OpenWrt support for Linksys MX4200

oldbastard · August 15, 2024, 8:04pm

Are you using mesh? It has been solid for me and I get no retransmissions.

OldBastard@prodesk1:~$ iperf3 -R -c xxx.xxx.xxx.xxx
Connecting to host xxx.xxx.xxx.xxx, port 5201
Reverse mode, remote host xxx.xxx.xxx.xxx is sending
[  5] local xxx.xxx.xxx.xxx port 60724 connected to xxx.xxx.xxx.xxx port 5201
[ ID] Interval           Transfer     Bitrate
[  5]   0.00-1.00   sec  89.4 MBytes   750 Mbits/sec                  
[  5]   1.00-2.00   sec   106 MBytes   890 Mbits/sec                  
[  5]   2.00-3.00   sec   108 MBytes   904 Mbits/sec                  
[  5]   3.00-4.00   sec   109 MBytes   912 Mbits/sec                  
[  5]   4.00-5.00   sec   110 MBytes   920 Mbits/sec                  
[  5]   5.00-6.00   sec   108 MBytes   902 Mbits/sec                  
[  5]   6.00-7.00   sec   108 MBytes   905 Mbits/sec                  
[  5]   7.00-8.00   sec   108 MBytes   902 Mbits/sec                  
[  5]   8.00-9.00   sec   111 MBytes   933 Mbits/sec                  
[  5]   9.00-10.00  sec   109 MBytes   911 Mbits/sec                  
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bitrate         Retr
[  5]   0.00-10.01  sec  1.04 GBytes   896 Mbits/sec    0             sender
[  5]   0.00-10.00  sec  1.04 GBytes   893 Mbits/sec                  receiver

OldBastard@prodesk1:~$ iperf3  -c xxx.xxx.xxx.xxx
Connecting to host xxx.xxx.xxx.xxx, port 5201
[  5] local xxx.xxx.xxx.xxx port 41216 connected to xxx.xxx.xxx.xxx port 5201
[ ID] Interval           Transfer     Bitrate         Retr  Cwnd
[  5]   0.00-1.00   sec   100 MBytes   839 Mbits/sec    0   1.71 MBytes       
[  5]   1.00-2.00   sec   110 MBytes   923 Mbits/sec    0   2.48 MBytes       
[  5]   2.00-3.00   sec   110 MBytes   923 Mbits/sec    0   3.07 MBytes       
[  5]   3.00-4.00   sec   109 MBytes   912 Mbits/sec    0   3.24 MBytes       
[  5]   4.00-5.00   sec   111 MBytes   933 Mbits/sec    0   3.45 MBytes       
[  5]   5.00-6.00   sec   111 MBytes   933 Mbits/sec    0   3.45 MBytes       
[  5]   6.00-7.00   sec   110 MBytes   923 Mbits/sec    0   3.63 MBytes       
[  5]   7.00-8.00   sec   108 MBytes   902 Mbits/sec    0   2.73 MBytes       
[  5]   8.00-9.00   sec   108 MBytes   902 Mbits/sec    0   2.94 MBytes       
[  5]   9.00-10.00  sec   108 MBytes   902 Mbits/sec    0   3.08 MBytes       
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bitrate         Retr
[  5]   0.00-10.00  sec  1.06 GBytes   909 Mbits/sec    0             sender
[  5]   0.00-10.01  sec  1.06 GBytes   907 Mbits/sec                  receiver

This is via mesh from first floor to second floor and client connected to AP on second floor. It works great however, as I wanted to change some setting on some of my AP, I did notice that I could not reach some of the AP.

If I am connected to AP2, I can reach AP2 but I cannot reach AP3, AP4, AP5, AP6 or AP7. I can reach internet and everything on my lan except for the AP's on mesh that I am not directly connected to. If I plug into the switch or a non meshed AP, I can reach the master node in the mesh which is hard wired and this is the one forwarding mesh traffic but I cannot reach any of the AP's on the mesh. Also if I SSH to one of the AP's that is not the master node, I cannot reach out to the internet, nor will it do dns translation. The routing table has the gateway and DNS is populated. Any clients connected works fine but it is the AP's in the mesh that are having issues.

DO mesh require ipv6 to work? I have ipv6 disabled on my main router and disabled on all AP's. Not sure if ipv6 is needed for routing since I do notice the mesh AP get private ipv6 on phy2-mesh0.

#hard wired AP master node
config wifi-iface 'default_radio2'
        option device 'radio2'
        option network 'lan'
        option mode 'mesh'
        option encryption 'sae'
        option key 'xxxxxxxxxxxxx'
        option mesh_id 'testmesh'
        option mesh_fwding '1'
        option mesh_rssi_threshold '-65'
        option mesh_gate_announcements '1'
        option mesh_hwmp_rootmode '2'
        option mesh_max_peer_links '16'

# all other AP's
config wifi-iface 'default_radio2'
        option device 'radio2'
        option network 'lan'
        option mode 'mesh'
        option encryption 'sae'
        option key 'xxxxxxxxxxxxxxx'
        option mesh_id 'testmesh'
        option mesh_fwding '0'
        option mesh_rssi_threshold '-65'

I am at a loss here so if anyone can help, I will certainly appreciate it.

ps. only the hard wired AP is forwarding mesh traffic and all the mesh interfaces are set to use lan as network.

Tour · August 15, 2024, 8:23pm

Thank you so much for your help.
The horrible device might just have both firmwares on the partitions. I reset it that way and it did not change. I got a new one today and I have that one that still doesn't do anything correctly, I thought maybe OFW would be able to fix it or connect to it in a certain way, do I need to tear it down to program it with serial?

flyingdida · August 15, 2024, 8:40pm

Yes, I’m experiencing the same issue as you. Despite connecting the serial, I still can’t figure it out.

The output shown is from the unit I flashed and bricked. I’m hoping someone can help to get the HomeWRK unit working.

It seems like it is different from the other 4300 units.

Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00163
S - IMAGE_VARIANT_STRING=HAACANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x000002e5
B -       203 - PBL, Start
B -      2740 - bootable_media_detect_entry, Start
B -      3287 - bootable_media_detect_success, Start
B -      3291 - elf_loader_entry, Start
B -      7460 - auth_hash_seg_entry, Start
B -      7708 - auth_hash_seg_exit, Start
B -     69428 - elf_segs_hash_verify_entry, Start
B -    132283 - PBL, End
B -    219630 - SBL1, Start
B -    299022 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4
B -    308904 - pm_device_init, Start
B -    491416 - PM_SET_VAL:Skip
D -    180560 - pm_device_init, Delta
B -    493825 - pm_driver_init, Start
D -      5337 - pm_driver_init, Delta
B -    500139 - clock_init, Start
D -      2135 - clock_init, Delta
B -    504195 - boot_flash_init, Start
D -     18025 - boot_flash_init, Delta
B -    525942 - boot_config_data_table_init, Start
D -      4209 - boot_config_data_table_init, Delta - (575 Bytes)
B -    533384 - Boot Setting :  0x00000618
B -    537410 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:13
B -    544333 - sbl1_ddr_set_params, Start
B -    548176 - CPR configuration: 0x30c
B -    551653 - cpr_init, Start
B -    554429 - Rail:0 Mode: 5 Voltage: 808000
B -    559583 - CL CPR settled at 760000mV
B -    562420 - Rail:1 Mode: 5 Voltage: 880000
B -    566598 - Rail:1 Mode: 7 Voltage: 904000
D -     16470 - cpr_init, Delta
B -    573461 - Pre_DDR_clock_init, Start
B -    577487 - Pre_DDR_clock_init, End
B -    580872 - DDR Type : PCDDR3
B -    586637 - do ddr sanity test, Start
D -      1037 - do ddr sanity test, Delta
B -    591395 - DDR: Start of HAL DDR Boot Training
B -    596031 - DDR: End of HAL DDR Boot Training
B -    601795 - DDR: Checksum to be stored on flash is 241753929
B -    612013 - Image Load, Start
D -    216672 - QSEE Image Loaded, Delta - (1376536 Bytes)
B -    828776 - Image Load, Start
D -        61 - SEC Image Loaded, Delta - (0 Bytes)
B -    836432 - Image Load, Start
D -     12047 - DEVCFG Image Loaded, Delta - (26148 Bytes)
B -    848540 - Image Load, Start
D -     23058 - RPM Image Loaded, Delta - (86660 Bytes)
B -    871659 - Image Load, Start
D -     89914 - APPSBL Image Loaded, Delta - (571732 Bytes)
B -    961695 - QSEE Execution, Start
D -        61 - QSEE Execution, Delta
B -    967490 - USB D+ check, Start
D -         0 - USB D+ check, Delta
B -    973895 - SBL1, End
D -    756553 - SBL1, Delta
S - Flash Throughput, 6895 KB/s  (2062323 Bytes,  299103 us)
S - DDR Frequency, 466 MHz
S - Core 0 Frequency, 800 MHz


U-Boot 2016.01-0.30.256.211028_11.4.1cs (Apr 22 2021 - 04:33:35 +0000)

DRAM:  smem ram ptable found: ver: 1 len: 4
2 GiB
NAND:  Could not find nand_gpio in dts, using defaults
ONFI device found
ID = 1681a301
Vendor = 1
Device = a3
qpic_nand: changing oobsize to 128 from 256 bytes
SF: Unsupported flash IDs: manuf ff, jedec ffff, ext_jedec ffff
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
1024 MiB
MMC:   <NULL>: 0
In:    serial@78B3000
Out:   serial@78B3000
Err:   serial@78B3000
machid: 801000d
Card did not respond to voltage select!
eth3 MAC Address from ART is not valid
eth4 MAC Address from ART is not valid
eth5 MAC Address from ART is not valid
Hit any key to stop autoboot:  0

NAND read: device 0 offset 0x1240000, size 0x800000
 8388608 bytes read: OK
## Loading kernel from FIT Image at 44000000 ...
   Using 'config@1' configuration
   Trying 'kernel@1' kernel subimage
     Description:  ARM OpenWrt Linux-4.4.60
     Type:         Kernel Image
     Compression:  gzip compressed
     Data Start:   0x440000e4
     Data Size:    3752947 Bytes = 3.6 MiB
     Architecture: ARM
     OS:           Linux
     Load Address: 0x41208000
     Entry Point:  0x41208000
     Hash algo:    crc32
     Hash value:   ce72a6f8
     Hash algo:    sha1
     Hash value:   943e495a93c471f74eafa257a6dc684f1089ec5a
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 44000000 ...
   Using 'config@1' configuration
   Trying 'fdt@1' fdt subimage
     Description:  ARM OpenWrt tortuga device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x4439460c
     Data Size:    79756 Bytes = 77.9 KiB
     Architecture: ARM
     Hash algo:    crc32
     Hash value:   41c9c202
     Hash algo:    sha1
     Hash value:   0045dee491f74bbc8972d30c790348226006fa60
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x4439460c
   Uncompressing Kernel Image ... OK
   Loading Device Tree to 4a3e9000, end 4a3ff78b ... OK
Unable to update property /soc/dp6:mac-address, err=FDT_ERR_NOTFOUND
Unable to update property /soc/dp6:local-mac-address, err=FDT_ERR_NOTFOUND
Unable to update property /soc/dp6:mac-address, err=FDT_ERR_NOTFOUND
Unable to update property /soc/dp6:local-mac-address, err=FDT_ERR_NOTFOUND
Using machid 0x801000d from environment

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 4.4.60 (root@ip-10-0-0-150) (gcc version 5.2.0 (OpenWrt GCC 5.2.0 998fe11+r49254) ) #1 SMP Thu Feb 22 15:05:07 PST 2024
[    0.000000] CPU: ARMv7 Processor [410fd034] revision 4 (ARMv7), cr=10c0383d
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] Machine model: Qualcomm Technologies, Inc. IPQ807x/AP-OAK03
[    0.000000] Ignoring memory range 0x40000000 - 0x41000000
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv1.0 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.
[    0.000000] PERCPU: Embedded 12 pages/cpu @eefaa000 s19264 r8192 d21696 u49152
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 498688
[    0.000000] Kernel command line: init=/sbin/init rootfstype=squashfs ubi.mtd=22,2048 ubi.block=0,0 root=/dev/ubiblock0_0 rootwait ro swiotlb=1 coherent_pool=2M
[    0.000000] PID hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Dentry cache hash table entries: 262144 (order: 8, 1048576 bytes)
[    0.000000] Inode-cache hash table entries: 131072 (order: 7, 524288 bytes)
[    0.000000] Memory: 1983288K/2009088K available (5217K kernel code, 311K rwdata, 1772K rodata, 264K init, 362K bss, 25800K reserved, 0K cma-reserved, 245760K highmem)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
[    0.000000]     vmalloc : 0xf0800000 - 0xff800000   ( 240 MB)
[    0.000000]     lowmem  : 0x80000000 - 0xf0000000   (1792 MB)
[    0.000000]     pkmap   : 0x7fe00000 - 0x80000000   (   2 MB)
[    0.000000]     modules : 0x7f000000 - 0x7fe00000   (  14 MB)
[    0.000000]       .text : 0x80208000 - 0x808db6dc   (6990 kB)
[    0.000000]       .init : 0x808dc000 - 0x8091e000   ( 264 kB)
[    0.000000]       .data : 0x8091e000 - 0x8096beb8   ( 312 kB)
[    0.000000]        .bss : 0x8096e000 - 0x809c8818   ( 363 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000]  Build-time adjustment of leaf fanout to 32.
[    0.000000] NR_IRQS:16 nr_irqs:16 16
[    0.000000] Architected cp15 timer(s) running at 19.20MHz (virt).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x46d987e47, max_idle_ns: 440795202767 ns
[    0.000005] sched_clock: 56 bits at 19MHz, resolution 52ns, wraps every 4398046511078ns
[    0.000016] Switching to timer-based delay loop, resolution 52ns
[    0.000681] Calibrating delay loop (skipped), value calculated using timer frequency.. 38.40 BogoMIPS (lpj=192000)
[    0.000693] pid_max: default: 32768 minimum: 301
[    0.000770] Mount-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000779] Mountpoint-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.001246] CPU: Testing write buffer coherency: ok
[    0.001445] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
[    0.001496] Setting up static identity map for 0x41208280 - 0x412082d8
[    0.005028] MSM Memory Dump base table set up
[    0.005050] MSM Memory Dump apps data table set up
[    0.005898] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
[    0.006421] CPU2: thread -1, cpu 2, socket 0, mpidr 80000002
[    0.006938] CPU3: thread -1, cpu 3, socket 0, mpidr 80000003
[    0.006987] Brought up 4 CPUs
[    0.007005] SMP: Total of 4 processors activated (153.60 BogoMIPS).
[    0.007010] CPU: All CPU(s) started in SVC mode.
[    0.026287] VFP support v0.3: implementor 41 architecture 3 part 40 variant 3 rev 4
[    0.026579] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.026603] futex hash table entries: 1024 (order: 4, 65536 bytes)
[    0.026982] pinctrl core: initialized pinctrl subsystem
[    0.027981] NET: Registered protocol family 16
[    0.029059] DMA: preallocated 2048 KiB pool for atomic coherent allocations
[    0.049847] cpuidle: using governor ladder
[    0.079864] cpuidle: using governor menu
[    0.080050] NET: Registered protocol family 42
[    0.081858] Soc version is not 1, changing clock offsets
[    0.089206] irq: no irq domain found for /soc/smp2p-wcss/slave-kernel !
[    0.091486] irq: no irq domain found for /soc/smp2p-wcss/slave-kernel !
[    0.107219] hw-breakpoint: found 5 (+1 reserved) breakpoint and 4 watchpoint registers.
[    0.107229] hw-breakpoint: maximum watchpoint size is 8 bytes.
[    0.107743] ipq807x-pinctrl 1000000.pinctrl: invalid group "gpio54" for function "pta1_1"
[    0.107771] ipq807x-pinctrl 1000000.pinctrl: invalid group "gpio55" for function "pta1_2"
[    0.107795] ipq807x-pinctrl 1000000.pinctrl: invalid group "gpio56" for function "pta1_0"
[    0.108934] CPU: IPQ8174, SoC Version: 2.0
[    0.109418] qcom,cpr3-npu-regulator a4000.npu-cpr: NPU CPR valid fuse count: 2
[    0.109776] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 2
[    0.110382] spmi spmi-0: PMIC Arb Version-2 (0x20010000)
[    0.111984] IPC logging disabled
[    0.111991] IPC logging disabled
[    0.111995] IPC logging disabled
[    0.112000] IPC logging disabled
[    0.112004] IPC logging disabled
[    0.112227] sps:sps is ready.
[    0.141839] SCSI subsystem initialized
[    0.142031] pps_core: LinuxPPS API ver. 1 registered
[    0.142038] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    0.142064] PTP clock support registered
[    0.144461] clocksource: Switched to clocksource arch_sys_counter
[    0.148058] NET: Registered protocol family 2
[    0.148495] TCP established hash table entries: 16384 (order: 4, 65536 bytes)
[    0.148653] TCP bind hash table entries: 16384 (order: 5, 131072 bytes)
[    0.148927] TCP: Hash tables configured (established 16384 bind 16384)
[    0.148975] UDP hash table entries: 1024 (order: 3, 32768 bytes)
[    0.149037] UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes)
[    0.149216] NET: Registered protocol family 1
[    0.150474] hw perfevents: enabled with armv7_cortex_a7 PMU driver, 7 counters available
[    0.157924] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.161281] Key type asymmetric registered
[    0.161295] Asymmetric key parser 'x509' registered
[    0.161364] bounce: pool size: 64 pages
[    0.161380] io scheduler noop registered
[    0.161392] io scheduler deadline registered (default)
[    0.163052] qcom-pcie: probe of 20000000.pci failed with error -38
[    0.163179] qcom-pcie: probe of 10000000.pci failed with error -38
[    0.167720] msm_rpm_log_probe: OK
[    0.168072] msm-dcc b3000.dcc: DCC XPU is not specified
[    0.168323] msm-dcc b3000.dcc: jiffies_64: 0xffff8ae1, cntvct_64: 0x7295a53
[    0.168335] msm-dcc b3000.dcc: gcnt_hi: 0x00000000(0xf0a6e004)
[    0.168346] msm-dcc b3000.dcc: gcnt_lo: 0x07295c29(0xf0a6e000)
[    0.168974] TZ SMMU State: SMMU Stage2 Enabled
[    0.169022] TZ Log : Will warn on Access Violation, as paniconaccessviolation is not set
[    0.170798] msm_serial 78b3000.serial: msm_serial: detected port #0
[    0.170835] msm_serial 78b3000.serial: uartclk = 3686400
[    0.170867] 78b3000.serial: ttyMSM0 at MMIO 0x78b3000 (irq = 23, base_baud = 230400) is a MSM
[    0.170884] msm_serial: console setup on port #0
[    0.828766] console [ttyMSM0] enabled
[    0.833824] msm_serial 78b1000.serial: msm_serial: detected port #1
[    0.837041] msm_serial 78b1000.serial: uartclk = 19200000
[    0.843096] 78b1000.serial: ttyMSM1 at MMIO 0x78b1000 (irq = 24, base_baud = 1200000) is a MSM
[    0.849037] msm_serial: driver initialized
[    0.857490] msm_serial_hsl_init: driver initialized
[    0.866730] loop: module loaded
[    0.868467] QPIC controller hw version Major:1, Minor:5
[    0.869439] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xa3
[    0.874327] nand: ONFI 10-Compliant AMD/Spansion S34MS08G2
[    0.880948] nand: 1024 MiB, SLC, erase size: 256 KiB, page size: 4096, OOB size: 256
[    0.886338] 24 ofpart partitions found on MTD device qcom_nand.0
[    0.894118] Creating 24 MTD partitions on "qcom_nand.0":
[    0.900120] 0x000000000000-0x000000100000 : "0:SBL1"
[    0.906667] 0x000000100000-0x000000200000 : "0:MIBIB"
[    0.911570] 0x000000200000-0x000000280000 : "0:BOOTCONFIG"
[    0.916322] 0x000000280000-0x000000300000 : "0:BOOTCONFIG1"
[    0.921563] 0x000000300000-0x000000600000 : "0:QSEE"
[    0.928224] 0x000000600000-0x000000900000 : "0:QSEE_1"
[    0.933418] 0x000000900000-0x000000980000 : "0:DEVCFG"
[    0.937255] 0x000000980000-0x000000a00000 : "0:DEVCFG_1"
[    0.942359] 0x000000a00000-0x000000a80000 : "0:APDP"
[    0.947870] 0x000000a80000-0x000000b00000 : "0:APDP_1"
[    0.952810] 0x000000b00000-0x000000b80000 : "0:RPM"
[    0.957779] 0x000000b80000-0x000000c00000 : "0:RPM_1"
[    0.962499] 0x000000c00000-0x000000c80000 : "0:CDT"
[    0.967688] 0x000000c80000-0x000000d00000 : "0:CDT_1"
[    0.972355] 0x000000d00000-0x000000d80000 : "0:APPSBLENV"
[    0.977619] 0x000000d80000-0x000000e80000 : "0:APPSBL"
[    0.983214] 0x000000e80000-0x000000f80000 : "0:APPSBL_1"
[    0.988291] 0x000000f80000-0x000001000000 : "0:ART"
[    0.993515] 0x000001000000-0x000001080000 : "0:ETHPHYFW"
[    0.998143] 0x000001080000-0x000002980000 : "0:WIFIFW"
[    1.015010] 0x000002980000-0x000002a00000 : "devinfo"
[    1.015949] 0x000002a00000-0x000004a00000 : "tzcfg"
[    1.034164] 0x000004a00000-0x000022500000 : "rootfs"
[    1.252273] mtd: device 22 (rootfs) set to be root filesystem
[    1.252308] 0x000022500000-0x000040000000 : "rootfs_1"
[    1.696399] qca-mdio 90000.mdio: Could not find phy-reset-gpio
[    1.696533] libphy: qca_mdio: probed
[    1.702103] qca-mdio 90000.mdio: qca-mdio driver was registered
[    1.705068] PPP generic driver version 2.4.2
[    1.710617] PPP BSD Compression module registered
[    1.715029] PPP Deflate Compression module registered
[    1.719619] NET: Registered protocol family 24
[    1.724655] PPTP driver version 0.8.5
[    1.729181] Unable to create IPC log context!
[    1.733096] Skip QCA8074V1 in V2 platform
[    1.737336] cnss[2]: INFO: Platform driver probed successfully. plat ee3d8010 tgt 0xfffe
[    1.741378] i2c /dev entries driver
[    1.784978] device-mapper: ioctl: 4.34.0-ioctl (2015-10-28) initialised: dm-devel@redhat.com
[    1.785419] sdhci: Secure Digital Host Controller Interface driver
[    1.792475] sdhci: Copyright(c) Pierre Ossman
[    1.798484] sdhci-pltfm: SDHCI platform and OF driver helper
[    1.803171] leds-pca963x 0-0062: PCA963X_HW_BLINK ON
[    1.809712] leds-pca963x 0-0062: PCA963X LED initialize ok done
[    1.814134] qcom_ice_get_device_tree_data: No vdd-hba-supply regulator, assuming not needed
[    1.819280] ICE IRQ = 26
[    1.828214]
[    1.828214] Version Rollback Feature Disabled
[    1.832355] qcom-q6v5-wcss-pil cd00000.qcom_q6v5_wcss: ssr registeration success qcom_q6v5_wcss
[    1.836070] remoteproc remoteproc0: cd00000.qcom_q6v5_wcss is available
[    1.845083] SPMI VADC - Min ch: 0 Max ch: 15
[    1.852988] u32 classifier
[    1.855678]     input device check on
[    1.858181]     Actions configured
[    1.861940] Netfilter messages via NETLINK v0.30.
[    1.865247] nfnl_acct: registering with nfnetlink.
[    1.870037] nf_conntrack version 0.5.0 (16384 buckets, 65536 max)
[    1.875125] ctnetlink v0.93: registering with nfnetlink.
[    1.880885] nf_conntrack_rtsp v0.7 loading
[    1.886705] gre: GRE over IPv4 demultiplexor driver
[    1.890133] ip_gre: GRE over IPv4 tunneling driver
[    1.895959] nf_nat_rtsp v0.7 loading
[    1.899796] ip_tables: (C) 2000-2006 Netfilter Core Team
[    1.904282] NET: Registered protocol family 10
[    1.909675] ip6_tables: (C) 2000-2006 Netfilter Core Team
[    1.913264] sit: IPv6 over IPv4 tunneling driver
[    1.919684] NET: Registered protocol family 17
[    1.923241] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
[    1.927515] Bridge firewalling registered
[    1.940235] Ebtables v2.0 registered
[    1.944284] l2tp_core: L2TP core driver, V2.0
[    1.947795] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[    1.952029] l2tp_netlink: L2TP netlink interface
[    1.956751] 8021q: 802.1Q VLAN Support v1.8
[    1.961737] Registering SWP/SWPB emulation handler
[    1.966489] qcom,cpr3-npu-regulator a4000.npu-cpr: NPU CPR valid fuse count: 2
[    1.970424] pmd9655_s4: supplied by e-smps1-reg
[    1.977648] cpr3_mem_acc_init: npu: not using memory accelerator regulator
[    1.981888] npu_corner: fused      NOM: open-loop= 792000 uV
[    1.988844] npu_corner: fused    TURBO: open-loop= 856000 uV
[    1.994706] npu_corner: fused      NOM: open-loop= 792000 uV
[    2.000287] npu_corner: fused    TURBO: open-loop= 856000 uV
[    2.005973] npu_corner: Normal and Cold condition init done. Default to normal.
[    2.011907] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 2
[    2.018723] pmd9655_s3: supplied by e-smps1-reg
[    2.026030] cpr4_ipq807x_apss_read_fuse_data: apc_corner: speed bin = 0
[    2.030413] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR fusing revision = 1
[    2.037024] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR misc fuse value = 0
[    2.044674] cpr4_ipq807x_apss_read_fuse_data: apc_corner: Voltage boost fuse config = 0 boost = disable
[    2.052168] cpr3_mem_acc_init: apc: not using memory accelerator regulator
[    2.061328] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused      SVS: open-loop= 704000 uV
[    2.068276] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused      NOM: open-loop= 808000 uV
[    2.078319] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused      SVS: quot[ 7]= 714, quot_offset[ 7]=   0
[    2.088073] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused      NOM: quot[ 7]= 907, quot_offset[ 7]= 190
[    2.099014] cpr3_regulator_init_ctrl: apc: Default CPR mode = closed-loop
[    2.110674] cpufreq: cpufreq_online: CPU0: Running at unlisted freq: 800000 KHz
[    2.116750] cpufreq: cpufreq_online: CPU0: Unlisted initial frequency changed to: 1017600 KHz
[    2.123960] ubi0: attaching mtd22
[    2.132418] ubi0 warning: io_init: EC and VID headers are in the same minimal I/O unit, switch to read-only mode
[    2.138939] random: nonblocking pool is initialized
[    2.468048] ubi0 error: validate_ec_hdr: bad VID header offset 4096, expected 2048
[    2.468071] ubi0 error: validate_ec_hdr: bad EC header
[    2.474502] Erase counter header dump:
[    2.479613]  magic          0x55424923
[    2.483346]  version        1
[    2.487084]  ec             0
[    2.490116]  vid_hdr_offset 4096
[    2.493067]  data_offset    8192
[    2.496373]  image_seq      1722802805
[    2.499579]  hdr_crc        0x8b030623
[    2.503137] erase counter header hexdump:
[    2.506896] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.4.60 #1
[    2.510955] Hardware name: Generic DT based system
[    2.516701] [<8021f8b4>] (unwind_backtrace) from [<8021c214>] (show_stack+0x10/0x14)
[    2.521556] [<8021c214>] (show_stack) from [<803e39dc>] (dump_stack+0x7c/0x9c)
[    2.529455] [<803e39dc>] (dump_stack) from [<804dadc4>] (validate_ec_hdr+0xe4/0x108)
[    2.536486] [<804dadc4>] (validate_ec_hdr) from [<804dbb28>] (ubi_io_read_ec_hdr+0x27c/0x2f0)
[    2.544385] [<804dbb28>] (ubi_io_read_ec_hdr) from [<804e0ecc>] (ubi_attach+0x1a0/0x131c)
[    2.552804] [<804e0ecc>] (ubi_attach) from [<804d54e0>] (ubi_attach_mtd_dev+0x86c/0xe18)
[    2.560966] [<804d54e0>] (ubi_attach_mtd_dev) from [<808f25d8>] (ubi_init+0xe4/0x2bc)
[    2.569126] [<808f25d8>] (ubi_init) from [<80213f70>] (do_one_initcall+0x1b4/0x1f8)
[    2.576851] [<80213f70>] (do_one_initcall) from [<808dcdf0>] (kernel_init_freeable+0x11c/0x1ec)
[    2.584316] [<808dcdf0>] (kernel_init_freeable) from [<8020e6ec>] (kernel_init+0x8/0xfc)
[    2.592996] [<8020e6ec>] (kernel_init) from [<80209be8>] (ret_from_fork+0x14/0x2c)
[    2.601339] ubi0 error: ubi_io_read_ec_hdr: validation failed for PEB 510
[    2.608817] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd22, error -22
[    2.615585] UBI error: cannot attach mtd22
[    2.622674] UBI: block: can't open volume on ubi0_0, err=-19[    2.627317] input: soc:gpio_keys as /devices/platform/soc/soc:gpio_keys/input/input0
[    2.632189] hctosys: unable to open rtc device (rtc0)
[    2.645498] pmd9655_ldo11: disabling
[    2.646229] Waiting for root device /dev/ubiblock0_0...

lytr · August 15, 2024, 9:01pm

Are you able to interrupt autoboot in u-boot?

If so, you can try booting the initramfs image from USB:

usb start
usbboot $loadaddr 0
bootm $loadaddr

USB preparation:

dd bs=1M if=openwrt-qualcommax-ipq807x-linksys_mx4300-initramfs-uImage.itb of=/dev/sdX

You have different u-boot version and partitions layout.
There is no auto_recovery feature in u-boot. Partitions u_env and s_env are missing:

[    0.900120] 0x000000000000-0x000000100000 : "0:SBL1"
[    0.906667] 0x000000100000-0x000000200000 : "0:MIBIB"
[    0.911570] 0x000000200000-0x000000280000 : "0:BOOTCONFIG"
[    0.916322] 0x000000280000-0x000000300000 : "0:BOOTCONFIG1"
[    0.921563] 0x000000300000-0x000000600000 : "0:QSEE"
[    0.928224] 0x000000600000-0x000000900000 : "0:QSEE_1"
[    0.933418] 0x000000900000-0x000000980000 : "0:DEVCFG"
[    0.937255] 0x000000980000-0x000000a00000 : "0:DEVCFG_1"
[    0.942359] 0x000000a00000-0x000000a80000 : "0:APDP"
[    0.947870] 0x000000a80000-0x000000b00000 : "0:APDP_1"
[    0.952810] 0x000000b00000-0x000000b80000 : "0:RPM"
[    0.957779] 0x000000b80000-0x000000c00000 : "0:RPM_1"
[    0.962499] 0x000000c00000-0x000000c80000 : "0:CDT"
[    0.967688] 0x000000c80000-0x000000d00000 : "0:CDT_1"
[    0.972355] 0x000000d00000-0x000000d80000 : "0:APPSBLENV"
[    0.977619] 0x000000d80000-0x000000e80000 : "0:APPSBL"
[    0.983214] 0x000000e80000-0x000000f80000 : "0:APPSBL_1"
[    0.988291] 0x000000f80000-0x000001000000 : "0:ART"
[    0.993515] 0x000001000000-0x000001080000 : "0:ETHPHYFW"
[    0.998143] 0x000001080000-0x000002980000 : "0:WIFIFW"
[    1.015010] 0x000002980000-0x000002a00000 : "devinfo"
[    1.015949] 0x000002a00000-0x000004a00000 : "tzcfg"
[    1.034164] 0x000004a00000-0x000022500000 : "rootfs"
[    1.252308] 0x000022500000-0x000040000000 : "rootfs_1"

Tour · August 15, 2024, 9:44pm

Very interesting, did you open yours to try to program it or is that through USB? Are you going to give up or keep trying on this one? They are on sale for $20 on woot again

TicoMonster · August 16, 2024, 3:33am

sold out now

oldbastard · August 16, 2024, 7:33am

Well, I figured out what my issue was. Guys learn from my mistake. When you restore a configuration backup. Make sure you restore the right one Basically I restored the wrong one and it had duplicate MAC's from another AP. This is what happens when your family takes precedent and you cannot work in your AP's until 3am.

cr4zymanz0r · August 16, 2024, 2:33pm

Back for $20 in a different link https://computers.woot.com/offers/linksys-ln1301-wifi-6-router-4
EDIT: weird, it's the same link but just refreshing the page I already had still showed out of stock until I found it again navigating their website

cool_guy · August 16, 2024, 3:20pm

Hope it lasts until I get my first one delivered before ordering the second one....

segacorpceo · August 16, 2024, 5:10pm

When the mx4300 goes mainline will that fix the kernel being out of date? I cant install install any software in luci? Any time frame when it will go mainline?

flyingdida · August 16, 2024, 6:15pm

yes, usb boot works, I can get an ip, SSH and output log.

but i can not open GUI. Error msg "ERR_CONNECTION_REFUSED"

and SSH works

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0-2540ea6
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:~# uci show network
network.loopback=interface
network.loopback.device='lo'
network.loopback.proto='static'
network.loopback.ipaddr='127.0.0.1'
network.loopback.netmask='255.0.0.0'
network.globals=globals
network.globals.ula_prefix='fd0a:1bf3:3c1f::/48'
network.@device[0]=device
network.@device[0].name='br-lan'
network.@device[0].type='bridge'
network.@device[0].ports='lan1' 'lan2' 'lan3'
network.lan=interface
network.lan.device='br-lan'
network.lan.proto='static'
network.lan.ipaddr='192.168.1.1'
network.lan.netmask='255.255.255.0'
network.lan.ip6assign='60'
network.wan=interface
network.wan.device='wan'
network.wan.proto='dhcp'
network.wan6=interface
network.wan6.device='wan'
network.wan6.proto='dhcpv6'

root@OpenWrt:~# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: miireg: <> mtu 0 qdisc noop state DOWN qlen 1000
    link/generic
3: wan: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN qlen 1000
    link/ether d8:ec:5e:73:de:28 brd ff:ff:ff:ff:ff:ff
4: lan3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master br-lan state UP qlen 1000
    link/ether d8:ec:5e:73:de:29 brd ff:ff:ff:ff:ff:ff
5: lan2: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq master br-lan state DOWN qlen 1000
    link/ether 42:62:7f:f7:cc:31 brd ff:ff:ff:ff:ff:ff
6: lan1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq master br-lan state DOWN qlen 1000
    link/ether 8a:7a:b0:b6:f7:3a brd ff:ff:ff:ff:ff:ff
7: br-lan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
    link/ether 8a:7a:b0:b6:f7:3a brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.1/24 brd 192.168.1.255 scope global br-lan
       valid_lft forever preferred_lft forever
    inet6 fd0a:1bf3:3c1f::1/60 scope global noprefixroute
       valid_lft forever preferred_lft forever
    inet6 fe80::887a:b0ff:feb6:f73a/64 scope link
       valid_lft forever preferred_lft forever
root@OpenWrt:~#

what is the next. thanks

here is the output from usb boot



Starting kernel ...

Jumping to AARCH64 kernel via monitor
[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[    0.000000] Linux version 6.6.43 (runner@fv-az1778-452) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 13.3.0 r0-2540ea6) 13.3.0, GNU ld (GNU Binutils) 2.42) #0 SMP Sun Aug  4 20:20:05 2024
[    0.000000] Machine model: Linksys MX4300
[    0.000000] OF: reserved mem: 0x0000000040000000..0x0000000040ffffff (16384 KiB) nomap non-reusable nss@40000000
[    0.000000] OF: reserved mem: 0x000000004a400000..0x000000004a5fffff (2048 KiB) nomap non-reusable tzapp@4a400000
[    0.000000] OF: reserved mem: 0x000000004a600000..0x000000004a9fffff (4096 KiB) nomap non-reusable bootloader@4a600000
[    0.000000] OF: reserved mem: 0x000000004aa00000..0x000000004aafffff (1024 KiB) nomap non-reusable sbl@4aa00000
[    0.000000] OF: reserved mem: 0x000000004ab00000..0x000000004abfffff (1024 KiB) nomap non-reusable smem@4ab00000
[    0.000000] OF: reserved mem: 0x000000004ac00000..0x000000004affffff (4096 KiB) nomap non-reusable memory@4ac00000
[    0.000000] OF: reserved mem: 0x000000004b000000..0x0000000050efffff (97280 KiB) nomap non-reusable wcnss@4b000000
[    0.000000] OF: reserved mem: 0x0000000050f00000..0x0000000050ffffff (1024 KiB) nomap non-reusable q6_etr_dump@50f00000
[    0.000000] OF: reserved mem: 0x0000000051000000..0x00000000510fffff (1024 KiB) nomap non-reusable m3_dump@51000000
[    0.000000] Zone ranges:
[    0.000000]   DMA      [mem 0x0000000040000000-0x00000000bfffffff]
[    0.000000]   DMA32    empty
[    0.000000]   Normal   empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000040000000-0x0000000040ffffff]
[    0.000000]   node   0: [mem 0x0000000041000000-0x000000004a3fffff]
[    0.000000]   node   0: [mem 0x000000004a400000-0x00000000510fffff]
[    0.000000]   node   0: [mem 0x0000000051100000-0x00000000bfffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x00000000bfffffff]
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv1.0 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.
[    0.000000] psci: SMC Calling Convention v1.0
[    0.000000] percpu: Embedded 18 pages/cpu s35240 r8192 d30296 u73728
[    0.000000] Detected VIPT I-cache on CPU0
[    0.000000] alternatives: applying boot alternatives
[    0.000000] Kernel command line: console=ttyMSM0,115200n8
[    0.000000] Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear)
[    0.000000] Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear)
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 516096
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] software IO TLB: SWIOTLB bounce buffer size adjusted to 2MB
[    0.000000] software IO TLB: area num 4.
[    0.000000] software IO TLB: mapped [mem 0x00000000bd600000-0x00000000bd800000] (2MB)
[    0.000000] Memory: 1905588K/2097152K available (8128K kernel code, 892K rwdata, 2476K rodata, 9216K init, 276K bss, 191564K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000]  Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[    0.000000] Root IRQ handler: gic_handle_irq
[    0.000000] GICv2m: range[mem 0x0b00a000-0x0b00affc], SPI[448:479]
[    0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[    0.000000] arch_timer: cp15 and mmio timer(s) running at 19.20MHz (virt/virt).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x46d987e47, max_idle_ns: 440795202767 ns
[    0.000000] sched_clock: 56 bits at 19MHz, resolution 52ns, wraps every 4398046511078ns
[    0.000102] Calibrating delay loop (skipped), value calculated using timer frequency.. 38.40 BogoMIPS (lpj=192000)
[    0.000115] pid_max: default: 32768 minimum: 301
[    0.005135] Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear)
[    0.005152] Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear)
[    0.009431] RCU Tasks Trace: Setting shift to 2 and lim to 1 rcu_task_cb_adjust=1.
[    0.009658] rcu: Hierarchical SRCU implementation.
[    0.009663] rcu:     Max phase no-delay instances is 1000.
[    0.010597] smp: Bringing up secondary CPUs ...
[    0.011266] Detected VIPT I-cache on CPU1
[    0.011371] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
[    0.012047] Detected VIPT I-cache on CPU2
[    0.012116] CPU2: Booted secondary processor 0x0000000002 [0x410fd034]
[    0.012773] Detected VIPT I-cache on CPU3
[    0.012837] CPU3: Booted secondary processor 0x0000000003 [0x410fd034]
[    0.012908] smp: Brought up 1 node, 4 CPUs
[    0.012916] SMP: Total of 4 processors activated.
[    0.012922] CPU features: detected: 32-bit EL0 Support
[    0.012926] CPU features: detected: CRC32 instructions
[    0.012994] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[    0.013002] CPU: All CPU(s) started at EL1
[    0.013005] alternatives: applying system-wide alternatives
[    0.023186] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.023213] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[    0.024957] pinctrl core: initialized pinctrl subsystem
[    0.026669] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.027237] DMA: preallocated 256 KiB GFP_KERNEL pool for atomic allocations
[    0.027294] DMA: preallocated 256 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[    0.027345] DMA: preallocated 256 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[    0.027715] thermal_sys: Registered thermal governor 'step_wise'
[    0.027786] cpuidle: using governor menu
[    0.027944] ASID allocator initialised with 65536 entries
[    0.083460] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 4
[    0.085332] Modules: 27472 pages in range for non-PLT usage
[    0.085339] Modules: 518992 pages in range for PLT usage
[    0.090187] SCSI subsystem initialized
[    0.090378] usbcore: registered new interface driver usbfs
[    0.090412] usbcore: registered new interface driver hub
[    0.090474] usbcore: registered new device driver usb
[    0.090891] qcom_scm: convention: smc arm 64
[    0.092572] clocksource: Switched to clocksource arch_sys_counter
[    0.096357] NET: Registered PF_INET protocol family
[    0.096546] IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear)
[    0.100013] tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear)
[    0.100045] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.100061] TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear)
[    0.100222] TCP bind hash table entries: 16384 (order: 7, 524288 bytes, linear)
[    0.100764] TCP: Hash tables configured (established 16384 bind 16384)
[    0.100884] UDP hash table entries: 1024 (order: 3, 32768 bytes, linear)
[    0.100953] UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear)
[    0.101503] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.101562] PCI: CLS 0 bytes, default 64
[    0.115893] workingset: timestamp_bits=46 max_order=19 bucket_order=0
[    0.116461] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.116468] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.124305] qcom-qmp-usb-phy 78000.phy: supply vdda-phy not found, using dummy regulator
[    0.124518] qcom-qmp-usb-phy 78000.phy: supply vdda-pll not found, using dummy regulator
[    0.126455] qcom-qusb2-phy 79000.phy: supply vdd not found, using dummy regulator
[    0.126619] qcom-qusb2-phy 79000.phy: supply vdda-pll not found, using dummy regulator
[    0.126660] qcom-qusb2-phy 79000.phy: supply vdda-phy-dpdm not found, using dummy regulator
[    0.126876] qcom-qusb2-phy 79000.phy: Registered Qcom-QUSB2 phy
[    0.136920] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    0.137910] msm_serial 78b3000.serial: msm_serial: detected port #0
[    0.137966] msm_serial 78b3000.serial: uartclk = 3686400
[    0.138299] 78b3000.serial: ttyMSM0 at MMIO 0x78b3000 (irq = 20, base_baud = 230400) is a MSM
[    0.138333] msm_serial: console setup on port #0
[    0.138374] printk: console [ttyMSM0] enabled
[    0.896203] msm_serial: driver initialized
[    0.905332] loop: module loaded
[    0.906796] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xa3
[    0.907289] nand: AMD/Spansion S34MS08G2
[    0.913944] nand: 1024 MiB, SLC, erase size: 256 KiB, page size: 4096, OOB size: 256
[    0.929001] 32 fixed-partitions partitions found on MTD device qcom_nand.0
[    0.929063] Creating 32 MTD partitions on "qcom_nand.0":
[    0.934874] 0x000000000000-0x000000100000 : "0:sbl1"
[    0.941353] 0x000000100000-0x000000200000 : "0:mibib"
[    0.946336] 0x000000200000-0x000000280000 : "0:bootconfig"
[    0.950829] 0x000000280000-0x000000300000 : "0:bootconfig1"
[    0.956286] 0x000000300000-0x000000600000 : "0:qsee"
[    0.963056] 0x000000600000-0x000000900000 : "0:qsee_1"
[    0.968250] 0x000000900000-0x000000980000 : "0:devcfg"
[    0.971886] 0x000000980000-0x000000a00000 : "0:devcfg_1"
[    0.977082] 0x000000a00000-0x000000a80000 : "0:apdp"
[    0.982479] 0x000000a80000-0x000000b00000 : "0:apdp_1"
[    0.987440] 0x000000b00000-0x000000b80000 : "0:rpm"
[    0.992343] 0x000000b80000-0x000000c00000 : "0:rpm_1"
[    0.997163] 0x000000c00000-0x000000c80000 : "0:cdt"
[    1.002362] 0x000000c80000-0x000000d00000 : "0:cdt_1"
[    1.007104] 0x000000d00000-0x000000d80000 : "0:appsblenv"
[    1.012250] 0x000000d80000-0x000000e80000 : "0:appsbl"
[    1.018021] 0x000000e80000-0x000000f80000 : "0:appsbl_1"
[    1.022927] 0x000000f80000-0x000001000000 : "0:art"
[    1.028153] 0x000001000000-0x000001100000 : "u_env"
[    1.032986] 0x000001100000-0x000001200000 : "s_env"
[    1.037829] 0x000001200000-0x000001240000 : "devinfo"
[    1.042327] 0x000001240000-0x00000c180000 : "kernel"
[    1.130819] 0x000001a40000-0x00000c180000 : "rootfs"
[    1.211604] mtd: setting mtd22 (rootfs) as root device
[    1.212214] mtdsplit: no squashfs found in "rootfs"
[    1.215670] 0x00000c180000-0x0000170c0000 : "alt_kernel"
[    1.304847] 0x00000c980000-0x0000170c0000 : "alt_rootfs"
[    1.385568] 0x0000170c0000-0x0000174c0000 : "sysdiag"
[    1.388082] 0x0000174c0000-0x000017540000 : "0:ethphyfw"
[    1.390330] 0x000017540000-0x00001ef00000 : "syscfg"
[    1.453851] 0x00001ef00000-0x00001f300000 : "secured_store"
[    1.456362] 0x00001f300000-0x000020c00000 : "0:wififw"
[    1.470716] 0x000020c00000-0x000036d80000 : "app2_data"
[    1.640037] 0x000036d80000-0x000040000000 : "app2"
[    1.720346] spmi spmi-0: PMIC arbiter version v2 (0x20010000)
[    1.780208] i2c_dev: i2c /dev entries driver
[    1.787440] sdhci: Secure Digital Host Controller Interface driver
[    1.787486] sdhci: Copyright(c) Pierre Ossman
[    1.792520] sdhci-pltfm: SDHCI platform and OF driver helper
[    1.799055] remoteproc remoteproc0: releasing cd00000.q6v5_wcss
[    1.805330] NET: Registered PF_INET6 protocol family
[    1.809277] Segment Routing with IPv6
[    1.813597] In-situ OAM (IOAM) with IPv6
[    1.817160] NET: Registered PF_PACKET protocol family
[    1.821212] 8021q: 802.1Q VLAN Support v1.8
[    1.853632] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 4
[    1.854023] cpr4_ipq807x_apss_read_fuse_data: apc_corner: speed bin = 0
[    1.859756] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR fusing revision = 1
[    1.866441] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR misc fuse value = 0
[    1.874025] cpr4_ipq807x_apss_read_fuse_data: apc_corner: Voltage boost fuse config = 0 boost = disable
[    1.881525] cpr3_mem_acc_init: apc: not using memory accelerator regulator
[    1.890666] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused      SVS: open-loop= 704000 uV
[    1.897614] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused      NOM: open-loop= 808000 uV
[    1.907597] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused    TURBO: open-loop= 872000 uV
[    1.917405] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused   STURBO: open-loop= 960000 uV
[    1.927264] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused      SVS: quot[ 7]= 714, quot_offset[ 7]=   0
[    1.937027] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused      NOM: quot[ 7]= 907, quot_offset[ 7]= 190
[    1.947876] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused    TURBO: quot[ 7]=1014, quot_offset[ 7]= 105
[    1.958813] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused   STURBO: quot[ 7]=1171, quot_offset[ 7]= 155
[    1.969949] cpr3_regulator_init_ctrl: apc: Default CPR mode = closed-loop
[    1.972611] cpufreq: cpufreq_online: CPU0: Running at unlisted initial frequency: 800000 KHz, changing to: 1017600 KHz
[    1.989533] remoteproc remoteproc0: cd00000.q6v5_wcss is avail▒[    2.008413] Freeing unused kernel memory: 9216K
[    2.008513] Run /init as init process
[    2.205983] init: Console is alive
[    2.206127] init: - watchdog -
[    2.215708] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    2.231962] gpio_button_hotplug: loading out-of-tree module taints kernel.
[    2.247219] ssdk_dt_parse_interrupt[941]:INFO:intr-gpio does not exist
[    2.556650] adpt_hppe_uniphy_mode_set[1398]:INFO:ssdk doesn't support mode:0 in uniphy:0 on platform!
[    2.556810] regi_init[2525]:INFO:Initializing HPPE Done!!
[    2.564947] regi_init[2574]:INFO:qca-ssdk module init succeeded!
[    2.572798] EDMA ver 1 hw init
[    2.576539] EDMA HW Reset completed succesfully
[    2.579211] Num rings - TxDesc:1 (23-23) TxCmpl:1 (7-7)
[    2.583619] RxDesc:1 (15-15) RxFill:1 (7-7)
[    2.589208] dp2: ppe offload disabled: 0 for macid 2
[    2.593001] dp2: Switch attached to macid 2 status: 0
[    2.753366] Qualcomm QCA8075 90000.mdio-1:01: attached PHY driver (mii_bus:phy_addr=90000.mdio-1:01, irq=POLL)
[    2.754294] dp3: ppe offload disabled: 0 for macid 3
[    2.762254] dp3: Switch attached to macid 3 status: 0
[    2.842944] Qualcomm QCA8075 90000.mdio-1:02: attached PHY driver (mii_bus:phy_addr=90000.mdio-1:02, irq=POLL)
[    2.843873] GMAC4(ffffff8003fda900) Invalid MAC@ - using 42:62:7f:f7:cc:31
[    2.851841] dp4: ppe offload disabled: 0 for macid 4
[    2.858722] dp4: Switch attached to macid 4 status: 0
[    2.942943] Qualcomm QCA8075 90000.mdio-1:03: attached PHY driver (mii_bus:phy_addr=90000.mdio-1:03, irq=POLL)
[    2.943893] GMAC5(ffffff8003fde900) Invalid MAC@ - using 8a:7a:b0:b6:f7:3a
[    2.951836] dp5: ppe offload disabled: 0 for macid 5
[    2.958709] dp5: Switch attached to macid 5 status: 0
[    3.042933] Qualcomm QCA8075 90000.mdio-1:04: attached PHY driver (mii_bus:phy_addr=90000.mdio-1:04, irq=POLL)
[    3.043829] **********************************************************
[    3.051824] * NSS Data Plane driver
[    3.058346] **********************************************************
[    3.073649] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    3.073701] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 1
[    3.078175] xhci-hcd xhci-hcd.1.auto: hcc params 0x0220fe65 hci version 0x110 quirks 0x0000008002000010
[    3.085668] xhci-hcd xhci-hcd.1.auto: irq 38, io mem 0x08a00000
[    3.095089] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    3.100866] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 2
[    3.106436] xhci-hcd xhci-hcd.1.auto: Host supports USB 3.0 SuperSpeed
[    3.114540] hub 1-0:1.0: USB hub found
[    3.120598] hub 1-0:1.0: 1 port detected
[    3.124666] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[    3.128749] hub 2-0:1.0: USB hub found
[    3.136504] hub 2-0:1.0: 1 port detected
[    3.143205] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    3.145815] init: - preinit -
[    3.422579] usb 1-1: new high-speed USB device number 2 using xhci-hcd
[    4.932571] random: crng init done
[    4.970763] mtdblock: MTD device 'devinfo' is NAND, please consider using UBI block devices instead.
[    5.024829] mtdblock: MTD device 'u_env' is NAND, please consider using UBI block devices instead.
[    5.213806] mtdblock: MTD device 'u_env' is NAND, please consider using UBI block devices instead.
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    7.546007] procd: - early -
[    7.546098] procd: - watchdog -
[    8.084440] procd: - watchdog -
[    8.084682] procd: - ubus -
[    8.138286] procd: - init -
Please press Enter to activate this console.
[    8.306106] kmodloader: loading kernel modules from /etc/modules.d/*
[    8.404622] hid: raw HID events driver (C) Jiri Kosina
[    8.413217] Bluetooth: Core ver 2.22
[    8.413328] NET: Registered PF_BLUETOOTH protocol family
[    8.415868] Bluetooth: HCI device and connection manager initialized
[    8.421178] Bluetooth: HCI socket layer initialized
[    8.427596] Bluetooth: L2CAP socket layer initialized
[    8.432114] Bluetooth: SCO socket layer initialized
[    8.438690] Bluetooth: BNEP (Ethernet Emulation) ver 1.3
[    8.441999] Bluetooth: BNEP filters: protocol multicast
[    8.447578] Bluetooth: BNEP socket layer initialized
[    8.456177] usbcore: registered new interface driver btusb
[    8.458146] Loading modules backported from Linux version v6.9.9-0-g28fdf4518483
[    8.463039] Backport generated by backports.git v6.1.97-1-29-gf1d24a3683b2
[    8.471409] Bluetooth: HCI UART driver ver 2.3
[    8.477251] Bluetooth: HCI UART protocol H4 registered
[    8.481667] Bluetooth: HCI UART protocol BCSP registered
[    8.487742] Bluetooth: HIDP (Human Interface Emulation) ver 1.2
[    8.492271] Bluetooth: HIDP socket layer initialized
[    8.503326] NET: Registered PF_QIPCRTR protocol family
[    8.505200] Bluetooth: RFCOMM TTY layer initialized
[    8.508073] Bluetooth: RFCOMM socket layer initialized
[    8.512866] Bluetooth: RFCOMM ver 1.11
[    8.523971] urngd: v1.0.2 started.
[    8.558005] PPP generic driver version 2.4.2
[    8.558812] NET: Registered PF_PPPOX protocol family
[    8.571407] ath11k c000000.wifi: ipq8074 hw2.0
[    8.571443] ath11k c000000.wifi: FW memory mode: 0
[    8.600950] remoteproc remoteproc0: powering up cd00000.q6v5_wcss
[    8.601066] remoteproc remoteproc0: Booting fw image IPQ8074/q6_fw.mdt, size 668
[    8.954639] remoteproc remoteproc0: remote processor cd00000.q6v5_wcss is now up
[    8.998592] ath11k c000000.wifi: qmi ignore invalid mem req type 3
[    9.006061] ath11k c000000.wifi: chip_id 0x0 chip_family 0x0 board_id 0xff soc_id 0xffffffff
[    9.006097] ath11k c000000.wifi: fw_version 0x290604a5 fw_build_timestamp 2023-10-12 02:06 fw_build_id WLAN.HK.2.9.0.1-01977-QCAHKSWPL_SILICONZ-1
[    9.079195] mtdblock: MTD device 'devinfo' is NAND, please consider using UBI block devices instead.
[    9.236477] qcom-q6v5-wcss-pil cd00000.q6v5_wcss: fatal error received:
[    9.236477] QC Image Version: QC_IMAGE_VERSION_STRING=WLAN.HK.2.9.0.1-01977-QCAHKSWPL_SILICONZ-1
[    9.236477] Image Variant : IMAGE_VARIANT_STRING=8074.wlanfw.eval_v2Q
[    9.236477]
[    9.236477] phyrf_bdf.c:629 Assertion 0 failedparam0 :zero, param1 :zero, param2 :zero.
[    9.236477] Thread ID      : 0x00000072  Thread name    : wlan_platform  Process ID     : 0
[    9.236477] Register:
[    9.236477] SP : 0x4b5d4090
[    9.236477] FP : 0x4b5d4098
[    9.236477] PC : 0x4b1080c4
[    9.236477] SSR : 0x00000008
[    9.236477] BADVA : 0x00020000
[    9.236477] LR : 0x4b107860
[    9.236477]
[    9.236477] Stack Dump
[    9.236477] from : 0x4b5d4090
[    9.236477] to   : 0x4b5d45b0
[    9.236477]
[    9.283532] remoteproc remoteproc0: crash detected in cd00000.q6v5_wcss: type fatal error
[    9.305724] remoteproc remoteproc0: handling crash #1 in cd00000.q6v5_wcss
[    9.314027] remoteproc remoteproc0: recovering cd00000.q6v5_wcss
[    9.346567] remoteproc remoteproc0: stopped remote processor cd00000.q6v5_wcss
[    9.693144] remoteproc remoteproc0: remote processor cd00000.q6v5_wcss is now up
[   19.672589] ath11k c000000.wifi: failed to wait board file download request: -110
[   19.672652] ath11k c000000.wifi: qmi failed to load caldata
[   19.679157] ath11k c000000.wifi: failed to load board data file: -110
[   19.687699] ath11k c000000.wifi: qmi ignore invalid mem req type 3
[   19.696561] ath11k c000000.wifi: chip_id 0x0 chip_family 0x0 board_id 0xff soc_id 0xffffffff
[   19.697124] ath11k c000000.wifi: fw_version 0x290604a5 fw_build_timestamp 2023-10-12 02:06 fw_build_id WLAN.HK.2.9.0.1-01977-QCAHKSWPL_SILICONZ-1
[   19.711561] qcom-q6v5-wcss-pil cd00000.q6v5_wcss: fatal error received:
[   19.711561] QC Image Version: QC_IMAGE_VERSION_STRING=WLAN.HK.2.9.0.1-01977-QCAHKSWPL_SILICONZ-1
[   19.711561] Image Variant : IMAGE_VARIANT_STRING=8074.wlanfw.eval_v2Q
[   19.711561]
[   19.711561] phyrf_bdf.c:629 Assertion 0 failedparam0 :zero, param1 :zero, param2 :zero.
[   19.711561] Thread ID      : 0x00000072  Thread name    : wlan_platform  Process ID     : 0
[   19.711561] Register:
[   19.711561] SP : 0x4b5d4060
[   19.711561] FP : 0x4b5d4068
[   19.711561] PC : 0x4b1080c4
[   19.711561] SSR : 0x00000008
[   19.711561] BADVA : 0x00020000
[   19.711561] LR : 0x4b107860
[   19.711561]
[   19.711561] Stack Dump
[   19.711561] from : 0x4b5d4060
[   19.711561] to   : 0x4b5d4580
[   19.711561]
[   19.766388] remoteproc remoteproc0: crash detected in cd00000.q6v5_wcss: type fatal error
[   19.788630] remoteproc remoteproc0: handling crash #2 in cd00000.q6v5_wcss
[   19.796956] remoteproc remoteproc0: recovering cd00000.q6v5_wcss
[   19.829670] remoteproc remoteproc0: stopped remote processor cd00000.q6v5_wcss
[   20.178124] remoteproc remoteproc0: remote processor cd00000.q6v5_wcss is now up
[   29.912587] ath11k c000000.wifi: failed to wait board file download request: -110
[   29.912648] ath11k c000000.wifi: qmi failed to load caldata
[   29.919124] ath11k c000000.wifi: failed to load board data file: -110
[   29.927690] ath11k c000000.wifi: qmi ignore invalid mem req type 3
[   29.936549] ath11k c000000.wifi: chip_id 0x0 chip_family 0x0 board_id 0xff soc_id 0xffffffff
[   29.937120] ath11k c000000.wifi: fw_version 0x290604a5 fw_build_timestamp 2023-10-12 02:06 fw_build_id WLAN.HK.2.9.0.1-01977-QCAHKSWPL_SILICONZ-1
[   29.951547] qcom-q6v5-wcss-pil cd00000.q6v5_wcss: fatal error received:
[   29.951547] QC Image Version: QC_IMAGE_VERSION_STRING=WLAN.HK.2.9.0.1-01977-QCAHKSWPL_SILICONZ-1
[   29.951547] Image Variant : IMAGE_VARIANT_STRING=8074.wlanfw.eval_v2Q
[   29.951547]
[   29.951547] phyrf_bdf.c:629 Assertion 0 failedparam0 :zero, param1 :zero, param2 :zero.
[   29.951547] Thread ID      : 0x00000072  Thread name    : wlan_platform

frollic · August 16, 2024, 6:35pm

Not until it reaches stable

https://openwrt.org/releases/snapshot

Tour · August 16, 2024, 7:46pm

Not an expert, but did you have luci installed? If not do these two commands one after another in terminal, that should install the webgui
opkg update
opkg install luci

flyingdida · August 16, 2024, 9:01pm

thanks, got GUI access now.

still can not boot after flash fw from GUI. or use the command from instruction site.
mtd -r -e kernel -n write openwrt-qualcommax-ipq807x-linksys_mx4300v-squashfs-factory.bin kernel

here is the error msg at the end of boot.

0x2c)
[    2.601339] ubi0 error: ubi_io_read_ec_hdr: validation failed for PEB 510
[    2.608817] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd22, error -22
[    2.615583] UBI error: cannot attach mtd22
[    2.622674] UBI: block: can't open volume on ubi0_0, err=-19[    2.627317] input: soc:gpio_keys as /devices/platform/soc/soc:gpio_keys/input/input0
[    2.632190] hctosys: unable to open rtc device (rtc0)
[    2.645499] pmd9655_ldo11: disabling
[    2.646228] Waiting for root device /dev/ubiblock0_0...

asd111333 · August 16, 2024, 11:21pm

You need to patch the partition layout in the DTS file, since your layout is different.

flyingdida · August 16, 2024, 11:33pm

where can I get the file and it seems need to change bootloader , DTS file and what else？

asd111333 · August 16, 2024, 11:37pm

I'm creating a version for you using the partition layout you provided. It should be ready soon. Where did you run the mtd command?

If you run it under openwrt with the wrong partition layout, you can overwrite some partition on the device which should not be overwritten and break things such as wifi.

flyingdida · August 16, 2024, 11:44pm

I run mtd command on OpenWrt ssh.
I will have 2 more units arrive soon and hope I can get none touched equipment output for you when I have it.

is there any way we can re-map the partition and other config back to retail mx4300?

ghoffman · August 17, 2024, 12:05am

i think you should save the devinfo and ART partitions as a minimum, since thay propbabaly contraint he radio and device specific data.
i also think/ wonder if the concept of remapping partition layout and u-boot data to effectively change the device remains a possible path forward

asd111333 · August 17, 2024, 12:06am

I guess you can restore those partitions with nand dump from other users.

According to the bootlog, the kernel is loaded from the nand at 0x1240000, but that offset is at the middle of 0:WIFIFW. I think that's pretty weird.