TP-Link TL-MR22U v1
TP-Link TL-MR22U is a 5200mAh battery powered 3G router with dual-chain 2.4GHz wifi and more processing power than previous hornet-based TP-Link mobile 3G router series. Default device firmware: 3.17.1 Build 140123 Rel.31844n has been made for chinese market, firmware translated to english is available: TL-MR22U_V1.0_20140123_EN.rar Installing OpenWrt is quite tricky due to signed-firmware and less than required RAM, but is possible.
Hardware Highlights
| CPU | Ram | Flash | Network | WLAN Standard 802.11 | USB | Serial | JTag |
|---|---|---|---|---|---|---|---|
| QCA9531@550MHz | 32MiB | 8MiB | 1 x 10/100Mbit | b/g/n 2T2R 300Mbps | 1x USB 2.0, microUSB for charging | Yes | ? |
Manufacturer's site: http://www.tp-link.com.cn/product_357.html
Installation
- Download modified u-boot from http://projects.dymacz.pl/ and rename it to uboot22.
- Download busybox from https://busybox.net/downloads/binaries/1.16.1/busybox-mips, rename it to
busyboxand put in your tftp server root directory together with uboot22 and following aa/bb files: - Create file aa containing the following
cd /tmp tftp -gl uboot22 192.168.1.2 tftp -gl busybox 192.168.1.2 chmod 755 busybox
It will send busybox and modified u-boot to device and set permissions on busybox.
- Create file bb containing the following
cd /tmp ./busybox dd if=uboot22 of=/dev/mtdblock0 conv=fsync reboot
This will overwrite original u-boot with modified one.
- Set your IP address to 192.168.1.2 and start tftp server.
- Reset device to factory settings
- Set password using curl
curl -o - -b 'tLargeScreenP=1; subType=pcSub; Authorization=Basic%20YWRtaW46YWRtaW40Mg%3D%3D; ChgPwdSubTag=true' 'http://192.168.1.1/'
Password is admin42 after this.
- Add parental control rule
curl -o - -b 'tLargeScreenP=1; subType=pcSub; Authorization=Basic%20YWRtaW46YWRtaW40Mg%3D%3D; ChgPwdSubTag=' --referer 'http://192.168.1.1/userRpm/ParentCtrlRpm.htm' 'http://192.168.1.1/userRpm/ParentCtrlRpm.htm?ctrl_enable=1&parent_mac_addr=00-00-00-00-00-02&Page=1'
- Execute first sequence of commands
curl -o - -b 'tLargeScreenP=1; subType=pcSub; Authorization=Basic%20YWRtaW46YWRtaW40Mg%3D%3D; ChgPwdSubTag=' --referer 'http://192.168.1.1/userRpm/ParentCtrlRpm.htm?Modify=0&Page=1' 'http://192.168.1.1/userRpm/ParentCtrlRpm.htm?child_mac=00-00-00-00-00-01&lan_lists=888&url_comment=test&url_0=;cd%20/tmp;&url_1=;tftp%20-gl%20aa%20192.168.1.2;&url_2=;sh%20aa;&url_3=&url_4=&url_5=&url_6=&url_7=&scheds_lists=255&enable=1&Changed=1&SelIndex=0&Page=1&rule_mode=0&Save=%B1%A3+%B4%E6'
- Go to web interface parental control (the one in the middle that has •, others have +) and delete the rule entry by clicking on the link at right.
- Execute second sequence of commands
curl -o - -b 'tLargeScreenP=1; subType=pcSub; Authorization=Basic%20YWRtaW46YWRtaW40Mg%3D%3D; ChgPwdSubTag=' --referer 'http://192.168.1.1/userRpm/ParentCtrlRpm.htm?Modify=0&Page=1' 'http://192.168.1.1/userRpm/ParentCtrlRpm.htm?child_mac=00-00-00-00-00-01&lan_lists=888&url_comment=test&url_0=;cd%20/tmp;&url_1=;tftp%20-gl%20bb%20192.168.1.2;&url_2=;sh%20bb;&url_3=&url_4=&url_5=&url_6=&url_7=&scheds_lists=255&enable=1&Changed=1&SelIndex=0&Page=1&rule_mode=0&Save=%B1%A3+%B4%E6'
- Upload OpenWrt/LEDE image from u-boot webserver by following instructions on https://github.com/pepe2k/u-boot_mod
Hardware
Info
| Architecture | MIPS |
|---|---|
| Vendor | Qualcomm Atheros |
| bootloader | U-Boot |
| System-On-Chip | QCA9531-AL3A (MIPS 24Kc V7.4) |
| CPU/Speed | 24Kc V7.4 550 MHz |
| Flash-Chip | Winbond W25Q64FVSIG |
| Flash size | 8 MiB |
| RAM-Chip | ESMT M13S2561616A-5T 256Mbit |
| RAM | 32 MiB |
| Wireless | Atheros AR9531 2.4GHz 802.11bgn 2×2:2 |
| Ethernet | Atheros AR9531 w/ vlan support swconfig |
| Internet | n/a (via external dongle: 3g/LTE) |
| USB | Yes 1 x 2.0, 1x MicroUSB for battery charging/power supply |
| Serial | Yes |
| JTAG | ? |
| Battery | 2x Li-ion 18650 LGABB41865 |
Serial
→ port.serial general information about the serial port, serial port cable, etc.
Missing R18 and R19 break up serial output to J1 pads, but soldering wires to these points gets us a working serial console.
| Serial connection parameters for TL-MR22U v1 | 115200, 8N1 |
|---|
Photos
Bootloader Mods
- you could read about bootloader in general and about Das U-Boot in particular.
U-Boot 1.1.4 modification for routers
Forum member pepe2k made a modification of U-Boot 1.1.4 for Qualcomm Atheros SoCs based devices (the project is still being developed, so new devices and SoCs will be supported in the future). Up to date information, binary images and sources can be found on official GitHub repository.
This modification started from wr703n-uboot-with-web-failsafe project, but supports more devices, all modern web browsers, has a lot of improvements and other modifications (like U-Boot NetConsole, custom commands, overclocking possibilities etc.).
More information:
- Official repository on GitHub: U-Boot 1.1.4 modification for routers
- Discussion about this project on OpenWrt forum
- An article (in Polish) about one of the first version of this project on www.tech-blog.pl
Hardware mods
16MB SPI
64MB RAM confirmed working, chip used H5DU5162ETR-E3C
Bootlogs
OEM bootlog
U-Boot 1.1.4-g09a4c0df-dirty (Build from LSDK-9.5.3.16 at Jan 23 2014 - 08:39:04) - Honey Bee 1.1 DRAM: 32 MB Top of RAM usable for U-Boot at: 82000000 Reserving 126k for U-Boot at: 81fe0000 Reserving 192k for malloc() at: 81fb0000 Reserving 44 Bytes for Board Info at: 81faffd4 Reserving 36 Bytes for Global Data at: 81faffb0 Reserving 128k for boot params() at: 81f8ffb0 Stack Pointer at: 81f8ff98 Now running in RAM - U-Boot at: 81fe0000 Flash Manuf Id 0xef, DeviceId0 0x40, DeviceId1 0x18 flash size 8MB, sector count = 128 Flash: 8 MB Using default environment In: serial Out: serial Err: serial Net: ath_gmac_enet_initialize... No valid address in Flash. Using fixed address No valid address in Flash. Using fixed address ath_gmac_enet_initialize: reset mask:c02200 Scorpion ---->S27 PHY* uboot, lan&wan swap++++!!! [ath_gmac_mii_setup] 217 S27 reg init : cfg1 0x800c0000 cfg2 0x7114 eth0: 00:03:7f:09:0b:ad athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000 athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10 eth0 up Honey Bee ----> MAC 1 S27 PHY * S27 reg init ATHRS27: resetting s27 ATHRS27: s27 reset done : cfg1 0x800c0000 cfg2 0x7214 eth1: 00:03:7f:09:0b:ad athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000 athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10 athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000 athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10 athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000 athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10 athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000 athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10 eth1 up eth0, eth1 Setting 0x181162c0 to 0x50a1a100 Autobooting in 1 seconds ## Booting image at 9f020000 ... Uncompressing Kernel Image ... OK No initrd ## Transferring control to Linux (at address 801b2f50) ... ## Giving linux memsize in bytes, 33554432 Starting kernel ... Booting QCA953x # Linux version 2.6.31 (jenkins@git-server) (gcc version 4.3.3 (GCC) ) #1 Thu Jan 23 08:41:25 CST 2014 flash_size passed from bootloader = 8 Ram size passed from bootloader =32M CPU revision is: 00019374 (MIPS 24Kc) ath_sys_frequency: cpu apb ddr apb cpu 550 ddr 400 ahb 200 Determined physical RAM map: memory: 02000000 @ 00000000 (usable) Zone PFN ranges: Normal 0x00000000 -> 0x00002000 Movable zone start PFN for each node early_node_map[1] active PFN ranges 0: 0x00000000 -> 0x00002000 Built 1 zonelists in Zone order, mobility grouping on. Total pages: 8128 Kernel command line: console=ttyS0,115200 root=31:02 rootfstype=squashfs init=/sbin/init mtdparts=ar7240-nor0:128k(u-boot),1024k(kernel),6912k(rootfs),64k(config),64k(ART) mem=32M PID hash table entries: 128 (order: 7, 512 bytes) Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes Writing ErrCtl register=00000000 Readback ErrCtl register=00000000 Memory: 23968k/32768k available (1744k kernel code, 8800k reserved, 428k data, 108k init, 0k highmem) NR_IRQS:128 plat_time_init: plat time init done Calibrating delay loop... 365.56 BogoMIPS (lpj=731136) Mount-cache hash table entries: 512 ****************ALLOC*********************** Packet mem: 8024b4a0 (0x600000 bytes) ******************************************** NET: Registered protocol family 16 bio: create slab <bio-0> at 0 SCSI subsystem initialized usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 1024 (order: 1, 8192 bytes) TCP bind hash table entries: 1024 (order: 0, 4096 bytes) TCP: Hash tables configured (established 1024 bind 1024) TCP reno registered NET: Registered protocol family 1 ATH GPIOC major 0 squashfs: version 4.0 (2009/01/31) Phillip Lougher msgmni has been set to 46 io scheduler noop registered io scheduler deadline registered (default) Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled serial8250.0: ttyS0 at MMIO 0xb8020000 (irq = 19) is a 16550A console [ttyS0] enabled SCSI Media Changer driver v0.25 PPP generic driver version 2.4.2 NET: Registered protocol family 24 cmdlinepart partition parsing not available set partition boot set partition kernel set partition rootfs set partition config set partition art set partition � Searching for RedBoot partition table 5 RedBoot partitions found on MTD device ath-nor0 Creating 5 MTD partitions on "ath-nor0": 0x000000000000-0x000000020000 : "boot" 0x000000020000-0x000000120000 : "kernel" 0x000000120000-0x0000007e0000 : "rootfs" 0x0000007e0000-0x0000007f0000 : "config" 0x0000007f0000-0x000000800000 : "art" ->Oops: flash id 0xef4018 . ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver Port Status 0 ath-ehci ath-ehci.0: ATH EHCI ath-ehci ath-ehci.0: new USB bus registered, assigned bus number 1 ehci_reset Intialize USB CONTROLLER in host mode: 0 ehci_reset Port Status 0 ath-ehci ath-ehci.0: irq 3, io mem 0x1b000000 ehci_reset Intialize USB CONTROLLER in host mode: 0 ehci_reset Port Status 0 ath-ehci ath-ehci.0: USB 2.0 started, EHCI 0.00 usb usb1: configuration #1 chosen from 1 choice hub 1-0:1.0: USB hub found hub 1-0:1.0: 0 ports detected TCP cubic registered NET: Registered protocol family 17 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> athwdt_init: Registering WDT success VFS: Mounted root (squashfs filesystem) readonly on device 31:2. Freeing unused kernel memory: 108k freed init started: BusyBox v1.01 (2014.01.23-00:44+0000) multi-call binary This Board use 2.6.31 xt_time: kernel timezone is -0000 nf_conntrack version 0.5.0 (512 buckets, 5120 max) ip_tables: (C) 2000-2006 Netfilter Core Team insmod: cannot open module `/lib/modules/2.6.31/kernel/iptable_raw.ko': No such file or directory insmod: cannot open module `/lib/modules/2.6.31/kernel/flashid.ko': No such file or directory PPPoL2TP kernel driver, V1.0 PPTP driver version 0.8.3 insmod: cannot open module `/lib/modules/2.6.31/kernel/harmony.ko': No such file or directory insmod: cannot open module `/lib/modules/2.6.31/kernel/ht_mcu.ko': No such file or directory insmod: cannot open module `/lib/modules/2.6.31/kernel/ip_set.ko': No such file or directory insmod: cannot open module `/lib/modules/2.6.31/kernel/ip_set_iphash.ko': No such file or directory insmod: cannot open module `/lib/modules/2.6.31/kernel/ipt_set.ko': No such file or directory Now flash open! (none) mips #1 Thu Jan 23 08:41:25 CST 2014 (none) (none) login: Now flash open! ====>>>>ucSystemModeLoadFrom: systemModeChanged = 1 qca955x_GMAC: Length per segment 1536 953x_GMAC: qca953x_gmac_attach Link Int Enabled qca953x_set_gmac_caps CHECK DMA STATUS mac:1 Registering S27.... qca955x_GMAC: RX TASKLET - Pkts per Intr:18 qca955x_GMAC: Max segments per packet : 1 qca955x_GMAC: Max tx descriptor count : 512 qca955x_GMAC: Max rx descriptor count : 128 qca955x_GMAC: Mac capability flags : 2D81 953x_GMAC: qca953x_gmac_attach Link Int Enabled qca953x_set_gmac_caps CHECK DMA STATUS mac:0 Registering S27.... qca955x_GMAC: RX TASKLET - Pkts per Intr:18 qca955x_GMAC: Max segments per packet : 1 qca955x_GMAC: Max tx descriptor count : 512 qca955x_GMAC: Max rx descriptor count : 128 qca955x_GMAC: Mac capability flags : 2581 athr_gmac_ring_alloc Allocated 8192 at 0x81ed6000 athr_gmac_ring_alloc Allocated 2048 at 0x81ca9000 HONEYBEE ----> S27 PHY MDIO Setting Drop CRC Errors, Pause Frames and Length Error frames Setting PHY... athr_gmac_ring_alloc Allocated 8192 at 0x81c3e000 athr_gmac_ring_alloc Allocated 2048 at 0x81eb2800 HONEYBEE ----> S27 PHY MDIO ATHRS27: resetting s27 ATHRS27: s27 reset done Setting Drop CRC Errors, Pause Frames and Length Error frames Setting PHY... device eth1 entered promiscuous mode ====>>>>ucConnModeCfg_init: go to reset connModeCfg Now flash open! enet1 port4 up 100Mbps Full duplex 953x_GMAC: Enet Unit:1 PHY:4 is UP eth1 RGMII 1000Mbps full duplex 953x_GMAC: done cfg2 0x7215 ifctl 0x0 miictrl Setting Drop CRC Errors, Pause Frames and Length Error frames tp_domain: module license 'BSD' taints kernel. Disabling lock debugging due to kernel taint Now flash open! Erase from 0X7E0000 to 0X7E9E40:. Program from 0X7E0000 to 0X7E9E40: write successfully enet1 port4 down 953x_GMAC:unit 1: phy 4 not up carrier 1 set wan auto mode nf_conntrack_rtsp v0.6.21 loading nf_nat_rtsp v0.6.21 loading ath_hal: 0.9.17.1 (AR5416, AR9380, REGOPS_FUNC, WRITE_EEPROM, 11D) enet1 port4 up 100Mbps Full duplex 953x_GMAC: Enet Unit:1 PHY:4 is UP eth1 RGMII 1000Mbps full duplex 953x_GMAC: done cfg2 0x7215 ifctl 0x0 miictrl Setting Drop CRC Errors, Pause Frames and Length Error frames ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved ath_ahb: 9.5.3.16 (Atheros/multi-bss) Enterprise mode: 0x03fc0000 Restoring Cal data from Flash Device using power reduce ratetables ath_get_caps[5848] rx chainmask mismatch actual 3 sc_chainmak 0 ath_get_caps[5823] tx chainmask mismatch actual 3 sc_chainmak 0 wifi0: Atheros ???: mem=0xb8100000, irq=2 ====>>>>SystemMode : Normal Router VAP device ath0 created DES SSID SET=TP-LINK_XXXXXX ====>>>>wlanBestChan : 1 ====>>>>Select Channel is: 1 ====>>>>VAP Name is: ath0 ====>>>>Create AP VAP: ath0 VAP device ath0 created ====>>>>Str WlanMode is: 11NGHT40PLUS ====>>>>chanWidth is: 2 DES SSID SET=TP-LINK_XXXXXX ieee80211_ioctl_siwmode: imr.ifm_active=393856, new mode=3, valid=1 WARNING: Fragmentation with HT mode NOT ALLOWED!! device ath0 entered promiscuous mode br0: port 2(ath0) entering forwarding state ieee80211_ioctl_siwmode: imr.ifm_active=918144, new mode=3, valid=1 br0: port 2(ath0) entering disabled state DES SSID SET=TP-LINK_XXXXXX br0: port 2(ath0) entering forwarding state fuse init (API version 7.12) Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. Now flash open! Erase from 0X7E0000 to 0X7E9E40:. Program from 0X7E0000 to 0X7E9E40: write successfully ====>>>>phoneInit(4807) phoneIniqca955x_GMAC: GE0 RX DMA ENABLE t realWorkMode = 0. realApWorkMode =0
OpenWrt bootlog (with SPI and u-boot mods)
[ 0.000000] Linux version 4.4.14 (ubuntu@vivid) (gcc version 5.3.0 (OpenWrt GCC 5.3.0 49946) ) #20 Mon Oct 10 17:38:20 UTC 2016 [ 0.000000] MyLoader: sysp=7c7b993e, boardp=7133eb11, parts=cef9a9d9 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU0 revision is: 00019374 (MIPS 24Kc) [ 0.000000] SoC: Qualcomm Atheros QCA9533 ver 1 rev 1 [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 02000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] No valid device tree found, continuing without [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x0000000000000000-0x0000000001ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000000000-0x0000000001ffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000001ffffff] [ 0.000000] On node 0 totalpages: 8192 [ 0.000000] free_area_init_node: node 0, pgdat 803b7710, node_mem_map 81000000 [ 0.000000] Normal zone: 64 pages used for memmap [ 0.000000] Normal zone: 0 pages reserved [ 0.000000] Normal zone: 8192 pages, LIFO batch:0 [ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. [ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes [ 0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768 [ 0.000000] pcpu-alloc: [0] 0 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 8128 [ 0.000000] Kernel command line: board=TL-MR22U console=ttyATH0,115200 rootfstype=squashfs,jffs2 noinitrd [ 0.000000] PID hash table entries: 128 (order: -3, 512 bytes) [ 0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) [ 0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) [ 0.000000] Writing ErrCtl register=00000000 [ 0.000000] Readback ErrCtl register=00000000 [ 0.000000] Memory: 28004K/32768K available (2678K kernel code, 142K rwdata, 712K rodata, 300K init, 193K bss, 4764K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] NR_IRQS:51 [ 0.000000] Clocks: CPU:800.000MHz, DDR:600.000MHz, AHB:300.000MHz, Ref:25.000MHz [ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4778151116 ns [ 0.000007] sched_clock: 32 bits at 400MHz, resolution 2ns, wraps every 5368709118ns [ 0.008830] Calibrating delay loop... 531.66 BogoMIPS (lpj=2658304) [ 0.071907] pid_max: default: 32768 minimum: 301 [ 0.077234] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.084741] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.094913] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.106666] NET: Registered protocol family 16 [ 0.112820] MIPS: machine is TP-LINK TL-MR22U v1 [ 0.346517] clocksource: Switched to clocksource MIPS [ 0.353351] NET: Registered protocol family 2 [ 0.358963] TCP established hash table entries: 1024 (order: 0, 4096 bytes) [ 0.366919] TCP bind hash table entries: 1024 (order: 0, 4096 bytes) [ 0.374137] TCP: Hash tables configured (established 1024 bind 1024) [ 0.381440] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 0.388096] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 0.395450] NET: Registered protocol family 1 [ 0.400446] PCI: CLS 0 bytes, default 32 [ 0.401207] futex hash table entries: 256 (order: -1, 3072 bytes) [ 0.420587] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.427266] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.440433] io scheduler noop registered [ 0.444893] io scheduler deadline registered (default) [ 0.450928] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled [ 0.478592] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11, base_baud = 1562500) is a 16550A [ 0.490687] m25p80 spi0.0: found w25q128, expected m25p80 [ 0.496867] m25p80 spi0.0: w25q128 (16384 Kbytes) [ 0.503063] 5 tp-link partitions found on MTD device spi0.0 [ 0.509425] Creating 5 MTD partitions on "spi0.0": [ 0.514852] 0x000000000000-0x000000020000 : "u-boot" [ 0.521674] 0x000000020000-0x00000014ae9c : "kernel" [ 0.528639] 0x00000014ae9c-0x000000ff0000 : "rootfs" [ 0.535522] mtd: device 2 (rootfs) set to be root filesystem [ 0.542044] 1 squashfs-split partitions found on MTD device rootfs [ 0.549064] 0x000000620000-0x000000ff0000 : "rootfs_data" [ 0.556454] 0x000000ff0000-0x000001000000 : "art" [ 0.563106] 0x000000020000-0x000000ff0000 : "firmware" [ 0.587948] libphy: ag71xx_mdio: probed [ 1.179412] ag71xx ag71xx.0: connected to PHY at ag71xx-mdio.1:04 [uid=004dd042, driver=Generic PHY] [ 1.190351] eth0: Atheros AG71xx at 0xb9000000, irq 4, mode:MII [ 1.197975] NET: Registered protocol family 17 [ 1.203099] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this. [ 1.217539] 8021q: 802.1Q VLAN Support v1.8 [ 1.222699] bootconsole [early0] disabled [ 1.229147] Warning: unable to open an initial console. [ 1.232653] VFS: Mounted root (squashfs filesystem) readonly on device 31:2. [ 1.234088] Freeing unused kernel memory: 300K (803d5000 - 80420000) [ 2.029694] init: Console is alive [ 2.029874] init: - watchdog - [ 3.010325] usbcore: registered new interface driver usbfs [ 3.010396] usbcore: registered new interface driver hub [ 3.010487] usbcore: registered new device driver usb [ 3.014840] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 3.016029] ehci-platform: EHCI generic platform driver [ 3.016112] ehci-platform ehci-platform: EHCI Host Controller [ 3.016141] ehci-platform ehci-platform: new USB bus registered, assigned bus number 1 [ 3.018285] ehci-platform ehci-platform: irq 3, io mem 0x1b000000 [ 3.036531] ehci-platform ehci-platform: USB 2.0 started, EHCI 1.00 [ 3.037264] hub 1-0:1.0: USB hub found [ 3.037405] hub 1-0:1.0: 1 port detected [ 3.039695] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 3.040882] ohci-platform: OHCI generic platform driver [ 3.051779] init: - preinit - [ 3.582567] random: procd urandom read with 6 bits of entropy available [ 5.823610] jffs2: notice: (837) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 5.824910] mount_root: switching to jffs2 overlay [ 5.855773] procd: - early - [ 5.855860] procd: - watchdog - [ 6.510181] procd: failed to set stdio [ 6.510247] procd: - ubus - [ 6.562544] procd: - init - [ 7.168944] l2tp_core: L2TP core driver, V2.0 [ 7.170189] l2tp_netlink: L2TP netlink interface [ 7.171780] Netfilter messages via NETLINK v0.30. [ 7.174065] ip_set: protocol 6 [ 7.205591] Loading modules backported from Linux version wt-2016-05-12-0-g7a54796 [ 7.205608] Backport generated by backports.git backports-20160216-0-ge3c56e4 [ 7.208981] ip_tables: (C) 2000-2006 Netfilter Core Team [ 7.218542] nf_conntrack version 0.5.0 (442 buckets, 1768 max) [ 7.263151] xt_time: kernel timezone is -0000 [ 7.314665] PPP generic driver version 2.4.2 [ 7.316994] NET: Registered protocol family 24 [ 7.349448] l2tp_ppp: PPPoL2TP kernel driver, V2.0 [ 7.361984] usbcore: registered new interface driver rt2800usb [ 7.371435] usbcore: registered new interface driver ath9k_htc [ 7.385109] ath: EEPROM regdomain: 0x0 [ 7.385128] ath: EEPROM indicates default country code should be used [ 7.385134] ath: doing EEPROM country->regdmn map search [ 7.385151] ath: country maps to regdmn code: 0x3a [ 7.385160] ath: Country alpha2 being used: US [ 7.385166] ath: Regpair used: 0x3a [ 7.395531] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht' [ 7.398202] ieee80211 phy0: Atheros AR9531 Rev:1 mem=0xb8100000, irq=47 [ 14.047842] device eth0 entered promiscuous mode [ 14.275607] eth0: link up (100Mbps/Full duplex) [ 14.275665] br-lan: port 1(eth0) entered forwarding state [ 14.275718] br-lan: port 1(eth0) entered forwarding state [ 16.266523] br-lan: port 1(eth0) entered forwarding state