Mercusys MR85X U-boot layout

Hi everyone. I'm reaching out to the developers and the community for some guidance. I attempted to manually edit the FIP to expand the memory limit, as the default 30MB was insufficient, but the process failed. I've had to use mtk_uartboot to recover. Could anyone provide advice on how to properly handle this or help me restore the device to a working state? Thanks in advance.

boot initramfs via mtk_uartboot, if you extended/moved the partitions(s) restore your backups.

I restored my partitions also. I want a normal U-boot layout without UBI1

Tried to do the same and brick my mr85x. mtk_uartboot to original fip(cut from mtd0.boot at 0x20000 til the end) with bl2_ram cant see the nand. Non-original fip boots and can save/write/dump nand (mtd also works) but cant see the network. I placed via ymodem all 128mb flash (tried to reflash via programmer with same result) caused stuck when bl2 must locate the fip (bl31). Can anyone help to proceed to the stock -> openwrt firmware? 3 sleepless nights.

P.S. the initramfs loaded by tftp stuck on spi-nand init even where no ubi / mtd in env bootagrs given.

UART Log

F0: 102B 0000
FA: 1040 0000
FA: 1040 0000 [0200]
F9: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 2400 0041 [0000]
G0: 1190 0000
EC: 0000 0000 [1000]
T0: 0000 0154 [010F]
Jump to BL

NOTICE: BL2: v2.7(release):63a7fb842d-dirty
NOTICE: BL2: Built : 16:44:33, Aug 4 2025
NOTICE: WDT: disabled
NOTICE: EMI: Using DDR3 settings

dump toprgu registers data:
1001c000 | 00000000 0000ffe0 00000000 00000000
1001c010 | 00000fff 00000000 00f00000 00000000
1001c020 | 00000000 00000000 00000000 00000000
1001c030 | 003c0003 003c0003 00000000 00000000
1001c040 | 00000000 00000000 00000000 00000000
1001c050 | 00000000 00000000 00000000 00000000
1001c060 | 00000000 00000000 00000000 00000000
1001c070 | 00000000 00000000 00000000 00000000
1001c080 | 00000000 00000000 00000000 00000000

dump drm registers data:
1001d000 | 00000000 00000000 00000000 00000000
1001d010 | 00000000 00000000 00000000 00000000
1001d020 | 00000000 00000000 00000000 00000000
1001d030 | 00a003f1 000000ff 00100000 00000000
1001d040 | 00027e71 000200a0 00020303 000000ff
1001d050 | 00000000 00000000 00000000 00000000
1001d060 | 00000002 00000000 00000000 00000000
drm: 500 = 0xc
[DDR Reserve] ddr reserve mode not be enabled yet
DDR RESERVE Success 0
[EMI] ComboMCP not ready, using default setting
BYTE_swap:0
BYTE_swap:0
Window Sum 596, worse bit 0, min window 72
Window Sum 604, worse bit 8, min window 72
Window Sum 434, worse bit 1, min window 52
Window Sum 438, worse bit 9, min window 50
Window Sum 454, worse bit 1, min window 54
Window Sum 454, worse bit 9, min window 54
Window Sum 480, worse bit 1, min window 58
Window Sum 470, worse bit 13, min window 56
Window Sum 490, worse bit 9, min window 60
Window Sum 488, worse bit 4, min window 58
Window Sum 502, worse bit 15, min window 60
Window Sum 504, worse bit 0, min window 62
Window Sum 508, worse bit 10, min window 60
Window Sum 516, worse bit 1, min window 62
Window Sum 526, worse bit 9, min window 64
NOTICE: EMI: Detected DRAM size: 512MB
NOTICE: EMI: complex R/W mem test passed
NOTICE: CPU: MT7981 (1300MHz)
NOTICE: SPI_NAND parses attributes from parameter page.
NOTICE: SPI_NAND Detected ID 0xc8
NOTICE: Page size 2048, Block size 131072, size 134217728
ERROR: spinand read fail: -5, read length: 2048
ERROR: spinand read fail: -5, read length: 0
ERROR: BL2: Failed to load image id 3 (-5)