OpenWrt support for TP-Link Archer MR600 IN version?

Hi,

I've got the TP-Link MR600 how do I install the openwrt on this? There is a image available for TP-Link MR600 v2 (EU) but mine is IN, I've connected to the serial port (https://openwrt.org/_media/media/tplink/archer-mr600/serial.jpg?t=1756461028&w=500&h=375&tok=2a6cee), below is the boot dump

U-Boot 1.1.3 (Jul 15 2024 - 16:28:36)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f94000

Config XHCI 40M PLL 
Allocate 16 byte aligned buffer: 87fca250
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 DA 00 95 46]
Device found in MTK table, ID: 1da, EXT_ID: 9546
Support this Device in MTK table! 1da 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 2047
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,	mtd->erasesize=131072  devinfo.iowidth=8
.*** Warning - bad CRC, using default environment

Boot flag csum incorrect, return image0
*** tp_boot_get_boot_index, index is 0

*** args pass to kernel: bootargs=console=ttyS1,115200n8 ubi.mtd=7 ubi.block=0,0 root=/dev/mtdblock13 rootfstype=squashfs 

============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Jul 15 2024  Time:16:28:36
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
 0 

disable Switch Phy
   
3: System Boot system code via Flash.
Boot flag csum incorrect, return image0
Prepare to boot image0
....................................Code Address: 0x00100081, Entry Address: 0x501a4281
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 81421a50) ...
## Giving linux memsize in MB, 128

Starting kernel ...


LINUX started...

 THIS IS ASIC

SDK 5.0.S.0
Linux version 3.10.14 (tp-link@Sg-sohoidev) (gcc version 4.6.3 (Buildroot 2012.11.1) ) #1 SMP Mon Jul 15 16:32:13 CST 2024

 The CPU feqenuce set to 880 MHz
GCMP present
CPU0 revision is: 0001992f (MIPS 1004Kc)
Software DMA cache coherency
Determined physical RAM map:
 memory: 08000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone ranges:
  DMA      [mem 0x00000000-0x00ffffff]
  Normal   [mem 0x01000000-0x07ffffff]
Movable zone start for each node
Early memory node ranges
  node   0: [mem 0x00000000-0x07ffffff]
Detected 3 available secondary CPU(s)
Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
PERCPU: Embedded 7 pages/cpu @81714000 s7040 r8192 d13440 u32768
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
PID hash table entries: 512 (order: -1, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Writing ErrCtl register=00045010
Readback ErrCtl register=00045010
Memory: 123600k/131072k available (4267k kernel code, 7472k reserved, 1423k data, 256k init, 0k highmem)
Hierarchical RCU implementation.
NR_IRQS:128
console [ttyS1] enabled
Calibrating delay loop... 574.46 BogoMIPS (lpj=1148928)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
launch: starting cpu1
launch: cpu1 gone!
CPU1 revision is: 0001992f (MIPS 1004Kc)
Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
Synchronize counters for CPU 1: done.
launch: starting cpu2
launch: cpu2 gone!
CPU2 revision is: 0001992f (MIPS 1004Kc)
Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
Synchronize counters for CPU 2: done.
launch: starting cpu3
launch: cpu3 gone!
CPU3 revision is: 0001992f (MIPS 1004Kc)
Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
Synchronize counters for CPU 3: done.
Brought up 4 CPUs
devtmpfs: initialized
NET: Registered protocol family 16
release PCIe RST: RALINK_RSTCTRL = 7000000
PCIE PHY initialize
***** Xtal 40MHz *****
start MT7621 PCIe register access
RALINK_RSTCTRL = 7000000
RALINK_CLKCFG1 = 77ffeff8

*************** MT7621 PCIe RC mode *************
PCIE2 no card, disable it(RST&CLK)
pcie_link status = 0x3
RALINK_RSTCTRL= 3000000
*** Configure Device number setting of Virtual PCI-PCI bridge ***
RALINK_PCI_PCICFG_ADDR = 21007f2 -> 21007f2
PCIE0 enabled
PCIE1 enabled
interrupt enable status: 300000
Port 1 N_FTS = 1b105000
Port 0 N_FTS = 1b105000
config reg done
init_rt2880pci done
bio: create slab <bio-0> at 0
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
PCI host bridge to bus 0000:00
pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
pci_bus 0000:00: root bus resource [io  0x1e160000-0x1e16ffff]
pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
pci 0000:00:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring
pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000)
pci 0000:00:01.0: BAR 0: can't assign mem (size 0x80000000)
pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
pci 0000:00:01.0: BAR 9: assigned [mem 0x60100000-0x602fffff pref]
pci 0000:00:00.0: BAR 1: assigned [mem 0x60300000-0x6030ffff]
pci 0000:00:01.0: BAR 1: assigned [mem 0x60310000-0x6031ffff]
pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff]
pci 0000:00:00.0: PCI bridge to [bus 01]
pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
pci 0000:02:00.0: BAR 0: assigned [mem 0x60100000-0x601fffff 64bit pref]
pci 0000:02:00.0: BAR 2: assigned [mem 0x60200000-0x60203fff 64bit pref]
pci 0000:02:00.0: BAR 4: assigned [mem 0x60204000-0x60204fff 64bit pref]
pci 0000:00:01.0: PCI bridge to [bus 02]
pci 0000:00:01.0:   bridge window [mem 0x60100000-0x602fffff pref]
PCI: Enabling device 0000:00:00.0 (0004 -> 0006)
PCI: Enabling device 0000:00:01.0 (0004 -> 0006)
BAR0 at slot 0 = 0
bus=0x0, slot = 0x0
res[0]->start = 0
res[0]->end = 0
res[1]->start = 60300000
res[1]->end = 6030ffff
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
BAR0 at slot 1 = 0
bus=0x0, slot = 0x1
res[0]->start = 0
res[0]->end = 0
res[1]->start = 60310000
res[1]->end = 6031ffff
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
bus=0x1, slot = 0x0, irq=0x4
res[0]->start = 60000000
res[0]->end = 600fffff
res[1]->start = 0
res[1]->end = 0
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
bus=0x2, slot = 0x1, irq=0x18
res[0]->start = 60100000
res[0]->end = 601fffff
res[1]->start = 0
res[1]->end = 0
res[2]->start = 60200000
res[2]->end = 60203fff
res[3]->start = 0
res[3]->end = 0
res[4]->start = 60204000
res[4]->end = 60204fff
res[5]->start = 0
res[5]->end = 0
Switching to clocksource Ralink Systick timer
NET: Registered protocol family 2
Clockevents: could not switch to one-shot mode:
Clockevents: could not switch to one-shot mode:
 MIPS is not functional.
 MIPS is not functional.
Clockevents: could not switch to one-shot mode: MIPS is not functional.
Could not switch to high resolution mode on CPU 0
Could not switch to high resolution mode on CPU 2
Could not switch to high resolution mode on CPU 3
Clockevents: could not switch to one-shot mode: MIPS is not functional.
Could not switch to high resolution mode on CPU 1
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP: reno registered
UDP hash table entries: 256 (order: 1, 8192 bytes)
UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
NET: Registered protocol family 1
4 CPUs re-calibrate udelay(lpj = 1167360)
squashfs: version 4.0 (2009/01/31) Phillip Lougher
fuse init (API version 7.22)
msgmni has been set to 241
io scheduler noop registered (default)
reg_int_mask=0, INT_MASK= 0 
HSDMA_init

 hsdma_phy_tx_ring0 = 0x00c00000, hsdma_tx_ring0 = 0xa0c00000

 hsdma_phy_rx_ring0 = 0x00c04000, hsdma_rx_ring0 = 0xa0c04000
TX_CTX_IDX0 = 0
TX_DTX_IDX0 = 0
RX_CRX_IDX0 = 3ff
RX_DRX_IDX0 = 0
set_fe_HSDMA_glo_cfg
HSDMA_GLO_CFG = 465
Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x1e000d00 (irq = 27) is a 16550A
serial8250: ttyS1 at MMIO 0x1e000c00 (irq = 26) is a 16550A
brd: module loaded
MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
Allocate 16 byte aligned buffer: 815eea70
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 DA 00 95 46, 00009546]
Device not found, ID: 1da
Not Support this Device! 
chip_mode=00000001
Support this Device in MTK table! 1da 
NAND device: Manufacturer ID: 0x01, Chip ID: 0xda (AMD/Spansion NAND 256MiB 3,3V 8-bit), 256MiB, page size: 2048, OOB size: 64
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Scanning device for bad blocks
Signature matched and data read!
load_fact_bbt success 2047

Creating 13 MTD partitions on "MT7621-NAND":
0x000000000000-0x00000ff00000 : "whole"
0x000000000000-0x000000200000 : "boot"
0x000000200000-0x000000800000 : "misc_ro"
0x000000800000-0x000000e00000 : "misc_rw"
0x000000e00000-0x000001400000 : "misc_rw_bak"
0x000001400000-0x000001a00000 : "misc_isp"
0x000001a00000-0x000002200000 : "kernel"
0x000002200000-0x000003200000 : "rootfs"
0x000003200000-0x000003a00000 : "kernel2"
0x000003a00000-0x000004a00000 : "rootfs2"
0x000004a00000-0x000004b00000 : "bflag"
0x000004b00000-0x000004c00000 : "lte_upg_flag"
0x000004c00000-0x00000ff00000 : "lte_fw"
[mtk_nand] probe successfully!
PPP generic driver version 2.4.2
PPP MPPE Compression module registered
NET: Registered protocol family 24
PPTP driver version 0.8.5
rdm_major = 253

 gpiomode:a05a8 

 gpiomode:a05a8 
lte_sd_kicking_writeback: set sd_kicking = 0!
lte_power_writeback: POWER ON lte modem!
set_led: POWER ON LTE MODEM
lte_download_writeback: lte modem ... out of download mode!
set_led: lte modem ... pull down download pin
lte_wlan_status_writeback: set lte_wlan_status = 0!
Ralink gpio driver initialized nnnnnnn
Mirror/redirect action on
u32 classifier
    input device check on
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1931 buckets, 7724 max)
gre: GRE over IPv4 demultiplexor driver
ip_gre: GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team
Type=Linux
TCP: cubic registered
Initializing XFRM netlink socket
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
sit: IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
NET: Registered protocol family 15
Ebtables v2.0 registered
8021q: 802.1Q VLAN Support v1.8
UBI: attaching mtd7 to ubi0
UBI: scanning is finished
UBI: attached mtd7 (name "rootfs", size 16 MiB) to ubi0
UBI: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
UBI: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
UBI: VID header offset: 2048 (aligned 2048), data offset: 4096
UBI: good PEBs: 128, bad PEBs: 0, corrupted PEBs: 0
UBI: user volume: 1, internal volumes: 1, max. volumes count: 128
UBI: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 1871242254
UBI: available PEBs: 0, total reserved PEBs: 128, PEBs reserved for bad PEB handling: 8
UBI: background thread "ubi_bgt0d" started, PID 50
VFS: Mounted root (squashfs filesystem) readonly on device 31:13.
devtmpfs: mounted
Freeing unused kernel memory: 256K (81590000 - 815d0000)
starting pid 55, tty '': '/etc/init.d/rcS'
mount: mounting devpts on /dev/pts failed: No such file or directory
UBI: attaching mtd2 to ubi1
UBI: scanning is finished
UBI: attached mtd2 (name "misc_ro", size 6 MiB) to ubi1
UBI: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
UBI: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
UBI: VID header offset: 2048 (aligned 2048), data offset: 4096
UBI: good PEBs: 48, bad PEBs: 0, corrupted PEBs: 0
UBI: user volume: 1, internal volumes: 1, max. volumes count: 128
UBI: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 744913559
UBI: available PEBs: 0, total reserved PEBs: 48, PEBs reserved for bad PEB handling: 8
UBI: background thread "ubi_bgt1d" started, PID 63
UBI device number 1, total 48 LEBs (6094848 byteUBI: attaching mtd3 to ubi2
s, 5.8 MiB), available 0 LEBs (0 bytes), LEB size 126976 bytes (124.0 KiB)
UBI: scanning is finished
UBI: attached mtd3 (name "misc_rw", size 6 MiB) to ubi2
UBI: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
UBI: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
UBI: VID header offset: 2048 (aligned 2048), data offset: 4096
UBI: good PEBs: 48, bad PEBs: 0, corrupted PEBs: 0
UBI: user volume: 1, internal volumes: 1, max. volumes count: 128
UBI: max/mean erase counter: 9/4, WL threshold: 4096, image sequence number: 1514455748
UBI: available PEBs: 0, total reserved PEBs: 48, PEBs reserved for bad PEB handling: 8
UBI: background thread "ubi_bgt2d" started, PID 69
UBI device number 2, total 48 LEBs (6094848 byteUBI: attaching mtd4 to ubi3
s, 5.8 MiB), available 0 LEBs (0 bytes), LEB size 126976 bytes (124.0 KiB)
UBI: scanning is finished
UBI: attached mtd4 (name "misc_rw_bak", size 6 MiB) to ubi3
UBI: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
UBI: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
UBI: VID header offset: 2048 (aligned 2048), data offset: 4096
UBI: good PEBs: 48, bad PEBs: 0, corrupted PEBs: 0
UBI: user volume: 1, internal volumes: 1, max. volumes count: 128
UBI: max/mean erase counter: 10/4, WL threshold: 4096, image sequence number: 1845246541
UBI: available PEBs: 0, total reserved PEBs: 48, PEBs reserved for bad PEB handling: 8
UBI: background thread "ubi_bgt3d" started, PID 75
UBI device number 3, total 48 LEBs (6094848 byteUBI: attaching mtd5 to ubi4
s, 5.8 MiB), available 0 LEBs (0 bytes), LEB size 126976 bytes (124.0 KiB)
UBI: scanning is finished
UBI: attached mtd5 (name "misc_isp", size 6 MiB) to ubi4
UBI: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
UBI: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
UBI: VID header offset: 2048 (aligned 2048), data offset: 4096
UBI: good PEBs: 48, bad PEBs: 0, corrupted PEBs: 0
UBI: user volume: 1, internal volumes: 1, max. volumes count: 128
UBI: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 1493999924
UBI: available PEBs: 0, total reserved PEBs: 48, PEBs reserved for bad PEB handling: 8
UBI: background thread "ubi_bgt4d" started, PID 81
UBI device number 4, total 48 LEBs (6094848 bytes, 5.8 MiB), available 0 LEBs (0 bytes), LEB size 126976 bytes (124.0 KiB)
UBIFS: mounted UBI device 1, volume 0, name "misc_ro", R/O mode
UBIFS: LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
UBIFS: FS size: 3301376 bytes (3 MiB, 26 LEBs), journal size 1142785 bytes (1 MiB, 9 LEBs)
UBIFS: reserved for root: 0 bytes (0 KiB)
UBIFS: media format: w4/r0 (latest is w4/r0), UUID C917634E-6F83-4935-AEAA-D2392D36D978, small LPT model
UBIFS: background thread "ubifs_bgt2_0" started, PID 88
UBIFS: recovery needed
UBIFS: recovery completed
UBIFS: mounted UBI device 2, volume 0, name "misc_rw"
UBIFS: LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
UBIFS: FS size: 3301376 bytes (3 MiB, 26 LEBs), journal size 1142785 bytes (1 MiB, 9 LEBs)
UBIFS: reserved for root: 0 bytes (0 KiB)
UBIFS: media format: w4/r0 (latest is w4/r0), UUID 7A5B9B84-04A2-4CBB-9C93-4A79B31DE9C4, small LPT model
UBIFS: background thread "ubifs_bgt3_0" started, PID 90
UBIFS: recovery needed
UBIFS: recovery completed
UBIFS: mounted UBI device 3, volume 0, name "misc_rw_bak"
UBIFS: LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
UBIFS: FS size: 3301376 bytes (3 MiB, 26 LEBs), journal size 1142785 bytes (1 MiB, 9 LEBs)
UBIFS: reserved for root: 0 bytes (0 KiB)
UBIFS: media format: w4/r0 (latest is w4/r0), UUID C3BD9D7E-AF47-4DE4-9863-093402E7719A, small LPT model
UBIFS: mounted UBI device 4, volume 0, name "misc_isp", R/O mode
UBIFS: LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
UBIFS: FS size: 3301376 bytes (3 MiB, 26 LEBs), journal size 1142785 bytes (1 MiB, 9 LEBs)
UBIFS: reserved for root: 0 bytes (0 KiB)
UBIFS: media format: w4/r0 (latest is w4/r0), UUID 700D31AB-1816-40BB-8807-CCF2E171558D, small LPT model
SCSI subsystem initialized
insmod: can't insert '/lib/modules/kmdir/kernel/drivers/usb/core/usbcore.ko': No such file or directory
Started WatchDog Timer.
Ralink APSoC Hardware Watchdog Timer
mount: mounting usbfs on /proc/bus/usb/ failed: No such device
*****run project phy.
FM_OUT value: u4FmOut = 0(0x00000000)
FM_OUT value: u4FmOut = 0(0x00000000)
FM_OUT value: u4FmOut = 0(0x00000000)
FM_OUT value: u4FmOut = 0(0x00000000)
FM_OUT value: u4FmOut = 0(0x00000000)
FM_OUT value: u4FmOut = 0(0x00000000)
FM_OUT value: u4FmOut = 0(0x00000000)
FM_OUT value: u4FmOut = 0(0x00000000)
FM_OUT value: u4FmOut = 0(0x00000000)
FM_OUT value: u4FmOut = 0(0x00000000)
FM_OUT value: u4FmOut = 0(0x00000000)
FM_OUT value: u4FmOut = 0(0x00000000)
FM_OUT value: u4FmOut = 0(0x00000000)
FM_OUT value: u4FmOut = 0(0x00000000)
FM_OUT value: u4FmOut = 0(0x00000000)
FM_OUT value: u4FmOut = 0(0x00000000)
FM_OUT value: u4FmOut = 0(0x00000000)
FM_OUT value: u4FmOut = 0(0x00000000)
FM_OUT value: u4FmOut = 0(0x00000000)
FM_OUT value: u4FmOut = 0(0x00000000)
xhci-hcd xhci-hcd: xHCI Host Controller
xhci-hcd xhci-hcd: new USB bus registered, assigned bus number 1
xhci-hcd xhci-hcd: irq 22, io mem 0x1e1c0000
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
xhci-hcd xhci-hcd: xHCI Host Controller
xhci-hcd xhci-hcd: new USB bus registered, assigned bus number 2
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
usbcore: registered new interface driver usb-storage
insmod: can't insert '/lib/modules/kmdir/kernel/drivers/scsi/scsi_wait_scan.ko': No such file or directory
insmod: can't insert '/lib/modules/kmdir/kernel/drivers/usb/host/ifxusb_host.ko': No such file or directory
insmod: can't insert '/lib/modules/kmdir/kernel/drivers/net/rt_rdm/rt_rdm.ko': No such file or directory
none mac in flash, use random MAC 00-0a-ffffffeb-13-09-69
GMAC1_MAC_ADRH -- : 0x0000000a
GMAC1_MAC_ADRL -- : 0xeb130969
Ralink APSoC Ethernet Driver Initilization. v3.1  1024 rx/tx descriptors allocated, mtu = 1500!
none mac in flash, use random MAC 00-0a-ffffffeb-13-09-69
GMAC1_MAC_ADRH -- : 0x0000000a
GMAC1_MAC_ADRL -- : 0xeb130969
PROC INIT OK!
usbcore: registered new interface driver cdc_wdm
usbcore: registered new interface driver usbserial
usbserial: USB Serial support registered for generic
usbcore: registered new interface driver usbserial_generic
usbcore: registered new interface driver option
usbserial: USB Serial support registered for GSM modem (1-port)
nat46: module (version Jul 15 2024 16:35:10) loaded.
dns_init
domain_name:tplinkmodem.net
Register flash device: flash0
l2tp_core: L2TP core driver, V2.0
l2tp_ppp: PPPoL2TP kernel driver, V2.0

Please press Enter to activate this console. [err] syslogd[main --1001] syslogd : syslogd_init

Is there a guide as to how I can install openwrt on this?

I'm able to open tftp boot by pressing 1 on the serial console while it starts to boot, but as I upload the kernel image, the router tries to verify the image throws error checksum mismatch and boots normally into tp-link sw.

Anyone know how to bypass the image signature verification?

I got into the root shell using the username: admin and password: 1234 (which I found an encrypted hash for $1$$iC.dUsGpxNNJGeOm1dFio/ in the original firmware file from tp-link website)

But the file system is read only.

# ls /bin

uname    sleep    ps       netstat  ls       grep     df       cat
umount   sh       ping6    mpstat   login    fgrep    date     busybox
touch    sed      ping     mount    ln       egrep    cp       ash
tar      rm       pidof    mkdir    kill     echo     chmod

running busybox revelas the following command available

BusyBox v1.23.2 (2024-07-15 16:38:09 CST) multi-call binary.
BusyBox is copyrighted by many authors between 1998-2012.
Licensed under GPLv2. See source distribution for detailed
copyright notices.

Usage: busybox [function [arguments]...]
   or: busybox --list
   or: function [arguments]...

        BusyBox is a multi-call binary that combines many common Unix
        utilities into a single executable.  Most people will create a
        link to busybox for each function they wish to use and BusyBox
        will act like whatever it was invoked as.

Currently defined functions:
        [, [[, arping, ash, basename, blkid, brctl, cat, chmod, cp, cut, date,
        df, echo, egrep, env, fgrep, find, free, fuser, getty, grep, halt,
        head, ifconfig, init, insmod, ipcrm, ipcs, kill, killall, linuxrc, ln,
        logger, login, ls, lsmod, md5sum, mkdir, mount, mpstat, netstat, pidof,
        ping, ping6, poweroff, ps, reboot, rm, rmmod, route, sed, sh, sleep,
        tail, tar, taskset, telnet, telnetd, test, tftp, top, touch, tr,
        umount, uname, unzip, uptime, vconfig

Programs running

# netstat -tulnp

Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 0.0.0.0:1900            0.0.0.0:*               LISTEN      684/upnpd
tcp        0      0 127.0.0.1:5037          0.0.0.0:*               LISTEN      474/adb
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      862/dropbear
tcp        0      0 0.0.0.0:7547            0.0.0.0:*               LISTEN      351/cwmp
tcp        0      0 127.0.0.1:20002         0.0.0.0:*               LISTEN      758/tmpd
tcp        0      0 :::80                   :::*                    LISTEN      679/httpd
tcp        0      0 :::22                   :::*                    LISTEN      862/dropbear
tcp        0      0 :::23                   :::*                    LISTEN      146/telnetd
tcp        0      0 ::1:5528                :::*                    LISTEN      733/dhcp6c
udp        0      0 0.0.0.0:67              0.0.0.0:*                           706/dhcpd
udp        0      0 0.0.0.0:60777           0.0.0.0:*                           730/tdpd
udp        0      0 0.0.0.0:1900            0.0.0.0:*                           684/upnpd
udp        0      0 127.0.0.1:48365         0.0.0.0:*                           684/upnpd
udp        0      0 0.0.0.0:20002           0.0.0.0:*                           730/tdpd
udp        0      0 :::546                  :::*                                733/dhcp6c

Below is the mtd partitions

# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 0ff00000 00020000 "whole"
mtd1: 00200000 00020000 "boot"
mtd2: 00600000 00020000 "misc_ro"
mtd3: 00600000 00020000 "misc_rw"
mtd4: 00600000 00020000 "misc_rw_bak"
mtd5: 00600000 00020000 "misc_isp"
mtd6: 00800000 00020000 "kernel"
mtd7: 01000000 00020000 "rootfs"
mtd8: 00800000 00020000 "kernel2"
mtd9: 01000000 00020000 "rootfs2"
mtd10: 00100000 00020000 "bflag"
mtd11: 00100000 00020000 "lte_upg_flag"
mtd12: 0b300000 00020000 "lte_fw"
mtd13: 00e0c000 0001f000 "rootfs_squashfs"
mtd14: 0045c000 0001f000 "misc_ro"
mtd15: 0045c000 0001f000 "misc_rw"
mtd16: 0045c000 0001f000 "misc_rw_bak"
mtd17: 0045c000 0001f000 "misc_isp"

also using chmod I can change the file system permissions

So you tried as per listed in the (EU) commit message?

Please provide the serial history for this (including your commands and the results).

Provided link seems to be broken

forum strips the URLs too much
https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=78110c3b5fce119d13cd45dadd33ca396c8ce197

Haven't tried exactly these steps, in uboot menu when I use the tftboot and bootm command, it tries to verify checksum then goes on to boot into original firmware.

Try exactly as the commit suggests, if that doesn’t work, provide the full logs of commands and results.

Not able to do as per the commit message as the commit says to name the initramfs file to openwrt.bin but the tplink router is looking for og.bin.

And if I rename the initramfs file to og.bin and transfer it to router using tftpboot, it still doesn't use the kernel image, as the checksum fails

below are the logs


MlmePeriodicExec: RxRing0 full, trigger rx_done_func
4b00000
[ lteUpgradeStatusCheckHandler ] 4496:  lte last upgrade status:255 

MlmePeriodicExec: RxRing0 full, trigger rx_done_func


U-Boot 1.1.3 (Jul 15 2024 - 16:28:36)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87f94000

Config XHCI 40M PLL 
Allocate 16 byte aligned buffer: 87fca250
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [01 DA 00 95 46]
Device found in MTK table, ID: 1da, EXT_ID: 9546
Support this Device in MTK table! 1da 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 2047
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,	mtd->erasesize=131072  devinfo.iowidth=8
..============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Jul 15 2024  Time:16:28:36
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
 0 

   
4: System Enter Boot Command Line Interface.

U-Boot 1.1.3 (Jul 15 2024 - 16:28:36)
MT7621 # 444444444         
MT7621 # help
?       - alias for 'help'
bootidx	- bootidx command
bootm   - boot application image from memory
go      - start application at address 'addr'
help    - print online help
loadb   - load binary file over serial line (kermit mode)
mcmp    - memory compare
md      - memory display
mdio   - Ralink PHY register R/W command !!
mm      - memory modify (auto-incrementing)
nand	- nand command
nm      - memory modify (constant address)
printenv- print environment variables
reset   - Perform RESET of the CPU
saveenv - save environment variables to persistent storage
setenv  - set environment variables
tftpboot- boot image via network using TFTP protocol
version - print monitor version
MT7621 # tftpboot

 NetLoop,call eth_halt ! 

 NetLoop,call eth_init ! 
Trying Eth0 (10/100-M)

 Waitting for RX_DMA_BUSY status Start... done


 ETH_STATE_ACTIVE!! 
TFTP from server 192.168.0.5; our IP address is 192.168.0.1
Filename 'og.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: *Got ARP REPLY, set server/gtwy eth addr (04:7c:16:e5:36:99)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 192.168.0.5; our IP address is 192.168.0.1
Filename 'og.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: *Got ARP REPLY, set server/gtwy eth addr (04:7c:16:e5:36:99)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 192.168.0.5; our IP address is 192.168.0.1
Filename 'og.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: *Got ARP REPLY, set server/gtwy eth addr (04:7c:16:e5:36:99)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 192.168.0.5; our IP address is 192.168.0.1
Filename 'og.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: *Got ARP REPLY, set server/gtwy eth addr (04:7c:16:e5:36:99)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 192.168.0.5; our IP address is 192.168.0.1
Filename 'og.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: *Got ARP REPLY, set server/gtwy eth addr (04:7c:16:e5:36:99)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 192.168.0.5; our IP address is 192.168.0.1
Filename 'og.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: *Got ARP REPLY, set server/gtwy eth addr (04:7c:16:e5:36:99)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 192.168.0.5; our IP address is 192.168.0.1
Filename 'og.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: *Got ARP REPLY, set server/gtwy eth addr (04:7c:16:e5:36:99)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 192.168.0.5; our IP address is 192.168.0.1
Filename 'og.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: *Got ARP REPLY, set server/gtwy eth addr (04:7c:16:e5:36:99)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 192.168.0.5; our IP address is 192.168.0.1
Filename 'og.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: *Got ARP REPLY, set server/gtwy eth addr (04:7c:16:e5:36:99)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 192.168.0.5; our IP address is 192.168.0.1
Filename 'og.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: *Got ARP REPLY, set server/gtwy eth addr (04:7c:16:e5:36:99)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 192.168.0.5; our IP address is 192.168.0.1
Filename 'og.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: *Got ARP REPLY, set server/gtwy eth addr (04:7c:16:e5:36:99)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 192.168.0.5; our IP address is 192.168.0.1
Filename 'og.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: *Got ARP REPLY, set server/gtwy eth addr (04:7c:16:e5:36:99)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 192.168.0.5; our IP address is 192.168.0.1
Filename 'og.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: *Got ARP REPLY, set server/gtwy eth addr (04:7c:16:e5:36:99)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 192.168.0.5; our IP address is 192.168.0.1
Filename 'og.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: *Got ARP REPLY, set server/gtwy eth addr (04:7c:16:e5:36:99)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 192.168.0.5; our IP address is 192.168.0.1
Filename 'og.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: *Got ARP REPLY, set server/gtwy eth addr (04:7c:16:e5:36:99)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 192.168.0.5; our IP address is 192.168.0.1
Filename 'og.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: *Got ARP REPLY, set server/gtwy eth addr (04:7c:16:e5:36:99)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 192.168.0.5; our IP address is 192.168.0.1
Filename 'og.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: *Got ARP REPLY, set server/gtwy eth addr (04:7c:16:e5:36:99)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 192.168.0.5; our IP address is 192.168.0.1
Filename 'og.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: *Got ARP REPLY, set server/gtwy eth addr (04:7c:16:e5:36:99)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 192.168.0.5; our IP address is 192.168.0.1
Filename 'og.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: *Got ARP REPLY, set server/gtwy eth addr (04:7c:16:e5:36:99)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 192.168.0.5; our IP address is 192.168.0.1
Filename 'og.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: *Got ARP REPLY, set server/gtwy eth addr (04:7c:16:e5:36:99)
Got it

TFTP error: 'File not found' (1)
Starting again


Abort
MT7621 # <INTERRUPT>
MT7621 # tftpboot

 NetLoop,call eth_halt ! 

 NetLoop,call eth_init ! 
Trying Eth0 (10/100-M)

 ETH_STATE_ACTIVE!! 
TFTP from server 192.168.0.5; our IP address is 192.168.0.1
Filename 'og.bin'.

 TIMEOUT_COUNT=10,Load address: 0x84000000
Loading: *Got ARP REQUEST, return our IP
Got ARP REQUEST, return our IP
Got ARP REQUEST, return our IP
Got ARP REPLY, set server/gtwy eth addr (04:7c:16:e5:36:99)
Got it
#################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #######################################################
done
Bytes transferred = 7598718 (73f27e hex)
LoadAddr=84000000 NetBootFileXferSize= 0073f27e
MT7621 # bootm
Boot flag csum incorrect, return image0
Prepare to boot image0
....................................Code Address: 0x00100081, Entry Address: 0x501a4281
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 81421a50) ...
## Giving linux memsize in MB, 128

Starting kernel ...


LINUX started...

 THIS IS ASIC

SDK 5.0.S.0
Linux version 3.10.14 (tp-link@Sg-sohoidev) (gcc version 4.6.3 (Buildroot 2012.11.1) ) #1 SMP Mon Jul 15 16:32:13 CST 2024

 The CPU feqenuce set to 880 MHz
GCMP present
CPU0 revision is: 0001992f (MIPS 1004Kc)
Software DMA cache coherency
Determined physical RAM map:
 memory: 08000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone ranges:
  DMA      [mem 0x00000000-0x00ffffff]
  Normal   [mem 0x01000000-0x07ffffff]
Movable zone start for each node
Early memory node ranges
  node   0: [mem 0x00000000-0x07ffffff]
Detected 3 available secondary CPU(s)
Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
PERCPU: Embedded 7 pages/cpu @81714000 s7040 r8192 d13440 u32768
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
PID hash table entries: 512 (order: -1, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Writing ErrCtl register=00024013
Readback ErrCtl register=00024013
Memory: 123600k/131072k available (4267k kernel code, 7472k reserved, 1423k data, 256k init, 0k highmem)
Hierarchical RCU implementation.
NR_IRQS:128
console [ttyS1] enabled
Calibrating delay loop... 577.53 BogoMIPS (lpj=1155072)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
launch: starting cpu1
launch: cpu1 gone!
CPU1 revision is: 0001992f (MIPS 1004Kc)
Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
Synchronize counters for CPU 1: done.
launch: starting cpu2
launch: cpu2 gone!
CPU2 revision is: 0001992f (MIPS 1004Kc)
Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
Synchronize counters for CPU 2: done.
launch: starting cpu3
launch: cpu3 gone!
CPU3 revision is: 0001992f (MIPS 1004Kc)
Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
Synchronize counters for CPU 3: done.
Brought up 4 CPUs
devtmpfs: initialized
NET: Registered protocol family 16
release PCIe RST: RALINK_RSTCTRL = 7000000
PCIE PHY initialize
***** Xtal 40MHz *****
start MT7621 PCIe register access
RALINK_RSTCTRL = 7000000
RALINK_CLKCFG1 = 77ffeff8

*************** MT7621 PCIe RC mode *************
PCIE2 no card, disable it(RST&CLK)
pcie_link status = 0x3
RALINK_RSTCTRL= 3000000
*** Configure Device number setting of Virtual PCI-PCI bridge ***
RALINK_PCI_PCICFG_ADDR = 21007f2 -> 21007f2
PCIE0 enabled
PCIE1 enabled
interrupt enable status: 300000
Port 1 N_FTS = 1b105000
Port 0 N_FTS = 1b105000
config reg done
init_rt2880pci done
bio: create slab <bio-0> at 0
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
PCI host bridge to bus 0000:00
pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
pci_bus 0000:00: root bus resource [io  0x1e160000-0x1e16ffff]
pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
pci 0000:00:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring
pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000)
pci 0000:00:01.0: BAR 0: can't assign mem (size 0x80000000)
pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
pci 0000:00:01.0: BAR 9: assigned [mem 0x60100000-0x602fffff pref]
pci 0000:00:00.0: BAR 1: assigned [mem 0x60300000-0x6030ffff]
pci 0000:00:01.0: BAR 1: assigned [mem 0x60310000-0x6031ffff]
pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff]
pci 0000:00:00.0: PCI bridge to [bus 01]
pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
pci 0000:02:00.0: BAR 0: assigned [mem 0x60100000-0x601fffff 64bit pref]
pci 0000:02:00.0: BAR 2: assigned [mem 0x60200000-0x60203fff 64bit pref]
pci 0000:02:00.0: BAR 4: assigned [mem 0x60204000-0x60204fff 64bit pref]
pci 0000:00:01.0: PCI bridge to [bus 02]
pci 0000:00:01.0:   bridge window [mem 0x60100000-0x602fffff pref]
PCI: Enabling device 0000:00:00.0 (0004 -> 0006)
PCI: Enabling device 0000:00:01.0 (0004 -> 0006)
BAR0 at slot 0 = 0
bus=0x0, slot = 0x0
res[0]->start = 0
res[0]->end = 0
res[1]->start = 60300000
res[1]->end = 6030ffff
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
BAR0 at slot 1 = 0
bus=0x0, slot = 0x1
res[0]->start = 0
res[0]->end = 0
res[1]->start = 60310000
res[1]->end = 6031ffff
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
bus=0x1, slot = 0x0, irq=0x4
res[0]->start = 60000000
res[0]->end = 600fffff
res[1]->start = 0
res[1]->end = 0
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
bus=0x2, slot = 0x1, irq=0x18
res[0]->start = 60100000
res[0]->end = 601fffff
res[1]->start = 0
res[1]->end = 0
res[2]->start = 60200000
res[2]->end = 60203fff
res[3]->start = 0
res[3]->end = 0
res[4]->start = 60204000
res[4]->end = 60204fff
res[5]->start = 0
res[5]->end = 0
Switching to clocksource Ralink Systick timer
NET: Registered protocol family 2
Clockevents: could not switch to one-shot mode:
Clockevents: could not switch to one-shot mode:
 MIPS is not functional.
 MIPS is not functional.
Clockevents: could not switch to one-shot mode: MIPS is not functional.
Could not switch to high resolution mode on CPU 0
Could not switch to high resolution mode on CPU 3
Could not switch to high resolution mode on CPU 2
Clockevents: could not switch to one-shot mode: MIPS is not functional.
Could not switch to high resolution mode on CPU 1

any suggestions? @bevanweiss @frollic

That does certainly make things a bit trickier.

You’ll either need to identify the magic to come up with the checksum for your image, and add it to a new image for your specific hardware (and bootloader) configuration.

Or you’d need to patch up the bootloader to not verify the checksum.

I’d personally go with the first method. But it’ll still be tricky. You probably need to dump out the full bootloader, then throw it into something like Ghidra, trace through the routines until it throws out the “Boot flag csum incorrect” string, and then work backwards to determine how it calculates the checksum. Then do the same checksum calculation during the image build, and insert it into the appopropriate place in the image.

I've go no idea as to how any of that is done, thanks for the reply though.

Is it possible to write the OpenWrt image directly on to NAND flash?