Oh, I just thought the firmware version would show "Stable" because the link I clicked on the Redmi AC2100 Openwrt page says ", Unofficial stable build". Didn't know Scp07's were also snapshots.
Anyway, thanks again for all the help!
Hello,
I have tried to flash AC2100 with the Web Exploit
Now my router is bricked.
I use FTDI to see log, and I 'm unable to stop the random reboot with tpl command in "TPL - the bricker" software
Have the same issue with Putty
===================================================================
MT7621 stage1 code Nov 5 2019 00:23:11 (ASIC)
CPU=50000000 HZ BUS=16666666 HZ
==================================================================
RALINK_GPIOMODE = ad428
GPIO0~31 DIR = 40
GPIO0~31 DATA = fff41517
Set gpio_4,3 direction to input
Set gpio_10,6 direction to output
GPIO0~31 DIR = 440
GPIO0~31 DATA = fff41517
Set gpio_6 output value to 0
Set gpio_10 output value to 1
GPIO0~31 DATA = fff41517
Change MPLL source from XTAL to CR...
do MEMPLL setting..
MEMPLL Config : 0x11100000
3PLL mode + External loopback
=== XTAL-40Mhz ===dram_speed=:1200
=== DDR-1200Mhz ===
PLL2 FB_DL: 0xc, 1/0 = 609/415 31000000
PLL3 FB_DL: 0xf, 1/0 = 609/415 3D000000
PLL4 FB_DL: 0x14, 1/0 = 608/416 51000000
do DDR setting..[00320381]
Apply DDR3 Setting...(use customer AC)
0 8 16 24 32 40 48 56 64 72 80 88 96 104 112 120
--------------------------------------------------------------------------------
0000:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0001:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0002:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0003:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0004:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0005:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0006:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0007:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0008:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0009:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
000A:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
000B:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
000C:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
000D:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1
000E:| 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1
000F:| 0 0 0 1 1 1 1 1 1 1 1 1 1 0 0 0
0010:| 1 1 1 1 1 1 1 1 0 0 0 0 0 0 0 0
0011:| 1 1 1 0 0 0 0 0 0 0 0 0 0 0 0 0
0012:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0013:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0014:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0015:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0016:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0017:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0018:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0019:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001A:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001B:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001C:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001D:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001E:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001F:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
DRAMC_DQSCTL1[0e0]=13000000
DRAMC_DQSGCTL[124]=80000033
rank 0 coarse = 15
rank 0 fine = 64
B:| 0 0 0 0 0 0 0 0 1 1 1 0 0 0 0 0
opt_dle value:9
DRAMC_DDR2CTL[07c]=C287221D
DRAMC_PADCTL4[0e4]=000022B3
DRAMC_DQIDLY1[210]=0A090809
DRAMC_DQIDLY2[214]=07080A06
DRAMC_DQIDLY3[218]=0B080805
DRAMC_DQIDLY4[21c]=09070B08
DRAMC_R0DELDLY[018]=00001F1E
==================================================================
RX DQS perbit delay software calibration
==================================================================
1.0-15 bit dq delay value
==================================================================
bit| 0 1 2 3 4 5 6 7 8 9
--------------------------------------
0 | 9 7 8 10 6 9 8 7 4 7
10 | 7 9 7 8 7 7
--------------------------------------
==================================================================
2.dqs window
x=pass dqs delay value (min~max)center
y=0-7bit DQ of every group
input delay:DQS0 =30 DQS1 = 31
==================================================================
bit DQS0 bit DQS1
0 (1~60)30 8 (1~59)30
1 (1~57)29 9 (2~58)30
2 (1~57)29 10 (1~59)30
3 (1~59)30 11 (1~58)29
4 (1~59)30 12 (1~59)30
5 (1~57)29 13 (1~55)28
6 (1~59)30 14 (1~61)31
7 (1~60)30 15 (1~57)29
==================================================================
3.dq delay value last
==================================================================
bit| 0 1 2 3 4 5 6 7 8 9
--------------------------------------
0 | 9 8 9 10 6 10 8 7 5 8
10 | 8 11 8 11 7 9
==================================================================
==================================================================
TX perbyte calibration
==================================================================
DQS loop = 15, cmp_err_1 = ffff2000
dqs_perbyte_dly.last_dqsdly_pass[0]=15, finish count=1
DQS loop = 14, cmp_err_1 = ffff0000
dqs_perbyte_dly.last_dqsdly_pass[1]=14, finish count=2
DQ loop=15, cmp_err_1 = ffff0000
dqs_perbyte_dly.last_dqdly_pass[0]=15, finish count=1
dqs_perbyte_dly.last_dqdly_pass[1]=15, finish count=2
byte:0, (DQS,DQ)=(8,8)
byte:1, (DQS,DQ)=(8,8)
DRAMC_DQODLY1[200]=88888888
DRAMC_DQODLY2[204]=88888888
20,data:88
[EMI] DRAMC calibration passed
===================================================================
MT7621 stage1 code done
CPU=50000000 HZ BUS=16666666 HZ
===================================================================
U-Boot 1.1.3 (Sep 21 2020 - 11:47:48)
Board: Ralink APSoC DRAM: 128 MB
Power on memory test. Memory size= 128 MB...OK!
relocate_code Pointer at: 87fa4000
Config XHCI 40M PLL
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 87fe0150
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [98 F1 80 15 F2]
Device found in MTK table, ID: 98f1, EXT_ID: 8015f2
Support this Device in MTK table! 98f1
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64, mtd->erasesize=131072 devinfo.iowidth=8
..============================================
Ralink UBoot Version: 5.0.0.0
--------------------------------------------
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection
DRAM_TYPE: DDR3
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: NAND Flash
Date:Sep 21 2020 Time:11:47:48
============================================
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768
##### The CPU freq = 880 MHZ ####
estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL
Please choose the operation:
1: Load system code to SDRAM via TFTP.
2: Load system code then write to Flash via TFTP.
3: Boot system code via Flash (default).
4: Entr boot command line interface.
7: Load Boot Loader code then write to Flash via Serial.
9: Load Boot Loader code then write to Flash via TFTP.
Booting System 2
..ranand_erase: start:80000, len:20000
..Done!
done
3: System Boot system code via Flash.
## Booting image at bc600000 ...
Image Name: MIPS OpenWrt Linux-5.4.109
Image Type: MIPS Linux Kernel Image (uncompressed)
Data Size: 2508663 Bytes = 2.4 MB
Load Address: 80001000
Entry Point: 80001000
........................
............... Verifying Checksum ... OK
OK
commandline uart_en=1 factory_mode=0
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 128
Starting kernel ...
OpenWrt kernel loader for MIPS based SoC
Copyright (C) 2011 Gabor Juhos <juhosg@openwrt.org>
Decompressing kernel... done!
Starting kernel at 80001000...
[ 0.000000] Linux version 5.4.109 (builder@buildhost) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r16435-f2c8c62d98)) #0 SMP Wed Apr 7 12:46:46 2021
[ 0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[ 0.000000] printk: bootconsole [early0] enabled
[ 0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[ 0.000000] MIPS: machine is Xiaomi Redmi Router AC2100
[ 0.000000] Initrd not found or empty - disabling initrd
[ 0.000000] VPE topology {2,2} total 4
[ 0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[ 0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[ 0.000000] Zone ranges:
[ 0.000000] Normal [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] HighMem empty
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] percpu: Embedded 14 pages/cpu s26768 r8192 d22384 u57344
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 32480
[ 0.000000] Kernel command line: console=ttyS0,115200n8 rootfstype=squashfs,jffs2
[ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes, linear)
[ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes, linear)
[ 0.000000] Writing ErrCtl register=00061b10
[ 0.000000] Readback ErrCtl register=00061b10
[ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[ 0.000000] Memory: 120456K/131072K available (6059K kernel code, 207K rwdata, 1292K rodata, 1260K init, 238K bss, 10616K reserved, 0K cma-reserved, 0K highmem)
[ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[ 0.000000] rcu: Hierarchical RCU implementation.
[ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies.
[ 0.000000] NR_IRQS: 256
[ 0.000000] random: get_random_bytes called from start_kernel+0x31c/0x534 with crng_init=0
[ 0.000000] CPU Clock: 880MHz
[ 0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[ 0.000008] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[ 0.007802] Calibrating delay loop... 583.68 BogoMIPS (lpj=1167360)
[ 0.041999] pid_max: default: 32768 minimum: 301
[ 0.046768] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[ 0.053995] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[ 0.064411] rcu: Hierarchical SRCU implementation.
[ 0.069844] smp: Bringing up secondary CPUs ...
[ 2.383734] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[ 2.383744] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[ 2.383756] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[ 2.383856] CPU1 revision is: 0001992f (MIPS 1004Kc)
[ 0.102607] Synchronize counters for CPU 1: done.
[ 2.445030] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[ 2.445038] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[ 2.445046] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[ 2.445105] CPU2 revision is: 0001992f (MIPS 1004Kc)
[ 0.167304] Synchronize counters for CPU 2: done.
[ 2.506425] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[ 2.506433] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[ 2.506441] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[ 2.506501] CPU3 revision is: 0001992f (MIPS 1004Kc)
[ 0.225168] Synchronize counters for CPU 3: done.
[ 0.255042] smp: Brought up 1 node, 4 CPUs
[ 0.263472] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
[ 0.273152] futex hash table entries: 1024 (order: 3, 32768 bytes, linear)
[ 0.280174] pinctrl core: initialized pinctrl subsystem
[ 0.286993] NET: Registered protocol family 16
[ 0.318702] workqueue: max_active 576 requested for napi_workq is out of range, clamping between 1 and 512
[ 0.329986] clocksource: Switched to clocksource GIC
[ 0.336584] NET: Registered protocol family 2
[ 0.342139] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 6144 bytes, linear)
[ 0.350501] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear)
[ 0.358104] TCP bind hash table entries: 1024 (order: 1, 8192 bytes, linear)
[ 0.365074] TCP: Hash tables configured (established 1024 bind 1024)
[ 0.371528] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[ 0.378017] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[ 0.385208] NET: Registered protocol family 1
[ 0.389528] PCI: CLS 0 bytes, default 32
[ 0.481951] 4 CPUs re-calibrate udelay(lpj = 1163264)
[ 0.488482] workingset: timestamp_bits=14 max_order=15 bucket_order=1
[ 0.495087] random: fast init done
[ 0.509899] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.515674] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.527156] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[ 0.536362] mt7621_gpio 1e000600.gpio: registering 32 gpios
[ 0.542282] mt7621_gpio 1e000600.gpio: registering 32 gpios
[ 0.548097] mt7621_gpio 1e000600.gpio: registering 32 gpios
[ 0.554431] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[ 0.564433] printk: console [ttyS0] disabled
[ 0.568731] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 19, base_baud = 3125000) is a 16550A
[ 0.577716] printk: console [ttyS0] enabled
[ 0.577716] printk: console [ttyS0] enabled
[ 0.585995] printk: bootconsole [early0] disabled
[ 0.585995] printk: bootconsole [early0] disabled
[ 0.597748] mt7621-nand 1e003000.nand: Using programmed access timing: 31c07388
[ 0.605179] nand: device found, Manufacturer ID: 0x98, Chip ID: 0xf1
[ 0.611524] nand: Toshiba NAND 128MiB 3,3V 8-bit
[ 0.616142] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[ 0.623701] mt7621-nand 1e003000.nand: ECC strength adjusted to 4 bits
[ 0.630230] nand: WARNING: mt7621-nand: the ECC used on your system is too weak compared to the one required by the NAND chip
[ 0.641515] mt7621-nand 1e003000.nand: Using programmed access timing: 31c07388
[ 0.648814] Scanning device for bad blocks
[ 0.671516] mt7621-nand 1e003000.nand: Uncorrectable ECC error at page 896.0
[ 0.679869] mt7621-nand 1e003000.nand: Uncorrectable ECC error at page 960.0
[ 1.674718] Bad eraseblock 768 at 0x000006000000
[ 2.013801] 10 fixed-partitions partitions found on MTD device mt7621-nand
[ 2.020665] Creating 10 MTD partitions on "mt7621-nand":
[ 2.025983] 0x000000000000-0x000000080000 : "Bootloader"
[ 2.032763] 0x000000080000-0x0000000c0000 : "Config"
[ 2.039171] 0x0000000c0000-0x000000100000 : "Bdata"
[ 2.045319] 0x000000100000-0x000000140000 : "factory"
[ 2.051630] 0x000000140000-0x000000180000 : "crash"
[ 2.058006] 0x000000180000-0x0000001c0000 : "crash_syslog"
[ 2.064743] 0x0000001c0000-0x000000200000 : "reserved0"
[ 2.071425] 0x000000200000-0x000000600000 : "kernel_stock"
[ 2.078295] 0x000000600000-0x000000a00000 : "kernel"
[ 2.084649] 0x000000a00000-0x000007f80000 : "ubi"
[ 2.092595] libphy: Fixed MDIO Bus: probed
[ 2.124382] libphy: mdio: probed
[ 2.127909] mt7530 mdio-bus:1f: MT7530 adapts as multi-chip module
[ 2.138205] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 21
[ 2.148693] mt7621-pci 1e140000.pcie: Parsing DT failed
[ 2.156676] NET: Registered protocol family 10
[ 2.162624] Segment Routing with IPv6
[ 2.166409] NET: Registered protocol family 17
[ 2.170958] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[ 2.184139] 8021q: 802.1Q VLAN Support v1.8
[ 2.190417] mt7530 mdio-bus:1f: MT7530 adapts as multi-chip module
[ 2.209136] libphy: dsa slave smi: probed
[ 2.213609] mt7530 mdio-bus:1f wan (uninitialized): PHY [dsa-0.0:00] driver [Generic PHY]
[ 2.223521] mt7530 mdio-bus:1f lan1 (uninitialized): PHY [dsa-0.0:02] driver [Generic PHY]
[ 2.233217] mt7530 mdio-bus:1f lan2 (uninitialized): PHY [dsa-0.0:03] driver [Generic PHY]
[ 2.243008] mt7530 mdio-bus:1f lan3 (uninitialized): PHY [dsa-0.0:04] driver [Generic PHY]
[ 2.252805] mt7530 mdio-bus:1f: configuring for fixed/rgmii link mode
[ 2.264029] DSA: tree 0 setup
[ 2.267346] rt2880-pinmux pinctrl: pcie is already enabled
[ 2.272840] mt7621-pci 1e140000.pcie: Error applying setting, reverse things back
[ 2.280469] mt7621-pci-phy 1e149000.pcie-phy: PHY for 0xbe149000 (dual port = 1)
[ 2.288054] mt7621-pci-phy 1e14a000.pcie-phy: PHY for 0xbe14a000 (dual port = 0)
[ 2.395294] mt7621-pci-phy 1e149000.pcie-phy: Xtal is 40MHz
[ 2.400875] mt7621-pci-phy 1e14a000.pcie-phy: Xtal is 40MHz
[ 2.506210] mt7621-pci 1e140000.pcie: pcie2 no card, disable it (RST & CLK)
[ 2.513160] mt7621-pci 1e140000.pcie: PCIE0 enabled
[ 2.518035] mt7621-pci 1e140000.pcie: PCIE1 enabled
[ 2.522919] mt7621-pci 1e140000.pcie: PCI coherence region base: 0x60000000, mask/settings: 0xf0000002
[ 2.532395] mt7621-pci 1e140000.pcie: PCI host bridge to bus 0000:00
[ 2.538771] pci_bus 0000:00: root bus resource [io 0x1e160000-0x1e16ffff]
[ 2.545643] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[ 2.552514] pci_bus 0000:00: root bus resource [bus 00-ff]
[ 2.558039] pci 0000:00:00.0: [0e8d:0801] type 01 class 0x060400
[ 2.564076] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x7fffffff]
[ 2.570346] pci 0000:00:00.0: reg 0x14: [mem 0x60400000-0x6040ffff]
[ 2.576677] pci 0000:00:00.0: supports D1
[ 2.580691] pci 0000:00:00.0: PME# supported from D0 D1 D3hot
[ 2.586839] pci 0000:00:01.0: [0e8d:0801] type 01 class 0x060400
[ 2.592882] pci 0000:00:01.0: reg 0x10: [mem 0x00000000-0x7fffffff]
[ 2.599153] pci 0000:00:01.0: reg 0x14: [mem 0x60410000-0x6041ffff]
[ 2.605491] pci 0000:00:01.0: supports D1
[ 2.609505] pci 0000:00:01.0: PME# supported from D0 D1 D3hot
[ 2.616854] pci 0000:01:00.0: [14c3:7615] type 00 class 0x000280
[ 2.622933] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit]
[ 2.629884] pci 0000:01:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s x1 link at 0000:00:00.0 (capable of 4.000 Gb/s with 5 GT/s x1 link)
[ 2.645086] pci 0000:00:00.0: PCI bridge to [bus 01-ff]
[ 2.650337] pci 0000:00:00.0: bridge window [io 0x0000-0x0fff]
[ 2.656430] pci 0000:00:00.0: bridge window [mem 0x60000000-0x600fffff]
[ 2.663215] pci 0000:00:00.0: bridge window [mem 0x60100000-0x601fffff pref]
[ 2.670437] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01
[ 2.677261] pci 0000:02:00.0: [14c3:7603] type 00 class 0x028000
[ 2.683323] pci 0000:02:00.0: reg 0x10: [mem 0x00000000-0x000fffff]
[ 2.689724] pci 0000:02:00.0: PME# supported from D0 D3hot D3cold
[ 2.697244] pci 0000:00:01.0: PCI bridge to [bus 02-ff]
[ 2.702492] pci 0000:00:01.0: bridge window [io 0x0000-0x0fff]
[ 2.708587] pci 0000:00:01.0: bridge window [mem 0x60200000-0x602fffff]
[ 2.715381] pci 0000:00:01.0: bridge window [mem 0x60300000-0x603fffff pref]
[ 2.722601] pci_bus 0000:02: busn_res: [bus 02-ff] end is updated to 02
[ 2.729268] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[ 2.735880] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[ 2.742841] pci 0000:00:01.0: BAR 0: no space for [mem size 0x80000000]
[ 2.749452] pci 0000:00:01.0: BAR 0: failed to assign [mem size 0x80000000]
[ 2.756410] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[ 2.763200] pci 0000:00:00.0: BAR 9: assigned [mem 0x60100000-0x601fffff pref]
[ 2.770421] pci 0000:00:01.0: BAR 8: assigned [mem 0x60200000-0x602fffff]
[ 2.777209] pci 0000:00:01.0: BAR 9: assigned [mem 0x60300000-0x603fffff pref]
[ 2.784428] pci 0000:00:00.0: BAR 1: assigned [mem 0x60400000-0x6040ffff]
[ 2.791221] pci 0000:00:01.0: BAR 1: assigned [mem 0x60410000-0x6041ffff]
[ 2.798013] pci 0000:00:00.0: BAR 7: assigned [io 0x1e160000-0x1e160fff]
[ 2.804800] pci 0000:00:01.0: BAR 7: assigned [io 0x1e161000-0x1e161fff]
[ 2.811598] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit]
[ 2.818915] pci 0000:00:00.0: PCI bridge to [bus 01]
[ 2.823886] pci 0000:00:00.0: bridge window [io 0x1e160000-0x1e160fff]
[ 2.830670] pci 0000:00:00.0: bridge window [mem 0x60000000-0x600fffff]
[ 2.837455] pci 0000:00:00.0: bridge window [mem 0x60100000-0x601fffff pref]
[ 2.844685] pci 0000:02:00.0: BAR 0: assigned [mem 0x60200000-0x602fffff]
[ 2.851474] pci 0000:00:01.0: PCI bridge to [bus 02]
[ 2.856444
] pci 0000:00:01.0: bridge window [io 0x1e161000-0x1e161fff]
[ 2.863228] pci 0000:00:01.0: bridge window [mem 0x60200000-0x602fffff]
[ 2.870014] pci 0000:00:01.0: bridge window [mem 0x60300000-0x603fffff pref]
[ 2.878642] UBI: auto-attach mtd9
[ 2.882010] ubi0: attaching mtd9
[ 2.886799] ubi0 error: ubi_attach: bad image sequence number 1236348498 in PEB 1, expected 1617799606
[ 2.896091] Erase counter header dump:
[ 2.899845] magic 0x55424923
[ 2.903592] version 1
[ 2.906566] ec 0
[ 2.909516] vid_hdr_offset 2048
[ 2.912743] data_offset 4096
[ 2.915983] image_seq 1236348498
[ 2.919731] hdr_crc 0xdca128f
[ 2.923395] erase counter header hexdump:
[ 2.927446] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd9, error -22
[ 2.934614] UBI error: cannot attach mtd9
[ 2.934828] mt7530 mdio-bus:1f: Link is Up - 1Gbps/Full - flow control off
[ 2.938721] hctosys: unable to open rtc device (rtc0)
[ 2.951431] /dev/root: Can't open blockdev
[ 2.955539] VFS: Cannot open root device "(null)" or unknown-block(0,0): error -6
[ 2.963004] Please append a correct "root=" boot option; here are the available partitions:
[ 2.971342] 1f00 512 mtdblock0
[ 2.971347] (driver?)
[ 2.977865] 1f01 256 mtdblock1
[ 2.977868] (driver?)
[ 2.984388] 1f02 256 mtdblock2
[ 2.984392] (driver?)
[ 2.990928] 1f03 256 mtdblock3
[ 2.990931] (driver?)
[ 2.997448] 1f04 256 mtdblock4
[ 2.997451] (driver?)
[ 3.003979] 1f05 256 mtdblock5
[ 3.003982] (driver?)
[ 3.010511] 1f06 256 mtdblock6
[ 3.010515] (driver?)
[ 3.017031] 1f07 4096 mtdblock7
[ 3.017035] (driver?)
[ 3.023563] 1f08 4096 mtdblock8
[ 3.023566] (driver?)
[ 3.030095] 1f09 120320 mtdblock9
[ 3.030098] (driver?)
[ 3.036615] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
[ 3.044873] Rebooting in 1 seconds..
Thanks in advance
Hi guys,
Someone is having problems with upload speed? (I tested using both, scp07 and snapshot from master trunk). The download is around 330 Mbits/sec and the upload is just 22 Mbits/sec. I tested agaisnt a Iperf3 server with gigabit connection (using 5Ghz AC)
Edit: Seems that using 80 Mhz or 160 Mhz channel width cause upload speed problems (download speed is ok). If I set 20 or 40 Mhz width it works fine (around 265/265 Mbps upload-download)
Anyone can check?
Hello all,
I'm currently running the latest unofficial stable release (19.07.7) from scp07 and on the whole it works really well, wi-fi is really zippy however I've noticed that wired ethernet connections are really slow. I've got a link speed of 1000Mbps however when I run a speed test I get a quarter of the speed I get over a WiFi connection.
I also ran iperf3 over both wireless and wi-fi and I had a similar result. The wireless connection was giving me around 200Mbps but the Ethernet connection was giving me around 45Mpbs.
Has anyone else faced similar issues?
i think the ethernet port drop to 100Mbps, if you only got 45Mbps
Hello! I got a new toy to you. I am working several days to make a build based on OpenWrt (kernel 5.4.110) and the MTK propietary drivers for wireless.
It works really well, even as repeater mode, with very good speeds.
Try it and tell me.
Is based on this github code https://github.com/coolsnowwolf/lede, but with some moddifications I made:
Version Mod 1.2
- Improved behavior for handling wifi interfaces
- Added a workaround to keep the iface state (up/down) for every wireless iface and survive to a reboot (need testing)
- Changed the behavior of the STA mode and some fixes
- Some improvements in MTK control panel.
- Added a feature to create the bridges in the MTK Control Panel (for testing prouposes)
- Added some testing buttons at bottom of MTK Control Panel(All bridged, run wifi fix, restart network).
Version Mod 1.1
- Added Xiaomi MI Router AC2100 builds
- Added luci-app-adblock
- Fixed auto-start of iperf3.
- Fixed NTP servers (now should appear in clean install)
Version Mod 1.0
- MTK Wifi control panel translated to english (initially is all in chinnese)
- LuCi UI is available in english, spanish and chinnese
- Remove bloatware
- Added htop, iperf3 (autostart as server) and nano.
- Fixed a bug that don't keep Wifi settings after a reboot in some cases.
- Fixed some parts of the WiFi handling in luci-app-mtwifi and lua.
- Some improvements here and there.
- Based on Kernel 5.4.110 (OpenWrt SNAPSHOT r3150-5dcbd82a5 / LuCI Master (git-21.096.35788-b200c7b))
Defaults:
- IP: 192.168.1.1
- User/Pass: root/root
- Default Lang: English
- WiFi 2.4 Mhz: MTK_2G (pass: 876543210)
- WiFi 5 Mhz: MTK_5G (pass: 876543210)
- IMPORTANT: Maybe you need to RELOAD both wireless drivers, at least the first time you load this firmware to make it working.
Download
Redmi AC2100 (white router with antennas) & Xiaomi AC2100 (black cilinder):
6 Likes
Only for Xiaomi Router?
or is compatible with the Redmi one?
you could try x-wrt with MTK propietary driver.x-wrt support wifi hardware nat(natflow is needed).
https://github.com/ptpt52/natflow https://github.com/x-wrt/x-wrt
wireless scan patch
https://github.com/coolsnowwolf/lede/blob/master/target/linux/generic/hack-5.4/998-add-ndo-do-ioctl.patch
Is for Redmi AC2100 only. Maybe later could add Xiaomi AC2100.
Hi friend, try this one: New Xiaomi Router AC2100 - #1256 by Cjcr
Should work better than the other one we tried.
1 Like
I added builds for Xiaomi MI Router AC2100 (black) and I made a new build with some fixes.
Hello,
Thanks for the build. Works great. 
However one big issue,
Need to RELOAD both wireless drivers, and start APs, by connecting via ethernet every time it boots/reboots.
Any suggestions/fixes would be of great help!!
1 Like
possible workaround, add the activities to the local startup script.
Weird thing. I know about this bug, but for me works well in this build.
If you change the network (or do a network reload) it could be down and you need to up it again, but should keep the up status after a reboot of the router. At least here is working. I will investigate a bit more. Thank you for report.
What is the default SSH password for this build? I tried with "password" but it is not accepted, nor in LuCI nor SSH...
User: root
Pass: root
Is in the post 
Thank You! I missed it 
@scp07 @Cjcr thank for your efforts on this!
@Cjcr I have tested your build as well (1.1), I have the following questions:
-
VLAN tagging (different physical port) and assigning a different interface does not seem to work properly. Could be due to the swconfing phase-out from newer and snapshot builds?. Assigning a trunk port and separating interfaces (same physical port) seems to be OK.
-
Wireless interface setting are quite...interresting. I guess this is normal, due to the proprietary driver stuff. There is no way in LuCI to create a bridge between an Ethernet and a Wireless interface from scratch? I've seen the config file, the directive is something like:
...
option _orig_ifname 'apcli0 apcli1 apclii0 eth0.2 ra0 rai0'
option _orig_bridge 'true'
...
If I need a new interface and bridge other SSID-s I guess I'll copy these directives. this is also as expected....
- What are "firmware.sh" and "mia" services at startup?
hi.
[ 0.671516] mt7621-nand 1e003000.nand: Uncorrectable ECC error at page 896.0
[ 0.679869] mt7621-nand 1e003000.nand: Uncorrectable ECC error at page 960.0
[ 1.674718] Bad eraseblock 768 at 0x000006000000
that is probably the culprit. since you already have console access, maybe you can try booting the initramfs image and then doing a sysupgrade...
[ 0.623701] mt7621-nand 1e003000.nand: ECC strength adjusted to 4 bits
[ 0.630230] nand: WARNING: mt7621-nand: the ECC used on your system is too weak compared to the one required by the NAND chip
this also seems suspect. i wonder if your device is using a different chip? (honestly i haven't read this thread enough to see if this message is "normal" or not)
Hi, I think I got it fixed, at least for users with this problem (doesn't happens to all). Please wait few more days and I will release another version with some cool fixes 
1 Like