Bricked router, nuked bootloader?

Installing and Using OpenWrt
1

Backstory
I was trying to flash my second Acer Vero W6m by following this guide but had an issue where it wouldn't boot into OpenWrt when restarted. Watching the serial port output have revealed that it would select 8. Load image by default and then confirm the choice after 5 seconds then ask to confirm the image address. That's why it wasn't booting into OpenWrt.

  *** U-Boot 11 ***

      1. Startup system (Default)
      2. Upgrade firmware
      3. Upgrade ATF BL2
      4. Upgrade ATF FIP
      5. Upgrade U-boot only
      6. Upgrade partition table
      7. Upgrade single image
      8. Load image
      9. Start Web failsafe
      0. U-Boot console


  Press UP/DOWN to move, ENTER to select, ESC to quit

*** Loading image ***

Input load address: 0x46000000

This was weird because the first device I flashed worked normally and booted straight to OpenWrt when restarted.

I tried to re-flash it multiple times to see if this issue would go way, but it didn't. The only solutions to boot into OpenWrt was either by letting choosing 8. Load image and then press CTRL + C which triggers an auto reboot, then it would count down for 5 seconds and auto boot to OpenWrt. Another solution was to choose 0. U-Boot console and type boot.

The issue

Now while I was trying to solve this issue above, I created a bigger one. I had done something that caused the device to not find the bootloader at all. When i start the device it shows the following, and nothing else:

F0: 102B 0000
FA: 1040 0000
FA: 1040 0000 [0200]
F9: 103F 0000
F3: 1006 0033 [0200]
F3: 4001 00E0 [0200]
F3: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 2400 0041 [0000]
G0: 1190 0000
EC: 0000 0000 [2000]
T0: 0000 027F [010F]
Jump to BL

I managed to save a log of what I did so it might be easier to diagnose the issue and suggest potential fixes. I posted some logs in the comments.

2

Logs (part 1/2):

F0: 102B 0000
FA: 1040 0000
FA: 1040 0000 [0200]
F9: 103F 0000
F3: 1006 0033 [0200]
F3: 4001 00E0 [0200]
F3: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 2400 0041 [0000]
G0: 1190 0000
EC: 0000 0000 [2000]
T0: 0000 027F [010F]
Jump to BL



U-Boot 2023.04 (Jan 15 2024 - 14:30:31 +0800), Build: jenkins-YX6MS_mesh-170

CPU:   MediaTek MT7986
Model: mt7986-rfb
       (mediatek,mt7986-emmc-rfb)
DRAM: 1 GiB
Core:  70 devices, 20 uclasses, devicetree: separate
MMC: mmc@11230000: 0
OK
In:    serial@11002000
Out:   serial@11002000
Err:   serial@11002000
Net:   eth0: ethernet@15100000

  *** U-Boot Boot Menu ***

      1. Startup system (Default)
      2. Upgrade firmware
      3. Upgrade ATF BL2
      4. Upgrade ATF FIP
      5. Upgrade U-boot only
      6. Upgrade partition table
      7. Upgrade single image
      8. Load image
      9. Start Web failsafe
      0. U-Boot console


  Press UP/DOWN to move, ENTER to select, ESC to quit

*** Upgrading Single image ***

Available load methods:
    0 - TFTP client (Default)
    1 - Xmodem
    2 - Ymodem
    3 - Kermit
    4 - S-Record
    5 - SD card

Select (enter for default):

Input U-Boot's IP address: 192.168.1.1
Input TFTP server's IP address: 192.168.1.66
Input IP netmask: 255.255.255.0
Input file name: vero.bin

Using ethernet@15100000 device
TFTP from server 192.168.1.66; our IP address is 192.168.1.1
Filename 'vero.bin'.
Load address: 0x46000000
Loading: #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ######################################################
         1.2 MiB/s
done
Bytes transferred = 9371648 (8f0000 hex)
Saving Environment to MMC... Writing to MMC(0)... OK

*** Loaded 9371648 (0x8f0000) bytes at 0x46000000 ***

Writing from 0x46000000 to 0x0, size 0x8f0000 ... OK
Verifying from 0x0 to 0x8effff, size 0x8f0000 ... OK

*** Single image upgrade completed! ***

MMC erase: dev # 0, block # 2286592, count 1048576 ... 1048576 blocks erased: OK
Hit any key to stop autoboot:  0

MMC read: dev # 0, block # 17408, count 65536 ... 65536 blocks read: OK
Working FDT set to 7f7fcda0
Wrong Image Format for bootm command
ERROR: can't get kernel image!
MT7986> fdt addr $(fdtcontroladdr)
Working FDT set to 7f7fcda0
MT7986> fdt rm /signature
libfdt fdt_path_offset() returned FDT_ERR_NOTFOUND
MT7986> tftpboot 0x46000000 vero.bin
Using  device
TFTP from server 192.168.1.66; our IP address is 192.168.1.1
Filename 'vero.bin'.
Load address: 0x46000000
Loading: #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ######################################################
         468.8 KiB/s
done
Bytes transferred = 9371648 (8f0000 hex)
MT7986> fdt addr $(fdtcontroladdr)
Working FDT set to 7f7fcda0
MT7986> fdt rm /signature
libfdt fdt_path_offset() returned FDT_ERR_NOTFOUND
MT7986> bootm
## Loading kernel from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Verifying Hash Integrity ... OK
   Trying 'kernel-1' kernel subimage
     Description:  ARM64 OpenWrt Linux-6.6.93
     Type:         Kernel Image
     Compression:  lzma compressed
     Data Start:   0x460000e8
     Data Size:    4127771 Bytes = 3.9 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x48000000
     Entry Point:  0x48000000
     Hash algo:    crc32
     Hash value:   ee4eb0ab
     Hash algo:    sha1
     Hash value:   e82cb6d378108d90baba2c8b3a4e7b933471fd42
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading ramdisk from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Verifying Hash Integrity ... OK
   Trying 'initrd-1' ramdisk subimage
     Description:  ARM64 OpenWrt acer_vero-w6m initrd
     Type:         RAMDisk Image
     Compression:  uncompressed
     Data Start:   0x463efe3c
     Data Size:    5174652 Bytes = 4.9 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: unavailable
     Entry Point:  unavailable
     Hash algo:    crc32
     Hash value:   3da4dcd3
     Hash algo:    sha1
     Hash value:   a9082d906eb8c4e36821ffba1d8bd099a24e1858
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Verifying Hash Integrity ... OK
   Trying 'fdt-1' fdt subimage
     Description:  ARM64 OpenWrt acer_vero-w6m device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x468df4c4
     Data Size:    23453 Bytes = 22.9 KiB
     Architecture: AArch64
     Load Address: 0x47000000
     Hash algo:    crc32
     Hash value:   4182a669
     Hash algo:    sha1
     Hash value:   100a3137ca2e6f7255c2860dcef0893030b4c9af
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Loading fdt from 0x468df4c4 to 0x47000000
   Booting using the fdt blob at 0x47000000
Working FDT set to 47000000
   Uncompressing Kernel Image
   Loading Ramdisk to 7f309000, end 7f7f857c ... OK
   Loading Device Tree to 000000007f300000, end 000000007f308b9c ... OK
Working FDT set to 7f300000

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[    0.000000] Linux version 6.6.93 (builder@buildhost) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 13.3.0 r28739-d9340319c6) 13.3.0, GNU ld (GNU Binutils) 2.42) #0 SMP Mon Jun 23 20:40:36 2025
[    0.000000] Machine model: Acer Connect Vero W6m
[    0.000000] OF: reserved mem: 0x0000000042ff0000..0x0000000042ffffff (64 KiB) map non-reusable ramoops@42ff0000
[    0.000000] OF: reserved mem: 0x0000000043000000..0x000000004302ffff (192 KiB) nomap non-reusable secmon@43000000
[    0.000000] OF: reserved mem: 0x000000004fc00000..0x000000004fcfffff (1024 KiB) nomap non-reusable wmcpu-reserved@4fc00000
[    0.000000] OF: reserved mem: 0x000000004fd00000..0x000000004fd3ffff (256 KiB) nomap non-reusable wo-emi@4fd00000
[    0.000000] OF: reserved mem: 0x000000004fd40000..0x000000004fd7ffff (256 KiB) nomap non-reusable wo-emi@4fd40000
[    0.000000] OF: reserved mem: 0x000000004fd80000..0x000000004ffbffff (2304 KiB) nomap non-reusable wo-data@4fd80000
[    0.000000] Zone ranges:
[    0.000000]   DMA      [mem 0x0000000040000000-0x000000007fffffff]
[    0.000000]   DMA32    empty
[    0.000000]   Normal   empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000040000000-0x0000000042ffffff]
[    0.000000]   node   0: [mem 0x0000000043000000-0x000000004302ffff]
[    0.000000]   node   0: [mem 0x0000000043030000-0x000000004fbfffff]
[    0.000000]   node   0: [mem 0x000000004fc00000-0x000000004ffbffff]
[    0.000000]   node   0: [mem 0x000000004ffc0000-0x000000007fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000007fffffff]
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv1.1 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.
[    0.000000] psci: SMC Calling Convention v1.2
[    0.000000] percpu: Embedded 18 pages/cpu s35624 r8192 d29912 u73728
[    0.000000] pcpu-alloc: s35624 r8192 d29912 u73728 alloc=18*4096
[    0.000000] pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3
[    0.000000] Detected VIPT I-cache on CPU0
[    0.000000] CPU features: detected: GIC system register CPU interface
[    0.000000] CPU features: kernel page table isolation disabled by kernel configuration
[    0.000000] alternatives: applying boot alternatives
[    0.000000] Kernel command line: rootfstype=squashfs,ext4 rootwait root=/dev/mmcblk0p6 fstools_ignore_partname=1 boot_param.boot_image_slot=0 boot_param.upgrade_image_slot=1 boot_param.dual_boot
[    0.000000] Unknown kernel command line parameters "fstools_ignore_partname=1", will be passed to user space.
[    0.000000] Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes, linear)
[    0.000000] Inode-cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 258048
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] software IO TLB: SWIOTLB bounce buffer size adjusted to 1MB
[    0.000000] software IO TLB: area num 4.
[    0.000000] software IO TLB: mapped [mem 0x000000007fb03000-0x000000007fc03000] (1MB)
[    0.000000] Memory: 1005368K/1048576K available (9024K kernel code, 1000K rwdata, 1672K rodata, 448K init, 307K bss, 43208K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000]  Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[    0.000000] GICv3: GIC: Using split EOI/Deactivate mode
[    0.000000] GICv3: 640 SPIs implemented
[    0.000000] GICv3: 0 Extended SPIs implemented
[    0.000000] Root IRQ handler: 0xffffffc080010080
[    0.000000] GICv3: GICv3 features: 16 PPIs
[    0.000000] GICv3: CPU0: found redistributor 0 region 0:0x000000000c080000
[    0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[    0.000000] arch_timer: cp15 timer(s) running at 13.00MHz (phys).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x2ff89eacb, max_idle_ns: 440795202429 ns
[    0.000000] sched_clock: 56 bits at 13MHz, resolution 76ns, wraps every 4398046511101ns
[    0.000062] Calibrating delay loop (skipped), value calculated using timer frequency.. 26.00 BogoMIPS (lpj=130000)
[    0.000069] pid_max: default: 32768 minimum: 301
[    0.002142] Mount-cache hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.002150] Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.003758] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    0.004144] RCU Tasks Trace: Setting shift to 2 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=4.
[    0.004249] rcu: Hierarchical SRCU implementation.
[    0.004251] rcu:     Max phase no-delay instances is 1000.
[    0.004562] smp: Bringing up secondary CPUs ...
[    0.004819] Detected VIPT I-cache on CPU1
[    0.004855] GICv3: CPU1: found redistributor 1 region 0:0x000000000c0a0000
[    0.004882] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
[    0.005178] Detected VIPT I-cache on CPU2
[    0.005200] GICv3: CPU2: found redistributor 2 region 0:0x000000000c0c0000
[    0.005212] CPU2: Booted secondary processor 0x0000000002 [0x410fd034]
[    0.005470] Detected VIPT I-cache on CPU3
[    0.005489] GICv3: CPU3: found redistributor 3 region 0:0x000000000c0e0000
[    0.005499] CPU3: Booted secondary processor 0x0000000003 [0x410fd034]
[    0.005526] smp: Brought up 1 node, 4 CPUs
[    0.005530] SMP: Total of 4 processors activated.
[    0.005532] CPU features: detected: 32-bit EL0 Support
[    0.005534] CPU features: detected: CRC32 instructions
[    0.005560] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[    0.005563] CPU: All CPU(s) started at EL2
[    0.005565] alternatives: applying system-wide alternatives
[    0.008444] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.008460] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[    0.009348] pinctrl core: initialized pinctrl subsystem
[    0.010283] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.010557] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations
[    0.010576] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[    0.010592] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[    0.010893] thermal_sys: Registered thermal governor 'fair_share'
[    0.010896] thermal_sys: Registered thermal governor 'bang_bang'
[    0.010898] thermal_sys: Registered thermal governor 'step_wise'
[    0.010900] thermal_sys: Registered thermal governor 'user_space'
[    0.010966] ASID allocator initialised with 65536 entries
[    0.011657] pstore: Using crash dump compression: deflate
[    0.011660] pstore: Registered ramoops as persistent store backend
[    0.011661] ramoops: using 0x10000@0x42ff0000, ecc: 0
[    0.012629] /soc/interrupt-controller@c000000: Fixed dependency cycle(s) with /soc/interrupt-controller@c000000
[    0.017250] Modules: 29616 pages in range for non-PLT usage
[    0.017260] Modules: 521136 pages in range for PLT usage
[    0.018185] cryptd: max_cpu_qlen set to 1000
[    0.019030] SCSI subsystem initialized
[    0.019184] libata version 3.00 loaded.
[    0.020321] clocksource: Switched to clocksource arch_sys_counter
[    0.022005] NET: Registered PF_INET protocol family
[    0.022102] IP idents hash table entries: 16384 (order: 5, 131072 bytes, linear)
[    0.023301] tcp_listen_portaddr_hash hash table entries: 512 (order: 1, 8192 bytes, linear)
[    0.023313] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.023320] TCP established hash table entries: 8192 (order: 4, 65536 bytes, linear)
[    0.023356] TCP bind hash table entries: 8192 (order: 6, 262144 bytes, linear)
[    0.023523] TCP: Hash tables configured (established 8192 bind 8192)
[    0.023773] MPTCP token hash table entries: 1024 (order: 2, 24576 bytes, linear)
[    0.023856] UDP hash table entries: 512 (order: 2, 16384 bytes, linear)
3

Logs (part 2/2):


[    0.023872] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes, linear)
[    0.024015] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.024042] PCI: CLS 0 bytes, default 64
[    0.024173] Unpacking initramfs...
[    0.031465] workingset: timestamp_bits=46 max_order=18 bucket_order=0
[    0.034782] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.034788] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.070832] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[    0.072141] mtk-pcie-gen3 11280000.pcie: host bridge /soc/pcie@11280000 ranges:
[    0.072163] mtk-pcie-gen3 11280000.pcie: Parsing ranges property...
[    0.072173] mtk-pcie-gen3 11280000.pcie:      MEM 0x0020000000..0x002fffffff -> 0x0020000000
[    0.072315] /soc/pcie@11280000: Failed to get clk index: 0 ret: -517
[    0.072327] mtk-pcie-gen3 11280000.pcie: failed to get clocks
[    0.075257] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.078043] printk: console [ttyS0] disabled
[    0.098313] 11002000.serial: ttyS0 at MMIO 0x11002000 (irq = 116, base_baud = 2500000) is a ST16650V2
[    0.098359] printk: console [ttyS0] enabled
[    0.945851] mtk_rng 1020f000.rng: registered RNG driver
[    0.954048] loop: module loaded
[    1.061560] Freeing initrd memory: 5052K
[    1.081602] mtk_soc_eth 15100000.ethernet: generated random MAC address 65:74:68:25:64:00
[    1.092436] mtk_soc_eth 15100000.ethernet eth0: mediatek frame engine at 0xffffffc085800000, irq 119
[    1.102093] i2c_dev: i2c /dev entries driver
[    1.108496] mtk-wdt 1001c000.watchdog: Watchdog enabled (timeout=31 sec, nowayout=0)
[    1.117448] NET: Registered PF_INET6 protocol family
[    1.123327] Segment Routing with IPv6
[    1.127012] In-situ OAM (IOAM) with IPv6
[    1.131007] NET: Registered PF_PACKET protocol family
[    1.136069] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    1.149135] 8021q: 802.1Q VLAN Support v1.8
[    1.166838] mtk-pcie-gen3 11280000.pcie: host bridge /soc/pcie@11280000 ranges:
[    1.174272] mtk-pcie-gen3 11280000.pcie: Parsing ranges property...
[    1.180542] mtk-pcie-gen3 11280000.pcie:      MEM 0x0020000000..0x002fffffff -> 0x0020000000
[    1.189010] debugfs: File 'type' in directory 'phy-soc:t-phy@11c00000.0' already present!
[    1.197183] debugfs: File 'efuse' in directory 'phy-soc:t-phy@11c00000.0' already present!
[    1.205437] debugfs: File 'intr' in directory 'phy-soc:t-phy@11c00000.0' already present!
[    1.213603] debugfs: File 'tx-imp' in directory 'phy-soc:t-phy@11c00000.0' already present!
[    1.221946] debugfs: File 'rx-imp' in directory 'phy-soc:t-phy@11c00000.0' already present!
[    1.298863] mtk-msdc 11230000.mmc: Final PAD_DS_TUNE: 0x14414
[    1.305212] mmc0: new HS400 MMC card at address 0001
[    1.311172] mmcblk0: mmc0:0001 004GA1 3.69 GiB
[    1.317312] mmcblk0boot0: mmc0:0001 004GA1 2.00 MiB
[    1.323059] mmcblk0boot1: mmc0:0001 004GA1 2.00 MiB
[    1.328151] mmcblk0rpmb: mmc0:0001 004GA1 512 KiB, chardev (250:0)
[    1.472997] mtk-pcie-gen3 11280000.pcie: set MEM trans window[0]: cpu_addr = 0x20000000, pci_addr = 0x20000000, size = 0x10000000
[    1.484896] mtk-pcie-gen3 11280000.pcie: PCI host bridge to bus 0000:00
[    1.491500] pci_bus 0000:00: root bus resource [bus 00-ff]
[    1.496969] pci_bus 0000:00: root bus resource [mem 0x20000000-0x2fffffff]
[    1.503827] pci_bus 0000:00: scanning bus
[    1.507843] pci 0000:00:00.0: [14c3:1f32] type 01 class 0x060400
[    1.513847] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x00007fff 64bit]
[    1.520683] pci 0000:00:00.0: PME# supported from D0 D3hot D3cold
[    1.526759] pci 0000:00:00.0: PME# disabled
[    1.531711] pci_bus 0000:00: fixups for bus
[    1.535884] pci 0000:00:00.0: scanning [bus 00-00] behind bridge, pass 0
[    1.542573] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    1.550566] pci 0000:00:00.0: scanning [bus 00-00] behind bridge, pass 1
[    1.557324] pci_bus 0000:01: scanning bus
[    1.561362] pci 0000:01:00.0: [14c3:7906] type 00 class 0x028000
[    1.567376] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit pref]
[    1.574598] pci 0000:01:00.0: reg 0x18: [mem 0x00000000-0x00007fff 64bit]
[    1.581384] pci 0000:01:00.0: reg 0x20: [mem 0x00000000-0x00000fff 64bit pref]
[    1.588699] pci 0000:01:00.0: PME# supported from D0 D3hot D3cold
[    1.594784] pci 0000:01:00.0: PME# disabled
[    1.620362] pci_bus 0000:01: fixups for bus
[    1.624532] pci_bus 0000:01: bus scan returning with max=01
[    1.630086] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01
[    1.636690] pci_bus 0000:00: bus scan returning with max=01
[    1.642262] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]
[    1.649032] pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x202fffff 64bit pref]
[    1.656757] pci 0000:00:00.0: BAR 0: assigned [mem 0x20300000-0x20307fff 64bit]
[    1.664056] pci 0000:01:00.0: BAR 0: assigned [mem 0x20100000-0x201fffff 64bit pref]
[    1.671794] pci 0000:01:00.0: BAR 2: assigned [mem 0x20000000-0x20007fff 64bit]
[    1.679093] pci 0000:01:00.0: BAR 4: assigned [mem 0x20200000-0x20200fff 64bit pref]
[    1.686829] pci 0000:00:00.0: PCI bridge to [bus 01]
[    1.691782] pci 0000:00:00.0:   bridge window [mem 0x20000000-0x200fffff]
[    1.698550] pci 0000:00:00.0:   bridge window [mem 0x20100000-0x202fffff 64bit pref]
[    1.706380] pcieport 0000:00:00.0: assign IRQ: got 126
[    1.711510] pcieport 0000:00:00.0: enabling device (0000 -> 0002)
[    1.717593] pcieport 0000:00:00.0: enabling bus mastering
[    1.723497] mtk-pcie-gen3 11280000.pcie: msi#0x0 address_hi 0x0 address_lo 0x11280c00 data 0
[    1.731923] mtk-pcie-gen3 11280000.pcie: msi#0x1 address_hi 0x0 address_lo 0x11280c00 data 1
[    1.740345] mtk-pcie-gen3 11280000.pcie: msi#0x2 address_hi 0x0 address_lo 0x11280c00 data 2
[    1.748760] mtk-pcie-gen3 11280000.pcie: msi#0x3 address_hi 0x0 address_lo 0x11280c00 data 3
[    1.757178] mtk-pcie-gen3 11280000.pcie: msi#0x4 address_hi 0x0 address_lo 0x11280c00 data 4
[    1.765596] mtk-pcie-gen3 11280000.pcie: msi#0x5 address_hi 0x0 address_lo 0x11280c00 data 5
[    1.774013] mtk-pcie-gen3 11280000.pcie: msi#0x6 address_hi 0x0 address_lo 0x11280c00 data 6
[    1.782430] mtk-pcie-gen3 11280000.pcie: msi#0x7 address_hi 0x0 address_lo 0x11280c00 data 7
[    1.790848] mtk-pcie-gen3 11280000.pcie: msi#0x8 address_hi 0x0 address_lo 0x11280c00 data 8
[    1.799262] mtk-pcie-gen3 11280000.pcie: msi#0x9 address_hi 0x0 address_lo 0x11280c00 data 9
[    1.807679] mtk-pcie-gen3 11280000.pcie: msi#0xa address_hi 0x0 address_lo 0x11280c00 data 10
[    1.816183] mtk-pcie-gen3 11280000.pcie: msi#0xb address_hi 0x0 address_lo 0x11280c00 data 11
[    1.824687] mtk-pcie-gen3 11280000.pcie: msi#0xc address_hi 0x0 address_lo 0x11280c00 data 12
[    1.833192] mtk-pcie-gen3 11280000.pcie: msi#0xd address_hi 0x0 address_lo 0x11280c00 data 13
[    1.841696] mtk-pcie-gen3 11280000.pcie: msi#0xe address_hi 0x0 address_lo 0x11280c00 data 14
[    1.850197] mtk-pcie-gen3 11280000.pcie: msi#0xf address_hi 0x0 address_lo 0x11280c00 data 15
[    1.858701] mtk-pcie-gen3 11280000.pcie: msi#0x10 address_hi 0x0 address_lo 0x11280c00 data 16
[    1.867295] mtk-pcie-gen3 11280000.pcie: msi#0x11 address_hi 0x0 address_lo 0x11280c00 data 17
[    1.875886] mtk-pcie-gen3 11280000.pcie: msi#0x12 address_hi 0x0 address_lo 0x11280c00 data 18
[    1.884477] mtk-pcie-gen3 11280000.pcie: msi#0x13 address_hi 0x0 address_lo 0x11280c00 data 19
[    1.893067] mtk-pcie-gen3 11280000.pcie: msi#0x14 address_hi 0x0 address_lo 0x11280c00 data 20
[    1.901659] mtk-pcie-gen3 11280000.pcie: msi#0x15 address_hi 0x0 address_lo 0x11280c00 data 21
[    1.910247] mtk-pcie-gen3 11280000.pcie: msi#0x16 address_hi 0x0 address_lo 0x11280c00 data 22
[    1.918837] mtk-pcie-gen3 11280000.pcie: msi#0x17 address_hi 0x0 address_lo 0x11280c00 data 23
[    1.927428] mtk-pcie-gen3 11280000.pcie: msi#0x18 address_hi 0x0 address_lo 0x11280c00 data 24
[    1.936018] mtk-pcie-gen3 11280000.pcie: msi#0x19 address_hi 0x0 address_lo 0x11280c00 data 25
[    1.944608] mtk-pcie-gen3 11280000.pcie: msi#0x1a address_hi 0x0 address_lo 0x11280c00 data 26
[    1.953199] mtk-pcie-gen3 11280000.pcie: msi#0x1b address_hi 0x0 address_lo 0x11280c00 data 27
[    1.961790] mtk-pcie-gen3 11280000.pcie: msi#0x1c address_hi 0x0 address_lo 0x11280c00 data 28
[    1.970382] mtk-pcie-gen3 11280000.pcie: msi#0x1d address_hi 0x0 address_lo 0x11280c00 data 29
[    1.978969] mtk-pcie-gen3 11280000.pcie: msi#0x1e address_hi 0x0 address_lo 0x11280c00 data 30
[    1.987563] mtk-pcie-gen3 11280000.pcie: msi#0x1f address_hi 0x0 address_lo 0x11280c00 data 31
[    1.996636] mtk-pcie-gen3 11280000.pcie: msi#0x0 address_hi 0x0 address_lo 0x11280c00 data 0
[    2.005171] pcieport 0000:00:00.0: PME: Signaling with IRQ 127
[    2.011172] pcieport 0000:00:00.0: AER: enabled with IRQ 127
[    2.016879] pcieport 0000:00:00.0: save config 0x00: 0x1f3214c3
[    2.022831] pcieport 0000:00:00.0: save config 0x04: 0x00100406
[    2.028733] pcieport 0000:00:00.0: save config 0x08: 0x06040001
[    2.034636] pcieport 0000:00:00.0: save config 0x0c: 0x00010000
[    2.040545] pcieport 0000:00:00.0: save config 0x10: 0x20300004
[    2.046445] pcieport 0000:00:00.0: save config 0x14: 0x00000000
[    2.052348] pcieport 0000:00:00.0: save config 0x18: 0x00010100
[    2.058249] pcieport 0000:00:00.0: save config 0x1c: 0x000001f1
[    2.064152] pcieport 0000:00:00.0: save config 0x20: 0x20002000
[    2.070052] pcieport 0000:00:00.0: save config 0x24: 0x20212011
[    2.075955] pcieport 0000:00:00.0: save config 0x28: 0x00000000
[    2.081859] pcieport 0000:00:00.0: save config 0x2c: 0x00000000
[    2.087758] pcieport 0000:00:00.0: save config 0x30: 0x00000000
[    2.093661] pcieport 0000:00:00.0: save config 0x34: 0x00000080
[    2.099562] pcieport 0000:00:00.0: save config 0x38: 0x00000000
[    2.105464] pcieport 0000:00:00.0: save config 0x3c: 0x0002017e
[    2.154456] mt7530-mdio mdio-bus:1f: no interrupt support
[    2.203674] mt7530-mdio mdio-bus:1f: configuring for fixed/2500base-x link mode
[    2.212384] mt7530-mdio mdio-bus:1f: Link is Up - 2.5Gbps/Full - flow control rx/tx
[    2.223109] MediaTek MT7531 PHY mt7530-0:00: Configure LED registers (num=14)
[    2.237635] mt7530-mdio mdio-bus:1f internet (uninitialized): PHY [mt7530-0:00] driver [MediaTek MT7531 PHY] (irq=POLL)
[    2.259947] MediaTek MT7531 PHY mt7530-0:01: Configure LED registers (num=14)
[    2.274489] mt7530-mdio mdio-bus:1f lan1 (uninitialized): PHY [mt7530-0:01] driver [MediaTek MT7531 PHY] (irq=POLL)
[    2.296143] MediaTek MT7531 PHY mt7530-0:02: Configure LED registers (num=14)
[    2.310680] mt7530-mdio mdio-bus:1f lan2 (uninitialized): PHY [mt7530-0:02] driver [MediaTek MT7531 PHY] (irq=POLL)
[    2.332295] MediaTek MT7531 PHY mt7530-0:03: Configure LED registers (num=14)
[    2.346827] mt7530-mdio mdio-bus:1f lan3 (uninitialized): PHY [mt7530-0:03] driver [MediaTek MT7531 PHY] (irq=POLL)
[    2.358254] mtk_soc_eth 15100000.ethernet eth0: entered promiscuous mode
[    2.364982] DSA: tree 0 setup
[    2.368228] clk: Disabling unused clocks
[    2.372707] Freeing unused kernel memory: 448K
[    2.377173] Run /init as init process
[    2.380896]   with arguments:
[    2.383847]     /init
[    2.386105]   with environment:
[    2.389229]     HOME=/
[    2.391577]     TERM=linux
[    2.394268]     fstools_ignore_partname=1
[    2.563805] init: Console is alive
[    2.567291] init: - watchdog -
[    2.573814] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    2.582550] gpio_button_hotplug: loading out-of-tree module taints kernel.
[    2.592829] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    2.601095] init: - preinit -
[    2.681082] mtk_soc_eth 15100000.ethernet eth0: configuring for fixed/2500base-x link mode
[    2.689533] mtk_soc_eth 15100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
grep: /sys/block/mmcblk*/mmcblk*p*/uevent: No such file or directory
mmc_get_mac_ascii: partition u-boot-env not found!
grep: /sys/block/mmcblk*/mmcblk*p*/uevent: No such file or directory
mmc_get_mac_ascii: partition u-boot-env not found!
ip: "" is invalid lladdr
ip: "" is invalid lladdr
ip: "" is invalid lladdr
ip: "" is invalid lladdr
[    2.913917] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    6.074120] mt7530-mdio mdio-bus:1f lan1: Link is Up - 1Gbps/Full - flow control rx/tx
[    7.150429] mt7530-mdio mdio-bus:1f lan1: Link is Down
[    7.156574] random: procd: uninitialized urandom read (4 bytes read)
[    7.158555] procd: - early -
[    7.165890] procd: - watchdog -
[    7.684186] procd: - watchdog -
[    7.687469] procd: - ubus -
[   11.360561] random: crng init done
[   11.362397] procd: - init -
Please press Enter to activate this console.
[   11.489188] kmodloader: loading kernel modules from /etc/modules.d/*
[   11.501585] crypto-safexcel 10320000.crypto: EIP97:230(0,1,4,4)-HIA:270(0,5,5),PE:150/433(alg:7fcdfc00)/0/0/0
[   11.513947] Loading modules backported from Linux version v6.12.6-0-ge9d65b48ce1a
[   11.521457] Backport generated by backports.git v6.1.110-1-35-g410656ef04d2
[   11.549474] mt7915e 0000:01:00.0: assign IRQ: got 126
[   11.554571] mt7915e 0000:01:00.0: enabling device (0000 -> 0002)
[   11.560604] mt7915e 0000:01:00.0: enabling bus mastering
[   11.638493] urngd: v1.0.2 started.
[   11.640419] mtk-pcie-gen3 11280000.pcie: msi#0x1 address_hi 0x0 address_lo 0x11280c00 data 1
[   11.670569] mt7915e 0000:01:00.0: HW/SW Version: 0x8a108a10, Build Time: 20240823172725a
[   11.670569]
[   11.687205] mt7915e 0000:01:00.0: WM Firmware Version: ____000000, Build Time: 20240823172741
[   11.720077] mt7915e 0000:01:00.0: WA Firmware Version: DEV_000000, Build Time: 20240823172837
[   11.883573] mt7915e 0000:01:00.0: eeprom load fail, use default bin
[   11.889889] mt7915e 0000:01:00.0: Direct firmware load for mediatek/mt7916_eeprom.bin failed with error -2
[   11.899526] mt7915e 0000:01:00.0: Falling back to sysfs fallback for: mediatek/mt7916_eeprom.bin
[   11.926823] mt7915e: probe of 0000:01:00.0 failed with error -12
[   12.222943] mt798x-wmac 18000000.wifi: HW/SW Version: 0x8a108a10, Build Time: 20240823160656a
[   12.222943]
[   12.239634] mt798x-wmac 18000000.wifi: WM Firmware Version: ____000000, Build Time: 20240823160721
[   12.276211] mt798x-wmac 18000000.wifi: WA Firmware Version: DEV_000000, Build Time: 20240823160840
[   12.421548] mt798x-wmac 18000000.wifi: eeprom load fail, use default bin
[   12.428284] mt798x-wmac 18000000.wifi: Direct firmware load for mediatek/mt7986_eeprom_mt7976.bin failed with error -2
[   12.438962] mt798x-wmac 18000000.wifi: Falling back to sysfs fallback for: mediatek/mt7986_eeprom_mt7976.bin
[   12.467113] mt798x-wmac: probe of 18000000.wifi failed with error -12
[   12.488299] PPP generic driver version 2.4.2
[   12.493175] NET: Registered PF_PPPOX protocol family
[   12.499636] kmodloader: done loading kernel modules from /etc/modules.d/*
[   16.827688] mtk_soc_eth 15100000.ethernet eth0: Link is Down
[   16.846428] mtk_soc_eth 15100000.ethernet eth0: configuring for fixed/2500base-x link mode
[   16.854992] mtk_soc_eth 15100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
[   16.861939] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode
[   16.874649] br-lan: port 1(lan1) entered blocking state
[   16.879879] br-lan: port 1(lan1) entered disabled state
[   16.885219] mt7530-mdio mdio-bus:1f lan1: entered allmulticast mode
[   16.891517] mtk_soc_eth 15100000.ethernet eth0: entered allmulticast mode
[   16.901073] mt7530-mdio mdio-bus:1f lan1: entered promiscuous mode
[   16.919254] mt7530-mdio mdio-bus:1f lan2: configuring for phy/gmii link mode
[   16.930031] br-lan: port 2(lan2) entered blocking state
[   16.935312] br-lan: port 2(lan2) entered disabled state
[   16.940612] mt7530-mdio mdio-bus:1f lan2: entered allmulticast mode
[   16.948727] mt7530-mdio mdio-bus:1f lan2: entered promiscuous mode
[   16.964293] mt7530-mdio mdio-bus:1f lan3: configuring for phy/gmii link mode
[   16.975429] br-lan: port 3(lan3) entered blocking state
[   16.980685] br-lan: port 3(lan3) entered disabled state
[   16.985942] mt7530-mdio mdio-bus:1f lan3: entered allmulticast mode
[   16.994434] mt7530-mdio mdio-bus:1f lan3: entered promiscuous mode
[   17.011915] mt7530-mdio mdio-bus:1f internet: configuring for phy/gmii link mode
[   21.034091] mt7530-mdio mdio-bus:1f lan1: Link is Up - 1Gbps/Full - flow control rx/tx
[   21.034117] br-lan: port 1(lan1) entered blocking state
[   21.047220] br-lan: port 1(lan1) entered forwarding state



BusyBox v1.36.1 (2025-06-23 20:40:36 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 24.10.2, r28739-d9340319c6
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:~# reboot
root@OpenWrt:~# [   32.447360] br-lan: port 1(lan1) entered disabled state
[   32.453693] mt7530-mdio mdio-bus:1f lan1: left allmulticast mode
[   32.459723] mt7530-mdio mdio-bus:1f lan1: left promiscuous mode
[   32.465732] br-lan: port 1(lan1) entered disabled state
[   32.522439] mt7530-mdio mdio-bus:1f lan1: Link is Down
[   32.533677] mt7530-mdio mdio-bus:1f lan2: left allmulticast mode
[   32.539679] mt7530-mdio mdio-bus:1f lan2: left promiscuous mode
[   32.545645] br-lan: port 2(lan2) entered disabled state
[   32.598260] mt7530-mdio mdio-bus:1f lan3: left allmulticast mode
[   32.604289] mtk_soc_eth 15100000.ethernet eth0: left allmulticast mode
[   32.610804] mt7530-mdio mdio-bus:1f lan3: left promiscuous mode
[   32.616771] br-lan: port 3(lan3) entered disabled state
[   32.998819] mtk_soc_eth 15100000.ethernet eth0: Link is Down
[   37.058202] reboot: Restarting system

F0: 102B 0000
FA: 1040 0000
FA: 1040 0000 [0200]
F9: 103F 0000
F3: 1006 0033 [0200]
F3: 4001 00E0 [0200]
F3: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 2400 0041 [0000]
G0: 1190 0000
EC: 0000 0000 [2000]
T0: 0000 0284 [010F]
Jump to BL


F0: 102B 0000
FA: 1040 0000
FA: 1040 0000 [0200]
F9: 103F 0000
F3: 1006 0033 [0200]
F3: 4001 00E0 [0200]
F3: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 2400 0041 [0000]
G0: 1190 0000
EC: 0000 0000 [2000]
T0: 0000 027F [010F]
Jump to BL


F0: 102B 0000
FA: 1040 0000
FA: 1040 0000 [0200]
F9: 103F 0000
F3: 1006 0033 [0200]
F3: 4001 00E0 [0200]
F3: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 2400 0041 [0000]
G0: 1190 0000
EC: 0000 0000 [2000]
T0: 0000 027F [010F]
Jump to BL


F0: 102B 0000
FA: 1040 0000
FA: 1040 0000 [0200]
F9: 103F 0000
F3: 1006 0033 [0200]
F3: 4001 00E0 [0200]
F3: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 2400 0041 [0000]
G0: 1190 0000
EC: 0000 0000 [2000]
T0: 0000 027F [010F]
Jump to BL
4

Type printenv and help in uboot console, likely autostart is set to a very long or infinity.

5

I can't enter anything in the serial console.
The issue is that it is not even loading uboot. Usually, after it prints Jump to BL it loads U-Boot and prints U-Boot 2023.04 (Jan 15 2024 - 14:30:31 +0800), Build: jenkins-YX6MS_mesh-170. But now it just shows Jump to BL.