OpenWrt Forum Archive

Topic: netgear r6300v2 wifi coverage

The content of this topic has been archived on 25 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Hi Guys,

I flashed my r6300v2 with 15.05 and noticed the only working wifi 2,4Ghz has a very weak signal, in the sense that the coverage is like 2meters. I tried different scenarios, and came to the conclusion that wifi has acceptable ( weaker than the stock fw, but it has coverage in the house ) until the first cold restart ( power cut ).
scenario :
1. installed openwrt ( console -> ctrl-c -> tftpd method )
2. enable wifi ( luci )
3. wifi has good coverage
4. run reboot on console
5. wifi has good coverage
6. unplug powercord
7. replug power cord and boot
8. weak wifi

once reaching the #8, the only way to get the wifi power back is to reflash the stock, reflashing the openwrt doesn't help.
Tried to look at the bootlogs, and noticed the following differences:

stock:

Decompressing...done
SHMOO VER 1.13
PKID07DC06011801080000000000001A103F01000000
S300402DF
00002430
.......
[    0.130235] CPU: All CPU(s) started in SVC mode.

openwrt:

Decompressing...done
SHMOO VER 1.13
PKID07DC06011801080000000000001A103F01000000
S300402E3
00002460
.......
[    0.130241] CPU: WARNING: CPU(s) started in wrong/inconsistent modes (primary CPU mode 0x13)
[    0.130247] CPU: This may indicate a broken bootloader or firmware.

a. first thing is the difference in 3rd and 4th lines after decompressing done. not sure what those strings represent but are different with openwrt and those are changing at each reboot. the strings I got with stock fw are the same as in the bootlog from wikidevi for this router.

b. second thing is the message regarding the CPU's, with stock it starts in SVC mode, but with openwrt start in wrong modes

I assume the some parts of the flash are getting overwritten, and shouldn't. Maybe those strings in the 3rd and 4th lines are some kind of checksum...

Any clues?

(Last edited by nroberto13 on 25 Dec 2015, 23:25)

Could you provide complete logfile from oem firmware? There its normally listed how big and where are the default partitions.

Sure, I noticed the layout is slightly different. in openwrt layout the second POT covers the area assigned to the 2 T_Meters in stock. and there are differences in the linux and and ubi ( rootfs ) size and starting points.

here the openwrt layout

[    2.382324] 0x000000000000-0x000000080000 : "boot"
[    2.389292] 0x000000080000-0x000000200000 : "nvram"
[    2.398934] 0x000000200000-0x000000220000 : "board_data"
[    2.405319] 0x000000220000-0x000000240000 : "POT"
[    2.411066] 0x000000240000-0x0000002a0000 : "POT"
[    2.417527] 0x0000002a0000-0x0000002c0000 : "ML"
[    2.423272] 0x0000002c0000-0x0000002e0000 : "ML"
[    2.428968] 0x0000002e0000-0x000000300000 : "ML"
[    2.434705] 0x000000300000-0x000000320000 : "ML"
[    2.440487] 0x000000320000-0x000000340000 : "ML"
[    2.446174] 0x000000340000-0x000000360000 : "ML"
[    2.451871] 0x000000360000-0x000000380000 : "ML"
[    2.457566] 0x000000380000-0x000008000000 : "firmware"
[    2.796080] 0x00000038001c-0x000000780000 : "linux"
[    2.812435] 0x000000780000-0x000008000000 : "ubi"

and the stock layout:

0x000000000000-0x000000080000 : "boot"
0x000000080000-0x000000200000 : "nvram"
0x000000200000-0x000000220000 : "board_data"
0x000000220000-0x000000240000 : "POT1"
0x000000240000-0x000000260000 : "POT2"
0x000000260000-0x000000280000 : "T_Meter1"
0x000000280000-0x0000002a0000 : "T_Meter2"
0x0000002a0000-0x0000002c0000 : "ML1"
0x0000002c0000-0x0000002e0000 : "ML2"
0x0000002e0000-0x000000300000 : "ML3"
0x000000300000-0x000000320000 : "ML4"
0x000000320000-0x000000340000 : "ML5"
0x000000340000-0x000000360000 : "ML6"
0x000000360000-0x000000380000 : "ML7"
0x000000380000-0x000002180000 : "linux"
0x00000058e8dc-0x000002180000 : "rootfs"

but here the complete stock bootlog:

Decompressing...done

SHMOO VER 1.13

PKID07DC06011801080000000000001A103F01000000

S300402DF
00002440


RDLYW0 00000004

RDENW0 00000052

RDQSW0

    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
00 --------++++++++++++++++++++++++++++X+++++++++++++++++++++++++++
01 ------------++++++++++++++++++++++++++X+++++++++++++++++++++++++
02 --------++++++++++++++++++++++++++++X+++++++++++++++++++++++++++
03 -------++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
04 ----+-+++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
05 -----------++++++++++++++++++++++++++X++++++++++++++++++++++++++
06 -----+++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
07 ----------+++++++++++++++++++++++++++X++++++++++++++++++++++++++
08 ------+++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
09 ------------++++++++++++++++++++++++++X+++++++++++++++++++++++++
10 -------++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
11 -----------++++++++++++++++++++++++++X++++++++++++++++++++++++++
12 ------+++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
13 ------------++++++++++++++++++++++++++X+++++++++++++++++++++++++
14 -------++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
15 ------------++++++++++++++++++++++++++X+++++++++++++++++++++++++


PW0

    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
00 -----+++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
01 ------------++++++++++++++++++++++++++X+++++++++++++++++++++++++
02 ------+++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
03 ------+++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
04 -+++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++
05 ---------+++++++++++++++++++++++++++X+++++++++++++++++++++++++++
06 -+++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++
07 -------++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
08 ----++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
09 ----------+++++++++++++++++++++++++++X++++++++++++++++++++++++++
10 -----+++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
11 ----------+++++++++++++++++++++++++++X++++++++++++++++++++++++++
12 ----++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
13 ----------+++++++++++++++++++++++++++X++++++++++++++++++++++++++
14 ------+++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
15 ---------+++++++++++++++++++++++++++X+++++++++++++++++++++++++++


NW0

    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
00 --------++++++++++++++++++++++++++++X+++++++++++++++++++++++++++
01 -------------+++++++++++++++++++++++++X+++++++++++++++++++++++++
02 ---------+++++++++++++++++++++++++++X+++++++++++++++++++++++++++
03 --------++++++++++++++++++++++++++++X+++++++++++++++++++++++++++
04 ----++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
05 ------------++++++++++++++++++++++++++X+++++++++++++++++++++++++
06 -----+++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
07 -----------++++++++++++++++++++++++++X++++++++++++++++++++++++++
08 -------++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
09 -----------++++++++++++++++++++++++++X++++++++++++++++++++++++++
10 -------++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
11 -----------++++++++++++++++++++++++++X++++++++++++++++++++++++++
12 -------++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
13 ------------++++++++++++++++++++++++++X+++++++++++++++++++++++++
14 -------++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
15 ------------++++++++++++++++++++++++++X+++++++++++++++++++++++++


WRDQW0

    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
00 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
01 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
02 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
03 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
04 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
05 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
06 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
07 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
08 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
09 -+++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++-
10 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
11 --++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++-
12 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
13 -+++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++-
14 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
15 -+++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++-


WRDMW0 00000031
WRDMW0 00000031


ADDR

    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
00 +++++++++++++++++++++++++++++++X++++S+++++++++++++++++++++++++++

Decompressing...done


CFE for Foxconn Router R6300v2 version: v1.0.15
Build Date: Fri May 24 13:47:09 CST 2013
Init Arena
Init Devs.
Boot up from NAND flash...
Boot partition size = 262144(0x40000)
DDR Clock: 533 MHz
Info: DDR frequency set from clkfreq=800,*533*
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.30.163.2002 (r382208)
CPU type 0x0: 800MHz
Tot mem: 262144 KBytes

Device eth0:  hwaddr 04-A1-51-16-AB-ED, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Checking crc...Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
Loading: ..... 5048896 bytes read
Entry at 0x00008000
Closing network.
Starting program at 0x00008000
console [ttyS0] enabled, bootconsole disabled
serial8250.0: ttyS1 at MMIO 0x18000400 (irq = 117) is a 16550
brd: module loaded
loop: module loaded
pflash: found no supported devices
bcmsflash: found no supported devices
Boot partition size = 524288(0x80000)
lookup_nflash_rootfs_offset: offset = 0x380000
nflash: squash filesystem with lzma found at block 44
Creating 16 MTD partitions on "nflash":
0x000000000000-0x000000080000 : "boot"
0x000000080000-0x000000200000 : "nvram"
0x000000200000-0x000000220000 : "board_data"
0x000000220000-0x000000240000 : "POT1"
0x000000240000-0x000000260000 : "POT2"
0x000000260000-0x000000280000 : "T_Meter1"
0x000000280000-0x0000002a0000 : "T_Meter2"
0x0000002a0000-0x0000002c0000 : "ML1"
0x0000002c0000-0x0000002e0000 : "ML2"
0x0000002e0000-0x000000300000 : "ML3"
0x000000300000-0x000000320000 : "ML4"
0x000000320000-0x000000340000 : "ML5"
0x000000340000-0x000000360000 : "ML6"
0x000000360000-0x000000380000 : "ML7"
0x000000380000-0x000002180000 : "linux"
0x00000058e8dc-0x000002180000 : "rootfs"
PPP generic driver version 2.4.2
NET: Registered protocol family 24
PPPoL2TP kernel driver, V0.17
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
usbmon: debugfs is not available
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
ehci_hcd 0000:00:0a.1: EHCI Host Controller
ehci_hcd 0000:00:0a.1: new USB bus registered, assigned bus number 1
ehci_hcd 0000:00:0a.1: irq 111, io mem 0x18021000
ehci_hcd 0000:00:0a.1: USB 0.0 started, EHCI 1.00
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
ohci_hcd 0000:00:0a.0: OHCI Host Controller
ohci_hcd 0000:00:0a.0: new USB bus registered, assigned bus number 2
ohci_hcd 0000:00:0a.0: irq 111, io mem 0x18022000
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 2 ports detected
xhci_hcd 0000:00:0b.0: xHCI Host Controller
xhci_hcd 0000:00:0b.0: new USB bus registered, assigned bus number 3
xhci_hcd 0000:00:0b.0: irq 112, io mem 0x18023000
xhci_hcd 0000:00:0b.0: Failed to enable MSI-X
xhci_hcd 0000:00:0b.0: failed to allocate MSI entry
usb usb3: No SuperSpeed endpoint companion for config 1  interface 0 altsetting 0 ep 129: using minimum values
xHCI xhci_add_endpoint called for root hub
xHCI xhci_check_bandwidth called for root hub
hub 3-0:1.0: USB hub found
hub 3-0:1.0: 1 port detected
usbcore: registered new interface driver usblp
csw_retry 100
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
u32 classifier
    Actions configured
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 10
lo: Disabled Privacy Extensions
IPv6 over IPv4 tunneling driver
sit0: Disabled Privacy Extensions
ip6tnl0: Disabled Privacy Extensions
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
Northstar brcmnand NAND Flash Controller driver, Version 0.1 (c) Broadcom Inc. 2012
NAND device: Manufacturer ID: 0xec, Chip ID: 0xf1 (Samsung NAND 128MiB 3,3V 8-bit)
Spare area=64 eccbytes 56, ecc bytes located at:
2 3 4 5 6 7 8 9 10 11 12 13 14 15 18 19 20 21 22 23 24 25 26 27 28 29 30 31 34 35 36 37 38 39 40 41 42 43 44 45 46 47 50 51 52 53 54 55 56 57 583
Available 7 bytes at (off,len):
(1,1) (16,2) (32,2) (48,2) (0,0) (0,0) (0,0) (0,0)
Scanning device for bad blocks
Options: NO_AUTOINCR,NO_PADDING,CACHEPRG,COPYBACK,NO_READRDY,BBT_SCAN2NDPAGE,
Creating 2 MTD partitions on "brcmnand":
0x000002180000-0x000007b00000 : "brcmnand"
0x000007b00000-0x000008000000 : "OpenVPN"
SQUASHFS error: Xattrs in filesystem, these will be ignored
VFS: Mounted root (squashfs filesystem) readonly on device 31:15.
devtmpfs: mounted
Freeing init memory: 220K
[sighandler]: No more events to be processed, quitting.
[cleanup]: Waiting for children.
[cleanup]: All children terminated.
Reading board data...
WSC UUID: 0x88020f05fab1a5863655d0fd2cd61bc1
NTP synchronized date/time: Thu Dec 26 17:36:12 2013
MAC address of 1st STA connected: 38-AA-3C-B9-D7-72
wl: wl driver adapter not found
wl: wl driver adapter not found
wl: wl driver adapter not found
wl: wl driver adapter not found
invalid RF magic!
No RF parameters! Use default.
### main:1226 Set Normal Power!
Initialise conn table 2048 entries
insmod: proxyarp.ko: no module by that name found
insmod: usbcore.ko: no module by that name found
insmod: ehci-hcd.ko: no module by that name found
insmod: wl_high.ko: no module by that name found
eth3: cmd=14: No such device
wl1 not up in 3 sec
insmod: xhci-hcd.ko: no module by that name found
insmod: ehci-hcd.ko: no module by that name found
insmod: ohci-hcd.ko: no module by that name found
Hit enter to continue...WARNING: console log level set to 1
killall: upnp: no process killed
upnp: No such file or directory
killall: wps_monitor: no process killed
killall: wps_ap: no process killed
killall: wps_enr: no process killed

### wps_wfi_init(): <wl0_wfi_enable=(null)><wl1_wfi_enable=(null)>WFI is not enabled ###
Netgear deep_scan: start_count =1  end_count=4 , count=11, data_deep_buf=0x276f0
acsd: Netgear deep scan in progress ...
acsd: Netgear deep scan in progress ...
acsd: Netgear deep scan in progress ...
acsd: Netgear deep scan in progress ...
acsd: Netgear deep scan in progress ...
acsd: Netgear deep scan in progress ...
Netgear deep_scan: start_count =5  end_count=8 , count=11, data_deep_buf=0x276f0
acsd: Netgear deep scan in progress ...
acsd: Netgear deep scan in progress ...
acsd: Netgear deep scan in progress ...
acsd: Netgear deep scan in progress ...
acsd: Netgear deep scan in progress ...
acsd: Netgear deep scan in progress ...
Netgear deep_scan: start_count =9  end_count=11 , count=11, data_deep_buf=0x276f0
acsd: Netgear deep scan in progress ...
acsd: Netgear deep scan in progress ...
acsd: Netgear deep scan in progress ...
acsd: Netgear deep scan in progress ...
acsd: Netgear deep scan in progress ...
acs_ntgr_sanity_check_bgnoise min noise = -87 max noise =-61 ch_stats->count=11
acs_ntgr_sanity_check_bgnoise is sunny
acsd: Netgear selected channel spec: 0x1004 control channel:4
acs_netgear_chspec_change_wlu_wld selected chan.control=4 selected_chspec=4100
index: 4 : Optimized
Reading board data...
acsd: scan in progress ...
WSC UUID: 0x88020f05fab1a5863655d0fd2cd61bc1
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
cp: cannot stat '/usr/config/netatalk/AppleVolumes.default': No such file or directory
acsd: scan in progress ...
cp: cannot stat '/usr/config/avahi/services/http.service': No such file or directory
cp: cannot stat '/usr/config/avahi/services/smbd.service': No such file or directory
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
sh: avahi-daemon: not found
acsd: scan in progress ...
ACSD >>acs_candidate_score_busy(2264): busy check failed for chanspec: 0x1002
ACSD >>acs_candidate_score_intf(2300): intf check failed for chanspec: 0x1002
ACSD >>acs_candidate_score_busy(2264): busy check failed for chanspec: 0x1003
ACSD >>acs_candidate_score_intf(2300): intf check failed for chanspec: 0x1003
ACSD >>acs_candidate_score_busy(2264): busy check failed for chanspec: 0x1004
ACSD >>acs_candidate_score_intf(2300): intf check failed for chanspec: 0x1004
ACSD >>acs_candidate_score_busy(2264): busy check failed for chanspec: 0x1006
ACSD >>acs_candidate_score_intf(2300): intf check failed for chanspec: 0x1006
ACSD >>acs_candidate_score_busy(2264): busy check failed for chanspec: 0x1008
ACSD >>acs_candidate_score_intf(2300): intf check failed for chanspec: 0x1008
ACSD >>acs_candidate_score_busy(2264): busy check failed for chanspec: 0x1009
ACSD >>acs_candidate_score_intf(2300): intf check failed for chanspec: 0x1009
ACSD >>acs_candidate_score_busy(2264): busy check failed for chanspec: 0x100a
ACSD >>acs_candidate_score_intf(2300): intf check failed for chanspec: 0x100a
acsd: Netgear selected channel spec: 0x1008 control channel:8
Request finished

###################################mount openvpn mtdblock17
interface br0 IP address is 192.168.1.1
info, udhcp server (v0.9.8) started
error, unable to parse 'option wins '
error, unable to parse 'option domain '
sh: /sbin/tmd: not found
mevent start...
opened loopback socket 3
POT integrity check OK.
POT time is up.
open /tmp/2g_chek_stat fail
open /tmp/5g_chek_stat fail
shm ID: 32769
Get a correct Segment_ID: 32769 and semaphore ID:32769
Can't find handler for ASP command: wlg_cgi_get_isolation_status(0);
Can't find handler for ASP command: wlg_cgi_get_isolation_status(1);
Can't find handler for ASP command: eco_get_redirect_link();
Can't find handler for ASP command: devices_cgi_get_acl_device_table("DEV_control");
Can't find handler for ASP command: devices_cgi_get_acl_white_table();
Can't find handler for ASP command: devices_cgi_get_acl_black_table();
Can't find handler for ASP command: devices_cgi_get_show_access_ctrl_settings();
Can't find handler for ASP command: devices_cgi_get_acl_device_table("DEV_device", "wired");
Can't find handler for ASP command: devices_cgi_get_acl_device_table("DEV_device", "wireless");
Can't find handler for ASP command: wlg_cgi_get_isolation_status();
Can't find handler for ASP command: usb_cgi_get_register_state();
Can't find handler for ASP command: usb_cgi_get_invite_state();
Can't find handler for ASP command: cdl_cgi_set_hijack(0);
Can't find handler for ASP command: cdl_cgi_set_hijack(1);
insmod: usbcore.ko: no module by that name found
insmod: ehci-hcd.ko: no module by that name found
insmod: ohci-hcd.ko: no module by that name found
insmod: usb-storage.ko: no module by that name found
mount: mounting none on /proc/bus/usb failed: Device or resource busy
IOCTL_AG_REGION_SET: English
Info: No FWPT default policies.
Start DHCP client daemon
info, udhcp client (v0.9.8) started
eth0: No such process
agnat QOS enable!
error open: /etc/netatalk/AppleVolumes.default
add active user:192.168.1.50
httpd: ipv6 socket bound in 80.
httpd: socket bound in 0.0.0.0:443.
minidlan :scan files




minidlan:scan finished


route: ioctl 0x890c failed: No such process
killall: dhcp6c: no process killed
killall: rtsol: no process killed
killall: IPv6-relay: no process killed
killall: pppdv6: no process killed
killall: dhcp6s: no process killed
killall: radvd: no process killed
route: ioctl 0x890c failed: No such process
killall: dhcp6s: no process killed
killall: radvd: no process killed
Hit enter to continue...


BusyBox v1.7.2 (2015-06-08 21:45:58 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

#

Thanks. The problem is simple to fix. The results for you are still bad. If you have not a backup of every partition from before openwrt installation, then you would probably have to get a new device.

The problem is not the POT or the 2 T_Meters. This space is probably read only mounted.

The problem is this vaule: 0x000008000000

Thats WAAAYYY too huge. Some dev who had written the support for this device made wrong calculation. 0x00000058e8dc + 0x000002180000 is not 0x000008000000. He saw maybe 0x00000058e8dc with 7 values behind the last 0. But they are 6. The calculation is mess.

What happened now:
Linux tried to write inside the huge memory amount of 0x000008000000. When you do this, when the max value of the flash chip is overwritten, it start to write in some random places on the memory. Now some important data is overwritten. You are "maybe" lucky that your u-boot still works. "Maybe" because your device is already messed up and as far as i know unfixable wituout the backup of the overwritten partitions.

The support for this device should suddenly be taken down before more customer devices are killed. I will fill up suddenly a bug report to take down the support for this device or to fix the values.

I see. The thing is that as long as the bootloader works, i can reflash the stock which works fine. It would be bad if the bootloader gets overwritten, because I don't see any other way to flash it without working bootloader ( cfe ). I think I flash back the stock until this is fixed, to avoid accidental ovewrite of the bootloader. I assume it's not a difficult task to adjust the partition sizes. Let me know the bug id if you open one please.

Will open it and provide the pictures, but according to the stock fw, it's 128MB flash

Northstar brcmnand NAND Flash Controller driver, Version 0.1 (c) Broadcom Inc. 2012
NAND device: Manufacturer ID: 0xec, Chip ID: 0xf1 (Samsung NAND 128MiB 3,3V 8-bit)

the stock uses up to 0x000002180000 which is around 32MB. I guess it would be safe to use this in openwrt, and is also enough room. another thing is that in stock the linux partition starts at 0x000000380000 while in openwrt starts at 0x00000038001c. what's in the gap between 00-1c ?

(Last edited by nroberto13 on 26 Dec 2015, 13:43)

Then there are maybe some files on the oem installation behind the used memory and those are not mapped propperly.
I think you already had this situation:
oem -> openwrt -> oem -> openwrt.

Does the second (or later) openwrt installation had again proper wifi coverage?

Yes, until first cold restart of openwrt, the coverage is fine every time. Just as a sidenote, it's not as good as the stock, but at least better than the 2m coverage. With stock wifi analyzer shows up to -40 dbm signal near to router with openwrt until first cold restart it goes up to maybe -55 - -60 dbm, but at least there is coverage in the house.

Do you happen to know where in the sources can the layout be modified? I could try to build an image.

kelhgvrb wrote:

The problem is this vaule: 0x000008000000

Thats WAAAYYY too huge. Some dev who had written the support for this device made wrong calculation. 0x00000058e8dc + 0x000002180000 is not 0x000008000000. He saw maybe 0x00000058e8dc with 7 values behind the last 0. But they are 6. The calculation is mess.

Maybe it's some messing user can't make a correct calculation? 0x000008000000 is 134'217'728 which is 128 MiB, exactly the size of flash in this device.

The same nonsense problem was reported in:
https://dev.openwrt.org/ticket/21449

Sorry Zajec, didn't want to offend anyone, I was just thinking of the differences between stock and openwrt to figure out possible causes.
Does the fact that kernel reports the following mean anything?
  [    0.130241] CPU: WARNING: CPU(s) started in wrong/inconsistent modes (primary CPU mode 0x13)
[    0.130247] CPU: This may indicate a broken bootloader or firmware.

This happens after first cold restart.
This made me think the boot partition gets overwritten.
Than I had a look at part layouy, and saw there are differences.
The stock uses only 32mb while openwrt uses 128mb.

nroberto13 wrote:

Does the fact that kernel reports the following mean anything?
  [    0.130241] CPU: WARNING: CPU(s) started in wrong/inconsistent modes (primary CPU mode 0x13)
[    0.130247] CPU: This may indicate a broken bootloader or firmware.

No, as long as you don't get any random crashes. It's just a bugged bootloader (CFE).

nroberto13 wrote:

The stock uses only 32mb while openwrt uses 128mb.

No, it doesn't:

0x000002180000-0x000007b00000 : "brcmnand"
0x000007b00000-0x000008000000 : "OpenVPN"

I don't see this partition in stock. Would you please have a look at my second post in thia thread where I copied the layout I see in stock.

Would you please give me directions where in sources could I change the size of firmware linux and ubi partitions? To match my stock layout. I mean to do not use more than the stock.

Sorry, I didn't see further down in the log are the 2 additional partitions you mentioned, my bad.

The discussion might have continued from here.