GT-AC5300 support

Hello is there a build that the Asus GT-AC5300 could run, if not where could I request it as many people on the internet are looking for opensource firmware for this powerful router but there doesn't seem to be anything out there or anyone working on it.

Broadcom is not very open source friendly, even if you got it to run you would have issues with wireless. If you want open source, a Qualcomm based router like the Netgear R7800 or one of the older Broadcom units are probably your best bet.

As for stock:
The R7800 actually outperforms the GT5300 on 5Ghz at all ranges. The QCA9984 in it is also a better chip with actual functioning MU-MIMO and HT160 on stock. With Broadcom units you actually lose performance with MU enabled clients.

Mediatek is much friendlier towards opensource than Qualcomm. Unfortunately, the days of ath9k are gone with AC WiFi. Ath10k is very closed and the binary firmware blob is quite large. :frowning:

1 Like

Either way any of them are probably far less obstructive than the new gen Broadcom chips. But yeah I agree even QCA is less friendly than before, Open Source firmware is only gonna get harder unfortunately.

Are you sure you need(ed) to buy a 400$ wifi router? It's not better than a 150$ device in most home networks where you don't have that much people connected to begin with.

For me the breaking point is at like 200$. Anything more than that is better served by a dedicated mini PC with PCIe wifi cards, like PCEngines APU boards https://www.pcengines.ch/apu2.htm, or a Turris Omnia https://omnia.turris.cz/en/#features
(both supported by OpenWrt)

Or multiple devices (especially if you want good wifi coverage, a single access point no matter how powerful will be much worse than a bunch of access points spread around).

Anyway, the GT-AC5300 is running a Broadcom BCM4908 with Broadcom wifi https://wikidevi.com/wiki/ASUS_GT-AC5300

And as stated in the wiki, there aren't decent open source drivers for that. https://openwrt.org/meta/infobox/broadcom_wifi

So even if someone could port OpenWrt on it, the wifi would work badly if at all.

Your best bet is asking/convincing dd-wrt developers, as they have signed contracts with Broadcom and they use the closed source driver for these devices so they can actually support it fully.

Damn the Omnia looks cool! I live in a large home and game so i figured that would be a pretty good router. I have the Netgear X10 for some reason as well lol. Ive played around with that a bit but im going to "return" it (thank you squaretrade.)

R9000 uses the same WiFi chipset as the R7800 but some minor differences in board/antenna layout show the R7800 to have better 5Ghz performance.

Really that is pretty cool. What about the new XR500 ?

I have used the older firmware version of DumaOS and its pretty damn good its just the actual device it comes on is very weak specks, Netduma R1

The XR500 is pretty much the R7800 in a new case with NetDuma additions on top of the stock Netgear firmware. Plus it has 128MB Additional flash for that extra stuff though it has the same 512MB RAM. The R7800 still has better 5Ghz performance due to some minor differences probably down to the antennas.

Hi. I upgraded my router with 21.02 firmware and now I can't go back to the asus firmware. It only rollback to openwrt logon page.

Notes not related on router table:

  • wifi does not enabled yet
  • there are only 4 of 8 Lan ports avaliable
  • openwrt-to-factory.bin firmware wanted - via serial or ui.

Thank you.

the rollback was possible via mtd:

root@OpenWrt:~# mtd -r write /tmp/GT-AC5300_9.0.0.4_386_41994-g769f84f_cferom_ubi.w firmware
Unlocking firmware ...

Writing from /tmp/GT-AC5300_9.0.0.4_386_41994-g769f84f_cferom_ubi.w to firmware ...
Rebooting ...

I can contribute with this model, be testing via serial or ch341a.

there is not much to do about it, only DD-Wrt will be able to support that device. Broadcomm wifi and router hardware in general does not have good opensource drivers

wi-fi is not necessary, the best thing about it is the fact that it is very fast (quadcore 1.8Ghz) and has a lot of ram and space.

if possible, enabling the wan port and the switch with 8 ports is enough to use it as the main router.

Thank you

What exactly was happening in serial console output? I just tried my GT-AC5300 and I was able to revert to vendor's firmware without any issues. I tried:

  • GT-AC5300_3.0.0.4_384_82037-g0cfb8f0_cferom_ubi.w
  • GT-AC5300_3.0.0.4_386_42643-g16dc577_cferom_ubi.w
root@OpenWrt:/# sysupgrade -n /tmp/GT-AC5300_3.0.0.4_384_82037-g0cfb8f0_cferom_ubi.w
Tue Nov  9 11:30:56 UTC 2021 upgrade: Image metadata not present
Tue Nov  9 11:31:00 UTC 2021 upgrade: Commencing upgrade. Closing all shell sessions.
Watchdog handover: fd=3
- watchdog -
Watchdog does not have CARDRESET support
Tue Nov  9 11:31:05 UTC 2021 upgrade: Sending TERM to remaining processes ...
Tue Nov  9 11:31:05 UTC 2021 upgrade: Sending signal TERM to netifd (1167)
Tue Nov  9 11:31:05 UTC 2021 upgrade: Sending signal TERM to odhcpd (1223)
Tue Nov  9 11:31:05 UTC 2021 upgrade: Sending signal TERM to uhttpd (1365)
Tue Nov  9 11:31:05 UTC 2021 upgrade: Sending signal TERM to ntpd (1740)
Tue Nov  9 11:31:05 UTC 2021 upgrade: Sending signal TERM to dnsmasq (1978)
Tue Nov  9 11:31:05 UTC 2021 upgrade: Sending signal TERM to ubusd (559)
Tue Nov  9 11:31:05 UTC 2021 upgrade: Sending signal TERM to urngd (594)
Tue Nov  9 11:31:05 UTC 2021 upgrade: Sending signal TERM to logd (805)
Tue Nov  9 11:31:05 UTC 2021 upgrade: Sending signal TERM to rpcd (857)
Tue Nov  9 11:31:09 UTC 2021 upgrade: Sending KILL to remaining processes ...
[  154.490058] sh (2081): drop_caches: 3
Tue Nov  9 11:31:15 UTC 2021 upgrade: Switching to ramdisk...
[  155.288075] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" stops
[  155.299068] UBIFS (ubi0:1): un-mount UBI device 0
Tue Nov  9 11:31:16 UTC 2021 upgrade: Performing system upgrade...
Writing whole image to NAND flash. All erase counters will be lost.
[  156.727598] jffs2: notice: (2694) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
Successfully renamed cferam.000 to the cferam.587
Unlocking backup ...
Erasing backup ...
[  159.766702] sh (2081): drop_caches: 3
Unlocking backup ...

Writing from <stdin> to backup ...
Tue Nov  9 11:31:47 UTC 2021 upgrade: Upgrade completed
�----ov  9 11:31:48 UTC 2021 upgrade: Reboo[  188.017336] reboot: Restarting system
root@OpenWrt:/# sysupgrade -n /tmp/GT-AC5300_3.0.0.4_386_42643-g16dc577_cferom_ubi.w
Sun Oct 24 09:02:28 UTC 2021 upgrade: Image metadata not present
Sun Oct 24 09:02:33 UTC 2021 upgrade: Commencing upgrade. Closing all shell sessions.
killall: telnetd: no process killed
Sun Oct 24 09:02:38 UTC 2021 upgrade: Sending TERM to remaining processes ... logd rpcd netifd odhcpd ntpd dnsmasq ubusd urngd uhttpd
Sun Oct 24 09:02:41 UTC 2021 upgrade: Sending KILL to remaining processes ... ntpd
[   75.433045] sh (2348): drop_caches: 3
Sun Oct 24 09:02:43 UTC 2021 upgrade: Switching to ramdisk...
[   76.130014] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" stops
[   76.141116] UBIFS (ubi0:1): un-mount UBI device 0
Sun Oct 24 09:02:43 UTC 2021 upgrade: Performing system upgrade...
Writing whole image to NAND flash. All erase counters will be lost.
[   77.576251] jffs2: notice: (2907) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
Successfully renamed cferam.000 to the cferam.590
Unlocking backup ...
Erasing backup ...
[   80.738260] sh (2348): drop_caches: 3
Unlocking backup ...

Writing from <stdin> to backup ...
Sun Oct 24 09:03:17 UTC 2021 upgrade: Upgrade completed
�----ct 24 09:03:18 UTC 2021 upgra[  111.468594] reboot: Restarting system

When I try to revert firmware via online / LuCI, after reboot the openwrt logon persists.

On LuCI: System > Backup / Flash Firmware > Image:
GT-AC5300_9.0.0.4_386_41994-g769f84f_cferom_ubi.w

[   17.757296] br-lan: port 1(lan1) entered blocking state
[   17.762642] br-lan: port 1(lan1) entered forwarding state
killall: telnetd: no process killed
killall: ash: no process killed
Sun Oct 24 09:03:02 UTC 2021 upgrade: Sending TERM to remaining processes ... logd rpcd netifd odhcpd ntpd dnsmasq sh ubus ubusd askfirst urngd uhttpd
Sun Oct 24 09:03:05 UTC 2021 upgrade: Sending KILL to remaining processes ...
[   99.166230] sh (2411): drop_caches: 3
Sun Oct 24 09:03:06 UTC 2021 upgrade: Switching to ramdisk...
[   99.903770] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" stops
[   99.916705] UBIFS (ubi0:1): un-mount UBI device 0
Sun Oct 24 09:03:07 UTC 2021 upgrade: Performing system upgrade...
Writing whole image to NAND flash. All erase counters will be lost.
[  101.348451] jffs2: notice: (2970) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
Successfully renamed cferam.000 to the cferam.017
Unlocking backup ...
Erasing backup ...
[  103.076001] sh (2411): drop_caches: 3
Unlocking backup ...

Writing from <stdin> to backup ...
Sun Oct 24 09:03:42 UTC 2021 upgrade: Upgrade completed
▒----ct 24 09:03:43 UTC 2021 upgra[  136.323723] reboot: Restarting system

after reboot:


Base: 5.2_02HNDrc7
CFE version 1.0.38-161.122 for BCM94908 (64bit,SP,LE)
Build Date: Wed May 10 11:37:24 CST 2017 (chengche@chengche-VirtualBox)
Copyright (C) 2000-2015 Broadcom Corporation.

Boot Strap Register:  0x6fc42
Chip ID: BCM4908_A0, Broadcom B53 Quad Core: 1800MHz
Total Memory: 1073741824 bytes (1024MB)
Status wait timeout: nandsts=0x50000000 mask=0x40000000, count=0
NAND ECC BCH-4, page size 0x800 bytes, spare size used 64 bytes
NAND flash device: , id 0xc2da block 128KB size 262144KB
pmc_init:PMC using DQM mode

pmc_init slow 95, fast 70
pmc_init:7 0 fe16042c 34b0347
Skip Rescue Mode

Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host/tftp (f/h/c)  : c
Default host run file name        : vmlinux_rd_boot
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 5
Boot image (0=latest, 1=previous) : 0
Default host ramdisk file name    : ramdisk
Default ramdisk store address     : 0x8000000
Default DTB file name             : 94908.dtb
Board Id                          : 94908AC5300R
Number of MAC Addresses (1-64)    : 10
Base MAC Address                  : 04:92:26:xx:xx:xx
PSI Size (1-128) KBytes           : 128
Enable Backup PSI [0|1]           : 0
System Log Size (0-256) KBytes    : 0
Auxillary File System Size Percent: 0
flow memory allocation (MB)       : 14
buffer memory allocation (MB)     : 32
DHD 0 memory allocation (MB)      : 0
DHD 1 memory allocation (MB)      : 0
DHD 2 memory allocation (MB)      : 14
WLan Feature                      : 0x00
Partition 1 Size (MB)             : 8M
Partition 2 Size (MB)             : 64M
Partition 3 Size (MB)             : 0M
Partition 4 Size (MB) (Data)      : 8M

Initalizing switch low level hardware.
pmc_switch_power_up: Rgmii Tx clock zone1 enable 1 zone2 enable 1.
Software Resetting Switch ... Done.
Waiting MAC port Rx/Tx to be enabled by hardware ...Done
Disable Switch All MAC port Rx/Tx
External switch id = 5075
*** Press any key to stop auto run (5 seconds) ***
Auto run second count down: 0
Enable Switch MAC Port Rx/Tx, set PBVLAN to FAN out, set switch to NO-STP.
Loading 192.168.1.100:94908.dtb image at address 0x08000000..
Loading 192.168.1.100:94908.dtb ...
TFTP Client
Loading failed.: CFE error -21
loading ramfs failed. Try to boot from flash.
Booting from latest image (address 0x00100000, flash offset 0x00100000) ...
Decompression LZMA Image OK!
Entry at 0x0000000000080000
Closing network.
Restore Switch's MAC port Rx/Tx, PBVLAN back.
Disabling Switch ports.
Flushing Receive Buffers...
3 buffers found
Closing DMA Channels
Starting program at 0x0000000000080000
/memory = 0x40000000
WARNING: Node's property /reserved-memory/dt_reserved_buffer is not defined
WARNING: Node's property /reserved-memory/dt_reserved_flow is not defined
WARNING: Node's property /reserved-memory/dt_reserved_dhd2 is not defined
[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x420f1000]
[    0.000000] Linux version 5.4.154 (builder@buildhost) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r16325-88151b8303)) #0 SMP Sun Oct 24 09:01:35 2021
[    0.000000] Machine model: Asus GT-AC5300
[    0.000000] earlycon: bcm63xx_uart0 at MMIO 0x00000000ff800640 (options '')
[    0.000000] printk: bootconsole [bcm63xx_uart0] enabled
[    0.000000] percpu: Embedded 19 pages/cpu s38552 r8192 d31080 u77824
[    0.000000] Detected VIPT I-cache on CPU0
[    0.000000] CPU features: detected: Kernel page table isolation (KPTI)
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 258048
[    0.000000] Kernel command line: earlycon=bcm63xx_uart,0xff800640 console=ttyS0,115200
[    0.000000] Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes, linear)
[    0.000000] Inode-cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 1020920K/1048576K available (5566K kernel code, 282K rwdata, 768K rodata, 384K init, 253K bss, 27656K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000] rcu:     CONFIG_RCU_FANOUT set to non-default value of 32.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies.
[    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[    0.000000] GIC: Using split EOI/Deactivate mode
[    0.000000] random: get_random_bytes called from 0xffffffc0106c0b98 with crng_init=0
[    0.000000] arch_timer: cp15 timer(s) running at 50.00MHz (phys).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0xb8812736b, max_idle_ns: 440795202655 ns
[    0.000002] sched_clock: 56 bits at 50MHz, resolution 20ns, wraps every 4398046511100ns
[    0.008300] Calibrating delay loop (skipped), value calculated using timer frequency.. 100.00 BogoMIPS (lpj=200000)
[    0.018998] pid_max: default: 32768 minimum: 301
[    0.023809] Mount-cache hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.031365] Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.040199] ASID allocator initialised with 32768 entries
[    0.045723] rcu: Hierarchical SRCU implementation.
[    0.050786] smp: Bringing up secondary CPUs ...
[    0.055552] Detected VIPT I-cache on CPU1
[    0.055579] CPU1: Booted secondary processor 0x0000000001 [0x420f1000]
[    0.055775] Detected VIPT I-cache on CPU2
[    0.055788] CPU2: Booted secondary processor 0x0000000002 [0x420f1000]
[    0.055967] Detected VIPT I-cache on CPU3
[    0.055979] CPU3: Booted secondary processor 0x0000000003 [0x420f1000]
[    0.056007] smp: Brought up 1 node, 4 CPUs
[    0.092667] SMP: Total of 4 processors activated.
[    0.097504] CPU features: detected: 32-bit EL0 Support
[    0.102791] CPU features: detected: CRC32 instructions
[    0.205297] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[    0.213826] CPU: All CPU(s) started at EL2
[    0.218042] alternatives: patching kernel code
[    0.223898] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
[    0.233868] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[    0.241262] NET: Registered protocol family 16
[    0.246021] DMA: preallocated 256 KiB pool for atomic allocations
[    0.256135] workqueue: max_active 576 requested for napi_workq is out of range, clamping between 1 and 512
[    0.266398] clocksource: Switched to clocksource arch_sys_counter
[    0.272915] thermal_sys: Registered thermal governor 'step_wise'
[    0.273034] NET: Registered protocol family 2
[    0.283690] IP idents hash table entries: 16384 (order: 5, 131072 bytes, linear)
[    0.291595] tcp_listen_portaddr_hash hash table entries: 512 (order: 1, 8192 bytes, linear)
[    0.300134] TCP established hash table entries: 8192 (order: 4, 65536 bytes, linear)
[    0.308195] TCP bind hash table entries: 8192 (order: 5, 131072 bytes, linear)
[    0.315647] TCP: Hash tables configured (established 8192 bind 8192)
[    0.322173] UDP hash table entries: 512 (order: 2, 16384 bytes, linear)
[    0.328940] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes, linear)
[    0.336263] NET: Registered protocol family 1
[    0.341132] workingset: timestamp_bits=46 max_order=18 bucket_order=0
[    0.349557] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.355502] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.365894] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 252)
[    0.374148] ff800640.serial: ttyS0 at MMIO 0xff800640 (irq = 16, base_baud = ▒▒r▒▒tD▒▒ɥ▒ѭ▒ consol▒M▒] en bDD@
[    0.383784] printk: console [ttyS0] enabled
[    0.392312] printk: bootconsole [bcm63xx_uart0] disabled
[    0.392312] printk: bootconsole [bcm63xx_uart0] disabled
[    0.404087] Could not find a valid ONFI parameter page, trying bit-wise majority to recover it
[    0.412907] ONFI parameter recovery failed, aborting
[    0.418007] nand: device found, Manufacturer ID: 0xc2, Chip ID: 0xda
[    0.424534] nand: Macronix NAND 256MiB 3,3V 8-bit
[    0.429372] nand: 256 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    0.437179] bcm63138_nand ff801800.nand: detected 256MiB total, 128KiB blocks, 2KiB pages, 16B OOB, 8-bit, BCH-4
[    0.448157] Bad block table found at page 131008, version 0x01
[    0.454558] Bad block table found at page 130944, version 0x01
[    0.461054] 3 fixed-partitions partitions found on MTD device brcmnand.0
[    0.467883] Creating 3 MTD partitions on "brcmnand.0":
[    0.473170] 0x000000000000-0x000000100000 : "cferom"
[    0.478633] 0x000000100000-0x000005800000 : "firmware"
[    0.512006] random: fast init done
[    0.536787] 2 cfe-bootfs partitions found on MTD device firmware
[    0.542894] Creating 2 MTD partitions on "firmware":
[    0.548002] 0x000000000000-0x000000900000 : "bootfs"
[    0.553386] 0x000000900000-0x000005700000 : "ubi"
[    0.558499] 0x000005800000-0x00000af00000 : "backup"
[    0.582123] libphy: unimac MII bus: probed
[    0.622479] unimac-mdio 800c05c0.mdio: Broadcom UniMAC MDIO bus
[    0.628819] libphy: Fixed MDIO Bus: probed
[    0.633114] libphy: sf2 slave mii: probed
[    0.638236] brcm-sf2 80080000.ethernet-switch: found switch: BCM4908, rev 0
[    0.646680] NET: Registered protocol family 10
[    0.651616] Segment Routing with IPv6
[    0.655341] NET: Registered protocol family 17
[    0.659897] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    0.673278] 8021q: 802.1Q VLAN Support v1.8
[    0.678298] brcmstb-usb-phy 8000c200.usb-phy: Clock not found in Device Tree
[    0.685552] brcmstb-usb-phy 8000c200.usb-phy: USB3.0 clock not found in Device Tree
[    0.693373] brcmstb-usb-phy 8000c200.usb-phy: Suspend Clock not found in Device Tree
[    0.701343] brcmstb-usb-phy 8000c200.usb-phy: IRQ wake not found
[    0.707525] brcmstb-usb-phy 8000c200.usb-phy: IRQ wakeup not found
[    0.713886] brcmstb-usb-phy 8000c200.usb-phy: Wake interrupt missing, system wake not supported
[    0.723043] libphy: sf2 slave mii: probed
[    0.728150] brcm-sf2 80080000.ethernet-switch: found switch: BCM4908, rev 0
[    0.741681] brcm-sf2 80080000.ethernet-switch lan2 (uninitialized): PHY [800c05c0.mdio--1:08] driver [Generic PHY]
[    0.758400] brcm-sf2 80080000.ethernet-switch lan1 (uninitialized): PHY [800c05c0.mdio--1:09] driver [Generic PHY]
[    0.774397] brcm-sf2 80080000.ethernet-switch lan6 (uninitialized): PHY [800c05c0.mdio--1:0a] driver [Generic PHY]
[    0.790398] brcm-sf2 80080000.ethernet-switch lan5 (uninitialized): PHY [800c05c0.mdio--1:0b] driver [Generic PHY]
[    0.801710] brcm-sf2 80080000.ethernet-switch: configuring for fixed/internal link mode
[    0.809892] brcm-sf2 80080000.ethernet-switch: Link is Up - 1Gbps/Full - flow control off
[    0.809898] DSA: tree 0 setup
[    0.822347] brcm-sf2 80080000.ethernet-switch: Starfighter 2 top: 4.07, core: 5.00, IRQs: 14, 15
[    0.832048] UBI: auto-attach mtd3
[    0.835383] ubi0: attaching mtd3
[    1.423410] ubi0: scanning is finished
[    1.438045] ubi0: attached mtd3 (name "ubi", size 78 MiB)
[    1.443530] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    1.450605] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    1.457592] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    1.464760] ubi0: good PEBs: 624, bad PEBs: 0, corrupted PEBs: 0
[    1.470943] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[    1.478381] ubi0: max/mean erase counter: 2/0, WL threshold: 4096, image sequence number: 1635066095
[    1.487789] ubi0: available PEBs: 0, total reserved PEBs: 624, PEBs reserved for bad PEB handling: 40
[    1.497291] ubi0: background thread "ubi_bgt0d" started, PID 469
[    1.498138] block ubiblock0_0: created from ubi0:0(rootfs)
[    1.509113] ubiblock: device ubiblock0_0 (rootfs) set to be root filesystem
[    1.519840] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    1.527233] Freeing unused kernel memory: 384K
[    1.550413] Run /sbin/init as init process
[    1.748864] init: Console is alive
[    1.926827] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    1.946468] usbcore: registered new interface driver usbfs
[    1.952066] usbcore: registered new interface driver hub
[    1.957545] usbcore: registered new device driver usb
[    1.964053] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    1.970887] ehci-fsl: Freescale EHCI Host controller driver
[    1.976806] ehci-platform: EHCI generic platform driver
[    1.986294] ehci-platform 8000c300.usb: EHCI Host Controller
[    1.992054] ehci-platform 8000c300.usb: new USB bus registered, assigned bus number 1
[    2.000183] ehci-platform 8000c300.usb: irq 11, io mem 0x8000c300
[    2.018396] ehci-platform 8000c300.usb: USB 2.0 started, EHCI 1.00
[    2.024977] hub 1-0:1.0: USB hub found
[    2.028773] hub 1-0:1.0: 2 ports detected
[    2.033758] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    2.040244] ohci-platform: OHCI generic platform driver
[    2.045616] ohci-platform 8000c400.usb: Generic Platform OHCI controller
[    2.052455] ohci-platform 8000c400.usb: new USB bus registered, assigned bus number 2
[    2.060571] ohci-platform 8000c400.usb: irq 12, io mem 0x8000c400
[    2.134652] hub 2-0:1.0: USB hub found
[    2.138444] hub 2-0:1.0: 2 ports detected
[    2.150671] xhci-hcd 8000d000.usb: xHCI Host Controller
[    2.155998] xhci-hcd 8000d000.usb: new USB bus registered, assigned bus number 3
[    2.163697] xhci-hcd 8000d000.usb: hcc params 0x0250f17c hci version 0x100 quirks 0x0000000000010010
[    2.173069] xhci-hcd 8000d000.usb: irq 13, io mem 0x8000d000
[    2.178954] xhci-hcd 8000d000.usb: xHCI Host Controller
[    2.184263] xhci-hcd 8000d000.usb: new USB bus registered, assigned bus number 4
[    2.191878] xhci-hcd 8000d000.usb: Host supports USB 3.0 SuperSpeed
[    2.198605] hub 3-0:1.0: USB hub found
[    2.202396] hub 3-0:1.0: config failed, hub doesn't have any ports! (err -19)
[    2.209837] usb usb4: We don't know the algorithms for LPM for this host, disabling LPM.
[    2.218281] hub 4-0:1.0: USB hub found
[    2.222099] hub 4-0:1.0: 2 ports detected
[    2.226540] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    2.243561] init: - preinit -
[    2.567945] random: jshn: uninitialized urandom read (4 bytes read)
[    2.581999] random: jshn: uninitialized urandom read (4 bytes read)
[    2.594029] random: jshn: uninitialized urandom read (4 bytes read)
[    2.606669] brcm-sf2 80080000.ethernet-switch lan1: configuring for phy/internal link mode
[    2.617168] 8021q: adding VLAN 0 to HW filter on device lan1
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    6.707489] UBIFS (ubi0:1): Mounting in unauthenticated mode
[    6.709962] random: procd: uninitialized urandom read (4 bytes read)
[    6.713299] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 590
[    6.842170] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data"
[    6.850163] UBIFS (ubi0:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[    6.860376] UBIFS (ubi0:1): FS size: 69582848 bytes (66 MiB, 548 LEBs), journal size 3428352 bytes (3 MiB, 27 LEBs)
[    6.871126] UBIFS (ubi0:1): reserved for root: 3286569 bytes (3209 KiB)
[    6.877937] UBIFS (ubi0:1): media format: w5/r0 (latest is w5/r0), UUID 5C86DC5D-1C93-4B7C-A8F2-7409CEC48397, small LPT model
[    6.894080] mount_root: switching to ubifs overlay
[    6.909105] urandom-seed: Seeding with /etc/urandom.seed
[    6.996123] procd: - early -
[    7.511380] procd: - ubus -
[    7.529389] random: ubusd: uninitialized urandom read (4 bytes read)
[    7.564056] random: ubusd: uninitialized urandom read (4 bytes read)
[    7.571197] procd: - init -
Please press Enter to activate this console.
[    7.731336] kmodloader: loading kernel modules from /etc/modules.d/*
[    7.736694] urngd: v1.0.2 started.
[    7.748062] xt_time: kernel timezone is -0000
[    7.756498] PPP generic driver version 2.4.2
[    7.757995] random: crng init done
[    7.764315] random: 4 urandom warning(s) missed due to ratelimiting
[    7.764427] NET: Registered protocol family 24
[    7.777409] kmodloader: done loading kernel modules from /etc/modules.d/*
[    9.722255] brcm-sf2 80080000.ethernet-switch lan1: configuring for phy/internal link mode
[    9.734518] 8021q: adding VLAN 0 to HW filter on device lan1
[    9.762669] br-lan: port 1(lan1) entered blocking state
[    9.768098] br-lan: port 1(lan1) entered disabled state
[    9.773586] device lan1 entered promiscuous mode
[    9.778284] device eth0 entered promiscuous mode
[    9.797316] brcm-sf2 80080000.ethernet-switch lan2: configuring for phy/internal link mode
[    9.807918] 8021q: adding VLAN 0 to HW filter on device lan2
[    9.834637] br-lan: port 2(lan2) entered blocking state
[    9.840122] br-lan: port 2(lan2) entered disabled state
[    9.845692] device lan2 entered promiscuous mode
[    9.863546] brcm-sf2 80080000.ethernet-switch lan5: configuring for phy/internal link mode
[    9.874172] 8021q: adding VLAN 0 to HW filter on device lan5
[    9.902627] br-lan: port 3(lan5) entered blocking state
[    9.907951] br-lan: port 3(lan5) entered disabled state
[    9.913543] device lan5 entered promiscuous mode
[    9.931583] brcm-sf2 80080000.ethernet-switch lan6: configuring for phy/internal link mode
[    9.942300] 8021q: adding VLAN 0 to HW filter on device lan6
[    9.970621] br-lan: port 4(lan6) entered blocking state
[    9.975967] br-lan: port 4(lan6) entered disabled state
[    9.981539] device lan6 entered promiscuous mode
[    9.999545] brcm-sf2 80080000.ethernet-switch sw: configuring for fixed/rgmii link mode
[   10.007823] brcm-sf2 80080000.ethernet-switch sw: Link is Up - 1Gbps/Full - flow control off
[   10.007897] 8021q: adding VLAN 0 to HW filter on device sw
[   10.042657] br-lan: port 5(sw) entered blocking state
[   10.047910] br-lan: port 5(sw) entered disabled state
[   10.053266] device sw entered promiscuous mode
[   10.057943] br-lan: port 5(sw) entered blocking state
[   10.063096] br-lan: port 5(sw) entered forwarding state
[   10.068591] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   13.876415] brcm-sf2 80080000.ethernet-switch lan1: Link is Up - 1Gbps/Full - flow control rx/tx
[   13.885434] br-lan: port 1(lan1) entered blocking state
[   13.890783] br-lan: port 1(lan1) entered forwarding state
▒▒▒▒▒▒▒▒rusy▒ox v1.33.1 (2021-10-24 09:01:35 UTC) built-in shellH(▒.+▒H▒N▒>>_______>>>>>>>>>>>>>>>>>>   ________        __
 |       |.-----.-----.-----.|0▒▒<~>>~.----.~>>~_▒▒>▒>>>->>|||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||(00__~_____~__~__~~________~~__~>>~____~▒▒>>>▒▒>>>>>~__~>W>I>R>e>N>e>S>S>>>f>R|e>e<D▒Jj5▒jjjjj▒-----------------------------------------------
 OpenWrt 21.02.1, r16325-88151b8303
0--------------------------------------------------▒KKs▒▒▒▒▒I9%9▒▒>==================▒OOOOOOoOOOOOOOOOOOs9▒▒ɕ▒is>no>roov>~yssworf|defined on this device!
Use the "passwd" command▒▒
                          ▒▒с▒▒▒y>new>~yssworf▒▒in>orfer>vo>~revenv>unyuvnormzuf>SSN>nogins.▒▒------------------▒KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKs9▒▒▒▒=▒]▒▒▒/# ▒▒▒▒▒▒▒Λ[JΛ[J▒▒/rin/ysn:>▒▒▒▒:▒▒▒found▒▒roov~O~enWrr:/3>

via sysupgrade:

BusyBox v1.33.1 (2021-10-24 09:01:35 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 21.02.1, r16325-88151b8303
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/#
root@OpenWrt:/# sysupgrade -n /tmp/GT-AC5300_9.0.0.4_386_41994-g769f84f_cferom_u
bi.w
Sun Oct 24 09:03:01 UTC 2021 upgrade: Image metadata not present
Sun Oct 24 09:03:06 UTC 2021 upgrade: Commencing upgrade. Closing all shell sessions.
killall: telnetd: no process killed
Sun Oct 24 09:03:11 UTC 2021 upgrade: Sending TERM to remaining processes ... netifd odhcpd uhttpd ntpd dnsmasq ubusd urngd logd rpcd
Sun Oct 24 09:03:14 UTC 2021 upgrade: Sending KILL to remaining processes ...
[  103.646893] sh (2149): drop_caches: 3
Sun Oct 24 09:03:15 UTC 2021 upgrade: Switching to ramdisk...
[  104.341186] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" stops
[  104.352737] UBIFS (ubi0:1): un-mount UBI device 0
Sun Oct 24 09:03:16 UTC 2021 upgrade: Performing system upgrade...
Writing whole image to NAND flash. All erase counters will be lost.
[  105.779323] jffs2: notice: (2708) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
Successfully renamed cferam.000 to the cferam.017
Unlocking backup ...
Erasing backup ...
[  107.509064] sh (2149): drop_caches: 3
Unlocking backup ...

Writing from <stdin> to backup ...
Sun Oct 24 09:03:51 UTC 2021 upgrade: Upgrade completed
▒----ct 24 09:03:52 UTC 2021 upgra[  140.691686] reboot: Restarting system

and reboot:

loading ramfs failed. Try to boot from flash.
Booting from latest image (address 0x00100000, flash offset 0x00100000) ...
Decompression LZMA Image OK!
Entry at 0x0000000000080000
Closing network.
Restore Switch's MAC port Rx/Tx, PBVLAN back.
Disabling Switch ports.
Flushing Receive Buffers...
1 buffers found
Closing DMA Channels
Starting program at 0x0000000000080000
/memory = 0x40000000
WARNING: Node's property /reserved-memory/dt_reserved_buffer is not defined
WARNING: Node's property /reserved-memory/dt_reserved_flow is not defined
WARNING: Node's property /reserved-memory/dt_reserved_dhd2 is not defined
[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x420f1000]
[    0.000000] Linux version 5.4.154 (builder@buildhost) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r16325-88151b8303)) #0 SMP Sun Oct 24 09:01:35 2021
[    0.000000] Machine model: Asus GT-AC5300
[    0.000000] earlycon: bcm63xx_uart0 at MMIO 0x00000000ff800640 (options '')
[    0.000000] printk: bootconsole [bcm63xx_uart0] enabled
[    0.000000] percpu: Embedded 19 pages/cpu s38552 r8192 d31080 u77824
[    0.000000] Detected VIPT I-cache on CPU0
[    0.000000] CPU features: detected: Kernel page table isolation (KPTI)
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 258048
[    0.000000] Kernel command line: earlycon=bcm63xx_uart,0xff800640 console=ttyS0,115200
[    0.000000] Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes, linear)
[    0.000000] Inode-cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 1020920K/1048576K available (5566K kernel code, 282K rwdata, 768K rodata, 384K init, 253K bss, 27656K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000] rcu:     CONFIG_RCU_FANOUT set to non-default value of 32.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies.
[    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[    0.000000] GIC: Using split EOI/Deactivate mode
[    0.000000] random: get_random_bytes called from 0xffffffc0106c0b98 with crng_init=0
[    0.000000] arch_timer: cp15 timer(s) running at 50.00MHz (phys).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0xb8812736b, max_idle_ns: 440795202655 ns
[    0.000002] sched_clock: 56 bits at 50MHz, resolution 20ns, wraps every 4398046511100ns
[    0.008300] Calibrating delay loop (skipped), value calculated using timer frequency.. 100.00 BogoMIPS (lpj=200000)
[    0.018997] pid_max: default: 32768 minimum: 301
[    0.023808] Mount-cache hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.031365] Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.040200] ASID allocator initialised with 32768 entries
[    0.045722] rcu: Hierarchical SRCU implementation.
[    0.050785] smp: Bringing up secondary CPUs ...
[    0.055551] Detected VIPT I-cache on CPU1
[    0.055580] CPU1: Booted secondary processor 0x0000000001 [0x420f1000]
[    0.055774] Detected VIPT I-cache on CPU2
[    0.055787] CPU2: Booted secondary processor 0x0000000002 [0x420f1000]
[    0.055965] Detected VIPT I-cache on CPU3
[    0.055977] CPU3: Booted secondary processor 0x0000000003 [0x420f1000]
[    0.056005] smp: Brought up 1 node, 4 CPUs
[    0.092666] SMP: Total of 4 processors activated.
[    0.097505] CPU features: detected: 32-bit EL0 Support
[    0.102790] CPU features: detected: CRC32 instructions
[    0.205167] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[    0.213700] CPU: All CPU(s) started at EL2
[    0.217916] alternatives: patching kernel code
[    0.223770] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
[    0.233741] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[    0.241136] NET: Registered protocol family 16
[    0.245893] DMA: preallocated 256 KiB pool for atomic allocations
[    0.255972] workqueue: max_active 576 requested for napi_workq is out of range, clamping between 1 and 512
[    0.266245] clocksource: Switched to clocksource arch_sys_counter
[    0.272762] thermal_sys: Registered thermal governor 'step_wise'
[    0.272878] NET: Registered protocol family 2
[    0.283530] IP idents hash table entries: 16384 (order: 5, 131072 bytes, linear)
[    0.291435] tcp_listen_portaddr_hash hash table entries: 512 (order: 1, 8192 bytes, linear)
[    0.299971] TCP established hash table entries: 8192 (order: 4, 65536 bytes, linear)
[    0.308002] TCP bind hash table entries: 8192 (order: 5, 131072 bytes, linear)
[    0.315458] TCP: Hash tables configured (established 8192 bind 8192)
[    0.321981] UDP hash table entries: 512 (order: 2, 16384 bytes, linear)
[    0.328751] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes, linear)
[    0.336075] NET: Registered protocol family 1
[    0.340952] workingset: timestamp_bits=46 max_order=18 bucket_order=0
[    0.349378] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.355321] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.365718] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 252)
[    0.373972] ff800640.serial: ttyS0 at MMIO 0xff800640 (irq = 16, base_baud = n▒r▒�▒▒▒▒printk: console [ttyS0] enabled
[    0.383603] printk: console [ttyS0] enabled
[    0.392131] printk: bootconsole [bcm63xx_uart0] disabled
[    0.392131] printk: bootconsole [bcm63xx_uart0] disabled
[    0.403913] Could not find a valid ONFI parameter page, trying bit-wise majority to recover it
[    0.412736] ONFI parameter recovery failed, aborting
[    0.417835] nand: device found, Manufacturer ID: 0xc2, Chip ID: 0xda
[    0.424362] nand: Macronix NAND 256MiB 3,3V 8-bit
[    0.429199] nand: 256 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    0.437007] bcm63138_nand ff801800.nand: detected 256MiB total, 128KiB blocks, 2KiB pages, 16B OOB, 8-bit, BCH-4
[    0.447982] Bad block table found at page 131008, version 0x01
[    0.454385] Bad block table found at page 130944, version 0x01
[    0.460886] 3 fixed-partitions partitions found on MTD device brcmnand.0
[    0.467709] Creating 3 MTD partitions on "brcmnand.0":
[    0.472999] 0x000000000000-0x000000100000 : "cferom"
[    0.478473] 0x000000100000-0x000005800000 : "firmware"
[    0.511846] random: fast init done
[    0.536633] 2 cfe-bootfs partitions found on MTD device firmware
[    0.542741] Creating 2 MTD partitions on "firmware":
[    0.547847] 0x000000000000-0x000000900000 : "bootfs"
[    0.553231] 0x000000900000-0x000005700000 : "ubi"
[    0.558350] 0x000005800000-0x00000af00000 : "backup"
[    0.581986] libphy: unimac MII bus: probed
[    0.622329] unimac-mdio 800c05c0.mdio: Broadcom UniMAC MDIO bus
[    0.628676] libphy: Fixed MDIO Bus: probed
[    0.632997] libphy: sf2 slave mii: probed
[    0.638120] brcm-sf2 80080000.ethernet-switch: found switch: BCM4908, rev 0
[    0.646583] NET: Registered protocol family 10
[    0.651512] Segment Routing with IPv6
[    0.655232] NET: Registered protocol family 17
[    0.659786] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    0.673170] 8021q: 802.1Q VLAN Support v1.8
[    0.678192] brcmstb-usb-phy 8000c200.usb-phy: Clock not found in Device Tree
[    0.685441] brcmstb-usb-phy 8000c200.usb-phy: USB3.0 clock not found in Device Tree
[    0.693262] brcmstb-usb-phy 8000c200.usb-phy: Suspend Clock not found in Device Tree
[    0.701234] brcmstb-usb-phy 8000c200.usb-phy: IRQ wake not found
[    0.707417] brcmstb-usb-phy 8000c200.usb-phy: IRQ wakeup not found
[    0.713777] brcmstb-usb-phy 8000c200.usb-phy: Wake interrupt missing, system wake not supported
[    0.722938] libphy: sf2 slave mii: probed
[    0.728042] brcm-sf2 80080000.ethernet-switch: found switch: BCM4908, rev 0
[    0.741579] brcm-sf2 80080000.ethernet-switch lan2 (uninitialized): PHY [800c05c0.mdio--1:08] driver [Generic PHY]
[    0.758247] brcm-sf2 80080000.ethernet-switch lan1 (uninitialized): PHY [800c05c0.mdio--1:09] driver [Generic PHY]
[    0.774246] brcm-sf2 80080000.ethernet-switch lan6 (uninitialized): PHY [800c05c0.mdio--1:0a] driver [Generic PHY]
[    0.790245] brcm-sf2 80080000.ethernet-switch lan5 (uninitialized): PHY [800c05c0.mdio--1:0b] driver [Generic PHY]
[    0.801565] brcm-sf2 80080000.ethernet-switch: configuring for fixed/internal link mode
[    0.809745] brcm-sf2 80080000.ethernet-switch: Link is Up - 1Gbps/Full - flow control off
[    0.809750] DSA: tree 0 setup
[    0.822203] brcm-sf2 80080000.ethernet-switch: Starfighter 2 top: 4.07, core: 5.00, IRQs: 14, 15
[    0.831900] UBI: auto-attach mtd3
[    0.835236] ubi0: attaching mtd3
[    1.423194] ubi0: scanning is finished
[    1.437837] ubi0: attached mtd3 (name "ubi", size 78 MiB)
[    1.443321] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    1.450397] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    1.457384] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    1.464552] ubi0: good PEBs: 624, bad PEBs: 0, corrupted PEBs: 0
[    1.470735] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[    1.478173] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1635066095
[    1.487580] ubi0: available PEBs: 0, total reserved PEBs: 624, PEBs reserved for bad PEB handling: 40
[    1.497082] ubi0: background thread "ubi_bgt0d" started, PID 469
[    1.497939] block ubiblock0_0: created from ubi0:0(rootfs)
[    1.508905] ubiblock: device ubiblock0_0 (rootfs) set to be root filesystem
[    1.519624] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    1.527014] Freeing unused kernel memory: 384K
[    1.558259] Run /sbin/init as init process
[    1.756610] init: Console is alive
[    1.934518] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    1.954198] usbcore: registered new interface driver usbfs
[    1.959809] usbcore: registered new interface driver hub
[    1.965286] usbcore: registered new device driver usb
[    1.971643] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    1.978515] ehci-fsl: Freescale EHCI Host controller driver
[    1.984401] ehci-platform: EHCI generic platform driver
[    1.993894] ehci-platform 8000c300.usb: EHCI Host Controller
[    1.999656] ehci-platform 8000c300.usb: new USB bus registered, assigned bus number 1
[    2.007783] ehci-platform 8000c300.usb: irq 11, io mem 0x8000c300
[    2.026254] ehci-platform 8000c300.usb: USB 2.0 started, EHCI 1.00
[    2.032806] hub 1-0:1.0: USB hub found
[    2.036598] hub 1-0:1.0: 2 ports detected
[    2.041565] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    2.048049] ohci-platform: OHCI generic platform driver
[    2.053411] ohci-platform 8000c400.usb: Generic Platform OHCI controller
[    2.060256] ohci-platform 8000c400.usb: new USB bus registered, assigned bus number 2
[    2.068370] ohci-platform 8000c400.usb: irq 12, io mem 0x8000c400
[    2.138498] hub 2-0:1.0: USB hub found
[    2.142291] hub 2-0:1.0: 2 ports detected
[    2.154531] xhci-hcd 8000d000.usb: xHCI Host Controller
[    2.159849] xhci-hcd 8000d000.usb: new USB bus registered, assigned bus number 3
[    2.167558] xhci-hcd 8000d000.usb: hcc params 0x0250f17c hci version 0x100 quirks 0x0000000000010010
[    2.176923] xhci-hcd 8000d000.usb: irq 13, io mem 0x8000d000
[    2.182817] xhci-hcd 8000d000.usb: xHCI Host Controller
[    2.188120] xhci-hcd 8000d000.usb: new USB bus registered, assigned bus number 4
[    2.195736] xhci-hcd 8000d000.usb: Host supports USB 3.0 SuperSpeed
[    2.202458] hub 3-0:1.0: USB hub found
[    2.206269] hub 3-0:1.0: config failed, hub doesn't have any ports! (err -19)
[    2.213690] usb usb4: We don't know the algorithms for LPM for this host, disabling LPM.
[    2.222135] hub 4-0:1.0: USB hub found
[    2.225923] hub 4-0:1.0: 2 ports detected
[    2.230392] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    2.243112] init: - preinit -
[    2.568439] random: jshn: uninitialized urandom read (4 bytes read)
[    2.582491] random: jshn: uninitialized urandom read (4 bytes read)
[    2.594530] random: jshn: uninitialized urandom read (4 bytes read)
[    2.607297] brcm-sf2 80080000.ethernet-switch lan1: configuring for phy/internal link mode
[    2.617800] 8021q: adding VLAN 0 to HW filter on device lan1
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    6.707263] UBIFS (ubi0:1): Mounting in unauthenticated mode
[    6.717830] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 591
[    6.717886] random: procd: uninitialized urandom read (4 bytes read)
[    6.826258] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data"
[    6.834244] UBIFS (ubi0:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[    6.844458] UBIFS (ubi0:1): FS size: 69582848 bytes (66 MiB, 548 LEBs), journal size 3428352 bytes (3 MiB, 27 LEBs)
[    6.855209] UBIFS (ubi0:1): reserved for root: 3286569 bytes (3209 KiB)
[    6.862020] UBIFS (ubi0:1): media format: w5/r0 (latest is w5/r0), UUID 5C86DC5D-1C93-4B7C-A8F2-7409CEC48397, small LPT model
[    6.878644] mount_root: switching to ubifs overlay
[    6.894567] urandom-seed: Seeding with /etc/urandom.seed
[    6.983940] procd: - early -
[    7.498109] procd: - ubus -
[    7.516055] random: ubusd: uninitialized urandom read (4 bytes read)
[    7.550777] random: ubusd: uninitialized urandom read (4 bytes read)
[    7.557941] procd: - init -
Please press Enter to activate this console.
[    7.708796] kmodloader: loading kernel modules from /etc/modules.d/*
[    7.723302] urngd: v1.0.2 started.
[    7.730303] xt_time: kernel timezone is -0000
[    7.739063] PPP generic driver version 2.4.2
[    7.743247] random: crng init done
[    7.746891] random: 4 urandom warning(s) missed due to ratelimiting
[    7.746954] NET: Registered protocol family 24
[    7.760001] kmodloader: done loading kernel modules from /etc/modules.d/*
[    9.684884] brcm-sf2 80080000.ethernet-switch lan1: configuring for phy/internal link mode
[    9.697541] 8021q: adding VLAN 0 to HW filter on device lan1
[    9.740276] br-lan: port 1(lan1) entered blocking state
[    9.745620] br-lan: port 1(lan1) entered disabled state
[    9.751189] device lan1 entered promiscuous mode
[    9.755885] device eth0 entered promiscuous mode
[    9.776915] brcm-sf2 80080000.ethernet-switch lan2: configuring for phy/internal link mode
[    9.787531] 8021q: adding VLAN 0 to HW filter on device lan2
[    9.814477] br-lan: port 2(lan2) entered blocking state
[    9.819829] br-lan: port 2(lan2) entered disabled state
[    9.825373] device lan2 entered promiscuous mode
[    9.839457] brcm-sf2 80080000.ethernet-switch lan5: configuring for phy/internal link mode
[    9.850130] 8021q: adding VLAN 0 to HW filter on device lan5
[    9.882470] br-lan: port 3(lan5) entered blocking state
[    9.887793] br-lan: port 3(lan5) entered disabled state
[    9.893362] device lan5 entered promiscuous mode
[    9.911419] brcm-sf2 80080000.ethernet-switch lan6: configuring for phy/internal link mode
[    9.922126] 8021q: adding VLAN 0 to HW filter on device lan6
[    9.953334] br-lan: port 4(lan6) entered blocking state
[    9.958660] br-lan: port 4(lan6) entered disabled state
[    9.964260] device lan6 entered promiscuous mode
[    9.983406] brcm-sf2 80080000.ethernet-switch sw: configuring for fixed/rgmii link mode
[    9.991738] 8021q: adding VLAN 0 to HW filter on device sw
[    9.997409] brcm-sf2 80080000.ethernet-switch sw: Link is Up - 1Gbps/Full - flow control off
[   10.022637] br-lan: port 5(sw) entered blocking state
[   10.027797] br-lan: port 5(sw) entered disabled state
[   10.033200] device sw entered promiscuous mode
[   10.037820] br-lan: port 5(sw) entered blocking state
[   10.042959] br-lan: port 5(sw) entered forwarding state
[   10.048444] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   13.816265] brcm-sf2 80080000.ethernet-switch lan1: Link is Up - 1Gbps/Full - flow control rx/tx
[   13.825280] br-lan: port 1(lan1) entered blocking state
[   13.830632] br-lan: port 1(lan1) entered forwarding state



BusyBox v1.33.1 (2021-10-24 09:01:35 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 21.02.1, r16325-88151b8303
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/#

and mtd did the upgrade.

root@OpenWrt:/# mtd -r write /tmp/GT-AC5300_9.0.0.4_386_41994-g769f84f_cferom_ubi.w firmware
Unlocking firmware ...

Writing from /tmp/GT-AC5300_9.0.0.4_386_41994-g769f84f_cferom_ubi.w to firmware ...
Rebooting ...
[  501.968413] br-lan: port 5(sw) entered disabled state
[  501.973577] br-lan: port 1(lan1) entered disabled state
[  502.002418] device lan1 left promiscuous mode
[  502.006908] br-lan: port 1(lan1) entered disabled state
[  502.030422] brcm-sf2 80080000.ethernet-switch lan1: Link is Down
[  502.078906] device lan2 left promiscuous mode
[  502.083348] br-lan: port 2(lan2) entered disabled state
[  502.146858] device lan5 left promiscuous mode
[  502.151294] br-lan: port 3(lan5) entered disabled state
[  502.218856] device lan6 left promiscuous mode
[  502.223294] br-lan: port 4(lan6) entered disabled state
[  502.298855] device sw left promiscuous mode
[  502.303079] device eth0 left promiscuous mode
[  502.307587] br-lan: port 5(sw) entered disabled state
[  502.328355] brcm-sf2 80080000.ethernet-switch sw: Link is Down
Terminated
root@OpenWrt:/# ----
...
JFS2
NAN5


Base: 5.2_02HNDrc7
CFE version 1.0.38-161.122 for BCM94908 (64bit,SP,LE)
Build Date: Wed May 10 11:37:24 CST 2017 (chengche@chengche-VirtualBox)
Copyright (C) 2000-2015 Broadcom Corporation.

Boot Strap Register:  0x6fc42
Chip ID: BCM4908_A0, Broadcom B53 Quad Core: 1800MHz
Total Memory: 1073741824 bytes (1024MB)
Status wait timeout: nandsts=0x50000000 mask=0x40000000, count=0
NAND ECC BCH-4, page size 0x800 bytes, spare size used 64 bytes
NAND flash device: , id 0xc2da block 128KB size 262144KB
pmc_init:PMC using DQM mode

pmc_init slow 95, fast 70
pmc_init:7 0 fe15042a 34b034b
Skip Rescue Mode

Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host/tftp (f/h/c)  : c
Default host run file name        : vmlinux_rd_boot
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 5
Boot image (0=latest, 1=previous) : 0
Default host ramdisk file name    : ramdisk
Default ramdisk store address     : 0x8000000
Default DTB file name             : 94908.dtb
Board Id                          : 94908AC5300R
Number of MAC Addresses (1-64)    : 10
Base MAC Address                  : 04:92:26:xx:xx:xx
PSI Size (1-128) KBytes           : 128
Enable Backup PSI [0|1]           : 0
System Log Size (0-256) KBytes    : 0
Auxillary File System Size Percent: 0
flow memory allocation (MB)       : 14
buffer memory allocation (MB)     : 32
DHD 0 memory allocation (MB)      : 0
DHD 1 memory allocation (MB)      : 0
DHD 2 memory allocation (MB)      : 14
WLan Feature                      : 0x00
Partition 1 Size (MB)             : 8M
Partition 2 Size (MB)             : 64M
Partition 3 Size (MB)             : 0M
Partition 4 Size (MB) (Data)      : 8M

Initalizing switch low level hardware.
pmc_switch_power_up: Rgmii Tx clock zone1 enable 1 zone2 enable 1.
Software Resetting Switch ... Done.
Waiting MAC port Rx/Tx to be enabled by hardware ...Done
Disable Switch All MAC port Rx/Tx
External switch id = 5075
*** Press any key to stop auto run (5 seconds) ***
Auto run second count down: 0
Enable Switch MAC Port Rx/Tx, set PBVLAN to FAN out, set switch to NO-STP.
Loading 192.168.1.100:94908.dtb image at address 0x08000000..
Loading 192.168.1.100:94908.dtb ...
TFTP Client
Loading failed.: CFE error -21
loading ramfs failed. Try to boot from flash.
Booting from latest image (address 0x05800000, flash offset 0x05800000) ...
Decompression LZMA Image OK!
Entry at 0x0000000000080000
Closing network.
Restore Switch's MAC port Rx/Tx, PBVLAN back.
Disabling Switch ports.
Flushing Receive Buffers...
1 buffers found
Closing DMA Channels
Starting program at 0x0000000000080000
/memory = 0x40000000
Booting Linux on physical CPU 0x0
Linux version 4.1.27 (gitserv_asus@tpbuildsvrvu01) (gcc version 5.3.0 (Buildroot 2016.02) ) #2 SMP PREEMPT Fri Jan 29 04:02:48 CST 2021
...
RAST 42: ipc accept socket...
RAST 43: internal ipc accept socket...

GT-AC5300 login: root
Password:
Login incorrect
GT-AC5300 login: root
Password:
Login incorrect
GT-AC5300 login:

The board: GT-AC5300 REV 1.41