Help with Inteno XG6846

Do you mean the Boot Address?
I can´t change the Boot address, it´s still 0xb8000000 even if I load your image again.

I don´t know if this helps.
If I have Boot image (0=latest, 1=previous) : = 0

Booting from latest image (0xb8010000) ...
Code Address: 0x80010000, Entry Address: 0x80286840
Decompression OK!
Entry at 0x80286840

and Boot image (0=latest, 1=previous) : = 1

Booting from previous image (0xb8800000) ...
Code Address: 0x80010000, Entry Address: 0x80286760
Decompression OK!
Entry at 0x80286760

I get the same result even if I load your image in both latest and previous Boot image.

I have tested on my three devices and all have Boot Address: 0xb8000000

How typical. I installed my device with the initramfs method before, then I naively flashed the CFE image and thought that was what I was running, but maybe it is actually just my old initramfs-installed kernel that I'm seeing :frowning:

I updated the web page with the two-stage initramfs method, can you see if this works for you?

TFTPed your initramfs and sysupgraded but the device rebooted to Inteno FW.

CFE> r 192.168.1.100:openwrt-bmips-bcm6328-inteno_xg6846-initramfs.elf
0x81000000/5184298 Entry at 0x81000000
Closing network.
Disabling Switch ports.
Flushing Receive Buffers...
0 buffers found.
Closing DMA Channels.
Starting program at 0x81000000


OpenWrt kernel loader for BMIPS
Copyright (C) 2011 Gabor Juhos <juhosg@openwrt.org>
Copyright (C) 2014 Jonas Gorski <jogo@openwrt.org>
Copyright (C) 2020 Alvaro Fernandez Rojas <noltari@gmail.com>
Decompressing kernel... done!
blasting from 0x80010000 to 0x013ec2cf (0x80010000 - 0x813fc2d0)
Starting kernel at 80010000...

[    0.000000] Linux version 6.1.52 (linus@lino) (mips-openwrt-linux-musl-gcc (OpenWrt GCC 12.3.0 r23929+7-02b4dc93b61a) 12.3.0, GNU ld (GNU Binutils) 2.40.0) #0 SMP Sun Sep 17 22:01:19 2023
[    0.000000] CPU0 revision is: 0002a075 (Broadcom BMIPS4350)
[    0.000000] MIPS: machine is Inteno XG6846
[    0.000000] 64MB of RAM installed
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Reserving 0KB of memory at 4194303KB for kdump
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 16 bytes.
[    0.000000] Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Movable zone start for each node
.........

BusyBox v1.36.1 (2023-09-13 22:03:37 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r23956+9-98bad1b4fc0d
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# ls
bin      etc      lib      overlay  rom      sbin     tmp      var
dev      init     mnt      proc     root     sys      usr      www
root@OpenWrt:/# cd var
root@OpenWrt:/var# ls
TZ             etc            log            shm
board.json     hosts          resolv.conf    state
dhcp.leases    lib            resolv.conf.d  sysinfo
dnsmasq.d      lock           run            tmp
root@OpenWrt:/var# ls
TZ
board.json
dhcp.leases
dnsmasq.d
etc
hosts
lib
lock
log
openwrt-bmips-bcm6328-inteno_xg6846-squashfs-sysupgrade.bin
resolv.conf
resolv.conf.d
run
shm
state
sysinfo
tmp
root@OpenWrt:/var# sysupgrade openwrt-bmips-bcm6328-inteno_xg6846-squashfs-sysup
grade.bin
Cannot save config while running from ramdisk.
Thu Jan  1 00:03:57 UTC 1970 upgrade: Commencing upgrade. Closing all shell sessions.
Watchdog handover: fd=3
- watchdog -
Watchdog does not have CARDRESET support
Thu Jan  1 00:03:58 UTC 1970 upgrade: Sending TERM to remaining processes ...
Thu Jan  1 00:04:02 UTC 1970 upgrade: Sending KILL to remaining processes ...
[  249.189664] stage2 (2193): drop_caches: 3
Thu Jan  1 00:04:09 UTC 1970 upgrade: Switching to ramdisk...
Thu Jan  1 00:04:15 UTC 1970 upgrade: Performing system upgrade...
[  255.821807] do_stage2 (2193): drop_caches: 3
Unlocking firmware ...

Writing from <stdin> to firmware ...
Appending jffs2 data from /tmp/sysupgrade.tgz to firmware..
.File /tmp/sysupgrade.tgz does not exist
Thu Jan  1 00:04:41 UTC 1970 upgrade: Upgrade completed
Thu Jan  1 00:04:42 UTC 1970 upgrade: Rebooting system...
umount: can't unmount /dev: Resource busy
umount: can't unmount /tmp: Resource busy
[  282.795277] reboot: Restarting system
HELO
CPUI
L1CI
DRAM
----
PHYS
ZQDN
300H
PHYE
DINT
LSYN
USYN
MSYN
LMBE
RACE
PASS
----
ZBSS
CODE
DATA
L12F
MAIN


CFE version 1.0.38-114.101 for BCM96328 (32bit,SP,BE)
Build Date: 三 12月  4 18:39:23 CST 2013 (anton@anton-fedora)
Copyright (C) 2000-2011 Broadcom Corporation.

HS Serial flash device: name S25FL128, id 0x0118 size 16384KB
Total Flash size: 16384K with 256 sectors
Flash not used for Auxillary File System
Chip ID: BCM6328B0, MIPS: 320MHz, DDR: 320MHz, Bus: 160MHz
Main Thread: TP0
Memory Test Passed
Total Memory: 67108864 bytes (64MB)
Boot Address: 0xb8000000

Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host (f/h)         : f
Default host run file name        : vmlinux
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 1
Boot image (0=latest, 1=previous) : 0
Board Id (0-10)                   : 96328avng
Number of MAC Addresses (1-32)    : 11
Base MAC Address                  : 00:22:07:c7:98:cd
PSI Size (1-64) KBytes            : 24
Enable Backup PSI [0|1]           : 0
System Log Size (0-256) KBytes    : 0
Auxillary File System Size Percent: 0
Main Thread Number [0|1]          : 0

*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 0
Booting from latest image (0xb8800000) ...
Code Address: 0x80010000, Entry Address: 0x80286720
Decompression OK!
Entry at 0x80286720
Closing network.
Disabling Switch ports.
Flushing Receive Buffers...
0 buffers found.
Closing DMA Channels.
Starting program at 0x80286720
Linux version 2.6.30 (mike_chen@cs1) (gcc version 4.4.2 (Buildroot 2010.02-git) ) #28 Thu Apr 30 17:43:16 CST 2015
HS Serial flash device: name S25FL128, id 0x0118 size 16384KB
96328avng prom init
CPU revision is: 0002a075 (Broadcom4350)
DSL SDRAM reserved: 0x100000
Determined physical RAM map:
 memory: 03f00000 @ 00000000 (usable)
Zone PFN ranges:
  DMA      0x00000000 -> 0x00001000
  Normal   0x00001000 -> 0x00003f00
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00003f00
On node 0 totalpages: 16128
free_area_init_node: node 0, pgdat 80334130, node_mem_map 81000000
  DMA zone: 32 pages used for memmap
  DMA zone: 0 pages reserved
  DMA zone: 4064 pages, LIFO batch:0
  Normal zone: 94 pages used for memmap
  Normal zone: 11938 pages, LIFO batch:1
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16002
Kernel command line: root=31:0 ro noinitrd console=ttyS0,115200
wait instruction: enabled
Primary instruction cache 32kB, VIPT, 4-way, linesize 16 bytes.
Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
NR_IRQS:128
PID hash table entries: 256 (order: 8, 1024 bytes)
console [ttyS0] enabled
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 60304k/64512k available (2545k kernel code, 4188k reserved, 676k data, 120k init, 0k highmem)
Calibrating delay loop... 319.48 BogoMIPS (lpj=159744)
Mount-cache hash table entries: 512
--Kernel Config--
  SMP=0
  PREEMPT=0
  DEBUG_SPINLOCK=0
  DEBUG_MUTEXES=0
Broadcom Logger v0.1 Apr 14 2015 17:25:33
net_namespace: 812 bytes
NET: Registered protocol family 16
Total Flash size: 16384K with 256 sectors
Flash not used for Auxillary File System
registering PCI controller with io_map_base unset
registering PCI controller with io_map_base unset
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
.......

===== Release Version XG6846_4.12ITT01.69 (build timestamp 150430_1743) =====

Then I change Boot image (0=latest, 1=previous) : to 1 and reset.
Now it´s booting on OpenWrt!

HELO
CPUI
L1CI
DRAM
----
PHYS
ZQDN
300H
PHYE
DINT
LSYN
USYN
MSYN
LMBE
RACE
PASS
----
ZBSS
CODE
DATA
L12F
MAIN


CFE version 1.0.38-114.101 for BCM96328 (32bit,SP,BE)
Build Date: 三 12月  4 18:39:23 CST 2013 (anton@anton-fedora)
Copyright (C) 2000-2011 Broadcom Corporation.

HS Serial flash device: name S25FL128, id 0x0118 size 16384KB
Total Flash size: 16384K with 256 sectors
Flash not used for Auxillary File System
Chip ID: BCM6328B0, MIPS: 320MHz, DDR: 320MHz, Bus: 160MHz
Main Thread: TP0
Memory Test Passed
Total Memory: 67108864 bytes (64MB)
Boot Address: 0xb8000000

Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host (f/h)         : f
Default host run file name        : vmlinux
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 1
Boot image (0=latest, 1=previous) : 0
Board Id (0-10)                   : 96328avng
Number of MAC Addresses (1-32)    : 11
Base MAC Address                  : 00:22:07:c7:98:cd
PSI Size (1-64) KBytes            : 24
Enable Backup PSI [0|1]           : 0
System Log Size (0-256) KBytes    : 0
Auxillary File System Size Percent: 0
Main Thread Number [0|1]          : 0

*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 1
web info: Waiting for connection on socket 0.
CFE>
CFE> help
Available commands:

phy                 Read/Write phy registers.
sm                  Set memory or registers.
dm                  Dump memory or registers.
w                   Write the whole image start from beginning of the flash
e                   Erase [n]vram or [a]ll flash except bootrom
r                   Run program from flash image or from host depend on [f/h] flag
p                   Print boot line and board parameter info
c                   Change booline parameters
f                   Write image to the flash
i                   Erase persistent storage data
a                   Change board AFE ID
b                   Change board parameters
reset               Reset the board
force               override chipid check for images.
help                Obtain help for CFE commands

For more information about a command, enter 'help command-name'
*** command status = 0
CFE> c
Board IP address                  :  192.168.1.1:ffffff00
Host IP address                   :  192.168.1.100
Gateway IP address                :
Run from flash/host (f/h)         :  f
Default host run file name        :  vmlinux
Default host flash file name      :  bcm963xx_fs_kernel
Boot delay (0-9 seconds)          :  1
Boot image (0=latest, 1=previous) :  0  1
*** command status = 0
CFE> reset

Resetting board...HELO
CPUI
L1CI
DRAM
----
PHYS
ZQDN
300H
PHYE
DINT
LSYN
USYN
MSYN
LMBE
RACE
PASS
----
ZBSS
CODE
DATA
L12F
MAIN


CFE version 1.0.38-114.101 for BCM96328 (32bit,SP,BE)
Build Date: 三 12月  4 18:39:23 CST 2013 (anton@anton-fedora)
Copyright (C) 2000-2011 Broadcom Corporation.

HS Serial flash device: name S25FL128, id 0x0118 size 16384KB
Total Flash size: 16384K with 256 sectors
Flash not used for Auxillary File System
Chip ID: BCM6328B0, MIPS: 320MHz, DDR: 320MHz, Bus: 160MHz
Main Thread: TP0
Memory Test Passed
Total Memory: 67108864 bytes (64MB)
Boot Address: 0xb8000000

Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host (f/h)         : f
Default host run file name        : vmlinux
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 1
Boot image (0=latest, 1=previous) : 1
Board Id (0-10)                   : 96328avng
Number of MAC Addresses (1-32)    : 11
Base MAC Address                  : 00:22:07:c7:98:cd
PSI Size (1-64) KBytes            : 24
Enable Backup PSI [0|1]           : 0
System Log Size (0-256) KBytes    : 0
Auxillary File System Size Percent: 0
Main Thread Number [0|1]          : 0

*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 0
Booting from previous image (0xb8010000) ...
Code Address: 0x81C00000, Entry Address: 0x81c00000
Decompression OK!
Entry at 0x81c00000
Closing network.
Disabling Switch ports.
Flushing Receive Buffers...
0 buffers found.
Closing DMA Channels.
Starting program at 0x81c00000


U-Boot 2023.10-rc4-00033-gb3841e945829-dirty (Sep 18 2023 - 00:07:32 +0200)Inteno XG6846

CPU:   BCM63281B0
Model: Inteno XG6846
DRAM:  64 MiB
Core:  21 devices, 13 uclasses, devicetree: separate
Loading Environment from <NULL>... OK
In:    serial@10000100
Out:   serial@10000100
Err:   serial@10000100
Net:   No ethernet found.
Boot XG6846 in 1 seconds
SF: Detected s25fl128s with page size 256 Bytes, erase size 64 KiB, total 16 MiB
device 0 offset 0x40000, size 0x500000
SF: 5242880 bytes @ 0x40000 Read: OK
## Booting kernel from Legacy Image at 81000000 ...
   Image Name:   MIPS OpenWrt Linux-6.1.52
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    2957412 Bytes = 2.8 MiB
   Load Address: 80010000
   Entry Point:  80010000
   Verifying Checksum ... OK
Working FDT set to 0
   Uncompressing Kernel Image
[    0.000000] Linux version 6.1.52 (linus@lino) (mips-openwrt-linux-musl-gcc (OpenWrt GCC 12.3.0 r23929+7-02b4dc93b61a) 12.3.0, GNU ld (GNU Binutils) 2.40.0) #0 SMP Sun Sep 17 22:01:19 2023
[    0.000000] CPU0 revision is: 0002a075 (Broadcom BMIPS4350)
[    0.000000] MIPS: machine is Inteno XG6846
[    0.000000] 64MB of RAM installed
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Reserving 0KB of memory at 4194303KB for kdump
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 16 bytes.
[    0.000000] Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] percpu: Embedded 11 pages/cpu s13984 r8192 d22880 u45056
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 16240
[    0.000000] Kernel command line: rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes, linear)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes, linear)
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 53708K/65536K available (7376K kernel code, 633K rwdata, 1612K rodata, 1252K init, 219K bss, 11828K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000] rcu:     RCU restricting CPUs from NR_CPUS=2 to nr_cpu_ids=1.
[    0.000000]  Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=1
[    0.000000] NR_IRQS: 256
[    0.000000] irq_bcm6345_l1: registered BCM6345 L1 intc (IRQs: 64)
[    0.000000] irq_bcm6345_l1:   CPU0 (irq = 2)
[    0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[    0.000000] brcm,bcm6328 detected @ 320 MHz
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 11945377789 ns
[    0.000003] sched_clock: 32 bits at 160MHz, resolution 6ns, wraps every 13421772796ns
[    0.000215] Calibrating delay loop... 319.48 BogoMIPS (lpj=1597440)
[    0.050108] pid_max: default: 32768 minimum: 301
[    0.053111] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.053176] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.062622] cblist_init_generic: Setting adjustable number of callback queues.
[    0.062651] cblist_init_generic: Setting shift to 0 and lim to 1.
[    0.063771] rcu: Hierarchical SRCU implementation.
[    0.063795] rcu:     Max phase no-delay instances is 1000.
[    0.065334] smp: Bringing up secondary CPUs ...
[    0.065358] smp: Brought up 1 node, 1 CPU
[    0.079883] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.079948] futex hash table entries: 256 (order: 2, 16384 bytes, linear)
[    0.080501] pinctrl core: initialized pinctrl subsystem
[    0.084357] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.128091] clocksource: Switched to clocksource MIPS
[    0.132803] NET: Registered PF_INET protocol family
[    0.133477] IP idents hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.135979] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.136079] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.136124] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.136203] TCP bind hash table entries: 1024 (order: 2, 16384 bytes, linear)
[    0.136337] TCP: Hash tables configured (established 1024 bind 1024)
[    0.136768] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.136875] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.137735] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.138148] PCI: CLS 0 bytes, default 16
[    0.147956] workingset: timestamp_bits=14 max_order=14 bucket_order=0
[    0.163139] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.163187] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.174933] bcm63xx-power-controller 10001848.power-controller: registered 10 power domains
[    0.176745] 10000100.serial: ttyS0 at MMIO 0x10000100 (irq = 28, base_baud = 1562500) is a bcm63xx_uart
[    0.638614] printk: console [ttyS0] enabled
[    0.692014] spi-nor spi1.0: s25fl128s1 (16384 Kbytes)
[    0.699757] 3 fixed-partitions partitions found on MTD device spi1.0
[    0.707027] Creating 3 MTD partitions on "spi1.0":
[    0.712070] 0x000000000000-0x000000010000 : "cfe"
[    0.723820] 0x000000010000-0x000000ff0000 : "firmware"
[    0.736114] 2 uimage-fw partitions found on MTD device firmware
[    0.742374] Creating 2 MTD partitions on "firmware":
[    0.747458] 0x000000310000-0x000000fe0000 : "rootfs"
[    0.757675] mtd: setting mtd2 (rootfs) as root device
[    0.764212] 1 squashfs-split partitions found on MTD device rootfs
[    0.770730] 0x000000570000-0x000000fe0000 : "rootfs_data"
[    0.781731] 0x000000030000-0x000000310000 : "kernel"
[    0.789724] 0x000000ff0000-0x000001000000 : "nvram"
[    0.949050] bcm6368-mdio-mux 10e000b0.mdio: Broadcom BCM6368 MDIO mux bus
[    0.957291] b53-switch 10e00000.switch: found switch: BCM63xx, rev 0
[    0.964840] mv88e6085 mdio_mux-0.1:00: switch 0x3520 detected: Marvell 88E6352, revision 1
[    1.078707] bcm6368-enetsw 1000d800.ethernet: mtd mac 00:22:07:c7:98:cd
[    1.159546] bcm6368-enetsw 1000d800.ethernet: eth0 at 0xb000d800, IRQ 0
[    1.169008] bcm7038-wdt 1000005c.watchdog: Registered BCM7038 Watchdog
[    1.178533] NET: Registered PF_INET6 protocol family
[    1.204668] Segment Routing with IPv6
[    1.208766] In-situ OAM (IOAM) with IPv6
[    1.213174] NET: Registered PF_PACKET protocol family
[    1.219349] 8021q: 802.1Q VLAN Support v1.8
[    1.252453] b53-switch 10e00000.switch: found switch: BCM63xx, rev 0
[    1.379766] b53-switch 10e00000.switch: Using legacy PHYLIB callbacks. Please migrate to PHYLINK!
[    1.395376] device eth0 entered promiscuous mode
[    1.400388] DSA: tree 0 setup
[    1.404005] mv88e6085 mdio_mux-0.1:00: switch 0x3520 detected: Marvell 88E6352, revision 1
[    1.726290] mv88e6085 mdio_mux-0.1:00: configuring for fixed/rgmii-id link mode
[    1.737385] mv88e6085 mdio_mux-0.1:00: Link is Up - 1Gbps/Full - flow control off
[    1.833222] mv88e6085 mdio_mux-0.1:00 lan1 (uninitialized): PHY [!ubus!mdio@10e000b0!mdio@1!switch@0!mdio:00] driver [Marvell 88E1540] (irq=17)
[    1.852314] mv88e6085 mdio_mux-0.1:00: nonfatal error -34 setting MTU to 1500 on port 0
[    1.953379] mv88e6085 mdio_mux-0.1:00 lan2 (uninitialized): PHY [!ubus!mdio@10e000b0!mdio@1!switch@0!mdio:01] driver [Marvell 88E1540] (irq=18)
[    1.972266] mv88e6085 mdio_mux-0.1:00: nonfatal error -34 setting MTU to 1500 on port 1
[    2.073206] mv88e6085 mdio_mux-0.1:00 lan3 (uninitialized): PHY [!ubus!mdio@10e000b0!mdio@1!switch@0!mdio:02] driver [Marvell 88E1540] (irq=19)
[    2.092221] mv88e6085 mdio_mux-0.1:00: nonfatal error -34 setting MTU to 1500 on port 2
[    2.193189] mv88e6085 mdio_mux-0.1:00 lan4 (uninitialized): PHY [!ubus!mdio@10e000b0!mdio@1!switch@0!mdio:03] driver [Marvell 88E1540] (irq=20)
[    2.209987] mv88e6085 mdio_mux-0.1:00: nonfatal error -34 setting MTU to 1500 on port 3
[    2.301157] mv88e6085 mdio_mux-0.1:00 ext1 (uninitialized): PHY [!ubus!mdio@10e000b0!mdio@1!switch@0!mdio:04] driver [Marvell 88E1540] (irq=21)
[    2.317960] mv88e6085 mdio_mux-0.1:00: nonfatal error -34 setting MTU to 1500 on port 4
[    2.329326] mv88e6085 mdio_mux-0.1:00: nonfatal error -34 setting MTU to 1500 on port 5
[    2.340638] b53-switch 10e00000.switch extsw: error -34 setting MTU to 1508 to include DSA overhead
[    2.350042] device extsw entered promiscuous mode
[    2.355182] DSA: tree 1 setup
[    2.383898] VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
[    2.399824] Freeing unused kernel image (initmem) memory: 1252K
[    2.405898] This architecture does not have kernel memory protection.
[    2.412635] Run /sbin/init as init process
[    3.372983] init: Console is alive
[    3.377510] init: - watchdog -
[    4.444805] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    4.574896] usbcore: registered new interface driver usbfs
[    4.580992] usbcore: registered new interface driver hub
[    4.586785] usbcore: registered new device driver usb
[    4.662838] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    4.681633] init: - preinit -
[    7.338145] random: crng init done
[    7.980923] b53-switch 10e00000.switch extsw: configuring for fixed/rgmii link mode
[    7.989309] mv88e6085 mdio_mux-0.1:00 lan1: configuring for phy/gmii link mode
[    7.997437] b53-switch 10e00000.switch extsw: Link is Up - 1Gbps/Full - flow control off
[    8.006747] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[    8.013682] IPv6: ADDRCONF(NETDEV_CHANGE): extsw: link becomes ready
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[   10.540161] mount_root: no usable overlay filesystem found, using tmpfs overlay
[   10.557359] urandom-seed: Seed file not found (/etc/urandom.seed)
[   10.769499] procd: - early -
[   10.773099] procd: - watchdog -
[   11.563197] procd: - watchdog -
[   11.571127] procd: - ubus -
[   11.828716] procd: - init -
Please press Enter to activate this console.
[   14.202303] kmodloader: loading kernel modules from /etc/modules.d/*
[   14.276756] i2c_dev: i2c /dev entries driver
[   14.308308] i2c-gpio i2c-sfp: Slow GPIO pins might wreak havoc into I2C/SMBus bus timing
[   14.317314] i2c-gpio i2c-sfp: using lines 481 (SDA) and 499 (SCL)
[   14.324323] i2c-gpio i2c-catv: Slow GPIO pins might wreak havoc into I2C/SMBus bus timing
[   14.333460] i2c-gpio i2c-catv: using lines 503 (SDA) and 487 (SCL)
[   14.523957] sfp sfp0: Host maximum power 1.0W
[   14.528674] sfp sfp0: No tx_disable pin: SFP modules will always be emitting.
[   14.776460] PPP generic driver version 2.4.2
[   14.800633] NET: Registered PF_PPPOX protocol family
[   14.844860] kmodloader: done loading kernel modules from /etc/modules.d/*
[   15.839159] sfp sfp0: please wait, module slow to respond
[   18.056728] urngd: v1.0.2 started.
[   71.289411] sfp sfp0: failed to read EEPROM: -ENXIO
[   73.575772] b53-switch 10e00000.switch extsw: Link is Down
[   73.742879] b53-switch 10e00000.switch extsw: configuring for fixed/rgmii link mode
[   73.751731] b53-switch 10e00000.switch extsw: Link is Up - 1Gbps/Full - flow control off
[   73.761628] IPv6: ADDRCONF(NETDEV_CHANGE): extsw: link becomes ready
[   73.918945] mv88e6085 mdio_mux-0.1:00 lan1: configuring for phy/gmii link mode
[   74.021337] br-lan: port 1(lan1) entered blocking state
[   74.026710] br-lan: port 1(lan1) entered disabled state
[   74.220426] device lan1 entered promiscuous mode
[   74.440334] mv88e6085 mdio_mux-0.1:00 lan2: configuring for phy/gmii link mode
[   74.493622] br-lan: port 2(lan2) entered blocking state
[   74.499157] br-lan: port 2(lan2) entered disabled state
[   74.586032] device lan2 entered promiscuous mode
[   74.791543] mv88e6085 mdio_mux-0.1:00 lan3: configuring for phy/gmii link mode
[   74.856267] br-lan: port 3(lan3) entered blocking state
[   74.861824] br-lan: port 3(lan3) entered disabled state
[   74.947172] device lan3 entered promiscuous mode
[   75.081430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00280000: 0x3600 instead
[   75.122989] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00280004: 0x4272 instead
[   75.147603] mv88e6085 mdio_mux-0.1:00 lan4: configuring for phy/gmii link mode
[   75.167810] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00280008: 0x6463 instead
[   75.211670] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0028000c: 0x2043 instead
[   75.224748] br-lan: port 4(lan4) entered blocking state
[   75.230274] br-lan: port 4(lan4) entered disabled state
[   75.268247] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00280010: 0x706f instead
[   75.299592] device lan4 entered promiscuous mode
[   75.311543] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00280014: 0x7469 instead
[   75.378407] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00280018: 0x7665 instead
[   75.450225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0028001c: 0x2032 instead
[   75.518278] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00280028: 0x3238 instead
[   75.547100] mv88e6085 mdio_mux-0.1:00 wan: configuring for fixed/rgmii-id link mode
[   75.568266] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0028002c: 0x3936 instead
[   75.578153] jffs2: Further such events for this erase block will not be printed
[   75.640213] br-wan: port 1(wan) entered blocking state
[   75.645496] br-wan: port 1(wan) entered disabled state
[   75.702225] jffs2: Empty flash at 0x00280138 ends at 0x00280140
[   75.777585] device wan entered promiscuous mode
[   75.814457] mv88e6085 mdio_mux-0.1:00: p5: hw VLAN 1 already used by port 0 in br-lan
[   75.948504] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00290000: 0xc2b2 instead
[   76.067627] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00290004: 0x5dab instead
[   76.168380] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00290008: 0xffb8 instead
[   76.225254] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0029000c: 0xed1d instead
[   76.288508] mv88e6085 mdio_mux-0.1:00 ext1: configuring for phy/gmii link mode
[   76.298581] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00290010: 0xccf4 instead
[   76.351122] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00290014: 0x4985 instead
[   76.396566] br-wan: port 2(ext1) entered blocking state
[   76.402098] br-wan: port 2(ext1) entered disabled state
[   76.438361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00290018: 0x1806 instead
[   76.487429] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0029001c: 0x2752 instead
[   76.529459] device ext1 entered promiscuous mode
[   76.535093] mv88e6085 mdio_mux-0.1:00: p4: hw VLAN 1 already used by port 0 in br-lan
[   76.573940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00290020: 0x8e09 instead
[   76.643925] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00290024: 0x75f6 instead
[   76.653875] jffs2: Further such events for this erase block will not be printed
[   76.969771] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002a0000: 0x3d05 instead
[   77.016687] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002a0004: 0x3b71 instead
[   77.071567] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002a0008: 0x6bf5 instead
[   77.128298] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002a000c: 0xd3e6 instead
[   77.178585] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002a0010: 0xe8fa instead
[   77.228490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002a0014: 0x79e3 instead
[   77.278254] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002a0018: 0x23d8 instead
[   77.331198] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002a001c: 0x719f instead
[   77.382240] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002a0020: 0x667d instead
[   77.427541] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002a0024: 0x4058 instead
[   77.437485] jffs2: Further such events for this erase block will not be printed
[   77.670392] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002b0000: 0xf670 instead
[   77.718269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002b0004: 0xd12d instead
[   77.778790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002b0008: 0xe05d instead
[   77.817449] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002b000c: 0xee35 instead
[   77.848360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002b0010: 0x4d93 instead
[   77.898267] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002b0014: 0xfbb0 instead
[   77.928221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002b0018: 0x48e7 instead
[   77.937996] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002b001c: 0xd56d instead
[   77.968226] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002b0020: 0x59a5 instead
[   77.977993] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002b0024: 0x6a3c instead
[   77.987873] jffs2: Further such events for this erase block will not be printed
[   78.099170] jffs2: Old JFFS2 bitmask found at 0x002b90d4
[   78.104621] jffs2: You cannot use older JFFS2 filesystems with newer kernels
[   78.188358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002c0000: 0x2c3c instead
[   78.209517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002c0004: 0xf4bc instead
[   78.229080] mv88e6085 mdio_mux-0.1:00 lan4: Link is Up - 1Gbps/Full - flow control rx/tx
[   78.237488] br-lan: port 4(lan4) entered blocking state
[   78.242963] br-lan: port 4(lan4) entered forwarding state
[   78.273680] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready

....

[   94.689869] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00590018: 0x5d19 instead
[   94.700066] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0059001c: 0x30e0 instead
[   94.710258] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00590020: 0x4c76 instead
[   94.720508] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00590024: 0xb8c5 instead
[   94.730362] jffs2: Further such events for this erase block will not be printed
[   94.781568] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[   94.790305] jffs2: empty_blocks 117, bad_blocks 0, c->nr_blocks 167

I have alot of jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00280000 - 0x00590024.
Do you know why?

Is it possilbe to add LuCI? Or is your github repositry updated?

Hey it almost kinda works! :smiley:
Apparently the latest/previous setting is stored somewhere in nvram, I don't know the logic there.

I have alot of
jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00280000 - 0x00590024.
Do you know why?

Yeah, with the sysupgrade method we do not erase the remainder of the flash image, so when jffs2 scans that memory it looks like it's something there already. I think it's possible to erase the flash memory from CFE or U-Boot but it's a bit dangerous I think.

I think the free space inside the firmware partition need to be reflashed with magic JFFS2 markers in all empty erasblocks, I think if you do that over the whole "firmware" partition and then flash using the sysupgrade method all of the flash below the images becomes available.

Is it possilbe to add LuCI? Or is your github repositry updated?

My repo is updated and includes a binary version of U-Boot as I haven't created a way to build U-Boot yet, but I will fix that too. You can rebuild with any options you like!

I added some instructions for how to erase the flash before installing OpenWrt to my webpage, check it out!

1 Like

In nvram there is a bootline key. In the value string there is another key/value pair. I think it is p=0 for booting current and p=1 for booting previous.

1 Like

OK I updated the sysupgrade image on the web page with a version including LuCI and tested and screenshotted and all, so now people should be able to use this as a vanilla router.

2 Likes

Yes, you have made it possible to run OpenWrt on the XG6846! Thanks!
Nice with LuCI.

BTW, the Boot image (0=latest, 1=previous) line disappeared after I erased /dev/mtd1.

1 Like

It kind of makes sense that the boot image selection disappeared after erasing mtd1, we deleted the secondary boot image altogether :smiley:

1 Like

Hi
To get the USB interface to work I had to install a jumper at F2. Actually it should probably be a fuse.

Then I added:

&ehci {
	status = "okay";
};

&ohci {
	status = "okay";
};

&usbh {
	status = "okay";
};

to bcm6328-inteno-xg6846.dts.

But, I can´t get the wan and the USB led to work. Does yours work?

Nice hack! Once we have the support merged we can add this info to the OpenWrt page.

But, I can´t get the wan and the USB led to work. Does yours work?

My device has no USB port and they have soldered a resistor instead of the LED. But have you tested it from sysfs?

cd /sys/class/leds/green:usb
echo 100 > brightness
echo "heartbeat" > trigger

The WAN LED is connected directly to the Marvell switch I think, so you need to go into the source code and figure out how to activate that I'm afraid... It's at https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/drivers/net/dsa/mv88e6xxx

Hmm - fantastic work @linusw :slight_smile:

My device has no USB. I understood that this is for aftermarket updates or configs. Perhaps @merbanan has better understanding. But having USB on a fiber adaptor opens up a few possibilities, at least for the earlier board revisions.

Edit: curious whether you've tried any performance/throughput numbers using openwrt on this.

1 Like

Hmm - is this normal behaviour? Or is this a result of these errors:

Do you have normal 1500 MTU, @mrhaav ?

An improvement idea would be to add some early timeout for SFP adaptors also:

Some interesting discussion regarding switches + broadcom.

Yes, or I have not change anything. This is the log from the first boot.

How do we set a timeout for reading SFP on boot?

For that I have no good answer. I think this depends entirely on kernel code, but having some timeout value available for use within DTS files would be helpful.

No, it´s not working.
I have to remove

	pinctrl-0 = <&pinctrl_pcie_clkreq>, /* GPIO16 LED USB */

	led_usb_green: led@16 {
		reg = <16>;
		active-low;
		label = "green:usb";
		default-state = "off";
	};

from the dts file, then a can control the USB led with

echo 496 > /sys/class/gpio/export
echo out > /sys/class/gpio/gpio496/direction
echo 1 > /sys/class/gpio/gpio496/value

I tried to add

	leds {
		compatible = "gpio-leds";

		led_usb_green: led@16 {
			label = "green:usb";
			gpios = <&pinctrl 16 1>;
			default-state = "off";
		};

but no success.

But I don´t know how to define the USB led in the dts so it is working and visible in the system.

The complaints about MTU size is simply because the mv88e6xx and b53-switch drivers are lacking the appropriate callbacks for setting the MTU. struct dsa_switch_ops .port_change_mtu, also .port_max_mtu is using the callbacks .port_set_jumbo_size() or set_max_frame_size() from struct mv88e6xxx_ops, and for this switch, mv88e6085 in mv88e6085_ops in drivers/net/dsa/mv88e6xxx/chip.c, these callbacks are missing, so anything else than 1500 will fail.

Usually it will "just work" because the switch actually support larger frames than 1500 it's just that the framework don't know if it does or not.

I'm trying to locate a datasheet for MV88E6085 to fix that one. If someone has this datasheet, please share it.

1 Like

To use a gpio LED it's correct to remove the pinctrl_pcie_clkreq (was wrong in the first place!) then you should probably do:

	leds {
		compatible = "gpio-leds";

		led_usb_green: led@16 {
			label = "green:usb";
			gpios = <&gpio 16 GPIO_ACTIVE_HIGH>;
			default-state = "off";
		};

As it seems it is reusing one of the GPIO lines and it seems it is active high. Using &pinctrl doesn't work I think.

I found out that this is actually a MTU size bug in the "enetsw" (on-board switch) on the BCM6328.

I sent a patch and included this in my XG6846 patch stack:
http://lists.openwrt.org/pipermail/openwrt-devel/2023-October/041556.html

Yeah, nice, I saw your patchset on the list. Nice work, man.

The folks on the above PR discussion also noted various quirks with MTU owing to Broadcom tags that any internal switches potentially add to frames.

So, as long as the max frame size is less than 1536, the following error should also disappear?:

[    2.340638] b53-switch 10e00000.switch extsw: error -34 setting MTU to 1508 to include DSA overhead

If a user tries to set jumbo frames, would that work or break? Edit: it will break.

@merbanan is a datasheet something you could point us to?

or MV88E6085 ?