I've been having fun flashing custom builds. I'm pretty sure it's irreparably bricked and I'm fine with that. I probably dd'ed when I should have nand-flashed. I thought I should ask though.
I get the following from the serial console:
Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00147
S - IMAGE_VARIANT_STRING=HAACANAAA
S - OEM_IMAGE_VERSION_STRING=xiaoyang-gv
S - Boot Config, 0x000002e5
B - 201 - PBL, Start
B - 2734 - bootable_media_detect_entry, Start
B - 3442 - bootable_media_detect_success, Start
B - 3446 - elf_loader_entry, Start
B - 6114 - auth_hash_seg_entry, Start
B - 6357 - auth_hash_seg_exit, Start
B - 68592 - elf_segs_hash_verify_entry, Start
B - 131292 - PBL, End
B - 145668 - SBL1, Start
B - 199439 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4
B - 206058 - pm_device_init, Start
B - 329247 - PM_SET_VAL:Skip
D - 122549 - pm_device_init, Delta
B - 331535 - pm_driver_init, Start
D - 5368 - pm_driver_init, Delta
B - 337970 - clock_init, Start
D - 2135 - clock_init, Delta
B - 342027 - boot_flash_init, Start
D - 11864 - boot_flash_init, Delta
B - 357582 - boot_config_data_table_init, Start
D - 3202 - boot_config_data_table_init, Delta - (575 Bytes)
B - 365085 - Boot Setting : 0x00000600
B - 369019 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:16
B - 375973 - sbl1_ddr_set_params, Start
B - 379786 - CPR configuration: 0x300
B - 383263 - cpr_init, Start
B - 386038 - Rail:0 Mode: 5 Voltage: 792000
B - 391223 - CL CPR settled at 744000mV
B - 394029 - Rail:1 Mode: 5 Voltage: 880000
B - 398208 - Rail:1 Mode: 7 Voltage: 888000
D - 16470 - cpr_init, Delta
B - 405101 - Pre_DDR_clock_init, Start
B - 409127 - Pre_DDR_clock_init, End
B - 412512 - DDR Type : PCDDR3
B - 418124 - do ddr sanity test, Start
D - 1067 - do ddr sanity test, Delta
B - 422974 - DDR: Start of HAL DDR Boot Training
B - 427701 - DDR: End of HAL DDR Boot Training
B - 433405 - DDR: Checksum to be stored on flash is -968347857
B - 443714 - Image Load, Start
D - 224083 - QSEE Image Loaded, Delta - (1373936 Bytes)
B - 667889 - Image Load, Start
D - 61 - SEC Image Loaded, Delta - (0 Bytes)
B - 675575 - Image Load, Start
D - 10705 - DEVCFG Image Loaded, Delta - (26004 Bytes)
B - 686372 - Image Load, Start
D - 25254 - RPM Image Loaded, Delta - (105964 Bytes)
B - 711717 - Image Load, Start
D - 96472 - APPSBL Image Loaded, Delta - (589900 Bytes)
B - 808311 - QSEE Execution, Start
D - 61 - QSEE Execution, Delta
B - 814106 - USB D+ check, Start
D - 0 - USB D+ check, Delta
B - 820511 - SBL1, End
D - 677161 - SBL1, Delta
S - Flash Throughput, 6752 KB/s (2096379 Bytes, 310454 us)
S - DDR Frequency, 466 MHz
S - Core 0 Frequency, 800 MHz
U-Boot 2016.01 (Sep 28 2020 - 09:05:55 +0000), Build: jenkins-common_router_openwrt_ota_publish-383
DRAM: smem ram ptable found: ver: 1 len: 4
512 MiB
NAND: ONFI device found
ID = 1590aac8
Vendor = c8
Device = aa
qpic_nand: changing oobsize to 64 from 128 bytes
SF: Unsupported flash IDs: manuf ff, jedec ffff, ext_jedec ffff
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
256 MiB
MMC: sdhci: Node Not found, skipping initialization
PCI Link Intialized
PCI1 is not defined in the device tree
In: serial@78B3000
Out: serial@78B3000
Err: serial@78B3000
machid: 8010010
MMC Device 0 not found
eth5 MAC Address from ART is not valid
write phy_id=1, reg(0x8074):0x0670
write phy_id=2, reg(0x8074):0x0670
write phy_id=3, reg(0x8074):0x0670
write phy_id=4, reg(0x8074):0x0670
bootwait is off, bootdelay=5
Hit any key to stop autoboot: 0
trigger button release!
boot from rootfs 1
miwifi: check crash in rmem !
ubi0: attaching mtd1
qpic_nand_read_oob: ecc failure while reading from 2dc0000
qpic_nand_read_oob: ecc failure while reading from 2dc0000
qpic_nand_read_oob: ecc failure while reading from 2dc0000
qpic_nand_read_oob: ecc failure while reading from 2dc0000
qpic_nand_read_oob: ecc failure while reading from 2de0000
qpic_nand_read_oob: ecc failure while reading from 2de0000
qpic_nand_read_oob: ecc failure while reading from 2de0000
qpic_nand_read_oob: ecc failure while reading from 2de0000
qpic_nand_read_oob: ecc failure while reading from 2e00000
qpic_nand_read_oob: ecc failure while reading from 2e00000
qpic_nand_read_oob: ecc failure while reading from 2e00000
etc..
qpic_nand_read_oob: ecc failure while reading from 2dc1000
qpic_nand_read_oob: ecc failure while reading from 2dc1000
qpic_nand_read_oob: ecc failure while reading from 2dc1000
qpic_nand_read_oob: ecc failure while reading from 2dc1000
qpic_nand_read_oob: ecc failure while reading from 2de1000
qpic_nand_read_oob: ecc failure while reading from 2de1000
qpic_nand_read_oob: ecc failure while reading from 2de1000
qpic_nand_read_oob: ecc failure while reading from 2de1000
UBI init error 22
Erasing NAND...
Erasing at 0x6e0000 -- 100% complete.
Writing to NAND... OK
resetting ...
Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00147
S - IMAGE_VARIANT_STRING=HAACANAAA
S - OEM_IMAGE_VERSION_STRING=xiaoyang-gv
S - Boot Config, 0x000002e5
B - 201 - PBL, Start
B - 2735 - bootable_media_detect_entry, Start
B - 3443 - bootable_media_detect_success, Start
B - 3448 - elf_loader_entry, Start
B - 6115 - auth_hash_seg_entry, Start
B - 6358 - auth_hash_seg_exit, Start
B - 68595 - elf_segs_hash_verify_entry, Start
B - 131294 - PBL, End
B - 218410 - SBL1, Start
B - 298991 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4
B - 308904 - pm_device_init, Start
B - 491477 - PM_SET_VAL:Skip
D - 180499 - pm_device_init, Delta
B - 493764 - pm_driver_init, Start
D - 5368 - pm_driver_init, Delta
B - 500200 - clock_init, Start
D - 2135 - clock_init, Delta
B - 504256 - boot_flash_init, Start
D - 11864 - boot_flash_init, Delta
B - 519811 - boot_config_data_table_init, Start
D - 3202 - boot_config_data_table_init, Delta - (575 Bytes)
B - 527314 - Boot Setting : 0x00000600
B - 531249 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:16
B - 538203 - sbl1_ddr_set_params, Start
B - 542015 - CPR configuration: 0x300
B - 545492 - cpr_init, Start
B - 548268 - Rail:0 Mode: 5 Voltage: 792000
B - 553422 - CL CPR settled at 744000mV
B - 556259 - Rail:1 Mode: 5 Voltage: 880000
B - 560437 - Rail:1 Mode: 7 Voltage: 888000
D - 16470 - cpr_init, Delta
B - 567330 - Pre_DDR_clock_init, Start
B - 571356 - Pre_DDR_clock_init, End
B - 574742 - DDR Type : PCDDR3
B - 580354 - do ddr sanity test, Start
D - 1037 - do ddr sanity test, Delta
B - 585203 - DDR: Start of HAL DDR Boot Training
B - 589931 - DDR: End of HAL DDR Boot Training
B - 595604 - DDR: Checksum to be stored on flash is -968347857
B - 605943 - Image Load, Start
D - 224084 - QSEE Image Loaded, Delta - (1373936 Bytes)
B - 830118 - Image Load, Start
D - 30 - SEC Image Loaded, Delta - (0 Bytes)
B - 837804 - Image Load, Start
D - 10706 - DEVCFG Image Loaded, Delta - (26004 Bytes)
B - 848601 - Image Load, Start
D - 25224 - RPM Image Loaded, Delta - (105964 Bytes)
B - 873916 - Image Load, Start
D - 96563 - APPSBL Image Loaded, Delta - (589900 Bytes)
B - 970601 - QSEE Execution, Start
D - 61 - QSEE Execution, Delta
B - 976396 - USB D+ check, Start
D - 0 - USB D+ check, Delta
B - 982801 - SBL1, End
D - 766709 - SBL1, Delta
S - Flash Throughput, 6751 KB/s (2096379 Bytes, 310515 us)
S - DDR Frequency, 466 MHz
S - Core 0 Frequency, 800 MHz
U-Boot 2016.01 (Sep 28 2020 - 09:05:55 +0000), Build: jenkins-common_router_openwrt_ota_publish-383
DRAM: smem ram ptable found: ver: 1 len: 4
512 MiB
NAND: ONFI device found
ID = 1590aac8
Vendor = c8
Device = aa
qpic_nand: changing oobsize to 64 from 128 bytes
SF: Unsupported flash IDs: manuf ff, jedec ffff, ext_jedec ffff
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
256 MiB
MMC: sdhci: Node Not found, skipping initialization
PCI Link Intialized
PCI1 is not defined in the device tree
In: serial@78B3000
Out: serial@78B3000
Err: serial@78B3000
machid: 8010010
MMC Device 0 not found
eth5 MAC Address from ART is not valid
write phy_id=1, reg(0x8074):0x0670
write phy_id=2, reg(0x8074):0x0670
write phy_id=3, reg(0x8074):0x0670
write phy_id=4, reg(0x8074):0x0670
bootwait is off, bootdelay=5
Hit any key to stop autoboot: 0
trigger button release!
boot from rootfs 1
miwifi: check crash in rmem !
ubi0: attaching mtd1
qpic_nand_read_oob: ecc failure while reading from 2dc0000
qpic_nand_read_oob: ecc failure while reading from 2dc0000
qpic_nand_read_oob: ecc failure while reading from 2dc0000
It just repeats this pattern.
I have tried doing a bootp rescue. I get the following:
Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00147
S - IMAGE_VARIANT_STRING=HAACANAAA
S - OEM_IMAGE_VERSION_STRING=xiaoyang-gv
S - Boot Config, 0x000002e5
B - 201 - PBL, Start
B - 2735 - bootable_media_detect_entry, Start
B - 3442 - bootable_media_detect_success, Start
B - 3447 - elf_loader_entry, Start
B - 6110 - auth_hash_seg_entry, Start
B - 6353 - auth_hash_seg_exit, Start
B - 68485 - elf_segs_hash_verify_entry, Start
B - 131185 - PBL, End
B - 145759 - SBL1, Start
B - 199592 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4
B - 206210 - pm_device_init, Start
B - 329705 - PM_SET_VAL:Skip
D - 122762 - pm_device_init, Delta
B - 331992 - pm_driver_init, Start
D - 5368 - pm_driver_init, Delta
B - 338428 - clock_init, Start
D - 2135 - clock_init, Delta
B - 342484 - boot_flash_init, Start
D - 11864 - boot_flash_init, Delta
B - 358039 - boot_config_data_table_init, Start
D - 3202 - boot_config_data_table_init, Delta - (575 Bytes)
B - 365542 - Boot Setting : 0x00000600
B - 369477 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:16
B - 376431 - sbl1_ddr_set_params, Start
B - 380243 - CPR configuration: 0x300
B - 383720 - cpr_init, Start
B - 386526 - Rail:0 Mode: 5 Voltage: 792000
B - 391650 - CL CPR settled at 744000mV
B - 394487 - Rail:1 Mode: 5 Voltage: 880000
B - 398665 - Rail:1 Mode: 7 Voltage: 888000
D - 16470 - cpr_init, Delta
B - 405558 - Pre_DDR_clock_init, Start
B - 409584 - Pre_DDR_clock_init, End
B - 412970 - DDR Type : PCDDR3
B - 418582 - do ddr sanity test, Start
D - 1037 - do ddr sanity test, Delta
B - 423431 - DDR: Start of HAL DDR Boot Training
B - 428159 - DDR: End of HAL DDR Boot Training
B - 433832 - DDR: Checksum to be stored on flash is -968347857
B - 444263 - Image Load, Start
D - 224053 - QSEE Image Loaded, Delta - (1373936 Bytes)
B - 668407 - Image Load, Start
D - 61 - SEC Image Loaded, Delta - (0 Bytes)
B - 676093 - Image Load, Start
D - 10706 - DEVCFG Image Loaded, Delta - (26004 Bytes)
B - 686890 - Image Load, Start
D - 25254 - RPM Image Loaded, Delta - (105964 Bytes)
B - 712236 - Image Load, Start
D - 96532 - APPSBL Image Loaded, Delta - (589900 Bytes)
B - 808921 - QSEE Execution, Start
D - 61 - QSEE Execution, Delta
B - 814716 - USB D+ check, Start
D - 0 - USB D+ check, Delta
B - 821121 - SBL1, End
D - 677649 - SBL1, Delta
S - Flash Throughput, 6747 KB/s (2096379 Bytes, 310697 us)
S - DDR Frequency, 466 MHz
S - Core 0 Frequency, 800 MHz
U-Boot 2016.01 (Sep 28 2020 - 09:05:55 +0000), Build: jenkins-common_router_openwrt_ota_publish-383
DRAM: smem ram ptable found: ver: 1 len: 4
512 MiB
NAND: ONFI device found
ID = 1590aac8
Vendor = c8
Device = aa
qpic_nand: changing oobsize to 64 from 128 bytes
SF: Unsupported flash IDs: manuf ff, jedec ffff, ext_jedec ffff
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
256 MiB
MMC: sdhci: Node Not found, skipping initialization
PCI Link Intialized
PCI1 is not defined in the device tree
In: serial@78B3000
Out: serial@78B3000
Err: serial@78B3000
machid: 8010010
MMC Device 0 not found
eth5 MAC Address from ART is not valid
write phy_id=1, reg(0x8074):0x0670
write phy_id=2, reg(0x8074):0x0670
write phy_id=3, reg(0x8074):0x0670
write phy_id=4, reg(0x8074):0x0670
bootwait is off, bootdelay=5
Hit any key to stop autoboot: 0
detect button press, continue check 5 secs
detect button pressed 5 secs !
confirm to launch xq_upgrade !
cmd=dhcp
Net: MAC0 addr:9c:9d:7e:74:d1:60
PHY ID1: 0x4d
PHY ID2: 0xd0b1
EDMA ver 1 hw init
Num rings - TxDesc:1 (0-0) TxCmpl:1 (7-7)
RxDesc:1 (15-15) RxFill:1 (7-7)
ipq807x_edma_alloc_rings: successfull
ipq807x_edma_setup_ring_resources: successfull
ipq807x_edma_configure_rings: successfull
ipq807x_edma_hw_init: successfull
board_eth_init: ipq807x_edma_init successed
eth0
ipq807x_eth_halt: done
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 up Speed :10 Full duplex
eth0 PHY2 up Speed :1000 Full duplex
eth0 PHY3 Down Speed :10 Half duplex
eth0 PHY4 Down Speed :10 Half duplex
eth0 PHY5 Down Speed :10 Half duplex
ipq807x_eth_init: done
BOOTP broadcast 1
*** Unhandled DHCP Option in OFFER/ACK: 7
*** Unhandled DHCP Option in OFFER/ACK: 13
*** Unhandled DHCP Option in OFFER/ACK: 7
*** Unhandled DHCP Option in OFFER/ACK: 13
DHCP client bound to address 192.168.31.2 (3188 ms)
Using eth0 device
TFTP from server 192.168.31.100; our IP address is 192.168.31.2
Filename 'C0A80B0A.img'.
Load address: 0x44000000
Loading: T T T T T T T T T T T T T T T T
The T's just repeat every 5 seconds.