From quickly glancing over your devicetree it seems like there is an error with the ethernet switch.
The old ar71xx setup logic has it this way (when translated to DTS):
Well,I am trying to think of a way to read them from OpenWrt since ar71xx already has them set.
The utility I used is some UBNT home cooked that was left in the firmware.
Ethtool offers to dump registers but I dont think it dumps them all
I remember that i requested GPL sources from UBNT and they never provided.
I just did it again and if they dont honor it i will forward that to linux / u-boot maybe they finally take action then.
If you provide me some instructions i can try anything you want tonight.
I never change the uboot setings, I just try without anything, and then rename the image and add ip address to tftp server
Hit any key to stop autoboot: 0
ath> tft
Trying eth0
dup 1 speed 100
*** Warning: no boot file name; using '1401A8C0.img'
Using eth0 device
TFTP from server 192.168.1.254; our IP address is 192.168.1.20
Filename '1401A8C0.img'.
[...]
ath> bootm