思创cetron CT3003路由器刷机教程openwrt+恢复原厂+TLL刷机uboot

TTL工具和杜邦线需要自行购买。如果买针夹选2.54mm间距的

思创CT3003路由器有两个版本后台，老版后台可以免拆机刷机，新版后台需要TTL拆机刷机。教程支持两个版本。

SSH登陆工具mobaxterm安装教程

项目	规格
型号	CT3003（中国电信定制，Cetron 思创）
发布年份	2023 年 6 月
定位	入门 / 家用千兆 Wi‑Fi 6，高性价比、运营商定制、可刷机
CPU / 芯片组	联发科 MT7981B 双核 1.3GHz（Wi‑Fi 6 主控）
无线芯片	MT7976CN（5G 射频）
内存 / 闪存	256 MB DDR3 / 128 MB Flash
无线标准	802.11ax（Wi‑Fi 6），双频 2.4G + 5G
2.4G 速率	574 Mbps（2×2 MIMO）
5G 速率	2402 Mbps（2×2 MIMO，160MHz 频宽）
并发总速率	AX3000（3000 Mbps）
天线	5 根外置高增益全向天线
FEM 放大	集成 5 路独立信号放大器（PA+LNA）
网口	1× 千兆 WAN + 3× 千兆 LAN
USB	无
电源	12V/1A（待机约 4.3W）
尺寸 / 重量	约 220×180×40 mm / 约 350g（不含天线）
核心功能	160MHz 频宽、MU‑MIMO、Beamforming、WPA3、访客网络、家长控制、QoS、IPv6、一键 MESH（同型号）
刷机支持	可解锁 SSH，支持 OpenWrt / 第三方固件（公版方案，可玩性高）

root@ImmortalWrt:~# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00100000 00020000 "BL2"
mtd1: 00080000 00020000 "u-boot-env"
mtd2: 00100000 00020000 "art"
mtd3: 00100000 00020000 "Factory"
mtd4: 00200000 00020000 "FIP"
mtd5: 02000000 00020000 "ubi"
mtd6: 02000000 00020000 "ubi_backup"
mtd7: 00400000 00020000 "Config_backup"

[root@Kwrt:08:51 PM ~] # cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00100000 00020000 "BL2"
mtd1: 00080000 00020000 "u-boot-env"
mtd2: 00100000 00020000 "art"
mtd3: 00100000 00020000 "Factory"
mtd4: 00200000 00020000 "FIP"
mtd5: 07000000 00020000 "ubi"
[root@Kwrt:08:51 PM ~] #

U-Boot 2022.07 (Sep 18 2023 - 17:36:57 +0800)

CPU:   MediaTek MT7981
Model: mt7981-cetron_ct3003
DRAM:  256 MiB
Core:  27 devices, 15 uclasses, devicetree: embed

Initializing NMBM ...
spi-nand: spi_nand spi_nand@0: ESMT SPI NAND was found.
spi-nand: spi_nand spi_nand@0: 128 MiB, block size: 128 KiB, page size: 2048, OOB size: 64
Could not find a valid device for nmbm0
Signature found at block 1023 [0x07fe0000]
First info table with writecount 0 found in block 960
Second info table with writecount 0 found in block 963
NMBM has been successfully attached

Loading Environment from MTD... OK
In:    serial@11002000
Out:   serial@11002000
Err:   serial@11002000
Net:   eth0: ethernet@15100000

  *** U-Boot Boot Menu ***

      1. Startup system (Default)
      2. Upgrade firmware
      3. Upgrade ATF BL2
      4. Upgrade ATF FIP
      5. Upgrade single image
      6. Load image
      0. U-Boot console


  Press UP/DOWN to move, ENTER to select, ESC/CTRL+C to quit
ubi0: attaching mtd7
ubi0: scanning is finished
ubi0: attached mtd7 (name "ubi", size 110 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 884, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 3, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 0
ubi0: available PEBs: 0, total reserved PEBs: 884, PEBs reserved for bad PEB handling: 19
Reading from volume 'kernel' to 0x46000000, size 0x0 ... OK
## Loading kernel from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM64 OpenWrt Linux-6.12.79
     Type:         Kernel Image
     Compression:  lzma compressed
     Data Start:   0x460000e8
     Data Size:    4736016 Bytes = 4.5 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x48000000
     Entry Point:  0x48000000
     Hash algo:    crc32
     Hash value:   f984338d
     Hash algo:    sha1
     Hash value:   f82c48cd50db88a2919965dc0fa111b516a67c18
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Trying 'fdt-1' fdt subimage
     Description:  ARM64 OpenWrt cetron_ct3003 device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x46484638
     Data Size:    21988 Bytes = 21.5 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   489b59b8
     Hash algo:    sha1
     Hash value:   43bc5c08e413a9b3ce297707ea853268e4ed973f
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x46484638
   Uncompressing Kernel Image
   Loading Device Tree to 000000004f7f2000, end 000000004f7fa5e3 ... OK

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[    0.000000] Linux version 6.12.79 (runner@runnervmeorf1) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 14.3.0 r32880-0a0ed86b42) 14.3.0, GNU ld (GNU Binutils) 2.44) #0 SMP Wed Apr 22 12:50:12 2026
[    0.000000] Machine model: Cetron CT3003
[    0.000000] OF: reserved mem: 0x0000000042ff0000..0x0000000042ffffff (64 KiB) map non-reusable ramoops@42ff0000
[    0.000000] OF: reserved mem: 0x0000000043000000..0x000000004302ffff (192 KiB) nomap non-reusable secmon@43000000
[    0.000000] OF: reserved mem: 0x0000000047c80000..0x0000000047d7ffff (1024 KiB) nomap non-reusable wmcpu-reserved@47c80000
[    0.000000] OF: reserved mem: 0x0000000047d80000..0x0000000047dbffff (256 KiB) nomap non-reusable wo-emi@47d80000
[    0.000000] OF: reserved mem: 0x0000000047dc0000..0x0000000047ffffff (2304 KiB) nomap non-reusable wo-data@47dc0000
[    0.000000] Zone ranges:
[    0.000000]   DMA      [mem 0x0000000040000000-0x000000004fffffff]
[    0.000000]   DMA32    empty
[    0.000000]   Normal   empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000040000000-0x0000000042ffffff]
[    0.000000]   node   0: [mem 0x0000000043000000-0x000000004302ffff]
[    0.000000]   node   0: [mem 0x0000000043030000-0x0000000047c7ffff]
[    0.000000]   node   0: [mem 0x0000000047c80000-0x0000000047ffffff]
[    0.000000]   node   0: [mem 0x0000000048000000-0x000000004fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000004fffffff]
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv1.1 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.
[    0.000000] psci: SMC Calling Convention v1.2
[    0.000000] percpu: Embedded 21 pages/cpu s45784 r8192 d32040 u86016
[    0.000000] pcpu-alloc: s45784 r8192 d32040 u86016 alloc=21*4096
[    0.000000] pcpu-alloc: [0] 0 [0] 1
[    0.000000] Detected VIPT I-cache on CPU0
[    0.000000] CPU features: detected: GIC system register CPU interface
[    0.000000] CPU features: kernel page table isolation disabled by kernel configuration
[    0.000000] alternatives: applying boot alternatives
[    0.000000] Kernel command line:
[    0.000000] Dentry cache hash table entries: 32768 (order: 6, 262144 bytes, linear)
[    0.000000] Inode-cache hash table entries: 16384 (order: 5, 131072 bytes, linear)
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 65536
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] software IO TLB: SWIOTLB bounce buffer size adjusted to 0MB
[    0.000000] software IO TLB: area num 2.
[    0.000000] software IO TLB: SWIOTLB bounce buffer size roundup to 0MB
[    0.000000] software IO TLB: mapped [mem 0x000000004fe4a000-0x000000004feca000] (0MB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000] rcu:     RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
[    0.000000]  Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
[    0.000000] RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2.
[    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[    0.000000] GICv3: GIC: Using split EOI/Deactivate mode
[    0.000000] GICv3: 640 SPIs implemented
[    0.000000] GICv3: 0 Extended SPIs implemented
[    0.000000] Root IRQ handler: gic_handle_irq
[    0.000000] GICv3: GICv3 features: 16 PPIs
[    0.000000] GICv3: GICD_CTRL.DS=0, SCR_EL3.FIQ=0
[    0.000000] GICv3: CPU0: found redistributor 0 region 0:0x000000000c080000
[    0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[    0.000000] arch_timer: cp15 timer(s) running at 13.00MHz (phys).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x2ff89eacb, max_idle_ns: 440795202429 ns
[    0.000000] sched_clock: 56 bits at 13MHz, resolution 76ns, wraps every 4398046511101ns
[    0.000210] Calibrating delay loop (skipped), value calculated using timer frequency.. 26.00 BogoMIPS (lpj=130000)
[    0.000219] pid_max: default: 32768 minimum: 301
[    0.003101] Mount-cache hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.003109] Mountpoint-cache hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.005263] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    0.006088] rcu: Hierarchical SRCU implementation.
[    0.006095] rcu:     Max phase no-delay instances is 1000.
[    0.006304] Timer migration: 1 hierarchy levels; 8 children per group; 1 crossnode level
[    0.006527] smp: Bringing up secondary CPUs ...
[    0.006911] Detected VIPT I-cache on CPU1
[    0.006957] GICv3: CPU1: found redistributor 1 region 0:0x000000000c0a0000
[    0.006986] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
[    0.007073] smp: Brought up 1 node, 2 CPUs
[    0.007079] SMP: Total of 2 processors activated.
[    0.007082] CPU: All CPU(s) started at EL2
[    0.007084] CPU features: detected: 32-bit EL0 Support
[    0.007088] CPU features: detected: CRC32 instructions
[    0.007115] alternatives: applying system-wide alternatives
[    0.007257] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[    0.007383] Memory: 235940K/262144K available (9856K kernel code, 1020K rwdata, 2884K rodata, 512K init, 318K bss, 24496K reserved, 0K cma-reserved)
[    0.010350] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.010367] futex hash table entries: 512 (order: 3, 32768 bytes, linear)
[    0.010425] 29072 pages in range for non-PLT usage
[    0.010428] 520592 pages in range for PLT usage
[    0.011907] pinctrl core: initialized pinctrl subsystem
[    0.014313] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.014626] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations
[    0.014651] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[    0.014672] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[    0.015055] thermal_sys: Registered thermal governor 'fair_share'
[    0.015058] thermal_sys: Registered thermal governor 'bang_bang'
[    0.015061] thermal_sys: Registered thermal governor 'step_wise'
[    0.015064] thermal_sys: Registered thermal governor 'user_space'
[    0.015114] hw-breakpoint: found 6 breakpoint and 4 watchpoint registers.
[    0.015177] ASID allocator initialised with 65536 entries
[    0.016137] pstore: Using crash dump compression: deflate
[    0.016142] pstore: Registered ramoops as persistent store backend
[    0.016144] ramoops: using 0x10000@0x42ff0000, ecc: 0
[    0.017579] /soc/interrupt-controller@c000000: Fixed dependency cycle(s) with /soc/interrupt-controller@c000000
[    0.028666] HugeTLB: registered 1.00 GiB page size, pre-allocated 0 pages
[    0.028675] HugeTLB: 0 KiB vmemmap can be freed for a 1.00 GiB page
[    0.028679] HugeTLB: registered 32.0 MiB page size, pre-allocated 0 pages
[    0.028682] HugeTLB: 0 KiB vmemmap can be freed for a 32.0 MiB page
[    0.028686] HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages
[    0.028689] HugeTLB: 0 KiB vmemmap can be freed for a 2.00 MiB page
[    0.028693] HugeTLB: registered 64.0 KiB page size, pre-allocated 0 pages
[    0.028696] HugeTLB: 0 KiB vmemmap can be freed for a 64.0 KiB page
[    0.034750] cryptd: max_cpu_qlen set to 1000
[    0.036242] SCSI subsystem initialized
[    0.036421] libata version 3.00 loaded.
[    0.038181] clocksource: Switched to clocksource arch_sys_counter
[    0.040569] NET: Registered PF_INET protocol family
[    0.040675] IP idents hash table entries: 4096 (order: 3, 32768 bytes, linear)
[    0.041928] tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.041942] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.041951] TCP established hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.041970] TCP bind hash table entries: 2048 (order: 4, 65536 bytes, linear)
[    0.042021] TCP: Hash tables configured (established 2048 bind 2048)
[    0.042311] MPTCP token hash table entries: 256 (order: 1, 6144 bytes, linear)
[    0.042412] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.042428] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.042622] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.042643] NET: Registered PF_XDP protocol family
[    0.042653] PCI: CLS 0 bytes, default 64
[    0.044076] workingset: timestamp_bits=46 max_order=16 bucket_order=0
[    0.048686] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.048695] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.104837] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[    0.116273] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.119873] printk: legacy console [ttyS0] disabled
[    0.140268] 11002000.serial: ttyS0 at MMIO 0x11002000 (irq = 72, base_baud = 2500000) is a ST16650V2
[    0.140311] printk: legacy console [ttyS0] enabled
[    0.974549] random: crng init done
[    0.980285] loop: module loaded
[    0.986158] spi-nand spi0.0: ESMT SPI NAND was found.
[    0.991241] spi-nand spi0.0: 128 MiB, block size: 128 KiB, page size: 2048, OOB size: 64
[    1.000078] Signature found at block 1023 [0x07fe0000]
[    1.005213] NMBM management region starts at block 960 [0x07800000]
[    1.013248] First info table with writecount 0 found in block 960
[    1.022250] Second info table with writecount 0 found in block 963
[    1.028450] NMBM has been successfully attached
[    1.033192] 6 fixed-partitions partitions found on MTD device spi0.0
[    1.039560] Creating 6 MTD partitions on "spi0.0":
[    1.044344] 0x000000000000-0x000000100000 : "BL2"
[    1.050160] 0x000000100000-0x000000180000 : "u-boot-env"
[    1.056164] 0x000000180000-0x000000280000 : "art"
[    1.062076] 0x000000280000-0x000000380000 : "Factory"
[    1.068059] 0x000000380000-0x000000580000 : "FIP"
[    1.074259] 0x000000580000-0x000007580000 : "ubi"
[    1.259910] mtk_soc_eth 15100000.ethernet: generated random MAC address 20:08:02:00:00:00
[    1.284710] mtk_soc_eth 15100000.ethernet eth0: mediatek frame engine at 0xffffffc081a00000, irq 75
[    1.294637] i2c_dev: i2c /dev entries driver
[    1.300681] mtk-wdt 1001c000.watchdog: Watchdog enabled (timeout=31 sec, nowayout=0)
[    1.309796] NET: Registered PF_INET6 protocol family
[    1.315542] Segment Routing with IPv6
[    1.319251] In-situ OAM (IOAM) with IPv6
[    1.323211] NET: Registered PF_PACKET protocol family
[    1.328316] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    1.341511] 8021q: 802.1Q VLAN Support v1.8
[    1.419720] mt7530-mdio mdio-bus:1f: configuring for fixed/2500base-x link mode
[    1.428719] mt7530-mdio mdio-bus:1f: Link is Up - 2.5Gbps/Full - flow control rx/tx
[    1.438436] mt7530-mdio mdio-bus:1f lan1 (uninitialized): PHY [mt7530-0:00] driver [MediaTek MT7531 PHY] (irq=79)
[    1.459622] mt7530-mdio mdio-bus:1f lan2 (uninitialized): PHY [mt7530-0:01] driver [MediaTek MT7531 PHY] (irq=80)
[    1.480555] mt7530-mdio mdio-bus:1f lan3 (uninitialized): PHY [mt7530-0:02] driver [MediaTek MT7531 PHY] (irq=81)
[    1.501824] mt7530-mdio mdio-bus:1f wan (uninitialized): PHY [mt7530-0:03] driver [MediaTek MT7531 PHY] (irq=82)
[    1.513389] mtk_soc_eth 15100000.ethernet eth0: entered promiscuous mode
[    1.520197] DSA: tree 0 setup
[    1.523612] UBI: auto-attach mtd5
[    1.526932] ubi0: default fastmap pool size: 40
[    1.531467] ubi0: default fastmap WL pool size: 20
[    1.536246] ubi0: attaching mtd5
[    1.944369] ubi0: scanning is finished
[    1.953996] ubi0: attached mtd5 (name "ubi", size 112 MiB)
[    1.959508] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    1.966371] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    1.973153] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    1.980107] ubi0: good PEBs: 896, bad PEBs: 0, corrupted PEBs: 0
[    1.986101] ubi0: user volume: 3, internal volumes: 1, max. volumes count: 128
[    1.993316] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 0
[    2.001662] ubi0: available PEBs: 10, total reserved PEBs: 886, PEBs reserved for bad PEB handling: 19
[    2.010973] ubi0: background thread "ubi_bgt0d" started, PID 633
[    2.011678] block ubiblock0_1: created from ubi0:1(rootfs)
[    2.022466] ubiblock: device ubiblock0_1 (rootfs) set to be root filesystem
[    2.029528] clk: Disabling unused clocks
[    2.033707] PM: genpd: Disabling unused power domains
[    2.043579] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    2.050983] Freeing unused kernel memory: 512K
[    2.055467] Run /sbin/init as init process
[    2.059569]   with arguments:
[    2.062525]     /sbin/init
[    2.065221]   with environment:
[    2.068363]     HOME=/
[    2.070712]     TERM=linux
[    2.267037] init: Console is alive
[    2.270639] init: - watchdog -
[    2.776444] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    2.802894] gpio_button_hotplug: loading out-of-tree module taints kernel.
[    2.813189] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    2.830192] init: - preinit -
[    3.363364] mtk_soc_eth 15100000.ethernet eth0: configuring for fixed/2500base-x link mode
[    3.371837] mtk_soc_eth 15100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
[    3.401561] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    7.629633] mount_root: loading kmods from internal overlay
[    7.644896] kmodloader: loading kernel modules from //etc/modules-boot.d/*
[    7.654413] kmodloader: done loading kernel modules from //etc/modules-boot.d/*
[    7.795157] block: attempting to load /tmp/overlay/upper/etc/config/fstab
[    7.803492] block: unable to load configuration (fstab: Entry not found)
[    7.810311] block: attempting to load /tmp/overlay/etc/config/fstab
[    7.816648] block: unable to load configuration (fstab: Entry not found)
[    7.823644] block: attempting to load /etc/config/fstab
[    7.832583] block: unable to load configuration (fstab: Entry not found)
[    7.839395] block: no usable configuration
[    7.855306] UBIFS (ubi0:2): default file-system created
[    7.860986] UBIFS (ubi0:2): Mounting in unauthenticated mode
[    7.866739] UBIFS (ubi0:2): background thread "ubifs_bgt0_2" started, PID 752
[    7.908252] UBIFS (ubi0:2): UBIFS: mounted UBI device 0, volume 2, name "rootfs_data"
[    7.916085] UBIFS (ubi0:2): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[    7.926001] UBIFS (ubi0:2): FS size: 49139712 bytes (46 MiB, 387 LEBs), max 397 LEBs, journal size 2412544 bytes (2 MiB, 19 LEBs)
[    7.937644] UBIFS (ubi0:2): reserved for root: 2320989 bytes (2266 KiB)
[    7.944252] UBIFS (ubi0:2): media format: w5/r0 (latest is w5/r0), UUID 9C637C00-D39F-45F1-AB77-8C346E2B61A5, small LPT model
[    7.956210] block: attempting to load /tmp/ubifs_cfg/upper/etc/config/fstab
[    7.963367] block: unable to load configuration (fstab: Entry not found)
[    7.970132] block: attempting to load /tmp/ubifs_cfg/etc/config/fstab
[    7.976634] block: unable to load configuration (fstab: Entry not found)
[    7.983399] block: attempting to load /etc/config/fstab
[    7.988690] block: unable to load configuration (fstab: Entry not found)
[    7.995417] block: no usable configuration
[    8.002662] UBIFS (ubi0:2): un-mount UBI device 0
[    8.007382] UBIFS (ubi0:2): background thread "ubifs_bgt0_2" stops
[    8.016885] UBIFS (ubi0:2): Mounting in unauthenticated mode
[    8.022685] UBIFS (ubi0:2): background thread "ubifs_bgt0_2" started, PID 755
[    8.064086] UBIFS (ubi0:2): UBIFS: mounted UBI device 0, volume 2, name "rootfs_data"
[    8.071945] UBIFS (ubi0:2): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[    8.081851] UBIFS (ubi0:2): FS size: 49139712 bytes (46 MiB, 387 LEBs), max 397 LEBs, journal size 2412544 bytes (2 MiB, 19 LEBs)
[    8.093501] UBIFS (ubi0:2): reserved for root: 2320989 bytes (2266 KiB)
[    8.100108] UBIFS (ubi0:2): media format: w5/r0 (latest is w5/r0), UUID 9C637C00-D39F-45F1-AB77-8C346E2B61A5, small LPT model
[    8.163790] block: attempting to load /tmp/overlay/upper/etc/config/fstab
[    8.170772] block: unable to load configuration (fstab: Entry not found)
[    8.177517] block: attempting to load /tmp/overlay/etc/config/fstab
[    8.184046] block: unable to load configuration (fstab: Entry not found)
[    8.190828] block: attempting to load /etc/config/fstab
[    8.196114] block: unable to load configuration (fstab: Entry not found)
[    8.202858] block: no usable configuration
[    8.208670] block: attempting to load /tmp/ubifs_cfg/upper/etc/config/fstab
[    8.215725] block: unable to load configuration (fstab: Entry not found)
[    8.222485] block: attempting to load /tmp/ubifs_cfg/etc/config/fstab
[    8.229005] block: unable to load configuration (fstab: Entry not found)
[    8.235738] block: attempting to load /etc/config/fstab
[    8.241033] block: unable to load configuration (fstab: Entry not found)
[    8.247761] block: no usable configuration
[    8.253289] mount_root: overlay filesystem has not been fully initialized yet
[    8.260747] mount_root: switching to ubifs overlay
[    8.272629] overlayfs: null uuid detected in lower fs '/', falling back to xino=off,index=off,nfs_export=off.
[    8.284578] urandom-seed: Seed file not found (/etc/urandom.seed)
[    8.323278] procd: - early -
[    8.326223] procd: - watchdog -
[    8.880927] procd: - watchdog -
[    8.899956] procd: - ubus -
[    9.059695] procd: - init -
Please press Enter to activate this console.
[    9.699004] kmodloader: loading kernel modules from /etc/modules.d/*
[    9.762393] urngd: v1.0.2 started.
[    9.889443] NET: Registered PF_ALG protocol family
[    9.912021] zram: Added device: zram0
[    9.935046] tun: Universal TUN/TAP device driver, 1.6
[   10.009255] crypto-safexcel 10320000.crypto: EIP97:230(0,1,4,4)-HIA:270(0,5,5),PE:150/433(alg:7fcdfc00)/0/0/0
[   10.048734] Loading modules backported from Linux version v6.18.7-0-g5dfbc5357
[   10.055956] Backport generated by backports.git c8a37ce
[   10.100837] xt_time: kernel timezone is -0000
[   10.618778] mt798x-wmac 18000000.wifi: HW/SW Version: 0x8a108a10, Build Time: 20240823161240a
[   10.935345] mt798x-wmac 18000000.wifi: WM Firmware Version: ____000000, Build Time: 20240823161304
[   11.031301] mt798x-wmac 18000000.wifi: WA Firmware Version: DEV_000000, Build Time: 20240823161841
[   11.129284] mt798x-wmac 18000000.wifi: eeprom load fail, use default bin
[   11.136068] mt798x-wmac 18000000.wifi: Direct firmware load for mediatek/mt7981_eeprom_mt7976_dbdc.bin failed with error -2
[   11.147233] mt798x-wmac 18000000.wifi: Falling back to sysfs fallback for: mediatek/mt7981_eeprom_mt7976_dbdc.bin
[   19.815492] mt798x-wmac 18000000.wifi: probe with driver mt798x-wmac failed with error -12
[   19.851460] PPP generic driver version 2.4.2
[   19.856713] PPP MPPE Compression module registered
[   19.862531] NET: Registered PF_PPPOX protocol family
[   19.869829] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information.
[   19.877655] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
[   19.889494] kmodloader: done loading kernel modules from /etc/modules.d/*

拆机刷机版

拆机教程图文，撕下底部标签，拆下两颗逻辑，翘片轻轻撬开即可

一、TTL连接路由器

二、刷入uboot

三、刷入openwrt