You can use a small diameter flat screwdriver and insert it through the top holes.
thanks, got it opened. used this youtube video which is basically the same thing as what you said. literally fell right into my lap once i undid the four screws. https://www.youtube.com/watch?v=JELVEofJwBg
next, i would appreciate a link to the JTAG that i might want to pick up off of eBay. thanks again!
What I meant was that through the holes in the housing you can unscrew the screws without removing the top part.
oh wow, yeah, i didn't think of that. clever! which UART do i need?
Hi @lytr
here is the fresh new device output. it has ssh enabled.
IPQ807x# printenv
baudrate=115200
bootargs=console=ttyMSM0,115200n8
bootcmd=bootipq
bootdelay=2
eth1addr=d8:ec:5e:8d:8c:68
eth2addr=d8:ec:5e:8d:8c:69
eth3addr=D8:EC:5E:8D:8C:69
eth4addr=D8:EC:5E:8D:8C:69
eth5addr=D8:EC:5E:8D:8C:69
ethact=eth0
ethaddr=d8:ec:5e:8d:8c:68
fdt_high=0x4A400000
fdtcontroladdr=4a97a7b0
flash_type=2
ipaddr=192.168.1.1
machid=801000d
netmask=255.255.255.0
serverip=192.168.1.12
soc_hw_version=200d0200
soc_version_major=2
soc_version_minor=0
stderr=serial@78B3000
stdin=serial@78B3000
stdout=serial@78B3000
Environment size: 564/262140 bytes
IPQ807x#
dev: size erasesize name
mtd0: 00100000 00040000 "0:SBL1"
mtd1: 00100000 00040000 "0:MIBIB"
mtd2: 00080000 00040000 "0:BOOTCONFIG"
mtd3: 00080000 00040000 "0:BOOTCONFIG1"
mtd4: 00300000 00040000 "0:QSEE"
mtd5: 00300000 00040000 "0:QSEE_1"
mtd6: 00080000 00040000 "0:DEVCFG"
mtd7: 00080000 00040000 "0:DEVCFG_1"
mtd8: 00080000 00040000 "0:APDP"
mtd9: 00080000 00040000 "0:APDP_1"
mtd10: 00080000 00040000 "0:RPM"
mtd11: 00080000 00040000 "0:RPM_1"
mtd12: 00080000 00040000 "0:CDT"
mtd13: 00080000 00040000 "0:CDT_1"
mtd14: 00080000 00040000 "0:APPSBLENV"
mtd15: 00100000 00040000 "0:APPSBL"
mtd16: 00100000 00040000 "0:APPSBL_1"
mtd17: 00080000 00040000 "0:ART"
mtd18: 00080000 00040000 "0:ETHPHYFW"
mtd19: 01900000 00040000 "0:WIFIFW"
mtd20: 00080000 00040000 "devinfo"
mtd21: 02000000 00040000 "tzcfg"
mtd22: 1db00000 00040000 "rootfs"
mtd23: 1db00000 00040000 "rootfs_1"
mtd24: 00a2c000 0003e000 "kernel"
mtd25: 1ada4000 0003e000 "ubi_rootfs"
mtd26: 00aa8000 0003e000 "tzcfg"
Put in an eBay order for a simple 3.3v TTL USB cable with four pin (TX, RX, GND, 3.3v). Hopefully that does that trick. Now need to wait a month before the cable gets here. 
looking at the boot logs that @flyingdida has been posting, i noticed the following:
flashimg=tftpboot $loadaddr $image && nand erase $prikern $imgsize && nand write $loadaddr $prikern $filesize
flashimg2=tftpboot $loadaddr $image && nand erase $altkern $imgsize && nand write $loadaddr $altkern $filesize
does this imply that if i have a tftpserver on the network, i might be able to recover in some way shape or form? hate to have wait to till the TTL cable gets here.
i did notice though that the bootargs aren't set up for falling back to boot from tftp 
Very clean set up. Thanks for sharing. Where can one get a JST PH 6 cable that you posted? Searched eBay and didn’t find what you posted.
depends if you have a bit of soldering experience and some kit kicking about, you need any generic serial to 3.3v ttl converter which is in loads of stuff (ftdi / ch340 all do them). I had a nodemcu kicking about which I used, and connected the usb device to the 4 pin serial header in the router.
Can you post full bootlog?
But during boot there is no attempt to download the image from tftp.
Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00163
S - IMAGE_VARIANT_STRING=HAACANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x000002e5
B - 201 - PBL, Start
B - 2736 - bootable_media_detect_entry, Start
B - 4093 - bootable_media_detect_success, Start
B - 4098 - elf_loader_entry, Start
B - 8277 - auth_hash_seg_entry, Start
B - 8523 - auth_hash_seg_exit, Start
B - 70399 - elf_segs_hash_verify_entry, Start
B - 133253 - PBL, End
B - 145393 - SBL1, Start
B - 197609 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4
B - 204136 - pm_device_init, Start
B - 326136 - PM_SET_VAL:Skip
D - 121542 - pm_device_init, Delta
B - 328546 - pm_driver_init, Start
D - 5398 - pm_driver_init, Delta
B - 334920 - clock_init, Start
D - 2135 - clock_init, Delta
B - 338885 - boot_flash_init, Start
D - 17995 - boot_flash_init, Delta
B - 360632 - boot_config_data_table_init, Start
D - 4178 - boot_config_data_table_init, Delta - (575 Bytes)
B - 367982 - Boot Setting : 0x00000618
B - 372100 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:13
B - 379023 - sbl1_ddr_set_params, Start
B - 382866 - CPR configuration: 0x30c
B - 386252 - cpr_init, Start
B - 389027 - Rail:0 Mode: 5 Voltage: 784000
B - 394273 - CL CPR settled at 736000mV
B - 397110 - Rail:1 Mode: 5 Voltage: 880000
B - 401288 - Rail:1 Mode: 7 Voltage: 888000
D - 16561 - cpr_init, Delta
B - 408181 - Pre_DDR_clock_init, Start
B - 412207 - Pre_DDR_clock_init, End
B - 415501 - DDR Type : PCDDR3
B - 421235 - do ddr sanity test, Start
D - 1037 - do ddr sanity test, Delta
B - 425993 - DDR: Start of HAL DDR Boot Training
B - 430721 - DDR: End of HAL DDR Boot Training
B - 436394 - DDR: Checksum to be stored on flash is -573754573
B - 446825 - Image Load, Start
D - 216611 - QSEE Image Loaded, Delta - (1376536 Bytes)
B - 663527 - Image Load, Start
D - 61 - SEC Image Loaded, Delta - (0 Bytes)
B - 671213 - Image Load, Start
D - 12017 - DEVCFG Image Loaded, Delta - (26148 Bytes)
B - 683322 - Image Load, Start
D - 23058 - RPM Image Loaded, Delta - (86660 Bytes)
B - 706471 - Image Load, Start
D - 89914 - APPSBL Image Loaded, Delta - (571732 Bytes)
B - 796507 - QSEE Execution, Start
D - 61 - QSEE Execution, Delta
B - 802302 - USB D+ check, Start
D - 0 - USB D+ check, Delta
B - 808677 - SBL1, End
D - 665602 - SBL1, Delta
S - Flash Throughput, 6894 KB/s (2062323 Bytes, 299137 us)
S - DDR Frequency, 466 MHz
S - Core 0 Frequency, 800 MHz
U-Boot 2016.01-0.30.256.211028_11.4.1cs (Apr 22 2021 - 04:33:35 +0000)
DRAM: smem ram ptable found: ver: 1 len: 4
2 GiB
NAND: Could not find nand_gpio in dts, using defaults
ONFI device found
ID = 2690a32c
Vendor = 2c
Device = a3
qpic_nand: changing oobsize to 160 from 224 bytes
SF: Unsupported flash IDs: manuf ff, jedec ffff, ext_jedec ffff
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
1024 MiB
MMC: <NULL>: 0
In: serial@78B3000
Out: serial@78B3000
Err: serial@78B3000
machid: 801000d
Card did not respond to voltage select!
eth3 MAC Address from ART is not valid
eth4 MAC Address from ART is not valid
eth5 MAC Address from ART is not valid
Hit any key to stop autoboot: 0
bootargs=console=ttyMSM0,115200n8 ubi.mtd=rootfs root=mtd:ubi_rootfs rootfstype=squashfs rootwait
Booting from flash
Using nand device 0
ubi0: attaching mtd1
ubi0: scanning is finished
ubi0: attached mtd1 (name "mtd=0", size 475 MiB)
ubi0: PEB size: 262144 bytes (256 KiB), LEB size: 253952 bytes
ubi0: min./max. I/O unit sizes: 4096/4096, sub-page size 4096
ubi0: VID header offset: 4096 (aligned 4096), data offset: 8192
ubi0: good PEBs: 1900, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 1047401851
ubi0: available PEBs: 0, total reserved PEBs: 1900, PEBs reserved for bad PEB handling: 80
Read 0 bytes from volume kernel to 44000000
No size specified -> Using max size (10665984)
## Loading kernel from FIT Image at 44000000 ...
Using 'config@oak03' configuration
Trying 'kernel-1' kernel subimage
Description: Linux kernel
Type: Kernel Image
Compression: gzip compressed
Data Start: 0x440000c4
Data Size: 3747576 Bytes = 3.6 MiB
Architecture: ARM
OS: Linux
Load Address: 0x41208000
Entry Point: 0x41208000
Hash algo: crc32
Hash value: 13e276c7
Verifying Hash Integrity ... crc32+ OK
## Loading fdt from FIT Image at 44000000 ...
Using 'config@oak03' configuration
Trying 'fdt-1' fdt subimage
Description: FDT MX4300 V1
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x44393094
Data Size: 65863 Bytes = 64.3 KiB
Architecture: ARM
Hash algo: crc32
Hash value: 3c301fed
Verifying Hash Integrity ... crc32+ OK
Booting using the fdt blob at 0x44393094
Uncompressing Kernel Image ... OK
Loading Device Tree to 4a3ec000, end 4a3ff146 ... OK
Unable to update property /soc/dp6:mac-address, err=FDT_ERR_NOTFOUND
Unable to update property /soc/dp6:local-mac-address, err=FDT_ERR_NOTFOUND
Unable to update property /soc/dp6:mac-address, err=FDT_ERR_NOTFOUND
Unable to update property /soc/dp6:local-mac-address, err=FDT_ERR_NOTFOUND
Using machid 0x801000d from environment
Starting kernel ...
[ 0.000000] Booting Linux on physical CPU 0x0
[ 0.000000] Linux version 5.4.89 (builder@github-runner-5) (gcc version 7.4.0 (Buildroot 2019.02-gcf84f7e0e40a)) #1 SMP PREEMPT Thu May 12 15:47:35 UTC 2022
[ 0.000000] CPU: ARMv7 Processor [410fd034] revision 4 (ARMv7), cr=10c0383d
[ 0.000000] CPU: div instructions available: patching division code
[ 0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[ 0.000000] OF: fdt: Machine model: Linksys MX4300 v1
[ 0.000000] OF: fdt: Ignoring memory range 0x40000000 - 0x41000000
[ 0.000000] Memory policy: Data cache writealloc
[ 0.000000] psci: probing for conduit method from DT.
[ 0.000000] psci: PSCIv1.0 detected in firmware.
[ 0.000000] psci: Using standard PSCI v0.2 function IDs
[ 0.000000] psci: MIGRATE_INFO_TYPE not supported.
[ 0.000000] psci: SMC Calling Convention v1.0
[ 0.000000] percpu: Embedded 15 pages/cpu s28940 r8192 d24308 u61440
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 488256
[ 0.000000] Kernel command line: console=ttyMSM0,115200n8 ubi.mtd=rootfs root=mtd:ubi_rootfs rootfstype=squashfs rootwait
[ 0.000000] Dentry cache hash table entries: 262144 (order: 8, 1048576 bytes, linear)
[ 0.000000] Inode-cache hash table entries: 131072 (order: 7, 524288 bytes, linear)
[ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[ 0.000000] Memory: 1939996K/1969152K available (6144K kernel code, 247K rwdata, 1408K rodata, 1024K init, 256K bss, 29156K reserved, 0K cma-reserved, 245760K highmem)
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[ 0.000000] rcu: Preemptible hierarchical RCU implementation.
[ 0.000000] Tasks RCU enabled.
[ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[ 0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[ 0.000000] GICv2m: range[mem 0x0b00a000-0x0b00affc], SPI[448:479]
[ 0.000000] random: get_random_bytes called from start_kernel+0x290/0x41c with crng_init=0
[ 0.000000] arch_timer: cp15 and mmio timer(s) running at 19.20MHz (virt/virt).
[ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x46d987e47, max_idle_ns: 440795202767 ns
[ 0.000005] sched_clock: 56 bits at 19MHz, resolution 52ns, wraps every 4398046511078ns
[ 0.000016] Switching to timer-based delay loop, resolution 52ns
[ 0.000671] Console: colour dummy device 80x30
[ 0.000704] Calibrating delay loop (skipped), value calculated using timer frequency.. 38.40 BogoMIPS (lpj=192000)
[ 0.000717] pid_max: default: 32768 minimum: 301
[ 0.000896] Mount-cache hash table entries: 4096 (order: 2, 16384 bytes, linear)
[ 0.000914] Mountpoint-cache hash table entries: 4096 (order: 2, 16384 bytes, linear)
[ 0.001658] CPU: Testing write buffer coherency: ok
[ 0.001942] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
[ 0.002413] Setting up static identity map for 0x41300000 - 0x41300060
[ 0.002517] rcu: Hierarchical SRCU implementation.
[ 0.002747] MSM Memory Dump base table set up
[ 0.002769] MSM Memory Dump apps data table set up
[ 0.002940] smp: Bringing up secondary CPUs ...
[ 0.003651] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
[ 0.004431] CPU2: thread -1, cpu 2, socket 0, mpidr 80000002
[ 0.005169] CPU3: thread -1, cpu 3, socket 0, mpidr 80000003
[ 0.005288] smp: Brought up 1 node, 4 CPUs
[ 0.005308] SMP: Total of 4 processors activated (153.60 BogoMIPS).
[ 0.005315] CPU: All CPU(s) started in SVC mode.
[ 0.005754] devtmpfs: initialized
[ 0.020378] VFP support v0.3: implementor 41 architecture 3 part 40 variant 3 rev 4
[ 0.020663] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.020681] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[ 0.020801] pinctrl core: initialized pinctrl subsystem
[ 0.021602] NET: Registered protocol family 16
[ 0.021874] DMA: preallocated 256 KiB pool for atomic coherent allocations
[ 0.022922] cpuidle: using governor ladder
[ 0.023021] NET: Registered protocol family 42
[ 0.039402] spmi spmi-0: PMIC arbiter version v2 (0x20010000)
[ 0.059380] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 2
[ 0.059697] qcom,cpr3-npu-regulator a4000.npu-cpr: NPU CPR valid fuse count: 2
[ 0.061574] msm_sps_probe: sps:sps is ready
[ 0.069801] vgaarb: loaded
[ 0.070827] workqueue: max_active 576 requested for napi_workq is out of range, clamping between 1 and 512
[ 0.071586] clocksource: Switched to clocksource arch_sys_counter
[ 0.078941] thermal_sys: Registered thermal governor 'step_wise'
[ 0.081297] NET: Registered protocol family 2
[ 0.081897] tcp_listen_portaddr_hash hash table entries: 1024 (order: 1, 12288 bytes, linear)
[ 0.081950] TCP established hash table entries: 16384 (order: 4, 65536 bytes, linear)
[ 0.082109] TCP bind hash table entries: 16384 (order: 5, 131072 bytes, linear)
[ 0.082385] TCP: Hash tables configured (established 16384 bind 16384)
[ 0.082477] UDP hash table entries: 1024 (order: 3, 32768 bytes, linear)
[ 0.082542] UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear)
[ 0.082734] NET: Registered protocol family 1
[ 0.083169] PCI: CLS 0 bytes, default 64
[ 0.084048] Initialise system trusted keyrings
[ 0.084154] workingset: timestamp_bits=14 max_order=19 bucket_order=5
[ 0.090729] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.091036] Key type asymmetric registered
[ 0.091094] bounce: pool size: 64 pages
[ 0.091111] io scheduler mq-deadline registered
[ 0.091119] io scheduler kyber registered
[ 0.092082] qcom-qmp-phy 78000.ssphy: 78000.ssphy supply vdda-phy not found, using dummy regulator
[ 0.092155] qcom-qmp-phy 78000.ssphy: 78000.ssphy supply vdda-pll not found, using dummy regulator
[ 0.092560] qcom-qmp-phy 78000.ssphy: Registered Qcom-QMP phy
[ 0.092722] qcom-qmp-phy 58000.ssphy: 58000.ssphy supply vdda-phy not found, using dummy regulator
[ 0.092799] qcom-qmp-phy 58000.ssphy: 58000.ssphy supply vdda-pll not found, using dummy regulator
[ 0.093098] qcom-qmp-phy 58000.ssphy: Registered Qcom-QMP phy
[ 0.093460] qcom-qmp-phy 84000.phy: Registered Qcom-QMP phy
[ 0.093560] qcom-qmp-phy: probe of 86000.phy failed with error -13
[ 0.093883] qcom-qmp-phy 8e000.phy: Registered Qcom-QMP phy
[ 0.111610] qcom-pcie 20000000.pci: host bridge /soc/pci@20000000 ranges:
[ 0.111652] qcom-pcie 20000000.pci: IO 0x20200000..0x2020ffff -> 0x20200000
[ 0.111680] qcom-pcie 20000000.pci: MEM 0x20220000..0x2fffffff -> 0x20220000
[ 1.271594] qcom-pcie 20000000.pci: Phy link never came up
[ 1.281618] qcom-pcie 20000000.pci: cannot initialize host
[ 1.281707] qcom-pcie: probe of 20000000.pci failed with error -110
[ 1.301604] qcom-pcie 10000000.pci: host bridge /soc/pci@10000000 ranges:
[ 1.301644] qcom-pcie 10000000.pci: IO 0x10200000..0x1020ffff -> 0x10200000
[ 1.301670] qcom-pcie 10000000.pci: MEM 0x10220000..0x1fffffff -> 0x10220000
[ 2.461594] qcom-pcie 10000000.pci: Phy link never came up
[ 2.471610] qcom-pcie 10000000.pci: cannot initialize host
[ 2.471667] qcom-pcie: probe of 10000000.pci failed with error -110
[ 2.472635] bam-dma-engine 704000.dma: num-channels unspecified in dt
[ 2.472647] bam-dma-engine 704000.dma: num-ees unspecified in dt
[ 2.475806] msm-dcc b3000.dcc: DCC XPU is not specified
[ 2.476093] msm-dcc b3000.dcc: jiffies_64: 0xffff8bc7, cntvct_64: 0xb027bf6
[ 2.476107] msm-dcc b3000.dcc: gcnt_hi: 0x00000000(0x(ptrval))
[ 2.476119] msm-dcc b3000.dcc: gcnt_lo: 0x0b027e15(0x(ptrval))
[ 2.476774] CPU: IPQ8174, SoC Version: 2.0
[ 2.477293] msm_rpm_log_probe: OK
[ 2.477533] TZ SMMU State: SMMU Stage2 Enabled
[ 2.477597] TZ Log : Will warn on Access Violation, as paniconaccessviolation is not set
[ 2.478523] pmd9655_s3: supplied by e-smps1-reg
[ 2.478845] pmd9655_s4: supplied by e-smps1-reg
[ 2.479153] pmd9655_ldo11: supplied by e-smps1-reg
[ 2.479820] msm_serial 78b3000.serial: msm_serial: detected port #0
[ 2.479855] msm_serial 78b3000.serial: uartclk = 3686400
[ 2.479903] 78b3000.serial: ttyMSM0 at MMIO 0x78b3000 (irq = 27, base_baud = 230400) is a MSM
[ 2.479927] msm_serial: console setup on port #0
[ 3.217584] printk: console [ttyMSM0] enabled
[ 3.222605] msm_serial: driver initialized
[ 3.226846] random: fast init done
[ 3.230617] random: crng init done
[ 3.242200] loop: module loaded
[ 3.242653] Loaded tzapp successfully!
[ 3.244168] Init. AES sec key feature successful!
[ 3.247979] Init. RSA sec key feature successful!
[ 3.254759] nand: device found, Manufacturer ID: 0x2c, Chip ID: 0xa3
[ 3.257426] nand: Micron MT29F8G08ABBCAH4
[ 3.263869] nand: 1024 MiB, SLC, erase size: 256 KiB, page size: 4096, OOB size: 224
[ 3.268129] 24 fixed-partitions partitions found on MTD device qcom_nand.0
[ 3.275589] Creating 24 MTD partitions on "qcom_nand.0":
[ 3.282269] 0x000000000000-0x000000100000 : "0:SBL1"
[ 3.292499] 0x000000100000-0x000000200000 : "0:MIBIB"
[ 3.294434] 0x000000200000-0x000000280000 : "0:BOOTCONFIG"
[ 3.302470] 0x000000280000-0x000000300000 : "0:BOOTCONFIG1"
[ 3.312452] 0x000000300000-0x000000600000 : "0:QSEE"
[ 3.322415] 0x000000600000-0x000000900000 : "0:QSEE_1"
[ 3.324913] 0x000000900000-0x000000980000 : "0:DEVCFG"
[ 3.332421] 0x000000980000-0x000000a00000 : "0:DEVCFG_1"
[ 3.333867] 0x000000a00000-0x000000a80000 : "0:APDP"
[ 3.342456] 0x000000a80000-0x000000b00000 : "0:APDP_1"
[ 3.362416] 0x000000b00000-0x000000b80000 : "0:RPM"
[ 3.363910] 0x000000b80000-0x000000c00000 : "0:RPM_1"
[ 3.367546] 0x000000c00000-0x000000c80000 : "0:CDT"
[ 3.372779] 0x000000c80000-0x000000d00000 : "0:CDT_1"
[ 3.382421] 0x000000d00000-0x000000d80000 : "0:APPSBLENV"
[ 3.392450] 0x000000d80000-0x000000e80000 : "0:APPSBL"
[ 3.394109] 0x000000e80000-0x000000f80000 : "0:APPSBL_1"
[ 3.412419] 0x000000f80000-0x000001000000 : "0:ART"
[ 3.413878] 0x000001000000-0x000001080000 : "0:ETHPHYFW"
[ 3.417539] 0x000001080000-0x000002980000 : "0:WIFIFW"
[ 3.452399] 0x000002980000-0x000002a00000 : "devinfo"
[ 3.453891] 0x000002a00000-0x000004a00000 : "tzcfg"
[ 3.471076] 0x000004a00000-0x000022500000 : "rootfs"
[ 3.682412] 0x000022500000-0x000040000000 : "rootfs_1"
[ 3.902986] libphy: Fixed MDIO Bus: probed
[ 4.121611] qca-mdio 90000.mdio: Could not find phy-reset-gpio
[ 4.121758] libphy: qca_mdio: probed
[ 4.127527] qca-mdio 90000.mdio: qca-mdio driver was registered
[ 4.130202] Unable to create IPC log context!
[ 4.136074] Skip QCA8074V1 in V2 platform
[ 4.140595] cnss[2]: INFO: Platform driver probed successfully. plat 2d08b9b8 tgt 0xfffe
[ 4.144436] i2c /dev entries driver
[ 4.183466]
[ 4.183466] Version Rollback Feature Disabled
[ 4.185966] remoteproc remoteproc0: cd00000.q6v5_wcss is available
[ 4.189512] NET: Registered protocol family 10
[ 4.195129] Segment Routing with IPv6
[ 4.198851] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver
[ 4.203117] NET: Registered protocol family 17
[ 4.208270] 8021q: 802.1Q VLAN Support v1.8
[ 4.213072] Registering SWP/SWPB emulation handler
[ 4.216973] Loading compiled-in X.509 certificates
[ 4.245813] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 2
[ 4.246059] cpr4_ipq807x_apss_read_fuse_data: apc_corner: speed bin = 0
[ 4.251950] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR fusing revision = 1
[ 4.258530] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR misc fuse value = 0
[ 4.266194] cpr4_ipq807x_apss_read_fuse_data: apc_corner: Voltage boost fuse config = 0 boost = disable
[ 4.273707] cpr3_mem_acc_init: apc: not using memory accelerator regulator
[ 4.282854] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused SVS: open-loop= 704000 uV
[ 4.289784] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused NOM: open-loop= 808000 uV
[ 4.299838] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused SVS: quot[ 7]= 769, quot_offset[ 7]= 0
[ 4.309590] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused NOM: quot[ 7]= 974, quot_offset[ 7]= 205
[ 4.320550] cpr3_regulator_init_ctrl: apc: Default CPR mode = closed-loop
[ 4.321454] qcom,cpr3-npu-regulator a4000.npu-cpr: NPU CPR valid fuse count: 2
[ 4.338322] cpr3_mem_acc_init: npu: not using memory accelerator regulator
[ 4.345264] npu_corner: fused NOM: open-loop= 784000 uV
[ 4.352113] npu_corner: fused TURBO: open-loop= 840000 uV
[ 4.357965] npu_corner: fused NOM: open-loop= 784000 uV
[ 4.363570] npu_corner: fused TURBO: open-loop= 840000 uV
[ 4.369230] npu_corner: Normal and Cold condition init done. Default to normal.
[ 4.375773] cpufreq: cpufreq_online: CPU0: Running at unlisted freq: 800000 KHz
[ 4.382070] cpufreq: cpufreq_online: CPU0: Unlisted initial frequency changed to: 1017600 KHz
[ 4.389479] ubi0: attaching mtd22
[ 6.176356] ubi0: scanning is finished
[ 6.183361] ubi0: attached mtd22 (name "rootfs", size 475 MiB)
[ 6.183385] ubi0: PEB size: 262144 bytes (256 KiB), LEB size: 253952 bytes
[ 6.188079] ubi0: min./max. I/O unit sizes: 4096/4096, sub-page size 4096
[ 6.194947] ubi0: VID header offset: 4096 (aligned 4096), data offset: 8192
[ 6.201803] ubi0: good PEBs: 1900, bad PEBs: 0, corrupted PEBs: 0
[ 6.208563] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[ 6.214822] ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 1047401851
[ 6.221944] ubi0: available PEBs: 0, total reserved PEBs: 1900, PEBs reserved for bad PEB handling: 80
[ 6.231235] ubi0: background thread "ubi_bgt0d" started, PID 70
[ 6.253399] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 6.253431] cfg80211: failed to load regulatory.db
[ 6.262421] VFS: Mounted root (squashfs filesystem) readonly on device 31:25.
[ 6.268840] devtmpfs: mounted
[ 6.274213] Freeing unused kernel memory: 1024K
[ 6.312406] Run /sbin/init as init process
[ 9.333048] nss_driver - fw of size 830420 bytes copied to load addr: 40000000, nss_id : 0
[ 9.334345] Supported Frequencies -
[ 9.334348] 748.8 MHz
[ 9.340194] 1.4976 GHz
[ 9.344034] 1.6896 GHz
[ 9.346179]
[ 9.351023] 7f2d0040: set sdma edded000
[ 9.352809] 7f2d0040: meminfo init succeed
[ 9.387953] node size 2 # items 4
[ 9.387978] memory: 40000000 2147483648 (avl 1995182080) items 4 active_cores 2
[ 9.390247] addr/size storage words 2 2 # words 4 in DTS, ddr size 1000000
[ 9.397416] 7f2d0040: nss core 0 booted successfully
[ 9.413100] nss_driver - fw of size 292100 bytes copied to load addr: 40800000, nss_id : 1
[ 9.413772] Supported Frequencies -
[ 9.413774] 748.8 MHz
[ 9.420244] 1.4976 GHz
[ 9.424089] 1.6896 GHz
[ 9.426231]
[ 9.431102] 7f2d47c0: set sdma edded100
[ 9.432830] 7f2d47c0: meminfo init succeed
[ 9.444789] node size 2 # items 4
[ 9.444827] memory: 40000000 2147483648 (avl 1995558912) items 4 active_cores 2
[ 9.447097] addr/size storage words 2 2 # words 4 in DTS, ddr size 1000000
[ 9.454240] 7f2d47c0: nss core 1 booted successfully
Please press Enter to activate this console.
:+oyhmNy :Mmdys+/`
yMMMMMMMo :NMMMMMMN`
`mMMMMMMMd: .sMMMMMMMM:
.dMMMMMMMMms/-` `.:odMMMMMMMMN:
.s: oNMMMMMMMMMMMMMMMMMMMMMMMMMh. .o/
`sMMMNy+/yNMMMMMMMMMMMMMMMMMMMMMd+/sdMMMd-
+NMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMy.
.yNMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMd:
`/ymMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMNh+.
`:+sydmMMMMMMMMMMMMMMMMMMMMNdhyo/-
.sNMMMMMMMMMMMMMMMMMMMMMh:
oMMMMMMMs/+dMMMMNo/+mMMMMMMh.
.dMMMMMMMy .MMMMo /MMMMMMMN:
`mMMMMMMMMMyosmMy/NMy+sNMMMMMMMMM:
yMMMMMMMs`/syyo- `+yyyo.:NMMMMMMN`
:+oyhmNy :Mmdys+/`
TanazaOS$
I tried the testuser7 and asd333111 builds for the MX4300 and both failed at the same place.
<snip>
[ 1.497852] NET: Registered PF_PACKET protocol family
[ 1.502035] 8021q: 802.1Q VLAN Support v1.8
[ 1.538109] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 4
[ 1.538443] cpr4_ipq807x_apss_read_fuse_data: apc_corner: speed bin = 0
[ 1.544262] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR fusing revision = 1
[ 1.550838] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR misc fuse value = 0
[ 1.558537] cpr4_ipq807x_apss_read_fuse_data: apc_corner: Voltage boost fuse config = 0 boost = disable
[ 1.566039] cpr3_mem_acc_init: apc: not using memory accelerator regulator
[ 1.575170] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused SVS: open-loop= 704000 uV
[ 1.582091] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused NOM: open-loop= 808000 uV
[ 1.592104] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused TURBO: open-loop= 872000 uV
[ 1.601912] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused STURBO: open-loop= 952000 uV
[ 1.611764] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused SVS: quot[ 7]= 728, quot_offse0
[ 1.621529] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused NOM: quot[ 7]= 932, quot_offse0
[ 1.632377] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused TURBO: quot[ 7]=1044, quot_offse0
[ 1.643313] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused STURBO: quot[ 7]=1196, quot_offse0
[ 1.654510] cpr3_regulator_init_ctrl: apc: Default CPR mode = closed-loop
[ 1.657353] cpufreq: cpufreq_online: CPU0: Running at unlisted initial frequency: 800000 KHz, changing to: 1017z
[ 1.673938] remoteproc remoteproc0: cd00000.q6v5_wcss is available
[ 1.683088] UBI error: cannot open mtd 24, error -[ 1.694472] Waiting for root device /dev/ubiblock0_0...
[ 31.843632] l11: disabling
Could this be related to installing DD-WRT first (that booted just fine)? I went back to the Linksys system and then tried to install.
I got this one, but have not tried it yet. https://www.amazon.com/dp/B083HVM7VZ/ref=pe_386300_440135490_TE_simp_item_image
So this one is loading kernel from ubi.
Can you post output from this commands (on old and new one): OpenWrt support for Linksys MX4200 - #1263 by lytr
Post full bootlog.
Ok, here it is:
Hit any key to stop autoboot: 0
Normal boot
NAND read: device 0 offset 0xc180000, size 0x800000
8388608 bytes read: OK
## Loading kernel from FIT Image at 44000000 ...
Using 'config@1' configuration
Trying 'kernel-1' kernel subimage
Description: ARM64 OpenWrt Linux-6.6.45
Type: Kernel Image
Compression: gzip compressed
Data Start: 0x440000e8
Data Size: 5176688 Bytes = 4.9 MiB
Architecture: AArch64
OS: Linux
Load Address: 0x41000000
Entry Point: 0x41000000
Hash algo: crc32
Hash value: fa6b5029
Hash algo: sha1
Hash value: 389a83fd716d00d4071bf85afaf203f692fc509f
Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 44000000 ...
Using 'config@1' configuration
Trying 'fdt-1' fdt subimage
Description: ARM64 OpenWrt linksys_mx4300 device tree blob
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x444eff98
Data Size: 45179 Bytes = 44.1 KiB
Architecture: AArch64
Hash algo: crc32
Hash value: 1ed17d2f
Hash algo: sha1
Hash value: 7283f75890b8705c6c1e957e359402cd3bbf70e8
Verifying Hash Integrity ... crc32+ sha1+ OK
Booting using the fdt blob at 0x444eff98
Uncompressing Kernel Image ... OK
Loading Device Tree to 4a3f1000, end 4a3ff07a ... OK
Using machid 0x801000d from environment
Starting kernel ...
Jumping to AARCH64 kernel via monitor
[ 0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[ 0.000000] Linux version 6.6.45 (runner@fv-az2031-206) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 13.3.0 r0-4
[ 0.000000] OF: fdt: Input kernel commad line: init=/sbin/init rootfstype=squashfs ubi.mtd=24,2048 ubi.block=0,o
[ 0.000000] OF: fdt: Replace kernel command line with bootargs-replace-2
[ 0.000000] OF: fdt: Kernel command line after replacement: init=/sbin/init rootfstype=squashfs ubi.mtd=24,4096o
[ 0.000000] Machine model: Linksys MX4300
[ 0.000000] OF: reserved mem: 0x0000000040000000..0x0000000040ffffff (16384 KiB) nomap non-reusable nss@40000000
[ 0.000000] OF: reserved mem: 0x000000004a400000..0x000000004a5fffff (2048 KiB) nomap non-reusable tzapp@4a40000
[ 0.000000] OF: reserved mem: 0x000000004a600000..0x000000004a9fffff (4096 KiB) nomap non-reusable bootloader@40
[ 0.000000] OF: reserved mem: 0x000000004aa00000..0x000000004aafffff (1024 KiB) nomap non-reusable sbl@4aa00000
[ 0.000000] OF: reserved mem: 0x000000004ab00000..0x000000004abfffff (1024 KiB) nomap non-reusable smem@4ab00000
[ 0.000000] OF: reserved mem: 0x000000004ac00000..0x000000004affffff (4096 KiB) nomap non-reusable memory@4ac000
[ 0.000000] OF: reserved mem: 0x000000004b000000..0x0000000050efffff (97280 KiB) nomap non-reusable wcnss@4b0000
[ 0.000000] OF: reserved mem: 0x0000000050f00000..0x0000000050ffffff (1024 KiB) nomap non-reusable q6_etr_dump@0
[ 0.000000] OF: reserved mem: 0x0000000051000000..0x00000000510fffff (1024 KiB) nomap non-reusable m3_dump@51000
[ 0.000000] Zone ranges:
[ 0.000000] DMA [mem 0x0000000040000000-0x00000000bfffffff]
[ 0.000000] DMA32 empty
[ 0.000000] Normal empty
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000040000000-0x0000000040ffffff]
[ 0.000000] node 0: [mem 0x0000000041000000-0x000000004a3fffff]
[ 0.000000] node 0: [mem 0x000000004a400000-0x00000000510fffff]
[ 0.000000] node 0: [mem 0x0000000051100000-0x00000000bfffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x00000000bfffffff]
[ 0.000000] psci: probing for conduit method from DT.
[ 0.000000] psci: PSCIv1.0 detected in firmware.
[ 0.000000] psci: Using standard PSCI v0.2 function IDs
[ 0.000000] psci: MIGRATE_INFO_TYPE not supported.
[ 0.000000] psci: SMC Calling Convention v1.0
[ 0.000000] percpu: Embedded 18 pages/cpu s35240 r8192 d30296 u73728
[ 0.000000] Detected VIPT I-cache on CPU0
[ 0.000000] alternatives: applying boot alternatives
[ 0.000000] Kernel command line: init=/sbin/init rootfstype=squashfs ubi.mtd=24,4096 ubi.block=0,0 root=/dev/ubo
[ 0.000000] Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear)
[ 0.000000] Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear)
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 516096
[ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[ 0.000000] software IO TLB: SWIOTLB bounce buffer size adjusted to 2MB
[ 0.000000] software IO TLB: area num 4.
[ 0.000000] software IO TLB: mapped [mem 0x00000000bd600000-0x00000000bd800000] (2MB)
[ 0.000000] Memory: 1913332K/2097152K available (8128K kernel code, 892K rwdata, 2500K rodata, 1472K init, 276K)
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[ 0.000000] rcu: Hierarchical RCU implementation.
[ 0.000000] Tracing variant of Tasks RCU enabled.
[ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[ 0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[ 0.000000] Root IRQ handler: gic_handle_irq
[ 0.000000] GICv2m: range[mem 0x0b00a000-0x0b00affc], SPI[448:479]
[ 0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[ 0.000000] arch_timer: cp15 and mmio timer(s) running at 19.20MHz (virt/virt).
[ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x46d987e47, max_idle_ns: 4407952s
[ 0.000001] sched_clock: 56 bits at 19MHz, resolution 52ns, wraps every 4398046511078ns
[ 0.000101] Calibrating delay loop (skipped), value calculated using timer frequency.. 38.40 BogoMIPS (lpj=1920)
[ 0.000115] pid_max: default: 32768 minimum: 301
[ 0.005195] Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear)
[ 0.005213] Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear)
[ 0.009499] RCU Tasks Trace: Setting shift to 2 and lim to 1 rcu_task_cb_adjust=1.
[ 0.009723] rcu: Hierarchical SRCU implementation.
[ 0.009727] rcu: Max phase no-delay instances is 1000.
[ 0.010656] smp: Bringing up secondary CPUs ...
[ 0.011325] Detected VIPT I-cache on CPU1
[ 0.011427] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
[ 0.012089] Detected VIPT I-cache on CPU2
[ 0.012160] CPU2: Booted secondary processor 0x0000000002 [0x410fd034]
[ 0.012812] Detected VIPT I-cache on CPU3
[ 0.012878] CPU3: Booted secondary processor 0x0000000003 [0x410fd034]
[ 0.012947] smp: Brought up 1 node, 4 CPUs
[ 0.012956] SMP: Total of 4 processors activated.
[ 0.012961] CPU features: detected: 32-bit EL0 Support
[ 0.012966] CPU features: detected: CRC32 instructions
[ 0.013035] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[ 0.013043] CPU: All CPU(s) started at EL1
[ 0.013046] alternatives: applying system-wide alternatives
[ 0.023437] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.023464] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[ 0.025194] pinctrl core: initialized pinctrl subsystem
[ 0.026920] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[ 0.027529] DMA: preallocated 256 KiB GFP_KERNEL pool for atomic allocations
[ 0.027584] DMA: preallocated 256 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[ 0.027636] DMA: preallocated 256 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[ 0.028025] thermal_sys: Registered thermal governor 'step_wise'
[ 0.028083] cpuidle: using governor menu
[ 0.028302] ASID allocator initialised with 65536 entries
[ 0.054419] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 4
[ 0.056345] Modules: 29408 pages in range for non-PLT usage
[ 0.056352] Modules: 520928 pages in range for PLT usage
[ 0.061170] SCSI subsystem initialized
[ 0.061366] usbcore: registered new interface driver usbfs
[ 0.061400] usbcore: registered new interface driver hub
[ 0.061481] usbcore: registered new device driver usb
[ 0.061895] qcom_scm: convention: smc arm 64
[ 0.063600] clocksource: Switched to clocksource arch_sys_counter
[ 0.067339] NET: Registered PF_INET protocol family
[ 0.067527] IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear)
[ 0.070991] tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear)
[ 0.071023] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[ 0.071039] TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear)
[ 0.071200] TCP bind hash table entries: 16384 (order: 7, 524288 bytes, linear)
[ 0.071795] TCP: Hash tables configured (established 16384 bind 16384)
[ 0.071917] UDP hash table entries: 1024 (order: 3, 32768 bytes, linear)
[ 0.071983] UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear)
[ 0.072468] NET: Registered PF_UNIX/PF_LOCAL protocol family
[ 0.072524] PCI: CLS 0 bytes, default 64
[ 0.074233] workingset: timestamp_bits=46 max_order=19 bucket_order=0
[ 0.074815] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.074823] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.080987] qcom-qmp-usb-phy 78000.phy: supply vdda-phy not found, using dummy regulator
[ 0.081167] qcom-qmp-usb-phy 78000.phy: supply vdda-pll not found, using dummy regulator
[ 0.082431] qcom-qusb2-phy 79000.phy: supply vdd not found, using dummy regulator
[ 0.082555] qcom-qusb2-phy 79000.phy: supply vdda-pll not found, using dummy regulator
[ 0.082598] qcom-qusb2-phy 79000.phy: supply vdda-phy-dpdm not found, using dummy regulator
[ 0.082828] qcom-qusb2-phy 79000.phy: Registered Qcom-QUSB2 phy
[ 0.091134] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[ 0.092095] msm_serial 78b3000.serial: msm_serial: detected port #0
[ 0.092150] msm_serial 78b3000.serial: uartclk = 3686400
[ 0.092473] 78b3000.serial: ttyMSM0 at MMIO 0x78b3000 (irq = 20, base_baud = 230400) is a MSM
[ 0.092512] msm_serial: console setup on port #0
[ 0.092552] printk: console [ttyMSM0] enabled
[ 0.890840] msm_serial: driver initialized
[ 0.900055] loop: module loaded
[ 0.901448] nand: device found, Manufacturer ID: 0x2c, Chip ID: 0xa3
[ 0.902016] nand: Micron MT29F8G08ABBCAH4
[ 0.908652] nand: 1024 MiB, SLC, erase size: 256 KiB, page size: 4096, OOB size: 224
[ 0.912866] 24 fixed-partitions partitions found on MTD device qcom_nand.0
[ 0.920358] Creating 24 MTD partitions on "qcom_nand.0":
[ 0.927104] 0x000000000000-0x000000100000 : "0:sbl1"
[ 0.933516] 0x000000100000-0x000000200000 : "0:mibib"
[ 0.938549] 0x000000200000-0x000000280000 : "0:bootconfig"
[ 0.943046] 0x000000280000-0x000000300000 : "0:bootconfig1"
[ 0.948544] 0x000000300000-0x000000600000 : "0:qsee"
[ 0.954866] 0x000000600000-0x000000900000 : "0:qsee_1"
[ 0.960053] 0x000000900000-0x000000980000 : "0:devcfg"
[ 0.964099] 0x000000980000-0x000000a00000 : "0:devcfg_1"
[ 0.969174] 0x000000a00000-0x000000a80000 : "0:apdp"
[ 0.974679] 0x000000a80000-0x000000b00000 : "0:apdp_1"
[ 0.979594] 0x000000b00000-0x000000b80000 : "0:rpm"
[ 0.984597] 0x000000b80000-0x000000c00000 : "0:rpm_1"
[ 0.989341] 0x000000c00000-0x000000c80000 : "0:cdt"
[ 0.994571] 0x000000c80000-0x000000d00000 : "0:cdt_1"
[ 0.999210] 0x000000d00000-0x000000d80000 : "0:appsblenv"
[ 1.004554] 0x000000d80000-0x000000e80000 : "0:appsbl"
[ 1.009997] 0x000000e80000-0x000000f80000 : "0:appsbl_1"
[ 1.015208] 0x000000f80000-0x000001000000 : "0:art"
[ 1.020309] 0x000001000000-0x000001080000 : "0:ethphyfw"
[ 1.024988] 0x000001080000-0x000002980000 : "0:wififw"
[ 1.039884] 0x000002980000-0x000002a00000 : "devinfo"
[ 1.040600] 0x000002a00000-0x000004a00000 : "tzcfg"
[ 1.056538] 0x000004a00000-0x000022500000 : "rootfs"
[ 1.239210] mtd: setting mtd22 (rootfs) as root device
[ 1.239746] mtdsplit: no squashfs found in "rootfs"
[ 1.243260] 0x000022500000-0x000040000000 : "rootfs_1"
[ 1.441445] spmi spmi-0: PMIC arbiter version v2 (0x20010000)
[ 1.460488] i2c_dev: i2c /dev entries driver
[ 1.468125] sdhci: Secure Digital Host Controller Interface driver
[ 1.468170] sdhci: Copyright(c) Pierre Ossman
[ 1.473205] sdhci-pltfm: SDHCI platform and OF driver helper
[ 1.479611] remoteproc remoteproc0: releasing cd00000.q6v5_wcss
[ 1.486831] NET: Registered PF_INET6 protocol family
[ 1.490511] Segment Routing with IPv6
[ 1.494312] In-situ OAM (IOAM) with IPv6
[ 1.497852] NET: Registered PF_PACKET protocol family
[ 1.502035] 8021q: 802.1Q VLAN Support v1.8
[ 1.538109] qcom,cpr4-apss-regulator b018000.cpr4-ctrl: CPR valid fuse count: 4
[ 1.538443] cpr4_ipq807x_apss_read_fuse_data: apc_corner: speed bin = 0
[ 1.544262] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR fusing revision = 1
[ 1.550838] cpr4_ipq807x_apss_read_fuse_data: apc_corner: CPR misc fuse value = 0
[ 1.558537] cpr4_ipq807x_apss_read_fuse_data: apc_corner: Voltage boost fuse config = 0 boost = disable
[ 1.566039] cpr3_mem_acc_init: apc: not using memory accelerator regulator
[ 1.575170] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused SVS: open-loop= 704000 uV
[ 1.582091] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused NOM: open-loop= 808000 uV
[ 1.592104] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused TURBO: open-loop= 872000 uV
[ 1.601912] cpr4_ipq807x_apss_calculate_open_loop_voltages: apc_corner: fused STURBO: open-loop= 952000 uV
[ 1.611764] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused SVS: quot[ 7]= 728, quot_offse0
[ 1.621529] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused NOM: quot[ 7]= 932, quot_offse0
[ 1.632377] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused TURBO: quot[ 7]=1044, quot_offse0
[ 1.643313] cpr4_ipq807x_apss_calculate_target_quotients: apc_corner: fused STURBO: quot[ 7]=1196, quot_offse0
[ 1.654510] cpr3_regulator_init_ctrl: apc: Default CPR mode = closed-loop
[ 1.657353] cpufreq: cpufreq_online: CPU0: Running at unlisted initial frequency: 800000 KHz, changing to: 1017z
[ 1.673938] remoteproc remoteproc0: cd00000.q6v5_wcss is available
[ 1.683088] UBI error: cannot open mtd 24, error -[ 1.694472] Waiting for root device /dev/ubiblock0_0...
[ 31.843632] l11: disabling
That's for the asd333111 image. Would the testuser7 image be helpful too?
It ends the same way.
So you have HomeWRK or MX4300?
I have a MX4300. Did I use the wrong image?
It looks like. Try this one: OpenWrt support for Linksys MX4200 - #1035 by lytr