Pomoc MR200 v1.1 loop

Witam,

Używam translatora z hiszpańskiego na polski :D, przepraszam za błędy leksykalne.

Udało mi się odzyskać mojego TP-Link Archer MR200 V1.1 za pomocą dump'u Heinza, który przygotował dla użytkownika w wątku Archer MR200 recovery - #12 przez mlody279 (ostatni zmodyfikowany dump, który zamieścił Heinz), jednak w moim drugim MR200 v1.1 (mam dwa takie same) ten sam dump nie działa, próbowałem ze wszystkimi firmware'ami do tego routera, które znalazłem w sieci, ale żaden nie działa. Jedynym, który sprawia, że router się uruchamia, choć się zapętla, jest plik "ArcherC2V1_tp_recovery.bin", który jest na stronie OpenWRT do odzyskiwania routera, jednak nie mogę dodać informacji o konfiguracji z 06c na koniec, ponieważ plik jest mniejszy. Co mogę zrobić, jak stworzyć własny *.bin z częściami każdego firmware, które działają dla mnie? Mam kopię oryginalnego firmware z konfiguracją mojego routera.

W załączniku znajduje się mój oryginalny firmware.
Firmware de serie.Bin (8 MB)

Używam programatora USB CH431A, którym testuję zrzuty z zaciskiem (bez rozlutowywania pamięci EEPROM), mam też USB TTL UART.

Z góry dziękuję.

Nie chcę wyrzucać tego routera.

Dzięki za wspaniałe i bezcenne informacje dostępne na tym forum.

I suppose you can also write in English :slight_smile: Spanish however is not something I can use for daily commnication. Back to Polish for others:

  1. Czy płyty główne obu tych routerów są identyczne?
    Możliwe, że czymś się jednak różnią i przesz to potrzebują innej odmiany firmware.
  2. Czy podłączając programator wykonałeś test potwierdzający, że kość pamięci flash jest sprawna? Czy odczytana treść jest identyczna z zapisem? Może po prostu jest uszkodzona jakaś komórka pamięci.
  3. Czy masz zapis logów ze złącza szeregowego - na czym się zatrzymuje i jaki jest problem? Może to jednak po prostu uszkodzenie sprzętu?

Jeśli zostałem zrozumiany, to dalej będę używał translatora :stuck_out_tongue_winking_eye:

Płyty są identyczne, te same podzespoły.

Nie robiłem żadnych testów programatorem do pamięci flash, to co zrobiłem, to przeprogramowanie pamięci około 50 razy z wieloma różnymi firmwaresami.

Między jutrem a pojutrze zamierzam serializować router, aby zrobić logi tego, co się dzieje, gdy router wchodzi w pętlę.

Dzięki.

Tak, translator działa nieźle, a dodawane powoli do niego AI radzi sobie coraz lepiej.

Pamiętaj, że pamięć flash ma ograniczoną liczbę zapisów, ale raczej znacznie większą, niż 50. Ale niewykluczone jej po prostu jej uszkodzenie.

Koniecznie daj znać, co się dzieje na konsoli szeregowej, bo to wyjaśni bardzo dużo.

Witam,

oto log uboota z firmware'em stockowym (który nie chce się uruchomić, cały czas miga lewy power led). Mam nadzieję, że uda mi się naprawić router. :face_holding_back_tears:

Dziękuję.

U-Boot 1.1.3 (Aug 16 2018 - 16:17:16)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb0000
enable ephy clock...done. rf reg 29 = 5
SSC disabled.
------------------
  LTE AC750 v1.0.0
------------------
Now running in RAM - U-Boot at: 83fb0000, MONITOR BASE: bc000000

 uboot_end: 00000000   83fcd974
spi_wait_nsec: 29
spi device id: c8 40 17 c8 40 (4017c840)
find flash: GD25Q64CSIG
============================================
Ralink UBoot Version: 4.1.2.0
--------------------------------------------
ASIC 7620_MP (Port5<->GigaSW)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Aug 16 2018  Time:16:17:16
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768

 ##### The CPU freq = 580 MHZ ####
 estimate memory size =64 Mbytes

BootType = 3

continue to starting system.                                                  0
disableEthForward(1184):disable switch forward...

3: System Boot system code via Flash.(0xbc020000)
## Booting image at bc020000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 8000c150) ...
## Giving linux memsize in MB, 64

Starting kernel ...

怘▒▒▒▒ff▒fa▒▒f▒▒▒f▒Æ▒▒▒怘▒怘▒L30fc▒faC▒fa▒f▒▒▒怘▒Linux version 2.6.36 (test@spbucompile) (gcc version 4.6.3 (Buildroot 2012.11.1) ) #139 Thu Aug 16 16:24:52 CST 2018

 The CPU feqenuce set to 580 MHz

 MIPS CPU sleep mode enabled.
 PCIE: bypass PCIe DLL.
 PCIE: Elastic buffer control: Addr:0x68 -> 0xB4
 disable all power about PCIe
CPU revision is: 00019650 (MIPS 24Kc)
Determined physical RAM map:
 memory: 04000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
  Normal   0x00000000 -> 0x00004000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00004000
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: console=ttyS1,115200 root=/dev/mtdblock2 rootfstype=squashfs init=/sbin/init
PID hash table entries: 256 (order: -2, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
Writing ErrCtl register=00061fbf
Readback ErrCtl register=00061fbf
Memory: 61188k/65536k available (2854k kernel code, 4348k reserved, 592k data, 164k init, 0k highmem)
NR_IRQS:128
MTK/Ralink System Tick Counter init... cd:8034bf68, m:214748, s:32
console [ttyS1] enabled
Calibrating delay loop... 386.04 BogoMIPS (lpj=772096)
pid_max: default: 4096 minimum: 301
Mount-cache hash table entries: 512
NET: Registered protocol family 16
RALINK_GPIOMODE = 1ab01d
RALINK_GPIOMODE = 18b01d
PPLL_CFG1=0xe6c000
MT7620 PPLL lock
PPLL_DRV =0x80080504
start PCIe register access
RALINK_PCI_PCICFG_ADDR = 1000f0

*************** MT7620 PCIe RC mode *************
bio: create slab <bio-0> at 0
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x201fffff]
pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
pci 0000:00:00.0: BAR 1: set to [mem 0x20200000-0x2020ffff] (PCI address [0x20200000-0x2020ffff]
pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff]
pci 0000:01:00.0: BAR 0: set to [mem 0x20000000-0x200fffff] (PCI address [0x20000000-0x200fffff]
pci 0000:01:00.1: BAR 0: assigned [mem 0x20100000-0x201fffff]
pci 0000:01:00.1: BAR 0: set to [mem 0x20100000-0x201fffff] (PCI address [0x20100000-0x201fffff]
pci 0000:00:00.0: PCI bridge to [bus 01-01]
pci 0000:00:00.0:   bridge window [io  disabled]
pci 0000:00:00.0:   bridge window [mem 0x20000000-0x201fffff]
pci 0000:00:00.0:   bridge window [mem pref disabled]
BAR0 at slot 0 = 0
bus=0x0, slot = 0x0
res[0]->start = 0
res[0]->end = 0
res[1]->start = 20200000
res[1]->end = 2020ffff
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
bus=0x1, slot = 0x0
res[0]->start = 20000000
res[0]->end = 200fffff
res[1]->start = 0
res[1]->end = 0
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
bus=0x1, slot = 0x0
res[0]->start = 20100000
res[0]->end = 201fffff
res[1]->start = 0
res[1]->end = 0
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
Switching to clocksource Ralink external timer
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
NET: Registered protocol family 1
RT3xxx EHCI/OHCI init.
squashfs: version 4.0 (2009/01/31) Phillip Lougher
fuse init (API version 7.15)
msgmni has been set to 119
io scheduler noop registered
io scheduler deadline registered (default)
Ralink gpio driver initialized
Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled
serial8250: ttyS0 at MMIO 0x10000500 (irq = 37) is a 16550A
serial8250: ttyS1 at MMIO 0x10000c00 (irq = 12) is a 16550A
loop: module loaded
deice id : c8 40 17 c8 40 (4017c840)
GD25Q64CSIG(c8 4017c840) (8192 Kbytes)
mtd .name = raspi, .size = 0x00800000 (0M) .erasesize = 0x00000008 (0K) .numeraseregions = 65536
Creating 6 MTD partitions on "raspi":
0x000000000000-0x000000020000 : "boot"
0x000000020000-0x000000160000 : "kernel"
0x000000160000-0x0000007d0000 : "rootfs"
mtd: partition "rootfs" set to be root filesystem
0x0000007d0000-0x0000007e0000 : "romfile"
0x0000007e0000-0x0000007f0000 : "config"
0x0000007f0000-0x000000800000 : "radio"
Register flash device:flash0
PPP generic driver version 2.4.2
NET: Registered protocol family 24
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controller
rt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 1
rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x101c0000
rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
rt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controller
rt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 2
rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x101c1000
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
Mirror/redirect action on
u32 classifier
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (2868 buckets, 11472 max)
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Linux
TCP cubic registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
NET: Registered protocol family 15
Ebtables v2.0 registered
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
Freeing unused kernel memory: 164k freed
starting pid 195, tty '': '/etc/init.d/rcS'
rdm_major = 253
spiflash_ioctl_read, Read from 0x007df100 length 0x6, ret 0, retlen 0x6
Read MAC from flash(0x7DF100) 34-ffffffe8-ffffff94-ffffffad-ffffffa2-77
SMACCR1 -- : 0x000034e8
SMACCR0 -- : 0x94ada277
Ralink APSoC Ethernet Driver Initilization. v3.0  256 rx/tx descriptors allocated, mtu = 1500!
spiflash_ioctl_read, Read from 0x007df100 length 0x6, ret 0, retlen 0x6
Read MAC from flash(0x7DF100) 34-ffffffe8-ffffff94-ffffffad-ffffffa2-77
SMACCR1 -- : 0x000034e8
SMACCR0 -- : 0x94ada277
PROC INIT OK!
usbcore: registered new interface driver usbserial
USB Serial support registered for generic
usbcore: registered new interface driver usbserial_generic
usbserial: USB Serial Driver core
USB Serial support registered for GSM modem (1-port)
usbcore: registered new interface driver option
option: v0.7.2:USB Driver for GSM modems
SCSI subsystem initialized
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
usbcore: registered new interface driver cdc_ether
usbcore: registered new interface driver rndis_host
dns_init
domain_name:flybox.home
Raeth v3.0 (Workqueue)

phy_tx_ring = 0x03f54000, tx_ring = 0xa3f54000

phy_rx_ring0 = 0x03f55000, rx_ring0 = 0xa3f55000
Pseudo Close vlan...
SMACCR1 -- : 0x000034e8
SMACCR0 -- : 0x94ada277
ESW: Link Status Changed - Port5 Link Down
CDMA_CSG_CFG = 81000000
GDMA1_FWD_CFG = 20710000
L2TP core driver, V2.0
PPPoL2TP kernel driver, V2.0

Please press Enter to activate this console. [ dm_readFile ] 2042:  can not open xml file /var/tmp/pc/reduced_data_model.xml!, about to open file /etc/reduced_data_model.xml
spiflash_ioctl_read, Read from 0x007e0000 length 0x10000, ret 0, retlen 0x10000
spiflash_ioctl_read, Read from 0x007e0000 length 0x76da, ret 0, retlen 0x76da
monitor task is initialized pid= 378
spiflash_ioctl_read, Read from 0x007df100 length 0x6, ret 0, retlen 0x6
spiflash_ioctl_read, Read from 0x007df200 length 0x4, ret 0, retlen 0x4
spiflash_ioctl_read, Read from 0x00020000 length 0x1d0, ret 0, retlen 0x1d0
[ rsl_spiflash_ioctl_read, Read from 0x007df100 length 0x6, ret 0, retlen 0x6
initDevInfo ] 826:  BuildDate(170721) BuildTime(54833)
[initMpPoinspiflash_ioctl_read, Read from 0x007df200 length 0x4, ret 0, retlen 0x4
ter 234] [AT NOTICE] - memory pool : start 0xbc0138, end 0xbd70a8, size 94064
[openSerialPort 125] Fail to open serial port /dev/ttyUSB1!
[initSerialPortFd 83] Fail to open /dev/ttyUSB1!, retry_counter= 1
[openSerialPort 125] Fail to open serial port /dev/ttyUSB1!
[initSerialPortFd 83] Fail to open /dev/ttyUSB1!, retry_counter= 2
[openSerialPort 125] Fail to open serial port /dev/ttyUSB1!
[initSerialPortFd 83] Fail to open /dev/ttyUSB1!, retry_counter= 3
[openSerialPort 125] Fail to open serial port /dev/ttyUSB1!
[initSerialPortFd 83] Fail to open /dev/ttyUSB1!, retry_counter= 4
[openSerialPort 125] Fail to open serial port /dev/ttyUSB1!
[initSerialPortFd 83] Fail to open /dev/ttyUSB1!, retry_counter= 5
[openSerialPort 125] Fail to open serial port /dev/ttyUSB1!
[initSerialPortFd 83] Fail to open /dev/ttyUSB1!, retry_counter= 6
[openSerialPort 125] Fail to open serial port /dev/ttyUSB1!
[initSerialPortFd 83] Fail to open /dev/ttyUSB1!, retry_counter= 7
[openSerialPort 125] Fail to open serial port /dev/ttyUSB1!
[initSerialPortFd 83] Fail to open /dev/ttyUSB1!, retry_counter= 8
[openSerialPort 125] Fail to open serial port /dev/ttyUSB1!
[initSerialPortFd 83] Fail to open /dev/ttyUSB1!, retry_counter= 9
[openSerialPort 125] Fail to open serial port /dev/ttyUSB1!
[initSerialPortFd 83] Fail to open /dev/ttyUSB1!, retry_counter= 10
[openSerialPort 125] Fail to open serial port /dev/ttyUSB1!
[initSerialPortFd 83] Fail to open /dev/ttyUSB1!, retry_counter= 11
[openSerialPort 125] Fail to open serial port /dev/ttyUSB1!
[initSerialPortFd 83] Fail to open /dev/ttyUSB1!, retry_counter= 12
[openSerialPort 125] Fail to open serial port /dev/ttyUSB1!
[initSerialPortFd 83] Fail to open /dev/ttyUSB1!, retry_counter= 13
[openSerialPort 125] Fail to open serial port /dev/ttyUSB1!
[initSerialPortFd 83] Fail to open /dev/ttyUSB1!, retry_counter= 14
[openSerialPort 125] Fail to open serial port /dev/ttyUSB1!
[initSerialPortFd 83] Fail to open /dev/ttyUSB1!, retry_counter= 15
[openSerialPort 125] Fail to open serial port /dev/ttyUSB1!
[initSerialPortFd 83] Fail to open /dev/ttyUSB1!, retry_counter= 16
[openSerialPort 125] Fail to open serial port /dev/ttyUSB1!
[initSerialPortFd 83] Fail to open /dev/ttyUSB1!, retry_counter= 17
[openSerialPort 125] Fail to open serial port /dev/ttyUSB1!
[initSerialPortFd 83] Fail to open /dev/ttyUSB1!, retry_counter= 18
[openSerialPort 125] Fail to open serial port /dev/ttyUSB1!
[initSerialPortFd 83] Fail to open /dev/ttyUSB1!, retry_counter= 19
[openSerialPort 125] Fail to open serial port /dev/ttyUSB1!
[initSerialPortFd 83] Fail to open /dev/ttyUSB1!, retry_counter= 20
spiflash_ioctl_read, Read from 0x007df200 length 0x4, ret 0, retlen 0x4

Cześć kolego, zostawiłem dziennik w poprzedniej wiadomości, więc możesz rzucić na niego okiem, kiedy możesz. Dziękuję bardzo!

Hello, mate, please help me.

  1. Both motherboards are same.
  2. The memory works aparently well.
  3. This is my actual log:

U-Boot 1.1.3 (Jan 27 2015 - 17:52:47)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb0000
enable ephy clock...done. rf reg 29 = 5
SSC disabled.
******************************
Software System Reset Occurred
******************************
------------------
  LTE AC750 v1.0.0
------------------
Now running in RAM - U-Boot at: 83fb0000, MONITOR BASE: bc000000

 uboot_end: f3e0af56   83fcd74c
spi_wait_nsec: 29
spi device id: c8 40 17 c8 40 (4017c840)
Warning: un-recognized chip ID, please update bootloader!
============================================
Ralink UBoot Version: 4.1.2.0
--------------------------------------------
ASIC 7620_MP (Port5<->GigaSW)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Jan 27 2015  Time:17:52:47
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768

 ##### The CPU freq = 580 MHZ ####
 estimate memory size =64 Mbytes

BootType = 3

continue to starting system.                                                                                                       0
disableEthForward(1158):disable switch forward...

3: System Boot system code via Flash.(0xbc020000)
## Booting image at bc020000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80000000) ...
## Giving linux memsize in MB, 64

Starting kernel ...

[    0.000000] Linux version 4.4.23 (hyniu@o2.pl) (gcc version 5.4.0 (LEDE GCC 5.4.0 r1657) ) #0 Thu Oct 6 16:11:17 2016
[    0.000000] Board has DDR2
[    0.000000] Analog PMU set to hw control
[    0.000000] Digital PMU set to hw control
[    0.000000] SoC Type: MediaTek MT7620A ver:2 eco:6
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019650 (MIPS 24KEc)
[    0.000000] MIPS: machine is TP-Link Archer MR200
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Writing ErrCtl register=00061f10
[    0.000000] Readback ErrCtl register=00061f10
[    0.000000] Memory: 60768K/65536K available (2893K kernel code, 139K rwdata, 696K rodata, 168K init, 195K bss, 4768K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:256
[    0.000000] CPU Clock: 580MHz
[    0.000000] clocksource: systick: mask: 0xffff max_cycles: 0xffff, max_idle_ns: 583261500 ns
[    0.000000] systick: enable autosleep mode
[    0.000000] systick: running - mult: 214748, shift: 32
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6590553264 ns
[    0.000011] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405115902ns
[    0.007566] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.070060] pid_max: default: 32768 minimum: 301
[    0.074686] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.081056] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.094897] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.104620] pinctrl core: initialized pinctrl subsystem
[    0.110339] NET: Registered protocol family 16
[    0.380433] PCI host bridge /pcie@10140000 ranges:
[    0.385034]  MEM 0x0000000020000000..0x000000002fffffff
[    0.390090]   IO 0x0000000010160000..0x000000001016ffff
[    0.403415] rt2880_gpio 10000600.gpio: registering 24 gpios
[    0.408859] rt2880_gpio 10000600.gpio: registering 24 irq handlers
[    0.415015] rt2880_gpio 10000638.gpio: registering 16 gpios
[    0.420415] rt2880_gpio 10000638.gpio: registering 16 irq handlers
[    0.426528] rt2880_gpio 10000660.gpio: registering 32 gpios
[    0.431923] rt2880_gpio 10000660.gpio: registering 32 irq handlers
[    0.438045] rt2880_gpio 10000688.gpio: registering 1 gpios
[    0.443354] rt2880_gpio 10000688.gpio: registering 1 irq handlers
[    0.450089] PCI host bridge to bus 0000:00
[    0.454056] pci_bus 0000:00: root bus resource [mem 0x20000000-0x2fffffff]
[    0.460681] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    0.466440] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    0.473023] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    0.482441] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    0.488804] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    0.495616] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x201fffff]
[    0.502159] pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
[    0.508774] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff]
[    0.515348] pci 0000:01:00.1: BAR 0: assigned [mem 0x20100000-0x201fffff]
[    0.521953] pci 0000:00:00.0: PCI bridge to [bus 01]
[    0.526759] pci 0000:00:00.0:   bridge window [mem 0x20000000-0x201fffff]
[    0.533375] pci 0000:00:00.0: card - bus=0x0, slot = 0x0 irq=0
[    0.539017] pci 0000:01:00.0: card - bus=0x1, slot = 0x0 irq=4
[    0.544702] pci 0000:01:00.1: card - bus=0x1, slot = 0x0 irq=4
[    0.551352] clocksource: Switched to clocksource systick
[    0.557984] NET: Registered protocol family 2
[    0.563087] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.569813] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.576033] TCP: Hash tables configured (established 1024 bind 1024)
[    0.582259] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.587883] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.594277] NET: Registered protocol family 1
[    0.603239] rt-timer 10000100.timer: maximum frequency is 1220Hz
[    0.610052] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.616095] Crashlog allocated RAM at address 0x3f00000
[    0.636475] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.642150] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.654371] io scheduler noop registered
[    0.658129] io scheduler deadline registered (default)
[    0.663426] ralink-usb-phy usbphy: invalid resource
[    0.668706] gpio-export gpio_export: 1 gpio(s) exported
[    0.674059] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    0.681530] console [ttyS0] disabled
[    0.684972] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 20, base_baud = 2500000) is a Palmchip BK-3103
[    0.694617] console [ttyS0] enabled
[    0.694617] console [ttyS0] enabled
[    0.701664] bootconsole [early0] disabled
[    0.701664] bootconsole [early0] disabled
[    0.714667] spi spi0.0: force spi mode3
[    0.719098] m25p80 spi0.0: gd25q64 (8192 Kbytes)
[    0.723921] 5 ofpart partitions found on MTD device spi0.0
[    0.729518] Creating 5 MTD partitions on "spi0.0":
[    0.734421] 0x000000000000-0x000000020000 : "u-boot"
[    0.741261] 0x000000020000-0x0000007d0000 : "firmware"
[    1.720522] 2 tplink-fw partitions found on MTD device firmware
[    1.726598] 0x000000020000-0x000000153a40 : "kernel"
[    1.733304] 0x000000153a40-0x0000007d0000 : "rootfs"
[    1.740162] mtd: device 3 (rootfs) set to be root filesystem
[    1.746149] 1 squashfs-split partitions found on MTD device rootfs
[    1.752487] 0x000000448000-0x0000007d0000 : "rootfs_data"
[    1.759852] 0x0000007d0000-0x0000007e0000 : "rom"
[    1.766492] 0x0000007e0000-0x0000007f0000 : "romfile"
[    1.773547] 0x0000007f0000-0x000000800000 : "radio"
[    1.783958] gsw: setting port4 to ephy mode
[    1.788482] mtk_soc_eth 10100000.ethernet: loaded mt7620 driver
[    1.795351] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5
[    1.804396] rt2880_wdt 10000120.watchdog: Initialized
[    1.811106] NET: Registered protocol family 10
[    1.819276] NET: Registered protocol family 17
[    1.823983] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
[    1.836885] 8021q: 802.1Q VLAN Support v1.8
[    1.856699] VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
[    1.864877] Freeing unused kernel memory: 168K (803a6000 - 803d0000)
[    4.265665] init: Console is alive
[    4.269348] init: - watchdog -
[    6.075074] usbcore: registered new interface driver usbfs
[    6.080774] usbcore: registered new interface driver hub
[    6.086372] usbcore: registered new device driver usb
[    6.097730] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    6.105950] ehci-platform: EHCI generic platform driver
[    6.121681] phy phy-usbphy.0: remote usb device wakeup disabled
[    6.127730] phy phy-usbphy.0: UTMI 16bit 30MHz
[    6.132305] ehci-platform 101c0000.ehci: EHCI Host Controller
[    6.138205] ehci-platform 101c0000.ehci: new USB bus registered, assigned bus number 1
[    6.146431] ehci-platform 101c0000.ehci: irq 26, io mem 0x101c0000
[    6.159240] ehci-platform 101c0000.ehci: USB 2.0 started, EHCI 1.00
[    6.166793] hub 1-0:1.0: USB hub found
[    6.171057] hub 1-0:1.0: 1 port detected
[    6.182884] init: - preinit -
[    7.423516] 8021q: adding VLAN 0 to HW filter on device eth0
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug[    7.581951] random: procd: uninitialized urandom read (4 bytes read, 12 bits of entropy available)
 level
[    8.830517] mount_root: no usable overlay filesystem found, using tmpfs overlay
[    8.842088] urandom-seed: Seed file not found (/etc/urandom.seed)
[    8.879545] procd: - early -
[    8.882592] procd: - watchdog -
[    9.439629] procd: - ubus -
[    9.572278] random: ubusd: uninitialized urandom read (4 bytes read, 19 bits of entropy available)
[    9.582004] random: ubusd: uninitialized urandom read (4 bytes read, 19 bits of entropy available)
[    9.591285] random: ubusd: uninitialized urandom read (4 bytes read, 19 bits of entropy available)
[    9.600913] random: ubusd: uninitialized urandom read (4 bytes read, 19 bits of entropy available)
[    9.610187] random: ubusd: uninitialized urandom read (4 bytes read, 19 bits of entropy available)
[    9.619580] random: ubusd: uninitialized urandom read (4 bytes read, 19 bits of entropy available)
[    9.629002] random: ubusd: uninitialized urandom read (4 bytes read, 19 bits of entropy available)
[    9.638647] procd: - init -
Please press Enter to activate this console.
[   10.058474] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   10.078001] Loading modules backported from Linux version wt-2016-06-20-0-gbc17424
[   10.085800] Backport generated by backports.git backports-20160216-7-g5735958
[   10.153334] ip_tables: (C) 2000-2006 Netfilter Core Team
[   10.170391] nf_conntrack version 0.5.0 (952 buckets, 3808 max)
[   10.214273] usbcore: registered new interface driver usbserial
[   10.220335] usbcore: registered new interface driver usbserial_generic
[   10.227161] usbserial: USB Serial support registered for generic
[   10.255524] xt_time: kernel timezone is -0000
[   10.262403] usbcore: registered new interface driver cdc_ether
[   10.282194] PPP generic driver version 2.4.2
[   10.289507] NET: Registered protocol family 24
[   10.296775] usbcore: registered new interface driver rndis_host
[   10.321903] ieee80211 phy0: rt2x00_set_rt: Info - RT chipset 5390, rev 0500 detected
[   10.329921] ieee80211 phy0: rt2800_init_eeprom: Error - Invalid RF chipset 0xffff detected
[   10.338369] ieee80211 phy0: rt2x00lib_probe_dev: Error - Failed to allocate device
[   10.346128] ------------[ cut here ]------------
[   10.350862] WARNING: CPU: 0 PID: 435 at mm/vmalloc.c:1460 release_firmware+0x64/0x144()
[   10.359036] Trying to vfree() bad address (83075600)
[   10.364107] Modules linked in: rt2800soc(+) rt2800pci rt2800mmio rt2800lib rndis_host pppox ppp_generic nf_nat_ipv4 nf_conntrack_ipv6 nf_conntrack_ipv4 ipt_REJECT ipt_MASQUERADE cdc_ether xt_time xt_tcpudp xt_state xt_nat xt_multiport xt_mark xt_mac xt_limit xt_id xt_conntrack xt_comment xt_TCPMSS xt_REDIRECT xt_LOG xt_CT usbserial usbnet slhc rt2x00soc rt2x00pci rt2x00mmio rt2x00lib nf_reject_ipv4 nf_nat_redirect nf_nat_masquerade_ipv4 nf_nat nf_log_ipv4 nf_defrag_ipv6 nf_defrag_ipv4 nf_conntrack_rtcache nf_conntrack iptable_raw iptable_mangle iptable_filter ip_tables crc_itu_t crc_ccitt mt7603e mt76x2e mt76 mac80211 cfg80211 compat ledtrig_usbdev ip6t_REJECT nf_reject_ipv6 nf_log_ipv6 nf_log_common ip6table_raw ip6table_mangle ip6table_filter ip6_tables x_tables eeprom_93cx6 leds_gpio ehci_platform ehci_hcd gpio_button_hotplug usbcore nls_base usb_common mii
[   10.442285] CPU: 0 PID: 435 Comm: kmodloader Not tainted 4.4.23 #0
[   10.448597] Stack : 80347194 00000000 00000001 80390000 838d0780 8038ad23 80328adc 000001b3
          803d3434 00000006 00000016 024000c0 80065bac 8004a908 8032dfe4 80380000
          00000003 00000006 8032c3e8 83b9fae4 80065bac 80048874 00000002 00000000
          00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
          00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
          ...
[   10.484968] Call Trace:
[   10.487511] [<80065bac>] module_sect_show+0x0/0x18
[   10.492408] [<8004a908>] vprintk_default+0x24/0x30
[   10.497325] [<80065bac>] module_sect_show+0x0/0x18
[   10.502217] [<80048874>] printk+0x2c/0x38
[   10.506340] [<80025034>] warn_slowpath_common+0xa0/0xd0
[   10.511682] [<80148cb0>] dump_stack+0x14/0x28
[   10.516158] [<80014540>] show_stack+0x50/0x84
[   10.520609] [<80025034>] warn_slowpath_common+0xa0/0xd0
[   10.525968] [<801adec4>] release_firmware+0x64/0x144
[   10.531049] [<80025090>] warn_slowpath_fmt+0x2c/0x38
[   10.536152] [<80036028>] queue_work_on+0x44/0x74
[   10.540880] [<801adec4>] release_firmware+0x64/0x144
[   10.546021] [<83086700>] rt2x00lib_free_eeprom_file+0x18/0x38 [rt2x00lib]
[   10.553000] [<830818e0>] rt2x00lib_probe_dev+0x790/0x830 [rt2x00lib]
[   10.559630] [<831c03e4>] ieee80211_alloc_led_names+0xac/0xc0 [mac80211]
[   10.566447] [<80065bac>] module_sect_show+0x0/0x18
[   10.571346] [<8311d1c4>] rt2x00soc_probe+0x140/0x19c [rt2x00soc]
[   10.577502] [<8003c7e0>] blocking_notifier_call_chain+0x14/0x20
[   10.583574] [<801ab528>] devm_kfree+0x20/0x44
[   10.588037] [<801a9a24>] platform_drv_probe+0x28/0x70
[   10.593225] [<801a8058>] driver_probe_device+0x120/0x288
[   10.598665] [<80089a44>] kstrdup+0x44/0x8c
[   10.602875] [<801a9bf8>] platform_match+0x60/0x110
[   10.607781] [<801a823c>] __driver_attach+0x7c/0xb4
[   10.612672] [<801a6460>] next_device+0x10/0x30
[   10.617229] [<801a81c0>] __driver_attach+0x0/0xb4
[   10.622030] [<801a651c>] bus_for_each_dev+0x9c/0xac
[   10.627047] [<802d0714>] klist_add_tail+0x24/0x50
[   10.631854] [<801a62f0>] bus_get+0x2c/0x50
[   10.636068] [<801a7750>] bus_add_driver+0xec/0x20c
[   10.640968] [<80065bac>] module_sect_show+0x0/0x18
[   10.645876] [<801548a0>] kvasprintf+0x70/0x94
[   10.650352] [<8314b000>] init_module+0x0/0x2c [rt2800soc]
[   10.655887] [<801a8954>] driver_register+0xa8/0xf8
[   10.660794] [<80045290>] __wake_up+0x24/0x48
[   10.665182] [<8314b000>] init_module+0x0/0x2c [rt2800soc]
[   10.670710] [<8000d5c8>] do_one_initcall+0x1e8/0x214
[   10.675808] [<80045290>] __wake_up+0x24/0x48
[   10.680177] [<8314b000>] init_module+0x0/0x2c [rt2800soc]
[   10.685718] [<80033f48>] call_usermodehelper_exec+0x144/0x160
[   10.691592] [<80033a38>] call_usermodehelper_setup+0x38/0xa8
[   10.697409] [<80066dcc>] do_init_module+0x74/0x1cc
[   10.702310] [<8009d55c>] __vunmap+0xf0/0x114
[   10.706713] [<80068660>] load_module+0x16c0/0x1b68
[   10.711609] [<80066198>] unknown_module_param_cb+0x0/0xac
[   10.717140] [<8009da50>] __vmalloc_node+0x34/0x40
[   10.721964] [<80068b9c>] SyS_init_module+0x94/0x180
[   10.726962] [<80068c38>] SyS_init_module+0x130/0x180
[   10.732056] [<8000655c>] syscall_common+0x30/0x54
[   10.736879] [<80008958>] __bzero+0xbc/0x164
[   10.741148]
[   10.742668] ---[ end trace 1aaecccbb872fe8b ]---
[   10.747393] Kernel bug detected[#1]:
[   10.751049] CPU: 0 PID: 435 Comm: kmodloader Tainted: G        W       4.4.23 #0
[   10.758595] task: 838d0500 ti: 83b9e000 task.ti: 83b9e000
[   10.764098] $ 0   : 00000000 00000000 810610e0 00000001
[   10.769442] $ 4   : 830879c0 000000ff 000001a0 830879c0
[   10.774783] $ 8   : 0000002d 38626263 65663237 5d206238
[   10.780125] $12   : 00000000 00000013 00000000 6d6f635f
[   10.785466] $16   : 83be9420 ffffffed 83be8b20 8314a524
[   10.790808] $20   : 83be96f4 00000006 00000016 024000c0
[   10.796149] $24   : 00000003 8019dac4
[   10.801490] $28   : 83b9e000 83b9fbb0 80065bac 83086700
[   10.806834] Hi    : 00000000
[   10.809768] Lo    : ec4e4000
[   10.812720] epc   : 800a45c8 kfree+0x70/0x150
[   10.817193] ra    : 83086700 rt2x00lib_free_eeprom_file+0x18/0x38 [rt2x00lib]
[   10.824466] Status: 1100a403 KERNEL EXL IE
[   10.828747] Cause : 10800034 (ExcCode 0d)
[   10.832834] PrId  : 00019650 (MIPS 24KEc)
[   10.836918] Modules linked in: rt2800soc(+) rt2800pci rt2800mmio rt2800lib rndis_host pppox ppp_generic nf_nat_ipv4 nf_conntrack_ipv6 nf_conntrack_ipv4 ipt_REJECT ipt_MASQUERADE cdc_ether xt_time xt_tcpudp xt_state xt_nat xt_multiport xt_mark xt_mac xt_limit xt_id xt_conntrack xt_comment xt_TCPMSS xt_REDIRECT xt_LOG xt_CT usbserial usbnet slhc rt2x00soc rt2x00pci rt2x00mmio rt2x00lib nf_reject_ipv4 nf_nat_redirect nf_nat_masquerade_ipv4 nf_nat nf_log_ipv4 nf_defrag_ipv6 nf_defrag_ipv4 nf_conntrack_rtcache nf_conntrack iptable_raw iptable_mangle iptable_filter ip_tables crc_itu_t crc_ccitt mt7603e mt76x2e mt76 mac80211 cfg80211 compat ledtrig_usbdev ip6t_REJECT nf_reject_ipv6 nf_log_ipv6 nf_log_common ip6table_raw ip6table_mangle ip6table_filter ip6_tables x_tables eeprom_93cx6 leds_gpio ehci_platform ehci_hcd gpio_button_hotplug usbcore nls_base usb_common mii
[   10.915016] Process kmodloader (pid: 435, threadinfo=83b9e000, task=838d0500, tls=7737ee50)
[   10.923529] Stack : 83be9420 83b9fbd0 83086c34 83be9420 83be9420 830818e0 838acb40 831c03e4
          830868c4 00000000 00000000 83149980 83be8140 024080c0 83be9420 02400000
          83be8b20 8314a524 80400000 00000006 00000016 024000c0 80065bac 8311d1c4
          80400000 8003c7e0 8314a7d4 801ab528 83892f10 83892f10 8314a7d4 8314a7d4
          80400000 801a9a24 83149780 00000001 8314a7d4 8314a7d4 83892f10 83892f10
          ...
[   10.959873] Call Trace:
[   10.962374] [<800a45c8>] kfree+0x70/0x150
[   10.966485] [<83086700>] rt2x00lib_free_eeprom_file+0x18/0x38 [rt2x00lib]
[   10.973432] [<830818e0>] rt2x00lib_probe_dev+0x790/0x830 [rt2x00lib]
[   10.979930] [<8311d1c4>] rt2x00soc_probe+0x140/0x19c [rt2x00soc]
[   10.986075] [<801a9a24>] platform_drv_probe+0x28/0x70
[   10.991234] [<801a8058>] driver_probe_device+0x120/0x288
[   10.996656] [<801a823c>] __driver_attach+0x7c/0xb4
[   11.001546] [<801a651c>] bus_for_each_dev+0x9c/0xac
[   11.006528] [<801a7750>] bus_add_driver+0xec/0x20c
[   11.011420] [<801a8954>] driver_register+0xa8/0xf8
[   11.016322] [<8000d5c8>] do_one_initcall+0x1e8/0x214
[   11.021400] [<80066dcc>] do_init_module+0x74/0x1cc
[   11.026296] [<80068660>] load_module+0x16c0/0x1b68
[   11.031189] [<80068c38>] SyS_init_module+0x130/0x180
[   11.036264] [<8000655c>] syscall_common+0x30/0x54
[   11.041057]
[   11.042573]
Code: 30630001  24030001  38630001 <00030336> 8c430000  7c630380  10600003  00000000  10000002
[   11.052769] ---[ end trace 1aaecccbb872fe8c ]---
[   11.061938] Fatal exception: panic in 5 seconds
[   12.738260] Kernel panic - not syncing: Fatal exception
[   12.747288] Rebooting in 1 seconds..

I am not a specialist here, but it smells like incorrect image maybe:

[ 10.321903] ieee80211 phy0: rt2x00_set_rt: Info - RT chipset 5390, rev 0500 detected
[ 10.329921] ieee80211 phy0: rt2800_init_eeprom: Error - Invalid RF chipset 0xffff detected
[ 10.338369] ieee80211 phy0: rt2x00lib_probe_dev: Error - Failed to allocate device

Also look around those discussions and guys on https://eko.one.pl
TP-Link MR200 - wsparcie (Strona 1) — Oprogramowanie — eko.one.pl