作者別: とーふ

Hyper-V Server 2016 + Windows 10 1809でのVM設定メモ (PowerShell)

Windows Hyper-V Server 2016上に、Windows 10 1809のHyper-V マネージャーからVMを作成した際、嵌ったのでメモ。

通常通りVMを作成したところ、セキュアブートの有効/無効切り替えがVM設定画面のどこにも無く、Linuxをブートするのに必要なセキュアブートの無効化ができなかった。
代替として、PowerShellにより設定できた。

  • VM名を取得する。Hyper-V マネージャーから対象のVM名を確認するか、PowerShellで Get-VM を実行して確認する。
    [tofu-h81whs16]: PS C:\Users\Administrator\Documents> Get-VM
    
    Name      State   CPUUsage(%) MemoryAssigned(M) Uptime           Status Version
    ----      -----   ----------- ----------------- ------           ------ -------
    XU18_test Running 11          1024              00:12:54.6510000 正常稼働中  8.0    
    
  • VMのセキュアブート設定を確認する。PowerShellから
    Get-VMFirmware -VMName "(VM名)"
    を実行し、 “SecureBoot” 列を確認する。

    [tofu-h81whs16]: PS C:\Users\Administrator\Documents> Get-VMFirmware -VMName "XU18_test"
    
    VMName    SecureBoot SecureBootTemplate PreferredNetworkBootProtocol BootOrder              
    ------    ---------- ------------------ ---------------------------- ---------              
    XU18_test On         MicrosoftWindows   IPv4                         {Drive, Drive, Network}
    
  • セキュアブートを無効化する。PowerShellで
    Set-VMFirmware -VMName "(VM名)" -EnableSecureBoot Off
    を実行する。

    [tofu-h81whs16]: PS C:\Users\Administrator\Documents> Set-VMFirmware -VMName "XU18_test" -EnableSecureBoot Off
    

    VMが起動している状態ではエラーが出て変更できない。シャットダウンまたは停止してから実行する。
    実行後、再度セキュアブートの状態を確認する。

    [tofu-h81whs16]: PS C:\Users\Administrator\Documents> Get-VMFirmware -VMName "XU18_test"
    
    VMName    SecureBoot SecureBootTemplate PreferredNetworkBootProtocol BootOrder              
    ------    ---------- ------------------ ---------------------------- ---------              
    XU18_test Off        MicrosoftWindows   IPv4                         {Drive, Drive, Network}
    
広告

Windows Hyper-V Server 2016でのファイアウォールグループ有効化

現在ビルド鯖で仮想マシンのホストOSとして稼働しているWindows Server 2012 R2のサポート終了に備えて、Windows Hyper-V Server 2016を試していた際に気になったのでメモ。
従来使用されていた(らしい)netsh advfirewall は既に非推奨らしいメッセージが表示されるため

Windows PowerShell
Copyright (C) Microsoft Corporation. All rights reserved.

PS C:\WINDOWS\system32> netsh
netsh>advfirewall
Windows の将来のバージョンで、Windows Firewall with Advanced Security の Netsh 機能が削除される可能性が
あります。

現在 Windows Firewall with Advanced Security の構成および管理に netsh を使用している場合は、Windows PowerShell に
移行することをお勧めします。

Windows Firewall with Advanced Security を管理するためのコマンドの一覧を表示するには、Windows PowerShell プロンプト
に「Get-Command -Module NetSecurity」と入力してください。

Windows Firewall with Advanced Security 用の PowerShell コマンドの詳細については、
https://go.microsoft.com/fwlink/?LinkId=217627 を参照してください。
netsh advfirewall>

、移行先として推奨されているPowerShellで行えないか色々探し、それらしきものを見つけた。

Hyper-V Server 2016のリモート管理環境構築-(3)サーバー側設定 | Yu’n Craft
で紹介されている下記

netsh
advfirewall
firewall
set rule group="リモート デスクトップ" new enable=yes
set rule group="ファイルとプリンターの共有" new enable=yes
set rule group="Windows リモート管理" new enable=yes
set rule group="リモート イベントのログ管理" new enable=yes
set rule group="リモート ボリューム管理" new enable=yes
exit

の場合、PowerShellでは以下で代用できた。

Enable-NetFirewallRule -DisplayGroup "リモート デスクトップ"
Enable-NetFirewallRule -DisplayGroup "ファイルとプリンターの共有"
Enable-NetFirewallRule -DisplayGroup "Windows リモート管理"
Enable-NetFirewallRule -DisplayGroup "リモート イベントのログ管理"
Enable-NetFirewallRule -DisplayGroup "リモート ボリューム管理"

これでWindows Hyper-V Server 2016に対するリモートデスクトップと “Hyper-V マネージャー” 、 “コンピューターの管理(一部)” が通るようになった。サーバのAdministratorは予めクライアント側 (Windows 10 1809) でcmdkeyを用いて認証情報を追加し、TrustedHostsも追加済み。

WN-DX1167R stock -> factory(仮2)

メインのブログで書いた通りユーザーが手動で編集することにしていた bootnum, debugflag 2つのflagを、sysupgrade関連のスクリプト内に押し込んで自動的に設定されるよう変更したもの。
stock firmwareが1番目のOSイメージ領域からブートしている状態と、2番目からの場合の2例を掲載。

stock: bootnum=1

  • 1番目のOSイメージでstock firmwareがブートしている状態からスタート
  • OpenWrtのinitramfs-factoryは2番目のOSイメージ領域に書き込まれブートされる
  • 415 – 417行目でbootnumとdebugflagをチェック、bootnumを1に設定しdebugflagを有効化
  • 504行目でZ-Loaderの中断が可能になる (debugflag)
  • 506行目で1番目のOSイメージ領域からブートしている旨が表示される
[  249.812000] led=9, on=1, off=1, blinks,=1, reset=0, time=4000 low_trigger=0
Unlocking firmware_2 ...

Writing from /tmp/fw.bin to firmware_2 ...     
Header checksum OK.
Data checksum OK
Unlocking persist ...
### Switch to bank 2 on next boot! ###
procd: - shutdown -
[  255.428000] br-lan: port 4(ra0) entered disabled state
[  255.436000] br-lan: port 3(rai0) entered disabled state
[  255.448000] br-lan: port 2(eth1) entered disabled state
[  255.460000] br-lan: port 1(eth0) entered disabled state
[  255.472000] device eth0 left promiscuous mode
[  255.480000] br-lan: port 1(eth0) entered disabled state
[  255.492000] ra2880stop()...Done
[  255.496000] eth1: ===> VirtualIF_close
[  255.504000] Free TX/RX Ring Memory!
[  255.512000] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[  255.528000] device eth1 left promiscuous mode
[  255.536000] br-lan: port 2(eth1) entered disabled state
[  255.544000] eth1: ===> VirtualIF_close
[  255.556000] device ra0 left promiscuous mode
[  255.564000] br-lan: port 4(ra0) entered disabled state
[  255.572000] device rai0 left promiscuous mode
[  255.584000] br-lan: port 3(rai0) entered disabled state
[  257.032000] WifiSysClose(), wdev idx = 0
[  257.048000] WifiSysGetBssInfoState(): BssInfoIdx 0 not found!!!
[  257.060000] WifiSysUpdateBssInfoState(): BssInfoIdx 0 not found!!!
### ap ###
[  258.552000] Device Instance
[  258.560000]  WDEV 00:
                Name:rai0
[  258.564000]          Wdev(list) Idx:0
[  258.572000]           Idx:8
[  258.576000]  WDEV 01:
                Name:rai1
[  258.584000]          Wdev(list) Idx:1
[  258.588000]           Idx:9
[  258.592000]  WDEV 02:
                Name:rai2
[  258.600000]          Wdev(list) Idx:2
[  258.608000]           Idx:10
[  258.612000]  WDEV 03:
                Name:rai3
[  258.616000]          Wdev(list) Idx:3
[  258.624000]           Idx:11
[  258.628000]  WDEV 04:
                Name:ra0
[  258.636000]          Wdev(list) Idx:4
[  258.640000]           Idx:12
[  258.644000]  WDEV 05:
                Name:ra1
[  258.652000]          Wdev(list) Idx:5
[  258.660000]           Idx:13
[  258.664000]  WDEV 06:
                Name:ra2
[  258.668000]          Wdev(list) Idx:6
[  258.676000]           Idx:14
[  258.680000]  WDEV 07:
                Name:ra3
[  258.688000]          Wdev(list) Idx:7
[  258.692000]           Idx:15
[  258.696000]  WDEV 08:
                Name:apclii0
[  258.704000]          Wdev(list) Idx:8
[  258.712000]           Idx:16
[  258.716000]  WDEV 09:
                Name:apcli0
[  258.724000]          Wdev(list) Idx:9
[  258.728000]           Idx:17
[  258.732000]  WDEV 10:
[  258.736000]  WDEV 11:
[  258.744000]  WDEV 12:
[  258.748000]  WDEV 13:
[  258.752000]  WDEV 14:
[  258.756000]  WDEV 15:
[  258.760000]  WDEV 16:
[  258.764000]  WDEV 17:
[  258.776000] WifiSysClose(), wdev idx = 4
[  258.788000] WifiSysGetBssInfoState(): BssInfoIdx 1 not found!!!
[  258.800000] WifiSysUpdateBssInfoState(): BssInfoIdx 1 not found!!!
[  258.812000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[  258.828000] WifiSysClose(), wdev idx = 0
[  258.832000] WifiSysClose(), wdev idx = 1
[  258.840000] WifiSysClose(), wdev idx = 2
[  258.848000] WifiSysClose(), wdev idx = 3
[  258.884000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[  258.896000] WifiSysClose(), wdev idx = 4
[  258.904000] WifiSysClose(), wdev idx = 5
[  258.912000] WifiSysClose(), wdev idx = 6
[  258.920000] WifiSysClose(), wdev idx = 7
[  258.928000] kill LoopBackTxTask task failed!
[  258.940000] AndesRestartCheck: Current TOP_MISC2(0x7)
[  258.996000] CmdReStartDLRsp: Status Success!, Status(0)
[  259.004000] AndesRestartCheck:  TOP_MISC2(1)
[  259.016000] RT28xxPciAsicRadioOff(): Not support for HIF_MT yet!
[  259.028000] RTMPDrvClose call RT28xxPciAsicRadioOff fail !!
[  259.036000] tx_kickout_fail_count = 0
[  259.044000] tx_timeout_fail_count = 0
[  259.052000] rx_receive_fail_count = 0
[  259.060000] alloc_cmd_msg = 1848
[  259.064000] free_cmd_msg = 1848
[  259.072000] cut_through_token_list_destroy(): 86231888,86231888
[  259.088000] cut_through_token_list_destroy(): 86231898,86231898
[  259.104000] FwOwn()::Set Fw Own
[  259.112000] RTMP_AllTimerListRelease: Size=0
[  259.120000] FwOwn()::Return since already in Fw Own...
[  259.132000] <---HwCtrlThread
procd: - reboot [  259.268000] Stopped WatchDog Timer.
-
[  259.284000] Restarting system.


U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..
Checking image 2...
   Image Name:   3.10(XIK.1)b7
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    5642640 Bytes =  5.4 MB
   Load Address: 80001000
   Entry Point:  80001000
.......................................................................................   Verifying Combo Checksum ... .......................................................................................## Booting image at bf700000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...

[    0.000000] Linux version 4.14.111 (musashino205@Taiha.Net) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+9901-29b3122f32)) #0 SMP Fri Apr 19 18:38:16 2019
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is I-O DATA WN-DX1167R
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x90/0x4a4 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu @81110000 s26192 r8192 d22960 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00001001
[    0.000000] Readback ErrCtl register=00001001
[    0.000000] Memory: 119764K/131072K available (4497K kernel code, 230K rwdata, 1000K rodata, 3860K init, 248K bss, 11308K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] CPU Clock: 880MHz
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.015488] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.087817] pid_max: default: 32768 minimum: 301
[    0.097126] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.110147] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.125864] Hierarchical SRCU implementation.
[    0.135320] smp: Bringing up secondary CPUs ...
[    0.144858] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.144867] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.144879] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.145013] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.204699] Synchronize counters for CPU 1: done.
[    0.268617] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.268625] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.268632] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.268709] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.325525] Synchronize counters for CPU 2: done.
[    0.385688] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.385696] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.385704] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.385790] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.445094] Synchronize counters for CPU 3: done.
[    0.504697] smp: Brought up 1 node, 4 CPUs
[    0.516485] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.535955] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.548380] pinctrl core: initialized pinctrl subsystem
[    0.560001] NET: Registered protocol family 16
[    0.577896] pull PCIe RST: RALINK_RSTCTRL = 4000000
[    0.887882] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.897946] ***** Xtal 40MHz *****
[    0.904680] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.914883] Port 0 N_FTS = 1b102800
[    0.921784] Port 1 N_FTS = 1b105000
[    0.928709] Port 2 N_FTS = 1b102800
[    2.087355] PCIE0 no card, disable it(RST&CLK)
[    2.096042] PCIE2 no card, disable it(RST&CLK)
[    2.104845]  -> 20107f2
[    2.109695] PCIE1 enabled
[    2.114874] PCI host bridge /pcie@1e140000 ranges:
[    2.124402]  MEM 0x0000000060000000..0x000000006fffffff
[    2.134758]   IO 0x000000001e160000..0x000000001e16ffff
[    2.145126] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    2.167761] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.179069] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.190297] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.202912] PCI host bridge to bus 0000:00
[    2.210926] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    2.224585] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    2.236332] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    2.249806] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    2.266547] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.279567] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.293386] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.306866] pci 0000:00:00.0: BAR 1: assigned [mem 0x60100000-0x6010ffff]
[    2.320357] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    2.334876] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.344693] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.359393] clocksource: Switched to clocksource GIC
[    2.370552] NET: Registered protocol family 2
[    2.380001] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    2.393740] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    2.406345] TCP: Hash tables configured (established 1024 bind 1024)
[    2.419073] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.430573] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.443214] NET: Registered protocol family 1
[    5.829352] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    5.840537] Crashlog allocated RAM at address 0x3f00000
[    5.851106] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[    5.870961] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    5.882440] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    5.902557] random: fast init done
[    5.905526] io scheduler noop registered
[    5.916961] io scheduler deadline registered (default)
[    5.928091] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    5.941833] console [ttyS0] disabled
[    5.948844] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A
[    5.966853] console [ttyS0] enabled
[    5.966853] console [ttyS0] enabled
[    5.980605] bootconsole [early0] disabled
[    5.980605] bootconsole [early0] disabled
[    5.997174] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    6.010121] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    6.024144] Enable NFI Clock
[    6.029880] # MTK NAND # : Use HW ECC
[    6.037171] Device found in MTK table, ID: 1f1, EXT_ID: 801d01
[    6.048775] Support this Device in MTK table! 1f1 
[    6.058486] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    6.071352] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xf1
[    6.083992] nand: AMD/Spansion NAND 128MiB 3,3V 8-bit
[    6.094041] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    6.109116] Scanning device for bad blocks
[    6.398842] 12 fixed-partitions partitions found on MTD device MT7621-NAND
[    6.412529] Creating 12 MTD partitions on "MT7621-NAND":
[    6.423107] 0x000000000000-0x000000100000 : "Bootloader"
[    6.434753] 0x000000100000-0x000000200000 : "u-boot-env"
[    6.446365] 0x000000200000-0x000000300000 : "Factory"
[    6.457433] 0x000000300000-0x000000400000 : "SecondBoot"
[    6.469024] 0x000000400000-0x000000800000 : "kernel"
[    6.479999] 0x000000800000-0x000003600000 : "ubi"
[    6.490740] 0x000003600000-0x000003700000 : "Config"
[    6.501704] 0x000003700000-0x000006900000 : "firmware_2"
[    6.513661] 0x000006900000-0x000006a00000 : "Config_2"
[    6.524953] 0x000006a00000-0x000006b00000 : "persist"
[    6.536034] 0x000006b00000-0x000006c00000 : "idmkey"
[    6.546954] 0x000006c00000-0x000007f80000 : "Backup"
[    6.558005] [mtk_nand] probe successfully!
[    6.566889] Signature matched and data read!
[    6.575384] load_fact_bbt success 1023
[    6.583513] libphy: Fixed MDIO Bus: probed
[    6.661937] libphy: mdio: probed
[    8.079430] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    8.091976] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 19
[    8.110957] NET: Registered protocol family 10
[    8.121086] Segment Routing with IPv6
[    8.128441] NET: Registered protocol family 17
[    8.137379] 8021q: 802.1Q VLAN Support v1.8
[    8.148636] UBI error: no valid UBI magic found inside mtd5
[    8.159787] hctosys: unable to open rtc device (rtc0)
[    8.183994] Freeing unused kernel memory: 3860K
[    8.193046] This architecture does not have kernel memory protection.
[    8.217061] init: Console is alive
[    8.224187] init: - watchdog -
[    8.242011] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    8.259019] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    8.289673] init: - preinit -
[    8.455267] mtk_soc_eth 1e100000.ethernet: PPE started
[    8.477829] random: procd: uninitialized urandom read (4 bytes read)
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    9.309121] mtk_soc_eth 1e100000.ethernet eth0: port 0 link up
[    9.714606] mtk_soc_eth 1e100000.ethernet eth0: port 2 link up
[   11.592689] mtk_soc_eth 1e100000.ethernet: 0x100 = 0x6060000c, 0x10c = 0x80818
[   11.613930] procd: - early -
[   11.619824] procd: - watchdog -
[   12.249524] procd: - watchdog -
[   12.256078] procd: - ubus -
[   12.266330] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.319925] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.332951] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.346419] procd: - init -
Please press Enter to activate this console.
[   12.506500] kmodloader: loading kernel modules from /etc/modules.d/*
[   12.524664] nat46: module (version 683fbd2b765506332a1af141545652bf58f03166) loaded.
[   12.545421] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   12.565367] ip_tables: (C) 2000-2006 Netfilter Core Team
[   12.585498] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[   12.627961] Netfilter messages via NETLINK v0.30.
[   12.657603] xt_time: kernel timezone is -0000
[   12.673395] ctnetlink v0.93: registering with nfnetlink.
[   12.686049] PPP generic driver version 2.4.2
[   12.696300] NET: Registered protocol family 24
[   12.707853] kmodloader: done loading kernel modules from /etc/modules.d/*
[   13.793633] urandom_read: 5 callbacks suppressed
[   13.793645] random: jshn: uninitialized urandom read (4 bytes read)
[   35.564701] mtk_soc_eth 1e100000.ethernet: PPE started
[   35.581714] br-lan: port 1(eth0.1) entered blocking state
[   35.592593] br-lan: port 1(eth0.1) entered disabled state
[   35.604021] device eth0.1 entered promiscuous mode
[   35.613640] device eth0 entered promiscuous mode
[   35.632768] br-lan: port 1(eth0.1) entered blocking state
[   35.643621] br-lan: port 1(eth0.1) entered forwarding state
[   35.655287] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   36.014320] random: crng init done
[   36.590171] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready



BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+9901-29b3122f32
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# sysupgrade https://taiha.net/jenkins/job/OpenWrt-master-IODATA-W
N-DX1167R/lastSuccessfulBuild/artifact/bin/targets/ramips/mt7621/openwrt-ramips-
mt7621-iodata_wn-dx1167r-squashfs-sysupgrade.bin
--2019-04-20 01:25:46--  https://taiha.net/jenkins/job/OpenWrt-master-IODATA-WN-DX1167R/lastSuccessfulBuild/artifact/bin/targets/ramips/mt7621/openwrt-ramips-mt7621-iodata_wn-dx1167r-squashfs-sysupgrade.bin
Resolving taiha.net... 240b:12:500:65f0:c822:64a3:7e11:4961, 49.129.167.30
Connecting to taiha.net|240b:12:500:65f0:c822:64a3:7e11:4961|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 5888778 (5.6M) [application/octet-stream]
Saving to: '/tmp/sysupgrade.img'

/tmp/sysupgrade.img 100%[===================>]   5.62M  3.07MB/s    in 1.8s    

2019-04-20 01:25:48 (3.07 MB/s) - '/tmp/sysupgrade.img' saved [5888778/5888778]

Cannot save config while running from ramdisk.
Commencing upgrade. Closing all shell sessions.
Watchdog handover: fd=3
- watchdog -
killall: telnetd: no process killed
Sending TERM to remaining processes ... netifd odhcpd uhttpd nlbwmon sh sleep ntpd vnstatd dnsmasq ubusd logd rpcd 
Sending KILL to remaining processes ... 
Performing system upgrade...
current: bootnum => 2, debugflag => 0
### switch to 1st os-image on next boot ###
### enable debug ###
Unlocking kernel ...

Writing from  to kernel ...     
[  149.236208] ubi0: attaching mtd5
[  149.480801] ubi0: scanning is finished
[  149.488318] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  149.502827] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd5, error -22
ubiattach: error!: cannot attach mtd5
           error 22 (Invalid argument)
ubiformat: mtd5 (nand), size 48234496 bytes (46.0 MiB), 368 eraseblocks of 131072 bytes (128.0 KiB), min. I/O size 2048 bytes
libscan: scanning eraseblock 367 -- 100 % complete  
ubiformat: 327 eraseblocks are supposedly empty
ubiformat: warning!: 41 of 368 eraseblocks contain non-UBI data
ubiformat: warning!: only 0 of 368 eraseblocks have valid erase counter
ubiformat: erase counter 0 will be used for all eraseblocks
ubiformat: note, arbitrary erase counter value may be specified using -e option
ubiformat: use erase counter 0 for all eraseblocks
ubiformat: formatting eraseblock 317 -- 86 % complet[  155.968118] ubi0: attaching mtd5
ubiformat: f[  156.404597] ubi0: scanning is finished  
ubiformat: formatting eraseblock 363 -- 98 % complet[  156.427486] ubi0: attached mtd5 (name "ubi", size 46 MiB)
ubiformat: f[  156.439973] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ormatting eraseb[  156.456384] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
lock 364 -- 99 %[  156.472637] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubif[  156.489233] ubi0: good PEBs: 368, bad PEBs: 0, corrupted PEBs: 0
ormat: formattin[  156.503931] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 128
g eraseblock 365[  156.521043] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 539701386
 -- 99 % complet[  156.541789] ubi0: available PEBs: 344, total reserved PEBs: 24, PEBs reserved for bad PEB handling: 20
ubiformat: f[  156.563066] ubi0: background thread "ubi_bgt0d" started, PID 2215
ubiformat: formatting eraseblock 367 -- 100 % complete  
UBI device number 0, total 368 LEBs (46727168 bytes, 44.5 MiB), available 344 LEBs (43679744 bytes, 41.6 MiB), LEB size 126976 bytes (124.0 KiB)
Volume ID 0, size 32 LEBs (4063232 bytes, 3.8 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs", alignment 1
Set volume size to 39616512
Volume ID 1, size 312 LEBs (39616512 bytes, 37.7 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs_data", alignment 1
sysupgrade successful
umount: can't unmount /dev: Resource busy
umount: can't unmount /tmp: Resource busy
umount: can't unmount /: Invalid argument
[  158.599742] reboot: Restarting system


U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..Hit ESC key to stop autoboot: 1

Checking image 1...
   Image Name:   MIPS OpenWrt Linux-4.14.
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1905343 Bytes =  1.8 MB
   Load Address: 80001000
   Entry Point:  80001000
..............................   Verifying Checksum ... ## Booting image at bc400000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...

[    0.000000] Linux version 4.14.111 (musashino205@Taiha.Net) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+9901-29b3122f32)) #0 SMP Fri Apr 19 18:38:16 2019
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is I-O DATA WN-DX1167R
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x90/0x4a4 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu @81110000 s26192 r8192 d22960 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00001000
[    0.000000] Readback ErrCtl register=00001000
[    0.000000] Memory: 123412K/131072K available (4497K kernel code, 230K rwdata, 1000K rodata, 212K init, 248K bss, 7660K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] CPU Clock: 880MHz
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.015488] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.087817] pid_max: default: 32768 minimum: 301
[    0.097126] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.110146] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.125865] Hierarchical SRCU implementation.
[    0.135322] smp: Bringing up secondary CPUs ...
[    0.157179] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.157188] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.157199] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.157334] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.204698] Synchronize counters for CPU 1: done.
[    0.280941] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.280949] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.280956] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.281032] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.325530] Synchronize counters for CPU 2: done.
[    0.398014] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.398022] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.398030] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.398117] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.445099] Synchronize counters for CPU 3: done.
[    0.504703] smp: Brought up 1 node, 4 CPUs
[    0.516485] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.535955] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.548382] pinctrl core: initialized pinctrl subsystem
[    0.559933] NET: Registered protocol family 16
[    0.577505] pull PCIe RST: RALINK_RSTCTRL = 4000000
[    0.887491] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.897554] ***** Xtal 40MHz *****
[    0.904288] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.914491] Port 0 N_FTS = 1b102800
[    0.921393] Port 1 N_FTS = 1b105000
[    0.928317] Port 2 N_FTS = 1b102800
[    2.086971] PCIE0 no card, disable it(RST&CLK)
[    2.095659] PCIE2 no card, disable it(RST&CLK)
[    2.104462]  -> 20107f2
[    2.109312] PCIE1 enabled
[    2.114491] PCI host bridge /pcie@1e140000 ranges:
[    2.124019]  MEM 0x0000000060000000..0x000000006fffffff
[    2.134375]   IO 0x000000001e160000..0x000000001e16ffff
[    2.144743] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    2.167366] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.178636] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.189838] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.202268] PCI host bridge to bus 0000:00
[    2.210286] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    2.223959] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    2.235687] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    2.249187] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    2.266052] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.279096] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.292905] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.306379] pci 0000:00:00.0: BAR 1: assigned [mem 0x60100000-0x6010ffff]
[    2.319877] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    2.334380] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.344200] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.359032] clocksource: Switched to clocksource GIC
[    2.370341] NET: Registered protocol family 2
[    2.379576] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    2.393317] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    2.405923] TCP: Hash tables configured (established 1024 bind 1024)
[    2.418647] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.430155] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.442799] NET: Registered protocol family 1
[    2.688982] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    2.700354] Crashlog allocated RAM at address 0x3f00000
[    2.710851] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[    2.730813] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    2.742294] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    2.762256] random: fast init done
[    2.765242] io scheduler noop registered
[    2.776727] io scheduler deadline registered (default)
[    2.787775] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    2.801657] console [ttyS0] disabled
[    2.808665] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A
[    2.826694] console [ttyS0] enabled
[    2.826694] console [ttyS0] enabled
[    2.840436] bootconsole [early0] disabled
[    2.840436] bootconsole [early0] disabled
[    2.857092] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    2.870071] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    2.884106] Enable NFI Clock
[    2.889844] # MTK NAND # : Use HW ECC
[    2.897135] Device found in MTK table, ID: 1f1, EXT_ID: 801d01
[    2.908743] Support this Device in MTK table! 1f1 
[    2.918458] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    2.931327] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xf1
[    2.943972] nand: AMD/Spansion NAND 128MiB 3,3V 8-bit
[    2.954025] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    2.969106] Scanning device for bad blocks
[    3.258898] 12 fixed-partitions partitions found on MTD device MT7621-NAND
[    3.272584] Creating 12 MTD partitions on "MT7621-NAND":
[    3.283166] 0x000000000000-0x000000100000 : "Bootloader"
[    3.294684] 0x000000100000-0x000000200000 : "u-boot-env"
[    3.306162] 0x000000200000-0x000000300000 : "Factory"
[    3.317093] 0x000000300000-0x000000400000 : "SecondBoot"
[    3.328545] 0x000000400000-0x000000800000 : "kernel"
[    3.339387] 0x000000800000-0x000003600000 : "ubi"
[    3.350032] 0x000003600000-0x000003700000 : "Config"
[    3.360791] 0x000003700000-0x000006900000 : "firmware_2"
[    3.372620] 0x000006900000-0x000006a00000 : "Config_2"
[    3.383745] 0x000006a00000-0x000006b00000 : "persist"
[    3.394669] 0x000006b00000-0x000006c00000 : "idmkey"
[    3.405445] 0x000006c00000-0x000007f80000 : "Backup"
[    3.416383] [mtk_nand] probe successfully!
[    3.425266] Signature matched and data read!
[    3.433761] load_fact_bbt success 1023
[    3.441842] libphy: Fixed MDIO Bus: probed
[    3.521593] libphy: mdio: probed
[    4.927628] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    4.940154] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 19
[    4.959228] NET: Registered protocol family 10
[    4.969483] Segment Routing with IPv6
[    4.976843] NET: Registered protocol family 17
[    4.985741] 8021q: 802.1Q VLAN Support v1.8
[    4.996937] UBI: auto-attach mtd5
[    5.003599] ubi0: attaching mtd5
[    5.437590] ubi0: scanning is finished
[    5.460295] ubi0: attached mtd5 (name "ubi", size 46 MiB)
[    5.471061] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    5.484742] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    5.498251] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    5.512110] ubi0: good PEBs: 368, bad PEBs: 0, corrupted PEBs: 0
[    5.524061] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[    5.538434] ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 539701386
[    5.556438] ubi0: available PEBs: 0, total reserved PEBs: 368, PEBs reserved for bad PEB handling: 20
[    5.574807] ubi0: background thread "ubi_bgt0d" started, PID 371
[    5.576428] block ubiblock0_0: created from ubi0:0(rootfs)
[    5.597689] ubiblock: device ubiblock0_0 (rootfs) set to be root filesystem
[    5.611558] hctosys: unable to open rtc device (rtc0)
[    5.628778] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    5.643534] Freeing unused kernel memory: 212K
[    5.652425] This architecture does not have kernel memory protection.
[    6.122265] init: Console is alive
[    6.129305] init: - watchdog -
[    6.168783] mtk_soc_eth 1e100000.ethernet eth0: port 0 link up
[    6.357869] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    6.485837] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    6.509320] init: - preinit -
[    7.328683] mtk_soc_eth 1e100000.ethernet: PPE started
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to [    7.405955] random: procd: uninitialized urandom read (4 bytes read)
select the debug level
[    8.371629] mtk_soc_eth 1e100000.ethernet eth0: port 2 link up
[   10.523665] UBIFS (ubi0:1): default file-system created
[   10.535531] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 448
[   10.648490] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data"
[   10.664101] UBIFS (ubi0:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[   10.683838] UBIFS (ubi0:1): FS size: 38346752 bytes (36 MiB, 302 LEBs), journal size 1904640 bytes (1 MiB, 15 LEBs)
[   10.704613] UBIFS (ubi0:1): reserved for root: 1811211 bytes (1768 KiB)
[   10.717783] UBIFS (ubi0:1): media format: w4/r0 (latest is w5/r0), UUID 7FB3E685-BC83-4CEC-B75E-984218747C31, small LPT model
[   10.743143] mount_root: overlay filesystem has not been fully initialized yet
[   10.757837] mount_root: switching to ubifs overlay
[   10.784973] urandom-seed: Seed file not found (/etc/urandom.seed)
[   10.862311] mtk_soc_eth 1e100000.ethernet: 0x100 = 0x6060000c, 0x10c = 0x80818
[   10.884080] procd: - early -
[   10.889995] procd: - watchdog -
[   11.519162] procd: - watchdog -
[   11.525724] procd: - ubus -
[   11.610131] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.694616] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.707749] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.721270] procd: - init -
Please press Enter to activate this console.
[   12.109668] kmodloader: loading kernel modules from /etc/modules.d/*
[   12.197687] nat46: module (version 683fbd2b765506332a1af141545652bf58f03166) loaded.
[   12.217478] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   12.235888] ip_tables: (C) 2000-2006 Netfilter Core Team
[   12.254124] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[   12.298491] Netfilter messages via NETLINK v0.30.
[   12.325272] xt_time: kernel timezone is -0000
[   12.340586] ctnetlink v0.93: registering with nfnetlink.
[   12.353220] PPP generic driver version 2.4.2
[   12.363368] NET: Registered protocol family 24
[   12.375649] kmodloader: done loading kernel modules from /etc/modules.d/*
[   13.634218] urandom_read: 5 callbacks suppressed
[   13.634230] random: jshn: uninitialized urandom read (4 bytes read)
[   31.774993] mtk_soc_eth 1e100000.ethernet: PPE started
[   31.814337] br-lan: port 1(eth0.1) entered blocking state
[   31.825186] br-lan: port 1(eth0.1) entered disabled state
[   31.836610] device eth0.1 entered promiscuous mode
[   31.846213] device eth0 entered promiscuous mode
[   31.859810] br-lan: port 1(eth0.1) entered blocking state
[   31.870640] br-lan: port 1(eth0.1) entered forwarding state
[   31.882301] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   32.207181] random: crng init done
[   32.809763] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready



BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+9901-29b3122f32
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# 

stock: bootnum=2

  • 2番目のOSイメージでstock firmwareがブートしている状態からスタート
  • OpenWrtのinitramfs-factoryは1番目のOSイメージ領域に書き込まれブートされる
  • 391行目でbootnumとdebugflagをチェック、bootnumは既に1なので392行目でdebugflagの有効化のみ実施
  • 479行目でZ-Loaderの中断が可能になる (debugflag)
  • 481行目で1番目のOSイメージ領域からブートしている旨が表示される
### DO NOT set cfgapply ###
cat: can't open 'remote_mgmt': No such file or directory
### Checksum is the same but commit does not change anything! Do nothing! ###
[  257.336000] led=9, on=1, off=1, blinks,=1, reset=0, time=4000 low_trigger=0
Unlocking firmware ...

Writing from /tmp/fw.bin to firmware ...     
Header checksum OK.
Data checksum OK
Unlocking persist ...
### Switch to bank 1 on next boot! ###
procd: - shutdown -
[  262.960000] br-lan: port 4(ra0) entered disabled state
[  262.968000] br-lan: port 3(rai0) entered disabled state
[  262.980000] br-lan: port 2(eth1) entered disabled state
[  262.988000] br-lan: port 1(eth0) entered disabled state
[  263.000000] device eth0 left promiscuous mode
[  263.012000] br-lan: port 1(eth0) entered disabled state
[  263.020000] ra2880stop()...Done
[  263.028000] eth1: ===> VirtualIF_close
[  263.036000] Free TX/RX Ring Memory!
[  263.044000] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[  263.060000] device eth1 left promiscuous mode
[  263.068000] br-lan: port 2(eth1) entered disabled state
[  263.080000] eth1: ===> VirtualIF_close
[  263.088000] device ra0 left promiscuous mode
[  263.096000] br-lan: port 4(ra0) entered disabled state
[  263.108000] device rai0 left promiscuous mode
[  263.116000] br-lan: port 3(rai0) entered disabled state
### ap ###
[  264.632000] WifiSysClose(), wdev idx = 0
[  264.648000] WifiSysGetBssInfoState(): BssInfoIdx 0 not found!!!
[  264.660000] WifiSysUpdateBssInfoState(): BssInfoIdx 0 not found!!!
[  265.980000] Device Instance
[  265.984000]  WDEV 00:
                Name:rai0
[  265.992000]          Wdev(list) Idx:0
[  266.000000]           Idx:9
[  266.004000]  WDEV 01:
                Name:rai1
[  266.008000]          Wdev(list) Idx:1
[  266.016000]           Idx:10
[  266.020000]  WDEV 02:
                Name:rai2
[  266.028000]          Wdev(list) Idx:2
[  266.032000]           Idx:11
[  266.040000]  WDEV 03:
                Name:rai3
[  266.044000]          Wdev(list) Idx:3
[  266.052000]           Idx:12
[  266.056000]  WDEV 04:
                Name:ra0
[  266.064000]          Wdev(list) Idx:4
[  266.068000]           Idx:13
[  266.072000]  WDEV 05:
                Name:ra1
[  266.080000]          Wdev(list) Idx:5
[  266.084000]           Idx:14
[  266.088000]  WDEV 06:
                Name:ra2
[  266.096000]          Wdev(list) Idx:6
[  266.104000]           Idx:15
[  266.108000]  WDEV 07:
                Name:ra3
[  266.112000]          Wdev(list) Idx:7
[  266.120000]           Idx:16
[  266.124000]  WDEV 08:
                Name:apclii0
[  266.132000]          Wdev(list) Idx:8
[  266.136000]           Idx:17
[  266.144000]  WDEV 09:
                Name:apcli0
[  266.148000]          Wdev(list) Idx:9
[  266.156000]           Idx:18
[  266.160000]  WDEV 10:
[  266.164000]  WDEV 11:
[  266.168000]  WDEV 12:
[  266.172000]  WDEV 13:
[  266.176000]  WDEV 14:
[  266.184000]  WDEV 15:
[  266.188000]  WDEV 16:
[  266.192000]  WDEV 17:
[  266.200000] WifiSysClose(), wdev idx = 4
[  266.216000] WifiSysGetBssInfoState(): BssInfoIdx 1 not found!!!
[  266.228000] WifiSysUpdateBssInfoState(): BssInfoIdx 1 not found!!!
[  266.240000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[  266.252000] WifiSysClose(), wdev idx = 0
[  266.260000] WifiSysClose(), wdev idx = 1
[  266.268000] WifiSysClose(), wdev idx = 2
[  266.276000] WifiSysClose(), wdev idx = 3
[  266.308000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[  266.320000] WifiSysClose(), wdev idx = 4
[  266.328000] WifiSysClose(), wdev idx = 5
[  266.336000] WifiSysClose(), wdev idx = 6
[  266.344000] WifiSysClose(), wdev idx = 7
[  266.352000] kill LoopBackTxTask task failed!
[  266.368000] AndesRestartCheck: Current TOP_MISC2(0x7)
[  266.420000] CmdReStartDLRsp: Status Success!, Status(0)
[  266.432000] AndesRestartCheck:  TOP_MISC2(1)
[  266.440000] RT28xxPciAsicRadioOff(): Not support for HIF_MT yet!
[  266.452000] RTMPDrvClose call RT28xxPciAsicRadioOff fail !!
[  266.464000] tx_kickout_fail_count = 0
[  266.472000] tx_timeout_fail_count = 0
[  266.476000] rx_receive_fail_count = 0
[  266.484000] alloc_cmd_msg = 1864
[  266.492000] free_cmd_msg = 1864
[  266.500000] cut_through_token_list_destroy(): 8545dd88,8545dd88
[  266.512000] cut_through_token_list_destroy(): 8545dd98,8545dd98
[  266.528000] FwOwn()::Set Fw Own
[  266.540000] RTMP_AllTimerListRelease: Size=0
[  266.548000] FwOwn()::Return since already in Fw Own...
[  266.556000] <---HwCtrlThread
procd: - reboot [  266.696000] Stopped WatchDog Timer.
-
[  266.708000] Restarting system.


U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..
Checking image 1...
   Image Name:   3.10(XIK.1)b7
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    5642216 Bytes =  5.4 MB
   Load Address: 80001000
   Entry Point:  80001000
.......................................................................................   Verifying Combo Checksum ... .......................................................................................## Booting image at bc400000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...

[    0.000000] Linux version 4.14.111 (musashino205@Taiha.Net) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+9901-29b3122f32)) #0 SMP Sat Apr 20 01:26:47 2019
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is I-O DATA WN-DX1167R
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x90/0x4a4 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu @81110000 s26192 r8192 d22960 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00001000
[    0.000000] Readback ErrCtl register=00001000
[    0.000000] Memory: 119764K/131072K available (4497K kernel code, 230K rwdata, 1000K rodata, 3860K init, 248K bss, 11308K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] CPU Clock: 880MHz
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.015487] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.087817] pid_max: default: 32768 minimum: 301
[    0.097125] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.110146] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.125864] Hierarchical SRCU implementation.
[    0.135321] smp: Bringing up secondary CPUs ...
[    0.144858] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.144867] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.144879] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.145013] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.204697] Synchronize counters for CPU 1: done.
[    0.268618] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.268627] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.268634] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.268710] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.325526] Synchronize counters for CPU 2: done.
[    0.385687] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.385696] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.385704] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.385789] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.445095] Synchronize counters for CPU 3: done.
[    0.504698] smp: Brought up 1 node, 4 CPUs
[    0.516487] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.535958] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.548382] pinctrl core: initialized pinctrl subsystem
[    0.559984] NET: Registered protocol family 16
[    0.577541] pull PCIe RST: RALINK_RSTCTRL = 4000000
[    0.887528] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.897592] ***** Xtal 40MHz *****
[    0.904326] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.914529] Port 0 N_FTS = 1b102800
[    0.921430] Port 1 N_FTS = 1b105000
[    0.928355] Port 2 N_FTS = 1b102800
[    2.087005] PCIE0 no card, disable it(RST&CLK)
[    2.095693] PCIE2 no card, disable it(RST&CLK)
[    2.104497]  -> 20107f2
[    2.109346] PCIE1 enabled
[    2.114525] PCI host bridge /pcie@1e140000 ranges:
[    2.124053]  MEM 0x0000000060000000..0x000000006fffffff
[    2.134410]   IO 0x000000001e160000..0x000000001e16ffff
[    2.144777] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    2.167122] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.178384] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.189565] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.201941] PCI host bridge to bus 0000:00
[    2.209965] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    2.223640] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    2.235368] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    2.248861] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    2.265586] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.278622] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.292436] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.305909] pci 0000:00:00.0: BAR 1: assigned [mem 0x60100000-0x6010ffff]
[    2.319405] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    2.333910] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.343731] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.358409] clocksource: Switched to clocksource GIC
[    2.369593] NET: Registered protocol family 2
[    2.378820] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    2.392564] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    2.405170] TCP: Hash tables configured (established 1024 bind 1024)
[    2.417889] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.429398] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.442040] NET: Registered protocol family 1
[    5.828377] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    5.839524] Crashlog allocated RAM at address 0x3f00000
[    5.850080] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[    5.869596] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    5.881071] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    5.903416] random: fast init done
[    5.910435] io scheduler noop registered
[    5.918071] io scheduler deadline registered (default)
[    5.929233] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    5.943050] console [ttyS0] disabled
[    5.950097] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A
[    5.968061] console [ttyS0] enabled
[    5.968061] console [ttyS0] enabled
[    5.981831] bootconsole [early0] disabled
[    5.981831] bootconsole [early0] disabled
[    5.998427] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    6.011221] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    6.025291] Enable NFI Clock
[    6.031029] # MTK NAND # : Use HW ECC
[    6.038318] Device found in MTK table, ID: 1f1, EXT_ID: 801d01
[    6.049927] Support this Device in MTK table! 1f1 
[    6.059645] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    6.072510] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xf1
[    6.085154] nand: AMD/Spansion NAND 128MiB 3,3V 8-bit
[    6.095206] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    6.110288] Scanning device for bad blocks
[    6.400355] 12 fixed-partitions partitions found on MTD device MT7621-NAND
[    6.414037] Creating 12 MTD partitions on "MT7621-NAND":
[    6.424621] 0x000000000000-0x000000100000 : "Bootloader"
[    6.436271] 0x000000100000-0x000000200000 : "u-boot-env"
[    6.447867] 0x000000200000-0x000000300000 : "Factory"
[    6.458999] 0x000000300000-0x000000400000 : "SecondBoot"
[    6.470616] 0x000000400000-0x000000800000 : "kernel"
[    6.481538] 0x000000800000-0x000003600000 : "ubi"
[    6.492286] 0x000003600000-0x000003700000 : "Config"
[    6.503238] 0x000003700000-0x000006900000 : "firmware_2"
[    6.515206] 0x000006900000-0x000006a00000 : "Config_2"
[    6.526494] 0x000006a00000-0x000006b00000 : "persist"
[    6.537579] 0x000006b00000-0x000006c00000 : "idmkey"
[    6.548565] 0x000006c00000-0x000007f80000 : "Backup"
[    6.559662] [mtk_nand] probe successfully!
[    6.568573] Signature matched and data read!
[    6.577055] load_fact_bbt success 1023
[    6.585272] libphy: Fixed MDIO Bus: probed
[    6.660961] libphy: mdio: probed
[    8.078318] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    8.090893] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 19
[    8.109982] NET: Registered protocol family 10
[    8.120205] Segment Routing with IPv6
[    8.127564] NET: Registered protocol family 17
[    8.136513] 8021q: 802.1Q VLAN Support v1.8
[    8.147780] UBI error: no valid UBI magic found inside mtd5
[    8.158943] hctosys: unable to open rtc device (rtc0)
[    8.183210] Freeing unused kernel memory: 3860K
[    8.192259] This architecture does not have kernel memory protection.
[    8.216181] init: Console is alive
[    8.223265] init: - watchdog -
[    8.241019] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    8.258104] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    8.288695] init: - preinit -
[    8.453778] mtk_soc_eth 1e100000.ethernet: PPE started
[    8.476226] random: procd: uninitialized urandom read (4 bytes read)
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    9.336037] mtk_soc_eth 1e100000.ethernet eth0: port 0 link up
[    9.713304] mtk_soc_eth 1e100000.ethernet eth0: port 2 link up
[   11.591627] mtk_soc_eth 1e100000.ethernet: 0x100 = 0x6060000c, 0x10c = 0x80818
[   11.613014] procd: - early -
[   11.618909] procd: - watchdog -
[   12.248572] procd: - watchdog -
[   12.255131] procd: - ubus -
[   12.265342] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.318959] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.331987] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.345465] procd: - init -
Please press Enter to activate this console.
[   12.505945] kmodloader: loading kernel modules from /etc/modules.d/*
[   12.524713] nat46: module (version 683fbd2b765506332a1af141545652bf58f03166) loaded.
[   12.544708] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   12.565010] ip_tables: (C) 2000-2006 Netfilter Core Team
[   12.585937] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[   12.629244] Netfilter messages via NETLINK v0.30.
[   12.658667] xt_time: kernel timezone is -0000
[   12.674768] ctnetlink v0.93: registering with nfnetlink.
[   12.687983] PPP generic driver version 2.4.2
[   12.697955] NET: Registered protocol family 24
[   12.710410] kmodloader: done loading kernel modules from /etc/modules.d/*
[   13.802323] urandom_read: 5 callbacks suppressed
[   13.802335] random: jshn: uninitialized urandom read (4 bytes read)
[   29.948714] mtk_soc_eth 1e100000.ethernet: PPE started
[   29.966406] br-lan: port 1(eth0.1) entered blocking state
[   29.977314] br-lan: port 1(eth0.1) entered disabled state
[   29.988828] device eth0.1 entered promiscuous mode
[   29.998458] device eth0 entered promiscuous mode
[   30.011542] br-lan: port 1(eth0.1) entered blocking state
[   30.022355] br-lan: port 1(eth0.1) entered forwarding state
[   30.034064] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   30.469127] random: crng init done
[   30.969428] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready



BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+9902-961771ff30
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# sysupgrade https://taiha.net/jenkins/job/OpenWrt-master-IODATA-W
N-DX1167R/lastSuccessfulBuild/artifact/bin/targets/ramips/mt7621/openwrt-ramips-
mt7621-iodata_wn-dx1167r-squashfs-sysupgrade.bin
--2019-04-20 02:06:11--  https://taiha.net/jenkins/job/OpenWrt-master-IODATA-WN-DX1167R/lastSuccessfulBuild/artifact/bin/targets/ramips/mt7621/openwrt-ramips-mt7621-iodata_wn-dx1167r-squashfs-sysupgrade.bin
Resolving taiha.net... 240b:12:500:65f0:c822:64a3:7e11:4961, 49.129.167.30
Connecting to taiha.net|240b:12:500:65f0:c822:64a3:7e11:4961|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 5888778 (5.6M) [application/octet-stream]
Saving to: '/tmp/sysupgrade.img'

/tmp/sysupgrade.img 100%[===================>]   5.62M  3.13MB/s    in 1.8s    

2019-04-20 02:06:13 (3.13 MB/s) - '/tmp/sysupgrade.img' saved [5888778/5888778]

Cannot save config while running from ramdisk.
Commencing upgrade. Closing all shell sessions.
Watchdog handover: fd=3
- watchdog -
killall: telnetd: no process killed
Sending TERM to remaining processes ... netifd odhcpd uhttpd nlbwmon sh sleep ntpd vnstatd dnsmasq ubusd logd rpcd 
Sending KILL to remaining processes ... 
Performing system upgrade...
current: bootnum => 1, debugflag => 0
### enable debug ###
Unlocking kernel ...

Writing from  to kernel ...     
[   64.720676] ubi0: attaching mtd5
[   64.965168] ubi0: scanning is finished
[   64.972696] ubi0 error: ubi_read_volume_table: the layout volume was not found
[   64.987194] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd5, error -22
ubiattach: error!: cannot attach mtd5
           error 22 (Invalid argument)
ubiformat: mtd5 (nand), size 48234496 bytes (46.0 MiB), 368 eraseblocks of 131072 bytes (128.0 KiB), min. I/O size 2048 bytes
libscan: scanning eraseblock 367 -- 100 % complete  
ubiformat: 327 eraseblocks are supposedly empty
ubiformat: warning!: 41 of 368 eraseblocks contain non-UBI data
ubiformat: warning!: only 0 of 368 eraseblocks have valid erase counter
ubiformat: erase counter 0 will be used for all eraseblocks
ubiformat: note, arbitrary erase counter value may be specified using -e option
ubiformat: use erase counter 0 for all eraseblocks
ubiformat: formatting eraseblock 317 -- 86 % complet[   71.452084] ubi0: attaching mtd5
ubiformat: f[   71.889484] ubi0: scanning is finished  
ubiformat: formatting eraseblock 363 -- 98 % complet[   71.911907] ubi0: attached mtd5 (name "ubi", size 46 MiB)
ubiformat: f[   71.924433] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ormatting eraseb[   71.940868] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
lock 364 -- 99 %[   71.957102] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubif[   71.973709] ubi0: good PEBs: 368, bad PEBs: 0, corrupted PEBs: 0
ormat: formattin[   71.988402] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 128
g eraseblock 365[   72.005520] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1110684811
 -- 99 % complet[   72.026438] ubi0: available PEBs: 344, total reserved PEBs: 24, PEBs reserved for bad PEB handling: 20
ubiformat: f[   72.047725] ubi0: background thread "ubi_bgt0d" started, PID 2207
ubiformat: formatting eraseblock 367 -- 100 % complete  
UBI device number 0, total 368 LEBs (46727168 bytes, 44.5 MiB), available 344 LEBs (43679744 bytes, 41.6 MiB), LEB size 126976 bytes (124.0 KiB)
Volume ID 0, size 32 LEBs (4063232 bytes, 3.8 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs", alignment 1
Set volume size to 39616512
Volume ID 1, size 312 LEBs (39616512 bytes, 37.7 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs_data", alignment 1
sysupgrade successful
umount: can't unmount /dev: Resource busy
umount: can't unmount /tmp: Resource busy
umount: can't unmount /: Invalid argument
[   74.078801] reboot: Restarting system


U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..Hit ESC key to stop autoboot: 1

Checking image 1...
   Image Name:   MIPS OpenWrt Linux-4.14.
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1905158 Bytes =  1.8 MB
   Load Address: 80001000
   Entry Point:  80001000
..............................   Verifying Checksum ... ## Booting image at bc400000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...

[    0.000000] Linux version 4.14.111 (musashino205@Taiha.Net) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+9901-29b3122f32)) #0 SMP Sat Apr 20 01:26:47 2019
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is I-O DATA WN-DX1167R
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x90/0x4a4 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu @81110000 s26192 r8192 d22960 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00001000
[    0.000000] Readback ErrCtl register=00001000
[    0.000000] Memory: 123412K/131072K available (4497K kernel code, 230K rwdata, 1000K rodata, 212K init, 248K bss, 7660K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] CPU Clock: 880MHz
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.015488] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.087817] pid_max: default: 32768 minimum: 301
[    0.097126] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.110146] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.125868] Hierarchical SRCU implementation.
[    0.135326] smp: Bringing up secondary CPUs ...
[    0.157183] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.157192] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.157204] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.157338] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.204704] Synchronize counters for CPU 1: done.
[    0.280943] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.280951] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.280958] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.281034] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.325533] Synchronize counters for CPU 2: done.
[    0.398017] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.398025] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.398033] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.398119] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.445102] Synchronize counters for CPU 3: done.
[    0.504705] smp: Brought up 1 node, 4 CPUs
[    0.516488] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.535958] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.548383] pinctrl core: initialized pinctrl subsystem
[    0.559935] NET: Registered protocol family 16
[    0.578196] pull PCIe RST: RALINK_RSTCTRL = 4000000
[    0.888183] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.898248] ***** Xtal 40MHz *****
[    0.904981] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.915184] Port 0 N_FTS = 1b102800
[    0.922086] Port 1 N_FTS = 1b105000
[    0.929010] Port 2 N_FTS = 1b102800
[    2.087654] PCIE0 no card, disable it(RST&CLK)
[    2.096341] PCIE2 no card, disable it(RST&CLK)
[    2.105144]  -> 20107f2
[    2.109994] PCIE1 enabled
[    2.115173] PCI host bridge /pcie@1e140000 ranges:
[    2.124701]  MEM 0x0000000060000000..0x000000006fffffff
[    2.135057]   IO 0x000000001e160000..0x000000001e16ffff
[    2.145425] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    2.167700] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.178946] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.190116] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.202405] PCI host bridge to bus 0000:00
[    2.210422] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    2.224095] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    2.235823] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    2.249312] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    2.266052] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.279087] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.292902] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.306375] pci 0000:00:00.0: BAR 1: assigned [mem 0x60100000-0x6010ffff]
[    2.319870] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    2.334380] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.344196] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.358915] clocksource: Switched to clocksource GIC
[    2.370139] NET: Registered protocol family 2
[    2.379360] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    2.393098] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    2.405705] TCP: Hash tables configured (established 1024 bind 1024)
[    2.418430] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.429937] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.442587] NET: Registered protocol family 1
[    2.688867] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    2.700185] Crashlog allocated RAM at address 0x3f00000
[    2.710679] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[    2.729381] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    2.740855] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    2.763374] random: fast init done
[    2.770320] io scheduler noop registered
[    2.777955] io scheduler deadline registered (default)
[    2.789063] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    2.802824] console [ttyS0] disabled
[    2.809877] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A
[    2.827814] console [ttyS0] enabled
[    2.827814] console [ttyS0] enabled
[    2.841603] bootconsole [early0] disabled
[    2.841603] bootconsole [early0] disabled
[    2.858084] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    2.870858] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    2.884894] Enable NFI Clock
[    2.890641] # MTK NAND # : Use HW ECC
[    2.897930] Device found in MTK table, ID: 1f1, EXT_ID: 801d01
[    2.909547] Support this Device in MTK table! 1f1 
[    2.919271] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    2.932140] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xf1
[    2.944790] nand: AMD/Spansion NAND 128MiB 3,3V 8-bit
[    2.954847] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    2.969935] Scanning device for bad blocks
[    3.259828] 12 fixed-partitions partitions found on MTD device MT7621-NAND
[    3.273515] Creating 12 MTD partitions on "MT7621-NAND":
[    3.284101] 0x000000000000-0x000000100000 : "Bootloader"
[    3.295589] 0x000000100000-0x000000200000 : "u-boot-env"
[    3.307024] 0x000000200000-0x000000300000 : "Factory"
[    3.317974] 0x000000300000-0x000000400000 : "SecondBoot"
[    3.329475] 0x000000400000-0x000000800000 : "kernel"
[    3.340266] 0x000000800000-0x000003600000 : "ubi"
[    3.350874] 0x000003600000-0x000003700000 : "Config"
[    3.361650] 0x000003700000-0x000006900000 : "firmware_2"
[    3.373482] 0x000006900000-0x000006a00000 : "Config_2"
[    3.384593] 0x000006a00000-0x000006b00000 : "persist"
[    3.395534] 0x000006b00000-0x000006c00000 : "idmkey"
[    3.406328] 0x000006c00000-0x000007f80000 : "Backup"
[    3.417265] [mtk_nand] probe successfully!
[    3.426176] Signature matched and data read!
[    3.434679] load_fact_bbt success 1023
[    3.442735] libphy: Fixed MDIO Bus: probed
[    3.521466] libphy: mdio: probed
[    4.927550] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    4.940123] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 19
[    4.959274] NET: Registered protocol family 10
[    4.969504] Segment Routing with IPv6
[    4.976861] NET: Registered protocol family 17
[    4.985779] 8021q: 802.1Q VLAN Support v1.8
[    4.996931] UBI: auto-attach mtd5
[    5.003577] ubi0: attaching mtd5
[    5.437581] ubi0: scanning is finished
[    5.460232] ubi0: attached mtd5 (name "ubi", size 46 MiB)
[    5.470997] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    5.484679] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    5.498185] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    5.512043] ubi0: good PEBs: 368, bad PEBs: 0, corrupted PEBs: 0
[    5.523993] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[    5.538366] ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 1110684811
[    5.556542] ubi0: available PEBs: 0, total reserved PEBs: 368, PEBs reserved for bad PEB handling: 20
[    5.574919] ubi0: background thread "ubi_bgt0d" started, PID 372
[    5.576897] block ubiblock0_0: created from ubi0:0(rootfs)
[    5.597830] ubiblock: device ubiblock0_0 (rootfs) set to be root filesystem
[    5.611699] hctosys: unable to open rtc device (rtc0)
[    5.628946] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    5.643645] Freeing unused kernel memory: 212K
[    5.652531] This architecture does not have kernel memory protection.
[    6.122667] init: Console is alive
[    6.129708] init: - watchdog -
[    6.168650] mtk_soc_eth 1e100000.ethernet eth0: port 0 link up
[    6.364148] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    6.492490] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    6.509223] init: - preinit -
[    6.514134] mtk_soc_eth 1e100000.ethernet eth0: port 2 link up
[    7.329817] mtk_soc_eth 1e100000.ethernet: PPE started
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to [    7.407135] random: procd: uninitialized urandom read (4 bytes read)
select the debug level
[   10.523692] UBIFS (ubi0:1): default file-system created
[   10.535559] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 448
[   10.648588] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data"
[   10.664199] UBIFS (ubi0:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[   10.683937] UBIFS (ubi0:1): FS size: 38346752 bytes (36 MiB, 302 LEBs), journal size 1904640 bytes (1 MiB, 15 LEBs)
[   10.704711] UBIFS (ubi0:1): reserved for root: 1811211 bytes (1768 KiB)
[   10.717882] UBIFS (ubi0:1): media format: w4/r0 (latest is w5/r0), UUID B62DEE20-04B6-4BB2-B22F-19A90A3DC706, small LPT model
[   10.743239] mount_root: overlay filesystem has not been fully initialized yet
[   10.757879] mount_root: switching to ubifs overlay
[   10.785078] urandom-seed: Seed file not found (/etc/urandom.seed)
[   10.862493] mtk_soc_eth 1e100000.ethernet: 0x100 = 0x6060000c, 0x10c = 0x80818
[   10.884326] procd: - early -
[   10.890184] procd: - watchdog -
[   11.509052] procd: - watchdog -
[   11.515610] procd: - ubus -
[   11.599988] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.684382] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.697524] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.711058] procd: - init -
Please press Enter to activate this console.
[   12.099025] kmodloader: loading kernel modules from /etc/modules.d/*
[   12.187056] nat46: module (version 683fbd2b765506332a1af141545652bf58f03166) loaded.
[   12.206932] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   12.225448] ip_tables: (C) 2000-2006 Netfilter Core Team
[   12.243844] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[   12.289461] Netfilter messages via NETLINK v0.30.
[   12.319386] xt_time: kernel timezone is -0000
[   12.336616] ctnetlink v0.93: registering with nfnetlink.
[   12.350023] PPP generic driver version 2.4.2
[   12.360073] NET: Registered protocol family 24
[   12.371598] kmodloader: done loading kernel modules from /etc/modules.d/*
[   13.633810] urandom_read: 5 callbacks suppressed
[   13.633822] random: jshn: uninitialized urandom read (4 bytes read)
[   38.772592] mtk_soc_eth 1e100000.ethernet: PPE started
[   38.787870] br-lan: port 1(eth0.1) entered blocking state
[   38.798662] br-lan: port 1(eth0.1) entered disabled state
[   38.810224] device eth0.1 entered promiscuous mode
[   38.819834] device eth0 entered promiscuous mode
[   38.832645] br-lan: port 1(eth0.1) entered blocking state
[   38.843498] br-lan: port 1(eth0.1) entered forwarding state
[   38.855149] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   39.219880] random: crng init done
[   39.849578] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready



BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+9902-961771ff30
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# 

WN-DX1167R debugflagメモ

システムのデバッグモードを設定する debugflag のメモ。
sys debugflag による設定前後で、”Factory” パーティション内の 0xFE75 の値が変化する。

  • sys debugflag 0 -> 0xFE75: 0x00(debug無効)
  • sys debugflag 1 -> 0xFE75: 0x01(debug有効)
root@WN-DX1167R:/tmp/mtd# sys debugflag
DebugFlag: 0
root@WN-DX1167R:/tmp/mtd# hexdump -n $((0x100)) -v -C -s $((0xfe00)) /dev/mtd3
0000fe00  4d 69 74 72 61 73 74 61  72 00 54 65 63 68 6e 6f  |Mitrastar.Techno|
0000fe10  6c 6f 67 79 20 43 6f 72  70 2e 00 00 00 00 00 00  |logy Corp.......|
0000fe20  4d 69 43 41 50 2d 33 33  32 33 43 00 00 00 00 00  |MiCAP-3323C.....|
0000fe30  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fe40  31 39 35 36 30 35 32 37  00 00 00 00 00 00 00 00  |19560527........|
0000fe50  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fe60  53 30 39 30 59 30 30 30  30 30 30 30 30 00 00 13  |S090Y00000000...|
0000fe70  49 55 aa 00 04 00 ff ff  5a 59 ff ff 00 00 00 00  |IU......ZY......|
0000fe80  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fe90  00 00 00 00 00 00 00 00  00 01 1c 03 08 06 20 18  |.............. .|
0000fea0  14 37 44 4d 69 43 41 50  2d 33 33 32 33 43 00 00  |.7DMiCAP-3323C..|
0000feb0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fec0  00 00 00 41 30 42 00 00  00 00 00 00 00 00 00 00  |...A0B..........|
0000fed0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fee0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fef0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000ff00
root@WN-DX1167R:/tmp/mtd# sys debugflag 1
PASS
root@WN-DX1167R:/tmp/mtd# hexdump -n $((0x100)) -v -C -s $((0xfe00)) /dev/mtd3
0000fe00  4d 69 74 72 61 73 74 61  72 00 54 65 63 68 6e 6f  |Mitrastar.Techno|
0000fe10  6c 6f 67 79 20 43 6f 72  70 2e 00 00 00 00 00 00  |logy Corp.......|
0000fe20  4d 69 43 41 50 2d 33 33  32 33 43 00 00 00 00 00  |MiCAP-3323C.....|
0000fe30  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fe40  31 39 35 36 30 35 32 37  00 00 00 00 00 00 00 00  |19560527........|
0000fe50  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fe60  53 30 39 30 59 30 30 30  30 30 30 30 30 00 00 13  |S090Y00000000...|
0000fe70  49 55 aa 00 04 01 ff ff  5a 59 ff ff 00 00 00 00  |IU......ZY......|
0000fe80  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fe90  00 00 00 00 00 00 00 00  00 01 1c 03 08 06 20 18  |.............. .|
0000fea0  14 37 44 4d 69 43 41 50  2d 33 33 32 33 43 00 00  |.7DMiCAP-3323C..|
0000feb0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fec0  00 00 00 41 30 42 00 00  00 00 00 00 00 00 00 00  |...A0B..........|
0000fed0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fee0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fef0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000ff00

WN-DX1167R stock -> OpenWrt(仮)

とりあえずmkimageの改造は無しで、手元で必要なuImageの改造を加えて投げ込んだのでメモ。
Z-Loaderのブート自体にはuImageのMagicは標準の 27051956 で、uImageのイメージ名は適当なもので問題ないが、メーカーファームのWebUIから投入する際はこの2つともチェックされるのか、どちらとも変更しなければイメージのチェックをパスできなかった。
uImage参考: https://mao.5ch.net/test/read.cgi/network/1520576652/672

なお、WebUIから投入した場合、ブート中のイメージとは別のもう一方のOSイメージ用パーティションに書き込まれ、ブートパーティションの指定をそちらに変更の上リブートされて書き込まれたパーティションからブートしていた。
このブートパーティションの指定は以下の様にして書き込める。書き込み先のパーティションは、/proc/mtdを参照して “persist” パーティションのmtdblockを確認しておくこと。echo内の数字は、1つ目のOSイメージを指定する場合 “01” または “1” を、2番目を指定する場合は “02” または “2” にする。

echo -ne "\x01" | dd of=/dev/mtdblock8 bs=1 count=1 seek=4 conv=notrunc

また、上記の通りファームウェアが書き込まれブートに使用されるパーティションが固定ではないためinitramfsイメージを使用したfactoryになる。投入した際に2番目のOSイメージパーティションに書き込まれそちらからブートした場合、非initramfsなファームをsysupgradeで書き込む前に1番目のOSイメージからブートするよう指定しておく必要がある。

[  942.544000] led=9, on=1, off=1, blinks,=1, reset=0, time=4000 low_trigger=0
Unlocking firmware_2 ...

Writing from /tmp/fw.bin to firmware_2 ...     
Header checksum OK.
Data checksum OK
Unlocking persist ...
### Switch to bank 2 on next boot! ###
procd: - shutdown -
[  948.224000] br-lan: port 4(ra0) entered disabled state
[  948.232000] br-lan: port 3(rai0) entered disabled state
[  948.244000] br-lan: port 2(eth1) entered disabled state
[  948.256000] br-lan: port 1(eth0) entered disabled state
[  948.264000] device eth0 left promiscuous mode
[  948.276000] br-lan: port 1(eth0) entered disabled state
[  948.284000] ra2880stop()...Done
[  948.292000] eth1: ===> VirtualIF_close
[  948.300000] Free TX/RX Ring Memory!
[  948.308000] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[  948.320000] device eth1 left promiscuous mode
[  948.332000] br-lan: port 2(eth1) entered disabled state
[  948.340000] eth1: ===> VirtualIF_close
[  948.348000] device ra0 left promiscuous mode
[  948.360000] br-lan: port 4(ra0) entered disabled state
[  948.368000] device rai0 left promiscuous mode
[  948.376000] br-lan: port 3(rai0) entered disabled state
[  949.700000] WifiSysClose(), wdev idx = 0
[  949.712000] WifiSysGetBssInfoState(): BssInfoIdx 0 not found!!!
[  949.724000] WifiSysUpdateBssInfoState(): BssInfoIdx 0 not found!!!
### ap ###
[  951.176000] Device Instance
[  951.184000]  WDEV 00:
                Name:rai0
[  951.188000]          Wdev(list) Idx:0
[  951.196000]           Idx:8
[  951.200000]  WDEV 01:
                Name:rai1
[  951.208000]          Wdev(list) Idx:1
[  951.212000]           Idx:9
[  951.216000]  WDEV 02:
                Name:rai2
[  951.224000]          Wdev(list) Idx:2
[  951.228000]           Idx:10
[  951.236000]  WDEV 03:
                Name:rai3
[  951.240000]          Wdev(list) Idx:3
[  951.248000]           Idx:11
[  951.252000]  WDEV 04:
                Name:ra0
[  951.260000]          Wdev(list) Idx:4
[  951.264000]           Idx:12
[  951.268000]  WDEV 05:
                Name:ra1
[  951.276000]          Wdev(list) Idx:5
[  951.284000]           Idx:13
[  951.288000]  WDEV 06:
                Name:ra2
[  951.292000]          Wdev(list) Idx:6
[  951.300000]           Idx:14
[  951.304000]  WDEV 07:
                Name:ra3
[  951.312000]          Wdev(list) Idx:7
[  951.316000]           Idx:15
[  951.320000]  WDEV 08:
                Name:apclii0
[  951.328000]          Wdev(list) Idx:8
[  951.336000]           Idx:16
[  951.340000]  WDEV 09:
                Name:apcli0
[  951.348000]          Wdev(list) Idx:9
[  951.352000]           Idx:17
[  951.356000]  WDEV 10:
[  951.360000]  WDEV 11:
[  951.368000]  WDEV 12:
[  951.372000]  WDEV 13:
[  951.376000]  WDEV 14:
[  951.380000]  WDEV 15:
[  951.384000]  WDEV 16:
[  951.388000]  WDEV 17:
[  951.396000] WifiSysClose(), wdev idx = 4
[  951.396000] WifiSysGetBssInfoState(): BssInfoIdx 1 not found!!!
[  951.396000] WifiSysUpdateBssInfoState(): BssInfoIdx 1 not found!!!
[  951.432000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[  951.444000] WifiSysClose(), wdev idx = 0
[  951.452000] WifiSysClose(), wdev idx = 1
[  951.460000] WifiSysClose(), wdev idx = 2
[  951.464000] WifiSysClose(), wdev idx = 3
[  951.500000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[  951.512000] WifiSysClose(), wdev idx = 4
[  951.520000] WifiSysClose(), wdev idx = 5
[  951.528000] WifiSysClose(), wdev idx = 6
[  951.536000] WifiSysClose(), wdev idx = 7
[  951.544000] kill LoopBackTxTask task failed!
[  951.560000] AndesRestartCheck: Current TOP_MISC2(0x7)
[  951.612000] CmdReStartDLRsp: Status Success!, Status(0)
[  951.624000] EventExtEventHandler: Unknown Ext Event(6f)
[  951.632000] AndesRestartCheck:  TOP_MISC2(1)
[  951.644000] RT28xxPciAsicRadioOff(): Not support for HIF_MT yet!
[  951.656000] RTMPDrvClose call RT28xxPciAsicRadioOff fail !!
[  951.664000] tx_kickout_fail_count = 0
[  951.672000] tx_timeout_fail_count = 0
[  951.680000] rx_receive_fail_count = 0
[  951.688000] alloc_cmd_msg = 3185
[  951.692000] free_cmd_msg = 3185
[  951.700000] cut_through_token_list_destroy(): 8632e888,8632e888
[  951.716000] cut_through_token_list_destroy(): 8632e898,8632e898
[  951.732000] FwOwn()::Set Fw Own
[  951.740000] RTMP_AllTimerListRelease: Size=0
[  951.748000] FwOwn()::Return since already in Fw Own...
[  951.760000] <---HwCtrlThread
procd: - reboot [  951.896000] Stopped WatchDog Timer.
-
[  951.908000] Restarting system.


U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..Hit ESC key to stop autoboot: 1

Checking image 2...
   Image Name:   3.10(XIK.1)b7
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    5642895 Bytes =  5.4 MB
   Load Address: 80001000
   Entry Point:  80001000
.......................................................................................   Verifying Combo Checksum ... .......................................................................................## Booting image at bf700000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...

[    0.000000] Linux version 4.14.111 (musashino205@Taiha.Net) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+9824-b80243858e)) #0 SMP Wed Apr 17 15:36:46 2019
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is I-O DATA WN-DX1167R
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x90/0x4a4 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu @81110000 s26192 r8192 d22960 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00001000
[    0.000000] Readback ErrCtl register=00001000
[    0.000000] Memory: 119764K/131072K available (4497K kernel code, 230K rwdata, 1000K rodata, 3860K init, 248K bss, 11308K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] CPU Clock: 880MHz
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.015488] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.087817] pid_max: default: 32768 minimum: 301
[    0.097128] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.110148] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.125865] Hierarchical SRCU implementation.
[    0.135322] smp: Bringing up secondary CPUs ...
[    0.144860] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.144869] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.144880] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.145014] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.204698] Synchronize counters for CPU 1: done.
[    0.268616] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.268624] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.268631] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.268708] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.325524] Synchronize counters for CPU 2: done.
[    0.385686] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.385694] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.385702] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.385788] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.445092] Synchronize counters for CPU 3: done.
[    0.504696] smp: Brought up 1 node, 4 CPUs
[    0.516465] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.535934] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.548360] pinctrl core: initialized pinctrl subsystem
[    0.559927] NET: Registered protocol family 16
[    0.577592] pull PCIe RST: RALINK_RSTCTRL = 4000000
[    0.887578] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.897642] ***** Xtal 40MHz *****
[    0.904375] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.914578] Port 0 N_FTS = 1b102800
[    0.921480] Port 1 N_FTS = 1b105000
[    0.928405] Port 2 N_FTS = 1b102800
[    2.087057] PCIE0 no card, disable it(RST&CLK)
[    2.095745] PCIE2 no card, disable it(RST&CLK)
[    2.104548]  -> 20107f2
[    2.109398] PCIE1 enabled
[    2.114577] PCI host bridge /pcie@1e140000 ranges:
[    2.124105]  MEM 0x0000000060000000..0x000000006fffffff
[    2.134461]   IO 0x000000001e160000..0x000000001e16ffff
[    2.144829] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    2.167715] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.179008] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.190256] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.202750] PCI host bridge to bus 0000:00
[    2.210765] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    2.224420] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    2.236168] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    2.249643] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    2.266495] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.279517] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.293336] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.306817] pci 0000:00:00.0: BAR 1: assigned [mem 0x60100000-0x6010ffff]
[    2.320308] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    2.334821] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.344646] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.359432] clocksource: Switched to clocksource GIC
[    2.370675] NET: Registered protocol family 2
[    2.379985] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    2.393721] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    2.406321] TCP: Hash tables configured (established 1024 bind 1024)
[    2.419053] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.430556] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.443200] NET: Registered protocol family 1
[    5.829397] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    5.840886] Crashlog allocated RAM at address 0x3f00000
[    5.851393] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[    5.871370] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    5.882853] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    5.903955] random: fast init done
[    5.912889] io scheduler noop registered
[    5.920594] io scheduler deadline registered (default)
[    5.931775] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    5.945639] console [ttyS0] disabled
[    5.952691] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A
[    5.970626] console [ttyS0] enabled
[    5.970626] console [ttyS0] enabled
[    5.984418] bootconsole [early0] disabled
[    5.984418] bootconsole [early0] disabled
[    6.000996] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    6.013896] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    6.027937] Enable NFI Clock
[    6.033683] # MTK NAND # : Use HW ECC
[    6.040994] Device found in MTK table, ID: 1f1, EXT_ID: 801d01
[    6.052607] Support this Device in MTK table! 1f1 
[    6.062329] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    6.075199] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xf1
[    6.087848] nand: AMD/Spansion NAND 128MiB 3,3V 8-bit
[    6.097905] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    6.112993] Scanning device for bad blocks
[    6.402781] 11 fixed-partitions partitions found on MTD device MT7621-NAND
[    6.416469] Creating 11 MTD partitions on "MT7621-NAND":
[    6.427064] 0x000000000000-0x000000100000 : "Bootloader"
[    6.438719] 0x000000100000-0x000000200000 : "u-boot-env"
[    6.450391] 0x000000200000-0x000000300000 : "Factory"
[    6.461506] 0x000000300000-0x000000400000 : "SecondBoot"
[    6.473133] 0x000000400000-0x000003600000 : "firmware"
[    6.484786] 0x000003600000-0x000003700000 : "Config"
[    6.495732] 0x000003700000-0x000006900000 : "firmware_2"
[    6.507770] 0x000006900000-0x000006a00000 : "Config_2"
[    6.519064] 0x000006a00000-0x000006b00000 : "persist"
[    6.530220] 0x000006b00000-0x000006c00000 : "idmkey"
[    6.541165] 0x000006c00000-0x000007f80000 : "Backup"
[    6.552232] [mtk_nand] probe successfully!
[    6.561139] Signature matched and data read!
[    6.569641] load_fact_bbt success 1023
[    6.577863] libphy: Fixed MDIO Bus: probed
[    6.652008] libphy: mdio: probed
[    8.069445] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    8.082014] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 19
[    8.100784] NET: Registered protocol family 10
[    8.110937] Segment Routing with IPv6
[    8.118291] NET: Registered protocol family 17
[    8.127200] 8021q: 802.1Q VLAN Support v1.8
[    8.137882] hctosys: unable to open rtc device (rtc0)
[    8.162308] Freeing unused kernel memory: 3860K
[    8.171369] This architecture does not have kernel memory protection.
[    8.195375] init: Console is alive
[    8.202430] init: - watchdog -
[    8.220365] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    8.237385] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    8.259728] init: - preinit -
[    8.426327] mtk_soc_eth 1e100000.ethernet: PPE started
[    8.448840] random: procd: uninitialized urandom read (4 bytes read)
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    9.299905] mtk_soc_eth 1e100000.ethernet eth0: port 0 link up
[    9.668050] mtk_soc_eth 1e100000.ethernet eth0: port 2 link up
[   11.563105] mtk_soc_eth 1e100000.ethernet: 0x100 = 0x6060000c, 0x10c = 0x80818
[   11.584512] procd: - early -
[   11.590391] procd: - watchdog -
[   12.219565] procd: - watchdog -
[   12.226120] procd: - ubus -
[   12.236341] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.289976] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.303033] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.316534] procd: - init -
Please press Enter to activate this console.
[   12.475962] kmodloader: loading kernel modules from /etc/modules.d/*
[   12.494539] nat46: module (version 683fbd2b765506332a1af141545652bf58f03166) loaded.
[   12.514229] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   12.533949] ip_tables: (C) 2000-2006 Netfilter Core Team
[   12.556171] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[   12.600620] Netfilter messages via NETLINK v0.30.
[   12.632397] xt_time: kernel timezone is -0000
[   12.648384] ctnetlink v0.93: registering with nfnetlink.
[   12.661713] PPP generic driver version 2.4.2
[   12.671586] NET: Registered protocol family 24
[   12.684076] kmodloader: done loading kernel modules from /etc/modules.d/*
[   13.773293] urandom_read: 5 callbacks suppressed
[   13.773305] random: jshn: uninitialized urandom read (4 bytes read)
[   52.550164] mtk_soc_eth 1e100000.ethernet: PPE started
[   52.569852] br-lan: port 1(eth0.1) entered blocking state
[   52.580768] br-lan: port 1(eth0.1) entered disabled state
[   52.592245] device eth0.1 entered promiscuous mode
[   52.601899] device eth0 entered promiscuous mode
[   52.615251] br-lan: port 1(eth0.1) entered blocking state
[   52.626114] br-lan: port 1(eth0.1) entered forwarding state
[   52.637820] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   53.045858] random: crng init done
[   53.550050] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready



BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+9891-163a8830b9
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# 

WN-DX1167R ファームウェア書き込みメモ (Z-Loader)

Z-Loader経由でOpenWrtファームウェアを書き込んだメモ。5chユーザーのWN-AX2033GRにおける先行事例を参考にした。
ハイライトはキー入力個所

U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..Hit ESC key to stop autoboot: 1
ZLB> 
ATGO              boot up the whole system
ATGU              go back to U-Boot command line
ATUR              upgrade ras image by console
ATUF              upgrade factory by console
ATNR    x,y       upgrade image by TFTP (x=type[1:ras, 2:bootloader, 3:config, 4:romd 6:factory], y=filename)
ATUX              upgrade bootloader
ATBT    x         block0 write enable (1=enable, 0=disable)
ATEN    x,(y)     set BootExtension Debug Flag (y=password)
ATSE    x         show the seed of password generator
ATWZ    a,(b,c,d) write MAC , Country code, EngDbgFlag, MAC Quantity to FLASH
ATSH              dump manufacturer related data in FLASH
ATBU              dump manufacturer related data in working buffer
ATCB              copy FLASH MRD to working buffer
ATSN    x         set serial number to flash
ATSB              save working buffer to FLASH
ATQY    x         set MAC Quantity to working buffer
ATFL    x         set EngDebugFlag to working buffer
ATCO    x         set country code to working buffer
ATSR              reset
ATRT    (x,y,z,u) RAM read/write test (x=level, y=start addr, z=end addr, u=interations)
ATRM              restore default MRD
ATBR              reset to default Romfile
ATER              erase ROM-D data
ATHV    x         set hardware version to flash
ATGP    x,y       led control
ZLB> ATNR 1,openwrt-ramips-mt7621-iodata_wn-dx1167r-squashfs-tftp-ras.bin

 NetLoop,call eth_halt ! 

 NetLoop,call eth_init ! 
Trying Eth0 (10/100-M)

 Waitting for RX_DMA_BUSY status Start... done


 ETH_STATE_ACTIVE!! 
Using Eth0 (10/100-M) device
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'openwrt-ramips-mt7621-iodata_wn-dx1167r-squashfs-tftp-ras.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: checksum bad
checksum bad
checksum bad
checksum bad
Got ARP REPLY, set server/gtwy eth addr (5c:9a:d8:e6:3f:b3)
Got it
#################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ####################Got ARP REQUEST, return our IP
#############################################
         #################################################################
         #################################################################
         #################################################################
         ##############################################
done
Bytes transferred = 6553600 (640000 hex)
LoadAddr=84000000 NetBootFileXferSize= 00640000
receive langth = 6553600

!!Upgrade File @84000000, length 6553600, type 1, offset 0x400000.  !!
ranand_erase: start:400000, len:20000 
..ranand_erase: start:420000, len:20000 
..ranand_erase: start:440000, len:20000 
..ranand_erase: start:460000, len:20000 
..ranand_erase: start:480000, len:20000 
..ranand_erase: start:4a0000, len:20000 
..ranand_erase: start:4c0000, len:20000 
..ranand_erase: start:4e0000, len:20000 
..ranand_erase: start:500000, len:20000 
..ranand_erase: start:520000, len:20000 
..ranand_erase: start:540000, len:20000 
..ranand_erase: start:560000, len:20000 
..ranand_erase: start:580000, len:20000 
..ranand_erase: start:5a0000, len:20000 
..ranand_erase: start:5c0000, len:20000 
..ranand_erase: start:5e0000, len:20000 
..ranand_erase: start:600000, len:20000 
..ranand_erase: start:620000, len:20000 
..ranand_erase: start:640000, len:20000 
..ranand_erase: start:660000, len:20000 
..ranand_erase: start:680000, len:20000 
..ranand_erase: start:6a0000, len:20000 
..ranand_erase: start:6c0000, len:20000 
..ranand_erase: start:6e0000, len:20000 
..ranand_erase: start:700000, len:20000 
..ranand_erase: start:720000, len:20000 
..ranand_erase: start:740000, len:20000 
..ranand_erase: start:760000, len:20000 
..ranand_erase: start:780000, len:20000 
..ranand_erase: start:7a0000, len:20000 
..ranand_erase: start:7c0000, len:20000 
..ranand_erase: start:7e0000, len:20000 
..ranand_erase: start:800000, len:20000 
..ranand_erase: start:820000, len:20000 
..ranand_erase: start:840000, len:20000 
..ranand_erase: start:860000, len:20000 
..ranand_erase: start:880000, len:20000 
..ranand_erase: start:8a0000, len:20000 
..ranand_erase: start:8c0000, len:20000 
..ranand_erase: start:8e0000, len:20000 
..ranand_erase: start:900000, len:20000 
..ranand_erase: start:920000, len:20000 
..ranand_erase: start:940000, len:20000 
..ranand_erase: start:960000, len:20000 
..ranand_erase: start:980000, len:20000 
..ranand_erase: start:9a0000, len:20000 
..ranand_erase: start:9c0000, len:20000 
..ranand_erase: start:9e0000, len:20000 
..ranand_erase: start:a00000, len:20000 
..ranand_erase: start:a20000, len:20000 
..Done!
ZLB> ATGO

Checking image 1...
   Image Name:   MIPS OpenWrt Linux-4.14.
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1904268 Bytes =  1.8 MB
   Load Address: 80001000
   Entry Point:  80001000
..............................   Verifying Checksum ... ## Booting image at bc400000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...

[    0.000000] Linux version 4.14.111 (jenkins@tofu-z77hvub18_openwrt) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+9824-b80243858e)) #0 SMP Wed Apr 10 22:14:24 2019
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is I-O DATA WN-DX1167R
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x90/0x4a4 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu @81110000 s26192 r8192 d22960 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00041000
[    0.000000] Readback ErrCtl register=00041000
[    0.000000] Memory: 123412K/131072K available (4495K kernel code, 232K rwdata, 1000K rodata, 212K init, 248K bss, 7660K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] CPU Clock: 880MHz
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.015489] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.087819] pid_max: default: 32768 minimum: 301
[    0.097130] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.110152] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.125872] Hierarchical SRCU implementation.
[    0.135333] smp: Bringing up secondary CPUs ...
[    0.157193] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.157203] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.157214] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.157346] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.204708] Synchronize counters for CPU 1: done.
[    0.280962] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.280971] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.280978] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.281053] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.325550] Synchronize counters for CPU 2: done.
[    0.398048] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.398057] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.398064] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.398161] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.445120] Synchronize counters for CPU 3: done.
[    0.504727] smp: Brought up 1 node, 4 CPUs
[    0.516496] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.535966] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.548388] pinctrl core: initialized pinctrl subsystem
[    0.559959] NET: Registered protocol family 16
[    0.577853] pull PCIe RST: RALINK_RSTCTRL = 4000000
[    0.887862] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.897927] ***** Xtal 40MHz *****
[    0.904660] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.914864] Port 0 N_FTS = 1b102800
[    0.921765] Port 1 N_FTS = 1b105000
[    0.928690] Port 2 N_FTS = 1b102800
[    2.087414] PCIE0 no card, disable it(RST&CLK)
[    2.096102] PCIE2 no card, disable it(RST&CLK)
[    2.104905]  -> 20107f2
[    2.109754] PCIE1 enabled
[    2.114934] PCI host bridge /pcie@1e140000 ranges:
[    2.124462]  MEM 0x0000000060000000..0x000000006fffffff
[    2.134818]   IO 0x000000001e160000..0x000000001e16ffff
[    2.145185] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    2.167904] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.179202] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.190476] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.203006] PCI host bridge to bus 0000:00
[    2.211026] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    2.224685] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    2.236430] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    2.249905] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    2.266775] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.279797] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.293616] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.307095] pci 0000:00:00.0: BAR 1: assigned [mem 0x60100000-0x6010ffff]
[    2.320588] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    2.335105] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.344928] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.359781] clocksource: Switched to clocksource GIC
[    2.371091] NET: Registered protocol family 2
[    2.380381] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    2.394113] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    2.406716] TCP: Hash tables configured (established 1024 bind 1024)
[    2.419449] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.430952] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.443591] NET: Registered protocol family 1
[    2.689726] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    2.701085] Crashlog allocated RAM at address 0x3f00000
[    2.711776] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[    2.731556] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    2.743066] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    2.763642] random: fast init done
[    2.772704] io scheduler noop registered
[    2.780396] io scheduler deadline registered (default)
[    2.791494] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    2.805397] console [ttyS0] disabled
[    2.812500] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A
[    2.830396] console [ttyS0] enabled
[    2.830396] console [ttyS0] enabled
[    2.844183] bootconsole [early0] disabled
[    2.844183] bootconsole [early0] disabled
[    2.860765] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    2.873648] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    2.887677] Enable NFI Clock
[    2.893419] # MTK NAND # : Use HW ECC
[    2.900732] Device found in MTK table, ID: 1f1, EXT_ID: 801d01
[    2.912350] Support this Device in MTK table! 1f1 
[    2.922073] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    2.934943] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xf1
[    2.947593] nand: AMD/Spansion NAND 128MiB 3,3V 8-bit
[    2.957650] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    2.972740] Scanning device for bad blocks
[    3.262508] 12 fixed-partitions partitions found on MTD device MT7621-NAND
[    3.276195] Creating 12 MTD partitions on "MT7621-NAND":
[    3.286781] 0x000000000000-0x000000100000 : "Bootloader"
[    3.298419] 0x000000100000-0x000000200000 : "u-boot-env"
[    3.310086] 0x000000200000-0x000000300000 : "Factory"
[    3.321209] 0x000000300000-0x000000400000 : "SecondBoot"
[    3.332822] 0x000000400000-0x000000800000 : "kernel"
[    3.343791] 0x000000800000-0x000003600000 : "ubi"
[    3.354558] 0x000003600000-0x000003700000 : "Config"
[    3.365513] 0x000003700000-0x000006900000 : "firmware_2"
[    3.377505] 0x000006900000-0x000006a00000 : "Config_2"
[    3.388796] 0x000006a00000-0x000006b00000 : "persist"
[    3.399956] 0x000006b00000-0x000006c00000 : "idmkey"
[    3.410900] 0x000006c00000-0x000007f80000 : "Backup"
[    3.421985] [mtk_nand] probe successfully!
[    3.430894] Signature matched and data read!
[    3.439376] load_fact_bbt success 1023
[    3.447583] libphy: Fixed MDIO Bus: probed
[    3.522344] libphy: mdio: probed
[    4.928371] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    4.940908] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 19
[    4.959966] NET: Registered protocol family 10
[    4.970170] Segment Routing with IPv6
[    4.977536] NET: Registered protocol family 17
[    4.986428] 8021q: 802.1Q VLAN Support v1.8
[    4.997556] UBI: auto-attach mtd5
[    5.004248] ubi0: attaching mtd5
[    5.025850] UBI: EOF marker found, PEBs from 13 will be erased
[    5.037929] ubi0: scanning is finished
[    5.084852] ubi0: volume 1 ("rootfs_data") re-sized from 9 to 333 LEBs
[    5.098640] ubi0: attached mtd5 (name "ubi", size 46 MiB)
[    5.109444] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    5.123159] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    5.136677] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    5.150539] ubi0: good PEBs: 368, bad PEBs: 0, corrupted PEBs: 0
[    5.162500] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[    5.176880] ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 964880614
[    5.194896] ubi0: available PEBs: 0, total reserved PEBs: 368, PEBs reserved for bad PEB handling: 20
[    5.213277] ubi0: background thread "ubi_bgt0d" started, PID 369
[    5.215189] block ubiblock0_0: created from ubi0:0(rootfs)
[    5.236218] ubiblock: device ubiblock0_0 (rootfs) set to be root filesystem
[    5.250120] hctosys: unable to open rtc device (rtc0)
[    5.320902] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    5.335589] Freeing unused kernel memory: 212K
[    5.344455] This architecture does not have kernel memory protection.
[    6.357057] init: Console is alive
[    6.364108] init: - watchdog -
[    6.453838] mtk_soc_eth 1e100000.ethernet eth0: port 3 link up
[    6.529355] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    6.619659] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    6.650049] init: - preinit -
[    7.337540] mtk_soc_eth 1e100000.ethernet: PPE started
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[   10.548994] UBIFS (ubi0:1): default file-system created
[   10.561060] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 439
[   10.593041] random: procd: uninitialized urandom read (4 bytes read)
[   10.675612] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data"
[   10.691242] UBIFS (ubi0:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[   10.710990] UBIFS (ubi0:1): FS size: 41013248 bytes (39 MiB, 323 LEBs), journal size 2031616 bytes (1 MiB, 16 LEBs)
[   10.731760] UBIFS (ubi0:1): reserved for root: 1937156 bytes (1891 KiB)
[   10.744926] UBIFS (ubi0:1): media format: w4/r0 (latest is w5/r0), UUID B81C08C4-63C6-4F2A-9209-8BD51995109A, small LPT model
[   10.770363] mount_root: overlay filesystem has not been fully initialized yet
[   10.784963] mount_root: switching to ubifs overlay
[   10.810343] urandom-seed: Seed file not found (/etc/urandom.seed)
[   10.897251] mtk_soc_eth 1e100000.ethernet: 0x100 = 0x6060000c, 0x10c = 0x80818
[   10.918904] procd: - early -
[   10.924772] procd: - watchdog -
[   11.549909] procd: - watchdog -
[   11.556472] procd: - ubus -
[   11.609170] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.622535] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.635596] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.649111] procd: - init -
Please press Enter to activate this console.
[   11.910565] kmodloader: loading kernel modules from /etc/modules.d/*
[   11.927475] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   11.944856] ip_tables: (C) 2000-2006 Netfilter Core Team
[   11.961078] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[   12.003913] xt_time: kernel timezone is -0000
[   12.018142] PPP generic driver version 2.4.2
[   12.027837] NET: Registered protocol family 24
[   12.038953] kmodloader: done loading kernel modules from /etc/modules.d/*
[   13.206587] urandom_read: 5 callbacks suppressed
[   13.206599] random: jshn: uninitialized urandom read (4 bytes read)
[   23.311257] mtk_soc_eth 1e100000.ethernet: PPE started
[   23.327072] br-lan: port 1(eth0.1) entered blocking state
[   23.337924] br-lan: port 1(eth0.1) entered disabled state
[   23.349363] device eth0.1 entered promiscuous mode
[   23.359238] device eth0 entered promiscuous mode
[   23.371147] br-lan: port 1(eth0.1) entered blocking state
[   23.381939] br-lan: port 1(eth0.1) entered forwarding state
[   23.393592] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   24.350325] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   24.725924] random: crng init done



BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+9856-c5e6f6b6c2
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/#

WN-DX1167R bootnumメモ

WN-DX1167Rのデュアルイメージ構成において、ブートするパーティションを切り替える bootnum フラグについてのメモ。

root@WN-DX1167R:/tmp/mtd# mstc_persist read bootnum
1
root@WN-DX1167R:/tmp/mtd# hexdump -n 128 -C /dev/mtd9
00000000  1b 05 ce 17 01 00 00 00  4a 4f 00 00 06 9e e4 d0  |........JO......|
00000010  4a 4f 00 00 06 9e e4 d0  00 00 00 00 00 00 00 00  |JO..............|
00000020  00 00 00 00 00 00 00 00  ff ff ff ff ff ff ff ff  |................|
00000030  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
*
00000080
root@WN-DX1167R:/tmp/mtd# mstc_persist write bootnum 2
Unlocking persist ...
root@WN-DX1167R:/tmp/mtd# hexdump -n 128 -C /dev/mtd9
00000000  1b 05 ce 17 02 00 00 00  4a 4f 00 00 06 9e e4 d0  |........JO......|
00000010  4a 4f 00 00 06 9e e4 d0  00 00 00 00 00 00 00 00  |JO..............|
00000020  00 00 00 00 00 00 00 00  ff ff ff ff ff ff ff ff  |................|
00000030  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
*
00000080

WN-DX1167R

再び某氏より提供頂いたもの。事前のファーム解析でMT7621を搭載していることが予想されていたものの、WAN側は1000Mbps対応ながらLAN側は100Mbpsまでとされており、内部的にどのような構造になっているのかが気になっていた。
弄っていくのでメモ。

Switch

zone WAN LAN
port
(WN-DX1167R)
インターネット (LAN番号刻印無し)
port
(MT7530)
port0 port1 port2 port3 port4

MAC

  • LAN: 34:76:C5:xx:xx:F4 (Ubootenv, ethaddr (text) / Factory, 0xE000 (hex))
  • WAN: 34:76:C5:xx:xx:F6 (Factory, 0xE006 (hex))
  • 2.4G: 34:76:C5:xx:xx:F4 (Factory, 0x4 (hex))
  • 5G: 34:76:C5:xx:xx:F5 (Factory, 0x8004 (hex))

U-Boot

ブートを止める方法が不明で入れず
→ 5chの情報を参考に強引にKernelへログインしたうえでブート時のmtdロックを回避、
sys debugflag 1
を設定してデバッグモードを有効化しZ-Loaderを停止できるように変更。再度ブート時にZ-Loaderに入り、
ATGU
でU-Bootへ移動する

log:

U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..Hit ESC key to stop autoboot: 1
ZLB> help
ATGO              boot up the whole system
ATGU              go back to U-Boot command line
ATUR              upgrade ras image by console
ATUF              upgrade factory by console
ATNR    x,y       upgrade image by TFTP (x=type[1:ras, 2:bootloader, 3:config, 4:romd 6:factory], y=filename)
ATUX              upgrade bootloader
ATBT    x         block0 write enable (1=enable, 0=disable)
ATEN    x,(y)     set BootExtension Debug Flag (y=password)
ATSE    x         show the seed of password generator
ATWZ    a,(b,c,d) write MAC , Country code, EngDbgFlag, MAC Quantity to FLASH
ATSH              dump manufacturer related data in FLASH
ATBU              dump manufacturer related data in working buffer
ATCB              copy FLASH MRD to working buffer
ATSN    x         set serial number to flash
ATSB              save working buffer to FLASH
ATQY    x         set MAC Quantity to working buffer
ATFL    x         set EngDebugFlag to working buffer
ATCO    x         set country code to working buffer
ATSR              reset
ATRT    (x,y,z,u) RAM read/write test (x=level, y=start addr, z=end addr, u=interations)
ATRM              restore default MRD
ATBR              reset to default Romfile
ATER              erase ROM-D data
ATHV    x         set hardware version to flash
ATGP    x,y       led control
ZLB> ATGU


=>## Application terminated, rc = 0x0

Please choose the operation: 
   1: Load system code to SDRAM via TFTP. 
   2: Load system code then write to Flash via TFTP. 
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   9: Load Boot Loader code then write to Flash via TFTP. 
default: 3

You choosed 4

                                                                                                                           0 

   
4: System Enter Boot Command Line Interface.

U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)
MSTC #

help
ヘルプコマンド潰されているのに “ヘルプ見ろ” と言われるのはネタっぽい

MSTC # help
Unknown command 'help' - try 'help'

version

MSTC # version
Unknown command 'version' - try 'help'

printenv

MSTC # printenv
bootcmd=tftp
ipaddr=10.10.10.123
serverip=10.10.10.3
serialnum=118H010878Z7
countrycode=EA
ethaddr=34:76:C5:**:**:F4
wifi2ssid1=IODATA-****f4-2G
wifi2ssid2=IO-Guest-****f4-2G
wifi1ssid1=IODATA-****f4-5G
wifiwpapsk=**********
wifiwpspin=********
wifi1ssid2=IO-Guest-****f4-5G
stdin=serial
stdout=serial
stderr=serial
ethact=Eth0 (10/100-M)
BootType=3

Environment size: 353/131068 bytes

tftp

MSTC # tftp

 NetLoop,call eth_halt ! 

 NetLoop,call eth_init ! 
Trying Eth0 (10/100-M)

 ETH_STATE_ACTIVE!! 
*** Warning: no boot file name; using 'test.bin'
Using Eth0 (10/100-M) device
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'test.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: T T 
Abort

Kernel

パスワードが設定されており、ログイン不可。
5chの情報を基に強引にログインし、情報を引き出し。

uname -a

root@WN-DX1167R:~# uname -a
Linux WN-DX1167R 3.10.14 #1 SMP Fri Oct 12 21:22:31 CST 2018 mips GNU/Linux

cat /proc/version

root@WN-DX1167R:~# cat /proc/version
Linux version 3.10.14 (*******@srv17) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 unknown) ) #1 SMP Fri Oct 12 21:22:31 CST 2018

cat /proc/cpuinfo

root@WN-DX1167R:~# cat /proc/cpuinfo
system type             : MT7621
machine                 : Unknown
processor               : 0
cpu model               : MIPS 1004Kc V2.15
BogoMIPS                : 583.68
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa                     : mips1 mips2 mips32r1 mips32r2
ASEs implemented        : mips16 dsp mt
shadow register sets    : 1
kscratch registers      : 0
core                    : 0
VPE                     : 0
VCED exceptions         : not available
VCEI exceptions         : not available

processor               : 1
cpu model               : MIPS 1004Kc V2.15
BogoMIPS                : 583.68
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa                     : mips1 mips2 mips32r1 mips32r2
ASEs implemented        : mips16 dsp mt
shadow register sets    : 1
kscratch registers      : 0
core                    : 0
VPE                     : 1
VCED exceptions         : not available
VCEI exceptions         : not available

processor               : 2
cpu model               : MIPS 1004Kc V2.15
BogoMIPS                : 583.68
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa                     : mips1 mips2 mips32r1 mips32r2
ASEs implemented        : mips16 dsp mt
shadow register sets    : 1
kscratch registers      : 0
core                    : 1
VPE                     : 0
VCED exceptions         : not available
VCEI exceptions         : not available

processor               : 3
cpu model               : MIPS 1004Kc V2.15
BogoMIPS                : 583.68
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa                     : mips1 mips2 mips32r1 mips32r2
ASEs implemented        : mips16 dsp mt
shadow register sets    : 1
kscratch registers      : 0
core                    : 1
VPE                     : 1
VCED exceptions         : not available
VCEI exceptions         : not available

cat /proc/meminfo

root@WN-DX1167R:~# cat /proc/meminfo
MemTotal:         125220 kB
MemFree:           70108 kB
Buffers:            5648 kB
Cached:            18780 kB
SwapCached:            0 kB
Active:            10748 kB
Inactive:          16236 kB
Active(anon):       3788 kB
Inactive(anon):     1732 kB
Active(file):       6960 kB
Inactive(file):    14504 kB
Unevictable:           0 kB
Mlocked:               0 kB
SwapTotal:             0 kB
SwapFree:              0 kB
Dirty:                 0 kB
Writeback:             0 kB
AnonPages:          2592 kB
Mapped:             2844 kB
Shmem:              2964 kB
Slab:              11968 kB
SReclaimable:       1936 kB
SUnreclaim:        10032 kB
KernelStack:         528 kB
PageTables:          252 kB
NFS_Unstable:          0 kB
Bounce:                0 kB
WritebackTmp:          0 kB
CommitLimit:       62608 kB
Committed_AS:       8816 kB
VmallocTotal:    1048372 kB
VmallocUsed:       11356 kB
VmallocChunk:     980924 kB

cat /proc/mtd

root@WN-DX1167R:~# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 07f80000 00020000 "ALL"
mtd1: 00100000 00020000 "Bootloader"
mtd2: 00100000 00020000 "Ubootenv"
mtd3: 00100000 00020000 "Factory"
mtd4: 03200000 00020000 "firmware"
mtd5: 03078a0e 00020000 "rootfs"
mtd6: 00100000 00020000 "Config"
mtd7: 03200000 00020000 "firmware_2"
mtd8: 00100000 00020000 "Config_2"
mtd9: 00100000 00020000 "persist"
mtd10: 00100000 00020000 "idmkey"
mtd11: 01380000 00020000 "Backup"
mtd12: 00100000 00020000 "SecondBoot"

ubus call system board

root@WN-DX1167R:~# ubus call system board
{
        "kernel": "3.10.14",
        "hostname": "WN-DX1167R",
        "system": "MT7621",
        "model": "MiCAP-3326C",
        "release": {
                "distribution": "OpenWrt",
                "version": "1.00.001",
                "revision": "unknown",
                "codename": "barrier_breaker",
                "target": "ramips\/generic",
                "description": "OpenWrt Barrier Breaker 1.00.001"
        }
}

fw_printenv

root@WN-DX1167R:~# fw_printenv
bootcmd=tftp
ipaddr=10.10.10.123
serverip=10.10.10.3
stdin=serial
stdout=serial
stderr=serial
serialnum=118H010878Z7
countrycode=EA
ethaddr=34:76:C5:**:**:F4
wifi2ssid1=IODATA-****f4-2G
wifi2ssid2=IO-Guest-****f4-2G
wifi1ssid1=IODATA-****f4-5G
wifiwpapsk=*************
wifiwpspin=********
wifi1ssid2=IO-Guest-****f4-5G

switch –help

root@WN-DX1167R:~# switch --help
Usage:
 switch acl etype add [ethtype] [portmap]              - drop etherytype packets
 switch acl dip add [dip] [portmap]                    - drop dip packets
 switch acl dip meter [dip] [portmap][meter:kbps]      - rate limit dip packets
 switch acl dip trtcm [dip] [portmap][CIR:kbps][CBS][PIR][PBS] - TrTCM dip packets
 switch acl port add [sport] [portmap]           - drop src port packets
 switch acl L4 add [2byes] [portmap]             - drop L4 packets with 2bytes payload
 switch add [mac] [portmap]                  - add an entry to switch table
 switch add [mac] [portmap] [vlan id]        - add an entry to switch table
 switch add [mac] [portmap] [vlan id] [age]  - add an entry to switch table
 switch clear                                - clear switch table
 switch del [mac]                            - delete an entry from switch table
 switch del [mac] [fid]                  - delete an entry from switch table
 switch dip add [dip] [portmap]                  - add a dip entry to switch table
 switch dip del [dip]                        - del a dip entry to switch table
 switch dip dump                                 - dump switch dip table
 switch dip clear                                - clear switch dip table
 switch dump            - dump switch table
 switch ingress-rate on [port] [Kbps]        - set ingress rate limit on port 0~4 
 switch egress-rate on [port] [Kbps]         - set egress rate limit on port 0~4 
 switch ingress-rate off [port]              - del ingress rate limit on port 0~4 
 switch egress-rate off [port]               - del egress rate limit on port 0~4
 switch filt [mac]                           - add a SA filtering entry (with portmap 1111111) to switch table
 switch filt [mac] [portmap]                 - add a SA filtering entry to switch table
 switch filt [mac] [portmap] [vlan id]       - add a SA filtering entry to switch table
 switch filt [mac] [portmap] [vlan id] [age] - add a SA filtering entry to switch table
 switch igmpsnoop on [Query Interval] [default router portmap] - turn on IGMP snoop and  router port learning (Query Interval 1~255)
 switch igmpsnoop off                                  - turn off IGMP snoop and router port learning
 switch igmpsnoop enable [port#]                       - enable IGMP HW leave/join/Squery/Gquery
 switch igmpsnoop disable [port#]                      - disable IGMP HW leave/join/Squery/Gquery
 switch mymac [mac] [portmap]                  - add a mymac entry to switch table
 switch mirror monitor [portnumber]            - enable port mirror and indicate monitor port number
 switch mirror target [portnumber] [0:off, 1:rx, 2:tx, 3:all]  - set port mirror target
 switch phy [phy_addr]                   - dump phy register of specific port
 switch phy mt7530                       - dump mt7530 phy registers
 switch phy                                      - dump all phy registers
 switch pvid [port] [pvid]                - set pvid on port 0~4 
 switch reg r [offset]                       - register read from offset
 switch reg w [offset] [value]               - register write value to offset
 switch reg d [offset]                       - register dump
 switch sip add [sip] [dip] [portmap]            - add a sip entry to switch table
 switch sip del [sip] [dip]                          - del a sip entry to switch table
 switch sip dump                                 - dump switch sip table
 switch sip clear                                - clear switch sip table
 switch tag on [port]                        - keep vlan tag for egress packet on prot 0~4
 switch tag off [port]                       - remove vlan tag for egress packet on port 0~4
 switch vlan dump                            - dump switch table
 switch vlan set [vlan idx (NULL)][vid] [portmap]  - set vlan id and associated member

switch vlan dump

root@WN-DX1167R:~# switch vlan dump
  vid  fid  portmap    s-tag
    1    0  -1111-11       0
    2    0  1----1--       0
    3    0  invalid
    4    0  invalid
    5    0  invalid
    6    0  invalid
    7    0  invalid
    8    0  invalid
    9    0  invalid
   10    0  invalid
   11    0  invalid
   12    0  invalid
   13    0  invalid
   14    0  invalid
   15    0  invalid
   16    0  invalid

sys –help

root@WN-DX1167R:~# sys --help
Usage:
         sys atsh 
         sys atwz  []
         sys atsn 
         sys athwver 
         sys debugflag 
         sys ledctl 
         sys loadrom 
         sys mrd [0:Check default MRD(default option) | 1:Reset default MRD]
         sys romreset 

sys atsh

root@WN-DX1167R:~# sys atsh
Firmware Version              : 3.10(XIK.0)b11                
Boot Version                  : 1.28.03 | 08/06/2018 14:37:44 
Product Model                 : WN-DX1167R                    
First MAC Address             : 34:76:C5:**:**:F4             
MAC Quantity                  : 4                             
Serial Number                 : 118H010878Z7                  
firmware Checksum             : 84535509                      
Kernel Checksum               : d775cdc8                      
RomFile Checksum              : c1d7f1c5                      
Country Code                  : EA                            
Boot Number                   : 1

bootlog

U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..
Checking image 1...
   Image Name:   3.10(XIK.0)b11
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1602994 Bytes =  1.5 MB
   Load Address: 80001000
   Entry Point:  80001000
.........................   Verifying Combo Checksum ... .................................................................................................................................................## Booting image at bc400000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...


LINUX started...

 THIS IS ASIC

SDK 5.0.S.0
[    0.000000] Linux version 3.10.14 (*******@srv17) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 unknown) ) #1 SMP Fri Oct 12 21:22:31 CST 2018
[    0.000000] 
[    0.000000]  The CPU feqenuce set to 880 MHz
[    0.000000] GCMP present
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] Software DMA cache coherency
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x07ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x07ffffff]
[    0.000000] Detected 3 available secondary CPU(s)
[    0.000000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] PERCPU: Embedded 7 pages/cpu @81103000 s6464 r8192 d14016 u32768
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS1,57600n8 BootImage=1 root=/dev/mtdblock5 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00041000
[    0.000000] Readback ErrCtl register=00041000
[    0.000000] Memory: 125008k/131072k available (3536k kernel code, 6064k reserved, 852k data, 212k init, 0k highmem)
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS:128
[    0.000000] console [ttyS1] enabled
[    0.116000] Calibrating delay loop... 562.17 BogoMIPS (lpj=1124352)
[    0.148000] pid_max: default: 32768 minimum: 301
[    0.152000] Mount-cache hash table entries: 512
[    0.156000] launch: starting cpu1
[    0.160000] launch: cpu1 gone!
[    0.160000] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.160000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.160000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.160000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.192000] Synchronize counters for CPU 1: done.
[    0.200000] launch: starting cpu2
[    0.204000] launch: cpu2 gone!
[    0.204000] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.204000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.204000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.204000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.232000] Synchronize counters for CPU 2: done.
[    0.240000] launch: starting cpu3
[    0.244000] launch: cpu3 gone!
[    0.244000] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.244000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.244000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.244000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.272000] Synchronize counters for CPU 3: done.
[    0.280000] Brought up 4 CPUs
[    0.284000] NET: Registered protocol family 16
[    0.576000] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.580000] PCIE PHY initialize
[    0.584000] ***** Xtal 40MHz *****
[    0.588000] start MT7621 PCIe register access
[    1.164000] RALINK_RSTCTRL = 7000000
[    1.168000] RALINK_CLKCFG1 = 77ffeff8
[    1.172000] 
[    1.172000] *************** MT7621 PCIe RC mode *************
[    1.652000] PCIE0 no card, disable it(RST&CLK)
[    1.656000] PCIE2 no card, disable it(RST&CLK)
[    1.660000] pcie_link status = 0x2
[    1.664000] RALINK_RSTCTRL= 2000000
[    1.668000] *** Configure Device number setting of Virtual PCI-PCI bridge ***
[    1.672000] RALINK_PCI_PCICFG_ADDR = 21007f2 -> 20107f2
[    1.676000] PCIE1 enabled
[    1.680000] interrupt enable status: 200000
[    1.684000] Port 0 N_FTS = 1b105000
[    1.688000] config reg done
[    1.692000] init_rt2880pci done
[    1.712000] bio: create slab  at 0
[    1.716000] SCSI subsystem initialized
[    1.720000] usbcore: registered new interface driver usbfs
[    1.724000] usbcore: registered new interface driver hub
[    1.728000] usbcore: registered new device driver usb
[    1.732000] PCI host bridge to bus 0000:00
[    1.736000] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    1.740000] pci_bus 0000:00: root bus resource [io  0x1e160000-0x1e16ffff]
[    1.744000] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    1.748000] pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000)
[    1.752000] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    1.756000] pci 0000:00:00.0: BAR 1: assigned [mem 0x60100000-0x6010ffff]
[    1.760000] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    1.764000] pci 0000:00:00.0: PCI bridge to [bus 01]
[    1.768000] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    1.772000] BAR0 at slot 0 = 0
[    1.776000] bus=0x0, slot = 0x0
[    1.780000] res[0]->start = 0
[    1.784000] res[0]->end = 0
[    1.788000] res[1]->start = 60100000
[    1.792000] res[1]->end = 6010ffff
[    1.796000] res[2]->start = 0
[    1.800000] res[2]->end = 0
[    1.804000] res[3]->start = 0
[    1.808000] res[3]->end = 0
[    1.812000] res[4]->start = 0
[    1.816000] res[4]->end = 0
[    1.820000] res[5]->start = 0
[    1.824000] res[5]->end = 0
[    1.828000] bus=0x1, slot = 0x0, irq=0x18
[    1.832000] res[0]->start = 60000000
[    1.836000] res[0]->end = 600fffff
[    1.840000] res[1]->start = 0
[    1.844000] res[1]->end = 0
[    1.848000] res[2]->start = 0
[    1.852000] res[2]->end = 0
[    1.856000] res[3]->start = 0
[    1.860000] res[3]->end = 0
[    1.864000] res[4]->start = 0
[    1.868000] res[4]->end = 0
[    1.872000] res[5]->start = 0
[    1.876000] res[5]->end = 0
[    1.880000] Switching to clocksource MIPS
[    1.884000] NET: Registered protocol family 2
[    1.892000] TCP established hash table entries: 1024 (order: 1, 8192 bytes)
[    1.908000] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    1.920000] TCP: Hash tables configured (established 1024 bind 1024)
[    1.932000] TCP: reno registered
[    1.940000] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    1.952000] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    1.964000] NET: Registered protocol family 1
[    2.060000] 4 CPUs re-calibrate udelay(lpj = 1167360)
[    2.072000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    2.084000] jffs2: version 2.2. (NAND) (SUMMARY)  (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    2.108000] io scheduler noop registered (default)
[    2.116000] reg_int_mask=0, INT_MASK= 0 
[    2.124000] HSDMA_init
[    2.128000] 
[    2.128000]  hsdma_phy_tx_ring0 = 0x0fe38000, hsdma_tx_ring0 = 0xafe38000
[    2.144000] 
[    2.144000]  hsdma_phy_rx_ring0 = 0x0fe34000, hsdma_rx_ring0 = 0xafe34000
[    2.164000] TX_CTX_IDX0 = 0
[    2.168000] TX_DTX_IDX0 = 0
[    2.172000] RX_CRX_IDX0 = 3ff
[    2.180000] RX_DRX_IDX0 = 0
[    2.184000] set_fe_HSDMA_glo_cfg
[    2.192000] HSDMA_GLO_CFG = 465
[    2.204000] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    2.216000] serial8250: ttyS0 at MMIO 0x1e000d00 (irq = 27) is a 16550A
[    2.228000] serial8250: ttyS1 at MMIO 0x1e000c00 (irq = 26) is a 16550A
[    2.244000] Ralink gpio driver initialized
[    2.252000] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    2.264000] Allocate 16 byte aligned buffer: 80491c20
[    2.276000] Enable NFI Clock
[    2.280000] # MTK NAND # : Use HW ECC
[    2.288000] NAND ID [01 F1 80 1D 01, 00801d01]
[    2.296000] Device found in MTK table, ID: 1f1, EXT_ID: 801d01
[    2.308000] Support this Device in MTK table! 1f1 
[    2.320000] NAND device: Manufacturer ID: 0x01, Chip ID: 0xf1 (AMD/Spansion NAND 128MiB 3,3V 8-bit), 128MiB, page size: 2048, OOB size: 64
[    2.344000] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    2.356000] Scanning device for bad blocks
[    2.648000] Signature matched and data read!
[    2.656000] load_fact_bbt success 1023
[    2.664000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.684000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.704000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.724000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.744000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.760000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.780000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.800000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.820000] Creating 12 MTD partitions on "MT7621-NAND":
[    2.832000] 0x000000000000-0x000007f80000 : "ALL"
[    2.840000] 0x000000000000-0x000000100000 : "Bootloader"
[    2.852000] 0x000000100000-0x000000200000 : "Ubootenv"
[    2.864000] 0x000000200000-0x000000300000 : "Factory"
[    2.876000] 0x000000400000-0x000003600000 : "firmware"
[    2.888000] 0x0000005875f2-0x000003600000 : "rootfs"
[    2.900000] mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[    2.936000] 0x000003600000-0x000003700000 : "Config"
[    2.944000] 0x000003700000-0x000006900000 : "firmware_2"
[    2.956000] 0x000006900000-0x000006a00000 : "Config_2"
[    2.968000] 0x000006a00000-0x000006b00000 : "persist"
[    2.980000] 0x000006b00000-0x000006c00000 : "idmkey"
[    2.988000] 0x000006c00000-0x000007f80000 : "Backup"
[    3.000000] 0x000000300000-0x000000400000 : "SecondBoot"
[    3.012000] [mtk_nand] probe successfully!
[    3.020000] rootfs = 5875f2 to d20000
[    3.028000] PPP generic driver version 2.4.2
[    3.036000] NET: Registered protocol family 24
[    3.044000] PPTP driver version 0.8.5
[    3.052000] rdm_major = 253
[    3.060000] GMAC1_MAC_ADRH -- : 0x00003476
[    3.068000] GMAC1_MAC_ADRL -- : 0xc5cca9f4
[    3.076000] Ralink APSoC Ethernet Driver Initilization. v3.1  1024 rx/tx descriptors allocated, mtu = 1500!
[    3.096000] GMAC1_MAC_ADRH -- : 0x00003476
[    3.104000] GMAC1_MAC_ADRL -- : 0xc5cca9f4
[    3.112000] register mt7530
[    3.116000] PROC INIT OK!
[    3.124000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    3.136000] ehci-pci: EHCI PCI platform driver
[    3.144000] *****run project phy.
[    3.164000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.184000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.204000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.224000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.244000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.264000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.284000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.304000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.324000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.344000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.388000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.408000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.428000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.448000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.468000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.488000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.508000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.528000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.548000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.568000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.708000] xhci-hcd xhci-hcd: xHCI Host Controller
[    3.716000] xhci-hcd xhci-hcd: new USB bus registered, assigned bus number 1
[    3.732000] xhci-hcd xhci-hcd: irq 22, io mem 0x1e1c0000
[    3.744000] hub 1-0:1.0: USB hub found
[    3.752000] hub 1-0:1.0: 2 ports detected
[    3.760000] xhci-hcd xhci-hcd: xHCI Host Controller
[    3.768000] xhci-hcd xhci-hcd: new USB bus registered, assigned bus number 2
[    3.784000] hub 2-0:1.0: USB hub found
[    3.792000] hub 2-0:1.0: 1 port detected
[    3.800000] usbcore: registered new interface driver usb-storage
[    3.812000] gre: GRE over IPv4 demultiplexor driver
[    3.820000] TCP: cubic registered
[    3.828000] NET: Registered protocol family 10
[    3.836000] NET: Registered protocol family 17
[    3.848000] Bridge firewalling registered
[    3.856000] 8021q: 802.1Q VLAN Support v1.8
[    3.872000] VFS: Mounted root (squashfs filesystem) readonly on device 31:5.
[    3.884000] Freeing unused kernel memory: 212K (8044b000 - 80480000)
procd: Console is alive
procd: - preinit -
[    5.196000] 34:76:FFFFFFC5:FFFFFFCC:FFFFFFA9:FFFFFFF4
[    5.208000] Raeth v3.1 (Tasklet)
[    5.216000] set CLK_CFG_0 = 0x40a00020!!!!!!!!!!!!!!!!!!1
[    5.232000] phy_free_head is 0xf75a000!!!
[    5.240000] phy_free_tail_phy is 0xf75bff0!!!
[    5.248000] txd_pool=af760000 phy_txd_pool=0F760000
[    5.256000] ei_local->skb_free start address is 0x87ed26dc.
[    5.268000] free_txd: 0f760010, ei_local->cpu_ptr: 0F760000
[    5.280000]  POOL  HEAD_PTR | DMA_PTR | CPU_PTR 
[    5.288000] ----------------+---------+--------
[    5.296000]      0xaf760000 0x0F760000 0x0F760000
[    5.308000] 
[    5.308000] phy_qrx_ring = 0x0f714000, qrx_ring = 0xaf714000
[    5.324000] 
[    5.324000] phy_rx_ring0 = 0x0f75c000, rx_ring0 = 0xaf75c000
[    5.356000] MT7530 Reset Completed!!
[    5.372000] change HW-TRAP to 0x117c8f
[    5.380000] set LAN/WAN WLLLL
[    5.392000] GMAC1_MAC_ADRH -- : 0x00003476
[    5.400000] GMAC1_MAC_ADRL -- : 0xc5cca9f4
[    5.408000] GDMA2_MAC_ADRH -- : 0x00003476
[    5.416000] GDMA2_MAC_ADRL -- : 0xc5cca9f6
[    5.424000] eth1: ===> VirtualIF_open
[    5.432000] MT7621 GE2 link rate to 1G
[    5.432000] CDMA_CSG_CFG = 81000000
[    5.432000] GDMA1_FWD_CFG = 20710000
[    5.432000] GDMA2_FWD_CFG = 20710000
[    5.556000] led=9, on=1, off=1, blinks,=1, reset=1, time=4000 low_trigger=1
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    7.004000] ESW: Link Status Changed - Port2 Link UP
[    8.668000] led=9, on=1, off=1, blinks,=1, reset=1, time=4000 low_trigger=1
Could not open mtd device: /dev/mtd5
reading ro[    8.784000] ra2880stop()...otfs failed
mouDone
[    8.792000] eth1: ===> VirtualIF_close

[    8.804000] Free TX/RX Ring Memory!
procd: - early -
procd: - ubus -
procd: - init -
Please press Enter to activate this console.
[   10.748000] jffs2: notice: (762) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   10.872000] jffs2: notice: (765) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
##### Skip Checking Config. #####
Mode Switch: Router/AP
[   11.336000] Initializing XFRM netlink socket
[   11.344000] NET: Registered protocol family 15
[   11.356000] sbdev driver(major: 254) installed.
[   11.364000] wpdev driver(major: 250) installed.
[   11.392000] l2tp_core: L2TP core driver, V2.0
[   11.400000] l2tp_netlink: L2TP netlink interface
[   11.412000] ip_gre: GRE over IPv4 tunneling driver
[   11.428000] ip_tables: (C) 2000-2006 Netfilter Core Team
[   11.440000] Type=Restricted Cone
[   11.452000] nf_conntrack version 0.5.0 (1956 buckets, 7824 max)
[   11.468000] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   11.496000] ebt_time: kernel timezone is -0000
[   11.508000] Ebtables v2.0 registered
[   11.524000] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[   11.652000] Netfilter messages via NETLINK v0.30.
[   11.664000] PPP MPPE Compression module registered
[   11.676000] Ralink APSoC Hardware Watchdog Timer
[   11.712000] xt_time: kernel timezone is -0000
[   11.732000] ctnetlink v0.93: registering with nfnetlink.
[   14.640000] mtd: ALL locked
[   14.648000] mtd: Bootloader locked
[   14.652000] mtd: Ubootenv locked
[   14.660000] mtd: Factory locked
[   14.664000] mtd_locked init
[   16.436000] 34:76:FFFFFFC5:FFFFFFCC:FFFFFFA9:FFFFFFF4
[   16.448000] Raeth v3.1 (Tasklet)
[   16.456000] set CLK_CFG_0 = 0x40a00020!!!!!!!!!!!!!!!!!!1
[   16.472000] phy_free_head is 0xef42000!!!
[   16.480000] phy_free_tail_phy is 0xef43ff0!!!
[   16.488000] txd_pool=aef48000 phy_txd_pool=0EF48000
[   16.496000] ei_local->skb_free start address is 0x87ed26dc.
[   16.508000] free_txd: 0ef48010, ei_local->cpu_ptr: 0EF48000
[   16.520000]  POOL  HEAD_PTR | DMA_PTR | CPU_PTR 
[   16.528000] ----------------+---------+--------
[   16.536000]      0xaef48000 0x0EF48000 0x0EF48000
[   16.548000] 
[   16.548000] phy_qrx_ring = 0x0ef01000, qrx_ring = 0xaef01000
[   16.564000] 
[   16.564000] phy_rx_ring0 = 0x0ef54000, rx_ring0 = 0xaef54000
[   16.604000] MT7530 Reset Completed!!
[   16.620000] change HW-TRAP to 0x117c8f
[   16.628000] set LAN/WAN WLLLL
[   16.640000] GMAC1_MAC_ADRH -- : 0x00003476
[   16.648000] GMAC1_MAC_ADRL -- : 0xc5cca9f4
[   16.656000] eth1: ===> VirtualIF_open
[   16.664000] MT7621 GE2 link rate to 1G
[   16.664000] CDMA_CSG_CFG = 81000000
[   16.664000] GDMA1_FWD_CFG = 20710000
[   16.664000] GDMA2_FWD_CFG = 20710000
[   16.664000] device eth0 entered promiscuous mode
[   16.664000] br-lan: port 1(eth0) entered forwarding state
[   16.664000] br-lan: port 1(eth0) entered forwarding state
[   16.728000] eth1: ===> VirtualIF_open
[   18.268000] ESW: Link Status Changed - Port2 Link UP
[   18.668000] br-lan: port 1(eth0) entered forwarding state
[   22.420000] register mt_drv
[   22.440000] 
[   22.440000] 
[   22.440000] === pAd = c1f81000, size = 3627760 ===
[   22.440000] 
[   22.460000] PciHif.CSRBaseAddress =0xc1e80000, csr_addr=0xc1e80000!
[   22.488000] get_wdev_by_idx: invalid idx(0)
[   22.500000] RTMPInitPCIeDevice():device_id=0x7615
[   22.508000] DriverOwn()::Try to Clear FW Own...
[   22.844000] DriverOwn()::Success to clear FW Own
[   22.852000] mt_pci_chip_cfg(): HWVer=0x8a10, FWVer=0x8a10, pAd->ChipID=0x7615
[   22.864000] mt_pci_chip_cfg(): HIF_SYS_REV=0x76150001
[   22.876000] RtmpChipOpsHook(493): Not support for HIF_MT yet! MACVersion=0x0
[   22.888000] mt7615_init()-->
[   22.896000] Use the default ePAeLNA bin image!
[   22.904000] Use the default /etc_ro/wlan/MT7615E_EEPROM1.bin bin image!
[   22.916000] rxq = c22f26f4
[   24.444000] ctl->ackq = c22f2700
[   24.448000] ctl->kickq = c22f270c
[   24.456000] ctl->tx_doneq = c22f2718
[   24.464000] ctl->rx_doneq = c22f2724
[   24.472000] mt7615_fw_prepare():FW(8a10), HW(8a10), CHIPID(7615))
[   24.484000] mt7615_fw_prepare(2701): MT7615_E3, USE E3 patch and ram code binary image
[   24.500000] AndesMTLoadRomMethodFwDlRing(1036), cap->rom_patch_len(10206)
[   24.512000] AndesRestartCheck: Current TOP_MISC2(0x1)
[   24.524000] AndesRestartCheck: (TOP_MISC2 = 1), ready to continue...RET(0)
[   24.536000] 20161013140927a
[   24.540000] 
[   24.544000] platform = 
[   24.548000] ALPS
[   24.552000] hw/sw version = 
[   24.560000] 8a108a10
[   24.564000] patch version = 
[   24.568000] 00000010
[   24.572000] Patch SEM Status=2
[   24.580000] MtCmdPatchSemGet:(ret = 0)
[   24.588000] 
[   24.588000] Patch is not ready && get semaphore success, SemStatus(2)
[   24.604000] EventGenericEventHandler: CMD Success
[   24.612000] MtCmdAddressLenReq:(ret = 0)
[   24.620000] MtCmdPatchFinishReq
[   24.640000] EventGenericEventHandler: CMD Success
[   24.648000] Send checksum req..
[   24.652000] Patch SEM Status=3
[   24.660000] MtCmdPatchSemGet:(ret = 0)
[   24.668000] 
[   24.668000] Release patch semaphore, SemStatus(3)
[   24.680000] AndesMTEraseRomPatch
[   24.688000] WfMcuHwInit: Before NICLoadFirmware, check IcapMode=0
[   24.700000] AndesMTLoadFwMethodFwDlRing(810), cap->fw_len(460360)
[   24.712000] Build Date:_201701111925
[   24.716000] Build Date:_201701111925
[   24.724000] AndesRestartCheck: Current TOP_MISC2(0x1)
[   24.736000] AndesRestartCheck: (TOP_MISC2 = 1), ready to continue...RET(0)
[   24.748000] EventGenericEventHandler: CMD Success
[   24.760000] MtCmdAddressLenReq:(ret = 0)
[   24.772000] EventGenericEventHandler: CMD Success
[   24.780000] MtCmdAddressLenReq:(ret = 0)
[   24.788000] MtCmdFwStartReq: override = 1, address = 540672
[   24.800000] EventGenericEventHandler: CMD Success
[   24.808000] Build Date:_201612301011
[   24.816000] EventGenericEventHandler: CMD Success
[   24.824000] MtCmdAddressLenReq:(ret = 0)
[   24.832000] MtCmdFwStartReq: override = 4, address = 0
[   24.908000] EventGenericEventHandler: CMD Success
[   24.948000] WfMcuHwInit: NICLoadFirmware OK, Check IcapMode=0
[   24.960000] MCU Init Done!
[   24.968000]  MtCmdSetRlmPorCal: (ret = 0) 
[   24.976000] efuse_probe: efuse = 10000212
[   24.984000] RtmpChipOpsEepromHook::e2p_type=2, inf_Type=5
[   24.996000] RtmpEepromGetDefault::e2p_dafault=1
[   25.004000] RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 1
[   25.020000] NVM is FLASH mode. dev_idx [0] FLASH OFFSET [0x0]
[   25.032000] NICReadEEPROMParameters():Calling eeinit
[   25.052000] NICReadEEPROMParameters: EEPROM 0x52 b317
[   25.068000] MtCmdSetTxLpfCal:(ret = 0)
[   25.076000] MtCmdSetTxIqCal:(ret = 0)
[   25.080000] MtCmdSetTxDcCal:(ret = 0)
[   25.088000] MtCmdSetRxFiCal:(ret = 0)
[   25.096000] MtCmdSetRxFdCal:(ret = 0)
[   25.104000] MtCmdSetRxFdCal:(ret = 0)
[   25.112000] MtCmdSetRxFdCal:(ret = 0)
[   25.120000] MtCmdSetRxFdCal:(ret = 0)
[   25.124000] MtCmdSetRxFdCal:(ret = 0)
[   25.132000] MtCmdSetRxFdCal:(ret = 0)
[   25.140000] MtCmdSetRxFdCal:(ret = 0)
[   25.148000] MtCmdSetRxFdCal:(ret = 0)
[   25.156000] MtCmdSetRxFdCal:(ret = 0)
[   25.164000] NICReadEEPROMParameters: EEPROM 0x52 b317
[   25.728000] Country Region from e2p = 101
[   25.736000] mt7615_antenna_default_reset(): TxPath = 4, RxPath = 4
[   25.748000] mt7615_antenna_default_reset(): DBDC 2G TxPath = 2, 2G RxPath = 2
[   25.764000] mt7615_antenna_default_reset(): DBDC 5G TxPath = 2, 2G RxPath = 2
[   25.776000] rtmp_read_txpwr_from_eeprom(235): Don't Support this now!
[   25.788000] RTMPReadTxPwrPerRate(1382): Don't Support this now!
[   25.800000] RcRadioInit(): DbdcMode=1, ConcurrentBand=2
[   25.812000] RcRadioInit(): pRadioCtrl=85360444,Band=0,rfcap=1,channel=1,PhyMode=2
[   25.828000] RcRadioInit(): pRadioCtrl=85360530,Band=1,rfcap=2,channel=36,PhyMode=1
[   25.844000] MtCmdSetDbdcCtrl:(ret = 0)
[   25.852000] Band Rf: 1, Phy Mode: 2
[   25.856000] Band Rf: 2, Phy Mode: 1
[   25.864000] AntCfgInit(2700): Not support for HIF_MT yet!
[   25.876000] MtSingleSkuLoadParam: RF_LOCKDOWN Feature OFF !!!
[   25.888000] MtBfBackOffLoadTable: RF_LOCKDOWN Feature OFF !!!
[   25.900000] EEPROM Init Done!
[   25.904000] mt_mac_init()-->
[   25.912000] mt_mac_pse_init(2716): Don't Support this now!
[   25.924000] mt7615_init_mac_cr()-->
[   25.928000] mt7615_init_mac_cr(): TMAC_TRCR0=0x82783c8c
[   25.940000] mt7615_init_mac_cr(): TMAC_TRCR1=0x82783c8c
[   25.948000] MtAsicSetMacMaxLen(1290): Not finish Yet!
[   25.960000] 
[   26.124000] MtCmdSetMacTxRx:(ret = 0)
[   26.132000] MtCmdSetMacTxRx:(ret = 0)
[   26.140000] [DfsSwitchCheck]: DFS ByPass TX calibration.
[   26.152000] mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
[   26.168000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   26.180000] mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
[   26.196000] MtCmdGetTXDPDCalResult:(ret = 0)
[   26.208000] MtCmdChannelSwitch: control_chl = 36,control_ch2=0, central_chl = 42 DBDCIdx= 1, Band= 0 
[   26.224000] BW = 2,TXStream = 2, RXStream = 2, scan(1)
[   26.460000] [DfsSwitchCheck]: DFS ByPass TX calibration.
[   26.468000] mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
[   26.488000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   26.496000] mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
[   26.516000] MtCmdGetTXDPDCalResult:(ret = 0)
[   26.524000] MtCmdChannelSwitch: control_chl = 40,control_ch2=0, central_chl = 42 DBDCIdx= 1, Band= 0 
[   26.544000] BW = 2,TXStream = 2, RXStream = 2, scan(1)
[   26.776000] [DfsSwitchCheck]: DFS ByPass TX calibration.
[   26.784000] mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
[   26.804000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   26.812000] mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
[   26.832000] MtCmdGetTXDPDCalResult:(ret = 0)
[   26.840000] MtCmdChannelSwitch: control_chl = 44,control_ch2=0, central_chl = 42 DBDCIdx= 1, Band= 0 
[   26.860000] BW = 2,TXStream = 2, RXStream = 2, scan(1)
[   27.092000] [DfsSwitchCheck]: DFS ByPass TX calibration.
[   27.100000] mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
[   27.120000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   27.128000] mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
[   27.148000] MtCmdGetTXDPDCalResult:(ret = 0)
[   27.156000] MtCmdChannelSwitch: control_chl = 48,control_ch2=0, central_chl = 42 DBDCIdx= 1, Band= 0 
[   27.176000] BW = 2,TXStream = 2, RXStream = 2, scan(1)
[   27.408000] ====================================================================
[   27.420000] Channel  36 : Busy Time =  33401, Skip Channel = FALSE, BwCap = TRUE
[   27.436000] Channel  40 : Busy Time =  35610, Skip Channel = FALSE, BwCap = TRUE
[   27.452000] Channel  44 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
[   27.464000] Channel  48 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
[   27.480000] ====================================================================
[   27.496000] Rule 3 Channel Busy time value : Select Primary Channel 44 
[   27.508000] Rule 3 Channel Busy time value : Min Channel Busy = 35610
[   27.520000] Rule 3 Channel Busy time value : BW = 80
[   27.532000]  AutoChSelUpdateChannel(): Update channel for wdev0 for this band PhyMode = 49,Channel = 44  
[   27.552000]  AutoChSelUpdateChannel(): Update channel for wdev1 for this band PhyMode = 49,Channel = 44  
[   27.572000]  AutoChSelUpdateChannel(): Update channel for wdev2 for this band PhyMode = 49,Channel = 44  
[   27.592000]  AutoChSelUpdateChannel(): Update channel for wdev3 for this band PhyMode = 49,Channel = 44  
[   27.612000]  AutoChSelUpdateChannel(): Update channel for wdev4 for this band PhyMode = 14,Channel = 0  
[   27.632000]  AutoChSelUpdateChannel(): Update channel for wdev5 for this band PhyMode = 14,Channel = 0  
[   27.652000]  AutoChSelUpdateChannel(): Update channel for wdev6 for this band PhyMode = 14,Channel = 0  
[   27.672000]  AutoChSelUpdateChannel(): Update channel for wdev7 for this band PhyMode = 14,Channel = 0  
[   27.692000] mt7615_apply_dcoc() : reload Central CH [1] BW [0] from cetral freq [2417]  offset [2200] 
[   27.712000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   27.720000] mt7615_apply_dpd() : reload Central CH [1] BW [0] from cetral freq [2422] i[44] offset [4b20] 
[   27.740000] MtCmdGetTXDPDCalResult:(ret = 0)
[   27.748000] MtCmdChannelSwitch: control_chl = 1,control_ch2=0, central_chl = 1 DBDCIdx= 0, Band= 0 
[   27.768000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   28.020000] mt7615_apply_dcoc() : reload Central CH [2] BW [0] from cetral freq [2417]  offset [2200] 
[   28.036000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   28.044000] mt7615_apply_dpd() : reload Central CH [2] BW [0] from cetral freq [2422] i[44] offset [4b20] 
[   28.064000] MtCmdGetTXDPDCalResult:(ret = 0)
[   28.072000] MtCmdChannelSwitch: control_chl = 2,control_ch2=0, central_chl = 2 DBDCIdx= 0, Band= 0 
[   28.092000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   28.328000] mt7615_apply_dcoc() : reload Central CH [3] BW [0] from cetral freq [2417]  offset [2200] 
[   28.344000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   28.352000] mt7615_apply_dpd() : reload Central CH [3] BW [0] from cetral freq [2422] i[44] offset [4b20] 
[   28.372000] MtCmdGetTXDPDCalResult:(ret = 0)
[   28.380000] MtCmdChannelSwitch: control_chl = 3,control_ch2=0, central_chl = 3 DBDCIdx= 0, Band= 0 
[   28.400000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   28.636000] mt7615_apply_dcoc() : reload Central CH [4] BW [0] from cetral freq [2432]  offset [2300] 
[   28.652000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   28.660000] mt7615_apply_dpd() : reload Central CH [4] BW [0] from cetral freq [2422] i[44] offset [4b20] 
[   28.680000] MtCmdGetTXDPDCalResult:(ret = 0)
[   28.688000] MtCmdChannelSwitch: control_chl = 4,control_ch2=0, central_chl = 4 DBDCIdx= 0, Band= 0 
[   28.708000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   29.004000] mt7615_apply_dcoc() : reload Central CH [5] BW [0] from cetral freq [2432]  offset [2300] 
[   29.020000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   29.028000] mt7615_apply_dpd() : reload Central CH [5] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
[   29.048000] MtCmdGetTXDPDCalResult:(ret = 0)
[   29.056000] MtCmdChannelSwitch: control_chl = 5,control_ch2=0, central_chl = 5 DBDCIdx= 0, Band= 0 
[   29.076000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   29.312000] mt7615_apply_dcoc() : reload Central CH [6] BW [0] from cetral freq [2432]  offset [2300] 
[   29.328000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   29.336000] mt7615_apply_dpd() : reload Central CH [6] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
[   29.356000] MtCmdGetTXDPDCalResult:(ret = 0)
[   29.364000] MtCmdChannelSwitch: control_chl = 6,control_ch2=0, central_chl = 6 DBDCIdx= 0, Band= 0 
[   29.384000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   29.620000] mt7615_apply_dcoc() : reload Central CH [7] BW [0] from cetral freq [2447]  offset [2400] 
[   29.636000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   29.644000] mt7615_apply_dpd() : reload Central CH [7] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
[   29.664000] MtCmdGetTXDPDCalResult:(ret = 0)
[   29.672000] MtCmdChannelSwitch: control_chl = 7,control_ch2=0, central_chl = 7 DBDCIdx= 0, Band= 0 
[   29.692000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   29.928000] mt7615_apply_dcoc() : reload Central CH [8] BW [0] from cetral freq [2447]  offset [2400] 
[   29.944000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   29.952000] mt7615_apply_dpd() : reload Central CH [8] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
[   29.972000] MtCmdGetTXDPDCalResult:(ret = 0)
[   29.980000] MtCmdChannelSwitch: control_chl = 8,control_ch2=0, central_chl = 8 DBDCIdx= 0, Band= 0 
[   30.000000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   30.236000] mt7615_apply_dcoc() : reload Central CH [9] BW [0] from cetral freq [2447]  offset [2400] 
[   30.252000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   30.260000] mt7615_apply_dpd() : reload Central CH [9] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
[   30.280000] MtCmdGetTXDPDCalResult:(ret = 0)
[   30.288000] MtCmdChannelSwitch: control_chl = 9,control_ch2=0, central_chl = 9 DBDCIdx= 0, Band= 0 
[   30.308000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   30.544000] mt7615_apply_dcoc() : reload Central CH [10] BW [0] from cetral freq [2467]  offset [2500] 
[   30.560000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   30.568000] mt7615_apply_dpd() : reload Central CH [10] BW [0] from cetral freq [2462] i[46] offset [4cd0] 
[   30.588000] MtCmdGetTXDPDCalResult:(ret = 0)
[   30.600000] MtCmdChannelSwitch: control_chl = 10,control_ch2=0, central_chl = 10 DBDCIdx= 0, Band= 0 
[   30.616000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   30.868000] mt7615_apply_dcoc() : reload Central CH [11] BW [0] from cetral freq [2467]  offset [2500] 
[   30.884000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   30.892000] mt7615_apply_dpd() : reload Central CH [11] BW [0] from cetral freq [2462] i[46] offset [4cd0] 
[   30.912000] MtCmdGetTXDPDCalResult:(ret = 0)
[   30.920000] MtCmdChannelSwitch: control_chl = 11,control_ch2=0, central_chl = 11 DBDCIdx= 0, Band= 0 
[   30.940000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   31.176000] ====================================================================
[   31.188000] Channel   1 : Busy Time =   3289, Skip Channel = FALSE, BwCap = TRUE
[   31.204000] Channel   2 : Busy Time =   3439, Skip Channel = FALSE, BwCap = TRUE
[   31.220000] Channel   3 : Busy Time =   2151, Skip Channel = FALSE, BwCap = TRUE
[   31.232000] Channel   4 : Busy Time =   2921, Skip Channel = FALSE, BwCap = TRUE
[   31.248000] Channel   5 : Busy Time =   1337, Skip Channel = FALSE, BwCap = TRUE
[   31.264000] Channel   6 : Busy Time =  25049, Skip Channel = FALSE, BwCap = TRUE
[   31.276000] Channel   7 : Busy Time =   2445, Skip Channel = FALSE, BwCap = TRUE
[   31.292000] Channel   8 : Busy Time =   1901, Skip Channel = FALSE, BwCap = TRUE
[   31.308000] Channel   9 : Busy Time =   2187, Skip Channel = FALSE, BwCap = TRUE
[   31.320000] Channel  10 : Busy Time =   2439, Skip Channel = FALSE, BwCap = TRUE
[   31.336000] Channel  11 : Busy Time =   2310, Skip Channel = FALSE, BwCap = TRUE
[   31.352000] ====================================================================
[   31.364000] Rule 3 Channel Busy time value : Select Primary Channel 5 
[   31.380000] Rule 3 Channel Busy time value : Min Channel Busy = 1337
[   31.392000] Rule 3 Channel Busy time value : BW = 20
[   31.400000]  AutoChSelUpdateChannel(): Update channel for wdev0 for this band PhyMode = 49,Channel = 44  
[   31.420000]  AutoChSelUpdateChannel(): Update channel for wdev1 for this band PhyMode = 49,Channel = 44  
[   31.444000]  AutoChSelUpdateChannel(): Update channel for wdev2 for this band PhyMode = 49,Channel = 44  
[   31.464000]  AutoChSelUpdateChannel(): Update channel for wdev3 for this band PhyMode = 49,Channel = 44  
[   31.484000]  AutoChSelUpdateChannel(): Update channel for wdev4 for this band PhyMode = 14,Channel = 5  
[   31.504000]  AutoChSelUpdateChannel(): Update channel for wdev5 for this band PhyMode = 14,Channel = 5  
[   31.524000]  AutoChSelUpdateChannel(): Update channel for wdev6 for this band PhyMode = 14,Channel = 5  
[   31.544000]  AutoChSelUpdateChannel(): Update channel for wdev7 for this band PhyMode = 14,Channel = 5  
[   31.564000] ApAutoChannelAtBootUp<-----------------
[   31.576000] WifiSysOpen(), wdev idx = 0
[   31.580000] wdev_attr_update(): wdevId0 = 34:76:c5:cc:a9:f5
[   31.592000] MtCmdSetDbdcCtrl:(ret = 0)
[   31.600000] Current Channel is 44. DfsZeroWaitSupport=0
[   31.612000] MtAsicSetChBusyStat(842): Not support for HIF_MT yet!
[   31.624000] MtAsicSetChBusyStat(842): Not support for HIF_MT yet!
[   31.636000] [PMF]APPMFInit:: apidx=0, MFPC=0, MFPR=0, SHA256=0
[   31.648000] [PMF]WPAMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
[   31.660000] HcUpdatePhyMode(): Update PhyMode for all wdev for this band PhyMode:49,Channel=44
[   31.676000] CountryCode(2.4G/5G)=1/1, RFIC=25, PHY mode(2.4G/5G)=14/49, support 32 channels
[   31.696000] wtc_acquire_groupkey_wcid: Found a non-occupied wtbl_idx:127 for WDEV_TYPE:1
[   31.696000]  LinkToOmacIdx = 0, LinkToWdevType = 1
[   31.724000] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO),                 CmdBssInfoBmcRate.u2BcTransmit= 8192,                 CmdBssInfoBmcRate.u2McTransmit = 8192
[   31.756000] MtCmdSetDbdcCtrl:(ret = 0)
[   31.856000] [RadarStateCheck]Set into RD_NORMAL_MODE
[   31.864000] MtCmdTxPowerSKUCtrl: fgTxPowerSKUEn: 1, BandIdx: 1
[   31.876000] MtCmdTxPowerPercentCtrl: fgTxPowerPercentEn: 1, BandIdx: 1
[   31.888000] MtCmdTxBfBackoffCtrl: fgTxBFBackoffEn: 0, BandIdx: 1
[   31.900000] mt7615_bbp_adjust():rf_bw=2, ext_ch=1, PrimCh=44, HT-CentCh=46, VHT-CentCh=42
[   31.916000] mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
[   31.936000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   31.944000] mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
[   31.964000] MtCmdGetTXDPDCalResult:(ret = 0)
[   31.972000] MtCmdChannelSwitch: control_chl = 44,control_ch2=0, central_chl = 42 DBDCIdx= 1, Band= 0 
[   31.992000] BW = 2,TXStream = 2, RXStream = 2, scan(0)
[   32.048000] ap_phy_rrm_init_byRf(): AP Set CentralFreq at 42(Prim=44, HT-CentCh=46, VHT-CentCh=42, BBP_BW=2)
[   32.080000] [WrapDfsRadarDetectStart]: Band0Ch is 44[WrapDfsRadarDetectStart]: Band1Ch is 0LeadTimeForBcn, OmacIdx = 0, WDEV_WITH_BCN_ABILITY
[   32.108000] MtAsicSetRalinkBurstMode(2595): Not support for HIF_MT yet!
[   32.120000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[   32.132000] MtAsicSetTxPreamble(2574): Not support for HIF_MT yet!
[   32.144000] Main bssid = 34:76:c5:cc:a9:f5
[   32.164000] AsicRadioOnOffCtrl(): DbdcIdx=1 RadioOn
[   32.176000] MtCmdSetMacTxRx:(ret = 0)
[   32.180000] MtCmdSetMacTxRx:(ret = 0)
[   32.188000] fdb_enable()
[   32.492000] MCS Set = ff ff 00 00 01
[   32.500000]  VirtualIF_close
[   41.844000] led=9, on=4000, off=0, blinks,=0, reset=0, time=1 low_trigger=0
[   43.308000] ESW: Link Status Changed - Port2 Link UP

WR8175N

ふらっと花小金井のハードオフに行った際に見つけ、5chの情報からAR9341ということを把握しており確保したもの。有線はFEながらUSBポートを搭載しており、また2.4GHz帯のみのためWR8750N等の様な複雑さは無いと思われる。
弄っていくのでメモ。

Switch

未確認。

MAC

  • LAN: 1C:B1:7F:xx:xx:54 (config, 0x6 (hex))
  • WAN: 1C:B1:7F:xx:xx:55 (config, 0xc (hex))
  • 2.4G: 1C:B1:7F:xx:xx:56 (config, 0x0 (hex) / art, 0x1002 (hex))

Bootloader

chiron

  • help
    boot> help
    support commands ...
    load             load module
    boot             boot loaded module
    tftpd            start tftpd [tftpd [IP] [bfn]]
    dlmode           set tftpd download mode [bfn]
    reboot           reboot system
    help             help command
    macaddr          macaddr read/write
    configid         configid read/write
    randomkey        randomkey read/write
    serial           serial number read/write
    pkg_info         show package information
    presetid         preset id read/write
    version          show boot version
    mhx              mhx utility
    tp               test program
    errorlog         errorlog command
    additional       additional command
    rf-serial        rf-serial command
    time             Time command
    debug            debug command
    ?                help command
    

  • version
    boot> version
    boot version: 1.0.0
    system version: 2.54.5
    TP Version = 1.0.0
    

  • pkg_info
    boot> pkg_info
      PKG NAME : SkyU-HP
      CPU   : Atheros/AR9341
      RAM   : 64Mbyte
      Flash : 4Mbyte
        Device         : MX25L3205DMI(Macronix)
        Top Address    : 0xbfc00000
        Config Address : 0xbfc20000
        System Address : 0xbfc40000
      Ether PHY : Atheros/AR934x(SW)
      DIPSW : 0x1
    

  • debug ?
    boot> debug ?
    support commands ...
    memory           memory read/write
    flash            flash driver r/w
    fs               file system r/w
    load             load test (calc chksum)
    exception        exception
    register         display register
    watchdog         do watchdog reset
    tlb              tlb register
    cache            cache control
    mii              mii control
    l2sw             l2sw control
    ether            ether control
    btimer_start     test btimer
    btimer_stop      test btimer
    

  • debug fs ls
    boot> debug fs ls
    Firmware            3406168 bytes
    config.har             1052 bytes
    total 3932160, avail 392832 bytes
    

  • debug memory read 0xb8040000 70
    boot> debug memory read 0xb8040000 70
    b8040000:00030b01 0063ee3f 0064e01e 00000000 .....c.?.d......
    b8040010:00000000 00000000 00000000 00000000 ................
    b8040020:00000000 00000000 000f8000 2a2b2c00 ............*+,.
    b8040030:0b0a0929 00180000 00000000 2f2e0000 ...)......../...
    b8040040:002d0000 00000908 00000000 00000000 .-..............
    b8040050:00000c0b 00000000 00000000 00000000 ................
    b8040060:00000000 0d0f110e 00000000 00000002 ................
    boot> tftpd
    phy1.0: "Atheros/AR934x(SW)"
    phy1.4: "Atheros/AR934x(phy)"
    active ch:1
    tftpd start 192.168.0.1
    boot> debug memory read 0xb8040000 70
    b8040000:00030b01 0063ee37 0064e01e 00000000 .....c.7.d......
    b8040010:00000000 00000000 00000000 00000000 ................
    b8040020:00000000 00000000 00068000 2a2b2c00 ............*+,.
    b8040030:0b0a0929 00180000 00000000 2f2e0000 ...)......../...
    b8040040:002d0000 00000908 00000000 00000000 .-..............
    b8040050:00000c0b 00000000 00000000 00000000 ................
    b8040060:00000000 0d0f110e 00000000 00000002 ................
    

  • debug memory read 0xb8070000 4
    boot> debug memory read 0xb8070000 4 
    b8070000:00003000                            ..0.
    

  • debug memory read 0xb8060000 bc
    (before tp usb)

    boot> debug memory read 0xb8060000 bc
    b8060000:000207dc 00061a80 00000003 09896140 ..............a@
    b8060010:003fffdd 00000000 00000020 24044830 .?......... $.H0
    b8060020:00000000 00000000 00000000 00000000 ................
    b8060030:00000000 00000000 00000000 00000000 ................
    b8060040:00000000 00000000 00000000 00000000 ................
    b8060050:00000000 00000000 00000000 00000000 ................
    b8060060:00000000 00000000 00000000 00000000 ................
    b8060070:00000000 00000000 00000000 00000000 ................
    b8060080:00000000 00000000 00000000 00000000 ................
    b8060090:00000121 00000000 00000000 00000000 ...!............
    b80600a0:00000000 00000000 00000000 00000000 ................
    b80600b0:00bf0556 00000000 00000000          ...V........
    

    (aftertp usb)

    boot> debug memory read 0xb8060000 bc
    b8060000:00017cd8 00061a80 00000003 09896124 ..|...........a$
    b8060010:003fffdd 00000000 00000020 24044008 .?......... $.@.
    b8060020:00000000 00000000 00000000 00000000 ................
    b8060030:00000000 00000000 00000000 00000000 ................
    b8060040:00000000 00000000 00000000 00000000 ................
    b8060050:00000000 00000000 00000000 00000000 ................
    b8060060:00000000 00000000 00000000 00000000 ................
    b8060070:00000000 00000000 00000000 00000000 ................
    b8060080:00000000 00000000 00000000 00000000 ................
    b8060090:00000121 00000000 00000000 00000000 ...!............
    b80600a0:00000000 00000000 00000000 00000000 ................
    b80600b0:00bf0556 00000000 00000000          ...V........
    

Kernel (NetBSD)

  • Bootlog
    IPL:HARD-RESET
    memory test ... ok
    flinstall OK
    
    boot version: 1.0.0
    
    PKG "SkyU-HP"
    CPU "Atheros/AR9341"
    Revision 12.1 CLOCK 535.0 MHz
    HEAP MEMORY 262144 bytes
    Boot:InitFilesystem
    phy1.0: "Atheros/AR934x(SW)"
    phy1.4: "Atheros/AR934x(phy)"
    active ch:1
    post start
    DRAM Test ..... PASS
    Timer test .... PASS
    FLASH CHKSUM .. PASS
    LAN Test ..... 
    LoopBack count 0 .. 
    phy1.0: "Atheros/AR934x(SW)"
    phy1.4: "Atheros/AR934x(phy)"
    active ch:0
    active ch:1
    phy1.0: "Atheros/AR934x(SW)"
    phy1.4: "Atheros/AR934x(phy)"
    active ch:1
    PASS
    Package TYPE = 0x00
    post success
    now booting Firmware ...
    loaded Firmware
    config=0x80208483 status=0x00000000
    mips_pdcache_write_through=0
    mips_picache_line_size=32 mips_pdcache_line_size=32
      pagemask: 0x00000000
      status: 0x00000000
      config: 0x80208483
      cause: 0x00000000
    load memory 0x176d000, 0x2893000
    load memory 0x1000, 0x5f000
    Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002
        The NetBSD Foundation, Inc.  All rights reserved.
    Copyright (c) 1982, 1986, 1989, 1991, 1993
        The Regents of the University of California.  All rights reserved.
    
    NetBSD 1.6.1 (SKYU.tmp) #0: 2012-03-13 17:00:31 JST
        ******@***-**-*****:/home/******/skyu/git/hituji/build/skyu/kernel-obj/SKYU.tmp
    
    total memory = 65536 KB
    avail memory = 36368 KB
    using 1024 buffers containing 4096 KB of memory
    mainbus0 (root)
    cpu0 at mainbus0: MIPS 74Kc (0x1974c) Rev. 76 with software emulated floating point
    cpu0: 64KB/32B 4-way set-associative L1 Instruction cache, 32 TLB entries
    cpu0: 32KB/32B 4-way set-associative write-back L1 Data cache
    arspi0 at mainbus0
    arflash0 at mainbus0 addr 0xbfc00000 size 4194304 bytes
    flash: id 0xc2 type 0x15 addr 0xbfc00000 size 4194304 bytes
    pfmg: carrier mode 0 pkgid 0x900 configid 0xff
    arrtc0 at mainbus0
    argiu0 at mainbus0
    arled0 at argiu0
    btnu0 at argiu0 port 0
    btnu1 at argiu0 port 16
    btnu2 at argiu0 port 17
    athq0 at mainbus0
    athq0: WLAN MAC ADDRESS (1c:b1:7f:4c:b1:56)
    Restoring Cal data from Flash
    dfs_attach: use DFS enhancements
    DFS min filter rssiThresh = 18
    DFS max pulse dur = 151 ticks
    ath_get_caps[5049] rx chainmask mismatch actual 3 sc_chainmak 0
    ath_get_caps[5024] tx chainmask mismatch actual 3 sc_chainmak 0
    athq0: LSDK-9.2.0_U8.834 mac 768.0 phy 534.0 radio 0.0
     chan  Freq     HT                       DFS
     1     2412nbg  HT20 HT40PLUS            N
     2     2417nbg  HT20 HT40PLUS            N
     3     2422nbg  HT20 HT40PLUS            N
     4     2427nbg  HT20 HT40PLUS            N
     5     2432nbg  HT20 HT40PLUS HT40MINUS  N
     6     2437nbg  HT20 HT40PLUS HT40MINUS  N
     7     2442nbg  HT20 HT40PLUS HT40MINUS  N
     8     2447nbg  HT20 HT40PLUS HT40MINUS  N
     9     2452nbg  HT20 HT40PLUS HT40MINUS  N
     10    2457nbg  HT20          HT40MINUS  N
     11    2462nbg  HT20          HT40MINUS  N
     12    2467nbg  HT20          HT40MINUS  N
     13    2472nbg  HT20          HT40MINUS  N
    athq0: Atheros 9340: memt=0x80364b00, memh=0xb8100000 
    com0 at mainbus0: ns16550a, working fifo
    com0: console
    ehci0 at mainbus0ehci0: EHCI version 1.0
    usb0 at ehci0: USB revision 2.0
    uhub0 at usb0
    uhub0: AR7100 EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
    uhub0: 1 port with 1 removable, self powered
    ageth1 at mainbus0
    ath2swlphy0 at ageth1 phy 0: Atheros AR934x 10/100 L2SW, rev. 2
    ath2swlphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto, 100baseTX-FDX FLAG0, 100baseTX-FDX FLAG1
    ageth0 at mainbus0
    ath2swsphy0 at ageth0 phy 4: Atheros AR934x 10/100 L2SW, rev. 2
    ath2swsphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
    rtc: CLOCK INITIALIZED 
    kevt0: 
    logbuf: using 655360 bytes logging area
    md0: internal 19456 KB image area
    uhub1 at uhub0 port 1
    uhub1: vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2
    uhub1: single transaction translator
    uhub1: 4 ports with 4 removable, self powered
    boot device: 
    root on md0a dumps on md0b
    root file system type: ffs
    Sun Jan  1 00:00:02 JST 2012
    /usr/local/www/.htpasswd file not exists.(ignore)
    Setting tty flags.
    Building databases...
    wlan_vap_create : enter. devhandle=0x817456e0, opmode=IEEE80211_M_HOSTAP, flags=0x1
    wlan_vap_create : exit. devhandle=0x817456e0, opmode=IEEE80211_M_HOSTAP, flags=0x1.
    wlan_vap_create : enter. devhandle=0x817456e0, opmode=IEEE80211_M_HOSTAP, flags=0x1
    wlan_vap_create : exit. devhandle=0x817456e0, opmode=IEEE80211_M_HOSTAP, flags=0x1.
    Starting wificonfig
    encrypt key mode AES
    Starting evtmgr.
    Starting dlnamgr.
    Starting clid.
    Starting inetd.
    Starting procmon.
    Starting wzcm.
    Sun Jan  1 00:00:06 JST 2012
    
    NetBSD/messimips (Amnesiac) (console)
    
    login: 
    

WSR-2533DHPL

とある方より、誕生日プレゼントとして頂いたもの。WSR-2533DHPからのリネームとされているものの、DHPは確認していないので全く同一なのかは不明。
DHP2と一緒にまったり弄っていくのでメモ。

Switch

未確認

MAC

  • LAN: 18:C2:BF:xx:xx:E0 (board_data, mac (text))
  • WAN: 18:C2:BF:xx:xx:E0 (board_data, mac (text))
  • 2.4G: 18:C2:BF:xx:xx:E1 (Factory, 0x4 (hex))
  • 5G: 18:C2:BF:xx:xx:E4 (Factory, 0x8004 (text))

U-Boot

  • help
    MT7621 # help
    ?       - alias for 'help'
    bootm   - boot application image from memory
    cp      - memory copy
    erase   - erase SPI FLASH memory
    go      - start application at address 'addr'
    help    - print online help
    loadb   - load binary file over serial line (kermit mode)
    md      - memory display
    mdio   - Ralink PHY register R/W command !!
    mm      - memory modify (auto-incrementing)
    nm      - memory modify (constant address)
    printenv- print environment variables
    reset   - Perform RESET of the CPU
    rf      - read/write rf register
    saveenv - save environment variables to persistent storage
    setenv  - set environment variables
    spi     - spi command
    tftpboot- boot image via network using TFTP protocol
    version - print monitor version
    

  • version
    MT7621 # version
    
    U-Boot 1.1.3 (Aug  5 2016 - 17:01:25) 0.02
    

  • printenv
    MT7621 # printenv
    bootcmd=tftp
    bootdelay=5
    baudrate=57600
    ethaddr="00:AA:BB:CC:DD:10"
    ipaddr=192.168.11.1
    serverip=192.168.11.2
    bootfile="linux.trx-recovery"
    bootpartition=0
    bootversion=0.02
    stdin=serial
    stdout=serial
    stderr=serial
    
    Environment size: 214/4092 bytes
    

Kernel

  • uname -a
    root@localhost:/# uname -a
    Linux localhost 2.6.36 #1 SMP Fri Dec 7 12:26:30 CST 2018 mips GNU/Linux
    

  • cat /proc/version
    root@localhost:/# cat /proc/version
    Linux version 2.6.36 (*******_*****@***-build-01) (gcc version 4.6.3 (Buildroot 2012.11.1) ) #1 SMP Fri Dec 7 12:26:30 CST 2018
    

  • cat /proc/cpuinfo
    root@localhost:/# cat /proc/cpuinfo
    system type             : MT7621
    processor               : 0
    cpu model               : MIPS 1004Kc V2.15
    BogoMIPS                : 583.68
    wait instruction        : yes
    microsecond timers      : yes
    tlb_entries             : 32
    extra interrupt vector  : yes
    hardware watchpoint     : yes, count: 4, address/irw mask: [0x0000, 0x0004, 0x0003, 0x0003]
    ASEs implemented        : mips16 dsp mt
    shadow register sets    : 1
    core                    : 0
    VCED exceptions         : not available
    VCEI exceptions         : not available
    
    processor               : 1
    cpu model               : MIPS 1004Kc V2.15
    BogoMIPS                : 583.68
    wait instruction        : yes
    microsecond timers      : yes
    tlb_entries             : 32
    extra interrupt vector  : yes
    hardware watchpoint     : yes, count: 4, address/irw mask: [0x0000, 0x0000, 0x0000, 0x0003]
    ASEs implemented        : mips16 dsp mt
    shadow register sets    : 1
    core                    : 0
    VCED exceptions         : not available
    VCEI exceptions         : not available
    
    processor               : 2
    cpu model               : MIPS 1004Kc V2.15
    BogoMIPS                : 583.68
    wait instruction        : yes
    microsecond timers      : yes
    tlb_entries             : 32
    extra interrupt vector  : yes
    hardware watchpoint     : yes, count: 4, address/irw mask: [0x0000, 0x0000, 0x0000, 0x0000]
    ASEs implemented        : mips16 dsp mt
    shadow register sets    : 1
    core                    : 1
    VCED exceptions         : not available
    VCEI exceptions         : not available
    
    processor               : 3
    cpu model               : MIPS 1004Kc V2.15
    BogoMIPS                : 583.68
    wait instruction        : yes
    microsecond timers      : yes
    tlb_entries             : 32
    extra interrupt vector  : yes
    hardware watchpoint     : yes, count: 4, address/irw mask: [0x0000, 0x0000, 0x0ffb, 0x0ffb]
    ASEs implemented        : mips16 dsp mt
    shadow register sets    : 1
    core                    : 1
    VCED exceptions         : not available
    VCEI exceptions         : not available
    

  • cat /proc/meminfo
    root@localhost:/# cat /proc/meminfo 
    MemTotal:         122624 kB
    MemFree:           62796 kB
    Buffers:            3636 kB
    Cached:            11320 kB
    SwapCached:            0 kB
    Active:            12084 kB
    Inactive:           9920 kB
    Active(anon):       7268 kB
    Inactive(anon):      480 kB
    Active(file):       4816 kB
    Inactive(file):     9440 kB
    Unevictable:           0 kB
    Mlocked:               0 kB
    SwapTotal:             0 kB
    SwapFree:              0 kB
    Dirty:                 0 kB
    Writeback:             0 kB
    AnonPages:          7048 kB
    Mapped:             3816 kB
    Shmem:               700 kB
    Slab:              26816 kB
    SReclaimable:       2980 kB
    SUnreclaim:        23836 kB
    KernelStack:         896 kB
    PageTables:          732 kB
    NFS_Unstable:          0 kB
    Bounce:                0 kB
    WritebackTmp:          0 kB
    CommitLimit:       61312 kB
    Committed_AS:      16496 kB
    VmallocTotal:    1048372 kB
    VmallocUsed:        9736 kB
    VmallocChunk:    1037932 kB
    

  • cat /proc/mtd
    root@localhost:/# cat /proc/mtd
    dev:    size   erasesize  name
    mtd0: 01000000 00010000 "ALL"
    mtd1: 00030000 00010000 "Bootloader"
    mtd2: 00010000 00010000 "Config"
    mtd3: 00010000 00010000 "Factory"
    mtd4: 007c0000 00010000 "Kernel"
    mtd5: 0053b8f0 00010000 "RootFS"
    mtd6: 007c0000 00010000 "Kernel2"
    mtd7: 0053b8f0 00010000 "RootFS2"
    mtd8: 00010000 00010000 "glbcfg"
    mtd9: 00010000 00010000 "board_data"
    

  • switch –help
    swconfigコマンドは存在せず。

    root@localhost:/# switch --help
    Usage:
     switch acl etype add [ethtype] [portmap]              - drop etherytype packets
     switch acl dip add [dip] [portmap]                    - drop dip packets
     switch acl dip meter [dip] [portmap][meter:kbps]      - rate limit dip packets
     switch acl dip trtcm [dip] [portmap][CIR:kbps][CBS][PIR][PBS] - TrTCM dip packets
     switch acl port add [sport] [portmap]           - drop src port packets
     switch acl L4 add [2byes] [portmap]             - drop L4 packets with 2bytes payload
     switch add [mac] [portmap]                  - add an entry to switch table
     switch add [mac] [portmap] [vlan id]        - add an entry to switch table
     switch add [mac] [portmap] [vlan id] [age]  - add an entry to switch table
     switch clear                                - clear switch table
     switch del [mac]                            - delete an entry from switch table
     switch del [mac] [fid]                  - delete an entry from switch table
     switch dip add [dip] [portmap]                  - add a dip entry to switch table
     switch dip del [dip]                        - del a dip entry to switch table
     switch dip dump                                 - dump switch dip table
     switch dip clear                                - clear switch dip table
     switch dump            - dump switch table
     switch ingress-rate on [port] [Kbps]        - set ingress rate limit on port 0~4 
     switch egress-rate on [port] [Kbps]         - set egress rate limit on port 0~4 
     switch ingress-rate off [port]              - del ingress rate limit on port 0~4 
     switch egress-rate off [port]               - del egress rate limit on port 0~4
     switch filt [mac]                           - add a SA filtering entry (with portmap 1111111) to switch table
     switch filt [mac] [portmap]                 - add a SA filtering entry to switch table
     switch filt [mac] [portmap] [vlan id]       - add a SA filtering entry to switch table
     switch filt [mac] [portmap] [vlan id] [age] - add a SA filtering entry to switch table
     switch igmpsnoop on [Query Interval] [default router portmap] - turn on IGMP snoop and  router port learning (Query Interval 1~255)
     switch igmpsnoop off                                  - turn off IGMP snoop and router port learning
     switch igmpsnoop enable [port#]                       - enable IGMP HW leave/join/Squery/Gquery
     switch igmpsnoop disable [port#]                      - disable IGMP HW leave/join/Squery/Gquery
     switch mymac [mac] [portmap]                  - add a mymac entry to switch table
     switch mirror monitor [portnumber]            - enable port mirror and indicate monitor port number
     switch mirror target [portnumber] [0:off, 1:rx, 2:tx, 3:all]  - set port mirror target
     switch phy [phy_addr]                   - dump phy register of specific port
     switch phy mt7530                       - dump mt7530 phy registers
     switch phy                                      - dump all phy registers
     switch pvid [port] [pvid]                - set pvid on port 0~4 
     switch reg r [offset]                       - register read from offset
     switch reg w [offset] [value]               - register write value to offset
     switch reg d [offset]                       - register dump
     switch sip add [sip] [dip] [portmap]            - add a sip entry to switch table
     switch sip del [sip] [dip]                          - del a sip entry to switch table
     switch sip dump                                 - dump switch sip table
     switch sip clear                                - clear switch sip table
     switch tag on [port]                        - keep vlan tag for egress packet on prot 0~4
     switch tag off [port]                       - remove vlan tag for egress packet on port 0~4
     switch vlan dump                            - dump switch table
     switch vlan set [vlan idx (NULL)][vid] [portmap]  - set vlan id and associated member
    

  • switch vlan dump
    (router mode)

    root@localhost:/# switch vlan dump
      vid  fid  portmap    s-tag
        1    0  -1111-11       0
        2    0  1----1--       0
        3    0  invalid
        4    0  invalid
        5    0  invalid
        6    0  invalid
        7    0  invalid
        8    0  invalid
        9    0  invalid
       10    0  invalid
       11    0  invalid
       12    0  invalid
       13    0  invalid
       14    0  invalid
       15    0  invalid
       16    0  invalid
    

  • cat /etc/gpio/button_map.txt
    root@localhost:/# cat /etc/gpio/button_map.txt 
    #button should be define link this
    #name=gpio
    #active=[low/high]
    #spec=duration
    #the order of the keywords are critical
    
    #define the button "wps"
    wps_sgl=6
    active=low
    spec=1000
    
    #define the button "default"
    default_sgl=3
    active=low
    spec=3000
    
    #define the button power
    poweroff_sgl=18
    active=high
    spec=300
    
    #define the switch "auto mode"
    automode=7
    active=low
    spec=0
    
    #define 1st pin of swtich "ap mode"
    apmode_sw0=12
    cowork=10
    spec=0
    
    #define 2nd pin of switch "ap mode"
    apmode_sw1=10
    cowork=12
    spec=0
    
  • bootlog
    ===================================================================
                    MT7621   stage1 code 10:33:55 (ASIC)
                    CPU=500000000 HZ BUS=166666666 HZ
    ==================================================================
    Change MPLL source from XTAL to CR...
    do MEMPLL setting..
    MEMPLL Config : 0x11100000
    3PLL mode + External loopback
    === XTAL-40Mhz === DDR-1200Mhz ===
    PLL2 FB_DL: 0xc, 1/0 = 539/485 31000000
    PLL3 FB_DL: 0x16, 1/0 = 754/270 59000000
    PLL4 FB_DL: 0x17, 1/0 = 532/492 5D000000
    do DDR setting..[01F40000]
    Apply DDR3 Setting...(use customer AC)
              0    8   16   24   32   40   48   56   64   72   80   88   96  104  112  120
          --------------------------------------------------------------------------------
    0000:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    0001:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    0002:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    0003:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    0004:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    0005:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    0006:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    0007:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    0008:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    0009:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    000A:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    000B:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    000C:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    000D:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    1
    000E:|    0    0    0    0    0    0    0    0    0    1    1    1    1    1    1    1
    000F:|    0    0    0    0    1    1    1    1    1    1    1    1    1    1    0    0
    0010:|    1    1    1    1    1    1    1    1    1    0    0    0    0    0    0    0
    0011:|    1    1    1    1    0    0    0    0    0    0    0    0    0    0    0    0
    0012:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    0013:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    0014:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    0015:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    0016:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    0017:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    0018:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    0019:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    001A:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    001B:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    001C:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    001D:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    001E:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    001F:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
    rank 0 coarse = 15
    rank 0 fine = 72
    B:|    0    0    0    0    0    0    0    0    0    1    1    1    0    0    0    0
    opt_dle value:10
    DRAMC_R0DELDLY[018]=00001E1F
    ==================================================================
                    RX      DQS perbit delay software calibration 
    ==================================================================
    1.0-15 bit dq delay value
    ==================================================================
    bit|     0  1  2  3  4  5  6  7  8  9
    --------------------------------------
    0 |    13 13 15 15 11 12 13 11 9 10 
    10 |    12 11 13 13 11 12 
    --------------------------------------
    
    ==================================================================
    2.dqs window
    x=pass dqs delay value (min~max)center 
    y=0-7bit DQ of every group
    input delay:DQS0 =31 DQS1 = 30
    ==================================================================
    bit     DQS0     bit      DQS1
    0  (1~59)30  8  (1~56)28
    1  (1~57)29  9  (1~55)28
    2  (1~61)31  10  (1~60)30
    3  (1~61)31  11  (0~57)28
    4  (1~60)30  12  (1~60)30
    5  (1~59)30  13  (1~56)28
    6  (1~61)31  14  (1~60)30
    7  (1~60)30  15  (1~57)29
    ==================================================================
    3.dq delay value last
    ==================================================================
    bit|    0  1  2  3  4  5  6  7  8   9
    --------------------------------------
    0 |    14 15 15 15 12 13 13 12 11 12 
    10 |    12 13 13 15 11 13 
    ==================================================================
    ==================================================================
         TX  perbyte calibration 
    ==================================================================
    DQS loop = 15, cmp_err_1 = ffff0000 
    dqs_perbyte_dly.last_dqsdly_pass[0]=15,  finish count=1 
    dqs_perbyte_dly.last_dqsdly_pass[1]=15,  finish count=2 
    DQ loop=15, cmp_err_1 = ffff01ae
    DQ loop=14, cmp_err_1 = ffff0180
    DQ loop=13, cmp_err_1 = ffff0180
    DQ loop=12, cmp_err_1 = ffff0000
    dqs_perbyte_dly.last_dqdly_pass[0]=12,  finish count=1 
    dqs_perbyte_dly.last_dqdly_pass[1]=12,  finish count=2 
    byte:0, (DQS,DQ)=(9,8)
    byte:1, (DQS,DQ)=(9,8)
    20,data:99
    [EMI] DRAMC calibration passed
    
    ===================================================================
                    MT7621   stage1 code done 
                    CPU=500000000 HZ BUS=166666666 HZ
    ===================================================================
    
    
    U-Boot 1.1.3 (Aug  5 2016 - 17:01:25) 0.02
    
    Board: Ralink APSoC DRAM:  128 MB
    relocate_code Pointer at: 87fb8000
    
    Config XHCI 40M PLL 
    ******************************
    Software System Reset Occurred
    ******************************
    flash manufacture id: ef, device id 40 18
    find flash: W25Q128BV
    ============================================ 
    Ralink UBoot Version: 5.0.0.0
    -------------------------------------------- 
    ASIC MT7621A DualCore (MAC to MT7530 Mode)
    DRAM_CONF_FROM: Auto-Detection 
    DRAM_TYPE: DDR3 
    DRAM bus: 16 bit
    Xtal Mode=3 OCP Ratio=1/3
    Flash component: 16 MBytes NOR Flash
    Date:Aug  5 2016  Time:17:01:25
    ============================================ 
    icache: sets:256, ways:4, linesz:32 ,total:32768
    dcache: sets:256, ways:4, linesz:32 ,total:32768 
    
     ##### The CPU freq = 880 MHZ #### 
     estimate memory size =128 Mbytes
    #Reset_MT7530
    set LAN/WAN WLLLL
    
    Please choose the operation: 
       1: Load system code to SDRAM via TFTP. 
       2: Load system code then write to Flash via TFTP. 
       3: Boot system code via Flash (default).
       4: Entr boot command line interface.
       7: Load Boot Loader code then write to Flash via Serial. 
       9: Load Boot Loader code then write to Flash via TFTP. 
                                                                                                                                                                                                                                                         0 
       
    3: System Boot system code via Flash0.
    ## Booting image at bc050000 ...
    
    =================================================
    Check image validation:
    Image1 Trx Check --> 
    ## check_trx, crc=-1234505007, *crc_ret=-1234505007.
    OK
    Image1 Header Magic Number --> OK
    Image1 Header Checksum --> OK
    Image1 Data Checksum --> OK
    
    =================================================
    
    =================================================
    Check image validation:
    Image2 Trx Check --> 
    ## check_trx, crc=-1234505007, *crc_ret=-1234505007.
    OK
    Image2 Header Magic Number --> OK
    Image2 Header Checksum --> OK
    Image2 Data Checksum --> OK
    
    =================================================
    ## check Image1 return 0, check Image2 return 0, Image1 crc=-1234505007, Image2 crc=-1234505007.
    Image1 is ok!
    Image2 is ok and same as Image1!
       Image Name:   MIPS OpenWrt Linux-2.6.36
       Image Type:   MIPS Linux Kernel Image (lzma compressed)
       Data Size:    2639537 Bytes =  2.5 MB
       Load Address: 80001000
       Entry Point:  8000d1d0
       Uncompressing Kernel Image ... OK
    No initrd
    ## Transferring control to Linux (at address 8000d1d0) ...
    ## Giving linux memsize in MB, 128
    
    Starting kernel ...
    
    
    LINUX started...
    
     THIS IS ASIC
    
    SDK 5.0.S.0
    Linux version 2.6.36 (jingwei_liang@sw3-build-01) (gcc version 4.6.3 (Buildroot 2012.11.1) ) #1 SMP Fri Dec 7 12:26:30 CST 2018
    
     The CPU feqenuce set to 880 MHz
    GCMP present
    CPU revision is: 0001992f (MIPS 1004Kc)
    Software DMA cache coherency
    Determined physical RAM map:
     memory: 08000000 @ 00000000 (usable)
    Zone PFN ranges:
      Normal   0x00000000 -> 0x00008000
    Movable zone start PFN for each node
    early_node_map[1] active PFN ranges
        0: 0x00000000 -> 0x00008000
    Detected 3 available secondary CPU(s)
    PERCPU: Embedded 7 pages/cpu @81103000 s6464 r8192 d14016 u65536
    pcpu-alloc: s6464 r8192 d14016 u65536 alloc=16*4096
    pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 
    Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
    Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock5 init=/sbin/preinit rootfstype=squashfs,jffs2
    PID hash table entries: 512 (order: -1, 2048 bytes)
    Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
    Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
    Primary instruction cache 32kB, VIPT, , 4-waylinesize 32 bytes.
    Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
    MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
    Writing ErrCtl register=000492b1
    Readback ErrCtl register=000492b1
    Memory: 122440k/131072k available (3940k kernel code, 8632k reserved, 2433k data, 184k init, 0k highmem)
    Hierarchical RCU implementation.
            Verbose stalled-CPUs detection is disabled.
    NR_IRQS:128
    Trying to install interrupt handler for IRQ24
    Trying to install interrupt handler for IRQ25
    Trying to install interrupt handler for IRQ22
    Trying to install interrupt handler for IRQ9
    Trying to install interrupt handler for IRQ10
    Trying to install interrupt handler for IRQ11
    Trying to install interrupt handler for IRQ12
    Trying to install interrupt handler for IRQ13
    Trying to install interrupt handler for IRQ14
    Trying to install interrupt handler for IRQ16
    Trying to install interrupt handler for IRQ17
    Trying to install interrupt handler for IRQ18
    Trying to install interrupt handler for IRQ19
    Trying to install interrupt handler for IRQ20
    Trying to install interrupt handler for IRQ21
    Trying to install interrupt handler for IRQ23
    Trying to install interrupt handler for IRQ26
    Trying to install interrupt handler for IRQ27
    Trying to install interrupt handler for IRQ28
    Trying to install interrupt handler for IRQ15
    Trying to install interrupt handler for IRQ8
    Trying to install interrupt handler for IRQ29
    Trying to install interrupt handler for IRQ30
    Trying to install interrupt handler for IRQ31
    console [ttyS1] enabled
    Calibrating delay loop... 577.53 BogoMIPS (lpj=1155072)
    pid_max: default: 32768 minimum: 301
    Mount-cache hash table entries: 512
    launch: starting cpu1
    launch: cpu1 gone!
    CPU revision is: 0001992f (MIPS 1004Kc)
    Primary instruction cache 32kB, VIPT, , 4-waylinesize 32 bytes.
    Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
    MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
    launch: starting cpu2
    launch: cpu2 gone!
    CPU revision is: 0001992f (MIPS 1004Kc)
    Primary instruction cache 32kB, VIPT, , 4-waylinesize 32 bytes.
    Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
    MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
    launch: starting cpu3
    launch: cpu3 gone!
    CPU revision is: 0001992f (MIPS 1004Kc)
    Primary instruction cache 32kB, VIPT, , 4-waylinesize 32 bytes.
    Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
    MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
    Brought up 4 CPUs
    Synchronize counters across 4 CPUs: done.
    NET: Registered protocol family 16
    release PCIe RST: RALINK_RSTCTRL = 7000000
    PCIE PHY initialize
    ***** Xtal 40MHz *****
    start MT7621 PCIe register access
    RALINK_RSTCTRL = 7000000
    RALINK_CLKCFG1 = 77ffeff8
    
    *************** MT7621 PCIe RC mode *************
    PCIE2 no card, disable it(RST&CLK)
    pcie_link status = 0x3
    RALINK_RSTCTRL= 3000000
    *** Configure Device number setting of Virtual PCI-PCI bridge ***
    RALINK_PCI_PCICFG_ADDR = 21007f2 -> 21007f2
    PCIE0 enabled
    PCIE1 enabled
    interrupt enable status: 300000
    Port 1 N_FTS = 1b105000
    Port 0 N_FTS = 1b105000
    config reg done
    init_rt2880pci done
    bio: create slab  at 0
    SCSI subsystem initialized
    pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000)
    pci 0000:00:01.0: BAR 0: can't assign mem (size 0x80000000)
    pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
    pci 0000:00:01.0: BAR 8: assigned [mem 0x60100000-0x601fffff]
    pci 0000:00:00.0: BAR 1: assigned [mem 0x60200000-0x6020ffff]
    pci 0000:00:00.0: BAR 1: set to [mem 0x60200000-0x6020ffff] (PCI address [0x60200000-0x6020ffff]
    pci 0000:00:01.0: BAR 1: assigned [mem 0x60210000-0x6021ffff]
    pci 0000:00:01.0: BAR 1: set to [mem 0x60210000-0x6021ffff] (PCI address [0x60210000-0x6021ffff]
    pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
    pci 0000:01:00.0: BAR 0: set to [mem 0x60000000-0x600fffff 64bit] (PCI address [0x60000000-0x600fffff]
    pci 0000:00:00.0: PCI bridge to [bus 01-01]
    pci 0000:00:00.0:   bridge window [io  disabled]
    pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
    pci 0000:00:00.0:   bridge window [mem pref disabled]
    pci 0000:02:00.0: BAR 0: assigned [mem 0x60100000-0x601fffff 64bit]
    pci 0000:02:00.0: BAR 0: set to [mem 0x60100000-0x601fffff 64bit] (PCI address [0x60100000-0x601fffff]
    pci 0000:00:01.0: PCI bridge to [bus 02-02]
    pci 0000:00:01.0:   bridge window [io  disabled]
    pci 0000:00:01.0:   bridge window [mem 0x60100000-0x601fffff]
    pci 0000:00:01.0:   bridge window [mem pref disabled]
    BAR0 at slot 0 = 0
    bus=0x0, slot = 0x0
    res[0]->start = 0
    res[0]->end = 0
    res[1]->start = 60200000
    res[1]->end = 6020ffff
    res[2]->start = 0
    res[2]->end = 0
    res[3]->start = 0
    res[3]->end = 0
    res[4]->start = 0
    res[4]->end = 0
    res[5]->start = 0
    res[5]->end = 0
    BAR0 at slot 1 = 0
    bus=0x0, slot = 0x1
    res[0]->start = 0
    res[0]->end = 0
    res[1]->start = 60210000
    res[1]->end = 6021ffff
    res[2]->start = 0
    res[2]->end = 0
    res[3]->start = 0
    res[3]->end = 0
    res[4]->start = 0
    res[4]->end = 0
    res[5]->start = 0
    res[5]->end = 0
    bus=0x1, slot = 0x0, irq=0x4
    res[0]->start = 60000000
    res[0]->end = 600fffff
    res[1]->start = 0
    res[1]->end = 0
    res[2]->start = 0
    res[2]->end = 0
    res[3]->start = 0
    res[3]->end = 0
    res[4]->start = 0
    res[4]->end = 0
    res[5]->start = 0
    res[5]->end = 0
    bus=0x2, slot = 0x1, irq=0x18
    res[0]->start = 60100000
    res[0]->end = 601fffff
    res[1]->start = 0
    res[1]->end = 0
    res[2]->start = 0
    res[2]->end = 0
    res[3]->start = 0
    res[3]->end = 0
    res[4]->start = 0
    res[4]->end = 0
    res[5]->start = 0
    res[5]->end = 0
    Switching to clocksource MIPS
    NET: Registered protocol family 2
    IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
    TCP established hash table entries: 4096 (order: 3, 32768 bytes)
    TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
    TCP: Hash tables configured (established 4096 bind 4096)
    TCP reno registered
    UDP hash table entries: 128 (order: 0, 4096 bytes)
    UDP-Lite hash table entries: 128 (order: 0, 4096 bytes)
    NET: Registered protocol family 1
    4 CPUs re-calibrate udelay(lpj = 1167360)
    Load Kernel WDG Timer Module
    Load Ralink Timer0 Module
    Load Ralink Timer2 Module
    squashfs: version 4.0 (2009/01/31) Phillip Lougher
    fuse init (API version 7.15)
    msgmni has been set to 239
    Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254)
    io scheduler noop registered (default)
    Ralink gpio driver initialized
    @@@@@@#### buffalo_led_init initialized. 
    Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
    serial8250: ttyS0 at MMIO 0x1e000d00 (irq = 27) is a 16550A
    serial8250: ttyS1 at MMIO 0x1e000c00 (irq = 26) is a 16550A
    brd: module loaded
    flash manufacture id: ef, device id 40 18
    W25Q128BV(ef 40180000) (16384 Kbytes)
    mtd .name = raspi, .size = 0x01000000 (16M) .erasesize = 0x00010000 (64K) .numeraseregions = 0
    in find_rootfs_mtd_partitions  off=0x00050000 end=0x00810000
    The  trx header  magic offset 0x00284710
    raspi: squash filesystem found at offset 0x002d4710
    Found image1 partition off 0x002d4710 size 0x0053b8f0
    in find_rootfs_mtd_partitions  off=0x00810000 end=0x00fd0000
    The  trx header  magic offset 0x00284710
    raspi: squash filesystem found at offset 0x00a94710
    Found image2 partition off 0x00a94710 size 0x0053b8f0
    Creating 10 MTD partitions on "raspi":
    0x000000000000-0x000001000000 : "ALL"
    0x000000000000-0x000000030000 : "Bootloader"
    0x000000030000-0x000000040000 : "Config"
    0x000000040000-0x000000050000 : "Factory"
    0x000000050000-0x000000810000 : "Kernel"
    0x0000002d4710-0x000000810000 : "RootFS"
    mtd: partition "RootFS" doesn't start on an erase block boundary -- force read-only
    0x000000810000-0x000000fd0000 : "Kernel2"
    0x000000a94710-0x000000fd0000 : "RootFS2"
    mtd: partition "RootFS2" doesn't start on an erase block boundary -- force read-only
    0x000000fd0000-0x000000fe0000 : "glbcfg"
    0x000000fe0000-0x000000ff0000 : "board_data"
    rdm_major = 253
    GMAC1_MAC_ADRH -- : 0x0000000c
    GMAC1_MAC_ADRL -- : 0x432880ed
    Ralink APSoC Ethernet Driver Initilization. v3.1  1024 rx/tx descriptors allocated, mtu = 1500!
    GMAC1_MAC_ADRH -- : 0x0000000c
    GMAC1_MAC_ADRL -- : 0x43288017
    PROC INIT OK!
    PPP generic driver version 2.4.2
    PPP Deflate Compression module registered
    PPP BSD Compression module registered
    PPP MPPE Compression module registered
    NET: Registered protocol family 24
    IMQ driver loaded successfully.
            Hooking IMQ after NAT on PREROUTING.
            Hooking IMQ before NAT on POSTROUTING.
    register mt_drv
    
    
    === pAd = c0182000, size = 3614952 ===
    
    PciHif.CSRBaseAddress =0xc0080000, csr_addr=0xc0080000!
    RTMPInitPCIeDevice():device_id=0x7615
    DriverOwn()::Try to Clear FW Own...
    DriverOwn()::Success to clear FW Own
    mt_pci_chip_cfg(): HWVer=0x8a10, FWVer=0x8a10, pAd->ChipID=0x7615
    mt_pci_chip_cfg(): HIF_SYS_REV=0x76150001
    RtmpChipOpsHook(492): Not support for HIF_MT yet! MACVersion=0x0
    mt7615_init()-->
    Use 1st iPAiLNA default bin.
    <--mt7615_init()
    ChipOpsMCUHook
    cut_through_token_list_init(): TokenList inited done!id_head/tail=0/4096
    cut_through_token_list_init(): 87e58308,87e58308
    cut_through_token_list_init(): TokenList inited done!id_head/tail=0/4096
    cut_through_token_list_init(): 87e58318,87e58318
    ChipID=0x7615
    mt_pci_chip_cfg(): HIF_SYS_REV=0x76150001
    RtmpChipOpsHook(492): Not support for HIF_MT yet! MACVersion=0x0
    mt7615_init()-->
    Use 2nd iPAiLNA default bin.
    <--mt7615_init()
    ChipOpsMCUHook
    cut_through_token_list_init(): TokenList inited done!id_head/tail=0/4096
    cut_through_token_list_init(): 873e4f88,873e4f88
    cut_through_token_list_init(): TokenList inited done!id_head/tail=0/4096
    cut_through_token_list_init(): 873e4f98,873e4f98
    skb_free start address is 0x87e6269c.
    free_txd: 06b88010, ei_local->cpu_ptr: 06B88000
     POOL  HEAD_PTR | DMA_PTR | CPU_PTR 
    ----------------+---------+--------
         0xa6b88000 0x06B88000 0x06B88000
    
    phy_qrx_ring = 0x06b81000, qrx_ring = 0xa6b81000
    
    phy_rx_ring0 = 0x06b84000, rx_ring0 = 0xa6b84000
    MT7530 Reset Completed!!
    change HW-TRAP to 0x117c8f
    set LAN/WAN WLLLL
    GMAC1_MAC_ADRH -- : 0x000018c2
    GMAC1_MAC_ADRL -- : 0xbf39c5e0
    GDMA2_MAC_ADRH -- : 0x0000000c
    GDMA2_MAC_ADRL -- : 0x43288016
    eth3: ===> VirtualIF_open
    MT7621 GE2 link rate to 1G
    CDMA_CSG_CFG = 81000000
    GDMA1_FWD_CFG = 20710000
    GDMA2_FWD_CFG = 20710000
    Disable flow control
    debug : Enter [BRCTL_ADD_IF] 
    add_if 00000000 ***************************
    device eth2 entered promiscuous mode
    br0: port 1(eth2) entering forwarding state
    br0: port 1(eth2) entering forwarding state
    GDMA2_MAC_ADRH -- : 0x000018c2
    GDMA2_MAC_ADRL -- : 0xbf39c5e0
    eth3: ===> VirtualIF_open
    DriverOwn()::Return since already in Driver Own...
    MacAddress1 = 00:00:00:00:00:00
    MacAddress2 = 00:00:00:00:00:00
    MacAddress3 = 00:00:00:00:00:00
    MacAddress4 = 00:00:00:00:00:00
    E2pAccessMode=2
    RTMPSetProfileParameters(): DBDC Mode=0
    cfg_mode=9
    cfg_mode=9
    wmode_band_equal(): Band Equal!
    APEdca0
    APEdca1
    APEdca2
    APEdca3
    APSDCapable[0]=0
    APSDCapable[1]=0
    APSDCapable[2]=0
    APSDCapable[3]=0
    APSDCapable[4]=0
    APSDCapable[5]=0
    APSDCapable[6]=0
    APSDCapable[7]=0
    APSDCapable[8]=0
    APSDCapable[9]=0
    APSDCapable[10]=0
    APSDCapable[11]=0
    APSDCapable[12]=0
    APSDCapable[13]=0
    APSDCapable[14]=0
    APSDCapable[15]=0
    default ApCliAPSDCapable[0]=0
    default ApCliAPSDCapable[1]=0
    [RTMPSetProfileParameters]Disable DFS/Zero wait=0/0
    AndesSendCmdMsg: Could not send in band command due to diablefRTMP_ADAPTER_MCU_SEND_IN_BAND_CMD
    HT: Ext Channel = ABOVE
    HT: greenap_cap = 0
    IcapMode = 0
    WtcSetMaxStaNum: MaxStaNum:87, BssidNum:5, WdsNum:0, ApcliNum:2, MaxNumChipRept:32, MinMcastWcid:121
    Top Init Done!
    Use dev_alloc_skb
    RX[0] DESC a779e000 size = 8192
    RX[1] DESC a77a0000 size = 8192
    Hif Init Done!
    ctl->txq = c04f2b18
    ctl->rxq = c04f2b24
    ctl->ackq = c04f2b30
    ctl->kickq = c04f2b3c
    ctl->tx_doneq = c04f2b48
    ctl->rx_doneq = c04f2b54
    mt7615_fw_prepare():FW(8a10), HW(8a10), CHIPID(7615))
    mt7615_fw_prepare(2356): MT7615_E3, USE E3 patch and ram code binary image
    AndesMTLoadRomMethodFwDlRing(1035), cap->rom_patch_len(3150)
    AndesRestartCheck: Current TOP_MISC2(0x1)
    AndesRestartCheck: (TOP_MISC2 = 1), ready to continue...RET(0)
    20160419154809a
    
    platform = 
    ALPS
    hw/sw version = 
    8a108a10
    patch version = 
    00000010
    Patch SEM Status=2
    MtCmdPatchSemGet:(ret = 0)
    
    Patch is not ready && get semaphore success, SemStatus(2)
    EventGenericEventHandler: CMD Success
    MtCmdAddressLenReq:(ret = 0)
    MtCmdPatchFinishReq
    EventGenericEventHandler: CMD Success
    Send checksum req..
    Patch SEM Status=3
    MtCmdPatchSemGet:(ret = 0)
    
    Release patch semaphore, SemStatus(3)
    AndesMTEraseRomPatch
    WfMcuHwInit: Before NICLoadFirmware, check IcapMode=0
    AndesMTLoadFwMethodFwDlRing(809), cap->fw_len(452104)
    Build Date:_201803301729
    Build Date:_201803301729
    AndesRestartCheck: Current TOP_MISC2(0x1)
    AndesRestartCheck: (TOP_MISC2 = 1), ready to continue...RET(0)
    EventGenericEventHandler: CMD Success
    MtCmdAddressLenReq:(ret = 0)
    EventGenericEventHandler: CMD Success
    MtCmdAddressLenReq:(ret = 0)
    MtCmdFwStartReq: override = 1, address = 540672
    EventGenericEventHandler: CMD Success
    Build Date:_201607011611
    EventGenericEventHandler: CMD Success
    MtCmdAddressLenReq:(ret = 0)
    MtCmdFwStartReq: override = 4, address = 0
    EventGenericEventHandler: CMD Success
    WfMcuHwInit: NICLoadFirmware OK, Check IcapMode=0
    MCU Init Done!
    efuse_probe: efuse = 10000212
    RtmpChipOpsEepromHook::e2p_type=2, inf_Type=5
    RtmpEepromGetDefault::e2p_dafault=1
    RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 1
    NVM is FLASH mode. dev_idx [0] FLASH OFFSET [0x0]
    ESW: Link Status Changed - Port0 Link UP
    ESW: Link Status Changed - Port3 Link UP
    Country Region from e2p = 101
    mt7615_antenna_default_reset(): TxPath = 4, RxPath = 4
    rtmp_read_txpwr_from_eeprom(224): Don't Support this now!
    RTMPReadTxPwrPerRate(1381): Don't Support this now!
    RcRadioInit(): DbdcMode=0, ConcurrentBand=1
    RcRadioInit(): pRadioCtrl=87640444,Band=0,rfcap=3,channel=1,PhyMode=2
    MtCmdSetDbdcCtrl:(ret = 0)
    Band Rf: 1, Phy Mode: 2
    AntCfgInit(2615): Not support for HIF_MT yet!
    MtSingleSkuLoadParam: RF_LOCKDOWN Feature ON !!!
    MtSingleSkuLoadParam: SKU Table index = 0 
    MtBfBackOffLoadTable: RF_LOCKDOWN Feature ON !!!
    MtBfBackOffLoadTable: BFBackoff Table index = 0 
    EEPROM Init Done!
    mt_mac_init()-->
    mt_mac_pse_init(2715): Don't Support this now!
    mt7615_init_mac_cr()-->
    mt7615_init_mac_cr(): TMAC_TRCR0=0x82783c8c
    mt7615_init_mac_cr(): TMAC_TRCR1=0x82783c8c
    MtAsicSetMacMaxLen(1288): Not finish Yet!
    
    MtCmdSetMacTxRx:(ret = 0)
    mt7615_apply_dcoc() : reload Central CH [1] BW [0] from cetral freq [2417]  offset [2200] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [1] BW [0] from cetral freq [2422] i[44] offset [4b20] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 1,control_ch2=0, central_chl = 1 DBDCIdx= 0, Band= 0 
    BW = 0,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [2] BW [0] from cetral freq [2417]  offset [2200] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [2] BW [0] from cetral freq [2422] i[44] offset [4b20] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 2,control_ch2=0, central_chl = 2 DBDCIdx= 0, Band= 0 
    BW = 0,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [3] BW [0] from cetral freq [2417]  offset [2200] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [3] BW [0] from cetral freq [2422] i[44] offset [4b20] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 3,control_ch2=0, central_chl = 3 DBDCIdx= 0, Band= 0 
    BW = 0,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [4] BW [0] from cetral freq [2432]  offset [2300] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [4] BW [0] from cetral freq [2422] i[44] offset [4b20] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 4,control_ch2=0, central_chl = 4 DBDCIdx= 0, Band= 0 
    BW = 0,TXStream = 4, RXStream = 4, scan(1)
    :MtCmdPktBudgetCtrl: bssid(255),wcid(65535),type(0)
    mt7615_apply_dcoc() : reload Central CH [5] BW [0] from cetral freq [2432]  offset [2300] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [5] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 5,control_ch2=0, central_chl = 5 DBDCIdx= 0, Band= 0 
    BW = 0,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [6] BW [0] from cetral freq [2432]  offset [2300] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [6] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 6,control_ch2=0, central_chl = 6 DBDCIdx= 0, Band= 0 
    BW = 0,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [7] BW [0] from cetral freq [2447]  offset [2400] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [7] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 7,control_ch2=0, central_chl = 7 DBDCIdx= 0, Band= 0 
    BW = 0,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [8] BW [0] from cetral freq [2447]  offset [2400] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [8] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 8,control_ch2=0, central_chl = 8 DBDCIdx= 0, Band= 0 
    BW = 0,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [9] BW [0] from cetral freq [2447]  offset [2400] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [9] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 9,control_ch2=0, central_chl = 9 DBDCIdx= 0, Band= 0 
    BW = 0,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [10] BW [0] from cetral freq [2467]  offset [2500] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [10] BW [0] from cetral freq [2462] i[46] offset [4cd0] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 10,control_ch2=0, central_chl = 10 DBDCIdx= 0, Band= 0 
    BW = 0,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [11] BW [0] from cetral freq [2467]  offset [2500] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [11] BW [0] from cetral freq [2462] i[46] offset [4cd0] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 11,control_ch2=0, central_chl = 11 DBDCIdx= 0, Band= 0 
    BW = 0,TXStream = 4, RXStream = 4, scan(1)
    ====================================================================
    Channel   1 : Busy Time =   2021, Skip Channel = FALSE, BwCap = TRUE
    Channel   2 : Busy Time =   2492, Skip Channel = FALSE, BwCap = TRUE
    Channel   3 : Busy Time =   2300, Skip Channel = FALSE, BwCap = TRUE
    Channel   4 : Busy Time =   1833, Skip Channel = FALSE, BwCap = TRUE
    Channel   5 : Busy Time =   1394, Skip Channel = FALSE, BwCap = TRUE
    Channel   6 : Busy Time =  10251, Skip Channel = FALSE, BwCap = TRUE
    Channel   7 : Busy Time =  12595, Skip Channel = FALSE, BwCap = TRUE
    Channel   8 : Busy Time =  10846, Skip Channel = FALSE, BwCap = TRUE
    Channel   9 : Busy Time =   9892, Skip Channel = FALSE, BwCap = TRUE
    Channel  10 : Busy Time =  10472, Skip Channel = FALSE, BwCap = TRUE
    Channel  11 : Busy Time =   2445, Skip Channel = FALSE, BwCap = TRUE
    ====================================================================
    Rule 3 Channel Busy time value : Select Primary Channel 5 
    Rule 3 Channel Busy time value : Min Channel Busy = 1394
    Rule 3 Channel Busy time value : BW = 20
    ApAutoChannelAtBootUprxq = c0972b24
    ctl->ackq = c0972b30
    ctl->kickq = c0972b3c
    ctl->tx_doneq = c0972b48
    ctl->rx_doneq = c0972b54
    mt7615_fw_prepare():FW(8a10), HW(8a10), CHIPID(7615))
    mt7615_fw_prepare(2356): MT7615_E3, USE E3 patch and ram code binary image
    AndesMTLoadRomMethodFwDlRing(1035), cap->rom_patch_len(3150)
    AndesRestartCheck: Current TOP_MISC2(0x1)
    AndesRestartCheck: (TOP_MISC2 = 1), ready to continue...RET(0)
    20160419154809a
    
    platform = 
    ALPS
    hw/sw version = 
    8a108a10
    patch version = 
    00000010
    Patch SEM Status=2
    MtCmdPatchSemGet:(ret = 0)
    
    Patch is not ready && get semaphore success, SemStatus(2)
    EventGenericEventHandler: CMD Success
    MtCmdAddressLenReq:(ret = 0)
    MtCmdPatchFinishReq
    EventGenericEventHandler: CMD Success
    Send checksum req..
    Patch SEM Status=3
    MtCmdPatchSemGet:(ret = 0)
    
    Release patch semaphore, SemStatus(3)
    AndesMTEraseRomPatch
    WfMcuHwInit: Before NICLoadFirmware, check IcapMode=0
    AndesMTLoadFwMethodFwDlRing(809), cap->fw_len(452104)
    Build Date:_201803301729
    Build Date:_201803301729
    AndesRestartCheck: Current TOP_MISC2(0x1)
    AndesRestartCheck: (TOP_MISC2 = 1), ready to continue...RET(0)
    EventGenericEventHandler: CMD Success
    MtCmdAddressLenReq:(ret = 0)
    EventGenericEventHandler: CMD Success
    MtCmdAddressLenReq:(ret = 0)
    MtCmdFwStartReq: override = 1, address = 540672
    EventGenericEventHandler: CMD Success
    Build Date:_201607011611
    EventGenericEventHandler: CMD Success
    MtCmdAddressLenReq:(ret = 0)
    MtCmdFwStartReq: override = 4, address = 0
    EventGenericEventHandler: CMD Success
    WfMcuHwInit: NICLoadFirmware OK, Check IcapMode=0
    MCU Init Done!
    efuse_probe: efuse = 10000212
    RtmpChipOpsEepromHook::e2p_type=2, inf_Type=5
    RtmpEepromGetDefault::e2p_dafault=1
    RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 1
    NVM is FLASH mode. dev_idx [1] FLASH OFFSET [0x8000]
    Country Region from e2p = 101
    mt7615_antenna_default_reset(): TxPath = 4, RxPath = 4
    rtmp_read_txpwr_from_eeprom(224): Don't Support this now!
    RTMPReadTxPwrPerRate(1381): Don't Support this now!
    RcRadioInit(): DbdcMode=0, ConcurrentBand=1
    RcRadioInit(): pRadioCtrl=873e1444,Band=0,rfcap=3,channel=1,PhyMode=2
    MtCmdSetDbdcCtrl:(ret = 0)
    Band Rf: 1, Phy Mode: 2
    AntCfgInit(2615): Not support for HIF_MT yet!
    MtSingleSkuLoadParam: RF_LOCKDOWN Feature ON !!!
    MtSingleSkuLoadParam: SKU Table index = 0 
    MtBfBackOffLoadTable: RF_LOCKDOWN Feature ON !!!
    MtBfBackOffLoadTable: BFBackoff Table index = 0 
    EEPROM Init Done!
    mt_mac_init()-->
    mt_mac_pse_init(2715): Don't Support this now!
    mt7615_init_mac_cr()-->
    mt7615_init_mac_cr(): TMAC_TRCR0=0x82783c8c
    mt7615_init_mac_cr(): TMAC_TRCR1=0x82783c8c
    MtAsicSetMacMaxLen(1288): Not finish Yet!
    
    MtCmdSetMacTxRx:(ret = 0)
    mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 36,control_ch2=0, central_chl = 42 DBDCIdx= 0, Band= 0 
    BW = 2,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 40,control_ch2=0, central_chl = 42 DBDCIdx= 0, Band= 0 
    BW = 2,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 44,control_ch2=0, central_chl = 42 DBDCIdx= 0, Band= 0 
    BW = 2,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 48,control_ch2=0, central_chl = 42 DBDCIdx= 0, Band= 0 
    BW = 2,TXStream = 4, RXStream = 4, scan(1)
    :MtCmdPktBudgetCtrl: bssid(255),wcid(65535),type(0)
    mt7615_apply_dcoc() : reload Central CH [58] BW [2] from cetral freq [5290]  offset [1a00] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [58] BW [2] from cetral freq [5300] i[13] offset [30f8] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 52,control_ch2=0, central_chl = 58 DBDCIdx= 0, Band= 0 
    BW = 2,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [58] BW [2] from cetral freq [5290]  offset [1a00] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [58] BW [2] from cetral freq [5300] i[13] offset [30f8] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 56,control_ch2=0, central_chl = 58 DBDCIdx= 0, Band= 0 
    BW = 2,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [58] BW [2] from cetral freq [5290]  offset [1a00] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [58] BW [2] from cetral freq [5300] i[13] offset [30f8] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 60,control_ch2=0, central_chl = 58 DBDCIdx= 0, Band= 0 
    BW = 2,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [58] BW [2] from cetral freq [5290]  offset [1a00] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [58] BW [2] from cetral freq [5300] i[13] offset [30f8] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 64,control_ch2=0, central_chl = 58 DBDCIdx= 0, Band= 0 
    BW = 2,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [106] BW [2] from cetral freq [5530]  offset [1d00] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [106] BW [2] from cetral freq [5540] i[25] offset [3b18] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 100,control_ch2=0, central_chl = 106 DBDCIdx= 0, Band= 0 
    BW = 2,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [106] BW [2] from cetral freq [5530]  offset [1d00] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [106] BW [2] from cetral freq [5540] i[25] offset [3b18] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 104,control_ch2=0, central_chl = 106 DBDCIdx= 0, Band= 0 
    BW = 2,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [106] BW [2] from cetral freq [5530]  offset [1d00] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [106] BW [2] from cetral freq [5540] i[25] offset [3b18] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 108,control_ch2=0, central_chl = 106 DBDCIdx= 0, Band= 0 
    BW = 2,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [106] BW [2] from cetral freq [5530]  offset [1d00] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [106] BW [2] from cetral freq [5540] i[25] offset [3b18] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 112,control_ch2=0, central_chl = 106 DBDCIdx= 0, Band= 0 
    BW = 2,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [122] BW [2] from cetral freq [5610]  offset [1e00] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [122] BW [2] from cetral freq [5620] i[29] offset [3e78] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 116,control_ch2=0, central_chl = 122 DBDCIdx= 0, Band= 0 
    BW = 2,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [122] BW [2] from cetral freq [5610]  offset [1e00] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [122] BW [2] from cetral freq [5620] i[29] offset [3e78] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 120,control_ch2=0, central_chl = 122 DBDCIdx= 0, Band= 0 
    BW = 2,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [122] BW [2] from cetral freq [5610]  offset [1e00] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [122] BW [2] from cetral freq [5620] i[29] offset [3e78] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 124,control_ch2=0, central_chl = 122 DBDCIdx= 0, Band= 0 
    BW = 2,TXStream = 4, RXStream = 4, scan(1)
    mt7615_apply_dcoc() : reload Central CH [122] BW [2] from cetral freq [5610]  offset [1e00] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [122] BW [2] from cetral freq [5620] i[29] offset [3e78] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 128,control_ch2=0, central_chl = 122 DBDCIdx= 0, Band= 0 
    BW = 2,TXStream = 4, RXStream = 4, scan(1)
    ====================================================================
    Channel  36 : Busy Time =   1087, Skip Channel = FALSE, BwCap = TRUE
    Channel  40 : Busy Time =   2110, Skip Channel = FALSE, BwCap = TRUE
    Channel  44 : Busy Time =    599, Skip Channel = FALSE, BwCap = TRUE
    Channel  48 : Busy Time =   1352, Skip Channel = FALSE, BwCap = TRUE
    Channel  52 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
    Channel  56 : Busy Time =    187, Skip Channel = FALSE, BwCap = TRUE
    Channel  60 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
    Channel  64 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
    Channel 100 : Busy Time =    219, Skip Channel = FALSE, BwCap = TRUE
    Channel 104 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
    Channel 108 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
    Channel 112 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
    Channel 116 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
    Channel 120 : Busy Time =    484, Skip Channel = FALSE, BwCap = TRUE
    Channel 124 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
    Channel 128 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
    ====================================================================
    Rule 3 Channel Busy time value : Select Primary Channel 52 
    Rule 3 Channel Busy time value : Min Channel Busy = 187
    Rule 3 Channel Busy time value : BW = 80
    ApAutoChannelAtBootUp<-----------------
    MtAsicSetChBusyStat(840): Not support for HIF_MT yet!
    HcUpdatePhyMode(): Update PhyMode for all wdev for this band PhyMode:49,Channel=52
    CountryCode(2.4G/5G)=1/1, RFIC=25, PHY mode(2.4G/5G)=49/49, support 19 channels
    wtc_acquire_groupkey_wcid: Found a non-occupied wtbl_idx:127 for WDEV_TYPE:1
     LinkToOmacIdx = 0, LinkToWdevType = 1
    bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO),                 CmdBssInfoBmcRate.u2BcTransmit= 8196,                 CmdBssInfoBmcRate.u2McTransmit = 8196
    LeadTimeForBcn, OmacIdx = 0, WDEV_WITH_BCN_ABILITY
    [RadarStateCheck]Set into RD_SILENCE_MODE! 
    MtCmdTxPowerSKUCtrl: fgTxPowerSKUEn = 0
    MtCmdTxPowerPercentCtrl: fgTxPowerPercentEn = 0
    MtCmdTxBfBackoffCtrl: fgTxBFBackoffEn = 0
    mt7615_bbp_adjust():rf_bw=2, ext_ch=1, PrimCh=52, HT-CentCh=54, VHT-CentCh=58
    mt7615_apply_dcoc() : reload Central CH [58] BW [2] from cetral freq [5290]  offset [1a00] 
    MtCmdGetRXDCOCCalResult:(ret = 0)
    mt7615_apply_dpd() : reload Central CH [58] BW [2] from cetral freq [5300] i[13] offset [30f8] 
    MtCmdGetTXDPDCalResult:(ret = 0)
    MtCmdChannelSwitch: control_chl = 52,control_ch2=0, central_chl = 58 DBDCIdx= 0, Band= 0 
    BW = 2,TXStream = 4, RXStream = 4, scan(0)
    ap_phy_rrm_init_byRf(): AP Set CentralFreq at 58(Prim=52, HT-CentCh=54, VHT-CentCh=58, BBP_BW=2)
    [WrapDfsRadarDetectStart]: Band0Ch is 52[WrapDfsRadarDetectStart]: Band1Ch is 0MtAsicSetRalinkBurstMode(2594): Not support for HIF_MT yet!
    MtAsicSetPiggyBack(777): Not support for HIF_MT yet!
    MtAsicSetTxPreamble(2573): Not support for HIF_MT yet!
    Main bssid = 18:c2:bf:39:c5:e4
    AsicRadioOnOffCtrl(): DbdcIdx=0 RadioOn
    MtCmdSetMacTxRx:(ret = 0)
    MCS Set = ff ff ff ff 01
    MtCmdSetMacTxRx:(ret = 0)
    <==== mt_wifi_init, Status=0
    MtCmdEDCCACtrl: BandIdx: 0, EDCCACtrl: 1 
    MtCmdEDCCACtrl: BandIdx: 1, EDCCACtrl: 1 
    WtcSetMaxStaNum: MaxStaNum:87, BssidNum:5, WdsNum:0, ApcliNum:2, MaxNumChipRept:32, MinMcastWcid:121
    red_is_enabled: set CR4/N9 RED Enable to 1.
    cp_support_is_enabled: set CR4 CP_SUPPORT to Mode 2.
    Generate UUID for apidx(0)
    UUID: c063412c, len = 16
    0x0000 : bc 32 9e 00 1d d8 11 b2 86 01 18 c2 bf 39 c5 e1 
    
    debug : Enter [BRCTL_ADD_RULE_IF] 
    add_if 00000100 ***************************
    device rai0 entered promiscuous mode
    br0: port 3(rai0) entering forwarding state
    br0: port 3(rai0) entering forwarding state
    bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO),                 CmdBssInfoBmcRate.u2BcTransmit= 0,                 CmdBssInfoBmcRate.u2McTransmit = 0
    bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO),                 CmdBssInfoBmcRate.u2BcTransmit= 0,                 CmdBssInfoBmcRate.u2McTransmit = 0
    bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO),                 CmdBssInfoBmcRate.u2BcTransmit= 0,                 CmdBssInfoBmcRate.u2McTransmit = 0
    bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO),                 CmdBssInfoBmcRate.u2BcTransmit= 0,                 CmdBssInfoBmcRate.u2McTransmit = 0
    bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO),                 CmdBssInfoBmcRate.u2BcTransmit= 0,                 CmdBssInfoBmcRate.u2McTransmit = 0
    bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO),                 CmdBssInfoBmcRate.u2BcTransmit= 0,                 CmdBssInfoBmcRate.u2McTransmit = 0
    bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO),                 CmdBssInfoBmcRate.u2BcTransmit= 0,                 CmdBssInfoBmcRate.u2McTransmit = 0
    bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO),                 CmdBssInfoBmcRate.u2BcTransmit= 0,                 CmdBssInfoBmcRate.u2McTransmit = 0
    bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO),                 CmdBssInfoBmcRate.u2BcTransmit= 0,                 CmdBssInfoBmcRate.u2McTransmit = 0
    bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO),                 CmdBssInfoBmcRate.u2BcTransmit= 0,                 CmdBssInfoBmcRate.u2McTransmit = 0
    bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO),                 CmdBssInfoBmcRate.u2BcTransmit= 8196,                 CmdBssInfoBmcRate.u2McTransmit = 8196
    bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO),                 CmdBssInfoBmcRate.u2BcTransmit= 8192,                 CmdBssInfoBmcRate.u2McTransmit = 8192
    Jan  1 00:00:31 miniupnpd[488]: WPS listening on port 53210
    mcsnoop: module license 'BUFFALO Inc. PROPRIETARY' taints kernel.
    Disabling lock debugging due to kernel taint
    mcsnoop: flush all snoop entry
    mcsnoop: Bridge Multicast Snooping module Ver0.1/20070912
    mcsnoop_br_ioctl_device:275: mcast_maxage 75000 / 250
    device eth2 left promiscuous mode
    br0: port 1(eth2) entering forwarding state
    debug : Enter [BRCTL_ADD_RULE_IF] 
    add_if 00000600 ***************************
    device eth2 entered promiscuous mode
    br0: port 1(eth2) entering forwarding state
    br0: port 1(eth2) entering forwarding state
    netwatchd uses obsolete (PF_INET,SOCK_PACKET)
    Jan  1 00:00:32 crond[555]: crond: crond (busybox 1.18.5) started, log level 8
    [WrapDfsRddReportHandle]:  Radar detected !!!!!!!!!!!!!!!!!
    MtAsicSetPiggyBack(777): Not support for HIF_MT yet!
    ExtEventBeaconLostHandler::FW LOG, Beacon lost (18:c2:bf:39:c5:e4), Reason 0x10
      Beacon lost - AP disabled!!!
    WifiSysGetBssInfoState(): BssInfoIdx 0 not found!!!
    WifiSysUpdateBssInfoState(): BssInfoIdx 0 not found!!!
    MtAsicSetRalinkBurstMode(2594): Not support for HIF_MT yet!
    MtAsicSetPiggyBack(777): Not support for HIF_MT yet!
    ntp.jst.mfeed.adMtAsicSetTxPreamble(2573): Not support for HIF_MT yet!
    .jp: Unknown hoswdev_attr_update(): wdevId0 = 18:c2:bf:39:c5:e4
    t
    MtCmdSetDbdcCtrl:(ret = 0)
    HcUpdatePhyMode(): Update PhyMode for all wdev for this band PhyMode:49,Channel=104
    Link Status Changed - WAN Port Link UP