Zyxel EX5601-T0 OpenWrt UART-Free Installer, Layout Converter, and OEM Restore

krys1 · May 19, 2026, 7:06pm

The Zyxel EX5601-T0 is a very capable router with excellent hardware for high-performance OpenWrt use. Until now, installing OpenWrt without UART access has been difficult.

This guide provides a UART-free installation and recovery for the EX5601-T0. It allows you to install OpenWrt directly from the OEM firmware and also recovery paths if you want to change layouts or return to the original Zyxel firmware later.

With the available tools, you can do the following:

From the OEM Zyxel firmware

You can install OpenWrt using SSH, without opening the device or using UART:

Install OpenWrt with the ubootmod layout.
Install OpenWrt with the stock layout.
Link: https://github.com/majad00/ex5601_openwrt_loader

From OpenWrt ubootmod

If your router is already running the OpenWrt ubootmod, you can:

Convert to the OpenWrt stock layout.
Restore the original Zyxel OEM firmware.

link: https://github.com/majad00/zyxel-ex5601-openwrt-to-OEM-converter/releases/tag/1.1

From OpenWrt stock-layout

If your router is already running the OpenWrt stock layout, you can:

Convert to the OpenWrt ubootmod

link: https://github.com/majad00/openwrt-stock-layout-to-ubootmod-ex5601-t0

These tools were written as part of project and free to use

aikamoinen · June 5, 2026, 9:55pm

Do you know if this works with any version of the Zyxel EX5601-T0? A lot of guides mention that they are for the Odido T-56. I'd like to install OpenWrt on the Elisa EX5601-T0.

Do you know if people have used this tool on a lot of different versions of the device? Is it set up in a way that it would work with any of them?

krys1 · June 5, 2026, 10:22pm

Tested on Elisa and Fibernet T56 routers, need a root password.

To get root password try SSH to router, use the admin username and password on the sticker or Wi-Fi key. when in the limited shell, enter the command z sys atsh.

Next, copy the "First MAC Address" and use it in the command below, followed by '0' for disable or '1' for enable and a country code.

sys atwz (mac) (0 for disable, 1 for enable) (country code or just 1 for US)

For example, try the command:

z sys atwz MAC 0 10

After that, enter:

sys atck

The root password displayed in plain text.

With the root password, SSH again as root user and follow guide:
LINK 1 from main post.

Basically, you need to copy the tar file and the loader.sh script to the router /tmp folder. Then, run these

chmod +x loader.sh
./loader.sh

After that, open LUCI web page on port 8080 to complete the installation. so bottomline, if you have root access on a t56 router, you can install Oepwrt with this method on any device.

aikamoinen · June 5, 2026, 11:05pm

Well I was unsure because isn't a T-56 technically an Odido EX5601-T0 router, and the Elisa router is an EX5601-T0, but not a "T-56" model?

Either way though, you have tested these exact steps with an Elisa one and it will work?

Also, your script seems to be able to do "U-bootmod layout conversion". So does that mean it will be the UBI version that is using up all available space? That's what I'd like to do. I think that means that the dual booting wiht the original firmware would be gone right? I don't want the original firmware on it. I'd like it to not accidentally boot to the original firmware and do an auto-update that locks it down and prevents using OpenWrt on it

krys1 · June 7, 2026, 10:05am

I flashed two routers baught from tori_fi, one of which was Elisa customer, so it will work for sure.
The ubootmod layout will remove the dual bank and repartition the NAND, using all available memory for OpenWrt. The stock layout will flash OpenWrt onto the inactive partition and then switch bootflag to boot from that partition. Flashing with the stock layout takes about 20 seconds, and flashing with the ubootmod layout takes over a minute because the script boots into recovery mode and runs auto scripts in the background.

aikamoinen · June 7, 2026, 10:25am

Wow awesome. Thanks so much for all the info and this script.

aikamoinen · June 23, 2026, 4:10pm

@krys1 Hey I finally got one of these Elisa versions and tried your script.

Unfortunately though after using the matrix installer it doesn't boot to OpenWrt. It boots to the Zyxel firmware.

Maybe you can help me figure it out?

The router says it's a V5.70(ACDZ.3.4)C0

I reset to factory defaults. Then was able to get the root password using the instructions you posted.

I then copied the latest version of your script, 1.1 to a USB drive and ran it using the instructions.

root@EX5601-T0:/# /tmp/loader.sh
 Extracting RootFS...
[OK] Extraction complete. Archive removed to save RAM.
 Installing Matrix files...
[OK] Matrix files installed.
 Preparing Environment...
[OK] Environment prepared with real device nodes.
 Starting Matrix flash runner...
[OK] Matrix flash runner started.
 Launching OpenWrt LuCI services...
/bin/sh: /sbin/configd: not found
================================================
      EX5601-T0 OpenWrt Installer
================================================
------------------------------------------------
 SUCCESS: Access LUCI at PORT 8080
 Example URL:     http://192.168.1.1:8080
 Username:       root / no password
------------------------------------------------

After that I went to OpenWrt at 192.168.1.1:8080 and followed the instructions to go to System > Matrix Installer and then clicked "Flash OpenWrt-Uboot Layout"

Then I clicked okay or whatever in the popup, saw some things in the status box that looked normal, and then the router rebooted itself. Then I saw "Unable to read Matrix status" in the status box.

After a couple minutes I went to 192.168.1.1 in a private browsing window in Firefox to make sure cached website data is not an issue and the normal Zyxel firmware is there.

I noticed when running loader.sh that there is a line that looks odd: /bin/sh: /sbin/configd: not found

Other than that, I don't know what the issue might be.

Here's the output of dmesg if that helps?

root@EX5601-T0:/tmp# dmesg
[    0.593837] spi-nand spi0.1: 512 MiB, block size: 256 KiB, page size: 4096, OOB size: 128
[    0.603339] libphy: Fixed MDIO Bus: probed
[    0.607997] [mtk_hw_init] reset_lock:0, force:0
[    0.612550] [mtk_hw_init] execute fe cold reset
[    0.628236] libphy: mdio: probed
[    0.851919] Intel GPY211 PHY mdio-bus:05: driver wait 0 ms for phy ready!
[    0.915201] Intel GPY211 PHY mdio-bus:06: driver wait 0 ms for phy ready!
[    0.923225] mtk_soc_eth 15100000.ethernet: generated random MAC address c2:9e:09:56:60:9e
[    0.931614] mtk_soc_eth 15100000.ethernet eth0: mediatek frame engine at 0xffffffc011980000, irq 122
[    0.940759] mtk_soc_eth 15100000.ethernet: generated random MAC address 7e:3e:3b:cd:7b:72
[    0.949090] mtk_soc_eth 15100000.ethernet eth1: mediatek frame engine at 0xffffffc011980000, irq 122
[    0.958215] (unnamed net_device) (dummy): netif_napi_add() called with weight 256
[    0.965974] xhci-mtk 11200000.xhci: 11200000.xhci supply vbus not found, using dummy regulator
[    0.974623] xhci-mtk 11200000.xhci: 11200000.xhci supply vusb33 not found, using dummy regulator
[    0.983461] DEBUG: enable is gpio 419 and active 1
[    0.988262] DEBUG: oc is gpio 418 and active 1
[    0.993314] xhci-mtk 11200000.xhci: xHCI Host Controller
[    0.998627] xhci-mtk 11200000.xhci: new USB bus registered, assigned bus number 1
[    1.009174] xhci-mtk 11200000.xhci: hcc params 0x01403f99 hci version 0x110 quirks 0x0000000000210010
[    1.018402] xhci-mtk 11200000.xhci: irq 132, io mem 0x11200000
[    1.024579] hub 1-0:1.0: USB hub found
[    1.028337] hub 1-0:1.0: 2 ports detected
[    1.032519] xhci-mtk 11200000.xhci: xHCI Host Controller
[    1.037831] xhci-mtk 11200000.xhci: new USB bus registered, assigned bus number 2
[    1.045310] xhci-mtk 11200000.xhci: Host supports USB 3.2 Enhanced SuperSpeed
[    1.052473] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[    1.060758] hub 2-0:1.0: USB hub found
[    1.064516] hub 2-0:1.0: 1 port detected
[    1.068738] usbcore: registered new interface driver uas
[    1.074080] usbcore: registered new interface driver usb-storage
[    1.080175] i2c /dev entries driver
[    1.084683] mtk-wdt 1001c000.watchdog: Watchdog enabled (timeout=31 sec, nowayout=0)
[    1.092603] device-mapper: ioctl: 4.41.0-ioctl (2019-09-16) initialised: dm-devel@redhat.com
[    1.101452] crypto-safexcel 10320000.crypto: EIP97:230(0,1,4,4)-HIA:270(0,5,5),PE:150/433,alg:7fcdfc00
[    1.114729] mt79xx-audio 11210000.audio-controller: No cache used with register defaults set!
[    1.123404] mt79xx-audio 11210000.audio-controller: mtk_afe_combine_sub_dai(), num of dai 3
[    1.131905] debugfs: Directory '11210000.audio-controller' with parent 'mt79xx-si3218x' already present!
[    1.141460] slic-dummy-codec dummy_codec: dummy_component_probe
[    1.147533] mt79xx-si3218x sound_si3218x: snd-soc-dummy-dai <-> DL1 mapping ok
[    1.154902] mt79xx-si3218x sound_si3218x: snd-soc-dummy-dai <-> UL1 mapping ok
[    1.162114]
[    1.162114] ###@@@###@@@###@@@ mt79xx_si3218x_init()/Line-76: Enter...
[    1.162114]
[    1.171604]
[    1.171604] ###@@@###@@@###@@@ mtk_dai_etdm_set_fmt()/Line-447/dai->id=2: Enter...fmt=0x00004304...
[    1.171604]
[    1.183609] mt79xx-si3218x sound_si3218x: dummy_codec <-> ETDM mapping ok
[    1.190710] Initializing XFRM netlink socket
[    1.195247] NET: Registered protocol family 10
[    1.200151] Segment Routing with IPv6
[    1.203846] NET: Registered protocol family 17
[    1.208318] Bridge firewalling registered
[    1.212377] 8021q: 802.1Q VLAN Support v1.8
[    1.223605] nmbm nmbm_spim_nand: Signature found at block 2047 [0x1ffc0000]
[    1.233065] nmbm nmbm_spim_nand: First info table with writecount 0 found in block 1920
[    1.248461] nmbm nmbm_spim_nand: Second info table with writecount 0 found in block 1923
[    1.256550] nmbm nmbm_spim_nand: NMBM has been successfully attached
[    1.263117] 8 fixed-partitions partitions found on MTD device nmbm_spim_nand
[    1.270156] Creating 8 MTD partitions on "nmbm_spim_nand":
[    1.275633] 0x000000000000-0x000000100000 : "BL2"
[    1.280748] 0x000000100000-0x000000180000 : "u-boot-env"
[    1.286351] 0x000000180000-0x000000380000 : "Factory"
[    1.291684] 0x000000380000-0x000000540000 : "FIP"
[    1.296681] 0x000000540000-0x000000580000 : "zloader"
[    1.302016] 0x000000580000-0x000004580000 : "ubi"
[    1.307035] 0x000004580000-0x000008580000 : "ubi2"
[    1.312165] 0x000008580000-0x00001e000000 : "zyubi"
[    1.423245] usb 2-1: new SuperSpeed Gen 1x2 USB device number 2 using xhci-mtk
[    1.452301] usb-storage 2-1:1.0: USB Mass Storage device detected
[    1.458521] scsi host0: usb-storage 2-1:1.0
[    1.525070] libphy: dsa slave smi: probed
[    1.529944] mt7530 mdio-bus:1f lan1 (uninitialized): PHY [dsa-0.0:01] driver [Generic PHY]
[    1.539348] mt7530 mdio-bus:1f lan2 (uninitialized): PHY [dsa-0.0:02] driver [Generic PHY]
[    1.548666] mt7530 mdio-bus:1f lan3 (uninitialized): PHY [dsa-0.0:03] driver [Generic PHY]
[    1.557623] mt7530 mdio-bus:1f: configuring for fixed/2500base-x link mode
[    1.564768] DSA: tree 0 setup
[    1.565017] mt7530 mdio-bus:1f: Link is Up - 2.5Gbps/Full - flow control rx/tx
[    1.567878] UBI: plan to attach ubi2
[    1.579160] UBI: auto-attach mtd7
[    1.582475] ubi0: attaching mtd7
[    1.892277] ubi0: scanning is finished
[    1.903694] ubi0: attached mtd7 (name "ubi2", size 64 MiB)
[    1.909175] ubi0: PEB size: 262144 bytes (256 KiB), LEB size: 253952 bytes
[    1.916042] ubi0: min./max. I/O unit sizes: 4096/4096, sub-page size 4096
[    1.922818] ubi0: VID header offset: 4096 (aligned 4096), data offset: 8192
[    1.929767] ubi0: good PEBs: 256, bad PEBs: 0, corrupted PEBs: 0
[    1.935763] ubi0: user volume: 5, internal volumes: 1, max. volumes count: 128
[    1.942972] ubi0: max/mean erase counter: 7/3, WL threshold: 4096, image sequence number: 0
[    1.951310] ubi0: available PEBs: 0, total reserved PEBs: 256, PEBs reserved for bad PEB handling: 38
[    1.960521] ubi0: background thread "ubi_bgt0d" started, PID 837
[    1.961491] block ubiblock0_1: created from ubi0:1(rootfs)
[    1.971994] ubiblock: device ubiblock0_1 (rootfs) set to be root filesystem
[    1.978947] hctosys: unable to open rtc device (rtc0)
[    1.984210] ALSA device list:
[    1.987165]   #0: mt79xx-si3218x
[    1.997163] VFS: Mounted root (squashfs filesystem) readonly on device 253:0.
[    2.004456] Freeing unused kernel memory: 448K
[    2.023227] Run /sbin/init as init process
[    2.233779] init: Console is alive
[    2.237295] init: - watchdog -
[    2.487588] scsi 0:0:0:0: Direct-Access     SanDisk  Extreme          0001 PQ: 0 ANSI: 6
[    2.697577] sd 0:0:0:0: [sda] 61341696 512-byte logical blocks: (31.4 GB/29.3 GiB)
[    2.705413] sd 0:0:0:0: [sda] Write Protect is off
[    2.710233] sd 0:0:0:0: [sda] Mode Sense: 53 00 00 08
[    2.715521] sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, doesn't support DPO or FUA
[    2.726153]  sda: sda1
[    2.729517] sd 0:0:0:0: [sda] Attached SCSI removable disk
[    4.786729] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    4.812208] conninfra@(mtk_conninfra_drv_init:644) Before platform_driver_register
[    4.819898] Get Index(0-TOP_MISC_BASE) phy_addr(0x11d10000) vir_addr=(0xffffffc010e37000) size=(0x1000)
[    4.829280] Get Index(1-TOPRGU_BASE) phy_addr(0x1001c000) vir_addr=(0xffffffc010e39000) size=(0x1000)
[    4.838487] Get Index(2-GPIO_BASE) phy_addr(0x1001f000) vir_addr=(0xffffffc010e45000) size=(0x1000)
[    4.847522] Get Index(3-IOCFG_TR_BASE) phy_addr(0x11f00000) vir_addr=(0xffffffc010e47000) size=(0x1000)
[    4.856902] Get Index(4-IOCFG_TL_BASE) phy_addr(0x11f10000) vir_addr=(0xffffffc010e49000) size=(0x1000)
[    4.866282] Get Index(5-INFRACFG_AO_BASE) phy_addr(0x10003000) vir_addr=(0xffffffc010e4b000) size=(0x1000)
[    4.875922] Get Index(6-CONN_INFRA_CFG_BASE) phy_addr(0x18001000) vir_addr=(0xffffffc010e4d000) size=(0x1000)
[    4.885822] Get Index(7-CONN_INFRA_SYSRAM_BASE) phy_addr(0x18050000) vir_addr=(0xffffffc010e55000) size=(0x1000)
[    4.895982] Get Index(8-CONN_INFRA_CLKGEN_ON_TOP_BASE) phy_addr(0x18009000) vir_addr=(0xffffffc010e5d000) size=(0x1000)
[    4.906750] Get Index(9-CONN_HOST_CSR_TOP_BASE) phy_addr(0x18060000) vir_addr=(0xffffffc010e65000) size=(0x1000)
[    4.916913] Get Index(10-CONN_INFRA_BUS_CR_BASE) phy_addr(0x1800e000) vir_addr=(0xffffffc010e67000) size=(0x1000)
[    4.927165] Get Index(11-CONN_INFRA_RGU_BASE) phy_addr(0x18000000) vir_addr=(0xffffffc010e69000) size=(0x1000)
[    4.937153] Get Index(12-CONN_WT_SLP_CTL_REG_BASE) phy_addr(0x18005000) vir_addr=(0xffffffc010e6b000) size=(0x1000)
[    4.947574] Get Index(13-INST2_CONN_WT_SLP_CTL_REG_BASE) phy_addr(0x18085000) vir_addr=(0xffffffc010e6d000) size=(0x1000)
[    4.958515] Get Index(14-CONN_RF_SPI_MST_REG_BASE) phy_addr(0x18004000) vir_addr=(0xffffffc010e6f000) size=(0x1000)
[    4.968936] Get Index(15-INST2_CONN_RF_SPI_MST_REG_BASE) phy_addr(0x18084000) vir_addr=(0xffffffc010e71000) size=(0x1000)
[    4.979878] Get Index(16-CONN_SEMAPHORE_BASE) phy_addr(0x18070000) vir_addr=(0xffffffc010ec0000) size=(0x10000)
[    4.989952] Get Index(17-CONN_AFE_CTL_BASE) phy_addr(0x18003000) vir_addr=(0xffffffc010e73000) size=(0x1000)
[    4.999765] Get Index(18-CONN_AFE_CTL_2ND_BASE) phy_addr(0x18083000) vir_addr=(0xffffffc010e75000) size=(0x1000)
[    5.009928] Get Index(19-WF_TOP_SLPPROT_ON_BASE) phy_addr(0x184c0000) vir_addr=(0xffffffc010f00000) size=(0x10000)
[    5.020261] Get Index(20-WF_TOP_CFG_BASE) phy_addr(0x184b0000) vir_addr=(0xffffffc010e77000) size=(0x1000)
[    5.029901] Get Index(21-WF_MCU_CONFIG_LS_BASE) phy_addr(0x184f0000) vir_addr=(0xffffffc010e79000) size=(0x1000)
[    5.040061] Get Index(22-WF_MCU_BUS_CR_BASE) phy_addr(0x18400000) vir_addr=(0xffffffc010ed1000) size=(0x1000)
[    5.049962] Get Index(23-WF_MCUSYS_INFRA_BUS_FULL_U_DEBUG_CTRL_AO_BASE) phy_addr(0x18500000) vir_addr=(0xffffffc010ed3000) size=(0x1000)
[    5.062205] Get Index(24-WF_TOP_CFG_ON_BASE) phy_addr(0x184c0000) vir_addr=(0xffffffc010f20000) size=(0x10000)
[    5.072825] eeFlashId: 0x7986, EEPROM_content_valid = 1
[    5.074026] conninfra@(consys_plt_hw_init:221) tx_stream = 0x4, rx_stream = 0x4, band0_pa_type = 0x3, band1_pa_type = 0x3
[    5.091139] conninfra@(consys_plt_hw_init:230) adie_cfg_type = 2, one_adie_dbdc = 0
[    5.098789] [emi_mng_init] gConEmiPhyBase = [0x4fc00000] size = [0x100000] fw size = [0x100000] ops=[00000000247396db]
[    5.109544] conninfra@(mtk_conninfra_drv_init:650) After platform_driver_register
[    5.117288] ConnInfra Dev: init (0)
[    5.122251] conninfra@(_consys_polling_chipid_int:459) Read CONNSYS HW IP version successfully! (0x02070000)
[    5.132077] conninfra@(consys_bus_clock_ctrl:485) drv=[4] conninfra_bus_clock_wpll=[0]->[16] enable
[    5.141113] conninfra@(connsys_d_die_cfg:530) D-die efuse: 0x00000000
[    5.148575] conninfra@(_connsys_a_die_chip_id_confirm:1919) adie_idx[0]: A-die CHIP ID = 0x7976, HW Version = 0x8a20
[    5.160092] conninfra@(_connsys_a_die_chip_id_confirm:1919) adie_idx[1]: A-die CHIP ID = 0x7976, HW Version = 0x8a20
[    5.172614] conninfra@(consys_spi_write_nolock:670) addr = 0x0a00, val = 0xffffffff
[    5.181263] conninfra@(consys_spi_write_nolock:670) addr = 0x0144, val = 0x00000002
[    5.190918] conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x00000000
[    5.200573] conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x43a60000
[    5.214256] conninfra@(connsys_a_die_efuse_read_nolock:906) efuse = [0x00000001, 0x00c40000, 0x008800ba, 0x00000000]
[    5.225768] conninfra@(consys_spi_write_nolock:670) addr = 0x0144, val = 0x00000002
[    5.235424] conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x23a6003a
[    5.245079] conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x63a7003a
[    5.258763] conninfra@(connsys_a_die_efuse_read_nolock:906) efuse = [0x00000001, 0x00c40000, 0x008800ba, 0x00000000]
[    5.270275] conninfra@(consys_spi_write_nolock:670) addr = 0x0144, val = 0x00000002
[    5.279929] conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x23a7003a
[    5.289584] conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x63ac003a
[    5.303267] conninfra@(connsys_a_die_efuse_read_nolock:906) efuse = [0x00000001, 0x00c40000, 0x008800ba, 0x00000000]
[    5.314778] conninfra@(consys_spi_write_nolock:670) addr = 0x0038, val = 0x4a563b00
[    5.323426] conninfra@(consys_spi_write_nolock:670) addr = 0x065c, val = 0x1d59080f
[    5.332074] conninfra@(consys_spi_write_nolock:670) addr = 0x0664, val = 0x34c00fe0
[    5.341732] conninfra@(consys_spi_write_nolock:670) addr = 0x0a00, val = 0xffffffff
[    5.350379] conninfra@(consys_spi_write_nolock:670) addr = 0x0144, val = 0x00000002
[    5.360034] conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x00000000
[    5.369689] conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x43a60000
[    5.383373] conninfra@(connsys_a_die_efuse_read_nolock:906) efuse = [0x00000001, 0x00c40000, 0x008800b8, 0x00000000]
[    5.394885] conninfra@(consys_spi_write_nolock:670) addr = 0x0144, val = 0x00000002
[    5.404539] conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x23a6003a
[    5.414193] conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x63a7003a
[    5.427875] conninfra@(connsys_a_die_efuse_read_nolock:906) efuse = [0x00000001, 0x00c40000, 0x008800b8, 0x00000000]
[    5.439386] conninfra@(consys_spi_write_nolock:670) addr = 0x0144, val = 0x00000002
[    5.449040] conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x23a7003a
[    5.458695] conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x63ac003a
[    5.472377] conninfra@(connsys_a_die_efuse_read_nolock:906) efuse = [0x00000001, 0x00c40000, 0x008800b8, 0x00000000]
[    5.483888] conninfra@(consys_spi_write_nolock:670) addr = 0x0038, val = 0x4a563b00
[    5.492536] conninfra@(consys_spi_write_nolock:670) addr = 0x065c, val = 0x1d59080f
[    5.501184] conninfra@(consys_spi_write_nolock:670) addr = 0x0664, val = 0x34c00fe0
[    5.509834] conninfra@(consys_spi_write_nolock:670) addr = 0x0070, val = 0x88888005
[    5.519440] conninfra@(consys_spi_write_nolock:670) addr = 0x0070, val = 0x00000005
[    5.528090] conninfra@(consys_spi_write_nolock:670) addr = 0x0070, val = 0x88888005
[    5.537695] conninfra@(consys_spi_write_nolock:670) addr = 0x0070, val = 0x00000005
[    5.546284] conninfra@(_consys_polling_chipid_int:459) Read CONNSYS HW IP version successfully! (0x02070000)
[    5.556097] conninfra@(_consys_hw_conninfra_wakeup:470) conninfra_wakeup refcnt=[0]->[1] wakeup!!
[    5.564962] conninfra@(_consys_hw_conninfra_sleep:490) conninfra_sleep refcnt=[1]->[0] sleep!!
[    5.573561] conninfra@(opfunc_power_on_internal:241) [Conninfra Pwr On] BT=[0] FM=[0] GPS=[0] WF=[0] CONNINFRA=[1]
[    5.603622] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    5.610965] ehci-fsl: Freescale EHCI Host controller driver
[    5.617270] ehci-platform: EHCI generic platform driver
[    5.624864] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    5.631826] ohci-platform: OHCI generic platform driver
[    5.673378] mediatek_soc_hnat 15100000.hnat: wan = eth1
[    5.678617] mediatek_soc_hnat 15100000.hnat: lan = lan
[    5.683755] mediatek_soc_hnat 15100000.hnat: lan2 = eth2
[    5.689058] mediatek_soc_hnat 15100000.hnat: ppd = eth0
[    5.694273] mediatek_soc_hnat 15100000.hnat: gmac num = 2
[    5.699662] mediatek_soc_hnat 15100000.hnat: ppe num = 1
[    5.705330] mediatek_soc_hnat 15100000.hnat: PPE0 entry number = 8192
[    5.722024] mediatek_soc_hnat 15100000.hnat: PPE0 hwnat start
[    5.727833] hnat roaming work enable
[    5.733994] warp_module_init(): module init and register callback for warp
[    5.740895] create warp_ctrl ok!!!
[    5.744319] wed_get_slot_map(): assign slot_id:0 for entry: 0!
[    5.750151] wed_get_slot_map(): assign slot_id:1 for entry: 1!
[    5.756804] zy_platform zybsp: zy_platform_probe,501, enter.
[    5.762535] zy_platform zybsp: board detect value: 0
[    5.767613] zy_platform zybsp: vendor board detect value: 0
[    5.773288] zy_platform zybsp: low power detect value: 1
[    5.778714] zy_platform zybsp: zyxel-dg-gpios is gpio 438 and active 1
[    5.785680] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    5.796299] init: - preinit -
[    6.508494] mtk_soc_eth 15100000.ethernet eth0: configuring for fixed/2500base-x link mode
[    6.516831] mtk_soc_eth 15100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
[    8.608595] mount_root: loading kmods from internal overlay
[    8.630109] kmodloader: loading kernel modules from //etc/modules-boot.d/*
[    8.638122] kmodloader: done loading kernel modules from //etc/modules-boot.d/*
[   11.148604] UBIFS (ubi0:4): Mounting in unauthenticated mode
[   11.154350] UBIFS (ubi0:4): background thread "ubifs_bgt0_4" started, PID 967
[   11.228382] UBIFS (ubi0:4): recovery needed
[   11.429745] UBIFS (ubi0:4): recovery completed
[   11.434233] UBIFS (ubi0:4): UBIFS: mounted UBI device 0, volume 4, name "rootfs_data"
[   11.442054] UBIFS (ubi0:4): LEB size: 253952 bytes (248 KiB), min./max. I/O unit sizes: 4096 bytes/4096 bytes
[   11.451955] UBIFS (ubi0:4): FS size: 5332992 bytes (5 MiB, 21 LEBs), journal size 2031617 bytes (1 MiB, 6 LEBs)
[   11.462028] UBIFS (ubi0:4): reserved for root: 251889 bytes (245 KiB)
[   11.468459] UBIFS (ubi0:4): media format: w5/r0 (latest is w5/r0), UUID 2F290249-4F34-4E69-B29B-12B75B7916D6, small LPT model
[   11.482898] block: attempting to load /tmp/ubifs_cfg/upper/etc/config/fstab
[   11.501498] block: extroot: not configured
[   11.505672] UBIFS (ubi0:4): un-mount UBI device 0
[   11.510377] UBIFS (ubi0:4): background thread "ubifs_bgt0_4" stops
[   11.520143] UBIFS (ubi0:4): Mounting in unauthenticated mode
[   11.525856] UBIFS (ubi0:4): background thread "ubifs_bgt0_4" started, PID 970
[   11.675098] UBIFS (ubi0:4): UBIFS: mounted UBI device 0, volume 4, name "rootfs_data"
[   11.682930] UBIFS (ubi0:4): LEB size: 253952 bytes (248 KiB), min./max. I/O unit sizes: 4096 bytes/4096 bytes
[   11.692832] UBIFS (ubi0:4): FS size: 5332992 bytes (5 MiB, 21 LEBs), journal size 2031617 bytes (1 MiB, 6 LEBs)
[   11.702906] UBIFS (ubi0:4): reserved for root: 251889 bytes (245 KiB)
[   11.709338] UBIFS (ubi0:4): media format: w5/r0 (latest is w5/r0), UUID 2F290249-4F34-4E69-B29B-12B75B7916D6, small LPT model
[   11.730370] mount_root: loading kmods from internal overlay
[   11.757007] kmodloader: loading kernel modules from /tmp/overlay/upper/etc/modules-boot.d/*
[   11.767944] kmodloader: done loading kernel modules from /tmp/overlay/upper/etc/modules-boot.d/*
[   14.217815] block: attempting to load /tmp/ubifs_cfg/upper/etc/config/fstab
[   14.231630] block: extroot: not configured
[   14.239215] mount_root: switching to ubifs overlay
[   14.255872] urandom-seed: Seed file not found (/etc/urandom.seed)
[   14.292859] procd: - early -
[   14.295789] procd: - watchdog -
[   14.809981] procd: - watchdog -
[   14.815177] procd: - ubus -
[   14.869112] procd: - init -
[   15.213265] urngd: v1.0.2 started.
[   15.298165] kmodloader: loading kernel modules from /etc/modules.d/*
[   15.319837] MACsec IEEE 802.1AE
[   15.355169] NET: Registered protocol family 8
[   15.359538] NET: Registered protocol family 20
[   15.368316] NET: Registered protocol family 15
[   15.404124] l2tp_core: L2TP core driver, V2.0
[   15.409570] l2tp_netlink: L2TP netlink interface
[   15.415912] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver
[   15.423366] nat46: module (version 362640b41ae52b732d9e9729e61ac555492442a3) loaded.
[   15.431983] gre: GRE over IPv4 demultiplexor driver
[   15.438320] ip_gre: GRE over IPv4 tunneling driver
[   15.453296] ip6_gre: GRE over IPv6 tunneling driver
[   15.480795] PPP generic driver version 2.4.2
[   15.506566] GACT probability on
[   15.510889] Mirror/redirect action on
[   15.521966] u32 classifier
[   15.524709]     input device check on
[   15.528374]     Actions configured
[   15.605992] fuse: init (API version 7.31)
[   15.613322] usbcore: registered new interface driver cdc_acm
[   15.619069] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
[   15.628507] usbcore: registered new interface driver cdc_wdm
[   15.646427] hso: drivers/net/usb/hso.c: Option Wireless
[   15.651825] usbcore: registered new interface driver hso
[   15.664057] Current mapfilter version v3.0.1
[   16.666696] mt_wifi: module license 'Proprietary' taints kernel.
[   16.672724] Disabling lock debugging due to kernel taint
[   16.716796] conninfra@(conninfra_pwr_on:120) [conninfra_pwr_on] drv=[3]
[   16.724354] conninfra@(_consys_polling_chipid_int:459) Read CONNSYS HW IP version successfully! (0x02070000)
[   16.742265] Adie Type: 0x7976
[   16.742268] SKU Type: 6000
[   16.746224] conninfra@(opfunc_power_on_internal:241) [Conninfra Pwr On] BT=[0] FM=[0] GPS=[0] WF=[1] CONNINFRA=[1]
[   16.761033] WiFi@C12L1,get_dbg_setting_by_profile() 4203: debug level setting=INDEX0_debug_level not found!!
[   16.770941] WiFi@C12L1,get_dbg_setting_by_profile() 4226: debug option setting=INDEX0_debug_option not found!!
[   16.781034] mt_rbus 0000:00:00.0: runtime IRQ mapping not provided by arch
[   16.794794] mt7986_init()-->
[   16.797710] e2p : MT7986_E2PImage (Normal)
[   16.801845]  sku:0xf, ADIE=MT7976
[   16.806217] <--mt7986_init()
[   16.809115] mt7915_ap.ko zyWlan_evt_init: create socket successfully
[   16.815500] RtmpRaDevCtrlInit(): MCS_LUT not used becasue MacTb size(544) > 128!
[   16.823086] WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX1
[   16.830445] WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX2
[   16.837781] WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX3
[   16.845120] WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX4
[   16.852450] WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX5
[   16.859777] WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX6
[   16.867101] WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX7
[   16.874430] WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX8
[   16.881762] WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX9
[   16.889075] WiFi@C12L2,match_index_by_chipname() 512: Not find slot id, back to old rule.
[   16.897349] msta_ifname not found
[   16.909608] -->mtfwd_init(ver:2.0)
[   16.909651] <--
[   16.913653] mtk_warp_proxy: module uses symbols from proprietary module mt_wifi, inheriting taint.
[   16.933315] PPP MPPE Compression module registered
[   16.939170] NET: Registered protocol family 24
[   16.944746] PPTP driver version 0.8.5
[   16.949919] usbcore: registered new interface driver usblp
[   16.960605] usbcore: registered new interface driver usbserial_generic
[   16.967243] usbserial: USB Serial support registered for generic
[   16.992967] xt_time: kernel timezone is -0000
[   16.999281] usbcore: registered new interface driver cdc_ether
[   17.007087] usbcore: registered new interface driver cdc_ncm
[   17.017427] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[   17.126232] /proc/zy_nf_ct_udp_STB_port created
[   17.130808] /proc/zy_nf_ct_udp_STB_timeout created
[   17.147970] usbcore: registered new interface driver qmi_wwan
[   17.155263] usbcore: registered new interface driver rndis_host
[   17.178045] usbcore: registered new interface driver option
[   17.183752] usbserial: USB Serial support registered for GSM modem (1-port)
[   17.192283] kmodloader: done loading kernel modules from /etc/modules.d/*
[   18.466919] mtk_soc_eth 15100000.ethernet eth0: TX vlan offload cannot be enabled when dsa is attached.
[   18.476956] mtk_soc_eth 15100000.ethernet eth0: TX vlan offload cannot be enabled when dsa is attached.
[   21.158427] /dev/ubi0_3: Can't open blockdev
[   21.166083] FAT-fs (sda1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   21.182812] FAT-fs (sda1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   21.237052] block ubiblock0_3: created from ubi0:3(zydefault)
[   21.267918] ubi1: attaching mtd8
[   22.927854] ubi1: scanning is finished
[   22.939795] ubi1: attached mtd8 (name "zyubi", size 346 MiB)
[   22.945458] ubi1: PEB size: 262144 bytes (256 KiB), LEB size: 253952 bytes
[   22.952332] ubi1: min./max. I/O unit sizes: 4096/4096, sub-page size 4096
[   22.959108] ubi1: VID header offset: 4096 (aligned 4096), data offset: 8192
[   22.966056] ubi1: good PEBs: 1386, bad PEBs: 0, corrupted PEBs: 0
[   22.972138] ubi1: user volume: 5, internal volumes: 1, max. volumes count: 128
[   22.979347] ubi1: max/mean erase counter: 3/1, WL threshold: 4096, image sequence number: 384601786
[   22.988378] ubi1: available PEBs: 0, total reserved PEBs: 1386, PEBs reserved for bad PEB handling: 38
[   22.997675] ubi1: background thread "ubi_bgt1d" started, PID 2502
[   23.029214] UBIFS (ubi1:3): Mounting in unauthenticated mode
[   23.034935] UBIFS (ubi1:3): background thread "ubifs_bgt1_3" started, PID 2510
[   23.109797] UBIFS (ubi1:3): recovery needed
[   23.290737] UBIFS (ubi1:3): recovery completed
[   23.295246] UBIFS (ubi1:3): UBIFS: mounted UBI device 1, volume 3, name "data"
[   23.302458] UBIFS (ubi1:3): LEB size: 253952 bytes (248 KiB), min./max. I/O unit sizes: 4096 bytes/4096 bytes
[   23.312360] UBIFS (ubi1:3): FS size: 18538496 bytes (17 MiB, 73 LEBs), journal size 2031617 bytes (1 MiB, 6 LEBs)
[   23.322606] UBIFS (ubi1:3): reserved for root: 875618 bytes (855 KiB)
[   23.329037] UBIFS (ubi1:3): media format: w5/r0 (latest is w5/r0), UUID 7E98D08E-4F3B-4FC2-87B1-A934E4BB9EB2, small LPT model
[   23.358983] UBIFS (ubi1:4): Mounting in unauthenticated mode
[   23.364711] UBIFS (ubi1:4): background thread "ubifs_bgt1_4" started, PID 2515
[   23.439464] UBIFS (ubi1:4): recovery needed
[   23.607673] UBIFS (ubi1:4): recovery completed
[   23.612178] UBIFS (ubi1:4): UBIFS: mounted UBI device 1, volume 4, name "misc"
[   23.619392] UBIFS (ubi1:4): LEB size: 253952 bytes (248 KiB), min./max. I/O unit sizes: 4096 bytes/4096 bytes
[   23.629293] UBIFS (ubi1:4): FS size: 310583296 bytes (296 MiB, 1223 LEBs), journal size 15491072 bytes (14 MiB, 61 LEBs)
[   23.640147] UBIFS (ubi1:4): reserved for root: 4952683 bytes (4836 KiB)
[   23.646751] UBIFS (ubi1:4): media format: w5/r0 (latest is w5/r0), UUID 1C22E3E8-32C6-454B-AA2D-A3D57315C992, small LPT model
[   23.833906] Lservices Loaded - NComm, Inc.
[   23.842960] exLinuxETH Loaded - NComm, Inc.
[   23.858463] NComm TMS V6.92 ~~Kernel Module loaded. MAJOR:308
[   25.993051] set user_pid flag to 2795
[   35.587522] Per-port-per-queue mode is going to be enabled!
[   35.593100] PPPQ use qid 0~5 (scheduler 0).
[   37.318816] device eth0 entered promiscuous mode
[   37.323991] mt7530 mdio-bus:1f lan5: configuring for fixed/2500base-x link mode
[   37.332480] 8021q: adding VLAN 0 to HW filter on device lan5
[   37.332652] mt7530 mdio-bus:1f lan5: Link is Up - 2.5Gbps/Full - flow control rx/tx
[   37.345891] IPv6: ADDRCONF(NETDEV_CHANGE): lan5: link becomes ready
[   37.393200] mt7530 mdio-bus:1f lan1: configuring for phy/gmii link mode
[   37.400483] 8021q: adding VLAN 0 to HW filter on device lan1
[   37.402747] mt7530 mdio-bus:1f lan1: Link is Up - 1Gbps/Full - flow control rx/tx
[   37.413700] IPv6: ADDRCONF(NETDEV_CHANGE): lan1: link becomes ready
[   37.471801] mt7530 mdio-bus:1f lan2: configuring for phy/gmii link mode
[   37.479015] 8021q: adding VLAN 0 to HW filter on device lan2
[   37.530919] mt7530 mdio-bus:1f lan3: configuring for phy/gmii link mode
[   37.538111] 8021q: adding VLAN 0 to HW filter on device lan3
[   37.588821] mtk_soc_eth 15100000.ethernet eth1: configuring for fixed/2500base-x link mode
[   37.597212] mtk_soc_eth 15100000.ethernet eth1: Link is Up - 2.5Gbps/Full - flow control rx/tx
[   38.727014] br0: port 1(lan5) entered blocking state
[   38.732039] br0: port 1(lan5) entered disabled state
[   38.737575] device lan5 entered promiscuous mode
[   38.772251] br0: port 2(lan1) entered blocking state
[   38.777280] br0: port 2(lan1) entered disabled state
[   38.782857] device lan1 entered promiscuous mode
[   38.818272] br0: port 3(lan2) entered blocking state
[   38.823266] br0: port 3(lan2) entered disabled state
[   38.828986] device lan2 entered promiscuous mode
[   38.862359] br0: port 4(lan3) entered blocking state
[   38.867367] br0: port 4(lan3) entered disabled state
[   38.873347] device lan3 entered promiscuous mode
[   38.995424] br0: port 2(lan1) entered blocking state
[   39.001727] br0: port 2(lan1) entered forwarding state
[   39.008323] br0: port 1(lan5) entered blocking state
[   39.014624] br0: port 1(lan5) entered forwarding state
[   45.394212] 7986@C12L1ra0,rt28xx_ap_ioctl() 873: interface is down, cmd [8be2] return!!!
[   46.100030] module exit
[   46.171313] usb 2-1: USB disconnect, device number 2
[   46.177543] blk_update_request: I/O error, dev sda, sector 2049 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[   46.187853] Buffer I/O error on dev sda1, logical block 1, lost async page write
[   47.315283] usb 2-1: new SuperSpeed Gen 1x2 USB device number 3 using xhci-mtk
[   47.344623] usb-storage 2-1:1.0: USB Mass Storage device detected
[   47.350932] scsi host0: usb-storage 2-1:1.0
[   48.375579] scsi 0:0:0:0: Direct-Access     SanDisk  Extreme          0001 PQ: 0 ANSI: 6
[   48.384234] sd 0:0:0:0: [sda] 61341696 512-byte logical blocks: (31.4 GB/29.3 GiB)
[   48.392038] sd 0:0:0:0: [sda] Write Protect is off
[   48.396846] sd 0:0:0:0: [sda] Mode Sense: 53 00 00 08
[   48.402097] sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, doesn't support DPO or FUA
[   48.412725]  sda: sda1

aikamoinen · June 24, 2026, 11:05am

I also just ran the installer again but saved the matrix_boot_initramfs log file. Here it is with dmesg after it rebooted:

matrix_boot_initramfs.log

=== Matrix EX5601-T0 initramfs stager ===
[1] Checking commands
[2] Checking image
FIT image detected
INITRAMFS_SIZE=27210500
[3] Checking OEM stock layout
console=ttyS0,115200n1 loglevel=8 earlycon=uart8250,mmio32,0x11002000 rootubi=ubi2
ACTIVE_MTD=mtd7
TARGET_MTD=mtd6
TARGET_NAME=ubi
[4] Reading active metadata
ACTIVE_UBI=/dev/ubi0
ACTIVE_SEQ=3
NEW_SEQ=4
[5] Formatting inactive stock bank
TARGET_UBI=/dev/ubi2
LEB_SIZE=253952
KERNEL_VOL_SIZE=27426816
[6] Creating temporary boot volumes
[7] Writing initramfs FIT
[8] Updating zyfwinfo
[9] Writing zydefault
[10] Final sync
==============================================
STAGE COMPLETE
Temporary initramfs FIT has been written.
Target bank: mtd6 / ubi
No ubootmod NAND conversion was done.
No FIP was written.
Log: /mnt/usb/matrix_boot_initramfs.log
==============================================
Rebooting in 5 seconds...

dmesg

[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[    0.000000] Linux version 5.4.171 (yenchun@ZT192913-PC87) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r0-15e7255fc)) #0 SMP Wed Sep 25 02:46:31 2024
[    0.000000] Machine model: ZYXEL EX5601-T0
[    0.000000] earlycon: uart8250 at MMIO32 0x0000000011002000 (options '')
[    0.000000] printk: bootconsole [uart8250] enabled
[    0.000000] On node 0 totalpages: 261136
[    0.000000]   DMA32 zone: 4096 pages used for memmap
[    0.000000]   DMA32 zone: 0 pages reserved
[    0.000000]   DMA32 zone: 261136 pages, LIFO batch:63
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv1.1 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.
[    0.000000] psci: SMC Calling Convention v1.0
[    0.000000] percpu: Embedded 20 pages/cpu s43864 r8192 d29864 u81920
[    0.000000] pcpu-alloc: s43864 r8192 d29864 u81920 alloc=20*4096
[    0.000000] pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 
[    0.000000] Detected VIPT I-cache on CPU0
[    0.000000] CPU features: detected: GIC system register CPU interface
[    0.000000] CPU features: kernel page table isolation disabled by kernel configuration
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 257040
[    0.000000] Kernel command line: console=ttyS0,115200n1 loglevel=8 earlycon=uart8250,mmio32,0x11002000 rootubi=ubi2
[    0.000000] Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes, linear)
[    0.000000] Inode-cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 1013152K/1044544K available (7422K kernel code, 536K rwdata, 2152K rodata, 448K init, 302K bss, 31392K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000] rcu: 	CONFIG_RCU_FANOUT set to non-default value of 32.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies.
[    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[    0.000000] GICv3: GIC: Using split EOI/Deactivate mode
[    0.000000] GICv3: 640 SPIs implemented
[    0.000000] GICv3: 0 Extended SPIs implemented
[    0.000000] GICv3: Distributor has no Range Selector support
[    0.000000] GICv3: 16 PPIs implemented
[    0.000000] GICv3: no VLPI support, no direct LPI support
[    0.000000] GICv3: CPU0: found redistributor 0 region 0:0x000000000c080000
[    0.000000] random: get_random_bytes called from start_kernel+0x2d4/0x420 with crng_init=0
[    0.000000] arch_timer: cp15 timer(s) running at 12.98MHz (phys).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x2fea2a9e4, max_idle_ns: 440795202546 ns
[    0.000002] sched_clock: 56 bits at 12MHz, resolution 77ns, wraps every 4398046511074ns
[    0.008184] Calibrating delay loop (skipped), value calculated using timer frequency.. 25.96 BogoMIPS (lpj=51938)
[    0.018512] pid_max: default: 32768 minimum: 301
[    0.023219] Mount-cache hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.030662] Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.039291] ASID allocator initialised with 65536 entries
[    0.044768] rcu: Hierarchical SRCU implementation.
[    0.049840] smp: Bringing up secondary CPUs ...
[    0.054614] Detected VIPT I-cache on CPU1
[    0.054634] GICv3: CPU1: found redistributor 1 region 0:0x000000000c0a0000
[    0.054654] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
[    0.054880] Detected VIPT I-cache on CPU2
[    0.054890] GICv3: CPU2: found redistributor 2 region 0:0x000000000c0c0000
[    0.054897] CPU2: Booted secondary processor 0x0000000002 [0x410fd034]
[    0.055103] Detected VIPT I-cache on CPU3
[    0.055111] GICv3: CPU3: found redistributor 3 region 0:0x000000000c0e0000
[    0.055119] CPU3: Booted secondary processor 0x0000000003 [0x410fd034]
[    0.055146] smp: Brought up 1 node, 4 CPUs
[    0.111765] SMP: Total of 4 processors activated.
[    0.116493] CPU features: detected: 32-bit EL0 Support
[    0.121658] CPU features: detected: CRC32 instructions
[    0.126908] CPU: All CPU(s) started at EL2
[    0.131032] alternatives: patching kernel code
[    0.137486] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
[    0.147310] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[    0.154312] pinctrl core: initialized pinctrl subsystem
[    0.159989] NET: Registered protocol family 16
[    0.164629] DMA: preallocated 256 KiB pool for atomic allocations
[    0.178998] cryptd: max_cpu_qlen set to 1000
[    0.184407] SCSI subsystem initialized
[    0.188360] libata version 3.00 loaded.
[    0.192389] usbcore: registered new interface driver usbfs
[    0.197946] usbcore: registered new interface driver hub
[    0.203310] usbcore: registered new device driver usb
[    0.208817] Advanced Linux Sound Architecture Driver Initialized.
[    0.215967] rbus 18000000.wbsys: PCI host bridge to bus 0000:00
[    0.221928] pci_bus 0000:00: root bus resource [mem 0x18000000-0x18ffffff]
[    0.228844] pci_bus 0000:00: root bus resource [bus 00-ff]
[    0.234360] pci_bus 0000:00: scanning bus
[    0.238400] pci 0000:00:00.0: [14c3:7986] type 00 class 0x000280
[    0.244448] pci 0000:00:00.0: reg 0x10: [mem 0x18000000-0x1800000f 64bit]
[    0.251276] pci 0000:00:00.0: reg 0x18: [mem 0x00000000-0x0000000f]
[    0.257578] pci 0000:00:00.0: reg 0x1c: [mem 0x00000000-0x0000000f]
[    0.263881] pci 0000:00:00.0: reg 0x20: [mem 0x00000000-0x0000000f]
[    0.270183] pci 0000:00:00.0: reg 0x24: [mem 0x00000000-0x0000000f]
[    0.277265] pci_bus 0000:00: fixups for bus
[    0.281471] pci_bus 0000:00: bus scan returning with max=00
[    0.287327] clocksource: Switched to clocksource arch_sys_counter
[    0.318434] NET: Registered protocol family 2
[    0.329449] IP idents hash table entries: 16384 (order: 5, 131072 bytes, linear)
[    0.337274] tcp_listen_portaddr_hash hash table entries: 512 (order: 1, 8192 bytes, linear)
[    0.345688] TCP established hash table entries: 8192 (order: 4, 65536 bytes, linear)
[    0.353510] TCP bind hash table entries: 8192 (order: 5, 131072 bytes, linear)
[    0.360850] TCP: Hash tables configured (established 8192 bind 8192)
[    0.367306] UDP hash table entries: 512 (order: 2, 16384 bytes, linear)
[    0.373972] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes, linear)
[    0.381134] NET: Registered protocol family 1
[    0.385533] PCI: CLS 0 bytes, default 64
[    0.390143] workingset: timestamp_bits=46 max_order=18 bucket_order=0
[    0.399145] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.405088] ntfs: driver 2.1.32 [Flags: R/O].
[    0.409546] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.435773] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    0.442626] printk: console [ttyS0] disabled
[    0.467034] 11002000.serial: ttyS0 at MMIO 0x11002000 (irq = 11, base_baud = 2500000) is a ST16650V2
[    0.476251] printk: console [ttyS0] enabled
[    0.484612] printk: bootconsole [uart8250] disabled
[    0.514709] 11003000.serial: ttyS1 at MMIO 0x11003000 (irq = 12, base_baud = 1625000) is a ST16650V2
[    0.544148] 11004000.serial: ttyS2 at MMIO 0x11004000 (irq = 13, base_baud = 1625000) is a ST16650V2
[    0.553735] mtk_rng 1020f000.trng: registered RNG driver
[    0.553935] random: fast init done
[    0.559247] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    0.562671] random: crng init done
[    0.570104] loop: module loaded
[    0.576456] spi-nor spi0.0: unrecognized JEDEC id bytes: ff c2 37 03 00 c2
[    0.583350] spi-nor: probe of spi0.0 failed with error -2
[    0.588945] spi-nand spi0.1: Macronix SPI NAND was found.
[    0.594340] spi-nand spi0.1: 512 MiB, block size: 256 KiB, page size: 4096, OOB size: 128
[    0.603845] libphy: Fixed MDIO Bus: probed
[    0.608500] [mtk_hw_init] reset_lock:0, force:0
[    0.613051] [mtk_hw_init] execute fe cold reset
[    0.628740] libphy: mdio: probed
[    0.852419] Intel GPY211 PHY mdio-bus:05: driver wait 0 ms for phy ready!
[    0.915694] Intel GPY211 PHY mdio-bus:06: driver wait 0 ms for phy ready!
[    0.923714] mtk_soc_eth 15100000.ethernet: generated random MAC address c6:b8:12:08:b8:c0
[    0.932099] mtk_soc_eth 15100000.ethernet eth0: mediatek frame engine at 0xffffffc011b00000, irq 122
[    0.941242] mtk_soc_eth 15100000.ethernet: generated random MAC address c2:97:78:c8:ce:b1
[    0.949570] mtk_soc_eth 15100000.ethernet eth1: mediatek frame engine at 0xffffffc011b00000, irq 122
[    0.958695] (unnamed net_device) (dummy): netif_napi_add() called with weight 256
[    0.966447] xhci-mtk 11200000.xhci: 11200000.xhci supply vbus not found, using dummy regulator
[    0.975079] xhci-mtk 11200000.xhci: 11200000.xhci supply vusb33 not found, using dummy regulator
[    0.983909] DEBUG: enable is gpio 419 and active 1
[    0.988709] DEBUG: oc is gpio 418 and active 1
[    1.080632] i2c /dev entries driver
[    1.085134] mtk-wdt 1001c000.watchdog: Watchdog enabled (timeout=31 sec, nowayout=0)
[    1.093044] device-mapper: ioctl: 4.41.0-ioctl (2019-09-16) initialised: dm-devel@redhat.com
[    1.101885] crypto-safexcel 10320000.crypto: EIP97:230(0,1,4,4)-HIA:270(0,5,5),PE:150/433,alg:7fcdfc00
[    1.115159] mt79xx-audio 11210000.audio-controller: No cache used with register defaults set!
[    1.123763] mt79xx-audio 11210000.audio-controller: mtk_afe_combine_sub_dai(), num of dai 3
[    1.132261] debugfs: Directory '11210000.audio-controller' with parent 'mt79xx-si3218x' already present!
[    1.141830] slic-dummy-codec dummy_codec: dummy_component_probe
[    1.147903] mt79xx-si3218x sound_si3218x: snd-soc-dummy-dai <-> DL1 mapping ok
[    1.155254] mt79xx-si3218x sound_si3218x: snd-soc-dummy-dai <-> UL1 mapping ok
[    1.162466] 
[    1.162466] ###@@@###@@@###@@@ mt79xx_si3218x_init()/Line-76: Enter...
[    1.162466] 
[    1.171975] 
[    1.171975] ###@@@###@@@###@@@ mtk_dai_etdm_set_fmt()/Line-447/dai->id=2: Enter...fmt=0x00004304...
[    1.171975] 
[    1.183986] mt79xx-si3218x sound_si3218x: dummy_codec <-> ETDM mapping ok
[    1.191088] Initializing XFRM netlink socket
[    1.195615] NET: Registered protocol family 10
[    1.200521] Segment Routing with IPv6
[    1.204217] NET: Registered protocol family 17
[    1.208685] Bridge firewalling registered
[    1.212732] 8021q: 802.1Q VLAN Support v1.8
[    1.224001] nmbm nmbm_spim_nand: Signature found at block 2047 [0x1ffc0000]
[    1.233444] nmbm nmbm_spim_nand: First info table with writecount 0 found in block 1920
[    1.249018] nmbm nmbm_spim_nand: Second info table with writecount 0 found in block 1923
[    1.257103] nmbm nmbm_spim_nand: NMBM has been successfully attached 
[    1.263672] 8 fixed-partitions partitions found on MTD device nmbm_spim_nand
[    1.270713] Creating 8 MTD partitions on "nmbm_spim_nand":
[    1.276195] 0x000000000000-0x000000100000 : "BL2"
[    1.281316] 0x000000100000-0x000000180000 : "u-boot-env"
[    1.286924] 0x000000180000-0x000000380000 : "Factory"
[    1.292268] 0x000000380000-0x000000540000 : "FIP"
[    1.297244] 0x000000540000-0x000000580000 : "zloader"
[    1.302570] 0x000000580000-0x000004580000 : "ubi"
[    1.307588] 0x000004580000-0x000008580000 : "ubi2"
[    1.312714] 0x000008580000-0x00001e000000 : "zyubi"
[    1.511355] usb 2-1: new SuperSpeed Gen 1x2 USB device number 2 using xhci-mtk
[    1.525572] libphy: dsa slave smi: probed
[    1.530442] mt7530 mdio-bus:1f lan1 (uninitialized): PHY [dsa-0.0:01] driver [Generic PHY]
[    1.536448] usb-storage 2-1:1.0: USB Mass Storage device detected
[    1.539883] mt7530 mdio-bus:1f lan2 (uninitialized): PHY [dsa-0.0:02] driver [Generic PHY]
[    1.544910] scsi host0: usb-storage 2-1:1.0
[    1.554144] mt7530 mdio-bus:1f lan3 (uninitialized): PHY [dsa-0.0:03] driver [Generic PHY]
[    1.566217] mt7530 mdio-bus:1f: configuring for fixed/2500base-x link mode
[    1.573362] DSA: tree 0 setup
[    1.573615] mt7530 mdio-bus:1f: Link is Up - 2.5Gbps/Full - flow control rx/tx
[    1.576477] UBI: plan to attach ubi2
[    1.587735] UBI: auto-attach mtd7
[    1.591042] ubi0: attaching mtd7
[    1.900659] ubi0: scanning is finished
[    1.912071] ubi0: attached mtd7 (name "ubi2", size 64 MiB)
[    1.917551] ubi0: PEB size: 262144 bytes (256 KiB), LEB size: 253952 bytes
[    1.924413] ubi0: min./max. I/O unit sizes: 4096/4096, sub-page size 4096
[    1.931188] ubi0: VID header offset: 4096 (aligned 4096), data offset: 8192
[    1.938137] ubi0: good PEBs: 256, bad PEBs: 0, corrupted PEBs: 0
[    1.944131] ubi0: user volume: 5, internal volumes: 1, max. volumes count: 128
[    1.951340] ubi0: max/mean erase counter: 8/3, WL threshold: 4096, image sequence number: 0
[    1.959677] ubi0: available PEBs: 0, total reserved PEBs: 256, PEBs reserved for bad PEB handling: 38
[    1.968887] ubi0: background thread "ubi_bgt0d" started, PID 835
[    1.969854] block ubiblock0_1: created from ubi0:1(rootfs)
[    1.980361] ubiblock: device ubiblock0_1 (rootfs) set to be root filesystem
[    1.987320] hctosys: unable to open rtc device (rtc0)
[    1.992582] ALSA device list:
[    1.995542]   #0: mt79xx-si3218x
[    2.005557] VFS: Mounted root (squashfs filesystem) readonly on device 253:0.
[    2.012842] Freeing unused kernel memory: 448K
[    2.035376] Run /sbin/init as init process
[    2.246013] init: Console is alive
[    2.249545] init: - watchdog -
[    4.803129] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    4.828628] conninfra@(mtk_conninfra_drv_init:644) Before platform_driver_register
[    4.836319] Get Index(0-TOP_MISC_BASE) phy_addr(0x11d10000) vir_addr=(0xffffffc010e45000) size=(0x1000)
[    4.845703] Get Index(1-TOPRGU_BASE) phy_addr(0x1001c000) vir_addr=(0xffffffc010e4d000) size=(0x1000)
[    4.854909] Get Index(2-GPIO_BASE) phy_addr(0x1001f000) vir_addr=(0xffffffc010e55000) size=(0x1000)
[    4.863942] Get Index(3-IOCFG_TR_BASE) phy_addr(0x11f00000) vir_addr=(0xffffffc010e57000) size=(0x1000)
[    4.873323] Get Index(4-IOCFG_TL_BASE) phy_addr(0x11f10000) vir_addr=(0xffffffc010e59000) size=(0x1000)
[    4.882704] Get Index(5-INFRACFG_AO_BASE) phy_addr(0x10003000) vir_addr=(0xffffffc010e5b000) size=(0x1000)
[    4.892348] Get Index(6-CONN_INFRA_CFG_BASE) phy_addr(0x18001000) vir_addr=(0xffffffc010e5d000) size=(0x1000)
[    4.902249] Get Index(7-CONN_INFRA_SYSRAM_BASE) phy_addr(0x18050000) vir_addr=(0xffffffc010e5f000) size=(0x1000)
[    4.912410] Get Index(8-CONN_INFRA_CLKGEN_ON_TOP_BASE) phy_addr(0x18009000) vir_addr=(0xffffffc010e61000) size=(0x1000)
[    4.923178] Get Index(9-CONN_HOST_CSR_TOP_BASE) phy_addr(0x18060000) vir_addr=(0xffffffc010e63000) size=(0x1000)
[    4.933338] Get Index(10-CONN_INFRA_BUS_CR_BASE) phy_addr(0x1800e000) vir_addr=(0xffffffc010e65000) size=(0x1000)
[    4.943586] Get Index(11-CONN_INFRA_RGU_BASE) phy_addr(0x18000000) vir_addr=(0xffffffc010e67000) size=(0x1000)
[    4.953573] Get Index(12-CONN_WT_SLP_CTL_REG_BASE) phy_addr(0x18005000) vir_addr=(0xffffffc010e69000) size=(0x1000)
[    4.963994] Get Index(13-INST2_CONN_WT_SLP_CTL_REG_BASE) phy_addr(0x18085000) vir_addr=(0xffffffc010e6b000) size=(0x1000)
[    4.974935] Get Index(14-CONN_RF_SPI_MST_REG_BASE) phy_addr(0x18004000) vir_addr=(0xffffffc010e6d000) size=(0x1000)
[    4.985356] Get Index(15-INST2_CONN_RF_SPI_MST_REG_BASE) phy_addr(0x18084000) vir_addr=(0xffffffc010e6f000) size=(0x1000)
[    4.996297] Get Index(16-CONN_SEMAPHORE_BASE) phy_addr(0x18070000) vir_addr=(0xffffffc010ec0000) size=(0x10000)
[    5.006372] Get Index(17-CONN_AFE_CTL_BASE) phy_addr(0x18003000) vir_addr=(0xffffffc010e71000) size=(0x1000)
[    5.016187] Get Index(18-CONN_AFE_CTL_2ND_BASE) phy_addr(0x18083000) vir_addr=(0xffffffc010e73000) size=(0x1000)
[    5.026347] Get Index(19-WF_TOP_SLPPROT_ON_BASE) phy_addr(0x184c0000) vir_addr=(0xffffffc010ee0000) size=(0x10000)
[    5.036682] Get Index(20-WF_TOP_CFG_BASE) phy_addr(0x184b0000) vir_addr=(0xffffffc010eb6000) size=(0x1000)
[    5.046322] Get Index(21-WF_MCU_CONFIG_LS_BASE) phy_addr(0x184f0000) vir_addr=(0xffffffc010eb8000) size=(0x1000)
[    5.056485] Get Index(22-WF_MCU_BUS_CR_BASE) phy_addr(0x18400000) vir_addr=(0xffffffc010eba000) size=(0x1000)
[    5.066386] Get Index(23-WF_MCUSYS_INFRA_BUS_FULL_U_DEBUG_CTRL_AO_BASE) phy_addr(0x18500000) vir_addr=(0xffffffc010ebc000) size=(0x1000)
[    5.078629] Get Index(24-WF_TOP_CFG_ON_BASE) phy_addr(0x184c0000) vir_addr=(0xffffffc010f00000) size=(0x10000)
[    5.089251] e[1;32meeFlashId: 0x7986, EEPROM_content_valid = 1e[0m
[    5.090457] conninfra@(consys_plt_hw_init:221) tx_stream = 0x4, rx_stream = 0x4, band0_pa_type = 0x3, band1_pa_type = 0x3
[    5.107567] conninfra@(consys_plt_hw_init:230) adie_cfg_type = 2, one_adie_dbdc = 0
[    5.115217] [emi_mng_init] gConEmiPhyBase = [0x4fc00000] size = [0x100000] fw size = [0x100000] ops=[00000000a009fa26]
[    5.627554] ehci-fsl: Freescale EHCI Host controller driver
[    5.633870] ehci-platform: EHCI generic platform driver
[    5.641470] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    5.648447] ohci-platform: OHCI generic platform driver
[    5.744457] hnat roaming work enable
[    5.750580] warp_module_init(): module init and register callback for warp
[    5.757479] create warp_ctrl ok!!!
[    5.760907] wed_get_slot_map(): assign slot_id:0 for entry: 0!
[    5.766739] wed_get_slot_map(): assign slot_id:1 for entry: 1!
[    5.773397] zy_platform zybsp: zy_platform_probe,501, enter.
[    5.779122] zy_platform zybsp: board detect value: 0 
[    5.784191] zy_platform zybsp: vendor board detect value: 0 
[    5.789864] zy_platform zybsp: low power detect value: 1 
[    5.795290] zy_platform zybsp: zyxel-dg-gpios is gpio 438 and active 1
[    5.802233] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    5.812613] init: - preinit -
[    6.525001] mtk_soc_eth 15100000.ethernet eth0: configuring for fixed/2500base-x link mode
[    6.533333] mtk_soc_eth 15100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
[    8.625313] mount_root: loading kmods from internal overlay
[    8.646511] kmodloader: loading kernel modules from //etc/modules-boot.d/*
[    8.654524] kmodloader: done loading kernel modules from //etc/modules-boot.d/*
[   11.164907] UBIFS (ubi0:4): Mounting in unauthenticated mode
[   11.170689] UBIFS (ubi0:4): background thread "ubifs_bgt0_4" started, PID 969
[   11.245044] UBIFS (ubi0:4): recovery needed
[   11.460757] UBIFS (ubi0:4): recovery completed
[   11.465262] UBIFS (ubi0:4): UBIFS: mounted UBI device 0, volume 4, name "rootfs_data"
[   11.473082] UBIFS (ubi0:4): LEB size: 253952 bytes (248 KiB), min./max. I/O unit sizes: 4096 bytes/4096 bytes
[   11.482983] UBIFS (ubi0:4): FS size: 5332992 bytes (5 MiB, 21 LEBs), journal size 2031617 bytes (1 MiB, 6 LEBs)
[   11.493057] UBIFS (ubi0:4): reserved for root: 251889 bytes (245 KiB)
[   11.499488] UBIFS (ubi0:4): media format: w5/r0 (latest is w5/r0), UUID 2F290249-4F34-4E69-B29B-12B75B7916D6, small LPT model
[   11.513945] block: attempting to load /tmp/ubifs_cfg/upper/etc/config/fstab
[   11.532538] block: extroot: not configured
[   11.536719] UBIFS (ubi0:4): un-mount UBI device 0
[   11.541425] UBIFS (ubi0:4): background thread "ubifs_bgt0_4" stops
[   11.551111] UBIFS (ubi0:4): Mounting in unauthenticated mode
[   11.556842] UBIFS (ubi0:4): background thread "ubifs_bgt0_4" started, PID 972
[   11.697774] UBIFS (ubi0:4): UBIFS: mounted UBI device 0, volume 4, name "rootfs_data"
[   11.705601] UBIFS (ubi0:4): LEB size: 253952 bytes (248 KiB), min./max. I/O unit sizes: 4096 bytes/4096 bytes
[   11.715503] UBIFS (ubi0:4): FS size: 5332992 bytes (5 MiB, 21 LEBs), journal size 2031617 bytes (1 MiB, 6 LEBs)
[   11.725576] UBIFS (ubi0:4): reserved for root: 251889 bytes (245 KiB)
[   11.732007] UBIFS (ubi0:4): media format: w5/r0 (latest is w5/r0), UUID 2F290249-4F34-4E69-B29B-12B75B7916D6, small LPT model
[   11.753079] mount_root: loading kmods from internal overlay
[   11.779309] kmodloader: loading kernel modules from /tmp/overlay/upper/etc/modules-boot.d/*
[   11.790260] kmodloader: done loading kernel modules from /tmp/overlay/upper/etc/modules-boot.d/*
[   14.239187] block: attempting to load /tmp/ubifs_cfg/upper/etc/config/fstab
[   14.252975] block: extroot: not configured
[   14.260578] mount_root: switching to ubifs overlay
[   14.277781] urandom-seed: Seed file not found (/etc/urandom.seed)
[   14.314771] procd: - early -
[   14.317691] procd: - watchdog -
[   14.832077] procd: - watchdog -
[   14.837269] procd: - ubus -
[   14.891217] procd: - init -
[   15.236294] urngd: v1.0.2 started.
[   15.321948] kmodloader: loading kernel modules from /etc/modules.d/*
[   15.343486] MACsec IEEE 802.1AE
[   15.379295] NET: Registered protocol family 8
[   15.383664] NET: Registered protocol family 20
[   15.392405] NET: Registered protocol family 15
[   15.428061] l2tp_core: L2TP core driver, V2.0
[   15.433516] l2tp_netlink: L2TP netlink interface
[   15.439778] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver
[   15.447199] nat46: module (version 362640b41ae52b732d9e9729e61ac555492442a3) loaded.
[   15.455815] gre: GRE over IPv4 demultiplexor driver
[   15.462125] ip_gre: GRE over IPv4 tunneling driver
[   15.476690] ip6_gre: GRE over IPv6 tunneling driver
[   15.499961] PPP generic driver version 2.4.2
[   15.526939] GACT probability on
[   15.531391] Mirror/redirect action on
[   15.542262] u32 classifier
[   15.545007]     input device check on
[   15.548680]     Actions configured
[   15.625033] fuse: init (API version 7.31)
[   15.632353] usbcore: registered new interface driver cdc_acm
[   15.638113] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
[   15.647680] usbcore: registered new interface driver cdc_wdm
[   15.665727] hso: drivers/net/usb/hso.c: Option Wireless
[   15.671094] usbcore: registered new interface driver hso
[   15.683259] Current mapfilter version v3.0.1
[   16.683213] mt_wifi: module license 'Proprietary' taints kernel.
[   16.689238] Disabling lock debugging due to kernel taint
[   16.733268] conninfra@(conninfra_pwr_on:120) [conninfra_pwr_on] drv=[3]
[   16.740837] conninfra@(_consys_polling_chipid_int:459) Read CONNSYS HW IP version successfully! (0x02070000)
[   16.758731] e[1;32mAdie Type: 0x7976e[0m
[   16.758734] e[1;32mSKU Type: 6000e[0m
[   16.762683] conninfra@(opfunc_power_on_internal:241) [Conninfra Pwr On] BT=[0] FM=[0] GPS=[0] WF=[1] CONNINFRA=[1]
[   16.950316] PPP MPPE Compression module registered
[   16.956060] NET: Registered protocol family 24
[   16.961610] PPTP driver version 0.8.5
[   16.966779] usbcore: registered new interface driver usblp
[   16.977579] usbcore: registered new interface driver usbserial_generic
[   16.984211] usbserial: USB Serial support registered for generic
[   17.010400] xt_time: kernel timezone is -0000
[   17.016697] usbcore: registered new interface driver cdc_ether
[   17.024569] usbcore: registered new interface driver cdc_ncm
[   17.035076] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[   17.144489] /proc/zy_nf_ct_udp_STB_port created
[   17.149053] /proc/zy_nf_ct_udp_STB_timeout created
[   17.168154] usbcore: registered new interface driver qmi_wwan
[   17.175408] usbcore: registered new interface driver rndis_host
[   17.198365] usbcore: registered new interface driver option
[   17.204032] usbserial: USB Serial support registered for GSM modem (1-port)
[   17.212436] kmodloader: done loading kernel modules from /etc/modules.d/*
[   18.482728] mtk_soc_eth 15100000.ethernet eth0: TX vlan offload cannot be enabled when dsa is attached.
[   18.492786] mtk_soc_eth 15100000.ethernet eth0: TX vlan offload cannot be enabled when dsa is attached.
[   21.185215] /dev/ubi0_3: Can't open blockdev
[   21.190995] FAT-fs (sda1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   21.207737] FAT-fs (sda1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   21.262174] block ubiblock0_3: created from ubi0:3(zydefault)
[   21.293338] ubi1: attaching mtd8
[   22.953829] ubi1: scanning is finished
[   22.965791] ubi1: attached mtd8 (name "zyubi", size 346 MiB)
[   22.971454] ubi1: PEB size: 262144 bytes (256 KiB), LEB size: 253952 bytes
[   22.978317] ubi1: min./max. I/O unit sizes: 4096/4096, sub-page size 4096
[   22.985091] ubi1: VID header offset: 4096 (aligned 4096), data offset: 8192
[   22.992039] ubi1: good PEBs: 1386, bad PEBs: 0, corrupted PEBs: 0
[   22.998122] ubi1: user volume: 5, internal volumes: 1, max. volumes count: 128
[   23.005331] ubi1: max/mean erase counter: 3/1, WL threshold: 4096, image sequence number: 384601786
[   23.014363] ubi1: available PEBs: 0, total reserved PEBs: 1386, PEBs reserved for bad PEB handling: 38
[   23.023659] ubi1: background thread "ubi_bgt1d" started, PID 2504
[   23.055209] UBIFS (ubi1:3): Mounting in unauthenticated mode
[   23.060947] UBIFS (ubi1:3): background thread "ubifs_bgt1_3" started, PID 2512
[   23.135443] UBIFS (ubi1:3): recovery needed
[   23.330850] UBIFS (ubi1:3): recovery completed
[   23.335349] UBIFS (ubi1:3): UBIFS: mounted UBI device 1, volume 3, name "data"
[   23.342562] UBIFS (ubi1:3): LEB size: 253952 bytes (248 KiB), min./max. I/O unit sizes: 4096 bytes/4096 bytes
[   23.352463] UBIFS (ubi1:3): FS size: 18538496 bytes (17 MiB, 73 LEBs), journal size 2031617 bytes (1 MiB, 6 LEBs)
[   23.362710] UBIFS (ubi1:3): reserved for root: 875618 bytes (855 KiB)
[   23.369141] UBIFS (ubi1:3): media format: w5/r0 (latest is w5/r0), UUID 7E98D08E-4F3B-4FC2-87B1-A934E4BB9EB2, small LPT model
[   23.399121] UBIFS (ubi1:4): Mounting in unauthenticated mode
[   23.404844] UBIFS (ubi1:4): background thread "ubifs_bgt1_4" started, PID 2517
[   23.479541] UBIFS (ubi1:4): recovery needed
[   23.697250] UBIFS (ubi1:4): recovery completed
[   23.701750] UBIFS (ubi1:4): UBIFS: mounted UBI device 1, volume 4, name "misc"
[   23.708968] UBIFS (ubi1:4): LEB size: 253952 bytes (248 KiB), min./max. I/O unit sizes: 4096 bytes/4096 bytes
[   23.718872] UBIFS (ubi1:4): FS size: 310583296 bytes (296 MiB, 1223 LEBs), journal size 15491072 bytes (14 MiB, 61 LEBs)
[   23.729729] UBIFS (ubi1:4): reserved for root: 4952683 bytes (4836 KiB)
[   23.736337] UBIFS (ubi1:4): media format: w5/r0 (latest is w5/r0), UUID 1C22E3E8-32C6-454B-AA2D-A3D57315C992, small LPT model

krys1 · June 24, 2026, 6:17pm

Log is helpfull, i can see the problem there are several checks before the script writes to the NAND. If any of these checks fail, the script will not do actual writing to prevent soft bricking router.
Try upgrading router to the firmware version 5.70 (ACDZ.4.1)C0 it should work.

aikamoinen · June 24, 2026, 6:44pm

Thanks do you have a recommendation of where to get that version?

frollic · June 24, 2026, 6:50pm

Firmware page link is on the T-56 wiki page.

aikamoinen · June 24, 2026, 8:29pm

I downloaded that version from https://www.prodottiperisp.it/ex5601.html and I got the message

“Image uploading failed. The selected file is an illegal image.”

Did I get the wrong file or something?

aikamoinen · June 24, 2026, 8:46pm

Oh… I tried to upload the zip file that has PDFs and the firmware in it… never mind.

aikamoinen · June 24, 2026, 8:57pm

Now after upgrading it successfully to that exact version you said and then running your script, when it boots it just has a red power light…

aikamoinen · June 25, 2026, 9:16pm

I ended up fixing the router with a serial connection.

I'm pretty sure I followed all instructions here and did this very carefully but it didn't work. My router ended up needing to be flashed with serial to get it working again after running this script.

krys1 · June 26, 2026, 7:43am

Serial connection is low-level access to hardware, you can write to any part of the NAND. Script uses kernel to write to NAND. This cannot be too aggressive in its writing because there must be checks in place to prevent bricking the router.

If i find router which refuse to write using script i will study and update the script

krys1 · June 26, 2026, 5:34pm

Always run the loader.sh script directly from the /tmp location, copy all files to the /tmp folder before running it. not from USB.

one suggestion to anyone having same issue: Select the installation openwrt with the stock layout. Afterwards, you can convert the stock to the ubotmod using a other script.

1alessandro1 · June 27, 2026, 2:23pm

hello, I've successfully run your script, however neither the "install stock layout" nor the "install ubootmod layout" are working. The router reboots with the default firmware from ODIDO every time.

root@EX5601-T1:/tmp# ./loader.sh 
 Extracting RootFS...
[OK] Extraction complete. Archive removed to save RAM.
 Installing Matrix files...
[OK] Matrix files installed.
⚠️  Unknown firmware version: V5.70(ACEA.0)T56C_b10_0818
 Preparing Environment...
[OK] Environment prepared with real device nodes.
 Starting Matrix flash runner...
[OK] Matrix flash runner started.
 Launching OpenWrt LuCI services...
================================================
      EX5601-T0 OpenWrt Installer
================================================
------------------------------------------------
 SUCCESS: Access LUCI at PORT 8080
 Example URL:     http://192.168.1.1:8080
 Username:	 root / no password
------------------------------------------------

krys1 · June 27, 2026, 6:01pm

The issue is that the router needs to switch its boot partition to the initramfs. but, on some routers, the commands for "atsw" or editing "zyfwinfo" do not work, and the router keeps booting from the same partition.

I have added a check in the script. For example, if you see message is there about "unknown firmware," it means that the script recognizes it maybe not compatiable firmware.

here you have two options:

If router boot to OEM after flash, try to switch the boot using "zyxel atsw" or use "fw_setenv." it will automatically take over once boot switch happens.
Consider updating the router with firmware versions 4.x or 5.x, as these versions support boot switching through scripts.

I am currently working on this issue, so in future update it will switch boot on all firmwares.

krys1 · June 28, 2026, 8:07am

@1alessandro1 I have updated the script, and you can download the modified version now. The bug that was preventing the boot switch has been fixed. Please make sure to clear your browser cache before downloading to avoid getting the old script bundle.