Support for TP-LINK TL-WR802N V4


#21

Here are the images
https://drive.google.com/drive/folders/1cwfvu5vIC75FZMgDKSZSJinryHUpV2II?usp=sharing

I would try loading initramfs through U-boot console,that way you can test everything


#22

Thank you. So, right now, the device is searching for the "tp_recovery.bin", when clicking on the reset button, at boot. Should I rename the initramfs to tp_recovery.bin to boot it? If yes, then, what should I do?


#23

No,wrong way.

Connect serial and when you see something keep t pressed,it should go into U-boot console.
There you can type print to see which variables exist.

Then you can provide us with those.

Basically you need to figure out at which point RAM starts so you can tftpboot image into RAM and then simply load it from there.
This way you dont mess with flash.

I would not flash tftp images since those are padded for 840N v4.
Bootloader on 802N v4 may not be the same.


#24

Ok, so here are the variables:

U-Boot 1.1.3 (Apr 21 2017 - 20:28:08)
MT7628 # print                   
bootcmd=tftp
bootdelay=1
baudrate=115200
ethaddr="00:0A:EB:13:09:69"
ipaddr=192.168.0.2     
serverip=192.168.0.225
stdin=serial      
stdout=serial
stderr=serial
         
Environment size: 152/4092 bytes

#25

And off course they are minimal.
I gotta take a look at u-boot source.

Can you meanwhile tftp flash stock image?


#27

I tried to use tftpboot to boot the binary I got from the vendor (at adress http://static.tp-link.com/TL-WR802N(EU)_V4_170421.zip ), but it seems i'm stuck in a boot loop (to uboot)

MT7628 # tftpboot

 netboot_common, argc= 1 
                         
 NetTxPacket = 0x83FE7700 
                          
 KSEG1ADDR(NetTxPacket) = 0xA3FE7700 
                                     
 NetLoop,call eth_halt ! 
                         
 NetLoop,call eth_init ! 
Trying Eth0 (10/100-M)   
                      
 Waitting for RX_DMA_BUSY status Start... done
                                              

 ETH_STATE_ACTIVE!! 
*** Warning: no boot file name; using 'test.bin'
TFTP from server 192.168.0.225; our IP address is 192.168.0.2
Filename 'test.bin'.                                         
                    
 TIMEOUT_COUNT=10,Load address: 0x80100000
Loading: Got ARP REPLY, set server/gtwy eth addr (2c:41:38:0d:6f:a9)
Got it                                                              
#################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ############################                                     
done                                 
Bytes transferred = 8126976 (7c0200 hex)
NetBootFileXferSize= 007c0200           
MT7628 # bootm               
do_bootm:argc=1, addr=0x80100000
## Booting image at 80100000 ...
   Uncompressing Kernel Image ... LZMA ERROR 1 - must RESET board to recover
[04040C0D][04040C0C]                                                        
DDR Calibration DQS reg = 00008888
                                  

U-Boot 1.1.3 (Apr 21 2017 - 20:28:08)
                                     
Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb8000
******************************    
Software System Reset Occurred
******************************
flash manufacture id: ef, device id 40 17
find flash: W25Q64BV                     
============================================ 
Ralink UBoot Version: 4.3.0.0                
-------------------------------------------- 
ASIC 7628_MP (Port5<->None)                  
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit                       
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Apr 21 2017  Time:20:28:08
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 
                                                 
 ##### The CPU freq = 580 MHZ #### 
 estimate memory size =64 Mbytes   
RESET MT7628 PHY!!!!!!          
continue to starting system.                                                                                                                                                                                                    0 
disable switch phyport...                                                                                                                                                                                                        
                         
3: System Boot system code via Flash.(0xbc020000)
do_bootm:argc=2, addr=0xbc020000                 
## Booting image at bc020000 ...
   Uncompressing Kernel Image ... LZMA ERROR 1 - must RESET board to recover
[04040C0D][04040C0C]                                                        
DDR Calibration DQS reg = 00008888
                                  

U-Boot 1.1.3 (Apr 21 2017 - 20:28:08)
                                     
Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb8000
******************************    
Software System Reset Occurred
******************************
flash manufacture id: ef, device id 40 17
find flash: W25Q64BV                     
============================================ 
Ralink UBoot Version: 4.3.0.0                
-------------------------------------------- 
ASIC 7628_MP (Port5<->None)                  
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit                       
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Apr 21 2017  Time:20:28:08
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 
                                                 
 ##### The CPU freq = 580 MHZ #### 
 estimate memory size =64 Mbytes   
RESET MT7628 PHY!!!!!!          
continue to starting system.                                                                                                                                                                                                    0 
disable switch phyport...                                                                                                                                                                                                        
                         
3: System Boot system code via Flash.(0xbc020000)
do_bootm:argc=2, addr=0xbc020000                 
## Booting image at bc020000 ...
   Uncompressing Kernel Image ... LZMA ERROR 1 - must RESET board to recover
[04050C0D][04050C0C]                                                        
DDR Calibration DQS reg = 00008889
                                  

U-Boot 1.1.3 (Apr 21 2017 - 20:28:08)
                                     
Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb8000
******************************    
Software System Reset Occurred
******************************
flash manufacture id: ef, device id 40 17
find flash: W25Q64BV                     
============================================ 
Ralink UBoot Version: 4.3.0.0                
-------------------------------------------- 
ASIC 7628_MP (Port5<->None)                  
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit                       
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Apr 21 2017  Time:20:28:08
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 
                                                 
 ##### The CPU freq = 580 MHZ #### 
 estimate memory size =64 Mbytes   
RESET MT7628 PHY!!!!!!          
continue to starting system.                                                                                                                                                                                                    0 
disable switch phyport...                                                                                                                                                                                                        
                         
3: System Boot system code via Flash.(0xbc020000)
do_bootm:argc=2, addr=0xbc020000                 
## Booting image at bc020000 ...
   Uncompressing Kernel Image ... LZMA ERROR 1 - must RESET board to recover
[04040C0D][04040C0C]                                                        
DDR Calibration DQS reg = 00008888
                                  

U-Boot 1.1.3 (Apr 21 2017 - 20:28:08)
                                     
Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb8000
******************************    
Software System Reset Occurred
******************************
��[04040D06][04040C0C]        
DDR Calibration DQS reg = 00008889
                                  

U-Boot 1.1.3 (Apr 21 2017 - 20:28:08)
                                     
Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb8000
flash manufacture id: ef, device id 40 17
find flash: W25Q64BV                     
============================================ 
Ralink UBoot Version: 4.3.0.0                
-------------------------------------------- 
ASIC 7628_MP (Port5<->None)                  
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit                       
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Apr 21 2017  Time:20:28:08
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 
                                                 
 ##### The CPU freq = 580 MHZ #### 
 estimate memory size =64 Mbytes   
RESET MT7628 PHY!!!!!!          
continue to starting system.                                                                                                                                                                                                    0 
disable switch phyport...                                                                                                                                                                                                        
                         
3: System Boot system code via Flash.(0xbc020000)
do_bootm:argc=2, addr=0xbc020000                 
## Booting image at bc020000 ...
   Uncompressing Kernel Image ... LZMA ERROR 1 - must RESET board to recover
[04040C0F][04040C0C]                                                        
DDR Calibration DQS reg = 00008889
                                  

U-Boot 1.1.3 (Apr 21 2017 - 20:28:08)
                                     
Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb8000
******************************    
Software System Reset Occurred
******************************
flash manufacture id: ef, device id 40 17
find flash: W25Q64BV                     
============================================ 
Ralink UBoot Version: 4.3.0.0                
-------------------------------------------- 
ASIC 7628_MP (Port5<->None)                  
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit                       
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Apr 21 2017  Time:20:28:08
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 
                                                 
 ##### The CPU freq = 580 MHZ #### 
 estimate memory size =64 Mbytes   
RESET MT7628 PHY!!!!!!          
continue to starting system.                                                                                                                                                                                                    0 
disable switch phyport...                                                                                                                                                                                                        
                         
3: System Boot system code via Flash.(0xbc020000)
do_bootm:argc=2, addr=0xbc020000                 
## Booting image at bc020000 ...
   Uncompressing Kernel Image ... LZMA ERROR 1 - must RESET board to recover
[04040C0E][04040C0D]                                                        
DDR Calibration DQS reg = 00008889
                                  

U-Boot 1.1.3 (Apr 21 2017 - 20:28:08)
                                     
Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb8000
******************************    
Software System Reset Occurred
******************************
flash manufacture id: ef, device id 40 17
find flash: W25Q64BV                     
============================================ 
Ralink UBoot Version: 4.3.0.0                
-------------------------------------------- 
ASIC 7628_MP (Port5<->None)                  
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit                       
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Apr 21 2017  Time:20:28:08
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 
                                                 
 ##### The CPU freq = 580 MHZ #### 
 estimate memory size =64 Mbytes   
RESET MT7628 PHY!!! 0           
TODO, Read MAC Address from Flash
                                 
switch BootType:
                
4: System Enter Boot Command Line Interface.
                                            
U-Boot 1.1.3 (Apr 21 2017 - 20:28:08)
MT7628 # printenv                    
bootcmd=tftp
bootdelay=1 
baudrate=115200
ethaddr="00:0A:EB:13:09:69"
ipaddr=192.168.0.2         
serverip=192.168.0.225
stdin=serial          
stdout=serial
stderr=serial
             
Environment size: 152/4092 bytes
MT7628 # ?                      
?       - alias for 'help'
base    - print or set address offset
bootm   - boot application image from memory
bootp   - boot image via network using BootP/TFTP protocol
coninfo - print console devices and information           
cp      - memory copy                          
crc32   - checksum calculation
erase   - erase SPI FLASH memory
go      - start application at address 'addr'
help    - print online help                  
loadb   - load binary file over serial line (kermit mode)
loop    - infinite loop on address range                 
md      - memory display                
mm      - memory modify (auto-incrementing)
mtest   - simple RAM test                  
nm      - memory modify (constant address)
printenv- print environment variables     
rarpboot- boot image via network using RARP/TFTP protocol
reset   - Perform RESET of the CPU                       
rf      - read/write rf register  
saveenv - save environment variables to persistent storage
setenv  - set environment variables                       
spi     - spi command              
tftpboot- boot image via network using TFTP protocol
version - print monitor version

#28

Ok,then you can try tftpboot just to see default memory adress.
Copy it and then use tftpboot memory-adress filename

That will load the image over TFTP to RAM and then you simply bootm memory-adress

Off course,use OpenWRT image


#29

Using tftpboot, I can read that the destination address is 0x80100000. Either copying the data from this adress to 0xbcc020000, or attempting to bootm directly, results in the same boot loop.

MT7628 # bootm 0x80100000    
do_bootm:argc=2, addr=0x80100000
## Booting image at 80100000 ...
   Uncompressing Kernel Image ... LZMA ERROR 1 - must RESET board to recover

#30

No,you got it wrong.
You need to use tftpboot 0x80100000 image name
to load the image over TFTP
And then you use bootm 0x80100000

Off course,image needs to be initramfs


#31

Here we go.

flash manufacture id: ef, device id 40 17
find flash: W25Q64BV                     
============================================ 
Ralink UBoot Version: 4.3.0.0                
-------------------------------------------- 
ASIC 7628_MP (Port5<->None)                  
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit                       
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Apr 21 2017  Time:20:28:08
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 
                                                 
 ##### The CPU freq = 580 MHZ #### 
 estimate memory size =64 Mbytes   
RESET MT7628 PHY!!! 0           
TODO, Read MAC Address from Flash
                                 
switch BootType:
                
4: System Enter Boot Command Line Interface.
                                            
U-Boot 1.1.3 (Apr 21 2017 - 20:28:08)
MT7628 # tftpboot 0x80100000 openwrt-ramips-mt76x8-tl-wr802n-v4-initramfs-kernel.bin

 netboot_common, argc= 3 
                         
 NetTxPacket = 0x83FE7700 
                          
 KSEG1ADDR(NetTxPacket) = 0xA3FE7700 
                                     
 NetLoop,call eth_halt ! 
                         
 NetLoop,call eth_init ! 
Trying Eth0 (10/100-M)   
                      
 Waitting for RX_DMA_BUSY status Start... done
                                              

 ETH_STATE_ACTIVE!! 
TFTP from server 192.168.0.225; our IP address is 192.168.0.2
Filename 'openwrt-ramips-mt76x8-tl-wr802n-v4-initramfs-kernel.bin'.
                                                                   
 TIMEOUT_COUNT=10,Load address: 0x80100000
Loading: Got ARP REPLY, set server/gtwy eth addr (2c:41:38:0d:6f:a9)
Got it                                                              
#################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ########################################                         
done                                             
Bytes transferred = 3531487 (35e2df hex)
NetBootFileXferSize= 0035e2df           
MT7628 # bootm 0x80100000    
do_bootm:argc=2, addr=0x80100000
## Booting image at 80100000 ...
   Uncompressing Kernel Image ... LZMA ERROR 1 - must RESET board to recover
[04040C0E][04040C0C]                                                        
DDR Calibration DQS reg = 00008889
                                  

U-Boot 1.1.3 (Apr 21 2017 - 20:28:08)
                                     
Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb8000
******************************    
Software System Reset Occurred
******************************

Btw i'm on IRC (#openwrt @ freenode) if we need some more synchroneous communication mean.


#32

Hm,that error usually happens when that address is not actually correct.
Most likely TP-Link did not bother to change it.
Converted to kbytes it points to 2098176,I am pretty sure the device does not have that much ram.

You can try OpenWRT TFTP image but only if you have backup of the flash,otherwise you risk bricking.


#33

I have a brand new wr802n v4 that boots the stock firmware; I can access a shell on it when it has booted. Maybe I can use it to determine the real addresses ? What do you think?


#34

Well,you need to determine where is the start of RAM adressed


#35

Ok, I managed to flash the stock firmware, thanks to PaulFertser on IRC.

So, first, the image from tplink contains the uboot bootloader, so you have to remove it, for example using
dd if=TL-WR802Nv4_EU_0.9.1_3.16_up_boot[170421-rel74156].bin of=tplink.bin skip=256 bs=512
(the offset is 0x20000)

Then, you use tftpboot to put it on the device. Using the "erase linux" command, then the "cp.linux", then the "bootm 0xbc020000" command, you can flash the stock firmware.

Now, back at works concerning the openwrt port.

Rémy


#36

Great.
Does stock firmware accept image for 802N v4?


#37

I also have a WR802Nv4, although mine is the US version. Is there anything I can do to help?


#38

I'll avoid trying to flash it from the web interface, and only try from the uboot console. Using tftpboot, and bootm at the address 0x80100000, I still get a "Uncompressing Kernel Image ... LZMA ERROR 1 - must RESET board to recover" message.

What's fun is that using the openwrt-ramips-mt76x8-tl-wr802n-v4-squashfs-tftp-recovery.bin, the Uncompressing Kernel Image part actually works, but it just hangs there after the Starting kernel ... message.

MT7628 # bootm 0x80100000    
do_bootm:argc=2, addr=0x80100000
## Booting image at 80100000 ...
    Uncompressing Kernel Image ... OK
 No initrd                           
 ## Transferring control to Linux (at address 00000000) ...
 ## Giving linux memsize in MB, 64                         
                             
 Starting kernel ...

#39

Again,0x80100000 is not the correct address.
And you cant use tftp image for loading it from RAM?
You can only use initramfs image for that purpose


#40

Well, then, I can't do anything.

When using tftpboot, it says it's putting the image at 0x80100000.

Reading the memory on the openwrt at this address, i get the exact same data at first, that what I get with hexdumping the initramfs, so, I think it's the good address

hexdump -C test.bin|head -n 20: https://ptpb.pw/xmIB.txt

On the openwrt box: https://ptpb.pw/U_IL.txt


#41

Ok, so, finally, I managed to put openwrt in there.

SUCCESS.

0x80100000 was exactly the place it were putting the data, in ram; problem is this data (the initramfs) was being overwritten by the uncompressed initramfs during boot, resulting in the LZMA ERROR 1.

Asking tftpboot to move it later in the ram memory first (I took 0x80100000 + 12*1000*1000 = 0x80C71B00 as a base address), then booting from this address gives a functional openwrt.

MT7628 # tftpboot 0x80C71B00                                     

 netboot_common, argc= 2 
                         
 KSEG1ADDR(NetTxPacket) = 0xA3FE7700 
                                     
 NetLoop,call eth_halt ! 
                         
 NetLoop,call eth_init ! 
Trying Eth0 (10/100-M)   
                      
 ETH_STATE_ACTIVE!! 
*** Warning: no boot file name; using 'test.bin'
TFTP from server 192.168.0.225; our IP address is 192.168.0.2
Filename 'test.bin'.                                         
                    
 TIMEOUT_COUNT=10,Load address: 0x80c71b00
Loading: Got ARP REQUEST, return our IP   
Got ARP REQUEST, return our IP         
Got ARP REQUEST, return our IP
Got ARP REPLY, set server/gtwy eth addr (2c:41:38:0d:6f:a9)
Got it                                                     
#################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ########################################                         
done                                             
Bytes transferred = 3531487 (35e2df hex)
NetBootFileXferSize= 0035e2df           
MT7628 # md 0x80C71B00       
80c71b00: 00000003 2e726576 302e3220 ffffff00    ....ver. 2.0....
80c71b10: ffffffff ffffffff ffffffff ffffffff    ................
80c71b20: ffffffff ffffffff ffffffff ffffffff    ................
80c71b30: ffffffff 04000208 01000000 04000000    ................
80c71b40: 1b6bca02 8ec2162c e9b6d217 ac572c3e    ..k.,.......>,W.
80c71b50: 00000000 ffffffff ffffffff ffffffff    ................
80c71b60: ffffffff ffffffff 80000000 80000000    ................
80c71b70: 00007a00 00020000 dfe03500 ffffffff    .z.......5......
80c71b80: ffffffff 00000000 00000000 0001aa55    ............U...
80c71b90: 000000a5 ffffffff ffffffff ffffffff    ................
80c71ba0: ffffffff ffffffff ffffffff ffffffff    ................
80c71bb0: ffffffff ffffffff ffffffff ffffffff    ................
80c71bc0: ffffffff ffffffff ffffffff ffffffff    ................
80c71bd0: ffffffff ffffffff ffffffff ffffffff    ................
80c71be0: ffffffff ffffffff ffffffff ffffffff    ................
80c71bf0: ffffffff ffffffff ffffffff ffffffff    ................
MT7628 # bootm 0x80C71B00                                        
do_bootm:argc=2, addr=0x80c71b00
## Booting image at 80c71b00 ...
   Uncompressing Kernel Image ... OK
No initrd                           
## Transferring control to Linux (at address 80000000) ...
## Giving linux memsize in MB, 64                         
                                 
Starting kernel ...
                   
[    0.000000] Linux version 4.9.73 (robimarko@Builder) (gcc version 6.3.0 (OpenWrt GCC 6.3.0 r5705-88a2cff) ) #0 Tue Jan 9 20:14:18 2018
[    0.000000] Board has DDR2
[    0.000000] Analog PMU set to hw control
[    0.000000] Digital PMU set to hw control
[    0.000000] SoC Type: MediaTek MT7628AN ver:1 eco:2
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019655 (MIPS 24KEc)
[    0.000000] MIPS: machine is TP-Link TL-WR802N v4
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Writing ErrCtl register=00067cc0
[    0.000000] Readback ErrCtl register=00067cc0
[    0.000000] Memory: 58392K/65536K available (3114K kernel code, 158K rwdata, 752K rodata, 2240K init, 209K bss, 7144K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:256
[    0.000000] intc: using register map from devicetree
[    0.000000] CPU Clock: 580MHz
[    0.000000] clocksource_probe: no matching clocksources found
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6590553264 ns
[    0.000010] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405115902ns
[    0.007528] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.070040] pid_max: default: 32768 minimum: 301
[    0.074624] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.080963] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.093969] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.103460] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.109378] pinctrl core: initialized pinctrl subsystem
[    0.115045] NET: Registered protocol family 16
[    0.138833] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.144550] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.150104] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.159138] clocksource: Switched to clocksource MIPS
[    0.165168] NET: Registered protocol family 2
[    0.170301] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.176993] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.183176] TCP: Hash tables configured (established 1024 bind 1024)
[    0.189376] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.194974] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.201310] NET: Registered protocol family 1
[    2.569148] random: fast init done
[    3.174428] Crashlog allocated RAM at address 0x3f00000
[    3.180615] workingset: timestamp_bits=30 max_order=14 bucket_order=0
[    3.194688] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    3.200306] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    3.278480] io scheduler noop registered
[    3.282273] io scheduler deadline registered (default)
[    3.287919] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    3.295230] console [ttyS0] disabled
[    3.298662] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 28, base_baud = 2500000) is a 16550A
[    3.307442] console [ttyS0] enabled
[    3.307442] console [ttyS0] enabled
[    3.314435] bootconsole [early0] disabled
[    3.314435] bootconsole [early0] disabled
[    3.323666] spi-mt7621 10000b00.spi: sys_freq: 193333333
[    3.332717] m25p80 spi32766.0: using chunked io (size=32)
[    3.338207] m25p80 spi32766.0: s25fl064k (8192 Kbytes)
[    3.343506] 4 ofpart partitions found on MTD device spi32766.0
[    3.349433] Creating 4 MTD partitions on "spi32766.0":
[    3.354652] 0x000000000000-0x000000020000 : "boot"
[    3.361234] 0x000000020000-0x0000007c0000 : "firmware"
[    3.416204] 2 tplink-fw partitions found on MTD device firmware
[    3.422252] 0x000000020000-0x00000011750f : "kernel"
[    3.428873] 0x000000160000-0x0000007c0000 : "rootfs"
[    3.435762] mtd: device 3 (rootfs) set to be root filesystem
[    3.442122] 1 squashfs-split partitions found on MTD device rootfs
[    3.448412] 0x0000004b0000-0x0000007c0000 : "rootfs_data"
[    3.455545] 0x0000007c0000-0x0000007d0000 : "config"
[    3.462498] 0x0000007d0000-0x000000800000 : "factory"
[    3.470093] libphy: Fixed MDIO Bus: probed
[    3.483286] rt3050-esw 10110000.esw: link changed 0x00
[    3.491026] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5
[    3.501014] NET: Registered protocol family 10
[    3.508509] NET: Registered protocol family 17
[    3.513150] 8021q: 802.1Q VLAN Support v1.8
[    3.531570] Freeing unused kernel memory: 2240K
[    3.536174] This architecture does not have kernel memory protection.
[    3.556745] init: Console is alive
[    3.560611] init: - watchdog -
[    3.584348] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    3.595889] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    3.613757] init: - preinit -
[    3.759909] rt3050-esw 10110000.esw: link changed 0x00
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    6.956724] procd: - early -
[    6.960543] procd: - watchdog -
[    7.525199] procd: - watchdog -
[    7.528665] procd: - ubus -
[    7.583068] procd: - init -
Please press Enter to activate this console.
[    7.759379] kmodloader: loading kernel modules from /etc/modules.d/*
[    7.769897] ip6_tables: (C) 2000-2006 Netfilter Core Team
[    7.786477] Loading modules backported from Linux version wt-2017-11-01-0-gfe248fc2c180
[    7.794669] Backport generated by backports.git v4.14-rc2-1-31-g86cf0e5d
[    7.804627] ip_tables: (C) 2000-2006 Netfilter Core Team
[    7.818333] nf_conntrack version 0.5.0 (1024 buckets, 4096 max)
[    7.875476] rt3050-esw 10110000.esw: link changed 0x01
[    7.883925] xt_time: kernel timezone is -0000
[    7.943819] mt76_wmac 10300000.wmac: ASIC revision: 76280001
[    7.953749] mt76_wmac 10300000.wmac: Firmware Version: _e2_mp
[    7.959658] mt76_wmac 10300000.wmac: Build Time: 20150211175503
[    7.979167] firmware init done
[    8.174921] PPP generic driver version 2.4.2
[    8.185820] NET: Registered protocol family 24
[    8.201247] kmodloader: done loading kernel modules from /etc/modules.d/*
[   16.590931] br-lan: port 1(eth0) entered blocking state
[   16.596247] br-lan: port 1(eth0) entered disabled state
[   16.602057] device eth0 entered promiscuous mode
[   16.635055] br-lan: port 1(eth0) entered blocking state
[   16.640430] br-lan: port 1(eth0) entered forwarding state
[   16.646114] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   17.609187] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[  104.289039] rt3050-esw 10110000.esw: link changed 0x00
[  125.319201] random: crng init done
BusyBox v1.27.2 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r5705-88a2cff
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/#