Netgear r6220 - help to serial debrick

kenuser · September 9, 2022, 8:27am

Hi,

I installed to my Netgear r6220 Openwrt 21.02.3 but as 2.4Ghz working not correctly I would to flash a stock firmware (R6220-V1.1.0.114_1.0.1.img).
First I reset the router to default openwrt settings and then upgrade via luci interface.
Now my router is bootloop.
I connected the serial interface and stopped boot with ctrl-c, I sent to router "setenv ipaddr 192.168.1.1" and "setenv serverip 192.168.1.2" and set the pc on static 192.168.1.2 as I would tftp the stock image.
The problem is that I cannot ping the router anymore via ethernet.


===================================================================
                MT7621   stage1 code 13:15:05 (ASIC)
                CPU=50000000 HZ BUS=16666666 HZ
==================================================================
Change MPLL source from XTAL to CR...
do MEMPLL setting..
MEMPLL Config : 0x11100000
3PLL mode + External loopback
=== XTAL-40Mhz === DDR-1200Mhz ===
PLL3 FB_DL: 0xc, 1/0 = 742/282 31000000
PLL4 FB_DL: 0xc, 1/0 = 563/461 31000000
PLL2 FB_DL: 0x15, 1/0 = 559/465 55000000
do DDR setting..[00320381]
Apply DDR3 Setting...(use customer AC)
          0    8   16   24   32   40   48   56   64   72   80   88   96  104  112  120
      --------------------------------------------------------------------------------
0000:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0001:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0002:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0003:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0004:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0005:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0006:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0007:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0008:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0009:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000A:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000B:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000C:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000D:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    1
000E:|    0    0    0    0    0    0    0    0    0    1    1    1    1    1    1    1
000F:|    0    0    0    0    1    1    1    1    1    1    1    1    1    1    0    0
0010:|    1    1    1    1    1    1    1    1    0    0    0    0    0    0    0    0
0011:|    1    1    1    0    0    0    0    0    0    0    0    0    0    0    0    0
0012:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0013:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0014:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0015:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0016:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0017:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0018:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0019:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001A:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001B:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001C:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001D:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001E:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001F:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
rank 0 coarse = 15
rank 0 fine = 72
B:|    0    0    0    0    0    0    0    0    0    0    1    1    1    0    0    0
opt_dle value:11
DRAMC_R0DELDLY[018]=00001D1F
==================================================================
                RX      DQS perbit delay software calibration
==================================================================
1.0-15 bit dq delay value
==================================================================
bit|     0  1  2  3  4  5  6  7  8  9
--------------------------------------
0 |    15 7 14 11 13 8 15 6 1 9
10 |    5 12 7 12 5 10
--------------------------------------

==================================================================
2.dqs window
x=pass dqs delay value (min~max)center
y=0-7bit DQ of every group
input delay:DQS0 =31 DQS1 = 29
==================================================================
bit     DQS0     bit      DQS1
0  (1~58)29  8  (1~55)28
1  (0~55)27  9  (1~54)27
2  (1~58)29  10  (1~55)28
3  (1~59)30  11  (1~55)28
4  (1~59)30  12  (1~58)29
5  (1~58)29  13  (1~56)28
6  (1~59)30  14  (1~57)29
7  (1~61)31  15  (1~58)29
==================================================================
3.dq delay value last
==================================================================
bit|    0  1  2  3  4  5  6  7  8   9
--------------------------------------
0 |    15 11 15 12 14 10 15 6 2 11
10 |    6 13 7 13 5 10
==================================================================
==================================================================
     TX  perbyte calibration
==================================================================
DQS loop = 15, cmp_err_1 = ffff0000
dqs_perbyte_dly.last_dqsdly_pass[0]=15,  finish count=1
dqs_perbyte_dly.last_dqsdly_pass[1]=15,  finish count=2
DQ loop=15, cmp_err_1 = ffff05aa
DQ loop=14, cmp_err_1 = ffff05aa
DQ loop=13, cmp_err_1 = ffff01aa
DQ loop=12, cmp_err_1 = ffff01a0
DQ loop=11, cmp_err_1 = ffff0180
DQ loop=10, cmp_err_1 = ffff0000
dqs_perbyte_dly.last_dqdly_pass[0]=10,  finish count=1
dqs_perbyte_dly.last_dqdly_pass[1]=10,  finish count=2
byte:0, (DQS,DQ)=(a,8)
byte:1, (DQS,DQ)=(a,8)
20,data:aa
[EMI] DRAMC calibration passed

===================================================================
                MT7621   stage1 code done
                CPU=50000000 HZ BUS=16666666 HZ
===================================================================


U-Boot 1.1.3 (Sep 25 2015 - 10:29:47)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87fac000

Config XHCI 40M PLL
Allocate 16 byte aligned buffer: 87fe1bb0
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [C2 F1 80 95 02]
Device found in MTK table, ID: c2f1, EXT_ID: 809502
Support this Device in MTK table! c2f1
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
Env addr : 0x100000
..============================================
Ralink UBoot Version: 4.2.1.0
--------------------------------------------
ASIC MT7621AS (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection
DRAM_TYPE: DDR3
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Sep 25 2015  Time:10:29:47
============================================
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768

 ##### The CPU freq = 880 MHZ ####
 estimate memory size =128 Mbytes

Reset switch ...
#Reset_MT7530
set LAN/WAN LLLLW
..Example expects ABI version 2
Actual U-Boot ABI version 2

******************************************
    Uboot StandAlone Entry
******************************************
0, cmd
1, 0x0000000D
cmd : 0x0000000D


Press Ctrl+C to Enter the Main loop...
Example expects ABI version 2
Actual U-Boot ABI version 2

******************************************
    Uboot StandAlone Entry
******************************************
0, cmd
1, 0x0000000F
cmd : 0x0000000F
Enter NMRP_main
Flash Sector Number : 1024.

 NetTxPacket = 0x87FE5B40

 KSEG1ADDR(NetTxPacket) = 0xA7FE5B40

 NetLoop,call eth_halt !

 NetLoop,call eth_init !
Trying Eth0 (10/100-M)

 Waitting for RX_DMA_BUSY status Start... done


 ETH_STATE_ACTIVE!!
NMRP_FLASH_SIZE_buffer --> a1000000.
NMRP:LISTENING
### No NMRP Server found ###

 KSEG1ADDR(NetTxPacket) = 0xA7FE5B40

 NetLoop,call eth_halt !

 NetLoop,call eth_init !
Trying Eth0 (10/100-M)

 ETH_STATE_ACTIVE!!
STANDALONE_LOAD_ADDR is 0xa0600000
Example expects ABI version 2
Actual U-Boot ABI version 2

******************************************
    Uboot StandAlone Entry
******************************************
0, boot
Flash Sector Number : 1024.

***************************************************
    Sercomm Boot Version 1.19.0

***************************************************
Upgrade flag check pass!Entering Firmware : Everything is OK.
kernel addr :0xbfe00000

 System Boot system code via Flash.
## Booting image at bfe00000 ...
   Image Name:   MIPS OpenWrt Linux-5.4.188
   Image Type:   MIPS Linux Kernel Image (uncompressed)
   Data Size:    2369917 Bytes =  2.3 MB
   Load Address: 80001000
   Entry Point:  80001000
.....................................   Verifying Checksum ... OK
OK



commandline in boot is : <NULL>  !!!!



No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128

Starting kernel ...



OpenWrt kernel loader for MIPS based SoC
Copyright (C) 2011 Gabor Juhos <juhosg@openwrt.org>
Decompressing kernel... done!
Starting kernel at 80001000...

[    0.000000] Linux version 5.4.188 (builder@buildhost) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r16554-1d4dea6d4f)) #0 SMP Sat Apr 16 12:59:34 2022
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] printk: bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is Netgear R6220
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2} total 2
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] percpu: Embedded 14 pages/cpu s26768 r8192 d22384 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32480
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes, linear)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes, linear)
[    0.000000] Writing ErrCtl register=00078048
[    0.000000] Readback ErrCtl register=00078048
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 121076K/131072K available (6097K kernel code, 210K rwdata, 748K rodata, 1252K init, 238K bss, 9996K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000] rcu:     RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies.
[    0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
[    0.000000] NR_IRQS: 256
[    0.000000] random: get_random_bytes called from 0x806e7a3c with crng_init=0
[    0.000000] CPU Clock: 880MHz
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000008] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.015491] Calibrating delay loop... 583.68 BogoMIPS (lpj=1167360)
[    0.055800] pid_max: default: 32768 minimum: 301
[    0.065124] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.079523] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.097260] rcu: Hierarchical SRCU implementation.
[    0.107183] smp: Bringing up secondary CPUs ...
[    8.121673] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    8.121682] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    8.121694] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    8.121793] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.144237] Synchronize counters for CPU 1: done.
[    0.203881] smp: Brought up 1 node, 2 CPUs
[    0.216236] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
[    0.235510] futex hash table entries: 512 (order: 2, 16384 bytes, linear)
[    0.249122] pinctrl core: initialized pinctrl subsystem
[    0.260789] NET: Registered protocol family 16
[    0.300400] clocksource: Switched to clocksource GIC
[    0.311784] thermal_sys: Registered thermal governor 'step_wise'
[    0.312401] NET: Registered protocol family 2
[    0.333047] IP idents hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.348239] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 6144 bytes, linear)
[    0.364994] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.380113] TCP bind hash table entries: 1024 (order: 1, 8192 bytes, linear)
[    0.394107] TCP: Hash tables configured (established 1024 bind 1024)
[    0.406856] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.419743] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.433796] NET: Registered protocol family 1
[    0.442357] PCI: CLS 0 bytes, default 32
[    0.540200] 4 CPUs re-calibrate udelay(lpj = 1163264)
[    0.551950] workingset: timestamp_bits=14 max_order=15 bucket_order=1
[    0.577644] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.589184] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.610919] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[    0.627972] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    0.639318] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    0.650602] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    0.662471] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.679167] printk: console [ttyS0] disabled
[    0.687656] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 15, base_baud = 3125000) is a 16550A
[    0.705568] printk: console [ttyS0] enabled
[    0.705568] printk: console [ttyS0] enabled
[    0.722113] printk: bootconsole [early0] disabled
[    0.722113] printk: bootconsole [early0] disabled
[    0.743271] mt7621-nand 1e003000.nand: Using programmed access timing: 31c07388
[    0.758142] nand: device found, Manufacturer ID: 0xc2, Chip ID: 0xf1
[    0.770804] nand: Macronix MX30LF1G18AC
[    0.778449] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    0.793536] mt7621-nand 1e003000.nand: ECC strength adjusted to 4 bits
[    0.806581] mt7621-nand 1e003000.nand: Using programmed access timing: 21005134
[    0.821151] mt7621-nand 1e003000.nand: Using programmed access timing: 21005134
[    0.835711] Scanning device for bad blocks
[    2.142722] 6 fixed-partitions partitions found on MTD device mt7621-nand
[    2.156248] Creating 6 MTD partitions on "mt7621-nand":
[    2.166675] 0x000000000000-0x000000100000 : "u-boot"
[    2.178119] 0x000000100000-0x000000200000 : "SC PID"
[    2.189612] 0x000000200000-0x000000600000 : "kernel"
[    2.201102] 0x000000600000-0x000002200000 : "ubi"
[    2.212150] 0x000002e00000-0x000002f00000 : "factory"
[    2.223699] 0x000004200000-0x000007e00000 : "reserved"
[    2.263138] mt7530 mdio-bus:1f: MT7530 adapts as multi-chip module
[    2.279435] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 17
[    2.298279] mt7621-pci 1e140000.pcie: Parsing DT failed
[    2.311840] NET: Registered protocol family 10
[    2.322129] Segment Routing with IPv6
[    2.329572] NET: Registered protocol family 17
[    2.338501] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    2.364545] 8021q: 802.1Q VLAN Support v1.8
[    2.375536] mt7530 mdio-bus:1f: MT7530 adapts as multi-chip module
[    2.401080] mt7530 mdio-bus:1f lan4 (uninitialized): PHY [dsa-0.0:00] driver [Generic PHY]
[    2.419170] mt7530 mdio-bus:1f lan3 (uninitialized): PHY [dsa-0.0:01] driver [Generic PHY]
[    2.437317] mt7530 mdio-bus:1f lan2 (uninitialized): PHY [dsa-0.0:02] driver [Generic PHY]
[    2.455370] mt7530 mdio-bus:1f lan1 (uninitialized): PHY [dsa-0.0:03] driver [Generic PHY]
[    2.473471] mt7530 mdio-bus:1f wan (uninitialized): PHY [dsa-0.0:04] driver [Generic PHY]
[    2.490400] random: fast init done
[    2.491493] mt7530 mdio-bus:1f: configuring for fixed/rgmii link mode
[    2.514856] DSA: tree 0 setup
[    2.521145] rt2880-pinmux pinctrl: pcie is already enabled
[    2.532271] mt7621-pci-phy 1e149000.pcie-phy: PHY for 0xbe149000 (dual port = 1)
[    2.547196] mt7621-pci-phy 1e14a000.pcie-phy: PHY for 0xbe14a000 (dual port = 0)
[    2.661751] mt7621-pci-phy 1e149000.pcie-phy: Xtal is 40MHz
[    2.672869] mt7621-pci-phy 1e14a000.pcie-phy: Xtal is 40MHz
[    2.783705] mt7621-pci 1e140000.pcie: pcie1 no card, disable it (RST & CLK)
[    2.797582] mt7621-pci 1e140000.pcie: PCIE0 enabled
[    2.807299] mt7621-pci 1e140000.pcie: PCIE2 enabled
[    2.817034] mt7621-pci 1e140000.pcie: PCI coherence region base: 0x60000000, mask/settings: 0xf0000002
[    2.835759] mt7621-pci 1e140000.pcie: PCI host bridge to bus 0000:00
[    2.848448] pci_bus 0000:00: root bus resource [io  0x1e160000-0x1e16ffff]
[    2.862150] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    2.875853] pci_bus 0000:00: root bus resource [bus 00-ff]
[    2.886827] pci 0000:00:00.0: [0e8d:0801] type 01 class 0x060400
[    2.898830] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x7fffffff]
[    2.911325] pci 0000:00:00.0: reg 0x14: [mem 0x00000000-0x0000ffff]
[    2.923894] pci 0000:00:00.0: supports D1
[    2.931886] pci 0000:00:00.0: PME# supported from D0 D1 D3hot
[    2.943751] pci 0000:00:01.0: [0e8d:0801] type 01 class 0x060400
[    2.955767] pci 0000:00:01.0: reg 0x10: [mem 0x00000000-0x7fffffff]
[    2.968266] pci 0000:00:01.0: reg 0x14: [mem 0x00000000-0x0000ffff]
[    2.980818] pci 0000:00:01.0: supports D1
[    2.988809] pci 0000:00:01.0: PME# supported from D0 D1 D3hot
[    3.001686] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    3.017656] pci 0000:00:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    3.033844] pci 0000:01:00.0: [14c3:7662] type 00 class 0x028000
[    3.045877] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit]
[    3.059444] pci 0000:01:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref]
[    3.072906] pci 0000:01:00.0: PME# supported from D0 D3hot D3cold
[    3.086511] pci 0000:00:00.0: PCI bridge to [bus 01-ff]
[    3.096945] pci 0000:00:00.0:   bridge window [io  0x0000-0x0fff]
[    3.109092] pci 0000:00:00.0:   bridge window [mem 0x00000000-0x000fffff]
[    3.122624] pci 0000:00:00.0:   bridge window [mem 0x00000000-0x000fffff pref]
[    3.137030] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01
[    3.150462] pci 0000:02:00.0: [14c3:7603] type 00 class 0x028000
[    3.162488] pci 0000:02:00.0: reg 0x10: [mem 0x00000000-0x000fffff]
[    3.175118] pci 0000:02:00.0: PME# supported from D0 D3hot D3cold
[    3.188777] pci 0000:00:01.0: PCI bridge to [bus 02-ff]
[    3.199199] pci 0000:00:01.0:   bridge window [io  0x0000-0x0fff]
[    3.211343] pci 0000:00:01.0:   bridge window [mem 0x00000000-0x000fffff]
[    3.224876] pci 0000:00:01.0:   bridge window [mem 0x00000000-0x000fffff pref]
[    3.239278] pci_bus 0000:02: busn_res: [bus 02-ff] end is updated to 02
[    3.252511] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    3.265692] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    3.279566] pci 0000:00:01.0: BAR 0: no space for [mem size 0x80000000]
[    3.292751] pci 0000:00:01.0: BAR 0: failed to assign [mem size 0x80000000]
[    3.306628] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    3.320159] pci 0000:00:00.0: BAR 9: assigned [mem 0x60100000-0x601fffff pref]
[    3.334572] pci 0000:00:01.0: BAR 8: assigned [mem 0x60200000-0x602fffff]
[    3.348109] pci 0000:00:01.0: BAR 9: assigned [mem 0x60300000-0x603fffff pref]
[    3.362507] pci 0000:00:00.0: BAR 1: assigned [mem 0x60400000-0x6040ffff]
[    3.376042] pci 0000:00:01.0: BAR 1: assigned [mem 0x60410000-0x6041ffff]
[    3.389578] pci 0000:00:00.0: BAR 7: assigned [io  0x1e160000-0x1e160fff]
[    3.403108] pci 0000:00:01.0: BAR 7: assigned [io  0x1e161000-0x1e161fff]
[    3.416649] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[    3.431227] pci 0000:01:00.0: BAR 6: assigned [mem 0x60100000-0x6010ffff pref]
[    3.445629] pci 0000:00:00.0: PCI bridge to [bus 01]
[    3.455523] pci 0000:00:00.0:   bridge window [io  0x1e160000-0x1e160fff]
[    3.469056] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    3.482584] pci 0000:00:00.0:   bridge window [mem 0x60100000-0x601fffff pref]
[    3.496987] pci 0000:02:00.0: BAR 0: assigned [mem 0x60200000-0x602fffff]
[    3.510517] pci 0000:00:01.0: PCI bridge to [bus 02]
[    3.520415] pci 0000:00:01.0:   bridge window [io  0x1e161000-0x1e161fff]
[    3.533943] pci 0000:00:01.0:   bridge window [mem 0x60200000-0x602fffff]
[    3.547475] pci 0000:00:01.0:   bridge window [mem 0x60300000-0x603fffff pref]
[    3.562494] mt7530 mdio-bus:1f: Link is Up - 1Gbps/Full - flow control off
[    3.565495] UBI: auto-attach mtd3
[    3.582923] ubi0: attaching mtd3
[    3.874383] ubi0: scanning is finished
[    3.897884] ubi0: attached mtd3 (name "ubi", size 28 MiB)
[    3.908703] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    3.922407] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    3.935928] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    3.949801] ubi0: good PEBs: 224, bad PEBs: 0, corrupted PEBs: 0
[    3.961767] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 128
[    3.976155] ubi0: max/mean erase counter: 10/6, WL threshold: 4096, image sequence number: 1650113974
[    3.994524] ubi0: available PEBs: 200, total reserved PEBs: 24, PEBs reserved for bad PEB handling: 20
[    4.013098] ubi0: background thread "ubi_bgt0d" started, PID 462
[    4.013124] hctosys: unable to open rtc device (rtc0)
[    4.035985] /dev/root: Can't open blockdev
[    4.044216] VFS: Cannot open root device "(null)" or unknown-block(0,0): error -6
[    4.059119] Please append a correct "root=" boot option; here are the available partitions:
[    4.075766] 1f00            1024 mtdblock0
[    4.075770]  (driver?)
[    4.088801] 1f01            1024 mtdblock1
[    4.088804]  (driver?)
[    4.101833] 1f02            4096 mtdblock2
[    4.101837]  (driver?)
[    4.114867] 1f03           28672 mtdblock3
[    4.114871]  (driver?)
[    4.127898] 1f04            1024 mtdblock4
[    4.127902]  (driver?)
[    4.140933] 1f05           61440 mtdblock5
[    4.140936]  (driver?)
[    4.153961] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
[    4.170423] Rebooting in 1 seconds..

SERCOMM # printenv
bootcmd=tftp
bootdelay=1
baudrate=57600
ethaddr="00:C0:02:12:35:88"
ipaddr=192.168.1.1
serverip=192.168.1.2
stdin=serial
stdout=serial
stderr=serial

Environment size: 150/4092 bytes
SERCOMM #

What can I do?
Thanks

frollic · September 9, 2022, 8:29am

start by typing help in uboot.

https://kb.netgear.com/000059634/How-do-I-upload-firmware-to-my-NETGEAR-router-using-TFTP-from-the-Microsoft-Windows-Command-Prompt might help too.

kenuser · September 9, 2022, 8:49am

Hi, thank you for reply.

I already seen the linked procedure but my problem is that I cannot ping the router, it doesn't take ethernet addr 192.168.1.1

SERCOMM # help
?       - alias for 'help'
base    - print or set address offset
bdinfo  - print Board Info structure
bootm   - boot application image from memory
bootp   - boot image via network using BootP/TFTP protocol
coninfo - print console devices and information
crc32   - checksum calculation
go      - start application at address 'addr'
help    - print online help
iminfo  - print header information for application image
loop    - infinite loop on address range
md      - memory display
mdio   - Ralink PHY register R/W command !!
mm      - memory modify (auto-incrementing)
mtest   - simple RAM test
nand    - nand command
nm      - memory modify (constant address)
printenv- print environment variables
rarpboot- boot image via network using RARP/TFTP protocol
reset   - Perform RESET of the CPU
saveenv - save environment variables to persistent storage
sc_btver    -SC: SC Show Bootloader Version(SC), and dump compile timestamp
sc_dl       -SC: upgrade option
sc_fl_map   -SC: SC Defined Flash Map Dump
sc_gpio     -SC: sc debug command for gpio operations
sc_led      -SC: sc debug command for led & buttons
sc_lp       -SC: SC loopback sample command
sc_nand      -SC: sc nand flash
sc_nmrp       -SC: NMRP upgrade
sc_ramtest  -SC: sc debug command for memory test
sc_tftp_rec       -SC: tftp recovery mode
sc_tx  - send data out
setenv  - set environment variables
sleep   - delay execution for some time
tftpboot- boot image via network using TFTP protocol
version - print monitor version
SERCOMM #

SERCOMM # bdinfo
boot_params = 0x87E8AFB0
memstart    = 0x80000000
memsize     = 0x08000000
flashstart  = 0x00000000
flashsize   = 0x00000000
flashoffset = 0x00000000
ethaddr     = 00:00:C0:02:12:35
ip_addr     = 192.168.1.1
baudrate    = 57600 bps
SERCOMM #

frollic · September 9, 2022, 8:54am

ping usually doesn't work with uboot, it's not a reliable way of checking if something is alive, or not.

you could also try https://github.com/jclehner/nmrpflash

Lucky1 · September 9, 2022, 8:58am

the de-brick works fine on this router

just remember to temporarily turn off your firewall if using windows

kenuser · September 9, 2022, 9:42am

I tried with nmrpflash, but the router doesn't reply to 192.168.1.1 and so cannot flash the image

Which are the commands to flash via tftp by uboot?

badulesia · September 9, 2022, 9:49am

Try nmrpflash first, it works well with this device. After the flashing, wait for the reboot message, it may take a long time to appear ( ~5 min). But at the end it works.
If you have followed the instructions to flash via nmrpflash, there is no "192.168.1.1" IP to use.
Instructions say to power on than run the command. Experience shows me that you must run the command than power on (within a second)

frollic · September 9, 2022, 9:55am

and as already stated, you might need to stop the firewall.

kenuser · September 11, 2022, 11:34am

Hi,
finally I flashed it via uboot serial using "tftpboot" command, but cannot do directly.
To restore Netgear stock firmware I needed to flash before dd-wrt base fw and after from dd-wrt to stock.

[edit] Netgear r6220 isn't officially supported by dd-wrt, it's possible to use beta

system · September 21, 2022, 11:34am

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.