Bricked TPLink Archer C7v5 now stuck with kernel panic

root@(none):/# mount -o rw /dev/mtd3
mount: can't find /dev/mtd3 in /etc/fstab
root@(none):/# vi /etc/fstab


fstab is empty:

# <file system> <mount point> <type> <options> <dump> <pass>
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
- /etc/fstab [Readonly] 1/1 100%

What I recognized during my tests is, that allthough the uboot output is garbage, I can send commands, and it accepts it.
So my thought was to send a command like "tftpboot 0x80000000 art.bin" but i don't know which address I need to use...

Yeah,

that was kind of expected :frowning:
U-boot sometimes have the possibility to write to the flash from command line, but that might be
risky with the output issue you're having.

this could be useful too https://openwrt.org/toh/tp-link/tl-wr1043nd#making_bootloader_partition_writable

Basically, my thought was to copy/paste the commands mentioned here:

My only problem is, that I have no idea, what address I need to use in this command:

 Now, let's download image to memory:

ar7100> tftpboot 0x80000000 art.backup
Trying eth0
Using eth0 device
TFTP from server 192.168.1.1; our IP address is 192.168.1.2
Filename 'art.backup'.
Load address: 0x8000000
Loading: #################################################################
done
Bytes transferred = 65536 (10000 hex) 

In above output the size of file you downloaded: 10000 hex

When above is done you need to erase what ever is left on your art partition (Note partition starting address from your partition layout as above) be sure to set correct amount/size from above, just prefix it with +0x:

erase 0xbf7f0000 +0x10000

Now, let's copy from memory to flash (basically: cp.b <from where in memory> <to where on flash> <how much - use same size as above but without +):

cp.b 0x8000000 0xbf7f0000 0x10000

The flashlayout is well known, but how to translate it for tftpboot:
image

I tried to install the kmod-mtd-rw package, but I get an error, no space left:


root@(none):/# opkg install /tmp/kmod-mtd-rw_4.14.180\+git-20160214-1_mips_24kc.
ipk
Installing kmod-mtd-rw (4.14.180+git-20160214-1) to root...
Collected errors:
 * verify_pkg_installable: Only have 0kb available on filesystem /overlay, pkg kmod-mtd-rw needs 2
 * opkg_install_cmd: Cannot install package kmod-mtd-rw.
root@(none):/#

Ok, I've managed to use /tmp as install path, but the kernel version doens't match:

root@(none):/# opkg install /tmp/kmod* --add-dest "tmp":/tmp
Installing kmod-mtd-rw (4.14.180+git-20160214-1) to tmp...
Collected errors:
 * satisfy_dependencies_for: Cannot satisfy the following dependencies for kmod-mtd-rw:
 *      kernel (= 4.14.180-1-b84a5a29b1d5ae1dc33ccf9ba292ca1d)
 * opkg_install_cmd: Cannot install package kmod-mtd-rw.

There a couple more options I can think of, depending on what you're able to access.

  • check if there's an ath* in /etc/modules.d , remove it, to bypass the loading of the ath* module during boot.

  • try uninstalling the ath* packages, if you succeed, we might be able to get it to make a full boot.

  • check if you have fw_printenv as in https://openwrt.org/docs/techref/bootloader/uboot.config
    we could try to disable the module in kernel boot params.

I removed all ath* packages with opkg remove. there were two of it. however, this one is still present:

root@(none):/# opkg remove ath10k-firmware-qca988x-ct
Removing package ath10k-firmware-qca988x-ct from root...
root@(none):/#

fw_printenv gives me the following:

root@(none):/# fw_printenv
Cannot parse config file '/etc/fw_env.config': No such file or directory
root@(none):/#

At reboot still kernel panic:

                                                                    ▒▒  ▒▒.3▒▒96▒▒ co▒sol▒ [t▒▒S0▒▒di▒▒bl▒▒
▒[    0.360894] console [ttyS0] enabledM▒▒O ▒▒18▒▒000▒ (i▒q =▒▒, ▒▒se▒▒au▒▒= ▒▒62▒▒0)▒▒s ▒▒165▒0A
[    0.360894] console [ttyS0] enabled
[    0.368459] bootconsole [early0] disabled
[    0.368459] bootconsole [early0] disabled
[    0.393448] m25p80 spi0.0: w25q128 (16384 Kbytes)
[    0.398366] 8 fixed-partitions partitions found on MTD device spi0.0
[    0.404950] Creating 8 MTD partitions on "spi0.0":
[    0.409902] 0x000000000000-0x000000020000 : "factory-uboot"
[    0.416346] 0x000000020000-0x000000040000 : "u-boot"
[    0.422094] 0x000000040000-0x000000050000 : "partition-table"
[    0.428731] 0x000000050000-0x000000060000 : "art"
[    0.434287] 0x000000060000-0x000000080000 : "info"
[    0.439872] 0x000000080000-0x0000000c0000 : "user-config"
[    0.446143] 0x0000000c0000-0x000000fc0000 : "firmware"
[    0.455988] 2 uimage-fw partitions found on MTD device firmware
[    0.462103] Creating 2 MTD partitions on "firmware":
[    0.467275] 0x000000000000-0x000000190000 : "kernel"
[    0.473030] 0x000000190000-0x000000f00000 : "rootfs"
[    0.478788] mtd: device 8 (rootfs) set to be root filesystem
[    0.484715] 1 squashfs-split partitions found on MTD device rootfs
[    0.491106] 0x000000450000-0x000000f00000 : "rootfs_data"
[    0.497314] 0x000000ff0000-0x000001000000 : "default-config"
[    0.504828] libphy: Fixed MDIO Bus: probed
[    0.511235] ag71xx 19000000.eth: invalid MAC address, using random address
[    1.193464] libphy: ag71xx_mdio: probed
[    1.200409] switch0: Atheros AR8337 rev. 2 switch registered on mdio-bus.0
[    1.854575] ag71xx 19000000.eth: connected to PHY at mdio-bus.0:00 [uid=004dd036, driver=Atheros AR8216/AR8236/AR8316]
[    1.866163] eth0: Atheros AG71xx at 0xb9000000, irq 4, mode: sgmii
[    1.875254] NET: Registered protocol family 10
[    1.885018] Segment Routing with IPv6
[    1.888889] NET: Registered protocol family 17
[    1.893562] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    1.906953] 8021q: 802.1Q VLAN Support v1.8
[    1.913252] hctosys: unable to open rtc device (rtc0)
[    1.923945] VFS: Mounted root (squashfs filesystem) readonly on device 31:8.
[    1.937818] Freeing unused kernel memory: 1212K
[    1.942499] This architecture does not have kernel memory protection.
[    2.556599] init: Console is alive
[    2.560320] init: - watchdog -
[    2.563524] random: fast init done
[    3.603524] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    3.832131] usbcore: registered new interface driver usbfs
[    3.837918] usbcore: registered new interface driver hub
[    3.843505] usbcore: registered new device driver usb
[    3.854107] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    3.862308] ehci-platform: EHCI generic platform driver
[    3.867973] ehci-platform 1b000000.usb: EHCI Host Controller
[    3.873890] ehci-platform 1b000000.usb: new USB bus registered, assigned bus number 1
[    3.882057] ehci-platform 1b000000.usb: irq 13, io mem 0x1b000000
[    3.913153] ehci-platform 1b000000.usb: USB 2.0 started, EHCI 1.00
[    3.920239] hub 1-0:1.0: USB hub found
[    3.924450] hub 1-0:1.0: 1 port detected
[    3.929573] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    3.947473] init: - preinit -
[    4.897498] random: jshn: uninitialized urandom read (4 bytes read)
[    5.079935] random: jshn: uninitialized urandom read (4 bytes read)
[    5.330118] random: jshn: uninitialized urandom read (4 bytes read)
[    6.737828] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[    6.743977] IPv6: ADDRCONF(NETDEV_UP): eth0.1: link is not ready
[    6.787949] urandom_read: 4 callbacks suppressed
[    6.787956] random: procd: uninitialized urandom read (4 bytes read)
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    7.794434] eth0: link up (1000Mbps/Full duplex)
[    7.799293] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[    7.806094] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.1: link becomes ready
[    9.928848] mount_root: jffs2 not ready yet, using temporary tmpfs overlay
[    9.958492] urandom-seed: Seed file not found (/etc/urandom.seed)
[   10.049215] eth0: link down
[   10.068599] procd: - early -
[   10.071669] procd: - watchdog -
[   10.743222] procd: - watchdog -
[   10.746742] procd: - ubus -
[   10.805484] random: ubusd: uninitialized urandom read (4 bytes read)
[   10.926050] random: ubusd: uninitialized urandom read (4 bytes read)
[   10.933894] procd: - init -
Please press Enter to activate this console.
[   11.732786] kmodloader: loading kernel modules from /etc/modules.d/*
[   11.758478] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   11.781617] Loading modules backported from Linux version v4.19.161-0-gdaefdc9eb24b
[   11.789578] Backport generated by backports.git v4.19.161-1-0-g4bb568fe
[   11.825095] ip_tables: (C) 2000-2006 Netfilter Core Team
[   11.837910] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[   11.945975] xt_time: kernel timezone is -0000
[   11.980435] urngd: v1.0.2 started.
[   12.047530] PPP generic driver version 2.4.2
[   12.063883] NET: Registered protocol family 24
[   12.115897] ath10k 4.19 driver, optimized for CT firmware, probing pci device: 0x3c.
[   12.144024] PCI: Enabling device 0000:00:00.0 (0000 -> 0002)
[   12.150029] ath10k_pci 0000:00:00.0: pci irq legacy oper_irq_mode 1 irq_mode 0 reset_mode 0
[   12.200562] random: crng init done
[   12.463269] ath10k_pci 0000:00:00.0: Direct firmware load for ath10k/fwcfg-pci-0000:00:00.0.txt failed with error -2
[   12.474173] ath10k_pci 0000:00:00.0: Falling back to user helper
[   12.751288] firmware ath10k!fwcfg-pci-0000:00:00.0.txt: firmware_loading_store: map pages failed
[   12.760665] ath10k_pci 0000:00:00.0: Direct firmware load for ath10k/pre-cal-pci-0000:00:00.0.bin failed with error -2
[   12.771750] ath10k_pci 0000:00:00.0: Falling back to user helper
[   13.138298] firmware ath10k!pre-cal-pci-0000:00:00.0.bin: firmware_loading_store: map pages failed
[   13.147845] ath10k_pci 0000:00:00.0: Direct firmware load for ath10k/cal-pci-0000:00:00.0.bin failed with error -2
[   13.158571] ath10k_pci 0000:00:00.0: Falling back to user helper
[   13.636113] ath10k_pci 0000:00:00.0: Direct firmware load for ath10k/QCA988X/hw2.0/ct-firmware-5.bin failed with error -2
[   13.647481] ath10k_pci 0000:00:00.0: Falling back to user helper
[   13.783500] firmware ath10k!QCA988X!hw2.0!ct-firmware-5.bin: firmware_loading_store: map pages failed
[   13.793315] ath10k_pci 0000:00:00.0: Direct firmware load for ath10k/QCA988X/hw2.0/ct-firmware-2.bin failed with error -2
[   13.804673] ath10k_pci 0000:00:00.0: Falling back to user helper
[   13.982538] firmware ath10k!QCA988X!hw2.0!ct-firmware-2.bin: firmware_loading_store: map pages failed
[   13.992363] ath10k_pci 0000:00:00.0: Direct firmware load for ath10k/QCA988X/hw2.0/firmware-6.bin failed with error -2
[   14.003456] ath10k_pci 0000:00:00.0: Falling back to user helper
[   14.187050] firmware ath10k!QCA988X!hw2.0!firmware-6.bin: firmware_loading_store: map pages failed
[   14.196608] ath10k_pci 0000:00:00.0: Direct firmware load for ath10k/QCA988X/hw2.0/firmware-5.bin failed with error -2
[   14.207697] ath10k_pci 0000:00:00.0: Falling back to user helper
[   14.382554] firmware ath10k!QCA988X!hw2.0!firmware-5.bin: firmware_loading_store: map pages failed
[   14.392102] ath10k_pci 0000:00:00.0: Direct firmware load for ath10k/QCA988X/hw2.0/firmware-4.bin failed with error -2
[   14.403187] ath10k_pci 0000:00:00.0: Falling back to user helper
[   14.578987] firmware ath10k!QCA988X!hw2.0!firmware-4.bin: firmware_loading_store: map pages failed
[   14.593427] ath10k_pci 0000:00:00.0: Direct firmware load for ath10k/QCA988X/hw2.0/firmware-3.bin failed with error -2
[   14.604508] ath10k_pci 0000:00:00.0: Falling back to user helper
[   14.780042] firmware ath10k!QCA988X!hw2.0!firmware-3.bin: firmware_loading_store: map pages failed
[   14.983530] ath10k_pci 0000:00:00.0: qca988x hw2.0 target 0x4100016c chip_id 0x043202ff sub 0000:0000
[   14.993060] ath10k_pci 0000:00:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   15.005504] ath10k_pci 0000:00:00.0: firmware ver 10.1-ct-8x-__fW-022-538f0906 api 2 features wmi-10.x,has-wmi-mgmt-tx,mfp,txstatus-noack,wmi-10.x-CT,ratemask-CT,txrate-CT,get-temp-CT,tx-rc-CT,cust-stats-CT,retry-gt2-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT crc32 e1c91a74
[   15.058372] ath10k_pci 0000:00:00.0: Direct firmware load for ath10k/QCA988X/hw2.0/board-2.bin failed with error -2
[   15.069183] ath10k_pci 0000:00:00.0: Falling back to user helper
[   15.165012] firmware ath10k!QCA988X!hw2.0!board-2.bin: firmware_loading_store: map pages failed
[   15.174468] ath10k_pci 0000:00:00.0: board_file api 1 bmi_id N/A crc32 bebc7c08
[   16.124397] ath10k_pci 0000:00:00.0: 10.1 wmi init: vdevs: 16  peers: 127  tid: 256
[   16.133184] ath10k_pci 0000:00:00.0: firmware crashed! (guid 5cbbee9a-7d71-4a7c-899c-67f9346e908c)
[   16.142460] ath10k_pci 0000:00:00.0: qca988x hw2.0 target 0x4100016c chip_id 0x043202ff sub 0000:0000
[   16.151996] ath10k_pci 0000:00:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   16.164422] ath10k_pci 0000:00:00.0: firmware ver 10.1-ct-8x-__fW-022-538f0906 api 2 features wmi-10.x,has-wmi-mgmt-tx,mfp,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,get-temp-CT,tx-rc-CT,cust-stats-CT,retry-gt2-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT crc32 e1c91a74
[   16.195775] ath10k_pci 0000:00:00.0: board_file api 1 bmi_id N/A crc32 bebc7c08
[   16.203333] ath10k_pci 0000:00:00.0: htt-ver 0.0 wmi-op 2 htt-op 2 cal file max-sta 128 raw 0 hwcrypto 1
[   16.215162] ath10k_pci 0000:00:00.0: firmware register dump:
[   16.221010] ath10k_pci 0000:00:00.0: [00]: 0x4100016C 0x000015B3 0x009B2AA5 0x00955B31
[   16.229194] ath10k_pci 0000:00:00.0: [04]: 0x009B2AA5 0x00060130 0x0000001D 0x214B68B0
[   16.237380] ath10k_pci 0000:00:00.0: [08]: 0xFFFFFFFF 0x00401F6A 0x0000096C 0xFFFFFFFF
[   16.245569] ath10k_pci 0000:00:00.0: [12]: 0x00000009 0x00000000 0x009B2F41 0x009B2F99
[   16.253750] ath10k_pci 0000:00:00.0: [16]: 0x00958080 0x0094085D 0x00000000 0x00000000
[   16.261928] ath10k_pci 0000:00:00.0: [20]: 0x409B2AA5 0x0040AA14 0x0040AAC4 0x00000001
[   16.270112] ath10k_pci 0000:00:00.0: [24]: 0x809B366A 0x0040AA74 0xC574C34B 0xC09B2AA5
[   16.278300] ath10k_pci 0000:00:00.0: [28]: 0x809B3B1E 0x0040AAA4 0x00401CC0 0x000000E2
[   16.286490] ath10k_pci 0000:00:00.0: [32]: 0x80984957 0x0040ABB4 0x0040E12C 0x0000003F
[   16.294680] ath10k_pci 0000:00:00.0: [36]: 0x8098F363 0x0040ABF4 0x0040E18C 0x004062DC
[   16.302857] ath10k_pci 0000:00:00.0: [40]: 0x80989459 0x0040AC54 0x0040ACB4 0x0040ACC4
[   16.311040] ath10k_pci 0000:00:00.0: [44]: 0x80988829 0x0040ACA4 0x0040F898 0x00400000
[   16.319227] ath10k_pci 0000:00:00.0: [48]: 0x8098996B 0x0040AD44 0x0040F898 0x00000001
[   16.327409] ath10k_pci 0000:00:00.0: [52]: 0x809AE88C 0x0040AD84 0x0040F898 0x004104DC
[   16.335604] ath10k_pci 0000:00:00.0: [56]: 0x809AB61E 0x0040ADA4 0x00400000 0x004150F4
[   16.343789] ath10k_pci 0000:00:00.0: Copy Engine register dump:
[   16.349912] ath10k_pci 0000:00:00.0: [00]: 0x00057400   7   7   3   3
[   16.356582] ath10k_pci 0000:00:00.0: [01]: 0x00057800   3   3   7   8
[   16.363246] ath10k_pci 0000:00:00.0: [02]: 0x00057c00   1   1   0   1
[   16.369901] ath10k_pci 0000:00:00.0: [03]: 0x00058000   1   1   4   1
[   16.376570] ath10k_pci 0000:00:00.0: [04]: 0x00058400   0   0  40   0
[   16.383236] ath10k_pci 0000:00:00.0: [05]: 0x00058800   0   0   0   0
[   16.389890] ath10k_pci 0000:00:00.0: [06]: 0x00058c00   0   0   0   0
[   16.396561] ath10k_pci 0000:00:00.0: [07]: 0x00059000   0   0   0   0
[   16.405234] ath10k_pci 0000:00:00.0: debug log header, dbuf: 0x412708  dropped: 0
[   16.413980] ath10k_pci 0000:00:00.0: [0] next: 0x412720 buf: 0x41056c sz: 1500 len: 56 count: 2 free: 0
[   16.424693] ath10k_pci 0000:00:00.0: ath10k_pci ATH10K_DBG_BUFFER:
[   16.431076] ath10k: [0000]: 6F570000 0500FC17 70201031 08000000 80000000 98F84000 01005EC0 70570000
[   16.440423] ath10k: [0008]: 0100FC17 B3150000 B3150000 04A94000 6C010041 6241DCE6
[   16.448156] ath10k_pci 0000:00:00.0: ATH10K_END
[   16.453859] ath10k_pci 0000:00:00.0: [1] next: 0x412708 buf: 0x410b5c sz: 1500 len: 0 count: 0 free: 0
[   21.153130] ath10k_pci 0000:00:00.0: wmi unified ready event not received
[   21.286385] ath10k_pci 0000:00:00.0: could not init core (-145)
[   21.292652] ath10k_pci 0000:00:00.0: could not probe fw (-145)
[   21.298750] ath10k_pci 0000:00:00.0: cannot restart a device that hasn't been started
[   21.349193] Data bus error, epc == 8022f888, ra == 87221d48
[   21.354951] Oops[#1]:
[   21.357301] CPU: 0 PID: 623 Comm: kmodloader Not tainted 4.14.221 #0
[   21.363856] task: 87d5e760 task.stack: 8745a000
[   21.368529] $ 0   : 00000000 00000061 deadc0de 87261b44
[   21.373932] $ 4   : b81143fc 000143fc 8745ba84 00000004
[   21.379335] $ 8   : 00000001 7c7c3c7c 7c7c7c7c 7c7c7c7c
[   21.384738] $12   : 7c7c3c7c 00000000 fffffffe 7c7c7c3c
[   21.390140] $16   : 00000018 8743a080 00000000 8745ba84
[   21.395544] $20   : 80000003 00000004 000003ff 00014000
[   21.400947] $24   : 00000000 ffff0000
[   21.406350] $28   : 8745a000 8745ba10 00010000 87221d48
[   21.411753] Hi    : 0000005c
[   21.414718] Lo    : 4e910000
[   21.417689] epc   : 8022f888 0x8022f888
[   21.421653] ra    : 87221d48 0x87221d48 [ath9k_hw@87200000+0x53dc0]
[   21.428114] Status: 1100dc03 KERNEL EXL IE
[   21.432434] Cause : 0080001c (ExcCode 07)
[   21.436574] PrId  : 00019750 (MIPS 74Kc)
[   21.440621] Modules linked in: ath9k(+) ath9k_common pppoe ppp_async ath9k_hw ath10k_pci ath10k_core ath pppox ppp_generic nf_conntrack_ipv6 mac80211 iptable_nat ipt_REJECT ipt_MASQUERADE cfg80211 xt_time xt_tcpudp xt_state xt_nat xt_multiport xt_mark xt_mac xt_limit xt_conntrack xt_comment xt_TCPMSS xt_REDIRECT xt_LOG xt_FLOWOFFLOAD xt_CT slhc nf_reject_ipv4 nf_nat_redirect nf_nat_masquerade_ipv4 nf_conntrack_ipv4 nf_nat_ipv4 nf_nat nf_log_ipv4 nf_flow_table_hw nf_flow_table nf_defrag_ipv6 nf_defrag_ipv4 nf_conntrack_rtcache nf_conntrack iptable_mangle iptable_filter ip_tables crc_ccitt compat ledtrig_usbport nf_log_ipv6 nf_log_common ip6table_mangle ip6table_filter ip6_tables ip6t_REJECT x_tables nf_reject_ipv6 ehci_platform ehci_hcd gpio_button_hotplug usbcore nls_base usb_common
[   21.512307] Process kmodloader (pid: 623, threadinfo=8745a000, task=87d5e760, tls=77f2fefc)
[   21.520921] Stack : fffffffe 00000114 00000126 8743a080 00002710 00007044 00000220 8744d800
[   21.529558]         000003ff 8743a080 00000100 8743a0a8 00000001 87220000 00000000 87222acc
[   21.538196]         81000f5c 8743a080 00007000 00007000 00000600 8743a4bc 8743a0a8 87250000
[   21.546833]         8743a080 8755d500 810055ec 804e0000 000186a0 ffffffff 8743a080 8724f520
[   21.555470]         99999999 00008000 00000100 8743a0a8 00000001 87250000 00000000 87214ab0
[   21.564099]         ...
[   21.566625] Call Trace:
[   21.566669] [<87220000>] 0x87220000 [ath9k_hw@87200000+0x53dc0]
[   21.575295] [<87222acc>] 0x87222acc [ath9k_hw@87200000+0x53dc0]
[   21.581431] [<87214ab0>] 0x87214ab0 [ath9k_hw@87200000+0x53dc0]
[   21.587544] [<8009959c>] 0x8009959c
[   21.591153] [<87206af0>] 0x87206af0 [ath9k_hw@87200000+0x53dc0]
[   21.597263] [<800b8a54>] 0x800b8a54
[   21.600886] [<8009959c>] 0x8009959c
[   21.604491] [<87262760>] 0x87262760 [ath9k@87260000+0x18290]
[   21.610326] [<800b7030>] 0x800b7030
[   21.613953] [<8726f4e8>] 0x8726f4e8 [ath9k@87260000+0x18290]
[   21.619798] [<801a4be0>] 0x801a4be0
[   21.623428] [<802933c0>] 0x802933c0
[   21.627040] [<80291a30>] 0x80291a30
[   21.630638] [<8010ef08>] 0x8010ef08
[   21.634244] [<80293718>] 0x80293718
[   21.637854] [<80291c4c>] 0x80291c4c
[   21.641458] [<80291ba8>] 0x80291ba8
[   21.645055] [<8028fc54>] 0x8028fc54
[   21.648661] [<804382bc>] 0x804382bc
[   21.652277] [<80290f8c>] 0x80290f8c
[   21.655886] [<8727f000>] 0x8727f000 [ath9k@87260000+0x18290]
[   21.661721] [<802924d0>] 0x802924d0
[   21.665323] [<80437a34>] 0x80437a34
[   21.668933] [<8727f018>] 0x8727f018 [ath9k@87260000+0x18290]
[   21.674776] [<801a4e84>] 0x801a4e84
[   21.678382] [<80060960>] 0x80060960
[   21.682017] [<800d7c68>] 0x800d7c68
[   21.685622] [<8012ac18>] 0x8012ac18
[   21.689226] [<800d74e4>] 0x800d74e4
[   21.692829] [<800d5584>] 0x800d5584
[   21.696429] [<800797cc>] 0x800797cc
[   21.700026] [<800d794c>] 0x800d794c
[   21.703636] [<8006f7ec>] 0x8006f7ec
[   21.707244]
[   21.708776] Code: 00000000  8c820000  0000000f <03e00008> 00000000  0808be20  00000000  aca40000  03e00008
[   21.718847]
[   21.720432] ---[ end trace 0d811a5f06f58310 ]---
[   21.726757] Kernel panic - not syncing: Fatal exception
[   21.732972] Rebooting in 1 seconds..

in /etc/modules.d there are two files, but I cannot delete it (read only error)

How are you booting now, TFTP every time, or from the routers flash ?

try doing a mount -o remount,rw /

Another option is to create a custom openwrt image, without the wireless drivers, and try to boot that.

I'm booting in failsafe mode via console.

That doesn't work either:


root@(none):/# mount -o remount,rw /
root@(none):/# rm /etc/modules.d/ath*
rm: remove '/etc/modules.d/ath10k-ct'? yes
rm: can't remove '/etc/modules.d/ath10k-ct': Read-only file system
rm: remove '/etc/modules.d/ath9k'? yes
rm: can't remove '/etc/modules.d/ath9k': Read-only file system

Try to load an initramfs-kernel.bin file in memory. Thus you’ll have a live OpenWrt system with wired Internet access and you could use opkg to download the kmod-mtd-rw package. I don’t know the procedure in failsafe mode, but if you have access to u-boot, try the following:

  1. Download the file https://downloads.openwrt.org/releases/19.07.7/targets/ath79/generic/openwrt-19.07.7-ath79-generic-tplink_archer-c7-v5-initramfs-kernel.bin
  2. Rename it to something easier
  3. Get access to u-boot
ath> setenv serverip tftpserverip
ath> tftpboot 0x81000000 filename.bin
ath> bootm

I hope that 0x81000000 is the right default memory address from where bootm will start to load the image. If you change it, you could get LZMA ERROR 1

BTW, the art partition is a good start, but you will need the others too. The MAC address of A7 is located in the info partition, so probably it is the same with the C7. I am not a developer, but partition-table looks pretty important to me.

I tried as suggested, copy/pasted the 3 lines, after that, it was booting one time, ending with kernel panic. now it is completely silent. Event tftprecovery does nothing. After power off/on no output on serial port:

                                                                                         Ҡ▒▒▒▒3▒g▒:▒▒▒0▒▒e▒
▒                                                                                                          ▒▒
 j▒*▒▒k▒▒E▒̲▒▒t
              ¸Sa▒
▒*▒[▒▒▒▒Kua▒▒▒▒5▒▒▒-▒▒▒▒%▒▒ژ▒▒▒t.▒▒.i▒
▒ʍA▒
    ▒▒▒▒▒]▒X,▒
▒▒▒f▒,▒K▒ ▒▒▒ ▒Ť▒▒A▒▒▒񠫹A▒F▒▒A▒A▒a▒▒�▒▒C!*K▒▒+▒k▒▒݀▒
▒▒▒R                                              ▒a]▒K▒▒▒'▒1▒▒▒A▒▒▒<▒J▒▒U▒y▒!ѡ>▒▒JUIRU▒▒
▒▒▒<▒▒UI▒UE▒j
▒ᴮ▒n▒▒▒h▒▒d]A▒▒▒ե▒▒▒j▒U▒:k▒▒▒Υݮj▒▒iKA▒˫ѯ.▒ղn▒▒a▒a▒▒▒
!Ů2ũ▒▒m▒▒+񠌒▒▒▒Ɋ▒J▒A▒▒▒a▒Z▒5▒X▒▒tf▒▒ۋ0▒▒0▒▒▒▒▒▒I˹▒C▒n▒▒▒*▒▒C▒U▒ZkA▒
                                                                  ▒▒YWk▒▒▒▒▒▒f▒▒▒s▒.▒▒▒N&)▒®r1ڂ▒.
                                                                                                 ▒ XV▒▒▒J▒A▒N&)▒®
I�▒T▒K▒▒▒Y▒▒.▒I▒nҩ▒▒
                    р▒▒▒▒ ▒a▒▒▒0▒j
▒▒<▒▒U▒▒E▒j                       ▒Ťki▒%▒▒▒▒▒T▒T▒▒▒▒ݲW▒a▒▒▒<R▒UI▒▒E▒j▒X▒▒▒JUIRU▒▒
▒▒T▒▒▒e▒▒▒▒▒f7▒▒7▒▒ð0▒0▒▒▒.▒i▒
       j
        U.˝ Y
             ▒▒▒L▒H▒2▒▒횕▒▒Y.▒▒▒)▒▒     ▒▒ڠ▒▒A▒
                                               Ѥn▒͠▒.▒▒▒)▒▒)▒6▒C!T▒ծ▒kA▒X.▒)▒▒▒▒
                                                                               ▒+▒ ▒V▒▒s'¸▒▒▒0▒*▒▒+ѩ▒▒ ▒▒▒T▒T▒T▒T▒T▒▒a▒U▒▒▒&▒▒▒▒ݯ˱▒L▒�▒▒▒▒:j▒C!▒5i ▒Ҙj     ▒▒
                                  A▒▒▒▒▒▒Ţ▒▒f▒▒U▒▒KA▒▒¸▒▒▒�!*֕r˝ ګ▒▒逕   ݯ
                                                                         ▒·▒0▒j
                                                                               ▒֕r▒:k▒▒▒⫲▒r▒▒▒l▒,▒▒▒▒�▒°j▒j▒▒▒7˝▒▒▒B▒▒▒+▒▒+▒d▒2k▒aW▒▒▒▒▒H▒▒.▒▒ikA▒崙.▒▒r:ѯL▒A▒XWA▒▒¶▒▒▒0▒!*֕r˝ L&Z▒f▒.▒▒▒▒▒▒▒k!▒
                                                                   ▒i▒▒▒Y▒V▒▒*W▒k▒▒▒n▒▒aW▒▒▒▒▒j
                                                                                               ▒▒r▒˫٧J▒A▒▒
                                                                                                          ▒▒▒   ▒
                                                                                                                 Ѻ·�▒▒▒▒+▒h▒▒▒▒J▒A▒▒▒      ▒▒ڬVJa▒▒▒0▒"▒▒lV▒▒ ▒E▒C!
▒FYסikA▒▒(▒▒▒▒n填▒E▒▒▒▒n填▒N▒▒▒▒▒u▒▒▒U▒▒▒tZ▒▒zY▒r ▒▒,▒+A▒▒▒▒▒▒!+͡▒▒▒ ▒(ȵ▒▒▒YV▒l▒▒vZ▒˫▒▒▒
          ▒d▒▒▒ ݭ▒▒ᖍ5▒a▒▒5▒▒▒▒▒▒U▒▒7+▒▒/▒▒Y▒▒▒s▒▒,Ғ▒▒C▒a▒K}է▒i▒Һ▒▒Ս▒n▒▒▒A▒▒▒꾚▒7▒▒eA▒C▒
                                                                                       ▒▒%է▒▒Ŵݭ▒▒5▒▒▒▒▒▒Z
                                                                                                         2▒ɣY▒d▒!▒▒uա▒5ݭ▒뵕t]A▒T▒▒▒▒▒Ս▒▒▒g▒▒▒▒0▒�▒▒▒▒ ▒]1LSH▒e▒
                                    ▒ ▒▒�▒▒▒&'�▒▒▒e▒
▒                                                   ▒▒
 j
  *▒▒▒▒▒E▒▒▒2▒½▒▒▒4▒▒0▒CỪ▒U▒r+u!n[▒i5▒̋ٴ▒▒驂▒&▒:▒Y▒▒▒K▒▒▒'ʀ▒▒a▒
                                                              ▒C▒5▒ڽV▒▒N▒b▒▒▒c▒▒▒
▒C▒f▒,▒K▒ ▒▒K▒▒+▒ ▒.▒▒▒o▒▒n▒ڱ▒▒▒▒A▒▒▒▒0▒°▒▒C!*KA▒+▒k▒^▒▒.▒                       J▒▒▒▒ﭩ
                                                          ▒a▒▒+ݯ▒▒▒▒▒▒A▒▒▒▒R
▒▒˂3t6▒▒x▒0�▒▒&)▒Yr▒▒▒C▒▒˂▒e▒▒▒▒+▒٥nZʹ▒9▒�L▒▒                               UI▒▒E▒j▒X▒▒<R▒UI▒▒E▒j▒X▒▒<R▒UI▒▒E▒j▒X▒▒▒JUIR▒E▒
▒!▒k▒▒       ▒t▒b▒▒
      ▒۹Ѡr▒▒▒oK]▒
                 ▒鹺▒Y
▒▒T▒▒▒ݠ▒▒▒ 0▒8�▒▒▒ѳ▒▒▒]▒aѡ▒▒
       j
        d▒▒▒▒▒▒0▒j
                  U.˝ Y
                       ▒d▒7kՍ!▒▒▒2ɽ횕▒▒Y.▒▒▒)▒8 ▒▒▒▒▒rJ▒▒▒▒΁i▒▒▒▒)▒▒)▒6▒C!T▒ծ▒kA▒X.▒)▒▒'▒
                                                                                         ▒+▒A▒Vճ▒¸▒▒▒▒0▒C!▒+ѩ▒▒ ▒▒#####▒###▒▒T▒▒▒ݠ.▒▒▒k▒▒▒nA▒▒▒5▒▒1▒▒▒ ▒Y▒
       j
        ▒▒▒݀
           dYWk▒5▒▒Q▒▒V▒▒▒.▒▒▒.ʙ&       Ҙ)r▒'z▒▒ R
                                                  ▒▒▒ٮJ▒▒▒▒rʮj
▒▒▒5▒(ѕs▒Ʌn▒VV▒▒▒▒ ▒▒Bʰ▒▒B▒▒C▒a▒˂▒C▒N▒٧▒▒▒▒U▒kA▒              ▒k١▒▒▒.▒I▒n▒▒▒L▒▒▒d.▒▒:▒▒a0▒°▒▒!▒▒▒Zki▒%▒#▒#▒##▒#▒##▒
▒▒▒▒f▒▒sY.▒▒A▒N&)▒®                             ▒▒YWk▒
I▒▒▒▒▒▒d▒▒▒ ▒.▒▒)▒�
i�!▒▒nX▒'X.▒I▒▒ҩ
C▒▒.▒▒a+٥▒▒Ѡ▒굦±▒▒▒▒xJHa▒cp▒,▒▒a▒▒▒▒x▒f▒0▒▒�▒0▒#▒▒˕
   ▒▒
     2▒ų▒ɲ▒▒▒ѥ
              ▒Ѳ'ʲ▒0▒▒▒C▒▒▒5
▒!▒▒ﮂ▒▒▒a▒▒▒s▒°A8▒▒▒f▒▒ r▒ѠZX▒▒bo▒郐▒N6▒0▒▒▒C▒Յݥg▒b▒▒▒ ▒j ▒▒▒ ▒١KQ▒IY▒▒▒٠▒▒ݴLK]▒A▒a▒▒▒▒C▒▒▒▒2J▒▒U▒y
                            ▒▒ų+j
                                 ▒▒▒d▒▒▒ ▒K▒a▒!ѡ>▒▒͋▒x▒▒▒▒0▒+▒ː▒▒▒C▒▒▒ݲ'*▒
▒A▒▒▒▒▒0▒▒▒▒e▒▒▒▒�▒▒0▒▒▒C▒▒▒ٯ▒                                           ▒ѲٮA▒▒▒8▒2▒▒▒Jr▒▒J▒A▒+▒▒C!H▒A▒ճ2▒▒▒5▒X▒▒
C▒▒▒▒▒0▒°▒▒▒B                 ▒▒m[8▒▒'▒▒0▒°:▒K▒▒▒:▒▒l▒
▒▒<▒▒5▒▒▒y▒a▒▒▒<Ɋ▒▒U▒y▒!ѡ▒▒<Ɋ▒▒U▒y▒!ѡ▒▒▒R
▒▒▒R                                     UI▒▒E▒j▒X▒▒▒JUIRU▒▒
!▒<▒▒U▒▒E▒j
▒▒T▒▒▒ݠYѠ▒▒10▒0�▒[XV▒▒a▒▒▒▒JU▒RU▒y
        j
         ▒n˝▒Y
              ▒▒vZ▒▒ȴ2▒▒ɶY.▒▒▒)▒▒)r▒▒'▒▒▒JAA▒ɕ▒.▒͠LҎ,▒▒▒▒*▒T˕▒a[:i[ݥI▒٧▒▒L▒▒▒d▒▒▒:▒▒▒1▒▒▒▒▒!▒dZ▒i %▒##▒▒#▒#▒#▒##▒#▒###▒##▒#▒###▒#▒▒#▒##▒#▒#▒###▒#▒#▒▒#▒##▒#▒▒#▒##▒#▒▒▒▒#▒#▒##▒#▒#▒##▒#▒##▒#▒▒▒#▒##▒#▒##▒#▒##▒#▒▒▒#▒#▒###▒#▒##▒##▒##▒##▒▒▒#▒#▒##▒#▒##▒#▒▒▒#▒#▒##▒#▒▒#▒▒▒#▒##▒#▒####▒##▒######▒##▒#▒#▒▒###▒#▒#▒▒#▒#▒##▒#▒#▒▒▒#▒▒#▒###▒▒▒##▒#▒#▒▒#▒▒#▒##▒#▒##▒#▒##▒#▒##▒##▒#▒#####▒##▒▒▒▒#▒###▒###▒####▒##▒##▒#▒###▒##▒#▒#▒#▒##▒#▒#####▒####▒##▒▒##▒#▒#▒▒#▒▒###▒#▒▒#▒▒#▒▒#▒#▒######▒▒#▒#▒##▒#▒▒#▒#▒#▒##▒##▒▒#▒##▒▒####▒##▒####▒##▒▒▒#▒#▒▒#▒▒#▒##▒#▒##▒####▒##▒#▒#▒#▒##▒#▒##▒#▒##▒▒▒▒#▒####▒#▒##▒#▒###▒▒▒▒#▒▒###▒##▒#▒#▒#▒▒#▒##▒#▒##▒▒##▒#▒▒▒▒▒Ս▒▒▒▒.▒▒▒k▒▒▒.▒▒⒦S▒i###▒##▒▒#▒#▒##▒#▒##▒#▒##▒###▒#▒##▒#▒##▒#▒
                       Ք▒▒▒▒e▒▒a▒˂bootm▒C▒▒▒▒▒ѩ▒i▒▒VA▒�▒▒0▒▒▒▒▒
                                                               ▒▒[▒▒▒*▒▒▒▒▒25z▒ծU▒A▒Zk▒▒)▒▒▒▒j▒▒C▒▒▒▒▒'▒ ▒▒0▒L  ▒▒L▒M'▒Қ▒▒Q▒▒!▒▒۝ՠ5▒պ▒M▒5b▒ٵ▒Y.▒▒A▒۝ՠ▒▒▒▒▒nV▒▒6▒
!▒▒▒                               ▒DXW▒SZ▒V▒ ▒▒▒2▒▒▒ ▒^W͠O▒▒▒*▒
    ▒A▒▒▒▒ ▒▒▒▒▒0▒!▒ ŋ▒▒▒▒'▒▒▒▒▒0j
                                  ▒▒▒Y▒▒▒Ů▒▒+▒▒A▒a▒▒▒0▒▒.▒O▒#!▒▒+▒▒p.▒▒ikA▒▒▒▒ R+▒er▒▒▒O▒!▒i▒▒V▒#▒▒▒Ů▒▒ɲZkA▒▒Kɯ
                                                                                                               ▒▒*▒▒▒Ba▒▒d.▒▒ ▒¶▒▒J▒.▒▒▒#▒:▒▒▒k▒▒:K▒mYk▒zY▒▒ ,▒    ʳ▒▒▒j
                                             ▒▒ŲW▒ݠM▒
                                                     r▒C▒H▒   ▒0.0▒000▒▒ L▒▒ux▒▒er▒▒on▒▒.1▒▒22▒▒(b▒▒lde▒@bu▒ldh▒▒t)▒▒gc▒▒ve▒▒  ▒▒0.▒▒000▒] C▒U0 ▒▒vi▒▒on▒▒s:▒▒00▒▒75▒▒(M▒▒S ▒▒Kc)▒on▒▒eb▒▒5 1▒:22▒37 ▒▒21▒▒[  ▒ 0.▒▒00▒▒] ▒▒ot▒▒ns▒▒e ▒▒ar▒▒0]▒▒nab▒ed
▒▒▒  ▒▒.0▒▒00▒▒ D▒▒er▒▒ned▒phy▒ica▒▒RA▒▒ma▒▒X ▒▒r ▒▒re▒▒0  ▒▒.0▒▒00▒▒ M▒▒S: ▒ach▒ne ▒▒ T▒▒Li▒▒ A▒▒he▒▒C7▒▒5
[▒   ▒▒00▒▒00▒▒ m▒▒or▒▒ 0▒▒00▒▒0 ▒▒000▒000▒ (u▒▒bl▒▒
▒[ ▒▒ 0▒▒00▒▒0]▒▒ri▒▒ry▒▒nst▒uct▒on ▒▒ch▒▒64▒▒, ▒▒PT▒▒4-▒▒y,▒▒in▒▒iz▒▒32 ▒yte▒.
▒▒   ▒0.0▒000▒]  ▒▒od▒▒  ▒▒ [▒▒m ▒▒00▒▒00▒▒00▒▒000▒-0x▒000▒▒00▒▒ff▒▒ff▒▒si▒▒ 3▒▒by▒▒s
                                                                        [ ▒▒ 0▒▒00▒▒0]▒▒ni▒▒em▒▒et▒▒ no▒e 0▒[me▒ 0x▒▒00▒▒00▒[▒   ▒▒00▒▒00▒▒ra▒▒om▒▒ge▒▒ra▒▒om▒▒yte▒ ca▒led▒▒ro▒▒0x▒▒50▒▒40▒▒it▒▒cr▒▒_i▒▒t=0▒
                                                                                 [▒▒  ▒▒00▒▒00▒▒Bu▒▒t ▒▒zo▒▒li▒▒s, ▒obi▒ity▒▒ro▒▒in▒▒on▒▒ T▒▒al▒▒ag▒▒: ▒▒51▒▒
                                  [ ▒▒ 0▒▒00▒▒0] ▒ern▒l c▒▒ma▒▒ l▒▒e:▒▒on▒▒le▒▒ty▒▒,1▒▒200▒8 r▒otf▒typ▒▒sq▒▒sh▒▒,j▒▒s2▒▒▒  ▒▒0.0▒000▒] P▒▒ h▒▒h ▒▒bl▒▒en▒▒ie▒▒ 5▒▒ (▒▒de▒▒ -1▒ 20▒8 b▒▒es▒▒
                                                                ▒▒  ▒▒.0▒▒00▒▒ D▒▒tr▒▒ca▒▒e ▒▒sh ▒abl▒ en▒▒ie▒▒ 1▒▒84▒▒or▒▒▒▒▒  ▒▒.0▒▒00▒▒ I▒▒de-▒ach▒ ha▒▒ t▒▒le▒▒nt▒▒es▒▒81▒▒ (▒▒de▒▒ 3,▒327▒8 b▒▒es▒▒
                                                                             ▒▒  ▒▒.0▒▒00▒▒ W▒▒ti▒▒ Er▒Ctl▒reg▒ste▒▒00▒▒00▒▒
▒[ ▒▒ 0▒▒00▒▒0]▒▒emo▒y: ▒163▒▒K/▒▒10▒▒K ▒▒ai▒▒bl▒▒(4▒▒7K▒▒er▒▒l c▒de,▒163▒▒rw▒▒ta▒▒53▒▒ r▒▒at▒▒ 8▒▒8K▒▒nit▒ 21▒K b▒▒, ▒▒75▒▒ r▒▒er▒▒d,▒▒K ▒▒a-▒▒ser▒ed)▒
▒[▒▒  ▒▒00▒▒00▒▒NR▒▒RQ▒▒ 51▒ [▒▒  ▒▒00▒▒00▒▒SL▒▒: ▒▒al▒▒n=▒▒, O▒der▒0-3▒ Mi▒▒bj▒▒ts▒▒, ▒▒Us▒▒, ▒▒de▒▒1
▒[ ▒▒ 0▒▒00▒▒0]▒▒loc▒sou▒ce:▒▒IP▒▒ m▒▒k:▒▒xf▒▒ff▒▒f ▒▒x_▒▒cl▒▒: 0▒fff▒fff▒▒ m▒▒_i▒▒e_▒▒: ▒▒32▒▒50▒▒ n▒▒
                                                                                                       ▒▒  ▒▒.0▒▒00▒▒ s▒▒ed_▒loc▒: 3▒▒bi▒▒ a▒▒38▒▒Hz▒▒re▒▒lu▒▒on▒▒ns,▒wra▒s e▒▒ry▒▒54▒▒93▒▒8n▒▒
                                                                    ▒   ▒0.0▒823▒▒ C▒▒ib▒▒ti▒▒ d▒▒ay▒▒oo▒▒..▒▒85.▒4 B▒goM▒▒S ▒▒pj▒▒92▒▒16▒▒
▒▒   ▒0.0▒▒80▒▒ M▒▒nt▒▒ac▒▒ h▒▒h ▒▒bl▒▒ent▒ies▒ 10▒4 (▒▒de▒▒ 0▒▒40▒▒ b▒▒es▒▒
                                                                            ▒▒  ▒▒.0▒▒78▒▒ M▒▒nt▒▒in▒▒cac▒e h▒sh ▒▒bl▒▒en▒▒ie▒▒ 1▒▒4 ▒▒rd▒▒: ▒▒ 40▒6 b▒tes▒▒
                                 [ ▒▒ 0▒▒97▒▒5]▒▒lo▒▒so▒▒ce▒▒jif▒ies▒ ma▒k: ▒▒ff▒▒ff▒▒ m▒▒_c▒▒le▒▒ 0▒▒ff▒▒fff▒ ma▒_id▒▒_n▒▒▒[  ▒▒0.▒▒82▒▒] ▒▒te▒▒ha▒▒ t▒▒le▒▒ntr▒es:▒256▒(or▒▒r:▒▒1,▒▒07▒▒by▒▒s)▒▒[▒▒  ▒▒11▒▒35▒▒pi▒▒tr▒▒co▒▒: ▒▒iti▒liz▒d p▒nct▒▒ s▒▒▒[▒   ▒▒12▒▒33▒▒PC▒▒ho▒▒ b▒▒dg▒▒/a▒▒/p▒▒e-c▒ntr▒lle▒▒18▒▒00▒▒ r▒▒ge▒▒
▒▒   ▒0.1▒171▒▒  ▒▒O ▒▒00▒▒00▒▒00▒▒00▒▒..▒▒000▒000▒000▒000▒▒
▒▒   ▒0.1▒▒40▒▒ p▒▒_b▒▒ 0▒▒0:▒▒: ▒▒ot▒▒us ▒eso▒rce▒▒io▒▒0x▒▒00▒▒00-▒▒13▒▒ff▒▒]▒ho▒▒ b▒▒dge▒to ▒us ▒▒00▒▒0
                                                                [ ▒▒ 0▒▒79▒▒5]▒▒ci▒▒us▒▒00▒▒00▒▒roo▒ bu▒ re▒▒ur▒▒ [▒▒? ▒▒00▒▒00▒▒ f▒▒gs▒▒x0]▒
▒[  ▒ 0.▒▒51▒▒] ▒▒i ▒▒00▒▒0:▒▒.0▒▒BA▒▒0: ▒ssi▒ned▒▒me▒▒0x▒▒00▒▒00▒▒x1▒▒ff▒▒f ▒▒bit▒▒▒, ▒▒ll▒▒se▒▒bu▒▒00-▒f]
[ ▒▒ 0▒▒02▒▒2]▒▒ci▒▒00▒▒00▒▒0.▒▒ BA▒ 6:▒ass▒▒ne▒▒[m▒▒ 0▒▒22▒▒00▒▒0x▒▒20▒▒ff ▒ref▒
[▒▒  ▒▒213▒90]▒clo▒▒so▒▒ce▒▒Sw▒▒ch▒▒ t▒▒cl▒▒ks▒▒rce▒MIP▒
▒  ▒▒0.▒▒93▒▒] ▒▒T:▒▒egi▒ter▒d p▒▒to▒▒l ▒▒mi▒▒ 2▒▒[ ▒▒ 0▒▒24▒▒2] ▒CP ▒sta▒▒is▒▒d ▒▒sh▒▒ab▒▒ e▒▒ri▒▒: ▒▒24 ▒ord▒r: ▒, 4▒▒6 ▒▒te▒▒
▒▒▒  ▒▒.2▒▒77▒▒ T▒▒: ▒▒sh▒▒abl▒s c▒nfi▒▒re▒▒(e▒▒ab▒▒sh▒▒ 1▒▒4 ▒▒nd▒▒02▒▒
▒[ ▒▒ 0▒▒51▒▒3]▒▒DP▒▒it▒▒ha▒▒ ta▒le ▒ntr▒▒s:▒▒56▒▒or▒▒r:▒▒, ▒▒96▒▒yt▒▒)
[▒   ▒▒25▒▒32▒▒NE▒▒ R▒▒is▒▒re▒▒pr▒▒oco▒ fa▒ily▒▒
[▒▒  ▒▒40▒▒13▒▒Cr▒▒hl▒▒ a▒▒oc▒▒ed ▒AM ▒t a▒▒re▒▒ 0▒▒f0▒▒00▒▒▒▒  ▒▒.40▒534▒ wo▒▒in▒▒et▒▒ti▒▒st▒▒p_▒▒ts▒▒0 ▒▒x_o▒der▒15 ▒uck▒▒_o▒▒er▒▒
[  ▒ 0.▒▒85▒▒] ▒▒ua▒▒fs▒▒ve▒▒io▒▒4.▒▒(2▒▒9/0▒/31▒ Ph▒▒li▒▒Lo▒▒he▒▒
                                                                  [▒▒  ▒▒42▒▒95▒▒jf▒▒2:▒▒ers▒on ▒.2 ▒▒AN▒▒ (▒▒MM▒▒Y)▒▒LZ▒▒) ▒▒TI▒▒) (▒MOD▒_PR▒▒RI▒▒) ▒▒) ▒▒01▒▒00▒▒Re▒▒Ha▒▒ In▒.
[ ▒▒ 0▒▒93▒▒0]▒▒o ▒▒hed▒ler▒noo▒ re▒▒st▒▒ed▒▒[  ▒▒0.▒▒81▒▒] ▒▒ s▒▒ed▒▒er▒▒ea▒▒ine▒reg▒ste▒▒d ▒▒ef▒▒lt▒▒
                                                                                                       [▒   ▒.50▒▒56▒▒ar▒▒00▒▒sb▒▒hy▒▒sb▒▒hy▒▒phy▒res▒t i▒▒mi▒▒in▒▒
▒▒  ▒▒0.▒▒49▒▒] S▒ria▒: 8▒▒0/▒▒55▒▒dr▒▒er▒▒16▒▒or▒▒, ▒▒Q s▒ari▒g e▒▒bl▒▒04▒▒2c▒▒in▒▒x:▒▒44▒▒in▒▒at▒▒a ▒▒04▒▒2c ▒ize▒68
▒   ▒0.5▒▒70▒▒ c▒▒so▒▒ [▒▒yS▒▒ d▒▒ab▒▒d
▒  ▒▒0.▒▒75▒▒] ▒▒02▒▒00▒▒ar▒▒ t▒▒S0 ▒t M▒IO ▒▒18▒▒00▒▒ (▒▒q ▒▒9,▒▒as▒▒ba▒▒ = ▒562▒00)▒▒s ▒▒16▒▒0A▒▒[    0.546637] console [ttyS0] enabled
[    0.546637] console [ttyS0] enabled
[    0.554194] bootconsole [early0] disabled
[    0.554194] bootconsole [early0] disabled
[    0.579417] m25p80 spi0.0: w25q128 (16384 Kbytes)
[    0.584374] 8 fixed-partitions partitions found on MTD device spi0.0
[    0.590931] Creating 8 MTD partitions on "spi0.0":
[    0.595906] 0x000000000000-0x000000020000 : "factory-uboot"
[    0.602328] 0x000000020000-0x000000040000 : "u-boot"
[    0.608171] 0x000000040000-0x000000050000 : "partition-table"
[    0.614796] 0x000000050000-0x000000060000 : "art"
[    0.620268] 0x000000060000-0x000000080000 : "info"
[    0.625901] 0x000000080000-0x0000000c0000 : "user-config"
[    0.632133] 0x0000000c0000-0x000000fc0000 : "firmware"
[    0.642039] 2 uimage-fw partitions found on MTD device firmware
[    0.648204] Creating 2 MTD partitions on "firmware":
[    0.653354] 0x000000000000-0x000000190000 : "kernel"
[    0.659098] 0x000000190000-0x000000f00000 : "rootfs"
[    0.664848] mtd: device 8 (rootfs) set to be root filesystem
[    0.670725] 1 squashfs-split partitions found on MTD device rootfs
[    0.677155] 0x000000450000-0x000000f00000 : "rootfs_data"
[    0.683425] 0x000000ff0000-0x000001000000 : "default-config"
[    0.690876] libphy: Fixed MDIO Bus: probed
[    0.697330] ag71xx 19000000.eth: invalid MAC address, using random address
[    1.383445] libphy: ag71xx_mdio: probed
[    1.407125] switch0: Atheros AR8337 rev. 2 switch registered on mdio-bus.0
[    2.064556] ag71xx 19000000.eth: connected to PHY at mdio-bus.0:00 [uid=004dd036, driver=Atheros AR8216/AR8236/AR8316]
[    2.076144] eth0: Atheros AG71xx at 0xb9000000, irq 4, mode: sgmii
[    2.085248] NET: Registered protocol family 10
[    2.095244] Segment Routing with IPv6
[    2.099119] NET: Registered protocol family 17
[    2.103797] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    2.117195] 8021q: 802.1Q VLAN Support v1.8
[    2.123542] hctosys: unable to open rtc device (rtc0)
[    2.173543] Freeing unused kernel memory: 8188K
[    2.178222] This architecture does not have kernel memory protection.
[    2.197679] init: Console is alive
[    2.201389] init: - watchdog -
[    2.222091] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    2.231570] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    2.249656] init: - preinit -
[    2.487147] random: jshn: uninitialized urandom read (4 bytes read)
[    2.563961] random: jshn: uninitialized urandom read (4 bytes read)
[    2.813775] random: jshn: uninitialized urandom read (4 bytes read)
[    3.899963] urandom_read: 4 callbacks suppressed
[    3.899970] random: procd: uninitialized urandom read (4 bytes read)
[    3.916882] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[    3.922974] IPv6: ADDRCONF(NETDEV_UP): eth0.1: link is not ready
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    4.994476] eth0: link up (1000Mbps/Full duplex)
[    4.999335] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[    5.010749] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.1: link becomes ready
[    6.053093] random: fast init done
[    7.072280] eth0: link down
[    7.090794] procd: - early -
[    7.094681] procd: - watchdog -
[    7.678712] procd: - watchdog -
[    7.682219] procd: - ubus -
[    7.695826] random: ubusd: uninitialized urandom read (4 bytes read)
[    7.740415] random: ubusd: uninitialized urandom read (4 bytes read)
[    7.748194] procd: - init -
Please press Enter to activate this console.
[    8.139881] kmodloader: loading kernel modules from /etc/modules.d/*
[    8.167984] ip6_tables: (C) 2000-2006 Netfilter Core Team
[    8.189184] Loading modules backported from Linux version v4.19.161-0-gdaefdc9eb24b
[    8.197151] Backport generated by backports.git v4.19.161-1-0-g4bb568fe
[    8.225008] ip_tables: (C) 2000-2006 Netfilter Core Team
[    8.249618] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[    8.344863] xt_time: kernel timezone is -0000
[    8.426647] urngd: v1.0.2 started.
[    8.445168] PPP generic driver version 2.4.2
[    8.463784] NET: Registered protocol family 24
[    8.526422] Data bus error, epc == 8022f888, ra == 86f21d48
[    8.532183] Oops[#1]:
[    8.534533] CPU: 0 PID: 603 Comm: kmodloader Not tainted 4.14.221 #0
[    8.541088] task: 873d10e0 task.stack: 86cde000
[    8.545761] $ 0   : 00000000 00000061 deadc0de 86f61b44
[    8.551164] $ 4   : b81143fc 000143fc 86cdfa84 00000004
[    8.556567] $ 8   : 00000001 7c7c3c7c 7c7c7c7c 7c7c7c7c
[    8.561970] $12   : 7c7c3c7c 00000000 fffffffe 7c7c7c3c
[    8.567372] $16   : 00000018 86d1a080 00000000 86cdfa84
[    8.572775] $20   : 80000003 00000004 000003ff 00014000
[    8.578179] $24   : 00000000 ffff0000
[    8.583581] $28   : 86cde000 86cdfa10 00010000 86f21d48
[    8.588985] Hi    : 0000005c
[    8.591950] Lo    : 4e910000
[    8.594920] epc   : 8022f888 0x8022f888
[    8.598885] ra    : 86f21d48 0x86f21d48 [ath9k_hw@86f00000+0x53dc0]
[    8.605345] Status: 1100dc03 KERNEL EXL IE
[    8.609666] Cause : 4080801c (ExcCode 07)
[    8.613805] PrId  : 00019750 (MIPS 74Kc)
[    8.617853] Modules linked in: ath9k(+) ath9k_common pppoe ppp_async ath9k_hw ath pppox ppp_generic nf_conntrack_ipv6 mac80211 iptable_nat ipt_REJECT ipt_MASQUERADE cfg80211 xt_time xt_tcpudp xt_state xt_nat xt_multiport xt_mark xt_mac xt_limit xt_conntrack xt_comment xt_TCPMSS xt_REDIRECT xt_LOG xt_FLOWOFFLOAD xt_CT slhc nf_reject_ipv4 nf_nat_redirect nf_nat_masquerade_ipv4 nf_conntrack_ipv4 nf_nat_ipv4 nf_nat nf_log_ipv4 nf_flow_table_hw nf_flow_table nf_defrag_ipv6 nf_defrag_ipv4 nf_conntrack_rtcache nf_conntrack iptable_mangle iptable_filter ip_tables crc_ccitt compat nf_log_ipv6 nf_log_common ip6table_mangle ip6table_filter ip6_tables ip6t_REJECT x_tables nf_reject_ipv6 gpio_button_hotplug
[    8.681457] Process kmodloader (pid: 603, threadinfo=86cde000, task=873d10e0, tls=77f71efc)
[    8.690071] Stack : 804f0000 802aad6c 804b0000 802f2e24 00000006 86cdfa58 00000220 86cd5000
[    8.698708]         000003ff 86d1a080 00000100 86d1a0a8 00000001 86f20000 00000000 86f22acc
[    8.707345]         86cdfa68 86d1a080 00007000 00007000 00000600 86d1a4bc 86d1a0a8 86f50000
[    8.715983]         86d1a080 86ef5500 810055ec 804e0000 000186a0 ffffffff 86d1a080 86f4f520
[    8.724620]         99999999 00008000 00000100 86d1a0a8 00000001 86f50000 00000000 86f14ab0
[    8.733258]         ...
[    8.735784] Call Trace:
[    8.735791] [<802aad6c>] 0x802aad6c
[    8.741907] [<802f2e24>] 0x802f2e24
[    8.745539] [<86f20000>] 0x86f20000 [ath9k_hw@86f00000+0x53dc0]
[    8.751649] [<86f22acc>] 0x86f22acc [ath9k_hw@86f00000+0x53dc0]
[    8.757778] [<86f14ab0>] 0x86f14ab0 [ath9k_hw@86f00000+0x53dc0]
[    8.763888] [<8009959c>] 0x8009959c
[    8.767495] [<86f06af0>] 0x86f06af0 [ath9k_hw@86f00000+0x53dc0]
[    8.773598] [<800b8a54>] 0x800b8a54
[    8.777212] [<8009959c>] 0x8009959c
[    8.780816] [<86f62760>] 0x86f62760 [ath9k@86f60000+0x18290]
[    8.786652] [<800b7030>] 0x800b7030
[    8.790260] [<86f6f4e8>] 0x86f6f4e8 [ath9k@86f60000+0x18290]
[    8.796103] [<801a4be0>] 0x801a4be0
[    8.799716] [<802933c0>] 0x802933c0
[    8.803316] [<80291a30>] 0x80291a30
[    8.806911] [<8010ef08>] 0x8010ef08
[    8.810516] [<80293718>] 0x80293718
[    8.814122] [<80291c4c>] 0x80291c4c
[    8.817721] [<80291ba8>] 0x80291ba8
[    8.821319] [<8028fc54>] 0x8028fc54
[    8.824923] [<804382bc>] 0x804382bc
[    8.828533] [<80290f8c>] 0x80290f8c
[    8.832142] [<86f7f000>] 0x86f7f000 [ath9k@86f60000+0x18290]
[    8.837985] [<802924d0>] 0x802924d0
[    8.841586] [<80437a34>] 0x80437a34
[    8.845186] [<86f7f018>] 0x86f7f018 [ath9k@86f60000+0x18290]
[    8.851022] [<801a4e84>] 0x801a4e84
[    8.854625] [<80060960>] 0x80060960
[    8.858247] [<800d7c68>] 0x800d7c68
[    8.861848] [<8012ac18>] 0x8012ac18
[    8.865453] [<800d74e4>] 0x800d74e4
[    8.869052] [<800d5584>] 0x800d5584
[    8.872656] [<8012b5a4>] 0x8012b5a4
[    8.876255] [<8012b698>] 0x8012b698
[    8.879857] [<800d794c>] 0x800d794c
[    8.883464] [<8006f7ec>] 0x8006f7ec
[    8.887064]
[    8.888597] Code: 00000000  8c820000  0000000f <03e00008> 00000000  0808be20  00000000  aca40000  03e00008
[    8.898667]
[    8.900277] ---[ end trace 66ae27a50dad3b52 ]---
[    8.906309] Kernel panic - not syncing: Fatal exception
[    8.912271] Rebooting in 1 seconds..
▒▒▒

you haven't actually written anything to the device, so that operation shouldn't have bricked it.

Ok, then I have no idea what's happening. No output anymore, soldering is checked.
I think it's completely dead now

Sorry to hear that, but I haven't advised you anything destructive...

Boot to failsafe.
Run mount_root
Run opkg remove kmod-ath10k-ct
Reboot not failsafe. Router should operate normally except no wifi.
Install and use kmod-mtd-rw to restore ART.
Run firstboot to return all to defaults. (This also restores kmod-ath10k from the ROM)

1 Like

no problem :wink:

I did that earlier, opkg didn't let me remove this package.
Now I cannot boot the router, there is not output anymore

Well, we didn't have rw permission, so that's new, I wasn't familiar with the mount_root command.

But it's obviously going to be hard to achieve, if you now have a paper weight, and not a router :confused:

The last crash you posted was a Data Bus Error, which sounds like hardware failure. It's not the same thing it was doing earlier.

I didn't think a corrupt ART would crash ath10k-ct (of course, wifi won't start up, but the kernel would keep running) but maybe it does.

Try looking over the board for a fleck of solder, tiny bit of wire strand, etc... that might have shorted something on the board, got between a couple of pins of a chip... Turn it upside down and tap it, blow it off... just in case theres a bit of something in there.

Long shot, but I've had mysterious problems end up being caused by things like that.