028] TCP: Hash tables configured (established 4096 bind 4096)
[    0.230090] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    0.230117] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    0.230342] NET: Registered protocol family 1
[    0.231619] hw perfevents: enabled with armv7_cortex_a7 PMU driver, 7 counters available
[    0.241107] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.241137] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.247213] Key type asymmetric registered
[    0.247236] Asymmetric key parser 'x509' registered
[    0.247291] io scheduler noop registered
[    0.247305] io scheduler deadline registered (default)
[    0.249519] ipq5018-pinctrl 1000000.pinctrl: function 'NA' not supported
[    0.249540] ipq5018-pinctrl 1000000.pinctrl: invalid function NA in map table
[    0.250851] a0000000.pci supply vdda not found, using dummy regulator
[    0.250947] a0000000.pci supply vdda_phy not found, using dummy regulator
[    0.250999] a0000000.pci supply vdda_refclk not found, using dummy regulator
[    0.251800] PCI host bridge /soc/pci@a0000000 ranges:
[    0.251834]    IO 0xa0200000..0xa02fffff -> 0xa0200000
[    0.251851]   MEM 0xa0300000..0xb02fffff -> 0xa0300000
[    0.586275] qcom-pcie a0000000.pci: link up
[    0.586517] qcom-pcie a0000000.pci: PCI host bridge to bus 0001:00
[    0.586536] pci_bus 0001:00: root bus resource [bus 00-ff]
[    0.586552] pci_bus 0001:00: root bus resource [io  0x0000-0xfffff] (bus address [0xa0200000-0xa02fffff])
[    0.586564] pci_bus 0001:00: root bus resource [mem 0xa0300000-0xb02fffff]
[    0.586993] PCI: bus0: Fast back to back transfers disabled
[    0.587010] pci 0001:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    0.588040] PCI: bus1: Fast back to back transfers disabled
[    0.588125] pci 0001:00:00.0: BAR 8: assigned [mem 0xa0400000-0xa05fffff]
[    0.588140] pci 0001:00:00.0: BAR 9: assigned [mem 0xa0600000-0xa07fffff 64bit pref]
[    0.588153] pci 0001:00:00.0: BAR 0: assigned [mem 0xa0300000-0xa0300fff 64bit]
[    0.588170] pci 0001:00:00.0: BAR 7: assigned [io  0x1000-0x1fff]
[    0.588188] pci 0001:01:00.0: BAR 0: assigned [mem 0xa0400000-0xa05fffff 64bit]
[    0.588235] pci 0001:00:00.0: PCI bridge to [bus 01]
[    0.588248] pci 0001:00:00.0:   bridge window [io  0x1000-0x1fff]
[    0.588260] pci 0001:00:00.0:   bridge window [mem 0xa0400000-0xa05fffff]
[    0.588273] pci 0001:00:00.0:   bridge window [mem 0xa0600000-0xa07fffff 64bit pref]
[    0.588355] PCIe: RC0 enabled during bootup
[    0.594663] NET: Registered protocol family 27
[    0.594681] IPC_RTR: ipc_router_create_log_ctx: IPC Logging disabled
[    0.596115] TZ Log : Will warn on Access Violation, as paniconaccessviolation is not set
[    0.596734] bt_driver 1943008.bt: bt_parse_ipc
[    0.596799] bt_driver 1943008.bt: bt_parse_mem
[    0.596860] bt_driver 1943008.bt: bt_parse_dt operating in secure mode
[    0.598104] 58000.qcom,msm-eud: ttyEUD0 at MMIO 0x0 (irq = 123, base_baud = 0) is a EUD UART
[    0.598742] Registered Sucessfully 
[    0.599368] msm_serial 78af000.serial: msm_serial: detected port #0
[    0.599424] msm_serial 78af000.serial: uartclk = 1843199
[    0.599497] 78af000.serial: ttyMSM0 at MMIO 0x78af000 (irq = 20, base_baud = 115199) is a MSM
[    0.599530] msm_serial: console setup on port #0
[    1.440630] console [ttyMSM0] enabled
[    1.445819] msm_serial: driver initialized
[    1.449311] msm_serial_hsl_init: driver initialized
[    1.756433] brd: module loaded
[    1.776948] spi_qup 78b5000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64
[    1.779027] m25p80 spi32766.0: unrecognized JEDEC id bytes: 00,  0,  0
[    1.784152] QPIC controller hw version Major:2, Minor:1
[    1.789476] QPIC controller support serial nand.
[    1.794866] nand: device found, Manufacturer ID: 0xc8, Chip ID: 0x22
[    1.799414] nand: GigaDevice GD5F2GQ5REYIH SPI NAND 2G
[    1.805712] nand: 256 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    1.811243] 18 ofpart partitions found on MTD device qcom_nand.0
[    1.818244] Creating 18 MTD partitions on "qcom_nand.0":
[    1.824382] 0x000000000000-0x000000080000 : "0:SBL1"
[    1.831280] 0x000000080000-0x000000100000 : "0:MIBIB"
[    1.846902] 0x000000100000-0x000000200000 : "0:QSEE"
[    1.866912] 0x000000200000-0x000000240000 : "0:DEVCFG"
[    1.868315] 0x000000240000-0x000000280000 : "0:CDT"
[    1.886930] 0x000000280000-0x000000300000 : "0:APPSBLENV"
[    1.906939] 0x000000300000-0x000000440000 : "0:APPSBL"
[    1.926887] 0x000000440000-0x000000540000 : "0:ART"
[    1.946882] 0x000000540000-0x0000005c0000 : "0:TRAINING"
[    1.966889] 0x0000005c0000-0x000000640000 : "u_env"
[    1.986900] 0x000000640000-0x000000680000 : "s_env"
[    1.988284] 0x000000680000-0x0000006c0000 : "devinfo"
[    2.006931] 0x0000006c0000-0x0000058c0000 : "kernel"
[    2.064532] 0x000000ec0000-0x0000058c0000 : "rootfs"
[    2.116477] mtd: device 13 (rootfs) set to be root filesystem
[    2.116709] mtdsplit: no squashfs found in "rootfs"
[    2.121230] 0x0000058c0000-0x00000aac0000 : "alt_kernel"
[    2.182826] 0x0000060c0000-0x00000aac0000 : "alt_rootfs"
[    2.234393] 0x00000aac0000-0x00000acc0000 : "sysdiag"
[    2.256889] 0x00000acc0000-0x00000f0c0000 : "syscfg"
[    2.305277] libphy: Fixed MDIO Bus: probed
[    2.516310] qca-mdio 88000.mdio: Could not find phy-reset-gpio
[    2.516490] libphy: qca_mdio: probed
[    2.521694] qca-mdio 88000.mdio: qca-mdio driver was registered
[    2.956317] qca-mdio 90000.mdio: Could not find phy-reset-gpio
[    2.956496] libphy: qca_mdio: probed
[    2.963224] qca-mdio 90000.mdio: qca-mdio driver was registered
[    3.066591] PPP generic driver version 2.4.2
[    3.066818] NET: Registered protocol family 24
[    3.069923] PPTP driver version 0.8.5
[    3.074361] Unable to create IPC log context!
[    3.078427] cnss[27]: INFO: Platform driver probed successfully. plat 9dec0010 tgt 0x1104
[    3.082812] cnss[2]: INFO: Platform driver probed successfully. plat 9ded0010 tgt 0xfffc
[    3.091731] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005
[    3.098631] dummy_hcd dummy_hcd.0: Dummy host controller
[    3.105604] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1
[    3.112097] hub 1-0:1.0: USB hub found
[    3.118636] hub 1-0:1.0: 1 port detected
[    3.123088] i2c /dev entries driver
[    3.127583] qcom-tsens 4a8000.thermal-sensor: tsens calibration failed
[    3.157065] device-mapper: ioctl: 4.34.0-ioctl (2015-10-28) initialised: dm-devel@redhat.com
[    3.157707] cpufreq: cpufreq_online: CPU0: Running at unlisted freq: 799999 KHz
[    3.164613] cpufreq: cpufreq_online: CPU0: Unlisted initial frequency changed to: 1008000 KHz
[    3.171881] sdhci: Secure Digital Host Controller Interface driver
[    3.180305] sdhci: Copyright(c) Pierre Ossman
[    3.186369] sdhci-pltfm: SDHCI platform and OF driver helper
[    3.199490] register  pwm:purple
[    3.199610] register  pwm:white
[    3.201854] register  pwm:cyan
[    3.204712] register  pwm:yellow
[    3.207883] register  pwm:rgb
[    3.211234] register  8 leds
[    3.227582] 
[    3.227582] Version Rollback Feature Disabled
[    3.228392] sps_register_bam_device : unable to create IPC Logging 0 for bam 0x08b04000
[    3.232309] sps_register_bam_device : unable to create IPC Logging 1 for bam 0x08b04000sps_register_bam_device : unable to create IPC Logging 2 for bam 0x08b04000
[    3.248192] sps_register_bam_device : unable to create IPC Logging 3 for bam 0x08b04000sps_register_bam_device : unable to create IPC Logging 4 for bam 0x08b04000
[    3.262745] sps:BAM 0x08b04000 is registered.[    3.271703] qcom-q6v5-wcss-pil cd00000.qcom_q6v5_wcss: ssr registeration success qcom_q6v5_wcss
[    3.273479] remoteproc remoteproc0: cd00000.qcom_q6v5_wcss is available
[    3.282663] of_graph_get_next_endpoint(): no port node found in /soc/csr@6001000
[    3.288865] coresight-csr 6001000.csr: CSR initialized
[    3.296628] of_graph_get_next_endpoint(): no port node found in /soc/cti@6010000
[    3.301466] of_graph_get_next_endpoint(): no port node found in /soc/cti@6011000
[    3.309011] of_graph_get_next_endpoint(): no port node found in /soc/cti@6012000
[    3.316416] of_graph_get_next_endpoint(): no port node found in /soc/cti@6013000
[    3.323726] of_graph_get_next_endpoint(): no port node found in /soc/cti@6014000
[    3.331151] of_graph_get_next_endpoint(): no port node found in /soc/cti@6015000
[    3.338513] of_graph_get_next_endpoint(): no port node found in /soc/cti@6016000
[    3.345872] of_graph_get_next_endpoint(): no port node found in /soc/cti@6017000
[    3.353286] of_graph_get_next_endpoint(): no port node found in /soc/cti@6018000
[    3.360666] of_graph_get_next_endpoint(): no port node found in /soc/cti@6019000
[    3.368024] of_graph_get_next_endpoint(): no port node found in /soc/cti@601a000
[    3.375388] of_graph_get_next_endpoint(): no port node found in /soc/cti@601b000
[    3.382823] of_graph_get_next_endpoint(): no port node found in /soc/cti@601c000
[    3.390193] of_graph_get_next_endpoint(): no port node found in /soc/cti@601d000
[    3.397567] of_graph_get_next_endpoint(): no port node found in /soc/cti@601e000
[    3.404901] of_graph_get_next_endpoint(): no port node found in /soc/cti@601f000
[    3.412317] of_graph_get_next_endpoint(): no port node found in /soc/cti@6198000
[    3.419859] of_graph_get_next_endpoint(): no port node found in /soc/cti@6199000
[    3.427228] of_graph_get_next_endpoint(): no port node found in /soc/cti@610c000
[    3.434639] sps_register_bam_device : unable to create IPC Logging 0 for bam 0x06064000
[    3.441629] sps_register_bam_device : unable to create IPC Logging 1 for bam 0x06064000sps_register_bam_device : unable to create IPC Logging 2 for bam 0x06064000
[    3.457314] sps_register_bam_device : unable to create IPC Logging 3 for bam 0x06064000sps_register_bam_device : unable to create IPC Logging 4 for bam 0x06064000
[    3.471811] sps:BAM 0x06064000 is registered.[    3.478996] coresight-tmc 6048000.tmc: TMC initialized
[    3.483108] coresight-tmc 6047000.tmc: TMC initialized
[    3.488320] coresight-funnel 6041000.funnel: FUNNEL initialized
[    3.493231] coresight-funnel 6100000.funnel: FUNNEL initialized
[    3.499117] coresight-funnel 6120000.funnel: FUNNEL initialized
[    3.504962] coresight-funnel 6130000.funnel: FUNNEL initialized
[    3.510918] coresight-funnel 61a1000.funnel: FUNNEL initialized
[    3.517614] coresight-etm4x 619c000.etm: ETM 4.0 initialized
[    3.523104] coresight-etm4x 619d000.etm: ETM 4.0 initialized
[    3.528695] coresight-replicator-qcom 6046000.replicator: REPLICATOR 1.0 initialized
[    3.534375] coresight-stm 6002000.stm: STM initialized
[    3.543305] of_graph_get_next_endpoint(): no port node found in /soc/hwevent@6101000
[    3.546654] coresight-hwevent 6101000.hwevent: Hardware Event driver initialized
[    3.554950] u32 classifier
[    3.561759]     input device check on
[    3.564242]     Actions configured
[    3.568023] Netfilter messages via NETLINK v0.30.
[    3.571329] nfnl_acct: registering with nfnetlink.
[    3.576105] nf_conntrack version 0.5.0 (6428 buckets, 25712 max)
[    3.581240] ctnetlink v0.93: registering with nfnetlink.
[    3.587015] nf_conntrack_rtsp v0.7 loading
[    3.592259] nf_tables: (c) 2007-2009 Patrick McHardy <kaber@trash.net>
[    3.596128] nf_tables_compat: (c) 2012 Pablo Neira Ayuso <pablo@netfilter.org>
[    3.602963] xt_time: kernel timezone is -0000
[    3.609856] ip_set: protocol 6
[    3.614428] gre: GRE over IPv4 demultiplexor driver
[    3.617222] ip_gre: GRE over IPv4 tunneling driver
[    3.623179] nf_nat_rtsp v0.7 loading
[    3.626984] ip_tables: (C) 2000-2006 Netfilter Core Team
[    3.630768] arp_tables: (C) 2002 David S. Miller
[    3.636646] NET: Registered protocol family 10
[    3.656815] ip6_tables: (C) 2000-2006 Netfilter Core Team
[    3.657177] sit: IPv6 over IPv4 tunneling driver
[    3.662569] ip6_gre: GRE over IPv6 tunneling driver
[    3.666732] NET: Registered protocol family 17
[    3.670558] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
[    3.675029] Bridge firewalling registered
[    3.688112] Ebtables v2.0 registered
[    3.691826] l2tp_core: L2TP core driver, V2.0
[    3.695307] l2tp_netlink: L2TP netlink interface
[    3.699665] 8021q: 802.1Q VLAN Support v1.8
[    3.705832] Registering SWP/SWPB emulation handler
[    3.727863] ubi0: attaching mtd15
[    3.766910] random: nonblocking pool is initialized
[    3.951367] ubi0: scanning is finished
[    3.954459] ubi0 warning: print_rsvd_warning: cannot reserve enough PEBs for bad PEB handling, reserved 34, need 40
[    3.955250] ubi0: attached mtd15 (name "alt_rootfs", size 74 MiB)
[    3.964362] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    3.970595] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    3.977362] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    3.984209] ubi0: good PEBs: 592, bad PEBs: 0, corrupted PEBs: 0
[    3.990988] ubi0: user volume: 1, internal volumes: 1, max. volumes count: 128
[    3.997240] ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 535492225
[    4.004265] ubi0: available PEBs: 0, total reserved PEBs: 592, PEBs reserved for bad PEB handling: 34
[    4.013262] ubi0: background thread "ubi_bgt0d" started, PID 128
[    4.037719] input: soc:gpio_keys as /devices/platform/soc/soc:gpio_keys/input/input0
[    4.037885] hctosys: unable to open rtc device (rtc0)
[    4.054199] VFS: Mounted root (squashfs filesystem) readonly on device 31:18.
[    4.055412] Freeing unused kernel memory: 1024K (80c00000 - 80d00000)

podtor · January 12, 2025, 6:20pm

MR5500 OEM Bootlog part2

OEM Bootlog part2

*********************************************************************************
              _        _  __    _    __ _____ __   __ _____
             | |      | ||  \  | |  / // ____]\ \ / // ____]TM
             | |      | ||   \ | | / /| (___   \ V /| (____
             | |      | || |\ \| |\ \  \____ \  \ /  \____ \
             | |_____ | || | \   | \ \  ____) | | |   ____) |
             |_______||_||_|  \__|  \_\[____ /  |_|  [_____/

 (c) 2013 Belkin International, Inc. and/or its affiliates. All rights reserved.
 Booting jamaica (firmware version 1.1.2.209598) 
*********************************************************************************
[utopia][init] System Initialization
[utopia][init] Creating /proc
[utopia][init] Creating /sys
[utopia][init] Creating /dev
[utopia][init] Creating /tmp
[utopia][init] Allocating 60M for /tmp
[utopia][init] Prepairing /dev/pts
[utopia][init] Setting /tmp and /var permissions
[utopia][init] Starting udev..
Attempting mount of ubifs syscfg partition
UBI device number 1, total 544 LEBs (69074944 bytes, 65.9 MiB), available 0 LEBs (0 bytes), LEB size 126976 bytes (124.0 KiB)
[utopia][init] Using persistent syscfg data from /var/config/syscfg
[utopia][init] Starting system logging
[utopia][init] Starting sysevent subsystem
/dev/mem opened.
Memory mapped at address 0x76f7e000.
Value at address 0x1001000 (0x76f7e000): 0xC1
Written 0xC9; readback 0xC9
[utopia][init] Starting blue ...
[utopia][init] Enabling DesignWare USB3 DRD Core drivers
[utopia][init] Loading QCA Ethernet, NSS and GMAC drivers
net.netfilter.nf_conntrack_acct = 1
[utopia][init] Late loading usb drivers
[utopia][init] Setting any unset system values to default
[utopia][init] no persistence config file (/var/config/pstcfg) found
setting up MAC addresses for all interface based on 00:11:22:33:44:55
NTP Servers do not need to be updated
[utopia][init] syscfg loaded removing tmp file

 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
The item is not initialized 


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.


 SSDK Init OK!
operation done.

checking for interactive script start up...
no user scheduled tasks found...
senq running 
/etc/init.d/service_senq.sh   Starting in mode 0
1970-01-01 00:00:21: node-mode running 
Good block at 0x00000000
Updating BootCount Page[15]:7800 ... Done

[utopia][init] LAN Ports LED settings
attempting to sync sysinfo.cgi auth credentials
[utopia][init] Loading Buttons drivers
[utopia][init] Setup link to WiFi firmware and board data (EU)
[utopia][init] Multi-region is not supported or not enabled
[utopia][init] Cert region: EU
lrwxrwxrwx    1 root     root            12 Dec 15  2021 IPQ5018 -> /tmp/IPQ5018
-rw-r--r--    1 root     root          7037 Dec 15  2021 firmware_rdp_feature.ini
-rw-r--r--    1 root     root          7081 Dec 15  2021 firmware_rdp_feature_512P.ini
drwxr-xr-x    2 root     root             3 Dec 15  2021 qca
-rw-r--r--    1 root     root        715476 Dec 15  2021 qca-nss0.bin
lrwxrwxrwx    1 root     root            12 Dec 15  2021 qcn9000 -> /tmp/qcn9000
[utopia][init] Using EU region for WiFi firmware and board data
[utopia][init] Load WiFi cal data from MTD(mtd7) to FS.
131072+0 records in
131072+0 records out
131072 bytes (128.0KB) copied, 1.007452 seconds, 127.1KB/s
131072+0 records in
131072+0 records out
131072 bytes (128.0KB) copied, 0.619014 seconds, 206.8KB/s
Size of caldata_1.bin = 131072 bytes.
### caldata_1.bin size is correct ###
131072+0 records in
131072+0 records out
131072 bytes (128.0KB) copied, 0.611368 seconds, 209.4KB/s
Size of caldata_1.bin = 131072 bytes.
### caldata_2.bin size is correct ###
[utopia][init] Loading WLAN drivers
/bin/sh: can't open '/etc/rc.common'
[utopia][init] Loading QCA Enhanced Connection manager
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
dev.nss.general.redirect = 1
[utopia][init] Initializing BTLE interface
[utopia][init] Bluetooth Mac Address: 00 11 22 33 44 55
[utopia][init] Cert Region: EU
16+0 records in
16+0 records out
16 bytes (16B) copied, 0.000358 seconds, 43.6KB/s
6+0 records in
6+0 records out
6 bytes (6B) copied, 0.000218 seconds, 26.9KB/s
2453+0 records in
2453+0 records out
2453 bytes (2.4KB) copied, 0.012535 seconds, 191.1KB/s
inserting fpbypass.ko for QCA
attempting to sync sysinfo.cgi auth credentials
adding group for lldpd user
Thu Oct 11 06:00:00 UTC 2012

(none) login: Starting devicedb ... 
wan, sysevent received: wan-start

DeviceDB database version 3
Options:
    Daemonize       : yes
    Server UDS Path   : /tmp/devicedb/server_link
    Database File     : /tmp/devicedb/devicedb.db
    DB Transient File : /tmp/devicedb/transient.db
DeviceDB Daily Backup Cron job created
No TopoDB persistence data to import
TopoDB data not imported
ping6: sendto: Network is unreachable
ARP agent not started: not in master mode.
Starting ddd_ethernet_agent ... 
lldpd event lan_ipaddr 192.168.1.1 received. 
lldpd event lldpd-start  received. 
killall: lldpd: no process killed
setting root_accessible to 0 by default
lldpd configuration already running
lldp updating callback scripts
mosquitto aborting: not Master
Entry tsmb lan-status, 1
service_guardian.sh is called with lan-status














lldpd event ETH::port_1_status down received. 

lldpd event ETH::port_2_status down received. 
lldpd event ETH::port_3_status down received. 
backhaul_switching status event backhaul::media 0 received on backhaul_switching_mgr
lldpd event ETH::port_4_status down received. 
Backhaul media 0 received, but wifi status is not started. Will do backhaul check later
lldpd event ETH::port_5_status down received. 
lldpd event lldp::root_accessible 0 received. 
subscriber running 
/etc/init.d/service_subscriber.sh subscriber-stop NULL MODE: 0
killall: omsgd: no process killed
killall: configure_me_monitor.sh: no process killed
rm: can't remove '/var/run/configure_me_monitor.sh.pid': No such file or directory
[utopia] Not setting ppp_clamp_mtu
Lighttpd Model Base: MR5500
Generating Rainier lighttpd config
Build temporary www configuration directory: 
TSLIIHauhEfGE
nss_build_bypass is called with lan-started
Power cycle Ethernet ports.
wifi, sysevent received: lan-started (Wed Oct 10 23:00:15 PDT 2012)
wifi, service_start()
Registering Service myrouter._http._tcp.local port 80
conntrack_parse running 
creating conntrack cron job
ARP agent not started: not in master mode.
Got a reply for myrouter._http._tcp.local.: Name now registered and active
[utopia][init] Loading GMAC and WLAN drivers
[utopia][init] Creating wifi devices
 Multi-region is not supported or not enabled
smart connect client, generating client device data
wifi, wifi_physical_start(ath0)
iwpriv wifi0 setCountryID 826.
dev.nss.n2hcfg.n2h_high_water_core0 = 8704
dev.nss.n2hcfg.extra_pbuf_core0 = 3100000
dev.nss.n2hcfg.n2h_high_water_core0 = 30624
dev.nss.n2hcfg.n2h_wifi_pool_buf = 8192
Not ready for JNAP. Sleeping for 15 seconds...
dev.nss.n2hcfg.n2h_queue_limit_core0 = 256
ath0      No such device

Auto channel
wifi, wifi_virtual_start(ath0)
wifi, wifi_user_start(ath0)
mosquitto aborting: not Master
wifi_user, ath0 TxBF enabled
[utopia] Not setting ppp_clamp_mtu on dslite protocol
wifi, primary AP: ath0 is up (Wed Oct 10 23:00:29 PDT 2012)
wifi, wifi_guest_start(ath0)
wan, sysevent received: phylink_wan_state
wifi, guest ath2 is disabled, do not start wifi guest
wifi, smart::mode is unconfigured do not start smart connect setup and config wifi
wifi, wifi_physical_start(ath1)
iwpriv wifi1 setCountryID 826.
dev.nss.n2hcfg.n2h_high_water_core0 = 26528
sysctl: short write
dev.nss.n2hcfg.n2h_high_water_core0 = 30624
dev.nss.n2hcfg.n2h_wifi_pool_buf = 8192
Entry tsmb lan-status, 1
dev.nss.n2hcfg.n2h_queue_limit_core0 = 256
ath1      No such device

service_guardian.sh is called with lan-status
List Flushed 
Following channels are blocked from Channel selection algorithm  
[116] [120] [124] [128] 
List Flushed 
Error received: -22 
Could not send NL command
Following channels are blocked from Channel selection algorithm  
[52] [56] [60] [64] [116] [120] [124] [128] [144] 
Auto channel
wifi, wifi_virtual_start(ath1)
wifi, wifi_user_start(ath1)
wifi_user, ath1 TxBF enabled
wifi_user, ath1 MU-MIMO enabled
wifi, primary AP: ath1 is up (Wed Oct 10 23:00:35 PDT 2012)
backhaul_switching status event system_state-normal received
wifi, wifi_guest_start(ath1)
wifi, guest ath3 is disabled, do not start wifi guest
wifi, start_hostapd()
wifi, start hostapd (Wed Oct 10 23:00:36 PDT 2012)
rfkill: Cannot open RFKILL control device
l2_packet_init: ioctl[SIOCGIFINDEX]: No such device
Failed to open l2_packet interface for vlan bridge
ACS: Automatic channel selection started, this may take a bit
ACS: Offloading to driver
rfkill: Cannot open RFKILL control device
l2_packet_init: ioctl[SIOCGIFINDEX]: No such device
Failed to open l2_packet interface for vlan bridge
ACS: Automatic channel selection started, this may take a bit
ACS: Offloading to driver
nss_build_bypass is called with ipv4_wan_ipaddr
getting geoip information for 0.0.0.0
lldpd event ipv4_wan_ipaddr 0.0.0.0 received. 
curl: (6) Could not resolve: freegeoip.net (Could not contact DNS servers)
fastpath, sysevent received: qos_enabled
dev.nss.general.redirect = 0
net.bridge.bridge-nf-call-ip6tables = 0
net.bridge.bridge-nf-call-iptables = 0
Entry tsmb tsmb-stop, 1
Restarting nfqrecv service...
smart_connect, sysevent received: wifi-status starting
killall: mdns_lookup: no process killed
2012-10-11 06:00:40: Setting defaults
nl80211: ACS Results: PFreq: 2467 SFreq: 2447 BW: 40 VHT0: 10 VHT1: 0 HW_MODE: 1 EDMGCH: 0
ath0: ACS-COMPLETED freq=2467 channel=12
wpa_driver_nl80211_set_key: ifindex=18 (ath0) alg=3 addr=0x54cfa220 key_idx=1 set_tx=1 seq_len=0 key_len=16 key_flag=0x1a
ath0: interface state UNINITIALIZED->ENABLED
ath0: AP-ENABLED 
ath0: IEEE 802.11 driver had channel switch: freq=2467, ht=1, vht_ch=0x0, offset=0, width=1 (20 MHz), cf1=2467, cf2=0
ath0: CTRL-EVENT-CHANNEL-SWITCH freq=2467 ht_enabled=1 ch_offset=0 ch_width=20 MHz cf1=2467 cf2=0 dfs=0
LookUpMaster call OK.
mDNS lookup is on going...
configurator: got event(guardian-configured, )
nss_build_bypass is called with guardian-configured
Got a TERM signal, will terminate.
Warning! nfqrecv encountered errors when doing recv(): Interrupted system call
start mcsd succeeded (Wed Oct 10 23:00:42 PDT 2012)
23.00.42.617435 MCSD plugin   info : Initializing plugin manager
configurator: got event(firewall-status, starting)
configurator: got event(firewall-status, started)
nl80211: ACS Results: PFreq: 5580 SFreq: 5620 BW: 160 VHT0: 114 VHT1: 0 HW_MODE: 2 EDMGCH: 0
ath1: ACS-COMPLETED freq=5580 channel=116
killall: nfqrecv: no process killed
btsetup smart_connect::setup_status
wpa_driver_nl80211_set_key: ifindex=19 (ath1) alg=3 addr=0x54cfa220 key_idx=1 set_tx=1 seq_len=0 key_len=16 key_flag=0x1a
ath1: interface state UNINITIALIZED->ENABLED
ath1: AP-ENABLED 
ath1: IEEE 802.11 driver had channel switch: freq=5580, ht=1, vht_ch=0x0, offset=1, width=5 (160 MHz), cf1=5570, cf2=0
ath1: CTRL-EVENT-CHANNEL-SWITCH freq=5580 ht_enabled=1 ch_offset=1 ch_width=160 MHz cf1=5570 cf2=0 dfs=0
state_machine entering READY
btpiad_ctl build version:1.0.58
configurator: got event(firewall-status, starting)
configurator: got event(firewall-status, started)
pub_devinfo_status:  Error: could not determine HOST_ADDR
smart_connect, sysevent received: wifi-status started
btsetup: Unconfigured mode and Peripheral role
configurator: got event(nfqrecv-status, stopped)
Local Bluetooth MAC: 00:11:22:33:44:55
pub_wlan_status:  Error: could not determine HOST_ADDR
0x02 0x01 0x06 0x08 0x09 0x4C 0x69 0x6E 0x6B 0x73 0x79 0x73 
0x05 0xFF 0x5C 0x00 0x00 0x00 0x11 0x07 0xD1 0x6F 0x01 0x40 0x94 0x0E 0x88 0xB7 0xC2 0x46 0xAB 0x8E 0x80 0x20 0x00 0x00 
configurator: got event(nfqrecv-status, started)
configurator: got event(firewall-status, starting)
configurator: got event(firewall-status, started)
[fw.sh] fwup_checked_after_boot: 0
[fwupd] status details:"ERROR: Connecting server"
[fw.sh] fwup_forced_update: 0
Entry tsmb tsmb-stop, 1
Entry tsmb tsmb-start, 1
[fw.sh] fwup_checked_after_boot: 0
[fwupd] status details:"ERROR: Connecting server"
[fw.sh] fwup_forced_update: 0

brada4 · January 12, 2025, 6:58pm

Just fw upgrade to unpack and warn about unsupportable pieces.

podtor · January 12, 2025, 7:33pm

https://forum.openwrt.org/t/linksys-mr5500-ttl-connection-disassembly/221329

georgem83 · January 15, 2025, 4:49am

can you add the output of?

dmesg | grep cnss

georgem83 · January 16, 2025, 6:35am

I've compiled images for the MR5500:
Filebin | kc4h81g3ka4ck9ah

Please use at your own risk. Do not immediately flash the factory image but connect serial and tftp load the initramfs image to test first!
I don't have the device so I cannot test myself. Check whether the following are working at the very least before flashing:

ethernet ports and whether they're labeled correctly (lan1..lan4, and wan)
both wifi radios (2.4 IPQ5018 and 5G QCN9074). The IPQ5018 BDF needed some work as it was an ancient version! Regdb is also updated.
NAND storage and partitions
leds
reset and wps buttons
USB port. I've added support for USB3. If confirmed working, I'll send the patches upstream

Please log your findings here in this thread. Good luck!

podtor · January 16, 2025, 4:36pm

Linksys MR5500

dmesg | grep cnss

~ # dmesg | grep cnss
[    3.118417] cnss[27]: INFO: Platform driver probed successfully. plat 9dec0010 tgt 0x1104
[    3.122810] cnss[2]: INFO: Platform driver probed successfully. plat 9ded0010 tgt 0xfffc
[   35.168843] cnss[2]: INFO: Waiting for FW ready. Device: 0xfffc, FW ready timeout: 15 seconds
[   35.172397] cnss[2]: INFO: QMI WLFW service connected, state: 0x1
[   35.172935] cnss[2]: INFO: device_id : 65532 mem mode : [1]
[   35.172964] cnss[2]: INFO: platform name: Qualcomm Technologies, Inc. IPQ5018/AP-MP03.1
[   35.175683] cnss[2]: INFO: Target capability: chip_id: 0x0, chip_family: 0x4, board_id: 0xff, soc_id: 0xffffffff, fw_version: 0x2409ffff, fw_build_timestamp: 2021-07-19 23:32, otp_version: 0x0 eeprom_caldata_read_timeout 0s
[   35.175714] cnss[2]: INFO: Boardid from dts:24,FW:ff
[   35.176157] cnss[2]: INFO: BDF location : 0x4ba00000
[   35.176171] cnss[2]: INFO: BDF IPQ5018/bdwlan.b24 size 131072
[   35.177423] cnss[2]: INFO: per device BDF location : 0x4ba20000
[   35.178019] cnss[2]: INFO: CALDATA IPQ5018/caldata.bin size 131072 offset 0x20000
[   35.276294] cnss[2]: INFO: FW ready received for device 0xfffc
[   35.276671] wlan: [2662:I:ANY] pld_ahb_wlan_enable: cnss_mode: Mission mode 
[   35.277060] cnss[2]: INFO: Sending mode message, mode: MISSION(0), state: 0x7
[   35.498328] cnss_pci 0001:01:00.0: BAR 0: assigned [mem 0xa0400000-0xa05fffff 64bit]
[   35.498409] cnss_pci 0001:01:00.0: enabling device (0140 -> 0142)
[   35.501453] cnss[27]: ERR: Unable to create CNSS MHI IPC log context
[   36.517059] cnss[27]: INFO: Waiting for FW ready. Device: 0x1104, FW ready timeout: 15 seconds
[   36.521056] cnss[27]: INFO: QMI WLFW service connected, state: 0x11
[   36.521859] cnss[27]: INFO: device_id : 4356 mem mode : [1]
[   36.521890] cnss[27]: INFO: platform name: Qualcomm Technologies, Inc. IPQ5018/AP-MP03.1
[   36.527809] cnss[27]: INFO: Target capability: chip_id: 0x0, chip_family: 0x0, board_id: 0xff, soc_id: 0xffffffff, fw_version: 0x2409ffff, fw_build_timestamp: 2021-07-19 23:19, otp_version: 0x0 eeprom_caldata_read_timeout 0s
[   36.528371] cnss[27]: INFO: Downloading BDF: qcn9000/bdwlan.ba0, size: 131072
[   36.547897] cnss[27]: INFO: Downloading BDF: qcn9000/caldata_1.bin, size: 131072
[   36.736330] cnss[27]: INFO: FW ready received for device 0x1104
[   36.737606] cnss[27]: INFO: Sending mode message, mode: MISSION(0), state: 0x17
~ #

fw_printenv

fw_printenv
altkern=58c0000
auto_recovery=yes
baudrate=115200
boot_part=2
boot_ver=3.2.02
bootargs=console=ttyMSM0,115200n8
bootcmd=if test $auto_recovery = no; then bootipq; elif test $boot_part = 1; then run bootpart1; else run bootpart2; fi
bootdelay=3
bootpart1=setenv bootargs $partbootargs && nand read $loadaddr $prikern $kernsize && bootm $loadaddr
bootpart2=setenv bootargs $partbootargs2 && nand read $loadaddr $altkern $kernsize && bootm $loadaddr
dload_dis=1
ethaddr=00:11:22:33:44:55
fdt_high=0x4A400000
fdtcontroladdr=4a9c4004
flash_type=11
flashimg=tftp $loadaddr $image && nand erase $prikern $imgsize && nand write $loadaddr $prikern $filesize
flashimg2=tftp $loadaddr $image && nand erase $altkern $imgsize && nand write $loadaddr $altkern $filesize
image=MR5500.img
imgsize=5200000
ipaddr=192.168.1.1
kernsize=800000
loadaddr=44000000
machid=8040001
mtddevname=fs
mtddevnum=0
mtdids=nand0=nand0
mtdparts=mtdparts=nand0:0x4a00000@0xec0000(fs),
netmask=255.255.255.0
partbootargs=init=/sbin/init rootfstype=squashfs ubi.mtd=rootfs root=mtd:squashfs rootwait
partbootargs2=init=/sbin/init rootfstype=squashfs ubi.mtd=alt_rootfs root=mtd:squashfs rootwait
prikern=6c0000
serverip=192.168.1.254
soc_hw_version=20180101
soc_version_major=1
soc_version_minor=1
stderr=serial@78AF000
stdin=serial@78AF000
stdout=serial@78AF000
~ #

podtor · January 16, 2025, 4:38pm

Thank you for preparing the images and the advice to start with initramfs to test first. But I need to read how to flash the initramfs image first