Mir3g not booting after switch from snapshot to snapshot

Hello,
Need your help !
I actually have a xiaomi mir3g that was previously on the snapshot from yesterday (21/01/20) today i tried an update via sysupgrade after geting the sysupgrade file via wget (https://downloads.openwrt.org/snapshots/targets/ramips/mt7621/openwrt-ramips-mt7621-xiaomi_mir3g-squashfs-sysupgrade.bin)

But now the router won't boot, get the orange led only....

I did some resersh and tried to communiate via the serial port and an arduino (with wiring from here https://dzone.com/articles/hacking-into-xiaomi-mi-router-3g-and-openwrt-firmw )

i was able to get the serial output via termite (can't even type something via putty) but i'm completly unable to select a menu.... termite seems to send the "4" option but nothing happen, i'm stuc in a bootloop. Even on the first start i can't communicate....

Is anybody can help me ?

Thanks in advance and sorry for my bad english, i'm french ^^'

here is all the output of a reboot via serial port


===================================================================

     ..MT7621   stage1 code 10:33:11 (ASIC)

     ..CPU=50000000 HZ BUS=12500000 HZ

==================================================================

Change MPLL source from XTAL to CR...

do MEMPLL setting..

MEMPLL Config : 0x11100000

3PLL mode + External loopback

=== XTAL-40Mhz === DDR-1200Mhz ===

PLL2 FB_DL: 0x2, 1/0 = 697/327 09000000

PLL4 FB_DL: 0x10, 1/0 = 737/287 41000000

PLL3 FB_DL: 0x1a, 1/0 = 663/361 69000000

do DDR setting..[00320381]

Apply DDR3 Setting...(use customer AC)

          0    8   16   24   32   40   48   56   64   72   80   88   96  104  112  120

      --------------------------------------------------------------------------------

0000:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0001:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0002:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0003:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0004:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0005:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0006:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0007:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0008:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0009:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

000A:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

000B:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

000C:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

000D:|    0    0    0    0    0    0    0    0    0    0    0    0    0    1    1    1

000E:|    0    0    0    0    0    0    0    1    1    1    1    1    1    1    1    1

000F:|    0    0    1    1    1    1    1    1    1    1    1    1    0    0    0    0

0010:|    1    1    1    1    1    1    1    0    0    0    0    0    0    0    0    0

0011:|    1    1    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0012:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0013:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0014:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0015:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0016:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0017:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0018:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0019:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

001A:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

001B:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

001C:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

001D:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

001E:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

001F:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

rank 0 coarse = 15

rank 0 fine = 56

B:|    0    0    0    0    0    0    0    0    0    0    1    1    1    0    0    0

opt_dle value:11

DRAMC_R0DELDLY[018]=00001D1D

==================================================================

..RX.DQS perbit delay software calibration 

==================================================================

1.0-15 bit dq delay value

==================================================================

bit|     0  1  2  3  4  5  6  7  8  9

--------------------------------------

0 |    9 7 8 9 6 7 6 6 5 7 

10 |    7 9 8 10 7 9 

--------------------------------------



==================================================================

2.dqs window

x=pass dqs delay value (min~max)center 

y=0-7bit DQ of every group

input delay:DQS0 =29 DQS1 = 29

==================================================================

bit.DQS0. bit      DQS1

0  (1~58)29  8  (1~55)28

1  (1~57)29  9  (1~58)29

2  (1~57)29  10  (1~57)29

3  (1~57)29  11  (1~54)27

4  (1~55)28  12  (1~57)29

5  (1~58)29  13  (1~56)28

6  (1~56)28  14  (1~58)29

7  (1~58)29  15  (1~58)29

==================================================================

3.dq delay value last

==================================================================

bit|    0  1  2  3  4  5  6  7  8   9

--------------------------------------

0 |    9 7 8 9 7 7 7 6 6 7 

10 |    7 11 8 11 7 9 

==================================================================

==================================================================

     TX  perbyte calibration 

==================================================================

DQS loop = 15, cmp_err_1 = ffff0000 

dqs_perbyte_dly.last_dqsdly_pass[0]=15,  finish count=1 

dqs_perbyte_dly.last_dqsdly_pass[1]=15,  finish count=2 

DQ loop=15, cmp_err_1 = ffff01aa

DQ loop=14, cmp_err_1 = ffff0080

dqs_perbyte_dly.last_dqdly_pass[1]=14,  finish count=1 

DQ loop=13, cmp_err_1 = ffff0000

dqs_perbyte_dly.last_dqdly_pass[0]=13,  finish count=2 

byte:0, (DQS,DQ)=(9,8)

byte:1, (DQS,DQ)=(8,8)

20,data:89

[EMI] DRAMC calibration passed




===================================================================

     ..MT7621   stage1 code done 

     ..CPU=50000000 HZ BUS=12500000 HZ

===================================================================



U-Boot 1.1.3 (May 24 2018 - 02:26:51)

Board: Ralink APSoC DRAM:  256 MB
Power on memory test. Memory size= 256 MB...OK!
relocate_code Pointer at: 8ffac000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 8ffe1090
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [C8 D1 80 95 42]
Device not found, ID: c8d1
Not Support this Device! 

chip_mode=00000001
Support this Device in MTK table! c8d1 

select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,.mtd->erasesize=131072  devinfo.iowidth=8
..============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=5 OCP Ratio=1/4
Flash component: NAND Flash
Date:May 24 2018  Time:02:26:51
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =256 Mbytes
#Reset_MT7530
set LAN/WAN LWLLL

Please choose the operation: 
   1: Load system code to SDRAM via TFTP. 
   2: Load system code then write to Flash via TFTP. 
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial. 
   9: Load Boot Loader code then write to Flash via TFTP. 
... 4 ... 3 ... 2 ... 1 ... 0 
Booting System 2
..ranand_erase: start:80000, len:20000 
..Done!
done
   
3: System Boot system code via Flash.
## Booting image at bc600000 ...
   Image Name:   MIPS OpenWrt Linux-4.14.166
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    2097443 Bytes =  2 MB
   Load Address: 80001000
   Entry Point:  80001000
................................   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
commandline uart_en=0 factory_mode=0 usb_u3=0
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 256

Starting kernel ...

[    0.000000] Linux version 4.14.166 (builder@buildhost) (gcc version 8.3.0 (OpenWrt GCC 8.3.0 r12085-947163b9d2)) #0 SMP Tue Jan 21 21:32:48 2020
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is Xiaomi Mi Router 3G
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 10000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x000000000fffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x000000000fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x000000000fffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x9c/0x4e0 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu s26096 r8192 d23056 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 64960
[    0.000000] Kernel command line: console=ttyS0,115200n8 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Writing ErrCtl register=00010241
[    0.000000] Readback ErrCtl register=00010241
[    0.000000] Memory: 251428K/262144K available (5007K kernel code, 253K rwdata, 1084K rodata, 1260K init, 260K bss, 10716K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] CPU Clock: 880MHz
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.007819] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.073986] pid_max: default: 32768 minimum: 301
[    0.078809] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.085317] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.094509] Hierarchical SRCU implementation.
[    0.099721] smp: Bringing up secondary CPUs ...
[    0.117294] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.117303] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.117315] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.117454] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.164479] Synchronize counters for CPU 1: done.
[    0.211480] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.211489] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.211497] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.211573] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.255723] Synchronize counters for CPU 2: done.
[    0.298551] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.298559] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.298567] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.298641] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.340909] Synchronize counters for CPU 3: done.
[    0.370779] smp: Brought up 1 node, 4 CPUs
[    0.379298] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.389103] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.395504] pinctrl core: initialized pinctrl subsystem
[    0.402293] NET: Registered protocol family 16
[    0.417937] pull PCIe RST: RALINK_RSTCTRL = 4000000
[    0.723431] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.728465] ***** Xtal 40MHz *****
[    0.731844] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.736949] Port 0 N_FTS = 1b105000
[    0.740387] Port 1 N_FTS = 1b105000
[    0.743846] Port 2 N_FTS = 1b102800
[    1.899165] PCIE2 no card, disable it(RST&CLK)
[    1.903514]  -> 21007f2
[    1.905928] PCIE0 enabled
[    1.908534] PCIE1 enabled
[    1.911125] PCI host bridge /pcie@1e140000 ranges:
[    1.915887]  MEM 0x0000000060000000..0x000000006fffffff
[    1.921071]   IO 0x000000001e160000..0x000000001e16ffff
[    1.926241] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    1.942276] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    1.948115] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    1.953825] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    1.961458] PCI host bridge to bus 0000:00
[    1.965492] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    1.972548] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    1.978366] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    1.985124] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    1.994921] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.001477] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.008353] pci 0000:00:01.0: BAR 0: no space for [mem size 0x80000000]
[    2.014927] pci 0000:00:01.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.021822] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.028579] pci 0000:00:01.0: BAR 8: assigned [mem 0x60100000-0x601fffff]
[    2.035308] pci 0000:00:01.0: BAR 9: assigned [mem 0x60200000-0x602fffff pref]
[    2.042497] pci 0000:00:00.0: BAR 1: assigned [mem 0x60300000-0x6030ffff]
[    2.049219] pci 0000:00:01.0: BAR 1: assigned [mem 0x60310000-0x6031ffff]
[    2.055977] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff]
[    2.062690] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.067638] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.074374] pci 0000:02:00.0: BAR 0: assigned [mem 0x60100000-0x601fffff 64bit]
[    2.081649] pci 0000:02:00.0: BAR 6: assigned [mem 0x60200000-0x6020ffff pref]
[    2.088783] pci 0000:00:01.0: PCI bridge to [bus 02]
[    2.093727] pci 0000:00:01.0:   bridge window [mem 0x60100000-0x601fffff]
[    2.100449] pci 0000:00:01.0:   bridge window [mem 0x60200000-0x602fffff pref]
[    2.109020] clocksource: Switched to clocksource GIC
[    2.115561] NET: Registered protocol family 2
[    2.120694] TCP established hash table entries: 2048 (order: 1, 8192 bytes)
[    2.127585] TCP bind hash table entries: 2048 (order: 2, 16384 bytes)
[    2.134040] TCP: Hash tables configured (established 2048 bind 2048)
[    2.140479] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.146245] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.152747] NET: Registered protocol family 1
[    2.388956] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    2.395265] Crashlog allocated RAM at address 0x3f00000
[    2.400910] workingset: timestamp_bits=14 max_order=16 bucket_order=2
[    2.415128] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    2.420918] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    2.432917] random: fast init done
[    2.436579] io scheduler noop registered
[    2.440463] io scheduler deadline registered (default)
[    2.446556] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    2.455979] console [ttyS0] disabled
[    2.459774] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 19, base_baud = 3125000) is a 16550A
[    2.468732] console [ttyS0] enabled
[    2.468732] console [ttyS0] enabled
[    2.475644] bootconsole [early0] disabled
[    2.475644] bootconsole [early0] disabled
[    2.485990] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    2.493143] Enable NFI Clock
[    2.496014] # MTK NAND # : Use HW ECC
[    2.499698] Device not found, ID: c8d1
[    2.503426] Not Support this Device! 

[    2.507151] chip_mode=00000001
[    2.510242] Support this Device in MTK table! c8d1 

[    2.515191] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    2.521671] nand: device found, Manufacturer ID: 0xc8, Chip ID: 0xd1
[    2.527992] nand: ESMT NAND 128MiB 3,3V 8-bit
[    2.532352] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    2.539920] Scanning device for bad blocks
[    2.689364] 10 fixed-partitions partitions found on MTD device MT7621-NAND
[    2.696205] Creating 10 MTD partitions on "MT7621-NAND":
[    2.701520] 0x000000000000-0x000000080000 : "Bootloader"
[    2.707837] 0x000000080000-0x0000000c0000 : "Config"
[    2.713738] 0x0000000c0000-0x000000100000 : "Bdata"
[    2.719665] 0x000000100000-0x000000140000 : "factory"
[    2.725608] 0x000000140000-0x000000180000 : "crash"
[    2.731506] 0x000000180000-0x0000001c0000 : "crash_syslog"
[    2.737886] 0x0000001c0000-0x000000200000 : "reserved0"
[    2.744087] 0x000000200000-0x000000600000 : "kernel_stock"
[    2.750572] 0x000000600000-0x000000a00000 : "kernel"
[    2.756439] 0x000000a00000-0x000007f80000 : "ubi"
[    2.763060] [mtk_nand] probe successfully!
[    2.767871] Signature matched and data read!
[    2.772157] load_fact_bbt success 1023
[    2.776504] libphy: Fixed MDIO Bus: probed
[    2.851587] libphy: mdio: probed
[    4.256622] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    4.263288] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 21
[    4.274487] NET: Registered protocol family 10
[    4.280661] Segment Routing with IPv6
[    4.284415] NET: Registered protocol family 17
[    4.288909] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    4.301849] 8021q: 802.1Q VLAN Support v1.8
[    4.309111] UBI: auto-attach mtd9
[    4.312448] ubi0: attaching mtd9
[    5.400085] ubi0: scanning is finished
[    5.419497] ubi0: attached mtd9 (name "ubi", size 117 MiB)
[    5.424972] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    5.431850] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    5.438604] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    5.445551] ubi0: good PEBs: 940, bad PEBs: 0, corrupted PEBs: 0
[    5.451550] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 128
[    5.458739] ubi0: max/mean erase counter: 10/5, WL threshold: 4096, image sequence number: 445969646
[    5.467845] ubi0: available PEBs: 916, total reserved PEBs: 24, PEBs reserved for bad PEB handling: 20
[    5.477157] ubi0: background thread "ubi_bgt0d" started, PID 402
[    5.477182] hctosys: unable to open rtc device (rtc0)
[    5.488445] usb_vbus: disabling
[    5.492185] VFS: Cannot open root device "(null)" or unknown-block(0,0): error -6
[    5.499678] Please append a correct "root=" boot option; here are the available partitions:
[    5.508001] 1f00             512 mtdblock0 
[    5.508006]  (driver?)
[    5.514532] 1f01             256 mtdblock1 
[    5.514537]  (driver?)
[    5.521058] 1f02             256 mtdblock2 
[    5.521063]  (driver?)
[    5.527564] 1f03             256 mtdblock3 
[    5.527568]  (driver?)
[    5.534091] 1f04             256 mtdblock4 
[    5.534096]  (driver?)
[    5.540622] 1f05             256 mtdblock5 
[    5.540627]  (driver?)
[    5.547128] 1f06             256 mtdblock6 
[    5.547132]  (driver?)
[    5.553654] 1f07            4096 mtdblock7 
[    5.553659]  (driver?)
[    5.560180] 1f08            4096 mtdblock8 
[    5.560185]  (driver?)
[    5.566686] 1f09          120320 mtdblock9 
[    5.566690]  (driver?)
[    5.573212] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
[    5.583568] Rebooting in 1 seconds..