値からの大まかな推測
part1が何故か2カ所にあるけれども、両方使われているのかどうかは不明
0 1 2 3 4 5 6 7 8 9 A B C D E F
+---------------------------------------------------------------+
0x0000 | (unknown) |
+---------------------------------------------------------------+
0x0010 | |
+ Image Name (Image1) +
| |
+---------------------------------------------------------------+
0x0030 | |
+ Image Name (Image2) +
| |
+---------------------------------------------------------------+
...
+---------------+-----------------------------------------------+
0x0160 |'F' 'S' 'O' 'C'| (unknown) |
+---+-----------+---------------+---------------+---------------+
0x0170 |*1 | (unknown) | dtb offset | fwinfo offset | (unknown) |
+---+-----------+---------------+---------------+---------------+
0x0180 | kernel offset | kernel blocks | rootfs offset | rootfs blocks |<-- Image1
+---------------+---------------+---------------+---------------+
0x0190 | kernel offset | kernel blocks | rootfs offset | rootfs blocks |<-- Image2
+---------------+---------------+---------------+---------------+
0x01A0 | part1 offset | part1 blocks | (unknown) |
+---------------+---------------+-----------------------+---+---+
0x01B0 | (unknown) |*2 | |
+-----------------------+---------------+---------------+---+---+
0x01C0 | (unknown) | part1 offset | part1 blocks |*3 | |
+-----------------------+---------------+---------------+---+---+
0x01D0 | (unknown) | part2 offset | part2 blocks | |
+-----------------------+---------------+---------------+-------+
0x01E0 | (unknown) | config offset | config blocks | |
+-----------------------+---------------+---------------+-------+
0x01F0 | (unknown) |
+---------------------------------------------------------------+
*1: active image (0x00/0x01) block size: 0x200 (512 bytes)
*2: active flag for part1? (bit 7) (offset -> N blocks)
*3: active flag for part2? (bit 7)
ブートメニューにおけるブートデバイスのフォーマット
ブートメニューからブートデバイスのフォーマットを実行すると、2つあるイメージの両方のエントリが削除されたうえで、両方のkernel/rootfsやデータ領域のオフセットが正しくないものに置き換えられてしまうようである
- フォーマット前
root@OpenWrt:~# hexdump -n $((0x200)) -C /dev/mtdblock1
00000000 00 00 00 00 00 00 11 00 00 00 00 00 ff 00 aa 55 |...............U|
00000010 46 47 54 35 30 45 2d 35 2e 30 34 2d 46 57 2d 62 |FGT50E-5.04-FW-b|
00000020 75 69 6c 64 31 31 31 37 2d 31 37 30 32 30 39 2d |uild1117-170209-|
00000030 46 47 54 35 30 45 2d 35 2e 30 34 2d 46 57 2d 62 |FGT50E-5.04-FW-b|
00000040 75 69 6c 64 31 31 33 38 2d 31 37 30 35 33 31 00 |uild1138-170531.|
00000050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00000120 00 00 00 00 00 00 00 00 5d 04 00 00 72 04 00 00 |........]...r...|
00000130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00000160 46 53 4f 43 00 00 20 00 00 00 00 0f e0 0f 00 00 |FSOC.. .........|
00000170 00 00 16 00 80 0e 00 00 00 0e 00 00 b0 01 00 00 |................|
00000180 00 10 00 00 6d 15 00 00 00 40 00 00 79 a6 00 00 |....m....@..y...|
00000190 00 00 01 00 72 15 00 00 00 30 01 00 18 a6 00 00 |....r....0......|
000001a0 00 f0 01 00 00 90 00 00 20 01 00 08 00 00 00 00 |........ .......|
000001b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 e6 |................|
000001c0 20 07 83 32 28 0a 00 f0 01 00 00 90 00 00 00 32 | ..2(..........2|
000001d0 29 0a 83 7d 31 0c 00 80 02 00 00 90 00 00 00 7d |)..}1..........}|
000001e0 32 0c 83 51 01 10 00 10 03 00 00 f0 00 00 00 00 |2..Q............|
000001f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 aa |..............U.|
00000200
- フォーマット後
root@OpenWrt:~# hexdump -s $((0x200)) -C /dev/mtdblock1
00000000 00 00 00 00 ff ff ff 0f 00 00 00 00 ff 00 aa 55 |...............U|
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00000160 46 53 4f 43 00 00 20 00 00 00 00 0f e0 0f 00 00 |FSOC.. .........|
00000170 00 00 00 00 80 0e 00 00 00 0e 00 00 b0 01 00 00 |................|
00000180 00 20 00 00 00 00 00 00 00 60 00 00 00 00 00 00 |. .......`......|
00000190 00 20 01 00 00 00 00 00 00 60 01 00 00 00 00 00 |. .......`......|
000001a0 00 20 02 00 00 80 00 00 00 01 00 00 00 00 00 00 |. ..............|
000001b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 |................|
000001c0 05 00 83 00 3b 05 00 20 02 00 00 80 00 00 00 00 |....;.. ........|
000001d0 3c 05 83 fc 33 09 00 a0 02 00 00 80 00 00 00 fc |<...3...........|
000001e0 34 09 83 f9 2b 0e 01 00 10 00 00 00 80 00 00 00 |4...+...........|
000001f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 aa |..............U.|
00000200
ログ
root@OpenWrt:~# mtd write /tmp/mtd1_firmware-info.bin firmware-info
Unlocking firmware-info ...
Writing from /tmp/mtd1_firmware-info.bin to firmware-info ...
root@OpenWrt:~# cat /tmp/mtd5_kn1.bin /tmp/mtd6_rfs1.bin > /tmp/mtd5-6_firmware.
bin
root@OpenWrt:~# ls -alh /tmp/mtd*.bin
-rw-r--r-- 1 root root 64.0K Sep 28 07:51 /tmp/mtd1_firmware-info.bin
-rw-r--r-- 1 root root 30.0M Sep 28 07:52 /tmp/mtd5-6_firmware.bin
-rw-r--r-- 1 root root 6.0M Sep 28 07:51 /tmp/mtd5_kn1.bin
-rw-r--r-- 1 root root 24.0M Sep 28 07:51 /tmp/mtd6_rfs1.bin
root@OpenWrt:~# mtd write /tmp/mtd5-6_firmware.bin firmware
Unlocking firmware ...
Writing from /tmp/mtd5-6_firmware.bin to firmware ...
root@OpenWrt:~# hexdump -n $((0x200)) -C /dev/mtdblock1
00000000 00 00 00 00 00 00 11 00 00 00 00 00 ff 00 aa 55 |...............U|
00000010 46 47 54 35 30 45 2d 35 2e 30 34 2d 46 57 2d 62 |FGT50E-5.04-FW-b|
00000020 75 69 6c 64 31 31 31 37 2d 31 37 30 32 30 39 2d |uild1117-170209-|
00000030 46 47 54 35 30 45 2d 35 2e 30 34 2d 46 57 2d 62 |FGT50E-5.04-FW-b|
00000040 75 69 6c 64 31 31 33 38 2d 31 37 30 35 33 31 00 |uild1138-170531.|
00000050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00000120 00 00 00 00 00 00 00 00 5d 04 00 00 72 04 00 00 |........]...r...|
00000130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00000160 46 53 4f 43 00 00 20 00 00 00 00 0f e0 0f 00 00 |FSOC.. .........|
00000170 00 00 16 00 80 0e 00 00 00 0e 00 00 b0 01 00 00 |................|
00000180 00 10 00 00 6d 15 00 00 00 40 00 00 79 a6 00 00 |....m....@..y...|
00000190 00 00 01 00 72 15 00 00 00 30 01 00 18 a6 00 00 |....r....0......|
000001a0 00 f0 01 00 00 90 00 00 20 01 00 08 00 00 00 00 |........ .......|
000001b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 e6 |................|
000001c0 20 07 83 32 28 0a 00 f0 01 00 00 90 00 00 00 32 | ..2(..........2|
000001d0 29 0a 83 7d 31 0c 00 80 02 00 00 90 00 00 00 7d |)..}1..........}|
000001e0 32 0c 83 51 01 10 00 10 03 00 00 f0 00 00 00 00 |2..Q............|
000001f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 aa |..............U.|
00000200
root@OpenWrt:~# reboot
[499016.782735] mv88e6085 f04.mdio-miian1: left pcuous mode left aticast mode
[499016.846369] br-lan: poran1) entereabled state[499017.030338] mv88e6085 f104.mdio-miian2: left aticast mode[499017.089034] mv88e6085 f04.mdio-miian2: left pcuous mode
[499017.151696] br-lan: poran2) entereabled state[499017.350964] mv88e6085 f104.mdio-miian3: left aticast mode[499017.409655] mv88e6085 f04.mdio-miian3: left pcuous mode
[499017.472312] br-lan: poran3) entereabled state[499017.667518] mv88e6085 f104.mdio-miian4: left aticast mode[499017.726210] mv88e6085 f04.mdio-[499017.789662] br-lan: poran4) entereabled state[499018.001292] mv88e6085 f104.mdio-miian5: left aticast mode[499018.059988] mvneta f107ethernet eteft allmult mode
[499018.181334] br-lan: poran5) entereabled state[499018.323742] mvneta f1070ethernet etink is Down[499018.661443] br-wan: portth2) entereabled s[499018.713224] mvneta f103ethernet eteft allmulti mode
[499018.773532] mvneta f1030ethernet eteft promiscumode
[499018.975488] mvneta f1034ethernet eteft allmulti mode
[499019.034678] mvneta f103ethernet eteft promiscmode
[499019.093403] br-wan: portth2) entereabled state[499019.178231] mvneta f1034ethernet etink is Down[499022.649488] reboot: Restng sy3
FortiGate-50E (17:37-01.31.2017)
Ver:05000016
Serial number: FGT50E3U17013352
CPU(00): 1600MHz
Total RAM: 2GB
Initializing boot device...
Initializing MAC... egiga1
Please wait for OS to boot, or press any key to display configuration menu
[C]: Configure TFTP parameters.
[R]: Review TFTP parameters.
[T]: Initiate TFTP firmware transfer.
[F]: Format boot device.
[I]: System information.
[B]: Boot with backup firmware and set as default.
[Q]: Quit menu and continue to boot.
[H]: Display this list of options.
Enter C,R,T,F,I,B,Q,or H:
It will erase data in boot device. Continue? [yes/no]:yes
Formatting................................................................
.............................................................
....................... Done.
[C]: Configure TFTP parameters.
[R]: Review TFTP parameters.
[T]: Initiate TFTP firmware transfer.
[F]: Format boot device.
[I]: System information.
[B]: Boot with backup firmware and set as default.
[Q]: Quit menu and continue to boot.
[H]: Display this list of options.
Enter C,R,T,F,I,B,Q,or H:
Please connect TFTP server to Ethernet port 'WAN1'.
MAC: 70:4c:a5:26:4d:7c
Connect to tftp server 192.168.1.168 ...
###################
Image Received.
Checking image... OK
Save as Default firmware/Backup firmware/Run image without saving:[D/B/R]?r
Reading boot image... 9486336 bytes.
No dtb image in there. Try more
Initializing firewall...
[ 0.000000] Booting Linux on physical CPU 0x0
[ 0.000000] Linux version 6.6.52 (musashino205@TAIHA.NET) (arm-openwrt-linux-muslgnueabi-gcc (OpenWrt GCC 13.3.0 r27299-66559946ac) 13.3.0, GNU ld (GNU Binutils) 2.42) #0 SMP Sun Sep 22 10:17:46 2024
[ 0.000000] CPU: ARMv7 Processor [414fc091] revision 1 (ARMv7), cr=10c5387d
[ 0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[ 0.000000] OF: fdt: Machine model: Fortinet FortiGate 50E
[ 0.000000] Memory policy: Data cache writealloc
[ 0.000000] Zone ranges:
[ 0.000000] Normal [mem 0x0000000000000000-0x000000002fffffff]
[ 0.000000] HighMem [mem 0x0000000030000000-0x000000007fffffff]
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000000000000-0x000000007fffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x000000007fffffff]
[ 0.000000] percpu: Embedded 12 pages/cpu s18772 r8192 d22188 u49152
[ 0.000000] Kernel command line:
[ 0.000000] Bootloader command line not present
[ 0.000000] Dentry cache hash table entries: 131072 (order: 7, 524288 bytes, linear)
[ 0.000000] Inode-cache hash table entries: 65536 (order: 6, 262144 bytes, linear)
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 522560
[ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[ 0.000000] Memory: 2046120K/2097152K available (9216K kernel code, 641K rwdata, 2180K rodata, 18432K init, 235K bss, 51032K reserved, 0K cma-reserved, 1310720K highmem)
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[ 0.000000] rcu: Hierarchical RCU implementation.
[ 0.000000] rcu: RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
[ 0.000000] Tracing variant of Tasks RCU enabled.
[ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[ 0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
[ 0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[ 0.000000] L2C: DT/platform modifies aux control register: 0x06070000 -> 0x16070000
[ 0.000000] L2C-310 enabling early BRESP for Cortex-A9
[ 0.000000] L2C-310 full line of zeros enabled for Cortex-A9
[ 0.000000] L2C-310 D prefetch enabled, offset 1 lines
[ 0.000000] L2C-310 dynamic clock gating enabled, standby mode enabled
[ 0.000000] L2C-310 Coherent cache controller enabled, 16 ways, 1024 kB
[ 0.000000] L2C-310 Coherent: CACHE_ID 0x410054c9, AUX_CTRL 0x56070001
[ 0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[ 0.000001] sched_clock: 64 bits at 800MHz, resolution 1ns, wraps every 4398046511103ns
[ 0.000013] clocksource: arm_global_timer: mask: 0xffffffffffffffff max_cycles: 0xb881274fa3, max_idle_ns: 440795210636 ns
[ 0.000027] Switching to timer-based delay loop, resolution 1ns
[ 0.000154] Ignoring duplicate/late registration of read_current_timer delay
[ 0.000157] clocksource: armada_370_xp_clocksource: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 76450417870 ns
[ 0.000322] Calibrating delay loop (skipped), value calculated using timer frequency.. 1600.00 BogoMIPS (lpj=8000000)
[ 0.000329] CPU: Testing write buffer coherency: ok
[ 0.000346] CPU0: Spectre v2: using BPIALL workaround
[ 0.000349] pid_max: default: 32768 minimum: 301
[ 0.003823] Mount-cache hash table entries: 2048 (order: 1, 8192 bytes, linear)
[ 0.003830] Mountpoint-cache hash table entries: 2048 (order: 1, 8192 bytes, linear)
[ 0.006901] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
[ 0.007272] RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1.
[ 0.007332] Setting up static identity map for 0x100000 - 0x100060
[ 0.007404] mvebu-soc-id: MVEBU SoC ID=0x6820, Rev=0x4
[ 0.007477] mvebu-pmsu: Initializing Power Management Service Unit
[ 0.007547] rcu: Hierarchical SRCU implementation.
[ 0.007549] rcu: Max phase no-delay instances is 1000.
[ 0.007700] smp: Bringing up secondary CPUs ...
[ 0.007878] Booting CPU 1
[ 0.008001] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
[ 0.008008] CPU1: Spectre v2: using BPIALL workaround
[ 0.008062] smp: Brought up 1 node, 2 CPUs
[ 0.008066] SMP: Total of 2 processors activated (3200.00 BogoMIPS).
[ 0.008070] CPU: All CPU(s) started in SVC mode.
[ 0.011070] VFP support v0.3: implementor 41 architecture 3 part 30 variant 9 rev 4
[ 0.011139] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.011148] futex hash table entries: 512 (order: 3, 32768 bytes, linear)
[ 0.012941] pinctrl core: initialized pinctrl subsystem
[ 0.013795] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[ 0.014287] DMA: preallocated 256 KiB pool for atomic coherent allocations
[ 0.014761] thermal_sys: Registered thermal governor 'step_wise'
[ 0.014941] cpuidle: using governor ladder
[ 0.015055] mvebu-pmsu: CPU hotplug support is currently broken on Armada 38x: disabling
[ 0.015060] mvebu-pmsu: CPU idle is currently broken on Armada 38x: disabling
[ 0.020294] cryptd: max_cpu_qlen set to 1000
[ 0.022679] SCSI subsystem initialized
[ 0.022929] usbcore: registered new interface driver usbfs
[ 0.022944] usbcore: registered new interface driver hub
[ 0.022959] usbcore: registered new device driver usb
[ 0.023675] clocksource: Switched to clocksource arm_global_timer
[ 0.027518] NET: Registered PF_INET protocol family
[ 0.027623] IP idents hash table entries: 16384 (order: 5, 131072 bytes, linear)
[ 0.028450] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear)
[ 0.028463] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[ 0.028470] TCP established hash table entries: 8192 (order: 3, 32768 bytes, linear)
[ 0.028506] TCP bind hash table entries: 8192 (order: 5, 131072 bytes, linear)
[ 0.028621] TCP: Hash tables configured (established 8192 bind 8192)
[ 0.028678] UDP hash table entries: 512 (order: 2, 16384 bytes, linear)
[ 0.028706] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes, linear)
[ 0.028984] NET: Registered PF_UNIX/PF_LOCAL protocol family
[ 0.029004] PCI: CLS 0 bytes, default 64
[ 0.030302] workingset: timestamp_bits=14 max_order=19 bucket_order=5
[ 0.036569] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.036576] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.040047] bounce: pool size: 64 pages
[ 0.041657] armada-38x-pinctrl f1018000.pinctrl: registered pinctrl driver
[ 0.042563] gpio gpiochip0: Static allocation of GPIO base is deprecated, use dynamic allocation.
[ 0.042726] debugfs: Directory 'f1018100.gpio' with parent 'regmap' already present!
[ 0.043105] gpio gpiochip1: Static allocation of GPIO base is deprecated, use dynamic allocation.
[ 0.043218] debugfs: Directory 'f1018140.gpio' with parent 'regmap' already present!
[ 0.043763] mv_xor f1060800.xor: Marvell shared XOR driver
[ 0.114444] mv_xor f1060800.xor: Marvell XOR (Descriptor Mode): ( xor cpy intr )
[ 0.114629] mv_xor f1060900.xor: Marvell shared XOR driver
[ 0.184169] mv_xor f1060900.xor: Marvell XOR (Descriptor Mode): ( xor cpy intr )
[ 0.184385] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[ 0.184829] printk: console [ttyS0] disabled
[ 0.204999] f1012000.serial: ttyS0 at MMIO 0xf1012000 (irq = 38, base_baud = 15625000) is a 16550A
[ 0.205028] printk: console [ttyS0] enabled
[ 8.307678] loop: module loaded
[ 8.347507] spi-nor spi1.0: mx66l1g45g (131072 Kbytes)
[ 8.415675] 10 fixed-partitions partitions found on MTD device spi1.0
[ 8.492925] OF: Bad cell count for /soc/spi@10680/flash@0/partitions
[ 8.569106] OF: Bad cell count for /soc/spi@10680/flash@0/partitions
[ 8.645401] OF: Bad cell count for /soc/spi@10680/flash@0/partitions
[ 8.721578] OF: Bad cell count for /soc/spi@10680/flash@0/partitions
[ 8.797830] Creating 10 MTD partitions on "spi1.0":
[ 8.856288] 0x000000000000-0x0000001c0000 : "u-boot"
[ 8.916014] 0x0000001c0000-0x0000001d0000 : "firmware-info"
[ 8.983055] OF: Bad cell count for /soc/spi@10680/flash@0/partitions
[ 9.059321] 0x0000001d0000-0x0000001e0000 : "dtb"
[ 9.116040] 0x0000001e0000-0x0000001f0000 : "u-boot-env"
[ 9.179989] 0x0000001f0000-0x000000200000 : "board-info"
[ 9.244062] OF: Bad cell count for /soc/spi@10680/flash@0/partitions
[ 9.320330] 0x000000200000-0x000002000000 : "firmware"
[ 9.382207] mtdsplit_fortigate: firmware-info has wrong offset for kernel0 (0x80000000)
[ 9.478187] 0x000002000000-0x000003e00000 : "firmware2"
[ 9.541107] 0x000003e00000-0x000005000000 : "part1"
[ 9.599766] 0x000005000000-0x000006200000 : "part2"
[ 9.658404] 0x000006200000-0x000008000000 : "config"
[ 9.783789] hwmon hwmon0: temp1_input not attached to any thermal zone
[ 9.923779] hwmon hwmon1: temp1_input not attached to any thermal zone
[ 10.013937] mv88e6085 f1072004.mdio-mii:02: switch 0x1760 detected: Marvell 88E6176, revision 1
[ 10.172099] mvneta_bm f10c8000.bm: Buffer Manager for network controller enabled
[ 10.262538] mvneta f1070000.ethernet eth0: Using device tree mac address 70:4c:a5:26:4d:7c
[ 10.362918] mvneta f1030000.ethernet eth1: Using device tree mac address 70:4c:a5:26:4d:7d
[ 10.463283] mvneta f1034000.ethernet eth2: Using device tree mac address 70:4c:a5:26:4d:7e
[ 10.562816] xhci-hcd f10f0000.usb3: xHCI Host Controller
[ 10.626510] xhci-hcd f10f0000.usb3: new USB bus registered, assigned bus number 1
[ 10.716365] xhci-hcd f10f0000.usb3: hcc params 0x0a000990 hci version 0x100 quirks 0x0000000000000010
[ 10.826964] xhci-hcd f10f0000.usb3: irq 44, io mem 0xf10f0000
[ 10.895921] xhci-hcd f10f0000.usb3: xHCI Host Controller
[ 10.959593] xhci-hcd f10f0000.usb3: new USB bus registered, assigned bus number 2
[ 11.049352] xhci-hcd f10f0000.usb3: Host supports USB 3.0 SuperSpeed
[ 11.125869] hub 1-0:1.0: USB hub found
[ 11.171036] hub 1-0:1.0: 1 port detected
[ 11.218216] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[ 11.315538] hub 2-0:1.0: USB hub found
[ 11.360473] hub 2-0:1.0: 1 port detected
[ 11.407745] usbcore: registered new interface driver usb-storage
[ 11.480269] armada38x-rtc f10a3800.rtc: registered as rtc0
[ 11.546099] armada38x-rtc f10a3800.rtc: setting system clock to 2024-09-28T08:04:28 UTC (1727510668)
[ 11.656340] i2c_dev: i2c /dev entries driver
[ 11.707909] pca953x 0-0024: supply vcc not found, using dummy regulator
[ 11.787300] pca953x 0-0024: using no AI
[ 11.836675] orion_wdt: Initial timeout 171 sec
[ 11.890182] sdhci: Secure Digital Host Controller Interface driver
[ 11.964287] sdhci: Copyright(c) Pierre Ossman
[ 12.016603] sdhci-pltfm: SDHCI platform and OF driver helper
[ 12.084861] usb 1-1: new high-speed USB device number 2 using xhci-hcd
[ 12.172955] marvell-cesa f1090000.crypto: CESA device successfully registered
[ 12.259411] NET: Registered PF_INET6 protocol family
[ 12.319678] Segment Routing with IPv6
[ 12.363587] In-situ OAM (IOAM) with IPv6
[ 12.410630] NET: Registered PF_PACKET protocol family
[ 12.471241] 8021q: 802.1Q VLAN Support v1.8
[ 12.521396] Registering SWP/SWPB emulation handler
[ 12.605215] usb-storage 1-1:1.0: USB Mass Storage device detected
[ 12.678447] mv88e6085 f1072004.mdio-mii:02: switch 0x1760 detected: Marvell 88E6176, revision 1
[ 12.784447] scsi host0: usb-storage 1-1:1.0
[ 12.889239] hwmon hwmon3: temp1_input not attached to any thermal zone
[ 12.991922] hwmon hwmon4: temp1_input not attached to any thermal zone
[ 13.092331] hwmon hwmon5: temp1_input not attached to any thermal zone
[ 13.197234] hwmon hwmon6: temp1_input not attached to any thermal zone
[ 13.301301] hwmon hwmon7: temp1_input not attached to any thermal zone
[ 13.914247] scsi 0:0:0:0: Direct-Access TOSHIBA USB FLASH DRIVE PMAP PQ: 0 ANSI: 6
[ 14.044700] sd 0:0:0:0: [sda] 60506112 512-byte logical blocks: (31.0 GB/28.9 GiB)
[ 14.135672] sd 0:0:0:0: [sda] Write Protect is off
[ 14.157410] mv88e6085 f1072004.mdio-mii:02: configuring for fixed/rgmii-id link mode
[ 14.286127] sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, doesn't support DPO or FUA
[ 14.290671] mv88e6085 f1072004.mdio-mii:02: Link is Up - 1Gbps/Full - flow control off
[ 14.397604] sda: sda1
[ 14.519437] sd 0:0:0:0: [sda] Attached SCSI removable disk
[ 14.672612] mv88e6085 f1072004.mdio-mii:02 lan5 (uninitialized): PHY [mv88e6xxx-0:00] driver [Marvell 88E1540] (irq=60)
[ 14.902498] mv88e6085 f1072004.mdio-mii:02 lan4 (uninitialized): PHY [mv88e6xxx-0:01] driver [Marvell 88E1540] (irq=61)
[ 15.118339] mv88e6085 f1072004.mdio-mii:02 lan3 (uninitialized): PHY [mv88e6xxx-0:02] driver [Marvell 88E1540] (irq=62)
[ 15.342648] mv88e6085 f1072004.mdio-mii:02 lan2 (uninitialized): PHY [mv88e6xxx-0:03] driver [Marvell 88E1540] (irq=63)
[ 15.558437] mv88e6085 f1072004.mdio-mii:02 lan1 (uninitialized): PHY [mv88e6xxx-0:04] driver [Marvell 88E1540] (irq=64)
[ 15.692474] mvneta f1070000.ethernet eth0: entered promiscuous mode
[ 15.767631] DSA: tree 0 setup
[ 15.803438] clk: Disabling unused clocks
[ 15.859998] Freeing unusernel image mem) memory32K
[ 15.917570] Run /init as process
[ 16.118197] init: Consolealive
[ 16.153523] init: - watc-
[ 16.192218] kmodloader: lng kernel ms from /etcles-boot.d/[ 16.258752] gpio_button_hug: loadingof-tree modaints kerne[ 16.318764] kmodloader: loading kerodules from/modules-boo*
[ 16.397634] init: - prein
[ 18.883682] random: crng done
[ 19.007697] mvneta f10700thernet ethnfiguring fxed/rgmii-ik mode
[ 19.078758] mv88e6085 f14.mdio-mii:n1: configufor phy/gmiik mode
[ 19.150224] mvneta f1070thernet ethnk is Up - /Full - flowtrol off
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[ 21.376743] procd: - earl
[ 21.407152] procd: - watc -
[ 21.961622] procd: - watc -
[ 21.995193] procd: - ubus[ 22.169174] procd: - initPlease press Enter to activate this console.
[ 22.330888] kmodloader: lng kernel ms from /etcles.d/*
[ 22.514529] nat46: modulersion 4c5be841724219591edc93d4f08loaded.
[ 22.631118] Loading modulackported finux versio9.9-0-g28fd483
[ 22.700069] Backport gened by backpoit v6.1.97-gf1d24a3683[ 22.731871] urngd: v1.0.rted.
[ 22.787039] xt_time: kerimezone is
[ 22.885064] PPP generic dr version 2
[ 22.927681] NET: RegisterF_PPPOX pro family
[ 23.003171] kmodloader: dloading kerodules from/modules.d/[ 29.619561] mvneta f10700thernet ethnk is Down
[ 29.673398] mvneta f10700thernet ethnfiguring fxed/rgmii-ik mode
[ 29.744038] mvneta f1070thernet ethnk is Up - /Full - flowtrol off
[ 29.811576] mv88e6085 f14.mdio-mii:n1: configufor phy/gmiik mode
[ 30.030568] mv88e6085 f14.mdio-mii:n1: enteredulticast mod[ 30.093342] mvneta f1070thernet ethtered allmust mode
[ 30.218651] mv88e6085 f104.mdio-mii:n1: enterediscuous mod[ 30.385261] mv88e6085 f104.mdio-mii:n2: configufor phy/gmiik mode
[ 30.592597] mv88e6085 f14.mdio-mii:n2: enteredulticast mod[ 30.680972] mv88e6085 f104.mdio-mii:n2: enterediscuous mod[ 30.823262] mv88e6085 f104.mdio-mii:n3: configufor phy/gmik mode
[ 31.021238] mv88e6085 f14.mdio-mii:n3: enteredulticast mod[ 31.108647] mv88e6085 f104.mdio-mii:n3: enterediscuous mod[ 31.250816] mv88e6085 f104.mdio-mii:n4: configufor phy/gmik mode
[ 31.370224] br-lan: portn4) enteredbled statee
[ 31.421876] mv88e6085 f14.mdio-mii:0n4: enteredulticast mod[ 31.523956] mv88e6085 f104.mdio-mii:n4: entered iscuous mod[ 31.685383] mv88e6085 f104.mdio-mii:n5: configufor phy/gmik mode
[ 31.855395] mv88e6085 f14.mdio-mii:n5: enteredulticast mod[ 31.954733] mv88e6085 f104.mdio-mii:n5: enterediscuous mod[ 32.173799] mvneta f[ 32.256578] mvneta f1030thernet ethnfiguring fy/sgmii linke
[ 32.427734] mvneta f1030thernet ethtered allmust mode
[ 32.490627] mvneta f1030thernet ethtered promis mode
[ 32.786370] mvneta f1034thernet ethnfiguring fy/sgmii linkeMarvell 88E] (irq=40)
[ 32.957816] mvneta f1034thernet ethtered allmust mode
[ 33.020693] mvneta f1034thernet ethtered promis mode
[ 35.457644] mvneta f10300thernet ethnk is Up - s/Full - flntrol off
[ 35.578676] br-wan: porth1) enteredarding stat
BusyBox v1.36.1 (2024-09-21 15:28:28 UTC) built-in shell (ash)
_______ ________ __
| |.-----.-----.-----.| | | |.----.| |_
| - || _ | -__| || | | || _|| _|
|_______|| __|_____|__|__||________||__| |____|
|__| W I R E L E S S F R E E D O M
-----------------------------------------------------
OpenWrt SNAPSHOT, r27537-5f2c08bd92
-----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:~# cat /proc/mtd
dev: size erasesize name
mtd0: 001c0000 00010000 "u-boot"
mtd1: 00010000 00010000 "firmware-info"
mtd2: 00010000 00010000 "dtb"
mtd3: 00010000 00010000 "u-boot-env"
mtd4: 00010000 00010000 "board-info"
mtd5: 01e00000 00010000 "firmware"
mtd6: 01e00000 00010000 "firmware2"
mtd7: 01200000 00010000 "part1"
mtd8: 01200000 00010000 "part2"
mtd9: 01e00000 00010000 "config"
root@OpenWrt:~# hexdump -C /dev/mtdblock1
00000000 00 00 00 00 ff ff ff 0f 00 00 00 00 ff 00 aa 55 |...............U|
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00000160 46 53 4f 43 00 00 20 00 00 00 00 0f e0 0f 00 00 |FSOC.. .........|
00000170 00 00 00 00 80 0e 00 00 00 0e 00 00 b0 01 00 00 |................|
00000180 00 20 00 00 00 00 00 00 00 60 00 00 00 00 00 00 |. .......`......|
00000190 00 20 01 00 00 00 00 00 00 60 01 00 00 00 00 00 |. .......`......|
000001a0 00 20 02 00 00 80 00 00 00 01 00 00 00 00 00 00 |. ..............|
000001b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 |................|
000001c0 05 00 83 00 3b 05 00 20 02 00 00 80 00 00 00 00 |....;.. ........|
000001d0 3c 05 83 fc 33 09 00 a0 02 00 00 80 00 00 00 fc |<...3...........|
000001e0 34 09 83 f9 2b 0e 01 00 10 00 00 00 80 00 00 00 |4...+...........|
000001f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 aa |..............U.|
00000200 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff |................|
*
00010000
