Posted: Thu Oct 19, 2017 14:32 Post subject: Buffalo WXR-1900dhp brick after upgrade to 10-10-2017-r33492
Router Model: Buffalo wxr-1900dhp
F/W: from r33435m to r33492 keeping the settings
Status: Bricked
I have tried to unbrick using the openwrt.trx from putty and now get this error:
FW-A / FW-B header are different
checking recover image
check_trx: start nflash1.trx_recover
Invalid boot block on disk
check_trx: exit nflash1.trx_recover
found trx header on flash
found trx header on flash
found trx header on flash
found trx header on flash
and then reboot on loop
Any help will be appreciated.
Here is the putty:
CFE> flash -noheader : nflash1.trxflash -noheader : nflash1.tr
Reading :: Done. 6684672 bytes read
Programming...done. 6684672 bytes written
*** command status = 0
CFE> nvra, erase
Invalid command: "nvra,"
Available commands: watchdog, nvram, reboot, test, phyreg, mii, et, clearmem, memtest, f, e, d, u, flash, batch, go, boot, load, save, ping, arp, ifconfig, show, help
*** command status = -1
CFE> nvram erase
*** command status = 0
CFE> go
================================================================================
tmpr current 63 (280)
tmpr normal_thresh=98 bootable_thresh=115
current 63 < thresh 116, booting FW...
================================================================================
FW-A / FW-B header are different
Checking recover image
check_trx: start nflash1.trx_recover
check_trx: exit nflash1.trx_recover
Loader:raw Filesys:raw Dev:nflash0.os_recover File: Options:(null)
Loading: .. 1638624 bytes read
Entry at 0x00008000
Closing network.
Starting program at 0x00008000
Uncompressing Linux... done, booting the kernel.
** 23 printk messages dropped ** Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 514344K/524288K available (3430K kernel code, 196K rwdata, 1212K rodata, 340K init, 371K bss, 9944K reserved, 0K cma-reserved, 393216K highmem)
Virtual kernel memory layout:
vector : 0xffff0000 - 0xffff1000 ( 4 kB)
fixmap : 0xffc00000 - 0xfff00000 (3072 kB)
vmalloc : 0x88800000 - 0xff800000 (1904 MB)
lowmem : 0x80000000 - 0x88000000 ( 128 MB)
pkmap : 0x7fe00000 - 0x80000000 ( 2 MB)
modules : 0x7f000000 - 0x7fe00000 ( 14 MB)
.text : 0x80008000 - 0x80490e3c (4644 kB)
.init : 0x80491000 - 0x804e6000 ( 340 kB)
.data : 0x804e6000 - 0x805171b4 ( 197 kB)
.bss : 0x8051a000 - 0x80576fe8 ( 372 kB)
Hierarchical RCU implementation.
CONFIG_RCU_FANOUT set to non-default value of 2
Build-time adjustment of leaf fanout to 2.
NR_IRQS:256
MPCORE GIC init
soc_dmu_init
add clk lookups
MPCORE Global Timer Clock 500000000Hz on IRQ 27
sched_clock: 32 bits at 500MHz, resolution 2ns, wraps every 4294967295ns
clocksource: mpcore_gtimer: mask: 0xffffffffffffffff max_cycles: 0xe6a171a037, max_idle_ns: 881590485102 ns
register local timer
smp_twd: clock not found -2
Calibrating local timer... 499.70MHz.
Calibrating delay loop... 1987.37 BogoMIPS (lpj=9936896)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
CPU: Testing write buffer coherency: ok
CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
2 cores has been found
Setting up static identity map for 0x85e0 - 0x8614
L2C: platform provided aux values permit register corruption.
L2C: DT/platform modifies aux control register: 0x0a130000 -> 0x7a530000
L2C-310 erratum 769419 enabled
L2C-310 enabling early BRESP for Cortex-A9
L2C-310 full line of zeros enabled for Cortex-A9
L2C-310 dynamic clock gating enabled, standby mode enabled
L2C-310 cache controller enabled, 16 ways, 256 kB
L2C-310: CACHE_ID 0x410000c8, AUX_CTRL 0x4e530001
CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
Brought up 2 CPUs
SMP: Total of 2 processors activated (3981.31 BogoMIPS).
clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
futex hash table entries: 512 (order: 3, 32768 bytes)
NET: Registered protocol family 16
DMA: preallocated 256 KiB pool for atomic coherent allocations
coherence_win_size = 10000000
coherence_flag = FFFFFFF8
ddr_phys_offset_va =FFFFFFFF
ddr_phys_offset2_va =A8000000
Found a ST compatible (Marconix) serial flash with 16 64KB blocks; total size 1MB
found cfe nvram on sflash
CCA UART Clock Config: Sel=1 Ovr=1 Div=48
CCA UART Clock rate 125000000Hz CCB UART Clock rate 125000000Hz
clocksource: Switched to clocksource mpcore_gtimer
NET: Registered protocol family 2
TCP established hash table entries: 1024 (order: 0, 4096 bytes)
TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
UDP hash table entries: 256 (order: 1, 8192 bytes)
UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
NET: Registered protocol family 1
init gpio code
Buffalo WXR-1900DHP
PCI: no core
PCI: no core
PCI: scanning bus 0
PCI host bridge to bus 0000:00
pci_bus 0000:00: root bus resource [io 0x0000-0xffffffff]
pci_bus 0000:00: root bus resource [mem 0x00000000-0xffffffff]
pci_bus 0000:00: root bus resource [bus 00-ff]
pci 0000:00:11.0: [Firmware Bug]: reg 0x10: invalid BAR (can't size)
PCI: Fixing up bus 0 domain 0
PCIE1 link=1
PCIE1 switching to GEN2
PCIE1 link=1
PCI host bridge to bus 0001:00
pci_bus 0001:00: root bus resource [mem 0x08000000-0x0fffffff]
pci_bus 0001:00: No busn resource found for root bus, will use [bus 00-ff]
PCI: Fixing up bus 0 domain 1
PCI: bus0: Fast back to back transfers disabled
pci 0001:01:00.0: Max Payload Size set to 512 (was 128, max 512)
PCI: Fixing up bus 1 domain 1
PCI: bus1: Fast back to back transfers disabled
pci 0001:00:00.0: BAR 8: assigned [mem 0x08000000-0x080fffff]
pci 0001:01:00.0: BAR 0: assigned [mem 0x08000000-0x08007fff 64bit]
pci 0001:00:00.0: PCI bridge to [bus 01]
pci 0001:00:00.0: bridge window [mem 0x08000000-0x080fffff]
PCIE2 link=1
PCIE2 switching to GEN2
PCIE2 link=1
PCI host bridge to bus 0002:00
pci_bus 0002:00: root bus resource [mem 0x40000000-0x47ffffff]
pci_bus 0002:00: No busn resource found for root bus, will use [bus 00-ff]
PCI: Fixing up bus 0 domain 2
PCI: bus0: Fast back to back transfers disabled
pci 0002:01:00.0: Max Payload Size set to 512 (was 128, max 512)
PCI: Fixing up bus 1 domain 2
PCI: bus1: Fast back to back transfers disabled
pci 0002:00:00.0: BAR 8: assigned [mem 0x40000000-0x400fffff]
pci 0002:01:00.0: BAR 0: assigned [mem 0x40000000-0x40007fff 64bit]
pci 0002:00:00.0: PCI bridge to [bus 01]
pci 0002:00:00.0: bridge window [mem 0x40000000-0x400fffff]
PCIE3 link=0
squashfs: version 4.0 (2009/01/31) Phillip Lougher
io scheduler noop registered (default)
io scheduler cfq registered
serial8250_init
Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
console [ttyS0] disabled
serial8250.0: ttyS0 at MMIO 0x18000300 (irq = 117, base_baud = 7812500) is a 16550
console [ttyS0] enabled
serial8250.0: ttyS1 at MMIO 0x18000400 (irq = 117, base_baud = 7812500) is a 16550
brd: module loaded
loop: module loaded
Boot partition size = 2097152(0x200000)
Creating 3 MTD partitions on "bcmsflash":
0x000000000000-0x000000200000 : "boot"
mtd: partition "boot" extends beyond the end of device "bcmsflash" -- size truncated to 0x100000
0x0000000f0000-0x000000100000 : "nvram_cfe"
0x0000000e0000-0x0000000f0000 : "nvram"
Found a Mxic NAND flash:
Total size: 128MB
Block size: 128KB
Page Size: 2048B
OOB Size: 64B
Sector size: 512B
Spare size: 16B
ECC level: 8 (8-bit)
Device ID: 0xc2 0xf1 0x80 0x1d 0xc2 0xf1
Buffalo WXR-1900DHP dualboot
lookup_nflash_rootfs_offset: offset = 0x0 size = 0x6000000, 0x20000
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
INFO: rcu_sched self-detected stall on CPU
0-...: (5999 ticks this GP) idle=131/140000000000001/0 softirq=87/87 fqs=5999
(t=6000 jiffies g=-287 c=-288 q=112)
Task dump for CPU 0:
swapper/0 R running 0 1 0 0x00000002
Backtrace:
[<8001b2bc>] (dump_backtrace) from [<8001b490>] (show_stack+0x18/0x1c)
r7:804f5908 r6:80000193 r5:80502b40 r4:87823000
[<8001b478>] (show_stack) from [<80059700>] (sched_show_task+0xcc/0x100)
[<80059634>] (sched_show_task) from [<8005aa48>] (dump_cpu_task+0x40/0x44)
r5:80502b40 r4:00000000
[<8005aa08>] (dump_cpu_task) from [<80078744>] (rcu_dump_cpu_stacks+0x84/0xb4)
r5:80502b40 r4:00000000
[<800786c0>] (rcu_dump_cpu_stacks) from [<8007b7a0>] (rcu_check_callbacks+0x2b0/0x738)
r9:86bd6ec0 r8:87829b78 r7:804f4100 r6:066f2000 r5:804f59c0 r4:804e4ec0
[<8007b4f0>] (rcu_check_callbacks) from [<8007d80c>] (update_process_times+0x44/0x6c)
r10:00000000 r9:00000000 r8:00989680 r7:0000000e r6:00000000 r5:87823000
r4:ffffe000
[<8007d7c8>] (update_process_times) from [<80088e10>] (tick_periodic+0xb8/0xc0)
r7:0000000e r6:8b808d80 r5:00000000 r4:804f4140
[<80088d58>] (tick_periodic) from [<80088e48>] (tick_handle_periodic+0x30/0xa4)
r9:00000003 r8:0000001d r7:7fffffff r6:ffffffff r5:00000000 r4:86bd9840
[<80088e18>] (tick_handle_periodic) from [<8001d9c4>] (twd_handler+0x38/0x48)
r9:00000003 r8:0000001d r7:87801cc0 r6:8050733c r5:804e96c0 r4:00000001
[<8001d98c>] (twd_handler) from [<80074eec>] (handle_percpu_devid_irq+0x74/0x8c)
r5:804e96c0 r4:86bd9840
[<80074e78>] (handle_percpu_devid_irq) from [<8007136c>] (__handle_domain_irq+0xbc/0xd4)
r9:00000003 r8:87804800 r7:00000001 r6:00000000 r5:00000000 r4:804e2fc4
[<800712b0>] (__handle_domain_irq) from [<8000936c>] (gic_handle_irq+0x50/0x7c)
r9:00000003 r8:b0101100 r7:b0100100 r6:87829cf0 r5:b010010c r4:804f5b18
[<8000931c>] (gic_handle_irq) from [<80009e80>] (__irq_svc+0x40/0x54)
Exception stack(0x87829cf0 to 0x87829d38)
9ce0: 00000000 f1028014 87829d54 400000e0
9d00: 000f4203 f1028014 00000000 f1028200 f111a408 00000003 00000000 87829d4c
9d20: 87829d50 87829d40 80030648 8021563c 80000013 ffffffff
r9:00000003 r8:f111a408 r7:87829d24 r6:ffffffff r5:80000013 r4:8021563c
[<802155d8>] (osl_pcie_rreg) from [<80030648>] (nandcore_poll+0x38/0x78)
[<80030610>] (nandcore_poll) from [<80030fa0>] (nandcore_checkbadb+0x388/0x520)
r6:f1028008 r5:00000600 r4:f1028000
[<80030c18>] (nandcore_checkbadb) from [<80033304>] (hndnand_checkbadb+0x38/0x50)
r10:00020000 r9:00000000 r8:00000800 r7:00000000 r6:012a0000 r5:8055dd54
r4:8055dd54
[<800332cc>] (hndnand_checkbadb) from [<800272e8>] (init_nflash_mtd_partitions+0xa18/0x105c)
r7:06000000 r6:87a81800 r5:8055dd54 r4:012a0000
[<800268d0>] (init_nflash_mtd_partitions) from [<804a86c8>] (nflash_mtd_init+0x1b8/0x250)
r10:804ba83c r9:00000007 r8:00000000 r7:00000001 r6:00000400 r5:8055dd54
r4:8056fef0
[<804a8510>] (nflash_mtd_init) from [<8001809c>] (do_one_initcall+0x114/0x1a4)
r7:804a8510 r6:8796dd80 r5:804fdc98 r4:804fdc98
[<80017f88>] (do_one_initcall) from [<80491e1c>] (kernel_init_freeable+0x150/0x1f4)
r9:00000007 r8:8051a01c r7:80491600 r6:804ba834 r5:8051a004 r4:804e1538
[<80491ccc>] (kernel_init_freeable) from [<80012a5c>] (kernel_init+0x10/0xd0)
r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80012a4c
r4:00000000
[<80012a4c>] (kernel_init) from [<800095e8>] (ret_from_fork+0x14/0x2c)
r5:80012a4c r4:00000000
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
Digital core power voltage set to 1.0V
c_ddr_init: sdram_config=0x014b sdram_ncdl=0x00000320 sdram_refresh=0x0000081c
BUFFALO CFE Version 1.00 [DDRCLK:400]
Decompressing...Decompressing...done
Found a ST compatible (Marconix) serial flash with 16 64KB blocks; total size 1MB
Corrupt NVRAM found, trying embedded NVRAM next.
CFE version 6.37.14.62 (r437318) based on BBP 1.0.37 for BCM947XX (32bit,SP,)
Build Date: Tue Sep 2 09:23:49 JST 2014 (root@fc17.localdomain)
Copyright (C) 2000-2008 Broadcom Corporation.
Memory Test start(0x00000000) end(0x07E00000) size(132120576)
Data line test start:0x00000000 pattern 0x00000001 0x00000003 0x00000007 0x0000000F 0x00000005 0x00000015 0x00000055 0xAAAAAAAA
Address line test start:0x00000000 len:0x7e00000 pattern 0xAAAAAAAA 0x55555555
Fill test patnum:2
fill Pattern 5555AAAA Writing... Reading...
fill Pattern AAAA5555 Writing... Reading...
Memory Test start(0x88000000) end(0xA0000000) size(402653184)
Data line test start:0x88000000 pattern 0x00000001 0x00000003 0x00000007 0x0000000F 0x00000005 0x00000015 0x00000055 0xAAAAAAAA
Address line test start:0x88000000 len:0x18000000 pattern 0xAAAAAAAA 0x55555555
Fill test patnum:2
fill Pattern 5555AAAA Writing... Reading...
fill Pattern AAAA5555 Writing... Reading...
Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
Found a Mxic NAND flash:
Total size: 128MB
Block size: 128KB
Page Size: 2048B
OOB Size: 64B
Sector size: 512B
Spare size: 16B
ECC level: 8 (8-bit)
Device ID: 0xc2 0xf1 0x80 0x1d 0xc2 0xf1
DDR Clock: 400 MHz
Info: DDR frequency set from clkfreq=1000,*800*
Warning: invalid DDR setting of 800 MHz ignored. DDR frequency will be set to 400 MHz.
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.14.62 (r437318)
CPU type 0x0: 1000MHz
Tot mem: 524288 KBytes
initializing nvram...Corrupt NVRAM found, trying embedded NVRAM next.
done
commiting nvram...done
now rebootingDigital core power voltage set to 1.0V
c_ddr_init: sdram_config=0x014b sdram_ncdl=0x00000320 sdram_refresh=0x0000081c
BUFFALO CFE Version 1.00 [DDRCLK:400]
Decompressing...Decompressing...done
Found a ST compatible (Marconix) serial flash with 16 64KB blocks; total size 1MB
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.14.62 (r437318)
================================================================================
tmpr current 62 (282)
tmpr normal_thresh=98 bootable_thresh=115
current 62 < thresh 116, booting FW...
================================================================================
DDR clock change and Calibrate... [400->800]
Digital core power voltage set to 1.0V
c_ddr_init: sdram_config=0x014b sdram_ncdl=0x00000320 sdram_refresh=0x0000081c
BUFFALO CFE Version 1.00 [DDRCLK:800]
Memory Test start(0x07E00000) end(0x08000000) size(2097152)
Data line test start:0x07e00000 pattern 0x00000001 0x00000003 0x00000007 0x0000000F 0x00000005 0x00000015 0x00000055 0xAAAAAAAA
Address line test start:0x07e00000 len:0x200000 pattern 0xAAAAAAAA 0x55555555
Fill test patnum:2
fill Pattern 5555AAAA Writing... Reading...
fill Pattern AAAA5555 Writing... Reading...
Decompressing...Decompressing...done
Found a ST compatible (Marconix) serial flash with 16 64KB blocks; total size 1MB
CFE version 6.37.14.62 (r437318) based on BBP 1.0.37 for BCM947XX (32bit,SP,)
Build Date: Tue Sep 2 09:23:49 JST 2014 (root@fc17.localdomain)
Copyright (C) 2000-2008 Broadcom Corporation.
Memory Test start(0x00000000) end(0x07E00000) size(132120576)
Data line test start:0x00000000 pattern 0x00000001 0x00000003 0x00000007 0x0000000F 0x00000005 0x00000015 0x00000055 0xAAAAAAAA
Address line test start:0x00000000 len:0x7e00000 pattern 0xAAAAAAAA 0x55555555
Fill test patnum:2
fill Pattern 5555AAAA Writing... Reading...
fill Pattern AAAA5555 Writing... Reading...
Memory Test start(0x88000000) end(0xA0000000) size(402653184)
Data line test start:0x88000000 pattern 0x00000001 0x00000003 0x00000007 0x0000000F 0x00000005 0x00000015 0x00000055 0xAAAAAAAA
Address line test start:0x88000000 len:0x18000000 pattern 0xAAAAAAAA 0x55555555
Fill test patnum:2
fill Pattern 5555AAAA Writing... Reading...
fill Pattern AAAA5555 Writing... Reading...
Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
Found a Mxic NAND flash:
Total size: 128MB
Block size: 128KB
Page Size: 2048B
OOB Size: 64B
Sector size: 512B
Spare size: 16B
ECC level: 8 (8-bit)
Device ID: 0xc2 0xf1 0x80 0x1d 0xc2 0xf1
DDR Clock: 800 MHz
Info: DDR frequency set from clkfreq=1000,*800*
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.14.62 (r437318)
CPU type 0x0: 1000MHz
Tot mem: 524288 KBytes
CFE> flash nflash1.trx nflash1.trx_recover
Reading nflash1.trx: Done. 32376832 bytes read
Programming...done. 32376832 bytes written
*** command status = 0
CFE> go
================================================================================
tmpr current 58 (288)
tmpr normal_thresh=98 bootable_thresh=115
current 59 < thresh 116, booting FW...
================================================================================
FW-A / FW-B header are same
Checking normal image
check_trx: start nflash1.trx
check_trx: exit nflash1.trx
Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
Loading: .. 1652648 bytes read
Entry at 0x00008000
Closing network.
Starting program at 0x00008000
Uncompressing Linux... done, booting the kernel.
_________________ Routers:
WXR-1900DHP - Active (main) - v3.0-r36070M kongac (05/31/18 )
WZR-N600DHP - Wired AP - v3.0-r33679 BS (11/04/17)
WNDR-3400 - retired to its box for several years
Also if you're trying to recover it using openwrt I'd suggest finding my other post about how I got dd-wrt installed to begin with using CFE flashing of the openwrt image.
I'm on mobile now so can't really look it up easily. But the info is here.
Is this a kong or BS build? _________________ Routers:
WXR-1900DHP - Active (main) - v3.0-r36070M kongac (05/31/18 )
WZR-N600DHP - Wired AP - v3.0-r33679 BS (11/04/17)
WNDR-3400 - retired to its box for several years
Also if you're trying to recover it using openwrt I'd suggest finding my other post about how I got dd-wrt installed to begin with using CFE flashing of the openwrt image.
I'm on mobile now so can't really look it up easily. But the info is here.
Is this a kong or BS build?
This is a BS.
Thanks I will give a shot this weekend for now I move mine WZR-1750DHP as the main router as workaround
I tried multiple times during this weekend and I was able to go to the openwrt but when I tried to upgrade to any BS version I got this error.
Digital core power voltage set to 1.0V
c_ddr_init: sdram_config=0x014b sdram_ncdl=0x00000320 sdram_refresh=0x0000081c
BUFFALO CFE Version 1.00 [DDRCLK:400]
Decompressing...Decompressing...done
Found a ST compatible (Marconix) serial flash with 16 64KB blocks; total size 1MB
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.14.62 (r437318)
================================================================================
tmpr current 47 (29d)
tmpr normal_thresh=98 bootable_thresh=115
current 47 < thresh 116, booting FW...
================================================================================
DDR clock change and Calibrate... [400->800]
Digital core power voltage set to 1.0V
c_ddr_init: sdram_config=0x014b sdram_ncdl=0x00000320 sdram_refresh=0x0000081c
BUFFALO CFE Version 1.00 [DDRCLK:800]
Memory Test start(0x07E00000) end(0x08000000) size(2097152)
Data line test start:0x07e00000 pattern 0x00000001 0x00000003 0x00000007 0x0000000F 0x00000005 0x00000015 0x00000055 0xAAAAAAAA
Address line test start:0x07e00000 len:0x200000 pattern 0xAAAAAAAA 0x55555555
Fill test patnum:2
fill Pattern 5555AAAA Writing... Reading...
fill Pattern AAAA5555 Writing... Reading...
Decompressing...Decompressing...done
Found a ST compatible (Marconix) serial flash with 16 64KB blocks; total size 1MB
CFE version 6.37.14.62 (r437318) based on BBP 1.0.37 for BCM947XX (32bit,SP,)
Build Date: Tue Sep 2 09:23:49 JST 2014 (root@fc17.localdomain)
Copyright (C) 2000-2008 Broadcom Corporation.
Memory Test start(0x00000000) end(0x07E00000) size(132120576)
Data line test start:0x00000000 pattern 0x00000001 0x00000003 0x00000007 0x0000000F 0x00000005 0x00000015 0x00000055 0xAAAAAAAA
Address line test start:0x00000000 len:0x7e00000 pattern 0xAAAAAAAA 0x55555555
Fill test patnum:2
fill Pattern 5555AAAA Writing... Reading...
fill Pattern AAAA5555 Writing... Reading...
Memory Test start(0x88000000) end(0xA0000000) size(402653184)
Data line test start:0x88000000 pattern 0x00000001 0x00000003 0x00000007 0x0000000F 0x00000005 0x00000015 0x00000055 0xAAAAAAAA
Address line test start:0x88000000 len:0x18000000 pattern 0xAAAAAAAA 0x55555555
Fill test patnum:2
fill Pattern 5555AAAA Writing... Reading...
fill Pattern AAAA5555 Writing... Reading...
Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
Found a Mxic NAND flash:
Total size: 128MB
Block size: 128KB
Page Size: 2048B
OOB Size: 64B
Sector size: 512B
Spare size: 16B
ECC level: 8 (8-bit)
Device ID: 0xc2 0xf1 0x80 0x1d 0xc2 0xf1
DDR Clock: 800 MHz
Info: DDR frequency set from clkfreq=1000,*800*
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.14.62 (r437318)
CPU type 0x0: 1000MHz
Tot mem: 524288 KBytes
And if I try same procedure using the Kong release:
Digital core power voltage set to 1.0V
c_ddr_init: sdram_config=0x014b sdram_ncdl=0x00000320 sdram_refresh=0x0000081c
BUFFALO CFE Version 1.00 [DDRCLK:400]
Decompressing...Decompressing...done
Found a ST compatible (Marconix) serial flash with 16 64KB blocks; total size 1MB
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.14.62 (r437318)
================================================================================
tmpr current 46 (29f)
tmpr normal_thresh=98 bootable_thresh=115
current 46 < thresh 116, booting FW...
================================================================================
DDR clock change and Calibrate... [400->800]
Digital core power voltage set to 1.0V
c_ddr_init: sdram_config=0x014b sdram_ncdl=0x00000320 sdram_refresh=0x0000081c
BUFFALO CFE Version 1.00 [DDRCLK:800]
Memory Test start(0x07E00000) end(0x08000000) size(2097152)
Data line test start:0x07e00000 pattern 0x00000001 0x00000003 0x00000007 0x0000000F 0x00000005 0x00000015 0x00000055 0xAAAAAAAA
Address line test start:0x07e00000 len:0x200000 pattern 0xAAAAAAAA 0x55555555
Fill test patnum:2
fill Pattern 5555AAAA Writing... Reading...
fill Pattern AAAA5555 Writing... Reading...
Decompressing...Decompressing...done
Found a ST compatible (Marconix) serial flash with 16 64KB blocks; total size 1MB
CFE version 6.37.14.62 (r437318) based on BBP 1.0.37 for BCM947XX (32bit,SP,)
Build Date: Tue Sep 2 09:23:49 JST 2014 (root@fc17.localdomain)
Copyright (C) 2000-2008 Broadcom Corporation.
Memory Test start(0x00000000) end(0x07E00000) size(132120576)
Data line test start:0x00000000 pattern 0x00000001 0x00000003 0x00000007 0x0000000F 0x00000005 0x00000015 0x00000055 0xAAAAAAAA
Address line test start:0x00000000 len:0x7e00000 pattern 0xAAAAAAAA 0x55555555
Fill test patnum:2
fill Pattern 5555AAAA Writing... Reading...
fill Pattern AAAA5555 Writing... Reading...
Memory Test start(0x88000000) end(0xA0000000) size(402653184)
Data line test start:0x88000000 pattern 0x00000001 0x00000003 0x00000007 0x0000000F 0x00000005 0x00000015 0x00000055 0xAAAAAAAA
Address line test start:0x88000000 len:0x18000000 pattern 0xAAAAAAAA 0x55555555
Fill test patnum:2
fill Pattern 5555AAAA Writing... Reading...
fill Pattern AAAA5555 Writing... Reading...
Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
Found a Mxic NAND flash:
Total size: 128MB
Block size: 128KB
Page Size: 2048B
OOB Size: 64B
Sector size: 512B
Spare size: 16B
ECC level: 8 (8-bit)
Device ID: 0xc2 0xf1 0x80 0x1d 0xc2 0xf1
DDR Clock: 800 MHz
Info: DDR frequency set from clkfreq=1000,*800*
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.14.62 (r437318)
CPU type 0x0: 1000MHz
Tot mem: 524288 KBytes
Device eth0: hwaddr 76-03-BD-24-A6-2E, ipaddr 192.168.11.1, mask 255.255.255.0
gateway not set, nameserver not set
================================================================================
tmpr current 51 (295)
tmpr normal_thresh=98 bootable_thresh=115
current 51 < thresh 116, booting FW...
================================================================================
FW-A / FW-B header are different
Checking recover image
check_trx: start nflash1.trx_recover
check_trx: exit nflash1.trx_recover
Loader:raw Filesys:raw Dev:nflash0.os_recover File: Options:(null)
Loading: .. 1652880 bytes read
Entry at 0x00008000
Closing network.
Starting program at 0x00008000
Uncompressing Linux... done, booting the kernel.
** 24 printk messages dropped ** Memory: 514288K/524288K available (3470K kernel code, 198K rwdata, 1224K rodata, 344K init, 368K bss, 10000K reserved, 0K cma-reserved, 393216K highmem)
Virtual kernel memory layout:
vector : 0xffff0000 - 0xffff1000 ( 4 kB)
fixmap : 0xffc00000 - 0xfff00000 (3072 kB)
vmalloc : 0x88800000 - 0xff800000 (1904 MB)
lowmem : 0x80000000 - 0x88000000 ( 128 MB)
pkmap : 0x7fe00000 - 0x80000000 ( 2 MB)
modules : 0x7f000000 - 0x7fe00000 ( 14 MB)
.text : 0x80008000 - 0x8049de3c (4696 kB)
.init : 0x8049e000 - 0x804f4000 ( 344 kB)
.data : 0x804f4000 - 0x805259f4 ( 199 kB)
.bss : 0x80528000 - 0x805843e4 ( 369 kB)
Hierarchical RCU implementation.
CONFIG_RCU_FANOUT set to non-default value of 2
Build-time adjustment of leaf fanout to 2.
NR_IRQS:256
MPCORE GIC init
soc_dmu_init
add clk lookups
MPCORE Global Timer Clock 500000000Hz on IRQ 27
sched_clock: 32 bits at 500MHz, resolution 2ns, wraps every 4294967295ns
clocksource: mpcore_gtimer: mask: 0xffffffffffffffff max_cycles: 0xe6a171a037, max_idle_ns: 881590485102 ns
register local timer
smp_twd: clock not found -2
Calibrating local timer... 499.70MHz.
Calibrating delay loop... 1987.37 BogoMIPS (lpj=9936896)
pid_max: default: 32768 minimum: 301
Security Framework initialized
Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
CPU: Testing write buffer coherency: ok
CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
2 cores has been found
Setting up static identity map for 0x85e0 - 0x8614
L2C: platform provided aux values permit register corruption.
L2C: DT/platform modifies aux control register: 0x0a130000 -> 0x7a530000
L2C-310 erratum 769419 enabled
L2C-310 enabling early BRESP for Cortex-A9
L2C-310 full line of zeros enabled for Cortex-A9
L2C-310 dynamic clock gating enabled, standby mode enabled
L2C-310 cache controller enabled, 16 ways, 256 kB
L2C-310: CACHE_ID 0x410000c8, AUX_CTRL 0x4e530001
CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
Brought up 2 CPUs
SMP: Total of 2 processors activated (3981.31 BogoMIPS).
clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
futex hash table entries: 512 (order: 3, 32768 bytes)
NET: Registered protocol family 16
DMA: preallocated 256 KiB pool for atomic coherent allocations
coherence_win_size = 10000000
coherence_flag = FFFFFFF8
ddr_phys_offset_va =FFFFFFFF
ddr_phys_offset2_va =A8000000
Found a ST compatible (Marconix) serial flash with 16 64KB blocks; total size 1MB
found cfe nvram on sflash
CCA UART Clock Config: Sel=1 Ovr=1 Div=48
CCA UART Clock rate 125000000Hz CCB UART Clock rate 125000000Hz
clocksource: Switched to clocksource mpcore_gtimer
NET: Registered protocol family 2
TCP established hash table entries: 1024 (order: 0, 4096 bytes)
TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
UDP hash table entries: 256 (order: 1, 8192 bytes)
UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
NET: Registered protocol family 1
init gpio code
Buffalo WXR-1900DHP
PCI: no core
PCI: no core
PCI: scanning bus 0
PCI host bridge to bus 0000:00
pci_bus 0000:00: root bus resource [io 0x0000-0xffffffff]
pci_bus 0000:00: root bus resource [mem 0x00000000-0xffffffff]
pci_bus 0000:00: root bus resource [bus 00-ff]
pci 0000:00:11.0: [Firmware Bug]: reg 0x10: invalid BAR (can't size)
PCI: Fixing up bus 0 domain 0
PCIE1 link=1
PCIE1 switching to GEN2
PCIE1 link=1
PCI host bridge to bus 0001:00
pci_bus 0001:00: root bus resource [mem 0x08000000-0x0fffffff]
pci_bus 0001:00: No busn resource found for root bus, will use [bus 00-ff]
PCI: Fixing up bus 0 domain 1
PCI: bus0: Fast back to back transfers disabled
pci 0001:01:00.0: Max Payload Size set to 512 (was 128, max 512)
PCI: Fixing up bus 1 domain 1
PCI: bus1: Fast back to back transfers disabled
pci 0001:00:00.0: BAR 8: assigned [mem 0x08000000-0x080fffff]
pci 0001:01:00.0: BAR 0: assigned [mem 0x08000000-0x08007fff 64bit]
pci 0001:00:00.0: PCI bridge to [bus 01]
pci 0001:00:00.0: bridge window [mem 0x08000000-0x080fffff]
PCIE2 link=1
PCIE2 switching to GEN2
PCIE2 link=1
PCI host bridge to bus 0002:00
pci_bus 0002:00: root bus resource [mem 0x40000000-0x47ffffff]
pci_bus 0002:00: No busn resource found for root bus, will use [bus 00-ff]
PCI: Fixing up bus 0 domain 2
PCI: bus0: Fast back to back transfers disabled
pci 0002:01:00.0: Max Payload Size set to 512 (was 128, max 512)
PCI: Fixing up bus 1 domain 2
PCI: bus1: Fast back to back transfers disabled
pci 0002:00:00.0: BAR 8: assigned [mem 0x40000000-0x400fffff]
pci 0002:01:00.0: BAR 0: assigned [mem 0x40000000-0x40007fff 64bit]
pci 0002:00:00.0: PCI bridge to [bus 01]
pci 0002:00:00.0: bridge window [mem 0x40000000-0x400fffff]
PCIE3 link=0
squashfs: version 4.0 (2009/01/31) Phillip Lougher
io scheduler noop registered (default)
io scheduler cfq registered
serial8250_init
Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
console [ttyS0] disabled
serial8250.0: ttyS0 at MMIO 0x18000300 (irq = 117, base_baud = 7812500) is a 16550
console [ttyS0] enabled
serial8250.0: ttyS1 at MMIO 0x18000400 (irq = 117, base_baud = 7812500) is a 16550
brd: module loaded
loop: module loaded
Boot partition size = 2097152(0x200000)
Creating 3 MTD partitions on "bcmsflash":
0x000000000000-0x000000200000 : "boot"
mtd: partition "boot" extends beyond the end of device "bcmsflash" -- size truncated to 0x100000
0x0000000f0000-0x000000100000 : "nvram_cfe"
0x0000000e0000-0x0000000f0000 : "nvram"
Found a Mxic NAND flash:
Total size: 128MB
Block size: 128KB
Page Size: 2048B
OOB Size: 64B
Sector size: 512B
Spare size: 16B
ECC level: 8 (8-bit)
Device ID: 0xc2 0xf1 0x80 0x1d 0xc2 0xf1
Buffalo WXR-1900DHP dualboot
lookup_nflash_rootfs_offset: offset = 0x0 size = 0x6000000, 0x20000
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
Thanks to both, last weekend I use the Pumpkin instead the TFT and I was able to upload the last BS Image on both partition so I recovered my Buffalo.
Cheers