I am happy to ship this to any developer who is interested in building a openwrt firmware specific for this AP. I tried to get WR840n firmware installed but failed. I tried tftp, mtd write, as well as the standard gui upload all to no avail. So hopefully someone else can have better success.
This model interested me because it has a POE port meaning it potentially could be installed in office ceilings and such and costs about $15 and reasonably specced.
There's no way to have bootloader access? There's through holes to the left in your second screenshot, if you wedge in male headers you can connect a serial cable (don't connect the 3.3V).
if nobody takes me up on my offer I might try my first router surgery session.
I soldered the pins and captured the uboot log. If I wanted to flash an openwrt image where do you think I can flash it to?
Notes:
I am able to read ungarbled uboot output by setting the com port to 7N1 but means the console cannot take keybord input.
Version:406(Mar 15 2019-09:06:49)
ap147 - Honey Bee 1.0
DRAM:32 MB
U-Boot at: 81fbc000
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@
@ chip__no chip__id dev_size era_size chipName
@ 0000000h 0ef4017h 0800000h 0010000h W25Q64
@ blk_size blk__cnt sec_size sec__cnt pageSize page_cnt
@ 0010000h 0000080h 0001000h 0000800h 0000100h 0008000h
@
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Use Def Env
Net: HB MAC 1 S27 PHY *
S27 init2
resetting s27
s27 reset done
eth0: e8:65:d4:99:85:58
eth0 init done
Setting 0x181162c0 to 0x7fffa100
cpu 650 ddr 367 ahb 216
Hit ctrl+c: 0
Booting:0x9f050000
Name: MIPS Linux-3.3.8
Type: MIPS Linux Multi-File Image (lzma compressed)
Data Size: 1032452 Bytes = 1008.3 kB
Load Addr: 80060000
Entry Point: 80060000
Contents:
Image 0: 1032444 Bytes = 1008.2 kB
Verifying Checksum at 0x9f050040 OK
Unlzma Multi-File Image OK
## Transferring control to Linux (at address 80060000) ...
## Giving linux memsize in bytes, 33554432
Starting kernel ...
[ 0.000000] Linux version 3.3.8 (root@linux-e5sy) (gcc version 4.9.3 (Buildroot 2015.08) ) #1 Tue May 7 23:59:04 EDT 2019
[ 0.000000] boot cmdline: board=AP147 console=ttyS0,115200 mem=32M mtdparts=spi0.0:192k(boot)ro,64k(env),64k(bsp),7616k(KernelFS),6144k@0x1c0000(RootFS),64k(CFM),64k(CFM_BACKUP),64k(CFG),4
[ 0.000000] boot arg:6, 0xa1f6bfb0, 0xa1f6c480
[ 0.000000] Ethaddr=0xe8:0x65:0xd4:0x99:0x85:0x58
[ 0.000000] bootconsole [early0] enabled
[ 0.000000] CPU revision is: 00019374 (MIPS 24Kc)
[ 0.000000] SoC: Qualcomm Atheros QCA9531 rev 2
[ 0.000000] Clocks: CPU:650.000MHz, DDR:366.357MHz, AHB:216.666MHz, Ref:25.000MHz
[ 0.000000] Determined physical RAM map:
[ 0.000000] memory: 02000000 @ 00000000 (usable)
[ 0.000000] User-defined physical RAM map:
[ 0.000000] memory: 02000000 @ 00000000 (usable)
[ 0.000000] Zone PFN ranges:
[ 0.000000] Normal 0x00000000 -> 0x00002000
[ 0.000000] Movable zone start PFN for each node
[ 0.000000] Early memory PFN ranges
[ 0.000000] 0: 0x00000000 -> 0x00002000
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 8128
[ 0.000000] Kernel command line: board=AP147 console=ttyS0,115200 mem=32M mtdparts=spi0.0:192k(boot)ro,64k(env),64k(bsp),7616k(KernelFS),6144k@0x1c0000(RootFS),64k(CFM),64k(CFM_BACKUP),64t
[ 0.000000] PID hash table entries: 128 (order: -3, 512 bytes)
[ 0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
[ 0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
[ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[ 0.000000] Writing ErrCtl register=00000000
[ 0.000000] Readback ErrCtl register=00000000
[ 0.000000] Memory: 29072k/32768k available (2165k kernel code, 3696k reserved, 563k data, 172k init, 0k highmem)
[ 0.000000] SLUB: Genslabs=9, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[ 0.000000] NR_IRQS:83
[ 0.000000] Calibrating delay loop... 432.53 BogoMIPS (lpj=2162688)
[ 0.050000] pid_max: default: 32768 minimum: 301
[ 0.050000] Mount-cache hash table entries: 512
[ 0.060000] Performance counters: mips/24K PMU enabled, 2 32-bit counters available to each CPU, irq 13
[ 0.070000] NET: Registered protocol family 16
[ 0.070000] gpiochip_add: registered GPIOs 0 to 17 on device: ath79
[ 0.080000] MIPS: machine is Qualcomm Atheros AP147 reference board
[ 0.080000] AP147 Reference Board Id is 17
[ 0.090000] ar724x-pci ar724x-pci.0: PCIe link is down
[ 0.090000] registering PCI controller with io_map_base unset
[ 0.100000] ar71xx: invalid MDIO id 1
[ 0.310000] bio: create slab <bio-0> at 0
[ 0.320000] PCI host bridge to bus 0000:00
[ 0.320000] pci_bus 0000:00: root bus resource [mem 0x10000000-0x11ffffff]
[ 0.330000] pci_bus 0000:00: root bus resource [io 0x0000]
[ 0.330000] Switching to clocksource MIPS
[ 0.340000] NET: Registered protocol family 2
[ 0.340000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.350000] TCP established hash table entries: 1024 (order: 1, 8192 bytes)
[ 0.360000] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.360000] TCP: Hash tables configured (established 1024 bind 1024)
[ 0.370000] TCP reno registered
[ 0.370000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[ 0.380000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[ 0.380000] NET: Registered protocol family 1
[ 0.400000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.410000] msgmni has been set to 56
[ 0.410000] io scheduler noop registered
[ 0.420000] io scheduler deadline registered (default)
[ 0.420000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[ 0.450000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11) is a 16550A
[ 0.460000] console [ttyS0] enabled, bootconsole disabled
[ 0.460000] console [ttyS0] enabled, bootconsole disabled
[ 0.470000] m25p80 spi0.0: found s25fl064k, expected m25p80
[ 0.480000] m25p80 spi0.0: s25fl064k (8192 Kbytes), erasesize:0x00010000
[ 0.480000] Kernel code size:0xfc144
[ 0.490000] 10 cmdlinepart partitions found on MTD device spi0.0
[ 0.490000] Creating 10 MTD partitions on "spi0.0":
[ 0.500000] 0x000000000000-0x000000030000 : "boot"
[ 0.510000] 0x000000030000-0x000000040000 : "env"
[ 0.510000] 0x000000040000-0x000000050000 : "bsp"
[ 0.520000] 0x000000050000-0x0000007c0000 : "KernelFS"
[ 0.530000] 0x00000014c144-0x0000007c0000 : "RootFS"
[ 0.530000] mtd: partition "RootFS" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[ 0.550000] 0x0000007c0000-0x0000007d0000 : "CFM"
[ 0.550000] 0x0000007d0000-0x0000007e0000 : "CFM_BACKUP"
[ 0.560000] 0x0000007e0000-0x0000007f0000 : "CFG"
[ 0.570000] 0x0000007f0000-0x000000800000 : "art"
[ 0.570000] 0x000000000000-0x000000800000 : "ALL"
[ 0.580000] m25p80 spi0.1: found pm25lv512, expected m25p80
[ 0.580000] m25p80 spi0.1: pm25lv512 (64 Kbytes), erasesize:0x00001000
[ 0.610000] ag71xx_mdio: probed
[ 0.610000] match drv:0x4d0000-Atheros AR8216/AR8236/AR8316 and dev:0x4dd042-ag71xx-mdio.1:00
[ 0.650000] match drv:0x4d0000-Atheros AR8216/AR8236/AR8316 and dev:0x4dd042-ag71xx-mdio.1:01
[ 0.680000] match drv:0x4d0000-Atheros AR8216/AR8236/AR8316 and dev:0x4dd042-ag71xx-mdio.1:02
[ 0.710000] match drv:0x4d0000-Atheros AR8216/AR8236/AR8316 and dev:0x4dd042-ag71xx-mdio.1:03
[ 0.750000] match drv:0x4d0000-Atheros AR8216/AR8236/AR8316 and dev:0x4dd042-ag71xx-mdio.1:04
[ 0.790000] ag71xx_mdio: probed
[ 0.790000] eth0: Atheros AG71xx at 0xba000000, irq 5
[ 1.350000] eth0: Found an AR934X built-in switch
[ 2.380000] PPP generic driver version 2.4.2
[ 2.390000] PPP MPPE Compression module registered
[ 2.390000] NET: Registered protocol family 24
[ 2.400000] nf_conntrack version 0.5.0 (454 buckets, 1816 max)
[ 2.410000] IPv4 over IPv4 tunneling driver
[ 2.410000] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 2.420000] TCP cubic registered
[ 2.420000] NET: Registered protocol family 17
[ 2.430000] 8021q: 802.1Q VLAN Support v1.8
[ 2.430000] ### of_selftest(): No testcase data in device tree; not running tests
[ 2.440000] VFS: Mounted root (squashfs filesystem) readonly on device 31:4.
[ 2.450000] Freeing unused kernel memory: 172k freed
mkdir: can't create directory '/var/run': File exists
[ 4.480000] ###fastnat init successfull####
[ 4.510000] [BM CORE ][init_online_ip ,1559] INFO: online ip data hash table created, size = 199
[ 4.520000] [BM CORE ][init_online_ip_procfs,741 ] INFO: online_ip proc file created
[ 4.570000] km_init 445: ##km base init success##
[ 4.700000] [BM CORE ][bm_init ,924 ] INFO: bm_init success
[ 4.700000] [BM CORE ][bm_u2k_info_init,1148] INFO: bm_u2k_info_init success
[ 4.730000] [MAC FILTER ][mf_init ,643 ] INFO: bm_mac_filter init success
[ 4.820000] Interface_Isolate insert seccessfully!
[ 5.000000] ssdk_plat_init start
[ 5.010000] chip_version:0x0
[ 5.010000] chip_version:0x2
[ 5.010000] Register QCA PHY driver
[ 5.020000] match drv:0x4d0000-QCA AR8216 AR8236 AR8316 AR8327 AR8337 and dev:0x4dd042-ag71xx-mdio.1:00
[ 5.030000] match drv:0x4d0000-QCA AR8216 AR8236 AR8316 AR8327 AR8337 and dev:0x4dd042-ag71xx-mdio.1:01
[ 5.040000] match drv:0x4d0000-QCA AR8216 AR8236 AR8316 AR8327 AR8337 and dev:0x4dd042-ag71xx-mdio.1:02
[ 5.050000] match drv:0x4d0000-QCA AR8216 AR8236 AR8316 AR8327 AR8337 and dev:0x4dd042-ag71xx-mdio.1:03
[ 5.060000] match drv:0x4d0000-QCA AR8216 AR8236 AR8316 AR8327 AR8337 and dev:0x4dd042-ag71xx-mdio.1:04
[ 5.090000] [SSDK] chip (id:0x2 - nm:SHIVA)
[ 5.090000] PHY ID is 0x4dd042
[ 5.140000] qca probe f2 phy driver succeeded!
[ 5.150000] qca-ssdk module init succeeded!
[ 5.190000] AR71XX_RESET_REG_WDOG_CTRL: 0x0
[ 5.190000] 377+0 records in
377+0 records out
12064 bytes (11.8KB) copied, 0.017481 seconds, 673.9KB/s
/dev/mem opened.
Memory mapped at address 0x775fa000.
Value at address 0xB804003C (0x775fa03c): 0x0
Written 0x2F2E004D; readback 0x4D
auto startup
Give root password for system maintenance
(or type Control-D for normal startup):argv[0] = cfmd
cfmd
argv[0] = logserver
argv[0] = netctrl
logserver
netctrl
current mode is common
argv[0] = wserver
wserver
wserver debug flags(0x1): error
[ 6.880000] mem_manager: module license 'unspecified' taints kernel.
[ 6.890000] Disabling lock debugging due to kernel taint
[ 7.070000] ath_dfs: Version 2.0.0
[ 7.070000] Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved
[ 8.180000] ath_hal: 0.9.17.1 (AR9380, REGOPS_FUNC, PRIVATE_DIAG, WRITE_EEPROM, 11D)
[ 8.210000] ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
insmod: can't read '/lib/modules/hst_tx99.ko': No such file or directory
[ 8.420000] ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
[ 8.560000] __ath_attach: Set global_scn[0]
[ 8.570000] *** All the minfree values should be <= ATH_TXBUF-32, otherwise default value will be used instead ***
[ 8.580000] ACBKMinfree = 48
[ 8.580000] ACBEMinfree = 32
[ 8.580000] ACVIMinfree = 16
[ 8.590000] ACVOMinfree = 0
[ 8.590000] CABMinfree = 48
[ 8.590000] UAPSDMinfree = 0
[ 8.600000] ATH_TXBUF=512
[ 8.600000] CC++ attach devid 0x3d
[ 8.610000] Enterprise mode: 0x03fc0000
[ 8.610000] Restoring Cal data from FS
[ 8.620000] qdf_fs_read[59], Open File /tmp/wifi0.caldata SUCCESS!!file system magic:-2054924042super blocksize:4096inode 463file size:12064qdf_fs_read[79]: caldata data size mismatch, fsi8
[ 8.650000] ART Version : -48.0.0
[ 8.650000] SW Image Version : -48.0.0.0.0
[ 8.660000] Board Revision :
[ 8.660000] ar9300_attach: nf_2_nom -110 nf_2_max -60 nf_2_min -125
[ 8.670000] Green-AP : Green-AP : Attached
[ 8.670000]
[ 8.680000] Starting random number generator thread
[ 8.680000] ath_get_caps[6329] rx chainmask mismatch actual 3 sc_chainmak 0
[ 8.690000] ath_get_caps[6304] tx chainmask mismatch actual 3 sc_chainmak 0
[ 8.700000] [slottime] auto, set to 20.
[ 8.710000] TENDA WLAN: init proc
[ 8.710000] ath_attach_dfs[12731] dfsdomain 0
[ 8.720000] dfs_attach: event log enabled by default
[ 8.730000] ath_attach: Set global_ic[1]..gloabl_ic ptr:80528210
[ 8.740000] ====tun_node_list_init init(0)====
[ 8.750000] ath_tx_paprd_init sc 80f38000 PAPRD disabled in HAL
[ 8.780000] wifi0: Atheros ???: mem_start: =0xb8100000, mem_end: =0xb8120000, irq=47
[ 8.790000] ath_da_pci: (Atheros/multi-bss)
total used free shared buffers
Mem: 29244 15740 13504 0 560
-/+ buffers: 15180 14064
Swap: 0 0 0
netctrl_init_interfaces 1311**********************:E8:65:D4:99:85:58
[ 9.910000] device vlan1 entered promiscuous mode
[ 9.920000] device eth0 entered promiscuous mode
[ 9.930000] eth0: link up (1000Mbps/Full duplex)
[ 9.930000] _br_brc_notify 3773: the bridge add fdb failed
[ 9.940000] _br_brc_notify 3775: group = 3, type = 28, fdb->is_local = 1
[ 9.950000] br0: topology change detected, propagating
[ 9.960000] br0: port 1(vlan1) entered forwarding state
[ 9.960000] br0: port 1(vlan1) entered forwarding state
[ 9.980000] device vlan1 left promiscuous mode
[ 9.980000] device eth0 left promiscuous mode
[ 9.990000] br0: port 1(vlan1) entered disabled state
[ 9.990000] _br_brc_notify 3773: the bridge add fdb failed
[ 10.000000] _br_brc_notify 3775: group = 3, type = 29, fdb->is_local = 1
[ 10.010000] device eth0 entered promiscuous mode
[ 10.020000] br0: topology change detected, propagating
[ 10.030000] br0: port 1(eth0) entered forwarding state
[ 10.030000] br0: port 1(eth0) entered forwarding state
[ 10.040000] _br_brc_notify 3773: the bridge add fdb failed
[ 10.040000] _br_brc_notify 3775: group = 3, type = 28, fdb->is_local = 1
Sun May 1 00:00:00 UTC 2011
get_eth_name(P_LAN_1) = eth0, get_eth_name(L_LAN_1) = vlan1,get_eth_name(WAN_1) = vlan2
argv[0] = httpd
httpd
argv[0] = arprecive
argv[0] = sta_report
sta_report
arprecive
[ 10.560000] eth0: link down
[ 10.830000] br0: port 1(eth0) entered disabled state
goahead: 4: main----56
qca_get_sta_info(1547):(ath0) unable to get station information
qca_get_sta_info(1547):(ath0) unable to get station information
report ip: ip change
GoAhead default debug level : 4
/var/goahead_debug nost exist, record default debug leve 4
GoAhead default debug level : 4
goahead: 4: initPlatform----400
goahead: 4: websOpen----229
route: SIOCDELRT: No such process
route: SIOCADDRT: Invalid argument
/bin/sh: can't create /proc/br_igmpsnoop: nonexistent directory
config changed,CRC:old[de5c5a73],new[34e201eb]
Erasing 64 Kbyte @ 0 -- 100 % complete.
wifi_add_vlan_br 508:workmode:ap
[ 12.060000] eth0: link up (1000Mbps/Full duplex)
[ 12.060000] br0: port 1(eth0) entered forwarding state
[ 12.070000] br0: port 1(eth0) entered forwarding state
wifi_probe(568): ath0 not exist!
wifi_probe(568): ath1 not exist!
wifi_probe(568): wifi0 not exist!
=========hardware check wifi0 ========
mib_nvram_cfm_commit 1091: write mibvalue success
write config to flash......ok
config changed,CRC:old[34e201eb],new[18a1bf63]
Erasing 64 Kbyte @ 0 -- 100 % complete.
goahead: 0: Can't get host address for host linux-588599d465e8: errno 124, use Local:127.0.0.1
Yes:
****** WeLoveLinux ******
Welcome to ...
/home/hwm/AP4V2.0/develop_qualcomm/prod/httpd/ap_web/cgi_outdoor/main.c check network ip start
init web server success
wifi_probe(568): ath0 not exist!
mib_nvram_cfm_commit 1065: write mibvalue success
write config to flash......ok
[ 13.190000] wlan_vap_create : enter. devhandle=0x80e70380, opmode=IEEE80211_M_HOSTAP, flags=0x1
[ 13.200000] wlan_vap_create : exit. devhandle=0x80e70380, vap=0x81298000, opmode=IEEE80211_M_HOSTAP, flags=0x1.
[ 13.220000] VAP device ath0 created osifp: (81079b80) os_if: (81298000)
ath0
[ 13.250000] ath_net80211_dfs_clist_update: called, cmd=1, nollist= (null), nentries=0
[ 13.260000] ath_attach_dfs[12731] dfsdomain 0
[ 13.270000] dfs_attach: event log enabled by default
qca_wiat_file_create(91): ERROR: file:/var/run/hostapd/global is not exist(0)
qca_start_wpa_supplicant(528): ERROR: null pointe[ 14.330000] ath_net80211_dfs_clist_update: called, cmd=1, nollist= (null), nentries=0
r!
[ 14.340000] ath_attach_dfs[12731] dfsdomain 0
[ 14.340000] dfs_attach: event log enabled by default
[ 14.370000] siwfreq
[ 14.380000] Set freq vap 0 stop send + 81298000
[ 14.380000] Set freq vap 0 stop send -81298000
[ 14.420000] Set wait done --81298000
iwpriv_common(490):(ath0) unknow cmd `td_spec_width`
'iwpriv ath0 td_spec_width 0' failed
qca_config_radio[ 14.460000] [DEBUG] vap-0(ath0):set SIOC80211NWID, 12 characters
(1475): DEBUG: r[ 14.460000]
[ 14.460000] DES SSID SET=Tenda_998558
einit for wifi0 enable=0
wifi_probe(573):ath0 is exist. name: IEEE 802.11b
Configuration fi[ 14.870000] ieee80211_ioctl_siwmode: imr.ifm_active=131712, new mode=3, valid=1
le: /var/run/hos[ 14.880000] DEVICE IS DOWN ifname=ath0
tapd-ath0.conf ([ 14.880000] DEVICE IS DOWN ifname=ath0
phy ath0) --> new PHY
ath0: Could not connect to kernel driver
Using interface ath0 with hwaddr e8:65:d4:99:85:59 and ssid "Tenda_998558"
WPS: Converting push_button to virtual_push_button for WPS 2.0 compliance
ath0: interface state UNINITIALIZED->ENABLED
ath0: AP-ENABLED
OK
[ 14.980000] Setting Max Stations:48
config band wlan0 success
[ 17.700000] mlme_create_infra_bss : Overriding HT40 channel with HT20 channel
[ 17.950000] [slottime] auto, set to 9.
ssdk_sh portvlan ingress set 0 disable
ssdk_sh portvlan member update 0 62
ssdk_sh portvlan ingress set 1 disable
ssdk_sh portvlan member update 1 61
ssdk_sh portvlan ingress set 2 disable
ssdk_sh portvlan member update 2 59
ssdk_sh portvlan ingress set 3 disable
ssdk_sh portvlan member update 3 55
ssdk_sh portvlan ingress set 4 disable
ssdk_sh portvlan member update 4 47
ssdk_sh portvlan ingress set 5 disable
ssdk_sh portvlan member update 5 31
switch only mode, add vlan2
[ 18.270000] device ath0 entered promiscuous mode
[ 18.270000] br0: port 2(ath0) entered forwarding state
[ 18.280000] br0: port 2(ath0) entered forwarding state
[ 18.280000] _br_brc_notify 3773: the bridge add fdb failed
[ 18.290000] _br_brc_notify 3775: group = 3, type = 28, fdb->is_local = 1
iptables: No chain/target/match by that name.
iptables v1.4.4: Couldn't find target `dmz_forward_pre'
Try `iptables -h' or 'iptables --help' for more information.
iptables: No chain/target/match by that name.
iptables v1.4.4: Couldn't find target `dmz_forward_post'
Try `iptables -h' or 'iptables --help' for more information.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables v1.4.4: Couldn't find target `port_forward_pre'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.4.4: Couldn't find target `port_forward_post'
Try `iptables -h' or 'iptables --help' for more information.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables v1.4.4: Couldn't find target `web_wanadmin'
Try `iptables -h' or 'iptables --help' for more information.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables v1.4.4: Couldn't find target `web_wanadmin'
Try `iptables -h' or 'iptables --help' for more information.
iptables: No chain/target/match by that name.
killall: 3322ip: no process killed
killall: 88ip: no process killed
killall: gnway: no process killed
killall: inadyn: no process killed
rm: can't remove '/etc/ddns_*': No such file or directory
iptables: No chain/target/match by that name.
iptables v1.4.4: Couldn't find target `MINIUPNPD'
Try `iptables -h' or 'iptables --help' for more information.
iptables: No chain/target/match by that name.
dhcps_load_cfg,249
dhcps_load_cfg,252
mac filter enabl[ 21.630000] [MAC FILTER ][mf_apply ,258 ] INFO: g_mac_filter_enable = disable
e = 0
[ 21.660000] [MAC FILTER ][mf_mode ,266 ] INFO: g_mf_mode = black
argv[0] = apmng_svr
apmng_svr
[netctrl_notice_extend_status:1626]msg {"type":"notice","subtype":"extend_status","process_name":"netctrl"}
wifi_get_extend_interface(2199): ERROR: not extend mode!
wlan_handle_msg(284): ERROR: handle msg id 35 failed!
wtp_main.c check network 192.168.0.254 success.
[ 23.900000] Phy[4] up
#####xxxxxxxxxx#port_id:4##############
-------len=180224
set ok
-------len=360448
Try switching Rx and Tx if you get garbled output?
QCA9531 is a supported SoC, so you could try porting the device, but do keep in mind 32 MB of RAM means it will never run comfortably with modern OpenWrt. 8 MiB flash is doable but tight.