Can't flash r6700v2, bricked

trinilopez · August 17, 2022, 2:12pm

Hi friends - so I've gotten my hands on a Netgear r6700v2, which had the stock firmware. I used the netgear GUI to flash the openwrt firmware package openwrt-21.02.2-ramips-mt7621-netgear_r6700-v2-squashfs-factory.img, which has bricked the router. It won't respond to pings, stuck in some kind of boot loop.

So I tried using nmrpflash to reinstall the stock firmware, and while that process appeared to complete, I am seeing no change. Just an orange power light forever. I tried flashing older versions of the stock firmware, as well as openwrt using nmrpflash, to no avail. I have tried hard resets. I'm not sure what else to try.

I have another identical unit that has been running solid for years. I welcome and appreciate any suggestions!

stmtpr · August 18, 2022, 5:20pm

I don't have this device but the TOH page has serial info.

trinilopez · August 18, 2022, 6:29pm

Thanks. What hardware would I need to perform this?

stmtpr · August 18, 2022, 6:57pm

Underworld · August 18, 2022, 7:01pm

I would first try the r6800 debrick method. Wiki says it is identical as your router.https://openwrt.org/toh/netgear/r6800

trinilopez · August 18, 2022, 7:23pm

Thank you - does this look right to you?

HiLetgo CP2102 USB 2.0 to TTL Module Serial Converter Adapter Module USB to TTL Downloader With Jumper Wires https://a.co/d/2Pg7U2g

trinilopez · August 18, 2022, 7:23pm

Yes I have tried this method several times. It appears to complete, as in it gets a response if some kind from the router, but the router fails to boot afterward.

Underworld · August 18, 2022, 7:52pm

Did you try with switch if you are using a windows?
Sorry that I can not help further.

trinilopez · August 18, 2022, 8:40pm

Can you elaborate? not sure what you mean

Underworld · August 18, 2022, 8:55pm

Quate from r6800 wiki: ..."This tool can also be used to go back to stock firmware. For Windows users, ethernet cable must be connected to a switch or nmrpflash would fail to operate"
Regards

trinilopez · August 30, 2022, 8:47pm

Ok I have managed to get an output from the router via the serial coonection, attaching the output here. It does look like it's looking for a TFTP server, but I'm not able to get it to detect my TFTP server. My TFTP config worked for another router, though I'm not sure if there is a particular IP I need to set the NIC to for this model (the openwrt page doesn't specify).

I can get into the CLI via serial, (below are my options). I've tried entering TFTP mode from there, but again no love. The output is also showing a bunch of bad blocks, not sure if that means my flash memory is borked.

Any and all insight is appreciated.

Available CLI Commands

bootm   - boot application image from memory
go      - start application at address 'addr'
help    - print online help
i2ccmd.- read/write data to eeprom via I2C Interface
md      - memory display
mdio   - Ralink PHY register R/W command !!
mm      - memory modify (auto-incrementing)
nand.- nand command
nm      - memory modify (constant address)
printenv- print environment variables
reset   - Perform RESET of the CPU
saveenv - save environment variables to persistent storage
sc_cpureg.- Sercomm R/W cpu register
sc_dl.- Sercomm upgrade command
sc_endian.- Sercomm endian test command
sc_eth_test.-SC: sc eth test
sc_fl_map.- dump sercomm flash map
sc_gpio.- Sercomm gpio command
sc_led.- Sercomm led command
sc_lp.- sercomm loopback test
sc_nand - Sercomm nand command
sc_nmrp.- Sercomm nmrp
sc_phy.- Sercomm R/W PHY register
sc_ramtest.- do sercomm ram tes
sc_tftp_rec.- Sercomm nmrp
sc_timer.- Sercomm timer command
setenv  - set environment variables
tftpboot- boot image via network using TFTP protocol
version - print monitor version

SERIAL OUTPUT LOG

===================================================================
     ..MT7621   stage1 code Mar 12 2015 14:42:52 (ASIC)
     ..CPU=50000000 HZ BUS=16666666 HZ
==================================================================
Change MPLL source from XTAL to CR...
do MEMPLL setting..
MEMPLL Config : 0x11100000
3PLL mode + External loopback
=== XTAL-40Mhz === DDR-1200Mhz ===
PLL2 FB_DL: 0x10, 1/0 = 735/289 41000000
PLL3 FB_DL: 0x12, 1/0 = 652/372 49000000
PLL4 FB_DL: 0x15, 1/0 = 575/449 55000000
do DDR setting..[00320381]
Apply DDR3 Setting...(use customer AC)
          0    8   16   24   32   40   48   56   64   72   80   88   96  104  112  120
      --------------------------------------------------------------------------------
0000:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0001:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0002:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0003:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0004:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0005:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0006:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0007:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0008:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0009:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000A:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000B:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000C:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000D:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    1
000E:|    0    0    0    0    0    0    0    0    0    1    1    1    1    1    1    1
000F:|    0    0    0    0    1    1    1    1    1    1    1    1    1    1    0    0
0010:|    1    1    1    1    1    1    1    1    1    0    0    0    0    0    0    0
0011:|    1    1    1    1    0    0    0    0    0    0    0    0    0    0    0    0
0012:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0013:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0014:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0015:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0016:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0017:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0018:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0019:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001A:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001B:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001C:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001D:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001E:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001F:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
DRAMC_DQSCTL1[0e0]=13000000
DRAMC_DQSGCTL[124]=80000033
rank 0 coarse = 15
rank 0 fine = 72
B:|    0    0    0    0    0    0    0    0    1    1    1    0    0    0    0    0
opt_dle value:9
DRAMC_DDR2CTL[07c]=C287221D
DRAMC_PADCTL4[0e4]=000022B3
DRAMC_DQIDLY1[210]=090C060D
DRAMC_DQIDLY2[214]=030C040C
DRAMC_DQIDLY3[218]=0C040701
DRAMC_DQIDLY4[21c]=08040905
DRAMC_R0DELDLY[018]=00001B1D
==================================================================
..RX.DQS perbit delay software calibration 
==================================================================
1.0-15 bit dq delay value
==================================================================
bit|     0  1  2  3  4  5  6  7  8  9
--------------------------------------
0 |    13 3 12 6 11 3 12 3 0 7 
10 |    3 10 5 9 3 8 
--------------------------------------

==================================================================
2.dqs window
x=pass dqs delay value (min~max)center 
y=0-7bit DQ of every group
input delay:DQS0 =29 DQS1 = 27
==================================================================
bit.DQS0. bit      DQS1
0  (1~58)29  8  (3~50)26
1  (1~52)26  9  (1~54)27
2  (1~57)29  10  (1~52)26
3  (1~52)26  11  (1~50)25
4  (1~56)28  12  (1~53)27
5  (1~55)28  13  (1~54)27
6  (1~58)29  14  (1~52)26
7  (1~58)29  15  (1~54)27
==================================================================
3.dq delay value last
==================================================================
bit|    0  1  2  3  4  5  6  7  8   9
--------------------------------------
0 |    13 6 12 9 12 4 12 3 1 7 
10 |    4 12 5 9 4 8 
==================================================================
==================================================================
     TX  perbyte calibration 
==================================================================
DQS loop = 15, cmp_err_1 = ffff0000 
dqs_perbyte_dly.last_dqsdly_pass[0]=15,  finish count=1 
dqs_perbyte_dly.last_dqsdly_pass[1]=15,  finish count=2 
DQ loop=15, cmp_err_1 = ffff01aa
DQ loop=14, cmp_err_1 = ffff01aa
DQ loop=13, cmp_err_1 = ffff00a8
dqs_perbyte_dly.last_dqdly_pass[1]=13,  finish count=1 
DQ loop=12, cmp_err_1 = ffff0000
dqs_perbyte_dly.last_dqdly_pass[0]=12,  finish count=2 
byte:0, (DQS,DQ)=(9,8)
byte:1, (DQS,DQ)=(9,8)
DRAMC_DQODLY1[200]=88888888
DRAMC_DQODLY2[204]=88888888
20,data:99
[EMI] DRAMC calibration passed

===================================================================
     ..MT7621   stage1 code done 
     ..CPU=50000000 HZ BUS=16666666 HZ
===================================================================


U-Boot 1.1.3 (Jul 26 2016 - 00:50:05)

Board: Ralink APSoC DRAM:  256 MB
relocate_code Pointer at: 8ff34000

Config XHCI 40M PLL 
Allocate 16 byte aligned buffer: 8ff7cd70
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [C2 F1 80 95 02]
Device not found, ID: c2f1
Not Support this Device! 
chip_mode=00000001
Support this Device in MTK table! c2f1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,.mtd->erasesize=131072  devinfo.iowidth=8
.*** Warning - bad CRC, using default environment

============================================ 
Ralink UBoot Version: 4.3.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Jul 26 2016  Time:00:50:05
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =256 Mbytes

reset PHY
#Reset_MT7530

SC_DEBUG: Nand Partition Table Magic Found at 100000.
..
Please choose the operation: 
   1: Load system code to SDRAM via TFTP. 
   2: Load system code then write to Flash via TFTP. 
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   9: Load Boot Loader code then write to Flash via TFTP. 
... 0 
0006fffa

***************************************************
    Sercomm Boot Version 1.0.1.0

***************************************************
Enter NMRP_main
Trying Eth0 (10/100-M)

 Waitting for RX_DMA_BUSY status Start... done


 ETH_STATE_ACTIVE!! 
NMRP_FLASH_SIZE_buffer --> 03000000.
NMRP:LISTENING
### No NMRP Server found ###
check upgrade flag
read flag 05420000
## Booting image at bc200000 ...
   Image Name:   Linux Kernel Image
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    3356309 Bytes =  3.2 MB
   Load Address: 81001000
   Entry Point:  8100d1d0
..........................
Bad block detected at 0x740, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 3a0000 -> 3c0000
Bad block detected at 0x780, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 3c0000 -> 3e0000
Bad block detected at 0x7c0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 3e0000 -> 400000
Bad block detected at 0x800, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 400000 -> 420000
Bad block detected at 0x840, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 420000 -> 440000
Bad block detected at 0x880, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 440000 -> 460000
Bad block detected at 0x8c0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 460000 -> 480000
Bad block detected at 0x900, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 480000 -> 4a0000
Bad block detected at 0x940, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 4a0000 -> 4c0000
Bad block detected at 0x980, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 4c0000 -> 4e0000
Bad block detected at 0x9c0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 4e0000 -> 500000
Bad block detected at 0xa00, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 500000 -> 520000
Bad block detected at 0xa40, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 520000 -> 540000
Bad block detected at 0xa80, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 540000 -> 560000
Bad block detected at 0xac0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 560000 -> 580000
Bad block detected at 0xb00, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 580000 -> 5a0000
Bad block detected at 0xb40, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 5a0000 -> 5c0000
Bad block detected at 0xb80, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 5c0000 -> 5e0000
Bad block detected at 0xbc0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 5e0000 -> 600000
Bad block detected at 0xc00, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 600000 -> 620000
Bad block detected at 0xc40, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 620000 -> 640000
Bad block detected at 0xc80, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 640000 -> 660000
Bad block detected at 0xcc0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 660000 -> 680000
Bad block detected at 0xd00, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 680000 -> 6a0000
Bad block detected at 0xd40, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 6a0000 -> 6c0000
Bad block detected at 0xd80, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 6c0000 -> 6e0000
Bad block detected at 0xdc0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 6e0000 -> 700000
Bad block detected at 0xe00, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 700000 -> 720000
Bad block detected at 0xe40, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 720000 -> 740000
Bad block detected at 0xe80, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 740000 -> 760000
Bad block detected at 0xec0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 760000 -> 780000
Bad block detected at 0xf00, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 780000 -> 7a0000
Bad block detected at 0xf40, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 7a0000 -> 7c0000
Bad block detected at 0x14c0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block a60000 -> a80000
Bad block detected at 0x1500, oob_buf[0] is 0x0
ranand_read: skip reading a bad block a80000 -> aa0000
Bad block detected at 0x1540, oob_buf[0] is 0x0
ranand_read: skip reading a bad block aa0000 -> ac0000
Bad block detected at 0x1580, oob_buf[0] is 0x0
ranand_read: skip reading a bad block ac0000 -> ae0000
Bad block detected at 0x15c0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block ae0000 -> b00000
Bad block detected at 0x1600, oob_buf[0] is 0x0
ranand_read: skip reading a bad block b00000 -> b20000
Bad block detected at 0x1640, oob_buf[0] is 0x0
ranand_read: skip reading a bad block b20000 -> b40000
Bad block detected at 0x1680, oob_buf[0] is 0x0
ranand_read: skip reading a bad block b40000 -> b60000
Bad block detected at 0x16c0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block b60000 -> b80000
Bad block detected at 0x1700, oob_buf[0] is 0x0
ranand_read: skip reading a bad block b80000 -> ba0000
Bad block detected at 0x1740, oob_buf[0] is 0x0
ranand_read: skip reading a bad block ba0000 -> bc0000
Bad block detected at 0x1780, oob_buf[0] is 0x0
ranand_read: skip reading a bad block bc0000 -> be0000
Bad block detected at 0x17c0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block be0000 -> c00000
Bad block detected at 0x1800, oob_buf[0] is 0x0
ranand_read: skip reading a bad block c00000 -> c20000
Bad block detected at 0x1840, oob_buf[0] is 0x0
ranand_read: skip reading a bad block c20000 -> c40000
Bad block detected at 0x1880, oob_buf[0] is 0x0
ranand_read: skip reading a bad block c40000 -> c60000
Bad block detected at 0x18c0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block c60000 -> c80000
Bad block detected at 0x1900, oob_buf[0] is 0x0
ranand_read: skip reading a bad block c80000 -> ca0000
Bad block detected at 0x1940, oob_buf[0] is 0x0
ranand_read: skip reading a bad block ca0000 -> cc0000
Bad block detected at 0x1980, oob_buf[0] is 0x0
ranand_read: skip reading a bad block cc0000 -> ce0000
Bad block detected at 0x19c0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block ce0000 -> d00000
Bad block detected at 0x1a00, oob_buf[0] is 0x0
ranand_read: skip reading a bad block d00000 -> d20000
Bad block detected at 0x1a40, oob_buf[0] is 0x0
ranand_read: skip reading a bad block d20000 -> d40000
Bad block detected at 0x1a80, oob_buf[0] is 0x0
ranand_read: skip reading a bad block d40000 -> d60000
Bad block detected at 0x1ac0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block d60000 -> d80000
Bad block detected at 0x1b00, oob_buf[0] is 0x0
ranand_read: skip reading a bad block d80000 -> da0000
Bad block detected at 0x1b40, oob_buf[0] is 0x0
ranand_read: skip reading a bad block da0000 -> dc0000
Bad block detected at 0x1b80, oob_buf[0] is 0x0
ranand_read: skip reading a bad block dc0000 -> de0000
Bad block detected at 0x1bc0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block de0000 -> e00000
Bad block detected at 0x1c00, oob_buf[0] is 0x0
ranand_read: skip reading a bad block e00000 -> e20000
Bad block detected at 0x1c40, oob_buf[0] is 0x0
ranand_read: skip reading a bad block e20000 -> e40000
Bad block detected at 0x1c80, oob_buf[0] is 0x0
ranand_read: skip reading a bad block e40000 -> e60000
Bad block detected at 0x1cc0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block e60000 -> e80000
Bad block detected at 0x1d00, oob_buf[0] is 0x0
ranand_read: skip reading a bad block e80000 -> ea0000
Bad block detected at 0x1d40, oob_buf[0] is 0x0
ranand_read: skip reading a bad block ea0000 -> ec0000
Bad block detected at 0x1d80, oob_buf[0] is 0x0
ranand_read: skip reading a bad block ec0000 -> ee0000
Bad block detected at 0x1dc0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block ee0000 -> f00000
Bad block detected at 0x1e00, oob_buf[0] is 0x0
ranand_read: skip reading a bad block f00000 -> f20000
Bad block detected at 0x1e40, oob_buf[0] is 0x0
ranand_read: skip reading a bad block f20000 -> f40000
Bad block detected at 0x1e80, oob_buf[0] is 0x0
ranand_read: skip reading a bad block f40000 -> f60000
Bad block detected at 0x1ec0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block f60000 -> f80000
Bad block detected at 0x1f00, oob_buf[0] is 0x0
ranand_read: skip reading a bad block f80000 -> fa0000
Bad block detected at 0x1f40, oob_buf[0] is 0x0
ranand_read: skip reading a bad block fa0000 -> fc0000
Bad block detected at 0x1f80, oob_buf[0] is 0x0
ranand_read: skip reading a bad block fc0000 -> fe0000
Bad block detected at 0x1fc0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block fe0000 -> 1000000
Bad block detected at 0x2000, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 1000000 -> 1020000
Bad block detected at 0x2040, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 1020000 -> 1040000
Bad block detected at 0x2080, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 1040000 -> 1060000
Bad block detected at 0x20c0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 1060000 -> 1080000
Bad block detected at 0x2100, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 1080000 -> 10a0000
Bad block detected at 0x2140, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 10a0000 -> 10c0000
Bad block detected at 0x2180, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 10c0000 -> 10e0000
Bad block detected at 0x21c0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 10e0000 -> 1100000
Bad block detected at 0x2200, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 1100000 -> 1120000
Bad block detected at 0x2240, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 1120000 -> 1140000
Bad block detected at 0x2280, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 1140000 -> 1160000
Bad block detected at 0x22c0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 1160000 -> 1180000
Bad block detected at 0x2300, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 1180000 -> 11a0000
Bad block detected at 0x2340, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 11a0000 -> 11c0000
Bad block detected at 0x2380, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 11c0000 -> 11e0000
Bad block detected at 0x23c0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 11e0000 -> 1200000
Bad block detected at 0x2400, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 1200000 -> 1220000
Bad block detected at 0x2440, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 1220000 -> 1240000
Bad block detected at 0x2480, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 1240000 -> 1260000
Bad block detected at 0x24c0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 1260000 -> 1280000
Bad block detected at 0x2500, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 1280000 -> 12a0000
Bad block detected at 0x2540, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 12a0000 -> 12c0000
Bad block detected at 0x2580, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 12c0000 -> 12e0000
Bad block detected at 0x25c0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 12e0000 -> 1300000
Bad block detected at 0x2600, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 1300000 -> 1320000
Bad block detected at 0x2640, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 1320000 -> 1340000
Bad block detected at 0x2680, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 1340000 -> 1360000
Bad block detected at 0x26c0, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 1360000 -> 1380000
Bad block detected at 0x2700, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 1380000 -> 13a0000
Bad block detected at 0x2740, oob_buf[0] is 0x0
ranand_read: skip reading a bad block 13a0000 -> 13c0000
..........................   Verifying Checksum ... Bad Data CRC
Welcome to TFTP Recovery mode!
Trying Eth0 (10/100-M)

 ETH_STATE_ACTIVE!! 
Our ETH MAC:

0x0000:.9c  3d  cf  d3  0f  8d  
Enter TFTP_REC_wait4pkt

dump arp packet : 

0x0000:.ff  ff  ff  ff  ff  ff  58  ef  68  7e  3f  57  08  06  00  01  
0x0010:.08  00  06  04  00  01  58  ef  68  7e  3f  57  00  00  00  00  
0x0020:.00  00  00  00  00  00  a9  fe  16  22  00  00  00  00  00  00  
0x0030:.00  00  00  00  00  00  00  00  00  00  00  00  
dump arp packet : 

0x0000:.ff  ff  ff  ff  ff  ff  58  ef  68  7e  3f  57  08  06  00  01  
0x0010:.08  00  06  04  00  01  58  ef  68  7e  3f  57  00  00  00  00  
0x0020:.00  00  00  00  00  00  a9  fe  16  22  00  00  00  00  00  00  
0x0030:.00  00  00  00  00  00  00  00  00  00  00  00  
dump arp packet : 

0x0000:.ff  ff  ff  ff  ff  ff  58  ef  68  7e  3f  57  08  06  00  01  
0x0010:.08  00  06  04  00  01  58  ef  68  7e  3f  57  00  00  00  00  
0x0020:.00  00  00  00  00  00  a9  fe  16  22  00  00  00  00  00  00  
0x0030:.00  00  00  00  00  00  00  00  00  00  00  00  
dump arp packet : 

0x0000:.ff  ff  ff  ff  ff  ff  58  ef  68  7e  3f  57  08  06  00  01  
0x0010:.08  00  06  04  00  01  58  ef  68  7e  3f  57  a9  fe  16  22  
0x0020:.00  00  00  00  00  00  a9  fe  16  22  00  00  00  00  00  00  
0x0030:.00  00  00  00  00  00  00  00  00  00  00  00  
dump arp packet : 

0x0000:.ff  ff  ff  ff  ff  ff  58  ef  68  7e  3f  57  08  06  00  01  
0x0010:.08  00  06  04  00  01  58  ef  68  7e  3f  57  a9  fe  16  22  
0x0020:.00  00  00  00  00  00  a9  fe  16  22  00  00  00  00  00  00  
0x0030:.00  00  00  00  00  00  00  00  00  00  00  00  
dump arp packet : 

0x0000:.ff  ff  ff  ff  ff  ff  58  ef  68  7e  3f  57  08  06  00  01  
0x0010:.08  00  06  04  00  01  58  ef  68  7e  3f  57  a9  fe  16  22  
0x0020:.00  00  00  00  00  00  a9  fe  16  22  00  00  00  00  00  00  
0x0030:.00  00  00  00  00  00  00  00  00  00  00  00  
.

trinilopez · September 19, 2022, 6:29pm

Anyone have any insight? I've hit a wall here...