This is a mirror of discontinued 'WikiDevi'. Enjoy!
TP-LINK TL-MR6400 V5.2
TP-LINK TL-MR6400 V5.2
Availability: 2021
Amazon image
ASINs
B07RM95YFC (13px, On Amazon, On CCC)
B016ZWXYXG (13px, On Amazon, On CCC)
multiple revisions of this device, use caution
Type: wireless router
Power: 9 VDC, 0.85 A
Connector type: barrel
CPU1: MediaTek MT7628NN (580 MHz)
FLA1: 8 MiB8,388,608 B <br />65,536 Kib <br />8,192 KiB <br />64 Mib <br />0.00781 GiB <br /> (Winbond W25Q64JVSIQ)
RAM1: 64 MiB67,108,864 B <br />524,288 Kib <br />65,536 KiB <br />512 Mib <br />0.0625 GiB <br /> (ESMT M14D5121632A)
Expansion IFs: none specified
Serial: yes, 4-pin header, (115200 8N1)
WI1 chip1: MediaTek MT7628NN
WI1 802dot11 protocols: bgn
WI1 MIMO config: 2x2:2
WI1 antenna connector: soldered
ETH chip1: MediaTek MT7628NN
Switch: MediaTek MT7628NN
LAN speed: 10/100
LAN ports: 4
WAN speed: 10/100
WAN ports: 1
bgn
Stock bootloader: U-Boot:1.1.3 Ralink UBoot 4.3.0.0
Stock FW OS: Linux 2.6.36
Third party firmware supported: OpenWrt
Flags: 4G LTE modem
Default SSID: TP-LINK_XXXX (41 addl. devices)
Default IP address: 192.168.1.1
the IP 192.168.1.1 is used by 1171 additional devices
of which 95 are TP-LINK devices
CPU1 brand | WI1 chip1 brand | WI1 chip2 brand | |
---|---|---|---|
TP-LINK TL-MR6400 V1 | Qualcomm Atheros | Qualcomm Atheros | |
TP-LINK TL-MR6400 V4 | MediaTek | MediaTek | |
TP-LINK TL-MR6400 V5 | MediaTek | MediaTek | |
TP-LINK TL-MR6400 V5.2 | MediaTek | MediaTek |
For a list of all currently documented MediaTek chipsets with specifications, see MediaTek.
Images
Serial
LTE modem
LE.UM.3.4.1.r1-01800-8x09.0-9-g2f4a74c (hostname: mdm9607)
Chips:
- Qualcomm MDM9207 - CPU, 3G/4G modem
- ESMT FM6BD2G1GA - 256M NAND Flash (x8) + mobile 128M DDR2 SDRAM (x32)
- PMD9607 Power IC
- 7219M-41, WTR2965 Radio IC
lsusb output (LTE modem) |
---|
$ lsusb -v -d 05c6: Bus 001 Device 002: ID 05c6:9025 Android Android Device Descriptor: bLength 18 bDescriptorType 1 bcdUSB 2.00 bDeviceClass 0 bDeviceSubClass 0 bDeviceProtocol 0 bMaxPacketSize0 64 idVendor 0x05c6 idProduct 0x9025 bcdDevice 3.18 iManufacturer 1 Android iProduct 2 Android iSerial 3 ffffffff bNumConfigurations 1 Configuration Descriptor: bLength 9 bDescriptorType 2 wTotalLength 0x017b bNumInterfaces 9 bConfigurationValue 1 iConfiguration 0 bmAttributes 0xa0 (Bus Powered) Remote Wakeup MaxPower 500mA Interface Descriptor: bLength 9 bDescriptorType 4 bInterfaceNumber 0 bAlternateSetting 0 bNumEndpoints 2 bInterfaceClass 255 bInterfaceSubClass 255 bInterfaceProtocol 255 iInterface 0 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x81 EP 1 IN bmAttributes 2 Transfer Type Bulk Synch Type None Usage Type Data wMaxPacketSize 0x0200 1x 512 bytes bInterval 0 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x01 EP 1 OUT bmAttributes 2 Transfer Type Bulk Synch Type None Usage Type Data wMaxPacketSize 0x0200 1x 512 bytes bInterval 0 Interface Descriptor: bLength 9 bDescriptorType 4 bInterfaceNumber 1 bAlternateSetting 0 bNumEndpoints 2 bInterfaceClass 255 bInterfaceSubClass 66 bInterfaceProtocol 1 iInterface 6 ADB Interface Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x02 EP 2 OUT bmAttributes 2 Transfer Type Bulk Synch Type None Usage Type Data wMaxPacketSize 0x0200 1x 512 bytes bInterval 0 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x82 EP 2 IN bmAttributes 2 Transfer Type Bulk Synch Type None Usage Type Data wMaxPacketSize 0x0200 1x 512 bytes bInterval 0 Interface Descriptor: bLength 9 bDescriptorType 4 bInterfaceNumber 2 bAlternateSetting 0 bNumEndpoints 3 bInterfaceClass 255 bInterfaceSubClass 0 bInterfaceProtocol 0 iInterface 0 ** UNRECOGNIZED: 05 24 00 10 01 ** UNRECOGNIZED: 05 24 01 00 00 ** UNRECOGNIZED: 04 24 02 02 ** UNRECOGNIZED: 05 24 06 00 00 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x84 EP 4 IN bmAttributes 3 Transfer Type Interrupt Synch Type None Usage Type Data wMaxPacketSize 0x000a 1x 10 bytes bInterval 9 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x83 EP 3 IN bmAttributes 2 Transfer Type Bulk Synch Type None Usage Type Data wMaxPacketSize 0x0200 1x 512 bytes bInterval 0 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x03 EP 3 OUT bmAttributes 2 Transfer Type Bulk Synch Type None Usage Type Data wMaxPacketSize 0x0200 1x 512 bytes bInterval 0 Interface Descriptor: bLength 9 bDescriptorType 4 bInterfaceNumber 3 bAlternateSetting 0 bNumEndpoints 3 bInterfaceClass 255 bInterfaceSubClass 0 bInterfaceProtocol 0 iInterface 0 ** UNRECOGNIZED: 05 24 00 10 01 ** UNRECOGNIZED: 05 24 01 00 00 ** UNRECOGNIZED: 04 24 02 02 ** UNRECOGNIZED: 05 24 06 00 00 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x86 EP 6 IN bmAttributes 3 Transfer Type Interrupt Synch Type None Usage Type Data wMaxPacketSize 0x000a 1x 10 bytes bInterval 9 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x85 EP 5 IN bmAttributes 2 Transfer Type Bulk Synch Type None Usage Type Data wMaxPacketSize 0x0200 1x 512 bytes bInterval 0 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x04 EP 4 OUT bmAttributes 2 Transfer Type Bulk Synch Type None Usage Type Data wMaxPacketSize 0x0200 1x 512 bytes bInterval 0 Interface Descriptor: bLength 9 bDescriptorType 4 bInterfaceNumber 4 bAlternateSetting 0 bNumEndpoints 3 bInterfaceClass 255 bInterfaceSubClass 255 bInterfaceProtocol 255 iInterface 0 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x88 EP 8 IN bmAttributes 3 Transfer Type Interrupt Synch Type None Usage Type Data wMaxPacketSize 0x0008 1x 8 bytes bInterval 9 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x87 EP 7 IN bmAttributes 2 Transfer Type Bulk Synch Type None Usage Type Data wMaxPacketSize 0x0200 1x 512 bytes bInterval 0 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x05 EP 5 OUT bmAttributes 2 Transfer Type Bulk Synch Type None Usage Type Data wMaxPacketSize 0x0200 1x 512 bytes bInterval 0 Interface Descriptor: bLength 9 bDescriptorType 4 bInterfaceNumber 5 bAlternateSetting 0 bNumEndpoints 2 bInterfaceClass 8 bInterfaceSubClass 6 bInterfaceProtocol 80 iInterface 4 Mass Storage Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x89 EP 9 IN bmAttributes 2 Transfer Type Bulk Synch Type None Usage Type Data wMaxPacketSize 0x0200 1x 512 bytes bInterval 0 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x06 EP 6 OUT bmAttributes 2 Transfer Type Bulk Synch Type None Usage Type Data wMaxPacketSize 0x0200 1x 512 bytes bInterval 1 Interface Association: bLength 8 bDescriptorType 11 bFirstInterface 6 bInterfaceCount 3 bFunctionClass 1 bFunctionSubClass 0 bFunctionProtocol 0 iFunction 0 Interface Descriptor: bLength 9 bDescriptorType 4 bInterfaceNumber 6 bAlternateSetting 0 bNumEndpoints 0 bInterfaceClass 1 bInterfaceSubClass 1 bInterfaceProtocol 0 iInterface 9 AC Interface AudioControl Interface Descriptor: bLength 10 bDescriptorType 36 bDescriptorSubtype 1 (HEADER) bcdADC 1.00 wTotalLength 0x0034 bInCollection 2 baInterfaceNr(0) 7 baInterfaceNr(1) 8 AudioControl Interface Descriptor: bLength 12 bDescriptorType 36 bDescriptorSubtype 2 (INPUT_TERMINAL) bTerminalID 1 wTerminalType 0x0201 Microphone bAssocTerminal 2 bNrChannels 1 wChannelConfig 0x0003 Left Front (L) Right Front (R) iChannelNames 0 iTerminal 0 AudioControl Interface Descriptor: bLength 9 bDescriptorType 36 bDescriptorSubtype 3 (OUTPUT_TERMINAL) bTerminalID 2 wTerminalType 0x0101 USB Streaming bAssocTerminal 1 bSourceID 1 iTerminal 0 AudioControl Interface Descriptor: bLength 12 bDescriptorType 36 bDescriptorSubtype 2 (INPUT_TERMINAL) bTerminalID 3 wTerminalType 0x0101 USB Streaming bAssocTerminal 4 bNrChannels 1 wChannelConfig 0x0003 Left Front (L) Right Front (R) iChannelNames 11 Channels iTerminal 10 Input terminal AudioControl Interface Descriptor: bLength 9 bDescriptorType 36 bDescriptorSubtype 3 (OUTPUT_TERMINAL) bTerminalID 4 wTerminalType 0x0301 Speaker bAssocTerminal 3 bSourceID 3 iTerminal 13 Output terminal Interface Descriptor: bLength 9 bDescriptorType 4 bInterfaceNumber 7 bAlternateSetting 0 bNumEndpoints 0 bInterfaceClass 1 bInterfaceSubClass 2 bInterfaceProtocol 0 iInterface 0 Interface Descriptor: bLength 9 bDescriptorType 4 bInterfaceNumber 7 bAlternateSetting 1 bNumEndpoints 1 bInterfaceClass 1 bInterfaceSubClass 2 bInterfaceProtocol 0 iInterface 0 AudioStreaming Interface Descriptor: bLength 7 bDescriptorType 36 bDescriptorSubtype 1 (AS_GENERAL) bTerminalLink 2 bDelay 1 frames wFormatTag 0x0001 PCM AudioStreaming Interface Descriptor: bLength 11 bDescriptorType 36 bDescriptorSubtype 2 (FORMAT_TYPE) bFormatType 1 (FORMAT_TYPE_I) bNrChannels 1 bSubframeSize 2 bBitResolution 16 bSamFreqType 1 Discrete tSamFreq[ 0] 8000 Endpoint Descriptor: bLength 9 bDescriptorType 5 bEndpointAddress 0x8a EP 10 IN bmAttributes 5 Transfer Type Isochronous Synch Type Asynchronous Usage Type Data wMaxPacketSize 0x0010 1x 16 bytes bInterval 4 bRefresh 0 bSynchAddress 0 AudioStreaming Endpoint Descriptor: bLength 7 bDescriptorType 37 bDescriptorSubtype 1 (EP_GENERAL) bmAttributes 0x01 Sampling Frequency bLockDelayUnits 1 Milliseconds wLockDelay 0x0001 Interface Descriptor: bLength 9 bDescriptorType 4 bInterfaceNumber 8 bAlternateSetting 0 bNumEndpoints 0 bInterfaceClass 1 bInterfaceSubClass 2 bInterfaceProtocol 0 iInterface 14 AS Interface Interface Descriptor: bLength 9 bDescriptorType 4 bInterfaceNumber 8 bAlternateSetting 1 bNumEndpoints 1 bInterfaceClass 1 bInterfaceSubClass 2 bInterfaceProtocol 0 iInterface 15 AS Interface AudioStreaming Interface Descriptor: bLength 7 bDescriptorType 36 bDescriptorSubtype 1 (AS_GENERAL) bTerminalLink 3 bDelay 1 frames wFormatTag 0x0001 PCM AudioStreaming Interface Descriptor: bLength 11 bDescriptorType 36 bDescriptorSubtype 2 (FORMAT_TYPE) bFormatType 1 (FORMAT_TYPE_I) bNrChannels 1 bSubframeSize 2 bBitResolution 16 bSamFreqType 1 Discrete tSamFreq[ 0] 8000 Endpoint Descriptor: bLength 9 bDescriptorType 5 bEndpointAddress 0x07 EP 7 OUT bmAttributes 9 Transfer Type Isochronous Synch Type Adaptive Usage Type Data wMaxPacketSize 0x0010 1x 16 bytes bInterval 4 bRefresh 0 bSynchAddress 0 AudioStreaming Endpoint Descriptor: bLength 7 bDescriptorType 37 bDescriptorSubtype 1 (EP_GENERAL) bmAttributes 0x01 Sampling Frequency bLockDelayUnits 1 Milliseconds wLockDelay 0x0001 Device Qualifier (for other device speed): bLength 10 bDescriptorType 6 bcdUSB 2.00 bDeviceClass 0 bDeviceSubClass 0 bDeviceProtocol 0 bMaxPacketSize0 64 bNumConfigurations 1 can't get debug descriptor: Resource temporarily unavailable Device Status: 0x0000 (Bus Powered) |
OEM firmware
Serial console login - admin:1234
OEM Boot log (+ cpuinfo, meminfo, netstat, busybox, etc output) |
---|
## [05010B0F][05010C0B][8A880000][25243937][00252437] DU Setting Cal Done U-Boot 1.1.3 (Jan 15 2021 - 17:08:37) Board: Ralink APSoC DRAM: 64 MB relocate_code Pointer at: 83fb4000 gpiomode1 55154404. gpiomode2 05550555. ######GPIO CTRL 0 for GPIO 0~31 OUTPUT tmp(0x00000030)##### ######GPIO CTRL 1 for GPIO 32~64 OUTPUT tmp(0x00000f80)##### ######GPIO CTRL 1 for GPIO 32~64 INPUT tmp(0x00000f80)##### flash manufacture id: ef, device id 40 17 spi device id: ef 40 17 0 80 (40170080) find flash: W25Q64BV RALINK_GPIOMODE_REG_1(0xb0000060) old=0x55154404 new=0x55154404 RALINK_GPIO_CTRL_32_63(0xb0000604) old=0xf80 new=0xf90 RALINK_GPIO_DATA_32_63(0xb0000624) old=0x6f5f new=0x6f4f ============================================ Ralink UBoot Version: 4.3.0.0 -------------------------------------------- ASIC 7628_MP (Port5<->None) DRAM component: 512 Mbits DDR, width 16 DRAM bus: 16 bit Total memory: 64 MBytes Flash component: SPI Flash Date:Jan 15 2021 Time:17:08:37 ============================================ icache: sets:512, ways:4, linesz:32 ,total:65536 dcache: sets:256, ways:4, linesz:32 ,total:32768 ##### The CPU freq = 580 MHZ #### estimate memory size =64 Mbytes RESET MT7628 PHY!!!!!! continue to starting system. ### 0 disable switch phyport... 3: System Boot system code via Flash.(0xbc020000) do_bootm:argc=2, addr=0xbc020000 ## Booting image at bc020000 ... Uncompressing Kernel Image ... OK No initrd ## Transferring control to Linux (at address 8000c150) ... ## Giving linux memsize in MB, 64 Starting kernel ... Linux version 2.6.36 (tp-link@Sohoidev) (gcc version 4.6.3 (Buildroot 2012.11.1) ) #1 Fri Jan 15 17:12:03 CST 2021 The CPU feqenuce set to 575 MHz MIPS CPU sleep mode enabled. CPU revision is: 00019655 (MIPS 24Kc) Software DMA cache coherency Determined physical RAM map: memory: 04000000 @ 00000000 (usable) Initrd not found or empty - disabling initrd Zone PFN ranges: Normal 0x00000000 -> 0x00004000 Movable zone start PFN for each node early_node_map[1] active PFN ranges 0: 0x00000000 -> 0x00004000 Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256 Kernel command line: console=ttyS1,115200 root=/dev/mtdblock2 rootfstype=squashfs init=/sbin/init PID hash table entries: 256 (order: -2, 1024 bytes) Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) Primary instruction cache 64kB, VIPT, , 4-waylinesize 32 bytes. Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes Writing ErrCtl register=0003f5f0 Readback ErrCtl register=0003f5f0 Memory: 61036k/65536k available (2920k kernel code, 4500k reserved, 544k data, 184k init, 0k highmem) NR_IRQS:128 console [ttyS1] enabled Calibrating delay loop... 386.04 BogoMIPS (lpj=772096) pid_max: default: 4096 minimum: 301 Mount-cache hash table entries: 512 NET: Registered protocol family 16 RALINK_GPIOMODE = 55154404 RALINK_GPIOMODE = 55144404 ***** Xtal 40MHz ***** start PCIe register access RALINK_RSTCTRL = 2400000 RALINK_CLKCFG1 = fdbfffc0 *************** MT7628 PCIe RC mode ************* PCIE0 no card, disable it(RST&CLK) bio: create slab <bio-0> at 0 usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb Switching to clocksource Ralink Systick timer NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 2048 (order: 2, 16384 bytes) TCP bind hash table entries: 2048 (order: 1, 8192 bytes) TCP: Hash tables configured (established 2048 bind 2048) TCP reno registered NET: Registered protocol family 1 RT3xxx EHCI/OHCI init. squashfs: version 4.0 (2009/01/31) Phillip Lougher fuse init (API version 7.15) msgmni has been set to 119 io scheduler noop registered io scheduler deadline registered (default) Ralink gpio driver initialized i2cdrv_major = 218 Serial: 8250/16550 driver, 2 ports, IRQ sharing enabled serial8250: ttyS0 at MMIO 0x10000d00 (irq = 21) is a 16550A serial8250: ttyS1 at MMIO 0x10000c00 (irq = 20) is a 16550A create tplink/console_ctl create tplink/console_ctl done brd: module loaded flash manufacture id: ef, device id 40 17 W25Q64BV(ef 40170000 flash_version = 1) (8192 Kbytes) mtd .name = raspi, .size = 0x00800000 (8M) .erasesize = 0x00010000 (64K) .numeraseregions = 0 Creating 6 MTD partitions on "raspi": 0x000000000000-0x000000020000 : "boot" 0x000000020000-0x000000160000 : "kernel" 0x000000160000-0x0000007d0000 : "rootfs" mtd: partition "rootfs" set to be root filesystem 0x0000007d0000-0x0000007e0000 : "config" 0x0000007e0000-0x0000007f0000 : "romfile" 0x0000007f0000-0x000000800000 : "radio" Register flash device:flash0 PPP generic driver version 2.4.2 PPP MPPE Compression module registered NET: Registered protocol family 24 PPTP driver version 0.8.5 tun: Universal TUN/TAP device driver, 1.6 tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com> ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver FM_OUT value: u4FmOut = 0(0x00000000) FM_OUT value: u4FmOut = 149(0x00000095) FM detection done! loop = 1 SR calibration value u1SrCalVal = 5 rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controller rt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 1 rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x101c0000 rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00 hub 1-0:1.0: USB hub found hub 1-0:1.0: 1 port detected ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver rt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controller rt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 2 rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x101c1000 hub 2-0:1.0: USB hub found hub 2-0:1.0: 1 port detected Mirror/redirect action on u32 classifier Actions configured Netfilter messages via NETLINK v0.30. nf_conntrack version 0.5.0 (953 buckets, 3812 max) GRE over IPv4 demultiplexor driver gre: can't add protocol GRE over IPv4 tunneling driver ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Linux TCP cubic registered NET: Registered protocol family 10 ip6_tables: (C) 2000-2006 Netfilter Core Team IPv6 over IPv4 tunneling driver NET: Registered protocol family 17 NET: Registered protocol family 15 Ebtables v2.0 registered 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> VFS: Mounted root (squashfs filesystem) readonly on device 31:2. Freeing unused kernel memory: 184k freed starting pid 35, tty '': '/etc/init.d/rcS' cp: can't stat '/etc/SingleSKU_FCC.dat': No such file or directory SCSI subsystem initialized insmod: can't insert '/lib/modules/kmdir/kernel/drivers/usb/core/usbcore.ko': No such file or directory Started WatchDog Timer. Ralink APSoC Hardware Watchdog Timer Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. insmod: can't insert '/lib/modules/kmdir/kernel/drivers/usb/host/ifxusb_host.ko': No such file or directory rdm_major = 253 spiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6 Read MAC from flash(0x7EF100) ffffffc0-06-ffffffc3-ffffffe1-ffffff81-28 GMAC1_MAC_ADRH -- : 0x0000c006 GMAC1_MAC_ADRL -- : 0xc3ffffff Ralink APSoC Ethernet Driver Initilization. v3.1 256 rx/tx descriptors allocated, mtu = 1500! spiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6 Read MAC from flash(0x7EF100) ffffffc0-06-ffffffc3-ffffffe1-ffffff81-28 GMAC1_MAC_ADRH -- : 0x0000c006 GMAC1_MAC_ADRL -- : 0xc3ffffff PROC INIT OK! usbcore: registered new interface driver cdc_wdm dns_init domain_name:tplinkmodem.net Backtrace parameters (ver: 0.9 build time: Jan 15 2021 17:13:36): ---------------------------------------------------------------------- regbtsig: enable to hook signals. =1 sigmask: signals mask to be hooked. =0x60000688 maxdepth: calltrace depth. =16 showregs: enable to show regs. =0 showstack: enable to show stack. =0 showallstack: enable to show all stacks. =0 showmaps: enable to show maps. =0 reboot: enable to reboot when cos/httpd exit unusual. =0 showgroup: enable to show each thread's backtrace. =0 testcos: enable to hook more signals for cos. =1 ---------------------------------------------------------------------- L2TP core driver, V2.0 PPPoL2TP kernel driver, V2.0 Please press Enter to activate this console. [err] syslogd[main --1001] syslogd : syslogd_init [ dm_readFile ] 2042: can not open xml file /var/tmp/pc/reduced_data_model.xml!, about to open file /etc/reduced_data_model.xml spiflash_ioctl_read, Read from 0x007d0000 length 0x10000, ret 0, retlen 0x10000 spiflash_ioctl_read, Read from 0x007d0000 length 0x100, ret 0, retlen 0x100 [ dm_loadCfg ] 2411: software version is not match, in config, version = 0 [ dm_loadCfg ] 2504: currSwRevision = 55aa0100 currSwRevision = 0 [ dm_readFile ] 2042: can not open xml file /var/tmp/pc/default_config.xml!, about to open file /etc/default_config.xml [ parseConfigNode ] 551: Meet unrecognized object node "PhDDNSCfg", skip the node [ parseConfigNode ] 556: Meet unrecognized parameter node "PhDDNSCfg", skip the node [ parseConfigNode ] 551: Meet unrecognized object node "X_TP_WDSBridge", skip the node [ parseConfigNode ] 556: Meet unrecognized parameter node "X_TP_PreSharedKey", skip the node [ parseConfigNode ] 551: Meet unrecognized object node "WLANSyncConfig", skip the node [ parseConfigNode ] 556: Meet unrecognized parameter node "WLANSyncConfig", skip the node [ parseConfigNode ] 551: Meet unrecognized object node "X_TP_IPv6Cfg", skip the node usbcore: registered new interface driver qmi_wwan usbcore: registered new interface driver usbserial USB Serial support registered for generic usbcore: registered new interface driver usbserial_generic usbserial: USB Serial Driver core [ prepareForQmi ] 062: wait for lte to recognize count:0 [ prepareForQmi ] 062: wait for lte to recognize count:1 [ prepareForQmi ] 062: wait for lte to recognize count:2 [ prepareForQmi ] 062: wait for lte to recognize count:3 [ prepareForQmi ] 062: wait for lte to recognize count:4 [ prepareForQmi ] 062: wait for lte to recognize count:5 [ prepareForQmi ] 062: wait for lte to recognize count:6 [ prepareForQmi ] 062: wait for lte to recognize count:7 [ prepareForQmi ] 062: wait for lte to recognize count:8 [ prepareForQmi ] 062: wait for lte to recognize count:9 [ prepareForQmi ] 062: wait for lte to recognize count:10 [ prepareForQmi ] 062: wait for lte to recognize count:11 [ prepareForQmi ] 062: wait for lte to recognize count:12 usb 1-1: new high speed USB device using rt3xxx-ehci and address 2 [zc] qmi_wwan_bind: in [zc] change dtr 1 spiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6 Init mac c0-06-c3-ff-ff-ff qmi_wwan: probe of 1-1:1.0 failed with error -22 usbserial_generic 1-1:1.0: generic converter detected usb 1-1: generic converter now attached to ttyUSB0 [zc] qmi_wwan_bind: in [zc] change dtr 1 [ prepareForQmi ] 062: wait for lte to recognize count:13 [ prepareForQmi ] 062: wait for lte to recognize count:14 spiflash_ioctl_read, Read from 0x007ef500 length 0x29, ret 0, retlen 0x29 spiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6 spiflash_ioctl_read, Read from 0x007ef200 length 0x4, ret 0, retlen 0x4 spiflash_ioctl_read, Read from 0x007ef700 length 0x18, ret 0, retlen 0x18 spiflash_ioctl_read, Read from 0x007ef300 length 0x29, ret 0, retlen 0x29 spiflash_ioctl_read, Read from 0x007ef400 length 0x29, ret 0, retlen 0x29 spiflash_ioctl_read, Read from 0x007ef800 length 0x48, ret 0, retlen 0x48 read model:spiflash_ioctl_read, Read from 0x007ef900 length 0x20, ret 0, retlen 0x20 spiflash_ioctl_read, Read from 0x00020000 length 0x200, ret 0, retlen 0x200 spiflash_ioctl_read, Read from 0x007ef700 length 0x18, ret 0, retlen 0x18 spiflash_ioctl_read, Read from 0x007ef300 length 0x29, ret 0, retlen 0x29 spiflash_ioctl_read, Read from 0x007ef400 length 0x29, ret 0, retlen 0x29 spiflash_ioctl_read, Read from 0x007ef800 length 0x48, ret 0, retlen 0x48 read model:spiflash_ioctl_read, Read from 0x007ef900 length 0x20, ret 0, retlen 0x20 spiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6 22 ERROR: Post event to MOBILE server failed, errno = 2 (No such file or directory). 22 ERROR: Client communication with server failed. [ rsl_getWanLteLinkCfgObj ] 2660: Fail to get lte module status... [ rsl_getObj ] 1265: perror:1 [ rsl_getNextObj ] 1413: perror:1 [err] syslogd[syslogd_msg_process_thread --881] begin to lost!, msg = ERROR: Post event to MOBILE server failed, errno = 2 (No such file or directory). sendto /var/tmp/7 msg 2001 error No such file or directory ,pid 87 [ ntpc ] 979: Get time zone, g_timeZone = 720 Raeth v3.1 (Tasklet,SkbRecycle) phy_tx_ring = 0x031fa000, tx_ring = 0xa31fa000 phy_rx_ring0 = 0x031fb000, rx_ring0 = 0xa31fb000 [fe_sw_init:4982]rt305x_esw_init. disable switch phyport... GMAC1_MAC_ADRH -- : 0x0000c006 GMAC1_MAC_ADRL -- : 0xc3ffffff RT305x_ESW: Link Status Changed /bin/sh: can't create /proc/tplink/eth_vlan: nonexistent directory ioctl: No such device brctl: bridge br0: Invalid argument set if eth0.1 to *not wan dev device eth0.1 entered promiscuous mode device eth0 entered promiscuous mode br0: port 1(eth0.1) entering forwarding state br0: port 1(eth0.1) entering forwarding state set if eth0.2 to *not wan dev device eth0.2 entered promiscuous mode br0: port 2(eth0.2) entering forwarding state br0: port 2(eth0.2) entering forwarding state set if eth0.3 to *not wan dev device eth0.3 entered promiscuous mode br0: port 3(eth0.3) entering forwarding state br0: port 3(eth0.3) entering forwarding state set if eth0.4 to *not wan dev device eth0.4 entered promiscuous mode br0: port 4(eth0.4) entering forwarding state br0: port 4(eth0.4) entering forwarding state [ vlan_addLanPortsIntoBridge ] 550: add lan Port 255 from br0 brctl: bridge br0: Device or resource busy brctl: bridge br0: Device or resource busy brctl: bridge br0: Device or resource busy [ rsl_initVlanObj ] 993: +++++++++++++rsl_initVlanObj done! ra0 no private ioctls. MT7628--> === pAd = c0b52000, size = 1071264 === <-- RTMPAllocAdapterBlock, Status=0 MT7628-->RtmpChipOpsHook(494): Not support for HIF_MT yet! MT7628-->mt7628_init()--> MT7628-->mt7628_init(FW(8a00), HW(8a01), CHIPID(7628)) MT7628-->e2.bin mt7628_init(1143)::(2), pChipCap->fw_len(64736) MT7628-->mt_bcn_buf_init(218): Not support for HIF_MT yet! MT7628--><--mt7628_init() 1538352023 ERROR: Post event to MOBILE server failed, errno = 2 (No such file or directory). 1538352023 ERROR: Client communication with server failed. [ oal_wlan_ra_lteCoexistence ] 7757: Fail to get lte module status... [ oal_wlan_ra_lteCoexistence ] 7831: AutoChannelSkipList : Interface doesn't accept private ioctl... set (sht:pAd->ApBootFlag = TRUE 8BE2): Network iMT7628-->s down InterfacTX_BCN DESC a32a8000 size = 320 e doesn't acceptMT7628--> private ioctl..RX[0] DESC a32ac000 size = 4096 . set (8BE2): NMT7628-->etwork is down RX[1] DESC a32ad000 size = 2048 [ oal_wlan_ra_lteCoexistence ] 7868: AutoChannelSkipList = 12;13 MT7628-->cfg_mode=9 MT7628-->cfg_mode=9 MT7628-->wmode_band_equal(): Band Equal! MT7628-->AndesSendCmdMsg: Could not send in band command due to diable fRTMP_ADAPTER_MCU_SEND_IN_BAND_CMD MT7628-->APSDCapable[0]=1 MT7628-->APSDCapable[1]=1 MT7628-->APSDCapable[2]=1 MT7628-->APSDCapable[3]=1 MT7628-->APSDCapable[4]=1 MT7628-->APSDCapable[5]=1 MT7628-->APSDCapable[6]=1 MT7628-->APSDCapable[7]=1 MT7628-->APSDCapable[8]=1 MT7628-->APSDCapable[9]=1 MT7628-->APSDCapable[10]=1 MT7628-->APSDCapable[11]=1 MT7628-->APSDCapable[12]=1 MT7628-->APSDCapable[13]=1 MT7628-->APSDCapable[14]=1 MT7628-->APSDCapable[15]=1 MT7628-->Key1Str is Invalid key length(0) or Type(0) MT7628-->Key1Str is Invalid key length(0) or Type(0) MT7628-->Key2Str is Invalid key length(0) or Type(0) MT7628-->Key2Str is Invalid key length(0) or Type(0) MT7628-->Key3Str is Invalid key length(0) or Type(0) MT7628-->Key3Str is Invalid key length(0) or Type(0) MT7628-->Key4Str is Invalid key length(0) or Type(0) MT7628-->Key4Str is Invalid key length(0) or Type(0) spiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6 Init mac c0-06-c3-ff-ff-ff qmi_wwan: probe of 1-1:1.1 failed with error -22 qmi_wwan 1-1:1.2: bogus CDC Union: master=0, slave=0 qmi_wwan: probe of 1-1:1.2 failed with error -1 qmi_wwan 1-1:1.3: bogus CDC Union: master=0, slave=0 qmi_wwan: probe of 1-1:1.3 failed with error -1 MT7628-->load fw image from fw_header_image MT7628-->AndesMTLoadFwMethod1(2264)::pChipCap->fw_len(64736) MT7628-->FW Version:1MT7628--> MT7628-->FW Build Date:20170411104110MT7628--> MT7628-->CmdAddressLenReq:(ret = 0) MT7628-->CmdFwStartReq: override = 1, address = 1048576 MT7628-->CmdStartDLRsp: WiFI FW Download Success qmi_wwan 1-1:1.4: cdc-wdm0: USB WDM device [zc] qmi_wwan_bind: in [zc] change dtr 1 MT7628-->MtAsicDMASchedulerInit(): DMA Scheduler Mode=0(LMAC) efuse_probe: efuse = 10000012 MT7628-->RtmpChipOpsEepromHook::e2p_type=2, inf_Type=4 MT7628-->RtmpEepromGetDefault::e2p_dafault=2 MT7628-->RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 2 MT7628-->NVM is FLASH mode MT7628-->1. Phy Mode = 14 exec! spiflash_ioctl_read, Read from 0x007f0000 length 0x400, ret 0, retlen 0x400 eeFlashId = 0x7628! spiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6 Init mac c0-06-c3-ff-ff-ff LTE has booted, tell cos to start qmuxd and mobile [ qmiReconnectChangedHandler ] 516: receive qmi connect msg! MT7628-->Country Region from e2p = ffff tssi_1_target_pwr_g_band = 32 MT7628-->2. Phy Mode = 14 MT7628-->3. Phy Mode = 14 MT7628-->NICInitPwrPinCfg(11): Not support for HIF_MT yet! MT7628-->NICInitializeAsic(651): Not support rtmp_mac_sys_reset () for HIF_MT yet! MT7628-->mt_mac_init()--> MT7628-->MtAsicInitMac()--> MT7628-->mt7628_init_mac_cr()--> MT7628-->MtAsicSetMacMaxLen(1277): Set the Max RxPktLen=450! MT7628--><--mt_mac_init() MT7628--> WTBL Segment 1 info: MT7628--> MemBaseAddr/FID:0x28000/0 MT7628--> EntrySize/Cnt:32/128 MT7628--> WTBL Segment 2 info: MT7628--> MemBaseAddr/FID:0x40000/0 MT7628--> EntrySize/Cnt:64/128 MT7628--> WTBL Segment 3 info: MT7628--> MemBaseAddr/FID:0x42000/64 MT7628--> EntrySize/Cnt:64/128 MT7628--> WTBL Segment 4 info: MT7628--> MemBaseAddr/FID:0x44000/128 MT7628--> EntrySize/Cnt:32/128 MT7628-->AntCfgInit(2978): Not support for HIF_MT yet! MT7628-->MCS Set = ff ff 00 00 01 MT7628-->MtAsicSetChBusyStat(861): Not support for HIF_MT yet! umount: can't forcibly umount /tmp/udisk: Invalid argument [ qmiReconnectChangedHandler ] 522: mount /tmp/udisk open DNS error: No such file or directory [ oal_sys_getOldTZInfo ] 854: Open TZ file error! * daemon not running. starting it now on port 5037 * * daemon started successfully * * daemon not running. starting it now on port 5037 * cannot bind 'tcp:5037' ADB server didn't ACK * failed to start daemon * error: cannot connect to daemon MT7628-->[PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0 MT7628-->[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0 mtk_band_steering_netlink_init 245 band steering netlink init ok MT7628-->[PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0 mtk_band_steering_netlink_init 245 band steering netlink init ok MT7628-->MtAsicSetRalinkBurstMode(3143): Not support for HIF_MT yet! MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet! MT7628-->reload DPD from flash , 0x9F = [c000] doReload bit7[0] MT7628-->CmdLoadDPDDataFromFlash: Channel = 11, DoReload = 0 MT7628-->MtAsicSetTxPreamble(3122): Not support for HIF_MT yet! MT7628-->CmdSlotTimeSet:(ret = 0) MT7628-->MtAsicAddSharedKeyEntry(1344): Not support for HIF_MT yet! MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0 MT7628-->Main bssid = c0:06:c3:ff:ff:ff <==== rt28xx_init, Status=0 MT7628-->@@@ ed_monitor_init : ===> MT7628-->@@@ ed_monitor_init : <=== MT7628-->mt7628_set_ed_cca: TURN ON EDCCA mac 0x10618 = 0xd7c87d0f, EDCCA_Status=1 sht:pAd->ApBootFlag = FALSE MT7628-->WiFi Startup Cost (ra0): 4.000s scsi0 : usb-storage 1-1:1.5 [zc] qmi_wwan_bind: in [zc] change dtr 1 spiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6 Init mac c0-06-c3-ff-ff-ff qmi_wwan: probe of 1-1:1.6 failed with error -22 [zc] qmi_wwan_bind: in [zc] change dtr 1 MT7628-->AddTxSType: already registered TxSType (PID = 32, Format = 0 ##### mbss_cr_enable, BssId = 1 spiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6 Init mac c0-06-c3-ff-ff-ff qmi_wwan: probe of 1-1:1.7 failed with error -22 [zc] qmi_wwan_bind: in [zc] change dtr 1 spiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6 Init mac c0-06-c3-ff-ff-ff qmi_wwan: probe of 1-1:1.8 failed with error -22 MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0 MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet! MT7628-->[PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0 MT7628-->[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0 mtk_band_steering_netlink_init 245 band steering netlink init ok MT7628-->[PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0 mtk_band_steering_netlink_init 245 band steering netlink init ok MT7628-->MtAsicSetRalinkBurstMode(3143): Not support for HIF_MT yet! MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet! MT7628-->reload DPD from flash , 0x9F = [c000] doReload bit7[0] MT7628-->CmdLoadDPDDataFromFlash: Channel = 11, DoReload = 0 MT7628-->MtAsicSetTxPreamble(3122): Not support for HIF_MT yet! MT7628-->MtAsicAddSharedKeyEntry(1344): Not support for HIF_MT yet! MT7628-->AddTxSType: already registered TxSType (PID = 32, Format = 0 MT7628-->AddTxSType: already registered TxSType (PID = 33, Format = 0 MT7628-->AddTxSType: already registered TxSType (PID = 6, Format = 0 MT7628-->AddTxSType: already registered TxSType (PID = 8, Format = 0 MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0 MT7628-->Main bssid = c0:06:c3:ff:ff:ff MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0 MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet! MT7628-->[PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0 MT7628-->[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0 mtk_band_steering_netlink_init 245 band steering netlink init ok MT7628-->[PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0 mtk_band_steering_netlink_init 245 band steering netlink init ok MT7628-->MtAsicSetRalinkBurstMode(3143): Not support for HIF_MT yet! MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet! MT7628-->reload DPD from flash , 0x9F = [c000] doReload bit7[0] MT7628-->CmdLoadDPDDataFromFlash: Channel = 11, DoReload = 0 MT7628-->MtAsicSetTxPreamble(3122): Not support for HIF_MT yet! MT7628-->MtAsicAddSharedKeyEntry(1344): Not support for HIF_MT yet! MT7628-->AddTxSType: already registered TxSType (PID = 32, Format = 0 MT7628-->AddTxSType: already registered TxSType (PID = 33, Format = 0 MT7628-->AddTxSType: already registered TxSType (PID = 6, Format = 0 MT7628-->AddTxSType: already registered TxSType (PID = 8, Format = 0 MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0 MT7628-->Main bssid = c0:06:c3:ff:ff:ff MT7628-->Set_ed_chk_proc()::ed_chk=0 MT7628-->mt7628_set_ed_cca: TURN OFF EDCCA mac 0x10618 = 0xd7083f0f, EDCCA_Status=0 MT7628-->dutylv0 = 100, dutylv1 = 80, dutylv2 = 40, dutylv3 = 20, admiten = 1 MT7628-->Regdutylv0 = 0xfe, Regdutylv1 = 0xcb, Regdutylv2 = 0x65, Regdutylv3 = 0x32 MT7628-->set_thermal_protection_criteria_proc: high_en=1, high_thd = 130, low_en = 1, low_thd = 122, checktimer = 30 MT7628-->set_thermal_protection_criteria_proc: high_en=1, high_thd = 130, low_en = 1, low_thd = 122 [ oal_wlan_ra_set_thermal_protect ] 7900: set 2.4G thermal protect ok MT7628-->AddTxSType: already registered TxSType (PID = 32, Format = 0 device ra0 entered promiscuous mode br0: port 5(ra0) entering forwarding state br0: port 5(ra0) entering forwarding state device ra1 entered promiscuous mode Checking 2.4G caspiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2 l data... /bin/sh: wlNetlinkTool: not found scsi 0:0:0:0: Direct-Access Linux File-Stor Gadget 0318 PQ: 0 ANSI: 2 wscd: SSDP UDP PORT = 1900 sd 0:0:0:0: [sda] 143360 512-byte logical blocks: (73.4 MB/70.0 MiB) sd 0:0:0:0: [sda] Write Protect is off sd 0:0:0:0: [sda] Assuming drive cache: write through [ checkUdiskReadsd 0:0:0:0: [sda] Assuming drive cache: write through y ] 398: [cos] times:5, mount cmd:mount -t auto -o ro /dev/sda /tmp/udisk sda: sd 0:0:0:0: [sda] Assuming drive cache: write through sd 0:0:0:0: [sda] Attached SCSI removable disk FAT: utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! mount: mounting /dev/sdb on /tmp/udisk failed: No such device or address mount: mounting /dev/sdc on /tmp/udisk failed: No such device or address killall: flowstat: no process killed mmmInit():Total mem size=51364, addr=0x0x44f150. ************************************************************* *************************MMM TABLE DUMP********************** ------------------------------------------------------------- poolhead(40) poolnum dynamictimes chainhead poolend ------------------------------------------------------------- 0x44f150 8 0 (nil) 0x45b9f4 ------------------------------------------------------------- index poolhead(20) size blocks free usage ------------------------------------------------------------- 1 0x44f178 32 256 256 0 2 0x451590 64 128 128 0 3 0x4537a8 128 64 64 0 4 0x4558c0 256 32 32 0 5 0x457958 512 8 8 0 6 0x458990 1024 4 4 0 7 0x4599b8 2048 2 2 0 8 0x45a9d8 4096 1 1 0 ------------------------------------------------------------- index chainnode(16) magic length prev next ------------------------------------------------------------- (nil) ************************************************************* killall: mobile: no process killed killall: qmuxd: no process killed [ qmiReconnectChangedHandler ] 542: disconnect... LTE ip connection. ************************************************** ********************config dump******************* -------------------------------------------------- sef domain : n-deventry-gw.tplinkcloud.com sef port : 443 cloud svr default port : 443 default svr : n-devs-gw.tplinkcloud.com default port : 443 default valid time : 172800 heartbeat interval : 235000 request timeout : 5000 reconnect timewait max : 1024000 reconnect cachedsvr max times : 5 reconnect defaultsvr max times : 5 reconnect random time min : 2000 reconnect random time max : 256000 short connect interval : 259200000 max message number : 1000 max client number : 20 service file : /tmp/cloud_service.cfg cer file : /etc/cloud/2048_newroot.cer ssl verify CN : ssl verify time : 1 ************************************************** Mon Oct 1 00:00:27 UTC 2018 [ qmiReconnectChangedHandler ] 552: start qmuxd linux_qmi_qmux_io_pwr_up_init.c: Unable to open wakelock file = /sys/power/wake_lock, error [2:No such file or directory] qmuxd: linux_qmi_read_sysfs_config: couldn't open file /sys/module/f_rmnet/parameters/rmnet_ctl_chqmuxd: linux_qmi_read_sysfs_config: couldn't open /sys/module/rmnet/parameters/rmnet_ctl_chlinux_qmi_qmux_if_configure_port_ timeout: failed to open SMD timeout config=/sys/devices/virtual/smdpkt/cdc-wdm0/open_timeout errno [2:No such file or directory]linux_qmi_qmux_if_configure_port_timeout: failed to open SMD timeout config=/sys/devices/virtual/smdpkt/cdc- wdm0/open_timeout errno [2:No such file or directory]qmi_qmux_open_connection: connection is disabled for conn_id=1 qmuxd: opening connection for conn_id=1 [DATA6_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=2 qmuxd: opening connection for conn_id=2 [DATA7_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=3 qmuxd: opening connection for conn_id=3 [DATA8_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=4 qmuxd: opening connection for conn_id=4 [DATA9_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=5 qmuxd: opening connection for conn_id=5 [DATA12_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=6 qmuxd: opening connection for conn_id=6 [DATA13_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=7 qmuxd: opening connection for conn_id=7 [DATA14_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=9 qmuxd: opening connection for conn_id=9 [DATA15_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=10 qmuxd: opening connection for conn_id=10 [DATA16_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=11 qmuxd: opening connection for conn_id=11 [DATA17_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=21 qmuxd: opening connection for conn_id=21 [SDIO_DATA1_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=22 qmuxd: opening connection for conn_id=22 [SDIO_DATA2_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=23 qmuxd: opening connection for conn_id=23 [SDIO_DATA3_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=24 qmuxd: opening connection for conn_id=24 [SDIO_DATA4_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=25 qmuxd: opening connection for conn_id=25 [SDIO_DATA5_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=26 qmuxd: opening connection for conn_id=26 [SDIO_DATA6_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=27 qmuxd: opening connection for conn_id=27 [SDIO_DATA7_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=28 qmuxd: opening connection for conn_id=28 [SDIO_DATA8_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=29 qmuxd: opening connection for conn_id=29 [MDM_DATA1_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=30 qmuxd: opening connection for conn_id=30 [MDM_DATA2_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=31 qmuxd: opening connection for conn_id=31 [MDM_DATA3_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=32 qmuxd: opening connection for conn_id=32 [MDM_DATA4_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=33 qmuxd: opening connection for conn_id=33 [MDM_DATA5_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=34 qmuxd: opening connection for conn_id=34 [MDM_DATA6_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=35 qmuxd: opening connection for conn_id=35 [MDM_DATA7_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=36 qmuxd: opening connection for conn_id=36 [MDM_DATA8_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=48 qmuxd: opening connection for conn_id=48 [SMUX0] failed qmi_qmux_open_connection: connection is disabled for conn_id=49 qmuxd: opening connection for conn_id=49 [MDM2_DATA1_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=50 qmuxd: opening connection for conn_id=50 [MDM2_DATA2_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=51 qmuxd: opening connection for conn_id=51 [MDM2_DATA3_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=52 qmuxd: opening connection for conn_id=52 [MDM2_DATA4_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=53 qmuxd: opening connection for conn_id=53 [MDM2_DATA5_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=54 qmuxd: opening connection for conn_id=54 [MDM2_DATA6_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=55 qmuxd: opening connection for conn_id=55 [MDM2_DATA7_CNTL] failed qmi_qmux_open_connection: connection is disabled for conn_id=56 qmuxd: opening connection for conn_id=56 [MDM2_DATA8_CNTL] failed sendto /var/tmp/9 msg 2004 error No such file or directory ,pid 87 insmod: can't insert '/lib/modules/kmdir/kernel/drivers/net/tun.ko': No such file or directory insmod: can't insert '/lib/modules/kmdir/kernel/drivers/net/ppp_mppe.ko': No such file or directory [rsl_initWanLteIntfCfgObj 3596] init LTE module, set flowstat [enableDataLimit 0, enablePaymentDay 0, paymentDay 1, limitation 0, warningPercent 90] iptables: Bad rule (does a matching rule exist in that chain?). radvd starting [initProfileList 431] LTE Module: profile num [1], default profile [1], active profile [0] [initProfileList 433] DM: profile num [0], default profile [0], active profile [0] [oal_setLteModuleNetworkParam 3007] [band scan] band_support_mask: 1a0000800c5 [oal_setLteModuleNetworkParam 3008] [band scan] lte_category = 4. [oal_setLteModuleNetworkParam 3032] [band scan] now will set band :0x1a0000800c5. 1538352031 ERROR: Post event to MOBILE server failed, errno = 2 (No such file or directory). 1538352031 ERROR: Client communication with server failed. [ qmiReconnectChangedHandler ] 556: start mobile 2018-10-01 00:00:31.600|pid:0|level:0|src/cloud_https.c:131|main | - cloud https client start. ********************config dump******************* ----------------------status---------------------- processid : 438 ---------------------configure-------------------- loglevel : 3 verify host : n-device-api.tplinkcloud.com verify port : 0 verify path : /v1/validate post connect timeout : 20 post transfer timeout : 20 get connect timeout : 20 get transfer timeout : 20 session debug : off cer file : /etc/cloud/2048_newroot.cer cer type : ************************************************** /var/run/dhcp6c_wwan0.pid: No such file or directory [ qmiReconnectChangedHandler ] 560: killall flowstat 1538352032 ERROR: Init raw table success. killall: flowstat: no process killed [ qmiReconnectChangedHandler ] 562: start flowstat [ qmiReconnectChangedHandler ] 567: start qmuxd and mobile done. Query new SMS count success.1538352032 ERROR: New sms count is 0 1538352032 INFO: src/flowstat_main.c(18) main(): LTE flowstat process starts working! 1538352032 ERROR: Post event to MOBILE server failed, errno = 2 (No such file or directory). 1538352032 ERROR: Client communication with server failed. 1538352032 ERROR: src/flowstat_manage.c(77) flowstat_get_wwan_tx_rx_statistics(): Get Rx/Tx flow from qmi failed! 1538352032 ERROR: src/flowstat_manage.c(545) flowstat_start_timer(): +++flowstat: missCount:1 +++ [ getPidFromPidFile ] 112: Cann't open file: /var/run/zebra.pid. [ getPidFromPidFile ] 112: Cann't open file: /var/run/zebra.pid. [ getPidFromPidFile ] 112: Cann't open file: /var/run/ripd.pid. Generating key, this may take a while... 1538352033 USER: Mobile device manager (qmi) initialized OK. Init QMI services...... [ getPidFromPidFile ] 112: Cann't open file: /var/run/ripd.pid. Generating key, this may take a while... 1538352033 USER: Start get voice service object. 1538352033 USER: VOICE Service Object got. 1538352033 USER: VOICE QMI Client Init successfully, handle is 0x00490700. iptables: Bad rule (does a matching rule exist in that chain?). 1538352033 USER: Mobile device manager (qmi) initialized OK. iptables: Bad rule (does a matching rule exist in that chain?). iptables: Bad rule (does a matching rule exist in that chain?). nf_nat_rtsp v0.6.21 loading insmod: can't insert '/lib/modules/kmdir/kernel/net/nat/hw_nat/hw_nat.ko': No such file or directory iptables: Bad rule (does a matching rule exist in that chain?). ip6tables: Bad rule (does a matching rule exist in that chain?). ip6tables: Bad rule (does a matching rule exist in that chain?). enable switch phyport... Set: phy[0].reg[0] = 3900 Set: phy[1].reg[0] = 3900 Set: phy[2].reg[0] = 3900 Set: phy[3].reg[0] = 3900 Set: phy[4].reg[0] = 3900 Set: phy[0].reg[0] = 3300 Set: phy[1].reg[0] = 3300 Set: phy[2].reg[0] = 3300 Set: phy[3].reg[0] = 3300 Set: phy[4].reg[0] = 3300 resetMiiPortV over. Set: phy[0].reg[4] = 01e1 Set: phy[0].reg[0] = 3300 Set: phy[1].reg[4] = 01e1 Set: phy[1].reg[0] = 3300 Set: phy[2].reg[4] = 01e1 Set: phy[2].reg[0] = 3300 Set: phy[3].reg[4] = 01e1 Set: phy[3].reg[0] = 3300 Set: phy[4].reg[4] = 01e1 Set: phy[4].reg[0] = 3300 turn off flow control over. [ cos_init ] 550: Start ok, enable console input and output! pidof mobile > /var/tmp/tmppidof echo -1000 > /proc/517/oom_score_adj 1538352036 USER: Not registered, searching! Public key portion is: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQCAaLnayaG24kygsE+wjEIw69Oo60FctXmTvZMVmTcgin3U4OzFmQyz/ EgbLYHVrpMIfOHmHKezsMxyyyPqKqyoH9RqFWyCVX+QzjNf4ZNNf7Ed/f1j4PTDU/hIgLqOiQF2lZv1i9I2J8H2PH8qpGC/ GnAhtDH/VIhmYk9lbzvtaw== admin@TL-MR6400 Fingerprint: md5 4d:31:34:bd:6c:67:da:5a:19:f7:93:9b:b1:92:2e:e9 pidof qmuxd > /var/tmp/tmppidof echo -1000 > /proc/481/oom_score_adj pidof httpd > /var/tmp/tmppidof echo -1000 > /proc/474/oom_score_adj 1538352037 ERROR: 0x0000002F QMI_ERR_UNKNOWN 1538352037 ERROR: Failed to set the primary client (0). pidof dhcpd > /var/tmp/tmppidof 1538352037 ERROR: 0x00000034 QMI_ERR_DEVICE_NOT_READY 1538352037 ERROR: Failed to get smsc address (0). echo -1000 > /proc/505/oom_score_adj 1538352038 USER: The service status is limited. 1538352038 USER: Network type is WCDMA. /bin/sh: can't create /proc/tplink/led_4g+: nonexistent directory spiflash_ioctl_read, Read from 0x007ef600 length 0xf, ret 0, retlen 0xf Public key portion is: ssh-dss AAAAB3NzaC1kc3MAAACBAOt0cGiUn1GWl5npBoDPfDmsnWyA6E07tSyzR41atOUpdEagBXdPTIupXwAwAk/jDp43z7bHM87T6bFVw94N2Ab5dJzj VRmF194b16RgpBdIe7eCFqBt8utrAHYYk06veG/naAG5I8diXFc1TbkaJMTRL9l3Dzj5BgC7yBPGagQPAAAAFQDMC/dW93k/0CbwVVDHcMT/Oj4LcQAAAIBSH5T cWx70msaCH7q7cgZr2UX9sIMKCAPQL4Sy99Sj61fNL4ubRHKsiu+7GLJ0+e/pbN5GZAJZ8Rmleg1qj2NFLakMXq/i6uPdoPlOzq3RzX/CI95I3VPYo5+43taqgv Ys1YpLxfEH2Gq4EIUVpmZiN+Gep4v+fWQgImsKEB9c2gAAAIBxVkrbJOo0Ripj7xXCqMzvlvT1MsSk29fFIO1FWgIQAkFD2sEZo/Voie/0EUAOnBm13LlTtEUf MgTAEPAiP5IisrDyg2MC5XKCrwVnAXMTvtJIHOnikDiTcGFceEtHLZIExScpe8faTekY+voFRyzQJs8jpKGJE+Iir5RW83NQIw== admin@TL-MR6400 Fingerprint: md5 a3:3b:ee:e8:93:0a:14:39:21:88:3e:9e:48:cb:b2:0a open DNS error: No such file or directory Mon Oct 1 00:01:02 UTC 2018 Mon Oct 1 00:01:02 UTC 2018 starting pid 88, tty '': '/sbin/getty -L ttyS1 115200 vt100' TL-MR6400 login: admin Password: Oct 1 00:01:25 login[88]: root login on 'ttyS1' ~ # df Filesystem 1024-blocks Used Available Use% Mounted on /dev/root 6400 6400 0 100% / /dev/sda 70574 2590 67984 4% /tmp/udisk ~ # free total used free shared buffers Mem: 61220 29096 32124 0 1772 -/+ buffers: 27324 33896 Swap: 0 0 0 ~ # cat /proc/cpuinfo system type : MT7628 processor : 0 cpu model : MIPS 24Kc V5.5 BogoMIPS : 386.04 wait instruction : yes microsecond timers : yes tlb_entries : 32 extra interrupt vector : yes hardware watchpoint : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb] ASEs implemented : mips16 dsp shadow register sets : 1 core : 0 VCED exceptions : not available VCEI exceptions : not available ~ # ~ # QLog flowstat ping6 [ free poweroff [[ fuser pppd adb gen_key pptpctrl arping getty pptpd ash grep ps ated halt qmuxd ated_tp head radvd backupcfg httpd reboot basename ifconfig reg bcrelay igmpd ripd blkid init rm brctl insmod rmmod busybox ip route cat ip6tables rt2860apd cert_write ipcrm rtinicapd chmod ipcs scp cli iptables sed cloud-brd iqos-db-loader sh cloud_client iqos-db-parser sleep cloud_https iwconfig snmpd cmmsyslogc iwpriv ssl_test cmmsyslogd kill switch config-mii.sh killall systemd cos ln tail cp logger tar crypto_test login taskset cut ls tc cwmp lsmod tdpd date mbedtls_aes-128-ecb telnet df md5sum telnetd dhcp6c mii_mgr test dhcp6ctl mii_mgr_cl45 tftp dhcp6s mkdir tmpd dhcpc mldProxy top dhcpd mobile touch diagTool mobile_cli tr dnsProxy mount umount dropbear mpstat uname dropbearkey netstat unzip dropbearmulti noipdns upnpd dyndns npd6 uptime ebtables ntpc vconfig echo openvpn wportalctrl egrep ovpn_keyGen wscd env pfcached xl2tpd fgrep pidof xtables-multi find ping zebra ~ # #busybox BusyBox v1.23.2 (2021-01-15 17:13:42 CST) multi-call binary. BusyBox is copyrighted by many authors between 1998-2012. Licensed under GPLv2. See source distribution for detailed copyright notices. Usage: busybox [function [arguments]...] or: busybox --list or: function [arguments]... BusyBox is a multi-call binary that combines many common Unix utilities into a single executable. Most people will create a link to busybox for each function they wish to use and BusyBox will act like whatever it was invoked as. Currently defined functions: [, [[, arping, ash, basename, blkid, brctl, cat, chmod, cp, cut, date, df, echo, egrep, env, fgrep, find, free, fuser, getty, grep, halt, head, ifconfig, init, insmod, ipcrm, ipcs, kill, killall, linuxrc, ln, logger, login, ls, lsmod, md5sum, mkdir, mount, mpstat, netstat, pidof, ping, ping6, poweroff, ps, reboot, rm, rmmod, route, sed, sh, sleep, tail, tar, taskset, telnet, telnetd, test, tftp, top, touch, tr, umount, uname, unzip, uptime, vconfig ~ # ~ # netstat -atup Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 127.0.0.1:20002 0.0.0.0:* LISTEN 575/tmpd tcp 0 0 0.0.0.0:1900 0.0.0.0:* LISTEN 485/upnpd tcp 0 0 127.0.0.1:5037 0.0.0.0:* LISTEN 389/adb tcp 0 0 0.0.0.0:ssh 0.0.0.0:* LISTEN 700/dropbear tcp 0 0 :::http :::* LISTEN 474/httpd tcp 0 0 :::ssh :::* LISTEN 700/dropbear tcp 0 0 :::telnet :::* LISTEN 80/telnetd tcp 0 0 ::1:5531 :::* LISTEN 568/dhcp6c udp 0 0 127.0.0.1:52750 0.0.0.0:* 485/upnpd udp 0 0 0.0.0.0:20002 0.0.0.0:* 531/tdpd udp 0 0 0.0.0.0:40375 0.0.0.0:* 485/upnpd udp 0 0 0.0.0.0:bootps 0.0.0.0:* 505/dhcpd udp 0 0 0.0.0.0:1900 0.0.0.0:* 485/upnpd udp 0 0 :::dhcpv6-client :::* 568/dhcp6c ~ # |
See also
- TP-LINK TL-MR6400 V1 - TL-MR6400 V1
- TP-LINK TL-MR6400 V4 - TL-MR6400 V4