Note there seems exist a v2 of the Comfast device now, using a MediaTek SoC - Support for Comfast CF-EW72/MT7621 - #20 by Nmebowen, this thread is about v1.
This is probably a Comfast clone, but I'll put some info about it here, just for reference.
Preinstalled stock fw v1.2.
Boot log:
U-Boot 1.1.4-ga1cd7d4b-dirty (May 31 2018 - 16:44:04)
ap143 - Honey Bee 2.0
DRAM: 128 MB
Flash: 16 MB
eth0 link down
FAIL
eth1 link down
FAIL
Using eth0 device
Tx Timed out
ping failed;
Hit any key to stop autoboot: 0
## Booting image at 9f020000 ...
Image Name: MIPS OpenWrt Linux-3.10.44
Created: 2020-07-04 10:39:43 UTC
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 1200482 Bytes = 1.1 MB
Load Address: 80060000
Entry Point: 80060000
Verifying Checksum at 0x9f020040 ...OK
Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80060000) ...
## Giving linux memsize in bytes, 134217728
Starting kernel ...
[ 0.000000] Linux version 3.10.44 (malinan@oracle.tecmint.com) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 unknown) ) #1 Sat Jul 4 18:38:44 CST 2020
[ 0.000000] bootconsole [early0] enabled
[ 0.000000] CPU revision is: 00019374 (MIPS 24Kc)
[ 0.000000] SoC: Qualcomm Atheros QCA9531 ver 2 rev 0
[ 0.000000] Clocks: CPU:650.000MHz, DDR:391.674MHz, AHB:216.666MHz, Ref:25.000MHz
[ 0.000000] Determined physical RAM map:
[ 0.000000] memory: 08000000 @ 00000000 (usable)
[ 0.000000] Initrd not found or empty - disabling initrd
[ 0.000000] Zone ranges:
[ 0.000000] Normal [mem 0x00000000-0x07ffffff]
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x00000000-0x07ffffff]
[ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512
[ 0.000000] Kernel command line: board=COMFAST-CF-EW72 console=ttyS0,115200 mtdparts=spi0.0:64k(u-boot)ro,64k(art)ro,1536k(kernel),14592k(rootfs),64k(configs),64k(nvram)ro,16128k@0x20000(firmware) rootfstype=squashfs,jffs2 noinitrd
[ 0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[ 0.000000] Writing ErrCtl register=00000000
[ 0.000000] Readback ErrCtl register=00000000
[ 0.000000] Memory: 125600k/131072k available (2582k kernel code, 5472k reserved, 761k data, 236k init, 0k highmem)
[ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[ 0.000000] NR_IRQS:51
[ 0.000000] Calibrating delay loop... 432.53 BogoMIPS (lpj=2162688)
[ 0.050000] pid_max: default: 32768 minimum: 301
[ 0.050000] Mount-cache hash table entries: 512
[ 0.060000] NET: Registered protocol family 16
[ 0.070000] MIPS: machine is COMFAST CF-EW72
[ 0.510000] registering PCI controller with io_map_base unset
[ 0.530000] bio: create slab <bio-0> at 0
[ 0.530000] usbcore: registered new interface driver usbfs
[ 0.540000] usbcore: registered new interface driver hub
[ 0.540000] usbcore: registered new device driver usb
[ 0.550000] PCI host bridge to bus 0000:00
[ 0.550000] pci_bus 0000:00: root bus resource [mem 0x10000000-0x11ffffff]
[ 0.560000] pci_bus 0000:00: root bus resource [io 0x0000]
[ 0.560000] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[ 0.570000] pci 0000:00:00.0: invalid calibration data
[ 0.570000] pci 0000:00:00.0: BAR 0: assigned [mem 0x10000000-0x101fffff 64bit]
[ 0.580000] pci 0000:00:00.0: using irq 40 for pin 1
[ 0.580000] Switching to clocksource MIPS
[ 0.590000] NET: Registered protocol family 2
[ 0.590000] TCP established hash table entries: 1024 (order: 1, 8192 bytes)
[ 0.600000] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.600000] TCP: Hash tables configured (established 1024 bind 1024)
[ 0.610000] TCP: reno registered
[ 0.610000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[ 0.620000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[ 0.620000] NET: Registered protocol family 1
[ 0.650000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.650000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.660000] msgmni has been set to 245
[ 0.670000] io scheduler noop registered
[ 0.670000] io scheduler deadline registered (default)
[ 0.670000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[ 0.700000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11) is a 16550A
[ 0.710000] console [ttyS0] enabled, bootconsole disabled
[ 0.710000] console [ttyS0] enabled, bootconsole disabled
[ 0.720000] ath79-spi ath79-spi: master is unqueued, this is deprecated
[ 0.730000] m25p80 spi0.0: found mx25l12805d, expected m25p80
[ 0.740000] m25p80 spi0.0: mx25l12805d (16384 Kbytes)
[ 0.740000] 7 cmdlinepart partitions found on MTD device spi0.0
[ 0.750000] Creating 7 MTD partitions on "spi0.0":
[ 0.760000] 0x000000000000-0x000000010000 : "u-boot"
[ 0.760000] 0x000000010000-0x000000020000 : "art"
[ 0.770000] 0x000000020000-0x0000001a0000 : "kernel"
[ 0.780000] 0x0000001a0000-0x000000fe0000 : "rootfs"
[ 0.780000] mtd: device 3 (rootfs) set to be root filesystem
[ 0.790000] 1 squashfs-split partitions found on MTD device rootfs
[ 0.800000] 0x0000007e0000-0x000000fe0000 : "rootfs_data"
[ 0.800000] 0x000000fe0000-0x000000ff0000 : "configs"
[ 0.810000] 0x000000ff0000-0x000001000000 : "nvram"
[ 0.820000] 0x000000020000-0x000000fe0000 : "firmware"
[ 0.850000] libphy: ag71xx_mdio: probed
[ 0.850000] eth0: Atheros AG71xx at 0xba000000, irq 5
[ 1.410000] ag71xx-mdio.1: Found an AR934X built-in switch
[ 1.450000] eth1: Atheros AG71xx at 0xb9000000, irq 4
[ 2.010000] ag71xx ag71xx.0: connected to PHY at ag71xx-mdio.1:04 [uid=004dd042, driver=Generic PHY]
[ 2.020000] usbcore: registered new interface driver cdc_ether
[ 2.020000] usbcore: registered new interface driver rndis_host
[ 2.030000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[ 2.040000] ehci-pci: EHCI PCI platform driver
[ 2.040000] ehci-platform: EHCI generic platform driver
[ 2.050000] usbcore: registered new interface driver cdc_acm
[ 2.050000] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
[ 2.060000] usbcore: registered new interface driver usbserial
[ 2.070000] usbcore: registered new interface driver usbserial_generic
[ 2.080000] usbserial: USB Serial support registered for generic
[ 2.080000] usbcore: registered new interface driver usb_debug
[ 2.090000] usbserial: USB Serial support registered for debug
[ 2.100000] usbcore: registered new interface driver option
[ 2.100000] usbserial: USB Serial support registered for GSM modem (1-port)
[ 2.110000] TCP: cubic registered
[ 2.110000] NET: Registered protocol family 17
[ 2.120000] Bridge firewalling registered
[ 2.120000] 8021q: 802.1Q VLAN Support v1.8
[ 2.130000] VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
[ 2.140000] Freeing unused kernel memory: 236K (803a5000 - 803e0000)
[ 3.150000] init: Console is alive
[ 3.160000] init: - watchdog -
[ 5.160000] init: - preinit -
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[ 10.030000] jffs2: notice: (412) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 12 of xref (0 dead, 0 orphan) found.
[ 10.050000] mount_root: switching to jffs2 overlay
529+0 records in
529+0 records out
377+0 records in
377+0 records out
[ 10.500000] procd: - early -
[ 10.500000] procd: - watchdog -
[ 11.190000] procd: - ubus -
[ 12.200000] procd: - init -
Please press Enter to activate this console.
[ 14.430000] natsemi dp8381x driver, version 2.1, Sept 11, 2006
[ 14.430000] originally by Donald Becker <becker@scyld.com>
[ 14.430000] 2.4.x kernel port by Jeff Garzik, Tjeerd Mulder
[ 14.460000] gre: GRE over IPv4 demultiplexor driver
[ 14.480000] ip_gre: GRE over IPv4 tunneling driver
[ 14.490000] i2c /dev entries driver
[ 14.500000] Loading modules backported from Linux version master-2014-05-22-0-gf2032ea
[ 14.500000] Backport generated by backports.git backports-20140320-37-g5c33da0
[ 14.740000] PCI: Enabling device 0000:00:00.0 (0000 -> 0002)
[ 14.750000] ath10k_pci 0000:00:00.0: pci irq legacy oper_irq_mode 1 irq_mode 0 reset_mode 0
[ 15.710000] ath10k_pci 0000:00:00.0: qca9888 hw2.0 target 0x01000000 chip_id 0x00000000 sub 0000:0000
[ 15.720000] ath10k_pci 0000:00:00.0: kconfig debug 1 debugfs 1 tracing 1 dfs 0 testmode 1
[ 15.740000] ath10k_pci 0000:00:00.0: firmware ver 10.4-3.5.3-00053 api 5 features no-p2p,mfp,peer-flow-ctrl,allows-mesh-bcast crc32 a9603656
[ 16.130000] ath10k_pci 0000:00:00.0: board_file api 1 bmi_id 0:0 crc32 819442f0
[ 18.000000] ath10k_pci 0000:00:00.0: htt-ver 2.2 wmi-op 6 htt-op 4 cal otp max-sta 512 raw 0 hwcrypto 1
[ 18.150000] u32 classifier
[ 18.150000] input device check on
[ 18.150000] Actions configured
[ 18.170000] Mirror/redirect action on
[ 18.200000] nf_conntrack version 0.5.0 (1966 buckets, 7864 max)
[ 18.280000] Ebtables v2.0 registered
[ 18.290000] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 18.350000] Netfilter messages via NETLINK v0.30.
[ 18.410000] xt_time: kernel timezone is -0000
[ 18.440000] ctnetlink v0.93: registering with nfnetlink.
[ 18.450000] PPP generic driver version 2.4.2
[ 18.460000] PPP MPPE Compression module registered
[ 18.470000] NET: Registered protocol family 24
[ 18.520000] ieee80211 phy1: Atheros AR9531 Rev:2 mem=0xb8100000, irq=47
[ 28.540000] device eth1 entered promiscuous mode
[ 28.560000] br-lan: port 1(eth1) entered forwarding state
[ 28.560000] br-lan: port 1(eth1) entered forwarding state
[ 28.630000] device eth0 entered promiscuous mode
[ 29.560000] br-lan: port 1(eth1) entered disabled state
[ 34.690000] device wlan8 entered promiscuous mode
[ 34.710000] device wlan0 entered promiscuous mode
configs:do check configs
[ 36.520000] br-lan: port 4(wlan0) entered forwarding state
[ 36.530000] br-lan: port 4(wlan0) entered forwarding state
[ 37.960000] ath10k_pci 0000:00:00.0: no channel configured; ignoring frame(s)!
[ 38.010000] ath10k_pci 0000:00:00.0: no channel configured; ignoring frame(s)!
[ 38.520000] br-lan: port 4(wlan0) entered forwarding state
[ 38.520000] br-lan: port 4(wlan0) entered disabled state
[ 41.370000] br-lan: port 3(wlan8) entered forwarding state
[ 41.380000] br-lan: port 3(wlan8) entered forwarding state
[ 43.380000] br-lan: port 3(wlan8) entered forwarding state
[ 52.700000] ath10k_pci 0000:00:00.0: no channel configured; ignoring frame(s)!
U-boot
ath> help
? - alias for 'help'
boot - boot default, i.e., run 'bootcmd'
bootd - boot default, i.e., run 'bootcmd'
bootm - boot application image from memory
cp - memory copy
erase - erase FLASH memory
help - print online help
start www server for firmware recovery
md - memory display
mm - memory modify (auto-incrementing)
mtest - simple RAM test
mw - memory write (fill)
nm - memory modify (constant address)
ping - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
reset - Perform RESET of the CPU
run - run commands in an environment variable
setenv - set environment variables
save new MAC address in FLASH
restore devicen
tftpboot- boot image via network using TFTP protocol
version - print monitor version
ath>
printenv
bootcmd=bootm 0x9f020000
bootdelay=1
baudrate=115200
ethaddr=0x00:0xaa:0xbb:0xcc:0xdd:0xee
ipaddr=192.168.1.1
serverip=192.168.1.10
bootfile="firmware.bin"
loadaddr=0x80800000
dir=
lu=tftp 0x80060000 ${dir}tuboot.bin&&erase 0x9f000000 +$filesize&&cp.b $fileaddr 0x9f000000 $filesize
lf=tftp 0x80060000 ${dir}ap143${bc}-jffs2&&erase 0x9f1A0000 +$filesize&&cp.b $fileaddr 0x9f1A0000 $filesize
lk=tftp 0x80060000 ${dir}vmlinux${bc}.lzma.uImage&&erase 0x9f020000 +$filesize&&cp.b $fileaddr 0x9f020000 $filesize
uboot_addr=0x9F000000
uboot_name=uboot.bin
uboot_size=0x10000
uboot_upg=if ping $serverip; then tftp $loadaddr $uboot_name && erase $uboot_addr +$filesize && cp.b $loadaddr $uboot_addr $filesize ; else ERROR! Server not reachable!; fi
firmware_addr=0x9F020000
firmware_name=firmware.bin
firmware_upg=if ping $serverip; then tftp $loadaddr $firmware_name && erase $firmware_addr +$filesize && cp.b $loadaddr $firmware_addr $filesize ;else ERROR! Server not reachable!; fi
firmware_name_auto=firmware_auto.bin
firmware_upg_auto=tftp $loadaddr $firmware_name_auto && erase $firmware_addr +$filesize && cp.b $loadaddr $firmware_addr $filesize ;
art=tftp $loadaddr art-calibration-953x.bin && bootm
stdin=serial
stdout=serial
stderr=serial
bootargs=board= console=ttyS0,115200 root=31:03 rootfstype=jffs2 init=/sbin/init mtdparts=spi0.0:64k(u-boot)ro,64k(art)ro,1536k(kernel),14592k(rootfs),64k(configs),64k(nvram)ro,16128k@0x20000(firmware) rootfstype=squashfs,jffs2 noinitrd
ethact=eth0
Environment size: 1491/65532 bytes
MTD (post Openwrt install)
root@OpenWrt:/# cat /proc/mtd
dev: size erasesize name
mtd0: 00010000 00010000 "u-boot"
mtd1: 00010000 00010000 "art"
mtd2: 00fd0000 00010000 "firmware"
mtd3: 00200000 00010000 "kernel"
mtd4: 00dd0000 00010000 "rootfs"
mtd5: 00a10000 00010000 "rootfs_data"
mtd6: 00010000 00010000 "nvram"
Holding the reset button while powering on.
Wasn't however able to reach the web recovery page at 192.168.1.1
Press reset button for at least:
- 3 sec. to run web failsafe mode
- 7 sec. to run U-Boot netconsole
Reset button is pressed for: 3
Button was pressed for 3 sec...
HTTP server is starting for firmware update...
eth0 link down
FAIL
dup 1 speed 1000
Using eth1 device
HTTP server is starting at IP: 192.168.1.1
HTTP server is ready!
Openwrts fw for the Comfast CF-EW72 works in the stock web UI, but the
settings aren't wiped.The device will boot openwrt, but the password isn't reset,
and the device is still reachable on it's factory IP- 192.168.10.1.
## Booting image at 9f020000 ...
Image Name: MIPS OpenWrt Linux-5.4.188
Created: 2022-04-16 12:59:34 UTC
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 2049767 Bytes = 2 MB
Load Address: 80060000
Entry Point: 80060000
Verifying Checksum at 0x9f020040 ...OK
Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80060000) ...
/## Giving linux memsize in bytes, 134217728
Starting kernel ...
[ 0.000000] Linux version 5.4.188 (builder@buildhost) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r16554-1d4dea6d4f)) #0 Sat Apr 16 12:59:34 2022
[ 0.000000] printk: bootconsole [early0] enabled
[ 0.000000] CPU0 revision is: 00019374 (MIPS 24Kc)
[ 0.000000] MIPS: machine is COMFAST CF-EW72
[ 0.000000] SoC: Qualcomm Atheros QCA9533 ver 2 rev 0
[ 0.000000] Initrd not found or empty - disabling initrd
[ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[ 0.000000] Zone ranges:
[ 0.000000] Normal [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 32480
[ 0.000000] Kernel command line: console=ttyS0,115200n8 rootfstype=squashfs,jffs2
[ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes, linear)
[ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes, linear)
[ 0.000000] Writing ErrCtl register=00000000
[ 0.000000] Readback ErrCtl register=00000000
[ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[ 0.000000] Memory: 122188K/131072K available (5259K kernel code, 192K rwdata, 688K rodata, 1212K init, 205K bss, 8884K reserved, 0K cma-reserved)
[ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[ 0.000000] NR_IRQS: 51
[ 0.000000] random: get_random_bytes called from 0x80661a28 with crng_init=0
[ 0.000000] CPU clock: 650.000 MHz
[ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 5880801374 ns
[ 0.000009] sched_clock: 32 bits at 325MHz, resolution 3ns, wraps every 6607641598ns
[ 0.008283] Calibrating delay loop... 431.10 BogoMIPS (lpj=862208)
[ 0.042750] pid_max: default: 32768 minimum: 301
[ 0.047814] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[ 0.055541] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[ 0.069079] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
[ 0.079425] futex hash table entries: 256 (order: -1, 3072 bytes, linear)
[ 0.086770] pinctrl core: initialized pinctrl subsystem
[ 0.095766] NET: Registered protocol family 16
[ 0.138447] clocksource: Switched to clocksource MIPS
[ 0.145098] thermal_sys: Registered thermal governor 'step_wise'
[ 0.145538] NET: Registered protocol family 2
[ 0.156766] IP idents hash table entries: 2048 (order: 2, 16384 bytes, linear)
[ 0.165422] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear)
[ 0.174359] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear)
[ 0.182469] TCP bind hash table entries: 1024 (order: 0, 4096 bytes, linear)
[ 0.189931] TCP: Hash tables configured (established 1024 bind 1024)
[ 0.196832] UDP hash table entries: 256 (order: 0, 4096 bytes, linear)
[ 0.203819] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes, linear)
[ 0.211584] NET: Registered protocol family 1
[ 0.216275] PCI: CLS 0 bytes, default 32
[ 0.226332] workingset: timestamp_bits=14 max_order=15 bucket_order=1
[ 0.241702] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.247930] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.277257] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[ 0.290236] pinctrl-single 1804002c.pinmux: 576 pins, size 72
[ 0.297655] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[ 0.307421] printk: console [ttyS0] disabled
[ 0.312067] 18020000.uart: ttyS0 at MMIO 0x18020000 (irq = 9, base_baud = 1562500) is a 16550A
[ 0.321191] printk: console [ttyS0] enabled
[ 0.321191] printk: console [ttyS0] enabled
[ 0.330258] printk: bootconsole [early0] disabled
[ 0.330258] printk: bootconsole [early0] disabled
[ 0.353729] spi-nor spi0.0: found mx25l12805d, expected w25q128
[ 0.361160] spi-nor spi0.0: mx25l12805d (16384 Kbytes)
[ 0.366625] 4 fixed-partitions partitions found on MTD device spi0.0
[ 0.373199] Creating 4 MTD partitions on "spi0.0":
[ 0.378188] 0x000000000000-0x000000010000 : "u-boot"
[ 0.384576] 0x000000010000-0x000000020000 : "art"
[ 0.390769] 0x000000020000-0x000000ff0000 : "firmware"
[ 0.401009] 2 uimage-fw partitions found on MTD device firmware
[ 0.407222] Creating 2 MTD partitions on "firmware":
[ 0.412370] 0x000000000000-0x000000200000 : "kernel"
[ 0.418760] 0x000000200000-0x000000fd0000 : "rootfs"
[ 0.425036] mtd: device 4 (rootfs) set to be root filesystem
[ 0.433409] 1 squashfs-split partitions found on MTD device rootfs
[ 0.439918] 0x0000005c0000-0x000000fd0000 : "rootfs_data"
[ 0.446825] 0x000000ff0000-0x000001000000 : "nvram"
[ 0.795543] ag71xx 19000000.eth: Could not connect to PHY device. Deferring probe.
[ 1.150433] random: fast init done
[ 1.446539] switch0: Atheros AR8229 rev. 1 switch registered on mdio.0
[ 1.494531] ag71xx 1a000000.eth: connected to PHY at fixed-0:00 [uid=00000000, driver=Generic PHY]
[ 1.504610] eth0: Atheros AG71xx at 0xba000000, irq 5, mode: gmii
[ 1.511437] i2c /dev entries driver
[ 1.515350] ath79-wdt 18060008.wdt: unable to register misc device, err=-16
[ 1.522628] ath79-wdt: probe of 18060008.wdt failed with error -16
[ 1.531692] NET: Registered protocol family 10
[ 1.543612] Segment Routing with IPv6
[ 1.547653] NET: Registered protocol family 17
[ 1.552377] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[ 1.565777] 8021q: 802.1Q VLAN Support v1.8
[ 1.571361] PCI host bridge /ahb/pcie-controller@180c0000 ranges:
[ 1.577769] MEM 0x0000000010000000..0x0000000013ffffff
[ 1.583182] IO 0x0000000000000000..0x0000000000000000
[ 1.588823] PCI host bridge to bus 0000:00
[ 1.593111] pci_bus 0000:00: root bus resource [mem 0x10000000-0x13ffffff]
[ 1.600221] pci_bus 0000:00: root bus resource [io 0x0000]
[ 1.605983] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[ 1.613007] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[ 1.621258] pci 0000:00:00.0: [168c:0056] type 00 class 0x028000
[ 1.627549] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x001fffff 64bit]
[ 1.634715] pci 0000:00:00.0: PME# supported from D0 D3hot
[ 1.641536] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 00
[ 1.648456] pci 0000:00:00.0: BAR 0: assigned [mem 0x10000000-0x101fffff 64bit]
[ 1.972582] ag71xx 19000000.eth: connected to PHY at mdio.0:1f:04 [uid=004dd042, driver=Generic PHY]
[ 1.983237] eth1: Atheros AG71xx at 0xb9000000, irq 4, mode: mii
[ 1.990822] hctosys: unable to open rtc device (rtc0)
[ 2.003565] VFS: Mounted root (squashfs filesystem) readonly on device 31:4.
[ 2.020952] Freeing unused kernel memory: 1212K
[ 2.025676] This architecture does not have kernel memory protection.
[ 2.032331] Run /sbin/init as init process
[ 2.691639] init: Console is alive
[ 2.695623] init: - watchdog -
[ 4.091049] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[ 4.145062] usbcore: registered new interface driver usbfs
[ 4.150925] usbcore: registered new interface driver hub
[ 4.156583] usbcore: registered new device driver usb
[ 4.172244] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[ 4.181223] ehci-fsl: Freescale EHCI Host controller driver
[ 4.188900] ehci-platform: EHCI generic platform driver
[ 4.197482] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[ 4.215663] init: - preinit -
strings: standard output: Broken pipe
[ 5.405643] random: jshn: uninitialized urandom read (4 bytes read)
[ 5.544374] random: jshn: uninitialized urandom read (4 bytes read)
[ 5.612265] random: jshn: uninitialized urandom read (4 bytes read)
[ 5.878706] eth0: link up (1000Mbps/Full duplex)
[ 5.890769] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[ 10.171525] jffs2: notice: (556) jffs2_build_xattr_subsystem: complete building xattr subsystem, 18 of xdatum (6 unchecked, 4 orphan) and 24 of xref (2 dead, 2 orphan) found.
[ 10.189830] mount_root: switching to jffs2 overlay
[ 10.200938] overlayfs: upper fs does not support tmpfile.
[ 10.213082] urandom-seed: Seeding with /etc/urandom.seed
[ 10.333085] eth0: link down
[ 10.352818] procd: - early -
[ 10.356067] procd: - watchdog -
[ 10.505582] procd: cannot set group dialout for /dev/ttyS11 (getgrnam: 0)
[ 10.514061] procd: cannot set group dialout for /dev/ttyS8 (getgrnam: 0)
[ 10.522870] procd: cannot set group dialout for /dev/ttyS6 (getgrnam: 0)
[ 10.531218] procd: cannot set group dialout for /dev/ttyS4 (getgrnam: 0)
[ 10.539539] procd: cannot set group dialout for /dev/ttyS2 (getgrnam: 0)
[ 10.548266] procd: cannot set group dialout for /dev/ttyS14 (getgrnam: 0)
[ 10.556628] procd: cannot set group dialout for /dev/ttyS0 (getgrnam: 0)
[ 10.564885] procd: cannot set group dialout for /dev/ttyS12 (getgrnam: 0)
[ 10.573227] procd: cannot set group dialout for /dev/ttyS9 (getgrnam: 0)
[ 10.581475] procd: cannot set group dialout for /dev/ttyS10 (getgrnam: 0)
[ 10.589834] procd: cannot set group dialout for /dev/ttyS7 (getgrnam: 0)
[ 10.598090] procd: cannot set group dialout for /dev/ttyS5 (getgrnam: 0)
[ 10.607115] procd: cannot set group dialout for /dev/ttyS3 (getgrnam: 0)
[ 10.615455] procd: cannot set group dialout for /dev/ttyS15 (getgrnam: 0)
[ 10.623785] procd: cannot set group dialout for /dev/ttyS1 (getgrnam: 0)
[ 10.632031] procd: cannot set group dialout for /dev/ttyS13 (getgrnam: 0)
[ 11.143796] procd: - watchdog -
[ 11.149930] procd: - ubus -
[ 11.265397] urandom_read: 5 callbacks suppressed
[ 11.265407] random: ubusd: uninitialized urandom read (4 bytes read)
[ 11.308133] random: ubusd: uninitialized urandom read (4 bytes read)
[ 11.319640] procd: - init -
Please press Enter to activate this console.
[ 12.348129] kmodloader: loading kernel modules from /etc/modules.d/*
[ 12.436032] Loading modules backported from Linux version v5.10.110-0-g3238bffaf992
[ 12.444043] Backport generated by backports.git v5.10.110-1-0-g1fbde860
[ 12.525210] xt_time: kernel timezone is -0000
[ 12.742240] PPP generic driver version 2.4.2
[ 12.759507] NET: Registered protocol family 24
[ 12.855062] urngd: v1.0.2 started.
[ 12.874678] ath10k 5.10 driver, optimized for CT firmware, probing pci device: 0x56.
[ 12.895925] ath10k_pci 0000:00:00.0: enabling device (0000 -> 0002)
[ 12.902765] ath10k_pci 0000:00:00.0: pci irq legacy oper_irq_mode 1 irq_mode 0 reset_mode 0
[ 13.143023] crng init done
[ 16.464300] ath10k_pci 0000:00:00.0: qca9888 hw2.0 target 0x01000000 chip_id 0x00000000 sub 0000:0000
[ 16.473913] ath10k_pci 0000:00:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[ 16.496632] ath10k_pci 0000:00:00.0: firmware ver 10.4b-ct-9888-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 59e741e7
[ 17.019209] ath10k_pci 0000:00:00.0: board_file api 1 bmi_id 0:24 crc32 6d8c8ead
[ 18.850604] ath10k_pci 0000:00:00.0: 10.4 wmi init: vdevs: 16 peers: 48 tid: 96
[ 18.858367] ath10k_pci 0000:00:00.0: msdu-desc: 2500 skid: 32
[ 18.909818] ath10k_pci 0000:00:00.0: wmi print 'P 48/48 V 16 K 144 PH 176 T 186 msdu-desc: 2500 sw-crypt: 0 ct-sta: 0'
[ 18.921187] ath10k_pci 0000:00:00.0: wmi print 'free: 114572 iram: 12644 sram: 29508'
[ 19.160454] ath10k_pci 0000:00:00.0: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-file max-sta 32 raw 0 hwcrypto 1
[ 19.377763] ieee80211 phy1: Atheros AR9531 Rev:2 mem=0xb8100000, irq=13
[ 19.423017] kmodloader: done loading kernel modules from /etc/modules.d/*
[ 36.822927] br-lan: port 1(eth1) entered blocking state
[ 36.828411] br-lan: port 1(eth1) entered disabled state
[ 36.834262] device eth1 entered promiscuous mode
[ 36.905226] eth0: link up (1000Mbps/Full duplex)
[ 36.914903] br-lan: port 2(eth0) entered blocking state
[ 36.920382] br-lan: port 2(eth0) entered disabled state
[ 36.926221] device eth0 entered promiscuous mode
[ 36.933380] br-lan: port 2(eth0) entered blocking state
[ 36.938886] br-lan: port 2(eth0) entered forwarding state
[ 36.994582] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[ 43.352360] ath10k_pci 0000:00:00.0: 10.4 wmi init: vdevs: 16 peers: 48 tid: 96
[ 43.360182] ath10k_pci 0000:00:00.0: msdu-desc: 2500 skid: 32
[ 43.411827] ath10k_pci 0000:00:00.0: wmi print 'P 48/48 V 16 K 144 PH 176 T 186 msdu-desc: 2500 sw-crypt: 0 ct-sta: 0'
[ 43.423188] ath10k_pci 0000:00:00.0: wmi print 'free: 114572 iram: 12644 sram: 29508'
[ 43.741992] ath10k_pci 0000:00:00.0: rts threshold -1
[ 43.748357] ath10k_pci 0000:00:00.0: Firmware lacks feature flag indicating a retry limit of > 2 is OK, requested limit: 4
[ 44.349653] ath10k_pci 0000:00:00.0: NOTE: Firmware DBGLOG output disabled in debug_mask: 0x10000000
Holding down the reset button for 12-15 sec, resets the router, and the factory settings get wiped.
Device will now use 192.168.1.1, and there's no root password.
