Add OpenWrt support for Cudy WR1300S V1.0

For Developers
1

Hello everyone,

I would like to request support for Cudy WR1300S V1.0 router in OpenWrt.

Model: WR1300S V1.0
Serial Number: WR1300S2503011176 (produced early 2025, old flash chip — not the problematic F50L1G41LC from SN 2543+)
Stock firmware: 2.4.15-20250728-210559
CPU: MediaTek MT7621 (from boot log)
Wi-Fi: 2.4 GHz — Cudy-5209 (MT7603E?), 5 GHz — Cudy-5209-5G (MT7613BE?)
RAM: 128 MB
Flash: 16 MB (presumably, as in WR1300 v1)
USB: yes (for 3G/4G modems — the main purpose of the firmware, SFTP support)
Other: 5× Gigabit Ethernet, dual-band AC1200, mesh support in stock

Photos of the board:


Boot log (kernel log from power-on, captured via serial? or from stock web if possible):

Attempts to install OpenWrt:

  • Tried intermediate from Cudy Google Drive (WR1300+V1.zip, openwrt-22.03.2-...-squashfs-flash.bin) → "File is invalid"
  • Downgraded stock to 2.3.2-20241226 → same error
  • Contacted Cudy support → reply: "No OpenWrt firmware for WR1300S V1.0 currently. We need official OpenWrt forum support first, then we can release middle firmware."

The hardware looks almost identical to Cudy WR1300 v1 (supported in 24.10.5 as cudy_wr1300-v1).
Differences (if any): possibly minor in Wi-Fi calibration/EEPROM or LED/buttons.

Questions / requests:

  1. Can someone check if WR1300 v1 image works via TFTP initramfs (risky, but for testing)?
  2. Is it possible to add basic support (copy .dts from v1 + minor changes)?
  3. Who can help port or test? I can provide photos/logs, but no serial console access yet.

Thank you for any help or advice!

2

  1. Why would someone (soft) brick their device for you ?

  2. Probably

  3. Ask the person staring back at you from the mirror, I heard they owned one.

1 Like
3

binwalk (-e -M) the firmware
extract dtb
decompile to dts using dtc
find similar device
get a 3.3v ttl adapter , preferably with breadboard pins included and get it connected / soldered to ttl header of 4 pins at 1-o-clock in 1st pic.
tftpboot/bootm of those similar mt7621 devices
copy and adjust that device's dts using OEM dts as a reference.

In the meantime back up OEM flash. First attempt to flash the device will fail, no matter how skilled you are.

4

Thank you for the detailed reply and roadmap — this is exactly what I needed!

I will start with:

  1. Downloading the latest stock firmware from Cudy site (for WR1300S V1.0) and analyzing it with binwalk -e -M to extract DTB/DTS.
  2. Comparing it to the existing mt7621_cudy_wr1300-v1.dts from OpenWrt sources.

Regarding serial console:

  • On the board photos (attached in OP), I see the 4-pin header at ~1-o'clock position (marked as something like "UART" or just pins). It looks like TX/RX/GND/3.3V.
  • I can buy a 3.3V TTL adapter (CP2102 or similar) soon. Do you recommend soldering wires or using jumper cables/pogo pins for first test?
  • Once connected, I plan to use minicom/putty at 115200 8N1 and try TFTP boot of initramfs-kernel.bin from cudy_wr1300-v1 (24.10.5).

Questions:

  • Is there a high chance that WR1300 v1 initramfs will boot on WR1300S without changes (just for testing Wi-Fi/Ethernet/USB)?
  • If I manage to get serial access and backup OEM flash (via dd if=/dev/mtdX of=backup.bin or similar), what should I check first in DTS comparison (Wi-Fi calibration partitions, MAC addresses, LED definitions)?

I'll update the thread with results (DTS diff, serial output if successful).
Thanks again for the guidance — really appreciate it!

P.S. To the first reply: yes, I understand the risks and I'm ready to test on my own device :slight_smile:

5

If pins make good contact it is faster on and off and you have unmodified device in the end.

Yes, it is very likely, probably some network port, some led , or wifi power levels will be off, but at least any filogic image will boot to some distance, with your intended path has the best chance to boot completely.

That may be tricky if partition maps differ. In the meantime learn to load and mount ubi (seems to be the case)
Overall your plan sounds reasonable, additionaly you may binwalk filesystems found on the device,

6

Thank you for the quick follow-up and extra tips — this is super helpful!

I'll definitely go with jumper cables or pogo pins for the UART connection first (no soldering to keep the device unmodified). Good to know the chance of WR1300 v1 initramfs booting is high — even partial boot (Ethernet/SSH access) would be a great start for testing.

On backup OEM flash:

  • I'll try to learn UBI mounting basics in advance (ubiattach, ubinfo, mount -t ubifs etc.).
  • If partition maps differ too much, is there a safe way to dump via serial console before attempting any flash (e.g. mtd read or cat /dev/mtdX > backup.bin in a running initramfs session)?

For TFTP test:

  • I'll rename initramfs-kernel.bin to "kernel.bin" (common for many MT7621 bootloaders) and hold Reset ~10–15 seconds during power-on.
  • If it boots partially, I'll check dmesg/logread for any obvious differences (Wi-Fi calibration, LED, ports).

Planning to start with binwalk on the stock .bin this week and get the TTL adapter soon.
Will update the thread with results (binwalk output, DTS comparison if possible, serial logs).

Thanks again for the encouragement and details — really motivates me to proceed step by step!

7

You have some basic network and tftp client or server in uboot, or even better in OEM firmware. Kind of come back and ask if in doubt.

OpenWrt DTS includes like Cudy XR3000 which includes filogic general includes, you just need to add overrides, eg filogic has sound card not seen a lot on routers.

8

Hello all!
I also have this device and I also want to flash it.

It's useless. I've already tried different firmware versions:
WR1300 V1 (transitional)
WR1300 V2_V3 (transitional)
WR1300 V3+ (transitional)
WR1300 V4 (original)
both via the web interface (blocked) and via TFTP (not accepted).
This firmwares not worked.
I connected to the UART console via Putty (FTDI)
In console this:

Summary

===================================================================
MT7621 stage1 code 10:33:55 (ASIC)
CPU=500000000 HZ BUS=166666666 HZ

Change MPLL source from XTAL to CR...
do MEMPLL setting..
MEMPLL Config : 0x11100000
3PLL mode + External loopback
=== XTAL-40Mhz === DDR-1200Mhz ===
PLL3 FB_DL: 0xe, 1/0 = 633/391 39000000
PLL2 FB_DL: 0x12, 1/0 = 707/317 49000000
PLL4 FB_DL: 0x12, 1/0 = 646/378 49000000
do DDR setting..[01F40000]
Apply DDR3 Setting...(use customer AC)
0 8 16 24 32 40 48 56 64 72 80 88 96 104 112 120
--------------------------------------------------------------------------------
0000:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0001:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0002:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0003:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0004:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0005:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0006:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0007:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0008:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0009:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
000A:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
000B:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
000C:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
000D:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
000E:| 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1
000F:| 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 0
0010:| 1 1 1 1 1 1 1 1 1 1 0 0 0 0 0 0
0011:| 1 1 1 1 1 0 0 0 0 0 0 0 0 0 0 0
0012:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0013:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0014:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0015:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0016:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0017:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0018:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0019:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001A:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001B:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001C:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001D:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001E:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001F:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
rank 0 coarse = 16
rank 0 fine = 40
B:| 0 0 0 0 0 0 0 0 0 1 1 1 0 0 0 0
opt_dle value:10
DRAMC_R0DELDLY[018]=00001F20

            RX      DQS perbit delay software calibration

==================================================================
1.0-15 bit dq delay value

bit| 0 1 2 3 4 5 6 7 8 9

0 | 10 10 10 13 9 9 10 7 9 9
10 | 9 11 9 9 9 10

==================================================================
2.dqs window
x=pass dqs delay value (min~max)center
y=0-7bit DQ of every group
input delay:DQS0 =32 DQS1 = 31

bit DQS0 bit DQS1
0 (1~62)31 8 (2~60)31
1 (1~62)31 9 (2~59)30
2 (1~60)30 10 (1~59)30
3 (1~64)32 11 (1~59)30
4 (1~62)31 12 (1~59)30
5 (1~62)31 13 (1~56)28
6 (1~62)31 14 (1~61)31
7 (0~62)31 15 (1~59)30

3.dq delay value last

bit| 0 1 2 3 4 5 6 7 8 9

0 | 11 11 12 13 10 10 11 8 9 10
10 | 10 12 10 12 9 11

==================================================================
TX perbyte calibration

DQS loop = 15, cmp_err_1 = ffff0000
dqs_perbyte_dly.last_dqsdly_pass[0]=15, finish count=1
dqs_perbyte_dly.last_dqsdly_pass[1]=15, finish count=2
DQ loop=15, cmp_err_1 = ffff0000
dqs_perbyte_dly.last_dqdly_pass[0]=15, finish count=1
dqs_perbyte_dly.last_dqdly_pass[1]=15, finish count=2
byte:0, (DQS,DQ)=(8,8)
byte:1, (DQS,DQ)=(8,8)
20,data:88
[EMI] DRAMC calibration passed

===================================================================
MT7621 stage1 code done
CPU=500000000 HZ BUS=166666666 HZ

U-Boot 1.1.3 (Dec 26 2024 - 10:48:01)

Board: Ralink APSoC DRAM: 128 MB
mtest end addr: 87f31f88
relocate_code Pointer at: 87f94000

Config XHCI 40M PLL
flash manufacture id: 20, device id 40 18
find flash: xm25qh128c
*** Warning - bad CRC, using default environment

#Reset_MT7530
set LAN/WAN LLLLW

3: System Boot system code via Flash.

Booting image at bc050000 ...

Image Name: R80
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 3021862 Bytes = 2.9 MB
Load Address: 80001000
Entry Point: 80001000
Verifying Checksum ... OK
Uncompressing Kernel Image ... OK
No initrd

Transferring control to Linux (at address 80001000) ...

Giving linux memsize in MB, 128

Starting kernel ...

[ 0.000000] Linux version 4.4.140 (jenkins@release_server) (gcc version 5.4.0 (LEDE GCC 5.4.0 2.3.0) ) #0 SMP Thu Dec 26 02:44:09 2024
[ 0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[ 0.000000] bootconsole [early0] enabled
[ 0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[ 0.000000] MIPS: machine is R80
[ 0.000000] Determined physical RAM map:
[ 0.000000] memory: 08000000 @ 00000000 (usable)
[ 0.000000] Initrd not found or empty - disabling initrd
[ 0.000000] Zone ranges:
[ 0.000000] Normal [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] VPE topology {2,2} total 4
[ 0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[ 0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[ 0.000000] PERCPU: Embedded 10 pages/cpu @8110e000 s8576 r8192 d24192 u40960
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512
[ 0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2
[ 0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[ 0.000000] Writing ErrCtl register=00030863
[ 0.000000] Readback ErrCtl register=00030863
[ 0.000000] Memory: 120752K/131072K available (6219K kernel code, 809K rwdata, 1456K rodata, 208K init, 232K bss, 10320K reserved, 0K cma-reserved)
[ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[ 0.000000] Hierarchical RCU implementation.
[ 0.000000] NR_IRQS:256
[ 0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[ 0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[ 0.007774] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[ 0.070403] pid_max: default: 32768 minimum: 301
[ 0.075102] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.081624] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.092357] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[ 0.092368] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[ 0.092378] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[ 0.092516] CPU1 revision is: 0001992f (MIPS 1004Kc)
[ 0.167537] Synchronize counters for CPU 1: done.
[ 0.183011] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[ 0.183017] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[ 0.183023] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[ 0.183096] CPU2 revision is: 0001992f (MIPS 1004Kc)
[ 0.257861] Synchronize counters for CPU 2: done.
[ 0.263912] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[ 0.263919] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[ 0.263925] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[ 0.264007] CPU3 revision is: 0001992f (MIPS 1004Kc)
[ 0.343034] Synchronize counters for CPU 3: done.
[ 0.347761] Brought up 4 CPUs
[ 0.354720] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.364510] futex hash table entries: 1024 (order: 3, 32768 bytes)
[ 0.370842] pinctrl core: initialized pinctrl subsystem
[ 0.376614] NET: Registered protocol family 16
[ 0.386405] pull PCIe RST: RALINK_RSTCTRL = 0
[ 0.690997] release PCIe RST: RALINK_RSTCTRL = 7000000
[ 0.696028] ***** Xtal 40MHz *****
[ 0.699416] release PCIe RST: RALINK_RSTCTRL = 7000000
[ 0.704495] Port 0 N_FTS = 1b102800
[ 0.707951] Port 1 N_FTS = 1b102800
[ 0.711422] Port 2 N_FTS = 1b102800
[ 1.866083] PCIE2 no card, disable it(RST&CLK)
[ 1.870426] -> 21007f2
[ 1.872861] PCIE0 enabled
[ 1.875434] PCIE1 enabled
[ 1.878030] PCI host bridge /pcie@1e140000 ranges:
[ 1.882796] MEM 0x0000000060000000..0x000000006fffffff
[ 1.887987] IO 0x000000001e160000..0x000000001e16ffff
[ 1.893152] PCI coherence region base: 0x60000000, mask/settings: 0xf0000002
[ 1.906597] mt7621_gpio 1e000600.gpio: registering 32 gpios
[ 1.912307] mt7621_gpio 1e000600.gpio: registering 32 gpios
[ 1.917863] mt7621_gpio 1e000600.gpio: registering 32 gpios
[ 1.924292] usbcore: registered new interface driver usbfs
[ 1.929800] usbcore: registered new interface driver hub
[ 1.935186] usbcore: registered new device driver usb
[ 1.940736] PCI host bridge to bus 0000:00
[ 1.944761] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[ 1.951613] pci_bus 0000:00: root bus resource [io 0xffffffff]
[ 1.957448] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[ 1.964207] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[ 1.972830] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[ 1.980760] pci 0000:00:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[ 1.990026] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[ 1.996575] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[ 2.003452] pci 0000:00:01.0: BAR 0: no space for [mem size 0x80000000]
[ 2.010031] pci 0000:00:01.0: BAR 0: failed to assign [mem size 0x80000000]
[ 2.016925] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[ 2.023694] pci 0000:00:01.0: BAR 9: assigned [mem 0x60100000-0x602fffff pref]
[ 2.030839] pci 0000:00:00.0: BAR 1: assigned [mem 0x60300000-0x6030ffff]
[ 2.037603] pci 0000:00:01.0: BAR 1: assigned [mem 0x60310000-0x6031ffff]
[ 2.044325] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff]
[ 2.051075] pci 0000:00:00.0: PCI bridge to [bus 01]
[ 2.055978] pci 0000:00:00.0: bridge window [mem 0x60000000-0x600fffff]
[ 2.062746] pci 0000:02:00.0: BAR 0: assigned [mem 0x60100000-0x601fffff 64bit pref]
[ 2.070422] pci 0000:02:00.0: BAR 2: assigned [mem 0x60200000-0x60203fff 64bit pref]
[ 2.078132] pci 0000:02:00.0: BAR 4: assigned [mem 0x60204000-0x60204fff 64bit pref]
[ 2.085798] pci 0000:00:01.0: PCI bridge to [bus 02]
[ 2.090732] pci 0000:00:01.0: bridge window [mem 0x60100000-0x602fffff pref]
[ 2.097891] BAR0 at slot 0 = 0
[ 2.100918] bus=0x0, slot = 0x0
[ 2.104015] BAR0 at slot 1 = 0
[ 2.107032] bus=0x0, slot = 0x1
[ 2.110153] bus=0x1, slot = 0x0, irq=0xff
[ 2.114149] bus=0x2, slot = 0x1, irq=0x0
[ 2.119271] clocksource: Switched to clocksource GIC
[ 2.125941] NET: Registered protocol family 2
[ 2.131103] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[ 2.137978] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[ 2.144304] TCP: Hash tables configured (established 1024 bind 1024)
[ 2.150674] UDP hash table entries: 256 (order: 1, 8192 bytes)
[ 2.156431] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[ 2.162894] NET: Registered protocol family 1
[ 2.399213] 4 CPUs re-calibrate udelay(lpj = 2924544)
[ 2.405504] Crashlog allocated RAM at address 0x3f00000
[ 2.417963] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 2.423838] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 2.435917] io scheduler noop registered
[ 2.439835] io scheduler deadline registered (default)
[ 2.445172] gpio-export gpio_export: 1 gpio(s) exported
[ 2.450592] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[ 2.457795] console [ttyS0] disabled
[ 2.461376] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 33, base_baud = 3125000) is a 16550A
[ 2.470362] console [ttyS0] enabled
[ 2.470362] console [ttyS0] enabled
[ 2.477214] bootconsole [early0] disabled
[ 2.477214] bootconsole [early0] disabled
[ 2.486274] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[ 2.493599] spi-mt7621 1e000b00.spi: sys_freq: 50000000
[ 2.499719] m25p80 spi32766.0: using chunked io (size=32)
[ 2.505104] m25p80 spi32766.0: XM25QH128C (16384 Kbytes)
[ 2.510533] 7 ofpart partitions found on MTD device spi32766.0
[ 2.516337] Creating 7 MTD partitions on "spi32766.0":
[ 2.521489] 0x000000000000-0x000000030000 : "u-boot"
[ 2.527678] 0x000000030000-0x000000040000 : "u-boot-env"
[ 2.534148] 0x000000040000-0x000000050000 : "factory"
[ 2.540377] 0x000000fd0000-0x000000fe0000 : "debug"
[ 2.546292] 0x000000fe0000-0x000000ff0000 : "backup"
[ 2.552387] 0x000000ff0000-0x000001000000 : "bdinfo"
[ 2.558327] 0x000000050000-0x000000fd0000 : "firmware"
[ 2.596432] 2 uimage-fw partitions found on MTD device firmware
[ 2.602362] 0x000000050000-0x000000331c66 : "kernel"
[ 2.608376] 0x000000331c66-0x000000fd0000 : "rootfs"
[ 2.614393] mtd: device 8 (rootfs) set to be root filesystem
[ 2.620135] 1 squashfs-split partitions found on MTD device rootfs
[ 2.626296] 0x000000cf0000-0x000000fd0000 : "rootfs_data"
[ 2.633384] libphy: Fixed MDIO Bus: probed
[ 2.669543] libphy: mdio: probed
[ 2.673685] mtk_soc_eth 1e100000.ethernet: connected mac 0 to PHY at fixed-0:00 [uid=00000000, driver=Generic PHY]
[ 2.684755] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 10
[ 2.693718] mtk_soc_eth 1e100000.ethernet: connected mac 1 to PHY at fixed-0:01 [uid=00000000, driver=Generic PHY]
[ 2.704815] mtk_soc_eth 1e100000.ethernet eth1: mediatek frame engine at 0xbe100000, irq 10
[ 2.713489] MT7663E module init
[ 2.742927] MT7613 AP Driver version-6.0.4.0
[ 2.752330] mt7663e nlwifi attach
[ 2.757136] xhci-mtk 1e1c0000.xhci: xHCI Host Controller
[ 2.762499] xhci-mtk 1e1c0000.xhci: new USB bus registered, assigned bus number 1
[ 2.779420] xhci-mtk 1e1c0000.xhci: hcc params 0x01401198 hci version 0x96 quirks 0x00210010
[ 2.787875] xhci-mtk 1e1c0000.xhci: irq 29, io mem 0x1e1c0000
[ 2.794583] hub 1-0:1.0: USB hub found
[ 2.798395] hub 1-0:1.0: 2 ports detected
[ 2.802810] xhci-mtk 1e1c0000.xhci: xHCI Host Controller
[ 2.808110] xhci-mtk 1e1c0000.xhci: new USB bus registered, assigned bus number 2
[ 2.815719] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[ 2.824614] hub 2-0:1.0: USB hub found
[ 2.828421] hub 2-0:1.0: 1 port detected
[ 2.833674] mt7621_wdt 1e000100.wdt: Initialized
[ 2.839873] NET: Registered protocol family 10
[ 2.845735] NET: Registered protocol family 17
[ 2.850361] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
[ 2.862986] Bridge firewalling registered
[ 2.866982] 8021q: 802.1Q VLAN Support v1.8
[ 2.909406] mt753x gsw: Switch is MediaTek MT7530 rev 1
[ 2.936138] libphy: mt753x_mdio: probed
[ 2.945988] hctosys: unable to open rtc device (rtc0)
[ 2.958561] VFS: Mounted root (squashfs filesystem) readonly on device 31:8.
[ 2.966122] Freeing unused kernel memory: 208K
[ 3.099144] random: nonblocking pool is initialized
[ 3.951886] init: Console is alive
[ 3.955481] init: - watchdog -
[ 5.341031] mt753x gsw: Port 1 Link is Up - 100Mbps/Full
[ 5.346463] gmac: port1 linkup
[ 5.682993] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[ 5.731722] exFAT: Version 1.2.9
[ 5.762491] SCSI subsystem initialized
[ 5.770491] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[ 5.778014] ehci-platform: EHCI generic platform driver
[ 5.785275] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[ 5.792587] ohci-platform: OHCI generic platform driver
[ 5.802923] usbcore: registered new interface driver usb-storage
[ 5.809478] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[ 5.829600] init: - preinit -
[ 6.112143] boot from spi
[ 6.246346] jffs2: notice: (435) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 6.263831] mount_root: switching to jffs2 overlay
[ 6.287102] urandom-seed: Seeding with /etc/urandom.seed
start
[ 7.195697] procd: - early -
[ 7.198668] procd: - watchdog -
[ 7.879425] procd: - watchdog -
[ 7.882842] procd: - ubus -
[ 7.960732] procd: - init -
[ 8.409211] kmodloader: loading kernel modules from /etc/modules.d/*
[ 8.447408] Initializing XFRM netlink socket
[ 8.453499] NET: Registered protocol family 15
[ 8.459793] tun: Universal TUN/TAP device driver, 1.6
[ 8.464843] tun: (C) 1999-2004 Max Krasnyansky maxk@qualcomm.com
[ 8.497953] l2tp_core: L2TP core driver, V2.0
[ 8.503844] l2tp_netlink: L2TP netlink interface
[ 8.510899] nat46: module (version 362640b41ae52b732d9e9729e61ac555492442a3) loaded.
[ 8.524723] gre: GRE over IPv4 demultiplexor driver
[ 8.531306] ip_gre: GRE over IPv4 tunneling driver
[ 8.542831] ip6_tables: (C) 2000-2006 Netfilter Core Team
[ 8.555931] Netfilter messages via NETLINK v0.30.
[ 8.563193] ip_set: protocol 6
[ 8.605612] u32 classifier
[ 8.608329] input device check on
[ 8.612017] Actions configured
[ 8.617420] Mirror/redirect action on
[ 8.627503] fuse init (API version 7.23)
[ 9.226621] register rlt_drv
[ 9.229688] MT7603E module init
[ 9.246030] MT7603E AP Driver version-4.1.2.3
[ 9.551242] RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 1
[ 9.558794] NVM is FLASH mode, flash_offset = 0x0
[ 9.732263] E2PROM MAC: =80:af:ca:bf:00:2c
[ 9.737096] NICInitAsicFromEEPROM, Init Txpower, Tx0:22, Tx1:22
[ 9.743136] ===> APStartUp MT7603E
[ 11.663479] Main bssid = 80:af:ca:bf:00:2c
[ 11.667563] <=== APStartUp MT7603E
[ 11.675167] mt7603_set_ed_cca: TURN OFF EDCCA mac 0x10618 = 0x8564267c, EDCCA_Status=0
[ 11.683194] mt7603e nlwifi attach
[ 11.734142] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 11.752001] nf_conntrack version 0.5.0 (1890 buckets, 7560 max)
[ 11.856173] ctnetlink v0.93: registering with nfnetlink.
[ 11.864437] nf_conntrack_rtsp v0.7 loading
[ 12.013430] nf_nat_rtsp v0.7 loading
[ 12.029044] wireguard: WireGuard 1.0.20210219 loaded. See www.wireguard.com for information.
[ 12.037503] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld Jason@zx2c4.com. All Rights Reserved.
[ 12.071205] xt_time: kernel timezone is -0000
[ 12.090877] PPP generic driver version 2.4.2
[ 12.096417] PPP MPPE Compression module registered
[ 12.102451] NET: Registered protocol family 24
[ 12.108060] PPTP driver version 0.8.5
[ 12.115606] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[ 12.123105] kmodloader: done loading kernel modules from /etc/modules.d/*
[ 12.303325] eeprom offset remain 0x8000
[ 12.307200] eeprom size remain 0x600
[ 15.324763] [SKUenable] BAND0: 0
[ 17.118929] [SKUenable] BAND0: 0
[ 17.213150] hc_radio_res_request(): wdev=3, hobj is not ready!
[ 17.219049] hc_radio_res_request(): wdev=3, hobj is not ready!
[ 18.211782] MtCmdTxPowerSKUCtrl: fgTxPowerSKUEn: 0, BandIdx: 0
[ 18.217752] MtCmdTxBfBackoffCtrl: fgTxBFBackoffEn: 0, BandIdx: 0
[ 19.199507] HcGetEdca(): wdev=0, hobj is not ready!
[ 21.659630] mediatek_soc_hnat 1e100000.hnat: wan = eth1
[ 21.664856] mediatek_soc_hnat 1e100000.hnat: ppd = eth0
[ 21.670095] mediatek_soc_hnat 1e100000.hnat: gmac num = 2
[ 21.675693] mediatek_soc_hnat 1e100000.hnat: ext devices = rai0
[ 21.681628] mediatek_soc_hnat 1e100000.hnat: ext devices = ra0
[ 21.687451] mediatek_soc_hnat 1e100000.hnat: ext devices = rai1
[ 21.693358] mediatek_soc_hnat 1e100000.hnat: ext devices = ra1
[ 21.699163] mediatek_soc_hnat 1e100000.hnat: ext devices = rai2
[ 21.705085] mediatek_soc_hnat 1e100000.hnat: ext devices = ra2
[ 21.712856] mediatek_soc_hnat 1e100000.hnat: FOE entry number = 8192
[ 21.720592] mediatek_soc_hnat 1e100000.hnat: hwnat start
[ 24.307084] !!! APStop !!!
[ 24.310174] ===> APStartUp MT7603E
[ 26.231820] Main bssid = 80:af:ca:bf:00:2c
[ 26.235997] <=== APStartUp MT7603E
[ 26.480411] !!! APStop !!!
[ 26.483697] ===> APStartUp MT7603E
[ 28.524373] Main bssid = 80:af:ca:bf:00:2c
[ 28.528464] <=== APStartUp MT7603E
[ 28.536904] extif_set_dev(ra0)
[ 28.555327] device eth0 entered promiscuous mode
[ 28.564783] br-lan: port 1(eth0) entered forwarding state
[ 28.570499] br-lan: port 1(eth0) entered forwarding state
[ 28.928740] wan-detect: service:
[ 29.169072] device ra0 entered promiscuous mode
[ 29.173899] br-lan: port 2(ra0) entered forwarding state
[ 29.179312] br-lan: port 2(ra0) entered forwarding state
[ 29.369787] !!! APStop !!!
[ 29.373122] ===> APStartUp MT7603E
[ 29.672362] Main bssid = 80:af:ca:bf:00:2c
[ 29.676457] <=== APStartUp MT7603E
[ 29.686202] extif_set_dev(ra2)
[ 30.365999] device ra2 entered promiscuous mode
[ 30.370909] br-lan: port 3(ra2) entered forwarding state
[ 30.376385] br-lan: port 3(ra2) entered forwarding state
[ 30.569290] br-lan: port 1(eth0) entered forwarding state
[ 30.590146] RTMPSetPhyMode(): channel out of range, use first ch=36
[ 30.673454] [RcGetHdevByPhyMode]-- channel 0 fix for rdev fetching
[ 31.179300] br-lan: port 2(ra0) entered forwarding state
[ 31.649430] ====================================================================
[ 31.656844] Channel 36 : Busy Time = 1256, Skip Channel = FALSE, BwCap = TRUE
[ 31.664423] Channel 40 : Busy Time = 981, Skip Channel = FALSE, BwCap = TRUE
[ 31.671899] Channel 44 : Busy Time = 828, Skip Channel = FALSE, BwCap = TRUE
[ 31.679372] Channel 48 : Busy Time = 32, Skip Channel = FALSE, BwCap = TRUE
[ 31.686797] ====================================================================
[ 31.694357] Rule 3 Channel Busy time value : Select Primary Channel 48
[ 31.701075] Rule 3 Channel Busy time value : Min Channel Busy = 1256
[ 31.707440] Rule 3 Channel Busy time value : BW = 80
[ 31.712550] ApAutoChannelAtBootUp : Auto channel selection: Selected channel = 48, IsAband = 1
[ 32.014692] MtCmdTxPowerSKUCtrl: fgTxPowerSKUEn: 0, BandIdx: 0
[ 32.020843] MtCmdTxBfBackoffCtrl: fgTxBFBackoffEn: 0, BandIdx: 0
[ 32.036036] extif_set_dev(rai0)
[ 32.369315] br-lan: port 3(ra2) entered forwarding state
[ 32.588935] device rai0 entered promiscuous mode
[ 32.593984] br-lan: port 4(rai0) entered forwarding state
[ 32.599605] br-lan: port 4(rai0) entered forwarding state
[ 32.649168] hc_radio_res_request(): wdev=2, hobj is not ready!
[ 32.655205] hc_radio_res_request(): wdev=2, hobj is not ready!
[ 32.859141] MtCmdTxPowerSKUCtrl: fgTxPowerSKUEn: 0, BandIdx: 0
[ 32.865134] MtCmdTxBfBackoffCtrl: fgTxBFBackoffEn: 0, BandIdx: 0
[ 32.881533] extif_set_dev(rai2)
[ 33.374261] device rai2 entered promiscuous mode
[ 33.379859] br-lan: port 5(rai2) entered forwarding state
[ 33.385478] br-lan: port 5(rai2) entered forwarding state
[ 33.520298] set_thermal_protection_admin_ctrl_duty_proc: ucBand:0, u4Lv0Duty:100, u4Lv1Duty:60, u4Lv2Duty:30, u4Lv3Duty:15
[ 33.554132] set_thermal_protection_criteria_proc: fgHighEn: 1, fgLowEn: 1, fgRFOffEn: 0, cHighTempTh: 122, cLowTempTh: 112, cRFOffTh: 125
[ 33.566598] set_thermal_protection_criteria_proc: u4RechkTimer: 10, ucType: Duty Cycle
[ 33.574625] MtCmdThermalProtect: ucBand:0, HighEn:1, HighTempTh:122, LowEn:1, LowTempTh:112, RechkTimer:10
[ 33.584341] MtCmdThermalProtect: RFOffEn: 0, RFOffTh: 125, ucType: 1
[ 34.599489] br-lan: port 4(rai0) entered forwarding state
[ 34.976306] S95done (2572): drop_caches: 3
[ 35.379326] br-lan: port 5(rai2) entered forwarding state
[ 35.846405] !!! APStop !!!
[ 35.849780] ===> APStartUp MT7603E
[ 36.290282] Main bssid = 80:af:ca:bf:00:2c
[ 36.294390] <=== APStartUp MT7603E

9

I downloaded the latest firmware from the website, unzipped it, and found this information:

Summary

~/firmware_work$ grep -E "model|compatible" router_oem.dts | head -n 10
compatible = "OEM,MT7621\0mediatek,mt7621-soc";
model = "R80";
compatible = "mips,mips1004Kc";
compatible = "mips,mips1004Kc";
compatible = "mti,cpu-interrupt-controller";
compatible = "fixed-clock";
compatible = "fixed-clock";
compatible = "palmbus";
compatible = "mtk,mt7621-sysc";
compatible = "mtk,mt7621-wdt";

~/firmware_work$ grep -A 40 "partitions" router_oem.dts

~/firmware_work$ grep -A 50 "spi@" router_oem.dts
spi@b00 {
status = "okay";
compatible = "ralink,mt7621-spi";
reg = <0xb00 0x100>;
clocks = <0x01>;
resets = <0x02 0x12>;
reset-names = "spi";
#address-cells = <0x01>;
#size-cells = <0x00>;
pinctrl-names = "default";
pinctrl-0 = <0x06>;

                    m25p80@0 {
                            #address-cells = <0x01>;
                            #size-cells = <0x01>;
                            compatible = "jedec,spi-nor";
                            reg = <0x00>;
                            spi-max-frequency = <0x989680>;
                            m25p,chunked-io = <0x20>;

                            partition@0 {
                                    label = "u-boot";
                                    reg = <0x00 0x30000>;
                            };

                            partition@30000 {
                                    label = "u-boot-env";
                                    reg = <0x30000 0x10000>;
                            };

                            partition@40000 {
                                    label = "factory";
                                    reg = <0x40000 0x10000>;
                                    linux,phandle = <0x0e>;
                                    phandle = <0x0e>;
                            };

                            partition@fd0000 {
                                    label = "debug";
                                    reg = <0xfd0000 0x10000>;
                            };

                            partition@fe0000 {
                                    label = "backup";
                                    reg = <0xfe0000 0x10000>;
                            };

                            partition@ff0000 {
                                    label = "bdinfo";
                                    reg = <0xff0000 0x10000>;
                                    linux,phandle = <0x0a>;
  1. Flash Map
    Flash memory 16 Mb (0x1000000).
    (Offset)___(Size)___Name______comment
    0x000000 192 KB (0x30000) u-boot Bootloader.
    0x030000 64 KB (0x10000) u-boot-env Bootloader_environement.
    0x040000 64 KB (0x10000) factory Wi-Fi calibrations (EEPROM) and MAC address are stored here.
    ... ... firmware (Kernel + Rootfs).
    0xFD0000 64 KB (0x10000) debug debug Service partition.
    0xFE0000 64 KB (0x10000) backup Backup copy of settings
    0xFF0000 64 KB (0x10000) bdinfo Device information.

Maybe I mistake somewhere.
I have little experience and don't know what needs to be analyzed.

10

dts is for your reference, how hardware is laid out. You will have to adapt that to OpenWrt, hopefully starting with similar (like from same manufacturer with similar outside specs)

While at serial console

  • can you type help into uboot
  • capture OEM boot messages
11

I cannot type anything in the console because input is locked until midway through the boot process. As you can see in my previous message, the '[ 3.951886] init: Console is alive' prompt only appears during device initialization, well after the bootloader has started. Not a single character is printed to the console before this entry. I will post the full console output here once more.
In console clean boot log this:

Summary

===================================================================
MT7621 stage1 code 10:33:55 (ASIC)
CPU=500000000 HZ BUS=166666666 HZ

Change MPLL source from XTAL to CR...
do MEMPLL setting..
MEMPLL Config : 0x11100000
3PLL mode + External loopback
=== XTAL-40Mhz === DDR-1200Mhz ===
PLL3 FB_DL: 0xe, 1/0 = 633/391 39000000
PLL2 FB_DL: 0x12, 1/0 = 707/317 49000000
PLL4 FB_DL: 0x12, 1/0 = 646/378 49000000
do DDR setting..[01F40000]
Apply DDR3 Setting...(use customer AC)
0 8 16 24 32 40 48 56 64 72 80 88 96 104 112 120
--------------------------------------------------------------------------------
0000:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0001:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0002:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0003:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0004:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0005:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0006:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0007:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0008:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0009:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
000A:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
000B:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
000C:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
000D:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
000E:| 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1
000F:| 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 0
0010:| 1 1 1 1 1 1 1 1 1 1 0 0 0 0 0 0
0011:| 1 1 1 1 1 0 0 0 0 0 0 0 0 0 0 0
0012:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0013:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0014:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0015:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0016:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0017:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0018:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0019:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001A:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001B:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001C:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001D:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001E:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001F:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
rank 0 coarse = 16
rank 0 fine = 40
B:| 0 0 0 0 0 0 0 0 0 1 1 1 0 0 0 0
opt_dle value:10
DRAMC_R0DELDLY[018]=00001F20

            RX      DQS perbit delay software calibration

==================================================================
1.0-15 bit dq delay value

bit| 0 1 2 3 4 5 6 7 8 9

0 | 10 10 10 13 9 9 10 7 9 9
10 | 9 11 9 9 9 10

==================================================================
2.dqs window
x=pass dqs delay value (min~max)center
y=0-7bit DQ of every group
input delay:DQS0 =32 DQS1 = 31

bit DQS0 bit DQS1
0 (1~62)31 8 (2~60)31
1 (1~62)31 9 (2~59)30
2 (1~60)30 10 (1~59)30
3 (1~64)32 11 (1~59)30
4 (1~62)31 12 (1~59)30
5 (1~62)31 13 (1~56)28
6 (1~62)31 14 (1~61)31
7 (0~62)31 15 (1~59)30

3.dq delay value last

bit| 0 1 2 3 4 5 6 7 8 9

0 | 11 11 12 13 10 10 11 8 9 10
10 | 10 12 10 12 9 11

==================================================================
TX perbyte calibration

DQS loop = 15, cmp_err_1 = ffff0000
dqs_perbyte_dly.last_dqsdly_pass[0]=15, finish count=1
dqs_perbyte_dly.last_dqsdly_pass[1]=15, finish count=2
DQ loop=15, cmp_err_1 = ffff0000
dqs_perbyte_dly.last_dqdly_pass[0]=15, finish count=1
dqs_perbyte_dly.last_dqdly_pass[1]=15, finish count=2
byte:0, (DQS,DQ)=(8,8)
byte:1, (DQS,DQ)=(8,8)
20,data:88
[EMI] DRAMC calibration passed

===================================================================
MT7621 stage1 code done
CPU=500000000 HZ BUS=166666666 HZ

U-Boot 1.1.3 (Dec 26 2024 - 10:48:01)

Board: Ralink APSoC DRAM: 128 MB
mtest end addr: 87f31f88
relocate_code Pointer at: 87f94000

Config XHCI 40M PLL
flash manufacture id: 20, device id 40 18
find flash: xm25qh128c
*** Warning - bad CRC, using default environment

#Reset_MT7530
set LAN/WAN LLLLW

3: System Boot system code via Flash.

Booting image at bc050000 ...

Image Name: R80
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 3021862 Bytes = 2.9 MB
Load Address: 80001000
Entry Point: 80001000
Verifying Checksum ... OK
Uncompressing Kernel Image ... OK
No initrd

Transferring control to Linux (at address 80001000) ...

Giving linux memsize in MB, 128

Starting kernel ...

[ 0.000000] Linux version 4.4.140 (jenkins@release_server) (gcc version 5.4.0 (LEDE GCC 5.4.0 2.3.0) ) #0 SMP Thu Dec 26 02:44:09 2024
[ 0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[ 0.000000] bootconsole [early0] enabled
[ 0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[ 0.000000] MIPS: machine is R80
[ 0.000000] Determined physical RAM map:
[ 0.000000] memory: 08000000 @ 00000000 (usable)
[ 0.000000] Initrd not found or empty - disabling initrd
[ 0.000000] Zone ranges:
[ 0.000000] Normal [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] VPE topology {2,2} total 4
[ 0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[ 0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[ 0.000000] PERCPU: Embedded 10 pages/cpu @8110e000 s8576 r8192 d24192 u40960
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512
[ 0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2
[ 0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[ 0.000000] Writing ErrCtl register=00030863
[ 0.000000] Readback ErrCtl register=00030863
[ 0.000000] Memory: 120752K/131072K available (6219K kernel code, 809K rwdata, 1456K rodata, 208K init, 232K bss, 10320K reserved, 0K cma-reserved)
[ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[ 0.000000] Hierarchical RCU implementation.
[ 0.000000] NR_IRQS:256
[ 0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[ 0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[ 0.007774] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[ 0.070403] pid_max: default: 32768 minimum: 301
[ 0.075102] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.081624] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.092357] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[ 0.092368] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[ 0.092378] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[ 0.092516] CPU1 revision is: 0001992f (MIPS 1004Kc)
[ 0.167537] Synchronize counters for CPU 1: done.
[ 0.183011] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[ 0.183017] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[ 0.183023] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[ 0.183096] CPU2 revision is: 0001992f (MIPS 1004Kc)
[ 0.257861] Synchronize counters for CPU 2: done.
[ 0.263912] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[ 0.263919] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[ 0.263925] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[ 0.264007] CPU3 revision is: 0001992f (MIPS 1004Kc)
[ 0.343034] Synchronize counters for CPU 3: done.
[ 0.347761] Brought up 4 CPUs
[ 0.354720] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.364510] futex hash table entries: 1024 (order: 3, 32768 bytes)
[ 0.370842] pinctrl core: initialized pinctrl subsystem
[ 0.376614] NET: Registered protocol family 16
[ 0.386405] pull PCIe RST: RALINK_RSTCTRL = 0
[ 0.690997] release PCIe RST: RALINK_RSTCTRL = 7000000
[ 0.696028] ***** Xtal 40MHz *****
[ 0.699416] release PCIe RST: RALINK_RSTCTRL = 7000000
[ 0.704495] Port 0 N_FTS = 1b102800
[ 0.707951] Port 1 N_FTS = 1b102800
[ 0.711422] Port 2 N_FTS = 1b102800
[ 1.866083] PCIE2 no card, disable it(RST&CLK)
[ 1.870426] -> 21007f2
[ 1.872861] PCIE0 enabled
[ 1.875434] PCIE1 enabled
[ 1.878030] PCI host bridge /pcie@1e140000 ranges:
[ 1.882796] MEM 0x0000000060000000..0x000000006fffffff
[ 1.887987] IO 0x000000001e160000..0x000000001e16ffff
[ 1.893152] PCI coherence region base: 0x60000000, mask/settings: 0xf0000002
[ 1.906597] mt7621_gpio 1e000600.gpio: registering 32 gpios
[ 1.912307] mt7621_gpio 1e000600.gpio: registering 32 gpios
[ 1.917863] mt7621_gpio 1e000600.gpio: registering 32 gpios
[ 1.924292] usbcore: registered new interface driver usbfs
[ 1.929800] usbcore: registered new interface driver hub
[ 1.935186] usbcore: registered new device driver usb
[ 1.940736] PCI host bridge to bus 0000:00
[ 1.944761] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[ 1.951613] pci_bus 0000:00: root bus resource [io 0xffffffff]
[ 1.957448] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[ 1.964207] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[ 1.972830] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[ 1.980760] pci 0000:00:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[ 1.990026] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[ 1.996575] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[ 2.003452] pci 0000:00:01.0: BAR 0: no space for [mem size 0x80000000]
[ 2.010031] pci 0000:00:01.0: BAR 0: failed to assign [mem size 0x80000000]
[ 2.016925] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[ 2.023694] pci 0000:00:01.0: BAR 9: assigned [mem 0x60100000-0x602fffff pref]
[ 2.030839] pci 0000:00:00.0: BAR 1: assigned [mem 0x60300000-0x6030ffff]
[ 2.037603] pci 0000:00:01.0: BAR 1: assigned [mem 0x60310000-0x6031ffff]
[ 2.044325] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff]
[ 2.051075] pci 0000:00:00.0: PCI bridge to [bus 01]
[ 2.055978] pci 0000:00:00.0: bridge window [mem 0x60000000-0x600fffff]
[ 2.062746] pci 0000:02:00.0: BAR 0: assigned [mem 0x60100000-0x601fffff 64bit pref]
[ 2.070422] pci 0000:02:00.0: BAR 2: assigned [mem 0x60200000-0x60203fff 64bit pref]
[ 2.078132] pci 0000:02:00.0: BAR 4: assigned [mem 0x60204000-0x60204fff 64bit pref]
[ 2.085798] pci 0000:00:01.0: PCI bridge to [bus 02]
[ 2.090732] pci 0000:00:01.0: bridge window [mem 0x60100000-0x602fffff pref]
[ 2.097891] BAR0 at slot 0 = 0
[ 2.100918] bus=0x0, slot = 0x0
[ 2.104015] BAR0 at slot 1 = 0
[ 2.107032] bus=0x0, slot = 0x1
[ 2.110153] bus=0x1, slot = 0x0, irq=0xff
[ 2.114149] bus=0x2, slot = 0x1, irq=0x0
[ 2.119271] clocksource: Switched to clocksource GIC
[ 2.125941] NET: Registered protocol family 2
[ 2.131103] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[ 2.137978] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[ 2.144304] TCP: Hash tables configured (established 1024 bind 1024)
[ 2.150674] UDP hash table entries: 256 (order: 1, 8192 bytes)
[ 2.156431] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[ 2.162894] NET: Registered protocol family 1
[ 2.399213] 4 CPUs re-calibrate udelay(lpj = 2924544)
[ 2.405504] Crashlog allocated RAM at address 0x3f00000
[ 2.417963] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 2.423838] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 2.435917] io scheduler noop registered
[ 2.439835] io scheduler deadline registered (default)
[ 2.445172] gpio-export gpio_export: 1 gpio(s) exported
[ 2.450592] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[ 2.457795] console [ttyS0] disabled
[ 2.461376] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 33, base_baud = 3125000) is a 16550A
[ 2.470362] console [ttyS0] enabled
[ 2.470362] console [ttyS0] enabled
[ 2.477214] bootconsole [early0] disabled
[ 2.477214] bootconsole [early0] disabled
[ 2.486274] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[ 2.493599] spi-mt7621 1e000b00.spi: sys_freq: 50000000
[ 2.499719] m25p80 spi32766.0: using chunked io (size=32)
[ 2.505104] m25p80 spi32766.0: XM25QH128C (16384 Kbytes)
[ 2.510533] 7 ofpart partitions found on MTD device spi32766.0
[ 2.516337] Creating 7 MTD partitions on "spi32766.0":
[ 2.521489] 0x000000000000-0x000000030000 : "u-boot"
[ 2.527678] 0x000000030000-0x000000040000 : "u-boot-env"
[ 2.534148] 0x000000040000-0x000000050000 : "factory"
[ 2.540377] 0x000000fd0000-0x000000fe0000 : "debug"
[ 2.546292] 0x000000fe0000-0x000000ff0000 : "backup"
[ 2.552387] 0x000000ff0000-0x000001000000 : "bdinfo"
[ 2.558327] 0x000000050000-0x000000fd0000 : "firmware"
[ 2.596432] 2 uimage-fw partitions found on MTD device firmware
[ 2.602362] 0x000000050000-0x000000331c66 : "kernel"
[ 2.608376] 0x000000331c66-0x000000fd0000 : "rootfs"
[ 2.614393] mtd: device 8 (rootfs) set to be root filesystem
[ 2.620135] 1 squashfs-split partitions found on MTD device rootfs
[ 2.626296] 0x000000cf0000-0x000000fd0000 : "rootfs_data"
[ 2.633384] libphy: Fixed MDIO Bus: probed
[ 2.669543] libphy: mdio: probed
[ 2.673685] mtk_soc_eth 1e100000.ethernet: connected mac 0 to PHY at fixed-0:00 [uid=00000000, driver=Generic PHY]
[ 2.684755] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 10
[ 2.693718] mtk_soc_eth 1e100000.ethernet: connected mac 1 to PHY at fixed-0:01 [uid=00000000, driver=Generic PHY]
[ 2.704815] mtk_soc_eth 1e100000.ethernet eth1: mediatek frame engine at 0xbe100000, irq 10
[ 2.713489] MT7663E module init
[ 2.742927] MT7613 AP Driver version-6.0.4.0
[ 2.752330] mt7663e nlwifi attach
[ 2.757136] xhci-mtk 1e1c0000.xhci: xHCI Host Controller
[ 2.762499] xhci-mtk 1e1c0000.xhci: new USB bus registered, assigned bus number 1
[ 2.779420] xhci-mtk 1e1c0000.xhci: hcc params 0x01401198 hci version 0x96 quirks 0x00210010
[ 2.787875] xhci-mtk 1e1c0000.xhci: irq 29, io mem 0x1e1c0000
[ 2.794583] hub 1-0:1.0: USB hub found
[ 2.798395] hub 1-0:1.0: 2 ports detected
[ 2.802810] xhci-mtk 1e1c0000.xhci: xHCI Host Controller
[ 2.808110] xhci-mtk 1e1c0000.xhci: new USB bus registered, assigned bus number 2
[ 2.815719] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[ 2.824614] hub 2-0:1.0: USB hub found
[ 2.828421] hub 2-0:1.0: 1 port detected
[ 2.833674] mt7621_wdt 1e000100.wdt: Initialized
[ 2.839873] NET: Registered protocol family 10
[ 2.845735] NET: Registered protocol family 17
[ 2.850361] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
[ 2.862986] Bridge firewalling registered
[ 2.866982] 8021q: 802.1Q VLAN Support v1.8
[ 2.909406] mt753x gsw: Switch is MediaTek MT7530 rev 1
[ 2.936138] libphy: mt753x_mdio: probed
[ 2.945988] hctosys: unable to open rtc device (rtc0)
[ 2.958561] VFS: Mounted root (squashfs filesystem) readonly on device 31:8.
[ 2.966122] Freeing unused kernel memory: 208K
[ 3.099144] random: nonblocking pool is initialized
[ 3.951886] init: Console is alive
[ 3.955481] init: - watchdog -
[ 5.341031] mt753x gsw: Port 1 Link is Up - 100Mbps/Full
[ 5.346463] gmac: port1 linkup
[ 5.682993] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[ 5.731722] exFAT: Version 1.2.9
[ 5.762491] SCSI subsystem initialized
[ 5.770491] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[ 5.778014] ehci-platform: EHCI generic platform driver
[ 5.785275] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[ 5.792587] ohci-platform: OHCI generic platform driver
[ 5.802923] usbcore: registered new interface driver usb-storage
[ 5.809478] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[ 5.829600] init: - preinit -
[ 6.112143] boot from spi
[ 6.246346] jffs2: notice: (435) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 6.263831] mount_root: switching to jffs2 overlay
[ 6.287102] urandom-seed: Seeding with /etc/urandom.seed
start
[ 7.195697] procd: - early -
[ 7.198668] procd: - watchdog -
[ 7.879425] procd: - watchdog -
[ 7.882842] procd: - ubus -
[ 7.960732] procd: - init -
[ 8.409211] kmodloader: loading kernel modules from /etc/modules.d/*
[ 8.447408] Initializing XFRM netlink socket
[ 8.453499] NET: Registered protocol family 15
[ 8.459793] tun: Universal TUN/TAP device driver, 1.6
[ 8.464843] tun: (C) 1999-2004 Max Krasnyansky maxk@qualcomm.com
[ 8.497953] l2tp_core: L2TP core driver, V2.0
[ 8.503844] l2tp_netlink: L2TP netlink interface
[ 8.510899] nat46: module (version 362640b41ae52b732d9e9729e61ac555492442a3) loaded.
[ 8.524723] gre: GRE over IPv4 demultiplexor driver
[ 8.531306] ip_gre: GRE over IPv4 tunneling driver
[ 8.542831] ip6_tables: (C) 2000-2006 Netfilter Core Team
[ 8.555931] Netfilter messages via NETLINK v0.30.
[ 8.563193] ip_set: protocol 6
[ 8.605612] u32 classifier
[ 8.608329] input device check on
[ 8.612017] Actions configured
[ 8.617420] Mirror/redirect action on
[ 8.627503] fuse init (API version 7.23)
[ 9.226621] register rlt_drv
[ 9.229688] MT7603E module init
[ 9.246030] MT7603E AP Driver version-4.1.2.3
[ 9.551242] RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 1
[ 9.558794] NVM is FLASH mode, flash_offset = 0x0
[ 9.732263] E2PROM MAC: =80:af:ca:bf:00:2c
[ 9.737096] NICInitAsicFromEEPROM, Init Txpower, Tx0:22, Tx1:22
[ 9.743136] ===> APStartUp MT7603E
[ 11.663479] Main bssid = 80:af:ca:bf:00:2c
[ 11.667563] <=== APStartUp MT7603E
[ 11.675167] mt7603_set_ed_cca: TURN OFF EDCCA mac 0x10618 = 0x8564267c, EDCCA_Status=0
[ 11.683194] mt7603e nlwifi attach
[ 11.734142] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 11.752001] nf_conntrack version 0.5.0 (1890 buckets, 7560 max)
[ 11.856173] ctnetlink v0.93: registering with nfnetlink.
[ 11.864437] nf_conntrack_rtsp v0.7 loading
[ 12.013430] nf_nat_rtsp v0.7 loading
[ 12.029044] wireguard: WireGuard 1.0.20210219 loaded. See www.wireguard.com for information.
[ 12.037503] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld Jason@zx2c4.com. All Rights Reserved.
[ 12.071205] xt_time: kernel timezone is -0000
[ 12.090877] PPP generic driver version 2.4.2
[ 12.096417] PPP MPPE Compression module registered
[ 12.102451] NET: Registered protocol family 24
[ 12.108060] PPTP driver version 0.8.5
[ 12.115606] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[ 12.123105] kmodloader: done loading kernel modules from /etc/modules.d/*
[ 12.303325] eeprom offset remain 0x8000
[ 12.307200] eeprom size remain 0x600
[ 15.324763] [SKUenable] BAND0: 0
[ 17.118929] [SKUenable] BAND0: 0
[ 17.213150] hc_radio_res_request(): wdev=3, hobj is not ready!
[ 17.219049] hc_radio_res_request(): wdev=3, hobj is not ready!
[ 18.211782] MtCmdTxPowerSKUCtrl: fgTxPowerSKUEn: 0, BandIdx: 0
[ 18.217752] MtCmdTxBfBackoffCtrl: fgTxBFBackoffEn: 0, BandIdx: 0
[ 19.199507] HcGetEdca(): wdev=0, hobj is not ready!
[ 21.659630] mediatek_soc_hnat 1e100000.hnat: wan = eth1
[ 21.664856] mediatek_soc_hnat 1e100000.hnat: ppd = eth0
[ 21.670095] mediatek_soc_hnat 1e100000.hnat: gmac num = 2
[ 21.675693] mediatek_soc_hnat 1e100000.hnat: ext devices = rai0
[ 21.681628] mediatek_soc_hnat 1e100000.hnat: ext devices = ra0
[ 21.687451] mediatek_soc_hnat 1e100000.hnat: ext devices = rai1
[ 21.693358] mediatek_soc_hnat 1e100000.hnat: ext devices = ra1
[ 21.699163] mediatek_soc_hnat 1e100000.hnat: ext devices = rai2
[ 21.705085] mediatek_soc_hnat 1e100000.hnat: ext devices = ra2
[ 21.712856] mediatek_soc_hnat 1e100000.hnat: FOE entry number = 8192
[ 21.720592] mediatek_soc_hnat 1e100000.hnat: hwnat start
[ 24.307084] !!! APStop !!!
[ 24.310174] ===> APStartUp MT7603E
[ 26.231820] Main bssid = 80:af:ca:bf:00:2c
[ 26.235997] <=== APStartUp MT7603E
[ 26.480411] !!! APStop !!!
[ 26.483697] ===> APStartUp MT7603E
[ 28.524373] Main bssid = 80:af:ca:bf:00:2c
[ 28.528464] <=== APStartUp MT7603E
[ 28.536904] extif_set_dev(ra0)
[ 28.555327] device eth0 entered promiscuous mode
[ 28.564783] br-lan: port 1(eth0) entered forwarding state
[ 28.570499] br-lan: port 1(eth0) entered forwarding state
[ 28.928740] wan-detect: service:
[ 29.169072] device ra0 entered promiscuous mode
[ 29.173899] br-lan: port 2(ra0) entered forwarding state
[ 29.179312] br-lan: port 2(ra0) entered forwarding state
[ 29.369787] !!! APStop !!!
[ 29.373122] ===> APStartUp MT7603E
[ 29.672362] Main bssid = 80:af:ca:bf:00:2c
[ 29.676457] <=== APStartUp MT7603E
[ 29.686202] extif_set_dev(ra2)
[ 30.365999] device ra2 entered promiscuous mode
[ 30.370909] br-lan: port 3(ra2) entered forwarding state
[ 30.376385] br-lan: port 3(ra2) entered forwarding state
[ 30.569290] br-lan: port 1(eth0) entered forwarding state
[ 30.590146] RTMPSetPhyMode(): channel out of range, use first ch=36
[ 30.673454] [RcGetHdevByPhyMode]-- channel 0 fix for rdev fetching
[ 31.179300] br-lan: port 2(ra0) entered forwarding state
[ 31.649430] ====================================================================
[ 31.656844] Channel 36 : Busy Time = 1256, Skip Channel = FALSE, BwCap = TRUE
[ 31.664423] Channel 40 : Busy Time = 981, Skip Channel = FALSE, BwCap = TRUE
[ 31.671899] Channel 44 : Busy Time = 828, Skip Channel = FALSE, BwCap = TRUE
[ 31.679372] Channel 48 : Busy Time = 32, Skip Channel = FALSE, BwCap = TRUE
[ 31.686797] ====================================================================
[ 31.694357] Rule 3 Channel Busy time value : Select Primary Channel 48
[ 31.701075] Rule 3 Channel Busy time value : Min Channel Busy = 1256
[ 31.707440] Rule 3 Channel Busy time value : BW = 80
[ 31.712550] ApAutoChannelAtBootUp : Auto channel selection: Selected channel = 48, IsAband = 1
[ 32.014692] MtCmdTxPowerSKUCtrl: fgTxPowerSKUEn: 0, BandIdx: 0
[ 32.020843] MtCmdTxBfBackoffCtrl: fgTxBFBackoffEn: 0, BandIdx: 0
[ 32.036036] extif_set_dev(rai0)
[ 32.369315] br-lan: port 3(ra2) entered forwarding state
[ 32.588935] device rai0 entered promiscuous mode
[ 32.593984] br-lan: port 4(rai0) entered forwarding state
[ 32.599605] br-lan: port 4(rai0) entered forwarding state
[ 32.649168] hc_radio_res_request(): wdev=2, hobj is not ready!
[ 32.655205] hc_radio_res_request(): wdev=2, hobj is not ready!
[ 32.859141] MtCmdTxPowerSKUCtrl: fgTxPowerSKUEn: 0, BandIdx: 0
[ 32.865134] MtCmdTxBfBackoffCtrl: fgTxBFBackoffEn: 0, BandIdx: 0
[ 32.881533] extif_set_dev(rai2)
[ 33.374261] device rai2 entered promiscuous mode
[ 33.379859] br-lan: port 5(rai2) entered forwarding state
[ 33.385478] br-lan: port 5(rai2) entered forwarding state
[ 33.520298] set_thermal_protection_admin_ctrl_duty_proc: ucBand:0, u4Lv0Duty:100, u4Lv1Duty:60, u4Lv2Duty:30, u4Lv3Duty:15
[ 33.554132] set_thermal_protection_criteria_proc: fgHighEn: 1, fgLowEn: 1, fgRFOffEn: 0, cHighTempTh: 122, cLowTempTh: 112, cRFOffTh: 125
[ 33.566598] set_thermal_protection_criteria_proc: u4RechkTimer: 10, ucType: Duty Cycle
[ 33.574625] MtCmdThermalProtect: ucBand:0, HighEn:1, HighTempTh:122, LowEn:1, LowTempTh:112, RechkTimer:10
[ 33.584341] MtCmdThermalProtect: RFOffEn: 0, RFOffTh: 125, ucType: 1
[ 34.599489] br-lan: port 4(rai0) entered forwarding state
[ 34.976306] S95done (2572): drop_caches: 3
[ 35.379326] br-lan: port 5(rai2) entered forwarding state
[ 35.846405] !!! APStop !!!
[ 35.849780] ===> APStartUp MT7603E
[ 36.290282] Main bssid = 80:af:ca:bf:00:2c
[ 36.294390] <=== APStartUp MT7603E

I am trying to adapt the firmware for my hardware (supposedly WR1300V4 is a match), but the situation is complicated by the bootloader's security checks:
It verifies the header (it must contain R80).
It performs an RCA signature check.
This makes it difficult to flash a modified build.

Maybe I'm just doing something wrong. I don't actually know how to build firmware for a specific device myself; I'm just using AI to help me make the firmware byte-by-byte (creating a firmware file .bin from transitional OpenWRT firmware).

12

Latest news. I've created new firmware, and it's currently working in OpenWRT. My repository is here.
Here's the official PR (not yet accepted). I'm currently working on creating a way to easily migrate from stock firmware to OpenWRT and back without using a programmer.
Also i have transition firmware for change from stock. But not fully tested.