【2022-07-26】AR/QCA/MTK Breed，功能强大的多线程 Bootloader

设为主页

极1s不能正常使用BreedEnter

按照步骤启动BreedEnter后，点击启动，加电之后，稍后会进入Breed，但是几秒后就会直接启动系统了

leenkon

标记下。我的小米路由mini不能启动，明天贴出ttl信息

leenkon

小米路由mini，刷过不死u-boot，刷过其他系统现在无法恢复小米官方系统。尝试了几乎所有版本，TTL信息一致，望楼主帮忙！
Upgrade completed.
Rebooting in 2 seconds ...
Resetting ...
Boot and Recovery Environment for Embedded Devices
Copyright (C) 2015 HackPascal <hackpascal@gmail.com>
Build date 2015-05-13 [git-3ab38fa]
Version 1.0 (r585)

DRAM: 128MB
Platform: MediaTek MT7620A ver 2, eco 6
Board: Xiaomi miwifi mini
Clocks: CPU: 580MHz, Bus: 193MHz
Flash: Winbond W25Q128 (16MB) on rt2880-spi
rt2880-eth: MAC address from EEPROM is invalid, using default settings.
rt2880-eth: Using MAC address 00:0c:43:00:00:01
eth0: MediaTek MT7620A built-in 5-port 10/100M switch

Network started on eth0, inet addr 192.168.1.1, netmask 255.255.255.0

Press any key to interrupt autoboot ... 0   

Trying to boot firmware from 0x00050000 in flash bank 0 ...
Reading data into memory ...
U-Boot firmware image header detected.
    Image Name:   MIPS OpenWrt Linux-2.6.36
    Data Size:    1458806 Bytes
    Load Address: 80000000
    Entry Point:  80000000
Uncompressing data (LZMA) ... done.
Flushing cache ... done.

Starting kernel at 0x80000000...


LINUX started...

THIS IS ASIC
Linux version 2.6.36 (szy@shenzhiyong-ct) (gcc version 4.6.3 20120201 (prerelease) (Linaro GCC 4.6-2012.02) ) #1 Fri Aug 8 23:48:11 CST 2014

The CPU feqenuce set to 580 MHz
PCIE: bypass PCIe DLL.
PCIE: Elastic buffer control: Addr:0x68 -> 0xB4
disable all power about PCIe
CPU revision is: 00019650 (MIPS 24Kc)
Software DMA cache coherency
Determined physical RAM map:
memory: 04000000 @ 00000000 (usable)
User-defined physical RAM map:
memory: 08000000 @ 00000000 (usable)
Zone PFN ranges:
  Normal   0x00000000 -> 0x00008000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00008000
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
Kernel command line: console=ttyS1,115200n8 root=/dev/mtdblock5 uart_en=1 factory_mode=0 mem=128m
PID hash table entries: 512 (order: -1, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Primary instruction cache 64kB, VIPT, , 4-waylinesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
Writing ErrCtl register=0006e150
Readback ErrCtl register=0006e150
Memory: 125464k/131072k available (3070k kernel code, 5608k reserved, 958k data, 160k init, 0k highmem)
NR_IRQS:128
console [ttyS1] enabled
Calibrating delay loop... 386.04 BogoMIPS (lpj=772096)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
NET: Registered protocol family 16
RALINK_GPIOMODE = 5a371d
RALINK_GPIOMODE = 58371d
PPLL_CFG1=0xe64000
MT7620 PPLL lock
PPLL_DRV =0x80080504
start PCIe register access
RALINK_RSTCTRL = 2400000
RALINK_CLKCFG1 = 75afffc0

*************** MT7620 PCIe RC mode *************
PCIE0 enabled
init_rt2880pci done
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000)
pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]
pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pref]
pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
pci 0000:00:00.0: BAR 1: set to [mem 0x20200000-0x2020ffff] (PCI address [0x20200000-0x2020ffff]
pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit]
pci 0000:01:00.0: BAR 0: set to [mem 0x20000000-0x200fffff 64bit] (PCI address [0x20000000-0x200fffff]
pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pref]
pci 0000:00:00.0: PCI bridge to [bus 01-01]
pci 0000:00:00.0:   bridge window [io  disabled]
pci 0000:00:00.0:   bridge window [mem 0x20000000-0x200fffff]
pci 0000:00:00.0:   bridge window [mem 0x20100000-0x201fffff pref]
BAR0 at slot 0 = 0
bus=0x0, slot = 0x0
res[0]->start = 0
res[0]->end = 0
res[1]->start = 20200000
res[1]->end = 2020ffff
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
bus=0x1, slot = 0x0
res[0]->start = 20000000
res[0]->end = 200fffff
res[1]->start = 0
res[1]->end = 0
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
Switching to clocksource MIPS
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
RT3xxx EHCI/OHCI init.
squashfs: version 4.0 (2009/01/31) Phillip Lougher
JFFS2 version 2.2 (NAND) (SUMMARY) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
fuse init (API version 7.15)
msgmni has been set to 245
Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254)
io scheduler noop registered (default)
Ralink gpio driver initialized
Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x10000500 (irq = 37) is a 16550A
serial8250: ttyS1 at MMIO 0x10000c00 (irq = 12) is a 16550A
init reset module!
brd: module loaded
deice id : ef 40 18 0 0 (40180000)
W25Q128BV(ef 40180000) (16384 Kbytes)
mtd .name = raspi, .size = 0x01000000 (0M) .erasesize = 0x00000010 (0K) .numeraseregions = 65536
Creating 11 MTD partitions on "raspi":
0x000000000000-0x000001000000 : "ALL"
0x000000000000-0x000000030000 : "Bootloader"
0x000000030000-0x000000040000 : "Config"
0x000000040000-0x000000050000 : "Factory"
0x000000050000-0x000000cd0000 : "OS1"
mtd: try split OS1 partition
mtd: split_firmware
mtd: firmware_partition->size   0xc80000
mtd: firmware_partition->offset 0x50000
mtd: uimage_len 1458870
mtd: rootfs_partition->size   0xb1bd4a
mtd: rootfs_partition->offset 0x1b42b6
mtd: partition "rootfs" created automatically, ofs=1B42B6, len=B1BD4A
0x0000001b42b6-0x000000cd0000 : "rootfs"
mtd: rootfs_len 10665290
0x000000cd0000-0x000000ed0000 : "OS2"
0x000000ed0000-0x000000fd0000 : "overlay"
0x000000fd0000-0x000000fe0000 : "crash"
0x000000fe0000-0x000000ff0000 : "reserved"
0x000000ff0000-0x000001000000 : "Bdata"
0x000000050000-0x000000ff0000 : "firmware"
rdm_major = 253
SMACCR1 -- : 0x00006e57
SMACCR0 -- : 0x7274204c
Ralink APSoC Ethernet Driver Initilization. v3.0  256 rx/tx descriptors allocated, mtu = 1500!
SMACCR1 -- : 0x00006e57
SMACCR0 -- : 0x7274204c
PROC INIT OK!
PPP generic driver version 2.4.2
PPP MPPE Compression module registered
NET: Registered protocol family 24
PPTP driver version 0.8.5
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controller
rt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 1
rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x101c0000
rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
rt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controller
rt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 2
rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x101c1000
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
usbcore: registered new interface driver cdc_acm
cdc_acm: v0.26:USB Abstract Control Model driver for USB modems and ISDN adapters
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
usbcore: registered new interface driver usbserial
USB Serial support registered for generic
usbcore: registered new interface driver usbserial_generic
usbserial: USB Serial Driver core
USB Serial support registered for pl2303
usbcore: registered new interface driver pl2303
pl2303: Prolific PL2303 USB to serial adaptor driver
USB Serial support registered for TI USB 3410 1 port adapter
USB Serial support registered for TI USB 5052 2 port adapter
usbcore: registered new interface driver ti_usb_3410_5052
ti_usb_3410_5052: v0.10:TI USB 3410/5052 Serial Driver
Mirror/redirect action on
u32 classifier
    input device check on
    Actions configured
nf_conntrack version 0.5.0 (1960 buckets, 7840 max)
IPVS: Registered protocols ()
IPVS: Connection hash table configured (size=4096, memory=32Kbytes)
IPVS: ipvs loaded.
GRE over IPv4 demultiplexor driver
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone
TCP cubic registered
NET: Registered protocol family 10
NET: Registered protocol family 17
L2TP core driver, V2.0
PPPoL2TP kernel driver, V2.0
L2TP netlink interface
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly on device 31:5.
Freeing unused kernel memory: 160k freed
Raeth v3.0 (Tasklet,SkbRecycle)

phy_tx_ring = 0x074ef000, tx_ring = 0xa74ef000

phy_rx_ring0 = 0x074f0000, rx_ring0 = 0xa74f0000
SMACCR1 -- : 0x00006e57
SMACCR0 -- : 0x7274204c
ESW: Link Status Changed - Port0 Link UP
CDMA_CSG_CFG = 81000000
GDMA1_FWD_CFG = 20710000
ESW: no registered process to notify
- preinit -
dd: writing '/dev/mtdblock10': Operation not permitted
1+0 records in
0+0 records out
- regular preinit -
JFFS2 notice: (107) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
switching to jffs2
jffs2 not ready yet; using ramdisk
Unlocking OS1 ...
Thu Jan  1 13:00:00 UTC 1970
fix epoch time 1970-01-01 13:00:00 ok.
- init -
ra2880stop()...Done
Free TX/RX Ring Memory!
init started: BusyBox v1.19.4 (2014-08-08 23:26:37 CST)
can't run '/etc/init.d/rcS': No such file or directory

Please press Enter to activate this console.

小乖乖

hackpascal 发表于 2015-3-21 22:38
更新日志

[2015-05-13 r585]

噢耶路由器 oye  刷那个uboot

难忘鬼族情丶

收藏了

luhua168

AR9341硬改128M内存刷固件不能启动   
Boot and Recovery Environment for Embedded Devices
Copyright (C) 2015 HackPascal <hackpascal@gmail.com>
Build date 2015-05-13 [git-3ab38fa]
Version 1.0 (r585)

DRAM: 128MB
Platform: Atheros AR9341 rev 1
Board: Atheros AP123 reference board
Clocks: CPU: 560MHz, DDR: 400MHz, AHB: 200MHz, Ref: 25MHz
Flash: Winbond W25Q128 (16MB) on ath79-spi
ag71xx-eth: MAC address is invalid, using default settings.
ag71xx-eth: Using MAC address 00:13:74:00:00:01
eth0: Atheros AR8228/AR8229 rev 1

Network started on eth0, inet addr 192.168.1.1, netmask 255.255.255.0

Press any key to interrupt autoboot ... 2
Auto boot aborted.

Starting breed built-in shell

breed> Upgrade completed.
Rebooting in 2 seconds ...
Resetting ...
Boot and Recovery Environment for Embedded Devices
Copyright (C) 2015 HackPascal <hackpascal@gmail.com>
Build date 2015-05-13 [git-3ab38fa]
Version 1.0 (r585)

DRAM: 128MB
Platform: Atheros AR9341 rev 1
Board: Atheros AP123 reference board
Clocks: CPU: 560MHz, DDR: 400MHz, AHB: 200MHz, Ref: 25MHz
Flash: Winbond W25Q128 (16MB) on ath79-spi
ag71xx-eth: MAC address is invalid, using default settings.
ag71xx-eth: Using MAC address 00:13:74:00:00:01
eth0: Atheros AR8228/AR8229 rev 1

Network started on eth0, inet addr 192.168.1.1, netmask 255.255.255.0

Press any key to interrupt autoboot ... 0

Trying to boot firmware from 0x9f020000 ...
TP-LINK firmware image header detected.
    Image Name:   08430001
    Data Size:    1065284 Bytes
    Load Address: 80060000
    Entry Point:  80060000
Uncompressing data (LZMA) ... done.
Flushing cache ... done.

Starting kernel at 0x80060000...

[    0.000000] Linux version 3.10.70 (yong@yong-pc) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 r44550) ) #1 Fri Mar 6 17:31:13 CST 2015
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU revision is: 0001974c (MIPS 74Kc)
[    0.000000] SoC: Atheros AR9341 rev 1
[    0.000000] Clocks: CPU:560.000MHz, DDR:400.000MHz, AHB:200.000MHz, Ref:25.000MHz
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x07ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x07ffffff]
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line:  board=TL-WR843N-v1 console=ttyS0,115200 rootfstype=squashfs,jffs2 noinitrd
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] Memory: 126184k/131072k available (2261k kernel code, 4888k reserved, 605k data, 268k init, 0k highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:51
[    0.000000] Calibrating delay loop... 278.93 BogoMIPS (lpj=1394688)
[    0.070000] pid_max: default: 32768 minimum: 301
[    0.070000] Mount-cache hash table entries: 512
[    0.080000] NET: Registered protocol family 16
[    0.090000] MIPS: machine is TP-LINK TL-WR843N v1
[    0.510000] bio: create slab <bio-0> at 0
[    0.510000] Switching to clocksource MIPS
[    0.520000] NET: Registered protocol family 2
[    0.520000] TCP established hash table entries: 1024 (order: 1, 8192 bytes)
[    0.530000] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.540000] TCP: Hash tables configured (established 1024 bind 1024)
[    0.540000] TCP: reno registered
[    0.550000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.550000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.560000] NET: Registered protocol family 1
[    0.580000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.590000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.600000] msgmni has been set to 246
[    0.600000] io scheduler noop registered
[    0.610000] io scheduler deadline registered (default)
[    0.610000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[    0.640000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11) is a 16550A
[    0.650000] console [ttyS0] enabled, bootconsole disabled
[    0.650000] console [ttyS0] enabled, bootconsole disabled
[    0.660000] ath79-spi ath79-spi: master is unqueued, this is deprecated
[    0.670000] m25p80 spi0.0: found w25q128, expected m25p80
[    0.670000] m25p80 spi0.0: w25q128 (16384 Kbytes)
[    0.680000] 6 tp-link partitions found on MTD device spi0.0
[    0.690000] Creating 6 MTD partitions on "spi0.0":
[    0.690000] 0x000000000000-0x000000020000 : "u-boot"
[    0.700000] 0x000000020000-0x000000124344 : "kernel"
[    0.700000] mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[    0.720000] 0x000000124344-0x000000ff0000 : "rootfs"
[    0.720000] mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[    0.740000] mtd: device 2 (rootfs) set to be root filesystem
[    0.740000] 1 squashfs-split partitions found on MTD device rootfs
[    0.750000] 0x000000ce0000-0x000000ff0000 : "rootfs_data"
[    0.760000] 0x000000ff0000-0x000001000000 : "art"
[    0.760000] 0x000000020000-0x000000ff0000 : "firmware"
[    0.770000] 0x000000000000-0x000001000000 : "fullflash"
[    0.790000] libphy: ag71xx_mdio: probed
[    1.350000] ag71xx ag71xx.0: connected to PHY at ag71xx-mdio.1:00 [uid=004dd042, driver=Generic PHY]
[    1.360000] eth0: Atheros AG71xx at 0xb9000000, irq 4, mode:MII
[    1.920000] ag71xx-mdio.1: Found an AR934X built-in switch
[    2.950000] eth1: Atheros AG71xx at 0xba000000, irq 5, mode:GMII
[    2.960000] TCP: cubic registered
[    2.960000] NET: Registered protocol family 17
[    2.970000] Bridge firewalling registered
[    2.970000] 8021q: 802.1Q VLAN Support v1.8
[    2.980000] VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
[    2.990000] Freeing unused kernel memory: 268K (8032d000 - 80370000)
[    3.930000] SQUASHFS error: xz_dec_run error, data probably corrupt
[    3.930000] SQUASHFS error: squashfs_read_data failed to read block 0x1aecf2
[    3.940000] SQUASHFS error: Unable to read fragment cache entry [1aecf2]
[    3.950000] SQUASHFS error: Unable to read page, block 1aecf2, size 2a67c
[    3.960000] SQUASHFS error: Unable to read fragment cache entry [1aecf2]
[    3.960000] SQUASHFS error: Unable to read page, block 1aecf2, size 2a67c
[    3.970000] SQUASHFS error: Unable to read fragment cache entry [1aecf2]
[    3.980000] SQUASHFS error: Unable to read page, block 1aecf2, size 2a67c
[    3.980000] SQUASHFS error: Unable to read fragment cache entry [1aecf2]
[    3.990000] SQUASHFS error: Unable to read page, block 1aecf2, size 2a67c
[    4.000000] SQUASHFS error: Unable to read fragment cache entry [1aecf2]
[    4.000000] SQUASHFS error: Unable to read page, block 1aecf2, size 2a67c
/bin/sh: '/lib/libc.so.0' is not an ELF file
/bin/sh: can't load library 'libc.so.0'
[    4.100000] Kernel panic - not syncing: Attempted to kill init! exitcode=0x00001000
[    4.100000]

sillydanny

[2015-05-13 r585]
AR9341 也支持....感動ING...

apast

反馈 bug：wdr7500v3 刷入breedr r585 后 5G wifi消失，刷回 uboot 又好了。两者 ttl 开机信息：http://pan.baidu.com/s/1pJC7jAz

另外h 大，  能否给我一个最后一版编译的 uboot，貌似原帖子里的都变成 breed 了，只在网上找到11.23版的。这版感觉设置wifi参数的时候也有点小毛病。

1718922

...

apast

@hackpascal   刷完后的 breed的 MAC 全是 F，pin 也不对，所以确定我刷完 breed修改过MAC 和 PIN了。而且我刷前翻了之前的帖子有人说 2.4和5g都打不开，您说要改 MAC， 而我这边是能开2.4g 的。另外换回uboot 后，5g 的 ssid 后缀本来是以 MAC命名的，但是确实270000这样的数字，2.4命名是正常的

006w

Breed

好东西啊

nidongd

hackpascal 发表于 2015-5-16 00:46
那不是缺陷
我跟本就没有让红色led点亮
为什么我非要做的根原厂一模一样

感谢答复 问题是启动后绿色红色一起亮 无法分辨是否已经联网  但是刷华硕老毛子改的固件指示灯是正常的 就是原厂固件和pandola的固件指示灯会一起常亮 指示灯呈紫色 望解答，谢谢！

lfm

apast 发表于 2015-5-19 16:56
反馈 bug：wdr7500v3 刷入breedr r585 后 5G wifi消失，刷回 uboot 又好了。两者 ttl 开机信息：http://pan ...

同求，我想要最新版的u-boot-ar9344-wr941nv6.bin

sx39551381

apast 发表于 2015-5-19 17:38
@hackpascal   刷完后的 breed的 MAC 全是 F，pin 也不对，所以确定我刷完 breed修改过MAC 和 PIN了。而且 ...

跟我的路由器出现的是一模一样啊  在breed里面修改过的和在pan'dourabox出现的是2个不同的mac地址   怎么破啊

1718922

....