WZR-D1800 De-Bricking Thread

Post new topic   This topic is locked: you cannot edit posts or make replies.    DD-WRT Forum Index -> Broadcom SoC based Hardware
Goto page Previous  1, 2, 3, 4, 5, 6  Next
Author Message
Magnetron1.1
DD-WRT User


Joined: 21 Nov 2010
Posts: 278
Location: North America

PostPosted: Mon Jun 03, 2013 10:19    Post subject: Re: serial port hookup Reply with quote
Omar250 wrote:
How did you hookup to the serial port of the wzr-d100h? Was it difficult to get the case open?


Here are photos of the router disassembly and the serial port pinout:
(Click on the images to make them larger. Optimized for 17" monitors)

Tool List


Removing Rear Legend Strip


Removing Hidden Screws


Removing The Top


Serial Port Pinout


- Magnetron1.1
Sponsor
Omar250
DD-WRT Novice


Joined: 14 Mar 2013
Posts: 15

PostPosted: Mon Jun 03, 2013 12:23    Post subject: WZR-D1800H case opening and serial port Reply with quote
Thanks for the pics Magnetron! I got the case open without trashing it too bad. I thought I was going to have to solder a pinout at J4 since I have seen reference to J4 in other posts. It's nice that J9 already has pins. Now I'm just waiting for my USB to TTL serial cable to show up in the mail and I'll flash a *.trx file and hope for the best.
Dark_Shadow
DD-WRT Guru


Joined: 31 Aug 2009
Posts: 2448
Location: Third Rock from the Sun

PostPosted: Mon Jun 03, 2013 23:03    Post subject: Re: serial port hookup Reply with quote
Magnetron1.1 wrote:
Omar250 wrote:
How did you hookup to the serial port of the wzr-d100h? Was it difficult to get the case open?


Here are photos of the router disassembly and the serial port pinout:
(Click on the images to make them larger. Optimized for 17" monitors)

- Magnetron1.1
Can I copy this to my wiki?
_________________
Peacock Thread-FAQ -- dd-wrt Wiki

Testing Multiple Routers -- Bootloader Collection Project -- My Wiki
Magnetron1.1
DD-WRT User


Joined: 21 Nov 2010
Posts: 278
Location: North America

PostPosted: Tue Jun 04, 2013 1:43    Post subject: Re: serial port hookup Reply with quote
Dark_Shadow wrote:
Can I copy this to my wiki?

Yes.

- Magnetron1.1
janwil
DD-WRT Novice


Joined: 05 Jun 2013
Posts: 1

PostPosted: Wed Jun 05, 2013 23:00    Post subject: Re: serial port hookup Reply with quote
Magnetron1.1 wrote:
Omar250 wrote:
How did you hookup to the serial port of the wzr-d100h? Was it difficult to get the case open?


Here are photos of the router disassembly and the serial port pinout:
(Click on the images to make them larger. Optimized for 17" monitors)

Tool List


Removing Rear Legend Strip


Removing Hidden Screws


Removing The Top


Serial Port Pinout


- Magnetron1.1


Sorry for my noob question. I bricked my new router also in the first 5 minutes i had it Sad

I disasembled an old mouse, can i connect the pins like this or shall i switch rx and tx and the 3.3VDC shouldn't be connected i think

Tnx for the great work



rs232female.png
 Description:
 Filesize:  501 KB
 Viewed:  22991 Time(s)

rs232female.png


Code Chief
DD-WRT Novice


Joined: 05 Jun 2013
Posts: 3

PostPosted: Thu Jun 06, 2013 1:47    Post subject: Reply with quote
Thanks Magnetron1.1!

I've now fixed my router the hard way (serial diagnostics/opening the case). Interestingly, in the absence of a TTY adapter I found a way to use my Arduino Mega as a TTY to USB serial bridge!

I've borrowed your case opening images if you don't mind?... to write all this up into a blog post:

http://codechief.wordpress.com/2013/06/06/de-bricking-a-buffalo-wifi-router-with-an-arduino/

The key which fixed it for me was to force the download via the "flash" command with a "tftp" source and the "size" option specified.

It seems with the latest firmware (which is different at least in the way that it bricks your router!) there's some kind of bug in the automatic (AOSS button during boot) download option timing out. Besides it went from a working state into this corrupt/reboot loop by just clicking save in the web GUI.

Thanks again, my router works now (at least as an access point) and when configured with Mixed-NA and Mixed-NG (G-N-AC compatibility at the same time as dual N) is extremely fast and has a much stronger signal with DD-WRT.
Magnetron1.1
DD-WRT User


Joined: 21 Nov 2010
Posts: 278
Location: North America

PostPosted: Thu Jun 06, 2013 3:42    Post subject: Reply with quote
@All
Permission is granted to anyone wishing to re-post the images.

@Code Chief
You might consider reorganizing the images on your web site so that no one attempts to "pop" the top before removing the two hidden screws.

- Magnetron1.1
Code Chief
DD-WRT Novice


Joined: 05 Jun 2013
Posts: 3

PostPosted: Thu Jun 06, 2013 11:52    Post subject: Reply with quote
Magnetron1.1 wrote:
@All
@Code Chief
You might consider reorganizing the images on your web site so that no one attempts to "pop" the top before removing the two hidden screws.

- Magnetron1.1


Thanks, yes that's important, I've corrected it now. I'll open mine again in a few weeks to show my son (learning electronics) something cool, so I'll add another picture under the lid showing where the catches are.

I broke a few opening mine (had no laptop tool jut a flat head screwdriver). It would have been good to know where they were. Not a big problem, the front catches are strong enough together with the back screws to hold it tight (looks as good as new).

I found this procedure real fun anyway, being a programmer come hobby/newbie electrical engineer. Reminds me of the XBOX opening procedure I had to do a few times in the past (the overheating fix) Smile
Omar250
DD-WRT Novice


Joined: 14 Mar 2013
Posts: 15

PostPosted: Wed Jun 12, 2013 15:00    Post subject: WZR-D1800H serial flashing problem Reply with quote
I thought I was all set when I received my USB to serial cable in the mail the other day. Unfortunately it hasn't been the answer to my prayers to recover my WZR-D1800H. If anyone has insight on what the heck it wrong, it would be GREATLY appreciated.

nvram erase
*** command status = 0

CFE> flash -noheader : nflash1.trx
Reading :: Done. 18444288 bytes read
Programming...done. 18444288 bytes written
*** command status = 0
CFE> go
check_trx: start nflash1.trx
check_trx: exit nflash1.trx
Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
Loading: .. 1312820 bytes read
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
CPU revision is: 00019749 (MIPS 74Kc)
Found an ST compatible serial flash with 8 64KB blocks; total size 0MB
found nvram at 50000
something wrong here. do not remap
Determined physical RAM map:
memory: 07fff000 @ 00000000 (usable)
Zone ranges:
Normal [mem 0x00000000-0x07ffefff]
Movable zone start for each node
Early memory node ranges
node 0: [mem 0x00000000-0x07ffefff]
Primary instruction cache 32kB, 4-way, VIPT, I-cache aliases, linesize 32 bytes.
Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
Linux version 3.8.7 (root@dd-wrt) (gcc version 4.7.3 20121106 (prerelease) (Linaro GCC 4.7-2012.11) ) #162 Mon Apr 15 11:51:57 CEST 2013
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32511
Kernel command line: console=ttyS0,115200 root=1f06 rootfstype=squashfs noinitrd init=/bin/sh
PID hash table entries: 512 (order: -1, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
__ex_table already sorted, skipping sort
Writing ErrCtl register=80000860
Readback ErrCtl register=80000860
Cache parity protection enabled
Memory: 125652k/131068k available (2953k kernel code, 5416k reserved, 639k data, 304k init, 0k highmem)
NR_IRQS:128
CPU: BCM5300 rev 1 at 600 MHz
bcm947xx_clockevent_set_mode: 1
bcm947xx_clockevent_set_mode: 3
console [ttyS0] enabled
Calibrating delay loop... 299.82 BogoMIPS (lpj=1499136)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
NET: Registered protocol family 16
bio: create slab <bio-0> at 0
PCI: Initializing host
PCI: Reset RC
PCI: Initializing host
PCI: Reset RC
PCI: scanning bus 0
PCI host bridge to bus 0000:00
pci_bus 0000:00: root bus resource [io 0x0000-0xffff]
pci_bus 0000:00: root bus resource [mem 0x00000000-0xffffffff]
pci_bus 0000:00: root bus resource [bus 00-ff]
PCI: Fixing up bus 0
pci 0000:00:05.0: bridge configuration invalid ([bus 00-00]), reconfiguring
pci 0000:00:06.0: bridge configuration invalid ([bus 00-00]), reconfiguring
PCI/PCIe coreunit 0 is set to bus 1.
PCI: Fixing up bridge
PCI: Fixing up bridge
PCI: Enabling device 0000:01:00.1 (0004 -> 0006)
PCI: Fixing up bus 1
PCI/PCIe coreunit 1 is set to bus 2.
PCI: Fixing up bridge
PCI: Fixing up bridge
PCI: Enabling device 0000:02:00.1 (0004 -> 0006)
PCI: Fixing up bus 2
Switching to clocksource MIPS
NET: Registered protocol family 2
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP: reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
Buffalo D1800H init
squashfs: version 3.0 (2006/03/15) Phillip Lougher
msgmni has been set to 245
alg: No test for stdrng (krng)
io scheduler noop registered (default)
HDLC line discipline maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver, 4 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = Cool is a U6_16550A
serial8250: ttyS1 at MMIO 0x0 (irq = Cool is a U6_16550A
brd: module loaded
pflash: found no supported devices
try to find cfe size up to 524288
no filesys. assume nflash devices
bootloader size: 524288
nvram size: 65536
Creating 3 MTD partitions on "bcmsflash":
0x000000000000-0x000000080000 : "cfe"
0x000000070000-0x000000080000 : "nvram"
0x000000070000-0x000000080000 : "nvram_cfe"
Found a Samsung NAND flash with 2048B pages or 128KB blocks; total size 128MB
NAND device: Manufacturer ID: 0xec, Chip ID: 0xf1 (Samsung NAND 128MiB 3,3V 8-bit), 128MiB, page size: 2048, OOB size: 64
Bad block table found at page 65472, version 0x01
Bad block table found at page 65408, version 0x01
nand_read_bbt: bad block at 0x0000000e0000
nand_read_bbt: bad block at 0x000000140000
nand_read_bbt: bad block at 0x0000018c0000
nand_read_bbt: bad block at 0x0000032a0000
nand_read_bbt: bad block at 0x000003de0000
nand_read_bbt: bad block at 0x0000051c0000
Creating 2 MTD partitions on "brcmnand":
0x000000000000-0x000002000000 : "linux"
0x000002000000-0x000007f00000 : "ddwrt"
lookup_nflash_rootfs_offset: offset = 0x0
found trx at 0, len =18444288
scan filesys at 140400
Creating 2 MTD partitions on "nflash":
0x000000000000-0x000002000000 : "nandimage"
0x000002000000-0x000008000000 : "rootfs"
mtd: partition "rootfs" set to be root filesystem
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
PPP generic driver version 2.4.2
PPP BSD Compression module registered
PPP Deflate Compression module registered
PPP MPPE Compression module registered
NET: Registered protocol family 24
Broadcom Watchdog Timer: 0.07 initialized.
GACT probability NOT on
Mirror/redirect action on
Simple TC action Loaded
netem: version 1.3
u32 classifier
Performance counters on
input device check on
Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1963 buckets, 7852 max)
nf_conntrack_rtsp v0.6.21 loading
xt_time: kernel timezone is -0000
ip_set: protocol 6
gre: GRE over IPv4 demultiplexor driver
nf_nat_rtsp v0.6.21 loading
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP: bic registered
TCP: cubic registered
TCP: westwood registered
TCP: highspeed registered
TCP: hybla registered
TCP: htcp registered
TCP: vegas registered
TCP: veno registered
TCP: scalable registered
TCP: lp registered
TCP: yeah registered
TCP: illinois registered
NET: Registered protocol family 17
Bridge firewalling registered
8021q: 802.1Q VLAN Support v1.8
startup nvram driver
found nvram
found cfe nvram
List of all partitions:
1f00 512 mtdblock0 (driver?)
1f01 64 mtdblock1 (driver?)
1f02 64 mtdblock2 (driver?)
1f03 32768 mtdblock3 (driver?)
1f04 97280 mtdblock4 (driver?)
1f05 32768 mtdblock5 (driver?)
1f06 98304 mtdblock6 (driver?)
No filesystem could mount root, tried: squashfs
Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(31,6)
Rebooting in 3 seconds..Please stand by while rebooting the system...
Magnetron1.1
DD-WRT User


Joined: 21 Nov 2010
Posts: 278
Location: North America

PostPosted: Thu Jun 13, 2013 1:19    Post subject: Reply with quote
@Omar250

The kernel panics because it can't mount the root file system and forces a reboot.

Creating 3 MTD partitions on "bcmsflash":
0x000000000000-0x000000080000 : "cfe"
0x000000070000-0x000000080000 : "nvram"
0x000000070000-0x000000080000 : "nvram_cfe"
Found a Samsung NAND flash with 2048B pages or 128KB blocks; total size 128MB
NAND device: Manufacturer ID: 0xec, Chip ID: 0xf1 (Samsung NAND 128MiB 3,3V 8-bit), 128MiB, page size: 2048, OOB size: 64
Bad block table found at page 65472, version 0x01
Bad block table found at page 65408, version 0x01
nand_read_bbt: bad block at 0x0000000e0000
nand_read_bbt: bad block at 0x000000140000 <= This could be trouble. Bad block in critical area.
nand_read_bbt: bad block at 0x0000018c0000
nand_read_bbt: bad block at 0x0000032a0000
nand_read_bbt: bad block at 0x000003de0000
nand_read_bbt: bad block at 0x0000051c0000
Creating 2 MTD partitions on "brcmnand":
0x000000000000-0x000002000000 : "linux"
0x000002000000-0x000007f00000 : "ddwrt"
lookup_nflash_rootfs_offset: offset = 0x0
found trx at 0, len =18444288
scan filesys at 140400 <= Starting offset addr in "nandimage". Didn't find squashfs magic.
Creating 2 MTD partitions on "nflash":
0x000000000000-0x000002000000 : "nandimage"
0x000002000000-0x000008000000 : "rootfs" <= "rootfs" mapped incorrectly. Should be 0x000000140400-0x000002000000
mtd: partition "rootfs" set to be root filesystem

Did you try to flash the firmware multiple times?
If you can't get this firmware to work try flashing the unencrypted Buffalo 191 firmware.

- Magnetron1.1



ddwrt2buff_d1800h191fw.bin
 Description:
md5sum = 551C421E6105E6CADF4EB7B6997BF78F

Download
 Filename:  ddwrt2buff_d1800h191fw.bin
 Filesize:  32 MB
 Downloaded:  1023 Time(s)

Omar250
DD-WRT Novice


Joined: 14 Mar 2013
Posts: 15

PostPosted: Mon Jun 17, 2013 3:12    Post subject: Who wants a bricked wzr-d1800h? Reply with quote
I want to thank Magnetron for his analysis and tips. I tried to flash Buffalo 191 firmware via serial, but the flash fails 99% into the process. I'm at the end of my patience with this router. I'd like to donate the router to someone who could use it for development of dd-wrt on the wzr-d1800h, spare parts, or paper weight. Send me a private post of you're interested or throw out some recommendations in the forum.
Malachi
DD-WRT Guru


Joined: 17 Jul 2012
Posts: 7209
Location: Columbus, Ohio

PostPosted: Tue Jun 25, 2013 0:09    Post subject: Reply with quote
I've set my IP address at 192.168.11.7, subnet 255.255.255.0, default gateway 192.168.11.1, I get ttl=100.
I issue nvram erase
Flash -noheader : flash1.trx, used different tftp programs to upload the unencrypted fw posted and the dd-wrt.trx file posted in the thread but it never finishes uploading.

Edit: found a file Megnetron said to use for cfe flash, said it was successful, I used to command.
Now it's stuck in a boot loop says kernel panic.

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2013.06.26 21:44:06 =~=~=~=~=~=~=~=~=~=~=~=


BUFFALO CFE Version 1.04
Memory Test start(0xA0100000) end(0xA8000000) size(33292288)
Data line test start:0xa0100000 pattern 0x00000001 0x00000003 0x00000007 0x0000000F 0x00000005 0x00000015 0x00000055 0xAAAAAAAA
Address line test start:0xa0100000 len:0x7f00000 pattern 0xAAAAAAAA 0x55555555
Fill test patnum:2
fill Pattern 5555AAAA Writing... Reading...
fill Pattern AAAA5555 Writing... Reading...
Decompressing...done


CFE version 6.30.15.3 (r315282) based on BBP 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: Tue Apr 24 09:04:01 JST 2012 (root@fc15.localdomain)
Copyright (C) 2000-2008 Broadcom Corporation.

Init Arena
Initializing PCI. [normal]
PCI bus 0 slot 0/0: vendor 0x14e4 product 0x0800 (flash memory, rev 0x01)
PCI bus 0 slot 1/0: vendor 0x14e4 product 0x4715 (ethernet network, rev 0x01)
PCI bus 0 slot 4/0: vendor 0x14e4 product 0x471a (USB serial bus, interface 0x10, rev 0x01)
PCI bus 0 slot 4/1: vendor 0x14e4 product 0x471a (USB serial bus, interface 0x20, rev 0x01)
PCI bus 0 slot 5/0: vendor 0x14e4 product 0x0820 (PCI bridge, rev 0x01)
PCI bus 0 slot 6/0: vendor 0x14e4 product 0x0820 (PCI bridge, rev 0x01)
PCI bus 0 slot 7/0: vendor 0x14e4 product 0x052e (undefined subclass 0xff, interface 0xff, rev 0x01)
PCI bus 0 slot 8/0: vendor 0x14e4 product 0x080e (RAM memory, rev 0x01)
PCI bus 0 slot 9/0: vendor 0x14e4 product 0x0534 (undefined subclass 0xff, interface 0xff, rev 0x01)
Init Devs.
Boot partition size = 262144(0x40000)
Found an ST compatible serial flash with 8 64KB blocks; total size 0MB
Found a Samsung (1 bit-cell) NAND flash with 2048B pages or 128KB blocks; total size 128MB
bcm_robo_enable_switch: EEE is disabled
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.30.15.3 (r315282)
CPU type 0x19749: 600MHz
Tot mem: 131072 KBytes

CFE mem: 0x87000000 - 0x87164A60 (1460832)
Data: 0x8704C9A0 - 0x87050BA0 (16896)
BSS: 0x87050BA0 - 0x87062A60 (73408)
Heap: 0x87062A60 - 0x87162A60 (1048576)
Stack: 0x87162A60 - 0x87164A60 (8192)
Text: 0x87000000 - 0x8704C994 (313748)

DRAM magic offset:00060000 size:00010000
DRAM magic found
initializing nvram...done
commiting nvram...done
now rebooting

BUFFALO CFE Version 1.04
Memory Test start(0xA0100000) end(0xA8000000) size(33292288)
Data line test start:0xa0100000 pattern 0x00000001 0x00000003 0x00000007 0x0000000F 0x00000005 0x00000015 0x00000055 0xAAAAAAAA
Address line test start:0xa0100000 len:0x7f00000 pattern 0xAAAAAAAA 0x55555555
Fill test patnum:2
fill Pattern 5555AAAA Writing... Reading...
fill Pattern AAAA5555 Writing... Reading...
Decompressing...done


CFE version 6.30.15.3 (r315282) based on BBP 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: Tue Apr 24 09:04:01 JST 2012 (root@fc15.localdomain)
Copyright (C) 2000-2008 Broadcom Corporation.

Init Arena
Initializing PCI. [normal]
PCI bus 0 slot 0/0: vendor 0x14e4 product 0x0800 (flash memory, rev 0x01)
PCI bus 0 slot 1/0: vendor 0x14e4 product 0x4715 (ethernet network, rev 0x01)
PCI bus 0 slot 4/0: vendor 0x14e4 product 0x471a (USB serial bus, interface 0x10, rev 0x01)
PCI bus 0 slot 4/1: vendor 0x14e4 product 0x471a (USB serial bus, interface 0x20, rev 0x01)
PCI bus 0 slot 5/0: vendor 0x14e4 product 0x0820 (PCI bridge, rev 0x01)
PCI bus 0 slot 6/0: vendor 0x14e4 product 0x0820 (PCI bridge, rev 0x01)
PCI bus 0 slot 7/0: vendor 0x14e4 product 0x052e (undefined subclass 0xff, interface 0xff, rev 0x01)
PCI bus 0 slot 8/0: vendor 0x14e4 product 0x080e (RAM memory, rev 0x01)
PCI bus 0 slot 9/0: vendor 0x14e4 product 0x0534 (undefined subclass 0xff, interface 0xff, rev 0x01)
Init Devs.
Boot partition size = 262144(0x40000)
Found an ST compatible serial flash with 8 64KB blocks; total size 0MB
Found a Samsung (1 bit-cell) NAND flash with 2048B pages or 128KB blocks; total size 128MB
bcm_robo_enable_switch: EEE is disabled
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.30.15.3 (r315282)
CPU type 0x19749: 600MHz
Tot mem: 131072 KBytes

CFE mem: 0x87000000 - 0x87164A60 (1460832)
Data: 0x8704C9A0 - 0x87050BA0 (16896)
BSS: 0x87050BA0 - 0x87062A60 (73408)
Heap: 0x87062A60 - 0x87162A60 (1048576)
Stack: 0x87162A60 - 0x87164A60 (8192)
Text: 0x87000000 - 0x8704C994 (313748)

DRAM magic offset:00060000 size:00010000
DRAM magic found
Device eth0: hwaddr 12-6F-3F-16-0C-20, ipaddr 192.168.11.1, mask 255.255.255.0
gateway not set, nameserver not set
check_trx: start nflash1.trx
check_trx: exit nflash1.trx
Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
Loading: .. 1312820 bytes read
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
CPU revision is: 00019749 (MIPS 74Kc)
Found an ST compatible serial flash with 8 64KB blocks; total size 0MB
found nvram at 50000
map cfe nvram at 78000
Determined physical RAM map:
memory: 07fff000 @ 00000000 (usable)
Zone ranges:
Normal [mem 0x00000000-0x07ffefff]
Movable zone start for each node
Early memory node ranges
node 0: [mem 0x00000000-0x07ffefff]
Primary instruction cache 32kB, 4-way, VIPT, I-cache aliases, linesize 32 bytes.
Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
Linux version 3.8.7 (root@dd-wrt) (gcc version 4.7.3 20121106 (prerelease) (Linaro GCC 4.7-2012.11) ) #162 Mon Apr 15 11:51:57 CEST 2013
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32511
Kernel command line: console=ttyS0,115200 root=1f06 rootfstype=squashfs noinitrd init=/bin/sh
PID hash table entries: 512 (order: -1, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
__ex_table already sorted, skipping sort
Writing ErrCtl register=80000860
Readback ErrCtl register=80000860
Cache parity protection enabled
Memory: 125652k/131068k available (2953k kernel code, 5416k reserved, 639k data, 304k init, 0k highmem)
NR_IRQS:128
CPU: BCM5300 rev 1 at 600 MHz
bcm947xx_clockevent_set_mode: 1
bcm947xx_clockevent_set_mode: 3
console [ttyS0] enabled
Calibrating delay loop... 299.82 BogoMIPS (lpj=1499136)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
NET: Registered protocol family 16
bio: create slab <bio-0> at 0
PCI: Initializing host
PCI: Reset RC
PCI: Initializing host
PCI: Reset RC
PCI: scanning bus 0
PCI host bridge to bus 0000:00
pci_bus 0000:00: root bus resource [io 0x0000-0xffff]
pci_bus 0000:00: root bus resource [mem 0x00000000-0xffffffff]
pci_bus 0000:00: root bus resource [bus 00-ff]
PCI: Fixing up bus 0
pci 0000:00:05.0: bridge configuration invalid ([bus 00-00]), reconfiguring
pci 0000:00:06.0: bridge configuration invalid ([bus 00-00]), reconfiguring
PCI/PCIe coreunit 0 is set to bus 1.
PCI: Fixing up bridge
PCI: Fixing up bridge
PCI: Enabling device 0000:01:00.1 (0004 -> 0006)
PCI: Fixing up bus 1
PCI/PCIe coreunit 1 is set to bus 2.
PCI: Fixing up bridge
PCI: Fixing up bridge
PCI: Enabling device 0000:02:00.1 (0004 -> 0006)
PCI: Fixing up bus 2
Switching to clocksource MIPS
NET: Registered protocol family 2
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP: reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
Buffalo D1800H init
squashfs: version 3.0 (2006/03/15) Phillip Lougher
msgmni has been set to 245
alg: No test for stdrng (krng)
io scheduler noop registered (default)
HDLC line discipline maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver, 4 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = Cool is a U6_16550A
serial8250: ttyS1 at MMIO 0x0 (irq = Cool is a U6_16550A
brd: module loaded
pflash: found no supported devices
try to find cfe size up to 524288
no filesys. assume nflash devices
bootloader size: 524288
nvram size: 65536
Creating 3 MTD partitions on "bcmsflash":
0x000000000000-0x000000080000 : "cfe"
0x000000050000-0x000000060000 : "nvram"
0x000000070000-0x000000080000 : "nvram_cfe"
Found a Samsung NAND flash with 2048B pages or 128KB blocks; total size 128MB
NAND device: Manufacturer ID: 0xec, Chip ID: 0xf1 (Samsung NAND 128MiB 3,3V 8-bit), 128MiB, page size: 2048, OOB size: 64
Bad block table found at page 65472, version 0x01
Bad block table found at page 65408, version 0x01
nand_read_bbt: bad block at 0x0000000e0000
nand_read_bbt: bad block at 0x000000140000
nand_read_bbt: bad block at 0x0000018c0000
nand_read_bbt: bad block at 0x0000032a0000
nand_read_bbt: bad block at 0x000003de0000
nand_read_bbt: bad block at 0x0000051c0000
Creating 2 MTD partitions on "brcmnand":
0x000000000000-0x000002000000 : "linux"
0x000002000000-0x000007f00000 : "ddwrt"
lookup_nflash_rootfs_offset: offset = 0x0
found trx at 0, len =18444288
scan filesys at 140400
Creating 2 MTD partitions on "nflash":
0x000000000000-0x000002000000 : "nandimage"
0x000002000000-0x000008000000 : "rootfs"
mtd: partition "rootfs" set to be root filesystem
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
PPP generic driver version 2.4.2
PPP BSD Compression module registered
PPP Deflate Compression module registered
PPP MPPE Compression module registered
NET: Registered protocol family 24
Broadcom Watchdog Timer: 0.07 initialized.
GACT probability NOT on
Mirror/redirect action on
Simple TC action Loaded
netem: version 1.3
u32 classifier
Performance counters on
input device check on
Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1963 buckets, 7852 max)
nf_conntrack_rtsp v0.6.21 loading
xt_time: kernel timezone is -0000
ip_set: protocol 6
gre: GRE over IPv4 demultiplexor driver
nf_nat_rtsp v0.6.21 loading
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP: bic registered
TCP: cubic registered
TCP: westwood registered
TCP: highspeed registered
TCP: hybla registered
TCP: htcp registered
TCP: vegas registered
TCP: veno registered
TCP: scalable registered
TCP: lp registered
TCP: yeah registered
TCP: illinois registered
NET: Registered protocol family 17
Bridge firewalling registered
8021q: 802.1Q VLAN Support v1.8
startup nvram driver
found nvram
found cfe nvram
List of all partitions:
1f00 512 mtdblock0 (driver?)
1f01 64 mtdblock1 (driver?)
1f02 64 mtdblock2 (driver?)
1f03 32768 mtdblock3 (driver?)
1f04 97280 mtdblock4 (driver?)
1f05 32768 mtdblock5 (driver?)
1f06 98304 mtdblock6 (driver?)
No filesystem could mount root, tried: squashfs
Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(31,6)
Rebooting in 3 seconds..Please stand by while rebooting the system...

_________________
I am far from a guru, I'm barely a novice.


Last edited by Malachi on Thu Jun 27, 2013 1:49; edited 1 time in total
Malachi
DD-WRT Guru


Joined: 17 Jul 2012
Posts: 7209
Location: Columbus, Ohio

PostPosted: Tue Jun 25, 2013 0:36    Post subject: Reply with quote
Actually it's the router that Omar had. The output is the same. I just don't want to give up on it.

This is directed at buddee: do you think I could follow your de-bricking method from the wzr-hp-ag300h on this router once I erase the nvram with the serial connection, so I could use the buffalo encrypted fw?

_________________
I am far from a guru, I'm barely a novice.
Malachi
DD-WRT Guru


Joined: 17 Jul 2012
Posts: 7209
Location: Columbus, Ohio

PostPosted: Tue Jun 25, 2013 22:04    Post subject: Reply with quote
Magnetron1.1 wrote:
@Omar250

The kernel panics because it can't mount the root file system and forces a reboot.

Creating 3 MTD partitions on "bcmsflash":
0x000000000000-0x000000080000 : "cfe"
0x000000070000-0x000000080000 : "nvram"
0x000000070000-0x000000080000 : "nvram_cfe"
Found a Samsung NAND flash with 2048B pages or 128KB blocks; total size 128MB
NAND device: Manufacturer ID: 0xec, Chip ID: 0xf1 (Samsung NAND 128MiB 3,3V 8-bit), 128MiB, page size: 2048, OOB size: 64
Bad block table found at page 65472, version 0x01
Bad block table found at page 65408, version 0x01
nand_read_bbt: bad block at 0x0000000e0000
nand_read_bbt: bad block at 0x000000140000 <= This could be trouble. Bad block in critical area.
nand_read_bbt: bad block at 0x0000018c0000
nand_read_bbt: bad block at 0x0000032a0000
nand_read_bbt: bad block at 0x000003de0000
nand_read_bbt: bad block at 0x0000051c0000
Creating 2 MTD partitions on "brcmnand":
0x000000000000-0x000002000000 : "linux"
0x000002000000-0x000007f00000 : "ddwrt"
lookup_nflash_rootfs_offset: offset = 0x0
found trx at 0, len =18444288
scan filesys at 140400 <= Starting offset addr in "nandimage". Didn't find squashfs magic.
Creating 2 MTD partitions on "nflash":
0x000000000000-0x000002000000 : "nandimage"
0x000002000000-0x000008000000 : "rootfs" <= "rootfs" mapped incorrectly. Should be 0x000000140400-0x000002000000
mtd: partition "rootfs" set to be root filesystem

Did you try to flash the firmware multiple times?
If you can't get this firmware to work try flashing the unencrypted Buffalo 191 firmware.

- Magnetron1.1


I've done this multiple times. Is there anything else I can do? Is it beyond repair?

_________________
I am far from a guru, I'm barely a novice.
buddee
DD-WRT Guru


Joined: 06 Feb 2010
Posts: 7401
Location: Little Rock

PostPosted: Wed Jun 26, 2013 11:28    Post subject: Reply with quote
Malachi wrote:
Actually it's the router that Omar had. The output is the same. I just don't want to give up on it.

This is directed at buddee: do you think I could follow your de-bricking method from the wzr-hp-ag300h on this router once I erase the nvram with the serial connection, so I could use the buffalo encrypted fw?


You can follow it, it is most likely not going to work though because that guide is for the buffalo crippled uboot bootloader, which this unit does not have. Broadcom unit's bootloader is CFE, much different than Uboot.

_________________
Wireless N Config | Linking Routers | DD-WRT Wiki | DD-WRT Builds | Peacock - Broadcom FAQ

Having problems with port forwarding? Check out Port Forward Troubleshooting for more info.
Goto page Previous  1, 2, 3, 4, 5, 6  Next Display posts from previous:    Page 2 of 6
Post new topic   This topic is locked: you cannot edit posts or make replies.    DD-WRT Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum