V2 of Cudy WR1000

I just purchased a Cudy WR1000 router to upgrade to OpenWRT and while the hardware appears to be identical to the V1 hardware the firmware says it is a V2 system and will not load the OpenWRT fimrware. I am willing to experiment.

Attaching a serial port to the header got me this:

                                
                                                                             
[04010D08][04010D09]                                                         
DDR Calibration DQS reg = 00008988                                           
                                                                             
                                                                             
U-Boot 1.1.3 (Oct 26 2019 - 17:46:11)                                        
                                        
Board: Ralink APSoC DRAM:  64 MB        
relocate_code Pointer at: 83fac000      
flash manufacture id: ef, device id 40 17
find flash: W25Q64BV                    
============================================ 
Ralink UBoot Version: 4.3.0.0
-------------------------------------------- 
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Oct 26 2019  Time:17:46:11
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 580 MHZ #### 
 estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!gpiomode2 00000555.

continue to starting system.
 0 


U-Boot 1.1.3 (Oct 26 2019 - 17:41:51)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb8000
flash manufacture id: ef, device id 40 17
find flash: W25Q64BV
============================================ 
Ralink UBoot Version: 4.3.0.0
-------------------------------------------- 
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Oct 26 2019  Time:17:41:51
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 580 MHZ #### 
 estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
continue to starting system.
 0 
disable switch phyport...
do_bootm:argc=2, addr=0xbc050000
## Booting image at bc050000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 8000c150) ...
## Giving linux memsize in MB, 64

Starting kernel ...


LINUX started...

 THIS IS ASIC

The PCB still reads as V1.0 in the silkscreen, the firmware upload page says:

Firmware: 1.0 B191026 R64625
Hardware: WR1000 V2

Any help on how to create a version for this hardware would be greatly appreciated.

Mike

Full boot log of stock firmware may help...

What I posted is all the comes out the serial port (did it twice) - any suggestion on how to get more?

I also tried updating the firmware with the serial port attached, I did not get any error or other status messages. I realize most boot screens are longer, but this is what I've got.

No kernel boot log, no uboot interactive menu. It will be difficult to build and flash firmware for your device.
As example see Support for Linksys E2500 V4 topic.
If your router have emegency recovery you can try openwrt image for version 1.

I will look that over and try to get more info over the weekend; I am committed to spending today visiting used bookstores with one of my daughters today. Thanks

Hello,
I wrote the original Cudy WR1000 V1 commit.
I don't own this new version, but an user emailed me about it and we were working on it.
We found that the V2 uses the tp-link header style. He was able to stop the boot pressing 4.
He entered in the U-boot console and tftbooted this image: https://mega.nz/#!HZpjzbBB!Pl-nmHh2qAwoRgxBIBLHCM7in8TuTFn97k-leNUuaBY
Could you try this? If it works, DO NOT FLASH THIS IMAGE, just tftpboot it and do a full backup of the flash.

I am perfectly willing to try this, but, I could use a little more detail in the instructions:

  1. tftbooted
  2. full backup

If these are standard operations, excuse my inexperience, please point me to the documentations and I will gladly read it. If these are not documented, a sentence or two on how to do this would be greatly appreciated.

Also, if you provide an address, I will gladly obtain another and mail it to you should you care to support this more directly. It would be cheap postage, don't expect it tomorrow.

Mike

Don't worry we all started from zero. :slightly_smiling_face: To boot an initramfs image you have to install an tftp server on your pc. Depending on your system you have to use different programs (on windows I use tftpd64 on linux i use tftpd-hpa). In general you have to:

  • put the firmware i sent you in the folder specified by the program you choose
  • connect your router directly to your pc with an ethernet cable
  • set your ip address to 192.168.10.168 (static address)
  • boot you router and press 4 repeatedly untill you are in the u-boot console
  • type: "tftpboot 0x81000000 firmware.bin" (replace firmware.bin with the name of the firmware or simply rename the file I sent)
  • your router should download the image from your pc.
  • after that type "bootm 0x81000000" and it should boot into openwrt.

You can read more here: https://openwrt.org/docs/guide-user/troubleshooting/tftpserver

To do a backup, you have to go to "System" and save every mtdblock of your system.

The other user I sent this image managed to boot it, but he had problems with the ethernet connection. Let me know.

Thank you for your kindness but I am from Italy :slightly_smiling_face: I don't know where you come from, but I think that the shipping costs will be higher than the router itself. :sweat_smile:
However, I think that probably we are near a full working image. :wink:

Davide

I got everything set up and here is the console output from the serial port:

[04010D07][04010D09]
                                                                                
DDR Calibration DQS reg = 00008988                                              
                                                                                
                                                                                
U-Boot 1.1.3 (Oct 26 2019 - 17:46:11)                                           
                                                                                
Board: Ralink APSoC DRAM:  64 MB                                                
relocate_code Pointer at: 83fac000                                              
flash manufacture id: ef, device id 40 17                                       
find flash: W25Q64BV                                                            
============================================                                    
Ralink UBoot Version: 4.3.0.0                                                   
--------------------------------------------                                    
ASIC 7628_MP (Port5<->None)                                                     
DRAM component: 512 Mbits DDR, width 16                                         
DRAM bus: 16 bit                                                                
Total memory: 64 MBytes                                                         
Flash component: SPI Flash                                                      
Date:Oct 26 2019  Time:17:46:11                                                 
============================================                                    
icache: sets:512, ways:4, linesz:32 ,total:65536                                
dcache: sets:256, ways:4, linesz:32 ,total:32768                                
                                                                                
 ##### The CPU freq = 580 MHZ ####                                              
 estimate memory size =64 Mbytes                                                
RESET MT7628 PHY!!!!!!gpiomode2 00000555.                                       
 0                                                                              
TODO, Read MAC Address from Flash                                               
                                                                                
switch BootType:                                                                
                                                                                
4: System Enter Boot Command Line Interface.                                    
                                                                                
U-Boot 1.1.3 (Oct 26 2019 - 17:46:11)                                           
MT7628 # tftpboot 0x81000000 firmware.bin                                       
                                                                                
 netboot_common, argc= 3                                                        
                                                                                
 NetTxPacket = 0x83FE43C0                                                       
                                                                                
 KSEG1ADDR(NetTxPacket) = 0xA3FE43C0                                            
                                                                                
 NetLoop,call eth_halt !                                                        
                                                                                
 NetLoop,call eth_init !                                                        
Trying Eth0 (10/100-M)                                                          
                                                                                
 Waitting for RX_DMA_BUSY status Start... done                                  
                                                                                
                                                                                
 ETH_STATE_ACTIVE!!                                                             
TFTP from server 192.168.10.168; our IP address is 192.168.10.166               
Filename 'firmware.bin'.                                                        
                                                                                
 TIMEOUT_COUNT=10,Load address: 0x81000000                                      
Loading: checksum bad                                                           
checksum bad                                                                    
Got ARP REPLY, set server/gtwy eth addr (00:21:70:b3:bf:a0)                     
Got it                                                                          
#################################################################               
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #########################################################              
done                                                                            
Bytes transferred = 4282685 (41593d hex)                                        
NetBootFileXferSize= 0041593d                                                   
MT7628 # bootm 0x81000000                                                       
do_bootm:argc=2, addr=0x81000000                                                
## Booting image at 81000000 ...                                                
   Uncompressing Kernel Image ... OK                                            
No initrd                                                                       
## Transferring control to Linux (at address 80000000) ...                      
## Giving linux memsize in MB, 64                                               
                                                                                
Starting kernel ...                                                             
                                                                                
[    0.000000] Linux version 4.14.167 (fiore@fiore-FISSO-UBUNTU20) (gcc version0
[    0.000000] Board has DDR2                                                   
[    0.000000] Analog PMU set to hw control                                     
[    0.000000] Digital PMU set to hw control                                    
[    0.000000] SoC Type: MediaTek MT7628AN ver:1 eco:2                          
[    0.000000] bootconsole [early0] enabled                                     
[    0.000000] CPU0 revision is: 00019655 (MIPS 24KEc)                          
[    0.000000] MIPS: machine is Cudy WR1000 v1                                  
[    0.000000] Determined physical RAM map:                                     
[    0.000000]  memory: 04000000 @ 00000000 (usable)                            
[    0.000000] Initrd not found or empty - disabling initrd                     
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.  
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bys
[    0.000000] Zone ranges:                                                     
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff]           
[    0.000000] Movable zone start for each node                                 
[    0.000000] Early memory node ranges                                         
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000003ffffff]          
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff] 
[    0.000000] random: get_random_bytes called from start_kernel+0x98/0x4a0 wit0
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 16240     
[    0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jf2
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)              
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)    
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)     
[    0.000000] Writing ErrCtl register=00000001                                 
[    0.000000] Readback ErrCtl register=00000001                                
[    0.000000] Memory: 55876K/65536K available (3918K kernel code, 182K rwdata,)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1       
[    0.000000] NR_IRQS: 256                                                     
[    0.000000] intc: using register map from devicetree                         
[    0.000000] CPU Clock: 580MHz                                                
[    0.000000] timer_probe: no matching timers found                            
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_s
[    0.000009] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405s
[    0.007537] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)          
[    0.073499] pid_max: default: 32768 minimum: 301                             
[    0.078204] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)      
[    0.084560] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes) 
[    0.097236] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, ms
[    0.106750] futex hash table entries: 256 (order: -1, 3072 bytes)            
[    0.112730] pinctrl core: initialized pinctrl subsystem                      
[    0.118788] NET: Registered protocol family 16                               
[    0.231336] mt7620-pci 10140000.pcie: Port 0 N_FTS = 1b105000                
[    0.386624] PCI host bridge /pcie@10140000 ranges:                           
[    0.391211]  MEM 0x0000000020000000..0x000000002fffffff                      
[    0.396226]   IO 0x0000000010160000..0x000000001016ffff                      
[    0.420966] mt7621_gpio 10000600.gpio: registering 32 gpios                  
[    0.426632] mt7621_gpio 10000600.gpio: registering 32 gpios                  
[    0.432135] mt7621_gpio 10000600.gpio: registering 32 gpios                  
[    0.438388] PCI host bridge to bus 0000:00                                   
[    0.442294] pci_bus 0000:00: root bus resource [mem 0x20000000-0x2fffffff]   
[    0.448976] pci_bus 0000:00: root bus resource [io  0xffffffff]              
[    0.454635] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]    
[    0.461201] pci_bus 0000:00: No busn resource found for root bus, will use []
[    0.469277] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reg
[    0.477697] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]      
[    0.484028] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]  
[    0.490801] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]    
[    0.497302] pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pre]
[    0.504289] pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]    
[    0.510833] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64b]
[    0.517914] pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pre]
[    0.524852] pci 0000:00:00.0: PCI bridge to [bus 01]                         
[    0.529660] pci 0000:00:00.0:   bridge window [mem 0x20000000-0x200fffff]    
[    0.536193] pci 0000:00:00.0:   bridge window [mem 0x20100000-0x201fffff pre]
[    0.548260] clocksource: Switched to clocksource MIPS                        
[    0.554379] NET: Registered protocol family 2                                
[    0.559408] TCP established hash table entries: 1024 (order: 0, 4096 bytes)  
[    0.566100] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)         
[    0.572291] TCP: Hash tables configured (established 1024 bind 1024)         
[    0.578548] UDP hash table entries: 256 (order: 0, 4096 bytes)               
[    0.584148] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)          
[    0.590559] NET: Registered protocol family 1                                
[    2.598267] random: fast init done                                           
[    5.108671] Crashlog allocated RAM at address 0x3f00000                      
[    5.115499] workingset: timestamp_bits=14 max_order=14 bucket_order=0        
[    5.128403] squashfs: version 4.0 (2009/01/31) Phillip Lougher               
[    5.133979] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORI.
[    5.179555] io scheduler noop registered                                     
[    5.183286] io scheduler deadline registered (default)                       
[    5.189105] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled         
[    5.196273] console [ttyS0] disabled                                         
[    5.199778] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 28, base_baudA
[    5.208506] console [ttyS0] enabled                                          
[    5.208506] console [ttyS0] enabled                                          
[    5.215492] bootconsole [early0] disabled                                    
[    5.215492] bootconsole [early0] disabled                                    
[    5.224899] spi-mt7621 10000b00.spi: sys_freq: 193333333                     
[    5.244366] m25p80 spi0.0: s25fl064k (8192 Kbytes)                           
[    5.249308] 4 fixed-partitions partitions found on MTD device spi0.0         
[    5.255748] Creating 4 MTD partitions on "spi0.0":                           
[    5.260636] 0x000000000000-0x000000030000 : "u-boot"                         
[    5.266589] 0x000000030000-0x000000040000 : "u-boot-env"                     
[    5.272894] 0x000000040000-0x000000050000 : "factory"                        
[    5.278925] 0x000000050000-0x000000800000 : "firmware"                       
[    5.300981] libphy: Fixed MDIO Bus: probed                                   
[    5.313879] rt3050-esw 10110000.esw: link changed 0x00                       
[    5.322388] mtk_soc_eth 10100000.ethernet: generated random MAC address 5e:9c
[    5.331407] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb5
[    5.341544] NET: Registered protocol family 10                               
[    5.350280] Segment Routing with IPv6                                        
[    5.354101] NET: Registered protocol family 17                               
[    5.358754] 8021q: 802.1Q VLAN Support v1.8                                  
[    5.385617] Freeing unused kernel memory: 3700K                              
[    5.390253] This architecture does not have kernel memory protection.        
[    5.412147] init: Console is alive                                           
[    5.415846] init: - watchdog -                                               
[    5.442589] kmodloader: loading kernel modules from /etc/modules-boot.d/*    
[    5.455326] kmodloader: done loading kernel modules from /etc/modules-boot.d*
[    5.473252] init: - preinit -                                                
[    5.654399] rt3050-esw 10110000.esw: link changed 0x00                       
[    5.704929] random: procd: uninitialized urandom read (4 bytes read)         
Press the [f] key and hit [enter] to enter failsafe mode                        
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level    
[    9.440797] rt3050-esw 10110000.esw: link changed 0x10                       
[    9.859084] procd: - early -                                                 
[    9.862158] procd: - watchdog -                                              
[   10.425310] procd: - watchdog -                                              
[   10.428921] procd: - ubus -                                                  
[   10.439333] random: ubusd: uninitialized urandom read (4 bytes read)         
[   10.482428] random: ubusd: uninitialized urandom read (4 bytes read)         
[   10.489483] random: ubusd: uninitialized urandom read (4 bytes read)         
[   10.496967] procd: - init -                                                  
Please press Enter to activate this console.                                    
[   11.012139] kmodloader: loading kernel modules from /etc/modules.d/*         
[   11.043597] ip6_tables: (C) 2000-2006 Netfilter Core Team                    
[   11.066977] Loading modules backported from Linux version v5.4-rc8-0-gaf42d3c
[   11.074732] Backport generated by backports.git v5.4-rc8-1-0-g368e8c51       
[   11.100939] ip_tables: (C) 2000-2006 Netfilter Core Team                     
[   11.126588] nf_conntrack version 0.5.0 (1024 buckets, 4096 max)              
[   11.252155] xt_time: kernel timezone is -0000                                
[   11.377134] mt76_wmac 10300000.wmac: ASIC revision: 76280001                 
[   11.399195] mt76_wmac 10300000.wmac: Invalid MAC address, using random addre7
[   11.504360] urngd: v1.0.2 started.                                           
[   11.704714] random: crng init done                                           
[   11.708171] random: 6 urandom warning(s) missed due to ratelimiting          
[   12.419672] mt76_wmac 10300000.wmac: Firmware Version: 20151201              
[   12.425690] mt76_wmac 10300000.wmac: Build Time: 20151201183641              
[   12.468282] mt76_wmac 10300000.wmac: firmware init done                      
[   12.690090] mt76x2e 0000:01:00.0: card - bus=0x1, slot = 0x0 irq=4           
[   12.696597] mt76x2e 0000:01:00.0: ASIC revision: 76120044                    
[   12.728413] mt76x2e 0000:01:00.0: EEPROM data check failed: ffff             
[   13.368405] mt76x2e 0000:01:00.0: Invalid MAC address, using random address 7
[   13.389019] mt76x2e 0000:01:00.0: ROM patch build: 20141115060606a           
[   13.427618] mt76x2e 0000:01:00.0: Firmware Version: 0.0.00                   
[   13.433285] mt76x2e 0000:01:00.0: Build: 1                                   
[   13.437438] mt76x2e 0000:01:00.0: Build Time: 201507311614____               
                                                                               

That is as far as it goes, at this point there is no link on the Ethernet, I have tried other computers, the router does not bring up the Ethernet ports and I have tried all the Ethernet ports too, both WAN and LAN. Also, a scan app on my Android phone does not find any unknown SSID so I don't think that is running either. I tried this several times.

Also, I have checked and the hardware does look identical to the V1 picture posted on the OpenWRT device page. Certainly the part number that I can read are the same and I did notice and changes to the routes, though to be honest I am not the best netlist checker with just my eyes. It does read V1.0 in the silkscreen still.

Mike

Show ouput of commands:

swconfig dev switch0 show
ifconfig -a

This is more than you asked for, but:

  1. If I let it boot until it stops the console does not respond.
  2. To get around the above, I hit "f" and went into failsafe

If this is not what I was supposed to do, let me know. I am really grateful for the help. Now for the log:


Press the [f] key and hit [enter] to enter failsafe mode                        
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level    
f                                                                               
- failsafe -                                                                    
[    6.597921] random: dropbearkey: uninitialized urandom read (32 bytes read)  
Generating 1024 [    6.606691] random: dropbearkey: uninitialized urandom read )
bit rsa key, this may take a while...                                           
[    8.145773] random: dropbearkey: uninitialized urandom read (32 bytes read)  
Public key portion is:                                                          
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQCsN/lPsICgt+drxmmv[    8.161225] random: )
YDhunqd0x9o2Xyh3/LHdUVHXzwBJV6vLaxOyyEuDTEcO/A1+nyS4/1kHwVxLTR9knVeXiR+oQ/ilAJ6)
Fingerprint: sha1!! 42:81:bb:81:ed:63:2c:50:88:d3:30:ee:ba:c4:4c:c0:41:50:55:68 
                                                                                
                                                                                
BusyBox v1.31.1 () built-in shell (ash)                                         
                                                                                
ash: can't access tty; job control turned off                                   
  _______                     ________        __                                
 |       |.-----.-----.-----.|  |  |  |.----.|  |_                              
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|                             
 |_______||   __|_____|__|__||________||__|  |____|                             
          |__| W I R E L E S S   F R E E D O M                                  
 -----------------------------------------------------                          
 OpenWrt SNAPSHOT, r12171-ae61d21ca3                                            
 -----------------------------------------------------                          
================= FAILSAFE MODE active ================                         
special commands:                                                               
* firstboot          reset settings to factory defaults                         
* mount_root     mount root-partition with config files                         
                                                                                
after mount_root:                                                               
* passwd                         change root's password                         
* /etc/config               directory with config files                         
                                                                                
for more help see:                                                              
https://openwrt.org/docs/guide-user/troubleshooting/                            
- failsafe_and_factory_reset                                                    
- root_password_reset                                                           
=======================================================                         
                                                                                
root@(none):/# [    9.342125] rt3050-esw 10110000.esw: link changed 0x08        
                                                                                
root@(none):/# swconfig dev switch0 show                                        
Global attributes:                                                              
        enable_vlan: 0                                                          
        alternate_vlan_disable: 0                                               
        bc_storm_protect: 0                                                     
        led_frequency: 0                                                        
Port 0:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: 5                                                                  
        lan: 1                                                                  
        recv_bad: 0                                                             
        recv_good: 0                                                            
        tr_bad: 0                                                               
        tr_good: 0                                                              
        pvid: 0                                                                 
        link: port:0 link:down                                                  
Port 1:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: 5                                                                  
        lan: 1                                                                  
        recv_bad: 0                                                             
        recv_good: 0                                                            
        tr_bad: 0                                                               
        tr_good: 0                                                              
        pvid: 0                                                                 
        link: port:1 link:down                                                  
Port 2:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: 5                                                                  
        lan: 1                                                                  
        recv_bad: 0                                                             
        recv_good: 0                                                            
        tr_bad: 0                                                               
        tr_good: 0                                                              
        pvid: 0                                                                 
        link: port:2 link:down                                                  
Port 3:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: 5                                                                  
        lan: 1                                                                  
        recv_bad: 0                                                             
        recv_good: 14                                                           
        tr_bad: 0                                                               
        tr_good: 2                                                              
        pvid: 0                                                                 
        link: port:3 link:up speed:100baseT full-duplex                         
Port 4:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: 5                                                                  
        lan: 0                                                                  
        recv_bad: 0                                                             
        recv_good: 0                                                            
        tr_bad: 0                                                               
        tr_good: 0                                                              
        pvid: 0                                                                 
        link: port:4 link:down                                                  
Port 5:                                                                         
        disable: 1                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: ???                                                                
        lan: 1                                                                  
        recv_bad: 0                                                             
        recv_good: 0                                                            
        tr_bad: 0                                                               
        tr_good: 0                                                              
        pvid: 0                                                                 
        link: port:5 link:down                                                  
Port 6:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: ???                                                                
        lan: ???                                                                
        recv_bad: ???                                                           
        recv_good: ???                                                          
        tr_bad: ???                                                             
        tr_good: ???                                                            
        pvid: 0                                                                 
        link: port:6 link:up speed:1000baseT full-duplex                        
VLAN 0:                                                                         
        ports: 0 1 2 3 4 5 6                                                    
root@(none):/# ifconfig -a                                                      
eth0      Link encap:Ethernet  HWaddr A6:C9:D4:F1:36:D2                         
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0        
          inet6 addr: fe80::a4c9:d4ff:fef1:36d2/64 Scope:Link                   
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1                    
          RX packets:14 errors:0 dropped:0 overruns:0 frame:0                   
          TX packets:12 errors:0 dropped:0 overruns:0 carrier:0                 
          collisions:0 txqueuelen:1000                                          
          RX bytes:1762 (1.7 KiB)  TX bytes:2882 (2.8 KiB)                      
          Interrupt:5                                                           
                                                                                
lo        Link encap:Local Loopback                                             
          LOOPBACK  MTU:65536  Metric:1                                         
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0                    
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0                  
          collisions:0 txqueuelen:1000                                          
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)                                
                                                                                
root@(none):/# [  119.149669] rt3050-esw 10110000.esw: link changed 0x00        
[  127.738318] random: crng init done                                           


Again, thanks

And more info, I had unplugged the Ethernet from the router so I could get to the forum to read your instructions. I noticed that in failsafe mode I do get link, so I ran the commands again with the Ethernet plugged into my laptop.

Here is the log with the WAN port plugged in:

                
root@(none):/# [  697.889295] rt3050-esw 10110000.esw: link changed 0x00        
[  838.144535] rt3050-esw 10110000.esw: link changed 0x10                       
root@(none):/# swconfig dev switch0 show                                        
Global attributes:                                                              
        enable_vlan: 0                                                          
        alternate_vlan_disable: 0                                               
        bc_storm_protect: 0                                                     
        led_frequency: 0                                                        
Port 0:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: 5                                                                  
        lan: 1                                                                  
        recv_bad: 0                                                             
        recv_good: 0                                                            
        tr_bad: 0                                                               
        tr_good: 0                                                              
        pvid: 0                                                                 
        link: port:0 link:down                                                  
Port 1:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: 5                                                                  
        lan: 1                                                                  
        recv_bad: 0                                                             
        recv_good: 0                                                            
        tr_bad: 0                                                               
        tr_good: 0                                                              
        pvid: 0                                                                 
        link: port:1 link:down                                                  
Port 2:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: 5                                                                  
        lan: 1                                                                  
        recv_bad: 0                                                             
        recv_good: 0                                                            
        tr_bad: 0                                                               
        tr_good: 0                                                              
        pvid: 0                                                                 
        link: port:2 link:down                                                  
Port 3:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: 5                                                                  
        lan: 1                                                                  
        recv_bad: 0                                                             
        recv_good: 74                                                           
        tr_bad: 0                                                               
        tr_good: 4                                                              
        pvid: 0                                                                 
        link: port:3 link:down                                                  
Port 4:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: 5                                                                  
        lan: 0                                                                  
        recv_bad: 0                                                             
        recv_good: 52                                                           
        tr_bad: 0                                                               
        tr_good: 0                                                              
        pvid: 0                                                                 
        link: port:4 link:up speed:100baseT full-duplex                         
Port 5:                                                                         
        disable: 1                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: ???                                                                
        lan: 1                                                                  
        recv_bad: 0                                                             
        recv_good: 0                                                            
        tr_bad: 0                                                               
        tr_good: 0                                                              
        pvid: 0                                                                 
        link: port:5 link:down                                                  
Port 6:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: ???                                                                
        lan: ???                                                                
        recv_bad: ???                                                           
        recv_good: ???                                                          
        tr_bad: ???                                                             
        tr_good: ???                                                            
        pvid: 0                                                                 
        link: port:6 link:up speed:1000baseT full-duplex                        
VLAN 0:                                                                         
        ports: 0 1 2 3 4 5 6                                                    
root@(none):/# ifconfig -a                                                      
eth0      Link encap:Ethernet  HWaddr A6:C9:D4:F1:36:D2                         
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0        
          inet6 addr: fe80::a4c9:d4ff:fef1:36d2/64 Scope:Link                   
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1                    
          RX packets:126 errors:0 dropped:0 overruns:0 frame:0                  
          TX packets:15 errors:0 dropped:0 overruns:0 carrier:0                 
          collisions:0 txqueuelen:1000                                          
          RX bytes:15112 (14.7 KiB)  TX bytes:3092 (3.0 KiB)                    
          Interrupt:5                                                           
                                                                                
lo        Link encap:Local Loopback                                             
          LOOPBACK  MTU:65536  Metric:1                                         
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0                    
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0                  
          collisions:0 txqueuelen:1000                                          
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)                                
                                                                                
root@(none):/# 

Here is LAN1 plugged in:

[  922.018015] rt3050-esw 10110000.esw: link changed 0x00





















                                                                                
[  925.221516] rt3050-esw 10110000.esw: link changed 0x08                       
root@(none):/# swconfig dev switch0 show                                        
Global attributes:                                                              
        enable_vlan: 0                                                          
        alternate_vlan_disable: 0                                               
        bc_storm_protect: 0                                                     
        led_frequency: 0                                                        
Port 0:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: 5                                                                  
        lan: 1                                                                  
        recv_bad: 0                                                             
        recv_good: 0                                                            
        tr_bad: 0                                                               
        tr_good: 0                                                              
        pvid: 0                                                                 
        link: port:0 link:down                                                  
Port 1:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: 5                                                                  
        lan: 1                                                                  
        recv_bad: 0                                                             
        recv_good: 0                                                            
        tr_bad: 0                                                               
        tr_good: 0                                                              
        pvid: 0                                                                 
        link: port:1 link:down                                                  
Port 2:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: 5                                                                  
        lan: 1                                                                  
        recv_bad: 0                                                             
        recv_good: 0                                                            
        tr_bad: 0                                                               
        tr_good: 0                                                              
        pvid: 0                                                                 
        link: port:2 link:down                                                  
Port 3:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: 5                                                                  
        lan: 1                                                                  
        recv_bad: 0                                                             
        recv_good: 86                                                           
        tr_bad: 0                                                               
        tr_good: 4                                                              
        pvid: 0                                                                 
        link: port:3 link:up speed:100baseT full-duplex                         
Port 4:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: 5                                                                  
        lan: 0                                                                  
        recv_bad: 0                                                             
        recv_good: 56                                                           
        tr_bad: 0                                                               
        tr_good: 0                                                              
        pvid: 0                                                                 
        link: port:4 link:down                                                  
Port 5:                                                                         
        disable: 1                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: ???                                                                
        lan: 1                                                                  
        recv_bad: 0                                                             
        recv_good: 0                                                            
        tr_bad: 0                                                               
        tr_good: 0                                                              
        pvid: 0                                                                 
        link: port:5 link:down                                                  
Port 6:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: ???                                                                
        lan: ???                                                                
        recv_bad: ???                                                           
        recv_good: ???                                                          
        tr_bad: ???                                                             
        tr_good: ???                                                            
        pvid: 0                                                                 
        link: port:6 link:up speed:1000baseT full-duplex                        
VLAN 0:                                                                         
        ports: 0 1 2 3 4 5 6                                                    
root@(none):/# ifconfig -a                                                      
eth0      Link encap:Ethernet  HWaddr A6:C9:D4:F1:36:D2                         
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0        
          inet6 addr: fe80::a4c9:d4ff:fef1:36d2/64 Scope:Link                   
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1                    
          RX packets:142 errors:0 dropped:0 overruns:0 frame:0                  
          TX packets:15 errors:0 dropped:0 overruns:0 carrier:0                 
          collisions:0 txqueuelen:1000                                          
          RX bytes:17068 (16.6 KiB)  TX bytes:3092 (3.0 KiB)                    
          Interrupt:5                                                           
                                                                                
lo        Link encap:Local Loopback                                             
          LOOPBACK  MTU:65536  Metric:1                                         
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0                    
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0                  
          collisions:0 txqueuelen:1000                                          
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)                                
                                                                                
root@(none):/#                                                                 

Finally, LAN2 plugged in

[  987.935170] rt3050-esw 10110000.esw: link changed 0x00





















                                                                                
[  991.782673] rt3050-esw 10110000.esw: link changed 0x04                       
root@(none):/# swconfig dev switch0 show                                        
Global attributes:                                                              
        enable_vlan: 0                                                          
        alternate_vlan_disable: 0                                               
        bc_storm_protect: 0                                                     
        led_frequency: 0                                                        
Port 0:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: 5                                                                  
        lan: 1                                                                  
        recv_bad: 0                                                             
        recv_good: 0                                                            
        tr_bad: 0                                                               
        tr_good: 0                                                              
        pvid: 0                                                                 
        link: port:0 link:down                                                  
Port 1:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: 5                                                                  
        lan: 1                                                                  
        recv_bad: 0                                                             
        recv_good: 0                                                            
        tr_bad: 0                                                               
        tr_good: 0                                                              
        pvid: 0                                                                 
        link: port:1 link:down                                                  
Port 2:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: 5                                                                  
        lan: 1                                                                  
        recv_bad: 0                                                             
        recv_good: 8                                                            
        tr_bad: 0                                                               
        tr_good: 0                                                              
        pvid: 0                                                                 
        link: port:2 link:up speed:100baseT full-duplex                         
Port 3:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: 5                                                                  
        lan: 1                                                                  
        recv_bad: 0                                                             
        recv_good: 88                                                           
        tr_bad: 0                                                               
        tr_good: 4                                                              
        pvid: 0                                                                 
        link: port:3 link:down                                                  
Port 4:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: 5                                                                  
        lan: 0                                                                  
        recv_bad: 0                                                             
        recv_good: 56                                                           
        tr_bad: 0                                                               
        tr_good: 0                                                              
        pvid: 0                                                                 
        link: port:4 link:down                                                  
Port 5:                                                                         
        disable: 1                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: ???                                                                
        lan: 1                                                                  
        recv_bad: 0                                                             
        recv_good: 0                                                            
        tr_bad: 0                                                               
        tr_good: 0                                                              
        pvid: 0                                                                 
        link: port:5 link:down                                                  
Port 6:                                                                         
        disable: 0                                                              
        doubletag: 1                                                            
        untag: 1                                                                
        led: ???                                                                
        lan: ???                                                                
        recv_bad: ???                                                           
        recv_good: ???                                                          
        tr_bad: ???                                                             
        tr_good: ???                                                            
        pvid: 0                                                                 
        link: port:6 link:up speed:1000baseT full-duplex                        
VLAN 0:                                                                         
        ports: 0 1 2 3 4 5 6                                                    
root@(none):/# ifconfig -a                                                      
eth0      Link encap:Ethernet  HWaddr A6:C9:D4:F1:36:D2                         
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0        
          inet6 addr: fe80::a4c9:d4ff:fef1:36d2/64 Scope:Link                   
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1                    
          RX packets:156 errors:0 dropped:0 overruns:0 frame:0                  
          TX packets:15 errors:0 dropped:0 overruns:0 carrier:0                 
          collisions:0 txqueuelen:1000                                          
          RX bytes:18830 (18.3 KiB)  TX bytes:3092 (3.0 KiB)                    
          Interrupt:5                                                           
                                                                                
lo        Link encap:Local Loopback                                             
          LOOPBACK  MTU:65536  Metric:1                                         
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0                    
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0                  
          collisions:0 txqueuelen:1000                                          
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)                                
                                                                                
root@(none):/# 

Not sure if all the captures help, but thought bits were cheap enough to send it all.

Mike

It's very strange that console is broken in normal boot. What are your terminal settings 115200n8 or 57600n8?
In failsafe mode show output of commands:

dd if=/dev/mtd2 count=1 | hexdump -C
dd if=/dev/mtd3 count=1 | hexdump -C

I have the serial port set at 115200 8N1 with hardware flow control disabled.
Output is:

root@(none):/# dd if=/dev/mtd2 count=1 | hexdump -C                             
1+0 records in                                                                  
1+0 records out                                                                 
00000000  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|  
*                                                                               
00000200                                                                        
root@(none):/# dd if=/dev/mtd3 count=1 | hexdump -C                             
00000000  03 00 00 00 76 65 72 2e  20 32 2e 30 00 ff ff ff  |....ver. 2.0....|  
00000010  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|  
*                                                                               
00000030  ff ff ff ff 00 cd 00 01  00 02 00 00 00 00 00 02  |................|  
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|  
00000050  00 00 00 00 ff ff ff ff  ff ff ff ff ff ff ff ff  |................|  
00000060  ff ff ff ff ff ff ff ff  00 00 00 80 50 c1 00 80  |............P...|  
00000070  00 77 00 00 00 00 02 00  00 12 96 44 00 14 00 00  |.w.........D....|  
00000080  00 55 a0 00 00 00 00 00  00 00 00 00 55 aa 01 00  |.U..........U...|  
00000090  a5 00 09 01 ca ce 10 2b  ff ff ff ff ff ff ff ff  |.......+........|  
000000a0  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|  
*                                                                               
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|  
*                                                                               
000001d0  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|  
*                                                                               
1+0 records in                                                                  
1+0 records out                                                                 
00000200                                                                        
root@(none):/# 

Thanks
Mike

Probably the partition layout is wrong.
Could you try this image and in failsafe mode copy the content of /dev/mtd4ro?
You can do it easily in windows using winscp or in linux using scp.

If you can, do a full reset of your router before uploading the image, because it will contain everything saved in your router.

Just to clarify, this image is equal to the previous one, but I defined a new partition to get the whole NOR, so we can analyze the partition layout.

Not quite the results you were expecting I suppose, it crashed on the new firmware:

[04020D07][04020D08]                           
DDR Calibration DQS reg = 00008988                                              
                                                                                
                                                                                
U-Boot 1.1.3 (Oct 26 2019 - 17:46:11)                                           
                                                                                
Board: Ralink APSoC DRAM:  64 MB                                                
relocate_code Pointer at: 83fac000                                              
flash manufacture id: ef, device id 40 17                                       
find flash: W25Q64BV                                                            
============================================                                    
Ralink UBoot Version: 4.3.0.0                                                   
--------------------------------------------                                    
ASIC 7628_MP (Port5<->None)                                                     
DRAM component: 512 Mbits DDR, width 16                                         
DRAM bus: 16 bit                                                                
Total memory: 64 MBytes                                                         
Flash component: SPI Flash                                                      
Date:Oct 26 2019  Time:17:46:11                                                 
============================================                                    
icache: sets:512, ways:4, linesz:32 ,total:65536                                
dcache: sets:256, ways:4, linesz:32 ,total:32768                                
                                                                                
 ##### The CPU freq = 580 MHZ ####                                              
 estimate memory size =64 Mbytes                                                
RESET MT7628 PHY!!!!!!gpiomode2 00000555.                                       
 0                                                                              
TODO, Read MAC Address from Flash                                               
                                                                                
switch BootType:                                                                
                                                                                
4: System Enter Boot Command Line Interface.                                    
                                                                                
U-Boot 1.1.3 (Oct 26 2019 - 17:46:11)                                           
MT7628 # tftpboot 0x81000000 firmware.bin                                       
                                                                                
 netboot_common, argc= 3                                                        
                                                                                
 NetTxPacket = 0x83FE43C0                                                       
                                                                                
 KSEG1ADDR(NetTxPacket) = 0xA3FE43C0                                            
                                                                                
 NetLoop,call eth_halt !                                                        
                                                                                
 NetLoop,call eth_init !                                                        
Trying Eth0 (10/100-M)                                                          
                                                                                
 Waitting for RX_DMA_BUSY status Start... done                                  
                                                                                
                                                                                
 ETH_STATE_ACTIVE!!                                                             
TFTP from server 192.168.10.168; our IP address is 192.168.10.166               
Filename 'firmware.bin'.                                                        
                                                                                
 TIMEOUT_COUNT=10,Load address: 0x81000000                                      
Loading: checksum bad                                                           
checksum bad                                                                    
Got ARP REPLY, set server/gtwy eth addr (00:21:70:b3:bf:a0)                     
Got it                                                                          
#################################################################               
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         ##########################                                             
done                                                                            
Bytes transferred = 4457223 (440307 hex)                                        
NetBootFileXferSize= 00440307                                                   
MT7628 # bootm 0x81000000                                                       
do_bootm:argc=2, addr=0x81000000                                                
## Booting image at 81000000 ...                                                
   Uncompressing Kernel Image ... OK                                            
No initrd                                                                       
## Transferring control to Linux (at address 8000c150) ...                      
## Giving linux memsize in MB, 64                                               
                                                                                
Starting kernel ...                                                             
                                                                                
[    0.000000] Linux version 4.14.167 (fiore@fiore-FISSO-UBUNTU20) (gcc version0
[    0.000000] Board has DDR2                                                   
[    0.000000] Analog PMU set to hw control                                     
[    0.000000] Digital PMU set to hw control                                    
[    0.000000] SoC Type: MediaTek MT7628AN ver:1 eco:2                          
[    0.000000] bootconsole [early0] enabled                                     
[    0.000000] CPU0 revision is: 00019655 (MIPS 24KEc)                          
[    0.000000] MIPS: machine is Cudy WR1000 v2                                  
[    0.000000] Determined physical RAM map:                                     
[    0.000000]  memory: 04000000 @ 00000000 (usable)                            
[    0.000000] Initrd not found or empty - disabling initrd                     
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.  
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bys
[    0.000000] Zone ranges:                                                     
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff]           
[    0.000000] Movable zone start for each node                                 
[    0.000000] Early memory node ranges                                         
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000003ffffff]          
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff] 
[    0.000000] random: get_random_bytes called from start_kernel+0x98/0x4a0 wit0
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 16240     
[    0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jf2
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)              
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)    
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)     
[    0.000000] Writing ErrCtl register=00000003                                 
[    0.000000] Readback ErrCtl register=00000003                                
[    0.000000] Memory: 58372K/65536K available (3918K kernel code, 182K rwdata,)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1       
[    0.000000] NR_IRQS: 256                                                     
[    0.000000] intc: using register map from devicetree                         
[    0.000000] CPU Clock: 580MHz                                                
[    0.000000] timer_probe: no matching timers found                            
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_s
[    0.000009] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405s
[    0.007537] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)          
[    0.073500] pid_max: default: 32768 minimum: 301                             
[    0.078204] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)      
[    0.084560] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes) 
[    0.097271] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, ms
[    0.106779] futex hash table entries: 256 (order: -1, 3072 bytes)            
[    0.112758] pinctrl core: initialized pinctrl subsystem                      
[    0.118820] NET: Registered protocol family 16                               
[    0.231358] mt7620-pci 10140000.pcie: Port 0 N_FTS = 1b105000                
[    0.386646] PCI host bridge /pcie@10140000 ranges:                           
[    0.391232]  MEM 0x0000000020000000..0x000000002fffffff                      
[    0.396247]   IO 0x0000000010160000..0x000000001016ffff                      
[    0.420929] mt7621_gpio 10000600.gpio: registering 32 gpios                  
[    0.426577] mt7621_gpio 10000600.gpio: registering 32 gpios                  
[    0.432089] mt7621_gpio 10000600.gpio: registering 32 gpios                  
[    0.438349] PCI host bridge to bus 0000:00                                   
[    0.442256] pci_bus 0000:00: root bus resource [mem 0x20000000-0x2fffffff]   
[    0.448937] pci_bus 0000:00: root bus resource [io  0xffffffff]              
[    0.454605] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]    
[    0.461163] pci_bus 0000:00: No busn resource found for root bus, will use []
[    0.469216] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reg
[    0.477624] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]      
[    0.483955] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]  
[    0.490728] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]    
[    0.497229] pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pre]
[    0.504217] pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]    
[    0.510761] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64b]
[    0.517842] pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pre]
[    0.524779] pci 0000:00:00.0: PCI bridge to [bus 01]                         
[    0.529587] pci 0000:00:00.0:   bridge window [mem 0x20000000-0x200fffff]    
[    0.536120] pci 0000:00:00.0:   bridge window [mem 0x20100000-0x201fffff pre]
[    0.548174] clocksource: Switched to clocksource MIPS                        
[    0.554295] NET: Registered protocol family 2                                
[    0.559332] TCP established hash table entries: 1024 (order: 0, 4096 bytes)  
[    0.566025] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)         
[    0.572215] TCP: Hash tables configured (established 1024 bind 1024)         
[    0.578473] UDP hash table entries: 256 (order: 0, 4096 bytes)               
[    0.584073] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)          
[    0.590497] NET: Registered protocol family 1                                
[    0.598484] Crashlog allocated RAM at address 0x3f00000                      
[    0.605305] workingset: timestamp_bits=14 max_order=14 bucket_order=0        
[    0.618284] squashfs: version 4.0 (2009/01/31) Phillip Lougher               
[    0.623860] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORI.
[    0.646359] io scheduler noop registered                                     
[    0.650157] io scheduler deadline registered (default)                       
[    0.655878] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled         
[    0.663127] console [ttyS0] disabled                                         
[    0.666567] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 28, base_baudA
[    0.675349] console [ttyS0] enabled                                          
[    0.675349] console [ttyS0] enabled                                          
[    0.682352] bootconsole [early0] disabled                                    
[    0.682352] bootconsole [early0] disabled                                    
[    0.691705] spi-mt7621 10000b00.spi: sys_freq: 193333333                     
[    0.711745] m25p80 spi0.0: s25fl064k (8192 Kbytes)                           
[    0.716659] 5 fixed-partitions partitions found on MTD device spi0.0         
[    0.723120] Creating 5 MTD partitions on "spi0.0":                           
[    0.727989] 0x000000000000-0x000000030000 : "u-boot"                         
[    0.733955] 0x000000030000-0x000000040000 : "u-boot-env"                     
[    0.740254] 0x000000040000-0x000000050000 : "factory"                        
[    0.746229] 0x000000050000-0x000000800000 : "firmware"                       
[    0.767630] 0x000000000000-0x000000800000 : "ALL"                            
[    0.774035] libphy: Fixed MDIO Bus: probed                                   
[    0.789647] rt3050-esw 10110000.esw: link changed 0x00                       
[    0.795812] mtk_soc_eth 10100000.ethernet: generated random MAC address 8e:9a
[    0.804847] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb5
[    0.814985] NET: Registered protocol family 10                               
[    0.823892] Segment Routing with IPv6                                        
[    0.827720] NET: Registered protocol family 17                               
[    0.832375] 8021q: 802.1Q VLAN Support v1.8                                  
[    0.839756] VFS: Cannot open root device "(null)" or unknown-block(0,0): err6
[    0.847353] Please append a correct "root=" boot option; here are the availa:
[    0.855895] 1f00             192 mtdblock0                                   
[    0.855901]  (driver?)                                                       
[    0.862542] 1f01              64 mtdblock1                                   
[    0.862547]  (driver?)                                                       
[    0.869186] 1f02              64 mtdblock2                                   
[    0.869190]  (driver?)                                                       
[    0.875814] 1f03            7872 mtdblock3                                   
[    0.875817]  (driver?)                                                       
[    0.882456] 1f04            8192 mtdblock4                                   
[    0.882460]  (driver?)                                                       
[    0.889097] Kernel panic - not syncing: VFS: Unable to mount root fs on unkn)
[    0.898571] Rebooting in 1 seconds..                                         
[04020C0F][04020D08]                                                            
DDR Calibration DQS reg = 00008988                                              
                                                                                
                                                                                
U-Boot 1.1.3 (Oct 26 2019 - 17:46:11)                                           
                                                                                
Board: Ralink APSoC DRAM:  64 MB                                                
relocate_code Pointer at: 83fac000                                              
******************************                                                  
Software System Reset Occurred                                                  
******************************                                                  
flash manufacture id: ef, device id 40 17                                       
find flash: W25Q64BV                                                            
============================================                                    
Ralink UBoot Version: 4.3.0.0                                                   
--------------------------------------------                                    
ASIC 7628_MP (Port5<->None)                                                     
DRAM component: 512 Mbits DDR, width 16                                         
DRAM bus: 16 bit                                                                
Total memory: 64 MBytes                                                         
Flash component: SPI Flash                                                      
Date:Oct 26 2019  Time:17:46:11                                                 
============================================                                    
icache: sets:512, ways:4, linesz:32 ,total:65536                                
dcache: sets:256, ways:4, linesz:32 ,total:32768                                
                                                                                
 ##### The CPU freq = 580 MHZ ####                                              
 estimate memory size =64 Mbytes                                                
RESET MT7628 PHY!!!!!!gpiomode2 00000555.                                       
                                                                                
continue to starting system.                                                    
 0                                                                              
                                                                                
                                                                                
U-Boot 1.1.3 (Oct 26 2019 - 17:41:51)                                           
                                                                                
Board: Ralink APSoC DRAM:  64 MB                                                
relocate_code Pointer at: 83fb8000                                              
flash manufacture id: ef, device id 40 17                                       
find flash: W25Q64BV                                                            
============================================                                    
Ralink UBoot Version: 4.3.0.0                                                   
--------------------------------------------                                    
ASIC 7628_MP (Port5<->None)                                                     
DRAM component: 512 Mbits DDR, width 16                                         
DRAM bus: 16 bit                                                                
Total memory: 64 MBytes                                                         
Flash component: SPI Flash                                                      
Date:Oct 26 2019  Time:17:41:51                                                 
============================================                                    
icache: sets:512, ways:4, linesz:32 ,total:65536                                
dcache: sets:256, ways:4, linesz:32 ,total:32768                                
                                                                                
 ##### The CPU freq = 580 MHZ ####                                              
 estimate memory size =64 Mbytes                                                
RESET MT7628 PHY!!!!!!                                                          
continue to starting system.                                                    
 0                                                                              
disable switch phyport...                                                       
do_bootm:argc=2, addr=0xbc050000                                                
## Booting image at bc050000 ...                                                
   Uncompressing Kernel Image ... OK                                            
No initrd                                                                       
## Transferring control to Linux (at address 8000c150) ...                      
## Giving linux memsize in MB, 64                                               
                                                                                
Starting kernel ...                                                             
                                                                                
                                                                                
LINUX started...                                                                
                                                                                
 THIS IS ASIC                                                                   


Trying the old firmware this is what I see on my Mint Linux box:

mike@ruby:~/tftpboot$ scp root@192.168.1.1:/dev/mtd0 mtd0
scp: /dev/mtd0: not a regular file

I did not try all the other stuff under /dev/mtd*

I used dd to copy the /dev/mtd{0..3}ro to a local file then used scp to copy the files to my laptop. They are now on google drive:
mtd0ro
mtd1ro
mtd2ro
mtd3ro
Hope this helps

Ok, thank you very much. :slight_smile:
I'll look into it asap :wink:

Now we have dump of original flash. I suggest to try these images:


Content of archive:

  1. firmware.bin - original image.
  2. Images are built with openwrt 19.07.1 imagebuilder:
    openwrt-19.07.1-ramips-mt76x8-cudy_wr1000-v2-squashfs-factory.bin
    openwrt-19.07.1-ramips-mt76x8-cudy_wr1000-v2-squashfs-sysupgrade.bin
    openwrt-19.07.1-ramips-mt76x8-cudy_wr1000-v2-squashfs-tftp-recovery.bin
    openwrt-19.07.1-ramips-mt76x8-device-cudy-wr1000-v2.manifest
  3. radio.bin - board calibration data
  4. WR1000V2.dts - device description file.

Let's start with flashing sysupgrade.bin by hand. Load image mem @0x81000000, erase flash @0x50000 length 0x7a0000, copy mem @0x81000000 to flash @ 0x50000 length 0x7a0000

tftpboot 81000000 sysupgrade.bin
erase defined 50000 7a0000
cp.b 81000000 50000 7a0000

Flash is mapped into mem @0xbc000000, so you can check each operation with md (memory display) command. So after first command

md 81000000
must show start of sysupgrade image (key string "ver 2.0"), after 2nd

md bc050000 must show empty flash (0xff...). And after last command

md bc050000 must show start of sysupgrade image.
The final step is rebooting device with reset command. After first reboot openwrt must start in some minutes, at http://192.168.1.1 - LUCI web interface. If something will be wrong I'd like to see openwrt boot log.
To restore original firmware repeat all these steps (tftpboot, erase, cp.b) with file firmware.bin

I've now got a LuCI web interface - what now? Is the image the "proper" image to run with?

Here is the serial console log from the manual FLASH operation.

DDR Calibration DQS reg = 00008888


U-Boot 1.1.3 (Oct 26 2019 - 17:46:11)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fac000
flash manufacture id: ef, device id 40 17
find flash: W25Q64BV
============================================ 
Ralink UBoot Version: 4.3.0.0
-------------------------------------------- 
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Oct 26 2019  Time:17:46:11
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 580 MHZ #### 
 estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!gpiomode2 00000555.

continue to starting system.
 0 


U-Boot 1.1.3 (Oct 26 2019 - 17:41:51)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb8000
flash manufacture id: ef, device id 40 17
find flash: W25Q64BV
============================================ 
Ralink UBoot Version: 4.3.0.0
-------------------------------------------- 
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Oct 26 2019  Time:17:41:51
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 580 MHZ #### 
 estimate memory size =64 Mbytes
RESET MT7628 PHY!!! 0 
TODO, Read MAC Address from Flash

switch BootType:
   
4: System Enter Boot Command Line Interface.

U-Boot 1.1.3 (Oct 26 2019 - 17:41:51)
MT7628 # tftpboot 81000000 sysupgrade.bin

 netboot_common, argc= 3 

 NetTxPacket = 0x83FE7300 

 KSEG1ADDR(NetTxPacket) = 0xA3FE7300 

 NetLoop,call eth_halt ! 

 NetLoop,call eth_init ! 
Trying Eth0 (10/100-M)

 Waitting for RX_DMA_BUSY status Start... done


 ETH_STATE_ACTIVE!! 
TFTP from server 192.168.10.168; our IP address is 192.168.10.166
Filename 'sysupgrade.bin'.

 TIMEOUT_COUNT=10,Load address: 0x81000000
Loading: checksum bad
checksum bad
Got ARP REPLY, set server/gtwy eth addr (00:21:70:b3:bf:a0)
Got it
#################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ##############
done
Bytes transferred = 4063486 (3e00fe hex)
NetBootFileXferSize= 003e00fe
MT7628 # erase defined 50000 7a0000

 Erase flash !!
From 0x50000 length 0x7A0000
............................................................................................................
MT7628 # cp.b 81000000 50000 7a0000

 Copy 0x81000000 to 0x00050000, count 0x7A0000.... 
............................................................................................................
MT7628 # md 81000000
81000000: 00000003 2e726576 302e3220 ffffff00    ....ver. 2.0....
81000010: ffffffff ffffffff ffffffff ffffffff    ................
81000020: ffffffff ffffffff ffffffff ffffffff    ................
81000030: ffffffff 0100cd00 00000200 02000000    ................
81000040: 940fbe31 bb8a45d2 f51ebfbb d0a5985b    1....E......[...
81000050: 00000000 ffffffff ffffffff ffffffff    ................
81000060: ffffffff ffffffff 80000000 80000000    ................
81000070: 00007a00 00020000 e1e51700 e4e71700    .z..............
81000080: 0ec02500 00000000 00000000 0001aa55    .%..........U...
81000090: 000000a5 ffffffff ffffffff ffffffff    ................
810000a0: ffffffff ffffffff ffffffff ffffffff    ................
810000b0: ffffffff ffffffff ffffffff ffffffff    ................
810000c0: ffffffff ffffffff ffffffff ffffffff    ................
810000d0: ffffffff ffffffff ffffffff ffffffff    ................
810000e0: ffffffff ffffffff ffffffff ffffffff    ................
810000f0: ffffffff ffffffff ffffffff ffffffff    ................
MT7628 # md bc050000
bc050000: 00000003 2e726576 302e3220 ffffff00    ....ver. 2.0....
bc050010: ffffffff ffffffff ffffffff ffffffff    ................
bc050020: ffffffff ffffffff ffffffff ffffffff    ................
bc050030: ffffffff 0100cd00 00000200 02000000    ................
bc050040: 940fbe31 bb8a45d2 f51ebfbb d0a5985b    1....E......[...
bc050050: 00000000 ffffffff ffffffff ffffffff    ................
bc050060: ffffffff ffffffff 80000000 80000000    ................
bc050070: 00007a00 00020000 e1e51700 e4e71700    .z..............
bc050080: 0ec02500 00000000 00000000 0001aa55    .%..........U...
bc050090: 000000a5 ffffffff ffffffff ffffffff    ................
bc0500a0: ffffffff ffffffff ffffffff ffffffff    ................
bc0500b0: ffffffff ffffffff ffffffff ffffffff    ................
bc0500c0: ffffffff ffffffff ffffffff ffffffff    ................
bc0500d0: ffffffff ffffffff ffffffff ffffffff    ................
bc0500e0: ffffffff ffffffff ffffffff ffffffff    ................
bc0500f0: ffffffff ffffffff ffffffff ffffffff    ................
MT7628 # 

MT7628 # reset
[04020D07][04020D08]
DDR Calibration DQS reg = 00008988


U-Boot 1.1.3 (Oct 26 2019 - 17:46:11)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fac000
******************************
Software System Reset Occurred
******************************
flash manufacture id: ef, device id 40 17
find flash: W25Q64BV
============================================ 
Ralink UBoot Version: 4.3.0.0
-------------------------------------------- 
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Oct 26 2019  Time:17:46:11
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 580 MHZ #### 
 estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!gpiomode2 00000555.

continue to starting system.
 0 


U-Boot 1.1.3 (Oct 26 2019 - 17:41:51)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb8000
flash manufacture id: ef, device id 40 17
find flash: W25Q64BV
============================================ 
Ralink UBoot Version: 4.3.0.0
-------------------------------------------- 
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Oct 26 2019  Time:17:41:51
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 580 MHZ #### 
 estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
continue to starting system.
 0 
disable switch phyport...
do_bootm:argc=2, addr=0xbc050000
## Booting image at bc050000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80000000) ...
## Giving linux memsize in MB, 64

Starting kernel ...

[    0.000000] Linux version 4.14.167 (builder@buildhost) (gcc version 7.5.0 (OpenWrt GCC 7.5.0 r10911-c1550
[    0.000000] Board has DDR2
[    0.000000] Analog PMU set to hw control
[    0.000000] Digital PMU set to hw control
[    0.000000] SoC Type: MediaTek MT7628AN ver:1 eco:2
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019655 (MIPS 24KEc)
[    0.000000] MIPS: machine is Cudy WR1000 v2
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] random: get_random_bytes called from 0x80481740 with crng_init=0
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] Memory: 58816K/65536K available (3921K kernel code, 182K rwdata, 500K rodata, 1212K init, 20)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS: 256
[    0.000000] intc: using register map from devicetree
[    0.000000] CPU Clock: 580MHz
[    0.000000] timer_probe: no matching timers found
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6590553264 ns
[    0.000010] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405115902ns
[    0.007548] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.073514] pid_max: default: 32768 minimum: 301
[    0.078181] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.084537] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.096521] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000s
[    0.106022] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.111961] pinctrl core: initialized pinctrl subsystem
[    0.119504] NET: Registered protocol family 16
[    0.228169] mt7620-pci 10140000.pcie: Port 0 N_FTS = 1b105000
[    0.383507] PCI host bridge /pcie@10140000 ranges:
[    0.388090]  MEM 0x0000000020000000..0x000000002fffffff
[    0.393106]   IO 0x0000000010160000..0x000000001016ffff
[    0.414569] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.420219] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.425729] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.432056] PCI host bridge to bus 0000:00
[    0.435964] pci_bus 0000:00: root bus resource [mem 0x20000000-0x2fffffff]
[    0.442646] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    0.448302] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    0.454870] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    0.462915] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    0.471337] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    0.477668] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    0.484440] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]
[    0.490942] pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pref]
[    0.497929] pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
[    0.504474] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit]
[    0.511552] pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pref]
[    0.518493] pci 0000:00:00.0: PCI bridge to [bus 01]
[    0.523299] pci 0000:00:00.0:   bridge window [mem 0x20000000-0x200fffff]
[    0.529833] pci 0000:00:00.0:   bridge window [mem 0x20100000-0x201fffff pref]
[    0.541572] clocksource: Switched to clocksource MIPS
[    0.547580] NET: Registered protocol family 2
[    0.552712] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.559400] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.565592] TCP: Hash tables configured (established 1024 bind 1024)
[    0.571844] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.577446] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.583784] NET: Registered protocol family 1
[    0.591235] Crashlog allocated RAM at address 0x3f00000
[    0.597897] workingset: timestamp_bits=30 max_order=14 bucket_order=0
[    0.609684] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.615309] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, I.
[    0.635003] io scheduler noop registered
[    0.638733] io scheduler deadline registered (default)
[    0.644636] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.653472] console [ttyS0] disabled
[    0.656910] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 28, base_baud = 2500000) is a 16550A
[    0.665688] console [ttyS0] enabled
[    0.665688] console [ttyS0] enabled
[    0.672688] bootconsole [early0] disabled
[    0.672688] bootconsole [early0] disabled
[    0.682225] spi-mt7621 10000b00.spi: sys_freq: 193333333
[    0.703467] m25p80 spi0.0: s25fl064k (8192 Kbytes)
[    0.708380] 5 fixed-partitions partitions found on MTD device spi0.0
[    0.714841] Creating 5 MTD partitions on "spi0.0":
[    0.719706] 0x000000000000-0x000000030000 : "u-boot"
[    0.725648] 0x000000030000-0x000000040000 : "u-boot-env"
[    0.731940] 0x000000040000-0x000000050000 : "unknown"
[    0.737883] 0x000000050000-0x0000007f0000 : "firmware"
[    0.746853] 2 tplink-fw partitions found on MTD device firmware
[    0.752930] Creating 2 MTD partitions on "firmware":
[    0.757976] 0x000000000000-0x00000017e7e1 : "kernel"
[    0.763898] 0x00000017e7e4-0x0000007a0000 : "rootfs"
[    0.769679] mtd: device 5 (rootfs) set to be root filesystem
[    0.776921] 1 squashfs-split partitions found on MTD device rootfs
[    0.783269] 0x0000003e0000-0x0000007a0000 : "rootfs_data"
[    0.789643] 0x0000007f0000-0x000000800000 : "factory"
[    0.796307] libphy: Fixed MDIO Bus: probed
[    0.812126] rt3050-esw 10110000.esw: link changed 0x00
[    0.818899] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5
[    0.829038] NET: Registered protocol family 10
[    0.837676] Segment Routing with IPv6
[    0.841497] NET: Registered protocol family 17
[    0.846142] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your script.
[    0.859304] 8021q: 802.1Q VLAN Support v1.8
[    0.871501] VFS: Mounted root (squashfs filesystem) readonly on device 31:5.
[    0.885357] Freeing unused kernel memory: 1212K
[    0.889952] This architecture does not have kernel memory protection.
[    1.592608] init: Console is alive
[    1.596304] init: - watchdog -
[    2.261588] random: fast init done
[    2.335527] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    2.471114] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    2.489001] init: - preinit -
[    3.535789] rt3050-esw 10110000.esw: link changed 0x00
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    3.706150] random: procd: uninitialized urandom read (4 bytes read)
[    6.909559] mount_root: jffs2 not ready yet, using temporary tmpfs overlay
[    6.942771] urandom-seed: Seed file not found (/etc/urandom.seed)
[    7.066253] procd: - early -
[    7.069299] procd: - watchdog -
[    7.212689] rt3050-esw 10110000.esw: link changed 0x08
[    7.731613] procd: - watchdog -
[    7.735192] procd: - ubus -
[    7.891018] random: ubusd: uninitialized urandom read (4 bytes read)
[    7.980046] random: ubusd: uninitialized urandom read (4 bytes read)
[    7.987093] random: ubusd: uninitialized urandom read (4 bytes read)
[    7.994645] procd: - init -
Please press Enter to activate this console.
[    9.047286] kmodloader: loading kernel modules from /etc/modules.d/*
[    9.234322] ip6_tables: (C) 2000-2006 Netfilter Core Team
[    9.260243] Loading modules backported from Linux version v4.19.98-0-gd183c8e2647a
[    9.267998] Backport generated by backports.git v4.19.98-1-0-g8204eb99
[    9.294067] ip_tables: (C) 2000-2006 Netfilter Core Team
[    9.319718] nf_conntrack version 0.5.0 (1024 buckets, 4096 max)
[    9.445136] xt_time: kernel timezone is -0000
[    9.634762] mt76_wmac 10300000.wmac: ASIC revision: 76280001
[    9.739231] urngd: v1.0.2 started.
[    9.937480] random: crng init done
[    9.940933] random: 6 urandom warning(s) missed due to ratelimiting
[   10.673823] mt76_wmac 10300000.wmac: Firmware Version: 20151201
[   10.679844] mt76_wmac 10300000.wmac: Build Time: 20151201183641
[   10.721594] mt76_wmac 10300000.wmac: firmware init done
[   10.995710] mt76x2e 0000:01:00.0: card - bus=0x1, slot = 0x0 irq=4
[   11.002264] mt76x2e 0000:01:00.0: ASIC revision: 76120044
[   12.044579] mt76x2e 0000:01:00.0: ROM patch build: 20141115060606a
[   12.059590] mt76x2e 0000:01:00.0: Firmware Version: 0.0.00
[   12.065239] mt76x2e 0000:01:00.0: Build: 1
[   12.069392] mt76x2e 0000:01:00.0: Build Time: 201507311614____
[   12.091579] mt76x2e 0000:01:00.0: Firmware running!
[   12.124316] PPP generic driver version 2.4.2
[   12.131413] NET: Registered protocol family 24
[   12.148344] kmodloader: done loading kernel modules from /etc/modules.d/*
[   26.525970] rt3050-esw 10110000.esw: link changed 0x00
[   30.247983] rt3050-esw 10110000.esw: link changed 0x08
[   31.658046] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0
[   31.671850] jffs2_build_filesystem(): unlocking the mtd device... 
[   31.672684] done.
[   31.680908] jffs2_build_filesystem(): erasing all blocks after the end marker... 
[   32.368079] br-lan: port 1(eth0.1) entered blocking state
[   32.381232] br-lan: port 1(eth0.1) entered disabled state
[   32.387250] device eth0.1 entered promiscuous mode
[   32.392179] device eth0 entered promiscuous mode
[   32.469974] br-lan: port 1(eth0.1) entered blocking state
[   32.475528] br-lan: port 1(eth0.1) entered forwarding state
[   32.481398] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   33.402095] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   44.663617] done.
[   44.665618] jffs2: notice: (1210) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of x.
[   44.864963] overlayfs: upper fs does not support tmpfile.