タグ: MT7621A

WSR-2533DHPL factoryメモ

WSR-2533DHPLにおいて、”firmware” 領域内のKernel, RootFSを格納するtrxのMagicは特定のもの(0x5C436F74 (\Cot))でなければ、メーカーファーム上でのチェックで弾かれる模様。
こうなると、initramfsでfactoryを作るしかない。通常のsquashfsでは、trxのMagicをデフォルトの 0x48445230 (HDR0) から変更した場合、OpenWrtがRootFS領域の検出に失敗してマウントできず、boot loopを引き起こすと予想されるため。
WCR-1166DSでは、これが原因でfactoryファーム投入時にboot loopが発生していると思われる。

OpenWrtのコードで関係するのは ここここ

initramfsでのfactoryファーム生成は非常に面倒な上コード量が膨大になり、かつ可読性が著しく低下する傾向にあるので、正直やりたくない。やはり、factoryファームは無しにしてinitramfsファームを用いてブートの上sysupgradeするのが手っ取り早いか。

The tail length is 48! Update len to 7078136!
decodesize 7077892...
cp: can't stat '/usr/sbin/ubi*': No such file or directory
cp: can't stat '/usr/sbin/uboot_env': No such file or directory
token=tools, line=default
token=partitions, line=Kernel
token=Kernel, line=0x0:-
sector: Kernel -> offset=[0x0], write_len=[0x6c0004]
[get_all_mtd] MTD[0]: /dev/mtd0, 0x1000000, 0x10000, ALL
[get_all_mtd] MTD[1]: /dev/mtd1, 0x30000, 0x10000, Bootloader
[get_all_mtd] MTD[2]: /dev/mtd2, 0x10000, 0x10000, Config
[get_all_mtd] MTD[3]: /dev/mtd3, 0x10000, 0x10000, Factory
[get_all_mtd] MTD[4]: /dev/mtd4, 0x7c0000, 0x10000, Kernel
[get_all_mtd] MTD[5]: /dev/mtd5, 0x53b8f0, 0x10000, RootFS
[get_all_mtd] MTD[6]: /dev/mtd6, 0x7c0000, 0x10000, Kernel2
[get_all_mtd] MTD[7]: /dev/mtd7, 0x53b8f0, 0x10000, RootFS2
[get_all_mtd] MTD[8]: /dev/mtd8, 0x10000, 0x10000, glbcfg
[get_all_mtd] MTD[9]: /dev/mtd9, 0x10000, 0x10000, board_data
[merge_sector_info] sector[0]: name=[Kernel], dev=[/dev/mtd4], offset=[0], write_len=[7077892], max_allow_size=[8126464]
[validate_file] /tmp/upload2ev4Qs: Bad trx header, magic=810697800l
[update_image] Validate CRC fail!
[WARN]: upgrade failed!
upload return: 65280
Restarting system.
広告

WSR-2533DHPL stock -> OpenWrt (Fail)

長らくメーカーファーム上でのチェックを通せずにいたが、buffalo-tagを弄ったところパスできるようになったが、その後OpenWrtでブートした際にRootFSをマウントできず止まった。

The tail length is 48! Update len to 7078136!
decodesize 7077892...
cp: can't stat '/usr/sbin/ubi*': No such file or directory
cp: can't stat '/usr/sbin/uboot_env': No such file or directory
token=tools, line=default
token=partitions, line=Kernel
token=Kernel, line=0x0:-
sector: Kernel -> offset=[0x0], write_len=[0x6c0004]
[get_all_mtd] MTD[0]: /dev/mtd0, 0x1000000, 0x10000, ALL
[get_all_mtd] MTD[1]: /dev/mtd1, 0x30000, 0x10000, Bootloader
[get_all_mtd] MTD[2]: /dev/mtd2, 0x10000, 0x10000, Config
[get_all_mtd] MTD[3]: /dev/mtd3, 0x10000, 0x10000, Factory
[get_all_mtd] MTD[4]: /dev/mtd4, 0x7c0000, 0x10000, Kernel
[get_all_mtd] MTD[5]: /dev/mtd5, 0x53b8f0, 0x10000, RootFS
[get_all_mtd] MTD[6]: /dev/mtd6, 0x7c0000, 0x10000, Kernel2
[get_all_mtd] MTD[7]: /dev/mtd7, 0x53b8f0, 0x10000, RootFS2
[get_all_mtd] MTD[8]: /dev/mtd8, 0x10000, 0x10000, glbcfg
[get_all_mtd] MTD[9]: /dev/mtd9, 0x10000, 0x10000, board_data
[merge_sector_info] sector[0]: name=[Kernel], dev=[/dev/mtd4], offset=[0], write_len=[7077892], max_allow_size=[8126464]
[validate_file] freeram=[59179008] bufferram=[3739648]
/tmp/uploadMs88aC: CRC OK
[do_default_update] filesize=[7077892], offset=[0]
[do_default_update] Erase MTD[Kernel]: start
[do_default_update] Erase MTD[Kernel]: end
[do_default_update] Write MTD[Kernel]: start
[do_default_update] Write MTD[Kernel]: end
[switch_bank] to 0, return 0
upload return: 0
MReconnect to midcore failed.
[mapi_tx_transc_req] write msg length fail Connection refused
Restarting system.

===================================================================
                MT7621   stage1 code 10:33:55 (ASIC)
                CPU=500000000 HZ BUS=166666666 HZ
==================================================================
Change MPLL source from XTAL to CR...
do MEMPLL setting..
MEMPLL Config : 0x11100000
3PLL mode + External loopback
=== XTAL-40Mhz === DDR-1200Mhz ===
PLL2 FB_DL: 0xb, 1/0 = 547/477 2D000000
PLL3 FB_DL: 0x15, 1/0 = 580/444 55000000
PLL4 FB_DL: 0x18, 1/0 = 744/280 61000000
do DDR setting..[01F40000]
Apply DDR3 Setting...(use customer AC)
          0    8   16   24   32   40   48   56   64   72   80   88   96  104  112  120
      --------------------------------------------------------------------------------
0000:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0001:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0002:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0003:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0004:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0005:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0006:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0007:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0008:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0009:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000A:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000B:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000C:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000D:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    1
000E:|    0    0    0    0    0    0    0    0    0    1    1    1    1    1    1    1
000F:|    0    0    0    0    1    1    1    1    1    1    1    1    1    1    0    0
0010:|    1    1    1    1    1    1    1    1    1    0    0    0    0    0    0    0
0011:|    1    1    1    1    0    0    0    0    0    0    0    0    0    0    0    0
0012:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0013:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0014:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0015:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0016:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0017:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0018:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0019:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001A:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001B:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001C:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001D:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001E:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001F:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
rank 0 coarse = 15
rank 0 fine = 72
B:|    0    0    0    0    0    0    0    0    0    0    1    1    1    0    0    0
opt_dle value:11
DRAMC_R0DELDLY[018]=00001E1F
==================================================================
                RX      DQS perbit delay software calibration 
==================================================================
1.0-15 bit dq delay value
==================================================================
bit|     0  1  2  3  4  5  6  7  8  9
--------------------------------------
0 |    13 13 15 15 11 12 13 10 9 10 
10 |    11 11 13 13 11 12 
--------------------------------------

==================================================================
2.dqs window
x=pass dqs delay value (min~max)center 
y=0-7bit DQ of every group
input delay:DQS0 =31 DQS1 = 30
==================================================================
bit     DQS0     bit      DQS1
0  (1~58)29  8  (1~56)28
1  (1~56)28  9  (1~54)27
2  (1~60)30  10  (1~59)30
3  (1~61)31  11  (1~57)29
4  (1~58)29  12  (1~58)29
5  (1~59)30  13  (1~55)28
6  (1~61)31  14  (1~60)30
7  (1~60)30  15  (1~57)29
==================================================================
3.dq delay value last
==================================================================
bit|    0  1  2  3  4  5  6  7  8   9
--------------------------------------
0 |    15 15 15 15 13 13 13 11 11 13 
10 |    11 12 14 15 11 13 
==================================================================
==================================================================
     TX  perbyte calibration 
==================================================================
DQS loop = 15, cmp_err_1 = ffff0000 
dqs_perbyte_dly.last_dqsdly_pass[0]=15,  finish count=1 
dqs_perbyte_dly.last_dqsdly_pass[1]=15,  finish count=2 
DQ loop=15, cmp_err_1 = ffff01ae
DQ loop=14, cmp_err_1 = ffff0180
DQ loop=13, cmp_err_1 = ffff0080
dqs_perbyte_dly.last_dqdly_pass[1]=13,  finish count=1 
DQ loop=12, cmp_err_1 = ffff0000
dqs_perbyte_dly.last_dqdly_pass[0]=12,  finish count=2 
byte:0, (DQS,DQ)=(9,8)
byte:1, (DQS,DQ)=(9,8)
20,data:99
[EMI] DRAMC calibration passed

===================================================================
                MT7621   stage1 code done 
                CPU=500000000 HZ BUS=166666666 HZ
===================================================================


U-Boot 1.1.3 (Aug  5 2016 - 17:01:25) 0.02

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87fb8000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
flash manufacture id: ef, device id 40 18
find flash: W25Q128BV
============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: 16 MBytes NOR Flash
Date:Aug  5 2016  Time:17:01:25
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL

Please choose the operation: 
   1: Load system code to SDRAM via TFTP. 
   2: Load system code then write to Flash via TFTP. 
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial. 
   9: Load Boot Loader code then write to Flash via TFTP.                                                                  0 
   
3: System Boot system code via Flash0.
## Booting image at bc050000 ...

=================================================
Check image validation:
Image1 Trx Check --> 
## check_trx, crc=-575298866, *crc_ret=-575298866.
OK
Image1 Header Magic Number --> OK
Image1 Header Checksum --> OK
Image1 Data Checksum --> OK

=================================================

=================================================
Check image validation:
Image2 Trx Check --> 
## check_trx, crc=-1234505007, *crc_ret=-1234505007.
OK
Image2 Header Magic Number --> OK
Image2 Header Checksum --> OK
Image2 Data Checksum --> OK

=================================================
## check Image1 return 0, check Image2 return 0, Image1 crc=-575298866, Image2 crc=-1234505007.
Image1 is ok!
Image2 is not same as Image1, copy Image1 to Image2!

Copy Image:
Image1(0x50000) to Image2(0x810000), size=0x68E000
........................................................................................................
........................................................................................................
.
.
Done!
   Image Name:   MIPS OpenWrt Linux-4.14.143
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    2006978 Bytes =  1.9 MB
   Load Address: 80001000
   Entry Point:  80001000
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...

[    0.000000] Linux version 4.14.143 (musashino205@Taiha.Net) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+11016-9bf7431d38)) #0 SMP Sun Sep 15 14:46:05 2019
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is Buffalo WSR-2533DHPL
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x9c/0x4d8 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu s26064 r8192 d23088 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32480
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=000492b0
[    0.000000] Readback ErrCtl register=000492b0
[    0.000000] Memory: 121868K/131072K available (4789K kernel code, 246K rwdata, 1036K rodata, 1276K init, 254K bss, 9204K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] CPU Clock: 880MHz
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.015496] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.087822] pid_max: default: 32768 minimum: 301
[    0.097183] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.110205] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.126315] Hierarchical SRCU implementation.
[    0.135850] smp: Bringing up secondary CPUs ...
[    0.146319] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.146329] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.146340] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.146477] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.205169] Synchronize counters for CPU 1: done.
[    0.276364] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.276372] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.276381] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.276458] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.326109] Synchronize counters for CPU 2: done.
[    0.387189] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.387197] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.387205] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.387279] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.445677] Synchronize counters for CPU 3: done.
[    0.505287] smp: Brought up 1 node, 4 CPUs
[    0.517696] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.537183] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.549730] pinctrl core: initialized pinctrl subsystem
[    0.561419] NET: Registered protocol family 16
[    0.579962] pull PCIe RST: RALINK_RSTCTRL = 4000000
[    0.890005] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.900071] ***** Xtal 40MHz *****
[    0.906803] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.917011] Port 0 N_FTS = 1b105000
[    0.923908] Port 1 N_FTS = 1b105000
[    0.930833] Port 2 N_FTS = 1b102800
[    2.089681] PCIE2 no card, disable it(RST&CLK)
[    2.098375]  -> 21007f2
[    2.103193] PCIE0 enabled
[    2.108394] PCIE1 enabled
[    2.113573] PCI host bridge /pcie@1e140000 ranges:
[    2.123096]  MEM 0x0000000060000000..0x000000006fffffff
[    2.133463]   IO 0x000000001e160000..0x000000001e16ffff
[    2.143829] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    2.167190] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.178509] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.189746] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.202416] PCI host bridge to bus 0000:00
[    2.210435] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    2.224099] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    2.235844] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    2.249312] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    2.267225] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.280256] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.294069] pci 0000:00:01.0: BAR 0: no space for [mem size 0x80000000]
[    2.307198] pci 0000:00:01.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.321029] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.334502] pci 0000:00:01.0: BAR 8: assigned [mem 0x60100000-0x601fffff]
[    2.347983] pci 0000:00:00.0: BAR 1: assigned [mem 0x60200000-0x6020ffff]
[    2.361468] pci 0000:00:01.0: BAR 1: assigned [mem 0x60210000-0x6021ffff]
[    2.374952] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    2.389463] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.399292] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.412791] pci 0000:02:00.0: BAR 0: assigned [mem 0x60100000-0x601fffff 64bit]
[    2.427308] pci 0000:00:01.0: PCI bridge to [bus 02]
[    2.437130] pci 0000:00:01.0:   bridge window [mem 0x60100000-0x601fffff]
[    2.452070] clocksource: Switched to clocksource GIC
[    2.463868] NET: Registered protocol family 2
[    2.473126] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    2.486864] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    2.499464] TCP: Hash tables configured (established 1024 bind 1024)
[    2.512225] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.523722] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.536386] NET: Registered protocol family 1
[    2.782013] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    2.793455] Crashlog allocated RAM at address 0x3f00000
[    2.804005] workingset: timestamp_bits=14 max_order=15 bucket_order=1
[    2.821011] random: fast init done
[    2.831197] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    2.842705] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    2.865629] io scheduler noop registered
[    2.873357] io scheduler deadline registered (default)
[    2.884372] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    2.898171] console [ttyS0] disabled
[    2.905238] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 19, base_baud = 3125000) is a 16550A
[    2.923164] console [ttyS0] enabled
[    2.923164] console [ttyS0] enabled
[    2.936951] bootconsole [early0] disabled
[    2.936951] bootconsole [early0] disabled
[    2.954651] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    2.968911] spi-mt7621 1e000b00.spi: sys_freq: 220000000
[    2.989274] m25p80 spi0.0: w25q128 (16384 Kbytes)
[    2.998721] 7 fixed-partitions partitions found on MTD device spi0.0
[    3.011375] Creating 7 MTD partitions on "spi0.0":
[    3.020931] 0x000000000000-0x000000030000 : "u-boot"
[    3.031863] 0x000000030000-0x000000040000 : "u-boot-env"
[    3.043397] 0x000000040000-0x000000050000 : "factory"
[    3.054441] 0x000000050000-0x000000810000 : "firmware"
[    3.068725] 0x000000810000-0x000000fd0000 : "Kernel2"
[    3.079818] 0x000000fd0000-0x000000fe0000 : "glbcfg"
[    3.090684] 0x000000fe0000-0x000001000000 : "board_data"
[    3.102869] libphy: Fixed MDIO Bus: probed
[    3.174069] libphy: mdio: probed
[    4.582213] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    4.594638] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 20
[    4.613452] NET: Registered protocol family 10
[    4.623865] Segment Routing with IPv6
[    4.631241] NET: Registered protocol family 17
[    4.640193] 8021q: 802.1Q VLAN Support v1.8
[    4.650825] hctosys: unable to open rtc device (rtc0)
[    4.661736] VFS: Cannot open root device "(null)" or unknown-block(0,0): error -6
[    4.676655] Please append a correct "root=" boot option; here are the available partitions:
[    4.693291] 1f00             192 mtdblock0 
[    4.693298]  (driver?)
[    4.706301] 1f01              64 mtdblock1 
[    4.706306]  (driver?)
[    4.719316] 1f02              64 mtdblock2 
[    4.719321]  (driver?)
[    4.732340] 1f03            7936 mtdblock3 
[    4.732346]  (driver?)
[    4.745348] 1f04            7936 mtdblock4 
[    4.745353]  (driver?)
[    4.758356] 1f05              64 mtdblock5 
[    4.758361]  (driver?)
[    4.771362] 1f06             128 mtdblock6 
[    4.771368]  (driver?)
[    4.784386] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
[    4.802463] Rebooting in 1 seconds..

WN-AX1167GR2 bootnum, debugflagメモ

WN-DX1167Rとそれぞれ格納場所が同じ

root@WN-AX1167GR2:~# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 07f80000 00020000 "ALL"
mtd1: 00100000 00020000 "Bootloader"
mtd2: 00100000 00020000 "Ubootenv"
mtd3: 00100000 00020000 "Factory"
mtd4: 03200000 00020000 "firmware"
mtd5: 00100000 00020000 "Config"
mtd6: 03200000 00020000 "firmware_2"
mtd7: 03078908 00020000 "rootfs"
mtd8: 00100000 00020000 "Config_2"
mtd9: 00100000 00020000 "persist"
mtd10: 01480000 00020000 "Backup"
mtd11: 00100000 00020000 "SecondBoot"

bootnum

0x4

root@WN-AX1167GR2:~# mstc_persist read bootnum
2
root@WN-AX1167GR2:~# hexdump -n 128 -C /dev/mtd9
00000000  1b 05 ce 17 02 00 00 00  5d 4b 00 00 66 11 c7 bc  |........]K..f...|
00000010  5d 4b 00 00 66 11 c7 bc  00 00 00 00 00 00 00 00  |]K..f...........|
00000020  00 00 00 00 00 00 00 00  ff ff ff ff ff ff ff ff  |................|
00000030  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
*
00000080
root@WN-AX1167GR2:~# mstc_persist write bootnum 1
Unlocking persist ...
root@WN-AX1167GR2:~# hexdump -n 128 -C /dev/mtd9
00000000  1b 05 ce 17 01 00 00 00  5d 4b 00 00 66 11 c7 bc  |........]K..f...|
00000010  5d 4b 00 00 66 11 c7 bc  00 00 00 00 00 00 00 00  |]K..f...........|
00000020  00 00 00 00 00 00 00 00  ff ff ff ff ff ff ff ff  |................|
00000030  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
*
00000080

debugflag

0xFE75

root@WN-AX1167GR2:~# sys debugflag
DebugFlag: 0
root@WN-AX1167GR2:~# hexdump -n 128 -C -s $((0xFE00)) /dev/mtd3
0000fe00  4d 69 74 72 61 73 74 61  72 00 54 65 63 68 6e 6f  |Mitrastar.Techno|
0000fe10  6c 6f 67 79 20 43 6f 72  70 2e 00 00 00 00 00 00  |logy Corp.......|
0000fe20  4d 69 43 41 50 2d 33 33  34 30 43 00 00 00 00 00  |MiCAP-3340C.....|
0000fe30  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fe40  31 39 35 36 30 35 32 37  00 00 00 00 00 00 00 00  |19560527........|
0000fe50  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fe60  53 30 39 30 59 30 30 30  30 30 30 30 30 00 00 13  |S090Y00000000...|
0000fe70  49 55 aa 00 04 00 ff ff  5a 59 ff ff 00 00 00 00  |IU......ZY......|
0000fe80
root@WN-AX1167GR2:~# sys debugflag 1
PASS
root@WN-AX1167GR2:~# hexdump -n 128 -C -s $((0xFE00)) /dev/mtd3
0000fe00  4d 69 74 72 61 73 74 61  72 00 54 65 63 68 6e 6f  |Mitrastar.Techno|
0000fe10  6c 6f 67 79 20 43 6f 72  70 2e 00 00 00 00 00 00  |logy Corp.......|
0000fe20  4d 69 43 41 50 2d 33 33  34 30 43 00 00 00 00 00  |MiCAP-3340C.....|
0000fe30  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fe40  31 39 35 36 30 35 32 37  00 00 00 00 00 00 00 00  |19560527........|
0000fe50  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fe60  53 30 39 30 59 30 30 30  30 30 30 30 30 00 00 13  |S090Y00000000...|
0000fe70  49 55 aa 00 04 01 ff ff  5a 59 ff ff 00 00 00 00  |IU......ZY......|
0000fe80

WN-AX1167GR2

I-O DATAのMT7621を搭載する(と予想される)現行ミドルレンジ機として、以前より気になっていたもの。某所で2k弱の出品があり、衝動的に購入してしまった。

Switch

zone WAN LAN
port
(WN-AX1167GR2)
インターネット (LAN番号刻印無し)
port
(MT7530)
port0 port1 port2 port3 port4

MAC

  • LAN: 34:76:C5:xx:xx:B0 (Ubootenv, ethaddr (text) / Factory, 0xE000 (hex))
  • WAN: 34:76:C5:xx:xx:B2 (Factory, 0xE006 (hex))
  • 2.4G: 34:76:C5:xx:xx:B0 (Factory, 0x4 (hex))
  • 5G: 34:76:C5:xx:xx:B1 (Factory, 0x8004 (hex))

U-Boot

5chの情報を参考に強引にKernelへログインしたうえでブート時のmtdロックを回避、
sys debugflag 1
を設定してデバッグモードを有効化しZ-Loaderを停止できるように変更。再度ブート時にZ-Loaderに入り、
ATGU
でU-Bootへ移動する

log:

U-Boot 1.1.3 (Dec  9 2016 - 10:20:35)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87fac000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fdf010
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Dec  9 2016  Time:10:20:35
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.24 | 12/09/2016 10:20:37


..Hit ESC key to stop autoboot: 1
ZLB> 
ATGO              boot up the whole system
ATGU              go back to U-Boot command line
ATUR              upgrade ras image by console
ATUF              upgrade factory by console
ATNR    x,y       upgrade image by TFTP (x=type[1:ras, 2:bootloader, 3:config, 4:romd 6:factory], y=filename)
ATUX              upgrade bootloader
ATBT    x         block0 write enable (1=enable, 0=disable)
ATEN    x,(y)     set BootExtension Debug Flag (y=password)
ATSE    x         show the seed of password generator
ATWZ    a,(b,c,d) write MAC , Country code, EngDbgFlag, MAC Quantity to FLASH
ATSH              dump manufacturer related data in FLASH
ATBU              dump manufacturer related data in working buffer
ATCB              copy FLASH MRD to working buffer
ATSN    x         set serial number to flash
ATSB              save working buffer to FLASH
ATQY    x         set MAC Quantity to working buffer
ATFL    x         set EngDebugFlag to working buffer
ATCO    x         set country code to working buffer
ATSR              reset
ATRT    (x,y,z,u) RAM read/write test (x=level, y=start addr, z=end addr, u=interations)
ATRM              restore default MRD
ATBR              reset to default Romfile
ATER              erase ROM-D data
ATHV    x         set hardware version to flash
ATGP    x,y       led control
ZLB> ATGU


=>## Application terminated, rc = 0x0

Please choose the operation: 
   1: Load system code to SDRAM via TFTP. 
   2: Load system code then write to Flash via TFTP. 
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   9: Load Boot Loader code then write to Flash via TFTP.                                                                  4 
You choosed 4
                                                                                                                           0 

   
4: System Enter Boot Command Line Interface.

U-Boot 1.1.3 (Dec  9 2016 - 10:20:35)
MSTC #

help

MSTC # help
Unknown command 'help' - try 'help'

version

MSTC # version
Unknown command 'version' - try 'help'

printenv

MSTC # printenv
bootcmd=tftp
ipaddr=10.10.10.123
serverip=10.10.10.3
serialnum=BCV0003117O5
countrycode=EA
ethaddr=34:76:C5:**:**:B0
nfLicense=************
wifi2ssid1=IODATA-****b0-2G
wifi2ssid2=IO-Guest-****b0-2G
wifi1ssid1=IODATA-****b0-5G
wifiwpapsk=*************
wifiwpspin=********
wifi1ssid2=IO-Guest-****b0-5G
stdin=serial
stdout=serial
stderr=serial
ethact=Eth0 (10/100-M)

Environment size: 365/131068 bytes

tftp

MSTC # tftp

 KSEG1ADDR(NetTxPacket) = 0xA7FE2FC0 

 NetLoop,call eth_halt ! 

 NetLoop,call eth_init ! 
Trying Eth0 (10/100-M)

 ETH_STATE_ACTIVE!! 
*** Warning: no boot file name; using 'test.bin'
Using Eth0 (10/100-M) device
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'test.bin'.

 TIMEOUT_COUNT=10,Load address: 0x80200000
Loading: *
Abort

Kernel

パスワードが設定されており、ログイン不可。
5chの情報を基に強引にログインし、情報を引き出し。

uname -a

root@WN-AX1167GR2:~# uname -a
Linux WN-AX1167GR2 3.10.14 #1 SMP Mon Jun 24 12:41:36 CST 2019 mips GNU/Linux

cat /proc/version

root@WN-AX1167GR2:~# cat /proc/version
Linux version 3.10.14 (*******@srv17) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 unknown) ) #1 SMP Mon Jun 24 12:41:36 CST 2019

cat /proc/cpuinfo

root@WN-AX1167GR2:~# cat /proc/cpuinfo
system type             : MT7621
machine                 : Unknown
processor               : 0
cpu model               : MIPS 1004Kc V2.15
BogoMIPS                : 583.68
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa                     : mips1 mips2 mips32r1 mips32r2
ASEs implemented        : mips16 dsp mt
shadow register sets    : 1
kscratch registers      : 0
core                    : 0
VPE                     : 0
VCED exceptions         : not available
VCEI exceptions         : not available

processor               : 1
cpu model               : MIPS 1004Kc V2.15
BogoMIPS                : 583.68
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa                     : mips1 mips2 mips32r1 mips32r2
ASEs implemented        : mips16 dsp mt
shadow register sets    : 1
kscratch registers      : 0
core                    : 0
VPE                     : 1
VCED exceptions         : not available
VCEI exceptions         : not available

processor               : 2
cpu model               : MIPS 1004Kc V2.15
BogoMIPS                : 583.68
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa                     : mips1 mips2 mips32r1 mips32r2
ASEs implemented        : mips16 dsp mt
shadow register sets    : 1
kscratch registers      : 0
core                    : 1
VPE                     : 0
VCED exceptions         : not available
VCEI exceptions         : not available

processor               : 3
cpu model               : MIPS 1004Kc V2.15
BogoMIPS                : 583.68
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa                     : mips1 mips2 mips32r1 mips32r2
ASEs implemented        : mips16 dsp mt
shadow register sets    : 1
kscratch registers      : 0
core                    : 1
VPE                     : 1
VCED exceptions         : not available
VCEI exceptions         : not available

cat /proc/meminfo

root@WN-AX1167GR2:~# cat /proc/meminfo
MemTotal:         125220 kB
MemFree:           72232 kB
Buffers:            5508 kB
Cached:            17316 kB
SwapCached:            0 kB
Active:             8824 kB
Inactive:          16244 kB
Active(anon):       3172 kB
Inactive(anon):     1248 kB
Active(file):       5652 kB
Inactive(file):    14996 kB
Unevictable:           0 kB
Mlocked:               0 kB
SwapTotal:             0 kB
SwapFree:              0 kB
Dirty:                 0 kB
Writeback:             0 kB
AnonPages:          2272 kB
Mapped:             2476 kB
Shmem:              2168 kB
Slab:              12016 kB
SReclaimable:       1820 kB
SUnreclaim:        10196 kB
KernelStack:         528 kB
PageTables:          328 kB
NFS_Unstable:          0 kB
Bounce:                0 kB
WritebackTmp:          0 kB
CommitLimit:       62608 kB
Committed_AS:       7996 kB
VmallocTotal:    1048372 kB
VmallocUsed:       11356 kB
VmallocChunk:     987852 kB

cat /proc/mtd

root@WN-AX1167GR2:~# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 07f80000 00020000 "ALL"
mtd1: 00100000 00020000 "Bootloader"
mtd2: 00100000 00020000 "Ubootenv"
mtd3: 00100000 00020000 "Factory"
mtd4: 03200000 00020000 "firmware"
mtd5: 00100000 00020000 "Config"
mtd6: 03200000 00020000 "firmware_2"
mtd7: 03078908 00020000 "rootfs"
mtd8: 00100000 00020000 "Config_2"
mtd9: 00100000 00020000 "persist"
mtd10: 01480000 00020000 "Backup"
mtd11: 00100000 00020000 "SecondBoot"

ubus call system board

root@WN-AX1167GR2:~# ubus call system board
{
        "kernel": "3.10.14",
        "hostname": "WN-AX1167GR2",
        "system": "MT7621",
        "model": "MiCAP-3323C",
        "release": {
                "distribution": "OpenWrt",
                "version": "1.21.001",
                "revision": "unknown",
                "codename": "barrier_breaker",
                "target": "ramips\/generic",
                "description": "OpenWrt Barrier Breaker 1.21.001"
        }
}

fw_printenv

root@WN-AX1167GR2:~# fw_printenv
bootcmd=tftp
ipaddr=10.10.10.123
serverip=10.10.10.3
stdin=serial
stdout=serial
stderr=serial
serialnum=BCV0003117O5
countrycode=EA
ethaddr=34:76:C5:**:**:B0
nfLicense=************
wifi2ssid1=IODATA-****b0-2G
wifi2ssid2=IO-Guest-****b0-2G
wifi1ssid1=IODATA-****b0-5G
wifiwpapsk=*************
wifiwpspin=********
wifi1ssid2=IO-Guest-****b0-5G

switch –help

root@WN-AX1167GR2:~# switch --help
Usage:
 switch acl etype add [ethtype] [portmap]              - drop etherytype packets
 switch acl dip add [dip] [portmap]                    - drop dip packets
 switch acl dip meter [dip] [portmap][meter:kbps]      - rate limit dip packets
 switch acl dip trtcm [dip] [portmap][CIR:kbps][CBS][PIR][PBS] - TrTCM dip packets
 switch acl port add [sport] [portmap]           - drop src port packets
 switch acl L4 add [2byes] [portmap]             - drop L4 packets with 2bytes payload
 switch add [mac] [portmap]                  - add an entry to switch table
 switch add [mac] [portmap] [vlan id]        - add an entry to switch table
 switch add [mac] [portmap] [vlan id] [age]  - add an entry to switch table
 switch clear                                - clear switch table
 switch del [mac]                            - delete an entry from switch table
 switch del [mac] [fid]                  - delete an entry from switch table
 switch dip add [dip] [portmap]                  - add a dip entry to switch table
 switch dip del [dip]                        - del a dip entry to switch table
 switch dip dump                                 - dump switch dip table
 switch dip clear                                - clear switch dip table
 switch dump            - dump switch table
 switch ingress-rate on [port] [Kbps]        - set ingress rate limit on port 0~4 
 switch egress-rate on [port] [Kbps]         - set egress rate limit on port 0~4 
 switch ingress-rate off [port]              - del ingress rate limit on port 0~4 
 switch egress-rate off [port]               - del egress rate limit on port 0~4
 switch filt [mac]                           - add a SA filtering entry (with portmap 1111111) to switch table
 switch filt [mac] [portmap]                 - add a SA filtering entry to switch table
 switch filt [mac] [portmap] [vlan id]       - add a SA filtering entry to switch table
 switch filt [mac] [portmap] [vlan id] [age] - add a SA filtering entry to switch table
 switch igmpsnoop on [Query Interval] [default router portmap] - turn on IGMP snoop and  router port learning (Query Interval 1~255)
 switch igmpsnoop off                                  - turn off IGMP snoop and router port learning
 switch igmpsnoop enable [port#]                       - enable IGMP HW leave/join/Squery/Gquery
 switch igmpsnoop disable [port#]                      - disable IGMP HW leave/join/Squery/Gquery
 switch mymac [mac] [portmap]                  - add a mymac entry to switch table
 switch mirror monitor [portnumber]            - enable port mirror and indicate monitor port number
 switch mirror target [portnumber] [0:off, 1:rx, 2:tx, 3:all]  - set port mirror target
 switch phy [phy_addr]                   - dump phy register of specific port
 switch phy mt7530                       - dump mt7530 phy registers
 switch phy                                      - dump all phy registers
 switch pvid [port] [pvid]                - set pvid on port 0~4 
 switch reg r [offset]                       - register read from offset
 switch reg w [offset] [value]               - register write value to offset
 switch reg d [offset]                       - register dump
 switch sip add [sip] [dip] [portmap]            - add a sip entry to switch table
 switch sip del [sip] [dip]                          - del a sip entry to switch table
 switch sip dump                                 - dump switch sip table
 switch sip clear                                - clear switch sip table
 switch tag on [port]                        - keep vlan tag for egress packet on prot 0~4
 switch tag off [port]                       - remove vlan tag for egress packet on port 0~4
 switch vlan dump                            - dump switch table
 switch vlan set [vlan idx (NULL)][vid] [portmap]  - set vlan id and associated member

switch vlan dump

root@WN-AX1167GR2:~# switch vlan dump
  vid  fid  portmap    s-tag
    1    0  -1111-11       0
    2    0  1----1--       0
    3    0  invalid
    4    0  invalid
    5    0  invalid
    6    0  invalid
    7    0  invalid
    8    0  invalid
    9    0  invalid
   10    0  invalid
   11    0  invalid
   12    0  invalid
   13    0  invalid
   14    0  invalid
   15    0  invalid
   16    0  invalid

sys

root@WN-AX1167GR2:~# sys
Usage:
         sys atsh 
         sys atwz  []
         sys atsn 
         sys athwver 
         sys debugflag 
         sys ledctl 
         sys loadrom 
         sys mrd [0:Check default MRD(default option) | 1:Reset default MRD]
         sys romreset 

sys atsh

root@WN-AX1167GR2:~# sys atsh
Firmware Version              : 3.10(XBC.2)b10                
Boot Version                  : 1.24.06 | 12/09/2016 10:20:37 
Product Model                 : WN-AX1167GR2                  
First MAC Address             : 34:76:C5:**:**:B0             
MAC Quantity                  : 4                             
Serial Number                 : BCV0003117O5                  
firmware Checksum             : 7cbe484e                      
Kernel2 Checksum              : 6c4b3062                      
RomFile Checksum              : bcc71166                      
Country Code                  : EA                            
Boot Number                   : 2

mstc_persist

root@WN-AX1167GR2:~# mstc_persist 
Usage: mstc_persist read  ; mstc_persist write  

mstc_persist read/write recognizes these parameters in persist partition:
        magic_num          magic num
        bootnum            boot from which partition
        cfgapply           config apply flag
        fwapply            firmware apply flag
        padding            padding
        cfg1Size           configuration 1 size
        cfg1Chksum         configuration 1 checksum
        cfg2Size           configuration 2 size
        cfg2Chksum         configuration 2 checksum
        fw1Size            firmware 1 size
        fw1Chksum          firmware 1 checksum
        fw2Size            firmware 2 size
        fw2Chksum          firmware 2 checksum

Example: Read bootnum from persist partition.
         mstc_persist read bootnum

Example: Write bootnum with value 2 to persist partition.
         mstc_persist write bootnum 2

mstc_persist read bootnum

root@WN-AX1167GR2:~# mstc_persist read bootnum
2

bootlog

===================================================================
                MT7621   stage1 code 10:33:11 (ASIC)
                CPU=50000000 HZ BUS=16666666 HZ
==================================================================
Change MPLL source from XTAL to CR...
do MEMPLL setting..
MEMPLL Config : 0x11100000
3PLL mode + External loopback
=== XTAL-40Mhz === DDR-1200Mhz ===
PLL3 FB_DL: 0x4, 1/0 = 576/448 11000000
PLL4 FB_DL: 0x7, 1/0 = 552/472 1D000000
PLL2 FB_DL: 0x18, 1/0 = 609/415 61000000
do DDR setting..[00320381]
Apply DDR3 Setting...(use customer AC)
          0    8   16   24   32   40   48   56   64   72   80   88   96  104  112  120
      --------------------------------------------------------------------------------
0000:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0001:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0002:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0003:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0004:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0005:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0006:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0007:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0008:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0009:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000A:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000B:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000C:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000D:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000E:|    0    0    0    0    0    0    0    0    0    0    0    1    1    1    1    1
000F:|    0    0    0    0    0    0    1    1    1    1    1    1    1    1    1    1
0010:|    1    1    1    1    1    1    1    1    1    1    1    0    0    0    0    0
0011:|    1    1    1    1    1    0    0    0    0    0    0    0    0    0    0    0
0012:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0013:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0014:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0015:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0016:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0017:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0018:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0019:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001A:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001B:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001C:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001D:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001E:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001F:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
rank 0 coarse = 16
rank 0 fine = 40
B:|    0    0    0    0    0    0    0    0    1    1    1    0    0    0    0    0
opt_dle value:9
DRAMC_R0DELDLY[018]=00002121
==================================================================
                RX      DQS perbit delay software calibration 
==================================================================
1.0-15 bit dq delay value
==================================================================
bit|     0  1  2  3  4  5  6  7  8  9
--------------------------------------
0 |    9 9 9 10 6 7 8 6 7 6 
10 |    9 8 9 10 7 9 
--------------------------------------

==================================================================
2.dqs window
x=pass dqs delay value (min~max)center 
y=0-7bit DQ of every group
input delay:DQS0 =33 DQS1 = 33
==================================================================
bit     DQS0     bit      DQS1
0  (0~64)32  8  (1~64)32
1  (1~66)33  9  (1~60)30
2  (1~64)32  10  (1~63)32
3  (1~65)33  11  (1~61)31
4  (1~64)32  12  (1~65)33
5  (1~66)33  13  (1~63)32
6  (1~64)32  14  (1~64)32
7  (1~66)33  15  (1~65)33
==================================================================
3.dq delay value last
==================================================================
bit|    0  1  2  3  4  5  6  7  8   9
--------------------------------------
0 |    10 9 10 10 7 7 9 6 8 9 
10 |    10 10 9 11 8 9 
==================================================================
==================================================================
     TX  perbyte calibration 
==================================================================
DQS loop = 15, cmp_err_1 = ffff0000 
dqs_perbyte_dly.last_dqsdly_pass[0]=15,  finish count=1 
dqs_perbyte_dly.last_dqsdly_pass[1]=15,  finish count=2 
DQ loop=15, cmp_err_1 = ffff0082
dqs_perbyte_dly.last_dqdly_pass[1]=15,  finish count=1 
DQ loop=14, cmp_err_1 = ffff0000
dqs_perbyte_dly.last_dqdly_pass[0]=14,  finish count=2 
byte:0, (DQS,DQ)=(8,8)
byte:1, (DQS,DQ)=(8,8)
20,data:88
[EMI] DRAMC calibration passed

===================================================================
                MT7621   stage1 code done 
                CPU=50000000 HZ BUS=16666666 HZ
===================================================================


U-Boot 1.1.3 (Dec  9 2016 - 10:20:35)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87fac000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fdf010
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Dec  9 2016  Time:10:20:35
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.24 | 12/09/2016 10:20:37


..
Checking image 2...
   Image Name:   3.10(XBC.2)b10
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1603256 Bytes =  1.5 MB
   Load Address: 80001000
   Entry Point:  80001000
.........................   Verifying Combo Checksum ... ..................................................................................................................................................## Booting image at bf700000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...


LINUX started...

 THIS IS ASIC

SDK 5.0.S.0
[    0.000000] Linux version 3.10.14 (*******@srv17) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 unknown) ) #1 SMP Mon Jun 24 12:41:36 CST 2019
[    0.000000] 
[    0.000000]  The CPU feqenuce set to 880 MHz
[    0.000000] GCMP present
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] Software DMA cache coherency
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x07ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x07ffffff]
[    0.000000] Detected 3 available secondary CPU(s)
[    0.000000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] PERCPU: Embedded 7 pages/cpu @81103000 s6464 r8192 d14016 u32768
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS1,57600n8 BootImage=2 root=/dev/mtdblock7 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=0002e000
[    0.000000] Readback ErrCtl register=0002e000
[    0.000000] Memory: 125008k/131072k available (3536k kernel code, 6064k reserved, 852k data, 212k init, 0k highmem)
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS:128
[    0.000000] console [ttyS1] enabled
[    0.116000] Calibrating delay loop... 562.17 BogoMIPS (lpj=1124352)
[    0.148000] pid_max: default: 32768 minimum: 301
[    0.152000] Mount-cache hash table entries: 512
[    0.156000] launch: starting cpu1
[    0.160000] launch: cpu1 gone!
[    0.160000] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.160000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.160000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.160000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.192000] Synchronize counters for CPU 1: done.
[    0.200000] launch: starting cpu2
[    0.204000] launch: cpu2 gone!
[    0.204000] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.204000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.204000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.204000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.232000] Synchronize counters for CPU 2: done.
[    0.240000] launch: starting cpu3
[    0.244000] launch: cpu3 gone!
[    0.244000] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.244000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.244000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.244000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.272000] Synchronize counters for CPU 3: done.
[    0.280000] Brought up 4 CPUs
[    0.284000] NET: Registered protocol family 16
[    0.576000] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.580000] PCIE PHY initialize
[    0.584000] ***** Xtal 40MHz *****
[    0.588000] start MT7621 PCIe register access
[    1.164000] RALINK_RSTCTRL = 7000000
[    1.168000] RALINK_CLKCFG1 = 77ffeff8
[    1.172000] 
[    1.172000] *************** MT7621 PCIe RC mode *************
[    1.652000] PCIE0 no card, disable it(RST&CLK)
[    1.656000] PCIE2 no card, disable it(RST&CLK)
[    1.660000] pcie_link status = 0x2
[    1.664000] RALINK_RSTCTRL= 2000000
[    1.668000] *** Configure Device number setting of Virtual PCI-PCI bridge ***
[    1.672000] RALINK_PCI_PCICFG_ADDR = 21007f2 -> 20107f2
[    1.676000] PCIE1 enabled
[    1.680000] interrupt enable status: 200000
[    1.684000] Port 0 N_FTS = 1b105000
[    1.688000] config reg done
[    1.692000] init_rt2880pci done
[    1.712000] bio: create slab  at 0
[    1.716000] SCSI subsystem initialized
[    1.720000] usbcore: registered new interface driver usbfs
[    1.724000] usbcore: registered new interface driver hub
[    1.728000] usbcore: registered new device driver usb
[    1.732000] PCI host bridge to bus 0000:00
[    1.736000] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    1.740000] pci_bus 0000:00: root bus resource [io  0x1e160000-0x1e16ffff]
[    1.744000] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    1.748000] pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000)
[    1.752000] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    1.756000] pci 0000:00:00.0: BAR 1: assigned [mem 0x60100000-0x6010ffff]
[    1.760000] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    1.764000] pci 0000:00:00.0: PCI bridge to [bus 01]
[    1.768000] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    1.772000] BAR0 at slot 0 = 0
[    1.776000] bus=0x0, slot = 0x0
[    1.780000] res[0]->start = 0
[    1.784000] res[0]->end = 0
[    1.788000] res[1]->start = 60100000
[    1.792000] res[1]->end = 6010ffff
[    1.796000] res[2]->start = 0
[    1.800000] res[2]->end = 0
[    1.804000] res[3]->start = 0
[    1.808000] res[3]->end = 0
[    1.812000] res[4]->start = 0
[    1.816000] res[4]->end = 0
[    1.820000] res[5]->start = 0
[    1.824000] res[5]->end = 0
[    1.828000] bus=0x1, slot = 0x0, irq=0x18
[    1.832000] res[0]->start = 60000000
[    1.836000] res[0]->end = 600fffff
[    1.840000] res[1]->start = 0
[    1.844000] res[1]->end = 0
[    1.848000] res[2]->start = 0
[    1.852000] res[2]->end = 0
[    1.856000] res[3]->start = 0
[    1.860000] res[3]->end = 0
[    1.864000] res[4]->start = 0
[    1.868000] res[4]->end = 0
[    1.872000] res[5]->start = 0
[    1.876000] res[5]->end = 0
[    1.880000] Switching to clocksource MIPS
[    1.884000] NET: Registered protocol family 2
[    1.892000] TCP established hash table entries: 1024 (order: 1, 8192 bytes)
[    1.908000] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    1.920000] TCP: Hash tables configured (established 1024 bind 1024)
[    1.932000] TCP: reno registered
[    1.940000] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    1.952000] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    1.964000] NET: Registered protocol family 1
[    2.060000] 4 CPUs re-calibrate udelay(lpj = 1167360)
[    2.072000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    2.084000] jffs2: version 2.2. (NAND) (SUMMARY)  (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    2.108000] io scheduler noop registered (default)
[    2.116000] reg_int_mask=0, INT_MASK= 0 
[    2.124000] HSDMA_init
[    2.128000] 
[    2.128000]  hsdma_phy_tx_ring0 = 0x0fe38000, hsdma_tx_ring0 = 0xafe38000
[    2.148000] 
[    2.148000]  hsdma_phy_rx_ring0 = 0x0fe34000, hsdma_rx_ring0 = 0xafe34000
[    2.164000] TX_CTX_IDX0 = 0
[    2.168000] TX_DTX_IDX0 = 0
[    2.172000] RX_CRX_IDX0 = 3ff
[    2.180000] RX_DRX_IDX0 = 0
[    2.184000] set_fe_HSDMA_glo_cfg
[    2.192000] HSDMA_GLO_CFG = 465
[    2.204000] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    2.216000] serial8250: ttyS0 at MMIO 0x1e000d00 (irq = 27) is a 16550A
[    2.228000] serial8250: ttyS1 at MMIO 0x1e000c00 (irq = 26) is a 16550A
[    2.244000] Ralink gpio driver initialized
[    2.252000] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    2.264000] Allocate 16 byte aligned buffer: 80491c20
[    2.276000] Enable NFI Clock
[    2.280000] # MTK NAND # : Use HW ECC
[    2.288000] NAND ID [01 F1 80 1D 01, 00801d01]
[    2.296000] Device found in MTK table, ID: 1f1, EXT_ID: 801d01
[    2.308000] Support this Device in MTK table! 1f1 
[    2.320000] NAND device: Manufacturer ID: 0x01, Chip ID: 0xf1 (AMD/Spansion NAND 128MiB 3,3V 8-bit), 128MiB, page size: 2048, OOB size: 64
[    2.344000] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    2.356000] Scanning device for bad blocks
[    2.652000] Signature matched and data read!
[    2.660000] load_fact_bbt success 1023
[    2.668000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.688000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.708000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.728000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.748000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.768000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.788000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.804000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.824000] Creating 11 MTD partitions on "MT7621-NAND":
[    2.836000] 0x000000000000-0x000007f80000 : "ALL"
[    2.848000] 0x000000000000-0x000000100000 : "Bootloader"
[    2.860000] 0x000000100000-0x000000200000 : "Ubootenv"
[    2.868000] 0x000000200000-0x000000300000 : "Factory"
[    2.880000] 0x000000400000-0x000003600000 : "firmware"
[    2.892000] 0x000003600000-0x000003700000 : "Config"
[    2.904000] 0x000003700000-0x000006900000 : "firmware_2"
[    2.916000] 0x0000038876f8-0x000006900000 : "rootfs"
[    2.928000] mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[    2.960000] 0x000006900000-0x000006a00000 : "Config_2"
[    2.972000] 0x000006a00000-0x000006b00000 : "persist"
[    2.984000] 0x000006b00000-0x000007f80000 : "Backup"
[    2.996000] 0x000000300000-0x000000400000 : "SecondBoot"
[    3.008000] [mtk_nand] probe successfully!
[    3.016000] rootfs = 38876f8 to 4020000
[    3.024000] PPP generic driver version 2.4.2
[    3.032000] NET: Registered protocol family 24
[    3.040000] PPTP driver version 0.8.5
[    3.048000] rdm_major = 253
[    3.052000] GMAC1_MAC_ADRH -- : 0x00003476
[    3.064000] GMAC1_MAC_ADRL -- : 0xc59ba0b0
[    3.072000] Ralink APSoC Ethernet Driver Initilization. v3.1  1024 rx/tx descriptors allocated, mtu = 1500!
[    3.088000] GMAC1_MAC_ADRH -- : 0x00003476
[    3.096000] GMAC1_MAC_ADRL -- : 0xc59ba0b0
[    3.108000] register mt7530
[    3.112000] PROC INIT OK!
[    3.116000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    3.132000] ehci-pci: EHCI PCI platform driver
[    3.140000] *****run project phy.
[    3.160000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.176000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.196000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.216000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.236000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.256000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.276000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.296000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.316000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.336000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.380000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.400000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.420000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.440000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.460000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.480000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.500000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.520000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.540000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.560000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.700000] xhci-hcd xhci-hcd: xHCI Host Controller
[    3.708000] xhci-hcd xhci-hcd: new USB bus registered, assigned bus number 1
[    3.724000] xhci-hcd xhci-hcd: irq 22, io mem 0x1e1c0000
[    3.736000] hub 1-0:1.0: USB hub found
[    3.744000] hub 1-0:1.0: 2 ports detected
[    3.752000] xhci-hcd xhci-hcd: xHCI Host Controller
[    3.760000] xhci-hcd xhci-hcd: new USB bus registered, assigned bus number 2
[    3.776000] hub 2-0:1.0: USB hub found
[    3.784000] hub 2-0:1.0: 1 port detected
[    3.792000] usbcore: registered new interface driver usb-storage
[    3.804000] gre: GRE over IPv4 demultiplexor driver
[    3.812000] TCP: cubic registered
[    3.820000] NET: Registered protocol family 10
[    3.832000] NET: Registered protocol family 17
[    3.840000] Bridge firewalling registered
[    3.848000] 8021q: 802.1Q VLAN Support v1.8
[    3.864000] VFS: Mounted root (squashfs filesystem) readonly on device 31:7.
[    3.880000] Freeing unused kernel memory: 212K (8044b000 - 80480000)
procd: Console is alive
procd: - preinit -
[    5.200000] 34:76:FFFFFFC5:FFFFFF9B:FFFFFFA0:FFFFFFB0
[    5.212000] Raeth v3.1 (Tasklet)
[    5.220000] set CLK_CFG_0 = 0x40a00020!!!!!!!!!!!!!!!!!!1
[    5.236000] phy_free_head is 0xf732000!!!
[    5.244000] phy_free_tail_phy is 0xf733ff0!!!
[    5.252000] txd_pool=af740000 phy_txd_pool=0F740000
[    5.260000] ei_local->skb_free start address is 0x87eca6dc.
[    5.272000] free_txd: 0f740010, ei_local->cpu_ptr: 0F740000
[    5.284000]  POOL  HEAD_PTR | DMA_PTR | CPU_PTR 
[    5.292000] ----------------+---------+--------
[    5.300000]      0xaf740000 0x0F740000 0x0F740000
[    5.312000] 
[    5.312000] phy_qrx_ring = 0x0f6e5000, qrx_ring = 0xaf6e5000
[    5.328000] 
[    5.328000] phy_rx_ring0 = 0x0f734000, rx_ring0 = 0xaf734000
[    5.364000] MT7530 Reset Completed!!
[    5.376000] change HW-TRAP to 0x117c8f
[    5.384000] set LAN/WAN WLLLL
[    5.396000] GMAC1_MAC_ADRH -- : 0x00003476
[    5.404000] GMAC1_MAC_ADRL -- : 0xc59ba0b0
[    5.412000] GDMA2_MAC_ADRH -- : 0x00003476
[    5.420000] GDMA2_MAC_ADRL -- : 0xc59ba0b2
[    5.428000] eth1: ===> VirtualIF_open
[    5.436000] MT7621 GE2 link rate to 1G
[    5.436000] CDMA_CSG_CFG = 81000000
[    5.436000] GDMA1_FWD_CFG = 20710000
[    5.436000] GDMA2_FWD_CFG = 20710000
[    5.560000] led=9, on=1, off=1, blinks,=1, reset=1, time=4000 low_trigger=1
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    8.668000] led=9, on=1, off=1, blinks,=1, reset=1, time=4000 low_trigger=1
Could not open mtd device: /dev/mtd7
reading ro[    8.780000] ra2880stop()...otfs failed
mouDone
[    8.792000] eth1: ===> VirtualIF_close

[    8.800000] Free TX/RX Ring Memory!
procd: - early -
procd: - ubus -
procd: - init -
Please press Enter to activate this console.
[   10.696000] jffs2: notice: (757) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   10.828000] jffs2: notice: (760) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
##### Skip Checking Config. #####
Mode Switch: Router/AP
[   11.448000] Initializing XFRM netlink socket
[   11.460000] NET: Registered protocol family 15
[   11.468000] sbdev driver(major: 254) installed.
[   11.480000] wpdev driver(major: 250) installed.
[   11.500000] l2tp_core: L2TP core driver, V2.0
[   11.512000] l2tp_netlink: L2TP netlink interface
[   11.524000] ip_gre: GRE over IPv4 tunneling driver
[   11.544000] ip_tables: (C) 2000-2006 Netfilter Core Team
[   11.552000] Type=Restricted Cone
[   11.564000] nf_conntrack version 0.5.0 (1956 buckets, 7824 max)
[   11.584000] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   11.616000] ebt_time: kernel timezone is -0000
[   11.628000] Ebtables v2.0 registered
[   11.640000] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[   11.788000] Netfilter messages via NETLINK v0.30.
[   11.800000] PPP MPPE Compression module registered
[   11.812000] Ralink APSoC Hardware Watchdog Timer
[   11.844000] xt_time: kernel timezone is -0000
[   11.864000] ctnetlink v0.93: registering with nfnetlink.
[   14.764000] mtd: ALL locked
[   14.768000] mtd: Bootloader locked
[   14.776000] mtd: Ubootenv locked
[   14.780000] mtd: Factory locked
[   14.788000] mtd_locked init
[   16.276000] 34:76:FFFFFFC5:FFFFFF9B:FFFFFFA0:FFFFFFB0
[   16.288000] Raeth v3.1 (Tasklet)
[   16.296000] set CLK_CFG_0 = 0x40a00020!!!!!!!!!!!!!!!!!!1
[   16.312000] phy_free_head is 0xf31a000!!!
[   16.320000] phy_free_tail_phy is 0xf31bff0!!!
[   16.328000] txd_pool=af338000 phy_txd_pool=0F338000
[   16.336000] ei_local->skb_free start address is 0x87eca6dc.
[   16.348000] free_txd: 0f338010, ei_local->cpu_ptr: 0F338000
[   16.360000]  POOL  HEAD_PTR | DMA_PTR | CPU_PTR 
[   16.368000] ----------------+---------+--------
[   16.380000]      0xaf338000 0x0F338000 0x0F338000
[   16.388000] 
[   16.388000] phy_qrx_ring = 0x0f0e7000, qrx_ring = 0xaf0e7000
[   16.404000] 
[   16.404000] phy_rx_ring0 = 0x0f32c000, rx_ring0 = 0xaf32c000
[   16.448000] MT7530 Reset Completed!!
[   16.460000] change HW-TRAP to 0x117c8f
[   16.468000] set LAN/WAN WLLLL
[   16.480000] GMAC1_MAC_ADRH -- : 0x00003476
[   16.488000] GMAC1_MAC_ADRL -- : 0xc59ba0b0
[   16.496000] eth1: ===> VirtualIF_open
[   16.504000] MT7621 GE2 link rate to 1G
[   16.512000] CDMA_CSG_CFG = 81000000
[   16.520000] GDMA1_FWD_CFG = 20710000
[   16.528000] GDMA2_FWD_CFG = 20710000
[   16.536000] device eth0 entered promiscuous mode
[   16.548000] br-lan: port 1(eth0) entered forwarding state
[   16.560000] br-lan: port 1(eth0) entered forwarding state
[   16.572000] eth1: ===> VirtualIF_open
[   16.580000] device eth1 entered promiscuous mode
[   16.592000] br-lan: port 2(eth1) entered forwarding state
[   16.604000] br-lan: port 2(eth1) entered forwarding state
[   18.564000] br-lan: port 1(eth0) entered forwarding state
[   18.608000] br-lan: port 2(eth1) entered forwarding state
[   22.288000] register mt_drv
[   22.308000] 
[   22.308000] 
[   22.308000] === pAd = c2381000, size = 3627760 ===
[   22.308000] 
[   22.328000] PciHif.CSRBaseAddress =0xc2280000, csr_addr=0xc2280000!
[   22.356000] get_wdev_by_idx: invalid idx(0)
[   22.368000] RTMPInitPCIeDevice():device_id=0x7615
[   22.376000] DriverOwn()::Try to Clear FW Own...
[   22.716000] DriverOwn()::Success to clear FW Own
[   22.728000] mt_pci_chip_cfg(): HWVer=0x8a10, FWVer=0x8a10, pAd->ChipID=0x7615
[   22.740000] mt_pci_chip_cfg(): HIF_SYS_REV=0x76150001
[   22.752000] RtmpChipOpsHook(493): Not support for HIF_MT yet! MACVersion=0x0
[   22.764000] mt7615_init()-->
[   22.772000] Use the default ePAeLNA bin image!
[   22.780000] Use the default /etc_ro/wlan/MT7615E_EEPROM1.bin bin image!
[   22.792000] rxq = c26f26f4
[   24.272000] ctl->ackq = c26f2700
[   24.280000] ctl->kickq = c26f270c
[   24.288000] ctl->tx_doneq = c26f2718
[   24.292000] ctl->rx_doneq = c26f2724
[   24.300000] mt7615_fw_prepare():FW(8a10), HW(8a10), CHIPID(7615))
[   24.312000] mt7615_fw_prepare(2701): MT7615_E3, USE E3 patch and ram code binary image
[   24.328000] AndesMTLoadRomMethodFwDlRing(1036), cap->rom_patch_len(10206)
[   24.344000] AndesRestartCheck: Current TOP_MISC2(0x1)
[   24.352000] AndesRestartCheck: (TOP_MISC2 = 1), ready to continue...RET(0)
[   24.368000] 20161013140927a
[   24.372000] 
[   24.376000] platform = 
[   24.380000] ALPS
[   24.384000] hw/sw version = 
[   24.388000] 8a108a10
[   24.396000] patch version = 
[   24.400000] 00000010
[   24.404000] Patch SEM Status=2
[   24.412000] MtCmdPatchSemGet:(ret = 0)
[   24.416000] 
[   24.416000] Patch is not ready && get semaphore success, SemStatus(2)
[   24.432000] EventGenericEventHandler: CMD Success
[   24.444000] MtCmdAddressLenReq:(ret = 0)
[   24.452000] MtCmdPatchFinishReq
[   24.468000] EventGenericEventHandler: CMD Success
[   24.480000] Send checksum req..
[   24.484000] Patch SEM Status=3
[   24.492000] MtCmdPatchSemGet:(ret = 0)
[   24.496000] 
[   24.496000] Release patch semaphore, SemStatus(3)
[   24.512000] AndesMTEraseRomPatch
[   24.516000] WfMcuHwInit: Before NICLoadFirmware, check IcapMode=0
[   24.528000] AndesMTLoadFwMethodFwDlRing(810), cap->fw_len(460360)
[   24.540000] Build Date:_201701111925
[   24.548000] Build Date:_201701111925
[   24.556000] AndesRestartCheck: Current TOP_MISC2(0x1)
[   24.564000] AndesRestartCheck: (TOP_MISC2 = 1), ready to continue...RET(0)
[   24.580000] EventGenericEventHandler: CMD Success
[   24.588000] MtCmdAddressLenReq:(ret = 0)
[   24.600000] EventGenericEventHandler: CMD Success
[   24.612000] MtCmdAddressLenReq:(ret = 0)
[   24.620000] MtCmdFwStartReq: override = 1, address = 540672
[   24.628000] EventGenericEventHandler: CMD Success
[   24.640000] Build Date:_201612301011
[   24.648000] EventGenericEventHandler: CMD Success
[   24.656000] MtCmdAddressLenReq:(ret = 0)
[   24.664000] MtCmdFwStartReq: override = 4, address = 0
[   24.740000] EventGenericEventHandler: CMD Success
[   24.780000] WfMcuHwInit: NICLoadFirmware OK, Check IcapMode=0
[   24.792000] MCU Init Done!
[   24.796000]  MtCmdSetRlmPorCal: (ret = 0) 
[   24.804000] efuse_probe: efuse = 10000212
[   24.812000] RtmpChipOpsEepromHook::e2p_type=2, inf_Type=5
[   24.824000] RtmpEepromGetDefault::e2p_dafault=1
[   24.832000] RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 1
[   24.848000] NVM is FLASH mode. dev_idx [0] FLASH OFFSET [0x0]
[   24.860000] NICReadEEPROMParameters():Calling eeinit
[   24.880000] NICReadEEPROMParameters: EEPROM 0x52 b317
[   24.896000] MtCmdSetTxLpfCal:(ret = 0)
[   24.904000] MtCmdSetTxIqCal:(ret = 0)
[   24.912000] MtCmdSetTxDcCal:(ret = 0)
[   24.920000] MtCmdSetRxFiCal:(ret = 0)
[   24.928000] MtCmdSetRxFdCal:(ret = 0)
[   24.932000] MtCmdSetRxFdCal:(ret = 0)
[   24.940000] MtCmdSetRxFdCal:(ret = 0)
[   24.948000] MtCmdSetRxFdCal:(ret = 0)
[   24.956000] MtCmdSetRxFdCal:(ret = 0)
[   24.964000] MtCmdSetRxFdCal:(ret = 0)
[   24.972000] MtCmdSetRxFdCal:(ret = 0)
[   24.976000] MtCmdSetRxFdCal:(ret = 0)
[   24.984000] MtCmdSetRxFdCal:(ret = 0)
[   24.992000] NICReadEEPROMParameters: EEPROM 0x52 b317
[   25.556000] Country Region from e2p = 101
[   25.564000] mt7615_antenna_default_reset(): TxPath = 4, RxPath = 4
[   25.580000] mt7615_antenna_default_reset(): DBDC 2G TxPath = 2, 2G RxPath = 2
[   25.592000] mt7615_antenna_default_reset(): DBDC 5G TxPath = 2, 2G RxPath = 2
[   25.608000] rtmp_read_txpwr_from_eeprom(235): Don't Support this now!
[   25.620000] RTMPReadTxPwrPerRate(1382): Don't Support this now!
[   25.632000] RcRadioInit(): DbdcMode=1, ConcurrentBand=2
[   25.640000] RcRadioInit(): pRadioCtrl=87563444,Band=0,rfcap=1,channel=1,PhyMode=2
[   25.656000] RcRadioInit(): pRadioCtrl=87563530,Band=1,rfcap=2,channel=36,PhyMode=1
[   25.672000] MtCmdSetDbdcCtrl:(ret = 0)
[   25.680000] Band Rf: 1, Phy Mode: 2
[   25.688000] Band Rf: 2, Phy Mode: 1
[   25.692000] AntCfgInit(2700): Not support for HIF_MT yet!
[   25.704000] MtSingleSkuLoadParam: RF_LOCKDOWN Feature OFF !!!
[   25.716000] MtBfBackOffLoadTable: RF_LOCKDOWN Feature OFF !!!
[   25.728000] EEPROM Init Done!
[   25.736000] mt_mac_init()-->
[   25.740000] mt_mac_pse_init(2716): Don't Support this now!
[   25.752000] mt7615_init_mac_cr()-->
[   25.760000] mt7615_init_mac_cr(): TMAC_TRCR0=0x82783c8c
[   25.768000] mt7615_init_mac_cr(): TMAC_TRCR1=0x82783c8c
[   25.780000] MtAsicSetMacMaxLen(1290): Not finish Yet!
[   25.788000] 
[   25.952000] MtCmdSetMacTxRx:(ret = 0)
[   25.960000] MtCmdSetMacTxRx:(ret = 0)
[   25.968000] [DfsSwitchCheck]: DFS ByPass TX calibration.
[   25.980000] mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
[   26.000000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   26.008000] mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
[   26.028000] MtCmdGetTXDPDCalResult:(ret = 0)
[   26.036000] MtCmdChannelSwitch: control_chl = 36,control_ch2=0, central_chl = 42 DBDCIdx= 1, Band= 0 
[   26.052000] BW = 2,TXStream = 2, RXStream = 2, scan(1)
[   26.288000] [DfsSwitchCheck]: DFS ByPass TX calibration.
[   26.296000] mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
[   26.316000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   26.324000] mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
[   26.344000] MtCmdGetTXDPDCalResult:(ret = 0)
[   26.352000] MtCmdChannelSwitch: control_chl = 40,control_ch2=0, central_chl = 42 DBDCIdx= 1, Band= 0 
[   26.372000] BW = 2,TXStream = 2, RXStream = 2, scan(1)
[   26.604000] [DfsSwitchCheck]: DFS ByPass TX calibration.
[   26.612000] mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
[   26.632000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   26.640000] mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
[   26.660000] MtCmdGetTXDPDCalResult:(ret = 0)
[   26.668000] MtCmdChannelSwitch: control_chl = 44,control_ch2=0, central_chl = 42 DBDCIdx= 1, Band= 0 
[   26.688000] BW = 2,TXStream = 2, RXStream = 2, scan(1)
[   26.976000] [DfsSwitchCheck]: DFS ByPass TX calibration.
[   26.984000] mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
[   27.004000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   27.012000] mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
[   27.032000] MtCmdGetTXDPDCalResult:(ret = 0)
[   27.040000] MtCmdChannelSwitch: control_chl = 48,control_ch2=0, central_chl = 42 DBDCIdx= 1, Band= 0 
[   27.060000] BW = 2,TXStream = 2, RXStream = 2, scan(1)
[   27.292000] ====================================================================
[   27.304000] Channel  36 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
[   27.320000] Channel  40 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
[   27.336000] Channel  44 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
[   27.348000] Channel  48 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
[   27.364000] ====================================================================
[   27.380000] Rule 3 Channel Busy time value : Select Primary Channel 36 
[   27.392000] Rule 3 Channel Busy time value : Min Channel Busy = 0
[   27.404000] Rule 3 Channel Busy time value : BW = 80
[   27.412000]  AutoChSelUpdateChannel(): Update channel for wdev0 for this band PhyMode = 49,Channel = 36  
[   27.436000]  AutoChSelUpdateChannel(): Update channel for wdev1 for this band PhyMode = 49,Channel = 36  
[   27.456000]  AutoChSelUpdateChannel(): Update channel for wdev2 for this band PhyMode = 49,Channel = 36  
[   27.476000]  AutoChSelUpdateChannel(): Update channel for wdev3 for this band PhyMode = 49,Channel = 36  
[   27.496000]  AutoChSelUpdateChannel(): Update channel for wdev4 for this band PhyMode = 14,Channel = 0  
[   27.516000]  AutoChSelUpdateChannel(): Update channel for wdev5 for this band PhyMode = 14,Channel = 0  
[   27.536000]  AutoChSelUpdateChannel(): Update channel for wdev6 for this band PhyMode = 14,Channel = 0  
[   27.556000]  AutoChSelUpdateChannel(): Update channel for wdev7 for this band PhyMode = 14,Channel = 0  
[   27.576000] mt7615_apply_dcoc() : reload Central CH [1] BW [0] from cetral freq [2417]  offset [2200] 
[   27.596000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   27.604000] mt7615_apply_dpd() : reload Central CH [1] BW [0] from cetral freq [2422] i[44] offset [4b20] 
[   27.624000] MtCmdGetTXDPDCalResult:(ret = 0)
[   27.632000] MtCmdChannelSwitch: control_chl = 1,control_ch2=0, central_chl = 1 DBDCIdx= 0, Band= 0 
[   27.652000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   27.908000] mt7615_apply_dcoc() : reload Central CH [2] BW [0] from cetral freq [2417]  offset [2200] 
[   27.924000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   27.932000] mt7615_apply_dpd() : reload Central CH [2] BW [0] from cetral freq [2422] i[44] offset [4b20] 
[   27.952000] MtCmdGetTXDPDCalResult:(ret = 0)
[   27.960000] MtCmdChannelSwitch: control_chl = 2,control_ch2=0, central_chl = 2 DBDCIdx= 0, Band= 0 
[   27.980000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   28.216000] mt7615_apply_dcoc() : reload Central CH [3] BW [0] from cetral freq [2417]  offset [2200] 
[   28.232000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   28.240000] mt7615_apply_dpd() : reload Central CH [3] BW [0] from cetral freq [2422] i[44] offset [4b20] 
[   28.260000] MtCmdGetTXDPDCalResult:(ret = 0)
[   28.268000] MtCmdChannelSwitch: control_chl = 3,control_ch2=0, central_chl = 3 DBDCIdx= 0, Band= 0 
[   28.288000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   28.524000] mt7615_apply_dcoc() : reload Central CH [4] BW [0] from cetral freq [2432]  offset [2300] 
[   28.540000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   28.548000] mt7615_apply_dpd() : reload Central CH [4] BW [0] from cetral freq [2422] i[44] offset [4b20] 
[   28.568000] MtCmdGetTXDPDCalResult:(ret = 0)
[   28.576000] MtCmdChannelSwitch: control_chl = 4,control_ch2=0, central_chl = 4 DBDCIdx= 0, Band= 0 
[   28.596000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   28.844000] mt7615_apply_dcoc() : reload Central CH [5] BW [0] from cetral freq [2432]  offset [2300] 
[   28.860000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   28.868000] mt7615_apply_dpd() : reload Central CH [5] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
[   28.888000] MtCmdGetTXDPDCalResult:(ret = 0)
[   28.896000] MtCmdChannelSwitch: control_chl = 5,control_ch2=0, central_chl = 5 DBDCIdx= 0, Band= 0 
[   28.916000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   29.152000] mt7615_apply_dcoc() : reload Central CH [6] BW [0] from cetral freq [2432]  offset [2300] 
[   29.168000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   29.176000] mt7615_apply_dpd() : reload Central CH [6] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
[   29.196000] MtCmdGetTXDPDCalResult:(ret = 0)
[   29.204000] MtCmdChannelSwitch: control_chl = 6,control_ch2=0, central_chl = 6 DBDCIdx= 0, Band= 0 
[   29.224000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   29.460000] mt7615_apply_dcoc() : reload Central CH [7] BW [0] from cetral freq [2447]  offset [2400] 
[   29.476000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   29.484000] mt7615_apply_dpd() : reload Central CH [7] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
[   29.504000] MtCmdGetTXDPDCalResult:(ret = 0)
[   29.512000] MtCmdChannelSwitch: control_chl = 7,control_ch2=0, central_chl = 7 DBDCIdx= 0, Band= 0 
[   29.532000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   29.768000] mt7615_apply_dcoc() : reload Central CH [8] BW [0] from cetral freq [2447]  offset [2400] 
[   29.784000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   29.792000] mt7615_apply_dpd() : reload Central CH [8] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
[   29.812000] MtCmdGetTXDPDCalResult:(ret = 0)
[   29.820000] MtCmdChannelSwitch: control_chl = 8,control_ch2=0, central_chl = 8 DBDCIdx= 0, Band= 0 
[   29.840000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   30.116000] mt7615_apply_dcoc() : reload Central CH [9] BW [0] from cetral freq [2447]  offset [2400] 
[   30.132000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   30.140000] mt7615_apply_dpd() : reload Central CH [9] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
[   30.160000] MtCmdGetTXDPDCalResult:(ret = 0)
[   30.168000] MtCmdChannelSwitch: control_chl = 9,control_ch2=0, central_chl = 9 DBDCIdx= 0, Band= 0 
[   30.188000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   30.424000] mt7615_apply_dcoc() : reload Central CH [10] BW [0] from cetral freq [2467]  offset [2500] 
[   30.440000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   30.448000] mt7615_apply_dpd() : reload Central CH [10] BW [0] from cetral freq [2462] i[46] offset [4cd0] 
[   30.468000] MtCmdGetTXDPDCalResult:(ret = 0)
[   30.476000] MtCmdChannelSwitch: control_chl = 10,control_ch2=0, central_chl = 10 DBDCIdx= 0, Band= 0 
[   30.496000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   30.732000] mt7615_apply_dcoc() : reload Central CH [11] BW [0] from cetral freq [2467]  offset [2500] 
[   30.748000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   30.756000] mt7615_apply_dpd() : reload Central CH [11] BW [0] from cetral freq [2462] i[46] offset [4cd0] 
[   30.776000] MtCmdGetTXDPDCalResult:(ret = 0)
[   30.784000] MtCmdChannelSwitch: control_chl = 11,control_ch2=0, central_chl = 11 DBDCIdx= 0, Band= 0 
[   30.804000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   31.040000] ====================================================================
[   31.052000] Channel   1 : Busy Time =   2279, Skip Channel = FALSE, BwCap = TRUE
[   31.068000] Channel   2 : Busy Time =     14, Skip Channel = FALSE, BwCap = TRUE
[   31.084000] Channel   3 : Busy Time =   6174, Skip Channel = FALSE, BwCap = TRUE
[   31.096000] Channel   4 : Busy Time =   1496, Skip Channel = FALSE, BwCap = TRUE
[   31.112000] Channel   5 : Busy Time =   3980, Skip Channel = FALSE, BwCap = TRUE
[   31.128000] Channel   6 : Busy Time =   2663, Skip Channel = FALSE, BwCap = TRUE
[   31.140000] Channel   7 : Busy Time =   6730, Skip Channel = FALSE, BwCap = TRUE
[   31.156000] Channel   8 : Busy Time =   8393, Skip Channel = FALSE, BwCap = TRUE
[   31.172000] Channel   9 : Busy Time =   4785, Skip Channel = FALSE, BwCap = TRUE
[   31.184000] Channel  10 : Busy Time =   3404, Skip Channel = FALSE, BwCap = TRUE
[   31.200000] Channel  11 : Busy Time =   8515, Skip Channel = FALSE, BwCap = TRUE
[   31.216000] ====================================================================
[   31.232000] Rule 3 Channel Busy time value : Select Primary Channel 2 
[   31.244000] Rule 3 Channel Busy time value : Min Channel Busy = 14
[   31.256000] Rule 3 Channel Busy time value : BW = 20
[   31.264000]  AutoChSelUpdateChannel(): Update channel for wdev0 for this band PhyMode = 49,Channel = 36  
[   31.288000]  AutoChSelUpdateChannel(): Update channel for wdev1 for this band PhyMode = 49,Channel = 36  
[   31.308000]  AutoChSelUpdateChannel(): Update channel for wdev2 for this band PhyMode = 49,Channel = 36  
[   31.328000]  AutoChSelUpdateChannel(): Update channel for wdev3 for this band PhyMode = 49,Channel = 36  
[   31.348000]  AutoChSelUpdateChannel(): Update channel for wdev4 for this band PhyMode = 14,Channel = 2  
[   31.368000]  AutoChSelUpdateChannel(): Update channel for wdev5 for this band PhyMode = 14,Channel = 2  
[   31.388000]  AutoChSelUpdateChannel(): Update channel for wdev6 for this band PhyMode = 14,Channel = 2  
[   31.408000]  AutoChSelUpdateChannel(): Update channel for wdev7 for this band PhyMode = 14,Channel = 2  
[   31.428000] ApAutoChannelAtBootUp<-----------------
[   31.440000] WifiSysOpen(), wdev idx = 0
[   31.448000] wdev_attr_update(): wdevId0 = 34:76:c5:9b:a0:b1
[   31.456000] MtCmdSetDbdcCtrl:(ret = 0)
[   31.468000] Current Channel is 36. DfsZeroWaitSupport=0
[   31.476000] MtAsicSetChBusyStat(842): Not support for HIF_MT yet!
[   31.488000] MtAsicSetChBusyStat(842): Not support for HIF_MT yet!
[   31.500000] [PMF]APPMFInit:: apidx=0, MFPC=0, MFPR=0, SHA256=0
[   31.512000] [PMF]WPAMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
[   31.524000] HcUpdatePhyMode(): Update PhyMode for all wdev for this band PhyMode:49,Channel=36
[   31.544000] CountryCode(2.4G/5G)=1/1, RFIC=25, PHY mode(2.4G/5G)=14/49, support 32 channels
[   31.560000] wtc_acquire_groupkey_wcid: Found a non-occupied wtbl_idx:127 for WDEV_TYPE:1
[   31.560000]  LinkToOmacIdx = 0, LinkToWdevType = 1
[   31.588000] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO),                 CmdBssInfoBmcRate.u2BcTransmit= 8192,                 CmdBssInfoBmcRate.u2McTransmit = 8192
[   31.620000] MtCmdSetDbdcCtrl:(ret = 0)
[   31.720000] [RadarStateCheck]Set into RD_NORMAL_MODE
[   31.728000] MtCmdTxPowerSKUCtrl: fgTxPowerSKUEn: 1, BandIdx: 1
[   31.740000] MtCmdTxPowerPercentCtrl: fgTxPowerPercentEn: 1, BandIdx: 1
[   31.752000] MtCmdTxBfBackoffCtrl: fgTxBFBackoffEn: 0, BandIdx: 1
[   31.764000] mt7615_bbp_adjust():rf_bw=2, ext_ch=1, PrimCh=36, HT-CentCh=38, VHT-CentCh=42
[   31.784000] mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
[   31.800000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   31.808000] mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
[   31.828000] MtCmdGetTXDPDCalResult:(ret = 0)
[   31.836000] MtCmdChannelSwitch: control_chl = 36,control_ch2=0, central_chl = 42 DBDCIdx= 1, Band= 0 
[   31.856000] BW = 2,TXStream = 2, RXStream = 2, scan(0)
[   31.916000] ap_phy_rrm_init_byRf(): AP Set CentralFreq at 42(Prim=36, HT-CentCh=38, VHT-CentCh=42, BBP_BW=2)
[   31.948000] [WrapDfsRadarDetectStart]: Band0Ch is 36[WrapDfsRadarDetectStart]: Band1Ch is 0LeadTimeForBcn, OmacIdx = 0, WDEV_WITH_BCN_ABILITY
[   31.972000] MtAsicSetRalinkBurstMode(2595): Not support for HIF_MT yet!
[   31.984000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[   31.996000] MtAsicSetTxPreamble(2574): Not support for HIF_MT yet!
[   32.008000] Main bssid = 34:76:c5:9b:a0:b1
[   32.028000] AsicRadioOnOffCtrl(): DbdcIdx=1 RadioOn
[   32.040000] MtCmdSetMacTxRx:(ret = 0)
[   32.048000] MtCmdSetMacTxRx:(ret = 0)
[   32.052000] fdb_enable()
[   32.356000] MCS Set = ff ff 00 00 01
[   32.364000] <==== mt_wifi_init, Status=0
[   32.372000] MtCmdEDCCACtrl: BandIdx: 0, EDCCACtrl: 1 
[   32.384000] MtCmdEDCCACtrl: BandIdx: 1, EDCCACtrl: 1 
[   32.412000] WtcSetMaxStaNum: MaxStaNum:84, BssidNum:8, WdsNum:0, ApcliNum:2, MaxNumChipRept:32, MinMcastWcid:118
[   32.480000] red_is_enabled: set CR4/N9 RED Enable to 1.
[   32.492000] cp_support_is_enabled: set CR4 CP_SUPPORT to Mode 2.
[   32.504000] Correct apidx from 7 to 0 for WscUUIDInit
[   32.512000] Generate UUID for apidx(0)
[   32.520000] first MBSSID is 34 76 c5 9b a0 b0
[   32.528000] UUID: c23b3558, len = 16
[   32.536000] 0x0000 : bc 32 9e 00 1d d8 11 b2 86 01 34 76 c5 9b a0 b0 
[   32.548000] 
[   32.936000] :MtCmdPktBudgetCtrl: bssid(255),wcid(65535),type(0)
[   33.016000] device rai0 entered promiscuous mode
[   33.028000] br-lan: port 3(rai0) entered forwarding state
[   33.036000] br-lan: port 3(rai0) entered forwarding state
[   33.572000] Device Instance
[   33.576000]  WDEV 00:
                Name:rai0
[   33.584000]          Wdev(list) Idx:0
[   33.588000]           Idx:8
[   33.592000]  WDEV 01:
                Name:rai1
[   33.600000]          Wdev(list) Idx:1
[   33.608000]           Idx:9
[   33.612000]  WDEV 02:
                Name:rai2
[   33.616000]          Wdev(list) Idx:2
[   33.624000]           Idx:10
[   33.628000]  WDEV 03:
                Name:rai3
[   33.636000]          Wdev(list) Idx:3
[   33.640000]           Idx:11
[   33.644000]  WDEV 04:
                Name:ra0
[   33.652000]          Wdev(list) Idx:4
[   33.660000]           Idx:12
[   33.664000]  WDEV 05:
                Name:ra1
[   33.668000]          Wdev(list) Idx:5
[   33.676000]           Idx:13
[   33.680000]  WDEV 06:
                Name:ra2
[   33.688000]          Wdev(list) Idx:6
[   33.692000]           Idx:14
[   33.696000]  WDEV 07:
                Name:ra3
[   33.704000]          Wdev(list) Idx:7
[   33.712000]           Idx:15
[   33.716000]  WDEV 08:
                Name:apclii0
[   33.724000]          Wdev(list) Idx:8
[   33.728000]           Idx:16
[   33.732000]  WDEV 09:
                Name:apcli0
[   33.740000]          Wdev(list) Idx:9
[   33.748000]           Idx:17
[   33.752000]  WDEV 10:
[   33.756000]  WDEV 11:
[   33.760000]  WDEV 12:
[   33.764000]  WDEV 13:
[   33.768000]  WDEV 14:
[   33.772000]  WDEV 15:
[   33.780000]  WDEV 16:
[   33.784000]  WDEV 17:
[   35.040000] br-lan: port 3(rai0) entered forwarding state
[   35.440000] WifiSysOpen(), wdev idx = 4
[   35.448000] wdev_attr_update(): wdevId4 = 34:76:c5:9b:a0:b0
[   35.460000] MtCmdSetDbdcCtrl:(ret = 0)
[   35.468000] [PMF]APPMFInit:: apidx=4, MFPC=0, MFPR=0, SHA256=0
[   35.480000] [PMF]WPAMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
[   35.492000] HcUpdatePhyMode(): Update PhyMode for all wdev for this band PhyMode:14,Channel=2
[   35.512000] CountryCode(2.4G/5G)=1/1, RFIC=25, PHY mode(2.4G/5G)=14/49, support 32 channels
[   35.528000] wtc_acquire_groupkey_wcid: Found a non-occupied wtbl_idx:126 for WDEV_TYPE:1
[   35.528000]  LinkToOmacIdx = 14, LinkToWdevType = 1
[   35.556000] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO),                 CmdBssInfoBmcRate.u2BcTransmit= 0,                 CmdBssInfoBmcRate.u2McTransmit = 0
[   35.588000] MtCmdSetDbdcCtrl:(ret = 0)
[   35.704000] [RadarStateCheck]Set into RD_NORMAL_MODE
[   35.712000] MtCmdTxPowerSKUCtrl: fgTxPowerSKUEn: 1, BandIdx: 0
[   35.724000] MtCmdTxPowerPercentCtrl: fgTxPowerPercentEn: 1, BandIdx: 0
[   35.736000] MtCmdTxBfBackoffCtrl: fgTxBFBackoffEn: 0, BandIdx: 0
[   35.748000] mt7615_bbp_adjust():rf_bw=1, ext_ch=1, PrimCh=2, HT-CentCh=4, VHT-CentCh=42
[   35.764000] mt7615_apply_dcoc() : reload Central CH [4] BW [1] from cetral freq [2432]  offset [2300] 
[   35.784000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   35.792000] mt7615_apply_dpd() : reload Central CH [4] BW [1] from cetral freq [2422] i[44] offset [4b20] 
[   35.812000] MtCmdGetTXDPDCalResult:(ret = 0)
[   35.820000] MtCmdChannelSwitch: control_chl = 2,control_ch2=0, central_chl = 4 DBDCIdx= 0, Band= 0 
[   35.840000] BW = 1,TXStream = 2, RXStream = 2, scan(0)
[   35.896000] ap_phy_rrm_init_byRf(): AP Set CentralFreq at 4(Prim=2, HT-CentCh=4, VHT-CentCh=42, BBP_BW=1)
[   35.928000] LeadTimeForBcn, OmacIdx = 14, WDEV_WITH_BCN_ABILITY
[   35.940000] Generate UUID for apidx(4)
[   35.948000] first MBSSID is 34 76 c5 9b a0 b0
[   35.960000] UUID: c23c11d8, len = 16
[   35.964000] 0x0000 : bc 32 9e 00 1d d8 11 b2 86 01 34 76 c5 9b a0 b0 
[   35.980000] 
start daemon 
[   36.296000] device ra0 entered promiscuous mode
[   36.304000] br-lan: port 4(ra0) entered forwarding state
[   36.316000] br-lan: port 4(ra0) entered forwarding state
[   36.464000] led=8, on=0, off=4000, blinks,=0, reset=0, time=1 low_trigger=1
[   36.560000] led=8, on=0, off=4000, blinks,=0, reset=0, time=1 low_trigger=0
[   36.648000] led=8, on=0, off=4000, blinks,=0, reset=0, time=1 low_trigger=1
[   36.696000] Device Instance
[   36.700000]  WDEV 00:
                Name:rai0
[   36.708000]          Wdev(list) Idx:0
[   36.716000]           Idx:8
[   36.720000]  WDEV 01:
                Name:rai1
[   36.728000]          Wdev(list) Idx:1
[   36.732000]           Idx:9
[   36.736000]  WDEV 02:
                Name:rai2
[   36.744000]          Wdev(list) Idx:2
[   36.748000]           Idx:10
[   36.756000]  WDEV 03:
                Name:rai3
[   36.760000]          Wdev(list) Idx:3
[   36.768000]           Idx:11
[   36.772000]  WDEV 04:
                Name:ra0
[   36.780000]          Wdev(list) Idx:4
[   36.784000]           Idx:12
[   36.788000]  WDEV 05:
                Name:ra1
[   36.796000]          Wdev(list) Idx:5
[   36.800000]           Idx:13
[   36.808000]  WDEV 06:
                Name:ra2
[   36.812000]          Wdev(list) Idx:6
[   36.820000]           Idx:14
[   36.824000]  WDEV 07:
                Name:ra3
[   36.832000]          Wdev(list) Idx:7
[   36.836000]           Idx:15
[   36.840000]  WDEV 08:
                Name:apclii0
[   36.848000]          Wdev(list) Idx:8
[   36.856000]           Idx:16
[   36.860000]  WDEV 09:
                Name:apcli0
[   36.868000]          Wdev(list) Idx:9
[   36.872000]           Idx:17
[   36.876000]  WDEV 10:
[   36.880000]  WDEV 11:
[   36.888000]  WDEV 12:
[   36.892000]  WDEV 13:
[   36.896000]  WDEV 14:
[   36.900000]  WDEV 15:
[   36.904000]  WDEV 16:
[   36.908000]  WDEV 17:
procd: - init complete -
[   38.320000] br-lan: port 4(ra0) entered forwarding state
switch_val: 1
ifce_automode: 
wan_link_stat: 0
[   48.176000] led=9, on=4000, off=0, blinks,=0, reset=0, time=1 low_trigger=0

firmware update log

### DO NOT set cfgapply ###
### Checksum is the same but commit does not change anything! Do nothing! ###
[  193.596000] led=9, on=1, off=1, blinks,=1, reset=0, time=4000 low_trigger=0
Unlocking firmware ...

Writing from /tmp/fw.bin to firmware ...     
Header checksum OK.
Data checksum OK
Unlocking persist ...
### Switch to bank 1 on next boot! ###
procd: - shutdown -
[  200.976000] eth1: ===> VirtualIF_close
[  201.912000] br-lan: port 3(ra0) entered disabled state
[  201.920000] br-lan: port 2(rai0) entered disabled state
[  201.932000] br-lan: port 1(eth0) entered disabled state
[  201.944000] device eth0 left promiscuous mode
[  201.952000] br-lan: port 1(eth0) entered disabled state
[  201.964000] ra2880stop()...Done
[  201.968000] eth1: ===> VirtualIF_close
[  201.980000] Free TX/RX Ring Memory!
[  201.988000] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[  202.000000] device ra0 left promiscuous mode
[  202.008000] br-lan: port 3(ra0) entered disabled state
[  202.016000] device rai0 left promiscuous mode
[  202.028000] br-lan: port 2(rai0) entered disabled state
[  203.560000] WifiSysClose(), wdev idx = 0
[  203.576000] WifiSysGetBssInfoState(): BssInfoIdx 0 not found!!!
[  203.588000] WifiSysUpdateBssInfoState(): BssInfoIdx 0 not found!!!
[  204.892000] Device Instance
[  204.900000]  WDEV 00:
                Name:rai0
[  204.904000]          Wdev(list) Idx:0
[  204.912000]           Idx:8
[  204.916000]  WDEV 01:
                Name:rai1
[  204.924000]          Wdev(list) Idx:1
[  204.928000]           Idx:9
[  204.932000]  WDEV 02:
                Name:rai2
[  204.940000]          Wdev(list) Idx:2
[  204.944000]           Idx:10
[  204.948000]  WDEV 03:
                Name:rai3
[  204.956000]          Wdev(list) Idx:3
[  204.964000]           Idx:11
[  204.968000]  WDEV 04:
                Name:ra0
[  204.972000]          Wdev(list) Idx:4
[  204.980000]           Idx:12
[  204.984000]  WDEV 05:
                Name:ra1
[  204.992000]          Wdev(list) Idx:5
[  204.996000]           Idx:13
[  205.000000]  WDEV 06:
                Name:ra2
[  205.008000]          Wdev(list) Idx:6
[  205.016000]           Idx:14
[  205.020000]  WDEV 07:
                Name:ra3
[  205.024000]          Wdev(list) Idx:7
[  205.032000]           Idx:15
[  205.036000]  WDEV 08:
                Name:apclii0
[  205.044000]          Wdev(list) Idx:8
[  205.048000]           Idx:16
[  205.052000]  WDEV 09:
                Name:apcli0
[  205.060000]          Wdev(list) Idx:9
[  205.068000]           Idx:17
[  205.072000]  WDEV 10:
[  205.076000]  WDEV 11:
[  205.080000]  WDEV 12:
[  205.084000]  WDEV 13:
[  205.088000]  WDEV 14:
[  205.096000]  WDEV 15:
[  205.100000]  WDEV 16:
[  205.104000]  WDEV 17:
[  205.112000] WifiSysClose(), wdev idx = 4
[  205.112000] WifiSysGetBssInfoState(): BssInfoIdx 1 not found!!!
[  205.112000] WifiSysUpdateBssInfoState(): BssInfoIdx 1 not found!!!
[  205.144000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[  205.156000] WifiSysClose(), wdev idx = 0
[  205.164000] WifiSysClose(), wdev idx = 1
[  205.172000] WifiSysClose(), wdev idx = 2
[  205.180000] WifiSysClose(), wdev idx = 3
[  205.212000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[  205.224000] WifiSysClose(), wdev idx = 4
[  205.232000] WifiSysClose(), wdev idx = 5
[  205.240000] WifiSysClose(), wdev idx = 6
[  205.248000] WifiSysClose(), wdev idx = 7
[  205.260000] kill LoopBackTxTask task failed!
[  205.272000] AndesRestartCheck: Current TOP_MISC2(0x7)
[  205.324000] CmdReStartDLRsp: Status Success!, Status(0)
[  205.336000] EventExtEventHandler: Unknown Ext Event(6f)
[  205.348000] AndesRestartCheck:  TOP_MISC2(1)
[  205.356000] RT28xxPciAsicRadioOff(): Not support for HIF_MT yet!
[  205.368000] RTMPDrvClose call RT28xxPciAsicRadioOff fail !!
[  205.380000] tx_kickout_fail_count = 0
[  205.384000] tx_timeout_fail_count = 0
[  205.392000] rx_receive_fail_count = 0
[  205.400000] alloc_cmd_msg = 1747
[  205.408000] free_cmd_msg = 1747
[  205.416000] cut_through_token_list_destroy(): 85854208,85854208
[  205.428000] cut_through_token_list_destroy(): 85854218,85854218
[  205.444000] FwOwn()::Set Fw Own
[  205.452000] RTMP_AllTimerListRelease: Size=0
[  205.464000] FwOwn()::Return since already in Fw Own...
[  205.472000] <---HwCtrlThread
procd: - reboot [  205.612000] Stopped WatchDog Timer.
-
[  205.620000] Restarting system.

WN-DX1167R stock -> OpenWrt(仮2)

メインのブログで書いた通りユーザーが手動で編集することにしていた bootnum, debugflag 2つのflagを、sysupgrade関連のスクリプト内に押し込んで自動的に設定されるよう変更したもの。
stock firmwareが1番目のOSイメージ領域からブートしている状態と、2番目からの場合の2例を掲載。

stock: bootnum=1

  • 1番目のOSイメージでstock firmwareがブートしている状態からスタート
  • OpenWrtのinitramfs-factoryは2番目のOSイメージ領域に書き込まれブートされる
  • 415 – 417行目でbootnumとdebugflagをチェック、bootnumを1に設定しdebugflagを有効化
  • 504行目でZ-Loaderの中断が可能になる (debugflag)
  • 506行目で1番目のOSイメージ領域からブートしている旨が表示される
[  249.812000] led=9, on=1, off=1, blinks,=1, reset=0, time=4000 low_trigger=0
Unlocking firmware_2 ...

Writing from /tmp/fw.bin to firmware_2 ...     
Header checksum OK.
Data checksum OK
Unlocking persist ...
### Switch to bank 2 on next boot! ###
procd: - shutdown -
[  255.428000] br-lan: port 4(ra0) entered disabled state
[  255.436000] br-lan: port 3(rai0) entered disabled state
[  255.448000] br-lan: port 2(eth1) entered disabled state
[  255.460000] br-lan: port 1(eth0) entered disabled state
[  255.472000] device eth0 left promiscuous mode
[  255.480000] br-lan: port 1(eth0) entered disabled state
[  255.492000] ra2880stop()...Done
[  255.496000] eth1: ===> VirtualIF_close
[  255.504000] Free TX/RX Ring Memory!
[  255.512000] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[  255.528000] device eth1 left promiscuous mode
[  255.536000] br-lan: port 2(eth1) entered disabled state
[  255.544000] eth1: ===> VirtualIF_close
[  255.556000] device ra0 left promiscuous mode
[  255.564000] br-lan: port 4(ra0) entered disabled state
[  255.572000] device rai0 left promiscuous mode
[  255.584000] br-lan: port 3(rai0) entered disabled state
[  257.032000] WifiSysClose(), wdev idx = 0
[  257.048000] WifiSysGetBssInfoState(): BssInfoIdx 0 not found!!!
[  257.060000] WifiSysUpdateBssInfoState(): BssInfoIdx 0 not found!!!
### ap ###
[  258.552000] Device Instance
[  258.560000]  WDEV 00:
                Name:rai0
[  258.564000]          Wdev(list) Idx:0
[  258.572000]           Idx:8
[  258.576000]  WDEV 01:
                Name:rai1
[  258.584000]          Wdev(list) Idx:1
[  258.588000]           Idx:9
[  258.592000]  WDEV 02:
                Name:rai2
[  258.600000]          Wdev(list) Idx:2
[  258.608000]           Idx:10
[  258.612000]  WDEV 03:
                Name:rai3
[  258.616000]          Wdev(list) Idx:3
[  258.624000]           Idx:11
[  258.628000]  WDEV 04:
                Name:ra0
[  258.636000]          Wdev(list) Idx:4
[  258.640000]           Idx:12
[  258.644000]  WDEV 05:
                Name:ra1
[  258.652000]          Wdev(list) Idx:5
[  258.660000]           Idx:13
[  258.664000]  WDEV 06:
                Name:ra2
[  258.668000]          Wdev(list) Idx:6
[  258.676000]           Idx:14
[  258.680000]  WDEV 07:
                Name:ra3
[  258.688000]          Wdev(list) Idx:7
[  258.692000]           Idx:15
[  258.696000]  WDEV 08:
                Name:apclii0
[  258.704000]          Wdev(list) Idx:8
[  258.712000]           Idx:16
[  258.716000]  WDEV 09:
                Name:apcli0
[  258.724000]          Wdev(list) Idx:9
[  258.728000]           Idx:17
[  258.732000]  WDEV 10:
[  258.736000]  WDEV 11:
[  258.744000]  WDEV 12:
[  258.748000]  WDEV 13:
[  258.752000]  WDEV 14:
[  258.756000]  WDEV 15:
[  258.760000]  WDEV 16:
[  258.764000]  WDEV 17:
[  258.776000] WifiSysClose(), wdev idx = 4
[  258.788000] WifiSysGetBssInfoState(): BssInfoIdx 1 not found!!!
[  258.800000] WifiSysUpdateBssInfoState(): BssInfoIdx 1 not found!!!
[  258.812000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[  258.828000] WifiSysClose(), wdev idx = 0
[  258.832000] WifiSysClose(), wdev idx = 1
[  258.840000] WifiSysClose(), wdev idx = 2
[  258.848000] WifiSysClose(), wdev idx = 3
[  258.884000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[  258.896000] WifiSysClose(), wdev idx = 4
[  258.904000] WifiSysClose(), wdev idx = 5
[  258.912000] WifiSysClose(), wdev idx = 6
[  258.920000] WifiSysClose(), wdev idx = 7
[  258.928000] kill LoopBackTxTask task failed!
[  258.940000] AndesRestartCheck: Current TOP_MISC2(0x7)
[  258.996000] CmdReStartDLRsp: Status Success!, Status(0)
[  259.004000] AndesRestartCheck:  TOP_MISC2(1)
[  259.016000] RT28xxPciAsicRadioOff(): Not support for HIF_MT yet!
[  259.028000] RTMPDrvClose call RT28xxPciAsicRadioOff fail !!
[  259.036000] tx_kickout_fail_count = 0
[  259.044000] tx_timeout_fail_count = 0
[  259.052000] rx_receive_fail_count = 0
[  259.060000] alloc_cmd_msg = 1848
[  259.064000] free_cmd_msg = 1848
[  259.072000] cut_through_token_list_destroy(): 86231888,86231888
[  259.088000] cut_through_token_list_destroy(): 86231898,86231898
[  259.104000] FwOwn()::Set Fw Own
[  259.112000] RTMP_AllTimerListRelease: Size=0
[  259.120000] FwOwn()::Return since already in Fw Own...
[  259.132000] <---HwCtrlThread
procd: - reboot [  259.268000] Stopped WatchDog Timer.
-
[  259.284000] Restarting system.


U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..
Checking image 2...
   Image Name:   3.10(XIK.1)b7
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    5642640 Bytes =  5.4 MB
   Load Address: 80001000
   Entry Point:  80001000
.......................................................................................   Verifying Combo Checksum ... .......................................................................................## Booting image at bf700000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...

[    0.000000] Linux version 4.14.111 (musashino205@Taiha.Net) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+9901-29b3122f32)) #0 SMP Fri Apr 19 18:38:16 2019
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is I-O DATA WN-DX1167R
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x90/0x4a4 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu @81110000 s26192 r8192 d22960 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00001001
[    0.000000] Readback ErrCtl register=00001001
[    0.000000] Memory: 119764K/131072K available (4497K kernel code, 230K rwdata, 1000K rodata, 3860K init, 248K bss, 11308K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] CPU Clock: 880MHz
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.015488] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.087817] pid_max: default: 32768 minimum: 301
[    0.097126] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.110147] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.125864] Hierarchical SRCU implementation.
[    0.135320] smp: Bringing up secondary CPUs ...
[    0.144858] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.144867] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.144879] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.145013] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.204699] Synchronize counters for CPU 1: done.
[    0.268617] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.268625] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.268632] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.268709] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.325525] Synchronize counters for CPU 2: done.
[    0.385688] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.385696] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.385704] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.385790] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.445094] Synchronize counters for CPU 3: done.
[    0.504697] smp: Brought up 1 node, 4 CPUs
[    0.516485] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.535955] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.548380] pinctrl core: initialized pinctrl subsystem
[    0.560001] NET: Registered protocol family 16
[    0.577896] pull PCIe RST: RALINK_RSTCTRL = 4000000
[    0.887882] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.897946] ***** Xtal 40MHz *****
[    0.904680] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.914883] Port 0 N_FTS = 1b102800
[    0.921784] Port 1 N_FTS = 1b105000
[    0.928709] Port 2 N_FTS = 1b102800
[    2.087355] PCIE0 no card, disable it(RST&CLK)
[    2.096042] PCIE2 no card, disable it(RST&CLK)
[    2.104845]  -> 20107f2
[    2.109695] PCIE1 enabled
[    2.114874] PCI host bridge /pcie@1e140000 ranges:
[    2.124402]  MEM 0x0000000060000000..0x000000006fffffff
[    2.134758]   IO 0x000000001e160000..0x000000001e16ffff
[    2.145126] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    2.167761] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.179069] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.190297] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.202912] PCI host bridge to bus 0000:00
[    2.210926] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    2.224585] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    2.236332] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    2.249806] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    2.266547] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.279567] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.293386] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.306866] pci 0000:00:00.0: BAR 1: assigned [mem 0x60100000-0x6010ffff]
[    2.320357] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    2.334876] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.344693] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.359393] clocksource: Switched to clocksource GIC
[    2.370552] NET: Registered protocol family 2
[    2.380001] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    2.393740] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    2.406345] TCP: Hash tables configured (established 1024 bind 1024)
[    2.419073] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.430573] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.443214] NET: Registered protocol family 1
[    5.829352] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    5.840537] Crashlog allocated RAM at address 0x3f00000
[    5.851106] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[    5.870961] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    5.882440] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    5.902557] random: fast init done
[    5.905526] io scheduler noop registered
[    5.916961] io scheduler deadline registered (default)
[    5.928091] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    5.941833] console [ttyS0] disabled
[    5.948844] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A
[    5.966853] console [ttyS0] enabled
[    5.966853] console [ttyS0] enabled
[    5.980605] bootconsole [early0] disabled
[    5.980605] bootconsole [early0] disabled
[    5.997174] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    6.010121] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    6.024144] Enable NFI Clock
[    6.029880] # MTK NAND # : Use HW ECC
[    6.037171] Device found in MTK table, ID: 1f1, EXT_ID: 801d01
[    6.048775] Support this Device in MTK table! 1f1 
[    6.058486] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    6.071352] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xf1
[    6.083992] nand: AMD/Spansion NAND 128MiB 3,3V 8-bit
[    6.094041] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    6.109116] Scanning device for bad blocks
[    6.398842] 12 fixed-partitions partitions found on MTD device MT7621-NAND
[    6.412529] Creating 12 MTD partitions on "MT7621-NAND":
[    6.423107] 0x000000000000-0x000000100000 : "Bootloader"
[    6.434753] 0x000000100000-0x000000200000 : "u-boot-env"
[    6.446365] 0x000000200000-0x000000300000 : "Factory"
[    6.457433] 0x000000300000-0x000000400000 : "SecondBoot"
[    6.469024] 0x000000400000-0x000000800000 : "kernel"
[    6.479999] 0x000000800000-0x000003600000 : "ubi"
[    6.490740] 0x000003600000-0x000003700000 : "Config"
[    6.501704] 0x000003700000-0x000006900000 : "firmware_2"
[    6.513661] 0x000006900000-0x000006a00000 : "Config_2"
[    6.524953] 0x000006a00000-0x000006b00000 : "persist"
[    6.536034] 0x000006b00000-0x000006c00000 : "idmkey"
[    6.546954] 0x000006c00000-0x000007f80000 : "Backup"
[    6.558005] [mtk_nand] probe successfully!
[    6.566889] Signature matched and data read!
[    6.575384] load_fact_bbt success 1023
[    6.583513] libphy: Fixed MDIO Bus: probed
[    6.661937] libphy: mdio: probed
[    8.079430] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    8.091976] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 19
[    8.110957] NET: Registered protocol family 10
[    8.121086] Segment Routing with IPv6
[    8.128441] NET: Registered protocol family 17
[    8.137379] 8021q: 802.1Q VLAN Support v1.8
[    8.148636] UBI error: no valid UBI magic found inside mtd5
[    8.159787] hctosys: unable to open rtc device (rtc0)
[    8.183994] Freeing unused kernel memory: 3860K
[    8.193046] This architecture does not have kernel memory protection.
[    8.217061] init: Console is alive
[    8.224187] init: - watchdog -
[    8.242011] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    8.259019] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    8.289673] init: - preinit -
[    8.455267] mtk_soc_eth 1e100000.ethernet: PPE started
[    8.477829] random: procd: uninitialized urandom read (4 bytes read)
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    9.309121] mtk_soc_eth 1e100000.ethernet eth0: port 0 link up
[    9.714606] mtk_soc_eth 1e100000.ethernet eth0: port 2 link up
[   11.592689] mtk_soc_eth 1e100000.ethernet: 0x100 = 0x6060000c, 0x10c = 0x80818
[   11.613930] procd: - early -
[   11.619824] procd: - watchdog -
[   12.249524] procd: - watchdog -
[   12.256078] procd: - ubus -
[   12.266330] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.319925] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.332951] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.346419] procd: - init -
Please press Enter to activate this console.
[   12.506500] kmodloader: loading kernel modules from /etc/modules.d/*
[   12.524664] nat46: module (version 683fbd2b765506332a1af141545652bf58f03166) loaded.
[   12.545421] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   12.565367] ip_tables: (C) 2000-2006 Netfilter Core Team
[   12.585498] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[   12.627961] Netfilter messages via NETLINK v0.30.
[   12.657603] xt_time: kernel timezone is -0000
[   12.673395] ctnetlink v0.93: registering with nfnetlink.
[   12.686049] PPP generic driver version 2.4.2
[   12.696300] NET: Registered protocol family 24
[   12.707853] kmodloader: done loading kernel modules from /etc/modules.d/*
[   13.793633] urandom_read: 5 callbacks suppressed
[   13.793645] random: jshn: uninitialized urandom read (4 bytes read)
[   35.564701] mtk_soc_eth 1e100000.ethernet: PPE started
[   35.581714] br-lan: port 1(eth0.1) entered blocking state
[   35.592593] br-lan: port 1(eth0.1) entered disabled state
[   35.604021] device eth0.1 entered promiscuous mode
[   35.613640] device eth0 entered promiscuous mode
[   35.632768] br-lan: port 1(eth0.1) entered blocking state
[   35.643621] br-lan: port 1(eth0.1) entered forwarding state
[   35.655287] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   36.014320] random: crng init done
[   36.590171] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready



BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+9901-29b3122f32
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# sysupgrade https://taiha.net/jenkins/job/OpenWrt-master-IODATA-W
N-DX1167R/lastSuccessfulBuild/artifact/bin/targets/ramips/mt7621/openwrt-ramips-
mt7621-iodata_wn-dx1167r-squashfs-sysupgrade.bin
--2019-04-20 01:25:46--  https://taiha.net/jenkins/job/OpenWrt-master-IODATA-WN-DX1167R/lastSuccessfulBuild/artifact/bin/targets/ramips/mt7621/openwrt-ramips-mt7621-iodata_wn-dx1167r-squashfs-sysupgrade.bin
Resolving taiha.net... 240b:12:500:65f0:c822:64a3:7e11:4961, 49.129.167.30
Connecting to taiha.net|240b:12:500:65f0:c822:64a3:7e11:4961|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 5888778 (5.6M) [application/octet-stream]
Saving to: '/tmp/sysupgrade.img'

/tmp/sysupgrade.img 100%[===================>]   5.62M  3.07MB/s    in 1.8s    

2019-04-20 01:25:48 (3.07 MB/s) - '/tmp/sysupgrade.img' saved [5888778/5888778]

Cannot save config while running from ramdisk.
Commencing upgrade. Closing all shell sessions.
Watchdog handover: fd=3
- watchdog -
killall: telnetd: no process killed
Sending TERM to remaining processes ... netifd odhcpd uhttpd nlbwmon sh sleep ntpd vnstatd dnsmasq ubusd logd rpcd 
Sending KILL to remaining processes ... 
Performing system upgrade...
current: bootnum => 2, debugflag => 0
### switch to 1st os-image on next boot ###
### enable debug ###
Unlocking kernel ...

Writing from  to kernel ...     
[  149.236208] ubi0: attaching mtd5
[  149.480801] ubi0: scanning is finished
[  149.488318] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  149.502827] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd5, error -22
ubiattach: error!: cannot attach mtd5
           error 22 (Invalid argument)
ubiformat: mtd5 (nand), size 48234496 bytes (46.0 MiB), 368 eraseblocks of 131072 bytes (128.0 KiB), min. I/O size 2048 bytes
libscan: scanning eraseblock 367 -- 100 % complete  
ubiformat: 327 eraseblocks are supposedly empty
ubiformat: warning!: 41 of 368 eraseblocks contain non-UBI data
ubiformat: warning!: only 0 of 368 eraseblocks have valid erase counter
ubiformat: erase counter 0 will be used for all eraseblocks
ubiformat: note, arbitrary erase counter value may be specified using -e option
ubiformat: use erase counter 0 for all eraseblocks
ubiformat: formatting eraseblock 317 -- 86 % complet[  155.968118] ubi0: attaching mtd5
ubiformat: f[  156.404597] ubi0: scanning is finished  
ubiformat: formatting eraseblock 363 -- 98 % complet[  156.427486] ubi0: attached mtd5 (name "ubi", size 46 MiB)
ubiformat: f[  156.439973] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ormatting eraseb[  156.456384] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
lock 364 -- 99 %[  156.472637] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubif[  156.489233] ubi0: good PEBs: 368, bad PEBs: 0, corrupted PEBs: 0
ormat: formattin[  156.503931] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 128
g eraseblock 365[  156.521043] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 539701386
 -- 99 % complet[  156.541789] ubi0: available PEBs: 344, total reserved PEBs: 24, PEBs reserved for bad PEB handling: 20
ubiformat: f[  156.563066] ubi0: background thread "ubi_bgt0d" started, PID 2215
ubiformat: formatting eraseblock 367 -- 100 % complete  
UBI device number 0, total 368 LEBs (46727168 bytes, 44.5 MiB), available 344 LEBs (43679744 bytes, 41.6 MiB), LEB size 126976 bytes (124.0 KiB)
Volume ID 0, size 32 LEBs (4063232 bytes, 3.8 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs", alignment 1
Set volume size to 39616512
Volume ID 1, size 312 LEBs (39616512 bytes, 37.7 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs_data", alignment 1
sysupgrade successful
umount: can't unmount /dev: Resource busy
umount: can't unmount /tmp: Resource busy
umount: can't unmount /: Invalid argument
[  158.599742] reboot: Restarting system


U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..Hit ESC key to stop autoboot: 1

Checking image 1...
   Image Name:   MIPS OpenWrt Linux-4.14.
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1905343 Bytes =  1.8 MB
   Load Address: 80001000
   Entry Point:  80001000
..............................   Verifying Checksum ... ## Booting image at bc400000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...

[    0.000000] Linux version 4.14.111 (musashino205@Taiha.Net) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+9901-29b3122f32)) #0 SMP Fri Apr 19 18:38:16 2019
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is I-O DATA WN-DX1167R
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x90/0x4a4 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu @81110000 s26192 r8192 d22960 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00001000
[    0.000000] Readback ErrCtl register=00001000
[    0.000000] Memory: 123412K/131072K available (4497K kernel code, 230K rwdata, 1000K rodata, 212K init, 248K bss, 7660K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] CPU Clock: 880MHz
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.015488] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.087817] pid_max: default: 32768 minimum: 301
[    0.097126] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.110146] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.125865] Hierarchical SRCU implementation.
[    0.135322] smp: Bringing up secondary CPUs ...
[    0.157179] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.157188] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.157199] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.157334] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.204698] Synchronize counters for CPU 1: done.
[    0.280941] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.280949] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.280956] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.281032] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.325530] Synchronize counters for CPU 2: done.
[    0.398014] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.398022] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.398030] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.398117] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.445099] Synchronize counters for CPU 3: done.
[    0.504703] smp: Brought up 1 node, 4 CPUs
[    0.516485] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.535955] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.548382] pinctrl core: initialized pinctrl subsystem
[    0.559933] NET: Registered protocol family 16
[    0.577505] pull PCIe RST: RALINK_RSTCTRL = 4000000
[    0.887491] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.897554] ***** Xtal 40MHz *****
[    0.904288] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.914491] Port 0 N_FTS = 1b102800
[    0.921393] Port 1 N_FTS = 1b105000
[    0.928317] Port 2 N_FTS = 1b102800
[    2.086971] PCIE0 no card, disable it(RST&CLK)
[    2.095659] PCIE2 no card, disable it(RST&CLK)
[    2.104462]  -> 20107f2
[    2.109312] PCIE1 enabled
[    2.114491] PCI host bridge /pcie@1e140000 ranges:
[    2.124019]  MEM 0x0000000060000000..0x000000006fffffff
[    2.134375]   IO 0x000000001e160000..0x000000001e16ffff
[    2.144743] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    2.167366] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.178636] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.189838] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.202268] PCI host bridge to bus 0000:00
[    2.210286] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    2.223959] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    2.235687] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    2.249187] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    2.266052] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.279096] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.292905] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.306379] pci 0000:00:00.0: BAR 1: assigned [mem 0x60100000-0x6010ffff]
[    2.319877] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    2.334380] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.344200] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.359032] clocksource: Switched to clocksource GIC
[    2.370341] NET: Registered protocol family 2
[    2.379576] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    2.393317] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    2.405923] TCP: Hash tables configured (established 1024 bind 1024)
[    2.418647] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.430155] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.442799] NET: Registered protocol family 1
[    2.688982] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    2.700354] Crashlog allocated RAM at address 0x3f00000
[    2.710851] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[    2.730813] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    2.742294] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    2.762256] random: fast init done
[    2.765242] io scheduler noop registered
[    2.776727] io scheduler deadline registered (default)
[    2.787775] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    2.801657] console [ttyS0] disabled
[    2.808665] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A
[    2.826694] console [ttyS0] enabled
[    2.826694] console [ttyS0] enabled
[    2.840436] bootconsole [early0] disabled
[    2.840436] bootconsole [early0] disabled
[    2.857092] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    2.870071] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    2.884106] Enable NFI Clock
[    2.889844] # MTK NAND # : Use HW ECC
[    2.897135] Device found in MTK table, ID: 1f1, EXT_ID: 801d01
[    2.908743] Support this Device in MTK table! 1f1 
[    2.918458] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    2.931327] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xf1
[    2.943972] nand: AMD/Spansion NAND 128MiB 3,3V 8-bit
[    2.954025] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    2.969106] Scanning device for bad blocks
[    3.258898] 12 fixed-partitions partitions found on MTD device MT7621-NAND
[    3.272584] Creating 12 MTD partitions on "MT7621-NAND":
[    3.283166] 0x000000000000-0x000000100000 : "Bootloader"
[    3.294684] 0x000000100000-0x000000200000 : "u-boot-env"
[    3.306162] 0x000000200000-0x000000300000 : "Factory"
[    3.317093] 0x000000300000-0x000000400000 : "SecondBoot"
[    3.328545] 0x000000400000-0x000000800000 : "kernel"
[    3.339387] 0x000000800000-0x000003600000 : "ubi"
[    3.350032] 0x000003600000-0x000003700000 : "Config"
[    3.360791] 0x000003700000-0x000006900000 : "firmware_2"
[    3.372620] 0x000006900000-0x000006a00000 : "Config_2"
[    3.383745] 0x000006a00000-0x000006b00000 : "persist"
[    3.394669] 0x000006b00000-0x000006c00000 : "idmkey"
[    3.405445] 0x000006c00000-0x000007f80000 : "Backup"
[    3.416383] [mtk_nand] probe successfully!
[    3.425266] Signature matched and data read!
[    3.433761] load_fact_bbt success 1023
[    3.441842] libphy: Fixed MDIO Bus: probed
[    3.521593] libphy: mdio: probed
[    4.927628] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    4.940154] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 19
[    4.959228] NET: Registered protocol family 10
[    4.969483] Segment Routing with IPv6
[    4.976843] NET: Registered protocol family 17
[    4.985741] 8021q: 802.1Q VLAN Support v1.8
[    4.996937] UBI: auto-attach mtd5
[    5.003599] ubi0: attaching mtd5
[    5.437590] ubi0: scanning is finished
[    5.460295] ubi0: attached mtd5 (name "ubi", size 46 MiB)
[    5.471061] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    5.484742] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    5.498251] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    5.512110] ubi0: good PEBs: 368, bad PEBs: 0, corrupted PEBs: 0
[    5.524061] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[    5.538434] ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 539701386
[    5.556438] ubi0: available PEBs: 0, total reserved PEBs: 368, PEBs reserved for bad PEB handling: 20
[    5.574807] ubi0: background thread "ubi_bgt0d" started, PID 371
[    5.576428] block ubiblock0_0: created from ubi0:0(rootfs)
[    5.597689] ubiblock: device ubiblock0_0 (rootfs) set to be root filesystem
[    5.611558] hctosys: unable to open rtc device (rtc0)
[    5.628778] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    5.643534] Freeing unused kernel memory: 212K
[    5.652425] This architecture does not have kernel memory protection.
[    6.122265] init: Console is alive
[    6.129305] init: - watchdog -
[    6.168783] mtk_soc_eth 1e100000.ethernet eth0: port 0 link up
[    6.357869] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    6.485837] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    6.509320] init: - preinit -
[    7.328683] mtk_soc_eth 1e100000.ethernet: PPE started
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to [    7.405955] random: procd: uninitialized urandom read (4 bytes read)
select the debug level
[    8.371629] mtk_soc_eth 1e100000.ethernet eth0: port 2 link up
[   10.523665] UBIFS (ubi0:1): default file-system created
[   10.535531] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 448
[   10.648490] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data"
[   10.664101] UBIFS (ubi0:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[   10.683838] UBIFS (ubi0:1): FS size: 38346752 bytes (36 MiB, 302 LEBs), journal size 1904640 bytes (1 MiB, 15 LEBs)
[   10.704613] UBIFS (ubi0:1): reserved for root: 1811211 bytes (1768 KiB)
[   10.717783] UBIFS (ubi0:1): media format: w4/r0 (latest is w5/r0), UUID 7FB3E685-BC83-4CEC-B75E-984218747C31, small LPT model
[   10.743143] mount_root: overlay filesystem has not been fully initialized yet
[   10.757837] mount_root: switching to ubifs overlay
[   10.784973] urandom-seed: Seed file not found (/etc/urandom.seed)
[   10.862311] mtk_soc_eth 1e100000.ethernet: 0x100 = 0x6060000c, 0x10c = 0x80818
[   10.884080] procd: - early -
[   10.889995] procd: - watchdog -
[   11.519162] procd: - watchdog -
[   11.525724] procd: - ubus -
[   11.610131] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.694616] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.707749] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.721270] procd: - init -
Please press Enter to activate this console.
[   12.109668] kmodloader: loading kernel modules from /etc/modules.d/*
[   12.197687] nat46: module (version 683fbd2b765506332a1af141545652bf58f03166) loaded.
[   12.217478] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   12.235888] ip_tables: (C) 2000-2006 Netfilter Core Team
[   12.254124] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[   12.298491] Netfilter messages via NETLINK v0.30.
[   12.325272] xt_time: kernel timezone is -0000
[   12.340586] ctnetlink v0.93: registering with nfnetlink.
[   12.353220] PPP generic driver version 2.4.2
[   12.363368] NET: Registered protocol family 24
[   12.375649] kmodloader: done loading kernel modules from /etc/modules.d/*
[   13.634218] urandom_read: 5 callbacks suppressed
[   13.634230] random: jshn: uninitialized urandom read (4 bytes read)
[   31.774993] mtk_soc_eth 1e100000.ethernet: PPE started
[   31.814337] br-lan: port 1(eth0.1) entered blocking state
[   31.825186] br-lan: port 1(eth0.1) entered disabled state
[   31.836610] device eth0.1 entered promiscuous mode
[   31.846213] device eth0 entered promiscuous mode
[   31.859810] br-lan: port 1(eth0.1) entered blocking state
[   31.870640] br-lan: port 1(eth0.1) entered forwarding state
[   31.882301] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   32.207181] random: crng init done
[   32.809763] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready



BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+9901-29b3122f32
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# 

stock: bootnum=2

  • 2番目のOSイメージでstock firmwareがブートしている状態からスタート
  • OpenWrtのinitramfs-factoryは1番目のOSイメージ領域に書き込まれブートされる
  • 391行目でbootnumとdebugflagをチェック、bootnumは既に1なので392行目でdebugflagの有効化のみ実施
  • 479行目でZ-Loaderの中断が可能になる (debugflag)
  • 481行目で1番目のOSイメージ領域からブートしている旨が表示される
### DO NOT set cfgapply ###
cat: can't open 'remote_mgmt': No such file or directory
### Checksum is the same but commit does not change anything! Do nothing! ###
[  257.336000] led=9, on=1, off=1, blinks,=1, reset=0, time=4000 low_trigger=0
Unlocking firmware ...

Writing from /tmp/fw.bin to firmware ...     
Header checksum OK.
Data checksum OK
Unlocking persist ...
### Switch to bank 1 on next boot! ###
procd: - shutdown -
[  262.960000] br-lan: port 4(ra0) entered disabled state
[  262.968000] br-lan: port 3(rai0) entered disabled state
[  262.980000] br-lan: port 2(eth1) entered disabled state
[  262.988000] br-lan: port 1(eth0) entered disabled state
[  263.000000] device eth0 left promiscuous mode
[  263.012000] br-lan: port 1(eth0) entered disabled state
[  263.020000] ra2880stop()...Done
[  263.028000] eth1: ===> VirtualIF_close
[  263.036000] Free TX/RX Ring Memory!
[  263.044000] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[  263.060000] device eth1 left promiscuous mode
[  263.068000] br-lan: port 2(eth1) entered disabled state
[  263.080000] eth1: ===> VirtualIF_close
[  263.088000] device ra0 left promiscuous mode
[  263.096000] br-lan: port 4(ra0) entered disabled state
[  263.108000] device rai0 left promiscuous mode
[  263.116000] br-lan: port 3(rai0) entered disabled state
### ap ###
[  264.632000] WifiSysClose(), wdev idx = 0
[  264.648000] WifiSysGetBssInfoState(): BssInfoIdx 0 not found!!!
[  264.660000] WifiSysUpdateBssInfoState(): BssInfoIdx 0 not found!!!
[  265.980000] Device Instance
[  265.984000]  WDEV 00:
                Name:rai0
[  265.992000]          Wdev(list) Idx:0
[  266.000000]           Idx:9
[  266.004000]  WDEV 01:
                Name:rai1
[  266.008000]          Wdev(list) Idx:1
[  266.016000]           Idx:10
[  266.020000]  WDEV 02:
                Name:rai2
[  266.028000]          Wdev(list) Idx:2
[  266.032000]           Idx:11
[  266.040000]  WDEV 03:
                Name:rai3
[  266.044000]          Wdev(list) Idx:3
[  266.052000]           Idx:12
[  266.056000]  WDEV 04:
                Name:ra0
[  266.064000]          Wdev(list) Idx:4
[  266.068000]           Idx:13
[  266.072000]  WDEV 05:
                Name:ra1
[  266.080000]          Wdev(list) Idx:5
[  266.084000]           Idx:14
[  266.088000]  WDEV 06:
                Name:ra2
[  266.096000]          Wdev(list) Idx:6
[  266.104000]           Idx:15
[  266.108000]  WDEV 07:
                Name:ra3
[  266.112000]          Wdev(list) Idx:7
[  266.120000]           Idx:16
[  266.124000]  WDEV 08:
                Name:apclii0
[  266.132000]          Wdev(list) Idx:8
[  266.136000]           Idx:17
[  266.144000]  WDEV 09:
                Name:apcli0
[  266.148000]          Wdev(list) Idx:9
[  266.156000]           Idx:18
[  266.160000]  WDEV 10:
[  266.164000]  WDEV 11:
[  266.168000]  WDEV 12:
[  266.172000]  WDEV 13:
[  266.176000]  WDEV 14:
[  266.184000]  WDEV 15:
[  266.188000]  WDEV 16:
[  266.192000]  WDEV 17:
[  266.200000] WifiSysClose(), wdev idx = 4
[  266.216000] WifiSysGetBssInfoState(): BssInfoIdx 1 not found!!!
[  266.228000] WifiSysUpdateBssInfoState(): BssInfoIdx 1 not found!!!
[  266.240000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[  266.252000] WifiSysClose(), wdev idx = 0
[  266.260000] WifiSysClose(), wdev idx = 1
[  266.268000] WifiSysClose(), wdev idx = 2
[  266.276000] WifiSysClose(), wdev idx = 3
[  266.308000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[  266.320000] WifiSysClose(), wdev idx = 4
[  266.328000] WifiSysClose(), wdev idx = 5
[  266.336000] WifiSysClose(), wdev idx = 6
[  266.344000] WifiSysClose(), wdev idx = 7
[  266.352000] kill LoopBackTxTask task failed!
[  266.368000] AndesRestartCheck: Current TOP_MISC2(0x7)
[  266.420000] CmdReStartDLRsp: Status Success!, Status(0)
[  266.432000] AndesRestartCheck:  TOP_MISC2(1)
[  266.440000] RT28xxPciAsicRadioOff(): Not support for HIF_MT yet!
[  266.452000] RTMPDrvClose call RT28xxPciAsicRadioOff fail !!
[  266.464000] tx_kickout_fail_count = 0
[  266.472000] tx_timeout_fail_count = 0
[  266.476000] rx_receive_fail_count = 0
[  266.484000] alloc_cmd_msg = 1864
[  266.492000] free_cmd_msg = 1864
[  266.500000] cut_through_token_list_destroy(): 8545dd88,8545dd88
[  266.512000] cut_through_token_list_destroy(): 8545dd98,8545dd98
[  266.528000] FwOwn()::Set Fw Own
[  266.540000] RTMP_AllTimerListRelease: Size=0
[  266.548000] FwOwn()::Return since already in Fw Own...
[  266.556000] <---HwCtrlThread
procd: - reboot [  266.696000] Stopped WatchDog Timer.
-
[  266.708000] Restarting system.


U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..
Checking image 1...
   Image Name:   3.10(XIK.1)b7
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    5642216 Bytes =  5.4 MB
   Load Address: 80001000
   Entry Point:  80001000
.......................................................................................   Verifying Combo Checksum ... .......................................................................................## Booting image at bc400000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...

[    0.000000] Linux version 4.14.111 (musashino205@Taiha.Net) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+9901-29b3122f32)) #0 SMP Sat Apr 20 01:26:47 2019
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is I-O DATA WN-DX1167R
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x90/0x4a4 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu @81110000 s26192 r8192 d22960 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00001000
[    0.000000] Readback ErrCtl register=00001000
[    0.000000] Memory: 119764K/131072K available (4497K kernel code, 230K rwdata, 1000K rodata, 3860K init, 248K bss, 11308K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] CPU Clock: 880MHz
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.015487] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.087817] pid_max: default: 32768 minimum: 301
[    0.097125] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.110146] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.125864] Hierarchical SRCU implementation.
[    0.135321] smp: Bringing up secondary CPUs ...
[    0.144858] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.144867] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.144879] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.145013] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.204697] Synchronize counters for CPU 1: done.
[    0.268618] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.268627] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.268634] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.268710] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.325526] Synchronize counters for CPU 2: done.
[    0.385687] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.385696] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.385704] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.385789] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.445095] Synchronize counters for CPU 3: done.
[    0.504698] smp: Brought up 1 node, 4 CPUs
[    0.516487] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.535958] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.548382] pinctrl core: initialized pinctrl subsystem
[    0.559984] NET: Registered protocol family 16
[    0.577541] pull PCIe RST: RALINK_RSTCTRL = 4000000
[    0.887528] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.897592] ***** Xtal 40MHz *****
[    0.904326] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.914529] Port 0 N_FTS = 1b102800
[    0.921430] Port 1 N_FTS = 1b105000
[    0.928355] Port 2 N_FTS = 1b102800
[    2.087005] PCIE0 no card, disable it(RST&CLK)
[    2.095693] PCIE2 no card, disable it(RST&CLK)
[    2.104497]  -> 20107f2
[    2.109346] PCIE1 enabled
[    2.114525] PCI host bridge /pcie@1e140000 ranges:
[    2.124053]  MEM 0x0000000060000000..0x000000006fffffff
[    2.134410]   IO 0x000000001e160000..0x000000001e16ffff
[    2.144777] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    2.167122] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.178384] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.189565] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.201941] PCI host bridge to bus 0000:00
[    2.209965] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    2.223640] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    2.235368] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    2.248861] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    2.265586] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.278622] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.292436] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.305909] pci 0000:00:00.0: BAR 1: assigned [mem 0x60100000-0x6010ffff]
[    2.319405] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    2.333910] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.343731] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.358409] clocksource: Switched to clocksource GIC
[    2.369593] NET: Registered protocol family 2
[    2.378820] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    2.392564] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    2.405170] TCP: Hash tables configured (established 1024 bind 1024)
[    2.417889] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.429398] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.442040] NET: Registered protocol family 1
[    5.828377] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    5.839524] Crashlog allocated RAM at address 0x3f00000
[    5.850080] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[    5.869596] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    5.881071] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    5.903416] random: fast init done
[    5.910435] io scheduler noop registered
[    5.918071] io scheduler deadline registered (default)
[    5.929233] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    5.943050] console [ttyS0] disabled
[    5.950097] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A
[    5.968061] console [ttyS0] enabled
[    5.968061] console [ttyS0] enabled
[    5.981831] bootconsole [early0] disabled
[    5.981831] bootconsole [early0] disabled
[    5.998427] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    6.011221] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    6.025291] Enable NFI Clock
[    6.031029] # MTK NAND # : Use HW ECC
[    6.038318] Device found in MTK table, ID: 1f1, EXT_ID: 801d01
[    6.049927] Support this Device in MTK table! 1f1 
[    6.059645] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    6.072510] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xf1
[    6.085154] nand: AMD/Spansion NAND 128MiB 3,3V 8-bit
[    6.095206] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    6.110288] Scanning device for bad blocks
[    6.400355] 12 fixed-partitions partitions found on MTD device MT7621-NAND
[    6.414037] Creating 12 MTD partitions on "MT7621-NAND":
[    6.424621] 0x000000000000-0x000000100000 : "Bootloader"
[    6.436271] 0x000000100000-0x000000200000 : "u-boot-env"
[    6.447867] 0x000000200000-0x000000300000 : "Factory"
[    6.458999] 0x000000300000-0x000000400000 : "SecondBoot"
[    6.470616] 0x000000400000-0x000000800000 : "kernel"
[    6.481538] 0x000000800000-0x000003600000 : "ubi"
[    6.492286] 0x000003600000-0x000003700000 : "Config"
[    6.503238] 0x000003700000-0x000006900000 : "firmware_2"
[    6.515206] 0x000006900000-0x000006a00000 : "Config_2"
[    6.526494] 0x000006a00000-0x000006b00000 : "persist"
[    6.537579] 0x000006b00000-0x000006c00000 : "idmkey"
[    6.548565] 0x000006c00000-0x000007f80000 : "Backup"
[    6.559662] [mtk_nand] probe successfully!
[    6.568573] Signature matched and data read!
[    6.577055] load_fact_bbt success 1023
[    6.585272] libphy: Fixed MDIO Bus: probed
[    6.660961] libphy: mdio: probed
[    8.078318] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    8.090893] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 19
[    8.109982] NET: Registered protocol family 10
[    8.120205] Segment Routing with IPv6
[    8.127564] NET: Registered protocol family 17
[    8.136513] 8021q: 802.1Q VLAN Support v1.8
[    8.147780] UBI error: no valid UBI magic found inside mtd5
[    8.158943] hctosys: unable to open rtc device (rtc0)
[    8.183210] Freeing unused kernel memory: 3860K
[    8.192259] This architecture does not have kernel memory protection.
[    8.216181] init: Console is alive
[    8.223265] init: - watchdog -
[    8.241019] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    8.258104] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    8.288695] init: - preinit -
[    8.453778] mtk_soc_eth 1e100000.ethernet: PPE started
[    8.476226] random: procd: uninitialized urandom read (4 bytes read)
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    9.336037] mtk_soc_eth 1e100000.ethernet eth0: port 0 link up
[    9.713304] mtk_soc_eth 1e100000.ethernet eth0: port 2 link up
[   11.591627] mtk_soc_eth 1e100000.ethernet: 0x100 = 0x6060000c, 0x10c = 0x80818
[   11.613014] procd: - early -
[   11.618909] procd: - watchdog -
[   12.248572] procd: - watchdog -
[   12.255131] procd: - ubus -
[   12.265342] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.318959] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.331987] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.345465] procd: - init -
Please press Enter to activate this console.
[   12.505945] kmodloader: loading kernel modules from /etc/modules.d/*
[   12.524713] nat46: module (version 683fbd2b765506332a1af141545652bf58f03166) loaded.
[   12.544708] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   12.565010] ip_tables: (C) 2000-2006 Netfilter Core Team
[   12.585937] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[   12.629244] Netfilter messages via NETLINK v0.30.
[   12.658667] xt_time: kernel timezone is -0000
[   12.674768] ctnetlink v0.93: registering with nfnetlink.
[   12.687983] PPP generic driver version 2.4.2
[   12.697955] NET: Registered protocol family 24
[   12.710410] kmodloader: done loading kernel modules from /etc/modules.d/*
[   13.802323] urandom_read: 5 callbacks suppressed
[   13.802335] random: jshn: uninitialized urandom read (4 bytes read)
[   29.948714] mtk_soc_eth 1e100000.ethernet: PPE started
[   29.966406] br-lan: port 1(eth0.1) entered blocking state
[   29.977314] br-lan: port 1(eth0.1) entered disabled state
[   29.988828] device eth0.1 entered promiscuous mode
[   29.998458] device eth0 entered promiscuous mode
[   30.011542] br-lan: port 1(eth0.1) entered blocking state
[   30.022355] br-lan: port 1(eth0.1) entered forwarding state
[   30.034064] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   30.469127] random: crng init done
[   30.969428] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready



BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+9902-961771ff30
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# sysupgrade https://taiha.net/jenkins/job/OpenWrt-master-IODATA-W
N-DX1167R/lastSuccessfulBuild/artifact/bin/targets/ramips/mt7621/openwrt-ramips-
mt7621-iodata_wn-dx1167r-squashfs-sysupgrade.bin
--2019-04-20 02:06:11--  https://taiha.net/jenkins/job/OpenWrt-master-IODATA-WN-DX1167R/lastSuccessfulBuild/artifact/bin/targets/ramips/mt7621/openwrt-ramips-mt7621-iodata_wn-dx1167r-squashfs-sysupgrade.bin
Resolving taiha.net... 240b:12:500:65f0:c822:64a3:7e11:4961, 49.129.167.30
Connecting to taiha.net|240b:12:500:65f0:c822:64a3:7e11:4961|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 5888778 (5.6M) [application/octet-stream]
Saving to: '/tmp/sysupgrade.img'

/tmp/sysupgrade.img 100%[===================>]   5.62M  3.13MB/s    in 1.8s    

2019-04-20 02:06:13 (3.13 MB/s) - '/tmp/sysupgrade.img' saved [5888778/5888778]

Cannot save config while running from ramdisk.
Commencing upgrade. Closing all shell sessions.
Watchdog handover: fd=3
- watchdog -
killall: telnetd: no process killed
Sending TERM to remaining processes ... netifd odhcpd uhttpd nlbwmon sh sleep ntpd vnstatd dnsmasq ubusd logd rpcd 
Sending KILL to remaining processes ... 
Performing system upgrade...
current: bootnum => 1, debugflag => 0
### enable debug ###
Unlocking kernel ...

Writing from  to kernel ...     
[   64.720676] ubi0: attaching mtd5
[   64.965168] ubi0: scanning is finished
[   64.972696] ubi0 error: ubi_read_volume_table: the layout volume was not found
[   64.987194] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd5, error -22
ubiattach: error!: cannot attach mtd5
           error 22 (Invalid argument)
ubiformat: mtd5 (nand), size 48234496 bytes (46.0 MiB), 368 eraseblocks of 131072 bytes (128.0 KiB), min. I/O size 2048 bytes
libscan: scanning eraseblock 367 -- 100 % complete  
ubiformat: 327 eraseblocks are supposedly empty
ubiformat: warning!: 41 of 368 eraseblocks contain non-UBI data
ubiformat: warning!: only 0 of 368 eraseblocks have valid erase counter
ubiformat: erase counter 0 will be used for all eraseblocks
ubiformat: note, arbitrary erase counter value may be specified using -e option
ubiformat: use erase counter 0 for all eraseblocks
ubiformat: formatting eraseblock 317 -- 86 % complet[   71.452084] ubi0: attaching mtd5
ubiformat: f[   71.889484] ubi0: scanning is finished  
ubiformat: formatting eraseblock 363 -- 98 % complet[   71.911907] ubi0: attached mtd5 (name "ubi", size 46 MiB)
ubiformat: f[   71.924433] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ormatting eraseb[   71.940868] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
lock 364 -- 99 %[   71.957102] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubif[   71.973709] ubi0: good PEBs: 368, bad PEBs: 0, corrupted PEBs: 0
ormat: formattin[   71.988402] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 128
g eraseblock 365[   72.005520] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1110684811
 -- 99 % complet[   72.026438] ubi0: available PEBs: 344, total reserved PEBs: 24, PEBs reserved for bad PEB handling: 20
ubiformat: f[   72.047725] ubi0: background thread "ubi_bgt0d" started, PID 2207
ubiformat: formatting eraseblock 367 -- 100 % complete  
UBI device number 0, total 368 LEBs (46727168 bytes, 44.5 MiB), available 344 LEBs (43679744 bytes, 41.6 MiB), LEB size 126976 bytes (124.0 KiB)
Volume ID 0, size 32 LEBs (4063232 bytes, 3.8 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs", alignment 1
Set volume size to 39616512
Volume ID 1, size 312 LEBs (39616512 bytes, 37.7 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs_data", alignment 1
sysupgrade successful
umount: can't unmount /dev: Resource busy
umount: can't unmount /tmp: Resource busy
umount: can't unmount /: Invalid argument
[   74.078801] reboot: Restarting system


U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..Hit ESC key to stop autoboot: 1

Checking image 1...
   Image Name:   MIPS OpenWrt Linux-4.14.
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1905158 Bytes =  1.8 MB
   Load Address: 80001000
   Entry Point:  80001000
..............................   Verifying Checksum ... ## Booting image at bc400000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...

[    0.000000] Linux version 4.14.111 (musashino205@Taiha.Net) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+9901-29b3122f32)) #0 SMP Sat Apr 20 01:26:47 2019
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is I-O DATA WN-DX1167R
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x90/0x4a4 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu @81110000 s26192 r8192 d22960 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00001000
[    0.000000] Readback ErrCtl register=00001000
[    0.000000] Memory: 123412K/131072K available (4497K kernel code, 230K rwdata, 1000K rodata, 212K init, 248K bss, 7660K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] CPU Clock: 880MHz
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.015488] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.087817] pid_max: default: 32768 minimum: 301
[    0.097126] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.110146] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.125868] Hierarchical SRCU implementation.
[    0.135326] smp: Bringing up secondary CPUs ...
[    0.157183] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.157192] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.157204] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.157338] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.204704] Synchronize counters for CPU 1: done.
[    0.280943] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.280951] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.280958] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.281034] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.325533] Synchronize counters for CPU 2: done.
[    0.398017] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.398025] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.398033] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.398119] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.445102] Synchronize counters for CPU 3: done.
[    0.504705] smp: Brought up 1 node, 4 CPUs
[    0.516488] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.535958] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.548383] pinctrl core: initialized pinctrl subsystem
[    0.559935] NET: Registered protocol family 16
[    0.578196] pull PCIe RST: RALINK_RSTCTRL = 4000000
[    0.888183] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.898248] ***** Xtal 40MHz *****
[    0.904981] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.915184] Port 0 N_FTS = 1b102800
[    0.922086] Port 1 N_FTS = 1b105000
[    0.929010] Port 2 N_FTS = 1b102800
[    2.087654] PCIE0 no card, disable it(RST&CLK)
[    2.096341] PCIE2 no card, disable it(RST&CLK)
[    2.105144]  -> 20107f2
[    2.109994] PCIE1 enabled
[    2.115173] PCI host bridge /pcie@1e140000 ranges:
[    2.124701]  MEM 0x0000000060000000..0x000000006fffffff
[    2.135057]   IO 0x000000001e160000..0x000000001e16ffff
[    2.145425] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    2.167700] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.178946] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.190116] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.202405] PCI host bridge to bus 0000:00
[    2.210422] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    2.224095] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    2.235823] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    2.249312] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    2.266052] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.279087] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.292902] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.306375] pci 0000:00:00.0: BAR 1: assigned [mem 0x60100000-0x6010ffff]
[    2.319870] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    2.334380] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.344196] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.358915] clocksource: Switched to clocksource GIC
[    2.370139] NET: Registered protocol family 2
[    2.379360] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    2.393098] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    2.405705] TCP: Hash tables configured (established 1024 bind 1024)
[    2.418430] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.429937] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.442587] NET: Registered protocol family 1
[    2.688867] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    2.700185] Crashlog allocated RAM at address 0x3f00000
[    2.710679] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[    2.729381] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    2.740855] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    2.763374] random: fast init done
[    2.770320] io scheduler noop registered
[    2.777955] io scheduler deadline registered (default)
[    2.789063] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    2.802824] console [ttyS0] disabled
[    2.809877] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A
[    2.827814] console [ttyS0] enabled
[    2.827814] console [ttyS0] enabled
[    2.841603] bootconsole [early0] disabled
[    2.841603] bootconsole [early0] disabled
[    2.858084] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    2.870858] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    2.884894] Enable NFI Clock
[    2.890641] # MTK NAND # : Use HW ECC
[    2.897930] Device found in MTK table, ID: 1f1, EXT_ID: 801d01
[    2.909547] Support this Device in MTK table! 1f1 
[    2.919271] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    2.932140] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xf1
[    2.944790] nand: AMD/Spansion NAND 128MiB 3,3V 8-bit
[    2.954847] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    2.969935] Scanning device for bad blocks
[    3.259828] 12 fixed-partitions partitions found on MTD device MT7621-NAND
[    3.273515] Creating 12 MTD partitions on "MT7621-NAND":
[    3.284101] 0x000000000000-0x000000100000 : "Bootloader"
[    3.295589] 0x000000100000-0x000000200000 : "u-boot-env"
[    3.307024] 0x000000200000-0x000000300000 : "Factory"
[    3.317974] 0x000000300000-0x000000400000 : "SecondBoot"
[    3.329475] 0x000000400000-0x000000800000 : "kernel"
[    3.340266] 0x000000800000-0x000003600000 : "ubi"
[    3.350874] 0x000003600000-0x000003700000 : "Config"
[    3.361650] 0x000003700000-0x000006900000 : "firmware_2"
[    3.373482] 0x000006900000-0x000006a00000 : "Config_2"
[    3.384593] 0x000006a00000-0x000006b00000 : "persist"
[    3.395534] 0x000006b00000-0x000006c00000 : "idmkey"
[    3.406328] 0x000006c00000-0x000007f80000 : "Backup"
[    3.417265] [mtk_nand] probe successfully!
[    3.426176] Signature matched and data read!
[    3.434679] load_fact_bbt success 1023
[    3.442735] libphy: Fixed MDIO Bus: probed
[    3.521466] libphy: mdio: probed
[    4.927550] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    4.940123] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 19
[    4.959274] NET: Registered protocol family 10
[    4.969504] Segment Routing with IPv6
[    4.976861] NET: Registered protocol family 17
[    4.985779] 8021q: 802.1Q VLAN Support v1.8
[    4.996931] UBI: auto-attach mtd5
[    5.003577] ubi0: attaching mtd5
[    5.437581] ubi0: scanning is finished
[    5.460232] ubi0: attached mtd5 (name "ubi", size 46 MiB)
[    5.470997] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    5.484679] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    5.498185] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    5.512043] ubi0: good PEBs: 368, bad PEBs: 0, corrupted PEBs: 0
[    5.523993] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[    5.538366] ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 1110684811
[    5.556542] ubi0: available PEBs: 0, total reserved PEBs: 368, PEBs reserved for bad PEB handling: 20
[    5.574919] ubi0: background thread "ubi_bgt0d" started, PID 372
[    5.576897] block ubiblock0_0: created from ubi0:0(rootfs)
[    5.597830] ubiblock: device ubiblock0_0 (rootfs) set to be root filesystem
[    5.611699] hctosys: unable to open rtc device (rtc0)
[    5.628946] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    5.643645] Freeing unused kernel memory: 212K
[    5.652531] This architecture does not have kernel memory protection.
[    6.122667] init: Console is alive
[    6.129708] init: - watchdog -
[    6.168650] mtk_soc_eth 1e100000.ethernet eth0: port 0 link up
[    6.364148] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    6.492490] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    6.509223] init: - preinit -
[    6.514134] mtk_soc_eth 1e100000.ethernet eth0: port 2 link up
[    7.329817] mtk_soc_eth 1e100000.ethernet: PPE started
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to [    7.407135] random: procd: uninitialized urandom read (4 bytes read)
select the debug level
[   10.523692] UBIFS (ubi0:1): default file-system created
[   10.535559] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 448
[   10.648588] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data"
[   10.664199] UBIFS (ubi0:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[   10.683937] UBIFS (ubi0:1): FS size: 38346752 bytes (36 MiB, 302 LEBs), journal size 1904640 bytes (1 MiB, 15 LEBs)
[   10.704711] UBIFS (ubi0:1): reserved for root: 1811211 bytes (1768 KiB)
[   10.717882] UBIFS (ubi0:1): media format: w4/r0 (latest is w5/r0), UUID B62DEE20-04B6-4BB2-B22F-19A90A3DC706, small LPT model
[   10.743239] mount_root: overlay filesystem has not been fully initialized yet
[   10.757879] mount_root: switching to ubifs overlay
[   10.785078] urandom-seed: Seed file not found (/etc/urandom.seed)
[   10.862493] mtk_soc_eth 1e100000.ethernet: 0x100 = 0x6060000c, 0x10c = 0x80818
[   10.884326] procd: - early -
[   10.890184] procd: - watchdog -
[   11.509052] procd: - watchdog -
[   11.515610] procd: - ubus -
[   11.599988] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.684382] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.697524] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.711058] procd: - init -
Please press Enter to activate this console.
[   12.099025] kmodloader: loading kernel modules from /etc/modules.d/*
[   12.187056] nat46: module (version 683fbd2b765506332a1af141545652bf58f03166) loaded.
[   12.206932] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   12.225448] ip_tables: (C) 2000-2006 Netfilter Core Team
[   12.243844] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[   12.289461] Netfilter messages via NETLINK v0.30.
[   12.319386] xt_time: kernel timezone is -0000
[   12.336616] ctnetlink v0.93: registering with nfnetlink.
[   12.350023] PPP generic driver version 2.4.2
[   12.360073] NET: Registered protocol family 24
[   12.371598] kmodloader: done loading kernel modules from /etc/modules.d/*
[   13.633810] urandom_read: 5 callbacks suppressed
[   13.633822] random: jshn: uninitialized urandom read (4 bytes read)
[   38.772592] mtk_soc_eth 1e100000.ethernet: PPE started
[   38.787870] br-lan: port 1(eth0.1) entered blocking state
[   38.798662] br-lan: port 1(eth0.1) entered disabled state
[   38.810224] device eth0.1 entered promiscuous mode
[   38.819834] device eth0 entered promiscuous mode
[   38.832645] br-lan: port 1(eth0.1) entered blocking state
[   38.843498] br-lan: port 1(eth0.1) entered forwarding state
[   38.855149] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   39.219880] random: crng init done
[   39.849578] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready



BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+9902-961771ff30
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# 

WN-DX1167R debugflagメモ

システムのデバッグモードを設定する debugflag のメモ。
sys debugflag による設定前後で、”Factory” パーティション内の 0xFE75 の値が変化する。

  • sys debugflag 0 -> 0xFE75: 0x00(debug無効)
  • sys debugflag 1 -> 0xFE75: 0x01(debug有効)
root@WN-DX1167R:/tmp/mtd# sys debugflag
DebugFlag: 0
root@WN-DX1167R:/tmp/mtd# hexdump -n $((0x100)) -v -C -s $((0xfe00)) /dev/mtd3
0000fe00  4d 69 74 72 61 73 74 61  72 00 54 65 63 68 6e 6f  |Mitrastar.Techno|
0000fe10  6c 6f 67 79 20 43 6f 72  70 2e 00 00 00 00 00 00  |logy Corp.......|
0000fe20  4d 69 43 41 50 2d 33 33  32 33 43 00 00 00 00 00  |MiCAP-3323C.....|
0000fe30  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fe40  31 39 35 36 30 35 32 37  00 00 00 00 00 00 00 00  |19560527........|
0000fe50  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fe60  53 30 39 30 59 30 30 30  30 30 30 30 30 00 00 13  |S090Y00000000...|
0000fe70  49 55 aa 00 04 00 ff ff  5a 59 ff ff 00 00 00 00  |IU......ZY......|
0000fe80  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fe90  00 00 00 00 00 00 00 00  00 01 1c 03 08 06 20 18  |.............. .|
0000fea0  14 37 44 4d 69 43 41 50  2d 33 33 32 33 43 00 00  |.7DMiCAP-3323C..|
0000feb0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fec0  00 00 00 41 30 42 00 00  00 00 00 00 00 00 00 00  |...A0B..........|
0000fed0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fee0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fef0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000ff00
root@WN-DX1167R:/tmp/mtd# sys debugflag 1
PASS
root@WN-DX1167R:/tmp/mtd# hexdump -n $((0x100)) -v -C -s $((0xfe00)) /dev/mtd3
0000fe00  4d 69 74 72 61 73 74 61  72 00 54 65 63 68 6e 6f  |Mitrastar.Techno|
0000fe10  6c 6f 67 79 20 43 6f 72  70 2e 00 00 00 00 00 00  |logy Corp.......|
0000fe20  4d 69 43 41 50 2d 33 33  32 33 43 00 00 00 00 00  |MiCAP-3323C.....|
0000fe30  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fe40  31 39 35 36 30 35 32 37  00 00 00 00 00 00 00 00  |19560527........|
0000fe50  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fe60  53 30 39 30 59 30 30 30  30 30 30 30 30 00 00 13  |S090Y00000000...|
0000fe70  49 55 aa 00 04 01 ff ff  5a 59 ff ff 00 00 00 00  |IU......ZY......|
0000fe80  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fe90  00 00 00 00 00 00 00 00  00 01 1c 03 08 06 20 18  |.............. .|
0000fea0  14 37 44 4d 69 43 41 50  2d 33 33 32 33 43 00 00  |.7DMiCAP-3323C..|
0000feb0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fec0  00 00 00 41 30 42 00 00  00 00 00 00 00 00 00 00  |...A0B..........|
0000fed0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fee0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000fef0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
0000ff00

WN-DX1167R stock -> OpenWrt(仮)

とりあえずmkimageの改造は無しで、手元で必要なuImageの改造を加えて投げ込んだのでメモ。
Z-Loaderのブート自体にはuImageのMagicは標準の 27051956 で、uImageのイメージ名は適当なもので問題ないが、メーカーファームのWebUIから投入する際はこの2つともチェックされるのか、どちらとも変更しなければイメージのチェックをパスできなかった。
uImage参考: https://mao.5ch.net/test/read.cgi/network/1520576652/672

なお、WebUIから投入した場合、ブート中のイメージとは別のもう一方のOSイメージ用パーティションに書き込まれ、ブートパーティションの指定をそちらに変更の上リブートされて書き込まれたパーティションからブートしていた。
このブートパーティションの指定は以下の様にして書き込める。書き込み先のパーティションは、/proc/mtdを参照して “persist” パーティションのmtdblockを確認しておくこと。echo内の数字は、1つ目のOSイメージを指定する場合 “01” または “1” を、2番目を指定する場合は “02” または “2” にする。

echo -ne "\x01" | dd of=/dev/mtdblock8 bs=1 count=1 seek=4 conv=notrunc

また、上記の通りファームウェアが書き込まれブートに使用されるパーティションが固定ではないためinitramfsイメージを使用したfactoryになる。投入した際に2番目のOSイメージパーティションに書き込まれそちらからブートした場合、非initramfsなファームをsysupgradeで書き込む前に1番目のOSイメージからブートするよう指定しておく必要がある。

[  942.544000] led=9, on=1, off=1, blinks,=1, reset=0, time=4000 low_trigger=0
Unlocking firmware_2 ...

Writing from /tmp/fw.bin to firmware_2 ...     
Header checksum OK.
Data checksum OK
Unlocking persist ...
### Switch to bank 2 on next boot! ###
procd: - shutdown -
[  948.224000] br-lan: port 4(ra0) entered disabled state
[  948.232000] br-lan: port 3(rai0) entered disabled state
[  948.244000] br-lan: port 2(eth1) entered disabled state
[  948.256000] br-lan: port 1(eth0) entered disabled state
[  948.264000] device eth0 left promiscuous mode
[  948.276000] br-lan: port 1(eth0) entered disabled state
[  948.284000] ra2880stop()...Done
[  948.292000] eth1: ===> VirtualIF_close
[  948.300000] Free TX/RX Ring Memory!
[  948.308000] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[  948.320000] device eth1 left promiscuous mode
[  948.332000] br-lan: port 2(eth1) entered disabled state
[  948.340000] eth1: ===> VirtualIF_close
[  948.348000] device ra0 left promiscuous mode
[  948.360000] br-lan: port 4(ra0) entered disabled state
[  948.368000] device rai0 left promiscuous mode
[  948.376000] br-lan: port 3(rai0) entered disabled state
[  949.700000] WifiSysClose(), wdev idx = 0
[  949.712000] WifiSysGetBssInfoState(): BssInfoIdx 0 not found!!!
[  949.724000] WifiSysUpdateBssInfoState(): BssInfoIdx 0 not found!!!
### ap ###
[  951.176000] Device Instance
[  951.184000]  WDEV 00:
                Name:rai0
[  951.188000]          Wdev(list) Idx:0
[  951.196000]           Idx:8
[  951.200000]  WDEV 01:
                Name:rai1
[  951.208000]          Wdev(list) Idx:1
[  951.212000]           Idx:9
[  951.216000]  WDEV 02:
                Name:rai2
[  951.224000]          Wdev(list) Idx:2
[  951.228000]           Idx:10
[  951.236000]  WDEV 03:
                Name:rai3
[  951.240000]          Wdev(list) Idx:3
[  951.248000]           Idx:11
[  951.252000]  WDEV 04:
                Name:ra0
[  951.260000]          Wdev(list) Idx:4
[  951.264000]           Idx:12
[  951.268000]  WDEV 05:
                Name:ra1
[  951.276000]          Wdev(list) Idx:5
[  951.284000]           Idx:13
[  951.288000]  WDEV 06:
                Name:ra2
[  951.292000]          Wdev(list) Idx:6
[  951.300000]           Idx:14
[  951.304000]  WDEV 07:
                Name:ra3
[  951.312000]          Wdev(list) Idx:7
[  951.316000]           Idx:15
[  951.320000]  WDEV 08:
                Name:apclii0
[  951.328000]          Wdev(list) Idx:8
[  951.336000]           Idx:16
[  951.340000]  WDEV 09:
                Name:apcli0
[  951.348000]          Wdev(list) Idx:9
[  951.352000]           Idx:17
[  951.356000]  WDEV 10:
[  951.360000]  WDEV 11:
[  951.368000]  WDEV 12:
[  951.372000]  WDEV 13:
[  951.376000]  WDEV 14:
[  951.380000]  WDEV 15:
[  951.384000]  WDEV 16:
[  951.388000]  WDEV 17:
[  951.396000] WifiSysClose(), wdev idx = 4
[  951.396000] WifiSysGetBssInfoState(): BssInfoIdx 1 not found!!!
[  951.396000] WifiSysUpdateBssInfoState(): BssInfoIdx 1 not found!!!
[  951.432000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[  951.444000] WifiSysClose(), wdev idx = 0
[  951.452000] WifiSysClose(), wdev idx = 1
[  951.460000] WifiSysClose(), wdev idx = 2
[  951.464000] WifiSysClose(), wdev idx = 3
[  951.500000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[  951.512000] WifiSysClose(), wdev idx = 4
[  951.520000] WifiSysClose(), wdev idx = 5
[  951.528000] WifiSysClose(), wdev idx = 6
[  951.536000] WifiSysClose(), wdev idx = 7
[  951.544000] kill LoopBackTxTask task failed!
[  951.560000] AndesRestartCheck: Current TOP_MISC2(0x7)
[  951.612000] CmdReStartDLRsp: Status Success!, Status(0)
[  951.624000] EventExtEventHandler: Unknown Ext Event(6f)
[  951.632000] AndesRestartCheck:  TOP_MISC2(1)
[  951.644000] RT28xxPciAsicRadioOff(): Not support for HIF_MT yet!
[  951.656000] RTMPDrvClose call RT28xxPciAsicRadioOff fail !!
[  951.664000] tx_kickout_fail_count = 0
[  951.672000] tx_timeout_fail_count = 0
[  951.680000] rx_receive_fail_count = 0
[  951.688000] alloc_cmd_msg = 3185
[  951.692000] free_cmd_msg = 3185
[  951.700000] cut_through_token_list_destroy(): 8632e888,8632e888
[  951.716000] cut_through_token_list_destroy(): 8632e898,8632e898
[  951.732000] FwOwn()::Set Fw Own
[  951.740000] RTMP_AllTimerListRelease: Size=0
[  951.748000] FwOwn()::Return since already in Fw Own...
[  951.760000] <---HwCtrlThread
procd: - reboot [  951.896000] Stopped WatchDog Timer.
-
[  951.908000] Restarting system.


U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..Hit ESC key to stop autoboot: 1

Checking image 2...
   Image Name:   3.10(XIK.1)b7
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    5642895 Bytes =  5.4 MB
   Load Address: 80001000
   Entry Point:  80001000
.......................................................................................   Verifying Combo Checksum ... .......................................................................................## Booting image at bf700000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...

[    0.000000] Linux version 4.14.111 (musashino205@Taiha.Net) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+9824-b80243858e)) #0 SMP Wed Apr 17 15:36:46 2019
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is I-O DATA WN-DX1167R
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x90/0x4a4 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu @81110000 s26192 r8192 d22960 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00001000
[    0.000000] Readback ErrCtl register=00001000
[    0.000000] Memory: 119764K/131072K available (4497K kernel code, 230K rwdata, 1000K rodata, 3860K init, 248K bss, 11308K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] CPU Clock: 880MHz
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.015488] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.087817] pid_max: default: 32768 minimum: 301
[    0.097128] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.110148] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.125865] Hierarchical SRCU implementation.
[    0.135322] smp: Bringing up secondary CPUs ...
[    0.144860] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.144869] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.144880] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.145014] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.204698] Synchronize counters for CPU 1: done.
[    0.268616] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.268624] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.268631] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.268708] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.325524] Synchronize counters for CPU 2: done.
[    0.385686] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.385694] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.385702] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.385788] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.445092] Synchronize counters for CPU 3: done.
[    0.504696] smp: Brought up 1 node, 4 CPUs
[    0.516465] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.535934] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.548360] pinctrl core: initialized pinctrl subsystem
[    0.559927] NET: Registered protocol family 16
[    0.577592] pull PCIe RST: RALINK_RSTCTRL = 4000000
[    0.887578] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.897642] ***** Xtal 40MHz *****
[    0.904375] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.914578] Port 0 N_FTS = 1b102800
[    0.921480] Port 1 N_FTS = 1b105000
[    0.928405] Port 2 N_FTS = 1b102800
[    2.087057] PCIE0 no card, disable it(RST&CLK)
[    2.095745] PCIE2 no card, disable it(RST&CLK)
[    2.104548]  -> 20107f2
[    2.109398] PCIE1 enabled
[    2.114577] PCI host bridge /pcie@1e140000 ranges:
[    2.124105]  MEM 0x0000000060000000..0x000000006fffffff
[    2.134461]   IO 0x000000001e160000..0x000000001e16ffff
[    2.144829] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    2.167715] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.179008] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.190256] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.202750] PCI host bridge to bus 0000:00
[    2.210765] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    2.224420] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    2.236168] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    2.249643] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    2.266495] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.279517] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.293336] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.306817] pci 0000:00:00.0: BAR 1: assigned [mem 0x60100000-0x6010ffff]
[    2.320308] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    2.334821] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.344646] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.359432] clocksource: Switched to clocksource GIC
[    2.370675] NET: Registered protocol family 2
[    2.379985] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    2.393721] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    2.406321] TCP: Hash tables configured (established 1024 bind 1024)
[    2.419053] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.430556] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.443200] NET: Registered protocol family 1
[    5.829397] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    5.840886] Crashlog allocated RAM at address 0x3f00000
[    5.851393] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[    5.871370] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    5.882853] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    5.903955] random: fast init done
[    5.912889] io scheduler noop registered
[    5.920594] io scheduler deadline registered (default)
[    5.931775] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    5.945639] console [ttyS0] disabled
[    5.952691] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A
[    5.970626] console [ttyS0] enabled
[    5.970626] console [ttyS0] enabled
[    5.984418] bootconsole [early0] disabled
[    5.984418] bootconsole [early0] disabled
[    6.000996] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    6.013896] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    6.027937] Enable NFI Clock
[    6.033683] # MTK NAND # : Use HW ECC
[    6.040994] Device found in MTK table, ID: 1f1, EXT_ID: 801d01
[    6.052607] Support this Device in MTK table! 1f1 
[    6.062329] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    6.075199] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xf1
[    6.087848] nand: AMD/Spansion NAND 128MiB 3,3V 8-bit
[    6.097905] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    6.112993] Scanning device for bad blocks
[    6.402781] 11 fixed-partitions partitions found on MTD device MT7621-NAND
[    6.416469] Creating 11 MTD partitions on "MT7621-NAND":
[    6.427064] 0x000000000000-0x000000100000 : "Bootloader"
[    6.438719] 0x000000100000-0x000000200000 : "u-boot-env"
[    6.450391] 0x000000200000-0x000000300000 : "Factory"
[    6.461506] 0x000000300000-0x000000400000 : "SecondBoot"
[    6.473133] 0x000000400000-0x000003600000 : "firmware"
[    6.484786] 0x000003600000-0x000003700000 : "Config"
[    6.495732] 0x000003700000-0x000006900000 : "firmware_2"
[    6.507770] 0x000006900000-0x000006a00000 : "Config_2"
[    6.519064] 0x000006a00000-0x000006b00000 : "persist"
[    6.530220] 0x000006b00000-0x000006c00000 : "idmkey"
[    6.541165] 0x000006c00000-0x000007f80000 : "Backup"
[    6.552232] [mtk_nand] probe successfully!
[    6.561139] Signature matched and data read!
[    6.569641] load_fact_bbt success 1023
[    6.577863] libphy: Fixed MDIO Bus: probed
[    6.652008] libphy: mdio: probed
[    8.069445] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    8.082014] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 19
[    8.100784] NET: Registered protocol family 10
[    8.110937] Segment Routing with IPv6
[    8.118291] NET: Registered protocol family 17
[    8.127200] 8021q: 802.1Q VLAN Support v1.8
[    8.137882] hctosys: unable to open rtc device (rtc0)
[    8.162308] Freeing unused kernel memory: 3860K
[    8.171369] This architecture does not have kernel memory protection.
[    8.195375] init: Console is alive
[    8.202430] init: - watchdog -
[    8.220365] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    8.237385] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    8.259728] init: - preinit -
[    8.426327] mtk_soc_eth 1e100000.ethernet: PPE started
[    8.448840] random: procd: uninitialized urandom read (4 bytes read)
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    9.299905] mtk_soc_eth 1e100000.ethernet eth0: port 0 link up
[    9.668050] mtk_soc_eth 1e100000.ethernet eth0: port 2 link up
[   11.563105] mtk_soc_eth 1e100000.ethernet: 0x100 = 0x6060000c, 0x10c = 0x80818
[   11.584512] procd: - early -
[   11.590391] procd: - watchdog -
[   12.219565] procd: - watchdog -
[   12.226120] procd: - ubus -
[   12.236341] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.289976] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.303033] random: ubusd: uninitialized urandom read (4 bytes read)
[   12.316534] procd: - init -
Please press Enter to activate this console.
[   12.475962] kmodloader: loading kernel modules from /etc/modules.d/*
[   12.494539] nat46: module (version 683fbd2b765506332a1af141545652bf58f03166) loaded.
[   12.514229] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   12.533949] ip_tables: (C) 2000-2006 Netfilter Core Team
[   12.556171] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[   12.600620] Netfilter messages via NETLINK v0.30.
[   12.632397] xt_time: kernel timezone is -0000
[   12.648384] ctnetlink v0.93: registering with nfnetlink.
[   12.661713] PPP generic driver version 2.4.2
[   12.671586] NET: Registered protocol family 24
[   12.684076] kmodloader: done loading kernel modules from /etc/modules.d/*
[   13.773293] urandom_read: 5 callbacks suppressed
[   13.773305] random: jshn: uninitialized urandom read (4 bytes read)
[   52.550164] mtk_soc_eth 1e100000.ethernet: PPE started
[   52.569852] br-lan: port 1(eth0.1) entered blocking state
[   52.580768] br-lan: port 1(eth0.1) entered disabled state
[   52.592245] device eth0.1 entered promiscuous mode
[   52.601899] device eth0 entered promiscuous mode
[   52.615251] br-lan: port 1(eth0.1) entered blocking state
[   52.626114] br-lan: port 1(eth0.1) entered forwarding state
[   52.637820] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   53.045858] random: crng init done
[   53.550050] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready



BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+9891-163a8830b9
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# 

WN-DX1167R ファームウェア書き込みメモ (Z-Loader)

Z-Loader経由でOpenWrtファームウェアを書き込んだメモ。5chユーザーのWN-AX2033GRにおける先行事例を参考にした。
ハイライトはキー入力個所

U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..Hit ESC key to stop autoboot: 1
ZLB> 
ATGO              boot up the whole system
ATGU              go back to U-Boot command line
ATUR              upgrade ras image by console
ATUF              upgrade factory by console
ATNR    x,y       upgrade image by TFTP (x=type[1:ras, 2:bootloader, 3:config, 4:romd 6:factory], y=filename)
ATUX              upgrade bootloader
ATBT    x         block0 write enable (1=enable, 0=disable)
ATEN    x,(y)     set BootExtension Debug Flag (y=password)
ATSE    x         show the seed of password generator
ATWZ    a,(b,c,d) write MAC , Country code, EngDbgFlag, MAC Quantity to FLASH
ATSH              dump manufacturer related data in FLASH
ATBU              dump manufacturer related data in working buffer
ATCB              copy FLASH MRD to working buffer
ATSN    x         set serial number to flash
ATSB              save working buffer to FLASH
ATQY    x         set MAC Quantity to working buffer
ATFL    x         set EngDebugFlag to working buffer
ATCO    x         set country code to working buffer
ATSR              reset
ATRT    (x,y,z,u) RAM read/write test (x=level, y=start addr, z=end addr, u=interations)
ATRM              restore default MRD
ATBR              reset to default Romfile
ATER              erase ROM-D data
ATHV    x         set hardware version to flash
ATGP    x,y       led control
ZLB> ATNR 1,openwrt-ramips-mt7621-iodata_wn-dx1167r-squashfs-tftp-ras.bin

 NetLoop,call eth_halt ! 

 NetLoop,call eth_init ! 
Trying Eth0 (10/100-M)

 Waitting for RX_DMA_BUSY status Start... done


 ETH_STATE_ACTIVE!! 
Using Eth0 (10/100-M) device
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'openwrt-ramips-mt7621-iodata_wn-dx1167r-squashfs-tftp-ras.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: checksum bad
checksum bad
checksum bad
checksum bad
Got ARP REPLY, set server/gtwy eth addr (5c:9a:d8:e6:3f:b3)
Got it
#################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ####################Got ARP REQUEST, return our IP
#############################################
         #################################################################
         #################################################################
         #################################################################
         ##############################################
done
Bytes transferred = 6553600 (640000 hex)
LoadAddr=84000000 NetBootFileXferSize= 00640000
receive langth = 6553600

!!Upgrade File @84000000, length 6553600, type 1, offset 0x400000.  !!
ranand_erase: start:400000, len:20000 
..ranand_erase: start:420000, len:20000 
..ranand_erase: start:440000, len:20000 
..ranand_erase: start:460000, len:20000 
..ranand_erase: start:480000, len:20000 
..ranand_erase: start:4a0000, len:20000 
..ranand_erase: start:4c0000, len:20000 
..ranand_erase: start:4e0000, len:20000 
..ranand_erase: start:500000, len:20000 
..ranand_erase: start:520000, len:20000 
..ranand_erase: start:540000, len:20000 
..ranand_erase: start:560000, len:20000 
..ranand_erase: start:580000, len:20000 
..ranand_erase: start:5a0000, len:20000 
..ranand_erase: start:5c0000, len:20000 
..ranand_erase: start:5e0000, len:20000 
..ranand_erase: start:600000, len:20000 
..ranand_erase: start:620000, len:20000 
..ranand_erase: start:640000, len:20000 
..ranand_erase: start:660000, len:20000 
..ranand_erase: start:680000, len:20000 
..ranand_erase: start:6a0000, len:20000 
..ranand_erase: start:6c0000, len:20000 
..ranand_erase: start:6e0000, len:20000 
..ranand_erase: start:700000, len:20000 
..ranand_erase: start:720000, len:20000 
..ranand_erase: start:740000, len:20000 
..ranand_erase: start:760000, len:20000 
..ranand_erase: start:780000, len:20000 
..ranand_erase: start:7a0000, len:20000 
..ranand_erase: start:7c0000, len:20000 
..ranand_erase: start:7e0000, len:20000 
..ranand_erase: start:800000, len:20000 
..ranand_erase: start:820000, len:20000 
..ranand_erase: start:840000, len:20000 
..ranand_erase: start:860000, len:20000 
..ranand_erase: start:880000, len:20000 
..ranand_erase: start:8a0000, len:20000 
..ranand_erase: start:8c0000, len:20000 
..ranand_erase: start:8e0000, len:20000 
..ranand_erase: start:900000, len:20000 
..ranand_erase: start:920000, len:20000 
..ranand_erase: start:940000, len:20000 
..ranand_erase: start:960000, len:20000 
..ranand_erase: start:980000, len:20000 
..ranand_erase: start:9a0000, len:20000 
..ranand_erase: start:9c0000, len:20000 
..ranand_erase: start:9e0000, len:20000 
..ranand_erase: start:a00000, len:20000 
..ranand_erase: start:a20000, len:20000 
..Done!
ZLB> ATGO

Checking image 1...
   Image Name:   MIPS OpenWrt Linux-4.14.
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1904268 Bytes =  1.8 MB
   Load Address: 80001000
   Entry Point:  80001000
..............................   Verifying Checksum ... ## Booting image at bc400000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...

[    0.000000] Linux version 4.14.111 (jenkins@tofu-z77hvub18_openwrt) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+9824-b80243858e)) #0 SMP Wed Apr 10 22:14:24 2019
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is I-O DATA WN-DX1167R
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x90/0x4a4 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu @81110000 s26192 r8192 d22960 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00041000
[    0.000000] Readback ErrCtl register=00041000
[    0.000000] Memory: 123412K/131072K available (4495K kernel code, 232K rwdata, 1000K rodata, 212K init, 248K bss, 7660K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] CPU Clock: 880MHz
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.015489] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.087819] pid_max: default: 32768 minimum: 301
[    0.097130] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.110152] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.125872] Hierarchical SRCU implementation.
[    0.135333] smp: Bringing up secondary CPUs ...
[    0.157193] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.157203] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.157214] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.157346] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.204708] Synchronize counters for CPU 1: done.
[    0.280962] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.280971] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.280978] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.281053] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.325550] Synchronize counters for CPU 2: done.
[    0.398048] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.398057] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.398064] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.398161] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.445120] Synchronize counters for CPU 3: done.
[    0.504727] smp: Brought up 1 node, 4 CPUs
[    0.516496] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.535966] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.548388] pinctrl core: initialized pinctrl subsystem
[    0.559959] NET: Registered protocol family 16
[    0.577853] pull PCIe RST: RALINK_RSTCTRL = 4000000
[    0.887862] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.897927] ***** Xtal 40MHz *****
[    0.904660] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.914864] Port 0 N_FTS = 1b102800
[    0.921765] Port 1 N_FTS = 1b105000
[    0.928690] Port 2 N_FTS = 1b102800
[    2.087414] PCIE0 no card, disable it(RST&CLK)
[    2.096102] PCIE2 no card, disable it(RST&CLK)
[    2.104905]  -> 20107f2
[    2.109754] PCIE1 enabled
[    2.114934] PCI host bridge /pcie@1e140000 ranges:
[    2.124462]  MEM 0x0000000060000000..0x000000006fffffff
[    2.134818]   IO 0x000000001e160000..0x000000001e16ffff
[    2.145185] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    2.167904] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.179202] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.190476] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    2.203006] PCI host bridge to bus 0000:00
[    2.211026] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    2.224685] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    2.236430] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    2.249905] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    2.266775] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.279797] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.293616] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.307095] pci 0000:00:00.0: BAR 1: assigned [mem 0x60100000-0x6010ffff]
[    2.320588] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    2.335105] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.344928] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.359781] clocksource: Switched to clocksource GIC
[    2.371091] NET: Registered protocol family 2
[    2.380381] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    2.394113] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    2.406716] TCP: Hash tables configured (established 1024 bind 1024)
[    2.419449] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.430952] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.443591] NET: Registered protocol family 1
[    2.689726] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    2.701085] Crashlog allocated RAM at address 0x3f00000
[    2.711776] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[    2.731556] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    2.743066] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    2.763642] random: fast init done
[    2.772704] io scheduler noop registered
[    2.780396] io scheduler deadline registered (default)
[    2.791494] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    2.805397] console [ttyS0] disabled
[    2.812500] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A
[    2.830396] console [ttyS0] enabled
[    2.830396] console [ttyS0] enabled
[    2.844183] bootconsole [early0] disabled
[    2.844183] bootconsole [early0] disabled
[    2.860765] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    2.873648] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    2.887677] Enable NFI Clock
[    2.893419] # MTK NAND # : Use HW ECC
[    2.900732] Device found in MTK table, ID: 1f1, EXT_ID: 801d01
[    2.912350] Support this Device in MTK table! 1f1 
[    2.922073] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    2.934943] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xf1
[    2.947593] nand: AMD/Spansion NAND 128MiB 3,3V 8-bit
[    2.957650] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    2.972740] Scanning device for bad blocks
[    3.262508] 12 fixed-partitions partitions found on MTD device MT7621-NAND
[    3.276195] Creating 12 MTD partitions on "MT7621-NAND":
[    3.286781] 0x000000000000-0x000000100000 : "Bootloader"
[    3.298419] 0x000000100000-0x000000200000 : "u-boot-env"
[    3.310086] 0x000000200000-0x000000300000 : "Factory"
[    3.321209] 0x000000300000-0x000000400000 : "SecondBoot"
[    3.332822] 0x000000400000-0x000000800000 : "kernel"
[    3.343791] 0x000000800000-0x000003600000 : "ubi"
[    3.354558] 0x000003600000-0x000003700000 : "Config"
[    3.365513] 0x000003700000-0x000006900000 : "firmware_2"
[    3.377505] 0x000006900000-0x000006a00000 : "Config_2"
[    3.388796] 0x000006a00000-0x000006b00000 : "persist"
[    3.399956] 0x000006b00000-0x000006c00000 : "idmkey"
[    3.410900] 0x000006c00000-0x000007f80000 : "Backup"
[    3.421985] [mtk_nand] probe successfully!
[    3.430894] Signature matched and data read!
[    3.439376] load_fact_bbt success 1023
[    3.447583] libphy: Fixed MDIO Bus: probed
[    3.522344] libphy: mdio: probed
[    4.928371] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    4.940908] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 19
[    4.959966] NET: Registered protocol family 10
[    4.970170] Segment Routing with IPv6
[    4.977536] NET: Registered protocol family 17
[    4.986428] 8021q: 802.1Q VLAN Support v1.8
[    4.997556] UBI: auto-attach mtd5
[    5.004248] ubi0: attaching mtd5
[    5.025850] UBI: EOF marker found, PEBs from 13 will be erased
[    5.037929] ubi0: scanning is finished
[    5.084852] ubi0: volume 1 ("rootfs_data") re-sized from 9 to 333 LEBs
[    5.098640] ubi0: attached mtd5 (name "ubi", size 46 MiB)
[    5.109444] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    5.123159] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    5.136677] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    5.150539] ubi0: good PEBs: 368, bad PEBs: 0, corrupted PEBs: 0
[    5.162500] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[    5.176880] ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 964880614
[    5.194896] ubi0: available PEBs: 0, total reserved PEBs: 368, PEBs reserved for bad PEB handling: 20
[    5.213277] ubi0: background thread "ubi_bgt0d" started, PID 369
[    5.215189] block ubiblock0_0: created from ubi0:0(rootfs)
[    5.236218] ubiblock: device ubiblock0_0 (rootfs) set to be root filesystem
[    5.250120] hctosys: unable to open rtc device (rtc0)
[    5.320902] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    5.335589] Freeing unused kernel memory: 212K
[    5.344455] This architecture does not have kernel memory protection.
[    6.357057] init: Console is alive
[    6.364108] init: - watchdog -
[    6.453838] mtk_soc_eth 1e100000.ethernet eth0: port 3 link up
[    6.529355] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    6.619659] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    6.650049] init: - preinit -
[    7.337540] mtk_soc_eth 1e100000.ethernet: PPE started
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[   10.548994] UBIFS (ubi0:1): default file-system created
[   10.561060] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 439
[   10.593041] random: procd: uninitialized urandom read (4 bytes read)
[   10.675612] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data"
[   10.691242] UBIFS (ubi0:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[   10.710990] UBIFS (ubi0:1): FS size: 41013248 bytes (39 MiB, 323 LEBs), journal size 2031616 bytes (1 MiB, 16 LEBs)
[   10.731760] UBIFS (ubi0:1): reserved for root: 1937156 bytes (1891 KiB)
[   10.744926] UBIFS (ubi0:1): media format: w4/r0 (latest is w5/r0), UUID B81C08C4-63C6-4F2A-9209-8BD51995109A, small LPT model
[   10.770363] mount_root: overlay filesystem has not been fully initialized yet
[   10.784963] mount_root: switching to ubifs overlay
[   10.810343] urandom-seed: Seed file not found (/etc/urandom.seed)
[   10.897251] mtk_soc_eth 1e100000.ethernet: 0x100 = 0x6060000c, 0x10c = 0x80818
[   10.918904] procd: - early -
[   10.924772] procd: - watchdog -
[   11.549909] procd: - watchdog -
[   11.556472] procd: - ubus -
[   11.609170] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.622535] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.635596] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.649111] procd: - init -
Please press Enter to activate this console.
[   11.910565] kmodloader: loading kernel modules from /etc/modules.d/*
[   11.927475] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   11.944856] ip_tables: (C) 2000-2006 Netfilter Core Team
[   11.961078] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[   12.003913] xt_time: kernel timezone is -0000
[   12.018142] PPP generic driver version 2.4.2
[   12.027837] NET: Registered protocol family 24
[   12.038953] kmodloader: done loading kernel modules from /etc/modules.d/*
[   13.206587] urandom_read: 5 callbacks suppressed
[   13.206599] random: jshn: uninitialized urandom read (4 bytes read)
[   23.311257] mtk_soc_eth 1e100000.ethernet: PPE started
[   23.327072] br-lan: port 1(eth0.1) entered blocking state
[   23.337924] br-lan: port 1(eth0.1) entered disabled state
[   23.349363] device eth0.1 entered promiscuous mode
[   23.359238] device eth0 entered promiscuous mode
[   23.371147] br-lan: port 1(eth0.1) entered blocking state
[   23.381939] br-lan: port 1(eth0.1) entered forwarding state
[   23.393592] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   24.350325] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   24.725924] random: crng init done



BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+9856-c5e6f6b6c2
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/#

WN-DX1167R bootnumメモ

WN-DX1167Rのデュアルイメージ構成において、ブートするパーティションを切り替える bootnum フラグについてのメモ。

root@WN-DX1167R:/tmp/mtd# mstc_persist read bootnum
1
root@WN-DX1167R:/tmp/mtd# hexdump -n 128 -C /dev/mtd9
00000000  1b 05 ce 17 01 00 00 00  4a 4f 00 00 06 9e e4 d0  |........JO......|
00000010  4a 4f 00 00 06 9e e4 d0  00 00 00 00 00 00 00 00  |JO..............|
00000020  00 00 00 00 00 00 00 00  ff ff ff ff ff ff ff ff  |................|
00000030  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
*
00000080
root@WN-DX1167R:/tmp/mtd# mstc_persist write bootnum 2
Unlocking persist ...
root@WN-DX1167R:/tmp/mtd# hexdump -n 128 -C /dev/mtd9
00000000  1b 05 ce 17 02 00 00 00  4a 4f 00 00 06 9e e4 d0  |........JO......|
00000010  4a 4f 00 00 06 9e e4 d0  00 00 00 00 00 00 00 00  |JO..............|
00000020  00 00 00 00 00 00 00 00  ff ff ff ff ff ff ff ff  |................|
00000030  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
*
00000080

WN-DX1167R

再び某氏より提供頂いたもの。事前のファーム解析でMT7621を搭載していることが予想されていたものの、WAN側は1000Mbps対応ながらLAN側は100Mbpsまでとされており、内部的にどのような構造になっているのかが気になっていた。
弄っていくのでメモ。

Switch

zone WAN LAN
port
(WN-DX1167R)
インターネット (LAN番号刻印無し)
port
(MT7530)
port0 port1 port2 port3 port4

MAC

  • LAN: 34:76:C5:xx:xx:F4 (Ubootenv, ethaddr (text) / Factory, 0xE000 (hex))
  • WAN: 34:76:C5:xx:xx:F6 (Factory, 0xE006 (hex))
  • 2.4G: 34:76:C5:xx:xx:F4 (Factory, 0x4 (hex))
  • 5G: 34:76:C5:xx:xx:F5 (Factory, 0x8004 (hex))

U-Boot

ブートを止める方法が不明で入れず
→ 5chの情報を参考に強引にKernelへログインしたうえでブート時のmtdロックを回避、
sys debugflag 1
を設定してデバッグモードを有効化しZ-Loaderを停止できるように変更。再度ブート時にZ-Loaderに入り、
ATGU
でU-Bootへ移動する

log:

U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..Hit ESC key to stop autoboot: 1
ZLB> help
ATGO              boot up the whole system
ATGU              go back to U-Boot command line
ATUR              upgrade ras image by console
ATUF              upgrade factory by console
ATNR    x,y       upgrade image by TFTP (x=type[1:ras, 2:bootloader, 3:config, 4:romd 6:factory], y=filename)
ATUX              upgrade bootloader
ATBT    x         block0 write enable (1=enable, 0=disable)
ATEN    x,(y)     set BootExtension Debug Flag (y=password)
ATSE    x         show the seed of password generator
ATWZ    a,(b,c,d) write MAC , Country code, EngDbgFlag, MAC Quantity to FLASH
ATSH              dump manufacturer related data in FLASH
ATBU              dump manufacturer related data in working buffer
ATCB              copy FLASH MRD to working buffer
ATSN    x         set serial number to flash
ATSB              save working buffer to FLASH
ATQY    x         set MAC Quantity to working buffer
ATFL    x         set EngDebugFlag to working buffer
ATCO    x         set country code to working buffer
ATSR              reset
ATRT    (x,y,z,u) RAM read/write test (x=level, y=start addr, z=end addr, u=interations)
ATRM              restore default MRD
ATBR              reset to default Romfile
ATER              erase ROM-D data
ATHV    x         set hardware version to flash
ATGP    x,y       led control
ZLB> ATGU


=>## Application terminated, rc = 0x0

Please choose the operation: 
   1: Load system code to SDRAM via TFTP. 
   2: Load system code then write to Flash via TFTP. 
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   9: Load Boot Loader code then write to Flash via TFTP. 
default: 3

You choosed 4

                                                                                                                           0 

   
4: System Enter Boot Command Line Interface.

U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)
MSTC #

help
ヘルプコマンド潰されているのに “ヘルプ見ろ” と言われるのはネタっぽい

MSTC # help
Unknown command 'help' - try 'help'

version

MSTC # version
Unknown command 'version' - try 'help'

printenv

MSTC # printenv
bootcmd=tftp
ipaddr=10.10.10.123
serverip=10.10.10.3
serialnum=118H010878Z7
countrycode=EA
ethaddr=34:76:C5:**:**:F4
wifi2ssid1=IODATA-****f4-2G
wifi2ssid2=IO-Guest-****f4-2G
wifi1ssid1=IODATA-****f4-5G
wifiwpapsk=**********
wifiwpspin=********
wifi1ssid2=IO-Guest-****f4-5G
stdin=serial
stdout=serial
stderr=serial
ethact=Eth0 (10/100-M)
BootType=3

Environment size: 353/131068 bytes

tftp

MSTC # tftp

 NetLoop,call eth_halt ! 

 NetLoop,call eth_init ! 
Trying Eth0 (10/100-M)

 ETH_STATE_ACTIVE!! 
*** Warning: no boot file name; using 'test.bin'
Using Eth0 (10/100-M) device
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'test.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: T T 
Abort

Kernel

パスワードが設定されており、ログイン不可。
5chの情報を基に強引にログインし、情報を引き出し。

uname -a

root@WN-DX1167R:~# uname -a
Linux WN-DX1167R 3.10.14 #1 SMP Fri Oct 12 21:22:31 CST 2018 mips GNU/Linux

cat /proc/version

root@WN-DX1167R:~# cat /proc/version
Linux version 3.10.14 (*******@srv17) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 unknown) ) #1 SMP Fri Oct 12 21:22:31 CST 2018

cat /proc/cpuinfo

root@WN-DX1167R:~# cat /proc/cpuinfo
system type             : MT7621
machine                 : Unknown
processor               : 0
cpu model               : MIPS 1004Kc V2.15
BogoMIPS                : 583.68
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa                     : mips1 mips2 mips32r1 mips32r2
ASEs implemented        : mips16 dsp mt
shadow register sets    : 1
kscratch registers      : 0
core                    : 0
VPE                     : 0
VCED exceptions         : not available
VCEI exceptions         : not available

processor               : 1
cpu model               : MIPS 1004Kc V2.15
BogoMIPS                : 583.68
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa                     : mips1 mips2 mips32r1 mips32r2
ASEs implemented        : mips16 dsp mt
shadow register sets    : 1
kscratch registers      : 0
core                    : 0
VPE                     : 1
VCED exceptions         : not available
VCEI exceptions         : not available

processor               : 2
cpu model               : MIPS 1004Kc V2.15
BogoMIPS                : 583.68
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa                     : mips1 mips2 mips32r1 mips32r2
ASEs implemented        : mips16 dsp mt
shadow register sets    : 1
kscratch registers      : 0
core                    : 1
VPE                     : 0
VCED exceptions         : not available
VCEI exceptions         : not available

processor               : 3
cpu model               : MIPS 1004Kc V2.15
BogoMIPS                : 583.68
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa                     : mips1 mips2 mips32r1 mips32r2
ASEs implemented        : mips16 dsp mt
shadow register sets    : 1
kscratch registers      : 0
core                    : 1
VPE                     : 1
VCED exceptions         : not available
VCEI exceptions         : not available

cat /proc/meminfo

root@WN-DX1167R:~# cat /proc/meminfo
MemTotal:         125220 kB
MemFree:           70108 kB
Buffers:            5648 kB
Cached:            18780 kB
SwapCached:            0 kB
Active:            10748 kB
Inactive:          16236 kB
Active(anon):       3788 kB
Inactive(anon):     1732 kB
Active(file):       6960 kB
Inactive(file):    14504 kB
Unevictable:           0 kB
Mlocked:               0 kB
SwapTotal:             0 kB
SwapFree:              0 kB
Dirty:                 0 kB
Writeback:             0 kB
AnonPages:          2592 kB
Mapped:             2844 kB
Shmem:              2964 kB
Slab:              11968 kB
SReclaimable:       1936 kB
SUnreclaim:        10032 kB
KernelStack:         528 kB
PageTables:          252 kB
NFS_Unstable:          0 kB
Bounce:                0 kB
WritebackTmp:          0 kB
CommitLimit:       62608 kB
Committed_AS:       8816 kB
VmallocTotal:    1048372 kB
VmallocUsed:       11356 kB
VmallocChunk:     980924 kB

cat /proc/mtd

root@WN-DX1167R:~# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 07f80000 00020000 "ALL"
mtd1: 00100000 00020000 "Bootloader"
mtd2: 00100000 00020000 "Ubootenv"
mtd3: 00100000 00020000 "Factory"
mtd4: 03200000 00020000 "firmware"
mtd5: 03078a0e 00020000 "rootfs"
mtd6: 00100000 00020000 "Config"
mtd7: 03200000 00020000 "firmware_2"
mtd8: 00100000 00020000 "Config_2"
mtd9: 00100000 00020000 "persist"
mtd10: 00100000 00020000 "idmkey"
mtd11: 01380000 00020000 "Backup"
mtd12: 00100000 00020000 "SecondBoot"

ubus call system board

root@WN-DX1167R:~# ubus call system board
{
        "kernel": "3.10.14",
        "hostname": "WN-DX1167R",
        "system": "MT7621",
        "model": "MiCAP-3326C",
        "release": {
                "distribution": "OpenWrt",
                "version": "1.00.001",
                "revision": "unknown",
                "codename": "barrier_breaker",
                "target": "ramips\/generic",
                "description": "OpenWrt Barrier Breaker 1.00.001"
        }
}

fw_printenv

root@WN-DX1167R:~# fw_printenv
bootcmd=tftp
ipaddr=10.10.10.123
serverip=10.10.10.3
stdin=serial
stdout=serial
stderr=serial
serialnum=118H010878Z7
countrycode=EA
ethaddr=34:76:C5:**:**:F4
wifi2ssid1=IODATA-****f4-2G
wifi2ssid2=IO-Guest-****f4-2G
wifi1ssid1=IODATA-****f4-5G
wifiwpapsk=*************
wifiwpspin=********
wifi1ssid2=IO-Guest-****f4-5G

switch –help

root@WN-DX1167R:~# switch --help
Usage:
 switch acl etype add [ethtype] [portmap]              - drop etherytype packets
 switch acl dip add [dip] [portmap]                    - drop dip packets
 switch acl dip meter [dip] [portmap][meter:kbps]      - rate limit dip packets
 switch acl dip trtcm [dip] [portmap][CIR:kbps][CBS][PIR][PBS] - TrTCM dip packets
 switch acl port add [sport] [portmap]           - drop src port packets
 switch acl L4 add [2byes] [portmap]             - drop L4 packets with 2bytes payload
 switch add [mac] [portmap]                  - add an entry to switch table
 switch add [mac] [portmap] [vlan id]        - add an entry to switch table
 switch add [mac] [portmap] [vlan id] [age]  - add an entry to switch table
 switch clear                                - clear switch table
 switch del [mac]                            - delete an entry from switch table
 switch del [mac] [fid]                  - delete an entry from switch table
 switch dip add [dip] [portmap]                  - add a dip entry to switch table
 switch dip del [dip]                        - del a dip entry to switch table
 switch dip dump                                 - dump switch dip table
 switch dip clear                                - clear switch dip table
 switch dump            - dump switch table
 switch ingress-rate on [port] [Kbps]        - set ingress rate limit on port 0~4 
 switch egress-rate on [port] [Kbps]         - set egress rate limit on port 0~4 
 switch ingress-rate off [port]              - del ingress rate limit on port 0~4 
 switch egress-rate off [port]               - del egress rate limit on port 0~4
 switch filt [mac]                           - add a SA filtering entry (with portmap 1111111) to switch table
 switch filt [mac] [portmap]                 - add a SA filtering entry to switch table
 switch filt [mac] [portmap] [vlan id]       - add a SA filtering entry to switch table
 switch filt [mac] [portmap] [vlan id] [age] - add a SA filtering entry to switch table
 switch igmpsnoop on [Query Interval] [default router portmap] - turn on IGMP snoop and  router port learning (Query Interval 1~255)
 switch igmpsnoop off                                  - turn off IGMP snoop and router port learning
 switch igmpsnoop enable [port#]                       - enable IGMP HW leave/join/Squery/Gquery
 switch igmpsnoop disable [port#]                      - disable IGMP HW leave/join/Squery/Gquery
 switch mymac [mac] [portmap]                  - add a mymac entry to switch table
 switch mirror monitor [portnumber]            - enable port mirror and indicate monitor port number
 switch mirror target [portnumber] [0:off, 1:rx, 2:tx, 3:all]  - set port mirror target
 switch phy [phy_addr]                   - dump phy register of specific port
 switch phy mt7530                       - dump mt7530 phy registers
 switch phy                                      - dump all phy registers
 switch pvid [port] [pvid]                - set pvid on port 0~4 
 switch reg r [offset]                       - register read from offset
 switch reg w [offset] [value]               - register write value to offset
 switch reg d [offset]                       - register dump
 switch sip add [sip] [dip] [portmap]            - add a sip entry to switch table
 switch sip del [sip] [dip]                          - del a sip entry to switch table
 switch sip dump                                 - dump switch sip table
 switch sip clear                                - clear switch sip table
 switch tag on [port]                        - keep vlan tag for egress packet on prot 0~4
 switch tag off [port]                       - remove vlan tag for egress packet on port 0~4
 switch vlan dump                            - dump switch table
 switch vlan set [vlan idx (NULL)][vid] [portmap]  - set vlan id and associated member

switch vlan dump

root@WN-DX1167R:~# switch vlan dump
  vid  fid  portmap    s-tag
    1    0  -1111-11       0
    2    0  1----1--       0
    3    0  invalid
    4    0  invalid
    5    0  invalid
    6    0  invalid
    7    0  invalid
    8    0  invalid
    9    0  invalid
   10    0  invalid
   11    0  invalid
   12    0  invalid
   13    0  invalid
   14    0  invalid
   15    0  invalid
   16    0  invalid

sys –help

root@WN-DX1167R:~# sys --help
Usage:
         sys atsh 
         sys atwz  []
         sys atsn 
         sys athwver 
         sys debugflag 
         sys ledctl 
         sys loadrom 
         sys mrd [0:Check default MRD(default option) | 1:Reset default MRD]
         sys romreset 

sys atsh

root@WN-DX1167R:~# sys atsh
Firmware Version              : 3.10(XIK.0)b11                
Boot Version                  : 1.28.03 | 08/06/2018 14:37:44 
Product Model                 : WN-DX1167R                    
First MAC Address             : 34:76:C5:**:**:F4             
MAC Quantity                  : 4                             
Serial Number                 : 118H010878Z7                  
firmware Checksum             : 84535509                      
Kernel Checksum               : d775cdc8                      
RomFile Checksum              : c1d7f1c5                      
Country Code                  : EA                            
Boot Number                   : 1

bootlog

U-Boot 1.1.3 (Aug  6 2018 - 14:37:41)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f98000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fcb030
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 F1 80 1D 01]
Device found in MTK table, ID: 1f1, EXT_ID: 801d01
Support this Device in MTK table! 1f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
....============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Aug  6 2018  Time:14:37:41
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
.## Starting application at 0x81E00000 ...


Z-LOADER V1.28 | 08/06/2018 14:37:44


..
Checking image 1...
   Image Name:   3.10(XIK.0)b11
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1602994 Bytes =  1.5 MB
   Load Address: 80001000
   Entry Point:  80001000
.........................   Verifying Combo Checksum ... .................................................................................................................................................## Booting image at bc400000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...


LINUX started...

 THIS IS ASIC

SDK 5.0.S.0
[    0.000000] Linux version 3.10.14 (*******@srv17) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 unknown) ) #1 SMP Fri Oct 12 21:22:31 CST 2018
[    0.000000] 
[    0.000000]  The CPU feqenuce set to 880 MHz
[    0.000000] GCMP present
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] Software DMA cache coherency
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x07ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x07ffffff]
[    0.000000] Detected 3 available secondary CPU(s)
[    0.000000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] PERCPU: Embedded 7 pages/cpu @81103000 s6464 r8192 d14016 u32768
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS1,57600n8 BootImage=1 root=/dev/mtdblock5 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00041000
[    0.000000] Readback ErrCtl register=00041000
[    0.000000] Memory: 125008k/131072k available (3536k kernel code, 6064k reserved, 852k data, 212k init, 0k highmem)
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS:128
[    0.000000] console [ttyS1] enabled
[    0.116000] Calibrating delay loop... 562.17 BogoMIPS (lpj=1124352)
[    0.148000] pid_max: default: 32768 minimum: 301
[    0.152000] Mount-cache hash table entries: 512
[    0.156000] launch: starting cpu1
[    0.160000] launch: cpu1 gone!
[    0.160000] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.160000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.160000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.160000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.192000] Synchronize counters for CPU 1: done.
[    0.200000] launch: starting cpu2
[    0.204000] launch: cpu2 gone!
[    0.204000] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.204000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.204000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.204000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.232000] Synchronize counters for CPU 2: done.
[    0.240000] launch: starting cpu3
[    0.244000] launch: cpu3 gone!
[    0.244000] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.244000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.244000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.244000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.272000] Synchronize counters for CPU 3: done.
[    0.280000] Brought up 4 CPUs
[    0.284000] NET: Registered protocol family 16
[    0.576000] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.580000] PCIE PHY initialize
[    0.584000] ***** Xtal 40MHz *****
[    0.588000] start MT7621 PCIe register access
[    1.164000] RALINK_RSTCTRL = 7000000
[    1.168000] RALINK_CLKCFG1 = 77ffeff8
[    1.172000] 
[    1.172000] *************** MT7621 PCIe RC mode *************
[    1.652000] PCIE0 no card, disable it(RST&CLK)
[    1.656000] PCIE2 no card, disable it(RST&CLK)
[    1.660000] pcie_link status = 0x2
[    1.664000] RALINK_RSTCTRL= 2000000
[    1.668000] *** Configure Device number setting of Virtual PCI-PCI bridge ***
[    1.672000] RALINK_PCI_PCICFG_ADDR = 21007f2 -> 20107f2
[    1.676000] PCIE1 enabled
[    1.680000] interrupt enable status: 200000
[    1.684000] Port 0 N_FTS = 1b105000
[    1.688000] config reg done
[    1.692000] init_rt2880pci done
[    1.712000] bio: create slab  at 0
[    1.716000] SCSI subsystem initialized
[    1.720000] usbcore: registered new interface driver usbfs
[    1.724000] usbcore: registered new interface driver hub
[    1.728000] usbcore: registered new device driver usb
[    1.732000] PCI host bridge to bus 0000:00
[    1.736000] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    1.740000] pci_bus 0000:00: root bus resource [io  0x1e160000-0x1e16ffff]
[    1.744000] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    1.748000] pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000)
[    1.752000] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    1.756000] pci 0000:00:00.0: BAR 1: assigned [mem 0x60100000-0x6010ffff]
[    1.760000] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    1.764000] pci 0000:00:00.0: PCI bridge to [bus 01]
[    1.768000] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    1.772000] BAR0 at slot 0 = 0
[    1.776000] bus=0x0, slot = 0x0
[    1.780000] res[0]->start = 0
[    1.784000] res[0]->end = 0
[    1.788000] res[1]->start = 60100000
[    1.792000] res[1]->end = 6010ffff
[    1.796000] res[2]->start = 0
[    1.800000] res[2]->end = 0
[    1.804000] res[3]->start = 0
[    1.808000] res[3]->end = 0
[    1.812000] res[4]->start = 0
[    1.816000] res[4]->end = 0
[    1.820000] res[5]->start = 0
[    1.824000] res[5]->end = 0
[    1.828000] bus=0x1, slot = 0x0, irq=0x18
[    1.832000] res[0]->start = 60000000
[    1.836000] res[0]->end = 600fffff
[    1.840000] res[1]->start = 0
[    1.844000] res[1]->end = 0
[    1.848000] res[2]->start = 0
[    1.852000] res[2]->end = 0
[    1.856000] res[3]->start = 0
[    1.860000] res[3]->end = 0
[    1.864000] res[4]->start = 0
[    1.868000] res[4]->end = 0
[    1.872000] res[5]->start = 0
[    1.876000] res[5]->end = 0
[    1.880000] Switching to clocksource MIPS
[    1.884000] NET: Registered protocol family 2
[    1.892000] TCP established hash table entries: 1024 (order: 1, 8192 bytes)
[    1.908000] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    1.920000] TCP: Hash tables configured (established 1024 bind 1024)
[    1.932000] TCP: reno registered
[    1.940000] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    1.952000] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    1.964000] NET: Registered protocol family 1
[    2.060000] 4 CPUs re-calibrate udelay(lpj = 1167360)
[    2.072000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    2.084000] jffs2: version 2.2. (NAND) (SUMMARY)  (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    2.108000] io scheduler noop registered (default)
[    2.116000] reg_int_mask=0, INT_MASK= 0 
[    2.124000] HSDMA_init
[    2.128000] 
[    2.128000]  hsdma_phy_tx_ring0 = 0x0fe38000, hsdma_tx_ring0 = 0xafe38000
[    2.144000] 
[    2.144000]  hsdma_phy_rx_ring0 = 0x0fe34000, hsdma_rx_ring0 = 0xafe34000
[    2.164000] TX_CTX_IDX0 = 0
[    2.168000] TX_DTX_IDX0 = 0
[    2.172000] RX_CRX_IDX0 = 3ff
[    2.180000] RX_DRX_IDX0 = 0
[    2.184000] set_fe_HSDMA_glo_cfg
[    2.192000] HSDMA_GLO_CFG = 465
[    2.204000] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    2.216000] serial8250: ttyS0 at MMIO 0x1e000d00 (irq = 27) is a 16550A
[    2.228000] serial8250: ttyS1 at MMIO 0x1e000c00 (irq = 26) is a 16550A
[    2.244000] Ralink gpio driver initialized
[    2.252000] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    2.264000] Allocate 16 byte aligned buffer: 80491c20
[    2.276000] Enable NFI Clock
[    2.280000] # MTK NAND # : Use HW ECC
[    2.288000] NAND ID [01 F1 80 1D 01, 00801d01]
[    2.296000] Device found in MTK table, ID: 1f1, EXT_ID: 801d01
[    2.308000] Support this Device in MTK table! 1f1 
[    2.320000] NAND device: Manufacturer ID: 0x01, Chip ID: 0xf1 (AMD/Spansion NAND 128MiB 3,3V 8-bit), 128MiB, page size: 2048, OOB size: 64
[    2.344000] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    2.356000] Scanning device for bad blocks
[    2.648000] Signature matched and data read!
[    2.656000] load_fact_bbt success 1023
[    2.664000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.684000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.704000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.724000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.744000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.760000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.780000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.800000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[    2.820000] Creating 12 MTD partitions on "MT7621-NAND":
[    2.832000] 0x000000000000-0x000007f80000 : "ALL"
[    2.840000] 0x000000000000-0x000000100000 : "Bootloader"
[    2.852000] 0x000000100000-0x000000200000 : "Ubootenv"
[    2.864000] 0x000000200000-0x000000300000 : "Factory"
[    2.876000] 0x000000400000-0x000003600000 : "firmware"
[    2.888000] 0x0000005875f2-0x000003600000 : "rootfs"
[    2.900000] mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[    2.936000] 0x000003600000-0x000003700000 : "Config"
[    2.944000] 0x000003700000-0x000006900000 : "firmware_2"
[    2.956000] 0x000006900000-0x000006a00000 : "Config_2"
[    2.968000] 0x000006a00000-0x000006b00000 : "persist"
[    2.980000] 0x000006b00000-0x000006c00000 : "idmkey"
[    2.988000] 0x000006c00000-0x000007f80000 : "Backup"
[    3.000000] 0x000000300000-0x000000400000 : "SecondBoot"
[    3.012000] [mtk_nand] probe successfully!
[    3.020000] rootfs = 5875f2 to d20000
[    3.028000] PPP generic driver version 2.4.2
[    3.036000] NET: Registered protocol family 24
[    3.044000] PPTP driver version 0.8.5
[    3.052000] rdm_major = 253
[    3.060000] GMAC1_MAC_ADRH -- : 0x00003476
[    3.068000] GMAC1_MAC_ADRL -- : 0xc5cca9f4
[    3.076000] Ralink APSoC Ethernet Driver Initilization. v3.1  1024 rx/tx descriptors allocated, mtu = 1500!
[    3.096000] GMAC1_MAC_ADRH -- : 0x00003476
[    3.104000] GMAC1_MAC_ADRL -- : 0xc5cca9f4
[    3.112000] register mt7530
[    3.116000] PROC INIT OK!
[    3.124000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    3.136000] ehci-pci: EHCI PCI platform driver
[    3.144000] *****run project phy.
[    3.164000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.184000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.204000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.224000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.244000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.264000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.284000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.304000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.324000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.344000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.388000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.408000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.428000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.448000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.468000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.488000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.508000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.528000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.548000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.568000] FM_OUT value: u4FmOut = 0(0x00000000)
[    3.708000] xhci-hcd xhci-hcd: xHCI Host Controller
[    3.716000] xhci-hcd xhci-hcd: new USB bus registered, assigned bus number 1
[    3.732000] xhci-hcd xhci-hcd: irq 22, io mem 0x1e1c0000
[    3.744000] hub 1-0:1.0: USB hub found
[    3.752000] hub 1-0:1.0: 2 ports detected
[    3.760000] xhci-hcd xhci-hcd: xHCI Host Controller
[    3.768000] xhci-hcd xhci-hcd: new USB bus registered, assigned bus number 2
[    3.784000] hub 2-0:1.0: USB hub found
[    3.792000] hub 2-0:1.0: 1 port detected
[    3.800000] usbcore: registered new interface driver usb-storage
[    3.812000] gre: GRE over IPv4 demultiplexor driver
[    3.820000] TCP: cubic registered
[    3.828000] NET: Registered protocol family 10
[    3.836000] NET: Registered protocol family 17
[    3.848000] Bridge firewalling registered
[    3.856000] 8021q: 802.1Q VLAN Support v1.8
[    3.872000] VFS: Mounted root (squashfs filesystem) readonly on device 31:5.
[    3.884000] Freeing unused kernel memory: 212K (8044b000 - 80480000)
procd: Console is alive
procd: - preinit -
[    5.196000] 34:76:FFFFFFC5:FFFFFFCC:FFFFFFA9:FFFFFFF4
[    5.208000] Raeth v3.1 (Tasklet)
[    5.216000] set CLK_CFG_0 = 0x40a00020!!!!!!!!!!!!!!!!!!1
[    5.232000] phy_free_head is 0xf75a000!!!
[    5.240000] phy_free_tail_phy is 0xf75bff0!!!
[    5.248000] txd_pool=af760000 phy_txd_pool=0F760000
[    5.256000] ei_local->skb_free start address is 0x87ed26dc.
[    5.268000] free_txd: 0f760010, ei_local->cpu_ptr: 0F760000
[    5.280000]  POOL  HEAD_PTR | DMA_PTR | CPU_PTR 
[    5.288000] ----------------+---------+--------
[    5.296000]      0xaf760000 0x0F760000 0x0F760000
[    5.308000] 
[    5.308000] phy_qrx_ring = 0x0f714000, qrx_ring = 0xaf714000
[    5.324000] 
[    5.324000] phy_rx_ring0 = 0x0f75c000, rx_ring0 = 0xaf75c000
[    5.356000] MT7530 Reset Completed!!
[    5.372000] change HW-TRAP to 0x117c8f
[    5.380000] set LAN/WAN WLLLL
[    5.392000] GMAC1_MAC_ADRH -- : 0x00003476
[    5.400000] GMAC1_MAC_ADRL -- : 0xc5cca9f4
[    5.408000] GDMA2_MAC_ADRH -- : 0x00003476
[    5.416000] GDMA2_MAC_ADRL -- : 0xc5cca9f6
[    5.424000] eth1: ===> VirtualIF_open
[    5.432000] MT7621 GE2 link rate to 1G
[    5.432000] CDMA_CSG_CFG = 81000000
[    5.432000] GDMA1_FWD_CFG = 20710000
[    5.432000] GDMA2_FWD_CFG = 20710000
[    5.556000] led=9, on=1, off=1, blinks,=1, reset=1, time=4000 low_trigger=1
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    7.004000] ESW: Link Status Changed - Port2 Link UP
[    8.668000] led=9, on=1, off=1, blinks,=1, reset=1, time=4000 low_trigger=1
Could not open mtd device: /dev/mtd5
reading ro[    8.784000] ra2880stop()...otfs failed
mouDone
[    8.792000] eth1: ===> VirtualIF_close

[    8.804000] Free TX/RX Ring Memory!
procd: - early -
procd: - ubus -
procd: - init -
Please press Enter to activate this console.
[   10.748000] jffs2: notice: (762) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   10.872000] jffs2: notice: (765) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
##### Skip Checking Config. #####
Mode Switch: Router/AP
[   11.336000] Initializing XFRM netlink socket
[   11.344000] NET: Registered protocol family 15
[   11.356000] sbdev driver(major: 254) installed.
[   11.364000] wpdev driver(major: 250) installed.
[   11.392000] l2tp_core: L2TP core driver, V2.0
[   11.400000] l2tp_netlink: L2TP netlink interface
[   11.412000] ip_gre: GRE over IPv4 tunneling driver
[   11.428000] ip_tables: (C) 2000-2006 Netfilter Core Team
[   11.440000] Type=Restricted Cone
[   11.452000] nf_conntrack version 0.5.0 (1956 buckets, 7824 max)
[   11.468000] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   11.496000] ebt_time: kernel timezone is -0000
[   11.508000] Ebtables v2.0 registered
[   11.524000] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[   11.652000] Netfilter messages via NETLINK v0.30.
[   11.664000] PPP MPPE Compression module registered
[   11.676000] Ralink APSoC Hardware Watchdog Timer
[   11.712000] xt_time: kernel timezone is -0000
[   11.732000] ctnetlink v0.93: registering with nfnetlink.
[   14.640000] mtd: ALL locked
[   14.648000] mtd: Bootloader locked
[   14.652000] mtd: Ubootenv locked
[   14.660000] mtd: Factory locked
[   14.664000] mtd_locked init
[   16.436000] 34:76:FFFFFFC5:FFFFFFCC:FFFFFFA9:FFFFFFF4
[   16.448000] Raeth v3.1 (Tasklet)
[   16.456000] set CLK_CFG_0 = 0x40a00020!!!!!!!!!!!!!!!!!!1
[   16.472000] phy_free_head is 0xef42000!!!
[   16.480000] phy_free_tail_phy is 0xef43ff0!!!
[   16.488000] txd_pool=aef48000 phy_txd_pool=0EF48000
[   16.496000] ei_local->skb_free start address is 0x87ed26dc.
[   16.508000] free_txd: 0ef48010, ei_local->cpu_ptr: 0EF48000
[   16.520000]  POOL  HEAD_PTR | DMA_PTR | CPU_PTR 
[   16.528000] ----------------+---------+--------
[   16.536000]      0xaef48000 0x0EF48000 0x0EF48000
[   16.548000] 
[   16.548000] phy_qrx_ring = 0x0ef01000, qrx_ring = 0xaef01000
[   16.564000] 
[   16.564000] phy_rx_ring0 = 0x0ef54000, rx_ring0 = 0xaef54000
[   16.604000] MT7530 Reset Completed!!
[   16.620000] change HW-TRAP to 0x117c8f
[   16.628000] set LAN/WAN WLLLL
[   16.640000] GMAC1_MAC_ADRH -- : 0x00003476
[   16.648000] GMAC1_MAC_ADRL -- : 0xc5cca9f4
[   16.656000] eth1: ===> VirtualIF_open
[   16.664000] MT7621 GE2 link rate to 1G
[   16.664000] CDMA_CSG_CFG = 81000000
[   16.664000] GDMA1_FWD_CFG = 20710000
[   16.664000] GDMA2_FWD_CFG = 20710000
[   16.664000] device eth0 entered promiscuous mode
[   16.664000] br-lan: port 1(eth0) entered forwarding state
[   16.664000] br-lan: port 1(eth0) entered forwarding state
[   16.728000] eth1: ===> VirtualIF_open
[   18.268000] ESW: Link Status Changed - Port2 Link UP
[   18.668000] br-lan: port 1(eth0) entered forwarding state
[   22.420000] register mt_drv
[   22.440000] 
[   22.440000] 
[   22.440000] === pAd = c1f81000, size = 3627760 ===
[   22.440000] 
[   22.460000] PciHif.CSRBaseAddress =0xc1e80000, csr_addr=0xc1e80000!
[   22.488000] get_wdev_by_idx: invalid idx(0)
[   22.500000] RTMPInitPCIeDevice():device_id=0x7615
[   22.508000] DriverOwn()::Try to Clear FW Own...
[   22.844000] DriverOwn()::Success to clear FW Own
[   22.852000] mt_pci_chip_cfg(): HWVer=0x8a10, FWVer=0x8a10, pAd->ChipID=0x7615
[   22.864000] mt_pci_chip_cfg(): HIF_SYS_REV=0x76150001
[   22.876000] RtmpChipOpsHook(493): Not support for HIF_MT yet! MACVersion=0x0
[   22.888000] mt7615_init()-->
[   22.896000] Use the default ePAeLNA bin image!
[   22.904000] Use the default /etc_ro/wlan/MT7615E_EEPROM1.bin bin image!
[   22.916000] rxq = c22f26f4
[   24.444000] ctl->ackq = c22f2700
[   24.448000] ctl->kickq = c22f270c
[   24.456000] ctl->tx_doneq = c22f2718
[   24.464000] ctl->rx_doneq = c22f2724
[   24.472000] mt7615_fw_prepare():FW(8a10), HW(8a10), CHIPID(7615))
[   24.484000] mt7615_fw_prepare(2701): MT7615_E3, USE E3 patch and ram code binary image
[   24.500000] AndesMTLoadRomMethodFwDlRing(1036), cap->rom_patch_len(10206)
[   24.512000] AndesRestartCheck: Current TOP_MISC2(0x1)
[   24.524000] AndesRestartCheck: (TOP_MISC2 = 1), ready to continue...RET(0)
[   24.536000] 20161013140927a
[   24.540000] 
[   24.544000] platform = 
[   24.548000] ALPS
[   24.552000] hw/sw version = 
[   24.560000] 8a108a10
[   24.564000] patch version = 
[   24.568000] 00000010
[   24.572000] Patch SEM Status=2
[   24.580000] MtCmdPatchSemGet:(ret = 0)
[   24.588000] 
[   24.588000] Patch is not ready && get semaphore success, SemStatus(2)
[   24.604000] EventGenericEventHandler: CMD Success
[   24.612000] MtCmdAddressLenReq:(ret = 0)
[   24.620000] MtCmdPatchFinishReq
[   24.640000] EventGenericEventHandler: CMD Success
[   24.648000] Send checksum req..
[   24.652000] Patch SEM Status=3
[   24.660000] MtCmdPatchSemGet:(ret = 0)
[   24.668000] 
[   24.668000] Release patch semaphore, SemStatus(3)
[   24.680000] AndesMTEraseRomPatch
[   24.688000] WfMcuHwInit: Before NICLoadFirmware, check IcapMode=0
[   24.700000] AndesMTLoadFwMethodFwDlRing(810), cap->fw_len(460360)
[   24.712000] Build Date:_201701111925
[   24.716000] Build Date:_201701111925
[   24.724000] AndesRestartCheck: Current TOP_MISC2(0x1)
[   24.736000] AndesRestartCheck: (TOP_MISC2 = 1), ready to continue...RET(0)
[   24.748000] EventGenericEventHandler: CMD Success
[   24.760000] MtCmdAddressLenReq:(ret = 0)
[   24.772000] EventGenericEventHandler: CMD Success
[   24.780000] MtCmdAddressLenReq:(ret = 0)
[   24.788000] MtCmdFwStartReq: override = 1, address = 540672
[   24.800000] EventGenericEventHandler: CMD Success
[   24.808000] Build Date:_201612301011
[   24.816000] EventGenericEventHandler: CMD Success
[   24.824000] MtCmdAddressLenReq:(ret = 0)
[   24.832000] MtCmdFwStartReq: override = 4, address = 0
[   24.908000] EventGenericEventHandler: CMD Success
[   24.948000] WfMcuHwInit: NICLoadFirmware OK, Check IcapMode=0
[   24.960000] MCU Init Done!
[   24.968000]  MtCmdSetRlmPorCal: (ret = 0) 
[   24.976000] efuse_probe: efuse = 10000212
[   24.984000] RtmpChipOpsEepromHook::e2p_type=2, inf_Type=5
[   24.996000] RtmpEepromGetDefault::e2p_dafault=1
[   25.004000] RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 1
[   25.020000] NVM is FLASH mode. dev_idx [0] FLASH OFFSET [0x0]
[   25.032000] NICReadEEPROMParameters():Calling eeinit
[   25.052000] NICReadEEPROMParameters: EEPROM 0x52 b317
[   25.068000] MtCmdSetTxLpfCal:(ret = 0)
[   25.076000] MtCmdSetTxIqCal:(ret = 0)
[   25.080000] MtCmdSetTxDcCal:(ret = 0)
[   25.088000] MtCmdSetRxFiCal:(ret = 0)
[   25.096000] MtCmdSetRxFdCal:(ret = 0)
[   25.104000] MtCmdSetRxFdCal:(ret = 0)
[   25.112000] MtCmdSetRxFdCal:(ret = 0)
[   25.120000] MtCmdSetRxFdCal:(ret = 0)
[   25.124000] MtCmdSetRxFdCal:(ret = 0)
[   25.132000] MtCmdSetRxFdCal:(ret = 0)
[   25.140000] MtCmdSetRxFdCal:(ret = 0)
[   25.148000] MtCmdSetRxFdCal:(ret = 0)
[   25.156000] MtCmdSetRxFdCal:(ret = 0)
[   25.164000] NICReadEEPROMParameters: EEPROM 0x52 b317
[   25.728000] Country Region from e2p = 101
[   25.736000] mt7615_antenna_default_reset(): TxPath = 4, RxPath = 4
[   25.748000] mt7615_antenna_default_reset(): DBDC 2G TxPath = 2, 2G RxPath = 2
[   25.764000] mt7615_antenna_default_reset(): DBDC 5G TxPath = 2, 2G RxPath = 2
[   25.776000] rtmp_read_txpwr_from_eeprom(235): Don't Support this now!
[   25.788000] RTMPReadTxPwrPerRate(1382): Don't Support this now!
[   25.800000] RcRadioInit(): DbdcMode=1, ConcurrentBand=2
[   25.812000] RcRadioInit(): pRadioCtrl=85360444,Band=0,rfcap=1,channel=1,PhyMode=2
[   25.828000] RcRadioInit(): pRadioCtrl=85360530,Band=1,rfcap=2,channel=36,PhyMode=1
[   25.844000] MtCmdSetDbdcCtrl:(ret = 0)
[   25.852000] Band Rf: 1, Phy Mode: 2
[   25.856000] Band Rf: 2, Phy Mode: 1
[   25.864000] AntCfgInit(2700): Not support for HIF_MT yet!
[   25.876000] MtSingleSkuLoadParam: RF_LOCKDOWN Feature OFF !!!
[   25.888000] MtBfBackOffLoadTable: RF_LOCKDOWN Feature OFF !!!
[   25.900000] EEPROM Init Done!
[   25.904000] mt_mac_init()-->
[   25.912000] mt_mac_pse_init(2716): Don't Support this now!
[   25.924000] mt7615_init_mac_cr()-->
[   25.928000] mt7615_init_mac_cr(): TMAC_TRCR0=0x82783c8c
[   25.940000] mt7615_init_mac_cr(): TMAC_TRCR1=0x82783c8c
[   25.948000] MtAsicSetMacMaxLen(1290): Not finish Yet!
[   25.960000] 
[   26.124000] MtCmdSetMacTxRx:(ret = 0)
[   26.132000] MtCmdSetMacTxRx:(ret = 0)
[   26.140000] [DfsSwitchCheck]: DFS ByPass TX calibration.
[   26.152000] mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
[   26.168000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   26.180000] mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
[   26.196000] MtCmdGetTXDPDCalResult:(ret = 0)
[   26.208000] MtCmdChannelSwitch: control_chl = 36,control_ch2=0, central_chl = 42 DBDCIdx= 1, Band= 0 
[   26.224000] BW = 2,TXStream = 2, RXStream = 2, scan(1)
[   26.460000] [DfsSwitchCheck]: DFS ByPass TX calibration.
[   26.468000] mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
[   26.488000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   26.496000] mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
[   26.516000] MtCmdGetTXDPDCalResult:(ret = 0)
[   26.524000] MtCmdChannelSwitch: control_chl = 40,control_ch2=0, central_chl = 42 DBDCIdx= 1, Band= 0 
[   26.544000] BW = 2,TXStream = 2, RXStream = 2, scan(1)
[   26.776000] [DfsSwitchCheck]: DFS ByPass TX calibration.
[   26.784000] mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
[   26.804000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   26.812000] mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
[   26.832000] MtCmdGetTXDPDCalResult:(ret = 0)
[   26.840000] MtCmdChannelSwitch: control_chl = 44,control_ch2=0, central_chl = 42 DBDCIdx= 1, Band= 0 
[   26.860000] BW = 2,TXStream = 2, RXStream = 2, scan(1)
[   27.092000] [DfsSwitchCheck]: DFS ByPass TX calibration.
[   27.100000] mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
[   27.120000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   27.128000] mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
[   27.148000] MtCmdGetTXDPDCalResult:(ret = 0)
[   27.156000] MtCmdChannelSwitch: control_chl = 48,control_ch2=0, central_chl = 42 DBDCIdx= 1, Band= 0 
[   27.176000] BW = 2,TXStream = 2, RXStream = 2, scan(1)
[   27.408000] ====================================================================
[   27.420000] Channel  36 : Busy Time =  33401, Skip Channel = FALSE, BwCap = TRUE
[   27.436000] Channel  40 : Busy Time =  35610, Skip Channel = FALSE, BwCap = TRUE
[   27.452000] Channel  44 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
[   27.464000] Channel  48 : Busy Time =      0, Skip Channel = FALSE, BwCap = TRUE
[   27.480000] ====================================================================
[   27.496000] Rule 3 Channel Busy time value : Select Primary Channel 44 
[   27.508000] Rule 3 Channel Busy time value : Min Channel Busy = 35610
[   27.520000] Rule 3 Channel Busy time value : BW = 80
[   27.532000]  AutoChSelUpdateChannel(): Update channel for wdev0 for this band PhyMode = 49,Channel = 44  
[   27.552000]  AutoChSelUpdateChannel(): Update channel for wdev1 for this band PhyMode = 49,Channel = 44  
[   27.572000]  AutoChSelUpdateChannel(): Update channel for wdev2 for this band PhyMode = 49,Channel = 44  
[   27.592000]  AutoChSelUpdateChannel(): Update channel for wdev3 for this band PhyMode = 49,Channel = 44  
[   27.612000]  AutoChSelUpdateChannel(): Update channel for wdev4 for this band PhyMode = 14,Channel = 0  
[   27.632000]  AutoChSelUpdateChannel(): Update channel for wdev5 for this band PhyMode = 14,Channel = 0  
[   27.652000]  AutoChSelUpdateChannel(): Update channel for wdev6 for this band PhyMode = 14,Channel = 0  
[   27.672000]  AutoChSelUpdateChannel(): Update channel for wdev7 for this band PhyMode = 14,Channel = 0  
[   27.692000] mt7615_apply_dcoc() : reload Central CH [1] BW [0] from cetral freq [2417]  offset [2200] 
[   27.712000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   27.720000] mt7615_apply_dpd() : reload Central CH [1] BW [0] from cetral freq [2422] i[44] offset [4b20] 
[   27.740000] MtCmdGetTXDPDCalResult:(ret = 0)
[   27.748000] MtCmdChannelSwitch: control_chl = 1,control_ch2=0, central_chl = 1 DBDCIdx= 0, Band= 0 
[   27.768000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   28.020000] mt7615_apply_dcoc() : reload Central CH [2] BW [0] from cetral freq [2417]  offset [2200] 
[   28.036000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   28.044000] mt7615_apply_dpd() : reload Central CH [2] BW [0] from cetral freq [2422] i[44] offset [4b20] 
[   28.064000] MtCmdGetTXDPDCalResult:(ret = 0)
[   28.072000] MtCmdChannelSwitch: control_chl = 2,control_ch2=0, central_chl = 2 DBDCIdx= 0, Band= 0 
[   28.092000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   28.328000] mt7615_apply_dcoc() : reload Central CH [3] BW [0] from cetral freq [2417]  offset [2200] 
[   28.344000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   28.352000] mt7615_apply_dpd() : reload Central CH [3] BW [0] from cetral freq [2422] i[44] offset [4b20] 
[   28.372000] MtCmdGetTXDPDCalResult:(ret = 0)
[   28.380000] MtCmdChannelSwitch: control_chl = 3,control_ch2=0, central_chl = 3 DBDCIdx= 0, Band= 0 
[   28.400000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   28.636000] mt7615_apply_dcoc() : reload Central CH [4] BW [0] from cetral freq [2432]  offset [2300] 
[   28.652000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   28.660000] mt7615_apply_dpd() : reload Central CH [4] BW [0] from cetral freq [2422] i[44] offset [4b20] 
[   28.680000] MtCmdGetTXDPDCalResult:(ret = 0)
[   28.688000] MtCmdChannelSwitch: control_chl = 4,control_ch2=0, central_chl = 4 DBDCIdx= 0, Band= 0 
[   28.708000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   29.004000] mt7615_apply_dcoc() : reload Central CH [5] BW [0] from cetral freq [2432]  offset [2300] 
[   29.020000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   29.028000] mt7615_apply_dpd() : reload Central CH [5] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
[   29.048000] MtCmdGetTXDPDCalResult:(ret = 0)
[   29.056000] MtCmdChannelSwitch: control_chl = 5,control_ch2=0, central_chl = 5 DBDCIdx= 0, Band= 0 
[   29.076000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   29.312000] mt7615_apply_dcoc() : reload Central CH [6] BW [0] from cetral freq [2432]  offset [2300] 
[   29.328000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   29.336000] mt7615_apply_dpd() : reload Central CH [6] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
[   29.356000] MtCmdGetTXDPDCalResult:(ret = 0)
[   29.364000] MtCmdChannelSwitch: control_chl = 6,control_ch2=0, central_chl = 6 DBDCIdx= 0, Band= 0 
[   29.384000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   29.620000] mt7615_apply_dcoc() : reload Central CH [7] BW [0] from cetral freq [2447]  offset [2400] 
[   29.636000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   29.644000] mt7615_apply_dpd() : reload Central CH [7] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
[   29.664000] MtCmdGetTXDPDCalResult:(ret = 0)
[   29.672000] MtCmdChannelSwitch: control_chl = 7,control_ch2=0, central_chl = 7 DBDCIdx= 0, Band= 0 
[   29.692000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   29.928000] mt7615_apply_dcoc() : reload Central CH [8] BW [0] from cetral freq [2447]  offset [2400] 
[   29.944000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   29.952000] mt7615_apply_dpd() : reload Central CH [8] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
[   29.972000] MtCmdGetTXDPDCalResult:(ret = 0)
[   29.980000] MtCmdChannelSwitch: control_chl = 8,control_ch2=0, central_chl = 8 DBDCIdx= 0, Band= 0 
[   30.000000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   30.236000] mt7615_apply_dcoc() : reload Central CH [9] BW [0] from cetral freq [2447]  offset [2400] 
[   30.252000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   30.260000] mt7615_apply_dpd() : reload Central CH [9] BW [0] from cetral freq [2442] i[45] offset [4bf8] 
[   30.280000] MtCmdGetTXDPDCalResult:(ret = 0)
[   30.288000] MtCmdChannelSwitch: control_chl = 9,control_ch2=0, central_chl = 9 DBDCIdx= 0, Band= 0 
[   30.308000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   30.544000] mt7615_apply_dcoc() : reload Central CH [10] BW [0] from cetral freq [2467]  offset [2500] 
[   30.560000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   30.568000] mt7615_apply_dpd() : reload Central CH [10] BW [0] from cetral freq [2462] i[46] offset [4cd0] 
[   30.588000] MtCmdGetTXDPDCalResult:(ret = 0)
[   30.600000] MtCmdChannelSwitch: control_chl = 10,control_ch2=0, central_chl = 10 DBDCIdx= 0, Band= 0 
[   30.616000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   30.868000] mt7615_apply_dcoc() : reload Central CH [11] BW [0] from cetral freq [2467]  offset [2500] 
[   30.884000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   30.892000] mt7615_apply_dpd() : reload Central CH [11] BW [0] from cetral freq [2462] i[46] offset [4cd0] 
[   30.912000] MtCmdGetTXDPDCalResult:(ret = 0)
[   30.920000] MtCmdChannelSwitch: control_chl = 11,control_ch2=0, central_chl = 11 DBDCIdx= 0, Band= 0 
[   30.940000] BW = 0,TXStream = 2, RXStream = 2, scan(1)
[   31.176000] ====================================================================
[   31.188000] Channel   1 : Busy Time =   3289, Skip Channel = FALSE, BwCap = TRUE
[   31.204000] Channel   2 : Busy Time =   3439, Skip Channel = FALSE, BwCap = TRUE
[   31.220000] Channel   3 : Busy Time =   2151, Skip Channel = FALSE, BwCap = TRUE
[   31.232000] Channel   4 : Busy Time =   2921, Skip Channel = FALSE, BwCap = TRUE
[   31.248000] Channel   5 : Busy Time =   1337, Skip Channel = FALSE, BwCap = TRUE
[   31.264000] Channel   6 : Busy Time =  25049, Skip Channel = FALSE, BwCap = TRUE
[   31.276000] Channel   7 : Busy Time =   2445, Skip Channel = FALSE, BwCap = TRUE
[   31.292000] Channel   8 : Busy Time =   1901, Skip Channel = FALSE, BwCap = TRUE
[   31.308000] Channel   9 : Busy Time =   2187, Skip Channel = FALSE, BwCap = TRUE
[   31.320000] Channel  10 : Busy Time =   2439, Skip Channel = FALSE, BwCap = TRUE
[   31.336000] Channel  11 : Busy Time =   2310, Skip Channel = FALSE, BwCap = TRUE
[   31.352000] ====================================================================
[   31.364000] Rule 3 Channel Busy time value : Select Primary Channel 5 
[   31.380000] Rule 3 Channel Busy time value : Min Channel Busy = 1337
[   31.392000] Rule 3 Channel Busy time value : BW = 20
[   31.400000]  AutoChSelUpdateChannel(): Update channel for wdev0 for this band PhyMode = 49,Channel = 44  
[   31.420000]  AutoChSelUpdateChannel(): Update channel for wdev1 for this band PhyMode = 49,Channel = 44  
[   31.444000]  AutoChSelUpdateChannel(): Update channel for wdev2 for this band PhyMode = 49,Channel = 44  
[   31.464000]  AutoChSelUpdateChannel(): Update channel for wdev3 for this band PhyMode = 49,Channel = 44  
[   31.484000]  AutoChSelUpdateChannel(): Update channel for wdev4 for this band PhyMode = 14,Channel = 5  
[   31.504000]  AutoChSelUpdateChannel(): Update channel for wdev5 for this band PhyMode = 14,Channel = 5  
[   31.524000]  AutoChSelUpdateChannel(): Update channel for wdev6 for this band PhyMode = 14,Channel = 5  
[   31.544000]  AutoChSelUpdateChannel(): Update channel for wdev7 for this band PhyMode = 14,Channel = 5  
[   31.564000] ApAutoChannelAtBootUp<-----------------
[   31.576000] WifiSysOpen(), wdev idx = 0
[   31.580000] wdev_attr_update(): wdevId0 = 34:76:c5:cc:a9:f5
[   31.592000] MtCmdSetDbdcCtrl:(ret = 0)
[   31.600000] Current Channel is 44. DfsZeroWaitSupport=0
[   31.612000] MtAsicSetChBusyStat(842): Not support for HIF_MT yet!
[   31.624000] MtAsicSetChBusyStat(842): Not support for HIF_MT yet!
[   31.636000] [PMF]APPMFInit:: apidx=0, MFPC=0, MFPR=0, SHA256=0
[   31.648000] [PMF]WPAMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
[   31.660000] HcUpdatePhyMode(): Update PhyMode for all wdev for this band PhyMode:49,Channel=44
[   31.676000] CountryCode(2.4G/5G)=1/1, RFIC=25, PHY mode(2.4G/5G)=14/49, support 32 channels
[   31.696000] wtc_acquire_groupkey_wcid: Found a non-occupied wtbl_idx:127 for WDEV_TYPE:1
[   31.696000]  LinkToOmacIdx = 0, LinkToWdevType = 1
[   31.724000] bssUpdateBmcMngRate (BSS_INFO_BROADCAST_INFO),                 CmdBssInfoBmcRate.u2BcTransmit= 8192,                 CmdBssInfoBmcRate.u2McTransmit = 8192
[   31.756000] MtCmdSetDbdcCtrl:(ret = 0)
[   31.856000] [RadarStateCheck]Set into RD_NORMAL_MODE
[   31.864000] MtCmdTxPowerSKUCtrl: fgTxPowerSKUEn: 1, BandIdx: 1
[   31.876000] MtCmdTxPowerPercentCtrl: fgTxPowerPercentEn: 1, BandIdx: 1
[   31.888000] MtCmdTxBfBackoffCtrl: fgTxBFBackoffEn: 0, BandIdx: 1
[   31.900000] mt7615_bbp_adjust():rf_bw=2, ext_ch=1, PrimCh=44, HT-CentCh=46, VHT-CentCh=42
[   31.916000] mt7615_apply_dcoc() : reload Central CH [42] BW [2] from cetral freq [5210]  offset [1900] 
[   31.936000] MtCmdGetRXDCOCCalResult:(ret = 0)
[   31.944000] mt7615_apply_dpd() : reload Central CH [42] BW [2] from cetral freq [5220] i[9] offset [2d98] 
[   31.964000] MtCmdGetTXDPDCalResult:(ret = 0)
[   31.972000] MtCmdChannelSwitch: control_chl = 44,control_ch2=0, central_chl = 42 DBDCIdx= 1, Band= 0 
[   31.992000] BW = 2,TXStream = 2, RXStream = 2, scan(0)
[   32.048000] ap_phy_rrm_init_byRf(): AP Set CentralFreq at 42(Prim=44, HT-CentCh=46, VHT-CentCh=42, BBP_BW=2)
[   32.080000] [WrapDfsRadarDetectStart]: Band0Ch is 44[WrapDfsRadarDetectStart]: Band1Ch is 0LeadTimeForBcn, OmacIdx = 0, WDEV_WITH_BCN_ABILITY
[   32.108000] MtAsicSetRalinkBurstMode(2595): Not support for HIF_MT yet!
[   32.120000] MtAsicSetPiggyBack(779): Not support for HIF_MT yet!
[   32.132000] MtAsicSetTxPreamble(2574): Not support for HIF_MT yet!
[   32.144000] Main bssid = 34:76:c5:cc:a9:f5
[   32.164000] AsicRadioOnOffCtrl(): DbdcIdx=1 RadioOn
[   32.176000] MtCmdSetMacTxRx:(ret = 0)
[   32.180000] MtCmdSetMacTxRx:(ret = 0)
[   32.188000] fdb_enable()
[   32.492000] MCS Set = ff ff 00 00 01
[   32.500000]  VirtualIF_close
[   41.844000] led=9, on=4000, off=0, blinks,=0, reset=0, time=1 low_trigger=0
[   43.308000] ESW: Link Status Changed - Port2 Link UP