Raspberry Pi is connected to the router with a cable.
Hardware offload on and off results are as follows. There is no problem with the wired connection.
Retest after this commit https://github.com/openwrt/openwrt/commit/e8b00cfdcb78ebd20e097eb21862376a4b4f8313 and let us know how you go.
Thank you for the information. How can I test this? I guess I have to build it myself.
The latest snapshot includes it. Here are my results using it. Make sure to enable wed per the post above.
1 Like
Many thanks @Sti for the new method discovered and shared with the owrt community.
Added this “netmode: 4” method to the wiki: https://openwrt.org/toh/xiaomi/ax3200#installation. Please feel free to edit and correct details if something does not accurately describe this method.
2 Likes
It works. 
Steps are as follows:
- Upgrade to latest build (r20775-165b66d910).
https://downloads.openwrt.org/snapshots/targets/mediatek/mt7622/openwrt-mediatek-mt7622-xiaomi_redmi-router-ax6s-squashfs-sysupgrade.bin - Enable WED.
Belkin RT3200/Linksys E8450 WiFi AX discussion - #2870 by Anteus - Hardware offloading must be turned on in the firewall.
1 Like
2.4Ghz band 40Mhz bandwitdh was not working in version 22.03.0. The same situation continues in build r20775-165b66d910. Has anyone encountered this problem?
1 Like
40mhz won't come up in the presence of other access points occupying the channels. Unless you have noscan specified in your config, which you don't appear to have.
Don't be surprised if you do not see an uplift in throughput or even a decline.
1 Like
option noscan '1' it solved the problem. Thank you.
Hi everyone, really love all the effort that has been put into getting OpenWRT on the AX6S.
I bought 3 RB03s intending to mesh them together. I have been able to flash OpenWRT onto two of them just fine, but this last one enters into a bootloop after step 8 on the wiki. All 3 of my units have 2022/07 on the back of the box, which I assume is the manufacture date.
I have opened the chassis on this problematic one and attempted to hook up my UART controller to it. While I was testing yesterday, I was seeing it reach the U-Boot menu, trying to load option 3 (3. Load firmware selected by Xiaoqiang and bootup.), then complain about not being able to read root as squashfs, listing all the mtd blocks as (driver?), have a kernel panic, then reboot. I will include a full paste of the boot log below.
F0: 102B 0000
F6: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 0000 0041 [0000]
G0: 0190 0000
T0: 0000 036D [000F]
Jump to BL
UNIVPLL_CON0 = 0xFE000000!!!
mt_pll_init: Set pll frequency for 25M crystal
RAM_CONSOLE preloader last status: 0x0 0x0 0x0 0x0 0x0 0x0
[PMIC_WRAP]wrap_init pass,the return value=0.
[pmic_init] Preloader Start..................
[pmic_init] MT6380 CHIP Code, reg_val = 0, 1:E2 0:E3
[pmic_init] Done...................
Chip part number:7622B
MT7622 Version: 1.2.8, (iPA)
SSC OFF
mt_pll_post_init: mt_get_cpu_freq = 1350000Khz
mt_pll_post_init: mt_get_mem_freq = 1600000Khz
mt_pll_post_init: mt_get_bus_freq = 279980Khz
[PLFM] Init I2C: OK(0)
[BLDR] Build Time: 20210316-161525
==== Dump RGU Reg ========
RGU MODE: 14
RGU LENGTH: FFE0
RGU STA: 40000000
RGU INTERVAL: FFF
RGU SWSYSRST: 8000
==== Dump RGU Reg End ====
RGU: g_rgu_satus:2
mtk_wdt_mode_config mode value=10, tmp:22000010
PL RGU RST: ??
SW reset with bypass power key flag
Find bypass powerkey flag
WDT NONRST=0x20000000
WDT IRQ_EN=0x340003
RGU mtk_wdt_init:MTK_WDT_DEBUG_CTL(590200F3)
[EMI] MDL number = 2
[EMI] DRAMC calibration start
[DDR] Gating glitch patched (0<cnt<=6)
[EMI] DRAMC calibration end
[EMI]rank size auto detect
[EMI]start_addr[0x40000000]=0x12345678, test_addr[0x48000000]= 0xEDCBA987
[EMI]start_addr[0x40000000]=0xEDCBA987, test_addr[0x50000000]= 0xEDCBA987
[EMI]rank0 size: 0x10000000
[MEM] complex R/W mem test pass
RAM_CONSOLE wdt status (0x2)=0x2
mtk_snand_get_device_info
2-Recognize NAND: ID [C8 51 ], Device Name [GD5F1GQ5UEYIG], Page Size [2048]B Spare Size [128]B Total Size [128]MB
[BBT] BMT.v2 is found at 0x3FF
[PLFM] Init Boot Device: OK(0)
[PART] blksz: 2048B
[PART] [0x0000000000000000-0x000000000007FFFF] "PRELOADER" (256 blocks)
[PART] [0x0000000000080000-0x00000000000BFFFF] "tee1" (128 blocks)
[PART] [0x00000000000C0000-0x000000000013FFFF] "lk" (256 blocks)
Device APC domain init setup:
Domain Setup (0x0)
Domain Setup (0x0)
Device APC domain after setup:
Domain Setup (0x0)
Domain Setup (0x0)
[PART] Image with part header
[PART] name : U-Boot
[PART] addr : 41E00000h mode : -1
[PART] size : 356560
[PART] magic: 58881688h
[PART] load "lk" from 0x00000000000C0200 (dev) to 0x41E00000 (mem) [SUCCESS]
[PART] load speed: 16581KB/s, 356560 bytes, 21ms
load lk (ret=0)
[PART] Image with part header
[PART] name : atf
[PART] addr : FFFFFFFFh mode : -1
[PART] size : 57936
[PART] magic: 58881688h
[PART] load "tee1" from 0x0000000000080200 (dev) to 0x43000DC0 (mem) [SUCCESS]
[PART] load speed: 14144KB/s, 57936 bytes, 4ms
load tee1 (ret=0)
[BLDR] bldr load tee part ret=0x0, addr=0x43001000
[BLDR] boot part. not found
[BLDR] part_load_images ret=0x0
[BLDR] Others, jump to ATF
[BLDR] jump to 0x41E00000
[BLDR] <0x41E00000>=0xEA00000F
[BLDR] <0x41E00004>=0xE59FF014
U-Boot 2014.04-rc1 (Nov 12 2021 - 05:58:34)
auto detection g_total_rank_size = 0x F000000
DRAM: 240 MiB
Turn on power orange!
NAND: Recognize SNAND: ID [c8 51 ], Device Name [GD5F1GQ5UEYIG], Page Size [2048]B Spare Size [128]B Total Size [128]MB
[mtk_snand] probe successfully!
Not found in UBOOT NAND flash list
[BBT] BMT.v2 is found at 0x3ff
128 MiB
In: serial
Out: serial
Err: serial
Net: mtk_eth
Uip activated
*** U-Boot SPI NAND ***
1. Load firmware 0 and bootup.
2. Load firmware 1 and bootup.
3. Load firmware selected by Xiaoqiang and bootup.
U-Boot console trigger button release!
Press UP/DOWN to move or Press 1~3 to choose, ENTER to select
Erasing NAND...
[mtk_nand_erase_hw] mtk_nand_erase_hw @4249, ret:0x40. page:0x280
Erasing at 0x140000 -- 100% complete.
Writing to NAND... OK
Booting System 0
NAND read: device 0 offset 0x2c0000, size 0x2000
8192 bytes read: OK
[do_read_image_blks] This is a FIT image,img_size = 0x3abdd8
[do_read_image_blks] img_blks = 0x758
[do_read_image_blks] img_align_size = 0x3ac000
NAND read: device 0 offset 0x2c0000, size 0x3ac000
3850240 bytes read: OK
bootm flag=0, states=70f
## Loading kernel from FIT Image at 4007ff28 ...
Using 'config-1' configuration
Trying 'kernel-1' kernel subimage
Description: ARM64 OpenWrt Linux-5.10.116
Type: Kernel Image
Compression: lzma compressed
Data Start: 0x40080014
Data Size: 3819004 Bytes = 3.6 MiB
Architecture: AArch64
OS: Linux
Load Address: 0x44000000
Entry Point: 0x44000000
Hash algo: crc32
Hash value: e80b6b43
Hash algo: sha1
Hash value: ba7721442b7cd00f404a34d00e127a488c4e09a5
Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 4007ff28 ...
Using 'config-1' configuration
Trying 'fdt-1' fdt subimage
Description: ARM64 OpenWrt xiaomi_redmi-router-ax6s device tree blob
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x40424758
Data Size: 28759 Bytes = 28.1 KiB
Architecture: AArch64
Hash algo: crc32
Hash value: 80cd0799
Hash algo: sha1
Hash value: d900ff0a5ebae7c83f388e5cd60a381e2c36a414
Verifying Hash Integrity ... crc32+ sha1+ OK
Booting using the fdt blob at 0x40424758
Uncompressing Kernel Image ... OK
Loading Device Tree to 4cf39000, end 4cf43056 ... OK
Starting kernel ...
[ATF][ 149.197169]save kernel info
[ATF][ 149.200105]Kernel_EL2
[ATF][ 149.202775]Kernel is 64Bit
[ATF][ 149.205863]pc=0x44000000, r0=0x4cf39000, r1=0x0
INFO: BL3-1: Preparing for EL3 exit to normal world, Kernel
INFO: BL3-1: Next image address = 0x44000000
INFO: BL3-1: Next image spsr = 0x3c9
[ATF][ 149.223561]el3_exit
[ 0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[ 0.000000] Linux version 5.10.116 (eric@Debian11) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 11.2.0 r19374-34b6abf5a8) 11.2.0, GNU ld (GNU Binutils) 2.37) #0 SMP Mon May 23 07:47:53 2022
[ 0.000000] Machine model: Xiaomi Redmi Router AX6S
[ 0.000000] Zone ranges:
[ 0.000000] DMA [mem 0x0000000040000000-0x000000004fffffff]
[ 0.000000] DMA32 empty
[ 0.000000] Normal empty
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000040000000-0x0000000042ffffff]
[ 0.000000] node 0: [mem 0x0000000043000000-0x000000004302ffff]
[ 0.000000] node 0: [mem 0x0000000043030000-0x000000004fffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000004fffffff]
[ 0.000000] On node 0 totalpages: 65536
[ 0.000000] DMA zone: 1024 pages used for memmap
[ 0.000000] DMA zone: 0 pages reserved
[ 0.000000] DMA zone: 65536 pages, LIFO batch:15
[ 0.000000] psci: probing for conduit method from DT.
[ 0.000000] psci: PSCIv0.2 detected in firmware.
[ 0.000000] psci: Using standard PSCI v0.2 function IDs
[ 0.000000] psci: Trusted OS migration not required
[ 0.000000] percpu: Embedded 20 pages/cpu s43800 r8192 d29928 u81920
[ 0.000000] pcpu-alloc: s43800 r8192 d29928 u81920 alloc=20*4096
[ 0.000000] pcpu-alloc: [0] 0 [0] 1
[ 0.000000] Detected VIPT I-cache on CPU0
[ 0.000000] CPU features: detected: ARM erratum 845719
[ 0.000000] CPU features: kernel page table isolation disabled by kernel configuration
[ 0.000000] CPU features: detected: ARM erratum 843419
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 64512
[ 0.000000] Kernel command line: console=ttyS0,115200n1 loglevel=8 swiotlb=512 rootfstype=squashfs firmware=0 uart_en=1
[ 0.000000] Dentry cache hash table entries: 32768 (order: 6, 262144 bytes, linear)
[ 0.000000] Inode-cache hash table entries: 16384 (order: 5, 131072 bytes, linear)
[ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[ 0.000000] Memory: 232372K/262144K available (7998K kernel code, 888K rwdata, 2168K rodata, 448K init, 301K bss, 29772K reserved, 0K cma-reserved)
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[ 0.000000] rcu: Hierarchical RCU implementation.
[ 0.000000] rcu: RCU restricting CPUs from NR_CPUS=128 to nr_cpu_ids=2.
[ 0.000000] Tracing variant of Tasks RCU enabled.
[ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[ 0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
[ 0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[ 0.000000] GIC: GICv2 detected, but range too small and irqchip.gicv2_force_probe not set
[ 0.000000] random: get_random_bytes called from start_kernel+0x340/0x484 with crng_init=0
[ 0.000000] arch_timer: cp15 timer(s) running at 12.50MHz (phys).
[ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x2e2049cda, max_idle_ns: 440795202628 ns
[ 0.000003] sched_clock: 56 bits at 12MHz, resolution 80ns, wraps every 4398046511080ns
[ 0.000172] Calibrating delay loop (skipped), value calculated using timer frequency.. 25.00 BogoMIPS (lpj=125000)
[ 0.000181] pid_max: default: 32768 minimum: 301
[ 0.000249] Mount-cache hash table entries: 512 (order: 0, 4096 bytes, linear)
[ 0.000256] Mountpoint-cache hash table entries: 512 (order: 0, 4096 bytes, linear)
[ 0.001202] rcu: Hierarchical SRCU implementation.
[ 0.001293] dyndbg: Ignore empty _ddebug table in a CONFIG_DYNAMIC_DEBUG_CORE build
[ 0.001468] smp: Bringing up secondary CPUs ...
[ 0.001778] Detected VIPT I-cache on CPU1
[ 0.001821] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
[ 0.001881] smp: Brought up 1 node, 2 CPUs
[ 0.001889] SMP: Total of 2 processors activated.
[ 0.001893] CPU features: detected: 32-bit EL0 Support
[ 0.001898] CPU features: detected: CRC32 instructions
[ 0.002008] CPU: All CPU(s) started at EL2
[ 0.002019] alternatives: patching kernel code
[ 0.005137] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.005155] futex hash table entries: 512 (order: 3, 32768 bytes, linear)
[ 0.005242] pinctrl core: initialized pinctrl subsystem
[ 0.005663] NET: Registered protocol family 16
[ 0.006261] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations
[ 0.006288] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[ 0.006315] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[ 0.006619] thermal_sys: Registered thermal governor 'fair_share'
[ 0.006623] thermal_sys: Registered thermal governor 'bang_bang'
[ 0.006628] thermal_sys: Registered thermal governor 'step_wise'
[ 0.006632] thermal_sys: Registered thermal governor 'user_space'
[ 0.006898] ASID allocator initialised with 65536 entries
[ 0.007402] pstore: Registered ramoops as persistent store backend
[ 0.007410] ramoops: using 0x10000@0x42ff0000, ecc: 0
[ 0.032967] cryptd: max_cpu_qlen set to 1000
[ 0.034791] SCSI subsystem initialized
[ 0.034907] libata version 3.00 loaded.
[ 0.035065] usbcore: registered new interface driver usbfs
[ 0.035104] usbcore: registered new interface driver hub
[ 0.035128] usbcore: registered new device driver usb
[ 0.036174] clocksource: Switched to clocksource arch_sys_counter
[ 0.036705] NET: Registered protocol family 2
[ 0.036781] IP idents hash table entries: 4096 (order: 3, 32768 bytes, linear)
[ 0.037047] tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 4096 bytes, linear)
[ 0.037060] TCP established hash table entries: 2048 (order: 2, 16384 bytes, linear)
[ 0.037078] TCP bind hash table entries: 2048 (order: 3, 32768 bytes, linear)
[ 0.037107] TCP: Hash tables configured (established 2048 bind 2048)
[ 0.037171] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[ 0.037186] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[ 0.037258] NET: Registered protocol family 1
[ 0.037278] PCI: CLS 0 bytes, default 64
[ 0.039833] workingset: timestamp_bits=46 max_order=16 bucket_order=0
[ 0.042364] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.042374] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.080818] mt-pmic-pwrap 10001000.pwrap: unexpected interrupt int=0x1
[ 0.095232] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[ 0.095917] printk: console [ttyS0] disabled
[ 0.116114] 11002000.serial: ttyS0 at MMIO 0x11002000 (irq = 21, base_baud = 1562500) is a ST16650V2
[ 0.722806] printk: console [ttyS0] enabled
[ 0.727870] mtk_rng 1020f000.rng: registered RNG driver
[ 0.728017] random: fast init done
[ 0.733257] cacheinfo: Unable to detect cache hierarchy for CPU 0
[ 0.736638] random: crng init done
[ 0.744716] loop: module loaded
[ 0.749879] mtk-snand 1100d000.snfi: chip is GD5F1GQ5xExxG, size 128MB, page size 2048, oob size 128
[ 0.762995] [BBT] BMT.v2 is found at 0x3fe
[ 0.767280] 10 fixed-partitions partitions found on MTD device 1100d000.snfi
[ 0.774319] Creating 10 MTD partitions on "1100d000.snfi":
[ 0.779808] 0x000000000000-0x000000080000 : "Preloader"
[ 0.786213] 0x000000080000-0x0000000c0000 : "ATF"
[ 0.791563] 0x0000000c0000-0x000000140000 : "u-boot"
[ 0.797613] 0x000000140000-0x000000180000 : "u-boot-env"
[ 0.803564] 0x000000180000-0x0000001c0000 : "bdata"
[ 0.809104] 0x0000001c0000-0x000000240000 : "factory"
[ 0.815237] 0x000000240000-0x000000280000 : "crash"
[ 0.820772] 0x000000280000-0x0000002c0000 : "crash_log"
[ 0.826638] 0x0000002c0000-0x0000006c0000 : "kernel"
[ 0.839481] 2 fit-fw partitions found on MTD device kernel
[ 0.844960] Creating 2 MTD partitions on "kernel":
[ 0.849754] 0x000000000000-0x0000003c0000 : "kernel"
[ 0.861271] 0x0000003e0000-0x000000400000 : "rootfs"
[ 0.866671] mtd: device 10 (rootfs) set to be root filesystem
[ 0.872634] mtdsplit: no squashfs found in "rootfs"
[ 0.877519] 0x0000006c0000-0x0000075c0000 : "ubi"
[ 1.121097] mtk_soc_eth 1b100000.ethernet eth0: mediatek frame engine at 0xffffffc011a00000, irq 30
[ 1.130649] i2c /dev entries driver
[ 1.135069] mtk-wdt 10212000.watchdog: Watchdog enabled (timeout=31 sec, nowayout=0)
[ 1.145750] NET: Registered protocol family 10
[ 1.150818] Segment Routing with IPv6
[ 1.154517] NET: Registered protocol family 17
[ 1.159117] 8021q: 802.1Q VLAN Support v1.8
[ 1.164454] pstore: Using crash dump compression: deflate
[ 1.178865] mtk-pcie 1a143000.pcie: host bridge /pcie@1a143000 ranges:
[ 1.185402] mtk-pcie 1a143000.pcie: Parsing ranges property...
[ 1.191259] mtk-pcie 1a143000.pcie: MEM 0x0020000000..0x0027ffffff -> 0x0020000000
[ 1.225794] mtk-pcie 1a143000.pcie: PCI host bridge to bus 0000:00
[ 1.231989] pci_bus 0000:00: root bus resource [bus 00-ff]
[ 1.237476] pci_bus 0000:00: root bus resource [mem 0x20000000-0x27ffffff]
[ 1.244342] pci_bus 0000:00: scanning bus
[ 1.248391] pci 0000:00:00.0: [14c3:3258] type 01 class 0x060400
[ 1.254417] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x1ffffffff 64bit pref]
[ 1.263161] pci_bus 0000:00: fixups for bus
[ 1.267351] pci 0000:00:00.0: scanning [bus 00-00] behind bridge, pass 0
[ 1.274043] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[ 1.282057] pci 0000:00:00.0: scanning [bus 00-00] behind bridge, pass 1
[ 1.288843] pci_bus 0000:01: scanning bus
[ 1.293054] pci 0000:01:00.0: [14c3:7915] type 00 class 0x000280
[ 1.299236] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit pref]
[ 1.306560] pci 0000:01:00.0: reg 0x18: [mem 0x00000000-0x00003fff 64bit pref]
[ 1.313879] pci 0000:01:00.0: reg 0x20: [mem 0x00000000-0x00000fff 64bit pref]
[ 1.321834] pci 0000:01:00.0: supports D1 D2
[ 1.326096] pci 0000:01:00.0: PME# supported from D0 D1 D2 D3hot D3cold
[ 1.332730] pci 0000:01:00.0: PME# disabled
[ 1.337216] pci 0000:01:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s PCIe x1 link at 0000:00:00.0 (capable of 4.000 Gb/s with 5.0 GT/s PCIe x1 link)
[ 1.377411] pci_bus 0000:01: fixups for bus
[ 1.381587] pci_bus 0000:01: bus scan returning with max=01
[ 1.387165] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01
[ 1.393775] pci_bus 0000:00: bus scan returning with max=01
[ 1.399358] pci 0000:00:00.0: BAR 0: no space for [mem size 0x200000000 64bit pref]
[ 1.407010] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x200000000 64bit pref]
[ 1.415005] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x201fffff]
[ 1.421791] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit pref]
[ 1.429614] pci 0000:01:00.0: BAR 2: assigned [mem 0x20100000-0x20103fff 64bit pref]
[ 1.437438] pci 0000:01:00.0: BAR 4: assigned [mem 0x20104000-0x20104fff 64bit pref]
[ 1.445255] pci 0000:00:00.0: PCI bridge to [bus 01]
[ 1.450220] pci 0000:00:00.0: bridge window [mem 0x20000000-0x201fffff]
[ 1.457075] pcieport 0000:00:00.0: of_irq_parse_pci: failed with rc=-22
[ 1.463680] pcieport 0000:00:00.0: assign IRQ: got 0
[ 1.468651] pcieport 0000:00:00.0: enabling device (0000 -> 0002)
[ 1.474753] pcieport 0000:00:00.0: enabling bus mastering
[ 1.480583] mtk_hsdma 1b007000.dma-controller: Using 3 as missing dma-requests property
[ 1.488791] mtk_hsdma 1b007000.dma-controller: MediaTek HSDMA driver registered
[ 1.543985] mt7530 mdio-bus:00 wan (uninitialized): PHY [mt7530-0:01] driver [MediaTek MT7531 PHY] (irq=138)
[ 1.563614] mt7530 mdio-bus:00 lan1 (uninitialized): PHY [mt7530-0:02] driver [MediaTek MT7531 PHY] (irq=139)
[ 1.583249] mt7530 mdio-bus:00 lan2 (uninitialized): PHY [mt7530-0:03] driver [MediaTek MT7531 PHY] (irq=140)
[ 1.602865] mt7530 mdio-bus:00 lan3 (uninitialized): PHY [mt7530-0:04] driver [MediaTek MT7531 PHY] (irq=141)
[ 1.614452] mt7530 mdio-bus:00: configuring for fixed/2500base-x link mode
[ 1.621489] DSA: tree 0 setup
[ 1.621690] mt7530 mdio-bus:00: Link is Up - 2.5Gbps/Full - flow control rx/tx
[ 1.625186] UBI: auto-attach mtd11
[ 1.635069] ubi0: attaching mtd11
[ 1.671995] UBI: EOF marker found, PEBs from 51 will be erased
[ 1.856038] ubi0: scanning is finished
[ 1.889986] ubi0: volume 1 ("rootfs_data") re-sized from 9 to 816 LEBs
[ 1.896819] ubi0: attached mtd11 (name "ubi", size 111 MiB)
[ 1.902384] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[ 1.909260] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[ 1.916039] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[ 1.923000] ubi0: good PEBs: 888, bad PEBs: 0, corrupted PEBs: 0
[ 1.929001] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[ 1.936218] ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 1653292073
[ 1.945340] ubi0: available PEBs: 0, total reserved PEBs: 888, PEBs reserved for bad PEB handling: 19
[ 1.954601] ubi0: background thread "ubi_bgt0d" started, PID 726
[ 1.961734] block ubiblock0_0: created from ubi0:0(rootfs)
[ 1.976859] List of all partitions:
[ 1.980356] 1f00 512 mtdblock0
[ 1.980359] (driver?)
[ 1.986894] 1f04 256 mtdblock1
[ 1.986896] (driver?)
[ 1.993423] 1f08 512 mtdblock2
[ 1.993425] (driver?)
[ 1.999958] 1f0c 256 mtdblock3
[ 1.999960] (driver?)
[ 2.006493] 1f10 256 mtdblock4
[ 2.006495] (driver?)
[ 2.013024] 1f14 512 mtdblock5
[ 2.013026] (driver?)
[ 2.019561] 1f18 256 mtdblock6
[ 2.019562] (driver?)
[ 2.026090] 1f1c 256 mtdblock7
[ 2.026092] (driver?)
[ 2.032625] 1f20 4096 mtdblock8
[ 2.032627] (driver?)
[ 2.039164] 1f24 3840 mtdblock9
[ 2.039166] (driver?)
[ 2.045693] 1f28 128 mtdblock10
[ 2.045695] (driver?)
[ 2.052314] 1f2c 113664 mtdblock11
[ 2.052316] (driver?)
[ 2.058935] 103:00000 6076 ubiblock0_0
[ 2.058936] (driver?)
[ 2.065634] No filesystem could mount root, tried:
[ 2.065636] squashfs
[ 2.070514]
[ 2.074261] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(31,40)
[ 2.082690] SMP: stopping secondary CPUs
[ 2.086605] Kernel Offset: disabled
[ 2.090085] CPU features: 0x0000002,04002004
[ 2.094344] Memory Limit: none
[ 2.100545] Rebooting in 1 seconds..
z
Any ideas on what could be causing this? I have tried using 22.03.0 stable and 22.03.0-rc6. Both yield the same results.
So far I have tried:
- Starting from 1.0.5.4, downgrade to 1.2.7 dev, then flashing factory.bin from telnet -> results in bootloop with the boot logs being as shown in the code block
- Starting from 1.2.7, flashing initramfs from tftpboot, then flashing sysupgrade.bin using the sysupgrade command -> results in "can't get kernel image" error and being thrown to U-Boot command line
- Starting from 1.2.7, flashing initramfs from tftpboot, then attempting to flash sysupgrade.bin to firmware using mtd -r command -> results in unable to find mtd block 'firmware' (presumably because it is looking at the OpenWRT mtd block list instead of the stock layout
- Starting from 1.2.7, flashing initramfs from telnet to firmware partition -> gets me to OpenWRT recovery
- Starting from OpenWRT recovery above, running sysupgrade with sysupgrade.bin produces the following log, but results in ERROR: can't get kernel image!
root@OpenWrt:/tmp# sysupgrade sysupgrade.bin
Cannot save config while running from ramdisk.
Sun Jul 31 15:14:26 UTC 2022 upgrade: Commencing upgrade. Closing all shell sessions.
Watchdog handover: fd=3
- watchdog -
Watchdog does not have CARDRESET support
Sun Jul 31 15:14:26 UTC 2022 upgrade: Sending TERM to remaining processes ...
Sun Jul 31 15:14:30 UTC 2022 upgrade: Sending KILL to remaining processes ...
[ 117.270042] stage2 (2885): drop_caches: 3
Sun Jul 31 15:14:36 UTC 2022 upgrade: Switching to ramdisk...
Sun Jul 31 15:14:37 UTC 2022 upgrade: Performing system upgrade...
Unlocking kernel ...
Writing from <stdin> to kernel ...
[ 119.784863] ubi0: attaching mtd9
[ 120.294534] ubi0 error: 0xffffffc010533214: bad image sequence number 1662173734 in PEB 848, expected 1008933751
[ 120.304715] Erase counter header dump:
[ 120.308459] magic 0x55424923
[ 120.312197] version 1
[ 120.315154] ec 1
[ 120.318116] vid_hdr_offset 2048
[ 120.321332] data_offset 4096
[ 120.324550] image_seq 1662173734
[ 120.328294] hdr_crc 0xcdce6ec0
[ 120.332031] erase counter header hexdump:
[ 120.336034] 00000000: 55 42 49 23 01 00 00 00 00 00 00 00 00 00 00 01 00 00 08 00 00 00 10 00 63 12 c2 26 00 00 00 00 UBI#....................c..&....
[ 120.349588] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cd ce 6e c0 ..............................n.
[ 120.363223] ubi0 error: 0xffffffc010526d2c: failed to attach mtd9, error -22
ubiattach: error!: cannot attach mtd9
error 22 (Invalid argument)
ubiformat: mtd9 (nand), size 116391936 bytes (111.0 MiB), 888 eraseblocks of 131072 bytes (128.0 KiB), min. I/O size 2048 bytes
libscan: scanning eraseblock 887 -- 100 % complete
ubiformat: 439 eraseblocks have valid erase counter, mean value is 0
ubiformat: 205 eraseblocks are supposedly empty
ubiformat: warning!: 244 of 888 eraseblocks contain non-UBI data
ubiformat: warning!: only 439 of 888 eraseblocks have valid erase counter
ubiformat: erase counter 0 will be used for all eraseblocks
ubiformat: note, arbitrary erase counter value may be specified using -e option
ubiformat: use erase counter 0 for all eraseblocks
ubiformat: formatting era[ 128.642851] ubi0: attaching mtd9
ubiformat: formatting eraseblock 887 -- 100 % complete
[ 129.223333] ubi0: scanning is finished
[ 129.232685] ubi0: attached mtd9 (name "ubi", size 111 MiB)
[ 129.238173] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[ 129.245038] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[ 129.251823] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[ 129.258778] ubi0: good PEBs: 888, bad PEBs: 0, corrupted PEBs: 0
[ 129.264775] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 128
[ 129.271995] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 672344760
[ 129.281034] ubi0: available PEBs: 865, total reserved PEBs: 23, PEBs reserved for bad PEB handling: 19
[ 129.290340] ubi0: background thread "ubi_bgt0d" started, PID 3542
UBI device number 0, total 888 LEBs (112754688 bytes, 107.5 MiB), available 865 LEBs (109834240 bytes, 104.7 MiB), LEB size 126976 bytes (124.0 KiB)
Volume ID 0, size 41 LEBs (5206016 bytes, 4.9 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs", alignment 1
Set volume size to 104628224
Volume ID 1, size 824 LEBs (104628224 bytes, 99.7 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs_data", alignment 1
sysupgrade successful
umount: can't unmount /dev: Resource busy
umount: can't unmount /tmp: Resource busy
[ 131.378505] reboot: Restarting system
F0: 102B 0000
F6: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 0000 0041 [0000]
G0: 0190 0000
T0: 0000 036D [000F]
Jump to BL
UNIVPLL_CON0 = 0xFE000000!!!
mt_pll_init: Set pll frequency for 25M crystal
RAM_CONSOLE preloader last status: 0x0 0x0 0x0 0x0 0x0 0x0
[PMIC_WRAP]wrap_init pass,the return value=0.
[pmic_init] Preloader Start..................
[pmic_init] MT6380 CHIP Code, reg_val = 0, 1:E2 0:E3
[pmic_init] Done...................
Chip part number:7622B
MT7622 Version: 1.2.8, (iPA)
SSC OFF
mt_pll_post_init: mt_get_cpu_freq = 1350000Khz
mt_pll_post_init: mt_get_mem_freq = 1600000Khz
mt_pll_post_init: mt_get_bus_freq = 279980Khz
[PLFM] Init I2C: OK(0)
[BLDR] Build Time: 20210316-161525
==== Dump RGU Reg ========
RGU MODE: 14
RGU LENGTH: FFE0
RGU STA: 40000000
RGU INTERVAL: FFF
RGU SWSYSRST: 8000
==== Dump RGU Reg End ====
RGU: g_rgu_satus:2
mtk_wdt_mode_config mode value=10, tmp:22000010
PL RGU RST: ??
SW reset with bypass power key flag
Find bypass powerkey flag
WDT NONRST=0x20000000
WDT IRQ_EN=0x300002
RGU mtk_wdt_init:MTK_WDT_DEBUG_CTL(590200F3)
[EMI] MDL number = 2
[EMI] DRAMC calibration start
[DDR] Gating glitch patched (0<cnt<=6)
[EMI] DRAMC calibration end
[EMI]rank size auto detect
[EMI]start_addr[0x40000000]=0x12345678, test_addr[0x48000000]= 0xEDCBA987
[EMI]start_addr[0x40000000]=0xEDCBA987, test_addr[0x50000000]= 0xEDCBA987
[EMI]rank0 size: 0x10000000
[MEM] complex R/W mem test pass
RAM_CONSOLE wdt status (0x2)=0x2
mtk_snand_get_device_info
2-Recognize NAND: ID [C8 51 ], Device Name [GD5F1GQ5UEYIG], Page Size [2048]B Spare Size [128]B Total Size [128]MB
[BBT] BMT.v2 is found at 0x3FF
[PLFM] Init Boot Device: OK(0)
[PART] blksz: 2048B
[PART] [0x0000000000000000-0x000000000007FFFF] "PRELOADER" (256 blocks)
[PART] [0x0000000000080000-0x00000000000BFFFF] "tee1" (128 blocks)
[PART] [0x00000000000C0000-0x000000000013FFFF] "lk" (256 blocks)
Device APC domain init setup:
Domain Setup (0x0)
Domain Setup (0x0)
Device APC domain after setup:
Domain Setup (0x0)
Domain Setup (0x0)
[PART] Image with part header
[PART] name : U-Boot
[PART] addr : 41E00000h mode : -1
[PART] size : 356560
[PART] magic: 58881688h
[PART] load "lk" from 0x00000000000C0200 (dev) to 0x41E00000 (mem) [SUCCESS]
[PART] load speed: 16581KB/s, 356560 bytes, 21ms
load lk (ret=0)
[PART] Image with part header
[PART] name : atf
[PART] addr : FFFFFFFFh mode : -1
[PART] size : 57936
[PART] magic: 58881688h
[PART] load "tee1" from 0x0000000000080200 (dev) to 0x43000DC0 (mem) [SUCCESS]
[PART] load speed: 14144KB/s, 57936 bytes, 4ms
load tee1 (ret=0)
[BLDR] bldr load tee part ret=0x0, addr=0x43001000
[BLDR] boot part. not found
[BLDR] part_load_images ret=0x0
[BLDR] Others, jump to ATF
[BLDR] jump to 0x41E00000
[BLDR] <0x41E00000>=0xEA00000F
[BLDR] <0x41E00004>=0xE59FF014
U-Boot 2014.04-rc1 (Nov 12 2021 - 05:58:34)
auto detection g_total_rank_size = 0x F000000
DRAM: 240 MiB
Turn on power orange!
NAND: Recognize SNAND: ID [c8 51 ], Device Name [GD5F1GQ5UEYIG], Page Size [2048]B Spare Size [128]B Total Size [128]MB
[mtk_snand] probe successfully!
Not found in UBOOT NAND flash list
[BBT] BMT.v2 is found at 0x3ff
128 MiB
In: serial
Out: serial
Err: serial
Net: mtk_eth
Uip activated
*** U-Boot SPI NAND ***
1. Load firmware 0 and bootup.
2. Load firmware 1 and bootup.
3. Load firmware selected by Xiaoqiang and bootup.
U-Boot console
trigger button release!
Press UP/DOWN to move or Press 1~3 to choose, ENTER to select
Erasing NAND...
[mtk_nand_erase_hw] mtk_nand_erase_hw @4249, ret:0x40. page:0x280
Erasing at 0x140000 -- 100% complete.
Writing to NAND... OK
Booting System 1
NAND read: device 0 offset 0x2c0000, size 0x2000
8192 bytes read: OK
[do_read_image_blks] This is a FIT image,img_size = 0x396b30
[do_read_image_blks] img_blks = 0x72e
[do_read_image_blks] img_align_size = 0x397000
NAND read: device 0 offset 0x2c0000, size 0x397000
3764224 bytes read: OK
bootm flag=0, states=70f
## Loading kernel from FIT Image at 4007ff28 ...
Bad FIT kernel image format!
ERROR: can't get kernel image!
Please show output for command cat /proc/mtd (for FW 1.2.7 with telnet).
Try replace cmd mtd -r write factory.bin firmware to
mtd -r -e firmware write factory.bin firmware
Hi, thanks for your reply. I think you're on to something.
Here is my output from running cat /proc/mtd:
BusyBox v1.25.1 (2021-10-25 11:02:56 UTC) built-in shell (ash)
-----------------------------------------------------
Welcome to XiaoQiang!
-----------------------------------------------------
$$$$$$\ $$$$$$$\ $$$$$$$$\ $$\ $$\ $$$$$$\ $$\ $$\
$$ __$$\ $$ __$$\ $$ _____| $$ | $$ | $$ __$$\ $$ | $$ |
$$ / $$ |$$ | $$ |$$ | $$ | $$ | $$ / $$ |$$ |$$ /
$$$$$$$$ |$$$$$$$ |$$$$$\ $$ | $$ | $$ | $$ |$$$$$ /
$$ __$$ |$$ __$$< $$ __| $$ | $$ | $$ | $$ |$$ $$<
$$ | $$ |$$ | $$ |$$ | $$ | $$ | $$ | $$ |$$ |\$$\
$$ | $$ |$$ | $$ |$$$$$$$$\ $$$$$$$$$ | $$$$$$ |$$ | \$$\
\__| \__|\__| \__|\________| \_________/ \______/ \__| \__|
root@XiaoQiang:~# cat /proc/mtd
dev: size erasesize name
mtd0: 00020000 00020000 "PL_Header"
mtd1: 00060000 00020000 "Preloader"
mtd2: 00040000 00020000 "ATF"
mtd3: 00080000 00020000 "uboot"
mtd4: 00040000 00020000 "Nvram"
mtd5: 00040000 00020000 "Bdata"
mtd6: 00080000 00020000 "Factory"
mtd7: 00040000 00020000 "crash"
mtd8: 00040000 00020000 "crash_log"
mtd9: 01e00000 00020000 "firmware"
mtd10: 01e00000 00020000 "firmware1"
mtd11: 002a0000 00020000 "kernel"
mtd12: 01b60000 00020000 "rootfs"
mtd13: 03200000 00020000 "overlay"
mtd14: 00500000 00020000 "obr"
root@XiaoQiang:~#
Comparing it to the table shown in the wiki, I note that I have a partition called crash_log instead of crash_syslog, and I have firmware1 in mtd10 instead of mtd12. Everything else seems to be aligned, so this one partition misalignment seems likely to be the cause. I have included a picture below showing the mismatch, where all other partitions would be straight lines across.
As you'd expect, using mtd -r -e firmware write factory.bin firmware did not make a difference.
Do the other two routers display the same thing?
Do the other two routers display the same thing?
Do the other two routers display the same thing?
Please show output for nvram show or fw_printenv
After flash opewnwrt firmware enter UBOOT console and enter nand dump 0x2c0000. Show the output to me.
@ azsry
Activate UBOOT console and enter these commands one by one:
nand bad
nand read 0x48000000 0x2c0000 0x1e00000
nand read 0x48000000 0x20c0000 0x1e00000
nand read 0x48000000 0x3ec0000 0x3200000
This is a check for bad blocks.
Sorry for the late reply. Hopefully I have captured everything you asked for.
Here is a full boot log from my working router.
To summarise:
DOES show in the good boot
Similar line shows, but with different ID, Device Name, and Spare Size (64B in good, 128B in bad)
Does NOT show in good boot.
Here is a diffcheck between the two. Note that this is not a perfect comparison as the good boot (right) has some glitches from UART cables being moved slightly.
Here is fw_printenv for the good router:
I can't get the current nvram for the bad router as it does not expose telnet or SSH before boot looping. Please let me know if there is another way to access it.
This is the NAND dump for the good router:
And this is the NAND dump for the bad router:
Clearly something is wrong with the OOB section as it is all ff's.
Here is the good router's block checks:
MT7622> nand bad
Device 0 bad blocks:
MT7622> nand read 0x48000000 0x2c0000 0x1e00000
NAND read: device 0 offset 0x2c0000, size 0x1e00000
31457280 bytes read: OK
MT7622> nand read 0x48000000 0x20c0000 0x1e00000
NAND read: device 0 offset 0x20c0000, size 0x1e00000
31457280 bytes read: OK
MT7622> nand read 0x48000000 0x3ec0000 0x3200000
NAND read: device 0 offset 0x3ec0000, size 0x3200000
52428800 bytes read: OK
Here is the bad router's block checks:
MT7622> nand bad
Device 0 bad blocks:
MT7622> nand read 0x48000000 0x2c0000 0x1e00000
NAND read: device 0 offset 0x2c0000, size 0x1e00000
31457280 bytes read: OK
MT7622> nand read 0x48000000 0x20c0000 0x1e00000
NAND read: device 0 offset 0x20c0000, size 0x1e00000
31457280 bytes read: OK
MT7622> nand read 0x48000000 0x3ec0000 0x3200000
NAND read: device 0 offset 0x3ec0000, size 0x3200000
52428800 bytes read: OK
So NAND has no bad blocks on bad router, thankfully.
1 Like
BAD:
Linux version 5.10.116 (eric@Debian11) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 11.2.0 r19374-34b6abf5a8) 11.2.0, GNU ld (GNU Binutils) 2.37) #0 SMP Mon May 23 07:47:53 2022
GOOD:
Linux version 5.10.138 (builder@buildhost) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 11.2.0 r19685-512e76967f) 11.2.0, GNU ld (GNU Binutils) 2.37) #0 SMP Sat Sep 3 02:55:34 202
Why such a difference?
Hi, sorry for the late reply again. It got very late so I went to bed 
I think that Linux version difference is because I flashed 22.03.0-rc6 onto bad router and regular 22.03.0 onto the good one. I have tried 22.03.0 on the bad router, which gave the same results.
Here is the bad router's boot log on 22.03.0:
And here is a diffcheck again (with timestamps removed since they were 0.002s out of sync and showing up as differences).
I also captured the nvram I am using on the bad router before flashing 22.03.0 onto it. Here it is:
root@XiaoQiang:~# nvram show
CountryCode=CN
Router_unconfigured=0
SN=36418/12SS00139
arch=arm
autostart=yes
baudrate=115200
board=mt7622_evb
board_name=mt7622_evb
boot_auto=bootxq
boot_fw0=run boot_rd_img;bootm
boot_fw1=run boot_rd_img;bootm
boot_rd_img=nand read ${loadaddr} 0x2C0000 2000;image_blks 2048;nand read ${loadaddr} 0x2C0000 ${img_align_size}
boot_rd_img2=nand read ${loadaddr} 0x20C0000 2000;image_blks 2048;nand read ${loadaddr} 0x20C0000 ${img_align_size}
boot_wait=on
bootargs=console=ttyS0,115200n1 loglevel=8 swiotlb=512 rootfstype=squashfs firmware=1 uart_en=1
bootcmd=bootxq
bootdelay=5
bootmenu_0=1. Load firmware 0 and bootup.=run boot_fw0
bootmenu_1=2. Load firmware 1 and bootup.=run boot_fw1
bootmenu_2=3. Load firmware selected by Xiaoqiang and bootup.=run boot_auto
bootmenu_delay=30
color=100
cpu=armv7
ethact=mtk_eth
ethaddr=a4:39:b3:73:75:92
ethaddr_wan=a4:39:b3:23:71:86
fdt_high=0x6c000000
flag_boot_rootfs=1
flag_boot_success=1
flag_boot_type=2
flag_last_success=1
flag_ota_reboot=0
flag_try_sys1_failed=0
flag_try_sys2_failed=0
invaild_env=no
ipaddr=192.168.31.1
loadaddr=0x4007FF28
miot_did=565960060
miot_key=GUbgwj8OSosiwe1Q
mode=Router
model=RB03
no_wifi_dev_times=0
nv_sys_pwd=de5c1576433c2fed0ebaa96f53c82f4c863618a6
nv_wifi_enc=psk2
nv_wifi_enc1=psk2
nv_wifi_pwd=testtest
nv_wifi_pwd1=testtest
nv_wifi_ssid=Redmi_7186
nv_wifi_ssid1=Redmi_7186
restore_defaults=0
serverip=192.168.31.100
soc=mt7622
ssh_en=1
stderr=serial
stdin=serial
stdout=serial
telnet_en=0
uart_en=1
vendor=mediatek
wl0_radio=1
wl0_ssid=xiaomi-router-rb03_miap7186_5G
wl1_radio=1
wl1_ssid=xiaomi-router-rb03_miap7186
This nvram is stock from 1.2.7 firmware, then running these commands from the wiki:
nvram set ssh_en=1
nvram set uart_en=1
nvram set boot_wait=on
nvram set flag_boot_success=1
nvram set flag_try_sys1_failed=0
nvram set flag_try_sys2_failed=0
nvram set "boot_fw1=run boot_rd_img;bootm"
nvram commit
I noticed in the diff that my good router had firmware=0 in the bootargs nvram property, but the bad router is firmware=1. Could this cause some issues?
Here the whole problem is described:
2 fit-fw partitions found on MTD device kernel
Creating 2 MTD partitions on "kernel":
0x000000000000-0x0000003a0000 : "kernel"
0x0000003e0000-0x000000400000 : "rootfs"
mtd: device 10 (rootfs) set to be root filesystem
mtdsplit: no squashfs found in "rootfs"
There is no UBIFS at offset 0x3e0000, since in the firmware UBIFS is located at offset 0x400000.
WARN: UBI: EOF marker found, PEBs from 43 will be erased
Before flash factory.bin to firmware partition try execute commands: mtd erase firmware1; mtd erase overlay
Try flash firmware without new spi-nand driver: https://downloads.openwrt.org/releases/22.03.0-rc1/targets/mediatek/mt7622/
UPD: Look similar nand chip: Adding OpenWrt support for Xiaomi "Redmi Router AX6S"/"Xiaomi Router AX3200" - #517 by arch_pilot
I tried erasing firmware1 and overlay partitions, then flashing 22.03.0-rc1 (I assume this has the old spi-nand driver?). Still the same error 
Here is the boot log for that:
F0: 102B 0000
F6: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 0000 0041 [0000]
G0: 0190 0000
T0: 0000 036D [000F]
Jump to BL
UNIVPLL_CON0 = 0xFE000000!!!
mt_pll_init: Set pll frequency for 25M crystal
RAM_CONSOLE preloader last status: 0x0 0x0 0x0 0x0 0x0 0x0
[PMIC_WRAP]wrap_init pass,the return value=0.
[pmic_init] Preloader Start..................
[pmic_init] MT6380 CHIP Code, reg_val = 0, 1:E2 0:E3
[pmic_init] Done...................
Chip part number:7622B
MT7622 Version: 1.2.8, (iPA)
SSC OFF
mt_pll_post_init: mt_get_cpu_freq = 1350000Khz
mt_pll_post_init: mt_get_mem_freq = 1600096Khz
mt_pll_post_init: mt_get_bus_freq = 279980Khz
[PLFM] Init I2C: OK(0)
[BLDR] Build Time: 20210316-161525
==== Dump RGU Reg ========
RGU MODE: 14
RGU LENGTH: FFE0
RGU STA: 40000000
RGU INTERVAL: FFF
RGU SWSYSRST: 8000
==== Dump RGU Reg End ====
RGU: g_rgu_satus:2
mtk_wdt_mode_config mode value=10, tmp:22000010
PL RGU RST: ??
SW reset with bypass power key flag
Find bypass powerkey flag
WDT NONRST=0x20000000
WDT IRQ_EN=0x300002
RGU mtk_wdt_init:MTK_WDT_DEBUG_CTL(590200F3)
[EMI] MDL number = 2
[EMI] DRAMC calibration start
[DDR] Gating glitch patched (0<cnt<=6)
[EMI] DRAMC calibration end
[EMI]rank size auto detect
[EMI]start_addr[0x40000000]=0x12345678, test_addr[0x48000000]= 0xEDCBA987
[EMI]start_addr[0x40000000]=0xEDCBA987, test_addr[0x50000000]= 0xEDCBA987
[EMI]rank0 size: 0x10000000
[MEM] complex R/W mem test pass
RAM_CONSOLE wdt status (0x2)=0x2
mtk_snand_get_device_info
2-Recognize NAND: ID [C8 51 ], Device Name [GD5F1GQ5UEYIG], Page Size [2048]B Spare Size [128]B Total Size [128]MB
[BBT] BMT.v2 is found at 0x3FF
[PLFM] Init Boot Device: OK(0)
[PART] blksz: 2048B
[PART] [0x0000000000000000-0x000000000007FFFF] "PRELOADER" (256 blocks)
[PART] [0x0000000000080000-0x00000000000BFFFF] "tee1" (128 blocks)
[PART] [0x00000000000C0000-0x000000000013FFFF] "lk" (256 blocks)
Device APC domain init setup:
Domain Setup (0x0)
Domain Setup (0x0)
Device APC domain after setup:
Domain Setup (0x0)
Domain Setup (0x0)
[PART] Image with part header
[PART] name : U-Boot
[PART] addr : 41E00000h mode : -1
[PART] size : 356560
[PART] magic: 58881688h
[PART] load "lk" from 0x00000000000C0200 (dev) to 0x41E00000 (mem) [SUCCESS]
[PART] load speed: 16581KB/s, 356560 bytes, 21ms
load lk (ret=0)
[PART] Image with part header
[PART] name : atf
[PART] addr : FFFFFFFFh mode : -1
[PART] size : 57936
[PART] magic: 58881688h
[PART] load "tee1" from 0x0000000000080200 (dev) to 0x43000DC0 (mem) [SUCCESS]
[PART] load speed: 14144KB/s, 57936 bytes, 4ms
load tee1 (ret=0)
[BLDR] bldr load tee part ret=0x0, addr=0x43001000
[BLDR] boot part. not found
[BLDR] part_load_images ret=0x0
[BLDR] Others, jump to ATF
[BLDR] jump to 0x41E00000
[BLDR] <0x41E00000>=0xEA00000F
[BLDR] <0x41E00004>=0xE59FF014
U-Boot 2014.04-rc1 (Nov 12 2021 - 05:58:34)
auto detection g_total_rank_size = 0x F000000
DRAM: 240 MiB
Turn on power orange!
NAND: Recognize SNAND: ID [c8 51 ], Device Name [GD5F1GQ5UEYIG], Page Size [2048]B Spare Size [128]B Total Size [128]MB
[mtk_snand] probe successfully!
Not found in UBOOT NAND flash list
[BBT] BMT.v2 is found at 0x3ff
128 MiB
In: serial
Out: serial
Err: serial
Net: mtk_eth
Uip activated
*** U-Boot SPI NAND ***
1. Load firmware 0 and bootup.
2. Load firmware 1 and bootup.
3. Load firmware selected by Xiaoqiang and bootup.
U-Boot console
trigger button release!
Press UP/DOWN to move or Press 1~3 to choose, ENTER to select
Erasing NAND...
[mtk_nand_erase_hw] mtk_nand_erase_hw @4249, ret:0x40. page:0x280
Erasing at 0x140000 -- 100% complete.
Writing to NAND... OK
Booting System 1
NAND read: device 0 offset 0x2c0000, size 0x2000
8192 bytes read: OK
[do_read_image_blks] This is a FIT image,img_size = 0x395204
[do_read_image_blks] img_blks = 0x72b
[do_read_image_blks] img_align_size = 0x395800
NAND read: device 0 offset 0x2c0000, size 0x395800
3758080 bytes read: OK
bootm flag=0, states=70f
## Loading kernel from FIT Image at 4007ff28 ...
Using 'config-1' configuration
Trying 'kernel-1' kernel subimage
Description: ARM64 OpenWrt Linux-5.10.111
Type: Kernel Image
Compression: lzma compressed
Data Start: 0x40080014
Data Size: 3726452 Bytes = 3.6 MiB
Architecture: AArch64
OS: Linux
Load Address: 0x44000000
Entry Point: 0x44000000
Hash algo: crc32
Hash value: 2b985b37
Hash algo: sha1
Hash value: 40fe4de275a048289f9c67f65bb59747dc9e6f8c
Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 4007ff28 ...
Using 'config-1' configuration
Trying 'fdt-1' fdt subimage
Description: ARM64 OpenWrt xiaomi_redmi-router-ax6s device tree blob
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x4040ddd0
Data Size: 28171 Bytes = 27.5 KiB
Architecture: AArch64
Hash algo: crc32
Hash value: 9760fe11
Hash algo: sha1
Hash value: de430ae388f338ec99ec660fd095148655fdd052
Verifying Hash Integrity ... crc32+ sha1+ OK
Booting using the fdt blob at 0x4040ddd0
Uncompressing Kernel Image ... OK
Loading Device Tree to 4cf39000, end 4cf42e0a ... OK
Starting kernel ...
[ATF][ 7.831775]save kernel info
[ATF][ 7.834712]Kernel_EL2
[ATF][ 7.837382]Kernel is 64Bit
[ATF][ 7.840470]pc=0x44000000, r0=0x4cf39000, r1=0x0
INFO: BL3-1: Preparing for EL3 exit to normal world, Kernel
INFO: BL3-1: Next image address = 0x44000000
INFO: BL3-1: Next image spsr = 0x3c9
[ATF][ 7.858168]el3_exit
[ 0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[ 0.000000] Linux version 5.10.111 (builder@buildhost) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 11.2.0 r19302-df622768da) 11.2.0, GNU ld (GNU Binutils) 2.37) #0 SMP Wed Apr 20 10:37:37 2022
[ 0.000000] Machine model: Xiaomi Redmi Router AX6S
[ 0.000000] Zone ranges:
[ 0.000000] DMA [mem 0x0000000040000000-0x000000004fffffff]
[ 0.000000] DMA32 empty
[ 0.000000] Normal empty
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000040000000-0x0000000042ffffff]
[ 0.000000] node 0: [mem 0x0000000043000000-0x000000004302ffff]
[ 0.000000] node 0: [mem 0x0000000043030000-0x000000004fffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000004fffffff]
[ 0.000000] On node 0 totalpages: 65536
[ 0.000000] DMA zone: 1024 pages used for memmap
[ 0.000000] DMA zone: 0 pages reserved
[ 0.000000] DMA zone: 65536 pages, LIFO batch:15
[ 0.000000] psci: probing for conduit method from DT.
[ 0.000000] psci: PSCIv0.2 detected in firmware.
[ 0.000000] psci: Using standard PSCI v0.2 function IDs
[ 0.000000] psci: Trusted OS migration not required
[ 0.000000] percpu: Embedded 20 pages/cpu s43864 r8192 d29864 u81920
[ 0.000000] pcpu-alloc: s43864 r8192 d29864 u81920 alloc=20*4096
[ 0.000000] pcpu-alloc: [0] 0 [0] 1
[ 0.000000] Detected VIPT I-cache on CPU0
[ 0.000000] CPU features: detected: ARM erratum 845719
[ 0.000000] CPU features: kernel page table isolation disabled by kernel configuration
[ 0.000000] CPU features: detected: ARM erratum 843419
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 64512
[ 0.000000] Kernel command line: console=ttyS0,115200n1 loglevel=8 swiotlb=512 rootfstype=squashfs firmware=1 uart_en=1
[ 0.000000] Dentry cache hash table entries: 32768 (order: 6, 262144 bytes, linear)
[ 0.000000] Inode-cache hash table entries: 16384 (order: 5, 131072 bytes, linear)
[ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[ 0.000000] Memory: 232888K/262144K available (8254K kernel code, 896K rwdata, 1436K rodata, 448K init, 302K bss, 29256K reserved, 0K cma-reserved)
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[ 0.000000] rcu: Hierarchical RCU implementation.
[ 0.000000] Tracing variant of Tasks RCU enabled.
[ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[ 0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[ 0.000000] GIC: GICv2 detected, but range too small and irqchip.gicv2_force_probe not set
[ 0.000000] random: get_random_bytes called from 0xffffffc010980c4c with crng_init=0
[ 0.000000] arch_timer: cp15 timer(s) running at 12.50MHz (phys).
[ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x2e2049cda, max_idle_ns: 440795202628 ns
[ 0.000003] sched_clock: 56 bits at 12MHz, resolution 80ns, wraps every 4398046511080ns
[ 0.000162] Calibrating delay loop (skipped), value calculated using timer frequency.. 25.00 BogoMIPS (lpj=125000)
[ 0.000172] pid_max: default: 32768 minimum: 301
[ 0.000244] Mount-cache hash table entries: 512 (order: 0, 4096 bytes, linear)
[ 0.000250] Mountpoint-cache hash table entries: 512 (order: 0, 4096 bytes, linear)
[ 0.001195] rcu: Hierarchical SRCU implementation.
[ 0.001284] dyndbg: Ignore empty _ddebug table in a CONFIG_DYNAMIC_DEBUG_CORE build
[ 0.001456] smp: Bringing up secondary CPUs ...
[ 0.001767] Detected VIPT I-cache on CPU1
[ 0.001811] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
[ 0.001873] smp: Brought up 1 node, 2 CPUs
[ 0.001881] SMP: Total of 2 processors activated.
[ 0.001886] CPU features: detected: 32-bit EL0 Support
[ 0.001890] CPU features: detected: CRC32 instructions
[ 0.001998] CPU: All CPU(s) started at EL2
[ 0.002008] alternatives: patching kernel code
[ 0.005160] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.005180] futex hash table entries: 512 (order: 3, 32768 bytes, linear)
[ 0.005266] pinctrl core: initialized pinctrl subsystem
[ 0.006197] NET: Registered protocol family 16
[ 0.006575] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations
[ 0.006600] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[ 0.006621] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[ 0.006928] thermal_sys: Registered thermal governor 'fair_share'
[ 0.006933] thermal_sys: Registered thermal governor 'bang_bang'
[ 0.006938] thermal_sys: Registered thermal governor 'step_wise'
[ 0.006943] thermal_sys: Registered thermal governor 'user_space'
[ 0.007203] ASID allocator initialised with 65536 entries
[ 0.007703] pstore: Registered ramoops as persistent store backend
[ 0.007712] ramoops: using 0x10000@0x42ff0000, ecc: 0
[ 0.032316] cryptd: max_cpu_qlen set to 1000
[ 0.033881] SCSI subsystem initialized
[ 0.033999] libata version 3.00 loaded.
[ 0.034153] usbcore: registered new interface driver usbfs
[ 0.034187] usbcore: registered new interface driver hub
[ 0.034211] usbcore: registered new device driver usb
[ 0.035248] clocksource: Switched to clocksource arch_sys_counter
[ 0.035780] NET: Registered protocol family 2
[ 0.035859] IP idents hash table entries: 4096 (order: 3, 32768 bytes, linear)
[ 0.036193] tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 4096 bytes, linear)
[ 0.036206] TCP established hash table entries: 2048 (order: 2, 16384 bytes, linear)
[ 0.036223] TCP bind hash table entries: 2048 (order: 3, 32768 bytes, linear)
[ 0.036253] TCP: Hash tables configured (established 2048 bind 2048)
[ 0.036316] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[ 0.036331] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[ 0.036403] NET: Registered protocol family 1
[ 0.036424] PCI: CLS 0 bytes, default 64
[ 0.038758] workingset: timestamp_bits=46 max_order=16 bucket_order=0
[ 0.041299] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.041309] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.074710] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 250)
[ 0.078904] mt-pmic-pwrap 10001000.pwrap: unexpected interrupt int=0x1
[ 0.093273] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[ 0.095106] printk: console [ttyS0] disabled
[ 0.115314] 11002000.serial: ttyS0 at MMIO 0x11002000 (irq = 21, base_baud = 1562500) is a ST16650V2
[ 0.718641] printk: console [ttyS0] enabled
[ 0.723724] mtk_rng 1020f000.rng: registered RNG driver
[ 0.723894] random: fast init done
[ 0.729142] cacheinfo: Unable to detect cache hierarchy for CPU 0
[ 0.732499] random: crng init done
[ 0.740593] loop: module loaded
[ 0.744966] Loading iSCSI transport class v2.0-870.
[ 0.751117] mtk-snand 1100d000.snfi: chip is GD5F1GQ5xExxG, size 128MB, page size 2048, oob size 128
[ 0.764202] [BBT] BMT.v2 is found at 0x3fe
[ 0.768499] 10 fixed-partitions partitions found on MTD device 1100d000.snfi
[ 0.775565] Creating 10 MTD partitions on "1100d000.snfi":
[ 0.781043] 0x000000000000-0x000000080000 : "Preloader"
[ 0.787463] 0x000000080000-0x0000000c0000 : "ATF"
[ 0.792827] 0x0000000c0000-0x000000140000 : "u-boot"
[ 0.798885] 0x000000140000-0x000000180000 : "u-boot-env"
[ 0.804839] 0x000000180000-0x0000001c0000 : "bdata"
[ 0.810387] 0x0000001c0000-0x000000240000 : "factory"
[ 0.816574] 0x000000240000-0x000000280000 : "crash"
[ 0.822096] 0x000000280000-0x0000002c0000 : "crash_log"
[ 0.827991] 0x0000002c0000-0x0000006c0000 : "kernel"
[ 0.841058] 2 fit-fw partitions found on MTD device kernel
[ 0.846561] Creating 2 MTD partitions on "kernel":
[ 0.851345] 0x000000000000-0x0000003a0000 : "kernel"
[ 0.862697] 0x0000003e0000-0x000000400000 : "rootfs"
[ 0.868112] mtd: device 10 (rootfs) set to be root filesystem
[ 0.874077] mtdsplit: no squashfs found in "rootfs"
[ 0.878961] 0x0000006c0000-0x0000075c0000 : "ubi"
[ 1.121918] mtk_soc_eth 1b100000.ethernet eth0: mediatek frame engine at 0xffffffc011aa0000, irq 28
[ 1.131480] i2c /dev entries driver
[ 1.135909] mtk-wdt 10212000.watchdog: Watchdog enabled (timeout=31 sec, nowayout=0)
[ 1.146614] NET: Registered protocol family 10
[ 1.151663] Segment Routing with IPv6
[ 1.155392] NET: Registered protocol family 17
[ 1.159855] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[ 1.172868] 8021q: 802.1Q VLAN Support v1.8
[ 1.178353] pstore: Using crash dump compression: deflate
[ 1.193117] mtk-pcie 1a143000.pcie: host bridge /pcie@1a143000 ranges:
[ 1.199700] mtk-pcie 1a143000.pcie: Parsing ranges property...
[ 1.205553] mtk-pcie 1a143000.pcie: MEM 0x0020000000..0x0027ffffff -> 0x0020000000
[ 1.240106] mtk-pcie 1a143000.pcie: PCI host bridge to bus 0000:00
[ 1.246292] pci_bus 0000:00: root bus resource [bus 00-ff]
[ 1.251770] pci_bus 0000:00: root bus resource [mem 0x20000000-0x27ffffff]
[ 1.258641] pci_bus 0000:00: scanning bus
[ 1.262684] pci 0000:00:00.0: [14c3:3258] type 01 class 0x060400
[ 1.268715] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x1ffffffff 64bit pref]
[ 1.277373] pci_bus 0000:00: fixups for bus
[ 1.281552] pci 0000:00:00.0: scanning [bus 00-00] behind bridge, pass 0
[ 1.288255] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[ 1.296265] pci 0000:00:00.0: scanning [bus 00-00] behind bridge, pass 1
[ 1.303050] pci_bus 0000:01: scanning bus
[ 1.307271] pci 0000:01:00.0: [14c3:7915] type 00 class 0x000280
[ 1.313447] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit pref]
[ 1.320772] pci 0000:01:00.0: reg 0x18: [mem 0x00000000-0x00003fff 64bit pref]
[ 1.328096] pci 0000:01:00.0: reg 0x20: [mem 0x00000000-0x00000fff 64bit pref]
[ 1.336050] pci 0000:01:00.0: supports D1 D2
[ 1.340311] pci 0000:01:00.0: PME# supported from D0 D1 D2 D3hot D3cold
[ 1.346949] pci 0000:01:00.0: PME# disabled
[ 1.351427] pci 0000:01:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s PCIe x1 link at 0000:00:00.0 (capable of 4.000 Gb/s with 5.0 GT/s PCIe x1 link)
[ 1.396397] pci_bus 0000:01: fixups for bus
[ 1.400575] pci_bus 0000:01: bus scan returning with max=01
[ 1.406152] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01
[ 1.412762] pci_bus 0000:00: bus scan returning with max=01
[ 1.418347] pci 0000:00:00.0: BAR 0: no space for [mem size 0x200000000 64bit pref]
[ 1.425998] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x200000000 64bit pref]
[ 1.433994] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x201fffff]
[ 1.440780] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit pref]
[ 1.448602] pci 0000:01:00.0: BAR 2: assigned [mem 0x20100000-0x20103fff 64bit pref]
[ 1.456426] pci 0000:01:00.0: BAR 4: assigned [mem 0x20104000-0x20104fff 64bit pref]
[ 1.464244] pci 0000:00:00.0: PCI bridge to [bus 01]
[ 1.469210] pci 0000:00:00.0: bridge window [mem 0x20000000-0x201fffff]
[ 1.476065] pcieport 0000:00:00.0: of_irq_parse_pci: failed with rc=-22
[ 1.482669] pcieport 0000:00:00.0: assign IRQ: got 0
[ 1.487640] pcieport 0000:00:00.0: enabling device (0000 -> 0002)
[ 1.493742] pcieport 0000:00:00.0: enabling bus mastering
[ 1.499566] mtk_hsdma 1b007000.dma-controller: Using 3 as missing dma-requests property
[ 1.507756] mtk_hsdma 1b007000.dma-controller: MediaTek HSDMA driver registered
[ 1.562928] mt7530 mdio-bus:00 wan (uninitialized): PHY [mt7530-0:01] driver [MediaTek MT7531 PHY] (irq=136)
[ 1.582561] mt7530 mdio-bus:00 lan1 (uninitialized): PHY [mt7530-0:02] driver [MediaTek MT7531 PHY] (irq=137)
[ 1.602185] mt7530 mdio-bus:00 lan2 (uninitialized): PHY [mt7530-0:03] driver [MediaTek MT7531 PHY] (irq=138)
[ 1.621781] mt7530 mdio-bus:00 lan3 (uninitialized): PHY [mt7530-0:04] driver [MediaTek MT7531 PHY] (irq=139)
[ 1.633358] mt7530 mdio-bus:00: configuring for fixed/2500base-x link mode
[ 1.640393] DSA: tree 0 setup
[ 1.640592] mt7530 mdio-bus:00: Link is Up - 2.5Gbps/Full - flow control rx/tx
[ 1.644098] UBI: auto-attach mtd11
[ 1.653980] ubi0: attaching mtd11
[ 1.685565] UBI: EOF marker found, PEBs from 43 will be erased
[ 1.871080] ubi0: scanning is finished
[ 1.905012] ubi0: volume 1 ("rootfs_data") re-sized from 9 to 824 LEBs
[ 1.911843] ubi0: attached mtd11 (name "ubi", size 111 MiB)
[ 1.917416] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[ 1.924281] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[ 1.931064] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[ 1.938020] ubi0: good PEBs: 888, bad PEBs: 0, corrupted PEBs: 0
[ 1.944017] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[ 1.951236] ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 1650451057
[ 1.960363] ubi0: available PEBs: 0, total reserved PEBs: 888, PEBs reserved for bad PEB handling: 19
[ 1.969627] ubi0: background thread "ubi_bgt0d" started, PID 775
[ 1.976769] block ubiblock0_0: created from ubi0:0(rootfs)
[ 1.991869] List of all partitions:
[ 1.995389] 1f00 512 mtdblock0
[ 1.995391] (driver?)
[ 2.001920] 1f04 256 mtdblock1
[ 2.001922] (driver?)
[ 2.008458] 1f08 512 mtdblock2
[ 2.008460] (driver?)
[ 2.014988] 1f0c 256 mtdblock3
[ 2.014990] (driver?)
[ 2.021524] 1f10 256 mtdblock4
[ 2.021526] (driver?)
[ 2.028059] 1f14 512 mtdblock5
[ 2.028061] (driver?)
[ 2.034589] 1f18 256 mtdblock6
[ 2.034591] (driver?)
[ 2.041124] 1f1c 256 mtdblock7
[ 2.041126] (driver?)
[ 2.047664] 1f20 4096 mtdblock8
[ 2.047666] (driver?)
[ 2.054193] 1f24 3712 mtdblock9
[ 2.054195] (driver?)
[ 2.060727] 1f28 128 mtdblock10
[ 2.060729] (driver?)
[ 2.067353] 1f2c 113664 mtdblock11
[ 2.067355] (driver?)
[ 2.073970] 103:00000 5084 ubiblock0_0
[ 2.073972] (driver?)
[ 2.080675] No filesystem could mount root, tried:
[ 2.080677] squashfs
[ 2.085557]
[ 2.089304] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(31,40)
[ 2.097733] SMP: stopping secondary CPUs
[ 2.101647] Kernel Offset: disabled
[ 2.105127] CPU features: 0x0000002,04002004
[ 2.109386] Memory Limit: none
[ 2.115618] Rebooting in 1 seconds..
And a diffcheck between this and the good boot. Note there will be more differences because I am comparing rc1 to stable.
https://www.diffnow.com/report/euwtk
Yes interesting that the post you linked has the same partition layout as me... but they were still able to flash OpenWRT and have it boot.
@arch_pilot and @diepeterpan Did you have to do anything special to get OpenWRT running on your models?
I see that they were able to modify the partitions. Is it possible to remake my mtd partition table to be the same as the other NAND chip's layout?
@azsry
Try flash factory image without denx compatible: https://drive.google.com/drive/folders/10Z_OEpHX8OOiYuBnC1DjDhnC0_SPNaeJ?usp=sharing
1 Like