求助 b70升级失败变砖flash有坏块想备份eeprom请各路大神不腻赐教，怎么搞

lq***

如题，现在想备份需要有大神不腻赐教

现在ttl如下，应该是之前拆过flash，装反了。通电flash冒烟，发现装反了又装回来，还能开机，但今天手贱下了官网的升级固件升级了一下就开不了机了，网口不通，没有无线 ，按pp通电能进恢复模式，选固件恢复完就显示坏块了，参考https://www.right.com.cn/forum/f ... 9&highlight=B70这个大神的能查看分区信息，应该还能备份，就没方法，希望大神赐教，谢谢了

U-Boot 1.1.3 (Jun  6 2017 - 05:06:31)

Board: Ralink APSoC DRAM:  256 MB
mtest end addr: 8fe79f88
relocate_code Pointer at: 8ff9c000

Config XHCI 40M PLL
Allocate 16 byte aligned buffer: 8ffe09f0
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [C8 D1 80 95 40]
Device not found, ID: c8d1
Not Support this Device!
chip_mode=00000001
Support this Device in MTK table! c8d1
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
.*** Warning - bad CRC, using default environment

dcache: sets:256, ways:4, linesz:32 ,total:32768

##### The CPU freq = 880 MHZ ####
estimate memory size =256 Mbytes
#Reset_MT7530
set LAN/WAN LLLLW
0
firmware_backup is not equal to firmware!

=================================================
Check firmware_backup :
Header Magic Number --> Failed

=================================================
firmware_backup: broken!
   
3: System Boot system code via Flash.
## Booting image at bc140000 ...
   Image Name:   HC5962
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1449678 Bytes =  1.4 MB
   Load Address: 81001000
   Entry Point:  81001000
.......................   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 81001000) ...
## Giving linux memsize in MB, 256

Starting kernel ...

[    0.000000] Linux version 3.10.49 (build@DEV-9-1-242) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 1.4.5.19222s) ) #1 SMP Thu Aug 10 12:39:16 CST 2017
[    0.000000]
[    0.000000]  The CPU feqenuce set to 880 MHz
[    0.000000] GCMP present
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] Software DMA cache coherency
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 10000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   DMA      [mem 0x00000000-0x00ffffff]
[    0.000000]   Normal   [mem 0x01000000-0x0fffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x0fffffff]
[    0.000000] Detected 3 available secondary CPU(s)
[    0.000000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] PERCPU: Embedded 7 pages/cpu @8166b000 s6912 r8192 d13568 u32768
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 65024
[    0.000000] Kernel command line:  board=HC5962 console=ttyS1,115200 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Writing ErrCtl register=00020141
[    0.000000] Readback ErrCtl register=00020141
[    0.000000] allocated 524288 bytes of page_cgroup
[    0.000000] please try 'cgroup_disable=memory' option if you don't want memory cgroups
[    0.000000] Memory: 254708k/262144k available (3285k kernel code, 7436k reserved, 709k data, 224k init, 0k highmem)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000]  RCU debugfs-based tracing is enabled.
[    0.000000]  Additional per-CPU info printed with stalls.
[    0.000000] NR_IRQS:128
[    0.000000] console [ttyS1] enabled
[    0.140000] Calibrating delay loop... 577.53 BogoMIPS (lpj=2887680)
[    0.200000] pid_max: default: 32768 minimum: 301
[    0.200000] Mount-cache hash table entries: 512
[    0.210000] Initializing cgroup subsys memory
[    0.210000] Initializing cgroup subsys devices
[    0.210000] Initializing cgroup subsys net_cls
[    0.220000] Initializing cgroup subsys blkio
[    0.220000] Initializing cgroup subsys net_prio
[    0.230000] launch: starting cpu1
[    0.230000] launch: cpu1 gone!
[    0.230000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.230000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.230000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.230000] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.290000] Synchronize counters for CPU 1: done.
[    0.300000] launch: starting cpu2
[    0.300000] launch: cpu2 gone!
[    0.300000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.300000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.300000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.300000] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.360000] Synchronize counters for CPU 2: done.
[    0.370000] launch: starting cpu3
[    0.370000] launch: cpu3 gone!
[    0.370000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.370000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.370000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.370000] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.430000] Synchronize counters for CPU 3: done.
[    0.440000] Brought up 4 CPUs
[    0.440000] NET: Registered protocol family 16
[    0.450000] MIPS: machine is HiWiFi Wireless HC5962 Board
[    0.750000] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.750000] PCIE PHY initialize
[    0.760000] ***** Xtal 40MHz *****
[    0.760000] start MT7621 PCIe register access
[    1.350000] RALINK_RSTCTRL = 7000000
[    1.360000] RALINK_CLKCFG1 = 77ffeff8
[    1.360000]
[    1.360000] *************** MT7621 PCIe RC mode *************
[    1.860000] PCIE2 no card, disable it(RST&CLK)
[    1.860000] pcie_link status = 0x3
[    1.870000] RALINK_RSTCTRL= 3000000
[    1.870000] *** Configure Device number setting of Virtual PCI-PCI bridge ***
[    1.880000] RALINK_PCI_PCICFG_ADDR = 21007f2 -> 21007f2
[    1.880000] PCIE0 enabled
[    1.880000] PCIE1 enabled
[    1.890000] interrupt enable status: 300000
[    1.890000] Port 1 N_FTS = 1b105000
[    1.890000] Port 0 N_FTS = 1b105000
[    1.900000] config reg done
[    1.900000] init_rt2880pci done
[    1.910000] bio: create slab <bio-0> at 0
[    1.910000] PCI host bridge to bus 0000:00
[    1.920000] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    1.920000] pci_bus 0000:00: root bus resource [io  0x1e160000-0x1e16ffff]
[    1.930000] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    1.930000] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    1.940000] pci 0000:00:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    1.940000] pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000)
[    1.950000] pci 0000:00:01.0: BAR 0: can't assign mem (size 0x80000000)
[    1.950000] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    1.960000] pci 0000:00:01.0: BAR 8: assigned [mem 0x60100000-0x601fffff]
[    1.960000] pci 0000:00:01.0: BAR 9: assigned [mem 0x60200000-0x602fffff pref]
[    1.970000] pci 0000:00:00.0: BAR 1: assigned [mem 0x60300000-0x6030ffff]
[    1.970000] pci 0000:00:01.0: BAR 1: assigned [mem 0x60310000-0x6031ffff]
[    1.980000] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff]
[    1.980000] pci 0000:00:00.0: PCI bridge to [bus 01]
[    1.990000] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    1.990000] pci 0000:02:00.0: BAR 0: assigned [mem 0x60100000-0x601fffff 64bit]
[    2.000000] pci 0000:02:00.0: BAR 6: assigned [mem 0x60200000-0x6020ffff pref]
[    2.000000] pci 0000:00:01.0: PCI bridge to [bus 02]
[    2.010000] pci 0000:00:01.0:   bridge window [mem 0x60100000-0x601fffff]
[    2.010000] pci 0000:00:01.0:   bridge window [mem 0x60200000-0x602fffff pref]
[    2.020000] PCI: Enabling device 0000:00:00.0 (0004 -> 0006)
[    2.020000] PCI: Enabling device 0000:00:01.0 (0004 -> 0006)
[    2.030000] BAR0 at slot 0 = 0
[    2.030000] bus=0x0, slot = 0x0
[    2.030000] BAR0 at slot 1 = 0
[    2.030000] bus=0x0, slot = 0x1
[    2.040000] bus=0x1, slot = 0x0, irq=0x4
[    2.040000] bus=0x2, slot = 0x1, irq=0x18
[    2.040000] Switching to clocksource MIPS
[    2.050000] NET: Registered protocol family 2
[    2.050000] TCP established hash table entries: 2048 (order: 2, 16384 bytes)
[    2.070000] TCP bind hash table entries: 2048 (order: 2, 16384 bytes)
[    2.080000] TCP: Hash tables configured (established 2048 bind 2048)
[    2.080000] TCP: reno registered
[    2.090000] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.090000] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.100000] NET: Registered protocol family 1
[    2.330000] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    2.360000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    2.360000] msgmni has been set to 497
[    2.370000] io scheduler noop registered
[    2.370000] io scheduler deadline registered (default)
[    2.380000] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    2.380000] serial8250: ttyS0 at MMIO 0x1e000d00 (irq = 27) is a 16550A
[    2.390000] serial8250: ttyS1 at MMIO 0x1e000c00 (irq = 26) is a 16550A
[    2.410000] brd: module loaded
[    2.410000] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    2.420000] Allocate 16 byte aligned buffer: 8145be80
[    2.420000] Enable NFI Clock
[    2.430000] # MTK NAND # : Use HW ECC
[    2.430000] NAND ID [C8 D1 80 95 40, 00809540]
[    2.430000] Device found in MTK table, ID: c8d1, EXT_ID: 809540
[    2.440000] Support this Device in MTK table! c8d1
[    2.440000] NAND device: Manufacturer ID: 0xc8, Chip ID: 0xd1 (Unknown NAND 128MiB 3,3V 8-bit), 128MiB, page size: 2048, OOB size: 64
[    2.460000] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    2.460000] Scanning device for bad blocks
[    2.470000] Bad eraseblock 23 at 0x0000002e0000
[    2.480000] Bad eraseblock 25 at 0x000000320000
[    2.480000] Bad eraseblock 28 at 0x000000380000
[    2.490000] Bad eraseblock 32 at 0x000000400000
[    2.490000] Bad eraseblock 34 at 0x000000440000
[    2.490000] Bad eraseblock 35 at 0x000000460000
[    2.500000] Bad eraseblock 36 at 0x000000480000
[    2.560000] Bad eraseblock 416 at 0x000003400000
[    2.560000] Bad eraseblock 417 at 0x000003420000
[    2.570000] Bad eraseblock 433 at 0x000003620000
[    2.580000] Bad eraseblock 476 at 0x000003b80000
[    2.660000] Signature matched and data read!
[    2.670000] load_fact_bbt success 1023
[    2.670000] 00 00 00 00 00 c0 0c 03 f3 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[    2.680000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[    2.690000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[    2.700000] 00 00 00 00 00 00 00 00 0f 00 00 00 0c 00 00 00 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 00
[    2.710000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[    2.720000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[    2.730000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[    2.740000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[    2.750000] Creating 11 MTD partitions on "MT7621-NAND":
[    2.760000] 0x000000000000-0x000000080000 : "u-boot"
[    2.760000] 0x000000080000-0x000000100000 : "debug"
[    2.770000] 0x000000100000-0x000000140000 : "Factory"
[    2.770000] 0x000000140000-0x000002140000 : "firmware"
[    2.780000] 2 uimage-fw partitions found on MTD device firmware
[    2.790000] 0x000000140000-0x0000002c0000 : "kernel"
[    2.790000] 0x0000002c0000-0x000002140000 : "rootfs"
[    2.800000] mtd: device 5 (rootfs) set to be root filesystem
[    2.810000] 0x000002140000-0x0000021c0000 : "hw_panic"
[    2.810000] 0x0000021c0000-0x000002240000 : "bdinfo"
[    2.860000] 0x000002240000-0x0000022c0000 : "backup"
[    2.860000] 0x0000022c0000-0x0000032c0000 : "overlay"
[    2.870000] 0x0000032c0000-0x0000052c0000 : "firmware_backup"
[    2.880000] 0x0000052c0000-0x0000054c0000 : "oem"
[    2.880000] 0x0000054c0000-0x000007f80000 : "opt"
[    2.890000] [mtk_nand] probe successfully!
[    2.890000] GMAC1_MAC_ADRH -- : 0x0000d4ee
[    2.900000] GMAC1_MAC_ADRL -- : 0x074057c2
[    2.900000] PROC INIT OK!
[    2.910000] Ralink APSoC Hardware Watchdog Timer
[    2.910000] TCP: cubic registered
[    2.920000] NET: Registered protocol family 17
[    2.920000] 8021q: 802.1Q VLAN Support v1.8
[    2.930000] drivers/rtc/hctosys.c: unable to open rtc device (rtc0)
[    2.940000] VFS: Mounted root (squashfs filesystem) readonly on device 31:5.
[    2.950000] Freeing unused kernel memory: 224K (813e8000 - 81420000)
procd: Console is alive
[    5.290000] usbcore: registered new interface driver usbfs
[    5.290000] usbcore: registered new interface driver hub
[    5.300000] usbcore: registered new device driver usb
[    5.340000] SCSI subsystem initialized
procd: - preinit -
[    6.410000] boot from nand
[    6.530000] UBI: attaching mtd9 to ubi0
[    6.660000] UBI: scanning is finished
[    6.670000] UBI error: ubi_read_volume_table: the layout volume was not found
[    6.680000] UBI error: ubi_attach_mtd_dev: failed to attach mtd9, error -22
ubiattach: error!: cannot attach mtd9
           error 22 (Invalid argument)
Erasing 128 Kibyte @ bc0000 -[    7.050000] UBI: attaching mtd9 to ubi0
Erasing 128 Kibyte @ 1000000 - 100% complete.
[    7.180000] UBI: scanning is finished
[    7.190000] UBI error: ubi_read_volume_table: the layout volume was not found
[    7.190000] UBI error: ubi_attach_mtd_dev: failed to attach mtd9, error -22
ubiattach: error!: cannot attach mtd9
           error 22 (Invalid argument)
mounting /dev/root
sed: can't create temp file '/etc/inittabOrRIlh': Read-only file system
procd: - early -
procd: - ubus -
procd: - init -
Please press Enter to activate this console.
[    8.690000] NET: Registered protocol family 10
[    9.030000] MT7603E module init
[    9.040000] MT7603E AP Driver version-4.0.1.0rev2.P1
[    9.800000] MT7612E module init
[    9.810000] MT76x2 AP Driver version-3.0.4.0.P2.20160308
[   10.690000] Initializing XFRM netlink socket
[   10.700000] NET: Registered protocol family 15
[   10.710000] loop: module loaded
[   10.720000] tun: Universal TUN/TAP device driver, 1.6
[   10.730000] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
[   10.760000] l2tp_core: L2TP core driver, V2.0
[   10.760000] l2tp_netlink: L2TP netlink interface
[   10.770000] sit: IPv6 over IPv4 tunneling driver
[   10.780000] exFAT: Version 1.2.9
[   10.790000] gre: GRE over IPv4 demultiplexor driver
[   10.800000] ip_gre: GRE over IPv4 tunneling driver
[   10.810000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[   10.820000] ehci-platform: EHCI generic platform driver
[   10.850000] nf_conntrack version 0.5.0 (3983 buckets, 15932 max)
[   10.870000] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   10.880000] Netfilter messages via NETLINK v0.30.
[   10.890000] ip_set: protocol 6
[   10.930000] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[   10.940000] ***Module syslog inserted(log_addr:8d749000)***
[   10.950000] *****run project phy.
[   10.980000] FM_OUT value: u4FmOut = 0(0x00000000)
[   11.000000] FM_OUT value: u4FmOut = 0(0x00000000)
[   11.020000] FM_OUT value: u4FmOut = 0(0x00000000)
[   11.040000] FM_OUT value: u4FmOut = 0(0x00000000)
[   11.060000] FM_OUT value: u4FmOut = 0(0x00000000)
[   11.080000] FM_OUT value: u4FmOut = 0(0x00000000)
[   11.100000] FM_OUT value: u4FmOut = 0(0x00000000)
[   11.120000] FM_OUT value: u4FmOut = 0(0x00000000)
[   11.140000] FM_OUT value: u4FmOut = 0(0x00000000)
[   11.160000] FM_OUT value: u4FmOut = 0(0x00000000)
[   11.220000] FM_OUT value: u4FmOut = 0(0x00000000)
[   11.240000] FM_OUT value: u4FmOut = 0(0x00000000)
[   11.260000] FM_OUT value: u4FmOut = 0(0x00000000)
[   11.280000] FM_OUT value: u4FmOut = 0(0x00000000)
[   11.300000] FM_OUT value: u4FmOut = 0(0x00000000)
[   11.320000] FM_OUT value: u4FmOut = 0(0x00000000)
[   11.340000] FM_OUT value: u4FmOut = 0(0x00000000)
[   11.360000] FM_OUT value: u4FmOut = 0(0x00000000)
[   11.380000] FM_OUT value: u4FmOut = 0(0x00000000)
[   11.400000] FM_OUT value: u4FmOut = 0(0x00000000)
[   11.550000] xhci-hcd xhci-hcd: xHCI Host Controller
[   11.550000] xhci-hcd xhci-hcd: new USB bus registered, assigned bus number 1
[   11.560000] xhci-hcd xhci-hcd: irq 22, io mem 0x1e1c0000
[   11.570000] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
[   11.570000] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[   11.580000] usb usb1: Product: xHCI Host Controller
[   11.580000] usb usb1: Manufacturer: Linux 3.10.49 xhci-hcd
[   11.590000] usb usb1: SerialNumber: xhci-hcd
[   11.600000] hub 1-0:1.0: USB hub found
[   11.600000] hub 1-0:1.0: 2 ports detected
[   11.600000] xhci-hcd xhci-hcd: xHCI Host Controller
[   11.610000] xhci-hcd xhci-hcd: new USB bus registered, assigned bus number 2
[   11.620000] usb usb2: New USB device found, idVendor=1d6b, idProduct=0003
[   11.620000] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[   11.630000] usb usb2: Product: xHCI Host Controller
[   11.630000] usb usb2: Manufacturer: Linux 3.10.49 xhci-hcd
[   11.640000] usb usb2: SerialNumber: xhci-hcd
[   11.650000] hub 2-0:1.0: USB hub found
[   11.650000] hub 2-0:1.0: 1 port detected
[   11.660000] i2c-gpio i2c-gpio.0: using pins 3 (SDA) and 4 (SCL)
[   11.680000] u32 classifier
[   11.690000]     input device check on
[   11.690000]     Actions configured
[   11.700000] Mirror/redirect action on
[   11.700000] Failed to load ipt action
[   11.730000] fuse init (API version 7.22)
[   11.750000] ip_tables: (C) 2000-2006 Netfilter Core Team
[   11.850000] ctnetlink v0.93: registering with nfnetlink.
[   12.850000] rtc-pt7c4338 0-0068: rtc core: registered pt7c4338 as rtc0
[   12.860000] usbcore: registered new interface driver usb-storage
[   12.910000] xt_time: kernel timezone is -0000
[   12.930000] PPP generic driver version 2.4.2
[   12.930000] PPP MPPE Compression module registered
[   12.940000] NET: Registered protocol family 24
[   12.950000] p p t p driver version 0.8.5
[   12.950000] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[   17.780000] oem: exec oem defaults
Aug 10 12:16:30 Hiwifi kern.alert kernel: [    2.900000] PROC INIT OK!
Aug 10 12:16:30 Hiwifi user.emerg syslog: sed: can't create temp file '/etc/logfwd.confVvayXg': Read-only file system
[   21.790000] [NOTICE] <XT_TIME_CONF> (time_conf_init:140) xt_timc_conf module init
[   22.740000] MT7530 Reset Completed!!
[   22.750000] phy_free_head is 0xc54000!!!
[   22.750000] phy_free_tail_phy is 0xc55ff0!!!
[   22.760000] txd_pool=a0c58000 phy_txd_pool=00C58000
[   22.760000] ei_local->skb_free start address is 0x8faba6c4.
[   22.770000] free_txd: 00c58010, ei_local->cpu_ptr: 00C58000
[   22.780000]  POOL  HEAD_PTR | DMA_PTR | CPU_PTR
[   22.780000] ----------------+---------+--------
[   22.780000]      0xa0c58000 0x00C58000 0x00C58000
[   22.790000]
[   22.790000] phy_qrx_ring = 0x00c56000, qrx_ring = 0xa0c56000
[   22.800000]
[   22.800000] phy_rx_ring0 = 0x00c60000, rx_ring0 = 0xa0c60000
[   22.810000] GMAC1_MAC_ADRH -- : 0x0000d4ee
[   22.810000] GMAC1_MAC_ADRL -- : 0x074057c2
[   22.810000] GDMA2_MAC_ADRH -- : 0x0000d4ee
[   22.820000] GDMA2_MAC_ADRL -- : 0x074057c3
[   23.900000] UBI: attaching mtd12 to ubi0
[   24.260000] Simple address matching list for Netfilter - HiWiFi
[   24.310000] UBI: scanning is finished
[   24.330000] UBI: attached mtd12 (name "opt", size 42 MiB) to ubi0
[   24.340000] UBI: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[   24.340000] UBI: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[   24.350000] UBI: VID header offset: 2048 (aligned 2048), data offset: 4096
[   24.360000] UBI: good PEBs: 342, bad PEBs: 0, corrupted PEBs: 0
[   24.360000] UBI: user volume: 1, internal volumes: 1, max. volumes count: 128
[   24.370000] UBI: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3529603505
[   24.380000] UBI: available PEBs: 0, total reserved PEBs: 342, PEBs reserved for bad PEB handling: 20
[   24.390000] UBI: background thread "ubi_bgt0d" started, PID 2418
[   24.400000] UBIFS: background thread "ubifs_bgt0_0" started, PID 2420
[   24.470000] UBIFS: recovery needed
[   24.520000] UBIFS: recovery completed
[   24.530000] UBIFS: mounted UBI device 0, volume 0, name "opt"
[   24.530000] UBIFS: LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[   24.540000] UBIFS: FS size: 39108608 bytes (37 MiB, 308 LEBs), journal size 1904640 bytes (1 MiB, 15 LEBs)
[   24.550000] UBIFS: reserved for root: 1847195 bytes (1803 KiB)
[   24.560000] UBIFS: media format: w4/r0 (latest is w4/r0), UUID C8B46650-42B6-414F-8E4D-8FD781ADD589, small LPT model
[   25.590000] Ralink HW NAT Module Enabled
[   25.590000] HW NAT WIFI Enabled
[   25.590000] LAN:1 WAN:2
[   25.920000] ethernet: port1 linkup(interrupt)
[   26.210000] [NOTICE] <HWF-Kproxy> (hwf_kproxy_init:2629) kproxy hook prioriy -101
[   26.220000] [NOTICE] <HWF-Kproxy> (hwf_kproxy_init:2643) Module is inserted
[   27.330000] ethernet: port1 linkdown(interrupt)
[   29.950000] ethernet: port1 linkup(interrupt)
[   31.260000] Welcome to ipstat_init
[   31.320000] ethernet: port1 linkdown(interrupt)
[   34.030000] ethernet: port1 linkup(interrupt)
[   35.410000] ethernet: port1 linkdown(interrupt)
[   37.480000] ethernet: port1 linkup(interrupt)
[   38.300000] Started WatchDog Timer.
[   38.300000] Started WatchDog Timer.
procd: - init complete -



BusyBox v1.22.1 (2017-08-10 12:16:35 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

***********************************************************
              __  __  _              _   ____  _   TM
             / / / / (_) _      __  (_) / __/ (_)
            / /_/ / / / | | /| / / / / / /_  / /
           / __  / / /  | |/ |/ / / / / __/ / /  
          /_/ /_/ /_/   |__/|__/ /_/ /_/   /_/   
                  http://www.hiwifi.com/
***********************************************************
root@Hiwifi:/#





U-Boot 1.1.3 (Jun  6 2017 - 05:06:31)

Board: Ralink APSoC DRAM:  256 MB
mtest end addr: 8fe79f88
relocate_code Pointer at: 8ff9c000

Config XHCI 40M PLL
Allocate 16 byte aligned buffer: 8ffe09f0
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [C8 D1 80 95 40]
Device not found, ID: c8d1
Not Support this Device!
chip_mode=00000001
Support this Device in MTK table! c8d1
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
.*** Warning - bad CRC, using default environment

dcache: sets:256, ways:4, linesz:32 ,total:32768

##### The CPU freq = 880 MHZ ####
estimate memory size =256 Mbytes
#Reset_MT7530
set LAN/WAN LLLLW
button pressed



netboot_common, argc= 3

NetTxPacket = 0x8FFE4A40

KSEG1ADDR(NetTxPacket) = 0xAFFE4A40

NetLoop,call eth_halt !

NetLoop,call eth_init !
Trying Eth0 (10/100-M)

Waitting for RX_DMA_BUSY status Start... done


ETH_STATE_ACTIVE!!
TFTP from server 192.168.1.88; our IP address is 192.168.1.119
Filename 'recovery.bin'.

TIMEOUT_COUNT=2,Load address: 0x80100000
Loading: *
ArpTimeoutCheck
checksum bad

ArpTimeoutCheck
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad

ArpTimeoutCheck
checksum bad
checksum bad
T
ArpTimeoutCheck

ArpTimeoutCheck

ArpTimeoutCheck
T
ArpTimeoutCheck

ArpTimeoutCheck

ArpTimeoutCheck

Retry count exceeded; starting again
start dhcps

KSEG1ADDR(NetTxPacket) = 0xAFFE4A40

NetLoop,call eth_halt !

NetLoop,call eth_init !
Trying Eth0 (10/100-M)

ETH_STATE_ACTIVE!!
start dhcp server
Got ARP REQUEST, return our IP
sniffer http 80 pkt, skip netloop to start httpd
start httpd


NetTxPacket = 0x8FFE4A40

KSEG1ADDR(NetTxPacket) = 0xAFFE4A40
Trying Eth0 (10/100-M)

Waitting for RX_DMA_BUSY status Start... done


ETH_STATE_ACTIVE!!
HTTP server IP: 192.168.2.1
HTTP server is ready!

Request for: /
Data will be downloaded at 0x80100000 in RAM
firmware
Upload file size: 14942212 bytes
Loading: #######################################
         #######################################
         #######################################
         #######################################
         #######################################
         #######################################
         #######################################
         #######################################
         #######################################
         ###########

MT7621-NAND image check ok
HC5962 image check ok
HC5962 image check ok
rsa verify ok
HTTP upload is done! Upgrading...
MT7621-NAND image check ok
HC5962 image check ok
flash image
rsa verify ok
....Done!
erase overlay
................................................................................................................................
=================================================
Check firmware :
Header Magic Number --> OK
Header Checksum --> OK
Data Checksum --> .......................OK
MD5 Header Magic Number --> OK
MD5 Header CRC --> OK
MD5 Firmware md5 --> ...Bad block detected at 0x5c0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 2e0000 -> 300000
..Bad block detected at 0x640, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 320000 -> 340000
....Bad block detected at 0x700, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 380000 -> 3a0000
......Bad block detected at 0x800, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 400000 -> 420000
..Bad block detected at 0x880, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 440000 -> 460000
Bad block detected at 0x8c0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 460000 -> 480000
Bad block detected at 0x900, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 480000 -> 4a0000
............................................................................................................................................................OK

=================================================
Now firmware is ok, then write to firmware_backup.
...........recovery write firmware_backup failed
.recovery write firmware_backup failed
.recovery write firmware_backup failed
write to firmware_backup failed.
## Error: HTTP ugrade failed!

Trying Eth0 (10/100-M)

ETH_STATE_ACTIVE!!
HTTP server IP: 192.168.2.1
HTTP server is ready!



***********************************************************
              __  __  _              _   ____  _   TM
             / / / / (_) _      __  (_) / __/ (_)
            / /_/ / / / | | /| / / / / / /_  / /
           / __  / / /  | |/ |/ / / / / __/ / /  
          /_/ /_/ /_/   |__/|__/ /_/ /_/   /_/   
                  http://www.hiwifi.com/
***********************************************************
root@Hiwifi:/# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00080000 00020000 "u-boot"
mtd1: 00080000 00020000 "debug"
mtd2: 00040000 00020000 "Factory"
mtd3: 02000000 00020000 "firmware"
mtd4: 00180000 00020000 "kernel"
mtd5: 01e80000 00020000 "rootfs"
mtd6: 00080000 00020000 "hw_panic"
mtd7: 00080000 00020000 "bdinfo"
mtd8: 00080000 00020000 "backup"
mtd9: 01000000 00020000 "overlay"
mtd10: 02000000 00020000 "firmware_backup"
mtd11: 00200000 00020000 "oem"
mtd12: 02ac0000 00020000 "opt"
root@Hiwifi:/# dd if=/dev/mtd2 of=/tmp/Factory.bin
512+0 records in
512+0 records out
root@Hiwifi:/# mtd erase uimage-fw partitions
Usage: mtd [<options> ...] <command> [<arguments> ...] <device>[:<device>...]

The device is in the format of mtdX (eg: mtd4) or its label.
mtd recognizes these commands:
        unlock                  unlock the device
        refresh                 refresh mtd partition
        erase                   erase all data on device
        verify <imagefile>|-    verify <imagefile> (use - for stdin) to device
        write <imagefile>|-     write <imagefile> (use - for stdin) to device
        jffs2write <file>       append <file> to the jffs2 partition on the device
Following options are available:
        -q                      quiet mode (once: no [w] on writing,
                                           twice: no status messages)
        -n                      write without first erasing the blocks
        -r                      reboot after successful command
        -f                      force write without trx checks
        -e <device>             erase <device> before executing the command
        -d <name>               directory for jffs2write, defaults to "tmp"
        -j <name>               integrate <file> into jffs2 data when writing an image
        -s <number>             skip the first n bytes when appending data to the jffs2 partiton, defaults to "0"
        -p                      write beginning at partition offset
        -l <length>             the length of data that we want to dump

Example: To write linux.trx to mtd4 labeled as linux and reboot afterwards
         mtd -r write linux.trx linux

root@Hiwifi:/#

lq***

自顶！！............