23.05 sysupgrade questions (wndr4300V2)

I tried 23.05-rc2 today on my WNDR4300v2, flashed it both via the NetGear Web UI and via nmrpflash.exe.
Both times the result was the same, router ended up with a blinking green light, responding to ping but no web/ssh access.

Edit: opened https://github.com/openwrt/openwrt/issues/13050

Try to connect to UART serial and see the if you can log

Also try to disable firewall on windows if you are using windows to login

I cannot connect a serial console, at this time I do not want to disassemble the router. But the symptoms are the same as KOA's who already provided some logs.

I remember seeing warnings (from above logs) also on my device with a working firmware (21.x) but it did not prevent the device from booting:

[    2.309952] ubi0 warning: 0x8046a910: error -5 while erasing PEB 991, retry
[    2.317238] ubi0 warning: 0x8046a910: error -5 while erasing PEB 991, retry
[    2.324496] ubi0 warning: 0x8046a910: error -5 while erasing PEB 991, retry

It was even the same PEB number (991).

Question is: why did it stop working with 23.05, why does the stock firmware work? Could this even be a (software) problem with acessing the NAND - why would the same NAND block be defective in multiple devices?

In this case the matter might be left for guessing and trial & error.

What I can guess from KOA's log, is that u-boot did not read the image in rootfs and kernel is not known to U-Boot; this guessing is based on below log excerpt:

Loading from device 0: ath-spi-nand (offset 0x0)

** check kernel image **
   Verifying Checksum ... OK

** check rootfs image **

** Bad Magic Number 0x0 **
Trying eth0

that it why U-Boot keeps trying to bring the image from TFTP at eth0 which has address 192.168.1.1 (probably that is the one you have successful bing from),

in your case, you said you can ping, that could be still the case that your router did not actually boot correctly and your router is still in U-Boot mode trying to communicate with TFTP server.

to confirm this hypothesis; you can establish WireShare monitoring session and see whether the packets from the router are mainly TFTP packets or not; if they are TFTP packets then you should see that your router keeps a repetitive patter of sending TFTP requests for long time than usual.

If above hypothesis proves correct; then it means that your router actually does not have 23.05-rc.

let us know if that happens to you.

To test this, I flashed 23.05-rc2 again (ending up again in a non-functional state) and monitored traffic with Wireshark. The router does not generate any TFTP traffic (I saw barely any traffic even when running for a while, except ARP and ICMP). It might well be stuck in U-Boot but no TFTP in my case.

https://github.com/openwrt/openwrt/files/11973720/openwrt-ath79-nand-netgear_wndr4300-v2-squashfs-factory.zip

this seems to have fixed this issue, at least @mb555444 router is working with it.

I will try it in the morning.

1 Like

it is working for me too, although there are some kernel conflicts.

Update: this issue has been fixed, see https://github.com/openwrt/openwrt/issues/13050 for details.
The fix should be in the latest nightly build and in the next 23.05 RC build (rc4).

Updated to 23.05 anyone?
Working without issue?
I need to update mine.

Yes, works without issues.

Here is the bootlog:

BusyBox v1.36.1 (2023-10-09 21:45:35 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 23.05.0, r23497-6637af95aa
 -----------------------------------------------------
root@netgear:~#
root@netgear:~#
root@netgear:~# dmesg
[    0.000000] Linux version 5.15.134 (builder@buildhost) (mips-openwrt-linux-musl-gcc (OpenWrt GCC 12.3.0 r23497-6637af95aa) 12.3.0, GNU ld (GNU Binutils) 2.40.0) #0 Mon Oct 9 21:45:35 2023
[    0.000000] printk: bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019750 (MIPS 74Kc)
[    0.000000] MIPS: machine is Netgear WNDR4300 v2
[    0.000000] SoC: Qualcomm Atheros QCA956X ver 1 rev 0
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[    0.000000] pcpu-alloc: [0] 0
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32480
[    0.000000] Kernel command line: console=ttyS0,115200n8 rootfstype=squashfs,jffs2
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes, linear)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes, linear)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 120232K/131072K available (6641K kernel code, 584K rwdata, 836K rodata, 1212K init, 222K bss, 10840K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS: 51
[    0.000000] CPU clock: 775.000 MHz
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4932285024 ns
[    0.000001] sched_clock: 32 bits at 387MHz, resolution 2ns, wraps every 5541893118ns
[    0.008288] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.074816] pid_max: default: 32768 minimum: 301
[    0.080522] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.088259] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.102850] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.113271] futex hash table entries: 256 (order: -1, 3072 bytes, linear)
[    0.120643] pinctrl core: initialized pinctrl subsystem
[    0.127874] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.134604] thermal_sys: Registered thermal governor 'step_wise'
[    0.148511] clocksource: Switched to clocksource MIPS
[    0.161548] NET: Registered PF_INET protocol family
[    0.166927] IP idents hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.175480] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.184356] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.192555] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.200658] TCP bind hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.208098] TCP: Hash tables configured (established 1024 bind 1024)
[    0.214949] UDP hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.221913] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.229646] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.235662] PCI: CLS 0 bytes, default 32
[    0.243152] workingset: timestamp_bits=14 max_order=15 bucket_order=1
[    0.254817] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.261039] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.272704] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[    0.284212] pinctrl-single 1804002c.pinmux: 544 pins, size 68
[    0.291569] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.300794] printk: console [ttyS0] disabled
[    0.305363] 18020000.uart: ttyS0 at MMIO 0x18020000 (irq = 9, base_baud = 1562500) is a 16550A
[    0.314516] printk: console [ttyS0] enabled
[    0.323584] printk: bootconsole [early0] disabled
[    0.351646] spi-nand spi0.1: GigaDevice SPI NAND was found.
[    0.357427] spi-nand spi0.1: 128 MiB, block size: 128 KiB, page size: 2048, OOB size: 64
[    0.368393] 3 fixed-partitions partitions found on MTD device (null)
[    0.375025] Creating 3 MTD partitions on "(null)":
[    0.380009] 0x000000000000-0x000000400000 : "kernel"
[    0.390588] 0x000000400000-0x000006000000 : "ubiconcat0"
[    0.496842] 0x000006020000-0x000007f80000 : "ubiconcat1"
[    0.543122] spi-nor spi0.0: s25fl016k (2048 Kbytes)
[    0.548240] 8 fixed-partitions partitions found on MTD device spi0.0
[    0.554876] OF: Bad cell count for /ahb/spi@1f000000/flash@0/partitions
[    0.561768] OF: Bad cell count for /ahb/spi@1f000000/flash@0/partitions
[    0.569236] Creating 8 MTD partitions on "spi0.0":
[    0.574210] 0x000000000000-0x000000040000 : "u-boot"
[    0.582377] 0x000000040000-0x000000050000 : "u-boot-env"
[    0.588929] 0x000000050000-0x000000060000 : "caldata_backup"
[    0.597275] 0x000000060000-0x000000070000 : "config"
[    0.603517] 0x000000070000-0x000000080000 : "traffic_meter"
[    0.611783] 0x000000080000-0x000000090000 : "pot"
[    0.617637] 0x000000090000-0x0000001f0000 : "reserved"
[    0.625403] 0x0000001f0000-0x000000200000 : "caldata"
[    0.635465] Concatenating MTD devices:
[    0.639398] (0): "ubiconcat0"
[    0.642465] (1): "ubiconcat1"
[    0.645529] into device "ubi-concat"
[    0.649271] 1 fixed-partitions partitions found on MTD device ubi-concat
[    0.656195] Creating 1 MTD partitions on "ubi-concat":
[    0.661520] 0x000000000000-0x000007b60000 : "ubi"
[    1.362596] switch0: Atheros AR8337 rev. 2 switch registered on mdio.0
[    2.020157] ag71xx 19000000.eth: connected to PHY at mdio.0:00 [uid=004dd036, driver=Atheros AR8216/AR8236/AR8316]
[    2.031529] eth0: Atheros AG71xx at 0xb9000000, irq 4, mode: sgmii
[    2.041305] NET: Registered PF_INET6 protocol family
[    2.057841] Segment Routing with IPv6
[    2.061773] In-situ OAM (IOAM) with IPv6
[    2.065948] NET: Registered PF_PACKET protocol family
[    2.071282] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    2.084974] 8021q: 802.1Q VLAN Support v1.8
[    2.093720] PCI host bridge to bus 0000:00
[    2.097971] pci_bus 0000:00: root bus resource [mem 0x12000000-0x13ffffff]
[    2.105128] pci_bus 0000:00: root bus resource [io  0x0000]
[    2.110900] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    2.119136] pci 0000:00:00.0: [168c:abcd] type 00 class 0x020000
[    2.125378] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x0001ffff 64bit]
[    2.132455] pci 0000:00:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref]
[    2.139464] pci 0000:00:00.0: supports D1
[    2.143607] pci 0000:00:00.0: PME# supported from D0 D1 D3hot
[    2.151015] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 00
[    2.157880] pci 0000:00:00.0: BAR 0: assigned [mem 0x12000000-0x1201ffff 64bit]
[    2.165502] pci 0000:00:00.0: BAR 6: assigned [mem 0x12020000-0x1202ffff pref]
[    2.179719] UBI: auto-attach mtd11
[    2.183277] ubi0: attaching mtd11
[    4.998947] ubi0: scanning is finished
[    5.037571] ubi0: attached mtd11 (name "ubi", size 123 MiB)
[    5.043395] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    5.050521] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    5.057533] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    5.064731] ubi0: good PEBs: 987, bad PEBs: 0, corrupted PEBs: 0
[    5.070946] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[    5.078401] ubi0: max/mean erase counter: 2/0, WL threshold: 4096, image sequence number: 1696887935
[    5.087849] ubi0: available PEBs: 0, total reserved PEBs: 987, PEBs reserved for bad PEB handling: 20
[    5.102370] ubi0: background thread "ubi_bgt0d" started, PID 239
[    5.111594] block ubiblock0_0: created from ubi0:0(rootfs)
[    5.117281] ubiblock: device ubiblock0_0 (rootfs) set to be root filesystem
[    5.144335] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    5.158194] Freeing unused kernel image (initmem) memory: 1212K
[    5.164356] This architecture does not have kernel memory protection.
[    5.171023] Run /sbin/init as init process
[    5.175250]   with arguments:
[    5.175254]     /sbin/init
[    5.175258]   with environment:
[    5.175262]     HOME=/
[    5.175266]     TERM=linux
[    5.874521] init: Console is alive
[    5.878496] init: - watchdog -
[    7.111659] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    7.186843] usbcore: registered new interface driver usbfs
[    7.192625] usbcore: registered new interface driver hub
[    7.198217] usbcore: registered new device driver usb
[    7.212352] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    7.227457] fsl-ehci: Freescale EHCI Host controller driver
[    7.234810] ehci-platform: EHCI generic platform driver
[    7.240624] ehci-platform 1b000000.usb: EHCI Host Controller
[    7.246522] ehci-platform 1b000000.usb: new USB bus registered, assigned bus number 1
[    7.254762] ehci-platform 1b000000.usb: irq 13, io mem 0x1b000000
[    7.288532] ehci-platform 1b000000.usb: USB 2.0 started, EHCI 1.00
[    7.295759] hub 1-0:1.0: USB hub found
[    7.300408] hub 1-0:1.0: 1 port detected
[    7.308094] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    7.326693] init: - preinit -
[    8.737469] random: jshn: uninitialized urandom read (4 bytes read)
[    8.879948] random: jshn: uninitialized urandom read (4 bytes read)
[    9.072999] random: jshn: uninitialized urandom read (4 bytes read)
[   10.519800] Atheros AR8216/AR8236/AR8316 mdio.0:00: Port 2 is up
[   10.526191] Atheros AR8216/AR8236/AR8316 mdio.0:00: Port 3 is up
[   10.532750] Atheros AR8216/AR8236/AR8316 mdio.0:00: Port 5 is up
[   10.578304] eth0: link up (1000Mbps/Full duplex)
[   10.624187] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   10.636410] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.1: link becomes ready
[   10.679740] random: procd: uninitialized urandom read (4 bytes read)
[   12.852091] UBIFS (ubi0:1): Mounting in unauthenticated mode
[   12.858230] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 391
[   13.044190] UBIFS (ubi0:1): recovery needed
[   13.516895] UBIFS (ubi0:1): recovery completed
[   13.521640] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data"
[   13.529755] UBIFS (ubi0:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[   13.540001] UBIFS (ubi0:1): FS size: 117071872 bytes (111 MiB, 922 LEBs), max 933 LEBs, journal size 5840896 bytes (5 MiB, 46 LEBs)
[   13.552231] UBIFS (ubi0:1): reserved for root: 4952683 bytes (4836 KiB)
[   13.559068] UBIFS (ubi0:1): media format: w5/r0 (latest is w5/r0), UUID F7D4D621-CE60-4F4E-AB17-FCC9F6E7A577, small LPT model
[   13.592563] mount_root: switching to ubifs overlay
[   13.653254] urandom-seed: Seeding with /etc/urandom.seed
[   13.766391] eth0: link down
[   13.787925] procd: - early -
[   13.792426] procd: - watchdog -
[   14.583341] procd: - watchdog -
[   14.594435] procd: - ubus -
[   14.698763] random: ubusd: uninitialized urandom read (4 bytes read)
[   14.707962] random: ubusd: uninitialized urandom read (4 bytes read)
[   14.715068] random: ubusd: uninitialized urandom read (4 bytes read)
[   14.729098] procd: - init -
[   15.807795] random: jshn: uninitialized urandom read (4 bytes read)
[   15.876557] random: ubusd: uninitialized urandom read (4 bytes read)
[   15.908098] random: ubus: uninitialized urandom read (4 bytes read)
[   16.011574] kmodloader: loading kernel modules from /etc/modules.d/*
[   16.608832] Loading modules backported from Linux version v6.1.24-0-g0102425ac76b
[   16.616580] Backport generated by backports.git v5.15.92-1-44-gd6ea70fafd36
[   17.350958] PPP generic driver version 2.4.2
[   17.369472] NET: Registered PF_PPPOX protocol family
[   17.465143] ath: EEPROM regdomain: 0x0
[   17.465166] ath: EEPROM indicates default country code should be used
[   17.465172] ath: doing EEPROM country->regdmn map search
[   17.465186] ath: country maps to regdmn code: 0x3a
[   17.465193] ath: Country alpha2 being used: US
[   17.465199] ath: Regpair used: 0x3a
[   17.476404] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
[   17.478326] ieee80211 phy0: Atheros AR9561 Rev:0 mem=0xb8100000, irq=2
[   17.485582] ath9k 0000:00:00.0: enabling device (0000 -> 0002)
[   17.554740] ath: EEPROM regdomain: 0x0
[   17.554764] ath: EEPROM indicates default country code should be used
[   17.554769] ath: doing EEPROM country->regdmn map search
[   17.554782] ath: country maps to regdmn code: 0x3a
[   17.554789] ath: Country alpha2 being used: US
[   17.554795] ath: Regpair used: 0x3a
[   17.565948] ieee80211 phy1: Selected rate control algorithm 'minstrel_ht'
[   17.568049] ieee80211 phy1: Atheros AR9300 Rev:4 mem=0xb2000000, irq=16
[   17.574980] random: crng init done
[   17.574986] random: 26 urandom warning(s) missed due to ratelimiting
[   17.671858] kmodloader: done loading kernel modules from /etc/modules.d/*
[   18.262636] urngd: v1.0.2 started.