ASUS AX-1800S V2 (not RT-AX54) cant't flash with bootloader ver 2.0.0

HI all~

I tried to flash OpenWRT on an ASUS AX1800s device by following the links below:

  1. List item
  2. https://openwrt.org/toh/asus/rt-ax54

but encountered the following errors:

U-Boot 2022.10 (Sep 04 2023 - 16:49:04 +0800) 
RT-AX57M bootloader version: 2.0.0.0 

CPU:   MediaTek MT7981 
Model: mt7981-rfb 
DRAM:  256 MiB 
.....
Please choose the operation: 
   1: Load System code to SDRAM via TFTP. 
   2: Load System code then write to Flash via TFTP. 
   3: Boot System code via Flash (default). 
   4: Entr boot command line interface. 
   7: Load Boot Loader code then write to Flash via Serial. 
   9: Load Boot Loader code then write to Flash via TFTP. 
 
You choosed 2 
 
 
   2: Load System code then write to Flash via TFTP. 
 Warning!! Erase Linux in Flash then burn new one. Are you sure?(Y/N) 
 Please Input new ones /or Ctrl-C to discard 
        Input device IP (192.168.1.1) ==: 
        Input server IP (192.168.1.70) ==: 
        Input Linux Kernel filename (openwrt-23.05.4-ramips-mt7621-asus_rt-ax54-squashfs-factory.bin) ==: 
switch prereq:0 
Using ethernet0@15100000 device 
TFTP from server 192.168.1.70; our IP address is 192.168.1.1 
Filename 'openwrt-23.05.4-ramips-mt7621-asus_rt-ax54-squashfs-factory.bin'. 
Load address: 0x46000000 
Loading: Got ARP REPLY, set eth addr (d8:5e:d3:4b:ca:10) 
################################################################# 
         ################################################################# 
         ################################################################# 
         ################################################################# 
         ################################################################# 
         ################################################################# 
         ################################################################# 
         ################################################################# 
         ################################################################# 
         ########################################################## 
         5.9 MiB/s 
done 
Bytes transferred = 9437184 (900000 hex) 
0x8fffc0 bytes written to volume linux 
HwID A 
Wrong Image Format for System code command 
ERROR: can't get kernel image! 
resetting ...

I also tried flashing the initramfs.kernel, but encountered the same errors. I noticed that the bootloader version on the website is 1.0.0.1, while mine is 2.0.0.0. Could this be the reason? How should I resolve this?

please use the </> button on top of the edit window when you paste cli output.

1 Like

are you 100% sure those two are the same ?

Does not look anything like AX54

Can you make a picture of label of your router, blur serial number, barcode, one-time password.
You will need to perform asus restore with what is on the label, then we check boot messages for what is happening.
If it is AX54 (not U) then you can restore to any early version.

The bootloader has nothing to do with it.
You tried to flash firmware for a completely different platform (MIPS mt7621).

For AX57, the closest relative is AX52.

... and AX1800 vs AX3000, really apples and bananas.

the boot msg:

I tried follow the AX52 and flash image from the MediaTek MT7981 rfb

but I got error with sysupgrade -n <path-to-sysupgrade.bin>

It is 1800S V2
Maybe check flash sizes in OEM ssh first before flashing?

RT-AX57M = RT-AX1800S V2
The firmware images are completely identical!
The real name is indicated at the beginning of the image: RT-AX57M

1 Like

Download any executable and check whether it is mips or arm....

Could you please guide me on how to verify mips or arm?

if you have serial port access, try booting (bootm in uboot) the initramfs of the device which fw you think you can use.

I tried follow this article

$ tftpboot 0x46000000 openwrt-23.05.4-mediatek-filogic-mediatek_mt7981-rfb-initramfs.itb
$ bootm 0x46000000

then I can enter openwrt initramfs,
but when I tried to

$ sysupgrade -n openwrt-23.05.4-mediatek-filogic-mediatek_mt7981-rfb-squashfs-sysupgrade.itb

I got the error below

Did I make any mistakes in the process? Or is there another method I could try?

Try this: https://drive.google.com/drive/folders/1LwoMLW6NCkVzQxw-bI9WtNrRU6M4uGVK

The point was to discover what arch the device was using, by booting the initramfs, now we know.

I tried the ax52 initramfs, I can enter initramfs but I can't scp file to 192.168.1.1, so I can't try sysupgrade -n <path-to-sysupgrade.bin>

Please choose the operation:
   1: Load System code to SDRAM via TFTP.
   2: Load System code then write to Flash via TFTP.
   3: Boot System code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.

You choosed 1


   1: Load System code to SDRAM via TFTP.
 Please Input new ones /or Ctrl-C to discard
        Input device IP (192.168.1.1) ==:
        Input server IP (192.168.1.70) ==:
        Input Linux Kernel filename (openwrt-23.05.4-ramips-mt7621-asus_rt-ax54-squashfs-factory.bin) ==:openwrt-23_rt-ax52-initramfs.bin
switch prereq:0
Using ethernet0@15100000 device
TFTP from server 192.168.1.70; our IP address is 192.168.1.1
Filename 'openwrt-23_rt-ax52-initramfs.bin'.
Load address: 0x46000000
Loading: Got ARP REPLY, set eth addr (d8:5e:d3:4b:ca:10)
#################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #########################################################
         6.2 MiB/s
done
Bytes transferred = 13238272 (ca0000 hex)
Saving Environment to MTD... Erasing on MTD device 'spi-nand0'... OK
Writing to MTD device 'spi-nand0'... OK
OK
Automatic boot of image at addr 0x46000000 ...
## Loading kernel from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM64 OpenWrt Linux-5.15.162
     Type:         Kernel Image
     Compression:  lzma compressed
     Data Start:   0x460000ec
     Data Size:    13174233 Bytes = 12.6 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x48000000
     Entry Point:  0x48000000
     Hash algo:    crc32
     Hash value:   1ab3a87f
     Hash algo:    sha1
     Hash value:   f5b6e92bcc98716e8714e434dd0e98905d1c6267
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Trying 'fdt-1' fdt subimage
     Description:  ARM64 OpenWrt asus_rt-ax52 device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x46c90804
     Data Size:    22790 Bytes = 22.3 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   a3f46f22
     Hash algo:    sha1
     Hash value:   42c600c54052f6e93d5fc9c1648e7abbc27bc411
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x46c90804
   Uncompressing Kernel Image
   Loading Device Tree to 000000004f7f1000, end 000000004f7f9905 ... OK

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[    0.000000] Linux version 5.15.162 (user@debian) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 12.3.0 r24012-d8dd03c46f) 12.3.0, GNU ld (GNU Binutils) 2.40.0) #0 SMP Mon Jul 15 22:14:18 2024
[    0.000000] Machine model: ASUS RT-AX52
[    0.000000] Zone ranges:
[    0.000000]   DMA      [mem 0x0000000040000000-0x000000004fffffff]
[    0.000000]   DMA32    empty
[    0.000000]   Normal   empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000040000000-0x0000000042ffffff]
[    0.000000]   node   0: [mem 0x0000000043000000-0x000000004302ffff]
[    0.000000]   node   0: [mem 0x0000000043030000-0x0000000047c7ffff]
[    0.000000]   node   0: [mem 0x0000000047c80000-0x0000000047ffffff]
[    0.000000]   node   0: [mem 0x0000000048000000-0x000000004fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000004fffffff]
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv1.1 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.
[    0.000000] psci: SMC Calling Convention v1.2
[    0.000000] percpu: Embedded 18 pages/cpu s33112 r8192 d32424 u73728
[    0.000000] pcpu-alloc: s33112 r8192 d32424 u73728 alloc=18*4096
[    0.000000] pcpu-alloc: [0] 0 [0] 1
[    0.000000] Detected VIPT I-cache on CPU0
[    0.000000] CPU features: detected: GIC system register CPU interface
[    0.000000] CPU features: kernel page table isolation disabled by kernel configuration
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 64512
[    0.000000] Kernel command line: ubi.mtd=UBI_DEV
[    0.000000] Dentry cache hash table entries: 32768 (order: 6, 262144 bytes, linear)
[    0.000000] Inode-cache hash table entries: 16384 (order: 5, 131072 bytes, linear)
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 232340K/262144K available (8384K kernel code, 906K rwdata, 1488K rodata, 9472K init, 300K bss, 29804K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000] rcu:     RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
[    0.000000]  Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
[    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[    0.000000] GICv3: GIC: Using split EOI/Deactivate mode
[    0.000000] GICv3: 640 SPIs implemented
[    0.000000] GICv3: 0 Extended SPIs implemented
[    0.000000] GICv3: Distributor has no Range Selector support
[    0.000000] Root IRQ handler: 0xffffffc008010090
[    0.000000] GICv3: 16 PPIs implemented
[    0.000000] GICv3: CPU0: found redistributor 0 region 0:0x000000000c080000
[    0.000000] arch_timer: cp15 timer(s) running at 12.99MHz (phys).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x2ff596a19, max_idle_ns: 440795202565 ns
[    0.000000] sched_clock: 56 bits at 12MHz, resolution 76ns, wraps every 4398046511100ns
[    0.000150] Calibrating delay loop (skipped), value calculated using timer frequency.. 25.99 BogoMIPS (lpj=129967)
[    0.000159] pid_max: default: 32768 minimum: 301
[    0.000435] Mount-cache hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.000445] Mountpoint-cache hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.001721] rcu: Hierarchical SRCU implementation.
[    0.002085] smp: Bringing up secondary CPUs ...
[    0.002400] Detected VIPT I-cache on CPU1
[    0.002425] GICv3: CPU1: found redistributor 1 region 0:0x000000000c0a0000
[    0.002452] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
[    0.002516] smp: Brought up 1 node, 2 CPUs
[    0.002530] SMP: Total of 2 processors activated.
[    0.002535] CPU features: detected: 32-bit EL0 Support
[    0.002539] CPU features: detected: CRC32 instructions
[    0.002566] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[    0.002627] CPU: All CPU(s) started at EL2
[    0.002639] alternatives: patching kernel code
[    0.005988] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.006010] futex hash table entries: 512 (order: 3, 32768 bytes, linear)
[    0.006148] pinctrl core: initialized pinctrl subsystem
[    0.006972] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.007281] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations
[    0.007309] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[    0.007339] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[    0.007672] thermal_sys: Registered thermal governor 'fair_share'
[    0.007676] thermal_sys: Registered thermal governor 'bang_bang'
[    0.007682] thermal_sys: Registered thermal governor 'step_wise'
[    0.007686] thermal_sys: Registered thermal governor 'user_space'
[    0.007867] ASID allocator initialised with 65536 entries
[    0.008325] pstore: Registered ramoops as persistent store backend
[    0.008331] ramoops: using 0x10000@0x42ff0000, ecc: 0
[    0.018584] cryptd: max_cpu_qlen set to 1000
[    0.020850] SCSI subsystem initialized
[    0.021017] libata version 3.00 loaded.
[    0.022147] clocksource: Switched to clocksource arch_sys_counter
[    0.022802] NET: Registered PF_INET protocol family
[    0.022892] IP idents hash table entries: 4096 (order: 3, 32768 bytes, linear)
[    0.023323] tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.023344] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.023353] TCP established hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.023371] TCP bind hash table entries: 2048 (order: 3, 32768 bytes, linear)
[    0.023400] TCP: Hash tables configured (established 2048 bind 2048)
[    0.023467] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.023483] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.023601] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.023631] PCI: CLS 0 bytes, default 64
[    0.032861] workingset: timestamp_bits=46 max_order=16 bucket_order=0
[    0.036506] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.036521] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.070122] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[    0.081026] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.083065] printk: console [ttyS0] disabled
[    0.103232] 11002000.serial: ttyS0 at MMIO 0x11002000 (irq = 18, base_baud = 2500000) is a ST16650V2
[    0.720031] printk: console [ttyS0] enabled
[    0.725194] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    0.735164] loop: module loaded
[    0.738308] Loading iSCSI transport class v2.0-870.
[    0.754315] spi spi0.0: setup: ignoring unsupported mode bits a00
[    0.760870] spi-nand spi0.0: Winbond SPI NAND was found.
[    0.766228] spi-nand spi0.0: 128 MiB, block size: 128 KiB, page size: 2048, OOB size: 64
[    2.580450] 2 fixed-partitions partitions found on MTD device spi0.0
[    2.586826] Creating 2 MTD partitions on "spi0.0":
[    2.591609] 0x000000000000-0x000000400000 : "Bootloader"
[    2.600559] 0x000000400000-0x000008000000 : "UBI_DEV"
[    2.823353] mtk_soc_eth 15100000.ethernet: generated random MAC address c6:9d:92:d4:e6:4f
[    2.831597] mtk_soc_eth 15100000.ethernet: generated random MAC address 12:62:8e:47:e4:eb
[    2.858227] mtk_soc_eth 15100000.ethernet eth0: mediatek frame engine at 0xffffffc009f00000, irq 82
[    2.868065] mtk_soc_eth 15100000.ethernet eth1: mediatek frame engine at 0xffffffc009f00000, irq 82
[    2.877672] i2c_dev: i2c /dev entries driver
[    2.883259] mtk-wdt 1001c000.watchdog: Watchdog enabled (timeout=31 sec, nowayout=0)
[    2.892000] NET: Registered PF_INET6 protocol family
[    2.897871] Segment Routing with IPv6
[    2.901554] In-situ OAM (IOAM) with IPv6
[    2.905558] NET: Registered PF_PACKET protocol family
[    2.910633] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    2.923774] 8021q: 802.1Q VLAN Support v1.8
[    2.928962] pstore: Using crash dump compression: deflate
[    2.985633] mt7530-mdio mdio-bus:1f: no interrupt support
[    3.008155] mt7530-mdio mdio-bus:1f: configuring for fixed/2500base-x link mode
[    3.017238] mt7530-mdio mdio-bus:1f: Link is Up - 2.5Gbps/Full - flow control rx/tx
[    3.026198] mt7530-mdio mdio-bus:1f lan1 (uninitialized): PHY [mt7530-0:00] driver [MediaTek MT7531 PHY] (irq=POLL)
[    3.046660] mt7530-mdio mdio-bus:1f lan2 (uninitialized): PHY [mt7530-0:01] driver [MediaTek MT7531 PHY] (irq=POLL)
[    3.066939] mt7530-mdio mdio-bus:1f lan3 (uninitialized): PHY [mt7530-0:02] driver [MediaTek MT7531 PHY] (irq=POLL)
[    3.078933] DSA: tree 0 setup
[    3.082252] ubi0: default fastmap pool size: 45
[    3.086783] ubi0: default fastmap WL pool size: 22
[    3.091563] ubi0: attaching mtd1
[    3.901322] ubi0: scanning is finished
[    3.914628] ubi0 warning: 0xffffffc00856d794: cannot reserve enough PEBs for bad PEB handling, reserved 18, need 20
[    3.925866] ubi0: attached mtd1 (name "UBI_DEV", size 124 MiB)
[    3.931703] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    3.938583] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    3.945366] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    3.952319] ubi0: good PEBs: 992, bad PEBs: 0, corrupted PEBs: 0
[    3.958314] ubi0: user volume: 5, internal volumes: 1, max. volumes count: 128
[    3.965527] ubi0: max/mean erase counter: 6/3, WL threshold: 4096, image sequence number: 723537886
[    3.974566] ubi0: available PEBs: 0, total reserved PEBs: 992, PEBs reserved for bad PEB handling: 18
[    3.983785] ubi0: background thread "ubi_bgt0d" started, PID 427
[    3.984029] clk: Disabling unused clocks
[    3.997892] Freeing unused kernel memory: 9472K
[    4.002527] Run /init as init process
[    4.006179]   with arguments:
[    4.009133]     /init
[    4.011394]   with environment:
[    4.014530]     HOME=/
[    4.016878]     TERM=linux
[    4.300976] init: Console is alive
[    4.304527] init: - watchdog -
[    4.311599] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    4.326087] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    4.343580] init: - preinit -
[    4.423132] mtk_soc_eth 15100000.ethernet eth0: configuring for fixed/2500base-x link mode
[    4.431594] mtk_soc_eth 15100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
[    4.440289] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
ip: SIOCSIFHWADDR: Resource busy
[    4.576319] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode
[    4.588828] random: procd: uninitialized urandom read (4 bytes read)
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    6.630216] procd: - early -
[    6.633291] procd: - watchdog -
[    7.158287] procd: - watchdog -
[    7.161599] procd: - ubus -
[    7.166864] random: ubusd: uninitialized urandom read (4 bytes read)
[    7.214137] random: ubusd: uninitialized urandom read (4 bytes read)
[    7.220643] random: ubusd: uninitialized urandom read (4 bytes read)
[    7.228083] procd: - init -
Please press Enter to activate this console.
[    7.386318] kmodloader: loading kernel modules from /etc/modules.d/*
[    7.399410] crypto-safexcel 10320000.crypto: EIP97:230(0,1,4,4)-HIA:270(0,5,5),PE:150/433(alg:7fcdfc00)/0/0/0
[    7.415393] Loading modules backported from Linux version v6.1.97-0-g7753af06eebfb
[    7.423002] Backport generated by backports.git v6.1.97-1-0-g2431d56e
[    7.595279] urngd: v1.0.2 started.
[    7.754972] random: crng init done
[    7.758381] random: 23 urandom warning(s) missed due to ratelimiting
[    7.777231] mt798x-wmac 18000000.wifi: HW/SW Version: 0x8a108a10, Build Time: 20221208201745a
[    7.777231]
[    7.793097] mt798x-wmac 18000000.wifi: WM Firmware Version: ____000000, Build Time: 20221208201806
[    7.834609] mt798x-wmac 18000000.wifi: WA Firmware Version: DEV_000000, Build Time: 20221208202048
[    7.926292] mt798x-wmac 18000000.wifi: eeprom load fail, use default bin
[    7.933058] mt798x-wmac 18000000.wifi: Direct firmware load for mediatek/mt7981_eeprom_mt7976_dbdc.bin failed with error -2
[    7.944185] mt798x-wmac 18000000.wifi: Falling back to sysfs fallback for: mediatek/mt7981_eeprom_mt7976_dbdc.bin
[    8.004103] mt798x-wmac 18000000.wifi: missing precal data, size=200720
[    8.010764] mt798x-wmac 18000000.wifi: registering led 'mt76-phy0'
[    8.020288] mt798x-wmac 18000000.wifi: registering led 'mt76-phy1'
[    8.050164] PPP generic driver version 2.4.2
[    8.055930] NET: Registered PF_PPPOX protocol family
[    8.064406] kmodloader: done loading kernel modules from /etc/modules.d/*
[   11.421928] mtk_soc_eth 15100000.ethernet eth0: Link is Down
[   11.442514] mtk_soc_eth 15100000.ethernet eth0: configuring for fixed/2500base-x link mode
[   11.454845] mtk_soc_eth 15100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
[   11.458776] device eth0 entered promiscuous mode
[   11.468529] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode
[   11.476496] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   11.485968] br-lan: port 1(lan1) entered blocking state
[   11.491199] br-lan: port 1(lan1) entered disabled state
[   11.498072] device lan1 entered promiscuous mode
[   11.515622] mt7530-mdio mdio-bus:1f lan2: configuring for phy/gmii link mode
[   11.526846] br-lan: port 2(lan2) entered blocking state
[   11.532081] br-lan: port 2(lan2) entered disabled state
[   11.540033] device lan2 entered promiscuous mode
[   11.551998] mt7530-mdio mdio-bus:1f lan3: configuring for phy/gmii link mode
[   11.563161] br-lan: port 3(lan3) entered blocking state
[   11.568394] br-lan: port 3(lan3) entered disabled state
[   11.576165] device lan3 entered promiscuous mode
[   11.610081] mtk_soc_eth 15100000.ethernet eth1: PHY [mdio-bus:00] driver [MediaTek MT7981 PHY] (irq=POLL)
[   11.619735] mtk_soc_eth 15100000.ethernet eth1: configuring for phy/gmii link mode

What makes you think hardware is identical to anything else?

sysupgrade images for AX52: https://drive.google.com/drive/folders/1HYPKHMdmIj6i1auYgp8qsjXNdA6eUjus

coz the link you suggest openwrt-23_rt-ax52-initramfs.bin can't make the 192.16.1.1 work, so I flash the mt7981-rfb initramfs .

after boot with openwrt initramfs, then flah openwrt-23.05.4-240816-asus_rt-ax52-sysupgrade.bin,
but I got error