OpenWrt Forum Archive

Topic: wgt634u after flash openwrt-wgt634u-2.4-squashfs.bin kernel panic

The content of this topic has been archived on 3 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

hi,

what i have done:
1. flash openwrt-wgt634u-2.6-squashfs.bin > flash ok,flash time 5min, booting works fine
2. flash openwrt-wgt634u-2.4-squashfs.bin >  flash ok,flash time only 30sec.!!! no booting posible jffs errors
3. flash openwrt-wgt634u-2.6-squashfs.bin > flash ok,flash time only 30sec.???? boot with this errors:

CFE> ifconfig eth0 -addr=192.168.2.1 -mask=255.255.255.0
Device eth0:  hwaddr 00-0F-B5-0E-6E-29, ipaddr 192.168.2.1, mask 255.255.255.0
        gateway not set, nameserver not set
*** command status = 0
CFE> flash -noheader 192.168.2.6:openwrt-wgt634u-2.6-squashfs.bin flash0.os
Reading 192.168.2.6:openwrt-wgt634u-2.6-squashfs.bin: Done. 2396160 bytes read
Programming...done. 2396160 bytes written
*** command status = 0
CFE> reset


CFE version 1.0.34 for BCM95365R (32bit,SP,LE)
Build Date: Tue Feb 24 03:21:41 CST 2004 (root@jackylinux)
Copyright (C) 2000,2001,2002 Broadcom Corporation.

Add MAC client version(DNI).
Initializing Arena.
Initializing Devices.
et0: Broadcom BCM47xx 10/100 Mbps Ethernet Controller
CPU type 0x29007: 200MHz
Total memory: 0x2000000 bytes (32MB)

Total memory used by CFE:  0x81BB1280 - 0x82000000 (4517248)
Initialized Data:          0x81BB1280 - 0x81BB3E90 (11280)
BSS Area:                  0x81BB3E90 - 0x81BB45D0 (1856)
Local Heap:                0x81BB45D0 - 0x81FB45D0 (4194304)
Stack Area:                0x81FB45D0 - 0x81FB65D0 (8192)
Text (code) segment:       0x81FB65E0 - 0x81FFFFB0 (301520)
Boot area (physical):      0x01B70000 - 0x01BB0000
Relocation Factor:         I:E23B65E0 - D:01BB0280

configure vlans
*****************************************************************
*********************** VLAN Driver initial  ********************
*****************************************************************
Process LAN port(2-5) vlan Architecture...
SUCCESS: trying to create VLAN 0 for switch
SUCCESS: trying to add LAN port

Process WAN port(2-5) vlan Architecture...
SUCCESS: trying to create VLAN 0 for switch
SUCCESS: trying to add WAN port
SUCCESS: enable ports  success
configure vlans...done
Device eth0:  hwaddr 00-0F-B5-0E-6E-29, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Loader:elf Filesys:raw Dev:flash0.os File: Options:(null)
***************************
****  MAC Client V1.0  ****
***************************
et0macaddr value :flag =0 value=00-0f-b5-0e-6e-29
et1macaddr value :flag =0 value=00-0f-b5-0e-6e-2a
MAC exist at least one
system ethernet mac exist and not default....
Skip mac client process.....
Loading: 0x80001000/3732 Entry at 0x80001000
Closing network.
et0: link down
Starting program at 0x80001000
Linux version 2.6.16.7 (tomek@xenon) (gcc version 3.4.4 (OpenWrt-2.0)) #1 Sat Sep 16 00:04:11 CEST 2006
CPU revision is: 00029007
early_nvram_init: WGT634U NVRAM found.
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
Built 1 zonelists
Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 init=/etc/preinit noinitrd console=ttyS0,115200
Primary instruction cache 8kB, physically tagged, 2-way, linesize 16 bytes.
Primary data cache 4kB, 2-way, linesize 16 bytes.
Synthesized TLB refill handler (19 instructions).
Synthesized TLB load handler fastpath (31 instructions).
Synthesized TLB store handler fastpath (31 instructions).
Synthesized TLB modify handler fastpath (30 instructions).
PID hash table entries: 256 (order: 8, 4096 bytes)
Using 100.000 MHz high precision timer.
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 29900k/32768k available (1981k kernel code, 2852k reserved, 258k data, 124k init, 0k highmem)
Mount-cache hash table entries: 512
Checking for 'wait' instruction...  unavailable.
NET: Registered protocol family 16
PCI: fixing up bridge
PCI: Fixing up device 0000:01:00.0
squashfs: version 3.0 (2006/03/15) Phillip Lougher
devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
JFFS2 version 2.2. (NAND) (C) 2001-2003 Red Hat, Inc.
Initializing Cryptographic API
io scheduler noop registered
io scheduler anticipatory registered (default)
Serial: 8250/16550 driver $Revision: 1.90 $ 2 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = 3) is a 16550A
serial8250: ttyS1 at MMIO 0x0 (irq = 3) is a 16550A
b44.c:v0.97 (Nov 30, 2005)
PCI: Enabling device 0000:00:01.0 (0000 -> 0002)
eth0: Broadcom 47xx 10/100BaseT Ethernet 00:0f:b5:0e:6e:29
Physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
Intel/Sharp Extended Query Table at 0x0031
Using buffer write method
cfi_cmdset_0001: Erase suspend on write enabled
Flash device: 0x800000 at 0x1c000000
bootloader size flag: 3
Creating 5 MTD partitions on "Physically mapped flash":
0x00000000-0x00060000 : "cfe"
0x000a0000-0x007e0000 : "linux"
0x00149400-0x0029a000 : "rootfs"
mtd: partition "rootfs" doesn't start on an erase block boundary -- force read-only
0x00060000-0x00080000 : "nvram"
0x002a0000-0x007e0000 : "OpenWrt"
NET: Registered protocol family 2
IP route cache hash table entries: 512 (order: -1, 2048 bytes)
TCP established hash table entries: 2048 (order: 1, 8192 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
ip_conntrack version 2.4 (256 buckets, 2048 max) - 244 bytes per conntrack
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP vegas registered
NET: Registered protocol family 1
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
attempt to access beyond end of device
mtdblock2: rw=0, want=2696, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2698, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2700, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2702, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2704, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2706, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2708, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2710, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2712, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2714, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2716, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2718, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2720, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2722, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2724, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2726, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2728, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2730, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2732, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2734, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2736, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2738, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2740, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2742, limit=2694
attempt to access beyond end of device
mtdblock2: rw=0, want=2744, limit=2694
VFS: brelse: Trying to free free buffer
Badness in __brelse at fs/buffer.c:1275
Call Trace: [<800bf98c>]  [<800bf7c8>]  [<800e7040>]  [<800e96e8>]  [<8007ad2c>]  [<800ebd70>]  [<801ee6ac>]  [<80050518>]
VFS: brelse: Trying to free free buffer
Badness in __brelse at fs/buffer.c:1275
Call Trace: [<800bf98c>]  [<800bf7c8>]  [<800e7040>]  [<800e96e8>]  [<8007ad2c>]  [<800ebd70>]  [<801ee6ac>]  [<80050518>]
VFS: brelse: Trying to free free buffer
Badness in __brelse at fs/buffer.c:1275
Call Trace: [<800bf98c>]  [<800bf7c8>]  [<800e7040>]  [<800e96e8>]  [<8007ad2c>]  [<800ebd70>]  [<801ee6ac>]  [<80050518>]
VFS: brelse: Trying to free free buffer
Badness in __brelse at fs/buffer.c:1275
Call Trace: [<800bf98c>]  [<800bf7c8>]  [<800e7040>]  [<800e96e8>]  [<8007ad2c>]  [<800ebd70>]  [<801ee6ac>]  [<80050518>]
VFS: brelse: Trying to free free buffer
Badness in __brelse at fs/buffer.c:1275
Call Trace: [<800bf98c>]  [<800bf7c8>]  [<800e7040>]  [<800e96e8>]  [<8007ad2c>]  [<800ebd70>]  [<801ee6ac>]  [<80050518>]
VFS: brelse: Trying to free free buffer
Badness in __brelse at fs/buffer.c:1275
Call Trace: [<800bf98c>]  [<800bf7c8>]  [<800e7040>]  [<800e96e8>]  [<8007ad2c>]  [<800ebd70>]  [<801ee6ac>]  [<80050518>]
VFS: brelse: Trying to free free buffer
Badness in __brelse at fs/buffer.c:1275
Call Trace: [<800bf98c>]  [<800bf7c8>]  [<800e7040>]  [<800e96e8>]  [<8007ad2c>]  [<800ebd70>]  [<801ee6ac>]  [<80050518>]
VFS: brelse: Trying to free free buffer
Badness in __brelse at fs/buffer.c:1275
Call Trace: [<800bf98c>]  [<800bf7c8>]  [<800e7040>]  [<800e96e8>]  [<8007ad2c>]  [<800ebd70>]  [<801ee6ac>]  [<80050518>]
SQUASHFS error: sb_bread failed reading block 0x55b
SQUASHFS error: Unable to read cache block [14ee8d:a9a]
SQUASHFS error: Unable to read inode [14ee8d:a9a]
jffs2: Flash size not aligned to erasesize, reducing to 1280KiB
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x7368 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0158 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xe3ca instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x0004 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xf7fe instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x0003 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0140 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0b23 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000002c: 0xa60a instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0100 instead
Further such events for this erase block will not be printed
Empty flash at 0x00000070 ends at 0x00000074
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020000: 0x5477 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020004: 0xafc1 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020008: 0x0bf5 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0002000c: 0xb8eb instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020010: 0x3867 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020014: 0xd0f6 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020018: 0xc870 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0002001c: 0xec60 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020020: 0x246a instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020024: 0x233f instead
Further such events for this erase block will not be printed
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040000: 0xd2a5 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040004: 0x4558 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040008: 0x0e5a instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0004000c: 0x9e60 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040010: 0x9f78 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040014: 0xe52d instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040018: 0xa830 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0004001c: 0xa2f0 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040020: 0x4f3c instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040024: 0x09c7 instead
Further such events for this erase block will not be printed
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060000: 0x87ff instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060004: 0x5418 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060008: 0xfd9c instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0006000c: 0x5f96 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060010: 0xa51d instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060014: 0x580b instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060018: 0x7b69 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0006001c: 0x65ce instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060020: 0xa5d9 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060024: 0x6711 instead
Further such events for this erase block will not be printed
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080000: 0x8e87 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080004: 0x85e4 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080008: 0xd370 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0008000c: 0x30ab instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080010: 0x861a instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080014: 0x2602 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080018: 0x1a56 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0008001c: 0x3c89 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080020: 0x9a63 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080024: 0xa058 instead
Further such events for this erase block will not be printed
Old JFFS2 bitmask found at 0x0008546c
You cannot use older JFFS2 filesystems with newer kernels
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0000: 0x6a23 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0004: 0x8ad8 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0008: 0x2980 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a000c: 0xb18c instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0010: 0x0040 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0014: 0x5187 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0018: 0x73f6 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a001c: 0x4351 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0020: 0x4bb9 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0024: 0x161c instead
Further such events for this erase block will not be printed
Old JFFS2 bitmask found at 0x000b36c0
You cannot use older JFFS2 filesystems with newer kernels
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000c0000: 0x5220 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000c0004: 0x469b instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000c0008: 0x2a13 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000c000c: 0x01d7 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000c0010: 0x1683 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000c0014: 0xa5d5 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000c0018: 0x4329 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000c001c: 0xe6fa instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000c0020: 0x0de1 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000c0024: 0xf710 instead
Further such events for this erase block will not be printed
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000e0000: 0x6bd0 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000e0004: 0xa38b instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000e0008: 0x8b52 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000e000c: 0x11be instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000e0010: 0x25b9 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000e0014: 0x055c instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000e0018: 0xae4a instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000e001c: 0x9cc5 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000e0020: 0xe581 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000e0024: 0xe4e7 instead
Further such events for this erase block will not be printed
Old JFFS2 bitmask found at 0x000e3d58
You cannot use older JFFS2 filesystems with newer kernels
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00100000: 0x0248 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00100004: 0xc026 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00100008: 0x9757 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0010000c: 0xf7be instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00100010: 0x0496 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00100014: 0x80c4 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00100018: 0xdf18 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0010001c: 0xf6f8 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00100020: 0x5837 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00100024: 0xf9d6 instead
Further such events for this erase block will not be printed
Old JFFS2 bitmask found at 0x0010dca8
You cannot use older JFFS2 filesystems with newer kernels
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00120000: 0x4a35 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00120004: 0xfc37 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00120008: 0xd8ed instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0012000c: 0x7d10 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00120010: 0x933f instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00120014: 0xe2ba instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00120018: 0x3d5f instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0012001c: 0x7eab instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00120020: 0xcf10 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00120024: 0x01ce instead
Further such events for this erase block will not be printed
Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
empty_blocks 0, bad_blocks 0, c->nr_blocks 10
VFS: Cannot open root device "mtdblock2" or unknown-block(31,2)
Please append a correct "root=" boot option
Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(31,2)
------------------------------------------------------------------------------------------------------
have somebody a idea why the flash time is now so short ??
i think that only a part of the image is write to flash but i don't know why.
please help

i found the solution for my problem.
after load kernel over the network flash time is now normal ~3min-4min:

CFE> boot -elf -tftp 192.168.1.6:vmlinux

you found the kernel in openwrt/build_mipsel/linux-2.6-brcm/linux-2.6.17/vmlinux

The discussion might have continued from here.