Support Mercusys AC12v1 (mt7628 + mt7612e 8/64)

i have routre Mercusys ac12v1 https://www.mercusys.ru/product/details/ac12_v1
firmaware
binwalk original fw

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
55040         0xD700          U-Boot version string, "U-Boot 1.1.3 (Sep 28 2020 - 20:38:36)"
66560         0x10400         LZMA compressed data, properties: 0x6D, dictionary size: 8388608 bytes, uncompressed size: 3693460 bytes
1324508       0x1435DC        Squashfs filesystem, little endian, version 4.0, compression:xz, size: 3593190 bytes, 1299 inodes, blocksize: 262144 bytes, created: 2020-09-28 12:51:33
stock bootlog
U-Boot 1.1.3 (Dec 14 2017 - 21:00:08)

Board: Ralink APSoC DRAM: 64 MB
relocate_code Pointer at: 83fb8000
flash manufacture id: 1c, device id 70 17
Warning: un-recognized chip ID, please update bootloader!
*** Warning - bad CRC, using default environment

Autobooting in 1 seconds
## jump to 0xBC030000 ...


U-Boot 1.1.3 (Sep 28 2020 - 20:38:36)

Board: Ralink APSoC DRAM: 64 MB
relocate_code Pointer at: 83fc0000
flash manufacture id: 1c, device id 70 17
Warning: un-recognized chip ID, please update bootloader!
*** Warning - bad CRC, using default environment


Now booting Linux!

Autobooting in 1 seconds
## Booting image at bc040000 ...
---- tpHdr = bc040000
---- text base = 80000000
---- entry point = 80000000
Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80000000) ...
## Giving linux memsize in MB, 64

Starting kernel ...


LINUX started...

THIS IS ASIC
[ 0.000000] Linux version 3.10.14 (tplink@tplink-pc) (gcc version 4.6.3 20120201 (prerelease) (Linaro GCC 4.6-2012.02) ) #1 Mon Sep 28 20:51:24 CST 2020
[ 0.000000]
[ 0.000000] The CPU feqenuce set to 575 MHz
[ 0.000000] CPU0 revision is: 00019655 (MIPS 24KEc)
[ 0.000000] Software DMA cache coherency
[ 0.000000] Determined physical RAM map:
[ 0.000000] memory: 04000000 @ 00000000 (usable)
[ 0.000000] Initrd not found or empty - disabling initrd
[ 0.000000] Zone ranges:
[ 0.000000] Normal [mem 0x00000000-0x03ffffff]
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x00000000-0x03ffffff]
[ 0.000000] Primary instruction cache 64kB, 4-way, VIPT, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256
[ 0.000000] Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock6 rootfstype=squashfs,jffs2 noinitrd rootfstype=squashfs,jffs2
[ 0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[ 0.000000] Writing ErrCtl register=000163d6
[ 0.000000] Readback ErrCtl register=000163d6
[ 0.000000] Memory: 61024k/65536k available (2787k kernel code, 4512k reserved, 653k data, 204k init, 0k highmem)
[ 0.000000] NR_IRQS:128
[ 0.000000] console [ttyS1] enabled
[ 0.096000] Calibrating delay loop... 382.46 BogoMIPS (lpj=764928)
[ 0.128000] pid_max: default: 32768 minimum: 301
[ 0.132000] Mount-cache hash table entries: 512
[ 0.136000] NET: Registered protocol family 16
[ 0.140000] RALINK_GPIOMODE = 54054404
[ 0.144000] RALINK_GPIOMODE = 54044404
[ 0.244000] ***** Xtal 40MHz *****
[ 0.248000] start PCIe register access
[ 0.748000] RALINK_RSTCTRL = 2400000
[ 0.752000] RALINK_CLKCFG1 = fdbfffc0
[ 0.756000]
[ 0.756000] *************** MT7628 PCIe RC mode *************
[ 1.256000] PCIE0 enabled
[ 1.260000] Port 0 N_FTS = 1b105000
[ 1.264000] init_rt2880pci done
[ 1.284000] bio: create slab <bio-0> at 0
[ 1.288000] PCI host bridge to bus 0000:00
[ 1.292000] pci_bus 0000:00: root bus resource [mem 0x20000000-0x2fffffff]
[ 1.296000] pci_bus 0000:00: root bus resource [io 0x10160000-0x1016ffff]
[ 1.300000] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[ 1.304000] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[ 1.308000] pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000)
[ 1.312000] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]
[ 1.316000] pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pref]
[ 1.320000] pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
[ 1.324000] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit]
[ 1.328000] pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pref]
[ 1.332000] pci 0000:00:00.0: PCI bridge to [bus 01]
[ 1.336000] pci 0000:00:00.0: bridge window [mem 0x20000000-0x200fffff]
[ 1.340000] pci 0000:00:00.0: bridge window [mem 0x20100000-0x201fffff pref]
[ 1.344000] BAR0 at slot 0 = 0
[ 1.348000] bus=0x0, slot = 0x0
[ 1.352000] res[0]->start = 0
[ 1.356000] res[0]->end = 0
[ 1.360000] res[1]->start = 20200000
[ 1.364000] res[1]->end = 2020ffff
[ 1.368000] res[2]->start = 0
[ 1.372000] res[2]->end = 0
[ 1.376000] res[3]->start = 0
[ 1.380000] res[3]->end = 0
[ 1.384000] res[4]->start = 0
[ 1.388000] res[4]->end = 0
[ 1.392000] res[5]->start = 0
[ 1.396000] res[5]->end = 0
[ 1.400000] bus=0x1, slot = 0x0
[ 1.404000] res[0]->start = 20000000
[ 1.408000] res[0]->end = 200fffff
[ 1.412000] res[1]->start = 0
[ 1.416000] res[1]->end = 0
[ 1.420000] res[2]->start = 0
[ 1.424000] res[2]->end = 0
[ 1.428000] res[3]->start = 0
[ 1.432000] res[3]->end = 0
[ 1.436000] res[4]->start = 0
[ 1.440000] res[4]->end = 0
[ 1.444000] res[5]->start = 0
[ 1.448000] res[5]->end = 0
[ 1.452000] cfg80211: Calling CRDA to update world regulatory domain
[ 1.456000] Switching to clocksource MIPS
[ 1.460000] NET: Registered protocol family 2
[ 1.472000] TCP established hash table entries: 512 (order: 0, 4096 bytes)
[ 1.484000] TCP bind hash table entries: 512 (order: -1, 2048 bytes)
[ 1.496000] TCP: Hash tables configured (established 512 bind 512)
[ 1.508000] TCP: reno registered
[ 1.516000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[ 1.528000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[ 1.540000] NET: Registered protocol family 1
[ 1.552000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 1.564000] jffs2: version 2.2. (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 1.584000] msgmni has been set to 119
[ 1.592000] io scheduler noop registered (default)
[ 1.608000] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[ 1.624000] serial8250: ttyS0 at MMIO 0x10000d00 (irq = 21) is a 16550A
[ 1.636000] serial8250: ttyS1 at MMIO 0x10000c00 (irq = 20) is a 16550A
[ 1.652000] Ralink gpio driver initialized
[ 1.660000] flash manufacture id: 1c, device id 70 17
[ 1.668000] Warning: un-recognized chip ID, please update SPI driver!
[ 1.684000] EN25Q64(1c 30171c30) (8192 Kbytes)
[ 1.692000] mtd .name = raspi, .size = 0x00800000 (8M) .erasesize = 0x00010000 (64K) .numeraseregions = 0
[ 1.712000] Searching for RedBoot partition table
[ 1.720000] 8 RedBoot partitions found on MTD device raspi
[ 1.732000] Creating 8 MTD partitions on "raspi":
[ 1.740000] 0x000000000000-0x00000001d800 : "factory_boot"
[ 1.752000] mtd: partition "factory_boot" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[ 1.780000] 0x00000001d800-0x00000001e000 : "factory_info"
[ 1.792000] 0x00000001e000-0x000000020000 : "art"
[ 1.804000] 0x000000020000-0x000000030000 : "config"
[ 1.812000] 0x000000030000-0x000000040000 : "boot"
[ 1.824000] 0x000000040000-0x0000001733dc : "kernel"
[ 1.836000] mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[ 1.860000] 0x0000001733dc-0x000000800000 : "rootfs"
[ 1.872000] mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[ 1.896000] mtd: device 6 (rootfs) set to be root filesystem
[ 1.908000] mtd: partition "rootfs_data" created automatically, ofs=0x4f0000, len=0x310000
[ 1.924000] 0x0000004f0000-0x000000800000 : "rootfs_data"
[ 1.936000] 0x000000040000-0x000000800000 : "firmware"
[ 1.948000] rdm_major = 253
[ 1.956000] GMAC1_MAC_ADRH -- : 0x0000000c
[ 1.964000] GMAC1_MAC_ADRL -- : 0x4328803f
[ 1.972000] Ralink APSoC Ethernet Driver Initilization. v3.1 512 rx/tx descriptors allocated, mtu = 1500!
[ 1.992000] GMAC1_MAC_ADRH -- : 0x0000000c
[ 2.000000] GMAC1_MAC_ADRL -- : 0x432880aa
[ 2.008000] PROC INIT OK!
[ 2.012000] u32 classifier
[ 2.020000] Performance counters on
[ 2.028000] input device check on
[ 2.036000] Actions configured
[ 2.040000] TCP: cubic registered
[ 2.048000] NET: Registered protocol family 10
[ 2.056000] NET: Registered protocol family 17
[ 2.068000] 8021q: 802.1Q VLAN Support v1.8
[ 2.076000] registered taskstats version 1
[ 2.088000] Registered character driver slp_flash_chrdev
[ 2.104000] VFS: Mounted root (squashfs filesystem) readonly on device 31:6.
[ 2.116000] Freeing unused kernel memory: 204K (8035d000 - 80390000)
- preinit -
- regular preinit -
[ 4.380000] jffs2: notice: (325) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
switching to jffs2
- init -

Please press Enter to activate this console. Mon Sep 28 12:51:00 UTC 2020
[ 6.660000] PPP generic driver version 2.4.2
[ 6.828000] PPP MPPE Compression module registered
[ 6.852000] l2tp_core: L2TP core driver, V2.0
[ 6.872000] l2tp_netlink: L2TP netlink interface
[ 6.912000] gre: GRE over IPv4 demultiplexor driver
[ 6.936000] ip_gre: GRE over IPv4 tunneling driver
[ 6.964000] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 6.972000] Type=Linux
[ 7.152000] xt_time: kernel timezone is -0000
[ 7.188000] NET: Registered protocol family 24
[ 7.324000] nf_conntrack version 0.5.0 (956 buckets, 3824 max)
[ 7.484000] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[ 7.508000] PPTP driver version 0.8.5
[ 8.332000] nf_conntrack_rtsp v0.6.21 loading
[ 8.356000] nf_nat_rtsp v0.6.21 loading
[ 8.488000] statistics: module license 'BSD' taints kernel.
[ 8.500000] Disabling lock debugging due to kernel taint
[ 8.532000] fuse init (API version 7.22)
[ 9.664000] *

=== pAd = c0797000, size = 1022192 ===

[ 9.672000] <-- RTMPAllocTxRxRingMemory, Status=0, ErrorValue=0x
[ 9.688000] <-- RTMPAllocAdapterBlock, Status=0
[ 9.696000] *RtmpChipOpsHook(492): Not support for HIF_MT yet!
[ 9.708000] *mt7628_init()-->
[ 9.712000] *mt7628_init(FW(8a00), HW(8a01), CHIPID(7628))
[ 9.724000] *e2.bin mt7628_init(1105)::(2), pChipCap->fw_len(62800)
[ 9.736000] *mt_bcn_buf_init(218): Not support for HIF_MT yet!
[ 9.748000] *<--mt7628_init()
[ 10.724000] register rt2860
[ 10.736000]
[ 10.736000]
[ 10.736000] === pAd = c0d01000, size = 1496736 ===
[ 10.736000]
[ 10.756000] <-- RTMPAllocTxRxRingMemory, Status=0
[ 10.768000] <-- RTMPAllocAdapterBlock, Status=0
[ 10.776000] pAd->CSRBaseAddress =0xc0c00000, csr_addr=0xc0c00000!
[ 10.788000] device_id =0x7662
[ 10.796000] ==>rlt_wlan_chip_onoff(): OnOff:1, Reset= 1, pAd->WlanFunCtrl:0x0, Reg-WlanFunCtrl=0x20a
[ 10.812000] RtmpChipOpsEepromHook::e2p_type=0, inf_Type=5
[ 10.824000] RtmpEepromGetDefault::e2p_dafault=2
[ 10.832000] NVM is FLASH mode
[ 12.128000] ----IGMP init begin------
[ 12.136000] wan_dev_index = 255 lan_dev_name=br-lan wan_dev_name=eth0.2
[ 12.148000] ----IGMP has been loaded------
[ 14.848000] Raeth v3.1 (Workqueue,SkbRecycle)
[ 14.856000]
[ 14.856000] phy_tx_ring = 0x0209e000, tx_ring = 0xa209e000
[ 14.872000]
[ 14.872000] phy_rx_ring0 = 0x020a0000, rx_ring0 = 0xa20a0000
[ 14.900000] GMAC1_MAC_ADRH -- : 0x0000000c
[ 14.912000] GMAC1_MAC_ADRL -- : 0x432880aa
[ 14.920000] RT305x_ESW: Link Status Changed
[ 14.940000] device eth0 entered promiscuous mode
[ 14.960000] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.3: link becomes ready
[ 14.972000] device eth0.3 entered promiscuous mode
[ 14.980000] br-lan: port 1(eth0.3) entered forwarding state
[ 14.992000] br-lan: port 1(eth0.3) entered forwarding state
[ 15.016000] device eth0.4 entered promiscuous mode
[ 15.028000] br-lan: port 2(eth0.4) entered forwarding state
[ 15.036000] br-lan: port 2(eth0.4) entered forwarding state
[ 15.064000] device eth0.5 entered promiscuous mode
[ 15.076000] br-lan: port 3(eth0.5) entered forwarding state
[ 15.084000] br-lan: port 3(eth0.5) entered forwarding state
[ 15.100000] device eth0.6 entered promiscuous mode
[ 15.112000] br-lan: port 4(eth0.6) entered forwarding state
[ 15.120000] br-lan: port 4(eth0.6) entered forwarding state
[ 15.960000] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.4: link becomes ready
[ 15.976000] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.5: link becomes ready
[ 16.000000] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.6: link becomes ready
[ 16.996000] br-lan: port 1(eth0.3) entered forwarding state
[ 17.040000] br-lan: port 2(eth0.4) entered forwarding state
[ 17.088000] br-lan: port 3(eth0.5) entered forwarding state
[ 17.124000] br-lan: port 4(eth0.6) entered forwarding state
switch reg write offset=14, value=405555
switch reg write offset=50, value=2003
switch reg write offset=98, value=7f3f
switch reg write offset=e4, value=3f
switch reg write offset=40, value=3003
switch reg write offset=44, value=3003
switch reg write offset=48, value=3002
switch reg write offset=70, value=ffff506f
done.
switch reg write offset=c0, value=31002004
ifconfig: SIOCGIFFLAGS: No such device
killall: ap_client: no process killed
ifconfig: SIOCGIFFLAGS: No such device
killall: ap_client: no process killed
[ 21.912000] build time =
[ 21.920000] 20141115060606a
[ 21.924000] rom patch for E3 IC
[ 21.932000]
[ 21.932000] platform =
[ 21.936000] ALPS
[ 21.940000] hw/sw version =
[ 21.948000] ▒▒
[ 21.952000] patch version =
[ 21.956000]
[ 21.972000] FW Version:0.0.00 Build:1
[ 21.980000] Build Time:201411280941____
[ 21.988000] fw for E3 IC
[ 22.008000] RX[0] DESC a326c000 size = 4096
[ 22.024000] RX[1] DESC a326d000 size = 4096
[ 22.044000] RTMP_TimerListAdd: add timer obj c0e0ab3c!
[ 22.052000] RTMP_TimerListAdd: add timer obj c0d998e8!
[ 22.064000] RTMP_TimerListAdd: add timer obj c0d998bc!
[ 22.072000] RTMP_TimerListAdd: add timer obj c0d99914!
[ 22.084000] RTMP_TimerListAdd: add timer obj c0d99890!
[ 22.092000] RTMP_TimerListAdd: add timer obj c0d15068!
[ 22.104000] RTMP_TimerListAdd: add timer obj c0d14c4c!
[ 22.116000] RTMP_TimerListAdd: add timer obj c0d15038!
[ 22.124000] RTMP_TimerListAdd: add timer obj c0d153e0!
[ 22.136000] RTMP_TimerListAdd: add timer obj c0d15130!
[ 22.144000] RTMP_TimerListAdd: add timer obj c0d15160!
[ 22.156000] RTMP_TimerListAdd: add timer obj c0d15320!
[ 22.164000] RTMP_TimerListAdd: add timer obj c0d15350!
[ 22.176000] RTMP_TimerListAdd: add timer obj c0d18370!
[ 22.184000] RTMP_TimerListAdd: add timer obj c0d17f54!
[ 22.196000] RTMP_TimerListAdd: add timer obj c0d18340!
[ 22.208000] RTMP_TimerListAdd: add timer obj c0d186e8!
[ 22.216000] RTMP_TimerListAdd: add timer obj c0d18438!
[ 22.228000] RTMP_TimerListAdd: add timer obj c0d18468!
[ 22.236000] RTMP_TimerListAdd: add timer obj c0d18628!
[ 22.248000] RTMP_TimerListAdd: add timer obj c0d18658!
[ 22.256000] RTMP_TimerListAdd: add timer obj c0d1b678!
[ 22.268000] RTMP_TimerListAdd: add timer obj c0d1b25c!
[ 22.280000] RTMP_TimerListAdd: add timer obj c0d1b648!
[ 22.288000] RTMP_TimerListAdd: add timer obj c0d1b9f0!
[ 22.300000] RTMP_TimerListAdd: add timer obj c0d1b740!
[ 22.308000] RTMP_TimerListAdd: add timer obj c0d1b770!
[ 22.320000] RTMP_TimerListAdd: add timer obj c0d1b930!
[ 22.328000] RTMP_TimerListAdd: add timer obj c0d1b960!
[ 22.340000] RTMP_TimerListAdd: add timer obj c0d1e980!
[ 22.352000] RTMP_TimerListAdd: add timer obj c0d1e564!
[ 22.360000] RTMP_TimerListAdd: add timer obj c0d1e950!
[ 22.372000] RTMP_TimerListAdd: add timer obj c0d1ecf8!
[ 22.380000] RTMP_TimerListAdd: add timer obj c0d1ea48!
[ 22.392000] RTMP_TimerListAdd: add timer obj c0d1ea78!
[ 22.400000] RTMP_TimerListAdd: add timer obj c0d1ec38!
[ 22.412000] RTMP_TimerListAdd: add timer obj c0d1ec68!
[ 22.420000] RTMP_TimerListAdd: add timer obj c0d21c88!
[ 22.432000] RTMP_TimerListAdd: add timer obj c0d2186c!
[ 22.444000] RTMP_TimerListAdd: add timer obj c0d21c58!
[ 22.452000] RTMP_TimerListAdd: add timer obj c0d22000!
[ 22.464000] RTMP_TimerListAdd: add timer obj c0d21d50!
[ 22.472000] RTMP_TimerListAdd: add timer obj c0d21d80!
[ 22.484000] RTMP_TimerListAdd: add timer obj c0d21f40!
[ 22.492000] RTMP_TimerListAdd: add timer obj c0d21f70!
[ 22.504000] RTMP_TimerListAdd: add timer obj c0d24f90!
[ 22.516000] RTMP_TimerListAdd: add timer obj c0d24b74!
[ 22.524000] RTMP_TimerListAdd: add timer obj c0d24f60!
[ 22.536000] RTMP_TimerListAdd: add timer obj c0d25308!
[ 22.544000] RTMP_TimerListAdd: add timer obj c0d25058!
[ 22.556000] RTMP_TimerListAdd: add timer obj c0d25088!
[ 22.564000] RTMP_TimerListAdd: add timer obj c0d25248!
[ 22.576000] RTMP_TimerListAdd: add timer obj c0d25278!
[ 22.588000] RTMP_TimerListAdd: add timer obj c0d28298!
[ 22.596000] RTMP_TimerListAdd: add timer obj c0d27e7c!
[ 22.608000] RTMP_TimerListAdd: add timer obj c0d28268!
[ 22.616000] RTMP_TimerListAdd: add timer obj c0d28610!
[ 22.628000] RTMP_TimerListAdd: add timer obj c0d28360!
[ 22.636000] RTMP_TimerListAdd: add timer obj c0d28390!
[ 22.648000] RTMP_TimerListAdd: add timer obj c0d28550!
[ 22.656000] RTMP_TimerListAdd: add timer obj c0d28580!
[ 22.668000] RTMP_TimerListAdd: add timer obj c0d2b5a0!
[ 22.680000] RTMP_TimerListAdd: add timer obj c0d2b184!
[ 22.688000] RTMP_TimerListAdd: add timer obj c0d2b570!
[ 22.700000] RTMP_TimerListAdd: add timer obj c0d2b918!
[ 22.708000] RTMP_TimerListAdd: add timer obj c0d2b668!
[ 22.720000] RTMP_TimerListAdd: add timer obj c0d2b698!
[ 22.728000] RTMP_TimerListAdd: add timer obj c0d2b858!
[ 22.740000] RTMP_TimerListAdd: add timer obj c0d2b888!
[ 22.752000] RTMP_TimerListAdd: add timer obj c0d9bd64!
[ 22.760000] RTMP_TimerListAdd: add timer obj c0d9b948!
[ 22.772000] RTMP_TimerListAdd: add timer obj c0d9bd34!
[ 22.780000] RTMP_TimerListAdd: add timer obj c0d9c0dc!
[ 22.792000] RTMP_TimerListAdd: add timer obj c0d9be2c!
[ 22.800000] RTMP_TimerListAdd: add timer obj c0d9be5c!
[ 22.812000] RTMP_TimerListAdd: add timer obj c0d9bd94!
[ 22.824000] RTMP_TimerListAdd: add timer obj c0d9bdc4!
[ 22.832000] RTMP_TimerListAdd: add timer obj c0d9bdf4!
[ 22.844000] RTMP_TimerListAdd: add timer obj c0db688c!
[ 22.852000] RTMP_TimerListAdd: add timer obj c0db69a8!
[ 22.864000] RTMP_TimerListAdd: add timer obj c0db68b8!
[ 22.872000] RTMP_TimerListAdd: add timer obj c0d9c43c!
[ 22.896000] E2pAccessMode=2
[ 22.904000] cfg_mode=14
[ 22.908000] cfg_mode=14
[ 22.912000] wmode_band_equal(): Band Not Equal!
[ 22.924000] APSDCapable[0]=0
[ 22.932000] APSDCapable[1]=0
[ 22.936000] APSDCapable[2]=0
[ 22.944000] APSDCapable[3]=0
[ 22.948000] APSDCapable[4]=0
[ 22.956000] APSDCapable[5]=0
[ 22.960000] APSDCapable[6]=0
[ 22.964000] APSDCapable[7]=0
[ 22.972000] APSDCapable[8]=0
[ 22.976000] APSDCapable[9]=0
[ 22.984000] APSDCapable[10]=0
[ 22.988000] APSDCapable[11]=0
[ 22.996000] APSDCapable[12]=0
[ 23.000000] APSDCapable[13]=0
[ 23.008000] APSDCapable[14]=0
[ 23.012000] APSDCapable[15]=0
[ 23.020000] default ApCliAPSDCapable[0]=0
[ 23.236000] Key1Str is Invalid key length(0) or Type(0)
[ 23.244000] Key1Str is Invalid key length(0) or Type(0)
[ 23.256000] Key2Str is Invalid key length(0) or Type(0)
[ 23.268000] Key2Str is Invalid key length(0) or Type(0)
[ 23.276000] Key3Str is Invalid key length(0) or Type(0)
[ 23.288000] Key3Str is Invalid key length(0) or Type(0)
[ 23.300000] Key4Str is Invalid key length(0) or Type(0)
[ 23.308000] Key4Str is Invalid key length(0) or Type(0)
[ 23.352000] 1. Phy Mode = 49
[ 23.356000] get_chl_grp:illegal channel (167)
[ 23.364000] get_chl_grp:illegal channel (167)
[ 23.372000] get_chl_grp:illegal channel (169)
[ 23.384000] get_chl_grp:illegal channel (169)
[ 23.392000] get_chl_grp:illegal channel (171)
[ 23.400000] get_chl_grp:illegal channel (171)
[ 23.408000] get_chl_grp:illegal channel (173)
[ 23.416000] get_chl_grp:illegal channel (173)
[ 23.428000] Country Region from e2p = ffff
[ 23.436000] mt76x2_read_temp_info_from_eeprom:: is_temp_tx_alc=0, temp_tx_alc_enable=0
[ 23.452000] mt76x2_read_tx_alc_info_from_eeprom:: is_ePA_mode=0, ePA_type=3
[ 23.464000] mt76x2_read_tx_alc_info_from_eeprom:: [5G band] high_temp_slope=0, low_temp_slope=0
[ 23.480000] mt76x2_read_tx_alc_info_from_eeprom:: [2G band] high_temp_slope=0, low_temp_slope=0
[ 23.500000] mt76x2_read_tx_alc_info_from_eeprom:: [5G band] tc_lower_bound=0, tc_upper_bound=0
[ 23.516000] mt76x2_read_tx_alc_info_from_eeprom:: [2G band] tc_lower_bound=0, tc_upper_bound=0
[ 23.532000] mt76x2_get_external_lna_gain::LNA type=0x11, BLNAGain=0x0, ALNAGain0=0xffffff84, ALNAGain1=0x0, ALNAGain2=0x0
[ 23.556000] 2. Phy Mode = 49
[ 23.560000] RTMP_TimerListAdd: add timer obj c0d124c0!
[ 23.572000] RTMP_TimerListAdd: add timer obj c0d157c8!
[ 23.580000] RTMP_TimerListAdd: add timer obj c0d18ad0!
[ 23.592000] RTMP_TimerListAdd: add timer obj c0d1bdd8!
[ 23.604000] RTMP_TimerListAdd: add timer obj c0d1f0e0!
[ 23.612000] RTMP_TimerListAdd: add timer obj c0d223e8!
[ 23.624000] RTMP_TimerListAdd: add timer obj c0d256f0!
[ 23.632000] RTMP_TimerListAdd: add timer obj c0d289f8!
[ 23.644000] RTMP_TimerListAdd: add timer obj c0d9c150!
[ 23.652000] 3. Phy Mode = 49
[ 23.660000] andes_pci_fw_init
[ 23.664000] 0x1300 = 00073200
[ 23.696000] AntCfgInit: primary/secondary ant 0/1
[ 23.704000] andes_load_cr:cr_type(2)
[ 23.724000] ChipStructAssign(): MT76x2 hook !
[ 23.732000] RTMPSetPhyMode: channel is out of range, use first channel=0
[ 23.744000] MCS Set = ff ff 00 00 01
[ 23.852000] TX0 power compensation = 0x38
[ 23.860000] TX1 power compensation = 0x38
[ 25.588000] RTMP_TimerListAdd: add timer obj c0d9c728!
[ 25.804000] mt76x2_bbp_adjust():rf_bw=2, ext_ch=1, PrimCh=36, HT-CentCh=38, VHT-CentCh=42
[ 25.876000] APStartUp(): AP Set CentralFreq at 42(Prim=36, HT-CentCh=38, VHT-CentCh=42, BBP_BW=2)
[ 25.908000] mt76x2_calibration(channel = 42)
[ 26.308000] The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
[ 26.324000] Main bssid = 38:6b:1c:70:e8:41
[ 26.332000] mt76x2_reinit_agc_gain:original agc_vga0 = 0x54, agc_vga1 = 0x54
[ 26.344000] mt76x2_reinit_agc_gain:updated agc_vga0 = 0x54, agc_vga1 = 0x54
[ 26.360000] mt76x2_reinit_hi_lna_gain:original hi_lna0 = 0x2b, hi_lna1 = 0x2b
[ 26.376000] mt76x2_reinit_hi_lna_gain:updated hi_lna0 = 0x2b, hi_lna1 = 0x2b
[ 26.388000] original vga value(chain0) = 54
[ 26.396000] original vga value(chain1) = 54
[ 26.404000] <==== rt28xx_init, Status=0
[ 26.416000] RTMPDrvOpen(1):Check if PDMA is idle!
[ 26.428000] RTMPDrvOpen(2):Check if PDMA is idle!
[ 26.436000] rt28xx_open pAd= 0xc0d01000
[ 28.084000] device rai0 entered promiscuous mode
[ 28.096000] br-lan: port 5(rai0) entered forwarding state
[ 28.108000] br-lan: port 5(rai0) entered forwarding state
[ 28.856000] *TX_BCN DESC a2971000 size = 320
[ 28.868000] *RX[0] DESC a2975000 size = 2048
[ 28.876000] *RX[1] DESC a2978000 size = 1024
[ 28.904000] *E2pAccessMode=0
[ 28.912000] *cfg_mode=6
[ 28.916000] *cfg_mode=6
[ 28.920000] *wmode_band_equal(): Band Equal!
[ 28.944000] *APSDCapable[0]=0
[ 28.948000] *APSDCapable[1]=0
[ 28.956000] *APSDCapable[2]=0
[ 28.960000] *APSDCapable[3]=0
[ 28.968000] *APSDCapable[4]=0
[ 28.972000] *APSDCapable[5]=0
[ 28.980000] *APSDCapable[6]=0
[ 28.984000] *APSDCapable[7]=0
[ 28.992000] *APSDCapable[8]=0
[ 28.996000] *APSDCapable[9]=0
[ 29.004000] *APSDCapable[10]=0
[ 29.008000] *APSDCapable[11]=0
[ 29.016000] *APSDCapable[12]=0
[ 29.020000] *APSDCapable[13]=0
[ 29.028000] *APSDCapable[14]=0
[ 29.032000] *APSDCapable[15]=0
[ 29.040000] *default ApCliAPSDCapable[0]=0
[ 29.256000] *Key1Str is Invalid key length(0) or Type(0)
[ 29.268000] *Key1Str is Invalid key length(0) or Type(0)
[ 29.276000] *Key2Str is Invalid key length(0) or Type(0)
[ 29.288000] *Key2Str is Invalid key length(0) or Type(0)
[ 29.300000] *Key3Str is Invalid key length(0) or Type(0)
[ 29.308000] *Key3Str is Invalid key length(0) or Type(0)
[ 29.320000] *Key4Str is Invalid key length(0) or Type(0)
[ 29.332000] *Key4Str is Invalid key length(0) or Type(0)
[ 29.384000] *RTMPSetDefaultChannel() : default channel to 36
[ 29.396000] *load fw image from fw_header_image
[ 29.404000] *AndesMTLoadFwMethod1(2174)::pChipCap->fw_len(62800)
[ 29.416000] **2*0*1*5*0*1*1*5*CmdAddressLenReq:(ret = 0)
[ 29.428000] *CmdFwStartReq: override = 1, address = 1048576
[ 29.440000] *CmdStartDLRsp: WiFI FW Download Success
[ 29.456000] *MtAsicDMASchedulerInit(): DMA Scheduler Mode=0(LMAC)
[ 29.468000] efuse_probe: efuse = 10000002
[ 29.476000] *RtmpChipOpsEepromHook::e2p_type=2, inf_Type=4
[ 29.484000] *RtmpEepromGetDefault::e2p_dafault=2
[ 29.496000] *RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 2
[ 29.508000] *NVM is FLASH mode
[ 29.516000] *1. Phy Mode = 8
[ 29.684000] *Country Region from e2p = ffff
[ 29.692000] tssi_1_target_pwr_g_band = 36
[ 29.700000] *2. Phy Mode = 8
[ 29.708000] *3. Phy Mode = 8
[ 29.712000] *NICInitPwrPinCfg(11): Not support for HIF_MT yet!
[ 29.724000] *NICInitializeAsic(595): Not support rtmp_mac_sys_reset () for HIF_MT yet!
[ 29.740000] *mt_mac_init()-->
[ 29.748000] *MtAsicInitMac()-->
[ 29.752000] *mt7628_init_mac_cr()-->
[ 29.760000] *MtAsicSetMacMaxLen(1196): Set the Max RxPktLen=1024!
[ 29.772000] *<--mt_mac_init()
[ 29.780000] * WTBL Segment 1 info:
[ 29.788000] * MemBaseAddr/FID:0x28000/0
[ 29.792000] * EntrySize/Cnt:32/128
[ 29.800000] * WTBL Segment 2 info:
[ 29.808000] * MemBaseAddr/FID:0x40000/0
[ 29.816000] * EntrySize/Cnt:64/128
[ 29.824000] * WTBL Segment 3 info:
[ 29.828000] * MemBaseAddr/FID:0x42000/64
[ 29.836000] * EntrySize/Cnt:64/128
[ 29.844000] * WTBL Segment 4 info:
[ 29.852000] * MemBaseAddr/FID:0x44000/128
[ 29.860000] * EntrySize/Cnt:32/128
[ 29.868000] *AntCfgInit(2492): Not support for HIF_MT yet!
[ 29.876000] *RTMPSetPhyMode(): channel out of range, use first ch=1
[ 29.888000] *MCS Set = ff ff 00 00 01
[ 29.896000] *MtAsicSetChBusyStat(809): Not support for HIF_MT yet!
[ 29.916000] *mt7628_switch_channel(): Switch to Ch#1(2T2R), BBP_BW=0
[ 30.112000] br-lan: port 5(rai0) entered forwarding state
[ 30.148000] *mt7628_switch_channel(): Switch to Ch#2(2T2R), BBP_BW=0
[ 30.308000] *CmdSlotTimeSet:(ret = 0)
[ 30.368000] *mt7628_switch_channel(): Switch to Ch#3(2T2R), BBP_BW=0
[ 30.584000] *mt7628_switch_channel(): Switch to Ch#4(2T2R), BBP_BW=0
[ 30.800000] *mt7628_switch_channel(): Switch to Ch#5(2T2R), BBP_BW=0
[ 31.024000] *mt7628_switch_channel(): Switch to Ch#6(2T2R), BBP_BW=0
[ 31.240000] *mt7628_switch_channel(): Switch to Ch#7(2T2R), BBP_BW=0
[ 31.456000] *mt7628_switch_channel(): Switch to Ch#8(2T2R), BBP_BW=0
[ 31.672000] *mt7628_switch_channel(): Switch to Ch#9(2T2R), BBP_BW=0
[ 31.888000] *mt7628_switch_channel(): Switch to Ch#10(2T2R), BBP_BW=0
[ 32.116000] *mt7628_switch_channel(): Switch to Ch#11(2T2R), BBP_BW=0
[ 32.336000] *mt7628_switch_channel(): Switch to Ch#12(2T2R), BBP_BW=0
[ 32.560000] *mt7628_switch_channel(): Switch to Ch#13(2T2R), BBP_BW=0
[ 32.772000] *[PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
[ 32.784000] *[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
[ 32.796000] *[PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
[ 32.808000] *MtAsicSetRalinkBurstMode(2787): Not support for HIF_MT yet!
[ 32.820000] *MtAsicSetPiggyBack(746): Not support for HIF_MT yet!
[ 32.856000] *mt7628_switch_channel(): Switch to Ch#8(2T2R), BBP_BW=1
[ 32.868000] *MtAsicSetTxPreamble(2766): Not support for HIF_MT yet!
[ 32.884000] *MtAsicAddSharedKeyEntry(1263): Not support for HIF_MT yet!
[ 32.896000] *MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
[ 32.912000] *Main bssid = 38:6b:1c:70:e8:40
[ 32.920000] <==== rt28xx_init, Status=0
[ 34.644000] device ra0 entered promiscuous mode
[ 34.652000] br-lan: port 6(ra0) entered forwarding state
[ 34.664000] br-lan: port 6(ra0) entered forwarding state
[ 34.916000] [stat]Lan ip: C0A80101, Lan mask: FFFFFF00
[ 34.928000] [stat]wan dev name: eth0.2
wlan has already started in etc/init.d/network script.
ated has already started in etc/init.d/ated script.
not ap mode, ignored.
not ap mode, ignored.
[ 36.668000] br-lan: port 6(ra0) entered forwarding state
Loading defaults
Loading redirects
Loading dmz
Loading forbidhost
Loading localmanage
Loading remotemanage
Loading parentctl
Loading accessctl
Loading hostctrl
Loading includes
RTNETLINK answers: No such file or directory
RTNETLINK answers: No such file or directory
RTNETLINK answers: No such file or directory
[tc.lua] the current state of guest is down.
[tc.lua] the current state of guest is down.

starting pid 386, tty '/dev/ttyS1': '/bin/login'
SLP login:
SLP login:
SLP login:
SLP login:
SLP login:
SLP login:
Login timed ou
Please press Enter to activate this console.

to enter to uboot need connect uart 57601 8-n-1
power AC12v1 then input 'slp' as soon as possible because it only wait 5 seconds

may be whoes know how make firmware image to flash this router without uart ?

If there's no device specific fw available, I wouldn't attempt to flash it without serial console access.

I also assume mt7162e = mt7612e ?

Your device looks just like the Mercury MAC1200R, but the chipset is completely different.

Mercury MAC1200R very same device.but i need flash more then one devices

Can't be same, because it a completely different SoC.

https://openwrt.org/toh/hwdata/mercury/mercury_mac1200r_v2 this same devices

Ah, I was thinking of v1, since I've got one of those, didn't know they released a v2.

In that case, you could try the v2 firmware.
I still wouldn't do it without a serial connection, as backup, even if it'd be doable
without one, at least for the 1st flash.