R7800 - strange issue when going back to Voxel/stock firmware

[gogubeb]

Hello,
I have an r7800 router and now I'm using firmware "DD-WRT v3.0-r35700M kongat (04/09/18)".
My issue is when I tried to go back to stock firmware.

U-Boot 2012.07 [local,local] (Sep 03 2015 - 17:33:28)
U-boot 2012.07 dni1 V0.4 for DNI HW ID: 29764958 NOR flash 0MB; NAND flash 128MB; RAM 512MB; 1st Radio 4x4; 2nd Radio 4x4; Cascade
smem ram ptable found: ver: 0 len: 5
DRAM: 491 MiB
NAND: SF: Unsupported manufacturer 00
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
128 MiB
MMC:
*** Warning - bad CRC, using default environment
PCI0 Link Intialized
PCI1 Link Intialized
In: serial
Out: serial
Err: serial
131072 bytes read: OK
MMC Device 0 not found
cdp: get part failed for 0:HLOS
Net: MAC1 addr:b0:7f:b9:xx:xx:xx
athrs17_reg_init: complete
athrs17_vlan_config …done
S17c init done
MAC2 addr:b0:7f:b9:xx:xx:xx
eth0, eth1
Hit any key to stop autoboot: 0
Client starts…[Listening] for ADVERTISE…TTT
Retry count exceeded; boot the image as usual
nmrp server is stopped or failed !
Loading from device 0: nand0 (offset 0x1480000)
** check kernel image **
Verifying Checksum … OK
** check rootfs image **
Verifying Checksum … OK
MMC Device 0 not found
Loading from nand0, offset 0x1480000
Image Name: Linux-3.4.103
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 2176056 Bytes = 2.1 MiB
Load Address: 41508000
Entry Point: 41508000
Automatic boot of image at addr 0x44000000 …
Image Name: Linux-3.4.103
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 2176056 Bytes = 2.1 MiB
Load Address: 41508000
Entry Point: 41508000
Verifying Checksum … OK
Loading Kernel Image … OK
OK
mtdparts variable not set, see ‘help mtdparts’
no partitions defined
defaults:
mtdids : nand0=msm_nand
mtdparts: none
info: “mtdparts” not set
Using machid 0x136c from environment
Starting kernel …
Booting Linux on physical CPU 0
Linux version 3.4.103 (voxel@dell) (gcc version 4.8.5 (GCC) ) #1 SMP Mon Apr 2 16:46:32 UTC 2018
CPU: ARMv7 Processor [512f04d0] revision 0 (ARMv7), cr=10c5387d
CPU: PIPT / VIPT nonaliasing data cache, PIPT instruction cache
Machine: Qualcomm Atheros AP161 reference board
QCA command line: console=ttyHSL1,115200n8
DNI command line: console=ttyHSL1,115200n8 ubi.mtd=netgear root=/dev/mtdblock6
msm_reserve_memory: 0x44600000, 0x200000
memory pool 3 (start 5fc00000 size 400000) initialized
Memory policy: ECC disabled, Data cache writealloc
smem_find(137, 80): wrong size 72
socinfo_init: v6, id=280, ver=3.0, raw_id=17, raw_ver=17, hw_plat=0, hw_plat_ver=65536
accessory_chip=0 hw_plat_subtype=0
PERCPU: Embedded 8 pages/cpu @c0d53000 s10624 r8192 d13952 u32768
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 123178
Kernel command line: console=ttyHSL1,115200n8 ubi.mtd=netgear root=/dev/mtdblock6
PID hash table entries: 2048 (order: 1, 8192 bytes)
Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
Memory: 49MB 436MB = 485MB total
Memory: 482500k/488644k available, 14140k reserved, 0K highmem
Virtual kernel memory layout:
vector : 0xffff0000 - 0xffff1000 ( 4 kB)
fixmap : 0xfff00000 - 0xfffe0000 ( 896 kB)
vmalloc : 0xdf000000 - 0xff000000 ( 512 MB)
lowmem : 0xc0000000 - 0xdeb00000 ( 491 MB)
pkmap : 0xbfe00000 - 0xc0000000 ( 2 MB)
modules : 0xbf000000 - 0xbfe00000 ( 14 MB)
.text : 0xc0008000 - 0xc0631000 (6308 kB)
.init : 0xc0700000 - 0xc0802980 (1035 kB)
.data : 0xc0804000 - 0xc08a79a0 ( 655 kB)
.bss : 0xc08a79c4 - 0xc094f418 ( 671 kB)
SLUB: Genslabs=11, HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
Hierarchical RCU implementation.
NR_IRQS:1689
sched_clock: 32 bits at 32kHz, resolution 31240ns, wraps every 134175798ms
Console: colour dummy device 80x30
Calibrating delay using timer specific routine… 12.55 BogoMIPS (lpj=62787)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
Setting up static identity map for 0x4195f308 - 0x4195f390
CPU1: Booted secondary processor
CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
Brought up 2 CPUs
SMP: Total of 2 processors activated (25.11 BogoMIPS).
dummy:
NET: Registered protocol family 16
AXI: msm_bus_fabric_init_driver(): msm_bus_fabric_init_driver
meminfo_init: smem ram ptable found: ver: 0 len: 5
Found 1 memory banks grouped into 8 memory regions
gpiochip_add: registered GPIOs 0 to 151 on device: msmgpio
smem_find(137, 80): wrong size 72
socinfo_init: v6, id=280, ver=3.0, raw_id=17, raw_ver=17, hw_plat=0, hw_plat_ver=65536
accessory_chip=0 hw_plat_subtype=0
msm_rpm_init: RPM firmware 3.0.16777364
clk_tbl_nss_fast - loaded
msm_dmov_memcpy_init: Success
sps:BAM 0x12244000 enabled: ver:0x5, number of pipes:20
sps:BAM 0x12244000 is registered.
SCSI subsystem initialized
spi_qsd spi_qsd.5: master is unqueued, this is deprecated
spi_qsd spi_qsd.6: master is unqueued, this is deprecated
Switching to clocksource gp_timer
NET: Registered protocol family 2
create ipmac proc
IP route cache hash table entries: 4096 (order: 2, 16384 bytes)
TCP established hash table entries: 16384 (order: 5, 131072 bytes)
TCP bind hash table entries: 16384 (order: 5, 131072 bytes)
TCP: Hash tables configured (established 16384 bind 16384)
TCP: reno registered
UDP hash table entries: 256 (order: 1, 8192 bytes)
UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
NET: Registered protocol family 1
smd: register irq failed on wcnss_a11
smd: deregistering IRQs
SMD: smd_core_platform_init() failed
Partition (from dni partition table) qcadata – Offset:0 Size:64
Partition (from dni partition table) APPSBL – Offset:64 Size:28
Partition (from dni partition table) APPSBLENV – Offset:8c Size:4
Partition (from dni partition table) ART – Offset:90 Size:a
Partition (from dni partition table) ART.bak – Offset:9a Size:a
Partition (from dni partition table) kernel – Offset:a4 Size:11
Partition (from dni partition table) rootfs – Offset:b5 Size:ef
Partition (from dni partition table) netgear – Offset:1a4 Size:224
Partition (from dni partition table) firmware – Offset:a4 Size:100
Partition (from dni partition table) crashdump – Offset:3c8 Size:4
Partition (from dni partition table) language – Offset:3cc Size:1c
Partition (from dni partition table) config – Offset:3e8 Size:9
Partition (from dni partition table) pot – Offset:3f1 Size:9
smem_find(427, 88): wrong size 96
get_bootconfig_partition 0 0 : v2 magic not found
acpuclk-ipq806x acpuclk-ipq806x: SPEED BIN: 0
acpuclk-ipq806x acpuclk-ipq806x: ACPU PVS: 4
acpuclk-ipq806x acpuclk-ipq806x: CPU0: 6 frequencies supported
acpuclk-ipq806x acpuclk-ipq806x: CPU1: 6 frequencies supported
msm_rpm_log_probe: OK
squashfs: version 4.0 (2009/01/31) Phillip Lougher
msgmni has been set to 942
Asymmetric key parser ‘x509’ registered
io scheduler noop registered
io scheduler deadline registered (default)
Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
console [ttyHSL1] enabled
msm_serial_hsl: driver initialized
ata1: SATA max UDMA/133 mmio [mem 0x29000000-0x2900017f] port 0x100 irq 241
msm_nand_probe: phys addr 0x1ac00000
msm_nand_probe: dmac 0x3
msm_nand_probe: allocated dma buffer at ffdfc000, dma_addr 5f5a2000
status: 20
nandid: 1580a12c maker 2c device a1
ONFI probe : Found an ONFI compliant device MT29F1G08ABBEAH4 ,
Found a supported NAND device
NAND Controller ID : 0x4030
NAND Device ID : 0x1580a12c
Buswidth : 8 Bits
Density : 128 MByte
Pagesize : 2048 Bytes
Erasesize: 131072 Bytes
Oobsize : 64 Bytes
CFG0 Init : 0xa8d408c0
CFG1 Init : 0x0004745c
ECCBUFCFG : 0x00000203
Creating 13 MTD partitions on “msm_nand”:
0x000000000000-0x000000c80000 : “qcadata”
0x000000c80000-0x000001180000 : “APPSBL”
0x000001180000-0x000001200000 : “APPSBLENV”
0x000001200000-0x000001340000 : “ART”
0x000001340000-0x000001480000 : “ART.bak”
0x000001480000-0x0000016a0000 : “kernel”
0x0000016a0000-0x000003480000 : “rootfs”
mtd: find squashfs magic at 0x16a0000 of “msm_nand”
the correct location of partition “rootfs”: 0x0000016a0000-0x000003480000
0x000003480000-0x000007900000 : “netgear”
0x000001480000-0x000003480000 : “firmware”
0x000007900000-0x000007980000 : “crashdump”
0x000007980000-0x000007d00000 : “language”
ata1: SATA link down (SStatus 0 SControl 300)
0x000007d00000-0x000007e20000 : “config”
0x000007e20000-0x000007f40000 : “pot”
m25p80 spi5.0: found pm25lv512, expected s25fl512s
m25p80 spi5.0: pm25lv512 (64 Kbytes)
8021q: 802.1Q VLAN Support v1.8Freeing init memory: 1032K
UBIFS: reserved for root: 2704822 bytes (2641 KiB)
UBIFS error (pid 1296): ubifs_read_node: bad node type (255 but expected 0)
UBIFS error (pid 1296): ubifs_read_node: bad node at LEB 11:6144, LEB mapping status 0
UBIFS error (pid 1296): ubifs_iget: failed to read inode 66, error -22
UBIFS error (pid 1296): ubifs_lookup: dead directory entry ‘etc’, error -22
UBIFS warning (pid 1296): ubifs_ro_mode: switched to read-only mode, error -22
UBIFS error (pid 1297): ubifs_read_node: bad node type (255 but expected 0)
UBIFS error (pid 1297): ubifs_read_node: bad node at LEB 11:6144, LEB mapping status 0
UBIFS error (pid 1297): ubifs_iget: failed to read inode 66, error -22
UBIFS error (pid 1297): ubifs_lookup: dead directory entry ‘etc’, error -22
UBIFS error (pid 1298): ubifs_read_node: bad node type (255 but expected 0)
UBIFS error (pid 1298): ubifs_read_node: bad node at LEB 11:6144, LEB mapping st

Any help will be very appreciated.
Thank you,
Cristian.

 

[gogubeb]

This is the solution for repairing router.
Code:

ubifs is corrupt and you need to clean this area:

0x000003480000-0x000007900000

Stop with ctrl-c at uboot prompt and enter this command:

nand erase 0x3480000 0x4480000

then run command:

fw_recovery


tftp netgear fw again e.g.:

tftp 192.168.1.1
binary
put netgear...chk

Solution was given by Kong, so thank you.

 

[RogerSC]

Did you try this firmware image when you went back to Voxel (go back to stock first):

http://www.desipro.de/ddwrt/K3-AC-IPQ806X/NetgearFW/ddwrt-to-netgear-fw-R7800.bin

This image works for me to get from dd-wrt to stock firmware on the R7800. I don't go directly back to Voxel, flash this image to Netgear factory stock firmware first then flash Voxel from there. Easy way to do it *smile*.

 

[gogubeb]

Did you try this firmware image when you went back to Voxel (go back to stock first):

http://www.desipro.de/ddwrt/K3-AC-IPQ806X/NetgearFW/ddwrt-to-netgear-fw-R7800.bin

This image works for me to get from dd-wrt to stock firmware on the R7800. I don't go directly back to Voxel, flash this image to Netgear factory stock firmware first then flash Voxel from there. Easy way to do it *smile*.

Here you can find more details: https://www.dd-wrt.com/forum/viewtopic.php?t=314994

 

[RogerSC]

Hmmm...I see. Odd, the image that I mentioned and that you used has worked for me several times. I've also gone from LEDE back to stock or Voxel using tftp. I guess I've been lucky so far, then. Sorry that this was such a pain for you, though.