View source for Install OpenWRT BARRIER BREAKER on Swisscom Centro Grande Router

[[Category:howtos]]

=Overview=
Swisscom is sending this router to his customers with locked firmware. <br>
ADB is using a OS based on OpenWRT Kamikaze and you can buy Sourcode on Cdrom! Fuck You!!! <br>
So I decided to hack the Hardware and found a way to run the trunk version of OpenWRT on this device.<br>
<br>
I'm not a OpenWRT developper, so please forgive me for any mistakes I did to get it running.<br>
<br>
By the way: It's running without any error, but I have not tested all the Features

=Hardware=
I startet with this Information, but had no Idea what to flash and how to do it:<br>
http://wiki.openwrt.org/toh/adb/p.dg_av4202n

=Installation=
==prerequisites==
* USB to TTL cable: 
: http://dx.com/p/arduino-pl2303hx-to-usb-ttl-upload-download-wire-black-100cm-199553
* Some soldering on the serial port:
: http://wiki.openwrt.org/doc/hardware/port.serial
: http://wiki.openwrt.org/toh/adb/p.dg_av4202n#serial
: wire it: white=> pin1, red=pin3, green=pin5, black=pin2|4|6
* tftp server installation and serial connection (ubuntu 12.04):
<pre>
sudo su -
apt-get install tftpd-hpa screen
cd /var/lib/tftpboot
wget  http://downloads.openwrt.org/snapshots/trunk/brcm63xx/openwrt-96368MVWG-generic-squashfs-cfe.bin
cp openwrt-96368MVWG-generic-squashfs-cfe.bin bcm963xx_fs_kernel
chmod 644 bcm963xx_fs_kernel
/etc/init.d/tftpd-hpa restart
ifconfig eth0:9 192.168.1.100 netmask 255.255.255.0
# attach board eth0.1 to lan (second port, on the yellow block)
# plug usb to ttl cable
cd
screen -L /dev/ttyUSB0 115200,-parenb,-cstopb,cs8 #will generate a log file from session
# power on the router and press enter within 1 sec to get into CFE console
</pre>
==Configure Router and Install Firmware==
<pre>
CFE> help
Available commands:

testled             test led command
gpio                gpio set value
w                   Write the whole image start from beginning of the flash
e                   Erase [m]ain Image or [r]ecovery Image or [n]vram or [p]SI or 
r                   Run program from flash image or from host depend on [f/h] flag
p                   Print boot line and board parameter info
c                   Change booline parameters
f                   Write image to the flash 
i                   Erase persistent storage data
b                   Change board parameters
reset               Reset the board
flashimage          Flashes a compressed image after the bootloader.
help                Obtain help for CFE commands

For more information about a command, enter 'help command-name'
*** command status = 0



CFE> p
Board IP address                  : 192.168.1.1:ffffff00  
Host IP address                   : 192.168.1.100  
Gateway IP address                :   
Run from flash/host (f/h)         : f  
Default host run file name        : vmlinux  
Default host flash file name      : bcm963xx_fs_kernel  
Boot delay (0-9 seconds)          : 1  
Board Id (0-6)                    : 96368_Swiss_S1  
Number of MAC Addresses (1-32)    : 16  
Base MAC Address                  : 02:10:18:01:00:01  
PSI Size (1-64) KBytes            : 24  
Main Thread Number [0|1]          : 0  

*** command status = 0



CFE> b
Press:  <enter> to use current value
        '-' to go previous parameter
        '.' to clear the current value
        'x' to exit this command
96368VVW         ------- 0 
96368_SwissCom   ------- 1 
96368_Swiss_S1   ------- 2 
96368MVWG        ------- 3 
96368SV2         ------- 4 
96369PVG         ------- 5 
96368MBG         ------- 6 
Board Id (0-6)                    :  2  3
Number of MAC Addresses (1-32)    :  16  
Base MAC Address                  :  02:10:18:01:00:01  
PSI Size (1-64) KBytes            :  24  
Main Thread Number [0|1]          :  0  
-- writeNvramData --

Resetting board...

CFE version 1.0.37-102.6 [P2] for BCM96368  (32bit,SP,BE)
Build Date: mer set  2 17:48:26 CEST 2009 ( root@TiglioLinux )
Copyright (C) 2000-2008 Broadcom Corporation.

Parallel flash device: name AM29LV320MT, id 0x2201, size 16384KB
CPU type 0x2A031: 400MHz, Bus: 160MHz, Ref: 64MHz
CPU running TP0
Total memory: 67108864 bytes (64MB)
Boot Address 0xb8000000


Board IP address                  : 192.168.1.1:ffffff00  
Host IP address                   : 192.168.1.100  
Gateway IP address                :   
Run from flash/host (f/h)         : f  
Default host run file name        : vmlinux  
Default host flash file name      : bcm963xx_fs_kernel  
Boot delay (0-9 seconds)          : 1  
Board Id (0-6)                    : 96368MVWG  
Number of MAC Addresses (1-32)    : 16  
Base MAC Address                  : 02:10:18:01:00:01  
PSI Size (1-64) KBytes            : 24  
Main Thread Number [0|1]          : 0  

*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 1
web info: Waiting for connection on socket 0.
CFE> 



CFE> e m
Erasing Main Image (B8020000--B8C00000)



CFE> f
Loading 192.168.1.100:bcm963xx_fs_kernel ...
Finished loading 3276804 bytes
 Increasing ...1 fs add: BFC10100 kadd: BFC10100 flash_rootfs_start_off20000 - rootfsOffset :10000
 Increasing ...2 fs add: BFC20100 kadd: BFC20100
 BOOT_OFFSET : F8400000 
rootfsAddr : B8020100 kernelAddr : B8020100

Flashing root file system and kernel at 0xb8020000: 


Flashing newImgSize: 31FF04 

remaining to flash .......  00000004 

.
*** Image flash done *** !

Resetting board...

CFE version 1.0.37-102.6 [P2] for BCM96368  (32bit,SP,BE)
Build Date: mer set  2 17:48:26 CEST 2009 ( root@TiglioLinux )
Copyright (C) 2000-2008 Broadcom Corporation.

Parallel flash device: name AM29LV320MT, id 0x2201, size 16384KB
CPU type 0x2A031: 400MHz, Bus: 160MHz, Ref: 64MHz
CPU running TP0
Total memory: 67108864 bytes (64MB)
Boot Address 0xb8000000


Board IP address                  : 192.168.1.1:ffffff00  
Host IP address                   : 192.168.1.100  
Gateway IP address                :   
Run from flash/host (f/h)         : f  
Default host run file name        : vmlinux  
Default host flash file name      : bcm963xx_fs_kernel  
Boot delay (0-9 seconds)          : 1  
Board Id (0-6)                    : 96368MVWG  
Number of MAC Addresses (1-32)    : 16  
Base MAC Address                  : 02:10:18:01:00:01  
PSI Size (1-64) KBytes            : 24  
Main Thread Number [0|1]          : 0  

*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 0
Booting BRCM native image (0xb8020000) ...
Code Address: 0x80010000, Entry Address: 0x80010000
LZMA: Prossible old LZMA format, trying to decompress..
 Flash Checksum control skipped ...
Decompression OK!
Entry at 0x80010000
Closing network.
Disabling Switch ports.
Flushing Receive Buffers...
3 buffers found.
Closing DMA Channels.
Starting program at 0x80010000
[    0.000000] Linux version 3.10.21 (openwrt@snapon) (gcc version 4.6.4 (OpenWrt/Linaro GCC 4.6-2013.05 r38999) ) #1 Sat Dec 7 21:10:29 PST 2013
[    0.000000] Detected Broadcom 0x6368 CPU revision b2
[    0.000000] CPU frequency is 400 MHz
[    0.000000] 64MB of RAM installed
[    0.000000] registering 38 GPIOs
[    0.000000] board_bcm963xx: Boot address 0xb8000000
[    0.000000] board_bcm963xx: CFE version: 1.0.37-102.6
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU revision is: 0002a031 (Broadcom BMIPS4350)
[    0.000000] board_bcm963xx: board name: 96368MVWG
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x03ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x03ffffff]
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.
[    0.000000] Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line:  root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Memory: 61240k/65536k available (2440k kernel code, 4296k reserved, 704k data, 244k init, 0k highmem)
[    0.000000] NR_IRQS:128
[    0.000000] Calibrating delay loop... 397.82 BogoMIPS (lpj=795648)
[    0.032000] pid_max: default: 32768 minimum: 301
[    0.036000] Mount-cache hash table entries: 512
[    0.044000] NET: Registered protocol family 16
[    0.060000] registering PCI controller with io_map_base unset
[    0.064000] registering PCI controller with io_map_base unset
[    0.080000] bio: create slab <bio-0> at 0
[    0.088000] PCI host bridge to bus 0000:00
[    0.092000] pci_bus 0000:00: root bus resource [mem 0x30000000-0x37ffffff]
[    0.096000] pci_bus 0000:00: root bus resource [io  0x8000000-0x8007fff]
[    0.100000] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    0.116000] pci 0000:00:01.0: BAR 0: assigned [mem 0x30000000-0x30003fff]
[    0.120000] PCI host bridge to bus 0000:01
[    0.124000] pci_bus 0000:01: root bus resource [mem 0x38000000-0x3fffffff]
[    0.128000] pci_bus 0000:01: root bus resource [io  0x8008000-0x800ffff]
[    0.132000] pci_bus 0000:01: No busn resource found for root bus, will use [bus 01-ff]
[    0.136000] pci 0000:01:1e.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    0.140000] pci 0000:01:1e.0: BAR 10: assigned [mem 0x38000000-0x3fffffff]
[    0.144000] pci 0000:01:1e.0: BAR 7: assigned [io  0x8008000-0x80080ff]
[    0.148000] pci 0000:01:1e.0: BAR 8: assigned [io  0x8008400-0x80084ff]
[    0.152000] pci 0000:01:1e.0: CardBus bridge to [bus 02-05]
[    0.156000] pci 0000:01:1e.0:   bridge window [io  0x8008000-0x80080ff]
[    0.160000] pci 0000:01:1e.0:   bridge window [io  0x8008400-0x80084ff]
[    0.164000] pci 0000:01:1e.0:   bridge window [mem 0x38000000-0x3fffffff]
[    0.168000] PCI: Enabling device 0000:01:1e.0 (0000 -> 0003)
[    0.172000] Switching to clocksource MIPS
[    0.184000] PCI: Enabling device 0000:00:01.0 (0000 -> 0002)
[    0.212000] ssb: Found chip with id 0xA8D6, rev 0x00 and package 0x08
[    0.260000] ssb: Sonics Silicon Backplane found on PCI device 0000:00:01.0
[    0.268000] NET: Registered protocol family 2
[    0.276000] TCP established hash table entries: 512 (order: 0, 4096 bytes)
[    0.284000] TCP bind hash table entries: 512 (order: -1, 2048 bytes)
[    0.288000] TCP: Hash tables configured (established 512 bind 512)
[    0.296000] TCP: reno registered
[    0.300000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.304000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.312000] NET: Registered protocol family 1
[    0.320000] audit: initializing netlink socket (disabled)
[    0.328000] type=2000 audit(0.328:1): initialized
[    0.332000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.340000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.352000] msgmni has been set to 119
[    0.356000] io scheduler noop registered
[    0.360000] io scheduler deadline registered (default)
[    0.368000] bcm63xx_uart.0: ttyS0 at MMIO 0xb0000100 (irq = 10) is a bcm63xx_uart
[    0.376000] console [ttyS0] enabled, bootconsole disabled
[    0.376000] console [ttyS0] enabled, bootconsole disabled
[    0.388000] bcm63xx-rng bcm63xx-rng: registered RNG driver
[    0.400000] physmap platform flash device: 08000000 at 18000000
[    0.404000] physmap-flash.0: Found 1 x16 devices at 0x0 in 16-bit bank. Manufacturer ID 0x0000c2 Chip ID 0x00227e
[    0.416000] Amd/Fujitsu Extended Query Table at 0x0040
[    0.420000]   Amd/Fujitsu Extended Query version 1.3.
[    0.428000] number of CFI chips: 1
[    0.432000] bcm63xxpart: CFE boot tag found with version 6 and board type 96368MVWG
[    0.440000] bcm63xxpart: Partition 0 is CFE offset 0 and length 20000
[    0.444000] bcm63xxpart: Partition 1 is kernel offset 20100 and length 11ff00
[    0.452000] bcm63xxpart: Partition 2 is rootfs offset 140000 and length ea0000
[    0.460000] bcm63xxpart: Partition 3 is nvram offset fe0000 and length 20000
[    0.468000] bcm63xxpart: Partition 4 is linux offset 20000 and length fc0000
[    0.476000] bcm63xxpart: Spare partition is offset 340004 and length c9fffc
[    0.480000] 5 bcm63xxpart partitions found on MTD device physmap-flash.0
[    0.488000] Creating 5 MTD partitions on "physmap-flash.0":
[    0.496000] 0x000000000000-0x000000020000 : "CFE"
[    0.504000] 0x000000020100-0x000000140000 : "kernel"
[    0.508000] mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[    0.524000] 0x000000140000-0x000000fe0000 : "rootfs"
[    0.536000] mtd: device 2 (rootfs) set to be root filesystem
[    0.540000] mtd: partition "rootfs_data" created automatically, ofs=0x340000, len=0xca0000
[    0.548000] 0x000000340000-0x000000fe0000 : "rootfs_data"
[    0.560000] 0x000000fe0000-0x000001000000 : "nvram"
[    0.568000] 0x000000020000-0x000000fe0000 : "linux"
[    0.580000] bcm63xx-spi bcm63xx-spi: at 0xb0000800 (irq 9, FIFOs size 542)
[    0.632000] b53_common: found switch: BCM63xx, rev 0
[    0.640000] bcm63xx-wdt bcm63xx-wdt:  started, timer margin: 30 sec
[    0.652000] TCP: cubic registered
[    0.656000] NET: Registered protocol family 17
[    0.660000] Bridge firewalling registered
[    0.664000] 8021q: 802.1Q VLAN Support v1.8
[    0.684000] VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
[    0.696000] Freeing unused kernel memory: 244K (80323000 - 80360000)
procd: Console is alive
procd: - watchdog -
procd: - preinit -
ifconfig: SIOCGIFFLAGS: No such device
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    7.452000] Button Hotplug driver version 0.4.1
mount_root: jffs2 is not ready - EOF marker found
ifconfig: SIOCGIFFLAGS: No such device
procd: - early -
procd: - watchdog -
procd: - ubus -
procd: - init -
Please press Enter to activate this console.
[   11.560000] NET: Registered protocol family 10
[   11.600000] nf_conntrack version 0.5.0 (960 buckets, 3840 max)
[   11.620000] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   11.664000] Loading modules backported from Linux version master-2013-11-05-0-gafa3093
[   11.672000] Backport generated by backports.git backports-20130802-0-gdb67a3f
[   11.688000] ip_tables: (C) 2000-2006 Netfilter Core Team
[   11.784000] xt_time: kernel timezone is -0000
[   11.872000] cfg80211: Calling CRDA to update world regulatory domain
[   11.884000] cfg80211: World regulatory domain updated:
[   11.888000] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)
[   11.896000] cfg80211:   (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
[   11.904000] cfg80211:   (2457000 KHz - 2482000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
[   11.912000] cfg80211:   (2474000 KHz - 2494000 KHz @ 20000 KHz), (300 mBi, 2000 mBm)
[   11.920000] cfg80211:   (5170000 KHz - 5250000 KHz @ 80000 KHz), (300 mBi, 2000 mBm)
[   11.928000] cfg80211:   (5735000 KHz - 5835000 KHz @ 80000 KHz), (300 mBi, 2000 mBm)
[   11.936000] cfg80211:   (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm)
[   12.124000] PPP generic driver version 2.4.2
[   12.136000] NET: Registered protocol family 24
[   12.196000] b43-phy0: Broadcom 43222 WLAN found (core revision 16)
[   12.248000] b43-phy0: Found PHY: Analog 8, Type 4 (N), Revision 6
[   12.280000] Broadcom 43xx driver loaded [ Features: PNL ]
[   19.160000] bcm63xx_enetsw bcm63xx_enetsw.0: link UP on port2, 100Mbps, full-duplex
[   26.136000] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0
[   26.156000] jffs2_build_filesystem(): unlocking the mtd device... done.
[   26.160000] jffs2_build_filesystem(): erasing all blocks after the end marker... [   27.304000] bcm63xx_enetsw bcm63xx_enetsw.0: link UP on port2, 100Mbps, full-duplex
[   27.324000] device eth0.1 entered promiscuous mode
[   27.332000] device eth0 entered promiscuous mode
[   27.344000] br-lan: port 1(eth0.1) entered forwarding state
[   27.348000] br-lan: port 1(eth0.1) entered forwarding state
[   28.300000] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.1: link becomes ready
[   29.352000] br-lan: port 1(eth0.1) entered forwarding state
</pre>

*vi /etc/config-network
:configure internet access for package manager
 config interface 'lan'
        option ifname 'eth0.1'
        option type 'bridge'
        option proto 'static'
        option ipaddr '192.168.123.252'
        option netmask '255.255.255.0'
        option dns '192.168.123.50'
        option gateway '192.168.123.254'
        option ip6assign '60'
 
root@OpenWrt:/# /etc/init.d/network restart

root@OpenWrt:/# ping 192.168.123.254
</pre>

* install web gui

 root@OpenWrt:/# opkg update

 root@OpenWrt:/# opkg install luci

 root@OpenWrt:/# /etc/init.d/uhttpd enable

 root@OpenWrt:/# /etc/init.d/uhttpd start

* change root password
 root@OpenWrt:/# passwd
 Changing password for root
 New password: 
 Retype password: 
 Password for root changed by root

* now you can login with browser to web gui

=some interesting output=
<pre>
root@OpenWrt:/# cat /proc/mtd #############################
dev:    size   erasesize  name
mtd0: 00020000 00020000 "CFE"
mtd1: 0011ff00 00020000 "kernel"
mtd2: 00ea0000 00020000 "rootfs"
mtd3: 00ca0000 00020000 "rootfs_data"
mtd4: 00020000 00020000 "nvram"
mtd5: 00fc0000 00020000 "linux"

root@OpenWrt:/tmp/root# df ###############################
Filesystem           1K-blocks      Used Available Use% Mounted on
rootfs                   12928      1348     11580  10% /
/dev/root                 2048      2048         0 100% /rom
tmpfs                    30740      1052     29688   3% /tmp
tmpfs                    30740         8     30732   0% /tmp/root
tmpfs                      512         0       512   0% /dev
/dev/mtdblock3           12928      1348     11580  10% /overlay
overlayfs:/overlay       12928      1348     11580  10% /



root@OpenWrt:/tmp/root# free #############################
             total         used         free       shared      buffers
Mem:         61484        21260        40224            0         1688
-/+ buffers:              19572        41912
Swap:            0            0            0



# demesg #################################################
root@OpenWrt:~# dmesg
[    0.000000] Linux version 3.10.21 (openwrt@snapon) (gcc version 4.6.4 (OpenWrt/Linaro GCC 4.6-2013.05 r38999) ) #1 Sat Dec 7 21:10:29 PST 2013
[    0.000000] Detected Broadcom 0x6368 CPU revision b2
[    0.000000] CPU frequency is 400 MHz
[    0.000000] 64MB of RAM installed
[    0.000000] registering 38 GPIOs
[    0.000000] board_bcm963xx: Boot address 0xb8000000
[    0.000000] board_bcm963xx: CFE version: 1.0.37-102.6
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU revision is: 0002a031 (Broadcom BMIPS4350)
[    0.000000] board_bcm963xx: board name: 96368MVWG
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x03ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x03ffffff]
[    0.000000] On node 0 totalpages: 16384
[    0.000000] free_area_init_node: node 0, pgdat 8030cc20, node_mem_map 81000000
[    0.000000]   Normal zone: 128 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 16384 pages, LIFO batch:3
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.
[    0.000000] Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
[    0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[    0.000000] pcpu-alloc: [0] 0 
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line:  root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Memory: 61240k/65536k available (2440k kernel code, 4296k reserved, 704k data, 244k init, 0k highmem)
[    0.000000] NR_IRQS:128
[    0.028000] Calibrating delay loop... 397.82 BogoMIPS (lpj=795648)
[    0.032000] pid_max: default: 32768 minimum: 301
[    0.036000] Mount-cache hash table entries: 512
[    0.044000] NET: Registered protocol family 16
[    0.060000] registering PCI controller with io_map_base unset
[    0.064000] registering PCI controller with io_map_base unset
[    0.080000] bio: create slab <bio-0> at 0
[    0.088000] PCI host bridge to bus 0000:00
[    0.092000] pci_bus 0000:00: root bus resource [mem 0x30000000-0x37ffffff]
[    0.096000] pci_bus 0000:00: root bus resource [io  0x8000000-0x8007fff]
[    0.100000] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    0.104000] pci 0000:00:01.0: [14e4:a8d6] type 00 class 0x028000
[    0.104000] pci 0000:00:01.0: reg 10: [mem 0x00000000-0x00003fff]
[    0.116000] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 00
[    0.116000] pci 0000:00:01.0: BAR 0: assigned [mem 0x30000000-0x30003fff]
[    0.120000] PCI host bridge to bus 0000:01
[    0.124000] pci_bus 0000:01: root bus resource [mem 0x38000000-0x3fffffff]
[    0.128000] pci_bus 0000:01: root bus resource [io  0x8008000-0x800ffff]
[    0.132000] pci_bus 0000:01: No busn resource found for root bus, will use [bus 01-ff]
[    0.136000] pci 0000:01:1e.0: [14e4:6368] type 02 class 0x060700
[    0.136000] pci 0000:01:1e.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    0.140000] pci_bus 0000:02: busn_res: [bus 02-ff] end is updated to 05
[    0.140000] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 05
[    0.140000] pci 0000:01:1e.0: BAR 10: assigned [mem 0x38000000-0x3fffffff]
[    0.144000] pci 0000:01:1e.0: BAR 7: assigned [io  0x8008000-0x80080ff]
[    0.148000] pci 0000:01:1e.0: BAR 8: assigned [io  0x8008400-0x80084ff]
[    0.152000] pci 0000:01:1e.0: CardBus bridge to [bus 02-05]
[    0.156000] pci 0000:01:1e.0:   bridge window [io  0x8008000-0x80080ff]
[    0.160000] pci 0000:01:1e.0:   bridge window [io  0x8008400-0x80084ff]
[    0.164000] pci 0000:01:1e.0:   bridge window [mem 0x38000000-0x3fffffff]
[    0.168000] PCI: Enabling device 0000:01:1e.0 (0000 -> 0003)
[    0.172000] pci 0000:01:1e.0: setting latency timer to 64
[    0.172000] Switching to clocksource MIPS
[    0.184000] PCI: Enabling device 0000:00:01.0 (0000 -> 0002)
[    0.192000] b43-pci-bridge 0000:00:01.0: setting latency timer to 64
[    0.212000] ssb: Found chip with id 0xA8D6, rev 0x00 and package 0x08
[    0.220000] ssb: Core 0 found: ChipCommon (cc 0x800, rev 0x1E, vendor 0x4243)
[    0.220000] ssb: Core 1 found: IEEE 802.11 (cc 0x812, rev 0x10, vendor 0x4243)
[    0.220000] ssb: Core 2 found: PCI (cc 0x804, rev 0x0E, vendor 0x4243)
[    0.260000] ssb: Sonics Silicon Backplane found on PCI device 0000:00:01.0
[    0.268000] NET: Registered protocol family 2
[    0.276000] TCP established hash table entries: 512 (order: 0, 4096 bytes)
[    0.284000] TCP bind hash table entries: 512 (order: -1, 2048 bytes)
[    0.288000] TCP: Hash tables configured (established 512 bind 512)
[    0.296000] TCP: reno registered
[    0.300000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.304000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.312000] NET: Registered protocol family 1
[    0.316000] PCI: CLS 0 bytes, default 16
[    0.320000] audit: initializing netlink socket (disabled)
[    0.328000] type=2000 audit(0.328:1): initialized
[    0.332000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.340000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.352000] msgmni has been set to 119
[    0.356000] io scheduler noop registered
[    0.360000] io scheduler deadline registered (default)
[    0.368000] bcm63xx_uart.0: ttyS0 at MMIO 0xb0000100 (irq = 10) is a bcm63xx_uart
[    0.376000] console [ttyS0] enabled, bootconsole disabled
[    0.388000] bcm63xx-rng bcm63xx-rng: registered RNG driver
[    0.400000] physmap platform flash device: 08000000 at 18000000
[    0.404000] physmap-flash.0: Found 1 x16 devices at 0x0 in 16-bit bank. Manufacturer ID 0x0000c2 Chip ID 0x00227e
[    0.416000] physmap-flash.0: Found an alias at 0x1000000 for the chip at 0x0
[    0.416000] Amd/Fujitsu Extended Query Table at 0x0040
[    0.420000]   Amd/Fujitsu Extended Query version 1.3.
[    0.428000] number of CFI chips: 1
[    0.432000] bcm63xxpart: CFE boot tag found with version 6 and board type 96368MVWG
[    0.440000] bcm63xxpart: Partition 0 is CFE offset 0 and length 20000
[    0.444000] bcm63xxpart: Partition 1 is kernel offset 20100 and length 11ff00
[    0.452000] bcm63xxpart: Partition 2 is rootfs offset 140000 and length ea0000
[    0.460000] bcm63xxpart: Partition 3 is nvram offset fe0000 and length 20000
[    0.468000] bcm63xxpart: Partition 4 is linux offset 20000 and length fc0000
[    0.476000] bcm63xxpart: Spare partition is offset 340004 and length c9fffc
[    0.480000] 5 bcm63xxpart partitions found on MTD device physmap-flash.0
[    0.488000] Creating 5 MTD partitions on "physmap-flash.0":
[    0.496000] 0x000000000000-0x000000020000 : "CFE"
[    0.504000] 0x000000020100-0x000000140000 : "kernel"
[    0.508000] mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[    0.524000] 0x000000140000-0x000000fe0000 : "rootfs"
[    0.536000] mtd: device 2 (rootfs) set to be root filesystem
[    0.540000] mtd: partition "rootfs_data" created automatically, ofs=0x340000, len=0xca0000
[    0.548000] 0x000000340000-0x000000fe0000 : "rootfs_data"
[    0.560000] 0x000000fe0000-0x000001000000 : "nvram"
[    0.568000] 0x000000020000-0x000000fe0000 : "linux"
[    0.580000] bcm63xx-spi bcm63xx-spi: at 0xb0000800 (irq 9, FIFOs size 542)
[    0.632000] b53_common: found switch: BCM63xx, rev 0
[    0.640000] bcm63xx-wdt bcm63xx-wdt:  started, timer margin: 30 sec
[    0.652000] TCP: cubic registered
[    0.656000] NET: Registered protocol family 17
[    0.660000] Bridge firewalling registered
[    0.664000] 8021q: 802.1Q VLAN Support v1.8
[    0.684000] VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
[    0.696000] Freeing unused kernel memory: 244K (80323000 - 80360000)
[    7.452000] Button Hotplug driver version 0.4.1
[   11.560000] NET: Registered protocol family 10
[   11.600000] nf_conntrack version 0.5.0 (960 buckets, 3840 max)
[   11.620000] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   11.664000] Loading modules backported from Linux version master-2013-11-05-0-gafa3093
[   11.672000] Backport generated by backports.git backports-20130802-0-gdb67a3f
[   11.688000] ip_tables: (C) 2000-2006 Netfilter Core Team
[   11.784000] xt_time: kernel timezone is -0000
[   11.872000] cfg80211: Calling CRDA to update world regulatory domain
[   11.884000] cfg80211: World regulatory domain updated:
[   11.888000] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)
[   11.896000] cfg80211:   (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
[   11.904000] cfg80211:   (2457000 KHz - 2482000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
[   11.912000] cfg80211:   (2474000 KHz - 2494000 KHz @ 20000 KHz), (300 mBi, 2000 mBm)
[   11.920000] cfg80211:   (5170000 KHz - 5250000 KHz @ 80000 KHz), (300 mBi, 2000 mBm)
[   11.928000] cfg80211:   (5735000 KHz - 5835000 KHz @ 80000 KHz), (300 mBi, 2000 mBm)
[   11.936000] cfg80211:   (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm)
[   12.124000] PPP generic driver version 2.4.2
[   12.136000] NET: Registered protocol family 24
[   12.196000] b43-phy0: Broadcom 43222 WLAN found (core revision 16)
[   12.248000] b43-phy0: Found PHY: Analog 8, Type 4 (N), Revision 6
[   12.280000] Broadcom 43xx driver loaded [ Features: PNL ]
[   12.288000] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
[   19.160000] bcm63xx_enetsw bcm63xx_enetsw.0: link UP on port2, 100Mbps, full-duplex
[   26.136000] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0
[   26.156000] jffs2_build_filesystem(): unlocking the mtd device... done.
[   27.304000] bcm63xx_enetsw bcm63xx_enetsw.0: link UP on port2, 100Mbps, full-duplex
[   27.324000] device eth0.1 entered promiscuous mode
[   27.332000] device eth0 entered promiscuous mode
[   27.344000] br-lan: port 1(eth0.1) entered forwarding state
[   27.348000] br-lan: port 1(eth0.1) entered forwarding state
[   28.300000] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.1: link becomes ready
[   29.352000] br-lan: port 1(eth0.1) entered forwarding state
[   26.160000] jffs2_build_filesystem(): erasing all blocks after the end marker... done.
[  107.348000] jffs2: notice: (562) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  184.508000] br-lan: port 1(eth0.1) entered disabled state
[  184.524000] device eth0.1 left promiscuous mode
[  184.528000] device eth0 left promiscuous mode
[  184.532000] br-lan: port 1(eth0.1) entered disabled state
[  186.496000] bcm63xx_enetsw bcm63xx_enetsw.0: link UP on port2, 100Mbps, full-duplex
[  188.612000] bcm63xx_enetsw bcm63xx_enetsw.0: link UP on port2, 100Mbps, full-duplex
[  188.624000] device eth0.1 entered promiscuous mode
[  188.628000] device eth0 entered promiscuous mode
[  188.636000] br-lan: port 1(eth0.1) entered forwarding state
[  188.640000] br-lan: port 1(eth0.1) entered forwarding state
[  189.608000] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.1: link becomes ready
[  190.644000] br-lan: port 1(eth0.1) entered forwarding state