Support for TL-WR840N(ES) Ver 5.0 (EU)

amaurynieto · September 2, 2017, 5:48pm

Did you guys notice that V4 is discontinued and V5 EU is out?

I know V4 works perfect, and I have my own buildroot, but now V5 is not working. So, new device. Cracked it open to see what was under the hood..

Noticeable differences are..

840V4
CPU MEDIATEK MT7628NN
1706-AJCSL
EAP0W363
RAM 512MB
WINBOND
W9751G6KB-25

840V5
CPU MEDIATEK MT7628NN
1710-AJCSL
EAP0X331
RAM 512MB
ESMT M14D5121632A

That and the fact that the leds, save one, are gone. Just one led (idiot move if you ask me).
Any luck in supporting? How would I go about it. Whom do I need to ask?

robimarko · September 3, 2017, 11:09am

I would be surprised if image for v4 works over TFTP.
Changes look minimal

amaurynieto · September 3, 2017, 2:00pm

It does not work, nor did I expect it to. I believe some settings need to be tweaked on the mktplinkfw.c but I have no remote idea whatsoever how to do it.

robimarko · September 3, 2017, 2:44pm

Do you have serial log?

amaurynieto · September 3, 2017, 5:56pm

I will in a while and will post.

amaurynieto · September 4, 2017, 10:07pm

Here we go, serial log. It's bricked, trying to debrick now, so bear with me. Partial Serial Log.

I bricked it trying to flash v4 on v5 via tftp.

DDR Calibration DQS reg = 0000898A
 
 
U-Boot 1.1.3 (May  3 2017 - 19:50:44)
 
Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb8000
gpiomode2 05540554.
gpiomode2 00000000.
gpiomode2 05550555.
flash manufacture id: c8, device id 40 16
find flash: GD25Q32B
============================================
Ralink UBoot Version: 4.3.0.0
--------------------------------------------
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:May  3 2017  Time:19:50:44
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768
 
 ##### The CPU freq = 580 MHZ ####
 estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
continue to starting system.                                                                                                                                                                                                               0
disable switch phyport...
 
3: System Boot system code via Flash.(0xbc020000)
do_bootm:argc=2, addr=0xbc020000
## Booting image at bc020000 ...
   Uncompressing Kernel Image ... LZMA ERROR 1 - must RESET board to recover
[05000C0D][05000C0B]

robimarko · September 4, 2017, 10:24pm

Full OEM bootlog is required to do anything.
Partition layout could easily be different than on v4

amaurynieto · September 4, 2017, 10:37pm

I sent for a brand new one, I'll have the full layout in a little while.

robimarko · September 4, 2017, 11:37pm

You should also be able to recover this one

amaurynieto · September 5, 2017, 12:27am

[04040C0B][04040D07]
DDR Calibration DQS reg = 00008987
 
 
U-Boot 1.1.3 (May  3 2017 - 19:50:44)
 
Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb8000
gpiomode2 05540554.
gpiomode2 00000000.
gpiomode2 05550555.
flash manufacture id: c8, device id 40 16
find flash: GD25Q32B
============================================
Ralink UBoot Version: 4.3.0.0
--------------------------------------------
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:May  3 2017  Time:19:50:44
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768
 
 ##### The CPU freq = 580 MHZ ####
 estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
continue to starting system.                                                                                                                                                                                                               0
disable switch phyport...
 
3: System Boot system code via Flash.(0xbc020000)
do_bootm:argc=2, addr=0xbc020000
## Booting image at bc020000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 8000c150) ...
## Giving linux memsize in MB, 64
 
Starting kernel ...
 
æàøffàfaø~~f`øøøææf30fæ`Ì
æ`ÌæfæfLinux version 2.6.36 (tomcat@buildserver) (gcc version 4.6.3 (Buildroot 2012.11.1) ) #1 Wed May 3 19:53:12 CST 2017
 
 The CPU feqenuce set to 575 MHz
 
 MIPS CPU sleep mode enabled.
CPU revision is: 00019655 (MIPS 24Kc)
Software DMA cache coherency
Determined physical RAM map:
 memory: 04000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
  Normal   0x00000000 -> 0x00004000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00004000
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: console=ttyS1,115200 root=/dev/mtdblock2 rootfstype=squashfs init=/sbin/init
PID hash table entries: 256 (order: -2, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Primary instruction cache 64kB, VIPT, , 4-waylinesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
Writing ErrCtl register=00040005
Readback ErrCtl register=00040005
Memory: 61604k/65536k available (2266k kernel code, 3932k reserved, 602k data, 160k init, 0k highmem)
NR_IRQS:128
console [ttyS1] enabled
Calibrating delay loop... 386.04 BogoMIPS (lpj=772096)
pid_max: default: 4096 minimum: 301
Mount-cache hash table entries: 512
NET: Registered protocol family 16
bio: create slab <bio-0> at 0
Switching to clocksource Ralink Systick timer
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
NET: Registered protocol family 1
squashfs: version 4.0 (2009/01/31) Phillip Lougher
msgmni has been set to 120
io scheduler noop registered
io scheduler deadline registered (default)
Ralink gpio driver initialized
i2cdrv_major = 218
Serial: 8250/16550 driver, 2 ports, IRQ sharing enabled
serial8250: ttyS0 at MMIO 0x10000d00 (irq = 21) is a 16550A
serial8250: ttyS1 at MMIO 0x10000c00 (irq = 20) is a 16550A
brd: module loaded
flash manufacture id: c8, device id 40 16
GD25Q32B(c8 40160000) (4096 Kbytes)
mtd .name = raspi, .size = 0x00400000 (4M) .erasesize = 0x00010000 (64K) .numeraseregions = 0
Creating 5 MTD partitions on "raspi":
0x000000000000-0x000000020000 : "boot"
0x000000020000-0x000000120000 : "kernel"
0x000000120000-0x0000003e0000 : "rootfs"
mtd: partition "rootfs" set to be root filesystem
0x0000003e0000-0x0000003f0000 : "config"
0x0000003f0000-0x000000400000 : "radio"
Register flash device:flash0
PPP generic driver version 2.4.2
PPP MPPE Compression module registered
NET: Registered protocol family 24
Mirror/redirect action on
u32 classifier
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (962 buckets, 3848 max)
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Linux
TCP cubic registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
Ebtables v2.0 registered
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
SQUASHFS error: Xattrs in filesystem, these will be ignored
VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
Freeing unused kernel memory: 160k freed
starting pid 29, tty '': '/etc/init.d/rcS'
rdm_major = 253
spiflash_ioctl_read, Read from 0x003ff100 length 0x6, ret 0, retlen 0x6
Read MAC from flash(  3ff100) 70-4f-57-2a-ffffff8e-6e
GMAC1_MAC_ADRH -- : 0x0000704f
GMAC1_MAC_ADRL -- : 0x572a8e6e
Ralink APSoC Ethernet Driver Initilization. v3.1  256 rx/tx descriptors allocated, mtu = 1500!
NAPI enable, Tx Ring = 256, Rx Ring = 256
spiflash_ioctl_read, Read from 0x003ff100 length 0x6, ret 0, retlen 0x6
Read MAC from flash(  3ff100) 70-4f-57-2a-ffffff8e-6e
GMAC1_MAC_ADRH -- : 0x0000704f
GMAC1_MAC_ADRL -- : 0x572a8e6e
PROC INIT OK!
add domain:tplinkwifi.net
add domain:tplinkap.net
add domain:tplinkrepeater.net
add domain:tplinklogin.net
tp_domain init ok
L2TP core driver, V2.0
PPPoL2TP kernel driver, V2.0
Set: phy[0].reg[0] = 3900
Set: phy[1].reg[0] = 3900
Set: phy[2].reg[0] = 3900
Set: phy[3].reg[0] = 3900
Set: phy[4].reg[0] = 3900
Set: phy[0].reg[0] = 3300
Set: phy[1].reg[0] = 3300
Set: phy[2].reg[0] = 3300
Set: phy[3].reg[0] = 3300
Set: phy[4].reg[0] = 3300
resetMiiPortV over.
starting pid 64, tty '/dev/ttyS1': '/bin/sh'
~ # [ util_execSystem ] 139:  ipt_init cmd is "/var/tmp/dconf/rc.router"
 
[ dm_readFile ] 2061:  can not open xml file /var/tmp/pc/reduced_data_model.xml!, about to open file /etc/reduced_data_model.xml
spiflash_ioctl_read, Read from 0x003e0000 length 0x10000, ret 0, retlen 0x10000
spiflash_ioctl_read, Read from 0x003e0000 length 0x10, ret 0, retlen 0x10
[ dm_loadCfg ] 2347:  software version is not match, in config, version = 0
[ dm_readFile ] 2061:  can not open xml file /var/tmp/pc/default_config.xml!, about to open file /etc/default_config.xml
[ parseConfigNode ] 525:  Meet unrecognized object node "PhDDNSCfg", skip the node
[ parseConfigNode ] 530:  Meet unrecognized parameter node "PhDDNSCfg", skip the node
[ parseConfigNode ] 525:  Meet unrecognized object node "SnmpCfg", skip the node
[ parseConfigNode ] 525:  Meet unrecognized object node "ACL", skip the node
[ parseConfigNode ] 530:  Meet unrecognized parameter node "ACL", skip the node
[ parseConfigNode ] 525:  Meet unrecognized object node "X_TP_WANUSB3gLinkConfig", skip the node
[ parseConfigNode ] 525:  Meet unrecognized object node "QueueManagement", skip the node
[ parseConfigNode ] 525:  Meet unrecognized object node "X_TP_IPTV", skip the node
[ parseConfigNode ] 525:  Meet unrecognized object node "VoiceService", skip the node
[ parseConfigNode ] 530:  Meet unrecognized parameter node "VoiceService", skip the node
[ parseConfigNode ] 525:  Meet unrecognized object node "StorageService", skip the node
[ parseConfigNode ] 525:  Meet unrecognized object node "X_TP_SpeedDialCfg", skip the node
[ parseConfigNode ] 525:  Meet unrecognized object node "X_TP_MultiIspDialPlan", skip the node
[ parseConfigNode ] 525:  Meet unrecognized object node "X_TP_CallLogCfg", skip the node
[ parseConfigNode ] 530:  Meet unrecognized parameter node "WEPKeyIndex", skip the node
[ parseConfigNode ] 530:  Meet unrecognized parameter node "WEPKeyIndex", skip the node
[ parseConfigNode ] 530:  Meet unrecognized parameter node "WEPKeyIndex", skip the node
[ parseConfigNode ] 530:  Meet unrecognized parameter node "WEPKeyIndex", skip the node
[ parseConfigNode ] 530:  Meet unrecognized parameter node "WEPKeyIndex", skip the node
[ parseConfigNode ] 530:  Meet unrecognized parameter node "WEPKeyIndex", skip the node
[ parseConfigNode ] 530:  Meet unrecognized parameter node "WEPKeyIndex", skip the node
[ parseConfigNode ] 530:  Meet unrecognized parameter node "WEPKeyIndex", skip the node
===>Enter Routerspiflash_ioctl_read, Read from 0x003ff100 length 0x6, ret 0, retlen 0x6
 mode
spiflash_ioctl_read, Read from 0x003ff200 length 0x4, ret 0, retlen 0x4
spiflash_ioctl_read, Read from 0x003ff300 length 0x4, ret 0, retlen 0x4
spiflash_ioctl_read, Read from 0x003ff400 length 0x10, ret 0, retlen 0x10
spiflash_ioctl_read, Read from 0x003ff500 length 0x29, ret 0, retlen 0x29
spiflash_ioctl_read, Read from 0x003ff600 length 0x21, ret 0, retlen 0x21
spiflash_ioctl_read, Read from 0x003ff700 length 0x10, ret 0, retlen 0x10
spiflash_ioctl_read, Read from 0x00020000 length 0x1d0, ret 0, retlen 0x1d0
spiflash_ioctl_read, Read from 0x003ff100 length 0x6, ret 0, retlen 0x6
sendto: No such file or directory
pid 63 send 2001 error
[ util_execSystem ] 139:  oal_startDynDns cmd is "dyndns /var/tmp/dconf/dyndns.conf"
 
[ oal_sys_getOldTZInfo ] 449:  Open TZ file error!
[ util_execSystem ] 139:  oal_sys_unsetTZ cmd is "echo "" > /etc/TZ"
 
[ util_execSystem ] 139:  oal_sys_unsetTZ cmd is "echo "" > /etc/TZ"
 
[ util_execSystem ] 139:  oal_startNoipDns cmd is "noipdns /var/tmp/dconf/noipdns.conf"
 
[ util_execSystem ] 139:  oal_startCmxDns cmd is "cmxdns /var/tmp/dconf/cmxdns.conf"
 
ioctl: No such device
[ util_execSystem ] 139:  oal_br_addBridge cmd is "brctl addbr br0;brctl setfd br0 0;brctl stp br0 off"
 
[ util_execSystem ] 139:  oal_ipt_addLanRules cmd is "iptables -t filter -A INPUT -i br+ -j ACCEPT
"
 
[ util_execSystem ] 139:  oal_intf_setIntf cmd is "ifconfig br0 192.168.0.1 netmask 255.255.255.0 up"
 
[ util_execSystem ] 139:  oal_util_setProcLanAddr cmd is "echo "br0 16820416," > /proc/net/conRaeth v3.1 (ntract_LocalAddrNAPI
"
 
[ util_exec,SkbRecycleSystem ] 139:  o)
al_intf_enableIn
phy_tx_ring = 0x0368a000, tx_ring = 0xa368a000
tf cmd is "ifcon
phy_rx_ring0 = 0x0368b000, rx_ring0 = 0xa368b000
fig eth0 up"
 
[fe_sw_init:4983]rt305x_esw_init.
disable switch phyport...
GMAC1_MAC_ADRH -- : 0x0000704f
GMAC1_MAC_ADRL -- : 0x572a8e6e
RT305x_ESW: Link Status Changed
[ rsl_getUnusedVlan ] 1015:  GET UNUSED VLAN TAG 1 : [3]
[ rsl_getUnusedVlan ] 1015:  GET UNUSED VLAN TAG 2 : [4]
[ rsl_getUnusedVlan ] 1015:  GET UNUSED VLAN TAG 3 : [5]
[ rsl_getUnusedVlan ] 1015:  GET UNUSED VLAN TAG 4 : [6]
[ util_execSystem ] 139:  oal_addVlanTagIntf cmd is "vconfig add eth0 3"
 
[ util_execSystem ] 139:  oal_intf_enableIntf cmd is "ifconfig eth0.3 up"
 
set if eth0.3 to *not wan dev
[ util_execSystem ] 139:  oal_addVlanTagIntf cmd is "vconfig add eth0 4"
 
[ util_execSystem ] 139:  oal_intf_enableIntf cmd is "ifconfig eth0.4 up"
 
set if eth0.4 to *not wan dev
[ util_execSystem ] 139:  oal_addVlanTagIntf cmd is "vconfig add eth0 5"
 
[ util_execSystem ] 139:  oal_intf_enableIntf cmd is "ifconfig eth0.5 up"
 
set if eth0.5 to *not wan dev
[ util_execSystem ] 139:  oal_addVlanTagIntf cmd is "vconfig add eth0 6"
 
[ util_execSystem ] 139:  oal_intf_edevice eth0.3 entered promiscuous mode
nableIntf cmd isdevice eth0 entered promiscuous mode
 "ifconfig eth0.br0: port 1(eth0.3) entering forwarding state
6 up"
 
set if br0: port 1(eth0.3) entering forwarding state
eth0.6 to *not wan dev
[ util_execSystem ] 139:  oal_addVlanTagIntf cmd is "vcodevice eth0.4 entered promiscuous mode
nfig add eth0 2"br0: port 2(eth0.4) entering forwarding state
 
 
[ util_execSbr0: port 2(eth0.4) entering forwarding state
ystem ] 139:  oal_intf_enableIntf cmd is "ifconfig eth0.2 up"
 
set if eth0.2 tdevice eth0.5 entered promiscuous mode
o wan dev
[ vlabr0: port 3(eth0.5) entering forwarding state
n_addLanPortsIntbr0: port 3(eth0.5) entering forwarding state
oBridge ] 551:  add lan Port 255 from br0
[ util_execSystem ] 139:  oal_br_addIdevice eth0.6 entered promiscuous mode
ntfIntoBridge cmbr0: port 4(eth0.6) entering forwarding state
d is "brctl addibr0: port 4(eth0.6) entering forwarding state
f br0 eth0.3"
 
[ util_execSystem ] 139:  oal_br_addIntfIntoBridge cmd is "brctl addif br0 eth0.4"
 
[ util_execSystem ] 139:  oal_br_addIntfIntoBridge cmd is "brctl addif br0 eth0.5"
 
[ util_execSystem ] 139:  oal_br_addIntfIntoBridge cmd is "brctl addif br0 eth0.6"
 
[ util_execSystem ] 139:  rsl_initIPv6CfgObj cmd is "echo 1 > /proc/sys/net/ipv6/conf/all/disable_ipv6"
 
[ util_execSystem ] 139:  oal_eth_setIGMPSnoopParam cmd is "for i in /sys/devices/virtual/net/*/bridge/multicast_snooping;do echo 1 > $i ; done"
 
[ util_execSystem ] 139:  oal_wlan_ra_setCountryRegion cmd is "cp /etc/SingleSKU_FCC.dat /var/Wireless/RT2860AP/SingleSKU.dat"
 
[ util_execSystem ] 139:  oal_wlan_ra_setCountryRegion cmd is "iwpriv ra0 set CountryRegion=0"
 
ra0       no private ioctls.
 
[ util_execSystem ] 166:  execute ok, exit status = 255
 
[ util_execSystem ] 139:  oal_wlan_ra_loadDriver cmd is "insmod /lib/modules/kmdir/kernel/drivers/net/wireless/mt_wifi_ap/mt_wifi.ko"
 
ADDRCONF(NETDEV_CHANGE): eth0.4: link becomes ready
ADDRCONF(NETDEV_CHANGE): eth0.5: link becomes ready
ADDRCONF(NETDEV_CHANGE): eth0.6: link becomes ready
ADDRCONF(NETDEV_CHANGE): eth0.2: link becomes ready
 
 
=== pAd = c0883000, size = 1470664 ===
 
<-- RTMPAllocTxRxRingMemory, Status=0, ErrorValue=0x
<-- RTMPAllocAdapterBlock, Status=0
RtmpChipOpsHook(492): Not support for HIF_MT yet!
mt7628_init()-->
mt7628_init(FW(8a00), HW(8a01), CHIPID(7628))
e2.bin mt7628_init(1156)::(2), pChipCap->fw_len(64560)
mt_bcn_buf_init(218): Not support for HIF_MT yet!
<--mt7628_init()
[ util_execSystem ] 139:  oal_wlan_ra_initWlan cmd is "ifconfig ra0 up"
 
TX_BCN DESC a2856000 size = 320
RX[0] DESC a2859000 size = 1024
RX[1] DESC a285a000 size = 1024
RT_CfgSetApcliMacAddress : invalid mac setting
cfg_mode=9
cfg_mode=9
wmode_band_equal(): Band Equal!
AndesSendCmdMsg: Could not send in band command due to diable fRTMP_ADAPTER_MCU_SEND_IN_BAND_CMD
APSDCapable[0]=0
APSDCapable[1]=0
APSDCapable[2]=0
APSDCapable[3]=0
APSDCapable[4]=0
APSDCapable[5]=0
APSDCapable[6]=0
APSDCapable[7]=0
APSDCapable[8]=0
APSDCapable[9]=0
APSDCapable[10]=0
APSDCapable[11]=0
APSDCapable[12]=0
APSDCapable[13]=0
APSDCapable[14]=0
APSDCapable[15]=0
default ApCliAPSDCapable[0]=0
Key1Str is Invalid key length(0) or Type(0)
Key1Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
WscKeyASCII=8
WscKeyASCII=8
[RTMPReadParametersHook:297]wifi read profile faild.
load fw image from fw_header_image
AndesMTLoadFwMethod1(2263)::pChipCap->fw_len(64560)
FW Version:1
FW Build Date:20161213152835
CmdAddressLenReq:(ret = 0)
CmdFwStartReq: override = 1, address = 1048576
CmdStartDLRsp: WiFI FW Download Success
MtAsicDMASchedulerInit(): DMA Scheduler Mode=0(LMAC)
efuse_probe: efuse = 10000012
RtmpChipOpsEepromHook::e2p_type=2, inf_Type=4
RtmpEepromGetDefault::e2p_dafault=2
RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 2
NVM is FLASH mode
1. Phy Mode = 14
exec!
spiflash_ioctl_read, Read from 0x003f0000 length 0x400, ret 0, retlen 0x400
eeFlashId = 0x7628!
Country Region from e2p = ffff
tssi_1_target_pwr_g_band = 36
2. Phy Mode = 14
3. Phy Mode = 14
NICInitPwrPinCfg(11): Not support for HIF_MT yet!
NICInitializeAsic(651): Not support rtmp_mac_sys_reset () for HIF_MT yet!
mt_mac_init()-->
MtAsicInitMac()-->
mt7628_init_mac_cr()-->
MtAsicSetMacMaxLen(1277): Set the Max RxPktLen=450!
<--mt_mac_init()
        WTBL Segment 1 info:
                MemBaseAddr/FID:0x28000/0
                EntrySize/Cnt:32/128
        WTBL Segment 2 info:
                MemBaseAddr/FID:0x40000/0
                EntrySize/Cnt:64/128
        WTBL Segment 3 info:
                MemBaseAddr/FID:0x42000/64
                EntrySize/Cnt:64/128
        WTBL Segment 4 info:
                MemBaseAddr/FID:0x44000/128
                EntrySize/Cnt:32/128
AntCfgInit(2940): Not support for HIF_MT yet!
MCS Set = ff ff 00 00 01
MtAsicSetChBusyStat(861): Not support for HIF_MT yet!
FW LOG: !!!! Pass, dont need recal (total fail[0])
 
FW LOG: !!!! Pass, dont need recal (total fail[0])
 
FW LOG: !!!! Pass, dont need recal (total fail[0])
 
FW LOG: RxDCOC Set DC Valid(8)(2)
 
CmdSlotTimeSet:(ret = 0)
[PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
[PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
MtAsicSetRalinkBurstMode(3048): Not support for HIF_MT yet!
MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
reload DPD from flash , 0x9F = [ca00] doReload bit7[0]
CmdLoadDPDDataFromFlash: Channel = 3, DoReload = 0
MtAsicSetTxPreamble(3027): Not support for HIF_MT yet!
MtAsicAddSharedKeyEntry(1344): Not support for HIF_MT yet!
The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
ap_ftkd> Initialize FT KDP Module...
Main bssid = 70:4f:57:2a:8e:6e
<==== rt28xx_init, Status=0
@@@ ed_monitor_init : ===>
@@@ ed_monitor_init : <===
mt7628_set_ed_cca: TURN ON EDCCA mac 0x10618 = 0xd7c87d0f, EDCCA_Status=1
WiFi Startup Cost (ra0): 3.044s
[ util_execSystem ] 139:  oal_wlan_ra_initWlan cmd is "echo 1 > /proc/tplink/led_wlan_24G"
 
[ util_execSystem ] 139:  oal_wlan_ra_setStaNum cmd is "iwpriv ra0 set MaxStaNum=32"
 
[ util_execSystem ] 139:  device ra0 entered promiscuous mode
oal_br_addIntfInbr0: port 5(ra0) entering forwarding state
toBridge cmd is br0: port 5(ra0) entering forwarding state
"brctl addif br0 ra0"
 
[ util_execSystem ] 139:  oal_br_addIntfIntoBridge cmd device apcli0 entered promiscuous mode
is "brctl addif br0 apcli0"
 
[ util_execSystem ] 139:  oal_br_addIntfIntoBridge cmd is "brctl addif br0 apcli0"
 
device ra1 entered promiscuous modece busy
 
[ util_execSystem ] 166:  execu
====
@@@ ed_status_read: EDCCA TH - H
pAd->ed_trigger_cnt : 0 > 20 ||  pAd->ed_big_rssi_stat : 0 < 50
====
te ok, exit status = 1
 
[ util_execSystem ] 139:  oal_br_addInspiflash_ioctl_read, Read from 0x003f0000 length 0x2, ret 0, retlen 0x2
tfIntoBridge cmd is "brctl addif br0 ra1"
 
[ util_execSystem ] 139:  oal_wlan_ra_initEnd cmd is "wlNetlinkTool &"
 
[ util_execSystem ] 139:  oal_wlan_ra_initEnd cmd is "killall -q wscd"
 
[ util_execSystem ] 166:  execute ok, exit status = 1
 
[ util_execSystem ] 139:  oal_wlan_ra_initEnd cmd is "wscd -i ra0 -m 1 -w /var/tmp/wsc_upnp/ &"
 
[ util_execSystem ] 139:  rsl_initLanWlanObj cmd is "echo 0 > /proc/tplink/wl_mode"
 
[ oal_wlan_ra_loadDriver ] 1905:  no 5G chip.
 
 
[ rsl_initLanWlanObj ] 8575:  perror:1
WLAN-Start wlNetlinkTool
Waiting for Wireless Events from interfaces...
swWlanChkAhbErr: netlink to do
wscd: SSDP UDP PORT = 1900
sendto: No such file or directory
pid 63 send 2030 error
sendto: No such file or directory
pid 63 send 2004 error
[ util_execSystem ] 139:  oal_startDhcps cmd is "dhcpd /var/tmp/dconf/udhcpd.conf"
 
[ util_execSystem ] 139:  oal_lan6_startDhcp6s cmd is "dhcp6s -c /var/tmp/dconf/dhcp6s_br0.conf -P /var/run/dhcp6s_br0.pid br0 &"
 
[ util_execSystem ] 139:  oal_lan6_startRadvd cmd is "radvd -C /var/tmp/dconf/radvd_br0.conf -p /var/run/radvd_br0.pid &"
 
iptables: Bad rule (does a matching rule exist in that chain?).
[ util_execSystem ] 139:  oal_br_delIntfFromBridge cmd is "brctl delif br0 eth0.2"
 
brctl: bridge br0: Invalid argument
[ util_execSystem ] 166:  execute ok, exit status = 1
 
[ util_execSystem ] 139:  oal_intf_setIfMac cmd is "ifconfig eth0.2 down"
 
[ util_execSystem ] 139:  oal_intf_setIfMac cmd is "ifconfig eth0.2 hw ether 70:4F:57:2A:8E:6F up"
 
[ util_execSystem ] 139:  oal_intf_enableIntf cmd is "ifconfig eth0.2 up"
 
radvd starting
[Jan 01 00:00:08] radvd: no linklocal address configured for br0
[Jan 01 00:00:08] radvd: error parsing or activating the config file: /var/tmp/dconf/radvd_br0.conf
[ rsl_initAppObj ] 743:  ==> start dhcp client
 
[ util_execSystem ] 139:  oal_ipt_fwDdos cmd is "iptables -D FORWARD -j FIREWALL_DDOS
"
 
iptables: No chain/target/match by that name.
[ util_execSystem ] 166:  execute ok, exit status = 1
 
[ util_execSystem ] 139:  oal_ipt_forbidLanPing cmd is "iptables -t filter -D INPUT -i br+ -p icmp --icmp-type echo-request -j DROP
iptables -t filter -D FORWARD -i br+ -p icmp --icmp-type echo-request -j DROP
"
 
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
[ util_execSystem ] 166:  execute ok, exit status = 1
 
[ util_execSystem ] 139:  oal_ddos_delPingRule cmd is "iptables -t filter -D INPUT ! -i br+ -p icmp --icmp-type echo-request -j ACCEPT
"
 
iptables: Bad rule (does a matching rule exist in that chain?).
[ util_execSystem ] 166:  execute ok, exit status = 1
 
[ util_execSystem ] 139:  oal_ipt_setDDoSRules cmd is "iptables -F FIREWALL_DDOS"
 
[ util_execSystem ] 139:  ddos_clearAll cmd is "rm -f /var/tmp/dosHost"
 
sh: diagTool: not found
[ util_execSystem ] 139:  oal_initFirewallObj cmd is "ebtables -N FIREWALL"
 
[ util_execSystem ] 139:  oal_initIp6FirewallObj cmd is "ip6tables -F"
 
[ util_execSystem ] 139:  oal_initIp6FirewallObj cmd is "ip6tables -X"
 
[ util_execSystem ] 139:  oal_initIp6FirewallObj cmd is "ip6tables -P INPUT ACCEPT"
 
[ util_execSystem ] 139:  oal_initIp6FirewallObj cmd is "ip6tables -P FORWARD DROP"
 
[ util_execSystem ] 139:  oal_initIp6FirewallObj cmd is "ip6tables -P OUTPUT ACCEPT"
 
[ util_execSystem ] 139:  oal_initIp6FirewallObj cmd is "ip6tables -N FIREWALL"
 
[ util_execSystem ] 139:  oal_initIp6FirewallObj cmd is "ip6tables -N FWRULE"
 
[ util_execSystem ] 139:  oal_initIp6FirewallObj cmd is "ip6tables -N SETMSS"
 
[ util_execSystem ] 139:  oal_initIp6FirewallObj cmd is "ip6tables -A INPUT -i lo -p ALL -j ACCEPT -m comment                                   --comment "loop back""
 
[ util_execSystem ] 139:  oal_initIp6FirewallObj cmd is "ip6tables -A INPUT  -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT"
 
[ util_execSystem ] 139:  oal_initIp6FirewallObj cmd is "ip6tables -A INPUT -i br+ -p tcp --dport 23 -j ACCEPT"
 
[ util_execSystem ] 139:  oal_initIp6FirewallObj cmd is "ip6tables -A INPUT -p tcp --dport 23 -j DROP"
 
[ util_execSystem ] 139:  oal_initIp6FirewallObj cmd is "ip6tables -A INPUT -i br+ -p icmpv6 --icmpv6-type echo-request -j ACCEPT"
 
[ util_execSystem ] 139:  oal_initIp6FirewallObj cmd is "ip6tables -A INPUT -p icmpv6 --icmpv6-type echo-request -j DROP"
 
[ util_execSystem ] 139:  oal_initIp6FirewallObj cmd is "ip6tables -A FORWARD -i br+ -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT"
 
[ util_execSystem ] 139:  oal_initIp6FirewallObj cmd is "ip6tables -A FORWARD -o br+ -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT"
 
[ util_execSystem ] 139:  oal_initIp6FirewallObj cmd is "ip6tables -A FORWARD -j FIREWALL"
 
[ util_execSystem ] 139:  oal_initIp6FirewallObj cmd is "ip6tables -I FORWARD 1 -j SETMSS"
 
[ util_execSystem ] 139:  oal_fw6_setFwEnabeld cmd is "ip6tables -D FIREWALL -j ACCEPT"
 
ip6tables: Bad rule (does a matching rule exist in that chain?).
[ util_execSystem ] 166:  execute ok, exit status = 1
 
[ util_execSystem ] 139:  oal_fw6_setFwEnabeld cmd is "ip6tables -F FIREWALL"
 
[ util_execSystem ] 139:  oal_fw6_setFwEnabeld cmd is "ip6tables -A FIREWALL -j ACCEPT"
 
[ util_execSystem ] 139:  setupModules cmd is "insmod /lib/modules/kmdir/kernel/net/netfilter/nf_conntrack_ftp.ko"
 
[ util_execSystem ] 139:  setupModules cmd is "insmod /lib/modules/kmdir/kernel/net/ipv4/netfilter/nf_nat_ftp.ko"
 
[ util_execSystem ] 139:  oal_openAlg cmd is "iptables -D FORWARD_VPN_PASSTHROUGH  -p udp --dport 500 -j DROP"
 
iptables: Bad rule (does a matching rule exist in that chain?).
[ util_execSystem ] 166:  execute ok, exit status = 1
 
[ util_execSystem ] 139:  setupModules cmd is "insmod /lib/modules/kmdir/kernel/net/ipv4/netfilter/nf_nat_proto_gre.ko"
 
[ util_execSystem ] 139:  setupModules cmd is "insmod /lib/modules/kmdir/kernel/net/ipv4/netfilter/nf_nat_pptp.ko"
 
[ util_execSystem ] 139:  oal_openAlg cmd is "iptables -D FORWARD_VPN_PASSTHROUGH  -p tcp --dport 1723 -j DROP"
 
iptables: Bad rule (does a matching rule exist in that chain?).
[ util_execSystem ] 166:  execute ok, exit status = 1
 
[ util_execSystem ] 139:  oal_openAlg cmd is "iptables -D FORWARD_VPN_PASSTHROUGH  -p udp --dport 1701 -j DROP"
 
iptables: Bad rule (does a matching rule exist in that chain?).
[ util_execSystem ] 166:  execute ok, exit status = 1
 
[ util_execSystem ] 139:  setupModules cmd is "insmod /lib/modules/kmdir/kernel/net/netfilter/nf_conntrack_tftp.ko"
 
[ util_execSystem ] 139:  setupModules cmd is "insmod /lib/modules/kmdir/kernel/net/ipv4/netfilter/nf_nat_tftp.ko"
 
[ util_execSystem ] 139:  setupModules cmd is "insmod /lib/modules/kmdir/kernel/net/netfilter/nf_conntrack_h323.ko"
 
[ util_execSystem ] 139:  setupModules cmd is "insmod /lib/modules/kmdir/kernel/net/ipv4/netfilter/nf_nat_h323.ko"
 
[ util_execSystem ] 139:  setupModules cmd is "insmod /lib/modules/kmdir/kernel/net/netfilter/nf_conntrack_sip.ko"
 
[ util_execSystem ] 139:  setupModules cmd is "insmod /lib/modules/kmdir/kernel/net/ipv4/netfilter/nf_nat_sip.ko"
 
[ util_execSystem ] 139:  setupModules cmd is "insmod /lib/modules/kmdir/kernel/net/netfilter/nf_conntrack_rtsp.ko"
 
[ util_execSystem ] 139:  setupModules cmd is "insmod /lib/modules/kmdir/kernel/net/ipv4/netfilter/nf_nat_rtsp.ko"
 
nf_nat_rtsp v0.6.21 loading
enable switch phyport...
Set: phy[0].reg[0] = 3900
Set: phy[1].reg[0] = 3900
Set: phy[2].reg[0] = 3900
Set: phy[3].reg[0] = 3900
Set: phy[4].reg[0] = 3900
Set: phy[0].reg[0] = 3300
Set: phy[1].reg[0] = 3300
Set: phy[2].reg[0] = 3300
Set: phy[3].reg[0] = 3300
Set: phy[4].reg[0] = 3300
resetMiiPortV over.
[cmd_dutInit():697] init shm
[tddp_taskEntry():151] tddp task start
[ util_execSystem ] 139:  prepareDropbear cmd is "dropbearkey -t rsa -f /var/tmp/dropbear/dropbear_rsa_host_key"
 
Will output 1024 bit rsa secret key to '/var/tmp/dropbear/dropbear_rsa_host_key'
Generating key, this may take a while...
[ util_execSystem ] 139:  prepareDropbear cmd is "dropbearkey -t dss -f /var/tmp/dropbear/dropbear_dss_host_key"
 
Will output 1024 bit dss secret key to '/var/tmp/dropbear/dropbear_dss_host_key'
Generating key, this may take a while...
[ util_execSystem ] 139:  oal_sys_unsetTZ cmd is "echo "" > /etc/TZ"
 
[ util_execSystem ] 139:  oal_sys_unsetTZ cmd is "echo "" > /etc/TZ"
 
[ util_execSystem ] 139:  prepareDropbear cmd is "dropbear -p 22 -r /var/tmp/dropbear/dropbear_rsa_host_key -d /var/tmp/dropbear/dropbear_dss_host_key -A /var/tmp/dropbear/dropbearpwd"
 
 
~ #

amaurynieto · September 5, 2017, 1:40am

Would it be safe to assume, (and i'm just spitballing here), that we would be able to modify target/linux/ar71xx/image/tp-link.mk and mess with

define Device/tl-wr1043nd-v4
  $(Device/tplink)
  DEVICE_TITLE := TP-LINK TL-WR1043N/ND v4
  DEVICE_PACKAGES := kmod-usb-core kmod-usb2 kmod-usb-ledtrig-usbport
  BOARDNAME := TL-WR1043ND-v4
  DEVICE_PROFILE := TLWR1043
  TPLINK_HWID :=  0x10430004
  MTDPARTS := spi0.0:128k(u-boot)ro,1536k(kernel),14016k(rootfs),128k(product-info)ro,320k(config)ro,64k(partition-table)ro,128k(logs)ro,64k(ART)ro,15552k@0x20000(firmware)
  IMAGE_SIZE := 15552k
  TPLINK_BOARD_ID := TLWR1043NDV4
  KERNEL := kernel-bin | patch-cmdline | lzma | tplink-v1-header
  IMAGES := sysupgrade.bin factory.bin
  IMAGE/sysupgrade.bin := append-rootfs | tplink-safeloader sysupgrade
  IMAGE/factory.bin := append-rootfs | tplink-safeloader factory
endef

to create a new profile that fits the mtd parts locations and the HWID? and how would we go about this? (again, spitballing)

robimarko · September 5, 2017, 8:31am

Well,first we need to know MTD partitions which appear in bootlog.
Can you verify those using SSH with cat /proc/mtd since they look different than v4 ones
You would touch ar71xx since 840 uses MT7628 which falls under ramips target.

It looks like they reduced flash size to only 4MB,which is really bad

I will give it couple of minutes to try and to build firmware but 4MB of flash really kills it

robimarko · September 5, 2017, 12:12pm

Here is quick porting attempt
https://drive.google.com/drive/folders/0B1VOQQ-_EIXKelhjMk9udG80YXM?usp=sharing

It would be awesome if you could try those images.

amaurynieto · September 5, 2017, 4:20pm

Testing now. BRB.

amaurynieto · September 5, 2017, 4:21pm

Well, if you exclude luci and just leave the barebone it should be okay, even if you get a couple hundred K left. I usually compile with openssl and a few other packages. TRUE on the mt7628, I erroneously entered the wrong bin/target/* subdirectory.

amaurynieto · September 5, 2017, 4:23pm

It seems the tftp recovery is 8mb. will try to flash but if flash is 4mb it might not work, no?

robimarko · September 5, 2017, 4:51pm

Most likely I forgot to change TFTP size to 4mb

amaurynieto · September 5, 2017, 4:55pm

Yep.

 ETH_STATE_ACTIVE!!
TFTP from server 192.168.0.66; our IP address is 192.168.0.2
Filename 'tp_recovery.bin'.
 
 TIMEOUT_COUNT=10,Load address: 0x80060000
Loading: T checksum bad
checksum bad
checksum bad
T Got ARP REPLY, set server/gtwy eth addr (00:e0:00:00:56:e2)
Got it
###############################################################checksum bad
##
         ##################checksum bad
###############################################
         #################################################################
         #######checksum bad
#######################Got ARP REQUEST, return our IP
checksum bad
###################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ######################################################Got ARP REQUEST, return our IP
###########
         #################################################################
         #################################################################
         #################################################################
         ############################
done
Bytes transferred = 8126464 (7c0000 hex)
NetBootFileXferSize= 007c0000
 
 Erase flash !!
From 0x20000 length 0x3C0000
............................................................
 
 Copy 0x80080000 to 0x00020000, count 0x3C0000....
............................................................
[05000C0D][05000C0C]
DDR Calibration DQS reg = 00008A8A
 
 
U-Boot 1.1.3 (May  3 2017 - 19:50:44)
 
Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb8000
******************************
Software System Reset Occurred
******************************
gpiomode2 05540554.
gpiomode2 00000000.
gpiomode2 05550555.
flash manufacture id: c8, device id 40 16
find flash: GD25Q32B
============================================
Ralink UBoot Version: 4.3.0.0
--------------------------------------------
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:May  3 2017  Time:19:50:44
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768
 
 ##### The CPU freq = 580 MHZ ####
 estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
continue to starting system.                                                                                                            0
disable switch phyport...
 
3: System Boot system code via Flash.(0xbc020000)
do_bootm:argc=2, addr=0xbc020000
## Booting image at bc020000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80000000) ...
## Giving linux memsize in MB, 64
 
Starting kernel ...
 
[    0.000000] Linux version 4.9.47 (robimarko@Builder-temp) (gcc version 5.4.0 (LEDE GCC 5.4.0 r4802-e01f5c3) ) #0 Tue Sep 5 09:54:37 2017
[    0.000000] Board has DDR2
[    0.000000] Analog PMU set to hw control
[    0.000000] Digital PMU set to hw control
[    0.000000] SoC Type: MediaTek MT7628AN ver:1 eco:2
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019655 (MIPS 24KEc)
[    0.000000] MIPS: machine is TP-Link TL-WR840N v5
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Writing ErrCtl register=00077cc0
[    0.000000] Readback ErrCtl register=00077cc0
[    0.000000] Memory: 60440K/65536K available (3133K kernel code, 155K rwdata, 752K rodata, 176K init, 209K bss, 5096K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:256
[    0.000000] intc: using register map from devicetree
[    0.000000] CPU Clock: 580MHz
[    0.000000] clocksource_probe: no matching clocksources found
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6590553264 ns
[    0.000011] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405115902ns
[    0.007529] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.070051] pid_max: default: 32768 minimum: 301
[    0.074640] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.080984] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.094089] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.103583] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.109507] pinctrl core: initialized pinctrl subsystem
[    0.115190] NET: Registered protocol family 16
[    0.139477] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.145211] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.150747] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.159969] clocksource: Switched to clocksource MIPS
[    0.166023] NET: Registered protocol family 2
[    0.171164] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.177856] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.184041] TCP: Hash tables configured (established 1024 bind 1024)
[    0.190239] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.195839] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.202167] NET: Registered protocol family 1
[    0.209335] Crashlog allocated RAM at address 0x3f00000
[    0.215602] workingset: timestamp_bits=30 max_order=14 bucket_order=0
[    0.230128] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.235704] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.253983] io scheduler noop registered
[    0.257714] io scheduler deadline registered (default)
[    0.263490] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    0.270843] console [ttyS0] disabled
[    0.274283] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 28, base_baud = 2500000) is a 16550A
[    0.283057] console [ttyS0] enabled
[    0.283057] console [ttyS0] enabled
[    0.290054] bootconsole [early0] disabled
[    0.290054] bootconsole [early0] disabled
[    0.299318] spi-mt7621 10000b00.spi: sys_freq: 193333333
[    0.310054] m25p80 spi32766.0: using chunked io (size=32)
[    0.315546] m25p80 spi32766.0: gd25q32 (4096 Kbytes)
[    0.320631] 4 ofpart partitions found on MTD device spi32766.0
[    0.326546] Creating 4 MTD partitions on "spi32766.0":
[    0.331781] 0x000000000000-0x000000020000 : "boot"
[    0.338412] 0x000000020000-0x000000120000 : "firmware"
[    0.353191] 0x0000003e0000-0x0000003f0000 : "config"
[    0.359876] 0x0000003f0000-0x000000400000 : "radio"
[    0.367427] libphy: Fixed MDIO Bus: probed
[    0.381599] rt3050-esw 10110000.esw: link changed 0x00
[    0.388431] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5
[    0.398129] NET: Registered protocol family 10
[    0.405581] NET: Registered protocol family 17
[    0.410226] 8021q: 802.1Q VLAN Support v1.8
[    0.417062] VFS: Cannot open root device "(null)" or unknown-block(0,0): error -6
[    0.424724] Please append a correct "root=" boot option; here are the available partitions:
[    0.433215] 1f00             128 mtdblock0 [    0.437277]  (driver?)
[    0.439676] 1f01            1024 mtdblock1 [    0.443748]  (driver?)
[    0.446148] 1f02              64 mtdblock2 [    0.450220]  (driver?)
[    0.452621] 1f03              64 mtdblock3 [    0.456679]  (driver?)
[    0.459075] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
[    0.468391] Rebooting in 1 seconds..
[05000C0D][05000C0B]
DDR Calibration DQS reg = 0000898A

amaurynieto · September 5, 2017, 4:56pm

Checksum bad apparently. (cause of the size probably)

robimarko · September 5, 2017, 7:13pm

It is bad due to size and the fact that mktplinkfw2.c does not have layout for 4MB flash devices and I have selected 8mb device in hope that it will work.
[ 0.417062] VFS: Cannot open root device "(null)" or unknown-block(0,0): error -6
[ 0.424724] Please append a correct "root=" boot option; here are the available partitions:
[ 0.433215] 1f00 128 mtdblock0 [ 0.437277] (driver?)
[ 0.439676] 1f01 1024 mtdblock1 [ 0.443748] (driver?)
[ 0.446148] 1f02 64 mtdblock2 [ 0.450220] (driver?)
[ 0.452621] 1f03 64 mtdblock3 [ 0.456679] (driver?)
[ 0.459075] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)

I have seen this error on other devices,it looks like it could be pretty much a lot of stuff.
Also my partition map is probably missing some partitions.

I will se what can be done,but we need developer that knows something.
My knowledge is really limited