蒲公英X5的拆解并开启隐藏模式(root)

首先受邀花生壳公司送我蒲公英测试,我最明显要做的事情就是拆拆拆.
到我手的东西没有不拆的道理.首先这次LED是独立LED组成,不是RGB LED了,导光出去了.

然后发现2G,5G是两个不同芯片做的,走线是差分对都是X6左右,看似是PCI的.毕竟这个CPU支持.红色是射频芯片,黄色主芯片,不用拆也知道是MT7621,蓝色是内存,天蓝色是Flash.内存型号是NT5CB128M16FP,Flash是GD25Q128,这样的天线布局,在同等距离下,会比newifi差一些.

还有个NAND焊盘看来可以做点什么文章.Flash是GD的,之前还说GD的不怎么的,现在出货真大啊.
再细致看看NAND焊盘,卧槽,电容掉了.

当然其实最感兴趣和最想找的就是串口,这样对开SSH什么很有希望.一个是I2C一个是UART.

其他都是电源芯片我就懒得看了.只知道背面有1117,用MP1471AGJ做电源输入的最前级.其他配置就公版化了.蒲公英自己配了12V,差不多.先做了个串口调试引脚.

焊接能力超丑的不要见怪.用115200 boot进去了.

到终端时候直接回车就可以.试探了一下自带SSH.只是默认没启动.但是我发现使用enable指令也不能开机启动.

但是www目录下明显有猛料.

那个luci_index.html还是保留着的.打开看看.

非常好,其实不开盖也可以root,不过需要知道网页路径.root密码就是后台密码,默认admin.默认服务没开.

发一下启动日志.

[    0.000000]
[    0.000000]  The CPU feqenuce set to 880 MHz
[    0.000000] GCMP present
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] Software DMA cache coherency
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 10000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x0fffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x0fffffff]
[    0.000000] On node 0 totalpages: 65536
[    0.000000] free_area_init_node: node 0, pgdat 80393f80, node_mem_map 8100000                                                                                                                                                             0
[    0.000000]   Normal zone: 512 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 65536 pages, LIFO batch:15
[    0.000000] Detected 3 available secondary CPU(s)
[    0.000000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 byt                                                                                                                                                             es
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] PERCPU: Embedded 7 pages/cpu @81203000 s6720 r8192 d13760 u32768
[    0.000000] pcpu-alloc: s6720 r8192 d13760 u32768 alloc=8*4096
[    0.000000] pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pag                                                                                                                                                             es: 65024
[    0.000000] Kernel command line:  board=HCMT7621-S256 console=ttyS1,115200 ro                                                                                                                                                             otfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Writing ErrCtl register=00001017
[    0.000000] Readback ErrCtl register=00001017
[    0.000000] Memory: 255584k/262144k available (3042k kernel code, 6560k reser                                                                                                                                                             ved, 699k data, 220k init, 0k highmem)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS:128
[    0.000000] console [ttyS1] enabled
[    0.120000] Calibrating delay loop... 577.53 BogoMIPS (lpj=2887680)
[    0.180000] pid_max: default: 32768 minimum: 301
[    0.180000] Mount-cache hash table entries: 512
[    0.190000] launch: starting cpu1
[    0.190000] launch: cpu1 gone!
[    0.190000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.190000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 byt                                                                                                                                                             es
[    0.190000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.190000] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.250000] Synchronize counters for CPU 1: done.
[    0.260000] launch: starting cpu2
[    0.260000] launch: cpu2 gone!
[    0.260000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.260000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 byt                                                                                                                                                             es
[    0.260000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.260000] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.320000] Synchronize counters for CPU 2: done.
[    0.330000] launch: starting cpu3
[    0.330000] launch: cpu3 gone!
[    0.330000] Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes.
[    0.330000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 byt                                                                                                                                                             es
[    0.330000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.330000] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.390000] Synchronize counters for CPU 3: done.
[    0.400000] Brought up 4 CPUs
[    0.400000] NET: Registered protocol family 16
[    0.410000] MIPS: machine is OrayBox X5-1253
[    0.710000] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.710000] PCIE PHY initialize
[    0.720000] ***** Xtal 40MHz *****
[    0.720000] start MT7621 PCIe register access
[    1.310000] RALINK_RSTCTRL = 7000000
[    1.320000] RALINK_CLKCFG1 = 77ffeff8
[    1.320000]
[    1.320000] *************** MT7621 PCIe RC mode *************
[    1.820000] PCIE2 no card, disable it(RST&CLK)
[    1.820000] pcie_link status = 0x3
[    1.830000] RALINK_RSTCTRL= 3000000
[    1.830000] *** Configure Device number setting of Virtual PCI-PCI bridge ***
[    1.840000] RALINK_PCI_PCICFG_ADDR = 21007f2 -> 21007f2
[    1.840000] PCIE0 enabled
[    1.840000] PCIE1 enabled
[    1.850000] interrupt enable status: 300000
[    1.850000] Port 1 N_FTS = 1b105000
[    1.850000] Port 0 N_FTS = 1b105000
[    1.860000] config reg done
[    1.860000] init_rt2880pci done
[    1.860000] FPU Affinity set after 11720 emulations
[    1.870000] bio: create slab <bio-0> at 0
[    1.870000] i2c-gpio i2c-gpio.0: using pins 3 (SDA) and 4 (SCL)
[    1.880000] PCI host bridge to bus 0000:00
[    1.880000] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    1.890000] pci_bus 0000:00: root bus resource [io  0x1e160000-0x1e16ffff]
[    1.890000] pci_bus 0000:00: No busn resource found for root bus, will use [b                                                                                                                                                             us 00-ff]
[    1.900000] pci 0000:00:00.0: [0e8d:0801] type 01 class 0x060400
[    1.900000] pci 0000:00:00.0: reg 10: [mem 0x00000000-0x7fffffff]
[    1.900000] pci 0000:00:00.0: reg 14: [mem 0x60300000-0x6030ffff]
[    1.900000] pci 0000:00:00.0: supports D1
[    1.900000] pci 0000:00:00.0: PME# supported from D0 D1 D3hot
[    1.900000] pci 0000:00:01.0: [0e8d:0801] type 01 class 0x060400
[    1.900000] pci 0000:00:01.0: reg 10: [mem 0x00000000-0x7fffffff]
[    1.900000] pci 0000:00:01.0: reg 14: [mem 0x60310000-0x6031ffff]
[    1.900000] pci 0000:00:01.0: supports D1
[    1.900000] pci 0000:00:01.0: PME# supported from D0 D1 D3hot
[    1.900000] pci 0000:01:00.0: [14c3:7603] type 00 class 0x028000
[    1.900000] pci 0000:01:00.0: reg 10: [mem 0x00000000-0x000fffff]
[    1.900000] pci 0000:01:00.0: PME# supported from D0 D3hot D3cold
[    1.900000] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01
[    1.900000] pci 0000:02:00.0: [14c3:7662] type 00 class 0x028000
[    1.900000] pci 0000:02:00.0: reg 10: [mem 0x00000000-0x000fffff 64bit]
[    1.900000] pci 0000:02:00.0: reg 30: [mem 0x00000000-0x0000ffff pref]
[    1.900000] pci 0000:02:00.0: PME# supported from D0 D3hot D3cold
[    1.900000] pci_bus 0000:02: busn_res: [bus 02-ff] end is updated to 02
[    1.900000] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 02
[    1.900000] pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000)
[    1.900000] pci 0000:00:01.0: BAR 0: can't assign mem (size 0x80000000)
[    1.910000] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    1.910000] pci 0000:00:01.0: BAR 8: assigned [mem 0x60100000-0x601fffff]
[    1.920000] pci 0000:00:01.0: BAR 9: assigned [mem 0x60200000-0x602fffff pref                                                                                                                                                             ]
[    1.920000] pci 0000:00:00.0: BAR 1: assigned [mem 0x60300000-0x6030ffff]
[    1.930000] pci 0000:00:01.0: BAR 1: assigned [mem 0x60310000-0x6031ffff]
[    1.930000] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff]
[    1.940000] pci 0000:00:00.0: PCI bridge to [bus 01]
[    1.940000] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    1.950000] pci 0000:02:00.0: BAR 0: assigned [mem 0x60100000-0x601fffff 64bi                                                                                                                                                             t]
[    1.950000] pci 0000:02:00.0: BAR 6: assigned [mem 0x60200000-0x6020ffff pref                                                                                                                                                             ]
[    1.960000] pci 0000:00:01.0: PCI bridge to [bus 02]
[    1.960000] pci 0000:00:01.0:   bridge window [mem 0x60100000-0x601fffff]
[    1.970000] pci 0000:00:01.0:   bridge window [mem 0x60200000-0x602fffff pref                                                                                                                                                             ]
[    1.970000] BAR0 at slot 0 = 0
[    1.980000] bus=0x0, slot = 0x0
[    1.980000] BAR0 at slot 1 = 0
[    1.980000] bus=0x0, slot = 0x1
[    1.980000] bus=0x1, slot = 0x0, irq=0x4
[    1.990000] bus=0x2, slot = 0x1, irq=0x18
[    1.990000] Switching to clocksource MIPS
[    2.000000] NET: Registered protocol family 2
[    2.000000] TCP established hash table entries: 2048 (order: 2, 16384 bytes)
[    2.000000] TCP bind hash table entries: 2048 (order: 2, 16384 bytes)
[    2.010000] TCP: Hash tables configured (established 2048 bind 2048)
[    2.010000] TCP: reno registered
[    2.020000] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.020000] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.030000] NET: Registered protocol family 1
[    2.030000] PCI: CLS 80 bytes, default 32
[    2.260000] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    2.280000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    2.290000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORIT                                                                                                                                                             Y) (c) 2001-2006 Red Hat, Inc.
[    2.300000] msgmni has been set to 499
[    2.300000] io scheduler noop registered
[    2.300000] io scheduler deadline registered (default)
[    2.310000] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    2.320000] serial8250: ttyS0 at MMIO 0x1e000d00 (irq = 27) is a 16550A
[    2.320000] serial8250: ttyS1 at MMIO 0x1e000c00 (irq = 26) is a 16550A
[    2.340000] brd: module loaded
[    2.340000] flash manufacture id: c8, device id 40 18
[    2.350000] chip info: gd25q128b(c8 4018c840)
[    2.350000] mtd name = raspi, size = 0x01000000 (16M) erasesize = 0x00010000                                                                                                                                                              (64K)
[    2.390000] Creating 6 MTD partitions on "raspi":
[    2.400000] 0x000000000000-0x000000030000 : "u-boot"
[    2.400000] 0x000000030000-0x000000040000 : "kpanic"
[    2.410000] mtdoops: MTD partition 1 not big enough for mtdoops
[    2.420000] 0x000000040000-0x000000050000 : "factory"
[    2.420000] 0x000000fe0000-0x000000ff0000 : "bdinfo"
[    2.430000] 0x000000ff0000-0x000001000000 : "reserve"
[    2.430000] 0x000000050000-0x000000fe0000 : "firmware"
[    2.440000] 2 uimage-fw partitions found on MTD device firmware
[    2.450000] 0x000000050000-0x0000001a0000 : "kernel"
[    2.450000] 0x0000001a0000-0x000000fe0000 : "rootfs"
[    2.460000] mtd: device 7 (rootfs) set to be root filesystem
[    2.460000] mtd: partition "rootfs_data" created automatically, ofs=0xab0000,                                                                                                                                                              len=0x530000
[    2.470000] 0x000000ab0000-0x000000fe0000 : "rootfs_data"
[    2.480000] PROC INIT OK!
[    3.360000] rtc-pt7c4338 0-0068: rtc core: registered pt7c4338 as rtc0
[    3.360000] i2c /dev entries driver
[    3.370000] Stopped WatchDog Timer.
[    3.370000] Ralink APSoC Hardware Watchdog Timer
[    3.370000] TCP: cubic registered
[    3.380000] NET: Registered protocol family 17
[    3.380000] 8021q: 802.1Q VLAN Support v1.8
[    4.270000] rtc-pt7c4338 0-0068: hctosys: unable to read the hardware clock
[    4.270000] UBIFS error (pid 1): ubifs_mount: cannot open "ubi0:rootfs", erro                                                                                                                                                             r -19
[    4.280000] VFS: Mounted root (squashfs filesystem) readonly on device 31:7.
[    4.290000] Freeing unused kernel memory: 220K (803a9000 - 803e0000)
[    4.950000] Started WatchDog Timer.
[    6.560000] usbcore: registered new interface driver usbfs
[    6.560000] usbcore: registered new interface driver hub
[    6.570000] usbcore: registered new device driver usb
[    6.600000] SCSI subsystem initialized
[    6.610000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    6.620000] ehci-platform: EHCI generic platform driver
[    6.630000] libata version 3.00 loaded.
[    6.640000] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    6.650000] *****run project phy.
[    6.670000] FM_OUT value: u4FmOut = 0(0x00000000)
[    6.690000] FM_OUT value: u4FmOut = 0(0x00000000)
[    6.710000] FM_OUT value: u4FmOut = 0(0x00000000)
[    6.730000] FM_OUT value: u4FmOut = 0(0x00000000)
[    6.750000] FM_OUT value: u4FmOut = 0(0x00000000)
[    6.770000] FM_OUT value: u4FmOut = 0(0x00000000)
[    6.790000] FM_OUT value: u4FmOut = 0(0x00000000)
[    6.810000] FM_OUT value: u4FmOut = 0(0x00000000)
[    6.830000] FM_OUT value: u4FmOut = 0(0x00000000)
[    6.850000] FM_OUT value: u4FmOut = 0(0x00000000)
[    6.910000] FM_OUT value: u4FmOut = 0(0x00000000)
[    6.930000] FM_OUT value: u4FmOut = 0(0x00000000)
[    6.950000] FM_OUT value: u4FmOut = 0(0x00000000)
[    6.970000] FM_OUT value: u4FmOut = 0(0x00000000)
[    6.990000] FM_OUT value: u4FmOut = 0(0x00000000)
[    7.010000] FM_OUT value: u4FmOut = 0(0x00000000)
[    7.030000] FM_OUT value: u4FmOut = 0(0x00000000)
[    7.050000] FM_OUT value: u4FmOut = 0(0x00000000)
[    7.070000] FM_OUT value: u4FmOut = 0(0x00000000)
[    7.090000] FM_OUT value: u4FmOut = 0(0x00000000)
[    7.240000] xhci-hcd xhci-hcd: xHCI Host Controller
[    7.240000] xhci-hcd xhci-hcd: new USB bus registered, assigned bus number 1
[    7.250000] xhci-hcd xhci-hcd: irq 22, io mem 0x1e1c0000
[    7.260000] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
[    7.260000] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=                                                                                                                                                             1
[    7.270000] usb usb1: Product: xHCI Host Controller
[    7.270000] usb usb1: Manufacturer: Linux 3.10.49 xhci-hcd
[    7.280000] usb usb1: SerialNumber: xhci-hcd
[    7.280000] xHCI xhci_add_endpoint called for root hub
[    7.280000] xHCI xhci_check_bandwidth called for root hub
[    7.280000] hub 1-0:1.0: USB hub found
[    7.290000] hub 1-0:1.0: 2 ports detected
[    7.290000] xhci-hcd xhci-hcd: xHCI Host Controller
[    7.300000] xhci-hcd xhci-hcd: new USB bus registered, assigned bus number 2
[    7.300000] usb usb2: New USB device found, idVendor=1d6b, idProduct=0003
[    7.310000] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=                                                                                                                                                             1
[    7.320000] usb usb2: Product: xHCI Host Controller
[    7.320000] usb usb2: Manufacturer: Linux 3.10.49 xhci-hcd
[    7.330000] usb usb2: SerialNumber: xhci-hcd
[    7.330000] xHCI xhci_add_endpoint called for root hub
[    7.330000] xHCI xhci_check_bandwidth called for root hub
[    7.330000] hub 2-0:1.0: USB hub found
[    7.340000] hub 2-0:1.0: 1 port detected
[    7.350000] sdhci: Secure Digital Host Controller Interface driver
[    7.360000] sdhci: Copyright(c) Pierre Ossman
[    7.360000] sdhci-pltfm: SDHCI platform and OF driver helper
[    7.370000] usbcore: registered new interface driver usb-storage
[    7.730000] jffs2: notice: (374) jffs2_build_xattr_subsystem: complete buildi                                                                                                                                                             ng xattr subsystem, 26 of xdatum (0 unchecked, 25 orphan) and 74 of xref (0 dead                                                                                                                                                             , 65 orphan) found.
[    9.480000] NET: Registered protocol family 10
[    9.500000] RPC: Registered named UNIX socket transport module.
[    9.510000] RPC: Registered udp transport module.
[    9.510000] RPC: Registered tcp transport module.
[    9.520000] RPC: Registered tcp NFSv4.1 backchannel transport module.
[    9.540000] tun: Universal TUN/TAP device driver, 1.6
[    9.540000] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
[    9.550000] l2tp_core: L2TP core driver, V2.0
[    9.560000] l2tp_netlink: L2TP netlink interface
[    9.570000] gre: GRE over IPv4 demultiplexor driver
[    9.570000] ip_gre: GRE over IPv4 tunneling driver
[    9.600000] nf_conntrack version 0.5.0 (3996 buckets, 15984 max)
[    9.620000] ip6_tables: (C) 2000-2006 Netfilter Core Team
[    9.630000] Netfilter messages via NETLINK v0.30.
[    9.630000] ip_set: protocol 6
[    9.670000] u32 classifier
[    9.670000]     input device check on
[    9.670000]     Actions configured
[    9.680000] Mirror/redirect action on
[   10.020000] MT7603E module init
[   10.030000] MT7603E AP Driver version-4.0.1.0rev2.P1
[   10.650000] MT7612E module init
[   10.660000] MT76x2 AP Driver version-3.0.4.0.P1.20150909
[   11.290000] MTK MSDC device init.
[   11.310000] msdc0 -> ================ <- msdc_set_mclk() : L<686> PID<kmodloa                                                                                                                                                             der><0x3aa>
[   11.310000] msdc0 -> !!! Set<400KHz> Source<50000KHz> -> sclk<390KHz> <- msdc                                                                                                                                                             _set_mclk() : L<687> PID<kmodloader><0x3aa>
[   11.320000] msdc0 -> ================ <- msdc_set_mclk() : L<688> PID<kmodloa                                                                                                                                                             der><0x3aa>
[   11.350000] msdc0 -> ops_get_cd return<1> <- msdc_ops_get_cd() : L<2343> PID<                                                                                                                                                             kworker/u8:0><0x6>
[   11.350000] mtk-sd: MediaTek MT6575 MSDC Driver
[   11.350000] usbcore: registered new interface driver cdc_acm
[   11.350000] cdc_acm: USB Abstract Control Model driver for USB modems and ISD                                                                                                                                                             N adapters
[   11.350000] ip_tables: (C) 2000-2006 Netfilter Core Team
[   11.380000] msdc0 -> XXX MSDC_INT_SDIOIRQ <- msdc_irq() : L<2419>
[   11.380000] msdc0 -> XXX CMD<52> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.390000] msdc0 -> XXX CMD<52> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.400000] msdc0 -> XXX CMD<8> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.410000] msdc0 -> XXX CMD<5> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.420000] msdc0 -> XXX CMD<5> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.420000] msdc0 -> XXX CMD<5> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.430000] msdc0 -> XXX CMD<5> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.440000] msdc0 -> XXX CMD<55> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.440000] msdc0 -> XXX CMD<55> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.450000] msdc0 -> XXX CMD<55> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.460000] msdc0 -> XXX CMD<55> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.460000] nf_conntrack_rtsp v0.6.21 loading
[   11.460000] msdc0 -> XXX CMD<1> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.470000] msdc0 -> set mclk to 0!!! <- msdc_set_mclk() : L<634> PID<kworker                                                                                                                                                             /u8:0><0x6>
[   11.470000] msdc0 -> set mclk to 0!!! <- msdc_set_mclk() : L<634> PID<kworker                                                                                                                                                             /u8:0><0x6>
[   11.490000] msdc0 -> ================ <- msdc_set_mclk() : L<686> PID<kworker                                                                                                                                                             /u8:0><0x6>
[   11.490000] msdc0 -> !!! Set<300KHz> Source<50000KHz> -> sclk<297KHz> <- msdc                                                                                                                                                             _set_mclk() : L<687> PID<kworker/u8:0><0x6>
[   11.490000] msdc0 -> ================ <- msdc_set_mclk() : L<688> PID<kworker                                                                                                                                                             /u8:0><0x6>
[   11.510000] msdc0 -> XXX CMD<52> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.510000] msdc0 -> XXX CMD<52> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.510000] msdc0 -> XXX CMD<8> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.510000] msdc0 -> XXX CMD<5> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.510000] msdc0 -> XXX CMD<5> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.510000] msdc0 -> XXX CMD<5> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.510000] msdc0 -> XXX CMD<5> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.510000] msdc0 -> XXX CMD<55> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.510000] msdc0 -> XXX CMD<55> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.510000] msdc0 -> XXX CMD<55> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.510000] msdc0 -> XXX CMD<55> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.510000] msdc0 -> XXX CMD<1> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.510000] msdc0 -> set mclk to 0!!! <- msdc_set_mclk() : L<634> PID<kworker                                                                                                                                                             /u8:0><0x6>
[   11.520000] msdc0 -> set mclk to 0!!! <- msdc_set_mclk() : L<634> PID<kworker                                                                                                                                                             /u8:0><0x6>
[   11.540000] msdc0 -> ================ <- msdc_set_mclk() : L<686> PID<kworker                                                                                                                                                             /u8:0><0x6>
[   11.540000] msdc0 -> !!! Set<260KHz> Source<50000KHz> -> sclk<255KHz> <- msdc                                                                                                                                                             _set_mclk() : L<687> PID<kworker/u8:0><0x6>
[   11.540000] msdc0 -> ================ <- msdc_set_mclk() : L<688> PID<kworker                                                                                                                                                             /u8:0><0x6>
[   11.560000] msdc0 -> XXX CMD<52> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.560000] msdc0 -> XXX CMD<52> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.560000] msdc0 -> XXX CMD<8> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.560000] msdc0 -> XXX CMD<5> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.560000] msdc0 -> XXX CMD<5> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.560000] msdc0 -> XXX CMD<5> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.560000] msdc0 -> XXX CMD<5> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.560000] msdc0 -> XXX CMD<55> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.560000] msdc0 -> XXX CMD<55> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.560000] msdc0 -> XXX CMD<55> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.570000] msdc0 -> XXX CMD<55> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.570000] msdc0 -> XXX CMD<1> MSDC_INT_CMDTMO <- msdc_irq() : L<2487>
[   11.570000] msdc0 -> set mclk to 0!!! <- msdc_set_mclk() : L<634> PID<kworker                                                                                                                                                             /u8:0><0x6>
[   11.850000] nf_nat_rtsp v0.6.21 loading
[   11.860000] usbcore: registered new interface driver usbserial
[   11.870000] usbcore: registered new interface driver usbserial_generic
[   11.880000] usbserial: USB Serial support registered for generic
[   11.910000] xt_time: kernel timezone is -0000
[   11.930000] PPP generic driver version 2.4.2
[   11.930000] PPP MPPE Compression module registered
[   11.940000] NET: Registered protocol family 24
[   11.940000] PPTP driver version 0.8.5
[   11.950000] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[   11.960000] usbcore: registered new interface driver option
[   11.970000] usbserial: USB Serial support registered for GSM modem (1-port)
[   15.040000] phy_free_head is 0xdaa2000!!!
[   15.040000] phy_free_tail_phy is 0xdaa3ff0!!!
[   15.050000] txd_pool=adb90000 phy_txd_pool=0DB90000
[   15.050000] ei_local->skb_free start address is 0x8fef54c4.
[   15.060000] free_txd: adb90010, ei_local->cpu_ptr: 0DB90000
[   15.060000]  POOL  HEAD_PTR | DMA_PTR | CPU_PTR
[   15.070000] ----------------+---------+--------
[   15.070000]      0xadb90000 0x0DB90000 0x0DB90000
[   15.080000]
[   15.080000] phy_qrx_ring = 0x0f7c7000, qrx_ring = 0xaf7c7000
[   15.090000]
[   15.090000] phy_rx_ring0 = 0x0da56000, rx_ring0 = 0xada56000
[   16.250000] ra2880stop()...Done
[   16.250000] Free TX/RX Ring Memory!
[   16.260000] phy_free_head is 0xd116000!!!
[   16.270000] phy_free_tail_phy is 0xd117ff0!!!
[   16.270000] txd_pool=adbbc000 phy_txd_pool=0DBBC000
[   16.280000] ei_local->skb_free start address is 0x8fef54c4.
[   16.280000] free_txd: adbbc010, ei_local->cpu_ptr: 0DBBC000
[   16.290000]  POOL  HEAD_PTR | DMA_PTR | CPU_PTR
[   16.290000] ----------------+---------+--------
[   16.300000]      0xadbbc000 0x0DBBC000 0x0DBBC000
[   16.300000]
[   16.300000] phy_qrx_ring = 0x0f675000, qrx_ring = 0xaf675000
[   16.310000]
[   16.310000] phy_rx_ring0 = 0x0db78000, rx_ring0 = 0xadb78000
[   16.340000] device eth0 entered promiscuous mode
[   16.340000] br-lan: port 1(eth0) entered forwarding state
[   16.350000] br-lan: port 1(eth0) entered forwarding state
[   16.540000] device ra0 entered promiscuous mode
[   16.550000] br-lan: port 2(ra0) entered forwarding state
[   16.550000] br-lan: port 2(ra0) entered forwarding state
[   17.020000] device rai0 entered promiscuous mode
[   17.030000] br-lan: port 3(rai0) entered forwarding state
[   17.030000] br-lan: port 3(rai0) entered forwarding state
[   18.350000] br-lan: port 1(eth0) entered forwarding state
[   18.550000] br-lan: port 2(ra0) entered forwarding state
[   18.640000] MT7621 GE2 link rate to 1G
[   18.730000] ethernet: port4 linkup(interrupt)
[   18.760000] ethernet: port2 linkup(interrupt)
[   19.030000] br-lan: port 3(rai0) entered forwarding state
[  524.260000] nf_conntrack: automatic helper assignment is deprecated and it wi                                                                                                                                                             ll be removed soon. Use the iptables CT target to attach helpers instead.

为了更好折腾,我觉得先备份Flash最好.然后scp拷贝过来.

还要备份一下overlays.

一切安好了.上螺丝.其他下回分解吧.

《蒲公英X5的拆解并开启隐藏模式(root)》有1个想法

  1. 您好 我想获取X5 的 root access
    我跟您一样焊接了串口调试, 但是界面一直卡在 /sbin/askfirst: Please press Enter to activate this console.
    flow control 设置为 none
    但是仍然卡在这里。 能否帮忙看一下。

发表评论

电子邮件地址不会被公开。 必填项已用*标注