Netgear R7800 -- cannot install OpenWrt, reboots (bad block in flash)

I have second hand Netgear R7800. It worked/works very well with stock firmware, no noticed issues. Then I tried to install Openwrt on it. It installed but it is constantly rebooting in loop. I can go back to original firmware and it is OK. But when I install Openwrt again it starts rebooting in loops.

The log is below -- could you help/suggest next steps in diagnosing this one? Do you see anything suspicious from the log?

U-Boot 2012.07 [local,local] (Sep 03 2015 - 17:33:28)
U-boot 2012.07 dni1 V0.4 for DNI HW ID: 29764958 NOR flash 0MB; NAND flash 128MB; RAM 512MB; 1st Radio 4x4; 2nd Radio 4x4; Cascade
smem ram ptable found: ver: 0 len: 5
DRAM:  491 MiB
NAND:  SF: Unsupported manufacturer 00
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
128 MiB
MMC:   
*** Warning - bad CRC, using default environment
PCI0 Link Intialized
PCI1 Link Intialized
In:    serial
Out:   serial
Err:   serial
 131072 bytes read: OK
MMC Device 0 not found
cdp: get part failed for 0:HLOS
Net:   MAC1 addr:b0:b9:8a:73:83:73
athrs17_reg_init: complete
athrs17_vlan_config ...done
S17c init  done
MAC2 addr:b0:b9:8a:73:83:72
eth0, eth1
Factory Reset Mode
The Router is in TFTP Server Firmware Recovery mode NOW!
Listening on Port : 69, IP Address: 192.168.1.1 ...
Upgrade Mode
            
Rcv:
    .................................................................
    ....
Done!
Bytes transferred = 11665537 (b20081 hex)
MODEL ID on image: R7800
Firmware Image MODEL ID do not match open source firmware ID
 131072 bytes read: OK
HW ID on board: 29764958+0+128+512+4x4+4x4+cascade
HW ID on image: 29764958+0+128+512+4x4+4x4+cascade
Firmware Image HW ID matched Board HW ID
 131072 bytes read: OK
MODEL ID on board: R7800
MODEL ID on image: R7800
Firmware Image MODEL ID matched Board model ID
 131072 bytes read: OK
MODEL ID on board: R7800
MODEL ID on image: R7800
Firmware Image MODEL ID matched Board model ID
Erasing: off 1480000, size 20000
Erasing at 0x1480000 -- 100% complete. Cleanmarker written at 0x1480000.
Writing: from RAM addr 42000080, to NAND off 1480000, size 20000
 131072 bytes written: OK
Alive-timer 38
NmrpAliveTimerBase 15
Erasing: off 14a0000, size 20000
Erasing at 0x14a0000 -- 100% complete. Cleanmarker written at 0x14a0000.
Writing: from RAM addr 42020080, to NAND off 14a0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 14c0000, size 20000
Erasing at 0x14c0000 -- 100% complete. Cleanmarker written at 0x14c0000.
Writing: from RAM addr 42040080, to NAND off 14c0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 14e0000, size 20000
Erasing at 0x14e0000 -- 100% complete. Cleanmarker written at 0x14e0000.
Writing: from RAM addr 42060080, to NAND off 14e0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1500000, size 20000
Erasing at 0x1500000 -- 100% complete. Cleanmarker written at 0x1500000.
Writing: from RAM addr 42080080, to NAND off 1500000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1520000, size 20000
Erasing at 0x1520000 -- 100% complete. Cleanmarker written at 0x1520000.
Writing: from RAM addr 420a0080, to NAND off 1520000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1540000, size 20000
Erasing at 0x1540000 -- 100% complete. Cleanmarker written at 0x1540000.
Writing: from RAM addr 420c0080, to NAND off 1540000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1560000, size 20000
Erasing at 0x1560000 -- 100% complete. Cleanmarker written at 0x1560000.
Writing: from RAM addr 420e0080, to NAND off 1560000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1580000, size 20000
Erasing at 0x1580000 -- 100% complete. Cleanmarker written at 0x1580000.
Writing: from RAM addr 42100080, to NAND off 1580000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 15a0000, size 20000
Erasing at 0x15a0000 -- 100% complete. Cleanmarker written at 0x15a0000.
Writing: from RAM addr 42120080, to NAND off 15a0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 15c0000, size 20000
Erasing at 0x15c0000 -- 100% complete. Cleanmarker written at 0x15c0000.
Writing: from RAM addr 42140080, to NAND off 15c0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 15e0000, size 20000
Erasing at 0x15e0000 -- 100% complete. Cleanmarker written at 0x15e0000.
Writing: from RAM addr 42160080, to NAND off 15e0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Skipping erasing bad block at 0x01600000
Erasing: off 1620000, size 20000
Erasing at 0x1620000 -- 100% complete. Cleanmarker written at 0x1620000.
Writing: from RAM addr 42180080, to NAND off 1620000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1640000, size 20000
Erasing at 0x1640000 -- 100% complete. Cleanmarker written at 0x1640000.
Writing: from RAM addr 421a0080, to NAND off 1640000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1660000, size 20000
Erasing at 0x1660000 -- 100% complete. Cleanmarker written at 0x1660000.
Writing: from RAM addr 421c0080, to NAND off 1660000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1680000, size 20000
Erasing at 0x1680000 -- 100% complete. Cleanmarker written at 0x1680000.
Writing: from RAM addr 421e0080, to NAND off 1680000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 16a0000, size 20000
Erasing at 0x16a0000 -- 100% complete. Cleanmarker written at 0x16a0000.
Writing: from RAM addr 42200080, to NAND off 16a0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 16c0000, size 20000
Erasing at 0x16c0000 -- 100% complete. Cleanmarker written at 0x16c0000.
Writing: from RAM addr 42220080, to NAND off 16c0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 16e0000, size 20000
Erasing at 0x16e0000 -- 100% complete. Cleanmarker written at 0x16e0000.
Writing: from RAM addr 42240080, to NAND off 16e0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1700000, size 20000
Erasing at 0x1700000 -- 100% complete. Cleanmarker written at 0x1700000.
Writing: from RAM addr 42260080, to NAND off 1700000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1720000, size 20000
Erasing at 0x1720000 -- 100% complete. Cleanmarker written at 0x1720000.
Writing: from RAM addr 42280080, to NAND off 1720000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1740000, size 20000
Erasing at 0x1740000 -- 100% complete. Cleanmarker written at 0x1740000.
Writing: from RAM addr 422a0080, to NAND off 1740000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1760000, size 20000
Erasing at 0x1760000 -- 100% complete. Cleanmarker written at 0x1760000.
Writing: from RAM addr 422c0080, to NAND off 1760000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1780000, size 20000
Erasing at 0x1780000 -- 100% complete. Cleanmarker written at 0x1780000.
Writing: from RAM addr 422e0080, to NAND off 1780000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 17a0000, size 20000
Erasing at 0x17a0000 -- 100% complete. Cleanmarker written at 0x17a0000.
Writing: from RAM addr 42300080, to NAND off 17a0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 17c0000, size 20000
Erasing at 0x17c0000 -- 100% complete. Cleanmarker written at 0x17c0000.
Writing: from RAM addr 42320080, to NAND off 17c0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 17e0000, size 20000
Erasing at 0x17e0000 -- 100% complete. Cleanmarker written at 0x17e0000.
Writing: from RAM addr 42340080, to NAND off 17e0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1800000, size 20000
Erasing at 0x1800000 -- 100% complete. Cleanmarker written at 0x1800000.
Writing: from RAM addr 42360080, to NAND off 1800000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1820000, size 20000
Erasing at 0x1820000 -- 100% complete. Cleanmarker written at 0x1820000.
Writing: from RAM addr 42380080, to NAND off 1820000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1840000, size 20000
Erasing at 0x1840000 -- 100% complete. Cleanmarker written at 0x1840000.
Writing: from RAM addr 423a0080, to NAND off 1840000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1860000, size 20000
Erasing at 0x1860000 -- 100% complete. Cleanmarker written at 0x1860000.
Writing: from RAM addr 423c0080, to NAND off 1860000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1880000, size 20000
Erasing at 0x1880000 -- 100% complete. Cleanmarker written at 0x1880000.
Writing: from RAM addr 423e0080, to NAND off 1880000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 18a0000, size 20000
Erasing at 0x18a0000 -- 100% complete. Cleanmarker written at 0x18a0000.
Writing: from RAM addr 42400080, to NAND off 18a0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 18c0000, size 20000
Erasing at 0x18c0000 -- 100% complete. Cleanmarker written at 0x18c0000.
Writing: from RAM addr 42420080, to NAND off 18c0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 18e0000, size 20000
Erasing at 0x18e0000 -- 100% complete. Cleanmarker written at 0x18e0000.
Writing: from RAM addr 42440080, to NAND off 18e0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1900000, size 20000
Erasing at 0x1900000 -- 100% complete. Cleanmarker written at 0x1900000.
Writing: from RAM addr 42460080, to NAND off 1900000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1920000, size 20000
Erasing at 0x1920000 -- 100% complete. Cleanmarker written at 0x1920000.
Writing: from RAM addr 42480080, to NAND off 1920000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1940000, size 20000
Erasing at 0x1940000 -- 100% complete. Cleanmarker written at 0x1940000.
Writing: from RAM addr 424a0080, to NAND off 1940000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1960000, size 20000
Erasing at 0x1960000 -- 100% complete. Cleanmarker written at 0x1960000.
Writing: from RAM addr 424c0080, to NAND off 1960000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1980000, size 20000
Erasing at 0x1980000 -- 100% complete. Cleanmarker written at 0x1980000.
Writing: from RAM addr 424e0080, to NAND off 1980000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 19a0000, size 20000
Erasing at 0x19a0000 -- 100% complete. Cleanmarker written at 0x19a0000.
Writing: from RAM addr 42500080, to NAND off 19a0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 19c0000, size 20000
Erasing at 0x19c0000 -- 100% complete. Cleanmarker written at 0x19c0000.
Writing: from RAM addr 42520080, to NAND off 19c0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 19e0000, size 20000
Erasing at 0x19e0000 -- 100% complete. Cleanmarker written at 0x19e0000.
Writing: from RAM addr 42540080, to NAND off 19e0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1a00000, size 20000
Erasing at 0x1a00000 -- 100% complete. Cleanmarker written at 0x1a00000.
Writing: from RAM addr 42560080, to NAND off 1a00000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1a20000, size 20000
Erasing at 0x1a20000 -- 100% complete. Cleanmarker written at 0x1a20000.
Writing: from RAM addr 42580080, to NAND off 1a20000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1a40000, size 20000
Erasing at 0x1a40000 -- 100% complete. Cleanmarker written at 0x1a40000.
Writing: from RAM addr 425a0080, to NAND off 1a40000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1a60000, size 20000
Erasing at 0x1a60000 -- 100% complete. Cleanmarker written at 0x1a60000.
Writing: from RAM addr 425c0080, to NAND off 1a60000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1a80000, size 20000
Erasing at 0x1a80000 -- 100% complete. Cleanmarker written at 0x1a80000.
Writing: from RAM addr 425e0080, to NAND off 1a80000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1aa0000, size 20000
Erasing at 0x1aa0000 -- 100% complete. Cleanmarker written at 0x1aa0000.
Writing: from RAM addr 42600080, to NAND off 1aa0000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1ac0000, size 20000
Erasing at 0x1ac0000 -- 100% complete. Cleanmarker written at 0x1ac0000.
Writing: from RAM addr 42620080, to NAND off 1ac0000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1ae0000, size 20000
Erasing at 0x1ae0000 -- 100% complete. Cleanmarker written at 0x1ae0000.
Writing: from RAM addr 42640080, to NAND off 1ae0000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1b00000, size 20000
Erasing at 0x1b00000 -- 100% complete. Cleanmarker written at 0x1b00000.
Writing: from RAM addr 42660080, to NAND off 1b00000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1b20000, size 20000
Erasing at 0x1b20000 -- 100% complete. Cleanmarker written at 0x1b20000.
Writing: from RAM addr 42680080, to NAND off 1b20000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1b40000, size 20000
Erasing at 0x1b40000 -- 100% complete. Cleanmarker written at 0x1b40000.
Writing: from RAM addr 426a0080, to NAND off 1b40000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1b60000, size 20000
Erasing at 0x1b60000 -- 100% complete. Cleanmarker written at 0x1b60000.
Writing: from RAM addr 426c0080, to NAND off 1b60000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1b80000, size 20000
Erasing at 0x1b80000 -- 100% complete. Cleanmarker written at 0x1b80000.
Writing: from RAM addr 426e0080, to NAND off 1b80000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1ba0000, size 20000
Erasing at 0x1ba0000 -- 100% complete. Cleanmarker written at 0x1ba0000.
Writing: from RAM addr 42700080, to NAND off 1ba0000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1bc0000, size 20000
Erasing at 0x1bc0000 -- 100% complete. Cleanmarker written at 0x1bc0000.
Writing: from RAM addr 42720080, to NAND off 1bc0000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1be0000, size 20000
Erasing at 0x1be0000 -- 100% complete. Cleanmarker written at 0x1be0000.
Writing: from RAM addr 42740080, to NAND off 1be0000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1c00000, size 20000
Erasing at 0x1c00000 -- 100% complete. Cleanmarker written at 0x1c00000.
Writing: from RAM addr 42760080, to NAND off 1c00000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1c20000, size 20000
Erasing at 0x1c20000 -- 100% complete. Cleanmarker written at 0x1c20000.
Writing: from RAM addr 42780080, to NAND off 1c20000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1c40000, size 20000
Erasing at 0x1c40000 -- 100% complete. Cleanmarker written at 0x1c40000.
Writing: from RAM addr 427a0080, to NAND off 1c40000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1c60000, size 20000
Erasing at 0x1c60000 -- 100% complete. Cleanmarker written at 0x1c60000.
Writing: from RAM addr 427c0080, to NAND off 1c60000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1c80000, size 20000
Erasing at 0x1c80000 -- 100% complete. Cleanmarker written at 0x1c80000.
Writing: from RAM addr 427e0080, to NAND off 1c80000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1ca0000, size 20000
Erasing at 0x1ca0000 -- 100% complete. Cleanmarker written at 0x1ca0000.
Writing: from RAM addr 42800080, to NAND off 1ca0000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1cc0000, size 20000
Erasing at 0x1cc0000 -- 100% complete. Cleanmarker written at 0x1cc0000.
Writing: from RAM addr 42820080, to NAND off 1cc0000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1ce0000, size 20000
Erasing at 0x1ce0000 -- 100% complete. Cleanmarker written at 0x1ce0000.
Writing: from RAM addr 42840080, to NAND off 1ce0000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1d00000, size 20000
Erasing at 0x1d00000 -- 100% complete. Cleanmarker written at 0x1d00000.
Writing: from RAM addr 42860080, to NAND off 1d00000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1d20000, size 20000
Erasing at 0x1d20000 -- 100% complete. Cleanmarker written at 0x1d20000.
Writing: from RAM addr 42880080, to NAND off 1d20000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1d40000, size 20000
Erasing at 0x1d40000 -- 100% complete. Cleanmarker written at 0x1d40000.
Writing: from RAM addr 428a0080, to NAND off 1d40000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1d60000, size 20000
Erasing at 0x1d60000 -- 100% complete. Cleanmarker written at 0x1d60000.
Writing: from RAM addr 428c0080, to NAND off 1d60000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1d80000, size 20000
Erasing at 0x1d80000 -- 100% complete. Cleanmarker written at 0x1d80000.
Writing: from RAM addr 428e0080, to NAND off 1d80000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1da0000, size 20000
Erasing at 0x1da0000 -- 100% complete. Cleanmarker written at 0x1da0000.
Writing: from RAM addr 42900080, to NAND off 1da0000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1dc0000, size 20000
Erasing at 0x1dc0000 -- 100% complete. Cleanmarker written at 0x1dc0000.
Writing: from RAM addr 42920080, to NAND off 1dc0000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1de0000, size 20000
Erasing at 0x1de0000 -- 100% complete. Cleanmarker written at 0x1de0000.
Writing: from RAM addr 42940080, to NAND off 1de0000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1e00000, size 20000
Erasing at 0x1e00000 -- 100% complete. Cleanmarker written at 0x1e00000.
Writing: from RAM addr 42960080, to NAND off 1e00000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1e20000, size 20000
Erasing at 0x1e20000 -- 100% complete. Cleanmarker written at 0x1e20000.
Writing: from RAM addr 42980080, to NAND off 1e20000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1e40000, size 20000
Erasing at 0x1e40000 -- 100% complete. Cleanmarker written at 0x1e40000.
Writing: from RAM addr 429a0080, to NAND off 1e40000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1e60000, size 20000
Erasing at 0x1e60000 -- 100% complete. Cleanmarker written at 0x1e60000.
Writing: from RAM addr 429c0080, to NAND off 1e60000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1e80000, size 20000
Erasing at 0x1e80000 -- 100% complete. Cleanmarker written at 0x1e80000.
Writing: from RAM addr 429e0080, to NAND off 1e80000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1ea0000, size 20000
Erasing at 0x1ea0000 -- 100% complete. Cleanmarker written at 0x1ea0000.
Writing: from RAM addr 42a00080, to NAND off 1ea0000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1ec0000, size 20000
Erasing at 0x1ec0000 -- 100% complete. Cleanmarker written at 0x1ec0000.
Writing: from RAM addr 42a20080, to NAND off 1ec0000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1ee0000, size 20000
Erasing at 0x1ee0000 -- 100% complete. Cleanmarker written at 0x1ee0000.
Writing: from RAM addr 42a40080, to NAND off 1ee0000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1f00000, size 20000
Erasing at 0x1f00000 -- 100% complete. Cleanmarker written at 0x1f00000.
Writing: from RAM addr 42a60080, to NAND off 1f00000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1f20000, size 20000
Erasing at 0x1f20000 -- 100% complete. Cleanmarker written at 0x1f20000.
Writing: from RAM addr 42a80080, to NAND off 1f20000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1f40000, size 20000
Erasing at 0x1f40000 -- 100% complete. Cleanmarker written at 0x1f40000.
Writing: from RAM addr 42aa0080, to NAND off 1f40000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1f60000, size 20000
Erasing at 0x1f60000 -- 100% complete. Cleanmarker written at 0x1f60000.
Writing: from RAM addr 42ac0080, to NAND off 1f60000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1f80000, size 20000
Erasing at 0x1f80000 -- 100% complete. Cleanmarker written at 0x1f80000.
Writing: from RAM addr 42ae0080, to NAND off 1f80000, size 20000
 131072 bytes written: OK
Alive-timer 19
Erasing: off 1fa0000, size 20000
Erasing at 0x1fa0000 -- 100% complete. Cleanmarker written at 0x1fa0000.
Writing: from RAM addr 42b00080, to NAND off 1fa0000, size 20000
 131072 bytes written: OK
Alive-timer 19
Erasing: off 1fc0000, size 20000
Erasing at 0x1fc0000 -- 100% complete. Cleanmarker written at 0x1fc0000.
Writing: from RAM addr 42b20080, to NAND off 1fc0000, size 20000
 131072 bytes written: OK
Alive-timer 19
Done
Rebooting...
resetting ...
Resetting with watch dog!

second part of the log:

U-Boot 2012.07 [local,local] (Sep 03 2015 - 17:33:28)
U-boot 2012.07 dni1 V0.4 for DNI HW ID: 29764958 NOR flash 0MB; NAND flash 128MB; RAM 512MB; 1st Radio 4x4; 2nd Radio 4x4; Cascade
smem ram ptable found: ver: 0 len: 5
DRAM:  491 MiB
NAND:  SF: Unsupported manufacturer 00
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
128 MiB
MMC:   
*** Warning - bad CRC, using default environment
PCI0 Link Intialized
PCI1 Link Intialized
In:    serial
Out:   serial
Err:   serial
 131072 bytes read: OK
MMC Device 0 not found
cdp: get part failed for 0:HLOS
Net:   MAC1 addr:b0:b9:8a:73:83:73
athrs17_reg_init: complete
athrs17_vlan_config ...done
S17c init  done
MAC2 addr:b0:b9:8a:73:83:72
eth0, eth1
Hit any key to stop autoboot:  2 
 Client starts...[Listening] for ADVERTISE...TTT
Retry count exceeded; boot the image as usual
 nmrp server is stopped or failed !
Loading from device 0: nand0 (offset 0x1480000)
Skipping bad block 0x01600000
** check kernel image **
   Verifying Checksum ... OK
** check rootfs image **
   Verifying Checksum ... OK
MMC Device 0 not found
Loading from nand0, offset 0x1480000
   Image Name:   ARM OpenWrt Linux-4.14.224
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2204451 Bytes = 2.1 MiB
   Load Address: 42208000
   Entry Point:  42208000
Skipping bad block 0x01600000
Automatic boot of image at addr 0x44000000 ...
   Image Name:   ARM OpenWrt Linux-4.14.224
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2204451 Bytes = 2.1 MiB
   Load Address: 42208000
   Entry Point:  42208000
   Verifying Checksum ... OK
   Loading Kernel Image ... OK
mtdparts variable not set, see 'help mtdparts'
no partitions defined
defaults:
mtdids  : nand0=msm_nand
mtdparts: none
info: "mtdparts" not set
Using machid 0x136c from environment
Starting kernel ...
[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 4.14.224 (cezary@eko.one.pl) (gcc version 7.5.0 (OpenWrt GCC 7.5.0 r11261-3f5fecfd33)) #0 SMP Sat Mar 27 06:44:43 2021
[    0.000000] CPU: ARMv7 Processor [512f04d0] revision 0 (ARMv7), cr=10c5787d
[    0.000000] CPU: div instructions available: patching division code
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, PIPT instruction cache
[    0.000000] OF: fdt: Machine model: Netgear Nighthawk X4S R7800
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] random: get_random_bytes called from 0xc09008e0 with crng_init=0
[    0.000000] percpu: Embedded 15 pages/cpu s29388 r8192 d23860 u61440
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 121920
[    0.000000] Kernel command line: 
[    0.000000] Bootloader command line (ignored): console=ttyHSL1,115200n8
[    0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
[    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Memory: 477376K/491520K available (4985K kernel code, 160K rwdata, 756K rodata, 1024K init, 235K bss, 14144K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
[    0.000000]     vmalloc : 0xde800000 - 0xff800000   ( 528 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xde000000   ( 480 MB)
[    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
[    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
[    0.000000]       .text : 0xc0208000 - 0xc07de6c8   (5978 kB)
[    0.000000]       .init : 0xc0900000 - 0xc0a00000   (1024 kB)
[    0.000000]       .data : 0xc0a00000 - 0xc0a28180   ( 161 kB)
[    0.000000]        .bss : 0xc0a2a000 - 0xc0a64e10   ( 236 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[    0.000000] clocksource: dg_timer: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 305801671480 ns
[    0.000007] sched_clock: 32 bits at 6MHz, resolution 160ns, wraps every 343597383600ns
[    0.000021] Switching to timer-based delay loop, resolution 160ns
[    0.000225] Calibrating delay loop (skipped), value calculated using timer frequency.. 12.50 BogoMIPS (lpj=62500)
[    0.000251] pid_max: default: 32768 minimum: 301
[    0.000380] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000398] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000976] CPU: Testing write buffer coherency: ok
[    0.001729] Setting up static identity map for 0x42300000 - 0x42300060
[    0.001893] Hierarchical SRCU implementation.
[    0.002636] smp: Bringing up secondary CPUs ...
[    0.004479] smp: Brought up 1 node, 2 CPUs
[    0.004497] SMP: Total of 2 processors activated (25.00 BogoMIPS).
[    0.004507] CPU: All CPU(s) started in SVC mode.
[    0.013975] VFP support v0.3: implementor 51 architecture 64 part 4d variant 2 rev 0
[    0.014140] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.014165] futex hash table entries: 512 (order: 3, 32768 bytes)
[    0.014268] pinctrl core: initialized pinctrl subsystem
[    0.015220] NET: Registered protocol family 16
[    0.015480] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.016725] cpuidle: using governor ladder
[    0.016793] cpuidle: using governor menu
[    0.038937] msm_bus_fabric_init_driver
[    0.040317] usbcore: registered new interface driver usbfs
[    0.040390] usbcore: registered new interface driver hub
[    0.040466] usbcore: registered new device driver usb
[    0.040524] pps_core: LinuxPPS API ver. 1 registered
[    0.040536] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    0.040568] PTP clock support registered
[    0.042282] clocksource: Switched to clocksource dg_timer
[    0.045302] NET: Registered protocol family 2
[    0.045907] TCP established hash table entries: 4096 (order: 2, 16384 bytes)
[    0.045948] TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
[    0.046003] TCP: Hash tables configured (established 4096 bind 4096)
[    0.046096] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    0.046123] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    0.046299] NET: Registered protocol family 1
[    0.047463] No memory allocated for crashlog
[    0.047757] workingset: timestamp_bits=30 max_order=17 bucket_order=0
[    0.052126] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.052143] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.058833] io scheduler noop registered
[    0.058854] io scheduler deadline registered (default)
[    0.060488] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda not found, using dummy regulator
[    0.060593] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda_phy not found, using dummy regulator
[    0.060688] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda_refclk not found, using dummy regulator
[    0.061463] OF: PCI: host bridge /soc/pci@1b500000 ranges:
[    0.061508] OF: PCI:    IO 0x0fe00000..0x0fefffff -> 0x0fe00000
[    0.061534] OF: PCI:   MEM 0x08000000..0x0fdfffff -> 0x08000000
[    0.169651] qcom-pcie 1b500000.pci: link up
[    0.169816] qcom-pcie 1b500000.pci: PCI host bridge to bus 0000:00
[    0.169839] pci_bus 0000:00: root bus resource [bus 00-ff]
[    0.169861] pci_bus 0000:00: root bus resource [io  0x0000-0xfffff] (bus address [0xfe00000-0xfefffff])
[    0.169876] pci_bus 0000:00: root bus resource [mem 0x08000000-0x0fdfffff]
[    0.170389] PCI: bus0: Fast back to back transfers disabled
[    0.172710] PCI: bus1: Fast back to back transfers disabled
[    0.172809] pci 0000:00:00.0: BAR 8: assigned [mem 0x08000000-0x081fffff]
[    0.172834] pci 0000:01:00.0: BAR 0: assigned [mem 0x08000000-0x081fffff 64bit]
[    0.172962] pci 0000:00:00.0: PCI bridge to [bus 01-ff]
[    0.172984] pci 0000:00:00.0:   bridge window [mem 0x08000000-0x081fffff]
[    0.173514] pcieport 0000:00:00.0: AER enabled with IRQ 35
[    0.174034] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda not found, using dummy regulator
[    0.174141] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda_phy not found, using dummy regulator
[    0.174228] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda_refclk not found, using dummy regulator
[    0.174981] OF: PCI: host bridge /soc/pci@1b700000 ranges:
[    0.175022] OF: PCI:    IO 0x31e00000..0x31efffff -> 0x31e00000
[    0.175046] OF: PCI:   MEM 0x2e000000..0x31dfffff -> 0x2e000000
[    0.284829] qcom-pcie 1b700000.pci: link up
[    0.284977] qcom-pcie 1b700000.pci: PCI host bridge to bus 0001:00
[    0.284997] pci_bus 0001:00: root bus resource [bus 00-ff]
[    0.285012] pci_bus 0001:00: root bus resource [mem 0x2e000000-0x31dfffff]
[    0.285475] PCI: bus0: Fast back to back transfers disabled
[    0.287801] PCI: bus1: Fast back to back transfers disabled
[    0.287886] pci 0001:00:00.0: BAR 8: assigned [mem 0x2e000000-0x2e1fffff]
[    0.287909] pci 0001:01:00.0: BAR 0: assigned [mem 0x2e000000-0x2e1fffff 64bit]
[    0.288041] pci 0001:00:00.0: PCI bridge to [bus 01-ff]
[    0.288060] pci 0001:00:00.0:   bridge window [mem 0x2e000000-0x2e1fffff]
[    0.288534] pcieport 0001:00:00.0: AER enabled with IRQ 68
[    0.290862] L2 @ QSB rate. Forcing new rate.
[    0.291082] L2 @ 384000 KHz
[    0.291260] CPU0 @ 800000 KHz
[    0.291272] CPU1 @ QSB rate. Forcing new rate.
[    0.291401] CPU1 @ 384000 KHz
[    0.295331] gsbi 16300000.gsbi: GSBI port protocol: 6 crci: 0
[    0.297262] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.299693] msm_serial 16340000.serial: msm_serial: detected port #0
[    0.299793] msm_serial 16340000.serial: uartclk = 7372800
[    0.299878] 16340000.serial: ttyMSM0 at MMIO 0x16340000 (irq = 101, base_baud = 460800) is a MSM
[    0.299919] msm_serial: console setup on port #0
[    1.019739] console [ttyMSM0] enabled
[    1.024536] msm_serial: driver initialized
[    1.032844] loop: module loaded
[    1.034856] nand: device found, Manufacturer ID: 0x2c, Chip ID: 0xa1
[    1.034891] nand: Micron MT29F1G08ABBEAH4
[    1.041437] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    1.045523] 8 fixed-partitions partitions found on MTD device qcom_nand.0
[    1.052894] Creating 8 MTD partitions on "qcom_nand.0":
[    1.059670] 0x000000000000-0x000000c80000 : "qcadata"
[    1.069813] random: fast init done
[    1.087627] 0x000000c80000-0x000001180000 : "APPSBL"
[    1.097176] 0x000001180000-0x000001200000 : "APPSBLENV"
[    1.098784] 0x000001200000-0x000001340000 : "art"
[    1.104171] 0x000001340000-0x000001480000 : "artbak"
[    1.108975] 0x000001480000-0x000001880000 : "kernel"
[    1.118898] 0x000001880000-0x000007900000 : "ubi"
[    1.289920] 0x000007900000-0x000008000000 : "reserve"
[    1.304316] libphy: GPIO Bitbanged MDIO: probed
[    1.325985] switch0: Atheros AR8337 rev. 2 switch registered on gpio-0
[    2.185284] ar8327: qca,phy-rgmii-en is not specified
[    2.185668] libphy: Fixed MDIO Bus: probed
[    2.191515] ipq806x-gmac-dwmac 37200000.ethernet: PTP uses main clock
[    2.193725] stmmac - user ID: 0x10, Synopsys ID: 0x37
[    2.199824] ipq806x-gmac-dwmac 37200000.ethernet: Ring mode enabled
[    2.204944] ipq806x-gmac-dwmac 37200000.ethernet: DMA HW capability register supported
[    2.210936] ipq806x-gmac-dwmac 37200000.ethernet: Enhanced/Alternate descriptors
[    2.218989] ipq806x-gmac-dwmac 37200000.ethernet: Enabled extended descriptors
[    2.226549] ipq806x-gmac-dwmac 37200000.ethernet: RX Checksum Offload Engine supported
[    2.233580] ipq806x-gmac-dwmac 37200000.ethernet: COE Type 2
[    2.241402] ipq806x-gmac-dwmac 37200000.ethernet: TX Checksum insertion supported
[    2.247291] ipq806x-gmac-dwmac 37200000.ethernet: Wake-Up On Lan supported
[    2.254668] ipq806x-gmac-dwmac 37200000.ethernet: Enable RX Mitigation via HW Watchdog Timer
[    2.263095] ipq806x-gmac-dwmac 37400000.ethernet: PTP uses main clock
[    2.270157] stmmac - user ID: 0x10, Synopsys ID: 0x37
[    2.276385] ipq806x-gmac-dwmac 37400000.ethernet: Ring mode enabled
[    2.281333] ipq806x-gmac-dwmac 37400000.ethernet: DMA HW capability register supported
[    2.287496] ipq806x-gmac-dwmac 37400000.ethernet: Enhanced/Alternate descriptors
[    2.295464] ipq806x-gmac-dwmac 37400000.ethernet: Enabled extended descriptors
[    2.303022] ipq806x-gmac-dwmac 37400000.ethernet: RX Checksum Offload Engine supported
[    2.309981] ipq806x-gmac-dwmac 37400000.ethernet: COE Type 2
[    2.317955] ipq806x-gmac-dwmac 37400000.ethernet: TX Checksum insertion supported
[    2.323766] ipq806x-gmac-dwmac 37400000.ethernet: Wake-Up On Lan supported
[    2.331076] ipq806x-gmac-dwmac 37400000.ethernet: Enable RX Mitigation via HW Watchdog Timer
[    2.338582] i2c /dev entries driver
[    2.347356] Calibration not found.
[    2.350809] Speed bin: 0
[    2.353208] PVS bin: 4
[    2.357101] cpuidle: enable-method property 'qcom,kpss-acc-v1' found operations
[    2.358046] cpuidle: enable-method property 'qcom,kpss-acc-v1' found operations
[    2.365855] sdhci: Secure Digital Host Controller Interface driver
[    2.372474] sdhci: Copyright(c) Pierre Ossman
[    2.378810] sdhci-pltfm: SDHCI platform and OF driver helper
[    2.384495] NET: Registered protocol family 10
[    2.390210] Segment Routing with IPv6
[    2.393327] NET: Registered protocol family 17
[    2.396918] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    2.401884] 8021q: 802.1Q VLAN Support v1.8
[    2.414440] Registering SWP/SWPB emulation handler
[    2.430544] qcom_rpm 108000.rpm: RPM firmware 3.0.16777364
[    2.442756] s1a: Bringing 0uV into 1050000-1050000uV
[    2.442999] s1a: supplied by regulator-dummy
[    2.446895] s1b: Bringing 0uV into 1050000-1050000uV
[    2.451224] s1b: supplied by regulator-dummy
[    2.456191] s2a: Bringing 0uV into 775000-775000uV
[    2.460427] s2a: supplied by regulator-dummy
[    2.465045] s2b: Bringing 0uV into 775000-775000uV
[    2.469453] s2b: supplied by regulator-dummy
[    2.478657] UBI error: no valid UBI magic found inside mt[    2.484834] VFS: Cannot open root device "(null)" or unknown-block(0,0): error -6
[    2.484854] Please append a correct "root=" boot option; here are the available partitions:
[    2.491297] 1f00           12800 mtdblock0 
[    2.491302]  (driver?)
[    2.503683] 1f01            5120 mtdblock1 
[    2.503687]  (driver?)
[    2.510118] 1f02             512 mtdblock2 
[    2.510121]  (driver?)
[    2.516628] 1f03            1280 mtdblock3 
[    2.516633]  (driver?)
[    2.523196] 1f04            1280 mtdblock4 
[    2.523200]  (driver?)
[    2.529648] 1f05            4096 mtdblock5 
[    2.529652]  (driver?)
[    2.536223] 1f06           98816 mtdblock6 
[    2.536227]  (driver?)
[    2.542725] 1f07            7168 mtdblock7 
[    2.542729]  (driver?)
[    2.549179] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
[    2.551631] CPU1: stopping
[    2.559870] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.14.224 #0
[    2.562556] Hardware name: Generic DT based system
[    2.568731] Function entered at [<c030f1c4>] from [<c030b3ac>]
[    2.573410] Function entered at [<c030b3ac>] from [<c07c2e44>]
[    2.579227] Function entered at [<c07c2e44>] from [<c030e40c>]
[    2.585039] Function entered at [<c030e40c>] from [<c03014b8>]
[    2.590857] Function entered at [<c03014b8>] from [<c030bf8c>]
[    2.596672] Exception stack(0xdd461f80 to 0xdd461fc8)
[    2.602520] 1f80: 00000001 00000000 00000000 c0315100 ffffe000 c0a03cb8 c0a03c6c 00000000
[    2.607644] 1fa0: 00000000 512f04d0 00000000 00000000 dd461fc8 dd461fd0 c030854c c0308550
[    2.615780] 1fc0: 60000013 ffffffff
[    2.623929] Function entered at [<c030bf8c>] from [<c0308550>]
[    2.627229] Function entered at [<c0308550>] from [<c0358a60>]
[    2.633132] Function entered at [<c0358a60>] from [<c0358da8>]
[    2.638945] Function entered at [<c0358da8>] from [<423017cc>]
[    2.644767] Rebooting in 1 seconds..

Try in flash it with this FW, it has NSS enabled and it is quite stable

same issue :frowning:

U-Boot 2012.07 [local,local] (Sep 03 2015 - 17:33:28)

U-boot 2012.07 dni1 V0.4 for DNI HW ID: 29764958 NOR flash 0MB; NAND flash 128MB; RAM 512MB; 1st Radio 4x4; 2nd Radio 4x4; Cascade
smem ram ptable found: ver: 0 len: 5
DRAM:  491 MiB
NAND:  SF: Unsupported manufacturer 00
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
128 MiB
MMC:   
*** Warning - bad CRC, using default environment

PCI0 Link Intialized
PCI1 Link Intialized
In:    serial
Out:   serial
Err:   serial
 131072 bytes read: OK
MMC Device 0 not found
cdp: get part failed for 0:HLOS
Net:   MAC1 addr:b0:b9:8a:73:83:73
athrs17_reg_init: complete
athrs17_vlan_config ...done
S17c init  done
MAC2 addr:b0:b9:8a:73:83:72
eth0, eth1
Hit any key to stop autoboot:  2 \0x08\0x08\0x08 1 \0x08\0x08\0x08 0 

 Client starts...[Listening] for ADVERTISE...TTT
Retry count exceeded; boot the image as usual

 nmrp server is stopped or failed !

Loading from device 0: nand0 (offset 0x1480000)
Skipping bad block 0x01600000

** check kernel image **
   Verifying Checksum ... OK

** check rootfs image **
   Verifying Checksum ... OK
MMC Device 0 not found

Loading from nand0, offset 0x1480000
   Image Name:   ARM OpenWrt Linux-5.4.124
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2919759 Bytes = 2.8 MiB
   Load Address: 42208000
   Entry Point:  42208000
Skipping bad block 0x01600000
Automatic boot of image at addr 0x44000000 ...
   Image Name:   ARM OpenWrt Linux-5.4.124
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2919759 Bytes = 2.8 MiB
   Load Address: 42208000
   Entry Point:  42208000
   Verifying Checksum ... OK
   Loading Kernel Image ... OK
OK
mtdparts variable not set, see 'help mtdparts'
no partitions defined

defaults:
mtdids  : nand0=msm_nand
mtdparts: none
info: "mtdparts" not set
Using machid 0x136c from environment

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 5.4.124 (HTPC@localhost.localdomain) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r16164+22-1a8de9cbf9)) #0 SMP Fri Jun 11 22:32:29 2021
[    0.000000] CPU: ARMv7 Processor [512f04d0] revision 0 (ARMv7), cr=10c5787d
[    0.000000] CPU: div instructions available: patching division code
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, PIPT instruction cache
[    0.000000] OF: fdt: Machine model: Netgear Nighthawk X4S R7800
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] percpu: Embedded 15 pages/cpu s30220 r8192 d23028 u61440
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 121800
[    0.000000] Kernel command line: 
[    0.000000] Bootloader command line (ignored): console=ttyHSL1,115200n8
[    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes, linear)
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 474820K/491520K available (6252K kernel code, 197K rwdata, 1560K rodata, 1024K init, 233K bss, 16700K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[    0.000000] random: get_random_bytes called from start_kernel+0x340/0x4ec with crng_init=0
[    0.000000] clocksource: dg_timer: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 305801671480 ns
[    0.000007] sched_clock: 32 bits at 6MHz, resolution 160ns, wraps every 343597383600ns
[    0.000020] Switching to timer-based delay loop, resolution 160ns
[    0.000261] Calibrating delay loop (skipped), value calculated using timer frequency.. 12.50 BogoMIPS (lpj=62500)
[    0.000280] pid_max: default: 32768 minimum: 301
[    0.000477] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.000496] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.001547] CPU: Testing write buffer coherency: ok
[    0.002694] Setting up static identity map for 0x42300000 - 0x42300060
[    0.002872] rcu: Hierarchical SRCU implementation.
[    0.003367] smp: Bringing up secondary CPUs ...
[    0.005302] smp: Brought up 1 node, 2 CPUs
[    0.005319] SMP: Total of 2 processors activated (25.00 BogoMIPS).
[    0.005330] CPU: All CPU(s) started in SVC mode.
[    0.017064] VFP support v0.3: implementor 51 architecture 64 part 4d variant 2 rev 0
[    0.017216] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.017242] futex hash table entries: 512 (order: 3, 32768 bytes, linear)
[    0.017389] pinctrl core: initialized pinctrl subsystem
[    0.018523] NET: Registered protocol family 16
[    0.018815] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.020195] cpuidle: using governor ladder
[    0.020265] cpuidle: using governor menu
[    0.056090] usbcore: registered new interface driver usbfs
[    0.056169] usbcore: registered new interface driver hub
[    0.056235] usbcore: registered new device driver usb
[    0.056295] pps_core: LinuxPPS API ver. 1 registered
[    0.056308] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    0.056340] PTP clock support registered
[    0.057180] workqueue: max_active 576 requested for napi_workq is out of range, clamping between 1 and 512
[    0.058291] clocksource: Switched to clocksource dg_timer
[    0.059154] thermal_sys: Registered thermal governor 'step_wise'
[    0.061580] NET: Registered protocol family 2
[    0.061744] IP idents hash table entries: 8192 (order: 4, 65536 bytes, linear)
[    0.062765] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 6144 bytes, linear)
[    0.062808] TCP established hash table entries: 4096 (order: 2, 16384 bytes, linear)
[    0.062846] TCP bind hash table entries: 4096 (order: 3, 32768 bytes, linear)
[    0.062899] TCP: Hash tables configured (established 4096 bind 4096)
[    0.063001] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.063036] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.063281] NET: Registered protocol family 1
[    0.063334] PCI: CLS 0 bytes, default 64
[    0.064653] workingset: timestamp_bits=14 max_order=17 bucket_order=3
[    0.071559] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.071573] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.111875] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda not found, using dummy regulator
[    0.112021] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda_phy not found, using dummy regulator
[    0.112135] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda_refclk not found, using dummy regulator
[    0.112406] qcom-pcie 1b500000.pci: host bridge /soc/pci@1b500000 ranges:
[    0.112474] qcom-pcie 1b500000.pci:    IO 0x0fe00000..0x0fefffff -> 0x0fe00000
[    0.112514] qcom-pcie 1b500000.pci:   MEM 0x08000000..0x0fdfffff -> 0x08000000
[    0.333997] qcom-pcie 1b500000.pci: Link up
[    0.334165] qcom-pcie 1b500000.pci: PCI host bridge to bus 0000:00
[    0.334188] pci_bus 0000:00: root bus resource [bus 00-ff]
[    0.334209] pci_bus 0000:00: root bus resource [io  0x0000-0xfffff] (bus address [0xfe00000-0xfefffff])
[    0.334225] pci_bus 0000:00: root bus resource [mem 0x08000000-0x0fdfffff]
[    0.334290] pci 0000:00:00.0: [17cb:0101] type 01 class 0xff0000
[    0.334464] pci 0000:00:00.0: supports D1
[    0.334481] pci 0000:00:00.0: PME# supported from D0 D1 D3hot
[    0.338838] PCI: bus0: Fast back to back transfers disabled
[    0.339194] pci 0000:01:00.0: [168c:0046] type 00 class 0x028000
[    0.339550] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x001fffff 64bit]
[    0.340695] pci 0000:01:00.0: PME# supported from D0 D3hot D3cold
[    0.345143] PCI: bus1: Fast back to back transfers disabled
[    0.345229] pci 0000:00:00.0: BAR 8: assigned [mem 0x08000000-0x081fffff]
[    0.345252] pci 0000:01:00.0: BAR 0: assigned [mem 0x08000000-0x081fffff 64bit]
[    0.345380] pci 0000:00:00.0: PCI bridge to [bus 01-ff]
[    0.345404] pci 0000:00:00.0:   bridge window [mem 0x08000000-0x081fffff]
[    0.346147] pcieport 0000:00:00.0: AER: enabled with IRQ 40
[    0.346734] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda not found, using dummy regulator
[    0.346862] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda_phy not found, using dummy regulator
[    0.346993] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda_refclk not found, using dummy regulator
[    0.347247] qcom-pcie 1b700000.pci: host bridge /soc/pci@1b700000 ranges:
[    0.347311] qcom-pcie 1b700000.pci:    IO 0x31e00000..0x31efffff -> 0x31e00000
[    0.347344] qcom-pcie 1b700000.pci:   MEM 0x2e000000..0x31dfffff -> 0x2e000000
[    0.575667] qcom-pcie 1b700000.pci: Link up
[    0.575824] qcom-pcie 1b700000.pci: PCI host bridge to bus 0001:00
[    0.575848] pci_bus 0001:00: root bus resource [bus 00-ff]
[    0.575864] pci_bus 0001:00: root bus resource [mem 0x2e000000-0x31dfffff]
[    0.575923] pci 0001:00:00.0: [17cb:0101] type 01 class 0xff0000
[    0.576070] pci 0001:00:00.0: supports D1
[    0.576085] pci 0001:00:00.0: PME# supported from D0 D1 D3hot
[    0.580383] PCI: bus0: Fast back to back transfers disabled
[    0.580732] pci 0001:01:00.0: [168c:0046] type 00 class 0x028000
[    0.581108] pci 0001:01:00.0: reg 0x10: [mem 0x00000000-0x001fffff 64bit]
[    0.582341] pci 0001:01:00.0: PME# supported from D0 D3hot D3cold
[    0.582640] pci 0001:01:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s x1 link at 0001:00:00.0 (capable of 4.000 Gb/s with 5 GT/s x1 link)
[    0.586853] PCI: bus1: Fast back to back transfers disabled
[    0.586927] pci 0001:00:00.0: BAR 8: assigned [mem 0x2e000000-0x2e1fffff]
[    0.586951] pci 0001:01:00.0: BAR 0: assigned [mem 0x2e000000-0x2e1fffff 64bit]
[    0.587084] pci 0001:00:00.0: PCI bridge to [bus 01-ff]
[    0.587106] pci 0001:00:00.0:   bridge window [mem 0x2e000000-0x2e1fffff]
[    0.587945] pcieport 0001:00:00.0: AER: enabled with IRQ 42
[    0.590806] L2 @ QSB rate. Forcing new rate.
[    0.591040] L2 @ 384000 KHz
[    0.591225] CPU0 @ 800000 KHz
[    0.591239] CPU1 @ QSB rate. Forcing new rate.
[    0.591371] CPU1 @ 384000 KHz
[    0.595183] gsbi 16300000.gsbi: GSBI port protocol: 6 crci: 0
[    0.597487] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    0.598329] msm_serial 16340000.serial: msm_serial: detected port #0
[    0.598384] msm_serial 16340000.serial: uartclk = 7372800
[    0.598458] 16340000.serial: ttyMSM0 at MMIO 0x16340000 (irq = 43, base_baud = 460800) is a MSM
[    0.598498] msm_serial: console setup on port #0
[    1.382899] printk: console [ttyMSM0] enabled
[    1.387880] msm_serial: driver initialized
[    1.397185] loop: module loaded
[    1.398893] nand: device found, Manufacturer ID: 0x2c, Chip ID: 0xa1
[    1.399137] nand: Micron MT29F1G08ABBEAH4
[    1.405733] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    1.409819] 8 fixed-partitions partitions found on MTD device qcom_nand.0
[    1.417107] Creating 8 MTD partitions on "qcom_nand.0":
[    1.424060] 0x000000000000-0x000000c80000 : "qcadata"
[    1.434224] random: fast init done
[    1.450399] 0x000000c80000-0x000001180000 : "APPSBL"
[    1.459486] 0x000001180000-0x000001200000 : "APPSBLENV"
[    1.461238] 0x000001200000-0x000001340000 : "art"
[    1.466448] 0x000001340000-0x000001480000 : "artbak"
[    1.471451] 0x000001480000-0x000001880000 : "kernel"
[    1.480820] 0x000001880000-0x000007900000 : "ubi"
[    1.637212] 0x000007900000-0x000008000000 : "reserve"
[    1.651230] libphy: ipq8064_mdio_bus: probed
[    1.666401] switch0: Atheros AR8337 rev. 2 switch registered on 37000000.mdio-mii
[    2.514957] ar8327: qca,phy-rgmii-en is not specified
[    2.515553] libphy: Fixed MDIO Bus: probed
[    2.519639] i2c /dev entries driver
[    2.525380] cpuidle: enable-method property 'qcom,kpss-acc-v1' found operations
[    2.526487] cpuidle: enable-method property 'qcom,kpss-acc-v1' found operations
[    2.534379] sdhci: Secure Digital Host Controller Interface driver
[    2.541034] sdhci: Copyright(c) Pierre Ossman
[    2.547197] sdhci-pltfm: SDHCI platform and OF driver helper
[    2.554090] NET: Registered protocol family 10
[    2.558687] Segment Routing with IPv6
[    2.561697] NET: Registered protocol family 17
[    2.565440] Bridge firewalling registered
[    2.570002] 8021q: 802.1Q VLAN Support v1.8
[    2.573802] Registering SWP/SWPB emulation handler
[    2.605092] qcom_rpm 108000.rpm: RPM firmware 3.0.16777364
[    2.618853] s1a: Bringing 0uV into 1050000-1050000uV
[    2.619125] s1a: supplied by regulator-dummy
[    2.623042] s1b: Bringing 0uV into 1050000-1050000uV
[    2.627367] s1b: supplied by regulator-dummy
[    2.632311] s2a: Bringing 0uV into 775000-775000uV
[    2.636545] s2a: supplied by regulator-dummy
[    2.641157] s2b: Bringing 0uV into 775000-775000uV
[    2.645589] s2b: supplied by regulator-dummy
[    2.660108] UBI error: no valid UBI magic found ins\0xe9[    2.665046] /dev/root: Can't open blockdev
[    2.665066] VFS: Cannot open root device "(null)" or unknown-block(0,0): error -6
[    2.668024] Please append a correct "root=" boot option; here are the available partitions:
[    2.675660] 1f00           12800 mtdblock0 
[    2.675662]  (driver?)
[    2.687901] 1f01            5120 mtdblock1 
[    2.687904]  (driver?)
[    2.694410] 1f02             512 mtdblock2 
[    2.694413]  (driver?)
[    2.700980] 1f03            1280 mtdblock3 
[    2.700982]  (driver?)
[    2.707432] 1f04            1280 mtdblock4 
[    2.707434]  (driver?)
[    2.713941] 1f05            4096 mtdblock5 
[    2.713944]  (driver?)
[    2.720505] 1f06           98816 mtdblock6 
[    2.720508]  (driver?)
[    2.726961] 1f07            7168 mtdblock7 
[    2.726964]  (driver?)
[    2.733473] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
[    2.735924] CPU1: stopping
[    2.744166] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.4.124 #0
[    2.746849] Hardware name: Generic DT based system
[    2.753041] [<c030f954>] (unwind_backtrace) from [<c030b968>] (show_stack+0x14/0x20)
[    2.757642] [<c030b968>] (show_stack) from [<c08fdb78>] (dump_stack+0x94/0xa8)
[    2.765534] [<c08fdb78>] (dump_stack) from [<c030eb80>] (handle_IPI+0x184/0x1b8)
[    2.772570] [<c030eb80>] (handle_IPI) from [<c05dd0c8>] (gic_handle_irq+0xb4/0xb8)
[    2.780117] [<c05dd0c8>] (gic_handle_irq) from [<c0301a8c>] (__irq_svc+0x6c/0x90)
[    2.787482] Exception stack(0xdd46bf18 to 0xdd46bf60)
[    2.795036] bf00:                                                       00000000 00000000
[    2.800095] bf20: 1ce5d000 dd99ea80 dd7f7400 00000000 dd99de30 00000000 00000000 00000000
[    2.808256] bf40: a312b440 a2afd5a0 00000015 dd46bf68 c072e760 c072e764 80000013 ffffffff
[    2.816408] [<c0301a8c>] (__irq_svc) from [<c072e764>] (cpuidle_enter_state+0x94/0x498)
[    2.824560] [<c072e764>] (cpuidle_enter_state) from [<c072ebac>] (cpuidle_enter+0x30/0x4c)
[    2.832370] [<c072ebac>] (cpuidle_enter) from [<c034ad4c>] (do_idle+0x1d8/0x240)
[    2.840702] [<c034ad4c>] (do_idle) from [<c034b05c>] (cpu_startup_entry+0x1c/0x20)
[    2.848253] [<c034b05c>] (cpu_startup_entry) from [<423024cc>] (0x423024cc)
[    2.855626] Rebooting in 1 seconds..

Sure. "bad block":

And one more suspicious line in the second log:

You have a bad block in the kernel area (of the kernel padding area) of the flash chip, and that throws error with the OpenWrt factory image, as the rootfs starts 128 kB later than expected.

Netgear OEM firmware has a bad block management logic that handles the offset caused by the bad block, but OpenWrt does not.

Your best bet is to boot an initramfs image and use sysupgrade from it.

4 Likes

@hnyman -- thanks a lot! this worked. I followed the procedure with small modification found in this post:

I loaded 19.07 initramfs, booted from it, and then sysupgrade -n. later I was able to flash version 21.02 via web interface and it also worked.

I have a few questions though.

  1. is my understanding right that once the procedure completed with success further openwrt upgrades can be done via web interface without issues? or maybe this is not 100% reliable procedure?

  2. if this procedure may not work in future what would be more reliable approach?

  3. with original procedure the booting stopped at "Starting kernel..." message. then I followed another advice to use tftpboot 50000000 and it worked. how to figure out this "magic number" 50000000? is it arbitrary? or does it depend on anything?

thank you
geos

Yes,, sysupgrade should continue to work ok.

Sysupgrade uses a split image, where kernel and rootfs are flashed separately, to defined locations, so a bad block in kernel does not move rootfs.

(Factory image is an unified image, so a bad block(s) in kernel area causes rootfs to start from 1+ blocks later, causing the errors)

So far we have not figured a better approach than the "initramfs as a intermediate step".

1 Like

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.