Modify

Opened 11 years ago

Closed 10 years ago

Last modified 4 years ago

#1710 closed defect (fixed)

Broadcom BCM4710 does not boot on latest kamikaze svn 2.6 kernel

Reported by: alex@… Owned by: developers
Priority: highest Milestone: Barrier Breaker 14.07
Component: kernel Version:
Keywords: Broadcom BCM4710 cpu boot problem Cc:

Description

svn #6306 boots fine, from #6593 upto #7250 neither wrc-1000 or RT-220 boot. It looks like at some point from > #6306 and < #6593 the problem arised.

Attachments (0)

Change History (21)

comment:1 Changed 11 years ago by anonymous

on wl500-gp works well.

comment:2 follow-up: Changed 11 years ago by acoul <alex@…>

it is also working fine on netgear wgt634u. rt-220, 210, wrc-1000 and similar devices though can not boot with latest kamikaze svn upto # 7276

comment:3 in reply to: ↑ 2 Changed 11 years ago by acoul <alex@…>

Replying to acoul <alex@ozo.com>:

it is also working fine on netgear wgt634u. rt-220, 210, wrc-1000 and similar devices though can not boot with latest kamikaze svn upto # 7276

that is for 2.6 kernel, 2.4 work just fine

comment:4 Changed 11 years ago by anonymous

see Ticket #1502, last functional revision is r6563 with now removed target brcm-2.6 - on Asus WL-500g

comment:5 Changed 11 years ago by jhansen@…

Can you connect a serial port and post the output for the rt-220, 210, and/or wrc-1000? wgt634u and asus wl-500gp work great for me.

comment:6 Changed 11 years ago by acoul <alex@…>

I have no time to do any tests at this time. I will try a latest kamikaze svn on a rt220 device and give feedback after a few days

comment:7 Changed 11 years ago by nbd

  • Resolution set to duplicate
  • Status changed from new to closed

see #1984

comment:8 Changed 11 years ago by acoul <alex@…>

  • Resolution duplicate deleted
  • Status changed from closed to reopened

RT220 is still unable to boot a brcm47xx-2.6 jffs2/squashfs svn #7903 image. svn #6306 works like a charm. No serial console available for further report. device keeps rebooting when flashed with latest image ... at some point I will get access to a serial uart but not any time soon ...

comment:9 Changed 11 years ago by nbd

please try again after the latest cpu cache fixes

comment:10 Changed 11 years ago by acoul <alex@…>

we have a go on a toshiba wrc-1000, I will try an Askey RT220 later but should be the same. The only problem is that the reboot command does not cycle the unit therof you can't login either by telnet, ssh etc. no serial console for further debug report, sorry. Thank you nbd.

KAMIKAZE (bleeding edge, r8214)
Linux version 2.6.22.1 (alex@aifnis) (gcc version 4.1.2) #2 Sun Jul 29 13:59:58 EEST 2007
CPU revision is: 00024000
ssb: Core 0 found: SDRAM (cc 0x803, rev 0x00, vendor 0x4243)
ssb: Core 1 found: ILine 20 (cc 0x801, rev 0x00, vendor 0x4243)
ssb: Core 2 found: Fast Ethernet (cc 0x806, rev 0x00, vendor 0x4243)
ssb: Core 3 found: V90 (cc 0x807, rev 0x00, vendor 0x4243)
ssb: Core 4 found: USB 1.1 Hostdev (cc 0x808, rev 0x00, vendor 0x4243)
ssb: Core 5 found: PCI (cc 0x804, rev 0x00, vendor 0x4243)
ssb: Core 6 found: MIPS (cc 0x805, rev 0x00, vendor 0x4243)
ssb: Core 7 found: EXTIF (cc 0x811, rev 0x00, vendor 0x4243)
ssb: Core 8 found: Fast Ethernet (cc 0x806, rev 0x00, vendor 0x4243)
ssb: Initializing MIPS core...
ssb: set_irq: core 0x0806, irq 2 => 2
ssb: set_irq: core 0x0804, irq 4 => 3
ssb: set_irq: core 0x0806, irq 0 => 4
ssb: Sonics Silicon Backplane found at address 0x18000000
Determined physical RAM map:
 memory: 01000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
On node 0 totalpages: 4096
  Normal zone: 32 pages used for memmap
  Normal zone: 0 pages reserved
  Normal zone: 4064 pages, LIFO batch:0
Built 1 zonelists.  Total pages: 4064
Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 init=/etc/preinit noinitrd console=ttyS0,115200
Enabling BCM4710A0 cache workarounds.
Primary instruction cache 8kB, physically tagged, 2-way, linesize 16 bytes.
Primary data cache 4kB, 2-way, linesize 16 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (31 instructions).
Synthesized TLB modify handler fastpath (30 instructions).
PID hash table entries: 64 (order: 6, 256 bytes)
Using 62.400 MHz high precision timer.
Dentry cache hash table entries: 2048 (order: 1, 8192 bytes)
Inode-cache hash table entries: 1024 (order: 0, 4096 bytes)
Memory: 13628k/16384k available (2031k kernel code, 2756k reserved, 296k data, 120k init, 0k highmem)
Calibrating delay loop... 82.68 BogoMIPS (lpj=165376)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
ssb: PCIcore in host mode found
registering PCI controller with io_map_base unset
PCI: fixing up bridge
PCI: Setting latency timer of device 0000:00:00.0 to 64
PCI: Fixing up device 0000:00:00.0
Time: MIPS clocksource has been installed.
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 512 (order: 0, 4096 bytes)
TCP bind hash table entries: 512 (order: -1, 2048 bytes)
TCP: Hash tables configured (established 512 bind 512)
TCP reno registered
squashfs: version 3.0 (2006/03/15) Phillip Lougher
Registering mini_fo version $Id$
JFFS2 version 2.2. (NAND) Β© 2001-2006 Red Hat, Inc.
io scheduler noop registered
io scheduler deadline registered (default)
Serial: 8250/16550 driver $Revision: 1.90 $ 2 ports, IRQ sharing enabled
b44.c:v1.01 (Jun 16, 2006)
eth0: Broadcom 10/100BaseT Ethernet 00:90:96:45:03:f4
eth1: Broadcom 10/100BaseT Ethernet 00:90:96:45:03:f5
flash init: 0x1fc00000 0x00400000
Physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
 Amd/Fujitsu Extended Query Table at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
Flash device: 0x400000 at 0x1fc00000
bootloader size: 262144
Creating 4 MTD partitions on "Physically mapped flash":
0x00000000-0x00040000 : "cfe"
0x00040000-0x003f0000 : "linux"
0x00100000-0x003f0000 : "rootfs"
mtd: partition "rootfs" set to be root filesystem
split_squasfs: no squashfs found in "Physically mapped flash"
0x003f0000-0x00400000 : "nvram"
nf_conntrack version 0.5.0 (128 buckets, 1024 max)
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP vegas registered
NET: Registered protocol family 1
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (jffs2 filesystem).
Freeing unused kernel memory: 120k freed
Warning: unable to open an initial console.
Algorithmics/MIPS FPU Emulator v1.5
diag: Router model not detected.
b44: eth0: Link is up at 100 Mbps, full duplex.
b44: eth0: Flow control is off for TX and off for RX.
Probing device eth0: No Robo switch in managed mode found
Probing device eth1: [/extra/openwrt/kamikaze-fresh/trunk/build_mipsel/linux-2.6-brcm47xx/kmod-switch/switch-robo.c:91] SIOCGETCPHYRD failed!
[/extra/openwrt/kamikaze-fresh/trunk/build_mipsel/linux-2.6-brcm47xx/kmod-switch/switch-robo.c:91] SIOCGETCPHYRD failed!
No Robo switch in managed mode found
Probing device eth2: No such device
Probing device eth3: No such device
BFL_ENETADM not set in boardflags. Use force=1 to ignore.
b44: eth0: Link is up at 100 Mbps, full duplex.
b44: eth0: Flow control is off for TX and off for RX.
b44: eth0: Link is up at 100 Mbps, full duplex.
b44: eth0: Flow control is off for TX and off for RX.
Probing device eth0: No Robo switch in managed mode found
Probing device eth1: [/extra/openwrt/kamikaze-fresh/trunk/build_mipsel/linux-2.6-brcm47xx/kmod-switch/switch-robo.c:91] SIOCGETCPHYRD failed!
[/extra/openwrt/kamikaze-fresh/trunk/build_mipsel/linux-2.6-brcm47xx/kmod-switch/switch-robo.c:91] SIOCGETCPHYRD failed!
No Robo switch in managed mode found
Probing device eth2: No such device
Probing device eth3: No such device
BFL_ENETADM not set in boardflags. Use force=1 to ignore.
root@OpenWrt:/# cat /proc/cpuinfo
system type             : Broadcom BCM47xx
processor               : 0
cpu model               : Broadcom BCM4710 V0.0
BogoMIPS                : 82.68
wait instruction        : no
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : no
hardware watchpoint     : no
ASEs implemented        :
VCED exceptions         : not available
VCEI exceptions         : not available

root@OpenWrt:/# cat /proc/interrupts
           CPU0
  4:        419            MIPS  eth0
  7:      31017            MIPS  timer

ERR:          0

comment:11 Changed 11 years ago by acoul <alex@…>

a reboot -f gives a Segmentation fault

Restarting system.
Please stand by while rebooting the system...
CPU 0 Unable to handle kernel paging request at virtual address 00000000, epc == 8014ca40, ra == 80001fa4
Oops[#1]:
Cpu 0
$ 0   : 00000000 10009000 00000031 80240000
$ 4   : 00000000 00000001 00000001 00000000
$ 8   : 80239b00 80240000 80280000 80280000
$12   : 80280000 078b9664 2abdeee8 2abd97c8
$16   : 01234567 28121969 fee1dead 00000000
$20   : 7fcbeec4 004091e4 00000002 00409958
$24   : 00000001 80001f64
$28   : 80392000 80393dd8 004e3ef4 80001fa4
Hi    : 000000a0
Lo    : 0000008c
epc   : 8014ca40     Not tainted
ra    : 80001fa4 Status: 10009002    KERNEL EXL
Cause : 00000008
BadVA : 00000000
PrId  : 00024000
Modules linked in: switch_core
Process reboot (pid: 1037, threadinfo=80392000, task=8038f800)
Stack : 0002ac77 8011632c 80393df4 28121969 80001fa4 800329cc 803fcbe0 00000001
        00000000 00000000 80033a54 80033a54 00c23603 8005e1d0 803b6000 8007e5f8
        80393e30 00000000 00001f02 00000000 00000000 00000000 00000002 000081a4
        000000a8 00000000 8038f800 80e2c4c4 80e38a54 80e38a20 00030000 2ac2ab80
        8038f800 80e2c4c4 8000d92c 8000d8c0 80e38a20 80393e68 80393ea0 00000001
        ...
Call Trace:[<8011632c>][<80001fa4>][<800329cc>][<80033a54>][<80033a54>][<8005e1d0>][<8007e5f8>][<8000d92c>][<8000d8c0>][<8009886c>][<800988fc>][<800988e4>][<80054968>][<8009bac0>][<80034a40>][<8000bc60>][<80003980>]

Code: afbf0010  8c840000  00a03021 <8c820000> 8c42000c  0040f809  24050080  8fbf0010  00001021

comment:12 Changed 10 years ago by acoul <alex@…>

As of svn #8420 the reboot issue remains. Here is a dmesg output:

Linux version 2.6.22.1 (alex@aifnis) (gcc version 4.2.1) #2 Fri Aug 17 18:18:35 EEST 2007
CPU revision is: 00024000
ssb: Core 0 found: SDRAM (cc 0x803, rev 0x00, vendor 0x4243)
ssb: Core 1 found: ILine 20 (cc 0x801, rev 0x00, vendor 0x4243)
ssb: Core 2 found: Fast Ethernet (cc 0x806, rev 0x00, vendor 0x4243)
ssb: Core 3 found: V90 (cc 0x807, rev 0x00, vendor 0x4243)
ssb: Core 4 found: USB 1.1 Hostdev (cc 0x808, rev 0x00, vendor 0x4243)
ssb: Core 5 found: PCI (cc 0x804, rev 0x00, vendor 0x4243)
ssb: Core 6 found: MIPS (cc 0x805, rev 0x00, vendor 0x4243)
ssb: Core 7 found: EXTIF (cc 0x811, rev 0x00, vendor 0x4243)
ssb: Core 8 found: Fast Ethernet (cc 0x806, rev 0x00, vendor 0x4243)
ssb: Initializing MIPS core...
ssb: set_irq: core 0x0806, irq 2 => 2
ssb: set_irq: core 0x0804, irq 4 => 3
ssb: set_irq: core 0x0806, irq 0 => 4
ssb: Sonics Silicon Backplane found at address 0x18000000
Determined physical RAM map:
 memory: 01000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
On node 0 totalpages: 4096
  Normal zone: 32 pages used for memmap
  Normal zone: 0 pages reserved
  Normal zone: 4064 pages, LIFO batch:0
Built 1 zonelists.  Total pages: 4064
Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 init=/etc/preinit noinitrd console=ttyS0,115200
Enabling BCM4710A0 cache workarounds.
Primary instruction cache 8kB, physically tagged, 2-way, linesize 16 bytes.
Primary data cache 4kB, 2-way, linesize 16 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (31 instructions).
Synthesized TLB modify handler fastpath (30 instructions).
PID hash table entries: 64 (order: 6, 256 bytes)
Using 62.400 MHz high precision timer.
Dentry cache hash table entries: 2048 (order: 1, 8192 bytes)
Inode-cache hash table entries: 1024 (order: 0, 4096 bytes)
Memory: 13648k/16384k available (2019k kernel code, 2736k reserved, 293k data, 116k init, 0k highmem)
Calibrating delay loop... 82.43 BogoMIPS (lpj=164864)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
ssb: PCIcore in host mode found
registering PCI controller with io_map_base unset
PCI: fixing up bridge
PCI: Setting latency timer of device 0000:00:00.0 to 64
PCI: Fixing up device 0000:00:00.0
Time: MIPS clocksource has been installed.
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 512 (order: 0, 4096 bytes)
TCP bind hash table entries: 512 (order: -1, 2048 bytes)
TCP: Hash tables configured (established 512 bind 512)
TCP reno registered
squashfs: version 3.0 (2006/03/15) Phillip Lougher
Registering mini_fo version $Id$
JFFS2 version 2.2. (NAND) Β© 2001-2006 Red Hat, Inc.
io scheduler noop registered
io scheduler deadline registered (default)
Serial: 8250/16550 driver $Revision: 1.90 $ 2 ports, IRQ sharing enabled
b44.c:v1.01 (Jun 16, 2006)
eth0: Broadcom 10/100BaseT Ethernet 00:01:e3:04:62:72
eth1: Broadcom 10/100BaseT Ethernet 00:01:e3:04:62:73
flash init: 0x1fc00000 0x00400000
Physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
 Amd/Fujitsu Extended Query Table at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
Flash device: 0x400000 at 0x1fc00000
bootloader size: 262144
Creating 4 MTD partitions on "Physically mapped flash":
0x00000000-0x00040000 : "cfe"
0x00040000-0x003f0000 : "linux"
0x00100000-0x003f0000 : "rootfs"
mtd: partition "rootfs" set to be root filesystem
split_squasfs: no squashfs found in "Physically mapped flash"
0x003f0000-0x00400000 : "nvram"
nf_conntrack version 0.5.0 (128 buckets, 1024 max)
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP vegas registered
NET: Registered protocol family 1
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (jffs2 filesystem).
Freeing unused kernel memory: 116k freed
Warning: unable to open an initial console.
Algorithmics/MIPS FPU Emulator v1.5
b44: eth0: Link is up at 100 Mbps, full duplex.
b44: eth0: Flow control is off for TX and off for RX.
b44: eth0: Link is up at 100 Mbps, full duplex.
b44: eth0: Flow control is off for TX and off for RX.
b44: eth0: Link is up at 100 Mbps, full duplex.
b44: eth0: Flow control is off for TX and off for RX.
Restarting system.
Please stand by while rebooting the system...
CPU 0 Unable to handle kernel paging request at virtual address 00000000, epc == 8014b280, ra == 80001fac
Oops[#1]:
Cpu 0
$ 0   : 00000000 10009000 00000031 80235b00
$ 4   : 00000000 00000001 00000001 80273da0
$ 8   : 802f5000 80000010 80032f94 fffffff8
$12   : 2abdbd78 0000015b 078b9664 2abdfee8
$16   : 01234567 28121969 fee1dead 00000000
$20   : 00000002 00409264 00000002 00409a28
$24   : 2abda7c8 80001f6c
$28   : 802f6000 802f7dd8 00479714 80001fac
Hi    : 000000a0
Lo    : 0000008c
epc   : 8014b280     Not tainted
ra    : 80001fac Status: 10009002    KERNEL EXL
Cause : 00000008
BadVA : 00000000
PrId  : 00024000
Modules linked in:
Process reboot (pid: 658, threadinfo=802f6000, task=802d1800)
Stack : fee1dead 00000000 802f7df4 00409264 80001fac 800320a8 803f9be0 00000001
        00000000 00000000 80033100 80033100 00c2b603 8005dd2c 80081820 2aaaf000
        802f7e30 003ff000 00001f02 00000000 00000000 00000000 00000002 000081a4
        00000000 000000dc 00000002 802f7e78 803ad000 80238f10 00000000 00409264
        00000002 00409a28 00000001 802f7e98 803ad000 80238f10 00000001 00409264
        ...
Call Trace:[<80001fac>][<800320a8>][<80033100>][<80033100>][<8005dd2c>][<80081820>][<80098638>][<800986d8>][<800986c0>][<800989ac>][<80054268>][<8009b838>][<800340ec>][<8000bb00>][<80003a7c>][<80035ca0>]

Code: afbf0010  8c840000  00a03021 <8c820000> 8c42000c  0040f809  24050080  8fbf0010  00001021

comment:13 Changed 10 years ago by acoul <alex@…>

the boot problem does not occur on a Netgear wgt634u, a Broadcom BCM3302 based CPU. On a Broadcom BCM4710 CPU based board the reboot problem remains as of svn #8430.

system type             : Broadcom BCM47xx
processor               : 0
cpu model               : Broadcom BCM3302 V0.7
BogoMIPS                : 198.14
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : no
hardware watchpoint     : no
ASEs implemented        :
VCED exceptions         : not available
VCEI exceptions         : not available

comment:14 Changed 10 years ago by acoul <alex@…>

this ticket can now close since the units boot ok. I have opened a new ticket #2363 for the reboot segmentation fault issue here: /ticket/2363.html

comment:15 Changed 10 years ago by nbd

  • Resolution set to fixed
  • Status changed from reopened to closed

comment:16 Changed 10 years ago by acoul <alex@…>

  • Resolution fixed deleted
  • Status changed from closed to reopened

I am sad to announce the kamikaze v7.09 does not boot on Broadcom BCM4710 devices. People looking for a working 2.6.19.2 stable kamikaze can get it here: http://wifi.ozo.com/airo/openwrt/firmware/kamikaze/2.6/6306-3.4.6/

madwifi and wireless-tools synced to latest ones.

comment:17 Changed 10 years ago by nbd

  • Resolution set to fixed
  • Status changed from reopened to closed

It boots in trunk, closing ticket again...

comment:18 Changed 9 years ago by acoul <alex@…>

I would like to reopen this ticket in an effort not to loose support for these two routers and probably couple of other similar models out there. I would like to mention that up to trunk 6563, both routers, toshiba wrc-1000 & askey rt-220w which is similar (the askey) to Siemens SE505v1 work rock stable. past kamikaze trunk 6563,the askey router never got a successful boot. toshiba wrc-1000 was able to boot up to trunk 11200 which was the last to use a 2.6.23 kernel. a patched trunk 12308 switched from kernel 2.6.25 to 2.6.23 was also able to boot a toshiba wrc-1000. The wrc-1000 though past kamikaze trunk 6563 does has performance issues as reported on ticket #3310. I've alse created a relative thread on openwrt forum.

comment:19 Changed 9 years ago by acoul <alex@…>

on an askey rt-220 I am getting the following from the dhcpd leases using this image:

1218777267 00:01:e3:04:48:09 192.168.1.60 * 01:00:01:e3:04:48:09

on the wan (eth1) port. by fixing the eth1 bug it would be possible to login to that box from the wan port and see what is wrong with the eth0 not getting detected or properly configured as I have no serial console access on those routers.

comment:20 Changed 9 years ago by acoul <alex at ozo.com>

on askey rt-220 with trunk 12307/gcc-3.4.6

1219089821 00:01:e3:04:48:09 192.168.1.59 * 01:00:01:e3:04:48:09

no ping response

Unicast reply from 192.168.1.59 [00:01:E3:04:48:09]  0.921ms
Unicast reply from 192.168.1.59 [00:01:E3:04:48:09]  0.796ms

arping works though. now if we could have a mac-telnet similar to the one mikrotik one ...

comment:21 Changed 4 years ago by jow

  • Milestone changed from Attitude Adjustment 12.09 to Barrier Breaker 14.07

Milestone Attitude Adjustment 12.09 deleted

Add Comment

Modify Ticket

Action
as closed .
The resolution will be deleted. Next status will be 'reopened'.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.