Super-bricked Linksys E1200

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware
Author Message
wtgibson
DD-WRT Novice


Joined: 04 Jul 2020
Posts: 4

PostPosted: Sat Jul 04, 2020 23:02    Post subject: Super-bricked Linksys E1200 Reply with quote
Hi,
I bricked my E1200 (v1) by flashing:
dd-wrt.v24-43652_NEWD-2_K2.6_mini-nv64k
(still not sure why, but maybe not relevant?)

I connected a serial terminal, then used it and tftp to install:
dd-wrt.v24-21676_NEWD-2_K2.6_mini-e1200v1
(This was the working version I'd started with)

After starting, the router never powered on after its first reboot. No amount of hard resets or power cycles gets any activity on any LEDs, no serial activity, nothing. 12, 3.3, 1.1V rails seem okay.

Any tips?
Serial log follows:
Code:

CFE> show devices
CMD: [show devices]
Device Name          Description
-------------------  ---------------------------------------------------------
uart0                NS16550 UART at 0x18000300
flash0.boot          ST Serial flash offset 00000000 size 256KB
flash0.trx           ST Serial flash offset 00040000 size 1KB
flash0.os            ST Serial flash offset 0004001C size 3776KB
flash0.nvram         ST Serial flash offset 003F0000 size 64KB
flash1.boot          ST Serial flash offset 00000000 size 256KB
flash1.trx           ST Serial flash offset 00040000 size 3776KB
flash1.nvram         ST Serial flash offset 003F0000 size 64KB
flash0               ST Serial flash size 4096KB
eth0                 Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller
*** command status = 0


CFE> nvram erase
CMD: [nvram erase]
*** command status = 0



CFE> flash -ctheader : flash1.trx
CMD: [flash -ctheader : flash1.trx]
Reading :: _tftpd_open(): retries=0/3
_tftpd_open(): retries=1/3
Done. 3548160 bytes read, fname=flash1.trx
CODE Pattern is correct! (E120)
it's code.bin

TRX file size = 3547136
Burning code image.
Programming...done. 3547136 bytes written
*** command status = 0
CFE> go
CMD: [go]
Check CRC of image1
  Len:     0x362000     (3547136)       (0xBC040000)
  Offset0: 0x1C         (28)            (0xBC04001C)
  Offset1: 0x9D0        (2512)  (0xBC0409D0)
  Offset2: 0x15DC00     (1432576)       (0xBC19DC00)
  Header CRC:    0x7379404E
  Calculate CRC: 0x7379404E
Image 1 is OK
Try to load image 1.
Waiting for 3 seconds to upgrade ...
CMD: [load -raw -addr=0x807b0790 -max=0x184f870 :]
Loader:raw Filesys:tftp Dev:eth0 File:: Options:(null)
Loading: _tftpd_open(): retries=0/3
_tftpd_open(): retries=1/3
_tftpd_open(): retries=2/3

### Start=2037100647 E=-1939317017 Delta=318549632 ###
Failed.
Could not load :: Timeout occured
CMD: [boot -raw -z -addr=0x80001000 -max=0x6ff000 flash0.os:]
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: .. 3916 bytes read

### Start=-1936172071 E=-1935503775 Delta=668296 ###
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
Linux version 2.6.24.111 (root@dd-wrt) (gcc version 4.1.2) #15401 Mon May 27 02:21:37 CEST 2013
CPU revision is: 00019749
Found a 4MB ST compatible serial flash
Determined physical RAM map:
 memory: 02000000 @ 00000000 (usable)
Zone PFN ranges:
  Normal          0 ->     8192
  HighMem      8192 ->     8192
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0:        0 ->     8192
Built 1 zonelists in Zone order.  Total pages: 8192
Kernel command line: console=ttyS0,115200 root=1f02 rootfstype=squashfs noinitrd
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
PID hash table entries: 256 (order: 8, 1024 bytes)
CPU: BCM5357 rev 2 at 300 MHz
Using 150.000 MHz high precision timer.
console [ttyS0] enabled
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 25924k/32768k available (3490k kernel code, 6828k reserved, 1369k data, 220k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
Generic PHY: Registered new driver
PCI: no core
PCI: no core
PCI: Fixing up bus 0
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
squashfs: version 3.0 (2006/03/15) Phillip Lougher
io scheduler noop registered
io scheduler deadline registered (default)
HDLC line discipline: version $Revision: 4.8 $, maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver $Revision: 1.90 $ 4 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = 8) is a 16550A
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
MPPE/MPPC encryption/compression module registered
NET: Registered protocol family 24
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
et_module_init: passivemode set to 0x0
eth0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.100.138.9
pflash: found no supported devices
bootloader size: 262144
nvram size: 65536
sflash: Filesystem type: squashfs, size=0x2033a7
partition size = 2171904
Updating TRX offsets and length:
old trx = [0x0000001c, 0x000009d0, 0x0015dc00], len=0x00362000 crc32=0x7379404e
new trx = [0x0000001c, 0x000009d0, 0x0015dc00], len=0x00370000 crc32=0x56ac5dc7
Done
Creating 5 MTD partitions on "sflash":
0x00000000-0x00040000 : "cfe"
0x00040000-0x003f0000 : "linux"
0x0019dc00-0x003b0000 : "rootfs"
mtd: partition "rootfs" doesn't start on an erase block boundary -- force read-only
0x003f0000-0x00400000 : "nvram"
0x003b0000-0x003f0000 : "ddwrt"
Broadcom Watchdog Timer: 0.07 initialized.
u32 classifier
    Performance counters on
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1024 buckets, 4096 max)
ctnetlink v0.93: registering with nfnetlink.
IPv4 over IPv4 tunneling driver
GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team
ClusterIP Version 0.8 loaded successfully
TCP bic registered
TCP cubic registered
TCP westwood registered
TCP highspeed registered
TCP hybla registered
TCP htcp registered
TCP vegas registered
TCP scalable registered
NET: Registered protocol family 1
NET: Registered protocol family 17
Welcome to PF_RING 3.2.1
(C) 2004-06 L.Deri <deri@ntop.org>
NET: Registered protocol family 27
PF_RING: bucket length    128 bytes
PF_RING: ring slots       4096
PF_RING: sample rate      1 [1=no sampling]
PF_RING: capture TX       No [RX only]
PF_RING: transparent mode Yes
PF_RING initialized correctly.
PF_RING: registered /proc/net/pf_ring/
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
decode 1f02
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 220k freed
start service
starting Architecture code for broadcom
done
Booting device: Linksys WRT54G/GL/GS
loading switch-core
loading switch-robo
roboswitch: Probing device eth0: found a 5325!
boardflags are 0x0000
Some error found, we want to reboot!.....................
kill -15 -1: No such file or directory
sleep 3: No such file or directory
kill -9 -1: No such file or directory
umount -a -r: No such file or directory
/etc/preinit: line 66: can't create /proc/sys/net/ipv4/ip_conntrack_max: nonexistent directory
/etc/preinit: line 66: can't create /proc/sys/net/ipv4/ip_conntrack_max: nonexistent directory
eth1: Operation not supported
wl0.1: No such device
wl0.2: No such device
wl0.3: No such device
eth1: Operation not permitted
nbw = 20
800, 300, 6
spec 2B06
eth1: Invalid argument
eth1: Invalid argument
eth1: Operation not supported
eth1: Operation not supported
br0: Dropping NETIF_F_UFO since no NETIF_F_HW_CSUM feature.
br0: No such file or directory
device eth0 entered promiscuous mode
br0: port 1(eth0) entering learning state
function start_hwmon not found
Sending SIGTERM to all processes
BCMDOG: WDT device closed unexpectedly.  WDT will not stop!
br0: topology change detected, propagating
br0: port 1(eth0) entering forwarding state
Sending SIGKILL to all processes
Restarting system.
Please stand by while rebooting the system...
Sponsor
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 7178
Location: Texas, USA

PostPosted: Sat Jul 04, 2020 23:11    Post subject: Reply with quote
Did you bother to do any kind of web or forum search?

www.google.com/search?q=E1200+bricked+forum.dd-wrt.com+site:forum.dd-wrt.com

https://wiki.dd-wrt.com/wiki/index.php/E1200

https://wiki.dd-wrt.com/wiki/index.php/Linksys_E1200v2

I'm not going to repeat the path of install and upgrade for Broadcom MIPS devices that I have posted at least a dozen times in the past month. (click on my profile button, click see all posts, and find it yourself)

ALSO, use Firefox ESR / ESR portable 52 on windows or IE for flashing. You're probably using Chrome or a Chromium-based browser, and I've already posted about this numerous times as well.

_________________
Official Forum Rules, Guidelines, and Helpful InformationFirmware FAQInstallation WikiWhere Do I Download Firmware?
DON'T use Chromium-based browsersRTFM/STFW - TL;DR is NOT an excuse. • Why Should I Care What Color the Bikeshed Is?
Please DO NOT PM me with questions; Ask in the forum.

---------------------------------------------------------

Linux User #377467 counter.li.org / linuxcounter.net
wtgibson
DD-WRT Novice


Joined: 04 Jul 2020
Posts: 4

PostPosted: Sun Jul 05, 2020 1:19    Post subject: Reply with quote
Hi there,
Yes, I spent hours this afternoon reading posts. I started at the E1200 wiki, and followed its recommendations for choosing a firmware upgrade.
I used firefox to do the firmware upgrade (but it's V77, not ESR)

After I bricked it the first time, I used the forum to find posts on accessing the serial port, which I followed. I used tftp on the command line to perform the final firmware update.

I've been reading Peacock 6 and anything else I can find.

IMHO, if someone is cracking open a router and working with the serial port, maybe you could give the benefit of the doubt, that they've done some amount of research.

To return your level of hostility, "did you bother to read my post"?
The issue is that the hardware no longer boots after a firmware upgrade which I performed using tftp and the serial port
No bootloader, no lights, nothing.
All the forum posts I've found are either tftp from supervisor mode (wouldn't work, had ping with TTL=100 but no ports open for web or tftp), or from the serial port, like I did.

Like maybe JTAG would work? Or manually programming the flash directly? I just don't see how I got myself into this situation. I'd read that there's basically nothing you can do on the serial console that can make a bricked router worse - but apparently I've managed it.

If there's something on the forum that matches my situation, I apologize that I've been unable to find it. Perhaps there's a different term for 'bricked' which describes the level of broken I've managed to create Smile

I really do appreciate assistance.
If I manage to get this running the trailed build, I'd like to follow your recommended upgrade path. The first one I found was here:
https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=325637&highlight=
The first is the version I installed (which caused the super-brick) and the second is 7+MB, which won't fit on my E1200.
So perhaps I'm still missing something here too.

Thanks!
Will
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 7178
Location: Texas, USA

PostPosted: Sun Jul 05, 2020 1:46    Post subject: Reply with quote
Sorry, I overlooked the 4MB flash size on this one. You can't run K3.x. SO, let me see where I'm at...

Here's a link on where to get FF ESR Portable 52 for Windows.

You should be able to flash 41664 mini-nv64k. You *may* also be able to flash 42872. If either one bricks it, then you will have to flash 40723 to have the busybox shell issue fixed, but you may have to use a workaround for the GTK renewal issue (I forget).
jwh7 wrote:
All I can say is not to use any build older than 41664, to have SFE NAT (for k3.2+ builds), KRACK (k24+), PBR+SFE, CAKE / FQ_CODEL_FAST, and GTK Rekey wireless timer fixes. For Wireguard, one should use at least 42872.

The latest builds are generally recommended, after one researches the build threads to avoid bad ones.

If you want to try 43652 again, please provide serial log from the entire process of flashing to brick to see what's broken so I can forward it to the developer. I wouldn't do my configuration until after upgrading.

Apologies for my "tone", it's just that when you see the same things over and over and over and... well. Sorry for being me! lol

_________________
Official Forum Rules, Guidelines, and Helpful InformationFirmware FAQInstallation WikiWhere Do I Download Firmware?
DON'T use Chromium-based browsersRTFM/STFW - TL;DR is NOT an excuse. • Why Should I Care What Color the Bikeshed Is?
Please DO NOT PM me with questions; Ask in the forum.

---------------------------------------------------------

Linux User #377467 counter.li.org / linuxcounter.net
wtgibson
DD-WRT Novice


Joined: 04 Jul 2020
Posts: 4

PostPosted: Sun Jul 05, 2020 1:58    Post subject: Reply with quote
I totally get where you're coming from. I know people are generally pretty bad at both self-help and properly asking for assitance; I do try to be 'one of the good ones'.

Not to sound like a broken record, but I can't flash anything. It's like dead dead.
I'm not sure where to begin if the serial port won't work. There's no bootloader, no web interface, no ethernet, no tftp, literally nothing is working.
There's power, but nobody seems home.

I had included the entire serial log from flashing 43652 in the OP - that's 100% of the log. The board never came back up from its last reboot.

I'm okay with throwing the hardware away if I have to, I know it's ancient now. I'm just cheap, and it's the last unused router in the house...
Thanks again,
Will
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 7178
Location: Texas, USA

PostPosted: Sun Jul 05, 2020 2:05    Post subject: Reply with quote
Did you try a 30-30-30 reset to see if it may spark some life out of it? If that don't work, then it may be time to try jtag, but the thing is, if the serial port is dead, then you may be sh..outtaluck. You didn't connect the Vcc lead on the serial adapter did you? I wouldn't think the filter caps crapped out due to a flash, but that is the only other thing, unless you fried it. All it takes is a touch of that lead.
_________________
Official Forum Rules, Guidelines, and Helpful InformationFirmware FAQInstallation WikiWhere Do I Download Firmware?
DON'T use Chromium-based browsersRTFM/STFW - TL;DR is NOT an excuse. • Why Should I Care What Color the Bikeshed Is?
Please DO NOT PM me with questions; Ask in the forum.

---------------------------------------------------------

Linux User #377467 counter.li.org / linuxcounter.net
wtgibson
DD-WRT Novice


Joined: 04 Jul 2020
Posts: 4

PostPosted: Sun Jul 05, 2020 3:23    Post subject: Reply with quote
I did try 2 or 3 30-30-30 resets before posting; no success.

I'd fried a different board earlier this week with my serial adapter's Vcc (honestly why does FTDI's 3.3V cable have a 5V Vcc, it's like they're trying to make me break stuff) so no I had that pin carefully insulated.

Thanks for talking it through with me. Take care Smile
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 7178
Location: Texas, USA

PostPosted: Sun Jul 05, 2020 3:35    Post subject: Reply with quote
You don't use either the 3.3 or 5V lead from the adapter. Only wires required are TX, RX, GND. I guess it's dumpster fodder unless you can get it to respond to ping or somehow come back to life. I'd offer, but I already have a small stack of devices that are destined for the last chance saloon. I don't have a 2M bench here, or I would consider going through them and finding what component(s) faulted.
_________________
Official Forum Rules, Guidelines, and Helpful InformationFirmware FAQInstallation WikiWhere Do I Download Firmware?
DON'T use Chromium-based browsersRTFM/STFW - TL;DR is NOT an excuse. • Why Should I Care What Color the Bikeshed Is?
Please DO NOT PM me with questions; Ask in the forum.

---------------------------------------------------------

Linux User #377467 counter.li.org / linuxcounter.net
BrainSlayer
Site Admin


Joined: 06 Jun 2006
Posts: 7023
Location: Dresden, Germany

PostPosted: Sun Jul 05, 2020 14:27    Post subject: Re: Super-bricked Linksys E1200 Reply with quote
wtgibson wrote:
Hi,
I bricked my E1200 (v1) by flashing:
dd-wrt.v24-43652_NEWD-2_K2.6_mini-nv64k
(still not sure why, but maybe not relevant?)

I connected a serial terminal, then used it and tftp to install:
dd-wrt.v24-21676_NEWD-2_K2.6_mini-e1200v1
(This was the working version I'd started with)

After starting, the router never powered on after its first reboot. No amount of hard resets or power cycles gets any activity on any LEDs, no serial activity, nothing. 12, 3.3, 1.1V rails seem okay.

Any tips?
Serial log follows:
Code:

CFE> show devices
CMD: [show devices]
Device Name          Description
-------------------  ---------------------------------------------------------
uart0                NS16550 UART at 0x18000300
flash0.boot          ST Serial flash offset 00000000 size 256KB
flash0.trx           ST Serial flash offset 00040000 size 1KB
flash0.os            ST Serial flash offset 0004001C size 3776KB
flash0.nvram         ST Serial flash offset 003F0000 size 64KB
flash1.boot          ST Serial flash offset 00000000 size 256KB
flash1.trx           ST Serial flash offset 00040000 size 3776KB
flash1.nvram         ST Serial flash offset 003F0000 size 64KB
flash0               ST Serial flash size 4096KB
eth0                 Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller
*** command status = 0


CFE> nvram erase
CMD: [nvram erase]
*** command status = 0



CFE> flash -ctheader : flash1.trx
CMD: [flash -ctheader : flash1.trx]
Reading :: _tftpd_open(): retries=0/3
_tftpd_open(): retries=1/3
Done. 3548160 bytes read, fname=flash1.trx
CODE Pattern is correct! (E120)
it's code.bin

TRX file size = 3547136
Burning code image.
Programming...done. 3547136 bytes written
*** command status = 0
CFE> go
CMD: [go]
Check CRC of image1
  Len:     0x362000     (3547136)       (0xBC040000)
  Offset0: 0x1C         (28)            (0xBC04001C)
  Offset1: 0x9D0        (2512)  (0xBC0409D0)
  Offset2: 0x15DC00     (1432576)       (0xBC19DC00)
  Header CRC:    0x7379404E
  Calculate CRC: 0x7379404E
Image 1 is OK
Try to load image 1.
Waiting for 3 seconds to upgrade ...
CMD: [load -raw -addr=0x807b0790 -max=0x184f870 :]
Loader:raw Filesys:tftp Dev:eth0 File:: Options:(null)
Loading: _tftpd_open(): retries=0/3
_tftpd_open(): retries=1/3
_tftpd_open(): retries=2/3

### Start=2037100647 E=-1939317017 Delta=318549632 ###
Failed.
Could not load :: Timeout occured
CMD: [boot -raw -z -addr=0x80001000 -max=0x6ff000 flash0.os:]
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: .. 3916 bytes read

### Start=-1936172071 E=-1935503775 Delta=668296 ###
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
Linux version 2.6.24.111 (root@dd-wrt) (gcc version 4.1.2) #15401 Mon May 27 02:21:37 CEST 2013
CPU revision is: 00019749
Found a 4MB ST compatible serial flash
Determined physical RAM map:
 memory: 02000000 @ 00000000 (usable)
Zone PFN ranges:
  Normal          0 ->     8192
  HighMem      8192 ->     8192
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0:        0 ->     8192
Built 1 zonelists in Zone order.  Total pages: 8192
Kernel command line: console=ttyS0,115200 root=1f02 rootfstype=squashfs noinitrd
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
PID hash table entries: 256 (order: 8, 1024 bytes)
CPU: BCM5357 rev 2 at 300 MHz
Using 150.000 MHz high precision timer.
console [ttyS0] enabled
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 25924k/32768k available (3490k kernel code, 6828k reserved, 1369k data, 220k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
Generic PHY: Registered new driver
PCI: no core
PCI: no core
PCI: Fixing up bus 0
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
squashfs: version 3.0 (2006/03/15) Phillip Lougher
io scheduler noop registered
io scheduler deadline registered (default)
HDLC line discipline: version $Revision: 4.8 $, maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver $Revision: 1.90 $ 4 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = 8) is a 16550A
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
MPPE/MPPC encryption/compression module registered
NET: Registered protocol family 24
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
et_module_init: passivemode set to 0x0
eth0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.100.138.9
pflash: found no supported devices
bootloader size: 262144
nvram size: 65536
sflash: Filesystem type: squashfs, size=0x2033a7
partition size = 2171904
Updating TRX offsets and length:
old trx = [0x0000001c, 0x000009d0, 0x0015dc00], len=0x00362000 crc32=0x7379404e
new trx = [0x0000001c, 0x000009d0, 0x0015dc00], len=0x00370000 crc32=0x56ac5dc7
Done
Creating 5 MTD partitions on "sflash":
0x00000000-0x00040000 : "cfe"
0x00040000-0x003f0000 : "linux"
0x0019dc00-0x003b0000 : "rootfs"
mtd: partition "rootfs" doesn't start on an erase block boundary -- force read-only
0x003f0000-0x00400000 : "nvram"
0x003b0000-0x003f0000 : "ddwrt"
Broadcom Watchdog Timer: 0.07 initialized.
u32 classifier
    Performance counters on
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1024 buckets, 4096 max)
ctnetlink v0.93: registering with nfnetlink.
IPv4 over IPv4 tunneling driver
GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team
ClusterIP Version 0.8 loaded successfully
TCP bic registered
TCP cubic registered
TCP westwood registered
TCP highspeed registered
TCP hybla registered
TCP htcp registered
TCP vegas registered
TCP scalable registered
NET: Registered protocol family 1
NET: Registered protocol family 17
Welcome to PF_RING 3.2.1
(C) 2004-06 L.Deri <deri@ntop.org>
NET: Registered protocol family 27
PF_RING: bucket length    128 bytes
PF_RING: ring slots       4096
PF_RING: sample rate      1 [1=no sampling]
PF_RING: capture TX       No [RX only]
PF_RING: transparent mode Yes
PF_RING initialized correctly.
PF_RING: registered /proc/net/pf_ring/
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
decode 1f02
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 220k freed
start service
starting Architecture code for broadcom
done
Booting device: Linksys WRT54G/GL/GS
loading switch-core
loading switch-robo
roboswitch: Probing device eth0: found a 5325!
boardflags are 0x0000
Some error found, we want to reboot!.....................
kill -15 -1: No such file or directory
sleep 3: No such file or directory
kill -9 -1: No such file or directory
umount -a -r: No such file or directory
/etc/preinit: line 66: can't create /proc/sys/net/ipv4/ip_conntrack_max: nonexistent directory
/etc/preinit: line 66: can't create /proc/sys/net/ipv4/ip_conntrack_max: nonexistent directory
eth1: Operation not supported
wl0.1: No such device
wl0.2: No such device
wl0.3: No such device
eth1: Operation not permitted
nbw = 20
800, 300, 6
spec 2B06
eth1: Invalid argument
eth1: Invalid argument
eth1: Operation not supported
eth1: Operation not supported
br0: Dropping NETIF_F_UFO since no NETIF_F_HW_CSUM feature.
br0: No such file or directory
device eth0 entered promiscuous mode
br0: port 1(eth0) entering learning state
function start_hwmon not found
Sending SIGTERM to all processes
BCMDOG: WDT device closed unexpectedly.  WDT will not stop!
br0: topology change detected, propagating
br0: port 1(eth0) entering forwarding state
Sending SIGKILL to all processes
Restarting system.
Please stand by while rebooting the system...


please send me a nvram backup and a cfe backup. it seems the device was not properly detected

_________________
"So you tried to use the computer and it started smoking? Sounds like a Mac to me.." - Louis Rossmann https://www.youtube.com/watch?v=eL_5YDRWqGE&t=60s
BrainSlayer
Site Admin


Joined: 06 Jun 2006
Posts: 7023
Location: Dresden, Germany

PostPosted: Sun Jul 05, 2020 14:58    Post subject: Re: Super-bricked Linksys E1200 Reply with quote
wtgibson wrote:
Hi,
I bricked my E1200 (v1) by flashing:
dd-wrt.v24-43652_NEWD-2_K2.6_mini-nv64k
(still not sure why, but maybe not relevant?)

I connected a serial terminal, then used it and tftp to install:
dd-wrt.v24-21676_NEWD-2_K2.6_mini-e1200v1
(This was the working version I'd started with)

After starting, the router never powered on after its first reboot. No amount of hard resets or power cycles gets any activity on any LEDs, no serial activity, nothing. 12, 3.3, 1.1V rails seem okay.

Any tips?
Serial log follows:
Code:

CFE> show devices
CMD: [show devices]
Device Name          Description
-------------------  ---------------------------------------------------------
uart0                NS16550 UART at 0x18000300
flash0.boot          ST Serial flash offset 00000000 size 256KB
flash0.trx           ST Serial flash offset 00040000 size 1KB
flash0.os            ST Serial flash offset 0004001C size 3776KB
flash0.nvram         ST Serial flash offset 003F0000 size 64KB
flash1.boot          ST Serial flash offset 00000000 size 256KB
flash1.trx           ST Serial flash offset 00040000 size 3776KB
flash1.nvram         ST Serial flash offset 003F0000 size 64KB
flash0               ST Serial flash size 4096KB
eth0                 Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller
*** command status = 0


CFE> nvram erase
CMD: [nvram erase]
*** command status = 0



CFE> flash -ctheader : flash1.trx
CMD: [flash -ctheader : flash1.trx]
Reading :: _tftpd_open(): retries=0/3
_tftpd_open(): retries=1/3
Done. 3548160 bytes read, fname=flash1.trx
CODE Pattern is correct! (E120)
it's code.bin

TRX file size = 3547136
Burning code image.
Programming...done. 3547136 bytes written
*** command status = 0
CFE> go
CMD: [go]
Check CRC of image1
  Len:     0x362000     (3547136)       (0xBC040000)
  Offset0: 0x1C         (28)            (0xBC04001C)
  Offset1: 0x9D0        (2512)  (0xBC0409D0)
  Offset2: 0x15DC00     (1432576)       (0xBC19DC00)
  Header CRC:    0x7379404E
  Calculate CRC: 0x7379404E
Image 1 is OK
Try to load image 1.
Waiting for 3 seconds to upgrade ...
CMD: [load -raw -addr=0x807b0790 -max=0x184f870 :]
Loader:raw Filesys:tftp Dev:eth0 File:: Options:(null)
Loading: _tftpd_open(): retries=0/3
_tftpd_open(): retries=1/3
_tftpd_open(): retries=2/3

### Start=2037100647 E=-1939317017 Delta=318549632 ###
Failed.
Could not load :: Timeout occured
CMD: [boot -raw -z -addr=0x80001000 -max=0x6ff000 flash0.os:]
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: .. 3916 bytes read

### Start=-1936172071 E=-1935503775 Delta=668296 ###
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
Linux version 2.6.24.111 (root@dd-wrt) (gcc version 4.1.2) #15401 Mon May 27 02:21:37 CEST 2013
CPU revision is: 00019749
Found a 4MB ST compatible serial flash
Determined physical RAM map:
 memory: 02000000 @ 00000000 (usable)
Zone PFN ranges:
  Normal          0 ->     8192
  HighMem      8192 ->     8192
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0:        0 ->     8192
Built 1 zonelists in Zone order.  Total pages: 8192
Kernel command line: console=ttyS0,115200 root=1f02 rootfstype=squashfs noinitrd
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
PID hash table entries: 256 (order: 8, 1024 bytes)
CPU: BCM5357 rev 2 at 300 MHz
Using 150.000 MHz high precision timer.
console [ttyS0] enabled
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 25924k/32768k available (3490k kernel code, 6828k reserved, 1369k data, 220k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
Generic PHY: Registered new driver
PCI: no core
PCI: no core
PCI: Fixing up bus 0
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
squashfs: version 3.0 (2006/03/15) Phillip Lougher
io scheduler noop registered
io scheduler deadline registered (default)
HDLC line discipline: version $Revision: 4.8 $, maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver $Revision: 1.90 $ 4 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = 8) is a 16550A
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
MPPE/MPPC encryption/compression module registered
NET: Registered protocol family 24
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
et_module_init: passivemode set to 0x0
eth0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.100.138.9
pflash: found no supported devices
bootloader size: 262144
nvram size: 65536
sflash: Filesystem type: squashfs, size=0x2033a7
partition size = 2171904
Updating TRX offsets and length:
old trx = [0x0000001c, 0x000009d0, 0x0015dc00], len=0x00362000 crc32=0x7379404e
new trx = [0x0000001c, 0x000009d0, 0x0015dc00], len=0x00370000 crc32=0x56ac5dc7
Done
Creating 5 MTD partitions on "sflash":
0x00000000-0x00040000 : "cfe"
0x00040000-0x003f0000 : "linux"
0x0019dc00-0x003b0000 : "rootfs"
mtd: partition "rootfs" doesn't start on an erase block boundary -- force read-only
0x003f0000-0x00400000 : "nvram"
0x003b0000-0x003f0000 : "ddwrt"
Broadcom Watchdog Timer: 0.07 initialized.
u32 classifier
    Performance counters on
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1024 buckets, 4096 max)
ctnetlink v0.93: registering with nfnetlink.
IPv4 over IPv4 tunneling driver
GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team
ClusterIP Version 0.8 loaded successfully
TCP bic registered
TCP cubic registered
TCP westwood registered
TCP highspeed registered
TCP hybla registered
TCP htcp registered
TCP vegas registered
TCP scalable registered
NET: Registered protocol family 1
NET: Registered protocol family 17
Welcome to PF_RING 3.2.1
(C) 2004-06 L.Deri <deri@ntop.org>
NET: Registered protocol family 27
PF_RING: bucket length    128 bytes
PF_RING: ring slots       4096
PF_RING: sample rate      1 [1=no sampling]
PF_RING: capture TX       No [RX only]
PF_RING: transparent mode Yes
PF_RING initialized correctly.
PF_RING: registered /proc/net/pf_ring/
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
decode 1f02
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 220k freed
start service
starting Architecture code for broadcom
done
Booting device: Linksys WRT54G/GL/GS
loading switch-core
loading switch-robo
roboswitch: Probing device eth0: found a 5325!
boardflags are 0x0000
Some error found, we want to reboot!.....................
kill -15 -1: No such file or directory
sleep 3: No such file or directory
kill -9 -1: No such file or directory
umount -a -r: No such file or directory
/etc/preinit: line 66: can't create /proc/sys/net/ipv4/ip_conntrack_max: nonexistent directory
/etc/preinit: line 66: can't create /proc/sys/net/ipv4/ip_conntrack_max: nonexistent directory
eth1: Operation not supported
wl0.1: No such device
wl0.2: No such device
wl0.3: No such device
eth1: Operation not permitted
nbw = 20
800, 300, 6
spec 2B06
eth1: Invalid argument
eth1: Invalid argument
eth1: Operation not supported
eth1: Operation not supported
br0: Dropping NETIF_F_UFO since no NETIF_F_HW_CSUM feature.
br0: No such file or directory
device eth0 entered promiscuous mode
br0: port 1(eth0) entering learning state
function start_hwmon not found
Sending SIGTERM to all processes
BCMDOG: WDT device closed unexpectedly.  WDT will not stop!
br0: topology change detected, propagating
br0: port 1(eth0) entering forwarding state
Sending SIGKILL to all processes
Restarting system.
Please stand by while rebooting the system...


this log is useless. it was made with a old firmware from 2013 but not with the latest. and the worst you can do is "nvram erase" in the cfe. you killed your properties which causes the missdetection.
so i dont see a bug. first you did not flash the latest firmare, you flashed one from 2013. (we have 2020 now). second you killed the board parameters using nvram erase. so the firmware cannot detect the device and will not work. so recovery your cfe nvram data and all will be fine

_________________
"So you tried to use the computer and it started smoking? Sounds like a Mac to me.." - Louis Rossmann https://www.youtube.com/watch?v=eL_5YDRWqGE&t=60s
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum