Joined: 31 Aug 2009 Posts: 2448 Location: Third Rock from the Sun
Posted: Fri Dec 09, 2011 12:58 Post subject: 17967 through 18007 WRT400N Semi-Brick
I have bricked and unbricked many broadcom units, but never an atheros. I flashed 17967 and lost communication via cable and did all the proper resets. I am thinking I can breack into the boot and start tftpd, but do not know the proper command. anywho here is the boot log after flash.
AP94 (ar7100) U-boot 0.0.12
DRAM: b8050000: 0xc0140180
32 MB
Top of RAM usable for U-Boot at: 82000000
Reserving 4308k for U-Boot at: 81bc8000
Reserving 192k for malloc() at: 81b98000
Reserving 44 Bytes for Board Info at: 81b97fd4
Reserving 36 Bytes for Global Data at: 81b97fb0
Reserving 128k for boot params() at: 81b77fb0
Stack Pointer at: 81b77f98
Now running in RAM - U-Boot at: 81bc8000
id read 0x100000ff
flash size 8MB, sector count = 128
Flash: 8 MB
In: serial
Out: serial
Err: serial
Net: ag7100_enet_initialize...
No valid address in Flash. Using fixed address
eth0: 00:03:7f:09:0b:ad
eth0 up
No valid address in Flash. Using fixed address
eth1: 00:03:7f:09:0b:ad
eth1 up
eth0, eth1
Press CTRL+C to stop autoboot: 1 0
## Booting image at bf040000 ...
Image Name: MIPS Linux Kernel Image
Created: 2011-12-07 6:12:41 UTC
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 950515 Bytes = 928.2 kB
Load Address: 80002000
Entry Point: 801f6bd0
Verifying Checksum ... OK
Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 801f6bd0) ...
## Giving linux memsize in bytes, 33554432
Starting kernel ...
[ 0.000000] Linux version 2.6.34.10-svn17952 (root@dd-wrt) (gcc version 4.5.4 20110526 (prerelease) (Linaro GCC 4.5-2011.06-0) ) #9507 Wed Dec 7 07:07:04 CET 2011
[ 0.000000] bootconsole [early0] enabled
[ 0.000000] CPU revision is: 00019374 (MIPS 24Kc)
[ 0.000000] booting platform Atheros AR7161 rev 2 (0xaa)
[ 0.000000] Determined physical RAM map:
[ 0.000000] memory: 02000000 @ 00000000 (usable)
[ 0.000000] Zone PFN ranges:
[ 0.000000] Normal 0x00000000 -> 0x00002000
[ 0.000000] Movable zone start PFN for each node
[ 0.000000] early_node_map[1] active PFN ranges
[ 0.000000] 0: 0x00000000 -> 0x00002000
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 8128
[ 0.000000] Kernel command line: console=ttyS0,115200 root=1f02 rootfstype=squashfs noinitrd init=/sbin/init
[ 0.000000] PID hash table entries: 128 (order: -3, 512 bytes)
[ 0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
[ 0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
[ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[ 0.000000] Writing ErrCtl register=00000000
[ 0.000000] Readback ErrCtl register=00000000
[ 0.000000] Memory: 29480k/32768k available (2028k kernel code, 3288k reserved, 503k data, 144k init, 0k highmem)
[ 0.000000] NR_IRQS:128
[ 0.000000] irq init done
[ 0.000000] plat_time_init: plat time init done
[ 0.000000] Calibrating delay loop... 452.19 BogoMIPS (lpj=2260992)
[ 0.250000] Mount-cache hash table entries: 512
[ 0.250000] NET: Registered protocol family 16
[ 3.250000] registering PCI controller with io_map_base unset
[ 3.260000] bio: create slab <bio-0> at 0
[ 3.290000] found calibration data for slot 0 on 0xBF7F1000
[ 3.300000] PCI: fixup device 0000:00:00.0
[ 3.330000] found calibration data for slot 1 on 0xBF7F5000
[ 3.340000] PCI: fixup device 0000:00:01.0
[ 3.350000] pci 0000:00:00.0: BAR 0: assigned [mem 0x10000000-0x1000ffff]
[ 3.350000] pci 0000:00:00.0: BAR 0: set to [mem 0x10000000-0x1000ffff] (PCI address [0x10000000-0x1000ffff]
[ 3.360000] pci 0000:00:01.0: BAR 0: assigned [mem 0x10010000-0x1001ffff]
[ 3.360000] pci 0000:00:01.0: BAR 0: set to [mem 0x10010000-0x1001ffff] (PCI address [0x10010000-0x1001ffff]
[ 3.370000] fixup irq: got 48
[ 3.370000] fixup irq: got 49
[ 3.370000] Switching to clocksource MIPS
[ 3.380000] NET: Registered protocol family 2
[ 3.380000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 3.390000] TCP established hash table entries: 1024 (order: 1, 8192 bytes)
[ 3.400000] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[ 3.400000] TCP: Hash tables configured (established 1024 bind 1024)
[ 3.410000] TCP reno registered
[ 3.410000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[ 3.420000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[ 3.420000] NET: Registered protocol family 1
[ 3.430000] gpio_proc: module loaded and /proc/gpio/ created
[ 3.430000] wl0gpio_proc: module loaded and /proc/wl0gpio/ created
[ 3.440000] AR7100 GPIOC major 0
[ 3.440000] init_vdso successfull
[ 3.450000] squashfs: version 3.0 (2006/03/15) Phillip Lougher
[ 3.450000] msgmni has been set to 57
[ 3.460000] io scheduler noop registered
[ 3.460000] io scheduler deadline registered (default)
[ 3.470000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[ 3.480000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 19) is a 16550A
[ 3.480000] console [ttyS0] enabled, bootconsole disabled
[ 3.480000] console [ttyS0] enabled, bootconsole disabled
[ 3.500000] guessed flashsize = 8M
[ 3.500000] scanning for root partition
[ 3.500000] uboot detected
[ 3.510000] bootloader size = 40000
[ 3.510000]
[ 3.510000] found squashfs at 129000
[ 3.520000] Creating 8 MTD partitions on "ar7100-nor0":
[ 3.520000] 0x000000000000-0x000000040000 : "RedBoot"
[ 3.530000] 0x000000040000-0x000000800000 : "linux"
[ 3.540000] 0x000000129000-0x000000660000 : "rootfs"
[ 3.540000] mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[ 3.550000] mtd: partition "rootfs" set to be root filesystem
[ 3.560000] 0x000000660000-0x0000007e0000 : "ddwrt"
[ 3.570000] 0x0000007e0000-0x0000007f0000 : "nvram"
[ 3.570000] 0x0000007f0000-0x000000800000 : "FIS directory"
[ 3.580000] 0x0000007f0000-0x000000800000 : "board_config"
[ 3.580000] 0x000000000000-0x000000800000 : "fullflash"
[ 3.590000] PPP generic driver version 2.4.2
[ 3.590000] PPP Deflate Compression module registered
[ 3.600000] PPP BSD Compression module registered
[ 3.600000] PPP MPPE Compression module registered
[ 3.610000] NET: Registered protocol family 24
[ 3.610000] PPPoL2TP kernel driver, V1.0
[ 3.620000] IMQ driver loaded successfully.
[ 3.620000] Hooking IMQ before NAT on PREROUTING.
[ 3.630000] Hooking IMQ after NAT on POSTROUTING.
[ 3.630000] tun: Universal TUN/TAP device driver, 1.6
[ 3.640000] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
[ 4.040000] Software Watchdog Timer: 0.07 initialized. soft_noboot=0 soft_margin=60 sec (nowayout= 0)
[ 4.070000] u32 classifier
[ 4.070000] input device check on
[ 4.080000] Actions configured
[ 4.080000] Netfilter messages via NETLINK v0.30.
[ 4.080000] nf_conntrack version 0.5.0 (460 buckets, 1840 max)
[ 4.090000] CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use
[ 4.100000] nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or
[ 4.110000] sysctl net.netfilter.nf_conntrack_acct=1 to enable it.
[ 4.110000] nf_conntrack_rtsp v0.6.21 loading
[ 4.120000] nf_nat_rtsp v0.6.21 loading
[ 4.120000] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 4.130000] IPP2P v0.8.2 loading
[ 4.130000] TCP westwood registered
[ 4.130000] TCP hybla registered
[ 4.140000] TCP vegas registered
[ 4.140000] NET: Registered protocol family 17
[ 4.140000] 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
[ 4.150000] All bugs added by David S. Miller <davem@redhat.com>
[ 4.190000] Broken NVRAM found, recovering it (Magic FFFFFFFF)
[ 4.200000] VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
[ 4.200000] Freeing unused kernel memory: 144k freed
start service
starting Architecture code for wrt400
starting hotplug
Jan 1 00:00:05 udevtrigger[251]: parse_config_file: can't open '/etc/udev/udev.conf' as config file: No such file or directory
Posted: Fri Dec 09, 2011 14:01 Post subject: Re: BS 17967 flash WRT400N now stuck in boot loop
Dark_Shadow wrote:
I have bricked and unbricked many broadcom units, but never an atheros.
My skype logs tells me you have
There should be debrick instructions at infodepot for the WRT400N.. _________________ Kernel panic: Aiee, killing interrupt handler!
Joined: 31 Aug 2009 Posts: 2448 Location: Third Rock from the Sun
Posted: Fri Dec 09, 2011 15:41 Post subject:
LOM wrote:
Dark_Shadow wrote:
Nevermind, I feel real stupid
Don't, we all have those Alzheimer moments.
Got it running?
I can get it back to 17201, but if I load anything higher I get the loop boot. Seams to get stuck at call mac80211autochannel for interface: ath0 and rebooting.
Is there any other data I can provide so the problem with the firmware can be found? _________________ Peacock Thread-FAQ -- dd-wrt Wiki
Joined: 31 Aug 2009 Posts: 2448 Location: Third Rock from the Sun
Posted: Sun Dec 11, 2011 9:31 Post subject:
cityismine wrote:
I hastily installed r17990 and ended with a bricked unit as well. Can I use tftp method to recover, or will I have to purchase a jtag or serial cable?
You can try, mine wouldn't do it. I had to use a serial TTL convertor and recover via the link I posted. _________________ Peacock Thread-FAQ -- dd-wrt Wiki
Joined: 31 Aug 2009 Posts: 2448 Location: Third Rock from the Sun
Posted: Tue Dec 13, 2011 16:29 Post subject:
Dark_Shadow wrote:
flashing 18000 results
uploading [6410317]
[ 3083.730000] SQUASHFS error: lzma returned unexpected result 0x1
[ 3083.730000] SQUASHFS error: Unable to read page, block fdb8a, size a87c
[ 3083.790000] SQUASHFS error: lzma returned unexpected result 0x2
[ 3083.800000] SQUASHFS error: Unable to read fragment cache block [291822]
[ 3083.800000] SQUASHFS error: Unable to read page, block 291822, size 9254
[ 3083.810000] SQUASHFS error: lzma returned unexpected result 0x2
[ 3083.820000] SQUASHFS error: Unable to read fragment cache block [291822]
[ 3083.820000] SQUASHFS error: Unable to read page, block 291822, size 9254
[ 3083.830000] SQUASHFS error: lzma returned unexpected result 0x2
[ 3083.840000] SQUASHFS error: Unable to read fragment cache block [291822]
[ 3083.840000] SQUASHFS error: Unable to read page, block 291822, size 9254
Amber SES flashing, No GUI
at this point a power cycle results in boot problem. recoverable via serial.
@ BrainSlayer
I see you posted a fix for the lzma error, Could I get a test build for the WRT400N to see if it fixes that as well? _________________ Peacock Thread-FAQ -- dd-wrt Wiki