OpenWrt support for Linksys MX4200

That would be my preference, but I don’t think it’s possible. Not sure how DD-WRT does it, but it seems to work using the NSS engine on both parent and child devices. At least, when I was using DD-WRT, CPU and RAM usage were low enough that it appeared to be using NSS.

I have Mx4200 V1, getting wifi calibration timed out.

Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00158
S - IMAGE_VARIANT_STRING=HAACANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x000002e5
B - 201 - PBL, Start
B - 2734 - bootable_media_detect_entry, Start
B - 3440 - bootable_media_detect_success, Start
B - 3445 - elf_loader_entry, Start
B - 6107 - auth_hash_seg_entry, Start
B - 6348 - auth_hash_seg_exit, Start
B - 68245 - elf_segs_hash_verify_entry, Start
B - 131089 - PBL, End
B - 214293 - SBL1, Start
B - 292434 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4
B - 302194 - pm_device_init, Start
B - 482083 - PM_SET_VAL:Skip
D - 178028 - pm_device_init, Delta
B - 484492 - pm_driver_init, Start
D - 5337 - pm_driver_init, Delta
B - 490836 - clock_init, Start
D - 2135 - clock_init, Delta
B - 494893 - boot_flash_init, Start
D - 13298 - boot_flash_init, Delta
B - 511851 - boot_config_data_table_init, Start
D - 3233 - boot_config_data_table_init, Delta - (575 Bytes)
B - 519323 - Boot Setting : 0x00000618
B - 523258 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:13
B - 530273 - sbl1_ddr_set_params, Start
B - 533994 - CPR configuration: 0x30c
B - 537471 - cpr_init, Start
B - 540246 - Rail:0 Mode: 5 Voltage: 800000
B - 545492 - CL CPR settled at 752000mV
B - 548329 - Rail:1 Mode: 5 Voltage: 880000
B - 552507 - Rail:1 Mode: 7 Voltage: 896000
D - 16561 - cpr_init, Delta
B - 559400 - Pre_DDR_clock_init, Start
B - 563426 - Pre_DDR_clock_init, End
B - 566720 - DDR Type : PCDDR3
B - 572485 - do ddr sanity test, Start
D - 1067 - do ddr sanity test, Delta
B - 577212 - DDR: Start of HAL DDR Boot Training
B - 581940 - DDR: End of HAL DDR Boot Training
B - 587643 - DDR: Checksum to be stored on flash is 1163567577
B - 598044 - Image Load, Start
D - 226188 - QSEE Image Loaded, Delta - (1376448 Bytes)
B - 824323 - Image Load, Start
D - 61 - SEC Image Loaded, Delta - (0 Bytes)
B - 832009 - Image Load, Start
D - 10736 - DEVCFG Image Loaded, Delta - (26008 Bytes)
B - 842837 - Image Load, Start
D - 22143 - RPM Image Loaded, Delta - (86584 Bytes)
B - 865041 - Image Load, Start
D - 94580 - APPSBL Image Loaded, Delta - (574916 Bytes)
B - 959743 - QSEE Execution, Start
D - 61 - QSEE Execution, Delta
B - 965538 - USB D+ check, Start
D - 0 - USB D+ check, Delta
B - 971943 - SBL1, End
D - 759938 - SBL1, Delta
S - Flash Throughput, 6659 KB/s (2065203 Bytes, 310116 us)
S - DDR Frequency, 466 MHz
S - Core 0 Frequency, 800 MHz

U-Boot 2016.01-WNC_v0.4 (Aug 27 2020 - 09:20:09 +0800)

DRAM: smem ram ptable found: ver: 1 len: 4
512 MiB
board_env_offset=1000000, board_env_size=40000
board_devinfo_offset=1060000, board_devinfo_size=20000
board_senv_offset=1040000, board_senv_size=20000
NAND: Could not find nand_gpio in dts, using defaults
ONFI device found
ID = 1590acad
Vendor = ad
Device = ac
qpic_nand: changing oobsize to 64 from 128 bytes
SF: Unsupported flash IDs: manuf ff, jedec ffff, ext_jedec ffff
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
512 MiB
MMC: : 0
[devinfo_relocate] devinfo_relocate[147] malloced DEVINFO at 4a601d28
[devinfo_relocate_spec] ret: 0 , total: 131072 , CONFIG_DEVINFO_SIZE: 131072
In: serial@78B3000
Out: serial@78B3000
Err: serial@78B3000
machid: 801000d
Card did not respond to voltage select!
eth2 MAC Address from ART is not valid
eth3 MAC Address from ART is not valid
eth4 MAC Address from ART is not valid
eth5 MAC Address from ART is not valid
#################################
######### auto_recovery #########
#################################
=== enabled:1, === boot_part:2, === maxpartialboots:3
boot_count_buffer_size = 2048, total number = 64
i=12, offset = 0x1046000, last_offset = 0x1045800
Updating boot_count...
boot->Count:3 ,boot->CheckSum:20110814, offset:0x1046000

~~~~~~~~~~~~~

Auto-update from TFTP: failed, env. variable 'updatefile' not found

auto_recovery check

Hit any key to stop autoboot: 0
Normal boot

NAND read: device 0 offset 0xa680000, size 0x600000
6291456 bytes read: OK

Loading kernel from FIT Image at 44000000 ...

Using 'config@1' configuration
Trying 'kernel-1' kernel subimage
Description: ARM64 OpenWrt Linux-6.6.93
Type: Kernel Image
Compression: gzip compressed
Data Start: 0x440000e8
Data Size: 5136185 Bytes = 4.9 MiB
Architecture: AArch64
OS: Linux
Load Address: 0x41000000
Entry Point: 0x41000000
Hash algo: crc32
Hash value: 32d90fd7
Hash algo: sha1
Hash value: 7f9eff7fc88bc74dc5e35e8bd8d2de04048209b2
Verifying Hash Integrity ... crc32+ sha1+ OK

Loading fdt from FIT Image at 44000000 ...

Using 'config@1' configuration
Trying 'fdt-1' fdt subimage
Description: ARM64 OpenWrt linksys_mx4200v1 device tree blob
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x444e6164
Data Size: 45747 Bytes = 44.7 KiB
Architecture: AArch64
Hash algo: crc32
Hash value: 94b74c01
Hash algo: sha1
Hash value: 96988b4479157c60ac70062acb1b9cc84a444ffb
Verifying Hash Integrity ... crc32+ sha1+ OK
Booting using the fdt blob at 0x444e6164
Uncompressing Kernel Image ... OK
Loading Device Tree to 4a3f1000, end 4a3ff2b2 ... OK
Using machid 0x801000d from environment

Starting kernel ...

Jumping to AARCH64 kernel via monitor
[ 0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[ 0.000000] Linux version 6.6.93 (builder@buildhost) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 13.3.0 r28739-d9340319c6) 13.3.0, GNU ld (GNU Binutils) 2.42) #0 SMP Mon Jun 23 20:40:36 2025
[ 0.000000] Machine model: Linksys MX4200v1
[ 0.000000] OF: reserved mem: 0x0000000040000000..0x0000000040ffffff (16384 KiB) nomap non-reusable nss@40000000
[ 0.000000] OF: reserved mem: 0x000000004a400000..0x000000004a5fffff (2048 KiB) nomap non-reusable tzapp@4a400000
[ 0.000000] OF: reserved mem: 0x000000004a600000..0x000000004a9fffff (4096 KiB) nomap non-reusable bootloader@4a600000
[ 0.000000] OF: reserved mem: 0x000000004aa00000..0x000000004aafffff (1024 KiB) nomap non-reusable sbl@4aa00000
[ 0.000000] OF: reserved mem: 0x000000004ab00000..0x000000004abfffff (1024 KiB) nomap non-reusable smem@4ab00000
[ 0.000000] OF: reserved mem: 0x000000004ac00000..0x000000004affffff (4096 KiB) nomap non-reusable memory@4ac00000
[ 0.000000] OF: reserved mem: 0x000000004b000000..0x0000000050efffff (97280 KiB) nomap non-reusable wcnss@4b000000
[ 0.000000] OF: reserved mem: 0x0000000050f00000..0x0000000050ffffff (1024 KiB) nomap non-reusable q6_etr_dump@50f00000
[ 0.000000] OF: reserved mem: 0x0000000051000000..0x00000000510fffff (1024 KiB) nomap non-reusable m3_dump@51000000
[ 0.000000] Zone ranges:
[ 0.000000] DMA [mem 0x0000000040000000-0x000000005fffffff]
[ 0.000000] DMA32 empty
[ 0.000000] Normal empty
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000040000000-0x0000000040ffffff]
[ 0.000000] node 0: [mem 0x0000000041000000-0x000000004a3fffff]
[ 0.000000] node 0: [mem 0x000000004a400000-0x00000000510fffff]
[ 0.000000] node 0: [mem 0x0000000051100000-0x000000005fffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000005fffffff]
[ 0.000000] psci: probing for conduit method from DT.
[ 0.000000] psci: PSCIv1.0 detected in firmware.
[ 0.000000] psci: Using standard PSCI v0.2 function IDs
[ 0.000000] psci: MIGRATE_INFO_TYPE not supported.
[ 0.000000] psci: SMC Calling Convention v1.0
[ 0.000000] percpu: Embedded 18 pages/cpu s36200 r8192 d29336 u73728
[ 0.000000] pcpu-alloc: s36200 r8192 d29336 u73728 alloc=184096
[ 0.000000] pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3
[ 0.000000] Detected VIPT I-cache on CPU0
[ 0.000000] alternatives: applying boot alternatives
[ 0.000000] Kernel command line: init=/sbin/init rootfstype=squashfs ubi.mtd=24,2048 ubi.block=0,0 root=/dev/ubiblock0_0 rootwait ro loglevel=8
[ 0.000000] Dentry cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[ 0.000000] Inode-cache hash table entries: 32768 (order: 6, 262144 bytes, linear)
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 129024
[ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[ 0.000000] software IO TLB: SWIOTLB bounce buffer size adjusted to 0MB
[ 0.000000] software IO TLB: area num 4.
[ 0.000000] software IO TLB: SWIOTLB bounce buffer size roundup to 1MB
[ 0.000000] software IO TLB: mapped [mem 0x000000005f4c0000-0x000000005f5c0000] (1MB)
[ 0.000000] Memory: 371668K/524288K available (8576K kernel code, 922K rwdata, 1660K rodata, 1600K init, 293K bss, 152620K reserved, 0K cma-reserved)
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[ 0.000000] rcu: Hierarchical RCU implementation.
[ 0.000000] Tracing variant of Tasks RCU enabled.
[ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[ 0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[ 0.000000] Root IRQ handler: 0xffffffc080010000
[ 0.000000] GICv2m: range[mem 0x0b00a000-0x0b00affc], SPI[448:479]
[ 0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[ 0.000000] arch_timer: cp15 and mmio timer(s) running at 19.20MHz (virt/virt).
[ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x46d987e47, max_idle_ns: 440795202767 ns
[ 0.000000] sched_clock: 56 bits at 19MHz, resolution 52ns, wraps every 4398046511078ns
[ 0.000108] Calibrating delay loop (skipped), value calculated using timer frequency.. 38.40 BogoMIPS (lpj=192000)
[ 0.000121] pid_max: default: 32768 minimum: 301
[ 0.005072] Mount-cache hash table entries: 1024 (order: 1, 8192 bytes, linear)
[ 0.005085] Mountpoint-cache hash table entries: 1024 (order: 1, 8192 bytes, linear)
[ 0.009325] RCU Tasks Trace: Setting shift to 2 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=4.
[ 0.009543] rcu: Hierarchical SRCU implementation.
[ 0.009548] rcu: Max phase no-delay instances is 1000.
[ 0.010465] smp: Bringing up secondary CPUs ...
[ 0.011126] Detected VIPT I-cache on CPU1
[ 0.011231] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
[ 0.011886] Detected VIPT I-cache on CPU2
[ 0.011959] CPU2: Booted secondary processor 0x0000000002 [0x410fd034]
[ 0.012619] Detected VIPT I-cache on CPU3
[ 0.012687] CPU3: Booted secondary processor 0x0000000003 [0x410fd034]
[ 0.012756] smp: Brought up 1 node, 4 CPUs
[ 0.012765] SMP: Total of 4 processors activated.
[ 0.012770] CPU features: detected: 32-bit EL0 Support
[ 0.012775] CPU features: detected: CRC32 instructions
[ 0.012836] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[ 0.012841] CPU: All CPU(s) started at EL1
[ 0.012844] alternatives: applying system-wide alternatives
[ 0.023336] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.023361] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[ 0.025089] pinctrl core: initialized pinctrl subsystem
[ 0.027165] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[ 0.027804] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations
[ 0.027843] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[ 0.027877] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[ 0.028293] thermal_sys: Registered thermal governor 'step_wise'
[ 0.028354] cpuidle: using governor menu
[ 0.028585] ASID allocator initialised with 65536 entries
[ 0.055467] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 4
[ 0.057448] Modules: 29456 pages in range for non-PLT usage
[ 0.057456] Modules: 520976 pages in range for PLT usage
[ 0.061233] SCSI subsystem initialized
[ 0.061450] usbcore: registered new interface driver usbfs
[ 0.061506] usbcore: registered new interface driver hub
[ 0.061557] usbcore: registered new device driver usb
[ 0.062010] qcom_scm: convention: smc arm 64
[ 0.063758] clocksource: Switched to clocksource arch_sys_counter
[ 0.067671] NET: Registered PF_INET protocol family
[ 0.067805] IP idents hash table entries: 8192 (order: 4, 65536 bytes, linear)
[ 0.070136] tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 4096 bytes, linear)
[ 0.070154] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[ 0.070169] TCP established hash table entries: 4096 (order: 3, 32768 bytes, linear)
[ 0.070216] TCP bind hash table entries: 4096 (order: 5, 131072 bytes, linear)
[ 0.070357] TCP: Hash tables configured (established 4096 bind 4096)
[ 0.070902] MPTCP token hash table entries: 512 (order: 1, 12288 bytes, linear)
[ 0.071063] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[ 0.071089] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[ 0.071414] NET: Registered PF_UNIX/PF_LOCAL protocol family
[ 0.071453] PCI: CLS 0 bytes, default 64
[ 0.073042] workingset: timestamp_bits=46 max_order=17 bucket_order=0
[ 0.073807] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.073814] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.077650] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 248)
[ 0.080069] qcom-qmp-usb-phy 78000.phy: supply vdda-phy not found, using dummy regulator
[ 0.080254] qcom-qmp-usb-phy 78000.phy: supply vdda-pll not found, using dummy regulator
[ 0.081501] qcom-qusb2-phy 79000.phy: supply vdd not found, using dummy regulator
[ 0.081626] qcom-qusb2-phy 79000.phy: supply vdda-pll not found, using dummy regulator
[ 0.081669] qcom-qusb2-phy 79000.phy: supply vdda-phy-dpdm not found, using dummy regulator
[ 0.081849] qcom-qusb2-phy 79000.phy: Registered Qcom-QUSB2 phy
[ 0.090581] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[ 0.094706] msm_serial 78b1000.serial: msm_serial: detected port #1
[ 0.094748] msm_serial 78b1000.serial: uartclk = 19200000
[ 0.095080] 78b1000.serial: ttyMSM1 at MMIO 0x78b1000 (irq = 20, base_baud = 1200000) is a MSM
[ 0.095545] msm_serial 78b3000.serial: msm_serial: detected port #0
[ 0.095579] msm_serial 78b3000.serial: uartclk = 3686400
[ 0.095907] 78b3000.serial: ttyMSM0 at MMIO 0x78b3000 (irq = 21, base_baud = 230400) is a MSM
[ 0.095937] msm_serial: console setup on port #0
[ 0.095980] printk: console [ttyMSM0] enabled
[ 0.913894] msm_serial: driver initialized
[ 0.923457] loop: module loaded
[ 0.924923] nand: device found, Manufacturer ID: 0xad, Chip ID: 0xac
[ 0.925413] nand: Hynix H27S4G8F2EDA-BC
[ 0.932003] nand: 512 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 128
[ 0.935990] 29 fixed-partitions partitions found on MTD device qcom_nand.0
[ 0.943221] Creating 29 MTD partitions on "qcom_nand.0":
[ 0.950171] 0x000000000000-0x000000100000 : "0:sbl1"
[ 0.957303] 0x000000100000-0x000000200000 : "0:mibib"
[ 0.961996] 0x000000200000-0x000000280000 : "0:bootconfig"
[ 0.966806] 0x000000280000-0x000000300000 : "0:bootconfig1"
[ 0.971871] 0x000000300000-0x000000600000 : "0:qsee"
[ 0.979724] 0x000000600000-0x000000900000 : "0:qsee_1"
[ 0.984854] 0x000000900000-0x000000980000 : "0:devcfg"
[ 0.987476] 0x000000980000-0x000000a00000 : "0:devcfg_1"
[ 0.992600] 0x000000a00000-0x000000a80000 : "0:apdp"
[ 0.998110] 0x000000a80000-0x000000b00000 : "0:apdp_1"
[ 1.003021] 0x000000b00000-0x000000b80000 : "0:rpm"
[ 1.008023] 0x000000b80000-0x000000c00000 : "0:rpm_1"
[ 1.012753] 0x000000c00000-0x000000c80000 : "0:cdt"
[ 1.018076] 0x000000c80000-0x000000d00000 : "0:cdt_1"
[ 1.022648] 0x000000d00000-0x000000d80000 : "0:appsblenv"
[ 1.027931] 0x000000d80000-0x000000e80000 : "0:appsbl"
[ 1.033704] 0x000000e80000-0x000000f80000 : "0:appsbl_1"
[ 1.038751] 0x000000f80000-0x000001000000 : "0:art"
[ 1.043805] 0x000001000000-0x000001040000 : "u_env"
[ 1.048147] 0x000001040000-0x000001060000 : "s_env"
[ 1.052839] 0x000001060000-0x000001080000 : "devinfo"
[ 1.057783] 0x000001080000-0x00000a680000 : "kernel"
[ 1.202382] 0x000001680000-0x00000a680000 : "rootfs"
[ 1.336669] mtd: setting mtd22 (rootfs) as root device
[ 1.337032] mtdsplit: no squashfs found in "rootfs"
[ 1.340727] 0x00000a680000-0x000013c80000 : "alt_kernel"
[ 1.485351] 0x00000ac80000-0x000013c80000 : "alt_rootfs"
[ 1.619641] 0x000013c80000-0x000013e80000 : "sysdiag"
[ 1.622019] 0x000013e80000-0x000013f00000 : "0:ethphyfw"
[ 1.624600] 0x000013f00000-0x00001f700000 : "syscfg"
[ 1.800606] 0x00001f700000-0x000020000000 : "0:wififw"
[ 1.820081] spmi spmi-0: PMIC arbiter version v2 (0x20010000)
[ 1.838938] i2c_dev: i2c /dev entries driver
[ 1.846178] sdhci: Secure Digital Host Controller Interface driver
[ 1.846220] sdhci: Copyright(c) Pierre Ossman
[ 1.851253] sdhci-pltfm: SDHCI platform and OF driver helper
[ 1.857757] remoteproc remoteproc0: releasing cd00000.q6v5_wcss
[ 1.864534] NET: Registered PF_INET6 protocol family
[ 1.868046] Segment Routing with IPv6
[ 1.872286] In-situ OAM (IOAM) with IPv6
[ 1.875986] NET: Registered PF_PACKET protocol family
[ 1.879855] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[ 1.885126] 8021q: 802.1Q VLAN Support v1.8
[ 1.926496] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 4
[ 1.926812] cpr4_ipq807x_apss_read_fuse_data: apc_corner: speed bin = 0
[ 1.932623] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR fusing revision = 1
[ 1.939250] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR misc fuse value = 0
[ 1.946913] cpr4_ipq807x_apss_read_fuse_data: apc_corner: Voltage boost fuse config = 0 boost = disable
[ 1.954429] cpr3_mem_acc_init: apc: not using memory accelerator regulator
[ 1.963526] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused SVS: open-loop= 704000 uV
[ 1.970502] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused NOM: open-loop= 808000 uV
[ 1.980481] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused TURBO: open-loop= 864000 uV
[ 1.990294] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused STURBO: open-loop= 952000 uV
[ 2.000149] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused SVS: quot[ 7]= 740, quot_offset[ 7]= 0
[ 2.009914] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused NOM: quot[ 7]= 938, quot_offset[ 7]= 195
[ 2.020759] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused TURBO: quot[ 7]=1035, quot_offset[ 7]= 95
[ 2.031702] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused STURBO: quot[ 7]=1198, quot_offset[ 7]= 160
[ 2.042849] cpr3_regulator_init_ctrl: apc: Default CPR mode = closed-loop
[ 2.045912] cpufreq: cpufreq_online: CPU0: Running at unlisted initial frequency: 800000 KHz, changing to: 1017600 KHz
[ 2.062236] remoteproc remoteproc0: cd00000.q6v5_wcss is available
[ 2.071368] ubi0: attaching mtd24
[ 2.363773] random: crng init done
[ 2.906644] ubi0: scanning is finished
[ 2.914825] ubi0: attached mtd24 (name "alt_rootfs", size 144 MiB)
[ 2.914866] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[ 2.919906] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[ 2.926790] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[ 2.933621] ubi0: good PEBs: 1152, bad PEBs: 0, corrupted PEBs: 0
[ 2.940398] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[ 2.946649] ubi0: max/mean erase counter: 2/0, WL threshold: 4096, image sequence number: 526875116
[ 2.953772] ubi0: available PEBs: 0, total reserved PEBs: 1152, PEBs reserved for bad PEB handling: 80
[ 2.962715] ubi0: background thread "ubi_bgt0d" started, PID 708
[ 2.963195] block ubiblock0_0: created from ubi0:0(ro▒[ 2.987733] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[ 2.988319] Freeing unused kernel memory: 1600K
[ 2.994096] Run /sbin/init as init process
[ 2.998187] with arguments:
[ 3.002352] /sbin/init
[ 3.005399] with environment:
[ 3.007993] HOME=/
[ 3.011031] TERM=linux
[ 3.200460] init: Console is alive
[ 3.200596] init: - watchdog -
[ 3.926492] kmodloader: loading kernel modules from /etc/modules-boot.d/

[ 3.960509] gpio_button_hotplug: loading out-of-tree module taints kernel.
[ 4.000532] ssdk_dt_parse_interrupt[941]:INFO:intr-gpio does not exist
[ 4.307977] adpt_hppe_uniphy_mode_set[1398]:INFO:ssdk doesn't support mode:0 in uniphy:0 on platform!
[ 4.308135] regi_init[2525]:INFO:Initializing HPPE Done!!
[ 4.316287] regi_init[2574]:INFO:qca-ssdk module init succeeded!
[ 4.324031] EDMA ver 1 hw init
[ 4.327866] EDMA HW Reset completed succesfully
[ 4.330540] Num rings - TxDesc:1 (23-23) TxCmpl:1 (7-7)
[ 4.334950] RxDesc:1 (15-15) RxFill:1 (7-7)
[ 4.340548] dp2: ppe offload disabled: 0 for macid 2
[ 4.344328] dp2: Switch attached to macid 2 status: 0
[ 4.544514] Qualcomm QCA8075 90000.mdio-1:01: attached PHY driver (mii_bus:phy_addr=90000.mdio-1:01, irq=POLL)
[ 4.545495] GMAC3(ffffff800372f940) Invalid MAC@ - using e6:e7:f9:db:7f:96
[ 4.553420] dp3: ppe offload disabled: 0 for macid 3
[ 4.560286] dp3: Switch attached to macid 3 status: 0
[ 4.634124] Qualcomm QCA8075 90000.mdio-1:02: attached PHY driver (mii_bus:phy_addr=90000.mdio-1:02, irq=POLL)
[ 4.635049] GMAC4(ffffff800372a940) Invalid MAC@ - using 3a:3c:19:41:f7:15
[ 4.643017] dp4: ppe offload disabled: 0 for macid 4
[ 4.649901] dp4: Switch attached to macid 4 status: 0
[ 4.734125] Qualcomm QCA8075 90000.mdio-1:03: attached PHY driver (mii_bus:phy_addr=90000.mdio-1:03, irq=POLL)
[ 4.735084] GMAC5(ffffff8003dd9940) Invalid MAC@ - using 6e:0a:55:64:8f:95
[ 4.743018] dp5: ppe offload disabled: 0 for macid 5
[ 4.749892] dp5: Switch attached to macid 5 status: 0
[ 4.834114] Qualcomm QCA8075 90000.mdio-1:04: attached PHY driver (mii_bus:phy_addr=90000.mdio-1:04, irq=POLL)
[ 4.834996] **********************************************************
[ 4.843005] * NSS Data Plane driver
[ 4.849532] **********************************************************
[ 4.865576] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[ 4.865638] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 1
[ 4.870106] xhci-hcd xhci-hcd.1.auto: hcc params 0x0220fe65 hci version 0x110 quirks 0x0000008002000010
[ 4.877629] xhci-hcd xhci-hcd.1.auto: irq 39, io mem 0x08a00000
[ 4.887023] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[ 4.892791] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 2
[ 4.898367] xhci-hcd xhci-hcd.1.auto: Host supports USB 3.0 SuperSpeed
[ 4.906409] hub 1-0:1.0: USB hub found
[ 4.912517] hub 1-0:1.0: 1 port detected
[ 4.916610] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[ 4.920682] hub 2-0:1.0: USB hub found
[ 4.928561] hub 2-0:1.0: 1 port detected
[ 4.935792] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[ 4.938691] init: - preinit -
Cannot parse config file '/etc/fw_env.config': No such file or directory
Failed to find NVMEM device
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[ 9.825395] UBIFS (ubi0:1): Mounting in unauthenticated mode
[ 9.825527] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 963
[ 9.863576] UBIFS (ubi0:1): recovery needed
[ 9.964961] UBIFS (ubi0:1): recovery completed
[ 9.965065] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data"
[ 9.968303] UBIFS (ubi0:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[ 9.976223] UBIFS (ubi0:1): FS size: 126214144 bytes (120 MiB, 994 LEBs), max 1005 LEBs, journal size 6348800 bytes (6 MiB, 50 LEBs)
[ 9.986115] UBIFS (ubi0:1): reserved for root: 4952683 bytes (4836 KiB)
[ 9.998083] UBIFS (ubi0:1): media format: w5/r0 (latest is w5/r0), UUID 7C5EDE92-DAEF-4AB5-B96A-779B73109111, small LPT model
[ 10.007352] mount_root: switching to ubifs overlay
[ 10.020998] overlayfs: null uuid detected in lower fs '/', falling back to xino=off,index=off,nfs_export=off.
[ 10.025526] urandom-seed: Seeding with /etc/urandom.seed
[ 10.092820] procd: - early -
[ 10.092929] procd: - watchdog -
[ 10.654281] procd: - watchdog -
[ 10.654845] procd: - ubus -
[ 10.730570] procd: - init -
Please press Enter to activate this console.
[ 11.107828] kmodloader: loading kernel modules from /etc/modules.d/*
[ 11.254116] hid: raw HID events driver (C) Jiri Kosina
[ 11.267006] Bluetooth: Core ver 2.22
[ 11.267151] NET: Registered PF_BLUETOOTH protocol family
[ 11.269656] Bluetooth: HCI device and connection manager initialized
[ 11.275101] Bluetooth: HCI socket layer initialized
[ 11.281290] Bluetooth: L2CAP socket layer initialized
[ 11.283051] urngd: v1.0.2 started.
[ 11.285915] Bluetooth: SCO socket layer initialized
[ 11.295527] Bluetooth: BNEP (Ethernet Emulation) ver 1.3
[ 11.299172] Bluetooth: BNEP filters: protocol multicast
[ 11.304764] Bluetooth: BNEP socket layer initialized
[ 11.313705] usbcore: registered new interface driver btusb
[ 11.315454] Loading modules backported from Linux version v6.12.6-0-ge9d65b48ce1a
[ 11.320182] Backport generated by backports.git v6.1.110-1-35-g410656ef04d2
[ 11.328556] Bluetooth: HCI UART driver ver 2.3
[ 11.334534] Bluetooth: HCI UART protocol H4 registered
[ 11.339013] Bluetooth: HCI UART protocol BCSP registered
[ 11.344150] Bluetooth: HCI UART protocol ATH3K registered
[ 11.350787] Bluetooth: HIDP (Human Interface Emulation) ver 1.2
[ 11.354945] Bluetooth: HIDP socket layer initialized
[ 11.366259] NET: Registered PF_QIPCRTR protocol family
[ 11.368257] Bluetooth: RFCOMM TTY layer initialized
[ 11.370797] Bluetooth: RFCOMM socket layer initialized
[ 11.375598] Bluetooth: RFCOMM ver 1.11
[ 11.469657] PPP generic driver version 2.4.2
[ 11.470511] NET: Registered PF_PPPOX protocol family
[ 11.483006] ath11k c000000.wifi: ipq8074 hw2.0
[ 11.483041] ath11k c000000.wifi: FW memory mode: 1
[ 11.530715] remoteproc remoteproc0: powering up cd00000.q6v5_wcss
[ 11.531109] remoteproc remoteproc0: Booting fw image IPQ8074/q6_fw.mdt, size 668
[ 12.922509] remoteproc remoteproc0: remote processor cd00000.q6v5_wcss is now up
[ 33.123800] l11: disabling
[ 74.723894] ath11k c000000.wifi: Coldboot Calibration timed out
[ 74.727048] kmodloader: done loading kernel modules from /etc/modules.d/*
[ 77.568333] br-lan: port 1(lan1) entered blocking state
[ 77.568378] br-lan: port 1(lan1) entered disabled state
[ 77.572418] nss-dp 3a001400.dp3 lan1: entered allmulticast mode
[ 77.577885] nss-dp 3a001400.dp3 lan1: entered promiscuous mode
[ 77.593323] br-lan: port 2(lan2) entered blocking state
[ 77.593369] br-lan: port 2(lan2) entered disabled state
[ 77.597539] nss-dp 3a001600.dp4 lan2: entered allmulticast mode
[ 77.602847] nss-dp 3a001600.dp4 lan2: entered promiscuous mode
[ 77.613857] br-lan: port 3(lan3) entered blocking state
[ 77.614381] br-lan: port 3(lan3) entered disabled state
[ 77.619547] nss-dp 3a001800.dp5 lan3: entered allmulticast mode
[ 77.624997] nss-dp 3a001800.dp5 lan3: entered promiscuous mode

I am suspecting corrupt eth and wifi fw. can anyone provide a complete dump of MX4200V1 nand? OR at least below partitions.
26: 0:ETHPHYFW 0x0000ffff 0x13e80000 0x80000
27: syscfg 0x0000ffff 0x13f00000 0xb800000
28: 0:WIFIFW 0x0000ffff 0x1f700000 0x900000

I think @BrainSlayer can confirm or reject your thoughts.

Hah, I didn’t realize BS was active on the OpenWRT sub. I figured I’d ask on the DD-WRT forum if I decided to leave OpenWRT.

nss is optional in dd-wrt you can enable or disable it on demand on the basic setup page. but in no way it has effect on resources or just minor effects. but i spended efforts in optimizing everything for best effort based on my own test results. i also provided back patches and findings to qosmios nss tree.

2 Likes

i’m some sort of active as contributor even if i’m mainly focused on dd-wrt. but its a fair if i give something back since i also use patches from openwrt

4 Likes

So I’ve run into similar issues, @kevzz01. On one of my three MX4200 v1 units, trying to upgrade or flash would throw it into a flashing green LED, and I’d have to triple-boot it to recover. Weirdly enough, the other two units upgrade just fine via attsysupgrade or OWUT (I prefer OWUT) without any problems.

I haven’t tried going back to stock OpenWrt then upgrading from there, since the other two behave normally and that workflow feels like extra hassle. I’d love to dive deeper into mesh and get it working smoothly, but I need to get past this issue first.

I looked at the NSS build, but it was missing a few things I need for simple AP mode, so I skipped it. I will say memory usage seems to be improving with newer builds, although that might just be me hoping.

Hopefully I can find time soon to reflash/restore/reconfigure the main AP and do some more testing. Maybe @dandek01 has ideas before I go full-nuke on this one?

The problem you mention may be caused by having OEM firmware on the second partition during installation. This has been resolved, but it seems there are no official 24.10 images yet that include this fix: https://github.com/openwrt/openwrt/pull/20086

Isn't it in 24.10.4? It's specifically mentioned in the release logs.

Your upgrade patches were committed on 10-16; 24.10.4 finalized on 10-20:

Yes, you're right. I missed that release :slight_smile:

@5H3RM What version of OpenWrt are you using?

Don’t nuke them, they can work. I’m using vanilla openwrt on them 24.10.4 with 80 mb of swap, install zram. it is somehow sweet spot for them not to go oom.

I’m using them as dumb ap in batman with firewall, dhcp disabled and that maybe help as they are used as transparent bridges. I tried to build nss and install it on mx4200 but it didn’t want to bring mesh link up so i booted back to vanilla. I think that they can be definitely used as dump ap and transparent bridges in batman. I just don’t use vlan ssid on them because it triggers oom.

If you take a look at the nss-config.seed there is actually some steps listed out on the top.

Do you have a copy of your configs? BTW batman-adv is completely different mesh protocol compared to 802.11s (which is what NSS can accelerate). So adding that in will very likey break acceleration for you.

1 Like

If you take a look at the nss-config.seed there is actually some steps listed out on the top.

Thank you :slight_smile:

BTW batman-adv is completely different mesh protocol compared to 802.11s (which is what NSS can accelerate). So adding that in will very likey break acceleration for you.

I appreciate the heads up. I don’t actually want to use it because I feel like I can accomplish what I want using 802.11s, but I’m clearly missing something (probably something simple).

Do you have a copy of your configs?

I do! I assume you just want network and wireless, but let me know if there’s more to share. To summarize: APs and VLAN APs work on the parent device. Only APs work on the child device (connecting to a VLAN AP on the child device never hands out an IP address).

Thanks for taking a look at this! I can’t imagine this is an uncommon configuration, but most of what I find is folks saying wireless backhaul sucks and folks should be using wired (which I agree, but it’s not feasible here).

parent network

config interface 'loopback'
	option device 'lo'
	option proto 'static'
	list ipaddr '127.0.0.1/8'

config globals 'globals'
	option ula_prefix 'ab12:cde8:1fa1::/48'
	option packet_steering '0'

config device
	option name 'br-lan'
	option type 'bridge'
	list ports 'lan1'
	list ports 'lan2'
	list ports 'lan3'

config interface 'lan'
	option device 'br-lan'
	option proto 'static'
	list ipaddr '192.168.1.1/24'
	option ip6assign '60'

config interface 'wan'
	option device 'wan'
	option proto 'dhcp'

config interface 'wan6'
	option device 'wan'
	option proto 'dhcpv6'

config device
	option type 'bridge'
	option name 'BridgeGuest'
	option bridge_empty '1'

config interface 'TrunkGuest'
	option proto 'static'
	option device 'BridgeGuest'
	option ipaddr '192.168.2.1'
	option netmask '255.255.255.0'

child network

config interface 'loopback'
	option device 'lo'
	option proto 'static'
	list ipaddr '127.0.0.1/8'

config globals 'globals'
	option ula_prefix 'ab24:6cd7:ef99::/48'
	option packet_steering '0'

config device
	option name 'br-lan'
	option type 'bridge'
	list ports 'lan1'
	list ports 'lan2'
	list ports 'lan3'

config interface 'lan'
	option device 'br-lan'
	option proto 'static'
	option ip6assign '60'
	list ipaddr '192.168.1.2/24'
	option gateway '192.168.1.1'
	list dns '192.168.1.1'

config interface 'wan'
	option device 'wan'
	option proto 'dhcp'

config interface 'wan6'
	option device 'wan'
	option proto 'dhcpv6'

config device
	option name 'BridgeGuest'
	option type 'bridge'
	option bridge_empty '1'

config interface 'TrunkGuest'
	option proto 'static'
	option device 'BridgeGuest'
	option ipaddr '192.168.2.1'
	option netmask '255.255.255.0'
	list dns '192.168.1.1'

parent wireless

config wifi-device 'radio0'
	option type 'mac80211'
	option path 'platform/soc@0/c000000.wifi'
	option band '5g'
	option channel '44'
	option htmode 'VHT40'
	option country 'US'
	option cell_density '0'

config wifi-iface 'default_radio0'
	option device 'radio0'
	option network 'lan'
	option mode 'ap'
	option ssid 'Wifi5'
	option encryption 'psk2'
	option ifname 'WLAN5'
	option key '#Password5'
	option ieee80211r '1'
	option mobility_domain '5001'
	option ft_over_ds '0'
	option ft_psk_generate_local '1'
	option ieee80211k '1'
	option time_advertisement '2'
	option time_zone 'EST5EDT,M3.2.0,M11.1.0'
	option bss_transition '1'
	option wnm_sleep_mode '1'
	option wnm_sleep_mode_no_keys '1'
	option proxy_arp '1'

config wifi-device 'radio1'
	option type 'mac80211'
	option path 'platform/soc@0/c000000.wifi+1'
	option band '2g'
	option channel '1'
	option htmode 'HT20'
	option country 'US'
	option cell_density '0'

config wifi-iface 'default_radio1'
	option device 'radio1'
	option network 'lan'
	option mode 'ap'
	option ssid 'Wifi24'
	option encryption 'psk2'
	option ifname 'WLAN24'
	option key '#Password24'
	option ieee80211r '1'
	option mobility_domain '2401'
	option ft_over_ds '0'
	option ft_psk_generate_local '1'
	option ieee80211k '1'
	option time_advertisement '2'
	option time_zone 'EST5EDT,M3.2.0,M11.1.0'
	option bss_transition '1'
	option wnm_sleep_mode '1'
	option wnm_sleep_mode_no_keys '1'
	option proxy_arp '1'

config wifi-device 'radio2'
	option type 'mac80211'
	option path 'platform/soc@0/c000000.wifi+2'
	option band '5g'
	option channel '132'
	option htmode 'HE80'
	option country 'US'
	option cell_density '0'

config wifi-iface 'default_radio2'
	option device 'radio2'
	option network 'lan'
	option mode 'mesh'
	option encryption 'sae'
	option mesh_id 'MeshBackhaul'
	option mesh_fwding '1'
	option mesh_rssi_threshold '0'
	option ifname 'WLANMesh'
	option key '#MeshPassword'
	option disassoc_low_ack '0'
	option time_advertisement '2'
	option time_zone 'EST5EDT,M3.2.0,M11.1.0'

config wifi-iface 'wifinet3'
	option device 'radio0'
	option mode 'ap'
	option ssid 'GuestAP'
	option encryption 'psk2'
	option isolate '1'
	option ifname 'Guest5'
	option key '#GuestPassword'
	option ieee80211r '1'
	option mobility_domain '5002'
	option ft_over_ds '0'
	option ft_psk_generate_local '1'
	option ieee80211k '1'
	option time_advertisement '2'
	option time_zone 'EST5EDT,M3.2.0,M11.1.0'
	option bss_transition '1'
	option network 'TrunkGuest'
	option bridge_isolate '1'
	option wnm_sleep_mode '1'
	option wnm_sleep_mode_no_keys '1'
	option proxy_arp '1'

config wifi-iface 'wifinet6'
	option device 'radio1'
	option mode 'ap'
	option ssid 'GuestAP'
	option encryption 'psk2'
	option ifname 'Guest24'
	option key '#GuestPassword'
	option ieee80211r '1'
	option mobility_domain '2402'
	option ft_over_ds '0'
	option ft_psk_generate_local '1'
	option ieee80211k '1'
	option time_advertisement '2'
	option time_zone 'EST5EDT,M3.2.0,M11.1.0'
	option bss_transition '1'
	option network 'TrunkGuest'
	option isolate '1'
	option bridge_isolate '1'
	option wnm_sleep_mode '1'
	option wnm_sleep_mode_no_keys '1'
	option proxy_arp '1'

child wireless

config wifi-device 'radio0'
	option type 'mac80211'
	option path 'platform/soc@0/c000000.wifi'
	option band '5g'
	option channel '44'
	option htmode 'VHT40'
	option country 'US'
	option cell_density '0'

config wifi-iface 'default_radio0'
	option device 'radio0'
	option network 'lan'
	option mode 'ap'
	option ssid 'Wifi5'
	option encryption 'psk2'
	option ifname 'WLAN5'
	option key '#Password5'
	option ieee80211r '1'
	option mobility_domain '5001'
	option ft_over_ds '0'
	option ft_psk_generate_local '1'
	option ieee80211k '1'
	option time_advertisement '2'
	option time_zone 'EST5EDT,M3.2.0,M11.1.0'
	option wnm_sleep_mode '1'
	option wnm_sleep_mode_no_keys '1'
	option bss_transition '1'
	option proxy_arp '1'

config wifi-device 'radio1'
	option type 'mac80211'
	option path 'platform/soc@0/c000000.wifi+1'
	option band '2g'
	option channel '1'
	option htmode 'HT20'
	option country 'US'
	option cell_density '0'

config wifi-iface 'default_radio1'
	option device 'radio1'
	option network 'lan'
	option mode 'ap'
	option ssid 'Wifi24'
	option encryption 'psk2'
	option ifname 'WLAN24'
	option key '#Password24'
	option ieee80211r '1'
	option mobility_domain '2401'
	option ft_over_ds '0'
	option ft_psk_generate_local '1'
	option ieee80211k '1'
	option time_advertisement '2'
	option time_zone 'EST5EDT,M3.2.0,M11.1.0'
	option wnm_sleep_mode '1'
	option wnm_sleep_mode_no_keys '1'
	option bss_transition '1'
	option proxy_arp '1'

config wifi-device 'radio2'
	option type 'mac80211'
	option path 'platform/soc@0/c000000.wifi+2'
	option band '5g'
	option channel '132'
	option htmode 'HE80'
	option country 'US'
	option cell_density '0'

config wifi-iface 'default_radio2'
	option device 'radio2'
	option network 'lan'
	option mode 'mesh'
	option encryption 'sae'
	option mesh_id 'MeshBackhaul'
	option mesh_fwding '1'
	option mesh_rssi_threshold '0'
	option ifname 'WLANMesh'
	option disassoc_low_ack '0'
	option key '#MeshPassword'

config wifi-iface 'wifinet3'
	option device 'radio1'
	option mode 'ap'
	option ssid 'GuestAP'
	option encryption 'psk2'
	option isolate '1'
	option bridge_isolate '1'
	option ifname 'Guest24'
	option key '#GuestPassword'
	option ieee80211r '1'
	option mobility_domain '2402'
	option ft_over_ds '0'
	option ft_psk_generate_local '1'
	option ieee80211k '1'
	option time_advertisement '2'
	option time_zone 'EST5EDT,M3.2.0,M11.1.0'
	option wnm_sleep_mode '1'
	option wnm_sleep_mode_no_keys '1'
	option bss_transition '1'
	option proxy_arp '1'
	option network 'TrunkGuest'

config wifi-iface 'wifinet4'
	option device 'radio0'
	option mode 'ap'
	option ssid 'GuestAP'
	option encryption 'psk2'
	option isolate '1'
	option bridge_isolate '1'
	option ifname 'Guest5'
	option key '#GuestPassword'
	option ieee80211r '1'
	option mobility_domain '5002'
	option ft_over_ds '0'
	option ft_psk_generate_local '1'
	option ieee80211k '1'
	option time_advertisement '2'
	option time_zone 'EST5EDT,M3.2.0,M11.1.0'
	option wnm_sleep_mode '1'
	option wnm_sleep_mode_no_keys '1'
	option bss_transition '1'
	option proxy_arp '1'
	option network 'TrunkGuest'

The one device that’s giving me issues is on 24.10.2, all the reset are on the latest. I did a little more troubleshooting today (flash to vinalla openwrt, upgrading with file from another AP, upgrading to stock openwrt) and nothing is working. I’ll look into the partition thing a little more. I do remember one time trying to mess with them when I first got the MX4200 and maybe this is where I went wrong. Maybe I'll try Linksys stock and reflash that way. I’m not sure what else to do.

Edit:

Ope I bricked it trying write the kernel on both partitions. Now when I reboot its just solid blue.

Try to plug it in for 2-4 seconds and then plug it out. Do this 3,4 or 5 times to force it to boot from another partition.

In version 24.10.2 sysupgrade will fail if the second partition has OEM firmware. You need to install factory image using mtd: https://github.com/openwrt/openwrt/pull/13432/commits/46a2490e8f24a1ad47e53b0b4ee875fa3658f2c1

1 Like

I’ve tried many times, even holding the reset while booting to make it boot to another partition or recovery. Still nothing .

This is what i did when I bricked it. But I did custom firmware on both and now I'm pretty sure I’ve lost a way to connect with the device via ethernet. There isn’t much info on TFTP setup, but I tried what I knew and couldn’t get it to work but I could have been doing it wrong too.

To recover the device using tftp you need access to the serial console: https://openwrt.org/toh/linksys/mx5300#tftp_from_u-boot

I suggest you configure USB recovery options for the future: OpenWrt support for Linksys MX4200 - #2059 by lytr

1 Like

I have an issue with 1 of a pair of mx4200 v2 I have currently running 24.10-SNAPSHOT r28477-51594ca508 / LuCI openwrt-24.10 branch 25.037.68331~42f464c

NSS build I compiled earlier this year from Qosmio’s repo.

it appears 1 AP detects DFS radar for radio0 and shuts down. It has done this quite a bit recently.

My understanding is that it should check and renable / move chan but clearly it doesnt.

Currently manually set to chan 60 / 80mhz bandwidth

I am happy to scan and use a different channel but this also seems to indicate an issue with expected behavior too ?

Sun Nov 16 04:57:59 2025 daemon.notice hostapd: phy0-ap0: AP-STA-POLL-OK 68:4a:e9:30:b7:5e
Sun Nov 16 04:58:31 2025 daemon.notice hostapd: phy0-ap0: DFS-RADAR-DETECTED freq=5300 ht_enabled=0 chan_offset=0 chan_width=3 cf1=5290 cf2=0
Sun Nov 16 04:58:31 2025 daemon.notice hostapd: dfs_downgrade_bandwidth: no DFS channels left, waiting for NOP to finish
Sun Nov 16 04:58:31 2025 daemon.notice hostapd: phy0-ap0: AP-DISABLED
Sun Nov 16 04:58:31 2025 daemon.debug hostapd: phy0-ap0: STA 7a:cc:2c:14:e9:35 MLME: MLME-DEAUTHENTICATE.indication(7a:cc:2c:14:e9:35, 1)
Sun Nov 16 04:58:31 2025 daemon.notice hostapd: phy0-ap0: AP-STA-DISCONNECTED 7a:cc:2c:14:e9:35
Sun Nov 16 04:58:31 2025 daemon.debug hostapd: phy0-ap0: STA 68:4a:e9:30:b7:5e MLME: MLME-DEAUTHENTICATE.indication(68:4a:e9:30:b7:5e, 1)
Sun Nov 16 04:58:31 2025 daemon.notice hostapd: phy0-ap0: AP-STA-DISCONNECTED 68:4a:e9:30:b7:5e
Sun Nov 16 04:58:31 2025 daemon.debug hostapd: phy0-ap0: STA 04:99:bb:62:46:2a MLME: MLME-DEAUTHENTICATE.indication(04:99:bb:62:46:2a, 1)
Sun Nov 16 04:58:31 2025 daemon.notice hostapd: phy0-ap0: AP-STA-DISCONNECTED 04:99:bb:62:46:2a
Sun Nov 16 04:58:31 2025 daemon.err hostapd: 20/40 MHz: center segment 0 (=58) and center freq 1 (=5310) not in sync
Sun Nov 16 04:58:31 2025 daemon.err hostapd: Failed to set beacon parameters
Sun Nov 16 04:58:31 2025 daemon.err hostapd: 20/40 MHz: center segment 0 (=58) and center freq 1 (=5310) not in sync
Sun Nov 16 04:58:31 2025 daemon.err hostapd: Failed to set beacon parameters
Sun Nov 16 04:58:32 2025 kern.info kernel: [239239.498331] br-guest: port 2(phy0-ap1) entered disabled state
Sun Nov 16 04:58:32 2025 kern.info kernel: [239239.555737] ath11k c000000.wifi phy0-ap1 (unregistering): left allmulticast mode
Sun Nov 16 04:58:32 2025 kern.info kernel: [239239.555786] ath11k c000000.wifi phy0-ap1 (unregistering): left promiscuous mode
Sun Nov 16 04:58:32 2025 kern.info kernel: [239239.562227] br-guest: port 2(phy0-ap1) entered disabled state
Sun Nov 16 04:58:32 2025 daemon.notice hostapd: nl80211: Failed to remove interface phy0-ap1 from bridge br-guest: No such device
Sun Nov 16 04:58:32 2025 daemon.notice hostapd: nl80211: deinit ifname=phy0-ap0 disabled_11b_rates=0
Sun Nov 16 04:58:32 2025 kern.info kernel: [239239.775500] ath11k c000000.wifi phy0-ap0: left allmulticast mode
Sun Nov 16 04:58:32 2025 kern.info kernel: [239239.775565] ath11k c000000.wifi phy0-ap0: left promiscuous mode
Sun Nov 16 04:58:32 2025 kern.info kernel: [239239.780693] br-lan: port 5(phy0-ap0) entered disabled state
Sun Nov 16 04:58:32 2025 daemon.notice netifd: Network device 'phy0-ap1' link is down
Sun Nov 16 04:58:32 2025 daemon.notice netifd: Network device 'phy0-ap0' link is down
Sun Nov 16 04:58:32 2025 daemon.notice hostapd: phy0-ap0: interface state ENABLED->DISABLED
Sun Nov 16 04:58:32 2025 kern.info kernel: [239240.328580] br-lan: port 5(phy0-ap0) entered blocking state
Sun Nov 16 04:58:32 2025 kern.info kernel: [239240.328628] br-lan: port 5(phy0-ap0) entered disabled state
Sun Nov 16 04:58:32 2025 kern.info kernel: [239240.333375] ath11k c000000.wifi phy0-ap0: entered allmulticast mode
Sun Nov 16 04:58:32 2025 kern.info kernel: [239240.339480] ath11k c000000.wifi phy0-ap0: entered promiscuous mode
Sun Nov 16 04:58:32 2025 kern.info kernel: [239240.345403] br-lan: port 5(phy0-ap0) entered blocking state
Sun Nov 16 04:58:32 2025 kern.info kernel: [239240.351286] br-lan: port 5(phy0-ap0) entered forwarding state
Sun Nov 16 04:58:32 2025 daemon.notice hostapd: phy0-ap0: interface state DISABLED->COUNTRY_UPDATE
Sun Nov 16 04:58:32 2025 daemon.notice hostapd: phy0-ap0: interface state COUNTRY_UPDATE->HT_SCAN
Sun Nov 16 04:58:33 2025 kern.info kernel: [239240.655411] br-lan: port 5(phy0-ap0) entered disabled state
Sun Nov 16 04:58:33 2025 daemon.err hostapd: could not get valid channel
Sun Nov 16 04:58:33 2025 daemon.notice hostapd: phy0-ap0: interface state HT_SCAN->DFS