大破雑記帳

個人用メモな雑記ブログ いろんなことをざっくりと。

WSR-3000AX4P stock ---> OpenWrt

BUFFALO機で恒例のAOSSギミックを利用

F0: 102B 0000
FA: 1040 0000
FA: 1040 0000 [0200]
F9: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 2400 0041 [0000]
G0: 1190 0000
EC: 0000 0000 [1000]
T0: 0000 024B [010F]
Jump to BL

NOTICE:  BL2: v2.7(release):9818265ce7-dirty
NOTICE:  BL2: Built : 06:51:45, May  6 2023
NOTICE:  WDT: disabled
NOTICE:  EMI: Using DDR4 settings
[TxChooseVref] Worse bit 10, Min win 24, Win sum 408, Final Vref 38
NOTICE:  EMI: Detected DRAM size: 512MB
NOTICE:  EMI: complex R/W mem test passed
NOTICE:  CPU: MT7981 (1300MHz)
NOTICE:  SPI_NAND parses attributes from parameter page.
NOTICE:  SPI_NAND Detected ID 0xef
NOTICE:  Page size 2048, Block size 131072, size 134217728
NOTICE:  Initializing NMBM ...
NOTICE:  Signature found at block 1023 [0x07fe0000]
NOTICE:  First info table with writecount 0 found in block 960
NOTICE:  Second info table with writecount 0 found in block 963
NOTICE:  NMBM has been successfully attached in read-only mode
NOTICE:  BL2: Booting BL31
NOTICE:  BL31: v2.7(release):9818265ce7-dirty
NOTICE:  BL31: Built : 06:51:47, May  6 2023


U-Boot 2022.10 (May 06 2023 - 06:51:01 +0000)

CPU:   MediaTek MT7981
Model: mt7981-rfb
DRAM:  512 MiB
Core:  32 devices, 12 uclasses, devicetree: separate

Initializing NMBM ...
spi-nand: spi_nand spi_nand@0: Winbond SPI NAND was found.
spi-nand: spi_nand spi_nand@0: 128 MiB, block size: 128 KiB, page size: 2048, OOB size: 64
Could not find a valid device for nmbm0
Signature found at block 1023 [0x07fe0000]
First info table with writecount 0 found in block 960
Second info table with writecount 0 found in block 963
NMBM has been successfully attached 

Loading Environment from MTD... OK
In:    serial@11002000
Out:   serial@11002000
Err:   serial@11002000
Net:   eth0: ethernet@15100000
=== AOSS pressed, load firmware from TFTP server ===

*** Loading MT image ***

Input load address: 0x46000000
Available load methods:
    0 - TFTP client (Default)
    1 - Xmodem
    2 - Ymodem
    3 - Kermit
    4 - S-Record

Select (enter for default): 


Input U-Boot's IP address: 192.168.11.1Input TFTP server's IP address: 192.168.11.2Input IP netmask: 255.255.255.0Input file name: linux.ubi-recovery
Using ethernet@15100000 device
TFTP from server 192.168.11.2; our IP address is 192.168.11.1
Filename 'linux.ubi-recovery'.
Load address: 0x46000000
Loading: #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ############################################
         791 KiB/s
done
Bytes transferred = 9231964 (8cde5c hex)
Saving Environment to MTD... Erasing on MTD device 'u-boot-env'... OK
Writing to MTD device 'u-boot-env'... OK
OK

*** Loaded 9231964 (0x8cde5c) bytes at 0x46000000 ***

## Loading kernel from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM64 OpenWrt Linux-6.12.77
     Type:         Kernel Image
     Compression:  lzma compressed
     Data Start:   0x460000e8
     Data Size:    4475300 Bytes = 4.3 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x48000000
     Entry Point:  0x48000000
     Hash algo:    crc32
     Hash value:   28356da4
     Hash algo:    sha1
     Hash value:   dc5b5909d6a7771b99b1fd1eab85cc04619865ca
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading ramdisk from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Trying 'initrd-1' ramdisk subimage
     Description:  ARM64 OpenWrt buffalo_wsr-3000ax4p initrd
     Type:         RAMDisk Image
     Compression:  uncompressed
     Data Start:   0x46444bcc
     Data Size:    4732460 Bytes = 4.5 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: unavailable
     Entry Point:  unavailable
     Hash algo:    crc32
     Hash value:   791a91d0
     Hash algo:    sha1
     Hash value:   317cd4778961479346ee7a6fbdbf27243d6d4dc7
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Trying 'fdt-1' fdt subimage
     Description:  ARM64 OpenWrt buffalo_wsr-3000ax4p device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x468c8308
     Data Size:    22296 Bytes = 21.8 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   ffc332ae
     Hash algo:    sha1
     Hash value:   f249fa7e556517ec8249fbf869815bdaf5c70b11
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x468c8308
   Uncompressing Kernel Image
   Loading Ramdisk to 5f375000, end 5f7f862c ... OK
   Loading Device Tree to 000000005f36c000, end 000000005f374717 ... OK

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[    0.000000] Linux version 6.12.77 (musashino205@TAIHA.NET) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 14.3.0 r33426+2-36a818b413) 14.3.0, GNU ld (GNU Binutils) 2.44) #0 SMP Mon Mar 23 18:31:13 2026
[    0.000000] KASLR disabled due to lack of seed
[    0.000000] Machine model: BUFFALO WSR-3000AX4P
[    0.000000] earlycon: mtk8250 at MMIO32 0x0000000011002000 (options '115200n8')
[    0.000000] printk: legacy bootconsole [mtk8250] enabled
[    0.000000] OF: reserved mem: 0x0000000042ff0000..0x0000000042ffffff (64 KiB) map non-reusable ramoops@42ff0000
[    0.000000] OF: reserved mem: 0x0000000043000000..0x000000004302ffff (192 KiB) nomap non-reusable secmon@43000000
[    0.000000] OF: reserved mem: 0x0000000047c80000..0x0000000047d7ffff (1024 KiB) nomap non-reusable wmcpu-reserved@47c80000
[    0.000000] OF: reserved mem: 0x0000000047d80000..0x0000000047dbffff (256 KiB) nomap non-reusable wo-emi@47d80000
[    0.000000] OF: reserved mem: 0x0000000047dc0000..0x0000000047ffffff (2304 KiB) nomap non-reusable wo-data@47dc0000
[    0.000000] Zone ranges:
[    0.000000]   DMA      [mem 0x0000000040000000-0x000000005fffffff]
[    0.000000]   DMA32    empty
[    0.000000]   Normal   empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000040000000-0x0000000042ffffff]
[    0.000000]   node   0: [mem 0x0000000043000000-0x000000004302ffff]
[    0.000000]   node   0: [mem 0x0000000043030000-0x0000000047c7ffff]
[    0.000000]   node   0: [mem 0x0000000047c80000-0x0000000047ffffff]
[    0.000000]   node   0: [mem 0x0000000048000000-0x000000005fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000005fffffff]
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv1.1 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.
[    0.000000] psci: SMC Calling Convention v1.2
[    0.000000] percpu: Embedded 20 pages/cpu s42520 r8192 d31208 u81920
[    0.000000] pcpu-alloc: s42520 r8192 d31208 u81920 alloc=20*4096
[    0.000000] pcpu-alloc: [0] 0 [0] 1 
[    0.000000] Detected VIPT I-cache on CPU0
[    0.000000] CPU features: detected: GIC system register CPU interface
[    0.000000] CPU features: kernel page table isolation disabled by kernel configuration
[    0.000000] alternatives: applying boot alternatives
[    0.000000] Kernel command line: earlycon
[    0.000000] Dentry cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[    0.000000] Inode-cache hash table entries: 32768 (order: 6, 262144 bytes, linear)
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 131072
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] software IO TLB: SWIOTLB bounce buffer size adjusted to 0MB
[    0.000000] software IO TLB: area num 2.
[    0.000000] software IO TLB: mapped [mem 0x000000005fd6a000-0x000000005fdea000] (0MB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000] rcu:     RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
[    0.000000]  Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
[    0.000000] RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2.
[    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[    0.000000] GICv3: GIC: Using split EOI/Deactivate mode
[    0.000000] GICv3: 640 SPIs implemented
[    0.000000] GICv3: 0 Extended SPIs implemented
[    0.000000] Root IRQ handler: gic_handle_irq
[    0.000000] GICv3: GICv3 features: 16 PPIs
[    0.000000] GICv3: GICD_CTRL.DS=0, SCR_EL3.FIQ=0
[    0.000000] GICv3: CPU0: found redistributor 0 region 0:0x000000000c080000
[    0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[    0.000000] arch_timer: cp15 timer(s) running at 13.00MHz (phys).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x2ff89eacb, max_idle_ns: 440795202429 ns
[    0.000000] sched_clock: 56 bits at 13MHz, resolution 76ns, wraps every 4398046511101ns
[    0.008146] Calibrating delay loop (skipped), value calculated using timer frequency.. 26.00 BogoMIPS (lpj=130000)
[    0.018564] pid_max: default: 32768 minimum: 301
[    0.026150] Mount-cache hash table entries: 1024 (order: 1, 8192 bytes, linear)
[    0.033512] Mountpoint-cache hash table entries: 1024 (order: 1, 8192 bytes, linear)
[    0.043445] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    0.050492] rcu: Hierarchical SRCU implementation.
[    0.055317] rcu:     Max phase no-delay instances is 1000.
[    0.060765] Timer migration: 1 hierarchy levels; 8 children per group; 1 crossnode level
[    0.069146] smp: Bringing up secondary CPUs ...
[    0.074102] Detected VIPT I-cache on CPU1
[    0.074158] GICv3: CPU1: found redistributor 1 region 0:0x000000000c0a0000
[    0.074191] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
[    0.074280] smp: Brought up 1 node, 2 CPUs
[    0.095908] SMP: Total of 2 processors activated.
[    0.100633] CPU: All CPU(s) started at EL2
[    0.104747] CPU features: detected: 32-bit EL0 Support
[    0.109914] CPU features: detected: CRC32 instructions
[    0.115101] alternatives: applying system-wide alternatives
[    0.120839] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[    0.129378] Memory: 488860K/524288K available (9216K kernel code, 986K rwdata, 2764K rodata, 832K init, 298K bss, 33604K reserved, 0K cma-reserved)
[    0.145958] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.155881] futex hash table entries: 512 (order: 3, 32768 bytes, linear)
[    0.162765] 29200 pages in range for non-PLT usage
[    0.162769] 520720 pages in range for PLT usage
[    0.169097] pinctrl core: initialized pinctrl subsystem
[    0.180138] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.186417] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations
[    0.193551] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[    0.201354] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[    0.209731] thermal_sys: Registered thermal governor 'fair_share'
[    0.209738] thermal_sys: Registered thermal governor 'bang_bang'
[    0.215863] thermal_sys: Registered thermal governor 'step_wise'
[    0.221912] thermal_sys: Registered thermal governor 'user_space'
[    0.228018] ASID allocator initialised with 65536 entries
[    0.240217] pstore: Using crash dump compression: deflate
[    0.245670] pstore: Registered ramoops as persistent store backend
[    0.251882] ramoops: using 0x10000@0x42ff0000, ecc: 0
[    0.258427] /soc/interrupt-controller@c000000: Fixed dependency cycle(s) with /soc/interrupt-controller@c000000
[    0.284996] cryptd: max_cpu_qlen set to 1000
[    0.291581] SCSI subsystem initialized
[    0.295593] libata version 3.00 loaded.
[    0.301226] clocksource: Switched to clocksource arch_sys_counter
[    0.309738] NET: Registered PF_INET protocol family
[    0.314794] IP idents hash table entries: 8192 (order: 4, 65536 bytes, linear)
[    0.323264] tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.331690] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.339481] TCP established hash table entries: 4096 (order: 3, 32768 bytes, linear)
[    0.347300] TCP bind hash table entries: 4096 (order: 5, 131072 bytes, linear)
[    0.354669] TCP: Hash tables configured (established 4096 bind 4096)
[    0.361416] MPTCP token hash table entries: 512 (order: 2, 12288 bytes, linear)
[    0.368876] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.375464] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.382684] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.388395] PCI: CLS 0 bytes, default 64
[    0.392565] Unpacking initramfs...
[    0.403491] workingset: timestamp_bits=46 max_order=17 bucket_order=0
[    0.415079] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.420961] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.498294] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    0.505967] printk: legacy console [ttyS0] disabled
[    0.531380] 11002000.serial: ttyS0 at MMIO 0x11002000 (irq = 72, base_baud = 2500000) is a ST16650V2
[    0.540616] printk: legacy console [ttyS0] enabled
[    0.540616] printk: legacy console [ttyS0] enabled
[    0.550219] printk: legacy bootconsole [mtk8250] disabled
[    0.550219] printk: legacy bootconsole [mtk8250] disabled
[    0.562211] mtk_rng trng: registered RNG driver
[    0.566955] random: crng init done
[    0.574210] loop: module loaded
[    0.579441] spi-nand spi0.0: Winbond SPI NAND was found.
[    0.584823] spi-nand spi0.0: 128 MiB, block size: 128 KiB, page size: 2048, OOB size: 64
[    0.593504] Signature found at block 1023 [0x07fe0000]
[    0.598648] NMBM management region starts at block 960 [0x07800000]
[    0.605895] First info table with writecount 0 found in block 960
[    0.614526] Second info table with writecount 0 found in block 963
[    0.620717] NMBM has been successfully attached
[    1.778571] Freeing initrd memory: 4620K
[    1.789304] 11 fixed-partitions partitions found on MTD device spi0.0
[    1.795805] Creating 11 MTD partitions on "spi0.0":
[    1.800684] 0x000000000000-0x000000100000 : "BL2"
[    1.806432] 0x000000100000-0x000000180000 : "u-boot-env"
[    1.812496] 0x000000180000-0x000000380000 : "Factory"
[    1.819308] 0x000000380000-0x000000580000 : "FIP"
[    1.825609] 0x000000580000-0x000001f80000 : "ubi_kernel"
[    1.845014] 0x000001f80000-0x000003980000 : "Kernel2"
[    1.865433] 0x000003980000-0x000003b80000 : "glbcfg"
[    1.872285] 0x000003b80000-0x000003d80000 : "seccfg"
[    1.879055] 0x000003d80000-0x000003f80000 : "board_data"
[    1.886213] 0x000003f80000-0x000004880000 : "debug_log"
[    1.897578] 0x000004880000-0x000007480000 : "ubi"
[    2.052946] i2c_dev: i2c /dev entries driver
[    2.058960] mtk-wdt 1001c000.watchdog: Watchdog enabled (timeout=31 sec, nowayout=0)
[    2.249082] NET: Registered PF_INET6 protocol family
[    2.254775] Segment Routing with IPv6
[    2.258465] In-situ OAM (IOAM) with IPv6
[    2.262449] NET: Registered PF_PACKET protocol family
[    2.267627] 8021q: 802.1Q VLAN Support v1.8
[    2.434089] mtk_soc_eth 15100000.ethernet eth0: mediatek frame engine at 0xffffffc081b80000, irq 75
[    2.488102] mt7530-mdio mdio-bus:1f: no interrupt support
[    2.525666] mt7530-mdio mdio-bus:1f: configuring for fixed/2500base-x link mode
[    2.534871] mt7530-mdio mdio-bus:1f: Link is Up - 2.5Gbps/Full - flow control rx/tx
[    2.544846] mt7530-mdio mdio-bus:1f wan (uninitialized): PHY [mt7530-0:00] driver [MediaTek MT7531 PHY] (irq=POLL)
[    2.566084] mt7530-mdio mdio-bus:1f lan1 (uninitialized): PHY [mt7530-0:01] driver [MediaTek MT7531 PHY] (irq=POLL)
[    2.587152] mt7530-mdio mdio-bus:1f lan2 (uninitialized): PHY [mt7530-0:02] driver [MediaTek MT7531 PHY] (irq=POLL)
[    2.608460] mt7530-mdio mdio-bus:1f lan3 (uninitialized): PHY [mt7530-0:04] driver [MediaTek MT7531 PHY] (irq=POLL)
[    2.619797] mtk_soc_eth 15100000.ethernet eth0: entered promiscuous mode
[    2.626562] DSA: tree 0 setup
[    2.630018] UBI: auto-attach mtd10
[    2.633474] ubi0: default fastmap pool size: 15
[    2.637997] ubi0: default fastmap WL pool size: 7
[    2.642704] ubi0: attaching mtd10
[    2.826358] ubi0: scanning is finished
[    2.834397] ubi0 warning: ubi_eba_init: cannot reserve enough PEBs for bad PEB handling, reserved 17, need 19
[    2.844784] ubi0: attached mtd10 (name "ubi", size 44 MiB)
[    2.850277] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    2.857171] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    2.863954] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    2.870903] ubi0: good PEBs: 352, bad PEBs: 0, corrupted PEBs: 0
[    2.876909] ubi0: user volume: 1, internal volumes: 1, max. volumes count: 128
[    2.884132] ubi0: max/mean erase counter: 9/5, WL threshold: 4096, image sequence number: 158937473
[    2.893172] ubi0: available PEBs: 0, total reserved PEBs: 352, PEBs reserved for bad PEB handling: 17
[    2.902391] ubi0: background thread "ubi_bgt0d" started, PID 584
[    2.902519] clk: Disabling unused clocks
[    2.912584] PM: genpd: Disabling unused power domains
[    2.918122] Freeing unused kernel memory: 832K
[    2.922630] Run /init as init process
[    2.926282]   with arguments:
[    2.929237]     /init
[    2.931536]   with environment:
[    2.934665]     HOME=/
[    2.937013]     TERM=linux
[    3.113194] init: Console is alive
[    3.116727] init: - watchdog -
[    3.124543] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    3.132023] gpio_button_hotplug: loading out-of-tree module taints kernel.
[    3.142773] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    3.150559] init: - preinit -
[    3.264987] mtk_soc_eth 15100000.ethernet eth0: configuring for fixed/2500base-x link mode
[    3.273548] mtk_soc_eth 15100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
[    3.297198] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    7.462681] procd: - early -
[    7.465631] procd: - watchdog -
[    7.996743] procd: - watchdog -
[    8.000054] procd: - ubus -
[    8.054587] procd: - init -
Please press Enter to activate this console.
[    8.249810] kmodloader: loading kernel modules from /etc/modules.d/*
[    8.269482] crypto-safexcel 10320000.crypto: EIP97:230(0,1,4,4)-HIA:270(0,5,5),PE:150/433(alg:7fcdfc00)/0/0/0
[    8.304575] Loading modules backported from Linux version v6.18.7-0-g5dfbc5357
[    8.311867] Backport generated by backports.git c8a37ce
[    8.455891] urngd: v1.0.2 started.
[    8.631525] mt798x-wmac 18000000.wifi: HW/SW Version: 0x8a108a10, Build Time: 20240823161240a
[    8.652364] mt798x-wmac 18000000.wifi: WM Firmware Version: ____000000, Build Time: 20240823161304
[    8.694647] mt798x-wmac 18000000.wifi: WA Firmware Version: DEV_000000, Build Time: 20240823161841
[    8.792522] mt798x-wmac 18000000.wifi: missing precal data, size=454672
[    8.799444] mt798x-wmac 18000000.wifi: registering led 'mt76-phy0'
[    8.853818] mt798x-wmac 18000000.wifi: registering led 'mt76-phy1'
[    8.942228] PPP generic driver version 2.4.2
[    8.947651] NET: Registered PF_PPPOX protocol family
[    8.957288] kmodloader: done loading kernel modules from /etc/modules.d/*
[   14.139353] mtk_soc_eth 15100000.ethernet eth0: Link is Down
[   14.159794] mtk_soc_eth 15100000.ethernet eth0: configuring for fixed/2500base-x link mode
[   14.169232] mtk_soc_eth 15100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
[   14.189165] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode
[   14.200691] br-lan: port 1(lan1) entered blocking state
[   14.206033] br-lan: port 1(lan1) entered disabled state
[   14.211319] mt7530-mdio mdio-bus:1f lan1: entered allmulticast mode
[   14.217589] mtk_soc_eth 15100000.ethernet eth0: entered allmulticast mode
[   14.228335] mt7530-mdio mdio-bus:1f lan1: entered promiscuous mode
[   14.276195] mt7530-mdio mdio-bus:1f lan2: configuring for phy/gmii link mode
[   14.294406] br-lan: port 2(lan2) entered blocking state
[   14.299647] br-lan: port 2(lan2) entered disabled state
[   14.305015] mt7530-mdio mdio-bus:1f lan2: entered allmulticast mode
[   14.317982] mt7530-mdio mdio-bus:1f lan2: entered promiscuous mode
[   14.348288] mt7530-mdio mdio-bus:1f lan3: configuring for phy/gmii link mode
[   14.364370] br-lan: port 3(lan3) entered blocking state
[   14.369610] br-lan: port 3(lan3) entered disabled state
[   14.374965] mt7530-mdio mdio-bus:1f lan3: entered allmulticast mode
[   14.384186] mt7530-mdio mdio-bus:1f lan3: entered promiscuous mode
[   14.535850] mt7530-mdio mdio-bus:1f wan: configuring for phy/gmii link mode
[   18.537056] mt7530-mdio mdio-bus:1f lan3: Link is Up - 1Gbps/Full - flow control rx/tx
[   18.537083] br-lan: port 3(lan3) entered blocking state
[   18.550199] br-lan: port 3(lan3) entered forwarding state



BusyBox v1.37.0 (2026-01-02 17:07:02 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r33524+12-41d6584d9b
 -----------------------------------------------------

 === WARNING! =====================================
 There is no root password defined on this device!
 Use the "passwd" command to set up a new password
 in order to prevent unauthorized SSH logins.
 --------------------------------------------------

root@OpenWrt:~# ls -alh /tmp/
drwxrwxrwt   16 root     root         440 Jan  1 00:05 .
drwxrwxrwt   16 root     root         400 Jan  1 00:00 ..
drwx------    2 root     root         200 Jan  1 00:00 .uci
----------    1 root     root           0 Jan  1 00:00 .ujailnoafile
-rw-r--r--    1 root     root           5 Jan  1 00:00 TZ
-rw-r--r--    1 root     root          70 Jan  1 00:04 dhcp.leases
drwxr-xr-x    2 root     root          40 Jan  1 00:00 dnsmasq.cfg01411c.d
drwxr-xr-x    3 root     root          80 Jan  1 00:00 etc
drwxr-xr-x    2 root     root          80 Jan  1 00:00 hosts
drwxr-xr-x    3 root     root          60 Jan  1 00:00 lib
drwxrwxrwt    2 root     root         440 Jan  1 00:00 lock
drwxr-xr-x    2 root     root          80 Jan  1 00:00 log
drwxr-xr-x    2 root     root          60 Jan  1 00:00 odhcpd-piodir
-rw-r--r--    1 root     root          94 Jan  1 00:00 odhcpd.leases
-rw-r--r--    1 root     root        9.2M Jan  1 00:05 openwrt-mediatek-filogic-buffalo_wsr-3000ax4p-squashfs-sysupgrade.bin
-rw-r--r--    1 root     root          47 Jan  1 00:00 resolv.conf
drwxr-xr-x    2 root     root          60 Jan  1 00:00 resolv.conf.d
drwxr-xr-x    8 root     root         360 Jan  1 00:00 run
drwxrwxrwt    2 root     root          40 Jan  1 00:00 shm
drwxr-xr-x    2 root     root          60 Jan  1 00:00 state
drwxr-xr-x    2 root     root          80 Jan  1 00:00 sysinfo
drwxr-xr-x    2 root     root          40 Jan  1 00:00 tmp
root@OpenWrt:~# sysupgrade /tmp/openwrt-mediatek-filogic-buffalo_wsr-3000ax4p-squashfs-sysupgrade.bin 
verifying sysupgrade tar file integrity
Cannot save config while running from ramdisk.
Thu Jan  1 00:06:01 GMT 1970 upgrade: Commencing upgrade. Closing all shell sessions.
Hangup
-ash: can't set tty process group: Not a tty
[1]+  Hangup                     sysupgrade /tmp/openwrt-mediatek-filogic-buffalo_wsr-3000ax4p-squashfs-sysupgrade.bin
root@OpenWrt:~# Watchdog handover: fd=3
- watchdog -
Watchdog does not have CARDRESET support
Thu Jan  1 00:06:01 GMT 1970 upgrade: Sending TERM to remaining processes ...
Thu Jan  1 00:06:01 GMT 1970 upgrade: Sending signal TERM to ntpd (2588)
Thu Jan  1 00:06:01 GMT 1970 upgrade: Sending signal TERM to ntpd (2618)
Thu Jan  1 00:06:05 GMT 1970 upgrade: Sending KILL to remaining processes ...
[  372.062825] stage2 (3223): drop_caches: 3
[  372.083807] ubi1: default fastmap pool size: 10
[  372.088341] ubi1: default fastmap WL pool size: 5
[  372.093080] ubi1: attaching mtd4
[  372.234352] ubi1: scanning is finished
[  372.242854] ubi1: attached mtd4 (name "ubi_kernel", size 26 MiB)
[  372.248869] ubi1: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[  372.255749] ubi1: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[  372.262530] ubi1: VID header offset: 2048 (aligned 2048), data offset: 4096
[  372.269478] ubi1: good PEBs: 208, bad PEBs: 0, corrupted PEBs: 0
[  372.275744] ubi1: user volume: 3, internal volumes: 1, max. volumes count: 128
[  372.282970] ubi1: max/mean erase counter: 7/5, WL threshold: 4096, image sequence number: 2002301422
[  372.292095] ubi1: available PEBs: 0, total reserved PEBs: 208, PEBs reserved for bad PEB handling: 19
[  372.301316] ubi1: background thread "ubi_bgt1d" started, PID 3312
[  372.308101] block ubiblock1_1: created from ubi1:1(rootfs)
[  372.313606] ubiblock: device ubiblock1_1 (rootfs) set to be root filesystem
UBI device number 1, total 208 LEBs (26411008 bytes, 25.1 MiB), available 0 LEBs (0 bytes), LEB size 126976 bytes (124.0 KiB)
[  372.431362] block ubiblock1_1: released
[  372.637160] block ubiblock1_1: created from ubi1:1(rootfs)
Volume ID 1, size 1 LEBs (126976 bytes, 124.0 KiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs", alignment 1
[  372.738302] ubi0: reserved more 2 PEBs for bad PEB handling
Thu Jan  1 00:06:12 GMT 1970 upgrade: Switching to ramdisk...
Thu Jan  1 00:06:13 UTC 1970 upgrade: Performing system upgrade...
verifying sysupgrade tar file integrity
Volume ID 0, size 36 LEBs (4571136 bytes, 4.3 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "kernel", alignment 1
[  374.384486] block ubiblock0_0: created from ubi0:0(rootfs)
Volume ID 0, size 41 LEBs (5206016 bytes, 4.9 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs", alignment 1
Set volume size to 36315136
Volume ID 1, size 286 LEBs (36315136 bytes, 34.6 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs_data", alignment 1
sysupgrade successful
umount: can't unmount /dev: Resource busy
umoun[  376.933120] mt7530-mdio mdio-bus:1f lan3: Link is Down
t: can't unmount /tmp: Resource [  376.941958] br-lan: port 3(lan3) entered disabled state
busy
[  376.947452] br-lan: port 2(lan2) entered disabled state
[  376.953166] br-lan: port 1(lan1) entered disabled state
[  376.960319] mtk_soc_eth 15100000.ethernet eth0: Link is Down
[  376.969890] reboot: Restarting system

F0: 102B 0000
FA: 1040 0000
FA: 1040 0000 [0200]
F9: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 2400 0041 [0000]
G0: 1190 0000
EC: 0000 0000 [1000]
T0: 0000 024B [010F]
Jump to BL

NOTICE:  BL2: v2.7(release):9818265ce7-dirty
NOTICE:  BL2: Built : 06:51:45, May  6 2023
NOTICE:  WDT: disabled
NOTICE:  EMI: Using DDR4 settings
[TxChooseVref] Worse bit 3, Min win 24, Win sum 407, Final Vref 38
NOTICE:  EMI: Detected DRAM size: 512MB
NOTICE:  EMI: complex R/W mem test passed
NOTICE:  CPU: MT7981 (1300MHz)
NOTICE:  SPI_NAND parses attributes from parameter page.
NOTICE:  SPI_NAND Detected ID 0xef
NOTICE:  Page size 2048, Block size 131072, size 134217728
NOTICE:  Initializing NMBM ...
NOTICE:  Signature found at block 1023 [0x07fe0000]
NOTICE:  First info table with writecount 0 found in block 960
NOTICE:  Second info table with writecount 0 found in block 963
NOTICE:  NMBM has been successfully attached in read-only mode
NOTICE:  BL2: Booting BL31
NOTICE:  BL31: v2.7(release):9818265ce7-dirty
NOTICE:  BL31: Built : 06:51:47, May  6 2023


U-Boot 2022.10 (May 06 2023 - 06:51:01 +0000)

CPU:   MediaTek MT7981
Model: mt7981-rfb
DRAM:  512 MiB
Core:  32 devices, 12 uclasses, devicetree: separate

Initializing NMBM ...
spi-nand: spi_nand spi_nand@0: Winbond SPI NAND was found.
spi-nand: spi_nand spi_nand@0: 128 MiB, block size: 128 KiB, page size: 2048, OOB size: 64
Could not find a valid device for nmbm0
Signature found at block 1023 [0x07fe0000]
First info table with writecount 0 found in block 960
Second info table with writecount 0 found in block 963
NMBM has been successfully attached 

Loading Environment from MTD... OK
In:    serial@11002000
Out:   serial@11002000
Err:   serial@11002000

  *** U-Boot Boot Menu ***
  Press UP/DOWN to move, ENTER to select, ESC/CTRL+C to quit
      1. Startup system (Default)
      2. Upgrade firmware
      3. Upgrade ATF BL2
      4. Upgrade ATF FIP
      5. Upgrade single image
      6. Load image
      0. U-Boot console

***ubi_boot_image: boot_select = 0.... ***
ubi0: attaching mtd6
ubi0: scanning is finished
ubi0: attached mtd6 (name "ubi", size 26 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 208, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 8/5, WL threshold: 4096, image sequence number: 2002301422
ubi0: available PEBs: 148, total reserved PEBs: 60, PEBs reserved for bad PEB handling: 19
Reading from volume 'kernel' to 0x46000000, size 0x0 ... OK
Reading from volume 'rootfs' to 0x4645c000, size 0x0 ... OK
ubi0: detaching mtd6
ubi0: mtd6 is detached
ubi0: attaching mtd7
ubi0: scanning is finished
ubi0: attached mtd7 (name "Kernel2", size 26 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 208, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 3, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 5/4, WL threshold: 4096, image sequence number: 1193052006
ubi0: available PEBs: 0, total reserved PEBs: 208, PEBs reserved for bad PEB handling: 19
Reading from volume 'kernel' to 0x4647b000, size 0x0 ... OK
Reading from volume 'rootfs' to 0x467df000, size 0x0 ... OK
ret0=0 ret1=0 kernel1_crc=41eb1813 rootfs1_crc=51dd723f kernel2_crc=700b1e07 rootfs2_crc=3fd24b4d -
***copy image direction: copy image0 to image1 ***
UBI partition 'Kernel2' already selected
kernel_data is 46000000 rootfs_data is 4645C000 kernel_size is 4571136 rootfs_size is 126976 ---
Remove UBI volume rootfs_data (id 2)
Remove UBI volume kernel (id 0)
Creating static volume kernel of size 4571136
Updating volume 'kernel' from 0x46000000, size 0x45c000 ... OK
Remove UBI volume rootfs (id 1)
Creating static volume rootfs of size 126976
Updating volume 'rootfs' from 0x4645c000, size 0x1f000 ... OK
Creating dynamic volume rootfs_data of size -1
ubi0: detaching mtd7
ubi0: mtd7 is detached
ubi0: attaching mtd6
ubi0: scanning is finished
ubi0: attached mtd6 (name "ubi", size 26 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 208, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 8/5, WL threshold: 4096, image sequence number: 2002301422
ubi0: available PEBs: 148, total reserved PEBs: 60, PEBs reserved for bad PEB handling: 19
No size specified -> Using max size (4571136)
Read 4571136 bytes from volume kernel to 0000000046000000
## Loading kernel from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM64 OpenWrt Linux-6.12.77
     Type:         Kernel Image
     Compression:  lzma compressed
     Data Start:   0x460000e8
     Data Size:    4474994 Bytes = 4.3 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x48000000
     Entry Point:  0x48000000
     Hash algo:    crc32
     Hash value:   821ed0a4
     Hash algo:    sha1
     Hash value:   d7ee214ce6b3bf75230f89a7607ebdbb4ba8ab36
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Trying 'fdt-1' fdt subimage
     Description:  ARM64 OpenWrt buffalo_wsr-3000ax4p device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x46444aa0
     Data Size:    22296 Bytes = 21.8 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   ffc332ae
     Hash algo:    sha1
     Hash value:   f249fa7e556517ec8249fbf869815bdaf5c70b11
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x46444aa0
   Uncompressing Kernel Image
   Loading Device Tree to 000000005f7f0000, end 000000005f7f8717 ... OK

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[    0.000000] Linux version 6.12.77 (musashino205@TAIHA.NET) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 14.3.0 r33426+2-36a818b413) 14.3.0, GNU ld (GNU Binutils) 2.44) #0 SMP Mon Mar 23 18:31:13 2026
[    0.000000] KASLR disabled due to lack of seed
[    0.000000] Machine model: BUFFALO WSR-3000AX4P
[    0.000000] earlycon: mtk8250 at MMIO32 0x0000000011002000 (options '115200n8')
[    0.000000] printk: legacy bootconsole [mtk8250] enabled
[    0.000000] OF: reserved mem: 0x0000000042ff0000..0x0000000042ffffff (64 KiB) map non-reusable ramoops@42ff0000
[    0.000000] OF: reserved mem: 0x0000000043000000..0x000000004302ffff (192 KiB) nomap non-reusable secmon@43000000
[    0.000000] OF: reserved mem: 0x0000000047c80000..0x0000000047d7ffff (1024 KiB) nomap non-reusable wmcpu-reserved@47c80000
[    0.000000] OF: reserved mem: 0x0000000047d80000..0x0000000047dbffff (256 KiB) nomap non-reusable wo-emi@47d80000
[    0.000000] OF: reserved mem: 0x0000000047dc0000..0x0000000047ffffff (2304 KiB) nomap non-reusable wo-data@47dc0000
[    0.000000] Zone ranges:
[    0.000000]   DMA      [mem 0x0000000040000000-0x000000005fffffff]
[    0.000000]   DMA32    empty
[    0.000000]   Normal   empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000040000000-0x0000000042ffffff]
[    0.000000]   node   0: [mem 0x0000000043000000-0x000000004302ffff]
[    0.000000]   node   0: [mem 0x0000000043030000-0x0000000047c7ffff]
[    0.000000]   node   0: [mem 0x0000000047c80000-0x0000000047ffffff]
[    0.000000]   node   0: [mem 0x0000000048000000-0x000000005fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000005fffffff]
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv1.1 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.
[    0.000000] psci: SMC Calling Convention v1.2
[    0.000000] percpu: Embedded 20 pages/cpu s42520 r8192 d31208 u81920
[    0.000000] pcpu-alloc: s42520 r8192 d31208 u81920 alloc=20*4096
[    0.000000] pcpu-alloc: [0] 0 [0] 1 
[    0.000000] Detected VIPT I-cache on CPU0
[    0.000000] CPU features: detected: GIC system register CPU interface
[    0.000000] CPU features: kernel page table isolation disabled by kernel configuration
[    0.000000] alternatives: applying boot alternatives
[    0.000000] Kernel command line: earlycon
[    0.000000] Dentry cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[    0.000000] Inode-cache hash table entries: 32768 (order: 6, 262144 bytes, linear)
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 131072
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] software IO TLB: SWIOTLB bounce buffer size adjusted to 0MB
[    0.000000] software IO TLB: area num 2.
[    0.000000] software IO TLB: mapped [mem 0x000000005fd6a000-0x000000005fdea000] (0MB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000] rcu:     RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
[    0.000000]  Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
[    0.000000] RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2.
[    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[    0.000000] GICv3: GIC: Using split EOI/Deactivate mode
[    0.000000] GICv3: 640 SPIs implemented
[    0.000000] GICv3: 0 Extended SPIs implemented
[    0.000000] Root IRQ handler: gic_handle_irq
[    0.000000] GICv3: GICv3 features: 16 PPIs
[    0.000000] GICv3: GICD_CTRL.DS=0, SCR_EL3.FIQ=0
[    0.000000] GICv3: CPU0: found redistributor 0 region 0:0x000000000c080000
[    0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[    0.000000] arch_timer: cp15 timer(s) running at 13.00MHz (phys).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x2ff89eacb, max_idle_ns: 440795202429 ns
[    0.000000] sched_clock: 56 bits at 13MHz, resolution 76ns, wraps every 4398046511101ns
[    0.008146] Calibrating delay loop (skipped), value calculated using timer frequency.. 26.00 BogoMIPS (lpj=130000)
[    0.018565] pid_max: default: 32768 minimum: 301
[    0.026151] Mount-cache hash table entries: 1024 (order: 1, 8192 bytes, linear)
[    0.033512] Mountpoint-cache hash table entries: 1024 (order: 1, 8192 bytes, linear)
[    0.043439] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    0.050471] rcu: Hierarchical SRCU implementation.
[    0.055295] rcu:     Max phase no-delay instances is 1000.
[    0.060747] Timer migration: 1 hierarchy levels; 8 children per group; 1 crossnode level
[    0.069125] smp: Bringing up secondary CPUs ...
[    0.074082] Detected VIPT I-cache on CPU1
[    0.074137] GICv3: CPU1: found redistributor 1 region 0:0x000000000c0a0000
[    0.074169] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
[    0.074257] smp: Brought up 1 node, 2 CPUs
[    0.095880] SMP: Total of 2 processors activated.
[    0.100606] CPU: All CPU(s) started at EL2
[    0.104720] CPU features: detected: 32-bit EL0 Support
[    0.109886] CPU features: detected: CRC32 instructions
[    0.115078] alternatives: applying system-wide alternatives
[    0.120813] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[    0.129351] Memory: 493488K/524288K available (9216K kernel code, 986K rwdata, 2764K rodata, 832K init, 298K bss, 28976K reserved, 0K cma-reserved)
[    0.145896] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.155821] futex hash table entries: 512 (order: 3, 32768 bytes, linear)
[    0.162706] 29200 pages in range for non-PLT usage
[    0.162710] 520720 pages in range for PLT usage
[    0.169031] pinctrl core: initialized pinctrl subsystem
[    0.180067] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.186351] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations
[    0.193484] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[    0.201287] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[    0.209656] thermal_sys: Registered thermal governor 'fair_share'
[    0.209663] thermal_sys: Registered thermal governor 'bang_bang'
[    0.215787] thermal_sys: Registered thermal governor 'step_wise'
[    0.221838] thermal_sys: Registered thermal governor 'user_space'
[    0.227944] ASID allocator initialised with 65536 entries
[    0.240146] pstore: Using crash dump compression: deflate
[    0.245601] pstore: Registered ramoops as persistent store backend
[    0.251812] ramoops: using 0x10000@0x42ff0000, ecc: 0
[    0.258354] /soc/interrupt-controller@c000000: Fixed dependency cycle(s) with /soc/interrupt-controller@c000000
[    0.284889] cryptd: max_cpu_qlen set to 1000
[    0.291439] SCSI subsystem initialized
[    0.295362] libata version 3.00 loaded.
[    0.300992] clocksource: Switched to clocksource arch_sys_counter
[    0.309473] NET: Registered PF_INET protocol family
[    0.314534] IP idents hash table entries: 8192 (order: 4, 65536 bytes, linear)
[    0.323043] tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.331473] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.339264] TCP established hash table entries: 4096 (order: 3, 32768 bytes, linear)
[    0.347091] TCP bind hash table entries: 4096 (order: 5, 131072 bytes, linear)
[    0.354459] TCP: Hash tables configured (established 4096 bind 4096)
[    0.361194] MPTCP token hash table entries: 512 (order: 2, 12288 bytes, linear)
[    0.368650] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.375235] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.382450] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.388161] PCI: CLS 0 bytes, default 64
[    0.393411] workingset: timestamp_bits=46 max_order=17 bucket_order=0
[    0.404937] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.410812] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.488073] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    0.495813] printk: legacy console [ttyS0] disabled
[    0.521212] 11002000.serial: ttyS0 at MMIO 0x11002000 (irq = 72, base_baud = 2500000) is a ST16650V2
[    0.530440] printk: legacy console [ttyS0] enabled
[    0.530440] printk: legacy console [ttyS0] enabled
[    0.540027] printk: legacy bootconsole [mtk8250] disabled
[    0.540027] printk: legacy bootconsole [mtk8250] disabled
[    0.552021] mtk_rng trng: registered RNG driver
[    0.556766] random: crng init done
[    0.563465] loop: module loaded
[    0.568646] spi-nand spi0.0: Winbond SPI NAND was found.
[    0.574011] spi-nand spi0.0: 128 MiB, block size: 128 KiB, page size: 2048, OOB size: 64
[    0.582540] Signature found at block 1023 [0x07fe0000]
[    0.587680] NMBM management region starts at block 960 [0x07800000]
[    0.594983] First info table with writecount 0 found in block 960
[    0.603529] Second info table with writecount 0 found in block 963
[    0.609708] NMBM has been successfully attached
[    0.614492] 11 fixed-partitions partitions found on MTD device spi0.0
[    0.620936] Creating 11 MTD partitions on "spi0.0":
[    0.625829] 0x000000000000-0x000000100000 : "BL2"
[    0.631685] 0x000000100000-0x000000180000 : "u-boot-env"
[    0.637723] 0x000000180000-0x000000380000 : "Factory"
[    0.644749] 0x000000380000-0x000000580000 : "FIP"
[    0.651133] 0x000000580000-0x000001f80000 : "ubi_kernel"
[    0.671985] 0x000001f80000-0x000003980000 : "Kernel2"
[    0.691847] 0x000003980000-0x000003b80000 : "glbcfg"
[    0.698442] 0x000003b80000-0x000003d80000 : "seccfg"
[    0.704932] 0x000003d80000-0x000003f80000 : "board_data"
[    0.711885] 0x000003f80000-0x000004880000 : "debug_log"
[    0.722353] 0x000004880000-0x000007480000 : "ubi"
[    0.872726] i2c_dev: i2c /dev entries driver
[    0.878704] mtk-wdt 1001c000.watchdog: Watchdog enabled (timeout=31 sec, nowayout=0)
[    1.067357] NET: Registered PF_INET6 protocol family
[    1.073075] Segment Routing with IPv6
[    1.076761] In-situ OAM (IOAM) with IPv6
[    1.080725] NET: Registered PF_PACKET protocol family
[    1.085963] 8021q: 802.1Q VLAN Support v1.8
[    1.239353] mtk_soc_eth 15100000.ethernet eth0: mediatek frame engine at 0xffffffc081d00000, irq 75
[    1.288839] mt7530-mdio mdio-bus:1f: no interrupt support
[    1.308762] mt7530-mdio mdio-bus:1f: configuring for fixed/2500base-x link mode
[    1.317769] mt7530-mdio mdio-bus:1f: Link is Up - 2.5Gbps/Full - flow control rx/tx
[    1.327486] mt7530-mdio mdio-bus:1f wan (uninitialized): PHY [mt7530-0:00] driver [MediaTek MT7531 PHY] (irq=POLL)
[    1.348697] mt7530-mdio mdio-bus:1f lan1 (uninitialized): PHY [mt7530-0:01] driver [MediaTek MT7531 PHY] (irq=POLL)
[    1.369802] mt7530-mdio mdio-bus:1f lan2 (uninitialized): PHY [mt7530-0:02] driver [MediaTek MT7531 PHY] (irq=POLL)
[    1.391146] mt7530-mdio mdio-bus:1f lan3 (uninitialized): PHY [mt7530-0:04] driver [MediaTek MT7531 PHY] (irq=POLL)
[    1.402472] mtk_soc_eth 15100000.ethernet eth0: entered promiscuous mode
[    1.409213] DSA: tree 0 setup
[    1.412643] UBI: auto-attach mtd10
[    1.416054] ubi0: default fastmap pool size: 15
[    1.420574] ubi0: default fastmap WL pool size: 7
[    1.425276] ubi0: attaching mtd10
[    1.605842] ubi0: scanning is finished
[    1.614229] ubi0: attached mtd10 (name "ubi", size 44 MiB)
[    1.619723] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    1.626604] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    1.633389] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    1.640337] ubi0: good PEBs: 352, bad PEBs: 0, corrupted PEBs: 0
[    1.646336] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[    1.653549] ubi0: max/mean erase counter: 9/5, WL threshold: 4096, image sequence number: 158937473
[    1.662584] ubi0: available PEBs: 0, total reserved PEBs: 352, PEBs reserved for bad PEB handling: 19
[    1.671801] ubi0: background thread "ubi_bgt0d" started, PID 585
[    1.678513] block ubiblock0_0: created from ubi0:0(rootfs)
[    1.684022] ubiblock: device ubiblock0_0 (rootfs) set to be root filesystem
[    1.691109] clk: Disabling unused clocks
[    1.695303] PM: genpd: Disabling unused power domains
[    1.704906] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    1.712420] Freeing unused kernel memory: 832K
[    1.716922] Run /sbin/init as init process
[    1.721023]   with arguments:
[    1.723979]     /sbin/init
[    1.726674]   with environment:
[    1.729803]     HOME=/
[    1.732161]     TERM=linux
[    1.913772] init: Console is alive
[    1.917316] init: - watchdog -
[    2.220390] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    2.235437] gpio_button_hotplug: loading out-of-tree module taints kernel.
[    2.246254] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    2.263968] init: - preinit -
[    2.561643] mtk_soc_eth 15100000.ethernet eth0: configuring for fixed/2500base-x link mode
[    2.570129] mtk_soc_eth 15100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
[    2.598967] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    6.842589] UBIFS (ubi0:1): default file-system created
[    6.848189] UBIFS (ubi0:1): Mounting in unauthenticated mode
[    6.853982] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 705
[    6.890459] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data"
[    6.898317] UBIFS (ubi0:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[    6.908229] UBIFS (ubi0:1): FS size: 35045376 bytes (33 MiB, 276 LEBs), max 286 LEBs, journal size 1777664 bytes (1 MiB, 14 LEBs)
[    6.919872] UBIFS (ubi0:1): reserved for root: 1655278 bytes (1616 KiB)
[    6.926484] UBIFS (ubi0:1): media format: w5/r0 (latest is w5/r0), UUID 432D3A18-B216-42F6-B97F-EBB9B332A788, small LPT model
[    6.939255] mount_root: overlay filesystem has not been fully initialized yet
[    6.946676] mount_root: switching to ubifs overlay
[    6.953876] overlayfs: null uuid detected in lower fs '/', falling back to xino=off,index=off,nfs_export=off.
[    6.965821] urandom-seed: Seed file not found (/etc/urandom.seed)
[    7.013308] procd: - early -
[    7.016258] procd: - watchdog -
[    7.565621] procd: - watchdog -
[    7.575616] procd: - ubus -
[    7.643739] procd: - init -
Please press Enter to activate this console.
[    7.987917] kmodloader: loading kernel modules from /etc/modules.d/*
[    8.017654] crypto-safexcel 10320000.crypto: EIP97:230(0,1,4,4)-HIA:270(0,5,5),PE:150/433(alg:7fcdfc00)/0/0/0
[    8.037396] Loading modules backported from Linux version v6.18.7-0-g5dfbc5357
[    8.044676] Backport generated by backports.git c8a37ce
[    8.183616] urngd: v1.0.2 started.
[    8.436266] mt798x-wmac 18000000.wifi: HW/SW Version: 0x8a108a10, Build Time: 20240823161240a
[    8.614965] mt798x-wmac 18000000.wifi: WM Firmware Version: ____000000, Build Time: 20240823161304
[    8.709729] mt798x-wmac 18000000.wifi: WA Firmware Version: DEV_000000, Build Time: 20240823161841
[    8.807411] mt798x-wmac 18000000.wifi: missing precal data, size=454672
[    8.814350] mt798x-wmac 18000000.wifi: registering led 'mt76-phy0'
[    8.892744] mt798x-wmac 18000000.wifi: registering led 'mt76-phy1'
[    8.984119] PPP generic driver version 2.4.2
[    8.989637] NET: Registered PF_PPPOX protocol family
[    8.999293] kmodloader: done loading kernel modules from /etc/modules.d/*
[   14.804799] mtk_soc_eth 15100000.ethernet eth0: Link is Down
[   14.820413] mtk_soc_eth 15100000.ethernet eth0: configuring for fixed/2500base-x link mode
[   14.838103] mtk_soc_eth 15100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
[   14.845898] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode
[   14.854941] br-lan: port 1(lan1) entered blocking state
[   14.860182] br-lan: port 1(lan1) entered disabled state
[   14.865485] mt7530-mdio mdio-bus:1f lan1: entered allmulticast mode
[   14.871796] mtk_soc_eth 15100000.ethernet eth0: entered allmulticast mode
[   14.881748] mt7530-mdio mdio-bus:1f lan1: entered promiscuous mode
[   14.904659] mt7530-mdio mdio-bus:1f lan2: configuring for phy/gmii link mode
[   14.912898] br-lan: port 2(lan2) entered blocking state
[   14.918158] br-lan: port 2(lan2) entered disabled state
[   14.923486] mt7530-mdio mdio-bus:1f lan2: entered allmulticast mode
[   14.932104] mt7530-mdio mdio-bus:1f lan2: entered promiscuous mode
[   14.948890] mt7530-mdio mdio-bus:1f lan3: configuring for phy/gmii link mode
[   14.959967] br-lan: port 3(lan3) entered blocking state
[   14.965269] br-lan: port 3(lan3) entered disabled state
[   14.970539] mt7530-mdio mdio-bus:1f lan3: entered allmulticast mode
[   14.979057] mt7530-mdio mdio-bus:1f lan3: entered promiscuous mode
[   15.137078] mt7530-mdio mdio-bus:1f wan: configuring for phy/gmii link mode
[   19.098114] mt7530-mdio mdio-bus:1f lan3: Link is Up - 1Gbps/Full - flow control rx/tx
[   19.098137] br-lan: port 3(lan3) entered blocking state
[   19.111265] br-lan: port 3(lan3) entered forwarding state



BusyBox v1.37.0 (2026-01-02 17:07:02 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r33524+12-41d6584d9b
 -----------------------------------------------------

 === WARNING! =====================================
 There is no root password defined on this device!
 Use the "passwd" command to set up a new password
 in order to prevent unauthorized SSH logins.
 --------------------------------------------------

root@OpenWrt:~# ubus call system board
{
        "kernel": "6.12.77",
        "hostname": "OpenWrt",
        "system": "ARMv8 Processor rev 4",
        "model": "BUFFALO WSR-3000AX4P",
        "board_name": "buffalo,wsr-3000ax4p",
        "rootfs_type": "squashfs",
        "release": {
                "distribution": "OpenWrt",
                "version": "SNAPSHOT",
                "firmware_url": "https://downloads.openwrt.org/",
                "revision": "r33524+12-41d6584d9b",
                "target": "mediatek/filogic",
                "description": "OpenWrt SNAPSHOT r33524+12-41d6584d9b",
                "builddate": "1774290673"
        }
}
root@OpenWrt:~# ubus call system info
{
        "localtime": 1774290701,
        "uptime": 37,
        "load": [
                21920,
                5984,
                1984
        ],
        "memory": {
                "total": 508051456,
                "free": 408702976,
                "shared": 339968,
                "buffered": 0,
                "available": 398786560,
                "cached": 24821760
        },
        "root": {
                "total": 30848,
                "free": 30804,
                "used": 44,
                "avail": 29188
        },
        "tmp": {
                "total": 248072,
                "free": 247740,
                "used": 332,
                "avail": 247740
        },
        "swap": {
                "total": 0,
                "free": 0
        }
}
root@OpenWrt:~# df -h
Filesystem                Size      Used Available Use% Mounted on
/dev/root                 5.0M      5.0M         0 100% /rom
tmpfs                   242.3M    332.0K    241.9M   0% /tmp
/dev/ubi0_1              30.1M     44.0K     28.5M   0% /overlay
overlayfs:/overlay       30.1M     44.0K     28.5M   0% /
tmpfs                   512.0K         0    512.0K   0% /dev
root@OpenWrt:~#