ASUS 4G-AX56 - Can't flash owrt via ssh

Hi ! I am trying to flash openwrt on my asus 4g-Ax56, I'm folowing the tutorial via ssh here: https://openwrt.org/toh/asus/4g-ax56
At the step 4 I have to flash the img on the "firmware" partition but I have the error Segmentation fault. What is the firmware partition to flash ? I don't see any partition named firmware. with "cat /proc/mtd" I see :
mtd0: 08000000 00020000 "mtk-nand"
mtd1: 000e0000 00020000 "Bootloader"
mtd2: 00100000 00020000 "nvram"
mtd3: 00100000 00020000 "Factory"
mtd4: 00100000 00020000 "Factory2"
mtd5: 03200000 00020000 "Kernel"
mtd6: 003c0000 00020000 "linux"
mtd7: 02e5c22c 00020000 "rootfs"
mtd8: 03200000 00020000 "Kernel2"
mtd9: 01020000 00020000 "jffs2"

On the tutorial page mtd5 is called firmware, but it still not working when I try to flash on "kernel"

Please could you help me ?

Thx !

Check the bottom sticker, is it really a 4G AX56.

yes it is..

It is not

firmware partition is prominently absent.

Please use ASUS firmware restore to the version device had from the factory and try OpenWrt again.

Since you seem to have ssh access, can you try to run ubus call system board, and post the output ?

what "it is not" ?
You mean retry after a factory reset ? I have already tried this but I can..

ubus not found

Post the bottom sticker too, mask any MAC.

I'm sorry, I'm not familiar with this field, and I don't want to share sensitive data. Can you tell me what you need and why?

What's why you were asked to mask and identifiable data on it.

We need to make sure your device is what you think it is.

Can you post dmesg instead, executed via ssh, at least the initial part.

Use the </> button on top of the edit windows to wrap the output.

It is a very long list, how far do you want to see ?

[    0.000000] Linux version 4.4.198 (gitserv_asus@tpbuildsvrvu01) (gcc version 5.4.0 (LEDE GCC 5.4.0 r0-22e5567) ) #1 SMP Thu Aug 22 09:44:00 CST 2024
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is MediaTek MT7621 RFB (802.11ax, NAND with NMBM)
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 1c000000 @ 00000000 (usable)
[    0.000000]  memory: 04000000 @ 20000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   DMA      [mem 0x0000000000000000-0x0000000000ffffff]
[    0.000000]   Normal   [mem 0x0000000001000000-0x000000001fffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x000000001bffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x000000001bffffff]
[    0.000000] On node 0 totalpages: 114688
[    0.000000] free_area_init_node: node 0, pgdat 8199f020, node_mem_map 81d04000
[    0.000000]   DMA zone: 32 pages used for memmap
[    0.000000]   DMA zone: 0 pages reserved
[    0.000000]   DMA zone: 4096 pages, LIFO batch:0
[    0.000000]   Normal zone: 864 pages used for memmap
[    0.000000]   Normal zone: 110592 pages, LIFO batch:31
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] PERCPU: Embedded 10 pages/cpu @82095000 s9280 r8192 d23488 u40960
[    0.000000] pcpu-alloc: s9280 r8192 d23488 u40960 alloc=10*4096
[    0.000000] pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 113792
[    0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
[    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Writing ErrCtl register=00033760
[    0.000000] Readback ErrCtl register=00033760
[    0.000000] Memory: 441208K/458752K available (7841K kernel code, 2950K rwdata, 1916K rodata, 272K init, 319K bss, 17544K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS:256
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.007778] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.070405] pid_max: default: 32768 minimum: 301
[    0.075126] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.081652] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    6.023984] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    6.023993] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    6.024004] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    6.024151] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.177688] Synchronize counters for CPU 1: done.
[    5.790994] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    5.791001] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    5.791007] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    5.791078] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.268070] Synchronize counters for CPU 2: done.
[    5.881099] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    5.881106] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    5.881112] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    5.881196] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.353252] Synchronize counters for CPU 3: done.
[    0.357990] Brought up 4 CPUs
[    0.365691] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.375488] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.381776] pinctrl core: initialized pinctrl subsystem
[    0.387537] NET: Registered protocol family 16
[    0.400333] FPU Affinity set after 11720 emulations
[    0.428158] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    0.433790] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    0.439422] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    0.445508] mt7621-pci 1e140000.pcie: Failed to get gpio for PCIe1
[    0.451642] mt7621-pci 1e140000.pcie: Failed to get gpio for PCIe2
[    0.658069] PCIe port 2 link down
[    0.661298] PCI coherence region base: 0x60000000, mask/settings: 0xf0000002
[    0.700863] PCI host bridge to bus 0000:00
[    0.704897] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    0.711762] pci_bus 0000:00: root bus resource [io  0x1e160000-0x1e16ffff]
[    0.718538] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    0.725293] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    0.733189] pci 0000:00:00.0: [0e8d:0801] type 01 class 0x060400
[    0.733243] pci 0000:00:00.0: reg 0x14: [mem 0x60400000-0x6040ffff]
[    0.733310] pci 0000:00:00.0: supports D1
[    0.733323] pci 0000:00:00.0: PME# supported from D0 D1 D3hot
[    0.733576] pci 0000:00:01.0: [0e8d:0801] type 01 class 0x060400
[    0.733640] pci 0000:00:01.0: reg 0x14: [mem 0x60410000-0x6041ffff]
[    0.733719] pci 0000:00:01.0: supports D1
[    0.733734] pci 0000:00:01.0: PME# supported from D0 D1 D3hot
[    0.734193] pci 0000:01:00.0: [14c3:7916] type 00 class 0x000280
[    0.734290] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit pref]
[    0.734328] pci 0000:01:00.0: reg 0x18: [mem 0x00000000-0x00003fff 64bit pref]
[    0.734362] pci 0000:01:00.0: reg 0x20: [mem 0x00000000-0x00000fff 64bit pref]
[    0.734469] pci 0000:01:00.0: supports D1 D2
[    0.734482] pci 0000:01:00.0: PME# supported from D0 D1 D2 D3hot D3cold
[    0.734698] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01
[    0.734923] pci 0000:02:00.0: [14c3:7915] type 00 class 0x000280
[    0.735018] pci 0000:02:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit pref]
[    0.735057] pci 0000:02:00.0: reg 0x18: [mem 0x00000000-0x00003fff 64bit pref]
[    0.735091] pci 0000:02:00.0: reg 0x20: [mem 0x00000000-0x00000fff 64bit pref]
[    0.735196] pci 0000:02:00.0: supports D1 D2
[    0.735209] pci 0000:02:00.0: PME# supported from D0 D1 D2 D3hot D3cold
[    0.735481] pci_bus 0000:02: busn_res: [bus 02-ff] end is updated to 02
[    0.735517] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 02
[    0.735599] pci 0000:00:00.0: BAR 9: assigned [mem 0x60000000-0x601fffff pref]
[    0.742720] pci 0000:00:01.0: BAR 9: assigned [mem 0x60200000-0x603fffff pref]
[    0.749909] pci 0000:00:00.0: BAR 1: assigned [mem 0x60400000-0x6040ffff]
[    0.756626] pci 0000:00:01.0: BAR 1: assigned [mem 0x60410000-0x6041ffff]
[    0.763396] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit pref]
[    0.771076] pci 0000:01:00.0: BAR 2: assigned [mem 0x60100000-0x60103fff 64bit pref]
[    0.778787] pci 0000:01:00.0: BAR 4: assigned [mem 0x60104000-0x60104fff 64bit pref]
[    0.786446] pci 0000:00:00.0: PCI bridge to [bus 01]
[    0.791379] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x601fffff pref]
[    0.798541] pci 0000:02:00.0: BAR 0: assigned [mem 0x60200000-0x602fffff 64bit pref]
[    0.806253] pci 0000:02:00.0: BAR 2: assigned [mem 0x60300000-0x60303fff 64bit pref]
[    0.813930] pci 0000:02:00.0: BAR 4: assigned [mem 0x60304000-0x60304fff 64bit pref]
[    0.821631] pci 0000:00:01.0: PCI bridge to [bus 02]
[    0.826522] pci 0000:00:01.0:   bridge window [mem 0x60200000-0x603fffff pref]
[    0.835482] clocksource: Switched to clocksource GIC
[    0.842439] NET: Registered protocol family 2
[    0.847524] TCP established hash table entries: 4096 (order: 2, 16384 bytes)
[    0.854526] TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
[    0.861026] TCP: Hash tables configured (established 4096 bind 4096)
[    0.867407] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    0.873158] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    0.879698] NET: Registered protocol family 1
[    0.884056] PCI: CLS 80 bytes, default 32
[    0.898874] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.904634] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.916800] io scheduler noop registered
[    0.920640] io scheduler deadline registered (default)
[    0.927475] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    0.935120] console [ttyS0] disabled
[    0.938701] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 33, base_baud = 3125000) is a 16550A
[    0.947689] console [ttyS0] enabled
[    0.954543] bootconsole [early0] disabled
[    0.963153] 1e000d00.uartfull: ttyS1 at MMIO 0x1e000d00 (irq = 34, base_baud = 3125000) is a 16550A
[    0.972742] 1e000e00.uartfull: ttyS2 at MMIO 0x1e000e00 (irq = 35, base_baud = 3125000) is a 16550A
[    0.986968] IMQ driver loaded successfully. (numdevs = 3, numqueues = 1, imq_dev_accurate_stats = 1)
[    0.996101] 	Hooking IMQ after NAT on PREROUTING.
[    1.000776] 	Hooking IMQ before NAT on POSTROUTING.
[    1.006092] libphy: Fixed MDIO Bus: probed
[    1.065765] libphy: mdio: probed
[    1.069531] mtk_soc_eth 1e100000.ethernet: generated random MAC address ***************
[    1.078218] mtk_soc_eth 1e100000.ethernet: connected mac 0 to PHY at fixed-0:00 [uid=00000000, driver=Generic PHY]
[    1.089427] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 10
[    1.097860] mtk_soc_eth 1e100000.ethernet: generated random MAC address **************
[    1.106520] mtk_soc_eth 1e100000.ethernet: connected mac 1 to PHY at fixed-0:01 [uid=00000000, driver=Generic PHY]
[    1.117615] mtk_soc_eth 1e100000.ethernet eth1: mediatek frame engine at 0xbe100000, irq 10
[    1.126246] PPP generic driver version 2.4.2
[    1.130745] PPP BSD Compression module registered
[    1.135504] PPP MPPE Compression module registered
[    1.140293] NET: Registered protocol family 24
[    1.144754] PPTP driver version 0.8.5
[    1.148703] register mt_drv
[    1.151681] <--mt7916_hif_init()
[    1.155387] Rx[0] Ring: total 24576 bytes allocated
[    1.164698] Rx[1] Ring: total 16384 bytes allocated
[    1.169715] <-- pci_alloc_tx_rx_ring_mem, Status=0
[    1.207271] 
[    1.207271] 
[    1.207271] === pAd = c0381000, size = 13169408 ===
[    1.207271] 
[    1.218410] <-- RTMPAllocAdapterBlock, Status=0
[    1.222931] PCI CSRBaseAddress =0xc0280000, csr_addr=0xc0280000!
[    1.228971] RTMPInitPCIeDevice():device_id=0x7915
[    1.233660] mt7915_init()-->
[    1.236552] Use the default iPAiLNA bin image!
[    1.241052] <--mt7915_init()
[    1.244169] RtmpOSFileOpen(): Error 2 opening /etc/wireless/l1profile.dat
[    1.251985] wdev_init(caller:RTMP_COM_IoctlHandle+0x39c/0x18ac), wdev(0)
[    1.259706] Rx[0] Ring: total 24576 bytes allocated
[    1.264722] Rx[1] Ring: total 24576 bytes allocated
[    1.271976] Rx[2] Ring: total 8192 bytes allocated
[    1.281141] Rx[3] Ring: total 16384 bytes allocated
[    1.288452] Rx[4] Ring: total 8192 bytes allocated
[    1.293271] <-- pci_alloc_tx_rx_ring_mem, Status=0
[    1.299899] GACT probability NOT on
[    1.303398] Mirror/redirect action on
[    1.307147] u32 classifier
[    1.309837]     Performance counters on
[    1.313647]     input device check on
[    1.317305]     Actions configured
[    1.320724] Netfilter messages via NETLINK v0.30.
[    1.325526] nf_conntrack version 0.5.0 (6893 buckets, 27572 max)
[    1.332040] ctnetlink v0.93: registering with nfnetlink.
[    1.337621] xt_time: kernel timezone is -0000
[    1.342194] gre: GRE over IPv4 demultiplexor driver
[    1.347267] ip_tables: (C) 2000-2006 Netfilter Core Team
[    1.352868] arp_tables: (C) 2002 David S. Miller
[    1.359025] NET: Registered protocol family 10
[    1.365574] ip6_tables: (C) 2000-2006 Netfilter Core Team
[    1.371253] NET: Registered protocol family 17
[    1.375763] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
[    1.388382] l2tp_core: L2TP core driver, V2.0
[    1.392741] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[    1.397541] 8021q: 802.1Q VLAN Support v1.8
[    1.404184] mtkmips-pinmux pinctrl: spi is already enabled
[    1.409719] mtk-nand 1e003000.nand: Error applying setting, reverse things back
[    1.417504] nand: device found, Manufacturer ID: 0xef, Chip ID: 0xf1
[    1.423826] nand: Winbond W29N01HV
[    1.427232] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    1.435328] Scanning device for bad blocks
[    2.283928] nmbm nmbm: Signature found at block 1023 [0x07fe0000]
[    2.293481] nmbm nmbm: First info table with writecount 0 found in block 960
[    2.310528] nmbm nmbm: Second info table with writecount 0 found in block 963
[    2.317778] nmbm nmbm: NMBM has been successfully attached
[    2.323284] 7 ofpart partitions found on MTD device nmbm
[    2.328580] Creating 7 MTD partitions on "nmbm":
[    2.333180] 0x000000000000-0x0000000e0000 : "Bootloader"
[    2.339714] 0x0000000e0000-0x0000001e0000 : "nvram"
[    2.345768] 0x0000001e0000-0x0000002e0000 : "Factory"
[    2.351934] 0x0000002e0000-0x0000003e0000 : "Factory2"
[    2.358294] 0x0000003e0000-0x0000035e0000 : "Kernel"
[    2.696005] 2 fit-fw partitions found on MTD device Kernel
[    2.701488] 0x0000003e0000-0x0000007a0000 : "linux"
[    2.707556] 0x000000783bd4-0x0000035e0000 : "rootfs"
[    2.713946] mtd: device 7 (rootfs) set to be root filesystem
[    2.719666] 0x0000035e0000-0x0000067e0000 : "Kernel2"
[    2.726211] 0x0000067e0000-0x000007800000 : "jffs2"
[    2.765632] mt753x gsw: Switch is MediaTek MT7530 rev 1
[    2.792337] libphy: mt753x_mdio: probed
[    2.802260] hctosys: unable to open rtc device (rtc0)
[    2.819593] offset 0x12000 elapse 10ms
[    2.837350] found private data block and skip it
[    2.852228] VFS: Mounted root (squashfs filesystem) readonly on device 31:7.
[    2.859911] Freeing unused kernel memory: 272K
[    2.864343] This architecture does not have kernel memory protection.
[   10.092353] init (1): drop_caches: 1
[   12.106848] random: init: uninitialized urandom read (5 bytes read, 35 bits of entropy available)
[   12.117984] bled: GPIO#13: netdev ra0.
[   12.122283] bled: GPIO#16: netdev rai0.
[   14.195483] nvram_commit(): pid 1 comm [init]
[   14.199221] found private data block and skip it
[   19.696546] usbcore: registered new interface driver usbfs
[   19.696829] usbcore: registered new interface driver hub
[   19.697144] usbcore: registered new device driver usb
[   19.945611] xhci-mtk 1e1c0000.usb: xHCI Host Controller
[   19.945725] xhci-mtk 1e1c0000.usb: new USB bus registered, assigned bus number 1
[   19.955756] xhci-mtk 1e1c0000.usb: hcc params 0x01401198 hci version 0x96 quirks 0x00210010
[   19.955876] xhci-mtk 1e1c0000.usb: irq 29, io mem 0x1e1c0000
[   19.958046] hub 1-0:1.0: USB hub found
[   19.959034] hub 1-0:1.0: 2 ports detected
[   19.960062] xhci-mtk 1e1c0000.usb: xHCI Host Controller
[   19.960118] xhci-mtk 1e1c0000.usb: new USB bus registered, assigned bus number 2
[   19.960416] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[   19.962267] hub 2-0:1.0: USB hub found
[   19.963989] hub 2-0:1.0: 1 port detected
[   20.191887] usbcore: registered new interface driver usbserial
[   20.192124] usbcore: registered new interface driver usbserial_generic
[   20.192357] usbserial: USB Serial support registered for generic
[   20.248660] usbcore: registered new interface driver option
[   20.248811] usbserial: USB Serial support registered for GSM modem (1-port)
[   20.284723] usbcore: registered new interface driver cdc_ncm
[   20.405501] usb 1-1: new high-speed USB device number 2 using xhci-mtk
[   20.566763] cdc_ncm 1-1:1.0: MAC-Address: ********************
[   20.568616] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-1e1c0000.usb-1, CDC NCM, **********
[   20.570259] option 1-1:1.2: GSM modem (1-port) converter detected
[   20.570838] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0
[   20.571606] option 1-1:1.3: GSM modem (1-port) converter detected
[   20.572163] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB1
[   20.572926] option 1-1:1.4: GSM modem (1-port) converter detected
[   20.573480] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB2
[   20.574230] option 1-1:1.5: GSM modem (1-port) converter detected
[   20.574797] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB3
[   21.432024] jffs2: notice: (1) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   21.996523] random: nonblocking pool is initialized
[   23.455485] nvram_commit(): pid 1 comm [init]
[   23.459150] found private data block and skip it
[   26.519028] device vlan1 entered promiscuous mode
[   26.519067] device eth0 entered promiscuous mode
[   26.655064] ra0: ===> main_virtual_if_open
[   26.659902] RTMP_COM_IoctlHandle -> CMD_RTPRIV_IOCTL_VIRTUAL_INF_INIT
[   26.667658] check_runtime_para 1317: match
[   26.674290] load l1profile succeed!
[   26.678066] mt_service_open: wlan service opens successfully!
[   26.687815] APWdsInitialize():WdsEntry[0~15]
[   26.796322] [multi_profile_merge_5g_only] DBDC_MODE=1
[   26.822877] multi-profile merge success, en:1,pf1_num:4,pf2_num:4,total:8
[   26.829677] Open file "/etc/Wireless/RT2860/DBDC_card0.dat" to store DBDC cfg! (21)
[   26.837632] Write file "/etc/Wireless/RT2860/DBDC_card0.dat" success (size=6331)!

to me it is clearly an ax 56 it is wrote on backside, i have the box etc

I'd try using the Asus recovery tool, and flash the oldest fw available from them.

2 Likes

I think you need to install Openwrt via TFTP.
The flash layout is changed in Openwrt.

I also have the same layout as you have @noub and segfaulting when trying the command on the device page (writing to firmware). Tried flashing to the Kernel partition both on the newest and the oldest asus firmware (both have the same mtd parts) but it results in hangs when rebooting and needing to power cycle (often more than once) the device to get it to boot again.

Haven’t checked the serial yet.

Hello all!

I used the "Firmware Restoration" tool (ASUS Firmware Restoration version 2.1.0.3 from here) to flash the oldest firmware on the official Asus site (ASUS 4G-AX56 Firmware version 3.0.0.4.382.41174, from here), but I'm still also getting the "Segmentation fault" error when trying to install OpenWRT.

admin@4G-AX56-DD68:/tmp# mtd-write -i openwrt-ramips-mt7621-asus_4g-ax56-squashfs-factory.bin -d firmware
Segmentation fault

I can also verify what @noub and @dacwe already reported, that there is no partition named "firmware":

admin@4G-AX56-DD68:/tmp# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 08000000 00020000 "mtk-nand"
mtd1: 000e0000 00020000 "Bootloader"
mtd2: 00100000 00020000 "nvram"
mtd3: 00100000 00020000 "Factory"
mtd4: 00100000 00020000 "Factory2"
mtd5: 03200000 00020000 "Kernel"
mtd6: 003a0000 00020000 "linux"
mtd7: 02e66b68 00020000 "rootfs"
mtd8: 01840000 00020000 "rootfs_data"
mtd9: 03200000 00020000 "Kernel2"
mtd10: 01020000 00020000 "jffs2"

Here's what the sticker on the back looks like:

You should try what @mrhaav wrote, TFTP.

1 Like

Flashing over TFTP seems to have failed. Any recommendations would be appreciated.

Boot the initramfs (KERNEL) instead, of flashing.

Have a look at the flash layout.