经常在论坛里看各种硬改的贴子,自认为可以实践了,就拿出被淘汰的K2试手。 一路状况不断,最后以翻车告终。过程给大家分享下,也希望有大佬指点下。。。 1、先拆下原机8M闪存,用编程器读出原固件(原系统breed+高恪),然后写入新的华邦16M闪存并装入机器上,按reset通电并成功进入breed。 2、断电后,用风枪吹下原机64M内存,然后装上华邦128M内存,按reset通电进入breed。 3、进入breed页面,上传固件进度到一半的时候中断,breed也进不去了;再次尝试进入breed,ping 192.168.1.1 -t,发现ping通几下就断开连不上了,重复几次操作都是如此。 4、breed能短暂进几秒,发现闪存和内存都能识别。先从软件上找问题,挑容易的下手,拆下闪存重新写入最新的breed并焊回去,问题依旧。 5、焊好排针连TTL,TTL有输出,但是TTL显示了几次信息后,没什么别的操作就彻底砖了,再开机进不了breed也无TTL输出,输出信息如下: - DRAM: 128MB
- Platform: MediaTek MT7620A ver 2, eco 6
- Board: Phicomm PSG1208 (K1)
- Clocks: CPU: 580MHz, Bus: 193MHz
- Flash: Winbond W25Q128 (16MB) on rt2880-spi
- rt2880-eth: Using MAC address 00:0c:43:76:20:77
- eth0: MediaTek MT7620A built-in 5-port 10/100M switch
- Network started on eth0, inet addr 192.168.1.1, netmask 255.255.255.0
- Press any key to interrupt autoboot ... 3
- Autoboot aborted due to key press.
- Starting breed built-in shell
- breed>
- breed>
- breed>
复制代码- DRAM: 128MB
- Platform: MediaTek MT7620A ver 2, eco 6
- Board: Phicomm PSG1208 (K1)
- Clocks: CPU: 580MHz, Bus: 193MHz
- Flash: Winbond W25Q128 (16MB) on rt2880-spi
- rt2880-eth: Using MAC address 00:0c:43:76:20:77
- eth0: MediaTek MT7620A built-in 5-port 10/100M switch
- Network started on eth0, inet addr 192.168.1.1, netmask 255.255.255.0
- Press any key to interrupt autoboot ... 0
- Trying to boot firmware from 0x00050000 in flash bank 0 ...
- Reading data into memory ...
- U-Boot firmware image header detected.
- Image Name: K2-RAM128
- Data Size: 8969946 Bytes
- Load Address: 80000000
- Entry Point: 802ab3d0
- Uncompressing data (LZMA) ... done.
- Flushing cache ... done.
- Starting kernel at 0x802ab3d0...
- LINUX started...
- Linux version 3.4.113 (padavan@hms) (gcc version 4.4.7 (GCC) ) #1 Sun Jun 11 02:06:29 CST 2017
- MediaTek SoC: MT7620A, RevID: 0206, RAM: DDR2, XTAL: 20MHz
- CPU/OCP/SYS frequency: 600/200/200 MHz
- CPU revision is: 00019650 (MIPS 24KEc)
- Determined physical RAM map:
- memory: 10000000 [url=home.php?mod=space&uid=162986]@[/url] 00000000 (usable)
- Zone PFN ranges:
- Normal 0x00000000 -> 0x00010000
- Movable zone start PFN for each node
- Early memory PFN ranges
- 0: 0x00000000 -> 0x00010000
- Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
- Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
- Built 1 zonelists in Zone order, mobility grouping on. Total pages: 65024
- Kernel command line: console=ttyS0,57600n8 root=/dev/mtdblock4 rootfstype=squashfs
- PID hash table entries: 1024 (order: 0, 4096 bytes)
- Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
- Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
- Writing ErrCtl register=0007ffe0
- Readback ErrCtl register=0007ffe0
- Memory: 256252k/262144k available (2763k kernel code, 5892k reserved, 527k data, 228k init, 0k highmem)
- NR_IRQS:40
- console [ttyS0] enabled
- Calibrating delay loop... 397.82 BogoMIPS (lpj=795648)
- pid_max: default: 32768 minimum: 301
- Mount-cache hash table entries: 512
- NET: Registered protocol family 16
- bio: create slab <bio-0> at 0
- SCSI subsystem initialized
- usbcore: registered new interface driver usbfs
- usbcore: registered new interface driver hub
- usbcore: registered new device driver usb
- PCI host bridge to bus 0000:00
- pci_bus 0000:00: root bus resource [mem 0x20000000-0x2fffffff]
- pci_bus 0000:00: root bus resource [io 0x10160000-0x1016ffff]
- pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
- pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]
- pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pref]
- pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit]
- pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pref]
- pci 0000:00:00.0: PCI bridge to [bus 01-01]
- pci 0000:00:00.0: bridge window [mem 0x20000000-0x200fffff]
- pci 0000:00:00.0: bridge window [mem 0x20100000-0x201fffff pref]
- PCI: Enabling device 0000:00:00.0 (0000 -> 0002)
- Switching to clocksource MIPS
- NET: Registered protocol family 2
- IP route cache hash table entries: 2048 (order: 1, 8192 bytes)
- TCP established hash table entries: 8192 (order: 4, 65536 bytes)
- TCP bind hash table entries: 8192 (order: 3, 32768 bytes)
- TCP: Hash tables configured (established 8192 bind 8192)
- TCP: reno registered
- UDP hash table entries: 256 (order: 0, 4096 bytes)
- NET: Registered protocol family 1
- squashfs: version 4.0 (2009/01/31) Phillip Lougher
- msgmni has been set to 500
- io scheduler noop registered (default)
- Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
- serial8250: ttyS0 at MMIO 0x10000c00 (irq = 20) is a 16550A
- Ralink GPIO driver initialized. Number of GPIO: 73, GPIO mode: 0058171D
- loop: module loaded
- Ralink SPI flash driver, SPI clock: 50MHz
- SPI flash chip: W25Q128FV (ef 40180000) (16384 Kbytes)
- Creating 7 MTD partitions on "raspi":
- 0x000000000000-0x000000030000 : "Bootloader"
- 0x000000030000-0x000000040000 : "Config"
- 0x000000040000-0x000000050000 : "Factory"
- 0x000000050000-0x00000017e940 : "Kernel"
- 0x00000017e940-0x000000e00000 : "RootFS"
- 0x000000e00000-0x000001000000 : "Storage"
- 0x000000050000-0x000000e00000 : "Firmware_Stub"
- tun: Universal TUN/TAP device driver, 1.6
- tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
- Ralink APSoC Ethernet Driver v3.2.4 (raeth)
- raeth: PDMA RX ring 256, PDMA TX ring 512. Max packet size 1536
- raeth: NAPI support, weight 32
- raeth: Byte Queue Limits (BQL) support
- PPP generic driver version 2.4.2
- PPP MPPE Compression module registered
- NET: Registered protocol family 24
- p p t p driver version 0.8.5
- usbcore: registered new interface driver libusual
- nf_conntrack version 0.5.0 (32768 buckets, 32768 max)
- xt_time: kernel timezone is -0000
- Bridge firewalling registered
- gre: GRE over IPv4 demultiplexor driver
- ip_tables: (C) 2000-2006 Netfilter Core Team
- TCP: cubic registered
- NET: Registered protocol family 10
- ip6_tables: (C) 2000-2006 Netfilter Core Team
- IPv6 over IPv4 tunneling driver
- NET: Registered protocol family 17
- L2TP core driver, V2.0
- PPPoL2TP kernel driver, V2.0
- 8021q: 802.1Q VLAN Support v1.8
- ASUS NVRAM, v0.08. Available space: 61440. Integrity: OK
- VFS: Mounted root (squashfs filesystem) readonly on device 31:4.
- Freeing unused kernel memory: 228k freed
- Algorithmics/MIPS FPU Emulator v1.5
- whoami: unknown uid 0
- /dev/nvram: No such file or directory
- chown: unknown user/group admin:root
- /sbin/mtd_storage.sh: line 680: func_rnd_time: not found
- validate subfs:
- rt2860v2_ap: module license 'Proprietary' taints kernel.
- APSoC AP Driver version: 2.7.2.0
- PCI: Enabling device 0000:01:00.0 (0000 -> 0002)
- MT76x2 AP Driver version: 3.0.5.0
- usbcore: registered new interface driver usblp
- Initializing USB Mass Storage driver...
- usbcore: registered new interface driver usb-storage
- USB Mass Storage support registered.
- ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
- ehci-platform ehci-platform: Generic Platform EHCI Controller
- ehci-platform ehci-platform: new USB bus registered, assigned bus number 1
- ehci-platform ehci-platform: irq 26, io mem 0x101c0000
- ehci-platform ehci-platform: USB 2.0 started, EHCI 1.00, overcurrent ignored
- usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
- usb usb1: Product: Generic Platform EHCI Controller
- usb usb1: Manufacturer: Linux 3.4.113 ehci_hcd
- usb usb1: SerialNumber: ehci-platform
- hub 1-0:1.0: USB hub found
- hub 1-0:1.0: 1 port detected
- ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
- ohci-platform ohci-platform: Generic Platform OHCI Controller
- ohci-platform ohci-platform: new USB bus registered, assigned bus number 2
- ohci-platform ohci-platform: irq 26, io mem 0x101c1000
- usb usb2: New USB device found, idVendor=1d6b, idProduct=0001
- usb usb2: Product: Generic Platform OHCI Controller
- usb usb2: Manufacturer: Linux 3.4.113 ohci_hcd
- usb usb2: SerialNumber: ohci-platform
- hub 2-0:1.0: USB hub found
- hub 2-0:1.0: 1 port detected
- Password for 'admin' changed
- raeth: HW IP/TCP/UDP checksum RX/TX offload enabled
- raeth: HW VLAN TX offload enabled
- raeth: HW Scatter/Gather TX offload enabled
- mtk_esw - hw bridge: W|LLLL
- mtk_esw - set broadcast storm control rate as: 10 mbps
- device eth2.1 entered promiscuous mode
- device eth2 entered promiscuous mode
- device ra0 entered promiscuous mode
- br0: port 2(ra0) entered forwarding state
- br0: port 2(ra0) entered forwarding state
- br0: port 1(eth2.1) entered forwarding state
- br0: port 1(eth2.1) entered forwarding state
- Ralink HW NAT v2.52.0 Module Enabled, FoE Size: 16384
- Generating key, this may take a while...
- br0: port 2(ra0) entered forwarding state
- br0: port 1(eth2.1) entered forwarding state
- Public key portion is:
- ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCDdHeWvHH1oUlWkFoy9dDR53/tlOkUfXWHNMjeGb88rCFuekFueCpWN0wHu9NjadNz8krnTwWxjdHwCh0z36GciiRAHhfR/U7R6h1FVVVTF7cvb4GTmole4LQj6xBLgZmxLg10QTU051aZbV2KxznYgqjN5XJP+JNvwez2oVXeSYhx4p5gZaU+AkLCkF+/eNi+JOJoOctdr6flQvHH9jgdYR4NirLJDFrMtRQBy1vUrJMtjK1MKV6icmMVjvFo5xRr9xnLnE/A2nrAKiUff4ZKQdl909OClwo/jerln73k+lIs+P5f8oz7Co3JZpDAlvUfROZkjw6YSS0P9+pJ3rhj admin@PSG1218-K2
- Fingerprint: md5 30:0c:1c:7e:fe:b8:8d:cd:16:00:b9:c8:90:28:6c:d3
- Generating key, this may take a while...
- Public key portion is:
- ssh-dss AAAAB3NzaC1kc3MAAACBAJisYdUs+cWHbW437DYuhHsdnVZ4tb+ol+Vv5UlK+wfrL6CSfrsSEObPSOCYFc0qiclKadVuqK/p8p/0+JUP0bVIYJB2oqtD8Rck18zzi/TVFO/cKP+PZCYFhKuFcHcHjZLrkjMShctwxuJaAiRvj2aLMhpr1CQmiqGm/UFBU6xHAAAA购物C/2Zj7NiDbSkpL2YFUMZ8fR3mAxwAAAIBuB8n/h59cIZYwmxrAQnbd5b8YGNrFrgY8tCvbNgSkhq+kkKI5yEzPwI8dNxt6gX2Az+wWgAdlot6vZp3gEP9qOB4qHmjsKC3aflftDziDl1/eO3raf7w9HxQaCVQ/1N+DPFOdONAj/kVF0h7HpkBnK5nJddXVg1eN/+uLD6wh/wAAAIA0a2iCjidEeuTKgT7tfJAH+AnQVB0Dk/drArNsZCsDe5Enn/bNSBAT0UZRJRy6wUIce6lJCISUE8pAq5K6AN9FEMeHj9EQCHSVeefoMyR6sTL6xGIu+2tKgxn5R1KouWOW9YgpCg84caDKAZvG8ewI+RJcYe7NqtonQ3R6m6tBsA== admin@PSG1218-K2
- Fingerprint: md5 2c:a0:54:77:f6:a0:6e:3a:3b:4f:cd:ee:44:7b:3e:9f
- Generating key, this may take a while...
- Public key portion is:
- ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBAEblDeYIXZBkDk86SGpI9BtTsOsecX7cXgdF55ceOJbmB9JgmEA7DBSXuL5qd2miEVKJRgQCyHLYRRWHh5A5SQf8wBYIGUgIyPUpgcoNcXnn+mxmOmOg5BCdChHNlVoK+jETbuAVq0QJoyJ3TsZ2pXu/eBoZ/U+QsN+tb7oRoUPNRHRSg== admin@PSG1218-K2
- Fingerprint: md5 dd:28:bb:f0:c5:fb:3e:bd:a5:f5:8f:d3:13:fc:86:f6
- Load Ralink WDG Timer Module
- rstats
- Copyright (C) 2006-2009 Jonathan Zarate
- BusyBox v1.24.2 (2017-06-11 02:33:04 CST) built-in shell (ash)
- Enter 'help' for a list of built-in commands.
- / # Netfilter messages via NETLINK v0.30.
- ip_set: protocol 6
- event signal: User defined signal 1
- rc notification: control_wifi_guest_rt_off
- rc notification: control_wifi_radio_rt_on
- CPU 0 Unable to handle kernel paging request at virtual address c01ccab0, epc == 8f739f10, ra == 8f708d8c
- Oops[#1]:
- Cpu 0
- $ 0 : 00000000 00000000 00000064 000088ea
- $ 4 : c012e000 c012e000 00000002 c01899d4
- $ 8 : 8032d034 8524daf5 00000007 9b64c2b0
- $12 : cd080cd4 0000000e 00000007 8031fd48
- $16 : c01ccee0 00000001 00000004 000a0000
- $20 : c012e000 00200200 00000003 00000ad8
- $24 : 802ddd60 80010f60
- $28 : 8031e000 8031fc58 0009bf50 8f708d8c
- Hi : 00000000
- Lo : 00000133
- epc : 8f739f10 0x8f739f10
- <!?P O
- ra : 8f708d8c 0x8f708d8c
- Status: 1100ec03 KERNEL EXL IE
- Cause : 00800008
- BadVA : c01ccab0
- PrId : 00019650 (MIPS 24KEc)
- Modules linked in: xt_set(O) ip_set_list_set(O) ip_set_bitmap_ip(O) ip_set_hash_net(O) ip_set_hash_ip(O) ip_set(O) nfnetlink rt_timer_wdg hw_nat nf_nat_ftp nf_conntrack_ftp ohci_hcd ehci_hcd usb_storage usblp mt76x2_ap rt2860v2_ap(P)
- Process swapper (pid: 0, threadinfo=8031e000, task=80324f10, tls=00000000)
- Stack : 80328110 00000003 00000000 80330000 00000001 80057018 80328170 80330000
- 00000000 80125b00 0ca2f0ea 000000a1 0cdfe600 000000a1 80328c30 80328110
- 8031fcd8 80057a98 c016e000 00000000 c020e000 00000007 00000000 80328110
- c012e000 c018e000 80320000 8031e000 cccc0000 00200200 80330000 80377b4c
- 80377d4c 8f708d8c 0ca2e103 000000a1 0cdfe600 000000a1 00000003 8f73fe28
- ...
- Call Trace:[<80057018>] 0x80057018
- [<80125b00>] 0x80125b00
- [<80057a98>] 0x80057a98
- [<800309bc>] 0x800309bc
- [<8004c584>] 0x8004c584
- [<8002ad44>] 0x8002ad44
- [<80062df4>] 0x80062df4
- [<802ab3d0>] 0x802ab3d0
- [<8002affc>] 0x8002affc
- [<80009014>] 0x80009014
- [<80009a2c>] 0x80009a2c
- [<8004cd80>] 0x8004cd80
- [<802ab3d0>] 0x802ab3d0
- [<8004cfcc>] 0x8004cfcc
- [<802ab3d0>] 0x802ab3d0
- [<8000b904>] 0x8000b904
- [<802ab3d0>] 0x802ab3d0
- [<8000962c>] 0x8000962c
- [<802ab4c8>] 0x802ab4c8
- [<803379bc>] 0x803379bc
- [<803373dc>] 0x803373dc
- Code: 24020064 12420089 26100ad8 <8e02fbd0> 1040fffa 00000000 1451fff1 00000000 8e03fea4
- Unhandled kernel unaligned access[#2]:
- Cpu 0
- $ 0 : 00000000 00000000 c29a04c7 c29a04c3
- $ 4 : 802b5640 8031ff30 00000000 00000000
- $ 8 : 1100ec00 1000001e 00000001 9b64c2b0
- $12 : 3b8442f5 0000000e 00000000 8031f940
- $16 : 00000000 8c420028 8f422000 00000014
- $20 : 00000060 00000000 00000002 80329704
- $24 : 802ddd60 8004d74c
- $28 : 8031e000 8031ff08 80329760 80009a20
- Hi : 00000025
- Lo : 9e340800
- epc : 8000f82c 0x8000f82c
- <!?P D O
- ra : 80009a20 0x80009a20
- Status: 1100ec02 KERNEL EXL
- Cause : 40808010
- BadVA : a0f929ae
- PrId : 00019650 (MIPS 24KEc)
- Modules linked in: xt_set(O) ip_set_list_set(O) ip_set_bitmap_ip(O) ip_set_hash_net(O) ip_set_hash_ip(O) ip_set(O) nfnetlink rt_timer_wdg hw_nat nf_nat_ftp nf_conntrack_ftp ohci_hcd ehci_hcd usb_storage usblp mt76x2_ap rt2860v2_ap(P)
- Process swapper (pid: 0, threadinfo=8031e000, task=80324f10, tls=00000000)
- Stack : 00000000 87d78acc 87fbf438 87fed000 87ffd000 87fbfa84 00000000 8c420028
- 8f422000 80009a20 8c420028 00000000 00000014 00000000 00000000 00000000
- 00000000 00000000 c29a04c7 c29a04c3 802b5640 8031ff30 00000000 00000000
- 1100ec00 1000001e 00000001 9b64c2b0 3b8442f5 0000000e 00000000 8031f940
- 00000000 8c420028 8f422000 00000014 00000060 00000000 00000002 80329704
- ...
- Call Trace:[<80009a20>] 0x80009a20
- [<8004d74c>] 0x8004d74c
- [<80009a20>] 0x80009a20
- [<8000f82c>] 0x8000f82c
- Code: 00463024 14c0ff98 00000000
- 98720000 24030000 1460ffcd 00a02021 08003dfb
- CPU 0 Unable to handle kernel paging request at virtual address 000e2fec, epc == 80052784, ra == 800503c4
- Oops[#3]:
- Cpu 0
- $ 0 : 00000000 00000000 80380000 00000000
- $ 4 : 54a41e21 00f40000 34c2e000 00010000
- $ 8 : 00000000 00000000 00000001 00000000
- $12 : 8031fce8 0000000f 00000000 8031f940
- $16 : 00000000 00000000 00000044 80378730
- $20 : 00000006 00000000 00000000 fffffff9
- $24 : 00000010 80154fec
- $28 : 8031e000 8031fbf8 004944a0 800503c4
- Hi : 00000000
- Lo : 00000000
- epc : 80052784 0x80052784
- <!?P D O
- ra : 800503c4 0x800503c4
- Status: 11006c02 KERNEL EXL
- Cause : 00804008
- BadVA : 000e2fec
- PrId : 00019650 (MIPS 24KEc)
- Modules linked in: xt_set(O) ip_set_list_set(O) ip_set_bitmap_ip(O) ip_set_hash_net(O) ip_set_hash_ip(O) ip_set(O) nfnetlink rt_timer_wdg hw_nat nf_nat_ftp nf_conntrack_ftp ohci_hcd ehci_hcd usb_storage usblp mt76x2_ap rt2860v2_ap(P)
- Process swapper (pid: 0, threadinfo=8031e000, task=80324f10, tls=00000000)
- Stack : 00000007 8031fd48 c01ccee0 00000001 80378730 800503c4 c012e000 00200200
- 00000003 00000ad8 00000000 80010f60 80378730 00000000 004944a0 00000000
- 0ee6b280 8f708d8c 1100ec03 00000000 6dd5291f 00000000 80328c30 80380000
- 323a5f1f 8031fe30 000000a1 8031fc90 80380000 80380000 0ff95b00 80057f98
- 80328110 80125a14 0ca2f0ea 000000a1 0ff95b00 00000000 32116200 000000a1
- ...
- Call Trace:[<800503c4>] 0x800503c4
- [<80010f60>] 0x80010f60
- [<80057f98>] 0x80057f98
- [<80125a14>] 0x80125a14
- [<80045464>] 0x80045464
- [<8004561c>] 0x8004561c
- [<800464ac>] 0x800464ac
- [<8015169c>] 0x8015169c
- [<801516d0>] 0x801516d0
- [<80157cfc>] 0x80157cfc
- [<8000fbf0>] 0x8000fbf0
- [<80060164>] 0x80060164
- [<80157cfc>] 0x80157cfc
- [<80062df4>] 0x80062df4
- [<801275b4>] 0x801275b4
- [<8005fc08>] 0x8005fc08
- [<800253ec>] 0x800253ec
- [<8000b2d8>] 0x8000b2d8
- [<80009014>] 0x80009014
- [<80009a2c>] 0x80009a2c
- [<8000f840>] 0x8000f840
- [<80155a7c>] 0x80155a7c
- [<80154fec>] 0x80154fec
- [<8000e8dc>] 0x8000e8dc
- [<8000e8d4>] 0x8000e8d4
- [<80155a7c>] 0x80155a7c
- [<8000f8bc>] 0x8000f8bc
- [<80009a20>] 0x80009a20
- [<8004d74c>] 0x8004d74c
- [<80009a20>] 0x80009a20
- [<8000f82c>] 0x8000f82c
- Code: 00001021 3c038033 3c0500f4 <8c6489a8> 34a62401 248401f4 0086302a 14c00007 ac6489a8
- ---[ end trace %
- Kernel panic - not syncing: Fatal exception in interrupt
- Rebooting in 1 seconds..
复制代码
|