Hi, I've now done some further tests on my WRT54GL (BCM5352): > (...) > Starting program at 0x80001000 > [ 0.000000] Linux version 4.4.13 (openwrt@debian-compiler) (gcc version 5.3.0 (LEDE GCC 5.3.0 r482) ) #1 Thu Jun 16 19:04:33 UTC 2016 > (...) So Kernel 4.4 is successfully booting on this hardware. However, this still does not resolve the issue with prebuilt/"homemade" images for LEDE/OpenWrt. (This is to be discussed on other mailing lists.) I have a slightly different memory map compared to Aaro's: > Total memory used by CFE: 0x80300000 - 0x803A4010 (671760) > Initialized Data: 0x80339E70 - 0x8033C630 (10176) > BSS Area: 0x8033C630 - 0x8033E010 (6624) > Local Heap: 0x8033E010 - 0x803A2010 (409600) > Stack Area: 0x803A2010 - 0x803A4010 (8192) > Text (code) segment: 0x80300000 - 0x80339E70 (237168) > Boot area (physical): 0x003A5000 - 0x003E5000 > Relocation Factor: I:00000000 - D:00000000 For testing: I have WRT54GL and WL500gpv2 here, and can attach JTAG if that helps. (No BCM4704 though) What came to my eyes now: after the output "Starting program at 0x80001000" it takes some time (~1-2 seconds) until Kernel's first printk appears. I guess that's the (GZ|LZMA|whatever)-decompressor. Maybe this gets stuck somehow? -> Would JTAG help? Best regards, P. Wassi