タグ: MT7628AN

WRC-1167FS stock -> OpenWrt

とりあえずfactoryファームを正しい状態にdecodeされる形で組めたので、投入テスト。
stockで SQUASHFS error が大量に吐かれるのは何だろうか…(出ないこともあった)

------- ELECOM1701 Header Info
Image Header Size      : 0x0038
Image Header ID        : ELECOM
Image Product Name     : WRC-1167FS
Image Version          : 0.00
------------------------------
------- Header Info
Image Header Size      : 0x0074
Image Header Magic Code: 0x031d6129
Image Data Size        : 6291456
Image Type             : 0x6 [kernel_elecom1701]
Compression Type       : 0x0
Model ID               : 0x00228000
Build Date             : 1970-01-1
Version Firmware       : 
Version Code SCM       : 
Version Config         :                                 
Data CRC Checksum      : 0x337EBA50
Header CRC Checksum    : 0x0
------------------------------
FWHANDLE, DECODE PASS
Erasing blocks: 96/96 (100%)
Writing data: 6144k/6144k (100%)
Verifying data: 6144k/6144k (100%)
The system is going down NOW!
[43306.704000] SQUASHFS error: zlib_inflate error, data probably corrupt
[43306.728000] SQUASHFS error: squashfs_read_data failed to read block 0x1d6305
[43306.740000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43306.756000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43306.768000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43306.780000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43306.796000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43306.808000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43306.820000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43306.836000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43306.848000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43306.864000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43306.876000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43306.888000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43306.904000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43306.916000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43306.928000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43306.944000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43306.956000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43306.972000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43306.984000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43306.996000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43307.012000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43307.024000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43307.036000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43307.052000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43307.064000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43307.080000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43307.092000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43307.104000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
Sent SIGKILL to all processes
Requesting system reboot
[43308.712000] Restarting system.
[04060C09][04060C09]
DDR Calibration DQS reg = 00008787


U-Boot 1.1.3 (Oct 23 2017 - 16:14:35)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fa0000
******************************
Software System Reset Occurred
******************************
flash manufacture id: ef, device id 40 18
find flash: W25Q128BV
============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC 7628_MP (Port5None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Oct 23 2017  Time:16:14:35
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 580 MHZ #### 
 estimate memory size = 64 Mbytes
RESET MT7628 PHY!!!!!!
Please choose the operation: 
   1: Load system code to SDRAM via TFTP. 
   2: Load system code then write to Flash via TFTP. 
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial. 
   9: Load Boot Loader code then write to Flash via TFTP. 
default: 3                                                                                                                 0 
   
3: System Boot system code via Flash.
## Booting image at bc050000 ...
   Image Name:   MIPS OpenWrt Linux-4.14.143
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1669570 Bytes =  1.6 MB
   Load Address: 80000000
   Entry Point:  80000000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80000000) ...
## Giving linux memsize in MB, 64

Starting kernel ...

[    0.000000] Linux version 4.14.143 (musashino205@Taiha.Net) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+11022-f01af852e5)) #0 Sun Sep 15 03:19:24 2019
[    0.000000] Board has DDR2
[    0.000000] Analog PMU set to hw control
[    0.000000] Digital PMU set to hw control
[    0.000000] SoC Type: MediaTek MT7628AN ver:1 eco:2
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019655 (MIPS 24KEc)
[    0.000000] MIPS: machine is ELECOM WRC-1167FS
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x98/0x4a0 with crng_init=0
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 16240
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Writing ErrCtl register=000779f0
[    0.000000] Readback ErrCtl register=000779f0
[    0.000000] Memory: 58372K/65536K available (3919K kernel code, 185K rwdata, 892K rodata, 1204K init, 206K bss, 7164K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS: 256
[    0.000000] intc: using register map from devicetree
[    0.000000] CPU Clock: 580MHz
[    0.000000] timer_probe: no matching timers found
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6590553264 ns
[    0.000010] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405115902ns
[    0.015371] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.087589] pid_max: default: 32768 minimum: 301
[    0.096986] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.109944] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.130499] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.149876] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.162027] pinctrl core: initialized pinctrl subsystem
[    0.173329] NET: Registered protocol family 16
[    0.290156] mt7620-pci 10140000.pcie: Port 0 N_FTS = 1b105000
[    0.451172] PCI host bridge /pcie@10140000 ranges:
[    0.460516]  MEM 0x0000000020000000..0x000000002fffffff
[    0.470830]   IO 0x0000000010160000..0x000000001016ffff
[    0.500056] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.511272] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.522397] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.534247] PCI host bridge to bus 0000:00
[    0.542215] pci_bus 0000:00: root bus resource [mem 0x20000000-0x2fffffff]
[    0.555863] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    0.567501] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    0.580917] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    0.597737] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    0.610732] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    0.624454] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]
[    0.637870] pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pref]
[    0.652146] pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
[    0.665570] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit]
[    0.680026] pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pref]
[    0.694282] pci 0000:00:00.0: PCI bridge to [bus 01]
[    0.704078] pci 0000:00:00.0:   bridge window [mem 0x20000000-0x200fffff]
[    0.717505] pci 0000:00:00.0:   bridge window [mem 0x20100000-0x201fffff pref]
[    0.736698] clocksource: Switched to clocksource MIPS
[    0.747967] NET: Registered protocol family 2
[    0.757384] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.771089] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.783600] TCP: Hash tables configured (established 1024 bind 1024)
[    0.796304] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.807770] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.820453] NET: Registered protocol family 1
[    0.832838] Crashlog allocated RAM at address 0x3f00000
[    0.844881] workingset: timestamp_bits=14 max_order=14 bucket_order=0
[    0.864744] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.876196] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.908291] io scheduler noop registered
[    0.915904] io scheduler deadline registered (default)
[    0.927039] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    0.940675] console [ttyS0] disabled
[    0.947712] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 28, base_baud = 2500000) is a 16550A
[    0.965533] console [ttyS0] enabled
[    0.965533] console [ttyS0] enabled
[    0.979266] bootconsole [early0] disabled
[    0.979266] bootconsole [early0] disabled
[    0.996371] spi-mt7621 10000b00.spi: sys_freq: 193333333
[    1.021181] m25p80 spi0.0: w25q128 (16384 Kbytes)
[    1.030557] 5 fixed-partitions partitions found on MTD device spi0.0
[    1.043143] Creating 5 MTD partitions on "spi0.0":
[    1.052647] 0x000000000000-0x000000030000 : "u-boot"
[    1.063444] 0x000000030000-0x000000040000 : "u-boot-env"
[    1.074905] 0x000000040000-0x000000050000 : "factory"
[    1.085896] 0x000000050000-0x000000780000 : "firmware"
[    1.100090] 2 uimage-fw partitions found on MTD device firmware
[    1.111878] Creating 2 MTD partitions on "firmware":
[    1.121728] 0x000000000000-0x000000197a02 : "kernel"
[    1.132503] 0x000000197a02-0x000000730000 : "rootfs"
[    1.143221] mtd: device 5 (rootfs) set to be root filesystem
[    1.156083] 1 squashfs-split partitions found on MTD device rootfs
[    1.168396] 0x0000005f0000-0x000000730000 : "rootfs_data"
[    1.180046] 0x000000780000-0x000000800000 : "storage"
[    1.191697] libphy: Fixed MDIO Bus: probed
[    1.212238] rt3050-esw 10110000.esw: link changed 0x00
[    1.224104] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5
[    1.242355] NET: Registered protocol family 10
[    1.255536] Segment Routing with IPv6
[    1.262985] NET: Registered protocol family 17
[    1.271879] 8021q: 802.1Q VLAN Support v1.8
[    1.286868] VFS: Mounted root (squashfs filesystem) readonly on device 31:5.
[    1.307441] Freeing unused kernel memory: 1204K
[    1.316404] This architecture does not have kernel memory protection.
[    1.970141] init: Console is alive
[    1.977215] init: - watchdog -
[    2.550349] random: fast init done
[    2.756372] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    2.937396] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    2.962292] init: - preinit -
[    4.384411] rt3050-esw 10110000.esw: link changed 0x00
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3[    4.583806] random: procd: uninitialized urandom read (4 bytes read)
] or [4] key and hit [enter] to select the debug level
[    7.720341] mount_root: jffs2 not ready yet, using temporary tmpfs overlay
[    7.764542] urandom-seed: Seed file not found (/etc/urandom.seed)
[    7.904087] procd: - early -
[    7.909996] procd: - watchdog -
[    7.920624] rt3050-esw 10110000.esw: link changed 0x10
[    8.505187] procd: - watchdog -
[    8.511829] procd: - ubus -
[    8.593332] random: ubusd: uninitialized urandom read (4 bytes read)
[    8.605999] rt3050-esw 10110000.esw: link changed 0x18
[    8.727290] random: ubusd: uninitialized urandom read (4 bytes read)
[    8.740510] random: ubusd: uninitialized urandom read (4 bytes read)
[    8.754288] procd: - init -
Please press Enter to activate this console.
[    9.916960] kmodloader: loading kernel modules from /etc/modules.d/*
[   10.140706] urngd: v1.0.0 started.
[   10.235574] nat46: module (version 683fbd2b765506332a1af141545652bf58f03166) loaded.
[   10.283603] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   10.316489] Loading modules backported from Linux version v5.3-rc4-0-gd45331b00ddb
[   10.331554] Backport generated by backports.git v5.3-rc4-1-0-g4ec72687
[   10.398397] ip_tables: (C) 2000-2006 Netfilter Core Team
[   10.442233] nf_conntrack version 0.5.0 (1024 buckets, 4096 max)
[   10.682682] xt_time: kernel timezone is -0000
[   10.977902] random: crng init done
[   10.984640] random: 6 urandom warning(s) missed due to ratelimiting
[   11.034113] mt76_wmac 10300000.wmac: ASIC revision: 76280001
[   12.068989] mt76_wmac 10300000.wmac: Firmware Version: 20151201
[   12.080789] mt76_wmac 10300000.wmac: Build Time: 20151201183641
[   12.106712] mt76_wmac 10300000.wmac: firmware init done
[   12.320920] mt76x2e 0000:01:00.0: card - bus=0x1, slot = 0x0 irq=4
[   12.333476] mt76x2e 0000:01:00.0: ASIC revision: 76120044
[   13.305510] mt76x2e 0000:01:00.0: ROM patch build: 20141115060606a
[   13.323665] mt76x2e 0000:01:00.0: Firmware Version: 0.0.00
[   13.334612] mt76x2e 0000:01:00.0: Build: 1
[   13.342731] mt76x2e 0000:01:00.0: Build Time: 201507311614____
[   13.376709] mt76x2e 0000:01:00.0: Firmware running!
[   13.413026] PPP generic driver version 2.4.2
[   13.434463] NET: Registered protocol family 24
[   13.457255] kmodloader: done loading kernel modules from /etc/modules.d/*
[   81.007133] rt3050-esw 10110000.esw: link changed 0x00
[   84.725977] rt3050-esw 10110000.esw: link changed 0x10
[   85.210456] rt3050-esw 10110000.esw: link changed 0x18
[   87.717761] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0
[   87.766439] br-lan: port 1(eth0.1) entered blocking state
[   87.777384] br-lan: port 1(eth0.1) entered disabled state
[   87.788486] device eth0.1 entered promiscuous mode
[   87.798020] device eth0 entered promiscuous mode
[   87.822336] jffs2_build_filesystem(): unlocking the mtd device... 
[   87.822399] done.
[   87.838517] jffs2_build_filesystem(): erasing all blocks after the end marker... 
[   87.963432] br-lan: port 1(eth0.1) entered blocking state
[   87.989006] br-lan: port 1(eth0.1) entered forwarding state
[   88.000788] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   88.797252] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   92.168458] done.
[   92.172311] jffs2: notice: (1302) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   92.572867] overlayfs: upper fs does not support tmpfile.



BusyBox v1.31.0 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+11022-f01af852e5
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/#
広告

WRC-1167FS factoryトラブルメモ

OpenWrtのfactoryを投げ込んだらFlashに書き込まれたデータが何故か化けていて、ブートに失敗した。
blocksizeか何かでピッタリでなければ正しい状態にdecodeできない?要検証

rm: '/tmp/nginx' is a directory
------- ELECOM1701 Header Info
Image Header Size      : 0x0038
Image Header ID        : ELECOM
Image Product Name     : WRC-1167FS
Image Version          : 0.00
------------------------------
------- Header Info
Image Header Size      : 0x0074
Image Header Magic Code: 0x031d6129
Image Data Size        : 6291460
Image Type             : 0x6 [kernel_elecom1701]
Compression Type       : 0x0
Model ID               : 0x00228000
Build Date             : 1970-01-1
Version Firmware       : 
Version Code SCM       : 
Version Config         :                                 
Data CRC Checksum      : 0x56D08D59
Header CRC Checksum    : 0x0
------------------------------
FWHANDLE, DECODE PASS
Erasing blocks: 97/97 (100%)
Writing data: 6144k/6144k (100%)
Verifying data: 6144k/6144k (100%)
The system is going down NOW!
[12500.716000] SQUASHFS error: zlib_inflate error, data probably corrupt
[12500.728000] SQUASHFS error: squashfs_read_data failed to read block 0x1d6305
[12500.744000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12500.756000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12500.772000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12500.784000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12500.796000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12500.812000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12500.824000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12500.836000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12500.852000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12500.864000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12500.880000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12500.892000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12500.904000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12500.920000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12500.932000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12500.944000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12500.960000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12500.972000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12500.988000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12501.000000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12501.012000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12501.028000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12501.040000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12501.052000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12501.068000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12501.080000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12501.096000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12501.108000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
Sent SIGKILL to all processes
Requesting system reboot
[12502.724000] Restarting system.
[04060C09][04060C09]
DDR Calibration DQS reg = 00008787


U-Boot 1.1.3 (Oct 23 2017 - 16:14:35)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fa0000
******************************
Software System Reset Occurred
******************************
flash manufacture id: ef, device id 40 18
find flash: W25Q128BV
============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC 7628_MP (Port5None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Oct 23 2017  Time:16:14:35
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 580 MHZ #### 
 estimate memory size = 64 Mbytes
RESET MT7628 PHY!!!!!!
Please choose the operation: 
   1: Load system code to SDRAM via TFTP. 
   2: Load system code then write to Flash via TFTP. 
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial. 
   9: Load Boot Loader code then write to Flash via TFTP. 
default: 3                                                                                                                 0 
   
3: System Boot system code via Flash.
## Booting image at bc050000 ...
Bad Magic Number,23071856
[04060C0A][04060C09]
DDR Calibration DQS reg = 00008788


U-Boot 1.1.3 (Oct 23 2017 - 16:14:35)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fa0000
flash manufacture id: ef, device id 40 18
find flash: W25Q128BV
============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC 7628_MP (Port5None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Oct 23 2017  Time:16:14:35
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 580 MHZ #### 
 estimate memory size = 64 Mbytes
RESET MT7628 PHY!!!!!!
Please choose the operation: 
   1: Load system code to SDRAM via TFTP. 
   2: Load system code then write to Flash via TFTP. 
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial. 
   9: Load Boot Loader code then write to Flash via TFTP. 
default: 3

You choosed 4
                                                                                                                           0 

   
4: System Enter Boot Command Line Interface.

U-Boot 1.1.3 (Oct 23 2017 - 16:14:35)
MT7628 # md.l 0xbc050000
bc050000: 56180723 80312a9f de177f59 81781b04    #..V.*1.Y.....x.
bc050010: 00010284 00010284 2aa7bc3c 03030701    ........<..*....
bc050020: 53514b49 65714d24 7473556a 6e684e24    IKQS$MqejUst$Nhn
bc050030: 342c7a71 2e35332a 00323635 00010204    qz,4*35.562.....
bc050040: 80010269 509b7404 00010204 6f010204    i....t.P.......o
bc050050: a3fefdf9 8ef57db3 13fd43af a5c420ff    .....}...C... ..
bc050060: ef8d81a3 e0847128 5535138d 2fec8ed9    ....(q....5U.../
bc050070: b265d1b9 891febac 2bb7882c ef2ca1a3    ..e.....,..+..,.
bc050080: d602d7fa 951fb8c1 e13b60b3 2c0ed234    .........`;.4..,
bc050090: 79e713b1 9f5bb1be 2a74e0d2 bdd5abff    ...y..[...t*....
bc0500a0: 866b3de9 e8ff9092 e276aa26 13a4f17f    .=k.....&.v.....
bc0500b0: a8c306b1 4c7be526 71891b32 2e649c65    ....&.{L2..qe.d.
bc0500c0: 2926ac8c 2c41af92 e5322fbd 0c4b90df    ..&)..A,./2...K.
bc0500d0: f3f5cf52 814c5b0b b0db23da d50388b3    R....[L..#......
bc0500e0: c9e33000 5781c900 832dea55 a2f5d883    .0.....WU.-.....
bc0500f0: 21604dcd b38d66cb 44bd8db4 9affad64    .M`!.f.....Dd...
MT7628 # 

WRC-1167FS fwhandleコマンドメモ

メーカーファームウェアにて、投入されたファームウェアのdecodeを行う fwhandle コマンドのメモ。

/tmp # tftp -r wrc-1167fs_v1.03.bin 192.168.1.133 -g
wrc-1167fs_v1.03.bin 100% |*******************************|  6080k  0:00:00 ETA
/tmp # ls -alh
drwxrwxrwx    3 root     root           0 Sep 14 22:38 .
drwxr-xr-x   17 root     root           0 Sep 14 22:38 ..
-rw-r--r--    1 root     root           5 Sep 14 22:36 dhcpc.lease
-rw-r--r--    1 root     root           3 Sep 14 22:36 dns.suffix
drwxr-xr-x    5 root     root           0 Jan  1  2017 nginx
-rw-r--r--    1 root     root        5.9M Sep 14 22:38 wrc-1167fs_v1.03.bin
/tmp # fwhandle
usage:    head    [-h?]      -h This help
  -s    Source filename
  -d    Destination filename
  -a    Auto set parameter
  -t    Types:    
            bootloader (0)
            state_config (2)
            kernel (3)
            kernel_elecom1700 (5)
            kernel_elecom1701 (6)
            config (1)
            token (4)
  -x    Recovery MD5 file [-u ih_magic]
  -v    FW Version
 -D     Build date
/tmp # fwhandle -t kernel_elecom1701 -x wrc-1167fs_v1.03.bin 
------- ELECOM1701 Header Info
Image Header Size      : 0x0038
Image Header ID        : ELECOM
Image Product Name     : WRC-1167FS
Image Version          : 1.03
------------------------------
------- Header Info
Image Header Size      : 0x0074
Image Header Magic Code: 0x031d6129
Image Data Size        : 6225920
Image Type             : 0x6 [kernel_elecom1701]
Compression Type       : 0x0
Model ID               : 0x00228000
Build Date             : 2017-10-16
Version Firmware       : 1.03
Version Code SCM       : 0abafddb6
Version Config         : e46a8e6df70adbb54129ee057f1ffd35
Data CRC Checksum      : 0x30C2B056
Header CRC Checksum    : 0xff9
------------------------------
FWHANDLE, DECODE PASS
/tmp # ls -alh
drwxrwxrwx    3 root     root           0 Sep 14 22:39 .
drwxr-xr-x   17 root     root           0 Sep 14 22:38 ..
-rw-r--r--    1 root     root           5 Sep 14 22:36 dhcpc.lease
-rw-r--r--    1 root     root           3 Sep 14 22:36 dns.suffix
drwxr-xr-x    5 root     root           0 Jan  1  2017 nginx
-rw-r--r--    1 root     root        5.9M Sep 14 22:39 wrc-1167fs_v1.03.bin.bin

WRC-1167FS

以前から気になってはいた機種。FE止まりであること、最近製造終了となったことから躊躇していたが、Twitterでアンケートを取ってみたところWN-AG600DGRよりも先に票が入ったので今回やることにして確保した。
弄っていくのでメモ。

Switch

zone WAN LAN
port
(WRC-1167FS)
INTERNET LAN
port
(MT7628A)
port4 port3

MAC

  • LAN: BC:5C:4C:xx:xx:68 (Config, ethaddr (text) / Factory, 0x28 (hex))
  • WAN: BC:5C:4C:xx:xx:69 (Config, wanaddr (text) / Factory, 0x22 (hex))
  • 2.4G: BC:5C:4C:xx:xx:6A (Config, rmac (text) / Factory, 0x4 (hex))
  • 5G: BC:5C:4C:xx:xx:6B (Config, rmac2 (text) / Factory, 0x8004 (hex))

U-Boot

help

MT7628 # help
?       - alias for 'help'
bootm   - boot application image from memory
cp      - memory copy
erase   - erase SPI FLASH memory
go      - start application at address 'addr'
help    - print online help
loadb   - load binary file over serial line (kermit mode)
md      - memory display
mdio   - Ralink PHY register R/W command !!
mm      - memory modify (auto-incrementing)
nm      - memory modify (constant address)
printenv- print environment variables
reset   - Perform RESET of the CPU
rf      - read/write rf register
saveenv - save environment variables to persistent storage
setenv  - set environment variables
spi     - spi command
tftpboot- boot image via network using TFTP protocol
version - print monitor version

version

MT7628 # version

U-Boot 1.1.3 (Oct 23 2017 - 16:14:35)

printenv

MT7628 # printenv
state=N
sn=7BL087007847A
ethaddr=BC:5C:4C:**:**:68
wanaddr=BC:5C:4C:**:**:69
rmac=BC:5C:4C:**:**:6A
rmac2=BC:5C:4C:**:**:6B
rdn=1
rdn2=1
rkey=************
rkey2=************
hver=1.0
BootType=3
bootdelay=1
ipaddr=192.168.2.1
serverip=192.168.2.10
bootfile=WRC-1167FS_uImage
rcn=JP
rcn2=JP
stdin=serial
stdout=serial
stderr=serial

Environment size: 330/4092 bytes

Kernel

コンソールにパスワードが掛けられている。

uname -a

/ # uname -a
sh: uname: not found

cat /proc/version

/ # cat /proc/version
Linux version 3.10.14 (root@***-DEV-****) (gcc version 4.6.3 (Buildroot 2012.11.1) ) #1 Wed Oct 11 21:04:36 CST 2017

cat /proc/cpuinfo

/ # cat /proc/cpuinfo
system type             : MT7628
machine                 : Unknown
processor               : 0
cpu model               : MIPS 24KEc V5.5
BogoMIPS                : 382.46
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa                     : mips1 mips2 mips32r1 mips32r2
ASEs implemented        : mips16 dsp
shadow register sets    : 1
kscratch registers      : 0
core                    : 0
VCED exceptions         : not available
VCEI exceptions         : not available

cat /proc/meminfo

/ # cat /proc/meminfo
MemTotal:          61440 kB
MemFree:           31888 kB
Buffers:            2744 kB
Cached:             9328 kB
SwapCached:            0 kB
Active:             4224 kB
Inactive:          10416 kB
Active(anon):       2568 kB
Inactive(anon):      224 kB
Active(file):       1656 kB
Inactive(file):    10192 kB
Unevictable:           0 kB
Mlocked:               0 kB
SwapTotal:             0 kB
SwapFree:              0 kB
Dirty:                 0 kB
Writeback:             0 kB
AnonPages:          2584 kB
Mapped:             1552 kB
Shmem:               224 kB
Slab:               3576 kB
SReclaimable:        536 kB
SUnreclaim:         3040 kB
KernelStack:         376 kB
PageTables:          404 kB
NFS_Unstable:          0 kB
Bounce:                0 kB
WritebackTmp:          0 kB
CommitLimit:       30720 kB
Committed_AS:       7312 kB
VmallocTotal:    1048372 kB
VmallocUsed:        7304 kB
VmallocChunk:    1036944 kB

cat /proc/mtd

/ # cat /proc/mtd
dev:    size   erasesize  name
mtd0: 01000000 00010000 "all"
mtd1: 00030000 00010000 "Boot"
mtd2: 00010000 00010000 "Config"
mtd3: 00010000 00010000 "Factory"
mtd4: 00730000 00010000 "Kernel"
mtd5: 00590000 00010000 "user"
mtd6: 00080000 00010000 "storage"

switch vlan dump

/ # switch vlan dump
idx   vid  portmap
  0     1  ----1-1
  1     2  1111-11
  2     3  1111111
  3     4  1111111
  4     5  1111111
  5     6  1111111
  6     7  1111111
  7     8  1111111
  8     9  1111111
  9    10  1111111
 10    11  1111111
 11    12  1111111
 12    13  1111111
 13    14  1111111
 14    15  1111111
 15    16  1111111

ls -alh /sys/class/leds/

/ # ls -alh /sys/class/leds/
drwxr-xr-x    2 root     root           0 Sep 13 21:33 .
drwxr-xr-x   17 root     root           0 Sep 13 21:33 ..
lrwxrwxrwx    1 root     root           0 Sep 13 21:33 lan_led -> ../../devices/platform/leds-gpio/leds/lan_led
lrwxrwxrwx    1 root     root           0 Sep 13 21:33 power_led -> ../../devices/platform/leds-gpio/leds/power_led
lrwxrwxrwx    1 root     root           0 Sep 13 21:33 radio1_led -> ../../devices/platform/leds-gpio/leds/radio1_led
lrwxrwxrwx    1 root     root           0 Sep 13 21:33 radio2_led -> ../../devices/platform/leds-gpio/leds/radio2_led
lrwxrwxrwx    1 root     root           0 Sep 13 21:33 wan_led -> ../../devices/platform/leds-gpio/leds/wan_led
lrwxrwxrwx    1 root     root           0 Sep 13 21:33 wps_led -> ../../devices/platform/leds-gpio/leds/wps_led

ls -alh /sys/devices/platform/gpio-keys-polled/

/ # ls -alh /sys/devices/platform/gpio-keys-polled/
drwxr-xr-x    2 root     root           0 Jan  1  2017 .
drwxr-xr-x    7 root     root           0 Jan  1  2017 ..
lrwxrwxrwx    1 root     root           0 Sep 13 21:36 driver -> ../../../bus/platform/drivers/gpio-keys-polled
-r--r--r--    1 root     root        4.0K Sep 13 21:36 modalias
-r--r--r--    1 root     root        4.0K Jan  1  2017 op1
-r--r--r--    1 root     root        4.0K Sep 13 21:36 reset
lrwxrwxrwx    1 root     root           0 Sep 13 21:36 subsystem -> ../../../bus/platform
-rw-r--r--    1 root     root        4.0K Sep 13 21:36 uevent
-r--r--r--    1 root     root        4.0K Sep 13 21:36 wps

bootlog

[04050C09][04050C09]
DDR Calibration DQS reg = 00008787


U-Boot 1.1.3 (Oct 23 2017 - 16:14:35)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fa0000
******************************
Software System Reset Occurred
******************************
flash manufacture id: ef, device id 40 18
find flash: W25Q128BV
============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC 7628_MP (Port5None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Oct 23 2017  Time:16:14:35
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 580 MHZ #### 
 estimate memory size = 64 Mbytes
RESET MT7628 PHY!!!!!!
Please choose the operation: 
   1: Load system code to SDRAM via TFTP. 
   2: Load system code then write to Flash via TFTP. 
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial. 
   9: Load Boot Loader code then write to Flash via TFTP. 
default: 3                                                                                                                 0 
   
3: System Boot system code via Flash.
## Booting image at bc050000 ...
   Image Name:   Linux Kernel Image
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1646919 Bytes =  1.6 MB
   Load Address: 80000000
   Entry Point:  802b04a0
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 802b04a0) ...
## Giving linux memsize in MB, 64

Starting kernel ...

[    0.000000] Linux version 3.10.14 (root@***-DEV-****) (gcc version 4.6.3 (Buildroot 2012.11.1) ) #1 Wed Oct 11 21:04:36 CST 2017
[    0.000000] 
[    0.000000]  The CPU feqenuce set to 575 MHz
[    0.000000] CPU0 revision is: 00019655 (MIPS 24KEc)
[    0.000000] Software DMA cache coherency
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x03ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x03ffffff]
[    0.000000] Primary instruction cache 64kB, 4-way, VIPT, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line: console=ttyS1,57600n8 root=/dev/ram0 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Writing ErrCtl register=00057710
[    0.000000] Readback ErrCtl register=00057710
[    0.000000] Memory: 59744k/65536k available (2784k kernel code, 5792k reserved, 447k data, 1696k init, 0k highmem)
[    0.000000] NR_IRQS:128
[    0.000000] console [ttyS1] enabled
[    0.096000] Calibrating delay loop... 382.46 BogoMIPS (lpj=764928)
[    0.128000] pid_max: default: 32768 minimum: 301
[    0.132000] Mount-cache hash table entries: 512
[    0.136000] NET: Registered protocol family 16
[    0.140000] RALINK_GPIOMODE = 54050444 
[    0.144000] RALINK_GPIOMODE = 54044444 
[    0.244000] ***** Xtal 40MHz *****
[    0.248000] start PCIe register access
[    0.748000] RALINK_RSTCTRL = 2400000
[    0.752000] RALINK_CLKCFG1 = fdbfffc0
[    0.756000] 
[    0.756000] *************** MT7628 PCIe RC mode *************
[    1.256000] PCIE0 enabled
[    1.260000] Port 0 N_FTS = 1b105000
[    1.264000] init_rt2880pci done
[    1.280000] bio: create slab  at 0
[    1.284000] PCI host bridge to bus 0000:00
[    1.288000] pci_bus 0000:00: root bus resource [mem 0x20000000-0x2fffffff]
[    1.292000] pci_bus 0000:00: root bus resource [io  0x10160000-0x1016ffff]
[    1.296000] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    1.300000] pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000)
[    1.304000] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]
[    1.308000] pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pref]
[    1.312000] pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
[    1.316000] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit]
[    1.320000] pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pref]
[    1.324000] pci 0000:00:00.0: PCI bridge to [bus 01]
[    1.328000] pci 0000:00:00.0:   bridge window [mem 0x20000000-0x200fffff]
[    1.332000] pci 0000:00:00.0:   bridge window [mem 0x20100000-0x201fffff pref]
[    1.336000] BAR0 at slot 0 = 0
[    1.340000] bus=0x0, slot = 0x0
[    1.344000] res[0]->start = 0
[    1.348000] res[0]->end = 0
[    1.352000] res[1]->start = 20200000
[    1.356000] res[1]->end = 2020ffff
[    1.360000] res[2]->start = 0
[    1.364000] res[2]->end = 0
[    1.368000] res[3]->start = 0
[    1.372000] res[3]->end = 0
[    1.376000] res[4]->start = 0
[    1.380000] res[4]->end = 0
[    1.384000] res[5]->start = 0
[    1.388000] res[5]->end = 0
[    1.392000] bus=0x1, slot = 0x0
[    1.396000] res[0]->start = 20000000
[    1.400000] res[0]->end = 200fffff
[    1.404000] res[1]->start = 0
[    1.408000] res[1]->end = 0
[    1.412000] res[2]->start = 0
[    1.416000] res[2]->end = 0
[    1.420000] res[3]->start = 0
[    1.424000] res[3]->end = 0
[    1.428000] res[4]->start = 0
[    1.432000] res[4]->end = 0
[    1.436000] res[5]->start = 0
[    1.440000] res[5]->end = 0
[    1.444000] cfg80211: Calling CRDA to update world regulatory domain
[    1.448000] Switching to clocksource MIPS
[    1.452000] NET: Registered protocol family 2
[    1.464000] TCP established hash table entries: 512 (order: 0, 4096 bytes)
[    1.476000] TCP bind hash table entries: 512 (order: -1, 2048 bytes)
[    1.488000] TCP: Hash tables configured (established 512 bind 512)
[    1.500000] TCP: reno registered
[    1.508000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    1.520000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    1.532000] NET: Registered protocol family 1
[    1.568000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    1.580000] jffs2: version 2.2. (NAND) (ZLIB) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    1.596000] msgmni has been set to 116
[    1.604000] io scheduler noop registered (default)
[    1.620000] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    1.636000] serial8250: ttyS0 at MMIO 0x10000d00 (irq = 21) is a 16550A
[    1.648000] serial8250: ttyS1 at MMIO 0x10000c00 (irq = 20) is a 16550A
[    1.676000] brd: module loaded
[    1.684000] flash manufacture id: ef, device id 40 18
[    1.692000] W25Q128BV(ef 40180000) (16384 Kbytes)
[    1.700000] mtd .name = raspi, .size = 0x01000000 (16M) .erasesize = 0x00010000 (64K) .numeraseregions = 0
[    1.720000] Creating 7 MTD partitions on "raspi":
[    1.732000] 0x000000000000-0x000001000000 : "all"
[    1.740000] 0x000000000000-0x000000030000 : "Boot"
[    1.752000] 0x000000030000-0x000000040000 : "Config"
[    1.764000] 0x000000040000-0x000000050000 : "Factory"
[    1.776000] 0x000000050000-0x000000780000 : "Kernel"
[    1.788000] 0x0000001f0000-0x000000780000 : "user"
[    1.800000] 0x000000780000-0x000000800000 : "storage"
[    1.812000] IMQ driver loaded successfully. (numdevs = 2, numqueues = 1)
[    1.828000]  Hooking IMQ before NAT on PREROUTING.
[    1.836000]  Hooking IMQ after NAT on POSTROUTING.
[    1.844000] PPP generic driver version 2.4.2
[    1.856000] PPP MPPE Compression module registered
[    1.864000] NET: Registered protocol family 24
[    1.872000] rdm_major = 253
[    1.880000] nf_conntrack version 0.5.0 (933 buckets, 3732 max)
[    1.892000] ip_tables: (C) 2000-2006 Netfilter Core Team
[    1.904000] Type=Linux
[    1.908000] TCP: cubic registered
[    1.916000] NET: Registered protocol family 17
[    1.924000] 8021q: 802.1Q VLAN Support v1.8
[    1.944000] Freeing unused kernel memory: 1696K (80328000 - 804d0000)
[    1.964000] Algorithmics/MIPS FPU Emulator v1.5
Sun Jan  1 00:00:00 UTC 2017
[    2.152000] Registered button device:reset, gpio:5,code:408,index:1
[    2.164000] Registered button device:wps, gpio:38,code:529,index:0
[    2.176000] Registered button device:opmode_1, gpio:4,code:747,index:2
[    2.196000] CLI_EXCHANGE, Load cli_exchange[v0.1.0] ready.
[    2.276000] GMAC1_MAC_ADRH -- : 0x0000bc5c
[    2.284000] GMAC1_MAC_ADRL -- : 0x4cb02368
[    2.292000] Ralink APSoC Ethernet Driver Initilization. v3.1  512 rx/tx descriptors allocated, mtu = 1500!
[    2.312000] GMAC1_MAC_ADRH -- : 0x0000bc5c
[    2.320000] GMAC1_MAC_ADRL -- : 0x4cb02368
[    2.340000] PROC INIT OK!
[    2.396000] FFFFFFBC:5C:4C:FFFFFFB0:23:68
[    2.404000] Raeth v3.1 ()
[    2.412000] 
[    2.412000] phy_tx_ring = 0x03556000, tx_ring = 0xa3556000
[    2.428000] 
[    2.428000] phy_rx_ring0 = 0x03580000, rx_ring[0] = 0xa3580000
[    2.440000] 
[    2.440000] phy_rx_ring0 = 0x03580000, rx_ring[0] = 0xa3580000
[    2.472000] GMAC1_MAC_ADRH -- : 0x0000bc5c
[    2.480000] GMAC1_MAC_ADRL -- : 0x4cb02368
[    2.488000] RT305x_ESW: Link Status Changed
[    2.500000] Set Port 0 Disabled
[    2.508000] Set Port 1 Disabled
[    2.520000] Set Port 2 Disabled
[    2.528000] Set Port 3 Disabled
[    2.540000] Set Port 4 Disabled
[    2.548000] Set Port 4 Enabled, 1000 Mbps
[    2.560000] Set Port 3 Enabled, 1000 Mbps
ln: /lib/./modules: File exists
### Radio 1 wps ----> 1
### Radio 2 wps ----> 1
/sbin/uwcd: '/lib/' is not an ELF file
Vendor Probe Success --> MTK API v0.1
Radio Number from CFG --> [2]
UWCD ctrl iface: /var/sysuwcd/if0
SEM_GETID got id -1
Sun Jan  1 00:00:00 UTC 2017
[    3.196000] device eth2 entered promiscuous mode
sysctl: write error: Invalid argument
ra0       no private ioctls.

ra1       no private ioctls.

ra2       no private ioctls.

rai0      no private ioctls.

rai1      no private ioctls.

[    3.340000] device eth2.2 entered promiscuous mode
[    3.352000] br0: port 1(eth2.2) entered forwarding state
[    3.360000] br0: port 1(eth2.2) entered forwarding state
[    3.380000] device eth2.1 entered promiscuous mode
[    3.388000] br0: port 2(eth2.1) entered forwarding state
[    3.400000] br0: port 2(eth2.1) entered forwarding state
info, udhcpc (v0.9.9-pre) started
debug, Entering released state
debug, Performing a DHCP renew
[Recv CMD] open_radio all
[Reply CMD] OK

crontab: can't open 'root': No such file or directory
[lltd_open:53] lltd_open.
[lltd_open:58] finish the upnpd open .
    ________________________________________________________________________________

     .-') _                   (`\ .-') /`      .-. .-')                ) (`-.   
    (  OO) )    .-----.        `.( OO ),'      \  ( OO )                ( OO ).   
    /     '._  /  .-.  \    ,--./  .--.         ;-----.\   .-'),-----. (_/.  \_)-. 
    |'--...__) |  \_.' /    |      |  |         | .-.  |  ( OO'  .-.  ' \  `.'  /  
    '--.  .--' /  .-. ',-.  |  |   |  |,        | '-' /_) /   |  | |  |  \     /\  
       |  |    | |   | . /_ |  |.'.|  |_)       | .-. `.  \_) |  |\|  |   \   \ |  
       |  |    \  '-'  _.__)|         |         | |  \  |   \ |  | |  |  .'    \_) 
       |  |     `----''     |   ,'.   |         | '--'  /    `'  '-'  ' /  .'.  \  
       `--'                 '--'   '--'         `------'       `-----' '--'   '--' 
    ________________________________________________________________________________

FW version: 1.02, SCM version: 129e08ebd, Date: 2017-10-11
Login > spawn-fcgi: child spawned successfully: PID: 525
spawn-fcgi: child spawned successfully: PID: 527
spawn-fcgi: child spawned successfully: PID: 528
spawn-fcgi: child spawned successfully: PID: 529
spawn-fcgi: child spawned successfully: PID: 530
spawn-fcgi: child spawned successfully: PID: 531
[    4.960000] register rt2860
[    4.976000] 
[    4.976000] 
[    4.976000] === pAd = c0501000, size = 2166808 ===
[    4.976000] 
[    4.996000] rlt_wlan_chip_onoff(): OnOff:1, Reset= 1, pAd->WlanFunCtrl:0x0, Reg-WlanFunCtrl=0x20a
[    5.052000] RtmpChipOpsEepromHook::e2p_type=0, inf_Type=5
[    5.064000] RtmpEepromGetDefault::e2p_dafault=2
[    5.076000] RtmpEepromTypeAdjust:: eeFlashId = 0x7662.
[    5.084000] NVM is FLASH mode (pAd->flash_offset = 0x8000)
[    5.096000] get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=rai
[    6.196000] build time = 
[    6.200000] 20141115060606a
[    6.208000] rom patch for E3 IC
[    6.212000] 
[    6.216000] platform = 
[    6.220000] ALPS
[    6.224000] hw/sw version = 
[    6.228000] 
[    6.232000] patch version = 
[    6.240000] 
[    6.256000] FW Version:0.0.00 Build:1
[    6.260000] Build Time:201507311614____
[    6.268000] fw for E3 IC
[    6.292000] RX[0] DESC a3778000 size = 4096
[    6.300000] RX[1] DESC a3779000 size = 4096
[    6.316000] E2pAccessMode=2
[    6.324000] cfg_mode=14
[    6.328000] cfg_mode=14
[    6.332000] wmode_band_equal(): Band Not Equal!
[    6.572000] 1. Phy Mode = 49
[    6.576000] get_chl_grp:illegal channel (167)
[    6.588000] get_chl_grp:illegal channel (167)
[    6.596000] get_chl_grp:illegal channel (169)
[    6.604000] get_chl_grp:illegal channel (169)
[    6.612000] get_chl_grp:illegal channel (171)
[    6.620000] get_chl_grp:illegal channel (171)
[    6.628000] /builds/f13216d0/0/TNW/TWB1709/PKGS_MTK/MT76x2E_V3.0.4.x/rlt_wifi_ap/../rlt_wifi/chips/mt76x2.c:2899 assert (ad->TxPower[choffset].Channel == 42)failed
[    6.660000] Country Region from e2p = ffff
[    6.668000] mt76x2_read_temp_info_from_eeprom:: is_temp_tx_alc=0, temp_tx_alc_enable=0
[    6.684000] mt76x2_read_tx_alc_info_from_eeprom:: is_ePA_mode=0, ePA_type=3
[    6.696000] mt76x2_read_tx_alc_info_from_eeprom:: [5G band] high_temp_slope=0, low_temp_slope=0
[    6.716000] mt76x2_read_tx_alc_info_from_eeprom:: [2G band] high_temp_slope=0, low_temp_slope=0
[    6.732000] mt76x2_read_tx_alc_info_from_eeprom:: [5G band] tc_lower_bound=0, tc_upper_bound=0
[    6.748000] mt76x2_read_tx_alc_info_from_eeprom:: [2G band] tc_lower_bound=0, tc_upper_bound=0
[    6.764000] mt76x2_get_external_lna_gain::LNA type=0x11, BLNAGain=0x0, ALNAGain0=0x0, ALNAGain1=0x0, ALNAGain2=0x0
[    6.788000] 2. Phy Mode = 49
[    6.792000] 3. Phy Mode = 49
[    6.800000] andes_pci_fw_init
[    6.804000] 0x1300 = 00073200
[    6.836000] AntCfgInit: primary/secondary ant 0/1
[    6.844000] andes_load_cr:cr_type(2)
[    6.864000] ChipStructAssign(): MT76x2 hook !
[    6.872000] RTMPSetPhyMode: channel is out of range, use first channel=36 
[    6.884000] MCS Set = ff ff 00 00 01
[    6.992000] TX0 power compensation = 0x38
[    7.000000] TX1 power compensation = 0x38
[   12.060000] mt76x2_bbp_adjust():rf_bw=2, ext_ch=1, PrimCh=52, HT-CentCh=54, VHT-CentCh=58
[   12.124000] APStartUp(): AP Set CentralFreq at 58(Prim=52, HT-CentCh=54, VHT-CentCh=58, BBP_BW=2)
[   12.148000] mt76x2_calibration():RDMode  is in Silent State, do not calibration.
[   12.164000] The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
[   12.180000] Main bssid = bc:5c:4c:b0:23:6b
[   12.188000] mt76x2_reinit_agc_gain:original agc_vga0 = 0x5c, agc_vga1 = 0x5c
[   12.200000] mt76x2_reinit_agc_gain:updated agc_vga0 = 0x5c, agc_vga1 = 0x5c
[   12.216000] mt76x2_reinit_hi_lna_gain:original hi_lna0 = 0x27, hi_lna1 = 0x27
[   12.228000] mt76x2_reinit_hi_lna_gain:updated hi_lna0 = 0x27, hi_lna1 = 0x27
[   12.244000] original vga value(chain0) = 5c
[   12.252000] original vga value(chain1) = 5c
[   12.260000] 
[   15.168000] MtAsicInitMac()-->
[   15.176000] mt7628_init_mac_cr()-->
[   15.180000] MtAsicSetMacMaxLen(1276): Set the Max RxPktLen=1024!
[   15.192000]  Initialize FT KDP Module...
[   20.724000] Main bssid = bc:5c:4c:b0:23:6a
[   20.732000] 
[   20.752000] @@@ ed_monitor_exit : CommonCfg.CountryCode = JP  
[   20.788000] mt7628_set_ed_cca: TURN OFF NBID mac 0x10610 = 0x36a1282a
[   20.800000] WiFi Startup Cost (ra0): 6.516s
[   20.816000] device ra0 entered promiscuous mode
[   20.824000] br0: port 4(ra0) entered forwarding state
[   20.836000] br0: port 4(ra0) entered forwarding state
brctl: bridge br_guest0: No such device
ubox_if_is_existed: interface is NULL!
[   20.872000] Set_ed_chk_proc()::ed_chk=1
[   20.880000] mt7628_set_ed_cca: TURN ON EDCCA mac 0x10618 = 0xd7c87d0f, EDCCA_Status=1
[   20.896000] mt7628_set_ed_cca: pAd->CommonCfg.CountryCode = JP  
[   20.908000] mt7628_set_ed_cca: TURN OFF NBID mac 0x10610 = 0x36a1282a
[   20.944000] 
[   20.944000] ====
[   20.944000] @@@ ed_status_read: EDCCA TH - H
[   20.944000] pAd->ed_trigger_cnt : 1 > 20 ||  pAd->ed_big_rssi_stat : 0 < 50
[   20.944000] ====
ntp.nict.jp: Unknown host
[   27.360000] br0: port 3(rai0) entered forwarding state
[   35.872000] br0: port 4(ra0) entered forwarding state
ntp.nict.jp: Unknown host
ntp.nict.jp: Unknown host
[   79.120000] mt76x2_calibration(channel = 58)
ntp.nict.jp: Unknown host
ntp.nict.jp: Unknown host

Firmware Upgrade Log

43719 53987.583   31024.0      0.8  -974121.6      0.0         0
------- ELECOM1701 Header Info
Image Header Size      : 0x0038
Image Header ID        : ELECOM
Image Product Name     : WRC-1167FS
Image Version          : 1.03
------------------------------
------- Header Info
Image Header Size      : 0x0074
Image Header Magic Code: 0x031d6129
Image Data Size        : 6225920
Image Type             : 0x6 [kernel_elecom1701]
Compression Type       : 0x0
Model ID               : 0x00228000
Build Date             : 2017-10-16
Version Firmware       : 1.03
Version Code SCM       : 0abafddb6
Version Config         : e46a8e6df70adbb54129ee057f1ffd35
Data CRC Checksum      : 0x30C2B056
Header CRC Checksum    : 0xff9
------------------------------
FWHANDLE, DECODE PASS
Erasing blocks: 95/95 (100%)
Writing data: 6080k/6080k (100%)
Verifying data: 6080k/6080k (100%)
The system is going down NOW!
Received a SIGTERM
debug, Received SIGTERM
Sent SIGKILL to all processes
Requesting system reboot
[  243.244000] Restarting system.