[acer76]

Hi.
One day the router died, just stopped is included in the web access and its functionality
Did the reset
1) nvram from page disaster recovery.
2) 30/30/30
3) 15 sec the reset button and wps
4) with the serial port nvram erase.
No reset.
Recovery via asus Firmware Restoration utility and the firmware from the official site does not provide any progress
Firmware is poured and the logs CFE->

Reading :: TFTP Server.
- last blk -
Done. 26554368 bytes read
Download of 0x1953000 bytes completed
Write kernel and filesystem binary to FLASH
Programming...copysize=26554368, amtcopy=26554368
done. 26554368 bytes written
Programming...copysize=26554368, amtcopy=26554368
done. 26554368 bytes written

▒Decompressing...done!!


CFE version 6.30.39.29 (r338244) based on BBP 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: 一 10月 15 10:41:41 CST 2012 (yau@wireless-pub2)
Copyright (C) 2000-2008 Broadcom Corporation.

Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
Found an ST compatible serial flash with 32 64KB blocks; total size 2MB
Found a AMD NAND flash with 2048B pages or 128KB blocks; total size 128MB
bcm_robo_enable_switch: EEE is disabled
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.30.39.29 (r338244)
CPU type 0x19749: 600MHz
Tot mem: 131072 KBytes

CFE mem: 0x80700000 - 0x8094EDE0 (2420192)
Data: 0x80738B70 - 0x8073BE10 (12960)
BSS: 0x8073BE10 - 0x8074CDE0 (69584)
Heap: 0x8074CDE0 - 0x8094CDE0 (2097152)
Stack: 0x8094CDE0 - 0x8094EDE0 (8192)
Text: 0x80700000 - 0x80738B70 (232304)

Device eth0: hwaddr 08-60-6E-BD-FD-A8, ipaddr 192.168.1.1, mask 255.255.255.0
gateway not set, nameserver not set
Null Rescue Flag.
boot the image...
Boot program checksum is invalid
Boot program checksum is invalid
Check 2 trx result: -34, -34
Hello!! Enter Rescue Mode: (Check error)

Utility tftp.exe get the following:
CFE> nvram erase
*** command status = 0
CFE> reboot▒Decompressing...done
CFE version 6.30.39.29 (r338244) based on BBP 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: 一 10月 15 10:41:41 CST 2012 (yau@wireless-pub2)
Copyright (C) 2000-2008 Broadcom Corporation.

Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
Found an ST compatible serial flash with 32 64KB blocks; total size 2MB
Found a AMD NAND flash with 2048B pages or 128KB blocks; total size 128MB
bcm_robo_enable_switch: EEE is disabled
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.30.39.29 (r338244)
CPU type 0x19749: 600MHz
Tot mem: 131072 KBytes

CFE mem: 0x80700000 - 0x8094EDE0 (2420192)
Data: 0x80738B70 - 0x8073BE10 (12960)
BSS: 0x8073BE10 - 0x8074CDE0 (69584)
Heap: 0x8074CDE0 - 0x8094CDE0 (2097152)
Stack: 0x8094CDE0 - 0x8094EDE0 (8192)
Text: 0x80700000 - 0x80738B70 (232304)

Committing NVRAM...done
Device eth0: hwaddr 08-60-6E-BD-FD-A8, ipaddr 192.168.1.1, mask 255.255.255.0
gateway not set, nameserver not set
Null Rescue Flag.
boot the image...
Boot program checksum is invalid
Boot program checksum is invalid
Check 2 trx result: -34, -34
Hello!! Enter Rescue Mode: (Check error)

Reading :: TFTP Server.
break! no netctx or timer expired !
break! no netctx or timer expired !
break!! reach max retry!!
Failed.: I/O error
Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
Loading: ...... 3392380 bytes read
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
start_kernel
Linux version 2.6.22.19 (root@asus) (gcc version 4.2.3) #1 Thu Feb 12 21:10:02 CST 2015
CPU revision is: 00019749
Found an ST compatible serial flash with 32 64KB blocks; total size 2MB
Determined physical RAM map:
memory: 07fff000 @ 00000000 (usable)
memory: 08000000 @ 87fff000 (usable)
Built 1 zonelists. Total pages: 585216
Kernel command line: root=/dev/mtdblock3 console=ttyS0,115200 init=/sbin/preinit
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
PID hash table entries: 2048 (order: 11, 8192 bytes)
CPU: BCM5300 rev 1 pkg 0 at 600 MHz
Using 300.000 MHz high precision timer.
console [ttyS0] enabled
Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
Memory: 238480k/131068k available (2589k kernel code, 22720k reserved, 526k data, 196k init, 131072k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
PCI: Initializing host
PCI: Reset RC
PCI: Initializing host
PCI: Reset RC
PCI: Fixing up bus 0
PCI/PCIe coreunit 0 is set to bus 1.
PCI: Fixing up bridge
PCI: Fixing up bridge
PCI: Enabling device 0000:01:00.1 (0004 -> 0006)
PCI: Fixing up bus 1
PCI/PCIe coreunit 1 is set to bus 2.
PCI: Fixing up bridge
PCI: Fixing up bridge
PCI: Enabling device 0000:02:00.1 (0004 -> 0006)
PCI: Fixing up bus 2
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 4096 (order: 2, 16384 bytes)
TCP established hash table entries: 16384 (order: 5, 131072 bytes)
TCP bind hash table entries: 16384 (order: 4, 65536 bytes)
TCP: Hash tables configured (established 16384 bind 16384)
TCP reno registered
highmem bounce pool size: 64 pages
squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher
io scheduler noop registered (default)
HDLC line discipline: version $Revision: 4.8 $, maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver $Revision: 1.90 $ 4 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = is a 16550A
serial8250: ttyS1 at MMIO 0x0 (irq = is a 16550A
PPP generic driver version 2.4.2
MPPE/MPPC encryption/compression module registered
NET: Registered protocol family 24
PPPoL2TP kernel driver, V0.18.3
PPTP driver version 0.8.5
pflash: found no supported devices
Boot partition size = 262144(0x40000)
Creating 2 MTD partitions on "sflash":
0x00000000-0x00040000 : "pmon"
0x001f0000-0x00200000 : "nvram"
Found a Zentel NAND flash with 2048B pages or 128KB blocks; total size 128MB
lookup_nflash_rootfs_offset: offset = 0x0
nflash: squash filesystem with lzma found at block 9
Creating 4 MTD partitions on "nflash":
0x00000000-0x02000000 : "linux"
0x00134ec0-0x02000000 : "rootfs"
0x04000000-0x06000000 : "linux2"
0x04134ec0-0x06000000 : "rootfs2"
NAND device: Manufacturer ID: 0x92, Chip ID: 0xf1 (Zentel NAND 128MiB 3,3V 8-bit)
Creating 3 MTD partitions on "brcmnand":
0x00000000-0x02000000 : "trx"
0x04000000-0x06000000 : "asustrx2"
0x06000000-0x07f00000 : "brcmnand"
dev_nvram_init: _nvram_init
sdhci: Secure Digital Host Controller Interface driver
sdhci: Copyright(c) Pierre Ossman
u32 classifier
OLD policer on
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (2048 buckets, 16384 max)
ipt_time loading
ip_tables: (C) 2000-2006 Netfilter Core Team
net/ipv4/netfilter/tomato_ct.c [Feb 12 2015 21:09:26]
NET: Registered protocol family 1
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 196k freed
Warning: unable to open an initial console.
Failed to execute /sbin/preinit. Attempting defaults...
Algorithmics/MIPS FPU Emulator v1.5
set_action 0
firmware version: 3.0.0.4.376_3861-g11c21b3
[1 init:init_nvram +5] init_nvram for 28
check_action 0
set_action 7
set_action 0

## Restoring defaults... ##
num_of_mssid_support(0x0092): [mssid] support [3] mssid
check_action 0
set_action 7
set_action 0
done
check_action 0
set_action 7
set_action 0
ctf: module license 'Proprietary' taints kernel.
et_module_init: passivemode set to 0x0
et_module_init: et_txq_thresh set to 0x400
bcm_robo_enable_switch: EEE is disabled
eth0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.30.163.2002 (r382208)
hotplug net INTERFACE=eth0 ACTION=add
wl_module_init: passivemode set to 0x0
PCI: Enabling device 0000:01:01.0 (0000 -> 0002)
eth1: Broadcom BCM4331 802.11 Wireless Controller 6.30.163.2002 (r382208)
PCI: Enabling device 0000:02:01.0 (0000 -> 0002)
eth2: Broadcom BCM4360 802.11 Wireless Controller 6.30.163.2002 (r382208)
check_action 0
set_action 7
hotplug net INTERFACE=eth1 ACTION=add
hotplug net INTERFACE=eth2 ACTION=add
set_action 0
/ # [1 init:init_main +23] main loop signal/state=17
start_logger:
start_usb
NTFS (with native replay) support included
optimized: speed
Build_for__asus_n66u_2011-10-27_U86_r187446_b122

_ifconfig: name=eth0 flags=1043 IFUP addr=(null) netmask=(null)
hotplug net INTERFACE=vlan1 ACTION=add
update_lan_state(lan_, 0, 0)
hotplug net INTERFACE=vlan2 ACTION=add
generate_wl_para(0x0e85): unit 0 subunit -1
num_of_mssid_support(0x0092): [mssid] support [3] mssid
generate_wl_para(0x1145): bw: 0
generate_wl_para(0x1147): chanspec: 0
generate_wl_para(0x1148): bw_cap: 3
generate_wl_para(0x114e): obss_coex: 1
wlconf_pre(0x0301): set vhtmode 1
generate_wl_para(0x0e85): unit 1 subunit -1
num_of_mssid_support(0x0092): [mssid] support [3] mssid
chanspec_fix(0x07d7): unit: 1, bw_cap: 7, chanspec: 0
generate_wl_para(0x1145): bw: 0
generate_wl_para(0x1147): chanspec: 0
generate_wl_para(0x1148): bw_cap: 7
generate_wl_para(0x114e): obss_coex: 1
wlconf_pre(0x0301): set vhtmode 1
cat: can't open '3dev/mtd0': No such file or directory
cat: can't open '3': No such file or directory
cat: can't open '3rep': No such file or directory
cat: can't open '3egulation_domain': No such file or directory
cat: can't open '3': No such file or directory
cat: can't open '3ut': No such file or directory
cat: can't open '3d': No such file or directory
cat: can't open '3= -f 2': No such file or directory
cat: can't open '3dev/mtd0': No such file or directory
cat: can't open '3': No such file or directory
cat: can't open '3rep': No such file or directory
cat: can't open '3egulation_domain_5G': No such file or directory
cat: can't open '3': No such file or directory
cat: can't open '3ut': No such file or directory
cat: can't open '3d': No such file or directory
cat: can't open '3= -f 2': No such file or directory
cat: can't open '3dev/mtd0': No such file or directory
cat: can't open '3': No such file or directory
cat: can't open '3rep': No such file or directory
cat: can't open '3ci/1/1/regrev': No such file or directory
cat: can't open '3': No such file or directory
cat: can't open '3ut': No such file or directory
cat: can't open '3d': No such file or directory
cat: can't open '3= -f 2': No such file or directory
cat: can't open '3dev/mtd0': No such file or directory
cat: can't open '3': No such file or directory
cat: can't open '3rep': No such file or directory
cat: can't open '3ci/2/1/regrev': No such file or directory
cat: can't open '3': No such file or directory
cat: can't open '3ut': No such file or directory
cat: can't open '3d': No such file or directory
cat: can't open '3= -f 2': No such file or directory
start_lan: setting up the bridge br0
vlan1: cmd=14: Operation not supported
_ifconfig: name=vlan1 flags=1043 IFUP addr=(null) netmask=(null)
start_lan: setting MAC of br0 bridge to 08:60:6E:BD:FD:A8
_ifconfig: name=eth1 flags=1043 IFUP addr=(null) netmask=(null)
generate_wl_para(0x0e85): unit 0 subunit -1
num_of_mssid_support(0x0092): [mssid] support [3] mssid
generate_wl_para(0x1145): bw: 0
generate_wl_para(0x1147): chanspec: 0
generate_wl_para(0x1148): bw_cap: 3
generate_wl_para(0x114e): obss_coex: 1
generate_wl_para(0x0e85): unit 0 subunit 1
generate_wl_para(0x0e85): unit 0 subunit 2
generate_wl_para(0x0e85): unit 0 subunit 3
hotplug net INTERFACE=br0 ACTION=add
set: error parsing value th1" as an integer for set of i"
var unrecognized name, type -h for help


_ifconfig: name=eth2 flags=1043 IFUP addr=(null) netmask=(null)
wlc_phy_cal_init_acphy: NOT Implemented
generate_wl_para(0x0e85): unit 1 subunit -1
num_of_mssid_support(0x0092): [mssid] support [3] mssid
chanspec_fix(0x07d7): unit: 1, bw_cap: 7, chanspec: 0
generate_wl_para(0x1145): bw: 0
generate_wl_para(0x1147): chanspec: 0
generate_wl_para(0x1148): bw_cap: 7
generate_wl_para(0x114e): obss_coex: 1
generate_wl_para(0x0e85): unit 1 subunit 1
generate_wl_para(0x0e85): unit 1 subunit 2
generate_wl_para(0x0e85): unit 1 subunit 3
set: error parsing value "_th2" as an integer for set of "_i"
var unrecognized name, type -h for help


_ifconfig: name=br0 flags=1043 IFUP addr=192.168.1.1 netmask=255.255.255.0
_ifconfig: name=lo flags=1043 IFUP addr=127.0.0.1 netmask=255.0.0.0
route_manip: cmd=ADD name=lo addr=127.0.0.0 netmask=255.0.0.0 gateway=0.0.0.0 metric=0
update_lan_state(lan_, 2, 0)
stop_nat_rules: apply the redirect_rules!
start_lan 1794
start_services 3284
# wanduck: Got LAN(-1) information:

# Enable direct rule
[1 init:start_dnsmasq +27] begin
[1 init:stop_dnsmasq +27] begin
[1 init:stop_dnsmasq +27] end
SQUASHFS error: Unable to read page, block 136a984, size 6405
SQUASHFS error: Unable to read page, block 136a984, size 6405
SQUASHFS error: Unable to read page, block 136a984, size 6405
SQUASHFS error: Unable to read page, block 136a984, size 6405
[1 init:start_dnsmasq +27] end
start_lan_port(0) 1
TZ watchdog
SQUASHFS error: Unable to read page, block f2e632, size 4f5d
SQUASHFS error: Unable to read page, block f2e632, size 4f5d
SQUASHFS error: Unable to read page, block f2e632, size 4f5d
SQUASHFS error: Unable to read page, block f2e632, size 4f5d
SQUASHFS error: Unable to read page, block f2e632, size 4f5d
SQUASHFS error: Unable to read page, block f2e632, size 4f5d
SQUASHFS error: Unable to read page, block f2e632, size 4f5d
SQUASHFS error: Unable to read page, block f2e632, size 4f5d
SQUASHFS error: Unable to read page, block f2e632, size 4f5d
SQUASHFS error: Unable to read page, block f2e632, size 4f5d
SQUASHFS error: Unable to read page, block f2e632, size 4f5d
SQUASHFS error: Unable to read page, block f2e632, size 4f5d
SQUASHFS error: Unable to read page, block f2e632, size 4f5d
SQUASHFS error: Unable to read page, block f2e632, size 4f5d
SQUASHFS error: Unable to read page, block f2e632, size 4f5d
SQUASHFS error: Unable to read page, block f2e632, size 4f5d
decomp: fname=/var/lib/misc/rstats-speed.gz
decomp: gzip -dc /var/lib/misc/rstats-speed.gz > /var/tmp/rstats-uncomp != 0
load: speed_count = 0
load: read source= save_path=
load_history: fname=/var/lib/misc/rstats-history.gz
decomp: fname=/var/lib/misc/rstats-history.gz
decomp: gzip -dc /var/lib/misc/rstats-history.gz > /var/tmp/rstats-uncomp != 0
decomp: fname=/var/lib/misc/rstats-history.gz
decomp: gzip -dc /var/lib/misc/rstats-history.gz > /var/tmp/rstats-uncomp != 0
load_history: load failed
start_pptpd: getpid= 1
SQUASHFS error: Unable to read page, block 142d0de, size 5c6b
SQUASHFS error: Unable to read page, block 142d0de, size 5c6b
SQUASHFS error: Unable to read page, block 142d0de, size 5c6b
SQUASHFS error: Unable to read page, block 142d0de, size 5c6b
set_wltxpower(0x0903): unit: 0, txpower: 100
set_wltxpower(0x0903): unit: 1, txpower: 100
killall_tk: waiting name=nas n=9
disk_monitor: starting...
disk_monitor: day=1, week=6, time=0:0.
disk_monitor: decide if scan the target...
disk_monitor: 0: wait_second=86400...
disk_monitor: 1: wait_second=86400...
disk_monitor: 2: wait_second=311040000...
disk_monitor: wait_second=86400...
disk_monitor: Pause...

killall_tk: waiting name=nas n=8
killall_tk: waiting name=nas n=7
killall_tk: waiting name=nas n=6
killall_tk: waiting name=nas n=5
killall_tk: waiting name=nas n=4
killall_tk: waiting name=nas n=3
killall_tk: waiting name=nas n=2
killall_tk: waiting name=nas n=1
killall_tk: waiting name=nas n=0
killall_tk: SIGKILL name=nas n=9
vlan1: cmd=14: Operation not supported
_ifconfig: name=eth1 flags=0000 addr=(null) netmask=(null)
_ifconfig: name=eth2 flags=0000 addr=(null) netmask=(null)
catch_sig(0x0413): [watchdog] Handle WPS LED for WPS Stop
hotplug net INTERFACE=eth2 ACTION=remove
hotplug net INTERFACE=eth1 ACTION=remove
hotplug_net(): sent event 1
hotplug_net(): sent event 1
[1 init:init_nvram +30] init_nvram for 28
num_of_mssid_support(0x0092): [mssid] support [3] mssid
wl_module_init: passivemode set to 0x0
eth1: Broadcom BCM4331 802.11 Wireless Controller 6.30.163.2002 (r382208)
eth2: Broadcom BCM4360 802.11 Wireless Controller 6.30.163.2002 (r382208)
hotplug net INTERFACE=eth1 ACTION=add
hotplug net INTERFACE=eth2 ACTION=add
generate_wl_para(0x0e85): unit 0 subunit -1
num_of_mssid_support(0x0092): [mssid] support [3] mssid
generate_wl_para(0x1145): bw: 0
generate_wl_para(0x1147): chanspec: 0
generate_wl_para(0x1148): bw_cap: 3
generate_wl_para(0x114e): obss_coex: 1
wlconf_pre(0x0301): set vhtmode 1
generate_wl_para(0x0e85): unit 1 subunit -1
num_of_mssid_support(0x0092): [mssid] support [3] mssid
chanspec_fix(0x07d7): unit: 1, bw_cap: 7, chanspec: 0
generate_wl_para(0x1145): bw: 0
generate_wl_para(0x1147): chanspec: 0
generate_wl_para(0x1148): bw_cap: 7
generate_wl_para(0x114e): obss_coex: 1
wlconf_pre(0x0301): set vhtmode 1
set_wltxpower(0x0903): unit: 0, txpower: 100
set_wltxpower(0x0903): unit: 1, txpower: 100
cat: can't open '3dev/mtd0': No such file or directory
cat: can't open '3': No such file or directory
cat: can't open '3rep': No such file or directory
cat: can't open '3egulation_domain': No such file or directory
cat: can't open '3': No such file or directory
cat: can't open '3ut': No such file or directory
cat: can't open '3d': No such file or directory
cat: can't open '3= -f 2': No such file or directory
cat: can't open '3dev/mtd0': No such file or directory
cat: can't open '3': No such file or directory
cat: can't open '3rep': No such file or directory
cat: can't open '3egulation_domain_5G': No such file or directory
cat: can't open '3': No such file or directory
cat: can't open '3ut': No such file or directory
cat: can't open '3d': No such file or directory
cat: can't open '3= -f 2': No such file or directory
cat: can't open '3dev/mtd0': No such file or directory
cat: can't open '3': No such file or directory
cat: can't open '3rep': No such file or directory
cat: can't open '3ci/1/1/regrev': No such file or directory
cat: can't open '3': No such file or directory
cat: can't open '3ut': No such file or directory
cat: can't open '3d': No such file or directory
cat: can't open '3= -f 2': No such file or directory
cat: can't open '3dev/mtd0': No such file or directory
cat: can't open '3': No such file or directory
cat: can't open '3rep': No such file or directory
cat: can't open '3ci/2/1/regrev': No such file or directory
cat: can't open '3': No such file or directory
cat: can't open '3ut': No such file or directory
cat: can't open '3d': No such file or directory
cat: can't open '3= -f 2': No such file or directory
vlan1: cmd=14: Operation not supported
_ifconfig: name=vlan1 flags=1043 IFUP addr=(null) netmask=(null)
_ifconfig: name=eth1 flags=1043 IFUP addr=(null) netmask=(null)
generate_wl_para(0x0e85): unit 0 subunit -1
num_of_mssid_support(0x0092): [mssid] support [3] mssid
generate_wl_para(0x1145): bw: 0
generate_wl_para(0x1147): chanspec: 0
generate_wl_para(0x1148): bw_cap: 3
generate_wl_para(0x114e): obss_coex: 1
generate_wl_para(0x0e85): unit 0 subunit 1
generate_wl_para(0x0e85): unit 0 subunit 2
generate_wl_para(0x0e85): unit 0 subunwlc_phy_cal_init_acphy: NOT Implemented
it 3
set: error parsing value "▒th1" as an integer for set of "▒i"
var unrecognized name, type -h for help


_ifconfig: name=eth2 flags=1043 IFUP addr=(null) netmask=(null)
generate_wl_para(0x0e85): unit 1 subunit -1
num_of_mssid_support(0x0092): [mssid] support [3] mssid
chanspec_fix(0x07d7): unit: 1, bw_cap: 7, chanspec: 0
generate_wl_para(0x1145): bw: 0
generate_wl_para(0x1147): chanspec: 0
generate_wl_para(0x1148): bw_cap: 7
generate_wl_para(0x114e): obss_coex: 1
generate_wl_para(0x0e85): unit 1 subunit 1
generate_wl_para(0x0e85): unit 1 subunit 2
generate_wl_para(0x0e85): unit 1 subunit 3
set: error parsing value "/th2" as an integer for set of "/i"
var unrecognized name, type -h for help


check_action 0
set_action 7
Unhandled kernel unaligned access[#1]:
Cpu 0
$ 0 : 00000000 0000006d 00000004 00000001
$ 4 : 87743000 00000000 c0913cd0 00000002
$ 8 : c0913cc8 00000000 87485200 00000000
$12 : 32323232 00000003 c08e0000 32323232
$16 : 87743000 87337080 87337084 c07fbcd0
$20 : 87c2c000 87484f0e c0820858 c086e014
$24 : 00000010 c07fbbc8
$28 : 802f2000 802f3bf0 8034dce8 c07fd3bc
Hi : 00000000
Lo : 00000001
epc : c07fbcfc ppr_get_bw_powers+0x2c/0x50 [wl] Tainted: P
ra : c07fd3bc ppr_copy_struct+0x54/0x22c [wl]
Status: 11007c03 KERNEL EXL IE
Cause : 00000010
BadVA : fffffffb
PrId : 00019749
Modules linked in: wl(P) ip6t_LOG ip6table_filter cdc_mbim qmi_wwan cdc_wdm cdc_ncm rndis_host cdc_ether asix usbnet usblp ohci_hcd ehci_hcd ufsd(P) vfat fat ext2 ext3 jbd mbcache usb_storage sg sd_mod scsi_wait_scan scsi_mod usbcore nf_nat_pptp nf_conntrack_pptp nf_nat_proto_gre nf_conntrack_proto_gre nf_nat_ftp nf_conntrack_ftp igs(P) emf(P) bcm57xx et(P) ctf(P)
Process swapper (pid: 0, threadinfo=802f2000, task=802f4188)
Stack : 87337080 87485200 87337080 87638000 87337080 87638000 86c54f00 8773cb80
c072bcd4 c072bcc0 87625d80 00001002 8749bb80 00000030 00000000 00000000
8773cb20 00001000 00001002 86c54f00 8773cb80 00001000 00001002 86c54f00
c089ceb8 c089ce9c 070b0302 00001002 87485200 8773cb80 87625d80 00001002
c0872710 c0872710 87c2c000 00001002 00001002 876a5180 00001001 00001002
...
Call Trace:
[<c07fbcfc>] ppr_get_bw_powers+0x2c/0x50 [wl]
[<c07fd3bc>] ppr_copy_struct+0x54/0x22c [wl]
[<c072bcd4>] wlc_phy_txpower_get_current+0x138/0x730 [wl]
[<c089ceb8>] wlc_stf_ss_algo_channel_get+0x158/0x2ec [wl]
[<c081b9b8>] wlc_set_phy_chanspec+0x78/0xac [wl]
[<c081fd60>] wlc_set_chanspec+0x278/0x33c [wl]
[<c0891c4c>] wlc_scantimer+0x4fc/0x970 [wl]
[<c07ff3c8>] _wl_timer+0x264/0x2d0 [wl]
[<80035e90>] run_timer_softirq+0x16c/0x1f4
[<8003163c>] __do_softirq+0x7c/0x110
[<80031738>] do_softirq+0x68/0x70
[<80285804>] plat_irq_dispatch+0x1a4/0x224
[<8000b6d0>] ret_from_irq+0x0/0x4
[<8000d838>] cpu_idle+0x1c/0x58
[<8030dbbc>] start_kernel+0x2e4/0x348


Code: 24c60008 24630001 24020004 <9462fffa> 00001021 03e00008 00000000 000310c0 00481021
Kernel panic - not syncing: Fatal exception in interrupt
Rebooting in 3 seconds..Decompressing...done


CFE version 6.30.39.29 (r338244) based on BBP 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: 一 10月 15 10:41:41 CST 2012 (yau@wireless-pub2)
Copyright (C) 2000-2008 Broadcom Corporation.

Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
Found an ST compatible serial flash with 32 64KB blocks; total size 2MB
Found a AMD NAND flash with 2048B pages or 128KB blocks; total size 128MB
bcm_robo_enable_switch: EEE is disabled
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.30.39.29 (r338244)
CPU type 0x19749: 600MHz
Tot mem: 131072 KBytes

CFE mem: 0x80700000 - 0x8094EDE0 (2420192)
Data: 0x80738B70 - 0x8073BE10 (12960)
BSS: 0x8073BE10 - 0x8074CDE0 (69584)
Heap: 0x8074CDE0 - 0x8094CDE0 (2097152)
Stack: 0x8094CDE0 - 0x8094EDE0 (8192)
Text: 0x80700000 - 0x80738B70 (232304)

Device eth0: hwaddr 08-60-6E-BD-FD-A8, ipaddr 192.168.1.1, mask 255.255.255.0
gateway not set, nameserver not set
Null Rescue Flag.
boot the image...
Boot program checksum is invalid
Boot program checksum is invalid
Check 2 trx result: -34, -34
Hello!! Enter Rescue Mode: (Check error)

Or with firmware
dd-wrt.v24-20453_NEWD-2_K2.6_mini_RT-N66U.trx

to
dd-wrt.v24-25697_NEWD-2_K2.6_mini_RT-N66U.trx
Get the next log

Device eth0: hwaddr 08-60-6E-BD-FD-A8, ipaddr 192.168.1.1, mask 255.255.255.0
gateway not set, nameserver not set
Null Rescue Flag.
Hello!! Enter Rescue Mode: (by Force)

Reading :: TFTP Server.
Failed.: Timeout occured
Reading :: TFTP Server.
Failed.: Timeout occured
Reading :: TFTP Server.
- last blk -
Done. 3543040 bytes read
Download of 0x361000 bytes completed
Write kernel and filesystem binary to FLASH
Programming...copysize=3543040, amtcopy=3543040
done. 3543040 bytes written
Programming...copysize=3543040, amtcopy=3543040
done. 3543040 bytes written

or

CFE version 6.30.39.29 (r338244) based on BBP 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: 一 10月 15 10:41:41 CST 2012 (yau@wireless-pub2)
Copyright (C) 2000-2008 Broadcom Corporation.

Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
Found an ST compatible serial flash with 32 64KB blocks; total size 2MB
Found a AMD NAND flash with 2048B pages or 128KB blocks; total size 128MB
bcm_robo_enable_switch: EEE is disabled
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.30.39.29 (r338244)
CPU type 0x19749: 600MHz
Tot mem: 131072 KBytes

CFE mem: 0x80700000 - 0x8094EDE0 (2420192)
Data: 0x80738B70 - 0x8073BE10 (12960)
BSS: 0x8073BE10 - 0x8074CDE0 (69584)
Heap: 0x8074CDE0 - 0x8094CDE0 (2097152)
Stack: 0x8094CDE0 - 0x8094EDE0 (8192)
Text: 0x80700000 - 0x80738B70 (232304)

Device eth0: hwaddr 08-60-6E-BD-FD-A8, ipaddr 192.168.1.1, mask 255.255.255.0
gateway not set, nameserver not set
Null Rescue Flag.
boot the image...
Check 2 trx result: 0, 0
go load
Loader:raw Filesys:tftp Dev:eth0 File:: Options:(null)
Loading: TFTP Server.
Failed.
Could not load :: Timeout occured
Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
Loading: .. 3916 bytes read
Entry at 0x80001000
Closing network.
Starting program at 0x80001000


At this stage hangs, left it for an hour to two hours and at night.
There was no reaction.

The only firmware that works is poured and 10-15 minutes tomato117-VPN-64K.trx
After a restart, and if you look at the logs CFE, firmware re-installed

Information about the router:



Device eth0: hwaddr 08-60-6E-BD-FD-A8, ipaddr 192.168.1.1, mask 255.255.255.0
gateway not set, nameserver not set
Null Rescue Flag.
Hello!! Enter Rescue Mode: (by Force)

Reading :: TFTP Server.
Failed.: Timeout occured
Reading :: TFTP Server.
Failed.: Timeout occured
Reading :: TFTP Server.
Failed.: Interrupted
CFE> help
Available commands:

show devices Display information about the installed devices.
show clocks Show current values of the clocks.
nvram NVRAM utility.
reboot Reboot.
flash Update a flash memory device
batch Load a batch file into memory and execute it
go Verify and boot OS image.
boot Load an executable file into memory and execute it
load Load an executable file into memory without executing it
save Save a region of memory to a remote file via TFTP
ping Ping a remote IP host.
arp Display or modify the ARP Table
ifconfig Configure the Ethernet interface
help Obtain help for CFE commands

For more information about a command, enter 'help command-name'
*** command status = 0
CFE> show devices
Device Name Description
------------------- ---------------------------------------------------------
uart0 NS16550 UART at 0x18000300
uart1 NS16550 UART at 0x18000400
flash0 ST Serial flash size 2048KB
flash0.boot ST Serial flash offset 00000000 size 256KB
flash0.trx ST Serial flash offset 00040000 size 1KB
flash0.os ST Serial flash offset 0004001C size 1728KB
flash0.nvram ST Serial flash offset 001F0000 size 64KB
flash1.boot ST Serial flash offset 00000000 size 256KB
flash1.trx ST Serial flash offset 00040000 size 1728KB
flash1.nvram ST Serial flash offset 001F0000 size 64KB
nflash0.trx Unknown type 146 NAND flash offset 00000000 size 1KB
nflash0.os Unknown type 146 NAND flash offset 0000001C size 131072KB
nflash1.trx Unknown type 146 NAND flash offset 00000000 size 32768KB
nflash1.brcmnand Unknown type 146 NAND flash offset 02000000 size 98304KB
nflash2.prefix Unknown type 146 NAND flash offset 00000000 size 65536KB
nflash2.trx Unknown type 146 NAND flash offset 04000000 size 32768KB
eth0 Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller
*** command status = 0
CFE>


Have exactly the same router, checked the power supply is in order.
Please answer the following questions:
1) do I Need to flash the CFE?
2) What firmware to flash to return to stock?
3) a similar work router is it possible to remove the firmware dump and pour it in?
4)For 2 weeks weight Internet browsing, no answers found. On the website dd-wrt a lot of similar situations but they did not help me

I hope for your help
Thank you!
Sorry for my English

[Malachi]

Stop the cfe, then type nvram erase, if you get ttl=100 upload any stock firmware.

[acer76]

[Malachi]

What firmware are you using?

[acer76]