Nighthawk R7000 bootloop -

3 posts / 0 new
Last post
janx
janx's picture
Nighthawk R7000 bootloop -
Hello all. First time poster here, so thanks in advance to any help someone may provide. So, when perfroming my first DD-WRT setup, I foolishly followed the advice over at this instructables.com article, and overclocked my AC1900 to 1400.  Yes, I know it was stupid, but this VPN config artice led me down the wrong path when it mentioned an optional step to overclock the R7000, so please beware!
http://www.instructables.com/id/Configure-VPN-Settings-on-a-DD-WRT-Route...
 
So after eagerly awaiting for my TTL cable to arive all week, hoping to recover the router, it seems my R7000 may be bricked after all.   This is my last hope of some type of fix, so I greatly appreciate any advice that may restore bring it back to life.  
 
Since I don't see a way to attach my entire bootlooping Putty log as a text file, I've listed relevent snippets below. If anyone can assist, please let me know if you'd prefer the full putty log, and I will post it. 
 
Thanks!
Janx
 
CFE for Foxconn Router R7000 version: v1.0.21
Build Date: Wed Aug  7 19:11:17 CST 2013
Init Arena
Init Devs.
Boot up from NAND flash...
Bootcode Boot partition size = 524288(0x80000)
DDR Clock: 800 MHz
Info: DDR frequency set from clkfreq=1400,*800*
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.15.1 (r407936)
CPU type 0x0: 1400MHz
Tot mem: 262144 KBytes
 
Device eth0:  hwaddr C4-04-15-62-AA-5D, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Loader:raw Filesys:tftp Dev:eth0 File:192.168.1.2:vmlinuz Options:(null)
Loading: Failed.
Could not load 192.168.1.2:vmlinuz: Timeout occured
Checking crc...Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
Loading: ... 1630064 bytes read
Entry at 0x00008000
Closing network.
Starting program at 0x00008000
Uncompressing Linux... done, booting the kernel.
** 26 printk messages dropped ** Hierarchical RCU implementation.
        CONFIG_RCU_FANOUT set to non-default value of 2
        Build-time adjustment of leaf fanout to 2.
NR_IRQS:256
MPCORE GIC init
soc_dmu_init
add clk lookups
 
 
<SNIP>
 
Scanning device for bad blocks
Bad eraseblock 160 at 0x000001400000
Bad eraseblock 368 at 0x000002e00000
Options: CACHEPRG,NO_SUBPAGE_WRITE,
Creating 1 MTD partitions on "brcmnand":
0x000002240000-0x000008000000 : "ddwrt"
VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
Freeing unused kernel memory: 340K (8048b000 - 804e0000)
Unable to handle kernel NULL pointer dereference at virtual address 00000000
pgd = 80004000
[00000000] *pgd=00000000
Internal error: Oops - BUG: 817 [#1] SMP ARM
Modules linked in:
CPU: 1 PID: 200 Comm: kworker/1:1 Not tainted 4.4.22 #128
Hardware name: Northstar Prototype
Workqueue: mtdblock3 mtd_blktrans_work
 

<SNIP>

Kernel panic - not syncing: Fatal exception
CPU0: stopping
CPU: 0 PID: 0 Comm: swapper/0 Tainted: G      D         4.4.22 #128
Hardware name: Northstar Prototype
Backtrace:
[<8001b0c8>] (dump_backtrace) from [<8001b29c>] (show_stack+0x18/0x1c)
 r7:804e1f20 r6:60000193 r5:00000000 r4:80500edc
[<8001b284>] (show_stack) from [<8015e214>] (dump_stack+0x8c/0xa0)
[<8015e188>] (dump_stack) from [<8001ce7c>] (handle_IPI+0x110/0x1a8)
 r7:804e1f20 r6:00000000 r5:00000000 r4:805131a0
[<8001cd6c>] (handle_IPI) from [<80009394>] (gic_handle_irq+0x78/0x7c)
 r7:b0100100 r6:804e1f20 r5:b010010c r4:804efb14
[<8000931c>] (gic_handle_irq) from [<80009e80>] (__irq_svc+0x40/0x54)
Exception stack(0x804e1f20 to 0x804e1f68)
1f20: 86dd4240 00000000 00000ba4 8000a960 804e0000 804ef8e0 80424e90 804dc220
1f40: 804e1f90 804b48c8 00000000 804e1f7c 804e1f80 804e1f70 80018d28 80018d2c
1f60: 60000013 ffffffff
 r9:804b48c8 r8:804e1f90 r7:804e1f54 r6:ffffffff r5:60000013 r4:80018d2c
[<80018cf0>] (arch_cpu_idle) from [<80069c78>] (default_idle_call+0x30/0x34)
[<80069c48>] (default_idle_call) from [<80069d84>] (cpu_startup_entry+0x108/0x13c)
[<80069c7c>] (cpu_startup_entry) from [<80012a48>] (rest_init+0x80/0x84)
 r7:80513020 r4:00000000
[<800129c8>] (rest_init) from [<8048bcc0>] (start_kernel+0x320/0x32c)
[<8048b9a0>] (start_kernel) from [<0000807c>] (0x807c)
Rebooting in 10 seconds..Digital core power voltage set to 1.0V
Decompressing...done
Digital core power voltage set to 1.0V
 
janx
janx's picture
Update: I got to the CFC

Update: I got to the CFC prompt by repeatedly pressing CTRL-C. Then I sucessfully issued the tftpd command. Then I sucesffuly transfered the current netgear firrmware from a CMD window, and watch Putty start to install.  

However, after the installation is written, one line says "Skip writing CHK checksum for nflash"  Then later in the log, I see the clock speed remained at 1400, confirming that it didn't seem to overwrite anything, and goes into the same bootlop as my above post, so I'm wondering if I am missing a step? 

Here is the putty from where it starts to install, from where it fails:

Startup canceled
CFE> ^C
CFE> ^C
CFE> ^C
CFE> tftpd
Start TFTP server
Reading :: Done. 27975738 bytes read
Programming...done. 27975738 bytes written
Skip writing CHK checksum for nflash.
Digital core power voltage set to 1.0V
Decompressing...done
Digital core power voltage set to 1.0V
 
SHMOO VER 1.13
 
PKID07DC06011801080000000000001A103F01000000
 
S300001AF
00001160
 
 
RDLYW0 00000004
 
RDENW0 00000028
 
RDQSW0
 
<SNIP>
 
Decompressing...done
 
 
CFE for Foxconn Router R7000 version: v1.0.21
Build Date: Wed Aug  7 19:11:17 CST 2013
Init Arena
Init Devs.
Boot up from NAND flash...
Bootcode Boot partition size = 524288(0x80000)
DDR Clock: 800 MHz
Info: DDR frequency set from clkfreq=1400,*800*
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.15.1 (r4                     07936)
CPU type 0x0: 1400MHz
Tot mem: 262144 KBytes
 
Device eth0:  hwaddr C4-04-15-62-AA-5D, ipaddr 192.168.1.1, mask 255.255                     .255.0
        gateway not set, nameserver not set
Loader:raw Filesys:tftp Dev:eth0 File:192.168.1.2:vmlinuz Options:(null)
Loading: Failed.
Could not load 192.168.1.2:vmlinuz: Timeout occured
Checking crc...Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null                     )
Loading: ..... 5405952 bytes read
Entry at 0x00008000
Closing network
 
<SNIP>
 
Thanks again for any help!
Janx
 
janx
janx's picture
Last update: I got it up and

Last update: I got it up and running. While in putty, press "crlt"and "c", until you get the "CFE>", type "nvram erase". if it worked, you get "*** command status = 0". then type "tftpd", and you can write firmware again, but I didn't have to. 'nvram erase' got me up and running again, and I even overclocked to 1200 sucessfully

 

Janx