The MX6200 is similar to the MX5500; both have IPQ5018.
I have serial access to it if needed, anyone min helping me build it?
Here is the information I found on the hardware:
- IPQ5018-soc
- 512 MB SDRAM DDR3L
- 2,4GHz, 5GHz and 6GHz
- 1Gb/s WAN port and 1Gb/s LAN port
Logs at startup:
Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1.1-00075
S - IMAGE_VARIANT_STRING=MAACANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x000002c5
B - 126 - PBL, Start
B - 1557 - bootable_media_detect_entry, Start
B - 3843 - bootable_media_detect_success, Start
B - 3846 - elf_loader_entry, Start
B - 9261 - auth_hash_seg_entry, Start
B - 30169 - auth_hash_seg_exit, Start
B - 126781 - elf_segs_hash_verify_entry, Start
B - 196427 - PBL, End
B - 160521 - SBL1, Start
B - 221887 - GCC [RstStat:0x0, RstDbg:0x600000] WDog Stat : 0x4
B - 230061 - clock_init, Start
D - 7259 - clock_init, Delta
B - 237473 - boot_flash_init, Start
D - 20587 - boot_flash_init, Delta
B - 258121 - boot_config_data_table_init, Start
D - 5307 - boot_config_data_table_init, Delta - (575 Bytes)
B - 266478 - Boot Setting : 0x00030618
B - 272670 - CDT version:2,Platform ID:8,Major ID:4,Minor ID:0,Subtype:4
B - 279593 - sbl1_ddr_set_params, Start
B - 281210 - Pre_DDR_clock_init, Start
B - 286852 - Pre_DDR_clock_init, End
B - 928938 - do ddr sanity test, Start
D - 61 - do ddr sanity test, Delta
B - 933605 - Image Load, Start
D - 267210 - QSEE Image Loaded, Delta - (587396 Bytes)
B - 1201669 - Image Load, Start
D - 25285 - DEVCFG Image Loaded, Delta - (19992 Bytes)
B - 1226984 - Image Load, Start
D - 202429 - APPSBL Image Loaded, Delta - (443584 Bytes)
B - 1429474 - QSEE Execution, Start
D - 61 - QSEE Execution, Delta
B - 1435940 - SBL1, End
D - 1277920 - SBL1, Delta
S - Flash Throughput, 2322 KB/s (1052219 Bytes, 453041 us)
S - DDR Frequency, 800 MHz
S - Core 0 Frequency, 800 MHz
U-Boot 2016.01 (Feb 03 2023 - 09:15:14 +0000)
CBT U-Boot ver: 7.1.25 ([IPQ5018].[SPF12.1].[CS1])
DRAM: smem ram ptable found: ver: 1 len: 4
512 MiB
NAND: QPIC controller support serial NAND
ID = 3a6c2
Vendor = c2
Device = a6
Serial Nand Device Found With ID : 0xc2 0xa6
Serial NAND device Manufacturer:MX35UF2GE4AD
Device Size:256 MiB, Page size:2048, Spare Size:128, ECC:8-bit
qpic_nand: changing oobsize to 80 from 128 bytes
SF: Unsupported flash IDs: manuf 00, jedec 0000, ext_jedec 0000
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
256 MiB
MMC: sdhci: Node Not found, skipping initialization
PCI Link Intialized
PCI Link Intialized
In: serial@78AF000
Out: serial@78AF000
Err: serial@78AF000
machid: 8040004
eth0 MAC Address from ART is not valid
eth1 MAC Address from ART is not valid
> parittion 2 is active
auto-recovery enabled:1, boot_part:2, boot_part_ready:3
#### auto_recovery ####
#### boot_count = 0 ####
Updating boot_count ... done
Hit any key to stop autoboot: 0
ubi0: attaching mtd1
ubi0: scanning is finished
ubi0: attached mtd1 (name "mtd=0", size 50 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 400, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 728048624
ubi0: available PEBs: 0, total reserved PEBs: 400, PEBs reserved for bad PEB handling: 40
Read 0 bytes from volume kernel to 44000000
No size specified -> Using max size (4829616)
Read 0 bytes from volume ubi_rootfs to 45000028
No size specified -> Using max size (38854656)
Rootfs image authentication successful
Manual device tree config selected!
## Loading kernel from FIT Image at 44000028 ...
Using 'config@1' configuration
Trying 'kernel@1' kernel subimage
Description: ARM OpenWrt Linux-5.4.164
Type: Kernel Image
Compression: gzip compressed
Data Start: 0x4400010c
Data Size: 4770511 Bytes = 4.5 MiB
Architecture: ARM
OS: Linux
Load Address: 0x41208000
Entry Point: 0x41208000
Hash algo: crc32
Hash value: a8446d27
Hash algo: sha1
Hash value: 6e66b1eeaf288e00b77a161d9d946ef2b2892d17
Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 44000028 ...
Using 'config@1' configuration
Trying 'fdt@1' fdt subimage
Description: ARM OpenWrt Maple device tree blob
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x4448cd0c
Data Size: 44361 Bytes = 43.3 KiB
Architecture: ARM
Hash algo: crc32
Hash value: 687eb99b
Hash algo: sha1
Hash value: a04ebe1c21bec2c9c47eaa40babfe2d72765ffda
Verifying Hash Integrity ... crc32+ sha1+ OK
Booting using the fdt blob at 0x4448cd0c
Uncompressing Kernel Image ... OK
Loading Device Tree to 4a3f2000, end 4a3ffd48 ... OK
Using machid 0x8040004 from environment
Starting kernel ...
[ 0.000000] Booting Linux on physical CPU 0x0
[ 0.000000] Linux version 5.4.164 (root@ip-10-0-0-174) (gcc version 7.5.0 (OpenWrt GCC 7.5.0 r0+12639-06c3e847c3)) #1 SMP PREEMPT Tue Nov 14 15:49:00 PST 2023
[ 0.000000] CPU: ARMv7 Processor [51af8014] revision 4 (ARMv7), cr=10c0383d
[ 0.000000] CPU: div instructions available: patching division code
[ 0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[ 0.000000] OF: fdt: Machine model: Qualcomm Technologies, Inc. IPQ5018/AP-MP03.5-C1
[ 0.000000] OF: fdt: Ignoring memory range 0x40000000 - 0x41000000
[ 0.000000] Memory policy: Data cache writealloc
[ 0.000000] OF: reserved mem: OVERLAP DETECTED!
[ 0.000000] q6_code_data@4B000000 (0x4b000000--0x4b060000) overlaps with q6_mem_regions@4B000000 (0x4b000000--0x4fd00000)
[ 0.000000] OF: reserved mem: OVERLAP DETECTED!
[ 0.000000] q6_mem_regions@4B000000 (0x4b000000--0x4fd00000) overlaps with q6_ipq5018_data@4C400000 (0x4c400000--0x4d100000)
[ 0.000000] psci: probing for conduit method from DT.
[ 0.000000] psci: PSCIv1.0 detected in firmware.
[ 0.000000] psci: Using standard PSCI v0.2 function IDs
[ 0.000000] psci: MIGRATE_INFO_TYPE not supported.
[ 0.000000] psci: SMC Calling Convention v1.0
[ 0.000000] psci: OSI mode supported.
[ 0.000000] percpu: Embedded 15 pages/cpu s32140 r8192 d21108 u61440
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 104100
[ 0.000000] Kernel command line: console=ttyMSM0,115200n8 ubi.mtd=rootfs root=mtd:ubi_rootfs rootfstype=squashfs rootwait swiotlb=1 coherent_pool=2M
[ 0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes, linear)
[ 0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes, linear)
[ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[ 0.000000] Memory: 405412K/420864K available (6714K kernel code, 342K rwdata, 2136K rodata, 1024K init, 367K bss, 15452K reserved, 0K cma-reserved, 0K highmem)
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[ 0.000000] rcu: Preemptible hierarchical RCU implementation.
[ 0.000000] Tasks RCU enabled.
[ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[ 0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[ 0.000000] GICv2m: range[mem 0x0b00a000-0x0b00affc], SPI[448:479]
[ 0.000000] GICv2m: range[mem 0x0b00b000-0x0b00bffc], SPI[480:511]
[ 0.000000] random: get_random_bytes called from start_kernel+0x2e0/0x508 with crng_init=0
[ 0.000000] arch_timer: cp15 and mmio timer(s) running at 24.00MHz (virt/virt).
[ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x588fe9dc0, max_idle_ns: 440795202592 ns
[ 0.000006] sched_clock: 56 bits at 24MHz, resolution 41ns, wraps every 4398046511097ns
[ 0.000018] Switching to timer-based delay loop, resolution 41ns
[ 0.000401] Calibrating delay loop (skipped), value calculated using timer frequency.. 48.00 BogoMIPS (lpj=240000)
[ 0.000420] pid_max: default: 32768 minimum: 301
[ 0.000603] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[ 0.000616] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[ 0.001633] CPU: Testing write buffer coherency: ok
[ 0.002090] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
[ 0.003010] Setting up static identity map for 0x41300000 - 0x41300060
[ 0.003212] rcu: Hierarchical SRCU implementation.
[ 0.006158] smp: Bringing up secondary CPUs ...
[ 0.007260] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
[ 0.007455] smp: Brought up 1 node, 2 CPUs
[ 0.007476] SMP: Total of 2 processors activated (96.00 BogoMIPS).
[ 0.007482] CPU: All CPU(s) started in SVC mode.
[ 0.017752] VFP support v0.3: implementor 51 architecture 3 part 40 variant 3 rev 4
[ 0.018190] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.018216] futex hash table entries: 512 (order: 3, 32768 bytes, linear)
[ 0.018387] pinctrl core: initialized pinctrl subsystem
[ 0.019631] NET: Registered protocol family 16
[ 0.021166] DMA: preallocated 2048 KiB pool for atomic coherent allocations
[ 0.022457] cpuidle: using governor ladder
[ 0.022519] cpuidle: using governor menu
[ 0.022764] NET: Registered protocol family 42
[ 0.023199] hw-breakpoint: found 5 (+1 reserved) breakpoint and 4 watchpoint registers.
[ 0.023211] hw-breakpoint: maximum watchpoint size is 8 bytes.
[ 0.072138] qcom,gcc-ipq5018 1800000.gcc: Registered ipq5018 GCC clocks provider
[ 0.090507] msm_sps_probe: sps:sps is ready
[ 3.099826] pps_core: LinuxPPS API ver. 1 registered
[ 3.099840] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[ 3.099867] PTP clock support registered
[ 3.100994] workqueue: max_active 576 requested for napi_workq is out of range, clamping between 1 and 512
[ 3.102373] clocksource: Switched to clocksource arch_sys_counter
[ 3.103480] thermal_sys: Registered thermal governor 'step_wise'
[ 3.103485] thermal_sys: Registered thermal governor 'user_space'
[ 3.104617] NET: Registered protocol family 2
[ 3.104786] IP idents hash table entries: 8192 (order: 4, 65536 bytes, linear)
[ 3.105901] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 6144 bytes, linear)
[ 3.105945] TCP established hash table entries: 4096 (order: 2, 16384 bytes, linear)
[ 3.105997] TCP bind hash table entries: 4096 (order: 3, 32768 bytes, linear)
[ 3.106072] TCP: Hash tables configured (established 4096 bind 4096)
[ 3.106198] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[ 3.106231] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[ 3.106489] NET: Registered protocol family 1
[ 3.106548] PCI: CLS 0 bytes, default 64
[ 3.107422] hw perfevents: enabled with armv7_cortex_a7 PMU driver, 7 counters available
[ 3.108958] Initialise system trusted keyrings
[ 3.109281] workingset: timestamp_bits=14 max_order=17 bucket_order=3
[ 3.115606] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 3.115623] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 3.144608] Key type asymmetric registered
[ 3.144629] Asymmetric key parser 'x509' registered
[ 3.147788] bam-dma-engine 704000.dma: num-channels unspecified in dt
[ 3.147805] bam-dma-engine 704000.dma: num-ees unspecified in dt
[ 3.148730] bam-dma-engine 7884000.dma: qcom,controlled-remotely unspecified
[ 3.149817] bam-dma-engine 7984000.dma: qcom,controlled-remotely unspecified
[ 3.152052] CPU: IPQ5018, SoC Version: 1.1
[ 3.152063] OEM_ID: 30513, PROD_ID: 13624
[ 3.152996] TZ Log : Will warn on Access Violation, as paniconaccessviolation is not set
[ 3.154295] 58000.qcom,msm-eud: ttyEUD0 at MMIO 0x0 (irq = 31, base_baud = 0) is a EUD UART
[ 3.154920] msm_serial 78af000.serial: msm_serial: detected port #0
[ 3.154969] msm_serial 78af000.serial: uartclk = 1843199
[ 3.155044] 78af000.serial: ttyMSM0 at MMIO 0x78af000 (irq = 30, base_baud = 115199) is a MSM
[ 3.155079] msm_serial: console setup on port #0
[ 3.792382] printk: console [ttyMSM0] enabled
[ 3.797391] msm_serial: driver initialized
[ 3.801823] random: fast init done
[ 3.805466] random: crng init done
[ 3.813737] brd: module loaded
[ 3.818702] loop: module loaded
[ 3.820117] nand: device found, Manufacturer ID: 0xc2, Chip ID: 0xa6
[ 3.820643] nand: Macronix MX35UF2GE4AD-Z4I SPI NAND 2G 1.8V
[ 3.827299] nand: 256 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 128
[ 3.833133] qcom-nandc 79b0000.qpic-nand: x4 mode enabled already remotely
[ 3.843149] qcom-nandc 79b0000.qpic-nand: Error in reading max io macro clock from dts
[ 3.847318] 22 fixed-partitions partitions found on MTD device qcom_nand.0
[ 3.855177] Creating 22 MTD partitions on "qcom_nand.0":
[ 3.861967] 0x000000000000-0x000000100000 : "0:SBL1"
[ 3.869684] 0x000000100000-0x000000200000 : "0:MIBIB"
[ 3.874659] 0x000000200000-0x000000240000 : "0:BOOTCONFIG"
[ 3.878544] 0x000000240000-0x000000280000 : "0:BOOTCONFIG1"
[ 3.884084] 0x000000280000-0x000000480000 : "0:QSEE"
[ 3.891656] 0x000000480000-0x000000680000 : "0:QSEE_1"
[ 3.896826] 0x000000680000-0x000000780000 : "0:DEVCFG"
[ 3.900543] 0x000000780000-0x000000880000 : "0:DEVCFG_1"
[ 3.905742] 0x000000880000-0x000000980000 : "0:CDT"
[ 3.911144] 0x000000980000-0x000000a80000 : "0:CDT_1"
[ 3.915813] 0x000000a80000-0x000000b80000 : "ppinfo"
[ 3.921021] 0x000000b80000-0x000000e00000 : "0:APPSBL"
[ 3.927901] 0x000000e00000-0x000001080000 : "0:APPSBL_1"
[ 3.932851] 0x000001080000-0x000001280000 : "0:ART"
[ 3.937563] 0x000001280000-0x000001380000 : "0:TRAINING"
[ 3.941038] 0x000001380000-0x000001480000 : "u_env"
[ 3.946633] 0x000001480000-0x000001580000 : "s_env"
[ 3.951165] 0x000001580000-0x000001680000 : "devinfo"
[ 3.956093] 0x000001680000-0x000004880000 : "rootfs_1"
[ 4.021817] 0x000004880000-0x000007a80000 : "rootfs"
[ 4.084647] mtd: device 19 (rootfs) set to be root filesystem
[ 4.084999] mtdsplit: no squashfs found in "rootfs"
[ 4.089414] 0x000007a80000-0x000007c80000 : "sysdiag"
[ 4.097594] 0x000007c80000-0x00000fe80000 : "syscfg"
[ 4.261040] spi_qup 78b5000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64
[ 4.263312] libphy: Fixed MDIO Bus: probed
[ 4.487479] qca-mdio 88000.mdio: Could not find phy-reset-gpio
[ 4.487763] libphy: qca_mdio: probed
[ 4.492995] qca-mdio 88000.mdio: qca-mdio driver was registered
[ 4.936487] qca-mdio 90000.mdio: Could not find phy-reset-gpio
[ 4.936763] libphy: qca_mdio: probed
[ 4.941918] qca-mdio 90000.mdio: qca-mdio driver was registered
[ 5.055323] tun: Universal TUN/TAP device driver, 1.6
[ 5.055473] PPP generic driver version 2.4.2
[ 5.059475] PPP MPPE Compression module registered
[ 5.063753] NET: Registered protocol family 24
[ 5.068313] PPTP driver version 0.8.5
[ 5.073011] i2c /dev entries driver
[ 5.077515] qcom-tsens 4a9000.thermal-sensor: tsens device is not enabled
[ 5.081868] cpufreq: cpufreq_online: CPU0: Running at unlisted freq: 799999 KHz
[ 5.086872] cpufreq: cpufreq_online: CPU0: Unlisted initial frequency changed to: 800000 KHz
[ 5.126314] >>> Register 4 PWM-LEDs
[ 5.127278] sdhci: Secure Digital Host Controller Interface driver
[ 5.128597] sdhci: Copyright(c) Pierre Ossman
[ 5.134903] sdhci-pltfm: SDHCI platform and OF driver helper
[ 5.142775] remoteproc remoteproc0: cd00000.remoteproc is available
[ 5.146116] remoteproc remoteproc1: 4ab000.remoteproc_pd1 is available
[ 5.152031] remoteproc remoteproc2: cd00000.remoteproc:remoteproc_pd2 is available
[ 5.158722] remoteproc remoteproc3: cd00000.remoteproc:remoteproc_pd3 is available
[ 5.165969] coresight-tmc 6047000.tmc: failed to get flush cti, defer probe
[ 5.173058] coresight-dynamic-funnel 6041000.funnel: Uses obsolete Coresight DT bindings
[ 5.182571] coresight coresight-etm0: CPU0: ETM v4.0 initialized
[ 5.187892] coresight-etm4x 619c000.etm: CPU0: (null) initialized
[ 5.194469] coresight coresight-etm1: CPU1: ETM v4.0 initialized
[ 5.199871] coresight-etm4x 619d000.etm: CPU1: (null) initialized
[ 5.211678] coresight-stm 6002000.stm: coresight-stm : stm_register_device failed, probing deferred
[ 5.212152] OF: graph: no port node found in /soc/cti@6010000
[ 5.221164] OF: graph: no port node found in /soc/cti@6011000
[ 5.227054] OF: graph: no port node found in /soc/cti@6012000
[ 5.238107] OF: graph: no port node found in /soc/cti@6013000
[ 5.238369] OF: graph: no port node found in /soc/cti@6014000
[ 5.244288] OF: graph: no port node found in /soc/cti@6015000
[ 5.249918] OF: graph: no port node found in /soc/cti@6016000
[ 5.255696] OF: graph: no port node found in /soc/cti@6017000
[ 5.261355] OF: graph: no port node found in /soc/cti@6018000
[ 5.272524] OF: graph: no port node found in /soc/cti@6019000
[ 5.272785] OF: graph: no port node found in /soc/cti@601a000
[ 5.278484] OF: graph: no port node found in /soc/cti@601b000
[ 5.284398] OF: graph: no port node found in /soc/cti@601c000
[ 5.290008] OF: graph: no port node found in /soc/cti@601d000
[ 5.301155] OF: graph: no port node found in /soc/cti@601e000
[ 5.301426] OF: graph: no port node found in /soc/cti@601f000
[ 5.307323] OF: graph: no port node found in /soc/cti@6198000
[ 5.313000] OF: graph: no port node found in /soc/cti@6199000
[ 5.318666] OF: graph: no port node found in /soc/cti@610c000
[ 5.330819] OF: graph: no port node found in /soc/hwevent@6101000
[ 5.330854] coresight-hwevent 6101000.hwevent: No csr data
[ 5.336499] OF: graph: no port node found in /soc/csr@6001000
[ 5.341414] coresight-csr 6001000.csr: CSR initialized: coresight-csr
[ 5.348538] nf_conntrack_rtsp v0.7 loading
[ 5.353929] ipip: IPv4 and MPLS over IPv4 tunneling driver
[ 5.358082] gre: GRE over IPv4 demultiplexor driver
[ 5.363088] ip_gre: GRE over IPv4 tunneling driver
[ 5.369264] nf_nat_rtsp v0.7 loading
[ 5.373531] NET: Registered protocol family 10
[ 5.378219] Segment Routing with IPv6
[ 5.380970] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver
[ 5.385846] ip6_gre: GRE over IPv6 tunneling driver
[ 5.390740] NET: Registered protocol family 17
[ 5.395111] Bridge firewalling registered
[ 5.399940] l2tp_core: L2TP core driver, V2.0
[ 5.403604] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[ 5.407848] l2tp_netlink: L2TP netlink interface
[ 5.412672] 8021q: 802.1Q VLAN Support v1.8
[ 5.417583] Registering SWP/SWPB emulation handler
[ 5.421413] Loading compiled-in X.509 certificates
[ 5.441217] sps_register_bam_device: sps:BAM 0x06064000 is registered
[ 5.442684] coresight coresight-stm: STM32 initialized
[ 5.446994] ubi0: attaching mtd19
[ 5.755151] ubi0: scanning is finished
[ 5.762152] ubi0: attached mtd19 (name "rootfs", size 50 MiB)
[ 5.762179] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[ 5.766928] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[ 5.774503] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[ 5.780495] ubi0: good PEBs: 400, bad PEBs: 0, corrupted PEBs: 0
[ 5.792401] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[ 5.793520] ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 728048624
[ 5.800550] ubi0: available PEBs: 0, total reserved PEBs: 400, PEBs reserved for bad PEB handling: 40
[ 5.809550] ubi0: background thread "ubi_bgt0d" started, PID 79
[ 5.820302] input: soc:gpio_keys as /devices/platform/soc/soc:gpio_keys/input/input0
[ 5.824834] hctosys: unable to open rtc device (rtc0)
[ 5.836549] VFS: Mounted root (squashfs filesystem) readonly on device 31:23.
[ 5.838711] Freeing unused kernel memory: 1024K
[ 5.877952] Run /sbin/init as init process
*********************************************************************************
_ _ __ _ __ _____ __ __ _____
| | | || \ | | / // ____]\ \ / // ____]TM
| | | || \ | | / /| (___ \ V /| (____
| | | || |\ \| |\ \ \____ \ \ / \____ \
| |_____ | || | \ | \ \ ____) | | | ____) |
|_______||_||_| \__| \_\[____ / |_| [_____/
(c) 2013 Belkin International, Inc. and/or its affiliates. All rights reserved.
Booting maple (firmware version 1.0.6.214447)
*********************************************************************************
[utopia][init] System Initialization
[utopia][init] Creating /proc
[utopia][init] Creating /sys
[utopia][init] Creating /dev
[utopia][init] Creating /tmp
[utopia][init] Allocating 100M for /tmp
[utopia][init] Prepairing /dev/pts
[utopia][init] Setting /tmp and /var permissions
[utopia][init] Starting udev..
Attempting mount of ubifs syscfg partition
UBI device number 1, total 1040 LEBs (132055040 bytes, 125.9 MiB), available 0 LEBs (0 bytes), LEB size 126976 bytes (124.0 KiB)
[utopia][init] Using persistent syscfg data from /var/config/syscfg
[utopia][init] Starting system logging
[utopia][init] Starting sysevent subsystem
[utopia][init] Enabling DesignWare USB3 DRD Core drivers
[utopia][init] Loading QCA Ethernet, NSS and GMAC drivers
net.netfilter.nf_conntrack_acct = 1
net.netfilter.nf_conntrack_helper = 1
[utopia][init] Late loading usb drivers
[utopia][init] Setting any unset system values to default
[utopia][init] no persistence config file (/var/config/pstcfg) found
setting up MAC addresses for all interface based on 80:69:1A:8B:87:67
NTP Servers do not need to be updated
[utopia][init] syscfg loaded removing tmp file
checking for interactive script start up...
no user scheduled tasks found...
senq running
/etc/init.d/service_senq.sh Starting in mode 0
1970-01-01 00:00:19: node-mode running
Updating BootCount Page[33]:10800 ... Done
[utopia][init] Setup link to WiFi firmware and board data (EU)
[utopia][init] Multi-region is not supported or not enabled
[utopia][init] Cert region: EU
lrwxrwxrwx 1 root root 12 Nov 15 2023 IPQ5018 -> /tmp/IPQ5018
-rw-r--r-- 1 root root 3931 Nov 15 2023 firmware_rdp_feature.ini
drwxr-xr-x 2 root root 3 Nov 15 2023 qca
-rw-r--r-- 1 root root 785404 Nov 15 2023 qca-nss0.bin
lrwxrwxrwx 1 root root 12 Nov 15 2023 qcn6122 -> /tmp/qcn6122
[utopia][init] Using EU region for WiFi firmware and board data
[utopia][init] Load WiFi cal data from MTD(mtd13) to FS.
131072+0 records in
131072+0 records out
131072 bytes (128.0KB) copied, 0.762880 seconds, 167.8KB/s
131072+0 records in
131072+0 records out
131072 bytes (128.0KB) copied, 0.777777 seconds, 164.6KB/s
131072+0 records in
131072+0 records out
131072 bytes (128.0KB) copied, 0.778480 seconds, 164.4KB/s
[utopia][init] Loading WLAN drivers
[utopia][init] Loading QCA Enhanced Connection manager
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
dev.nss.general.redirect = 1
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
[utopia][init] Inserting fpbypass.ko for QCA
[utopia][init] Initializing BTLE interface
[utopia][init] Bluetooth Mac Address: 80 69 1A 8B 87 67
[utopia][init] Cert Region: EU
16+0 records in
16+0 records out
16 bytes (16B) copied, 0.000333 seconds, 46.9KB/s
6+0 records in
6+0 records out
6 bytes (6B) copied, 0.000171 seconds, 34.3KB/s
2685+0 records in
2685+0 records out
2685 bytes (2.6KB) copied, 0.014236 seconds, 184.2KB/s
adding group for lldpd user
[utopia][init] Apply EEE settings, result = 0
[utopia][init] phy link watchdog started
(none) login: Wed Oct 26 00:00:00 UTC 2022
Starting devicedb ...
wan, sysevent received: wan-start
DeviceDB database version 3
Options:
Daemonize : yes
Server UDS Path : /tmp/devicedb/server_link
Database File : /tmp/devicedb/devicedb.db
DB Transient File : /tmp/devicedb/transient.db
DeviceDB Daily Backup Cron job created
lldpd event lan_ipaddr 192.168.1.1 received.
No TopoDB persistence data to import
TopoDB data not imported
killall: lldpd: no process killed
lldpd event lldpd-start received.
lldpd configuration already running
setting root_accessible to 0 by default
mosquitto aborting: not Master
lldp updating callback scripts
service_guardian.sh is called with lan-status
ping6: sendto: Network unreachable
ARP agent not started: not in master mode.
ftntsdns service_init
checking for ftntsdns record
nameserver1 does not contain ftntsdns record, backing up current DNS
Starting ddd_ethernet_agent ...
RTNETLINK answers: Resource busy
killall: sdns_filter: no process killed
iptables: No chain/target/match by that name.
killall: sdns_filter: no process killed
Lighttpd Model Base: MX62
Generating Rainier lighttpd config
Build temporary www configuration directory:
$5$jLtbrs217qUHX1kp$/W7WTVvXNiAigOkvPwKV26EjVq3qIqrnU0NmtAorEnA
iptables: No chain/target/match by that name.
nss_build_bypass is called with lan-started
[utopia] Not setting ppp_clamp_mtu
Power cycle Ethernet ports.
Registering Service myrouter._http._tcp.local port 80
wifi, sysevent received: lan-started (Tue Oct 25 17:00:13 PDT 2022)
ping6: sendto: Network unreachable
wifi, service_start()
ARP agent not started: not in master mode.
Got a reply for myrouter._http._tcp.local.: Name now registered and active
[utopia][init] Loading GMAC and WLAN drivers
lldpd event lldp::root_accessible 0 received.
backhaul_switching status event backhaul::media 0 received on backhaul_switching_mgr
Backhaul media 0 received, but wifi status is not started. Will do backhaul check later
Multi-region is not supported or not enabled
SKU is MX62-EU
mosquitto aborting: not Master
service_guardian.sh is called with lan-status
Not ready for JNAP. Sleeping for 15 seconds...
smart connect client, generating client device data
backhaul_switching status event system_state-normal received
ping6: sendto: Network unreachable
lldpd event ETH::port_1_status down received.
lldpd event ETH::port_2_status down received.
[utopia] Not setting ppp_clamp_mtu on dslite protocol
nss_build_bypass is called with ipv4_wan_ipaddr
getting geoip information for 0.0.0.0
lldpd event ipv4_wan_ipaddr 0.0.0.0 received.
curl: (6) Could not resolve: freegeoip.net (Could not contact DNS servers)
wifi, wifi_physical_start(ath0)
killall: mdns_lookup: no process killed
dev.nss.n2hcfg.n2h_queue_limit_core0 = 256
smart_connect, sysevent received: wifi-status starting
LookUpMaster call OK.
mDNS lookup is on going...
ath0 No such device
creating vap ath0
fastpath, sysevent received: qos_enabled
nss_build_bypass is called with guardian-configured
dev.nss.general.redirect = 0
net.bridge.bridge-nf-call-ip6tables = 0
configurator: got event(guardian-configured, )
net.bridge.bridge-nf-call-iptables = 0
wan, sysevent received: phylink_wan_state
btsetup phylink_wan_state
Auto channel
wifi, wifi_virtual_start(ath0)
Restarting nfqrecv service...
wifi, smart::mode is unconfigured do not start smart connect setup and config wifi
wifi, wifi_user_start(ath0)
configurator: got event(wan-status, starting)
killall: sdns_filter: no process killed
OK
configurator: got event(firewall-status, starting)
configurator: got event(firewall-status, started)
Got a TERM signal, will terminate.
Warning! nfqrecv encountered errors when doing recv(): Interrupted system call
iptables: No chain/target/match by that name.
wifi, primary AP: ath0 is up (Tue Oct 25 17:00:44 PDT 2022)
killall: nfqrecv: no process killed
subscriber running
/etc/init.d/service_subscriber.sh subscriber-stop NULL MODE: 0
wifi, wifi_guest_start(ath0)
wifi, guest ath2 is disabled, do not start wifi guest
wifi, wifi_physical_start(ath10)
killall: sdns_filter: no process killed
killall: omsgd: no process killed
killall: configure_me_monitor.sh: no process killed
rm: can't remove '/var/run/configure_me_monitor.sh.pid': No such file or directory
configurator: got event(nfqrecv-status, stopped)
iptables: No chain/target/match by that name.
configurator: got event(nfqrecv-status, started)
configurator: got event(firewall-status, starting)
dev.nss.n2hcfg.n2h_queue_limit_core0 = 256
ath10 No such device
creating vap ath10
List Flushed
Following channels are blocked from Channel selection algorithm
[52] [56] [60] [64] [116] [120] [124] [128]
configurator: got event(firewall-status, started)
killall: sdns_filter: no process killed
Auto channel
iptables: No chain/target/match by that name.
wifi, wifi_virtual_start(ath10)
wifi, wifi_user_start(ath10)
OK
wifi, primary AP: ath10 is up (Tue Oct 25 17:00:52 PDT 2022)
wifi, wifi_guest_start(ath10)
wifi, guest ath12 is disabled, do not start wifi guest
wifi, wifi_physical_start(ath30)
Set 6G MAC 80:69:1A:8B:87:6B
dev.nss.n2hcfg.n2h_queue_limit_core0 = 256
ath30 No such device
creating vap ath30
List Flushed
Error received: -22
Could not send NL command
Following channels are blocked from Channel selection algorithm
-band 3[233]
Auto channel
wifi, wifi_virtual_start(ath30)
wifi, wifi_user_start(ath30)
OK
wifi, primary AP: ath30 is up (Tue Oct 25 17:00:56 PDT 2022)
wifi, wifi_guest_start(ath30)
wifi, guest ath32 is disabled, do not start wifi guest
start mcsd succeeded (Tue Oct 25 17:00:56 PDT 2022)
17.00.56.225804 MCSD plugin info : Initializing plugin manager
btsetup smart_connect::setup_status
state_machine entering READY
btsetup: Unconfigured mode and Peripheral role
dev.nss.n2hcfg.n2h_high_water_core0 = 8704
---wifi-status started---
dev.nss.n2hcfg.extra_pbuf_core0 = 10000000
Enter do_btsetup_central_thread
Enter do_btsetup_tx_thread
dev.nss.n2hcfg.n2h_high_water_core0 = 72512
dev.nss.n2hcfg.n2h_wifi_pool_buf = 36864
pub_devinfo_status: Error: could not determine HOST_ADDR
0x02 0x01 0x06 0x08 0x09 0x4C 0x69 0x6E 0x6B 0x73 0x79 0x73
0x05 0xFF 0xEE 0x0B 0x00 0x00 0x11 0x07 0xD1 0x6F 0x01 0x40 0x94 0x0E 0x88 0xB7 0xC2 0x46 0xAB 0x8E 0x80 0x20 0x00 0x00
smart_connect, sysevent received: wifi-status started
pub_wlan_status: Error: could not determine HOST_ADDR
[olympus][wifi] update wl1_txpower_list 0 8 11 14 17 20 23 26
configurator: got event(firewall-status, starting)
configurator: got event(firewall-status, started)
[olympus][wifi] update wl3_txpower_list 0 8 10 12 14 16 18 20
ath20 no frequency information.
sh: out of range
killall: sdns_filter: no process killed
iptables: No chain/target/match by that name.
[fw.sh] fwup_checked_after_boot: 0
[fwupd] status details:"ERROR: Connecting server"
[fw.sh] fwup_forced_update: 0
[fw.sh] fwup_checked_after_boot: 0
[fwupd] status details:"ERROR: Connecting server"
[fw.sh] fwup_forced_update: 0
[fw.sh] fwup_checked_after_boot: 0
[fwupd] status details:"ERROR: Connecting server"
[fw.sh] fwup_forced_update: 0
[fw.sh] fwup_checked_after_boot: 0
[fwupd] status details:"ERROR: Connecting server"
[fw.sh] fwup_forced_update: 0
can you stop it here ?
Yes, the u-boot commands:
IPQ5018# ?
? - alias for 'help'
ar8xxx_dump- Dump ar8xxx registers
base - print or set address offset
bdinfo - print Board Info structure
bootelf - Boot from an ELF image in memory
bootipq - bootipq from flash device
bootm - boot application image from memory
bootp - boot image via network using BOOTP/TFTP protocol
bootvx - Boot vxWorks from an ELF image
bootz - boot Linux zImage image from memory
canary - test stack canary
chpart - change active partition
cmp - memory compare
coninfo - print console devices and information
cp - memory copy
crc32 - checksum calculation
devinfo - device info handling commands
dhcp - boot image via network using DHCP/TFTP protocol
dm - Driver model low level access
echo - echo args to console
editenv - edit environment variable
env - environment handling commands
erase - erase FLASH memory
exectzt - execute TZT
exit - exit script
false - do nothing, unsuccessfully
fatinfo - print information about filesystem
fatload - load binary file from a dos filesystem
fatls - list files in a directory (default /)
fatsize - determine a file's size
fatwrite- write file into a dos filesystem
fdt - flattened device tree utility commands
flash - flash part_name
flash part_name load_addr file_size
flasherase- flerase part_name
flinfo - print FLASH memory information
fuseipq - fuse QFPROM registers from memory
go - start application at address 'addr'
help - print command description/usage
i2c - I2C sub-system
imxtract- extract a part of a multi-image
ipq5018_mdio- IPQ5018 mdio utility commands
ipq_mdio- IPQ mdio utility commands
is_sec_boot_enabled- check secure boot fuse is enabled or not
itest - return true/false on integer compare
loop - infinite loop on address range
md - memory display
mii - MII utility commands
mm - memory modify (auto-incrementing address)
mmc - MMC sub system
mmcinfo - display MMC info
mtdparts- define flash/nand partitions
mtest - simple RAM read/write test
mw - memory write (fill)
nand - NAND sub-system
nboot - boot from NAND device
nfs - boot image via network using NFS protocol
nm - memory modify (constant address)
part - disk partition related commands
pci - list and access PCI Configuration Space
ping - send ICMP ECHO_REQUEST to network host
ppinfo - pre-paired info handling commands
printenv- print environment variables
protect - enable or disable FLASH write protection
qpic_nand- Switch between SBL and Linux kernel page on 4K NAND Flash.
reset - Perform RESET of the CPU
run - run commands in an environment variable
runmulticore- Enable and schedule secondary cores
saveenv - save environment variables to persistent storage
secure_authenticate- authenticate the signed image
setenv - set environment variables
setexpr - set environment variable as the result of eval expression
sf - SPI flash sub-system
showvar - print local hushshell variables
sleep - delay execution for some time
smeminfo- print SMEM FLASH information
source - run script from memory
test - minimal test like /bin/sh
tftp - boot image via network using TFTP protocol
tftpput - TFTP put command, for uploading files to a server
true - do nothing, successfully
tzt - load and run tzt
uart - UART sub-system
ubi - ubi commands
usb - USB sub-system
usbboot - boot from USB device
version - print monitor, compiler and linker version
zip - zip a memory region
IPQ5018# printenv
altkern=4880000
auto_recovery=yes
baudrate=115200
boot_part=2
boot_part_ready=3
boot_ver=7.1.25
bootargs=console=ttyMSM0,115200n8
bootcmd=bootipq
bootdelay=3
config_name=config@1
dload_dis=1
eth1addr=00:11:22:33:44:56
ethact=eth0
ethaddr=00:03:7f:ba:db:ad
fdt_high=0x4A400000
fdtcontroladdr=4a9d4004
flash_type=11
flashimg=tftp $loadaddr $image && nand erase $prikern $imgsize && nand write $loadaddr $prikern $filesize
flashimg2=tftp $loadaddr $image && nand erase $altkern $imgsize && nand write $loadaddr $altkern $filesize
image=MX6200.img
imgsize=3200000
ipaddr=192.168.1.1
kernsize=800000
loadaddr=44000000
machid=8040004
netmask=255.255.255.0
prikern=1680000
serverip=192.168.1.254
soc_hw_version=20180101
soc_version_major=1
soc_version_minor=1
stderr=serial@78AF000
stdin=serial@78AF000
stdout=serial@78AF000
Environment size: 887/262140 bytes
then try tftpboot:ing one of the initramfs:es in https://downloads.openwrt.org/snapshots/targets/qualcommax/ipq50xx/.
start by testing the mx5500.
This is the photo of the top side of the board:
And reverse:
GND - GND Black
x
RX - TX Orange
TX - RX Yellow
x
Baud rate 115200
Can you boot into stock and check if there’s a file called:
/sys/firmware/fdt
If so, scp or tftp it over and upload it somewhere.
This device doesn’t have the qca8337 switch, so booting an existing ipq5018 image won’t give you ethernet.
It should be relatively easy to port this device. The only thing untested is the additional qcn6122 wifi chip for 6G.
Here is the result:
IPQ5018# tftp 0x44000000 openwrt-qualcommax-ipq50xx-linksys_mx5500-initramfs-uImage.itb
eth0 up Speed :1000 Full duplex
Using eth0 device
TFTP from server 192.168.41.13; our IP address is 192.168.41.50
Filename 'openwrt-qualcommax-ipq50xx-linksys_mx5500-initramfs-uImage.itb'.
Load address: 0x44000000
Loading: *
Got TFTP_OACK: TFTP remote port: changes from 69 to 63524
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
##########################################
6.7 MiB/s
done
Bytes transferred = 13966340 (d51c04 hex)
IPQ5018# bootm 0x44000000
## Loading kernel from FIT Image at 44000000 ...
Using 'config@mp03.1' configuration
Trying 'kernel-1' kernel subimage
Description: ARM64 OpenWrt Linux-6.6.87
Type: Kernel Image
Compression: lzma compressed
Data Start: 0x440000e8
Data Size: 13938664 Bytes = 13.3 MiB
Architecture: AArch64
OS: Linux
Load Address: 0x41000000
Entry Point: 0x41000000
Hash algo: crc32
Hash value: d2940ea3
Hash algo: sha1
Hash value: ab1a19b2938fb32e6fc7812688b734fab768a0ac
Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 44000000 ...
Using 'config@mp03.1' configuration
Trying 'fdt-1' fdt subimage
Description: ARM64 OpenWrt linksys_mx5500 device tree blob
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x44d4b210
Data Size: 25768 Bytes = 25.2 KiB
Architecture: AArch64
Hash algo: crc32
Hash value: 64dfb2b3
Hash algo: sha1
Hash value: 9a80cfe42f3c6abbf5715a43b7cdf0742a59e3c2
Verifying Hash Integrity ... crc32+ sha1+ OK
Booting using the fdt blob at 0x44d4b210
Uncompressing Kernel Image ... OK
Loading Device Tree to 4a3f6000, end 4a3ff4a7 ... OK
Using machid 0x8040004 from environment
Starting kernel ...
Jumping to AARCH64 kernel via monitor
[ 0.000000] Booting Linux on physical CPU 0x0000000000 [0x51af8014]
[ 0.000000] Linux version 6.6.87 (builder@buildhost) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 13.3.0 r29347-f09c23fbc9) 13.3.0, GNU ld (GNU Binutils) 2.42) #0 SMP Mon Apr 28 08:31:59 2025
[ 0.000000] Machine model: Linksys MX5500
[ 0.000000] OF: reserved mem: 0x000000004a400000..0x000000004a7fffff (4096 KiB) nomap non-reusable tz_apps@4a400000
[ 0.000000] OF: reserved mem: 0x000000004a800000..0x000000004a9fffff (2048 KiB) nomap non-reusable bootloader@4a800000
[ 0.000000] OF: reserved mem: 0x000000004ab00000..0x000000004abfffff (1024 KiB) nomap non-reusable smem@4ab00000
[ 0.000000] OF: reserved mem: 0x000000004ac00000..0x000000004adfffff (2048 KiB) nomap non-reusable tz@4ac00000
[ 0.000000] OF: reserved mem: 0x000000004b000000..0x000000004dffffff (49152 KiB) nomap non-reusable q6_mem_regions@4b000000
[ 0.000000] Zone ranges:
[ 0.000000] DMA [mem 0x0000000040000000-0x000000005fffffff]
[ 0.000000] DMA32 empty
[ 0.000000] Normal empty
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000040000000-0x000000004a3fffff]
[ 0.000000] node 0: [mem 0x000000004a400000-0x000000004a9fffff]
[ 0.000000] node 0: [mem 0x000000004aa00000-0x000000004aafffff]
[ 0.000000] node 0: [mem 0x000000004ab00000-0x000000004adfffff]
[ 0.000000] node 0: [mem 0x000000004ae00000-0x000000004affffff]
[ 0.000000] node 0: [mem 0x000000004b000000-0x000000004dffffff]
[ 0.000000] node 0: [mem 0x000000004e000000-0x000000005fffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000005fffffff]
[ 0.000000] psci: probing for conduit method from DT.
[ 0.000000] psci: PSCIv1.0 detected in firmware.
[ 0.000000] psci: Using standard PSCI v0.2 function IDs
[ 0.000000] psci: MIGRATE_INFO_TYPE not supported.
[ 0.000000] psci: SMC Calling Convention v1.0
[ 0.000000] psci: OSI mode supported.
[ 0.000000] psci: [Firmware Bug]: failed to set PC mode: -1
[ 0.000000] percpu: Embedded 18 pages/cpu s36136 r8192 d29400 u73728
[ 0.000000] Detected VIPT I-cache on CPU0
[ 0.000000] CPU features: detected: Spectre-v4
[ 0.000000] alternatives: applying boot alternatives
[ 0.000000] Kernel command line: console=ttyMSM0,115200n8 root=/dev/ubiblock0_0 coherent_pool=2M
[ 0.000000] Dentry cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[ 0.000000] Inode-cache hash table entries: 32768 (order: 6, 262144 bytes, linear)
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 129024
[ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[ 0.000000] software IO TLB: SWIOTLB bounce buffer size adjusted to 0MB
[ 0.000000] software IO TLB: area num 2.
[ 0.000000] software IO TLB: mapped [mem 0x000000005f540000-0x000000005f5c0000] (0MB)
[ 0.000000] Memory: 431772K/524288K available (8512K kernel code, 912K rwdata, 2488K rodata, 11072K init, 295K bss, 92516K reserved, 0K cma-reserved)
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[ 0.000000] rcu: Hierarchical RCU implementation.
[ 0.000000] rcu: RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
[ 0.000000] Tracing variant of Tasks RCU enabled.
[ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[ 0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
[ 0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[ 0.000000] Root IRQ handler: gic_handle_irq
[ 0.000000] GICv2m: range[mem 0x0b00a000-0x0b00aff7], SPI[448:479]
[ 0.000000] GICv2m: range[mem 0x0b00b000-0x0b00bff7], SPI[480:511]
[ 0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[ 0.000000] arch_timer: cp15 and mmio timer(s) running at 24.00MHz (virt/virt).
[ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x588fe9dc0, max_idle_ns: 440795202592 ns
[ 0.000001] sched_clock: 56 bits at 24MHz, resolution 41ns, wraps every 4398046511097ns
[ 0.000123] Calibrating delay loop (skipped), value calculated using timer frequency.. 48.00 BogoMIPS (lpj=240000)
[ 0.000142] pid_max: default: 32768 minimum: 301
[ 0.005107] Mount-cache hash table entries: 1024 (order: 1, 8192 bytes, linear)
[ 0.005129] Mountpoint-cache hash table entries: 1024 (order: 1, 8192 bytes, linear)
[ 0.010919] RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2.
[ 0.011344] rcu: Hierarchical SRCU implementation.
[ 0.011356] rcu: Max phase no-delay instances is 1000.
[ 0.012441] smp: Bringing up secondary CPUs ...
[ 0.013586] Detected VIPT I-cache on CPU1
[ 0.013726] CPU1: Booted secondary processor 0x0000000001 [0x51af8014]
[ 0.013910] smp: Brought up 1 node, 2 CPUs
[ 0.013930] SMP: Total of 2 processors activated.
[ 0.013936] CPU features: detected: 32-bit EL0 Support
[ 0.013942] CPU features: detected: CRC32 instructions
[ 0.014031] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[ 0.014041] CPU: All CPU(s) started at EL1
[ 0.014044] alternatives: applying system-wide alternatives
[ 0.022111] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.022148] futex hash table entries: 512 (order: 3, 32768 bytes, linear)
[ 0.023925] pinctrl core: initialized pinctrl subsystem
[ 0.026634] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[ 0.027745] DMA: preallocated 2048 KiB GFP_KERNEL pool for atomic allocations
[ 0.028081] DMA: preallocated 2048 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[ 0.028394] DMA: preallocated 2048 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[ 0.029039] thermal_sys: Registered thermal governor 'step_wise'
[ 0.029152] cpuidle: using governor menu
[ 0.029450] ASID allocator initialised with 65536 entries
[ 0.034838] /soc@0/phy@86000: Fixed dependency cycle(s) with /soc@0/clock-controller@1800000
[ 0.034979] /soc@0/clock-controller@1800000: Fixed dependency cycle(s) with /soc@0/phy@86000
[ 0.035055] /soc@0/interrupt-controller@b000000: Fixed dependency cycle(s) with /soc@0/interrupt-controller@b000000
[ 0.035441] /soc@0/phy@86000: Fixed dependency cycle(s) with /soc@0/clock-controller@1800000
[ 0.038969] /soc@0/phy@86000: Fixed dependency cycle(s) with /soc@0/clock-controller@1800000
[ 0.039069] /soc@0/clock-controller@1800000: Fixed dependency cycle(s) with /soc@0/phy@86000
[ 0.054463] Modules: 26912 pages in range for non-PLT usage
[ 0.054478] Modules: 518432 pages in range for PLT usage
[ 0.060177] SCSI subsystem initialized
[ 0.060608] usbcore: registered new interface driver usbfs
[ 0.060658] usbcore: registered new interface driver hub
[ 0.060756] usbcore: registered new device driver usb
[ 0.061140] qcom_scm: convention: smc arm 64
[ 0.063856] clocksource: Switched to clocksource arch_sys_counter
[ 0.068074] NET: Registered PF_INET protocol family
[ 0.068304] IP idents hash table entries: 8192 (order: 4, 65536 bytes, linear)
[ 0.071003] tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 4096 bytes, linear)
[ 0.071041] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[ 0.071099] TCP established hash table entries: 4096 (order: 3, 32768 bytes, linear)
[ 0.071155] TCP bind hash table entries: 4096 (order: 5, 131072 bytes, linear)
[ 0.071342] TCP: Hash tables configured (established 4096 bind 4096)
[ 0.071974] MPTCP token hash table entries: 512 (order: 1, 12288 bytes, linear)
[ 0.072194] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[ 0.072233] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[ 0.072802] NET: Registered PF_UNIX/PF_LOCAL protocol family
[ 0.072890] PCI: CLS 0 bytes, default 64
[ 0.089071] workingset: timestamp_bits=46 max_order=17 bucket_order=0
[ 0.090003] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.090042] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.094886] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 248)
[ 0.113615] qcom-pcie a0000000.pcie: host bridge /soc@0/pcie@a0000000 ranges:
[ 0.113716] qcom-pcie a0000000.pcie: IO 0x00a0200000..0x00a02fffff -> 0x00a0200000
[ 0.113759] qcom-pcie a0000000.pcie: MEM 0x00a0300000..0x00b02fffff -> 0x00a0300000
[ 0.245549] qcom-pcie a0000000.pcie: iATU: unroll T, 8 ob, 8 ib, align 4K, limit 1024G
[ 0.343926] qcom-pcie a0000000.pcie: PCIe Gen.2 x1 link up
[ 0.344541] qcom-pcie a0000000.pcie: PCI host bridge to bus 0001:00
[ 0.344571] pci_bus 0001:00: root bus resource [bus 00-ff]
[ 0.344592] pci_bus 0001:00: root bus resource [io 0x0000-0xfffff] (bus address [0xa0200000-0xa02fffff])
[ 0.344606] pci_bus 0001:00: root bus resource [mem 0xa0300000-0xb02fffff]
[ 0.344766] pci 0001:00:00.0: [17cb:1004] type 01 class 0x060400
[ 0.344805] pci 0001:00:00.0: reg 0x10: [mem 0x00000000-0x00000fff]
[ 0.344933] pci 0001:00:00.0: PME# supported from D0 D3hot D3cold
[ 0.349623] pci 0001:01:00.0: [17cb:1106] type 00 class 0x028000
[ 0.349764] pci 0001:01:00.0: reg 0x10: [mem 0x00000000-0x01ffffff 64bit]
[ 0.349845] pci 0001:01:00.0: reg 0x18: [mem 0x00000000-0x001fffff 64bit]
[ 0.350388] pci 0001:01:00.0: PME# supported from D0 D3hot D3cold
[ 0.350587] pci 0001:01:00.0: 4.000 Gb/s available PCIe bandwidth, limited by 5.0 GT/s PCIe x1 link at 0001:00:00.0 (capable of 7.876 Gb/s with 8.0 GT/s PCIe x1 link)
[ 0.351315] pci 0001:00:00.0: BAR 8: assigned [mem 0xa1000000-0xa3ffffff]
[ 0.351344] pci 0001:00:00.0: BAR 0: assigned [mem 0xa0300000-0xa0300fff]
[ 0.351369] pci 0001:01:00.0: BAR 0: assigned [mem 0xa2000000-0xa3ffffff 64bit]
[ 0.351433] pci 0001:01:00.0: BAR 2: assigned [mem 0xa1000000-0xa11fffff 64bit]
[ 0.351497] pci 0001:00:00.0: PCI bridge to [bus 01-ff]
[ 0.351513] pci 0001:00:00.0: bridge window [mem 0xa1000000-0xa3ffffff]
[ 0.356647] pcieport 0001:00:00.0: PME: Signaling with IRQ 17
[ 0.369106] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[ 0.377073] msm_serial 78af000.serial: msm_serial: detected port #0
[ 0.377137] msm_serial 78af000.serial: uartclk = 1843199
[ 0.377801] 78af000.serial: ttyMSM0 at MMIO 0x78af000 (irq = 22, base_baud = 115199) is a MSM
[ 0.377858] msm_serial: console setup on port #0
[ 0.377961] printk: console [ttyMSM0] enabled
[ 0.484779] pcieport 0001:00:00.0: AER: enabled with IRQ 17
[ 0.485502] msm_serial: driver initialized
[ 1.333309] loop: module loaded
[ 1.340250] spi-nand spi0.0: Macronix SPI NAND was found.
[ 1.340313] spi-nand spi0.0: 256 MiB, block size: 128 KiB, page size: 2048, OOB size: 128
[ 1.365230] 18 fixed-partitions partitions found on MTD device spi0.0
[ 1.365292] Creating 18 MTD partitions on "spi0.0":
[ 1.370672] 0x000000000000-0x000000080000 : "0:SBL1"
[ 1.377998] 0x000000080000-0x000000100000 : "0:MIBIB"
[ 1.384591] 0x000000100000-0x000000200000 : "0:QSEE"
[ 1.388607] 0x000000200000-0x000000240000 : "0:DEVCFG"
[ 1.392200] 0x000000240000-0x000000280000 : "0:CDT"
[ 1.397309] 0x000000280000-0x000000300000 : "0:APPSBLENV"
[ 1.402480] 0x000000300000-0x000000440000 : "0:APPSBL"
[ 1.409490] 0x000000440000-0x000000540000 : "0:ART"
[ 1.414233] 0x000000540000-0x0000005c0000 : "0:TRAINING"
[ 1.417911] 0x0000005c0000-0x000000640000 : "u_env"
[ 1.423734] 0x000000640000-0x000000680000 : "s_env"
[ 1.428094] 0x000000680000-0x0000006c0000 : "devinfo"
[ 1.432736] 0x0000006c0000-0x0000058c0000 : "kernel"
[ 1.591130] 0x000000ec0000-0x0000058c0000 : "rootfs"
[ 1.593157] mtd: setting mtd13 (rootfs) as root device
[ 1.595866] mtdsplit: no squashfs found in "rootfs"
[ 1.600172] 0x0000058c0000-0x00000aac0000 : "alt_kernel"
[ 1.759680] 0x0000060c0000-0x00000aac0000 : "alt_rootfs"
[ 1.761646] 0x00000aac0000-0x00000acc0000 : "sysdiag"
[ 1.769226] 0x00000acc0000-0x00000f0c0000 : "syscfg"
[ 1.955270] mdio_bus 90000.mdio-1: MDIO device at address 0 is missing.
[ 1.955433] mdio_bus 90000.mdio-1: MDIO device at address 1 is missing.
[ 1.960783] mdio_bus 90000.mdio-1: MDIO device at address 2 is missing.
[ 1.967515] mdio_bus 90000.mdio-1: MDIO device at address 3 is missing.
[ 1.974156] mdio_bus 90000.mdio-1: MDIO device at address 4 is missing.
[ 1.984043] qca8k 90000.mdio-1:11: Switch id detected ff but expected 13
[ 1.987243] i2c_dev: i2c /dev entries driver
[ 1.998148] cpufreq: cpufreq_online: CPU0: Running at unlisted initial frequency: 799999 KHz, changing to: 1008000 KHz
[ 2.000241] sdhci: Secure Digital Host Controller Interface driver
[ 2.008865] sdhci: Copyright(c) Pierre Ossman
[ 2.015007] sdhci-pltfm: SDHCI platform and OF driver helper
[ 2.025998] remoteproc remoteproc0: releasing cd00000.remoteproc
[ 2.094142] NET: Registered PF_INET6 protocol family
[ 2.096703] Segment Routing with IPv6
[ 2.098250] In-situ OAM (IOAM) with IPv6
[ 2.101846] NET: Registered PF_PACKET protocol family
[ 2.105857] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[ 2.111300] 8021q: 802.1Q VLAN Support v1.8
[ 2.192223] remoteproc remoteproc0: cd00000.remoteproc is available
[ 2.192348] qcom-q6-mpd cd00000.remoteproc: pd-1 node found
[ 2.199369] remoteproc remoteproc1: pd-1 is availab▒[ 2.215375] Freeing unused kernel memory: 11072K
[ 2.215681] Run /init as init process
[ 2.684975] init: Console is alive
[ 2.685417] init: - watchdog -
[ 2.704871] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[ 2.733203] gpio_button_hotplug: loading out-of-tree module taints kernel.
[ 2.749529] ssdk_dt_parse_mac_mode[299]:INFO:mac mode1 doesn't exit!
[ 2.749580] ssdk_dt_parse_mac_mode[307]:INFO:mac mode2 doesn't exit!
[ 2.755447] ssdk_dt_parse_port_bmp[1063]:INFO:port_bmp doesn't exist!
[ 2.761319] ssdk_dt_parse_interrupt[941]:INFO:intr-gpio does not exist
[ 4.363852] ssdk_mp_reset_init[1297]:INFO:MP reset successfully!
[ 4.724841] _adpt_mp_uniphy_clk_output_ctrl_set[255]:INFO:uniphy will output clock as 25000000Hz
[ 4.724940] regi_init[2548]:INFO:Initializing SCOMPHY Done!!
[ 4.732860] regi_init[2574]:INFO:qca-ssdk module init succeeded!
[ 4.808142] GMAC2(ffffff8002ff0940) Invalid MAC@ - using 4a:b3:bb:67:9a:11
[ 4.808368] nss-dp 39d00000.dp2 (unnamed net_device) (uninitialized): nss_dp_gmac: Registering netdev eth%d(qcom-id:2) with GMAC, mac_base: 0xffffffc081f90000
[ 4.815185] Generic PHY fixed-0:00: attached PHY driver (mii_bus:phy_addr=fixed-0:00, irq=POLL)
[ 4.830669] **********************************************************
[ 4.836770] * NSS Data Plane driver
[ 4.843277] **********************************************************
[ 4.863426] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[ 4.866938] init: - preinit -
[ 8.163808] random: crng init done
Cannot parse config file '/etc/fw_env.config': No such file or directory
Failed to find NVMEM device
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[ 12.606987] procd: - early -
[ 12.607243] procd: - watchdog -
[ 13.250827] procd: - watchdog -
[ 13.251286] procd: - ubus -
[ 13.408451] procd: - init -
Please press Enter to activate this console.
[ 13.783018] kmodloader: loading kernel modules from /etc/modules.d/*
[ 13.991374] Loading modules backported from Linux version v6.12.6-0-ge9d65b48ce1a
[ 13.991423] Backport generated by backports.git v6.1.110-1-35-g410656ef04d2
[ 14.025642] NET: Registered PF_QIPCRTR protocol family
[ 14.042282] urngd: v1.0.2 started.
[ 14.127321] PPP generic driver version 2.4.2
[ 14.131354] NET: Registered PF_PPPOX protocol family
[ 14.153955] ath11k c000000.wifi: ipq5018 hw1.0
[ 14.154005] ath11k c000000.wifi: FW memory mode: 2
[ 14.246675] remoteproc remoteproc1: powering up pd-1
[ 14.247012] remoteproc remoteproc1: Booting fw image ath11k/IPQ5018/hw1.0/q6_fw.mdt, size 1820
[ 14.250753] remoteproc remoteproc0: powering up cd00000.remoteproc
[ 14.259303] remoteproc remoteproc0: Booting fw image ath11k/IPQ5018/hw1.0/q6_fw.mdt, size 1820
[ 14.399001] remoteproc remoteproc0: remote processor cd00000.remoteproc is now up
[ 14.419637] remoteproc remoteproc1: remote processor pd-1 is now up
[ 14.432697] kmodloader: done loading kernel modules from /etc/modules.d/*
[ 14.445417] ath11k c000000.wifi: qmi fail to get qcom,m3-dump-addr, ignore m3 dump mem req
[ 14.452886] ath11k c000000.wifi: chip_id 0x0 chip_family 0x4 board_id 0xff soc_id 0xffffffff
[ 14.452937] ath11k c000000.wifi: fw_version 0x270206d0 fw_build_timestamp 2022-08-04 13:28 fw_build_id WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
[ 14.578735] mtdblock: MTD device 'devinfo' is NAND, please consider using UBI block devices instead.
[ 15.196543] pcieport 0001:00:00.0: AER: Corrected error message received from 0001:01:00.0
[ 15.196628] pci 0001:01:00.0: PCIe Bus Error: severity=Corrected, type=Physical Layer, (Receiver ID)
[ 15.203720] pci 0001:01:00.0: device [17cb:1106] error status/mask=00000001/0000e000
[ 15.213177] pci 0001:01:00.0: [ 0] RxErr
BusyBox v1.37.0 (2025-04-28 08:31:59 UTC) built-in shell (ash)
_______ ________ __
| |.-----.-----.-----.| | | |.----.| |_
| - || _ | -__| || | | || _|| _|
|_______|| __|_____|__|__||________||__| |____|
|__| W I R E L E S S F R E E D O M
-----------------------------------------------------
OpenWrt SNAPSHOT, r29347-f09c23fbc9
-----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
OpenWrt recently switched to the "apk" package manager!
OPKG Command APK Equivalent Description
------------------------------------------------------------------
opkg install <pkg> apk add <pkg> Install a package
opkg remove <pkg> apk del <pkg> Remove a package
opkg upgrade apk upgrade Upgrade all packages
opkg files <pkg> apk info -L <pkg> List package contents
opkg list-installed apk info List installed packages
opkg update apk update Update package lists
opkg search <pkg> apk search <pkg> Search for packages
------------------------------------------------------------------
For more https://openwrt.org/docs/guide-user/additional-software/opkg-to-apk-cheatsheet
root@OpenWrt:~#
Can you boot the mx2000 image instead? That one has qcn6122 which your device has two of. The mx5500 has qcn9074 which is totally different.
1 Like
/sys/firmware/fdt is present, here it is: https://www.dropbox.com/scl/fi/lntfzqhjwhn2dr41w761c/fdt?rlkey=zzu2ngdjh3msk5swae743rnoz&st=r8zwgwcw&dl=0
I tried both images (MX5500 and MX2000). Both boot fine but when I do an ifconfig it doesn't recognize any interface:
root@OpenWrt:~# ifconfig
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:64 errors:0 dropped:0 overruns:0 frame:0
TX packets:64 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:4992 (4.8 KiB) TX bytes:4992 (4.8 KiB)
root@OpenWrt:~#
1 Like