What's new

ASUS 86U bricked, No LAN connection, Serial command not accepting

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

Status
Not open for further replies.
Hello everybody....
I have bricked my 86U when wrong firmware upload via cfe. Massage shows: "illegal whole firmware".
After that nothing happens. No LAN connection. Reset button press not working.
Serial connection not accepting any command like ctrl+c, space etc.
please help how to unbrick my 86u..
please find cfe output in attached file...
Code:
----
BTRM
V1.6
CPU0
L1CD
MMUI
MMU7
DATA
ZBBS
MAIN
OTP?
OTPP
USBT
NAND
IMG?
IMGL
UHD?
UHDP
RLO?
RLOP
UBI?
UBIP
PASS
----
HELO
L1CD
MMUI
MMU8
CODE
ZBBS
MAIN
NAND
IMg?
IMGL
UHD?
UHDP
UBI?
UBIP
HELO
5.0202HNDrc7-1.0.38-161.122
CPU0
L1CD
MMUI
MMU8
CODE
ZBBS
MAIN
NVRAM memcfg 0x41527
MCB chksum 0xa2becbd7, config 0x41527

MemsysInit lpf0_generic_aarch64 1.3.0.1 20150910
DDR3
90001588 80018000 8001A000 00000000 00000000 0070371A
MCB rev=0x00040301 Ref ID=0x0371A Sub Bld=0x007
Dram Timing 11-11-11

DDR3-1600 CL11 total 1024MB 2 16bits part[s] %1 SSC

Add/Ctl Alignment
no adjustment

ZQ Cal LP PHY
 R in Ohm
 P: Finger=0x2D0 Term=0x78 Drv=0x2A
 N: Finger=0x2D0 Term=0x78 Drv=0x2A

PLL Ref(Hz)=0x02FAF080 UI STEPS=0x03A
 DDR CLK(MHz)=0x31B WL CLK dly(ps)=0x0C8 bitT(ps)=0x274 VDLsize(fs)=0x2A4B CLK_VDL=0x01A

SHMOO 28nm
8001A000 80018800 00000000 00020000 00000001

Shmoo WL

One UI Steps : 0x45

auto-clk result = not converged (filter=0C steps)
initial CLK shift = 01A
final CLK shift   = 01A

   000000000011111111112222222222333333333344444444445555555555666666666
   012345678901234567890123456789012345678901234567890123456789012345678
00 S----------------------------X+++++++++++++++++++++++++++++++++++++++
01 S-----------------------------X++++++++++++++++++++++++++++++++++++++
02 X++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
03 X++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Shmoo RD En
FORCED WR ODT = 0x18001800
 DQSN DRIVE PAD CONTROL (from) (to)
 B0 00031A31 00079A31
 B1 00031A31 00079A31
 B2 00031A31 00079A31
 B3 00031A31 00079A31
B0 RISE UI=1 VDL=19 PICK UI=2 VDL=19
B1 RISE UI=1 VDL=15 PICK UI=2 VDL=15
B2 RISE UI=0 VDL=00 PICK UI=1 VDL=00
B3 RISE UI=0 VDL=00 PICK UI=1 VDL=00
   000000000011111111112222222222333333333344444444445555555555666666666
   012345678901234567890123456789012345678901234567890123456789012345678
00 --S----------------------X+++++++++++++++++++++++++++++++++++++++++++
01 --S--------------++++X+++++++++++++++++++++++++++++++++++++++++++++++
02 XS-------------------------------------------------------------------
03 XS-------------------------------------------------------------------

Shmoo RD DQ NP
DQS :
B0 VDL=3A ok
B1 VDL=3A ok
B2 VDL=3A ok
B3 VDL=3A ok
   000000000011111111112222222222333333333344444444445555555555666666666
   012345678901234567890123456789012345678901234567890123456789012345678
00 ---++++++++++++++++++++++++X+++++++++++++++++++++++++----------------
01 -------++++++++++++++++++++++++X++++++++++++++++++++++++-------------
02 ------++++++++++++++++++++++X+++++++++++++++++++++++-----------------
03 ----------+++++++++++++++++++++++X+++++++++++++++++++++++------------
04 -----++++++++++++++++++++++++X+++++++++++++++++++++++++--------------

16 X--------------------------------------------------------------------
17 X--------------------------------------------------------------------
18 X--------------------------------------------------------------------
19 X--------------------------------------------------------------------

Shmoo RD DQ P
   000000000011111111112222222222333333333344444444445555555555666666666
   012345678901234567890123456789012345678901234567890123456789012345678
00 ---++++++++++++++++++++++++X+++++++++++++++++++++++++----------------
01 -------++++++++++++++++++++++++X++++++++++++++++++++++++-------------
02 -----+++++++++++++++++++++++X+++++++++++++++++++++++-----------------
03 -----------++++++++++++++++++++++X+++++++++++++++++++++++------------
04 ------++++++++++++++++++++++++X++++++++++++++++++++++++--------------
24 X--------------------------------------------------------------------
25 X--------------------------------------------------------------------
26 X--------------------------------------------------------------------
27 X--------------------------------------------------------------------
28 X--------------------------------------------------------------------
29 X--------------------------------------------------------------------
30 X--------------------------------------------------------------------
31 X--------------------------------------------------------------------

Shmoo RD DQ N
   000000000011111111112222222222333333333344444444445555555555666666666
   012345678901234567890123456789012345678901234567890123456789012345678
00 --+++++++++++++++++++++++++X++++++++++++++++++++++++++---------------
01 -------++++++++++++++++++++++++X+++++++++++++++++++++++++------------
02 ----++++++++++++++++++++++++X+++++++++++++++++++++++++---------------
03 ----------+++++++++++++++++++++++X++++++++++++++++++++++++-----------
04 -----+++++++++++++++++++++++++X++++++++++++++++++++++++++------------
05 ----------++++++++++++++++++++++++X+++++++++++++++++++++++++---------
06 ---+++++++++++++++++++++++++X+++++++++++++++++++++++++---------------
07 ----------++++++++++++++++++++++++X+++++++++++++++++++++++++---------
08 ------++++++++++++++++++++++++X++++++++++++++++++++++++--------------
09 ------+++++++++++++++++++++++X++++++++++++++++++++++++---------------
10 ---------+++++++++++++++++++++++X+++++++++++++++++++++++-------------
11 ------+++++++++++++++++++++++X++++++++++++++++++++++++---------------
12 --------++++++++++++++++++++++++X+++++++++++++++++++++++++-----------

19 X--------------------------------------------------------------------
20 X--------------------------------------------------------------------
21 X--------------------------------------------------------------------
22 X--------------------------------------------------------------------
23 X--------------------------------------------------------------------
24 X--------------------------------------------------------------------
25 X--------------------------------------------------------------------
26 X--------------------------------------------------------------------
27 X--------------------------------------------------------------------
28 X--------------------------------------------------------------------
29 X--------------------------------------------------------------------
30 X--------------------------------------------------------------------
31 X--------------------------------------------------------------------

RD DQS adjustments :
BL0: Start: 0x3A Final: 0x3A
BL1: Start: 0x3A Final: 0x3A
BL2: Start: 0x3A Final: 0x3A
BL3: Start: 0x3A Final: 0x3A

Shmoo WR DQ
   000000000011111111112222222222333333333344444444445555555555666666666
   012345678901234567890123456789012345678901234567890123456789012345678
00 ----++++++++++++++++++++++++X+++++++++++++++++++++++++---------------
01 ------+++++++++++++++++++++++++X++++++++++++++++++++++++++-----------
02 ---+++++++++++++++++++++++++X+++++++++++++++++++++++++---------------
03 -------+++++++++++++++++++++++++X+++++++++++++++++++++++++-----------
04 ---+++++++++++++++++++++++++X+++++++++++++++++++++++++---------------
05 --------++++++++++++++++++++++++X+++++++++++++++++++++++++-----------

26 X--------------------------------------------------------------------
27 X--------------------------------------------------------------------
28 X--------------------------------------------------------------------
29 X--------------------------------------------------------------------
30 X--------------------------------------------------------------------
31 X--------------------------------------------------------------------

Shmoo WR DM
WR DM
   000000000011111111112222222222333333333344444444445555555555666666666
   012345678901234567890123456789012345678901234567890123456789012345678
00 -------+++++++++++++++++++++++++++X+++++++++++++++++++++++++++-------
01 --+++++++++++++++++++++++++++X++++++++++++++++++++++++++++-----------
02 X--------------------------------------------------------------------
03 X--------------------------------------------------------------------
MEMSYS init failed, return code 00000001
MEMC error:  0x00000000
PHY error:  0x00000000
SHMOO error:  0x10c00000
 0x00000082
 0x00000000
 

Attachments

  • cfe output.txt
    13.1 KB · Views: 192
If SHMOO fails while training memory, then it means you're not even reaching the console portion of the code. Short of JTAG (I don't think this platform is supported by the public JTAG methods), then there's not much you can do about it.
 
If SHMOO fails while training memory, then it means you're not even reaching the console portion of the code. Short of JTAG (I don't think this platform is supported by the public JTAG methods), then there's not much you can do about it.
It means it can't reach at CFE. So serial command ctrl+c not working..
Its mean only way to recover is nand flash if I have whole nand dump??
 
Why are you bricking multiple routers? I just accidentally deleted your post about bricking a NETGEAR R8000.
 
Why are you bricking multiple routers? I just accidentally deleted your post about bricking a NETGEAR R8000.
Ohoooo noooooo.

Netgear stock firmware is less features and not have root access which does not meet my requirements. And no other third party firmware doesn't support R8000P.

I found the link where Merlin firmware for R8000P.
but the tutorial not published.
I flash the firmware via telnet with cfe rom firmware that published above link and bricked.

Currently R8000P does not have much post or discussed about problems and unbricking methods.
Asus 86u hardware almost similar to R8000P. And more discussed regarding 86U problems and debugging. So I post as 86U not R8000P.
 
Last edited by a moderator:
Asus 86u hardware almost similar to R8000P

Does not mean it's the same thing, or that it's compatible (in addition to the legal issues). The HND platform uses an encrypted CFE, CFE is hardware-specific, and CFE data is part of the firmware image that you flashed. You just wrote a firmware with encrypted CFE data that does not work on your router, hence you bricked it.

Corrupted CFE = game over for your router.
 
Status
Not open for further replies.

Similar threads

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top