Wr32x corrupt bootloader recovery [kwboot won't work]

Post new topic   Reply to topic    DD-WRT Forum Index -> Marvell MVEBU based Hardware (WRT1900AC etc.)
Author Message
Karhunen
DD-WRT Novice


Joined: 25 Sep 2020
Posts: 7

PostPosted: Sat Jan 09, 2021 14:44    Post subject: Wr32x corrupt bootloader recovery [kwboot won't work] Reply with quote
Hi guys,

I'm trying to un-brick this wr32x which bootloader is corrupted. Only power led is blinking.


I can not flash uboot .bin file into mtd.

I have tried u-boot-a38x-spi-uart.bin and WRT32X_uboot_2.0.9.bin and some others but they always stop at 99%.

Sometimes just percentage shows, not post log. But it happens same everytime.

Quote:


kwboot -t /dev/ttyUSB0 -b WRT32X_uboot_2.0.9.bin
Sending boot message. Please reboot the target...|
Sending boot image...
0 % [......................................................................]
0 % [......................................................................]
1 % [......................................................................]
2 % [......................................................................]
3 % [......................................................................]
4 % [......................................................................]
5 % [......................................................................]
6 % [......................................................................]
7 % [......................................................................]
8 % [......................................................................]
9 % [...................................

General initialization - Version: 1.0.0
AVS selection from EFUSE disabled (Skip reading EFUSE values)
mvSysEnvIsFlavourReduced: TWSI Read of 'flavor' failed
Detected Device ID 6820
High speed PHY - Version: 2.0

Init RD NAS topology Serdes Lane 3 is USB3
Serdes Lane 4 is SGMII
board SerDes lanes topology details:
| Lane # | Speed| Type |
------------------------------|
| 0 | 6 | SATA0 |
| 1 | 5 | PCIe0 |
| 2 | 6 | SATA1 |
| 3 | 5 | USB3 HOST1 |
| 4 | 5 | PCIe1 |
| 5 | 0 | SGMII2 |
-------------------------------
:** Link is Gen1, check the EP capability
PCIe, Idx 0: Link upgraded to Gen2 based on client cpabilities
:** Link is Gen1, check the EP capability
PCIe, Idx 1: remains Gen1
High speed PHY - Ended Successfully
DDR3 Training Sequence - Ver TIP-1.46.0
mvSysEnvGetTopologyUpdateInfo: TWSI Read failed
DDR3 Training Sequence - Switching XBAR Window to FastPath Window
DDR3 Training Sequence - Ended Successfully
Not detected suspend to RAM indication
...................................]
10 % [......................................................................]
11 % [......................................................................]
11 % [......................................................................]
12 % [......................................................................]
13 % [......................................................................]
14 % [........................................

94 % [......................................................................]
95 % [......................................................................]
96 % [......................................................................]
97 % [......................................................................]
98 % [......................................................................]
99 % [......................................................................]
99 % [....]
[Type Ctrl-\ + c to quit]


U-Boot 2013.01 (May 18 2017 - 16:37:44) Marvell version: 2015_T1.QA.0p16

Boot version : v2.0.9

Board: RD-NAS-88F6820-DDR3
SoC: MV88F6820 Rev A0
running 2 CPUs
CPU: ARM Cortex A9 MPCore (Rev 1) LE
CPU 0
CPU @ 1866 [MHz]
L2 @ 933 [MHz]
TClock @ 200 [MHz]
DDR3 @ 933 [MHz]
DDR3 32 Bit Width,FastPath Memory Access, DLB Enabled, ECC Disabled
DRAM: 512 MiB
NAND: 256 MiB
MMC: mv_sdh: 0




What can I do about this? They say these are brick-proof routers but is it gone for good?

Thanks.
Sponsor
blkt
DD-WRT Guru


Joined: 20 Jan 2019
Posts: 4134

PostPosted: Sat Jan 09, 2021 14:52    Post subject: Reply with quote
https://github.com/Chadster766/McDebian/wiki/C.-U%E2%80%90Boot-Recovery
Karhunen
DD-WRT Novice


Joined: 25 Sep 2020
Posts: 7

PostPosted: Sat Jan 09, 2021 14:55    Post subject: Reply with quote
blkt wrote:
https://github.com/Chadster766/McDebian/wiki/C.-U%E2%80%90Boot-Recovery


I have done this too. It didn't work either.
Karhunen
DD-WRT Novice


Joined: 25 Sep 2020
Posts: 7

PostPosted: Sat Jan 09, 2021 15:17    Post subject: Reply with quote
blkt wrote:
https://github.com/Chadster766/McDebian/wiki/C.-U%E2%80%90Boot-Recovery


Oh, do you mean that I should use the uboot file on that page? I'll try now.
Karhunen
DD-WRT Novice


Joined: 25 Sep 2020
Posts: 7

PostPosted: Sat Jan 09, 2021 15:23    Post subject: Reply with quote
blkt wrote:
https://github.com/Chadster766/McDebian/wiki/C.-U%E2%80%90Boot-Recovery


Nope. Result is same.
blkt
DD-WRT Guru


Joined: 20 Jan 2019
Posts: 4134

PostPosted: Sat Jan 09, 2021 16:18    Post subject: Reply with quote
From the provided U-Boot Recovery instructions page, "Wait for kwboot to load which takes a while. Be careful to press a key to get the u-boot prompt once u-boot start otherwise you will have to do it over again."

Silent boot is enabled by default, so it will not tell you when to press any key or provide visual countdown.
Karhunen
DD-WRT Novice


Joined: 25 Sep 2020
Posts: 7

PostPosted: Sat Jan 09, 2021 16:40    Post subject: Reply with quote
blkt wrote:
From the provided U-Boot Recovery instructions page, "Wait for kwboot to load which takes a while. Be careful to press a key to get the u-boot prompt once u-boot start otherwise you will have to do it over again."

Silent boot is enabled by default, so it will not tell you when to press any key or provide visual countdown.


Sorry, I don't get this.

I'll tell what I am doing:

After I hit enter to run the command, I turn the router on. Then I wait for it to finish (as in 100%) But it always stops with this -->

99 % [....]
[Type Ctrl-\ + c to quit]

I tried to press this combination but it didn't work. Someone says that you should hold control key and press "-" and "\" then release all and press "c" but it didn't work. On my keyboard, you need to press with altgr for "\".

You think this part is the problem?
blkt
DD-WRT Guru


Joined: 20 Jan 2019
Posts: 4134

PostPosted: Sat Jan 09, 2021 16:44    Post subject: Reply with quote
Do not interrupt the loading process or use any ctrl key combination. Wait until after u-boot starts.

For example, press spacebar or any alphanumeric key after u-boot date and version are displayed.

U-Boot 2013.01 (May 18 2017 - 16:37:44) Marvell version: 2015_T1.QA.0p16

Boot version : v2.0.9
Karhunen
DD-WRT Novice


Joined: 25 Sep 2020
Posts: 7

PostPosted: Sat Jan 09, 2021 18:15    Post subject: Reply with quote
blkt wrote:
Do not interrupt the loading process or use any ctrl key combination. Wait until after u-boot starts.

For example, press spacebar or any alphanumeric key after u-boot date and version are displayed.

U-Boot 2013.01 (May 18 2017 - 16:37:44) Marvell version: 2015_T1.QA.0p16

Boot version : v2.0.9



I did this. It worked!. But it's not booting although I did exactly what it is said there.


Quote:

Venom>> setenv serverip 192.168.1.2
Venom>> setenv ipaddr 192.168.1.10
Venom>> tftp 2000000 WRT32X.bin
Using egiga0 device
TFTP from server 192.168.1.2; our IP address is 192.168.1.10
Filename 'WRT32X.bin'.
Load address: 0x2000000
Loading: #################################################################
##
5.9 MiB/s
done
Bytes transferred = 977100 (ee8cc hex)
Venom>> nand erase 0 200000

NAND erase: device 0 offset 0x0, size 0x200000
Erasing at 0x1e0000 -- 100% complete.
OK
Venom>> nand write 2000000 0 200000

NAND write: device 0 offset 0x0, size 0x200000
2097152 bytes written: OK
Venom>> reset
resetting ...

BootROM - 1.73
Booting from NAND flash

General initialization - Version: 1.0.0
AVS selection from EFUSE disabled (Skip reading EFUSE values)
mvSysEnvIsFlavourReduced: TWSI Read of 'flavor' failed
Detected Device ID 6820
High speed PHY - Version: 2.0

Init RD NAS topology Serdes Lane 3 is USB3
Serdes Lane 4 is SGMII
board SerDes lanes topology details:
| Lane # | Speed| Type |
------------------------------|
| 0 | 6 | SATA0 |
| 1 | 5 | PCIe0 |
| 2 | 6 | SATA1 |
| 3 | 5 | USB3 HOST1 |
| 4 | 5 | PCIe1 |
| 5 | 0 | SGMII2 |
-------------------------------
:** Link is Gen1, check the EP capability
PCIe, Idx 0: Link upgraded to Gen2 based on client cpabilities
:** Link is Gen1, check the EP capability
PCIe, Idx 1: remains Gen1
High speed PHY - Ended Successfully
DDR3 Training Sequence - Ver TIP-1.46.0
mvSysEnvGetTopologyUpdateInfo: TWSI Read failed
DDR3 Training Sequence - Switching XBAR Window to FastPath Window
DDR3 Training Sequence - Ended Successfully
Not detected suspend to RAM indication
BootROM: Image checksum verification PASSED


U-Boot 2013.01 (May 18 2017 - 16:37:44) Marvell version: 2015_T1.QA.0p16

Boot version : v2.0.9

Board: RD-NAS-88F6820-DDR3
SoC: MV88F6820 Rev A0
running 2 CPUs
CPU: ARM Cortex A9 MPCore (Rev 1) LE
CPU 0
CPU @ 1866 [MHz]
L2 @ 933 [MHz]
TClock @ 200 [MHz]
DDR3 @ 933 [MHz]
DDR3 32 Bit Width,FastPath Memory Access, DLB Enabled, ECC Disabled
DRAM: 512 MiB
NAND: 256 MiB
MMC: mv_sdh: 0




And it is waiting here. Power led is still blinking.
blkt
DD-WRT Guru


Joined: 20 Jan 2019
Posts: 4134

PostPosted: Sat Jan 09, 2021 22:01    Post subject: Reply with quote
Use "run update_both_images" to restore the firmware partitions via ttl serial u-boot environment and tftp.

flat-FW_WRT32X_1.0.180404.58.img rename this to venom.img as it's the factory default firmwareName.

printenv ipaddr
printenv netmask
printenv serverip
printenv firmwareName
printenv bootdelay
printenv silent

Example to disable and remove the silent boot variable.

setenv silent
saveenv

Normally "run update_both_images" is followed by the "reset" command. This reboots the router.

If having problems after successful flash and reboot, hold the reset button for 10 seconds.

This should have been the first to try as u-boot parititions were likely intact, only a blinking power LED.
Karhunen
DD-WRT Novice


Joined: 25 Sep 2020
Posts: 7

PostPosted: Sun Jan 10, 2021 5:58    Post subject: Reply with quote
blkt wrote:
Use "run update_both_images" to restore the firmware partitions via ttl serial u-boot environment and tftp.

flat-FW_WRT32X_1.0.180404.58.img rename this to venom.img as it's the factory default firmwareName.

printenv ipaddr
printenv netmask
printenv serverip
printenv firmwareName
printenv bootdelay
printenv silent

Example to disable and remove the silent boot variable.

setenv silent
saveenv

Normally "run update_both_images" is followed by the "reset" command. This reboots the router.

If having problems after successful flash and reboot, hold the reset button for 10 seconds.

This should have been the first to try as u-boot parititions were likely intact, only a blinking power LED.


It worked!. Thank you very much.
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Marvell MVEBU based Hardware (WRT1900AC etc.) All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum