Dynalink DL-WRX36 Askey RT5010W IPQ8072A technical discussion

Yes, there is a kernel driver with a sysfs interface.
OEM firmware is doing something like this to make the switch (from slot 1 to slot 2):

echo 1 > /proc/boot_info/rootfs/primaryboot
#
mtdname="0:BOOTCONFIG"
mtdpart=$(grep "\"${mtdname}\"" /proc/mtd | awk -F: '{print $1}')
cat /proc/boot_info/getbinary_bootconfig > /tmp/bootconfig.bin
pgsz=$(cat /sys/class/mtd/${mtdpart}/writesize)
dd if=/tmp/bootconfig.bin bs=${pgsz} conv=sync | mtd -e "/dev/${mtdpart}" write - "/dev/${mtdpart}"

That getbinary_bootconfig file is generated by the kernel when data, like primaryboot, changes.

That I can do to the inactive slot.
The current slot can be checked with:

# cat /proc/boot_info/rootfs/primaryboot
  - 0: Current slot is 1 (install on 2)
  - 1: Current slot is 2 (install on 1)

That is really the interesting question, we can attempt to mimic what that kernel driver is doing on OpenWrt.
It could help to simplify a few things, but as it's kind of a binary interface I'm not sure that things like luci-app-advanced-reboot would work, which I think it's a nice-to-have if we do something with U-boot env variables.

Hi, what is the best way to flash this dynalink?!?

I have been working on implementing dual-partition support for this device and I have some proof of concept.
@robimarko, @clayface, any feedback is appreciated.

A snippet with sysupgrade's platform.sh and bootcount is at:

It implements an "OpenWrt u-boot env" with 2 boot slots + recovery by loading initramfs image from USB.
Steps are:

  1. Attempt to boot from current slot
  2. If it fails, attempt to boot from other slot
  3. If it fails, attempt to boot an initramfs image from USB

If the required env variables are not detected during sysupgrade, they are created.
Current OEM slot is detected and variables set accordingly.
We might be able to simplify this detection by assuming certain things.

Sysupgrade works but there is an issue if the alternate slot contains the OEM firmware.
UBI from OEM firmware contains a volume called ubi_rootfs which is not removed during sysyupgrade as is assigned /dev/ubiblock0_1 on next boot (from devicetree).
It can be avoided by doing a ubiformat on both mtd18 and mtd20 while installing.
This could be automated if we find a way to remove the volume during sysupgrade.

I am gonna be honest and say that my interest in this is rather low currently, I have plenty of other things going on and its getting crazy with the holidays.

1 Like

No problem at all. This is all voluntary work :slight_smile:

I hope you have some good holidays.

Do you think you will be able to provide feedback at some point?
I was hoping to arrive at a good solution before support for this device is officially merged.

Can't really promise anything, but regarding the comment in bootcount, you can actually check if what you are running is initramfs, Mikrotik devices use that extensively

thanks a lot...
but after the command "bootm"
how can i connect by SCP.... i get no Ip addr... and 192.168.1.1 will not work

Make sure you do all the previous steps to bootm correctly (in Robi instructions).

In case you need further info how to tftpboot a initramfs image:

  • In PC:
    Connect computer LAN cable to router LAN (nothing else connected).
    Set computer IP to 192.168.1.10
    Copy <initramfs_filename> to tftpserver folder and run tftpserver.
    Allow tftpserver in computer firewall.

  • In u-boot:
    setenv serverip 192.168.1.10
    setenv ipaddr 192.168.1.1
    tftpboot <initramfs_filename>
    (Note: <initramfs_filename> is openwrt-ipq807x-generic-dynalink_dl-wrx36-initramfs-fit-uImage.itb)
    bootm

Alternativelly, you can copy the initramfs image to a FAT-formated (only tested single partition) flash drive and boot from it.
This would be the command from U-Boot (filename must match the one copied to flashdrive):

usb start && fatload usb 0:1 0x44000000 openwrt-ipq807x-generic-dynalink_dl-wrx36-initramfs-uImage.itb && bootm 0x44000000

That would get you to an OpenWrt image run from RAM.
Please note that you will still need to properly set U-Boot env variables from U-Boot or OpenWrt with fw_setenv.
Also, you need to write the OpenWrt image to (nand) flash.

I'm using the USB boot as a recovery option on my multi-partition proposal.

After flash to openwrt from robi's repo, did you got a way to restore original factory firmware?

that's how far I've come...
but I cannot connect via SCP

I managed to do go back to OEM firmware once while testing a few things.
Here are the instructions that worked for me.

IMPORTANT: Follow this at your own risk as the process bellow has been tested only on my device.

Requisites:

  • OEM firmware image (OTA). Let's call it "oem_firmware.bin" from now on. I think there is a link to one on this thread

From a PC:
1: Identify position of rootfs ubi from OEM firmware image:

# dumpimage -l oem_firmware.bin

The one I tried was on position 0.
Image contained "askey-rootfs" (image 0), "wififw_v1-rt5010w" (image 1), "and wififw_v2-rt5010w" (image 2)

2: Extract rootfs ubi from OEM firmware image using the position obtained on previous step (used 0 as example here):

# dumpimage -T flat_dt -p 0 -o dynalink-dl-wrx36.oem.ubi oem_firmware.bin

Now, boot OpenWrt from initramfs.
This is required as both slots are going to be flashed.

From OpenWrt running from initramfs:

1: Transfer the OEM rootfs ubi

2: Flash OEM rootfs ubi to both slots

# ubiformat /dev/mtd18 -y -f dynalink-dl-wrx36.oem.ubi
# ubiformat /dev/mtd20 -y -f dynalink-dl-wrx36.oem.ubi

Only the active OEM slot is actually required, but flash it to both of them to simplify the process

3: Restore OEM boot command

# fw_setenv bootcmd 'bootipq'

4: Reboot device:

# reboot

After this the device should reboot into OEM firmware.

4 Likes

If you successfully tftpboot the initramfs image, you should be able to http to luci in 192.168.1.1, there's nothing more to it.
Then luci->system->administration->SSH access, should be enable in LAN (you don't need to change anything here, scp will work with default config).

If you want copy/paste here what's going on during your u-boot tftp initramfs commands, maybe someone can help further.

Stupid question, but are you connected to one of the LAN ports? WAN works for u-boot but not for anything else, when booted.

I've just started the install but run into the same issue. The OpenWrt SNAPSHOT, r0-9594846 initramfs-uImage boots fine but I can't get a connection on any of the lan ports to finish the install. This is what is being shown when I try to connect to different ports:

root@OpenWrt:/# [  198.810314] nss-dp 3a001200.dp4 eth3: PHY Link is down
[  198.810573] br-lan: port 3(eth3) entered disabled state

root@OpenWrt:/# 
root@OpenWrt:/# [  265.370442] nss-dp 3a001600.dp2 eth1: PHY Link up speed: 1000
[  265.370520] br-lan: port 1(eth1) entered blocking state
[  265.375180] br-lan: port 1(eth1) entered forwarding state
[  309.050318] nss-dp 3a001600.dp2 eth1: PHY Link is down
[  309.050579] br-lan: port 1(eth1) entered disabled state
[  397.450354] nss-dp 3a001600.dp2 eth1: PHY Link up speed: 1000
[  397.450429] br-lan: port 1(eth1) entered blocking state
[  397.455090] br-lan: port 1(eth1) entered forwarding state
[  440.090310] nss-dp 3a001600.dp2 eth1: PHY Link is down
[  440.090809] br-lan: port 1(eth1) entered disabled state

root@OpenWrt:/# [  473.370371] nss-dp 3a001600.dp2 eth1: PHY Link up speed: 10
[  473.370447] br-lan: port 1(eth1) entered blocking state
[  473.374760] br-lan: port 1(eth1) entered forwarding state
[  474.410151] nss-dp 3a001600.dp2 eth1: PHY Link is down
[  474.410641] br-lan: port 1(eth1) entered disabled state
[  476.490427] nss-dp 3a001600.dp2 eth1: PHY Link up speed: 1000
[  476.490494] br-lan: port 1(eth1) entered blocking state
[  476.495159] br-lan: port 1(eth1) entered forwarding state

root@OpenWrt:/# [  520.170267] nss-dp 3a001600.dp2 eth1: PHY Link is down
[  520.170524] br-lan: port 1(eth1) entered disabled state

Full log incase it helps with troubleshooting / figuring out what causes the issue

IPQ807x# bootm
## Loading kernel from FIT Image at 44000000 ...
   Using 'config@rt5010w-d350-rev0' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM64 OpenWrt Linux-5.15.84
     Type:         Kernel Image
     Compression:  gzip compressed
     Data Start:   0x440000e8
     Data Size:    12008931 Bytes = 11.5 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x41000000
     Entry Point:  0x41000000
     Hash algo:    crc32
     Hash value:   a44ae2e9
     Hash algo:    sha1
     Hash value:   a22c340c459cc31708d47c96bc08d3a1d5ca2957
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 44000000 ...
   Using 'config@rt5010w-d350-rev0' configuration
   Trying 'fdt-1' fdt subimage
     Description:  ARM64 OpenWrt dynalink_dl-wrx36 device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x44b74010
     Data Size:    39553 Bytes = 38.6 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   4375aabd
     Hash algo:    sha1
     Hash value:   a485df48a81b2a79f797309c3151b42ad20c4421
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x44b74010
   Uncompressing Kernel Image ... OK
   Loading Device Tree to 4a3f3000, end 4a3ffa80 ... OK
Could not find PCI in device tree
Using machid 0x8850105 from environment

Starting kernel ...

Jumping to AARCH64 kernel via monitor
[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[    0.000000] Linux version 5.15.84 (robimarko@fedora) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 11.3.0 r0-9594846) 11.3.0, GNU ld (GNU Binutils) 2.37) #0 SMP Wed Dec 21 21:05:46 2022
[    0.000000] Machine model: Dynalink DL-WRX36
[    0.000000] Zone ranges:
[    0.000000]   DMA      [mem 0x0000000040000000-0x000000007fffffff]
[    0.000000]   DMA32    empty
[    0.000000]   Normal   empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000040000000-0x0000000040ffffff]
[    0.000000]   node   0: [mem 0x0000000041000000-0x000000004a3fffff]
[    0.000000]   node   0: [mem 0x000000004a400000-0x00000000510fffff]
[    0.000000]   node   0: [mem 0x0000000051100000-0x000000007fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000007fffffff]
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv1.0 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.
[    0.000000] psci: SMC Calling Convention v1.0
[    0.000000] percpu: Embedded 17 pages/cpu s30360 r8192 d31080 u69632
[    0.000000] Detected VIPT I-cache on CPU0
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 258048
[    0.000000] Kernel command line:  root=/dev/ubiblock0_1
[    0.000000] Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes, linear)
[    0.000000] Inode-cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 881236K/1048576K available (7424K kernel code, 848K rwdata, 2036K rodata, 8320K init, 273K bss, 167340K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000]  Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[    0.000000] Root IRQ handler: gic_handle_irq
[    0.000000] GICv2m: range[mem 0x0b00a000-0x0b00affc], SPI[448:479]
[    0.000000] arch_timer: cp15 and mmio timer(s) running at 19.20MHz (virt/virt).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x46d987e47, max_idle_ns: 440795202767 ns
[    0.000000] sched_clock: 56 bits at 19MHz, resolution 52ns, wraps every 4398046511078ns
[    0.000118] Calibrating delay loop (skipped), value calculated using timer frequency.. 38.40 BogoMIPS (lpj=192000)
[    0.000134] pid_max: default: 32768 minimum: 301
[    0.000287] Mount-cache hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.000304] Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.001890] rcu: Hierarchical SRCU implementation.
[    0.002061] dyndbg: Ignore empty _ddebug table in a CONFIG_DYNAMIC_DEBUG_CORE build
[    0.002567] smp: Bringing up secondary CPUs ...
[    0.003157] Detected VIPT I-cache on CPU1
[    0.003219] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
[    0.003834] Detected VIPT I-cache on CPU2
[    0.003874] CPU2: Booted secondary processor 0x0000000002 [0x410fd034]
[    0.004454] Detected VIPT I-cache on CPU3
[    0.004493] CPU3: Booted secondary processor 0x0000000003 [0x410fd034]
[    0.004560] smp: Brought up 1 node, 4 CPUs
[    0.004586] SMP: Total of 4 processors activated.
[    0.004594] CPU features: detected: 32-bit EL0 Support
[    0.004601] CPU features: detected: CRC32 instructions
[    0.004649] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[    0.004660] CPU: All CPU(s) started at EL1
[    0.004681] alternatives: patching kernel code
[    0.012001] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.012036] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[    0.012173] pinctrl core: initialized pinctrl subsystem
[    0.013197] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.013630] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations
[    0.013675] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[    0.013713] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[    0.014036] thermal_sys: Registered thermal governor 'step_wise'
[    0.015486] cpuidle: using governor menu
[    0.015676] ASID allocator initialised with 65536 entries
[    0.069657] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 4
[    0.078087] SCSI subsystem initialized
[    0.078264] usbcore: registered new interface driver usbfs
[    0.078305] usbcore: registered new interface driver hub
[    0.078341] usbcore: registered new device driver usb
[    0.078765] qcom_scm: convention: smc arm 64
[    0.079875] clocksource: Switched to clocksource arch_sys_counter
[    0.080578] NET: Registered PF_INET protocol family
[    0.080714] IP idents hash table entries: 16384 (order: 5, 131072 bytes, linear)
[    0.081518] tcp_listen_portaddr_hash hash table entries: 512 (order: 1, 8192 bytes, linear)
[    0.081549] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.081565] TCP established hash table entries: 8192 (order: 4, 65536 bytes, linear)
[    0.081652] TCP bind hash table entries: 8192 (order: 5, 131072 bytes, linear)
[    0.081802] TCP: Hash tables configured (established 8192 bind 8192)
[    0.081888] UDP hash table entries: 512 (order: 2, 16384 bytes, linear)
[    0.081928] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes, linear)
[    0.082093] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.082124] PCI: CLS 0 bytes, default 64
[    0.101717] workingset: timestamp_bits=46 max_order=18 bucket_order=0
[    0.105518] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.105540] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.107448] qcom-qmp-phy 78000.phy: supply vdda-phy not found, using dummy regulator
[    0.107598] qcom-qmp-phy 78000.phy: supply vdda-pll not found, using dummy regulator
[    0.108696] qcom-qmp-phy 78000.phy: Registered Qcom-QMP phy
[    0.109480] qcom-qusb2-phy 79000.phy: supply vdda-pll not found, using dummy regulator
[    0.109609] qcom-qusb2-phy 79000.phy: supply vdda-phy-dpdm not found, using dummy regulator
[    0.109761] qcom-qusb2-phy 79000.phy: Registered Qcom-QUSB2 phy
[    0.113970] bam-dma-engine 704000.dma-controller: num-channels unspecified in dt
[    0.113997] bam-dma-engine 704000.dma-controller: num-ees unspecified in dt
[    0.117573] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    0.118115] msm_serial 78b3000.serial: msm_serial: detected port #0
[    0.118154] msm_serial 78b3000.serial: uartclk = 3686400
[    0.118200] 78b3000.serial: ttyMSM0 at MMIO 0x78b3000 (irq = 22, base_baud = 230400) is a MSM
[    0.118231] msm_serial: console setup on port #0
[    0.741099] printk: console [ttyMSM0] enabled
[    0.746214] msm_serial: driver initialized
[    0.753919] loop: module loaded
[    0.755229] nand: device found, Manufacturer ID: 0x2c, Chip ID: 0xaa
[    0.757055] nand: Micron MT29F2G08ABBGAH4
[    0.763854] nand: 256 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 128
[    0.776197] spmi spmi-0: PMIC arbiter version v2 (0x20010000)
[    0.779103] s1: supplied by regulator-dummy
[    0.781124] s2: supplied by regulator-dummy
[    0.785073] vdd_s3: supplied by regulator-dummy
[    0.789378] vdd_s4: supplied by regulator-dummy
[    0.793933] s5: supplied by regulator-dummy
[    0.798276] l1: supplied by regulator-dummy
[    0.802474] l2: supplied by regulator-dummy
[    0.806603] l3: supplied by regulator-dummy
[    0.810804] l4: supplied by regulator-dummy
[    0.814955] l5: supplied by regulator-dummy
[    0.819106] l6: supplied by regulator-dummy
[    0.823289] l7: supplied by regulator-dummy
[    0.827460] l8: supplied by regulator-dummy
[    0.831625] l9: supplied by regulator-dummy
[    0.835880] l11: supplied by regulator-dummy
[    0.839979] l12: supplied by regulator-dummy
[    0.844457] l13: supplied by regulator-dummy
[    0.896378] i2c_dev: i2c /dev entries driver
[    0.900239] sdhci: Secure Digital Host Controller Interface driver
[    0.900284] sdhci: Copyright(c) Pierre Ossman
[    0.905706] sdhci-pltfm: SDHCI platform and OF driver helper
[    0.913417] remoteproc remoteproc0: releasing cd00000.q6v5_wcss
[    0.917629] NET: Registered PF_INET6 protocol family
[    0.922394] Segment Routing with IPv6
[    0.926746] In-situ OAM (IOAM) with IPv6
[    0.930346] NET: Registered PF_PACKET protocol family
[    0.934307] 8021q: 802.1Q VLAN Support v1.8
[    0.954218] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 4
[    0.954510] cpr4_ipq807x_apss_read_fuse_data: apc_corner: speed bin = 0
[    0.960437] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR fusing revision = 1
[    0.966943] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR misc fuse value = 0
[    0.974614] cpr4_ipq807x_apss_read_fuse_data: apc_corner: Voltage boost fuse config = 0 boost = disable
[    0.982118] cpr3_mem_acc_init: apc: not using memory accelerator regulator
[    0.991254] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused      SVS: open-loop= 704000 uV
[    0.998195] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused      NOM: open-loop= 832000 uV
[    1.008192] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused    TURBO: open-loop= 896000 uV
[    1.017994] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused   STURBO: open-loop= 992000 uV
[    1.027851] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused      SVS: quot[ 7]= 640, quot_offset[ 7]=   0
[    1.037616] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused      NOM: quot[ 7]= 876, quot_offset[ 7]= 235
[    1.048466] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused    TURBO: quot[ 7]= 981, quot_offset[ 7]= 105
[    1.059401] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused   STURBO: quot[ 7]=1147, quot_offset[ 7]= 165
[    1.070481] cpr3_regulator_init_ctrl: apc: Default CPR mode = closed-loop
[    1.072692] nand: device found, Manufacturer ID: 0x2c, Chip ID: 0xaa
[    1.088033] nand: Micron MT29F2G08ABBGAH4
[    1.094460] nand: 256 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 128
[    1.105325] 25 qcomsmem partitions found on MTD device qcom_nand.0
[    1.105831] Creating 25 MTD partitions on "qcom_nand.0":
[    1.112096] 0x000000000000-0x000000100000 : "0:sbl1"
[    1.118869] 0x000000100000-0x000000200000 : "0:mibib"
[    1.123711] 0x000000200000-0x000000280000 : "0:bootconfig"
[    1.128224] 0x000000280000-0x000000300000 : "0:bootconfig1"
[    1.133690] 0x000000300000-0x000000600000 : "0:qsee"
[    1.141132] 0x000000600000-0x000000900000 : "0:qsee_1"
[    1.146328] 0x000000900000-0x000000980000 : "0:devcfg"
[    1.149244] 0x000000980000-0x000000a00000 : "0:devcfg_1"
[    1.154393] 0x000000a00000-0x000000a80000 : "0:apdp"
[    1.159833] 0x000000a80000-0x000000b00000 : "0:apdp_1"
[    1.164842] 0x000000b00000-0x000000b80000 : "0:rpm"
[    1.169729] 0x000000b80000-0x000000c00000 : "0:rpm_1"
[    1.174561] 0x000000c00000-0x000000c80000 : "0:cdt"
[    1.179718] 0x000000c80000-0x000000d00000 : "0:cdt_1"
[    1.184437] 0x000000d00000-0x000000d80000 : "0:appsblenv"
[    1.189614] 0x000000d80000-0x000000e80000 : "0:appsbl"
[    1.195460] 0x000000e80000-0x000000f80000 : "0:appsbl_1"
[    1.200467] 0x000000f80000-0x000001000000 : "0:art"
[    1.205498] 0x000007a00000-0x00000db00000 : "rootfs"
[    1.287943] mtd: setting mtd18 (rootfs) as root device
[    1.288234] mtdsplit: no squashfs found in "rootfs"
[    1.292029] 0x000007100000-0x000007a00000 : "0:wififw"
[    1.304507] 0x000001000000-0x000007100000 : "rootfs_1"
[    1.382772] 0x00000db00000-0x00000e400000 : "0:wififw_1"
[    1.390526] 0x00000e400000-0x00000fa00000 : "ubifs"
[    1.408766] 0x00000fa00000-0x00000fa80000 : "0:ethphyfw"
[    1.409605] 0x00000fa80000-0x00000fd00000 : "certificate"
[    1.423774] cpufreq: cpufreq_online: CPU0: Running at unlisted initial frequency: 19200 KHz, changing to: 1017600 KHz
[    �[    1.437588] Freeing unused kernel memory: 8320K
[    1.490070] Run /init as init process
[    1.654213] init: Console is alive
[    1.654342] init: - watchdog -
[    1.661017] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    1.678139] ssdk_switch_device_num_init[1335]:INFO:ess-switch dts node number: 1
[    1.678250] ssdk_dt_get_switch_node[1124]:INFO:ess-switch DT exist!
[    1.684665] ssdk_dt_parse_access_mode[999]:INFO:switch_access_mode: local bus
[    1.690609] ssdk_dt_parse_access_mode[1012]:INFO:switchreg_base_addr: 0x3a000000
[    1.697893] ssdk_dt_parse_access_mode[1013]:INFO:switchreg_size: 0x1000000
[    1.705365] ssdk_dt_parse_mac_mode[327]:INFO:mac mode = 0xb
[    1.712051] ssdk_dt_parse_mac_mode[336]:INFO:mac mode1 = 0xff
[    1.717508] ssdk_dt_parse_mac_mode[345]:INFO:mac mode2 = 0xc
[    1.723435] ssdk_dt_parse_phy_info[716]:INFO:[PORT 6] port_mac_sel = QGMAC_PORT
[    1.729206] ssdk_dt_parse_uniphy[364]:INFO:ess-uniphy DT exist!
[    1.736299] ssdk_dt_parse_intf_mac[942]:INFO:dp1 MAC a4:97:33:df:a0:72
[    1.742118] ssdk_dt_parse_intf_mac[942]:INFO:dp2 MAC a4:97:33:df:a0:73
[    1.748709] ssdk_dt_parse_intf_mac[942]:INFO:dp3 MAC a4:97:33:df:a0:73
[    1.755232] ssdk_dt_parse_intf_mac[942]:INFO:dp4 MAC a4:97:33:df:a0:73
[    1.761735] ssdk_dt_parse_intf_mac[942]:INFO:dp5 MAC a4:97:33:df:a0:73
[    1.768260] ssdk_plat_init[1692]:INFO:ssdk_plat_init start
[    1.891825] ssdk_gcc_clock_init[1275]:INFO:SSDK gcc clock init successfully!
[    1.893104] malibu_phy_api_ops_init[2846]:INFO:qca probe malibu phy driver succeeded!
[    1.901941] hsl_phy_phydev_get[773]:ERROR:phy_addr 4 phydev is NULL
[    1.906745] qca808x_phy_api_ops_init[2566]:INFO:qca probe qca808x phy driver succeeded!
[    1.913048] regi_init[3953]:INFO:Initializing HPPE!!
[    2.149893] ssdk_ppe_reset_init[1535]:INFO:ppe reset successfully!
[    2.153494] qca_hppe_portctrl_hw_init[126]:INFO:Hawkeye PPE port initializing
[    2.156217] hsl_phy_phydev_get[773]:ERROR:phy_addr 4 phydev is NULL
[    2.162576] hsl_phy_phydev_get[773]:ERROR:phy_addr 4 phydev is NULL
[    2.855968] ssdk_switch_register[2017]:INFO:Chip version 0x1500
[    2.855999] qca_link_polling_select[1487]:INFO:link-polling-required node does not exist
[    2.860700] ssdk_switch_register[2043]:INFO:polling is selected
[    2.869023] regi_init[3957]:INFO:Initializing HPPE Done!!
[    2.874750] ssdk_genl_init[211]:INFO:ssdk genl family register success.
[    2.880231] regi_init[4020]:INFO:qca-ssdk module init succeeded!
[    2.888882] EDMA ver 1 hw init
[    2.893121] EDMA HW Reset completed succesfully
[    2.895783] Num rings - TxDesc:1 (23-23) TxCmpl:1 (7-7)
[    2.900186] RxDesc:1 (15-15) RxFill:1 (7-7)
[    3.106472] QCA808X ethernet 90000.mdio-1:1c: attached PHY driver (mii_bus:phy_addr=90000.mdio-1:1c, irq=POLL)
[    3.107017] nss-dp 3a007000.dp1 eth0: Registered netdev eth0(qcom-id:6)
[    3.115621] Generic PHY 90000.mdio-1:03: attached PHY driver (mii_bus:phy_addr=90000.mdio-1:03, irq=POLL)
[    3.122340] nss-dp 3a001600.dp2 eth1: Registered netdev eth1(qcom-id:4)
[    3.131874] Generic PHY 90000.mdio-1:02: attached PHY driver (mii_bus:phy_addr=90000.mdio-1:02, irq=POLL)
[    3.138483] nss-dp 3a001400.dp3 eth2: Registered netdev eth2(qcom-id:3)
[    3.148018] Generic PHY 90000.mdio-1:01: attached PHY driver (mii_bus:phy_addr=90000.mdio-1:01, irq=POLL)
[    3.154636] nss-dp 3a001200.dp4 eth3: Registered netdev eth3(qcom-id:2)
[    3.164127] Generic PHY 90000.mdio-1:00: attached PHY driver (mii_bus:phy_addr=90000.mdio-1:00, irq=POLL)
[    3.170770] nss-dp 3a001000.dp5 eth4: Registered netdev eth4(qcom-id:1)
[    3.180151] **********************************************************
[    3.186450] * NSS Data Plane driver
[    3.193049] **********************************************************
[    3.205151] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    3.205204] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 1
[    3.209676] xhci-hcd xhci-hcd.1.auto: hcc params 0x0220fe65 hci version 0x110 quirks 0x0000000002010010
[    3.217182] xhci-hcd xhci-hcd.1.auto: irq 89, io mem 0x08a00000
[    3.226568] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    3.232377] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 2
[    3.237928] xhci-hcd xhci-hcd.1.auto: Host supports USB 3.0 SuperSpeed
[    3.246111] hub 1-0:1.0: USB hub found
[    3.252156] hub 1-0:1.0: 1 port detected
[    3.256054] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[    3.260255] hub 2-0:1.0: USB hub found
[    3.267969] hub 2-0:1.0: 1 port detected
[    3.272822] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    3.280214] init: - preinit -
[    3.333854] random: jshn: uninitialized urandom read (4 bytes read)
[    3.349117] random: jshn: uninitialized urandom read (4 bytes read)
[    3.359388] random: jshn: uninitialized urandom read (4 bytes read)
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    5.432169] procd: - early -
[    5.432246] procd: - watchdog -
[    5.955931] procd: - watchdog -
[    5.956164] procd: - ubus -
[    5.960458] random: ubusd: uninitialized urandom read (4 bytes read)
[    6.007729] random: ubusd: uninitialized urandom read (4 bytes read)
[    6.007889] random: ubusd: uninitialized urandom read (4 bytes read)
[    6.014200] procd: - init -
Please press Enter to activate this console.
[    6.098427] urngd: v1.0.2 started.
[    6.112479] random: crng init done
[    6.112511] random: 26 urandom warning(s) missed due to ratelimiting
[    6.114755] kmodloader: loading kernel modules from /etc/modules.d/*
[    6.145592] Loading modules backported from Linux version v6.1-rc8-0-g76dcd734eca2
[    6.145630] Backport generated by backports.git v5.15.81-1-41-g02e352527db5
[    6.156132] NET: Registered PF_QIPCRTR protocol family
[    6.179035] PPP generic driver version 2.4.2
[    6.179601] NET: Registered PF_PPPOX protocol family
[    6.187483] ath11k c000000.wifi: ipq8074 hw2.0
[    6.187515] ath11k c000000.wifi: FW memory mode: 0
[    6.191785] remoteproc remoteproc0: powering up cd00000.q6v5_wcss
[    6.196407] remoteproc remoteproc0: Booting fw image IPQ8074/q6_fw.mdt, size 668
[    6.554860] remoteproc remoteproc0: remote processor cd00000.q6v5_wcss is now up
[    6.556433] ath11k c000000.wifi: qmi ignore invalid mem req type 3
[    6.561944] ath11k c000000.wifi: chip_id 0x0 chip_family 0x0 board_id 0xff soc_id 0xffffffff
[    6.567329] ath11k c000000.wifi: fw_version 0x250a04a5 fw_build_timestamp 2021-12-20 07:09 fw_build_id WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
[    6.576338] kmodloader: done loading kernel modules from /etc/modules.d/*
[   10.555154] br-lan: port 1(eth1) entered blocking state
[   10.555196] br-lan: port 1(eth1) entered disabled state
[   10.559423] device eth1 entered promiscuous mode
[   10.572321] br-lan: port 2(eth2) entered blocking state
[   10.572370] br-lan: port 2(eth2) entered disabled state
[   10.576568] device eth2 entered promiscuous mode
[   10.584303] br-lan: port 3(eth3) entered blocking state
[   10.586440] br-lan: port 3(eth3) entered disabled state
[   10.591686] device eth3 entered promiscuous mode
[   10.599809] br-lan: port 4(eth4) entered blocking state
[   10.601516] br-lan: port 4(eth4) entered disabled state
[   10.606618] device eth4 entered promiscuous mode
[   31.849903] l11: disabling



BusyBox v1.35.0 (2022-12-21 21:05:46 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0-9594846
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# [  155.130366] nss-dp 3a001200.dp4 eth3: PHY Link up speed: 1000
[  155.130448] br-lan: port 3(eth3) entered blocking state
[  155.135105] br-lan: port 3(eth3) entered forwarding state
[  155.140441] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready

root@OpenWrt:/# 
root@OpenWrt:/# 
root@OpenWrt:/# 
root@OpenWrt:/# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00100000 00020000 "0:sbl1"
mtd1: 00100000 00020000 "0:mibib"
mtd2: 00080000 00020000 "0:bootconfig"
mtd3: 00080000 00020000 "0:bootconfig1"
mtd4: 00300000 00020000 "0:qsee"
mtd5: 00300000 00020000 "0:qsee_1"
mtd6: 00080000 00020000 "0:devcfg"
mtd7: 00080000 00020000 "0:devcfg_1"
mtd8: 00080000 00020000 "0:apdp"
mtd9: 00080000 00020000 "0:apdp_1"
mtd10: 00080000 00020000 "0:rpm"
mtd11: 00080000 00020000 "0:rpm_1"
mtd12: 00080000 00020000 "0:cdt"
mtd13: 00080000 00020000 "0:cdt_1"
mtd14: 00080000 00020000 "0:appsblenv"
mtd15: 00100000 00020000 "0:appsbl"
mtd16: 00100000 00020000 "0:appsbl_1"
mtd17: 00080000 00020000 "0:art"
mtd18: 06100000 00020000 "rootfs"
mtd19: 00900000 00020000 "0:wififw"
mtd20: 06100000 00020000 "rootfs_1"
mtd21: 00900000 00020000 "0:wififw_1"
mtd22: 01600000 00020000 "ubifs"
mtd23: 00080000 00020000 "0:ethphyfw"
mtd24: 00280000 00020000 "certificate"
root@OpenWrt:/# [  198.810314] nss-dp 3a001200.dp4 eth3: PHY Link is down
[  198.810573] br-lan: port 3(eth3) entered disabled state

root@OpenWrt:/# 
root@OpenWrt:/# [  265.370442] nss-dp 3a001600.dp2 eth1: PHY Link up speed: 1000
[  265.370520] br-lan: port 1(eth1) entered blocking state
[  265.375180] br-lan: port 1(eth1) entered forwarding state
[  309.050318] nss-dp 3a001600.dp2 eth1: PHY Link is down
[  309.050579] br-lan: port 1(eth1) entered disabled state
[  397.450354] nss-dp 3a001600.dp2 eth1: PHY Link up speed: 1000
[  397.450429] br-lan: port 1(eth1) entered blocking state
[  397.455090] br-lan: port 1(eth1) entered forwarding state
[  440.090310] nss-dp 3a001600.dp2 eth1: PHY Link is down
[  440.090809] br-lan: port 1(eth1) entered disabled state

root@OpenWrt:/# [  473.370371] nss-dp 3a001600.dp2 eth1: PHY Link up speed: 10
[  473.370447] br-lan: port 1(eth1) entered blocking state
[  473.374760] br-lan: port 1(eth1) entered forwarding state
[  474.410151] nss-dp 3a001600.dp2 eth1: PHY Link is down
[  474.410641] br-lan: port 1(eth1) entered disabled state
[  476.490427] nss-dp 3a001600.dp2 eth1: PHY Link up speed: 1000
[  476.490494] br-lan: port 1(eth1) entered blocking state
[  476.495159] br-lan: port 1(eth1) entered forwarding state

root@OpenWrt:/# [  520.170267] nss-dp 3a001600.dp2 eth1: PHY Link is down
[  520.170524] br-lan: port 1(eth1) entered disabled state

OK it does seem to work with the following file:

https://github.com/robimarko/openwrt/releases/download/ipq807x-2022-08-18/openwrt-ipq807x-generic-dynalink_dl-wrx36-initramfs-fit-uImage.itb

Sorry for the confusion.

hi, i have the same issue...
i will test this old release!
tanks

Can you show me the output of cat /sys/kernel/debug/clk/clk_summary on the version that is not working for you