カテゴリー: Router

WN-G300DGR

作業した時期が非常に古く、メモを取っていなかったので今更ながら書き出し。なお、既に散々弄った状態であるためオリジナルとは異なっていたり、破損個所が存在する可能性に注意すること。

MAC

  • LAN: 00:A0:B0:xx:xx:AC (u-boot-env, ethaddr (text))
  • WAN: 00:A0:B0:xx:xx:AB (u-boot-env, wanaddr (tex))
  • 2.4G: 00:A0:B0:xx:xx:AC (Factory, 0x4 (hex))

※Flash: Parallel-NOR (CFI) 4MiB (MX29LV320E)

U-Boot

  • help
    RT3052 # help
    rf      - read/write rf register
    ?       - alias for 'help'
    bootm   - boot application image from memory
    cp      - memory copy
    erase   - erase FLASH memory
    go      - start application at address 'addr'
    help    - print online help
    loadb   - load binary file over serial line (kermit mode)
    loopback   - Ralink eth loopback test !!
    md      - memory display
    mdio   - Ralink PHY register R/W command !!
    mm      - memory modify (auto-incrementing)
    mw      - memory write (fill)
    nm      - memory modify (constant address)
    printenv- print environment variables
    protect - enable or disable FLASH write protection
    reset   - Perform RESET of the CPU
    saveenv - save environment variables to persistent storage
    setenv  - set environment variables
    spicmd  - read/write data from/to eeprom or vtss
    tftpboot- boot image via network using TFTP protocol
    version - print monitor version
    

  • version

    RT3052 # version
    
    U-Boot 1.1.3 (Jun  1 2011 - 15:30:20)
    

  • printenv

    RT3052 # printenv
    bootcmd=tftp
    bootdelay=5
    baudrate=57600
    ethaddr="00:A0:B0:**:**:**"
    sn=00024936I
    hw_ver=1.0.0
    pro_id=000
    country=000
    domain=1
    wanaddr=00:A0:B0:**:**:**
    wlanaddr=00:AA:BB:CC:DD:12
    fwaddr=00:AA:BB:CC:DD:13
    eth_en=0
    snextra=00000000000000000000
    preboot=echo;echo
    ramargs=setenv bootargs root=/dev/ram rw
    addip=setenv bootargs $(bootargs) ip=$(ipaddr):$(serverip):$(gatewayip):$(netmask):$(hostname):$(netdev):off
    addmisc=setenv bootargs $(bootargs) console=ttyS0,$(baudrate) ethaddr=$(ethaddr) panic=1
    flash_self=run ramargs addip addmisc;bootm $(kernel_addr) $(ramdisk_addr)
    kernel_addr=BFC40000
    u-boot=u-boot.bin
    load=tftp 8A100000 $(u-boot)
    u_b=protect off 1:0-1;era 1:0-1;cp.b 8A100000 BC400000 $(filesize)
    loadfs=tftp 8A100000 root.cramfs
    u_fs=era bc540000 bc83ffff;cp.b 8A100000 BC540000 $(filesize)
    test_tftp=tftp 8A100000 root.cramfs;run test_tftp
    hw_id=030A003E
    ethact=Eth0 
    filesize=26c36d
    fileaddr=80800000
    ipaddr=192.168.99.9
    serverip=192.168.99.8
    autostart=no
    bootfile=uImageWN-G300DGR
    uboot_ver=1.0.6.20
    op_mode=1
    stdin=serial
    stdout=serial
    stderr=serial
    
    Environment size: 1066/4092 bytes
    

Kernel

  • uname -a

    # uname -a
    Linux WN-G300DGR 2.6.21 #3 Tue Mar 17 09:25:56 CST 2015 mips unknown
    

  • cat /proc/version

    # cat /proc/version
    Linux version 2.6.21 (root@******-******-******-******) (gcc version 3.4.6) #3 Tue Mar 17 09:25:56 CST 2015
    

  • cat /proc/cpuinfo

    # cat /proc/cpuinfo
    system type             : Ralink SoC
    processor               : 0
    cpu model               : MIPS 24K V4.12
    BogoMIPS                : 255.48
    wait instruction        : yes
    microsecond timers      : yes
    tlb_entries             : 32
    extra interrupt vector  : yes
    hardware watchpoint     : yes
    ASEs implemented        : mips16 dsp
    VCED exceptions         : not available
    VCEI exceptions         : not available
    

  • cat /proc/meminfo

    # cat /proc/meminfo
    MemTotal:        29696 kB
    MemFree:         15092 kB
    Buffers:          1096 kB
    Cached:           5616 kB
    SwapCached:          0 kB
    Active:           3860 kB
    Inactive:         4216 kB
    SwapTotal:           0 kB
    SwapFree:            0 kB
    Dirty:               0 kB
    Writeback:           0 kB
    AnonPages:        1372 kB
    Mapped:           1920 kB
    Slab:             3684 kB
    SReclaimable:      464 kB
    SUnreclaim:       3220 kB
    PageTables:        412 kB
    NFS_Unstable:        0 kB
    Bounce:              0 kB
    CommitLimit:     14848 kB
    Committed_AS:     3692 kB
    VmallocTotal:  1048404 kB
    VmallocUsed:     18468 kB
    VmallocChunk:  1029828 kB
    

  • cat /proc/mtd

    # cat /proc/mtd
    dev:    size   erasesize  name
    mtd0: 00020000 00010000 "Bootloader"
    mtd1: 00010000 00010000 "backup"
    mtd2: 00010000 00010000 "Config "
    mtd3: 00010000 00010000 "Factory"
    mtd4: 000b0000 00010000 "Kernel"
    mtd5: 002b0000 00010000 "app"
    mtd6: 001a0000 00010000 "cb-app"
    mtd7: 00040000 00010000 "manufacture"
    mtd8: 00010000 00002000 "storage"
    

  • bootlog

    U-boot Ver:1.0.6.20 2011/06/01
    
    
    Board: Ralink APSoC DRAM:  32 MB  2*16 MB
    ============================================ 
    ASIC 3052_MP2 (Port5GigaSW)
    Product Name: WN-G300DGR
    SDRAM CAS = 3(d1835272) 
    ============================================ 
    
    Please choose the operation: 
       1: Load system code to SDRAM via TFTP. 
    
    LINUX started...
    
     THIS IS ASIC
    init started: BusyBox v1.7.5 (2015-03-17 09:22:54 CST)
    starting pid 151, tty '/dev/console': '/sbin/config_init'
    mknod: /dev/ttyS0: File exists
    mknod: /dev/ttyS1: File exists
    Config Init version: 1.15.000.113 date: 2015/03/17
    Thu Jan  1 00:00:00 UTC 2015
    mount: can't find /sys in /etc/fstab or /etc/mtab
    ln: /lib/./modules: File exists
    switch reg write offset=94, value=7f00
    Could not find Watchdog driver (/apps/lib/modules/2.6.21/kernel/arch/mips/rt2880/rt_timer.ko)
    Application Ver:1.15.000.113             Date:2015/03/17
    
    starting pid 211, tty '/dev/ttyS1': '/sbin/config_term'
    ************************************************************************
    *                               WN-G300DGR                             *
    ************************************************************************
    
    KernelApp/Ramdisk Ver:1.15.000.113                       Date:2015/03/17
    cat: can't open '/apps/lib/modules/2.6.21/modulesApp.dep': No such file or directory
    ln: /sbin/apps_init: File exists
    ln: /sbin/opmode.sh: File exists
    password: createShareMem keyid 7001 shmId 0
    Set Int value 0 but not in rage 1000 to 50000
    checkpApCfg i=746 [wan2_dl_bw]
    Set Int value 0 but not in rage 1000 to 50000
    checkpApCfg i=762 [wan2_ul_bw]
    checkpApCfg error!!
    CTRL_INTERFACE:[/var/sysconfd_if]  CTRL_INTERFACE_IF:[if0]
    
    System Monitoring
    *********************************************************************
    Initializing system environment
    Setting up /tmp directory ...
    Setting up loopback device ...
    ***************************************************
    System is in    AP Router Mode [0]
    ***************************************************
    SEM_GETID got id -1
    Mac: 0, rtcTime:1420070401
    Starting system logging daemon ...OK
    Setting up Ethernet devices ...
    OK
    Configuring Bridge device ...          OK
    Setting the host&domain name ...Finished.
    Configuring net ...          OK
    Configuring LAN device ...          OK
    getRegularDomain,0
    Configuring RT28XX device ...Wlan is in AP Mode
    Using fixWDSLowTP function.
    sh: cannot create /proc/netpktconfig/config_interface: nonexistent directory
    Wan Manager...
    Configuring WAN device[WAN0] ...
    Obtaining IP address from DHCP ... 
    wan is Ready
    Set Domain Routing for FLET'S Square Connection...            
    Starting DNS Proxy ...            FAILED
    Starting DHCP(udhcpd) server ...            OK
    Starting ntpclient ...            
    Setup tc for QoS ... Disabled
    
    SCHEDULE, ServiceWlanLowRateInit ...service_index[0].
    
    SCHEDULE, ServiceWlsRadioOffInit ...service_index[1].
    
    SCHEDULE, ServiceLedOffInit ...service_index[2].
    
    SCHEDULE, ServiceLanOffInit ...service_index[3].
    
    SCHEDULE, ServiceWanOffInit ...service_index[4].
    
    SCHEDULE, ServiceLanLowRateInit ...service_index[5].
    
    SCHEDULE, ServicePowerLedInit ...service_index[6].
    
    
    Schedule starting  [scheduleOpen], ...wait result..
    Schedule result :[Disable (No rules)]. 
    Configuring network routing and filtering ...Iptable restart VPN ACL ...VPN ACL ...
    OK
    Starting SiteBlock server ...            
    Netpacket Filter Open ....              sysGetKernelInfo: netv :1.0
    Kernel netpkt ver netv: 1.0
    OK
    Starting DDNS  ...  Disabled
    Starting UPNPD  ...  WAN Speed = 10 Mbps
    FAILED
    Starting HTTPD server ...           OK
    Staring ALG...           OK
    Starting LLTD ...           OK
    Starting netbios daemon ...  OK
    Initialization has completed
    *We used 6.210000 seconds to initialize all modules*
    pSEM_GETID got id 32769
    [RMGMT DBG] RMGMT_VERSION: 3.42.32
    NewWAN0:[192.168.1.25]  LastWAN0:[0.0.0.0]
    wan0Configuring ...
    Wan IP was changed, Reload related module**
    *** PROCESS MANAGER Starts ***
    Processmanager update modules
    Restarting Iptables ....Clean iptable...OK
    Configuring network routing and filtering ...Iptable restart VPN ACL ...VPN ACL ...
    OK
    OK
    QoS, Stopping
    Setup tc for QoS ... Disabled
    Reloading dnsProxy ...            Stopping DNS Proxy ...            OK
    Set Domain Routing for FLET'S Square Connection...            
    Starting DNS Proxy ...            wan0Configuring ...
    OK
    Stopping igmpProxy ...            OK
    Starting IGMP Proxy ...  OK
    Starting UPNPD  ...  WAN Speed = 1000 Mbps
    OK
    RMMOD ALG H323 [ip_nat_h323]
    RMMOD ALG MMS [ip_nat_mms]
    RMMOD 2nd ALG TFTP [ip_nat_tftp]
    RMMOD ALG TFTP [ip_conntrack_tftp]
    RMMOD ALG Egg [ip_conntrack_egg]
    RMMOD ALG IRC [ip_nat_irc]
    RMMOD ALG Quake3 [ip_nat_quake3]
    RMMOD ALG Talk [ip_nat_talk]
    RMMOD ALG PPTP [ip_nat_pptp]
    RMMOD ALG SNMP [ip_nat_snmp_basic]
    RMMOD ALG FTP [ip_nat_ftp]
    RMMOD 2nd ALG SIP [ip_nat_sip]
    RMMOD ALG SIP [ip_conntrack_sip]
    RMMOD 2nd ALG RTSP [ip_nat_rtsp]
    RMMOD ALG RTSP [ip_conntrack_rtsp]
    Staring ALG...           OK
    Processmanager update modules
    VPN, WAN_IP_CHANGED event received ...Closing ntpclient ...            Starting ntpclient ...            
    Stopping DDNS ...            OK
    Starting DDNS  ...  Disabled
    
    SCHEDULE, ServiceWlanLowRateInit ...service_index[0].
    
    SCHEDULE, ServiceWlsRadioOffInit ...service_index[1].
    
    SCHEDULE, ServiceLedOffInit ...service_index[2].
    
    SCHEDULE, ServiceLanOffInit ...service_index[3].
    
    SCHEDULE, ServiceWanOffInit ...service_index[4].
    
    SCHEDULE, ServiceLanLowRateInit ...service_index[5].
    
    SCHEDULE, ServicePowerLedInit ...service_index[6].
    
    
    Schedule starting  [scheduleOpen], ...wait result..
    Schedule result :[Disable (No rules)]. 
    ==>error
    

広告

WG2600HPx ファーム展開メモ (2)

続き的なもの。

前回OpenSSLによりdecryptしたファイルを用い、KernelとRootfsの取り出し。
ブートローダ用スクリプト, TP (TestProgram), Kernel (HLOS), RootFSの4つのイメージがFIT形式で格納されている。
余談: 以下は全てWindows 10環境(WSL含む)での作業。

バイナリエディタ等でdecryptしたファーム内のhexデータ d00dfeed (D00DFEED) を探し、

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp2/wg2600hp2_1_0_5
$ busybox hexdump -n 256 -C wg2600hp2_1_0_5.bin.pad.dec
00000000  55 53 42 20 41 54 45 52  4d 57 4c 33 30 35 30 00  |USB ATERMWL3050.|
00000010  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
00000020  00 00 ff ff 00 00 00 68  00 00 00 18 6a af 00 00  |.......h....j...|
00000030  00 00 00 00 00 00 00 00  56 45 52 53 49 4f 4e 3a  |........VERSION:|
00000040  20 33 2e 33 39 2e 32 30  0a 4f 45 4d 31 20 56 45  | 3.39.20.OEM1 VE|
00000050  52 53 49 4f 4e 3a 20 31  2e 30 2e 35 0a 43 6f 70  |RSION: 1.0.5.Cop|
00000060  79 72 69 67 68 74 28 63  29 20 4e 45 43 20 50 6c  |yright(c) NEC Pl|
00000070  61 74 66 6f 72 6d 73 2c  20 4c 74 64 2e 20 32 30  |atforms, Ltd. 20|
00000080  30 31 2d 32 30 31 35 0a  00 02 ff fd 00 f9 66 50  |01-2015.......fP|
00000090  00 00 00 18 ce 19 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  d0 0d fe ed 00 f9 66 34  00 00 00 38 00 f9 64 64  |......f4...8..dd|
000000b0  00 00 00 28 00 00 00 11  00 00 00 10 00 00 00 00  |...(............|
000000c0  00 00 00 3c 00 f9 64 2c  00 00 00 00 00 00 00 00  |...<..d,........|
000000d0  00 00 00 00 00 00 00 00  00 00 00 01 00 00 00 00  |................|
000000e0  00 00 00 03 00 00 00 04  00 00 00 32 5c 41 a9 4f  |...........2\A.O|
000000f0  00 00 00 03 00 00 00 17  00 00 00 00 46 6c 61 73  |............Flas|
00000100

それが先頭に来るよう切り詰め。

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp2/wg2600hp2_1_0_5
$ busybox hexdump -n 256 -C wg2600hp2_1_0_5.bin.pad.dec.itb
00000000  d0 0d fe ed 00 f9 66 34  00 00 00 38 00 f9 64 64  |......f4...8..dd|
00000010  00 00 00 28 00 00 00 11  00 00 00 10 00 00 00 00  |...(............|
00000020  00 00 00 3c 00 f9 64 2c  00 00 00 00 00 00 00 00  |...<..d,........|
00000030  00 00 00 00 00 00 00 00  00 00 00 01 00 00 00 00  |................|
00000040  00 00 00 03 00 00 00 04  00 00 00 32 5c 41 a9 4f  |...........2\A.O|
00000050  00 00 00 03 00 00 00 17  00 00 00 00 46 6c 61 73  |............Flas|
00000060  68 69 6e 67 20 6e 6f 72  20 31 30 30 20 31 30 30  |hing nor 100 100|
00000070  30 30 00 00 00 00 00 01  69 6d 61 67 65 73 00 00  |00......images..|
00000080  00 00 00 01 73 63 72 69  70 74 00 00 00 00 00 03  |....script......|
00000090  00 00 00 0a 00 00 00 00  66 6c 61 73 68 2e 73 63  |........flash.sc|
000000a0  72 00 00 00 00 00 00 03  00 00 63 c7 00 00 00 0c  |r.........c.....|
000000b0  69 66 20 74 65 73 74 20  22 78 24 76 65 72 62 6f  |if test "x$verbo|
000000c0  73 65 22 20 3d 20 22 78  22 3b 20 74 68 65 6e 0a  |se" = "x"; then.|
000000d0  66 61 69 6c 65 64 6d 73  67 3d 27 5b 66 61 69 6c  |failedmsg='[fail|
000000e0  65 64 5d 27 0a 65 6c 73  65 0a 66 61 69 6c 65 64  |ed]'.else.failed|
000000f0  6d 73 67 3d 27 23 23 23  23 23 23 23 23 23 23 23  |msg='###########|
00000100

切り詰めたファイルを dumpimage コマンドでリスト表示。

tofu@Tofu-H170W10:/mnt/d/router/NEC/WG2600HP2/wg2600hp2_1_0_5$ dumpimage -l wg2600hp2_1_0_5.bin.pad.dec.itb
FIT description: Flashing nor 100 10000
Created:         Fri Jan 18 19:24:15 2019
 Image 0 (script)
  Description:  flash.scr
  Created:      Fri Jan 18 19:24:15 2019
  Type:         Script
  Compression:  uncompressed
  Data Size:    25543 Bytes = 24.94 KiB = 0.02 MiB
  Hash algo:    crc32
  Hash value:   fad97085
 Image 1 (tp-147c46b934f3a70b73abf2c62847c7685388b4b8)
  Description:  rotary-tp.bin
  Created:      Fri Jan 18 19:24:15 2019
  Type:         Firmware
  Compression:  uncompressed
  Data Size:    66736 Bytes = 65.17 KiB = 0.06 MiB
  Architecture: ARM
  OS:           Unknown OS
  Load Address: unavailable
  Hash algo:    crc32
  Hash value:   22f74fee
 Image 2 (hlos-894c257106b4e407230bdc07bedb9c44ce088f40)
  Description:  openwrt-ipq806x-3.4-uImage
  Created:      Fri Jan 18 19:24:15 2019
  Type:         Firmware
  Compression:  uncompressed
  Data Size:    1925174 Bytes = 1880.05 KiB = 1.84 MiB
  Architecture: ARM
  OS:           Unknown OS
  Load Address: unavailable
  Hash algo:    crc32
  Hash value:   7d55fcec
 Image 3 (fs-73be11f50c9325ae68c43b1ae01663c947d14314)
  Description:  openwrt-ipq806x-squashfs-root.img
  Created:      Fri Jan 18 19:24:15 2019
  Type:         Firmware
  Compression:  uncompressed
  Data Size:    14325760 Bytes = 13990.00 KiB = 13.66 MiB
  Architecture: ARM
  OS:           Unknown OS
  Load Address: unavailable
  Hash algo:    crc32
  Hash value:   bb43bd4c

再び dumpimage コマンドを用い、KernelとRootFSを取り出し。

-i: 入力ファイル
-p: FIT内の位置指定、上記リストの Image n
最後: 出力先ファイル名
tofu@Tofu-H170W10:/mnt/d/router/NEC/WG2600HP2/wg2600hp2_1_0_5$ dumpimage -T flat_dt -i wg2600hp2_1_0_5.bin.pad.dec.itb -p 2 wg2600hp2_1_0_5_kernel.bin
Extracted:
 Image 2 (hlos-894c257106b4e407230bdc07bedb9c44ce088f40)
  Description:  openwrt-ipq806x-3.4-uImage
  Created:      Fri Jan 18 19:24:15 2019
  Type:         Firmware
  Compression:  uncompressed
  Data Size:    1925174 Bytes = 1880.05 KiB = 1.84 MiB
  Architecture: ARM
  OS:           Unknown OS
  Load Address: unavailable
  Hash algo:    crc32
  Hash value:   7d55fcec
tofu@Tofu-H170W10:/mnt/d/router/NEC/WG2600HP2/wg2600hp2_1_0_5$ dumpimage -T flat_dt -i wg2600hp2_1_0_5.bin.pad.dec.itb -p 3 wg2600hp2_1_0_5_rootfs.bin
Extracted:
 Image 3 (fs-73be11f50c9325ae68c43b1ae01663c947d14314)
  Description:  openwrt-ipq806x-squashfs-root.img
  Created:      Fri Jan 18 19:24:15 2019
  Type:         Firmware
  Compression:  uncompressed
  Data Size:    14325760 Bytes = 13990.00 KiB = 13.66 MiB
  Architecture: ARM
  OS:           Unknown OS
  Load Address: unavailable
  Hash algo:    crc32
  Hash value:   bb43bd4c

WG2600HPx ファーム展開メモ

many thanks goroh_kun (@goroh_kun)

ヘッダ(0x0 – 0xF) 除去したものを32byte単位でpadding

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp/wg2600hp_1_0_13
$ dd if=wg2600hp_1_0_13_noheader.bin of=wg2600hp_1_0_13_noheader.bin.pad bs=32 conv=sync
396727+0 records in
396727+0 records out
12695264 bytes (13 MB, 12 MiB) copied, 2.89493 s, 4.4 MB/s

キーを32byteで作成してhexな文字列で取り出し

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp/wg2600hp_1_0_13
$ echo -n "rotary" | dd bs=32 count=1 conv=sync > key.bin
0+1 records in
1+0 records out
32 bytes copied, 0.0061302 s, 5.2 kB/s

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp/wg2600hp_1_0_13
$ busybox hexdump -v -e '1/1 "%02x"' key.bin
726f746172790000000000000000000000000000000000000000000000000000

バイナリファイルへの出力省略してワンライナーでも可。

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp2/wg2600hp2_1_0_5
$ echo -n "rotary" | dd bs=32 count=1 conv=sync 2> /dev/null | busybox hexdump -v -e '1/1 "%02x"'
726f746172790000000000000000000000000000000000000000000000000000

OpenSSLを用いてdecrypt

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp/wg2600hp_1_0_13
$ openssl enc -aes-256-cbc -d -in wg2600hp_1_0_13_noheader.bin.pad -out wg2600hp_1_0_13_noheader.bin.pad.dec -K 726f746172790000000000000000000000000000000000000000000000000000 -iv 0 -nopad

完了

tofu@Tofu-H170W10 MINGW64 ~/router/nec/wg2600hp/wg2600hp_1_0_13
$ busybox hexdump -n 128 -C wg2600hp_1_0_13_noheader.bin.pad.dec
00000000  55 53 42 20 41 54 45 52  4d 57 4c 33 30 35 30 00  |USB ATERMWL3050.|
00000010  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
00000020  00 00 ff ff 00 00 00 69  00 00 00 18 25 c3 00 00  |.......i....%...|
00000030  00 00 00 00 00 00 00 00  56 45 52 53 49 4f 4e 3a  |........VERSION:|
00000040  20 33 2e 32 30 2e 36 37  0a 4f 45 4d 31 20 56 45  | 3.20.67.OEM1 VE|
00000050  52 53 49 4f 4e 3a 20 31  2e 30 2e 31 33 0a 43 6f  |RSION: 1.0.13.Co|
00000060  70 79 72 69 67 68 74 28  63 29 20 4e 45 43 20 50  |pyright(c) NEC P|
00000070  6c 61 74 66 6f 72 6d 73  2c 20 4c 74 64 2e 20 32  |latforms, Ltd. 2|
00000080

WG2600HP2

某フリマアプリで、ブート不可のジャンクとして出品されていたものを購入。
説明を見た限りではブートローダは生きており、KernelかRootfsの破損によりブートできなくなっているものと思われた。

WG2600HP2のコードネームはWG2600HPと同じ “ROTARY” であり、ハードウェアの差異はほとんど無いと思われる。

U-Boot

  • help
    boot> help
    ?       - alias for 'help'
    additional- [NECPF] additional information read/write/erase command
    ar8xxx_dump- Dump ar8xxx registers
    base    - print or set address offset
    bdinfo  - print Board Info structure
    bootipq - bootipq from flash device
    bootm   - boot application image from memory
    bootp   - boot image via network using BOOTP/TFTP protocol
    bootz   - boot Linux zImage image from memory
    chpart  - change active partition
    ckcrc   - [NECPF] check the crc32 in RAM
    cmp     - memory compare
    configid- [NECPF] configid read/write command
    cp      - memory copy
    crc32   - checksum calculation
    debug   - [NECPF] debug command
    dhcp    - boot image via network using DHCP/TFTP protocol
    dumpipq_data- dumpipq_data crashdump collection from memory
    echo    - echo args to console
    env     - environment handling commands
    errorlog- [NECPF] errorlog command
    ethspeed- Force ethernet speed to 10/100/autoneg
    exit    - exit script
    false   - do nothing, unsuccessfully
    fdt     - flattened device tree utility commands
    fuseipq - fuse QFPROM registers from memory
    
    
    go      - start application at address 'addr'
    help    - print command description/usage
    i2c     - I2C sub-system
    iminfo  - print header information for application image
    imxtract- extract a part of a multi-image
    ipq_nand- Switch between SBL and Linux kernel page layout.
    loadb   - load binary file over serial line (kermit mode)
    loady   - load binary file over serial line (ymodem mode)
    loop    - infinite loop on address range
    macaddr - [NECPF] macaddr read/write command
    md      - memory display
    mii     - MII utility commands
    mm      - memory modify (auto-incrementing address)
    mmc     - MMC sub system
    mmcinfo - display MMC info
    mphyrd  - qca8511 packet processor PHY register display
    mphyrw  - qca8511 packet processor PHY register write (fill)
    mprd    - qca8511 packet processor register display
    mprw    - qca8511 packet processor register write (fill)
    mtdparts- define flash/nand partitions
    mtest   - simple RAM read/write test
    mw      - memory write (fill)
    nand    - NAND sub-system
    nboot   - boot from NAND device
    nm      - memory modify (constant address)
    pci     - list and access PCI Configuration Space
    ping    - send ICMP ECHO_REQUEST to network host
    pkg_info- [NECPF] show package information
    presetid- [NECPF] presetid read/write/erase command
    printenv- print environment variables
    randomkey- [NECPF] randomkey read/write command
    reset   - Perform RESET of the CPU
    rf_regdmn- [NECPF] rf_regdmn read command
    rf_serial- [NECPF] rf_serial read command
    run     - run commands in an environment variable
    saveenv - save environment variables to persistent storage
    serial  - [NECPF] serial read/write/erase command
    setenv  - set environment variables
    sf      - SPI flash sub-system
    show_version- [NECPF] show boot/tp/system version
    showvar - print local hushshell variables
    smeminfo- print SMEM FLASH information
    source  - run script from memory
    test    - minimal test like /bin/sh
    tftpboot- boot image via network using TFTP protocol
    tftpput - TFTP put command, for uploading files to a server
    tftpsrv - act as a TFTP server and boot the first received file
    tp      - [NECPF] run test program
    true    - do nothing, successfully
    uartrd  - uartrd from flash device
    uartwr  - uartwr from flash device
    ubi     - ubi commands
    usb     - USB sub-system
    usbboot - boot from USB device
    version - print monitor, compiler and linker version
    

  • version

    boot> version
    
    
    U-Boot 2012.07 [Standard IPQ806X.LN,local] (May 20 2016 - 11:16:41)
    arm-openwrt-linux-uclibcgnueabi-gcc (Linaro GCC 4.6-2012.02) 4.6.3 20120201 (prerelease)
    GNU ld (GNU Binutils) 2.22
    

  • show_version

    boot> show_version
    TP Version = 2.0.0
    Boot Version = 2.0.0
    System (Kernel) Size : 1923472 Bytes (0x001d5990)
    NEC_VERSION=3.39.20
    OEM_VERSION=1.0.5
    

  • printenv

    boot> printenv
    baudrate=115200
    bootargs=console=ttyHSL1,115200n8
    bootcmd=bootipq
    bootdelay=2
    eth1addr=98:f1:99:**:**:**
    ethact=eth1
    ethaddr=98:f1:99:**:**:**
    ethrotate=no
    ipaddr=192.168.0.1
    machid=1260
    stderr=serial
    stdin=serial
    stdout=serial
    
    
    Environment size: 255/65532 bytes
    

  • pkg_info

    boot> pkg_info
    PKG NAME : ROTARY
    CPU : ARMv7 Processor [512f04d0] revision 0
    RAM : 510 MiB
    Flash : 32 MiB
    Device         : S25FL256S
    Sector size    : 64 KiB
    DIPSW : 0x3
    

  • mii device
    boot> mii device
    MII devices: 'IPQ MDIO1' 'IPQ MDIO2'
    Current device: 'IPQ MDIO2'
    

  • help debug
    boot> help debug
    debug - [NECPF] debug command
    
    
    Usage:
    debug - [NECPF] debug command
    debug watchdog enable  - Enable watchdog timer.
    debug watchdog disable - Disable watchdog timer.
    debug watchdog reboot  - Wait for a watchdog timer to expire.
    debug watchdog settime - Set a watchdog time. [sec]
    debug flash read  - flash read.
    debug flash write - flash write.
    debug flash erase - flash erase.
    debug flash info  - flash information.
    debug flash diag  - self diagnostic for flash device.
    debug l2sw read  - l2sw register read.
    debug l2sw write - l2sw register write.
    debug l2sw dump  - l2sw register dump.
    

  • debug l2sw dump

    boot> debug l2sw dump
    ### PHY ###
    
    
    ADDR : PHY0 PHY1 PHY2 PHY3 PHY4
    -----+-------------------------
    0 : 3100 1000 3100 3100 3100
    1 : 7949 7949 7949 7949 7949
    2 : 004d 004d 004d 004d 004d
    3 : d036 d036 d036 d036 d036
    4 : 1de1 1de1 1de1 1de1 1de1
    5 : 0000 0000 0000 0000 0000
    6 : 0004 0004 0004 0004 0004
    7 : 2801 2801 2801 2801 2801
    8 : 0000 0000 0000 0000 0000
    9 : 0200 0200 0200 0200 0200
    a : 0000 0000 0000 0000 0000
    b : 0000 0000 0000 0000 0000
    c : 0000 0000 0000 0000 0000
    d : 4007 4007 4007 4007 4007
    e : 0000 0000 0000 0000 0000
    f : 2000 2000 2000 2000 2000
    10 : 0862 0862 0862 0862 0862
    11 : 0010 0010 0010 0010 0010
    12 : 0000 0000 0000 0000 0000
    13 : 0000 0000 0000 0000 0000
    14 : 082c 082c 082c 082c 082c
    15 : 0000 0000 0000 0000 0000
    16 : 2400 2400 2400 2400 2400
    17 : 0000 0000 0000 0000 0000
    18 : 3200 3200 3200 3200 3200
    19 : 1000 1000 1000 1000 1000
    1a : 0000 0000 0000 0000 0000
    1b : 0000 0000 0000 0000 0000
    1c : 0000 0000 0000 0000 0000
    1d : 003f 003f 003f 003f 003f
    1e : 8000 8000 8000 8000 8000
    1f : 0000 0000 0000 0000 0000
    
    ### DEBUG ###
    
    ADDR : PHY0 PHY1 PHY2 PHY3 PHY4
    -----+-------------------------
    0 : 02ee 02ee 02ee 02ee 02ee
    1 : 02b2 01b1 01b1 01b1 02b2
    2 : 3220 3220 3220 3110 3220
    3 : 3f11 3f11 3f11 3f22 3f22
    4 : fbbb fbbb fbbb fbbb fbbb
    5 : 1c47 1c47 1c47 1c47 1c47
    6 : 0000 0000 0000 0000 0000
    7 : 0000 0000 0000 0000 0000
    8 : 1c00 1c00 1c00 1c00 1c00
    9 : 8000 8000 8000 8000 8000
    a : 3000 3000 3000 3000 3000
    b : bc40 bc40 bc40 bc40 bc40
    c : 6001 6001 6001 6001 6001
    d : 2820 a820 2820 2820 2820
    e : 0003 0003 0003 0003 0003
    f : 0030 0030 0030 0030 0030
    10 : 0000 0000 0000 0000 0000
    11 : 7552 7552 7552 7552 7552
    12 : 4c04 4c04 4c04 4c04 4c04
    13 : c01b c01b c01b c01b c01b
    14 : 0752 0752 0752 0752 0752
    15 : b220 b220 b220 b220 b220
    16 : 8000 8000 8000 8000 8000
    17 : 0000 0000 0000 0000 0000
    18 : 62ea 62ea 62ea 62ea 62ea
    19 : 01f4 01f4 01f4 01f4 01f4
    1a : 01d7 01d7 01d7 01d7 01d7
    1b : 0176 02ee 0176 0176 0176
    1c : 3cbb 3cbb 3cbb 3cbb 3cbb
    1d : 00ec 00ec 00ec 00ec 00ec
    1e : 0076 0076 0076 0076 0076
    1f : 0000 0000 0000 0000 0000
    20 : 0000 0000 0000 0000 0000
    21 : 2d15 2d15 2d15 2d15 2d15
    22 : 1f6a 1f6a 1f6a 1f6a 1f6a
    23 : a200 a200 a200 a200 a200
    24 : 1000 5000 1000 1000 1000
    25 : 0000 0000 0000 0000 0000
    26 : 0000 0000 0000 0002 0000
    27 : 1000 1000 1000 1000 1000
    28 : 0000 0000 0000 0000 0000
    29 : 36dd 36dd 36dd 36dd 36dd
    2a : 0000 0000 0000 0000 0000
    2b : 3a98 3a98 3a98 3a98 3a98
    2c : 0000 0000 0000 0000 0000
    2d : 0000 0000 0000 0000 0000
    2e : 0000 0000 0000 0000 0000
    2f : 0000 0000 0000 0000 0000
    30 : 0000 0000 0000 0000 0000
    31 : 0000 0000 0000 0000 0000
    32 : 2200 2200 2200 2200 2200
    33 : 2200 2200 2200 2200 2200
    34 : 2200 2200 2200 2200 2200
    35 : 0000 0000 0000 0000 0000
    36 : e1ec e1ec e1ec e1ec e1ec
    37 : 6000 6000 6000 6000 6000
    38 : 1111 1111 1111 1111 1111
    39 : 7359 7359 7359 7359 7359
    3a : ee6b ee6b ee6b ee6b ee6b
    3b : 5a5a 5a5a 5a5a 5a5a 5a5a
    3c : 5a5a 5a5a 5a5a 5a5a 5a5a
    3d : 6860 6860 6860 6860 6860
    3e : e0d8 e0d8 e0d8 e0d8 e0d8
    3f : 8000 8000 8000 8000 8000
    
    ### PHY MMD3 ###
    
    ADDR : PHY0 PHY1 PHY2 PHY3 PHY4
    -----+-------------------------
    0 : 0000 0000 0000 0000 0000
    1 : 0000 0000 0000 0000 0000
    2 : 0000 0000 0000 0000 0000
    3 : 0000 0000 0000 0000 0000
    4 : 0000 0000 0000 0000 0000
    5 : 0089 0089 0089 0089 0089
    6 : 0000 0000 0000 0000 0000
    7 : 0000 0000 0000 0000 0000
    8 : 0000 0000 0000 0000 0000
    9 : 0000 0000 0000 0000 0000
    a : 0000 0000 0000 0000 0000
    b : 0000 0000 0000 0000 0000
    c : 0000 0000 0000 0000 0000
    d : 0000 0000 0000 0000 0000
    e : 0000 0000 0000 0000 0000
    f : 0000 0000 0000 0000 0000
    10 : 0000 0000 0000 0000 0000
    11 : 0000 0000 0000 0000 0000
    12 : 0000 0000 0000 0000 0000
    13 : 0000 0000 0000 0000 0000
    14 : 0006 0006 0006 0006 0006
    15 : 0000 0000 0000 0000 0000
    16 : 0000 0000 0000 0000 0000
    17 : 0000 0000 0000 0000 0000
    18 : 0000 0000 0000 0000 0000
    19 : 0000 0000 0000 0000 0000
    1a : 0000 0000 0000 0000 0000
    1b : 0000 0000 0000 0000 0000
    1c : 0000 0000 0000 0000 0000
    1d : 0000 0000 0000 0000 0000
    1e : 0000 0000 0000 0000 0000
    1f : 0000 0000 0000 0000 0000
    20 : 0000 0000 0000 0000 0000
    21 : 0000 0000 0000 0000 0000
    22 : 0000 0000 0000 0000 0000
    23 : 0000 0000 0000 0000 0000
    24 : 0000 0000 0000 0000 0000
    25 : 0000 0000 0000 0000 0000
    26 : 0000 0000 0000 0000 0000
    27 : 0000 0000 0000 0000 0000
    28 : 0000 0000 0000 0000 0000
    29 : 0000 0000 0000 0000 0000
    2a : 0000 0000 0000 0000 0000
    2b : 0000 0000 0000 0000 0000
    2c : 0000 0000 0000 0000 0000
    2d : 0000 0000 0000 0000 0000
    2e : 0000 0000 0000 0000 0000
    2f : 0000 0000 0000 0000 0000
    30 : 0000 0000 0000 0000 0000
    31 : 0000 0000 0000 0000 0000
    32 : 0000 0000 0000 0000 0000
    33 : 0000 0000 0000 0000 0000
    34 : 0000 0000 0000 0000 0000
    35 : 0000 0000 0000 0000 0000
    36 : 0000 0000 0000 0000 0000
    37 : 0000 0000 0000 0000 0000
    38 : 0000 0000 0000 0000 0000
    39 : 0000 0000 0000 0000 0000
    3a : 0000 0000 0000 0000 0000
    3b : 0000 0000 0000 0000 0000
    3c : 0000 0000 0000 0000 0000
    3d : 0000 0000 0000 0000 0000
    3e : 0000 0000 0000 0000 0000
    3f : 0000 0000 0000 0000 0000
    40 : 0000 0000 0000 0000 0000
    41 : 0000 0000 0000 0000 0000
    42 : 0000 0000 0000 0000 0000
    43 : 0000 0000 0000 0000 0000
    44 : 0000 0000 0000 0000 0000
    45 : 0000 0000 0000 0000 0000
    46 : 0000 0000 0000 0000 0000
    47 : 0000 0000 0000 0000 0000
    48 : 0000 0000 0000 0000 0000
    49 : 0000 0000 0000 0000 0000
    4a : 0000 0000 0000 0000 0000
    4b : 0000 0000 0000 0000 0000
    4c : 0000 0000 0000 0000 0000
    4d : 0000 0000 0000 0000 0000
    4e : 0000 0000 0000 0000 0000
    4f : 0000 0000 0000 0000 0000
    50 : 0000 0000 0000 0000 0000
    51 : 0000 0000 0000 0000 0000
    52 : 0000 0000 0000 0000 0000
    53 : 0000 0000 0000 0000 0000
    54 : 0000 0000 0000 0000 0000
    55 : 0000 0000 0000 0000 0000
    56 : 0000 0000 0000 0000 0000
    57 : 0000 0000 0000 0000 0000
    58 : 0000 0000 0000 0000 0000
    59 : 0000 0000 0000 0000 0000
    5a : 0000 0000 0000 0000 0000
    5b : 0000 0000 0000 0000 0000
    5c : 0000 0000 0000 0000 0000
    5d : 0000 0000 0000 0000 0000
    5e : 0000 0000 0000 0000 0000
    5f : 0000 0000 0000 0000 0000
    60 : 0000 0000 0000 0000 0000
    61 : 0000 0000 0000 0000 0000
    62 : 0000 0000 0000 0000 0000
    63 : 0000 0000 0000 0000 0000
    64 : 0000 0000 0000 0000 0000
    65 : 0000 0000 0000 0000 0000
    66 : 0000 0000 0000 0000 0000
    67 : 0000 0000 0000 0000 0000
    68 : 0000 0000 0000 0000 0000
    69 : 0000 0000 0000 0000 0000
    6a : 0000 0000 0000 0000 0000
    6b : 0000 0000 0000 0000 0000
    6c : 0000 0000 0000 0000 0000
    6d : 0000 0000 0000 0000 0000
    6e : 0000 0000 0000 0000 0000
    6f : 0000 0000 0000 0000 0000
    70 : 0000 0000 0000 0000 0000
    71 : 0000 0000 0000 0000 0000
    72 : 0000 0000 0000 0000 0000
    73 : 0000 0000 0000 0000 0000
    74 : 0000 0000 0000 0000 0000
    75 : 0000 0000 0000 0000 0000
    76 : 0000 0000 0000 0000 0000
    77 : 0000 0000 0000 0000 0000
    78 : 0000 0000 0000 0000 0000
    79 : 0000 0000 0000 0000 0000
    7a : 0000 0000 0000 0000 0000
    7b : 0000 0000 0000 0000 0000
    7c : 0000 0000 0000 0000 0000
    7d : 0000 0000 0000 0000 0000
    7e : 0000 0000 0000 0000 0000
    7f : 0000 0000 0000 0000 0000
    8000 : 0000 0000 0000 0000 0000
    8001 : 8187 8187 8187 8187 8187
    8002 : 6a24 6a24 6a24 6a24 6a24
    8003 : 5d09 5d09 5d09 5d09 5d09
    8004 : 63f3 63f3 63f3 63f3 63f3
    8005 : 8b32 8b32 8b32 8b32 8b32
    8006 : c000 c000 c000 c000 c000
    8007 : 83f6 83f6 83f6 83f6 83f6
    8008 : 3030 3030 3030 3030 3030
    8009 : 00d1 00d1 00d1 00d1 00d1
    800a : 1040 1040 1040 1040 1040
    800b : 0094 0094 0094 0094 0094
    800c : 00eb 00eb 00eb 00eb 00eb
    800d : cb3f cb3f cb3f cb3f cb3f
    800e : 0000 0000 0000 0000 0000
    800f : 1000 1000 1000 1000 1000
    8010 : 0000 0000 0000 0000 0000
    8011 : 00c0 00c0 00c0 00c0 00c0
    8012 : 0000 0000 0000 0000 0000
    8013 : 0000 0000 0000 0000 0000
    8014 : 0000 0000 0000 0000 0000
    8015 : 0000 0000 0000 0000 0000
    8016 : 0000 0000 0000 0000 0000
    8017 : 0000 0000 0000 0000 0000
    8018 : 0000 0000 0000 0000 0000
    8019 : 0000 0000 0000 0000 0000
    801a : 0000 0000 0000 0000 0000
    801b : 0000 0000 0000 0000 0000
    801c : 0000 0000 0000 0000 0000
    801d : 0000 0000 0000 0000 0000
    801e : 0000 0000 0000 0000 0000
    801f : 0000 0000 0000 0000 0000
    8020 : 0000 0000 0000 0000 0000
    8021 : 0000 0000 0000 0000 0000
    8022 : 0000 0000 0000 0000 0000
    8023 : 0000 0000 0000 0000 0000
    8024 : 0000 0000 0000 0000 0000
    8025 : 0000 0000 0000 0000 0000
    8026 : 0000 0000 0000 0000 0000
    8027 : 0000 0000 0000 0000 0000
    8028 : 0000 0000 0000 0000 0000
    8029 : 0000 0000 0000 0000 0000
    802a : 0000 0000 0000 0000 0000
    802b : 0000 0000 0000 0000 0000
    802c : 0000 0000 0000 0000 0000
    802d : 0000 0000 0000 0000 0000
    802e : 0000 0000 0000 0000 0000
    802f : 0000 0000 0000 0000 0000
    8030 : 0000 0000 0000 0000 0000
    8031 : 0000 0000 0000 0000 0000
    8032 : 0000 0000 0000 0000 0000
    8033 : 0000 0000 0000 0000 0000
    8034 : 0000 0000 0000 0000 0000
    8035 : 0000 0000 0000 0000 0000
    8036 : 0000 0000 0000 0000 0000
    8037 : 0000 0000 0000 0000 0000
    8038 : 0000 0000 0000 0000 0000
    8039 : 0000 0000 0000 0000 0000
    803a : 0000 0000 0000 0000 0000
    803b : 0000 0000 0000 0000 0000
    803c : 0000 0000 0000 0000 0000
    803d : 0000 0000 0000 0000 0000
    803e : 0000 0000 0000 0000 0000
    803f : 0000 0000 0000 0000 0000
    8040 : 0000 0000 0000 0000 0000
    8041 : 0000 0000 0000 0000 0000
    8042 : 0000 0000 0000 0000 0000
    8043 : 0000 0000 0000 0000 0000
    8044 : 0000 0000 0000 0000 0000
    8045 : 0000 0000 0000 0000 0000
    8046 : 0000 0000 0000 0000 0000
    8047 : 0000 0000 0000 0000 0000
    8048 : 0000 0000 0000 0000 0000
    8049 : 0000 0000 0000 0000 0000
    804a : 0000 0000 0000 0000 0000
    804b : 0000 0000 0000 0000 0000
    804c : 0000 0000 0000 0000 0000
    804d : 0000 0000 0000 0000 0000
    804e : 0062 0062 0062 0062 0062
    804f : 07a7 07a7 07a7 07a7 07a7
    8050 : 2956 2956 2956 2956 2956
    8051 : 2e70 2e70 2e70 2e70 2e70
    8052 : 5580 5580 5580 5580 5580
    8053 : 005e 005e 005e 005e 005e
    8054 : 52b4 52b4 52b4 52b4 52b4
    8055 : 0e14 0e14 0e14 0e14 0e14
    8056 : 0148 0148 0148 0148 0148
    8057 : 06e2 06e2 06e2 06e2 06e2
    8058 : 0dbd 0dbd 0dbd 0dbd 0dbd
    8059 : 001d 001d 001d 001d 001d
    805a : 0000 0000 0000 0000 0000
    805b : 1917 1917 1917 1917 1917
    805c : 312c 312c 312c 312c 312c
    805d : 10b1 10b1 10b1 10b1 10b1
    805e : 000b 000b 000b 000b 000b
    805f : 480f 480f 480f 480f 480f
    8060 : 0175 0175 0175 0175 0175
    8061 : 2e2e 2e2e 2e2e 2e2e 2e2e
    8062 : 0000 0000 0000 0000 0000
    8063 : 4064 4064 4064 4064 4064
    8064 : 2222 1111 2222 2222 2222
    8065 : 0000 0000 0001 0000 0000
    8066 : 0001 0000 0001 0001 0000
    8067 : 0001 0000 0001 0001 0001
    8068 : 0001 0001 0000 0000 0001
    8069 : d0d0 d0d0 d0d0 d0d0 d0d0
    806a : d0d0 d0d0 d0d0 d0d0 d0d0
    806b : 0000 0000 0000 0000 0000
    806c : 1916 1916 1916 1916 1916
    806d : 0000 0000 0000 0000 0000
    806e : 888b 888b 888b 888b 888b
    806f : 67ef 67ef 67ef 67ef 67ef
    8070 : 0300 0300 0300 0300 0300
    8071 : 0000 0000 0000 0000 0000
    8072 : 0000 0000 0000 0000 0000
    8073 : 0000 0000 0000 0000 0000
    8074 : 0000 0000 0000 0000 0000
    8075 : 0000 0000 0000 0000 0000
    8076 : 0000 0000 0000 0000 0000
    8077 : 0000 0000 0000 0000 0000
    8078 : 0000 0000 0000 0000 0000
    8079 : 0000 0000 0000 0000 0000
    807a : 0000 0000 0000 0000 0000
    807b : 0000 0000 0000 0000 0000
    807c : 0000 0000 0000 0000 0000
    807d : 0000 0000 0000 0000 0000
    807e : 0000 0000 0000 0000 0000
    807f : 0000 0000 0000 0000 0000
    
    ### PHY MMD7 ###
    
    ADDR : PHY0 PHY1 PHY2 PHY3 PHY4
    -----+-------------------------
    0 : 2000 2000 2000 2000 2000
    1 : 0000 0000 0000 0000 0000
    2 : 0000 0000 0000 0000 0000
    3 : 0000 0000 0000 0000 0000
    4 : 0000 0000 0000 0000 0000
    5 : 0089 0089 0089 0089 0089
    6 : 0000 0000 0000 0000 0000
    7 : 0000 0000 0000 0000 0000
    8 : 0000 0000 0000 0000 0000
    9 : 0000 0000 0000 0000 0000
    a : 0000 0000 0000 0000 0000
    b : 0000 0000 0000 0000 0000
    c : 0000 0000 0000 0000 0000
    d : 0000 0000 0000 0000 0000
    e : 0000 0000 0000 0000 0000
    f : 0000 0000 0000 0000 0000
    10 : 0000 0000 0000 0000 0000
    11 : 0000 0000 0000 0000 0000
    12 : 0000 0000 0000 0000 0000
    13 : 0000 0000 0000 0000 0000
    14 : 0000 0000 0000 0000 0000
    15 : 0000 0000 0000 0000 0000
    16 : 0000 0000 0000 0000 0000
    17 : 0000 0000 0000 0000 0000
    18 : 0000 0000 0000 0000 0000
    19 : 0000 0000 0000 0000 0000
    1a : 0000 0000 0000 0000 0000
    1b : 0000 0000 0000 0000 0000
    1c : 0000 0000 0000 0000 0000
    1d : 0000 0000 0000 0000 0000
    1e : 0000 0000 0000 0000 0000
    1f : 0000 0000 0000 0000 0000
    20 : 0000 0000 0000 0000 0000
    21 : 0000 0000 0000 0000 0000
    22 : 0000 0000 0000 0000 0000
    23 : 0000 0000 0000 0000 0000
    24 : 0000 0000 0000 0000 0000
    25 : 0000 0000 0000 0000 0000
    26 : 0000 0000 0000 0000 0000
    27 : 0000 0000 0000 0000 0000
    28 : 0000 0000 0000 0000 0000
    29 : 0000 0000 0000 0000 0000
    2a : 0000 0000 0000 0000 0000
    2b : 0000 0000 0000 0000 0000
    2c : 0000 0000 0000 0000 0000
    2d : 0000 0000 0000 0000 0000
    2e : 0000 0000 0000 0000 0000
    2f : 0000 0000 0000 0000 0000
    30 : 0000 0000 0000 0000 0000
    31 : 0000 0000 0000 0000 0000
    32 : 0000 0000 0000 0000 0000
    33 : 0000 0000 0000 0000 0000
    34 : 0000 0000 0000 0000 0000
    35 : 0000 0000 0000 0000 0000
    36 : 0000 0000 0000 0000 0000
    37 : 0000 0000 0000 0000 0000
    38 : 0000 0000 0000 0000 0000
    39 : 0000 0000 0000 0000 0000
    3a : 0000 0000 0000 0000 0000
    3b : 0000 0000 0000 0000 0000
    3c : 0000 0000 0000 0000 0000
    3d : 0000 0000 0000 0000 0000
    3e : 0000 0000 0000 0000 0000
    3f : 0000 0000 0000 0000 0000
    40 : 0000 0000 0000 0000 0000
    41 : 0000 0000 0000 0000 0000
    42 : 0000 0000 0000 0000 0000
    43 : 0000 0000 0000 0000 0000
    44 : 0000 0000 0000 0000 0000
    45 : 0000 0000 0000 0000 0000
    46 : 0000 0000 0000 0000 0000
    47 : 0000 0000 0000 0000 0000
    48 : 0000 0000 0000 0000 0000
    49 : 0000 0000 0000 0000 0000
    4a : 0000 0000 0000 0000 0000
    4b : 0000 0000 0000 0000 0000
    4c : 0000 0000 0000 0000 0000
    4d : 0000 0000 0000 0000 0000
    4e : 0000 0000 0000 0000 0000
    4f : 0000 0000 0000 0000 0000
    50 : 0000 0000 0000 0000 0000
    51 : 0000 0000 0000 0000 0000
    52 : 0000 0000 0000 0000 0000
    53 : 0000 0000 0000 0000 0000
    54 : 0000 0000 0000 0000 0000
    55 : 0000 0000 0000 0000 0000
    56 : 0000 0000 0000 0000 0000
    57 : 0000 0000 0000 0000 0000
    58 : 0000 0000 0000 0000 0000
    59 : 0000 0000 0000 0000 0000
    5a : 0000 0000 0000 0000 0000
    5b : 0000 0000 0000 0000 0000
    5c : 0000 0000 0000 0000 0000
    5d : 0000 0000 0000 0000 0000
    5e : 0000 0000 0000 0000 0000
    5f : 0000 0000 0000 0000 0000
    60 : 0000 0000 0000 0000 0000
    61 : 0000 0000 0000 0000 0000
    62 : 0000 0000 0000 0000 0000
    63 : 0000 0000 0000 0000 0000
    64 : 0000 0000 0000 0000 0000
    65 : 0000 0000 0000 0000 0000
    66 : 0000 0000 0000 0000 0000
    67 : 0000 0000 0000 0000 0000
    68 : 0000 0000 0000 0000 0000
    69 : 0000 0000 0000 0000 0000
    6a : 0000 0000 0000 0000 0000
    6b : 0000 0000 0000 0000 0000
    6c : 0000 0000 0000 0000 0000
    6d : 0000 0000 0000 0000 0000
    6e : 0000 0000 0000 0000 0000
    6f : 0000 0000 0000 0000 0000
    70 : 0000 0000 0000 0000 0000
    71 : 0000 0000 0000 0000 0000
    72 : 0000 0000 0000 0000 0000
    73 : 0000 0000 0000 0000 0000
    74 : 0000 0000 0000 0000 0000
    75 : 0000 0000 0000 0000 0000
    76 : 0000 0000 0000 0000 0000
    77 : 0000 0000 0000 0000 0000
    78 : 0000 0000 0000 0000 0000
    79 : 0000 0000 0000 0000 0000
    7a : 0000 0000 0000 0000 0000
    7b : 0000 0000 0000 0000 0000
    7c : 0000 0000 0000 0000 0000
    7d : 0000 0000 0000 0000 0000
    7e : 0000 0000 0000 0000 0000
    7f : 0000 0000 0000 0000 0000
    8000 : 0000 0000 0000 0000 0000
    8001 : 0000 0000 0000 0000 0000
    8002 : 0000 0000 0000 0000 0000
    8003 : 0000 0000 0000 0000 0000
    8004 : 0000 0000 0000 0000 0000
    8005 : 0000 0000 0000 0000 0000
    8006 : 0000 0000 0000 0000 0000
    8007 : 0000 0000 0000 0000 0000
    8008 : 0000 0000 0000 0000 0000
    8009 : 0000 0000 0000 0000 0000
    800a : 0000 0000 0000 0000 0000
    800b : 0000 0000 0000 0000 0000
    800c : 0000 0000 0000 0000 0000
    800d : 0000 0000 0000 0000 0000
    800e : 0000 0000 0000 0000 0000
    800f : 0000 0000 0000 0000 0000
    8010 : 0000 0000 0000 0000 0000
    8011 : 0000 0000 0000 0000 0000
    8012 : 0000 0000 0000 0000 0000
    8013 : 0000 0000 0000 0000 0000
    8014 : 0000 0000 0000 0000 0000
    8015 : 0000 0000 0000 0000 0000
    8016 : 0000 0000 0000 0000 0000
    8017 : a000 a000 a000 a000 a000
    8018 : 0000 0000 0000 0000 0000
    8019 : 0000 0000 0000 0000 0000
    801a : 392a 392a 392a 392a 392a
    801b : 0000 0000 0000 0000 0000
    801c : 0000 0000 0000 0000 0000
    801d : 0000 0000 0000 0000 0000
    801e : 00c0 00c0 00c0 00c0 00c0
    801f : 0000 0000 0000 0000 0000
    8020 : 0000 0000 0000 0000 0000
    8021 : 0000 0000 0000 0000 0000
    8022 : 0000 0000 0000 0000 0000
    8023 : 0000 0000 0000 0000 0000
    8024 : 0d10 0d10 0d10 0d10 0d10
    8025 : 0d0d 0d0d 0d0d 0d0d 0d0d
    8026 : 0a0a 0a0a 0a0a 0a0a 0a0a
    8027 : 8a05 8a05 8a05 8a05 8a05
    8028 : 001f 001f 001f 001f 001f
    8029 : 0000 0000 0000 0000 0000
    802a : 0000 0000 0000 0000 0000
    802b : 0000 0000 0000 0000 0000
    802c : 0000 0000 0000 0000 0000
    802d : 0000 0000 0000 0000 0000
    802e : 0000 0000 0000 0000 0000
    802f : 0000 0000 0000 0000 0000
    8030 : 190f 190f 190f 190f 190f
    8031 : 0e05 0e05 0e05 0e05 0e05
    8032 : 0008 0008 0008 0008 0008
    8033 : 0400 0400 0400 0400 0400
    8034 : 0000 0000 0000 0000 0000
    8035 : 0000 0000 0000 0000 0000
    8036 : 0000 0000 0000 0000 0000
    8037 : 0000 0000 0000 0000 0000
    8038 : 026a 0000 0000 0000 0000
    8039 : 0cb9 0cb9 0cb9 0cb9 0cb9
    803a : 08a1 08a1 08a1 08a1 08a1
    803b : 0000 0000 0000 0000 0000
    803c : 0000 0000 0000 0000 0000
    803d : 0000 0000 0000 0000 0000
    803e : 0000 0000 0000 0000 0000
    803f : 0000 0000 0000 0000 0000
    8040 : 0000 0000 0000 0000 0000
    8041 : 0000 0000 0000 0000 0000
    8042 : 0000 0000 0000 0000 0000
    8043 : 0000 0000 0000 0000 0000
    8044 : 0000 0000 0000 0000 0000
    8045 : 0000 0000 0000 0000 0000
    8046 : 0000 0000 0000 0000 0000
    8047 : 0000 0000 0000 0000 0000
    8048 : 0000 0000 0000 0000 0000
    8049 : 0000 0000 0000 0000 0000
    804a : 0000 0000 0000 0000 0000
    804b : 00f0 00f0 00f0 00f0 00f0
    804c : 0007 0007 0007 0007 0007
    804d : 0000 0000 0000 0000 0000
    804e : 0000 0000 0000 0000 0000
    804f : 0000 0000 0000 0000 0000
    8050 : 0000 0000 0000 0000 0000
    8051 : 0000 0000 0000 0000 0000
    8052 : 0000 0000 0000 0000 0000
    8053 : 0000 0000 0000 0000 0000
    8054 : 0000 0000 0000 0000 0000
    8055 : 0000 0000 0000 0000 0000
    8056 : 0000 0000 0000 0000 0000
    8057 : 0000 0000 0000 0000 0000
    8058 : 0000 0000 0000 0000 0000
    8059 : 0000 0000 0000 0000 0000
    805a : 0000 0000 0000 0000 0000
    805b : 0000 0000 0000 0000 0000
    805c : 0000 0000 0000 0000 0000
    805d : 0000 0000 0000 0000 0000
    805e : 0000 0000 0000 0000 0000
    805f : 0000 0000 0000 0000 0000
    8060 : 0000 0000 0000 0000 0000
    8061 : 0000 0000 0000 0000 0000
    8062 : 0000 0000 0000 0000 0000
    8063 : 0000 0000 0000 0000 0000
    8064 : 0000 0000 0000 0000 0000
    8065 : 0000 0000 0000 0000 0000
    8066 : 0000 0000 0000 0000 0000
    8067 : 0000 0000 0000 0000 0000
    8068 : 0000 0000 0000 0000 0000
    8069 : 0000 0000 0000 0000 0000
    806a : 0000 0000 0000 0000 0000
    806b : 0000 0000 0000 0000 0000
    806c : 0000 0000 0000 0000 0000
    806d : 0000 0000 0000 0000 0000
    806e : 0000 0000 0000 0000 0000
    806f : 0000 0000 0000 0000 0000
    8070 : 0000 0000 0000 0000 0000
    8071 : 0000 0000 0000 0000 0000
    8072 : 0000 0000 0000 0000 0000
    8073 : 0000 0000 0000 0000 0000
    8074 : 0000 0000 0000 0000 0000
    8075 : 0000 0000 0000 0000 0000
    8076 : 0000 0000 0000 0000 0000
    8077 : 0000 0000 0000 0000 0000
    8078 : 0000 0000 0000 0000 0000
    8079 : 0000 0000 0000 0000 0000
    807a : 0000 0000 0000 0000 0000
    807b : 0000 0000 0000 0000 0000
    807c : 0000 0000 0000 0000 0000
    807d : 0000 0000 0000 0000 0000
    807e : 0000 0000 0000 0000 0000
    807f : 0000 0000 0000 0000 0000
    
    ### L2SW ###
    
    ADDR : +0       +4       +8       +c
    -----+------------------------------------
    0 : 00001302 80000080 01000000 06000000
    10 : 002613a0 f0107650 00002586 00003f1f
    20 : 3f000e00 0001008b 00000000 00000000
    30 : 80000700 00000000 0f000000 00000000
    40 : 20700aaa 00000000 000088a8 00000000
    50 : cc36cc36 ca36ca36 c936c936 03ffff00
    60 : 00000001 00000000 00000000 00000000
    70 : b00ee060 03707f07 000005ee 0000004e
    80 : 00001280 000012c2 00001280 00001280
    90 : 00001280 0000004e 00000000 00000000
    a0 : 00000000 00000000 00000000 00000000
    b0 : 00000000 00000000 00000000 00000608
    c0 : 00000000 00000000 80901040 00000000
    d0 : fffbff7e 00000001 00000100 000303ff
    e0 : c74164de
    
    100 : 00000000 00000000 00000000 00000000
    110 : 00000000 00000000 00000000 00000000
    120 : 00240024 00000000 00240024 00000000
    130 : 00110011 00000000 00240024 00000000
    140 : 00240024 00000000 00240024 00000000
    150 : 00240024 00000000 00240024 00000000
    160 : 00240024 00000000 00240024
    
    200 : 00000001 00005000 00400040 00000000
    210 : 00000000 00000000 00000000 00000000
    220 : 00000000 00000000 00000000 00000000
    230 : 00000000 00000000 00000000 00000000
    240 : 00000000 00000000 00000000 00000000
    250 : 00000000 00000000 00000000 00000000
    260 : 00000000 20000000 00000000 00000000
    270 : 0000000f
    
    400 : 00000000 00000000 00000000 00000000
    410 : 00000000 00000000 00000000 00000000
    420 : 00010001 00003040 00020001 00003040
    430 : 00010001 00003040 00010001 00003040
    440 : 00010001 00003040 00010001 00003040
    450 : 00020001 00003040
    
    600 : 00000000 00000000 00000000 00000000
    610 : 00000000 00000000 d0e8002b 00000000
    620 : 001000f0 007f7f7f 00000000 00000000
    630 : 00000000 11111111 22222222 33333333
    640 : 44444444 55555555 66666666 77777777
    650 : 76543210 00000000 00000000 00000000
    660 : 0014003c 00000018 00007000 00140040
    670 : 00000018 00007000 00140039 00000018
    680 : 00007000 00140035 00000018 00007000
    690 : 0014002d 00000018 00007000 0014001d
    6a0 : 00000018 00007000 00140002 00000018
    6b0 : 00007000 00000000 00000000 00000000
    6c0 : 00000000 00000000 00000000 00000000
    6d0 : 00000000 00000000 00000000 00000000
    6e0 : 00000000 00000000 00000000 00000000
    6f0 : 00000000 00000000 00000000 00000000
    700 : 00000000 00000000 00000000 00000000
    710 : ffffffff ffffffff ffffffff
    
    800 : 01200188 00000000 007f000e 00000000
    810 : 54332201 33221100 00000000 00000000
    820 : 00000000 00000000 00000000 00000000
    830 : 10841041 00041041 00041041 00041041
    840 : 00041041 10841041 10841041 00000000
    850 : 00000000 00000000 00000000 00000000
    860 : 00000000 00000000 00000000 00000000
    870 : 00000000 00000000 00000000 00000000
    880 : 00000000 00000000 00000000 00000000
    890 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff
    8a0 : 7fff7fff 7fff7fff 00000000 00000002
    8b0 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff
    8c0 : 7fff7fff 7fff7fff 00000000 00000002
    8d0 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff
    8e0 : 7fff7fff 7fff7fff 00000000 00000002
    8f0 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff
    900 : 7fff7fff 7fff7fff 00000000 00000002
    910 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff
    920 : 7fff7fff 7fff7fff 00000000 00000002
    930 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff
    940 : 7fff7fff 7fff7fff 00000000 00000002
    950 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff
    960 : 7fff7fff 7fff7fff 00000000 00000002
    970 : 28000000 000001c0 28000000 000001c2
    980 : 28000000 000001c2 28000000 000001c2
    990 : 28000000 000001c2 28000000 000001c2
    9a0 : 28000000 000001c0 00000000 00000000
    9b0 : 003a004a 003a004a 003a004a 003a004a
    9c0 : 003a004a 003a004a 003a004a 00000000
    9d0 : 00000000 00000000 00000000 00000000
    9e0 : 00000000 00000000 00000000 00000000
    9f0 : 00000000 00000000 00000000 00000000
    a00 : 00007fff 00047fff 00007fff 00047fff
    a10 : 00007fff 00047fff 00007fff 00047fff
    a20 : 00007fff 00047fff 00007fff 00047fff
    a30 : 00007fff 00047fff 00007fff 00047fff
    a40 : 00007fff 00047fff 00007fff 00047fff
    a50 : 00007fff 00047fff 00007fff 00047fff
    a60 : 00007fff 00047fff 00007fff 00047fff
    a70 : 00007fff 00047fff 00007fff 00047fff
    a80 : 00007fff 00047fff 00007fff 00047fff
    a90 : 00007fff 00047fff 00007fff 00047fff
    aa0 : 00007fff 00047fff 00007fff 00047fff
    ab0 : 00007fff 00047fff 00007fff 00047fff
    ac0 : 00007fff 00047fff 00007fff 00047fff
    ad0 : 00007fff 00047fff 00007fff 00047fff
    ae0 : 00007fff 00047fff 00007fff 00047fff
    af0 : 00007fff 00047fff 00007fff 00047fff
    b00 : 18407fff 00047fff 00000000 00000000
    b10 : 18407fff 00047fff 00000000 00000000
    b20 : 18407fff 00047fff 00000000 00000000
    b30 : 18407fff 00047fff 00000000 00000000
    b40 : 18407fff 00047fff 00000000 00000000
    b50 : 18407fff 00047fff 00000000 00000000
    b60 : 18407fff 00047fff 00000000 00000000
    b70 : 00012345
    
    c00 : 00000000 00000000 00000000 00000000
    c10 : 00000000 00000000 00000000 00000000
    c20 : 00000000 00000000 00000000 00000000
    c30 : 00000000 0500015e 00000000 00000000
    c40 : 00000000 00000000 00000000 00000000
    c50 : 00000000 00000000 00000000 00000000
    c60 : 00000000 00000000 00000000 00000000
    c70 : 00010001 00010001 00010001 00000001
    c80 : 03333333
    

Kernel

RootFSのsquashfsを破損しており、マウントできずKernel Panicを起こしboot loop。

  • bootlog

    U-Boot 2012.07 [Standard IPQ806X.LN,local] (May 20 2016 - 11:16:41)
    
    smem ram ptable found: ver: 0 len: 5
    DRAM:  491 MiB
    NAND:  ipq_nand: unknown NAND device manufacturer: 0 device: 0
    ipq_nand: failed to identify device
    SF: Detected S25FL256S with page size 64 KiB, total 32 MiB
    ipq_spi: page_size: 0x100, sector_size: 0x10000, size: 0x2000000
    32 MiB
    MMC:   
    *** Warning - bad CRC, using default environment
    
    PCI0 Link Intialized
    PCI1 Link Intialized
    In:    serial
    Out:   serial
    Err:   serial
    PRODUCTDATA CRC Verify OK.
    Net:   MAC1 addr:98:f1:99:**:**:**
    athrs17_reg_init: complete
    athrs17_vlan_config ...done
    S17c init  done
    MAC2 addr:98:f1:99:**:**:**
    eth0, eth1
    now booting auto ...
    MMC Device 0 not found
    MMC Device 0 not found
    
    NAND read: device 1 offset 0x860000, size 0x200000
     2097152 bytes read: OK
       Image Name:   Linux-3.4.103
       Image Type:   ARM Linux Kernel Image (uncompressed)
       Data Size:    1923472 Bytes = 1.8 MiB
       Load Address: 41508000
       Entry Point:  41508000
       Verifying Checksum ... OK
       Loading Kernel Image ... OK
    OK
    info: "mtdparts" not set
    Using machid 0x1260 from environment
    
    Starting kernel ...
    
    [    0.000000] Booting Linux on physical CPU 0
    [    0.000000] Linux version 3.4.103 (araki@junmple-build) (gcc version 4.6.3 20120201 (prerelease) (Linaro GCC 4.6-2012.02) ) #1 SMP PREEMPT Fri Jan 18 19:23:35 JST 2019
    [    0.000000] CPU: ARMv7 Processor [512f04d0] revision 0 (ARMv7), cr=10c5387d
    [    0.000000] CPU: PIPT / VIPT nonaliasing data cache, PIPT instruction cache
    [    0.000000] Machine: NECPF Rotary board based Qualcomm Atheros AP148 reference board
    [    0.000000] msm_reserve_memory: 0x44000000, 0x600000
    [    0.000000] msm_reserve_memory: 0x44600000, 0x200000
    [    0.000000] memory pool 3 (start 5fc00000 size 400000) initialized
    [    0.000000] Memory policy: ECC disabled, Data cache writealloc
    [    0.000000] smem_find(137, 80): wrong size 72
    [    0.000000] socinfo_init: v6, id=202, ver=2.0, raw_id=2064, raw_ver=2064, hw_plat=0,  hw_plat_ver=65536
    [    0.000000]  accessory_chip=0 hw_plat_subtype=0
    [    0.000000] PERCPU: Embedded 8 pages/cpu @c0c67000 s10496 r8192 d14080 u32768
    [    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 121642
    [    0.000000] Kernel command line: console=ttyHSL1,115200n8 root=mtd:rootfs rootfstype=squashfs restart.download_mode=0 reboot=1
    [    0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
    [    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
    [    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
    [    0.000000] Memory: 43MB 436MB = 479MB total
    [    0.000000] Memory: 477300k/489588k available, 13196k reserved, 0K highmem
    [    0.000000] Virtual kernel memory layout:
    [    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
    [    0.000000]     fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
    [    0.000000]     vmalloc : 0xdf000000 - 0xff000000   ( 512 MB)
    [    0.000000]     lowmem  : 0xc0000000 - 0xdeb00000   ( 491 MB)
    [    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
    [    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
    [    0.000000]       .text : 0xc0008000 - 0xc053d938   (5335 kB)
    [    0.000000]       .init : 0xc0600000 - 0xc0702900   (1035 kB)
    [    0.000000]       .data : 0xc0704000 - 0xc07a1700   ( 630 kB)
    [    0.000000]        .bss : 0xc07a1724 - 0xc0863638   ( 776 kB)
    [    0.000000] SLUB: Genslabs=11, HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
    [    0.000000] Preemptible hierarchical RCU implementation.
    [    0.000000] NR_IRQS:1689
    [    0.000000] sched_clock: 32 bits at 32kHz, resolution 31240ns, wraps every 134175798ms
    [    0.000000] Console: colour dummy device 80x30
    [    0.150390] Calibrating delay using timer specific routine.. 12.55 BogoMIPS (lpj=62795)
    [    0.150421] pid_max: default: 32768 minimum: 301
    [    0.150921] Mount-cache hash table entries: 512
    [    0.152483] CPU: Testing write buffer coherency: ok
    [    0.152702] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
    [    0.152733] Setting up static identity map for 0x41870488 - 0x41870510
    [    0.155045] CPU1: Booted secondary processor
    [    0.155107] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
    [    0.155201] Brought up 2 CPUs
    [    0.155232] SMP: Total of 2 processors activated (25.11 BogoMIPS).
    [    0.169728] dummy: 
    [    0.170446] NET: Registered protocol family 16
    [    0.171227] AXI: msm_bus_fabric_init_driver(): msm_bus_fabric_init_driver
    [    0.173789] meminfo_init: smem ram ptable found: ver: 0 len: 5
    [    0.173820] Found 1 memory banks grouped into 8 memory regions
    [    0.174101] gpiochip_add: registered GPIOs 0 to 151 on device: msmgpio
    [    0.174789] smem_find(137, 80): wrong size 72
    [    0.174882] socinfo_init: v6, id=202, ver=2.0, raw_id=2064, raw_ver=2064, hw_plat=0,  hw_plat_ver=65536
    [    0.174882]  accessory_chip=0 hw_plat_subtype=0
    [    0.174945] msm_rpm_init: RPM firmware 3.0.16777371
    [    0.182255] clk_tbl_nss - loaded
    [    0.209559] msm_dmov_memcpy_init: Success
    [    0.216994] sps:BAM 0x12244000 enabled: ver:0x5, number of pipes:20
    [    0.217025] sps:BAM 0x12244000 is registered.
    [    0.217275] sps:sps is ready.
    [    0.250796] msm_pcie_setup: link initialized
    [    0.251171] PCI host bridge to bus 0000:00
    [    0.251202] pci_bus 0000:00: root bus resource [mem 0x08000000-0x0fefffff]
    [    0.251702] PCI: bus0: Fast back to back transfers disabled
    [    0.251702] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
    [    0.252421] PCI: bus1: Fast back to back transfers disabled
    [    0.290909] msm_pcie_setup: link initialized
    [    0.291252] PCI host bridge to bus 0000:02
    [    0.291283] pci_bus 0000:02: root bus resource [mem 0x2e000000-0x31efffff]
    [    0.291721] PCI: bus2: Fast back to back transfers disabled
    [    0.291752] pci 0000:02:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
    [    0.292564] PCI: bus3: Fast back to back transfers disabled
    [    0.411246] msm_pcie_setup: link initialization failed
    [    0.411465] pci 0000:02:00.0: BAR 8: assigned [mem 0x2e000000-0x2e1fffff]
    [    0.411496] pci 0000:03:00.0: BAR 0: assigned [mem 0x2e000000-0x2e1fffff 64bit]
    [    0.411527] pci 0000:02:00.0: PCI bridge to [bus 03-03]
    [    0.411558] pci 0000:02:00.0:   bridge window [mem 0x2e000000-0x2e1fffff]
    [    0.411621] PCI: enabling device 0000:02:00.0 (0140 -> 0143)
    [    0.411683] pci 0000:00:00.0: BAR 8: assigned [mem 0x08000000-0x081fffff]
    [    0.411715] pci 0000:01:00.0: BAR 0: assigned [mem 0x08000000-0x081fffff 64bit]
    [    0.411746] pci 0000:00:00.0: PCI bridge to [bus 01-01]
    [    0.411746] pci 0000:00:00.0:   bridge window [mem 0x08000000-0x081fffff]
    [    0.411808] PCI: enabling device 0000:00:00.0 (0140 -> 0143)
    [    0.432521] bio: create slab  at 0
    [    0.434020] SCSI subsystem initialized
    [    0.435863] spi_qsd spi_qsd.5: master is unqueued, this is deprecated
    [    0.438519] spi_qsd spi_qsd.6: master is unqueued, this is deprecated
    [    0.442517] Switching to clocksource gp_timer
    [    0.463199] NET: Registered protocol family 2
    [    0.472602] IP route cache hash table entries: 4096 (order: 2, 16384 bytes)
    [    0.473227] TCP established hash table entries: 16384 (order: 5, 131072 bytes)
    [    0.473414] TCP bind hash table entries: 16384 (order: 5, 131072 bytes)
    [    0.473601] TCP: Hash tables configured (established 16384 bind 16384)
    [    0.473633] TCP: reno registered
    [    0.473633] UDP hash table entries: 256 (order: 1, 8192 bytes)
    [    0.473664] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
    [    0.474070] NET: Registered protocol family 1
    [    0.476194] Partition(from smem) SBL1 -- Offset:0 Size:20000
    [    0.476226] Partition(from smem) MIBIB -- Offset:20000 Size:20000
    [    0.476226] Partition(from smem) SBL2 -- Offset:40000 Size:40000
    [    0.476257] Partition(from smem) SBL3 -- Offset:80000 Size:80000
    [    0.476257] Partition(from smem) DDRCONFIG -- Offset:100000 Size:10000
    [    0.476288] Partition(from smem) SSD -- Offset:110000 Size:10000
    [    0.476288] Partition(from smem) TZ -- Offset:120000 Size:80000
    [    0.476319] Partition(from smem) RPM -- Offset:1a0000 Size:80000
    [    0.476319] Partition(from smem) APPSBL -- Offset:220000 Size:80000
    [    0.476351] Partition(from smem) APPSBLENV -- Offset:2a0000 Size:10000
    [    0.476382] Partition(from smem) PRODUCTDATA -- Offset:2b0000 Size:30000
    [    0.476382] Partition(from smem) ART -- Offset:2e0000 Size:40000
    [    0.476413] Partition(from smem) TP -- Offset:320000 Size:40000
    [    0.476413] Partition(from smem) TINY -- Offset:360000 Size:500000
    [    0.476444] Partition(from smem) HLOS -- Offset:860000 Size:200000
    [    0.476476] Partition(from smem) rootfs -- Offset:a60000 Size:0
    [    0.489347] acpuclk-ipq806x acpuclk-ipq806x: SPEED BIN: 0
    [    0.489347] acpuclk-ipq806x acpuclk-ipq806x: ACPU PVS: 1
    [    0.496376] acpuclk-ipq806x acpuclk-ipq806x: CPU0: 6 frequencies supported
    [    0.496376] acpuclk-ipq806x acpuclk-ipq806x: CPU1: 6 frequencies supported
    [    0.497875] msm_rpm_log_probe: OK
    [    0.519556] squashfs: version 4.0 (2009/01/31) Phillip Lougher
    [    0.519587] jffs2: version 2.2. (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) © 2001-2006 Red Hat, Inc.
    [    0.521493] msgmni has been set to 932
    [    0.523898] Asymmetric key parser 'x509' registered
    [    0.523961] io scheduler noop registered
    [    0.523992] io scheduler deadline registered (default)
    [    0.525710] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
    [    0.527835] msm_serial_hs: probe of msm_serial_hs.0 failed with error -2
    [    0.528147] msm_serial_hs module loaded
    [    0.528397] msm_serial_hsl: detected port #1
    [    0.528584] msm_serial_hsl.1: ttyHSL1 at MMIO 0x16340000 (irq = 184) is a MSM
    [    0.529053] msm_serial_hsl: console setup on port #1
    [    1.288566] console [ttyHSL1] enabled
    [    1.297282] msm_serial_hsl: driver initialized
    [    1.306060] ahci ahci.0: forcing PORTS_IMPL to 0x1
    [    1.309871] ahci ahci.0: AHCI 0001.0300 32 slots 1 ports 6 Gbps 0x1 impl platform mode
    [    1.317775] ahci ahci.0: flags: ncq sntf pm led clo only pmp pio slum part ccc apst 
    [    1.326772] scsi0 : ahci_platform
    [    1.329803] ata1: SATA max UDMA/133 mmio [mem 0x29000000-0x2900017f] port 0x100 irq 241
    [    1.339643] m25p80 spi5.0: found s25fl256s1, expected s25fl512s
    [    1.344579] m25p80 spi5.0: s25fl256s1 (32768 Kbytes)
    [    1.350046] Creating 16 MTD partitions on "m25p80":
    [    1.354482] 0x000000000000-0x000000020000 : "SBL1"
    [    1.360980] 0x000000020000-0x000000040000 : "MIBIB"
    [    1.366604] 0x000000040000-0x000000080000 : "SBL2"
    [    1.372039] 0x000000080000-0x000000100000 : "SBL3"
    [    1.377569] 0x000000100000-0x000000110000 : "DDRCONFIG"
    [    1.383536] 0x000000110000-0x000000120000 : "SSD"
    [    1.388878] 0x000000120000-0x0000001a0000 : "TZ"
    [    1.393939] 0x0000001a0000-0x000000220000 : "RPM"
    [    1.399000] 0x000000220000-0x0000002a0000 : "APPSBL"
    [    1.404467] 0x0000002a0000-0x0000002b0000 : "APPSBLENV"
    [    1.410059] 0x0000002b0000-0x0000002e0000 : "PRODUCTDATA"
    [    1.415682] mtdoops: Attached to MTD device 10
    [    1.420368] 0x0000002e0000-0x000000320000 : "ART"
    [    1.426085] 0x000000320000-0x000000360000 : "TP"
    [    1.431583] 0x000000360000-0x000000860000 : "TINY"
    [    1.437425] 0x000000860000-0x000000a60000 : "HLOS"
    [    1.443236] 0x000000a60000-0x000002000000 : "rootfs"
    [    1.449109] mtd: partition "rootfs" set to be root filesystem
    [    1.455232] mtd: partition "rootfs_data" created automatically, ofs=1810000, len=7F0000 
    [    1.462324] 0x000001810000-0x000002000000 : "rootfs_data"
    [    1.501280] GPIO Bitbanged MDIO: probed
    [    1.504967] i2c /dev entries driver
    [    1.514557] cpuidle: using governor ladder
    [    1.517650] cpuidle: using governor menu
    [    1.522930] nf_conntrack version 0.5.0 (7457 buckets, 29828 max)
    [    1.529334] TCP: cubic registered
    [    1.531646] NET: Registered protocol family 17
    [    1.536488] Bridge firewalling registered
    [    1.540049] 8021q: 802.1Q VLAN Support v1.8
    [    1.545079] VFP support v0.3: implementor 51 architecture 64 part 4d variant 2 rev 0
    [    1.551983] Registering SWP/SWPB emulation handler
    [    1.556794] clock_late_init: Removing enables held for handed-off clocks
    [    1.572852] no pmic restart interrupt specified
    [    1.682536] ata1: SATA link down (SStatus 0 SControl 300)
    [    1.690846] SQUASHFS error: unable to read id index table
    [    1.772539] List of all partitions:
    [    1.775007] 1f00             128 mtdblock0  (driver?)
    [    1.780037] 1f01             128 mtdblock1  (driver?)
    [    1.785067] 1f02             256 mtdblock2  (driver?)
    [    1.790096] 1f03             512 mtdblock3  (driver?)
    [    1.795126] 1f04              64 mtdblock4  (driver?)
    [    1.800156] 1f05              64 mtdblock5  (driver?)
    [    1.805217] 1f06             512 mtdblock6  (driver?)
    [    1.810246] 1f07             512 mtdblock7  (driver?)
    [    1.815276] 1f08             512 mtdblock8  (driver?)
    [    1.820306] 1f09              64 mtdblock9  (driver?)
    [    1.825335] 1f0a             192 mtdblock10  (driver?)
    [    1.830459] 1f0b             256 mtdblock11  (driver?)
    [    1.835582] 1f0c             256 mtdblock12  (driver?)
    [    1.840706] 1f0d            5120 mtdblock13  (driver?)
    [    1.845829] 1f0e            2048 mtdblock14  (driver?)
    [    1.850952] 1f0f           22144 mtdblock15  (driver?)
    [    1.856076] 1f10            8128 mtdblock16  (driver?)
    [    1.861199] No filesystem could mount root, tried:  squashfs
    [    1.866822] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(31,15)
    [    1.875257] Linux (none) 3.4.103 #1 SMP PREEMPT Fri Jan 18 19:23:35 JST 2019 armv7l
    [    1.882911] date: 1970-01-01 09:00:01
    [    1.886566] CPU0: stopping
    [    1.889253] [] (unwind_backtrace+0x0/0x124) from [] (handle_IPI+0x1a8/0x1dc)
    [    1.898000] [] (handle_IPI+0x1a8/0x1dc) from [] (gic_handle_irq+0xb0/0xbc)
    [    1.906591] [] (gic_handle_irq+0xb0/0xbc) from [] (__irq_svc+0x40/0x70)
    [    1.914932] Exception stack(0xc0705f30 to 0xc0705f78)
    [    1.919962] 5f20:                                     00000000 00000000 00000001 00000000
    [    1.928116] 5f40: 00000000 00000000 00000003 c0766aa4 4150406a 512f04d0 00000000 00000000
    [    1.936269] 5f60: a0a0a0a0 c0705f78 c009992c c0041594 60000013 ffffffff
    [    1.942892] [] (__irq_svc+0x40/0x70) from [] (msm_cpuidle_enter+0x68/0x78)
    [    1.951483] [] (msm_cpuidle_enter+0x68/0x78) from [] (cpuidle_enter+0x14/0x18)
    [    1.960418] [] (cpuidle_enter+0x14/0x18) from [] (cpuidle_idle_call+0xa0/0x140)
    [    1.969447] [] (cpuidle_idle_call+0xa0/0x140) from [] (cpu_idle+0x60/0xf4)
    [    1.978038] [] (cpu_idle+0x60/0xf4) from [] (rest_init+0x88/0xa0)
    [    1.985848] [] (rest_init+0x88/0xa0) from [] (start_kernel+0x338/0x444)
    [    1.994189] [] (start_kernel+0x338/0x444) from [] (0x41508040)
    [    2.451421] Rebooting in 5 seconds..
    [    7.451452] Going down for restart now
    
    

WN-DX1167R stock -> OpenWrt(仮2)

メインのブログで書いた通りユーザーが手動で編集することにしていた bootnum, debugflag 2つのflagを、sysupgrade関連のスクリプト内に押し込んで自動的に設定されるよう変更したもの。
stock firmwareが1番目のOSイメージ領域からブートしている状態と、2番目からの場合の2例を掲載。

stock: bootnum=1

  • 1番目のOSイメージでstock firmwareがブートしている状態からスタート
  • OpenWrtのinitramfs-factoryは2番目のOSイメージ領域に書き込まれブートされる
  • 415 – 417行目でbootnumとdebugflagをチェック、bootnumを1に設定しdebugflagを有効化
  • 504行目でZ-Loaderの中断が可能になる (debugflag)
  • 506行目で1番目のOSイメージ領域からブートしている旨が表示される
[  249.812000] led=9, on=1, off=1, blinks,=1, reset=0, time=4000 low_trigger=0
Unlocking firmware_2 ...

Writing from /tmp/fw.bin to firmware_2 ...     
Header checksum OK.
Data checksum OK
Unlocking persist ...
### Switch to bank 2 on next boot! ###
procd: - shutdown -
[  255.428000] br-lan: port 4(ra0) entered disabled state
[  255.436000] br-lan: port 3(rai0) entered disabled state
[  255.448000] br-lan: port 2(eth1) entered disabled state
[  255.460000] br-lan: port 1(eth0) entered disabled state
[  255.472000] device eth0 left promiscuous mode
[  255.480000] br-lan: port 1(eth0) entered disabled state
[  255.492000] ra2880stop()...Done
[  255.496000] eth1: ===> VirtualIF_close
[  255.504000] Free TX/RX Ring Memory!
[  255.512000] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[  255.528000] device eth1 left promiscuous mode
[  255.536000] br-lan: port 2(eth1) entered disabled state
[  255.544000] eth1: ===> VirtualIF_close
[  255.556000] device ra0 left promiscuous mode
[  255.564000] br-lan: port 4(ra0) entered disabled state
[  255.572000] device rai0 left promiscuous mode
[  255.584000] br-lan: port 3(rai0) entered disabled state
[  257.032000] WifiSysClose(), wdev idx = 0
[  257.048000] WifiSysGetBssInfoState(): BssInfoIdx 0 not found!!!
[  257.060000] WifiSysUpdateBssInfoState(): BssInfoIdx 0 not found!!!
### ap ###
[  258.552000] Device Instance
[  258.560000]  WDEV 00:
                Name:rai0
[  258.564000]          Wdev(list) Idx:0
[  258.572000]           Idx:8
[  258.576000]  WDEV 01:
                Name:rai1
[  258.584000]          Wdev(list) Idx:1
[  258.588000]           Idx:9
[  258.592000]  WDEV 02:
                Name:rai2
[  258.600000]          Wdev(list) Idx:2
[  258.608000]           Idx:10
[  258.612000]  WDEV 03:
                Name:rai3
[  258.616000]          Wdev(list) Idx:3
[  258.624000]           Idx:11
[  258.628000]  WDEV 04:
                Name:ra0
[  258.636000]          Wdev(list) Idx:4
[  258.640000]           Idx:12
[  258.644000]  WDEV 05:
                Name:ra1
[  258.652000]          Wdev(list) Idx:5
[  258.660000]           Idx:13
[  258.664000]  WDEV 06:
                Name:ra2
[  258.668000]          Wdev(list) Idx:6
[  258.676000]           Idx:14
[  258.680000]  WDEV 07:
                Name:ra3
[  258.688000]          Wdev(list) Idx:7
[  258.692000]           Idx:15
[  258.696000]  WDEV 08:
                Name:apclii0
[  258.704000]          Wdev(list) Idx:8
[  258.712000]           Idx:16
[  258.716000]  WDEV 09:
                Name:apcli0
[  258.724000]          Wdev(list) Idx:9
[  258.728000]           Idx:17
[  258.732000]  WDEV 10:
[  258.736000]  WDEV 11:
[  258.744000]  WDEV 12:
[  258.748000]  WDEV 13:
[  258.752000]  WDEV 14:
[  258.756000]  WDEV 15:
[  258.760000]  WDEV 16:
[  258.764000]  WDEV 17:
[  258.776000] WifiSysClose(), wdev idx = 4
[  258.788000] WifiSysGetBssInfoState(): BssInfoIdx 1 not found!!!
[  258.800000] WifiSysUpdateBssInfoState(): BssInfoIdx 1 not found!!!
[  258.812000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[  258.828000] WifiSysClose(), wdev idx = 0
[  258.832000] WifiSysClose(), wdev idx = 1
[  258.840000] WifiSysClose(), wdev idx = 2
[  258.848000] WifiSysClose(), wdev idx = 3
[  258.884000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[  258.896000] WifiSysClose(), wdev idx = 4
[  258.904000] WifiSysClose(), wdev idx = 5
[  258.912000] WifiSysClose(), wdev idx = 6
[  258.920000] WifiSysClose(), wdev idx = 7
[  258.928000] kill LoopBackTxTask task failed!
[  258.940000] AndesRestartCheck: Current TOP_MISC2(0x7)
[  258.996000] CmdReStartDLRsp: Status Success!, Status(0)
[  259.004000] AndesRestartCheck:  TOP_MISC2(1)
[  259.016000] RT28xxPciAsicRadioOff(): Not support for HIF_MT yet!
[  259.028000] RTMPDrvClose call RT28xxPciAsicRadioOff fail !!
[  259.036000] tx_kickout_fail_count = 0
[  259.044000] tx_timeout_fail_count = 0
[  259.052000] rx_receive_fail_count = 0
[  259.060000] alloc_cmd_msg = 1848
[  259.064000] free_cmd_msg = 1848
[  259.072000] cut_through_token_list_destroy(): 86231888,86231888
[  259.088000] cut_through_token_list_destroy(): 86231898,86231898
[  259.104000] FwOwn()::Set Fw Own
[  259.112000] RTMP_AllTimerListRelease: Size=0
[  259.120000] FwOwn()::Return since already in Fw Own...
[  259.132000] <---HwCtrlThread
procd: - reboot [  259.268000] Stopped WatchDog Timer.
-
[  259.284000] Restarting system.


U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..
Checking image 2...
   Image Name:   3.10(XIK.1)b7
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    5642640 Bytes =  5.4 MB
   Load Address: 80001000
   Entry Point:  80001000
.......................................................................................   Verifying Combo Checksum ... .......................................................................................## Booting image at bf700000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...

[    0.000000] Linux version 4.14.111 (musashino205@Taiha.Net) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+9901-29b3122f32)) #0 SMP Fri Apr 19 18:38:16 2019
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is I-O DATA WN-DX1167R
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x90/0x4a4 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu @81110000 s26192 r8192 d22960 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00001001
[    0.000000] Readback ErrCtl register=00001001
[    0.000000] Memory: 119764K/131072K available (4497K kernel code, 230K rwdata, 1000K rodata, 3860K init, 248K bss, 11308K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] CPU Clock: 880MHz
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.015488] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.087817] pid_max: default: 32768 minimum: 301
[    0.097126] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.110147] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.125864] Hierarchical SRCU implementation.
[    0.135320] smp: Bringing up secondary CPUs ...
[    0.144858] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.144867] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.144879] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.145013] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.204699] Synchronize counters for CPU 1: done.
[    0.268617] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.268625] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.268632] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.268709] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.325525] Synchronize counters for CPU 2: done.
[    0.385688] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.385696] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.385704] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.385790] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.445094] Synchronize counters for CPU 3: done.
[    0.504697] smp: Brought up 1 node, 4 CPUs
[    0.516485] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.535955] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.548380] pinctrl core: initialized pinctrl subsystem
[    0.560001] NET: Registered protocol family 16
[    0.577896] pull PCIe RST: RALINK_RSTCTRL = 4000000
[    0.887882] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.897946] ***** Xtal 40MHz *****
[    0.904680] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.914883] Port 0 N_FTS = 1b102800
[    0.921784] Port 1 N_FTS = 1b105000
[    0.928709] Port 2 N_FTS = 1b102800
[    2.087355] PCIE0 no card, disable it(RST&CLK)
[    2.096042] PCIE2 no card, disable it(RST&CLK)
[    2.104845]  -> 20107f2
[    2.109695] PCIE1 enabled
[    2.114874] PCI host bridge /pcie@1e140000 ranges:
[    2.124402]  MEM 0x0000000060000000..0x000000006fffffff
[    2.134758]   IO 0x000000001e160000..0x000000001e16ffff
[    2.145126] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    2.167761] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.179069] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.190297] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.202912] PCI host bridge to bus 0000:00
[    2.210926] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    2.224585] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    2.236332] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    2.249806] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    2.266547] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.279567] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.293386] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.306866] pci 0000:00:00.0: BAR 1: assigned [mem 0x60100000-0x6010ffff]
[    2.320357] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    2.334876] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.344693] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.359393] clocksource: Switched to clocksource GIC
[    2.370552] NET: Registered protocol family 2
[    2.380001] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    2.393740] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    2.406345] TCP: Hash tables configured (established 1024 bind 1024)
[    2.419073] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.430573] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.443214] NET: Registered protocol family 1
[    5.829352] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    5.840537] Crashlog allocated RAM at address 0x3f00000
[    5.851106] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[    5.870961] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    5.882440] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    5.902557] random: fast init done
[    5.905526] io scheduler noop registered
[    5.916961] io scheduler deadline registered (default)
[    5.928091] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    5.941833] console [ttyS0] disabled
[    5.948844] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A
[    5.966853] console [ttyS0] enabled
[    5.966853] console [ttyS0] enabled
[    5.980605] bootconsole [early0] disabled
[    5.980605] bootconsole [early0] disabled
[    5.997174] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    6.010121] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    6.024144] Enable NFI Clock
[    6.029880] # MTK NAND # : Use HW ECC
[    6.037171] Device found in MTK table, ID: 1f1, EXT_ID: 801d01
[    6.048775] Support this Device in MTK table! 1f1 
[    6.058486] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    6.071352] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xf1
[    6.083992] nand: AMD/Spansion NAND 128MiB 3,3V 8-bit
[    6.094041] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    6.109116] Scanning device for bad blocks
[    6.398842] 12 fixed-partitions partitions found on MTD device MT7621-NAND
[    6.412529] Creating 12 MTD partitions on "MT7621-NAND":
[    6.423107] 0x000000000000-0x000000100000 : "Bootloader"
[    6.434753] 0x000000100000-0x000000200000 : "u-boot-env"
[    6.446365] 0x000000200000-0x000000300000 : "Factory"
[    6.457433] 0x000000300000-0x000000400000 : "SecondBoot"
[    6.469024] 0x000000400000-0x000000800000 : "kernel"
[    6.479999] 0x000000800000-0x000003600000 : "ubi"
[    6.490740] 0x000003600000-0x000003700000 : "Config"
[    6.501704] 0x000003700000-0x000006900000 : "firmware_2"
[    6.513661] 0x000006900000-0x000006a00000 : "Config_2"
[    6.524953] 0x000006a00000-0x000006b00000 : "persist"
[    6.536034] 0x000006b00000-0x000006c00000 : "idmkey"
[    6.546954] 0x000006c00000-0x000007f80000 : "Backup"
[    6.558005] [mtk_nand] probe successfully!
[    6.566889] Signature matched and data read!
[    6.575384] load_fact_bbt success 1023
[    6.583513] libphy: Fixed MDIO Bus: probed
[    6.661937] libphy: mdio: probed
[    8.079430] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    8.091976] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 19
[    8.110957] NET: Registered protocol family 10
[    8.121086] Segment Routing with IPv6
[    8.128441] NET: Registered protocol family 17
[    8.137379] 8021q: 802.1Q VLAN Support v1.8
[    8.148636] UBI error: no valid UBI magic found inside mtd5
[    8.159787] hctosys: unable to open rtc device (rtc0)
[    8.183994] Freeing unused kernel memory: 3860K
[    8.193046] This architecture does not have kernel memory protection.
[    8.217061] init: Console is alive
[    8.224187] init: - watchdog -
[    8.242011] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    8.259019] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    8.289673] init: - preinit -
[    8.455267] mtk_soc_eth 1e100000.ethernet: PPE started
[    8.477829] random: procd: uninitialized urandom read (4 bytes read)
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    9.309121] mtk_soc_eth 1e100000.ethernet eth0: port 0 link up
[    9.714606] mtk_soc_eth 1e100000.ethernet eth0: port 2 link up
[   11.592689] mtk_soc_eth 1e100000.ethernet: 0x100 = 0x6060000c, 0x10c = 0x80818
[   11.613930] procd: - early -
[   11.619824] procd: - watchdog -
[   12.249524] procd: - watchdog -
[   12.256078] procd: - ubus -
[   12.266330] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.319925] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.332951] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.346419] procd: - init -
Please press Enter to activate this console.
[   12.506500] kmodloader: loading kernel modules from /etc/modules.d/*
[   12.524664] nat46: module (version 683fbd2b765506332a1af141545652bf58f03166) loaded.
[   12.545421] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   12.565367] ip_tables: (C) 2000-2006 Netfilter Core Team
[   12.585498] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[   12.627961] Netfilter messages via NETLINK v0.30.
[   12.657603] xt_time: kernel timezone is -0000
[   12.673395] ctnetlink v0.93: registering with nfnetlink.
[   12.686049] PPP generic driver version 2.4.2
[   12.696300] NET: Registered protocol family 24
[   12.707853] kmodloader: done loading kernel modules from /etc/modules.d/*
[   13.793633] urandom_read: 5 callbacks suppressed
[   13.793645] random: jshn: uninitialized urandom read (4 bytes read)
[   35.564701] mtk_soc_eth 1e100000.ethernet: PPE started
[   35.581714] br-lan: port 1(eth0.1) entered blocking state
[   35.592593] br-lan: port 1(eth0.1) entered disabled state
[   35.604021] device eth0.1 entered promiscuous mode
[   35.613640] device eth0 entered promiscuous mode
[   35.632768] br-lan: port 1(eth0.1) entered blocking state
[   35.643621] br-lan: port 1(eth0.1) entered forwarding state
[   35.655287] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   36.014320] random: crng init done
[   36.590171] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready



BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+9901-29b3122f32
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# sysupgrade https://taiha.net/jenkins/job/OpenWrt-master-IODATA-W
N-DX1167R/lastSuccessfulBuild/artifact/bin/targets/ramips/mt7621/openwrt-ramips-
mt7621-iodata_wn-dx1167r-squashfs-sysupgrade.bin
--2019-04-20 01:25:46--  https://taiha.net/jenkins/job/OpenWrt-master-IODATA-WN-DX1167R/lastSuccessfulBuild/artifact/bin/targets/ramips/mt7621/openwrt-ramips-mt7621-iodata_wn-dx1167r-squashfs-sysupgrade.bin
Resolving taiha.net... 240b:12:500:65f0:c822:64a3:7e11:4961, 49.129.167.30
Connecting to taiha.net|240b:12:500:65f0:c822:64a3:7e11:4961|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 5888778 (5.6M) [application/octet-stream]
Saving to: '/tmp/sysupgrade.img'

/tmp/sysupgrade.img 100%[===================>]   5.62M  3.07MB/s    in 1.8s    

2019-04-20 01:25:48 (3.07 MB/s) - '/tmp/sysupgrade.img' saved [5888778/5888778]

Cannot save config while running from ramdisk.
Commencing upgrade. Closing all shell sessions.
Watchdog handover: fd=3
- watchdog -
killall: telnetd: no process killed
Sending TERM to remaining processes ... netifd odhcpd uhttpd nlbwmon sh sleep ntpd vnstatd dnsmasq ubusd logd rpcd 
Sending KILL to remaining processes ... 
Performing system upgrade...
current: bootnum => 2, debugflag => 0
### switch to 1st os-image on next boot ###
### enable debug ###
Unlocking kernel ...

Writing from  to kernel ...     
[  149.236208] ubi0: attaching mtd5
[  149.480801] ubi0: scanning is finished
[  149.488318] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  149.502827] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd5, error -22
ubiattach: error!: cannot attach mtd5
           error 22 (Invalid argument)
ubiformat: mtd5 (nand), size 48234496 bytes (46.0 MiB), 368 eraseblocks of 131072 bytes (128.0 KiB), min. I/O size 2048 bytes
libscan: scanning eraseblock 367 -- 100 % complete  
ubiformat: 327 eraseblocks are supposedly empty
ubiformat: warning!: 41 of 368 eraseblocks contain non-UBI data
ubiformat: warning!: only 0 of 368 eraseblocks have valid erase counter
ubiformat: erase counter 0 will be used for all eraseblocks
ubiformat: note, arbitrary erase counter value may be specified using -e option
ubiformat: use erase counter 0 for all eraseblocks
ubiformat: formatting eraseblock 317 -- 86 % complet[  155.968118] ubi0: attaching mtd5
ubiformat: f[  156.404597] ubi0: scanning is finished  
ubiformat: formatting eraseblock 363 -- 98 % complet[  156.427486] ubi0: attached mtd5 (name "ubi", size 46 MiB)
ubiformat: f[  156.439973] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ormatting eraseb[  156.456384] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
lock 364 -- 99 %[  156.472637] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubif[  156.489233] ubi0: good PEBs: 368, bad PEBs: 0, corrupted PEBs: 0
ormat: formattin[  156.503931] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 128
g eraseblock 365[  156.521043] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 539701386
 -- 99 % complet[  156.541789] ubi0: available PEBs: 344, total reserved PEBs: 24, PEBs reserved for bad PEB handling: 20
ubiformat: f[  156.563066] ubi0: background thread "ubi_bgt0d" started, PID 2215
ubiformat: formatting eraseblock 367 -- 100 % complete  
UBI device number 0, total 368 LEBs (46727168 bytes, 44.5 MiB), available 344 LEBs (43679744 bytes, 41.6 MiB), LEB size 126976 bytes (124.0 KiB)
Volume ID 0, size 32 LEBs (4063232 bytes, 3.8 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs", alignment 1
Set volume size to 39616512
Volume ID 1, size 312 LEBs (39616512 bytes, 37.7 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs_data", alignment 1
sysupgrade successful
umount: can't unmount /dev: Resource busy
umount: can't unmount /tmp: Resource busy
umount: can't unmount /: Invalid argument
[  158.599742] reboot: Restarting system


U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..Hit ESC key to stop autoboot: 1

Checking image 1...
   Image Name:   MIPS OpenWrt Linux-4.14.
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1905343 Bytes =  1.8 MB
   Load Address: 80001000
   Entry Point:  80001000
..............................   Verifying Checksum ... ## Booting image at bc400000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...

[    0.000000] Linux version 4.14.111 (musashino205@Taiha.Net) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+9901-29b3122f32)) #0 SMP Fri Apr 19 18:38:16 2019
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is I-O DATA WN-DX1167R
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x90/0x4a4 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu @81110000 s26192 r8192 d22960 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00001000
[    0.000000] Readback ErrCtl register=00001000
[    0.000000] Memory: 123412K/131072K available (4497K kernel code, 230K rwdata, 1000K rodata, 212K init, 248K bss, 7660K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] CPU Clock: 880MHz
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.015488] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.087817] pid_max: default: 32768 minimum: 301
[    0.097126] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.110146] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.125865] Hierarchical SRCU implementation.
[    0.135322] smp: Bringing up secondary CPUs ...
[    0.157179] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.157188] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.157199] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.157334] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.204698] Synchronize counters for CPU 1: done.
[    0.280941] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.280949] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.280956] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.281032] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.325530] Synchronize counters for CPU 2: done.
[    0.398014] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.398022] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.398030] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.398117] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.445099] Synchronize counters for CPU 3: done.
[    0.504703] smp: Brought up 1 node, 4 CPUs
[    0.516485] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.535955] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.548382] pinctrl core: initialized pinctrl subsystem
[    0.559933] NET: Registered protocol family 16
[    0.577505] pull PCIe RST: RALINK_RSTCTRL = 4000000
[    0.887491] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.897554] ***** Xtal 40MHz *****
[    0.904288] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.914491] Port 0 N_FTS = 1b102800
[    0.921393] Port 1 N_FTS = 1b105000
[    0.928317] Port 2 N_FTS = 1b102800
[    2.086971] PCIE0 no card, disable it(RST&CLK)
[    2.095659] PCIE2 no card, disable it(RST&CLK)
[    2.104462]  -> 20107f2
[    2.109312] PCIE1 enabled
[    2.114491] PCI host bridge /pcie@1e140000 ranges:
[    2.124019]  MEM 0x0000000060000000..0x000000006fffffff
[    2.134375]   IO 0x000000001e160000..0x000000001e16ffff
[    2.144743] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    2.167366] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.178636] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.189838] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.202268] PCI host bridge to bus 0000:00
[    2.210286] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    2.223959] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    2.235687] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    2.249187] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    2.266052] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.279096] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.292905] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.306379] pci 0000:00:00.0: BAR 1: assigned [mem 0x60100000-0x6010ffff]
[    2.319877] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    2.334380] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.344200] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.359032] clocksource: Switched to clocksource GIC
[    2.370341] NET: Registered protocol family 2
[    2.379576] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    2.393317] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    2.405923] TCP: Hash tables configured (established 1024 bind 1024)
[    2.418647] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.430155] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.442799] NET: Registered protocol family 1
[    2.688982] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    2.700354] Crashlog allocated RAM at address 0x3f00000
[    2.710851] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[    2.730813] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    2.742294] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    2.762256] random: fast init done
[    2.765242] io scheduler noop registered
[    2.776727] io scheduler deadline registered (default)
[    2.787775] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    2.801657] console [ttyS0] disabled
[    2.808665] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A
[    2.826694] console [ttyS0] enabled
[    2.826694] console [ttyS0] enabled
[    2.840436] bootconsole [early0] disabled
[    2.840436] bootconsole [early0] disabled
[    2.857092] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    2.870071] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    2.884106] Enable NFI Clock
[    2.889844] # MTK NAND # : Use HW ECC
[    2.897135] Device found in MTK table, ID: 1f1, EXT_ID: 801d01
[    2.908743] Support this Device in MTK table! 1f1 
[    2.918458] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    2.931327] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xf1
[    2.943972] nand: AMD/Spansion NAND 128MiB 3,3V 8-bit
[    2.954025] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    2.969106] Scanning device for bad blocks
[    3.258898] 12 fixed-partitions partitions found on MTD device MT7621-NAND
[    3.272584] Creating 12 MTD partitions on "MT7621-NAND":
[    3.283166] 0x000000000000-0x000000100000 : "Bootloader"
[    3.294684] 0x000000100000-0x000000200000 : "u-boot-env"
[    3.306162] 0x000000200000-0x000000300000 : "Factory"
[    3.317093] 0x000000300000-0x000000400000 : "SecondBoot"
[    3.328545] 0x000000400000-0x000000800000 : "kernel"
[    3.339387] 0x000000800000-0x000003600000 : "ubi"
[    3.350032] 0x000003600000-0x000003700000 : "Config"
[    3.360791] 0x000003700000-0x000006900000 : "firmware_2"
[    3.372620] 0x000006900000-0x000006a00000 : "Config_2"
[    3.383745] 0x000006a00000-0x000006b00000 : "persist"
[    3.394669] 0x000006b00000-0x000006c00000 : "idmkey"
[    3.405445] 0x000006c00000-0x000007f80000 : "Backup"
[    3.416383] [mtk_nand] probe successfully!
[    3.425266] Signature matched and data read!
[    3.433761] load_fact_bbt success 1023
[    3.441842] libphy: Fixed MDIO Bus: probed
[    3.521593] libphy: mdio: probed
[    4.927628] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    4.940154] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 19
[    4.959228] NET: Registered protocol family 10
[    4.969483] Segment Routing with IPv6
[    4.976843] NET: Registered protocol family 17
[    4.985741] 8021q: 802.1Q VLAN Support v1.8
[    4.996937] UBI: auto-attach mtd5
[    5.003599] ubi0: attaching mtd5
[    5.437590] ubi0: scanning is finished
[    5.460295] ubi0: attached mtd5 (name "ubi", size 46 MiB)
[    5.471061] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    5.484742] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    5.498251] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    5.512110] ubi0: good PEBs: 368, bad PEBs: 0, corrupted PEBs: 0
[    5.524061] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[    5.538434] ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 539701386
[    5.556438] ubi0: available PEBs: 0, total reserved PEBs: 368, PEBs reserved for bad PEB handling: 20
[    5.574807] ubi0: background thread "ubi_bgt0d" started, PID 371
[    5.576428] block ubiblock0_0: created from ubi0:0(rootfs)
[    5.597689] ubiblock: device ubiblock0_0 (rootfs) set to be root filesystem
[    5.611558] hctosys: unable to open rtc device (rtc0)
[    5.628778] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    5.643534] Freeing unused kernel memory: 212K
[    5.652425] This architecture does not have kernel memory protection.
[    6.122265] init: Console is alive
[    6.129305] init: - watchdog -
[    6.168783] mtk_soc_eth 1e100000.ethernet eth0: port 0 link up
[    6.357869] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    6.485837] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    6.509320] init: - preinit -
[    7.328683] mtk_soc_eth 1e100000.ethernet: PPE started
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to [    7.405955] random: procd: uninitialized urandom read (4 bytes read)
select the debug level
[    8.371629] mtk_soc_eth 1e100000.ethernet eth0: port 2 link up
[   10.523665] UBIFS (ubi0:1): default file-system created
[   10.535531] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 448
[   10.648490] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data"
[   10.664101] UBIFS (ubi0:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[   10.683838] UBIFS (ubi0:1): FS size: 38346752 bytes (36 MiB, 302 LEBs), journal size 1904640 bytes (1 MiB, 15 LEBs)
[   10.704613] UBIFS (ubi0:1): reserved for root: 1811211 bytes (1768 KiB)
[   10.717783] UBIFS (ubi0:1): media format: w4/r0 (latest is w5/r0), UUID 7FB3E685-BC83-4CEC-B75E-984218747C31, small LPT model
[   10.743143] mount_root: overlay filesystem has not been fully initialized yet
[   10.757837] mount_root: switching to ubifs overlay
[   10.784973] urandom-seed: Seed file not found (/etc/urandom.seed)
[   10.862311] mtk_soc_eth 1e100000.ethernet: 0x100 = 0x6060000c, 0x10c = 0x80818
[   10.884080] procd: - early -
[   10.889995] procd: - watchdog -
[   11.519162] procd: - watchdog -
[   11.525724] procd: - ubus -
[   11.610131] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.694616] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.707749] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.721270] procd: - init -
Please press Enter to activate this console.
[   12.109668] kmodloader: loading kernel modules from /etc/modules.d/*
[   12.197687] nat46: module (version 683fbd2b765506332a1af141545652bf58f03166) loaded.
[   12.217478] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   12.235888] ip_tables: (C) 2000-2006 Netfilter Core Team
[   12.254124] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[   12.298491] Netfilter messages via NETLINK v0.30.
[   12.325272] xt_time: kernel timezone is -0000
[   12.340586] ctnetlink v0.93: registering with nfnetlink.
[   12.353220] PPP generic driver version 2.4.2
[   12.363368] NET: Registered protocol family 24
[   12.375649] kmodloader: done loading kernel modules from /etc/modules.d/*
[   13.634218] urandom_read: 5 callbacks suppressed
[   13.634230] random: jshn: uninitialized urandom read (4 bytes read)
[   31.774993] mtk_soc_eth 1e100000.ethernet: PPE started
[   31.814337] br-lan: port 1(eth0.1) entered blocking state
[   31.825186] br-lan: port 1(eth0.1) entered disabled state
[   31.836610] device eth0.1 entered promiscuous mode
[   31.846213] device eth0 entered promiscuous mode
[   31.859810] br-lan: port 1(eth0.1) entered blocking state
[   31.870640] br-lan: port 1(eth0.1) entered forwarding state
[   31.882301] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   32.207181] random: crng init done
[   32.809763] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready



BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+9901-29b3122f32
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# 

stock: bootnum=2

  • 2番目のOSイメージでstock firmwareがブートしている状態からスタート
  • OpenWrtのinitramfs-factoryは1番目のOSイメージ領域に書き込まれブートされる
  • 391行目でbootnumとdebugflagをチェック、bootnumは既に1なので392行目でdebugflagの有効化のみ実施
  • 479行目でZ-Loaderの中断が可能になる (debugflag)
  • 481行目で1番目のOSイメージ領域からブートしている旨が表示される
### DO NOT set cfgapply ###
cat: can't open 'remote_mgmt': No such file or directory
### Checksum is the same but commit does not change anything! Do nothing! ###
[  257.336000] led=9, on=1, off=1, blinks,=1, reset=0, time=4000 low_trigger=0
Unlocking firmware ...

Writing from /tmp/fw.bin to firmware ...     
Header checksum OK.
Data checksum OK
Unlocking persist ...
### Switch to bank 1 on next boot! ###
procd: - shutdown -
[  262.960000] br-lan: port 4(ra0) entered disabled state
[  262.968000] br-lan: port 3(rai0) entered disabled state
[  262.980000] br-lan: port 2(eth1) entered disabled state
[  262.988000] br-lan: port 1(eth0) entered disabled state
[  263.000000] device eth0 left promiscuous mode
[  263.012000] br-lan: port 1(eth0) entered disabled state
[  263.020000] ra2880stop()...Done
[  263.028000] eth1: ===> VirtualIF_close
[  263.036000] Free TX/RX Ring Memory!
[  263.044000] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[  263.060000] device eth1 left promiscuous mode
[  263.068000] br-lan: port 2(eth1) entered disabled state
[  263.080000] eth1: ===> VirtualIF_close
[  263.088000] device ra0 left promiscuous mode
[  263.096000] br-lan: port 4(ra0) entered disabled state
[  263.108000] device rai0 left promiscuous mode
[  263.116000] br-lan: port 3(rai0) entered disabled state
### ap ###
[  264.632000] WifiSysClose(), wdev idx = 0
[  264.648000] WifiSysGetBssInfoState(): BssInfoIdx 0 not found!!!
[  264.660000] WifiSysUpdateBssInfoState(): BssInfoIdx 0 not found!!!
[  265.980000] Device Instance
[  265.984000]  WDEV 00:
                Name:rai0
[  265.992000]          Wdev(list) Idx:0
[  266.000000]           Idx:9
[  266.004000]  WDEV 01:
                Name:rai1
[  266.008000]          Wdev(list) Idx:1
[  266.016000]           Idx:10
[  266.020000]  WDEV 02:
                Name:rai2
[  266.028000]          Wdev(list) Idx:2
[  266.032000]           Idx:11
[  266.040000]  WDEV 03:
                Name:rai3
[  266.044000]          Wdev(list) Idx:3
[  266.052000]           Idx:12
[  266.056000]  WDEV 04:
                Name:ra0
[  266.064000]          Wdev(list) Idx:4
[  266.068000]           Idx:13
[  266.072000]  WDEV 05:
                Name:ra1
[  266.080000]          Wdev(list) Idx:5
[  266.084000]           Idx:14
[  266.088000]  WDEV 06:
                Name:ra2
[  266.096000]          Wdev(list) Idx:6
[  266.104000]           Idx:15
[  266.108000]  WDEV 07:
                Name:ra3
[  266.112000]          Wdev(list) Idx:7
[  266.120000]           Idx:16
[  266.124000]  WDEV 08:
                Name:apclii0
[  266.132000]          Wdev(list) Idx:8
[  266.136000]           Idx:17
[  266.144000]  WDEV 09:
                Name:apcli0
[  266.148000]          Wdev(list) Idx:9
[  266.156000]           Idx:18
[  266.160000]  WDEV 10:
[  266.164000]  WDEV 11:
[  266.168000]  WDEV 12:
[  266.172000]  WDEV 13:
[  266.176000]  WDEV 14:
[  266.184000]  WDEV 15:
[  266.188000]  WDEV 16:
[  266.192000]  WDEV 17:
[  266.200000] WifiSysClose(), wdev idx = 4
[  266.216000] WifiSysGetBssInfoState(): BssInfoIdx 1 not found!!!
[  266.228000] WifiSysUpdateBssInfoState(): BssInfoIdx 1 not found!!!
[  266.240000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[  266.252000] WifiSysClose(), wdev idx = 0
[  266.260000] WifiSysClose(), wdev idx = 1
[  266.268000] WifiSysClose(), wdev idx = 2
[  266.276000] WifiSysClose(), wdev idx = 3
[  266.308000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[  266.320000] WifiSysClose(), wdev idx = 4
[  266.328000] WifiSysClose(), wdev idx = 5
[  266.336000] WifiSysClose(), wdev idx = 6
[  266.344000] WifiSysClose(), wdev idx = 7
[  266.352000] kill LoopBackTxTask task failed!
[  266.368000] AndesRestartCheck: Current TOP_MISC2(0x7)
[  266.420000] CmdReStartDLRsp: Status Success!, Status(0)
[  266.432000] AndesRestartCheck:  TOP_MISC2(1)
[  266.440000] RT28xxPciAsicRadioOff(): Not support for HIF_MT yet!
[  266.452000] RTMPDrvClose call RT28xxPciAsicRadioOff fail !!
[  266.464000] tx_kickout_fail_count = 0
[  266.472000] tx_timeout_fail_count = 0
[  266.476000] rx_receive_fail_count = 0
[  266.484000] alloc_cmd_msg = 1864
[  266.492000] free_cmd_msg = 1864
[  266.500000] cut_through_token_list_destroy(): 8545dd88,8545dd88
[  266.512000] cut_through_token_list_destroy(): 8545dd98,8545dd98
[  266.528000] FwOwn()::Set Fw Own
[  266.540000] RTMP_AllTimerListRelease: Size=0
[  266.548000] FwOwn()::Return since already in Fw Own...
[  266.556000] <---HwCtrlThread
procd: - reboot [  266.696000] Stopped WatchDog Timer.
-
[  266.708000] Restarting system.


U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..
Checking image 1...
   Image Name:   3.10(XIK.1)b7
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    5642216 Bytes =  5.4 MB
   Load Address: 80001000
   Entry Point:  80001000
.......................................................................................   Verifying Combo Checksum ... .......................................................................................## Booting image at bc400000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...

[    0.000000] Linux version 4.14.111 (musashino205@Taiha.Net) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+9901-29b3122f32)) #0 SMP Sat Apr 20 01:26:47 2019
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is I-O DATA WN-DX1167R
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x90/0x4a4 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu @81110000 s26192 r8192 d22960 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00001000
[    0.000000] Readback ErrCtl register=00001000
[    0.000000] Memory: 119764K/131072K available (4497K kernel code, 230K rwdata, 1000K rodata, 3860K init, 248K bss, 11308K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] CPU Clock: 880MHz
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.015487] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.087817] pid_max: default: 32768 minimum: 301
[    0.097125] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.110146] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.125864] Hierarchical SRCU implementation.
[    0.135321] smp: Bringing up secondary CPUs ...
[    0.144858] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.144867] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.144879] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.145013] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.204697] Synchronize counters for CPU 1: done.
[    0.268618] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.268627] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.268634] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.268710] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.325526] Synchronize counters for CPU 2: done.
[    0.385687] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.385696] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.385704] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.385789] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.445095] Synchronize counters for CPU 3: done.
[    0.504698] smp: Brought up 1 node, 4 CPUs
[    0.516487] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.535958] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.548382] pinctrl core: initialized pinctrl subsystem
[    0.559984] NET: Registered protocol family 16
[    0.577541] pull PCIe RST: RALINK_RSTCTRL = 4000000
[    0.887528] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.897592] ***** Xtal 40MHz *****
[    0.904326] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.914529] Port 0 N_FTS = 1b102800
[    0.921430] Port 1 N_FTS = 1b105000
[    0.928355] Port 2 N_FTS = 1b102800
[    2.087005] PCIE0 no card, disable it(RST&CLK)
[    2.095693] PCIE2 no card, disable it(RST&CLK)
[    2.104497]  -> 20107f2
[    2.109346] PCIE1 enabled
[    2.114525] PCI host bridge /pcie@1e140000 ranges:
[    2.124053]  MEM 0x0000000060000000..0x000000006fffffff
[    2.134410]   IO 0x000000001e160000..0x000000001e16ffff
[    2.144777] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    2.167122] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.178384] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.189565] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.201941] PCI host bridge to bus 0000:00
[    2.209965] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    2.223640] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    2.235368] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    2.248861] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    2.265586] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.278622] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.292436] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.305909] pci 0000:00:00.0: BAR 1: assigned [mem 0x60100000-0x6010ffff]
[    2.319405] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    2.333910] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.343731] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.358409] clocksource: Switched to clocksource GIC
[    2.369593] NET: Registered protocol family 2
[    2.378820] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    2.392564] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    2.405170] TCP: Hash tables configured (established 1024 bind 1024)
[    2.417889] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.429398] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.442040] NET: Registered protocol family 1
[    5.828377] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    5.839524] Crashlog allocated RAM at address 0x3f00000
[    5.850080] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[    5.869596] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    5.881071] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    5.903416] random: fast init done
[    5.910435] io scheduler noop registered
[    5.918071] io scheduler deadline registered (default)
[    5.929233] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    5.943050] console [ttyS0] disabled
[    5.950097] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A
[    5.968061] console [ttyS0] enabled
[    5.968061] console [ttyS0] enabled
[    5.981831] bootconsole [early0] disabled
[    5.981831] bootconsole [early0] disabled
[    5.998427] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    6.011221] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    6.025291] Enable NFI Clock
[    6.031029] # MTK NAND # : Use HW ECC
[    6.038318] Device found in MTK table, ID: 1f1, EXT_ID: 801d01
[    6.049927] Support this Device in MTK table! 1f1 
[    6.059645] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    6.072510] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xf1
[    6.085154] nand: AMD/Spansion NAND 128MiB 3,3V 8-bit
[    6.095206] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    6.110288] Scanning device for bad blocks
[    6.400355] 12 fixed-partitions partitions found on MTD device MT7621-NAND
[    6.414037] Creating 12 MTD partitions on "MT7621-NAND":
[    6.424621] 0x000000000000-0x000000100000 : "Bootloader"
[    6.436271] 0x000000100000-0x000000200000 : "u-boot-env"
[    6.447867] 0x000000200000-0x000000300000 : "Factory"
[    6.458999] 0x000000300000-0x000000400000 : "SecondBoot"
[    6.470616] 0x000000400000-0x000000800000 : "kernel"
[    6.481538] 0x000000800000-0x000003600000 : "ubi"
[    6.492286] 0x000003600000-0x000003700000 : "Config"
[    6.503238] 0x000003700000-0x000006900000 : "firmware_2"
[    6.515206] 0x000006900000-0x000006a00000 : "Config_2"
[    6.526494] 0x000006a00000-0x000006b00000 : "persist"
[    6.537579] 0x000006b00000-0x000006c00000 : "idmkey"
[    6.548565] 0x000006c00000-0x000007f80000 : "Backup"
[    6.559662] [mtk_nand] probe successfully!
[    6.568573] Signature matched and data read!
[    6.577055] load_fact_bbt success 1023
[    6.585272] libphy: Fixed MDIO Bus: probed
[    6.660961] libphy: mdio: probed
[    8.078318] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    8.090893] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 19
[    8.109982] NET: Registered protocol family 10
[    8.120205] Segment Routing with IPv6
[    8.127564] NET: Registered protocol family 17
[    8.136513] 8021q: 802.1Q VLAN Support v1.8
[    8.147780] UBI error: no valid UBI magic found inside mtd5
[    8.158943] hctosys: unable to open rtc device (rtc0)
[    8.183210] Freeing unused kernel memory: 3860K
[    8.192259] This architecture does not have kernel memory protection.
[    8.216181] init: Console is alive
[    8.223265] init: - watchdog -
[    8.241019] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    8.258104] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    8.288695] init: - preinit -
[    8.453778] mtk_soc_eth 1e100000.ethernet: PPE started
[    8.476226] random: procd: uninitialized urandom read (4 bytes read)
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    9.336037] mtk_soc_eth 1e100000.ethernet eth0: port 0 link up
[    9.713304] mtk_soc_eth 1e100000.ethernet eth0: port 2 link up
[   11.591627] mtk_soc_eth 1e100000.ethernet: 0x100 = 0x6060000c, 0x10c = 0x80818
[   11.613014] procd: - early -
[   11.618909] procd: - watchdog -
[   12.248572] procd: - watchdog -
[   12.255131] procd: - ubus -
[   12.265342] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.318959] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.331987] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.345465] procd: - init -
Please press Enter to activate this console.
[   12.505945] kmodloader: loading kernel modules from /etc/modules.d/*
[   12.524713] nat46: module (version 683fbd2b765506332a1af141545652bf58f03166) loaded.
[   12.544708] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   12.565010] ip_tables: (C) 2000-2006 Netfilter Core Team
[   12.585937] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[   12.629244] Netfilter messages via NETLINK v0.30.
[   12.658667] xt_time: kernel timezone is -0000
[   12.674768] ctnetlink v0.93: registering with nfnetlink.
[   12.687983] PPP generic driver version 2.4.2
[   12.697955] NET: Registered protocol family 24
[   12.710410] kmodloader: done loading kernel modules from /etc/modules.d/*
[   13.802323] urandom_read: 5 callbacks suppressed
[   13.802335] random: jshn: uninitialized urandom read (4 bytes read)
[   29.948714] mtk_soc_eth 1e100000.ethernet: PPE started
[   29.966406] br-lan: port 1(eth0.1) entered blocking state
[   29.977314] br-lan: port 1(eth0.1) entered disabled state
[   29.988828] device eth0.1 entered promiscuous mode
[   29.998458] device eth0 entered promiscuous mode
[   30.011542] br-lan: port 1(eth0.1) entered blocking state
[   30.022355] br-lan: port 1(eth0.1) entered forwarding state
[   30.034064] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   30.469127] random: crng init done
[   30.969428] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready



BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+9902-961771ff30
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# sysupgrade https://taiha.net/jenkins/job/OpenWrt-master-IODATA-W
N-DX1167R/lastSuccessfulBuild/artifact/bin/targets/ramips/mt7621/openwrt-ramips-
mt7621-iodata_wn-dx1167r-squashfs-sysupgrade.bin
--2019-04-20 02:06:11--  https://taiha.net/jenkins/job/OpenWrt-master-IODATA-WN-DX1167R/lastSuccessfulBuild/artifact/bin/targets/ramips/mt7621/openwrt-ramips-mt7621-iodata_wn-dx1167r-squashfs-sysupgrade.bin
Resolving taiha.net... 240b:12:500:65f0:c822:64a3:7e11:4961, 49.129.167.30
Connecting to taiha.net|240b:12:500:65f0:c822:64a3:7e11:4961|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 5888778 (5.6M) [application/octet-stream]
Saving to: '/tmp/sysupgrade.img'

/tmp/sysupgrade.img 100%[===================>]   5.62M  3.13MB/s    in 1.8s    

2019-04-20 02:06:13 (3.13 MB/s) - '/tmp/sysupgrade.img' saved [5888778/5888778]

Cannot save config while running from ramdisk.
Commencing upgrade. Closing all shell sessions.
Watchdog handover: fd=3
- watchdog -
killall: telnetd: no process killed
Sending TERM to remaining processes ... netifd odhcpd uhttpd nlbwmon sh sleep ntpd vnstatd dnsmasq ubusd logd rpcd 
Sending KILL to remaining processes ... 
Performing system upgrade...
current: bootnum => 1, debugflag => 0
### enable debug ###
Unlocking kernel ...

Writing from  to kernel ...     
[   64.720676] ubi0: attaching mtd5
[   64.965168] ubi0: scanning is finished
[   64.972696] ubi0 error: ubi_read_volume_table: the layout volume was not found
[   64.987194] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd5, error -22
ubiattach: error!: cannot attach mtd5
           error 22 (Invalid argument)
ubiformat: mtd5 (nand), size 48234496 bytes (46.0 MiB), 368 eraseblocks of 131072 bytes (128.0 KiB), min. I/O size 2048 bytes
libscan: scanning eraseblock 367 -- 100 % complete  
ubiformat: 327 eraseblocks are supposedly empty
ubiformat: warning!: 41 of 368 eraseblocks contain non-UBI data
ubiformat: warning!: only 0 of 368 eraseblocks have valid erase counter
ubiformat: erase counter 0 will be used for all eraseblocks
ubiformat: note, arbitrary erase counter value may be specified using -e option
ubiformat: use erase counter 0 for all eraseblocks
ubiformat: formatting eraseblock 317 -- 86 % complet[   71.452084] ubi0: attaching mtd5
ubiformat: f[   71.889484] ubi0: scanning is finished  
ubiformat: formatting eraseblock 363 -- 98 % complet[   71.911907] ubi0: attached mtd5 (name "ubi", size 46 MiB)
ubiformat: f[   71.924433] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ormatting eraseb[   71.940868] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
lock 364 -- 99 %[   71.957102] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubif[   71.973709] ubi0: good PEBs: 368, bad PEBs: 0, corrupted PEBs: 0
ormat: formattin[   71.988402] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 128
g eraseblock 365[   72.005520] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1110684811
 -- 99 % complet[   72.026438] ubi0: available PEBs: 344, total reserved PEBs: 24, PEBs reserved for bad PEB handling: 20
ubiformat: f[   72.047725] ubi0: background thread "ubi_bgt0d" started, PID 2207
ubiformat: formatting eraseblock 367 -- 100 % complete  
UBI device number 0, total 368 LEBs (46727168 bytes, 44.5 MiB), available 344 LEBs (43679744 bytes, 41.6 MiB), LEB size 126976 bytes (124.0 KiB)
Volume ID 0, size 32 LEBs (4063232 bytes, 3.8 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs", alignment 1
Set volume size to 39616512
Volume ID 1, size 312 LEBs (39616512 bytes, 37.7 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs_data", alignment 1
sysupgrade successful
umount: can't unmount /dev: Resource busy
umount: can't unmount /tmp: Resource busy
umount: can't unmount /: Invalid argument
[   74.078801] reboot: Restarting system


U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..Hit ESC key to stop autoboot: 1

Checking image 1...
   Image Name:   MIPS OpenWrt Linux-4.14.
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1905158 Bytes =  1.8 MB
   Load Address: 80001000
   Entry Point:  80001000
..............................   Verifying Checksum ... ## Booting image at bc400000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...

[    0.000000] Linux version 4.14.111 (musashino205@Taiha.Net) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+9901-29b3122f32)) #0 SMP Sat Apr 20 01:26:47 2019
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is I-O DATA WN-DX1167R
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x90/0x4a4 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu @81110000 s26192 r8192 d22960 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00001000
[    0.000000] Readback ErrCtl register=00001000
[    0.000000] Memory: 123412K/131072K available (4497K kernel code, 230K rwdata, 1000K rodata, 212K init, 248K bss, 7660K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] CPU Clock: 880MHz
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.015488] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.087817] pid_max: default: 32768 minimum: 301
[    0.097126] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.110146] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.125868] Hierarchical SRCU implementation.
[    0.135326] smp: Bringing up secondary CPUs ...
[    0.157183] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.157192] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.157204] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.157338] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.204704] Synchronize counters for CPU 1: done.
[    0.280943] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.280951] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.280958] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.281034] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.325533] Synchronize counters for CPU 2: done.
[    0.398017] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.398025] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.398033] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.398119] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.445102] Synchronize counters for CPU 3: done.
[    0.504705] smp: Brought up 1 node, 4 CPUs
[    0.516488] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.535958] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.548383] pinctrl core: initialized pinctrl subsystem
[    0.559935] NET: Registered protocol family 16
[    0.578196] pull PCIe RST: RALINK_RSTCTRL = 4000000
[    0.888183] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.898248] ***** Xtal 40MHz *****
[    0.904981] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.915184] Port 0 N_FTS = 1b102800
[    0.922086] Port 1 N_FTS = 1b105000
[    0.929010] Port 2 N_FTS = 1b102800
[    2.087654] PCIE0 no card, disable it(RST&CLK)
[    2.096341] PCIE2 no card, disable it(RST&CLK)
[    2.105144]  -> 20107f2
[    2.109994] PCIE1 enabled
[    2.115173] PCI host bridge /pcie@1e140000 ranges:
[    2.124701]  MEM 0x0000000060000000..0x000000006fffffff
[    2.135057]   IO 0x000000001e160000..0x000000001e16ffff
[    2.145425] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    2.167700] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.178946] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.190116] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.202405] PCI host bridge to bus 0000:00
[    2.210422] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    2.224095] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    2.235823] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    2.249312] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    2.266052] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.279087] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.292902] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.306375] pci 0000:00:00.0: BAR 1: assigned [mem 0x60100000-0x6010ffff]
[    2.319870] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    2.334380] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.344196] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.358915] clocksource: Switched to clocksource GIC
[    2.370139] NET: Registered protocol family 2
[    2.379360] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    2.393098] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    2.405705] TCP: Hash tables configured (established 1024 bind 1024)
[    2.418430] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.429937] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.442587] NET: Registered protocol family 1
[    2.688867] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    2.700185] Crashlog allocated RAM at address 0x3f00000
[    2.710679] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[    2.729381] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    2.740855] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    2.763374] random: fast init done
[    2.770320] io scheduler noop registered
[    2.777955] io scheduler deadline registered (default)
[    2.789063] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    2.802824] console [ttyS0] disabled
[    2.809877] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A
[    2.827814] console [ttyS0] enabled
[    2.827814] console [ttyS0] enabled
[    2.841603] bootconsole [early0] disabled
[    2.841603] bootconsole [early0] disabled
[    2.858084] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    2.870858] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    2.884894] Enable NFI Clock
[    2.890641] # MTK NAND # : Use HW ECC
[    2.897930] Device found in MTK table, ID: 1f1, EXT_ID: 801d01
[    2.909547] Support this Device in MTK table! 1f1 
[    2.919271] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    2.932140] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xf1
[    2.944790] nand: AMD/Spansion NAND 128MiB 3,3V 8-bit
[    2.954847] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    2.969935] Scanning device for bad blocks
[    3.259828] 12 fixed-partitions partitions found on MTD device MT7621-NAND
[    3.273515] Creating 12 MTD partitions on "MT7621-NAND":
[    3.284101] 0x000000000000-0x000000100000 : "Bootloader"
[    3.295589] 0x000000100000-0x000000200000 : "u-boot-env"
[    3.307024] 0x000000200000-0x000000300000 : "Factory"
[    3.317974] 0x000000300000-0x000000400000 : "SecondBoot"
[    3.329475] 0x000000400000-0x000000800000 : "kernel"
[    3.340266] 0x000000800000-0x000003600000 : "ubi"
[    3.350874] 0x000003600000-0x000003700000 : "Config"
[    3.361650] 0x000003700000-0x000006900000 : "firmware_2"
[    3.373482] 0x000006900000-0x000006a00000 : "Config_2"
[    3.384593] 0x000006a00000-0x000006b00000 : "persist"
[    3.395534] 0x000006b00000-0x000006c00000 : "idmkey"
[    3.406328] 0x000006c00000-0x000007f80000 : "Backup"
[    3.417265] [mtk_nand] probe successfully!
[    3.426176] Signature matched and data read!
[    3.434679] load_fact_bbt success 1023
[    3.442735] libphy: Fixed MDIO Bus: probed
[    3.521466] libphy: mdio: probed
[    4.927550] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    4.940123] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 19
[    4.959274] NET: Registered protocol family 10
[    4.969504] Segment Routing with IPv6
[    4.976861] NET: Registered protocol family 17
[    4.985779] 8021q: 802.1Q VLAN Support v1.8
[    4.996931] UBI: auto-attach mtd5
[    5.003577] ubi0: attaching mtd5
[    5.437581] ubi0: scanning is finished
[    5.460232] ubi0: attached mtd5 (name "ubi", size 46 MiB)
[    5.470997] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    5.484679] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    5.498185] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    5.512043] ubi0: good PEBs: 368, bad PEBs: 0, corrupted PEBs: 0
[    5.523993] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[    5.538366] ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 1110684811
[    5.556542] ubi0: available PEBs: 0, total reserved PEBs: 368, PEBs reserved for bad PEB handling: 20
[    5.574919] ubi0: background thread "ubi_bgt0d" started, PID 372
[    5.576897] block ubiblock0_0: created from ubi0:0(rootfs)
[    5.597830] ubiblock: device ubiblock0_0 (rootfs) set to be root filesystem
[    5.611699] hctosys: unable to open rtc device (rtc0)
[    5.628946] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    5.643645] Freeing unused kernel memory: 212K
[    5.652531] This architecture does not have kernel memory protection.
[    6.122667] init: Console is alive
[    6.129708] init: - watchdog -
[    6.168650] mtk_soc_eth 1e100000.ethernet eth0: port 0 link up
[    6.364148] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    6.492490] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    6.509223] init: - preinit -
[    6.514134] mtk_soc_eth 1e100000.ethernet eth0: port 2 link up
[    7.329817] mtk_soc_eth 1e100000.ethernet: PPE started
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to [    7.407135] random: procd: uninitialized urandom read (4 bytes read)
select the debug level
[   10.523692] UBIFS (ubi0:1): default file-system created
[   10.535559] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 448
[   10.648588] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data"
[   10.664199] UBIFS (ubi0:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[   10.683937] UBIFS (ubi0:1): FS size: 38346752 bytes (36 MiB, 302 LEBs), journal size 1904640 bytes (1 MiB, 15 LEBs)
[   10.704711] UBIFS (ubi0:1): reserved for root: 1811211 bytes (1768 KiB)
[   10.717882] UBIFS (ubi0:1): media format: w4/r0 (latest is w5/r0), UUID B62DEE20-04B6-4BB2-B22F-19A90A3DC706, small LPT model
[   10.743239] mount_root: overlay filesystem has not been fully initialized yet
[   10.757879] mount_root: switching to ubifs overlay
[   10.785078] urandom-seed: Seed file not found (/etc/urandom.seed)
[   10.862493] mtk_soc_eth 1e100000.ethernet: 0x100 = 0x6060000c, 0x10c = 0x80818
[   10.884326] procd: - early -
[   10.890184] procd: - watchdog -
[   11.509052] procd: - watchdog -
[   11.515610] procd: - ubus -
[   11.599988] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.684382] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.697524] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.711058] procd: - init -
Please press Enter to activate this console.
[   12.099025] kmodloader: loading kernel modules from /etc/modules.d/*
[   12.187056] nat46: module (version 683fbd2b765506332a1af141545652bf58f03166) loaded.
[   12.206932] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   12.225448] ip_tables: (C) 2000-2006 Netfilter Core Team
[   12.243844] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[   12.289461] Netfilter messages via NETLINK v0.30.
[   12.319386] xt_time: kernel timezone is -0000
[   12.336616] ctnetlink v0.93: registering with nfnetlink.
[   12.350023] PPP generic driver version 2.4.2
[   12.360073] NET: Registered protocol family 24
[   12.371598] kmodloader: done loading kernel modules from /etc/modules.d/*
[   13.633810] urandom_read: 5 callbacks suppressed
[   13.633822] random: jshn: uninitialized urandom read (4 bytes read)
[   38.772592] mtk_soc_eth 1e100000.ethernet: PPE started
[   38.787870] br-lan: port 1(eth0.1) entered blocking state
[   38.798662] br-lan: port 1(eth0.1) entered disabled state
[   38.810224] device eth0.1 entered promiscuous mode
[   38.819834] device eth0 entered promiscuous mode
[   38.832645] br-lan: port 1(eth0.1) entered blocking state
[   38.843498] br-lan: port 1(eth0.1) entered forwarding state
[   38.855149] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   39.219880] random: crng init done
[   39.849578] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready



BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+9902-961771ff30
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# 

WN-DX1167R debugflagメモ

システムのデバッグモードを設定する debugflag のメモ。
sys debugflag による設定前後で、”Factory” パーティション内の 0xFE75 の値が変化する。

  • sys debugflag 0 -> 0xFE75: 0x00(debug無効)
  • sys debugflag 1 -> 0xFE75: 0x01(debug有効)
root@WN-DX1167R:/tmp/mtd# sys debugflag
DebugFlag: 0
root@WN-DX1167R:/tmp/mtd# hexdump -n $((0x100)) -v -C -s $((0xfe00)) /dev/mtd3
0000fe00  4d 69 74 72 61 73 74 61  72 00 54 65 63 68 6e 6f  |Mitrastar.Techno|
0000fe10  6c 6f 67 79 20 43 6f 72  70 2e 00 00 00 00 00 00  |logy Corp.......|
0000fe20  4d 69 43 41 50 2d 33 33  32 33 43 00 00 00 00 00  |MiCAP-3323C.....|
0000fe30  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fe40  31 39 35 36 30 35 32 37  00 00 00 00 00 00 00 00  |19560527........|
0000fe50  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fe60  53 30 39 30 59 30 30 30  30 30 30 30 30 00 00 13  |S090Y00000000...|
0000fe70  49 55 aa 00 04 00 ff ff  5a 59 ff ff 00 00 00 00  |IU......ZY......|
0000fe80  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fe90  00 00 00 00 00 00 00 00  00 01 1c 03 08 06 20 18  |.............. .|
0000fea0  14 37 44 4d 69 43 41 50  2d 33 33 32 33 43 00 00  |.7DMiCAP-3323C..|
0000feb0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fec0  00 00 00 41 30 42 00 00  00 00 00 00 00 00 00 00  |...A0B..........|
0000fed0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fee0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fef0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000ff00
root@WN-DX1167R:/tmp/mtd# sys debugflag 1
PASS
root@WN-DX1167R:/tmp/mtd# hexdump -n $((0x100)) -v -C -s $((0xfe00)) /dev/mtd3
0000fe00  4d 69 74 72 61 73 74 61  72 00 54 65 63 68 6e 6f  |Mitrastar.Techno|
0000fe10  6c 6f 67 79 20 43 6f 72  70 2e 00 00 00 00 00 00  |logy Corp.......|
0000fe20  4d 69 43 41 50 2d 33 33  32 33 43 00 00 00 00 00  |MiCAP-3323C.....|
0000fe30  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fe40  31 39 35 36 30 35 32 37  00 00 00 00 00 00 00 00  |19560527........|
0000fe50  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fe60  53 30 39 30 59 30 30 30  30 30 30 30 30 00 00 13  |S090Y00000000...|
0000fe70  49 55 aa 00 04 01 ff ff  5a 59 ff ff 00 00 00 00  |IU......ZY......|
0000fe80  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fe90  00 00 00 00 00 00 00 00  00 01 1c 03 08 06 20 18  |.............. .|
0000fea0  14 37 44 4d 69 43 41 50  2d 33 33 32 33 43 00 00  |.7DMiCAP-3323C..|
0000feb0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fec0  00 00 00 41 30 42 00 00  00 00 00 00 00 00 00 00  |...A0B..........|
0000fed0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fee0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fef0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000ff00

WN-DX1167R stock -> OpenWrt(仮)

とりあえずmkimageの改造は無しで、手元で必要なuImageの改造を加えて投げ込んだのでメモ。
Z-Loaderのブート自体にはuImageのMagicは標準の 27051956 で、uImageのイメージ名は適当なもので問題ないが、メーカーファームのWebUIから投入する際はこの2つともチェックされるのか、どちらとも変更しなければイメージのチェックをパスできなかった。
uImage参考: https://mao.5ch.net/test/read.cgi/network/1520576652/672

なお、WebUIから投入した場合、ブート中のイメージとは別のもう一方のOSイメージ用パーティションに書き込まれ、ブートパーティションの指定をそちらに変更の上リブートされて書き込まれたパーティションからブートしていた。
このブートパーティションの指定は以下の様にして書き込める。書き込み先のパーティションは、/proc/mtdを参照して “persist” パーティションのmtdblockを確認しておくこと。echo内の数字は、1つ目のOSイメージを指定する場合 “01” または “1” を、2番目を指定する場合は “02” または “2” にする。

echo -ne "\x01" | dd of=/dev/mtdblock8 bs=1 count=1 seek=4 conv=notrunc

また、上記の通りファームウェアが書き込まれブートに使用されるパーティションが固定ではないためinitramfsイメージを使用したfactoryになる。投入した際に2番目のOSイメージパーティションに書き込まれそちらからブートした場合、非initramfsなファームをsysupgradeで書き込む前に1番目のOSイメージからブートするよう指定しておく必要がある。

[  942.544000] led=9, on=1, off=1, blinks,=1, reset=0, time=4000 low_trigger=0
Unlocking firmware_2 ...

Writing from /tmp/fw.bin to firmware_2 ...     
Header checksum OK.
Data checksum OK
Unlocking persist ...
### Switch to bank 2 on next boot! ###
procd: - shutdown -
[  948.224000] br-lan: port 4(ra0) entered disabled state
[  948.232000] br-lan: port 3(rai0) entered disabled state
[  948.244000] br-lan: port 2(eth1) entered disabled state
[  948.256000] br-lan: port 1(eth0) entered disabled state
[  948.264000] device eth0 left promiscuous mode
[  948.276000] br-lan: port 1(eth0) entered disabled state
[  948.284000] ra2880stop()...Done
[  948.292000] eth1: ===> VirtualIF_close
[  948.300000] Free TX/RX Ring Memory!
[  948.308000] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[  948.320000] device eth1 left promiscuous mode
[  948.332000] br-lan: port 2(eth1) entered disabled state
[  948.340000] eth1: ===> VirtualIF_close
[  948.348000] device ra0 left promiscuous mode
[  948.360000] br-lan: port 4(ra0) entered disabled state
[  948.368000] device rai0 left promiscuous mode
[  948.376000] br-lan: port 3(rai0) entered disabled state
[  949.700000] WifiSysClose(), wdev idx = 0
[  949.712000] WifiSysGetBssInfoState(): BssInfoIdx 0 not found!!!
[  949.724000] WifiSysUpdateBssInfoState(): BssInfoIdx 0 not found!!!
### ap ###
[  951.176000] Device Instance
[  951.184000]  WDEV 00:
                Name:rai0
[  951.188000]          Wdev(list) Idx:0
[  951.196000]           Idx:8
[  951.200000]  WDEV 01:
                Name:rai1
[  951.208000]          Wdev(list) Idx:1
[  951.212000]           Idx:9
[  951.216000]  WDEV 02:
                Name:rai2
[  951.224000]          Wdev(list) Idx:2
[  951.228000]           Idx:10
[  951.236000]  WDEV 03:
                Name:rai3
[  951.240000]          Wdev(list) Idx:3
[  951.248000]           Idx:11
[  951.252000]  WDEV 04:
                Name:ra0
[  951.260000]          Wdev(list) Idx:4
[  951.264000]           Idx:12
[  951.268000]  WDEV 05:
                Name:ra1
[  951.276000]          Wdev(list) Idx:5
[  951.284000]           Idx:13
[  951.288000]  WDEV 06:
                Name:ra2
[  951.292000]          Wdev(list) Idx:6
[  951.300000]           Idx:14
[  951.304000]  WDEV 07:
                Name:ra3
[  951.312000]          Wdev(list) Idx:7
[  951.316000]           Idx:15
[  951.320000]  WDEV 08:
                Name:apclii0
[  951.328000]          Wdev(list) Idx:8
[  951.336000]           Idx:16
[  951.340000]  WDEV 09:
                Name:apcli0
[  951.348000]          Wdev(list) Idx:9
[  951.352000]           Idx:17
[  951.356000]  WDEV 10:
[  951.360000]  WDEV 11:
[  951.368000]  WDEV 12:
[  951.372000]  WDEV 13:
[  951.376000]  WDEV 14:
[  951.380000]  WDEV 15:
[  951.384000]  WDEV 16:
[  951.388000]  WDEV 17:
[  951.396000] WifiSysClose(), wdev idx = 4
[  951.396000] WifiSysGetBssInfoState(): BssInfoIdx 1 not found!!!
[  951.396000] WifiSysUpdateBssInfoState(): BssInfoIdx 1 not found!!!
[  951.432000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[  951.444000] WifiSysClose(), wdev idx = 0
[  951.452000] WifiSysClose(), wdev idx = 1
[  951.460000] WifiSysClose(), wdev idx = 2
[  951.464000] WifiSysClose(), wdev idx = 3
[  951.500000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[  951.512000] WifiSysClose(), wdev idx = 4
[  951.520000] WifiSysClose(), wdev idx = 5
[  951.528000] WifiSysClose(), wdev idx = 6
[  951.536000] WifiSysClose(), wdev idx = 7
[  951.544000] kill LoopBackTxTask task failed!
[  951.560000] AndesRestartCheck: Current TOP_MISC2(0x7)
[  951.612000] CmdReStartDLRsp: Status Success!, Status(0)
[  951.624000] EventExtEventHandler: Unknown Ext Event(6f)
[  951.632000] AndesRestartCheck:  TOP_MISC2(1)
[  951.644000] RT28xxPciAsicRadioOff(): Not support for HIF_MT yet!
[  951.656000] RTMPDrvClose call RT28xxPciAsicRadioOff fail !!
[  951.664000] tx_kickout_fail_count = 0
[  951.672000] tx_timeout_fail_count = 0
[  951.680000] rx_receive_fail_count = 0
[  951.688000] alloc_cmd_msg = 3185
[  951.692000] free_cmd_msg = 3185
[  951.700000] cut_through_token_list_destroy(): 8632e888,8632e888
[  951.716000] cut_through_token_list_destroy(): 8632e898,8632e898
[  951.732000] FwOwn()::Set Fw Own
[  951.740000] RTMP_AllTimerListRelease: Size=0
[  951.748000] FwOwn()::Return since already in Fw Own...
[  951.760000] <---HwCtrlThread
procd: - reboot [  951.896000] Stopped WatchDog Timer.
-
[  951.908000] Restarting system.


U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..Hit ESC key to stop autoboot: 1

Checking image 2...
   Image Name:   3.10(XIK.1)b7
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    5642895 Bytes =  5.4 MB
   Load Address: 80001000
   Entry Point:  80001000
.......................................................................................   Verifying Combo Checksum ... .......................................................................................## Booting image at bf700000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...

[    0.000000] Linux version 4.14.111 (musashino205@Taiha.Net) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+9824-b80243858e)) #0 SMP Wed Apr 17 15:36:46 2019
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is I-O DATA WN-DX1167R
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x90/0x4a4 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu @81110000 s26192 r8192 d22960 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00001000
[    0.000000] Readback ErrCtl register=00001000
[    0.000000] Memory: 119764K/131072K available (4497K kernel code, 230K rwdata, 1000K rodata, 3860K init, 248K bss, 11308K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] CPU Clock: 880MHz
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.015488] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.087817] pid_max: default: 32768 minimum: 301
[    0.097128] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.110148] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.125865] Hierarchical SRCU implementation.
[    0.135322] smp: Bringing up secondary CPUs ...
[    0.144860] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.144869] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.144880] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.145014] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.204698] Synchronize counters for CPU 1: done.
[    0.268616] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.268624] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.268631] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.268708] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.325524] Synchronize counters for CPU 2: done.
[    0.385686] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.385694] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.385702] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.385788] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.445092] Synchronize counters for CPU 3: done.
[    0.504696] smp: Brought up 1 node, 4 CPUs
[    0.516465] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.535934] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.548360] pinctrl core: initialized pinctrl subsystem
[    0.559927] NET: Registered protocol family 16
[    0.577592] pull PCIe RST: RALINK_RSTCTRL = 4000000
[    0.887578] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.897642] ***** Xtal 40MHz *****
[    0.904375] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.914578] Port 0 N_FTS = 1b102800
[    0.921480] Port 1 N_FTS = 1b105000
[    0.928405] Port 2 N_FTS = 1b102800
[    2.087057] PCIE0 no card, disable it(RST&CLK)
[    2.095745] PCIE2 no card, disable it(RST&CLK)
[    2.104548]  -> 20107f2
[    2.109398] PCIE1 enabled
[    2.114577] PCI host bridge /pcie@1e140000 ranges:
[    2.124105]  MEM 0x0000000060000000..0x000000006fffffff
[    2.134461]   IO 0x000000001e160000..0x000000001e16ffff
[    2.144829] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    2.167715] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.179008] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.190256] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.202750] PCI host bridge to bus 0000:00
[    2.210765] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    2.224420] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    2.236168] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    2.249643] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    2.266495] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.279517] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.293336] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.306817] pci 0000:00:00.0: BAR 1: assigned [mem 0x60100000-0x6010ffff]
[    2.320308] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    2.334821] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.344646] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.359432] clocksource: Switched to clocksource GIC
[    2.370675] NET: Registered protocol family 2
[    2.379985] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    2.393721] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    2.406321] TCP: Hash tables configured (established 1024 bind 1024)
[    2.419053] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.430556] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.443200] NET: Registered protocol family 1
[    5.829397] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    5.840886] Crashlog allocated RAM at address 0x3f00000
[    5.851393] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[    5.871370] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    5.882853] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    5.903955] random: fast init done
[    5.912889] io scheduler noop registered
[    5.920594] io scheduler deadline registered (default)
[    5.931775] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    5.945639] console [ttyS0] disabled
[    5.952691] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A
[    5.970626] console [ttyS0] enabled
[    5.970626] console [ttyS0] enabled
[    5.984418] bootconsole [early0] disabled
[    5.984418] bootconsole [early0] disabled
[    6.000996] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    6.013896] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    6.027937] Enable NFI Clock
[    6.033683] # MTK NAND # : Use HW ECC
[    6.040994] Device found in MTK table, ID: 1f1, EXT_ID: 801d01
[    6.052607] Support this Device in MTK table! 1f1 
[    6.062329] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    6.075199] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xf1
[    6.087848] nand: AMD/Spansion NAND 128MiB 3,3V 8-bit
[    6.097905] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    6.112993] Scanning device for bad blocks
[    6.402781] 11 fixed-partitions partitions found on MTD device MT7621-NAND
[    6.416469] Creating 11 MTD partitions on "MT7621-NAND":
[    6.427064] 0x000000000000-0x000000100000 : "Bootloader"
[    6.438719] 0x000000100000-0x000000200000 : "u-boot-env"
[    6.450391] 0x000000200000-0x000000300000 : "Factory"
[    6.461506] 0x000000300000-0x000000400000 : "SecondBoot"
[    6.473133] 0x000000400000-0x000003600000 : "firmware"
[    6.484786] 0x000003600000-0x000003700000 : "Config"
[    6.495732] 0x000003700000-0x000006900000 : "firmware_2"
[    6.507770] 0x000006900000-0x000006a00000 : "Config_2"
[    6.519064] 0x000006a00000-0x000006b00000 : "persist"
[    6.530220] 0x000006b00000-0x000006c00000 : "idmkey"
[    6.541165] 0x000006c00000-0x000007f80000 : "Backup"
[    6.552232] [mtk_nand] probe successfully!
[    6.561139] Signature matched and data read!
[    6.569641] load_fact_bbt success 1023
[    6.577863] libphy: Fixed MDIO Bus: probed
[    6.652008] libphy: mdio: probed
[    8.069445] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    8.082014] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 19
[    8.100784] NET: Registered protocol family 10
[    8.110937] Segment Routing with IPv6
[    8.118291] NET: Registered protocol family 17
[    8.127200] 8021q: 802.1Q VLAN Support v1.8
[    8.137882] hctosys: unable to open rtc device (rtc0)
[    8.162308] Freeing unused kernel memory: 3860K
[    8.171369] This architecture does not have kernel memory protection.
[    8.195375] init: Console is alive
[    8.202430] init: - watchdog -
[    8.220365] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    8.237385] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    8.259728] init: - preinit -
[    8.426327] mtk_soc_eth 1e100000.ethernet: PPE started
[    8.448840] random: procd: uninitialized urandom read (4 bytes read)
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    9.299905] mtk_soc_eth 1e100000.ethernet eth0: port 0 link up
[    9.668050] mtk_soc_eth 1e100000.ethernet eth0: port 2 link up
[   11.563105] mtk_soc_eth 1e100000.ethernet: 0x100 = 0x6060000c, 0x10c = 0x80818
[   11.584512] procd: - early -
[   11.590391] procd: - watchdog -
[   12.219565] procd: - watchdog -
[   12.226120] procd: - ubus -
[   12.236341] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.289976] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.303033] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.316534] procd: - init -
Please press Enter to activate this console.
[   12.475962] kmodloader: loading kernel modules from /etc/modules.d/*
[   12.494539] nat46: module (version 683fbd2b765506332a1af141545652bf58f03166) loaded.
[   12.514229] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   12.533949] ip_tables: (C) 2000-2006 Netfilter Core Team
[   12.556171] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[   12.600620] Netfilter messages via NETLINK v0.30.
[   12.632397] xt_time: kernel timezone is -0000
[   12.648384] ctnetlink v0.93: registering with nfnetlink.
[   12.661713] PPP generic driver version 2.4.2
[   12.671586] NET: Registered protocol family 24
[   12.684076] kmodloader: done loading kernel modules from /etc/modules.d/*
[   13.773293] urandom_read: 5 callbacks suppressed
[   13.773305] random: jshn: uninitialized urandom read (4 bytes read)
[   52.550164] mtk_soc_eth 1e100000.ethernet: PPE started
[   52.569852] br-lan: port 1(eth0.1) entered blocking state
[   52.580768] br-lan: port 1(eth0.1) entered disabled state
[   52.592245] device eth0.1 entered promiscuous mode
[   52.601899] device eth0 entered promiscuous mode
[   52.615251] br-lan: port 1(eth0.1) entered blocking state
[   52.626114] br-lan: port 1(eth0.1) entered forwarding state
[   52.637820] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   53.045858] random: crng init done
[   53.550050] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready



BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+9891-163a8830b9
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# 

WN-DX1167R ファームウェア書き込みメモ (Z-Loader)

Z-Loader経由でOpenWrtファームウェアを書き込んだメモ。5chユーザーのWN-AX2033GRにおける先行事例を参考にした。
ハイライトはキー入力個所

U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..Hit ESC key to stop autoboot: 1
ZLB> 
ATGO              boot up the whole system
ATGU              go back to U-Boot command line
ATUR              upgrade ras image by console
ATUF              upgrade factory by console
ATNR    x,y       upgrade image by TFTP (x=type[1:ras, 2:bootloader, 3:config, 4:romd 6:factory], y=filename)
ATUX              upgrade bootloader
ATBT    x         block0 write enable (1=enable, 0=disable)
ATEN    x,(y)     set BootExtension Debug Flag (y=password)
ATSE    x         show the seed of password generator
ATWZ    a,(b,c,d) write MAC , Country code, EngDbgFlag, MAC Quantity to FLASH
ATSH              dump manufacturer related data in FLASH
ATBU              dump manufacturer related data in working buffer
ATCB              copy FLASH MRD to working buffer
ATSN    x         set serial number to flash
ATSB              save working buffer to FLASH
ATQY    x         set MAC Quantity to working buffer
ATFL    x         set EngDebugFlag to working buffer
ATCO    x         set country code to working buffer
ATSR              reset
ATRT    (x,y,z,u) RAM read/write test (x=level, y=start addr, z=end addr, u=interations)
ATRM              restore default MRD
ATBR              reset to default Romfile
ATER              erase ROM-D data
ATHV    x         set hardware version to flash
ATGP    x,y       led control
ZLB> ATNR 1,openwrt-ramips-mt7621-iodata_wn-dx1167r-squashfs-tftp-ras.bin

 NetLoop,call eth_halt ! 

 NetLoop,call eth_init ! 
Trying Eth0 (10/100-M)

 Waitting for RX_DMA_BUSY status Start... done


 ETH_STATE_ACTIVE!! 
Using Eth0 (10/100-M) device
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'openwrt-ramips-mt7621-iodata_wn-dx1167r-squashfs-tftp-ras.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: checksum bad
checksum bad
checksum bad
checksum bad
Got ARP REPLY, set server/gtwy eth addr (5c:9a:d8:e6:3f:b3)
Got it
#################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ####################Got ARP REQUEST, return our IP
#############################################
         #################################################################
         #################################################################
         #################################################################
         ##############################################
done
Bytes transferred = 6553600 (640000 hex)
LoadAddr=84000000 NetBootFileXferSize= 00640000
receive langth = 6553600

!!Upgrade File @84000000, length 6553600, type 1, offset 0x400000.  !!
ranand_erase: start:400000, len:20000 
..ranand_erase: start:420000, len:20000 
..ranand_erase: start:440000, len:20000 
..ranand_erase: start:460000, len:20000 
..ranand_erase: start:480000, len:20000 
..ranand_erase: start:4a0000, len:20000 
..ranand_erase: start:4c0000, len:20000 
..ranand_erase: start:4e0000, len:20000 
..ranand_erase: start:500000, len:20000 
..ranand_erase: start:520000, len:20000 
..ranand_erase: start:540000, len:20000 
..ranand_erase: start:560000, len:20000 
..ranand_erase: start:580000, len:20000 
..ranand_erase: start:5a0000, len:20000 
..ranand_erase: start:5c0000, len:20000 
..ranand_erase: start:5e0000, len:20000 
..ranand_erase: start:600000, len:20000 
..ranand_erase: start:620000, len:20000 
..ranand_erase: start:640000, len:20000 
..ranand_erase: start:660000, len:20000 
..ranand_erase: start:680000, len:20000 
..ranand_erase: start:6a0000, len:20000 
..ranand_erase: start:6c0000, len:20000 
..ranand_erase: start:6e0000, len:20000 
..ranand_erase: start:700000, len:20000 
..ranand_erase: start:720000, len:20000 
..ranand_erase: start:740000, len:20000 
..ranand_erase: start:760000, len:20000 
..ranand_erase: start:780000, len:20000 
..ranand_erase: start:7a0000, len:20000 
..ranand_erase: start:7c0000, len:20000 
..ranand_erase: start:7e0000, len:20000 
..ranand_erase: start:800000, len:20000 
..ranand_erase: start:820000, len:20000 
..ranand_erase: start:840000, len:20000 
..ranand_erase: start:860000, len:20000 
..ranand_erase: start:880000, len:20000 
..ranand_erase: start:8a0000, len:20000 
..ranand_erase: start:8c0000, len:20000 
..ranand_erase: start:8e0000, len:20000 
..ranand_erase: start:900000, len:20000 
..ranand_erase: start:920000, len:20000 
..ranand_erase: start:940000, len:20000 
..ranand_erase: start:960000, len:20000 
..ranand_erase: start:980000, len:20000 
..ranand_erase: start:9a0000, len:20000 
..ranand_erase: start:9c0000, len:20000 
..ranand_erase: start:9e0000, len:20000 
..ranand_erase: start:a00000, len:20000 
..ranand_erase: start:a20000, len:20000 
..Done!
ZLB> ATGO

Checking image 1...
   Image Name:   MIPS OpenWrt Linux-4.14.
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1904268 Bytes =  1.8 MB
   Load Address: 80001000
   Entry Point:  80001000
..............................   Verifying Checksum ... ## Booting image at bc400000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...

[    0.000000] Linux version 4.14.111 (jenkins@tofu-z77hvub18_openwrt) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+9824-b80243858e)) #0 SMP Wed Apr 10 22:14:24 2019
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is I-O DATA WN-DX1167R
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x90/0x4a4 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu @81110000 s26192 r8192 d22960 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00041000
[    0.000000] Readback ErrCtl register=00041000
[    0.000000] Memory: 123412K/131072K available (4495K kernel code, 232K rwdata, 1000K rodata, 212K init, 248K bss, 7660K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] CPU Clock: 880MHz
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.015489] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.087819] pid_max: default: 32768 minimum: 301
[    0.097130] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.110152] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.125872] Hierarchical SRCU implementation.
[    0.135333] smp: Bringing up secondary CPUs ...
[    0.157193] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.157203] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.157214] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.157346] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.204708] Synchronize counters for CPU 1: done.
[    0.280962] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.280971] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.280978] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.281053] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.325550] Synchronize counters for CPU 2: done.
[    0.398048] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.398057] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.398064] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.398161] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.445120] Synchronize counters for CPU 3: done.
[    0.504727] smp: Brought up 1 node, 4 CPUs
[    0.516496] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.535966] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.548388] pinctrl core: initialized pinctrl subsystem
[    0.559959] NET: Registered protocol family 16
[    0.577853] pull PCIe RST: RALINK_RSTCTRL = 4000000
[    0.887862] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.897927] ***** Xtal 40MHz *****
[    0.904660] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.914864] Port 0 N_FTS = 1b102800
[    0.921765] Port 1 N_FTS = 1b105000
[    0.928690] Port 2 N_FTS = 1b102800
[    2.087414] PCIE0 no card, disable it(RST&CLK)
[    2.096102] PCIE2 no card, disable it(RST&CLK)
[    2.104905]  -> 20107f2
[    2.109754] PCIE1 enabled
[    2.114934] PCI host bridge /pcie@1e140000 ranges:
[    2.124462]  MEM 0x0000000060000000..0x000000006fffffff
[    2.134818]   IO 0x000000001e160000..0x000000001e16ffff
[    2.145185] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    2.167904] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.179202] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.190476] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.203006] PCI host bridge to bus 0000:00
[    2.211026] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    2.224685] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    2.236430] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    2.249905] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    2.266775] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.279797] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.293616] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.307095] pci 0000:00:00.0: BAR 1: assigned [mem 0x60100000-0x6010ffff]
[    2.320588] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    2.335105] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.344928] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.359781] clocksource: Switched to clocksource GIC
[    2.371091] NET: Registered protocol family 2
[    2.380381] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    2.394113] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    2.406716] TCP: Hash tables configured (established 1024 bind 1024)
[    2.419449] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.430952] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.443591] NET: Registered protocol family 1
[    2.689726] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    2.701085] Crashlog allocated RAM at address 0x3f00000
[    2.711776] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[    2.731556] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    2.743066] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    2.763642] random: fast init done
[    2.772704] io scheduler noop registered
[    2.780396] io scheduler deadline registered (default)
[    2.791494] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    2.805397] console [ttyS0] disabled
[    2.812500] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A
[    2.830396] console [ttyS0] enabled
[    2.830396] console [ttyS0] enabled
[    2.844183] bootconsole [early0] disabled
[    2.844183] bootconsole [early0] disabled
[    2.860765] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    2.873648] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    2.887677] Enable NFI Clock
[    2.893419] # MTK NAND # : Use HW ECC
[    2.900732] Device found in MTK table, ID: 1f1, EXT_ID: 801d01
[    2.912350] Support this Device in MTK table! 1f1 
[    2.922073] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    2.934943] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xf1
[    2.947593] nand: AMD/Spansion NAND 128MiB 3,3V 8-bit
[    2.957650] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    2.972740] Scanning device for bad blocks
[    3.262508] 12 fixed-partitions partitions found on MTD device MT7621-NAND
[    3.276195] Creating 12 MTD partitions on "MT7621-NAND":
[    3.286781] 0x000000000000-0x000000100000 : "Bootloader"
[    3.298419] 0x000000100000-0x000000200000 : "u-boot-env"
[    3.310086] 0x000000200000-0x000000300000 : "Factory"
[    3.321209] 0x000000300000-0x000000400000 : "SecondBoot"
[    3.332822] 0x000000400000-0x000000800000 : "kernel"
[    3.343791] 0x000000800000-0x000003600000 : "ubi"
[    3.354558] 0x000003600000-0x000003700000 : "Config"
[    3.365513] 0x000003700000-0x000006900000 : "firmware_2"
[    3.377505] 0x000006900000-0x000006a00000 : "Config_2"
[    3.388796] 0x000006a00000-0x000006b00000 : "persist"
[    3.399956] 0x000006b00000-0x000006c00000 : "idmkey"
[    3.410900] 0x000006c00000-0x000007f80000 : "Backup"
[    3.421985] [mtk_nand] probe successfully!
[    3.430894] Signature matched and data read!
[    3.439376] load_fact_bbt success 1023
[    3.447583] libphy: Fixed MDIO Bus: probed
[    3.522344] libphy: mdio: probed
[    4.928371] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    4.940908] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 19
[    4.959966] NET: Registered protocol family 10
[    4.970170] Segment Routing with IPv6
[    4.977536] NET: Registered protocol family 17
[    4.986428] 8021q: 802.1Q VLAN Support v1.8
[    4.997556] UBI: auto-attach mtd5
[    5.004248] ubi0: attaching mtd5
[    5.025850] UBI: EOF marker found, PEBs from 13 will be erased
[    5.037929] ubi0: scanning is finished
[    5.084852] ubi0: volume 1 ("rootfs_data") re-sized from 9 to 333 LEBs
[    5.098640] ubi0: attached mtd5 (name "ubi", size 46 MiB)
[    5.109444] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    5.123159] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    5.136677] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    5.150539] ubi0: good PEBs: 368, bad PEBs: 0, corrupted PEBs: 0
[    5.162500] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[    5.176880] ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 964880614
[    5.194896] ubi0: available PEBs: 0, total reserved PEBs: 368, PEBs reserved for bad PEB handling: 20
[    5.213277] ubi0: background thread "ubi_bgt0d" started, PID 369
[    5.215189] block ubiblock0_0: created from ubi0:0(rootfs)
[    5.236218] ubiblock: device ubiblock0_0 (rootfs) set to be root filesystem
[    5.250120] hctosys: unable to open rtc device (rtc0)
[    5.320902] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    5.335589] Freeing unused kernel memory: 212K
[    5.344455] This architecture does not have kernel memory protection.
[    6.357057] init: Console is alive
[    6.364108] init: - watchdog -
[    6.453838] mtk_soc_eth 1e100000.ethernet eth0: port 3 link up
[    6.529355] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    6.619659] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    6.650049] init: - preinit -
[    7.337540] mtk_soc_eth 1e100000.ethernet: PPE started
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[   10.548994] UBIFS (ubi0:1): default file-system created
[   10.561060] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 439
[   10.593041] random: procd: uninitialized urandom read (4 bytes read)
[   10.675612] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data"
[   10.691242] UBIFS (ubi0:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[   10.710990] UBIFS (ubi0:1): FS size: 41013248 bytes (39 MiB, 323 LEBs), journal size 2031616 bytes (1 MiB, 16 LEBs)
[   10.731760] UBIFS (ubi0:1): reserved for root: 1937156 bytes (1891 KiB)
[   10.744926] UBIFS (ubi0:1): media format: w4/r0 (latest is w5/r0), UUID B81C08C4-63C6-4F2A-9209-8BD51995109A, small LPT model
[   10.770363] mount_root: overlay filesystem has not been fully initialized yet
[   10.784963] mount_root: switching to ubifs overlay
[   10.810343] urandom-seed: Seed file not found (/etc/urandom.seed)
[   10.897251] mtk_soc_eth 1e100000.ethernet: 0x100 = 0x6060000c, 0x10c = 0x80818
[   10.918904] procd: - early -
[   10.924772] procd: - watchdog -
[   11.549909] procd: - watchdog -
[   11.556472] procd: - ubus -
[   11.609170] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.622535] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.635596] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.649111] procd: - init -
Please press Enter to activate this console.
[   11.910565] kmodloader: loading kernel modules from /etc/modules.d/*
[   11.927475] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   11.944856] ip_tables: (C) 2000-2006 Netfilter Core Team
[   11.961078] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[   12.003913] xt_time: kernel timezone is -0000
[   12.018142] PPP generic driver version 2.4.2
[   12.027837] NET: Registered protocol family 24
[   12.038953] kmodloader: done loading kernel modules from /etc/modules.d/*
[   13.206587] urandom_read: 5 callbacks suppressed
[   13.206599] random: jshn: uninitialized urandom read (4 bytes read)
[   23.311257] mtk_soc_eth 1e100000.ethernet: PPE started
[   23.327072] br-lan: port 1(eth0.1) entered blocking state
[   23.337924] br-lan: port 1(eth0.1) entered disabled state
[   23.349363] device eth0.1 entered promiscuous mode
[   23.359238] device eth0 entered promiscuous mode
[   23.371147] br-lan: port 1(eth0.1) entered blocking state
[   23.381939] br-lan: port 1(eth0.1) entered forwarding state
[   23.393592] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   24.350325] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   24.725924] random: crng init done



BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+9856-c5e6f6b6c2
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/#

WN-DX1167R bootnumメモ

WN-DX1167Rのデュアルイメージ構成において、ブートするパーティションを切り替える bootnum フラグについてのメモ。

root@WN-DX1167R:/tmp/mtd# mstc_persist read bootnum
1
root@WN-DX1167R:/tmp/mtd# hexdump -n 128 -C /dev/mtd9
00000000  1b 05 ce 17 01 00 00 00  4a 4f 00 00 06 9e e4 d0  |........JO......|
00000010  4a 4f 00 00 06 9e e4 d0  00 00 00 00 00 00 00 00  |JO..............|
00000020  00 00 00 00 00 00 00 00  ff ff ff ff ff ff ff ff  |................|
00000030  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
*
00000080
root@WN-DX1167R:/tmp/mtd# mstc_persist write bootnum 2
Unlocking persist ...
root@WN-DX1167R:/tmp/mtd# hexdump -n 128 -C /dev/mtd9
00000000  1b 05 ce 17 02 00 00 00  4a 4f 00 00 06 9e e4 d0  |........JO......|
00000010  4a 4f 00 00 06 9e e4 d0  00 00 00 00 00 00 00 00  |JO..............|
00000020  00 00 00 00 00 00 00 00  ff ff ff ff ff ff ff ff  |................|
00000030  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
*
00000080

WN-DX1167R

再び某氏より提供頂いたもの。事前のファーム解析でMT7621を搭載していることが予想されていたものの、WAN側は1000Mbps対応ながらLAN側は100Mbpsまでとされており、内部的にどのような構造になっているのかが気になっていた。
弄っていくのでメモ。

Switch

zone WAN LAN
port
(WN-DX1167R)
インターネット (LAN番号刻印無し)
port
(MT7530)
port0 port1 port2 port3 port4

MAC

  • LAN: 34:76:C5:xx:xx:F4 (Ubootenv, ethaddr (text) / Factory, 0xE000 (hex))
  • WAN: 34:76:C5:xx:xx:F6 (Factory, 0xE006 (hex))
  • 2.4G: 34:76:C5:xx:xx:F4 (Factory, 0x4 (hex))
  • 5G: 34:76:C5:xx:xx:F5 (Factory, 0x8004 (hex))

U-Boot

ブートを止める方法が不明で入れず
→ 5chの情報を参考に強引にKernelへログインしたうえでブート時のmtdロックを回避、
sys debugflag 1
を設定してデバッグモードを有効化しZ-Loaderを停止できるように変更。再度ブート時にZ-Loaderに入り、
ATGU
でU-Bootへ移動する

log:

U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..Hit ESC key to stop autoboot: 1
ZLB> help
ATGO              boot up the whole system
ATGU              go back to U-Boot command line
ATUR              upgrade ras image by console
ATUF              upgrade factory by console
ATNR    x,y       upgrade image by TFTP (x=type[1:ras, 2:bootloader, 3:config, 4:romd 6:factory], y=filename)
ATUX              upgrade bootloader
ATBT    x         block0 write enable (1=enable, 0=disable)
ATEN    x,(y)     set BootExtension Debug Flag (y=password)
ATSE    x         show the seed of password generator
ATWZ    a,(b,c,d) write MAC , Country code, EngDbgFlag, MAC Quantity to FLASH
ATSH              dump manufacturer related data in FLASH
ATBU              dump manufacturer related data in working buffer
ATCB              copy FLASH MRD to working buffer
ATSN    x         set serial number to flash
ATSB              save working buffer to FLASH
ATQY    x         set MAC Quantity to working buffer
ATFL    x         set EngDebugFlag to working buffer
ATCO    x         set country code to working buffer
ATSR              reset
ATRT    (x,y,z,u) RAM read/write test (x=level, y=start addr, z=end addr, u=interations)
ATRM              restore default MRD
ATBR              reset to default Romfile
ATER              erase ROM-D data
ATHV    x         set hardware version to flash
ATGP    x,y       led control
ZLB> ATGU


=>## Application terminated, rc = 0x0

Please choose the operation: 
   1: Load system code to SDRAM via TFTP. 
   2: Load system code then write to Flash via TFTP. 
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   9: Load Boot Loader code then write to Flash via TFTP. 
default: 3

You choosed 4

                                                                                                                           0 

   
4: System Enter Boot Command Line Interface.

U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)
MSTC #

help
ヘルプコマンド潰されているのに “ヘルプ見ろ” と言われるのはネタっぽい

MSTC # help
Unknown command 'help' - try 'help'

version

MSTC # version
Unknown command 'version' - try 'help'

printenv

MSTC # printenv
bootcmd=tftp
ipaddr=10.10.10.123
serverip=10.10.10.3
serialnum=118H010878Z7
countrycode=EA
ethaddr=34:76:C5:**:**:F4
wifi2ssid1=IODATA-****f4-2G
wifi2ssid2=IO-Guest-****f4-2G
wifi1ssid1=IODATA-****f4-5G
wifiwpapsk=**********
wifiwpspin=********
wifi1ssid2=IO-Guest-****f4-5G
stdin=serial
stdout=serial
stderr=serial
ethact=Eth0 (10/100-M)
BootType=3

Environment size: 353/131068 bytes

tftp

MSTC # tftp

 NetLoop,call eth_halt ! 

 NetLoop,call eth_init ! 
Trying Eth0 (10/100-M)

 ETH_STATE_ACTIVE!! 
*** Warning: no boot file name; using 'test.bin'
Using Eth0 (10/100-M) device
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'test.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: T T 
Abort

Kernel

パスワードが設定されており、ログイン不可。
5chの情報を基に強引にログインし、情報を引き出し。

uname -a

root@WN-DX1167R:~# uname -a
Linux WN-DX1167R 3.10.14 #1 SMP Fri Oct 12 21:22:31 CST 2018 mips GNU/Linux

cat /proc/version

root@WN-DX1167R:~# cat /proc/version
Linux version 3.10.14 (*******@srv17) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 unknown) ) #1 SMP Fri Oct 12 21:22:31 CST 2018

cat /proc/cpuinfo

root@WN-DX1167R:~# cat /proc/cpuinfo
system type             : MT7621
machine                 : Unknown
processor               : 0
cpu model               : MIPS 1004Kc V2.15
BogoMIPS                : 583.68
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa                     : mips1 mips2 mips32r1 mips32r2
ASEs implemented        : mips16 dsp mt
shadow register sets    : 1
kscratch registers      : 0
core                    : 0
VPE                     : 0
VCED exceptions         : not available
VCEI exceptions         : not available

processor               : 1
cpu model               : MIPS 1004Kc V2.15
BogoMIPS                : 583.68
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa                     : mips1 mips2 mips32r1 mips32r2
ASEs implemented        : mips16 dsp mt
shadow register sets    : 1
kscratch registers      : 0
core                    : 0
VPE                     : 1
VCED exceptions         : not available
VCEI exceptions         : not available

processor               : 2
cpu model               : MIPS 1004Kc V2.15
BogoMIPS                : 583.68
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa                     : mips1 mips2 mips32r1 mips32r2
ASEs implemented        : mips16 dsp mt
shadow register sets    : 1
kscratch registers      : 0
core                    : 1
VPE                     : 0
VCED exceptions         : not available
VCEI exceptions         : not available

processor               : 3
cpu model               : MIPS 1004Kc V2.15
BogoMIPS                : 583.68
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa                     : mips1 mips2 mips32r1 mips32r2
ASEs implemented        : mips16 dsp mt
shadow register sets    : 1
kscratch registers      : 0
core                    : 1
VPE                     : 1
VCED exceptions         : not available
VCEI exceptions         : not available

cat /proc/meminfo

root@WN-DX1167R:~# cat /proc/meminfo
MemTotal:         125220 kB
MemFree:           70108 kB
Buffers:            5648 kB
Cached:            18780 kB
SwapCached:            0 kB
Active:            10748 kB
Inactive:          16236 kB
Active(anon):       3788 kB
Inactive(anon):     1732 kB
Active(file):       6960 kB
Inactive(file):    14504 kB
Unevictable:           0 kB
Mlocked:               0 kB
SwapTotal:             0 kB
SwapFree:              0 kB
Dirty:                 0 kB
Writeback:             0 kB
AnonPages:          2592 kB
Mapped:             2844 kB
Shmem:              2964 kB
Slab:              11968 kB
SReclaimable:       1936 kB
SUnreclaim:        10032 kB
KernelStack:         528 kB
PageTables:          252 kB
NFS_Unstable:          0 kB
Bounce:                0 kB
WritebackTmp:          0 kB
CommitLimit:       62608 kB
Committed_AS:       8816 kB
VmallocTotal:    1048372 kB
VmallocUsed:       11356 kB
VmallocChunk:     980924 kB

cat /proc/mtd

root@WN-DX1167R:~# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 07f80000 00020000 "ALL"
mtd1: 00100000 00020000 "Bootloader"
mtd2: 00100000 00020000 "Ubootenv"
mtd3: 00100000 00020000 "Factory"
mtd4: 03200000 00020000 "firmware"
mtd5: 03078a0e 00020000 "rootfs"
mtd6: 00100000 00020000 "Config"
mtd7: 03200000 00020000 "firmware_2"
mtd8: 00100000 00020000 "Config_2"
mtd9: 00100000 00020000 "persist"
mtd10: 00100000 00020000 "idmkey"
mtd11: 01380000 00020000 "Backup"
mtd12: 00100000 00020000 "SecondBoot"

ubus call system board

root@WN-DX1167R:~# ubus call system board
{
        "kernel": "3.10.14",
        "hostname": "WN-DX1167R",
        "system": "MT7621",
        "model": "MiCAP-3326C",
        "release": {
                "distribution": "OpenWrt",
                "version": "1.00.001",
                "revision": "unknown",
                "codename": "barrier_breaker",
                "target": "ramips\/generic",
                "description": "OpenWrt Barrier Breaker 1.00.001"
        }
}

fw_printenv

root@WN-DX1167R:~# fw_printenv
bootcmd=tftp
ipaddr=10.10.10.123
serverip=10.10.10.3
stdin=serial
stdout=serial
stderr=serial
serialnum=118H010878Z7
countrycode=EA
ethaddr=34:76:C5:**:**:F4
wifi2ssid1=IODATA-****f4-2G
wifi2ssid2=IO-Guest-****f4-2G
wifi1ssid1=IODATA-****f4-5G
wifiwpapsk=*************
wifiwpspin=********
wifi1ssid2=IO-Guest-****f4-5G

switch –help

root@WN-DX1167R:~# switch --help
Usage:
 switch acl etype add [ethtype] [portmap]              - drop etherytype packets
 switch acl dip add [dip] [portmap]                    - drop dip packets
 switch acl dip meter [dip] [portmap][meter:kbps]      - rate limit dip packets
 switch acl dip trtcm [dip] [portmap][CIR:kbps][CBS][PIR][PBS] - TrTCM dip packets
 switch acl port add [sport] [portmap]           - drop src port packets
 switch acl L4 add [2byes] [portmap]             - drop L4 packets with 2bytes payload
 switch add [mac] [portmap]                  - add an entry to switch table
 switch add [mac] [portmap] [vlan id]        - add an entry to switch table
 switch add [mac] [portmap] [vlan id] [age]  - add an entry to switch table
 switch clear                                - clear switch table
 switch del [mac]                            - delete an entry from switch table
 switch del [mac] [fid]                  - delete an entry from switch table
 switch dip add [dip] [portmap]                  - add a dip entry to switch table
 switch dip del [dip]                        - del a dip entry to switch table
 switch dip dump                                 - dump switch dip table
 switch dip clear                                - clear switch dip table
 switch dump            - dump switch table
 switch ingress-rate on [port] [Kbps]        - set ingress rate limit on port 0~4 
 switch egress-rate on [port] [Kbps]         - set egress rate limit on port 0~4 
 switch ingress-rate off [port]              - del ingress rate limit on port 0~4 
 switch egress-rate off [port]               - del egress rate limit on port 0~4
 switch filt [mac]                           - add a SA filtering entry (with portmap 1111111) to switch table
 switch filt [mac] [portmap]                 - add a SA filtering entry to switch table
 switch filt [mac] [portmap] [vlan id]       - add a SA filtering entry to switch table
 switch filt [mac] [portmap] [vlan id] [age] - add a SA filtering entry to switch table
 switch igmpsnoop on [Query Interval] [default router portmap] - turn on IGMP snoop and  router port learning (Query Interval 1~255)
 switch igmpsnoop off                                  - turn off IGMP snoop and router port learning
 switch igmpsnoop enable [port#]                       - enable IGMP HW leave/join/Squery/Gquery
 switch igmpsnoop disable [port#]                      - disable IGMP HW leave/join/Squery/Gquery
 switch mymac [mac] [portmap]                  - add a mymac entry to switch table
 switch mirror monitor [portnumber]            - enable port mirror and indicate monitor port number
 switch mirror target [portnumber] [0:off, 1:rx, 2:tx, 3:all]  - set port mirror target
 switch phy [phy_addr]                   - dump phy register of specific port
 switch phy mt7530                       - dump mt7530 phy registers
 switch phy                                      - dump all phy registers
 switch pvid [port] [pvid]                - set pvid on port 0~4 
 switch reg r [offset]                       - register read from offset
 switch reg w [offset] [value]               - register write value to offset
 switch reg d [offset]                       - register dump
 switch sip add [sip] [dip] [portmap]            - add a sip entry to switch table
 switch sip del [sip] [dip]                          - del a sip entry to switch table
 switch sip dump                                 - dump switch sip table
 switch sip clear                                - clear switch sip table
 switch tag on [port]                        - keep vlan tag for egress packet on prot 0~4
 switch tag off [port]                       - remove vlan tag for egress packet on port 0~4
 switch vlan dump                            - dump switch table
 switch vlan set [vlan idx (NULL)][vid] [portmap]  - set vlan id and associated member

switch vlan dump

root@WN-DX1167R:~# switch vlan dump
  vid  fid  portmap    s-tag
    1    0  -1111-11       0
    2    0  1----1--       0
    3    0  invalid
    4    0  invalid
    5    0  invalid
    6    0  invalid
    7    0  invalid
    8    0  invalid
    9    0  invalid
   10    0  invalid
   11    0  invalid
   12    0  invalid
   13    0  invalid
   14    0  invalid
   15    0  invalid
   16    0  invalid

sys –help

root@WN-DX1167R:~# sys --help
Usage:
         sys atsh 
         sys atwz  []
         sys atsn 
         sys athwver 
         sys debugflag 
         sys ledctl 
         sys loadrom 
         sys mrd [0:Check default MRD(default option) | 1:Reset default MRD]
         sys romreset 

sys atsh

root@WN-DX1167R:~# sys atsh
Firmware Version              : 3.10(XIK.0)b11                
Boot Version                  : 1.28.03 | 08/06/2018 14:37:44 
Product Model                 : WN-DX1167R                    
First MAC Address             : 34:76:C5:**:**:F4             
MAC Quantity                  : 4                             
Serial Number                 : 118H010878Z7                  
firmware Checksum             : 84535509                      
Kernel Checksum               : d775cdc8                      
RomFile Checksum              : c1d7f1c5                      
Country Code                  : EA                            
Boot Number                   : 1

bootlog

U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..
Checking image 1...
   Image Name:   3.10(XIK.0)b11
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1602994 Bytes =  1.5 MB
   Load Address: 80001000
   Entry Point:  80001000
.........................   Verifying Combo Checksum ... .................................................................................................................................................## Booting image at bc400000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...


LINUX started...

 THIS IS ASIC

SDK 5.0.S.0
[    0.000000] Linux version 3.10.14 (*******@srv17) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 unknown) ) #1 SMP Fri Oct 12 21:22:31 CST 2018
[    0.000000] 
[    0.000000]  The CPU feqenuce set to 880 MHz
[    0.000000] GCMP present
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] Software DMA cache coherency
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x07ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x07ffffff]
[    0.000000] Detected 3 available secondary CPU(s)
[    0.000000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] PERCPU: Embedded 7 pages/cpu @81103000 s6464 r8192 d14016 u32768
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS1,57600n8 BootImage=1 root=/dev/mtdblock5 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00041000
[    0.000000] Readback ErrCtl register=00041000
[    0.000000] Memory: 125008k/131072k available (3536k kernel code, 6064k reserved, 852k data, 212k init, 0k highmem)
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS:128
[    0.000000] console [ttyS1] enabled
[    0.116000] Calibrating delay loop... 562.17 BogoMIPS (lpj=1124352)
[    0.148000] pid_max: default: 32768 minimum: 301
[    0.152000] Mount-cache hash table entries: 512
[    0.156000] launch: starting cpu1
[    0.160000] launch: cpu1 gone!
[    0.160000] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.160000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.160000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.160000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.192000] Synchronize counters for CPU 1: done.
[    0.200000] launch: starting cpu2
[    0.204000] launch: cpu2 gone!
[    0.204000] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.204000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.204000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.204000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.232000] Synchronize counters for CPU 2: done.
[    0.240000] launch: starting cpu3
[    0.244000] launch: cpu3 gone!
[    0.244000] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.244000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.244000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.244000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.272000] Synchronize counters for CPU 3: done.
[    0.280000] Brought up 4 CPUs
[    0.284000] NET: Registered protocol family 16
[    0.576000] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.580000] PCIE PHY initialize
[    0.584000] ***** Xtal 40MHz *****
[    0.588000] start MT7621 PCIe register access
[    1.164000] RALINK_RSTCTRL = 7000000
[    1.168000] RALINK_CLKCFG1 = 77ffeff8
[    1.172000] 
[    1.172000] *************** MT7621 PCIe RC mode *************
[    1.652000] PCIE0 no card, disable it(RST&CLK)
[    1.656000] PCIE2 no card, disable it(RST&CLK)
[    1.660000] pcie_link status = 0x2
[    1.664000] RALINK_RSTCTRL= 2000000
[    1.668000] *** Configure Device number setting of Virtual PCI-PCI bridge ***
[    1.672000] RALINK_PCI_PCICFG_ADDR = 21007f2 -> 20107f2
[    1.676000] PCIE1 enabled
[    1.680000] interrupt enable status: 200000
[    1.684000] Port 0 N_FTS = 1b105000
[    1.688000] config reg done
[    1.692000] init_rt2880pci done
[    1.712000] bio: create slab  at 0
[    1.716000] SCSI subsystem initialized
[    1.720000] usbcore: registered new interface driver usbfs
[    1.724000] usbcore: registered new interface driver hub
[    1.728000] usbcore: registered new device driver usb
[    1.732000] PCI host bridge to bus 0000:00
[    1.736000] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    1.740000] pci_bus 0000:00: root bus resource [io  0x1e160000-0x1e16ffff]
[    1.744000] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    1.748000] pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000)
[    1.752000] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    1.756000] pci 0000:00:00.0: BAR 1: assigned [mem 0x60100000-0x6010ffff]
[    1.760000] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    1.764000] pci 0000:00:00.0: PCI bridge to [bus 01]
[    1.768000] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    1.772000] BAR0 at slot 0 = 0
[    1.776000] bus=0x0, slot = 0x0
[    1.780000] res[0]->start = 0
[    1.784000] res[0]->end = 0
[    1.788000] res[1]->start = 60100000
[    1.792000] res[1]->end = 6010ffff
[    1.796000] res[2]->start = 0
[    1.800000] res[2]->end = 0
[    1.804000] res[3]->start = 0
[    1.808000] res[3]->end = 0
[    1.812000] res[4]->start = 0
[    1.816000] res[4]->end = 0
[    1.820000] res[5]->start = 0
[    1.824000] res[5]->end = 0
[    1.828000] bus=0x1, slot = 0x0, irq=0x18
[    1.832000] res[0]->start = 60000000
[    1.836000] res[0]->end = 600fffff
[    1.840000] res[1]->start = 0
[    1.844000] res[1]->end = 0
[    1.848000] res[2]->start = 0
[    1.852000] res[2]->end = 0
[    1.856000] res[3]->start = 0
[    1.860000] res[3]->end = 0
[    1.864000] res[4]->start = 0
[    1.868000] res[4]->end = 0
[    1.872000] res[5]->start = 0
[    1.876000] res[5]->end = 0
[    1.880000] Switching to clocksource MIPS
[    1.884000] NET: Registered protocol family 2
[    1.892000] TCP established hash table entries: 1024 (order: 1, 8192 bytes)
[    1.908000] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    1.920000] TCP: Hash tables configured (established 1024 bind 1024)
[    1.932000] TCP: reno registered
[    1.940000] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    1.952000] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    1.964000] NET: Registered protocol family 1
[    2.060000] 4 CPUs re-calibrate udelay(lpj = 1167360)
[    2.072000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    2.084000] jffs2: version 2.2. (NAND) (SUMMARY)  (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    2.108000] io scheduler noop registered (default)
[    2.116000] reg_int_mask=0, INT_MASK= 0 
[    2.124000] HSDMA_init
[    2.128000] 
[    2.128000]  hsdma_phy_tx_ring0 = 0x0fe38000, hsdma_tx_ring0 = 0xafe38000
[    2.144000] 
[    2.144000]  hsdma_phy_rx_ring0 = 0x0fe34000, hsdma_rx_ring0 = 0xafe34000
[    2.164000] TX_CTX_IDX0 = 0
[    2.168000] TX_DTX_IDX0 = 0
[    2.172000] RX_CRX_IDX0 = 3ff
[    2.180000] RX_DRX_IDX0 = 0
[    2.184000] set_fe_HSDMA_glo_cfg
[    2.192000] HSDMA_GLO_CFG = 465
[    2.204000] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    2.216000] serial8250: ttyS0 at MMIO 0x1e000d00 (irq = 27) is a 16550A
[    2.228000] serial8250: ttyS1 at MMIO 0x1e000c00 (irq = 26) is a 16550A
[    2.244000] Ralink gpio driver initialized
[    2.252000] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    2.264000] Allocate 16 byte aligned buffer: 80491c20
[    2.276000] Enable NFI Clock
[    2.280000] # MTK NAND # : Use HW ECC
[    2.288000] NAND ID [01 F1 80 1D 01, 00801d01]
[    2.296000] Device found in MTK table, ID: 1f1, EXT_ID: 801d01
[    2.308000] Support this Device in MTK table! 1f1 
[    2.320000] NAND device: Manufacturer ID: 0x01, Chip ID: 0xf1 (AMD/Spansion NAND 128MiB 3,3V 8-bit), 128MiB, page size: 2048, OOB size: 64
[    2.344000] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    2.356000] Scanning device for bad blocks
[    2.648000] Signature matched and data read!
[    2.656000] load_fact_bbt success 1023
[    2.664000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.684000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.704000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.724000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.744000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.760000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.780000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.800000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.820000] Creating 12 MTD partitions on "MT7621-NAND":
[    2.832000] 0x000000000000-0x000007f80000 : "ALL"
[    2.840000] 0x000000000000-0x000000100000 : "Bootloader"
[    2.852000] 0x000000100000-0x000000200000 : "Ubootenv"
[    2.864000] 0x000000200000-0x000000300000 : "Factory"
[    2.876000] 0x000000400000-0x000003600000 : "firmware"
[    2.888000] 0x0000005875f2-0x000003600000 : "rootfs"
[    2.900000] mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[    2.936000] 0x000003600000-0x000003700000 : "Config"
[    2.944000] 0x000003700000-0x000006900000 : "firmware_2"
[    2.956000] 0x000006900000-0x000006a00000 : "Config_2"
[    2.968000] 0x000006a00000-0x000006b00000 : "persist"
[    2.980000] 0x000006b00000-0x000006c00000 : "idmkey"
[    2.988000] 0x000006c00000-0x000007f80000 : "Backup"
[    3.000000] 0x000000300000-0x000000400000 : "SecondBoot"
[    3.012000] [mtk_nand] probe successfully!
[    3.020000] rootfs = 5875f2 to d20000
[    3.028000] PPP generic driver version 2.4.2
[    3.036000] NET: Registered protocol family 24
[    3.044000] PPTP driver version 0.8.5
[    3.052000] rdm_major = 253
[    3.060000] GMAC1_MAC_ADRH -- : 0x00003476
[    3.068000] GMAC1_MAC_ADRL -- : 0xc5cca9f4
[    3.076000] Ralink APSoC Ethernet Driver Initilization. v3.1  1024 rx/tx descriptors allocated, mtu = 1500!
[    3.096000] GMAC1_MAC_ADRH -- : 0x00003476
[    3.104000] GMAC1_MAC_ADRL -- : 0xc5cca9f4
[    3.112000] register mt7530
[    3.116000] PROC INIT OK!
[    3.124000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    3.136000] ehci-pci: EHCI PCI platform driver
[    3.144000] *****run project phy.
[    3.164000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.184000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.204000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.224000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.244000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.264000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.284000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.304000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.324000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.344000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.388000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.408000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.428000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.448000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.468000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.488000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.508000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.528000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.548000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.568000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.708000] xhci-hcd xhci-hcd: xHCI Host Controller
[    3.716000] xhci-hcd xhci-hcd: new USB bus registered, assigned bus number 1
[    3.732000] xhci-hcd xhci-hcd: irq 22, io mem 0x1e1c0000
[    3.744000] hub 1-0:1.0: USB hub found
[    3.752000] hub 1-0:1.0: 2 ports detected
[    3.760000] xhci-hcd xhci-hcd: xHCI Host Controller
[    3.768000] xhci-hcd xhci-hcd: new USB bus registered, assigned bus number 2
[    3.784000] hub 2-0:1.0: USB hub found
[    3.792000] hub 2-0:1.0: 1 port detected
[    3.800000] usbcore: registered new interface driver usb-storage
[    3.812000] gre: GRE over IPv4 demultiplexor driver
[    3.820000] TCP: cubic registered
[    3.828000] NET: Registered protocol family 10
[    3.836000] NET: Registered protocol family 17
[    3.848000] Bridge firewalling registered
[    3.856000] 8021q: 802.1Q VLAN Support v1.8
[    3.872000] VFS: Mounted root (squashfs filesystem) readonly on device 31:5.
[    3.884000] Freeing unused kernel memory: 212K (8044b000 - 80480000)
procd: Console is alive
procd: - preinit -
[    5.196000] 34:76:FFFFFFC5:FFFFFFCC:FFFFFFA9:FFFFFFF4
[    5.208000] Raeth v3.1 (Tasklet)
[    5.216000] set CLK_CFG_0 = 0x40a00020!!!!!!!!!!!!!!!!!!1
[    5.232000] phy_free_head is 0xf75a000!!!
[    5.240000] phy_free_tail_phy is 0xf75bff0!!!
[    5.248000] txd_pool=af760000 phy_txd_pool=0F760000
[    5.256000] ei_local->skb_free start address is 0x87ed26dc.
[    5.268000] free_txd: 0f760010, ei_local->cpu_ptr: 0F760000
[    5.280000]  POOL  HEAD_PTR | DMA_PTR | CPU_PTR 
[    5.288000] ----------------+---------+--------
[    5.296000]      0xaf760000 0x0F760000 0x0F760000
[    5.308000] 
[    5.308000] phy_qrx_ring = 0x0f714000, qrx_ring = 0xaf714000
[    5.324000] 
[    5.324000] phy_rx_ring0 = 0x0f75c000, rx_ring0 = 0xaf75c000
[    5.356000] MT7530 Reset Completed!!
[    5.372000] change HW-TRAP to 0x117c8f
[    5.380000] set LAN/WAN WLLLL
[    5.392000] GMAC1_MAC_ADRH -- : 0x00003476
[    5.400000] GMAC1_MAC_ADRL -- : 0xc5cca9f4
[    5.408000] GDMA2_MAC_ADRH -- : 0x00003476
[    5.416000] GDMA2_MAC_ADRL -- : 0xc5cca9f6
[    5.424000] eth1: ===> VirtualIF_open
[    5.432000] MT7621 GE2 link rate to 1G
[    5.432000] CDMA_CSG_CFG = 81000000
[    5.432000] GDMA1_FWD_CFG = 20710000
[    5.432000] GDMA2_FWD_CFG = 20710000
[    5.556000] led=9, on=1, off=1, blinks,=1, reset=1, time=4000 low_trigger=1
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    7.004000] ESW: Link Status Changed - Port2 Link UP
[    8.668000] led=9, on=1, off=1, blinks,=1, reset=1, time=4000 low_trigger=1
Could not open mtd device: /dev/mtd5
reading ro[    8.784000] ra2880stop()...otfs failed
mouDone
[    8.792000] eth1: ===> VirtualIF_close

[    8.804000] Free TX/RX Ring Memory!
procd: - early -
procd: - ubus -
procd: - init -
Please press Enter to activate this console.
[   10.748000] jffs2: notice: (762) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   10.872000] jffs2: notice: (765) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
##### Skip Checking Config. #####
Mode Switch: Router/AP
[   11.336000] Initializing XFRM netlink socket
[   11.344000] NET: Registered protocol family 15
[   11.356000] sbdev driver(major: 254) installed.
[   11.364000] wpdev driver(major: 250) installed.
[   11.392000] l2tp_core: L2TP core driver, V2.0
[   11.400000] l2tp_netlink: L2TP netlink interface
[   11.412000] ip_gre: GRE over IPv4 tunneling driver
[   11.428000] ip_tables: (C) 2000-2006 Netfilter Core Team
[   11.440000] Type=Restricted Cone
[   11.452000] nf_conntrack version 0.5.0 (1956 buckets, 7824 max)
[   11.468000] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   11.496000] ebt_time: kernel timezone is -0000
[   11.508000] Ebtables v2.0 registered
[   11.524000] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[   11.652000] Netfilter messages via NETLINK v0.30.
[   11.664000] PPP MPPE Compression module registered
[   11.676000] Ralink APSoC Hardware Watchdog Timer
[   11.712000] xt_time: kernel timezone is -0000
[   11.732000] ctnetlink v0.93: registering with nfnetlink.
[   14.640000] mtd: ALL locked
[   14.648000] mtd: Bootloader locked
[   14.652000] mtd: Ubootenv locked
[   14.660000] mtd: Factory locked
[   14.664000] mtd_locked init
[   16.436000] 34:76:FFFFFFC5:FFFFFFCC:FFFFFFA9:FFFFFFF4
[   16.448000] Raeth v3.1 (Tasklet)
[   16.456000] set CLK_CFG_0 = 0x40a00020!!!!!!!!!!!!!!!!!!1
[   16.472000] phy_free_head is 0xef42000!!!
[   16.480000] phy_free_tail_phy is 0xef43ff0!!!
[   16.488000] txd_pool=aef48000 phy_txd_pool=0EF48000
[   16.496000] ei_local->skb_free start address is 0x87ed26dc.
[   16.508000] free_txd: 0ef48010, ei_local->cpu_ptr: 0EF48000
[   16.520000]  POOL  HEAD_PTR | DMA_PTR | CPU_PTR 
[   16.528000] ----------------+---------+--------
[   16.536000]      0xaef48000 0x0EF48000 0x0EF48000
[   16.548000] 
[   16.548000] phy_qrx_ring = 0x0ef01000, qrx_ring = 0xaef01000
[   16.564000] 
[   16.564000] phy_rx_ring0 = 0x0ef54000, rx_ring0 = 0xaef54000
[   16.604000] MT7530 Reset Completed!!
[   16.620000] change HW-TRAP to 0x117c8f
[   16.628000] set LAN/WAN WLLLL
[   16.640000] GMAC1_MAC_ADRH -- : 0x00003476
[   16.648000] GMAC1_MAC_ADRL -- : 0xc5cca9f4
[   16.656000] eth1: ===> VirtualIF_open
[   16.664000] MT7621 GE2 link rate to 1G
[   16.664000] CDMA_CSG_CFG = 81000000
[   16.664000] GDMA1_FWD_CFG = 20710000
[   16.664000] GDMA2_FWD_CFG = 20710000
[   16.664000] device eth0 entered promiscuous mode
[   16.664000] br-lan: port 1(eth0) entered forwarding state
[   16.664000] br-lan: port 1(eth0) entered forwarding state
[   16.728000] eth1: ===> VirtualIF_open
[   18.268000] ESW: Link Status Changed - Port2 Link UP
[   18.668000] br-lan: port 1(eth0) entered forwarding state
[   22.420000] register mt_drv
[   22.440000] 
[   22.440000] 
[   22.440000] === pAd = c1f81000, size = 3627760 ===
[   22.440000] 
[   22.460000] PciHif.CSRBaseAddress =0xc1e80000, csr_addr=0xc1e80000!
[   22.488000] get_wdev_by_idx: invalid idx(0)
[   22.500000] RTMPInitPCIeDevice():device_id=0x7615
[   22.508000] DriverOwn()::Try to Clear FW Own...
[   22.844000] DriverOwn()::Success to clear FW Own
[   22.852000] mt_pci_chip_cfg(): HWVer=0x8a10, FWVer=0x8a10, pAd->ChipID=0x7615
[   22.864000] mt_pci_chip_cfg(): HIF_SYS_REV=0x76150001
[   22.876000] RtmpChipOpsHook(493): Not support for HIF_MT yet! MACVersion=0x0
[   22.888000] mt7615_init()-->
[   22.896000] Use the default ePAeLNA bin image!
[   22.904000] Use the default /etc_ro/wlan/MT7615E_EEPROM1.bin bin image!
[   22.916000] rxq = c22f26f4
[   24.444000] ctl->ackq = c22f2700
[   24.448000] ctl->kickq = c22f270c
[   24.456000] ctl->tx_doneq = c22f2718
[   24.464000] ctl->rx_doneq = c22f2724
[   24.472000] mt7615_fw_prepare():FW(8a10), HW(8a10), CHIPID(7615))
[   24.484000] mt7615_fw_prepare(2701): MT7615_E3, USE E3 patch and ram code binary image
[   24.500000] AndesMTLoadRomMethodFwDlRing(1036), cap->rom_patch_len(10206)
[   24.512000] AndesRestartCheck: Current TOP_MISC2(0x1)
[   24.524000] AndesRestartCheck: (TOP_MISC2 = 1), ready to continue...RET(0)
[   24.536000] 20161013140927a
[   24.540000] 
[   24.544000] platform = 
[   24.548000] ALPS
[   24.552000] hw/sw version = 
[   24.560000] 8a108a10
[   24.564000] patch version = 
[   24.568000] 00000010
[   24.572000] Patch SEM Status=2
[   24.580000] MtCmdPatchSemGet:(ret = 0)
[   24.588000] 
[   24.588000] Patch is not ready && get semaphore success, SemStatus(2)
[   24.604000] EventGenericEventHandler: CMD Success
[   24.612000] MtCmdAddressLenReq:(ret = 0)
[   24.620000] MtCmdPatchFinishReq
[   24.640000] EventGenericEventHandler: CMD Success
[   24.648000] Send checksum req..
[   24.652000] Patch SEM Status=3
[   24.660000] MtCmdPatchSemGet:(ret = 0)
[   24.668000] 
[   24.668000] Release patch semaphore, SemStatus(3)
[   24.680000] AndesMTEraseRomPatch
[   24.688000] WfMcuHwInit: Before NICLoadFirmware, check IcapMode=0
[   24.700000] AndesMTLoadFwMethodFwDlRing(810), cap->fw_len(460360)
[   24.712000] Build Date:_201701111925
[   24.716000] Build Date:_201701111925
[   24.724000] AndesRestartCheck: Current TOP_MISC2(0x1)
[   24.736000] AndesRestartCheck: (TOP_MISC2 = 1), ready to continue...RET(0)
[   24.748000] EventGenericEventHandler: CMD Success
[   24.760000] MtCmdAddressLenReq:(ret = 0)
[   24.772000] EventGenericEventHandler: CMD Success
[   24.780000] MtCmdAddressLenReq:(ret = 0)
[   24.788000] MtCmdFwStartReq: override = 1, address = 540672
[   24.800000] EventGenericEventHandler: CMD Success
[   24.808000] Build Date:_201612301011
[   24.816000] EventGenericEventHandler: CMD Success
[   24.824000] MtCmdAddressLenReq:(ret = 0)
[   24.832000] MtCmdFwStartReq: override = 4, address = 0
[   24.908000] EventGenericEventHandler: CMD Success
[   24.948000] WfMcuHwInit: NICLoadFirmware OK, Check IcapMode=0
[   24.960000] MCU Init Done!
[   24.968000]  MtCmdSetRlmPorCal: (ret = 0) 
[   24.976000] efuse_probe: efuse = 10000212
[   24.984000] RtmpChipOpsEepromHook::e2p_type=2, inf_Type=5
[   24.996000] RtmpEepromGetDefault::e2p_dafault=1
[   25.004000] RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 1
[   25.020000] NVM is FLASH mode. dev_idx [0] FLASH OFFSET [0x0]
[   25.032000] NICReadEEPROMParameters():Calling eeinit
[   25.052000] NICReadEEPROMParameters: EEPROM 0x52 b317
[   25.068000] MtCmdSetTxLpfCal:(ret = 0)
[   25.076000] MtCmdSetTxIqCal:(ret = 0)
[   25.080000] MtCmdSetTxDcCal:(ret = 0)
[   25.088000] MtCmdSetRxFiCal:(ret = 0)
[   25.096000] MtCmdSetRxFdCal:(ret = 0)
[   25.104000] MtCmdSetRxFdCal:(ret = 0)
[   25.112000] MtCmdSetRxFdCal:(ret = 0)
[   25.120000] MtCmdSetRxFdCal:(ret = 0)
[   25.124000] MtCmdSetRxFdCal:(ret = 0)
[   25.132000] MtCmdSetRxFdCal:(ret = 0)
[   25.140000] MtCmdSetRxFdCal:(ret = 0)
[   25.148000] MtCmdSetRxFdCal:(ret = 0)
[   25.156000] MtCmdSetRxFdCal:(ret = 0)
[   25.164000] NICReadEEPROMParameters: EEPROM 0x52 b317
[   25.728000] Country Region from e2p = 101
[   25.736000] mt7615_antenna_default_reset(): TxPath = 4, RxPath = 4
[   25.748000] mt7615_antenna_default_reset(): DBDC 2G TxPath = 2, 2G RxPath = 2
[   25.764000] mt7615_antenna_default_reset(): DBDC 5G TxPath = 2, 2G RxPath = 2
[   25.776000] rtmp_read_txpwr_from_eeprom(235): Don't Support this now!
[   25.788000] RTMPReadTxPwrPerRate(1382): Don't Support this now!
[   25.800000] RcRadioInit(): DbdcMode=1, ConcurrentBand=2
[   25.812000] RcRadioInit(): pRadioCtrl=85360444,Band=0,rfcap=1,channel=1,PhyMode=2
[   25.828000] RcRadioInit(): pRadioCtrl=85360530,Band=1,rfcap=2,channel=36,PhyMode=1
[   25.844000] MtCmdSetDbdcCtrl:(ret = 0)
[   25.852000] Band Rf: 1, Phy Mode: 2
[   25.856000] Band Rf: 2, Phy Mode: 1
[   25.864000] AntCfgInit(2700): Not support for HIF_MT yet!
[   25.876000] MtSingleSkuLoadParam: RF_LOCKDOWN Feature OFF !!!
[   25.888000] MtBfBackOffLoadTable: RF_LOCKDOWN Feature OFF !!!
[   25.900000] EEPROM Init Done!
[   25.904000] mt_mac_init()-->
[   25.912000] mt_mac_pse_init(2716): Don't Support this now!
[   25.924000] mt7615_init_mac_cr()-->
[   25.928000] mt7615_init_mac_cr(): TMAC_TRCR0=0x82783c8c
[   25.940000] mt7615_init_mac_cr(): TMAC_TRCR1=0x82783c8c
[   25.948000] MtAsicSetMacMaxLen(1290): Not finish Yet!
[   25.960000] 
[   26.124000] MtCmdSetMacTxRx:(ret = 0)
[   26.132000] MtCmdSetMacTxRx:(ret = 0)
[   26.140000] [DfsSwitchCheck]: DFS ByPass TX calibration.
[   26.152000] mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
[   26.168000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   26.180000] mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
[   26.196000] MtCmdGetTXDPDCalResult:(ret = 0)
[   26.208000] MtCmdChannelSwitch: control_chl = 36,control_ch2=0, central_chl = 42 DBDCIdx= 1, Band= 0 
[   26.224000] BW = 2,TXStream = 2, RXStream = 2, scan(1)
[   26.460000] [DfsSwitchCheck]: DFS ByPass TX calibration.
[   26.468000] mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
[   26.488000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   26.496000] mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
[   26.516000] MtCmdGetTXDPDCalResult:(ret = 0)
[   26.524000] MtCmdChannelSwitch: control_chl = 40,control_ch2=0, central_chl = 42 DBDCIdx= 1, Band= 0 
[   26.544000] BW = 2,TXStream = 2, RXStream = 2, scan(1)
[   26.776000] [DfsSwitchCheck]: DFS ByPass TX calibration.
[   26.784000] mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
[   26.804000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   26.812000] mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
[   26.832000] MtCmdGetTXDPDCalResult:(ret = 0)
[   26.840000] MtCmdChannelSwitch: control_chl = 44,control_ch2=0, central_chl = 42 DBDCIdx= 1, Band= 0 
[   26.860000] BW = 2,TXStream = 2, RXStream = 2, scan(1)
[   27.092000] [DfsSwitchCheck]: DFS ByPass TX calibration.
[   27.100000] mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
[   27.120000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   27.128000] mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
[   27.148000] MtCmdGetTXDPDCalResult:(ret = 0)
[   27.156000] MtCmdChannelSwitch: control_chl = 48,control_ch2=0, central_chl = 42 DBDCIdx= 1, Band= 0 
[   27.176000] BW = 2,TXStream = 2, RXStream = 2, scan(1)
[   27.408000] ====================================================================
[   27.420000] Channel  36 : Busy Time =  33401, Skip Channel = FALSE, BwCap = TRUE
[   27.436000] Channel  40 : Busy Time =  35610, Skip Channel = FALSE, BwCap = TRUE
[   27.452000] Channel  44 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
[   27.464000] Channel  48 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
[   27.480000] ====================================================================
[   27.496000] Rule 3 Channel Busy time value : Select Primary Channel 44 
[   27.508000] Rule 3 Channel Busy time value : Min Channel Busy = 35610
[   27.520000] Rule 3 Channel Busy time value : BW = 80
[   27.532000]  AutoChSelUpdateChannel(): Update channel for wdev0 for this band PhyMode = 49,Channel = 44  
[   27.552000]  AutoChSelUpdateChannel(): Update channel for wdev1 for this band PhyMode = 49,Channel = 44  
[   27.572000]  AutoChSelUpdateChannel(): Update channel for wdev2 for this band PhyMode = 49,Channel = 44  
[   27.592000]  AutoChSelUpdateChannel(): Update channel for wdev3 for this band PhyMode = 49,Channel = 44  
[   27.612000]  AutoChSelUpdateChannel(): Update channel for wdev4 for this band PhyMode = 14,Channel = 0  
[   27.632000]  AutoChSelUpdateChannel(): Update channel for wdev5 for this band PhyMode = 14,Channel = 0  
[   27.652000]  AutoChSelUpdateChannel(): Update channel for wdev6 for this band PhyMode = 14,Channel = 0  
[   27.672000]  AutoChSelUpdateChannel(): Update channel for wdev7 for this band PhyMode = 14,Channel = 0  
[   27.692000] mt7615_apply_dcoc() : reload Central CH [1] BW [0] from cetral freq [2417]  offset [2200] 
[   27.712000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   27.720000] mt7615_apply_dpd() : reload Central CH [1] BW [0] from cetral freq [2422] i[44] offset [4b20] 
[   27.740000] MtCmdGetTXDPDCalResult:(ret = 0)
[   27.748000] MtCmdChannelSwitch: control_chl = 1,control_ch2=0, central_chl = 1 DBDCIdx= 0, Band= 0 
[   27.768000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   28.020000] mt7615_apply_dcoc() : reload Central CH [2] BW [0] from cetral freq [2417]  offset [2200] 
[   28.036000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   28.044000] mt7615_apply_dpd() : reload Central CH [2] BW [0] from cetral freq [2422] i[44] offset [4b20] 
[   28.064000] MtCmdGetTXDPDCalResult:(ret = 0)
[   28.072000] MtCmdChannelSwitch: control_chl = 2,control_ch2=0, central_chl = 2 DBDCIdx= 0, Band= 0 
[   28.092000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   28.328000] mt7615_apply_dcoc() : reload Central CH [3] BW [0] from cetral freq [2417]  offset [2200] 
[   28.344000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   28.352000] mt7615_apply_dpd() : reload Central CH [3] BW [0] from cetral freq [2422] i[44] offset [4b20] 
[   28.372000] MtCmdGetTXDPDCalResult:(ret = 0)
[   28.380000] MtCmdChannelSwitch: control_chl = 3,control_ch2=0, central_chl = 3 DBDCIdx= 0, Band= 0 
[   28.400000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   28.636000] mt7615_apply_dcoc() : reload Central CH [4] BW [0] from cetral freq [2432]  offset [2300] 
[   28.652000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   28.660000] mt7615_apply_dpd() : reload Central CH [4] BW [0] from cetral freq [2422] i[44] offset [4b20] 
[   28.680000] MtCmdGetTXDPDCalResult:(ret = 0)
[   28.688000] MtCmdChannelSwitch: control_chl = 4,control_ch2=0, central_chl = 4 DBDCIdx= 0, Band= 0 
[   28.708000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   29.004000] mt7615_apply_dcoc() : reload Central CH [5] BW [0] from cetral freq [2432]  offset [2300] 
[   29.020000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   29.028000] mt7615_apply_dpd() : reload Central CH [5] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
[   29.048000] MtCmdGetTXDPDCalResult:(ret = 0)
[   29.056000] MtCmdChannelSwitch: control_chl = 5,control_ch2=0, central_chl = 5 DBDCIdx= 0, Band= 0 
[   29.076000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   29.312000] mt7615_apply_dcoc() : reload Central CH [6] BW [0] from cetral freq [2432]  offset [2300] 
[   29.328000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   29.336000] mt7615_apply_dpd() : reload Central CH [6] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
[   29.356000] MtCmdGetTXDPDCalResult:(ret = 0)
[   29.364000] MtCmdChannelSwitch: control_chl = 6,control_ch2=0, central_chl = 6 DBDCIdx= 0, Band= 0 
[   29.384000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   29.620000] mt7615_apply_dcoc() : reload Central CH [7] BW [0] from cetral freq [2447]  offset [2400] 
[   29.636000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   29.644000] mt7615_apply_dpd() : reload Central CH [7] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
[   29.664000] MtCmdGetTXDPDCalResult:(ret = 0)
[   29.672000] MtCmdChannelSwitch: control_chl = 7,control_ch2=0, central_chl = 7 DBDCIdx= 0, Band= 0 
[   29.692000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   29.928000] mt7615_apply_dcoc() : reload Central CH [8] BW [0] from cetral freq [2447]  offset [2400] 
[   29.944000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   29.952000] mt7615_apply_dpd() : reload Central CH [8] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
[   29.972000] MtCmdGetTXDPDCalResult:(ret = 0)
[   29.980000] MtCmdChannelSwitch: control_chl = 8,control_ch2=0, central_chl = 8 DBDCIdx= 0, Band= 0 
[   30.000000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   30.236000] mt7615_apply_dcoc() : reload Central CH [9] BW [0] from cetral freq [2447]  offset [2400] 
[   30.252000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   30.260000] mt7615_apply_dpd() : reload Central CH [9] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
[   30.280000] MtCmdGetTXDPDCalResult:(ret = 0)
[   30.288000] MtCmdChannelSwitch: control_chl = 9,control_ch2=0, central_chl = 9 DBDCIdx= 0, Band= 0 
[   30.308000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   30.544000] mt7615_apply_dcoc() : reload Central CH [10] BW [0] from cetral freq [2467]  offset [2500] 
[   30.560000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   30.568000] mt7615_apply_dpd() : reload Central CH [10] BW [0] from cetral freq [2462] i[46] offset [4cd0] 
[   30.588000] MtCmdGetTXDPDCalResult:(ret = 0)
[   30.600000] MtCmdChannelSwitch: control_chl = 10,control_ch2=0, central_chl = 10 DBDCIdx= 0, Band= 0 
[   30.616000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   30.868000] mt7615_apply_dcoc() : reload Central CH [11] BW [0] from cetral freq [2467]  offset [2500] 
[   30.884000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   30.892000] mt7615_apply_dpd() : reload Central CH [11] BW [0] from cetral freq [2462] i[46] offset [4cd0] 
[   30.912000] MtCmdGetTXDPDCalResult:(ret = 0)
[   30.920000] MtCmdChannelSwitch: control_chl = 11,control_ch2=0, central_chl = 11 DBDCIdx= 0, Band= 0 
[   30.940000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   31.176000] ====================================================================
[   31.188000] Channel   1 : Busy Time =   3289, Skip Channel = FALSE, BwCap = TRUE
[   31.204000] Channel   2 : Busy Time =   3439, Skip Channel = FALSE, BwCap = TRUE
[   31.220000] Channel   3 : Busy Time =   2151, Skip Channel = FALSE, BwCap = TRUE
[   31.232000] Channel   4 : Busy Time =   2921, Skip Channel = FALSE, BwCap = TRUE
[   31.248000] Channel   5 : Busy Time =   1337, Skip Channel = FALSE, BwCap = TRUE
[   31.264000] Channel   6 : Busy Time =  25049, Skip Channel = FALSE, BwCap = TRUE
[   31.276000] Channel   7 : Busy Time =   2445, Skip Channel = FALSE, BwCap = TRUE
[   31.292000] Channel   8 : Busy Time =   1901, Skip Channel = FALSE, BwCap = TRUE
[   31.308000] Channel   9 : Busy Time =   2187, Skip Channel = FALSE, BwCap = TRUE
[   31.320000] Channel  10 : Busy Time =   2439, Skip Channel = FALSE, BwCap = TRUE
[   31.336000] Channel  11 : Busy Time =   2310, Skip Channel = FALSE, BwCap = TRUE
[   31.352000] ====================================================================
[   31.364000] Rule 3 Channel Busy time value : Select Primary Channel 5 
[   31.380000] Rule 3 Channel Busy time value : Min Channel Busy = 1337
[   31.392000] Rule 3 Channel Busy time value : BW = 20
[   31.400000]  AutoChSelUpdateChannel(): Update channel for wdev0 for this band PhyMode = 49,Channel = 44  
[   31.420000]  AutoChSelUpdateChannel(): Update channel for wdev1 for this band PhyMode = 49,Channel = 44  
[   31.444000]  AutoChSelUpdateChannel(): Update channel for wdev2 for this band PhyMode = 49,Channel = 44  
[   31.464000]  AutoChSelUpdateChannel(): Update channel for wdev3 for this band PhyMode = 49,Channel = 44  
[   31.484000]  AutoChSelUpdateChannel(): Update channel for wdev4 for this band PhyMode = 14,Channel = 5  
[   31.504000]  AutoChSelUpdateChannel(): Update channel for wdev5 for this band PhyMode = 14,Channel = 5  
[   31.524000]  AutoChSelUpdateChannel(): Update channel for wdev6 for this band PhyMode = 14,Channel = 5  
[   31.544000]  AutoChSelUpdateChannel(): Update channel for wdev7 for this band PhyMode = 14,Channel = 5  
[   31.564000] ApAutoChannelAtBootUp<-----------------
[   31.576000] WifiSysOpen(), wdev idx = 0
[   31.580000] wdev_attr_update(): wdevId0 = 34:76:c5:cc:a9:f5
[   31.592000] MtCmdSetDbdcCtrl:(ret = 0)
[   31.600000] Current Channel is 44. DfsZeroWaitSupport=0
[   31.612000] MtAsicSetChBusyStat(842): Not support for HIF_MT yet!
[   31.624000] MtAsicSetChBusyStat(842): Not support for HIF_MT yet!
[   31.636000] [PMF]APPMFInit:: apidx=0, MFPC=0, MFPR=0, SHA256=0
[   31.648000] [PMF]WPAMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
[   31.660000] HcUpdatePhyMode(): Update PhyMode for all wdev for this band PhyMode:49,Channel=44
[   31.676000] CountryCode(2.4G/5G)=1/1, RFIC=25, PHY mode(2.4G/5G)=14/49, support 32 channels
[   31.696000] wtc_acquire_groupkey_wcid: Found a non-occupied wtbl_idx:127 for WDEV_TYPE:1
[   31.696000]  LinkToOmacIdx = 0, LinkToWdevType = 1
[   31.724000] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO),                 CmdBssInfoBmcRate.u2BcTransmit= 8192,                 CmdBssInfoBmcRate.u2McTransmit = 8192
[   31.756000] MtCmdSetDbdcCtrl:(ret = 0)
[   31.856000] [RadarStateCheck]Set into RD_NORMAL_MODE
[   31.864000] MtCmdTxPowerSKUCtrl: fgTxPowerSKUEn: 1, BandIdx: 1
[   31.876000] MtCmdTxPowerPercentCtrl: fgTxPowerPercentEn: 1, BandIdx: 1
[   31.888000] MtCmdTxBfBackoffCtrl: fgTxBFBackoffEn: 0, BandIdx: 1
[   31.900000] mt7615_bbp_adjust():rf_bw=2, ext_ch=1, PrimCh=44, HT-CentCh=46, VHT-CentCh=42
[   31.916000] mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
[   31.936000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   31.944000] mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
[   31.964000] MtCmdGetTXDPDCalResult:(ret = 0)
[   31.972000] MtCmdChannelSwitch: control_chl = 44,control_ch2=0, central_chl = 42 DBDCIdx= 1, Band= 0 
[   31.992000] BW = 2,TXStream = 2, RXStream = 2, scan(0)
[   32.048000] ap_phy_rrm_init_byRf(): AP Set CentralFreq at 42(Prim=44, HT-CentCh=46, VHT-CentCh=42, BBP_BW=2)
[   32.080000] [WrapDfsRadarDetectStart]: Band0Ch is 44[WrapDfsRadarDetectStart]: Band1Ch is 0LeadTimeForBcn, OmacIdx = 0, WDEV_WITH_BCN_ABILITY
[   32.108000] MtAsicSetRalinkBurstMode(2595): Not support for HIF_MT yet!
[   32.120000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[   32.132000] MtAsicSetTxPreamble(2574): Not support for HIF_MT yet!
[   32.144000] Main bssid = 34:76:c5:cc:a9:f5
[   32.164000] AsicRadioOnOffCtrl(): DbdcIdx=1 RadioOn
[   32.176000] MtCmdSetMacTxRx:(ret = 0)
[   32.180000] MtCmdSetMacTxRx:(ret = 0)
[   32.188000] fdb_enable()
[   32.492000] MCS Set = ff ff 00 00 01
[   32.500000]  VirtualIF_close
[   41.844000] led=9, on=4000, off=0, blinks,=0, reset=0, time=1 low_trigger=0
[   43.308000] ESW: Link Status Changed - Port2 Link UP