Arris TR4400 v2 / RAC2V1A Support

For Developers
1

hey,

i'll try my hand at porting OpenWRT to the RAC2V1A. i'm completely new to OpenWRT; not only as a dev, but i also never once used the platform.

i bought an RAC2V1K on ebay to start me up on the platform as a user, but got sent an RAC2V1A instead. i wasn't in the States to receive the package at the time, so the seller -a nice fella by the handle of "patrolop23"- royally screwed me over saying the return window had expired... thank you!

so here it is: the perfect opportunity for an unplanned crash course into OpenWRT :slight_smile:

i started by creating the device page yesterday. it already has enough info to guide you through the required hardware hacking (a pain, but i gather there won't be a way around it) for those willing to take the plunge. next i'll be studying U-Boot and OpenWRT. for now there is nothing to show, but i think it's likely that something will come out of this. i'm pleasantly surprised by the quality of OpenWRT's documentation.

if you own an RAC2V1A say hi.
thanks!

PS. i come from the DD-WRT world. after fixing some long-standing issues in the platform, i got disenchanted with the way the project is managed. not to mention that the project is not really free as in freedom. if all goes well, i'll be slowly phasing out all my Broadcom hardware with its non-free bull...

1 Like
3

FYI, i'm currently blocked on this issue:

4

the issue above has been fixed and the router is booting and flashing OpenWrt.

5

Hey, that's great news! Glad to hear you recovered the device.

1 Like
6

beta firmware published!

head to the device page.

1 Like
7

I'm currently trying to modify the RAC2V1A Spectrum router by following the guide provide here on openwrt.

If anyone is familiar with this modification I was wondering if you could answer a few questions....

After bridging all the necessary pads in order to flash firmware I am getting some strange ohm readings that do not line up with the authors notes.

Between GND and TX / GND and RX I am getting a reading in mega ohms. According to the guide they should be about 8k and 12k.

I don't have any short Circuits though.

8

hi,

could you post a zoomed pic if it is easy to take?

try swapping the black/red leads of the multimeter and retest the resistance.

9

possibly the Mohm reading you get is leakage current through your fingers. you possibly got open circuits.

10

bigjoncoop:
After bridging all the necessary pads in order to flash firmware I am getting some strange ohm readings that do not line up with the authors notes.
Between GND and TX / GND and RX I am getting a reading in mega ohms. According to the guide they should be about 8k and 12k.

Check resistance through each bridge to find the open connection. But a more reliable way to verify the internal Rx/Tx pin connections are good is with diode mode, which checks the voltage required to starting passing current through the junction. With the positive/red lead on ground, negative/black through the internal Rx/Tx junctions should read ~0.45-0.5v. Then back your way through the bridged connections to verify continuity. When testing from the other side of resistors, the value will obviously be a little higher. :slight_smile:

11

Hi guys,

I think I have yet another variant of this router... It's labeled SAC2V1A on top, RAC2V1A on the bottom, FCCID UIDTR4400, has 1GB ram and 256MB flash, but mine hangs if I try to boot the official 23.05.5 Arris TR4400 v2 image:

U-Boot 2016.01 (Oct 25 2023 - 18:20:17 +0000)
...
TFTP from server 192.168.1.2; our IP address is 192.168.1.1
...
## Booting kernel from Legacy Image at 44000000 ...
   Image Name:   ARM OpenWrt Linux-5.15.167
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    6458453 Bytes = 6.2 MiB
   Load Address: 42208000
   Entry Point:  42208000
   Verifying Checksum ... OK
   Loading Kernel Image ... OK
FDT and ATAGS support not compiled in - hanging
### ERROR ### Please RESET the board ###

After some testing, I found out Openwrt IPQ806x that use FIT images for other routers can at least boot without this error message.

So I did a lot of Googling, tried building a FIT image of TR4400, and was able to get it boot:

U-Boot 2016.01 (Oct 25 2023 - 18:20:17 +0000)

DRAM:  smem ram ptable found: ver: 0 len: 5
1 GiB
NAND:  SF: Unsupported flash IDs: manuf 00, jedec 0000, ext_jedec 0000
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
256 MiB
MMC:   SDCC : Node Not found, skipping initialization

PCI0 Link Intialized
PCI1 Link Intialized
PCI2 is not defined in the device tree
In:    serial@16340000
Out:   serial@16340000
Err:   serial@16340000
MMC Device 0 not found
machid: 1260
MMC Device 0 not found
eth0 MAC Address from ART is not valid
eth1 MAC Address from ART is not valid
eth2 MAC Address from ART is not valid
eth3 MAC Address from ART is not valid
Net:   MAC3 addr:0:3:7f:ab:bd:3
athrs17_reg_init: complete
athrs17_vlan_config ...done
S17c init  done
MAC1 addr:0:3:7f:ab:bd:1
eth0, eth1
Hit any key to stop autoboot:  0
IPQ806x# printenv
baudrate=115200
boot_custom=test -n "$boot_pre" && run boot_pre; run boot_main; run boot_recovery; run boot_tftp
boot_extra_recovery=set mtdids nand0=nand0 && set mtdparts mtdparts=nand0:64M@0x1340000(mtd_extra) && ubi part mtd_extra && ubi read 0x44000000 recovery && bootm
boot_main=set mtdids nand0=nand0 && set mtdparts mtdparts=nand0:155M@0x6500000(mtd_ubi) && ubi part mtd_ubi && ubi read 0x44000000 kernel && bootm
boot_recovery=run boot_ubi_recovery; run boot_extra_recovery
boot_stock=bootipq
boot_tftp=test -n "$ipaddr" || set ipaddr 192.168.1.1; test -n "$serverip" || set serverip 192.168.1.2; tftpboot recovery.bin && bootm
boot_ubi_recovery=set mtdids nand0=nand0 && set mtdparts mtdparts=nand0:155M@0x6500000(mtd_ubi) && ubi part mtd_ubi && ubi read 0x44000000 recovery && bootm
bootcmd=run boot_custom
bootdelay=5
eth1addr=00:03:7f:ab:bd:01
ethact=eth0
ethaddr=00:03:7f:ab:bd:03
fdt_high=0xffffffff
fdtcontroladdr=42063620
flash_type=2
machid=1260
soc_version_major=3
soc_version_minor=0
stderr=serial@16340000
stdin=serial@16340000
stdout=serial@16340000

Environment size: 1117/262140 bytes
IPQ806x# set fdt_high
IPQ806x# run boot_tftp
Mac3 unit failed
Using eth1 device
TFTP from server 192.168.1.2; our IP address is 192.168.1.1
Filename 'recovery.bin'.
Load address: 0x44000000
Loading: *
Got TFTP_OACK: TFTP remote port: changes from 69 to 43553
...
         11.7 MiB/s
done
Bytes transferred = 11247968 (aba160 hex)
## Loading kernel from FIT Image at 44000000 ...
   Using 'config@1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM OpenWrt Linux-6.6.100
     Type:         Kernel Image
     Compression:  gzip compressed
     Data Start:   0x440000e4
     Data Size:    11212719 Bytes = 10.7 MiB
     Architecture: ARM
     OS:           Linux
     Load Address: 0x42208000
     Entry Point:  0x42208000
     Hash algo:    crc32
     Hash value:   e8ba4a6b
     Hash algo:    sha1
     Hash value:   957dacbea5615759060c584efb7e533c497dbbac
   Verifying Hash Integrity ... crc32+ sha1+ OK
   gzip compressed kernel image found
   kernel load address is: 0x42208000
## Loading fdt from FIT Image at 44000000 ...
   Using 'config@1' configuration
   Trying 'fdt-1' fdt subimage
     Description:  ARM OpenWrt arris_tr4400-v2-fit device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x44ab19d4
     Data Size:    33351 Bytes = 32.6 KiB
     Architecture: ARM
     Hash algo:    crc32
     Hash value:   7c51f326
     Hash algo:    sha1
     Hash value:   475f21ba08e88e200748425743730d4a74d209e9
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x44ab19d4
   Uncompressing Kernel Image ... OK
   Loading Device Tree to 41ef3000, end 41efe246 ... OK
Could not find PCI in device tree
Using machid 0x1260 from environment

(Too long, I'll try to post the rest in a separate message)

BTW, I have to unset "fdt_high" in uboot before running boot_tftp, otherwise it hangs without an error message - I have no idea why.

The problem is LAN is not working on any port. I don't get DHCP in my computer, and even if I set my computer to a static IP (192.168.1.2), it doesn't work:

PING 192.168.1.2 (192.168.1.2): 56 data bytes
^C
--- 192.168.1.2 ping statistics ---
141 packets transmitted, 0 packets received, 100% packet loss

root@OpenWrt:/# ifconfig
br-lan    Link encap:Ethernet  HWaddr A0:68:7E:55:66:BD
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::a268:7eff:fe55:66bd/64 Scope:Link
          inet6 addr: fd6e:1410:7a27::1/60 Scope:Global
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:435 errors:0 dropped:0 overruns:0 frame:0
          TX packets:637 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:35915 (35.0 KiB)  TX bytes:49202 (48.0 KiB)

eth0      Link encap:Ethernet  HWaddr A0:68:7E:55:66:BD
          inet6 addr: fe80::a268:7eff:fe55:66bd/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1502  Metric:1
          RX packets:435 errors:0 dropped:0 overruns:0 frame:0
          TX packets:62776 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:42875 (41.8 KiB)  TX bytes:3779578 (3.6 MiB)
          Interrupt:37

eth2      Link encap:Ethernet  HWaddr A0:68:7E:55:66:BA
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:39

lan1      Link encap:Ethernet  HWaddr A0:68:7E:55:66:BD
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

lan2      Link encap:Ethernet  HWaddr A0:68:7E:55:66:BD
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

lan3      Link encap:Ethernet  HWaddr A0:68:7E:55:66:BD
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:435 errors:0 dropped:0 overruns:0 frame:0
          TX packets:637 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:42005 (41.0 KiB)  TX bytes:49202 (48.0 KiB)

lan4      Link encap:Ethernet  HWaddr A0:68:7E:55:66:BD
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:1180 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1180 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:94744 (92.5 KiB)  TX bytes:94744 (92.5 KiB)

It at least detects if a cable is plugged/unplugged:

[  151.824081] br-lan: port 3(lan3) entered disabled state
[  151.986509] qca8k 37000000.mdio-mii:10 lan3: Link is Down
[  165.406193] qca8k 37000000.mdio-mii:10 lan1: Link is Up - 1Gbps/Full - flow control rx/tx
[  165.406326] br-lan: port 1(lan1) entered blocking state
[  165.413425] br-lan: port 1(lan1) entered forwarding state

The /etc/config/network:

config interface 'loopback'
        option device 'lo'
        option proto 'static'
        list ipaddr '127.0.0.1/8'

config globals 'globals'
        option ula_prefix 'fd6e:1410:7a27::/48'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'lan1'
        list ports 'lan2'
        list ports 'lan3'
        list ports 'lan4'

config interface 'lan'
        option device 'br-lan'
        option proto 'static'
        list ipaddr '192.168.1.1/24'
        option ip6assign '60'

config interface 'wan'
        option device 'eth2'
        option proto 'dhcp'

config interface 'wan6'
        option device 'eth2'
        option proto 'dhcpv6'

WAN works.

For the changes to the source, I just copied the TR4400 and added the FIT lines:

define Device/arris_tr4400-v2-fit
	$(call Device/FitImage)
	$(call Device/UbiFit)
	$(Device/dsa-migration)
	DEVICE_VENDOR := Arris
	DEVICE_MODEL := TR4400
	DEVICE_VARIANT := v2-fit
	SOC := qcom-ipq8065
	BLOCKSIZE := 128k
	PAGESIZE := 2048
	DEVICE_PACKAGES := ath10k-firmware-qca9984-ct ath10k-firmware-qca99x0-ct
endef
TARGET_DEVICES += arris_tr4400-v2-fit

I also copied the TR4400 dts file to the new name, and made sure any checks for "tr4400-v2" also checked "tr4400-v2-fit".

Honestly, this stuff is a bit over my head... Any suggestions on what I can try to get LAN working?

12

Continued from above...

Starting kernel ...

L2 master port slave error
[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 6.6.100 (user@user-vmware) (arm-openwrt-linux-muslgnueabi-gcc (OpenWrt GCC 14.3.0 r30690-03542312f7) 14.3.0, GNU ld (GNU Binutils) 2.42) #0 SMP Wed Aug  6 21:42:43 2025
[    0.000000] CPU: ARMv7 Processor [512f04d0] revision 0 (ARMv7), cr=10c5787d
[    0.000000] CPU: div instructions available: patching division code
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, PIPT instruction cache
[    0.000000] OF: fdt: Machine model: Arris TR4400 v2
[    0.000000] OF: fdt: Ignoring memory range 0x40000000 - 0x42000000
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] OF: reserved mem: 0x40000000..0x40ffffff (16384 KiB) nomap non-reusable nss@40000000
[    0.000000] OF: reserved mem: 0x41000000..0x411fffff (2048 KiB) nomap non-reusable smem@41000000
[    0.000000] OF: reserved mem: 0x41200000..0x414fffff (3072 KiB) nomap non-reusable rsvd@41200000
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000042000000-0x0000000071ffffff]
[    0.000000]   HighMem  [mem 0x0000000072000000-0x000000007fffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000042000000-0x000000007fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000042000000-0x000000007fffffff]
[    0.000000] percpu: Embedded 13 pages/cpu s21332 r8192 d23724 u53248
[    0.000000] Kernel command line: rootfstype=squashfs noinitrd
[    0.000000] Bootloader command line not present
[    0.000000] Dentry cache hash table entries: 131072 (order: 7, 524288 bytes, linear)
[    0.000000] Inode-cache hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 252224
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 979372K/1015808K available (7516K kernel code, 646K rwdata, 2048K rodata, 15360K init, 238K bss, 36436K reserved, 0K cma-reserved, 229376K highmem)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000]  Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[    0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[    0.000000] clocksource: dg_timer: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 305801671480 ns
[    0.000001] sched_clock: 32 bits at 6MHz, resolution 160ns, wraps every 343597383600ns
[    0.000017] Switching to timer-based delay loop, resolution 160ns
[    0.000321] Calibrating delay loop (skipped), value calculated using timer frequency.. 12.50 BogoMIPS (lpj=62500)
[    0.000348] CPU: Testing write buffer coherency: ok
[    0.000407] pid_max: default: 32768 minimum: 301
[    0.009676] Mount-cache hash table entries: 2048 (order: 1, 8192 bytes, linear)
[    0.009701] Mountpoint-cache hash table entries: 2048 (order: 1, 8192 bytes, linear)
[    0.018240] qcom_scm: convention: smc legacy
[    0.019788] RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2.
[    0.020020] Setting up static identity map for 0x42300000 - 0x42300060
[    0.020248] rcu: Hierarchical SRCU implementation.
[    0.020259] rcu:     Max phase no-delay instances is 1000.
[    0.021027] smp: Bringing up secondary CPUs ...
[    0.023180] smp: Brought up 1 node, 2 CPUs
[    0.023199] SMP: Total of 2 processors activated (25.00 BogoMIPS).
[    0.023214] CPU: All CPU(s) started in SVC mode.
[    0.039020] VFP support v0.3: implementor 51 architecture 64 part 4d variant 2 rev 0
[    0.039266] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.039296] futex hash table entries: 512 (order: 3, 32768 bytes, linear)
[    0.044210] pinctrl core: initialized pinctrl subsystem
[    0.048307] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.048733] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.050537] thermal_sys: Registered thermal governor 'step_wise'
[    0.050655] cpuidle: using governor ladder
[    0.050726] cpuidle: using governor menu
[    0.088079] usbcore: registered new interface driver usbfs
[    0.088198] usbcore: registered new interface driver hub
[    0.088269] usbcore: registered new device driver usb
[    0.088342] pps_core: LinuxPPS API ver. 1 registered
[    0.088352] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    0.088385] PTP clock support registered
[    0.091972] clocksource: Switched to clocksource dg_timer
[    0.102852] NET: Registered PF_INET protocol family
[    0.103120] IP idents hash table entries: 16384 (order: 5, 131072 bytes, linear)
[    0.104927] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.104958] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.105077] TCP established hash table entries: 8192 (order: 3, 32768 bytes, linear)
[    0.105140] TCP bind hash table entries: 8192 (order: 5, 131072 bytes, linear)
[    0.105289] TCP: Hash tables configured (established 8192 bind 8192)
[    0.105934] MPTCP token hash table entries: 1024 (order: 2, 16384 bytes, linear)
[    0.106314] UDP hash table entries: 512 (order: 2, 16384 bytes, linear)
[    0.106353] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes, linear)
[    0.107128] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.107193] PCI: CLS 0 bytes, default 64
[    0.113492] workingset: timestamp_bits=14 max_order=18 bucket_order=4
[    0.117180] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.117210] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.430830] bounce: pool size: 64 pages
[    0.441027] krait-cc soc:clock-controller: CPU0 @ 800000 KHz
[    0.441060] krait-cc soc:clock-controller: CPU1 @ Undefined rate. Forcing new rate.
[    0.441419] krait-cc soc:clock-controller: CPU1 @ 384000 KHz
[    0.441446] krait-cc soc:clock-controller: L2 @ Undefined rate. Forcing new rate.
[    0.441718] krait-cc soc:clock-controller: L2 @ 384000 KHz
[    0.443080] qcom-pcie 1b500000.pci: supply vdda not found, using dummy regulator
[    0.443381] qcom-pcie 1b500000.pci: supply vdda_phy not found, using dummy regulator
[    0.443531] qcom-pcie 1b500000.pci: supply vdda_refclk not found, using dummy regulator
[    0.443831] qcom-pcie 1b500000.pci: host bridge /soc/pci@1b500000 ranges:
[    0.443921] qcom-pcie 1b500000.pci:       IO 0x000fe00000..0x000fe0ffff -> 0x0000000000
[    0.443965] qcom-pcie 1b500000.pci:      MEM 0x0008000000..0x000fdfffff -> 0x0008000000
[    0.444674] qcom-pcie 1b700000.pci: supply vdda not found, using dummy regulator
[    0.444969] qcom-pcie 1b700000.pci: supply vdda_phy not found, using dummy regulator
[    0.445082] qcom-pcie 1b700000.pci: supply vdda_refclk not found, using dummy regulator
[    0.445475] qcom-pcie 1b700000.pci: host bridge /soc/pci@1b700000 ranges:
[    0.445561] qcom-pcie 1b700000.pci:       IO 0x0031e00000..0x0031e0ffff -> 0x0000000000
[    0.445599] qcom-pcie 1b700000.pci:      MEM 0x002e000000..0x0031dfffff -> 0x002e000000
[    0.450702] gsbi 16300000.gsbi: GSBI port protocol: 6 crci: 0
[    0.452572] gsbi 1a200000.gsbi: GSBI port protocol: 3 crci: 0
[    0.455388] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    0.457389] msm_serial 16340000.serial: msm_serial: detected port #0
[    0.457481] msm_serial 16340000.serial: uartclk = 7372800
[    0.458098] 16340000.serial: ttyMSM0 at MMIO 0x16340000 (irq = 29, base_baud = 460800) is a MSM
[    0.458165] msm_serial: console setup on port #0
[    0.458283] printk: console [ttyMSM0] enabled
[    0.570474] msm_serial: driver initialized
[    0.577239] qcom-pcie 1b500000.pci: iATU: unroll F, 8 ob, 8 ib, align 4K, limit 4G
[    0.682344] qcom-pcie 1b500000.pci: PCIe Gen.2 x1 link up
[    0.690206] qcom-pcie 1b700000.pci: iATU: unroll F, 8 ob, 8 ib, align 4K, limit 4G
[    0.696607] qcom-pcie 1b500000.pci: PCI host bridge to bus 0000:00
[    0.717985] loop: module loaded
[    0.723028] pci_bus 0000:00: root bus resource [bus 00-ff]
[    0.723048] pci_bus 0000:00: root bus resource [io  0x0000-0xffff]
[    0.765308] nand: device found, Manufacturer ID: 0xc2, Chip ID: 0xaa
[    0.769288] pci_bus 0000:00: root bus resource [mem 0x08000000-0x0fdfffff]
[    0.775533] nand: Macronix MX30UF2G18AC
[    0.775549] nand: 256 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    0.788070] qcom-nandc 1ac00000.nand-controller: Opcode not supported: 238
[    0.797890] pci 0000:00:00.0: [17cb:0101] type 01 class 0x060400
[    0.804525] Block protection check failed
[    0.809610] pci 0000:00:00.0: supports D1
[    0.815777] 23 fixed-partitions partitions found on MTD device qcom_nand.0
[    0.822396] pci 0000:00:00.0: PME# supported from D0 D1 D3hot
[    0.828532] Creating 23 MTD partitions on "qcom_nand.0":
[    0.836478] 0x000000000000-0x000000040000 : "0:SBL1"
[    0.867633] 0x000000040000-0x000000180000 : "0:MIBIB"
[    0.870250] PCI: bus0: Fast back to back transfers disabled
[    1.002848] 0x000000180000-0x0000002c0000 : "0:SBL2"
[    1.153393] 0x0000002c0000-0x000000540000 : "0:SBL3"
[    1.281996] pci 0000:01:00.0: [168c:0046] type 00 class 0x028000
[    1.286940] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x001fffff 64bit]
[    1.294284] pci 0000:01:00.0: PME# supported from D0 D3hot D3cold
[    1.294858] 0x000000540000-0x000000660000 : "0:DDRCONFIG"
[    1.307365] PCI: bus1: Fast back to back transfers disabled
[    1.310641] pci 0000:00:00.0: BAR 8: assigned [mem 0x08000000-0x081fffff]
[    1.311298] qcom-pcie 1b700000.pci: PCIe Gen.1 x1 link up
[    1.315995] pci 0000:01:00.0: BAR 0: assigned [mem 0x08000000-0x081fffff 64bit]
[    1.323150] qcom-pcie 1b700000.pci: PCI host bridge to bus 0001:00
[    1.328350] pci 0000:00:00.0: PCI bridge to [bus 01-ff]
[    1.335445] pci_bus 0001:00: root bus resource [bus 00-ff]
[    1.341602] pci 0000:00:00.0:   bridge window [mem 0x08000000-0x081fffff]
[    1.346800] pci_bus 0001:00: root bus resource [io  0x10000-0x1ffff] (bus address [0x0000-0xffff])
[    1.359141] pci_bus 0001:00: root bus resource [mem 0x2e000000-0x31dfffff]
[    1.368183] pci 0001:00:00.0: [17cb:0101] type 01 class 0x060400
[    1.368781] pcieport 0000:00:00.0: AER: enabled with IRQ 33
[    1.375131] pci 0001:00:00.0: supports D1
[    1.386373] pci 0001:00:00.0: PME# supported from D0 D1 D3hot
[    1.391606] 0x000000660000-0x000000780000 : "0:SSD"
[    1.396209] PCI: bus0: Fast back to back transfers disabled
[    1.401808] pci 0001:01:00.0: [168c:0040] type 00 class 0x028000
[    1.407034] pci 0001:01:00.0: reg 0x10: [mem 0x00000000-0x001fffff 64bit]
[    1.414340] pci 0001:01:00.0: PME# supported from D0 D3hot D3cold
[    1.414564] 0x000000780000-0x000000a00000 : "0:TZ"
[    1.426148] pci 0001:01:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s PCIe x1 link at 0001:00:00.0 (capable of 4.000 Gb/s with 5.0 GT/s PCIe x1 link)
[    1.431916] PCI: bus1: Fast back to back transfers disabled
[    1.445279] pci 0001:00:00.0: BAR 8: assigned [mem 0x2e000000-0x2e1fffff]
[    1.450538] pci 0001:01:00.0: BAR 0: assigned [mem 0x2e000000-0x2e1fffff 64bit]
[    1.457713] pci 0001:00:00.0: PCI bridge to [bus 01-ff]
[    1.464630] pci 0001:00:00.0:   bridge window [mem 0x2e000000-0x2e1fffff]
[    1.471836] pcieport 0001:00:00.0: AER: enabled with IRQ 35
[    1.472708] 0x000000a00000-0x000000c80000 : "0:RPM"
[    1.488391] 0x000000c80000-0x000001180000 : "0:APPSBL"
[    1.497444] 0x000001180000-0x000001200000 : "0:APPSBLENV"
[    1.498998] 0x000001200000-0x000001340000 : "0:ART"
[    1.504863] OF: Bad cell count for /soc/nand-controller@1ac00000/nand@0/partitions
[    1.506872] 0x000001340000-0x000005340000 : "extra"
[    1.624748] 0x000005340000-0x0000053a0000 : "0:BOOTCONFIG"
[    1.626137] 0x0000053a0000-0x0000054e0000 : "0:SBL2_1"
[    1.631846] 0x0000054e0000-0x000005760000 : "0:SBL3_1"
[    1.639149] 0x000005760000-0x000005880000 : "0:DDRCONFIG_1"
[    1.641937] 0x000005880000-0x0000059a0000 : "0:SSD_1"
[    1.647401] 0x0000059a0000-0x000005c20000 : "0:TZ_1"
[    1.654889] 0x000005c20000-0x000005ea0000 : "0:RPM_1"
[    1.659827] 0x000005ea0000-0x000005f00000 : "0:BOOTCONFIG1"
[    1.661411] 0x000005f00000-0x000006400000 : "0:APPSBL_1"
[    1.674446] 0x000006400000-0x000006500000 : "fw_env"
[    1.676976] OF: Bad cell count for /soc/nand-controller@1ac00000/nand@0/partitions
[    1.678815] 0x000006500000-0x000010000000 : "ubi"
[    1.922444] random: crng init done
[    1.952533] spi_qup 1a280000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64
[    1.952718] flash@0 enforce active low on GPIO handle
[    1.959678] spi-nor spi0.0: mr25h256 (32 Kbytes)
[    2.008058] ipq806x-gmac-dwmac 37000000.ethernet: IRQ eth_wake_irq not found
[    2.008113] ipq806x-gmac-dwmac 37000000.ethernet: IRQ eth_lpi not found
[    2.015211] ipq806x-gmac-dwmac 37000000.ethernet: PTP uses main clock
[    2.021283] ipq806x-gmac-dwmac 37000000.ethernet: User ID: 0x10, Synopsys ID: 0x37
[    2.027247] ipq806x-gmac-dwmac 37000000.ethernet:    DWMAC1000
[    2.034683] ipq806x-gmac-dwmac 37000000.ethernet: DMA HW capability register supported
[    2.040406] ipq806x-gmac-dwmac 37000000.ethernet: RX Checksum Offload Engine supported
[    2.048223] ipq806x-gmac-dwmac 37000000.ethernet: COE Type 2
[    2.056106] ipq806x-gmac-dwmac 37000000.ethernet: TX Checksum insertion supported
[    2.061846] ipq806x-gmac-dwmac 37000000.ethernet: Wake-Up On Lan supported
[    2.069312] ipq806x-gmac-dwmac 37000000.ethernet: Enhanced/Alternate descriptors
[    2.076058] ipq806x-gmac-dwmac 37000000.ethernet: Enabled extended descriptors
[    2.083620] ipq806x-gmac-dwmac 37000000.ethernet: Ring mode enabled
[    2.090577] ipq806x-gmac-dwmac 37000000.ethernet: Enable RX Mitigation via HW Watchdog Timer
[    2.098956] ipq806x-gmac-dwmac 37200000.ethernet: IRQ eth_wake_irq not found
[    2.105535] ipq806x-gmac-dwmac 37200000.ethernet: IRQ eth_lpi not found
[    2.112840] ipq806x-gmac-dwmac 37200000.ethernet: PTP uses main clock
[    2.119313] ipq806x-gmac-dwmac 37200000.ethernet: User ID: 0x10, Synopsys ID: 0x37
[    2.125504] ipq806x-gmac-dwmac 37200000.ethernet:    DWMAC1000
[    2.132964] ipq806x-gmac-dwmac 37200000.ethernet: DMA HW capability register supported
[    2.138669] ipq806x-gmac-dwmac 37200000.ethernet: RX Checksum Offload Engine supported
[    2.146473] ipq806x-gmac-dwmac 37200000.ethernet: COE Type 2
[    2.154376] ipq806x-gmac-dwmac 37200000.ethernet: TX Checksum insertion supported
[    2.160110] ipq806x-gmac-dwmac 37200000.ethernet: Wake-Up On Lan supported
[    2.167560] ipq806x-gmac-dwmac 37200000.ethernet: Enhanced/Alternate descriptors
[    2.174350] ipq806x-gmac-dwmac 37200000.ethernet: Enabled extended descriptors
[    2.181809] ipq806x-gmac-dwmac 37200000.ethernet: Ring mode enabled
[    2.188928] ipq806x-gmac-dwmac 37200000.ethernet: Enable RX Mitigation via HW Watchdog Timer
[    2.197039] ipq806x-gmac-dwmac 37600000.ethernet: IRQ eth_wake_irq not found
[    2.203776] ipq806x-gmac-dwmac 37600000.ethernet: IRQ eth_lpi not found
[    2.211034] ipq806x-gmac-dwmac 37600000.ethernet: PTP uses main clock
[    2.217610] ipq806x-gmac-dwmac 37600000.ethernet: User ID: 0x10, Synopsys ID: 0x37
[    2.223751] ipq806x-gmac-dwmac 37600000.ethernet:    DWMAC1000
[    2.231115] ipq806x-gmac-dwmac 37600000.ethernet: DMA HW capability register supported
[    2.237052] ipq806x-gmac-dwmac 37600000.ethernet: RX Checksum Offload Engine supported
[    2.244723] ipq806x-gmac-dwmac 37600000.ethernet: COE Type 2
[    2.252626] ipq806x-gmac-dwmac 37600000.ethernet: TX Checksum insertion supported
[    2.258374] ipq806x-gmac-dwmac 37600000.ethernet: Wake-Up On Lan supported
[    2.265810] ipq806x-gmac-dwmac 37600000.ethernet: Enhanced/Alternate descriptors
[    2.272589] ipq806x-gmac-dwmac 37600000.ethernet: Enabled extended descriptors
[    2.280074] ipq806x-gmac-dwmac 37600000.ethernet: Ring mode enabled
[    2.287178] ipq806x-gmac-dwmac 37600000.ethernet: Enable RX Mitigation via HW Watchdog Timer
[    2.295437] i2c_dev: i2c /dev entries driver
[    2.305936] sdhci: Secure Digital Host Controller Interface driver
[    2.306203] sdhci: Copyright(c) Pierre Ossman
[    2.312188] sdhci-pltfm: SDHCI platform and OF driver helper
[    2.318680] nvmem qfprom24: cell calib raw len 11 unaligned to nvmem word size 4
[    2.322449] nvmem qfprom24: cell calib_backup raw len 11 unaligned to nvmem word size 4
[    2.331036] NET: Registered PF_INET6 protocol family
[    2.339345] Segment Routing with IPv6
[    2.342815] In-situ OAM (IOAM) with IPv6
[    2.346351] NET: Registered PF_PACKET protocol family
[    2.350545] 8021q: 802.1Q VLAN Support v1.8
[    2.355391] Registering SWP/SWPB emulation handler
[    2.408639] qcom_rpm 108000.rpm: RPM firmware 3.0.16777387
[    2.424357] s1a: Bringing 0uV into 1050000-1050000uV
[    2.424921] s1b: Bringing 0uV into 1050000-1050000uV
[    2.428872] s2a: Bringing 0uV into 775000-775000uV
[    2.433971] s2b: Bringing 0uV into 775000-775000uV
[    2.723577] qca8k 37000000.mdio-mii:10: configuring for fixed/rgmii link mode
[    2.731926] qca8k 37000000.mdio-mii:10: Link is Up - 1Gbps/Full - flow control off
[    2.738005] qca8k 37000000.mdio-mii:10: configuring for fixed/sgmii link mode
[    2.751813] qca8k 37000000.mdio-mii:10: Link is Up - 1Gbps/Full - flow control off
[    2.859072] qca8k 37000000.mdio-mii:10 lan1 (uninitialized): PHY [qca8k-0.0:00] driver [Qualcomm Atheros 8337 internal PHY] (irq=POLL)
[    2.985341] qca8k 37000000.mdio-mii:10 lan2 (uninitialized): PHY [qca8k-0.0:01] driver [Qualcomm Atheros 8337 internal PHY] (irq=POLL)
[    3.099116] qca8k 37000000.mdio-mii:10 lan3 (uninitialized): PHY [qca8k-0.0:02] driver [Qualcomm Atheros 8337 internal PHY] (irq=POLL)
[    3.209052] qca8k 37000000.mdio-mii:10 lan4 (uninitialized): PHY [qca8k-0.0:03] driver [Qualcomm Atheros 8337 internal PHY] (irq=POLL)
[    3.220948] ipq806x-gmac-dwmac 37000000.ethernet eth0: entered promiscuous mode
[    3.221264] ipq806x-gmac-dwmac 37200000.ethernet eth1: entered promiscuous mode
[    3.227378] DSA: tree 0 setup
[    3.242255] thermal thermal_zone0: failed to read out thermal zone (-110)
[    3.257259] UBI: auto-attach mtd22
[    3.257287] ubi0: attaching mtd22
[    4.338955] ubi0: scanning is finished
[    4.348271] ubi0: attached mtd22 (name "ubi", size 155 MiB)
[    4.348296] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    4.352704] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    4.359590] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    4.366506] ubi0: good PEBs: 1238, bad PEBs: 2, corrupted PEBs: 0
[    4.373285] ubi0: user volume: 1, internal volumes: 1, max. volumes count: 128
[    4.379469] ubi0: max/mean erase counter: 4/1, WL threshold: 4096, image sequence number: 2119168690
[    4.386654] ubi0: available PEBs: 1136, total reserved PEBs: 102, PEBs reserved for bad PEB handling: 38
[    4.396112] clk: Disabling unuse▒[    4.416793] Freeing unused kernel image (initmem) memory: 15360K
[    4.416995] Run /init as init process
[    4.689880] init: Console is alive
[    4.690026] init: - watchdog -
[    4.692317] init: Watchdog has previously reset the system
[    4.702618] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    4.704119] gpio_button_hotplug: loading out-of-tree module taints kernel.
[    4.713828] SCSI subsystem initialized
[    4.786907] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    4.786957] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 1
[    4.791435] xhci-hcd xhci-hcd.0.auto: hcc params 0x0228f065 hci version 0x100 quirks 0x0000008002000010
[    4.798952] xhci-hcd xhci-hcd.0.auto: irq 47, io mem 0x11000000
[    4.808420] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    4.814182] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 2
[    4.819676] xhci-hcd xhci-hcd.0.auto: Host supports USB 3.0 SuperSpeed
[    4.828895] hub 1-0:1.0: USB hub found
[    4.833918] hub 1-0:1.0: 1 port detected
[    4.837830] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[    4.841961] hub 2-0:1.0: USB hub found
[    4.849816] hub 2-0:1.0: 1 port detected
[    4.854814] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    4.862531] init: - preinit -
Cannot parse config file '/etc/fw_env.config': No such file or directory
Failed to find NVMEM device
[    5.130175] ipq806x-gmac-dwmac 37000000.ethernet eth0: Register MEM_TYPE_PAGE_POOL RxQ-0
[    5.130894] dwmac1000: Master AXI performs any burst length
[    5.137447] ipq806x-gmac-dwmac 37000000.ethernet eth0: No Safety Features support found
[    5.152720] ipq806x-gmac-dwmac 37000000.ethernet eth0: IEEE 1588-2008 Advanced Timestamp supported
[    5.152864] ipq806x-gmac-dwmac 37000000.ethernet eth0: registered PTP clock
[    5.161367] ipq806x-gmac-dwmac 37000000.ethernet eth0: configuring for fixed/rgmii link mode
[    5.167777] ipq806x-gmac-dwmac 37000000.ethernet eth0: Link is Up - 1Gbps/Full - flow control off
[    5.182195] qca8k 37000000.mdio-mii:10 lan1: configuring for phy/internal link mode
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[   11.240327] procd: - early -
[   11.240428] procd: - watchdog -
[   11.242434] procd: Watchdog has previously reset the system
[   11.778486] procd: - watchdog -
[   11.778564] procd: Watchdog has previously reset the system
[   11.780628] procd: - ubus -
[   11.939312] procd: - init -
Please press Enter to activate this console.
[   12.133682] kmodloader: loading kernel modules from /etc/modules.d/*
[   12.139420] Loading modules backported from Linux version v6.14.11-0-gb9d5d463c216
[   12.139447] Backport generated by backports.git v6.1.110-1-43-g2e32643b84e8
[   12.194828] PPP generic driver version 2.4.2
[   12.195839] NET: Registered PF_PPPOX protocol family
[   12.211819] ath10k 6.14 driver, optimized for CT firmware, probing pci device: 0x46.
[   12.222572] ath10k_pci 0000:01:00.0: enabling device (0140 -> 0142)
[   12.223240] ath10k_pci 0000:01:00.0: pci irq msi oper_irq_mode 2 irq_mode 0 reset_mode 0
[   12.365098] urngd: v1.0.2 started.
[   12.727509] ath10k_pci 0000:01:00.0: qca9984/qca9994 hw1.0 target 0x01000000 chip_id 0x00000000 sub 168c:cafe
[   12.727557] ath10k_pci 0000:01:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   12.738222] ath10k_pci 0000:01:00.0: firmware ver 10.4b-ct-9984-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 7ea63dc5
[   15.060957] ath10k_pci 0000:01:00.0: board_file api 2 bmi_id 0:1 crc32 0bfe5c35
[   18.602190] ath10k_pci 0000:01:00.0: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   18.602227] ath10k_pci 0000:01:00.0: msdu-desc: 2500  skid: 32
[   18.684120] ath10k_pci 0000:01:00.0: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   18.684945] ath10k_pci 0000:01:00.0: wmi print 'free: 84920 iram: 13156 sram: 11224'
[   18.882836] ath10k_pci 0000:01:00.0: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-nvmem max-sta 32 raw 0 hwcrypto 1
[   19.092709] ath10k 6.14 driver, optimized for CT firmware, probing pci device: 0x40.
[   19.093392] ath10k_pci 0001:01:00.0: enabling device (0140 -> 0142)
[   19.100243] ath10k_pci 0001:01:00.0: pci irq msi oper_irq_mode 2 irq_mode 0 reset_mode 0
[   19.554520] ath10k_pci 0001:01:00.0: qca99x0 hw2.0 target 0x01000000 chip_id 0x003b01ff sub 168c:0002
[   19.554564] ath10k_pci 0001:01:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   19.564441] ath10k_pci 0001:01:00.0: firmware ver 10.4b-ct-9980-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 b36a12bf
[   19.638512] ath10k_pci 0001:01:00.0: board_file api 2 bmi_id 1:2 crc32 4a3d27bf
[   20.792300] ath10k_pci 0001:01:00.0: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   20.792337] ath10k_pci 0001:01:00.0: msdu-desc: 2500  skid: 32
[   20.870486] ath10k_pci 0001:01:00.0: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   20.871255] ath10k_pci 0001:01:00.0: wmi print 'free: 31080 iram: 23028 sram: 9596'
[   21.075571] ath10k_pci 0001:01:00.0: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-nvmem max-sta 32 raw 0 hwcrypto 1
[   21.295583] kmodloader: done loading kernel modules from /etc/modules.d/*
[   28.585335] ipq806x-gmac-dwmac 37000000.ethernet eth0: Link is Down
[   28.589011] ipq806x-gmac-dwmac 37000000.ethernet eth0: Register MEM_TYPE_PAGE_POOL RxQ-0
[   28.591046] dwmac1000: Master AXI performs any burst length
[   28.598846] ipq806x-gmac-dwmac 37000000.ethernet eth0: No Safety Features support found
[   28.614174] ipq806x-gmac-dwmac 37000000.ethernet eth0: IEEE 1588-2008 Advanced Timestamp supported
[   28.614319] ipq806x-gmac-dwmac 37000000.ethernet eth0: registered PTP clock
[   28.622032] ipq806x-gmac-dwmac 37000000.ethernet eth0: configuring for fixed/rgmii link mode
[   28.632515] ipq806x-gmac-dwmac 37000000.ethernet eth0: Link is Up - 1Gbps/Full - flow control off
[   31.094145] qca8k 37000000.mdio-mii:10 lan1: configuring for phy/internal link mode
[   33.307489] br-lan: port 1(lan1) entered blocking state
[   33.307513] br-lan: port 1(lan1) entered disabled state
[   33.311526] qca8k 37000000.mdio-mii:10 lan1: entered allmulticast mode
[   33.316780] ipq806x-gmac-dwmac 37000000.ethernet eth0: entered allmulticast mode
[   35.072943] qca8k 37000000.mdio-mii:10 lan1: entered promiscuous mode
[   39.993888] qca8k 37000000.mdio-mii:10 lan2: configuring for phy/internal link mode
[   39.994209] br-lan: port 2(lan2) entered blocking state
[   40.000350] br-lan: port 2(lan2) entered disabled state
[   40.005653] qca8k 37000000.mdio-mii:10 lan2: entered allmulticast mode
[   40.881740] qca8k 37000000.mdio-mii:10 lan2: entered promiscuous mode
[   46.734137] qca8k 37000000.mdio-mii:10 lan3: configuring for phy/internal link mode
[   46.734418] br-lan: port 3(lan3) entered blocking state
[   46.740597] br-lan: port 3(lan3) entered disabled state
[   46.745895] qca8k 37000000.mdio-mii:10 lan3: entered allmulticast mode
[   47.782250] qca8k 37000000.mdio-mii:10 lan3: entered promiscuous mode
[   51.465696] qca8k 37000000.mdio-mii:10 lan3: Link is Up - 1Gbps/Full - flow control rx/tx
[   55.021736] qca8k 37000000.mdio-mii:10 lan4: configuring for phy/internal link mode
[   55.022023] br-lan: port 4(lan4) entered blocking state
[   55.028270] br-lan: port 4(lan4) entered disabled state
[   55.033492] qca8k 37000000.mdio-mii:10 lan4: entered allmulticast mode
[   56.321733] qca8k 37000000.mdio-mii:10 lan4: entered promiscuous mode
[   58.775037] br-lan: port 3(lan3) entered blocking state
[   58.775067] br-lan: port 3(lan3) entered forwarding state
[   59.518505] ipq806x-gmac-dwmac 37600000.ethernet eth2: Register MEM_TYPE_PAGE_POOL RxQ-0
[   60.727041] ipq806x-gmac-dwmac 37600000.ethernet eth2: PHY [37000000.mdio-mii:07] driver [Qualcomm Atheros AR8031/AR8033] (irq=POLL)
[   60.727098] dwmac1000: Master AXI performs any burst length
[   60.738160] ipq806x-gmac-dwmac 37600000.ethernet eth2: No Safety Features support found
[   60.753435] ipq806x-gmac-dwmac 37600000.ethernet eth2: IEEE 1588-2008 Advanced Timestamp supported
[   60.753588] ipq806x-gmac-dwmac 37600000.ethernet eth2: registered PTP clock
[   60.762216] ipq806x-gmac-dwmac 37600000.ethernet eth2: configuring for phy/sgmii link mode



BusyBox v1.37.0 (2025-08-06 21:42:43 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r30690-03542312f7
 -----------------------------------------------------
13

Been there…though I only had issues on 24.10 and snapshot, not 23.05. :wink: See: https://github.com/openwrt/openwrt/issues/17631

Mine is currently running a custom 23.05 build to utilize the 1GB memory. Been meaning to resync it to 23.05.6 actually…

14

Interesting... So I wonder if I messed something up when setting up the OpenWrt build environment and made the wrong version! I'm going to delete everything and just start from scratch. If I can even get 23.05 working, that would be good enough for me!

15

So, I tried this again... A FIT image of 23.05.6 works!

I started from scratch and I also made it much simpler for me this time by just modifying the existing entry instead of making a new one...

target/linux/ipq806x/image/generic.mk:

define Device/arris_tr4400-v2
	$(call Device/FitImage)
	$(call Device/UbiFit)
	DEVICE_VENDOR := Arris
	DEVICE_MODEL := TR4400
	DEVICE_VARIANT := v2
	SOC := qcom-ipq8065
	BLOCKSIZE := 128k
	PAGESIZE := 2048
	DEVICE_PACKAGES := ath10k-firmware-qca9984-ct ath10k-firmware-qca99x0-ct
	KERNEL_IN_UBI := 1
endef
TARGET_DEVICES += arris_tr4400-v2

I also did that 1 GB memory mod...

target/linux/ipq806x/files-5.15/arch/arm/boot/dts/qcom-ipq8065-tr4400-v2.dts:

	memory@0 {
		reg = <0x42000000 0x3e000000>;	// 1 GB
		device_type = "memory";
	};

Finally working after sitting on it for months. :smile:

16

In case anyone else wants to solder the complete level shifter, the following components worked for me: 2x BSS138 (SOT-23), 4x 10K (0201) resistors, 4x 100 ohm (0201) resistors.

serial
serial885×865 154 KB

My soldering was not pretty, but it does work. :slight_smile:

2 Likes
17

it’s beautiful :slight_smile: