Wii U Black Screen due to OS Crash

[benoit74]

I have a 32 GB Wii U which suddenly experienced a total black screen, and the gamepad is not synced anymore.

I had a look at the wonderful "Ultimate Wii U Troubleshooting Guide"

- the eMMC is from Hynix...
- UDPIH is not working (the module is properly loading on the Pi Zero, when inserted at the right moment it begins to discuss with the console but seems to fail to load the recovery menu, the LED stays desperatly blue
- after poweron, the led stays blue
- I cannot poweroff the console by a quick press on the power button, I have to press the button for multiple seconds

I never invested any energy into any sort of backup or hack of the Wii U before, so I have to start from zero.

I just deFused the WiiU successfully. I removed the SD Card and inserted a blank 64GB SDCard. I choosed "Format rednand" in the menu and the various DUMP commands, so i now have BOOT1_SLCCPMT.RAW, BOOT1_SLC.RAW, otp.bin, seeprom.bin, seeprom_decrypted.bin, SLCCPMT.RAW and SLC.RAW.

But now I'm stuck. AFAIK, I'm now supposed to benefit from being defused to:
- have a look into syslogs to confirm the eMMC failure
- made a dump of the eMMC (either to use NANDaid - my preference - or redNAND - didn't understood how)

Any guidance to performance these next steps would be welcomed! Thank you in advance!

 

[SDIO]

Can you post the system crash logs? You can dump them in the Backup and Restore Menu?
Also what happens if you try to boot? Can you show the terminal output from that?

 

[benoit74]

Can you post the system crash logs? You can dump them in the Backup and Restore Menu?

In "Backup and Restore", I only have following options:

  Dump SEEPROM & OTP
  Dump OTP via PRSHhax
  Dump SLC.RAW
  Dump SLCCMPT.RAW
  Dump BOOT1_SLC.RAW
  Dump BOOT1_SLCCMPT.RAW
  Dump factory log
  Format redNAND
  Restore SLC.RAW
  Restore SLCCMPT.RAW
  Restore BOOT1_SLC.RAW
  Restore BOOT1_SLCCMPT.RAW
  Restore BOOT1_SLC.IMG
  Restore BOOT1_SLCCMPT.IMG
  Restore seeprom.bin
  Restore redNAND
  Sync SEEPROM boot1 versions with NAND
  Set SEEPROM SATA device type
  Return to Main Menu

The "Dump factory log" is probably not what we are looking for:

0,0,OK,01.04,2013/08/28,15:22,CheckCode=5E66,
0,1,OK,01.04,2013/09/01,08:38,CheckCode=D634$,
0,2,OK,01.00,2013/09/01,08:39,TesterID : 00:09:0D:00:B2:63,
0,3,INFO,01.01,,,DRIVE RFAMP:398 mV (Check),
0,3,INFO,01.01,,,DRIVE RFAMP:400 mV (Change),
0,3,OK,03.02,,17:12,,
0,4,START,03.01,2013/09/03,08:44,Wireless Start,
0,4,OK,03.01,2013/09/03,08:44,MARKO:182A7BFBA9FE$GG:9CE635136A3D$BRLYN:9CE635BB5E48,
0,5,OK,02.50,,,All Passed,
0,6,START,01.68,,,,
0,6,OK,01.68,,,168-32G-EUA-sys3.1.0-usr0.0.1-wii1.1.0-G.ddi,
0,9,OK,01.01,,,WRITE OK LOG,
0,11,OK,01.21,,,All Passed,

In Main Menu I have a "Display crash log" but result is rather cryptic for me (I have no idea where to look for more info on these registers):

Reading SMC crash buffer...
Exception registers:
  R0-R3: 0002ae44 e0c3aade 35004861 a8108880
  R4-R7: 9c4549b2 40ce9016 dac42152 42da6b8e
 R8-R11: 0042207c 12c605a0 3544c400 14688aca
R12-R15: 91572238 800c059e 9118843a 9825ae20

Also what happens if you try to boot? Can you show the terminal output from that?

How can I do that once defused? I do not have such an option (or fail to find/understand it) in Main Menu:

  Patch and boot IOS
  Patch and boot ios_orig.img
  Boot 'ios.img'
  Boot IOP firmware file
  Boot PowerPC ELF file
  Backup and Restore
  Interactive debug console
  PRSH tweaks
> Display crash log
  Clear crash log
  Restart minute
  Hardware reset
  Power off
  Credits

 

[SDIO]

Use this minute: https://github.com/jan-hofmeier/minute_minute/releases
If you try to boot you then also need this stroopwafel: https://github.com/jan-hofmeier/stroopwafel/releases

 

[benoit74]

Thank you!
I achieved to get the logs, but it is a bit weird:
- there are only two files dated from 2023, none from 2024 (the console broke somewhere in second half of 2023) ; one file is dated from 2023-08-19 15:16:02, the other from 2023-08-20 13:40:01 ; no obvious error in any of them
- there are two files with eMMC errors, one from 2021-06-27 10:16:30, one from 2021-06-27 10:21:38, one from 2022-06-22 11:52:30 ; clearly the console worked since then. The error is always identical (only timings vary slightly)

00:02:00:696: ISFS: fs_ops.c(613)Invalid inode name mvplayer-gui.rpl
00;02;00;579: Error: Could not load acquired RPL "mvplayer-gui".
00:03:15:016: mmc_core card err: idx=3, lba=4408320, blks=1024, xfer=0x1, ret=0x00200b40
00:03:15:987: mmc_core card err: idx=3, lba=4441088, blks=1024, xfer=0x1, ret=0x00200b40
00:03:16:025: mmc_core card err: idx=3, lba=4441088, blks=1024, xfer=0x1, ret=0x00200b40
00:03:16:026: mdblk: err=-131099, mid=0x90, prv=0x5c, pnm=[HYNIX ]
00:03:16:055: FSA: ### MEDIA ERROR ###, dev:mlc01, err:-2228230, cmd:11, path:(null)
00:03:16:084: mmc_core card err: idx=3, lba=4441088, blks=1024, xfer=0x1, ret=0x00200b40
00:03:16:122: mmc_core card err: idx=3, lba=4441088, blks=1024, xfer=0x1, ret=0x00200b40
00:03:16:122: mdblk: err=-131099, mid=0x90, prv=0x5c, pnm=[HYNIX ]
00:03:16:152: FSA: ### MEDIA ERROR ###, dev:mlc01, err:-2228230, cmd:11, path:(null)
00;03;16;033: FS: READ_FILE      upid:[15] sts:[MEDIA_ERROR] hnd:[0x3b50963] dst:[0x21ce4980] size:[1] cnt:[1048576] pos:[0]
00;03;16;033: SystemFatal(core0)

How can I try to boot? On the SDcard I have the setup suggested by deFuse but I don't know which menu entry I should select to boot. I would really love to have a clear indication that I have an eMMC issue before moving to more serious changes.

From here, how can I dump the eMMC from minute? It looks like I achieved to make a copy with "Format redNAND" option, is this correct?

Partition layout on SD with 0x076F5000 (0x076F0000) sectors:
FAT32:   0x00000840->0x03AD0000
MLC:     0x03AD0000->0x074F0000
SLC:     0x074F0000->0x075F0000
SLCCMPT: 0x075F0000->0x076F0000

 

[SDIO]

Select "Patch (sd) boot ios (slc)" or on the old one just "Patch and boot".

Yes the format redNAND is correct, but it will wipe your card. It will create a partition containing the MLC. You can then use wfs-extract to extract your data from there.

 

[benoit74]

Great, thank you again!

Here are the terminal logs of a boot.

I don't know what a -26 error in a IOS_PutSemaphore means ... but maybe this is the beginning of an explanation?

Spoiler: Logs

ancast: no patch file `ios.patch`, stubbing...
ancast: reading 0xdfd200 bytes from slc:/sys/title/00050010/1000400a/code/fw.img
ancast: ...00000000 -> 01000000
ancast: ...00100000 -> 01100000
ancast: ...00200000 -> 01200000
ancast: ...00300000 -> 01300000
ancast: ...00400000 -> 01400000
ancast: ...00500000 -> 01500000
ancast: ...00600000 -> 01600000
ancast: ...00700000 -> 01700000
ancast: ...00800000 -> 01800000
ancast: ...00900000 -> 01900000
ancast: ...00a00000 -> 01a00000
ancast: ...00b00000 -> 01b00000
ancast: ...00c00000 -> 01c00000
ancast: ...00d00000 -> 01d00000
ancast: done reading
ancast: decrypting slc:/sys/title/00050010/1000400a/code/fw.img...
ancast: fini
ancast: IOS image is prod 5.5.5+
ancast: pre-parsing plugin `sdmc:/wiiu/ios_plugins/wafel_core.ipx`
ancast: loading plugin `sdmc:/wiiu/ios_plugins/wafel_core.ipx` to 27e00000
ancast: failed to open data `sdmc:/wiiu/ios_plugins/config.ini`!
ancast: loading data to 27f77000
9254f7bf 45ca8289
505276c9 505276c9
ancast: loading data to 27f77320
GPU clocked at: 544.999877MHz
Unmounting SLC...
Shutting down MLC...
sdhc_bus_power(0x0)
Shutting down SD card...
sdhc_bus_power(0x0)
Shutting down interrupts...
Shutting down caches and MMU...
Vectoring to 0x01000300...
Searching for OTP store in patch...
Searching for OTP store in plugins...
OTP store at: 27e23204
we in here kern 0x27e00fc0, base 0x27e00000
Inserted 27e00000 before e0000000 and after 20000000!
Inserted 27e00000 before e0000000 and after 27e00000!
Inserted 27e00000 before e0000000 and after 05200000!
Type Offset VirtAddr PhysAddr FileSiz MemSiz Flg Align
PHDR 0x000034 0x1d000000 0x1d000000 0x00000960 0x00000960 0x000000 0x4
NOTE 0x000934 0x1d000960 0x1d000960 0x000002ac 0x000002ac 0x000000 0x4
LOAD 0x000034 0x1d000000 0x1d000000 0x00000c0c 0x02b00000 0x000000 0x4000
LOAD 0x000be0 0x04000000 0x08280000 0x00017020 0x00017020 0x300005 0x4
LOAD 0x017c00 0x04020000 0x082a0000 0x00003f70 0x00003f70 0x300004 0x4
LOAD 0x01bb70 0x04024000 0x082a4000 0x00000ed4 0x00000ed4 0x300006 0x40
LOAD 0x01ca44 0x04025000 0x082a5000 0x00000000 0x000095c0 0x300006 0x40
LOAD 0x01ca44 0x05000000 0x081c0000 0x000598f0 0x000598f0 0x100005 0x4
LOAD 0x076334 0x05060000 0x08220000 0x0000ffc4 0x0000ffc4 0x100004 0x40
LOAD 0x0862f8 0x05070000 0x08230000 0x00003420 0x00003420 0x100006 0x40
LOAD 0x089718 0x05074000 0x08234000 0x00000000 0x00048574 0x100006 0x40
LOAD 0x089718 0x05100000 0x13d80000 0x00015d6c 0x00015d6c 0x100005 0x4
LOAD 0x09f484 0x08120000 0x08120000 0x00015000 0x00015000 0x000005 0x10
LOAD 0x0b4484 0x08140000 0x08140000 0x00002478 0x00002478 0x000004 0x10
LOAD 0x0b68fc 0x08143000 0x08143000 0x0000d000 0x0000d000 0x000006 0x10
LOAD 0x0c38fc 0x08150000 0x08150000 0x00000000 0x00061230 0x000006 0x4000
LOAD 0x0c38fc 0x10000000 0x10000000 0x00000000 0x00100000 0x100006 0x1
LOAD 0x0c38fc 0x10100000 0x10100000 0x000312d0 0x000312d0 0x400005 0x4
LOAD 0x0f4bcc 0x10140000 0x10140000 0x00004694 0x00004694 0x400004 0x4
LOAD 0x0f9260 0x10145000 0x10145000 0x000000dc 0x000000dc 0x400006 0x4
LOAD 0x0f933c 0x10146000 0x10146000 0x00000000 0x0037f4e8 0x400006 0x20
LOAD 0x0f933c 0x10700000 0x10700000 0x000f81c4 0x000f81c4 0x500005 0x4
LOAD 0x1f1500 0x10800000 0x10800000 0x00033b6c 0x00033b6c 0x500004 0x20
LOAD 0x22506c 0x10834000 0x10834000 0x000005d0 0x000005d0 0x500006 0x4
LOAD 0x22563c 0x10835000 0x10835000 0x00000000 0x01406554 0x500006 0x200
LOAD 0x22563c 0x11f00000 0x11f00000 0x00085770 0x00085770 0x600005 0x4
LOAD 0x2aadac 0x11fc0000 0x11fc0000 0x000140b0 0x000140b0 0x600004 0x4
LOAD 0x2bee5c 0x11fd5000 0x11fd5000 0x00023234 0x00023234 0x600006 0x4
LOAD 0x2e2090 0x11ff9000 0x11ff9000 0x00000000 0x0015f41c 0x600006 0x1000
LOAD 0x2e2090 0x12300000 0x12300000 0x00131844 0x00131844 0x700005 0x4
LOAD 0x4138d4 0x12440000 0x12440000 0x000288e8 0x000288e8 0x700004 0x4
LOAD 0x43c1bc 0x12469000 0x12469000 0x000000e4 0x000000e4 0x700006 0x4
LOAD 0x43c2a0 0x1246a000 0x1246a000 0x0005b31d 0x0005b31d 0x700006 0x4
LOAD 0x4975c0 0x124c6000 0x124c6000 0x00000000 0x003c7028 0x700006 0x40
LOAD 0x4975c0 0x1fb00000 0x1fb00000 0x00300000 0x00300000 0x700006 0x4
LOAD 0x7975c0 0x1fe00000 0x1fe00000 0x00014ef4 0x00014ef4 0x100006 0x20
LOAD 0x7ac4b4 0x1fe40000 0x1fe40000 0x00000000 0x001c0000 0x100006 0x1
LOAD 0x7ac4b4 0x20000000 0x20000000 0x00000000 0x07e00000 0x500006 0x1
LOAD 0x000000 0x27e00000 0x27e00000 0x00200000 0x00200000 0x100007 0x1
LOAD 0x000000 0x05200000 0x27e00000 0x00000000 0x00100000 0x100007 0x1
LOAD 0x000000 0x10600000 0x27e00000 0x00000000 0x00100000 0x100007 0x1
LOAD 0x7ac4b4 0xe0000000 0x12900000 0x000db65c 0x000db65c 0x800005 0x4
LOAD 0x887b10 0xe0100000 0x12a00000 0x0002088c 0x0002088c 0x800004 0x4
LOAD 0x8a839c 0xe0121000 0x12a21000 0x00000124 0x00000124 0x800006 0x4
LOAD 0x8a84c0 0xe0122000 0x12a22000 0x00000650 0x00000650 0x800006 0x4
LOAD 0x8a8b10 0xe0123000 0x12a23000 0x00000000 0x0013ef10 0x800006 0x40
LOAD 0x8a8b10 0xe1000000 0x12bc0000 0x00090dd8 0x00090dd8 0x900005 0x4
LOAD 0x9398e8 0xe10c0000 0x12c80000 0x000213b4 0x000213b4 0x900004 0x4
LOAD 0x95ac9c 0xe10e2000 0x12ca2000 0x00001734 0x00001734 0x900006 0x4
LOAD 0x95c3d0 0xe10e4000 0x12ca4000 0x00000000 0x002043b8 0x900006 0x20
LOAD 0x95c3d0 0xe2000000 0x12ec0000 0x002651e0 0x002651e0 0xb00005 0x4
LOAD 0xbc15b0 0xe2280000 0x13140000 0x00048934 0x00048934 0xb00004 0x4
LOAD 0xc09ee4 0xe22c9000 0x13189000 0x00000264 0x00000264 0xb00006 0x4
LOAD 0xc0a148 0xe22ca000 0x1318a000 0x00000604 0x00000604 0xb00006 0x4
LOAD 0xc0a74c 0xe22cb000 0x1318b000 0x00000000 0x003fd9f0 0xb00006 0x40
LOAD 0xc0a74c 0xe3000000 0x13640000 0x0016ba14 0x0016ba14 0xc00005 0x4
LOAD 0xd76160 0xe3180000 0x137c0000 0x0002c78c 0x0002c78c 0xc00004 0x4
LOAD 0xda28ec 0xe31ad000 0x137ed000 0x00000150 0x00000150 0xc00006 0x4
LOAD 0xda2a3c 0xe31ae000 0x137ee000 0x000009d0 0x000009d0 0xc00006 0x4
LOAD 0xda340c 0xe31af000 0x137ef000 0x00000000 0x0014da94 0xc00006 0x40
LOAD 0xda340c 0xe4000000 0x13a40000 0x00019704 0x00019704 0xd00005 0x4
LOAD 0xdbcb10 0xe4040000 0x13a80000 0x00005ae8 0x00005ae8 0xd00004 0x4
LOAD 0xdc25f8 0xe4046000 0x13a86000 0x0000005c 0x0000005c 0xd00006 0x4
LOAD 0xdc2654 0xe4047000 0x13a87000 0x00000000 0x0011123c 0xd00006 0x20
LOAD 0xdc2654 0xe5000000 0x13c00000 0x0000fd64 0x0000fd64 0xa00005 0x4
LOAD 0xdd23b8 0xe5040000 0x13c40000 0x0000328c 0x0000328c 0xa00004 0x4
LOAD 0xdd5644 0xe5044000 0x13c44000 0x000006e4 0x000006e4 0xa00006 0x4
LOAD 0xdd5d28 0xe5045000 0x13c45000 0x00000000 0x00029900 0xa00006 0x20
LOAD 0xdd5d28 0xe6000000 0x13cc0000 0x00010a80 0x00010a80 0x200005 0x4
LOAD 0xde67a8 0xe6040000 0x13d00000 0x00001b90 0x00001b90 0x200004 0x4
LOAD 0xde8338 0xe6042000 0x13d02000 0x00004990 0x00004990 0x200006 0x4
LOAD 0xdeccc8 0xe6047000 0x13d07000 0x00000000 0x000011f4 0x200006 0x4
LOAD 0xdeccc8 0xe7000000 0x082c0000 0x00001000 0x00001000 0x200006 0x4
LOAD 0xdedcc8 0xeff00000 0xfff00000 0x00000000 0x00008000 0x100006 0x1
LOAD 0xdedcc8 0xffff0000 0xffff0000 0x0000eb0c 0x0000eb0c 0x000007 0x4
kern_main symbol at: 27e00fc0
our module mem size is: 00177000
registering plugin: 27f77000
registering plugin: 27f77320
linking plugin: 27f77000
wafel_core: plugin 27f77000 has no DT_REL
linking plugin: 27f77320
wafel_core: plugin 27f77320 has no DT_REL
wafel_core: found OTP read pattern 1 at 08120290...
wafel_core: found OTP read at 08120248.
calling kern_entry in plugin: 27f77000
did not find kern_entry in plugin: 27f77000
calling kern_entry in plugin: 27f77320
did not find kern_entry in plugin: 27f77320
stroopwafel kern_main done
region starting at virtual address 0xffff0000:
size = 0x00010000
paddr = 0xffff0000
domain = 0x00000000
attributes: Kernel-Only, cached
region starting at virtual address 0x08120000:
size = 0x000a0000
paddr = 0x08120000
domain = 0x00000000
attributes: Kernel-Only, cached
region starting at virtual address 0x1d000000:
size = 0x02b00000
paddr = 0x1d000000
domain = 0x00000000
attributes: Read/Write, cached
region starting at virtual address 0x08000000:
size = 0x00100000
paddr = 0x08000000
domain = 0x0000000f
attributes: Read/Write, cached
region starting at virtual address 0x08100000:
size = 0x00020000
paddr = 0x08100000
domain = 0x00000000
attributes: Read/Write, cached
region starting at virtual address 0x00000000:
size = 0x00001000
paddr = 0x00000000
domain = 0x00000000
attributes: Kernel-Only, cached
region starting at virtual address 0x00001000:
size = 0x01fff000
paddr = 0x00001000
domain = 0x00000000
attributes: Read/Write, cached
region starting at virtual address 0x14000000:
size = 0x09000000
paddr = 0x14000000
domain = 0x00000000
attributes: Read/Write, cached
region starting at virtual address 0x27c00000:
size = 0x00400000
paddr = 0x27c00000
domain = 0x00000000
attributes: Read/Write, cached
region starting at virtual address 0x28000000:
size = 0xa8000000
paddr = 0x28000000
domain = 0x00000000
attributes: Read/Write, cached
IOS_KERNEL: Built 02/04/21 16:05:36, SRAM Utilization 91%, MEM Utilization 90%.
region starting at virtual address 0x05000000:
size = 0x0005a000
paddr = 0x081c0000
domain = 0x00000001
attributes: Read-Only, cached
region starting at virtual address 0x05060000:
size = 0x00010000
paddr = 0x08220000
domain = 0x00000001
attributes: Read-Only, cached
region starting at virtual address 0x05070000:
size = 0x00004000
paddr = 0x08230000
domain = 0x00000001
attributes: Read/Write, cached
region starting at virtual address 0x05074000:
size = 0x00049000
paddr = 0x08234000
domain = 0x00000001
attributes: Read/Write, cached
region starting at virtual address 0x04000000:
size = 0x00018000
paddr = 0x08280000
domain = 0x00000003
attributes: Read-Only, cached
region starting at virtual address 0x04020000:
size = 0x00004000
paddr = 0x082a0000
domain = 0x00000003
attributes: Read-Only, cached
region starting at virtual address 0x04024000:
size = 0x00001000
paddr = 0x082a4000
domain = 0x00000003
attributes: Read/Write, cached
region starting at virtual address 0x04025000:
size = 0x0000a000
paddr = 0x082a5000
domain = 0x00000003
attributes: Read/Write, cached
region starting at virtual address 0xe7000000:
size = 0x00001000
paddr = 0x082c0000
domain = 0x00000002
attributes: Read/Write, cached
region starting at virtual address 0x10000000:
size = 0x00100000
paddr = 0x10000000
domain = 0x00000001
attributes: Read/Write, cached
region starting at virtual address 0x10100000:
size = 0x00032000
paddr = 0x10100000
domain = 0x00000004
attributes: Read-Only, cached
region starting at virtual address 0x10140000:
size = 0x00005000
paddr = 0x10140000
domain = 0x00000004
attributes: Read-Only, cached
region starting at virtual address 0x10145000:
size = 0x00001000
paddr = 0x10145000
domain = 0x00000004
attributes: Read/Write, cached
region starting at virtual address 0x10146000:
size = 0x00380000
paddr = 0x10146000
domain = 0x00000004
attributes: Read/Write, cached
region starting at virtual address 0x10700000:
size = 0x000f9000
paddr = 0x10700000
domain = 0x00000005
attributes: Read-Only, cached
region starting at virtual address 0x10800000:
size = 0x00034000
paddr = 0x10800000
domain = 0x00000005
attributes: Read-Only, cached
region starting at virtual address 0x10834000:
size = 0x00001000
paddr = 0x10834000
domain = 0x00000005
attributes: Read/Write, cached
region starting at virtual address 0x10835000:
size = 0x01407000
paddr = 0x10835000
domain = 0x00000005
attributes: Read/Write, cached
region starting at virtual address 0x11f00000:
size = 0x00086000
paddr = 0x11f00000
domain = 0x00000006
attributes: Read-Only, cached
region starting at virtual address 0xd1f00000:
size = 0x00086000
paddr = 0x11f00000
domain = 0x00000006
attributes: Read-Only, un-cached
region starting at virtual address 0x11fc0000:
size = 0x00015000
paddr = 0x11fc0000
domain = 0x00000006
attributes: Read-Only, cached
region starting at virtual address 0xd1fc0000:
size = 0x00015000
paddr = 0x11fc0000
domain = 0x00000006
attributes: Read-Only, un-cached
region starting at virtual address 0x11fd5000:
size = 0x00024000
paddr = 0x11fd5000
domain = 0x00000006
attributes: Read/Write, cached
region starting at virtual address 0xd1fd5000:
size = 0x00024000
paddr = 0x11fd5000
domain = 0x00000006
attributes: Read/Write, un-cached
region starting at virtual address 0x11ff9000:
size = 0x00160000
paddr = 0x11ff9000
domain = 0x00000006
attributes: Read/Write, cached
region starting at virtual address 0xd1ff9000:
size = 0x00160000
paddr = 0x11ff9000
domain = 0x00000006
attributes: Read/Write, un-cached
region starting at virtual address 0x12300000:
size = 0x00132000
paddr = 0x12300000
domain = 0x00000007
attributes: Read-Only, cached
region starting at virtual address 0x12440000:
size = 0x00029000
paddr = 0x12440000
domain = 0x00000007
attributes: Read-Only, cached
region starting at virtual address 0x12469000:
size = 0x00001000
paddr = 0x12469000
domain = 0x00000007
attributes: Read/Write, cached
region starting at virtual address 0x1246a000:
size = 0x0005c000
paddr = 0x1246a000
domain = 0x00000007
attributes: Read/Write, cached
region starting at virtual address 0x124c6000:
size = 0x003c8000
paddr = 0x124c6000
domain = 0x00000007
attributes: Read/Write, cached
region starting at virtual address 0xe0000000:
size = 0x000dc000
paddr = 0x12900000
domain = 0x00000008
attributes: Read-Only, cached
region starting at virtual address 0xe0100000:
size = 0x00021000
paddr = 0x12a00000
domain = 0x00000008
attributes: Read-Only, cached
region starting at virtual address 0xe0121000:
size = 0x00001000
paddr = 0x12a21000
domain = 0x00000008
attributes: Read/Write, cached
region starting at virtual address 0xe0122000:
size = 0x00001000
paddr = 0x12a22000
domain = 0x00000008
attributes: Read/Write, cached
region starting at virtual address 0xe0123000:
size = 0x0013f000
paddr = 0x12a23000
domain = 0x00000008
attributes: Read/Write, cached
region starting at virtual address 0xe1000000:
size = 0x00091000
paddr = 0x12bc0000
domain = 0x00000009
attributes: Read-Only, cached
region starting at virtual address 0xe10c0000:
size = 0x00022000
paddr = 0x12c80000
domain = 0x00000009
attributes: Read-Only, cached
region starting at virtual address 0xe10e2000:
size = 0x00002000
paddr = 0x12ca2000
domain = 0x00000009
attributes: Read/Write, cached
region starting at virtual address 0xe10e4000:
size = 0x00205000
paddr = 0x12ca4000
domain = 0x00000009
attributes: Read/Write, cached
region starting at virtual address 0xe2000000:
size = 0x00266000
paddr = 0x12ec0000
domain = 0x0000000b
attributes: Read-Only, cached
region starting at virtual address 0xe2280000:
size = 0x00049000
paddr = 0x13140000
domain = 0x0000000b
attributes: Read-Only, cached
region starting at virtual address 0xe22c9000:
size = 0x00001000
paddr = 0x13189000
domain = 0x0000000b
attributes: Read/Write, cached
region starting at virtual address 0xe22ca000:
size = 0x00001000
paddr = 0x1318a000
domain = 0x0000000b
attributes: Read/Write, cached
region starting at virtual address 0xe22cb000:
size = 0x003fe000
paddr = 0x1318b000
domain = 0x0000000b
attributes: Read/Write, cached
region starting at virtual address 0xe3000000:
size = 0x0016c000
paddr = 0x13640000
domain = 0x0000000c
attributes: Read-Only, cached
region starting at virtual address 0xe3180000:
size = 0x0002d000
paddr = 0x137c0000
domain = 0x0000000c
attributes: Read-Only, cached
region starting at virtual address 0xe31ad000:
size = 0x00001000
paddr = 0x137ed000
domain = 0x0000000c
attributes: Read/Write, cached
region starting at virtual address 0xe31ae000:
size = 0x00001000
paddr = 0x137ee000
domain = 0x0000000c
attributes: Read/Write, cached
region starting at virtual address 0xe31af000:
size = 0x0014e000
paddr = 0x137ef000
domain = 0x0000000c
attributes: Read/Write, cached
region starting at virtual address 0xe4000000:
size = 0x0001a000
paddr = 0x13a40000
domain = 0x0000000d
attributes: Read-Only, cached
region starting at virtual address 0xe4040000:
size = 0x00006000
paddr = 0x13a80000
domain = 0x0000000d
attributes: Read-Only, cached
region starting at virtual address 0xe4046000:
size = 0x00001000
paddr = 0x13a86000
domain = 0x0000000d
attributes: Read/Write, cached
region starting at virtual address 0xe4047000:
size = 0x00112000
paddr = 0x13a87000
domain = 0x0000000d
attributes: Read/Write, cached
region starting at virtual address 0xe5000000:
size = 0x00010000
paddr = 0x13c00000
domain = 0x0000000a
attributes: Read-Only, cached
region starting at virtual address 0xe5040000:
size = 0x00004000
paddr = 0x13c40000
domain = 0x0000000a
attributes: Read-Only, cached
region starting at virtual address 0xe5044000:
size = 0x00001000
paddr = 0x13c44000
domain = 0x0000000a
attributes: Read/Write, cached
region starting at virtual address 0xe5045000:
size = 0x0002a000
paddr = 0x13c45000
domain = 0x0000000a
attributes: Read/Write, cached
region starting at virtual address 0xe6000000:
size = 0x00011000
paddr = 0x13cc0000
domain = 0x00000002
attributes: Read-Only, cached
region starting at virtual address 0xe6040000:
size = 0x00002000
paddr = 0x13d00000
domain = 0x00000002
attributes: Read-Only, cached
region starting at virtual address 0xe6042000:
size = 0x00005000
paddr = 0x13d02000
domain = 0x00000002
attributes: Read/Write, cached
region starting at virtual address 0xe6047000:
size = 0x00002000
paddr = 0x13d07000
domain = 0x00000002
attributes: Read/Write, cached
region starting at virtual address 0x05100000:
size = 0x00016000
paddr = 0x13d80000
domain = 0x00000001
attributes: Read-Only, cached
region starting at virtual address 0x1fb00000:
size = 0x00300000
paddr = 0x1fb00000
domain = 0x00000007
attributes: Read/Write, cached
region starting at virtual address 0x1fe00000:
size = 0x00015000
paddr = 0x1fe00000
domain = 0x00000001
attributes: Read/Write, cached
region starting at virtual address 0x1fe40000:
size = 0x001c0000
paddr = 0x1fe40000
domain = 0x00000001
attributes: Read/Write, cached
region starting at virtual address 0x20000000:
size = 0x07e00000
paddr = 0x20000000
domain = 0x00000005
attributes: Read/Write, cached
region starting at virtual address 0x05200000:
size = 0x00100000
paddr = 0x27e00000
domain = 0x00000001
attributes: Read/Write, cached
region starting at virtual address 0x10600000:
size = 0x00100000
paddr = 0x27e00000
domain = 0x00000001
attributes: Read/Write, cached
region starting at virtual address 0xeff00000:
size = 0x00008000
paddr = 0xfff00000
domain = 0x00000001
attributes: Read/Write, cached
Creating main() thread for IOS-BSP:
priority=125 stackSize=4096 stackPtr=0xe7000000 entry=0xe600f848 memPermMask=0x00100000
IOS-BSP: Built 02/04/21 16:02:14, Image Utilization 37%.
Creating main() thread for IOS-MCP:
priority=124 stackSize=8192 stackPtr=0x050ba4a0 entry=0x05056718 memPermMask=0x000c0030
Creating main() thread for IOS-CRYPTO:
priority=123 stackSize=4096 stackPtr=0x04028628 entry=0x04015ea4 memPermMask=0x000c0030
Creating main() thread for IOS-USB:
priority=107 stackSize=16384 stackPtr=0x104b92c8 entry=0x1012e9e8 memPermMask=0x00038600
Creating main() thread for IOS-FS:
priority=85 stackSize=16384 stackPtr=0x1114117c entry=0x107f6830 memPermMask=0x001c5870
Creating main() thread for IOS-PAD:
priority=117 stackSize=8192 stackPtr=0x1214ab4c entry=0x11f82d94 memPermMask=0x00008180
Creating main() thread for IOS-NET:
priority=80 stackSize=16384 stackPtr=0x12804498 entry=0x123e4174 memPermMask=0x00002000
Creating main() thread for IOS-ACP:
priority=50 stackSize=16384 stackPtr=0xe0125390 entry=0xe00d8290 memPermMask=0x00000000
Creating main() thread for IOS-NSEC:
priority=50 stackSize=4096 stackPtr=0xe12e71a4 entry=0xe108e930 memPermMask=0x00000000
Creating main() thread for IOS-AUXIL:
priority=70 stackSize=16384 stackPtr=0xe506a900 entry=0xe500d720 memPermMask=0x00000000
Creating main() thread for IOS-NIM-BOSS:
priority=50 stackSize=16384 stackPtr=0xe22cb000 entry=0xe22602fc memPermMask=0x00000000
Creating main() thread for IOS-FPD:
priority=50 stackSize=16384 stackPtr=0xe31af000 entry=0xe3166b34 memPermMask=0x00000000
Creating main() thread for IOS-TEST:
priority=75 stackSize=8192 stackPtr=0xe415623c entry=0xe40168a4 memPermMask=0x00000000
we in here MCP 0x5202008
calling mcp_entry in plugin: 27f77000
did not find mcp_entry in plugin: 27f77000
calling mcp_entry in plugin: 27f77320
did not find mcp_entry in plugin: 27f77320
stroopwafel mcp_main done
IOS-PAD: Built 02/04/21 16:02:14, Image Utilization 58%.
IOS-CRYPTO: Built 02/04/21 16:02:14, Image Utilization 72%.
CRYPTO Open, clientPid=1 nodeId 00000000 titleId 0000000000000000 perm=0xffffffff
IOSC Initialize -- IOSC library build time 09/27/12 19:28:40
IOS-USB: Built 02/04/21 16:02:14, Image Utilization 62%.
00:00:00:243: MMC(0): initializing Controller 0, Slot 0 base 0x0D070000
00:00:00:245: MMC(3): initializing Controller 2, Slot 0 base 0x0D100000
00:00:00:247: MMC(4): initializing Controller 3, Slot 0 base 0x0D110000
IOS-NET: Built 02/04/21 16:02:14, Image Utilization 92%.
USB Trace: Activating root hubs @ uptime 0.310 s with options 0x40000.
00:00:00:312: USB Trace: Activating root hubs @ uptime 0.310 s with options 0x40000.
UHS0 Trace: DevFsm(EHCI-0/L0/P0): Creating device, speed=HIGH.
00:00:00:325: UHS0 Trace: DevFsm(EHCI-0/L0/P0): Creating device, speed=HIGH.
UHS0 Trace: DevFsm(OHCI-0:0/L0/P0): Creating device, speed=FULL.
00:00:00:331: UHS0 Trace: DevFsm(OHCI-0:0/L0/P0): Creating device, speed=FULL.
USB Info: UhsServerAddHc 0 OK.
00:00:00:334: USB Info: UhsServerAddHc 0 OK.
UHS0 Trace: DevFsm(EHCI-1/L0/P0): Creating device, speed=HIGH.
00:00:00:345: UHS0 Trace: DevFsm(EHCI-1/L0/P0): Creating device, speed=HIGH.
UHS0 Trace: DevFsm(OHCI-1:0/L0/P0): Creating device, speed=FULL.
00:00:00:351: UHS0 Trace: DevFsm(OHCI-1:0/L0/P0): Creating device, speed=FULL.
USB Info: UhsServerAddHc 1 OK.
00:00:00:354: USB Info: UhsServerAddHc 1 OK.
IOS-TEST: Built 02/04/21 16:02:14, Image Utilization 76%.
TEST Info: localProcessHeap OK.
TEST Info: crossProcessHeap OK.
00:00:00:362: TEST Info: crossProcessHeap OK.
IOS-AUXIL: Built 02/04/21 16:02:14, Image Utilization 57%.
AUXIL Info: localProcessHeap OK.
AUXIL Info: crossProcessHeap OK.
00:00:00:367: AUXIL Info: crossProcessHeap OK.
UHS0 Trace: Powering on root hub group 0.
00:00:00:370: UHS0 Trace: Powering on root hub group 0.
IOS-NSEC: Built 02/04/21 16:02:14, Image UtilIOS-FPD: Built 02/04/21 16:02:14, Image Utilization 74%.
IOS-ACP: Built UHS0 Trace: Powering on root hub group 1.
00:00:00:387: UHS0 Trace: Powering on root hub group 1.
00:00:00:389: AHCI_MGR Trace: Turning on drive power.
00:00:00:391: AHCI_MGR Trace: Turning on drive power.
ization 96%.
00:00:00:397: AHCI_MGR Trace: Initializing phy.
00:00:00:398: AHCI_MGR Trace: Initializing phy.
00:00:00:399: AHCI_DRV Trace: Initiating cold open.
00:00:00:401: AHCI_DRV Trace: Initiating cold open.
00:00:00:402: AHCI_DRV Trace: Resetting HBA.
00:00:00:403: AHCI_DRV Trace: Resetting HBA.
AUXIL Info: Net OK.
00:00:00:406: AUXIL Info: Net OK.
02/04/21 16:02:14, Image Utilization 86%.
IOS-NIM-BOSS: Built 02/04/21 16:02:14, Image Utilization 90%.
act_main.cpp,Start,174CRYPTO Open, clientPid=5 nodeId 00000000 titleId 00000000100000f1 perm=0xffffffff
00:00:00:455: AHCI_DRV Trace: HBA Reset OK.
00:00:00:456: AHCI_DRV Trace: HBA Reset OK.
00:00:00:525: ISFS: FAT INFO (ch WUP): slot 50 / seq 1692276 (Each FAT slot has been updated 26441 times in avr)
00:00:00:528: ISFS: fs_fat.c(545)FAT INFO (ch WUP): slot 50 / seq 1692276 (Each FAT slot has been updated 26441 times in avr)
00:00:00:531: FSA: [uptime 0.531 s]: Attached volume to slc01 (isfs): Capacity 511 MB, 262016 logical blocks of size 2048 B.
00:00:00:619: ISFS: FAT INFO (ch RVL Compat): slot 8 / seq 310410 (Each FAT slot has been updated 19400 times in avr)
00:00:00:623: ISFS: fs_fat.c(545)FAT INFO (ch RVL Compat): slot 8 / seq 310410 (Each FAT slot has been updated 19400 times in avr)
00:00:00:626: FSA: [uptime 0.626 s]: Attached volume to slccmpt01 (isfs): Capacity 511 MB, 261632 logical blocks of size 2048 B.
00:00:00:635: SCFM:Start init. BUILD_TIME:[16:02:03]
00:00:00:640: SCFM:FSAInit
00:00:00:640: SCFM:AddClient
00:00:00:642: SCFM:scfmMountSlc
00:00:00:643: SCFM:scfmLoad
00:00:00:644: SCFMone init.
00:00:00:645: PCFS: Disabled because we are in PROD mode.
00:00:00:647: MCP: booting from NAND
00:00:00:648: MCP: Boot PM flags - PON_COLDBOOT
00:00:00:668: MCP: Cafe OS SDK Version 2.13.01 Build 69088 Branch sdk_2_13
00:00:00:669: MCP: Booting on Espresso (0x0000700100000201), Latte (0x25100028), RTC (0x01)
00:00:00:672: MCP: Platform - boardType(CF), boardRevision(11), devicePresence(0x00000000), sataDevice(3), consoleType(1)
00:00:00:677: ISFS: FAT block entries check start
00:00:00:679: ISFS: fs_ops.c(2215)FAT block entries check start
00:00:00:684: ISFS: FAT block entries check finished.
00:00:00:686: ISFS: fs_ops.c(2292)FAT block entries check finished.
00:00:00:703: FSA: [uptime 0.703 s]: Attached volume to mlc01 (wfs): Capacity 29760 MB, 60948480 logical blocks of size 512 B.
00:00:00:712: FSA: [uptime 0.712 s]: Attached volume to sdcard01 (raw): Capacity 960 MB, 1966080 logical blocks of size 512 B.
00:00:00:717: FSA: [uptime 0.717 s]: Attached volume to ramdisk01 (raw): Capacity 125 MB, 129022 logical blocks of size 1024 B.
00:00:00:721: mmc_core card err: idx=3, lba=50910976, blks=256, xfer=0x1, ret=0x00200b40
00:00:00:724: MCP: Formatting Device ramdisk to wfs
00:00:00:868: FSA: [uptime 0.868 s]: Attached volume to ramdisk01 (wfs): Capacity 125 MB, 129022 logical blocks of size 1024 B.
00:00:00:872: MCP: Format Complete
00:00:00:873: mmc_core card err: idx=3, lba=50910976, blks=256, xfer=0x1, ret=0x00200b40
00:00:00:876: mdblk: err=-131099, mid=0x90, prv=0x5c, pnm=[HYNIX ]
00:00:00:923: [ 585]:[scfm.c] doneCallback() <- IOS_PutSemaphore:[-26] ptr:[0x1108b91c] sdb->sem:[1339814]
00:00:00:926: [ 587]:[scfm.c] doneCallback() [-26 == 0]
00:00:00:927: [ 587]:[scfm.c] doneCallback() [semErr == 0]
00:00:00:929: [ 587]:[scfm.c] doneCallback() Error occurred!
iosPanic(): [ 99]:[scfm.c] showTraceBuffer()

I'm now making a backup of the whole SDCard where I've now a copy of SLC, SLCCMPT and MLC. And then I will try to boot from this redNAND.

 

[SDIO]

Yeah as I thought: the eMMC corrupted in such a way that it makes scfm crash.
Definitely a bad eMMC (as if that wasn't already clear from the other logs)

There is actually a good chance that it will boot the redNAND

But I would still recommend rebuilding the mlc and just copying the save over to get rid of all the corruption

 

[benoit74]

Ok, thank you for all this valuable insight and advices. Greatly appreciated!

I agree with your proposal on how to move this forward, it is probably the safest way to not have to deal with problems on this console again in a near future.

Do you recommend to stay with redNAND once the MLC is rebuilt or should I move this to nandAID ? I tend to consider the later as the best option, but I'm clearly not as experienced as you are. I'm not an expert in soldering, but since I achieve to defuse the console, I think I can manage to install nandAID as well. Any idea where I could find one in France (or at least Europe?), I do not have access (yet) to the GBATEMP place where people seems to be speaking about this.

 

[SDIO]

I would replace the eMMC to have the console work again like it was designed. You can just sent @V10lator a PN or alternatively solder a Micro SD adapter like I did originally (but nand aid is cleaner).
It is a little finer than the Testpoints used for defuse, but if you didn't have trouble soldering defuse, then you should also be able to solder NAND AID

 

[benoit74]

I achieved to install ISFShax (in the console SLC if I'm not mistaken) through deFuse (even if not mentioned as feasible in https://gbatemp.net/threads/how-to-set-up-isfshax.642258/#post-10280396 ; by the way, would be great to add it as an alternative to all other techniques already mentioned), and from here I achieved to start redNAND with the full setup (SLC, SLCMPT and MLC on the sdcard). And tadaaaaa ... my WiiU is back to life with everything as it was before the WiiU broke. I just had a first 160-1400 error ... because I did not yet connected the disc drive back ^^

As you suggested, I will now take time to try to rebuild the MLC from scratch, since I now have a working SD and everything backed-up, I do not mind to experiment a bit to try a cleaner setup.

And finally I will probably try to install the NANDaid, it will be close to the way it was supposed to work and I feel like using the "real" SLC / SLCMPT will probably induce less wear on the SD.

Thank you very much for your help. Thank you to the whole community who developed all these tools and guides, it is very good work and very important to keep WiiUs from going directly to destruction just because of a dying eMMC chip.